Email: 491957 Autolearn: 0 AvgScore: 4.72 AvgScanTime: 1.30 sec Spam: 149444 Autolearn: 0 AvgScore: 13.14 AvgScanTime: 1.50 sec Ham: 342513 Autolearn: 0 AvgScore: 1.05 AvgScanTime: 1.21 sec Time Spent Running SA: 177.16 hours Time Spent Processing Spam: 62.44 hours Time Spent Processing Ham: 114.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 148264 99.45 99.21 99.55 2 HTML_MESSAGE 143869 90.37 96.27 87.79 3 DKIM_SIGNED 136564 80.72 91.38 76.07 4 XM_DK_Pass 128022 78.02 85.67 74.69 5 DKIM_VALID 126936 77.14 84.94 73.74 6 XM_B_Unicode 126785 76.74 84.84 73.21 7 RELAYCOUNTRY_US 123671 80.95 82.75 80.16 8 DCC_CHECK 108273 48.92 72.45 38.65 9 XM_B_SpammyWords 104807 54.93 70.13 48.29 10 XMListUnsubscribeExists 102071 55.36 68.30 49.71 11 DKIM_VALID_AU 98888 62.57 66.17 61.00 12 LOC_TINY_FONT_1 73752 37.26 49.35 31.99 13 XM_B_Unicode3 72398 43.97 48.44 42.02 14 XM_DK_Undo_02 63551 16.61 42.52 5.30 15 XM_B_SpammyWords2 61097 27.41 40.88 21.53 16 BAYES_50 56691 54.62 37.93 61.89 17 HTML_FONT_LOW_CONTRAST 56570 32.13 37.85 29.63 18 FVGT_m_MULTI_ODD 54357 28.87 36.37 25.60 19 BAYES_99 50690 12.79 33.92 3.57 20 T_KAM_HTML_FONT_INVALID 47421 25.44 31.73 22.69 21 DKIM_VALID_EF 45844 30.16 30.68 29.93 22 TR_XM_DKIM_Undo 44323 10.57 29.66 2.24 23 MIME_HTML_ONLY 41235 21.58 27.59 18.96 24 DCC_CHECK_NEGATIVE 41077 51.00 27.49 61.26 25 BAYES_999 38753 9.67 25.93 2.57 26 XMSubLong 38201 24.16 25.56 23.55 27 XM_Multi_Part_URI 35321 17.04 23.63 14.17 28 TR_DCC_Bayes_99 34421 7.90 23.03 1.30 29 T_TM2_M_HEADER_IN_MSG 33123 28.80 22.16 31.70 30 TR_XM_DK_Unsub 32701 16.31 21.88 13.88 31 RCVD_IN_MSPIKE_H2 31670 17.68 21.19 16.15 32 XM_B_Unsub 30638 12.65 20.50 9.23 33 TR_XM_BayesUnsub 29606 11.02 19.81 7.19 34 UNPARSEABLE_RELAY 28500 13.99 19.07 11.78 35 RELAYCOUNTRY_META 25365 7.55 16.97 3.44 36 TR_MAX_INTL_RELAY 24261 9.66 16.23 6.79 37 XM_B_SpammyWords3 21535 8.38 14.41 5.74 38 RCVD_IN_MSPIKE_WL 20861 19.70 13.96 22.21 39 TR_XM_SpammyRelay 18859 5.13 12.62 1.87 40 LOTS_OF_MONEY 18804 9.33 12.58 7.91 41 TR_XM_SpammyWords2 17786 3.84 11.90 0.32 42 BOTNET_IPINHOSTNAME 17462 5.91 11.68 3.39 43 TR_XM_SpammyWords4 16705 7.59 11.18 6.02 44 BOTNET 16171 4.28 10.82 1.43 45 TR_XM_UnparsRelay 16018 4.61 10.72 1.95 46 RCVD_IN_BL_SPAMCOP_NET 15671 3.66 10.49 0.68 47 BAYES_80 15111 5.99 10.11 4.20 48 XM_Evil_Numbers_Gen 14715 10.08 9.85 10.18 49 FSL_BULK_SIG 