Email: 494066 Autolearn: 0 AvgScore: 5.33 AvgScanTime: 1.29 sec Spam: 160111 Autolearn: 0 AvgScore: 14.64 AvgScanTime: 1.43 sec Ham: 333955 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 1.22 sec Time Spent Running SA: 177.10 hours Time Spent Processing Spam: 63.51 hours Time Spent Processing Ham: 113.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 159872 99.65 99.85 99.55 2 HTML_MESSAGE 154423 90.62 96.45 87.82 3 DKIM_SIGNED 142741 82.42 89.15 79.19 4 RELAYCOUNTRY_US 132914 82.63 83.01 82.45 5 XM_DK_Pass 130849 79.06 81.72 77.79 6 DKIM_VALID 129588 78.09 80.94 76.73 7 XM_B_Unicode 128197 73.68 80.07 70.62 8 DCC_CHECK 114090 48.51 71.26 37.61 9 XM_B_SpammyWords 113778 54.04 71.06 45.88 10 DKIM_VALID_AU 100867 62.86 63.00 62.80 11 XMListUnsubscribeExists 98594 54.26 61.58 50.75 12 XM_B_Unicode3 72830 42.56 45.49 41.16 13 LOC_TINY_FONT_1 71257 35.02 44.50 30.47 14 XM_B_SpammyWords2 68751 27.34 42.94 19.86 15 XM_DK_Undo_02 64726 16.55 40.43 5.10 16 BAYES_50 60569 53.31 37.83 60.73 17 MIME_HTML_ONLY 55741 24.86 34.81 20.08 18 HTML_FONT_LOW_CONTRAST 55150 30.68 34.44 28.88 19 FVGT_m_MULTI_ODD 52477 28.42 32.78 26.34 20 BAYES_99 52235 12.83 32.62 3.34 21 XMSubLong 50677 27.25 31.65 25.13 22 DKIM_VALID_EF 50444 31.14 31.51 30.97 23 DCC_CHECK_NEGATIVE 45939 51.42 28.69 62.31 24 T_KAM_HTML_FONT_INVALID 45637 26.54 28.50 25.59 25 TR_XM_DKIM_Undo 45195 10.65 28.23 2.23 26 BAYES_999 40470 9.83 25.28 2.43 27 XM_B_Unsub 34313 13.42 21.43 9.58 28 TR_DCC_Bayes_99 34089 7.75 21.29 1.25 29 T_TM2_M_HEADER_IN_MSG 34072 26.49 21.28 28.98 30 XM_Multi_Part_URI 33408 16.61 20.87 14.57 31 TR_XM_BayesUnsub 33182 11.91 20.72 7.68 32 TR_XM_DK_Unsub 32813 16.16 20.49 14.08 33 RCVD_IN_MSPIKE_H2 30381 17.45 18.97 16.73 34 RELAYCOUNTRY_META 30100 8.49 18.80 3.55 35 UNPARSEABLE_RELAY 26593 13.17 16.61 11.52 36 TR_MAX_INTL_RELAY 25600 9.69 15.99 6.67 37 XM_B_SpammyWords3 24219 9.07 15.13 6.16 38 TR_XM_SpammyRelay 23770 6.11 14.85 1.92 39 XM_B_Phish_Phrases 22544 8.28 14.08 5.51 40 FSL_BULK_SIG 21559 7.31 13.47 4.36 41 LOTS_OF_MONEY 21055 8.43 13.15 6.17 42 TR_XM_SpammyWords2 20158 4.43 12.59 0.51 43 TR_XM_SpammyWords4 19220 6.68 12.00 4.13 44 BOTNET 19013 4.79 11.87 1.39 45 RCVD_IN_MSPIKE_WL 18596 18.54 11.61 21.86 46 RCVD_IN_BL_SPAMCOP_NET 17304 3.98 10.81 0.70 47 BOTNET_IPINHOSTNAME 17010 5.62 10.62 3.22 48 BAYES_80 16272 6.09 10.16 4.14 