Email: 506430 Autolearn: 0 AvgScore: 6.08 AvgScanTime: 1.19 sec Spam: 164447 Autolearn: 0 AvgScore: 15.73 AvgScanTime: 1.40 sec Ham: 341983 Autolearn: 0 AvgScore: 1.44 AvgScanTime: 1.08 sec Time Spent Running SA: 166.73 hours Time Spent Processing Spam: 64.08 hours Time Spent Processing Ham: 102.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 164213 99.64 99.86 99.54 2 HTML_MESSAGE 160200 91.54 97.42 88.72 3 DKIM_SIGNED 134372 73.03 81.71 68.85 4 RELAYCOUNTRY_US 122767 76.08 74.65 76.77 5 XM_B_SpammyWords 120887 52.00 73.51 41.65 6 XM_B_Unicode 120795 73.06 73.46 72.88 7 XM_DK_Pass 119319 69.21 72.56 67.60 8 DKIM_VALID 118224 68.27 71.89 66.53 9 DCC_CHECK 117960 46.49 71.73 34.35 10 DKIM_VALID_AU 93192 55.85 56.67 55.46 11 XMListUnsubscribeExists 91475 47.61 55.63 43.75 12 BAYES_50 74733 57.51 45.45 63.32 13 XM_B_Unicode3 70278 44.85 42.74 45.86 14 XM_B_SpammyWords2 69799 25.51 42.44 17.37 15 LOC_TINY_FONT_1 69352 32.44 42.17 27.76 16 HTML_FONT_LOW_CONTRAST 59085 31.29 35.93 29.06 17 XM_DK_Undo_02 58484 14.74 35.56 4.72 18 FVGT_m_MULTI_ODD 56989 27.42 34.65 23.94 19 XMSubLong 52967 29.66 32.21 28.44 20 MIME_HTML_ONLY 52192 22.39 31.74 17.90 21 DCC_CHECK_NEGATIVE 46371 53.43 28.20 65.56 22 BAYES_99 46259 11.40 28.13 3.36 23 DKIM_VALID_EF 43560 28.12 26.49 28.90 24 TR_XM_DKIM_Undo 41203 9.50 25.06 2.01 25 T_KAM_HTML_FONT_INVALID 40550 21.18 24.66 19.51 26 XM_B_Unsub 39114 13.39 23.79 8.39 27 T_TM2_M_HEADER_IN_MSG 38572 28.93 23.46 31.56 28 TR_XM_BayesUnsub 38258 11.95 23.26 6.50 29 XM_Multi_Part_URI 36841 15.94 22.40 12.84 30 BAYES_999 36140 8.85 21.98 2.54 31 TR_DCC_Bayes_99 33161 7.39 20.17 1.24 32 TR_XM_DK_Unsub 31219 14.74 18.98 12.69 33 RCVD_IN_MSPIKE_H2 29370 15.75 17.86 14.74 34 FSL_BULK_SIG 27012 9.06 16.43 5.52 35 UNPARSEABLE_RELAY 25941 12.47 15.77 10.88 36 XM_B_Phish_Phrases 25094 8.14 15.26 4.72 37 RELAYCOUNTRY_META 24225 6.96 14.73 3.22 38 TR_MAX_INTL_RELAY 23397 8.69 14.23 6.02 39 BOTNET 22459 5.26 13.66 1.22 40 RCVD_IN_BL_SPAMCOP_NET 22336 4.80 13.58 0.57 41 LOTS_OF_MONEY 21152 7.82 12.86 5.39 42 TM2_M_URI_OPT_OUT 20728 5.23 12.60 1.69 43 MPART_ALT_DIFF 20393 10.69 12.40 9.87 44 ALL_TRUSTED 20318 17.87 12.36 20.52 45 XM_B_SpammyWords3 19428 7.04 11.81 4.74 46 TR_XM_SpammyWords4 18745 6.08 11.40 3.52 47 RCVD_IN_MSPIKE_WL 18614 17.35 11.32 20.24 48 T_TooManySym_01 18200 7.60 11.07 5.93 49 TR_XM_SpammyRelay 