Email: 428910 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.35 sec Spam: 134335 Autolearn: 0 AvgScore: 14.49 AvgScanTime: 1.55 sec Ham: 294575 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 1.26 sec Time Spent Running SA: 160.96 hours Time Spent Processing Spam: 57.98 hours Time Spent Processing Ham: 102.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127309 87.27 94.77 83.85 2 DKIM_SIGNED 122747 80.24 91.37 75.16 3 XM_DK_Pass 116969 77.99 87.07 73.85 4 DKIM_VALID 116097 77.10 86.42 72.85 5 XM_B_Unicode 114482 74.56 85.22 69.70 6 RELAYCOUNTRY_US 110098 80.12 81.96 79.28 7 DCC_CHECK 95285 47.60 70.93 36.95 8 XM_B_SpammyWords 94676 52.62 70.48 44.47 9 XMListUnsubscribeExists 93139 55.52 69.33 49.23 10 DKIM_VALID_AU 92482 62.68 68.84 59.87 11 XM_B_Unicode3 67827 44.27 50.49 41.44 12 LOC_TINY_FONT_1 66669 35.13 49.63 28.52 13 XM_DK_Undo_02 58209 17.22 43.33 5.31 14 XM_B_SpammyWords2 53723 25.25 39.99 18.53 15 BAYES_50 51526 52.50 38.36 58.96 16 HTML_FONT_LOW_CONTRAST 49753 30.09 37.04 26.92 17 FVGT_m_MULTI_ODD 47676 28.67 35.49 25.55 18 BAYES_99 43577 12.74 32.44 3.75 19 DKIM_VALID_EF 42913 30.25 31.94 29.47 20 TR_XM_DKIM_Undo 42233 11.41 31.44 2.28 21 T_KAM_HTML_FONT_INVALID 40588 25.02 30.21 22.65 22 DCC_CHECK_NEGATIVE 37268 51.96 27.74 63.00 23 MIME_HTML_ONLY 37175 21.81 27.67 19.14 24 XMSubLong 35058 23.78 26.10 22.72 25 BAYES_999 33404 9.72 24.87 2.81 26 XM_Multi_Part_URI 31462 17.17 23.42 14.31 27 TR_XM_DK_Unsub 30897 16.34 23.00 13.30 28 T_TM2_M_HEADER_IN_MSG 29311 26.18 21.82 28.18 29 TR_DCC_Bayes_99 28870 7.50 21.49 1.12 30 RCVD_IN_MSPIKE_H2 27367 16.77 20.37 15.13 31 UNPARSEABLE_RELAY 24862 13.90 18.51 11.80 32 XM_B_Unsub 24546 11.53 18.27 8.46 33 TR_XM_BayesUnsub 23529 10.01 17.52 6.58 34 RELAYCOUNTRY_META 23014 7.65 17.13 3.32 35 XM_B_SpammyWords3 20913 8.45 15.57 5.20 36 TR_MAX_INTL_RELAY 20683 9.09 15.40 6.21 37 LOTS_OF_MONEY 20503 9.07 15.26 6.25 38 TR_XM_SpammyWords4 18638 6.99 13.87 3.85 39 RCVD_IN_BL_SPAMCOP_NET 17207 4.41 12.81 0.58 40 TR_XM_SpammyRelay 16237 4.95 12.09 1.69 41 BOTNET_IPINHOSTNAME 15243 6.03 11.35 3.60 42 XM_Evil_Numbers_Gen 14604 8.91 10.87 8.02 43 RCVD_IN_MSPIKE_WL 14124 15.99 10.51 18.49 44 TR_XM_SpammyWords2 13956 3.60 10.39 0.50 45 TR_XM_UnparsRelay 13611 4.28 10.13 1.61 46 BAYES_80 12635 5.53 9.41 3.76 47 XM_B_Phish_Phrases 12219 6.31 9.10 5.04 48 BOTNET 11812 