14537 7.06 9.73 5.90 50 XM_B_Phish_Phrases 12810 6.50 8.57 5.60 51 BAYES_60 12564 7.91 8.41 7.70 52 RCVD_IN_MSPIKE_BL 11783 3.18 7.88 1.12 53 TR_XM_MSPIKECOMBO 11759 3.17 7.87 1.11 54 UNTRUSTED_Relay 10994 3.33 7.36 1.58 55 XM_B_PhoneNumber 10390 8.80 6.95 9.60 56 XMSubMetaSx_00 10101 4.33 6.76 3.27 57 RCVD_IN_MSPIKE_H3 9813 8.82 6.57 9.81 58 HTML_IMAGE_RATIO_02 9729 5.22 6.51 4.66 59 DKIM_INVALID 9628 3.58 6.44 2.32 60 MPART_ALT_DIFF 9262 5.49 6.20 5.18 61 XM_Body_Dirty_Words 9228 3.84 6.17 2.82 62 XM_H_GMP 9063 5.36 6.06 5.06 63 TR_XM_SPAMCOP 8862 1.96 5.93 0.23 64 BAYES_95 8531 3.54 5.71 2.60 65 LotsOfNums_01 8434 7.76 5.64 8.69 66 TR_XM_SpammyWords3 8409 2.07 5.63 0.52 67 RELAYCOUNTRY_CA 8149 2.09 5.45 0.62 68 RCVD_IN_MSPIKE_L3 8011 2.27 5.36 0.93 69 XM_H_Long_From01 7945 5.80 5.32 6.01 70 XM_UncommonTLD01 7624 4.27 5.10 3.90 71 HTML_IMAGE_RATIO_04 7271 4.65 4.87 4.55 72 T_XMDrugObfuBody_14 7030 2.44 4.70 1.45 73 XM_B_Investor 6975 2.64 4.67 1.76 74 TR_XM_PhishingBody 6855 2.53 4.59 1.63 75 XM_B_SpammyTLD 6808 3.32 4.56 2.78 76 XMStrtUSub 6736 4.85 4.51 5.00 77 XMSexyCombo_05 6531 2.09 4.37 1.10 78 TooManyTo_001 6436 6.38 4.31 7.29 79 XM_OfRef6 6128 1.72 4.10 0.68 80 RCVD_IN_MSPIKE_H5 5863 6.40 3.92 7.49 81 TR_XM_SpammyWords5 5777 2.15 3.87 1.40 82 MIME_HTML_MOSTLY 5467 3.15 3.66 2.93 83 T_XMDrugObfuBody_08 5461 2.14 3.65 1.47 84 TM2_M_VERY_LONG_WORD 5225 2.42 3.50 1.96 85 RCVD_IN_MSPIKE_H4 5185 4.47 3.47 4.91 86 XM_B_Unsub2 5180 2.14 3.47 1.56 87 XMNumbers 5180 3.49 3.47 3.50 88 TR_XM_NoHeaderRelay 4829 1.14 3.23 0.22 89 TR_XM_MSPIKECOMBO2 4747 1.04 3.18 0.11 90 TR_XM_INV_DKIM 4701 0.96 3.15 0.01 91 MIME_QP_LONG_LINE 4663 4.74 3.12 5.44 92 XMDiploma_00 4656 2.03 3.12 1.55 93 XM_CamelCaseFrm001 4645 2.32 3.11 1.98 94 HTML_IMAGE_RATIO_08 4623 3.03 3.09 3.00 95 MIME_HTML_ONLY_MULTI 4543 2.77 3.04 2.66 96 HTML_IMAGE_RATIO_06 4517 3.35 3.02 3.49 97 T_XMHurry_00 4281 1.49 2.86 0.89 98 XM_UB50 4254 1.62 2.85 1.08 99 XM_SPF_SoftFail 4187 1.70 2.80 1.22 100 XM_URI_RBL 4166 1.08 2.79 0.34 101 RELAYCOUNTRY_AU 4164 1.30 2.79 0.65 102 TM2_M_URI_OPT_OUT 4045 2.17 2.71 1.93 103 T_XMDrugObfuBody_00 4004 1.49 2.68 0.98 104 XM_B_URI_Unicode 3971 2.12 2.66 1.88 105 T_TooManySym_01 3801 5.04 2.54 6.13 106 XMBody_17 3733 1.05 2.50 0.41 107 TR_XM_MaxSPIKE 3698 0.80 2.47 0.06 108 MAILING_LIST_MULTI 3618 2.69 2.42 2.81 109 XM_B_SpammyWords4 