Email: 419318 Autolearn: 0 AvgScore: 5.18 AvgScanTime: 1.48 sec Spam: 131246 Autolearn: 0 AvgScore: 14.41 AvgScanTime: 1.60 sec Ham: 288072 Autolearn: 0 AvgScore: 0.97 AvgScanTime: 1.43 sec Time Spent Running SA: 172.91 hours Time Spent Processing Spam: 58.40 hours Time Spent Processing Ham: 114.51 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124871 89.31 95.14 86.66 2 DKIM_SIGNED 119911 83.15 91.36 79.41 3 XM_DK_Pass 114231 80.82 87.04 77.99 4 DKIM_VALID 113168 79.91 86.23 77.03 5 XM_B_Unicode 110595 75.42 84.27 71.39 6 RELAYCOUNTRY_US 106830 82.36 81.40 82.80 7 DCC_CHECK 96149 49.40 73.26 38.53 8 XM_B_SpammyWords 91680 54.85 69.85 48.01 9 XMListUnsubscribeExists 90124 56.77 68.67 51.34 10 DKIM_VALID_AU 87124 64.01 66.38 62.92 11 LOC_TINY_FONT_1 65287 36.16 49.74 29.96 12 XM_B_Unicode3 63435 44.20 48.33 42.32 13 XM_DK_Undo_02 57655 18.63 43.93 7.10 14 XM_B_SpammyWords2 52544 27.00 40.03 21.06 15 BAYES_50 50402 53.72 38.40 60.70 16 HTML_FONT_LOW_CONTRAST 48128 31.36 36.67 28.94 17 FVGT_m_MULTI_ODD 43839 28.00 33.40 25.53 18 BAYES_99 42650 12.85 32.50 3.90 19 DKIM_VALID_EF 42377 31.43 32.29 31.04 20 TR_XM_DKIM_Undo 42069 12.71 32.05 3.89 21 T_KAM_HTML_FONT_INVALID 41022 26.14 31.26 23.81 22 MIME_HTML_ONLY 36096 21.84 27.50 19.26 23 DCC_CHECK_NEGATIVE 33644 50.21 25.63 61.41 24 BAYES_999 32756 9.86 24.96 2.98 25 XMSubLong 30968 23.20 23.60 23.03 26 XM_Multi_Part_URI 30085 17.04 22.92 14.35 27 TR_XM_DK_Unsub 29732 16.60 22.65 13.84 28 TR_DCC_Bayes_99 29683 8.08 22.62 1.46 29 RCVD_IN_MSPIKE_H2 27905 17.82 21.26 16.25 30 T_TM2_M_HEADER_IN_MSG 27628 25.63 21.05 27.71 31 UNPARSEABLE_RELAY 24982 14.51 19.03 12.45 32 XM_B_Unsub 24381 12.02 18.58 9.03 33 RELAYCOUNTRY_META 24075 8.12 18.34 3.46 34 TR_XM_BayesUnsub 23433 10.35 17.85 6.94 35 TR_MAX_INTL_RELAY 21271 9.38 16.21 6.27 36 XM_B_SpammyWords3 18680 8.66 14.23 6.12 37 RCVD_IN_BL_SPAMCOP_NET 18015 5.54 13.73 1.80 38 LOTS_OF_MONEY 17554 8.47 13.37 6.24 39 TR_XM_SpammyRelay 17518 5.43 13.35 1.82 40 RCVD_IN_MSPIKE_WL 15034 17.82 11.45 20.72 41 TR_XM_SpammyWords4 14854 6.39 11.32 4.15 42 TR_XM_SpammyWords2 14532 3.85 11.07 0.56 43 BOTNET_IPINHOSTNAME 14232 6.18 10.84 4.05 44 BAYES_80 13036 5.75 9.93 3.85 45 TR_XM_UnparsRelay 12783 4.19 9.74 1.66 46 BOTNET 12604 4.23 9.60 1.78 47 XM_Evil_Numbers_Gen 12562 9.35 9.57 9.24 48 FSL_BULK_SIG 11788 6.76 8.98 5.75 49 XM_B_Phish_Phrases 