Email: 454913 Autolearn: 0 AvgScore: 4.53 AvgScanTime: 1.32 sec Spam: 141911 Autolearn: 0 AvgScore: 12.90 AvgScanTime: 1.57 sec Ham: 313002 Autolearn: 0 AvgScore: 0.74 AvgScanTime: 1.21 sec Time Spent Running SA: 166.83 hours Time Spent Processing Spam: 61.86 hours Time Spent Processing Ham: 104.97 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 141781 99.68 99.91 99.57 2 HTML_MESSAGE 138316 90.49 97.47 87.33 3 DKIM_SIGNED 131901 83.50 92.95 79.22 4 XM_DK_Pass 125605 81.26 88.51 77.98 5 DKIM_VALID 124704 80.48 87.87 77.13 6 XM_B_Unicode 123581 77.50 87.08 73.16 7 RELAYCOUNTRY_US 119532 83.46 84.23 83.11 8 XM_B_SpammyWords 100935 54.93 71.13 47.58 9 XMListUnsubscribeExists 98244 58.00 69.23 52.91 10 DKIM_VALID_AU 98148 66.04 69.16 64.62 11 DCC_CHECK 95532 43.45 67.32 32.63 12 LOC_TINY_FONT_1 74265 38.95 52.33 32.88 13 XM_B_Unicode3 73527 47.06 51.81 44.90 14 XM_DK_Undo_02 64234 18.77 45.26 6.76 15 HTML_FONT_LOW_CONTRAST 59474 33.88 41.91 30.24 16 XM_B_SpammyWords2 58818 27.27 41.45 20.84 17 BAYES_50 56096 54.14 39.53 60.76 18 FVGT_m_MULTI_ODD 52815 30.23 37.22 27.06 19 BAYES_99 47896 13.83 33.75 4.80 20 DCC_CHECK_NEGATIVE 46292 56.48 32.62 67.29 21 TR_XM_DKIM_Undo 45526 12.18 32.08 3.15 22 DKIM_VALID_EF 44973 30.92 31.69 30.57 23 T_KAM_HTML_FONT_INVALID 42794 25.85 30.16 23.89 24 MIME_HTML_ONLY 39265 22.24 27.67 19.78 25 BAYES_999 36884 10.61 25.99 3.64 26 XMSubLong 36555 24.58 25.76 24.05 27 XM_Multi_Part_URI 35975 18.45 25.35 15.32 28 RCVD_IN_MSPIKE_H2 32752 18.40 23.08 16.28 29 TR_XM_DK_Unsub 32134 16.76 22.64 14.10 30 XM_B_Unsub 30502 13.37 21.49 9.69 31 TR_XM_BayesUnsub 29525 11.87 20.81 7.81 32 UNPARSEABLE_RELAY 29445 15.13 20.75 12.59 33 TR_DCC_Bayes_99 29257 7.12 20.62 1.01 34 T_TM2_M_HEADER_IN_MSG 29068 25.43 20.48 27.67 35 RELAYCOUNTRY_META 22749 7.46 16.03 3.58 36 XM_B_SpammyWords3 21864 9.35 15.41 6.60 37 TR_MAX_INTL_RELAY 21630 9.68 15.24 7.16 38 LOTS_OF_MONEY 18534 8.01 13.06 5.72 39 RCVD_IN_MSPIKE_WL 18416 20.43 12.98 23.80 40 TR_XM_SpammyWords2 18325 4.30 12.91 0.39 41 RCVD_IN_BL_SPAMCOP_NET 18283 4.54 12.88 0.76 42 TR_XM_SpammyWords4 16976 6.32 11.96 3.76 43 TR_XM_SpammyRelay 16813 5.07 11.85 2.00 44 BOTNET_IPINHOSTNAME 15641 6.14 11.02 3.93 45 TR_XM_UnparsRelay 15600 4.80 10.99 2.00 46 XM_Evil_Numbers_Gen 15243 9.61 10.74 9.09 47 BOTNET 14148 4.27 9.97 1.68 48 BAYES_80 13286 5.87 9.36 4.29 49 