Email: 305136 Autolearn: 0 AvgScore: 4.51 AvgScanTime: 1.40 sec Spam: 84562 Autolearn: 0 AvgScore: 13.76 AvgScanTime: 1.63 sec Ham: 220574 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.31 sec Time Spent Running SA: 118.48 hours Time Spent Processing Spam: 38.32 hours Time Spent Processing Ham: 80.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 80749 86.13 95.49 82.55 2 DKIM_SIGNED 78043 69.91 92.29 61.33 3 XM_DK_Pass 74399 68.28 87.98 60.73 4 DKIM_VALID 73935 67.81 87.43 60.29 5 XM_B_Unicode 72353 71.28 85.56 65.81 6 RELAYCOUNTRY_US 70225 80.41 83.05 79.40 7 DCC_CHECK 62946 46.25 74.44 35.44 8 DKIM_VALID_AU 59946 57.30 70.89 52.09 9 XMListUnsubscribeExists 59671 49.32 70.56 41.18 10 XM_B_SpammyWords 58550 51.65 69.24 44.90 11 XM_B_Unicode3 46277 48.51 54.73 46.13 12 LOC_TINY_FONT_1 44293 34.23 52.38 27.27 13 XM_DK_Undo_02 38265 15.90 45.25 4.65 14 XM_B_SpammyWords2 35832 25.88 42.37 19.56 15 HTML_FONT_LOW_CONTRAST 31052 38.79 36.72 39.59 16 BAYES_50 30730 54.35 36.34 61.26 17 FVGT_m_MULTI_ODD 30010 28.06 35.49 25.21 18 BAYES_99 29236 12.32 34.57 3.79 19 TR_XM_DKIM_Undo 27020 10.22 31.95 1.89 20 DKIM_VALID_EF 24497 25.49 28.97 24.16 21 T_KAM_HTML_FONT_INVALID 24145 20.27 28.55 17.09 22 BAYES_999 22720 9.60 26.87 2.98 23 MIME_HTML_ONLY 21609 20.11 25.55 18.02 24 DCC_CHECK_NEGATIVE 21153 53.58 25.01 64.53 25 TR_DCC_Bayes_99 21046 8.02 24.89 1.56 26 XM_Multi_Part_URI 19372 16.41 22.91 13.92 27 XMSubLong 18860 22.29 22.30 22.29 28 TR_XM_DK_Unsub 18567 14.12 21.96 11.12 29 RCVD_IN_MSPIKE_H2 18525 14.91 21.91 12.22 30 T_TM2_M_HEADER_IN_MSG 17125 28.37 20.25 31.48 31 UNPARSEABLE_RELAY 16293 13.43 19.27 11.19 32 XM_B_Unsub 15702 10.56 18.57 7.49 33 TR_XM_BayesUnsub 15189 9.41 17.96 6.13 34 XM_B_SpammyWords3 14725 8.98 17.41 5.75 35 RELAYCOUNTRY_META 13654 5.98 16.15 2.08 36 TR_MAX_INTL_RELAY 13482 8.30 15.94 5.38 37 RCVD_IN_BL_SPAMCOP_NET 11558 4.15 13.67 0.50 38 TR_XM_SpammyWords2 11046 4.04 13.06 0.58 39 TR_XM_SpammyRelay 10046 4.01 11.88 0.99 40 RCVD_IN_MSPIKE_WL 9496 13.89 11.23 14.91 41 TR_XM_UnparsRelay 8879 3.88 10.50 1.34 42 BOTNET_IPINHOSTNAME 8727 5.04 10.32 3.02 43 BAYES_80 8166 5.07 9.66 3.31 44 XM_Evil_Numbers_Gen 7844 12.58 9.28 13.85 45 LOTS_OF_MONEY 7812 5.27 9.24 3.75 46 BAYES_60 7758 6.78 9.17 5.86 47 BOTNET 7452 2.96 8.81 0.72 48 TR_XM_SpammyWords4 6985 4.16 8.26 2.58 49 FSL_BULK_SIG 