Email: 499043 Autolearn: 0 AvgScore: 4.98 AvgScanTime: 1.38 sec Spam: 155869 Autolearn: 0 AvgScore: 13.54 AvgScanTime: 1.60 sec Ham: 343174 Autolearn: 0 AvgScore: 1.09 AvgScanTime: 1.28 sec Time Spent Running SA: 191.61 hours Time Spent Processing Spam: 69.28 hours Time Spent Processing Ham: 122.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 155647 99.64 99.86 99.55 2 HTML_MESSAGE 150914 90.40 96.82 87.48 3 DKIM_SIGNED 142069 80.13 91.15 75.13 4 XM_DK_Pass 130815 77.07 83.93 73.95 5 XM_B_Unicode 129886 75.57 83.33 72.05 6 RELAYCOUNTRY_US 129615 82.23 83.16 81.80 7 DKIM_VALID 129595 76.17 83.14 73.00 8 DCC_CHECK 113852 48.73 73.04 37.68 9 XM_B_SpammyWords 107272 54.02 68.82 47.29 10 XMListUnsubscribeExists 101646 54.39 65.21 49.47 11 DKIM_VALID_AU 101035 62.15 64.82 60.93 12 LOC_TINY_FONT_1 74874 36.07 48.04 30.64 13 XM_B_Unicode3 72912 44.48 46.78 43.44 14 BAYES_50 64183 53.55 41.18 59.17 15 XM_DK_Undo_02 64143 16.80 41.15 5.74 16 HTML_FONT_LOW_CONTRAST 61940 32.26 39.74 28.87 17 XM_B_SpammyWords2 59287 26.14 38.04 20.74 18 FVGT_m_MULTI_ODD 56869 29.26 36.49 25.98 19 DKIM_VALID_EF 49696 29.98 31.88 29.11 20 BAYES_99 48210 12.18 30.93 3.67 21 T_KAM_HTML_FONT_INVALID 46348 24.21 29.74 21.70 22 MIME_HTML_ONLY 45312 22.70 29.07 19.80 23 TR_XM_DKIM_Undo 44743 10.67 28.71 2.48 24 DCC_CHECK_NEGATIVE 41905 51.19 26.88 62.22 25 XMSubLong 39031 24.50 25.04 24.26 26 XM_Multi_Part_URI 37457 17.07 24.03 13.91 27 BAYES_999 36911 9.28 23.68 2.74 28 TR_XM_DK_Unsub 35700 16.65 22.90 13.81 29 XM_B_Unsub 35698 13.51 22.90 9.25 30 TR_XM_BayesUnsub 34419 11.92 22.08 7.30 31 T_TM2_M_HEADER_IN_MSG 33395 28.02 21.43 31.02 32 RCVD_IN_MSPIKE_H2 32778 17.07 21.03 15.28 33 TR_DCC_Bayes_99 32776 7.43 21.03 1.26 34 UNPARSEABLE_RELAY 29254 13.78 18.77 11.51 35 RELAYCOUNTRY_META 26303 8.12 16.88 4.15 36 TR_MAX_INTL_RELAY 23207 9.11 14.89 6.49 37 RCVD_IN_BL_SPAMCOP_NET 22614 5.21 14.51 0.98 38 XM_B_SpammyWords3 20418 7.62 13.10 5.13 39 BOTNET 20116 4.99 12.91 1.40 40 LOTS_OF_MONEY 19617 8.26 12.59 6.29 41 RCVD_IN_MSPIKE_WL 19099 18.56 12.25 21.42 42 FSL_BULK_SIG 18715 6.95 12.01 4.65 43 TR_XM_SpammyRelay 18453 5.09 11.84 2.02 44 TR_XM_SpammyWords4 17303 6.55 11.10 4.48 45 BOTNET_IPINHOSTNAME 17243 5.76 11.06 3.35 46 XM_Evil_Numbers_Gen 15696 9.02 10.07 8.54 47 TR_XM_UnparsRelay 15683 4.28 10.06 1.65 48 TR_XM_SpammyWords2 15509 3.39 9.95 0.42 49 BAYES_80 