Email: 432818 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.32 sec Spam: 132216 Autolearn: 0 AvgScore: 14.85 AvgScanTime: 1.48 sec Ham: 300602 Autolearn: 0 AvgScore: 0.86 AvgScanTime: 1.25 sec Time Spent Running SA: 158.87 hours Time Spent Processing Spam: 54.18 hours Time Spent Processing Ham: 104.69 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125869 89.64 95.20 87.19 2 DKIM_SIGNED 118998 80.12 90.00 75.78 3 XM_B_Unicode 111433 74.69 84.28 70.47 4 XM_DK_Pass 111412 77.52 84.27 74.55 5 DKIM_VALID 110345 76.40 83.46 73.30 6 RELAYCOUNTRY_US 106066 81.00 80.22 81.34 7 XM_B_SpammyWords 90955 51.76 68.79 44.27 8 DCC_CHECK 89557 41.64 67.74 30.17 9 XMListUnsubscribeExists 87860 53.12 66.45 47.26 10 DKIM_VALID_AU 86373 61.61 65.33 59.97 11 XM_B_Unicode3 63602 42.90 48.10 40.60 12 LOC_TINY_FONT_1 60870 33.84 46.04 28.48 13 XM_DK_Undo_02 53261 15.77 40.28 4.99 14 BAYES_50 52537 54.12 39.74 60.45 15 XM_B_SpammyWords2 50496 24.40 38.19 18.33 16 HTML_FONT_LOW_CONTRAST 46384 30.71 35.08 28.79 17 FVGT_m_MULTI_ODD 45404 28.67 34.34 26.18 18 BAYES_99 41484 12.14 31.38 3.68 19 DKIM_VALID_EF 40823 31.90 30.88 32.36 20 DCC_CHECK_NEGATIVE 40434 57.81 30.58 69.78 21 MIME_HTML_ONLY 39793 23.22 30.10 20.19 22 TR_XM_DKIM_Undo 38504 10.45 29.12 2.23 23 T_KAM_HTML_FONT_INVALID 38202 23.58 28.89 21.24 24 XMSubLong 35537 24.58 26.88 23.57 25 BAYES_999 31989 9.31 24.19 2.77 26 T_TM2_M_HEADER_IN_MSG 30088 28.52 22.76 31.06 27 TR_XM_DK_Unsub 29289 16.61 22.15 14.17 28 XM_Multi_Part_URI 27991 15.94 21.17 13.64 29 XM_B_Unsub 25517 12.22 19.30 9.10 30 TR_DCC_Bayes_99 25432 6.66 19.24 1.13 31 RELAYCOUNTRY_META 24755 8.21 18.72 3.58 32 TR_XM_BayesUnsub 24532 10.58 18.55 7.07 33 RCVD_IN_MSPIKE_H2 23961 16.91 18.12 16.38 34 UNPARSEABLE_RELAY 23790 13.88 17.99 12.07 35 TR_MAX_INTL_RELAY 20241 9.00 15.31 6.22 36 XM_B_SpammyWords3 20136 8.13 15.23 5.00 37 TR_XM_SpammyRelay 17805 5.31 13.47 1.72 38 LOTS_OF_MONEY 17123 8.26 12.95 6.20 39 BOTNET 15898 4.59 12.02 1.32 40 BOTNET_IPINHOSTNAME 15859 5.95 11.99 3.30 41 TR_XM_SpammyWords4 15356 6.41 11.61 4.13 42 XM_Evil_Numbers_Gen 13739 9.34 10.39 8.88 43 RCVD_IN_BL_SPAMCOP_NET 13544 3.48 10.24 0.50 44 RCVD_IN_MSPIKE_WL 13098 15.84 9.91 18.44 45 TR_XM_UnparsRelay 12919 4.27 9.77 1.85 46 BAYES_80 12626 5.64 9.55 3.92 47 XM_B_Phish_Phrases 12465 6.04 9.43 4.55 48 TR_XM_SpammyWords2 12337 3.17 9.33 0.47 49 