6806 7.36 8.05 7.09 50 TR_XM_SPAMCOP 6738 2.30 7.97 0.13 51 XMSubMetaSx_00 6421 4.32 7.59 3.07 52 XM_B_Phish_Phrases 6108 4.67 7.22 3.69 53 RCVD_IN_MSPIKE_BL 6040 2.40 7.14 0.59 54 TR_XM_MSPIKECOMBO 6040 2.40 7.14 0.59 55 HTML_IMAGE_RATIO_02 5768 4.75 6.82 3.96 56 RELAYCOUNTRY_CA 5713 2.27 6.76 0.55 57 MPART_ALT_DIFF 5477 4.81 6.48 4.17 58 XM_Body_Dirty_Words 5115 3.05 6.05 1.90 59 UNTRUSTED_Relay 5073 2.56 6.00 1.25 60 BAYES_95 4967 3.12 5.87 2.06 61 XM_H_GMP 4878 5.32 5.77 5.15 62 LotsOfNums_01 4867 9.55 5.76 11.01 63 XM_UncommonTLD01 4777 5.21 5.65 5.04 64 XM_H_Long_From01 4689 4.59 5.55 4.22 65 XMStrtUSub 4580 6.36 5.42 6.73 66 TM2_M_VERY_LONG_WORD 4355 12.45 5.15 15.24 67 TR_XM_PhishingBody 4271 2.37 5.05 1.35 68 RCVD_IN_MSPIKE_H3 4248 6.11 5.02 6.53 69 T_XMDrugObfuBody_14 4204 2.86 4.97 2.05 70 TR_XM_SpammyWords3 4182 1.61 4.95 0.33 71 DKIM_INVALID 4108 2.10 4.86 1.04 72 XM_B_PhoneNumber 3950 5.06 4.67 5.21 73 MIME_HTML_MOSTLY 3907 3.09 4.62 2.50 74 HTML_IMAGE_RATIO_04 3663 3.80 4.33 3.59 75 XM_CamelCaseFrm001 3593 2.35 4.25 1.62 76 XMSexyCombo_05 3553 2.06 4.20 1.24 77 XM_B_Investor 3524 1.92 4.17 1.06 78 RCVD_IN_MSPIKE_L3 3446 1.50 4.08 0.51 79 TooManyTo_001 3390 4.45 4.01 4.62 80 XM_B_SpammyTLD 3262 2.59 3.86 2.10 81 RCVD_IN_MSPIKE_H5 2984 4.56 3.53 4.96 82 XM_OfRef6 2905 1.39 3.44 0.61 83 USER_IN_DEF_DKIM_WL 2824 11.61 3.34 14.79 84 XM_URI_RBL 2735 1.23 3.23 0.47 85 TR_XM_SpammyWords5 2634 1.60 3.11 1.02 86 T_XMDrugObfuBody_08 2552 1.44 3.02 0.83 87 XM_B_Unsub2 2550 1.52 3.02 0.95 88 XMNumbers 2549 3.71 3.01 3.98 89 TR_XM_NoHeaderRelay 2440 0.88 2.89 0.11 90 RCVD_IN_VALIDITY_SAFE 2378 3.98 2.81 4.43 91 RELAYCOUNTRY_AU 2358 1.01 2.79 0.33 92 XM_SPF_SoftFail 2355 1.38 2.78 0.84 93 MIME_HTML_ONLY_MULTI 2344 2.19 2.77 1.96 94 RCVD_IN_MSPIKE_H4 2264 3.21 2.68 3.42 95 XM_B_SpammyWords4 2246 1.33 2.66 0.83 96 HTML_IMAGE_RATIO_08 2216 2.16 2.62 1.98 97 HTML_IMAGE_RATIO_06 2196 2.43 2.60 2.37 98 TR_XM_INV_DKIM 2181 0.72 2.58 0.01 99 STY_INVIS_DIRECT 2116 1.07 2.50 0.52 100 XMBody_17 2102 0.90 2.49 0.29 101 XM_UB50 2096 1.21 2.48 0.72 102 XMDiploma_00 2090 1.78 2.47 1.51 103 XMBdyGiftCard01 2034 1.38 2.41 0.99 104 XMPhish30 2030 1.01 2.40 0.48 105 T_TooManySym_01 1985 5.53 2.35 6.75 106 T_XMHurry_00 1957 1.30 2.31 0.92 107 FROM_EXCESS_BASE64 1950 1.81 2.31 1.62 108 SUBJ_ALL_CAPS 1933 1.17 2.29 0.74 109 