Email: 454228 Autolearn: 0 AvgScore: 3.90 AvgScanTime: 1.34 sec Spam: 155674 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.42 sec Ham: 298554 Autolearn: 0 AvgScore: -1.45 AvgScanTime: 1.29 sec Time Spent Running SA: 168.53 hours Time Spent Processing Spam: 61.54 hours Time Spent Processing Ham: 107.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142657 88.13 91.64 86.30 2 DKIM_SIGNED 135023 78.73 86.73 74.56 3 XM_DK_Pass 131913 77.22 84.74 73.29 4 DKIM_VALID 127795 75.56 82.09 72.16 5 XM_B_Unicode 124994 72.88 80.29 69.01 6 RELAYCOUNTRY_US 121851 79.89 78.27 80.74 7 XMListUnsubscribeExists 106029 55.34 68.11 48.69 8 XM_B_SpammyWords 104097 51.54 66.87 43.55 9 DCC_CHECK 102178 42.65 65.64 30.67 10 DKIM_VALID_AU 94926 58.18 60.98 56.73 11 RCVD_IN_MSPIKE_H2 69217 40.84 44.46 38.96 12 XM_B_Unicode3 68320 41.30 43.89 39.95 13 BAYES_50 68078 52.84 43.73 57.60 14 XM_DK_Undo_02 63226 18.29 40.61 6.64 15 LOC_TINY_FONT_1 56104 27.65 36.04 23.27 16 XM_B_SpammyWords2 55210 24.10 35.47 18.18 17 DCC_CHECK_NEGATIVE 53439 57.31 34.33 69.29 18 TR_XM_DKIM_Undo 51189 14.41 32.88 4.78 19 MIME_HTML_ONLY 50906 24.27 32.70 19.87 20 HTML_FONT_LOW_CONTRAST 50562 29.03 32.48 27.23 21 FVGT_m_MULTI_ODD 48976 27.12 31.46 24.86 22 DKIM_VALID_EF 48665 29.98 31.26 29.32 23 BAYES_99 48289 14.31 31.02 5.60 24 T_KAM_HTML_FONT_INVALID 41577 21.78 26.71 19.21 25 BAYES_999 37566 11.22 24.13 4.48 26 RELAYCOUNTRY_META 34827 10.25 22.37 3.93 27 TR_DCC_Bayes_99 32609 8.28 20.95 1.67 28 XM_Body_Dirty_Words 32447 14.56 20.84 11.29 29 T_TM2_M_HEADER_IN_MSG 32019 27.70 20.57 31.41 30 XMSubLong 31290 20.94 20.10 21.38 31 XM_Multi_Part_URI 25859 13.77 16.61 12.28 32 XM_B_Unsub 25117 11.13 16.13 8.52 33 BOTNET_IPINHOSTNAME 24147 8.44 15.51 4.76 34 TR_XM_BayesUnsub 24143 9.79 15.51 6.81 35 TR_XM_SpammyRelay 21881 6.04 14.06 1.86 36 RCVD_IN_MSPIKE_WL 20382 16.43 13.09 18.18 37 BOTNET 19035 5.16 12.23 1.47 38 LOTS_OF_MONEY 18907 8.59 12.15 6.73 39 XM_UncommonTLD01 18700 6.78 12.01 4.06 40 RCVD_IN_BL_SPAMCOP_NET 17445 4.12 11.21 0.42 41 XM_B_SpammyWords3 17419 6.62 11.19 4.24 42 FSL_BULK_SIG 17181 5.58 11.04 2.74 43 UNPARSEABLE_RELAY 16962 9.01 10.90 8.03 44 TR_XM_UnparsRelay 16642 7.65 10.69 6.06 45 UNTRUSTED_Relay 16560 4.60 10.64 1.46 46 TR_XM_SpammyWords4 16174 6.25 10.39 4.09 47 TR_XM_SpammyWords2 15894 4.13 10.21 0.96 48 XMSexyCombo_05 15853 5.59 10.18 3.19 49 