Email: 458062 Autolearn: 0 AvgScore: 5.34 AvgScanTime: 1.37 sec Spam: 155391 Autolearn: 0 AvgScore: 13.54 AvgScanTime: 1.42 sec Ham: 302671 Autolearn: 0 AvgScore: 1.12 AvgScanTime: 1.34 sec Time Spent Running SA: 174.31 hours Time Spent Processing Spam: 61.36 hours Time Spent Processing Ham: 112.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149338 90.84 96.10 88.13 2 XM_B_Unicode 136125 76.99 87.60 71.54 3 DKIM_SIGNED 119834 74.41 77.12 73.02 4 XM_DK_Pass 114432 72.47 73.64 71.86 5 DKIM_VALID 113537 71.69 73.07 70.99 6 RELAYCOUNTRY_US 108937 79.18 70.11 83.84 7 DCC_CHECK 96492 44.49 62.10 35.45 8 XM_B_SpammyWords 92299 52.17 59.40 48.45 9 XMListUnsubscribeExists 91471 51.05 58.87 47.05 10 XM_B_Unicode3 89434 47.80 57.55 42.80 11 DKIM_VALID_AU 87670 57.90 56.42 58.66 12 LOC_TINY_FONT_1 87129 39.54 56.07 31.06 13 BAYES_50 73848 57.14 47.52 62.07 14 T_KAM_HTML_FONT_INVALID 63090 27.82 40.60 21.25 15 MIME_HTML_ONLY 60326 26.05 38.82 19.49 16 XM_DK_Undo_02 58542 16.46 37.67 5.57 17 DCC_CHECK_NEGATIVE 57291 55.11 36.87 64.48 18 XM_B_SpammyWords2 50270 24.62 32.35 20.66 19 HTML_FONT_LOW_CONTRAST 47837 31.12 30.78 31.29 20 FVGT_m_MULTI_ODD 44884 25.99 28.88 24.50 21 DKIM_VALID_EF 43786 29.02 28.18 29.46 22 TR_XM_DKIM_Undo 42579 10.93 27.40 2.48 23 BAYES_99 42360 11.84 27.26 3.92 24 XMSubLong 33747 22.15 21.72 22.37 25 BAYES_999 32363 9.07 20.83 3.04 26 TR_XM_DK_Unsub 31680 15.78 20.39 13.42 27 XM_Multi_Part_URI 31018 15.88 19.96 13.79 28 HTML_IMAGE_RATIO_02 30693 9.97 19.75 4.95 29 TR_DCC_Bayes_99 29268 7.49 18.84 1.66 30 RCVD_IN_MSPIKE_H2 28180 15.36 18.13 13.94 31 T_TM2_M_HEADER_IN_MSG 27522 28.19 17.71 33.58 32 UNPARSEABLE_RELAY 25959 13.26 16.71 11.50 33 XM_B_Unsub 24566 11.48 15.81 9.26 34 ALL_TRUSTED 24504 14.12 15.77 13.28 35 TR_XM_BayesUnsub 23557 9.87 15.16 7.16 36 URI_WP_DIRINDEX 23249 5.08 14.96 0.01 37 URI_WP_HACKED_2 23188 5.07 14.92 0.01 38 TO_NO_BRKTS_HTML_IMG 23141 5.06 14.89 0.02 39 RELAYCOUNTRY_META 22584 7.08 14.53 3.26 40 TR_MAX_INTL_RELAY 21030 8.44 13.53 5.82 41 RCVD_IN_BL_SPAMCOP_NET 20300 4.94 13.06 0.77 42 XM_B_SpammyWords3 