Email: 478396 Autolearn: 0 AvgScore: 5.48 AvgScanTime: 1.47 sec Spam: 151922 Autolearn: 0 AvgScore: 15.22 AvgScanTime: 1.65 sec Ham: 326474 Autolearn: 0 AvgScore: 0.95 AvgScanTime: 1.38 sec Time Spent Running SA: 194.88 hours Time Spent Processing Spam: 69.73 hours Time Spent Processing Ham: 125.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 149548 99.17 98.44 99.51 2 HTML_MESSAGE 144712 90.17 95.25 87.81 3 DKIM_SIGNED 134155 79.49 88.31 75.38 4 XM_DK_Pass 127813 77.50 84.13 74.41 5 DKIM_VALID 126733 76.57 83.42 73.39 6 XM_B_Unicode 126660 75.17 83.37 71.35 7 RELAYCOUNTRY_US 116982 80.89 77.00 82.69 8 DCC_CHECK 115835 51.98 76.25 40.69 9 XMListUnsubscribeExists 103607 55.16 68.20 49.10 10 XM_B_SpammyWords 101756 52.77 66.98 46.16 11 DKIM_VALID_AU 100066 61.99 65.87 60.18 12 LOC_TINY_FONT_1 74594 35.01 49.10 28.45 13 XM_B_Unicode3 74591 43.46 49.10 40.83 14 XM_DK_Undo_02 63365 16.52 41.71 4.79 15 BAYES_50 61504 55.54 40.48 62.55 16 XM_B_SpammyWords2 58889 25.92 38.76 19.95 17 FVGT_m_MULTI_ODD 54106 28.41 35.61 25.06 18 DKIM_VALID_EF 51437 31.01 33.86 29.68 19 HTML_FONT_LOW_CONTRAST 50670 29.83 33.35 28.20 20 MIME_HTML_ONLY 44034 21.41 28.98 17.89 21 TR_XM_DKIM_Undo 43995 10.51 28.96 1.92 22 BAYES_99 43317 11.45 28.51 3.51 23 T_KAM_HTML_FONT_INVALID 41313 24.41 27.19 23.12 24 TR_XM_DK_Unsub 38765 17.27 25.52 13.43 25 XMSubLong 36469 22.58 24.01 21.91 26 T_TM2_M_HEADER_IN_MSG 33975 28.67 22.36 31.60 27 DCC_CHECK_NEGATIVE 33934 47.53 22.34 59.25 28 BAYES_999 32758 8.65 21.56 2.65 29 RELAYCOUNTRY_META 32520 9.30 21.41 3.67 30 TR_DCC_Bayes_99 31409 7.61 20.67 1.53 31 XM_Multi_Part_URI 30333 15.41 19.97 13.29 32 RCVD_IN_MSPIKE_H2 26809 16.28 17.65 15.64 33 UNPARSEABLE_RELAY 26331 13.41 17.33 11.58 34 XM_B_Unsub 25719 11.01 16.93 8.26 35 TR_MAX_INTL_RELAY 24949 9.21 16.42 5.85 36 TR_XM_BayesUnsub 24850 9.69 16.36 6.59 37 XM_B_SpammyWords3 23510 8.71 15.48 5.56 38 TR_XM_SpammyRelay 21254 5.57 13.99 1.65 39 BOTNET 21140 5.23 13.92 1.19 40 FSL_BULK_SIG 18338 9.41 12.07 8.17 41 LOTS_OF_MONEY 18010 7.55 11.85 5.54 42 BOTNET_IPINHOSTNAME 17872 5.73 11.76 2.92 43 UNTRUSTED_Relay 17490 4.88 11.51 1.79 44 TR_XM_SpammyWords4 15777 5.71 10.38 3.54 45 BAYES_80 15197 5.64 10.00 3.60 46 XM_Evil_Numbers_Gen 14530 9.33 9.56 9.22 47 TR_XM_SpammyWords2 14227 3.31 9.36 0.49 48 BAYES_60 14064 7.53 9.26 6.72 49 TR_XM_UnparsRelay 13992 4.16 