XM_Evil_Numbers_Gen 14037 8.74 9.02 8.59 50 RELAYCOUNTRY_CA 13978 3.88 8.98 1.23 51 RCVD_IN_MSPIKE_H3 13902 10.75 8.93 11.69 52 XM_B_SpammyTLD 13226 4.51 8.50 2.44 53 BAYES_60 12787 8.96 8.21 9.35 54 BAYES_80 12505 5.59 8.03 4.32 55 SpammyFromTLD_01 10962 2.95 7.04 0.82 56 MPART_ALT_DIFF 10840 5.72 6.96 5.06 57 SUBJ_ALL_CAPS 10496 3.72 6.74 2.15 58 XM_SendGrid 10382 5.84 6.67 5.41 59 LotsOfNums_01 10154 8.14 6.52 8.98 60 TR_XM_PhishingBody 9803 4.18 6.30 3.07 61 TR_XM_SPAMCOP 9647 2.30 6.20 0.27 62 XM_SPF_SoftFail 9407 3.96 6.04 2.87 63 HTML_IMAGE_RATIO_02 9134 5.55 5.87 5.38 64 TooManyTo_001 8880 7.60 5.70 8.58 65 XM_H_Long_From01 8690 5.37 5.58 5.26 66 XMSubMetaSx_00 7939 4.17 5.10 3.68 67 RCVD_IN_MSPIKE_BL 7850 2.26 5.04 0.81 68 XM_B_Phish_Phrases 7565 3.52 4.86 2.82 69 TR_XM_MSPIKECOMBO 7521 2.18 4.83 0.80 70 XM_B_Investor 7286 2.54 4.68 1.42 71 BAYES_95 7269 3.38 4.67 2.71 72 DKIM_INVALID 7228 3.17 4.64 2.40 73 XM_UB50 7225 2.17 4.64 0.89 74 TR_XM_SpammyWords5 7204 3.00 4.63 2.14 75 XMNumbers 7025 4.30 4.51 4.19 76 TR_XM_PHPDW 6891 1.82 4.43 0.46 77 TR_XM_PHPForged 6850 1.78 4.40 0.41 78 TR_XM_FormFill2 6780 1.75 4.36 0.40 79 XM_H_PHPOS 6774 1.75 4.35 0.39 80 HTML_IMAGE_RATIO_04 6772 4.49 4.35 4.56 81 TM2_M_VERY_LONG_WORD 6745 2.68 4.33 1.82 82 TR_XM_DK_SendGrid 6710 3.76 4.31 3.47 83 MIME_HTML_ONLY_MULTI 6587 3.61 4.23 3.28 84 XMStrtUSub 6577 4.63 4.22 4.84 85 T_XMDrugObfuBody_14 6543 2.59 4.20 1.75 86 T_XMDrugObfuBody_08 6374 2.27 4.09 1.32 87 T_FILL_THIS_FORM_SHORT 6217 2.03 3.99 1.00 88 URIBL_DBL_SPAM 6214 1.38 3.99 0.01 89 HTML_IMAGE_RATIO_06 6144 3.53 3.95 3.32 90 RCVD_IN_VALIDITY_RPBL 6100 1.36 3.92 0.03 91 XMBody_17 6034 1.63 3.88 0.46 92 RCVD_IN_MSPIKE_H4 5977 4.82 3.84 5.33 93 XM_DIRTYINTL 5760 1.48 3.70 0.32 94 T_REMOTE_IMAGE 5756 4.00 3.70 4.15 95 RCVD_IN_VALIDITY_SAFE 5710 4.82 3.67 5.42 96 MIME_HTML_MOSTLY 5521 2.98 3.55 2.69 97 RCVD_IN_PSBL 5422 1.61 3.48 0.63 98 XM_B_Phish66 5281 2.43 3.39 1.93 99 HTML_MIME_NO_HTML_TAG 5083 2.79 3.27 2.55 100 XM_OfRef6 5000 1.77 3.21 1.01 101 URI_PHP_REDIR 4697 1.04 3.02 0.01 102 TM2_M_URI_OPT_OUT 4679 2.56 3.01 2.32 103 URI_NOVOWEL 4591 2.62 2.95 2.45 104 PDS_OTHER_BAD_TLD 4430 1.09 2.85 0.18 105 RCVD_IN_VALIDITY_CERTIFIED 4395 4.17 2.82 4.87 106 RCVD_IN_MSPIKE_L5 4357 1.00 2.80 0.06 107 UPPERCASE_75_100 4300 1.27 2.76 0.49 108 MIME_QP_LONG_LINE 4242 4.25 2.72 5.05 109 