Email: 450044 Autolearn: 0 AvgScore: 5.32 AvgScanTime: 1.29 sec Spam: 135963 Autolearn: 0 AvgScore: 14.76 AvgScanTime: 1.48 sec Ham: 314081 Autolearn: 0 AvgScore: 1.24 AvgScanTime: 1.21 sec Time Spent Running SA: 161.81 hours Time Spent Processing Spam: 56.02 hours Time Spent Processing Ham: 105.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129086 88.35 94.94 85.50 2 DKIM_SIGNED 118086 75.49 86.85 70.57 3 XM_B_Unicode 114783 73.93 84.42 69.39 4 XM_DK_Pass 112441 73.57 82.70 69.61 5 DKIM_VALID 111620 72.78 82.10 68.74 6 RELAYCOUNTRY_US 110183 78.88 81.04 77.95 7 DCC_CHECK 98246 52.84 72.26 44.43 8 XM_B_SpammyWords 93760 50.33 68.96 42.27 9 XMListUnsubscribeExists 87796 51.01 64.57 45.14 10 DKIM_VALID_AU 87207 58.89 64.14 56.62 11 LOC_TINY_FONT_1 66393 33.33 48.83 26.62 12 XM_B_Unicode3 65828 44.28 48.42 42.49 13 XM_B_SpammyWords2 55368 24.61 40.72 17.63 14 BAYES_50 54499 54.47 40.08 60.70 15 XM_DK_Undo_02 54045 15.55 39.75 5.08 16 HTML_FONT_LOW_CONTRAST 47718 30.69 35.10 28.79 17 FVGT_m_MULTI_ODD 45583 26.68 33.53 23.72 18 DKIM_VALID_EF 41442 29.02 30.48 28.39 19 BAYES_99 41229 11.56 30.32 3.43 20 T_KAM_HTML_FONT_INVALID 39260 23.46 28.88 21.12 21 TR_XM_DKIM_Undo 38585 10.02 28.38 2.08 22 MIME_HTML_ONLY 38386 21.26 28.23 18.24 23 DCC_CHECK_NEGATIVE 35607 46.67 26.19 55.53 24 XMSubLong 33879 22.35 24.92 21.24 25 T_TM2_M_HEADER_IN_MSG 33130 28.53 24.37 30.33 26 BAYES_999 31776 8.83 23.37 2.54 27 XM_Multi_Part_URI 29494 15.70 21.69 13.11 28 TR_XM_DK_Unsub 28952 15.23 21.29 12.60 29 TR_DCC_Bayes_99 28614 7.33 21.05 1.40 30 XM_B_Unsub 26144 11.69 19.23 8.43 31 UNPARSEABLE_RELAY 25381 13.52 18.67 11.28 32 TR_XM_BayesUnsub 25199 9.91 18.53 6.17 33 RCVD_IN_MSPIKE_H2 24940 15.79 18.34 14.69 34 RELAYCOUNTRY_META 23042 7.21 16.95 2.99 35 TR_MAX_INTL_RELAY 21571 8.54 15.87 5.38 36 XM_B_SpammyWords3 20478 8.04 15.06 5.00 37 LOTS_OF_MONEY 19052 8.71 14.01 6.42 38 TR_XM_SpammyWords4 17268 6.63 12.70 4.00 39 TR_XM_SpammyRelay 16626 4.82 12.23 1.61 40 BOTNET_IPINHOSTNAME 16321 6.09 12.00 3.53 41 XM_Evil_Numbers_Gen 15954 10.05 11.73 9.32 42 FSL_BULK_SIG 14585 11.51 10.73 11.85 43 BOTNET 14335 4.16 10.54 1.40 44 RCVD_IN_BL_SPAMCOP_NET 14198 3.61 10.44 0.66 45 XM_B_Phish_Phrases 13560 6.36 9.97 4.80 46 TR_XM_UnparsRelay 13462 4.11 9.90 1.60 47 TR_XM_SpammyWords2 13385 3.31 9.84 0.48 48 BAYES_80 13024 5.25 9.58 3.37 49 LotsOfNums_01 12960 