Email: 559001 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.65 sec Spam: 150747 Autolearn: 0 AvgScore: 14.46 AvgScanTime: 2.02 sec Ham: 408254 Autolearn: 0 AvgScore: 1.17 AvgScanTime: 1.51 sec Time Spent Running SA: 256.20 hours Time Spent Processing Spam: 84.55 hours Time Spent Processing Ham: 171.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143597 90.23 95.26 88.38 2 DKIM_SIGNED 135690 72.49 90.01 66.02 3 XM_DK_Pass 127601 70.18 84.65 64.84 4 DKIM_VALID 126443 69.31 83.88 63.93 5 RELAYCOUNTRY_US 126242 82.57 83.74 82.14 6 XM_B_Unicode 125938 74.31 83.54 70.90 7 DCC_CHECK 107081 42.37 71.03 31.79 8 XM_B_SpammyWords 100475 49.64 66.65 43.36 9 DKIM_VALID_AU 99011 55.48 65.68 51.71 10 XMListUnsubscribeExists 98314 47.86 65.22 41.45 11 XM_B_Unicode3 75345 45.05 49.98 43.23 12 LOC_TINY_FONT_1 72088 30.87 47.82 24.61 13 XM_DK_Undo_02 62712 14.47 41.60 4.45 14 BAYES_50 57681 52.65 38.26 57.97 15 XM_B_SpammyWords2 57635 22.64 38.23 16.89 16 HTML_FONT_LOW_CONTRAST 55825 29.35 37.03 26.51 17 FVGT_m_MULTI_ODD 52554 25.77 34.86 22.41 18 BAYES_99 50088 11.18 33.23 3.04 19 T_KAM_HTML_FONT_INVALID 45052 21.82 29.89 18.85 20 DKIM_VALID_EF 44128 27.19 29.27 26.42 21 TR_XM_DKIM_Undo 42540 8.87 28.22 1.73 22 MIME_HTML_ONLY 41819 24.30 27.74 23.04 23 DCC_CHECK_NEGATIVE 41558 57.21 27.57 68.15 24 XMSubLong 39162 24.29 25.98 23.67 25 BAYES_999 38634 8.61 25.63 2.32 26 XM_Multi_Part_URI 34235 14.88 22.71 11.99 27 TR_DCC_Bayes_99 33814 6.82 22.43 1.06 28 RCVD_IN_MSPIKE_H2 33048 16.99 21.92 15.16 29 XM_B_Unsub 32820 12.21 21.77 8.69 30 T_TM2_M_HEADER_IN_MSG 32304 25.36 21.43 26.81 31 TR_XM_BayesUnsub 31551 10.56 20.93 6.73 32 TR_XM_DK_Unsub 31043 13.89 20.59 11.42 33 UNPARSEABLE_RELAY 30030 13.16 19.92 10.67 34 TR_MAX_INTL_RELAY 22324 7.86 14.81 5.29 35 RELAYCOUNTRY_META 21406 6.00 14.20 2.98 36 XM_B_SpammyWords3 21246 6.93 14.09 4.29 37 LOTS_OF_MONEY 18890 7.29 12.53 5.36 38 BOTNET_IPINHOSTNAME 18566 12.33 12.32 12.34 39 RCVD_IN_MSPIKE_WL 17541 16.36 11.64 18.11 40 TR_XM_UnparsRelay 17457 4.13 11.58 1.38 41 TR_XM_SpammyWords4 16490 5.67 10.94 3.73 42 TR_XM_SpammyWords2 16231 3.11 10.77 0.29 43 RCVD_IN_BL_SPAMCOP_NET 15763 3.21 10.46 0.53 44 BOTNET 15755 3.70 10.45 1.20 45 XM_Evil_Numbers_Gen 15531 9.88 10.30 9.72 46 FSL_BULK_SIG 15417 6.55 10.23 5.19 47 TR_XM_SpammyRelay 15123 3.85 10.03 1.57 48 BAYES_80 13592 4.81 9.02 3.25 49 