Email: 473928 Autolearn: 0 AvgScore: 4.87 AvgScanTime: 1.40 sec Spam: 137666 Autolearn: 0 AvgScore: 14.68 AvgScanTime: 1.61 sec Ham: 336262 Autolearn: 0 AvgScore: 0.85 AvgScanTime: 1.32 sec Time Spent Running SA: 184.83 hours Time Spent Processing Spam: 61.44 hours Time Spent Processing Ham: 123.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130412 89.43 94.73 87.26 2 DKIM_SIGNED 123728 79.65 89.88 75.47 3 XM_B_Unicode 117569 75.88 85.40 71.98 4 XM_DK_Pass 117553 77.37 85.39 74.09 5 DKIM_VALID 116457 76.43 84.59 73.09 6 RELAYCOUNTRY_US 110022 79.43 79.92 79.23 7 DCC_CHECK 99437 47.09 72.23 36.79 8 XM_B_SpammyWords 94128 53.19 68.37 46.97 9 XMListUnsubscribeExists 93671 54.53 68.04 48.99 10 DKIM_VALID_AU 90994 61.93 66.10 60.23 11 XM_B_Unicode3 66610 42.53 48.39 40.14 12 LOC_TINY_FONT_1 66593 34.93 48.37 29.43 13 XM_DK_Undo_02 58260 15.88 42.32 5.06 14 XM_B_SpammyWords2 54517 26.56 39.60 21.21 15 BAYES_50 54259 54.83 39.41 61.14 16 HTML_FONT_LOW_CONTRAST 49046 30.04 35.63 27.75 17 FVGT_m_MULTI_ODD 47975 28.02 34.85 25.22 18 T_KAM_HTML_FONT_INVALID 44595 25.61 32.39 22.83 19 BAYES_99 43878 11.79 31.87 3.56 20 DKIM_VALID_EF 43245 29.82 31.41 29.17 21 TR_XM_DKIM_Undo 41315 10.22 30.01 2.12 22 MIME_HTML_ONLY 39864 21.62 28.96 18.62 23 DCC_CHECK_NEGATIVE 36055 52.40 26.19 63.13 24 XMSubLong 33923 23.76 24.64 23.40 25 BAYES_999 33382 8.97 24.25 2.72 26 T_TM2_M_HEADER_IN_MSG 31611 28.70 22.96 31.05 27 TR_XM_DK_Unsub 31165 16.07 22.64 13.38 28 TR_DCC_Bayes_99 30839 7.46 22.40 1.35 29 XM_Multi_Part_URI 30368 16.00 22.06 13.52 30 RCVD_IN_MSPIKE_H2 27093 16.85 19.68 15.70 31 XM_B_Unsub 26088 11.88 18.95 8.99 32 RELAYCOUNTRY_META 25998 8.05 18.88 3.61 33 TR_XM_BayesUnsub 24916 10.38 18.10 7.21 34 UNPARSEABLE_RELAY 24186 13.23 17.57 11.45 35 TR_MAX_INTL_RELAY 21538 8.96 15.65 6.22 36 XM_B_SpammyWords3 19279 7.94 14.00 5.46 37 TR_XM_SpammyRelay 18833 5.35 13.68 1.93 38 LOTS_OF_MONEY 16999 9.25 12.35 7.99 39 RCVD_IN_BL_SPAMCOP_NET 16270 3.86 11.82 0.59 40 RCVD_IN_MSPIKE_WL 16136 17.77 11.72 20.25 41 BOTNET_IPINHOSTNAME 16003 5.72 11.62 3.31 42 TR_XM_SpammyWords4 14679 7.41 10.66 6.08 43 TR_XM_SpammyWords2 14482 3.34 10.52 0.39 44 BOTNET 13350 3.79 9.70 1.37 45 BAYES_80 12823 5.42 9.31 3.83 46 XM_Evil_Numbers_Gen 12640 8.79 9.18 8.64 47 FSL_BULK_SIG 12613 6.40 9.16 5.27 48 TR_XM_UnparsRelay 12328 3.75 8.96 1.62 49 XM_B_Phish_Phrases 