17419 4.56 10.59 1.66 50 TR_XM_SpammyWords2 16668 3.55 10.14 0.38 51 XM_Evil_Numbers_Gen 16364 9.33 9.95 9.04 52 DKIM_INVALID 16148 4.76 9.82 2.32 53 BOTNET_IPINHOSTNAME 15318 5.02 9.31 2.95 54 BAYES_60 15170 7.57 9.22 6.78 55 BAYES_80 14783 5.49 8.99 3.81 56 MIME_HEADER_CTYPE_ONLY 14284 2.93 8.69 0.16 57 XM_URI_RBL 14268 3.01 8.68 0.29 58 TO_IN_SUBJ 14173 2.83 8.62 0.05 59 XMSubMetaSx_00 14135 4.78 8.60 2.94 60 TR_XM_UnparsRelay 13751 3.79 8.36 1.59 61 XMStrtUSub 12691 9.65 7.72 10.57 62 TR_XM_PhishingBody 12468 3.41 7.58 1.41 63 RCVD_IN_MSPIKE_BL 12096 3.23 7.36 1.25 64 TR_XM_MSPIKECOMBO 12039 3.22 7.32 1.24 65 MIME_QP_LONG_LINE 11448 5.40 6.96 4.65 66 HTML_TAG_BALANCE_HEAD 11045 2.21 6.72 0.04 67 J_WEEDS_E 10746 2.13 6.53 0.02 68 J_WEEDS_U 10740 2.12 6.53 0.00 69 J_WEEDS_T 10736 2.13 6.53 0.02 70 J_WEEDS_R 10735 2.13 6.53 0.02 71 J_WEEDS_I 10735 2.13 6.53 0.02 72 J_WEEDS_O 10734 2.12 6.53 0.00 73 J_WEEDS_N 10734 2.13 6.53 0.02 74 J_WEEDS_C 10733 2.12 6.53 0.00 75 J_WEEDS_D 10733 2.12 6.53 0.00 76 J_WEEDS_A 10733 2.12 6.53 0.00 77 J_WEEDS_S 10733 2.12 6.53 0.00 78 J_WEEDS_H 10732 2.12 6.53 0.00 79 J_WEEDS_B 10732 2.12 6.53 0.00 80 J_WEEDS_K 10731 2.12 6.53 0.00 81 J_WEEDS_L 10731 2.12 6.53 0.00 82 J_WEEDS_Y 10731 2.12 6.53 0.00 83 J_WEEDS_P 10731 2.12 6.53 0.00 84 J_WEEDS_M 10730 2.12 6.52 0.00 85 J_WEEDS_W 10730 2.12 6.52 0.00 86 J_WEEDS_V 10729 2.12 6.52 0.00 87 J_WEEDS_X 10729 2.12 6.52 0.00 88 HTML_ENTITY_ASCII 10685 2.11 6.50 0.00 89 DKIM_ADSP_NXDOMAIN 10258 2.22 6.24 0.29 90 BOTNET_NORDNS 10077 1.99 6.13 0.01 91 HTML_IMAGE_RATIO_02 9917 4.89 6.03 4.34 92 UNTRUSTED_Relay 9741 2.88 5.92 1.41 93 XMNumbers 9631 8.29 5.86 9.46 94 TR_XM_SpammyWords3 9284 2.15 5.65 0.46 95 XM_H_DKIM_GOOG 8987 1.78 5.46 0.01 96 TR_XM_SpammyWords5 8665 2.80 5.27 1.61 97 RCVD_IN_MSPIKE_H3 8504 7.65 5.17 8.85 98 RELAYCOUNTRY_CA 8475 2.09 5.15 0.62 99 XM_B_PhoneNumber 8328 8.24 5.06 9.76 100 XM_H_GMP 8241 5.03 5.01 5.04 101 LotsOfNums_01 8226 8.94 5.00 10.83 102 BAYES_95 7942 3.06 4.83 2.21 103 TR_XM_SPAMCOP 7648 1.63 4.65 0.18 104 XM_H_Long_From01 7518 4.92 4.57 5.09 105 XM_B_Investor 7505 2.45 4.56 1.43 106 MIME_HTML_MOSTLY 7503 2.67 4.56 1.76 107 XM_UncommonTLD01 7427 3.91 4.52 3.62 108 T_XMDrugObfuBody_08 7254 2.40 4.41 1.44 109 XM_Body_Dirty_Words 7249 2.72 4.41 1.91 110 XM_B_SpammyTLD 7190 3.24 4.37 2.69 111 HTML_IMAGE_RATIO_06 6734 3.07 