Email: 499422 Autolearn: 0 AvgScore: 4.44 AvgScanTime: 1.41 sec Spam: 143085 Autolearn: 0 AvgScore: 14.61 AvgScanTime: 1.68 sec Ham: 356337 Autolearn: 0 AvgScore: 0.36 AvgScanTime: 1.30 sec Time Spent Running SA: 195.12 hours Time Spent Processing Spam: 66.87 hours Time Spent Processing Ham: 128.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135386 89.17 94.62 86.98 2 DKIM_SIGNED 130332 75.44 91.09 69.16 3 XM_DK_Pass 124687 73.47 87.14 67.98 4 DKIM_VALID 123781 72.62 86.51 67.04 5 XM_B_Unicode 121801 76.56 85.12 73.12 6 RELAYCOUNTRY_US 116298 76.35 81.28 74.37 7 XM_B_SpammyWords 100817 50.82 70.46 42.93 8 DCC_CHECK 99910 41.41 69.83 30.00 9 XMListUnsubscribeExists 98982 52.22 69.18 45.41 10 DKIM_VALID_AU 97158 58.64 67.90 54.92 11 LOC_TINY_FONT_1 69069 33.18 48.27 27.11 12 XM_B_Unicode3 68864 46.09 48.13 45.28 13 XM_DK_Undo_02 59869 15.39 41.84 4.76 14 XM_B_SpammyWords2 58153 24.88 40.64 18.55 15 BAYES_50 57090 56.90 39.90 63.72 16 HTML_FONT_LOW_CONTRAST 53707 28.05 37.54 24.23 17 FVGT_m_MULTI_ODD 50919 27.22 35.59 23.86 18 DKIM_VALID_EF 46190 28.84 32.28 27.46 19 T_KAM_HTML_FONT_INVALID 45053 29.53 31.49 28.74 20 BAYES_99 43566 11.20 30.45 3.47 21 TR_XM_DKIM_Undo 42709 9.82 29.85 1.78 22 DCC_CHECK_NEGATIVE 41036 58.12 28.68 69.94 23 MIME_HTML_ONLY 40560 25.53 28.35 24.40 24 XMSubLong 36320 26.09 25.38 26.37 25 XM_Multi_Part_URI 33068 15.73 23.11 12.76 26 BAYES_999 33031 8.52 23.08 2.67 27 TR_XM_DK_Unsub 33029 15.77 23.08 12.83 28 T_TM2_M_HEADER_IN_MSG 31626 26.47 22.10 28.22 29 TR_DCC_Bayes_99 28713 6.59 20.07 1.17 30 RCVD_IN_MSPIKE_H2 27772 15.96 19.41 14.57 31 UNPARSEABLE_RELAY 25876 12.88 18.08 10.79 32 RELAYCOUNTRY_META 25721 7.37 17.98 3.11 33 XM_B_Unsub 25448 10.60 17.79 7.71 34 TR_XM_BayesUnsub 24278 9.11 16.97 5.96 35 XM_B_SpammyWords3 22201 7.57 15.52 4.38 36 TR_MAX_INTL_RELAY 22092 8.79 15.44 6.12 37 LOTS_OF_MONEY 20612 9.05 14.41 6.90 38 TR_XM_SpammyWords4 18633 7.22 13.02 4.89 39 TR_XM_SpammyRelay 18332 4.84 12.81 1.64 40 BOTNET_IPINHOSTNAME 17594 5.61 12.30 2.93 41 RCVD_IN_BL_SPAMCOP_NET 17275 3.88 12.07 0.59 42 RCVD_IN_MSPIKE_WL 15344 15.00 10.72 16.72 43 TR_XM_UnparsRelay 14410 4.00 10.07 1.57 44 TR_XM_SpammyWords2 14281 3.13 9.98 0.37 45 BAYES_80 13682 5.57 9.56 3.96 46 BOTNET 13522 3.55 9.45 1.18 47 XM_B_Phish_Phrases 13028 6.06 9.11 4.83 48 XM_Evil_Numbers_Gen 12951 8.96 9.05 8.93 49 BAYES_60 11994 