Email: 555504 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.55 sec Spam: 148119 Autolearn: 0 AvgScore: 14.32 AvgScanTime: 1.89 sec Ham: 407385 Autolearn: 0 AvgScore: 1.87 AvgScanTime: 1.43 sec Time Spent Running SA: 238.92 hours Time Spent Processing Spam: 77.64 hours Time Spent Processing Ham: 161.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141366 91.75 95.44 90.41 2 DKIM_SIGNED 132715 68.94 89.60 61.42 3 XM_B_Unicode 124404 66.92 83.99 60.72 4 XM_DK_Pass 124173 66.53 83.83 60.24 5 DKIM_VALID 123039 65.76 83.07 59.47 6 RELAYCOUNTRY_US 122893 71.31 82.97 67.07 7 DCC_CHECK 104788 52.59 70.75 45.99 8 XM_B_SpammyWords 102505 60.11 69.20 56.81 9 XMListUnsubscribeExists 97561 47.07 65.87 40.24 10 DKIM_VALID_AU 96610 53.70 65.22 49.51 11 XM_B_Unicode3 74513 38.60 50.31 34.34 12 LOC_TINY_FONT_1 72617 30.96 49.03 24.39 13 XM_DK_Undo_02 61435 14.28 41.48 4.39 14 BAYES_50 61414 58.95 41.46 65.31 15 XM_B_SpammyWords2 58797 24.06 39.70 18.37 16 HTML_FONT_LOW_CONTRAST 56581 40.50 38.20 41.34 17 FVGT_m_MULTI_ODD 52266 25.20 35.29 21.53 18 BAYES_99 45898 10.65 30.99 3.26 19 DKIM_VALID_EF 44790 26.04 30.24 24.51 20 T_KAM_HTML_FONT_INVALID 43805 21.31 29.57 18.30 21 TR_XM_DKIM_Undo 42535 8.87 28.72 1.65 22 DCC_CHECK_NEGATIVE 41171 46.98 27.80 53.96 23 MIME_HTML_ONLY 40798 18.39 27.54 15.07 24 XMSubLong 38953 20.73 26.30 18.71 25 T_TM2_M_HEADER_IN_MSG 35824 26.92 24.19 27.91 26 BAYES_999 34697 8.13 23.43 2.57 27 XM_Multi_Part_URI 34163 26.79 23.06 28.14 28 TR_XM_DK_Unsub 32500 14.30 21.94 11.52 29 RCVD_IN_MSPIKE_H2 31720 15.06 21.42 12.74 30 TR_DCC_Bayes_99 31485 6.58 21.26 1.25 31 XM_B_Unsub 30253 10.71 20.42 7.17 32 TR_XM_BayesUnsub 29122 9.42 19.66 5.70 33 UNPARSEABLE_RELAY 26178 11.88 17.67 9.78 34 RELAYCOUNTRY_META 23248 6.28 15.70 2.86 35 TR_MAX_INTL_RELAY 21461 7.73 14.49 5.27 36 XM_B_SpammyWords3 20303 6.91 13.71 4.44 37 LOTS_OF_MONEY 18197 8.34 12.29 6.90 38 RCVD_IN_BL_SPAMCOP_NET 18099 3.69 12.22 0.59 39 BOTNET_IPINHOSTNAME 17667 5.10 11.93 2.61 40 RCVD_IN_MSPIKE_WL 16688 14.47 11.27 15.63 41 TR_XM_SpammyRelay 16635 4.12 11.23 1.53 42 