9.21 1.81 50 RCVD_IN_BL_SPAMCOP_NET 13935 3.23 9.17 0.47 51 RCVD_IN_MSPIKE_WL 12769 14.38 8.40 17.16 52 XM_UncommonTLD01 12470 5.87 8.21 4.78 53 XM_B_Phish_Phrases 11594 5.84 7.63 5.01 54 LotsOfNums_01 11284 9.10 7.43 9.87 55 RELAYCOUNTRY_CA 9429 2.44 6.21 0.69 56 XM_Body_Dirty_Words 9308 3.56 6.13 2.37 57 XM_B_PhoneNumber 9302 8.56 6.12 9.70 58 RCVD_IN_PSBL 9149 2.20 6.02 0.42 59 HTML_IMAGE_RATIO_02 9140 4.77 6.02 4.19 60 MPART_ALT_DIFF 9108 5.51 6.00 5.28 61 XM_H_Long_From01 8851 5.70 5.83 5.65 62 BOTNET_NORDNS 8624 1.81 5.68 0.01 63 XMSubMetaSx_00 8321 4.34 5.48 3.81 64 BAYES_95 8243 3.25 5.43 2.24 65 RCVD_IN_VALIDITY_RPBL 7528 1.61 4.96 0.05 66 DKIM_INVALID 7422 2.91 4.89 1.99 67 XMStrtUSub 7422 4.62 4.89 4.50 68 RELAYCOUNTRY_RU 7308 1.54 4.81 0.02 69 TR_XM_PhishingBody 7079 2.74 4.66 1.85 70 RCVD_IN_MSPIKE_BL 6871 2.07 4.52 0.92 71 TR_XM_MSPIKECOMBO 6871 2.07 4.52 0.92 72 XM_B_Investor 6857 2.68 4.51 1.83 73 HTML_FONT_TINY_NORDNS 6842 1.48 4.50 0.08 74 HTML_IMAGE_RATIO_04 6531 4.07 4.30 3.96 75 TM2_M_VERY_LONG_WORD 6421 4.51 4.23 4.65 76 XM_UB50 6348 2.15 4.18 1.21 77 XM_B_SpammyTLD 6311 3.09 4.15 2.59 78 RCVD_IN_MSPIKE_H3 6259 6.78 4.12 8.02 79 XMSexyCombo_05 6232 2.17 4.10 1.27 80 XM_H_GMP 6156 5.27 4.05 5.84 81 TR_XM_SPAMCOP 6018 1.35 3.96 0.13 82 TooManyTo_001 6011 6.61 3.96 7.85 83 SCC_BODY_URI_ONLY 5856 2.98 3.85 2.58 84 TR_XM_SpammyWords5 5814 2.26 3.83 1.52 85 FROM_EXCESS_BASE64 5711 2.34 3.76 1.67 86 XM_OfRef6 5636 1.78 3.71 0.88 87 HTML_IMAGE_RATIO_06 5352 3.24 3.52 3.10 88 T_XMDrugObfuBody_08 5122 2.07 3.37 1.47 89 XMNumbers 5095 3.07 3.35 2.93 90 TR_XM_SpammyWords3 5077 1.33 3.34 0.39 91 RCVD_IN_PBL 4993 1.54 3.29 0.72 92 MIME_HTML_MOSTLY 4847 2.84 3.19 2.68 93 XMDiploma_00 4839 2.33 3.19 1.93 94 MIME_QP_LONG_LINE 4812 4.73 3.17 5.46 95 XM_URI_RBL 4795 1.21 3.16 0.30 96 TR_XM_NoHeaderRelay 4766 1.12 3.14 0.18 97 T_XMDrugObfuBody_14 4744 2.28 3.12 1.89 98 TR_Symld_Words 4678 1.96 3.08 1.44 99 TM2_M_URI_OPT_OUT 4633 2.10 3.05 1.66 100 HTML_IMAGE_RATIO_08 4593 2.47 3.02 2.22 101 XM_B_Unsub2 4544 1.85 2.99 1.32 102 MIME_HTML_ONLY_MULTI 4528 2.51 2.98 2.29 103 XM_SPF_SoftFail 4514 1.90 2.97 1.39 104 XM_CamelCaseFrm001 4187 2.64 2.76 2.59 105 RCVD_IN_MSPIKE_L3 4002 1.32 2.63 0.71 106 SpammyFromTLD_02 3998 1.18 2.63 0.50 107 XM_B_URI_Unicode 3947 2.14 2.60 1.93 108 T_XMHurry_00 3841 1.18 2.53 0.55 109 RELAYCOUNTRY_AU 