Email: 574505 Autolearn: 0 AvgScore: 2.80 AvgScanTime: 1.27 sec Spam: 178721 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.40 sec Ham: 395784 Autolearn: 0 AvgScore: -2.11 AvgScanTime: 1.21 sec Time Spent Running SA: 202.44 hours Time Spent Processing Spam: 69.51 hours Time Spent Processing Ham: 132.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 174435 91.75 97.60 89.11 2 DKIM_SIGNED 164663 75.43 92.13 67.89 3 XM_DK_Pass 157416 73.24 88.08 66.54 4 XM_B_Unicode 155619 77.82 87.07 73.64 5 DKIM_VALID 155125 72.22 86.80 65.63 6 RELAYCOUNTRY_US 142049 82.88 79.48 84.42 7 XMListUnsubscribeExists 135754 55.27 75.96 45.93 8 DCC_CHECK 135449 46.91 75.79 33.87 9 XM_B_SpammyWords 134557 54.00 75.29 44.39 10 DKIM_VALID_AU 115205 56.96 64.46 53.57 11 XM_DK_Undo_02 83872 18.43 46.93 5.56 12 XM_B_SpammyWords2 79901 25.64 44.71 17.03 13 XM_B_Unicode3 78276 43.13 43.80 42.83 14 LOC_TINY_FONT_1 71252 28.92 39.87 23.97 15 BAYES_50 67673 51.43 37.87 57.56 16 HTML_FONT_LOW_CONTRAST 65973 29.96 36.91 26.83 17 TR_XM_DKIM_Undo 65424 13.02 36.61 2.38 18 BAYES_99 63683 13.91 35.63 4.10 19 RCVD_IN_MSPIKE_H2 59494 29.45 33.29 27.71 20 FVGT_m_MULTI_ODD 59063 26.36 33.05 23.34 21 DKIM_VALID_EF 56649 27.49 31.70 25.59 22 MIME_HTML_ONLY 53645 24.82 30.02 22.48 23 T_KAM_HTML_FONT_INVALID 53173 22.54 29.75 19.28 24 BAYES_999 50089 10.94 28.03 3.22 25 TR_DCC_Bayes_99 46787 9.40 26.18 1.82 26 TR_XM_DK_Unsub 43818 16.32 24.52 12.62 27 DCC_CHECK_NEGATIVE 43252 53.06 24.20 66.09 28 XMSubLong 40682 22.80 22.76 22.81 29 T_TM2_M_HEADER_IN_MSG 39462 24.69 22.08 25.86 30 RELAYCOUNTRY_META 36889 9.03 20.64 3.79 31 XM_Multi_Part_URI 33145 14.27 18.55 12.33 32 LOTS_OF_MONEY 30750 9.37 17.21 5.84 33 TR_XM_SpammyRelay 29659 6.56 16.60 2.03 34 TR_XM_SpammyWords4 28604 7.85 16.00 4.16 35 XM_B_SpammyWords3 28487 7.81 15.94 4.14 36 TR_MAX_INTL_RELAY 27300 8.90 15.28 6.03 37 RCVD_IN_BL_SPAMCOP_NET 26412 5.12 14.78 0.75 38 TR_XM_SpammyWords2 26325 4.91 14.73 0.47 39 XM_B_Unsub 25508 9.18 14.27 6.87 40 TR_XM_BayesUnsub 24701 8.13 13.82 5.56 41 BOTNET_IPINHOSTNAME 23951 6.64 13.40 3.58 42 UNPARSEABLE_RELAY 23418 10.59 13.10 9.46 43 TR_XM_SPAMCOP 22586 4.24 12.64 0.45 44 RELAYCOUNTRY_CA 20835 4.43 11.66 1.17 45 RCVD_IN_MSPIKE_WL 17292 6.59 9.68 5.20 46 RCVD_IN_MSPIKE_H3 17292 6.59 9.68 5.20 47 BOTNET 16763 3.72 9.38 1.17 48 BAYES_80 16458 5.40 9.21 3.68 49 