TR_XM_SpammyWords4 16377 6.08 11.06 4.27 43 BOTNET 15909 3.48 10.74 0.84 44 TR_XM_SpammyWords2 14801 2.96 9.99 0.41 45 XM_Evil_Numbers_Gen 14733 8.78 9.95 8.35 46 XM_B_Phish_Phrases 13820 17.82 9.33 20.91 47 FSL_BULK_SIG 13586 16.98 9.17 19.82 48 BAYES_80 13261 4.77 8.95 3.25 49 TR_XM_UnparsRelay 13110 3.32 8.85 1.30 50 BAYES_60 11597 6.40 7.83 5.88 51 TR_XM_SPAMCOP 11267 2.18 7.61 0.21 52 LotsOfNums_01 11245 9.00 7.59 9.51 53 XMSubMetaSx_00 11127 15.99 7.51 19.07 54 UNTRUSTED_Relay 9995 2.72 6.75 1.25 55 HTML_IMAGE_RATIO_02 9787 4.81 6.61 4.15 56 DKIM_INVALID 9676 3.17 6.53 1.95 57 MPART_ALT_DIFF 9543 4.61 6.44 3.94 58 XM_H_GMP 9054 4.63 6.11 4.09 59 XM_Body_Dirty_Words 8778 3.16 5.93 2.15 60 XM_B_PhoneNumber 8770 7.47 5.92 8.03 61 XM_UncommonTLD01 8278 3.79 5.59 3.13 62 RCVD_IN_MSPIKE_H3 8186 6.70 5.53 7.13 63 RCVD_IN_MSPIKE_BL 8163 2.14 5.51 0.91 64 TR_XM_MSPIKECOMBO 8156 2.14 5.51 0.91 65 XM_H_Long_From01 8150 4.92 5.50 4.71 66 BAYES_95 7750 2.88 5.23 2.02 67 T_XMDrugObfuBody_14 7195 2.23 4.86 1.27 68 RELAYCOUNTRY_CA 7144 1.71 4.82 0.57 69 TM2_M_VERY_LONG_WORD 6911 4.40 4.67 4.30 70 HTML_IMAGE_RATIO_06 6522 3.71 4.40 3.46 71 XM_B_SpammyTLD 6488 3.54 4.38 3.23 72 XM_B_Investor 6387 2.02 4.31 1.18 73 HTML_IMAGE_RATIO_04 6152 3.59 4.15 3.39 74 XMSexyCombo_05 6147 1.62 4.15 0.71 75 TR_XM_PhishingBody 6034 2.10 4.07 1.39 76 XMStrtUSub 5948 16.13 4.02 20.53 77 TR_XM_SpammyWords5 5852 1.97 3.95 1.25 78 MIME_HTML_MOSTLY 5784 2.66 3.90 2.20 79 TR_XM_SpammyWords3 5330 1.28 3.60 0.43 80 T_XMDrugObfuBody_08 5215 1.86 3.52 1.26 81 XMNumbers 5188 2.87 3.50 2.64 82 TM2_M_URI_OPT_OUT 4894 2.17 3.30 1.76 83 TooManyTo_001 4869 5.16 3.29 5.85 84 HTML_IMAGE_RATIO_08 4862 2.28 3.28 1.91 85 XM_B_Unsub2 4845 1.72 3.27 1.15 86 XM_UB50 4803 1.47 3.24 0.83 87 XM_CamelCaseFrm001 4727 1.92 3.19 1.45 88 RCVD_IN_MSPIKE_L3 4717 1.40 3.18 0.75 89 TR_XM_INV_DKIM 4716 0.87 3.18 0.03 90 XMDiploma_00 4709 1.88 3.18 1.41 91 MIME_HTML_ONLY_MULTI 4667 2.26 3.15 1.94 92 ANY_BOUNCE_MESSAGE 4576 5.76 3.09 6.73 93 BOUNCE_MESSAGE 4576 5.76 3.09 6.73 94 RCVD_IN_MSPIKE_H5 4478 4.65 3.02 