Email: 416428 Autolearn: 0 AvgScore: 5.31 AvgScanTime: 1.29 sec Spam: 129167 Autolearn: 0 AvgScore: 14.90 AvgScanTime: 1.46 sec Ham: 287261 Autolearn: 0 AvgScore: 1.00 AvgScanTime: 1.21 sec Time Spent Running SA: 148.99 hours Time Spent Processing Spam: 52.40 hours Time Spent Processing Ham: 96.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120118 88.24 92.99 86.11 2 DKIM_SIGNED 107665 76.58 83.35 73.53 3 XM_B_Unicode 103207 71.85 79.90 68.22 4 RELAYCOUNTRY_US 102678 79.99 79.49 80.22 5 XM_DK_Pass 102067 74.44 79.02 72.38 6 DKIM_VALID 100937 73.32 78.14 71.16 7 DCC_CHECK 90416 47.75 70.00 37.75 8 XM_B_SpammyWords 88810 50.50 68.76 42.29 9 DKIM_VALID_AU 79679 58.88 61.69 57.61 10 XMListUnsubscribeExists 77851 48.92 60.27 43.81 11 XM_B_Unicode3 60099 40.96 46.53 38.46 12 LOC_TINY_FONT_1 56369 31.12 43.64 25.49 13 BAYES_50 54632 54.61 42.30 60.15 14 XM_B_SpammyWords2 52064 24.74 40.31 17.74 15 XM_DK_Undo_02 46812 14.60 36.24 4.87 16 HTML_FONT_LOW_CONTRAST 42397 28.24 32.82 26.18 17 FVGT_m_MULTI_ODD 38216 25.86 29.59 24.18 18 BAYES_99 37482 11.43 29.02 3.52 19 DKIM_VALID_EF 37330 30.64 28.90 31.42 20 DCC_CHECK_NEGATIVE 36586 51.70 28.32 62.20 21 MIME_HTML_ONLY 36343 22.07 28.14 19.35 22 T_KAM_HTML_FONT_INVALID 35602 22.08 27.56 19.62 23 TR_XM_DKIM_Undo 33718 9.33 26.10 1.79 24 T_TM2_M_HEADER_IN_MSG 33696 30.78 26.09 32.89 25 XMSubLong 32622 24.35 25.26 23.94 26 BAYES_999 28565 8.69 22.11 2.66 27 TR_DCC_Bayes_99 25548 7.01 19.78 1.27 28 XM_Multi_Part_URI 25465 15.19 19.71 13.15 29 TR_XM_DK_Unsub 24463 14.99 18.94 13.22 30 RELAYCOUNTRY_META 24042 8.37 18.61 3.77 31 XM_B_Unsub 23930 11.66 18.53 8.58 32 RCVD_IN_MSPIKE_H2 23403 16.84 18.12 16.27 33 TR_XM_BayesUnsub 23001 10.06 17.81 6.57 34 XM_B_SpammyWords3 21873 8.73 16.93 5.04 35 UNPARSEABLE_RELAY 20756 13.37 16.07 12.15 36 TR_MAX_INTL_RELAY 19975 8.73 15.46 5.71 37 LOTS_OF_MONEY 17606 8.49 13.63 6.18 38 TR_XM_SpammyRelay 16835 5.28 13.03 1.79 39 TR_XM_SpammyWords4 15451 6.39 11.96 3.88 40 BOTNET_IPINHOSTNAME 15221 5.85 11.78 3.18 41 XM_B_Phish_Phrases 15062 7.15 11.66 5.12 42 FSL_BULK_SIG 15061 10.40 11.66 9.84 43 LotsOfNums_01 14533 8.78 11.25 7.67 44 XM_Evil_Numbers_Gen 14383 9.53 11.14 8.80 45 BOTNET 13520 4.09 10.47 1.22 46 TR_XM_SpammyWords2 12262 3.27 9.49 0.47 47 BAYES_80 12204 5.45 9.45 3.65 48 RCVD_IN_MSPIKE_WL 11859 14.86 9.18 17.42 49 TR_XM_UnparsRelay 11019 