7.09 8.38 6.57 50 FSL_BULK_SIG 10959 4.78 7.66 3.63 51 XM_Body_Dirty_Words 10192 3.56 7.12 2.14 52 HTML_IMAGE_RATIO_02 10137 5.10 7.08 4.31 53 UNTRUSTED_Relay 9973 2.92 6.97 1.29 54 LotsOfNums_01 9462 7.56 6.61 7.94 55 RELAYCOUNTRY_CA 9240 2.30 6.46 0.63 56 XM_UncommonTLD01 9070 4.45 6.34 3.69 57 XM_B_PhoneNumber 9062 8.17 6.33 8.91 58 MPART_ALT_DIFF 8873 4.87 6.20 4.33 59 XM_B_Investor 8843 2.87 6.18 1.54 60 RCVD_IN_MSPIKE_H3 8631 7.37 6.03 7.90 61 TR_XM_SPAMCOP 8436 1.81 5.90 0.17 62 RCVD_IN_MSPIKE_BL 8419 2.45 5.88 1.07 63 TR_XM_MSPIKECOMBO 8419 2.45 5.88 1.07 64 XMSubMetaSx_00 8261 3.55 5.77 2.66 65 BAYES_95 7865 3.11 5.50 2.16 66 XM_H_Long_From01 7840 5.24 5.48 5.14 67 XM_H_GMP 7648 5.46 5.35 5.50 68 XM_OfRef6 6907 1.89 4.83 0.71 69 XMSexyCombo_05 6765 2.00 4.73 0.90 70 HTML_IMAGE_RATIO_04 6589 4.42 4.60 4.34 71 T_XMDrugObfuBody_14 6561 2.61 4.59 1.81 72 DKIM_INVALID 6551 2.82 4.58 2.11 73 MIME_HTML_MOSTLY 6523 3.07 4.56 2.47 74 TR_XM_PhishingBody 6496 2.40 4.54 1.54 75 XM_B_SpammyTLD 6231 3.57 4.35 3.25 76 TR_XM_SpammyWords3 6007 1.62 4.20 0.59 77 XMStrtUSub 5641 4.31 3.94 4.46 78 RCVD_IN_MSPIKE_L3 5499 1.79 3.84 0.96 79 TooManyTo_001 5476 6.28 3.83 7.26 80 TM2_M_VERY_LONG_WORD 5430 2.64 3.79 2.18 81 T_XMDrugObfuBody_08 5361 2.09 3.75 1.43 82 XM_URI_RBL 5098 1.21 3.56 0.27 83 XM_SPF_SoftFail 4955 2.25 3.46 1.77 84 HTML_IMAGE_RATIO_06 4790 3.64 3.35 3.76 85 XMNumbers 4706 3.10 3.29 3.03 86 MIME_QP_LONG_LINE 4581 4.67 3.20 5.26 87 TR_XM_SpammyWords5 4547 1.90 3.18 1.39 88 MIME_HTML_ONLY_MULTI 4456 2.47 3.11 2.21 89 XM_B_Unsub2 4448 1.80 3.11 1.28 90 TM2_M_URI_OPT_OUT 4334 2.05 3.03 1.66 91 RELAYCOUNTRY_AU 4287 1.18 3.00 0.44 92 XMDiploma_00 4250 1.87 2.97 1.43 93 TR_XM_NoHeaderRelay 4215 0.95 2.95 0.15 94 T_TooManySym_01 4176 4.48 2.92 5.11 95 XM_UB50 4152 1.46 2.90 0.88 96 HTML_IMAGE_RATIO_08 4012 2.32 2.80 2.12 97 XM_CamelCaseFrm001 3941 2.05 2.75 1.77 98 XM_B_SpammyWords4 3705 1.13 2.59 0.54 99 XM_B_URI_Unicode 3691 1.96 2.58 1.72 100 SpammyFromTLD_02 3615 1.12 2.53 0.55 101 RCVD_IN_MSPIKE_H5 3501 4.61 2.45 5.48 102 TR_XM_INTL_Spamhaus 3446 0.83 2.41 0.20 103 T_FILL_THIS_FORM_SHORT 3230 1.49 2.26 1.18 104 RCVD_IN_MSPIKE_H4 3212 3.02 2.24 3.34 105 TR_XM_INV_DKIM 3112 0.64 2.17 0.03 106 XMStockSpam_06 3086 1.38 2.16 1.07 107 TR_XM_MSPIKECOMBO2 3057 0.68 2.14 0.09 108 USER_IN_DEF_DKIM_WL 3042 9.44 2.13 12.38 109 