Email: 487871 Autolearn: 0 AvgScore: 4.85 AvgScanTime: 1.51 sec Spam: 138507 Autolearn: 0 AvgScore: 14.60 AvgScanTime: 1.74 sec Ham: 349364 Autolearn: 0 AvgScore: 0.99 AvgScanTime: 1.42 sec Time Spent Running SA: 205.21 hours Time Spent Processing Spam: 66.98 hours Time Spent Processing Ham: 138.23 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131196 89.96 94.72 88.08 2 DKIM_SIGNED 126650 78.75 91.44 73.72 3 XM_DK_Pass 118211 75.90 85.35 72.15 4 DKIM_VALID 116958 74.87 84.44 71.08 5 XM_B_Unicode 116297 73.68 83.96 69.61 6 RELAYCOUNTRY_US 113128 82.88 81.68 83.35 7 DCC_CHECK 100273 44.84 72.40 33.91 8 XM_B_SpammyWords 97054 53.68 70.07 47.18 9 XMListUnsubscribeExists 94512 53.14 68.24 47.16 10 DKIM_VALID_AU 91121 60.15 65.79 57.92 11 XM_B_Unicode3 68528 43.55 49.48 41.20 12 LOC_TINY_FONT_1 67230 34.62 48.54 29.10 13 BAYES_50 55893 55.77 40.35 61.88 14 XM_B_SpammyWords2 55582 26.25 40.13 20.74 15 XM_DK_Undo_02 55406 14.57 40.00 4.49 16 HTML_FONT_LOW_CONTRAST 50545 30.92 36.49 28.72 17 FVGT_m_MULTI_ODD 45602 26.62 32.92 24.12 18 BAYES_99 42669 11.11 30.81 3.30 19 DKIM_VALID_EF 42298 29.33 30.54 28.85 20 T_KAM_HTML_FONT_INVALID 42175 24.41 30.45 22.01 21 TR_XM_DKIM_Undo 40545 9.56 29.27 1.74 22 MIME_HTML_ONLY 40076 21.22 28.93 18.17 23 DCC_CHECK_NEGATIVE 36305 54.73 26.21 66.04 24 XMSubLong 35245 23.43 25.45 22.63 25 BAYES_999 31994 8.35 23.10 2.50 26 T_TM2_M_HEADER_IN_MSG 31292 30.92 22.59 34.23 27 TR_XM_DK_Unsub 30477 15.43 22.00 12.82 28 XM_Multi_Part_URI 29638 15.57 21.40 13.26 29 TR_DCC_Bayes_99 28823 6.72 20.81 1.14 30 XM_B_Unsub 27107 11.61 19.57 8.45 31 RCVD_IN_MSPIKE_H2 27028 16.82 19.51 15.75 32 TR_XM_BayesUnsub 25948 10.07 18.73 6.64 33 UNPARSEABLE_RELAY 24706 13.12 17.84 11.24 34 RELAYCOUNTRY_META 24592 7.44 17.76 3.36 35 TR_MAX_INTL_RELAY 21122 8.40 15.25 5.68 36 XM_B_SpammyWords3 20843 9.30 15.05 7.03 37 TR_XM_SpammyRelay 18194 4.96 13.14 1.72 38 LOTS_OF_MONEY 17728 8.11 12.80 6.25 39 BOTNET_IPINHOSTNAME 17173 5.60 12.40 2.90 40 TR_XM_SpammyWords4 16216 6.33 11.71 4.19 41 RCVD_IN_MSPIKE_WL 16147 17.07 11.66 19.22 42 