Email: 443161 Autolearn: 0 AvgScore: 4.33 AvgScanTime: 1.31 sec Spam: 126657 Autolearn: 0 AvgScore: 15.26 AvgScanTime: 1.49 sec Ham: 316504 Autolearn: 0 AvgScore: -0.05 AvgScanTime: 1.25 sec Time Spent Running SA: 161.82 hours Time Spent Processing Spam: 52.27 hours Time Spent Processing Ham: 109.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 118826 88.61 93.82 86.53 2 DKIM_SIGNED 111133 77.85 87.74 73.88 3 XM_DK_Pass 105110 75.47 82.99 72.46 4 DKIM_VALID 104224 74.40 82.29 71.24 5 XM_B_Unicode 103862 72.50 82.00 68.70 6 RELAYCOUNTRY_US 101176 80.09 79.88 80.17 7 DCC_CHECK 93811 48.50 74.07 38.27 8 XM_B_SpammyWords 84822 50.58 66.97 44.01 9 XMListUnsubscribeExists 82576 51.12 65.20 45.49 10 DKIM_VALID_AU 82182 59.39 64.89 57.19 11 XM_B_Unicode3 61896 42.61 48.87 40.10 12 LOC_TINY_FONT_1 59281 32.56 46.80 26.86 13 BAYES_50 51527 54.60 40.68 60.17 14 T_SCC_BODY_TEXT_LINE 50300 41.39 39.71 42.06 15 XM_B_SpammyWords2 48357 23.56 38.18 17.70 16 XM_DK_Undo_02 47930 14.17 37.84 4.70 17 HTML_FONT_LOW_CONTRAST 45302 30.28 35.77 28.08 18 FVGT_m_MULTI_ODD 40184 27.31 31.73 25.54 19 DKIM_VALID_EF 39258 31.04 31.00 31.05 20 BAYES_99 37686 11.03 29.75 3.53 21 T_KAM_HTML_FONT_INVALID 37602 23.11 29.69 20.48 22 MIME_HTML_ONLY 37289 23.10 29.44 20.56 23 TR_XM_DKIM_Undo 34520 9.28 27.25 2.09 24 XMSubLong 30923 23.02 24.41 22.46 25 DCC_CHECK_NEGATIVE 30331 50.90 23.95 61.69 26 T_TM2_M_HEADER_IN_MSG 29391 28.61 23.21 30.77 27 BAYES_999 28665 8.40 22.63 2.70 28 TR_DCC_Bayes_99 26268 6.94 20.74 1.42 29 TR_XM_DK_Unsub 26204 15.47 20.69 13.39 30 XM_Multi_Part_URI 25498 15.46 20.13 13.59 31 XM_B_Unsub 23843 11.78 18.82 8.96 32 TR_XM_BayesUnsub 23046 9.97 18.20 6.68 33 RELAYCOUNTRY_META 22715 8.83 17.93 5.19 34 UNPARSEABLE_RELAY 21838 13.91 17.24 12.57 35 TR_MAX_INTL_RELAY 19207 8.48 15.16 5.80 36 XM_B_SpammyWords3 18834 7.33 14.87 4.31 37 LOTS_OF_MONEY 18407 8.43 14.53 5.99 38 RCVD_IN_MSPIKE_H2 16805 14.47 13.27 14.95 39 TR_XM_SpammyWords4 16270 6.54 12.85 4.02 40 FSL_BULK_SIG 16075 9.60 12.69 8.36 41 BOTNET_IPINHOSTNAME 15961 5.58 12.60 2.78 42 TR_XM_SpammyRelay 14854 4.81 11.73 2.04 43 BOTNET 13802 4.03 10.90 1.28 44 TR_XM_SpammyWords2 12833 3.31 10.13 0.58 45 XM_Evil_Numbers_Gen 12019 10.11 9.49 10.36 46 BAYES_80 11994 5.30 9.47 3.63 47 TR_XM_UnparsRelay 11377 3.78 8.98 1.70 48 BAYES_60 10785 7.04 8.52 6.45 49 XM_B_Phish_Phrases 10374 5.60 