Email: 460003 Autolearn: 0 AvgScore: 5.11 AvgScanTime: 1.62 sec Spam: 140280 Autolearn: 0 AvgScore: 14.72 AvgScanTime: 1.79 sec Ham: 319723 Autolearn: 0 AvgScore: 0.90 AvgScanTime: 1.54 sec Time Spent Running SA: 206.50 hours Time Spent Processing Spam: 69.69 hours Time Spent Processing Ham: 136.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133075 89.55 94.86 87.21 2 DKIM_SIGNED 126909 81.92 90.47 78.17 3 XM_DK_Pass 116176 78.64 82.82 76.80 4 XM_B_Unicode 115027 74.63 82.00 71.39 5 RELAYCOUNTRY_US 114812 82.30 81.84 82.50 6 DKIM_VALID 114752 77.67 81.80 75.86 7 DCC_CHECK 101416 47.18 72.30 36.16 8 XM_B_SpammyWords 94739 52.65 67.54 46.11 9 DKIM_VALID_AU 91776 63.38 65.42 62.49 10 XMListUnsubscribeExists 90744 54.81 64.69 50.47 11 XM_B_Unicode3 67872 44.15 48.38 42.29 12 LOC_TINY_FONT_1 67821 35.37 48.35 29.68 13 BAYES_50 57944 54.92 41.31 60.89 14 XM_DK_Undo_02 53723 15.36 38.30 5.30 15 XM_B_SpammyWords2 53552 24.90 38.18 19.07 16 HTML_FONT_LOW_CONTRAST 51312 31.83 36.58 29.75 17 FVGT_m_MULTI_ODD 48029 28.58 34.24 26.09 18 T_KAM_HTML_FONT_INVALID 43606 25.43 31.08 22.95 19 DKIM_VALID_EF 41543 30.53 29.61 30.94 20 BAYES_99 41415 11.46 29.52 3.53 21 MIME_HTML_ONLY 41319 22.76 29.45 19.82 22 TR_XM_DKIM_Undo 37886 9.58 27.01 1.94 23 DCC_CHECK_NEGATIVE 36833 52.35 26.26 63.79 24 XMSubLong 33392 23.37 23.80 23.18 25 XM_B_Unsub 32180 13.52 22.94 9.39 26 BAYES_999 30985 8.62 22.09 2.72 27 XM_Multi_Part_URI 30863 16.99 22.00 14.79 28 TR_XM_BayesUnsub 30544 11.65 21.77 7.21 29 TR_XM_DK_Unsub 29898 16.22 21.31 13.99 30 T_TM2_M_HEADER_IN_MSG 29684 26.39 21.16 28.68 31 TR_DCC_Bayes_99 26799 6.59 19.10 1.09 32 RCVD_IN_MSPIKE_H2 26535 16.65 18.92 15.65 33 UNPARSEABLE_RELAY 24248 13.94 17.29 12.48 34 RELAYCOUNTRY_META 24114 7.67 17.19 3.49 35 TR_MAX_INTL_RELAY 20993 8.90 14.97 6.24 36 XM_B_SpammyWords3 19520 7.88 13.92 5.23 37 FSL_BULK_SIG 17939 7.52 12.79 5.21 38 TR_XM_SpammyRelay 17463 5.07 12.45 1.83 39 BOTNET 17305 4.77 12.34 1.45 40 RCVD_IN_BL_SPAMCOP_NET 17208 4.26 12.27 0.74 41 LOTS_OF_MONEY 17178 8.06 12.25 6.23 42 BOTNET_IPINHOSTNAME 16734 6.08 11.93 3.52 43 TR_XM_SpammyWords4 15514 6.28 11.06 4.18 44 RCVD_IN_MSPIKE_WL 14548 16.84 10.37 19.68 45 XM_Evil_Numbers_Gen 14056 9.13 10.02 8.73 46 TR_XM_SpammyWords2 13203 3.12 9.41 0.35 47 BAYES_80 13171 5.57 9.39 3.89 48 TR_XM_UnparsRelay 12438 3.80 8.87 1.58 49 DKIM_INVALID 