RCVD_IN_BL_SPAMCOP_NET 16015 3.67 11.56 0.54 43 TR_XM_SpammyWords2 14417 3.28 10.41 0.45 44 BOTNET 14371 3.65 10.38 0.98 45 XM_Evil_Numbers_Gen 13362 11.01 9.65 11.56 46 FSL_BULK_SIG 13322 5.93 9.62 4.47 47 BAYES_80 13069 5.17 9.44 3.47 48 TR_XM_UnparsRelay 12482 3.59 9.01 1.44 49 BAYES_60 11518 7.06 8.32 6.57 50 XM_B_Phish_Phrases 10743 7.69 7.76 7.67 51 RCVD_IN_MSPIKE_BL 10712 3.10 7.73 1.27 52 TR_XM_MSPIKECOMBO 10703 3.10 7.73 1.27 53 XMSubMetaSx_00 10481 4.55 7.57 3.35 54 LotsOfNums_01 9966 10.11 7.20 11.26 55 DKIM_INVALID 9692 3.87 7.00 2.64 56 MPART_ALT_DIFF 9489 5.07 6.85 4.36 57 UNTRUSTED_Relay 9242 2.94 6.67 1.47 58 RELAYCOUNTRY_CA 9115 2.28 6.58 0.58 59 XM_B_PhoneNumber 9053 8.72 6.54 9.58 60 HTML_IMAGE_RATIO_02 8915 4.67 6.44 3.97 61 XM_Body_Dirty_Words 8643 3.49 6.24 2.40 62 RCVD_IN_MSPIKE_H3 8089 8.23 5.84 9.17 63 TR_XM_SpammyWords3 7737 1.98 5.59 0.56 64 XM_UncommonTLD01 7692 4.31 5.55 3.82 65 XM_H_Long_From01 7506 5.50 5.42 5.53 66 BAYES_95 7486 3.11 5.40 2.20 67 RCVD_IN_MSPIKE_L3 7123 2.29 5.14 1.16 68 XM_H_GMP 6981 5.30 5.04 5.40 69 TR_XM_SPAMCOP 6391 1.45 4.61 0.19 70 XM_B_Investor 6343 2.51 4.58 1.69 71 HTML_IMAGE_RATIO_04 6018 4.79 4.34 4.97 72 XMStrtUSub 5850 5.04 4.22 5.37 73 TooManyTo_001 5745 6.51 4.15 7.45 74 TR_XM_PhishingBody 5673 2.22 4.10 1.48 75 XMNumbers 5505 3.21 3.97 2.91 76 TM2_M_VERY_LONG_WORD 5491 6.70 3.96 7.78 77 XMSexyCombo_05 5464 1.87 3.94 1.05 78 TR_XM_SpammyWords5 5386 1.98 3.89 1.22 79 MIME_QP_LONG_LINE 5356 4.86 3.87 5.25 80 XM_URI_RBL 5346 1.33 3.86 0.33 81 MIME_HTML_MOSTLY 5264 2.96 3.80 2.63 82 XM_B_SpammyTLD 5159 2.95 3.72 2.65 83 XM_OfRef6 5108 1.59 3.69 0.76 84 T_XMDrugObfuBody_08 5024 2.21 3.63 1.64 85 T_XMDrugObfuBody_14 4985 2.34 3.60 1.85 86 HTML_IMAGE_RATIO_06 4847 3.49 3.50 3.48 87 TR_XM_NoHeaderRelay 4785 1.14 3.45 0.22 88 XM_B_Unsub2 4639 2.13 3.35 1.64 89 TM2_M_URI_OPT_OUT 4458 2.25 3.22 1.87 90 XM_CamelCaseFrm001 4387 2.27 3.17 1.92 91 MIME_HTML_ONLY_MULTI 4335 2.41 3.13 2.13 92 XMDiploma_00 4334 1.87 3.13 1.37 93 XM_SPF_SoftFail 4286 1.81 3.09 1.31 94 HTML_IMAGE_RATIO_08 4245 2.35 3.06 