8.19 4.57 50 RCVD_IN_MSPIKE_WL 9955 12.26 7.86 14.02 51 RCVD_IN_BL_SPAMCOP_NET 9692 2.56 7.65 0.52 52 XM_Body_Dirty_Words 9163 3.99 7.23 2.70 53 HTML_IMAGE_RATIO_02 8773 5.40 6.93 4.79 54 UNTRUSTED_Relay 8674 3.10 6.85 1.60 55 RELAYCOUNTRY_CA 8599 3.56 6.79 2.27 56 XM_UncommonTLD01 8468 5.03 6.69 4.37 57 LotsOfNums_01 8452 7.01 6.67 7.14 58 XMSubMetaSx_00 8227 4.58 6.50 3.82 59 XMStrtUSub 7995 5.40 6.31 5.03 60 XM_B_PhoneNumber 7438 8.75 5.87 9.90 61 MPART_ALT_DIFF 7146 4.52 5.64 4.07 62 XM_H_GMP 6986 6.07 5.52 6.29 63 XM_OfRef6 6975 2.40 5.51 1.15 64 DKIM_INVALID 6909 3.45 5.45 2.65 65 XM_H_Long_From01 6788 5.13 5.36 5.03 66 BAYES_95 6707 3.06 5.30 2.17 67 TooManyTo_001 6540 8.03 5.16 9.17 68 XM_B_Investor 6465 2.68 5.10 1.71 69 HTML_IMAGE_RATIO_04 6071 3.97 4.79 3.64 70 RCVD_IN_MSPIKE_H3 5831 5.69 4.60 6.12 71 TR_XM_SpammyWords5 5710 2.24 4.51 1.33 72 TR_XM_PhishingBody 5602 2.38 4.42 1.57 73 RCVD_IN_MSPIKE_BL 5495 1.60 4.34 0.50 74 TR_XM_MSPIKECOMBO 5472 1.59 4.32 0.50 75 XM_B_SpammyTLD 5219 3.14 4.12 2.75 76 XMSexyCombo_05 5152 2.44 4.07 1.79 77 MIME_QP_LONG_LINE 5049 4.49 3.99 4.69 78 MIME_HTML_MOSTLY 4979 2.78 3.93 2.31 79 XMNumbers 4934 3.79 3.90 3.75 80 TM2_M_VERY_LONG_WORD 4930 2.10 3.89 1.38 81 XM_CamelCaseFrm001 4817 2.69 3.80 2.24 82 T_XMDrugObfuBody_14 4560 2.40 3.60 1.91 83 XM_SPF_SoftFail 4270 2.11 3.37 1.61 84 T_FILL_THIS_FORM_SHORT 4185 1.63 3.30 0.96 85 XM_B_URI_Unicode 4149 2.23 3.28 1.81 86 XM_UB50 4114 1.66 3.25 1.02 87 MIME_HTML_ONLY_MULTI 4079 2.67 3.22 2.45 88 XM_B_Unsub2 4067 1.88 3.21 1.34 89 TR_XM_NoHeaderRelay 4030 1.13 3.18 0.31 90 HTML_IMAGE_RATIO_06 3983 2.79 3.14 2.65 91 ALL_TRUSTED 3642 11.77 2.88 15.33 92 T_XMDrugObfuBody_08 3607 1.83 2.85 1.42 93 SUBJ_ALL_CAPS 3587 1.85 2.83 1.46 94 XM_URI_RBL 3538 1.02 2.79 0.31 95 RELAYCOUNTRY_AU 3486 1.28 2.75 0.68 96 XMDiploma_00 3333 1.88 2.63 1.58 97 MAILING_LIST_MULTI 3317 2.88 2.62 2.99 98 HTML_IMAGE_RATIO_08 3231 2.11 2.55 1.93 99 TR_XM_SpammyWords3 3197 0.89 2.52 0.24 100 XM_B_SpammyWords4 3132 1.28 2.47 0.80 101 TM2_M_URI_OPT_OUT 3125 1.89 2.47 1.66 102 RCVD_IN_MSPIKE_L3 3011 0.97 2.38 0.41 103 SpammyFromTLD_01 3006 1.37 2.37 0.97 104 T_XMDrugObfuBody_00 2987 1.77 2.36 1.53 105 RCVD_IN_MSPIKE_H5 2980 5.31 2.35 6.49 106 DKIM_ADSP_NXDOMAIN 2978 0.93 2.35 0.36 107 XMBody_17 2956 0.92 2.33 0.35 108 TR_LOTS_OF_MONEY3 2937 0.99 2.32 0.45 109 