Email: 435126 Autolearn: 0 AvgScore: 5.26 AvgScanTime: 1.37 sec Spam: 136806 Autolearn: 0 AvgScore: 14.42 AvgScanTime: 1.55 sec Ham: 298320 Autolearn: 0 AvgScore: 1.05 AvgScanTime: 1.28 sec Time Spent Running SA: 165.05 hours Time Spent Processing Spam: 58.96 hours Time Spent Processing Ham: 106.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130328 87.92 95.26 84.55 2 DKIM_SIGNED 124685 79.40 91.14 74.01 3 XM_DK_Pass 119250 77.30 87.17 72.77 4 DKIM_VALID 118256 76.49 86.44 71.93 5 XM_B_Unicode 115773 74.52 84.63 69.89 6 RELAYCOUNTRY_US 113290 79.52 82.81 78.01 7 DCC_CHECK 100537 50.30 73.49 39.67 8 XMListUnsubscribeExists 93652 54.63 68.46 48.28 9 XM_B_SpammyWords 92690 51.63 67.75 44.23 10 DKIM_VALID_AU 92496 62.05 67.61 59.50 11 LOC_TINY_FONT_1 69410 36.56 50.74 30.06 12 XM_B_Unicode3 66872 43.00 48.88 40.30 13 XM_DK_Undo_02 58164 16.97 42.52 5.26 14 BAYES_50 56513 53.93 41.31 59.72 15 XM_B_SpammyWords2 53296 25.78 38.96 19.73 16 HTML_FONT_LOW_CONTRAST 52614 31.23 38.46 27.92 17 FVGT_m_MULTI_ODD 48684 27.81 35.59 24.24 18 DKIM_VALID_EF 42729 29.72 31.23 29.03 19 BAYES_99 41970 12.23 30.68 3.77 20 T_KAM_HTML_FONT_INVALID 41057 24.18 30.01 21.51 21 TR_XM_DKIM_Undo 40030 10.72 29.26 2.22 22 MIME_HTML_ONLY 35772 21.53 26.15 19.41 23 DCC_CHECK_NEGATIVE 34542 49.26 25.25 60.27 24 BAYES_999 32576 9.50 23.81 2.94 25 XMSubLong 31886 23.59 23.31 23.72 26 XM_Multi_Part_URI 31545 16.84 23.06 13.99 27 TR_XM_DK_Unsub 31515 16.22 23.04 13.09 28 TR_DCC_Bayes_99 29967 7.73 21.90 1.22 29 RCVD_IN_MSPIKE_H2 29808 17.09 21.79 14.93 30 T_TM2_M_HEADER_IN_MSG 29349 26.24 21.45 28.44 31 XM_B_Unsub 26588 12.05 19.43 8.67 32 UNPARSEABLE_RELAY 26061 14.22 19.05 12.01 33 TR_XM_BayesUnsub 25721 10.51 18.80 6.71 34 RELAYCOUNTRY_META 22073 7.29 16.13 3.23 35 TR_MAX_INTL_RELAY 21013 9.12 15.36 6.25 36 XM_B_SpammyWords3 19280 7.97 14.09 5.15 37 RCVD_IN_BL_SPAMCOP_NET 18780 4.83 13.73 0.75 38 LOTS_OF_MONEY 17329 9.42 12.67 7.93 39 BOTNET_IPINHOSTNAME 15915 5.95 11.63 3.35 40 TR_XM_SpammyRelay 15818 4.77 11.56 1.65 41 RCVD_IN_MSPIKE_WL 15196 16.57 11.11 19.07 