5.24 95 XM_SPF_SoftFail 4477 1.53 3.02 0.98 96 TR_XM_NoHeaderRelay 4472 0.91 3.02 0.14 97 XM_B_URI_Unicode 4315 1.96 2.91 1.61 98 XM_OfRef6 4281 1.22 2.89 0.61 99 XMStockSpam_06 4267 1.17 2.88 0.55 100 RELAYCOUNTRY_AU 4255 1.14 2.87 0.50 101 T_TooManySym_01 4251 4.01 2.87 4.42 102 MIME_QP_LONG_LINE 4118 3.93 2.78 4.34 103 RCVD_IN_MSPIKE_H4 4024 3.12 2.72 3.27 104 XM_URI_RBL 3877 0.91 2.62 0.29 105 XM_B_SpammyWords4 3573 0.98 2.41 0.46 106 KHOP_HELO_FCRDNS 3500 2.48 2.36 2.53 107 T_XMHurry_00 3467 1.07 2.34 0.60 108 XM_H_Long_From02 3204 1.06 2.16 0.66 109 SUBJ_ALL_CAPS 3089 1.40 2.09 1.15 110 MAILING_LIST_MULTI 3021 2.15 2.04 2.18 111 T_FILL_THIS_FORM_SHORT 2952 1.02 1.99 0.66 112 TR_XM_MSPIKECOMBO2 2918 0.59 1.97 0.09 113 SpammyFromTLD_02 2884 0.82 1.95 0.41 114 USER_IN_DEF_DKIM_WL 2817 8.62 1.90 11.06 115 RCVD_IN_VALIDITY_SAFE 2803 3.20 1.89 3.68 116 XMPhish30 2762 0.89 1.86 0.54 117 XMBody_17 2752 0.77 1.86 0.37 118 RCVD_IN_IADB_LISTED 2715 2.33 1.83 2.50 119 XMGenDplmaNmb 2640 1.10 1.78 0.85 120 STY_INVIS_DIRECT 2597 0.56 1.75 0.12 121 BAYES_40 2590 5.95 1.75 7.48 122 URI_TRY_3LD 2588 0.72 1.75 0.35 123 T_XMDrugObfuBody_00 2568 1.13 1.73 0.91 124 FROM_EXCESS_BASE64 2533 1.38 1.71 1.25 125 T_REMOTE_IMAGE 2533 2.66 1.71 3.00 126 RCVD_IN_VALIDITY_RPBL 2450 0.50 1.65 0.08 127 BOTNET_NORDNS 2448 0.44 1.65 0.00 128 SpammyFromTLD_01 2379 0.81 1.61 0.53 129 RCVD_IN_MSPIKE_L4 2348 0.53 1.59 0.15 130 HTML_FONT_TINY_NORDNS 2342 0.47 1.58 0.06 131 XM_DK_Undo_01 2322 1.51 1.57 1.48 132 HTML_MIME_NO_HTML_TAG 2278 1.87 1.54 1.99 133 URI_HEX 2258 1.40 1.52 1.36 134 TR_XM_InvalidRelay 2231 0.41 1.51 0.01 135 RCVD_IN_IADB_SPF 2223 2.04 1.50 2.23 136 ALL_TRUSTED 2222 22.68 1.50 30.38 137 XM_SendGrid 2204 1.42 1.49 1.39 138 TR_XM_INTL_Spamhaus 2204 0.50 1.49 0.14 139 TR_XM_MaxSPIKE 2197 0.42 1.48 0.04 140 TR_LOTS_OF_MONEY3 2191 0.61 1.48 0.30 141 RELAYCOUNTRY_FR 2191 0.57 1.48 0.24 142 XMBrknScrpt_02 2189 0.94 1.48 0.75 143 MIME_CHARSET_FARAWAY 2148 1.33 1.45 1.28 144 RCVD_IN_ZEN_LASTEXTERNAL 2090 0.38 1.41 0.00 145 SHORTCIRCUIT 2090 0.38 1.41 0.00 146 XMSexyCombo_01 