XM_B_Phish_Phrases 13179 5.63 8.74 4.48 50 BAYES_60 11569 6.62 7.67 6.22 51 MPART_ALT_DIFF 10698 8.20 7.10 8.61 52 UNTRUSTED_Relay 10436 2.73 6.92 1.19 53 XMSubMetaSx_00 10298 3.76 6.83 2.63 54 TR_XM_SPAMCOP 9741 1.86 6.46 0.16 55 LotsOfNums_01 9724 8.39 6.45 9.10 56 HTML_IMAGE_RATIO_02 9623 4.94 6.38 4.41 57 RCVD_IN_MSPIKE_BL 9591 2.54 6.36 1.12 58 TR_XM_MSPIKECOMBO 9463 2.51 6.28 1.12 59 XM_B_PhoneNumber 9359 8.52 6.21 9.37 60 DKIM_INVALID 9247 3.18 6.13 2.09 61 XM_H_GMP 9175 5.40 6.09 5.14 62 BAYES_95 8200 2.96 5.44 2.04 63 XM_UncommonTLD01 8176 4.26 5.42 3.83 64 RCVD_IN_MSPIKE_H3 8068 7.46 5.35 8.24 65 XM_H_Long_From01 8047 4.93 5.34 4.79 66 HTML_IMAGE_RATIO_04 7292 10.48 4.84 12.57 67 XM_Body_Dirty_Words 7226 3.13 4.79 2.51 68 TR_XM_PhishingBody 7189 2.32 4.77 1.42 69 XM_B_SpammyTLD 7150 2.74 4.74 2.00 70 XM_B_Investor 7108 2.21 4.72 1.28 71 T_XMDrugObfuBody_14 6998 2.33 4.64 1.48 72 XMStrtUSub 6855 8.60 4.55 10.10 73 TM2_M_VERY_LONG_WORD 6674 3.67 4.43 3.39 74 RELAYCOUNTRY_CA 6634 1.58 4.40 0.53 75 TR_XM_SpammyWords3 6552 1.53 4.35 0.49 76 XMNumbers 6525 3.77 4.33 3.56 77 MIME_HTML_MOSTLY 6483 3.19 4.30 2.78 78 XM_CamelCaseFrm001 5730 2.13 3.80 1.52 79 TR_XM_SpammyWords5 5712 1.83 3.79 1.11 80 XMSexyCombo_05 5520 1.66 3.66 0.92 81 RCVD_IN_MSPIKE_L3 5425 1.68 3.60 0.97 82 TooManyTo_001 5393 5.91 3.58 6.77 83 TR_XM_INV_DKIM 5390 0.98 3.58 0.02 84 MIME_HTML_ONLY_MULTI 5368 5.54 3.56 6.27 85 T_XMDrugObfuBody_08 5360 2.05 3.56 1.50 86 HTML_IMAGE_RATIO_06 5334 4.19 3.54 4.43 87 XM_OfRef6 4998 1.54 3.32 0.89 88 XM_B_Unsub2 4901 1.96 3.25 1.49 89 RCVD_IN_MSPIKE_H4 4867 3.71 3.23 3.89 90 RCVD_IN_MSPIKE_H5 4606 5.19 3.06 5.98 91 XM_UB50 4435 1.35 2.94 0.76 92 XM_URI_RBL 4401 1.01 2.92 0.31 93 MIME_QP_LONG_LINE 4360 4.47 2.89 5.06 94 XM_SPF_SoftFail 4305 1.57 2.86 1.10 95 XM_B_SpammyWords4 4262 1.15 2.83 0.53 96 T_TooManySym_01 4159 4.21 2.76 4.74 97 TR_XM_NoHeaderRelay 4096 0.87 2.72 0.19 98 XM_B_URI_Unicode 4065 1.98 2.70 1.71 99 RELAYCOUNTRY_AU 4048 1.17 2.69 0.62 100 XMDiploma_00 3952 1.79 2.62 1.49 101 TR_XM_MSPIKECOMBO2 3792 0.74 2.52 0.08 102 TM2_M_URI_OPT_OUT 3786 1.86 2.51 1.63 103 USER_IN_DEF_DKIM_WL 3593 9.39 2.38 11.97 104 HTML_IMAGE_RATIO_08 3493 2.19 2.32 2.14 105 T_FILL_THIS_FORM_SHORT 3448 1.29 2.29 0.92 106 SUBJ_ALL_CAPS 3304 1.50 2.19 1.25 107 T_XMHurry_00 3220 0.92 2.14 0.46 108 RCVD_IN_IADB_LISTED 3172 3.07 2.10 3.43 109 