10.12 9.53 10.37 50 RCVD_IN_MSPIKE_WL 12626 13.23 9.29 14.94 51 BAYES_60 10838 6.79 7.97 6.29 52 UNTRUSTED_Relay 9397 3.04 6.91 1.36 53 XMSubMetaSx_00 8913 4.21 6.56 3.20 54 XM_Body_Dirty_Words 8810 3.86 6.48 2.72 55 HTML_IMAGE_RATIO_04 8790 4.74 6.46 3.99 56 RELAYCOUNTRY_CA 8730 2.40 6.42 0.65 57 HTML_IMAGE_RATIO_02 8546 4.80 6.29 4.16 58 XM_B_PhoneNumber 8354 7.69 6.14 8.36 59 RCVD_IN_MSPIKE_BL 8228 2.62 6.05 1.14 60 TM2_M_VERY_LONG_WORD 8226 5.30 6.05 4.98 61 TR_XM_MSPIKECOMBO 8214 2.62 6.04 1.14 62 MPART_ALT_DIFF 8172 7.20 6.01 7.72 63 BAYES_95 8067 3.19 5.93 2.00 64 XM_UncommonTLD01 7680 4.25 5.65 3.65 65 XM_H_Long_From01 7145 5.49 5.26 5.60 66 RCVD_IN_MSPIKE_H3 7122 6.66 5.24 7.28 67 XM_B_Investor 7043 2.50 5.18 1.34 68 XM_H_GMP 6984 5.28 5.14 5.34 69 TR_XM_SPAMCOP 6862 1.65 5.05 0.18 70 TooManyTo_001 6487 6.71 4.77 7.55 71 DKIM_INVALID 6466 2.71 4.76 1.82 72 ANY_BOUNCE_MESSAGE 6075 7.79 4.47 9.23 73 BOUNCE_MESSAGE 6074 7.79 4.47 9.23 74 TR_XM_SpammyWords3 6021 1.77 4.43 0.62 75 XMSexyCombo_05 6004 2.09 4.42 1.08 76 XMStrtUSub 5890 4.77 4.33 4.96 77 T_XMDrugObfuBody_14 5859 2.37 4.31 1.53 78 TR_XM_PhishingBody 5727 2.58 4.21 1.88 79 XM_B_SpammyTLD 5497 3.16 4.04 2.78 80 XMNumbers 5111 3.37 3.76 3.21 81 TR_XM_SpammyWords5 5001 1.95 3.68 1.20 82 MIME_QP_LONG_LINE 4837 4.65 3.56 5.13 83 MIME_HTML_MOSTLY 4823 5.33 3.55 6.10 84 XM_CamelCaseFrm001 4571 2.33 3.36 1.89 85 XM_B_Unsub2 4552 1.93 3.35 1.31 86 RCVD_IN_MSPIKE_L3 4384 1.64 3.22 0.96 87 T_XMDrugObfuBody_08 4374 2.02 3.22 1.50 88 XM_SPF_SoftFail 4306 1.85 3.17 1.28 89 TR_XM_NoHeaderRelay 4277 1.08 3.15 0.19 90 MIME_HTML_ONLY_MULTI 4256 2.59 3.13 2.36 91 XM_OfRef6 4223 1.52 3.11 0.83 92 HTML_IMAGE_RATIO_06 4127 3.17 3.04 3.22 93 XMDiploma_00 4053 2.42 2.98 2.18 94 XM_URI_RBL 3854 1.09 2.83 0.34 95 TM2_M_URI_OPT_OUT 3835 2.03 2.82 1.68 96 RELAYCOUNTRY_AU 3742 1.23 2.75 0.58 97 MAY_BE_FORGED 3739 3.30 2.75 3.54 98 FROM_EXCESS_BASE64 3731 1.76 2.74 1.33 99 XM_UB50 3682 1.43 2.71 0.87 100 KHOP_HELO_FCRDNS 3648 2.97 2.68 3.10 101 USER_IN_DEF_DKIM_WL 3632 9.86 2.67 12.98 102 T_TooManySym_01 3544 4.83 2.61 5.80 103 HTML_IMAGE_RATIO_08 3403 2.39 2.50 2.34 104 XM_B_URI_Unicode 3393 2.16 2.50 2.02 105 XM_B_SpammyWords4 3391 1.14 2.49 0.56 106 TR_XM_MSPIKECOMBO2 3170 0.74 2.33 0.06 107 SUBJ_ALL_CAPS 3097 1.60 2.28 1.31 108 TR_XM_INV_DKIM 3026 0.69 2.23 0.02 109 XMBody_17 2995 