Email: 447363 Autolearn: 0 AvgScore: 5.04 AvgScanTime: 1.46 sec Spam: 135090 Autolearn: 0 AvgScore: 14.13 AvgScanTime: 1.74 sec Ham: 312273 Autolearn: 0 AvgScore: 1.11 AvgScanTime: 1.34 sec Time Spent Running SA: 181.77 hours Time Spent Processing Spam: 65.30 hours Time Spent Processing Ham: 116.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128646 89.36 95.23 86.83 2 DKIM_SIGNED 122524 80.64 90.70 76.29 3 XM_DK_Pass 117265 78.84 86.81 75.39 4 DKIM_VALID 116383 78.00 86.15 74.47 5 XM_B_Unicode 114061 74.33 84.43 69.96 6 RELAYCOUNTRY_US 112527 81.89 83.30 81.29 7 DCC_CHECK 98293 50.91 72.76 41.46 8 DKIM_VALID_AU 92627 62.23 68.57 59.50 9 XM_B_SpammyWords 91223 51.77 67.53 44.95 10 XMListUnsubscribeExists 90533 54.41 67.02 48.96 11 LOC_TINY_FONT_1 67832 34.71 50.21 28.00 12 XM_B_Unicode3 67234 44.37 49.77 42.03 13 XM_DK_Undo_02 55132 16.12 40.81 5.44 14 BAYES_50 54551 54.25 40.38 60.24 15 HTML_FONT_LOW_CONTRAST 51217 31.58 37.91 28.84 16 XM_B_SpammyWords2 51033 24.36 37.78 18.56 17 FVGT_m_MULTI_ODD 49134 28.20 36.37 24.67 18 DKIM_VALID_EF 42942 31.02 31.79 30.68 19 BAYES_99 40854 11.75 30.24 3.75 20 T_KAM_HTML_FONT_INVALID 40274 24.83 29.81 22.68 21 TR_XM_DKIM_Undo 38560 10.18 28.54 2.24 22 MIME_HTML_ONLY 35671 22.16 26.41 20.33 23 DCC_CHECK_NEGATIVE 34932 48.64 25.86 58.49 24 XM_Multi_Part_URI 32981 17.40 24.41 14.37 25 RCVD_IN_MSPIKE_H2 32795 20.17 24.28 18.39 26 BAYES_999 31714 8.99 23.48 2.73 27 XMSubLong 31268 22.46 23.15 22.16 28 UNPARSEABLE_RELAY 30012 15.95 22.22 13.24 29 TR_XM_DK_Unsub 29234 16.21 21.64 13.86 30 T_TM2_M_HEADER_IN_MSG 28665 25.03 21.22 26.68 31 TR_DCC_Bayes_99 27171 7.11 20.11 1.48 32 XM_B_Unsub 26012 12.42 19.26 9.46 33 TR_XM_BayesUnsub 24978 10.70 18.49 7.33 34 TR_MAX_INTL_RELAY 20511 8.90 15.18 6.18 35 RELAYCOUNTRY_META 19771 6.87 14.64 3.52 36 XM_B_SpammyWords3 19648 7.60 14.54 4.60 37 LOTS_OF_MONEY 19499 8.81 14.43 6.38 38 TR_XM_SpammyWords4 17432 6.91 12.90 4.31 39 TR_XM_UnparsRelay 15794 4.90 11.69 1.97 40 BOTNET_IPINHOSTNAME 14721 5.66 10.90 3.39 41 XM_Evil_Numbers_Gen 14408 9.73 10.67 9.32 42 RCVD_IN_BL_SPAMCOP_NET 14354 3.73 10.63 0.75 43 FSL_BULK_SIG 13952 10.34 10.33 10.34 44 TR_XM_SpammyRelay 13390 4.35 9.91 1.95 45 TR_XM_SpammyWords2 12811 3.21 9.48 0.49 46 BAYES_80 12730 5.51 9.42 3.82 47 BOTNET 12168 3.67 9.01 1.36 48 XM_B_Phish_Phrases 11894 6.26 8.80 5.16 49 BAYES_60 11818 