HTML_FONT_TINY_NORDNS 3144 0.61 2.09 0.06 110 MAILING_LIST_MULTI 3144 2.29 2.09 2.36 111 XMStockSpam_06 3062 1.72 2.03 1.61 112 XM_B_DNDMA 3051 0.86 2.02 0.42 113 XM_H_Long_From02 2880 1.06 1.91 0.75 114 BAYES_40 2866 5.16 1.90 6.37 115 FROM_EXCESS_BASE64 2801 1.53 1.86 1.41 116 RCVD_IN_VALIDITY_SAFE 2791 3.01 1.85 3.44 117 SpammyFromTLD_02 2643 0.75 1.75 0.37 118 DKIM_ADSP_NXDOMAIN 2623 0.65 1.74 0.25 119 TR_XM_MaxSPIKE 2613 0.50 1.73 0.05 120 RCVD_IN_IADB_SPF 2581 2.67 1.71 3.02 121 XMGenDplmaNmb 2579 1.04 1.71 0.79 122 XMPhish30 2569 0.77 1.70 0.43 123 T_XMDrugObfuBody_00 2562 1.11 1.70 0.89 124 RCVD_IN_VALIDITY_RPBL 2555 0.49 1.69 0.04 125 XMBrknScrpt_02 2483 1.06 1.65 0.84 126 XMBody_17 2453 0.68 1.63 0.33 127 TR_XM_INTL_Spamhaus 2436 0.53 1.62 0.13 128 HTML_IMAGE_ONLY_20 2427 0.75 1.61 0.44 129 XM_DK_Undo_01 2421 1.62 1.61 1.63 130 T_REMOTE_IMAGE 2408 2.93 1.60 3.42 131 HTML_MIME_NO_HTML_TAG 2406 2.47 1.60 2.80 132 KHOP_HELO_FCRDNS 2389 2.79 1.58 3.23 133 RCVD_IN_IADB_DK 2365 2.32 1.57 2.60 134 XM_B_SEO 2328 0.54 1.54 0.17 135 BAYES_20 2308 3.97 1.53 4.88 136 DIET_1 2302 0.54 1.53 0.18 137 RCVD_IN_IADB_SENDERID 2298 2.39 1.52 2.71 138 XM_ProductURIs 2291 0.72 1.52 0.42 139 RDNS_DYNAMIC 2219 0.48 1.47 0.12 140 RCVD_IN_PBL 2214 0.82 1.47 0.58 141 TR_LOTS_OF_MONEY3 2161 0.60 1.43 0.29 142 SpammyFromTLD_01 2160 0.85 1.43 0.64 143 RCVD_IN_MSPIKE_L5 2136 0.39 1.42 0.02 144 XMClaimOffer 2119 0.47 1.41 0.12 145 XM_SendGrid 2119 1.41 1.41 1.41 146 RCVD_IN_VALIDITY_CERTIFIED 2116 2.43 1.40 2.81 147 XMBdyGiftCard01 2116 0.80 1.40 0.57 148 STY_INVIS_DIRECT 2108 0.52 1.40 0.20 149 TR_LOTS_OF_MONEY2 2082 0.49 1.38 0.16 150 T_MONEY_PERCENT 2082 0.49 1.38 0.16 151 T_Symld_Words_02 2076 0.83 1.38 0.63 152 RCVD_IN_ZEN_LASTEXTERNAL 2056 0.37 1.36 0.00 153 SHORTCIRCUIT 2056 0.37 1.36 0.00 154 MPART_ALT_DIFF_COUNT 2053 0.73 1.36 0.50 155 RCVD_IN_IADB_VOUCHED 2053 1.96 1.36 2.18 156 RELAYCOUNTRY_FR 2025 0.56 1.34 0.27 157 TVD_RCVD_IP 2009 0.91 1.33 0.76 158 ALL_TRUSTED 1990 11.50 1.32 15.26 159 RCVD_IN_PSBL 1985 0.37 1.32 0.02 160 URI_HEX 1979 1.18 1.31 1.13 161 TR_XM_SEO4 1939 0.40 1.29 0.08 162 XMBody_78 1939 0.57 1.29 0.31 163 XM_UB99 1932 0.35 1.28 0.00 164 BOTNET_NORDNS 1931 0.35 1.28 0.00 165 XM_B_Phish66 1921 0.59 1.27 0.34 166 HTML_FONT_FACE_BAD 1914 8.02 1.27 10.51 167 RCVD_IN_MSPIKE_L4 1902 0.44 1.26 0.13 168 URI_TRY_3LD 1862 0.57 1.24 0.32 