0.88 2.20 0.30 110 T_FILL_THIS_FORM_SHORT 2909 1.18 2.14 0.77 111 XMStockSpam_06 2890 1.46 2.13 1.17 112 MPART_ALT_DIFF_COUNT 2884 1.06 2.12 0.60 113 SpammyFromTLD_02 2856 1.09 2.10 0.65 114 RCVD_IN_MSPIKE_H5 2819 3.98 2.07 4.81 115 RCVD_IN_VALIDITY_SAFE 2808 3.17 2.07 3.65 116 ALL_TRUSTED 2803 14.11 2.06 19.33 117 MAILING_LIST_MULTI 2769 2.72 2.04 3.02 118 XMBrknScrpt_02 2725 1.27 2.00 0.96 119 RCVD_IN_MSPIKE_H4 2685 2.59 1.97 2.85 120 RCVD_IN_VALIDITY_RPBL 2679 0.63 1.97 0.06 121 T_XMHurry_00 2674 0.96 1.97 0.52 122 BAYES_40 2490 4.50 1.83 5.65 123 T_REMOTE_IMAGE 2476 2.93 1.82 3.41 124 XMBdyGiftCard01 2440 0.73 1.79 0.28 125 RCVD_IN_VALIDITY_CERTIFIED 2425 2.68 1.78 3.06 126 XMGenDplmaNmb 2424 1.44 1.78 1.29 127 RCVD_IN_IADB_LISTED 2388 2.76 1.76 3.19 128 SpammyFromTLD_01 2335 0.93 1.72 0.59 129 TR_Symld_Words 2298 1.47 1.69 1.37 130 T_XMDrugObfuBody_00 2254 1.14 1.66 0.92 131 TR_LOTS_OF_MONEY3 2244 0.68 1.65 0.26 132 XM_DK_Undo_01 2232 1.69 1.64 1.71 133 HTML_MIME_NO_HTML_TAG 2204 2.19 1.62 2.44 134 XM_SendGrid 2156 1.46 1.59 1.41 135 URI_TRY_3LD 2145 0.89 1.58 0.59 136 XMPhish30 2132 1.05 1.57 0.83 137 URI_HEX 2108 1.25 1.55 1.12 138 SHORTCIRCUIT 2087 0.46 1.53 0.00 139 RCVD_IN_ZEN_LASTEXTERNAL 2087 0.46 1.53 0.00 140 RCVD_IN_IADB_SPF 2078 2.44 1.53 2.84 141 DKIM_ADSP_NXDOMAIN 2064 0.73 1.52 0.38 142 XM_UB99 2015 0.45 1.48 0.00 143 XM_ProductURIs 1949 0.81 1.43 0.54 144 RCVD_IN_MSPIKE_L4 1948 0.53 1.43 0.14 145 RCVD_IN_IADB_DK 1934 2.16 1.42 2.49 146 XM_B_SEO 1918 0.53 1.41 0.15 147 BOTNET_NORDNS 1901 0.43 1.40 0.00 148 RCVD_IN_IADB_SENDERID 1894 2.20 1.39 2.55 149 HTML_FONT_TINY_NORDNS 1885 0.51 1.39 0.13 150 RCVD_IN_MSPIKE_L5 1882 0.44 1.38 0.03 151 TR_Mismatch_TLD_02 1874 0.45 1.38 0.05 152 RCVD_IN_PSBL 1864 0.76 1.37 0.49 153 T_Symld_Words_02 1851 0.85 1.36 0.64 154 XM_H_Long_From02 1818 0.93 1.34 0.76 155 BAYES_20 1808 4.79 1.33 6.28 156 TR_XM_MaxSPIKE 1801 0.43 1.32 0.04 157 URI_NOVOWEL 1778 1.23 1.31 1.20 158 THIS_AD 1775 0.87 1.31 0.68 159 XM_B_Phish66 1736 0.66 1.28 0.39 160 TR_XM_INTL_Spamhaus 1725 0.48 1.27 0.13 161 TR_XM_PHPForged 1721 0.57 1.27 0.27 162 TR_XM_FormFill2 1713 0.57 1.26 0.27 163 TR_XM_PHPDW 1704 0.57 1.25 0.27 164 XM_H_PHPOS 1686 0.56 1.24 0.26 165 RDNS_DYNAMIC 1671 0.48 1.23 0.15 166 PDS_RDNS_DYNAMIC_FP 1648 0.39 1.21 0.04 167 TR_XM_InvalidRelay 1639 0.37 1.21 0.01 168 TR_XM_Base64_M1 1629 