2.07 95 RCVD_IN_MSPIKE_H5 4150 5.24 3.00 6.13 96 RELAYCOUNTRY_AU 4105 1.25 2.96 0.57 97 TR_XM_INV_DKIM 3946 0.83 2.85 0.03 98 XM_UB50 3945 1.51 2.85 0.98 99 RCVD_IN_MSPIKE_H4 3908 3.60 2.82 3.91 100 TR_XM_MSPIKECOMBO2 3882 0.84 2.80 0.06 101 XM_B_URI_Unicode 3749 2.20 2.71 2.00 102 USER_IN_DEF_DKIM_WL 3637 10.08 2.63 13.04 103 XM_B_SpammyWords4 3595 1.40 2.60 0.93 104 T_TooManySym_01 3557 4.92 2.57 5.85 105 RCVD_IN_VALIDITY_SAFE 3384 3.36 2.44 3.73 106 MAILING_LIST_MULTI 3256 2.79 2.35 2.96 107 XMBody_17 3240 0.92 2.34 0.36 108 XM_H_Long_From02 3176 1.23 2.29 0.81 109 TR_XM_INTL_Spamhaus 3145 0.76 2.27 0.16 110 RCVD_IN_VALIDITY_RPBL 3106 0.66 2.24 0.03 111 XMStockSpam_06 3027 1.49 2.19 1.22 112 TR_XM_MaxSPIKE 2942 0.64 2.12 0.06 113 URI_HEX 2871 1.56 2.07 1.35 114 RCVD_IN_XBL 2772 0.60 2.00 0.04 115 RCVD_IN_VALIDITY_CERTIFIED 2728 2.77 1.97 3.09 116 BOTNET_NORDNS 2677 0.55 1.93 0.01 117 SpammyFromTLD_02 2667 0.89 1.93 0.47 118 DKIM_ADSP_NXDOMAIN 2632 0.74 1.90 0.27 119 RELAYCOUNTRY_FR 2607 0.75 1.88 0.31 120 RCVD_IN_IADB_LISTED 2586 3.16 1.87 3.68 121 T_XMDrugObfuBody_00 2513 1.34 1.81 1.15 122 SpammyFromTLD_01 2502 1.10 1.81 0.82 123 FROM_EXCESS_BASE64 2502 1.69 1.81 1.64 124 XMBdyGiftCard01 2400 0.94 1.73 0.62 125 SUBJ_ALL_CAPS 2399 1.35 1.73 1.21 126 BAYES_40 2386 4.69 1.72 5.87 127 XMBrknScrpt_02 2337 0.95 1.69 0.66 128 XM_SendGrid 2298 1.53 1.66 1.48 129 T_FILL_THIS_FORM_SHORT 2282 1.00 1.65 0.75 130 XMGenDplmaNmb 2254 1.00 1.63 0.75 131 T_XMHurry_00 2218 0.75 1.60 0.41 132 KHOP_HELO_FCRDNS 2208 3.67 1.59 4.49 133 RCVD_IN_MSPIKE_L4 2153 0.50 1.55 0.08 134 RCVD_IN_SBL_CSS 2147 0.47 1.55 0.04 135 XM_B_SEO 2139 0.63 1.54 0.27 136 RCVD_IN_IADB_SPF 2105 2.72 1.52 3.19 137 XM_DK_Undo_01 2101 1.70 1.52 1.77 138 HTML_MIME_NO_HTML_TAG 2078 2.24 1.50 2.53 139 URI_NOVOWEL 2072 1.21 1.50 1.10 140 XM_HighProb1 2067 0.43 1.49 0.00 141 XMPhish30 1993 0.68 1.44 0.39 142 RDNS_DYNAMIC 1980 0.51 1.43 0.15 143 RCVD_IN_PBL 1972 0.88 1.42 0.66 144 RCVD_IN_IADB_DK 1910 2.33 1.38 2.71 145 RCVD_IN_ZEN_LASTEXTERNAL 1895 0.39 1.37 0.00 146 SHORTCIRCUIT 1895 0.39 