49 XM_UncommonTLD01 15281 5.72 9.54 3.88 50 TR_XM_UnparsRelay 14681 4.16 9.17 1.75 51 BAYES_60 13806 8.01 8.62 7.71 52 XM_Evil_Numbers_Gen 13245 8.76 8.27 8.99 53 DKIM_INVALID 13153 4.33 8.21 2.47 54 XMNumbers 12039 4.65 7.52 3.28 55 RCVD_IN_MSPIKE_BL 11788 3.37 7.36 1.45 56 TR_XM_MSPIKECOMBO 11713 3.35 7.32 1.45 57 TR_XM_SpammyWords5 11541 3.35 7.21 1.49 58 T_TooManySym_01 10898 6.40 6.81 6.21 59 XM_B_PhoneNumber 10680 8.94 6.67 10.03 60 UNTRUSTED_Relay 10546 3.10 6.59 1.43 61 LotsOfNums_01 10432 7.98 6.52 8.68 62 XM_B_Investor 10203 3.16 6.37 1.63 63 XMSubMetaSx_00 9813 4.38 6.13 3.54 64 XM_H_GMP 9524 5.56 5.95 5.37 65 TR_XM_SPAMCOP 9194 2.03 5.74 0.25 66 RELAYCOUNTRY_CA 9104 2.32 5.69 0.71 67 MPART_ALT_DIFF 8828 5.16 5.51 4.99 68 HTML_IMAGE_RATIO_02 8710 4.81 5.44 4.51 69 BAYES_95 8664 3.46 5.41 2.53 70 XM_H_Long_From01 8271 5.79 5.17 6.09 71 RCVD_IN_MSPIKE_H3 8206 8.31 5.13 9.84 72 XM_Body_Dirty_Words 8202 3.21 5.12 2.29 73 TR_XM_PhishingBody 8113 2.79 5.07 1.70 74 TR_XM_SpammyWords3 7987 2.02 4.99 0.59 75 XM_B_SpammyTLD 7738 3.69 4.83 3.14 76 TR_XM_INV_DKIM 7632 1.55 4.77 0.01 77 RELAYCOUNTRY_FR 7342 1.69 4.59 0.30 78 T_XMDrugObfuBody_14 6968 2.91 4.35 2.21 79 HTML_IMAGE_RATIO_04 6942 4.68 4.34 4.85 80 XM_SPF_SoftFail 6791 2.24 4.24 1.28 81 XMStrtUSub 6594 4.63 4.12 4.88 82 RCVD_IN_MSPIKE_L3 6592 2.18 4.12 1.25 83 TR_XM_RelayPhish 6331 1.34 3.95 0.09 84 MIME_HEADER_CTYPE_ONLY 5904 1.79 3.69 0.88 85 TR_XM_SpoofStaff 5874 1.27 3.67 0.12 86 XMSpoofStaff2 5863 1.27 3.66 0.12 87 MIME_HTML_MOSTLY 5863 3.08 3.66 2.80 88 TooManyTo_001 5513 6.52 3.44 8.00 89 HTML_IMAGE_RATIO_06 5497 3.51 3.43 3.54 90 RCVD_IN_MSPIKE_H5 5429 6.11 3.39 7.41 91 T_XMDrugObfuBody_08 5412 2.09 3.38 1.46 92 XMSexyCombo_05 5388 1.91 3.37 1.21 93 TM2_M_URI_OPT_OUT 5126 2.32 3.20 1.90 94 XMDiploma_00 5098 2.28 3.18 1.84 95 HTML_TAG_BALANCE_HEAD 5071 1.06 3.17 0.06 96 XM_B_SpammyWords4 5057 1.84 3.16 1.20 97 HTML_IMAGE_RATIO_08 4988 2.83 3.12 2.69 98 XM_B_Unsub2 4969 2.37 3.10 2.02 99 RCVD_IN_MSPIKE_H4 4961 4.12 3.10 4.61 100 XM_CamelCaseFrm001 4931 2.51 3.08 2.24 101 TM2_M_VERY_LONG_WORD 4905 1.96 3.06 1.43 102 MIME_QP_LONG_LINE 4896 4.77 3.06 5.59 103 J_WEEDS_E 4863 0.99 3.04 0.01 104 TR_XM_SpoofStaff4 4847 1.05 3.03 0.10 105 J_WEEDS_I 4840 0.99 3.02 0.01 106 J_WEEDS_R 4839 0.99 3.02 0.01 107 J_WEEDS_T 4839 0.99 3.02 0.01 108 J_WEEDS_N 4835 0.99 3.02 