18303 8.25 11.78 6.44 43 TR_XM_SpammyRelay 16529 4.73 10.64 1.70 44 LOTS_OF_MONEY 16267 8.25 10.47 7.11 45 BOTNET_IPINHOSTNAME 15277 5.64 9.83 3.49 46 RCVD_IN_MSPIKE_WL 14929 15.45 9.61 18.44 47 TR_XM_SpammyWords4 14518 6.03 9.34 4.32 48 TR_XM_SpammyWords2 14151 3.52 9.11 0.64 49 BAYES_80 13275 5.27 8.54 3.59 50 BOTNET 13095 3.71 8.43 1.29 51 TR_XM_UnparsRelay 12895 3.79 8.30 1.47 52 XM_B_Phish_Phrases 12649 7.85 8.14 7.70 53 XM_Evil_Numbers_Gen 12460 11.10 8.02 12.69 54 FSL_BULK_SIG 11982 5.63 7.71 4.56 55 BAYES_60 10920 6.77 7.03 6.64 56 TR_XM_SPAMCOP 10618 2.51 6.83 0.28 57 RCVD_IN_MSPIKE_BL 9674 2.74 6.23 0.95 58 TR_XM_MSPIKECOMBO 9646 2.73 6.21 0.94 59 XM_H_GMP 9243 5.58 5.95 5.39 60 XMSubMetaSx_00 9186 4.26 5.91 3.41 61 UNTRUSTED_Relay 8711 2.89 5.61 1.49 62 RELAYCOUNTRY_CA 8301 2.24 5.34 0.65 63 XM_B_PhoneNumber 8152 7.67 5.25 8.92 64 XM_Body_Dirty_Words 7889 3.39 5.08 2.52 65 MPART_ALT_DIFF 7870 4.89 5.06 4.80 66 LotsOfNums_01 7478 6.92 4.81 8.00 67 RCVD_IN_MSPIKE_H3 7423 7.24 4.78 8.51 68 BAYES_95 7240 3.05 4.66 2.23 69 TR_XM_SpammyWords3 7167 1.90 4.61 0.50 70 XM_UncommonTLD01 7121 4.09 4.58 3.83 71 XM_H_Long_From01 6942 4.96 4.47 5.21 72 TR_XM_SpammyWords5 6480 2.32 4.17 1.37 73 DKIM_INVALID 6297 2.72 4.05 2.03 74 T_XMDrugObfuBody_14 6111 2.39 3.93 1.60 75 XM_CamelCaseFrm001 6033 2.64 3.88 2.00 76 XM_B_Investor 6011 2.35 3.87 1.57 77 HTML_IMAGE_RATIO_04 5917 4.80 3.81 5.31 78 RCVD_IN_MSPIKE_L3 5897 1.82 3.79 0.81 79 TooManyTo_001 5843 6.05 3.76 7.23 80 XM_OfRef6 5707 1.74 3.67 0.74 81 XM_B_SpammyTLD 5562 2.97 3.58 2.66 82 T_XMDrugObfuBody_08 5513 2.40 3.55 1.80 83 XMStrtUSub 5227 4.22 3.36 4.65 84 XM_B_Unsub2 5191 1.94 3.34 1.23 85 XMSexyCombo_05 5090 1.72 3.28 0.92 86 TM2_M_VERY_LONG_WORD 4953 6.91 3.19 8.83 87 TR_XM_PhishingBody 4851 2.08 3.12 1.54 88 MIME_HTML_MOSTLY 4849 2.69 3.12 2.46 89 TR_XM_NoHeaderRelay 4705 1.14 3.03 0.17 90 XM_SPF_SoftFail 4678 1.80 3.01 1.18 91 XMNumbers 4669 3.27 3.00 3.41 92 HTML_IMAGE_RATIO_06 4614 3.32 2.97 3.50 93 SUBJ_ALL_CAPS 4313 1.91 2.78 1.46 94 MIME_QP_LONG_LINE 4157 4.26 2.68 5.08 