XM_Evil_Numbers_Gen 15054 8.77 8.42 8.93 50 BAYES_60 13937 8.09 7.80 8.22 51 XMBody_17 13557 2.89 7.59 0.77 52 TR_XM_UnparsRelay 12287 3.26 6.87 1.63 53 LotsOfNums_01 11853 7.20 6.63 7.46 54 XM_UncommonTLD01 11538 4.38 6.46 3.45 55 FSL_BULK_SIG 11262 5.38 6.30 4.96 56 TR_LOTS_OF_MONEY3 10870 2.45 6.08 0.82 57 XM_Body_Dirty_Words 10856 4.07 6.07 3.16 58 UNTRUSTED_Relay 10699 2.83 5.99 1.40 59 BAYES_95 10225 3.39 5.72 2.34 60 MPART_ALT_DIFF 9995 7.61 5.59 8.52 61 HTML_IMAGE_RATIO_04 9885 11.01 5.53 13.49 62 XM_OfRef6 9639 2.30 5.39 0.91 63 XMSubMetaSx_00 9615 3.97 5.38 3.33 64 XM_B_PhoneNumber 9560 7.78 5.35 8.87 65 DKIM_INVALID 9538 3.21 5.34 2.26 66 HTML_IMAGE_RATIO_02 9059 4.37 5.07 4.06 67 XM_H_Long_From01 8390 4.68 4.69 4.67 68 HK_RANDOM_REPLYTO 8251 1.50 4.62 0.10 69 TooManyTo_001 8193 6.72 4.58 7.68 70 RCVD_IN_VALIDITY_RPBL 8181 1.52 4.58 0.14 71 XM_B_Phish_Phrases 8116 3.88 4.54 3.58 72 XM_B_SEO 8091 2.23 4.53 1.19 73 XM_SPF_SoftFail 7945 3.54 4.45 3.13 74 HTML_IMAGE_RATIO_06 7670 4.61 4.29 4.76 75 XM_B_Investor 7596 2.37 4.25 1.52 76 TR_XM_PhishingBody 7303 2.57 4.09 1.88 77 TR_XM_SEO4 7174 1.79 4.01 0.78 78 XM_H_GMP 7084 4.96 3.96 5.42 79 T_XMDrugObfuBody_08 6820 2.19 3.82 1.46 80 TR_XM_SpammyWords5 6805 2.02 3.81 1.22 81 HTML_IMAGE_RATIO_08 6789 2.69 3.80 2.19 82 XMSexyCombo_05 6775 2.41 3.79 1.78 83 MIME_HTML_MOSTLY 6642 2.74 3.72 2.30 84 T_XMDrugObfuBody_14 6586 2.23 3.69 1.58 85 XMNumbers 6211 2.84 3.48 2.55 86 XMStrtUSub 6148 7.99 3.44 10.05 87 SpammyFromTLD_01 5892 1.57 3.30 0.79 88 XM_UB50 5858 1.60 3.28 0.84 89 XM_B_SpammyTLD 5840 2.51 3.27 2.17 90 TR_XM_BayesRelay 5696 0.99 3.19 0.00 91 MIME_QP_LONG_LINE 5610 4.02 3.14 4.41 92 FONT_INVIS_LONG_LINE 5589 1.00 3.13 0.05 93 T_XMHurry_00 5517 1.47 3.09 0.74 94 T_FILL_THIS_FORM_SHORT 5513 1.51 3.08 0.80 95 MIME_HTML_ONLY_MULTI 5454 5.72 3.05 6.92 96 TM2_M_VERY_LONG_WORD 5187 1.62 2.90 1.05 97 HOSTED_IMG_MULTI_PUB_01 4917 0.88 2.75 0.03 98 XM_CamelCaseFrm001 4791 2.29 2.68 2.11 99 XM_URI_RBL 4599 0.90 2.57 0.15 100 TM2_M_URI_OPT_OUT 4425 1.70 2.48 1.35 101 RCVD_IN_VALIDITY_SAFE 4401 4.56 2.46 5.50 102 XM_B_Unsub2 4283 1.70 2.40 1.38 103 XM_B_SpammyWords4 4163 1.33 2.33 0.88 104 XMBrknScrpt_02 4141 1.45 2.32 1.06 105 URI_TRY_3LD 4064 1.21 2.27 0.72 106 T_TooManySym_01 4057 3.92 2.27 4.67 107 RELAYCOUNTRY_AU 4050 1.14 2.27 0.63 108 XMDiploma_00 3988 1.68 2.23 1.43 