3.68 8.79 1.35 49 BAYES_60 11687 7.66 8.70 7.19 50 FSL_BULK_SIG 10278 7.66 7.65 7.66 51 MPART_ALT_DIFF 9897 5.47 7.37 4.60 52 XM_Body_Dirty_Words 9801 3.95 7.30 2.43 53 RELAYCOUNTRY_CA 9091 2.58 6.77 0.68 54 LotsOfNums_01 9065 7.83 6.75 8.32 55 UNTRUSTED_Relay 8951 3.17 6.66 1.58 56 XM_UncommonTLD01 8685 4.79 6.47 4.03 57 TR_XM_SPAMCOP 8662 2.14 6.45 0.18 58 HTML_IMAGE_RATIO_02 8492 5.12 6.32 4.58 59 XMSubMetaSx_00 8441 4.19 6.28 3.23 60 RCVD_IN_MSPIKE_H3 7995 7.60 5.95 8.35 61 XM_B_PhoneNumber 7656 7.59 5.70 8.46 62 BAYES_95 7406 3.41 5.51 2.45 63 T_XMDrugObfuBody_14 7306 2.98 5.44 1.86 64 XM_H_Long_From01 7276 5.49 5.42 5.53 65 MIME_HTML_MOSTLY 7253 3.23 5.40 2.24 66 HTML_IMAGE_RATIO_04 7128 4.45 5.31 4.05 67 RCVD_IN_MSPIKE_BL 7084 2.42 5.27 1.12 68 TR_XM_MSPIKECOMBO 7082 2.42 5.27 1.12 69 XM_B_Investor 6998 2.73 5.21 1.59 70 DKIM_INVALID 6650 3.14 4.95 2.31 71 XM_H_GMP 6594 5.59 4.91 5.91 72 TR_XM_PhishingBody 6200 2.50 4.62 1.54 73 XM_B_SpammyTLD 6039 3.42 4.50 2.93 74 XM_URI_RBL 5807 1.62 4.32 0.39 75 TooManyTo_001 5673 6.62 4.22 7.72 76 TM2_M_VERY_LONG_WORD 5566 2.68 4.14 2.02 77 XMSexyCombo_05 5507 2.09 4.10 1.17 78 XM_OfRef6 5451 1.96 4.06 1.00 79 TR_XM_SpammyWords3 5417 1.65 4.03 0.57 80 TR_XM_SpammyWords5 5270 2.30 3.92 1.55 81 XMStrtUSub 5217 4.51 3.88 4.79 82 XMNumbers 4993 3.55 3.72 3.48 83 RCVD_IN_MSPIKE_L3 4892 1.86 3.64 1.05 84 USER_IN_DEF_DKIM_WL 4824 10.01 3.59 12.94 85 T_XMDrugObfuBody_08 4400 1.93 3.28 1.31 86 HTML_IMAGE_RATIO_08 4348 2.63 3.24 2.36 87 XMDiploma_00 4253 2.31 3.17 1.92 88 MIME_QP_LONG_LINE 4186 4.73 3.12 5.46 89 XMStockSpam_06 4153 1.73 3.09 1.11 90 MIME_HTML_ONLY_MULTI 4119 2.79 3.07 2.67 91 HTML_IMAGE_RATIO_06 4052 2.99 3.02 2.97 92 XM_B_Unsub2 4048 1.85 3.01 1.32 93 XM_SPF_SoftFail 3817 1.68 2.84 1.15 94 T_TooManySym_01 3659 4.94 2.72 5.95 95 RELAYCOUNTRY_AU 3597 1.24 2.68 0.58 96 XM_CamelCaseFrm001 3572 2.38 2.66 2.25 97 T_FILL_THIS_FORM_SHORT 3456 1.55 2.57 1.08 98 XM_B_URI_Unicode 3435 2.22 2.56 2.06 99 TR_XM_INTL_Spamhaus 3393 0.90 2.53 0.16 100 XM_UB50 3370 1.50 2.51 1.04 101 XM_B_SpammyWords4 3339 1.22 2.49 0.64 102 RCVD_IN_MSPIKE_H5 3313 5.11 2.47 6.32 103 TR_XM_NoHeaderRelay 3288 0.87 2.45 0.15 104 SpammyFromTLD_02 3264 1.17 2.43 0.60 105 TM2_M_URI_OPT_OUT 3190 2.06 2.37 1.92 106 T_XMHurry_00 3186 1.27 2.37 0.77 107 FROM_EXCESS_BASE64 3179 1.62 2.37 1.28 108 RCVD_IN_VALIDITY_SAFE 