XM_B_Phish_Phrases 13072 7.09 9.21 6.13 50 BAYES_60 11554 7.82 8.14 7.67 51 TR_XM_SPAMCOP 11172 2.64 7.87 0.27 52 RCVD_IN_MSPIKE_BL 10673 3.31 7.52 1.41 53 TR_XM_MSPIKECOMBO 10655 3.31 7.51 1.41 54 XMSubMetaSx_00 10165 5.17 7.16 4.27 55 MPART_ALT_DIFF 10093 5.92 7.11 5.38 56 FSL_BULK_SIG 10077 3.93 7.10 2.50 57 UNTRUSTED_Relay 9610 3.21 6.77 1.59 58 LotsOfNums_01 9485 8.42 6.68 9.21 59 XM_B_PhoneNumber 9179 7.96 6.47 8.64 60 RCVD_IN_MSPIKE_H3 8721 8.90 6.15 10.14 61 HTML_IMAGE_RATIO_02 8570 5.52 6.04 5.28 62 HTML_IMAGE_RATIO_04 8148 5.07 5.74 4.76 63 XM_Body_Dirty_Words 8116 3.54 5.72 2.55 64 XM_H_Long_From01 7942 5.85 5.60 5.96 65 RELAYCOUNTRY_CA 7927 2.24 5.59 0.73 66 BAYES_95 7679 3.66 5.41 2.87 67 XM_UncommonTLD01 7599 4.35 5.35 3.89 68 XM_H_GMP 7550 5.02 5.32 4.88 69 DKIM_INVALID 7197 3.02 5.07 2.10 70 TR_XM_SpammyWords3 7112 1.99 5.01 0.62 71 RCVD_IN_MSPIKE_L3 7056 2.35 4.97 1.16 72 XM_B_SpammyTLD 7014 3.77 4.94 3.24 73 T_XMDrugObfuBody_14 6955 2.62 4.90 1.58 74 TR_XM_PhishingBody 6627 2.62 4.67 1.70 75 MIME_HTML_MOSTLY 6172 3.53 4.35 3.16 76 XM_CamelCaseFrm001 6165 2.89 4.34 2.23 77 XM_B_Investor 6012 2.37 4.24 1.52 78 TooManyTo_001 5932 6.10 4.18 6.97 79 XMStrtUSub 5741 4.70 4.05 4.99 80 XM_B_Unsub2 5638 2.40 3.97 1.68 81 TM2_M_VERY_LONG_WORD 5630 2.81 3.97 2.28 82 XM_OfRef6 5612 1.81 3.95 0.84 83 HTML_IMAGE_RATIO_06 5584 3.75 3.93 3.67 84 XMSexyCombo_05 5374 2.16 3.79 1.42 85 RCVD_IN_MSPIKE_H5 5347 6.71 3.77 8.05 86 TR_XM_SpammyWords5 5115 2.20 3.60 1.56 87 MIME_QP_LONG_LINE 4757 4.73 3.35 5.35 88 XMDiploma_00 4673 2.27 3.29 1.80 89 TR_XM_NoHeaderRelay 4546 1.14 3.20 0.20 90 MIME_HTML_ONLY_MULTI 4503 2.90 3.17 2.78 91 USER_IN_DEF_DKIM_WL 4501 11.22 3.17 14.86 92 XMNumbers 4445 3.32 3.13 3.41 93 TR_XM_MSPIKECOMBO2 4444 1.08 3.13 0.15 94 HTML_IMAGE_RATIO_08 4417 2.46 3.11 2.17 95 T_XMDrugObfuBody_08 4381 1.90 3.09 1.37 96 XMStockSpam_06 4367 1.58 3.08 0.89 97 RCVD_IN_MSPIKE_H4 4348 4.82 3.06 5.61 98 RELAYCOUNTRY_AU 4044 1.42 2.85 0.77 99 XM_B_SpammyWords4 3834 1.55 2.70 1.03 100 XM_URI_RBL 3817 1.11 2.69 0.39 101 T_TooManySym_01 3777 5.43 2.66 6.69 102 XM_UB50 3721 1.53 2.62 1.04 103 XMBody_17 3704 1.09 2.61 0.40 104 T_XMHurry_00 3689 1.31 2.60 0.73 105 TM2_M_URI_OPT_OUT 3670 2.13 2.59 1.92 106 XM_SPF_SoftFail 3641 1.70 2.57 1.30 107 TR_XM_INV_DKIM 3519 0.78 2.48 0.01 108 RCVD_IN_VALIDITY_RPBL 3211 0.76 2.26 0.08 109 