109 USER_IN_DEF_DKIM_WL 3930 9.49 2.20 12.79 110 TR_Mismatch_TLD_02 3708 0.70 2.07 0.08 111 TR_XM_FormFill 3471 0.61 1.94 0.01 112 TR_XM_NoHeaderRelay 3405 0.65 1.91 0.09 113 TR_XM_INV_DKIM 3390 0.63 1.90 0.06 114 RCVD_IN_VALIDITY_CERTIFIED 3301 3.82 1.85 4.71 115 SUBJ_ALL_CAPS 3222 1.52 1.80 1.40 116 T_REMOTE_IMAGE 3112 2.71 1.74 3.14 117 FROM_EXCESS_BASE64 2951 1.68 1.65 1.70 118 ANY_BOUNCE_MESSAGE 2846 2.91 1.59 3.51 119 BOUNCE_MESSAGE 2845 2.91 1.59 3.51 120 MAILING_LIST_MULTI 2832 2.14 1.58 2.39 121 HTML_MIME_NO_HTML_TAG 2798 1.78 1.57 1.87 122 BAYES_40 2782 3.96 1.56 5.05 123 XMStockSpam_06 2693 1.26 1.51 1.15 124 AC_BR_BONANZA 2550 0.51 1.43 0.09 125 XMSlimDrugH 2527 0.68 1.41 0.35 126 KHOP_HELO_FCRDNS 2507 1.30 1.40 1.26 127 T_XMDrugObfuBody_00 2496 0.89 1.40 0.66 128 URI_HEX 2458 1.12 1.38 1.00 129 RCVD_IN_IADB_LISTED 2445 2.52 1.37 3.04 130 SpammyFromTLD_02 2428 0.67 1.36 0.35 131 XMSubMetaI_00 2418 0.74 1.35 0.46 132 HTTPS_HTTP_MISMATCH 2405 0.91 1.35 0.71 133 THIS_AD 2359 0.70 1.32 0.43 134 XM_DK_Undo_01 2258 1.63 1.26 1.80 135 XM_HighProb1 2237 0.39 1.25 0.00 136 XM_B_Phish66 2197 0.56 1.23 0.26 137 XMPhish30 2196 0.90 1.23 0.75 138 HTML_TAG_BALANCE_BODY 2166 0.74 1.21 0.52 139 RCVD_IN_IADB_SPF 2149 2.22 1.20 2.68 140 XMGenDplmaNmb 2125 0.87 1.19 0.73 141 ALL_TRUSTED 2117 9.07 1.18 12.64 142 XM_SendGrid 2094 1.31 1.17 1.37 143 URI_NOVOWEL 2060 1.10 1.15 1.08 144 TR_XM_PHPForged 2015 0.55 1.13 0.29 145 TR_XM_InvalidRelay 2003 0.36 1.12 0.02 146 RCVD_IN_IADB_DK 1999 1.97 1.12 2.35 147 TR_XM_PHPDW 1992 0.55 1.11 0.29 148 RCVD_IN_IADB_SENDERID 1985 2.01 1.11 2.42 149 TR_XM_FormFill2 1932 0.54 1.08 0.29 150 XM_H_PHPOS 1928 0.53 1.08 0.28 151 BAYES_20 1890 2.88 1.06 3.70 152 BOTNET_NORDNS 1829 0.32 1.02 0.01 153 MPART_ALT_DIFF_COUNT 1790 0.72 1.00 0.60 154 XM_B_COPY_HTML 1782 0.74 1.00 0.62 155 DKIM_ADSP_NXDOMAIN 1764 0.53 0.99 0.33 156 TR_XM_Base64_M1 1747 0.81 0.98 0.74 157 XMPhish14 1735 0.66 0.97 0.53 158 RDNS_DYNAMIC 1731 0.53 0.97 0.33 159 DKIM_ADSP_CUSTOM_MED 1729 0.77 0.97 0.68 160 XMHTML_After_End 1729 0.54 0.97 0.35 161 XM_B_DNDMA 1684 0.64 0.94 0.51 162 XMSexyCombo_01 1677 0.45 0.94 0.23 163 T_MONEY_PERCENT 1672 0.42 0.94 0.18 164 TR_LOTS_OF_MONEY2 1672 0.42 0.94 0.18 165 XM_ProductURIs 1635 0.63 0.91 0.50 166 XM_DIRTYINTL 1619 0.34 0.91 0.09 167 URIBL_DBL_SPAM 1617 0.28 0.90 0.00 168 T_STY_INVIS_DIRECT 