3779 1.18 2.49 0.57 110 RCVD_IN_MSPIKE_H4 3746 3.31 2.47 3.70 111 T_REMOTE_IMAGE 3725 3.21 2.45 3.56 112 T_FILL_THIS_FORM_SHORT 3700 1.37 2.44 0.87 113 USER_IN_DEF_DKIM_WL 3652 9.84 2.40 13.30 114 T_HTML_ATTACH 3574 0.79 2.35 0.06 115 SUBJ_ALL_CAPS 3441 2.04 2.26 1.93 116 TR_LOTS_OF_MONEY3 3402 0.95 2.24 0.35 117 RCVD_IN_VALIDITY_SAFE 3381 3.20 2.23 3.65 118 XM_B_SpammyWords4 3364 1.21 2.21 0.74 119 XM_UB60 3284 0.74 2.16 0.08 120 T_TooManySym_01 3230 4.49 2.13 5.58 121 T_OBFU_HTML_ATTACH 3158 0.66 2.08 0.00 122 TR_XM_HtmlAttach 3157 0.66 2.08 0.00 123 KHOP_HELO_FCRDNS 3139 2.94 2.07 3.35 124 DIET_1 3135 0.80 2.06 0.22 125 TR_XM_INV_DKIM 3101 0.66 2.04 0.01 126 BAYES_40 3054 4.47 2.01 5.61 127 XM_UB80 3050 0.65 2.01 0.01 128 XM_H_Long_From02 3007 1.14 1.98 0.75 129 XMGenDplmaNmb 2920 1.42 1.92 1.18 130 XMBody_17 2904 0.90 1.91 0.43 131 TR_XM_MSPIKECOMBO2 2867 0.64 1.89 0.06 132 XM_DIRTYINTL 2827 0.64 1.86 0.06 133 RCVD_IN_VALIDITY_CERTIFIED 2805 2.70 1.85 3.09 134 XMStockSpam_06 2765 1.45 1.82 1.28 135 RCVD_IN_MSPIKE_H5 2764 4.29 1.82 5.43 136 XM_UB99 2759 0.58 1.82 0.00 137 XM_B_Phish66 2723 0.79 1.79 0.32 138 MAILING_LIST_MULTI 2682 2.55 1.77 2.92 139 T_XMDrugObfuBody_00 2649 1.07 1.74 0.76 140 ALL_TRUSTED 2597 10.19 1.71 14.13 141 SpammyFromTLD_01 2596 1.24 1.71 1.02 142 XM_HighProb1 2556 0.54 1.68 0.00 143 BAYES_20 2552 3.19 1.68 3.89 144 URI_NOVOWEL 2494 1.37 1.64 1.25 145 PLING_QUERY 2417 0.87 1.59 0.53 146 XMBdyGiftCard01 2408 0.70 1.59 0.28 147 RCVD_IN_MSPIKE_L4 2312 0.62 1.52 0.20 148 URI_TRY_3LD 2248 0.78 1.48 0.45 149 URI_HEX 2227 1.27 1.47 1.18 150 BOUNCE_MESSAGE 2159 5.30 1.42 7.11 151 ANY_BOUNCE_MESSAGE 2159 5.30 1.42 7.11 152 HTML_MIME_NO_HTML_TAG 2132 2.10 1.40 2.43 153 TM2_M_A_HREF_HREF 2130 0.70 1.40 0.37 154 RCVD_IN_ZEN_LASTEXTERNAL 2116 0.44 1.39 0.00 155 SHORTCIRCUIT 2116 0.44 1.39 0.00 156 XMBrknScrpt_02 2096 0.95 1.38 0.75 157 DKIM_ADSP_NXDOMAIN 1986 0.60 1.31 0.27 158 XMPhish30 1985 0.90 1.31 0.72 159 RCVD_IN_IADB_LISTED 1962 2.88 1.29 3.62 160 RCVD_IN_SBL_CSS 1918 0.43 1.26 0.04 161 MPART_ALT_DIFF_COUNT 1898 0.75 1.25 0.52 162 RCVD_IN_XBL 1875 0.40 1.23 0.02 163 HTTPS_HTTP_MISMATCH 1866 0.88 1.23 0.71 164 RELAYCOUNTRY_FR 1865 0.55 1.23 0.24 165 XM_SendGrid 1859 1.43 1.22 1.53 166 XM_DK_Undo_01 1852 1.61 1.22 1.79 167 RDNS_DYNAMIC 1832 0.49 1.21 0.16 168 HTML_IMAGE_ONLY_20 1820 0.63 1.20 