Email: 481276 Autolearn: 0 AvgScore: 5.51 AvgScanTime: 1.44 sec Spam: 153666 Autolearn: 0 AvgScore: 14.32 AvgScanTime: 1.65 sec Ham: 327610 Autolearn: 0 AvgScore: 1.38 AvgScanTime: 1.35 sec Time Spent Running SA: 192.94 hours Time Spent Processing Spam: 70.35 hours Time Spent Processing Ham: 122.60 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147680 90.78 96.10 88.28 2 DKIM_SIGNED 136123 79.33 88.58 74.99 3 RELAYCOUNTRY_US 129682 81.92 84.39 80.76 4 XM_B_Unicode 128567 74.69 83.67 70.48 5 XM_DK_Pass 127052 76.88 82.68 74.16 6 DKIM_VALID 126259 76.07 82.16 73.21 7 DCC_CHECK 111617 51.35 72.64 41.37 8 XM_B_SpammyWords 105694 52.71 68.78 45.17 9 XMListUnsubscribeExists 102003 54.62 66.38 49.11 10 DKIM_VALID_AU 98856 61.09 64.33 59.57 11 XM_B_Unicode3 74500 43.68 48.48 41.43 12 LOC_TINY_FONT_1 74414 34.67 48.43 28.21 13 BAYES_50 65060 54.79 42.34 60.62 14 HTML_FONT_LOW_CONTRAST 63694 33.09 41.45 29.17 15 XM_DK_Undo_02 58588 15.46 38.13 4.83 16 XM_B_SpammyWords2 57615 24.56 37.49 18.50 17 FVGT_m_MULTI_ODD 54356 28.26 35.37 24.92 18 DKIM_VALID_EF 45807 29.85 29.81 29.88 19 T_KAM_HTML_FONT_INVALID 43511 24.12 28.32 22.15 20 BAYES_99 43090 11.24 28.04 3.36 21 XMSubLong 41518 24.28 27.02 22.99 22 TR_XM_DKIM_Undo 40416 9.76 26.30 2.00 23 DCC_CHECK_NEGATIVE 39991 48.18 26.02 58.57 24 MIME_HTML_ONLY 39492 22.07 25.70 20.36 25 T_TM2_M_HEADER_IN_MSG 38095 27.90 24.79 29.36 26 RCVD_IN_MSPIKE_H2 35159 19.38 22.88 17.74 27 TR_XM_DK_Unsub 34193 16.43 22.25 13.69 28 BAYES_999 32985 8.58 21.47 2.53 29 XM_Multi_Part_URI 32574 16.03 21.20 13.60 30 UNPARSEABLE_RELAY 30485 14.63 19.84 12.19 31 TR_DCC_Bayes_99 30405 7.23 19.79 1.35 32 XM_B_Unsub 29217 11.74 19.01 8.32 33 TR_XM_BayesUnsub 28044 10.23 18.25 6.46 34 RELAYCOUNTRY_META 24605 7.36 16.01 3.30 35 XM_B_SpammyWords3 22598 7.96 14.71 4.79 36 TR_MAX_INTL_RELAY 22579 8.99 14.69 6.32 37 LOTS_OF_MONEY 20870 8.73 13.58 6.45 38 BOTNET_IPINHOSTNAME 20219 6.27 13.16 3.04 39 XM_Evil_Numbers_Gen 19339 10.95 12.59 10.18 40 TR_XM_SpammyWords4 18862 6.88 12.27 4.34 41 RCVD_IN_BL_SPAMCOP_NET 18364 4.25 11.95 0.64 