11327 6.33 8.63 5.29 50 BAYES_60 10543 7.73 8.03 7.59 51 TR_XM_MSPIKECOMBO 9485 3.12 7.23 1.24 52 RCVD_IN_MSPIKE_BL 9485 3.12 7.23 1.24 53 XM_H_GMP 9209 6.08 7.02 5.66 54 UNTRUSTED_Relay 9015 3.16 6.87 1.47 55 TR_XM_SPAMCOP 8969 2.30 6.83 0.23 56 RELAYCOUNTRY_CA 8897 2.65 6.78 0.77 57 MPART_ALT_DIFF 8590 5.28 6.54 4.70 58 HTML_IMAGE_RATIO_02 8481 5.09 6.46 4.46 59 XMSubMetaSx_00 7809 3.97 5.95 3.07 60 XM_H_Long_From01 7534 5.99 5.74 6.10 61 BAYES_95 7520 3.46 5.73 2.42 62 XM_UncommonTLD01 7481 4.71 5.70 4.26 63 LotsOfNums_01 7445 7.62 5.67 8.51 64 XM_B_PhoneNumber 7360 7.76 5.61 8.73 65 RCVD_IN_MSPIKE_H3 7048 7.97 5.37 9.15 66 XM_Body_Dirty_Words 7033 3.89 5.36 3.22 67 DKIM_INVALID 6743 3.24 5.14 2.38 68 T_XMDrugObfuBody_14 6614 2.95 5.04 2.00 69 RCVD_IN_MSPIKE_L3 6509 2.29 4.96 1.08 70 TR_XM_SpammyWords3 6477 1.94 4.94 0.57 71 XM_B_Investor 6005 2.50 4.58 1.56 72 HTML_IMAGE_RATIO_04 5826 4.47 4.44 4.48 73 TR_XM_PhishingBody 5617 2.34 4.28 1.46 74 T_XMDrugObfuBody_08 5613 2.76 4.28 2.07 75 TooManyTo_001 5587 6.58 4.26 7.65 76 TM2_M_VERY_LONG_WORD 5530 2.35 4.21 1.50 77 XMStrtUSub 5439 4.66 4.14 4.90 78 MIME_HTML_MOSTLY 5308 3.02 4.04 2.56 79 XM_OfRef6 5232 1.99 3.99 1.08 80 TR_XM_SpammyWords5 5094 2.12 3.88 1.32 81 XMNumbers 5072 3.58 3.86 3.45 82 XM_B_SpammyTLD 4984 3.17 3.80 2.88 83 TR_XM_NoHeaderRelay 4798 1.26 3.66 0.17 84 XM_SPF_SoftFail 4601 1.99 3.51 1.29 85 XMSexyCombo_05 4529 1.66 3.45 0.84 86 XM_URI_RBL 4396 1.29 3.35 0.35 87 MIME_QP_LONG_LINE 4361 4.59 3.32 5.16 88 RCVD_IN_MSPIKE_H5 4292 6.19 3.27 7.52 89 XMDiploma_00 4054 2.06 3.09 1.59 90 XMBody_17 4040 1.33 3.08 0.54 91 RELAYCOUNTRY_AU 3971 1.43 3.03 0.71 92 HTML_IMAGE_RATIO_06 3920 3.09 2.99 3.13 93 XM_CamelCaseFrm001 3915 2.83 2.98 2.76 94 XM_B_Unsub2 3843 1.85 2.93 1.36 95 TR_XM_MSPIKECOMBO2 3811 0.98 2.90 0.10 96 RCVD_IN_MSPIKE_H4 3694 3.66 2.81 4.05 97 MIME_HTML_ONLY_MULTI 3676 2.65 2.80 2.58 98 XM_UB50 3610 1.50 2.75 0.93 99 XM_B_URI_Unicode 3563 2.25 2.71 2.04 100 TR_XM_INV_DKIM 3355 0.85 2.56 0.07 101 HTML_IMAGE_RATIO_08 3305 2.79 2.52 2.92 102 TR_XM_MaxSPIKE 3023 0.77 2.30 0.07 103 XM_B_SpammyWords4 2983 1.11 2.27 0.58 104 T_TooManySym_01 2961 4.92 2.26 6.13 105 TR_XM_INTL_Spamhaus 2935 0.81 2.24 0.16 106 TM2_M_URI_OPT_OUT 2888 2.08 2.20 2.02 107 SUBJ_ALL_CAPS 2820 1.71 2.15 1.51 108 XM_SendGrid 2789 2.62 2.13 2.85 109 MAILING_LIST_MULTI 2785 