HTML_MIME_NO_HTML_TAG 2787 2.73 2.20 2.94 110 TR_XM_INV_DKIM 2759 0.74 2.18 0.16 111 XM_SendGrid 2738 1.72 2.16 1.54 112 T_TooManySym_01 2703 5.33 2.13 6.62 113 RCVD_IN_VALIDITY_RPBL 2692 0.67 2.13 0.09 114 TR_XM_SPAMCOP 2586 0.68 2.04 0.14 115 USER_IN_DEF_DKIM_WL 2525 9.31 1.99 12.24 116 SHORTCIRCUIT 2497 0.56 1.97 0.00 117 RCVD_IN_ZEN_LASTEXTERNAL 2497 0.56 1.97 0.00 118 DIET_1 2472 0.76 1.95 0.28 119 SpammyFromTLD_02 2449 0.72 1.93 0.23 120 BAYES_40 2434 4.85 1.92 6.02 121 T_XMHurry_00 2416 0.88 1.91 0.47 122 FROM_EXCESS_BASE64 2346 1.77 1.85 1.74 123 XMStockSpam_06 2344 1.38 1.85 1.20 124 XMBrknScrpt_02 2327 1.09 1.84 0.79 125 XM_PDF 2243 4.20 1.77 5.18 126 BOTNET_NORDNS 2239 0.51 1.77 0.01 127 XM_DK_Undo_01 2235 1.80 1.76 1.82 128 XM_OfRef7 2172 0.70 1.71 0.30 129 RCVD_IN_VALIDITY_SAFE 2159 3.01 1.70 3.53 130 XM_ProductURIs 2038 1.11 1.61 0.91 131 RCVD_IN_PSBL 1988 0.63 1.57 0.25 132 HTTPS_HTTP_MISMATCH 1965 0.98 1.55 0.75 133 ANY_BOUNCE_MESSAGE 1935 4.50 1.53 5.69 134 BOUNCE_MESSAGE 1934 4.50 1.53 5.69 135 RCVD_IN_MSPIKE_L5 1921 0.50 1.52 0.09 136 XM_H_Undi_Recip 1836 0.60 1.45 0.26 137 XM_H_Long_From02 1818 1.01 1.44 0.83 138 URI_HEX 1809 1.20 1.43 1.11 139 XMSlimDrugH 1806 0.81 1.43 0.56 140 T_REMOTE_IMAGE 1759 3.13 1.39 3.83 141 URI_TRY_3LD 1708 0.88 1.35 0.70 142 XMPhish30 1708 0.75 1.35 0.51 143 LongTLD 1686 0.69 1.33 0.44 144 XMGenDplmaNmb 1660 0.98 1.31 0.85 145 XM_B_COPY_HTML 1653 0.89 1.31 0.72 146 KHOP_HELO_FCRDNS 1651 1.86 1.30 2.09 147 RCVD_IN_XBL 1646 0.39 1.30 0.02 148 FROM_MISSP_REPLYTO 1640 0.37 1.29 0.00 149 TR_XM_Undi_Recip19 1634 0.44 1.29 0.11 150 XMHTML_After_End 1610 0.70 1.27 0.47 151 HK_SCAM 1604 0.38 1.27 0.03 152 TR_Mismatch_TLD_02 1600 0.44 1.26 0.11 153 URI_NOVOWEL 1594 1.51 1.26 1.61 154 ADVANCE_FEE_5_NEW_MONEY 1558 0.35 1.23 0.00 155 BAYES_20 1546 3.62 1.22 4.59 156 TR_XM_Undi_RecipCombo2 1543 0.36 1.22 0.01 157 MPART_ALT_DIFF_COUNT 1539 0.72 1.22 0.53 158 XM_GoogleGroups 1523 1.33 1.20 1.38 159 RDNS_DYNAMIC 1522 0.47 1.20 0.18 160 RCVD_IN_VALIDITY_CERTIFIED 1521 2.27 1.20 2.70 161 RCVD_IN_PBL 1473 0.92 1.16 0.82 162 XM_B_DNDMA 1468 0.82 1.16 0.68 163 TR_XM_Undi_Recip11 1451 0.36 1.15 0.04 164 DKIM_ADSP_CUSTOM_MED 1451 0.99 1.15 0.92 165 RCVD_IN_IADB_LISTED 1446 2.68 1.14 3.30 166 TR_XM_PHPForged 1426 0.78 1.13 0.65 167 HTML_TAG_BALANCE_BODY 1419 0.70 1.12 0.54 168 HTML_IMAGE_ONLY_20 1408 0.68 