3158 3.32 2.35 3.76 109 XMBody_17 3111 1.01 2.32 0.41 110 TR_XM_INV_DKIM 3101 0.73 2.31 0.02 111 RCVD_IN_XBL 2987 0.71 2.22 0.02 112 XM_ProductURIs 2965 1.37 2.21 0.99 113 RCVD_IN_SBL_CSS 2941 0.72 2.19 0.06 114 RCVD_IN_MSPIKE_H4 2816 3.28 2.10 3.82 115 MAILING_LIST_MULTI 2656 2.94 1.98 3.38 116 RCVD_IN_VALIDITY_CERTIFIED 2651 2.84 1.97 3.24 117 XMGenDplmaNmb 2646 1.16 1.97 0.79 118 KHOP_HELO_FCRDNS 2619 1.70 1.95 1.58 119 TR_XM_MSPIKECOMBO2 2537 0.65 1.89 0.08 120 TR_LOTS_OF_MONEY3 2520 1.10 1.88 0.75 121 XMPhish30 2452 0.92 1.83 0.51 122 SUBJ_ALL_CAPS 2426 1.66 1.81 1.59 123 XMBdyGiftCard01 2381 0.76 1.77 0.29 124 XMBrknScrpt_02 2367 1.13 1.76 0.85 125 MPART_ALT_DIFF_COUNT 2340 0.93 1.74 0.57 126 MultiRelay_CC 2335 0.63 1.74 0.12 127 T_XMDrugObfuBody_00 2326 1.22 1.73 0.98 128 URI_TRY_3LD 2300 0.85 1.71 0.46 129 XM_HighProb1 2267 0.53 1.69 0.00 130 DIET_1 2228 0.76 1.66 0.35 131 URI_HEX 2182 1.32 1.62 1.18 132 XMSubMetaI_00 2144 0.88 1.60 0.55 133 BAYES_40 2125 4.21 1.58 5.41 134 XM_DK_Undo_01 2101 1.70 1.56 1.77 135 T_REMOTE_IMAGE 2098 2.98 1.56 3.63 136 SpammyFromTLD_01 2077 0.94 1.55 0.66 137 TR_XM_MaxSPIKE 1990 0.52 1.48 0.07 138 RCVD_IN_IADB_LISTED 1976 2.81 1.47 3.42 139 RCVD_IN_PBL 1949 0.92 1.45 0.68 140 RCVD_IN_VALIDITY_RPBL 1913 0.47 1.42 0.03 141 URI_NOVOWEL 1835 1.21 1.37 1.15 142 BAYES_20 1801 5.30 1.34 7.11 143 XM_B_SEO 1790 0.59 1.33 0.24 144 HTML_MIME_NO_HTML_TAG 1752 2.26 1.30 2.69 145 XMBody_78 1748 0.64 1.30 0.34 146 SHORTCIRCUIT 1747 0.41 1.30 0.00 147 RCVD_IN_ZEN_LASTEXTERNAL 1747 0.41 1.30 0.00 148 XM_SendGrid 1713 1.34 1.28 1.38 149 TR_XM_RelayPhish 1700 0.44 1.27 0.07 150 XM_B_Phish66 1697 0.63 1.26 0.34 151 RCVD_IN_IADB_SPF 1672 2.49 1.24 3.06 152 XM_UB99 1663 0.39 1.24 0.00 153 XM_H_Long_From02 1649 0.88 1.23 0.73 154 RDNS_DYNAMIC 1636 0.49 1.22 0.16 155 BOTNET_NORDNS 1632 0.38 1.21 0.00 156 XM_UB60 1616 0.43 1.20 0.07 157 STY_INVIS_DIRECT 1609 0.66 1.20 0.41 158 SHOPIFY_IMG_NOT_RCVD_SFY 1604 0.57 1.19 0.28 159 RCVD_IN_PSBL 1594 0.78 1.19 0.59 160 LOW_PRICE 1579 0.56 1.18 0.27 161 HTTPS_HTTP_MISMATCH 1578 0.83 1.17 0.68 162 RCVD_IN_IADB_DK 1564 2.21 1.16 2.68 163 THIS_AD 1552 0.62 1.16 0.37 164 ALL_TRUSTED 1531 12.56 1.14 17.76 165 RCVD_IN_IADB_SENDERID 1530 2.25 1.14 2.75 166 TR_XM_Base64_M1 1523 0.84 1.13 0.70 167 XM_B_COPY_HTML 1487 0.98 1.11 0.93 168 RCVD_IN_MSPIKE_L4 1471 0.38 1.10 