14614 5.71 9.38 4.05 50 BAYES_60 13954 7.76 8.95 7.22 51 MPART_ALT_DIFF 13668 6.50 8.77 5.48 52 XM_B_Phish_Phrases 13295 6.39 8.53 5.41 53 RCVD_IN_MSPIKE_BL 13217 3.43 8.48 1.13 54 TR_XM_MSPIKECOMBO 13197 3.42 8.47 1.12 55 DKIM_INVALID 12474 3.97 8.00 2.14 56 UNTRUSTED_Relay 12268 3.79 7.87 1.94 57 TR_XM_SPAMCOP 10678 2.33 6.85 0.28 58 HTML_IMAGE_RATIO_02 10156 6.18 6.52 6.02 59 XMSubMetaSx_00 9885 4.16 6.34 3.16 60 XM_B_PhoneNumber 9391 8.21 6.02 9.21 61 XM_H_GMP 9390 5.21 6.02 4.84 62 XM_Body_Dirty_Words 9278 3.69 5.95 2.66 63 XM_UncommonTLD01 9276 4.54 5.95 3.90 64 LotsOfNums_01 9147 9.38 5.87 10.98 65 XMStrtUSub 9062 5.11 5.81 4.79 66 XM_H_Long_From01 8974 5.80 5.76 5.82 67 RELAYCOUNTRY_CA 8817 2.22 5.66 0.66 68 TR_XM_SpammyWords3 8760 2.11 5.62 0.51 69 RCVD_IN_MSPIKE_H3 8550 8.05 5.49 9.21 70 BAYES_95 7977 3.28 5.12 2.44 71 XM_B_Investor 7874 2.57 5.05 1.44 72 T_XMDrugObfuBody_14 7823 3.07 5.02 2.18 73 XM_B_SpammyTLD 7152 3.23 4.59 2.61 74 TR_XM_PhishingBody 6874 2.59 4.41 1.77 75 MIME_HTML_MOSTLY 6739 3.56 4.32 3.21 76 DKIM_ADSP_NXDOMAIN 6715 1.55 4.31 0.30 77 XM_B_Unsub2 6583 2.39 4.22 1.55 78 MIME_QP_LONG_LINE 6551 4.86 4.20 5.17 79 TR_XM_SpammyWords5 6407 2.24 4.11 1.39 80 XM_CamelCaseFrm001 6367 2.73 4.08 2.12 81 XMSexyCombo_05 6260 1.94 4.02 1.00 82 XMNumbers 6166 3.46 3.96 3.24 83 XM_UB50 6153 2.23 3.95 1.44 84 HTML_IMAGE_RATIO_04 6144 6.17 3.94 7.18 85 XMDiploma_00 5991 2.53 3.84 1.93 86 RCVD_IN_MSPIKE_L3 5954 1.83 3.82 0.92 87 XM_OfRef6 5831 1.74 3.74 0.83 88 RCVD_IN_MSPIKE_H5 5341 6.17 3.43 7.42 89 TooManyTo_001 5258 6.01 3.37 7.21 90 XM_SPF_SoftFail 5226 1.81 3.35 1.10 91 RCVD_IN_MSPIKE_H4 5208 4.34 3.34 4.79 92 T_XMDrugObfuBody_08 5093 2.53 3.27 2.20 93 TM2_M_VERY_LONG_WORD 5062 4.69 3.25 5.34 94 TR_XM_INV_DKIM 4921 1.00 3.16 0.01 95 BOTNET_NORDNS 4915 0.99 3.15 0.01 96 RCVD_IN_VALIDITY_RPBL 4912 1.02 3.15 0.05 97 RCVD_IN_MSPIKE_L4 4770 1.08 3.06 0.19 98 HTML_IMAGE_RATIO_06 4673 3.41 3.00 3.59 99 XM_B_URI_Unicode 4559 2.08 2.92 1.70 100 HTML_IMAGE_RATIO_08 4364 2.91 2.80 2.95 101 TM2_M_URI_OPT_OUT 4333 2.29 2.78 2.07 102 T_TooManySym_01 4332 4.83 2.78 5.77 103 MIME_HTML_ONLY_MULTI 4147 2.68 2.66 2.70 104 TR_XM_NoHeaderRelay 3964 0.92 2.54 0.18 105 RELAYCOUNTRY_AU 3932 1.27 2.52 0.70 106 TR_XM_MSPIKECOMBO2 3779 0.83 2.42 0.11 107 XM_URI_RBL 3660 0.94 2.35 0.31 108 XM_H_DKIM_GOOG 3527 0.72 2.26 0.01 109 URI_TRY_3LD 