TR_XM_MSPIKECOMBO2 1863 0.63 2.20 0.03 110 XM_B_URI_Unicode 1798 1.66 2.13 1.48 111 SpammyFromTLD_02 1785 0.69 2.11 0.15 112 RCVD_IN_VALIDITY_RPBL 1770 0.58 2.09 0.01 113 RCVD_IN_VALIDITY_CERTIFIED 1695 3.26 2.00 3.74 114 MIME_QP_LONG_LINE 1692 2.53 2.00 2.73 115 RCVD_IN_MSPIKE_L4 1672 0.60 1.98 0.07 116 DIET_1 1634 0.79 1.93 0.36 117 XMBrknScrpt_02 1631 1.16 1.93 0.87 118 KHOP_HELO_FCRDNS 1608 6.82 1.90 8.70 119 MAILING_LIST_MULTI 1557 1.69 1.84 1.63 120 T_REMOTE_IMAGE 1531 2.98 1.81 3.43 121 TM2_M_URI_OPT_OUT 1515 1.65 1.79 1.59 122 URI_HEX 1491 1.06 1.76 0.79 123 SHOPIFY_IMG_NOT_RCVD_SFY 1460 0.70 1.73 0.31 124 XMStockSpam_06 1445 1.47 1.71 1.38 125 T_FILL_THIS_FORM_SHORT 1440 0.98 1.70 0.70 126 TR_XM_INTL_Spamhaus 1439 0.56 1.70 0.12 127 RDNS_DYNAMIC 1430 0.61 1.69 0.19 128 RCVD_IN_XBL 1366 0.47 1.62 0.03 129 SpammyFromTLD_01 1351 0.65 1.60 0.28 130 XMClaimOffer 1350 0.49 1.60 0.07 131 MPART_ALT_DIFF_COUNT 1349 0.96 1.60 0.71 132 TVD_RCVD_IP 1301 1.39 1.54 1.33 133 THIS_AD 1267 0.62 1.50 0.29 134 XM_B_COPY_HTML 1258 0.97 1.49 0.77 135 HTML_FONT_TINY_NORDNS 1257 0.43 1.49 0.03 136 XM_SendGrid 1247 1.30 1.47 1.23 137 BAYES_40 1180 4.71 1.40 5.98 138 RCVD_IN_SBL_CSS 1179 0.39 1.39 0.01 139 HTML_IMAGE_ONLY_20 1173 0.69 1.39 0.42 140 HTML_MIME_NO_HTML_TAG 1168 2.22 1.38 2.54 141 TR_XM_MaxSPIKE 1162 0.40 1.37 0.02 142 ALL_TRUSTED 1150 13.72 1.36 18.45 143 URI_NOVOWEL 1135 1.19 1.34 1.14 144 HELO_DYNAMIC_SPLIT_IP 1124 0.38 1.33 0.01 145 ANY_BOUNCE_MESSAGE 1086 16.25 1.28 21.99 146 BOUNCE_MESSAGE 1084 16.25 1.28 21.99 147 BOTNET_NORDNS 1081 0.36 1.28 0.00 148 TR_XM_PHPForged 1079 0.56 1.28 0.28 149 TR_XM_PHPDW 1077 0.56 1.27 0.29 150 XM_HighProb1 1063 0.35 1.26 0.00 151 TR_XM_FormFill2 1055 0.55 1.25 0.28 152 XM_B_REG_HTML 1041 0.50 1.23 0.22 153 XM_H_PHPOS 1037 0.54 1.23 0.27 154 T_XMDrugObfuBody_00 1036 0.93 1.23 0.82 155 HTML_TAG_BALANCE_BODY 1029 0.93 1.22 0.82 156 DKIM_ADSP_NXDOMAIN 1007 0.61 1.19 0.39 157 BAYES_20 993 5.56 1.17 7.24 158 TR_XM_DK_SendGrid 991 1.02 1.17 0.97 159 RCVD_IN_PBL 990 0.73 1.17 0.57 160 XM_ProductURIs 988 0.68 1.17 0.50 161 PLING_QUERY 986 0.52 1.17 0.27 162 XMSexyCombo_01 976 0.43 1.15 0.15 163 XMReplyNow 975 0.46 1.15 0.19 164 MultiRelay_CC 960 0.36 1.14 0.06 165 XM_UB99 942 0.31 1.11 0.00 166 XM_B_Phish66 930 0.48 1.10 0.24 167 XMBody_78 927 0.54 1.10 0.33 168 XMSubMetaI_00 924 0.52 