1.37 0.00 147 TR_XM_InvalidRelay 1889 0.39 1.36 0.01 148 BAYES_20 1883 3.53 1.36 4.40 149 RCVD_IN_IADB_SENDERID 1866 2.40 1.35 2.82 150 T_REMOTE_IMAGE 1842 3.05 1.33 3.74 151 URI_TRY_3LD 1842 0.76 1.33 0.54 152 MultiRelay_CC 1820 0.48 1.31 0.15 153 MPART_ALT_DIFF_COUNT 1816 0.80 1.31 0.60 154 DIET_1 1763 0.57 1.27 0.30 155 XM_B_Phish66 1755 0.62 1.27 0.37 156 RCVD_IN_IADB_VOUCHED 1748 2.16 1.26 2.51 157 TR_XM_SEO4 1711 0.46 1.24 0.15 158 T_Symld_Words_02 1676 0.80 1.21 0.63 159 ALL_TRUSTED 1673 10.19 1.21 13.74 160 TVD_RCVD_IP 1655 1.01 1.19 0.94 161 XMHTML_After_End 1626 0.62 1.17 0.39 162 HTML_FONT_TINY_NORDNS 1587 0.40 1.15 0.10 163 TR_LOTS_OF_MONEY3 1564 0.58 1.13 0.36 164 PLING_QUERY 1562 0.50 1.13 0.25 165 XM_H_DKIM_GOOG 1560 0.33 1.13 0.01 166 XMBody_78 1559 0.52 1.13 0.28 167 XM_UB60 1530 0.37 1.10 0.07 168 STY_INVIS_DIRECT 1529 0.53 1.10 0.30 169 XM_UB80 1506 0.32 1.09 0.01 170 XM_DIRTYINTL 1503 0.38 1.09 0.10 171 SCC_CANSPAM_2 1497 0.31 1.08 0.00 172 TR_XM_DK_SendGrid 1480 1.03 1.07 1.01 173 HTML_IMAGE_ONLY_20 1473 0.70 1.06 0.56 174 XMSexyCombo_01 1457 0.42 1.05 0.18 175 BOUNCE_MESSAGE 1454 7.41 1.05 9.93 176 ANY_BOUNCE_MESSAGE 1454 7.41 1.05 9.93 177 HTTPS_HTTP_MISMATCH 1445 0.81 1.04 0.71 178 TM2_M_A_HREF_HREF 1431 0.52 1.03 0.32 179 HELO_DYNAMIC_SPLIT_IP 1430 0.29 1.03 0.00 180 RCVD_IN_MSPIKE_L5 1427 0.31 1.03 0.03 181 XMSubMetaI_00 1422 0.69 1.03 0.56 182 XMMoneyMeta_00 1412 0.61 1.02 0.45 183 DKIM_ADSP_CUSTOM_MED 1394 0.78 1.01 0.68 184 TR_XM_GMP_BULK_SIG 1388 0.37 1.00 0.12 185 RCVD_IN_PSBL 1372 0.44 0.99 0.21 186 URIBL_SBL 1368 0.28 0.99 0.00 187 URIBL_SBL_A 1368 0.28 0.99 0.00 188 TM2_M_OBFU_COMMENT 1367 0.48 0.99 0.28 189 SH_BODYURI_REVERSE_SBL 1367 0.28 0.99 0.00 190 TR_LOTS_OF_MONEY2 1366 0.44 0.99 0.22 191 T_MONEY_PERCENT 1366 0.44 0.99 0.22 192 XM_B_COPY_HTML 1361 0.76 0.98 0.67 193 XM_OfRef7 1342 0.39 0.97 0.16 194 XM_ProductURIs 1340 0.66 0.97 0.53 195 SHOPIFY_IMG_NOT_RCVD_SFY 1334 0.44 0.96 0.23 196 XMSubMetaSxObfu_03 1334 0.59 0.96 0.44 197 TR_Mismatch_TLD_02 1321 0.36 0.95 0.12 198 TR_XM_RelayPhish 1310 0.32 0.95 0.08 199 XM_GoogleGroups 1297 1.22 0.94 1.33 200 HTML_TAG_BALANCE_BODY 1296 0.68 0.94 0.