Email: 509575 Autolearn: 0 AvgScore: 5.08 AvgScanTime: 1.39 sec Spam: 143270 Autolearn: 0 AvgScore: 15.03 AvgScanTime: 1.65 sec Ham: 366305 Autolearn: 0 AvgScore: 1.20 AvgScanTime: 1.29 sec Time Spent Running SA: 196.80 hours Time Spent Processing Spam: 65.84 hours Time Spent Processing Ham: 130.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135363 89.37 94.48 87.37 2 DKIM_SIGNED 127449 72.10 88.96 65.51 3 XM_B_Unicode 119204 75.81 83.20 72.91 4 XM_DK_Pass 117534 69.27 82.04 64.27 5 DKIM_VALID 116365 68.41 81.22 63.40 6 RELAYCOUNTRY_US 116124 79.64 81.05 79.09 7 DCC_CHECK 103747 43.56 72.41 32.28 8 XM_B_SpammyWords 96956 52.05 67.67 45.93 9 XMListUnsubscribeExists 94264 48.55 65.79 41.81 10 DKIM_VALID_AU 90695 55.36 63.30 52.25 11 XM_B_Unicode3 69683 43.34 48.64 41.26 12 LOC_TINY_FONT_1 65931 30.91 46.02 25.00 13 BAYES_50 57946 52.35 40.45 57.01 14 XM_DK_Undo_02 56735 14.32 39.60 4.43 15 XM_B_SpammyWords2 54971 25.44 38.37 20.38 16 FVGT_m_MULTI_ODD 49172 25.56 34.32 22.13 17 HTML_FONT_LOW_CONTRAST 48853 26.51 34.10 23.54 18 BAYES_99 43389 10.73 30.28 3.08 19 MIME_HTML_ONLY 43145 23.41 30.11 20.79 20 DKIM_VALID_EF 42393 27.00 29.59 25.99 21 T_KAM_HTML_FONT_INVALID 42353 21.94 29.56 18.96 22 TR_XM_DKIM_Undo 40612 9.27 28.35 1.82 23 DCC_CHECK_NEGATIVE 37512 56.00 26.18 67.66 24 XMSubLong 36806 22.85 25.69 21.74 25 BAYES_999 33101 8.21 23.10 2.38 26 TR_XM_DK_Unsub 31569 14.65 22.03 11.76 27 XM_Multi_Part_URI 30244 14.73 21.11 12.24 28 T_TM2_M_HEADER_IN_MSG 30182 26.25 21.07 28.28 29 RCVD_IN_MSPIKE_H2 29777 15.85 20.78 13.92 30 RELAYCOUNTRY_META 29419 7.95 20.53 3.03 31 TR_DCC_Bayes_99 29102 6.43 20.31 0.99 32 XM_B_Unsub 29019 11.13 20.25 7.56 33 TR_XM_BayesUnsub 27667 9.77 19.31 6.04 34 UNPARSEABLE_RELAY 24628 12.23 17.19 10.29 35 TR_XM_SpammyRelay 21453 5.28 14.97 1.48 36 TR_MAX_INTL_RELAY 20632 7.86 14.40 5.31 37 RCVD_IN_BL_SPAMCOP_NET 19143 4.26 13.36 0.70 38 LOTS_OF_MONEY 18441 9.13 12.87 7.66 39 XM_B_SpammyWords3 18264 6.75 12.75 4.40 40 BOTNET_IPINHOSTNAME 17814 12.88 12.43 13.06 41 BOTNET 16660 3.99 11.63 1.00 42 TR_XM_SpammyWords4 16222 7.42 11.32 5.89 43 RCVD_IN_MSPIKE_WL 16077 15.38 11.22 17.01 44 FSL_BULK_SIG 15761 7.00 11.00 5.44 45 TR_XM_SpammyWords2 14575 3.15 10.17 0.41 46 XM_Evil_Numbers_Gen 13653 9.22 9.53 9.09 47 MPART_ALT_DIFF 13456 8.57 9.39 8.24 48 BAYES_80 12567 4.83 8.77 3.29 49 TR_XM_UnparsRelay 