1609 0.46 0.90 0.26 169 XM_OfRef7 1578 0.37 0.88 0.15 170 TR_Symld_Words 1565 1.23 0.88 1.38 171 TR_MetaPhish_Combo_01 1542 0.85 0.86 0.84 172 XMReplyNow 1534 0.48 0.86 0.31 173 NML_ADSP_CUSTOM_MED 1517 0.59 0.85 0.48 174 SUBJ_DOLLARS 1516 0.42 0.85 0.22 175 TVD_RCVD_IP 1507 1.27 0.84 1.46 176 XMHTMLBadTable_001 1499 0.38 0.84 0.18 177 XM_H_Long_From02 1480 0.86 0.83 0.88 178 RELAYCOUNTRY_FR 1469 0.40 0.82 0.21 179 LongTLD 1461 0.48 0.82 0.33 180 XMBdyGiftCard01 1448 1.03 0.81 1.13 181 HTML_IMAGE_ONLY_20 1434 0.46 0.80 0.31 182 PLING_QUERY 1425 0.46 0.80 0.31 183 XM_UB99 1415 0.25 0.79 0.00 184 XMMoneyMeta_00 1410 0.57 0.79 0.47 185 TR_XM_DK_SendGrid 1406 0.82 0.79 0.83 186 TM2_M_OBFU_COMMENT 1389 0.42 0.78 0.26 187 XM_Dr_From 1376 0.31 0.77 0.10 188 RCVD_IN_PSBL 1372 0.51 0.77 0.39 189 DIET_1 1359 0.40 0.76 0.24 190 XM_B_COVIDMETA 1357 0.38 0.76 0.21 191 FORGED_GMAIL_RCVD 1344 0.49 0.75 0.37 192 HELO_DYNAMIC_SPLIT_IP 1329 0.24 0.74 0.01 193 XM_UB60 1323 0.27 0.74 0.06 194 RCVD_IN_IADB_VOUCHED 1319 1.67 0.74 2.09 195 RELAYCOUNTRY_RU 1289 0.25 0.72 0.03 196 XM_Combo_Sbj 1286 0.39 0.72 0.24 197 XM_DrOz_From 1249 0.24 0.70 0.03 198 RELAYCOUNTRY_GB 1220 0.51 0.68 0.43 199 TooManyTo_002 1218 1.89 0.68 2.43 200 AC_HTML_NONSENSE_TAGS 1210 0.22 0.68 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 352682 91.75 97.60 89.11 2 RELAYCOUNTRY_US 334104 82.88 79.48 84.42 3 XM_B_Unicode 291451 77.82 87.07 73.64 4 DKIM_SIGNED 268694 75.43 92.13 67.89 5 XM_DK_Pass 263351 73.24 88.08 66.54 6 DCC_CHECK_NEGATIVE 261558 53.06 24.20 66.09 7 DKIM_VALID 259768 72.22 86.80 65.63 8 BAYES_50 227804 51.43 37.87 57.56 9 DKIM_VALID_AU 212038 56.96 64.46 53.57 10 XMListUnsubscribeExists 181772 55.27 75.96 45.93 11 XM_B_SpammyWords 175696 54.00 75.29 44.39 12 XM_B_Unicode3 169500 43.13 43.80 42.83 13 DCC_CHECK 134045 46.91 75.79 33.87 14 RCVD_IN_MSPIKE_H2 109688 29.45 33.29 27.71 15 HTML_FONT_LOW_CONTRAST 106174 29.96 36.91 26.83 16 T_TM2_M_HEADER_IN_MSG 102360 24.69 22.08 25.86 17 DKIM_VALID_EF 101278 27.49 31.70 25.59 18 LOC_TINY_FONT_1 94871 28.92 39.87 23.97 19 FVGT_m_MULTI_ODD 92394 26.36 33.05 23.34 20 XMSubLong 90282 22.80 22.76 22.81 21 MIME_HTML_ONLY 88955 24.82 30.02 22.48 22 T_KAM_HTML_FONT_INVALID 76304 22.54 29.75 19.28 23 XM_B_SpammyWords2 67410 25.64 44.71 17.03 24 HTML_IMAGE_RATIO_04 53377 11.01 5.53 13.49 25 USER_IN_DEF_DKIM_WL 