Email: 454178 Autolearn: 0 AvgScore: 6.52 AvgScanTime: 1.20 sec Spam: 160209 Autolearn: 0 AvgScore: 16.57 AvgScanTime: 1.30 sec Ham: 293969 Autolearn: 0 AvgScore: 1.04 AvgScanTime: 1.15 sec Time Spent Running SA: 151.92 hours Time Spent Processing Spam: 57.74 hours Time Spent Processing Ham: 94.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 159987 99.67 99.86 99.57 2 HTML_MESSAGE 155517 90.49 97.07 86.90 3 DKIM_SIGNED 125965 76.75 78.63 75.73 4 XM_DK_Pass 119441 74.58 74.55 74.60 5 XM_B_SpammyWords 118897 56.74 74.21 47.22 6 DKIM_VALID 118411 73.78 73.91 73.70 7 XM_B_Unicode 117302 72.66 73.22 72.36 8 DCC_CHECK 116209 50.20 72.54 38.02 9 RELAYCOUNTRY_US 114964 78.59 71.76 82.32 10 XMListUnsubscribeExists 94600 53.65 59.05 50.71 11 DKIM_VALID_AU 92833 60.03 57.94 61.17 12 XM_B_SpammyWords2 79597 31.60 49.68 21.75 13 BAYES_50 78882 56.35 49.24 60.23 14 LOC_TINY_FONT_1 71721 36.79 44.77 32.44 15 XM_B_Unicode3 68804 43.82 42.95 44.29 16 XM_DK_Undo_02 59322 16.74 37.03 5.69 17 MIME_HTML_ONLY 58479 25.76 36.50 19.91 18 XMSubLong 55802 27.31 34.83 23.21 19 HTML_FONT_LOW_CONTRAST 55758 31.08 34.80 29.05 20 FVGT_m_MULTI_ODD 49683 28.20 31.01 26.67 21 DKIM_VALID_EF 44185 29.15 27.58 30.01 22 DCC_CHECK_NEGATIVE 43893 49.73 27.40 61.89 23 BAYES_99 43517 12.25 27.16 4.13 24 TR_XM_DKIM_Undo 41680 10.57 26.02 2.16 25 T_KAM_HTML_FONT_INVALID 40760 23.29 25.44 22.12 26 XM_B_Phish_Phrases 35688 12.07 22.28 6.50 27 XM_Multi_Part_URI 35474 17.52 22.14 15.01 28 TR_XM_DK_Unsub 32910 16.46 20.54 14.23 29 BAYES_999 32878 9.17 20.52 2.99 30 RCVD_IN_MSPIKE_H2 30973 16.85 19.33 15.49 31 TR_DCC_Bayes_99 30947 7.76 19.32 1.46 32 T_TM2_M_HEADER_IN_MSG 30362 26.51 18.95 30.62 33 XM_B_Unsub 27095 11.82 16.91 9.05 34 T_TooManySym_01 26989 9.96 16.85 6.20 35 UNPARSEABLE_RELAY 26404 14.06 16.48 12.74 36 TR_XM_BayesUnsub 25986 10.25 16.22 7.00 37 FSL_BULK_SIG 25925 8.52 16.18 4.35 38 XM_URI_RBL 24897 5.70 15.54 0.34 39 TM2_M_URI_OPT_OUT 24514 6.70 15.30 2.02 40 RELAYCOUNTRY_META 24037 7.44 15.00 3.31 41 ALL_TRUSTED 22617 14.48 14.12 14.67 42 XM_B_SpammyWords3 22363 9.50 13.96 7.07 43 HTML_TAG_BALANCE_HEAD 21600 4.78 13.48 0.03 44 URI_WPADMIN 21530 4.74 13.44 0.00 45 J_WEEDS_O 21433 4.72 13.38 0.00 46 J_WEEDS_A 21433 4.72 13.38 0.00 47 J_WEEDS_L 21433 4.72 13.38 0.00 48 J_WEEDS_S 21431 4.72 13.38 0.00 49 J_WEEDS_R 21431 4.72 13.38 0.00 50 