0.36 169 TR_LOTS_OF_MONEY2 1812 0.46 1.19 0.12 170 T_MONEY_PERCENT 1812 0.46 1.19 0.12 171 PDS_RDNS_DYNAMIC_FP 1809 0.40 1.19 0.03 172 LongTLD 1803 0.78 1.19 0.59 173 TR_XM_InvalidRelay 1798 0.38 1.18 0.01 174 T_Symld_Words_02 1752 0.77 1.15 0.59 175 TR_XM_MaxSPIKE 1742 0.40 1.15 0.05 176 RCVD_IN_IADB_SPF 1729 2.51 1.14 3.14 177 URIBL_BLACK 1722 0.37 1.13 0.02 178 XMBody_78 1720 0.58 1.13 0.32 179 XM_ProductURIs 1669 0.92 1.10 0.83 180 DKIM_ADSP_CUSTOM_MED 1650 0.92 1.09 0.85 181 XM_UB999 1644 0.34 1.08 0.00 182 XM_B_COPY_HTML 1637 0.71 1.08 0.54 183 TR_XM_RelayPhish 1630 0.40 1.07 0.08 184 TR_Mismatch_TLD_02 1628 0.41 1.07 0.11 185 RCVD_IN_IADB_DK 1603 2.16 1.06 2.67 186 XMSubMetaI_00 1593 0.62 1.05 0.42 187 MultiRelay_CC 1590 0.43 1.05 0.14 188 TVD_RCVD_IP 1589 0.89 1.05 0.81 189 RCVD_IN_IADB_SENDERID 1580 2.23 1.04 2.78 190 TR_XM_PHPForged 1577 0.65 1.04 0.46 191 TR_XM_PHPDW 1562 0.65 1.03 0.47 192 TR_XM_FormFill2 1560 0.64 1.03 0.47 193 XM_H_PHPOS 1521 0.63 1.00 0.45 194 XM_UB95 1512 0.32 1.00 0.00 195 SHOPIFY_IMG_NOT_RCVD_SFY 1487 0.47 0.98 0.23 196 THIS_AD 1480 0.52 0.97 0.31 197 URIBL_SBL_A 1452 0.31 0.96 0.00 198 URIBL_SBL 1452 0.31 0.96 0.00 199 SH_BODYURI_REVERSE_SBL 1443 0.31 0.95 0.01 200 XM_Body_Obfu01 1430 0.52 0.94 0.33 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 324878 99.17 98.44 99.51 2 HTML_MESSAGE 286663 90.17 95.25 87.81 3 RELAYCOUNTRY_US 269973 80.89 77.00 82.69 4 DKIM_SIGNED 246102 79.49 88.31 75.38 5 XM_DK_Pass 242925 77.50 84.13 74.41 6 DKIM_VALID 239598 76.57 83.42 73.39 7 XM_B_Unicode 232937 75.17 83.37 71.35 8 BAYES_50 204216 55.54 40.48 62.55 9 DKIM_VALID_AU 196479 61.99 65.87 60.18 10 DCC_CHECK_NEGATIVE 193435 47.53 22.34 59.25 11 XMListUnsubscribeExists 160291 55.16 68.20 49.10 12 XM_B_SpammyWords 150693 52.77 66.98 46.16 13 XM_B_Unicode3 133313 43.46 49.10 40.83 14 DCC_CHECK 132839 51.98 76.25 40.69 15 T_TM2_M_HEADER_IN_MSG 103167 28.67 22.36 31.60 16 DKIM_VALID_EF 96893 31.01 33.86 29.68 17 LOC_TINY_FONT_1 92891 35.01 49.10 28.45 18 HTML_FONT_LOW_CONTRAST 92054 29.83 33.35 28.20 19 FVGT_m_MULTI_ODD 81805 28.41 35.61 25.06 20 T_KAM_HTML_FONT_INVALID 75477 24.41 27.19 23.12 21 XMSubLong 71531 22.58 24.01 21.91 22 XM_B_SpammyWords2 65119 25.92 38.76 19.95 23 MIME_HTML_ONLY 58395 21.41 28.98 17.89 24 RCVD_IN_MSPIKE_WL 56018 14.38 8.40 17.16 25 RCVD_IN_MSPIKE_H2 51062 16.28 17.65 15.64 