SUBJ_ALL_CAPS 3192 1.98 2.25 1.86 110 SpammyFromTLD_02 3182 1.11 2.24 0.60 111 T_FILL_THIS_FORM_SHORT 3154 1.26 2.22 0.83 112 TR_XM_MaxSPIKE 3140 0.79 2.21 0.14 113 XM_B_URI_Unicode 3129 1.89 2.20 1.75 114 XMPhish30 3113 1.07 2.19 0.57 115 URI_TRY_3LD 3085 1.08 2.17 0.58 116 FROM_EXCESS_BASE64 2786 1.80 1.96 1.73 117 RCVD_IN_VALIDITY_SAFE 2768 4.05 1.95 5.01 118 T_XMDrugObfuBody_00 2758 1.44 1.94 1.21 119 XM_DK_Undo_01 2742 2.00 1.93 2.03 120 XMGenDplmaNmb 2732 1.30 1.93 1.01 121 URI_NOVOWEL 2688 1.40 1.89 1.17 122 RCVD_IN_MSPIKE_L4 2612 0.73 1.84 0.22 123 XMBrknScrpt_02 2606 1.22 1.84 0.94 124 RCVD_IN_IADB_LISTED 2501 3.18 1.76 3.83 125 MAILING_LIST_MULTI 2457 2.64 1.73 3.05 126 XM_B_DNDMA 2431 1.01 1.71 0.69 127 XM_SendGrid 2343 1.52 1.65 1.45 128 XMSubMetaI_00 2217 0.98 1.56 0.72 129 BAYES_40 2177 4.04 1.53 5.17 130 XM_UB99 2116 0.47 1.49 0.00 131 TR_LOTS_OF_MONEY3 2084 0.72 1.47 0.38 132 T_REMOTE_IMAGE 2027 2.80 1.43 3.43 133 HK_RANDOM_REPLYTO 2026 0.51 1.43 0.09 134 RCVD_IN_IADB_SPF 2024 2.80 1.43 3.42 135 RELAYCOUNTRY_FR 2019 0.66 1.42 0.32 136 LOW_PRICE 1946 0.64 1.37 0.31 137 THIS_AD 1944 0.74 1.37 0.45 138 DKIM_ADSP_NXDOMAIN 1913 0.64 1.35 0.32 139 XM_B_COPY_HTML 1910 1.05 1.35 0.91 140 ANY_BOUNCE_MESSAGE 1908 3.40 1.34 4.33 141 BOUNCE_MESSAGE 1906 3.40 1.34 4.33 142 BOTNET_NORDNS 1905 0.43 1.34 0.01 143 XM_B_Phish66 1884 0.65 1.33 0.34 144 XM_ProductURIs 1877 0.81 1.32 0.58 145 RCVD_IN_IADB_DK 1856 2.45 1.31 2.97 146 RCVD_IN_IADB_SENDERID 1816 2.51 1.28 3.06 147 MPART_ALT_DIFF_COUNT 1801 0.79 1.27 0.57 148 HTML_MIME_NO_HTML_TAG 1780 1.95 1.25 2.27 149 XMBdyGiftCard01 1767 0.95 1.25 0.81 150 SpammyFromTLD_01 1760 0.85 1.24 0.67 151 SHOPIFY_IMG_NOT_RCVD_SFY 1704 0.57 1.20 0.29 152 RCVD_IN_VALIDITY_CERTIFIED 1700 3.27 1.20 4.21 153 XM_B_SEO 1687 0.54 1.19 0.24 154 TR_XM_DK_SendGrid 1669 1.06 1.18 1.01 155 PLING_QUERY 1629 0.66 1.15 0.45 156 RCVD_IN_PSBL 1627 0.36 1.15 0.01 157 XM_H_Long_From02 1625 0.86 1.15 0.73 158 URI_HEX 1618 1.10 1.14 1.09 159 RCVD_IN_IADB_VOUCHED 1582 2.01 1.11 2.41 160 XM_S_SpammyWords 1576 0.51 1.11 0.24 161 TR_XM_Spammywords 1575 0.51 1.11 0.24 162 BAYES_20 1571 2.80 1.11 3.57 163 XMSubMetaSxObfu_03 1524 0.72 1.07 0.56 164 TR_XM_SEO4 1516 0.40 1.07 0.10 165 TR_Symld_Words 1511 1.41 1.06 1.57 166 TR_MetaPhish_Combo_01 1511 0.86 1.06 0.77 167 XM_UB999 1491 0.33 1.05 0.00 168 DIET_1 1486 0.56 1.05 