J_WEEDS_E 21431 4.72 13.38 0.00 51 J_WEEDS_C 21430 4.72 13.38 0.00 52 J_WEEDS_I 21430 4.72 13.38 0.00 53 J_WEEDS_N 21429 4.72 13.38 0.00 54 J_WEEDS_P 21428 4.72 13.38 0.00 55 J_WEEDS_T 21428 4.72 13.38 0.00 56 J_WEEDS_D 21428 4.72 13.38 0.00 57 J_WEEDS_H 21427 4.72 13.37 0.00 58 J_WEEDS_V 21427 4.72 13.37 0.00 59 J_WEEDS_B 21427 4.72 13.37 0.00 60 J_WEEDS_U 21427 4.72 13.37 0.00 61 J_WEEDS_K 21427 4.72 13.37 0.00 62 J_WEEDS_M 21426 4.72 13.37 0.00 63 J_WEEDS_W 21426 4.72 13.37 0.00 64 J_WEEDS_X 21425 4.72 13.37 0.00 65 J_WEEDS_Y 21425 4.72 13.37 0.00 66 MIME_HEADER_CTYPE_ONLY 21292 4.77 13.29 0.13 67 HTML_ENTITY_ASCII 21230 4.67 13.25 0.00 68 TR_MAX_INTL_RELAY 21213 9.19 13.24 6.98 69 TO_IN_SUBJ 21194 4.69 13.23 0.04 70 LOTS_OF_MONEY 19456 8.38 12.14 6.33 71 RCVD_IN_BL_SPAMCOP_NET 19391 4.78 12.10 0.79 72 TR_XM_SpammyRelay 17520 5.03 10.94 1.81 73 RCVD_IN_MSPIKE_WL 17463 18.16 10.90 22.12 74 TR_XM_SpammyWords4 16987 6.38 10.60 4.08 75 TR_XM_SpammyWords2 15686 3.73 9.79 0.43 76 BOTNET_IPINHOSTNAME 15031 5.51 9.38 3.39 77 BOTNET 14763 3.98 9.21 1.12 78 TR_XM_UnparsRelay 14433 4.38 9.01 1.85 79 XM_Evil_Numbers_Gen 13916 8.91 8.69 9.03 80 XMSubMetaSx_00 13848 5.04 8.64 3.07 81 BAYES_80 13085 5.64 8.17 4.26 82 TR_XM_SPAMCOP 11356 2.69 7.09 0.29 83 UNTRUSTED_Relay 11186 3.43 6.98 1.50 84 BAYES_60 11017 7.29 6.88 7.52 85 LotsOfNums_01 10243 9.59 6.39 11.34 86 RCVD_IN_MSPIKE_BL 10197 3.05 6.36 1.24 87 TR_XM_MSPIKECOMBO 10176 3.03 6.35 1.22 88 XM_Body_Dirty_Words 8738 3.54 5.45 2.50 89 MPART_ALT_DIFF 8353 5.00 5.21 4.89 90 XMSexyCombo_05 8333 2.51 5.20 1.04 91 RELAYCOUNTRY_CA 8279 2.23 5.17 0.63 92 RCVD_IN_MSPIKE_H3 8112 7.86 5.06 9.38 93 XM_H_Long_From01 8062 5.41 5.03 5.62 94 HTML_IMAGE_RATIO_04 7879 5.55 4.92 5.90 95 HTML_IMAGE_RATIO_02 7833 5.26 4.89 5.47 96 XM_B_PhoneNumber 7824 7.22 4.88 8.49 97 XM_B_SpammyTLD 7741 3.75 4.83 3.16 98 XM_UncommonTLD01 7722 4.09 4.82 3.70 99 BAYES_95 7691 3.46 4.80 2.72 100 XM_H_GMP 7647 4.79 4.77 4.80 101 DKIM_INVALID 7554 2.97 4.72 2.02 102 TM2_M_VERY_LONG_WORD 7129 5.15 4.45 5.53 103 TR_XM_PhishingBody 7051 2.72 4.40 1.80 104 XM_B_Investor 7039 2.62 4.39 1.66 105 TR_XM_SpammyWords3 6796 1.82 4.24 0.51 106 T_XMDrugObfuBody_14 6435 2.33 4.02 1.42 107 MIME_HTML_MOSTLY 6378 3.17 3.98 2.73 108 TR_XM_SpammyWords5 6021 2.18 3.76 1.32 109 RCVD_IN_MSPIKE_L3 5790 1.96 3.61 1.06 110 XMStrtUSub 5716 