95 RCVD_IN_VALIDITY_RPBL 4041 0.92 2.60 0.06 96 MIME_HTML_ONLY_MULTI 3902 2.54 2.51 2.55 97 RELAYCOUNTRY_AU 3878 1.26 2.50 0.63 98 XMDiploma_00 3862 1.86 2.49 1.54 99 XM_B_URI_Unicode 3834 2.06 2.47 1.85 100 XM_URI_RBL 3801 1.00 2.45 0.25 101 T_TooManySym_01 3771 4.63 2.43 5.76 102 RCVD_IN_MSPIKE_H5 3770 4.78 2.43 5.98 103 RCVD_IN_MSPIKE_H4 3736 3.43 2.40 3.96 104 TR_XM_MSPIKECOMBO2 3726 0.87 2.40 0.09 105 XM_SendGrid 3658 1.83 2.35 1.56 106 MAILING_LIST_MULTI 3576 2.70 2.30 2.91 107 XM_UB50 3543 1.39 2.28 0.93 108 TR_XM_INV_DKIM 3298 0.75 2.12 0.04 109 HTML_IMAGE_RATIO_08 3261 2.62 2.10 2.88 110 T_XMHurry_00 3198 1.06 2.06 0.55 111 URI_TRY_3LD 3177 1.00 2.04 0.47 112 T_FILL_THIS_FORM_SHORT 3154 1.24 2.03 0.84 113 XM_B_SpammyWords4 3113 1.12 2.00 0.66 114 RCVD_IN_MSPIKE_L4 3112 0.76 2.00 0.12 115 XMStockSpam_06 3075 1.55 1.98 1.33 116 TM2_M_URI_OPT_OUT 3037 2.07 1.95 2.13 117 TR_XM_MaxSPIKE 2962 0.68 1.91 0.05 118 XMBody_17 2930 1.04 1.89 0.61 119 T_REMOTE_IMAGE 2836 2.83 1.83 3.35 120 RCVD_IN_PSBL 2760 0.62 1.78 0.03 121 DKIM_ADSP_CUSTOM_MED 2671 1.18 1.72 0.91 122 XMGenDplmaNmb 2488 1.14 1.60 0.91 123 NML_ADSP_CUSTOM_MED 2487 0.96 1.60 0.63 124 USER_IN_DEF_DKIM_WL 2477 9.52 1.59 13.59 125 TR_XM_INTL_Spamhaus 2467 0.66 1.59 0.18 126 RCVD_IN_IADB_LISTED 2448 2.71 1.58 3.30 127 FROM_EXCESS_BASE64 2396 1.54 1.54 1.53 128 HK_RANDOM_REPLYTO 2395 0.57 1.54 0.07 129 FORGED_GMAIL_RCVD 2377 0.94 1.53 0.64 130 SpammyFromTLD_01 2328 0.92 1.50 0.62 131 TR_Mismatch_TLD_01 2311 0.69 1.49 0.29 132 SpammyFromTLD_02 2277 0.84 1.47 0.52 133 T_XMDrugObfuBody_00 2191 1.10 1.41 0.94 134 RCVD_IN_VALIDITY_SAFE 2183 3.26 1.40 4.21 135 XM_B_DNDMA 2128 0.83 1.37 0.55 136 XMPhish30 2122 0.81 1.37 0.53 137 XM_B_SEO 2104 0.56 1.35 0.16 138 BAYES_40 2101 4.19 1.35 5.64 139 XM_ProductURIs 2083 0.76 1.34 0.47 140 KHOP_HELO_FCRDNS 2055 3.87 1.32 5.18 141 XMBrknScrpt_02 2012 1.13 1.29 1.04 142 RCVD_IN_IADB_SPF 2005 2.38 1.29 2.94 143 URI_HEX 1990 1.15 1.28 1.08 144 XMBody_78 1967 0.67 1.27 0.37 145 URI_NOVOWEL 1925 1.12 1.24 1.07 146 BOUNCE_MESSAGE 1924 7.66 1.24 10.95 147 