0.01 109 J_WEEDS_D 4835 0.99 3.02 0.01 110 J_WEEDS_U 4806 0.97 3.00 0.00 111 TR_XM_SpoofStaff2 4802 0.97 3.00 0.00 112 J_WEEDS_O 4786 0.97 2.99 0.00 113 J_WEEDS_L 4785 0.97 2.99 0.00 114 J_WEEDS_A 4785 0.97 2.99 0.00 115 J_WEEDS_M 4785 0.97 2.99 0.00 116 J_WEEDS_K 4783 0.97 2.99 0.00 117 J_WEEDS_S 4783 0.97 2.99 0.00 118 J_WEEDS_C 4783 0.97 2.99 0.00 119 J_WEEDS_P 4782 0.97 2.99 0.00 120 J_WEEDS_Y 4781 0.97 2.99 0.00 121 J_WEEDS_H 4781 0.97 2.99 0.00 122 J_WEEDS_B 4780 0.97 2.99 0.00 123 J_WEEDS_X 4779 0.97 2.98 0.00 124 J_WEEDS_V 4779 0.97 2.98 0.00 125 J_WEEDS_W 4779 0.97 2.98 0.00 126 HREF_EMPTY_XAUTHED 4771 0.97 2.98 0.00 127 HREF_EMPTY_XANTIABUSE 4770 0.97 2.98 0.00 128 XM_OfRef6 4756 1.47 2.97 0.75 129 TR_XM_SB_Phish1 4741 0.96 2.96 0.00 130 TR_XM_NoHeaderRelay 4506 1.03 2.81 0.18 131 SpammyFromTLD_01 4370 1.39 2.73 0.75 132 XM_UB50 4351 1.53 2.72 0.96 133 ALL_TRUSTED 4124 10.64 2.58 14.51 134 XM_URI_RBL 4104 1.11 2.56 0.41 135 XM_B_URI_Unicode 3976 2.07 2.48 1.87 136 HTML_MIME_NO_HTML_TAG 3965 2.84 2.48 3.01 137 MIME_HTML_ONLY_MULTI 3938 2.55 2.46 2.60 138 TR_XM_MSPIKECOMBO2 3906 0.87 2.44 0.12 139 RELAYCOUNTRY_AU 3858 1.15 2.41 0.55 140 TR_Symld_Words 3780 1.85 2.36 1.61 141 USER_IN_DEF_DKIM_WL 3720 10.25 2.32 14.05 142 BAYES_40 3639 4.38 2.27 5.39 143 RCVD_IN_MSPIKE_L4 3492 0.83 2.18 0.18 144 RCVD_IN_VALIDITY_RPBL 3383 0.71 2.11 0.03 145 XMBody_17 3375 0.95 2.11 0.39 146 T_FILL_THIS_FORM_SHORT 3325 1.31 2.08 0.94 147 BOTNET_NORDNS 3195 0.66 2.00 0.01 148 SUBJ_ALL_CAPS 3186 1.62 1.99 1.44 149 XMClaimOffer 3099 0.75 1.94 0.19 150 HTTPS_HTTP_MISMATCH 2937 1.20 1.83 0.89 151 XMStockSpam_06 2921 1.47 1.82 1.30 152 T_XMHurry_00 2916 0.99 1.82 0.60 153 MAILING_LIST_MULTI 2889 2.84 1.80 3.33 154 XMGenDplmaNmb 2869 1.36 1.79 1.16 155 FROM_EXCESS_BASE64 2815 1.66 1.76 1.61 156 RCVD_IN_VALIDITY_SAFE 2807 3.47 1.75 4.30 157 XM_H_Long_From02 2783 1.06 1.74 0.73 158 SpammyFromTLD_02 2745 0.89 1.71 0.50 159 RCVD_IN_PSBL 2718 0.58 1.70 0.04 160 KHOP_HELO_FCRDNS 2660 1.26 1.66 1.07 161 XM_B_Phish66 2616 0.75 1.63 0.33 162 RCVD_IN_IADB_LISTED 2609 3.05 1.63 3.74 163 XM_SendGrid 2607 1.54 1.63 1.49 164 HTML_IMAGE_ONLY_20 2591 0.88 1.62 0.53 165 XMPhish30 2588 0.91 1.62 0.57 166 TR_XM_MaxSPIKE 2555 0.56 1.60 0.06 167 URI_NOVOWEL 2554 1.30 1.60 1.15 168 T_XMDrugObfuBody_00 2446 1.13 1.53 0.93 169 DKIM_ADSP_NXDOMAIN 2385 0.67 1.49 