Email: 505561 Autolearn: 0 AvgScore: 4.92 AvgScanTime: 1.50 sec Spam: 148121 Autolearn: 0 AvgScore: 14.70 AvgScanTime: 1.71 sec Ham: 357440 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 1.42 sec Time Spent Running SA: 211.32 hours Time Spent Processing Spam: 70.39 hours Time Spent Processing Ham: 140.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139619 88.60 94.26 86.26 2 DKIM_SIGNED 134127 78.89 90.55 74.06 3 XM_DK_Pass 126310 76.47 85.27 72.82 4 DKIM_VALID 124960 75.54 84.36 71.88 5 XM_B_Unicode 124153 75.38 83.82 71.88 6 RELAYCOUNTRY_US 119731 78.62 80.83 77.71 7 DCC_CHECK 105735 47.83 71.38 38.08 8 XM_B_SpammyWords 100704 52.51 67.99 46.09 9 XMListUnsubscribeExists 99850 53.40 67.41 47.59 10 DKIM_VALID_AU 98664 61.56 66.61 59.47 11 XM_B_Unicode3 73537 43.37 49.65 40.76 12 LOC_TINY_FONT_1 72742 35.23 49.11 29.47 13 XM_DK_Undo_02 62658 16.01 42.30 5.12 14 XM_B_SpammyWords2 57076 26.11 38.53 20.96 15 BAYES_50 56714 53.29 38.29 59.51 16 HTML_FONT_LOW_CONTRAST 55083 30.89 37.19 28.27 17 FVGT_m_MULTI_ODD 49202 27.50 33.22 25.13 18 BAYES_99 48440 12.07 32.70 3.53 19 T_KAM_HTML_FONT_INVALID 44964 24.58 30.36 22.18 20 TR_XM_DKIM_Undo 44517 10.30 30.05 2.12 21 DKIM_VALID_EF 44421 29.51 29.99 29.32 22 MIME_HTML_ONLY 41900 20.86 28.29 17.79 23 DCC_CHECK_NEGATIVE 39984 51.66 26.99 61.88 24 BAYES_999 37420 9.22 25.26 2.57 25 XMSubLong 36523 22.34 24.66 21.37 26 XM_Multi_Part_URI 33661 17.04 22.73 14.68 27 T_TM2_M_HEADER_IN_MSG 32721 28.85 22.09 31.65 28 TR_DCC_Bayes_99 32207 7.25 21.74 1.25 29 TR_XM_DK_Unsub 30852 15.44 20.83 13.20 30 RCVD_IN_MSPIKE_H2 29865 16.82 20.16 15.43 31 XM_B_Unsub 28431 12.30 19.19 9.45 32 UNPARSEABLE_RELAY 27524 13.60 18.58 11.54 33 TR_XM_BayesUnsub 27400 10.94 18.50 7.81 34 RELAYCOUNTRY_META 26026 7.57 17.57 3.43 35 TR_MAX_INTL_RELAY 22346 8.93 15.09 6.39 36 XM_B_SpammyWords3 21106 7.63 14.25 4.89 37 LOTS_OF_MONEY 18568 9.70 12.54 8.53 38 RCVD_IN_BL_SPAMCOP_NET 18056 4.10 12.19 0.74 39 BOTNET_IPINHOSTNAME 17892 5.72 12.08 3.08 40 TR_XM_SpammyRelay 17537 4.78 11.84 1.85 41 RCVD_IN_MSPIKE_WL 16520 16.33 11.15 18.47 42 TR_XM_SpammyWords4 15839 7.62 10.69 6.34 43 TR_XM_SpammyWords2 15041 3.31 10.15 0.47 44 BOTNET 14676 3.75 9.91 1.20 45 XM_Evil_Numbers_Gen 14145 9.29 9.55 9.18 46 TR_XM_UnparsRelay 13800 3.80 9.32 1.52 47 BAYES_80 13793 5.46 9.31 3.87 48 FSL_BULK_SIG 13089 7.34 8.84 6.72 49 