Email: 532990 Autolearn: 0 AvgScore: 5.43 AvgScanTime: 1.37 sec Spam: 158344 Autolearn: 0 AvgScore: 14.86 AvgScanTime: 1.59 sec Ham: 374646 Autolearn: 0 AvgScore: 1.44 AvgScanTime: 1.27 sec Time Spent Running SA: 202.77 hours Time Spent Processing Spam: 70.14 hours Time Spent Processing Ham: 132.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143251 87.41 90.47 86.12 2 DKIM_SIGNED 134466 70.43 84.92 64.31 3 XM_DK_Pass 125125 68.08 79.02 63.46 4 DKIM_VALID 123840 67.23 78.21 62.59 5 XM_B_Unicode 123454 74.43 77.97 72.94 6 RELAYCOUNTRY_US 119594 70.33 75.53 68.13 7 DCC_CHECK 113502 45.94 71.68 35.06 8 XM_B_SpammyWords 101629 47.14 64.18 39.94 9 XMListUnsubscribeExists 100691 47.88 63.59 41.23 10 DKIM_VALID_AU 96236 54.21 60.78 51.43 11 XM_B_Unicode3 70574 46.28 44.57 47.00 12 LOC_TINY_FONT_1 70253 29.90 44.37 23.78 13 BAYES_50 70142 58.93 44.30 65.11 14 XM_B_SpammyWords2 60293 23.15 38.08 16.85 15 XM_DK_Undo_02 59263 13.84 37.43 3.87 16 HTML_FONT_LOW_CONTRAST 53038 36.04 33.50 37.11 17 FVGT_m_MULTI_ODD 52318 24.76 33.04 21.26 18 DKIM_VALID_EF 45939 26.79 29.01 25.85 19 XMSubLong 45574 32.39 28.78 33.92 20 MIME_HTML_ONLY 45234 28.93 28.57 29.09 21 T_KAM_HTML_FONT_INVALID 44725 21.87 28.25 19.18 22 BAYES_99 43729 10.10 27.62 2.69 23 DCC_CHECK_NEGATIVE 42785 53.64 27.02 64.90 24 TR_XM_DKIM_Undo 42115 8.99 26.60 1.55 25 TR_XM_DK_Unsub 33985 14.63 21.46 11.74 26 RCVD_IN_MSPIKE_H2 33211 16.40 20.97 14.47 27 BAYES_999 33167 7.62 20.95 1.99 28 XM_Multi_Part_URI 33111 14.34 20.91 11.56 29 RELAYCOUNTRY_META 31562 8.26 19.93 3.33 30 T_TM2_M_HEADER_IN_MSG 30948 24.12 19.54 26.05 31 TR_DCC_Bayes_99 30692 6.54 19.38 1.12 32 XM_B_Unsub 28656 10.48 18.10 7.26 33 TR_XM_BayesUnsub 27508 9.14 17.37 5.66 34 UNPARSEABLE_RELAY 26435 12.19 16.69 10.29 35 TR_MAX_INTL_RELAY 24772 8.15 15.64 4.98 36 TR_XM_SpammyRelay 22653 5.30 14.31 1.49 37 XM_B_SpammyWords3 21632 6.97 13.66 4.15 38 RCVD_IN_BL_SPAMCOP_NET 20542 4.20 12.97 0.49 39 BOTNET_IPINHOSTNAME 20416 5.66 12.89 2.60 40 FSL_BULK_SIG 18821 8.97 11.89 7.73 41 LOTS_OF_MONEY 18749 7.88 11.84 6.20 42 BOTNET 17260 3.94 10.90 1.00 43 TR_XM_SpammyWords4 16957 6.47 10.71 4.68 44 BAYES_80 14542 4.90 9.18 3.09 45 TR_XM_SpammyWords2 14041 2.94 8.87 0.44 46 TR_XM_UnparsRelay 13853 3.60 8.75 1.43 47 XM_Evil_Numbers_Gen 13734 7.70 8.67 7.30 48 RCVD_IN_MSPIKE_WL 13454 12.28 8.50 13.87 49 BAYES_60 13320 