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 307710 89.96 94.72 88.08 2 RELAYCOUNTRY_US 291198 82.88 81.68 83.35 3 DKIM_SIGNED 257547 78.75 91.44 73.72 4 XM_DK_Pass 252069 75.90 85.35 72.15 5 DKIM_VALID 248334 74.87 84.44 71.08 6 XM_B_Unicode 243186 73.68 83.96 69.61 7 DCC_CHECK_NEGATIVE 230718 54.73 26.21 66.04 8 BAYES_50 216201 55.77 40.35 61.88 9 DKIM_VALID_AU 202338 60.15 65.79 57.92 10 XM_B_SpammyWords 164816 53.68 70.07 47.18 11 XMListUnsubscribeExists 164746 53.14 68.24 47.16 12 XM_B_Unicode3 143945 43.55 49.48 41.20 13 T_TM2_M_HEADER_IN_MSG 119579 30.92 22.59 34.23 14 DCC_CHECK 118465 44.84 72.40 33.91 15 LOC_TINY_FONT_1 101657 34.62 48.54 29.10 16 DKIM_VALID_EF 100807 29.33 30.54 28.85 17 HTML_FONT_LOW_CONTRAST 100325 30.92 36.49 28.72 18 FVGT_m_MULTI_ODD 84281 26.62 32.92 24.12 19 XMSubLong 79064 23.43 25.45 22.63 20 T_KAM_HTML_FONT_INVALID 76904 24.41 30.45 22.01 21 XM_B_SpammyWords2 72469 26.25 40.13 20.74 22 RCVD_IN_MSPIKE_WL 67147 17.07 11.66 19.22 23 MIME_HTML_ONLY 63466 21.22 28.93 18.17 24 RCVD_IN_MSPIKE_H2 55021 16.82 19.51 15.75 25 ALL_TRUSTED 48018 10.19 1.21 13.74 26 XM_Multi_Part_URI 46314 15.57 21.40 13.26 27 USER_IN_DEF_DKIM_WL 45555 10.08 2.63 13.04 28 TR_XM_DK_Unsub 44784 15.43 22.00 12.82 29 XM_Evil_Numbers_Gen 40371 11.01 9.65 11.56 30 LotsOfNums_01 39337 10.11 7.20 11.26 31 UNPARSEABLE_RELAY 39284 13.12 17.84 11.24 32 BAYES_00 34704 7.25 0.49 9.93 33 ANY_BOUNCE_MESSAGE 34703 7.41 1.05 9.93 34 BOUNCE_MESSAGE 34701 7.41 1.05 9.93 35 XM_B_PhoneNumber 33482 8.72 6.54 9.58 36 RCVD_IN_MSPIKE_H3 32045 8.23 5.84 9.17 37 XM_B_Unsub 29532 11.61 19.57 8.45 38 TM2_M_VERY_LONG_WORD 27172 6.70 3.96 7.78 39 XM_B_Phish_Phrases 26785 7.69 7.76 7.67 40 TooManyTo_001 26028 6.51 4.15 7.45 41 TR_XM_DK_Bayes 24643 5.16 0.39 7.05 42 XM_B_SpammyWords3 24546 9.30 15.05 7.03 43 TR_XM_DK_Bayes1 24193 5.07 0.38 6.92 44 TR_XM_BayesUnsub 23191 10.07 18.73 6.64 45 BAYES_60 22937 7.06 8.32 6.57 46 XM_DKIMWhitelistDomains 22380 4.61 0.08 6.41 47 