7.52 8.75 6.98 50 RCVD_IN_MSPIKE_WL 11122 14.19 8.23 16.77 51 LotsOfNums_01 10098 8.95 7.48 9.58 52 XM_UncommonTLD01 9021 5.54 6.68 5.05 53 HTML_IMAGE_RATIO_02 8613 5.34 6.38 4.88 54 UNTRUSTED_Relay 8508 3.07 6.30 1.67 55 TR_XM_SPAMCOP 8463 1.99 6.26 0.15 56 XM_Body_Dirty_Words 8411 3.93 6.23 2.94 57 MPART_ALT_DIFF 8290 5.23 6.14 4.84 58 XM_B_PhoneNumber 8271 7.73 6.12 8.43 59 XMSubMetaSx_00 8021 3.97 5.94 3.13 60 XM_H_Long_From01 7569 5.71 5.60 5.76 61 BAYES_95 7209 3.25 5.34 2.35 62 XM_H_GMP 7038 5.09 5.21 5.04 63 XM_B_Investor 6981 2.53 5.17 1.39 64 HTML_IMAGE_RATIO_04 6560 4.80 4.86 4.78 65 TR_XM_PhishingBody 6487 2.55 4.80 1.58 66 DKIM_INVALID 6141 2.64 4.55 1.82 67 RELAYCOUNTRY_CA 6107 1.84 4.52 0.68 68 TM2_M_VERY_LONG_WORD 5986 3.21 4.43 2.68 69 XMSexyCombo_05 5660 2.04 4.19 1.11 70 T_XMDrugObfuBody_14 5657 2.60 4.19 1.91 71 RCVD_IN_MSPIKE_H3 5607 6.80 4.15 7.95 72 RCVD_IN_MSPIKE_BL 5554 2.05 4.11 1.16 73 TR_XM_MSPIKECOMBO 5550 2.05 4.11 1.16 74 TooManyTo_001 5502 6.84 4.07 8.03 75 XMStrtUSub 5364 5.85 3.97 6.66 76 XM_CamelCaseFrm001 5148 2.72 3.81 2.25 77 XMDiploma_00 5051 2.41 3.74 1.84 78 TR_XM_SpammyWords5 5019 2.14 3.72 1.46 79 XM_B_SpammyTLD 4901 3.09 3.63 2.86 80 MIME_HTML_MOSTLY 4848 2.79 3.59 2.44 81 XM_OfRef6 4465 1.68 3.31 0.98 82 XM_B_Unsub2 4409 2.03 3.26 1.50 83 MIME_QP_LONG_LINE 4407 4.90 3.26 5.61 84 XMNumbers 4404 3.59 3.26 3.74 85 SUBJ_ALL_CAPS 4389 1.90 3.25 1.32 86 HTML_IMAGE_RATIO_06 4375 3.11 3.24 3.06 87 T_XMDrugObfuBody_08 4343 1.92 3.21 1.37 88 RELAYCOUNTRY_AU 4252 1.46 3.15 0.72 89 XM_SPF_SoftFail 4163 1.78 3.08 1.21 90 MIME_HTML_ONLY_MULTI 4157 2.73 3.08 2.57 91 XM_URI_RBL 3868 1.12 2.86 0.37 92 TR_XM_SpammyWords3 3738 1.19 2.77 0.50 93 TR_XM_NoHeaderRelay 3674 0.94 2.72 0.16 94 XM_B_URI_Unicode 3673 2.24 2.72 2.03 95 XM_UB50 3627 1.60 2.68 1.13 96 RCVD_IN_VALIDITY_SAFE 3479 3.19 2.58 3.46 97 HTML_IMAGE_RATIO_08 3431 2.31 2.54 2.21 98 USER_IN_DEF_DKIM_WL 3403 10.16 2.52 13.47 99 T_XMHurry_00 3253 1.12 2.41 0.57 100 XM_B_SpammyWords4 3233 1.12 2.39 0.56 101 TM2_M_URI_OPT_OUT 3169 1.90 2.35 1.71 102 RCVD_IN_MSPIKE_L3 3167 1.47 2.34 1.09 103 XMGenDplmaNmb 3143 1.38 2.33 0.97 104 RCVD_IN_MSPIKE_H4 3117 3.03 2.31 3.35 105 T_TooManySym_01 3117 4.53 2.31 5.49 106 SpammyFromTLD_02 3084 1.06 2.28 0.54 107 RCVD_IN_VALIDITY_CERTIFIED 2982 2.75 2.21 2.99 108 XMStockSpam_06 2966 1.62 2.20 1.38 