3522 1.41 2.36 1.00 110 HTML_MIME_NO_HTML_TAG 3328 2.27 2.23 2.29 111 T_FILL_THIS_FORM_SHORT 3298 1.24 2.21 0.82 112 RCVD_IN_IADB_LISTED 3273 3.05 2.19 3.43 113 USER_IN_DEF_DKIM_WL 3217 10.31 2.15 13.87 114 XMStockSpam_06 2986 1.70 2.00 1.57 115 SUBJ_ALL_CAPS 2954 1.52 1.98 1.32 116 RCVD_IN_MSPIKE_L4 2821 0.69 1.89 0.17 117 ALL_TRUSTED 2812 12.23 1.88 16.75 118 SpammyFromTLD_02 2809 0.95 1.88 0.54 119 URI_NOVOWEL 2769 1.30 1.85 1.06 120 XMGenDplmaNmb 2731 1.18 1.83 0.90 121 XM_H_Long_From02 2661 1.14 1.78 0.86 122 RCVD_IN_IADB_SPF 2630 2.66 1.76 3.05 123 XM_DK_Undo_01 2615 1.93 1.75 2.01 124 RCVD_IN_VALIDITY_SAFE 2582 3.29 1.73 3.96 125 RCVD_IN_VALIDITY_RPBL 2563 0.54 1.72 0.03 126 T_REMOTE_IMAGE 2479 2.94 1.66 3.49 127 XMPhish30 2388 0.92 1.60 0.62 128 RELAYCOUNTRY_FR 2360 0.72 1.58 0.35 129 RCVD_IN_IADB_DK 2357 2.32 1.58 2.64 130 TR_LOTS_OF_MONEY3 2312 0.76 1.55 0.42 131 RCVD_IN_IADB_SENDERID 2311 2.37 1.55 2.73 132 XMBrknScrpt_02 2278 1.51 1.52 1.51 133 RCVD_IN_IADB_VOUCHED 2263 1.99 1.51 2.19 134 FROM_EXCESS_BASE64 2222 1.90 1.49 2.07 135 URI_TRY_3LD 2186 0.87 1.46 0.61 136 XM_SendGrid 2183 1.48 1.46 1.49 137 BOTNET_NORDNS 2161 0.44 1.45 0.01 138 XM_UB99 2119 0.43 1.42 0.00 139 THIS_AD 2116 0.86 1.42 0.62 140 URI_HEX 2092 1.18 1.40 1.09 141 BAYES_40 2088 4.26 1.40 5.51 142 DKIM_ADSP_NXDOMAIN 2036 0.61 1.36 0.28 143 HK_RANDOM_REPLYTO 1951 0.46 1.31 0.09 144 XM_ProductURIs 1942 0.72 1.30 0.47 145 RCVD_IN_VALIDITY_CERTIFIED 1921 2.76 1.29 3.40 146 XM_B_Phish66 1915 0.68 1.28 0.41 147 XMSubMetaI_00 1905 0.77 1.27 0.55 148 SpammyFromTLD_01 1899 0.96 1.27 0.83 149 XMBody_78 1899 0.61 1.27 0.32 150 XM_B_SEO 1871 0.51 1.25 0.19 151 XM_B_COPY_HTML 1853 0.72 1.24 0.49 152 HTTPS_HTTP_MISMATCH 1842 0.81 1.23 0.62 153 TR_Symld_Words 1833 1.42 1.23 1.51 154 XM_GoogleGroups 1811 1.17 1.21 1.15 155 XM_B_DNDMA 1710 0.70 1.14 0.50 156 XMBdyGiftCard01 1693 0.81 1.13 0.67 157 TR_XM_SEO4 1679 0.43 1.12 0.12 158 MPART_ALT_DIFF_COUNT 1666 0.96 1.11 0.89 159 BAYES_20 1663 2.66 1.11 3.34 160 RCVD_IN_PSBL 1658 0.36 1.11 0.04 161 MultiRelay_CC 1656 0.42 1.11 0.12 162 RDNS_DYNAMIC 1646 0.43 1.10 0.14 163 TR_XM_GMP_BULK_SIG 1633 0.39 1.09 0.08 164 TR_XM_DK_SendGrid 1593 1.04 1.07 1.03 165 TM2_M_A_HREF_HREF 1563 0.50 1.05 0.27 166 ANY_BOUNCE_MESSAGE 1557 3.15 1.04 4.07 167 BOUNCE_MESSAGE 1556 3.15 1.04 4.07 168 XM_UB60 1548 0.37 1.04 0.08 169 