2077 0.48 1.40 0.15 147 XM_B_SEO 2009 0.47 1.36 0.15 148 RCVD_IN_IADB_DK 2001 1.78 1.35 1.94 149 RCVD_IN_IADB_SENDERID 1986 1.84 1.34 2.02 150 XM_B_COPY_HTML 1943 0.68 1.31 0.45 151 CHARSET_FARAWAY_HEADER 1929 1.24 1.30 1.22 152 URI_NOVOWEL 1884 1.14 1.27 1.09 153 MPART_ALT_DIFF_COUNT 1863 0.71 1.26 0.52 154 XMLngstWrd_00 1797 0.97 1.21 0.88 155 HK_RANDOM_REPLYTO 1792 0.38 1.21 0.08 156 RCVD_IN_PBL 1765 0.69 1.19 0.51 157 TM2_M_OBFU_COMMENT 1752 0.50 1.18 0.25 158 RDNS_DYNAMIC 1727 0.39 1.17 0.11 159 HTTPS_HTTP_MISMATCH 1703 0.74 1.15 0.59 160 RCVD_IN_VALIDITY_CERTIFIED 1698 2.49 1.15 2.98 161 RCVD_IN_IADB_VOUCHED 1692 1.47 1.14 1.59 162 BAYES_20 1676 2.82 1.13 3.44 163 HTML_IMAGE_ONLY_20 1659 0.66 1.12 0.49 164 TR_XM_RelayPhish 1658 0.36 1.12 0.08 165 TR_XM_GMP_BULK_SIG 1652 0.36 1.12 0.09 166 TR_XM_SEO4 1645 0.34 1.11 0.06 167 XMBdyGiftCard01 1643 0.98 1.11 0.93 168 RCVD_IN_XBL 1627 0.30 1.10 0.01 169 XMHTML_After_End 1600 0.51 1.08 0.30 170 RCVD_IN_PSBL 1593 0.30 1.08 0.02 171 T_MONEY_PERCENT 1569 0.41 1.06 0.18 172 TR_LOTS_OF_MONEY2 1569 0.41 1.06 0.18 173 XM_ProductURIs 1568 0.59 1.06 0.42 174 XM_UB60 1556 0.33 1.05 0.07 175 DKIM_ADSP_CUSTOM_MED 1531 0.75 1.03 0.65 176 XM_B_DNDMA 1515 0.59 1.02 0.44 177 HTML_TAG_BALANCE_BODY 1485 0.57 1.00 0.42 178 XM_GoogleGroups 1448 1.03 0.98 1.05 179 URI_OPTOUT_3LD 1444 0.33 0.97 0.09 180 RELAYCOUNTRY_GB 1442 0.65 0.97 0.54 181 TVD_RCVD_IP 1442 0.84 0.97 0.79 182 XM_B_Phish66 1433 0.48 0.97 0.31 183 XM_UB99 1422 0.26 0.96 0.00 184 RCVD_IN_SBL_CSS 1411 0.28 0.95 0.03 185 MultiRelay_CC 1394 0.32 0.94 0.09 186 T_TooManySym_02 1385 1.92 0.94 2.28 187 T_Symld_Words_02 1384 0.63 0.93 0.52 188 XMBody_78 1384 0.42 0.93 0.23 189 XMEqualsVooDoo_00 1371 0.35 0.93 0.14 190 DIET_1 1369 0.45 0.92 0.28 191 DKIM_ADSP_NXDOMAIN 1366 0.41 0.92 0.23 192 NML_ADSP_CUSTOM_MED 1358 0.56 0.92 0.42 193 TR_Symld_Words 1351 1.18 0.91 1.28 194 TM2_M_A_HREF_HREF 1348 0.41 0.91 0.23 195 XM_HighProb1 1336 0.24 0.90 0.00 196 SHOPIFY_IMG_NOT_RCVD_SFY 1332 0.37 0.90 0.17 197 TVD_PH_BODY_ACCOUNTS_PRE 1310 12.45 0.88 16.65 198 