12157 4.25 8.67 2.32 50 BAYES_60 11888 7.51 8.47 7.09 51 XM_B_Phish_Phrases 11868 6.57 8.46 5.74 52 UNTRUSTED_Relay 10620 3.37 7.57 1.52 53 MPART_ALT_DIFF 10240 5.94 7.30 5.34 54 XMSubMetaSx_00 10090 4.69 7.19 3.59 55 HTML_IMAGE_RATIO_02 9553 5.31 6.81 4.65 56 XM_Body_Dirty_Words 8640 3.94 6.16 2.97 57 XM_B_PhoneNumber 8587 8.82 6.12 10.00 58 LotsOfNums_01 8524 7.85 6.08 8.63 59 TooManyTo_001 8096 7.25 5.77 7.90 60 TR_XM_MSPIKECOMBO 8014 2.46 5.71 1.03 61 RCVD_IN_MSPIKE_BL 8014 2.46 5.71 1.03 62 XM_H_GMP 7959 5.59 5.67 5.55 63 XM_UncommonTLD01 7878 4.70 5.62 4.29 64 RELAYCOUNTRY_CA 7782 2.12 5.55 0.62 65 MIME_QP_LONG_LINE 7416 5.54 5.29 5.65 66 XM_H_Long_From01 7370 5.57 5.25 5.71 67 BAYES_95 7307 3.22 5.21 2.35 68 T_XMDrugObfuBody_14 7258 2.87 5.17 1.86 69 RCVD_IN_MSPIKE_H3 7128 7.73 5.08 8.89 70 TR_XM_SPAMCOP 7040 1.65 5.02 0.17 71 XMNumbers 6753 3.90 4.81 3.50 72 XM_B_Investor 6595 2.50 4.70 1.53 73 TR_XM_SpammyWords5 6541 2.43 4.66 1.45 74 HTML_IMAGE_RATIO_04 6517 4.17 4.65 3.96 75 TR_XM_PhishingBody 6515 2.78 4.64 1.96 76 XM_B_SpammyTLD 6071 3.27 4.33 2.80 77 XMStrtUSub 5754 4.90 4.10 5.25 78 TR_XM_NoHeaderRelay 5694 1.35 4.06 0.16 79 MIME_HTML_MOSTLY 5573 3.32 3.97 3.03 80 XMSexyCombo_05 5570 2.06 3.97 1.23 81 DKIM_ADSP_NXDOMAIN 5450 1.39 3.89 0.30 82 TM2_M_VERY_LONG_WORD 5428 2.28 3.87 1.58 83 TR_XM_SpammyWords3 5354 1.54 3.82 0.54 84 RCVD_IN_MSPIKE_L3 5339 1.82 3.81 0.95 85 XM_OfRef6 5290 1.76 3.77 0.87 86 XM_SPF_SoftFail 5051 1.99 3.60 1.28 87 HTML_IMAGE_RATIO_06 5010 4.08 3.57 4.30 88 T_XMDrugObfuBody_08 4950 2.17 3.53 1.58 89 XM_B_Unsub2 4568 1.98 3.26 1.42 90 XM_URI_RBL 4508 1.17 3.21 0.27 91 XMDiploma_00 4496 1.99 3.21 1.46 92 XM_CamelCaseFrm001 4356 2.34 3.11 2.00 93 TR_XM_INV_DKIM 4335 0.97 3.09 0.03 94 XM_UB50 4263 1.58 3.04 0.94 95 TM2_M_URI_OPT_OUT 4248 2.27 3.03 1.94 96 XM_B_URI_Unicode 4164 2.38 2.97 2.12 97 MIME_HTML_ONLY_MULTI 3996 2.79 2.85 2.76 98 RCVD_IN_MSPIKE_H5 3876 5.46 2.76 6.64 99 RELAYCOUNTRY_AU 3789 1.30 2.70 0.68 100 XM_H_Long_From02 3623 1.41 2.58 0.90 101 HTML_IMAGE_RATIO_08 3610 2.56 2.57 2.56 102 RCVD_IN_MSPIKE_H4 3544 3.65 2.53 4.14 103 KHOP_HELO_FCRDNS 3417 1.78 2.44 1.49 104 XM_B_SpammyWords4 3348 1.10 2.39 0.54 105 T_TooManySym_01 3328 4.66 2.37 5.66 106 XMStockSpam_06 3265 1.28 2.33 0.83 107 RCVD_IN_VALIDITY_RPBL 3261 0.73 2.32 0.03 108 MAILING_LIST_MULTI 3103 2.92 2.21 3.23 109 