Email: 472183 Autolearn: 0 AvgScore: 3.17 AvgScanTime: 1.43 sec Spam: 129985 Autolearn: 0 AvgScore: 14.67 AvgScanTime: 1.69 sec Ham: 342198 Autolearn: 0 AvgScore: -1.20 AvgScanTime: 1.33 sec Time Spent Running SA: 187.73 hours Time Spent Processing Spam: 61.17 hours Time Spent Processing Ham: 126.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 127558 99.10 98.13 99.46 2 HTML_MESSAGE 122984 89.82 94.61 88.00 3 DKIM_SIGNED 115554 72.09 88.90 65.70 4 XM_DK_Pass 109286 70.09 84.08 64.78 5 XM_B_Unicode 108592 74.40 83.54 70.93 6 DKIM_VALID 108271 69.22 83.29 63.87 7 RELAYCOUNTRY_US 105293 82.23 81.00 82.69 8 DCC_CHECK 97511 51.73 75.02 42.88 9 XM_B_SpammyWords 89103 49.38 68.55 42.11 10 XMListUnsubscribeExists 87456 48.34 67.28 41.14 11 DKIM_VALID_AU 84285 55.30 64.84 51.68 12 XM_B_Unicode3 65340 44.62 50.27 42.48 13 LOC_TINY_FONT_1 61481 30.72 47.30 24.42 14 BAYES_50 53765 52.76 41.36 57.08 15 XM_DK_Undo_02 52282 14.16 40.22 4.26 16 XM_B_SpammyWords2 50928 23.19 39.18 17.12 17 HTML_FONT_LOW_CONTRAST 49108 28.30 37.78 24.69 18 FVGT_m_MULTI_ODD 43566 25.08 33.52 21.88 19 DKIM_VALID_EF 40682 27.97 31.30 26.71 20 BAYES_99 39978 10.79 30.76 3.21 21 MIME_HTML_ONLY 39653 25.38 30.51 23.43 22 T_KAM_HTML_FONT_INVALID 37944 21.90 29.19 19.13 23 TR_XM_DKIM_Undo 37937 9.33 29.19 1.79 24 XMSubLong 33933 23.70 26.11 22.79 25 BAYES_999 31209 8.34 24.01 2.38 26 T_TM2_M_HEADER_IN_MSG 31184 26.97 23.99 28.11 27 DCC_CHECK_NEGATIVE 30299 47.78 23.31 57.08 28 TR_XM_DK_Unsub 29147 14.43 22.42 11.40 29 TR_DCC_Bayes_99 28383 6.98 21.84 1.33 30 XM_Multi_Part_URI 27920 14.77 21.48 12.22 31 RCVD_IN_MSPIKE_H2 25092 15.03 19.30 13.41 32 UNPARSEABLE_RELAY 24484 12.77 18.84 10.46 33 XM_B_Unsub 24437 11.52 18.80 8.76 34 TR_XM_BayesUnsub 23218 9.55 17.86 6.39 35 RELAYCOUNTRY_META 22588 6.99 17.38 3.04 36 XM_B_SpammyWords3 18664 7.18 14.36 4.45 37 BOTNET_IPINHOSTNAME 17786 5.47 13.68 2.35 38 TR_MAX_INTL_RELAY 17378 7.50 13.37 5.26 39 TR_XM_SpammyRelay 16104 4.43 12.39 1.40 40 LOTS_OF_MONEY 14724 6.73 11.33 4.99 41 TR_XM_SpammyWords2 13577 3.20 10.45 0.44 42 TR_XM_SpammyWords4 13535 5.38 10.41 3.46 43 BOTNET 13429 3.55 10.33 0.98 44 FSL_BULK_SIG 13305 13.58 10.24 14.86 45 RCVD_IN_BL_SPAMCOP_NET 12962 3.10 9.97 0.50 46 RCVD_IN_MSPIKE_WL 12892 14.08 9.92 15.66 47 XM_Evil_Numbers_Gen 12883 10.09 9.91 10.16 48 TR_XM_UnparsRelay 12103 3.44 9.31 1.21 49 