2.78 2.12 3.07 110 USER_IN_DEF_DKIM_WL 2775 10.95 2.11 14.97 111 T_XMHurry_00 2724 1.12 2.08 0.69 112 XMStockSpam_06 2709 1.58 2.06 1.35 113 XMPhish30 2644 0.91 2.01 0.41 114 RCVD_IN_IADB_LISTED 2560 3.18 1.95 3.74 115 T_FILL_THIS_FORM_SHORT 2545 1.20 1.94 0.87 116 T_XMDrugObfuBody_00 2526 1.38 1.92 1.13 117 XMGenDplmaNmb 2485 1.22 1.89 0.91 118 FROM_EXCESS_BASE64 2406 1.76 1.83 1.72 119 RCVD_IN_XBL 2404 0.59 1.83 0.02 120 SpammyFromTLD_01 2354 1.12 1.79 0.81 121 SpammyFromTLD_02 2335 1.07 1.78 0.74 122 RCVD_IN_SBL_CSS 2318 0.57 1.77 0.03 123 RCVD_IN_MSPIKE_L4 2316 0.66 1.76 0.15 124 RCVD_IN_VALIDITY_SAFE 2308 3.32 1.76 4.04 125 DIET_1 2269 0.74 1.73 0.29 126 XMBrknScrpt_02 2190 1.19 1.67 0.97 127 XMReplyNow 2172 0.69 1.65 0.26 128 RCVD_IN_VALIDITY_RPBL 2148 1.23 1.64 1.05 129 BAYES_40 2113 4.02 1.61 5.12 130 TR_LOTS_OF_MONEY3 2106 0.67 1.60 0.24 131 RCVD_IN_IADB_SPF 2076 2.77 1.58 3.32 132 TR_XM_GMP_BULK_SIG 2001 0.59 1.52 0.16 133 DKIM_ADSP_NXDOMAIN 1988 0.90 1.51 0.62 134 XM_DK_Undo_01 1985 1.67 1.51 1.74 135 RCVD_IN_IADB_DK 1900 2.43 1.45 2.88 136 RCVD_IN_PBL 1878 0.90 1.43 0.66 137 URI_HEX 1875 1.29 1.43 1.23 138 XM_H_Long_From02 1861 1.03 1.42 0.86 139 KHOP_HELO_FCRDNS 1853 1.33 1.41 1.30 140 RCVD_IN_IADB_SENDERID 1840 2.48 1.40 2.97 141 BAYES_20 1829 3.04 1.39 3.80 142 HTML_MIME_NO_HTML_TAG 1827 2.30 1.39 2.71 143 XM_B_COPY_HTML 1816 1.05 1.38 0.90 144 MultiRelay_CC 1810 0.51 1.38 0.12 145 RDNS_DYNAMIC 1806 0.53 1.38 0.15 146 RCVD_IN_VALIDITY_CERTIFIED 1801 2.74 1.37 3.36 147 HTML_FONT_TINY_NORDNS 1785 0.49 1.36 0.09 148 XMBody_78 1764 0.69 1.34 0.38 149 XM_ProductURIs 1738 0.76 1.32 0.50 150 URI_TRY_3LD 1725 0.80 1.31 0.57 151 XM_UB99 1724 0.41 1.31 0.00 152 MPART_ALT_DIFF_COUNT 1715 0.80 1.31 0.57 153 ANY_BOUNCE_MESSAGE 1695 2.95 1.29 3.70 154 BOUNCE_MESSAGE 1695 2.94 1.29 3.70 155 T_REMOTE_IMAGE 1679 3.14 1.28 3.99 156 BOTNET_NORDNS 1678 0.40 1.28 0.01 157 XM_B_SEO 1666 0.55 1.27 0.23 158 STY_INVIS_DIRECT 1660 0.58 1.26 0.27 159 XM_B_DNDMA 1649 0.75 1.26 0.51 160 RCVD_IN_IADB_VOUCHED 1640 2.02 1.25 2.38 161 MISSING_HEADERS 1620 0.65 1.23 0.39 162 TVD_RCVD_IP 1613 1.05 1.23 0.97 163 XM_B_Phish66 1591 0.64 1.21 0.39 164 HELO_DYNAMIC_SPLIT_IP 1589 0.38 1.21 0.01 165 SHOPIFY_IMG_NOT_RCVD_SFY 1486 0.56 1.13 0.29 166 HTTPS_HTTP_MISMATCH 1470 1.05 1.12 1.02 167 URI_NOVOWEL 1436 1.15 1.09 1.17 168 RCVD_IN_ZEN_LASTEXTERNAL 