0.87 1.20 0.73 169 T_MONEY_PERCENT 1599 0.50 1.18 0.21 170 TR_LOTS_OF_MONEY2 1599 0.50 1.18 0.21 171 XM_B_COPY_HTML 1599 0.83 1.18 0.68 172 MIME_CHARSET_FARAWAY 1589 1.45 1.17 1.57 173 TR_XM_GMP_BULK_SIG 1577 0.52 1.16 0.24 174 XM_HighProb1 1541 0.34 1.13 0.00 175 HTTPS_HTTP_MISMATCH 1539 0.79 1.13 0.64 176 DIET_1 1526 0.52 1.12 0.26 177 TR_XM_SEO4 1510 0.40 1.11 0.09 178 XMSlimDrugH 1509 0.75 1.11 0.59 179 TR_Caps_n_Bayes_99 1505 0.34 1.11 0.01 180 TM2_M_OBFU_COMMENT 1505 0.50 1.11 0.23 181 XMBody_78 1491 0.54 1.10 0.30 182 DKIM_ADSP_CUSTOM_MED 1476 0.84 1.09 0.73 183 RELAYCOUNTRY_FR 1473 0.51 1.08 0.26 184 SHOPIFY_IMG_NOT_RCVD_SFY 1409 0.46 1.04 0.21 185 TR_MetaPhish_Combo_01 1403 0.80 1.03 0.70 186 XMSubMetaI_00 1385 0.56 1.02 0.36 187 STY_INVIS_DIRECT 1363 0.53 1.00 0.33 188 XMLngstWrd_00 1341 0.58 0.99 0.40 189 MultiRelay_CC 1336 0.36 0.98 0.09 190 TR_XM_DK_SendGrid 1334 0.97 0.98 0.97 191 CHARSET_FARAWAY_HEADER 1279 1.32 0.94 1.48 192 XM_UB999 1264 0.28 0.93 0.00 193 LongTLD 1256 0.52 0.92 0.35 194 URIBL_SBL 1253 0.28 0.92 0.00 195 URIBL_SBL_A 1253 0.28 0.92 0.00 196 SH_BODYURI_REVERSE_SBL 1251 0.28 0.92 0.00 197 TVD_RCVD_IP 1250 1.15 0.92 1.25 198 XM_PDF 1242 3.09 0.91 4.03 199 RCVD_IN_XBL 1241 0.28 0.91 0.01 200 RCVD_IN_PBL 1213 0.71 0.89 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 268534 88.35 94.94 85.50 2 RELAYCOUNTRY_US 244828 78.88 81.04 77.95 3 DKIM_SIGNED 221634 75.49 86.85 70.57 4 XM_DK_Pass 218640 73.57 82.70 69.61 5 XM_B_Unicode 217955 73.93 84.42 69.39 6 DKIM_VALID 215914 72.78 82.10 68.74 7 BAYES_50 190651 54.47 40.08 60.70 8 DKIM_VALID_AU 177836 58.89 64.14 56.62 9 DCC_CHECK_NEGATIVE 174412 46.67 26.19 55.53 10 XMListUnsubscribeExists 141762 51.01 64.57 45.14 11 DCC_CHECK 139556 52.84 72.26 44.43 12 XM_B_Unicode3 133464 44.28 48.42 42.49 13 XM_B_SpammyWords 132748 50.33 68.96 42.27 14 T_TM2_M_HEADER_IN_MSG 95276 28.53 24.37 30.33 15 HTML_FONT_LOW_CONTRAST 90416 30.69 35.10 28.79 16 DKIM_VALID_EF 89155 29.02 30.48 28.39 17 LOC_TINY_FONT_1 83614 33.33 48.83 26.62 18 FVGT_m_MULTI_ODD 74497 26.68 33.53 23.72 19 XMSubLong 66704 22.35 24.92 21.24 20 T_KAM_HTML_FONT_INVALID 66322 23.46 28.88 21.12 21 ALL_TRUSTED 60708 14.11 2.06 19.33 22 MIME_HTML_ONLY 57296 21.26 28.23 18.24 23 XM_B_SpammyWords2 55372 24.61 40.72 17.63 24 RCVD_IN_MSPIKE_WL 46922 13.23 9.29 14.94 25 RCVD_IN_MSPIKE_H2 46133 15.79 18.34 