42 TR_XM_SpammyRelay 17993 4.92 11.71 1.73 43 BOTNET 16293 4.19 10.60 1.19 44 LotsOfNums_01 15632 9.43 10.17 9.09 45 TR_XM_UnparsRelay 15549 4.36 10.12 1.66 46 FSL_BULK_SIG 15085 9.35 9.82 9.12 47 BAYES_80 14001 5.61 9.11 3.96 48 TR_XM_SpammyWords2 13881 3.29 9.03 0.59 49 XM_B_Phish_Phrases 12793 5.93 8.33 4.81 50 BAYES_60 12784 7.66 8.32 7.35 51 RCVD_IN_MSPIKE_WL 12592 13.72 8.19 16.32 52 TM2_M_VERY_LONG_WORD 11327 4.39 7.37 3.00 53 MPART_ALT_DIFF 10943 5.78 7.12 5.15 54 HTML_IMAGE_RATIO_02 10371 5.81 6.75 5.37 55 TR_XM_SPAMCOP 10088 2.19 6.56 0.14 56 DKIM_INVALID 9864 3.26 6.42 1.78 57 XM_B_PhoneNumber 9766 8.43 6.36 9.41 58 XM_UncommonTLD01 8932 4.60 5.81 4.02 59 XMSubMetaSx_00 8922 4.04 5.81 3.21 60 UNTRUSTED_Relay 8751 2.91 5.69 1.61 61 XM_H_Long_From01 8723 5.66 5.68 5.65 62 XM_Body_Dirty_Words 8563 3.29 5.57 2.21 63 BAYES_95 8094 3.28 5.27 2.35 64 ANY_BOUNCE_MESSAGE 7556 5.23 4.92 5.38 65 BOUNCE_MESSAGE 7556 5.23 4.92 5.37 66 XM_H_GMP 7533 5.21 4.90 5.35 67 RELAYCOUNTRY_CA 7137 1.93 4.64 0.66 68 XM_B_Investor 6984 2.45 4.54 1.47 69 TR_XM_MSPIKECOMBO 6978 2.11 4.54 0.97 70 RCVD_IN_MSPIKE_BL 6978 2.11 4.54 0.97 71 XMStrtUSub 6952 4.71 4.52 4.80 72 HTML_IMAGE_RATIO_04 6849 4.43 4.46 4.42 73 MIME_QP_LONG_LINE 6560 5.17 4.27 5.60 74 RCVD_IN_MSPIKE_H3 6543 6.83 4.26 8.04 75 T_XMDrugObfuBody_14 6413 2.67 4.17 1.97 76 TR_XM_PhishingBody 6312 2.43 4.11 1.64 77 TR_XM_NoHeaderRelay 6284 1.43 4.09 0.18 78 XMSexyCombo_05 6075 1.90 3.95 0.94 79 XM_B_SpammyTLD 6064 3.19 3.95 2.84 80 SHORT_URI_2 5584 2.11 3.63 1.39 81 TooManyTo_001 5544 6.44 3.61 7.76 82 XMNumbers 5526 3.41 3.60 3.32 83 TR_XM_SpammyWords5 5474 2.17 3.56 1.51 84 MAY_BE_FORGED 5467 2.38 3.56 1.83 85 TR_XM_SpammyWords3 5370 1.42 3.49 0.45 86 HTML_IMAGE_RATIO_06 5227 3.53 3.40 3.59 87 MIME_HTML_MOSTLY 4833 3.05 3.15 3.00 88 TM2_M_URI_OPT_OUT 4825 2.26 3.14 1.85 89 HTML_IMAGE_ONLY_32 4785 2.26 3.11 1.86 90 XM_H_Long_From02 4748 1.56 3.09 0.84 91 KHOP_HELO_FCRDNS 4636 2.55 3.02 2.33 92 XMDiploma_00 4633 1.96 3.01 1.47 93 DKIM_ADSP_NXDOMAIN 4605 1.15 3.00 0.29 94 MIME_HTML_ONLY_MULTI 