Email: 450163 Autolearn: 0 AvgScore: 4.95 AvgScanTime: 1.46 sec Spam: 132323 Autolearn: 0 AvgScore: 14.77 AvgScanTime: 1.65 sec Ham: 317840 Autolearn: 0 AvgScore: 0.86 AvgScanTime: 1.38 sec Time Spent Running SA: 182.07 hours Time Spent Processing Spam: 60.47 hours Time Spent Processing Ham: 121.61 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125662 89.23 94.97 86.84 2 DKIM_SIGNED 117867 78.46 89.08 74.04 3 XM_DK_Pass 112047 76.04 84.68 72.44 4 DKIM_VALID 110985 74.93 83.87 71.21 5 XM_B_Unicode 109849 72.78 83.02 68.52 6 RELAYCOUNTRY_US 106421 81.00 80.43 81.23 7 DCC_CHECK 92227 42.69 69.70 31.45 8 XM_B_SpammyWords 89540 50.63 67.67 43.54 9 DKIM_VALID_AU 88308 60.09 66.74 57.32 10 XMListUnsubscribeExists 86710 51.01 65.53 44.97 11 XM_B_Unicode3 66698 43.22 50.41 40.22 12 LOC_TINY_FONT_1 62728 32.98 47.41 26.97 13 BAYES_50 54746 55.27 41.37 61.06 14 XM_DK_Undo_02 53220 15.23 40.22 4.82 15 XM_B_SpammyWords2 52956 24.16 40.02 17.56 16 HTML_FONT_LOW_CONTRAST 47424 30.77 35.84 28.66 17 FVGT_m_MULTI_ODD 42586 26.42 32.18 24.03 18 BAYES_99 41347 11.71 31.25 3.58 19 DKIM_VALID_EF 40951 31.15 30.95 31.24 20 MIME_HTML_ONLY 40322 22.90 30.47 19.74 21 TR_XM_DKIM_Undo 38531 9.91 29.12 1.91 22 DCC_CHECK_NEGATIVE 38030 56.80 28.74 68.49 23 T_KAM_HTML_FONT_INVALID 36790 22.71 27.80 20.59 24 XMSubLong 32482 23.82 24.55 23.52 25 BAYES_999 31887 9.02 24.10 2.74 26 T_TM2_M_HEADER_IN_MSG 29487 29.24 22.28 32.13 27 XM_Multi_Part_URI 29090 15.68 21.98 13.06 28 TR_DCC_Bayes_99 26925 6.84 20.35 1.22 29 TR_XM_DK_Unsub 26757 15.01 20.22 12.84 30 RCVD_IN_MSPIKE_H2 26181 17.61 19.79 16.70 31 XM_B_Unsub 24856 11.51 18.78 8.49 32 TR_XM_BayesUnsub 24117 10.14 18.23 6.77 33 RELAYCOUNTRY_META 23528 7.66 17.78 3.45 34 UNPARSEABLE_RELAY 23078 13.99 17.44 12.56 35 XM_B_SpammyWords3 20259 7.70 15.31 4.53 36 TR_MAX_INTL_RELAY 19045 8.37 14.39 5.87 37 LOTS_OF_MONEY 16374 7.64 12.37 5.66 38 TR_XM_SpammyRelay 15560 4.67 11.76 1.72 39 RCVD_IN_MSPIKE_WL 15116 17.02 11.42 19.35 40 TR_XM_SpammyWords4 15004 6.04 11.34 3.84 41 BOTNET_IPINHOSTNAME 14532 5.36 10.98 3.02 42 