6.82 8.41 6.15 50 T_TooManySym_01 12138 7.97 7.67 8.10 51 XM_B_Phish_Phrases 11983 5.48 7.57 4.59 52 RELAYCOUNTRY_CA 11601 2.60 7.33 0.61 53 MPART_ALT_DIFF 11437 4.94 7.22 3.98 54 XMSubMetaSx_00 11341 4.37 7.16 3.19 55 ALL_TRUSTED 11329 22.46 7.15 28.93 56 XM_UncommonTLD01 10987 4.56 6.94 3.56 57 TR_XM_SPAMCOP 10896 2.13 6.88 0.13 58 DKIM_INVALID 10626 3.20 6.71 1.71 59 UNTRUSTED_Relay 10459 3.13 6.61 1.66 60 LotsOfNums_01 10388 6.82 6.56 6.93 61 TR_XM_PHPForged 10029 4.03 6.33 3.05 62 TR_XM_FormFill2 10001 4.03 6.32 3.06 63 TR_XM_PHPDW 9997 4.02 6.31 3.05 64 XM_Body_Dirty_Words 9983 3.19 6.30 1.87 65 XM_H_PHPOS 9979 4.01 6.30 3.05 66 HTML_IMAGE_RATIO_02 9819 4.49 6.20 3.76 67 T_TooManySym_02 9597 4.20 6.06 3.42 68 NO_DNS_FOR_FROM 9316 2.47 5.88 1.02 69 TR_XM_MaxWHORU 9304 2.17 5.88 0.61 70 T_TooManySym_03 8819 2.65 5.57 1.41 71 XM_B_PhoneNumber 8712 7.33 5.50 8.10 72 DKIM_ADSP_NXDOMAIN 8565 2.36 5.41 1.07 73 TR_XM_MSPIKECOMBO 8364 2.00 5.28 0.61 74 RCVD_IN_MSPIKE_BL 8364 2.00 5.28 0.61 75 XM_H_GMP 8297 4.98 5.24 4.88 76 TR_Symld_Words 8181 2.65 5.17 1.58 77 BAYES_95 8115 2.85 5.12 1.89 78 XM_B_Investor 7802 2.37 4.93 1.29 79 XM_OfRef6 7751 1.97 4.90 0.74 80 XM_H_Long_From01 7516 4.76 4.75 4.77 81 HTML_IMAGE_RATIO_04 7417 3.83 4.68 3.48 82 TR_XM_NoHeaderRelay 7131 1.46 4.50 0.18 83 T_XMDrugObfuBody_14 6894 2.41 4.35 1.59 84 RCVD_IN_MSPIKE_H3 6834 6.07 4.32 6.81 85 XM_SPF_SoftFail 6734 2.00 4.25 1.05 86 TR_XM_PhishingBody 6675 2.38 4.22 1.60 87 XM_B_SpammyTLD 6451 3.26 4.07 2.92 88 T_TooManySym_04 6441 1.68 4.07 0.66 89 XMStrtUSub 6113 4.15 3.86 4.27 90 FROM_EXCESS_BASE64 5996 2.12 3.79 1.42 91 XMSexyCombo_05 5917 1.83 3.74 1.02 92 RCVD_IN_MSPIKE_L3 5743 1.47 3.63 0.56 93 XMNumbers 5667 3.10 3.58 2.90 94 TR_XM_SpammyWords5 5628 1.86 3.55 1.14 95 TooManyTo_001 5259 5.76 3.32 6.79 96 T_FILL_THIS_FORM_SHORT 5184 1.47 3.27 0.70 97 TM2_M_VERY_LONG_WORD 5181 2.16 3.27 1.69 98 MIME_HTML_MOSTLY 5111 2.60 3.23 2.34 99 XMDiploma_00 4987 1.92 3.15 1.41 100 TR_XM_SpammyWords3 4900 1.16 3.09 0.34 101 XM_URI_RBL 4815 1.07 3.04 0.24 102 TM2_M_URI_OPT_OUT 4762 1.97 3.01 1.54 103 T_XMDrugObfuBody_08 4657 1.79 2.94 1.31 104 MIME_QP_LONG_LINE 4617 4.01 2.92 4.48 105 XM_B_Unsub2 4563 1.66 2.88 1.15 106 MIME_HTML_ONLY_MULTI 4516 2.28 2.85 2.04 107 RELAYCOUNTRY_AU 4348 1.14 2.75 0.47 108 XM_UB50 4301 1.54 2.72 1.05 109 HTML_IMAGE_RATIO_08 4234 