4520 2.61 2.94 2.46 95 XM_CamelCaseFrm001 4469 2.13 2.91 1.77 96 XM_B_URI_Unicode 4426 2.17 2.88 1.84 97 T_XMHurry_00 4350 1.45 2.83 0.80 98 XM_URI_RBL 4344 1.14 2.83 0.36 99 USER_IN_DEF_DKIM_WL 4329 9.62 2.82 12.81 100 XM_B_Unsub2 4286 1.75 2.79 1.26 101 XM_OfRef6 4209 1.50 2.74 0.92 102 T_TooManySym_01 4144 4.44 2.70 5.26 103 RELAYCOUNTRY_AU 4101 1.24 2.67 0.57 104 T_XMDrugObfuBody_08 4079 1.81 2.65 1.41 105 XMBody_17 4043 1.14 2.63 0.44 106 XM_SPF_SoftFail 3984 1.72 2.59 1.31 107 HTML_IMAGE_RATIO_08 3949 2.33 2.57 2.21 108 BAYES_40 3894 5.17 2.53 6.40 109 XM_B_SpammyWords4 3808 1.20 2.48 0.61 110 XM_UB50 3797 1.50 2.47 1.05 111 XMBrknScrpt_02 3679 1.67 2.39 1.33 112 RCVD_IN_MSPIKE_L3 3638 1.38 2.37 0.92 113 SpammyFromTLD_02 3533 1.08 2.30 0.51 114 TR_XM_INV_DKIM 3496 0.75 2.28 0.03 115 TR_LOTS_OF_MONEY3 3450 1.19 2.25 0.70 116 FROM_EXCESS_BASE64 3424 1.78 2.23 1.58 117 RELAYCOUNTRY_IN 3306 0.71 2.15 0.03 118 RCVD_IN_MSPIKE_H4 3279 2.81 2.13 3.13 119 RCVD_IN_VALIDITY_SAFE 3217 3.16 2.09 3.66 120 T_XMDrugObfuBody_00 3172 1.31 2.06 0.96 121 RCVD_IN_VALIDITY_RPBL 3147 0.68 2.05 0.03 122 XMStockSpam_06 2969 1.48 1.93 1.27 123 XMBdyGiftCard01 2949 0.81 1.92 0.29 124 XM_H_DKIM_GOOG 2907 0.61 1.89 0.01 125 MAILING_LIST_MULTI 2881 2.60 1.87 2.94 126 RCVD_IN_MSPIKE_H5 2770 4.08 1.80 5.14 127 RCVD_IN_MSPIKE_L4 2708 0.59 1.76 0.05 128 XMGenDplmaNmb 2701 1.12 1.76 0.82 129 XM_SendGrid 2680 1.62 1.74 1.56 130 SUBJ_ALL_CAPS 2668 1.70 1.74 1.68 131 BAYES_20 2660 3.57 1.73 4.43 132 RCVD_IN_VALIDITY_CERTIFIED 2634 2.69 1.71 3.15 133 XMBody_78 2597 0.82 1.69 0.41 134 URI_TRY_3LD 2593 0.95 1.69 0.60 135 URI_NOVOWEL 2563 1.42 1.67 1.30 136 MPART_ALT_DIFF_COUNT 2557 0.93 1.66 0.59 137 SpammyFromTLD_01 2502 1.00 1.63 0.70 138 RCVD_IN_IADB_LISTED 2426 3.03 1.58 3.71 139 DIET_1 2366 0.73 1.54 0.36 140 T_FILL_THIS_FORM_SHORT 2364 1.06 1.54 0.84 141 HTTPS_HTTP_MISMATCH 2220 0.93 1.44 0.69 142 T_REMOTE_IMAGE 2204 2.84 1.43 3.49 143 XMPhish30 2180 0.82 1.42 0.54 144 XM_DK_Undo_01 2167 1.62 1.41 1.71 145 HTML_MIME_NO_HTML_TAG 2132 3.37 1.39 4.30 146 HTML_IMAGE_ONLY_20 