XM_B_Phish_Phrases 12936 6.16 8.73 5.10 50 BAYES_60 11829 7.19 7.99 6.85 51 HTML_IMAGE_RATIO_02 9797 5.10 6.61 4.47 52 UNTRUSTED_Relay 9645 2.93 6.51 1.44 53 XM_B_PhoneNumber 9445 8.75 6.38 9.73 54 LotsOfNums_01 9293 7.44 6.27 7.92 55 RELAYCOUNTRY_CA 9224 2.28 6.23 0.65 56 DKIM_INVALID 9167 3.35 6.19 2.18 57 TR_XM_SPAMCOP 9094 1.97 6.14 0.24 58 XM_H_GMP 8572 5.48 5.79 5.35 59 XMSubMetaSx_00 8517 3.65 5.75 2.78 60 XM_H_Long_From01 8471 5.43 5.72 5.32 61 RCVD_IN_MSPIKE_BL 8359 2.45 5.64 1.13 62 TR_XM_MSPIKECOMBO 8358 2.45 5.64 1.13 63 RCVD_IN_MSPIKE_H3 8279 7.71 5.59 8.59 64 BAYES_95 7950 3.35 5.37 2.52 65 MPART_ALT_DIFF 7918 5.25 5.35 5.20 66 XM_UncommonTLD01 7826 4.23 5.28 3.80 67 XM_Body_Dirty_Words 7505 3.45 5.07 2.78 68 XM_B_Investor 7408 2.53 5.00 1.50 69 TR_XM_PhishingBody 6774 2.30 4.57 1.35 70 HTML_IMAGE_RATIO_04 6571 4.00 4.44 3.82 71 XMStrtUSub 6372 4.62 4.30 4.76 72 TooManyTo_001 6359 6.47 4.29 7.37 73 T_XMDrugObfuBody_14 6170 2.62 4.17 1.98 74 TR_XM_SpammyWords3 6109 1.55 4.12 0.49 75 RCVD_IN_MSPIKE_L3 6059 1.90 4.09 0.99 76 TR_XM_NoHeaderRelay 5911 1.32 3.99 0.21 77 T_XMDrugObfuBody_08 5824 2.64 3.93 2.11 78 TR_XM_SpammyWords5 5773 1.95 3.90 1.15 79 XM_CamelCaseFrm001 5749 2.51 3.88 1.94 80 XMNumbers 5735 3.17 3.87 2.87 81 TM2_M_VERY_LONG_WORD 5565 2.23 3.76 1.60 82 MIME_QP_LONG_LINE 5425 4.63 3.66 5.03 83 XM_B_SpammyTLD 5409 2.74 3.65 2.37 84 XM_OfRef6 5332 1.64 3.60 0.82 85 XM_URI_RBL 5286 1.26 3.57 0.31 86 HTML_IMAGE_RATIO_06 5239 3.09 3.54 2.91 87 XMSexyCombo_05 5039 1.56 3.40 0.79 88 MIME_HTML_MOSTLY 4684 3.12 3.16 3.10 89 XM_SPF_SoftFail 4626 1.74 3.12 1.17 90 RELAYCOUNTRY_AU 4545 1.34 3.07 0.62 91 TR_XM_INV_DKIM 4476 0.92 3.02 0.05 92 MIME_HTML_ONLY_MULTI 4412 2.56 2.98 2.39 93 T_TooManySym_01 4372 4.73 2.95 5.47 94 XM_B_Unsub2 4249 1.75 2.87 1.28 95 RCVD_IN_MSPIKE_H5 4210 5.18 2.84 6.15 96 TM2_M_URI_OPT_OUT 4131 2.06 2.79 1.75 97 XM_UB50 4120 1.50 2.78 0.96 98 RCVD_IN_MSPIKE_H4 4031 3.43 2.72 3.73 99 XM_B_URI_Unicode 3912 2.08 2.64 1.85 100 XMDiploma_00 3867 1.72 2.61 1.35 101 HTML_IMAGE_RATIO_08 3849 2.53 2.60 2.50 102 XMBody_17 3636 1.00 2.45 0.40 103 MAILING_LIST_MULTI 3164 2.61 2.14 2.81 104 FROM_EXCESS_BASE64 3160 1.72 2.13 1.55 105 USER_IN_DEF_DKIM_WL 3124 9.97 2.11 13.22 106 TR_XM_MSPIKECOMBO2 3074 0.67 2.08 0.09 107 XM_H_Long_From02 3067 1.20 2.07 0.83 108 SUBJ_ALL_CAPS 3005 1.57 2.03 1.39 109 ALL_TRUSTED 