12507 3.40 8.73 1.32 50 BAYES_60 12326 6.73 8.60 5.99 51 XM_B_Phish_Phrases 11833 5.41 8.26 4.30 52 DKIM_INVALID 11084 3.70 7.74 2.12 53 XMSubMetaSx_00 11002 4.69 7.68 3.52 54 UNTRUSTED_Relay 10707 3.07 7.47 1.34 55 RCVD_IN_MSPIKE_BL 10044 2.56 7.01 0.82 56 TR_XM_MSPIKECOMBO 10039 2.56 7.01 0.82 57 XM_B_PhoneNumber 9005 7.67 6.29 8.21 58 XM_UncommonTLD01 8773 4.35 6.12 3.66 59 RELAYCOUNTRY_CA 8750 2.14 6.11 0.58 60 TR_XM_NoHeaderRelay 8663 1.81 6.05 0.16 61 XM_H_GMP 8636 5.16 6.03 4.82 62 XM_Body_Dirty_Words 8573 3.13 5.98 2.01 63 HTML_IMAGE_RATIO_02 8516 4.33 5.94 3.69 64 RCVD_IN_MSPIKE_H3 7933 7.23 5.54 7.89 65 TR_XM_SPAMCOP 7910 1.70 5.52 0.21 66 LotsOfNums_01 7675 6.37 5.36 6.77 67 XM_H_Long_From01 7624 4.98 5.32 4.84 68 BAYES_95 7408 2.90 5.17 2.01 69 TR_XM_SpammyWords3 7298 1.74 5.09 0.43 70 XMSexyCombo_05 6993 2.09 4.88 1.00 71 XM_B_Investor 6938 2.43 4.84 1.48 72 TR_XM_PhishingBody 6919 2.52 4.83 1.62 73 HTML_IMAGE_RATIO_04 6814 10.70 4.76 13.02 74 RCVD_IN_MSPIKE_L3 6447 1.76 4.50 0.69 75 T_XMDrugObfuBody_08 6173 2.41 4.31 1.67 76 XM_OfRef6 6164 1.85 4.30 0.89 77 XMStrtUSub 6102 8.51 4.26 10.18 78 XMNumbers 5976 3.27 4.17 2.92 79 TR_XM_SpammyWords5 5875 2.08 4.10 1.29 80 XM_B_SpammyTLD 5856 2.90 4.09 2.44 81 TooManyTo_001 5839 6.28 4.08 7.14 82 MIME_QP_LONG_LINE 5785 4.58 4.04 4.79 83 T_XMDrugObfuBody_14 5748 2.16 4.01 1.44 84 TM2_M_VERY_LONG_WORD 5343 1.87 3.73 1.15 85 HTML_IMAGE_RATIO_06 5299 4.15 3.70 4.32 86 MIME_HTML_MOSTLY 5285 2.61 3.69 2.18 87 MIME_HTML_ONLY_MULTI 5261 5.71 3.67 6.50 88 XM_B_Unsub2 5195 1.91 3.63 1.24 89 DKIM_ADSP_NXDOMAIN 5183 1.20 3.62 0.25 90 XMDiploma_00 4810 2.06 3.36 1.55 91 XM_URI_RBL 4706 1.11 3.28 0.27 92 TR_XM_INV_DKIM 4540 0.92 3.17 0.04 93 RCVD_IN_MSPIKE_H5 4296 4.73 3.00 5.41 94 XM_UB50 4291 1.49 3.00 0.90 95 XM_SPF_SoftFail 4271 1.62 2.98 1.09 96 XM_B_URI_Unicode 4247 2.07 2.96 1.73 97 RELAYCOUNTRY_AU 4208 1.13 2.94 0.42 98 XMStockSpam_06 4194 1.61 2.93 1.09 99 XM_CamelCaseFrm001 4193 1.95 2.93 1.56 100 TR_XM_MSPIKECOMBO2 4190 0.89 2.92 0.09 101 TR_XM_INTL_Spamhaus 3955 0.89 2.76 0.16 102 MAILING_LIST_MULTI 3930 2.99 2.74 3.08 103 T_TooManySym_01 3913 4.59 2.73 5.32 104 RCVD_IN_MSPIKE_H4 3848 3.43 2.69 3.72 105 KHOP_HELO_FCRDNS 3740 1.47 2.61 1.02 106 RCVD_IN_VALIDITY_RPBL 3521 0.72 2.46 0.04 107 HTML_IMAGE_RATIO_08 3516 2.25 2.45 2.17 108 TM2_M_URI_OPT_OUT 3464 1.87 2.42 1.66 109 