Email: 416230 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.46 sec Spam: 131495 Autolearn: 0 AvgScore: 14.50 AvgScanTime: 1.60 sec Ham: 284735 Autolearn: 0 AvgScore: 0.90 AvgScanTime: 1.40 sec Time Spent Running SA: 168.87 hours Time Spent Processing Spam: 58.33 hours Time Spent Processing Ham: 110.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124979 89.62 95.04 87.12 2 DKIM_SIGNED 119514 82.16 90.89 78.12 3 XM_DK_Pass 114507 80.10 87.08 76.87 4 DKIM_VALID 113642 79.23 86.42 75.91 5 XM_B_Unicode 111519 75.74 84.81 71.55 6 RELAYCOUNTRY_US 107027 82.14 81.39 82.49 7 DCC_CHECK 96845 47.86 73.65 35.95 8 XM_B_SpammyWords 93934 54.43 71.44 46.58 9 XMListUnsubscribeExists 91434 55.85 69.53 49.53 10 DKIM_VALID_AU 88620 63.88 67.39 62.26 11 LOC_TINY_FONT_1 66718 36.73 50.74 30.26 12 XM_B_Unicode3 66216 44.79 50.36 42.23 13 XM_DK_Undo_02 57227 17.91 43.52 6.08 14 XM_B_SpammyWords2 54236 27.14 41.25 20.62 15 BAYES_50 50701 53.59 38.56 60.53 16 HTML_FONT_LOW_CONTRAST 48329 31.61 36.75 29.23 17 FVGT_m_MULTI_ODD 43532 28.39 33.11 26.21 18 DKIM_VALID_EF 42919 31.89 32.64 31.55 19 TR_XM_DKIM_Undo 42346 11.84 32.20 2.43 20 BAYES_99 42055 13.04 31.98 4.29 21 T_KAM_HTML_FONT_INVALID 39752 25.22 30.23 22.91 22 MIME_HTML_ONLY 37447 22.95 28.48 20.40 23 DCC_CHECK_NEGATIVE 33118 51.73 25.19 63.99 24 BAYES_999 31810 9.86 24.19 3.24 25 XM_Multi_Part_URI 30642 17.51 23.30 14.84 26 TR_XM_DK_Unsub 30593 16.84 23.27 13.88 27 XMSubLong 30034 23.45 22.84 23.74 28 TR_DCC_Bayes_99 29383 7.97 22.35 1.33 29 T_TM2_M_HEADER_IN_MSG 27837 26.35 21.17 28.75 30 RCVD_IN_MSPIKE_H2 26831 17.96 20.40 16.82 31 XM_B_Unsub 24094 13.06 18.32 10.62 32 RELAYCOUNTRY_META 23129 7.88 17.59 3.39 33 UNPARSEABLE_RELAY 23014 14.59 17.50 13.25 34 TR_XM_BayesUnsub 22845 11.18 17.37 8.33 35 TR_MAX_INTL_RELAY 21405 9.68 16.28 6.64 36 XM_B_SpammyWords3 21141 9.08 16.08 5.85 37 RCVD_IN_BL_SPAMCOP_NET 18531 4.97 14.09 0.76 38 TR_XM_SpammyRelay 18085 5.59 13.75 1.82 39 LOTS_OF_MONEY 16720 7.97 12.72 5.79 40 TR_XM_SpammyWords4 15130 6.23 11.51 3.80 41 RCVD_IN_MSPIKE_WL 15113 17.40 11.49 20.13 42 BOTNET_IPINHOSTNAME 15021 6.17 11.42 3.74 43 TR_XM_SpammyWords2 14773 3.93 11.23 0.56 44 BAYES_80 13111 5.91 9.97 4.03 45 BOTNET 12001 3.86 9.13 1.42 46 XM_Evil_Numbers_Gen 11764 9.45 8.95 9.68 47 TR_XM_UnparsRelay 11372 3.99 8.65 1.84 48 FSL_BULK_SIG 10864 5.70 8.26 4.52 49 