26 ALL_TRUSTED 46128 10.19 1.71 14.13 27 TR_XM_DK_Unsub 43849 17.27 25.52 13.43 28 USER_IN_DEF_DKIM_WL 43418 9.84 2.40 13.30 29 XM_Multi_Part_URI 43380 15.41 19.97 13.29 30 UNPARSEABLE_RELAY 37812 13.41 17.33 11.58 31 LotsOfNums_01 32238 9.10 7.43 9.87 32 XM_B_PhoneNumber 31654 8.56 6.12 9.70 33 BAYES_00 31579 6.77 0.54 9.67 34 XM_Evil_Numbers_Gen 30117 9.33 9.56 9.22 35 XM_B_Unsub 26973 11.01 16.93 8.26 36 FSL_BULK_SIG 26674 9.41 12.07 8.17 37 RCVD_IN_MSPIKE_H3 26184 6.78 4.12 8.02 38 TooManyTo_001 25613 6.61 3.96 7.85 39 XM_DKIMWhitelistDomains 23353 4.88 0.01 7.15 40 BOUNCE_MESSAGE 23217 5.30 1.42 7.11 41 ANY_BOUNCE_MESSAGE 23217 5.30 1.42 7.11 42 BAYES_60 21936 7.53 9.26 6.72 43 TR_XM_BayesUnsub 21530 9.69 16.36 6.59 44 TR_XM_DK_Bayes 21144 4.54 0.39 6.48 45 TR_XM_DK_Bayes1 20777 4.47 0.39 6.36 46 TR_MAX_INTL_RELAY 19088 9.21 16.42 5.85 47 XM_H_GMP 19070 5.27 4.05 5.84 48 XM_H_Long_From01 18430 5.70 5.83 5.65 49 BAYES_40 18318 4.47 2.01 5.61 50 T_TooManySym_01 18228 4.49 2.13 5.58 51 XM_B_SpammyWords3 18157 8.71 15.48 5.56 52 LOTS_OF_MONEY 18091 7.55 11.85 5.54 53 MIME_QP_LONG_LINE 17816 4.73 3.17 5.46 54 RCVD_IN_MSPIKE_H5 17741 4.29 1.82 5.43 55 TR_XM_DK_Bayes2 17439 3.74 0.29 5.34 56 MPART_ALT_DIFF 17240 5.51 6.00 5.28 57 XM_B_Phish_Phrases 16354 5.84 7.63 5.01 58 XM_DK_Undo_02 15651 16.52 41.71 4.79 59 XM_UncommonTLD01 15600 5.87 8.21 4.78 60 TM2_M_VERY_LONG_WORD 15166 4.51 4.23 4.65 61 XMStrtUSub 14682 4.62 4.89 4.50 62 XM_PDF 13967 3.15 0.71 4.28 63 HTML_IMAGE_RATIO_02 13693 4.77 6.02 4.19 64 HTML_IMAGE_RATIO_04 12928 4.07 4.30 3.96 65 BAYES_20 12691 3.19 1.68 3.89 66 XMSubMetaSx_00 12440 4.34 5.48 3.81 67 RCVD_IN_MSPIKE_H4 12094 3.31 2.47 3.70 68 RELAYCOUNTRY_META 11969 9.30 21.41 3.67 69 RCVD_IN_VALIDITY_SAFE 11932 3.20 2.23 3.65 70 RCVD_IN_IADB_LISTED 11814 2.88 1.29 3.62 71 BAYES_80 11762 5.64 10.00 3.60 72 T_REMOTE_IMAGE 11609 3.21 2.45 3.56 73 TR_XM_SpammyWords4 11559 5.71 10.38 3.54 74 BAYES_99 11467 11.45 28.51 3.51 75 MAY_BE_FORGED 11132 2.49 0.52 3.41 76 KHOP_HELO_FCRDNS 10924 2.94 2.07 3.35 77 RCVD_IN_IADB_SPF 10260 2.51 1.14 3.14 78 HTML_IMAGE_RATIO_06 10130 3.24 3.52 3.10 79 RCVD_IN_VALIDITY_CERTIFIED 10090 2.70 1.85 3.09 80 XMNumbers 9577 3.07 3.35 2.93 81 BOTNET_IPINHOSTNAME 9531 5.73 11.76 2.92 82 MAILING_LIST_MULTI 9517 2.55 1.77 2.92 83 RCVD_IN_IADB_SENDERID 9076 2.23 1.04 2.78 84 T_TooManySym_02 