TR_XM_SpammyWords2 13904 3.39 10.51 0.43 43 RCVD_IN_BL_SPAMCOP_NET 13458 3.32 10.17 0.46 44 XM_Evil_Numbers_Gen 13426 9.40 10.15 9.08 45 XM_B_Phish_Phrases 12777 6.08 9.66 4.59 46 BAYES_80 11778 5.20 8.90 3.66 47 BOTNET 11696 3.44 8.84 1.20 48 TR_XM_UnparsRelay 11384 3.60 8.60 1.52 49 FSL_BULK_SIG 10731 5.41 8.11 4.28 50 BAYES_60 10363 6.90 7.83 6.52 51 UNTRUSTED_Relay 9748 3.22 7.37 1.49 52 HTML_IMAGE_RATIO_02 9182 4.95 6.94 4.12 53 RCVD_IN_MSPIKE_BL 9174 2.78 6.93 1.05 54 TR_XM_MSPIKECOMBO 9171 2.78 6.93 1.05 55 XM_Body_Dirty_Words 9134 3.88 6.90 2.62 56 XM_B_PhoneNumber 8760 8.71 6.62 9.58 57 TR_XM_PhishingBody 8686 2.91 6.56 1.38 58 XMSubMetaSx_00 8341 4.14 6.30 3.24 59 LotsOfNums_01 8301 8.70 6.27 9.71 60 MPART_ALT_DIFF 8196 4.90 6.19 4.37 61 RELAYCOUNTRY_CA 8069 2.25 6.10 0.65 62 XM_H_GMP 7488 6.02 5.66 6.17 63 RCVD_IN_MSPIKE_H3 7294 7.78 5.51 8.73 64 DKIM_INVALID 6882 3.53 5.20 2.83 65 TR_XM_SPAMCOP 6669 1.61 5.04 0.18 66 BAYES_95 6639 3.03 5.02 2.20 67 XM_UncommonTLD01 6634 4.32 5.01 4.03 68 XM_H_Long_From01 6544 5.08 4.95 5.14 69 XMStrtUSub 6479 5.42 4.90 5.64 70 XMSexyCombo_05 6439 2.21 4.87 1.11 71 RCVD_IN_MSPIKE_L3 6412 2.08 4.85 0.93 72 XM_B_Investor 6368 2.51 4.81 1.56 73 TR_XM_SpammyWords3 6251 1.74 4.72 0.49 74 TM2_M_VERY_LONG_WORD 6043 4.32 4.57 4.21 75 HTML_IMAGE_RATIO_04 5849 4.11 4.42 3.99 76 MIME_HTML_MOSTLY 5840 3.00 4.41 2.41 77 TooManyTo_001 5654 7.03 4.27 8.17 78 T_XMDrugObfuBody_14 5472 2.28 4.14 1.50 79 XM_B_SpammyTLD 5296 2.85 4.00 2.37 80 XM_B_Unsub2 5148 2.15 3.89 1.42 81 TR_XM_SpammyWords5 5057 2.13 3.82 1.42 82 XM_OfRef6 4915 1.78 3.71 0.97 83 XMNumbers 4880 3.50 3.69 3.42 84 XM_URI_RBL 4763 1.29 3.60 0.33 85 XM_CamelCaseFrm001 4691 2.38 3.55 1.89 86 TR_XM_INTL_Spamhaus 4635 1.15 3.50 0.18 87 T_XMDrugObfuBody_08 4618 2.09 3.49 1.50 88 USER_IN_DEF_DKIM_WL 4534 9.12 3.43 11.49 89 XM_UB50 4316 1.66 3.26 0.99 90 XM_SPF_SoftFail 4187 1.90 3.16 1.37 91 XMDiploma_00 4077 1.94 3.08 1.46 92 RCVD_IN_MSPIKE_H5 4065 5.60 3.07 6.66 93 MIME_QP_LONG_LINE 3883 4.36 2.93 4.96 94 MIME_HTML_ONLY_MULTI 3876 2.50 2.93 2.33 95 