XM_H_DKIM_GOOG 3379 0.67 2.36 0.01 110 RCVD_IN_XBL 3342 0.67 2.33 0.02 111 RELAYCOUNTRY_NZ 3254 0.65 2.27 0.01 112 USER_IN_DEF_DKIM_WL 3195 8.90 2.23 11.51 113 XM_B_SpammyWords4 3127 0.96 2.18 0.48 114 T_XMHurry_00 3097 1.06 2.16 0.63 115 XMGenDplmaNmb 3016 1.26 2.11 0.92 116 TR_XM_MaxSPIKE 2982 0.62 2.08 0.05 117 XMBody_17 2963 0.88 2.07 0.42 118 HTML_FONT_TINY_NORDNS 2952 0.64 2.06 0.09 119 BAYES_40 2826 5.37 1.97 6.69 120 RCVD_IN_MSPIKE_L4 2797 0.63 1.95 0.11 121 BOTNET_NORDNS 2796 0.55 1.95 0.01 122 SUBJ_ALL_CAPS 2761 1.42 1.93 1.23 123 HTML_IMAGE_ONLY_20 2756 1.04 1.92 0.69 124 XMBrknScrpt_02 2705 0.98 1.89 0.62 125 FROM_EXCESS_BASE64 2676 1.51 1.87 1.37 126 SpammyFromTLD_01 2660 1.00 1.86 0.67 127 T_FILL_THIS_FORM_SHORT 2633 1.09 1.84 0.80 128 SpammyFromTLD_02 2628 0.84 1.83 0.45 129 XM_B_COPY_HTML 2510 1.00 1.75 0.70 130 XM_B_Phish66 2468 0.79 1.72 0.42 131 XMPhish30 2459 0.81 1.72 0.46 132 RCVD_IN_IADB_LISTED 2437 2.41 1.70 2.69 133 XM_DK_Undo_01 2422 1.73 1.69 1.74 134 XM_H_Long_From02 2390 0.98 1.67 0.70 135 T_XMDrugObfuBody_00 2368 1.17 1.65 0.99 136 RCVD_IN_PBL 2256 0.91 1.57 0.65 137 RCVD_IN_SBL_CSS 2238 0.47 1.56 0.04 138 XM_GoogleGroups 2168 1.33 1.51 1.26 139 TR_Symld_Words 2147 1.40 1.50 1.36 140 MPART_ALT_DIFF_COUNT 2140 0.82 1.49 0.55 141 DIET_1 2135 0.58 1.49 0.22 142 XM_UB99 2130 0.42 1.49 0.00 143 TR_Mismatch_TLD_02 2093 0.48 1.46 0.10 144 TR_LOTS_OF_MONEY3 2092 0.64 1.46 0.32 145 BAYES_20 2063 4.50 1.44 5.70 146 BOUNCE_MESSAGE 2056 4.55 1.44 5.77 147 ANY_BOUNCE_MESSAGE 2056 4.55 1.44 5.77 148 RCVD_IN_VALIDITY_SAFE 2049 3.19 1.43 3.88 149 RCVD_IN_IADB_SPF 2047 2.13 1.43 2.41 150 URI_NOVOWEL 2043 1.19 1.43 1.10 151 XM_B_SEO 2037 0.52 1.42 0.17 152 XM_OfRef7 2024 0.50 1.41 0.14 153 RDNS_DYNAMIC 2022 0.48 1.41 0.12 154 XMBdyGiftCard01 2012 1.05 1.40 0.91 155 MultiRelay_CC 2010 0.49 1.40 0.13 156 RCVD_IN_PSBL 1999 0.42 1.40 0.04 157 T_REMOTE_IMAGE 1994 2.69 1.39 3.20 158 XM_B_DNDMA 1967 0.65 1.37 0.37 159 URI_HEX 1959 1.19 1.37 1.12 160 SHORTCIRCUIT 1952 0.38 1.36 0.00 161 RCVD_IN_ZEN_LASTEXTERNAL 1952 0.38 1.36 0.00 162 URI_TRY_3LD 1950 0.73 1.36 0.48 163 TR_XM_GMP_BULK_SIG 1869 0.45 1.30 0.11 164 HTML_MIME_NO_HTML_TAG 1867 1.92 1.30 2.16 165 RCVD_IN_IADB_DK 1864 1.90 1.30 2.13 166 RCVD_IN_IADB_SENDERID 1835 1.93 1.28 2.19 167 HTML_FONT_FACE_BAD 1817 8.65 1.27 11.54 168 XM_SendGrid 1804 1.35 1.26 1.38 169 