SHOPIFY_IMG_NOT_RCVD_SFY 1548 0.46 1.04 0.21 170 RCVD_IN_IADB_OPTIN 1505 1.37 1.01 1.53 171 XMHTML_After_End 1503 0.53 1.01 0.33 172 XM_UB80 1490 0.32 1.00 0.03 173 XM_S_SpammyWords 1485 0.47 0.99 0.24 174 TR_XM_Spammywords 1485 0.47 0.99 0.24 175 XM_HighProb1 1403 0.29 0.94 0.00 176 DIET_1 1379 0.49 0.92 0.31 177 TR_XM_RelayPhish 1353 0.33 0.91 0.08 178 T_Symld_Words_02 1349 0.86 0.90 0.84 179 TVD_RCVD_IP 1348 0.93 0.90 0.95 180 XMSexyCombo_01 1335 0.38 0.89 0.15 181 XM_DIRTYINTL 1332 0.30 0.89 0.04 182 TR_BOTNET_NEGATE 1330 0.38 0.89 0.16 183 XM_UB999 1329 0.27 0.89 0.00 184 XMPhish14 1327 0.51 0.89 0.34 185 RELAYCOUNTRY_GB 1323 0.71 0.89 0.64 186 TR_LOTS_OF_MONEY2 1318 0.41 0.88 0.20 187 T_MONEY_PERCENT 1318 0.41 0.88 0.20 188 TM2_M_OBFU_COMMENT 1310 0.51 0.88 0.35 189 DKIM_ADSP_CUSTOM_MED 1285 0.74 0.86 0.69 190 TR_Mismatch_TLD_02 1275 0.34 0.85 0.12 191 TR_MetaPhish_Combo_01 1271 0.96 0.85 1.01 192 KHOP_HELO_FCRDNS 1261 1.27 0.84 1.45 193 TR_XM_InvalidRelay 1233 0.26 0.83 0.01 194 URIBL_BLACK 1229 0.26 0.82 0.02 195 HELO_DYNAMIC_SPLIT_IP 1202 0.25 0.80 0.00 196 XMCapTrack 1202 0.98 0.80 1.06 197 XMSubMetaSxObfu_03 1200 0.54 0.80 0.42 198 XMSlimDrugH 1190 0.58 0.80 0.48 199 XM_PDF 1176 3.15 0.79 4.18 200 BAYES_00 1167 6.66 0.78 9.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 340986 99.45 99.21 99.55 2 HTML_MESSAGE 300690 90.37 96.27 87.79 3 RELAYCOUNTRY_US 274566 80.95 82.75 80.16 4 DKIM_SIGNED 260536 80.72 91.38 76.07 5 XM_DK_Pass 255818 78.02 85.67 74.69 6 DKIM_VALID 252574 77.14 84.94 73.74 7 XM_B_Unicode 250750 76.74 84.84 73.21 8 BAYES_50 211998 54.62 37.93 61.89 9 DCC_CHECK_NEGATIVE 209835 51.00 27.49 61.26 10 DKIM_VALID_AU 208944 62.57 66.17 61.00 11 XMListUnsubscribeExists 170276 55.36 68.30 49.71 12 XM_B_SpammyWords 165407 54.93 70.13 48.29 13 XM_B_Unicode3 143935 43.97 48.44 42.02 14 DCC_CHECK 132376 48.92 72.45 38.65 15 LOC_TINY_FONT_1 109553 37.26 49.35 31.99 16 T_TM2_M_HEADER_IN_MSG 108567 28.80 22.16 31.70 17 DKIM_VALID_EF 102514 30.16 30.68 29.93 18 HTML_FONT_LOW_CONTRAST 101492 32.13 37.85 29.63 19 FVGT_m_MULTI_ODD 87692 28.87 36.37 25.60 20 XMSubLong 80649 24.16 25.56 23.55 21 T_KAM_HTML_FONT_INVALID 77712 25.44 31.73 22.69 22 RCVD_IN_MSPIKE_WL 76059 19.70 13.96 22.21 23 XM_B_SpammyWords2 73755 27.41 40.88 21.53 24 MIME_HTML_ONLY 64940 21.58 27.59 18.96 25 ALL_TRUSTED 57363 12.23 1.88 16.75 26 