2.36 2.67 2.23 110 TR_XM_INTL_Spamhaus 4212 0.91 2.66 0.17 111 XM_CamelCaseFrm001 4159 1.95 2.63 1.66 112 USER_IN_DEF_DKIM_WL 4102 8.64 2.59 11.20 113 MISSING_MIMEOLE 4005 1.61 2.53 1.22 114 XM_H_Long_From02 3947 1.26 2.49 0.74 115 RCVD_IN_VALIDITY_RPBL 3934 0.75 2.48 0.02 116 HTML_IMAGE_RATIO_06 3932 2.78 2.48 2.90 117 TR_XM_INV_DKIM 3884 0.75 2.45 0.04 118 XM_B_SpammyWords4 3866 1.23 2.44 0.71 119 RCVD_IN_PBL 3809 1.14 2.41 0.61 120 XM_B_URI_Unicode 3803 1.77 2.40 1.50 121 XMBrknScrpt_02 3771 1.24 2.38 0.76 122 TR_XM_InvalidRelay 3721 0.71 2.35 0.01 123 RELAYCOUNTRY_IN 3691 0.72 2.33 0.05 124 T_HTML_ATTACH 3576 0.71 2.26 0.06 125 XM_H_DKIM_GOOG 3530 0.67 2.23 0.01 126 RCVD_IN_MSPIKE_H4 3473 2.54 2.19 2.69 127 SpammyFromTLD_02 3419 0.98 2.16 0.49 128 XMBody_17 3264 0.91 2.06 0.43 129 XMNoVowels 3200 1.04 2.02 0.62 130 RCVD_IN_VALIDITY_SAFE 3155 2.94 1.99 3.34 131 RCVD_IN_MSPIKE_H5 3147 3.66 1.99 4.37 132 T_XMDrugObfuBody_00 3102 1.43 1.96 1.20 133 XMGenDplmaNmb 3072 1.15 1.94 0.82 134 MAILING_LIST_MULTI 3043 2.38 1.92 2.57 135 SCC_CANSPAM_2 2966 0.56 1.87 0.00 136 XMStockSpam_06 2954 1.37 1.87 1.16 137 XM_DK_Undo_01 2924 1.63 1.85 1.54 138 TR_XM_MSPIKECOMBO2 2741 0.54 1.73 0.03 139 BAYES_40 2719 4.75 1.72 6.03 140 SUBJ_ALL_CAPS 2648 1.31 1.67 1.15 141 RCVD_IN_PSBL 2583 0.75 1.63 0.38 142 XM_UB99 2578 0.48 1.63 0.00 143 RCVD_IN_VALIDITY_CERTIFIED 2569 2.51 1.62 2.88 144 SpammyFromTLD_01 2561 0.91 1.62 0.61 145 XM_OfRef7 2560 0.57 1.62 0.13 146 HK_RANDOM_REPLYTO 2548 0.55 1.61 0.11 147 KHOP_HELO_FCRDNS 2541 1.35 1.60 1.24 148 DIET_1 2523 0.71 1.59 0.34 149 XM_B_Phish66 2431 0.74 1.54 0.40 150 T_XMHurry_00 2417 0.82 1.53 0.52 151 RELAYCOUNTRY_BR 2401 0.50 1.52 0.07 152 T_OBFU_HTML_ATTACH 2340 0.44 1.48 0.01 153 TR_XM_HtmlAttach 2327 0.44 1.47 0.01 154 XMBdyGiftCard01 2242 0.58 1.42 0.22 155 XMPhish30 2195 0.75 1.39 0.48 156 TR_XM_MaxSPIKE 2151 0.43 1.36 0.03 157 HTML_MIME_NO_HTML_TAG 2097 1.91 1.32 2.16 158 LONGLN_LOW_CONTRAST 2092 0.63 1.32 0.34 159 TR_XM_GMP_BULK_SIG 2082 0.50 1.31 0.15 160 RCVD_IN_IADB_LISTED 2081 2.49 1.31 2.99 161 TR_LOTS_OF_MONEY3 2061 0.51 1.30 0.18 162 RCVD_IN_MSPIKE_L4 2041 0.41 1.29 0.04 163 SHORTCIRCUIT 2018 0.38 1.27 0.00 164 RCVD_IN_ZEN_LASTEXTERNAL 2018 0.38 1.27 0.00 165 XM_SendGrid 2014 1.31 1.27 1.33 166 BAYES_20 2005 3.06 1.27 3.82 167 TR_MetaPhish_Combo_01 2003 0.90 1.26 0.75 168 