42 TR_XM_SpammyWords4 15105 6.31 11.04 4.14 43 BOTNET 14172 4.07 10.36 1.19 44 TR_XM_SpammyWords2 13595 3.49 9.94 0.53 45 XM_Evil_Numbers_Gen 13412 9.52 9.80 9.38 46 XM_B_Phish_Phrases 13011 6.77 9.51 5.52 47 BAYES_80 12804 5.62 9.36 3.90 48 FSL_BULK_SIG 12673 8.47 9.26 8.10 49 TR_XM_UnparsRelay 12442 4.00 9.09 1.67 50 TR_XM_SPAMCOP 11722 2.90 8.57 0.30 51 BAYES_60 11438 7.35 8.36 6.88 52 XMSubMetaSx_00 10106 4.61 7.39 3.33 53 UNTRUSTED_Relay 9669 3.21 7.07 1.44 54 XM_H_GMP 9252 5.42 6.76 4.80 55 LotsOfNums_01 9162 8.01 6.70 8.62 56 HTML_IMAGE_RATIO_02 9004 5.48 6.58 4.98 57 RCVD_IN_MSPIKE_BL 8879 2.75 6.49 1.04 58 TR_XM_MSPIKECOMBO 8867 2.75 6.48 1.04 59 XM_Body_Dirty_Words 8210 3.54 6.00 2.41 60 XM_H_Long_From01 7933 5.82 5.80 5.84 61 XM_B_PhoneNumber 7816 7.53 5.71 8.36 62 MPART_ALT_DIFF 7694 4.92 5.62 4.60 63 RELAYCOUNTRY_CA 7443 2.16 5.44 0.66 64 BAYES_95 7372 3.31 5.39 2.35 65 T_XMDrugObfuBody_14 7094 2.50 5.19 1.27 66 XM_UncommonTLD01 7091 4.34 5.18 3.96 67 RCVD_IN_MSPIKE_H3 6959 7.53 5.09 8.65 68 XM_B_Investor 6879 2.65 5.03 1.56 69 DKIM_INVALID 6429 2.91 4.70 2.08 70 XM_B_SpammyTLD 6321 3.50 4.62 2.99 71 XMStrtUSub 6054 4.81 4.43 4.98 72 HTML_IMAGE_RATIO_04 5990 4.72 4.38 4.87 73 XMSexyCombo_05 5643 2.03 4.12 1.07 74 RCVD_IN_MSPIKE_L3 5539 1.89 4.05 0.90 75 TR_XM_PhishingBody 5502 2.24 4.02 1.43 76 TR_XM_SpammyWords3 5394 1.58 3.94 0.49 77 XM_OfRef6 5282 1.74 3.86 0.76 78 TR_XM_SpammyWords5 5093 1.83 3.72 0.97 79 MIME_HTML_MOSTLY 5042 2.93 3.69 2.59 80 TM2_M_VERY_LONG_WORD 4943 2.85 3.61 2.50 81 T_XMDrugObfuBody_08 4740 2.18 3.46 1.60 82 XM_SPF_SoftFail 4683 1.84 3.42 1.12 83 XM_CamelCaseFrm001 4630 2.48 3.38 2.06 84 XM_UB50 4560 1.66 3.33 0.89 85 RCVD_IN_MSPIKE_H5 4431 5.38 3.24 6.37 86 TR_XM_NoHeaderRelay 4429 1.11 3.24 0.14 87 TooManyTo_001 4299 5.65 3.14 6.80 88 HTML_IMAGE_RATIO_06 4293 3.17 3.14 3.18 89 XMNumbers 4259 2.99 3.11 2.93 90 XMDiploma_00 4099 2.21 3.00 1.86 91 MIME_HTML_ONLY_MULTI 4017 2.63 2.94 2.49 92 XM_B_Unsub2 3850 1.80 2.81 1.33 93 RELAYCOUNTRY_AU 3846 1.33 2.81 0.65 94 HTML_IMAGE_RATIO_08 3812 2.38 2.79 