RCVD_IN_MSPIKE_H2 55308 17.68 21.19 16.15 27 XM_Multi_Part_URI 48524 17.04 23.63 14.17 28 TR_XM_DK_Unsub 47547 16.31 21.88 13.88 29 USER_IN_DEF_DKIM_WL 47519 10.31 2.15 13.87 30 UNPARSEABLE_RELAY 40344 13.99 19.07 11.78 31 XM_Evil_Numbers_Gen 34875 10.08 9.85 10.18 32 RCVD_IN_MSPIKE_H3 33596 8.82 6.57 9.81 33 XM_B_PhoneNumber 32896 8.80 6.95 9.60 34 XM_B_Unsub 31606 12.65 20.50 9.23 35 BAYES_00 31579 6.66 0.78 9.22 36 LotsOfNums_01 29755 7.76 5.64 8.69 37 LOTS_OF_MONEY 27102 9.33 12.58 7.91 38 BAYES_60 26374 7.91 8.41 7.70 39 RCVD_IN_MSPIKE_H5 25642 6.40 3.92 7.49 40 TooManyTo_001 24953 6.38 4.31 7.29 41 TR_XM_BayesUnsub 24612 11.02 19.81 7.19 42 XM_DKIMWhitelistDomains 24078 4.93 0.10 7.03 43 TR_MAX_INTL_RELAY 23273 9.66 16.23 6.79 44 TR_XM_DK_Bayes 22589 4.75 0.52 6.60 45 TR_XM_DK_Bayes1 22282 4.69 0.52 6.51 46 T_TooManySym_01 20993 5.04 2.54 6.13 47 TR_XM_SpammyWords4 20632 7.59 11.18 6.02 48 XM_H_Long_From01 20589 5.80 5.32 6.01 49 FSL_BULK_SIG 20216 7.06 9.73 5.90 50 XM_B_SpammyWords3 19673 8.38 14.41 5.74 51 TR_XM_DK_Bayes2 19301 4.04 0.39 5.64 52 XM_B_Phish_Phrases 19190 6.50 8.57 5.60 53 BAYES_40 18868 4.26 1.40 5.51 54 MIME_QP_LONG_LINE 18649 4.74 3.12 5.44 55 XM_DK_Undo_02 18158 16.61 42.52 5.30 56 MPART_ALT_DIFF 17738 5.49 6.20 5.18 57 XM_H_GMP 17328 5.36 6.06 5.06 58 XMStrtUSub 17109 4.85 4.51 5.00 59 RCVD_IN_MSPIKE_H4 16821 4.47 3.47 4.91 60 HTML_IMAGE_RATIO_02 15970 5.22 6.51 4.66 61 HTML_IMAGE_RATIO_04 15581 4.65 4.87 4.55 62 BAYES_80 14373 5.99 10.11 4.20 63 XM_PDF 14306 3.15 0.79 4.18 64 ANY_BOUNCE_MESSAGE 13934 3.15 1.04 4.07 65 BOUNCE_MESSAGE 13933 3.15 1.04 4.07 66 RCVD_IN_VALIDITY_SAFE 13579 3.29 1.73 3.96 67 XM_UncommonTLD01 13360 4.27 5.10 3.90 68 BAYES_99 12237 12.79 33.92 3.57 69 XMNumbers 11993 3.49 3.47 3.50 70 T_REMOTE_IMAGE 11965 2.94 1.66 3.49 71 HTML_IMAGE_RATIO_06 11961 3.35 3.02 3.49 72 RELAYCOUNTRY_META 11785 7.55 16.97 3.44 73 RCVD_IN_IADB_LISTED 11740 3.05 2.19 3.43 74 RCVD_IN_VALIDITY_CERTIFIED 11639 2.76 1.29 3.40 75 BOTNET_IPINHOSTNAME 11620 5.91 11.68 3.39 76 BAYES_20 11433 2.66 1.11 3.34 77 XMSubMetaSx_00 11188 4.33 6.76 3.27 78 RCVD_IN_IADB_SPF 10436 2.66 1.76 3.05 79 HTML_IMAGE_RATIO_08 10281 3.03 3.09 3.00 80 MIME_HTML_MOSTLY 10020 3.15 3.66 2.93 81 T_TooManySym_02 9946 2.26 0.77 2.90 82 XM_Body_Dirty_Words 9657 3.84 6.17 2.82 83 MAILING_LIST_MULTI 9628 2.69 2.42 2.81 84 XM_B_SpammyTLD 