169 URI_NOVOWEL 1832 1.15 1.22 1.12 170 XM_B_COPY_HTML 1827 0.71 1.21 0.53 171 TR_XM_GMP_BULK_SIG 1804 0.41 1.20 0.12 172 TR_Symld_Words 1737 1.31 1.15 1.37 173 XM_UB60 1706 0.35 1.13 0.07 174 RCVD_IN_XBL 1702 0.31 1.13 0.01 175 DKIM_ADSP_CUSTOM_MED 1676 0.82 1.11 0.72 176 XM_PDF 1632 5.03 1.08 6.49 177 HTTPS_HTTP_MISMATCH 1623 0.80 1.08 0.70 178 TM2_M_OBFU_COMMENT 1579 0.48 1.05 0.27 179 XMHTML_After_End 1552 0.82 1.03 0.74 180 MultiRelay_CC 1536 0.34 1.02 0.09 181 HDRS_MISSP 1533 0.29 1.02 0.03 182 HELO_DYNAMIC_SPLIT_IP 1519 0.28 1.01 0.01 183 XM_GoogleGroups 1517 1.07 1.01 1.10 184 TM2_M_A_HREF_HREF 1496 0.47 0.99 0.28 185 BAYES_00 1487 10.04 0.99 13.38 186 GOOG_STO_NOIMG_HTML 1485 0.27 0.99 0.00 187 XMRcvdHeader_07 1466 0.26 0.97 0.00 188 NML_ADSP_CUSTOM_MED 1433 0.56 0.95 0.41 189 TR_XM_FormFill 1431 0.26 0.95 0.01 190 RCVD_IN_IADB_OPTIN 1416 1.39 0.94 1.55 191 TR_XM_DK_SendGrid 1403 0.98 0.93 1.00 192 XM_UB999 1374 0.25 0.91 0.00 193 XMSubNoVowel 1340 2.72 0.89 3.39 194 FORGED_GMAIL_RCVD 1337 0.57 0.89 0.46 195 RCVD_IN_SBL_CSS 1328 0.26 0.88 0.03 196 TR_XM_DK_Bayes 1321 4.60 0.88 5.97 197 TR_MetaPhish_Combo_01 1312 0.75 0.87 0.71 198 TR_XM_DK_Bayes1 1309 4.53 0.87 5.88 199 XMSubMetaSxObfu_03 1295 0.51 0.86 0.39 200 XM_HighProb1 1281 0.23 0.85 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 360801 90.23 95.26 88.38 2 RELAYCOUNTRY_US 335325 82.57 83.74 82.14 3 XM_B_Unicode 289442 74.31 83.54 70.90 4 DCC_CHECK_NEGATIVE 278219 57.21 27.57 68.15 5 DKIM_SIGNED 269535 72.49 90.01 66.02 6 XM_DK_Pass 264708 70.18 84.65 64.84 7 DKIM_VALID 260996 69.31 83.88 63.93 8 BAYES_50 236652 52.65 38.26 57.97 9 DKIM_VALID_AU 211101 55.48 65.68 51.71 10 XM_B_SpammyWords 177039 49.64 66.65 43.36 11 XM_B_Unicode3 176492 45.05 49.98 43.23 12 XMListUnsubscribeExists 169214 47.86 65.22 41.45 13 DCC_CHECK 129772 42.37 71.03 31.79 14 T_TM2_M_HEADER_IN_MSG 109466 25.36 21.43 26.81 15 HTML_FONT_LOW_CONTRAST 108222 29.35 37.03 26.51 16 DKIM_VALID_EF 107873 27.19 29.27 26.42 17 LOC_TINY_FONT_1 100467 30.87 47.82 24.61 18 XMSubLong 96622 24.29 25.98 23.67 19 MIME_HTML_ONLY 94042 24.30 27.74 23.04 20 FVGT_m_MULTI_ODD 91501 25.77 34.86 22.41 21 T_KAM_HTML_FONT_INVALID 76945 21.82 29.89 18.85 22 RCVD_IN_MSPIKE_WL 73932 16.36 11.64 18.11 23 XM_B_SpammyWords2 68947 22.64 38.23 16.89 24 ALL_TRUSTED 62316 11.50 1.32 15.26 25 RCVD_IN_MSPIKE_H2 61911 16.99 