1.09 0.30 169 RCVD_IN_MSPIKE_L5 922 0.31 1.09 0.00 170 TR_LOTS_OF_MONEY3 914 0.39 1.08 0.13 171 RCVD_IN_PSBL 905 0.62 1.07 0.44 172 XM_DK_Undo_01 903 1.09 1.07 1.10 173 XMGenDplmaNmb 893 0.99 1.06 0.96 174 XMPhish14 890 0.47 1.05 0.24 175 XM_H_Long_From02 880 0.64 1.04 0.49 176 TR_Mismatch_TLD_01 873 0.43 1.03 0.19 177 XM_DIRTYINTL 848 0.31 1.00 0.04 178 RCVD_IN_IADB_LISTED 837 1.71 0.99 1.98 179 TR_XM_Base64_M1 827 0.71 0.98 0.61 180 TR_XM_Base64_L1 820 0.32 0.97 0.07 181 XM_B_DNDMA 813 0.54 0.96 0.38 182 TR_XM_GMP_BULK_SIG 804 0.30 0.95 0.05 183 DKIM_ADSP_CUSTOM_MED 779 0.67 0.92 0.57 184 URIBL_SBL 772 0.25 0.91 0.00 185 URIBL_SBL_A 772 0.25 0.91 0.00 186 SH_BODYURI_REVERSE_SBL 769 0.25 0.91 0.00 187 TR_XM_Spammywords 758 0.33 0.90 0.11 188 XM_S_SpammyWords 758 0.33 0.90 0.11 189 RELAYCOUNTRY_FR 742 0.43 0.88 0.25 190 TR_Mismatch_TLD_02 741 0.30 0.88 0.08 191 XM_B_SEO 735 0.33 0.87 0.12 192 TR_XM_InvalidRelay 729 0.24 0.86 0.00 193 XM_UB60 718 0.28 0.85 0.06 194 XMSlimDrugH 708 0.72 0.84 0.68 195 URI_TRY_3LD 704 0.51 0.83 0.39 196 RCVD_IN_IADB_SPF 700 1.51 0.83 1.77 197 HTML_FONT_FACE_BAD 698 0.47 0.83 0.33 198 TR_Symld_Words 696 0.80 0.82 0.79 199 TM2_M_OBFU_COMMENT 692 0.51 0.82 0.39 200 TR_XM_RelayPhish 677 0.25 0.80 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 182079 86.13 95.49 82.55 2 RELAYCOUNTRY_US 175135 80.41 83.05 79.40 3 XM_B_Unicode 145156 71.28 85.56 65.81 4 DCC_CHECK_NEGATIVE 142339 53.58 25.01 64.53 5 DKIM_SIGNED 135274 69.91 92.29 61.33 6 BAYES_50 135125 54.35 36.34 61.26 7 XM_DK_Pass 133956 68.28 87.98 60.73 8 DKIM_VALID 132989 67.81 87.43 60.29 9 DKIM_VALID_AU 114905 57.30 70.89 52.09 10 XM_B_Unicode3 101741 48.51 54.73 46.13 11 XM_B_SpammyWords 99044 51.65 69.24 44.90 12 XMListUnsubscribeExists 90832 49.32 70.56 41.18 13 HTML_FONT_LOW_CONTRAST 87323 38.79 36.72 39.59 14 DCC_CHECK 78170 46.25 74.44 35.44 15 T_TM2_M_HEADER_IN_MSG 69440 28.37 20.25 31.48 16 LOC_TINY_FONT_1 60157 34.23 52.38 27.27 17 FVGT_m_MULTI_ODD 55605 28.06 35.49 25.21 18 DKIM_VALID_EF 53297 25.49 28.97 24.16 19 XMSubLong 49162 22.29 22.30 22.29 20 BOUNCE_MESSAGE 48503 16.25 1.28 21.99 21 ANY_BOUNCE_MESSAGE 48503 16.25 1.28 21.99 22 XM_B_SpammyWords2 43137 25.88 42.37 19.56 23 ALL_TRUSTED 40702 13.72 1.36 18.45 24 MIME_HTML_ONLY 39748 20.11 25.55 18.02 25 T_KAM_HTML_FONT_INVALID 37698 20.27 28.55 17.09 26 