Email: 414514 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.35 sec Spam: 123393 Autolearn: 0 AvgScore: 14.37 AvgScanTime: 1.54 sec Ham: 291121 Autolearn: 0 AvgScore: 1.23 AvgScanTime: 1.27 sec Time Spent Running SA: 155.51 hours Time Spent Processing Spam: 52.90 hours Time Spent Processing Ham: 102.61 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 121583 99.25 98.53 99.56 2 HTML_MESSAGE 117546 89.72 95.26 87.37 3 DKIM_SIGNED 111923 77.78 90.70 72.31 4 XM_DK_Pass 106647 75.93 86.43 71.48 5 DKIM_VALID 105839 75.11 85.77 70.60 6 XM_B_Unicode 105151 73.08 85.22 67.93 7 RELAYCOUNTRY_US 100281 79.68 81.27 79.01 8 DCC_CHECK 92935 52.44 75.32 42.74 9 XM_B_SpammyWords 86409 52.08 70.03 44.47 10 XMListUnsubscribeExists 84371 53.47 68.38 47.15 11 DKIM_VALID_AU 83832 60.92 67.94 57.95 12 XM_B_Unicode3 61895 42.72 50.16 39.57 13 LOC_TINY_FONT_1 60027 34.26 48.65 28.16 14 XM_DK_Undo_02 51071 15.97 41.39 5.20 15 XM_B_SpammyWords2 50457 25.52 40.89 19.00 16 BAYES_50 49145 54.37 39.83 60.53 17 HTML_FONT_LOW_CONTRAST 46003 31.57 37.28 29.15 18 FVGT_m_MULTI_ODD 42330 27.28 34.31 24.30 19 DKIM_VALID_EF 39544 29.88 32.05 28.96 20 BAYES_99 39241 12.19 31.80 3.88 21 TR_XM_DKIM_Undo 37237 10.64 30.18 2.36 22 T_KAM_HTML_FONT_INVALID 36547 23.26 29.62 20.57 23 MIME_HTML_ONLY 35359 24.65 28.66 22.96 24 XMSubLong 31226 25.10 25.31 25.01 25 BAYES_999 30463 9.47 24.69 3.02 26 DCC_CHECK_NEGATIVE 28871 47.14 23.40 57.21 27 TR_XM_DK_Unsub 28502 16.38 23.10 13.53 28 TR_DCC_Bayes_99 27498 7.69 22.28 1.51 29 T_TM2_M_HEADER_IN_MSG 26831 30.42 21.74 34.10 30 XM_Multi_Part_URI 26556 15.68 21.52 13.21 31 RCVD_IN_MSPIKE_H2 25338 16.42 20.53 14.68 32 UNPARSEABLE_RELAY 23361 13.96 18.93 11.85 33 XM_B_Unsub 23038 11.44 18.67 8.37 34 TR_XM_BayesUnsub 22247 9.83 18.03 6.35 35 RELAYCOUNTRY_META 20965 7.51 16.99 3.48 36 XM_B_SpammyWords3 19527 8.51 15.83 5.41 37 TR_MAX_INTL_RELAY 18639 8.84 15.11 6.18 38 LOTS_OF_MONEY 17268 8.43 13.99 6.06 39 TR_XM_SpammyRelay 15643 4.96 12.68 1.69 40 TR_XM_SpammyWords4 15322 6.36 12.42 3.79 41 BOTNET_IPINHOSTNAME 14169 5.65 11.48 3.18 42 TR_XM_SpammyWords2 13439 3.67 10.89 0.61 43 RCVD_IN_BL_SPAMCOP_NET 12902 3.50 10.46 0.55 44 XM_Evil_Numbers_Gen 12672 10.60 10.27 10.74 45 FSL_BULK_SIG 11998 9.19 9.72 8.96 46 TR_XM_UnparsRelay 11799 3.96 9.56 1.59 47 RCVD_IN_MSPIKE_WL 11684 14.30 9.47 16.35 48 BAYES_80 11629 5.49 9.42 