Email: 509707 Autolearn: 0 AvgScore: 5.59 AvgScanTime: 1.71 sec Spam: 188569 Autolearn: 0 AvgScore: 13.01 AvgScanTime: 1.90 sec Ham: 321138 Autolearn: 0 AvgScore: 1.23 AvgScanTime: 1.60 sec Time Spent Running SA: 242.15 hours Time Spent Processing Spam: 99.30 hours Time Spent Processing Ham: 142.85 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 188468 99.76 99.95 99.66 2 HTML_MESSAGE 185028 91.79 98.12 88.06 3 DKIM_SIGNED 177378 87.14 94.07 83.07 4 XM_DK_Pass 169999 85.17 90.15 82.25 5 XM_B_Unicode 169523 82.52 89.90 78.19 6 DKIM_VALID 169019 84.78 89.63 81.94 7 RELAYCOUNTRY_US 160287 84.10 85.00 83.57 8 DCC_CHECK 145537 58.57 77.18 47.65 9 XMListUnsubscribeExists 144324 68.06 76.54 63.08 10 DKIM_VALID_AU 133366 70.06 70.73 69.67 11 XM_B_SpammyWords 125098 57.31 66.34 52.01 12 LOC_TINY_FONT_1 113788 47.93 60.34 40.65 13 XM_B_Unicode3 99402 52.46 52.71 52.31 14 HTML_FONT_LOW_CONTRAST 95266 41.74 50.52 36.58 15 XM_DK_Undo_02 90950 21.81 48.23 6.29 16 FVGT_m_MULTI_ODD 82210 34.42 43.60 29.03 17 BAYES_50 75129 54.39 39.84 62.93 18 XM_B_SpammyWords2 68816 28.73 36.49 24.17 19 DKIM_VALID_EF 60600 29.63 32.14 28.16 20 BAYES_99 59073 14.47 31.33 4.57 21 XM_Multi_Part_URI 58887 23.25 31.23 18.57 22 TR_XM_DKIM_Undo 57042 12.82 30.25 2.59 23 UNPARSEABLE_RELAY 55214 20.37 29.28 15.14 24 RCVD_IN_MSPIKE_H2 54081 20.31 28.68 15.40 25 T_KAM_HTML_FONT_INVALID 52400 27.28 27.79 26.98 26 TR_XM_DK_Unsub 50793 20.27 26.94 16.36 27 BAYES_999 45862 11.08 24.32 3.30 28 MIME_HTML_ONLY 44756 21.31 23.73 19.89 29 TR_DCC_Bayes_99 43085 9.43 22.85 1.54 30 DCC_CHECK_NEGATIVE 42878 41.36 22.74 52.30 31 XMSubLong 37707 20.39 20.00 20.62 32 RCVD_IN_BL_SPAMCOP_NET 32275 7.02 17.12 1.09 33 T_TM2_M_HEADER_IN_MSG 31034 19.57 16.46 21.39 34 XM_B_Unsub 30644 12.50 16.25 10.29 35 TR_MAX_INTL_RELAY 30110 10.80 15.97 7.76 36 TR_XM_BayesUnsub 29705 11.27 15.75 8.63 37 TR_XM_UnparsRelay 28740 7.27 15.24 2.59 38 RELAYCOUNTRY_META 26085 7.85 13.83 4.33 39 RCVD_IN_MSPIKE_WL 24841 19.15 13.17 22.66 40 XM_B_SpammyWords3 24645 9.24 13.07 7.00 41 TR_XM_SPAMCOP 24198 5.03 12.83 0.46 42 BOTNET_IPINHOSTNAME 21340 6.42 11.32 3.55 43 XM_Evil_Numbers_Gen 21223 10.87 11.25 10.65 44 TR_XM_SpammyWords2 20615 4.49 10.93 0.70 45 TR_XM_SpammyRelay 19371 5.18 10.27 2.19 46 BAYES_80 18829 6.64 9.99 4.68 47 LOTS_OF_MONEY 18665 7.11 9.90 5.47 48 BAYES_60 18563 9.19 9.84 8.81 49 