XM_CamelCaseFrm001 4063 2.05 2.61 1.75 110 XM_DK_Undo_01 4047 2.08 2.60 1.81 111 SpammyFromTLD_02 3890 1.03 2.50 0.27 112 BOTNET_NORDNS 3880 0.86 2.49 0.01 113 USER_IN_DEF_DKIM_WL 3774 8.89 2.42 12.27 114 HTML_IMAGE_RATIO_08 3610 2.39 2.32 2.43 115 T_TooManySym_01 3592 5.07 2.31 6.50 116 XMDiploma_00 3550 1.77 2.28 1.51 117 XM_B_Unsub2 3494 1.44 2.24 1.02 118 FROM_EXCESS_BASE64 3435 2.44 2.21 2.55 119 TR_XM_NoHeaderRelay 3420 0.83 2.20 0.12 120 XM_GoogleGroups 3409 1.95 2.19 1.82 121 XM_B_SpammyWords4 3380 1.10 2.17 0.54 122 XM_UB99 3270 0.72 2.10 0.00 123 RCVD_IN_IADB_LISTED 3221 3.99 2.07 5.00 124 XMLngstWrd_00 3212 1.29 2.06 0.89 125 FONT_INVIS_LONG_LINE 3194 0.79 2.05 0.13 126 TR_Mismatch_TLD_02 3184 0.76 2.05 0.09 127 TR_XM_SB_Phish 3169 2.08 2.04 2.10 128 XMLngstWrd_01 3157 1.24 2.03 0.83 129 TR_XM_SpammyWords3 3072 0.94 1.97 0.40 130 XMLngstWrd_02 3071 1.15 1.97 0.72 131 DOS_RCVD_IP_TWICE_B 3063 1.05 1.97 0.57 132 TR_XM_FormFill 3027 0.68 1.94 0.02 133 KHOP_HELO_FCRDNS 2973 1.94 1.91 1.95 134 XMSubPhish11 2961 2.01 1.90 2.07 135 XM_B_SpammyTLD2 2824 0.64 1.81 0.03 136 MAILING_LIST_MULTI 2786 2.60 1.79 3.03 137 RCVD_IN_MSPIKE_L3 2761 1.10 1.77 0.74 138 URI_HEX 2708 1.55 1.74 1.45 139 XMLngstWrd_03 2699 1.01 1.73 0.64 140 TR_XM_MSPIKECOMBO2 2673 0.63 1.72 0.06 141 BAYES_40 2666 3.66 1.71 4.68 142 RCVD_IN_IADB_SPF 2644 3.50 1.70 4.44 143 XMLngstWrd_04 2616 0.96 1.68 0.58 144 HELO_NODOT 2604 1.77 1.67 1.82 145 XM_UB60 2592 0.62 1.67 0.07 146 HK_RANDOM_REPLYTO 2561 0.63 1.65 0.10 147 XM_UB999 2555 0.56 1.64 0.00 148 XMBdyGiftCard01 2545 1.03 1.63 0.72 149 HTML_TITLE_SUBJ_DIFF 2543 0.88 1.63 0.48 150 T_XMHurry_00 2484 0.81 1.60 0.40 151 XM_H_Undi_Recip 2480 0.75 1.59 0.31 152 RCVD_IN_IADB_DK 2477 3.07 1.59 3.84 153 RCVD_IN_IADB_SENDERID 2441 3.13 1.57 3.95 154 ALL_TRUSTED 2437 11.20 1.57 16.23 155 XMSexyCombo_01 2394 1.13 1.54 0.92 156 TR_XM_InvalidRelay 2317 0.52 1.49 0.02 157 XMSubMetaI_00 2287 1.08 1.47 0.87 158 XMStockSpam_06 2235 1.41 1.44 1.39 159 URG_BIZ 2196 0.51 1.41 0.04 160 HTTPS_HTTP_MISMATCH 2164 1.00 1.39 0.80 161 RELAYCOUNTRY_FR 2161 0.66 1.39 0.27 162 XM_URI_RBL 2126 0.55 1.37 0.13 163 RELAYCOUNTRY_AU 2001 0.64 1.29 0.31 164 RELAYCOUNTRY_RU 1970 0.45 1.27 0.02 165 XM_B_DNDMA 1965 0.69 1.26 0.40 166 MPART_ALT_DIFF_COUNT 1939 0.91 1.25 0.73 167 XM_B_COVIDMETA 1934 0.65 1.24 0.34 168 HELO_NO_DOMAIN 1917 1.62 1.23 