3.82 49 XM_B_Phish_Phrases 11492 6.86 9.31 5.82 50 BOTNET 10925 3.55 8.85 1.30 51 BAYES_60 9861 8.18 7.99 8.26 52 LotsOfNums_01 9172 8.87 7.43 9.48 53 RELAYCOUNTRY_CA 9149 2.78 7.41 0.82 54 XMSubMetaSx_00 8756 4.58 7.10 3.51 55 HTML_IMAGE_RATIO_02 8170 4.95 6.62 4.24 56 XM_Body_Dirty_Words 8076 4.11 6.54 3.08 57 XM_UncommonTLD01 7874 4.82 6.38 4.16 58 XM_B_PhoneNumber 7471 8.04 6.05 8.88 59 XM_H_Long_From01 7376 5.66 5.98 5.52 60 UNTRUSTED_Relay 7287 2.78 5.91 1.45 61 XM_B_Investor 7148 2.76 5.79 1.48 62 MPART_ALT_DIFF 6970 5.28 5.65 5.12 63 TR_XM_SPAMCOP 6812 1.77 5.52 0.18 64 BAYES_95 6472 3.22 5.25 2.35 65 XM_H_GMP 6339 5.68 5.14 5.91 66 HTML_IMAGE_RATIO_04 6117 5.13 4.96 5.20 67 DKIM_INVALID 6084 2.67 4.93 1.71 68 TR_XM_PhishingBody 5857 2.36 4.75 1.35 69 RCVD_IN_MSPIKE_H3 5523 6.67 4.48 7.60 70 T_XMDrugObfuBody_14 5465 2.63 4.43 1.87 71 XM_B_SpammyTLD 5318 3.30 4.31 2.88 72 XMSexyCombo_05 5261 1.96 4.26 0.98 73 TM2_M_VERY_LONG_WORD 5120 4.07 4.15 4.04 74 XMStrtUSub 4958 4.66 4.02 4.93 75 TR_XM_SpammyWords5 4910 2.19 3.98 1.43 76 MIME_HTML_MOSTLY 4740 3.06 3.84 2.73 77 XM_OfRef6 4672 1.73 3.79 0.85 78 RCVD_IN_MSPIKE_BL 4670 1.85 3.78 1.03 79 TR_XM_MSPIKECOMBO 4663 1.85 3.78 1.03 80 XM_URI_RBL 4551 1.37 3.69 0.39 81 XMNumbers 4477 3.37 3.63 3.25 82 HTML_IMAGE_RATIO_06 4449 2.94 3.61 2.66 83 XM_CamelCaseFrm001 4445 2.55 3.60 2.10 84 TooManyTo_001 4381 6.12 3.55 7.21 85 XM_B_Unsub2 4233 1.92 3.43 1.27 86 T_XMDrugObfuBody_08 3848 1.87 3.12 1.35 87 MIME_HTML_ONLY_MULTI 3720 2.77 3.01 2.66 88 MIME_QP_LONG_LINE 3719 4.71 3.01 5.43 89 RCVD_IN_MSPIKE_H4 3670 3.27 2.97 3.39 90 XM_SPF_SoftFail 3669 1.67 2.97 1.12 91 HTML_IMAGE_RATIO_08 3666 2.43 2.97 2.20 92 TR_XM_SpammyWords3 3587 1.15 2.91 0.41 93 XM_B_SpammyWords4 3569 1.39 2.89 0.75 94 TM2_M_URI_OPT_OUT 3489 2.17 2.83 1.90 95 T_TooManySym_01 3446 7.84 2.79 9.97 96 RELAYCOUNTRY_AU 3320 1.25 2.69 0.63 97 TR_XM_NoHeaderRelay 3313 0.91 2.68 0.15 98 XM_UB50 3308 1.44 2.68 0.91 99 T_XMHurry_00 3283 1.21 2.66 0.59 100 SpammyFromTLD_02 3281 1.11 2.66 0.45 101 XM_B_URI_Unicode 3245 2.10 2.63 1.88 102 RCVD_IN_VALIDITY_SAFE 3140 3.85 2.54 4.40 103 RCVD_IN_MSPIKE_L3 3099 1.25 2.51 0.71 104 XMDiploma_00 3095 1.85 2.51 1.57 105 FROM_EXCESS_BASE64 2993 1.76 2.43 1.48 106 XMStockSpam_06 2985 1.61 2.42 1.27 107 USER_IN_DEF_DKIM_WL 2961 10.13 2.40 13.40 108 TR_XM_INV_DKIM 2916 0.72 2.36 0.02 