12006 6.13 8.72 5.07 50 UNTRUSTED_Relay 11151 3.40 8.10 1.47 51 BAYES_60 11124 7.32 8.08 7.01 52 RCVD_IN_MSPIKE_BL 11037 3.14 8.02 1.15 53 TR_XM_MSPIKECOMBO 11031 3.14 8.01 1.15 54 XM_B_PhoneNumber 9159 8.94 6.65 9.88 55 HTML_IMAGE_RATIO_02 9133 5.15 6.63 4.55 56 RELAYCOUNTRY_CA 9015 2.38 6.55 0.67 57 XMSubMetaSx_00 8718 4.23 6.33 3.37 58 XM_UncommonTLD01 8436 4.53 6.13 3.87 59 LotsOfNums_01 8075 7.50 5.87 8.17 60 RCVD_IN_MSPIKE_H3 7957 8.21 5.78 9.21 61 TR_XM_SpammyWords3 7871 2.05 5.72 0.56 62 BAYES_95 7817 3.34 5.68 2.39 63 MPART_ALT_DIFF 7737 5.02 5.62 4.77 64 TR_XM_SPAMCOP 7521 1.75 5.46 0.23 65 RCVD_IN_MSPIKE_L3 7313 2.24 5.31 0.98 66 DKIM_INVALID 7271 3.22 5.28 2.38 67 XM_H_Long_From01 7229 5.49 5.25 5.59 68 XMStrtUSub 7137 5.29 5.18 5.34 69 XM_H_GMP 7058 5.36 5.13 5.45 70 XM_B_Investor 7011 2.71 5.09 1.74 71 XM_Body_Dirty_Words 6929 3.13 5.03 2.35 72 TR_XM_PhishingBody 6769 2.78 4.92 1.91 73 HTML_IMAGE_RATIO_04 6326 4.39 4.60 4.31 74 XM_B_SpammyTLD 6047 3.37 4.39 2.95 75 TR_XM_SpammyWords5 5791 2.09 4.21 1.22 76 XM_OfRef6 5707 1.79 4.15 0.83 77 TR_XM_NoHeaderRelay 5637 1.30 4.09 0.16 78 T_XMDrugObfuBody_14 5590 2.38 4.06 1.69 79 TooManyTo_001 5372 6.49 3.90 7.54 80 TM2_M_VERY_LONG_WORD 5305 2.12 3.85 1.41 81 T_XMDrugObfuBody_08 5272 2.39 3.83 1.80 82 MIME_QP_LONG_LINE 5271 4.98 3.83 5.45 83 XMSexyCombo_05 5196 1.83 3.77 1.04 84 XMNumbers 4853 3.30 3.53 3.20 85 MIME_HTML_MOSTLY 4646 2.81 3.37 2.57 86 XMDiploma_00 4630 2.11 3.36 1.60 87 XM_SPF_SoftFail 4511 1.90 3.28 1.33 88 HTML_IMAGE_RATIO_06 4427 3.17 3.22 3.15 89 XM_CamelCaseFrm001 4393 2.32 3.19 1.97 90 RCVD_IN_MSPIKE_H5 4287 5.67 3.11 6.72 91 TR_XM_MSPIKECOMBO2 4267 0.96 3.10 0.09 92 TM2_M_URI_OPT_OUT 4263 2.25 3.10 1.91 93 XM_UB50 4155 1.57 3.02 0.98 94 XM_B_URI_Unicode 4143 2.38 3.01 2.12 95 RELAYCOUNTRY_AU 4127 1.35 3.00 0.68 96 XM_B_Unsub2 4099 2.03 2.98 1.64 97 XM_URI_RBL 4059 1.12 2.95 0.37 98 MIME_HTML_ONLY_MULTI 4029 2.58 2.93 2.44 99 RCVD_IN_MSPIKE_H4 3892 3.89 2.83 4.32 100 SUBJ_ALL_CAPS 3885 1.74 2.82 1.30 101 T_TooManySym_01 3862 4.80 2.81 5.62 102 HTML_IMAGE_RATIO_08 3718 2.84 2.70 2.90 103 TR_XM_INV_DKIM 3543 0.76 2.57 0.02 104 XMBody_17 3354 0.94 2.44 0.33 105 XMStockSpam_06 3250 1.56 2.36 1.23 106 XM_B_SpammyWords4 3171 1.24 2.30 0.80 107 XMGenDplmaNmb 3106 1.41 2.26 1.07 108 MAILING_LIST_MULTI 3059 2.82 2.22 3.07 109 RCVD_IN_VALIDITY_RPBL 2962 