LOTS_OF_MONEY 21840 8.11 12.80 6.25 48 RCVD_IN_MSPIKE_H5 21427 5.24 3.00 6.13 49 TR_XM_DK_Bayes2 20962 4.39 0.32 6.00 50 BAYES_40 20513 4.69 1.72 5.87 51 T_TooManySym_01 20449 4.92 2.57 5.85 52 TR_MAX_INTL_RELAY 19843 8.40 15.25 5.68 53 XM_H_Long_From01 19328 5.50 5.42 5.53 54 XM_H_GMP 18855 5.30 5.04 5.40 55 XMStrtUSub 18748 5.04 4.22 5.37 56 MIME_QP_LONG_LINE 18340 4.86 3.87 5.25 57 HTML_IMAGE_RATIO_04 17359 4.79 4.34 4.97 58 XM_PDF 16263 3.56 0.81 4.66 59 KHOP_HELO_FCRDNS 15678 3.67 1.59 4.49 60 XM_DK_Undo_02 15676 14.57 40.00 4.49 61 FSL_BULK_SIG 15632 5.93 9.62 4.47 62 BAYES_20 15363 3.53 1.36 4.40 63 MPART_ALT_DIFF 15245 5.07 6.85 4.36 64 TR_XM_SpammyWords4 14654 6.33 11.71 4.19 65 HTML_IMAGE_RATIO_02 13882 4.67 6.44 3.97 66 RCVD_IN_MSPIKE_H4 13675 3.60 2.82 3.91 67 XM_UncommonTLD01 13343 4.31 5.55 3.82 68 T_REMOTE_IMAGE 13062 3.05 1.33 3.74 69 RCVD_IN_VALIDITY_SAFE 13015 3.36 2.44 3.73 70 RCVD_IN_IADB_LISTED 12853 3.16 1.87 3.68 71 HTML_IMAGE_RATIO_06 12169 3.49 3.50 3.48 72 BAYES_80 12133 5.17 9.44 3.47 73 RELAYCOUNTRY_META 11728 7.44 17.76 3.36 74 XMSubMetaSx_00 11698 4.55 7.57 3.35 75 BAYES_99 11542 11.11 30.81 3.30 76 RCVD_IN_IADB_SPF 11158 2.72 1.52 3.19 77 RCVD_IN_VALIDITY_CERTIFIED 10779 2.77 1.97 3.09 78 MAILING_LIST_MULTI 10336 2.79 2.35 2.96 79 XMNumbers 10174 3.21 3.97 2.91 80 BOTNET_IPINHOSTNAME 10141 5.60 12.40 2.90 81 RCVD_IN_IADB_SENDERID 9861 2.40 1.35 2.82 82 T_TooManySym_02 9838 2.21 0.70 2.82 83 RCVD_IN_IADB_DK 9453 2.33 1.38 2.71 84 XM_B_SpammyTLD 9247 2.95 3.72 2.65 85 DKIM_INVALID 9213 3.87 7.00 2.64 86 MIME_HTML_MOSTLY 9196 2.96 3.80 2.63 87 HTML_MIME_NO_HTML_TAG 8856 2.24 1.50 2.53 88 RCVD_IN_IADB_VOUCHED 8782 2.16 1.26 2.51 89 BAYES_999 8747 8.35 23.10 2.50 90 XM_Body_Dirty_Words 8396 3.49 6.24 2.40 91 BAYES_05 8266 1.91 0.74 2.37 92 TooManyTo_002 7841 1.76 0.52 2.24 93 BAYES_95 7703 3.11 5.40 2.20 94 MIME_HTML_ONLY_MULTI 7434 2.41 3.13 2.13 95 INVALID_MSGID 7410 1.62 0.37 2.12 96 HTML_IMAGE_RATIO_08 7231 2.35 3.06 2.07 97 XM_B_URI_Unicode 6997 2.20 2.71 2.00 98 XM_CamelCaseFrm001 6712 2.27 3.17 1.92 99 