XM_B_Phish_Phrases 11944 6.61 9.19 5.63 50 BAYES_80 10773 4.58 8.29 3.17 51 BAYES_60 10072 6.19 7.75 5.60 52 XMSubMetaSx_00 9620 4.52 7.40 3.43 53 XM_Body_Dirty_Words 9343 3.50 7.19 2.10 54 XM_B_PhoneNumber 8866 8.76 6.82 9.50 55 HTML_IMAGE_RATIO_02 8831 4.70 6.79 3.90 56 UNTRUSTED_Relay 8681 2.76 6.68 1.28 57 LotsOfNums_01 8419 7.29 6.48 7.59 58 MPART_ALT_DIFF 8224 8.72 6.33 9.63 59 XM_H_Long_From01 7811 5.32 6.01 5.06 60 RELAYCOUNTRY_CA 7530 2.14 5.79 0.75 61 XMStrtUSub 7422 9.44 5.71 10.86 62 RCVD_IN_MSPIKE_H3 7292 6.53 5.61 6.88 63 DKIM_INVALID 7283 2.87 5.60 1.83 64 XM_UncommonTLD01 7097 4.20 5.46 3.72 65 HTML_IMAGE_RATIO_04 6864 11.59 5.28 13.99 66 TR_XM_SPAMCOP 6841 1.53 5.26 0.11 67 XMSexyCombo_05 6665 2.33 5.13 1.27 68 XM_B_Investor 6533 2.37 5.03 1.36 69 TooManyTo_001 6265 7.30 4.82 8.24 70 XM_H_GMP 6252 5.23 4.81 5.39 71 BAYES_95 6119 2.82 4.71 2.10 72 RCVD_IN_MSPIKE_BL 5890 1.68 4.53 0.59 73 TR_XM_MSPIKECOMBO 5873 1.67 4.52 0.59 74 TR_XM_PhishingBody 5526 2.40 4.25 1.70 75 T_XMDrugObfuBody_14 5427 2.86 4.18 2.36 76 TR_XM_SpammyWords5 5285 2.45 4.07 1.83 77 XMNumbers 5208 3.97 4.01 3.96 78 XM_CamelCaseFrm001 5089 2.41 3.92 1.84 79 TM2_M_VERY_LONG_WORD 4922 2.36 3.79 1.82 80 XM_OfRef6 4835 1.75 3.72 1.00 81 TR_XM_NoHeaderRelay 4794 1.12 3.69 0.15 82 MIME_HTML_MOSTLY 4767 2.59 3.67 2.19 83 XM_B_Unsub2 4751 1.83 3.66 1.14 84 XMDiploma_00 4623 1.92 3.56 1.30 85 MIME_HTML_ONLY_MULTI 4321 6.46 3.32 7.65 86 XM_UB50 4316 1.52 3.32 0.84 87 HTML_IMAGE_RATIO_06 4218 4.01 3.24 4.30 88 RELAYCOUNTRY_AU 4199 1.18 3.23 0.41 89 TM2_M_URI_OPT_OUT 4155 2.04 3.20 1.60 90 XM_B_SpammyTLD 4149 2.47 3.19 2.19 91 TR_XM_SpammyWords3 4090 1.05 3.15 0.25 92 MIME_QP_LONG_LINE 4014 4.15 3.09 4.55 93 XM_B_URI_Unicode 3992 2.09 3.07 1.71 94 XM_SPF_SoftFail 3940 1.77 3.03 1.29 95 HTML_IMAGE_RATIO_08 3847 2.61 2.96 2.47 96 XM_URI_RBL 3825 1.00 2.94 0.26 97 RCVD_IN_MSPIKE_L3 3797 1.10 2.92 0.41 98 TR_XM_INV_DKIM 3779 0.84 2.91 0.06 99 T_XMDrugObfuBody_08 3767 2.01 2.90 1.67 100 XM_B_SpammyWords4 3711 1.47 2.85 0.94 101 T_TooManySym_01 3700 4.59 2.85 5.25 102 RCVD_IN_VALIDITY_RPBL 3354 0.80 2.58 0.12 103 XMGenDplmaNmb 3185 1.24 2.45 0.78 104 RCVD_IN_MSPIKE_H4 3097 3.08 2.38 3.34 105 USER_IN_DEF_DKIM_WL 3040 9.45 2.34 12.15 106 T_FILL_THIS_FORM_SHORT 3016 1.15 2.32 0.71 107 ALL_TRUSTED 2971 11.37 2.29 14.82 108 MAILING_LIST_MULTI 2902 2.59 2.23 2.72 109 