RCVD_IN_PBL 3819 1.40 2.89 0.79 96 HTML_IMAGE_RATIO_08 3771 2.56 2.85 2.44 97 RCVD_IN_MSPIKE_H4 3757 3.63 2.84 3.96 98 RELAYCOUNTRY_AU 3624 1.25 2.74 0.64 99 HTML_IMAGE_RATIO_06 3624 2.86 2.74 2.90 100 T_TooManySym_01 3536 5.18 2.67 6.23 101 TR_XM_INV_DKIM 3515 0.79 2.66 0.01 102 XM_B_URI_Unicode 3454 2.16 2.61 1.98 103 TR_XM_RelayPhish 3365 0.80 2.54 0.07 104 RCVD_IN_VALIDITY_SAFE 3350 2.93 2.53 3.09 105 XMPhish14 3343 1.02 2.53 0.40 106 TR_XM_MSPIKECOMBO2 3335 0.77 2.52 0.04 107 TR_XM_NoHeaderRelay 3281 0.90 2.48 0.25 108 MultiRelay_CC 3245 0.84 2.45 0.17 109 XMPhish30 3224 1.03 2.44 0.44 110 MAILING_LIST_MULTI 3186 2.65 2.41 2.75 111 XM_B_SpammyWords4 3112 1.06 2.35 0.52 112 FROM_EXCESS_BASE64 2798 1.82 2.11 1.70 113 T_REMOTE_IMAGE 2794 3.39 2.11 3.92 114 TM2_M_URI_OPT_OUT 2788 1.79 2.11 1.66 115 XMBody_17 2775 0.99 2.10 0.53 116 TR_XM_MaxSPIKE 2751 0.64 2.08 0.04 117 T_FILL_THIS_FORM_SHORT 2742 1.25 2.07 0.91 118 ALL_TRUSTED 2716 11.75 2.05 15.79 119 SUBJ_ALL_CAPS 2619 1.67 1.98 1.55 120 RCVD_IN_VALIDITY_CERTIFIED 2610 2.37 1.97 2.53 121 HTML_MIME_NO_HTML_TAG 2606 2.85 1.97 3.22 122 XMBdyGiftCard01 2568 0.71 1.94 0.20 123 XMStockSpam_06 2511 1.45 1.90 1.27 124 SpammyFromTLD_02 2501 0.74 1.89 0.25 125 URI_HEX 2490 1.29 1.88 1.04 126 XMBrknScrpt_02 2476 1.08 1.87 0.75 127 T_XMHurry_00 2472 1.00 1.87 0.64 128 MIME_HEADER_CTYPE_ONLY 2455 0.74 1.86 0.27 129 TVD_PH_BODY_ACCOUNTS_PRE 2413 0.78 1.82 0.34 130 TR_XM_SpoofStaff 2362 0.62 1.79 0.14 131 XMSpoofStaff2 2344 0.62 1.77 0.14 132 XM_H_SpoofStaff4 2329 0.61 1.76 0.13 133 TR_XM_PSC1 2329 0.61 1.76 0.13 134 RELAYCOUNTRY_BD 2313 0.51 1.75 0.00 135 BAYES_40 2298 5.01 1.74 6.38 136 TR_XM_SpoofStaff4 2298 0.59 1.74 0.11 137 TR_XM_SpoofStaff2 2273 0.51 1.72 0.00 138 TR_XM_SB_Phish1 2251 0.50 1.70 0.00 139 XM_ProductURIs 2207 0.82 1.67 0.46 140 XMGenDplmaNmb 2203 1.09 1.66 0.85 141 KHOP_HELO_FCRDNS 2201 2.61 1.66 3.01 142 RCVD_IN_XBL 2193 0.51 1.66 0.03 143 XM_B_SEO 2159 0.68 1.63 0.28 144 SpammyFromTLD_01 2145 0.99 1.62 0.73 145 URI_TRY_3LD 2086 0.86 1.58 0.57 146 XM_SendGrid 2082 1.81 1.57 1.91 