2123 0.80 1.38 0.53 147 RCVD_IN_IADB_SPF 2107 2.66 1.37 3.27 148 URI_HEX 2089 1.28 1.36 1.25 149 ALL_TRUSTED 2084 11.44 1.36 16.18 150 SHOPIFY_IMG_NOT_RCVD_SFY 2051 0.59 1.33 0.24 151 XM_B_Phish66 2051 0.69 1.33 0.39 152 RCVD_IN_ZEN_LASTEXTERNAL 2036 0.42 1.32 0.00 153 SHORTCIRCUIT 2036 0.42 1.32 0.00 154 RCVD_IN_IADB_DK 1978 2.33 1.29 2.81 155 THIS_AD 1958 0.77 1.27 0.53 156 XM_B_SEO 1945 0.53 1.27 0.18 157 RCVD_IN_IADB_SENDERID 1938 2.38 1.26 2.91 158 HK_RANDOM_REPLYTO 1893 0.49 1.23 0.14 159 TR_XM_MSPIKECOMBO2 1806 0.42 1.18 0.07 160 XM_ProductURIs 1787 1.03 1.16 0.96 161 DKIM_ADSP_CUSTOM_MED 1730 0.97 1.13 0.89 162 TR_XM_SEO4 1700 0.43 1.11 0.11 163 RELAYCOUNTRY_GB 1667 0.76 1.08 0.60 164 TR_XM_Base64_M1 1654 0.79 1.08 0.66 165 TR_LOTS_OF_MONEY2 1654 0.60 1.08 0.38 166 T_MONEY_PERCENT 1654 0.60 1.08 0.38 167 XMSubMetaI_00 1644 0.65 1.07 0.46 168 STY_INVIS_DIRECT 1641 0.54 1.07 0.30 169 XMHTML_After_End 1618 0.61 1.05 0.40 170 RELAYCOUNTRY_FR 1602 0.54 1.04 0.30 171 XM_B_DNDMA 1596 0.67 1.04 0.50 172 HTML_TAG_BALANCE_BODY 1560 0.66 1.02 0.49 173 TR_Symld_Words 1521 1.21 0.99 1.32 174 TR_XM_RelayPhish 1510 0.36 0.98 0.07 175 HTML_FONT_TINY_NORDNS 1487 0.35 0.97 0.07 176 TR_XM_INTL_Spamhaus 1459 0.39 0.95 0.13 177 XM_B_COPY_HTML 1451 0.72 0.94 0.61 178 RDNS_DYNAMIC 1442 0.39 0.94 0.14 179 FONT_INVIS_MSGID 1432 0.37 0.93 0.10 180 XM_HighProb1 1422 0.30 0.93 0.00 181 NML_ADSP_CUSTOM_MED 1417 0.66 0.92 0.53 182 PDS_RDNS_DYNAMIC_FP 1404 0.31 0.91 0.03 183 LongTLD 1396 0.71 0.91 0.62 184 FORGED_GMAIL_RCVD 1393 0.71 0.91 0.62 185 TR_XM_DK_SendGrid 1389 1.02 0.90 1.07 186 T_Symld_Words_02 1378 0.74 0.90 0.66 187 TR_Mismatch_TLD_02 1374 0.34 0.89 0.09 188 RCVD_IN_PBL 1370 0.73 0.89 0.66 189 XM_UB60 1361 0.33 0.89 0.07 190 FONT_INVIS_NORDNS 1354 0.28 0.88 0.00 191 TR_XM_PHPForged 1334 0.49 0.87 0.31 192 XM_PDF 1332 3.46 0.87 4.67 193 RCVD_IN_PSBL 1331 0.55 0.87 0.41 194 TR_XM_GMP_BULK_SIG 1316 0.40 0.86 0.18 195 TR_XM_PHPDW 1314 0.49 0.86 0.32 196 TR_XM_FormFill2 1312 0.49 0.85 0.32 197 SH_BODYURI_REVERSE_SBL 1301 0.27 0.85 0.00 198 URIBL_SBL 