T_XMHurry_00 3095 1.10 2.21 0.62 110 HTML_FONT_TINY_NORDNS 3071 0.75 2.19 0.11 111 FROM_EXCESS_BASE64 3046 1.68 2.17 1.47 112 USER_IN_DEF_DKIM_WL 2988 10.12 2.13 13.62 113 XMBody_17 2920 0.95 2.08 0.46 114 SUBJ_ALL_CAPS 2868 1.68 2.04 1.52 115 SpammyFromTLD_02 2847 0.95 2.03 0.47 116 BAYES_40 2774 4.29 1.98 5.30 117 HTML_MIME_NO_HTML_TAG 2726 2.48 1.94 2.72 118 BOTNET_NORDNS 2611 0.57 1.86 0.01 119 XMBrknScrpt_02 2597 1.31 1.85 1.07 120 XMGenDplmaNmb 2557 1.06 1.82 0.73 121 URI_HEX 2529 1.52 1.80 1.40 122 RELAYCOUNTRY_FR 2525 0.72 1.80 0.25 123 TR_XM_MSPIKECOMBO2 2488 0.57 1.77 0.04 124 T_FILL_THIS_FORM_SHORT 2480 1.17 1.77 0.91 125 TR_XM_INTL_Spamhaus 2473 0.65 1.76 0.17 126 XM_B_Phish66 2449 0.83 1.75 0.43 127 BOUNCE_MESSAGE 2428 3.80 1.73 4.70 128 ANY_BOUNCE_MESSAGE 2428 3.80 1.73 4.70 129 STY_INVIS_DIRECT 2419 0.73 1.72 0.29 130 XM_H_DKIM_GOOG 2387 0.53 1.70 0.01 131 T_REMOTE_IMAGE 2367 3.09 1.69 3.70 132 XMPhish30 2338 0.96 1.67 0.65 133 SpammyFromTLD_01 2334 1.06 1.66 0.80 134 XM_ProductURIs 2244 0.92 1.60 0.62 135 TR_XM_InvalidRelay 2219 0.49 1.58 0.01 136 DIET_1 2191 0.78 1.56 0.44 137 RCVD_IN_IADB_LISTED 2116 2.88 1.51 3.48 138 XM_B_DNDMA 2104 0.96 1.50 0.72 139 BAYES_20 2088 3.76 1.49 4.75 140 T_XMDrugObfuBody_00 2060 1.23 1.47 1.13 141 XM_B_SEO 2041 0.58 1.45 0.19 142 XM_SendGrid 2014 1.54 1.44 1.59 143 RCVD_IN_PSBL 1989 0.46 1.42 0.04 144 SHORTCIRCUIT 1979 0.43 1.41 0.00 145 RCVD_IN_ZEN_LASTEXTERNAL 1979 0.43 1.41 0.00 146 TR_XM_GMP_BULK_SIG 1975 0.51 1.41 0.12 147 RCVD_IN_XBL 1970 0.44 1.40 0.02 148 TR_XM_MaxSPIKE 1923 0.45 1.37 0.04 149 XM_DK_Undo_01 1923 1.71 1.37 1.86 150 XM_UB80 1839 0.41 1.31 0.02 151 RCVD_IN_VALIDITY_SAFE 1802 3.59 1.28 4.59 152 XM_UB60 1790 0.45 1.28 0.08 153 HTML_TAG_BALANCE_BODY 1769 0.79 1.26 0.58 154 TR_LOTS_OF_MONEY3 1758 0.53 1.25 0.21 155 RCVD_IN_IADB_SPF 1745 2.54 1.24 3.11 156 RCVD_IN_MSPIKE_L4 1703 0.42 1.21 0.07 157 RCVD_IN_SBL_CSS 1696 0.41 1.21 0.06 158 RCVD_IN_PBL 1690 0.87 1.20 0.72 159 URI_TRY_3LD 1647 0.69 1.17 0.48 160 TR_Mismatch_TLD_01 1615 0.54 1.15 0.27 161 RDNS_DYNAMIC 1597 0.44 1.14 0.14 162 RCVD_IN_IADB_DK 1593 2.24 1.14 2.73 163 XMSubMetaI_00 1584 0.64 1.13 0.42 164 T_Symld_Words_02 1580 0.89 1.13 0.79 165 XM_UB99 1573 0.34 1.12 0.00 166 RCVD_IN_IADB_SENDERID 1571 2.29 1.12 2.80 167 XM_HighProb1 1558 0.34 1.11 0.00 168 TR_XM_SEO4 1547 0.41 1.10 0.11 169 