T_REMOTE_IMAGE 2003 2.58 1.26 3.14 169 URI_NOVOWEL 1963 1.17 1.24 1.14 170 XM_UB999 1950 0.37 1.23 0.00 171 TVD_RCVD_IP 1938 0.88 1.22 0.74 172 XM_HighProb1 1910 0.36 1.21 0.00 173 RCVD_IN_IADB_SPF 1877 2.22 1.19 2.65 174 TR_LOTS_OF_MONEY2 1870 0.53 1.18 0.26 175 T_MONEY_PERCENT 1870 0.53 1.18 0.26 176 URI_TRY_3LD 1860 0.64 1.17 0.41 177 BOTNET_NORDNS 1840 0.35 1.16 0.01 178 URI_HEX 1812 1.08 1.14 1.05 179 RCVD_IN_IADB_DK 1762 1.95 1.11 2.31 180 RELAYCOUNTRY_FR 1744 0.49 1.10 0.24 181 XM_S_SpammyWords 1731 0.44 1.09 0.17 182 TR_XM_Spammywords 1731 0.44 1.09 0.17 183 RCVD_IN_IADB_SENDERID 1729 2.00 1.09 2.38 184 URIBL_BLACK 1723 0.33 1.09 0.01 185 TR_XM_Bayes_Spamhaus 1699 0.32 1.07 0.00 186 XM_B_SEO 1662 0.42 1.05 0.16 187 SHOPIFY_IMG_NOT_RCVD_SFY 1646 0.46 1.04 0.22 188 DKIM_ADSP_CUSTOM_MED 1641 0.79 1.04 0.68 189 XMSubMetaI_00 1638 0.56 1.03 0.35 190 MPART_ALT_DIFF_COUNT 1612 0.63 1.02 0.47 191 RDNS_DYNAMIC 1586 0.39 1.00 0.14 192 PDS_RDNS_DYNAMIC_FP 1560 0.32 0.99 0.03 193 LongTLD 1557 0.58 0.98 0.41 194 PLING_QUERY 1554 0.48 0.98 0.27 195 HTML_FONT_SIZE_LARGE 1553 0.34 0.98 0.07 196 XM_B_COVIDMETA 1551 0.36 0.98 0.10 197 XMReplyNow 1542 0.41 0.97 0.17 198 XM_ProductURIs 1541 0.62 0.97 0.46 199 URIBL_SBL 1521 0.29 0.96 0.00 200 URIBL_SBL_A 1521 0.29 0.96 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 322646 87.41 90.47 86.12 2 XM_B_Unicode 273271 74.43 77.97 72.94 3 RELAYCOUNTRY_US 255241 70.33 75.53 68.13 4 BAYES_50 243940 58.93 44.30 65.11 5 DCC_CHECK_NEGATIVE 243127 53.64 27.02 64.90 6 DKIM_SIGNED 240921 70.43 84.92 64.31 7 XM_DK_Pass 237739 68.08 79.02 63.46 8 DKIM_VALID 234500 67.23 78.21 62.59 9 DKIM_VALID_AU 192699 54.21 60.78 51.43 10 XM_B_Unicode3 176081 46.28 44.57 47.00 11 XMListUnsubscribeExists 154482 47.88 63.59 41.23 12 XM_B_SpammyWords 149634 47.14 64.18 39.94 13 HTML_FONT_LOW_CONTRAST 139033 36.04 33.50 37.11 14 DCC_CHECK 131341 45.94 71.68 35.06 15 XMSubLong 127065 32.39 28.78 33.92 16 MIME_HTML_ONLY 108970 28.93 28.57 29.09 17 ALL_TRUSTED 108390 22.46 7.15 28.93 18 T_TM2_M_HEADER_IN_MSG 97603 24.12 19.54 26.05 19 DKIM_VALID_EF 96842 26.79 29.01 25.85 20 LOC_TINY_FONT_1 89098 29.90 44.37 23.78 21 FVGT_m_MULTI_ODD 79664 24.76 33.04 21.26 22 T_KAM_HTML_FONT_INVALID 71853 21.87 28.25 19.18 23 XM_B_SpammyWords2 63113 23.15 38.08 16.85 24 RCVD_IN_MSPIKE_H2 54199 16.40 20.97 14.47 25 RCVD_IN_MSPIKE_WL 