RCVD_IN_VALIDITY_SAFE 2866 3.41 2.00 3.98 110 RCVD_IN_XBL 2862 0.59 2.00 0.02 111 XM_H_Long_From02 2805 1.13 1.96 0.79 112 XMGenDplmaNmb 2794 1.17 1.95 0.86 113 FROM_EXCESS_BASE64 2783 1.66 1.94 1.55 114 XMPhish30 2777 0.84 1.94 0.40 115 MAILING_LIST_MULTI 2760 2.69 1.93 2.99 116 TR_LOTS_OF_MONEY3 2722 0.80 1.90 0.36 117 BAYES_40 2643 4.43 1.85 5.47 118 T_XMHurry_00 2565 0.97 1.79 0.64 119 KHOP_HELO_FCRDNS 2545 2.28 1.78 2.48 120 XMBody_17 2532 0.77 1.77 0.37 121 RCVD_IN_VALIDITY_RPBL 2529 0.52 1.77 0.02 122 XMBrknScrpt_02 2525 1.02 1.76 0.72 123 RCVD_IN_IADB_LISTED 2503 2.90 1.75 3.37 124 XM_DK_Undo_01 2465 1.59 1.72 1.54 125 SpammyFromTLD_01 2443 0.95 1.71 0.65 126 RCVD_IN_SBL_CSS 2406 0.52 1.68 0.05 127 RCVD_IN_PBL 2400 0.98 1.68 0.70 128 RCVD_IN_VALIDITY_CERTIFIED 2358 2.92 1.65 3.43 129 XM_B_SEO 2323 0.63 1.62 0.24 130 TR_MetaPhish_Combo_01 2291 1.11 1.60 0.92 131 RCVD_IN_PSBL 2266 0.86 1.58 0.57 132 URI_TRY_3LD 2239 0.79 1.56 0.48 133 XM_SendGrid 2230 1.46 1.56 1.42 134 XM_B_COPY_HTML 2199 0.82 1.54 0.54 135 T_XMDrugObfuBody_00 2172 1.35 1.52 1.28 136 RCVD_IN_IADB_SPF 2170 2.57 1.52 3.00 137 URI_NOVOWEL 2156 1.20 1.51 1.08 138 SHORTCIRCUIT 2113 0.42 1.48 0.00 139 RCVD_IN_ZEN_LASTEXTERNAL 2113 0.42 1.48 0.00 140 BAYES_20 2107 3.00 1.47 3.61 141 TR_XM_MaxSPIKE 2105 0.45 1.47 0.05 142 T_REMOTE_IMAGE 2100 2.78 1.47 3.31 143 DIET_1 2095 0.58 1.46 0.23 144 URI_HEX 2089 1.26 1.46 1.17 145 HTML_MIME_NO_HTML_TAG 2075 2.19 1.45 2.49 146 XMBdyGiftCard01 2040 0.93 1.43 0.73 147 MultiRelay_CC 2034 0.50 1.42 0.13 148 RDNS_DYNAMIC 2031 0.51 1.42 0.14 149 BOTNET_NORDNS 2025 0.41 1.42 0.00 150 RCVD_IN_IADB_DK 2018 2.26 1.41 2.60 151 RCVD_IN_MSPIKE_L4 1988 0.47 1.39 0.10 152 RCVD_IN_IADB_SENDERID 1964 2.31 1.37 2.69 153 SUBJ_ALL_CAPS 1949 1.30 1.36 1.28 154 XM_ProductURIs 1943 0.70 1.36 0.44 155 XM_B_Phish66 1880 0.62 1.31 0.34 156 XM_HighProb1 1876 0.38 1.31 0.00 157 STY_INVIS_DIRECT 1852 0.58 1.29 0.29 158 MPART_ALT_DIFF_COUNT 1851 0.75 1.29 0.53 159 XM_UB99 1816 0.36 1.27 0.00 160 TR_XM_SEO4 1785 0.44 1.25 0.11 161 DKIM_ADSP_CUSTOM_MED 1761 0.89 1.23 0.75 162 THIS_AD 1736 0.56 1.21 0.30 163 XM_UB60 1717 0.39 1.20 0.06 164 TR_XM_InvalidRelay 1705 0.35 1.19 0.01 165 XMMoneyMeta_00 1680 0.63 1.17 0.41 166 LongTLD 1677 0.67 1.17 0.47 167 ALL_TRUSTED 1598 16.72 1.12 22.99 168 T_MONEY_PERCENT 1590 0.45 1.11 0.19 169 TR_LOTS_OF_MONEY2 1590 