147 XM_DK_Undo_01 2068 1.64 1.56 1.67 148 RELAYCOUNTRY_NL 2054 0.54 1.55 0.12 149 SHORTCIRCUIT 2049 0.46 1.55 0.00 150 RCVD_IN_ZEN_LASTEXTERNAL 2049 0.46 1.55 0.00 151 RCVD_IN_IADB_LISTED 2033 2.75 1.54 3.26 152 XM_PDF 1972 4.39 1.49 5.59 153 RDNS_DYNAMIC 1958 0.56 1.48 0.17 154 RCVD_IN_SBL_CSS 1954 0.47 1.48 0.05 155 STY_INVIS_DIRECT 1941 0.62 1.47 0.27 156 MPART_ALT_DIFF_COUNT 1938 0.96 1.46 0.75 157 XM_HighProb1 1908 0.42 1.44 0.00 158 XMBody_78 1844 0.62 1.39 0.30 159 TR_XM_SEO4 1839 0.52 1.39 0.15 160 T_Symld_Words_02 1825 0.87 1.38 0.66 161 XMSubMetaI_00 1809 0.69 1.37 0.41 162 XM_H_Long_From02 1774 1.04 1.34 0.91 163 RCVD_IN_VALIDITY_RPBL 1751 0.41 1.32 0.03 164 RCVD_IN_PSBL 1741 0.61 1.32 0.31 165 XM_UB60 1709 0.44 1.29 0.08 166 XM_B_DNDMA 1691 0.66 1.28 0.41 167 RCVD_IN_IADB_SPF 1679 2.41 1.27 2.89 168 DIET_1 1677 0.59 1.27 0.30 169 RCVD_IN_MSPIKE_L4 1655 0.43 1.25 0.09 170 T_XMDrugObfuBody_00 1653 0.93 1.25 0.80 171 BAYES_20 1599 3.38 1.21 4.28 172 XM_B_COPY_HTML 1579 0.91 1.19 0.80 173 XM_B_Phish66 1564 0.58 1.18 0.33 174 RELAYCOUNTRY_FR 1548 0.54 1.17 0.28 175 TR_LOTS_OF_MONEY3 1543 0.55 1.17 0.30 176 URI_NOVOWEL 1541 1.19 1.16 1.19 177 XMSexyCombo_01 1528 0.45 1.15 0.16 178 XM_GoogleGroups 1525 1.24 1.15 1.28 179 RCVD_IN_IADB_DK 1525 2.10 1.15 2.50 180 RCVD_IN_IADB_SENDERID 1495 2.16 1.13 2.59 181 TVD_RCVD_IP 1486 1.06 1.12 1.03 182 HTML_FONT_TINY_NORDNS 1453 0.40 1.10 0.12 183 URIBL_SBL 1451 0.33 1.10 0.00 184 URIBL_SBL_A 1451 0.33 1.10 0.00 185 SH_BODYURI_REVERSE_SBL 1450 0.33 1.10 0.00 186 HTML_IMAGE_ONLY_20 1444 0.77 1.09 0.64 187 TR_LOTS_OF_MONEY2 1431 0.48 1.08 0.23 188 T_MONEY_PERCENT 1431 0.48 1.08 0.23 189 XM_UB99 1419 0.32 1.07 0.00 190 DKIM_ADSP_CUSTOM_MED 1416 0.97 1.07 0.93 191 XM_B_COVIDMETA 1353 0.38 1.02 0.11 192 XM_UB80 1342 0.31 1.01 0.02 193 RCVD_IN_IADB_VOUCHED 1325 1.80 1.00 2.13 194 XMSubMetaSxObfu_03 1322 0.54 1.00 0.35 195 SHOPIFY_IMG_NOT_RCVD_SFY 1317 0.44 1.00 0.22 196 TR_XM_DK_SendGrid 1317 1.14 1.00 1.20 197 HELO_DYNAMIC_SPLIT_IP 1293 0.29 0.98 0.01 198 XMHTML_After_End 1287 0.57 0.97 0.40 199 