T_MONEY_PERCENT 1797 0.52 1.25 0.23 170 TR_LOTS_OF_MONEY2 1797 0.52 1.25 0.23 171 XM_UB60 1733 0.40 1.21 0.08 172 RELAYCOUNTRY_FR 1704 0.51 1.19 0.24 173 ALL_TRUSTED 1700 13.54 1.19 18.37 174 XM_H_Undi_Recip 1679 0.43 1.17 0.14 175 TM2_M_OBFU_COMMENT 1659 0.51 1.16 0.25 176 RELAYCOUNTRY_GB 1652 0.78 1.15 0.63 177 TR_XM_SEO4 1651 0.38 1.15 0.08 178 TVD_RCVD_IP 1639 0.95 1.14 0.88 179 BAYES_00 1611 10.20 1.12 13.75 180 FORGED_MUA_OUTLOOK 1610 0.33 1.12 0.02 181 XM_ProductURIs 1608 0.63 1.12 0.44 182 FSL_NEW_HELO_USER 1584 0.31 1.11 0.00 183 XMReplyNow 1580 0.43 1.10 0.17 184 FSL_CTYPE_WIN1251 1574 0.31 1.10 0.00 185 RCVD_IN_SBL 1568 0.31 1.09 0.00 186 AXB_XMAILER_MIMEOLE_OL_024C2 1539 0.30 1.07 0.00 187 RCVD_IN_IADB_VOUCHED 1539 1.49 1.07 1.65 188 RCVD_IN_SBL_DROP 1537 0.30 1.07 0.00 189 RELAYCOUNTRY_RU 1532 0.31 1.07 0.02 190 XMSubMetaI_00 1518 0.56 1.06 0.37 191 TR_XM_XBL_BULK_SIG 1514 0.30 1.06 0.00 192 TR_XM_RelayPhish 1498 0.35 1.05 0.08 193 T_Symld_Words_02 1496 0.75 1.04 0.64 194 HELO_DYNAMIC_SPLIT_IP 1482 0.30 1.03 0.01 195 RCVD_IN_VALIDITY_CERTIFIED 1473 2.71 1.03 3.37 196 XMCapTrack 1469 1.03 1.03 1.03 197 TM2_M_A_HREF_HREF 1468 0.50 1.02 0.29 198 XMBody_78 1456 0.49 1.02 0.28 199 TR_XM_InvalidRelay 1454 0.29 1.01 0.01 200 XMHTML_After_End 1454 0.52 1.01 0.33 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 320038 89.37 94.48 87.37 2 RELAYCOUNTRY_US 289702 79.64 81.05 79.09 3 XM_B_Unicode 267090 75.81 83.20 72.91 4 DCC_CHECK_NEGATIVE 247846 56.00 26.18 67.66 5 DKIM_SIGNED 239980 72.10 88.96 65.51 6 XM_DK_Pass 235442 69.27 82.04 64.27 7 DKIM_VALID 232224 68.41 81.22 63.40 8 BAYES_50 208814 52.35 40.45 57.01 9 DKIM_VALID_AU 191410 55.36 63.30 52.25 10 XM_B_SpammyWords 168254 52.05 67.67 45.93 11 XMListUnsubscribeExists 153137 48.55 65.79 41.81 12 XM_B_Unicode3 151152 43.34 48.64 41.26 13 DCC_CHECK 118232 43.56 72.41 32.28 14 T_TM2_M_HEADER_IN_MSG 103592 26.25 21.07 28.28 15 DKIM_VALID_EF 95203 27.00 29.59 25.99 16 LOC_TINY_FONT_1 91594 30.91 46.02 25.00 17 HTML_FONT_LOW_CONTRAST 86219 26.51 34.10 23.54 18 FVGT_m_MULTI_ODD 81064 25.56 34.32 22.13 19 XMSubLong 79624 22.85 25.69 21.74 20 MIME_HTML_ONLY 76151 23.41 30.11 20.79 21 XM_B_SpammyWords2 74647 25.44 38.37 20.38 22 T_KAM_HTML_FONT_INVALID 69447 21.94 29.56 18.96 23 ALL_TRUSTED 67295 13.54 1.19 18.37 24 RCVD_IN_MSPIKE_WL 62316 15.38 11.22 17.01 25 RCVD_IN_MSPIKE_H2 