0.06 169 HTML_FONT_TINY_NORDNS 1460 0.40 1.09 0.08 170 TR_XM_SEO4 1455 0.41 1.08 0.11 171 RELAYCOUNTRY_FR 1454 0.62 1.08 0.40 172 TM2_M_OBFU_COMMENT 1412 0.59 1.05 0.38 173 TR_LOTS_OF_MONEY2 1391 0.49 1.04 0.24 174 T_MONEY_PERCENT 1391 0.49 1.04 0.24 175 XMPhish14 1387 0.64 1.03 0.47 176 TVD_RCVD_IP 1308 1.01 0.97 1.02 177 TR_XM_PHPForged 1304 0.50 0.97 0.29 178 TR_XM_FormFill2 1288 0.58 0.96 0.40 179 HTML_IMAGE_ONLY_20 1282 0.71 0.95 0.59 180 TR_XM_PHPDW 1279 0.50 0.95 0.29 181 XM_UB80 1263 0.30 0.94 0.01 182 TR_XM_InvalidRelay 1259 0.30 0.94 0.01 183 XM_OfRef7 1251 0.38 0.93 0.13 184 XM_H_PHPOS 1249 0.48 0.93 0.28 185 XM_B_DNDMA 1249 0.64 0.93 0.51 186 TR_XM_GMP_BULK_SIG 1247 0.40 0.93 0.15 187 LongTLD 1246 0.62 0.93 0.48 188 SH_BODYURI_REVERSE_SBL 1211 0.28 0.90 0.00 189 URIBL_SBL_A 1210 0.28 0.90 0.00 190 URIBL_SBL 1210 0.28 0.90 0.00 191 TR_Mismatch_TLD_02 1197 0.33 0.89 0.07 192 PLING_QUERY 1193 0.55 0.89 0.39 193 TM2_M_A_HREF_HREF 1191 0.50 0.89 0.33 194 XM_DIRTYINTL 1185 0.32 0.88 0.06 195 XMHTML_After_End 1168 0.57 0.87 0.43 196 XM_B_COVIDMETA 1157 0.37 0.86 0.15 197 DKIM_ADSP_CUSTOM_MED 1143 0.83 0.85 0.82 198 XMSlimDrugH 1132 0.60 0.84 0.49 199 HELO_DYNAMIC_SPLIT_IP 1126 0.27 0.84 0.01 200 TR_XM_DK_SendGrid 1118 0.88 0.83 0.90 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 246989 87.27 94.77 83.85 2 RELAYCOUNTRY_US 233530 80.12 81.96 79.28 3 DKIM_SIGNED 221409 80.24 91.37 75.16 4 XM_DK_Pass 217553 77.99 87.07 73.85 5 DKIM_VALID 214598 77.10 86.42 72.85 6 XM_B_Unicode 205319 74.56 85.22 69.70 7 DCC_CHECK_NEGATIVE 185587 51.96 27.74 63.00 8 DKIM_VALID_AU 176372 62.68 68.84 59.87 9 BAYES_50 173672 52.50 38.36 58.96 10 XMListUnsubscribeExists 145009 55.52 69.33 49.23 11 XM_B_SpammyWords 130996 52.62 70.48 44.47 12 XM_B_Unicode3 122065 44.27 50.49 41.44 13 DCC_CHECK 108855 47.60 70.93 36.95 14 DKIM_VALID_EF 86825 30.25 31.94 29.47 15 LOC_TINY_FONT_1 84011 35.13 49.63 28.52 16 T_TM2_M_HEADER_IN_MSG 82998 26.18 21.82 28.18 17 HTML_FONT_LOW_CONTRAST 79286 30.09 37.04 26.92 18 FVGT_m_MULTI_ODD 75278 28.67 35.49 25.55 19 XMSubLong 66924 23.78 26.10 22.72 20 T_KAM_HTML_FONT_INVALID 66729 25.02 30.21 22.65 21 MIME_HTML_ONLY 56377 21.81 27.67 19.14 22 XM_B_SpammyWords2 54584 25.25 39.99 18.53 23 RCVD_IN_MSPIKE_WL 54467 15.99 10.51 18.49 24 ALL_TRUSTED 52324 12.56 1.14 17.76 25 RCVD_IN_MSPIKE_H2 44565 16.77 20.37 