Email: 496980 Autolearn: 0 AvgScore: 5.47 AvgScanTime: 1.34 sec Spam: 160266 Autolearn: 0 AvgScore: 14.44 AvgScanTime: 1.46 sec Ham: 336714 Autolearn: 0 AvgScore: 1.20 AvgScanTime: 1.28 sec Time Spent Running SA: 184.49 hours Time Spent Processing Spam: 64.90 hours Time Spent Processing Ham: 119.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 153002 90.89 95.47 88.71 2 DKIM_SIGNED 131079 77.19 81.79 75.00 3 DCC_CHECK 123276 52.70 76.92 41.17 4 XM_B_Unicode 122894 70.82 76.68 68.03 5 XM_DK_Pass 120950 74.27 75.47 73.70 6 DKIM_VALID 119727 73.37 74.71 72.73 7 RELAYCOUNTRY_US 119411 77.05 74.51 78.27 8 XM_B_SpammyWords 102337 50.25 63.85 43.77 9 XMListUnsubscribeExists 96262 52.30 60.06 48.61 10 DKIM_VALID_AU 93968 59.64 58.63 60.13 11 XM_B_Unicode3 70563 41.66 44.03 40.53 12 LOC_TINY_FONT_1 68240 33.58 42.58 29.30 13 BAYES_50 60160 54.08 37.54 61.95 14 XM_DK_Undo_02 58998 15.19 36.81 4.90 15 XM_B_SpammyWords2 57953 24.43 36.16 18.85 16 MIME_HTML_ONLY 54097 27.18 33.75 24.05 17 FVGT_m_MULTI_ODD 52463 27.54 32.73 25.06 18 HTML_FONT_LOW_CONTRAST 52264 29.19 32.61 27.56 19 T_KAM_HTML_FONT_INVALID 44520 24.02 27.78 22.22 20 BAYES_99 43683 11.16 27.26 3.50 21 DKIM_VALID_EF 43078 28.58 26.88 29.39 22 TR_XM_DKIM_Undo 41628 9.66 25.97 1.89 23 XMSubLong 35857 22.65 22.37 22.79 24 DCC_CHECK_NEGATIVE 34836 46.82 21.74 58.76 25 XM_Multi_Part_URI 33086 15.87 20.64 13.60 26 BAYES_999 32741 8.37 20.43 2.64 27 TR_XM_DK_Unsub 31778 15.54 19.83 13.50 28 XM_B_Unsub 31590 12.58 19.71 9.19 29 TR_DCC_Bayes_99 30713 7.03 19.16 1.26 30 T_TM2_M_HEADER_IN_MSG 30157 24.41 18.82 27.07 31 TR_XM_BayesUnsub 29928 11.05 18.67 7.43 32 RCVD_IN_MSPIKE_H2 28594 16.43 17.84 15.76 33 BAYES_60 25691 10.03 16.03 7.17 34 UNPARSEABLE_RELAY 24969 12.78 15.58 11.45 35 RELAYCOUNTRY_META 24967 7.41 15.58 3.52 36 TR_MAX_INTL_RELAY 23214 9.05 14.48 6.46 37 XM_B_SpammyWords3 21334 8.10 13.31 5.61 38 RCVD_IN_BL_SPAMCOP_NET 20810 4.62 12.98 0.64 39 TR_XM_SpammyRelay 19388 5.15 12.10 1.84 40 FSL_BULK_SIG 18713 6.77 11.68 4.43 41 BOTNET 18417 4.51 11.49 1.18 42 LOTS_OF_MONEY 18080 7.32 11.28 