TR_XM_DK_SendGrid 1288 0.91 0.87 0.92 199 TR_Mismatch_TLD_02 1271 0.31 0.86 0.11 200 HELO_DYNAMIC_SPLIT_IP 1248 0.23 0.84 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 368334 91.75 95.44 90.41 2 RELAYCOUNTRY_US 273226 71.31 82.97 67.07 3 BAYES_50 266047 58.95 41.46 65.31 4 DKIM_SIGNED 250223 68.94 89.60 61.42 5 XM_B_Unicode 247360 66.92 83.99 60.72 6 XM_DK_Pass 245428 66.53 83.83 60.24 7 DKIM_VALID 242285 65.76 83.07 59.47 8 XM_B_SpammyWords 231431 60.11 69.20 56.81 9 DCC_CHECK_NEGATIVE 219823 46.98 27.80 53.96 10 DKIM_VALID_AU 201705 53.70 65.22 49.51 11 DCC_CHECK 187345 52.59 70.75 45.99 12 HTML_FONT_LOW_CONTRAST 168395 40.50 38.20 41.34 13 XMListUnsubscribeExists 163941 47.07 65.87 40.24 14 XM_B_Unicode3 139895 38.60 50.31 34.34 15 ALL_TRUSTED 123744 22.68 1.50 30.38 16 XM_Multi_Part_URI 114656 26.79 23.06 28.14 17 T_TM2_M_HEADER_IN_MSG 113702 26.92 24.19 27.91 18 DKIM_VALID_EF 99840 26.04 30.24 24.51 19 LOC_TINY_FONT_1 99379 30.96 49.03 24.39 20 FVGT_m_MULTI_ODD 87727 25.20 35.29 21.53 21 XM_B_Phish_Phrases 85171 17.82 9.33 20.91 22 XMStrtUSub 83642 16.13 4.02 20.53 23 FSL_BULK_SIG 80758 16.98 9.17 19.82 24 XMSubMetaSx_00 77677 15.99 7.51 19.07 25 XMSubLong 76222 20.73 26.30 18.71 26 XM_B_SpammyWords2 74833 24.06 39.70 18.37 27 T_KAM_HTML_FONT_INVALID 74569 21.31 29.57 18.30 28 TVD_PH_BODY_ACCOUNTS_PRE 67844 12.45 0.88 16.65 29 RCVD_IN_MSPIKE_WL 63689 14.47 11.27 15.63 30 MIME_HTML_ONLY 61382 18.39 27.54 15.07 31 RCVD_IN_MSPIKE_H2 51914 15.06 21.42 12.74 32 TR_XM_DK_Unsub 46919 14.30 21.94 11.52 33 USER_IN_DEF_DKIM_WL 45059 8.62 1.90 11.06 34 UNPARSEABLE_RELAY 39829 11.88 17.67 9.78 35 LotsOfNums_01 38738 9.00 7.59 9.51 36 XM_Evil_Numbers_Gen 34033 8.78 9.95 8.35 37 XM_B_PhoneNumber 32719 7.47 5.92 8.03 38 BAYES_00 30744 5.72 0.70 7.55 39 BAYES_40 30455 5.95 1.75 7.48 40 XM_B_Unsub 29227 10.71 20.42 7.17 41 RCVD_IN_MSPIKE_H3 29038 6.70 5.53 7.13 42 LOTS_OF_MONEY 28113 8.34 12.29 6.90 43 ANY_BOUNCE_MESSAGE 27399 5.76 3.09 6.73 44 BOUNCE_MESSAGE 27397 5.76 3.09 6.73 45 BAYES_60 23941 6.40 7.83 5.88 46 TooManyTo_001 23818 5.16 3.29 5.85 47 