3493 1.18 2.24 0.70 110 T_FILL_THIS_FORM_SHORT 3380 1.35 2.17 0.97 111 T_XMHurry_00 3359 1.07 2.16 0.58 112 XM_H_Long_From02 3242 1.29 2.08 0.93 113 SUBJ_ALL_CAPS 3167 1.69 2.03 1.54 114 XMGenDplmaNmb 3154 1.27 2.02 0.93 115 USER_IN_DEF_DKIM_WL 3073 10.74 1.97 14.72 116 NORDNS_LOW_CONTRAST 3061 0.65 1.96 0.06 117 KHOP_HELO_FCRDNS 3004 2.73 1.93 3.10 118 T_REMOTE_IMAGE 2985 2.83 1.92 3.25 119 RELAYCOUNTRY_FR 2936 0.86 1.88 0.39 120 SpammyFromTLD_02 2928 0.94 1.88 0.52 121 XM_B_SpammyWords4 2901 0.98 1.86 0.59 122 BAYES_40 2896 4.53 1.86 5.74 123 XMBody_17 2844 0.78 1.82 0.31 124 SpammyFromTLD_01 2819 1.08 1.81 0.75 125 XMStockSpam_06 2731 1.61 1.75 1.55 126 MAILING_LIST_MULTI 2681 2.48 1.72 2.83 127 URI_NOVOWEL 2637 1.37 1.69 1.23 128 RCVD_IN_IADB_LISTED 2630 2.69 1.69 3.14 129 SCC_CANSPAM_2 2625 0.53 1.68 0.00 130 T_XMDrugObfuBody_00 2610 1.38 1.67 1.25 131 DIET_1 2582 0.73 1.66 0.30 132 XM_SendGrid 2560 1.51 1.64 1.44 133 RCVD_IN_PSBL 2512 0.52 1.61 0.02 134 FROM_EXCESS_BASE64 2512 1.56 1.61 1.53 135 RCVD_IN_MSPIKE_L5 2473 0.51 1.59 0.02 136 HTML_MIME_NO_HTML_TAG 2386 2.56 1.53 3.03 137 XMPhish30 2379 0.85 1.53 0.54 138 RCVD_IN_VALIDITY_SAFE 2351 3.67 1.51 4.66 139 TR_XM_MaxSPIKE 2267 0.49 1.45 0.05 140 XM_B_COPY_HTML 2205 0.93 1.41 0.71 141 XMBrknScrpt_02 2165 1.07 1.39 0.92 142 TR_LOTS_OF_MONEY3 2165 0.67 1.39 0.34 143 XM_DK_Undo_01 2122 1.60 1.36 1.71 144 URI_HEX 2111 1.24 1.35 1.18 145 RCVD_IN_IADB_SPF 2103 2.34 1.35 2.79 146 HTTPS_HTTP_MISMATCH 2089 0.90 1.34 0.70 147 XM_UB99 2073 0.42 1.33 0.00 148 MPART_ALT_DIFF_COUNT 2073 0.80 1.33 0.55 149 TR_Symld_Words 2014 1.50 1.29 1.59 150 BAYES_20 1995 3.70 1.28 4.80 151 ALL_TRUSTED 1993 10.43 1.28 14.59 152 RCVD_IN_IADB_DK 1940 2.04 1.24 2.39 153 XM_ProductURIs 1925 0.67 1.24 0.41 154 T_MONEY_PERCENT 1921 0.50 1.23 0.16 155 TR_LOTS_OF_MONEY2 1921 0.50 1.23 0.16 156 RCVD_IN_IADB_SENDERID 1906 2.09 1.22 2.49 157 XM_B_SEO 1876 0.60 1.20 0.33 158 TR_XM_GMP_BULK_SIG 1810 0.45 1.16 0.12 159 NO_DNS_FOR_FROM 1808 0.52 1.16 0.22 160 DKIM_ADSP_CUSTOM_MED 1800 0.90 1.15 0.78 161 TR_XM_MaxWHORU 1779 0.48 1.14 0.18 162 XM_B_Phish66 1779 0.60 1.14 0.35 163 RDNS_DYNAMIC 1736 0.45 1.11 0.15 164 XMBdyGiftCard01 1707 1.01 1.10 0.97 165 TR_XM_InvalidRelay 1660 0.34 1.06 0.01 166 HTML_IMAGE_ONLY_20 1650 0.68 1.06 0.51 167 XM_B_DNDMA 1629 0.77 1.05 0.64 168 TR_XM_SEO4 1628 0.49 1.04 0.24 169 