1297 0.27 0.84 0.00 199 URIBL_SBL_A 1297 0.27 0.84 0.00 200 XM_H_PHPOS 1295 0.48 0.84 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 289203 90.78 96.10 88.28 2 RELAYCOUNTRY_US 264580 81.92 84.39 80.76 3 DKIM_SIGNED 245663 79.33 88.58 74.99 4 XM_DK_Pass 242947 76.88 82.68 74.16 5 DKIM_VALID 239838 76.07 82.16 73.21 6 XM_B_Unicode 230913 74.69 83.67 70.48 7 BAYES_50 198610 54.79 42.34 60.62 8 DKIM_VALID_AU 195150 61.09 64.33 59.57 9 DCC_CHECK_NEGATIVE 191887 48.18 26.02 58.57 10 XMListUnsubscribeExists 160885 54.62 66.38 49.11 11 XM_B_SpammyWords 147975 52.71 68.78 45.17 12 XM_B_Unicode3 135735 43.68 48.48 41.43 13 DCC_CHECK 135527 51.35 72.64 41.37 14 DKIM_VALID_EF 97876 29.85 29.81 29.88 15 T_TM2_M_HEADER_IN_MSG 96191 27.90 24.79 29.36 16 HTML_FONT_LOW_CONTRAST 95564 33.09 41.45 29.17 17 LOC_TINY_FONT_1 92424 34.67 48.43 28.21 18 FVGT_m_MULTI_ODD 81645 28.26 35.37 24.92 19 XMSubLong 75317 24.28 27.02 22.99 20 T_KAM_HTML_FONT_INVALID 72560 24.12 28.32 22.15 21 MIME_HTML_ONLY 66714 22.07 25.70 20.36 22 XM_B_SpammyWords2 60610 24.56 37.49 18.50 23 RCVD_IN_MSPIKE_H2 58125 19.38 22.88 17.74 24 RCVD_IN_MSPIKE_WL 53459 13.72 8.19 16.32 25 ALL_TRUSTED 52996 11.44 1.36 16.18 26 TR_XM_DK_Unsub 44859 16.43 22.25 13.69 27 XM_Multi_Part_URI 44557 16.03 21.20 13.60 28 USER_IN_DEF_DKIM_WL 41957 9.62 2.82 12.81 29 UNPARSEABLE_RELAY 39927 14.63 19.84 12.19 30 XM_Evil_Numbers_Gen 33366 10.95 12.59 10.18 31 XM_B_PhoneNumber 30828 8.43 6.36 9.41 32 BAYES_00 30383 6.50 0.58 9.27 33 FSL_BULK_SIG 29893 9.35 9.82 9.12 34 LotsOfNums_01 29770 9.43 10.17 9.09 35 XM_B_Unsub 27268 11.74 19.01 8.32 36 RCVD_IN_MSPIKE_H3 26351 6.83 4.26 8.04 37 TooManyTo_001 25428 6.44 3.61 7.76 38 BAYES_60 24064 7.66 8.32 7.35 39 TR_XM_BayesUnsub 21168 10.23 18.25 6.46 40 LOTS_OF_MONEY 21147 8.73 13.58 6.45 41 BAYES_40 20976 5.17 2.53 6.40 42 TR_MAX_INTL_RELAY 20699 8.99 14.69 6.32 43 TR_XM_DK_Bayes 20319 4.36 0.43 6.20 44 TR_XM_DK_Bayes1 20064 4.30 0.42 6.12 45 XM_DKIMWhitelistDomains 19546 4.07 0.02 5.97 46 XM_H_Long_From01 18495 5.66 5.68 5.65 47 MIME_QP_LONG_LINE 18340 