2960 14.25 2.00 19.33 110 XMStockSpam_06 2931 1.40 1.98 1.15 111 XM_B_SpammyWords4 2930 1.11 1.98 0.75 112 TR_XM_INTL_Spamhaus 2811 0.67 1.90 0.16 113 SpammyFromTLD_02 2676 0.85 1.81 0.45 114 RCVD_IN_IADB_LISTED 2662 2.78 1.80 3.19 115 T_FILL_THIS_FORM_SHORT 2598 0.99 1.75 0.68 116 BAYES_40 2589 4.62 1.75 5.81 117 XMPhish30 2574 0.81 1.74 0.42 118 T_XMHurry_00 2539 0.89 1.71 0.55 119 XM_ProductURIs 2524 0.86 1.70 0.52 120 TR_XM_MaxSPIKE 2500 0.53 1.69 0.05 121 XMBrknScrpt_02 2474 1.17 1.67 0.97 122 HTML_MIME_NO_HTML_TAG 2454 2.13 1.66 2.32 123 RELAYCOUNTRY_FR 2424 0.67 1.64 0.27 124 XM_DK_Undo_01 2422 1.61 1.64 1.59 125 RCVD_IN_VALIDITY_SAFE 2407 3.22 1.63 3.87 126 SHORTCIRCUIT 2360 0.47 1.59 0.00 127 RCVD_IN_ZEN_LASTEXTERNAL 2360 0.47 1.59 0.00 128 THIS_AD 2353 0.70 1.59 0.34 129 XMHTML_After_End 2340 0.72 1.58 0.36 130 XM_B_DNDMA 2334 0.91 1.58 0.63 131 RCVD_IN_XBL 2302 0.47 1.55 0.02 132 BAYES_20 2300 5.07 1.55 6.53 133 T_XMDrugObfuBody_00 2262 1.05 1.53 0.85 134 SpammyFromTLD_01 2242 0.95 1.51 0.72 135 KHOP_HELO_FCRDNS 2236 1.45 1.51 1.42 136 RCVD_IN_VALIDITY_RPBL 2219 0.46 1.50 0.03 137 XM_SendGrid 2218 1.46 1.50 1.44 138 DKIM_ADSP_NXDOMAIN 2207 0.62 1.49 0.26 139 RCVD_IN_IADB_SPF 2197 2.41 1.48 2.80 140 TR_XM_InvalidRelay 2189 0.44 1.48 0.01 141 XMGenDplmaNmb 2188 0.98 1.48 0.78 142 RCVD_IN_SBL_CSS 2175 0.47 1.47 0.05 143 XM_B_SEO 2155 0.55 1.45 0.18 144 TR_LOTS_OF_MONEY3 2147 0.60 1.45 0.25 145 DIET_1 2134 0.59 1.44 0.23 146 T_REMOTE_IMAGE 2123 2.81 1.43 3.38 147 ANY_BOUNCE_MESSAGE 2082 5.04 1.41 6.54 148 BOUNCE_MESSAGE 2081 5.04 1.40 6.54 149 URI_TRY_3LD 2060 0.79 1.39 0.54 150 RCVD_IN_IADB_DK 2024 2.11 1.37 2.42 151 URI_HEX 2018 1.28 1.36 1.25 152 RCVD_IN_IADB_SENDERID 1999 2.17 1.35 2.50 153 XM_HighProb1 1972 0.39 1.33 0.00 154 RCVD_IN_MSPIKE_L4 1968 0.48 1.33 0.12 155 RDNS_DYNAMIC 1941 0.48 1.31 0.14 156 RCVD_IN_PBL 1904 0.80 1.29 0.60 157 MultiRelay_CC 1884 0.47 1.27 0.14 158 SHOPIFY_IMG_NOT_RCVD_SFY 1877 0.54 1.27 0.24 159 URI_NOVOWEL 1836 1.19 1.24 1.18 160 XM_B_Phish66 1830 0.58 1.24 0.30 161 XM_B_COPY_HTML 1816 0.91 1.23 0.78 162 XMSubMetaI_00 1790 0.79 1.21 0.61 163 XMBody_78 1779 0.58 1.20 0.32 164 RCVD_IN_VALIDITY_CERTIFIED 1759 2.73 1.19 3.37 165 XMClaimOffer 1744 0.46 1.18 0.17 166 XMPhish14 1706 0.58 1.15 0.35 167 TR_XM_SEO4 1689 0.39 1.14 0.08 168 TVD_RCVD_IP 1672 0.94 1.13 0.86 169 TR_XM_GMP_BULK_SIG 