5.44 43 HTML_MIME_NO_HTML_TAG 17244 8.84 10.76 7.93 44 ALL_TRUSTED 16519 15.98 10.31 18.68 45 BOTNET_IPINHOSTNAME 16429 5.47 10.25 3.20 46 TR_XM_SpammyWords4 16354 5.80 10.20 3.70 47 RCVD_IN_MSPIKE_WL 16057 15.96 10.02 18.79 48 TR_XM_SpammyWords2 15120 3.32 9.43 0.41 49 HTML_IMAGE_ONLY_08 14987 6.77 9.35 5.54 50 HTML_SHORT_LINK_IMG_1 14975 6.70 9.34 5.45 51 BAYES_80 14515 5.65 9.06 4.03 52 XM_Evil_Numbers_Gen 13116 8.59 8.18 8.78 53 TR_XM_UnparsRelay 12755 3.63 7.96 1.57 54 MPART_ALT_DIFF 12411 5.85 7.74 4.95 55 XM_B_Phish_Phrases 11480 5.66 7.16 4.94 56 DKIM_INVALID 11352 3.82 7.08 2.26 57 UNTRUSTED_Relay 10765 3.27 6.72 1.63 58 RCVD_IN_MSPIKE_BL 10742 3.00 6.70 1.24 59 TR_XM_MSPIKECOMBO 10700 2.99 6.68 1.23 60 MIME_QP_LONG_LINE 10367 5.63 6.47 5.23 61 XMSubMetaSx_00 9749 4.43 6.08 3.64 62 XM_B_PhoneNumber 9468 8.23 5.91 9.34 63 HTML_IMAGE_RATIO_02 9169 4.88 5.72 4.47 64 TR_XM_SPAMCOP 8986 1.98 5.61 0.25 65 XM_H_GMP 8826 5.32 5.51 5.24 66 TR_XM_SpammyWords3 8776 2.12 5.48 0.52 67 LotsOfNums_01 8566 7.14 5.34 7.99 68 XMStrtUSub 8527 5.10 5.32 4.99 69 XM_H_Long_From01 8277 5.52 5.16 5.69 70 BAYES_95 8161 3.29 5.09 2.43 71 RELAYCOUNTRY_CA 8055 2.03 5.03 0.61 72 RCVD_IN_MSPIKE_H3 7975 7.54 4.98 8.77 73 XM_UncommonTLD01 7649 4.19 4.77 3.91 74 RCVD_IN_MSPIKE_L3 7402 2.24 4.62 1.10 75 TooManyTo_001 7344 6.58 4.58 7.53 76 XM_Body_Dirty_Words 6972 2.86 4.35 2.15 77 DKIM_ADSP_NXDOMAIN 6954 1.58 4.34 0.27 78 XM_B_SpammyTLD 6862 3.00 4.28 2.40 79 XM_B_Investor 6691 2.40 4.17 1.55 80 HTML_IMAGE_RATIO_04 6580 4.01 4.11 3.96 81 T_XMDrugObfuBody_14 6428 2.37 4.01 1.59 82 TR_XM_PhishingBody 6162 2.37 3.84 1.67 83 TR_XM_NoHeaderRelay 6035 1.35 3.77 0.21 84 BOTNET_NORDNS 5798 1.17 3.62 0.01 85 XMNumbers 5604 3.20 3.50 3.07 86 TR_XM_SpammyWords5 5533 1.98 3.45 1.28 87 MIME_HTML_MOSTLY 5345 2.93 3.34 2.74 88 XMSexyCombo_05 5237 1.81 3.27 1.11 89 TM2_M_VERY_LONG_WORD 5164 1.96 3.22 1.36 90 XM_OfRef6 5095 1.57 3.18 0.80 91 T_XMDrugObfuBody_08 4935 2.33 3.08 1.97 92 HTML_IMAGE_RATIO_06 4784 3.52 2.99 3.77 93 XM_H_Long_From02 4750 1.43 2.96 0.70 94 XM_B_Unsub2 4432 