2.19 95 RCVD_IN_MSPIKE_H4 3806 3.65 2.78 4.05 96 XM_B_URI_Unicode 3658 1.98 2.67 1.66 97 T_XMHurry_00 3489 1.17 2.55 0.53 98 XM_B_SpammyWords4 3468 1.20 2.53 0.59 99 MIME_QP_LONG_LINE 3396 4.27 2.48 5.09 100 TM2_M_URI_OPT_OUT 3376 2.01 2.47 1.80 101 SUBJ_ALL_CAPS 3299 1.67 2.41 1.32 102 XMBody_17 3296 1.10 2.41 0.49 103 T_TooManySym_01 3280 4.72 2.40 5.79 104 XM_URI_RBL 3089 0.95 2.26 0.35 105 XMStockSpam_06 3003 1.49 2.20 1.17 106 FROM_EXCESS_BASE64 2962 1.71 2.17 1.50 107 T_FILL_THIS_FORM_SHORT 2942 1.20 2.15 0.76 108 TR_XM_MSPIKECOMBO2 2852 0.73 2.08 0.10 109 TR_XM_INV_DKIM 2827 0.66 2.07 0.01 110 MAILING_LIST_MULTI 2819 2.69 2.06 2.99 111 RCVD_IN_VALIDITY_SAFE 2758 3.56 2.02 4.27 112 USER_IN_DEF_DKIM_WL 2635 10.10 1.93 13.84 113 TR_LOTS_OF_MONEY3 2587 0.86 1.89 0.38 114 XMSubMetaI_00 2562 1.08 1.87 0.72 115 SpammyFromTLD_02 2448 1.00 1.79 0.63 116 XMPhish30 2430 0.92 1.78 0.53 117 BOTNET_NORDNS 2418 0.57 1.77 0.02 118 XMGenDplmaNmb 2393 1.21 1.75 0.96 119 STY_INVIS_DIRECT 2387 0.67 1.74 0.18 120 THIS_AD 2335 0.79 1.71 0.36 121 URI_NOVOWEL 2295 1.26 1.68 1.07 122 XM_H_Long_From02 2286 0.97 1.67 0.65 123 T_XMDrugObfuBody_00 2281 1.22 1.67 1.02 124 TR_XM_InvalidRelay 2281 0.53 1.67 0.01 125 XMBrknScrpt_02 2274 1.15 1.66 0.92 126 XM_SendGrid 2227 1.55 1.63 1.52 127 TR_XM_GMP_BULK_SIG 2221 0.59 1.62 0.11 128 KHOP_HELO_FCRDNS 2206 1.70 1.61 1.74 129 XM_B_DNDMA 2201 0.88 1.61 0.54 130 SpammyFromTLD_01 2184 0.95 1.60 0.66 131 BAYES_40 2143 4.15 1.57 5.34 132 RCVD_IN_MSPIKE_L4 2139 0.58 1.56 0.13 133 TR_XM_INTL_Spamhaus 2116 0.59 1.55 0.15 134 TR_XM_MaxSPIKE 2108 0.53 1.54 0.07 135 RELAYCOUNTRY_FR 2081 0.67 1.52 0.28 136 RCVD_IN_IADB_LISTED 2059 2.74 1.51 3.31 137 XM_DK_Undo_01 2051 1.52 1.50 1.53 138 RCVD_IN_VALIDITY_RPBL 2039 0.51 1.49 0.06 139 URI_TRY_3LD 2035 0.82 1.49 0.52 140 URI_HEX 2028 1.37 1.48 1.33 141 DKIM_ADSP_CUSTOM_MED 2027 1.03 1.48 0.82 142 RCVD_IN_PSBL 2025 0.49 1.48 0.03 143 XM_B_SEO 2012 0.59 1.47 0.19 144 XM_ProductURIs 1964 0.77 1.44 0.47 145 HTML_MIME_NO_HTML_TAG 1962 2.24 1.43 2.61 146 T_REMOTE_IMAGE 1936 2.77 1.42 