15.13 26 XM_Multi_Part_URI 42163 17.17 23.42 14.31 27 TR_XM_DK_Unsub 39193 16.34 23.00 13.30 28 USER_IN_DEF_DKIM_WL 38119 10.01 3.59 12.94 29 UNPARSEABLE_RELAY 34749 13.90 18.51 11.80 30 BAYES_00 27616 6.63 0.60 9.37 31 XM_B_Unsub 24924 11.53 18.27 8.46 32 XM_B_PhoneNumber 24907 7.59 5.70 8.46 33 RCVD_IN_MSPIKE_H3 24586 7.60 5.95 8.35 34 LotsOfNums_01 24504 7.83 6.75 8.32 35 XM_Evil_Numbers_Gen 23628 8.91 10.87 8.02 36 BOUNCE_MESSAGE 23327 5.66 0.72 7.92 37 ANY_BOUNCE_MESSAGE 23327 5.66 0.72 7.92 38 TooManyTo_001 22742 6.62 4.22 7.72 39 FSL_BULK_SIG 22563 7.66 7.65 7.66 40 BAYES_60 21185 7.66 8.70 7.19 41 BAYES_20 20944 5.30 1.34 7.11 42 XM_DKIMWhitelistDomains 20613 4.82 0.03 7.00 43 TR_XM_DK_Bayes 20371 4.91 0.50 6.92 44 TR_XM_DK_Bayes1 20020 4.82 0.50 6.80 45 TR_XM_BayesUnsub 19385 10.01 17.52 6.58 46 RCVD_IN_MSPIKE_H5 18623 5.11 2.47 6.32 47 LOTS_OF_MONEY 18412 9.07 15.26 6.25 48 TR_MAX_INTL_RELAY 18305 9.09 15.40 6.21 49 T_TooManySym_01 17538 4.94 2.72 5.95 50 XM_H_GMP 17397 5.59 4.91 5.91 51 TR_XM_DK_Bayes2 16780 4.02 0.35 5.70 52 XM_H_Long_From01 16290 5.49 5.42 5.53 53 MIME_QP_LONG_LINE 16091 4.73 3.12 5.46 54 BAYES_40 15936 4.21 1.58 5.41 55 XM_DK_Undo_02 15641 17.22 43.33 5.31 56 XM_B_SpammyWords3 15325 8.45 15.57 5.20 57 XM_B_Phish_Phrases 14853 6.31 9.10 5.04 58 XMStrtUSub 14108 4.51 3.88 4.79 59 MPART_ALT_DIFF 13562 5.47 7.37 4.60 60 HTML_IMAGE_RATIO_02 13478 5.12 6.32 4.58 61 XM_PDF 12424 3.09 0.63 4.22 62 HTML_IMAGE_RATIO_04 11942 4.45 5.31 4.05 63 XM_UncommonTLD01 11872 4.79 6.47 4.03 64 TR_XM_SpammyWords4 11344 6.99 13.87 3.85 65 RCVD_IN_MSPIKE_H4 11258 3.28 2.10 3.82 66 RCVD_IN_VALIDITY_SAFE 11090 3.32 2.35 3.76 67 BAYES_80 11077 5.53 9.41 3.76 68 BAYES_99 11056 12.74 32.44 3.75 69 T_REMOTE_IMAGE 10694 2.98 1.56 3.63 70 BOTNET_IPINHOSTNAME 10607 6.03 11.35 3.60 71 XMNumbers 10251 3.55 3.72 3.48 72 RCVD_IN_IADB_LISTED 10082 2.81 1.47 3.42 73 MAILING_LIST_MULTI 9949 2.94 1.98 3.38 74 RELAYCOUNTRY_META 9788 7.65 17.13 3.32 75 RCVD_IN_VALIDITY_CERTIFIED 9539 2.84 1.97 3.24 76 XMSubMetaSx_00 9510 4.19 6.28 3.23 77 T_TooManySym_02 9434 2.39 0.60 3.20 78 RCVD_IN_IADB_SPF 9013 2.49 1.24 3.06 79 HTML_IMAGE_RATIO_06 8751 2.99 3.02 2.97 80 XM_B_SpammyTLD 8630 3.42 4.50 2.93 81 BAYES_999 8290 9.72 24.87 2.81 82 RCVD_IN_IADB_SENDERID 8112 2.25 1.14 2.75 83 HTML_MIME_NO_HTML_TAG 7922 2.26 1.30 2.69 84 RCVD_IN_IADB_DK 