4.26 3.57 4.64 111 XM_OfRef6 5246 1.77 3.27 0.95 112 RCVD_IN_MSPIKE_H5 5081 6.10 3.17 7.69 113 T_XMDrugObfuBody_08 4991 2.12 3.12 1.57 114 XMNumbers 4919 3.24 3.07 3.34 115 XM_UB50 4745 1.69 2.96 1.00 116 TooManyTo_001 4494 5.42 2.81 6.85 117 XMDiploma_00 4372 2.09 2.73 1.73 118 XMSubMetaSxObfu_03 4298 1.16 2.68 0.33 119 RCVD_IN_MSPIKE_H4 4270 4.21 2.67 5.05 120 XMStockSpam_06 4269 1.71 2.66 1.19 121 XM_B_Unsub2 4223 1.71 2.64 1.20 122 XM_CamelCaseFrm001 4220 2.33 2.63 2.17 123 TR_XM_NoHeaderRelay 4067 1.05 2.54 0.25 124 XM_SPF_SoftFail 4000 1.73 2.50 1.32 125 USER_IN_DEF_DKIM_WL 3987 10.61 2.49 15.03 126 HTML_IMAGE_RATIO_06 3917 3.04 2.44 3.36 127 RELAYCOUNTRY_AU 3780 1.30 2.36 0.72 128 HTML_IMAGE_RATIO_08 3761 2.74 2.35 2.95 129 TR_XM_MSPIKECOMBO2 3626 0.86 2.26 0.09 130 XM_B_URI_Unicode 3549 1.85 2.22 1.64 131 XM_B_SpammyWords4 3528 1.25 2.20 0.72 132 SUBJ_ALL_CAPS 3504 1.69 2.19 1.42 133 MIME_QP_LONG_LINE 3451 4.11 2.15 5.18 134 TR_XM_INV_DKIM 3374 0.76 2.11 0.03 135 RCVD_IN_MSPIKE_L4 3243 0.81 2.02 0.15 136 ANY_BOUNCE_MESSAGE 3231 5.41 2.02 7.26 137 BOUNCE_MESSAGE 3228 5.41 2.01 7.26 138 T_FILL_THIS_FORM_SHORT 3152 1.21 1.97 0.80 139 MIME_HTML_ONLY_MULTI 3145 2.34 1.96 2.55 140 KHOP_HELO_FCRDNS 3135 2.68 1.96 3.08 141 T_XMHurry_00 3132 1.07 1.95 0.59 142 RCVD_IN_VALIDITY_SAFE 3058 3.45 1.91 4.30 143 XMBody_17 3045 1.05 1.90 0.59 144 XMPhish30 2982 0.95 1.86 0.46 145 RCVD_IN_VALIDITY_RPBL 2952 0.67 1.84 0.03 146 FROM_EXCESS_BASE64 2877 1.79 1.80 1.78 147 RELAYCOUNTRY_FR 2785 0.83 1.74 0.33 148 T_TooManySym_02 2728 2.66 1.70 3.17 149 MAILING_LIST_MULTI 2649 2.31 1.65 2.67 150 SpammyFromTLD_02 2527 0.79 1.58 0.36 151 BAYES_40 2497 4.11 1.56 5.51 152 TR_XM_MaxSPIKE 2470 0.59 1.54 0.07 153 RCVD_IN_IADB_LISTED 2450 2.89 1.53 3.64 154 TR_LOTS_OF_MONEY3 2450 0.85 1.53 0.48 155 XMSexyCombo_01 2443 0.66 1.52 0.19 156 XM_DK_Undo_01 2413 1.75 1.51 1.88 157 T_REMOTE_IMAGE 2391 2.67 1.49 3.32 158 XMGenDplmaNmb 2374 1.07 1.48 0.85 159 XM_UB99 2254 0.50 1.41 0.00 160 RCVD_IN_VALIDITY_CERTIFIED 2250 2.86 1.40 3.66 161 SpammyFromTLD_01 2170 0.84 1.35 0.56 162 T_XMDrugObfuBody_00 2162 1.11 1.35 0.98 163 XMBrknScrpt_02 2156 1.06 1.35 0.90 164 HK_RANDOM_REPLYTO 2153 0.52 1.34 0.07 165 XMSubMetaI_00 2141 0.76 1.34 0.45 166 XM_ProductURIs 2118 1.00 1.32 0.82 167 URI_NOVOWEL 2106 1.25 1.31 1.21 168 URI_HEX 2099 1.25 1.31 1.22 169 