1.11 0.51 169 XM_BadFromFormat 1394 0.40 1.10 0.12 170 TR_Symld_Words 1393 1.47 1.10 1.61 171 TR_XM_FormFill2 1376 0.77 1.09 0.65 172 UNDISC_MONEY 1372 0.31 1.08 0.00 173 TR_LOTS_OF_MONEY2 1359 0.54 1.07 0.33 174 T_MONEY_PERCENT 1359 0.54 1.07 0.33 175 TR_XM_PHPDW 1355 0.76 1.07 0.64 176 XMPhish14 1342 0.61 1.06 0.43 177 TR_Sbj_FN_Bdy 1341 0.40 1.06 0.14 178 XM_H_PHPOS 1337 0.75 1.06 0.62 179 TR_XM_Undi_Recip5 1335 0.30 1.05 0.00 180 XM_B_Phish66 1333 0.55 1.05 0.34 181 XM_B_SEO 1325 0.48 1.05 0.25 182 XMSubMetaI_00 1316 0.59 1.04 0.41 183 TVD_RCVD_IP 1299 0.83 1.03 0.75 184 RCVD_IN_SORBS_DUL 1294 0.31 1.02 0.03 185 TR_XM_Undi_Recip2 1294 0.30 1.02 0.01 186 XM_HighProb1 1286 0.29 1.02 0.01 187 RCVD_IN_IADB_SPF 1273 2.33 1.01 2.86 188 SHOPIFY_IMG_NOT_RCVD_SFY 1270 0.48 1.00 0.27 189 HTML_FONT_TINY_NORDNS 1266 0.32 1.00 0.05 190 TR_XM_Undi_RecipCombo3 1263 0.29 1.00 0.00 191 XMSexyCombo_01 1253 0.42 0.99 0.19 192 MONEY_FORM_SHORT 1238 0.30 0.98 0.03 193 RCVD_IN_IADB_DK 1237 2.04 0.98 2.47 194 RELAYCOUNTRY_PL 1230 0.29 0.97 0.02 195 RCVD_IN_IADB_SENDERID 1225 2.10 0.97 2.55 196 XM_DIRTYINTL 1220 0.33 0.96 0.08 197 XMReplyNow 1218 0.44 0.96 0.24 198 XM_UB60 1205 0.33 0.95 0.08 199 TR_XM_SEO4 1195 0.35 0.94 0.12 200 NML_ADSP_CUSTOM_MED 1193 0.71 0.94 0.62 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 273862 88.61 93.82 86.53 2 RELAYCOUNTRY_US 253750 80.09 79.88 80.17 3 DKIM_SIGNED 233848 77.85 87.74 73.88 4 XM_DK_Pass 229326 75.47 82.99 72.46 5 DKIM_VALID 225476 74.40 82.29 71.24 6 XM_B_Unicode 217439 72.50 82.00 68.70 7 DCC_CHECK_NEGATIVE 195260 50.90 23.95 61.69 8 BAYES_50 190450 54.60 40.68 60.17 9 DKIM_VALID_AU 181006 59.39 64.89 57.19 10 XMListUnsubscribeExists 143971 51.12 65.20 45.49 11 XM_B_SpammyWords 139307 50.58 66.97 44.01 12 T_SCC_BODY_TEXT_LINE 133127 41.39 39.71 42.06 13 XM_B_Unicode3 126918 42.61 48.87 40.10 14 DCC_CHECK 121115 48.50 74.07 38.27 15 DKIM_VALID_EF 98286 31.04 31.00 31.05 16 T_TM2_M_HEADER_IN_MSG 97396 28.61 23.21 30.77 17 HTML_FONT_LOW_CONTRAST 88888 30.28 35.77 28.08 18 LOC_TINY_FONT_1 85017 32.56 46.80 26.86 19 FVGT_m_MULTI_ODD 80841 27.31 31.73 25.54 20 XMSubLong 71086 23.02 24.41 22.46 21 MIME_HTML_ONLY 65075 23.10 29.44 20.56 22 T_KAM_HTML_FONT_INVALID 64830 23.11 29.69 20.48 23 XM_B_SpammyWords2 56033 23.56 38.18 17.70 24 ALL_TRUSTED 48514 11.77 2.88 15.33 25 RCVD_IN_MSPIKE_H2 47302 