51971 12.28 8.50 13.87 26 TO_NO_BRKTS_HTML_ONLY 50236 9.55 0.41 13.41 27 TR_XM_DK_Unsub 44001 14.63 21.46 11.74 28 XM_Multi_Part_URI 43300 14.34 20.91 11.56 29 USER_IN_DEF_DKIM_WL 41958 8.64 2.59 11.20 30 UNPARSEABLE_RELAY 38546 12.19 16.69 10.29 31 BAYES_00 33972 6.51 0.45 9.07 32 XM_B_PhoneNumber 30342 7.33 5.50 8.10 33 T_TooManySym_01 30340 7.97 7.67 8.10 34 FSL_BULK_SIG 28963 8.97 11.89 7.73 35 XM_Evil_Numbers_Gen 27331 7.70 8.67 7.30 36 XM_B_Unsub 27218 10.48 18.10 7.26 37 LotsOfNums_01 25953 6.82 6.56 6.93 38 RCVD_IN_MSPIKE_H3 25507 6.07 4.32 6.81 39 TooManyTo_001 25424 5.76 3.32 6.79 40 LOTS_OF_MONEY 23243 7.88 11.84 6.20 41 BAYES_60 23037 6.82 8.41 6.15 42 TR_XM_DK_Bayes 22890 4.39 0.31 6.11 43 TR_XM_DK_Bayes1 22624 4.33 0.30 6.04 44 BAYES_40 22573 4.75 1.72 6.03 45 TR_XM_BayesUnsub 21208 9.14 17.37 5.66 46 XM_DKIMWhitelistDomains 19800 3.72 0.03 5.28 47 TR_XM_DK_Bayes2 19196 3.66 0.20 5.12 48 TR_MAX_INTL_RELAY 18643 8.15 15.64 4.98 49 XM_H_GMP 18264 4.98 5.24 4.88 50 XM_H_Long_From01 17870 4.76 4.75 4.77 51 TR_XM_SpammyWords4 17542 6.47 10.71 4.68 52 XM_B_Phish_Phrases 17201 5.48 7.57 4.59 53 MIME_QP_LONG_LINE 16780 4.01 2.92 4.48 54 RCVD_IN_MSPIKE_H5 16383 3.66 1.99 4.37 55 XMStrtUSub 15989 4.15 3.86 4.27 56 XM_B_SpammyWords3 15535 6.97 13.66 4.15 57 MPART_ALT_DIFF 14911 4.94 7.22 3.98 58 XM_DK_Undo_02 14485 13.84 37.43 3.87 59 BAYES_20 14315 3.06 1.27 3.82 60 ANY_BOUNCE_MESSAGE 14156 2.90 0.83 3.78 61 BOUNCE_MESSAGE 14153 2.90 0.83 3.78 62 HTML_IMAGE_RATIO_02 14103 4.49 6.20 3.76 63 XM_PDF 13991 2.86 0.80 3.73 64 XM_UncommonTLD01 13340 4.56 6.94 3.56 65 HTML_IMAGE_RATIO_04 13019 3.83 4.68 3.48 66 T_TooManySym_02 12808 4.20 6.06 3.42 67 RCVD_IN_VALIDITY_SAFE 12521 2.94 1.99 3.34 68 RELAYCOUNTRY_META 12467 8.26 19.93 3.33 69 XMSubMetaSx_00 11961 4.37 7.16 3.19 70 T_REMOTE_IMAGE 11766 2.58 1.26 3.14 71 BAYES_80 11566 4.90 9.18 3.09 72 TR_XM_FormFill2 11459 4.03 6.32 3.06 73 TR_XM_PHPDW 11439 4.02 6.31 3.05 74 TR_XM_PHPForged 11436 4.03 6.33 3.05 75 XM_H_PHPOS 11415 4.01 6.30 3.05 76 RCVD_IN_IADB_LISTED 11210 2.49 1.31 2.99 77 XM_B_SpammyTLD 10938 3.26 4.07 2.92 78 HTML_IMAGE_RATIO_06 10883 2.78 2.48 2.90 79 XMNumbers 10848 3.10 3.58 2.90 80 RCVD_IN_VALIDITY_CERTIFIED 10796 2.51 1.62 2.88 81 BAYES_99 10093 10.10 27.62 2.69 82 RCVD_IN_MSPIKE_H4 10081 2.54 2.19 2.69 83 RCVD_IN_IADB_SPF 9941 2.22 1.19 2.65 84 