T_XMHurry_00 2851 0.93 2.19 0.45 110 BAYES_40 2817 5.04 2.17 6.14 111 XM_H_Long_From02 2793 1.10 2.15 0.70 112 RCVD_IN_VALIDITY_SAFE 2622 3.49 2.02 4.06 113 SUBJ_ALL_CAPS 2584 1.74 1.99 1.64 114 RDNS_DYNAMIC 2554 0.65 1.96 0.15 115 PDS_RDNS_DYNAMIC_FP 2508 0.56 1.93 0.04 116 RCVD_IN_MSPIKE_H5 2503 4.46 1.93 5.43 117 SpammyFromTLD_02 2491 0.68 1.92 0.21 118 XMBrknScrpt_02 2478 1.10 1.91 0.80 119 FROM_EXCESS_BASE64 2437 1.45 1.87 1.29 120 KHOP_HELO_FCRDNS 2411 1.69 1.85 1.63 121 T_XMDrugObfuBody_00 2400 0.95 1.85 0.62 122 SCC_BODY_URI_ONLY 2378 2.28 1.83 2.45 123 SpammyFromTLD_01 2300 1.01 1.77 0.72 124 XMStockSpam_06 2223 1.26 1.71 1.09 125 HTML_IMAGE_ONLY_20 2180 0.75 1.68 0.40 126 RCVD_IN_ZEN_LASTEXTERNAL 2144 0.45 1.65 0.00 127 SHORTCIRCUIT 2144 0.45 1.65 0.00 128 XMSubMetaI_00 2129 0.87 1.64 0.58 129 XMBody_17 2118 0.75 1.63 0.41 130 T_REMOTE_IMAGE 2018 2.81 1.55 3.29 131 BAYES_20 1996 4.09 1.54 5.06 132 XM_B_SEO 1981 0.65 1.52 0.32 133 HTTPS_HTTP_MISMATCH 1942 0.97 1.49 0.77 134 URI_NOVOWEL 1937 1.22 1.49 1.12 135 RELAYCOUNTRY_GB 1935 0.75 1.49 0.46 136 TR_XM_MSPIKECOMBO2 1928 0.41 1.48 0.01 137 TVD_RCVD_IP 1868 1.02 1.44 0.86 138 RCVD_IN_VALIDITY_CERTIFIED 1854 2.89 1.43 3.44 139 XM_S_SpammyWords 1837 0.70 1.41 0.43 140 TR_XM_Spammywords 1836 0.70 1.41 0.43 141 URI_TRY_3LD 1828 0.69 1.41 0.42 142 RCVD_IN_PBL 1817 0.90 1.40 0.71 143 XM_DK_Undo_01 1814 1.52 1.40 1.57 144 HTML_MIME_NO_HTML_TAG 1770 2.20 1.36 2.52 145 RCVD_IN_XBL 1739 0.38 1.34 0.02 146 RELAYCOUNTRY_FR 1739 0.56 1.34 0.27 147 TR_XM_SEO4 1725 0.50 1.33 0.19 148 XMPhish30 1724 0.75 1.33 0.53 149 URI_HEX 1724 1.16 1.33 1.10 150 HTML_TAG_BALANCE_BODY 1723 0.79 1.33 0.58 151 TR_XM_PHPForged 1717 0.62 1.32 0.35 152 TR_XM_FormFill2 1696 0.61 1.30 0.35 153 RCVD_IN_PSBL 1694 0.56 1.30 0.28 154 BOTNET_NORDNS 1683 0.36 1.29 0.01 155 DKIM_ADSP_NXDOMAIN 1683 0.58 1.29 0.31 156 TR_MetaPhish_Combo_01 1671 1.37 1.29 1.40 157 XM_B_COPY_HTML 1666 1.05 1.28 0.97 158 TR_XM_PHPDW 1659 0.61 1.28 0.35 159 XM_H_PHPOS 1644 0.59 1.26 0.34 160 TR_Symld_Words 1643 1.33 1.26 1.35 161 MultiRelay_CC 1641 0.45 1.26 0.15 162 XM_DIRTYINTL 1629 0.39 1.25 0.06 163 SHOPIFY_IMG_NOT_RCVD_SFY 1623 0.46 1.25 0.16 164 TR_LOTS_OF_MONEY2 1607 0.48 1.24 0.19 165 T_MONEY_PERCENT 1607 0.48 1.24 0.19 166 XM_SendGrid 1604 1.33 1.23 1.37 167 XM_UB99 1576 0.33 1.21 0.00 168 XM_B_Phish66 1575 0.54 1.21 0.29 