1672 0.43 1.13 0.14 170 RCVD_IN_IADB_VOUCHED 1651 1.85 1.11 2.15 171 HTML_FONT_TINY_NORDNS 1646 0.37 1.11 0.07 172 HTML_FONT_FACE_BAD 1631 0.53 1.10 0.29 173 TR_XM_DK_SendGrid 1613 1.01 1.09 0.97 174 HELO_DYNAMIC_SPLIT_IP 1613 0.32 1.09 0.00 175 HTML_IMAGE_ONLY_20 1600 0.71 1.08 0.56 176 T_Symld_Words_02 1587 0.87 1.07 0.79 177 XM_UB99 1559 0.31 1.05 0.00 178 HTTPS_HTTP_MISMATCH 1547 0.73 1.04 0.59 179 MISSING_HEADERS 1530 0.59 1.03 0.40 180 TM2_M_A_HREF_HREF 1529 0.52 1.03 0.31 181 DKIM_ADSP_CUSTOM_MED 1487 0.75 1.00 0.65 182 TR_XM_RelayPhish 1474 0.34 1.00 0.07 183 XMSubMetaSxObfu_03 1471 0.51 0.99 0.31 184 RELAYCOUNTRY_GB 1456 0.78 0.98 0.70 185 XM_GoogleGroups 1453 1.21 0.98 1.31 186 XMReplyNow 1448 0.47 0.98 0.27 187 MPART_ALT_DIFF_COUNT 1425 0.67 0.96 0.55 188 HTML_TAG_BALANCE_BODY 1421 0.70 0.96 0.59 189 RCVD_IN_PSBL 1414 0.29 0.95 0.02 190 XMSlimDrugH 1394 0.61 0.94 0.47 191 XM_UB60 1389 0.33 0.94 0.07 192 BOTNET_NORDNS 1384 0.28 0.93 0.01 193 XM_UB80 1378 0.29 0.93 0.02 194 TR_Symld_Words 1376 1.40 0.93 1.59 195 XM_DIRTYINTL 1334 0.31 0.90 0.07 196 XM_PDF 1315 3.12 0.89 4.04 197 TR_XM_PHPForged 1292 0.40 0.87 0.20 198 TR_XM_Base64_M1 1278 0.56 0.86 0.43 199 TR_LOTS_OF_MONEY2 1269 0.36 0.86 0.16 200 T_MONEY_PERCENT 1269 0.36 0.86 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 308323 88.60 94.26 86.26 2 RELAYCOUNTRY_US 277757 78.62 80.83 77.71 3 DKIM_SIGNED 264708 78.89 90.55 74.06 4 XM_DK_Pass 260279 76.47 85.27 72.82 5 DKIM_VALID 256932 75.54 84.36 71.88 6 XM_B_Unicode 256927 75.38 83.82 71.88 7 DCC_CHECK_NEGATIVE 221179 51.66 26.99 61.88 8 BAYES_50 212722 53.29 38.29 59.51 9 DKIM_VALID_AU 212577 61.56 66.61 59.47 10 XMListUnsubscribeExists 170101 53.40 67.41 47.59 11 XM_B_SpammyWords 164747 52.51 67.99 46.09 12 XM_B_Unicode3 145709 43.37 49.65 40.76 13 DCC_CHECK 136098 47.83 71.38 38.08 14 T_TM2_M_HEADER_IN_MSG 113128 28.85 22.09 31.65 15 LOC_TINY_FONT_1 105349 35.23 49.11 29.47 16 DKIM_VALID_EF 104789 29.51 29.99 29.32 17 HTML_FONT_LOW_CONTRAST 101065 30.89 37.19 28.27 18 FVGT_m_MULTI_ODD 89842 27.50 33.22 25.13 19 T_KAM_HTML_FONT_INVALID 79297 24.58 30.36 22.18 20 XMSubLong 76402 22.34 24.66 21.37 21 XM_B_SpammyWords2 74912 26.11 38.53 20.96 22 ALL_TRUSTED 69104 14.25 2.00 19.33 23 RCVD_IN_MSPIKE_WL 66036 16.33 11.15 18.47 24 MIME_HTML_ONLY 63580 20.86 28.29 17.79 25 RCVD_IN_MSPIKE_H2 55161 16.82 20.16 