BOTNET 17305 4.08 9.18 1.09 50 TR_XM_SpammyWords4 16326 5.65 8.66 3.89 51 HTML_IMAGE_RATIO_02 15071 7.74 7.99 7.60 52 XM_B_Phish_Phrases 14954 7.04 7.93 6.52 53 FSL_BULK_SIG 13301 5.12 7.05 3.98 54 RCVD_IN_MSPIKE_BL 12672 3.30 6.72 1.29 55 TR_XM_MSPIKECOMBO 12252 3.21 6.50 1.28 56 UNTRUSTED_Relay 12061 3.76 6.40 2.21 57 MPART_ALT_DIFF 11997 5.83 6.36 5.51 58 RCVD_IN_MSPIKE_H3 11786 8.31 6.25 9.52 59 XM_H_Long_From01 11689 5.80 6.20 5.56 60 SUBJ_ALL_CAPS 11284 4.82 5.98 4.13 61 XM_B_PhoneNumber 11064 7.09 5.87 7.80 62 TR_XM_SpammyWords5 10992 4.37 5.83 3.51 63 LotsOfNums_01 10932 8.64 5.80 10.31 64 XMSubMetaSx_00 10849 4.07 5.75 3.08 65 BAYES_95 10640 4.03 5.64 3.08 66 XM_B_SpammyTLD 10024 3.75 5.32 2.83 67 XM_UncommonTLD01 9273 3.88 4.92 3.27 68 XM_H_GMP 9267 4.35 4.91 4.02 69 HTML_IMAGE_RATIO_04 9242 6.33 4.90 7.17 70 MIME_HTML_MOSTLY 9206 4.13 4.88 3.69 71 TR_XM_PhishingBody 8441 2.67 4.48 1.61 72 RELAYCOUNTRY_CA 8365 2.11 4.44 0.75 73 DKIM_INVALID 8359 2.35 4.43 1.13 74 XM_Body_Dirty_Words 7950 2.72 4.22 1.84 75 TM2_M_VERY_LONG_WORD 7914 3.14 4.20 2.53 76 RCVD_IN_MSPIKE_L3 7843 2.24 4.16 1.11 77 HTML_IMAGE_RATIO_06 7203 3.69 3.82 3.62 78 TR_XM_SpammyWords3 7145 1.75 3.79 0.55 79 XMBody_17 7056 1.88 3.74 0.79 80 T_XMHurry_00 6918 2.21 3.67 1.35 81 XMStrtUSub 6745 4.31 3.58 4.74 82 RCVD_IN_MSPIKE_H4 6636 4.62 3.52 5.27 83 T_XMDrugObfuBody_14 6591 2.16 3.50 1.38 84 RCVD_IN_MSPIKE_H5 6419 6.22 3.40 7.87 85 XM_CamelCaseFrm001 6349 2.54 3.37 2.06 86 XM_B_Investor 6248 1.97 3.31 1.18 87 XM_OfRef6 6201 1.89 3.29 1.07 88 USER_IN_DEF_DKIM_WL 6079 13.36 3.22 19.31 89 XMNumbers 5843 3.44 3.10 3.63 90 XMSexyCombo_05 5745 1.75 3.05 0.98 91 XMStockSpam_06 5657 2.38 3.00 2.01 92 XMSubMetaI_00 5501 2.01 2.92 1.47 93 TR_XM_MSPIKECOMBO2 5483 1.16 2.91 0.14 94 XM_B_URI_Unicode 5401 2.01 2.86 1.50 95 XM_UB50 5372 2.06 2.85 1.59 96 RELAYCOUNTRY_AU 5306 1.57 2.81 0.84 97 SHOPIFY_IMG_NOT_RCVD_SFY 5258 1.31 2.79 0.44 98 TooManyTo_001 5230 3.80 2.77 4.41 99 TM2_M_URI_OPT_OUT 5072 2.69 2.69 2.70 100 T_TooManySym_01 4905 5.38 2.60 7.01 101 XM_B_SpammyWords4 4901 1.87 2.60 1.44 102 RCVD_IN_VALIDITY_SAFE 4790 5.45 2.54 7.15 103 THIS_AD 4757 1.31 2.52 0.60 104 XMBdyGiftCard01 4703 1.71 2.49 1.24 105 MIME_HTML_ONLY_MULTI 4681 2.51 2.48 2.52 106 TR_XM_NoHeaderRelay 4566 1.07 2.42 0.27 107 HTML_IMAGE_RATIO_08 4492 2.37 2.38 2.36 108 XM_B_Unsub2 4460 1.61 