109 XM_SendGrid 2904 1.95 2.15 1.87 110 XMBrknScrpt_02 2829 1.25 2.09 0.89 111 T_XMDrugObfuBody_00 2769 1.22 2.05 0.86 112 SpammyFromTLD_01 2697 1.08 2.00 0.69 113 TR_XM_INV_DKIM 2692 0.64 1.99 0.06 114 HTML_MIME_NO_HTML_TAG 2673 2.66 1.98 2.95 115 T_REMOTE_IMAGE 2649 3.49 1.96 4.15 116 MAILING_LIST_MULTI 2610 2.64 1.93 2.95 117 XMPhish30 2609 0.85 1.93 0.39 118 XMBody_17 2430 0.80 1.80 0.37 119 FROM_EXCESS_BASE64 2423 1.43 1.79 1.27 120 RCVD_IN_MSPIKE_H5 2398 4.35 1.78 5.47 121 BAYES_40 2348 4.67 1.74 5.94 122 XMBdyGiftCard01 2322 0.84 1.72 0.46 123 RCVD_IN_IADB_LISTED 2271 3.48 1.68 4.26 124 TR_XM_INTL_Spamhaus 2252 0.59 1.67 0.12 125 SHOPIFY_IMG_NOT_RCVD_SFY 2232 0.72 1.65 0.31 126 URI_NOVOWEL 2222 1.43 1.64 1.33 127 XMSubMetaI_00 2133 0.95 1.58 0.68 128 T_FILL_THIS_FORM_SHORT 2104 1.12 1.56 0.93 129 TR_Caps_n_Bayes_99 2062 0.47 1.53 0.02 130 XM_B_Phish66 2039 0.84 1.51 0.55 131 XM_DK_Undo_01 2029 1.71 1.50 1.81 132 ALL_TRUSTED 2025 11.23 1.50 15.44 133 STY_INVIS_DIRECT 2023 0.75 1.50 0.43 134 RCVD_IN_IADB_SPF 1992 3.05 1.47 3.73 135 RCVD_IN_VALIDITY_RPBL 1904 0.45 1.41 0.03 136 XM_B_SEO 1901 0.54 1.41 0.16 137 XM_B_DNDMA 1893 0.81 1.40 0.55 138 DIET_1 1892 0.61 1.40 0.27 139 TR_XM_MSPIKECOMBO2 1873 0.48 1.39 0.08 140 RCVD_IN_IADB_DK 1870 2.65 1.38 3.19 141 MPART_ALT_DIFF_COUNT 1852 0.76 1.37 0.49 142 RCVD_IN_ZEN_LASTEXTERNAL 1830 0.41 1.35 0.00 143 SHORTCIRCUIT 1830 0.41 1.35 0.00 144 RCVD_IN_IADB_SENDERID 1826 2.73 1.35 3.33 145 RCVD_IN_PBL 1811 0.83 1.34 0.61 146 RCVD_IN_MSPIKE_L4 1800 0.45 1.33 0.06 147 RDNS_DYNAMIC 1797 0.51 1.33 0.15 148 XM_H_Long_From02 1791 0.96 1.33 0.80 149 URI_HEX 1779 1.26 1.32 1.23 150 PDS_RDNS_DYNAMIC_FP 1777 0.42 1.32 0.03 151 KHOP_HELO_FCRDNS 1717 1.75 1.27 1.95 152 XM_ProductURIs 1710 0.77 1.27 0.55 153 BAYES_20 1701 3.26 1.26 4.13 154 THIS_AD 1691 0.77 1.25 0.56 155 XM_B_COPY_HTML 1650 0.81 1.22 0.64 156 XM_HighProb1 1630 0.37 1.21 0.00 157 T_MONEY_PERCENT 1611 0.71 1.19 0.50 158 TR_LOTS_OF_MONEY2 1611 0.71 1.19 0.50 159 TR_XM_SEO4 1587 0.41 1.17 0.08 160 ANY_BOUNCE_MESSAGE 1587 3.69 1.17 4.78 161 BOUNCE_MESSAGE 1585 3.69 1.17 4.78 162 XMSlimDrugH 1585 0.74 1.17 0.55 163 TR_XM_PHPForged 1554 0.53 1.15 0.27 164 TR_XM_PHPDW 1551 0.54 1.15 0.28 165 XM_UB99 1547 0.35 1.15 0.00 166 TR_XM_FormFill2 1543 0.53 1.14 0.27 167 URI_TRY_3LD 1540 0.71 1.14 0.52 168 TR_Mismatch_TLD_02 1508 0.41 