14.69 26 XM_Multi_Part_URI 41180 15.70 21.69 13.11 27 USER_IN_DEF_DKIM_WL 40757 9.86 2.67 12.98 28 TR_XM_DK_Unsub 39586 15.23 21.29 12.60 29 FSL_BULK_SIG 37210 11.51 10.73 11.85 30 UNPARSEABLE_RELAY 35444 13.52 18.67 11.28 31 LotsOfNums_01 32569 10.12 9.53 10.37 32 BAYES_00 31632 7.24 0.71 10.07 33 XM_Evil_Numbers_Gen 29286 10.05 11.73 9.32 34 ANY_BOUNCE_MESSAGE 29001 7.79 4.47 9.23 35 BOUNCE_MESSAGE 28999 7.79 4.47 9.23 36 XM_B_Unsub 26477 11.69 19.23 8.43 37 XM_B_PhoneNumber 26248 7.69 6.14 8.36 38 MPART_ALT_DIFF 24249 7.20 6.01 7.72 39 TooManyTo_001 23711 6.71 4.77 7.55 40 RCVD_IN_MSPIKE_H3 22850 6.66 5.24 7.28 41 TR_XM_DK_Bayes 20741 4.78 0.57 6.60 42 TR_XM_DK_Bayes1 20413 4.71 0.57 6.50 43 LOTS_OF_MONEY 20160 8.71 14.01 6.42 44 BAYES_60 19740 6.79 7.97 6.29 45 BAYES_20 19729 4.79 1.33 6.28 46 XM_DKIMWhitelistDomains 19575 4.36 0.03 6.23 47 TR_XM_BayesUnsub 19386 9.91 18.53 6.17 48 MIME_HTML_MOSTLY 19171 5.33 3.55 6.10 49 T_TooManySym_01 18215 4.83 2.61 5.80 50 BAYES_40 17752 4.50 1.83 5.65 51 XM_H_Long_From01 17579 5.49 5.26 5.60 52 TR_XM_DK_Bayes2 17276 3.96 0.40 5.50 53 TR_MAX_INTL_RELAY 16884 8.54 15.87 5.38 54 XM_H_GMP 16761 5.28 5.14 5.34 55 MIME_QP_LONG_LINE 16110 4.65 3.56 5.13 56 XM_DK_Undo_02 15940 15.55 39.75 5.08 57 XM_B_SpammyWords3 15708 8.04 15.06 5.00 58 TM2_M_VERY_LONG_WORD 15628 5.30 6.05 4.98 59 XMStrtUSub 15573 4.77 4.33 4.96 60 RCVD_IN_MSPIKE_H5 15111 3.98 2.07 4.81 61 XM_B_Phish_Phrases 15064 6.36 9.97 4.80 62 HTML_IMAGE_RATIO_02 13074 4.80 6.29 4.16 63 XM_PDF 12659 3.09 0.91 4.03 64 TR_XM_SpammyWords4 12554 6.63 12.70 4.00 65 HTML_IMAGE_RATIO_04 12546 4.74 6.46 3.99 66 HTML_IMAGE_ONLY_32 11833 2.69 0.20 3.77 67 RCVD_IN_VALIDITY_SAFE 11462 3.17 2.07 3.65 68 XM_UncommonTLD01 11458 4.25 5.65 3.65 69 MAY_BE_FORGED 11120 3.30 2.75 3.54 70 BOTNET_IPINHOSTNAME 11090 6.09 12.00 3.53 71 BAYES_99 10785 11.56 30.32 3.43 72 T_REMOTE_IMAGE 10716 2.93 1.82 3.41 73 BAYES_80 10586 5.25 9.58 3.37 74 T_TooManySym_02 10308 2.50 0.70 3.28 75 HTML_IMAGE_RATIO_06 10128 3.17 3.04 3.22 76 XMNumbers 10069 3.37 3.76 3.21 77 XMSubMetaSx_00 10045 4.21 6.56 3.20 78 RCVD_IN_IADB_LISTED 10021 2.76 1.76 3.19 79 KHOP_HELO_FCRDNS 9740 2.97 2.68 3.10 80 RCVD_IN_VALIDITY_CERTIFIED 9621 2.68 1.78 3.06 81 MAILING_LIST_MULTI 9471 2.72 2.04 3.02 82 RELAYCOUNTRY_META 9388 7.21 16.95 2.99 83 RCVD_IN_MSPIKE_H4 8961 2.59 1.97 2.85 84 