XM_B_Phish_Phrases 10757 5.93 8.18 4.89 50 BAYES_60 10576 7.57 8.04 7.35 51 RCVD_IN_MSPIKE_BL 9789 3.12 7.44 1.12 52 TR_XM_MSPIKECOMBO 9783 3.12 7.44 1.12 53 RELAYCOUNTRY_CA 9446 2.71 7.18 0.64 54 XM_Body_Dirty_Words 9233 4.29 7.02 3.03 55 TR_XM_SPAMCOP 8907 2.33 6.77 0.27 56 HTML_IMAGE_RATIO_02 8746 5.66 6.65 5.20 57 UNTRUSTED_Relay 8726 3.18 6.64 1.58 58 MPART_ALT_DIFF 8723 5.63 6.63 5.16 59 XMSubMetaSx_00 8125 4.88 6.18 4.28 60 XM_B_PhoneNumber 7942 8.10 6.04 9.05 61 BAYES_95 7825 3.66 5.95 2.60 62 RCVD_IN_MSPIKE_H3 7683 8.16 5.84 9.23 63 XM_UncommonTLD01 7658 4.70 5.82 4.18 64 XM_H_GMP 7518 5.77 5.72 5.79 65 LotsOfNums_01 7502 7.73 5.71 8.66 66 TR_XM_SpammyWords3 7299 2.11 5.55 0.51 67 RCVD_IN_MSPIKE_L3 7097 2.40 5.40 1.02 68 XM_H_Long_From01 6983 5.73 5.31 5.92 69 XM_B_Investor 6881 2.81 5.23 1.68 70 TooManyTo_001 6532 7.00 4.97 7.94 71 TR_XM_SpammyWords5 6169 2.51 4.69 1.50 72 XM_OfRef6 6131 2.15 4.66 0.99 73 MIME_HTML_MOSTLY 6122 3.40 4.66 2.83 74 DKIM_INVALID 5872 2.92 4.47 2.21 75 HTML_IMAGE_RATIO_04 5730 4.83 4.36 5.05 76 T_XMDrugObfuBody_14 5708 2.60 4.34 1.80 77 XMSexyCombo_05 5670 2.30 4.31 1.38 78 TR_XM_PhishingBody 5480 2.39 4.17 1.56 79 XMStrtUSub 5343 4.69 4.06 4.98 80 XM_B_SpammyTLD 5132 3.22 3.90 2.90 81 XMNumbers 5063 3.59 3.85 3.47 82 HTML_IMAGE_RATIO_06 4963 3.14 3.77 2.85 83 TM2_M_VERY_LONG_WORD 4950 2.71 3.76 2.22 84 XM_URI_RBL 4949 1.41 3.76 0.33 85 XMDiploma_00 4797 2.29 3.65 1.67 86 XM_CamelCaseFrm001 4747 2.68 3.61 2.25 87 XM_SPF_SoftFail 4292 1.90 3.26 1.28 88 XM_B_Unsub2 4286 2.05 3.26 1.49 89 T_XMDrugObfuBody_08 4252 1.90 3.23 1.29 90 MIME_QP_LONG_LINE 4176 4.64 3.18 5.32 91 MIME_HTML_ONLY_MULTI 4140 2.88 3.15 2.76 92 SUBJ_ALL_CAPS 4118 2.05 3.13 1.55 93 TR_XM_NoHeaderRelay 4003 1.08 3.04 0.18 94 RCVD_IN_MSPIKE_H5 3829 5.39 2.91 6.54 95 XM_B_URI_Unicode 3740 2.33 2.84 2.09 96 FROM_EXCESS_BASE64 3669 1.87 2.79 1.44 97 RELAYCOUNTRY_AU 3669 1.36 2.79 0.69 98 XM_UB50 3614 1.56 2.75 1.01 99 RCVD_IN_MSPIKE_H4 3601 3.84 2.74 4.35 100 HTML_IMAGE_RATIO_08 3509 2.74 2.67 2.77 101 XM_B_SpammyWords4 3497 1.37 2.66 0.78 102 XMBody_17 3454 1.14 2.63 0.45 103 TM2_M_URI_OPT_OUT 3450 2.08 2.62 1.83 104 TR_XM_MSPIKECOMBO2 3443 0.86 2.62 0.05 105 RCVD_IN_VALIDITY_RPBL 3348 0.84 2.55 0.05 106 T_TooManySym_01 3339 5.25 2.54 6.50 107 XMGenDplmaNmb 3240 1.41 2.46 0.92 108 MAILING_LIST_MULTI 3208 2.85 2.44 3.03 109 