1421 0.34 1.08 0.00 169 SHORTCIRCUIT 1421 0.34 1.08 0.00 170 ALL_TRUSTED 1420 10.05 1.08 14.14 171 XM_UB80 1411 0.35 1.08 0.02 172 XM_HighProb1 1406 0.34 1.07 0.00 173 DKIM_ADSP_CUSTOM_MED 1360 0.83 1.04 0.74 174 T_Symld_Words_02 1358 0.77 1.03 0.65 175 HTML_IMAGE_ONLY_20 1298 0.73 0.99 0.62 176 XM_H_Undi_Recip 1289 0.41 0.98 0.16 177 TR_XM_SEO4 1282 0.39 0.98 0.12 178 XM_GoogleGroups 1265 1.27 0.96 1.41 179 XM_DIRTYINTL 1263 0.34 0.96 0.06 180 RCVD_IN_PSBL 1257 0.32 0.96 0.03 181 TR_XM_Base64_M1 1256 0.71 0.96 0.59 182 DEAR_FRIEND 1253 0.34 0.95 0.07 183 TM2_M_A_HREF_HREF 1224 0.50 0.93 0.30 184 TR_XM_DK_SendGrid 1217 1.04 0.93 1.10 185 T_MONEY_PERCENT 1189 0.45 0.91 0.24 186 TR_LOTS_OF_MONEY2 1189 0.45 0.91 0.24 187 TR_MetaPhish_Combo_01 1169 1.21 0.89 1.36 188 URG_BIZ 1168 0.34 0.89 0.09 189 XM_UB60 1157 0.34 0.88 0.09 190 TR_XM_FormFill2 1148 0.44 0.87 0.25 191 XM_UB999 1146 0.27 0.87 0.00 192 TR_XM_PHPForged 1146 0.44 0.87 0.25 193 HTML_TAG_BALANCE_BODY 1131 0.66 0.86 0.56 194 RCVD_IN_IADB_OPTIN 1128 1.47 0.86 1.75 195 TR_XM_PHPDW 1126 0.44 0.86 0.25 196 XM_H_PHPOS 1111 0.43 0.85 0.23 197 XMSexyCombo_01 1108 0.34 0.84 0.11 198 NML_ADSP_CUSTOM_MED 1095 0.56 0.83 0.43 199 XMSubMetaI_00 1089 0.58 0.83 0.47 200 XMSlimDrugH 1074 0.62 0.82 0.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 249640 89.31 95.14 86.66 2 RELAYCOUNTRY_US 238519 82.36 81.40 82.80 3 DKIM_SIGNED 228748 83.15 91.36 79.41 4 XM_DK_Pass 224661 80.82 87.04 77.99 5 DKIM_VALID 221901 79.91 86.23 77.03 6 XM_B_Unicode 205649 75.42 84.27 71.39 7 DKIM_VALID_AU 181267 64.01 66.38 62.92 8 DCC_CHECK_NEGATIVE 176899 50.21 25.63 61.41 9 BAYES_50 174873 53.72 38.40 60.70 10 XMListUnsubscribeExists 147904 56.77 68.67 51.34 11 XM_B_SpammyWords 138310 54.85 69.85 48.01 12 XM_B_Unicode3 121913 44.20 48.33 42.32 13 DCC_CHECK 111001 49.40 73.26 38.53 14 DKIM_VALID_EF 89409 31.43 32.29 31.04 15 LOC_TINY_FONT_1 86318 36.16 49.74 29.96 16 HTML_FONT_LOW_CONTRAST 83362 31.36 36.67 28.94 17 T_TM2_M_HEADER_IN_MSG 79839 25.63 21.05 27.71 18 FVGT_m_MULTI_ODD 73553 28.00 33.40 25.53 19 T_KAM_HTML_FONT_INVALID 68580 26.14 31.26 23.81 20 XMSubLong 66333 23.20 23.60 23.03 21 XM_B_SpammyWords2 60660 27.00 40.03 21.06 22 RCVD_IN_MSPIKE_WL 59688 17.82 11.45 20.72 23 MIME_HTML_ONLY 55469 21.84 27.50 19.26 24 RCVD_IN_MSPIKE_H2 46817 17.82 21.26 16.25 25 USER_IN_DEF_DKIM_WL 43122 