109 T_FILL_THIS_FORM_SHORT 2631 1.17 2.13 0.77 110 XMBody_17 2616 0.94 2.12 0.44 111 MAILING_LIST_MULTI 2586 3.00 2.10 3.39 112 SUBJ_ALL_CAPS 2503 1.67 2.03 1.52 113 ALL_TRUSTED 2496 13.25 2.02 18.01 114 RCVD_IN_MSPIKE_H5 2491 4.36 2.02 5.36 115 RCVD_IN_VALIDITY_CERTIFIED 2449 3.17 1.98 3.67 116 RCVD_IN_VALIDITY_RPBL 2415 0.62 1.96 0.05 117 T_XMDrugObfuBody_00 2391 1.27 1.94 0.99 118 TR_LOTS_OF_MONEY3 2328 1.04 1.89 0.68 119 XM_DK_Undo_01 2252 1.88 1.83 1.90 120 HTML_MIME_NO_HTML_TAG 2229 2.19 1.81 2.35 121 XM_SendGrid 2219 1.63 1.80 1.56 122 XMPhish30 2184 0.84 1.77 0.45 123 BAYES_40 2167 4.32 1.76 5.40 124 SpammyFromTLD_01 2138 1.02 1.73 0.71 125 T_REMOTE_IMAGE 2133 3.03 1.73 3.58 126 XMBrknScrpt_02 2053 1.17 1.66 0.95 127 XMGenDplmaNmb 2036 1.09 1.65 0.85 128 TR_XM_MSPIKECOMBO2 1990 0.52 1.61 0.05 129 URI_NOVOWEL 1981 1.25 1.61 1.10 130 SCC_BODY_URI_ONLY 1956 2.15 1.59 2.39 131 XMSubMetaI_00 1882 0.78 1.53 0.47 132 XMBody_78 1804 0.64 1.46 0.29 133 URI_TRY_3LD 1784 0.79 1.45 0.51 134 XMBdyGiftCard01 1782 0.87 1.44 0.63 135 XM_B_DNDMA 1772 0.84 1.44 0.58 136 XM_HighProb1 1769 0.43 1.43 0.01 137 RDNS_DYNAMIC 1768 0.57 1.43 0.20 138 MPART_ALT_DIFF_COUNT 1735 0.73 1.41 0.45 139 XM_B_COPY_HTML 1728 0.95 1.40 0.76 140 URI_HEX 1722 1.12 1.40 1.00 141 XM_B_Phish66 1717 0.67 1.39 0.37 142 KHOP_HELO_FCRDNS 1710 2.31 1.39 2.70 143 BOTNET_NORDNS 1702 0.42 1.38 0.01 144 XM_H_Long_From02 1702 0.93 1.38 0.74 145 PDS_RDNS_DYNAMIC_FP 1699 0.44 1.38 0.05 146 BAYES_20 1668 3.00 1.35 3.70 147 TR_XM_FormFill2 1651 0.67 1.34 0.38 148 HTML_IMAGE_ONLY_20 1650 0.64 1.34 0.35 149 TR_Symld_Words 1646 1.35 1.33 1.35 150 TR_XM_PHPForged 1633 0.66 1.32 0.38 151 XM_ProductURIs 1631 0.74 1.32 0.49 152 RCVD_IN_XBL 1619 0.40 1.31 0.01 153 RELAYCOUNTRY_FR 1616 0.59 1.31 0.29 154 TM2_M_A_HREF_HREF 1614 0.52 1.31 0.19 155 TR_XM_PHPDW 1608 0.65 1.30 0.38 156 XM_H_PHPOS 1591 0.64 1.29 0.37 157 SHORTCIRCUIT 1570 0.38 1.27 0.00 158 RCVD_IN_ZEN_LASTEXTERNAL 1570 0.38 1.27 0.00 159 DIET_1 1564 0.84 1.27 0.66 160 T_MONEY_PERCENT 1468 0.50 1.19 0.21 161 TR_LOTS_OF_MONEY2 1468 0.50 1.19 0.21 162 TM2_M_OBFU_COMMENT 1466 0.50 1.19 0.21 163 XM_DIRTYINTL 1464 0.39 1.19 0.06 164 URIBL_BLACK 1464 0.36 1.19 0.01 165 HK_RANDOM_REPLYTO 1452 0.41 1.18 0.09 166 HTTPS_HTTP_MISMATCH 1446 0.75 1.17 0.57 167 XM_B_SEO 1425 0.48 1.15 0.19 168 MultiRelay_CC 1390 0.45 1.13 0.17 