4.09 2.58 112 T_XMDrugObfuBody_14 6469 2.21 3.93 1.38 113 RCVD_IN_MSPIKE_L3 6254 1.95 3.80 1.06 114 RCVD_IN_VALIDITY_RPBL 6187 1.25 3.76 0.05 115 XM_B_Phish49 6148 1.21 3.74 0.00 116 HTML_IMAGE_RATIO_04 6017 3.43 3.66 3.33 117 XMStockSpam_06 5792 1.68 3.52 0.79 118 USER_IN_DEF_DKIM_WL 5742 9.16 3.49 11.89 119 XMSexyCombo_05 5697 1.82 3.46 1.03 120 TooManyTo_001 5492 6.00 3.34 7.29 121 UReplyToMismatch 5376 1.06 3.27 0.00 122 RCVD_IN_MSPIKE_H5 5304 5.80 3.23 7.03 123 HTML_IMAGE_ONLY_20 5280 3.70 3.21 3.93 124 TM2_M_VERY_LONG_WORD 5270 4.48 3.20 5.09 125 XMSubMetaSxObfu_03 5255 1.34 3.20 0.45 126 XM_B_Unsub2 5227 2.18 3.18 1.70 127 XM_CamelCaseFrm001 5098 2.36 3.10 2.00 128 RCVD_IN_MSPIKE_H4 4806 3.89 2.92 4.36 129 XM_OfRef6 4506 1.40 2.74 0.76 130 SCC_CANSPAM_2 4465 0.88 2.72 0.00 131 TR_XM_NoHeaderRelay 4327 0.93 2.63 0.11 132 BOUNCE_MESSAGE 4244 5.70 2.58 7.19 133 ANY_BOUNCE_MESSAGE 4244 5.70 2.58 7.19 134 XMDiploma_00 4158 1.80 2.53 1.45 135 RCVD_IN_MSPIKE_L4 4133 0.93 2.51 0.17 136 NORDNS_LOW_CONTRAST 4131 0.84 2.51 0.04 137 XM_SPF_SoftFail 4046 1.65 2.46 1.27 138 RELAYCOUNTRY_AU 4011 1.10 2.44 0.45 139 TR_XM_INV_DKIM 3932 0.79 2.39 0.01 140 XM_UB50 3829 1.38 2.33 0.93 141 MIME_HTML_ONLY_MULTI 3755 2.34 2.28 2.36 142 HTML_IMAGE_RATIO_08 3713 2.71 2.26 2.92 143 XM_B_URI_Unicode 3708 2.21 2.25 2.19 144 SUBJ_ALL_CAPS 3683 1.95 2.24 1.81 145 TR_XM_MSPIKECOMBO2 3627 0.78 2.21 0.10 146 XM_H_Long_From02 3538 1.12 2.15 0.63 147 XM_B_SpammyWords4 3282 0.97 2.00 0.48 148 T_FILL_THIS_FORM_SHORT 3224 1.22 1.96 0.87 149 XMBody_17 3205 0.87 1.95 0.35 150 T_XMHurry_00 3180 1.11 1.93 0.71 151 SpammyFromTLD_02 3080 0.76 1.87 0.23 152 HTML_TAG_BALANCE_BODY 2971 5.09 1.81 6.66 153 MPART_ALT_DIFF_COUNT 2923 0.95 1.78 0.55 154 HTML_SHORT_LINK_IMG_3 2895 0.62 1.76 0.07 155 MAILING_LIST_MULTI 2704 2.36 1.64 2.71 156 XMBrknScrpt_02 2695 1.26 1.64 1.08 157 RCVD_IN_IADB_LISTED 2575 2.61 1.57 3.11 158 XMGenDplmaNmb 2500 0.99 1.52 0.74 159 RELAYCOUNTRY_FR 2496 0.70 1.52 0.30 160 XMNoVowels 2492 0.89 1.52 0.59 161 XMPhish30 2480 0.83 1.51 0.50 162 RCVD_IN_VALIDITY_SAFE 2470 3.05 1.50 3.79 163 TR_XM_MaxSPIKE 2464 0.51 1.50 0.04 164 T_REMOTE_IMAGE 2428 2.73 1.48 3.34 165 URI_TRY_3LD 2405 0.86 1.46 0.57 166 XM_B_DNDMA 2336 0.80 1.42 0.51 167 URI_NOVOWEL 2324 1.22 1.41 1.13 168 FROM_EXCESS_BASE64 2274 1.58 1.38 1.68 169 HK_RANDOM_REPLYTO 2242 0.50 1.36 