RCVD_IN_IADB_SPF 8910 2.44 1.53 2.84 85 XM_B_SpammyTLD 8720 3.16 4.04 2.78 86 XM_Body_Dirty_Words 8540 3.86 6.48 2.72 87 RCVD_IN_IADB_SENDERID 8017 2.20 1.39 2.55 88 BAYES_999 7982 8.83 23.37 2.54 89 RCVD_IN_IADB_DK 7806 2.16 1.42 2.49 90 HTML_MIME_NO_HTML_TAG 7668 2.19 1.62 2.44 91 INVALID_MSGID 7474 1.74 0.27 2.38 92 MIME_HTML_ONLY_MULTI 7397 2.59 3.13 2.36 93 HTML_IMAGE_RATIO_08 7357 2.39 2.50 2.34 94 TooManyTo_002 6974 1.76 0.70 2.22 95 BAYES_05 6907 1.75 0.71 2.20 96 XMDiploma_00 6854 2.42 2.98 2.18 97 TR_XM_DKIM_Undo 6528 10.02 28.38 2.08 98 MSGID_NOFQDN1 6369 1.42 0.02 2.03 99 XM_B_URI_Unicode 6334 2.16 2.50 2.02 100 TO_MALFORMED 6312 1.42 0.06 2.01 101 BAYES_95 6296 3.19 5.93 2.00 102 RCVD_IN_IADB_VOUCHED 6227 1.64 0.86 1.98 103 XM_CamelCaseFrm001 5932 2.33 3.36 1.89 104 TR_XM_PhishingBody 5901 2.58 4.21 1.88 105 DKIM_INVALID 5720 2.71 4.76 1.82 106 XM_DK_Undo_01 5375 1.69 1.64 1.71 107 TM2_M_URI_OPT_OUT 5290 2.03 2.82 1.68 108 TR_XM_SpammyRelay 5044 4.82 12.23 1.61 109 TR_XM_UnparsRelay 5030 4.11 9.90 1.60 110 MIME_CHARSET_FARAWAY 4925 1.45 1.17 1.57 111 T_XMDrugObfuBody_14 4797 2.37 4.31 1.53 112 T_XMDrugObfuBody_08 4717 2.02 3.22 1.50 113 CHARSET_FARAWAY_HEADER 4645 1.32 0.94 1.48 114 XM_SendGrid 4423 1.46 1.59 1.41 115 TR_DCC_Bayes_99 4396 7.33 21.05 1.40 116 BOTNET 4385 4.16 10.54 1.40 117 XMGappySubj_01 4343 1.02 0.17 1.38 118 RCVD_IN_IADB_OPTIN 4331 1.13 0.57 1.38 119 TR_Symld_Words 4302 1.47 1.69 1.37 120 UNTRUSTED_Relay 4285 3.04 6.91 1.36 121 T_TooManySym_03 4264 1.01 0.20 1.36 122 TooManyTo_003 4211 1.12 0.62 1.34 123 XM_B_Investor 4200 2.50 5.18 1.34 124 FROM_EXCESS_BASE64 4186 1.76 2.74 1.33 125 IN_HORDE_ADDRESS_BOOK 4137 0.94 0.08 1.32 126 XM_B_Unsub2 4121 1.93 3.35 1.31 127 SUBJ_ALL_CAPS 4110 1.60 2.28 1.31 128 XMGenDplmaNmb 4057 1.44 1.78 1.29 129 XM_SPF_SoftFail 4007 1.85 3.17 1.28 130 TVD_RCVD_IP 3928 1.15 0.92 1.25 131 TR_XM_SpammyWords5 3771 1.95 3.68 1.20 132 URI_NOVOWEL 3768 1.23 1.31 1.20 133 XMStockSpam_06 3689 1.46 2.13 1.17 134 XM_GoogleGroups 3682 1.08 0.87 1.17 135 HELO_NODOT 3668 0.86 0.16 1.17 136 HELO_NO_DOMAIN 3666 0.86 0.15 1.17 137 RCVD_IN_MSPIKE_BL 3573 2.62 6.05 1.14 138 TR_XM_MSPIKECOMBO 3572 2.62 6.04 1.14 139 URI_HEX 3528 1.25 1.55 1.12 140 XMSexyCombo_05 3401 2.09 4.42 1.08 141 TooManyTo_004 3232 0.87 0.51 1.03 142 FROM_GOV_DKIM_AU 3182 0.78 0.23 1.01 143 TR_XM_DK_SendGrid 3034 0.97 