0.65 2.15 0.04 110 TR_XM_INTL_Spamhaus 2912 0.75 2.12 0.19 111 FROM_EXCESS_BASE64 2898 1.64 2.11 1.45 112 XM_H_Long_From02 2854 1.19 2.07 0.83 113 USER_IN_DEF_DKIM_WL 2758 9.99 2.00 13.26 114 SpammyFromTLD_01 2725 1.12 1.98 0.76 115 T_FILL_THIS_FORM_SHORT 2701 1.09 1.96 0.74 116 RCVD_IN_IADB_LISTED 2691 3.00 1.95 3.43 117 RCVD_IN_MSPIKE_L4 2688 0.68 1.95 0.16 118 T_XMHurry_00 2673 1.04 1.94 0.66 119 SpammyFromTLD_02 2604 0.91 1.89 0.50 120 TR_XM_MaxSPIKE 2539 0.57 1.84 0.05 121 XMPhish30 2524 0.93 1.83 0.56 122 RCVD_IN_XBL 2319 0.50 1.68 0.01 123 RCVD_IN_IADB_SPF 2288 2.65 1.66 3.05 124 KHOP_HELO_FCRDNS 2265 1.43 1.65 1.34 125 XM_DK_Undo_01 2255 1.87 1.64 1.97 126 URI_NOVOWEL 2210 1.30 1.61 1.18 127 URI_HEX 2202 1.36 1.60 1.27 128 BAYES_40 2183 4.63 1.59 5.87 129 HTML_MIME_NO_HTML_TAG 2166 2.09 1.57 2.31 130 RCVD_IN_VALIDITY_SAFE 2136 3.36 1.55 4.11 131 XMBrknScrpt_02 2134 1.09 1.55 0.90 132 DIET_1 2134 0.61 1.55 0.22 133 RCVD_IN_PSBL 2118 0.46 1.54 0.02 134 SHORTCIRCUIT 2117 0.45 1.54 0.00 135 RCVD_IN_ZEN_LASTEXTERNAL 2117 0.45 1.54 0.00 136 XM_UB99 2091 0.44 1.52 0.00 137 RCVD_IN_IADB_DK 2087 2.32 1.52 2.65 138 T_XMDrugObfuBody_00 2078 1.07 1.51 0.89 139 RCVD_IN_SBL_CSS 2041 0.46 1.48 0.04 140 RCVD_IN_IADB_SENDERID 2040 2.38 1.48 2.75 141 URI_TRY_3LD 2035 0.73 1.48 0.43 142 T_REMOTE_IMAGE 2020 2.87 1.47 3.45 143 XM_SendGrid 1953 1.41 1.42 1.41 144 HTTPS_HTTP_MISMATCH 1951 0.92 1.42 0.72 145 TR_LOTS_OF_MONEY3 1920 0.60 1.39 0.27 146 XM_B_COPY_HTML 1896 0.80 1.38 0.56 147 XM_B_SEO 1892 0.56 1.37 0.23 148 RDNS_DYNAMIC 1892 0.51 1.37 0.16 149 RCVD_IN_PBL 1863 0.92 1.35 0.74 150 BOUNCE_MESSAGE 1850 3.68 1.34 4.64 151 ANY_BOUNCE_MESSAGE 1850 3.68 1.34 4.64 152 MultiRelay_CC 1826 0.51 1.33 0.17 153 HTML_FONT_TINY_NORDNS 1821 0.44 1.32 0.07 154 BOTNET_NORDNS 1812 0.39 1.32 0.01 155 DKIM_ADSP_NXDOMAIN 1804 0.65 1.31 0.38 156 XM_B_Phish66 1723 0.59 1.25 0.32 157 XM_UB80 1710 0.38 1.24 0.02 158 ALL_TRUSTED 1702 12.87 1.24 17.63 159 XMPhish14 1682 0.81 1.22 0.64 160 HK_RANDOM_REPLYTO 1656 0.40 1.20 0.08 161 RELAYCOUNTRY_FR 1653 0.57 1.20 0.32 162 XMBody_78 1640 0.57 1.19 0.32 163 XM_UB60 1631 0.41 1.18 0.09 164 BAYES_20 1629 3.72 1.18 4.75 165 RCVD_IN_IADB_VOUCHED 1625 1.87 1.18 2.15 166 XM_B_DNDMA 1614 0.56 1.17 0.32 167 STY_INVIS_DIRECT 1540 0.50 1.12 0.25 168 RCVD_IN_VALIDITY_CERTIFIED 1528 2.81 1.11 3.51 169 MPART_ALT_DIFF_COUNT 