DKIM_ADSP_NXDOMAIN 2031 0.64 1.27 0.29 170 RCVD_IN_IADB_SPF 2028 2.55 1.27 3.24 171 DIET_1 2010 0.76 1.25 0.49 172 BOTNET_NORDNS 2004 0.45 1.25 0.01 173 HTML_MIME_NO_HTML_TAG 2001 2.22 1.25 2.74 174 TR_XM_InvalidRelay 1988 0.44 1.24 0.01 175 XM_SendGrid 1949 1.48 1.22 1.62 176 MPART_ALT_DIFF_COUNT 1905 0.76 1.19 0.53 177 MultiRelay_CC 1879 0.49 1.17 0.12 178 RCVD_IN_PSBL 1860 0.42 1.16 0.02 179 RCVD_IN_IADB_DK 1830 2.24 1.14 2.83 180 XM_B_SEO 1822 0.56 1.14 0.24 181 RCVD_IN_IADB_SENDERID 1817 2.30 1.13 2.93 182 XM_B_Phish66 1814 0.63 1.13 0.36 183 XM_H_Long_From02 1801 0.83 1.12 0.66 184 HTML_IMAGE_ONLY_12 1781 0.70 1.11 0.47 185 XMBdyGiftCard01 1749 0.96 1.09 0.88 186 HTTPS_HTTP_MISMATCH 1747 0.83 1.09 0.69 187 XMBody_78 1720 0.59 1.07 0.32 188 XM_B_COPY_HTML 1664 0.83 1.04 0.72 189 TR_XM_RelayPhish 1639 0.40 1.02 0.06 190 BAYES_20 1638 2.83 1.02 3.82 191 TR_XM_SEO4 1629 0.43 1.02 0.11 192 MAY_BE_FORGED 1589 2.24 0.99 2.93 193 TR_XM_GMP_BULK_SIG 1583 0.40 0.99 0.09 194 THIS_AD 1568 0.67 0.98 0.50 195 RDNS_DYNAMIC 1552 0.44 0.97 0.16 196 NORDNS_LOW_CONTRAST 1547 0.35 0.97 0.02 197 XM_UB60 1542 0.40 0.96 0.09 198 TM2_M_OBFU_COMMENT 1540 0.62 0.96 0.44 199 XM_B_DNDMA 1536 0.72 0.96 0.59 200 RCVD_IN_IADB_VOUCHED 1525 1.83 0.95 2.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 292707 99.67 99.86 99.57 2 HTML_MESSAGE 255453 90.49 97.07 86.90 3 RELAYCOUNTRY_US 241993 78.59 71.76 82.32 4 DKIM_SIGNED 222616 76.75 78.63 75.73 5 XM_DK_Pass 219301 74.58 74.55 74.60 6 DKIM_VALID 216665 73.78 73.91 73.70 7 XM_B_Unicode 212717 72.66 73.22 72.36 8 DCC_CHECK_NEGATIVE 181948 49.73 27.40 61.89 9 DKIM_VALID_AU 179817 60.03 57.94 61.17 10 BAYES_50 177055 56.35 49.24 60.23 11 XMListUnsubscribeExists 149080 53.65 59.05 50.71 12 XM_B_SpammyWords 138824 56.74 74.21 47.22 13 XM_B_Unicode3 130200 43.82 42.95 44.29 14 DCC_CHECK 111773 50.20 72.54 38.02 15 LOC_TINY_FONT_1 95357 36.79 44.77 32.44 16 T_TM2_M_HEADER_IN_MSG 90019 26.51 18.95 30.62 17 DKIM_VALID_EF 88229 29.15 27.58 30.01 18 HTML_FONT_LOW_CONTRAST 85386 31.08 34.80 29.05 19 FVGT_m_MULTI_ODD 78396 28.20 31.01 26.67 20 XMSubLong 68229 27.31 34.83 23.21 21 T_KAM_HTML_FONT_INVALID 65034 23.29 25.44 22.12 22 RCVD_IN_MSPIKE_WL 65026 18.16 10.90 22.12 23 XM_B_SpammyWords2 63933 31.60 49.68 21.75 24 MIME_HTML_ONLY 58527 25.76 36.50 19.91 25 RCVD_IN_MSPIKE_H2 45536 16.85 19.33 15.49 26 