14.47 13.27 14.95 26 RCVD_IN_MSPIKE_WL 44368 12.26 7.86 14.02 27 XM_Multi_Part_URI 42999 15.46 20.13 13.59 28 TR_XM_DK_Unsub 42368 15.47 20.69 13.39 29 UNPARSEABLE_RELAY 39799 13.91 17.24 12.57 30 USER_IN_DEF_DKIM_WL 38727 9.31 1.99 12.24 31 BAYES_00 34724 7.99 0.54 10.97 32 XM_Evil_Numbers_Gen 32789 10.11 9.49 10.36 33 XM_B_PhoneNumber 31343 8.75 5.87 9.90 34 TooManyTo_001 29031 8.03 5.16 9.17 35 XM_B_Unsub 28343 11.78 18.82 8.96 36 FSL_BULK_SIG 26463 9.60 12.69 8.36 37 TR_XM_DK_Bayes 22835 5.26 0.36 7.21 38 LotsOfNums_01 22601 7.01 6.67 7.14 39 IN_ZIMBRA_NJ_WHITELIST 22463 5.10 0.09 7.10 40 TR_XM_DK_Bayes1 22340 5.14 0.36 7.06 41 TR_XM_BayesUnsub 21132 9.97 18.20 6.68 42 T_TooManySym_01 20938 5.33 2.13 6.62 43 XM_DKIMWhitelistDomains 20760 4.71 0.09 6.56 44 RCVD_IN_MSPIKE_H5 20543 5.31 2.35 6.49 45 BAYES_60 20401 7.04 8.52 6.45 46 XM_H_GMP 19913 6.07 5.52 6.29 47 RCVD_IN_MSPIKE_H3 19365 5.69 4.60 6.12 48 BAYES_40 19043 4.85 1.92 6.02 49 LOTS_OF_MONEY 18953 8.43 14.53 5.99 50 TR_XM_DK_Bayes2 18669 4.30 0.29 5.90 51 TR_MAX_INTL_RELAY 18359 8.48 15.16 5.80 52 ANY_BOUNCE_MESSAGE 18018 4.50 1.53 5.69 53 BOUNCE_MESSAGE 18013 4.50 1.53 5.69 54 RELAYCOUNTRY_META 16425 8.83 17.93 5.19 55 XM_PDF 16388 4.20 1.77 5.18 56 XM_H_Long_From01 15928 5.13 5.36 5.03 57 XMStrtUSub 15915 5.40 6.31 5.03 58 HTML_IMAGE_RATIO_02 15156 5.40 6.93 4.79 59 XM_DK_Undo_02 14888 14.17 37.84 4.70 60 MIME_QP_LONG_LINE 14842 4.49 3.99 4.69 61 BAYES_20 14518 3.62 1.22 4.59 62 XM_B_Phish_Phrases 14464 5.60 8.19 4.57 63 XM_UncommonTLD01 13821 5.03 6.69 4.37 64 XM_B_SpammyWords3 13647 7.33 14.87 4.31 65 MPART_ALT_DIFF 12887 4.52 5.64 4.07 66 TR_XM_SpammyWords4 12732 6.54 12.85 4.02 67 T_REMOTE_IMAGE 12118 3.13 1.39 3.83 68 XMSubMetaSx_00 12086 4.58 6.50 3.82 69 XMNumbers 11858 3.79 3.90 3.75 70 HTML_IMAGE_RATIO_04 11526 3.97 4.79 3.64 71 BAYES_80 11489 5.30 9.47 3.63 72 BAYES_99 11183 11.03 29.75 3.53 73 RCVD_IN_VALIDITY_SAFE 11161 3.01 1.70 3.53 74 TooManyTo_002 10588 2.57 0.64 3.35 75 RCVD_IN_IADB_LISTED 10447 2.68 1.14 3.30 76 T_TooManySym_02 9914 2.42 0.65 3.13 77 MAILING_LIST_MULTI 9463 2.88 2.62 2.99 78 HTML_MIME_NO_HTML_TAG 9311 2.73 2.20 2.94 79 RCVD_IN_IADB_SPF 9037 2.33 1.01 2.86 80 BOTNET_IPINHOSTNAME 8786 5.58 12.60 2.78 81 XM_B_SpammyTLD 8692 3.14 4.12 2.75 82 BAYES_999 8556 8.40 22.63 2.70 83 RCVD_IN_VALIDITY_CERTIFIED 8536 2.27 1.20 2.70 84 