0.27 170 URI_HEX 2328 1.29 1.45 1.22 171 T_REMOTE_IMAGE 2324 3.01 1.45 3.76 172 XMBrknScrpt_02 2309 1.14 1.44 0.99 173 XM_DK_Undo_01 2217 1.97 1.38 2.25 174 RCVD_IN_IADB_SPF 2213 2.65 1.38 3.26 175 XM_ProductURIs 2209 0.99 1.38 0.80 176 MultiRelay_CC 2174 0.54 1.36 0.15 177 XM_B_DNDMA 2130 0.74 1.33 0.45 178 BAYES_20 2123 3.10 1.33 3.95 179 RCVD_IN_IADB_DK 2037 2.31 1.27 2.81 180 TR_XM_GMP_BULK_SIG 2020 0.48 1.26 0.10 181 RCVD_IN_IADB_SENDERID 2017 2.38 1.26 2.92 182 XM_B_SEO 1998 0.53 1.25 0.18 183 RCVD_IN_VALIDITY_CERTIFIED 1985 2.99 1.24 3.83 184 XMHTML_After_End 1971 0.65 1.23 0.37 185 TR_LOTS_OF_MONEY3 1958 0.60 1.22 0.31 186 URI_TRY_3LD 1951 0.80 1.22 0.60 187 T_Symld_Words_02 1901 0.89 1.19 0.74 188 XM_UB99 1899 0.38 1.19 0.00 189 XMBdyGiftCard01 1879 1.16 1.17 1.15 190 DKIM_ADSP_CUSTOM_MED 1863 0.87 1.16 0.73 191 XMBody_78 1861 0.59 1.16 0.31 192 BOUNCE_MESSAGE 1839 3.04 1.15 3.95 193 ANY_BOUNCE_MESSAGE 1839 3.04 1.15 3.95 194 TR_XM_SEO4 1814 0.43 1.13 0.09 195 MIXED_HREF_CASE 1782 1.37 1.11 1.50 196 UReplyToMismatch 1758 0.36 1.10 0.00 197 BAYES_05 1723 1.84 1.08 2.21 198 TR_XM_InvalidRelay 1696 0.35 1.06 0.01 199 TR_LOTS_OF_MONEY2 1691 0.53 1.06 0.28 200 T_MONEY_PERCENT 1691 0.53 1.06 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 332442 99.65 99.85 99.55 2 HTML_MESSAGE 293295 90.62 96.45 87.82 3 RELAYCOUNTRY_US 275356 82.63 83.01 82.45 4 DKIM_SIGNED 264465 82.42 89.15 79.19 5 XM_DK_Pass 259777 79.06 81.72 77.79 6 DKIM_VALID 256233 78.09 80.94 76.73 7 XM_B_Unicode 235837 73.68 80.07 70.62 8 DKIM_VALID_AU 209719 62.86 63.00 62.80 9 DCC_CHECK_NEGATIVE 208100 51.42 28.69 62.31 10 BAYES_50 202818 53.31 37.83 60.73 11 XMListUnsubscribeExists 169497 54.26 61.58 50.75 12 XM_B_SpammyWords 153231 54.04 71.06 45.88 13 XM_B_Unicode3 137453 42.56 45.49 41.16 14 DCC_CHECK 125600 48.51 71.26 37.61 15 DKIM_VALID_EF 103422 31.14 31.51 30.97 16 LOC_TINY_FONT_1 101752 35.02 44.50 30.47 17 T_TM2_M_HEADER_IN_MSG 96789 26.49 21.28 28.98 18 HTML_FONT_LOW_CONTRAST 96440 30.68 34.44 28.88 19 FVGT_m_MULTI_ODD 87958 28.42 32.78 26.34 20 T_KAM_HTML_FONT_INVALID 85472 26.54 28.50 25.59 21 XMSubLong 83934 27.25 31.65 25.13 22 RCVD_IN_MSPIKE_WL 73016 18.54 11.61 21.86 23 MIME_HTML_ONLY 67064 24.86 34.81 20.08 24 XM_B_SpammyWords2 66338 27.34 42.94 19.86 25 RCVD_IN_MSPIKE_H2 55854 17.45 18.97 16.73 26 XM_Multi_Part_URI 48651 16.61 20.87 