TM2_M_OBFU_COMMENT 1260 0.42 0.95 0.20 200 TR_Mismatch_TLD_02 1235 0.34 0.93 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 276004 89.23 94.97 86.84 2 RELAYCOUNTRY_US 258193 81.00 80.43 81.23 3 DKIM_SIGNED 235340 78.46 89.08 74.04 4 XM_DK_Pass 230246 76.04 84.68 72.44 5 DKIM_VALID 226334 74.93 83.87 71.21 6 XM_B_Unicode 217787 72.78 83.02 68.52 7 DCC_CHECK_NEGATIVE 217685 56.80 28.74 68.49 8 BAYES_50 194078 55.27 41.37 61.06 9 DKIM_VALID_AU 182193 60.09 66.74 57.32 10 XMListUnsubscribeExists 142920 51.01 65.53 44.97 11 XM_B_SpammyWords 138387 50.63 67.67 43.54 12 XM_B_Unicode3 127845 43.22 50.41 40.22 13 T_TM2_M_HEADER_IN_MSG 102132 29.24 22.28 32.13 14 DCC_CHECK 99969 42.69 69.70 31.45 15 DKIM_VALID_EF 99294 31.15 30.95 31.24 16 HTML_FONT_LOW_CONTRAST 91100 30.77 35.84 28.66 17 LOC_TINY_FONT_1 85716 32.98 47.41 26.97 18 FVGT_m_MULTI_ODD 76369 26.42 32.18 24.03 19 XMSubLong 74766 23.82 24.55 23.52 20 T_KAM_HTML_FONT_INVALID 65438 22.71 27.80 20.59 21 MIME_HTML_ONLY 62754 22.90 30.47 19.74 22 RCVD_IN_MSPIKE_WL 61504 17.02 11.42 19.35 23 XM_B_SpammyWords2 55819 24.16 40.02 17.56 24 RCVD_IN_MSPIKE_H2 53079 17.61 19.79 16.70 25 ALL_TRUSTED 50175 11.75 2.05 15.79 26 XM_Multi_Part_URI 41501 15.68 21.98 13.06 27 TR_XM_DK_Unsub 40803 15.01 20.22 12.84 28 UNPARSEABLE_RELAY 39909 13.99 17.44 12.56 29 USER_IN_DEF_DKIM_WL 36512 9.12 3.43 11.49 30 BAYES_00 31146 7.09 0.58 9.80 31 LotsOfNums_01 30858 8.70 6.27 9.71 32 XM_B_PhoneNumber 30435 8.71 6.62 9.58 33 XM_Evil_Numbers_Gen 28873 9.40 10.15 9.08 34 RCVD_IN_MSPIKE_H3 27749 7.78 5.51 8.73 35 XM_B_Unsub 26978 11.51 18.78 8.49 36 TooManyTo_001 25981 7.03 4.27 8.17 37 ANY_BOUNCE_MESSAGE 22320 5.21 0.86 7.02 38 BOUNCE_MESSAGE 22319 5.21 0.86 7.02 39 TR_XM_BayesUnsub 21508 10.14 18.23 6.77 40 RCVD_IN_MSPIKE_H5 21161 5.60 3.07 6.66 41 TR_XM_DK_Bayes 20938 4.77 0.40 6.59 42 BAYES_60 20716 6.90 7.83 6.52 43 TR_XM_DK_Bayes1 20562 4.68 0.39 6.47 44 BAYES_40 20274 5.01 1.74 6.38 45 T_TooManySym_01 19787 5.18 2.67 6.23 46 XM_H_GMP 19602 6.02 5.66 6.17 47 XM_DKIMWhitelistDomains 19459 4.39 0.22 6.12 48 