0.09 170 URI_HEX 2236 1.17 1.36 1.07 171 FROM_DOMAIN_NOVOWEL 2207 0.47 1.34 0.04 172 FVGT_m_MULTI_ODD_EMAIL 2194 0.47 1.33 0.06 173 T_XMDrugObfuBody_00 2188 1.07 1.33 0.94 174 RCVD_IN_IADB_SPF 2174 2.26 1.32 2.72 175 HTML_MIME_NO_HTML_TAG 2128 2.08 1.29 2.46 176 XM_UB99 2117 0.42 1.29 0.00 177 BAYES_40 2097 4.13 1.28 5.51 178 HTTPS_HTTP_MISMATCH 2003 0.92 1.22 0.78 179 XM_DK_Undo_01 2003 1.77 1.22 2.03 180 XM_SendGrid 1985 1.32 1.21 1.37 181 RCVD_IN_IADB_DK 1973 1.96 1.20 2.33 182 XM_B_Phish66 1966 0.59 1.20 0.30 183 TR_LOTS_OF_MONEY3 1965 0.63 1.19 0.36 184 RCVD_IN_IADB_SENDERID 1957 2.03 1.19 2.43 185 SpammyFromTLD_01 1867 0.82 1.14 0.66 186 BASE64_LENGTH_79_INF 1835 4.74 1.12 6.49 187 RCVD_IN_PSBL 1778 0.36 1.08 0.02 188 XMSubMetaI_00 1778 0.72 1.08 0.55 189 RDNS_DYNAMIC 1741 0.46 1.06 0.17 190 XMBdyGiftCard01 1735 0.81 1.06 0.70 191 T_Symld_Words_02 1708 0.95 1.04 0.91 192 THIS_AD 1685 0.68 1.02 0.51 193 XM_B_SEO 1684 0.46 1.02 0.19 194 XMSubject_48 1674 0.35 1.02 0.03 195 RCVD_IN_MSPIKE_L5 1652 0.34 1.00 0.02 196 BAYES_20 1647 2.81 1.00 3.67 197 HTML_FONT_SIZE_LARGE 1634 0.37 0.99 0.07 198 KHOP_HELO_FCRDNS 1633 2.46 0.99 3.16 199 TO_NO_BRKTS_HTML_IMG 1629 0.34 0.99 0.03 200 HTML_IMAGE_ONLY_32 1628 0.63 0.99 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 340405 99.64 99.86 99.54 2 HTML_MESSAGE 303410 91.54 97.42 88.72 3 RELAYCOUNTRY_US 262529 76.08 74.65 76.77 4 XM_B_Unicode 249225 73.06 73.46 72.88 5 DKIM_SIGNED 235464 73.03 81.71 68.85 6 XM_DK_Pass 231178 69.21 72.56 67.60 7 DKIM_VALID 227516 68.27 71.89 66.53 8 DCC_CHECK_NEGATIVE 224207 53.43 28.20 65.56 9 BAYES_50 216527 57.51 45.45 63.32 10 DKIM_VALID_AU 189650 55.85 56.67 55.46 11 XM_B_Unicode3 156836 44.85 42.74 45.86 12 XMListUnsubscribeExists 149612 47.61 55.63 43.75 13 XM_B_SpammyWords 142443 52.00 73.51 41.65 14 DCC_CHECK 117488 46.49 71.73 34.35 15 T_TM2_M_HEADER_IN_MSG 107921 28.93 23.46 31.56 16 HTML_FONT_LOW_CONTRAST 99375 31.29 35.93 29.06 17 DKIM_VALID_EF 98835 28.12 26.49 28.90 18 XMSubLong 97253 29.66 32.21 28.44 19 LOC_TINY_FONT_1 94947 32.44 42.17 27.76 20 FVGT_m_MULTI_ODD 81854 27.42 34.65 23.94 21 ALL_TRUSTED 70161 17.87 12.36 20.52 22 RCVD_IN_MSPIKE_WL 69231 17.35 11.32 20.24 23 T_KAM_HTML_FONT_INVALID 66724 21.18 24.66 19.51 24 MIME_HTML_ONLY 61221 22.39 31.74 17.90 25 XM_B_SpammyWords2 59406 25.51 42.44 17.37 26 RCVD_IN_MSPIKE_H2 50395 