0.33 169 XM_UB60 1450 0.40 1.02 0.12 170 XMBody_78 1444 0.52 1.02 0.30 171 ALL_TRUSTED 1403 9.72 0.99 13.68 172 RDNS_DYNAMIC 1389 0.42 0.98 0.17 173 XMHTML_After_End 1370 0.58 0.97 0.41 174 TR_LOTS_OF_MONEY2 1352 0.39 0.95 0.13 175 T_MONEY_PERCENT 1352 0.39 0.95 0.13 176 MultiRelay_CC 1343 0.38 0.95 0.13 177 XM_DIRTYINTL 1339 0.33 0.94 0.05 178 DKIM_ADSP_CUSTOM_MED 1299 0.79 0.92 0.74 179 TR_BOTNET_NEGATE 1272 0.42 0.90 0.21 180 T_Symld_Words_02 1271 0.86 0.90 0.84 181 KHOP_HELO_FCRDNS 1261 1.33 0.89 1.53 182 XM_HighProb1 1257 0.28 0.89 0.01 183 TR_XM_FormFill 1256 0.28 0.89 0.01 184 HTTPS_HTTP_MISMATCH 1245 0.69 0.88 0.61 185 XM_UB80 1237 0.28 0.87 0.02 186 HTML_IMAGE_ONLY_20 1237 0.62 0.87 0.50 187 XMPhish14 1227 0.62 0.86 0.51 188 XMSexyCombo_01 1217 0.40 0.86 0.19 189 TR_XM_InvalidRelay 1213 0.27 0.85 0.01 190 TM2_M_A_HREF_HREF 1202 0.43 0.85 0.24 191 TR_Mismatch_TLD_02 1196 0.33 0.84 0.10 192 TVD_RCVD_IP 1182 0.95 0.83 1.00 193 NO_DNS_FOR_FROM 1178 0.46 0.83 0.29 194 TR_XM_Base64_M1 1172 0.68 0.83 0.62 195 TR_XM_MaxWHORU 1171 0.42 0.83 0.24 196 XMClaimOffer 1159 0.33 0.82 0.10 197 XM_B_REG_HTML 1126 0.43 0.79 0.26 198 TR_XM_RelayPhish 1117 0.29 0.79 0.07 199 HTML_TAG_BALANCE_BODY 1085 0.52 0.76 0.41 200 HELO_DYNAMIC_SPLIT_IP 1085 0.24 0.76 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 311669 99.68 99.91 99.57 2 HTML_MESSAGE 273334 90.49 97.47 87.33 3 RELAYCOUNTRY_US 260136 83.46 84.23 83.11 4 DKIM_SIGNED 247974 83.50 92.95 79.22 5 XM_DK_Pass 244067 81.26 88.51 77.98 6 DKIM_VALID 241410 80.48 87.87 77.13 7 XM_B_Unicode 228977 77.50 87.08 73.16 8 DCC_CHECK_NEGATIVE 210630 56.48 32.62 67.29 9 DKIM_VALID_AU 202263 66.04 69.16 64.62 10 BAYES_50 190192 54.14 39.53 60.76 11 XMListUnsubscribeExists 165595 58.00 69.23 52.91 12 XM_B_SpammyWords 148933 54.93 71.13 47.58 13 XM_B_Unicode3 140533 47.06 51.81 44.90 14 LOC_TINY_FONT_1 102919 38.95 52.33 32.88 15 DCC_CHECK 102124 43.45 67.32 32.63 16 DKIM_VALID_EF 95674 30.92 31.69 30.57 17 HTML_FONT_LOW_CONTRAST 94667 33.88 41.91 30.24 18 T_TM2_M_HEADER_IN_MSG 86598 25.43 20.48 27.67 19 FVGT_m_MULTI_ODD 84690 30.23 37.22 27.06 20 XMSubLong 75285 24.58 25.76 24.05 21 T_KAM_HTML_FONT_INVALID 74790 25.85 30.16 23.89 22 RCVD_IN_MSPIKE_WL 74507 20.43 12.98 23.80 23 XM_B_SpammyWords2 65229 27.27 41.45 20.84 24 MIME_HTML_ONLY 61920 22.24 27.67 19.78 25 RCVD_IN_MSPIKE_H2 50955 18.40 