3.73 8.53 1.57 50 UNTRUSTED_Relay 10768 3.76 8.34 1.71 51 TM2_M_VERY_LONG_WORD 10374 4.27 8.03 2.58 52 BAYES_60 10147 7.20 7.86 6.90 53 RCVD_IN_BL_SPAMCOP_NET 9677 2.71 7.49 0.57 54 XM_Body_Dirty_Words 9007 3.81 6.97 2.38 55 XM_UncommonTLD01 8496 5.17 6.58 4.54 56 RELAYCOUNTRY_CA 8006 2.41 6.20 0.71 57 XMSubMetaSx_00 7987 4.43 6.18 3.64 58 RCVD_IN_MSPIKE_BL 7982 2.80 6.18 1.27 59 ANY_BOUNCE_MESSAGE 7838 5.74 6.07 5.59 60 BOUNCE_MESSAGE 7838 5.74 6.07 5.59 61 XM_B_PhoneNumber 7829 9.13 6.06 10.52 62 TR_XM_MSPIKECOMBO 7631 2.70 5.91 1.26 63 XM_H_GMP 7594 6.45 5.88 6.71 64 HTML_IMAGE_RATIO_02 7468 4.72 5.78 4.24 65 MPART_ALT_DIFF 7435 4.88 5.76 4.48 66 BAYES_95 7069 3.12 5.47 2.06 67 XM_H_Long_From01 6834 5.39 5.29 5.44 68 XM_B_Investor 6765 2.80 5.24 1.71 69 DKIM_INVALID 6728 3.26 5.21 2.38 70 XMStrtUSub 6147 4.89 4.76 4.95 71 MAY_BE_FORGED 6127 2.34 4.74 1.26 72 RCVD_IN_MSPIKE_H3 6085 7.30 4.71 8.47 73 XMSexyCombo_05 5926 2.17 4.59 1.09 74 TooManyTo_001 5858 7.60 4.54 8.98 75 HTML_IMAGE_RATIO_04 5458 4.20 4.23 4.18 76 T_XMDrugObfuBody_14 5362 2.37 4.15 1.57 77 TR_XM_PhishingBody 5355 2.38 4.15 1.58 78 TR_XM_SpammyWords5 5273 2.52 4.08 1.82 79 XMNumbers 5264 4.09 4.08 4.09 80 KHOP_HELO_FCRDNS 5093 2.98 3.94 2.55 81 TR_XM_SpammyWords3 5067 1.69 3.92 0.68 82 T_XMDrugObfuBody_08 5012 2.28 3.88 1.56 83 MIME_HTML_MOSTLY 5009 2.81 3.88 2.33 84 HTML_IMAGE_RATIO_06 4752 2.98 3.68 2.67 85 MIME_QP_LONG_LINE 4750 4.72 3.68 5.20 86 XM_SPF_SoftFail 4742 2.17 3.67 1.50 87 XM_B_SpammyTLD 4609 2.94 3.57 2.65 88 TR_XM_SPAMCOP 4574 1.20 3.54 0.14 89 XM_UB50 4497 1.84 3.48 1.11 90 XM_B_Unsub2 4431 2.00 3.43 1.35 91 XMDiploma_00 4371 2.30 3.38 1.81 92 RCVD_IN_MSPIKE_L3 4349 1.78 3.37 1.06 93 HTML_EXTRA_CLOSE 4330 1.69 3.35 0.95 94 XM_CamelCaseFrm001 4269 2.23 3.31 1.75 95 XM_URI_RBL 4192 1.21 3.25 0.30 96 USER_IN_DEF_DKIM_WL 4013 8.80 3.11 11.37 97 HTML_IMAGE_RATIO_08 3978 2.42 3.08 2.12 98 TR_XM_NoHeaderRelay 3950 1.12 3.06 0.25 99 MIME_HTML_ONLY_MULTI 3762 2.41 2.91 2.18 100 XM_B_URI_Unicode 3753 2.33 2.91 2.07 101 RELAYCOUNTRY_AU 3678 1.23 2.85 0.50 102 RCVD_IN_VALIDITY_RPBL 3480 0.89 2.69 0.08 103 XM_OfRef6 3480 1.32 2.69 0.70 104 T_TooManySym_01 3329 5.72 2.58 7.14 105 RCVD_IN_VALIDITY_SAFE 3217 2.89 2.49 3.06 106 TR_XM_INTL_Spamhaus 3115 0.89 2.41 0.21 107 TR_XM_INV_DKIM 3079 0.75 2.38 0.02 108 TM2_M_URI_OPT_OUT 3072 1.86 2.38 1.62 