1528 0.74 1.11 0.58 170 TR_XM_RelayPhish 1524 0.37 1.11 0.07 171 TR_XM_SEO4 1501 0.39 1.09 0.10 172 TR_Mismatch_TLD_02 1493 0.41 1.08 0.13 173 T_Symld_Words_02 1487 0.88 1.08 0.80 174 XMHTML_After_End 1476 0.59 1.07 0.39 175 TVD_RCVD_IP 1474 0.94 1.07 0.88 176 XMSlimDrugH 1438 0.65 1.04 0.48 177 XMDiploma_06 1424 0.45 1.03 0.22 178 XMSubMetaI_00 1412 0.60 1.03 0.43 179 XM_B_DynamicLink 1410 0.32 1.02 0.03 180 RELAYCOUNTRY_CN 1406 0.34 1.02 0.06 181 XM_HighProb1 1397 0.30 1.01 0.00 182 TR_XM_InvalidRelay 1391 0.30 1.01 0.01 183 TR_XM_GMP_BULK_SIG 1378 0.38 1.00 0.13 184 HELO_DYNAMIC_SPLIT_IP 1376 0.30 1.00 0.01 185 TR_XM_PHPForged 1369 0.43 0.99 0.20 186 TR_XM_FormFill2 1357 0.43 0.99 0.20 187 TR_Symld_Words 1352 1.34 0.98 1.48 188 DKIM_ADSP_CUSTOM_MED 1346 0.83 0.98 0.76 189 TR_XM_PHPDW 1343 0.43 0.98 0.21 190 XM_UB999 1321 0.28 0.96 0.00 191 T_MONEY_PERCENT 1319 0.39 0.96 0.16 192 TR_LOTS_OF_MONEY2 1319 0.39 0.96 0.16 193 XM_H_PHPOS 1315 0.41 0.96 0.19 194 XM_GoogleGroups 1307 1.24 0.95 1.36 195 TM2_M_A_HREF_HREF 1300 0.51 0.94 0.33 196 TR_Mismatch_TLD_01 1297 0.47 0.94 0.27 197 SHOPIFY_IMG_NOT_RCVD_SFY 1279 0.42 0.93 0.21 198 XMSexyCombo_01 1262 0.34 0.92 0.11 199 T_TooManySym_02 1259 2.27 0.91 2.82 200 TR_XM_DK_SendGrid 1259 0.98 0.91 1.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 293413 89.43 94.73 87.26 2 RELAYCOUNTRY_US 266422 79.43 79.92 79.23 3 DKIM_SIGNED 253762 79.65 89.88 75.47 4 XM_DK_Pass 249141 77.37 85.39 74.09 5 DKIM_VALID 245762 76.43 84.59 73.09 6 XM_B_Unicode 242040 75.88 85.40 71.98 7 DCC_CHECK_NEGATIVE 212280 52.40 26.19 63.13 8 BAYES_50 205582 54.83 39.41 61.14 9 DKIM_VALID_AU 202528 61.93 66.10 60.23 10 XMListUnsubscribeExists 164741 54.53 68.04 48.99 11 XM_B_SpammyWords 157944 53.19 68.37 46.97 12 XM_B_Unicode3 134962 42.53 48.39 40.14 13 DCC_CHECK 123725 47.09 72.23 36.79 14 T_TM2_M_HEADER_IN_MSG 104405 28.70 22.96 31.05 15 LOC_TINY_FONT_1 98958 34.93 48.37 29.43 16 DKIM_VALID_EF 98091 29.82 31.41 29.17 17 HTML_FONT_LOW_CONTRAST 93306 30.04 35.63 27.75 18 FVGT_m_MULTI_ODD 84801 28.02 34.85 25.22 19 XMSubLong 78684 23.76 24.64 23.40 20 T_KAM_HTML_FONT_INVALID 76760 25.61 32.39 22.83 21 XM_B_SpammyWords2 71337 26.56 39.60 21.21 22 RCVD_IN_MSPIKE_WL 68094 17.77 11.72 20.25 23 MIME_HTML_ONLY 62620 21.62 28.96 18.62 24 ALL_TRUSTED 59281 12.87 1.24 17.63 25 RCVD_IN_MSPIKE_H2 52782 16.85 19.68 15.70 