MPART_ALT_DIFF_COUNT 1541 0.76 1.10 0.61 170 TR_LOTS_OF_MONEY2 1538 0.43 1.10 0.14 171 T_MONEY_PERCENT 1538 0.43 1.10 0.14 172 XMHTML_After_End 1534 0.60 1.09 0.38 173 TM2_M_OBFU_COMMENT 1500 0.58 1.07 0.36 174 URI_NOVOWEL 1493 1.20 1.06 1.26 175 XMBdyGiftCard01 1473 0.75 1.05 0.62 176 ALL_TRUSTED 1469 10.33 1.05 14.40 177 XM_B_COPY_HTML 1461 0.85 1.04 0.77 178 XMBounce_01 1448 0.33 1.03 0.02 179 SHOPIFY_IMG_NOT_RCVD_SFY 1446 0.49 1.03 0.26 180 XMSexyCombo_01 1445 0.47 1.03 0.23 181 RELAYCOUNTRY_GB 1441 0.82 1.03 0.73 182 TR_XM_RelayPhish 1431 0.37 1.02 0.09 183 RCVD_IN_VALIDITY_CERTIFIED 1426 3.13 1.02 4.06 184 XM_DIRTYINTL 1423 0.37 1.01 0.09 185 XMClaimOffer 1404 0.50 1.00 0.28 186 XMPhish14 1402 0.62 1.00 0.45 187 TVD_RCVD_IP 1402 1.01 1.00 1.01 188 TR_XM_Base64_M1 1391 0.71 0.99 0.59 189 TR_XM_Spammywords 1383 0.41 0.99 0.16 190 XM_S_SpammyWords 1383 0.41 0.99 0.16 191 TR_XM_DK_SendGrid 1370 1.03 0.98 1.05 192 HTTPS_HTTP_MISMATCH 1339 0.73 0.95 0.63 193 XMReplyNow 1331 0.49 0.95 0.29 194 TR_XM_PHPForged 1331 0.45 0.95 0.23 195 MultiRelay_CC 1326 0.37 0.95 0.12 196 HTML_IMAGE_ONLY_20 1322 0.71 0.94 0.60 197 XMBody_78 1318 0.49 0.94 0.30 198 TR_XM_FormFill2 1316 0.45 0.94 0.24 199 TR_XM_Base64_L1 1313 0.36 0.94 0.11 200 DKIM_ADSP_CUSTOM_MED 1311 0.82 0.93 0.77 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 278836 89.55 94.86 87.21 2 RELAYCOUNTRY_US 263759 82.30 81.84 82.50 3 DKIM_SIGNED 249938 81.92 90.47 78.17 4 XM_DK_Pass 245560 78.64 82.82 76.80 5 DKIM_VALID 242526 77.67 81.80 75.86 6 XM_B_Unicode 228252 74.63 82.00 71.39 7 DCC_CHECK_NEGATIVE 203965 52.35 26.26 63.79 8 DKIM_VALID_AU 199790 63.38 65.42 62.49 9 BAYES_50 194694 54.92 41.31 60.89 10 XMListUnsubscribeExists 161363 54.81 64.69 50.47 11 XM_B_SpammyWords 147435 52.65 67.54 46.11 12 XM_B_Unicode3 135214 44.15 48.38 42.29 13 DCC_CHECK 115623 47.18 72.30 36.16 14 DKIM_VALID_EF 98917 30.53 29.61 30.94 15 HTML_FONT_LOW_CONTRAST 95117 31.83 36.58 29.75 16 LOC_TINY_FONT_1 94902 35.37 48.35 29.68 17 T_TM2_M_HEADER_IN_MSG 91703 26.39 21.16 28.68 18 FVGT_m_MULTI_ODD 83425 28.58 34.24 26.09 19 XMSubLong 74122 23.37 23.80 23.18 20 T_KAM_HTML_FONT_INVALID 73378 25.43 31.08 22.95 21 MIME_HTML_ONLY 63378 22.76 29.45 19.82 22 RCVD_IN_MSPIKE_WL 62911 16.84 10.37 19.68 23 XM_B_SpammyWords2 60975 24.90 38.18 19.07 24 RCVD_IN_MSPIKE_H2 50049 16.65 18.92 15.65 25 