15.43 26 XM_Multi_Part_URI 52470 17.04 22.73 14.68 27 USER_IN_DEF_DKIM_WL 47263 9.97 2.11 13.22 28 TR_XM_DK_Unsub 47184 15.44 20.83 13.20 29 UNPARSEABLE_RELAY 41252 13.60 18.58 11.54 30 XM_B_PhoneNumber 34768 8.75 6.38 9.73 31 XM_B_Unsub 33771 12.30 19.19 9.45 32 BAYES_00 32951 6.70 0.63 9.22 33 XM_Evil_Numbers_Gen 32808 9.29 9.55 9.18 34 RCVD_IN_MSPIKE_H3 30720 7.71 5.59 8.59 35 LOTS_OF_MONEY 30473 9.70 12.54 8.53 36 LotsOfNums_01 28309 7.44 6.27 7.92 37 TR_XM_BayesUnsub 27913 10.94 18.50 7.81 38 TooManyTo_001 26338 6.47 4.29 7.37 39 XM_DKIMWhitelistDomains 25948 5.16 0.08 7.26 40 BAYES_60 24502 7.19 7.99 6.85 41 FSL_BULK_SIG 24031 7.34 8.84 6.72 42 TR_XM_DK_Bayes 23512 4.79 0.46 6.58 43 ANY_BOUNCE_MESSAGE 23383 5.04 1.41 6.54 44 BOUNCE_MESSAGE 23383 5.04 1.40 6.54 45 BAYES_20 23341 5.07 1.55 6.53 46 TR_XM_DK_Bayes1 23208 4.72 0.46 6.49 47 TR_MAX_INTL_RELAY 22823 8.93 15.09 6.39 48 TR_XM_SpammyWords4 22670 7.62 10.69 6.34 49 RCVD_IN_MSPIKE_H5 21996 5.18 2.84 6.15 50 BAYES_40 20782 4.62 1.75 5.81 51 TR_XM_DK_Bayes2 19955 4.05 0.36 5.58 52 T_TooManySym_01 19561 4.73 2.95 5.47 53 XM_H_GMP 19125 5.48 5.79 5.35 54 XM_H_Long_From01 19003 5.43 5.72 5.32 55 MPART_ALT_DIFF 18604 5.25 5.35 5.20 56 XM_DK_Undo_02 18300 16.01 42.30 5.12 57 XM_B_Phish_Phrases 18222 6.16 8.73 5.10 58 MIME_QP_LONG_LINE 17967 4.63 3.66 5.03 59 XM_B_SpammyWords3 17486 7.63 14.25 4.89 60 XMStrtUSub 17003 4.62 4.30 4.76 61 HTML_IMAGE_RATIO_02 15995 5.10 6.61 4.47 62 XM_PDF 14457 3.12 0.89 4.04 63 RCVD_IN_VALIDITY_SAFE 13848 3.22 1.63 3.87 64 BAYES_80 13818 5.46 9.31 3.87 65 HTML_IMAGE_RATIO_04 13669 4.00 4.44 3.82 66 XM_UncommonTLD01 13566 4.23 5.28 3.80 67 RCVD_IN_MSPIKE_H4 13320 3.43 2.72 3.73 68 BAYES_99 12602 12.07 32.70 3.53 69 RELAYCOUNTRY_META 12256 7.57 17.57 3.43 70 T_REMOTE_IMAGE 12065 2.81 1.43 3.38 71 RCVD_IN_VALIDITY_CERTIFIED 12058 2.73 1.19 3.37 72 RCVD_IN_IADB_LISTED 11388 2.78 1.80 3.19 73 MIME_HTML_MOSTLY 11078 3.12 3.16 3.10 74 BOTNET_IPINHOSTNAME 11008 5.72 12.08 3.08 75 HTML_IMAGE_RATIO_06 10402 3.09 3.54 2.91 76 XMNumbers 10269 3.17 3.87 2.87 77 MAILING_LIST_MULTI 10027 2.61 2.14 2.81 78 RCVD_IN_IADB_SPF 10005 2.41 1.48 2.80 79 XMSubMetaSx_00 9934 3.65 5.75 2.78 80 XM_Body_Dirty_Words 9919 3.45 5.07 2.78 81 T_TooManySym_02 9810 2.18 0.82 2.74 82 BAYES_999 9177 9.22 25.26 2.57 83 BAYES_95 8993 3.35 5.37 2.52 84 RCVD_IN_IADB_SENDERID 8950 2.17 