50609 9.49 2.20 12.79 26 ALL_TRUSTED 50013 9.07 1.18 12.64 27 TR_XM_DK_Unsub 49966 16.32 24.52 12.62 28 HTML_FONT_FACE_BAD 48958 8.71 0.61 12.37 29 BAYES_00 48881 8.69 0.59 12.35 30 XM_Multi_Part_URI 48819 14.27 18.55 12.33 31 XM_H_Trusted_IP 45966 8.00 0.00 11.61 32 XMStrtUSub 39780 7.99 3.44 10.05 33 UNPARSEABLE_RELAY 37423 10.59 13.10 9.46 34 XM_Evil_Numbers_Gen 35341 8.77 8.42 8.93 35 XM_B_PhoneNumber 35115 7.78 5.35 8.87 36 MPART_ALT_DIFF 33702 7.61 5.59 8.52 37 BAYES_60 32516 8.09 7.80 8.22 38 TooManyTo_001 30415 6.72 4.58 7.68 39 LotsOfNums_01 29508 7.20 6.63 7.46 40 MIME_HTML_ONLY_MULTI 27382 5.72 3.05 6.92 41 XM_B_Unsub 27204 9.18 14.27 6.87 42 XM_DKIMWhitelistDomains 25160 4.39 0.03 6.36 43 IN_ZIMBRA_NJ_WHITELIST 24705 4.32 0.07 6.24 44 TR_MAX_INTL_RELAY 23849 8.90 15.28 6.03 45 LOTS_OF_MONEY 23095 9.37 17.21 5.84 46 TR_XM_DK_Bayes 22044 3.98 0.46 5.57 47 TR_XM_BayesUnsub 22024 8.13 13.82 5.56 48 XM_DK_Undo_02 22021 18.43 46.93 5.56 49 RCVD_IN_VALIDITY_SAFE 21782 4.56 2.46 5.50 50 TR_XM_DK_Bayes1 21707 3.92 0.46 5.48 51 XM_H_GMP 21432 4.96 3.96 5.42 52 RCVD_IN_MSPIKE_WL 20590 6.59 9.68 5.20 53 RCVD_IN_MSPIKE_H3 20587 6.59 9.68 5.20 54 BAYES_40 19972 3.96 1.56 5.05 55 FSL_BULK_SIG 19632 5.38 6.30 4.96 56 HTML_IMAGE_RATIO_06 18842 4.61 4.29 4.76 57 TR_XM_DK_Bayes2 18751 3.38 0.38 4.74 58 RCVD_IN_VALIDITY_CERTIFIED 18642 3.82 1.85 4.71 59 T_TooManySym_01 18483 3.92 2.27 4.67 60 XM_H_Long_From01 18478 4.68 4.69 4.67 61 MIME_QP_LONG_LINE 17471 4.02 3.14 4.41 62 TR_XM_SpammyWords4 16481 7.85 16.00 4.16 63 XMSubNoVowel 16424 2.96 0.32 4.15 64 XM_PDF 16386 3.06 0.65 4.14 65 XM_B_SpammyWords3 16379 7.81 15.94 4.14 66 BAYES_99 16227 13.91 35.63 4.10 67 HTML_IMAGE_RATIO_02 16063 4.37 5.07 4.06 68 RELAYCOUNTRY_META 14985 9.03 20.64 3.79 69 BAYES_20 14629 2.88 1.06 3.70 70 BAYES_80 14574 5.40 9.21 3.68 71 BOTNET_IPINHOSTNAME 14173 6.64 13.40 3.58 72 XM_B_Phish_Phrases 14154 3.88 4.54 3.58 73 ANY_BOUNCE_MESSAGE 13895 2.91 1.59 3.51 74 BOUNCE_MESSAGE 13894 2.91 1.59 3.51 75 XM_UncommonTLD01 13637 4.38 6.46 3.45 76 XMSubMetaSx_00 13184 3.97 5.38 3.33 77 BAYES_999 12734 10.94 28.03 3.22 78 XM_Body_Dirty_Words 12519 4.07 6.07 3.16 79 T_REMOTE_IMAGE 12443 2.71 1.74 3.14 80 XM_SPF_SoftFail 12406 3.54 4.45 3.13 81 RCVD_IN_IADB_LISTED 12034 2.52 1.37 3.04 82 BAYES_05 11909 2.25 0.56 3.01 83 RCVD_IN_IADB_SPF 10622 2.22 1.20 