23.08 16.28 26 XM_Multi_Part_URI 47958 18.45 25.35 15.32 27 USER_IN_DEF_DKIM_WL 46525 11.22 3.17 14.86 28 TR_XM_DK_Unsub 44121 16.76 22.64 14.10 29 ALL_TRUSTED 42817 9.72 0.99 13.68 30 UNPARSEABLE_RELAY 39402 15.13 20.75 12.59 31 RCVD_IN_MSPIKE_H3 31749 8.90 6.15 10.14 32 XM_B_Unsub 30321 13.37 21.49 9.69 33 LotsOfNums_01 28828 8.42 6.68 9.21 34 XM_Evil_Numbers_Gen 28465 9.61 10.74 9.09 35 BAYES_00 27631 6.25 0.58 8.83 36 XM_B_PhoneNumber 27054 7.96 6.47 8.64 37 RCVD_IN_MSPIKE_H5 25189 6.71 3.77 8.05 38 XM_DKIMWhitelistDomains 24936 5.53 0.17 7.97 39 TR_XM_BayesUnsub 24461 11.87 20.81 7.81 40 BAYES_60 24006 7.82 8.14 7.67 41 TR_MAX_INTL_RELAY 22406 9.68 15.24 7.16 42 TooManyTo_001 21831 6.10 4.18 6.97 43 XM_DK_Undo_02 21158 18.77 45.26 6.76 44 T_TooManySym_01 20946 5.43 2.66 6.69 45 XM_B_SpammyWords3 20666 9.35 15.41 6.60 46 TR_XM_DK_Bayes 20259 4.59 0.45 6.47 47 TR_XM_DK_Bayes1 19991 4.53 0.44 6.39 48 XM_B_Phish_Phrases 19186 7.09 9.21 6.13 49 XM_H_Long_From01 18648 5.85 5.60 5.96 50 LOTS_OF_MONEY 17919 8.01 13.06 5.72 51 RCVD_IN_MSPIKE_H4 17569 4.82 3.06 5.61 52 TR_XM_DK_Bayes2 17194 3.87 0.30 5.49 53 MPART_ALT_DIFF 16844 5.92 7.11 5.38 54 MIME_QP_LONG_LINE 16742 4.73 3.35 5.35 55 HTML_IMAGE_RATIO_02 16527 5.52 6.04 5.28 56 BAYES_40 16188 4.04 1.53 5.17 57 RCVD_IN_VALIDITY_SAFE 15669 4.05 1.95 5.01 58 XMStrtUSub 15630 4.70 4.05 4.99 59 XM_H_GMP 15272 5.02 5.32 4.88 60 BAYES_99 15009 13.83 33.75 4.80 61 HTML_IMAGE_RATIO_04 14908 5.07 5.74 4.76 62 ANY_BOUNCE_MESSAGE 13564 3.40 1.34 4.33 63 BOUNCE_MESSAGE 13564 3.40 1.34 4.33 64 BAYES_80 13430 5.87 9.36 4.29 65 XMSubMetaSx_00 13374 5.17 7.16 4.27 66 RCVD_IN_VALIDITY_CERTIFIED 13184 3.27 1.20 4.21 67 BOTNET_IPINHOSTNAME 12292 6.14 11.02 3.93 68 XM_UncommonTLD01 12176 4.35 5.35 3.89 69 XM_PDF 12093 2.85 0.60 3.86 70 RCVD_IN_IADB_LISTED 11981 3.18 1.76 3.83 71 TR_XM_SpammyWords4 11770 6.32 11.96 3.76 72 HTML_IMAGE_RATIO_06 11475 3.75 3.93 3.67 73 BAYES_999 11403 10.61 25.99 3.64 74 RELAYCOUNTRY_META 11197 7.46 16.03 3.58 75 BAYES_20 11178 2.80 1.11 3.57 76 T_REMOTE_IMAGE 10727 2.80 1.43 3.43 77 RCVD_IN_IADB_SPF 10705 2.80 1.43 3.42 78 XMNumbers 10662 3.32 3.13 3.41 79 XM_B_SpammyTLD 10135 3.77 4.94 3.24 80 T_TooManySym_02 10030 2.40 0.62 3.20 81 MIME_HTML_MOSTLY 9904 3.53 4.35 3.16 82 TR_XM_DKIM_Undo 9866 12.18 32.08 3.15 83 RCVD_IN_IADB_SENDERID 9586 2.51 1.28 3.06 84 