109 MAILING_LIST_MULTI 3071 3.67 2.38 4.26 110 XMBrknScrpt_02 3024 1.37 2.34 0.93 111 RCVD_IN_MSPIKE_H5 2934 4.58 2.27 5.62 112 RCVD_IN_VALIDITY_CERTIFIED 2875 2.48 2.23 2.59 113 RCVD_IN_MSPIKE_H4 2840 2.98 2.20 3.33 114 HTML_MIME_NO_HTML_TAG 2674 3.05 2.07 3.49 115 TR_XM_MSPIKECOMBO2 2619 0.69 2.03 0.08 116 T_XMDrugObfuBody_00 2617 1.05 2.03 0.61 117 T_FILL_THIS_FORM_SHORT 2580 1.21 2.00 0.86 118 SpammyFromTLD_02 2555 0.82 1.98 0.30 119 T_REMOTE_IMAGE 2537 3.30 1.96 3.90 120 XM_B_SpammyWords4 2520 0.97 1.95 0.52 121 RCVD_IN_PSBL 2512 0.97 1.94 0.53 122 SpammyFromTLD_01 2500 1.17 1.94 0.83 123 XMGenDplmaNmb 2487 1.27 1.93 0.97 124 RCVD_IN_XBL 2396 0.59 1.85 0.02 125 RCVD_IN_SBL_CSS 2392 0.60 1.85 0.04 126 MultiRelay_CC 2316 0.70 1.79 0.20 127 FROM_EXCESS_BASE64 2298 1.47 1.78 1.33 128 SUBJ_ALL_CAPS 2271 1.71 1.76 1.69 129 ALL_TRUSTED 2264 12.01 1.75 16.62 130 XMPhish30 2233 0.96 1.73 0.62 131 XMStockSpam_06 2193 1.38 1.70 1.23 132 RCVD_IN_ZEN_LASTEXTERNAL 2136 0.51 1.65 0.00 133 SHORTCIRCUIT 2136 0.51 1.65 0.00 134 XM_B_SEO 2107 0.67 1.63 0.23 135 BAYES_40 2091 4.55 1.62 5.87 136 URI_HEX 2058 1.33 1.59 1.21 137 RCVD_IN_IADB_LISTED 2050 2.69 1.59 3.18 138 MPART_ALT_DIFF_COUNT 2005 0.86 1.55 0.55 139 DIET_1 1951 0.65 1.51 0.26 140 URI_NOVOWEL 1938 1.23 1.50 1.10 141 XM_DK_Undo_01 1896 1.79 1.47 1.94 142 BOTNET_NORDNS 1896 0.46 1.47 0.01 143 XM_UB99 1882 0.45 1.46 0.00 144 XMBdyGiftCard01 1882 0.56 1.46 0.16 145 XM_H_Long_From02 1876 1.02 1.45 0.83 146 TR_Mismatch_TLD_02 1868 0.52 1.45 0.10 147 TR_XM_GMP_BULK_SIG 1861 0.63 1.44 0.27 148 TR_XM_MaxSPIKE 1844 0.47 1.43 0.04 149 RCVD_IN_PBL 1787 0.99 1.38 0.82 150 STY_INVIS_DIRECT 1781 0.69 1.38 0.38 151 XMSubMetaI_00 1771 0.75 1.37 0.47 152 RDNS_DYNAMIC 1758 0.54 1.36 0.17 153 RELAYCOUNTRY_FR 1757 0.67 1.36 0.37 154 RCVD_IN_IADB_SPF 1741 2.36 1.35 2.81 155 BAYES_20 1741 3.37 1.35 4.27 156 RCVD_IN_MSPIKE_L5 1727 0.45 1.34 0.05 157 DKIM_ADSP_NXDOMAIN 1699 0.67 1.32 0.37 158 PDS_RDNS_DYNAMIC_FP 1696 0.43 1.31 0.04 159 XM_HighProb1 1695 0.41 1.31 0.00 160 TR_XM_SEO4 1667 0.49 1.29 0.13 161 XM_UB60 1667 0.48 1.29 0.12 162 URI_TRY_3LD 1664 0.71 1.29 0.45 163 HTML_FONT_TINY_NORDNS 1647 0.47 1.28 0.10 164 XM_SendGrid 1637 1.51 1.27 1.62 165 XMBody_17 1629 0.61 1.26 0.32 166 TR_LOTS_OF_MONEY2 1604 0.52 1.24 0.20 167 T_MONEY_PERCENT 1604 0.52 1.24 0.20 168 RCVD_IN_IADB_DK 1598 2.04 1.24 