10.95 2.11 14.97 26 XM_Multi_Part_URI 41352 17.04 22.92 14.35 27 ALL_TRUSTED 40732 10.05 1.08 14.14 28 TR_XM_DK_Unsub 39857 16.60 22.65 13.84 29 UNPARSEABLE_RELAY 35863 14.51 19.03 12.45 30 BAYES_00 29861 7.31 0.60 10.37 31 XM_Evil_Numbers_Gen 26630 9.35 9.57 9.24 32 RCVD_IN_MSPIKE_H3 26366 7.97 5.37 9.15 33 XM_B_Unsub 26016 12.02 18.58 9.03 34 XM_B_PhoneNumber 25160 7.76 5.61 8.73 35 LotsOfNums_01 24517 7.62 5.67 8.51 36 TooManyTo_001 22025 6.58 4.26 7.65 37 TR_XM_DK_Bayes 21980 5.39 0.47 7.63 38 BAYES_60 21870 7.73 8.03 7.59 39 TR_XM_DK_Bayes1 21740 5.33 0.47 7.55 40 RCVD_IN_MSPIKE_H5 21664 6.19 3.27 7.52 41 XM_DK_Undo_02 20453 18.63 43.93 7.10 42 TR_XM_BayesUnsub 19986 10.35 17.85 6.94 43 XM_DKIMWhitelistDomains 19413 4.64 0.02 6.74 44 TR_XM_DK_Bayes2 18775 4.59 0.36 6.52 45 TR_MAX_INTL_RELAY 18065 9.38 16.21 6.27 46 LOTS_OF_MONEY 17963 8.47 13.37 6.24 47 T_TooManySym_01 17653 4.92 2.26 6.13 48 XM_B_SpammyWords3 17627 8.66 14.23 6.12 49 XM_H_Long_From01 17579 5.99 5.74 6.10 50 FSL_BULK_SIG 16551 6.76 8.98 5.75 51 XM_H_GMP 16302 6.08 7.02 5.66 52 XM_B_Phish_Phrases 15228 6.33 8.63 5.29 53 MIME_QP_LONG_LINE 14865 4.59 3.32 5.16 54 BAYES_40 14737 4.02 1.61 5.12 55 XMStrtUSub 14103 4.66 4.14 4.90 56 MPART_ALT_DIFF 13534 5.28 6.54 4.70 57 XM_PDF 13261 3.39 0.73 4.60 58 HTML_IMAGE_RATIO_04 12918 4.47 4.44 4.48 59 HTML_IMAGE_RATIO_02 12853 5.09 6.46 4.46 60 XM_UncommonTLD01 12285 4.71 5.70 4.26 61 TR_XM_SpammyWords4 11944 6.39 11.32 4.15 62 BOTNET_IPINHOSTNAME 11661 6.18 10.84 4.05 63 RCVD_IN_MSPIKE_H4 11658 3.66 2.81 4.05 64 RCVD_IN_VALIDITY_SAFE 11626 3.32 1.76 4.04 65 T_REMOTE_IMAGE 11501 3.14 1.28 3.99 66 BAYES_99 11232 12.85 32.50 3.90 67 TR_XM_DKIM_Undo 11213 12.71 32.05 3.89 68 BAYES_80 11090 5.75 9.93 3.85 69 BAYES_20 10935 3.04 1.39 3.80 70 RCVD_IN_IADB_LISTED 10785 3.18 1.95 3.74 71 ANY_BOUNCE_MESSAGE 10659 2.95 1.29 3.70 72 BOUNCE_MESSAGE 10653 2.94 1.29 3.70 73 RELAYCOUNTRY_META 9970 8.12 18.34 3.46 74 XMNumbers 9942 3.58 3.86 3.45 75 RCVD_IN_VALIDITY_CERTIFIED 9693 2.74 1.37 3.36 76 RCVD_IN_IADB_SPF 9556 2.77 1.58 3.32 77 T_TooManySym_02 9323 2.41 0.60 3.24 78 XM_Body_Dirty_Words 9270 3.89 5.36 3.22 79 HTML_IMAGE_RATIO_06 9017 3.09 2.99 3.13 80 MAILING_LIST_MULTI 8856 2.78 2.12 3.07 81 XMSubMetaSx_00 8852 3.97 5.95 3.07 82 BAYES_999 8587 9.86 24.96 2.98 83 RCVD_IN_IADB_SENDERID 8570 2.48 1.40 2.97 84 HTML_IMAGE_RATIO_08 