XM_Multi_Part_URI 47288 16.99 22.00 14.79 26 ALL_TRUSTED 46042 10.33 1.05 14.40 27 TR_XM_DK_Unsub 44725 16.22 21.31 13.99 28 USER_IN_DEF_DKIM_WL 43548 10.12 2.13 13.62 29 UNPARSEABLE_RELAY 39894 13.94 17.29 12.48 30 XM_B_PhoneNumber 31980 8.82 6.12 10.00 31 BAYES_00 31660 7.05 0.54 9.90 32 XM_B_Unsub 30035 13.52 22.94 9.39 33 RCVD_IN_MSPIKE_H3 28430 7.73 5.08 8.89 34 XM_Evil_Numbers_Gen 27920 9.13 10.02 8.73 35 LotsOfNums_01 27589 7.85 6.08 8.63 36 TooManyTo_001 25244 7.25 5.77 7.90 37 TR_XM_BayesUnsub 23055 11.65 21.77 7.21 38 BAYES_60 22665 7.51 8.47 7.09 39 TR_XM_DK_Bayes 22462 5.00 0.40 7.03 40 TR_XM_DK_Bayes1 22208 4.95 0.39 6.95 41 RCVD_IN_MSPIKE_H5 21240 5.46 2.76 6.64 42 XM_DKIMWhitelistDomains 20751 4.52 0.03 6.49 43 TR_MAX_INTL_RELAY 19944 8.90 14.97 6.24 44 LOTS_OF_MONEY 19916 8.06 12.25 6.23 45 TR_XM_DK_Bayes2 19296 4.29 0.32 6.04 46 XM_B_Phish_Phrases 18342 6.57 8.46 5.74 47 XM_H_Long_From01 18255 5.57 5.25 5.71 48 T_TooManySym_01 18094 4.66 2.37 5.66 49 MIME_QP_LONG_LINE 18065 5.54 5.29 5.65 50 XM_H_GMP 17751 5.59 5.67 5.55 51 MPART_ALT_DIFF 17084 5.94 7.30 5.34 52 BAYES_40 16961 4.29 1.98 5.30 53 XM_DK_Undo_02 16949 15.36 38.30 5.30 54 XMStrtUSub 16780 4.90 4.10 5.25 55 XM_B_SpammyWords3 16710 7.88 13.92 5.23 56 FSL_BULK_SIG 16666 7.52 12.79 5.21 57 BAYES_20 15192 3.76 1.49 4.75 58 ANY_BOUNCE_MESSAGE 15037 3.80 1.73 4.70 59 BOUNCE_MESSAGE 15034 3.80 1.73 4.70 60 HTML_IMAGE_RATIO_02 14855 5.31 6.81 4.65 61 RCVD_IN_VALIDITY_SAFE 14691 3.59 1.28 4.59 62 XM_PDF 14232 3.35 0.85 4.45 63 HTML_IMAGE_RATIO_06 13747 4.08 3.57 4.30 64 XM_UncommonTLD01 13721 4.70 5.62 4.29 65 TR_XM_SpammyWords4 13373 6.28 11.06 4.18 66 RCVD_IN_MSPIKE_H4 13241 3.65 2.53 4.14 67 RCVD_IN_VALIDITY_CERTIFIED 12989 3.13 1.02 4.06 68 HTML_IMAGE_RATIO_04 12669 4.17 4.65 3.96 69 BAYES_80 12435 5.57 9.39 3.89 70 T_REMOTE_IMAGE 11843 3.09 1.69 3.70 71 XMSubMetaSx_00 11485 4.69 7.19 3.59 72 BAYES_99 11289 11.46 29.52 3.53 73 BOTNET_IPINHOSTNAME 11256 6.08 11.93 3.52 74 XMNumbers 11182 3.90 4.81 3.50 75 RELAYCOUNTRY_META 11160 7.67 17.19 3.49 76 RCVD_IN_IADB_LISTED 11134 2.88 1.51 3.48 77 MAILING_LIST_MULTI 10319 2.92 2.21 3.23 78 RCVD_IN_IADB_SPF 9952 2.54 1.24 3.11 79 MIME_HTML_MOSTLY 9698 3.32 3.97 3.03 80 T_TooManySym_02 9509 2.22 0.51 2.97 81 XM_Body_Dirty_Words 9483 3.94 6.16 2.97 82 XM_B_SpammyTLD 8958 3.27 4.33 2.80 83 RCVD_IN_IADB_SENDERID 8955 