0.45 1.11 0.19 170 TM2_M_OBFU_COMMENT 1559 0.47 1.09 0.22 171 TR_XM_RelayPhish 1558 0.36 1.09 0.07 172 T_Symld_Words_02 1541 0.73 1.08 0.59 173 HTML_FONT_TINY_NORDNS 1535 0.39 1.07 0.11 174 TM2_M_A_HREF_HREF 1523 0.52 1.06 0.30 175 SHOPIFY_IMG_NOT_RCVD_SFY 1523 0.46 1.06 0.22 176 NML_ADSP_CUSTOM_MED 1499 0.63 1.05 0.46 177 RELAYCOUNTRY_FR 1466 0.46 1.02 0.23 178 TR_XM_GMP_BULK_SIG 1460 0.37 1.02 0.11 179 FORGED_GMAIL_RCVD 1436 0.63 1.00 0.47 180 HTTPS_HTTP_MISMATCH 1428 0.75 1.00 0.66 181 TVD_RCVD_IP 1409 1.38 0.98 1.54 182 MISSING_HEADERS 1405 0.50 0.98 0.31 183 TR_XM_PHPForged 1405 0.46 0.98 0.24 184 XM_B_COVIDMETA 1404 0.41 0.98 0.19 185 XMSubMetaI_00 1402 0.65 0.98 0.52 186 TR_XM_PHPDW 1399 0.45 0.98 0.24 187 XM_OfRef7 1399 0.35 0.98 0.10 188 TR_XM_FormFill2 1396 0.77 0.98 0.69 189 XMBody_78 1389 0.46 0.97 0.25 190 XM_DIRTYINTL 1383 0.36 0.97 0.11 191 HELO_DYNAMIC_SPLIT_IP 1372 0.28 0.96 0.01 192 XM_H_PHPOS 1358 0.44 0.95 0.23 193 TR_XM_DK_SendGrid 1355 0.93 0.95 0.92 194 RCVD_IN_IADB_VOUCHED 1351 1.79 0.94 2.13 195 XM_B_DNDMA 1349 0.60 0.94 0.47 196 XMSlimDrugH 1348 0.72 0.94 0.64 197 XMClaimOffer 1345 0.37 0.94 0.14 198 TR_Mismatch_TLD_01 1332 0.44 0.93 0.25 199 TR_Symld_Words 1308 1.19 0.91 1.30 200 TR_Mismatch_TLD_02 1287 0.32 0.90 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 309955 89.17 94.62 86.98 2 RELAYCOUNTRY_US 265015 76.35 81.28 74.37 3 XM_B_Unicode 260566 76.56 85.12 73.12 4 DCC_CHECK_NEGATIVE 249225 58.12 28.68 69.94 5 DKIM_SIGNED 246426 75.44 91.09 69.16 6 XM_DK_Pass 242246 73.47 87.14 67.98 7 DKIM_VALID 238901 72.62 86.51 67.04 8 BAYES_50 227066 56.90 39.90 63.72 9 DKIM_VALID_AU 195707 58.64 67.90 54.92 10 XMListUnsubscribeExists 161821 52.22 69.18 45.41 11 XM_B_Unicode3 161336 46.09 48.13 45.28 12 XM_B_SpammyWords 152980 50.82 70.46 42.93 13 DCC_CHECK 106917 41.41 69.83 30.00 14 T_KAM_HTML_FONT_INVALID 102419 29.53 31.49 28.74 15 T_TM2_M_HEADER_IN_MSG 100571 26.47 22.10 28.22 16 DKIM_VALID_EF 97850 28.84 32.28 27.46 17 LOC_TINY_FONT_1 96620 33.18 48.27 27.11 18 XMSubLong 93960 26.09 25.38 26.37 19 MIME_HTML_ONLY 86953 25.53 28.35 24.40 20 HTML_FONT_LOW_CONTRAST 86358 28.05 37.54 24.23 21 FVGT_m_MULTI_ODD 85005 27.22 35.59 23.86 22 ALL_TRUSTED 81905 16.72 1.12 22.99 23 XM_B_SpammyWords2 66111 24.88 40.64 18.55 24 RCVD_IN_MSPIKE_WL 59583 15.00 10.72 16.72 25 RCVD_IN_MSPIKE_H2 51918 15.96 19.41 