USER_IN_DEF_DKIM_WL 44186 10.61 2.49 15.03 27 XM_Multi_Part_URI 44113 17.52 22.14 15.01 28 ALL_TRUSTED 43137 14.48 14.12 14.67 29 TR_XM_DK_Unsub 41838 16.46 20.54 14.23 30 UNPARSEABLE_RELAY 37453 14.06 16.48 12.74 31 LotsOfNums_01 33333 9.59 6.39 11.34 32 BAYES_00 28270 6.42 0.57 9.62 33 RCVD_IN_MSPIKE_H3 27572 7.86 5.06 9.38 34 XM_B_Unsub 26593 11.82 16.91 9.05 35 XM_Evil_Numbers_Gen 26540 8.91 8.69 9.03 36 XM_B_PhoneNumber 24971 7.22 4.88 8.49 37 RCVD_IN_MSPIKE_H5 22618 6.10 3.17 7.69 38 BAYES_60 22113 7.29 6.88 7.52 39 ANY_BOUNCE_MESSAGE 21341 5.41 2.02 7.26 40 BOUNCE_MESSAGE 21340 5.41 2.01 7.26 41 XM_DKIMWhitelistDomains 20793 4.61 0.08 7.07 42 XM_B_SpammyWords3 20776 9.50 13.96 7.07 43 TR_XM_BayesUnsub 20586 10.25 16.22 7.00 44 TR_MAX_INTL_RELAY 20517 9.19 13.24 6.98 45 TooManyTo_001 20133 5.42 2.81 6.85 46 TR_XM_DK_Bayes 20021 4.56 0.43 6.81 47 TR_XM_DK_Bayes1 19728 4.49 0.43 6.71 48 XM_B_Phish_Phrases 19110 12.07 22.28 6.50 49 LOTS_OF_MONEY 18614 8.38 12.14 6.33 50 T_TooManySym_01 18228 9.96 16.85 6.20 51 HTML_IMAGE_RATIO_04 17332 5.55 4.92 5.90 52 TR_XM_DK_Bayes2 16870 3.82 0.30 5.74 53 XM_DK_Undo_02 16714 16.74 37.03 5.69 54 XM_H_Long_From01 16521 5.41 5.03 5.62 55 TM2_M_VERY_LONG_WORD 16258 5.15 4.45 5.53 56 BAYES_40 16184 4.11 1.56 5.51 57 HTML_IMAGE_RATIO_02 16066 5.26 4.89 5.47 58 MIME_QP_LONG_LINE 15237 4.11 2.15 5.18 59 RCVD_IN_MSPIKE_H4 14836 4.21 2.67 5.05 60 MPART_ALT_DIFF 14361 5.00 5.21 4.89 61 XM_H_GMP 14117 4.79 4.77 4.80 62 XMStrtUSub 13633 4.26 3.57 4.64 63 FSL_BULK_SIG 12793 8.52 16.18 4.35 64 RCVD_IN_VALIDITY_SAFE 12630 3.45 1.91 4.30 65 BAYES_80 12512 5.64 8.17 4.26 66 BAYES_99 12137 12.25 27.16 4.13 67 TR_XM_SpammyWords4 12002 6.38 10.60 4.08 68 XM_PDF 11804 2.83 0.65 4.02 69 BAYES_20 11219 2.83 1.02 3.82 70 XM_UncommonTLD01 10876 4.09 4.82 3.70 71 RCVD_IN_VALIDITY_CERTIFIED 10757 2.86 1.40 3.66 72 RCVD_IN_IADB_LISTED 10691 2.89 1.53 3.64 73 BOTNET_IPINHOSTNAME 9979 5.51 9.38 3.39 74 HTML_IMAGE_RATIO_06 9886 3.04 2.44 3.36 75 XMNumbers 9817 3.24 3.07 3.34 76 T_REMOTE_IMAGE 9751 2.67 1.49 3.32 77 RELAYCOUNTRY_META 9742 7.44 15.00 3.31 78 RCVD_IN_IADB_SPF 9532 2.55 1.27 3.24 79 T_TooManySym_02 9331 2.66 1.70 3.17 80 XM_B_SpammyTLD 9280 3.75 4.83 3.16 81 KHOP_HELO_FCRDNS 9041 2.68 1.96 3.08 82 XMSubMetaSx_00 9026 5.04 8.64 3.07 83 BAYES_999 8780 9.17 20.52 2.99 84 HTML_IMAGE_RATIO_08 8661 