ANY_BOUNCE_MESSAGE 1924 7.66 1.24 10.96 148 XM_DK_Undo_01 1917 1.41 1.23 1.50 149 TR_LOTS_OF_MONEY3 1908 0.63 1.23 0.32 150 HTML_MIME_NO_HTML_TAG 1899 2.04 1.22 2.47 151 RCVD_IN_XBL 1892 0.42 1.22 0.02 152 RCVD_IN_SBL_CSS 1884 0.43 1.21 0.03 153 HTML_FONT_TINY_NORDNS 1862 0.44 1.20 0.05 154 DIET_1 1813 0.56 1.17 0.25 155 BAYES_20 1809 3.04 1.16 4.00 156 RCVD_IN_IADB_DK 1802 2.08 1.16 2.55 157 XM_GoogleGroups 1786 1.28 1.15 1.35 158 MultiRelay_CC 1776 0.48 1.14 0.14 159 PDS_OTHER_BAD_TLD 1774 0.47 1.14 0.12 160 TR_XM_SEO4 1757 0.45 1.13 0.10 161 XM_H_Long_From02 1751 0.89 1.13 0.76 162 RCVD_IN_IADB_SENDERID 1744 2.13 1.12 2.65 163 RDNS_DYNAMIC 1721 0.48 1.11 0.15 164 XM_UB99 1715 0.37 1.10 0.00 165 RCVD_IN_PBL 1712 0.80 1.10 0.64 166 TR_XM_GMP_BULK_SIG 1666 0.44 1.07 0.12 167 MPART_ALT_DIFF_COUNT 1665 0.80 1.07 0.66 168 RCVD_IN_IADB_VOUCHED 1612 1.72 1.04 2.07 169 RCVD_IN_VALIDITY_CERTIFIED 1593 2.69 1.03 3.54 170 XM_B_COPY_HTML 1588 0.90 1.02 0.84 171 RELAYCOUNTRY_FR 1563 0.53 1.01 0.29 172 DKIM_ADSP_NXDOMAIN 1561 0.54 1.00 0.30 173 TR_MetaPhish_Combo_01 1547 0.77 1.00 0.65 174 SHORTCIRCUIT 1544 0.34 0.99 0.00 175 RCVD_IN_ZEN_LASTEXTERNAL 1544 0.34 0.99 0.00 176 STY_INVIS_DIRECT 1481 0.50 0.95 0.27 177 XMSubMetaI_00 1479 0.75 0.95 0.65 178 SHOPIFY_IMG_NOT_RCVD_SFY 1471 0.47 0.95 0.22 179 BODY_URI_ONLY 1469 0.33 0.95 0.01 180 XMClaimOffer 1464 0.44 0.94 0.18 181 XM_OfRef7 1459 0.41 0.94 0.14 182 HTML_IMAGE_ONLY_16 1453 0.79 0.94 0.72 183 HTML_IMAGE_ONLY_20 1450 0.71 0.93 0.60 184 HTML_FONT_SIZE_LARGE 1446 0.36 0.93 0.07 185 XM_B_Phish66 1415 0.54 0.91 0.35 186 TVD_RCVD_IP 1406 0.97 0.90 1.01 187 T_Symld_Words_02 1402 0.66 0.90 0.54 188 TR_XM_DK_SendGrid 1391 0.92 0.90 0.94 189 BOTNET_NORDNS 1376 0.31 0.89 0.01 190 XM_DIRTYINTL 1333 0.33 0.86 0.06 191 TR_XM_PHPForged 1329 0.44 0.86 0.23 192 TR_XM_PHPDW 1327 0.45 0.85 0.24 193 TR_LOTS_OF_MONEY2 1322 0.47 0.85 0.27 194 T_MONEY_PERCENT 1322 0.47 0.85 0.27 195 HTTPS_HTTP_MISMATCH 1321 0.62 0.85 0.51 196 XM_HighProb1 1320 0.29 0.85 0.00 197 TM2_M_A_HREF_HREF 1311 0.48 0.84 0.29 198 TR_XM_FormFill2 