HK_RANDOM_REPLYTO 1619 0.38 1.04 0.08 170 XMBody_78 1618 0.58 1.04 0.38 171 RCVD_IN_IADB_VOUCHED 1616 1.80 1.04 2.14 172 TR_MetaPhish_Combo_01 1611 1.32 1.03 1.44 173 TR_XM_RelayPhish 1605 0.38 1.03 0.08 174 NML_ADSP_CUSTOM_MED 1570 0.65 1.01 0.48 175 XMSubMetaI_00 1565 0.67 1.00 0.51 176 XMHTML_After_End 1546 0.56 0.99 0.37 177 MultiRelay_CC 1545 0.45 0.99 0.20 178 TR_XM_DK_SendGrid 1532 1.00 0.98 1.01 179 TR_XM_PHPForged 1517 0.47 0.97 0.24 180 MIXED_HREF_CASE 1498 0.39 0.96 0.14 181 TVD_RCVD_IP 1489 0.94 0.96 0.94 182 TR_Mismatch_TLD_02 1476 0.37 0.95 0.11 183 TR_XM_FormFill2 1472 0.48 0.94 0.26 184 TR_XM_PHPDW 1472 0.46 0.94 0.24 185 XM_UB60 1471 0.37 0.94 0.10 186 RCVD_IN_VALIDITY_CERTIFIED 1459 3.05 0.94 4.01 187 XM_H_PHPOS 1441 0.45 0.92 0.23 188 FORGED_GMAIL_RCVD 1426 0.65 0.91 0.53 189 BOUNCE_MESSAGE 1399 5.36 0.90 7.39 190 ANY_BOUNCE_MESSAGE 1399 5.36 0.90 7.39 191 XM_UB80 1387 0.29 0.89 0.02 192 XMMoneyMeta_00 1383 0.62 0.89 0.49 193 XM_UB999 1376 0.28 0.88 0.00 194 XMSexyCombo_01 1373 0.48 0.88 0.30 195 TM2_M_OBFU_COMMENT 1370 0.59 0.88 0.46 196 SHOPIFY_IMG_NOT_RCVD_SFY 1369 0.41 0.88 0.19 197 RELAYCOUNTRY_RU 1334 0.28 0.86 0.02 198 THIS_AD 1303 0.50 0.84 0.35 199 HDRS_MISSP 1292 0.28 0.83 0.03 200 TM2_M_A_HREF_HREF 1289 0.50 0.83 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 341618 99.64 99.86 99.55 2 HTML_MESSAGE 300221 90.40 96.82 87.48 3 RELAYCOUNTRY_US 280724 82.23 83.16 81.80 4 DKIM_SIGNED 257839 80.13 91.15 75.13 5 XM_DK_Pass 253782 77.07 83.93 73.95 6 DKIM_VALID 250510 76.17 83.14 73.00 7 XM_B_Unicode 247253 75.57 83.33 72.05 8 DCC_CHECK_NEGATIVE 213533 51.19 26.88 62.22 9 DKIM_VALID_AU 209105 62.15 64.82 60.93 10 BAYES_50 203059 53.55 41.18 59.17 11 XMListUnsubscribeExists 169760 54.39 65.21 49.47 12 XM_B_SpammyWords 162304 54.02 68.82 47.29 13 XM_B_Unicode3 149065 44.48 46.78 43.44 14 DCC_CHECK 129320 48.73 73.04 37.68 15 T_TM2_M_HEADER_IN_MSG 106461 28.02 21.43 31.02 16 LOC_TINY_FONT_1 105133 36.07 48.04 30.64 17 DKIM_VALID_EF 99912 29.98 31.88 29.11 18 HTML_FONT_LOW_CONTRAST 99072 32.26 39.74 28.87 19 FVGT_m_MULTI_ODD 89141 29.26 36.49 25.98 20 XMSubLong 83252 24.50 25.04 24.26 21 T_KAM_HTML_FONT_INVALID 74469 24.21 29.74 21.70 22 RCVD_IN_MSPIKE_WL 73500 18.56 12.25 21.42 23 XM_B_SpammyWords2 71161 26.14 38.04 20.74 24 MIME_HTML_ONLY 67962 22.70 29.07 19.80 25 RCVD_IN_MSPIKE_H2 52431 17.07 21.03 15.28 26 