1.12 0.11 169 XM_H_PHPOS 1508 0.52 1.12 0.26 170 RELAYCOUNTRY_FR 1446 0.63 1.07 0.43 171 DKIM_ADSP_NXDOMAIN 1445 0.53 1.07 0.29 172 LongTLD 1445 0.89 1.07 0.81 173 XM_PDF 1434 4.71 1.06 6.29 174 T_Symld_Words_02 1401 0.78 1.04 0.67 175 TVD_RCVD_IP 1373 0.94 1.02 0.91 176 TR_XM_Base64_M1 1366 0.85 1.01 0.78 177 RCVD_IN_XBL 1365 0.31 1.01 0.01 178 MultiRelay_CC 1351 0.37 1.00 0.10 179 XMHTML_After_End 1348 0.61 1.00 0.45 180 XMBody_78 1312 0.61 0.97 0.45 181 XM_B_COVIDMETA 1305 0.41 0.97 0.17 182 XMSubMetaSxObfu_03 1289 0.57 0.95 0.41 183 HTTPS_HTTP_MISMATCH 1283 0.71 0.95 0.61 184 TR_XM_DK_SendGrid 1283 1.18 0.95 1.28 185 TM2_M_OBFU_COMMENT 1272 0.51 0.94 0.32 186 SH_BODYURI_REVERSE_SBL 1246 0.28 0.92 0.00 187 URIBL_SBL_A 1245 0.28 0.92 0.00 188 URIBL_SBL 1245 0.28 0.92 0.00 189 RELAYCOUNTRY_GB 1242 0.63 0.92 0.51 190 BOTNET_NORDNS 1239 0.28 0.92 0.01 191 XMReplyNow 1238 0.46 0.92 0.26 192 TR_XM_GMP_BULK_SIG 1224 0.37 0.91 0.14 193 XMPhish14 1218 0.55 0.90 0.39 194 XM_B_REG_HTML 1216 0.45 0.90 0.26 195 TR_XM_RelayPhish 1209 0.32 0.89 0.07 196 RCVD_IN_PSBL 1207 0.58 0.89 0.44 197 DKIM_ADSP_CUSTOM_MED 1204 0.85 0.89 0.84 198 XM_UB60 1202 0.34 0.89 0.11 199 RCVD_IN_SBL_CSS 1189 0.29 0.88 0.03 200 TR_Symld_Words 1179 1.13 0.87 1.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 271132 89.36 95.23 86.83 2 RELAYCOUNTRY_US 253835 81.89 83.30 81.29 3 DKIM_SIGNED 238226 80.64 90.70 76.29 4 XM_DK_Pass 235428 78.84 86.81 75.39 5 DKIM_VALID 232553 78.00 86.15 74.47 6 XM_B_Unicode 218461 74.33 84.43 69.96 7 BAYES_50 188124 54.25 40.38 60.24 8 DKIM_VALID_AU 185789 62.23 68.57 59.50 9 DCC_CHECK_NEGATIVE 182647 48.64 25.86 58.49 10 XMListUnsubscribeExists 152886 54.41 67.02 48.96 11 XM_B_SpammyWords 140355 51.77 67.53 44.95 12 XM_B_Unicode3 131245 44.37 49.77 42.03 13 DCC_CHECK 129469 50.91 72.76 41.46 14 DKIM_VALID_EF 95819 31.02 31.79 30.68 15 HTML_FONT_LOW_CONTRAST 90075 31.58 37.91 28.84 16 LOC_TINY_FONT_1 87444 34.71 50.21 28.00 17 T_TM2_M_HEADER_IN_MSG 83323 25.03 21.22 26.68 18 FVGT_m_MULTI_ODD 77034 28.20 36.37 24.67 19 T_KAM_HTML_FONT_INVALID 70811 24.83 29.81 22.68 20 XMSubLong 69198 22.46 23.15 22.16 21 MIME_HTML_ONLY 63480 22.16 26.41 20.33 22 XM_B_SpammyWords2 57946 24.36 37.78 18.56 23 RCVD_IN_MSPIKE_H2 57432 20.17 24.28 18.39 24 RCVD_IN_MSPIKE_WL 52364 14.19 8.23 16.77 25 ALL_TRUSTED 48200 11.23 1.50 15.44 26 