21.92 15.16 26 BAYES_00 54634 10.04 0.99 13.38 27 HTML_IMAGE_RATIO_04 51317 10.48 4.84 12.57 28 BOTNET_IPINHOSTNAME 50361 12.33 12.32 12.34 29 XM_Multi_Part_URI 48968 14.88 22.71 11.99 30 USER_IN_DEF_DKIM_WL 48882 9.39 2.38 11.97 31 TR_XM_DK_Unsub 46609 13.89 20.59 11.42 32 UNPARSEABLE_RELAY 43547 13.16 19.92 10.67 33 HTML_FONT_FACE_BAD 42891 8.02 1.27 10.51 34 XMStrtUSub 41241 8.60 4.55 10.10 35 XM_Evil_Numbers_Gen 39681 9.88 10.30 9.72 36 XM_B_PhoneNumber 38266 8.52 6.21 9.37 37 LotsOfNums_01 37165 8.39 6.45 9.10 38 XM_B_Unsub 35459 12.21 21.77 8.69 39 MPART_ALT_DIFF 35167 8.20 7.10 8.61 40 RCVD_IN_MSPIKE_H3 33636 7.46 5.35 8.24 41 ANY_BOUNCE_MESSAGE 30449 5.67 0.84 7.46 42 BOUNCE_MESSAGE 30446 5.67 0.84 7.46 43 TooManyTo_001 27639 5.91 3.58 6.77 44 TR_XM_BayesUnsub 27487 10.56 20.93 6.73 45 XM_PDF 26498 5.03 1.08 6.49 46 BAYES_40 26003 5.16 1.90 6.37 47 MIME_HTML_ONLY_MULTI 25599 5.54 3.56 6.27 48 BAYES_60 25410 6.62 7.67 6.22 49 RCVD_IN_MSPIKE_H5 24404 5.19 3.06 5.98 50 TR_XM_DK_Bayes 24373 4.60 0.88 5.97 51 TR_XM_DK_Bayes1 24005 4.53 0.87 5.88 52 XM_DKIMWhitelistDomains 22408 4.02 0.03 5.49 53 LOTS_OF_MONEY 21885 7.29 12.53 5.36 54 TR_MAX_INTL_RELAY 21607 7.86 14.81 5.29 55 FSL_BULK_SIG 21192 6.55 10.23 5.19 56 XM_H_GMP 20998 5.40 6.09 5.14 57 MIME_QP_LONG_LINE 20646 4.47 2.89 5.06 58 TR_XM_DK_Bayes2 20339 3.80 0.61 4.98 59 BAYES_20 19911 3.97 1.53 4.88 60 XM_H_Long_From01 19535 4.93 5.34 4.79 61 T_TooManySym_01 19361 4.21 2.76 4.74 62 XM_B_Phish_Phrases 18289 5.63 8.74 4.48 63 XM_DK_Undo_02 18171 14.47 41.60 4.45 64 HTML_IMAGE_RATIO_06 18074 4.19 3.54 4.43 65 HTML_IMAGE_RATIO_02 17989 4.94 6.38 4.41 66 XM_B_SpammyWords3 17515 6.93 14.09 4.29 67 RCVD_IN_MSPIKE_H4 15892 3.71 3.23 3.89 68 XM_UncommonTLD01 15616 4.26 5.42 3.83 69 TR_XM_SpammyWords4 15216 5.67 10.94 3.73 70 XMNumbers 14524 3.77 4.33 3.56 71 RCVD_IN_VALIDITY_SAFE 14055 3.01 1.85 3.44 72 RCVD_IN_IADB_LISTED 13990 3.07 2.10 3.43 73 T_REMOTE_IMAGE 13949 2.93 1.60 3.42 74 XMSubNoVowel 13838 2.72 0.89 3.39 75 TM2_M_VERY_LONG_WORD 13828 3.67 4.43 3.39 76 BAYES_80 13274 4.81 9.02 3.25 77 KHOP_HELO_FCRDNS 13191 2.79 1.58 3.23 78 BAYES_99 12413 11.18 33.23 3.04 79 RCVD_IN_IADB_SPF 12347 2.67 1.71 3.02 80 RELAYCOUNTRY_META 12162 6.00 14.20 2.98 81 BAYES_05 11614 2.24 0.59 2.84 82 RCVD_IN_VALIDITY_CERTIFIED 11475 2.43 1.40 2.81 83 HTML_MIME_NO_HTML_TAG 11421 2.47 1.60 2.80 84 