1.82 169 DKIM_ADSP_CUSTOM_MED 1913 1.14 1.23 1.09 170 RDNS_DYNAMIC 1906 0.59 1.22 0.26 171 T_XMDrugObfuBody_00 1889 0.75 1.21 0.51 172 TR_Symld_Words 1884 1.74 1.21 2.02 173 XMSubNoVowel 1872 0.93 1.20 0.79 174 TR_XM_Undi_Recip5 1872 0.42 1.20 0.01 175 URIBL_DBL_ABUSE_SPAM 1863 0.42 1.20 0.01 176 RELAYCOUNTRY_DE 1857 0.62 1.19 0.32 177 TR_LOTS_OF_MONEY3 1823 0.55 1.17 0.22 178 XM_OfRef7 1822 0.55 1.17 0.22 179 BAYES_20 1809 2.61 1.16 3.37 180 HTML_IMAGE_ONLY_24 1781 0.66 1.14 0.41 181 NO_DNS_FOR_FROM 1769 0.57 1.14 0.28 182 TR_XM_Base64_M1 1768 1.24 1.14 1.30 183 RCVD_IN_IADB_VOUCHED 1767 2.38 1.14 3.03 184 PDS_RDNS_DYNAMIC_FP 1765 0.42 1.13 0.05 185 XMHTML_After_End 1734 0.93 1.11 0.83 186 URIBL_BLACK 1720 0.41 1.10 0.04 187 TR_XM_BayesRelay 1716 0.38 1.10 0.00 188 XMGenDplmaNmb 1709 0.82 1.10 0.68 189 FSL_HELO_NON_FQDN_1 1685 0.40 1.08 0.04 190 DIET_1 1655 0.57 1.06 0.32 191 UNDISC_MONEY 1653 0.37 1.06 0.00 192 XM_H_Long_From02 1642 0.97 1.05 0.92 193 XMReplyNow 1633 0.51 1.05 0.23 194 TR_XM_COVIDMETA1 1611 0.49 1.03 0.21 195 TR_XM_MaxSPIKE 1608 0.39 1.03 0.06 196 TR_XM_MaxWHORU 1605 0.49 1.03 0.21 197 XMBrknScrpt_02 1602 1.01 1.03 1.00 198 XMPhish30 1568 0.72 1.01 0.57 199 ADVANCE_FEE_3_NEW 1562 0.35 1.00 0.01 200 FORGED_GMAIL_RCVD 1551 0.75 1.00 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 257655 88.13 91.64 86.30 2 RELAYCOUNTRY_US 241042 79.89 78.27 80.74 3 DKIM_SIGNED 222603 78.73 86.73 74.56 4 XM_DK_Pass 218823 77.22 84.74 73.29 5 DKIM_VALID 215442 75.56 82.09 72.16 6 DCC_CHECK_NEGATIVE 206869 57.31 34.33 69.29 7 XM_B_Unicode 206035 72.88 80.29 69.01 8 BAYES_50 171955 52.84 43.73 57.60 9 DKIM_VALID_AU 169366 58.18 60.98 56.73 10 XMListUnsubscribeExists 145363 55.34 68.11 48.69 11 XM_B_SpammyWords 130024 51.54 66.87 43.55 12 XM_B_Unicode3 119274 41.30 43.89 39.95 13 RCVD_IN_MSPIKE_H2 116302 40.84 44.46 38.96 14 T_TM2_M_HEADER_IN_MSG 93789 27.70 20.57 31.41 15 DCC_CHECK 91552 42.65 65.64 30.67 16 DKIM_VALID_EF 87532 29.98 31.26 29.32 17 HTML_FONT_LOW_CONTRAST 81296 29.03 32.48 27.23 18 FVGT_m_MULTI_ODD 74217 27.12 31.46 24.86 19 LOC_TINY_FONT_1 69479 27.65 36.04 23.27 20 XMSubLong 63843 20.94 20.10 21.38 21 MIME_HTML_ONLY 59326 24.27 32.70 19.87 22 T_KAM_HTML_FONT_INVALID 57341 21.78 26.71 19.21 23 XM_B_SpammyWords2 54273 24.10 35.47 18.18 24 RCVD_IN_MSPIKE_WL 54269 16.43 13.09 18.18 25 ALL_TRUSTED 48459 11.20 