XM_Multi_Part_URI 44875 17.40 24.41 14.37 27 TR_XM_DK_Unsub 43282 16.21 21.64 13.86 28 USER_IN_DEF_DKIM_WL 42067 10.16 2.52 13.47 29 UNPARSEABLE_RELAY 41333 15.95 22.22 13.24 30 FSL_BULK_SIG 32288 10.34 10.33 10.34 31 BAYES_00 32066 7.42 0.82 10.27 32 LotsOfNums_01 29931 8.95 7.48 9.58 33 XM_B_Unsub 29541 12.42 19.26 9.46 34 XM_Evil_Numbers_Gen 29100 9.73 10.67 9.32 35 XM_B_PhoneNumber 26318 7.73 6.12 8.43 36 TooManyTo_001 25090 6.84 4.07 8.03 37 RCVD_IN_MSPIKE_H3 24834 6.80 4.15 7.95 38 TR_XM_BayesUnsub 22885 10.70 18.49 7.33 39 BAYES_60 21808 7.52 8.75 6.98 40 TR_XM_DK_Bayes 21374 4.98 0.67 6.84 41 TR_XM_DK_Bayes1 21122 4.92 0.66 6.76 42 XMStrtUSub 20798 5.85 3.97 6.66 43 XM_DKIMWhitelistDomains 20773 4.68 0.12 6.65 44 LOTS_OF_MONEY 19930 8.81 14.43 6.38 45 XM_PDF 19654 4.71 1.06 6.29 46 TR_MAX_INTL_RELAY 19283 8.90 15.18 6.18 47 BAYES_40 18535 4.67 1.74 5.94 48 XM_H_Long_From01 17981 5.71 5.60 5.76 49 TR_XM_DK_Bayes2 17852 4.13 0.46 5.72 50 MIME_QP_LONG_LINE 17528 4.90 3.26 5.61 51 T_TooManySym_01 17146 4.53 2.31 5.49 52 RCVD_IN_MSPIKE_H5 17079 4.35 1.78 5.47 53 XM_DK_Undo_02 16973 16.12 40.81 5.44 54 XM_B_Phish_Phrases 16121 6.26 8.80 5.16 55 XM_UncommonTLD01 15783 5.54 6.68 5.05 56 XM_H_GMP 15749 5.09 5.21 5.04 57 HTML_IMAGE_RATIO_02 15254 5.34 6.38 4.88 58 MPART_ALT_DIFF 15115 5.23 6.14 4.84 59 HTML_IMAGE_RATIO_04 14923 4.80 4.86 4.78 60 ANY_BOUNCE_MESSAGE 14922 3.69 1.17 4.78 61 BOUNCE_MESSAGE 14921 3.69 1.17 4.78 62 XM_B_SpammyWords3 14360 7.60 14.54 4.60 63 TR_XM_SpammyWords4 13473 6.91 12.90 4.31 64 RCVD_IN_IADB_LISTED 13308 3.48 1.68 4.26 65 T_REMOTE_IMAGE 12952 3.49 1.96 4.15 66 BAYES_20 12904 3.26 1.26 4.13 67 BAYES_80 11933 5.51 9.42 3.82 68 BAYES_99 11724 11.75 30.24 3.75 69 XMNumbers 11676 3.59 3.26 3.74 70 RCVD_IN_IADB_SPF 11650 3.05 1.47 3.73 71 RELAYCOUNTRY_META 10984 6.87 14.64 3.52 72 RCVD_IN_VALIDITY_SAFE 10810 3.19 2.58 3.46 73 BOTNET_IPINHOSTNAME 10599 5.66 10.90 3.39 74 RCVD_IN_MSPIKE_H4 10451 3.03 2.31 3.35 75 RCVD_IN_IADB_SENDERID 10407 2.73 1.35 3.33 76 RCVD_IN_IADB_DK 9977 2.65 1.38 3.19 77 XMSubMetaSx_00 9760 3.97 5.94 3.13 78 HTML_IMAGE_RATIO_06 9550 3.11 3.24 3.06 79 T_TooManySym_02 9435 2.27 0.52 3.02 80 RCVD_IN_VALIDITY_CERTIFIED 9324 2.75 2.21 2.99 81 HTML_MIME_NO_HTML_TAG 9216 2.66 1.98 2.95 82 MAILING_LIST_MULTI 9202 2.64 1.93 2.95 83 XM_Body_Dirty_Words 9184 3.93 6.23 2.94 84 XM_B_SpammyTLD 