FSL_BULK_SIG 11573 5.19 8.75 3.62 50 BAYES_60 10720 7.48 8.11 7.20 51 HTML_IMAGE_RATIO_02 10372 5.71 7.84 4.77 52 RCVD_IN_MSPIKE_BL 10054 3.18 7.60 1.24 53 TR_XM_MSPIKECOMBO 10053 3.18 7.60 1.24 54 RELAYCOUNTRY_CA 9666 2.76 7.31 0.75 55 LotsOfNums_01 9000 6.88 6.81 6.92 56 XM_UncommonTLD01 8938 5.20 6.76 4.51 57 XM_Body_Dirty_Words 8911 3.77 6.74 2.47 58 XM_B_PhoneNumber 8675 9.10 6.56 10.21 59 DKIM_INVALID 8653 3.72 6.54 2.48 60 UNTRUSTED_Relay 8645 3.12 6.54 1.61 61 MPART_ALT_DIFF 8347 5.38 6.31 4.97 62 XMSubMetaSx_00 8346 4.03 6.31 3.03 63 TR_XM_SpammyWords3 7516 2.20 5.68 0.67 64 RCVD_IN_MSPIKE_H3 7498 7.64 5.67 8.51 65 XM_B_Investor 7358 2.90 5.57 1.73 66 XM_H_Long_From01 7218 5.20 5.46 5.09 67 BAYES_95 7136 3.24 5.40 2.29 68 XM_H_GMP 6518 5.81 4.93 6.19 69 XM_B_SpammyTLD 6179 3.27 4.67 2.65 70 TR_XM_PhishingBody 6116 2.61 4.63 1.73 71 HTML_IMAGE_RATIO_04 6114 4.23 4.62 4.06 72 RCVD_IN_MSPIKE_L3 6066 2.13 4.59 1.06 73 XMSexyCombo_05 6032 2.11 4.56 1.04 74 TooManyTo_001 5886 7.75 4.45 9.20 75 XMStrtUSub 5694 4.63 4.31 4.77 76 MIME_HTML_MOSTLY 5652 3.16 4.27 2.66 77 T_XMDrugObfuBody_14 5414 2.37 4.09 1.61 78 XM_SPF_SoftFail 4977 2.03 3.76 1.27 79 TR_XM_SPAMCOP 4877 1.21 3.69 0.12 80 XMNumbers 4862 3.77 3.68 3.81 81 XM_B_Unsub2 4788 2.23 3.62 1.62 82 XM_URI_RBL 4786 1.35 3.62 0.35 83 XM_OfRef6 4782 1.67 3.62 0.81 84 TM2_M_VERY_LONG_WORD 4642 2.02 3.51 1.37 85 XM_CamelCaseFrm001 4628 2.44 3.50 1.97 86 XMDiploma_00 4614 2.18 3.49 1.60 87 TR_XM_SpammyWords5 4453 2.31 3.37 1.84 88 RELAYCOUNTRY_AU 4388 1.33 3.32 0.46 89 HTML_IMAGE_RATIO_08 4273 2.82 3.23 2.64 90 T_XMDrugObfuBody_08 4272 1.97 3.23 1.41 91 T_FILL_THIS_FORM_SHORT 4119 1.66 3.12 1.03 92 MIME_HTML_ONLY_MULTI 4068 2.68 3.08 2.50 93 MIME_QP_LONG_LINE 4038 4.42 3.05 5.02 94 T_TooManySym_01 3931 5.16 2.97 6.12 95 TR_XM_NoHeaderRelay 3876 1.04 2.93 0.21 96 T_REMOTE_IMAGE 3701 3.56 2.80 3.90 97 RCVD_IN_VALIDITY_SAFE 3681 3.38 2.78 3.64 98 XM_UB50 3641 1.60 2.75 1.10 99 USER_IN_DEF_DKIM_WL 3638 9.38 2.75 12.30 100 TR_XM_INV_DKIM 3529 0.83 2.67 0.02 101 HTML_IMAGE_RATIO_06 3489 2.67 2.64 2.68 102 XM_B_URI_Unicode 3460 2.33 2.62 2.21 103 XM_B_SpammyWords4 3408 1.29 2.58 0.72 104 TR_XM_MSPIKECOMBO2 3356 0.82 2.54 0.07 105 HTML_MIME_NO_HTML_TAG 3355 2.96 2.54 3.15 106 XMStockSpam_06 3275 1.63 2.48 1.26 107 SpammyFromTLD_02 2968 0.92 2.24 0.34 108 T_XMHurry_00 2963 1.09 2.24 