169 RCVD_IN_IADB_LISTED 1382 2.75 1.12 3.45 170 DKIM_ADSP_CUSTOM_MED 1380 0.84 1.12 0.72 171 LongTLD 1359 0.73 1.10 0.57 172 RCVD_IN_SBL_CSS 1353 0.34 1.10 0.02 173 TR_XM_DK_SendGrid 1341 1.06 1.09 1.05 174 XM_OfRef7 1336 0.43 1.08 0.16 175 TVD_RCVD_IP 1330 0.92 1.08 0.85 176 RCVD_IN_PBL 1326 0.80 1.07 0.68 177 TR_XM_MaxSPIKE 1321 0.35 1.07 0.05 178 TR_XM_InvalidRelay 1307 0.32 1.06 0.01 179 RCVD_IN_PSBL 1294 0.62 1.05 0.44 180 SHOPIFY_IMG_NOT_RCVD_SFY 1294 0.51 1.05 0.28 181 TR_XM_Base64_M1 1282 0.76 1.04 0.65 182 TR_XM_SEO4 1239 0.36 1.00 0.08 183 TR_Mismatch_TLD_02 1238 0.35 1.00 0.07 184 RCVD_IN_IADB_SPF 1235 2.42 1.00 3.02 185 RCVD_IN_MSPIKE_L4 1214 0.51 0.98 0.31 186 XM_UB99 1186 0.29 0.96 0.00 187 T_STY_INVIS_DIRECT 1184 0.53 0.96 0.35 188 XM_GoogleGroups 1179 1.21 0.96 1.32 189 RCVD_IN_IADB_DK 1168 2.15 0.95 2.66 190 XMSlimDrugH 1164 0.61 0.94 0.47 191 T_TooManySym_02 1163 2.43 0.94 3.06 192 TR_XM_RelayPhish 1137 0.32 0.92 0.06 193 RCVD_IN_IADB_SENDERID 1133 2.19 0.92 2.72 194 XM_PDF 1129 3.28 0.91 4.29 195 HTML_FONT_TINY_NORDNS 1117 0.32 0.91 0.07 196 TooManyTo_002 1109 1.88 0.90 2.30 197 THIS_AD 1090 0.47 0.88 0.30 198 HELO_DYNAMIC_SPLIT_IP 1090 0.26 0.88 0.00 199 HTML_TAG_BALANCE_BODY 1079 0.63 0.87 0.52 200 XMPhish14 1076 0.46 0.87 0.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 289837 99.25 98.53 99.56 2 HTML_MESSAGE 254361 89.72 95.26 87.37 3 RELAYCOUNTRY_US 230009 79.68 81.27 79.01 4 DKIM_SIGNED 210503 77.78 90.70 72.31 5 XM_DK_Pass 208103 75.93 86.43 71.48 6 DKIM_VALID 205519 75.11 85.77 70.60 7 XM_B_Unicode 197767 73.08 85.22 67.93 8 BAYES_50 176225 54.37 39.83 60.53 9 DKIM_VALID_AU 168707 60.92 67.94 57.95 10 DCC_CHECK_NEGATIVE 166539 47.14 23.40 57.21 11 XMListUnsubscribeExists 137260 53.47 68.38 47.15 12 XM_B_SpammyWords 129454 52.08 70.03 44.47 13 DCC_CHECK 124437 52.44 75.32 42.74 14 XM_B_Unicode3 115204 42.72 50.16 39.57 15 T_TM2_M_HEADER_IN_MSG 99263 30.42 21.74 34.10 16 HTML_FONT_LOW_CONTRAST 84855 31.57 37.28 29.15 17 DKIM_VALID_EF 84307 29.88 32.05 28.96 18 LOC_TINY_FONT_1 81988 34.26 48.65 28.16 19 XMSubLong 72812 25.10 25.31 25.01 20 FVGT_m_MULTI_ODD 70747 27.28 34.31 24.30 21 MIME_HTML_ONLY 66834 24.65 28.66 22.96 22 T_KAM_HTML_FONT_INVALID 59883 23.26 29.62 20.57 23 XM_B_SpammyWords2 55307 25.52 40.89 19.00 24 ALL_TRUSTED 52422 13.25 2.02 18.01 25 RCVD_IN_MSPIKE_WL 47584 14.30 9.47 