T_FILL_THIS_FORM_SHORT 3179 1.40 2.42 0.94 110 T_XMHurry_00 2908 1.11 2.21 0.61 111 USER_IN_DEF_DKIM_WL 2850 10.38 2.17 14.18 112 XMStockSpam_06 2792 1.54 2.12 1.27 113 TR_XM_MaxSPIKE 2756 0.70 2.10 0.05 114 TR_XM_INV_DKIM 2651 0.65 2.02 0.01 115 SpammyFromTLD_01 2490 1.05 1.89 0.66 116 RCVD_IN_VALIDITY_SAFE 2476 3.09 1.88 3.64 117 KHOP_HELO_FCRDNS 2416 1.76 1.84 1.72 118 XMBrknScrpt_02 2404 1.22 1.83 0.94 119 SpammyFromTLD_02 2404 1.08 1.83 0.73 120 TR_XM_INTL_Spamhaus 2400 0.69 1.83 0.17 121 BAYES_40 2397 4.18 1.82 5.28 122 XMPhish30 2387 0.93 1.82 0.53 123 T_REMOTE_IMAGE 2350 3.21 1.79 3.87 124 TR_LOTS_OF_MONEY3 2333 0.75 1.77 0.28 125 XM_SendGrid 2332 1.70 1.77 1.66 126 XM_H_Long_From02 2239 1.11 1.70 0.83 127 DIET_1 2178 0.83 1.66 0.44 128 T_XMDrugObfuBody_00 2177 1.31 1.66 1.15 129 RCVD_IN_MSPIKE_L4 2081 0.57 1.58 0.10 130 RCVD_IN_IADB_LISTED 2075 2.87 1.58 3.46 131 RCVD_IN_XBL 2014 0.50 1.53 0.02 132 THIS_AD 2005 0.75 1.52 0.40 133 XM_B_COPY_HTML 1984 0.99 1.51 0.75 134 XM_B_SEO 1914 0.61 1.46 0.22 135 ANY_BOUNCE_MESSAGE 1897 3.49 1.44 4.44 136 BOUNCE_MESSAGE 1896 3.49 1.44 4.44 137 XMBody_78 1891 0.64 1.44 0.27 138 DKIM_ADSP_NXDOMAIN 1856 0.68 1.41 0.34 139 URI_HEX 1794 1.37 1.36 1.37 140 TR_LOTS_OF_MONEY2 1780 0.57 1.35 0.21 141 T_MONEY_PERCENT 1780 0.57 1.35 0.21 142 XM_B_DNDMA 1764 0.77 1.34 0.51 143 URI_TRY_3LD 1760 0.83 1.34 0.59 144 RCVD_IN_IADB_SPF 1750 2.53 1.33 3.09 145 RDNS_DYNAMIC 1745 0.53 1.33 0.16 146 XMBdyGiftCard01 1742 0.84 1.32 0.62 147 RCVD_IN_SBL_CSS 1736 0.44 1.32 0.04 148 BAYES_20 1734 3.10 1.32 3.93 149 HTML_MIME_NO_HTML_TAG 1719 2.27 1.31 2.72 150 RCVD_IN_VALIDITY_CERTIFIED 1711 2.54 1.30 3.11 151 XM_B_Phish66 1709 0.68 1.30 0.40 152 XM_HighProb1 1704 0.41 1.30 0.00 153 XM_DK_Undo_01 1676 1.74 1.27 1.96 154 SHOPIFY_IMG_NOT_RCVD_SFY 1666 0.60 1.27 0.29 155 TR_XM_GMP_BULK_SIG 1665 0.52 1.27 0.17 156 ALL_TRUSTED 1649 10.28 1.25 14.45 157 STY_INVIS_DIRECT 1646 0.63 1.25 0.34 158 RCVD_IN_PSBL 1635 0.41 1.24 0.02 159 RCVD_IN_PBL 1631 0.85 1.24 0.67 160 RCVD_IN_IADB_DK 1614 2.23 1.23 2.69 161 DKIM_ADSP_CUSTOM_MED 1603 0.94 1.22 0.82 162 RCVD_IN_IADB_SENDERID 1583 2.28 1.20 2.78 163 XMSexyCombo_01 1582 0.60 1.20 0.33 164 MPART_ALT_DIFF_COUNT 1578 0.83 1.20 0.65 165 TR_Caps_n_Bayes_99 1543 0.39 1.17 0.02 166 TR_Mismatch_TLD_02 1526 0.42 1.16 0.08 167 TR_XM_InvalidRelay 1500 0.37 1.14 0.01 168 