0.58 109 SpammyFromTLD_01 2947 1.31 2.23 0.90 110 RCVD_IN_VALIDITY_CERTIFIED 2927 2.76 2.21 3.00 111 RCVD_IN_PSBL 2898 1.13 2.19 0.66 112 RCVD_IN_MSPIKE_H5 2818 4.98 2.13 6.23 113 RCVD_IN_MSPIKE_H4 2782 3.21 2.10 3.70 114 TM2_M_URI_OPT_OUT 2703 1.93 2.04 1.88 115 XMBdyGiftCard01 2696 1.15 2.04 0.76 116 FROM_EXCESS_BASE64 2648 1.88 2.00 1.83 117 MAILING_LIST_MULTI 2593 2.72 1.96 3.05 118 XMBrknScrpt_02 2578 1.35 1.95 1.08 119 KHOP_HELO_FCRDNS 2577 1.85 1.95 1.81 120 TR_XM_MaxSPIKE 2532 0.61 1.92 0.04 121 RCVD_IN_VALIDITY_RPBL 2522 0.61 1.91 0.04 122 XMBody_17 2497 0.90 1.89 0.46 123 TR_XM_INTL_Spamhaus 2471 0.71 1.87 0.20 124 BAYES_40 2439 4.45 1.84 5.59 125 XMPhish30 2433 1.03 1.84 0.67 126 XMGenDplmaNmb 2348 1.12 1.78 0.84 127 XM_DK_Undo_01 2200 1.82 1.66 1.88 128 RCVD_IN_ZEN_LASTEXTERNAL 2195 0.51 1.66 0.00 129 SHORTCIRCUIT 2195 0.51 1.66 0.00 130 URI_HEX 2146 1.32 1.62 1.19 131 RCVD_IN_IADB_LISTED 2138 2.75 1.62 3.25 132 XM_SendGrid 2124 1.62 1.61 1.63 133 RDNS_DYNAMIC 2120 0.60 1.60 0.16 134 BOTNET_NORDNS 2109 0.49 1.60 0.01 135 XM_HighProb1 2056 0.48 1.56 0.00 136 T_XMDrugObfuBody_00 2042 1.04 1.54 0.82 137 XM_ProductURIs 2021 0.80 1.53 0.48 138 RCVD_IN_MSPIKE_L5 2002 0.50 1.51 0.05 139 URI_TRY_3LD 1998 1.06 1.51 0.87 140 RCVD_IN_MSPIKE_L4 1985 0.55 1.50 0.13 141 SUBJ_ALL_CAPS 1974 1.45 1.49 1.44 142 DIET_1 1918 0.64 1.45 0.29 143 ALL_TRUSTED 1898 11.29 1.44 15.63 144 RCVD_IN_XBL 1889 0.45 1.43 0.02 145 RCVD_IN_SBL_CSS 1887 0.46 1.43 0.04 146 XM_B_SEO 1810 0.57 1.37 0.22 147 STY_INVIS_DIRECT 1806 0.66 1.37 0.35 148 RCVD_IN_IADB_SPF 1799 2.43 1.36 2.89 149 XM_H_Long_From02 1777 1.03 1.34 0.89 150 XMSubMetaI_00 1756 0.72 1.33 0.45 151 THIS_AD 1731 0.71 1.31 0.44 152 TR_LOTS_OF_MONEY3 1708 0.62 1.29 0.33 153 HTML_FONT_TINY_NORDNS 1698 0.50 1.28 0.16 154 MPART_ALT_DIFF_COUNT 1685 0.77 1.27 0.55 155 T_Symld_Words_02 1683 0.84 1.27 0.65 156 RCVD_IN_PBL 1672 0.92 1.26 0.77 157 RCVD_IN_IADB_DK 1668 2.12 1.26 2.50 158 RCVD_IN_IADB_SENDERID 1640 2.18 1.24 2.59 159 URI_NOVOWEL 1640 1.26 1.24 1.27 160 HTTPS_HTTP_MISMATCH 1633 0.88 1.24 0.73 161 HTML_TAG_BALANCE_CENTER 1605 0.47 1.21 0.14 162 TR_LOTS_OF_MONEY2 1595 0.56 1.21 0.27 163 T_MONEY_PERCENT 1595 0.56 1.21 0.27 164 MultiRelay_CC 1593 0.47 1.20 0.14 165 XM_B_Phish66 1584 0.67 1.20 0.43 166 XM_UB99 1565 0.36 1.18 0.00 167 TR_XM_RelayPhish 1547 0.43 1.17 0.10 168 XMBody_78 1525 