26 XM_Multi_Part_URI 45478 16.00 22.06 13.52 27 TR_XM_DK_Unsub 44987 16.07 22.64 13.38 28 USER_IN_DEF_DKIM_WL 44594 9.99 2.00 13.26 29 UNPARSEABLE_RELAY 38516 13.23 17.57 11.45 30 XM_B_PhoneNumber 33223 8.94 6.65 9.88 31 BAYES_00 30993 6.74 0.70 9.22 32 RCVD_IN_MSPIKE_H3 30962 8.21 5.78 9.21 33 XM_B_Unsub 30238 11.88 18.95 8.99 34 XM_Evil_Numbers_Gen 29039 8.79 9.18 8.64 35 LotsOfNums_01 27458 7.50 5.87 8.17 36 LOTS_OF_MONEY 26863 9.25 12.35 7.99 37 TooManyTo_001 25363 6.49 3.90 7.54 38 TR_XM_BayesUnsub 24256 10.38 18.10 7.21 39 BAYES_60 23585 7.32 8.08 7.01 40 XM_DKIMWhitelistDomains 23180 4.91 0.08 6.89 41 RCVD_IN_MSPIKE_H5 22603 5.67 3.11 6.72 42 TR_XM_DK_Bayes 22309 4.88 0.58 6.63 43 TR_XM_DK_Bayes1 21916 4.79 0.57 6.52 44 TR_MAX_INTL_RELAY 20908 8.96 15.65 6.22 45 TR_XM_SpammyWords4 20428 7.41 10.66 6.08 46 BAYES_40 19746 4.63 1.59 5.87 47 TR_XM_DK_Bayes2 18996 4.14 0.46 5.65 48 T_TooManySym_01 18885 4.80 2.81 5.62 49 XM_H_Long_From01 18810 5.49 5.25 5.59 50 XM_B_SpammyWords3 18353 7.94 14.00 5.46 51 XM_H_GMP 18328 5.36 5.13 5.45 52 MIME_QP_LONG_LINE 18321 4.98 3.83 5.45 53 XMStrtUSub 17951 5.29 5.18 5.34 54 FSL_BULK_SIG 17736 6.40 9.16 5.27 55 XM_B_Phish_Phrases 17051 6.13 8.72 5.07 56 XM_DK_Undo_02 17002 15.88 42.32 5.06 57 MPART_ALT_DIFF 16055 5.02 5.62 4.77 58 BAYES_20 15981 3.72 1.18 4.75 59 ANY_BOUNCE_MESSAGE 15605 3.68 1.34 4.64 60 BOUNCE_MESSAGE 15605 3.68 1.34 4.64 61 HTML_IMAGE_RATIO_02 15291 5.15 6.63 4.55 62 RCVD_IN_MSPIKE_H4 14529 3.89 2.83 4.32 63 HTML_IMAGE_RATIO_04 14498 4.39 4.60 4.31 64 XM_PDF 14225 3.21 0.72 4.23 65 RCVD_IN_VALIDITY_SAFE 13806 3.36 1.55 4.11 66 XM_UncommonTLD01 13013 4.53 6.13 3.87 67 BAYES_80 12871 5.42 9.31 3.83 68 RELAYCOUNTRY_META 12148 8.05 18.88 3.61 69 BAYES_99 11986 11.79 31.87 3.56 70 RCVD_IN_VALIDITY_CERTIFIED 11813 2.81 1.11 3.51 71 T_REMOTE_IMAGE 11601 2.87 1.47 3.45 72 RCVD_IN_IADB_LISTED 11526 3.00 1.95 3.43 73 XMSubMetaSx_00 11342 4.23 6.33 3.37 74 BOTNET_IPINHOSTNAME 11122 5.72 11.62 3.31 75 XMNumbers 10769 3.30 3.53 3.20 76 HTML_IMAGE_RATIO_06 10579 3.17 3.22 3.15 77 MAILING_LIST_MULTI 10308 2.82 2.22 3.07 78 RCVD_IN_IADB_SPF 10268 2.65 1.66 3.05 79 XM_B_SpammyTLD 9934 3.37 4.39 2.95 80 HTML_IMAGE_RATIO_08 9755 2.84 2.70 2.90 81 T_TooManySym_02 9498 2.27 0.91 2.82 82 RCVD_IN_IADB_SENDERID 9246 2.38 1.48 2.75 83 BAYES_999 9139 8.97 24.25 2.72 84 RCVD_IN_IADB_DK 8913 