XM_GoogleGroups 1496 1.35 1.14 1.45 169 TVD_RCVD_IP 1495 1.11 1.14 1.10 170 RELAYCOUNTRY_FR 1490 0.55 1.13 0.28 171 SHORTCIRCUIT 1488 0.36 1.13 0.00 172 RCVD_IN_ZEN_LASTEXTERNAL 1488 0.36 1.13 0.00 173 TR_XM_Base64_M1 1484 0.90 1.13 0.79 174 XMReplyNow 1482 0.56 1.13 0.30 175 XM_DIRTYINTL 1470 0.40 1.12 0.07 176 XMSubMetaI_00 1456 0.73 1.11 0.56 177 BOTNET_NORDNS 1453 0.35 1.10 0.01 178 TR_XM_SEO4 1441 0.42 1.10 0.11 179 HTTPS_HTTP_MISMATCH 1427 0.80 1.09 0.67 180 XM_UB80 1417 0.36 1.08 0.03 181 XM_UB60 1408 0.39 1.07 0.08 182 XM_ProductURIs 1406 0.74 1.07 0.59 183 NML_ADSP_CUSTOM_MED 1398 0.65 1.06 0.46 184 XM_OfRef7 1393 0.49 1.06 0.23 185 TR_XM_PHPForged 1362 0.50 1.04 0.26 186 URI_NOVOWEL 1362 1.11 1.04 1.15 187 XM_S_SpammyWords 1356 0.57 1.03 0.36 188 TR_XM_Spammywords 1356 0.57 1.03 0.36 189 MultiRelay_CC 1351 0.42 1.03 0.14 190 TR_XM_FormFill2 1334 0.50 1.01 0.26 191 TR_XM_PHPDW 1330 0.50 1.01 0.27 192 FORGED_GMAIL_RCVD 1325 0.67 1.01 0.52 193 HTML_FONT_TINY_NORDNS 1320 0.38 1.00 0.10 194 TR_XM_Base64_L1 1311 0.37 1.00 0.08 195 XM_H_PHPOS 1310 0.49 1.00 0.25 196 XM_UB99 1310 0.32 1.00 0.00 197 SUBJ_DOLLARS 1276 0.62 0.97 0.46 198 HTML_TAG_BALANCE_BODY 1276 0.72 0.97 0.60 199 TR_XM_RelayPhish 1233 0.34 0.94 0.07 200 TR_Symld_Words 1232 1.36 0.94 1.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 248047 89.62 95.04 87.12 2 RELAYCOUNTRY_US 234880 82.14 81.39 82.49 3 DKIM_SIGNED 222448 82.16 90.89 78.12 4 XM_DK_Pass 218889 80.10 87.08 76.87 5 DKIM_VALID 216155 79.23 86.42 75.91 6 XM_B_Unicode 203737 75.74 84.81 71.55 7 DCC_CHECK_NEGATIVE 182198 51.73 25.19 63.99 8 DKIM_VALID_AU 177286 63.88 67.39 62.26 9 BAYES_50 172339 53.59 38.56 60.53 10 XMListUnsubscribeExists 141035 55.85 69.53 49.53 11 XM_B_SpammyWords 132617 54.43 71.44 46.58 12 XM_B_Unicode3 120231 44.79 50.36 42.23 13 DCC_CHECK 102356 47.86 73.65 35.95 14 DKIM_VALID_EF 89829 31.89 32.64 31.55 15 LOC_TINY_FONT_1 86153 36.73 50.74 30.26 16 HTML_FONT_LOW_CONTRAST 83234 31.61 36.75 29.23 17 T_TM2_M_HEADER_IN_MSG 81851 26.35 21.17 28.75 18 FVGT_m_MULTI_ODD 74625 28.39 33.11 26.21 19 XMSubLong 67583 23.45 22.84 23.74 20 T_KAM_HTML_FONT_INVALID 65222 25.22 30.23 22.91 21 XM_B_SpammyWords2 58710 27.14 41.25 20.62 22 MIME_HTML_ONLY 58091 22.95 28.48 20.40 23 RCVD_IN_MSPIKE_WL 57306 17.40 11.49 20.13 24 RCVD_IN_MSPIKE_H2 47906 17.96 20.40 16.82 25 XM_Multi_Part_URI 