14.57 27 ALL_TRUSTED 48441 10.64 2.58 14.51 28 TR_XM_DK_Unsub 47028 16.16 20.49 14.08 29 USER_IN_DEF_DKIM_WL 46906 10.25 2.32 14.05 30 UNPARSEABLE_RELAY 38477 13.17 16.61 11.52 31 XM_B_PhoneNumber 33502 8.94 6.67 10.03 32 BAYES_00 33375 6.97 0.67 9.99 33 RCVD_IN_MSPIKE_H3 32860 8.31 5.13 9.84 34 XM_B_Unsub 32003 13.42 21.43 9.58 35 XM_Evil_Numbers_Gen 30024 8.76 8.27 8.99 36 LotsOfNums_01 28993 7.98 6.52 8.68 37 TooManyTo_001 26719 6.52 3.44 8.00 38 BAYES_60 25760 8.01 8.62 7.71 39 XM_DKIMWhitelistDomains 25699 5.25 0.14 7.70 40 TR_XM_BayesUnsub 25638 11.91 20.72 7.68 41 RCVD_IN_MSPIKE_H5 24754 6.11 3.39 7.41 42 TR_XM_DK_Bayes 23677 4.93 0.42 7.09 43 TR_XM_DK_Bayes1 23350 4.86 0.42 6.99 44 TR_MAX_INTL_RELAY 22280 9.69 15.99 6.67 45 T_TooManySym_01 20743 6.40 6.81 6.21 46 LOTS_OF_MONEY 20601 8.43 13.15 6.17 47 XM_B_SpammyWords3 20578 9.07 15.13 6.16 48 TR_XM_DK_Bayes2 20351 4.23 0.34 6.09 49 XM_H_Long_From01 20339 5.79 5.17 6.09 50 MIME_QP_LONG_LINE 18672 4.77 3.06 5.59 51 XM_B_Phish_Phrases 18388 8.28 14.08 5.51 52 BAYES_40 17999 4.38 2.27 5.39 53 XM_H_GMP 17936 5.56 5.95 5.37 54 XM_DK_Undo_02 17027 16.55 40.43 5.10 55 MPART_ALT_DIFF 16668 5.16 5.51 4.99 56 XMStrtUSub 16293 4.63 4.12 4.88 57 HTML_IMAGE_RATIO_04 16204 4.68 4.34 4.85 58 RCVD_IN_MSPIKE_H4 15402 4.12 3.10 4.61 59 HTML_IMAGE_RATIO_02 15058 4.81 5.44 4.51 60 FSL_BULK_SIG 14555 7.31 13.47 4.36 61 XM_PDF 14486 3.20 0.83 4.34 62 RCVD_IN_VALIDITY_SAFE 14344 3.47 1.75 4.30 63 BAYES_80 13829 6.09 10.16 4.14 64 TR_XM_SpammyWords4 13777 6.68 12.00 4.13 65 ANY_BOUNCE_MESSAGE 13186 3.04 1.15 3.95 66 BOUNCE_MESSAGE 13184 3.04 1.15 3.95 67 BAYES_20 13177 3.10 1.33 3.95 68 XM_UncommonTLD01 12965 5.72 9.54 3.88 69 RCVD_IN_VALIDITY_CERTIFIED 12801 2.99 1.24 3.83 70 T_REMOTE_IMAGE 12552 3.01 1.45 3.76 71 RCVD_IN_IADB_LISTED 12479 3.05 1.63 3.74 72 RELAYCOUNTRY_META 11866 8.49 18.80 3.55 73 HTML_IMAGE_RATIO_06 11832 3.51 3.43 3.54 74 XMSubMetaSx_00 11819 4.38 6.13 3.54 75 T_TooManySym_02 11560 2.58 0.74 3.46 76 BAYES_99 11166 12.83 32.62 3.34 77 MAILING_LIST_MULTI 11134 2.84 1.80 3.33 78 XMNumbers 10947 4.65 7.52 3.28 79 RCVD_IN_IADB_SPF 10880 2.65 1.38 3.26 80 BOTNET_IPINHOSTNAME 10750 5.62 10.62 3.22 81 XM_B_SpammyTLD 10470 3.69 4.83 3.14 82 HTML_MIME_NO_HTML_TAG 10059 2.84 2.48 3.01 83 RCVD_IN_IADB_SENDERID 9736 2.38 1.26 2.92 84 RCVD_IN_IADB_DK 9372 2.31 1.27 2.81 85 