0.98 0.97 144 XMCapTrack 3027 0.87 0.65 0.96 145 RCVD_IN_MSPIKE_L3 3018 1.64 3.22 0.96 146 XMBrknScrpt_02 3006 1.27 2.00 0.96 147 T_XMDrugObfuBody_00 2887 1.14 1.66 0.92 148 TVD_SPACE_RATIO 2872 0.67 0.09 0.91 149 XM_UB50 2741 1.43 2.71 0.87 150 XM_ShortIntro_01 2709 0.83 0.77 0.86 151 XMPhish30 2610 1.05 1.57 0.83 152 XM_OfRef6 2606 1.52 3.11 0.83 153 TooManyTo_005 2568 0.71 0.46 0.82 154 XMBSHREFv2 2510 0.70 0.46 0.80 155 T_FILL_THIS_FORM_SHORT 2422 1.18 2.14 0.77 156 XM_H_Long_From02 2379 0.93 1.34 0.76 157 DKIM_ADSP_CUSTOM_MED 2288 0.84 1.09 0.73 158 TR_XM_Base64_M1 2284 0.87 1.20 0.73 159 TR_MetaPhish_Combo_01 2195 0.80 1.03 0.70 160 T_TVD_MIME_NO_HEADERS 2151 0.49 0.02 0.68 161 XM_B_COPY_HTML 2145 0.83 1.18 0.68 162 THIS_AD 2121 0.87 1.31 0.68 163 XM_H_PHPMailer 2108 0.63 0.52 0.67 164 RCVD_IN_BL_SPAMCOP_NET 2068 3.61 10.44 0.66 165 SpammyFromTLD_02 2053 1.09 2.10 0.65 166 RELAYCOUNTRY_CA 2052 2.40 6.42 0.65 167 HTTPS_HTTP_MISMATCH 1999 0.79 1.13 0.64 168 T_Symld_Words_02 1996 0.85 1.36 0.64 169 RCVD_IN_PBL 1981 0.71 0.89 0.63 170 TR_XM_SpammyWords3 1943 1.77 4.43 0.62 171 XMGappySubj_02 1890 0.43 0.04 0.60 172 MPART_ALT_DIFF_COUNT 1889 1.06 2.12 0.60 173 URI_TRY_3LD 1853 0.89 1.58 0.59 174 XMSlimDrugH 1845 0.75 1.11 0.59 175 SpammyFromTLD_01 1841 0.93 1.72 0.59 176 XMNoVowels 1835 0.58 0.57 0.58 177 RELAYCOUNTRY_AU 1816 1.23 2.75 0.58 178 XM_B_SpammyWords4 1752 1.14 2.49 0.56 179 XM_ProductURIs 1694 0.81 1.43 0.54 180 T_OBFU_PDF_ATTACH 1679 0.43 0.19 0.53 181 T_XMHurry_00 1633 0.96 1.97 0.52 182 TO_NO_BRKTS_HTML_ONLY 1605 0.42 0.22 0.51 183 HTML_TAG_BALANCE_BODY 1592 0.58 0.75 0.51 184 HTML_IMAGE_ONLY_20 1561 0.61 0.86 0.50 185 RCVD_IN_PSBL 1549 0.76 1.37 0.49 186 RELAYCOUNTRY_GB 1540 0.55 0.69 0.49 187 TR_XM_SpammyWords2 1515 3.31 9.84 0.48 188 FORGED_GMAIL_RCVD 1471 0.59 0.86 0.47 189 MSGID_FROM_MTA_HEADER 1451 0.40 0.27 0.46 190 XMHTML_After_End 1376 0.55 0.80 0.44 191 T_TooManySym_04 1351 0.31 0.04 0.43 192 TR_XM_GMP_MSPIKE_UNDO2 1338 0.36 0.21 0.43 193 XMPhish14 1315 0.50 0.70 0.42 194 XMLngstWrd_00 1261 0.58 0.99 0.40 195 NML_ADSP_CUSTOM_MED 1257 0.52 0.81 0.40 196 XMBody_95 1254 0.36 0.28 0.40 197 PLING_QUERY 1249 0.49 0.72 0.40 198 ONE_TIME 1236 0.31 0.12 0.39 199 XM_B_Phish66 1223 0.66 1.28 0.39 200 XMSubMetaSxObfu_03 1203 0.46 0.65 0.38 ----------------------------------------------------------------------