MIME_HTML_MOSTLY 11347 3.19 4.30 2.78 85 RCVD_IN_IADB_SENDERID 11067 2.39 1.52 2.71 86 XMSubMetaSx_00 10726 3.76 6.83 2.63 87 RCVD_IN_IADB_DK 10599 2.32 1.57 2.60 88 XM_Body_Dirty_Words 10252 3.13 4.79 2.51 89 T_TooManySym_02 9880 1.95 0.67 2.42 90 T_OBFU_PDF_ATTACH 9832 1.86 0.39 2.41 91 MAILING_LIST_MULTI 9648 2.29 2.09 2.36 92 BAYES_999 9479 8.61 25.63 2.32 93 RCVD_IN_IADB_VOUCHED 8920 1.96 1.36 2.18 94 HTML_IMAGE_RATIO_08 8722 2.19 2.32 2.14 95 DKIM_INVALID 8539 3.18 6.13 2.09 96 TooManyTo_002 8421 1.68 0.64 2.06 97 BAYES_95 8330 2.96 5.44 2.04 98 XM_B_SpammyTLD 8181 2.74 4.74 2.00 99 INVALID_MSGID 7239 1.41 0.42 1.77 100 TR_XM_DKIM_Undo 7064 8.87 28.22 1.73 101 XM_B_URI_Unicode 6995 1.98 2.70 1.71 102 MIME_CHARSET_FARAWAY 6750 1.30 0.36 1.65 103 TO_MALFORMED 6747 1.21 0.01 1.65 104 XM_DK_Undo_01 6643 1.62 1.61 1.63 105 TM2_M_URI_OPT_OUT 6636 1.86 2.51 1.63 106 XMStockSpam_06 6559 1.72 2.03 1.61 107 TR_XM_SpammyRelay 6400 3.85 10.03 1.57 108 RCVD_IN_IADB_OPTIN 6347 1.39 0.94 1.55 109 MSGID_NOFQDN1 6340 1.17 0.15 1.55 110 CHARSET_FARAWAY_HEADER 6281 1.16 0.12 1.54 111 XM_CamelCaseFrm001 6189 2.13 3.80 1.52 112 XMSubLongNoVowel 6176 1.30 0.74 1.51 113 T_XMDrugObfuBody_08 6124 2.05 3.56 1.50 114 XMSubGarbage 6112 1.26 0.62 1.50 115 XM_B_Unsub2 6067 1.96 3.25 1.49 116 XMDiploma_00 6063 1.79 2.62 1.49 117 T_XMDrugObfuBody_14 6023 2.33 4.64 1.48 118 TR_XM_PhishingBody 5799 2.32 4.77 1.42 119 XM_SendGrid 5773 1.41 1.41 1.41 120 FROM_EXCESS_BASE64 5773 1.53 1.86 1.41 121 TR_XM_UnparsRelay 5640 4.13 11.58 1.38 122 TR_Symld_Words 5587 1.31 1.15 1.37 123 XM_B_Investor 5243 2.21 4.72 1.28 124 SUBJ_ALL_CAPS 5103 1.50 2.19 1.25 125 URI_TRUNCATED 5084 0.95 0.14 1.25 126 TooManyTo_003 5007 1.03 0.50 1.23 127 BOTNET 4903 3.70 10.45 1.20 128 UNTRUSTED_Relay 4846 2.73 6.92 1.19 129 URI_HEX 4601 1.18 1.31 1.13 130 IN_HORDE_ADDRESS_BOOK 4593 0.84 0.06 1.13 131 URI_NOVOWEL 4592 1.15 1.22 1.12 132 RCVD_IN_MSPIKE_BL 4580 2.54 6.36 1.12 133 TR_XM_MSPIKECOMBO 4579 2.51 6.28 1.12 134 TR_XM_SpammyWords5 4529 1.83 3.79 1.11 135 XM_SPF_SoftFail 4486 1.57 2.86 1.10 136 XM_GoogleGroups 4474 1.07 1.01 1.10 137 XMGappySubj_01 4361 0.82 0.15 1.07 138 TR_DCC_Bayes_99 4318 6.82 22.43 1.06 139 TR_XM_DK_SendGrid 4091 0.98 0.93 1.00 140 XMCapTrack 4002 0.91 0.72 0.98 141 RCVD_IN_MSPIKE_L3 3961 1.68 3.60 0.97 142 T_TooManySym_03 3955 0.76 0.21 0.97 143 HELO_NODOT 