1305 0.44 0.84 0.23 199 HTML_SHORT_LINK_IMG_2 1305 0.31 0.84 0.03 200 UPPERCASE_75_100 1288 0.33 0.83 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 266745 90.84 96.10 88.13 2 RELAYCOUNTRY_US 253758 79.18 70.11 83.84 3 DKIM_SIGNED 221012 74.41 77.12 73.02 4 XM_DK_Pass 217514 72.47 73.64 71.86 5 XM_B_Unicode 216534 76.99 87.60 71.54 6 DKIM_VALID 214856 71.69 73.07 70.99 7 DCC_CHECK_NEGATIVE 195156 55.11 36.87 64.48 8 BAYES_50 187875 57.14 47.52 62.07 9 DKIM_VALID_AU 177535 57.90 56.42 58.66 10 XM_B_SpammyWords 146653 52.17 59.40 48.45 11 XMListUnsubscribeExists 142392 51.05 58.87 47.05 12 XM_B_Unicode3 129533 47.80 57.55 42.80 13 DCC_CHECK 107297 44.49 62.10 35.45 14 T_TM2_M_HEADER_IN_MSG 101628 28.19 17.71 33.58 15 HTML_FONT_LOW_CONTRAST 94695 31.12 30.78 31.29 16 LOC_TINY_FONT_1 93999 39.54 56.07 31.06 17 DKIM_VALID_EF 89155 29.02 28.18 29.46 18 FVGT_m_MULTI_ODD 74148 25.99 28.88 24.50 19 XMSubLong 67716 22.15 21.72 22.37 20 T_KAM_HTML_FONT_INVALID 64326 27.82 40.60 21.25 21 XM_B_SpammyWords2 62526 24.62 32.35 20.66 22 MIME_HTML_ONLY 58992 26.05 38.82 19.49 23 RCVD_IN_MSPIKE_WL 55827 15.45 9.61 18.44 24 RCVD_IN_MSPIKE_H2 42188 15.36 18.13 13.94 25 XM_Multi_Part_URI 41737 15.88 19.96 13.79 26 USER_IN_DEF_DKIM_WL 41130 9.52 1.59 13.59 27 TR_XM_DK_Unsub 40619 15.78 20.39 13.42 28 ALL_TRUSTED 40181 14.12 15.77 13.28 29 XM_Evil_Numbers_Gen 38397 11.10 8.02 12.69 30 UNPARSEABLE_RELAY 34801 13.26 16.71 11.50 31 ANY_BOUNCE_MESSAGE 33162 7.66 1.24 10.96 32 BOUNCE_MESSAGE 33155 7.66 1.24 10.95 33 BAYES_00 28898 6.57 0.77 9.55 34 XM_B_Unsub 28025 11.48 15.81 9.26 35 XM_B_PhoneNumber 26995 7.67 5.25 8.92 36 TM2_M_VERY_LONG_WORD 26720 6.91 3.19 8.83 37 RCVD_IN_MSPIKE_H3 25744 7.24 4.78 8.51 38 LotsOfNums_01 24220 6.92 4.81 8.00 39 XM_B_Phish_Phrases 23297 7.85 8.14 7.70 40 TooManyTo_001 21890 6.05 3.76 7.23 41 TR_XM_BayesUnsub 21670 9.87 15.16 7.16 42 LOTS_OF_MONEY 21505 8.25 10.47 7.11 43 TR_XM_DK_Bayes 21162 4.84 0.66 6.99 44 TR_XM_DK_Bayes1 20933 4.79 0.66 6.92 45 BAYES_60 20102 6.77 7.03 6.64 46 XM_DKIMWhitelistDomains 19800 4.34 0.04 6.54 