8922 2.08 0.66 2.73 85 MIME_HTML_MOSTLY 8762 2.84 3.19 2.68 86 RCVD_IN_IADB_DK 8710 2.16 1.06 2.67 87 BAYES_999 8647 8.65 21.56 2.65 88 XM_B_SpammyTLD 8459 3.09 4.15 2.59 89 XM_CamelCaseFrm001 8447 2.64 2.76 2.59 90 SCC_BODY_URI_ONLY 8414 2.98 3.85 2.58 91 RCVD_IN_IADB_VOUCHED 8001 1.88 0.67 2.45 92 HTML_MIME_NO_HTML_TAG 7932 2.10 1.40 2.43 93 TooManyTo_002 7889 1.86 0.67 2.42 94 XM_Body_Dirty_Words 7726 3.56 6.13 2.37 95 MIME_HTML_ONLY_MULTI 7475 2.51 2.98 2.29 96 BAYES_95 7318 3.25 5.43 2.24 97 INVALID_MSGID 7276 1.58 0.19 2.23 98 HTML_IMAGE_RATIO_08 7236 2.47 3.02 2.22 99 BAYES_05 7184 1.72 0.70 2.20 100 TO_MALFORMED 6506 1.37 0.02 1.99 101 DKIM_INVALID 6504 2.91 4.89 1.99 102 SUBJ_ALL_CAPS 6316 2.04 2.26 1.93 103 XM_B_URI_Unicode 6302 2.14 2.60 1.93 104 XMDiploma_00 6298 2.33 3.19 1.93 105 TR_XM_DKIM_Undo 6267 10.51 28.96 1.92 106 T_XMDrugObfuBody_14 6178 2.28 3.12 1.89 107 HTML_IMAGE_ONLY_32 6044 1.40 0.44 1.85 108 TR_XM_PhishingBody 6037 2.74 4.66 1.85 109 XM_B_Investor 5964 2.68 4.51 1.83 110 TR_XM_UnparsRelay 5902 4.16 9.21 1.81 111 XM_DK_Undo_01 5855 1.61 1.22 1.79 112 UNTRUSTED_Relay 5839 4.88 11.51 1.79 113 RCVD_IN_IADB_OPTIN 5836 1.37 0.48 1.79 114 FROM_EXCESS_BASE64 5466 2.34 3.76 1.67 115 TM2_M_URI_OPT_OUT 5412 2.10 3.05 1.66 116 TR_XM_SpammyRelay 5396 5.57 13.99 1.65 117 TR_DCC_Bayes_99 5000 7.61 20.67 1.53 118 XM_SendGrid 4996 1.43 1.22 1.53 119 TR_XM_SpammyWords5 4976 2.26 3.83 1.52 120 TooManyTo_003 4871 1.18 0.51 1.49 121 T_XMDrugObfuBody_08 4802 2.07 3.37 1.47 122 TR_Symld_Words 4708 1.96 3.08 1.44 123 XM_SPF_SoftFail 4552 1.90 2.97 1.39 124 HELO_NODOT 4349 0.94 0.10 1.33 125 HELO_NO_DOMAIN 4342 0.94 0.09 1.33 126 XM_B_Unsub2 4309 1.85 2.99 1.32 127 TR_MetaPhish_Combo_01 4289 1.19 0.93 1.31 128 XMStockSpam_06 4180 1.45 1.82 1.28 129 XMSexyCombo_05 4162 2.17 4.10 1.27 130 XMGappySubj_01 4116 0.95 0.28 1.26 131 IN_HORDE_ADDRESS_BOOK 4086 0.88 0.09 1.25 132 URI_NOVOWEL 4072 1.37 1.64 1.25 133 XM_UB50 3946 2.15 4.18 1.21 134 BOTNET 3888 5.23 13.92 1.19 135 XMGenDplmaNmb 3866 1.42 1.92 1.18 136 URI_HEX 3857 1.27 1.47 1.18 137 XM_GoogleGroups 3830 1.03 0.74 1.17 138 XM_ShortIntro_01 3665 1.06 0.91 1.12 139 TooManyTo_004 3647 0.89 0.40 1.12 140 T_TooManySym_03 3551 0.84 0.31 1.09 141 XMCapTrack 3504 0.87 0.42 1.07 142 SpammyFromTLD_01 3319 1.24 1.71 1.02 143 MIME_CHARSET_FARAWAY 3276 0.93 0.77 1.00 144 