1.35 2.50 85 HTML_IMAGE_RATIO_08 8928 2.53 2.60 2.50 86 RCVD_IN_IADB_DK 8655 2.11 1.37 2.42 87 MIME_HTML_ONLY_MULTI 8527 2.56 2.98 2.39 88 XM_B_SpammyTLD 8454 2.74 3.65 2.37 89 HTML_MIME_NO_HTML_TAG 8306 2.13 1.66 2.32 90 TooManyTo_002 8062 1.76 0.58 2.26 91 DKIM_INVALID 7776 3.35 6.19 2.18 92 BAYES_05 7726 1.77 0.82 2.16 93 RCVD_IN_IADB_VOUCHED 7688 1.85 1.11 2.15 94 TR_XM_DKIM_Undo 7578 10.30 30.05 2.12 95 T_XMDrugObfuBody_08 7548 2.64 3.93 2.11 96 INVALID_MSGID 7472 1.54 0.22 2.09 97 T_XMDrugObfuBody_14 7077 2.62 4.17 1.98 98 XM_CamelCaseFrm001 6947 2.51 3.88 1.94 99 TR_XM_SpammyRelay 6624 4.78 11.84 1.85 100 XM_B_URI_Unicode 6606 2.08 2.64 1.85 101 MSGID_NOFQDN1 6533 1.30 0.02 1.83 102 TO_MALFORMED 6456 1.28 0.01 1.81 103 TM2_M_URI_OPT_OUT 6270 2.06 2.79 1.75 104 TM2_M_VERY_LONG_WORD 5734 2.23 3.76 1.60 105 XM_DK_Undo_01 5700 1.61 1.64 1.59 106 TR_Symld_Words 5686 1.40 0.93 1.59 107 FROM_EXCESS_BASE64 5549 1.72 2.13 1.55 108 TR_XM_UnparsRelay 5436 3.80 9.32 1.52 109 XM_B_Investor 5363 2.53 5.00 1.50 110 RCVD_IN_IADB_OPTIN 5318 1.27 0.75 1.49 111 TooManyTo_003 5194 1.17 0.48 1.45 112 XM_SendGrid 5158 1.46 1.50 1.44 113 UNTRUSTED_Relay 5143 2.93 6.51 1.44 114 KHOP_HELO_FCRDNS 5072 1.45 1.51 1.42 115 SUBJ_ALL_CAPS 4957 1.57 2.03 1.39 116 TR_XM_PhishingBody 4840 2.30 4.57 1.35 117 XMDiploma_00 4818 1.72 2.61 1.35 118 XM_GoogleGroups 4665 1.21 0.98 1.31 119 XM_B_Unsub2 4584 1.75 2.87 1.28 120 URI_HEX 4465 1.28 1.36 1.25 121 TR_DCC_Bayes_99 4457 7.25 21.74 1.25 122 HELO_NODOT 4283 0.90 0.19 1.20 123 BOTNET 4279 3.75 9.91 1.20 124 HELO_NO_DOMAIN 4277 0.90 0.19 1.20 125 IN_HORDE_ADDRESS_BOOK 4274 0.89 0.16 1.20 126 URI_NOVOWEL 4203 1.19 1.24 1.18 127 XM_SPF_SoftFail 4168 1.74 3.12 1.17 128 XMStockSpam_06 4126 1.40 1.98 1.15 129 TR_XM_SpammyWords5 4100 1.95 3.90 1.15 130 RCVD_IN_MSPIKE_BL 4048 2.45 5.64 1.13 131 TR_XM_MSPIKECOMBO 4046 2.45 5.64 1.13 132 XMGappySubj_01 3987 0.83 0.14 1.12 133 TooManyTo_004 3917 0.90 0.41 1.10 134 XMCapTrack 3860 0.93 0.55 1.08 135 T_TooManySym_03 3795 0.82 0.23 1.06 136 RCVD_IN_MSPIKE_L3 3537 1.90 4.09 0.99 137 TR_XM_DK_SendGrid 3470 1.01 1.09 0.97 138 XMBrknScrpt_02 3457 1.17 1.67 0.97 139 XM_UB50 3446 1.50 2.78 0.96 140 XM_ShortIntro_01 3433 0.84 0.56 0.96 141 TooManyTo_005 3192 0.74 0.37 0.89 142 TVD_RCVD_IP 3072 0.94 1.13 0.86 143 T_XMDrugObfuBody_00 3055 1.05 1.53 0.85 144 XM_H_Long_From02 