0.52 1.15 0.24 169 TR_XM_FormFill 1510 0.35 1.14 0.00 170 XM_B_COPY_HTML 1510 0.93 1.14 0.84 171 URIBL_SBL_A 1508 0.35 1.14 0.01 172 URIBL_SBL 1508 0.35 1.14 0.01 173 SH_BODYURI_REVERSE_SBL 1507 0.35 1.14 0.01 174 BAYES_20 1483 3.15 1.12 4.05 175 TVD_RCVD_IP 1464 1.05 1.11 1.03 176 TR_XM_PHPForged 1461 0.58 1.11 0.35 177 HELO_DYNAMIC_SPLIT_IP 1411 0.33 1.07 0.00 178 TR_XM_FormFill2 1403 0.57 1.06 0.35 179 TR_XM_PHPDW 1394 0.56 1.05 0.34 180 LongTLD 1386 0.67 1.05 0.50 181 HTML_IMAGE_ONLY_24 1366 0.58 1.03 0.38 182 XM_H_PHPOS 1360 0.55 1.03 0.33 183 TR_XM_InvalidRelay 1345 0.32 1.02 0.01 184 XM_B_DNDMA 1336 0.62 1.01 0.46 185 TR_XM_SEO4 1333 0.38 1.01 0.11 186 XM_UB60 1313 0.36 0.99 0.08 187 TR_XM_Base64_M1 1304 0.84 0.99 0.77 188 HTML_FONT_SIZE_LARGE 1299 0.35 0.98 0.08 189 XMPhish14 1281 0.55 0.97 0.37 190 PLING_QUERY 1280 0.52 0.97 0.33 191 RELAYCOUNTRY_FR 1266 0.55 0.96 0.38 192 HK_RANDOM_REPLYTO 1259 0.36 0.95 0.11 193 XMHTML_After_End 1258 0.61 0.95 0.46 194 ANY_BOUNCE_MESSAGE 1244 3.35 0.94 4.41 195 BOUNCE_MESSAGE 1243 3.35 0.94 4.41 196 RCVD_IN_SORBS_DUL 1243 0.32 0.94 0.04 197 RCVD_IN_IADB_VOUCHED 1233 1.74 0.93 2.09 198 DKIM_ADSP_CUSTOM_MED 1229 0.87 0.93 0.85 199 TR_MetaPhish_Combo_01 1228 1.01 0.93 1.04 200 HTML_IMAGE_ONLY_20 1225 0.76 0.93 0.69 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 262098 89.64 95.20 87.19 2 RELAYCOUNTRY_US 244502 81.00 80.22 81.34 3 DKIM_SIGNED 227789 80.12 90.00 75.78 4 XM_DK_Pass 224102 77.52 84.27 74.55 5 DKIM_VALID 220327 76.40 83.46 73.30 6 XM_B_Unicode 211843 74.69 84.28 70.47 7 DCC_CHECK_NEGATIVE 209769 57.81 30.58 69.78 8 BAYES_50 181706 54.12 39.74 60.45 9 DKIM_VALID_AU 180270 61.61 65.33 59.97 10 XMListUnsubscribeExists 142058 53.12 66.45 47.26 11 XM_B_SpammyWords 133070 51.76 68.79 44.27 12 XM_B_Unicode3 122058 42.90 48.10 40.60 13 DKIM_VALID_EF 97260 31.90 30.88 32.36 14 T_TM2_M_HEADER_IN_MSG 93372 28.52 22.76 31.06 15 DCC_CHECK 90688 41.64 67.74 30.17 16 HTML_FONT_LOW_CONTRAST 86540 30.71 35.08 28.79 17 LOC_TINY_FONT_1 85613 33.84 46.04 28.48 18 FVGT_m_MULTI_ODD 78699 28.67 34.34 26.18 19 XMSubLong 70856 24.58 26.88 23.57 20 T_KAM_HTML_FONT_INVALID 63842 23.58 28.89 21.24 21 MIME_HTML_ONLY 60701 23.22 30.10 20.19 22 RCVD_IN_MSPIKE_WL 55446 15.84 9.91 18.44 23 XM_B_SpammyWords2 55109 24.40 38.19 18.33 24 RCVD_IN_MSPIKE_H2 49243 16.91 18.12 16.38 25 ALL_TRUSTED 46977 