MAILING_LIST_MULTI 9536 2.64 1.73 3.05 85 RCVD_IN_IADB_DK 9283 2.45 1.31 2.97 86 BAYES_95 8973 3.66 5.41 2.87 87 MIME_HTML_ONLY_MULTI 8690 2.90 3.17 2.78 88 XM_Body_Dirty_Words 7987 3.54 5.72 2.55 89 FSL_BULK_SIG 7817 3.93 7.10 2.50 90 RCVD_IN_IADB_VOUCHED 7540 2.01 1.11 2.41 91 TO_MALFORMED 7421 1.64 0.02 2.37 92 TM2_M_VERY_LONG_WORD 7139 2.81 3.97 2.28 93 HTML_MIME_NO_HTML_TAG 7098 1.95 1.25 2.27 94 XM_CamelCaseFrm001 6977 2.89 4.34 2.23 95 INVALID_MSGID 6907 1.63 0.36 2.21 96 HTML_IMAGE_RATIO_08 6788 2.46 3.11 2.17 97 DKIM_INVALID 6564 3.02 5.07 2.10 98 TooManyTo_002 6415 1.58 0.53 2.05 99 BAYES_05 6387 1.59 0.59 2.04 100 XM_DK_Undo_01 6348 2.00 1.93 2.03 101 TR_XM_SpammyRelay 6263 5.07 11.85 2.00 102 TR_XM_UnparsRelay 6256 4.80 10.99 2.00 103 TM2_M_URI_OPT_OUT 6002 2.13 2.59 1.92 104 SUBJ_ALL_CAPS 5814 1.98 2.25 1.86 105 XMDiploma_00 5649 2.27 3.29 1.80 106 XM_B_URI_Unicode 5473 1.89 2.20 1.75 107 FROM_EXCESS_BASE64 5417 1.80 1.96 1.73 108 RCVD_IN_IADB_OPTIN 5322 1.40 0.73 1.70 109 TR_XM_PhishingBody 5313 2.62 4.67 1.70 110 BOTNET 5267 4.27 9.97 1.68 111 XM_B_Unsub2 5259 2.40 3.97 1.68 112 UNTRUSTED_Relay 4982 3.21 6.77 1.59 113 T_XMDrugObfuBody_14 4949 2.62 4.90 1.58 114 TR_Symld_Words 4909 1.41 1.06 1.57 115 TR_XM_SpammyWords5 4874 2.20 3.60 1.56 116 KHOP_HELO_FCRDNS 4792 1.33 0.89 1.53 117 XM_B_Investor 4762 2.37 4.24 1.52 118 XM_SendGrid 4553 1.52 1.65 1.45 119 IN_HORDE_ADDRESS_BOOK 4472 1.02 0.10 1.43 120 XMSexyCombo_05 4450 2.16 3.79 1.42 121 RCVD_IN_MSPIKE_BL 4407 3.31 7.52 1.41 122 TR_XM_MSPIKECOMBO 4406 3.31 7.51 1.41 123 T_XMDrugObfuBody_08 4285 1.90 3.09 1.37 124 T_TooManySym_03 4190 0.98 0.19 1.34 125 TooManyTo_003 4122 1.04 0.44 1.32 126 XM_SPF_SoftFail 4078 1.70 2.57 1.30 127 XMGappySubj_01 3944 0.92 0.16 1.26 128 HELO_NODOT 3833 0.96 0.39 1.22 129 HELO_NO_DOMAIN 3832 0.96 0.38 1.22 130 T_XMDrugObfuBody_00 3779 1.44 1.94 1.21 131 URI_NOVOWEL 3662 1.40 1.89 1.17 132 RCVD_IN_MSPIKE_L3 3640 2.35 4.97 1.16 133 XM_GoogleGroups 3617 1.02 0.72 1.16 134 FROM_GOV_DKIM_AU 3415 0.85 0.31 1.09 135 URI_HEX 3406 1.10 1.14 1.09 136 XM_UB50 3251 1.53 2.62 1.04 137 XM_B_SpammyWords4 3218 1.55 2.70 1.03 138 XMGenDplmaNmb 3173 1.30 1.93 1.01 139 TR_XM_DK_SendGrid 3164 1.06 1.18 1.01 140 TR_DCC_Bayes_99 3146 7.12 20.62 1.01 141 TooManyTo_004 3142 0.80 0.36 1.00 142 TVD_RCVD_IP 3134 0.95 0.83 1.00 143 TVD_SPACE_RATIO 3056 0.74 