1.57 16.23 26 XM_Multi_Part_URI 36666 13.77 16.61 12.28 27 USER_IN_DEF_DKIM_WL 36626 8.89 2.42 12.27 28 RCVD_IN_MSPIKE_H3 34909 10.75 8.93 11.69 29 XM_Body_Dirty_Words 33708 14.56 20.84 11.29 30 BAYES_00 30571 7.00 0.80 10.24 31 XM_DKIMWhitelistDomains 28047 6.20 0.08 9.39 32 BAYES_60 27928 8.96 8.21 9.35 33 LotsOfNums_01 26799 8.14 6.52 8.98 34 XM_Evil_Numbers_Gen 25641 8.74 9.02 8.59 35 TooManyTo_001 25623 7.60 5.70 8.58 36 XM_B_Unsub 25432 11.13 16.13 8.52 37 UNPARSEABLE_RELAY 23978 9.01 10.90 8.03 38 IN_ZIMBRA_NJ_WHITELIST 20883 4.62 0.07 6.99 39 TR_XM_BayesUnsub 20327 9.79 15.51 6.81 40 LOTS_OF_MONEY 20104 8.59 12.15 6.73 41 XM_DK_Undo_02 19833 18.29 40.61 6.64 42 T_TooManySym_01 19418 5.07 2.31 6.50 43 TR_XM_DK_Bayes 18925 4.32 0.44 6.34 44 TR_XM_DK_Bayes1 18609 4.25 0.43 6.23 45 TR_XM_UnparsRelay 18089 7.65 10.69 6.06 46 BAYES_99 16715 14.31 31.02 5.60 47 RCVD_IN_VALIDITY_SAFE 16180 4.82 3.67 5.42 48 XM_SendGrid 16147 5.84 6.67 5.41 49 HTML_IMAGE_RATIO_02 16076 5.55 5.87 5.38 50 TR_XM_DK_Bayes2 15916 3.62 0.33 5.33 51 RCVD_IN_MSPIKE_H4 15903 4.82 3.84 5.33 52 XM_H_Long_From01 15704 5.37 5.58 5.26 53 MPART_ALT_DIFF 15120 5.72 6.96 5.06 54 MIME_QP_LONG_LINE 15082 4.25 2.72 5.05 55 RCVD_IN_IADB_LISTED 14925 3.99 2.07 5.00 56 RCVD_IN_VALIDITY_CERTIFIED 14536 4.17 2.82 4.87 57 XMStrtUSub 14437 4.63 4.22 4.84 58 TR_XM_DKIM_Undo 14283 14.41 32.88 4.78 59 BOTNET_IPINHOSTNAME 14205 8.44 15.51 4.76 60 BAYES_40 13981 3.66 1.71 4.68 61 XM_PDF 13963 3.41 0.98 4.68 62 HTML_IMAGE_RATIO_04 13628 4.49 4.35 4.56 63 BAYES_999 13388 11.22 24.13 4.48 64 RCVD_IN_IADB_SPF 13251 3.50 1.70 4.44 65 BAYES_80 12903 5.59 8.03 4.32 66 XM_B_SpammyWords3 12670 6.62 11.19 4.24 67 XMNumbers 12508 4.30 4.51 4.19 68 T_REMOTE_IMAGE 12399 4.00 3.70 4.15 69 TR_XM_SpammyWords4 12199 6.25 10.39 4.09 70 XM_UncommonTLD01 12112 6.78 12.01 4.06 71 RCVD_IN_IADB_SENDERID 11797 3.13 1.57 3.95 72 RELAYCOUNTRY_META 11742 10.25 22.37 3.93 73 T_TooManySym_02 11606 2.81 0.75 3.89 74 RCVD_IN_IADB_DK 11464 3.07 1.59 3.84 75 XMSubMetaSx_00 10981 4.17 5.10 3.68 76 TR_XM_DK_SendGrid 10364 3.76 4.31 3.47 77 BAYES_20 10063 2.61 1.16 3.37 78 HTML_IMAGE_RATIO_06 9901 3.53 3.95 3.32 79 MIME_HTML_ONLY_MULTI 9797 3.61 4.23 3.28 80 XMSexyCombo_05 9519 5.59 10.18 3.19 81 TR_XM_PhishingBody 9165 4.18 6.30 3.07 82 RCVD_IN_IADB_VOUCHED 9048 2.38 1.14 3.03 83 MAILING_LIST_MULTI 9034 2.60 1.79 