50984 15.85 20.78 13.92 26 BAYES_00 50350 10.20 1.12 13.75 27 BOTNET_IPINHOSTNAME 47825 12.88 12.43 13.06 28 HTML_IMAGE_RATIO_04 47694 10.70 4.76 13.02 29 XM_Multi_Part_URI 44834 14.73 21.11 12.24 30 TR_XM_DK_Unsub 43082 14.65 22.03 11.76 31 HTML_FONT_FACE_BAD 42262 8.65 1.27 11.54 32 USER_IN_DEF_DKIM_WL 42157 8.90 2.23 11.51 33 UNPARSEABLE_RELAY 37700 12.23 17.19 10.29 34 XMStrtUSub 37273 8.51 4.26 10.18 35 XM_Evil_Numbers_Gen 33308 9.22 9.53 9.09 36 MPART_ALT_DIFF 30193 8.57 9.39 8.24 37 XM_B_PhoneNumber 30069 7.67 6.29 8.21 38 RCVD_IN_MSPIKE_H3 28885 7.23 5.54 7.89 39 LOTS_OF_MONEY 28065 9.13 12.87 7.66 40 XM_B_Unsub 27688 11.13 20.25 7.56 41 TooManyTo_001 26140 6.28 4.08 7.14 42 LotsOfNums_01 24800 6.37 5.36 6.77 43 BAYES_40 24514 5.37 1.97 6.69 44 MIME_HTML_ONLY_MULTI 23828 5.71 3.67 6.50 45 TR_XM_BayesUnsub 22126 9.77 19.31 6.04 46 TR_XM_DK_Bayes 22010 4.60 0.99 6.01 47 BAYES_60 21954 6.73 8.60 5.99 48 TR_XM_DK_Bayes1 21650 4.52 0.98 5.91 49 TR_XM_SpammyWords4 21577 7.42 11.32 5.89 50 ANY_BOUNCE_MESSAGE 21151 4.55 1.44 5.77 51 BOUNCE_MESSAGE 21148 4.55 1.44 5.77 52 BAYES_20 20871 4.50 1.44 5.70 53 FSL_BULK_SIG 19924 7.00 11.00 5.44 54 RCVD_IN_MSPIKE_H5 19800 4.73 3.00 5.41 55 XM_DKIMWhitelistDomains 19672 3.87 0.05 5.37 56 T_TooManySym_01 19479 4.59 2.73 5.32 57 TR_MAX_INTL_RELAY 19433 7.86 14.40 5.31 58 TR_XM_DK_Bayes2 18697 3.86 0.68 5.10 59 XM_H_Long_From01 17730 4.98 5.32 4.84 60 XM_H_GMP 17668 5.16 6.03 4.82 61 MIME_QP_LONG_LINE 17544 4.58 4.04 4.79 62 XM_DK_Undo_02 16222 14.32 39.60 4.43 63 XM_B_SpammyWords3 16120 6.75 12.75 4.40 64 HTML_IMAGE_RATIO_06 15840 4.15 3.70 4.32 65 XM_B_Phish_Phrases 15750 5.41 8.26 4.30 66 RCVD_IN_VALIDITY_SAFE 14206 3.19 1.43 3.88 67 XMSubNoVowel 13742 2.97 0.97 3.75 68 RCVD_IN_MSPIKE_H4 13631 3.43 2.69 3.72 69 HTML_IMAGE_RATIO_02 13532 4.33 5.94 3.69 70 XM_PDF 13524 2.86 0.73 3.69 71 XM_UncommonTLD01 13398 4.35 6.12 3.66 72 XMSubMetaSx_00 12904 4.69 7.68 3.52 73 RCVD_IN_VALIDITY_CERTIFIED 12352 2.71 1.03 3.37 74 BAYES_80 12064 4.83 8.77 3.29 75 T_REMOTE_IMAGE 11708 2.69 1.39 3.20 76 BAYES_99 11300 10.73 30.28 3.08 77 MAILING_LIST_MULTI 11289 2.99 2.74 3.08 78 RELAYCOUNTRY_META 11112 7.95 20.53 3.03 79 XMNumbers 10694 3.27 4.17 2.92 80 RCVD_IN_IADB_LISTED 9848 2.41 1.70 2.69 81 T_TooManySym_02 9814 2.10 0.63 2.68 82 BAYES_05 9073 2.01 0.82 2.48 83 XM_B_SpammyTLD 8939 2.90 4.09 