XM_Body_Dirty_Words 8535 3.99 7.23 2.70 85 HTML_IMAGE_RATIO_06 8399 2.79 3.14 2.65 86 DKIM_INVALID 8372 3.45 5.45 2.65 87 RCVD_IN_IADB_SENDERID 8063 2.10 0.97 2.55 88 RCVD_IN_IADB_DK 7821 2.04 0.98 2.47 89 BAYES_05 7805 1.94 0.62 2.47 90 MIME_HTML_ONLY_MULTI 7748 2.67 3.22 2.45 91 INVALID_MSGID 7349 1.72 0.22 2.32 92 MIME_HTML_MOSTLY 7324 2.78 3.93 2.31 93 RCVD_IN_IADB_VOUCHED 7319 1.77 0.42 2.31 94 RELAYCOUNTRY_CA 7173 3.56 6.79 2.27 95 XM_CamelCaseFrm001 7083 2.69 3.80 2.24 96 BAYES_95 6865 3.06 5.30 2.17 97 HTML_IMAGE_ONLY_32 6681 1.56 0.17 2.11 98 TR_XM_DKIM_Undo 6621 9.28 27.25 2.09 99 KHOP_HELO_FCRDNS 6607 1.86 1.30 2.09 100 TR_XM_SpammyRelay 6468 4.81 11.73 2.04 101 TO_MALFORMED 6288 1.43 0.04 1.99 102 HTML_IMAGE_RATIO_08 6107 2.11 2.55 1.93 103 TooManyTo_003 6069 1.53 0.57 1.92 104 T_XMDrugObfuBody_14 6060 2.40 3.60 1.91 105 SHORT_URI_2 5934 1.36 0.07 1.87 106 XM_DK_Undo_01 5761 1.80 1.76 1.82 107 XM_B_URI_Unicode 5719 2.23 3.28 1.81 108 XMSexyCombo_05 5676 2.44 4.07 1.79 109 FROM_EXCESS_BASE64 5506 1.77 1.85 1.74 110 XM_B_Investor 5407 2.68 5.10 1.71 111 TR_XM_UnparsRelay 5395 3.78 8.98 1.70 112 TM2_M_URI_OPT_OUT 5259 1.89 2.47 1.66 113 T_TVD_MIME_NO_HEADERS 5180 1.18 0.05 1.64 114 TR_Symld_Words 5106 1.47 1.10 1.61 115 XM_SPF_SoftFail 5101 2.11 3.37 1.61 116 RCVD_IN_IADB_OPTIN 5088 1.22 0.24 1.61 117 URI_NOVOWEL 5082 1.51 1.26 1.61 118 UNTRUSTED_Relay 5067 3.10 6.85 1.60 119 XMDiploma_00 4999 1.88 2.63 1.58 120 TR_XM_PhishingBody 4959 2.38 4.42 1.57 121 XM_SendGrid 4869 1.72 2.16 1.54 122 T_XMDrugObfuBody_00 4838 1.77 2.36 1.53 123 SUBJ_ALL_CAPS 4612 1.85 2.83 1.46 124 HELO_NODOT 4588 1.07 0.14 1.45 125 HELO_NO_DOMAIN 4584 1.07 0.13 1.45 126 TR_DCC_Bayes_99 4491 6.94 20.74 1.42 127 T_XMDrugObfuBody_08 4481 1.83 2.85 1.42 128 TooManyTo_004 4476 1.16 0.52 1.41 129 RCVD_IN_MSPIKE_H4 4460 1.26 0.90 1.41 130 XMCapTrack 4441 1.18 0.62 1.40 131 TM2_M_VERY_LONG_WORD 4376 2.10 3.89 1.38 132 XM_GoogleGroups 4355 1.33 1.20 1.38 133 XM_B_Unsub2 4243 1.88 3.21 1.34 134 TR_XM_SpammyWords5 4206 2.24 4.51 1.33 135 IN_HORDE_ADDRESS_BOOK 4121 0.96 0.11 1.30 136 BOTNET 4067 4.03 10.90 1.28 137 T_TooManySym_03 4055 0.98 0.22 1.28 138 XMGappySubj_01 3943 0.97 0.27 1.25 139 XMStockSpam_06 3784 1.38 1.85 1.20 140 TooManyTo_005 3676 0.97 0.48 1.16 141 XM_OfRef6 3652 2.40 5.51 1.15 142 URI_HEX 3508 1.20 1.43 1.11 143 TVD_SPACE_RATIO 3446 0.82 