1.86 2.77 1.43 95 XM_H_DKIM_GOOG 4401 0.89 2.75 0.01 96 XM_CamelCaseFrm001 4353 2.15 2.72 1.88 97 XMDiploma_00 4325 1.83 2.70 1.41 98 MIME_HTML_ONLY_MULTI 4265 2.52 2.66 2.46 99 XM_UB50 4218 1.60 2.63 1.12 100 RCVD_IN_MSPIKE_H5 4204 5.04 2.62 6.19 101 HTML_IMAGE_RATIO_08 4071 2.70 2.54 2.78 102 RELAYCOUNTRY_AU 4027 1.19 2.51 0.56 103 XM_SPF_SoftFail 3892 1.59 2.43 1.20 104 RCVD_IN_MSPIKE_H4 3878 3.38 2.42 3.84 105 XM_URI_RBL 3834 0.99 2.39 0.33 106 TM2_M_URI_OPT_OUT 3748 1.93 2.34 1.74 107 T_TooManySym_01 3677 4.41 2.29 5.42 108 XM_B_URI_Unicode 3588 1.97 2.24 1.84 109 TR_XM_INV_DKIM 3566 0.73 2.23 0.01 110 MAILING_LIST_MULTI 3423 2.64 2.14 2.89 111 XM_B_SpammyWords4 3420 1.18 2.13 0.73 112 TR_XM_MSPIKECOMBO2 3409 0.76 2.13 0.11 113 XMBody_17 3399 0.96 2.12 0.41 114 RCVD_IN_VALIDITY_RPBL 3311 0.71 2.07 0.07 115 MPART_ALT_DIFF_COUNT 3132 1.05 1.95 0.61 116 USER_IN_DEF_DKIM_WL 3131 9.28 1.95 12.77 117 ANY_BOUNCE_MESSAGE 3101 3.09 1.93 3.64 118 BOUNCE_MESSAGE 3101 3.09 1.93 3.64 119 XM_SendGrid 2942 1.59 1.84 1.48 120 FROM_EXCESS_BASE64 2898 1.61 1.81 1.52 121 T_FILL_THIS_FORM_SHORT 2895 1.08 1.81 0.74 122 SpammyFromTLD_02 2846 0.86 1.78 0.42 123 XMGenDplmaNmb 2738 1.06 1.71 0.75 124 RCVD_IN_XBL 2702 0.57 1.69 0.03 125 SUBJ_ALL_CAPS 2695 1.45 1.68 1.34 126 T_XMHurry_00 2687 1.07 1.68 0.78 127 XMStockSpam_06 2658 1.38 1.66 1.24 128 BAYES_40 2638 4.01 1.65 5.14 129 T_REMOTE_IMAGE 2621 2.74 1.64 3.27 130 KHOP_HELO_FCRDNS 2613 1.43 1.63 1.33 131 TR_XM_MaxSPIKE 2545 0.56 1.59 0.07 132 HTML_FONT_TINY_NORDNS 2499 0.58 1.56 0.11 133 RCVD_IN_IADB_LISTED 2457 2.82 1.53 3.43 134 TR_XM_INTL_Spamhaus 2428 0.60 1.51 0.17 135 T_XMDrugObfuBody_00 2402 1.14 1.50 0.97 136 RCVD_IN_MSPIKE_L4 2370 0.55 1.48 0.11 137 TO_NO_BRKTS_HTML_IMG 2312 0.48 1.44 0.02 138 RELAYCOUNTRY_ID 2265 0.46 1.41 0.00 139 DIET_1 2255 0.68 1.41 0.33 140 RCVD_IN_VALIDITY_SAFE 2252 3.14 1.41 3.97 141 URI_NOVOWEL 2245 1.24 1.40 1.17 142 URI_TRY_3LD 2239 0.71 1.40 0.39 143 XMBrknScrpt_02 2224 1.11 1.39 0.98 144 XMBounce_01 2216 0.46 1.38 0.02 145 SCC_CANSPAM_2 2214 0.45 1.38 0.00 146 XM_DK_Undo_01 