169 HK_RANDOM_REPLYTO 1548 0.41 1.19 0.11 170 XM_ProductURIs 1547 0.63 1.19 0.42 171 TR_XM_RelayPhish 1535 0.36 1.18 0.05 172 RCVD_IN_IADB_LISTED 1524 2.64 1.17 3.20 173 THIS_AD 1480 0.55 1.14 0.33 174 RCVD_IN_MSPIKE_L4 1435 0.43 1.10 0.17 175 TR_XM_MaxSPIKE 1430 0.31 1.10 0.01 176 DIET_1 1407 0.47 1.08 0.24 177 TR_XM_InvalidRelay 1401 0.31 1.08 0.01 178 TM2_M_OBFU_COMMENT 1388 0.61 1.07 0.43 179 XM_HighProb1 1381 0.30 1.06 0.01 180 XMSexyCombo_01 1363 0.39 1.05 0.13 181 RCVD_IN_IADB_SPF 1338 2.30 1.03 2.79 182 RCVD_IN_SBL_CSS 1330 0.31 1.02 0.04 183 XM_B_DNDMA 1322 0.68 1.02 0.55 184 TR_XM_FormFill 1283 0.28 0.99 0.01 185 TR_LOTS_OF_MONEY3 1270 0.45 0.98 0.25 186 RCVD_IN_IADB_DK 1269 2.01 0.98 2.40 187 XMBody_78 1254 0.52 0.96 0.35 188 RCVD_IN_IADB_SENDERID 1254 2.05 0.96 2.47 189 XMSlimDrugH 1239 0.70 0.95 0.61 190 URIBL_BLACK 1234 0.27 0.95 0.02 191 MPART_ALT_DIFF_COUNT 1231 0.55 0.95 0.39 192 HELO_DYNAMIC_SPLIT_IP 1227 0.26 0.94 0.00 193 T_TooManySym_02 1225 2.23 0.94 2.72 194 XM_B_COVIDMETA 1222 0.35 0.94 0.12 195 BAYES_05 1222 2.73 0.94 3.41 196 DKIM_ADSP_CUSTOM_MED 1217 0.74 0.94 0.66 197 ANY_BOUNCE_MESSAGE 1202 3.53 0.92 4.52 198 BOUNCE_MESSAGE 1202 3.53 0.92 4.52 199 TR_Mismatch_TLD_02 1202 0.30 0.92 0.06 200 TM2_M_A_HREF_HREF 1142 0.40 0.88 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 340355 99.10 98.13 99.46 2 HTML_MESSAGE 301141 89.82 94.61 88.00 3 RELAYCOUNTRY_US 282969 82.23 81.00 82.69 4 XM_B_Unicode 242718 74.40 83.54 70.93 5 DKIM_SIGNED 224839 72.09 88.90 65.70 6 XM_DK_Pass 221684 70.09 84.08 64.78 7 DKIM_VALID 218566 69.22 83.29 63.87 8 BAYES_50 195343 52.76 41.36 57.08 9 DCC_CHECK_NEGATIVE 195315 47.78 23.31 57.08 10 DKIM_VALID_AU 176833 55.30 64.84 51.68 11 DCC_CHECK 146729 51.73 75.02 42.88 12 XM_B_Unicode3 145358 44.62 50.27 42.48 13 XM_B_SpammyWords 144083 49.38 68.55 42.11 14 XMListUnsubscribeExists 140785 48.34 67.28 41.14 15 T_TM2_M_HEADER_IN_MSG 96181 26.97 23.99 28.11 16 DKIM_VALID_EF 91400 27.97 31.30 26.71 17 HTML_FONT_LOW_CONTRAST 84499 28.30 37.78 24.69 18 LOC_TINY_FONT_1 83577 30.72 47.30 24.42 19 MIME_HTML_ONLY 80172 25.38 30.51 23.43 20 XMSubLong 77995 23.70 26.11 22.79 21 FVGT_m_MULTI_ODD 74867 25.08 33.52 21.88 22 T_KAM_HTML_FONT_INVALID 65454 21.90 29.19 19.13 23 XM_B_SpammyWords2 58589 23.19 39.18 17.12 24 RCVD_IN_MSPIKE_WL 53575 14.08 9.92 15.66 25 FSL_BULK_SIG 50841 13.58 