16.35 26 RCVD_IN_MSPIKE_H2 42744 16.42 20.53 14.68 27 TR_XM_DK_Unsub 39386 16.38 23.10 13.53 28 USER_IN_DEF_DKIM_WL 39015 10.13 2.40 13.40 29 XM_Multi_Part_URI 38456 15.68 21.52 13.21 30 UNPARSEABLE_RELAY 34507 13.96 18.93 11.85 31 XM_Evil_Numbers_Gen 31256 10.60 10.27 10.74 32 T_TooManySym_01 29037 7.84 2.79 9.97 33 BAYES_00 28845 7.12 0.56 9.91 34 LotsOfNums_01 27597 8.87 7.43 9.48 35 FSL_BULK_SIG 26093 9.19 9.72 8.96 36 XM_B_PhoneNumber 25842 8.04 6.05 8.88 37 XM_B_Unsub 24373 11.44 18.67 8.37 38 BAYES_60 24040 8.18 7.99 8.26 39 RCVD_IN_MSPIKE_H3 22127 6.67 4.48 7.60 40 TooManyTo_001 20990 6.12 3.55 7.21 41 TR_XM_DK_Bayes 20637 5.11 0.43 7.09 42 TR_XM_DK_Bayes1 20415 5.05 0.43 7.01 43 TR_XM_BayesUnsub 18484 9.83 18.03 6.35 44 XM_DKIMWhitelistDomains 18426 4.45 0.02 6.33 45 ANY_BOUNCE_MESSAGE 18219 4.59 0.67 6.26 46 BOUNCE_MESSAGE 18218 4.59 0.67 6.26 47 TR_MAX_INTL_RELAY 17989 8.84 15.11 6.18 48 LOTS_OF_MONEY 17656 8.43 13.99 6.06 49 TR_XM_DK_Bayes2 17416 4.29 0.29 5.98 50 XM_H_GMP 17219 5.68 5.14 5.91 51 XM_B_Phish_Phrases 16950 6.86 9.31 5.82 52 XM_H_Long_From01 16068 5.66 5.98 5.52 53 MIME_QP_LONG_LINE 15796 4.71 3.01 5.43 54 XM_B_SpammyWords3 15751 8.51 15.83 5.41 55 BAYES_40 15735 4.32 1.76 5.40 56 RCVD_IN_MSPIKE_H5 15591 4.36 2.02 5.36 57 HTML_IMAGE_RATIO_04 15138 5.13 4.96 5.20 58 XM_DK_Undo_02 15124 15.97 41.39 5.20 59 MPART_ALT_DIFF 14904 5.28 5.65 5.12 60 XMStrtUSub 14363 4.66 4.02 4.93 61 RCVD_IN_VALIDITY_SAFE 12813 3.85 2.54 4.40 62 XM_PDF 12487 3.28 0.91 4.29 63 HTML_IMAGE_RATIO_02 12331 4.95 6.62 4.24 64 T_HTML_ATTACH 12325 3.12 0.51 4.23 65 XM_UncommonTLD01 12120 4.82 6.38 4.16 66 TM2_M_VERY_LONG_WORD 11765 4.07 4.15 4.04 67 BAYES_99 11296 12.19 31.80 3.88 68 BAYES_80 11119 5.49 9.42 3.82 69 TR_XM_SpammyWords4 11046 6.36 12.42 3.79 70 BAYES_20 10761 3.00 1.35 3.70 71 RCVD_IN_VALIDITY_CERTIFIED 10675 3.17 1.98 3.67 72 T_REMOTE_IMAGE 10435 3.03 1.73 3.58 73 XMSubMetaSx_00 10230 4.58 7.10 3.51 74 RELAYCOUNTRY_META 10145 7.51 16.99 3.48 75 RCVD_IN_IADB_LISTED 10030 2.75 1.12 3.45 76 RCVD_IN_MSPIKE_H4 9866 3.27 2.97 3.39 77 MAILING_LIST_MULTI 9864 3.00 2.10 3.39 78 XMNumbers 9475 3.37 3.63 3.25 79 BOTNET_IPINHOSTNAME 9253 5.65 11.48 3.18 80 XM_Body_Dirty_Words 8974 4.11 6.54 3.08 81 T_TooManySym_02 8903 2.43 0.94 3.06 82 BAYES_999 8794 9.47 24.69 3.02 83 RCVD_IN_IADB_SPF 8789 2.42 1.00 3.02 84 XM_B_SpammyTLD 