2154 1.52 1.34 1.60 147 XMPhish30 2152 0.84 1.34 0.60 148 TR_LOTS_OF_MONEY3 2132 0.60 1.33 0.25 149 SpammyFromTLD_01 2116 0.90 1.32 0.69 150 RCVD_IN_ZEN_LASTEXTERNAL 2092 0.42 1.31 0.00 151 SHORTCIRCUIT 2092 0.42 1.31 0.00 152 HK_RANDOM_REPLYTO 2090 0.47 1.30 0.07 153 RELAYCOUNTRY_FR 2071 0.61 1.29 0.29 154 RCVD_IN_IADB_SPF 1978 2.45 1.23 3.02 155 URI_HEX 1936 1.38 1.21 1.46 156 RCVD_IN_PSBL 1926 0.40 1.20 0.02 157 DKIM_ADSP_CUSTOM_MED 1857 0.93 1.16 0.82 158 RCVD_IN_SBL_CSS 1846 0.40 1.15 0.04 159 RCVD_IN_IADB_DK 1795 2.12 1.12 2.59 160 XM_B_COPY_HTML 1794 0.68 1.12 0.48 161 XMBody_78 1781 0.58 1.11 0.32 162 RCVD_IN_IADB_SENDERID 1776 2.19 1.11 2.70 163 RCVD_IN_PBL 1771 0.79 1.11 0.64 164 XM_UB80 1760 0.37 1.10 0.02 165 STY_INVIS_DIRECT 1743 0.50 1.09 0.22 166 XM_B_SEO 1724 0.45 1.08 0.16 167 RDNS_DYNAMIC 1719 0.44 1.07 0.14 168 BAYES_20 1709 2.97 1.07 3.87 169 MISSING_HEADERS 1673 0.55 1.04 0.32 170 XM_UB60 1667 0.39 1.04 0.08 171 FVGT_m_MULTI_ODD_EMAIL 1665 0.36 1.04 0.03 172 XM_B_Phish66 1650 0.55 1.03 0.32 173 XM_ProductURIs 1630 0.69 1.02 0.53 174 TR_XM_RelayPhish 1626 0.37 1.01 0.06 175 XM_UB99 1614 0.33 1.01 0.00 176 HTTPS_HTTP_MISMATCH 1597 0.80 1.00 0.70 177 RCVD_IN_IADB_VOUCHED 1564 1.84 0.98 2.25 178 NML_ADSP_CUSTOM_MED 1560 0.67 0.97 0.52 179 TR_Mismatch_TLD_02 1548 0.40 0.97 0.12 180 TR_XM_SEO4 1546 0.37 0.96 0.08 181 TM2_M_A_HREF_HREF 1542 0.51 0.96 0.30 182 TVD_RCVD_IP 1522 0.92 0.95 0.91 183 TR_XM_GMP_BULK_SIG 1511 0.38 0.94 0.12 184 TR_XM_DK_SendGrid 1509 0.98 0.94 1.00 185 XMBdyGiftCard01 1495 0.71 0.93 0.60 186 XMPhish14 1483 0.62 0.93 0.47 187 RCVD_IN_VALIDITY_CERTIFIED 1467 2.63 0.92 3.45 188 XM_B_DNDMA 1454 0.56 0.91 0.39 189 TR_MetaPhish_Combo_01 1449 0.95 0.90 0.97 190 FORGED_GMAIL_RCVD 1442 0.65 0.90 0.54 191 SHOPIFY_IMG_NOT_RCVD_SFY 1441 0.42 0.90 0.20 192 MultiRelay_CC 1428 0.38 0.89 0.14 193 XM_GoogleGroups 1417 1.20 0.88 1.35 194 HELO_DYNAMIC_SPLIT_IP 1378 0.28 0.86 0.01 195 FORGED_MUA_OUTLOOK 1369 0.29 0.85 0.02 196 FSL_NEW_HELO_USER 1364 0.27 0.85 0.00 197 XMSexyCombo_01 1347 0.37 0.84 0.15 198 NSL_RCVD_FROM_USER 