TM2_M_VERY_LONG_WORD 33623 12.45 5.15 15.24 27 RCVD_IN_MSPIKE_WL 32884 13.89 11.23 14.91 28 USER_IN_DEF_DKIM_WL 32617 11.61 3.34 14.79 29 XM_Multi_Part_URI 30713 16.41 22.91 13.92 30 XM_Evil_Numbers_Gen 30550 12.58 9.28 13.85 31 RCVD_IN_MSPIKE_H2 26964 14.91 21.91 12.22 32 UNPARSEABLE_RELAY 24690 13.43 19.27 11.19 33 TR_XM_DK_Unsub 24526 14.12 21.96 11.12 34 LotsOfNums_01 24275 9.55 5.76 11.01 35 KHOP_HELO_FCRDNS 19189 6.82 1.90 8.70 36 BAYES_00 17514 5.92 0.65 7.94 37 XM_B_Unsub 16527 10.56 18.57 7.49 38 BAYES_20 15973 5.56 1.17 7.24 39 XM_DKIMWhitelistDomains 15650 5.13 0.02 7.10 40 FSL_BULK_SIG 15646 7.36 8.05 7.09 41 MIME_CHARSET_FARAWAY 15081 5.06 0.43 6.84 42 CHARSET_FARAWAY_HEADER 14886 4.96 0.31 6.75 43 T_TooManySym_01 14882 5.53 2.35 6.75 44 XMStrtUSub 14836 6.36 5.42 6.73 45 RCVD_IN_MSPIKE_H3 14399 6.11 5.02 6.53 46 TR_XM_BayesUnsub 13512 9.41 17.96 6.13 47 TR_XM_DK_Bayes 13335 4.51 0.51 6.05 48 TR_XM_DK_Bayes1 13231 4.47 0.49 6.00 49 BAYES_40 13195 4.71 1.40 5.98 50 BAYES_60 12927 6.78 9.17 5.86 51 XM_B_SpammyWords3 12690 8.98 17.41 5.75 52 TR_XM_DK_Bayes2 12058 4.07 0.43 5.47 53 TR_MAX_INTL_RELAY 11858 8.30 15.94 5.38 54 XM_B_PhoneNumber 11486 5.06 4.67 5.21 55 XM_H_GMP 11351 5.32 5.77 5.15 56 XM_UncommonTLD01 11127 5.21 5.65 5.04 57 RCVD_IN_MSPIKE_H5 10945 4.56 3.53 4.96 58 XM_DK_Undo_02 10260 15.90 45.25 4.65 59 TooManyTo_001 10190 4.45 4.01 4.62 60 RCVD_IN_VALIDITY_SAFE 9775 3.98 2.81 4.43 61 XM_PDF 9753 3.37 0.63 4.42 62 XM_H_Long_From01 9318 4.59 5.55 4.22 63 MPART_ALT_DIFF 9189 4.81 6.48 4.17 64 XMNumbers 8772 3.71 3.01 3.98 65 HTML_IMAGE_RATIO_02 8725 4.75 6.82 3.96 66 BAYES_99 8351 12.32 34.57 3.79 67 LOTS_OF_MONEY 8270 5.27 9.24 3.75 68 RCVD_IN_VALIDITY_CERTIFIED 8240 3.26 2.00 3.74 69 XM_B_Phish_Phrases 8140 4.67 7.22 3.69 70 HTML_IMAGE_RATIO_04 7926 3.80 4.33 3.59 71 T_TooManySym_02 7829 2.71 0.52 3.55 72 T_REMOTE_IMAGE 7570 2.98 1.81 3.43 73 RCVD_IN_MSPIKE_H4 7540 3.21 2.68 3.42 74 BAYES_80 7302 5.07 9.66 3.31 75 XMSubMetaSx_00 6762 4.32 7.59 3.07 76 BOTNET_IPINHOSTNAME 6661 5.04 10.32 3.02 77 INVALID_MSGID 6613 2.32 0.53 3.00 78 BAYES_999 6576 9.60 26.87 2.98 79 TO_MALFORMED 6345 2.08 0.01 2.88 80 MIME_QP_LONG_LINE 6018 2.53 2.00 2.73 81 T_TVD_MIME_NO_HEADERS 5969 1.97 0.05 2.71 82 MSGID_NOFQDN1 5923 2.00 0.22 2.69 83 TR_XM_SpammyWords4 5694 4.16 8.26 2.58 84 BAYES_05 5631 2.02 0.64 