14.57 26 TR_XM_DK_Unsub 45722 15.77 23.08 12.83 27 XM_Multi_Part_URI 45471 15.73 23.11 12.76 28 USER_IN_DEF_DKIM_WL 44101 9.44 2.13 12.38 29 UNPARSEABLE_RELAY 38455 12.88 18.08 10.79 30 BAYES_00 32069 6.61 0.64 9.00 31 XM_Evil_Numbers_Gen 31808 8.96 9.05 8.93 32 XM_B_PhoneNumber 31742 8.17 6.33 8.91 33 LotsOfNums_01 28299 7.56 6.61 7.94 34 RCVD_IN_MSPIKE_H3 28159 7.37 6.03 7.90 35 UNICODE_OBFU_ASC 28140 5.73 0.32 7.90 36 MIME_HEADER_CTYPE_ONLY 27671 5.59 0.17 7.77 37 XM_B_Unsub 27479 10.60 17.79 7.71 38 TooManyTo_001 25876 6.28 3.83 7.26 39 LOTS_OF_MONEY 24571 9.05 14.41 6.90 40 BAYES_60 23419 7.09 8.38 6.57 41 TR_MAX_INTL_RELAY 21796 8.79 15.44 6.12 42 TR_XM_DK_Bayes 21691 4.49 0.50 6.09 43 TR_XM_DK_Bayes1 21277 4.40 0.49 5.97 44 TR_XM_BayesUnsub 21226 9.11 16.97 5.96 45 XM_DKIMWhitelistDomains 20479 4.10 0.01 5.75 46 XM_H_GMP 19600 5.46 5.35 5.50 47 RCVD_IN_MSPIKE_H5 19540 4.61 2.45 5.48 48 BAYES_40 19500 4.43 1.85 5.47 49 MIME_QP_LONG_LINE 18759 4.67 3.20 5.26 50 ANY_BOUNCE_MESSAGE 18749 3.98 0.79 5.26 51 BOUNCE_MESSAGE 18745 3.98 0.78 5.26 52 XM_H_Long_From01 18314 5.24 5.48 5.14 53 T_TooManySym_01 18198 4.48 2.92 5.11 54 TR_XM_DK_Bayes2 17884 3.66 0.29 5.02 55 TR_XM_SpammyWords4 17437 7.22 13.02 4.89 56 XM_B_Phish_Phrases 17223 6.06 9.11 4.83 57 XM_DK_Undo_02 16972 15.39 41.84 4.76 58 XMStrtUSub 15879 4.31 3.94 4.46 59 XM_B_SpammyWords3 15602 7.57 15.52 4.38 60 HTML_IMAGE_RATIO_04 15464 4.42 4.60 4.34 61 MPART_ALT_DIFF 15447 4.87 6.20 4.33 62 HTML_IMAGE_RATIO_02 15355 5.10 7.08 4.31 63 XM_PDF 14462 3.10 0.70 4.06 64 RCVD_IN_VALIDITY_SAFE 14169 3.41 2.00 3.98 65 BAYES_80 14113 5.57 9.56 3.96 66 HTML_IMAGE_RATIO_06 13400 3.64 3.35 3.76 67 XM_UncommonTLD01 13161 4.45 6.34 3.69 68 FSL_BULK_SIG 12925 4.78 7.66 3.63 69 BAYES_20 12860 3.00 1.47 3.61 70 BAYES_99 12350 11.20 30.45 3.47 71 RCVD_IN_VALIDITY_CERTIFIED 12232 2.92 1.65 3.43 72 RCVD_IN_IADB_LISTED 11995 2.90 1.75 3.37 73 RCVD_IN_MSPIKE_H4 11884 3.02 2.24 3.34 74 T_REMOTE_IMAGE 11777 2.78 1.47 3.31 75 XM_B_SpammyTLD 11590 3.57 4.35 3.25 76 RELAYCOUNTRY_META 11079 7.37 17.98 3.11 77 XMNumbers 10781 3.10 3.29 3.03 78 RCVD_IN_IADB_SPF 10678 2.57 1.52 3.00 79 MAILING_LIST_MULTI 10662 2.69 1.93 2.99 80 BOTNET_IPINHOSTNAME 10432 5.61 12.30 2.93 81 T_TooManySym_02 9789 2.16 0.70 2.75 82 RCVD_IN_IADB_SENDERID 9594 2.31 1.37 2.69 83 BAYES_999 9513 8.52 23.08 2.67 84 