1347 0.27 0.84 0.00 199 RELAYCOUNTRY_GB 1346 0.75 0.84 0.71 200 T_Symld_Words_02 1337 0.85 0.83 0.85 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 298704 90.89 95.47 88.71 2 RELAYCOUNTRY_US 263534 77.05 74.51 78.27 3 DKIM_SIGNED 252533 77.19 81.79 75.00 4 XM_DK_Pass 248148 74.27 75.47 73.70 5 DKIM_VALID 244908 73.37 74.71 72.73 6 XM_B_Unicode 229065 70.82 76.68 68.03 7 BAYES_50 208605 54.08 37.54 61.95 8 DKIM_VALID_AU 202454 59.64 58.63 60.13 9 DCC_CHECK_NEGATIVE 197869 46.82 21.74 58.76 10 XMListUnsubscribeExists 163679 52.30 60.06 48.61 11 XM_B_SpammyWords 147377 50.25 63.85 43.77 12 DCC_CHECK 138612 52.70 76.92 41.17 13 XM_B_Unicode3 136482 41.66 44.03 40.53 14 DKIM_VALID_EF 98962 28.58 26.88 29.39 15 LOC_TINY_FONT_1 98670 33.58 42.58 29.30 16 HTML_FONT_LOW_CONTRAST 92806 29.19 32.61 27.56 17 T_TM2_M_HEADER_IN_MSG 91150 24.41 18.82 27.07 18 FVGT_m_MULTI_ODD 84393 27.54 32.73 25.06 19 MIME_HTML_ONLY 80993 27.18 33.75 24.05 20 XMSubLong 76731 22.65 22.37 22.79 21 T_KAM_HTML_FONT_INVALID 74833 24.02 27.78 22.22 22 XM_B_SpammyWords2 63476 24.43 36.16 18.85 23 RCVD_IN_MSPIKE_WL 63284 15.96 10.02 18.79 24 ALL_TRUSTED 62890 15.98 10.31 18.68 25 RCVD_IN_MSPIKE_H2 53067 16.43 17.84 15.76 26 XM_Multi_Part_URI 45805 15.87 20.64 13.60 27 TR_XM_DK_Unsub 45462 15.54 19.83 13.50 28 USER_IN_DEF_DKIM_WL 43008 9.28 1.95 12.77 29 UNPARSEABLE_RELAY 38539 12.78 15.58 11.45 30 BAYES_00 32188 6.64 0.49 9.56 31 XM_B_PhoneNumber 31454 8.23 5.91 9.34 32 XM_B_Unsub 30949 12.58 19.71 9.19 33 XM_Evil_Numbers_Gen 29568 8.59 8.18 8.78 34 RCVD_IN_MSPIKE_H3 29516 7.54 4.98 8.77 35 LotsOfNums_01 26905 7.14 5.34 7.99 36 HTML_MIME_NO_HTML_TAG 26686 8.84 10.76 7.93 37 TooManyTo_001 25340 6.58 4.58 7.53 38 TR_XM_BayesUnsub 25012 11.05 18.67 7.43 39 BAYES_60 24139 10.03 16.03 7.17 40 TR_XM_DK_Bayes 23397 4.81 0.32 6.95 41 TR_XM_DK_Bayes1 23057 4.74 0.31 6.85 42 XM_DKIMWhitelistDomains 22558 4.55 0.05 6.70 43 TR_MAX_INTL_RELAY 21758 9.05 14.48 6.46 44 RCVD_IN_MSPIKE_H5 20850 5.04 2.62 6.19 45 TR_XM_DK_Bayes2 19946 4.09 0.24 5.92 46 XM_H_Long_From01 19144 5.52 