2.37 1.16 109 TR_Caps_n_Bayes_99 4393 0.91 2.33 0.08 110 XM_SPF_SoftFail 4315 1.55 2.29 1.12 111 MPART_ALT_DIFF_COUNT 4240 1.19 2.25 0.56 112 TR_XM_INV_DKIM 4183 0.83 2.22 0.01 113 XM_ProductURIs 4073 1.38 2.16 0.92 114 XMPhish30 3956 1.23 2.10 0.72 115 TR_XM_MaxSPIKE 3910 0.85 2.07 0.13 116 MIME_QP_LONG_LINE 3858 4.34 2.05 5.69 117 T_XMDrugObfuBody_08 3837 1.44 2.03 1.08 118 XM_URI_RBL 3822 1.03 2.03 0.45 119 SpammyFromTLD_02 3599 0.83 1.91 0.20 120 XMClaimOffer 3560 1.14 1.89 0.70 121 RCVD_IN_IADB_LISTED 3399 3.18 1.80 3.98 122 XMBrknScrpt_02 3374 1.52 1.79 1.37 123 T_REMOTE_IMAGE 3362 2.30 1.78 2.61 124 RCVD_IN_VALIDITY_CERTIFIED 3332 4.33 1.77 5.83 125 T_FILL_THIS_FORM_SHORT 3172 1.05 1.68 0.68 126 FROM_EXCESS_BASE64 3156 2.29 1.67 2.64 127 LOW_PRICE 3101 1.55 1.64 1.50 128 RCVD_IN_MSPIKE_L4 3055 0.69 1.62 0.15 129 KHOP_HELO_FCRDNS 3014 1.30 1.60 1.12 130 XM_SendGrid 2902 1.55 1.54 1.56 131 TR_XM_GMP_BULK_SIG 2881 0.60 1.53 0.05 132 MAILING_LIST_MULTI 2858 2.78 1.52 3.52 133 XM_DK_Undo_01 2832 1.47 1.50 1.44 134 XMDiploma_00 2831 1.20 1.50 1.03 135 URI_NOVOWEL 2788 1.31 1.48 1.21 136 RCVD_IN_IADB_SPF 2723 2.82 1.44 3.63 137 ALL_TRUSTED 2691 8.30 1.43 12.34 138 BAYES_40 2607 3.21 1.38 4.29 139 T_MONEY_PERCENT 2562 0.66 1.36 0.24 140 TR_LOTS_OF_MONEY2 2562 0.66 1.36 0.24 141 XM_B_DNDMA 2545 0.98 1.35 0.77 142 T_XMDrugObfuBody_00 2467 1.25 1.31 1.22 143 XM_H_Long_From02 2459 0.87 1.30 0.62 144 RCVD_IN_IADB_DK 2437 2.51 1.29 3.22 145 RCVD_IN_IADB_SENDERID 2377 2.57 1.26 3.33 146 RDNS_DYNAMIC 2361 0.57 1.25 0.17 147 RCVD_IN_VALIDITY_RPBL 2340 0.48 1.24 0.03 148 XM_UB99 2293 0.45 1.22 0.00 149 RCVD_IN_IADB_VOUCHED 2257 1.92 1.20 2.35 150 RELAYCOUNTRY_FR 2246 0.66 1.19 0.35 151 XM_B_COPY_HTML 2169 1.12 1.15 1.10 152 SpammyFromTLD_01 2140 0.63 1.13 0.33 153 BOTNET_NORDNS 2138 0.42 1.13 0.00 154 DIET_1 2099 0.63 1.11 0.35 155 TVD_RCVD_IP 2000 0.99 1.06 0.95 156 TR_XM_DK_SendGrid 1999 1.07 1.06 1.08 157 XMSubMetaSxObfu_03 1974 0.91 1.05 0.82 158 XM_B_REG_HTML 1969 0.58 1.04 0.31 159 HELO_DYNAMIC_SPLIT_IP 1951 0.39 1.03 0.01 160 HK_RANDOM_REPLYTO 1903 0.43 1.01 0.09 161 URI_HEX 1795 0.99 0.95 1.01 162 HTML_IMAGE_ONLY_20 1785 0.53 0.95 0.29 163 XMBody_78 1735 0.59 0.92 0.39 164 RCVD_IN_PSBL 1722 0.35 0.91 0.01 165 BAYES_20 1717 2.19 0.91 2.94 166 XMPhish14 1707 0.54 0.91 0.32 167 XM_UB60 1705 0.41 0.90 0.12 168 TM2_M_A_HREF_HREF 1701 