XMSubMetaSx_00 9484 3.55 5.77 2.66 85 RCVD_IN_IADB_DK 9280 2.26 1.41 2.60 86 HTML_MIME_NO_HTML_TAG 8861 2.19 1.45 2.49 87 KHOP_HELO_FCRDNS 8841 2.28 1.78 2.48 88 MIME_HTML_MOSTLY 8812 3.07 4.56 2.47 89 TooManyTo_002 7998 1.77 0.60 2.24 90 MIME_HTML_ONLY_MULTI 7886 2.47 3.11 2.21 91 TM2_M_VERY_LONG_WORD 7752 2.64 3.79 2.18 92 BAYES_95 7681 3.11 5.50 2.16 93 XM_Body_Dirty_Words 7612 3.56 7.12 2.14 94 RCVD_IN_IADB_VOUCHED 7590 1.79 0.94 2.13 95 HTML_IMAGE_RATIO_08 7566 2.32 2.80 2.12 96 DKIM_INVALID 7525 2.82 4.58 2.11 97 BAYES_05 7276 1.68 0.77 2.04 98 INVALID_MSGID 7092 1.49 0.25 1.99 99 T_XMDrugObfuBody_14 6463 2.61 4.59 1.81 100 TR_XM_DKIM_Undo 6358 9.82 29.85 1.78 101 TO_MALFORMED 6342 1.27 0.01 1.78 102 MSGID_NOFQDN1 6317 1.27 0.01 1.77 103 XM_CamelCaseFrm001 6306 2.05 2.75 1.77 104 XM_SPF_SoftFail 6292 2.25 3.46 1.77 105 XM_B_URI_Unicode 6117 1.96 2.58 1.72 106 TM2_M_URI_OPT_OUT 5929 2.05 3.03 1.66 107 TR_XM_SpammyRelay 5855 4.84 12.81 1.64 108 TR_XM_UnparsRelay 5583 4.00 10.07 1.57 109 FROM_EXCESS_BASE64 5519 1.66 1.94 1.55 110 TR_XM_PhishingBody 5502 2.40 4.54 1.54 111 TVD_RCVD_IP 5501 1.38 0.98 1.54 112 XM_B_Investor 5487 2.87 6.18 1.54 113 XM_DK_Undo_01 5472 1.59 1.72 1.54 114 RCVD_IN_IADB_OPTIN 5327 1.25 0.65 1.49 115 T_XMDrugObfuBody_08 5096 2.09 3.75 1.43 116 XMDiploma_00 5086 1.87 2.97 1.43 117 TooManyTo_003 5048 1.16 0.52 1.42 118 XM_SendGrid 5046 1.46 1.56 1.42 119 TR_XM_SpammyWords5 4962 1.90 3.18 1.39 120 TR_Symld_Words 4648 1.19 0.91 1.30 121 UNTRUSTED_Relay 4604 2.92 6.97 1.29 122 T_XMDrugObfuBody_00 4577 1.35 1.52 1.28 123 SUBJ_ALL_CAPS 4564 1.30 1.36 1.28 124 XM_B_Unsub2 4544 1.80 3.11 1.28 125 XM_GoogleGroups 4343 1.12 0.86 1.22 126 IN_HORDE_ADDRESS_BOOK 4268 0.89 0.12 1.20 127 XMGappySubj_01 4248 0.89 0.14 1.19 128 XM_H_PHPMailer 4213 0.97 0.43 1.18 129 BOTNET 4207 3.55 9.45 1.18 130 T_FILL_THIS_FORM_SHORT 4204 1.49 2.26 1.18 131 TR_DCC_Bayes_99 4186 6.59 20.07 1.17 132 URI_HEX 4179 1.26 1.46 1.17 133 T_TooManySym_03 3890 0.83 0.18 1.09 134 URI_NOVOWEL 3847 1.20 1.51 1.08 135 RCVD_IN_MSPIKE_BL 3810 2.45 5.88 1.07 136 TR_XM_MSPIKECOMBO 3809 2.45 5.88 1.07 137 HELO_NODOT 3808 0.82 0.21 1.07 138 HELO_NO_DOMAIN 3800 0.79 0.12 1.07 139 XMStockSpam_06 3796 1.38 2.16 1.07 140 TooManyTo_004 3632 0.86 0.46 1.02 141 XMCapTrack 3494 0.86 0.55 0.98 142 RCVD_IN_MSPIKE_L3 3424 1.79 3.84 0.96 143 TR_XM_DK_SendGrid 3273 