2.55 85 HTML_MIME_NO_HTML_TAG 5603 2.22 1.38 2.54 86 MIME_HTML_MOSTLY 5523 3.09 4.62 2.50 87 HTML_IMAGE_RATIO_06 5221 2.43 2.60 2.37 88 XM_B_SpammyTLD 4640 2.59 3.86 2.10 89 RELAYCOUNTRY_META 4592 5.98 16.15 2.08 90 BAYES_95 4554 3.12 5.87 2.06 91 T_XMDrugObfuBody_14 4517 2.86 4.97 2.05 92 HTML_IMAGE_RATIO_08 4378 2.16 2.62 1.98 93 RCVD_IN_IADB_LISTED 4377 1.71 0.99 1.98 94 MIME_HTML_ONLY_MULTI 4328 2.19 2.77 1.96 95 XM_Body_Dirty_Words 4189 3.05 6.05 1.90 96 TR_XM_DKIM_Undo 4178 10.22 31.95 1.89 97 HTML_IMAGE_ONLY_32 4108 1.41 0.23 1.86 98 RCVD_IN_IADB_SPF 3908 1.51 0.83 1.77 99 TVD_SPACE_RATIO 3667 1.23 0.10 1.66 100 MAILING_LIST_MULTI 3606 1.69 1.84 1.63 101 FROM_EXCESS_BASE64 3582 1.81 2.31 1.62 102 XM_CamelCaseFrm001 3568 2.35 4.25 1.62 103 RCVD_IN_IADB_SENDERID 3536 1.37 0.75 1.60 104 TM2_M_URI_OPT_OUT 3517 1.65 1.79 1.59 105 RCVD_IN_IADB_DK 3460 1.35 0.77 1.57 106 TR_DCC_Bayes_99 3436 8.02 24.89 1.56 107 XMDiploma_00 3330 1.78 2.47 1.51 108 XM_B_URI_Unicode 3259 1.66 2.13 1.48 109 T_TooManySym_03 3164 1.08 0.16 1.43 110 XMStockSpam_06 3039 1.47 1.71 1.38 111 TooManyTo_002 2986 1.11 0.47 1.35 112 TR_XM_PhishingBody 2974 2.37 5.05 1.35 113 TR_XM_UnparsRelay 2960 3.88 10.50 1.34 114 TVD_RCVD_IP 2929 1.39 1.54 1.33 115 IN_HORDE_ADDRESS_BOOK 2883 0.97 0.08 1.31 116 RCVD_IN_IADB_VOUCHED 2758 1.07 0.61 1.25 117 UNTRUSTED_Relay 2749 2.56 6.00 1.25 118 XMSexyCombo_05 2745 2.06 4.20 1.24 119 XM_SendGrid 2718 1.30 1.47 1.23 120 URI_NOVOWEL 2511 1.19 1.34 1.14 121 XM_DK_Undo_01 2417 1.09 1.07 1.10 122 XMLngstWrd_00 2350 0.89 0.43 1.07 123 XM_B_Investor 2340 1.92 4.17 1.06 124 DKIM_INVALID 2285 2.10 4.86 1.04 125 TR_XM_SpammyWords5 2250 1.60 3.11 1.02 126 XMBdyGiftCard01 2192 1.38 2.41 0.99 127 TR_XM_SpammyRelay 2191 4.01 11.88 0.99 128 T_OBFU_PDF_ATTACH 2162 0.76 0.18 0.98 129 TR_XM_DK_SendGrid 2135 1.02 1.17 0.97 130 XMGenDplmaNmb 2127 0.99 1.06 0.96 131 XM_B_Unsub2 2089 1.52 3.02 0.95 132 XMBSHREFv2 2053 0.75 0.29 0.93 133 XMGappySubj_01 2041 0.71 0.14 0.93 134 T_XMHurry_00 2019 1.30 2.31 0.92 135 RCVD_IN_IADB_OPTIN 1974 0.76 0.42 0.89 136 XMBrknScrpt_02 1916 1.16 1.93 0.87 137 XM_GoogleGroups 1888 0.81 0.70 0.86 138 XM_SPF_SoftFail 1848 1.38 2.78 0.84 139 T_XMDrugObfuBody_08 1828 1.44 3.02 0.83 140 XM_B_SpammyWords4 1823 1.33 2.66 0.83 141 T_XMDrugObfuBody_00 1812 0.93 1.23 0.82 142 HTML_TAG_BALANCE_BODY 1803 