15.75 17.86 14.74 27 XM_Multi_Part_URI 43899 15.94 22.40 12.84 28 TR_XM_DK_Unsub 43409 14.74 18.98 12.69 29 USER_IN_DEF_DKIM_WL 40670 9.16 3.49 11.89 30 UNPARSEABLE_RELAY 37216 12.47 15.77 10.88 31 LotsOfNums_01 37045 8.94 5.00 10.83 32 XMStrtUSub 36162 9.65 7.72 10.57 33 MPART_ALT_DIFF 33744 10.69 12.40 9.87 34 XM_B_PhoneNumber 33394 8.24 5.06 9.76 35 XMNumbers 32336 8.29 5.86 9.46 36 BAYES_00 31371 6.38 0.57 9.17 37 XM_Evil_Numbers_Gen 30899 9.33 9.95 9.04 38 RCVD_IN_MSPIKE_H3 30262 7.65 5.17 8.85 39 XM_B_Unsub 28683 13.39 23.79 8.39 40 TooManyTo_001 24914 6.00 3.34 7.29 41 ANY_BOUNCE_MESSAGE 24603 5.70 2.58 7.19 42 BOUNCE_MESSAGE 24602 5.70 2.58 7.19 43 RCVD_IN_MSPIKE_H5 24051 5.80 3.23 7.03 44 BAYES_60 23171 7.57 9.22 6.78 45 HTML_TAG_BALANCE_BODY 22787 5.09 1.81 6.66 46 TR_XM_BayesUnsub 22239 11.95 23.26 6.50 47 BASE64_LENGTH_79_INF 22184 4.74 1.12 6.49 48 TR_XM_DK_Bayes 21183 4.30 0.36 6.19 49 TR_XM_DK_Bayes1 20811 4.22 0.35 6.09 50 TR_MAX_INTL_RELAY 20600 8.69 14.23 6.02 51 T_TooManySym_01 20296 7.60 11.07 5.93 52 XM_DKIMWhitelistDomains 19798 3.93 0.05 5.79 53 FSL_BULK_SIG 18866 9.06 16.43 5.52 54 BAYES_40 18842 4.13 1.28 5.51 55 LOTS_OF_MONEY 18440 7.82 12.86 5.39 56 TR_XM_DK_Bayes2 17912 3.63 0.29 5.24 57 TM2_M_VERY_LONG_WORD 17417 4.48 3.20 5.09 58 XM_H_Long_From01 17396 4.92 4.57 5.09 59 XM_H_GMP 17235 5.03 5.01 5.04 60 XM_B_SpammyWords3 16223 7.04 11.81 4.74 61 XM_B_Phish_Phrases 16154 8.14 15.26 4.72 62 XM_DK_Undo_02 16140 14.74 35.56 4.72 63 MIME_QP_LONG_LINE 15894 5.40 6.96 4.65 64 RCVD_IN_MSPIKE_H4 14918 3.89 2.92 4.36 65 HTML_IMAGE_RATIO_02 14827 4.89 6.03 4.34 66 XM_PDF 14669 3.10 0.64 4.29 67 HTML_IMAGE_ONLY_20 13454 3.70 3.21 3.93 68 BAYES_80 13034 5.49 8.99 3.81 69 RCVD_IN_VALIDITY_SAFE 12972 3.05 1.50 3.79 70 BAYES_20 12559 2.81 1.00 3.67 71 XM_UncommonTLD01 12387 3.91 4.52 3.62 72 TR_XM_SpammyWords4 12035 6.08 11.40 3.52 73 BAYES_99 11489 11.40 28.13 3.36 74 T_REMOTE_IMAGE 11407 2.73 1.48 3.34 75 HTML_IMAGE_RATIO_04 11373 3.43 3.66 3.33 76 DC_PNG_UNO_LARGO 11275 2.40 0.53 3.30 77 RELAYCOUNTRY_META 11027 6.96 14.73 3.22 78 HTML_IMAGE_ONLY_24 10857 2.26 0.35 3.17 79 KHOP_HELO_FCRDNS 10801 2.46 0.99 3.16 80 RCVD_IN_IADB_LISTED 10643 2.61 1.57 3.11 81 T_TooManySym_02 10381 2.34 0.89 3.04 82 RCVD_IN_VALIDITY_CERTIFIED 10317 2.35 0.96 3.02 83 BOTNET_IPINHOSTNAME 10087 5.02 9.31 2.95 84 XMSubMetaSx_00 10052 