2.41 169 XM_ProductURIs 1589 1.08 1.23 1.01 170 RCVD_IN_IADB_SENDERID 1589 2.10 1.23 2.50 171 XM_UB80 1574 0.39 1.22 0.02 172 T_XMHurry_00 1563 0.70 1.21 0.47 173 RCVD_IN_MSPIKE_L4 1556 0.48 1.20 0.15 174 XM_H_Undi_Recip 1554 0.54 1.20 0.24 175 HK_RANDOM_REPLYTO 1542 0.42 1.19 0.07 176 SH_BODYURI_REVERSE_SBL 1542 0.37 1.19 0.00 177 URIBL_SBL_A 1539 0.37 1.19 0.00 178 URIBL_SBL 1539 0.37 1.19 0.00 179 TVD_RCVD_IP 1532 1.23 1.19 1.25 180 TR_XM_RelayPhish 1531 0.43 1.19 0.09 181 XM_B_COVIDMETA 1432 0.43 1.11 0.13 182 TR_XM_PHPForged 1409 0.58 1.09 0.35 183 TR_XM_InvalidRelay 1408 0.34 1.09 0.01 184 TR_XM_FormFill2 1388 0.58 1.07 0.35 185 DKIM_ADSP_CUSTOM_MED 1381 0.99 1.07 0.95 186 TR_LOTS_OF_MONEY3 1376 0.52 1.07 0.27 187 TR_XM_PHPDW 1366 0.57 1.06 0.35 188 T_Symld_Words_02 1349 0.83 1.04 0.73 189 XM_H_PHPOS 1339 0.55 1.04 0.34 190 XM_B_Phish66 1336 0.58 1.03 0.37 191 XMHTML_After_End 1307 0.62 1.01 0.44 192 RELAYCOUNTRY_RU 1305 0.33 1.01 0.03 193 XM_PDF 1304 3.79 1.01 5.04 194 THIS_AD 1300 0.53 1.01 0.32 195 XM_B_COPY_HTML 1284 0.78 0.99 0.68 196 HTTPS_HTTP_MISMATCH 1281 0.91 0.99 0.87 197 RELAYCOUNTRY_GB 1275 0.83 0.99 0.77 198 XM_DIRTYINTL 1271 0.36 0.98 0.07 199 XM_GoogleGroups 1265 1.45 0.98 1.66 200 TR_Symld_Words 1258 1.46 0.97 1.68 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 247355 88.24 92.99 86.11 2 RELAYCOUNTRY_US 230429 79.99 79.49 80.22 3 DKIM_SIGNED 211237 76.58 83.35 73.53 4 XM_DK_Pass 207910 74.44 79.02 72.38 5 DKIM_VALID 204403 73.32 78.14 71.16 6 XM_B_Unicode 195976 71.85 79.90 68.22 7 DCC_CHECK_NEGATIVE 178688 51.70 28.32 62.20 8 BAYES_50 172786 54.61 42.30 60.15 9 DKIM_VALID_AU 165493 58.88 61.69 57.61 10 XMListUnsubscribeExists 125850 48.92 60.27 43.81 11 XM_B_SpammyWords 121469 50.50 68.76 42.29 12 XM_B_Unicode3 110477 40.96 46.53 38.46 13 DCC_CHECK 108444 47.75 70.00 37.75 14 T_TM2_M_HEADER_IN_MSG 94470 30.78 26.09 32.89 15 DKIM_VALID_EF 90266 30.64 28.90 31.42 16 HTML_FONT_LOW_CONTRAST 75203 28.24 32.82 26.18 17 LOC_TINY_FONT_1 73227 31.12 43.64 25.49 18 FVGT_m_MULTI_ODD 69463 25.86 29.59 24.18 19 XMSubLong 68761 24.35 25.26 23.94 20 T_KAM_HTML_FONT_INVALID 56360 22.08 27.56 19.62 21 MIME_HTML_ONLY 55580 22.07 28.14 19.35 22 XM_B_SpammyWords2 50948 24.74 40.31 17.74 23 RCVD_IN_MSPIKE_WL 50037 14.86 9.18 17.42 24 ALL_TRUSTED 47745 12.01 1.75 16.62 25 RCVD_IN_MSPIKE_H2 46739 16.84 18.12 