2.68 84 XMNumbers 10101 2.84 3.48 2.55 85 TooManyTo_002 9619 1.89 0.68 2.43 86 RCVD_IN_IADB_SENDERID 9583 2.01 1.11 2.42 87 MAILING_LIST_MULTI 9441 2.14 1.58 2.39 88 TR_XM_DKIM_Undo 9401 13.02 36.61 2.38 89 RCVD_IN_IADB_DK 9307 1.97 1.12 2.35 90 BAYES_95 9271 3.39 5.72 2.34 91 T_TooManySym_02 9137 1.80 0.67 2.31 92 MIME_HTML_MOSTLY 9086 2.74 3.72 2.30 93 DKIM_INVALID 8926 3.21 5.34 2.26 94 HTML_IMAGE_RATIO_08 8649 2.69 3.80 2.19 95 XM_B_SpammyTLD 8586 2.51 3.27 2.17 96 XM_CamelCaseFrm001 8350 2.29 2.68 2.11 97 RCVD_IN_IADB_VOUCHED 8261 1.67 0.74 2.09 98 TR_XM_SpammyRelay 8036 6.56 16.60 2.03 99 XMSubLongNoVowel 8030 1.42 0.08 2.03 100 XMSubGarbage 7834 1.37 0.02 1.98 101 TR_XM_PhishingBody 7437 2.57 4.09 1.88 102 HTML_MIME_NO_HTML_TAG 7419 1.78 1.57 1.87 103 INVALID_MSGID 7375 1.33 0.14 1.86 104 TR_DCC_Bayes_99 7198 9.40 26.18 1.82 105 XM_DK_Undo_01 7120 1.63 1.26 1.80 106 XMSexyCombo_05 7042 2.41 3.79 1.78 107 TO_MALFORMED 7034 1.23 0.02 1.78 108 HELO_NODOT 6785 1.27 0.29 1.71 109 HELO_NO_DOMAIN 6783 1.27 0.29 1.71 110 FROM_EXCESS_BASE64 6713 1.68 1.65 1.70 111 TR_XM_UnparsRelay 6454 3.26 6.87 1.63 112 T_XMDrugObfuBody_14 6242 2.23 3.69 1.58 113 XM_B_Investor 6002 2.37 4.25 1.52 114 TVD_RCVD_IP 5786 1.27 0.84 1.46 115 T_XMDrugObfuBody_08 5770 2.19 3.82 1.46 116 XMDiploma_00 5658 1.68 2.23 1.43 117 UNTRUSTED_Relay 5539 2.83 5.99 1.40 118 SUBJ_ALL_CAPS 5523 1.52 1.80 1.40 119 RCVD_IN_IADB_OPTIN 5478 1.10 0.46 1.38 120 TR_Symld_Words 5476 1.23 0.88 1.38 121 XM_B_Unsub2 5457 1.70 2.40 1.38 122 XM_SendGrid 5424 1.31 1.17 1.37 123 TM2_M_URI_OPT_OUT 5353 1.70 2.48 1.35 124 TooManyTo_003 5210 1.09 0.59 1.32 125 XMGappySubj_01 5134 0.93 0.11 1.30 126 IN_HORDE_ADDRESS_BOOK 5021 0.90 0.09 1.27 127 KHOP_HELO_FCRDNS 4971 1.30 1.40 1.26 128 TR_XM_SpammyWords5 4826 2.02 3.81 1.22 129 XM_B_SEO 4726 2.23 4.53 1.19 130 BOTNET 4628 3.72 9.38 1.17 131 RELAYCOUNTRY_CA 4612 4.43 11.66 1.17 132 XMStockSpam_06 4557 1.26 1.51 1.15 133 XMBdyGiftCard01 4461 1.03 0.81 1.13 134 URI_NOVOWEL 4272 1.10 1.15 1.08 135 XMBrknScrpt_02 4203 1.45 2.32 1.06 136 XM_GoogleGroups 4182 0.90 0.54 1.06 137 TM2_M_VERY_LONG_WORD 4148 1.62 2.90 1.05 138 TVD_SPACE_RATIO 4042 0.74 0.11 1.02 139 URI_HEX 3974 1.12 1.38 1.00 140 XM_RXBody 3914 0.79 0.33 0.99 141 TooManyTo_004 3800 0.83 0.55 0.96 142 XMCapTrack 3724 0.77 0.38 0.94 143 XM_E_Blogspot 3627 0.66 0.08 0.92 