2.29 1.12 2.80 84 MIME_HTML_ONLY_MULTI 8818 2.79 2.85 2.76 85 RCVD_IN_IADB_DK 8724 2.24 1.14 2.73 86 HTML_MIME_NO_HTML_TAG 8684 2.48 1.94 2.72 87 BAYES_999 8681 8.62 22.09 2.72 88 TooManyTo_002 8511 2.05 0.67 2.66 89 HTML_IMAGE_RATIO_08 8182 2.56 2.57 2.56 90 BAYES_95 7506 3.22 5.21 2.35 91 DKIM_INVALID 7412 4.25 8.67 2.32 92 INVALID_MSGID 7335 1.71 0.38 2.29 93 BAYES_05 7320 1.80 0.68 2.29 94 RCVD_IN_IADB_VOUCHED 7053 1.81 0.91 2.21 95 XM_B_URI_Unicode 6764 2.38 2.97 2.12 96 XM_CamelCaseFrm001 6390 2.34 3.11 2.00 97 MSGID_NOFQDN1 6386 1.43 0.13 2.00 98 TR_XM_PhishingBody 6271 2.78 4.64 1.96 99 TO_MALFORMED 6263 1.37 0.03 1.96 100 TM2_M_URI_OPT_OUT 6199 2.27 3.03 1.94 101 TR_XM_DKIM_Undo 6191 9.58 27.01 1.94 102 T_XMDrugObfuBody_14 5948 2.87 5.17 1.86 103 XM_DK_Undo_01 5944 1.71 1.37 1.86 104 TR_XM_SpammyRelay 5847 5.07 12.45 1.83 105 XM_SendGrid 5075 1.54 1.44 1.59 106 TR_XM_UnparsRelay 5061 3.80 8.87 1.58 107 TM2_M_VERY_LONG_WORD 5054 2.28 3.87 1.58 108 T_XMDrugObfuBody_08 5041 2.17 3.53 1.58 109 TooManyTo_003 5026 1.26 0.56 1.57 110 RCVD_IN_IADB_OPTIN 5005 1.28 0.61 1.57 111 XM_B_Investor 4889 2.50 4.70 1.53 112 UNTRUSTED_Relay 4860 3.37 7.57 1.52 113 SUBJ_ALL_CAPS 4849 1.68 2.04 1.52 114 KHOP_HELO_FCRDNS 4754 1.78 2.44 1.49 115 FROM_EXCESS_BASE64 4705 1.68 2.17 1.47 116 TR_Symld_Words 4690 1.28 0.85 1.47 117 XMDiploma_00 4678 1.99 3.21 1.46 118 TR_XM_SpammyWords5 4636 2.43 4.66 1.45 119 BOTNET 4633 4.77 12.34 1.45 120 XM_B_Unsub2 4532 1.98 3.26 1.42 121 URI_HEX 4484 1.52 1.80 1.40 122 XM_GoogleGroups 4406 1.21 0.84 1.38 123 IN_HORDE_ADDRESS_BOOK 4099 0.96 0.24 1.28 124 XM_SPF_SoftFail 4085 1.99 3.60 1.28 125 XMGappySubj_01 4049 0.94 0.20 1.27 126 URI_NOVOWEL 4025 1.20 1.06 1.26 127 XMSexyCombo_05 3922 2.06 3.97 1.23 128 HELO_NODOT 3874 0.89 0.16 1.21 129 HELO_NO_DOMAIN 3869 0.89 0.15 1.21 130 T_TooManySym_03 3813 0.88 0.16 1.19 131 T_XMDrugObfuBody_00 3605 1.23 1.47 1.13 132 TooManyTo_004 3599 0.93 0.49 1.13 133 TR_DCC_Bayes_99 3496 6.59 19.10 1.09 134 XMBrknScrpt_02 3431 1.31 1.85 1.07 135 TR_XM_DK_SendGrid 3373 1.03 0.98 1.05 136 XMCapTrack 3339 0.86 0.45 1.04 137 RCVD_IN_MSPIKE_BL 3305 2.46 5.71 1.03 138 TR_XM_MSPIKECOMBO 3301 2.46 5.71 1.03 139 TVD_RCVD_IP 3243 1.01 1.00 1.01 140 XM_ShortIntro_01 3238 0.88 0.57 1.01 141 RCVD_IN_MSPIKE_L3 3024 1.82 3.81 0.95 142 XM_UB50 3009 1.58 3.04 0.94 143 T_FILL_THIS_FORM_SHORT 