16.27 26 TR_XM_DK_Unsub 37968 14.99 18.94 13.22 27 XM_Multi_Part_URI 37773 15.19 19.71 13.15 28 UNPARSEABLE_RELAY 34913 13.37 16.07 12.15 29 USER_IN_DEF_DKIM_WL 32649 8.80 3.11 11.37 30 BAYES_00 31711 7.82 0.66 11.04 31 XM_B_PhoneNumber 30209 9.13 6.06 10.52 32 FSL_BULK_SIG 28263 10.40 11.66 9.84 33 TooManyTo_001 25806 7.60 4.54 8.98 34 XM_Evil_Numbers_Gen 25286 9.53 11.14 8.80 35 XM_B_Unsub 24638 11.66 18.53 8.58 36 RCVD_IN_MSPIKE_H3 24324 7.30 4.71 8.47 37 LotsOfNums_01 22030 8.78 11.25 7.67 38 TR_XM_DK_Bayes 21196 5.24 0.49 7.38 39 TR_XM_DK_Bayes1 20846 5.16 0.49 7.26 40 T_TooManySym_01 20508 5.72 2.58 7.14 41 BAYES_60 19835 7.20 7.86 6.90 42 XM_H_GMP 19270 6.45 5.88 6.71 43 TR_XM_BayesUnsub 18877 10.06 17.81 6.57 44 TR_XM_DK_Bayes2 17750 4.37 0.36 6.18 45 LOTS_OF_MONEY 17741 8.49 13.63 6.18 46 XM_DKIMWhitelistDomains 17463 4.21 0.05 6.08 47 BAYES_40 16874 4.55 1.62 5.87 48 TR_MAX_INTL_RELAY 16397 8.73 15.46 5.71 49 RCVD_IN_MSPIKE_H5 16133 4.58 2.27 5.62 50 BOUNCE_MESSAGE 16061 5.74 6.07 5.59 51 ANY_BOUNCE_MESSAGE 16061 5.74 6.07 5.59 52 XM_H_Long_From01 15632 5.39 5.29 5.44 53 MIME_QP_LONG_LINE 14925 4.72 3.68 5.20 54 XM_B_Phish_Phrases 14716 7.15 11.66 5.12 55 XM_PDF 14485 3.79 1.01 5.04 56 XM_B_SpammyWords3 14469 8.73 16.93 5.04 57 XMStrtUSub 14209 4.89 4.76 4.95 58 XM_DK_Undo_02 13976 14.60 36.24 4.87 59 XM_UncommonTLD01 13039 5.17 6.58 4.54 60 MPART_ALT_DIFF 12869 4.88 5.76 4.48 61 BAYES_20 12273 3.37 1.35 4.27 62 MAILING_LIST_MULTI 12225 3.67 2.38 4.26 63 HTML_IMAGE_RATIO_02 12189 4.72 5.78 4.24 64 HTML_IMAGE_RATIO_04 12013 4.20 4.23 4.18 65 XMNumbers 11760 4.09 4.08 4.09 66 T_TooManySym_02 11250 2.93 0.75 3.92 67 T_REMOTE_IMAGE 11195 3.30 1.96 3.90 68 TR_XM_SpammyWords4 11143 6.39 11.96 3.88 69 RELAYCOUNTRY_META 10830 8.37 18.61 3.77 70 BAYES_80 10471 5.45 9.45 3.65 71 XMSubMetaSx_00 10461 4.43 6.18 3.64 72 BAYES_99 10110 11.43 29.02 3.52 73 HTML_MIME_NO_HTML_TAG 10013 3.05 2.07 3.49 74 RCVD_IN_MSPIKE_H4 9580 2.98 2.20 3.33 75 RCVD_IN_IADB_LISTED 9141 2.69 1.59 3.18 76 BOTNET_IPINHOSTNAME 9136 5.85 11.78 3.18 77 TooManyTo_002 8860 2.38 0.82 3.08 78 RCVD_IN_VALIDITY_SAFE 8797 2.89 2.49 3.06 79 RCVD_IN_IADB_SPF 8069 2.36 1.35 2.81 80 HTML_IMAGE_RATIO_06 7671 2.98 3.68 2.67 81 BAYES_999 7628 8.69 22.11 2.66 82 XM_B_SpammyTLD 7615 2.94 3.57 2.65 83 INVALID_MSGID 7563 1.88 0.21 2.63 84 RCVD_IN_VALIDITY_CERTIFIED 