2.74 2.35 2.95 85 RCVD_IN_IADB_SENDERID 8610 2.30 1.13 2.93 86 MAY_BE_FORGED 8606 2.24 0.99 2.93 87 RCVD_IN_IADB_DK 8329 2.24 1.14 2.83 88 HTML_MIME_NO_HTML_TAG 8067 2.22 1.25 2.74 89 MIME_HTML_MOSTLY 8015 3.17 3.98 2.73 90 BAYES_95 8001 3.46 4.80 2.72 91 MAILING_LIST_MULTI 7836 2.31 1.65 2.67 92 MIME_HTML_ONLY_MULTI 7499 2.34 1.96 2.55 93 XM_Body_Dirty_Words 7346 3.54 5.45 2.50 94 TO_MALFORMED 6942 1.54 0.03 2.36 95 INVALID_MSGID 6861 1.59 0.23 2.33 96 RCVD_IN_IADB_VOUCHED 6779 1.83 0.95 2.31 97 BAYES_05 6477 1.64 0.61 2.20 98 XM_CamelCaseFrm001 6369 2.33 2.63 2.17 99 TR_XM_DKIM_Undo 6344 10.57 26.02 2.16 100 DKIM_INVALID 5951 2.97 4.72 2.02 101 TM2_M_URI_OPT_OUT 5935 6.70 15.30 2.02 102 TooManyTo_002 5883 1.44 0.41 2.00 103 XM_DK_Undo_01 5519 1.75 1.51 1.88 104 TR_XM_UnparsRelay 5450 4.38 9.01 1.85 105 TR_XM_SpammyRelay 5317 5.03 10.94 1.81 106 TR_XM_PhishingBody 5283 2.72 4.40 1.80 107 FROM_EXCESS_BASE64 5238 1.79 1.80 1.78 108 XMDiploma_00 5098 2.09 2.73 1.73 109 XM_B_Investor 4883 2.62 4.39 1.66 110 XM_B_URI_Unicode 4832 1.85 2.22 1.64 111 RCVD_IN_IADB_OPTIN 4758 1.28 0.65 1.62 112 XM_SendGrid 4755 1.48 1.22 1.62 113 T_XMDrugObfuBody_08 4630 2.12 3.12 1.57 114 TR_MetaPhish_Combo_01 4589 1.25 0.67 1.56 115 UNTRUSTED_Relay 4408 3.43 6.98 1.50 116 TR_Symld_Words 4313 1.21 0.74 1.47 117 TR_DCC_Bayes_99 4303 7.76 19.32 1.46 118 SUBJ_ALL_CAPS 4171 1.69 2.19 1.42 119 T_XMDrugObfuBody_14 4167 2.33 4.02 1.42 120 T_TooManySym_03 4156 0.98 0.18 1.41 121 IN_HORDE_ADDRESS_BOOK 3961 0.93 0.17 1.35 122 TR_XM_SpammyWords5 3881 2.18 3.76 1.32 123 XM_SPF_SoftFail 3868 1.73 2.50 1.32 124 TooManyTo_003 3738 0.95 0.35 1.27 125 RCVD_IN_MSPIKE_BL 3645 3.05 6.36 1.24 126 TR_XM_MSPIKECOMBO 3598 3.03 6.35 1.22 127 URI_HEX 3589 1.25 1.31 1.22 128 URI_NOVOWEL 3567 1.25 1.31 1.21 129 XM_B_Unsub2 3528 1.71 2.64 1.20 130 XMStockSpam_06 3510 1.71 2.66 1.19 131 XMLngstWrd_00 3505 0.97 0.56 1.19 132 XM_GoogleGroups 3342 0.93 0.56 1.14 133 BOTNET 3299 3.98 9.21 1.12 134 TR_XM_DK_SendGrid 3273 1.00 0.78 1.11 135 RCVD_IN_MSPIKE_L3 3115 1.96 3.61 1.06 136 TVD_RCVD_IP 3114 0.96 0.79 1.06 137 HTML_IMAGE_ONLY_16 3070 0.82 0.41 1.04 138 HELO_NODOT 3048 0.81 0.39 1.04 139 XMSexyCombo_05 3048 2.51 5.20 1.04 140 HELO_NO_DOMAIN 3041 0.80 0.38 1.03 141 XM_UB50 2931 1.69 2.96 1.00 142 T_XMDrugObfuBody_00 2893 1.11 1.35 0.98 143 XMGappySubj_01 2880 0.71 