10.24 14.86 26 ALL_TRUSTED 50714 11.37 2.29 14.82 27 BAYES_00 48728 10.55 0.85 14.24 28 HTML_IMAGE_RATIO_04 47868 11.59 5.28 13.99 29 RCVD_IN_MSPIKE_H2 45881 15.03 19.30 13.41 30 XM_Multi_Part_URI 41809 14.77 21.48 12.22 31 HTML_FONT_FACE_BAD 41728 9.03 0.69 12.19 32 USER_IN_DEF_DKIM_WL 41565 9.45 2.34 12.15 33 XM_H_Trusted_IP 39403 8.34 0.00 11.51 34 TR_XM_DK_Unsub 38999 14.43 22.42 11.40 35 XMStrtUSub 37155 9.44 5.71 10.86 36 UNPARSEABLE_RELAY 35794 12.77 18.84 10.46 37 XM_Evil_Numbers_Gen 34754 10.09 9.91 10.16 38 MPART_ALT_DIFF 32964 8.72 6.33 9.63 39 XM_B_PhoneNumber 32501 8.76 6.82 9.50 40 XM_B_Unsub 29976 11.52 18.80 8.76 41 TooManyTo_001 28195 7.30 4.82 8.24 42 MIME_HTML_ONLY_MULTI 26168 6.46 3.32 7.65 43 LotsOfNums_01 25981 7.29 6.48 7.59 44 RCVD_IN_MSPIKE_H3 23560 6.53 5.61 6.88 45 TR_XM_BayesUnsub 21879 9.55 17.86 6.39 46 XM_DKIMWhitelistDomains 21669 4.59 0.01 6.33 47 TR_XM_DK_Bayes 21480 4.73 0.66 6.28 48 TR_XM_DK_Bayes1 21028 4.63 0.65 6.14 49 BAYES_40 20995 5.04 2.17 6.14 50 XM_B_Phish_Phrases 19277 6.61 9.19 5.63 51 BAYES_60 19172 6.19 7.75 5.60 52 RCVD_IN_MSPIKE_H5 18570 4.46 1.93 5.43 53 XM_H_GMP 18448 5.23 4.81 5.39 54 TR_MAX_INTL_RELAY 18015 7.50 13.37 5.26 55 T_TooManySym_01 17975 4.59 2.85 5.25 56 TR_XM_DK_Bayes2 17333 3.77 0.36 5.07 57 BAYES_20 17316 4.09 1.54 5.06 58 XM_H_Long_From01 17313 5.32 6.01 5.06 59 LOTS_OF_MONEY 17071 6.73 11.33 4.99 60 XM_PDF 15682 3.56 0.87 4.58 61 MIME_QP_LONG_LINE 15573 4.15 3.09 4.55 62 ANY_BOUNCE_MESSAGE 15476 3.53 0.92 4.52 63 BOUNCE_MESSAGE 15473 3.53 0.92 4.52 64 XM_B_SpammyWords3 15220 7.18 14.36 4.45 65 HTML_IMAGE_RATIO_06 14704 4.01 3.24 4.30 66 XM_DK_Undo_02 14584 14.16 40.22 4.26 67 XMSubNoVowel 14470 3.20 0.48 4.23 68 RCVD_IN_VALIDITY_SAFE 13880 3.49 2.02 4.06 69 XMNumbers 13540 3.97 4.01 3.96 70 HTML_IMAGE_RATIO_02 13342 4.70 6.79 3.90 71 XM_UncommonTLD01 12742 4.20 5.46 3.72 72 TR_XM_SpammyWords4 11857 5.38 10.41 3.46 73 RCVD_IN_VALIDITY_CERTIFIED 11771 2.89 1.43 3.44 74 XMSubMetaSx_00 11722 4.52 7.40 3.43 75 BAYES_05 11655 2.73 0.94 3.41 76 RCVD_IN_MSPIKE_H4 11445 3.08 2.38 3.34 77 TooManyTo_002 11304 2.60 0.76 3.30 78 T_REMOTE_IMAGE 11252 2.81 1.55 3.29 79 BAYES_99 10970 10.79 30.76 3.21 80 RCVD_IN_IADB_LISTED 10959 2.64 1.17 3.20 81 BAYES_80 10835 4.58 8.29 3.17 82 RELAYCOUNTRY_META 10395 6.99 17.38 3.04 83 RCVD_IN_IADB_SPF 9533 2.30 1.03 2.79 84 