BOTNET_IPINHOSTNAME 9757 5.66 12.89 2.60 85 MAILING_LIST_MULTI 9642 2.38 1.92 2.57 86 RCVD_IN_IADB_SENDERID 8916 2.00 1.09 2.38 87 MIME_HTML_MOSTLY 8755 2.60 3.23 2.34 88 RCVD_IN_IADB_DK 8637 1.95 1.11 2.31 89 HTML_IMAGE_RATIO_08 8341 2.36 2.67 2.23 90 TooManyTo_002 8134 1.71 0.62 2.17 91 HTML_MIME_NO_HTML_TAG 8093 1.91 1.32 2.16 92 BAYES_05 8075 1.71 0.66 2.16 93 MIME_HTML_ONLY_MULTI 7641 2.28 2.85 2.04 94 INVALID_MSGID 7517 1.46 0.16 2.01 95 BAYES_999 7445 7.62 20.95 1.99 96 RCVD_IN_IADB_VOUCHED 7250 1.55 0.63 1.94 97 BAYES_95 7074 2.85 5.12 1.89 98 XM_Body_Dirty_Words 7001 3.19 6.30 1.87 99 TO_MALFORMED 6655 1.25 0.01 1.78 100 MSGID_NOFQDN1 6508 1.23 0.01 1.74 101 DKIM_INVALID 6421 3.20 6.71 1.71 102 TM2_M_VERY_LONG_WORD 6348 2.16 3.27 1.69 103 UNTRUSTED_Relay 6228 3.13 6.61 1.66 104 XM_CamelCaseFrm001 6213 1.95 2.63 1.66 105 TR_XM_PhishingBody 6004 2.38 4.22 1.60 106 T_XMDrugObfuBody_14 5962 2.41 4.35 1.59 107 TR_Symld_Words 5923 2.65 5.17 1.58 108 TR_XM_DKIM_Undo 5821 8.99 26.60 1.55 109 XM_DK_Undo_01 5766 1.63 1.85 1.54 110 TM2_M_URI_OPT_OUT 5759 1.97 3.01 1.54 111 XM_B_URI_Unicode 5615 1.77 2.40 1.50 112 TR_XM_SpammyRelay 5585 5.30 14.31 1.49 113 TR_XM_UnparsRelay 5350 3.60 8.75 1.43 114 FROM_EXCESS_BASE64 5330 2.12 3.79 1.42 115 T_TooManySym_03 5292 2.65 5.57 1.41 116 XMDiploma_00 5271 1.92 3.15 1.41 117 RCVD_IN_IADB_OPTIN 5017 1.08 0.47 1.34 118 XM_SendGrid 4978 1.31 1.27 1.33 119 T_XMDrugObfuBody_08 4902 1.79 2.94 1.31 120 XM_B_Investor 4835 2.37 4.93 1.29 121 TooManyTo_003 4812 1.05 0.48 1.28 122 KHOP_HELO_FCRDNS 4663 1.35 1.60 1.24 123 MISSING_MIMEOLE 4566 1.61 2.53 1.22 124 T_XMDrugObfuBody_00 4505 1.43 1.96 1.20 125 XM_GoogleGroups 4398 1.08 0.85 1.17 126 XMStockSpam_06 4361 1.37 1.87 1.16 127 SUBJ_ALL_CAPS 4315 1.31 1.67 1.15 128 XM_B_Unsub2 4306 1.66 2.88 1.15 129 URI_NOVOWEL 4274 1.17 1.24 1.14 130 TR_XM_SpammyWords5 4263 1.86 3.55 1.14 131 IN_HORDE_ADDRESS_BOOK 4232 0.81 0.06 1.13 132 TR_DCC_Bayes_99 4185 6.54 19.38 1.12 133 XMGappySubj_01 4060 0.81 0.15 1.08 134 DKIM_ADSP_NXDOMAIN 3995 2.36 5.41 1.07 135 HELO_NODOT 3970 0.79 0.14 1.06 136 HELO_NO_DOMAIN 3962 0.79 0.14 1.06 137 XM_SPF_SoftFail 3950 2.00 4.25 1.05 138 XM_UB50 3930 1.54 2.72 1.05 139 URI_HEX 3920 1.08 1.14 1.05 140 NO_DNS_FOR_FROM 3828 2.47 5.88 1.02 141 XMSexyCombo_05 3818 1.83 3.74 1.02 142 BOTNET 3736 3.94 10.90 1.00 143 TooManyTo_004 3549 0.79 