2924 1.17 1.77 0.91 144 TVD_SPACE_RATIO 2923 0.67 0.12 0.91 145 XM_H_Long_From02 2884 1.41 2.58 0.90 146 TooManyTo_005 2875 0.76 0.43 0.90 147 FROM_GOV_DKIM_AU 2847 0.68 0.21 0.89 148 XM_OfRef6 2794 1.76 3.77 0.87 149 TR_MetaPhish_Combo_01 2764 0.88 0.91 0.86 150 XM_H_PHPMailer 2687 0.71 0.43 0.84 151 XMStockSpam_06 2638 1.28 2.33 0.83 152 SpammyFromTLD_01 2552 1.06 1.66 0.80 153 T_Symld_Words_02 2530 0.89 1.13 0.79 154 T_TVD_MIME_NO_HEADERS 2489 0.56 0.06 0.78 155 DKIM_ADSP_CUSTOM_MED 2463 0.82 0.93 0.77 156 XM_B_COPY_HTML 2462 0.85 1.04 0.77 157 T_OBFU_PDF_ATTACH 2448 0.60 0.22 0.77 158 XMBSHREFv2 2440 0.67 0.46 0.76 159 RCVD_IN_BL_SPAMCOP_NET 2366 4.26 12.27 0.74 160 XMGenDplmaNmb 2341 1.06 1.82 0.73 161 RELAYCOUNTRY_GB 2323 0.82 1.03 0.73 162 RCVD_IN_PBL 2297 0.87 1.20 0.72 163 XM_B_DNDMA 2291 0.96 1.50 0.72 164 LOW_PRICE 2195 0.55 0.23 0.69 165 RELAYCOUNTRY_AU 2169 1.30 2.70 0.68 166 MSGID_FROM_MTA_HEADER 2109 0.50 0.15 0.66 167 XMPhish30 2069 0.96 1.67 0.65 168 TO_NO_BRKTS_HTML_ONLY 2006 0.46 0.09 0.63 169 HTTPS_HTTP_MISMATCH 2004 0.73 0.95 0.63 170 XM_ProductURIs 1996 0.92 1.60 0.62 171 RELAYCOUNTRY_CA 1988 2.12 5.55 0.62 172 XMBdyGiftCard01 1988 0.75 1.05 0.62 173 T_XMHurry_00 1969 1.10 2.21 0.62 174 MPART_ALT_DIFF_COUNT 1945 0.76 1.10 0.61 175 HTML_IMAGE_ONLY_20 1932 0.71 0.94 0.60 176 LongTLD 1898 0.61 0.65 0.59 177 TR_XM_Base64_M1 1872 0.71 0.99 0.59 178 XMNoVowels 1866 0.54 0.45 0.58 179 HTML_TAG_BALANCE_BODY 1845 0.79 1.26 0.58 180 XMGappySubj_02 1769 0.40 0.04 0.55 181 XMMoneyMeta_00 1761 0.63 0.82 0.55 182 TR_XM_SpammyWords3 1725 1.54 3.82 0.54 183 XM_B_SpammyWords4 1718 1.10 2.39 0.54 184 XMSlimDrugH 1703 0.60 0.75 0.53 185 XMSolicitRefs_0 1611 0.54 0.61 0.50 186 FORGED_GMAIL_RCVD 1561 0.55 0.71 0.49 187 URI_TRY_3LD 1549 0.69 1.17 0.48 188 SpammyFromTLD_02 1510 0.95 2.03 0.47 189 XMSubMetaSxObfu_02 1490 0.58 0.84 0.47 190 XMBody_17 1468 0.95 2.08 0.46 191 XM_B_FormFill 1464 0.32 0.01 0.46 192 NML_ADSP_CUSTOM_MED 1444 0.56 0.79 0.45 193 XMPhish14 1436 0.62 1.00 0.45 194 HTML_IMAGE_ONLY_32 1419 0.36 0.17 0.44 195 DIET_1 1409 0.78 1.56 0.44 196 XMSubMetaSxObfu_03 1376 0.50 0.65 0.43 197 HTML_IMAGE_ONLY_28 1374 0.37 0.22 0.43 198 XM_B_Phish66 1359 0.83 1.75 0.43 199 XMLngstWrd_00 1357 0.40 0.34 0.42 200 PLING_QUERY 1356 0.48 0.61 0.42 ----------------------------------------------------------------------