MAILING_LIST_MULTI 9324 2.59 2.23 2.72 85 T_TooManySym_02 9303 2.23 0.94 2.72 86 HTML_MIME_NO_HTML_TAG 8623 2.20 1.36 2.52 87 HTML_IMAGE_RATIO_08 8468 2.61 2.96 2.47 88 RCVD_IN_IADB_SENDERID 8441 2.05 0.96 2.47 89 SCC_BODY_URI_ONLY 8372 2.28 1.83 2.45 90 RCVD_IN_IADB_DK 8203 2.01 0.98 2.40 91 BAYES_999 8155 8.34 24.01 2.38 92 T_XMDrugObfuBody_14 8074 2.86 4.18 2.36 93 BOTNET_IPINHOSTNAME 8048 5.47 13.68 2.35 94 XM_B_SpammyTLD 7504 2.47 3.19 2.19 95 MIME_HTML_MOSTLY 7484 2.59 3.67 2.19 96 RCVD_IN_IADB_VOUCHED 7369 1.72 0.57 2.15 97 XMSubLongNoVowel 7259 1.56 0.10 2.12 98 XM_Body_Dirty_Words 7180 3.50 7.19 2.10 99 BAYES_95 7177 2.82 4.71 2.10 100 INVALID_MSGID 7131 1.61 0.38 2.08 101 XMSubGarbage 7102 1.51 0.03 2.08 102 XM_CamelCaseFrm001 6294 2.41 3.92 1.84 103 DKIM_INVALID 6273 2.87 5.60 1.83 104 TR_XM_SpammyWords5 6265 2.45 4.07 1.83 105 TO_MALFORMED 6264 1.33 0.03 1.83 106 TM2_M_VERY_LONG_WORD 6235 2.36 3.79 1.82 107 TR_XM_DKIM_Undo 6124 9.33 29.19 1.79 108 XM_B_URI_Unicode 5863 2.09 3.07 1.71 109 TR_XM_PhishingBody 5814 2.40 4.25 1.70 110 T_XMDrugObfuBody_08 5702 2.01 2.90 1.67 111 SUBJ_ALL_CAPS 5629 1.74 1.99 1.64 112 KHOP_HELO_FCRDNS 5589 1.69 1.85 1.63 113 TM2_M_URI_OPT_OUT 5489 2.04 3.20 1.60 114 TooManyTo_003 5452 1.33 0.65 1.59 115 XM_DK_Undo_01 5368 1.52 1.40 1.57 116 RCVD_IN_IADB_OPTIN 5249 1.21 0.34 1.53 117 TR_XM_SpammyRelay 4800 4.43 12.39 1.40 118 TR_MetaPhish_Combo_01 4783 1.37 1.29 1.40 119 XM_SendGrid 4677 1.33 1.23 1.37 120 XM_B_Investor 4668 2.37 5.03 1.36 121 TR_Symld_Words 4631 1.33 1.26 1.35 122 TR_DCC_Bayes_99 4553 6.98 21.84 1.33 123 XMDiploma_00 4452 1.92 3.56 1.30 124 FROM_EXCESS_BASE64 4415 1.45 1.87 1.29 125 XM_SPF_SoftFail 4404 1.77 3.03 1.29 126 UNTRUSTED_Relay 4369 2.76 6.68 1.28 127 XMSexyCombo_05 4352 2.33 5.13 1.27 128 HTML_IMAGE_ONLY_32 4248 0.95 0.20 1.24 129 HELO_NODOT 4227 0.95 0.19 1.24 130 HELO_NO_DOMAIN 4218 0.94 0.17 1.23 131 TR_XM_UnparsRelay 4155 3.44 9.31 1.21 132 TooManyTo_004 4048 1.02 0.59 1.18 133 XM_GoogleGroups 3900 1.05 0.81 1.14 134 XM_B_Unsub2 3890 1.83 3.66 1.14 135 IN_HORDE_ADDRESS_BOOK 3861 0.84 0.08 1.13 136 URI_NOVOWEL 3840 1.22 1.49 1.12 137 URI_HEX 3770 1.16 1.33 1.10 138 T_TooManySym_03 3759 0.91 0.43 1.10 139 XMStockSpam_06 3731 1.26 1.71 1.09 140 XMCapTrack 3567 0.89 0.50 1.04 141 XM_B_FormFill 3465 0.74 0.03 1.01 142 XM_OfRef6 3418 1.75 3.72 1.00 143 XM_ShortIntro_01 