144 XMBSHREFv2 3620 0.73 0.32 0.91 145 XM_OfRef6 3602 2.30 5.39 0.91 146 XM_B_SpammyWords4 3469 1.33 2.33 0.88 147 XM_H_Long_From02 3466 0.86 0.83 0.88 148 T_TooManySym_03 3389 0.66 0.23 0.86 149 TR_MetaPhish_Combo_01 3318 0.85 0.86 0.84 150 XM_UB50 3309 1.60 3.28 0.84 151 TR_XM_DK_SendGrid 3295 0.82 0.79 0.83 152 TR_LOTS_OF_MONEY3 3228 2.45 6.08 0.82 153 XMGappySubj_02 3225 0.57 0.04 0.81 154 T_FILL_THIS_FORM_SHORT 3178 1.51 3.08 0.80 155 FROM_GOV_DKIM_AU 3174 0.69 0.44 0.80 156 SpammyFromTLD_01 3137 1.57 3.30 0.79 157 TR_XM_SEO4 3104 1.79 4.01 0.78 158 TooManyTo_005 3068 0.68 0.48 0.78 159 XMBody_17 3053 2.89 7.59 0.77 160 RCVD_IN_BL_SPAMCOP_NET 2979 5.12 14.78 0.75 161 XMPhish30 2970 0.90 1.23 0.75 162 T_XMHurry_00 2946 1.47 3.09 0.74 163 TR_XM_Base64_M1 2921 0.81 0.98 0.74 164 XMGenDplmaNmb 2872 0.87 1.19 0.73 165 URI_TRY_3LD 2859 1.21 2.27 0.72 166 HTTPS_HTTP_MISMATCH 2821 0.91 1.35 0.71 167 DKIM_ADSP_CUSTOM_MED 2672 0.77 0.97 0.68 168 T_XMDrugObfuBody_00 2626 0.89 1.40 0.66 169 XM_ShortIntro_01 2616 0.62 0.54 0.66 170 XMBody_95 2571 0.49 0.14 0.65 171 RELAYCOUNTRY_AU 2487 1.14 2.27 0.63 172 T_OBFU_PDF_ATTACH 2466 0.46 0.10 0.62 173 XM_B_COPY_HTML 2448 0.74 1.00 0.62 174 XM_B_FormFill 2421 0.44 0.06 0.61 175 MPART_ALT_DIFF_COUNT 2374 0.72 1.00 0.60 176 XM_H_PHPMailer 2195 0.59 0.65 0.55 177 XMNoVowels 2141 0.50 0.42 0.54 178 SHORT_HELO_AND_INLINE_IMAGE 2122 0.38 0.05 0.54 179 XMPhish14 2081 0.66 0.97 0.53 180 HTML_TAG_BALANCE_BODY 2072 0.74 1.21 0.52 181 XM_B_DNDMA 2017 0.64 0.94 0.51 182 USER_IN_WHITELIST 1981 0.34 0.00 0.50 183 USER_IN_WELCOMELIST 1981 0.34 0.00 0.50 184 XM_ProductURIs 1964 0.63 0.91 0.50 185 NML_ADSP_CUSTOM_MED 1900 0.59 0.85 0.48 186 TR_XM_SpammyWords2 1863 4.91 14.73 0.47 187 XMMoneyMeta_00 1848 0.57 0.79 0.47 188 XMSubMetaI_00 1818 0.74 1.35 0.46 189 XM_H_OutlookMailer 1813 0.34 0.08 0.46 190 TO_NO_BRKTS_HTML_ONLY 1803 0.38 0.20 0.46 191 TR_XM_SPAMCOP 1784 4.24 12.64 0.45 192 HTML_IMAGE_ONLY_24 1760 0.36 0.18 0.44 193 RELAYCOUNTRY_GB 1714 0.51 0.68 0.43 194 THIS_AD 1683 0.70 1.32 0.43 195 XMLngstWrd_00 1674 0.43 0.45 0.42 196 HTML_IMAGE_ONLY_32 1641 0.41 0.40 0.41 197 T_Symld_Words_02 1621 0.47 0.60 0.41 198 HTML_IMAGE_ONLY_28 1558 0.35 0.26 0.39 199 RCVD_IN_PSBL 1540 0.51 0.77 0.39 200 FILL_THIS_FORM 1538 0.32 0.18 0.39 ----------------------------------------------------------------------