2982 1.20 2.07 0.83 145 TVD_SPACE_RATIO 2946 0.65 0.24 0.82 146 XM_OfRef6 2939 1.64 3.60 0.82 147 T_TVD_MIME_NO_HEADERS 2892 0.58 0.04 0.81 148 XMSexyCombo_05 2839 1.56 3.40 0.79 149 T_Symld_Words_02 2806 0.87 1.07 0.79 150 XM_B_COPY_HTML 2796 0.91 1.23 0.78 151 XMGenDplmaNmb 2780 0.98 1.48 0.78 152 XM_B_SpammyWords4 2683 1.11 1.98 0.75 153 RCVD_IN_BL_SPAMCOP_NET 2661 4.10 12.19 0.74 154 FROM_GOV_DKIM_AU 2599 0.56 0.16 0.73 155 SpammyFromTLD_01 2586 0.95 1.51 0.72 156 TR_MetaPhish_Combo_01 2508 0.71 0.72 0.70 157 RELAYCOUNTRY_GB 2494 0.78 0.98 0.70 158 T_FILL_THIS_FORM_SHORT 2430 0.99 1.75 0.68 159 XM_H_PHPMailer 2396 0.63 0.53 0.67 160 RELAYCOUNTRY_CA 2322 2.28 6.23 0.65 161 DKIM_ADSP_CUSTOM_MED 2310 0.75 1.00 0.65 162 XM_B_DNDMA 2269 0.91 1.58 0.63 163 XMBdyGiftCard01 2226 0.66 0.74 0.62 164 RELAYCOUNTRY_AU 2222 1.34 3.07 0.62 165 XMNoVowels 2205 0.58 0.49 0.62 166 XMSubMetaI_00 2188 0.79 1.21 0.61 167 RCVD_IN_PBL 2161 0.80 1.29 0.60 168 HTTPS_HTTP_MISMATCH 2124 0.73 1.04 0.59 169 HTML_TAG_BALANCE_BODY 2112 0.70 0.96 0.59 170 T_OBFU_PDF_ATTACH 2112 0.48 0.21 0.59 171 LongTLD 2097 0.59 0.61 0.59 172 XMBSHREFv2 2065 0.51 0.36 0.58 173 PLING_QUERY 2021 0.60 0.68 0.57 174 HTML_IMAGE_ONLY_20 2004 0.71 1.08 0.56 175 XMGappySubj_02 2004 0.41 0.04 0.56 176 MPART_ALT_DIFF_COUNT 1957 0.67 0.96 0.55 177 T_XMHurry_00 1953 0.89 1.71 0.55 178 TO_NO_BRKTS_HTML_ONLY 1944 0.41 0.10 0.54 179 URI_TRY_3LD 1935 0.79 1.39 0.54 180 XM_ProductURIs 1841 0.86 1.70 0.52 181 XMMoneyMeta_00 1768 0.56 0.70 0.49 182 TR_XM_SpammyWords3 1747 1.55 4.12 0.49 183 XMSlimDrugH 1689 0.61 0.94 0.47 184 TR_XM_SpammyWords2 1684 3.31 10.15 0.47 185 HTML_IMAGE_ONLY_32 1672 0.40 0.25 0.47 186 SUBJ_DOLLARS 1656 0.58 0.85 0.46 187 TM2_M_OBFU_COMMENT 1648 0.54 0.74 0.46 188 SpammyFromTLD_02 1598 0.85 1.81 0.45 189 MSGID_FROM_MTA_HEADER 1595 0.39 0.26 0.45 190 XMLngstWrd_00 1582 0.47 0.54 0.44 191 TR_XM_Base64_M1 1535 0.56 0.86 0.43 192 XMPhish30 1501 0.81 1.74 0.42 193 HTML_IMAGE_ONLY_28 1496 0.37 0.26 0.42 194 MISSING_HEADERS 1437 0.59 1.03 0.40 195 XMBody_17 1429 1.00 2.45 0.40 196 NML_ADSP_CUSTOM_MED 1422 0.51 0.80 0.40 197 TR_XM_GMP_MSPIKE_UNDO2 1363 0.34 0.24 0.38 198 FORGED_GMAIL_RCVD 1363 0.49 0.77 0.38 199 HTML_IMAGE_ONLY_24 1356 0.35 0.28 0.38 200 SHORT_HELO_AND_INLINE_IMAGE 1347 0.28 0.04 0.38 ----------------------------------------------------------------------