3.39 147 RCVD_IN_VALIDITY_CERTIFIED 1901 2.96 1.39 3.68 148 HK_RANDOM_REPLYTO 1897 0.49 1.39 0.08 149 HTML_FONT_TINY_NORDNS 1883 0.49 1.38 0.08 150 XM_B_COPY_HTML 1874 1.09 1.37 0.96 151 TR_Symld_Words 1842 1.56 1.35 1.66 152 NML_ADSP_CUSTOM_MED 1823 0.75 1.33 0.48 153 RDNS_DYNAMIC 1734 0.52 1.27 0.17 154 MultiRelay_CC 1704 0.49 1.25 0.14 155 RCVD_IN_IADB_SPF 1669 2.41 1.22 2.96 156 SHORTCIRCUIT 1665 0.38 1.22 0.00 157 RCVD_IN_ZEN_LASTEXTERNAL 1665 0.38 1.22 0.00 158 XM_UB99 1653 0.38 1.21 0.00 159 TR_XM_SEO4 1651 0.43 1.21 0.07 160 RCVD_IN_PBL 1610 0.79 1.18 0.62 161 XMBody_78 1586 0.68 1.16 0.45 162 TR_XM_RelayPhish 1584 0.43 1.16 0.09 163 BAYES_20 1570 5.07 1.15 6.87 164 XM_B_Phish66 1559 0.56 1.14 0.29 165 MPART_ALT_DIFF_COUNT 1547 0.69 1.13 0.49 166 RCVD_IN_IADB_DK 1534 2.10 1.12 2.54 167 RCVD_IN_SBL_CSS 1526 0.37 1.12 0.03 168 RCVD_IN_IADB_SENDERID 1496 2.16 1.09 2.65 169 DIET_1 1486 0.57 1.09 0.34 170 ALL_TRUSTED 1469 13.43 1.07 19.09 171 TVD_RCVD_IP 1467 0.99 1.07 0.95 172 RCVD_IN_XBL 1459 0.35 1.07 0.02 173 FORGED_GMAIL_RCVD 1450 0.72 1.06 0.57 174 HTTPS_HTTP_MISMATCH 1422 0.80 1.04 0.70 175 SHOPIFY_IMG_NOT_RCVD_SFY 1412 0.49 1.03 0.24 176 ANY_BOUNCE_MESSAGE 1411 6.04 1.03 8.33 177 BOUNCE_MESSAGE 1411 6.03 1.03 8.33 178 TR_XM_PHPForged 1405 0.49 1.03 0.25 179 TR_Mismatch_TLD_02 1391 0.39 1.02 0.10 180 TR_XM_FormFill2 1370 0.49 1.00 0.25 181 TR_XM_PHPDW 1360 0.49 0.99 0.25 182 HTML_TAG_BALANCE_BODY 1352 0.62 0.99 0.45 183 TM2_M_OBFU_COMMENT 1332 0.55 0.97 0.35 184 XM_H_PHPOS 1320 0.47 0.96 0.24 185 XM_UB60 1297 0.36 0.95 0.09 186 XMSexyCombo_01 1290 0.47 0.94 0.26 187 TR_XM_DK_SendGrid 1288 0.96 0.94 0.97 188 XMClaimOffer 1286 0.36 0.94 0.09 189 RCVD_IN_IADB_VOUCHED 1285 1.77 0.94 2.15 190 TR_LOTS_OF_MONEY2 1258 0.51 0.92 0.32 191 T_MONEY_PERCENT 1258 0.51 0.92 0.32 192 XM_DIRTYINTL 1248 0.33 0.91 0.06 193 T_Symld_Words_02 1241 0.67 0.91 0.56 194 HELO_DYNAMIC_SPLIT_IP 1204 0.28 0.88 0.01 195 XMReplyNow 1194 0.41 0.87 0.19 196 RCVD_IN_MSPIKE_L5 1189 0.29 0.87 0.02 197 TM2_M_A_HREF_HREF 1169 0.49 0.85 0.33 198 MISSING_HEADERS 1167 0.50 0.85 0.33 199 DKIM_ADSP_NXDOMAIN 1159 0.47 0.85 0.29 200 NO_DNS_FOR_FROM 1155 0.43 0.84 0.