2.32 1.52 2.65 85 MIME_HTML_MOSTLY 8649 2.81 3.37 2.57 86 MIME_HTML_ONLY_MULTI 8210 2.58 2.93 2.44 87 BAYES_95 8034 3.34 5.68 2.39 88 DKIM_INVALID 8000 3.22 5.28 2.38 89 XM_Body_Dirty_Words 7903 3.13 5.03 2.35 90 TooManyTo_002 7827 1.85 0.68 2.33 91 HTML_MIME_NO_HTML_TAG 7753 2.09 1.57 2.31 92 BAYES_05 7481 1.76 0.63 2.22 93 RCVD_IN_IADB_VOUCHED 7242 1.87 1.18 2.15 94 TR_XM_DKIM_Undo 7142 10.22 30.01 2.12 95 XM_B_URI_Unicode 7113 2.38 3.01 2.12 96 INVALID_MSGID 7099 1.57 0.26 2.11 97 TO_MALFORMED 6671 1.41 0.03 1.98 98 XM_CamelCaseFrm001 6625 2.32 3.19 1.97 99 XM_DK_Undo_01 6623 1.87 1.64 1.97 100 TR_XM_SpammyRelay 6502 5.35 13.68 1.93 101 MSGID_NOFQDN1 6428 1.36 0.03 1.91 102 TR_XM_PhishingBody 6422 2.78 4.92 1.91 103 TM2_M_URI_OPT_OUT 6407 2.25 3.10 1.91 104 T_XMDrugObfuBody_08 6060 2.39 3.83 1.80 105 XM_B_Investor 5856 2.71 5.09 1.74 106 T_XMDrugObfuBody_14 5691 2.38 4.06 1.69 107 XM_B_Unsub2 5507 2.03 2.98 1.64 108 TR_XM_UnparsRelay 5462 3.75 8.96 1.62 109 XMDiploma_00 5371 2.11 3.36 1.60 110 TooManyTo_003 5107 1.24 0.57 1.52 111 RCVD_IN_IADB_OPTIN 4993 1.29 0.83 1.48 112 TR_Symld_Words 4981 1.34 0.98 1.48 113 UNTRUSTED_Relay 4939 3.40 8.10 1.47 114 FROM_EXCESS_BASE64 4859 1.64 2.11 1.45 115 HELO_NODOT 4759 1.09 0.28 1.42 116 HELO_NO_DOMAIN 4753 1.08 0.26 1.41 117 TM2_M_VERY_LONG_WORD 4740 2.12 3.85 1.41 118 XM_SendGrid 4737 1.41 1.42 1.41 119 BOTNET 4618 3.79 9.70 1.37 120 XM_GoogleGroups 4560 1.24 0.95 1.36 121 TR_DCC_Bayes_99 4526 7.46 22.40 1.35 122 KHOP_HELO_FCRDNS 4503 1.43 1.65 1.34 123 XM_SPF_SoftFail 4472 1.90 3.28 1.33 124 SUBJ_ALL_CAPS 4356 1.74 2.82 1.30 125 URI_HEX 4255 1.36 1.60 1.27 126 XMGappySubj_01 4149 0.93 0.19 1.23 127 XMStockSpam_06 4148 1.56 2.36 1.23 128 IN_HORDE_ADDRESS_BOOK 4130 0.89 0.07 1.23 129 TR_XM_SpammyWords5 4096 2.09 4.21 1.22 130 URI_NOVOWEL 3954 1.30 1.61 1.18 131 TooManyTo_004 3891 0.97 0.51 1.16 132 RCVD_IN_MSPIKE_BL 3868 3.14 8.02 1.15 133 TR_XM_MSPIKECOMBO 3867 3.14 8.01 1.15 134 XMCapTrack 3750 0.98 0.63 1.12 135 T_TooManySym_03 3726 0.84 0.20 1.11 136 XMGenDplmaNmb 3596 1.41 2.26 1.07 137 XM_ShortIntro_01 3499 0.93 0.65 1.04 138 XMSexyCombo_05 3495 1.83 3.77 1.04 139 TR_XM_DK_SendGrid 3368 0.98 0.91 1.00 140 XM_UB50 3292 1.57 3.02 0.98 141 RCVD_IN_MSPIKE_L3 3281 2.24 5.31 0.98 142 TooManyTo_005 3150 0.80 0.47 0.94 143 XM_H_PHPMailer 3142 0.80 0.46 0.93 144 XMBrknScrpt_02 3031 