3412 0.87 0.53 1.00 144 XMGappySubj_01 3382 0.76 0.16 0.99 145 BOTNET 3349 3.55 10.33 0.98 146 TooManyTo_005 3337 0.85 0.53 0.98 147 XM_B_COPY_HTML 3311 1.05 1.28 0.97 148 TVD_SPACE_RATIO 3298 0.78 0.31 0.96 149 XM_B_SpammyWords4 3232 1.47 2.85 0.94 150 T_OBFU_PDF_ATTACH 3229 0.73 0.18 0.94 151 XM_E_Blogspot 3203 0.70 0.09 0.94 152 TR_XM_DK_SendGrid 3170 0.89 0.79 0.93 153 MAY_BE_FORGED 3044 0.65 0.01 0.89 154 TVD_RCVD_IP 2937 1.02 1.44 0.86 155 XM_UB50 2866 1.52 3.32 0.84 156 URI_OPTOUT_3LD 2777 0.74 0.57 0.81 157 XMBrknScrpt_02 2730 1.10 1.91 0.80 158 XMGenDplmaNmb 2674 1.24 2.45 0.78 159 T_Symld_Words_02 2646 0.79 0.85 0.77 160 HTTPS_HTTP_MISMATCH 2638 0.97 1.49 0.77 161 XMLngstWrd_00 2599 0.68 0.48 0.76 162 RELAYCOUNTRY_CA 2570 2.14 5.79 0.75 163 SpammyFromTLD_01 2461 1.01 1.77 0.72 164 RCVD_IN_PBL 2437 0.90 1.40 0.71 165 T_FILL_THIS_FORM_SHORT 2429 1.15 2.32 0.71 166 XM_H_Long_From02 2407 1.10 2.15 0.70 167 XM_H_PHPMailer 2398 0.65 0.53 0.70 168 DKIM_ADSP_CUSTOM_MED 2257 0.74 0.94 0.66 169 XMBdyGiftCard01 2146 0.63 0.63 0.63 170 T_XMDrugObfuBody_00 2109 0.95 1.85 0.62 171 XMSlimDrugH 2076 0.70 0.95 0.61 172 RCVD_IN_MSPIKE_BL 2022 1.68 4.53 0.59 173 TR_XM_MSPIKECOMBO 2017 1.67 4.52 0.59 174 XMSubMetaI_00 2000 0.87 1.64 0.58 175 HTML_TAG_BALANCE_BODY 1991 0.79 1.33 0.58 176 XMLngstWrd_01 1961 0.53 0.43 0.57 177 XM_RXBody 1960 0.58 0.60 0.57 178 XMGappySubj_02 1952 0.43 0.05 0.57 179 XMNoVowels 1892 0.51 0.41 0.55 180 XM_B_DNDMA 1889 0.68 1.02 0.55 181 FROM_GOV_DKIM_AU 1810 0.54 0.58 0.53 182 XMPhish30 1809 0.75 1.33 0.53 183 MSGID_FROM_MTA_HEADER 1713 0.40 0.14 0.50 184 MIME_CHARSET_FARAWAY 1707 0.48 0.43 0.50 185 XMPhish14 1699 0.59 0.84 0.50 186 FILL_THIS_FORM 1697 0.42 0.23 0.50 187 RCVD_IN_BL_SPAMCOP_NET 1696 3.10 9.97 0.50 188 XMBSHREFv2 1695 0.46 0.36 0.50 189 TR_XM_Base64_M1 1687 0.58 0.80 0.49 190 TO_NO_BRKTS_HTML_ONLY 1635 0.54 0.72 0.48 191 RELAYCOUNTRY_GB 1585 0.75 1.49 0.46 192 T_XMDrugObfuBody_01 1562 0.36 0.10 0.46 193 LongTLD 1549 0.51 0.68 0.45 194 T_XMHurry_00 1544 0.93 2.19 0.45 195 XMMoneyMeta_00 1536 0.53 0.76 0.45 196 TR_XM_SpammyWords2 1518 3.20 10.45 0.44 197 NML_ADSP_CUSTOM_MED 1506 0.55 0.82 0.44 198 TM2_M_OBFU_COMMENT 1484 0.61 1.07 0.43 199 TR_XM_Spammywords 1479 0.70 1.41 0.43 200 XM_S_SpammyWords 1479 0.70 1.41 0.43 ----------------------------------------------------------------------