TR_XM_DK_SendGrid 3251 0.93 0.78 1.00 145 XMLngstWrd_00 3037 0.77 0.41 0.93 146 RCVD_IN_MSPIKE_BL 3011 2.07 4.52 0.92 147 TR_XM_MSPIKECOMBO 3011 2.07 4.52 0.92 148 CHARSET_FARAWAY_HEADER 2930 0.81 0.63 0.90 149 TVD_SPACE_RATIO 2894 0.67 0.20 0.89 150 XM_OfRef6 2871 1.78 3.71 0.88 151 DC_PNG_UNO_LARGO 2865 0.72 0.39 0.88 152 T_FILL_THIS_FORM_SHORT 2833 1.37 2.44 0.87 153 TooManyTo_005 2826 0.71 0.37 0.87 154 DKIM_ADSP_CUSTOM_MED 2772 0.92 1.09 0.85 155 XM_ProductURIs 2719 0.92 1.10 0.83 156 FROM_GOV_DKIM_AU 2693 0.60 0.12 0.82 157 TVD_RCVD_IP 2651 0.89 1.05 0.81 158 T_XMDrugObfuBody_00 2475 1.07 1.74 0.76 159 XM_H_Long_From02 2445 1.14 1.98 0.75 160 XMBrknScrpt_02 2438 0.95 1.38 0.75 161 XM_B_SpammyWords4 2429 1.21 2.21 0.74 162 XM_H_PHPMailer 2410 0.64 0.43 0.74 163 RCVD_IN_PBL 2355 1.54 3.29 0.72 164 XMPhish30 2338 0.90 1.31 0.72 165 HTTPS_HTTP_MISMATCH 2332 0.88 1.23 0.71 166 RCVD_IN_MSPIKE_L3 2323 1.32 2.63 0.71 167 HTML_IMAGE_ONLY_04 2322 0.61 0.39 0.71 168 RELAYCOUNTRY_CA 2261 2.44 6.21 0.69 169 HTML_SHORT_LINK_IMG_1 2255 0.60 0.41 0.69 170 XMGappySubj_02 2168 0.49 0.10 0.66 171 XMNoVowels 2056 0.62 0.59 0.63 172 T_OBFU_PDF_ATTACH 1998 0.47 0.16 0.61 173 LongTLD 1938 0.78 1.19 0.59 174 T_Symld_Words_02 1917 0.77 1.15 0.59 175 RELAYCOUNTRY_AU 1860 1.18 2.49 0.57 176 RELAYCOUNTRY_GB 1812 0.64 0.83 0.56 177 T_XMHurry_00 1806 1.18 2.53 0.55 178 FORGED_GMAIL_RCVD 1762 0.60 0.71 0.54 179 NML_ADSP_CUSTOM_MED 1759 0.62 0.80 0.54 180 XM_B_COPY_HTML 1755 0.71 1.08 0.54 181 PLING_QUERY 1737 0.87 1.59 0.53 182 HTML_TAG_BALANCE_BODY 1734 0.65 0.90 0.53 183 MPART_ALT_DIFF_COUNT 1698 0.75 1.25 0.52 184 T_TVD_MIME_NO_HEADERS 1681 0.37 0.07 0.51 185 TR_XM_Base64_M1 1670 0.57 0.69 0.51 186 SpammyFromTLD_02 1629 1.18 2.63 0.50 187 TR_XM_SpammyWords2 1591 3.31 9.36 0.49 188 XMSlimDrugH 1583 0.58 0.79 0.48 189 XMBSHREFv2 1563 0.43 0.32 0.48 190 XMMoneyMeta_00 1544 0.56 0.74 0.47 191 XMLngstWrd_01 1541 0.43 0.35 0.47 192 TR_XM_PHPDW 1528 0.65 1.03 0.47 193 RCVD_IN_BL_SPAMCOP_NET 1523 3.23 9.17 0.47 194 TR_XM_FormFill2 1519 0.64 1.03 0.47 195 TR_XM_PHPForged 1509 0.65 1.04 0.46 196 XM_H_PHPOS 1479 0.63 1.00 0.45 197 URI_TRY_3LD 1472 0.78 1.48 0.45 198 MSGID_FROM_MTA_HEADER 1460 0.39 0.25 0.45 199 HTML_FONT_FACE_BAD 1443 0.44 0.44 0.44 200 XMBody_17 1416 0.90 1.91 0.43 ----------------------------------------------------------------------