8406 2.79 2.52 2.92 85 XM_B_SpammyTLD 8302 3.17 3.80 2.88 86 RCVD_IN_IADB_DK 8297 2.43 1.45 2.88 87 XM_SendGrid 8202 2.62 2.13 2.85 88 XM_CamelCaseFrm001 7958 2.83 2.98 2.76 89 HTML_MIME_NO_HTML_TAG 7810 2.30 1.39 2.71 90 MIME_HTML_ONLY_MULTI 7441 2.65 2.80 2.58 91 MIME_HTML_MOSTLY 7369 3.02 4.04 2.56 92 INVALID_MSGID 7132 1.79 0.28 2.48 93 TooManyTo_002 7044 1.86 0.58 2.45 94 BAYES_95 6970 3.46 5.73 2.42 95 DKIM_INVALID 6847 3.24 5.14 2.38 96 RCVD_IN_IADB_VOUCHED 6846 2.02 1.25 2.38 97 BAYES_05 6502 1.78 0.72 2.26 98 TO_MALFORMED 6442 1.54 0.01 2.24 99 MSGID_NOFQDN1 6285 1.50 0.01 2.18 100 T_XMDrugObfuBody_08 5960 2.76 4.28 2.07 101 XM_B_URI_Unicode 5866 2.25 2.71 2.04 102 TM2_M_URI_OPT_OUT 5824 2.08 2.20 2.02 103 T_XMDrugObfuBody_14 5750 2.95 5.04 2.00 104 TR_XM_SpammyRelay 5243 5.43 13.35 1.82 105 RCVD_IN_BL_SPAMCOP_NET 5196 5.54 13.73 1.80 106 BOTNET 5118 4.23 9.60 1.78 107 RCVD_IN_IADB_OPTIN 5037 1.47 0.86 1.75 108 XM_DK_Undo_01 4999 1.67 1.51 1.74 109 FROM_EXCESS_BASE64 4968 1.76 1.83 1.72 110 TR_Symld_Words 4823 1.40 0.81 1.67 111 TR_XM_UnparsRelay 4792 4.19 9.74 1.66 112 TooManyTo_003 4611 1.25 0.47 1.60 113 XMDiploma_00 4592 2.06 3.09 1.59 114 XM_B_Investor 4492 2.50 4.58 1.56 115 FROM_GOV_DKIM_AU 4474 1.15 0.26 1.55 116 SUBJ_ALL_CAPS 4339 1.71 2.15 1.51 117 TM2_M_VERY_LONG_WORD 4332 2.35 4.21 1.50 118 UNTRUSTED_Relay 4246 3.16 6.87 1.47 119 TR_DCC_Bayes_99 4218 8.08 22.62 1.46 120 TR_XM_PhishingBody 4207 2.34 4.28 1.46 121 XM_GoogleGroups 4065 1.27 0.96 1.41 122 XM_B_Unsub2 3926 1.85 2.93 1.36 123 TR_MetaPhish_Combo_01 3922 1.21 0.89 1.36 124 XMStockSpam_06 3899 1.58 2.06 1.35 125 IN_HORDE_ADDRESS_BOOK 3825 0.94 0.09 1.33 126 TR_XM_SpammyWords5 3804 2.12 3.88 1.32 127 XMGappySubj_01 3759 0.94 0.15 1.30 128 KHOP_HELO_FCRDNS 3732 1.33 1.41 1.30 129 T_TooManySym_03 3732 0.95 0.21 1.30 130 XM_SPF_SoftFail 3724 1.99 3.51 1.29 131 TooManyTo_004 3646 0.99 0.40 1.27 132 RCVD_IN_MSPIKE_BL 3583 3.12 7.23 1.24 133 TR_XM_MSPIKECOMBO 3583 3.12 7.23 1.24 134 URI_HEX 3552 1.29 1.43 1.23 135 URI_NOVOWEL 3374 1.15 1.09 1.17 136 HELO_NODOT 3311 0.83 0.13 1.15 137 HELO_NO_DOMAIN 3303 0.83 0.12 1.15 138 T_XMDrugObfuBody_00 3251 1.38 1.92 1.13 139 TR_XM_DK_SendGrid 3158 1.04 0.93 1.10 140 XM_OfRef6 3122 1.99 3.99 1.08 141 RCVD_IN_MSPIKE_L3 3097 2.29 4.96 1.08 142 RCVD_IN_VALIDITY_RPBL 3026 1.23 1.64 1.05 143 TooManyTo_005 