8922 3.09 3.63 2.86 85 RCVD_IN_IADB_VOUCHED 8648 2.18 0.83 2.77 86 BAYES_999 8522 8.99 23.48 2.73 87 TM2_M_VERY_LONG_WORD 8381 3.21 4.43 2.68 88 MIME_HTML_ONLY_MULTI 8034 2.73 3.08 2.57 89 INVALID_MSGID 8006 1.88 0.30 2.56 90 BAYES_05 7829 1.96 0.70 2.51 91 MIME_HTML_MOSTLY 7620 2.79 3.59 2.44 92 BAYES_95 7350 3.25 5.34 2.35 93 TooManyTo_002 7208 1.85 0.77 2.31 94 MSGID_NOFQDN1 7121 1.60 0.03 2.28 95 XM_CamelCaseFrm001 7022 2.72 3.81 2.25 96 TR_XM_DKIM_Undo 6989 10.18 28.54 2.24 97 HTML_IMAGE_RATIO_08 6911 2.31 2.54 2.21 98 XM_B_URI_Unicode 6340 2.24 2.72 2.03 99 TO_MALFORMED 6315 1.41 0.00 2.02 100 TR_XM_UnparsRelay 6149 4.90 11.69 1.97 101 RCVD_IN_IADB_OPTIN 6144 1.54 0.55 1.97 102 KHOP_HELO_FCRDNS 6101 1.75 1.27 1.95 103 TR_XM_SpammyRelay 6091 4.35 9.91 1.95 104 T_XMDrugObfuBody_14 5979 2.60 4.19 1.91 105 XM_SendGrid 5840 1.95 2.15 1.87 106 XMDiploma_00 5751 2.41 3.74 1.84 107 DKIM_INVALID 5673 2.64 4.55 1.82 108 XM_DK_Undo_01 5640 1.71 1.50 1.81 109 TM2_M_URI_OPT_OUT 5335 1.90 2.35 1.71 110 UNTRUSTED_Relay 5219 3.07 6.30 1.67 111 TR_XM_PhishingBody 4942 2.55 4.80 1.58 112 XM_B_Unsub2 4694 2.03 3.26 1.50 113 TR_DCC_Bayes_99 4631 7.11 20.11 1.48 114 TR_XM_SpammyWords5 4562 2.14 3.72 1.46 115 T_OBFU_PDF_ATTACH 4539 1.10 0.27 1.45 116 TooManyTo_003 4354 1.16 0.60 1.39 117 XM_B_Investor 4353 2.53 5.17 1.39 118 IN_HORDE_ADDRESS_BOOK 4350 1.00 0.09 1.39 119 XMStockSpam_06 4297 1.62 2.20 1.38 120 T_XMDrugObfuBody_08 4264 1.92 3.21 1.37 121 BOTNET 4256 3.67 9.01 1.36 122 XMGappySubj_01 4189 1.01 0.25 1.34 123 URI_NOVOWEL 4162 1.43 1.64 1.33 124 SUBJ_ALL_CAPS 4123 1.90 3.25 1.32 125 MAY_BE_FORGED 4096 0.98 0.21 1.31 126 TR_XM_DK_SendGrid 3987 1.18 0.95 1.28 127 FROM_EXCESS_BASE64 3953 1.43 1.79 1.27 128 URI_HEX 3856 1.26 1.32 1.23 129 TR_Symld_Words 3856 1.13 0.87 1.23 130 XM_SPF_SoftFail 3784 1.78 3.08 1.21 131 T_TooManySym_03 3751 0.89 0.18 1.20 132 RCVD_IN_MSPIKE_BL 3613 2.05 4.11 1.16 133 TR_XM_MSPIKECOMBO 3612 2.05 4.11 1.16 134 XM_ShortIntro_01 3549 0.91 0.40 1.14 135 XM_GoogleGroups 3541 1.01 0.71 1.13 136 XM_UB50 3530 1.60 2.68 1.13 137 XMSexyCombo_05 3458 2.04 4.19 1.11 138 TVD_SPACE_RATIO 3456 0.84 0.23 1.11 139 RCVD_IN_MSPIKE_L3 3401 1.47 2.34 1.09 140 TooManyTo_004 3161 0.84 0.43 1.01 141 XM_OfRef6 3053 1.68 3.31 0.98 142 XMGenDplmaNmb 3033 1.38 2.33 0.97 143 FROM_GOV_DKIM_AU 2993 0.79 0.40 0.96 144 