11.29 1.44 15.63 26 TR_XM_DK_Unsub 42592 16.61 22.15 14.17 27 XM_Multi_Part_URI 41010 15.94 21.17 13.64 28 USER_IN_DEF_DKIM_WL 36965 9.38 2.75 12.30 29 UNPARSEABLE_RELAY 36287 13.88 17.99 12.07 30 BAYES_00 31495 7.49 0.70 10.48 31 XM_B_PhoneNumber 30706 9.10 6.56 10.21 32 TooManyTo_001 27664 7.75 4.45 9.20 33 XM_B_Unsub 27360 12.22 19.30 9.10 34 XM_Evil_Numbers_Gen 26700 9.34 10.39 8.88 35 RCVD_IN_MSPIKE_H3 25573 7.64 5.67 8.51 36 BAYES_60 21651 7.48 8.11 7.20 37 TR_XM_DK_Bayes 21304 5.04 0.40 7.09 38 TR_XM_BayesUnsub 21248 10.58 18.55 7.07 39 TR_XM_DK_Bayes1 20970 4.97 0.40 6.98 40 LotsOfNums_01 20788 6.88 6.81 6.92 41 XM_DKIMWhitelistDomains 19714 4.57 0.05 6.56 42 RCVD_IN_MSPIKE_H5 18741 4.98 2.13 6.23 43 TR_MAX_INTL_RELAY 18692 9.00 15.31 6.22 44 LOTS_OF_MONEY 18648 8.26 12.95 6.20 45 XM_H_GMP 18613 5.81 4.93 6.19 46 T_TooManySym_01 18399 5.16 2.97 6.12 47 TR_XM_DK_Bayes2 17606 4.16 0.30 5.86 48 BAYES_40 16809 4.45 1.84 5.59 49 XM_H_Long_From01 15288 5.20 5.46 5.09 50 MIME_QP_LONG_LINE 15101 4.42 3.05 5.02 51 XM_B_SpammyWords3 15044 8.13 15.23 5.00 52 XM_DK_Undo_02 14989 15.77 40.28 4.99 53 MPART_ALT_DIFF 14932 5.38 6.31 4.97 54 HTML_IMAGE_RATIO_02 14351 5.71 7.84 4.77 55 XMStrtUSub 14324 4.63 4.31 4.77 56 XM_PDF 14198 3.50 0.71 4.72 57 XM_B_Phish_Phrases 13680 6.04 9.43 4.55 58 XM_UncommonTLD01 13557 5.20 6.76 4.51 59 BOUNCE_MESSAGE 13263 3.35 0.94 4.41 60 ANY_BOUNCE_MESSAGE 13263 3.35 0.94 4.41 61 TR_XM_SpammyWords4 12406 6.41 11.61 4.13 62 HTML_IMAGE_RATIO_04 12202 4.23 4.62 4.06 63 BAYES_20 12167 3.15 1.12 4.05 64 BAYES_80 11792 5.64 9.55 3.92 65 T_REMOTE_IMAGE 11718 3.56 2.80 3.90 66 XMNumbers 11458 3.77 3.68 3.81 67 RCVD_IN_MSPIKE_H4 11132 3.21 2.10 3.70 68 BAYES_99 11073 12.14 31.38 3.68 69 RCVD_IN_VALIDITY_SAFE 10952 3.38 2.78 3.64 70 FSL_BULK_SIG 10883 5.19 8.75 3.62 71 RELAYCOUNTRY_META 10769 8.21 18.72 3.58 72 T_TooManySym_02 10028 2.55 0.76 3.34 73 BOTNET_IPINHOSTNAME 9913 5.95 11.99 3.30 74 RCVD_IN_IADB_LISTED 9769 2.75 1.62 3.25 75 HTML_MIME_NO_HTML_TAG 9454 2.96 2.54 3.15 76 MAILING_LIST_MULTI 9165 2.72 1.96 3.05 77 XMSubMetaSx_00 9110 4.03 6.31 3.03 78 RCVD_IN_VALIDITY_CERTIFIED 9030 2.76 2.21 3.00 79 RCVD_IN_IADB_SPF 8701 2.43 1.36 2.89 80 TooManyTo_002 8552 2.23 0.84 2.84 81 BAYES_999 8321 9.31 24.19 2.77 82 HTML_IMAGE_RATIO_06 8058 2.67 2.64 2.68 83 MIME_HTML_MOSTLY 8010 3.16 4.27 2.66 84 XM_B_SpammyTLD 