5.16 5.69 47 XM_B_SpammyWords3 18903 8.10 13.31 5.61 48 HTML_IMAGE_ONLY_08 18643 6.77 9.35 5.54 49 HTML_SHORT_LINK_IMG_1 18338 6.70 9.34 5.45 50 LOTS_OF_MONEY 18322 7.32 11.28 5.44 51 T_TooManySym_01 18255 4.41 2.29 5.42 52 XM_H_GMP 17632 5.32 5.51 5.24 53 MIME_QP_LONG_LINE 17615 5.63 6.47 5.23 54 BAYES_40 17294 4.01 1.65 5.14 55 XMStrtUSub 16810 5.10 5.32 4.99 56 MPART_ALT_DIFF 16653 5.85 7.74 4.95 57 XM_B_Phish_Phrases 16626 5.66 7.16 4.94 58 XM_DK_Undo_02 16508 15.19 36.81 4.90 59 HTML_IMAGE_RATIO_02 15061 4.88 5.72 4.47 60 FSL_BULK_SIG 14917 6.77 11.68 4.43 61 XM_PDF 14067 3.08 0.77 4.18 62 BAYES_80 13559 5.65 9.06 4.03 63 RCVD_IN_VALIDITY_SAFE 13375 3.14 1.41 3.97 64 HTML_IMAGE_RATIO_04 13325 4.01 4.11 3.96 65 XM_UncommonTLD01 13155 4.19 4.77 3.91 66 BAYES_20 13047 2.97 1.07 3.87 67 RCVD_IN_MSPIKE_H4 12918 3.38 2.42 3.84 68 HTML_IMAGE_RATIO_06 12688 3.52 2.99 3.77 69 TR_XM_SpammyWords4 12468 5.80 10.20 3.70 70 XMSubMetaSx_00 12271 4.43 6.08 3.64 71 BOUNCE_MESSAGE 12263 3.09 1.93 3.64 72 ANY_BOUNCE_MESSAGE 12263 3.09 1.93 3.64 73 RELAYCOUNTRY_META 11841 7.41 15.58 3.52 74 BAYES_99 11778 11.16 27.26 3.50 75 RCVD_IN_VALIDITY_CERTIFIED 11606 2.63 0.92 3.45 76 RCVD_IN_IADB_LISTED 11534 2.82 1.53 3.43 77 T_REMOTE_IMAGE 11009 2.74 1.64 3.27 78 BOTNET_IPINHOSTNAME 10778 5.47 10.25 3.20 79 XMNumbers 10324 3.20 3.50 3.07 80 RCVD_IN_IADB_SPF 10175 2.45 1.23 3.02 81 MAILING_LIST_MULTI 9717 2.64 2.14 2.89 82 T_TooManySym_02 9678 2.13 0.58 2.87 83 HTML_IMAGE_RATIO_08 9346 2.70 2.54 2.78 84 MIME_HTML_MOSTLY 9218 2.93 3.34 2.74 85 RCVD_IN_IADB_SENDERID 9101 2.19 1.11 2.70 86 BAYES_999 8874 8.37 20.43 2.64 87 RCVD_IN_IADB_DK 8735 2.12 1.12 2.59 88 MIME_HTML_ONLY_MULTI 8281 2.52 2.66 2.46 89 BAYES_95 8196 3.29 5.09 2.43 90 XM_B_SpammyTLD 8070 3.00 4.28 2.40 91 BAYES_05 7905 1.76 0.51 2.35 92 TooManyTo_002 7819 1.78 0.63 2.32 93 DKIM_INVALID 7625 3.82 7.08 2.26 94 RCVD_IN_IADB_VOUCHED 7582 1.84 0.98 2.25 95 INVALID_MSGID 7473 1.57 0.21 2.22 96 XM_Body_Dirty_Words 7225 2.86 4.35 2.15 97 MSGID_NOFQDN1 6745 1.36 0.01 2.00 98 T_XMDrugObfuBody_08 6624 2.33 3.08 