2953 0.82 0.37 1.03 144 HTTPS_HTTP_MISMATCH 2942 1.05 1.12 1.02 145 XMCapTrack 2897 0.82 0.42 1.01 146 TVD_SPACE_RATIO 2830 0.73 0.17 0.98 147 XMBrknScrpt_02 2808 1.19 1.67 0.97 148 TVD_RCVD_IP 2800 1.05 1.23 0.97 149 XM_ShortIntro_01 2775 0.86 0.62 0.96 150 XM_UB50 2672 1.50 2.75 0.93 151 XMGenDplmaNmb 2620 1.22 1.89 0.91 152 XM_B_COPY_HTML 2605 1.05 1.38 0.90 153 XM_H_PHPMailer 2558 0.74 0.41 0.89 154 T_FILL_THIS_FORM_SHORT 2500 1.20 1.94 0.87 155 XM_H_Long_From02 2476 1.03 1.42 0.86 156 XMSexyCombo_05 2430 1.66 3.45 0.84 157 T_TVD_MIME_NO_HEADERS 2410 0.59 0.04 0.84 158 SpammyFromTLD_01 2341 1.12 1.79 0.81 159 RELAYCOUNTRY_CA 2217 2.65 6.78 0.77 160 SpammyFromTLD_02 2131 1.07 1.78 0.74 161 DKIM_ADSP_CUSTOM_MED 2125 0.83 1.04 0.74 162 XMBSHREFv2 2102 0.62 0.39 0.73 163 XMNoVowels 2082 0.66 0.52 0.72 164 RELAYCOUNTRY_AU 2044 1.43 3.03 0.71 165 T_XMHurry_00 1992 1.12 2.08 0.69 166 XMBdyGiftCard01 1929 0.67 0.67 0.67 167 T_OBFU_PDF_ATTACH 1926 0.51 0.16 0.67 168 RCVD_IN_PBL 1887 0.90 1.43 0.66 169 T_Symld_Words_02 1879 0.77 1.03 0.65 170 DKIM_ADSP_NXDOMAIN 1797 0.90 1.51 0.62 171 HTML_IMAGE_ONLY_20 1779 0.73 0.99 0.62 172 TO_NO_BRKTS_HTML_ONLY 1754 0.45 0.10 0.61 173 TR_XM_Base64_M1 1712 0.71 0.96 0.59 174 RELAYCOUNTRY_GB 1688 0.61 0.65 0.59 175 XM_B_SpammyWords4 1669 1.11 2.27 0.58 176 TR_XM_SpammyWords3 1637 1.94 4.94 0.57 177 MPART_ALT_DIFF_COUNT 1634 0.80 1.31 0.57 178 URI_TRY_3LD 1633 0.80 1.31 0.57 179 HTML_TAG_BALANCE_BODY 1624 0.66 0.86 0.56 180 TR_XM_SpammyWords2 1614 3.85 11.07 0.56 181 XMGappySubj_02 1573 0.39 0.04 0.55 182 XMBody_17 1548 1.33 3.08 0.54 183 XMSlimDrugH 1513 0.62 0.82 0.53 184 XM_B_DNDMA 1483 0.75 1.26 0.51 185 T_MANY_PILL_PRICE 1441 0.35 0.01 0.50 186 XM_ProductURIs 1441 0.76 1.32 0.50 187 T_TVD_FUZZY_SECURITIES 1436 0.34 0.01 0.50 188 XMSubMetaSxObfu_03 1390 0.50 0.54 0.48 189 XMSubMetaI_00 1357 0.58 0.83 0.47 190 FORGED_GMAIL_RCVD 1352 0.57 0.79 0.47 191 FILL_THIS_FORM 1335 0.52 0.63 0.46 192 MSGID_FROM_MTA_HEADER 1324 0.39 0.24 0.46 193 LongTLD 1274 0.52 0.69 0.44 194 XMPhish14 1250 0.54 0.78 0.43 195 PLING_QUERY 1246 0.44 0.46 0.43 196 NML_ADSP_CUSTOM_MED 1246 0.56 0.83 0.43 197 TR_XM_GMP_MSPIKE_UNDO2 1229 0.38 0.28 0.43 198 LOW_PRICE 1209 0.41 0.38 0.42 199 XMPhish30 1189 0.91 2.01 0.41 200 XMBody_106 1180 0.31 0.10 0.41 ----------------------------------------------------------------------