42244 17.51 23.30 14.84 26 ALL_TRUSTED 41156 10.28 1.25 14.45 27 USER_IN_DEF_DKIM_WL 40362 10.38 2.17 14.18 28 TR_XM_DK_Unsub 39510 16.84 23.27 13.88 29 UNPARSEABLE_RELAY 37718 14.59 17.50 13.25 30 XM_B_Unsub 30249 13.06 18.32 10.62 31 XM_Evil_Numbers_Gen 27549 9.45 8.95 9.68 32 BAYES_00 27485 6.80 0.62 9.65 33 RCVD_IN_MSPIKE_H3 26291 8.16 5.84 9.23 34 XM_B_PhoneNumber 25766 8.10 6.04 9.05 35 LotsOfNums_01 24653 7.73 5.71 8.66 36 TR_XM_BayesUnsub 23708 11.18 17.37 8.33 37 TooManyTo_001 22613 7.00 4.97 7.94 38 XM_DKIMWhitelistDomains 21912 5.30 0.11 7.70 39 BAYES_60 20939 7.57 8.04 7.35 40 TR_XM_DK_Bayes 19936 4.95 0.50 7.00 41 TR_XM_DK_Bayes1 19730 4.90 0.49 6.93 42 TR_MAX_INTL_RELAY 18901 9.68 16.28 6.64 43 RCVD_IN_MSPIKE_H5 18625 5.39 2.91 6.54 44 T_TooManySym_01 18511 5.25 2.54 6.50 45 XM_DK_Undo_02 17310 17.91 43.52 6.08 46 TR_XM_DK_Bayes2 16963 4.19 0.37 5.96 47 XM_H_Long_From01 16856 5.73 5.31 5.92 48 XM_B_SpammyWords3 16662 9.08 16.08 5.85 49 XM_H_GMP 16487 5.77 5.72 5.79 50 LOTS_OF_MONEY 16473 7.97 12.72 5.79 51 MIME_QP_LONG_LINE 15142 4.64 3.18 5.32 52 BAYES_40 15022 4.18 1.82 5.28 53 HTML_IMAGE_RATIO_02 14799 5.66 6.65 5.20 54 MPART_ALT_DIFF 14704 5.63 6.63 5.16 55 HTML_IMAGE_RATIO_04 14378 4.83 4.36 5.05 56 XMStrtUSub 14176 4.69 4.06 4.98 57 XM_B_Phish_Phrases 13935 5.93 8.18 4.89 58 XM_PDF 13292 3.45 0.82 4.67 59 FSL_BULK_SIG 12868 5.70 8.26 4.52 60 BOUNCE_MESSAGE 12642 3.49 1.44 4.44 61 ANY_BOUNCE_MESSAGE 12642 3.49 1.44 4.44 62 RCVD_IN_MSPIKE_H4 12390 3.84 2.74 4.35 63 BAYES_99 12226 13.04 31.98 4.29 64 XMSubMetaSx_00 12188 4.88 6.18 4.28 65 XM_UncommonTLD01 11888 4.70 5.82 4.18 66 BAYES_80 11487 5.91 9.97 4.03 67 BAYES_20 11180 3.10 1.32 3.93 68 T_REMOTE_IMAGE 11029 3.21 1.79 3.87 69 TR_XM_SpammyWords4 10816 6.23 11.51 3.80 70 BOTNET_IPINHOSTNAME 10640 6.17 11.42 3.74 71 RCVD_IN_VALIDITY_SAFE 10367 3.09 1.88 3.64 72 XMNumbers 9893 3.59 3.85 3.47 73 RCVD_IN_IADB_LISTED 9857 2.87 1.58 3.46 74 RELAYCOUNTRY_META 9658 7.88 17.59 3.39 75 BAYES_999 9213 9.86 24.19 3.24 76 T_TooManySym_02 9033 2.35 0.58 3.17 77 RCVD_IN_VALIDITY_CERTIFIED 8866 2.54 1.30 3.11 78 RCVD_IN_IADB_SPF 8788 2.53 1.33 3.09 79 MAILING_LIST_MULTI 8635 2.85 2.44 3.03 80 XM_Body_Dirty_Words 8633 4.29 7.02 3.03 81 XM_B_SpammyTLD 8269 3.22 3.90 2.90 82 HTML_IMAGE_RATIO_06 8121 3.14 3.77 2.85 83 MIME_HTML_MOSTLY 8050 3.40 4.66 2.83 84 RCVD_IN_IADB_SENDERID 