5.17 4.27 5.60 48 ANY_BOUNCE_MESSAGE 17610 5.23 4.92 5.38 49 BOUNCE_MESSAGE 17607 5.23 4.92 5.37 50 HTML_IMAGE_RATIO_02 17589 5.81 6.75 5.37 51 XM_H_GMP 17528 5.21 4.90 5.35 52 T_TooManySym_01 17241 4.44 2.70 5.26 53 MPART_ALT_DIFF 16867 5.78 7.12 5.15 54 RCVD_IN_MSPIKE_H5 16843 4.08 1.80 5.14 55 TR_XM_DK_Bayes2 16836 3.57 0.24 5.14 56 XM_DK_Undo_02 15839 15.46 38.13 4.83 57 XM_B_Phish_Phrases 15756 5.93 8.33 4.81 58 XMStrtUSub 15732 4.71 4.52 4.80 59 XM_B_SpammyWords3 15706 7.96 14.71 4.79 60 XM_PDF 15305 3.46 0.87 4.67 61 BAYES_20 14522 3.57 1.73 4.43 62 HTML_IMAGE_RATIO_04 14472 4.43 4.46 4.42 63 TR_XM_SpammyWords4 14234 6.88 12.27 4.34 64 HTML_MIME_NO_HTML_TAG 14071 3.37 1.39 4.30 65 XM_UncommonTLD01 13184 4.60 5.81 4.02 66 BAYES_80 12987 5.61 9.11 3.96 67 RCVD_IN_IADB_LISTED 12164 3.03 1.58 3.71 68 RCVD_IN_VALIDITY_SAFE 11990 3.16 2.09 3.66 69 HTML_IMAGE_RATIO_06 11767 3.53 3.40 3.59 70 T_REMOTE_IMAGE 11447 2.84 1.43 3.49 71 BAYES_99 11005 11.24 28.04 3.36 72 XMNumbers 10872 3.41 3.60 3.32 73 RELAYCOUNTRY_META 10801 7.36 16.01 3.30 74 RCVD_IN_IADB_SPF 10711 2.66 1.37 3.27 75 XMSubMetaSx_00 10512 4.04 5.81 3.21 76 RCVD_IN_VALIDITY_CERTIFIED 10326 2.69 1.71 3.15 77 RCVD_IN_MSPIKE_H4 10265 2.81 2.13 3.13 78 BOTNET_IPINHOSTNAME 9957 6.27 13.16 3.04 79 MIME_HTML_MOSTLY 9829 3.05 3.15 3.00 80 TM2_M_VERY_LONG_WORD 9812 4.39 7.37 3.00 81 MAILING_LIST_MULTI 9630 2.60 1.87 2.94 82 RCVD_IN_IADB_SENDERID 9527 2.38 1.26 2.91 83 T_TooManySym_02 9374 2.16 0.67 2.86 84 XM_B_SpammyTLD 9295 3.19 3.95 2.84 85 RCVD_IN_IADB_DK 9221 2.33 1.29 2.81 86 BAYES_999 8292 8.58 21.47 2.53 87 RCVD_IN_IADB_VOUCHED 8202 1.95 0.78 2.50 88 MIME_HTML_ONLY_MULTI 8061 2.61 2.94 2.46 89 INVALID_MSGID 7848 1.74 0.33 2.40 90 BAYES_95 7709 3.28 5.27 2.35 91 KHOP_HELO_FCRDNS 7635 2.55 3.02 2.33 92 TooManyTo_002 7529 1.74 0.55 2.30 93 BAYES_05 7354 1.77 0.75 2.24 94 XM_Body_Dirty_Words 7253 3.29 5.57 2.21 95 HTML_IMAGE_RATIO_08 7245 2.33 2.57 2.21 96 MSGID_NOFQDN1 7015 1.49 0.12 2.14 97 TR_XM_DKIM_Undo 6544 9.76 26.30 2.00 98 T_XMDrugObfuBody_14 6454 2.67 4.17 1.97 99 TO_MALFORMED 