TR_MAX_INTL_RELAY 18649 8.37 14.39 5.87 49 LOTS_OF_MONEY 18004 7.64 12.37 5.66 50 XMStrtUSub 17933 5.42 4.90 5.64 51 XM_PDF 17782 4.39 1.49 5.59 52 TR_XM_DK_Bayes2 17670 4.02 0.34 5.56 53 XM_H_Long_From01 16340 5.08 4.95 5.14 54 MIME_QP_LONG_LINE 15752 4.36 2.93 4.96 55 XM_DK_Undo_02 15331 15.23 40.22 4.82 56 XM_B_Phish_Phrases 14602 6.08 9.66 4.59 57 XM_B_SpammyWords3 14414 7.70 15.31 4.53 58 MPART_ALT_DIFF 13877 4.90 6.19 4.37 59 FSL_BULK_SIG 13608 5.41 8.11 4.28 60 BAYES_20 13607 3.38 1.21 4.28 61 TM2_M_VERY_LONG_WORD 13393 4.32 4.57 4.21 62 HTML_IMAGE_RATIO_02 13089 4.95 6.94 4.12 63 XM_UncommonTLD01 12811 4.32 5.01 4.03 64 HTML_IMAGE_RATIO_04 12666 4.11 4.42 3.99 65 RCVD_IN_MSPIKE_H4 12594 3.63 2.84 3.96 66 T_REMOTE_IMAGE 12460 3.39 2.11 3.92 67 TR_XM_SpammyWords4 12197 6.04 11.34 3.84 68 BAYES_80 11639 5.20 8.90 3.66 69 BAYES_99 11374 11.71 31.25 3.58 70 RELAYCOUNTRY_META 10968 7.66 17.78 3.45 71 XMNumbers 10860 3.50 3.69 3.42 72 RCVD_IN_IADB_LISTED 10354 2.75 1.54 3.26 73 XMSubMetaSx_00 10294 4.14 6.30 3.24 74 HTML_MIME_NO_HTML_TAG 10233 2.85 1.97 3.22 75 RCVD_IN_VALIDITY_SAFE 9826 2.93 2.53 3.09 76 BOTNET_IPINHOSTNAME 9597 5.36 10.98 3.02 77 KHOP_HELO_FCRDNS 9570 2.61 1.66 3.01 78 T_TooManySym_02 9539 2.32 0.68 3.00 79 HTML_IMAGE_RATIO_06 9231 2.86 2.74 2.90 80 RCVD_IN_IADB_SPF 9174 2.41 1.27 2.89 81 DKIM_INVALID 9006 3.53 5.20 2.83 82 MAILING_LIST_MULTI 8739 2.65 2.41 2.75 83 BAYES_999 8718 9.02 24.10 2.74 84 XM_Body_Dirty_Words 8324 3.88 6.90 2.62 85 RCVD_IN_IADB_SENDERID 8233 2.16 1.13 2.59 86 RCVD_IN_VALIDITY_CERTIFIED 8037 2.37 1.97 2.53 87 TooManyTo_002 8032 1.98 0.66 2.53 88 BAYES_05 7999 1.94 0.56 2.52 89 RCVD_IN_IADB_DK 7935 2.10 1.15 2.50 90 HTML_IMAGE_RATIO_08 7768 2.56 2.85 2.44 91 MIME_HTML_MOSTLY 7664 3.00 4.41 2.41 92 XM_B_SpammyTLD 7530 2.85 4.00 2.37 93 INVALID_MSGID 7410 1.73 0.29 2.33 94 MIME_HTML_ONLY_MULTI 7394 2.50 2.93 2.33 95 BAYES_95 7007 3.03 5.02 2.20 96 RCVD_IN_IADB_VOUCHED 6760 1.80 1.00 2.13 97 MSGID_NOFQDN1 6457 1.44 0.01 2.03 98 TO_MALFORMED 6356 1.42 0.01 2.00 99 XM_B_URI_Unicode 6280 2.16 2.61 