47 XM_B_SpammyWords3 19496 8.25 11.78 6.44 48 RCVD_IN_MSPIKE_H5 18104 4.78 2.43 5.98 49 TR_XM_DK_Bayes2 18037 4.12 0.53 5.96 50 TR_MAX_INTL_RELAY 17612 8.44 13.53 5.82 51 T_TooManySym_01 17421 4.63 2.43 5.76 52 BAYES_40 17078 4.19 1.35 5.64 53 XM_DK_Undo_02 16858 16.46 37.67 5.57 54 XM_H_GMP 16306 5.58 5.95 5.39 55 HTML_IMAGE_RATIO_04 16080 4.80 3.81 5.31 56 XM_H_Long_From01 15777 4.96 4.47 5.21 57 KHOP_HELO_FCRDNS 15680 3.87 1.32 5.18 58 MIME_QP_LONG_LINE 15367 4.26 2.68 5.08 59 HTML_IMAGE_RATIO_02 14976 9.97 19.75 4.95 60 MPART_ALT_DIFF 14541 4.89 5.06 4.80 61 XMStrtUSub 14087 4.22 3.36 4.65 62 FSL_BULK_SIG 13815 5.63 7.71 4.56 63 TR_XM_SpammyWords4 13084 6.03 9.34 4.32 64 RCVD_IN_VALIDITY_SAFE 12743 3.26 1.40 4.21 65 XM_PDF 12331 2.88 0.57 4.07 66 BAYES_20 12105 3.04 1.16 4.00 67 RCVD_IN_MSPIKE_H4 11979 3.43 2.40 3.96 68 BAYES_99 11869 11.84 27.26 3.92 69 XM_UncommonTLD01 11601 4.09 4.58 3.83 70 BAYES_80 10869 5.27 8.54 3.59 71 RCVD_IN_VALIDITY_CERTIFIED 10715 2.69 1.03 3.54 72 HTML_IMAGE_RATIO_06 10586 3.32 2.97 3.50 73 BOTNET_IPINHOSTNAME 10576 5.64 9.83 3.49 74 XMSubMetaSx_00 10330 4.26 5.91 3.41 75 XMNumbers 10322 3.27 3.00 3.41 76 T_REMOTE_IMAGE 10146 2.83 1.83 3.35 77 RCVD_IN_IADB_LISTED 9987 2.71 1.58 3.30 78 RELAYCOUNTRY_META 9856 7.08 14.53 3.26 79 BAYES_999 9193 9.07 20.83 3.04 80 T_TooManySym_02 9166 2.17 0.50 3.03 81 RCVD_IN_IADB_SPF 8887 2.38 1.29 2.94 82 MAILING_LIST_MULTI 8809 2.70 2.30 2.91 83 HTML_IMAGE_RATIO_08 8722 2.62 2.10 2.88 84 XM_B_SpammyTLD 8045 2.97 3.58 2.66 85 RCVD_IN_IADB_SENDERID 8017 2.13 1.12 2.65 86 MIME_HTML_ONLY_MULTI 7721 2.54 2.51 2.55 87 RCVD_IN_IADB_DK 7716 2.08 1.16 2.55 88 XM_Body_Dirty_Words 7625 3.39 5.08 2.52 89 TR_XM_DKIM_Undo 7495 10.93 27.40 2.48 90 HTML_MIME_NO_HTML_TAG 7465 2.04 1.22 2.47 91 MIME_HTML_MOSTLY 7457 2.69 3.12 2.46 92 BAYES_05 7132 1.80 0.71 2.36 93 INVALID_MSGID 7057 1.62 0.24 2.33 94 MIME_CHARSET_FARAWAY 6934 1.62 0.31 2.29 95 TooManyTo_002 6908 1.70 0.56 2.28 96 BAYES_95 6742 3.05 4.66 2.23 97 CHARSET_FARAWAY_HEADER 6645 1.50 0.15 2.20 98 TO_MALFORMED 6458 1.42 0.02 2.13 