6311 1.31 0.00 1.93 100 HTML_IMAGE_ONLY_32 6097 2.26 3.11 1.86 101 TM2_M_URI_OPT_OUT 6055 2.26 3.14 1.85 102 XM_B_URI_Unicode 6035 2.17 2.88 1.84 103 MAY_BE_FORGED 5985 2.38 3.56 1.83 104 DKIM_INVALID 5825 3.26 6.42 1.78 105 XM_CamelCaseFrm001 5794 2.13 2.91 1.77 106 RCVD_IN_IADB_OPTIN 5711 1.35 0.53 1.74 107 TR_XM_SpammyRelay 5672 4.92 11.71 1.73 108 XM_DK_Undo_01 5609 1.62 1.41 1.71 109 SUBJ_ALL_CAPS 5508 1.70 1.74 1.68 110 TR_XM_UnparsRelay 5436 4.36 10.12 1.66 111 TR_XM_PhishingBody 5374 2.43 4.11 1.64 112 UNTRUSTED_Relay 5272 2.91 5.69 1.61 113 FROM_EXCESS_BASE64 5164 1.78 2.23 1.58 114 XM_SendGrid 5123 1.62 1.74 1.56 115 TR_XM_SpammyWords5 4957 2.17 3.56 1.51 116 XMDiploma_00 4823 1.96 3.01 1.47 117 XM_B_Investor 4800 2.45 4.54 1.47 118 TooManyTo_003 4769 1.13 0.44 1.46 119 T_XMDrugObfuBody_08 4613 1.81 2.65 1.41 120 SHORT_URI_2 4548 2.11 3.63 1.39 121 TR_DCC_Bayes_99 4415 7.23 19.79 1.35 122 XMBrknScrpt_02 4370 1.67 2.39 1.33 123 XMGappySubj_01 4338 0.96 0.18 1.32 124 TR_Symld_Words 4317 1.21 0.99 1.32 125 XM_SPF_SoftFail 4282 1.72 2.59 1.31 126 XM_GoogleGroups 4260 1.14 0.80 1.30 127 URI_NOVOWEL 4251 1.42 1.67 1.30 128 SHORT_URI_3 4226 0.93 0.15 1.29 129 XMStockSpam_06 4176 1.48 1.93 1.27 130 IN_HORDE_ADDRESS_BOOK 4150 0.89 0.08 1.27 131 XM_B_Unsub2 4119 1.75 2.79 1.26 132 XM_ShortIntro_01 4113 1.00 0.46 1.26 133 URI_HEX 4094 1.28 1.36 1.25 134 HELO_NODOT 3945 0.85 0.11 1.20 135 HELO_NO_DOMAIN 3941 0.85 0.11 1.20 136 BOTNET 3892 4.19 10.60 1.19 137 MIME_CHARSET_FARAWAY 3727 0.87 0.29 1.14 138 T_TooManySym_03 3703 0.82 0.17 1.13 139 TooManyTo_004 3604 0.86 0.35 1.10 140 TR_XM_DK_SendGrid 3506 1.02 0.90 1.07 141 XM_UB50 3446 1.50 2.47 1.05 142 TVD_SPACE_RATIO 3427 0.75 0.13 1.05 143 CHARSET_FARAWAY_HEADER 3378 0.75 0.14 1.03 144 T_TVD_MIME_NO_HEADERS 3369 0.71 0.04 1.03 145 XMCapTrack 3326 0.82 0.42 1.02 146 RCVD_IN_MSPIKE_BL 3178 2.11 4.54 0.97 147 TR_XM_MSPIKECOMBO 3176 2.11 4.54 0.97 148 XM_ProductURIs 3156 1.03 1.16 0.96 149 T_XMDrugObfuBody_00 3147 1.31 2.06 0.96 150 XMSexyCombo_05 3064 1.90 3.95 0.94 151 XM_OfRef6 3016 