7443 2.48 2.23 2.59 85 TM2_M_VERY_LONG_WORD 7405 4.27 8.03 2.58 86 KHOP_HELO_FCRDNS 7336 2.98 3.94 2.55 87 BAYES_05 7280 1.94 0.63 2.53 88 RCVD_IN_IADB_SENDERID 7169 2.10 1.23 2.50 89 RCVD_IN_IADB_DK 6914 2.04 1.24 2.41 90 XM_Body_Dirty_Words 6841 3.81 6.97 2.38 91 DKIM_INVALID 6834 3.26 5.21 2.38 92 MIME_HTML_MOSTLY 6680 2.81 3.88 2.33 93 MSGID_NOFQDN1 6632 1.60 0.03 2.31 94 TO_MALFORMED 6337 1.53 0.03 2.21 95 MIME_HTML_ONLY_MULTI 6268 2.41 2.91 2.18 96 RCVD_IN_IADB_VOUCHED 6243 1.77 0.88 2.17 97 HTML_IMAGE_RATIO_08 6083 2.42 3.08 2.12 98 XM_B_URI_Unicode 5957 2.33 2.91 2.07 99 BAYES_95 5920 3.12 5.47 2.06 100 TooManyTo_003 5820 1.60 0.64 2.03 101 XM_DK_Undo_01 5569 1.79 1.47 1.94 102 TR_XM_SpammyWords5 5223 2.52 4.08 1.82 103 XMDiploma_00 5199 2.30 3.38 1.81 104 TR_XM_SpammyRelay 5148 5.28 13.03 1.79 105 TR_XM_DKIM_Undo 5146 9.33 26.10 1.79 106 XM_CamelCaseFrm001 5021 2.23 3.31 1.75 107 XM_B_Investor 4912 2.80 5.24 1.71 108 UNTRUSTED_Relay 4909 3.76 8.34 1.71 109 SUBJ_ALL_CAPS 4857 1.71 1.76 1.69 110 TR_Symld_Words 4840 1.46 0.97 1.68 111 XM_GoogleGroups 4775 1.45 0.98 1.66 112 HELO_NODOT 4684 1.20 0.24 1.63 113 HELO_NO_DOMAIN 4679 1.20 0.23 1.63 114 TM2_M_URI_OPT_OUT 4665 1.86 2.38 1.62 115 XM_SendGrid 4662 1.51 1.27 1.62 116 TR_XM_PhishingBody 4550 2.38 4.15 1.58 117 TooManyTo_004 4519 1.25 0.54 1.57 118 TR_XM_UnparsRelay 4517 3.73 8.53 1.57 119 T_XMDrugObfuBody_14 4511 2.37 4.15 1.57 120 T_XMDrugObfuBody_08 4472 2.28 3.88 1.56 121 T_TooManySym_03 4445 1.14 0.22 1.55 122 XM_SPF_SoftFail 4309 2.17 3.67 1.50 123 XMNoVowels 4269 1.21 0.61 1.49 124 RCVD_IN_IADB_OPTIN 4226 1.20 0.59 1.47 125 T_TVD_MIME_NO_HEADERS 4159 1.02 0.05 1.45 126 XMCapTrack 4034 1.14 0.56 1.40 127 IN_HORDE_ADDRESS_BOOK 3960 0.98 0.09 1.38 128 XM_B_Unsub2 3885 2.00 3.43 1.35 129 FROM_EXCESS_BASE64 3816 1.47 1.78 1.33 130 RCVD_IN_MSPIKE_BL 3661 2.80 6.18 1.27 131 TR_DCC_Bayes_99 3640 7.01 19.78 1.27 132 MAY_BE_FORGED 3631 2.34 4.74 1.26 133 TR_XM_MSPIKECOMBO 3627 2.70 5.91 1.26 134 TooManyTo_005 3598 1.01 0.48 1.25 135 TVD_RCVD_IP 3583 1.23 1.19 1.25 136 XMStockSpam_06 3545 1.38 1.70 1.23 137 BOTNET 3506 4.09 10.47 1.22 138 XM_ShortIntro_01 3491 1.07 0.75 1.22 139 URI_HEX 3489 1.33 1.59 1.21 140 TR_XM_DK_SendGrid 3187 1.02 0.82 1.11 141 XM_UB50 3176 1.84 3.48 1.11 142 URI_NOVOWEL 3174 1.23 1.50 1.10 143 XMGappySubj_01 3123 0.81 0.18 1.09 144 XMSexyCombo_05 