1.98 100 XM_SendGrid 6077 1.81 1.57 1.91 101 TR_XM_DKIM_Undo 6070 9.91 29.12 1.91 102 XM_CamelCaseFrm001 6007 2.38 3.55 1.89 103 MIME_CHARSET_FARAWAY 5481 1.30 0.27 1.72 104 TR_XM_SpammyRelay 5459 4.67 11.76 1.72 105 FROM_EXCESS_BASE64 5413 1.82 2.11 1.70 106 TooManyTo_003 5336 1.35 0.56 1.68 107 XM_DK_Undo_01 5304 1.64 1.56 1.67 108 TM2_M_URI_OPT_OUT 5274 1.79 2.11 1.66 109 CHARSET_FARAWAY_HEADER 5226 1.21 0.17 1.64 110 XM_B_Investor 4945 2.51 4.81 1.56 111 SUBJ_ALL_CAPS 4915 1.67 1.98 1.55 112 RCVD_IN_IADB_OPTIN 4909 1.29 0.68 1.54 113 TR_XM_UnparsRelay 4822 3.60 8.60 1.52 114 T_XMDrugObfuBody_14 4781 2.28 4.14 1.50 115 TR_Symld_Words 4778 1.31 0.83 1.50 116 T_XMDrugObfuBody_08 4768 2.09 3.49 1.50 117 UNTRUSTED_Relay 4742 3.22 7.37 1.49 118 XMDiploma_00 4648 1.94 3.08 1.46 119 XMLngstWrd_00 4617 1.17 0.51 1.45 120 TR_XM_SpammyWords5 4527 2.13 3.82 1.42 121 XM_B_Unsub2 4523 2.15 3.89 1.42 122 TR_XM_PhishingBody 4393 2.91 6.56 1.38 123 XM_SPF_SoftFail 4361 1.90 3.16 1.37 124 HELO_NODOT 4342 1.02 0.19 1.37 125 HELO_NO_DOMAIN 4334 1.01 0.17 1.36 126 XMCapTrack 4333 1.22 0.88 1.36 127 IN_HORDE_ADDRESS_BOOK 4293 0.98 0.08 1.35 128 XM_GoogleGroups 4071 1.24 1.15 1.28 129 XMStockSpam_06 4035 1.45 1.90 1.27 130 TooManyTo_004 4020 1.04 0.49 1.26 131 TR_DCC_Bayes_99 3866 6.84 20.35 1.22 132 TR_XM_DK_SendGrid 3818 1.14 1.00 1.20 133 BOTNET 3809 3.44 8.84 1.20 134 URI_NOVOWEL 3798 1.19 1.16 1.19 135 T_TooManySym_03 3691 0.87 0.18 1.16 136 TVD_SPACE_RATIO 3683 0.90 0.27 1.16 137 T_OBFU_PDF_ATTACH 3657 1.03 0.74 1.15 138 XM_ShortIntro_01 3570 1.02 0.77 1.12 139 XMSexyCombo_05 3516 2.21 4.87 1.11 140 TR_XM_MSPIKECOMBO 3353 2.78 6.93 1.05 141 RCVD_IN_MSPIKE_BL 3353 2.78 6.93 1.05 142 TooManyTo_005 3338 0.87 0.45 1.05 143 URI_HEX 3301 1.29 1.88 1.04 144 TVD_RCVD_IP 3289 1.06 1.12 1.03 145 XM_UB50 3152 1.66 3.26 0.99 146 XM_OfRef6 3078 1.78 3.71 0.97 147 RCVD_IN_MSPIKE_L3 2971 2.08 4.85 0.93 148 DKIM_ADSP_CUSTOM_MED 2969 0.97 1.07 0.93 149 T_FILL_THIS_FORM_SHORT 2907 1.25 2.07 0.91 150 XMGappySubj_01 2906 0.68 0.11 0.91 151 XM_H_Long_From02 2905 1.04 