1.50 2.74 0.92 152 RCVD_IN_MSPIKE_L3 3009 1.38 2.37 0.92 153 DKIM_ADSP_CUSTOM_MED 2931 0.97 1.13 0.89 154 T_OBFU_PDF_ATTACH 2810 0.64 0.17 0.86 155 T_FILL_THIS_FORM_SHORT 2758 1.06 1.54 0.84 156 TooManyTo_005 2743 0.66 0.29 0.84 157 XM_H_Long_From02 2740 1.56 3.09 0.84 158 TVD_RCVD_IP 2684 0.82 0.82 0.82 159 XMGenDplmaNmb 2681 1.12 1.76 0.82 160 T_XMHurry_00 2633 1.45 2.83 0.80 161 XM_H_PHPMailer 2573 0.66 0.39 0.79 162 FROM_GOV_DKIM_AU 2547 0.60 0.23 0.78 163 SpammyFromTLD_01 2304 1.00 1.63 0.70 164 TR_LOTS_OF_MONEY3 2284 1.19 2.25 0.70 165 HTTPS_HTTP_MISMATCH 2262 0.93 1.44 0.69 166 TR_MetaPhish_Combo_01 2189 0.67 0.67 0.67 167 T_Symld_Words_02 2174 0.74 0.90 0.66 168 RELAYCOUNTRY_CA 2172 1.93 4.64 0.66 169 HTML_IMAGE_ONLY_04 2168 0.46 0.04 0.66 170 RCVD_IN_PBL 2163 0.73 0.89 0.66 171 TR_XM_Base64_M1 2163 0.79 1.08 0.66 172 XMGappySubj_02 2112 0.46 0.06 0.64 173 RCVD_IN_BL_SPAMCOP_NET 2083 4.25 11.95 0.64 174 HTML_SHORT_LINK_IMG_1 2055 0.44 0.04 0.63 175 LongTLD 2018 0.71 0.91 0.62 176 FORGED_GMAIL_RCVD 2015 0.71 0.91 0.62 177 XM_B_COPY_HTML 2000 0.72 0.94 0.61 178 XMNoVowels 1984 0.55 0.42 0.61 179 XM_B_SpammyWords4 1984 1.20 2.48 0.61 180 RELAYCOUNTRY_GB 1972 0.76 1.08 0.60 181 URI_TRY_3LD 1967 0.95 1.69 0.60 182 TR_XM_SpammyWords2 1941 3.29 9.03 0.59 183 MPART_ALT_DIFF_COUNT 1933 0.93 1.66 0.59 184 TO_NO_BRKTS_HTML_ONLY 1931 0.45 0.15 0.59 185 RELAYCOUNTRY_AU 1871 1.24 2.67 0.57 186 XMPhish30 1766 0.82 1.42 0.54 187 NML_ADSP_CUSTOM_MED 1748 0.66 0.92 0.53 188 HTML_IMAGE_ONLY_20 1747 0.80 1.38 0.53 189 THIS_AD 1733 0.77 1.27 0.53 190 SpammyFromTLD_02 1675 1.08 2.30 0.51 191 XM_B_DNDMA 1645 0.67 1.04 0.50 192 TM2_M_BODY_EMPTY 1621 0.39 0.16 0.49 193 HTML_TAG_BALANCE_BODY 1618 0.66 1.02 0.49 194 XMBSHREFv2 1614 0.43 0.30 0.49 195 XMLngstWrd_00 1528 0.47 0.49 0.47 196 XMMoneyMeta_00 1518 0.47 0.48 0.46 197 XMSubMetaSxObfu_03 1511 0.50 0.59 0.46 198 XMSubMetaI_00 1507 0.65 1.07 0.46 199 MSGID_FROM_MTA_HEADER 1505 0.38 0.21 0.46 200 TR_XM_SpammyWords3 1470 1.42 3.49 0.45 ----------------------------------------------------------------------