TR_XM_BayesUnsub 23225 9.42 19.66 5.70 48 TR_XM_DK_Bayes 22241 4.15 0.56 5.46 49 TR_XM_DK_Bayes1 21958 4.10 0.56 5.39 50 TR_MAX_INTL_RELAY 21483 7.73 14.49 5.27 51 RCVD_IN_MSPIKE_H5 21329 4.65 3.02 5.24 52 XM_DKIMWhitelistDomains 20751 3.74 0.02 5.09 53 XM_H_Long_From01 19168 4.92 5.50 4.71 54 TR_XM_DK_Bayes2 18952 3.54 0.48 4.65 55 XM_B_SpammyWords3 18076 6.91 13.71 4.44 56 T_TooManySym_01 18012 4.01 2.87 4.42 57 XM_DK_Undo_02 17875 14.28 41.48 4.39 58 MIME_QP_LONG_LINE 17695 3.93 2.78 4.34 59 TM2_M_VERY_LONG_WORD 17520 4.40 4.67 4.30 60 TR_XM_SpammyWords4 17377 6.08 11.06 4.27 61 HTML_IMAGE_RATIO_02 16907 4.81 6.61 4.15 62 XM_H_GMP 16651 4.63 6.11 4.09 63 MPART_ALT_DIFF 16070 4.61 6.44 3.94 64 RCVD_IN_VALIDITY_SAFE 14985 3.20 1.89 3.68 65 HTML_IMAGE_RATIO_06 14092 3.71 4.40 3.46 66 XM_PDF 14064 2.71 0.67 3.45 67 BAYES_20 14004 2.82 1.13 3.44 68 HTML_IMAGE_RATIO_04 13808 3.59 4.15 3.39 69 RCVD_IN_MSPIKE_H4 13322 3.12 2.72 3.27 70 BAYES_99 13272 10.65 30.99 3.26 71 BAYES_80 13232 4.77 8.95 3.25 72 XM_B_SpammyTLD 13173 3.54 4.38 3.23 73 XM_UncommonTLD01 12767 3.79 5.59 3.13 74 T_REMOTE_IMAGE 12226 2.66 1.71 3.00 75 RCVD_IN_VALIDITY_CERTIFIED 12154 2.49 1.15 2.98 76 RELAYCOUNTRY_META 11650 6.28 15.70 2.86 77 XMNumbers 10758 2.87 3.50 2.64 78 BOTNET_IPINHOSTNAME 10649 5.10 11.93 2.61 79 BAYES_999 10486 8.13 23.43 2.57 80 KHOP_HELO_FCRDNS 10303 2.48 2.36 2.53 81 RCVD_IN_IADB_LISTED 10204 2.33 1.83 2.50 82 T_TooManySym_02 9293 1.92 0.94 2.28 83 RCVD_IN_IADB_SPF 9095 2.04 1.50 2.23 84 MIME_HTML_MOSTLY 8967 2.66 3.90 2.20 85 MAILING_LIST_MULTI 8895 2.15 2.04 2.18 86 XM_Body_Dirty_Words 8753 3.16 5.93 2.15 87 BAYES_95 8247 2.88 5.23 2.02 88 RCVD_IN_IADB_SENDERID 8215 1.84 1.34 2.02 89 HTML_MIME_NO_HTML_TAG 8120 1.87 1.54 1.99 90 DKIM_INVALID 7938 3.17 6.53 1.95 91 RCVD_IN_IADB_DK 7913 1.78 1.35 1.94 92 MIME_HTML_ONLY_MULTI 7903 2.26 3.15 1.94 93 HTML_IMAGE_RATIO_08 7789 2.28 3.28 1.91 94 BAYES_05 7441 1.48 0.54 1.83 95 TM2_M_URI_OPT_OUT 7170 2.17 3.30 1.76 96 INVALID_MSGID 7132 1.35 0.26 1.75 97 TooManyTo_002 6787 1.36 0.50 1.67 98 TR_XM_DKIM_Undo 6712 8.87 