1.97 99 TO_MALFORMED 6518 1.32 0.03 1.94 100 TR_XM_DKIM_Undo 6375 9.66 25.97 1.89 101 XM_CamelCaseFrm001 6347 2.15 2.72 1.88 102 TR_XM_SpammyRelay 6205 5.15 12.10 1.84 103 XM_B_URI_Unicode 6190 1.97 2.24 1.84 104 TM2_M_URI_OPT_OUT 5851 1.93 2.34 1.74 105 TR_XM_PhishingBody 5636 2.37 3.84 1.67 106 UNTRUSTED_Relay 5485 3.27 6.72 1.63 107 XM_DK_Undo_01 5398 1.52 1.34 1.60 108 RCVD_IN_IADB_OPTIN 5371 1.29 0.64 1.60 109 T_XMDrugObfuBody_14 5337 2.37 4.01 1.59 110 TR_XM_UnparsRelay 5271 3.63 7.96 1.57 111 XM_B_Investor 5227 2.40 4.17 1.55 112 TooManyTo_003 5189 1.21 0.51 1.54 113 TR_Symld_Words 5152 1.30 0.83 1.53 114 FROM_EXCESS_BASE64 5119 1.61 1.81 1.52 115 XM_SendGrid 4968 1.59 1.84 1.48 116 URI_HEX 4918 1.38 1.21 1.46 117 XM_B_Unsub2 4824 1.86 2.77 1.43 118 XMDiploma_00 4753 1.83 2.70 1.41 119 TM2_M_VERY_LONG_WORD 4573 1.96 3.22 1.36 120 XM_GoogleGroups 4537 1.20 0.88 1.35 121 IN_HORDE_ADDRESS_BOOK 4526 0.93 0.06 1.34 122 SUBJ_ALL_CAPS 4503 1.45 1.68 1.34 123 KHOP_HELO_FCRDNS 4470 1.43 1.63 1.33 124 TR_XM_SpammyWords5 4304 1.98 3.45 1.28 125 TR_DCC_Bayes_99 4235 7.03 19.16 1.26 126 XMStockSpam_06 4176 1.38 1.66 1.24 127 RCVD_IN_MSPIKE_BL 4167 3.00 6.70 1.24 128 TR_XM_MSPIKECOMBO 4155 2.99 6.68 1.23 129 XM_SPF_SoftFail 4033 1.59 2.43 1.20 130 BOTNET 3989 4.51 11.49 1.18 131 TooManyTo_004 3938 0.94 0.45 1.17 132 URI_NOVOWEL 3936 1.24 1.40 1.17 133 HELO_NODOT 3827 0.81 0.11 1.14 134 HELO_NO_DOMAIN 3821 0.80 0.10 1.13 135 T_TooManySym_03 3775 0.81 0.16 1.12 136 XM_UB50 3756 1.60 2.63 1.12 137 XMSexyCombo_05 3742 1.81 3.27 1.11 138 XMCapTrack 3728 0.95 0.61 1.11 139 RCVD_IN_MSPIKE_L3 3712 2.24 4.62 1.10 140 XM_ShortIntro_01 3622 0.88 0.46 1.08 141 TR_XM_DK_SendGrid 3368 0.98 0.94 1.00 142 XMGappySubj_01 3368 0.71 0.11 1.00 143 XMBrknScrpt_02 3286 1.11 1.39 0.98 144 T_XMDrugObfuBody_00 3278 1.14 1.50 0.97 145 TR_MetaPhish_Combo_01 3254 0.95 0.90 0.97 146 TooManyTo_005 3252 0.79 0.41 0.97 147 TVD_RCVD_IP 3070 0.92 0.95 0.91 148 TVD_SPACE_RATIO 3018 0.70 0.28 0.90 149 FROM_GOV_DKIM_AU 2993 0.64 0.11 0.89 150 T_Symld_Words_02 2864 0.85 0.83 0.85 151 