1.34 0.91 152 T_TVD_MIME_NO_HEADERS 2886 0.66 0.05 0.91 153 HTML_IMAGE_ONLY_32 2880 0.70 0.21 0.91 154 XMGenDplmaNmb 2689 1.09 1.66 0.85 155 XM_B_COPY_HTML 2538 0.91 1.19 0.80 156 T_XMDrugObfuBody_00 2529 0.93 1.25 0.80 157 XM_H_PHPMailer 2515 0.71 0.50 0.79 158 RCVD_IN_PBL 2498 1.40 2.89 0.79 159 XMBrknScrpt_02 2399 1.08 1.87 0.75 160 MPART_ALT_DIFF_COUNT 2376 0.96 1.46 0.75 161 SpammyFromTLD_01 2330 0.99 1.62 0.73 162 XMSlimDrugH 2326 0.74 0.76 0.73 163 HTTPS_HTTP_MISMATCH 2282 0.78 0.93 0.72 164 TR_MetaPhish_Combo_01 2244 0.64 0.49 0.71 165 RELAYCOUNTRY_GB 2173 0.75 0.92 0.68 166 XMBSHREFv2 2133 0.60 0.43 0.67 167 T_Symld_Words_02 2103 0.87 1.38 0.66 168 RELAYCOUNTRY_CA 2078 2.25 6.10 0.65 169 TO_NO_BRKTS_HTML_ONLY 2070 0.50 0.15 0.65 170 XMNoVowels 2041 0.65 0.65 0.64 171 HTML_IMAGE_ONLY_20 2030 0.77 1.09 0.64 172 T_XMHurry_00 2029 1.00 1.87 0.64 173 RELAYCOUNTRY_AU 2020 1.25 2.74 0.64 174 HTML_EXTRA_CLOSE 2019 0.56 0.37 0.64 175 FROM_GOV_DKIM_AU 2008 0.49 0.14 0.63 176 MSGID_FROM_MTA_HEADER 1894 0.49 0.25 0.60 177 URI_TRY_3LD 1802 0.86 1.58 0.57 178 FORGED_GMAIL_RCVD 1793 0.62 0.77 0.56 179 NML_ADSP_CUSTOM_MED 1764 0.63 0.81 0.55 180 MISSING_HEADERS 1754 0.56 0.57 0.55 181 XMGappySubj_02 1740 0.40 0.04 0.55 182 XMBody_17 1676 0.99 2.10 0.53 183 HTML_TAG_BALANCE_BODY 1668 0.64 0.93 0.52 184 XM_B_SpammyWords4 1647 1.06 2.35 0.52 185 XMMoneyMeta_00 1644 0.55 0.63 0.52 186 TM2_M_BODY_EMPTY 1575 0.38 0.09 0.50 187 TR_XM_SpammyWords3 1570 1.74 4.72 0.49 188 HTML_IMAGE_ONLY_08 1567 0.49 0.47 0.49 189 XMLngstWrd_01 1542 0.47 0.45 0.49 190 BASE64_LENGTH_79_INF 1541 0.57 0.76 0.48 191 LongTLD 1526 0.48 0.48 0.48 192 TR_XM_Base64_M1 1524 0.56 0.77 0.48 193 XM_ProductURIs 1475 0.82 1.67 0.46 194 RCVD_IN_BL_SPAMCOP_NET 1471 3.32 10.17 0.46 195 HTML_IMAGE_ONLY_28 1416 0.38 0.21 0.45 196 XMPhish30 1405 1.03 2.44 0.44 197 TR_XM_SpammyWords2 1371 3.39 10.51 0.43 198 TR_XM_GMP_MSPIKE_UNDO2 1339 0.40 0.35 0.42 199 FILL_THIS_FORM 1309 0.37 0.28 0.41 200 XM_B_DNDMA 1301 0.66 1.28 0.41 ----------------------------------------------------------------------