0.42 0.95 144 XMCapTrack 3427 0.81 0.56 0.91 145 TR_XM_DK_SendGrid 3390 0.87 0.78 0.90 146 TVD_SPACE_RATIO 3355 0.69 0.20 0.90 147 XMGenDplmaNmb 3058 1.15 1.94 0.82 148 HTML_IMAGE_ONLY_32 2974 0.61 0.17 0.79 149 FROM_GOV_DKIM_AU 2912 0.61 0.21 0.78 150 XMBrknScrpt_02 2856 1.24 2.38 0.76 151 TR_MetaPhish_Combo_01 2818 0.90 1.26 0.75 152 XM_H_Long_From02 2784 1.26 2.49 0.74 153 XM_ShortIntro_01 2764 0.62 0.35 0.74 154 XM_OfRef6 2760 1.97 4.90 0.74 155 TVD_RCVD_IP 2754 0.88 1.22 0.74 156 TooManyTo_005 2752 0.63 0.37 0.73 157 XM_B_SpammyWords4 2669 1.23 2.44 0.71 158 T_FILL_THIS_FORM_SHORT 2640 1.47 3.27 0.70 159 XM_B_COPY_HTML 2610 0.77 0.94 0.70 160 T_Symld_Words_02 2603 0.69 0.67 0.69 161 DKIM_ADSP_CUSTOM_MED 2546 0.79 1.04 0.68 162 T_TooManySym_04 2487 1.68 4.07 0.66 163 LOW_PRICE 2430 0.55 0.31 0.65 164 XMSubMetaSxObfu_03 2373 0.61 0.56 0.63 165 XMNoVowels 2320 1.04 2.02 0.62 166 RCVD_IN_MSPIKE_BL 2301 2.00 5.28 0.61 167 TR_XM_MSPIKECOMBO 2300 2.00 5.28 0.61 168 RCVD_IN_PBL 2290 1.14 2.41 0.61 169 TR_XM_MaxWHORU 2282 2.17 5.88 0.61 170 SpammyFromTLD_01 2280 0.91 1.62 0.61 171 RELAYCOUNTRY_CA 2277 2.60 7.33 0.61 172 XMLngstWrd_00 2178 0.50 0.32 0.58 173 XM_H_PHPMailer 2175 0.54 0.43 0.58 174 RELAYCOUNTRY_GB 2143 0.65 0.82 0.57 175 HTTPS_HTTP_MISMATCH 2131 0.59 0.65 0.57 176 RCVD_IN_MSPIKE_L3 2100 1.47 3.63 0.56 177 XMSlimDrugH 2072 0.60 0.71 0.55 178 T_OBFU_PDF_ATTACH 1997 0.43 0.20 0.53 179 XM_B_DNDMA 1994 0.64 0.91 0.53 180 MSGID_FROM_MTA_HEADER 1965 0.46 0.32 0.52 181 T_XMHurry_00 1952 0.82 1.53 0.52 182 XMGappySubj_02 1907 0.37 0.04 0.51 183 XMLngstWrd_01 1875 0.43 0.28 0.50 184 RCVD_IN_BL_SPAMCOP_NET 1837 4.20 12.97 0.49 185 SpammyFromTLD_02 1819 0.98 2.16 0.49 186 XMPhish30 1813 0.75 1.39 0.48 187 MPART_ALT_DIFF_COUNT 1759 0.63 1.02 0.47 188 XMBSHREFv2 1755 0.43 0.32 0.47 189 TR_XM_Base64_M1 1746 0.58 0.87 0.47 190 RELAYCOUNTRY_AU 1746 1.14 2.75 0.47 191 XM_ProductURIs 1742 0.62 0.97 0.46 192 XMSolicitRefs_0 1696 0.45 0.44 0.45 193 FORGED_GMAIL_RCVD 1644 0.52 0.72 0.44 194 TR_XM_SpammyWords2 1634 2.94 8.87 0.44 195 HTML_TAG_BALANCE_BODY 1621 0.51 0.69 0.43 196 XMBody_17 1612 0.91 2.06 0.43 197 XMPhish14 1605 0.51 0.70 0.43 198 HTML_IMAGE_ONLY_20 1584 0.55 0.85 0.42 199 NML_ADSP_CUSTOM_MED 1547 0.54 0.85 0.41 200 URI_TRY_3LD 1539 0.64 1.17 0.41 ----------------------------------------------------------------------