8378 3.30 4.31 2.88 85 MAY_BE_FORGED 8346 2.04 0.10 2.87 86 MIME_HTML_MOSTLY 7948 3.06 3.84 2.73 87 RCVD_IN_IADB_SENDERID 7928 2.19 0.92 2.72 88 KHOP_HELO_FCRDNS 7870 2.31 1.39 2.70 89 HTML_IMAGE_RATIO_06 7753 2.94 3.61 2.66 90 MIME_HTML_ONLY_MULTI 7747 2.77 3.01 2.66 91 RCVD_IN_IADB_DK 7736 2.15 0.95 2.66 92 HTML_IMAGE_ONLY_32 7495 1.86 0.18 2.57 93 INVALID_MSGID 7104 1.78 0.23 2.44 94 SCC_BODY_URI_ONLY 6944 2.15 1.59 2.39 95 TR_XM_DKIM_Undo 6872 10.64 30.18 2.36 96 BAYES_95 6855 3.22 5.25 2.35 97 HTML_MIME_NO_HTML_TAG 6832 2.19 1.81 2.35 98 TooManyTo_002 6699 1.88 0.90 2.30 99 RCVD_IN_IADB_VOUCHED 6411 1.72 0.60 2.20 100 TO_MALFORMED 6403 1.56 0.04 2.20 101 HTML_IMAGE_RATIO_08 6394 2.43 2.97 2.20 102 BAYES_05 6243 1.74 0.77 2.14 103 XM_CamelCaseFrm001 6127 2.55 3.60 2.10 104 XM_DK_Undo_01 5542 1.88 1.83 1.90 105 TM2_M_URI_OPT_OUT 5524 2.17 2.83 1.90 106 XM_B_URI_Unicode 5477 2.10 2.63 1.88 107 T_XMDrugObfuBody_14 5451 2.63 4.43 1.87 108 DKIM_INVALID 4984 2.67 4.93 1.71 109 TR_XM_SpammyRelay 4928 4.96 12.68 1.69 110 TR_XM_UnparsRelay 4628 3.96 9.56 1.59 111 XMDiploma_00 4572 1.85 2.51 1.57 112 XM_SendGrid 4541 1.63 1.80 1.56 113 SUBJ_ALL_CAPS 4437 1.67 2.03 1.52 114 RCVD_IN_IADB_OPTIN 4409 1.18 0.38 1.51 115 TR_DCC_Bayes_99 4395 7.69 22.28 1.51 116 TooManyTo_003 4363 1.28 0.77 1.50 117 XM_B_Investor 4311 2.76 5.79 1.48 118 FROM_EXCESS_BASE64 4308 1.76 2.43 1.48 119 UNTRUSTED_Relay 4216 2.78 5.91 1.45 120 TR_XM_SpammyWords5 4176 2.19 3.98 1.43 121 TR_Symld_Words 3932 1.35 1.33 1.35 122 T_XMDrugObfuBody_08 3924 1.87 3.12 1.35 123 TR_XM_PhishingBody 3916 2.36 4.75 1.35 124 XM_GoogleGroups 3840 1.21 0.96 1.32 125 IN_HORDE_ADDRESS_BOOK 3832 0.95 0.08 1.32 126 BOTNET 3795 3.55 8.85 1.30 127 XM_B_Unsub2 3706 1.92 3.43 1.27 128 XMStockSpam_06 3700 1.61 2.42 1.27 129 T_TooManySym_03 3504 0.96 0.39 1.20 130 XMGappySubj_01 3474 0.98 0.48 1.19 131 XM_ShortIntro_01 3431 0.96 0.44 1.18 132 XM_SPF_SoftFail 3248 1.67 2.97 1.12 133 TooManyTo_004 3225 0.98 0.67 1.11 134 URI_NOVOWEL 3188 1.25 1.61 1.10 135 HELO_NODOT 3153 0.79 0.11 1.08 136 HELO_NO_DOMAIN 3146 0.79 0.10 1.08 137 TR_XM_DK_SendGrid 3062 1.06 1.09 1.05 138 MIME_CHARSET_FARAWAY 3000 0.84 0.39 1.03 139 RCVD_IN_MSPIKE_BL 2990 1.85 3.78 1.03 140 TR_XM_MSPIKECOMBO 2990 1.85 3.78 1.03 141 URI_HEX 2911 1.12 1.40 1.00 142 T_XMDrugObfuBody_00 2876 1.27 1.94 0.99 143 XMSexyCombo_05 2843 