7962 3.27 4.67 2.65 85 HTML_IMAGE_RATIO_08 7927 2.82 3.23 2.64 86 RCVD_IN_IADB_SENDERID 7797 2.18 1.24 2.59 87 RCVD_IN_IADB_DK 7518 2.12 1.26 2.50 88 MIME_HTML_ONLY_MULTI 7511 2.68 3.08 2.50 89 DKIM_INVALID 7462 3.72 6.54 2.48 90 XM_Body_Dirty_Words 7418 3.77 6.74 2.47 91 INVALID_MSGID 7283 1.74 0.18 2.42 92 BAYES_05 7009 1.77 0.51 2.33 93 BAYES_95 6898 3.24 5.40 2.29 94 TR_XM_DKIM_Undo 6704 10.45 29.12 2.23 95 XM_B_URI_Unicode 6633 2.33 2.62 2.21 96 MSGID_NOFQDN1 6441 1.49 0.01 2.14 97 TO_MALFORMED 6328 1.46 0.01 2.11 98 RCVD_IN_IADB_VOUCHED 6279 1.74 0.93 2.09 99 XM_CamelCaseFrm001 5932 2.44 3.50 1.97 100 XM_DK_Undo_01 5661 1.82 1.66 1.88 101 TM2_M_URI_OPT_OUT 5639 1.93 2.04 1.88 102 TR_XM_UnparsRelay 5550 4.27 9.77 1.85 103 TR_XM_SpammyWords5 5545 2.31 3.37 1.84 104 FROM_EXCESS_BASE64 5509 1.88 2.00 1.83 105 KHOP_HELO_FCRDNS 5438 1.85 1.95 1.81 106 TooManyTo_003 5318 1.45 0.74 1.77 107 XM_B_Investor 5188 2.90 5.57 1.73 108 TR_XM_PhishingBody 5187 2.61 4.63 1.73 109 TR_XM_SpammyRelay 5176 5.31 13.47 1.72 110 XM_SendGrid 4892 1.62 1.61 1.63 111 XM_B_Unsub2 4884 2.23 3.62 1.62 112 UNTRUSTED_Relay 4853 3.12 6.54 1.61 113 T_XMDrugObfuBody_14 4852 2.37 4.09 1.61 114 XMDiploma_00 4800 2.18 3.49 1.60 115 HELO_NODOT 4600 1.14 0.26 1.53 116 HELO_NO_DOMAIN 4592 1.10 0.14 1.53 117 RCVD_IN_IADB_OPTIN 4426 1.20 0.60 1.47 118 XM_GoogleGroups 4377 1.26 0.80 1.46 119 SUBJ_ALL_CAPS 4315 1.45 1.49 1.44 120 TR_Symld_Words 4299 1.25 0.82 1.43 121 T_XMDrugObfuBody_08 4251 1.97 3.23 1.41 122 TM2_M_VERY_LONG_WORD 4113 2.02 3.51 1.37 123 IN_HORDE_ADDRESS_BOOK 4107 0.98 0.10 1.37 124 T_TVD_MIME_NO_HEADERS 4063 0.95 0.05 1.35 125 TooManyTo_004 4039 1.13 0.64 1.34 126 BOTNET 3972 4.59 12.02 1.32 127 T_TooManySym_03 3962 0.96 0.16 1.32 128 XMCapTrack 3953 1.12 0.68 1.32 129 XM_SPF_SoftFail 3817 2.03 3.76 1.27 130 URI_NOVOWEL 3814 1.26 1.24 1.27 131 XMStockSpam_06 3783 1.63 2.48 1.26 132 XMGappySubj_01 3775 0.93 0.18 1.26 133 RCVD_IN_MSPIKE_BL 3720 3.18 7.60 1.24 134 TR_XM_MSPIKECOMBO 3718 3.18 7.60 1.24 135 URI_HEX 3582 1.32 1.62 1.19 136 TR_DCC_Bayes_99 3405 6.66 19.24 1.13 137 XM_UB50 3301 1.60 2.75 1.10 138 TooManyTo_005 3286 0.94 0.58 1.09 139 XMBrknScrpt_02 3259 1.35 1.95 1.08 140 XM_ShortIntro_01 3238 0.88 0.44 1.08 141 TR_XM_DK_SendGrid 3182 1.01 0.90 1.06 142 RCVD_IN_MSPIKE_L3 3174 2.13 4.59 1.06 143 TR_MetaPhish_Combo_01 3138 1.01 