99 TM2_M_URI_OPT_OUT 6445 2.07 1.95 2.13 100 MSGID_NOFQDN1 6289 1.38 0.02 2.08 101 RCVD_IN_IADB_VOUCHED 6277 1.72 1.04 2.07 102 DKIM_INVALID 6156 2.72 4.05 2.03 103 XM_CamelCaseFrm001 6050 2.64 3.88 2.00 104 XM_B_URI_Unicode 5611 2.06 2.47 1.85 105 T_XMDrugObfuBody_08 5463 2.40 3.55 1.80 106 TR_XM_SpammyRelay 5141 4.73 10.64 1.70 107 TR_DCC_Bayes_99 5020 7.49 18.84 1.66 108 T_XMDrugObfuBody_14 4829 2.39 3.93 1.60 109 TR_Symld_Words 4788 1.32 0.80 1.58 110 XM_B_Investor 4754 2.35 3.87 1.57 111 XM_SendGrid 4729 1.83 2.35 1.56 112 XMDiploma_00 4662 1.86 2.49 1.54 113 TR_XM_PhishingBody 4659 2.08 3.12 1.54 114 FROM_EXCESS_BASE64 4637 1.54 1.54 1.53 115 XM_DK_Undo_01 4540 1.41 1.23 1.50 116 UNTRUSTED_Relay 4522 2.89 5.61 1.49 117 RCVD_IN_IADB_OPTIN 4469 1.22 0.71 1.48 118 TR_XM_UnparsRelay 4461 3.79 8.30 1.47 119 SUBJ_ALL_CAPS 4424 1.91 2.78 1.46 120 TooManyTo_003 4372 1.11 0.47 1.44 121 TR_XM_SpammyWords5 4157 2.32 4.17 1.37 122 XM_GoogleGroups 4100 1.28 1.15 1.35 123 XMStockSpam_06 4036 1.55 1.98 1.33 124 IN_HORDE_ADDRESS_BOOK 3982 0.93 0.18 1.32 125 BOTNET 3915 3.71 8.43 1.29 126 XM_B_Unsub2 3713 1.94 3.34 1.23 127 T_TooManySym_03 3647 0.85 0.16 1.20 128 XM_SPF_SoftFail 3568 1.80 3.01 1.18 129 XMGappySubj_01 3508 0.82 0.17 1.16 130 TooManyTo_004 3311 0.85 0.39 1.09 131 URI_HEX 3259 1.15 1.28 1.08 132 URI_NOVOWEL 3226 1.12 1.24 1.07 133 XMBrknScrpt_02 3153 1.13 1.29 1.04 134 XM_ShortIntro_01 3092 0.94 0.79 1.02 135 XMBody_95 3076 0.72 0.14 1.02 136 TVD_RCVD_IP 3049 0.97 0.90 1.01 137 RCVD_IN_MSPIKE_BL 2868 2.74 6.23 0.95 138 T_XMDrugObfuBody_00 2850 1.10 1.41 0.94 139 TR_XM_MSPIKECOMBO 2838 2.73 6.21 0.94 140 TR_XM_DK_SendGrid 2834 0.92 0.90 0.94 141 HELO_NODOT 2828 0.66 0.11 0.93 142 XM_UB50 2822 1.39 2.28 0.93 143 HELO_NO_DOMAIN 2817 0.64 0.09 0.93 144 XMSexyCombo_05 2795 1.72 3.28 0.92 145 TVD_SPACE_RATIO 2792 0.69 0.23 0.92 146 DKIM_ADSP_CUSTOM_MED 2751 1.18 1.72 0.91 147 XMGenDplmaNmb 2748 1.14 1.60 0.91 148 T_TVD_MIME_NO_HEADERS 2676 0.60 0.04 0.88 149 TooManyTo_005 2655 0.70 0.36 0.88 150 XMCapTrack 2604 0.83 0.76 0.86 151 XM_B_COPY_HTML 