2.44 84 RCVD_IN_IADB_SPF 8824 2.13 1.43 2.41 85 BAYES_999 8723 8.21 23.10 2.38 86 RCVD_IN_IADB_SENDERID 8024 1.93 1.28 2.19 87 TooManyTo_002 8022 1.73 0.56 2.19 88 MIME_HTML_MOSTLY 7998 2.61 3.69 2.18 89 HTML_IMAGE_RATIO_08 7951 2.25 2.45 2.17 90 HTML_MIME_NO_HTML_TAG 7916 1.92 1.30 2.16 91 RCVD_IN_IADB_DK 7817 1.90 1.30 2.13 92 DKIM_INVALID 7756 3.70 7.74 2.12 93 BAYES_95 7365 2.90 5.17 2.01 94 XM_Body_Dirty_Words 7353 3.13 5.98 2.01 95 INVALID_MSGID 7049 1.49 0.38 1.92 96 TR_XM_DKIM_Undo 6650 9.27 28.35 1.82 97 TO_MALFORMED 6518 1.28 0.01 1.78 98 XMSubLongNoVowel 6474 1.50 0.81 1.77 99 XM_DK_Undo_01 6385 1.73 1.69 1.74 100 MSGID_NOFQDN1 6377 1.29 0.14 1.74 101 XMSubGarbage 6355 1.43 0.65 1.73 102 XM_B_URI_Unicode 6325 2.07 2.96 1.73 103 T_XMDrugObfuBody_08 6103 2.41 4.31 1.67 104 TM2_M_URI_OPT_OUT 6069 1.87 2.42 1.66 105 RCVD_IN_IADB_VOUCHED 6035 1.49 1.07 1.65 106 TR_XM_PhishingBody 5932 2.52 4.83 1.62 107 XM_CamelCaseFrm001 5726 1.95 2.93 1.56 108 XMDiploma_00 5695 2.06 3.36 1.55 109 TR_XM_SpammyRelay 5435 5.28 14.97 1.48 110 XM_B_Investor 5431 2.43 4.84 1.48 111 T_XMDrugObfuBody_14 5262 2.16 4.01 1.44 112 TooManyTo_003 5184 1.15 0.47 1.42 113 XM_SendGrid 5063 1.35 1.26 1.38 114 FROM_EXCESS_BASE64 5033 1.51 1.87 1.37 115 TR_Symld_Words 4987 1.40 1.50 1.36 116 UNTRUSTED_Relay 4913 3.07 7.47 1.34 117 TR_XM_UnparsRelay 4831 3.40 8.73 1.32 118 TR_XM_SpammyWords5 4739 2.08 4.10 1.29 119 XM_GoogleGroups 4602 1.33 1.51 1.26 120 XM_B_Unsub2 4548 1.91 3.63 1.24 121 SUBJ_ALL_CAPS 4499 1.42 1.93 1.23 122 HELO_NODOT 4212 0.86 0.13 1.15 123 HELO_NO_DOMAIN 4206 0.86 0.12 1.15 124 TM2_M_VERY_LONG_WORD 4205 1.87 3.73 1.15 125 RCVD_IN_IADB_OPTIN 4163 1.04 0.78 1.14 126 URI_HEX 4094 1.19 1.37 1.12 127 URI_NOVOWEL 4029 1.19 1.43 1.10 128 XMStockSpam_06 4011 1.61 2.93 1.09 129 XM_SPF_SoftFail 4008 1.62 2.98 1.09 130 T_TooManySym_03 3956 0.84 0.22 1.08 131 TooManyTo_004 3934 0.88 0.39 1.07 132 IN_HORDE_ADDRESS_BOOK 3857 0.78 0.07 1.05 133 XMCapTrack 3772 1.03 1.03 1.03 134 KHOP_HELO_FCRDNS 3752 1.47 2.61 1.02 135 BOTNET 3670 3.99 11.63 1.00 136 XMSexyCombo_05 3665 2.09 4.88 1.00 137 TR_DCC_Bayes_99 3644 6.43 20.31 0.99 138 T_XMDrugObfuBody_00 3615 1.17 1.65 0.99 139 XMGappySubj_01 3531 0.79 0.34 0.96 140 TR_MetaPhish_Combo_01 3496 0.95 0.94 0.95 141 XM_ShortIntro_01 3389 0.82 0.57 0.93 142 XMGenDplmaNmb 3381 1.26 2.11 0.92 143 TR_XM_DK_SendGrid 