3119 2.17 4.59 1.09 145 TR_MetaPhish_Combo_01 3116 1.02 0.89 1.08 146 RCVD_IN_MSPIKE_L3 3055 1.78 3.37 1.06 147 TVD_SPACE_RATIO 3048 0.81 0.25 1.06 148 HTML_IMAGE_ONLY_32 2965 0.82 0.35 1.03 149 XM_ProductURIs 2902 1.08 1.23 1.01 150 XMGenDplmaNmb 2789 1.27 1.93 0.97 151 DKIM_ADSP_CUSTOM_MED 2740 0.99 1.07 0.95 152 HTML_EXTRA_CLOSE 2724 1.69 3.35 0.95 153 XMBrknScrpt_02 2676 1.37 2.34 0.93 154 XMSubMetaSxObfu_03 2526 0.85 0.79 0.88 155 HTTPS_HTTP_MISMATCH 2503 0.91 0.99 0.87 156 T_FILL_THIS_FORM_SHORT 2474 1.21 2.00 0.86 157 XM_H_PHPMailer 2421 0.74 0.52 0.84 158 XM_H_Long_From02 2391 1.02 1.45 0.83 159 SpammyFromTLD_01 2378 1.17 1.94 0.83 160 RCVD_IN_PBL 2354 0.99 1.38 0.82 161 TO_NO_BRKTS_HTML_ONLY 2295 0.62 0.21 0.80 162 RELAYCOUNTRY_GB 2198 0.83 0.99 0.77 163 HTML_IMAGE_ONLY_20 2119 0.80 0.93 0.74 164 T_Symld_Words_02 2092 0.83 1.04 0.73 165 XMSlimDrugH 2075 0.76 0.83 0.72 166 XMBSHREFv2 2073 0.66 0.52 0.72 167 XMGappySubj_02 2038 0.50 0.03 0.71 168 RELAYCOUNTRY_CA 2034 2.41 6.20 0.71 169 XM_OfRef6 2007 1.32 2.69 0.70 170 TR_XM_Base64_M1 2002 0.72 0.79 0.70 171 T_OBFU_PDF_ATTACH 1985 0.57 0.30 0.69 172 TR_XM_SpammyWords3 1963 1.69 3.92 0.68 173 XM_B_COPY_HTML 1960 0.78 0.99 0.68 174 FROM_GOV_DKIM_AU 1930 0.56 0.32 0.67 175 LOW_PRICE 1900 0.52 0.20 0.66 176 MSGID_FROM_MTA_HEADER 1789 0.52 0.29 0.62 177 XMPhish30 1777 0.96 1.73 0.62 178 T_XMDrugObfuBody_00 1749 1.05 2.03 0.61 179 FORGED_GMAIL_RCVD 1671 0.63 0.75 0.58 180 HTML_TAG_BALANCE_BODY 1642 0.65 0.81 0.57 181 RCVD_IN_BL_SPAMCOP_NET 1625 2.71 7.49 0.57 182 MPART_ALT_DIFF_COUNT 1584 0.86 1.55 0.55 183 XMSubMetaSx_01 1551 0.42 0.16 0.54 184 NML_ADSP_CUSTOM_MED 1541 0.63 0.84 0.54 185 RCVD_IN_PSBL 1534 0.97 1.94 0.53 186 XM_B_SpammyWords4 1507 0.97 1.95 0.52 187 LongTLD 1456 0.56 0.68 0.51 188 T_TooManySym_04 1441 0.36 0.03 0.50 189 RELAYCOUNTRY_AU 1441 1.23 2.85 0.50 190 TR_XM_GMP_MSPIKE_UNDO2 1356 0.41 0.27 0.47 191 TR_XM_SpammyWords2 1355 3.27 9.49 0.47 192 T_XMHurry_00 1343 0.70 1.21 0.47 193 FILL_THIS_FORM 1337 0.51 0.59 0.47 194 XMSubMetaI_00 1337 0.75 1.37 0.47 195 XMLngstWrd_00 1312 0.42 0.35 0.46 196 XMDateMe_00 1310 0.52 0.65 0.46 197 XMMoneyMeta_00 1306 0.59 0.91 0.45 198 XM_B_DNDMA 1306 0.59 0.90 0.45 199 URI_TRY_3LD 1284 0.71 1.29 0.45 200 XMHTML_After_End 1272 0.62 1.01 0.44 ----------------------------------------------------------------------