T_TVD_MIME_NO_HEADERS 2777 0.57 0.04 0.82 152 DKIM_ADSP_CUSTOM_MED 2766 0.93 1.16 0.82 153 XM_OfRef6 2692 1.57 3.18 0.80 154 T_XMHurry_00 2622 1.07 1.68 0.78 155 XM_H_PHPMailer 2548 0.62 0.33 0.76 156 XMGenDplmaNmb 2530 1.06 1.71 0.75 157 T_FILL_THIS_FORM_SHORT 2490 1.08 1.81 0.74 158 XM_B_SpammyWords4 2462 1.18 2.13 0.73 159 RELAYCOUNTRY_GB 2379 0.75 0.84 0.71 160 HTTPS_HTTP_MISMATCH 2366 0.80 1.00 0.70 161 XM_H_Long_From02 2358 1.43 2.96 0.70 162 SpammyFromTLD_01 2339 0.90 1.32 0.69 163 T_OBFU_PDF_ATTACH 2334 0.51 0.12 0.69 164 RCVD_IN_BL_SPAMCOP_NET 2166 4.62 12.98 0.64 165 RCVD_IN_PBL 2157 0.79 1.11 0.64 166 TO_NO_BRKTS_HTML_ONLY 2149 0.47 0.12 0.64 167 TR_XM_Base64_M1 2140 0.68 0.78 0.64 168 XMBSHREFv2 2137 0.55 0.37 0.63 169 XMNoVowels 2128 0.59 0.49 0.63 170 HTML_TAG_BALANCE_BODY 2106 0.69 0.81 0.63 171 MPART_ALT_DIFF_COUNT 2070 1.05 1.95 0.61 172 RELAYCOUNTRY_CA 2051 2.03 5.03 0.61 173 XMPhish30 2020 0.84 1.34 0.60 174 XMBdyGiftCard01 2011 0.71 0.93 0.60 175 XMSlimDrugH 1980 0.66 0.80 0.59 176 LongTLD 1963 0.54 0.46 0.58 177 XMLngstWrd_00 1943 0.52 0.40 0.58 178 HTML_IMAGE_ONLY_20 1914 0.58 0.61 0.57 179 RELAYCOUNTRY_AU 1884 1.19 2.51 0.56 180 FORGED_GMAIL_RCVD 1808 0.65 0.90 0.54 181 XM_ProductURIs 1777 0.69 1.02 0.53 182 NML_ADSP_CUSTOM_MED 1765 0.67 0.97 0.52 183 TR_XM_SpammyWords3 1761 2.12 5.48 0.52 184 XMLngstWrd_01 1712 0.46 0.37 0.51 185 MSGID_FROM_MTA_HEADER 1662 0.45 0.35 0.49 186 XM_B_COPY_HTML 1608 0.68 1.12 0.48 187 XMPhish14 1590 0.62 0.93 0.47 188 HTML_IMAGE_ONLY_28 1541 0.40 0.28 0.46 189 XMMoneyMeta_00 1516 0.55 0.75 0.45 190 XMSubMetaSxObfu_03 1454 0.49 0.61 0.43 191 TRACKER_ID 1439 0.31 0.06 0.43 192 HTML_IMAGE_ONLY_32 1435 0.51 0.68 0.43 193 XMSolicitRefs_0 1425 0.44 0.48 0.42 194 SpammyFromTLD_02 1424 0.86 1.78 0.42 195 XMHTML_After_End 1408 0.53 0.76 0.42 196 PLING_QUERY 1402 0.52 0.74 0.42 197 XMBody_17 1395 0.96 2.12 0.41 198 XMSubMetaSxObfu_02 1391 0.37 0.29 0.41 199 TR_XM_SpammyWords2 1389 3.32 9.43 0.41 200 XMGappySubj_02 1378 0.29 0.03 0.41 ----------------------------------------------------------------------