7908 2.28 1.20 2.78 85 HTML_IMAGE_RATIO_08 7897 2.74 2.67 2.77 86 MIME_HTML_ONLY_MULTI 7847 2.88 3.15 2.76 87 HTML_MIME_NO_HTML_TAG 7738 2.27 1.31 2.72 88 RCVD_IN_IADB_DK 7649 2.23 1.23 2.69 89 TooManyTo_002 7529 2.03 0.71 2.64 90 BAYES_95 7412 3.66 5.95 2.60 91 INVALID_MSGID 7120 1.80 0.27 2.50 92 TR_XM_DKIM_Undo 6918 11.84 32.20 2.43 93 BAYES_05 6645 1.79 0.61 2.33 94 XM_CamelCaseFrm001 6401 2.68 3.61 2.25 95 TM2_M_VERY_LONG_WORD 6332 2.71 3.76 2.22 96 DKIM_INVALID 6293 2.92 4.47 2.21 97 TO_MALFORMED 6285 1.52 0.03 2.21 98 MSGID_NOFQDN1 6281 1.52 0.03 2.21 99 RCVD_IN_IADB_VOUCHED 6064 1.75 0.93 2.13 100 XM_B_URI_Unicode 5944 2.33 2.84 2.09 101 XM_DK_Undo_01 5569 1.74 1.27 1.96 102 TR_XM_UnparsRelay 5234 3.99 8.65 1.84 103 TM2_M_URI_OPT_OUT 5208 2.08 2.62 1.83 104 TR_XM_SpammyRelay 5173 5.59 13.75 1.82 105 T_XMDrugObfuBody_14 5113 2.60 4.34 1.80 106 KHOP_HELO_FCRDNS 4903 1.76 1.84 1.72 107 XM_B_Investor 4795 2.81 5.23 1.68 108 TooManyTo_003 4793 1.34 0.61 1.68 109 XMDiploma_00 4747 2.29 3.65 1.67 110 XM_SendGrid 4738 1.70 1.77 1.66 111 UNTRUSTED_Relay 4498 3.18 6.64 1.58 112 TR_XM_PhishingBody 4448 2.39 4.17 1.56 113 TR_Symld_Words 4436 1.36 0.94 1.56 114 SUBJ_ALL_CAPS 4408 2.05 3.13 1.55 115 RCVD_IN_IADB_OPTIN 4349 1.24 0.63 1.53 116 TR_XM_SpammyWords5 4271 2.51 4.69 1.50 117 XM_B_Unsub2 4254 2.05 3.26 1.49 118 XM_GoogleGroups 4139 1.35 1.14 1.45 119 FROM_EXCESS_BASE64 4100 1.87 2.79 1.44 120 BOTNET 4050 3.86 9.13 1.42 121 IN_HORDE_ADDRESS_BOOK 3996 0.99 0.10 1.40 122 XMSexyCombo_05 3918 2.30 4.31 1.38 123 URI_HEX 3913 1.37 1.36 1.37 124 TR_DCC_Bayes_99 3799 7.97 22.35 1.33 125 XMGappySubj_01 3718 0.98 0.27 1.31 126 T_XMDrugObfuBody_08 3669 1.90 3.23 1.29 127 XM_SPF_SoftFail 3631 1.90 3.26 1.28 128 XMStockSpam_06 3629 1.54 2.12 1.27 129 T_TooManySym_03 3597 0.92 0.16 1.26 130 TooManyTo_004 3566 1.02 0.52 1.25 131 T_XMDrugObfuBody_00 3275 1.31 1.66 1.15 132 URI_NOVOWEL 3273 1.11 1.04 1.15 133 RCVD_IN_MSPIKE_BL 3196 3.12 7.44 1.12 134 TR_XM_MSPIKECOMBO 3196 3.12 7.44 1.12 135 FROM_GOV_DKIM_AU 3173 0.85 0.29 1.11 136 TVD_RCVD_IP 3125 1.11 1.14 1.10 137 HELO_NODOT 3077 0.78 0.14 1.08 138 HELO_NO_DOMAIN 3073 0.78 0.13 1.08 139 TR_XM_DK_SendGrid 2989 0.99 0.84 1.05 140 RCVD_IN_MSPIKE_L3 2891 2.40 5.40 1.02 141 XMCapTrack 2883 0.96 0.84 1.01 142 XM_UB50 2881 1.56 2.75 1.01 143 TVD_SPACE_RATIO 2874 0.73 0.13 1.01 