7896 2.21 1.16 2.68 85 MIME_HTML_ONLY_MULTI 7855 2.79 3.07 2.67 86 INVALID_MSGID 7406 1.82 0.30 2.51 87 BAYES_95 7226 3.41 5.51 2.45 88 XM_Body_Dirty_Words 7162 3.95 7.30 2.43 89 HTML_IMAGE_RATIO_08 6944 2.63 3.24 2.36 90 TooManyTo_002 6886 1.78 0.57 2.34 91 DKIM_INVALID 6811 3.14 4.95 2.31 92 TR_XM_DKIM_Undo 6721 11.41 31.44 2.28 93 XM_CamelCaseFrm001 6615 2.38 2.66 2.25 94 MIME_HTML_MOSTLY 6590 3.23 5.40 2.24 95 RCVD_IN_IADB_VOUCHED 6451 1.75 0.78 2.19 96 TO_MALFORMED 6347 1.48 0.02 2.15 97 MSGID_NOFQDN1 6213 1.46 0.03 2.11 98 XM_B_URI_Unicode 6075 2.22 2.56 2.06 99 TM2_M_VERY_LONG_WORD 5946 2.68 4.14 2.02 100 BAYES_05 5861 1.60 0.76 1.99 101 XMDiploma_00 5663 2.31 3.17 1.92 102 TM2_M_URI_OPT_OUT 5654 2.06 2.37 1.92 103 T_XMDrugObfuBody_14 5484 2.98 5.44 1.86 104 XM_DK_Undo_01 5208 1.70 1.56 1.77 105 TR_XM_SpammyRelay 4993 4.95 12.09 1.69 106 TR_XM_UnparsRelay 4734 4.28 10.13 1.61 107 SUBJ_ALL_CAPS 4693 1.66 1.81 1.59 108 XM_B_Investor 4692 2.73 5.21 1.59 109 KHOP_HELO_FCRDNS 4665 1.70 1.95 1.58 110 UNTRUSTED_Relay 4650 3.17 6.66 1.58 111 TooManyTo_003 4622 1.23 0.48 1.57 112 TR_XM_SpammyWords5 4577 2.30 3.92 1.55 113 RCVD_IN_IADB_OPTIN 4573 1.22 0.50 1.55 114 TR_Symld_Words 4538 1.31 0.79 1.54 115 TR_XM_PhishingBody 4537 2.50 4.62 1.54 116 IN_HORDE_ADDRESS_BOOK 4311 1.03 0.09 1.46 117 XM_SendGrid 4053 1.34 1.28 1.38 118 XM_GoogleGroups 4052 1.19 0.79 1.38 119 XMGappySubj_01 4031 0.99 0.17 1.37 120 T_TooManySym_03 4013 0.99 0.16 1.36 121 BOTNET 3976 3.68 8.79 1.35 122 XM_B_Unsub2 3897 1.85 3.01 1.32 123 T_XMDrugObfuBody_08 3868 1.93 3.28 1.31 124 FROM_EXCESS_BASE64 3767 1.62 2.37 1.28 125 URI_HEX 3464 1.32 1.62 1.18 126 XMSexyCombo_05 3438 2.09 4.10 1.17 127 XM_SPF_SoftFail 3385 1.68 2.84 1.15 128 URI_NOVOWEL 3374 1.21 1.37 1.15 129 TooManyTo_004 3360 0.91 0.42 1.14 130 TR_DCC_Bayes_99 3307 7.50 21.49 1.12 131 RCVD_IN_MSPIKE_BL 3288 2.42 5.27 1.12 132 TR_XM_MSPIKECOMBO 3287 2.42 5.27 1.12 133 XMStockSpam_06 3277 1.73 3.09 1.11 134 T_FILL_THIS_FORM_SHORT 3172 1.55 2.57 1.08 135 RCVD_IN_MSPIKE_L3 3101 1.86 3.64 1.05 136 XM_UB50 3070 1.50 2.51 1.04 137 TVD_RCVD_IP 3016 1.01 0.97 1.02 138 HELO_NODOT 2963 0.74 0.16 1.01 139 HELO_NO_DOMAIN 2955 0.72 0.11 1.00 140 XM_OfRef6 2937 1.96 4.06 1.00 141 XM_ProductURIs 2927 1.37 2.21 0.99 142 T_XMDrugObfuBody_00 2894 1.22 1.73 0.98 143 XMCapTrack 2868 0.81 0.45 0.97 144 