0.16 1.09 144 XM_UB50 3225 1.66 3.25 1.02 145 XM_ShortIntro_01 3222 0.84 0.39 1.02 146 TR_XM_DK_SendGrid 3175 0.92 0.72 1.00 147 SpammyFromTLD_01 3070 1.37 2.37 0.97 148 T_FILL_THIS_FORM_SHORT 3023 1.63 3.30 0.96 149 XM_H_PHPMailer 2929 0.82 0.56 0.93 150 DKIM_ADSP_CUSTOM_MED 2921 0.99 1.15 0.92 151 XM_ProductURIs 2876 1.11 1.61 0.91 152 T_OBFU_PDF_ATTACH 2844 0.69 0.16 0.90 153 XMGenDplmaNmb 2695 0.98 1.31 0.85 154 XMGappySubj_02 2673 0.64 0.14 0.84 155 XM_H_Long_From02 2638 1.01 1.44 0.83 156 RCVD_IN_PBL 2593 0.92 1.16 0.82 157 XM_B_SpammyWords4 2527 1.28 2.47 0.80 158 XMBrknScrpt_02 2487 1.09 1.84 0.79 159 TR_MetaPhish_Combo_01 2423 0.81 0.91 0.77 160 TVD_RCVD_IP 2377 0.83 1.03 0.75 161 HTTPS_HTTP_MISMATCH 2376 0.98 1.55 0.75 162 XM_B_COPY_HTML 2280 0.89 1.31 0.72 163 URI_TRY_3LD 2202 0.88 1.35 0.70 164 RELAYCOUNTRY_AU 2167 1.28 2.75 0.68 165 XMNoVowels 2164 0.76 0.94 0.68 166 XM_B_DNDMA 2149 0.82 1.16 0.68 167 MSGID_FROM_MTA_HEADER 2139 0.55 0.23 0.68 168 SHORT_URI_3 2082 0.49 0.06 0.66 169 XM_B_FormFill 2064 0.47 0.03 0.65 170 TR_XM_FormFill2 2057 0.77 1.09 0.65 171 TR_XM_PHPForged 2047 0.78 1.13 0.65 172 TR_XM_PHPDW 2020 0.76 1.07 0.64 173 T_Symld_Words_02 1987 0.68 0.80 0.63 174 XM_H_PHPOS 1978 0.75 1.06 0.62 175 NML_ADSP_CUSTOM_MED 1956 0.71 0.94 0.62 176 XMLngstWrd_00 1895 0.56 0.45 0.60 177 TR_XM_SpammyWords2 1843 3.31 10.13 0.58 178 FORGED_GMAIL_RCVD 1795 0.66 0.90 0.57 179 XMBdyGiftCard01 1794 0.66 0.89 0.57 180 XMSlimDrugH 1787 0.81 1.43 0.56 181 RELAYCOUNTRY_GB 1772 0.65 0.87 0.56 182 HTML_TAG_BALANCE_BODY 1701 0.70 1.12 0.54 183 FROM_GOV_DKIM_AU 1700 0.44 0.20 0.54 184 XMLngstWrd_01 1698 0.50 0.41 0.54 185 MPART_ALT_DIFF_COUNT 1669 0.72 1.22 0.53 186 RCVD_IN_BL_SPAMCOP_NET 1651 2.56 7.65 0.52 187 XMDateMe_00 1632 0.52 0.52 0.52 188 XMBody_95 1629 0.43 0.23 0.51 189 TO_NO_BRKTS_HTML_ONLY 1623 0.58 0.76 0.51 190 HTML_IMAGE_ONLY_20 1617 0.68 1.11 0.51 191 XMBSHREFv2 1609 0.48 0.40 0.51 192 XMPhish30 1606 0.75 1.35 0.51 193 TR_XM_MSPIKECOMBO 1589 1.59 4.32 0.50 194 RCVD_IN_MSPIKE_BL 1589 1.60 4.34 0.50 195 TM2_M_BODY_EMPTY 1547 0.38 0.09 0.49 196 TM2_M_OBFU_COMMENT 1517 0.56 0.75 0.48 197 T_XMHurry_00 1496 0.88 1.91 0.47 198 XMHTML_After_End 1490 0.70 1.27 0.47 199 TR_XM_Base64_M1 1479 0.54 0.72 0.47 200 XMSubMetaSxObfu_03 1456 0.56 0.81 0.46 ----------------------------------------------------------------------