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 252233 87.92 95.26 84.55 2 RELAYCOUNTRY_US 232716 79.52 82.81 78.01 3 DKIM_SIGNED 220793 79.40 91.14 74.01 4 XM_DK_Pass 217082 77.30 87.17 72.77 5 DKIM_VALID 214576 76.49 86.44 71.93 6 XM_B_Unicode 208484 74.52 84.63 69.89 7 DCC_CHECK_NEGATIVE 179785 49.26 25.25 60.27 8 BAYES_50 178151 53.93 41.31 59.72 9 DKIM_VALID_AU 177494 62.05 67.61 59.50 10 XMListUnsubscribeExists 144039 54.63 68.46 48.28 11 XM_B_SpammyWords 131960 51.63 67.75 44.23 12 XM_B_Unicode3 120219 43.00 48.88 40.30 13 DCC_CHECK 118334 50.30 73.49 39.67 14 LOC_TINY_FONT_1 89687 36.56 50.74 30.06 15 DKIM_VALID_EF 86601 29.72 31.23 29.03 16 T_TM2_M_HEADER_IN_MSG 84844 26.24 21.45 28.44 17 HTML_FONT_LOW_CONTRAST 83280 31.23 38.46 27.92 18 FVGT_m_MULTI_ODD 72315 27.81 35.59 24.24 19 XMSubLong 70766 23.59 23.31 23.72 20 T_KAM_HTML_FONT_INVALID 64161 24.18 30.01 21.51 21 XM_B_SpammyWords2 58872 25.78 38.96 19.73 22 MIME_HTML_ONLY 57913 21.53 26.15 19.41 23 ALL_TRUSTED 56959 13.43 1.07 19.09 24 RCVD_IN_MSPIKE_WL 56895 16.57 11.11 19.07 25 RCVD_IN_MSPIKE_H2 44547 17.09 21.79 14.93 26 XM_Multi_Part_URI 41748 16.84 23.06 13.99 27 USER_IN_DEF_DKIM_WL 41295 10.10 1.93 13.84 28 TR_XM_DK_Unsub 39063 16.22 23.04 13.09 29 UNPARSEABLE_RELAY 35833 14.22 19.05 12.01 30 XM_Evil_Numbers_Gen 27993 9.52 9.80 9.38 31 BAYES_00 27140 6.38 0.44 9.10 32 XM_B_Unsub 25855 12.05 19.43 8.67 33 RCVD_IN_MSPIKE_H3 25803 7.53 5.09 8.65 34 LotsOfNums_01 25701 8.01 6.70 8.62 35 XM_B_PhoneNumber 24954 7.53 5.71 8.36 36 ANY_BOUNCE_MESSAGE 24859 6.04 1.03 8.33 37 BOUNCE_MESSAGE 24848 6.03 1.03 8.33 38 FSL_BULK_SIG 24170 8.47 9.26 8.10 39 LOTS_OF_MONEY 23664 9.42 12.67 7.93 40 BAYES_60 20526 7.35 8.36 6.88 41 BAYES_20 20508 5.07 1.15 6.87 42 TooManyTo_001 20285 5.65 3.14 6.80 43 TR_XM_DK_Bayes 20053 4.72 0.34 6.72 44 TR_XM_BayesUnsub 20004 10.51 18.80 6.71 45 TR_XM_DK_Bayes1 19771 4.65 0.34 6.63 46 RCVD_IN_MSPIKE_H5 19000 5.38 3.24 6.37 47 XM_DKIMWhitelistDomains 