4.78 8.60 2.94 85 HTML_IMAGE_RATIO_08 10002 2.71 2.26 2.92 86 MAY_BE_FORGED 9837 1.95 0.02 2.88 87 RCVD_IN_IADB_SPF 9291 2.26 1.32 2.72 88 MAILING_LIST_MULTI 9267 2.36 1.64 2.71 89 XM_B_SpammyTLD 9198 3.24 4.37 2.69 90 MIME_CHARSET_FARAWAY 9049 1.85 0.20 2.65 91 HTML_IMAGE_RATIO_06 8818 3.07 4.09 2.58 92 BAYES_999 8691 8.85 21.98 2.54 93 CHARSET_FARAWAY_HEADER 8685 1.74 0.09 2.54 94 HTML_MIME_NO_HTML_TAG 8427 2.08 1.29 2.46 95 TooManyTo_002 8363 1.82 0.51 2.45 96 RCVD_IN_IADB_SENDERID 8313 2.03 1.19 2.43 97 MIME_HTML_ONLY_MULTI 8082 2.34 2.28 2.36 98 RCVD_IN_IADB_DK 7953 1.96 1.20 2.33 99 DKIM_INVALID 7948 4.76 9.82 2.32 100 BAYES_95 7558 3.06 4.83 2.21 101 XM_B_URI_Unicode 7503 2.21 2.25 2.19 102 BAYES_05 7428 1.64 0.53 2.17 103 TO_MALFORMED 7331 1.45 0.01 2.14 104 INVALID_MSGID 7127 1.47 0.19 2.08 105 RCVD_IN_IADB_VOUCHED 7045 1.68 0.88 2.06 106 XM_DK_Undo_01 6946 1.77 1.22 2.03 107 TR_XM_DKIM_Undo 6889 9.50 25.06 2.01 108 XM_CamelCaseFrm001 6851 2.36 3.10 2.00 109 XM_Body_Dirty_Words 6529 2.72 4.41 1.91 110 SUBJ_ALL_CAPS 6185 1.95 2.24 1.81 111 MIME_HTML_MOSTLY 6017 2.67 4.56 1.76 112 XM_B_Unsub2 5828 2.18 3.18 1.70 113 TM2_M_URI_OPT_OUT 5781 5.23 12.60 1.69 114 HELO_NODOT 5768 1.34 0.62 1.69 115 HELO_NO_DOMAIN 5757 1.34 0.62 1.68 116 FROM_EXCESS_BASE64 5742 1.58 1.38 1.68 117 TR_XM_SpammyRelay 5662 4.56 10.59 1.66 118 TooManyTo_003 5529 1.22 0.40 1.62 119 TR_XM_SpammyWords5 5514 2.80 5.27 1.61 120 TR_XM_UnparsRelay 5436 3.79 8.36 1.59 121 TR_Symld_Words 5094 1.27 0.80 1.49 122 RCVD_IN_IADB_OPTIN 5049 1.21 0.67 1.48 123 XMDiploma_00 4942 1.80 2.53 1.45 124 T_XMDrugObfuBody_08 4916 2.40 4.41 1.44 125 XM_B_Investor 4886 2.45 4.56 1.43 126 UNTRUSTED_Relay 4819 2.88 5.92 1.41 127 TR_XM_PhishingBody 4806 3.41 7.58 1.41 128 T_XMDrugObfuBody_14 4733 2.21 3.93 1.38 129 XM_SendGrid 4695 1.32 1.21 1.37 130 T_TooManySym_03 4462 0.93 0.16 1.30 131 XM_GoogleGroups 4374 1.08 0.66 1.28 132 XM_SPF_SoftFail 4328 1.65 2.46 1.27 133 RCVD_IN_MSPIKE_BL 4279 3.23 7.36 1.25 134 XMLngstWrd_00 4274 0.95 0.34 1.25 135 TR_XM_MSPIKECOMBO 4244 3.22 7.32 1.24 136 TR_DCC_Bayes_99 4242 7.39 20.17 1.24 137 BOTNET 4157 5.26 13.66 1.22 138 TooManyTo_004 4085 0.92 0.34 1.19 139 IN_HORDE_ADDRESS_BOOK 4017 0.80 0.04 1.17 140 URI_NOVOWEL 3850 1.22 1.41 1.13 141 XMCapTrack 3770 0.89 0.46 1.10 142 XMBrknScrpt_02 3705 1.26 1.64 1.08 143 URI_HEX 3664 1.17 1.36 