TM2_M_URI_OPT_OUT 6519 2.25 3.22 1.87 100 MSGID_NOFQDN1 6517 1.37 0.13 1.87 101 T_XMDrugObfuBody_14 6449 2.34 3.60 1.85 102 TO_MALFORMED 6369 1.31 0.02 1.82 103 MIME_CHARSET_FARAWAY 6302 1.41 0.43 1.80 104 XM_DK_Undo_01 6192 1.70 1.52 1.77 105 RCVD_IN_IADB_OPTIN 6109 1.50 0.88 1.75 106 TR_XM_DKIM_Undo 6074 9.56 29.27 1.74 107 TR_XM_SpammyRelay 6003 4.96 13.14 1.72 108 CHARSET_FARAWAY_HEADER 5975 1.29 0.24 1.71 109 XM_B_Investor 5920 2.51 4.58 1.69 110 T_XMDrugObfuBody_08 5742 2.21 3.63 1.64 111 XM_B_Unsub2 5737 2.13 3.35 1.64 112 FROM_EXCESS_BASE64 5725 1.69 1.81 1.64 113 TR_XM_PhishingBody 5178 2.22 4.10 1.48 114 XM_SendGrid 5156 1.53 1.66 1.48 115 UNTRUSTED_Relay 5123 2.94 6.67 1.47 116 TooManyTo_003 5114 1.17 0.43 1.46 117 TR_XM_UnparsRelay 5028 3.59 9.01 1.44 118 TR_Symld_Words 4982 1.28 0.90 1.43 119 XMDiploma_00 4791 1.87 3.13 1.37 120 URI_HEX 4720 1.56 2.07 1.35 121 XM_GoogleGroups 4663 1.22 0.94 1.33 122 XM_SPF_SoftFail 4567 1.81 3.09 1.31 123 HELO_NODOT 4546 0.98 0.18 1.30 124 HELO_NO_DOMAIN 4534 0.97 0.16 1.30 125 TR_XM_MSPIKECOMBO 4435 3.10 7.73 1.27 126 RCVD_IN_MSPIKE_BL 4435 3.10 7.73 1.27 127 IN_HORDE_ADDRESS_BOOK 4356 0.94 0.15 1.25 128 XMStockSpam_06 4261 1.49 2.19 1.22 129 TR_XM_SpammyWords5 4256 1.98 3.89 1.22 130 SUBJ_ALL_CAPS 4211 1.35 1.73 1.21 131 XMCapTrack 4070 0.99 0.57 1.16 132 RCVD_IN_MSPIKE_L3 4047 2.29 5.14 1.16 133 T_XMDrugObfuBody_00 4023 1.34 1.81 1.15 134 TR_DCC_Bayes_99 3968 6.72 20.81 1.14 135 TooManyTo_004 3924 0.91 0.36 1.12 136 URI_NOVOWEL 3849 1.21 1.50 1.10 137 XMGappySubj_01 3824 0.84 0.21 1.09 138 XMSexyCombo_05 3652 1.87 3.94 1.05 139 XM_ShortIntro_01 3619 0.95 0.72 1.04 140 T_TooManySym_03 3605 0.78 0.15 1.03 141 TR_XM_DK_SendGrid 3542 1.03 1.07 1.01 142 TVD_SPACE_RATIO 3531 0.80 0.26 1.01 143 BOTNET 3441 3.65 10.38 0.98 144 XM_UB50 3427 1.51 2.85 0.98 145 TooManyTo_005 3305 0.77 0.32 0.95 146 TVD_RCVD_IP 3277 1.01 1.19 0.94 147 XM_B_SpammyWords4 3242 1.40 2.60 0.93 148 SpammyFromTLD_01 2865 1.10 1.81 0.82 149 TR_MetaPhish_Combo_01 2818 0.79 0.73 0.81 150 XM_H_Long_From02 2815 1.23 2.29 0.81 151 