18826 4.34 0.03 6.31 48 TR_MAX_INTL_RELAY 18655 9.12 15.36 6.25 49 XM_H_Long_From01 17408 5.82 5.80 5.84 50 T_TooManySym_01 17268 4.72 2.40 5.79 51 TR_XM_DK_Bayes2 16843 3.95 0.24 5.65 52 XM_B_Phish_Phrases 16454 6.77 9.51 5.52 53 BAYES_40 15918 4.15 1.57 5.34 54 XM_DK_Undo_02 15697 16.97 42.52 5.26 55 XM_B_SpammyWords3 15378 7.97 14.09 5.15 56 MIME_QP_LONG_LINE 15188 4.27 2.48 5.09 57 XMStrtUSub 14864 4.81 4.43 4.98 58 HTML_IMAGE_RATIO_02 14842 5.48 6.58 4.98 59 HTML_IMAGE_RATIO_04 14534 4.72 4.38 4.87 60 XM_H_GMP 14334 5.42 6.76 4.80 61 MPART_ALT_DIFF 13722 4.92 5.62 4.60 62 XM_PDF 13206 3.25 0.68 4.43 63 RCVD_IN_VALIDITY_SAFE 12753 3.56 2.02 4.27 64 TR_XM_SpammyWords4 12352 6.31 11.04 4.14 65 RCVD_IN_MSPIKE_H4 12092 3.65 2.78 4.05 66 XM_UncommonTLD01 11801 4.34 5.18 3.96 67 BAYES_80 11631 5.62 9.36 3.90 68 BAYES_99 11254 12.23 30.68 3.77 69 RCVD_IN_VALIDITY_CERTIFIED 10975 2.96 1.39 3.68 70 T_REMOTE_IMAGE 10110 2.77 1.42 3.39 71 BOTNET_IPINHOSTNAME 9990 5.95 11.63 3.35 72 XMSubMetaSx_00 9939 4.61 7.39 3.33 73 RCVD_IN_IADB_LISTED 9873 2.74 1.51 3.31 74 RELAYCOUNTRY_META 9628 7.29 16.13 3.23 75 HTML_IMAGE_RATIO_06 9492 3.17 3.14 3.18 76 T_TooManySym_02 9196 2.36 0.78 3.08 77 MAILING_LIST_MULTI 8906 2.69 2.06 2.99 78 XM_B_SpammyTLD 8905 3.50 4.62 2.99 79 RCVD_IN_IADB_SPF 8827 2.41 1.22 2.96 80 BAYES_999 8782 9.50 23.81 2.94 81 XMNumbers 8739 2.99 3.11 2.93 82 RCVD_IN_IADB_SENDERID 7916 2.16 1.09 2.65 83 HTML_MIME_NO_HTML_TAG 7783 2.24 1.43 2.61 84 MIME_HTML_MOSTLY 7727 2.93 3.69 2.59 85 RCVD_IN_IADB_DK 7591 2.10 1.12 2.54 86 TM2_M_VERY_LONG_WORD 7447 2.85 3.61 2.50 87 MIME_HTML_ONLY_MULTI 7430 2.63 2.94 2.49 88 XM_Body_Dirty_Words 7195 3.54 6.00 2.41 89 BAYES_95 7018 3.31 5.39 2.35 90 INVALID_MSGID 7004 1.69 0.24 2.35 91 TR_XM_DKIM_Undo 6632 10.72 29.26 2.22 92 HTML_IMAGE_RATIO_08 6530 2.38 2.79 2.19 93 TO_MALFORMED 6469 1.50 0.04 2.17 94 TooManyTo_002 6465 1.70 0.67 2.17 95 RCVD_IN_IADB_VOUCHED 6401 1.77 0.94 2.15 96 MSGID_NOFQDN1 6247 1.44 0.00 2.09 97 DKIM_INVALID 6217 2.91 4.70 2.08 98 BAYES_05 6173 1.59 0.53 2.07 99 XM_CamelCaseFrm001 