MIME_HTML_MOSTLY 9367 3.08 3.66 2.80 86 HTML_IMAGE_RATIO_08 8989 2.83 3.12 2.69 87 MIME_HTML_ONLY_MULTI 8682 2.55 2.46 2.60 88 RCVD_IN_IADB_VOUCHED 8599 2.06 0.99 2.57 89 BAYES_95 8443 3.46 5.41 2.53 90 DKIM_INVALID 8232 4.33 8.21 2.47 91 BAYES_999 8117 9.83 25.28 2.43 92 XM_Body_Dirty_Words 7664 3.21 5.12 2.29 93 TooManyTo_002 7565 1.70 0.53 2.27 94 XM_DK_Undo_01 7529 1.97 1.38 2.25 95 XM_CamelCaseFrm001 7488 2.51 3.08 2.24 96 TR_XM_DKIM_Undo 7441 10.65 28.23 2.23 97 T_XMDrugObfuBody_14 7389 2.91 4.35 2.21 98 BAYES_05 7386 1.84 1.08 2.21 99 INVALID_MSGID 7158 1.53 0.25 2.14 100 TO_MALFORMED 6803 1.38 0.02 2.04 101 XM_B_Unsub2 6738 2.37 3.10 2.02 102 TR_XM_SpammyRelay 6406 6.11 14.85 1.92 103 TM2_M_URI_OPT_OUT 6331 2.32 3.20 1.90 104 XM_B_URI_Unicode 6254 2.07 2.48 1.87 105 XMDiploma_00 6154 2.28 3.18 1.84 106 RCVD_IN_IADB_OPTIN 5997 1.42 0.65 1.80 107 TR_XM_UnparsRelay 5848 4.16 9.17 1.75 108 TR_XM_PhishingBody 5682 2.79 5.07 1.70 109 XM_B_Investor 5428 3.16 6.37 1.63 110 FROM_EXCESS_BASE64 5390 1.66 1.76 1.61 111 HELO_NODOT 5385 1.25 0.50 1.61 112 HELO_NO_DOMAIN 5378 1.25 0.48 1.61 113 TR_Symld_Words 5373 1.85 2.36 1.61 114 TooManyTo_003 5053 1.16 0.42 1.51 115 MIXED_HREF_CASE 5000 1.37 1.11 1.50 116 TR_XM_SpammyWords5 4989 3.35 7.21 1.49 117 XM_SendGrid 4984 1.54 1.63 1.49 118 T_XMDrugObfuBody_08 4890 2.09 3.38 1.46 119 RCVD_IN_MSPIKE_BL 4856 3.37 7.36 1.45 120 TR_XM_MSPIKECOMBO 4854 3.35 7.32 1.45 121 SUBJ_ALL_CAPS 4823 1.62 1.99 1.44 122 HTML_FONT_SIZE_HUGE 4822 1.19 0.67 1.44 123 TM2_M_VERY_LONG_WORD 4787 1.96 3.06 1.43 124 UNTRUSTED_Relay 4783 3.10 6.59 1.43 125 T_TooManySym_03 4753 1.04 0.23 1.42 126 BOTNET 4632 4.79 11.87 1.39 127 IN_HORDE_ADDRESS_BOOK 4485 0.95 0.12 1.34 128 XM_GoogleGroups 4405 1.13 0.73 1.32 129 XMStockSpam_06 4350 1.47 1.82 1.30 130 XM_SPF_SoftFail 4291 2.24 4.24 1.28 131 XMGappySubj_01 4218 0.95 0.31 1.26 132 RCVD_IN_MSPIKE_L3 4181 2.18 4.12 1.25 133 TR_DCC_Bayes_99 4180 7.75 21.29 1.25 134 URI_HEX 4067 1.29 1.45 1.22 135 XMSexyCombo_05 4051 1.91 3.37 1.21 136 XM_B_SpammyWords4 4011 1.84 3.16 1.20 137 XMGenDplmaNmb 3874 1.36 1.79 1.16 138 URI_NOVOWEL 3856 1.30 1.60 1.15 139 XMBdyGiftCard01 3844 1.16 1.17 1.15 140 TooManyTo_004 3737 0.87 0.34 1.12 141 FROM_GOV_DKIM_AU 3735 0.82 0.20 1.12 142 XMCapTrack 3645 0.90 0.51 1.09 143 KHOP_HELO_FCRDNS 3565 1.26 1.66 1.07 144 TR_XM_DK_SendGrid 3403 0.99 