1.96 4.26 0.98 144 XMCapTrack 2839 0.83 0.48 0.98 145 XMBrknScrpt_02 2779 1.17 1.66 0.95 146 TVD_SPACE_RATIO 2755 0.72 0.17 0.95 147 XM_UB50 2654 1.44 2.68 0.91 148 TooManyTo_005 2624 0.81 0.60 0.90 149 CHARSET_FARAWAY_HEADER 2616 0.71 0.25 0.90 150 XM_OfRef6 2484 1.73 3.79 0.85 151 XMGenDplmaNmb 2481 1.09 1.65 0.85 152 TVD_RCVD_IP 2472 0.92 1.08 0.85 153 TR_MetaPhish_Combo_01 2385 0.75 0.58 0.82 154 RELAYCOUNTRY_CA 2380 2.78 7.41 0.82 155 XMSolicitRefs_0 2380 0.72 0.49 0.82 156 FROM_GOV_DKIM_AU 2311 0.62 0.20 0.79 157 XM_H_PHPMailer 2281 0.71 0.54 0.78 158 T_TVD_MIME_NO_HEADERS 2272 0.56 0.06 0.78 159 T_FILL_THIS_FORM_SHORT 2232 1.17 2.13 0.77 160 XM_B_COPY_HTML 2211 0.95 1.40 0.76 161 XM_B_SpammyWords4 2197 1.39 2.89 0.75 162 XM_H_Long_From02 2166 0.93 1.38 0.74 163 DKIM_ADSP_CUSTOM_MED 2108 0.84 1.12 0.72 164 RCVD_IN_MSPIKE_L3 2076 1.25 2.51 0.71 165 SpammyFromTLD_01 2072 1.02 1.73 0.71 166 RCVD_IN_PBL 1994 0.80 1.07 0.68 167 TR_LOTS_OF_MONEY3 1979 1.04 1.89 0.68 168 DIET_1 1911 0.84 1.27 0.66 169 TR_XM_Base64_M1 1879 0.76 1.04 0.65 170 XMGappySubj_02 1861 0.47 0.06 0.64 171 RELAYCOUNTRY_AU 1844 1.25 2.69 0.63 172 XMBdyGiftCard01 1821 0.87 1.44 0.63 173 T_Symld_Words_02 1819 0.69 0.84 0.62 174 TR_XM_SpammyWords2 1784 3.67 10.89 0.61 175 XMNoVowels 1765 0.60 0.58 0.61 176 T_OBFU_PDF_ATTACH 1728 0.47 0.19 0.59 177 T_XMHurry_00 1720 1.21 2.66 0.59 178 XM_B_DNDMA 1693 0.84 1.44 0.58 179 FONT_INVIS_POSTEXTRAS 1690 0.41 0.02 0.58 180 XM_Walgreens_Forge 1685 0.43 0.06 0.58 181 HTTPS_HTTP_MISMATCH 1656 0.75 1.17 0.57 182 LongTLD 1655 0.73 1.10 0.57 183 XMBSHREFv2 1625 0.50 0.37 0.56 184 RCVD_IN_BL_SPAMCOP_NET 1598 3.50 10.46 0.55 185 HTML_TAG_BALANCE_BODY 1522 0.63 0.87 0.52 186 XMLngstWrd_00 1482 0.48 0.39 0.51 187 URI_TRY_3LD 1473 0.79 1.45 0.51 188 T_MANY_PILL_PRICE 1461 0.35 0.00 0.50 189 RELAYCOUNTRY_GB 1437 0.60 0.85 0.49 190 XM_ProductURIs 1425 0.74 1.32 0.49 191 FORGED_GMAIL_RCVD 1391 0.58 0.82 0.48 192 XMSlimDrugH 1366 0.61 0.94 0.47 193 XMSubMetaI_00 1360 0.78 1.53 0.47 194 XMPhish30 1317 0.84 1.77 0.45 195 SpammyFromTLD_02 1312 1.11 2.66 0.45 196 MPART_ALT_DIFF_COUNT 1309 0.73 1.41 0.45 197 XMBody_17 1279 0.94 2.12 0.44 198 RCVD_IN_PSBL 1274 0.62 1.05 0.44 199 MSGID_FROM_MTA_HEADER 1250 0.36 0.19 0.43 200 NML_ADSP_CUSTOM_MED 1228 0.55 0.84 0.42 ----------------------------------------------------------------------