6156 2.48 3.38 2.06 100 XMDiploma_00 5536 2.21 3.00 1.86 101 TM2_M_URI_OPT_OUT 5365 2.01 2.47 1.80 102 KHOP_HELO_FCRDNS 5181 1.70 1.61 1.74 103 TR_XM_UnparsRelay 4983 4.00 9.09 1.67 104 TR_Symld_Words 4949 1.56 1.35 1.66 105 XM_B_URI_Unicode 4942 1.98 2.67 1.66 106 TR_XM_SpammyRelay 4925 4.77 11.56 1.65 107 T_XMDrugObfuBody_08 4759 2.18 3.46 1.60 108 RCVD_IN_IADB_OPTIN 4676 1.27 0.61 1.57 109 XM_B_Investor 4662 2.65 5.03 1.56 110 XM_DK_Undo_01 4560 1.52 1.50 1.53 111 XM_SendGrid 4525 1.55 1.63 1.52 112 FROM_EXCESS_BASE64 4470 1.71 2.17 1.50 113 TooManyTo_003 4339 1.17 0.56 1.45 114 UNTRUSTED_Relay 4289 3.21 7.07 1.44 115 TR_XM_PhishingBody 4257 2.24 4.02 1.43 116 XM_B_Unsub2 3976 1.80 2.81 1.33 117 URI_HEX 3953 1.37 1.48 1.33 118 SUBJ_ALL_CAPS 3950 1.67 2.41 1.32 119 IN_HORDE_ADDRESS_BOOK 3919 0.94 0.11 1.31 120 T_XMDrugObfuBody_14 3797 2.50 5.19 1.27 121 T_TooManySym_03 3707 0.91 0.18 1.24 122 TR_DCC_Bayes_99 3652 7.73 21.90 1.22 123 BOTNET 3547 4.07 10.36 1.19 124 XMStockSpam_06 3496 1.49 2.20 1.17 125 XM_GoogleGroups 3477 1.02 0.70 1.17 126 TooManyTo_004 3372 0.91 0.43 1.13 127 XM_SPF_SoftFail 3344 1.84 3.42 1.12 128 XM_ShortIntro_01 3283 0.96 0.67 1.10 129 XMGappySubj_01 3202 0.78 0.14 1.07 130 URI_NOVOWEL 3199 1.26 1.68 1.07 131 XMSexyCombo_05 3188 2.03 4.12 1.07 132 RCVD_IN_MSPIKE_BL 3107 2.75 6.49 1.04 133 TR_XM_MSPIKECOMBO 3106 2.75 6.48 1.04 134 TVD_SPACE_RATIO 3082 0.77 0.19 1.03 135 T_XMDrugObfuBody_00 3045 1.22 1.67 1.02 136 FROM_GOV_DKIM_AU 3003 0.77 0.25 1.01 137 TR_XM_DK_SendGrid 2892 0.96 0.94 0.97 138 TR_XM_SpammyWords5 2885 1.83 3.72 0.97 139 XMGenDplmaNmb 2876 1.21 1.75 0.96 140 XM_B_COPY_HTML 2854 1.09 1.37 0.96 141 TVD_RCVD_IP 2842 0.99 1.07 0.95 142 XM_H_PHPMailer 2744 0.77 0.45 0.92 143 XMBrknScrpt_02 2736 1.15 1.66 0.92 144 HELO_NODOT 2731 0.67 0.14 0.92 145 HELO_NO_DOMAIN 2718 0.66 0.13 0.91 146 RCVD_IN_MSPIKE_L3 2670 1.89 4.05 0.90 147 TooManyTo_005 2667 0.73 0.37 0.89 148 XM_UB50 2649 1.66 3.33 0.89 149 XMCapTrack 2642 0.73 0.39 0.89 150 DKIM_ADSP_CUSTOM_MED 2441 1.03 1.48 0.82 151 T_FILL_THIS_FORM_SHORT 