USER_IN_DEF_DKIM_WL 50517 10.74 1.97 14.72 27 ALL_TRUSTED 50075 10.43 1.28 14.59 28 XM_Multi_Part_URI 47720 17.07 24.03 13.91 29 TR_XM_DK_Unsub 47379 16.65 22.90 13.81 30 UNPARSEABLE_RELAY 39497 13.78 18.77 11.51 31 LotsOfNums_01 37671 9.38 5.87 10.98 32 BAYES_00 35563 7.34 0.70 10.36 33 XM_B_Unsub 31728 13.51 22.90 9.25 34 RCVD_IN_MSPIKE_H3 31615 8.05 5.49 9.21 35 XM_B_PhoneNumber 31598 8.21 6.02 9.21 36 XM_Evil_Numbers_Gen 29314 9.02 10.07 8.54 37 RCVD_IN_MSPIKE_H5 25453 6.17 3.43 7.42 38 ANY_BOUNCE_MESSAGE 25366 5.36 0.90 7.39 39 BOUNCE_MESSAGE 25364 5.36 0.90 7.39 40 TR_XM_BayesUnsub 25062 11.92 22.08 7.30 41 BAYES_60 24780 7.76 8.95 7.22 42 TooManyTo_001 24750 6.01 3.37 7.21 43 HTML_IMAGE_RATIO_04 24630 6.17 3.94 7.18 44 TR_XM_DK_Bayes 22839 4.72 0.47 6.66 45 TR_XM_DK_Bayes1 22524 4.66 0.47 6.56 46 TR_MAX_INTL_RELAY 22261 9.11 14.89 6.49 47 LOTS_OF_MONEY 21584 8.26 12.59 6.29 48 XM_DKIMWhitelistDomains 21475 4.32 0.05 6.26 49 HTML_IMAGE_RATIO_02 20666 6.18 6.52 6.02 50 XM_H_Long_From01 19972 5.80 5.76 5.82 51 T_TooManySym_01 19784 4.83 2.78 5.77 52 BAYES_40 19695 4.53 1.86 5.74 53 XM_DK_Undo_02 19685 16.80 41.15 5.74 54 TR_XM_DK_Bayes2 19042 3.93 0.36 5.55 55 MPART_ALT_DIFF 18794 6.50 8.77 5.48 56 XM_B_Phish_Phrases 18580 6.39 8.53 5.41 57 TM2_M_VERY_LONG_WORD 18328 4.69 3.25 5.34 58 MIME_QP_LONG_LINE 17727 4.86 4.20 5.17 59 XM_B_SpammyWords3 17590 7.62 13.10 5.13 60 XM_H_GMP 16612 5.21 6.02 4.84 61 BAYES_20 16489 3.70 1.28 4.80 62 XMStrtUSub 16434 5.11 5.81 4.79 63 RCVD_IN_MSPIKE_H4 16432 4.34 3.34 4.79 64 RCVD_IN_VALIDITY_SAFE 15985 3.67 1.51 4.66 65 FSL_BULK_SIG 15954 6.95 12.01 4.65 66 TR_XM_SpammyWords4 15364 6.55 11.10 4.48 67 RELAYCOUNTRY_META 14233 8.12 16.88 4.15 68 BAYES_80 13889 5.71 9.38 4.05 69 RCVD_IN_VALIDITY_CERTIFIED 13752 3.05 0.94 4.01 70 XM_PDF 13669 2.98 0.77 3.98 71 XM_UncommonTLD01 13368 4.54 5.95 3.90 72 BAYES_99 12583 12.18 30.93 3.67 73 HTML_IMAGE_RATIO_06 12321 3.41 3.00 3.59 74 BOTNET_IPINHOSTNAME 11486 5.76 11.06 3.35 75 T_REMOTE_IMAGE 11139 2.83 1.92 3.25 76 XMNumbers 11113 3.46 3.96 3.24 77 MIME_HTML_MOSTLY 11003 3.56 4.32 3.21 78 XMSubMetaSx_00 10858 4.16 6.34 3.16 79 RCVD_IN_IADB_LISTED 10787 2.69 1.69 3.14 80 KHOP_HELO_FCRDNS 10623 2.73 1.93 3.10 81 MAY_BE_FORGED 10545 2.12 0.01 3.07 82 HTML_MIME_NO_HTML_TAG 10387 2.56 1.53 3.03 83 T_TooManySym_02 10261 2.26 0.66 2.99 84 HTML_IMAGE_RATIO_08 