0.93 1.22 0.82 143 TM2_M_BODY_EMPTY 1803 0.63 0.12 0.82 144 TR_Symld_Words 1737 0.80 0.82 0.79 145 URI_HEX 1736 1.06 1.76 0.79 146 XM_B_COPY_HTML 1691 0.97 1.49 0.77 147 GMD_PDF_EMPTY_BODY 1668 0.56 0.06 0.76 148 XMGappySubj_02 1667 0.55 0.02 0.76 149 SUBJ_ALL_CAPS 1643 1.17 2.29 0.74 150 TRACKER_ID 1609 0.55 0.09 0.73 151 TooManyTo_003 1604 0.64 0.42 0.73 152 XM_UB50 1597 1.21 2.48 0.72 153 BOTNET 1582 2.96 8.81 0.72 154 MPART_ALT_DIFF_COUNT 1574 0.96 1.60 0.71 155 T_FILL_THIS_FORM_SHORT 1555 0.98 1.70 0.70 156 XMSlimDrugH 1499 0.72 0.84 0.68 157 XM_H_PHPMailer 1463 0.63 0.56 0.66 158 TR_XM_GMP_MSPIKE_UNDO2 1397 0.51 0.17 0.63 159 TR_XM_Base64_M1 1337 0.71 0.98 0.61 160 XM_OfRef6 1336 1.39 3.44 0.61 161 RCVD_IN_MSPIKE_BL 1294 2.40 7.14 0.59 162 TR_XM_MSPIKECOMBO 1294 2.40 7.14 0.59 163 TR_XM_SpammyWords2 1275 4.04 13.06 0.58 164 DKIM_ADSP_CUSTOM_MED 1251 0.67 0.92 0.57 165 RCVD_IN_PBL 1247 0.73 1.17 0.57 166 MSGID_FROM_MTA_HEADER 1239 0.49 0.30 0.56 167 TooManyTo_004 1220 0.50 0.37 0.55 168 RELAYCOUNTRY_CA 1210 2.27 6.76 0.55 169 XMNoVowels 1203 0.48 0.31 0.55 170 XMSubEmpty 1173 0.43 0.15 0.53 171 STY_INVIS_DIRECT 1155 1.07 2.50 0.52 172 TR_MetaPhish_Combo_01 1130 0.53 0.58 0.51 173 RCVD_IN_MSPIKE_L3 1124 1.50 4.08 0.51 174 RCVD_IN_BL_SPAMCOP_NET 1100 4.15 13.67 0.50 175 XM_ProductURIs 1098 0.68 1.17 0.50 176 XM_H_Long_From02 1074 0.64 1.04 0.49 177 XM_Walgreens_Forge 1065 0.35 0.02 0.48 178 XMPhish30 1050 1.01 2.40 0.48 179 XM_URI_RBL 1031 1.23 3.23 0.47 180 XMNoSubject 1021 0.36 0.08 0.46 181 MISSING_SUBJECT 1021 0.36 0.08 0.46 182 TooManyTo_005 1008 0.43 0.35 0.46 183 XMBody_95 981 0.35 0.10 0.44 184 RCVD_IN_PSBL 979 0.62 1.07 0.44 185 BASE64_LENGTH_79_INF 971 0.38 0.21 0.44 186 T_TooManySym_04 926 0.31 0.03 0.42 187 HTML_IMAGE_ONLY_20 924 0.69 1.39 0.42 188 XM_ShortIntro_01 876 0.43 0.53 0.40 189 MISSING_HEADERS 862 0.41 0.46 0.39 190 TM2_M_OBFU_COMMENT 860 0.51 0.82 0.39 191 DKIM_ADSP_NXDOMAIN 857 0.61 1.19 0.39 192 URI_TRY_3LD 852 0.51 0.83 0.39 193 XM_B_DNDMA 847 0.54 0.96 0.38 194 FORGED_GMAIL_RCVD 808 0.47 0.72 0.37 195 XMLngstWrd_01 800 0.37 0.39 0.36 196 XM_S_SubURI 800 0.27 0.02 0.36 197 LongTLD 796 0.45 0.68 0.36 198 HTTPS_HTTP_MISMATCH 788 0.44 0.65 0.36 199 DIET_1 787 0.79 1.93 0.36 200 NO_DNS_FOR_FROM 773 0.44 0.69 0.35 ----------------------------------------------------------------------