0.48 0.90 0.24 169 XM_B_Phish66 1682 0.51 0.89 0.29 170 T_Symld_Words_02 1680 0.80 0.89 0.75 171 TR_LOTS_OF_MONEY3 1677 0.57 0.89 0.39 172 TR_XM_RelayPhish 1647 0.38 0.87 0.08 173 XM_RXBody 1610 0.47 0.85 0.24 174 T_TooManySym_02 1609 2.44 0.85 3.37 175 URIBL_BLACK 1594 0.33 0.85 0.03 176 MONEY_BACK 1583 0.48 0.84 0.27 177 XM_UB999 1577 0.31 0.84 0.00 178 XM_B_SEO 1562 0.44 0.83 0.21 179 RCVD_IN_IADB_OPTIN 1556 1.36 0.83 1.68 180 XMGenDplmaNmb 1551 0.58 0.82 0.44 181 HTML_TAG_BALANCE_BODY 1548 0.70 0.82 0.63 182 HTML_MIME_NO_HTML_TAG 1521 1.12 0.81 1.30 183 HTML_IMAGE_ONLY_24 1493 0.42 0.79 0.20 184 DKIM_ADSP_CUSTOM_MED 1401 0.73 0.74 0.72 185 URI_TRY_3LD 1385 0.70 0.73 0.69 186 TR_XM_Base64_M1 1385 0.84 0.73 0.90 187 XM_UB80 1359 0.28 0.72 0.02 188 XM_GoogleGroups 1355 0.95 0.72 1.08 189 RCVD_IN_MSPIKE_L5 1354 0.28 0.72 0.03 190 TR_XM_InvalidRelay 1338 0.27 0.71 0.01 191 TR_Mismatch_TLD_02 1321 0.31 0.70 0.08 192 TR_Symld_Words 1284 0.84 0.68 0.93 193 XMLongAddy 1277 0.31 0.68 0.10 194 XM_DIRTYINTL 1265 0.28 0.67 0.04 195 TR_XM_SEO4 1264 0.29 0.67 0.07 196 RELAYCOUNTRY_RU 1258 0.26 0.67 0.03 197 MultiRelay_CC 1249 0.35 0.66 0.16 198 ANY_BOUNCE_MESSAGE 1247 2.92 0.66 4.24 199 BOUNCE_MESSAGE 1247 2.91 0.66 4.24 200 HTTPS_HTTP_MISMATCH 1243 0.51 0.66 0.42 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 320035 99.76 99.95 99.66 2 HTML_MESSAGE 282808 91.79 98.12 88.06 3 RELAYCOUNTRY_US 268375 84.10 85.00 83.57 4 DKIM_SIGNED 266762 87.14 94.07 83.07 5 XM_DK_Pass 264133 85.17 90.15 82.25 6 DKIM_VALID 263127 84.78 89.63 81.94 7 XM_B_Unicode 251093 82.52 89.90 78.19 8 DKIM_VALID_AU 223724 70.06 70.73 69.67 9 XMListUnsubscribeExists 202584 68.06 76.54 63.08 10 BAYES_50 202091 54.39 39.84 62.93 11 XM_B_Unicode3 167977 52.46 52.71 52.31 12 DCC_CHECK_NEGATIVE 167962 41.36 22.74 52.30 13 XM_B_SpammyWords 167016 57.31 66.34 52.01 14 DCC_CHECK 153022 58.57 77.18 47.65 15 LOC_TINY_FONT_1 130528 47.93 60.34 40.65 16 HTML_FONT_LOW_CONTRAST 117470 41.74 50.52 36.58 17 FVGT_m_MULTI_ODD 93213 34.42 43.60 29.03 18 DKIM_VALID_EF 90427 29.63 32.14 28.16 19 T_KAM_HTML_FONT_INVALID 86629 27.28 27.79 26.98 20 XM_B_SpammyWords2 77614 28.73 36.49 24.17 21 RCVD_IN_MSPIKE_WL 72769 19.15 13.17 22.66 22 T_TM2_M_HEADER_IN_MSG 68707 19.57 16.46 21.39 23 XMSubLong 66215 20.39 20.00 20.62 24 MIME_HTML_ONLY 63864 21.31 23.73 19.89 25 USER_IN_DEF_DKIM_WL 