1.09 1.55 0.90 145 T_XMDrugObfuBody_00 2997 1.07 1.51 0.89 146 FROM_GOV_DKIM_AU 2987 0.67 0.15 0.89 147 TVD_SPACE_RATIO 2966 0.69 0.22 0.88 148 TVD_RCVD_IP 2960 0.94 1.07 0.88 149 TR_MetaPhish_Combo_01 2926 0.85 0.80 0.87 150 XM_OfRef6 2798 1.79 4.15 0.83 151 XM_H_Long_From02 2783 1.19 2.07 0.83 152 TO_NO_BRKTS_HTML_ONLY 2780 0.62 0.12 0.83 153 T_TVD_MIME_NO_HEADERS 2699 0.58 0.05 0.80 154 T_Symld_Words_02 2691 0.88 1.08 0.80 155 XM_B_SpammyWords4 2689 1.24 2.30 0.80 156 RELAYCOUNTRY_GB 2618 0.81 0.90 0.78 157 DKIM_ADSP_CUSTOM_MED 2564 0.83 0.98 0.76 158 SpammyFromTLD_01 2563 1.12 1.98 0.76 159 RCVD_IN_PBL 2502 0.92 1.35 0.74 160 T_FILL_THIS_FORM_SHORT 2487 1.09 1.96 0.74 161 HTTPS_HTTP_MISMATCH 2420 0.92 1.42 0.72 162 HTML_TAG_BALANCE_BODY 2320 0.72 0.80 0.69 163 RELAYCOUNTRY_AU 2284 1.35 3.00 0.68 164 RELAYCOUNTRY_CA 2253 2.38 6.55 0.67 165 T_XMHurry_00 2233 1.04 1.94 0.66 166 XMBdyGiftCard01 2175 0.66 0.68 0.65 167 HTML_IMAGE_ONLY_20 2168 0.72 0.90 0.64 168 XMPhish14 2159 0.81 1.22 0.64 169 XMGappySubj_02 2152 0.47 0.04 0.64 170 T_OBFU_PDF_ATTACH 2019 0.48 0.17 0.60 171 RCVD_IN_BL_SPAMCOP_NET 2000 3.86 11.82 0.59 172 XMMoneyMeta_00 1969 0.64 0.76 0.59 173 MPART_ALT_DIFF_COUNT 1959 0.74 1.11 0.58 174 XMNoVowels 1952 0.55 0.47 0.58 175 XMBSHREFv2 1903 0.51 0.38 0.57 176 XMPhish30 1894 0.93 1.83 0.56 177 XM_B_COPY_HTML 1872 0.80 1.38 0.56 178 TR_XM_SpammyWords3 1867 2.05 5.72 0.56 179 TR_XM_Base64_M1 1800 0.61 0.78 0.54 180 SpammyFromTLD_02 1695 0.91 1.89 0.50 181 MSGID_FROM_MTA_HEADER 1674 0.44 0.32 0.50 182 XM_ProductURIs 1651 0.60 0.87 0.49 183 XMSlimDrugH 1622 0.65 1.04 0.48 184 FORGED_GMAIL_RCVD 1570 0.54 0.71 0.47 185 NML_ADSP_CUSTOM_MED 1534 0.54 0.75 0.46 186 T_MANY_PILL_PRICE 1486 0.32 0.01 0.44 187 PLING_QUERY 1480 0.53 0.74 0.44 188 TRACKER_ID 1474 0.33 0.08 0.44 189 XMLngstWrd_00 1457 0.46 0.52 0.43 190 XMSubMetaI_00 1449 0.60 1.03 0.43 191 URI_TRY_3LD 1434 0.73 1.48 0.43 192 XMDateMe_00 1390 0.47 0.60 0.41 193 HTML_IMAGE_ONLY_32 1344 0.34 0.19 0.40 194 XMSubMetaSxObfu_02 1335 0.36 0.28 0.40 195 TR_XM_SpammyWords2 1326 3.34 10.52 0.39 196 SHORT_HELO_AND_INLINE_IMAGE 1320 0.29 0.04 0.39 197 HTML_IMAGE_ONLY_28 1319 0.37 0.30 0.39 198 XMHTML_After_End 1302 0.59 1.07 0.39 199 LongTLD 1271 0.46 0.66 0.38 200 DKIM_ADSP_NXDOMAIN 1270 0.65 1.31 0.38 ----------------------------------------------------------------------