TVD_SPACE_RATIO 2807 0.69 0.11 0.95 145 XM_H_PHPMailer 2770 0.76 0.37 0.94 146 TooManyTo_005 2754 0.76 0.38 0.93 147 FROM_GOV_DKIM_AU 2744 0.74 0.33 0.93 148 XM_B_COPY_HTML 2731 0.98 1.11 0.93 149 TR_XM_DK_SendGrid 2643 0.88 0.83 0.90 150 XMBrknScrpt_02 2490 1.13 1.76 0.85 151 DKIM_ADSP_CUSTOM_MED 2424 0.83 0.85 0.82 152 TR_MetaPhish_Combo_01 2411 0.82 0.81 0.82 153 XM_ShortIntro_01 2386 0.70 0.46 0.81 154 XMGenDplmaNmb 2341 1.16 1.97 0.79 155 XMBSHREFv2 2318 0.66 0.40 0.79 156 T_TVD_MIME_NO_HEADERS 2290 0.55 0.05 0.78 157 T_XMHurry_00 2258 1.27 2.37 0.77 158 TR_LOTS_OF_MONEY3 2216 1.10 1.88 0.75 159 XM_H_Long_From02 2144 0.88 1.23 0.73 160 TR_XM_Base64_M1 2070 0.84 1.13 0.70 161 HTTPS_HTTP_MISMATCH 2000 0.83 1.17 0.68 162 RELAYCOUNTRY_CA 1992 2.58 6.77 0.68 163 RCVD_IN_PBL 1989 0.92 1.45 0.68 164 HTML_IMAGE_ONLY_32 1972 0.51 0.17 0.67 165 SpammyFromTLD_01 1945 0.94 1.55 0.66 166 HTML_TAG_BALANCE_BODY 1927 0.66 0.66 0.65 167 XM_B_SpammyWords4 1898 1.22 2.49 0.64 168 XMNoVowels 1823 0.58 0.50 0.62 169 SpammyFromTLD_02 1763 1.17 2.43 0.60 170 TO_NO_BRKTS_HTML_ONLY 1760 0.45 0.13 0.60 171 HTML_IMAGE_ONLY_20 1745 0.71 0.95 0.59 172 RCVD_IN_PSBL 1743 0.78 1.19 0.59 173 RELAYCOUNTRY_AU 1708 1.24 2.68 0.58 174 RCVD_IN_BL_SPAMCOP_NET 1705 4.41 12.81 0.58 175 T_Symld_Words_02 1704 0.63 0.75 0.58 176 TR_XM_SpammyWords3 1678 1.65 4.03 0.57 177 MPART_ALT_DIFF_COUNT 1665 0.93 1.74 0.57 178 RELAYCOUNTRY_GB 1640 0.61 0.72 0.56 179 XMSubMetaI_00 1627 0.88 1.60 0.55 180 XMGappySubj_02 1611 0.39 0.05 0.55 181 MSGID_FROM_MTA_HEADER 1511 0.44 0.28 0.51 182 XMPhish30 1508 0.92 1.83 0.51 183 XM_B_DNDMA 1493 0.64 0.93 0.51 184 FORGED_GMAIL_RCVD 1479 0.54 0.62 0.50 185 TR_XM_SpammyWords2 1467 3.60 10.39 0.50 186 XMSlimDrugH 1429 0.60 0.84 0.49 187 T_OBFU_PDF_ATTACH 1422 0.36 0.09 0.48 188 LongTLD 1404 0.62 0.93 0.48 189 NML_ADSP_CUSTOM_MED 1396 0.54 0.69 0.47 190 HTML_FONT_FACE_BAD 1382 0.50 0.58 0.47 191 XMPhish14 1378 0.64 1.03 0.47 192 TR_XM_GMP_MSPIKE_UNDO2 1370 0.38 0.20 0.47 193 URI_TRY_3LD 1341 0.85 1.71 0.46 194 XMMoneyMeta_00 1317 0.51 0.64 0.45 195 XMHTML_After_End 1261 0.57 0.87 0.43 196 XMBody_95 1221 0.32 0.10 0.41 197 STY_INVIS_DIRECT 1220 0.66 1.20 0.41 198 XMBody_17 1218 1.01 2.32 0.41 199 RELAYCOUNTRY_FR 1191 0.62 1.08 0.40 200 TR_XM_FormFill2 1188 0.58 0.96 0.40 ----------------------------------------------------------------------