0.93 1.04 144 XMSexyCombo_05 3120 2.11 4.56 1.04 145 TVD_RCVD_IP 3087 1.05 1.11 1.03 146 T_FILL_THIS_FORM_SHORT 3086 1.66 3.12 1.03 147 TVD_SPACE_RATIO 2975 0.75 0.21 0.99 148 HTML_IMAGE_ONLY_32 2746 0.69 0.18 0.91 149 SpammyFromTLD_01 2710 1.31 2.23 0.90 150 XM_H_PHPMailer 2679 0.76 0.46 0.89 151 XM_H_Long_From02 2679 1.03 1.34 0.89 152 URI_TRY_3LD 2611 1.06 1.51 0.87 153 DKIM_ADSP_CUSTOM_MED 2542 0.87 0.93 0.85 154 XM_B_COPY_HTML 2524 0.93 1.14 0.84 155 XMGenDplmaNmb 2515 1.12 1.78 0.84 156 XMGappySubj_02 2481 0.58 0.03 0.83 157 T_XMDrugObfuBody_00 2463 1.04 1.54 0.82 158 XM_OfRef6 2439 1.67 3.62 0.81 159 TR_XM_Base64_M1 2327 0.84 0.99 0.77 160 RCVD_IN_PBL 2324 0.92 1.26 0.77 161 XMBdyGiftCard01 2288 1.15 2.04 0.76 162 XMBSHREFv2 2262 0.74 0.72 0.75 163 RELAYCOUNTRY_CA 2259 2.76 7.31 0.75 164 HTTPS_HTTP_MISMATCH 2181 0.88 1.24 0.73 165 XM_B_SpammyWords4 2160 1.29 2.58 0.72 166 XMNoVowels 2141 0.69 0.65 0.71 167 RELAYCOUNTRY_GB 2086 0.75 0.87 0.69 168 HTML_IMAGE_ONLY_20 2071 0.76 0.93 0.69 169 TO_NO_BRKTS_HTML_ONLY 2068 0.53 0.18 0.69 170 TR_XM_SpammyWords3 2010 2.20 5.68 0.67 171 XMPhish30 2009 1.03 1.84 0.67 172 RCVD_IN_PSBL 1979 1.13 2.19 0.66 173 T_Symld_Words_02 1966 0.84 1.27 0.65 174 XMSlimDrugH 1897 0.69 0.81 0.63 175 T_OBFU_PDF_ATTACH 1893 0.48 0.12 0.63 176 FROM_GOV_DKIM_AU 1872 0.49 0.20 0.62 177 T_XMHurry_00 1752 1.09 2.24 0.58 178 MSGID_FROM_MTA_HEADER 1726 0.50 0.32 0.57 179 SHORT_URI_3 1683 0.46 0.22 0.56 180 MPART_ALT_DIFF_COUNT 1666 0.77 1.27 0.55 181 XMMoneyMeta_00 1605 0.65 0.93 0.53 182 XMLngstWrd_00 1575 0.53 0.53 0.52 183 XMDateMe_00 1534 0.57 0.70 0.51 184 NML_ADSP_CUSTOM_MED 1530 0.57 0.71 0.51 185 FORGED_GMAIL_RCVD 1517 0.55 0.65 0.50 186 RCVD_IN_BL_SPAMCOP_NET 1503 3.48 10.24 0.50 187 LongTLD 1500 0.67 1.05 0.50 188 HTML_TAG_BALANCE_BODY 1493 0.62 0.89 0.50 189 XM_ProductURIs 1443 0.80 1.53 0.48 190 SHORT_HELO_AND_INLINE_IMAGE 1429 0.34 0.02 0.48 191 TR_XM_SpammyWords2 1399 3.17 9.33 0.47 192 XMHTML_After_End 1391 0.61 0.95 0.46 193 XMBody_17 1379 0.90 1.89 0.46 194 RELAYCOUNTRY_AU 1379 1.33 3.32 0.46 195 XM_B_DNDMA 1369 0.62 1.01 0.46 196 XMSubMetaI_00 1366 0.72 1.33 0.45 197 XMLngstWrd_01 1348 0.46 0.50 0.45 198 HTML_IMAGE_ONLY_28 1336 0.51 0.66 0.44 199 THIS_AD 1328 0.71 1.31 0.44 200 TR_XM_GMP_MSPIKE_UNDO2 1309 0.38 0.26 0.44 ----------------------------------------------------------------------