3.03 84 XM_SPF_SoftFail 8569 3.96 6.04 2.87 85 XM_B_Phish_Phrases 8431 3.52 4.86 2.82 86 FSL_BULK_SIG 8179 5.58 11.04 2.74 87 BAYES_95 8078 3.38 4.67 2.71 88 MIME_HTML_MOSTLY 8027 2.98 3.55 2.69 89 FROM_EXCESS_BASE64 7627 2.44 2.21 2.55 90 HTML_MIME_NO_HTML_TAG 7602 2.79 3.27 2.55 91 TVD_RCVD_IP 7488 1.82 0.49 2.51 92 URI_NOVOWEL 7317 2.62 2.95 2.45 93 XM_B_SpammyTLD 7273 4.51 8.50 2.44 94 HTML_IMAGE_RATIO_08 7257 2.39 2.32 2.43 95 TooManyTo_002 7194 1.83 0.73 2.41 96 DKIM_INVALID 7161 3.17 4.64 2.40 97 TM2_M_URI_OPT_OUT 6929 2.56 3.01 2.32 98 XM_H_Trusted_IP 6699 1.47 0.00 2.24 99 INVALID_MSGID 6617 1.51 0.14 2.22 100 SUBJ_ALL_CAPS 6416 3.72 6.74 2.15 101 TR_XM_SpammyWords5 6403 3.00 4.63 2.14 102 BAYES_05 6359 1.63 0.66 2.13 103 TR_XM_SB_Phish 6284 2.08 2.04 2.10 104 ANY_BOUNCE_MESSAGE 6198 1.63 0.78 2.08 105 BOUNCE_MESSAGE 6198 1.63 0.78 2.08 106 MSGID_NOFQDN1 6186 1.38 0.05 2.07 107 XMSubPhish11 6174 2.01 1.90 2.07 108 RCVD_IN_IADB_OPTIN 6136 1.57 0.65 2.06 109 TR_Symld_Words 6025 1.74 1.21 2.02 110 TO_MALFORMED 5949 1.34 0.09 1.99 111 KHOP_HELO_FCRDNS 5828 1.94 1.91 1.95 112 XM_B_Phish66 5756 2.43 3.39 1.93 113 IN_HORDE_ADDRESS_BOOK 5608 1.27 0.10 1.88 114 TR_XM_SpammyRelay 5544 6.04 14.06 1.86 115 XM_GoogleGroups 5441 1.95 2.19 1.82 116 TM2_M_VERY_LONG_WORD 5436 2.68 4.33 1.82 117 HELO_NODOT 5428 1.77 1.67 1.82 118 HELO_NO_DOMAIN 5423 1.62 1.23 1.82 119 XM_DK_Undo_01 5410 2.08 2.60 1.81 120 XM_CamelCaseFrm001 5232 2.05 2.61 1.75 121 T_XMDrugObfuBody_14 5210 2.59 4.20 1.75 122 TR_DCC_Bayes_99 4990 8.28 20.95 1.67 123 TooManyTo_003 4791 1.27 0.63 1.60 124 XMDiploma_00 4494 1.77 2.28 1.51 125 BOTNET 4397 5.16 12.23 1.47 126 UNTRUSTED_Relay 4349 4.60 10.64 1.46 127 URI_HEX 4324 1.55 1.74 1.45 128 XM_B_Investor 4229 2.54 4.68 1.42 129 XMStockSpam_06 4154 1.41 1.44 1.39 130 XMBody_95 4099 0.94 0.11 1.37 131 T_XMDrugObfuBody_08 3929 2.27 4.09 1.32 132 TR_XM_Base64_M1 3874 1.24 1.14 1.30 133 XMBSHREFv2 3847 0.94 0.28 1.29 134 XMGappySubj_01 3676 0.84 0.08 1.23 135 RELAYCOUNTRY_CA 3662 3.88 8.98 1.23 136 XMCapTrack 3596 0.92 0.36 1.20 137 TooManyTo_004 3501 0.95 0.51 1.17 138 RCVD_IN_MSPIKE_H5 3457 0.87 0.32 1.16 139 HTML_FONT_FACE_BAD 3294 0.99 0.76 1.10 140 DKIM_ADSP_CUSTOM_MED 3252 1.14 1.23 1.09 141 XM_B_Unsub2 3053 1.44 2.24 1.02 142 XM_OfRef6 3018 1.77 3.21 1.01 143 T_FILL_THIS_FORM_SHORT 2995 2.03 3.99 1.00 144 XMBrknScrpt_02 