28.72 1.65 99 XM_B_URI_Unicode 6555 1.96 2.91 1.61 100 RCVD_IN_IADB_VOUCHED 6460 1.47 1.14 1.59 101 TO_MALFORMED 6457 1.17 0.02 1.58 102 MSGID_NOFQDN1 6410 1.16 0.01 1.57 103 TR_XM_SpammyRelay 6253 4.12 11.23 1.53 104 XM_DK_Undo_01 6041 1.51 1.57 1.48 105 XM_CamelCaseFrm001 5916 1.92 3.19 1.45 106 XMDiploma_00 5752 1.88 3.18 1.41 107 XM_SendGrid 5659 1.42 1.49 1.39 108 TR_XM_PhishingBody 5654 2.10 4.07 1.39 109 URI_HEX 5545 1.40 1.52 1.36 110 TR_XM_UnparsRelay 5312 3.32 8.85 1.30 111 MIME_CHARSET_FARAWAY 5230 1.33 1.45 1.28 112 TR_Symld_Words 5213 1.18 0.91 1.28 113 T_XMDrugObfuBody_14 5183 2.23 4.86 1.27 114 T_XMDrugObfuBody_08 5139 1.86 3.52 1.26 115 FROM_EXCESS_BASE64 5110 1.38 1.71 1.25 116 TR_XM_SpammyWords5 5108 1.97 3.95 1.25 117 UNTRUSTED_Relay 5106 2.72 6.75 1.25 118 TR_DCC_Bayes_99 5087 6.58 21.26 1.25 119 CHARSET_FARAWAY_HEADER 4952 1.24 1.30 1.22 120 XM_B_Investor 4808 2.02 4.31 1.18 121 SUBJ_ALL_CAPS 4689 1.40 2.09 1.15 122 XM_B_Unsub2 4689 1.72 3.27 1.15 123 RCVD_IN_IADB_OPTIN 4582 1.04 0.81 1.12 124 URI_NOVOWEL 4447 1.14 1.27 1.09 125 TooManyTo_003 4372 0.89 0.39 1.07 126 XM_GoogleGroups 4263 1.03 0.98 1.05 127 IN_HORDE_ADDRESS_BOOK 4134 0.78 0.14 1.01 128 XM_SPF_SoftFail 4011 1.53 3.02 0.98 129 XMBdyGiftCard01 3776 0.98 1.11 0.93 130 TR_XM_DK_SendGrid 3747 0.91 0.87 0.92 131 RCVD_IN_MSPIKE_BL 3714 2.14 5.51 0.91 132 TR_XM_MSPIKECOMBO 3711 2.14 5.51 0.91 133 T_XMDrugObfuBody_00 3693 1.13 1.73 0.91 134 XMCapTrack 3686 0.83 0.63 0.90 135 T_TooManySym_03 3658 0.70 0.16 0.90 136 XMLngstWrd_00 3600 0.97 1.21 0.88 137 HELO_NODOT 3574 0.69 0.16 0.88 138 HELO_NO_DOMAIN 3567 0.68 0.15 0.88 139 XM_ShortIntro_01 3515 0.76 0.49 0.86 140 XMGenDplmaNmb 3462 1.10 1.78 0.85 141 BOTNET 3420 3.48 10.74 0.84 142 XM_UB50 3366 1.47 3.24 0.83 143 XMGappySubj_01 3264 0.63 0.16 0.80 144 TooManyTo_004 3233 0.66 0.31 0.79 145 TVD_RCVD_IP 3198 0.84 0.97 0.79 146 XMBrknScrpt_02 3043 0.94 1.48 0.75 147 RCVD_IN_MSPIKE_L3 3038 1.40 3.18 0.75 148 TVD_SPACE_RATIO 2931 0.58 0.18 0.72 149 XMSexyCombo_05 2876 1.62 4.15 0.71 150 FROM_GOV_DKIM_AU 2840 0.62 0.39 0.70 