T_TVD_MIME_NO_HEADERS 2915 0.66 0.03 0.93 145 T_FILL_THIS_FORM_SHORT 2899 1.12 1.56 0.93 146 HELO_NODOT 2877 0.71 0.22 0.92 147 HELO_NO_DOMAIN 2874 0.71 0.21 0.92 148 TVD_RCVD_IP 2828 0.94 1.02 0.91 149 XMCapTrack 2794 0.75 0.42 0.89 150 XMBrknScrpt_02 2764 1.25 2.09 0.89 151 T_XMDrugObfuBody_00 2682 1.22 2.05 0.86 152 DKIM_ADSP_CUSTOM_MED 2619 0.85 0.89 0.84 153 LongTLD 2542 0.89 1.07 0.81 154 MIME_CHARSET_FARAWAY 2535 0.68 0.37 0.81 155 TooManyTo_005 2513 0.66 0.33 0.80 156 XM_H_Long_From02 2484 0.96 1.33 0.80 157 TR_XM_Base64_M1 2433 0.85 1.01 0.78 158 TM2_M_BODY_EMPTY 2410 0.59 0.16 0.77 159 TR_MetaPhish_Combo_01 2369 0.77 0.81 0.76 160 RCVD_IN_BL_SPAMCOP_NET 2336 3.73 10.63 0.75 161 XM_H_PHPMailer 2324 0.67 0.51 0.74 162 TRACKER_ID 2289 0.54 0.11 0.73 163 RELAYCOUNTRY_AU 2263 1.46 3.15 0.72 164 CHARSET_FARAWAY_HEADER 2223 0.54 0.15 0.71 165 SpammyFromTLD_01 2141 1.08 2.00 0.69 166 GMD_PDF_EMPTY_BODY 2133 0.53 0.16 0.68 167 RELAYCOUNTRY_CA 2121 1.84 4.52 0.68 168 XMSubMetaI_00 2109 0.95 1.58 0.68 169 T_Symld_Words_02 2086 0.78 1.04 0.67 170 XMNoVowels 1999 0.65 0.68 0.64 171 XM_B_COPY_HTML 1987 0.81 1.22 0.64 172 XMGappySubj_02 1979 0.46 0.05 0.63 173 HTML_TAG_BALANCE_BODY 1961 0.67 0.76 0.63 174 RCVD_IN_PBL 1914 0.83 1.34 0.61 175 HTTPS_HTTP_MISMATCH 1894 0.71 0.95 0.61 176 HTML_IMAGE_ONLY_32 1835 0.47 0.18 0.59 177 FORGED_GMAIL_RCVD 1834 0.63 0.73 0.59 178 T_XMHurry_00 1768 1.12 2.41 0.57 179 XM_B_SpammyWords4 1761 1.12 2.39 0.56 180 TO_NO_BRKTS_HTML_ONLY 1760 0.47 0.25 0.56 181 THIS_AD 1749 0.77 1.25 0.56 182 XMBSHREFv2 1743 0.48 0.30 0.56 183 XM_B_Phish66 1729 0.84 1.51 0.55 184 XM_B_DNDMA 1728 0.81 1.40 0.55 185 XM_ProductURIs 1726 0.77 1.27 0.55 186 XMSlimDrugH 1723 0.74 1.17 0.55 187 SpammyFromTLD_02 1677 1.06 2.28 0.54 188 HTML_IMAGE_ONLY_20 1631 0.60 0.79 0.52 189 URI_TRY_3LD 1624 0.71 1.14 0.52 190 RELAYCOUNTRY_GB 1580 0.63 0.92 0.51 191 TR_XM_SpammyWords3 1571 1.19 2.77 0.50 192 T_MONEY_PERCENT 1570 0.71 1.19 0.50 193 TR_LOTS_OF_MONEY2 1570 0.71 1.19 0.50 194 TR_XM_SpammyWords2 1544 3.21 9.48 0.49 195 MPART_ALT_DIFF_COUNT 1526 0.76 1.37 0.49 196 MSGID_FROM_MTA_HEADER 1476 0.41 0.26 0.47 197 XMBdyGiftCard01 1450 0.84 1.72 0.46 198 XMBody_78 1414 0.61 0.97 0.45 199 NML_ADSP_CUSTOM_MED 1412 0.52 0.68 0.45 200 XMHTML_After_End 1397 0.61 1.00 0.45 ----------------------------------------------------------------------