2278 1.20 2.15 0.76 152 XM_OfRef6 2275 1.74 3.86 0.76 153 T_TVD_MIME_NO_HEADERS 2246 0.53 0.04 0.75 154 RCVD_IN_BL_SPAMCOP_NET 2245 4.83 13.73 0.75 155 XMSubMetaI_00 2149 1.08 1.87 0.72 156 TR_XM_Base64_M1 2097 0.73 0.80 0.70 157 HTTPS_HTTP_MISMATCH 2079 0.80 1.04 0.70 158 XMBSHREFv2 2073 0.61 0.43 0.69 159 T_OBFU_PDF_ATTACH 2015 0.50 0.11 0.68 160 SpammyFromTLD_01 1959 0.95 1.60 0.66 161 RELAYCOUNTRY_CA 1955 2.16 5.44 0.66 162 XM_H_Long_From02 1943 0.97 1.67 0.65 163 RELAYCOUNTRY_AU 1938 1.33 2.81 0.65 164 TR_MetaPhish_Combo_01 1911 0.61 0.53 0.64 165 SpammyFromTLD_02 1887 1.00 1.79 0.63 166 RCVD_IN_PBL 1843 0.79 1.18 0.62 167 HTML_IMAGE_ONLY_20 1819 0.67 0.80 0.61 168 TO_NO_BRKTS_HTML_ONLY 1798 0.46 0.15 0.60 169 XM_B_SpammyWords4 1757 1.20 2.53 0.59 170 FORGED_GMAIL_RCVD 1690 0.72 1.06 0.57 171 T_Symld_Words_02 1681 0.67 0.91 0.56 172 XMNoVowels 1651 0.58 0.65 0.55 173 RELAYCOUNTRY_GB 1645 0.58 0.64 0.55 174 XM_B_DNDMA 1622 0.88 1.61 0.54 175 XMPhish30 1594 0.92 1.78 0.53 176 TR_XM_SpammyWords2 1586 3.49 9.94 0.53 177 T_XMHurry_00 1581 1.17 2.55 0.53 178 XMLngstWrd_00 1563 0.61 0.79 0.52 179 XMSubMetaSxObfu_03 1551 0.62 0.82 0.52 180 URI_TRY_3LD 1551 0.82 1.49 0.52 181 HTML_FONT_FACE_BAD 1530 0.49 0.42 0.51 182 XMBdyGiftCard01 1485 0.57 0.71 0.50 183 XMBody_17 1470 1.10 2.41 0.49 184 HTML_IMAGE_ONLY_32 1464 0.38 0.14 0.49 185 TR_XM_SpammyWords3 1460 1.58 3.94 0.49 186 MPART_ALT_DIFF_COUNT 1448 0.69 1.13 0.49 187 NML_ADSP_CUSTOM_MED 1439 0.75 1.33 0.48 188 XMSlimDrugH 1421 0.54 0.68 0.48 189 XM_ProductURIs 1404 0.77 1.44 0.47 190 TR_XM_GMP_MSPIKE_UNDO2 1398 0.39 0.22 0.47 191 XMBody_78 1356 0.68 1.16 0.45 192 HTML_TAG_BALANCE_BODY 1333 0.62 0.99 0.45 193 XMMoneyMeta_00 1328 0.48 0.55 0.45 194 MSGID_FROM_MTA_HEADER 1310 0.39 0.28 0.44 195 TR_Mismatch_TLD_01 1298 0.51 0.68 0.44 196 LongTLD 1294 0.47 0.55 0.43 197 XMLngstWrd_01 1275 0.46 0.53 0.43 198 TR_LOTS_OF_MONEY3 1140 0.86 1.89 0.38 199 THIS_AD 1085 0.79 1.71 0.36 200 XMSolicitRefs_0 1085 0.41 0.52 0.36 ----------------------------------------------------------------------