62001 13.36 3.22 19.31 26 XM_Multi_Part_URI 59624 23.25 31.23 18.57 27 TR_XM_DK_Unsub 52531 20.27 26.94 16.36 28 RCVD_IN_MSPIKE_H2 49463 20.31 28.68 15.40 29 UNPARSEABLE_RELAY 48626 20.37 29.28 15.14 30 ALL_TRUSTED 39620 8.30 1.43 12.34 31 XM_Evil_Numbers_Gen 34190 10.87 11.25 10.65 32 LotsOfNums_01 33113 8.64 5.80 10.31 33 XM_B_Unsub 33053 12.50 16.25 10.29 34 RCVD_IN_MSPIKE_H3 30580 8.31 6.25 9.52 35 BAYES_60 28284 9.19 9.84 8.81 36 TR_XM_BayesUnsub 27726 11.27 15.75 8.63 37 XM_DKIMWhitelistDomains 26537 5.22 0.02 8.26 38 RCVD_IN_MSPIKE_H5 25270 6.22 3.40 7.87 39 XM_B_PhoneNumber 25053 7.09 5.87 7.80 40 TR_MAX_INTL_RELAY 24913 10.80 15.97 7.76 41 HTML_IMAGE_RATIO_02 24403 7.74 7.99 7.60 42 HTML_IMAGE_RATIO_04 23031 6.33 4.90 7.17 43 RCVD_IN_VALIDITY_SAFE 22969 5.45 2.54 7.15 44 BAYES_00 22927 4.67 0.48 7.14 45 T_TooManySym_01 22505 5.38 2.60 7.01 46 XM_B_SpammyWords3 22471 9.24 13.07 7.00 47 XM_B_Phish_Phrases 20930 7.04 7.93 6.52 48 XM_DK_Undo_02 20195 21.81 48.23 6.29 49 TR_XM_DK_Bayes 19002 3.87 0.39 5.92 50 TR_XM_DK_Bayes1 18876 3.85 0.39 5.88 51 RCVD_IN_VALIDITY_CERTIFIED 18720 4.33 1.77 5.83 52 MIME_QP_LONG_LINE 18266 4.34 2.05 5.69 53 XM_H_Long_From01 17855 5.80 6.20 5.56 54 MPART_ALT_DIFF 17698 5.83 6.36 5.51 55 LOTS_OF_MONEY 17568 7.11 9.90 5.47 56 RCVD_IN_MSPIKE_H4 16919 4.62 3.52 5.27 57 TR_XM_DK_Bayes2 16633 3.38 0.31 5.18 58 XMStrtUSub 15222 4.31 3.58 4.74 59 BAYES_80 15033 6.64 9.99 4.68 60 BAYES_99 14660 14.47 31.33 4.57 61 TooManyTo_001 14160 3.80 2.77 4.41 62 RELAYCOUNTRY_META 13905 7.85 13.83 4.33 63 BAYES_40 13761 3.21 1.38 4.29 64 ANY_BOUNCE_MESSAGE 13614 2.92 0.66 4.24 65 BOUNCE_MESSAGE 13607 2.91 0.66 4.24 66 SUBJ_ALL_CAPS 13272 4.82 5.98 4.13 67 XM_H_GMP 12910 4.35 4.91 4.02 68 FSL_BULK_SIG 12795 5.12 7.05 3.98 69 RCVD_IN_IADB_LISTED 12788 3.18 1.80 3.98 70 TR_XM_SpammyWords4 12478 5.65 8.66 3.89 71 MIME_HTML_MOSTLY 11853 4.13 4.88 3.69 72 XMNumbers 11668 3.44 3.10 3.63 73 RCVD_IN_IADB_SPF 11650 2.82 1.44 3.63 74 HTML_IMAGE_RATIO_06 11615 3.69 3.82 3.62 75 BOTNET_IPINHOSTNAME 11400 6.42 11.32 3.55 76 MAILING_LIST_MULTI 11301 2.78 1.52 3.52 77 TR_XM_SpammyWords5 11259 4.37 5.83 3.51 78 T_TooManySym_02 10829 2.44 0.85 3.37 79 RCVD_IN_IADB_SENDERID 10697 2.57 1.26 3.33 80 BAYES_999 10603 11.08 24.32 3.30 81 XM_UncommonTLD01 10512 3.88 4.92 3.27 82 RCVD_IN_IADB_DK 10348 2.51 1.29 3.22 83 XMSubMetaSx_00 