3351 0.85 0.69 0.91 144 XMBdyGiftCard01 3342 1.05 1.40 0.91 145 XM_UB50 3286 1.49 3.00 0.90 146 XM_OfRef6 3250 1.85 4.30 0.89 147 XM_E_Blogspot 3228 0.65 0.06 0.88 148 TVD_RCVD_IP 3221 0.95 1.14 0.88 149 TooManyTo_005 3166 0.72 0.35 0.86 150 RCVD_IN_MSPIKE_BL 3013 2.56 7.01 0.82 151 TR_XM_MSPIKECOMBO 3013 2.56 7.01 0.82 152 T_FILL_THIS_FORM_SHORT 2938 1.09 1.84 0.80 153 TVD_SPACE_RATIO 2887 0.65 0.30 0.79 154 FROM_GOV_DKIM_AU 2647 0.67 0.55 0.72 155 XM_H_Long_From02 2582 0.98 1.67 0.70 156 XM_B_COPY_HTML 2580 1.00 1.75 0.70 157 XM_H_PHPMailer 2573 0.63 0.44 0.70 158 RCVD_IN_BL_SPAMCOP_NET 2551 4.26 13.36 0.70 159 HTML_IMAGE_ONLY_20 2545 1.04 1.92 0.69 160 RCVD_IN_MSPIKE_L3 2537 1.76 4.50 0.69 161 SpammyFromTLD_01 2448 1.00 1.86 0.67 162 LOW_PRICE 2433 0.66 0.64 0.66 163 TO_NO_BRKTS_HTML_ONLY 2406 0.51 0.13 0.66 164 RCVD_IN_PBL 2393 0.91 1.57 0.65 165 T_Symld_Words_02 2337 0.75 1.04 0.64 166 RELAYCOUNTRY_GB 2322 0.78 1.15 0.63 167 T_XMHurry_00 2311 1.06 2.16 0.63 168 XMBrknScrpt_02 2274 0.98 1.89 0.62 169 DKIM_ADSP_CUSTOM_MED 2216 0.72 1.00 0.60 170 RELAYCOUNTRY_CA 2132 2.14 6.11 0.58 171 XMSubMetaSxObfu_03 2077 0.60 0.69 0.57 172 XMBSHREFv2 2062 0.51 0.38 0.56 173 HTTPS_HTTP_MISMATCH 2047 0.69 1.01 0.56 174 TRACKER_ID 2038 0.45 0.19 0.56 175 MPART_ALT_DIFF_COUNT 2025 0.82 1.49 0.55 176 XMNoVowels 1955 0.55 0.58 0.53 177 HTML_TAG_BALANCE_BODY 1890 0.58 0.75 0.52 178 XMLngstWrd_00 1844 0.52 0.56 0.50 179 LongTLD 1838 0.48 0.43 0.50 180 XM_B_SpammyWords4 1763 0.96 2.18 0.48 181 URI_TRY_3LD 1762 0.73 1.36 0.48 182 TR_XM_Base64_M1 1755 0.58 0.85 0.48 183 XMGappySubj_02 1753 0.36 0.04 0.48 184 T_OBFU_PDF_ATTACH 1719 0.37 0.13 0.47 185 XMPhish30 1688 0.81 1.72 0.46 186 XMLngstWrd_01 1652 0.47 0.51 0.45 187 SpammyFromTLD_02 1651 0.84 1.83 0.45 188 XM_ProductURIs 1617 0.63 1.12 0.44 189 XMPhish14 1603 0.56 0.86 0.44 190 T_TVD_MIME_NO_HEADERS 1579 0.32 0.05 0.43 191 TR_XM_SpammyWords3 1578 1.74 5.09 0.43 192 HTML_IMAGE_ONLY_32 1569 0.51 0.73 0.43 193 XM_B_Phish66 1546 0.79 1.72 0.42 194 XMBody_17 1539 0.88 2.07 0.42 195 RELAYCOUNTRY_AU 1537 1.13 2.94 0.42 196 MSGID_FROM_MTA_HEADER 1500 0.38 0.30 0.41 197 MISSING_HEADERS 1500 0.49 0.71 0.41 198 TR_XM_SpammyWords2 1489 3.15 10.17 0.41 199 NML_ADSP_CUSTOM_MED 1428 0.52 0.85 0.39 200 XM_B_DNDMA 1354 0.65 1.37 0.37 ----------------------------------------------------------------------