2982 1.01 1.03 1.00 145 RCVD_IN_RP_SAFE 2914 0.92 0.81 0.98 146 TR_XM_SpammyWords2 2880 4.13 10.21 0.96 147 TooManyTo_005 2800 0.77 0.45 0.94 148 T_TooManySym_03 2777 0.73 0.35 0.93 149 XMNoVowels 2760 0.75 0.41 0.92 150 XM_H_Long_From02 2757 0.97 1.05 0.92 151 XMSexyCombo_01 2733 1.13 1.54 0.92 152 TVD_SPACE_RATIO 2692 0.63 0.10 0.90 153 XMLngstWrd_00 2668 1.29 2.06 0.89 154 XM_UB50 2643 2.17 4.64 0.89 155 XMSubMetaI_00 2607 1.08 1.47 0.87 156 RCVD_IN_RP_CERTIFIED 2567 0.80 0.67 0.86 157 XMHTML_After_End 2488 0.93 1.11 0.83 158 XMLngstWrd_01 2469 1.24 2.03 0.83 159 SpammyFromTLD_01 2437 2.95 7.04 0.82 160 RCVD_IN_MSPIKE_BL 2417 2.26 5.04 0.81 161 TR_XM_MSPIKECOMBO 2401 2.18 4.83 0.80 162 HTTPS_HTTP_MISMATCH 2381 1.00 1.39 0.80 163 XMSubNoVowel 2371 0.93 1.20 0.79 164 TR_MetaPhish_Combo_01 2225 0.75 0.75 0.75 165 RCVD_IN_MSPIKE_L3 2223 1.10 1.77 0.74 166 MPART_ALT_DIFF_COUNT 2187 0.91 1.25 0.73 167 HTML_TAG_BALANCE_BODY 2179 0.82 0.99 0.73 168 NML_ADSP_CUSTOM_MED 2163 0.80 0.95 0.72 169 XM_shorewaves_Whitelist 2161 0.48 0.00 0.72 170 XMLngstWrd_02 2149 1.15 1.97 0.72 171 XMBdyGiftCard01 2137 1.03 1.63 0.72 172 XM_H_PHPMailer 2057 0.65 0.57 0.69 173 HTML_IMAGE_ONLY_20 2045 0.55 0.30 0.68 174 XMGenDplmaNmb 2032 0.82 1.10 0.68 175 XMSexyCombo_04 2028 0.68 0.68 0.68 176 XM_ShortIntro_01 2003 0.62 0.53 0.67 177 T_OBFU_PDF_ATTACH 1963 0.51 0.22 0.66 178 XMLngstWrd_03 1908 1.01 1.73 0.64 179 XM_B_COPY_HTML 1886 0.67 0.74 0.63 180 RCVD_IN_PSBL 1873 1.61 3.48 0.63 181 FORGED_GMAIL_RCVD 1866 0.75 1.00 0.63 182 URI_TRY_3LD 1748 0.65 0.76 0.59 183 XMLngstWrd_04 1729 0.96 1.68 0.58 184 XMAntiAgingB 1713 0.38 0.02 0.57 185 DOS_RCVD_IP_TWICE_B 1704 1.05 1.97 0.57 186 XMPhish30 1688 0.72 1.01 0.57 187 HTML_IMAGE_ONLY_32 1625 0.44 0.24 0.54 188 XM_B_SpammyWords4 1615 1.10 2.17 0.54 189 SHORT_HELO_AND_INLINE_IMAGE 1585 0.42 0.20 0.53 190 RCVD_IN_SORBS_DUL 1531 0.44 0.31 0.51 191 T_XMDrugObfuBody_00 1525 0.75 1.21 0.51 192 XMHTMLBadTable_001 1490 0.57 0.71 0.50 193 UPPERCASE_75_100 1449 1.27 2.76 0.49 194 HTML_TITLE_SUBJ_DIFF 1442 0.88 1.63 0.48 195 TR_XM_Base64_L1 1435 0.55 0.70 0.48 196 RELAYCOUNTRY_GB 1414 0.53 0.64 0.47 197 MISSING_HEADERS 1399 0.45 0.41 0.47 198 XMBody_17 1371 1.63 3.88 0.46 199 TR_XM_PHPDW 1368 1.82 4.43 0.46 200 XM_ProductURIs 1342 0.58 0.83 0.45 ----------------------------------------------------------------------