0.92 1.02 145 XMBrknScrpt_02 3299 1.14 1.44 0.99 146 XM_UB50 3211 1.53 2.72 0.96 147 TR_MetaPhish_Combo_01 3208 0.91 0.81 0.96 148 T_FILL_THIS_FORM_SHORT 3141 1.31 2.08 0.94 149 TVD_RCVD_IP 3132 0.92 0.90 0.94 150 T_XMDrugObfuBody_00 3118 1.13 1.53 0.93 151 TooManyTo_005 3109 0.73 0.31 0.93 152 TVD_SPACE_RATIO 3044 0.69 0.23 0.91 153 HTTPS_HTTP_MISMATCH 2977 1.20 1.83 0.89 154 MIME_HEADER_CTYPE_ONLY 2955 1.79 3.69 0.88 155 XM_ShortIntro_01 2930 0.78 0.56 0.88 156 TR_XM_Base64_M1 2815 0.89 0.99 0.84 157 RELAYCOUNTRY_GB 2709 0.83 0.86 0.81 158 XM_ProductURIs 2671 0.99 1.38 0.80 159 XM_H_PHPMailer 2587 0.76 0.72 0.77 160 XMNoVowels 2538 0.71 0.59 0.76 161 XM_OfRef6 2516 1.47 2.97 0.75 162 SpammyFromTLD_01 2511 1.39 2.73 0.75 163 T_Symld_Words_02 2472 0.89 1.19 0.74 164 XM_H_Long_From02 2440 1.06 1.74 0.73 165 DKIM_ADSP_CUSTOM_MED 2429 0.87 1.16 0.73 166 XM_B_COPY_HTML 2396 0.82 1.02 0.72 167 RELAYCOUNTRY_CA 2381 2.32 5.69 0.71 168 RCVD_IN_BL_SPAMCOP_NET 2341 3.98 10.81 0.70 169 XMBSHREFv2 2281 0.55 0.27 0.68 170 XMGappySubj_02 2076 0.44 0.07 0.62 171 HTML_TAG_BALANCE_BODY 2032 0.68 0.83 0.61 172 TO_NO_BRKTS_HTML_ONLY 2024 0.55 0.45 0.61 173 URI_TRY_3LD 2010 0.80 1.22 0.60 174 T_XMHurry_00 1990 0.99 1.82 0.60 175 TR_XM_SpammyWords3 1986 2.02 4.99 0.59 176 T_OBFU_PDF_ATTACH 1974 0.44 0.11 0.59 177 XMSlimDrugH 1948 0.64 0.75 0.58 178 XMMoneyMeta_00 1899 0.63 0.75 0.57 179 XMPhish30 1898 0.91 1.62 0.57 180 RELAYCOUNTRY_AU 1847 1.15 2.41 0.55 181 MPART_ALT_DIFF_COUNT 1802 0.65 0.88 0.54 182 T_TooManySym_04 1799 0.38 0.05 0.54 183 HTML_IMAGE_ONLY_20 1772 0.88 1.62 0.53 184 XMSubMetaI_00 1752 0.64 0.89 0.52 185 TR_XM_SpammyWords2 1706 4.43 12.59 0.51 186 XMPhish14 1695 0.66 0.98 0.51 187 SpammyFromTLD_02 1665 0.89 1.71 0.50 188 SHORT_HELO_AND_INLINE_IMAGE 1665 0.38 0.14 0.50 189 MSGID_FROM_MTA_HEADER 1638 0.46 0.40 0.49 190 PLING_QUERY 1589 0.59 0.84 0.48 191 XMSubMetaSxObfu_03 1533 0.46 0.47 0.46 192 NML_ADSP_CUSTOM_MED 1504 0.61 0.96 0.45 193 XM_B_DNDMA 1504 0.74 1.33 0.45 194 XMSolicitRefs_0 1477 0.44 0.43 0.44 195 HTML_IMAGE_ONLY_32 1460 0.37 0.23 0.44 196 FORGED_GMAIL_RCVD 1435 0.60 0.95 0.43 197 LongTLD 1422 0.48 0.59 0.43 198 T_MANY_PILL_PRICE 1421 0.29 0.01 0.43 199 TR_XM_GMP_MSPIKE_UNDO2 1392 0.34 0.19 0.42 200 HTML_IMAGE_ONLY_28 1382 0.38 0.30 0.41 ----------------------------------------------------------------------