9899 4.07 5.75 3.08 84 BAYES_95 9878 4.03 5.64 3.08 85 BAYES_20 9429 2.19 0.91 2.94 86 XM_B_SpammyTLD 9091 3.75 5.32 2.83 87 TM2_M_URI_OPT_OUT 8655 2.69 2.69 2.70 88 FROM_EXCESS_BASE64 8491 2.29 1.67 2.64 89 T_REMOTE_IMAGE 8368 2.30 1.78 2.61 90 TR_XM_DKIM_Undo 8318 12.82 30.25 2.59 91 TR_XM_UnparsRelay 8305 7.27 15.24 2.59 92 TM2_M_VERY_LONG_WORD 8112 3.14 4.20 2.53 93 MIME_HTML_ONLY_MULTI 8089 2.51 2.48 2.52 94 HTML_IMAGE_RATIO_08 7585 2.37 2.38 2.36 95 RCVD_IN_IADB_VOUCHED 7552 1.92 1.20 2.35 96 TO_MALFORMED 7476 1.47 0.01 2.33 97 XM_PDF 7299 1.51 0.22 2.27 98 UNTRUSTED_Relay 7100 3.76 6.40 2.21 99 TR_XM_SpammyRelay 7044 5.18 10.27 2.19 100 XM_CamelCaseFrm001 6604 2.54 3.37 2.06 101 INVALID_MSGID 6563 1.34 0.15 2.04 102 XMStockSpam_06 6449 2.38 3.00 2.01 103 XM_Body_Dirty_Words 5908 2.72 4.22 1.84 104 RCVD_IN_IADB_OPTIN 5389 1.36 0.83 1.68 105 TR_XM_PhishingBody 5181 2.67 4.48 1.61 106 XM_UB50 5111 2.06 2.85 1.59 107 BAYES_05 5060 1.21 0.59 1.58 108 XM_SendGrid 5019 1.55 1.54 1.56 109 TR_DCC_Bayes_99 4957 9.43 22.85 1.54 110 XM_B_URI_Unicode 4831 2.01 2.86 1.50 111 LOW_PRICE 4822 1.55 1.64 1.50 112 XMSubMetaI_00 4730 2.01 2.92 1.47 113 T_TooManySym_03 4729 1.04 0.30 1.47 114 XM_DK_Undo_01 4637 1.47 1.50 1.44 115 XM_B_SpammyWords4 4630 1.87 2.60 1.44 116 T_XMDrugObfuBody_14 4427 2.16 3.50 1.38 117 XMBrknScrpt_02 4393 1.52 1.79 1.37 118 T_XMHurry_00 4331 2.21 3.67 1.35 119 HTML_MIME_NO_HTML_TAG 4180 1.12 0.81 1.30 120 IN_HORDE_ADDRESS_BOOK 4177 0.84 0.05 1.30 121 RCVD_IN_MSPIKE_BL 4157 3.30 6.72 1.29 122 TR_XM_MSPIKECOMBO 4100 3.21 6.50 1.28 123 XMBdyGiftCard01 3988 1.71 2.49 1.24 124 T_XMDrugObfuBody_00 3903 1.25 1.31 1.22 125 URI_NOVOWEL 3884 1.31 1.48 1.21 126 XM_B_Investor 3802 1.97 3.31 1.18 127 XM_B_Unsub2 3741 1.61 2.37 1.16 128 TooManyTo_002 3715 0.84 0.31 1.16 129 XMNoVowels 3690 0.87 0.40 1.15 130 DKIM_INVALID 3635 2.35 4.43 1.13 131 XM_SPF_SoftFail 3599 1.55 2.29 1.12 132 KHOP_HELO_FCRDNS 3587 1.30 1.60 1.12 133 RCVD_IN_MSPIKE_L3 3550 2.24 4.16 1.11 134 XM_B_COPY_HTML 3537 1.12 1.15 1.10 135 BOTNET 3513 4.08 9.18 1.09 136 RCVD_IN_BL_SPAMCOP_NET 3498 7.02 17.12 1.09 137 T_XMDrugObfuBody_08 3480 1.44 2.03 1.08 138 XM_GoogleGroups 3469 0.95 0.72 1.08 139 TR_XM_DK_SendGrid 3454 1.07 1.06 1.08 140 XM_OfRef6 3434 1.89 3.29 1.07 141 XMDiploma_00 3307 1.20 1.50 1.03 142 URI_HEX 3249 0.99 0.95 1.01 143 MY_SERVERS_FOUND 