10134 2.91 2.80 2.95 85 MAILING_LIST_MULTI 9700 2.48 1.72 2.83 86 RCVD_IN_IADB_SPF 9573 2.34 1.35 2.79 87 BAYES_999 9400 9.28 23.68 2.74 88 MIME_HTML_ONLY_MULTI 9249 2.68 2.66 2.70 89 XM_Body_Dirty_Words 9127 3.69 5.95 2.66 90 XM_B_SpammyTLD 8963 3.23 4.59 2.61 91 BAYES_05 8742 1.94 0.61 2.55 92 RCVD_IN_IADB_SENDERID 8534 2.09 1.22 2.49 93 TR_XM_DKIM_Undo 8526 10.67 28.71 2.48 94 BAYES_95 8369 3.28 5.12 2.44 95 RCVD_IN_IADB_DK 8219 2.04 1.24 2.39 96 TooManyTo_002 7974 1.75 0.48 2.32 97 T_XMDrugObfuBody_08 7543 2.53 3.27 2.20 98 XMLngstWrd_00 7525 1.63 0.40 2.19 99 T_XMDrugObfuBody_14 7496 3.07 5.02 2.18 100 RCVD_IN_IADB_VOUCHED 7353 1.80 1.04 2.14 101 DKIM_INVALID 7329 3.97 8.00 2.14 102 XM_CamelCaseFrm001 7267 2.73 4.08 2.12 103 TM2_M_URI_OPT_OUT 7110 2.29 2.78 2.07 104 INVALID_MSGID 7079 1.51 0.29 2.06 105 TR_XM_SpammyRelay 6932 5.09 11.84 2.02 106 TO_MALFORMED 6917 1.39 0.01 2.02 107 UNTRUSTED_Relay 6655 3.79 7.87 1.94 108 XMDiploma_00 6620 2.53 3.84 1.93 109 MIME_CHARSET_FARAWAY 6591 1.41 0.29 1.92 110 CHARSET_FARAWAY_HEADER 6256 1.29 0.11 1.82 111 TR_XM_PhishingBody 6073 2.59 4.41 1.77 112 XM_DK_Undo_01 5878 1.60 1.36 1.71 113 XM_B_URI_Unicode 5841 2.08 2.92 1.70 114 TR_XM_UnparsRelay 5674 4.28 10.06 1.65 115 TR_Symld_Words 5453 1.50 1.29 1.59 116 XM_B_Unsub2 5324 2.39 4.22 1.55 117 XMStockSpam_06 5309 1.61 1.75 1.55 118 SUBJ_ALL_CAPS 5275 1.69 2.03 1.54 119 FROM_EXCESS_BASE64 5254 1.56 1.61 1.53 120 RCVD_IN_IADB_OPTIN 5020 1.21 0.67 1.46 121 TooManyTo_003 4996 1.12 0.40 1.46 122 TR_MetaPhish_Combo_01 4957 1.32 1.03 1.44 123 XM_UB50 4955 2.23 3.95 1.44 124 XM_B_Investor 4951 2.57 5.05 1.44 125 XM_SendGrid 4951 1.51 1.64 1.44 126 HELO_NODOT 4842 1.12 0.48 1.41 127 HELO_NO_DOMAIN 4834 1.11 0.47 1.41 128 BOTNET 4799 4.99 12.91 1.40 129 TR_XM_SpammyWords5 4767 2.24 4.11 1.39 130 XM_GoogleGroups 4363 1.10 0.72 1.27 131 T_TooManySym_03 4330 0.92 0.16 1.26 132 TR_DCC_Bayes_99 4316 7.43 21.03 1.26 133 T_XMDrugObfuBody_00 4298 1.38 1.67 1.25 134 XMGappySubj_01 4224 0.91 0.19 1.23 135 URI_NOVOWEL 4210 1.37 1.69 1.23 136 IN_HORDE_ADDRESS_BOOK 4127 0.86 0.09 1.20 137 URI_HEX 4059 1.24 1.35 1.18 138 RCVD_IN_MSPIKE_BL 3886 3.43 8.48 1.13 139 TR_XM_MSPIKECOMBO 3850 3.42 8.47 1.12 140 XM_SPF_SoftFail 3786 1.81 3.35 1.10 141 TooManyTo_004 3618 0.83 0.34 1.05 142 FROM_GOV_DKIM_AU 3519 0.77 0.21 1.03 143 TR_XM_DK_SendGrid 3477 1.00 0.98 1.01 144 