3926 0.81 0.40 0.96 144 HELO_NO_DOMAIN 3924 0.81 0.38 0.96 145 XMSexyCombo_05 3771 1.66 3.66 0.92 146 T_FILL_THIS_FORM_SHORT 3743 1.29 2.29 0.92 147 TooManyTo_004 3697 0.78 0.44 0.91 148 T_XMDrugObfuBody_00 3628 1.11 1.70 0.89 149 XM_OfRef6 3625 1.54 3.32 0.89 150 TVD_SPACE_RATIO 3592 0.69 0.18 0.88 151 FROM_GOV_DKIM_AU 3498 0.73 0.39 0.86 152 XMBrknScrpt_02 3423 1.06 1.65 0.84 153 XM_ShortIntro_01 3319 0.76 0.62 0.81 154 XMGenDplmaNmb 3244 1.04 1.71 0.79 155 XM_E_Blogspot 3216 0.59 0.07 0.79 156 XM_UB50 3118 1.35 2.94 0.76 157 TVD_RCVD_IP 3100 0.91 1.33 0.76 158 XM_H_Long_From02 3049 1.06 1.91 0.75 159 TooManyTo_005 3031 0.65 0.40 0.74 160 XMHTML_After_End 3004 0.82 1.03 0.74 161 DKIM_ADSP_CUSTOM_MED 2932 0.82 1.11 0.72 162 TR_MetaPhish_Combo_01 2907 0.75 0.87 0.71 163 HTTPS_HTTP_MISMATCH 2860 0.80 1.08 0.70 164 HOSTED_IMG_DIRECT_MX 2811 0.52 0.07 0.69 165 XM_H_PHPMailer 2670 0.61 0.50 0.65 166 TM2_M_BODY_EMPTY 2664 0.50 0.09 0.65 167 TR_XM_Base64_M1 2645 0.69 0.81 0.65 168 SpammyFromTLD_01 2602 0.85 1.43 0.64 169 T_Symld_Words_02 2566 0.83 1.38 0.63 170 RELAYCOUNTRY_AU 2515 1.17 2.69 0.62 171 RELAYCOUNTRY_GB 2490 0.67 0.82 0.61 172 RCVD_IN_PBL 2355 0.82 1.47 0.58 173 XMBdyGiftCard01 2344 0.80 1.40 0.57 174 TRACKER_ID 2342 0.45 0.13 0.57 175 GMD_PDF_EMPTY_BODY 2320 0.43 0.06 0.57 176 XMGappySubj_02 2231 0.41 0.06 0.55 177 XM_B_SpammyWords4 2183 1.15 2.83 0.53 178 RELAYCOUNTRY_CA 2173 1.58 4.40 0.53 179 RCVD_IN_BL_SPAMCOP_NET 2161 3.21 10.46 0.53 180 XM_B_COPY_HTML 2157 0.71 1.21 0.53 181 XMBSHREFv2 2134 0.50 0.42 0.52 182 TO_NO_BRKTS_HTML_ONLY 2116 0.41 0.10 0.52 183 XMNoVowels 2084 0.51 0.52 0.51 184 T_TVD_MIME_NO_HEADERS 2082 0.38 0.04 0.51 185 MPART_ALT_DIFF_COUNT 2052 0.73 1.36 0.50 186 TR_XM_SpammyWords3 1989 1.53 4.35 0.49 187 T_XMHurry_00 1898 0.92 2.14 0.46 188 FORGED_GMAIL_RCVD 1866 0.57 0.89 0.46 189 HTML_IMAGE_ONLY_20 1793 0.75 1.61 0.44 190 XMPhish30 1752 0.77 1.70 0.43 191 XM_B_DNDMA 1732 0.86 2.02 0.42 192 XM_ProductURIs 1710 0.72 1.52 0.42 193 NML_ADSP_CUSTOM_MED 1686 0.56 0.95 0.41 194 LongTLD 1672 0.52 0.82 0.41 195 FILL_THIS_FORM 1612 0.35 0.22 0.39 196 XMLngstWrd_00 1609 0.40 0.43 0.39 197 HTML_IMAGE_ONLY_32 1607 0.42 0.49 0.39 198 XMSubMetaSxObfu_03 1577 0.51 0.86 0.39 199 XMDateMe_00 1572 0.41 0.49 0.39 200 XMMoneyMeta_00 1542 0.46 0.67 0.38 ----------------------------------------------------------------------