151 T_FILL_THIS_FORM_SHORT 2702 1.02 1.99 0.66 152 XM_H_Long_From02 2693 1.06 2.16 0.66 153 XMLngstWrd_01 2691 0.67 0.70 0.66 154 DKIM_ADSP_CUSTOM_MED 2644 0.75 1.03 0.65 155 XM_H_PHPMailer 2594 0.57 0.40 0.64 156 TooManyTo_005 2563 0.53 0.27 0.63 157 XMBSHREFv2 2504 0.59 0.54 0.61 158 XM_OfRef6 2498 1.22 2.89 0.61 159 T_XMHurry_00 2463 1.07 2.34 0.60 160 HTTPS_HTTP_MISMATCH 2406 0.74 1.15 0.59 161 RCVD_IN_BL_SPAMCOP_NET 2398 3.69 12.22 0.59 162 TR_MetaPhish_Combo_01 2341 0.61 0.71 0.57 163 RELAYCOUNTRY_CA 2337 1.71 4.82 0.57 164 XMStockSpam_06 2233 1.17 2.88 0.55 165 RELAYCOUNTRY_GB 2191 0.65 0.97 0.54 166 XMPhish30 2185 0.89 1.86 0.54 167 TR_XM_Base64_M1 2169 0.55 0.60 0.53 168 T_OBFU_PDF_ATTACH 2161 0.43 0.15 0.53 169 SpammyFromTLD_01 2147 0.81 1.61 0.53 170 T_Symld_Words_02 2136 0.63 0.93 0.52 171 HTML_IMAGE_ONLY_32 2135 0.43 0.16 0.52 172 MPART_ALT_DIFF_COUNT 2102 0.71 1.26 0.52 173 RCVD_IN_PBL 2093 0.69 1.19 0.51 174 RELAYCOUNTRY_AU 2054 1.14 2.87 0.50 175 HTML_IMAGE_ONLY_20 2000 0.66 1.12 0.49 176 TO_NO_BRKTS_HTML_ONLY 1968 0.39 0.12 0.48 177 XMLngstWrd_02 1908 0.49 0.55 0.47 178 XMNoVowels 1903 0.47 0.49 0.47 179 MSGID_FROM_MTA_HEADER 1876 0.46 0.46 0.46 180 XM_B_SpammyWords4 1867 0.98 2.41 0.46 181 XM_B_COPY_HTML 1823 0.68 1.31 0.45 182 FORGED_GMAIL_RCVD 1776 0.48 0.61 0.44 183 XM_B_DNDMA 1775 0.59 1.02 0.44 184 TR_XM_SpammyWords3 1762 1.28 3.60 0.43 185 LongTLD 1752 0.50 0.69 0.43 186 XMSlimDrugH 1751 0.53 0.81 0.43 187 NML_ADSP_CUSTOM_MED 1729 0.56 0.92 0.42 188 PLING_QUERY 1724 0.50 0.72 0.42 189 XM_ProductURIs 1720 0.59 1.06 0.42 190 HTML_TAG_BALANCE_BODY 1703 0.57 1.00 0.42 191 SpammyFromTLD_02 1684 0.82 1.95 0.41 192 TR_XM_SpammyWords2 1650 2.96 9.99 0.41 193 XMPhish14 1619 0.49 0.74 0.40 194 XMGappySubj_02 1611 0.30 0.04 0.40 195 TR_XM_GMP_MSPIKE_UNDO2 1568 0.37 0.31 0.38 196 XMBody_95 1524 0.34 0.23 0.37 197 XMBody_17 1506 0.77 1.86 0.37 198 HTML_IMAGE_ONLY_28 1438 0.35 0.35 0.35 199 URI_TRY_3LD 1407 0.72 1.75 0.35 200 T_TVD_MIME_NO_HEADERS 1390 0.26 0.04 0.34 ----------------------------------------------------------------------