144 TooManyTo_005 2872 0.84 0.48 1.01 145 XM_OfRef6 2823 2.15 4.66 0.99 146 TR_MetaPhish_Combo_01 2739 0.87 0.67 0.96 147 XMBrknScrpt_02 2679 1.22 1.83 0.94 148 T_FILL_THIS_FORM_SHORT 2667 1.40 2.42 0.94 149 XMGenDplmaNmb 2630 1.41 2.46 0.92 150 XM_ShortIntro_01 2608 0.82 0.60 0.92 151 XMBSHREFv2 2509 0.72 0.36 0.88 152 XM_H_PHPMailer 2454 0.71 0.37 0.86 153 T_TVD_MIME_NO_HEADERS 2449 0.60 0.04 0.86 154 XM_H_Long_From02 2367 1.11 1.70 0.83 155 DKIM_ADSP_CUSTOM_MED 2325 0.94 1.22 0.82 156 TR_XM_Base64_M1 2263 0.90 1.13 0.79 157 XM_B_SpammyWords4 2210 1.37 2.66 0.78 158 RCVD_IN_BL_SPAMCOP_NET 2153 4.97 14.09 0.76 159 XM_B_COPY_HTML 2142 0.99 1.51 0.75 160 SpammyFromTLD_02 2075 1.08 1.83 0.73 161 T_OBFU_PDF_ATTACH 1995 0.53 0.17 0.70 162 RELAYCOUNTRY_AU 1975 1.36 2.79 0.69 163 RCVD_IN_PBL 1916 0.85 1.24 0.67 164 HTTPS_HTTP_MISMATCH 1901 0.80 1.09 0.67 165 SpammyFromTLD_01 1888 1.05 1.89 0.66 166 T_Symld_Words_02 1884 0.72 0.86 0.66 167 MPART_ALT_DIFF_COUNT 1862 0.83 1.20 0.65 168 RELAYCOUNTRY_CA 1824 2.71 7.18 0.64 169 HTML_IMAGE_ONLY_20 1815 0.67 0.75 0.64 170 XMBdyGiftCard01 1771 0.84 1.32 0.62 171 XMNoVowels 1756 0.62 0.64 0.62 172 T_XMHurry_00 1724 1.11 2.21 0.61 173 HTML_TAG_BALANCE_BODY 1715 0.72 0.97 0.60 174 XMSolicitRefs_0 1705 0.55 0.46 0.60 175 XM_ProductURIs 1686 0.74 1.07 0.59 176 URI_TRY_3LD 1680 0.83 1.34 0.59 177 XMSubMetaSxObfu_03 1620 0.57 0.57 0.57 178 XMSlimDrugH 1599 0.63 0.79 0.56 179 XMSubMetaI_00 1593 0.73 1.11 0.56 180 TR_XM_SpammyWords2 1592 3.93 11.23 0.56 181 TO_NO_BRKTS_HTML_ONLY 1523 0.40 0.10 0.53 182 XMPhish30 1503 0.93 1.82 0.53 183 TR_XM_GMP_MSPIKE_UNDO2 1496 0.44 0.24 0.53 184 XMGappySubj_02 1473 0.37 0.05 0.52 185 FORGED_GMAIL_RCVD 1471 0.67 1.01 0.52 186 TR_XM_SpammyWords3 1466 2.11 5.55 0.51 187 MSGID_FROM_MTA_HEADER 1461 0.43 0.26 0.51 188 XM_B_DNDMA 1461 0.77 1.34 0.51 189 RELAYCOUNTRY_GB 1460 0.58 0.71 0.51 190 T_MANY_PILL_PRICE 1435 0.35 0.01 0.50 191 HTML_FONT_FACE_BAD 1380 0.48 0.47 0.48 192 NML_ADSP_CUSTOM_MED 1317 0.65 1.06 0.46 193 SUBJ_DOLLARS 1304 0.62 0.97 0.46 194 XMBody_17 1277 1.14 2.63 0.45 195 HTML_IMAGE_ONLY_32 1267 0.36 0.18 0.44 196 DIET_1 1262 0.83 1.66 0.44 197 XMPhish14 1209 0.51 0.71 0.42 198 XMMoneyMeta_00 1208 0.46 0.53 0.42 199 LongTLD 1193 0.47 0.58 0.42 200 XMDateMe_00 1178 0.44 0.50 0.41 ----------------------------------------------------------------------