T_OBFU_PDF_ATTACH 2720 0.60 0.16 0.78 152 FROM_GOV_DKIM_AU 2689 0.60 0.16 0.77 153 XM_OfRef6 2666 1.59 3.69 0.76 154 T_FILL_THIS_FORM_SHORT 2621 1.00 1.65 0.75 155 XM_H_PHPMailer 2618 0.65 0.40 0.75 156 XMGenDplmaNmb 2605 1.00 1.63 0.75 157 XMBSHREFv2 2567 0.64 0.40 0.73 158 RELAYCOUNTRY_GB 2528 0.78 0.92 0.72 159 HTTPS_HTTP_MISMATCH 2491 0.81 1.04 0.71 160 DKIM_ADSP_CUSTOM_MED 2388 0.78 1.01 0.68 161 TRACKER_ID 2384 0.54 0.18 0.68 162 XM_B_COPY_HTML 2352 0.76 0.98 0.67 163 XMBrknScrpt_02 2321 0.95 1.69 0.66 164 RCVD_IN_PBL 2315 0.88 1.42 0.66 165 T_Symld_Words_02 2216 0.80 1.21 0.63 166 XMBdyGiftCard01 2177 0.94 1.73 0.62 167 MPART_ALT_DIFF_COUNT 2095 0.80 1.31 0.60 168 RELAYCOUNTRY_CA 2013 2.28 6.58 0.58 169 HTML_TAG_BALANCE_BODY 2012 0.68 0.94 0.58 170 XMSubMetaSxObfu_02 2005 0.60 0.68 0.57 171 RELAYCOUNTRY_AU 1998 1.25 2.96 0.57 172 XM_B_DNDMA 1974 0.66 0.91 0.57 173 HTML_IMAGE_ONLY_20 1945 0.70 1.06 0.56 174 XMSubMetaI_00 1944 0.69 1.03 0.56 175 TR_XM_SpammyWords3 1942 1.98 5.59 0.56 176 XMNoVowels 1928 0.53 0.48 0.55 177 RCVD_IN_BL_SPAMCOP_NET 1879 3.67 11.56 0.54 178 URI_TRY_3LD 1872 0.76 1.33 0.54 179 XM_ProductURIs 1866 0.66 0.97 0.53 180 HTML_IMAGE_ONLY_32 1775 0.42 0.18 0.51 181 XMPhish14 1723 0.57 0.77 0.49 182 MSGID_FROM_MTA_HEADER 1694 0.42 0.25 0.48 183 XMLngstWrd_00 1662 0.51 0.58 0.48 184 SpammyFromTLD_02 1659 0.89 1.93 0.47 185 TR_XM_Base64_M1 1620 0.58 0.89 0.46 186 XMSolicitRefs_0 1609 0.47 0.50 0.46 187 XMGappySubj_02 1599 0.34 0.05 0.46 188 XMSlimDrugH 1574 0.55 0.78 0.45 189 TO_NO_BRKTS_HTML_ONLY 1569 0.36 0.12 0.45 190 TR_XM_SpammyWords2 1561 3.28 10.41 0.45 191 XMMoneyMeta_00 1561 0.61 1.02 0.45 192 XMSubMetaSxObfu_03 1541 0.59 0.96 0.44 193 NML_ADSP_CUSTOM_MED 1538 0.54 0.80 0.44 194 LongTLD 1536 0.51 0.69 0.44 195 TR_XM_GMP_MSPIKE_UNDO2 1436 0.36 0.23 0.41 196 HTML_IMAGE_ONLY_28 1435 0.45 0.54 0.41 197 T_XMHurry_00 1419 0.75 1.60 0.41 198 XMDateMe_00 1409 0.40 0.39 0.40 199 FORGED_GMAIL_RCVD 1393 0.51 0.78 0.40 200 XMHTML_After_End 1378 0.62 1.17 0.39 ----------------------------------------------------------------------