3165 0.86 0.63 0.99 144 XMSexyCombo_05 3152 1.75 3.05 0.98 145 TVD_RCVD_IP 3048 0.99 1.06 0.95 146 TR_Symld_Words 2980 0.84 0.68 0.93 147 XM_ProductURIs 2969 1.38 2.16 0.92 148 T_OBFU_PDF_ATTACH 2964 0.59 0.02 0.92 149 TVD_SPACE_RATIO 2891 0.61 0.13 0.90 150 TR_XM_Base64_M1 2883 0.84 0.73 0.90 151 T_TVD_MIME_NO_HEADERS 2845 0.57 0.03 0.89 152 RELAYCOUNTRY_AU 2704 1.57 2.81 0.84 153 XMSubMetaSxObfu_03 2641 0.91 1.05 0.82 154 XMGappySubj_01 2598 0.55 0.11 0.81 155 XMBody_17 2538 1.88 3.74 0.79 156 XMBSHREFv2 2518 0.59 0.25 0.78 157 XM_B_DNDMA 2459 0.98 1.35 0.77 158 T_Symld_Words_02 2401 0.80 0.89 0.75 159 RELAYCOUNTRY_CA 2400 2.11 4.44 0.75 160 TooManyTo_003 2331 0.54 0.22 0.73 161 DKIM_ADSP_CUSTOM_MED 2320 0.73 0.74 0.72 162 XMPhish30 2298 1.23 2.10 0.72 163 TR_XM_SpammyWords2 2247 4.49 10.93 0.70 164 XMClaimOffer 2235 1.14 1.89 0.70 165 URI_TRY_3LD 2207 0.70 0.73 0.69 166 T_FILL_THIS_FORM_SHORT 2196 1.05 1.68 0.68 167 MISSING_HEADERS 2063 0.58 0.47 0.64 168 HTML_TAG_BALANCE_BODY 2034 0.70 0.82 0.63 169 URI_TRUNCATED 2022 0.44 0.13 0.63 170 XM_H_Long_From02 1995 0.87 1.30 0.62 171 T_TooManySym_04 1984 0.40 0.02 0.62 172 THIS_AD 1915 1.31 2.52 0.60 173 TR_XM_PHPDW 1904 0.52 0.39 0.59 174 TR_XM_PHPForged 1903 0.52 0.41 0.59 175 TR_XM_FormFill2 1898 0.52 0.40 0.59 176 TR_MetaPhish_Combo_01 1890 0.60 0.61 0.59 177 XM_H_PHPOS 1876 0.51 0.38 0.58 178 FORGED_GMAIL_RCVD 1859 0.59 0.62 0.58 179 XMGappySubj_02 1848 0.37 0.03 0.58 180 MPART_ALT_DIFF_COUNT 1805 1.19 2.25 0.56 181 PLING_QUERY 1804 0.57 0.59 0.56 182 TR_XM_SpammyWords3 1772 1.75 3.79 0.55 183 FONT_INVIS_LONG_LINE 1725 0.46 0.32 0.54 184 TooManyTo_004 1715 0.41 0.20 0.53 185 RELAYCOUNTRY_GB 1706 0.54 0.56 0.53 186 XM_Ancestry_Forge 1637 0.32 0.01 0.51 187 REPLYTO_WITHOUT_TO_CC 1574 0.43 0.32 0.49 188 XM_H_PHPMailer 1531 0.40 0.26 0.48 189 TR_XM_GMP_MSPIKE_UNDO2 1511 0.36 0.17 0.47 190 RELAYCOUNTRY_AT 1487 0.41 0.33 0.46 191 MAY_BE_FORGED 1473 0.31 0.05 0.46 192 TR_XM_SPAMCOP 1464 5.03 12.83 0.46 193 XM_ShortIntro_01 1445 0.42 0.37 0.45 194 XMUrgent 1441 0.48 0.52 0.45 195 XM_URI_RBL 1436 1.03 2.03 0.45 196 XMSolicitRefs_0 1431 0.47 0.50 0.45 197 ACT_NOW_CAPS 1431 0.41 0.34 0.45 198 SHOPIFY_IMG_NOT_RCVD_SFY 1414 1.31 2.79 0.44 199 XMGenDplmaNmb 1402 0.58 0.82 0.44 200 SUBJ_DOLLARS 1393 0.40 0.35 0.43 ----------------------------------------------------------------------