9530 3.32 4.56 2.78 85 RCVD_IN_IADB_SENDERID 9367 2.37 1.55 2.73 86 MIME_HTML_ONLY_MULTI 9105 2.77 3.04 2.66 87 RCVD_IN_IADB_DK 9033 2.32 1.58 2.64 88 BAYES_95 8899 3.54 5.71 2.60 89 BAYES_999 8798 9.67 25.93 2.57 90 TO_MALFORMED 7971 1.64 0.08 2.33 91 DKIM_INVALID 7962 3.58 6.44 2.32 92 HTML_MIME_NO_HTML_TAG 7846 2.27 2.23 2.29 93 TR_XM_DKIM_Undo 7673 10.57 29.66 2.24 94 TooManyTo_002 7552 1.68 0.47 2.20 95 RCVD_IN_IADB_VOUCHED 7506 1.99 1.51 2.19 96 FROM_EXCESS_BASE64 7102 1.90 1.49 2.07 97 INVALID_MSGID 7094 1.55 0.35 2.07 98 XM_DK_Undo_01 6876 1.93 1.75 2.01 99 XM_CamelCaseFrm001 6774 2.32 3.11 1.98 100 BAYES_05 6749 1.56 0.63 1.97 101 TM2_M_VERY_LONG_WORD 6700 2.42 3.50 1.96 102 TR_XM_UnparsRelay 6679 4.61 10.72 1.95 103 TM2_M_URI_OPT_OUT 6617 2.17 2.71 1.93 104 XM_B_URI_Unicode 6454 2.12 2.66 1.88 105 TR_XM_SpammyRelay 6400 5.13 12.62 1.87 106 XM_B_Investor 6033 2.64 4.67 1.76 107 HELO_NODOT 5619 1.31 0.56 1.64 108 HELO_NO_DOMAIN 5615 1.31 0.56 1.64 109 TR_XM_PhishingBody 5594 2.53 4.59 1.63 110 UNTRUSTED_Relay 5401 3.33 7.36 1.58 111 XMStockSpam_06 5390 1.70 2.00 1.57 112 XM_B_Unsub2 5354 2.14 3.47 1.56 113 XMDiploma_00 5318 2.03 3.12 1.55 114 RCVD_IN_IADB_OPTIN 5257 1.37 1.01 1.53 115 XMBrknScrpt_02 5175 1.51 1.52 1.51 116 TR_Symld_Words 5159 1.42 1.23 1.51 117 XM_SendGrid 5096 1.48 1.46 1.49 118 T_XMDrugObfuBody_08 5052 2.14 3.65 1.47 119 T_XMDrugObfuBody_14 4974 2.44 4.70 1.45 120 KHOP_HELO_FCRDNS 4963 1.27 0.84 1.45 121 BOTNET 4894 4.28 10.82 1.43 122 TR_XM_SpammyWords5 4790 2.15 3.87 1.40 123 TooManyTo_003 4780 1.08 0.36 1.40 124 SUBJ_ALL_CAPS 4536 1.52 1.98 1.32 125 TR_DCC_Bayes_99 4467 7.90 23.03 1.30 126 T_TooManySym_03 4315 0.94 0.20 1.26 127 IN_HORDE_ADDRESS_BOOK 4302 0.90 0.07 1.26 128 FROM_GOV_DKIM_AU 4218 0.93 0.22 1.23 129 XM_SPF_SoftFail 4173 1.70 2.80 1.22 130 XMGappySubj_01 4168 0.89 0.13 1.22 131 XM_GoogleGroups 3938 1.17 1.21 1.15 132 RCVD_IN_MSPIKE_BL 3840 3.18 7.88 1.12 133 TR_XM_MSPIKECOMBO 3818 3.17 7.87 1.11 134 XMSexyCombo_05 3754 2.09 4.37 1.10 135 URI_HEX 3724 1.18 1.40 1.09 136 XM_UB50 3701 1.62 2.85 1.08 137 XMCapTrack 3631 0.98 0.80 1.06 138 URI_NOVOWEL 3626 1.30 1.85 1.06 139 TR_XM_DK_SendGrid 3540 1.04 1.07 1.03 140 TooManyTo_004 3529 0.81 0.30 1.03 141 TR_MetaPhish_Combo_01 3458 0.96 0.85 1.01 142 XM_B_SpammyWords4 3412 1.41 2.36 1.00 143 T_XMDrugObfuBody_00 3349 1.49 2.68 0.98 144 