XMSexyCombo_05 3437 1.94 4.02 1.00 145 RCVD_IN_BL_SPAMCOP_NET 3372 5.21 14.51 0.98 146 T_FILL_THIS_FORM_SHORT 3335 1.35 2.17 0.97 147 XMBdyGiftCard01 3317 1.01 1.10 0.97 148 TVD_RCVD_IP 3219 0.94 0.96 0.94 149 XMGenDplmaNmb 3188 1.27 2.02 0.93 150 XMCapTrack 3181 0.79 0.48 0.93 151 XM_H_Long_From02 3175 1.29 2.08 0.93 152 RCVD_IN_MSPIKE_L3 3159 1.83 3.82 0.92 153 XMBrknScrpt_02 3151 1.07 1.39 0.92 154 TVD_SPACE_RATIO 2958 0.65 0.19 0.86 155 TooManyTo_005 2950 0.68 0.29 0.86 156 XM_OfRef6 2864 1.74 3.74 0.83 157 XM_ShortIntro_01 2809 0.69 0.42 0.82 158 XMSubNoVowel 2751 0.70 0.49 0.80 159 DKIM_ADSP_CUSTOM_MED 2679 0.90 1.15 0.78 160 XM_H_PHPMailer 2666 0.69 0.51 0.78 161 RELAYCOUNTRY_GB 2584 0.76 0.78 0.75 162 SpammyFromTLD_01 2562 1.08 1.81 0.75 163 T_Symld_Words_02 2509 0.76 0.81 0.73 164 XMBSHREFv2 2489 0.62 0.39 0.73 165 XM_B_COPY_HTML 2423 0.93 1.41 0.71 166 XMSlimDrugH 2416 0.74 0.82 0.70 167 TO_NO_BRKTS_HTML_ONLY 2413 0.52 0.13 0.70 168 HTTPS_HTTP_MISMATCH 2394 0.90 1.34 0.70 169 RELAYCOUNTRY_AU 2392 1.27 2.52 0.70 170 URI_TRY_3LD 2386 1.18 2.24 0.70 171 LOW_PRICE 2384 0.59 0.37 0.69 172 XMNoVowels 2370 0.67 0.61 0.69 173 RELAYCOUNTRY_CA 2262 2.22 5.66 0.66 174 HTML_FONT_FACE_BAD 2235 0.61 0.51 0.65 175 SCC_BODY_SINGLE_WORD 2219 0.47 0.08 0.65 176 XM_B_DNDMA 2196 0.77 1.05 0.64 177 XM_B_SpammyWords4 2014 0.98 1.86 0.59 178 HTML_TAG_BALANCE_BODY 1983 0.65 0.80 0.58 179 T_XMHurry_00 1974 1.07 2.16 0.58 180 XMPhish14 1955 0.63 0.77 0.57 181 TR_XM_Base64_M1 1907 0.57 0.59 0.56 182 XMGappySubj_02 1903 0.40 0.07 0.55 183 MPART_ALT_DIFF_COUNT 1896 0.80 1.33 0.55 184 MSGID_FROM_MTA_HEADER 1889 0.47 0.30 0.55 185 XMPhish30 1846 0.85 1.53 0.54 186 FORGED_GMAIL_RCVD 1811 0.65 0.91 0.53 187 T_OBFU_PDF_ATTACH 1798 0.40 0.14 0.52 188 SpammyFromTLD_02 1776 0.94 1.88 0.52 189 HTML_IMAGE_ONLY_20 1760 0.68 1.06 0.51 190 XMSubMetaI_00 1759 0.67 1.00 0.51 191 TR_XM_SpammyWords3 1751 2.11 5.62 0.51 192 XMMoneyMeta_00 1687 0.62 0.89 0.49 193 NML_ADSP_CUSTOM_MED 1650 0.65 1.01 0.48 194 T_TooManySym_04 1615 0.34 0.06 0.47 195 XMClaimOffer 1615 0.48 0.50 0.47 196 SHORT_HELO_AND_INLINE_IMAGE 1612 0.36 0.13 0.47 197 TM2_M_OBFU_COMMENT 1570 0.59 0.88 0.46 198 RELAYCOUNTRY_DE 1495 0.50 0.63 0.44 199 T_MANY_PILL_PRICE 1431 0.29 0.01 0.42 200 TR_XM_GMP_MSPIKE_UNDO2 1428 0.36 0.23 0.42 ----------------------------------------------------------------------