1.07 144 RCVD_IN_MSPIKE_L3 3610 1.95 3.80 1.06 145 XMSexyCombo_05 3508 1.82 3.46 1.03 146 TR_XM_DK_SendGrid 3319 0.90 0.76 0.97 147 TooManyTo_005 3303 0.75 0.30 0.97 148 T_XMDrugObfuBody_00 3209 1.07 1.33 0.94 149 TVD_RCVD_IP 3187 0.92 0.90 0.93 150 XM_UB50 3177 1.38 2.33 0.93 151 XM_B_COPY_HTML 3117 0.89 0.84 0.91 152 T_Symld_Words_02 3102 0.95 1.04 0.91 153 TVD_SPACE_RATIO 2988 0.63 0.13 0.87 154 XM_ShortIntro_01 2981 0.71 0.38 0.87 155 T_FILL_THIS_FORM_SHORT 2974 1.22 1.96 0.87 156 XMBody_95 2974 0.62 0.09 0.87 157 XMGappySubj_01 2771 0.60 0.15 0.81 158 XM_H_PHPMailer 2746 0.66 0.36 0.80 159 DKIM_ADSP_CUSTOM_MED 2705 0.80 0.83 0.79 160 XMStockSpam_06 2691 1.68 3.52 0.79 161 HTTPS_HTTP_MISMATCH 2660 0.92 1.22 0.78 162 XM_OfRef6 2593 1.40 2.74 0.76 163 FROM_GOV_DKIM_AU 2587 0.61 0.32 0.76 164 T_TVD_MIME_NO_HEADERS 2542 0.51 0.02 0.74 165 XMGenDplmaNmb 2535 0.99 1.52 0.74 166 T_XMHurry_00 2435 1.11 1.93 0.71 167 XMBdyGiftCard01 2387 0.81 1.06 0.70 168 RELAYCOUNTRY_GB 2381 0.68 0.63 0.70 169 TR_MetaPhish_Combo_01 2328 0.76 0.92 0.68 170 SpammyFromTLD_01 2274 0.82 1.14 0.66 171 XM_H_Long_From02 2154 1.12 2.15 0.63 172 TO_NO_BRKTS_HTML_ONLY 2140 0.51 0.27 0.63 173 RELAYCOUNTRY_CA 2132 2.09 5.15 0.62 174 XMNoVowels 2024 0.89 1.52 0.59 175 XMBSHREFv2 2014 0.49 0.28 0.59 176 URI_TRY_3LD 1960 0.86 1.46 0.57 177 RCVD_IN_BL_SPAMCOP_NET 1955 4.80 13.58 0.57 178 TR_XM_Base64_M1 1934 0.59 0.64 0.57 179 XMSubMetaI_00 1891 0.72 1.08 0.55 180 T_OBFU_PDF_ATTACH 1878 0.42 0.14 0.55 181 MSGID_FROM_MTA_HEADER 1876 0.47 0.32 0.55 182 MPART_ALT_DIFF_COUNT 1871 0.95 1.78 0.55 183 XMSlimDrugH 1859 0.58 0.66 0.54 184 THIS_AD 1751 0.68 1.02 0.51 185 XM_B_DNDMA 1740 0.80 1.42 0.51 186 FORGED_GMAIL_RCVD 1718 0.55 0.65 0.50 187 XMPhish30 1717 0.83 1.51 0.50 188 TRACKER_ID 1693 0.37 0.11 0.50 189 XMGappySubj_02 1685 0.35 0.05 0.49 190 SHORT_HELO_AND_INLINE_IMAGE 1664 0.37 0.13 0.49 191 T_TooManySym_04 1633 0.33 0.03 0.48 192 XM_B_SpammyWords4 1629 0.97 2.00 0.48 193 XMClaimOffer 1596 0.54 0.70 0.47 194 TR_XM_SpammyWords3 1584 2.15 5.65 0.46 195 HTML_IMAGE_ONLY_32 1554 0.63 0.99 0.45 196 RELAYCOUNTRY_AU 1539 1.10 2.44 0.45 197 XMSubMetaSxObfu_03 1536 1.34 3.20 0.45 198 XMLngstWrd_01 1516 0.40 0.30 0.44 199 NML_ADSP_CUSTOM_MED 1470 0.51 0.67 0.43 200 XM_B_REG_HTML 1451 0.45 0.49 0.42 ----------------------------------------------------------------------