0.20 0.98 144 XMBrknScrpt_02 2943 1.22 1.84 0.94 145 XM_B_COPY_HTML 2849 1.05 1.35 0.91 146 XMStockSpam_06 2801 1.58 3.08 0.89 147 XMCapTrack 2658 0.74 0.49 0.85 148 T_Symld_Words_02 2631 0.86 0.90 0.84 149 XM_OfRef6 2627 1.81 3.95 0.84 150 T_FILL_THIS_FORM_SHORT 2598 1.26 2.22 0.83 151 XMBdyGiftCard01 2548 0.95 1.25 0.81 152 XMBSHREFv2 2503 0.66 0.37 0.80 153 T_TVD_MIME_NO_HEADERS 2483 0.57 0.07 0.79 154 TooManyTo_005 2479 0.64 0.31 0.79 155 XM_H_PHPMailer 2440 0.65 0.37 0.78 156 TR_MetaPhish_Combo_01 2408 0.86 1.06 0.77 157 RELAYCOUNTRY_AU 2398 1.42 2.85 0.77 158 RCVD_IN_BL_SPAMCOP_NET 2372 4.54 12.88 0.76 159 DKIM_ADSP_CUSTOM_MED 2307 0.79 0.92 0.74 160 XM_ShortIntro_01 2300 0.67 0.54 0.73 161 T_XMHurry_00 2282 1.31 2.60 0.73 162 XM_H_Long_From02 2281 0.86 1.15 0.73 163 RELAYCOUNTRY_CA 2280 2.24 5.59 0.73 164 XMSubMetaI_00 2252 0.98 1.56 0.72 165 XM_B_DNDMA 2159 1.01 1.71 0.69 166 SpammyFromTLD_01 2092 0.85 1.24 0.67 167 TR_XM_SpammyWords3 1947 1.99 5.01 0.62 168 XMNoVowels 1945 0.57 0.44 0.62 169 TR_XM_Base64_M1 1934 0.68 0.83 0.62 170 HTTPS_HTTP_MISMATCH 1916 0.69 0.88 0.61 171 MAY_BE_FORGED 1910 0.47 0.16 0.61 172 SpammyFromTLD_02 1890 1.11 2.24 0.60 173 XM_ProductURIs 1816 0.81 1.32 0.58 174 URI_TRY_3LD 1807 1.08 2.17 0.58 175 XMPhish30 1777 1.07 2.19 0.57 176 MPART_ALT_DIFF_COUNT 1772 0.79 1.27 0.57 177 XMSubMetaSxObfu_03 1765 0.72 1.07 0.56 178 T_OBFU_PDF_ATTACH 1751 0.41 0.08 0.56 179 XMGappySubj_02 1654 0.38 0.05 0.53 180 XMPhish14 1604 0.62 0.86 0.51 181 HTML_IMAGE_ONLY_20 1566 0.62 0.87 0.50 182 RELAYCOUNTRY_GB 1563 0.55 0.67 0.50 183 FORGED_GMAIL_RCVD 1543 0.56 0.70 0.49 184 TO_NO_BRKTS_HTML_ONLY 1505 0.37 0.12 0.48 185 XMLngstWrd_00 1459 0.44 0.37 0.47 186 MSGID_FROM_MTA_HEADER 1456 0.42 0.31 0.47 187 T_TooManySym_04 1441 0.33 0.05 0.46 188 XMSlimDrugH 1412 0.50 0.62 0.45 189 THIS_AD 1409 0.74 1.37 0.45 190 PLING_QUERY 1395 0.66 1.15 0.45 191 NML_ADSP_CUSTOM_MED 1392 0.54 0.76 0.44 192 TR_XM_GMP_MSPIKE_UNDO2 1380 0.38 0.23 0.44 193 HTML_TAG_BALANCE_BODY 1287 0.52 0.76 0.41 194 XMSolicitRefs_0 1280 0.42 0.44 0.41 195 XMHTML_After_End 1271 0.58 0.97 0.41 196 XMBody_17 1255 1.09 2.61 0.40 197 XMLngstWrd_01 1254 0.37 0.30 0.40 198 XMMoneyMeta_00 1245 0.40 0.42 0.40 199 SUBJ_DOLLARS 1233 0.43 0.52 0.39 200 TR_XM_SpammyWords2 1226 4.30 12.91 0.39 ----------------------------------------------------------------------