0.22 0.98 144 TooManyTo_004 2824 0.73 0.30 0.96 145 TVD_SPACE_RATIO 2818 0.68 0.17 0.96 146 XM_OfRef6 2805 1.77 3.27 0.95 147 MIME_CHARSET_FARAWAY 2790 0.75 0.38 0.95 148 XMBrknScrpt_02 2644 1.06 1.35 0.90 149 XMBdyGiftCard01 2594 0.96 1.09 0.88 150 XMCapTrack 2537 0.69 0.37 0.86 151 XMGenDplmaNmb 2485 1.07 1.48 0.85 152 CHARSET_FARAWAY_HEADER 2470 0.63 0.24 0.84 153 XMBSHREFv2 2440 0.66 0.36 0.83 154 XM_ProductURIs 2405 1.00 1.32 0.82 155 T_FILL_THIS_FORM_SHORT 2357 1.21 1.97 0.80 156 TooManyTo_005 2355 0.61 0.26 0.80 157 RCVD_IN_BL_SPAMCOP_NET 2336 4.78 12.10 0.79 158 XM_ShortIntro_01 2186 0.62 0.38 0.74 159 XM_B_SpammyWords4 2130 1.25 2.20 0.72 160 XMPhish14 2126 0.66 0.54 0.72 161 RELAYCOUNTRY_AU 2118 1.30 2.36 0.72 162 XM_B_COPY_HTML 2113 0.83 1.04 0.72 163 DKIM_ADSP_CUSTOM_MED 2110 0.78 0.89 0.72 164 HTTPS_HTTP_MISMATCH 2036 0.83 1.09 0.69 165 T_OBFU_PDF_ATTACH 1998 0.48 0.11 0.68 166 XM_H_Long_From02 1954 0.83 1.12 0.66 167 HTML_IMAGE_ONLY_32 1942 0.46 0.10 0.66 168 XM_H_PHPMailer 1919 0.56 0.38 0.65 169 T_TVD_MIME_NO_HEADERS 1897 0.43 0.05 0.65 170 XMGappySubj_02 1877 0.43 0.04 0.64 171 XMNoVowels 1847 0.57 0.46 0.63 172 RELAYCOUNTRY_CA 1841 2.23 5.17 0.63 173 TR_XM_Base64_M1 1747 0.59 0.57 0.59 174 T_XMHurry_00 1736 1.07 1.95 0.59 175 XMBody_17 1728 1.05 1.90 0.59 176 XM_B_DNDMA 1723 0.72 0.96 0.59 177 SpammyFromTLD_01 1639 0.84 1.35 0.56 178 HTML_FONT_FACE_BAD 1583 0.54 0.56 0.54 179 MPART_ALT_DIFF_COUNT 1567 0.76 1.19 0.53 180 URI_TRY_3LD 1564 0.63 0.81 0.53 181 XMSolicitRefs_0 1560 0.52 0.50 0.53 182 T_TooManySym_04 1526 0.35 0.03 0.52 183 XMSubNoVowel 1510 0.44 0.30 0.51 184 HTML_IMAGE_ONLY_20 1491 0.65 0.91 0.51 185 TR_XM_SpammyWords3 1488 1.82 4.24 0.51 186 RELAYCOUNTRY_GB 1460 0.55 0.64 0.50 187 THIS_AD 1457 0.67 0.98 0.50 188 XMDateMe_00 1456 0.50 0.51 0.50 189 DIET_1 1450 0.76 1.25 0.49 190 TR_LOTS_OF_MONEY3 1420 0.85 1.53 0.48 191 FORGED_GMAIL_RCVD 1413 0.60 0.82 0.48 192 TR_XM_GMP_MSPIKE_UNDO2 1410 0.37 0.16 0.48 193 HTML_IMAGE_ONLY_12 1389 0.70 1.11 0.47 194 XMSlimDrugH 1383 0.56 0.72 0.47 195 T_Symld_Words_02 1374 0.61 0.87 0.47 196 XMPhish30 1343 0.95 1.86 0.46 197 FROM_GOV_DKIM_AU 1332 0.38 0.24 0.45 198 MSGID_FROM_MTA_HEADER 1332 0.38 0.25 0.45 199 XMSubMetaI_00 1326 0.76 1.34 0.45 200 HTML_EXTRA_CLOSE 1297 0.29 0.01 0.44 ----------------------------------------------------------------------