0.93 0.95 0.92 144 TR_MetaPhish_Combo_01 3268 1.11 1.60 0.92 145 XMSexyCombo_05 3204 2.00 4.73 0.90 146 TVD_SPACE_RATIO 3152 0.65 0.08 0.88 147 XM_UB50 3118 1.46 2.90 0.88 148 XMGenDplmaNmb 3074 1.17 1.95 0.86 149 XM_ShortIntro_01 2903 0.72 0.47 0.81 150 TooManyTo_005 2894 0.70 0.41 0.81 151 XM_H_Long_From02 2831 1.13 1.96 0.79 152 DKIM_ADSP_CUSTOM_MED 2679 0.89 1.23 0.75 153 XMLngstWrd_00 2652 0.68 0.51 0.74 154 XMBdyGiftCard01 2608 0.93 1.43 0.73 155 FROM_GOV_DKIM_AU 2557 0.61 0.33 0.72 156 XMBrknScrpt_02 2557 1.02 1.76 0.72 157 XM_OfRef6 2540 1.89 4.83 0.71 158 RCVD_IN_PBL 2502 0.98 1.68 0.70 159 RELAYCOUNTRY_GB 2458 0.75 0.89 0.69 160 TR_XM_FormFill2 2442 0.77 0.98 0.69 161 XM_shorewaves_Whitelist 2425 0.49 0.00 0.68 162 XMBSHREFv2 2421 0.62 0.49 0.68 163 XMLngstWrd_01 2393 0.62 0.48 0.67 164 HTTPS_HTTP_MISMATCH 2339 0.75 1.00 0.66 165 SpammyFromTLD_01 2305 0.95 1.71 0.65 166 T_XMHurry_00 2271 0.97 1.79 0.64 167 XMSlimDrugH 2264 0.72 0.94 0.64 168 RELAYCOUNTRY_CA 2252 2.30 6.46 0.63 169 T_OBFU_PDF_ATTACH 2176 0.47 0.12 0.61 170 RCVD_IN_BL_SPAMCOP_NET 2118 3.88 12.07 0.59 171 T_Symld_Words_02 2104 0.73 1.08 0.59 172 TR_XM_SpammyWords3 2091 1.62 4.20 0.59 173 RCVD_IN_PSBL 2027 0.86 1.58 0.57 174 TR_XM_Base64_M1 1997 0.62 0.78 0.56 175 SpammyFromTLD_02 1972 1.12 2.53 0.55 176 MSGID_FROM_MTA_HEADER 1930 0.44 0.19 0.54 177 XMNoVowels 1919 0.53 0.51 0.54 178 XM_B_SpammyWords4 1915 1.13 2.59 0.54 179 XM_B_COPY_HTML 1910 0.82 1.54 0.54 180 XMGappySubj_02 1891 0.39 0.05 0.53 181 MPART_ALT_DIFF_COUNT 1879 0.75 1.29 0.53 182 HTML_IMAGE_ONLY_20 1871 0.58 0.70 0.53 183 XMSubMetaI_00 1856 0.65 0.98 0.52 184 XMPhish14 1778 0.58 0.78 0.50 185 TO_NO_BRKTS_HTML_ONLY 1724 0.38 0.14 0.48 186 URI_TRY_3LD 1706 0.79 1.56 0.48 187 PLING_QUERY 1695 0.52 0.64 0.48 188 FORGED_GMAIL_RCVD 1688 0.63 1.00 0.47 189 LongTLD 1674 0.67 1.17 0.47 190 XM_B_DNDMA 1669 0.60 0.94 0.47 191 HTML_TAG_BALANCE_BODY 1644 0.54 0.72 0.46 192 NML_ADSP_CUSTOM_MED 1637 0.63 1.05 0.46 193 XMBody_95 1595 0.38 0.21 0.45 194 RELAYCOUNTRY_AU 1583 1.18 3.00 0.44 195 XM_ProductURIs 1572 0.70 1.36 0.44 196 HTML_IMAGE_ONLY_32 1560 0.36 0.16 0.44 197 MIME_CHARSET_FARAWAY 1534 0.43 0.44 0.43 198 T_TVD_MIME_NO_HEADERS 1469 0.31 0.04 0.41 199 XMMoneyMeta_00 1447 0.63 1.17 0.41 200 XMPhish30 1430 0.84 1.94 0.40 ----------------------------------------------------------------------