TVD_RCVD_IP 3248 0.93 0.90 0.95 145 MIME_CHARSET_FARAWAY 3237 0.73 0.25 0.95 146 XMBody_95 3179 0.69 0.14 0.93 147 RCVD_IN_MSPIKE_L3 3172 2.27 5.36 0.93 148 XMGenDplmaNmb 3095 1.18 1.83 0.90 149 MPART_ALT_DIFF_COUNT 3053 0.96 1.11 0.89 150 T_XMHurry_00 3038 1.49 2.86 0.89 151 XM_ShortIntro_01 3026 0.77 0.51 0.88 152 CHARSET_FARAWAY_HEADER 2953 0.63 0.10 0.86 153 XM_H_Long_From02 2947 1.14 1.78 0.86 154 TVD_SPACE_RATIO 2946 0.65 0.17 0.86 155 TR_XM_Base64_M1 2923 0.82 0.74 0.85 156 T_Symld_Words_02 2862 0.86 0.90 0.84 157 TooManyTo_005 2834 0.65 0.25 0.83 158 SpammyFromTLD_01 2832 0.96 1.27 0.83 159 T_FILL_THIS_FORM_SHORT 2792 1.24 2.21 0.82 160 MAY_BE_FORGED 2680 0.55 0.00 0.78 161 XM_H_PHPMailer 2561 0.64 0.40 0.75 162 DKIM_ADSP_CUSTOM_MED 2360 0.74 0.86 0.69 163 XM_OfRef6 2325 1.72 4.10 0.68 164 RCVD_IN_BL_SPAMCOP_NET 2320 3.66 10.49 0.68 165 LOW_PRICE 2288 0.62 0.52 0.67 166 TRACKER_ID 2285 0.52 0.20 0.67 167 XMBdyGiftCard01 2278 0.81 1.13 0.67 168 XMBSHREFv2 2259 0.62 0.54 0.66 169 RELAYCOUNTRY_AU 2229 1.30 2.79 0.65 170 TO_NO_BRKTS_HTML_ONLY 2205 0.51 0.19 0.64 171 RELAYCOUNTRY_GB 2193 0.71 0.89 0.64 172 XMNoVowels 2163 0.58 0.47 0.63 173 XMPhish30 2139 0.92 1.60 0.62 174 HTTPS_HTTP_MISMATCH 2139 0.81 1.23 0.62 175 THIS_AD 2112 0.86 1.42 0.62 176 RELAYCOUNTRY_CA 2109 2.09 5.45 0.62 177 URI_TRY_3LD 2086 0.87 1.46 0.61 178 HTML_TAG_BALANCE_BODY 1987 0.64 0.77 0.58 179 HTML_IMAGE_ONLY_20 1914 0.62 0.76 0.56 180 XMSubMetaI_00 1897 0.77 1.27 0.55 181 SpammyFromTLD_02 1855 0.95 1.88 0.54 182 XMMoneyMeta_00 1800 0.59 0.74 0.53 183 TVD_PH_BODY_ACCOUNTS_PRE 1798 0.40 0.11 0.52 184 TR_XM_SpammyWords3 1791 2.07 5.63 0.52 185 XMGappySubj_02 1741 0.36 0.02 0.51 186 T_OBFU_PDF_ATTACH 1738 0.39 0.12 0.51 187 XM_B_DNDMA 1727 0.70 1.14 0.50 188 SHORT_HELO_AND_INLINE_IMAGE 1724 0.40 0.16 0.50 189 XMLngstWrd_00 1699 0.46 0.38 0.50 190 XM_B_COPY_HTML 1677 0.72 1.24 0.49 191 XMSlimDrugH 1658 0.58 0.80 0.48 192 MSGID_FROM_MTA_HEADER 1605 0.41 0.28 0.47 193 XM_ProductURIs 1605 0.72 1.30 0.47 194 T_TooManySym_04 1572 0.33 0.03 0.46 195 XMSolicitRefs_0 1525 0.47 0.53 0.45 196 FORGED_GMAIL_RCVD 1480 0.49 0.62 0.43 197 XMSubMetaSxObfu_03 1453 0.54 0.80 0.42 198 TR_LOTS_OF_MONEY3 1450 0.76 1.55 0.42 199 TR_XM_GMP_MSPIKE_UNDO2 1434 0.41 0.40 0.42 200 XMBody_17 1421 1.05 2.50 0.41 ----------------------------------------------------------------------