2555 0.90 1.02 0.84 152 T_FILL_THIS_FORM_SHORT 2537 1.24 2.03 0.84 153 HTML_IMAGE_ONLY_32 2469 0.58 0.11 0.82 154 RCVD_IN_MSPIKE_L3 2442 1.82 3.79 0.81 155 XM_H_PHPMailer 2434 0.64 0.32 0.80 156 RCVD_IN_BL_SPAMCOP_NET 2342 4.94 13.06 0.77 157 FROM_GOV_DKIM_AU 2313 0.63 0.35 0.76 158 XM_H_Long_From02 2312 0.89 1.13 0.76 159 XM_OfRef6 2242 1.74 3.67 0.74 160 HTML_IMAGE_ONLY_16 2182 0.79 0.94 0.72 161 XMBSHREFv2 2106 0.59 0.39 0.70 162 XM_B_SpammyWords4 2006 1.12 2.00 0.66 163 MPART_ALT_DIFF_COUNT 2003 0.80 1.07 0.66 164 TR_MetaPhish_Combo_01 1977 0.77 1.00 0.65 165 RELAYCOUNTRY_CA 1971 2.24 5.34 0.65 166 XMSubMetaI_00 1963 0.75 0.95 0.65 167 TR_XM_SpammyWords2 1950 3.52 9.11 0.64 168 RCVD_IN_PBL 1935 0.80 1.10 0.64 169 FORGED_GMAIL_RCVD 1932 0.94 1.53 0.64 170 NML_ADSP_CUSTOM_MED 1920 0.96 1.60 0.63 171 XMLngstWrd_00 1916 0.57 0.44 0.63 172 RELAYCOUNTRY_AU 1915 1.26 2.50 0.63 173 XMBdyGiftCard01 1910 0.65 0.70 0.63 174 SpammyFromTLD_01 1867 0.92 1.50 0.62 175 T_OBFU_PDF_ATTACH 1839 0.44 0.11 0.61 176 XMBody_17 1834 1.04 1.89 0.61 177 HTML_IMAGE_ONLY_20 1825 0.71 0.93 0.60 178 XMGappySubj_02 1704 0.39 0.05 0.56 179 RELAYCOUNTRY_GB 1674 0.59 0.66 0.55 180 TO_NO_BRKTS_HTML_ONLY 1667 0.40 0.11 0.55 181 XM_B_DNDMA 1667 0.83 1.37 0.55 182 T_XMHurry_00 1660 1.06 2.06 0.55 183 T_Symld_Words_02 1625 0.66 0.90 0.54 184 XMPhish30 1590 0.81 1.37 0.53 185 TR_XM_Base64_M1 1579 0.57 0.67 0.52 186 SpammyFromTLD_02 1567 0.84 1.47 0.52 187 XMNoVowels 1545 0.46 0.35 0.51 188 HTTPS_HTTP_MISMATCH 1538 0.62 0.85 0.51 189 HTML_IMAGE_ONLY_12 1534 0.36 0.08 0.51 190 MSGID_FROM_MTA_HEADER 1525 0.42 0.27 0.50 191 XMSlimDrugH 1525 0.61 0.82 0.50 192 TR_XM_SpammyWords3 1519 1.90 4.61 0.50 193 LOW_PRICE 1505 0.44 0.33 0.50 194 XM_ProductURIs 1421 0.76 1.34 0.47 195 URI_TRY_3LD 1417 1.00 2.04 0.47 196 HTML_TAG_BALANCE_BODY 1407 0.53 0.64 0.46 197 XMLngstWrd_01 1386 0.45 0.42 0.46 198 HTML_FONT_FACE_BAD 1323 0.43 0.41 0.44 199 TR_XM_GMP_MSPIKE_UNDO2 1313 0.38 0.28 0.43 200 XMPhish14 1285 0.45 0.49 0.42 ----------------------------------------------------------------------