Email: 501859 Autolearn: 0 AvgScore: 4.95 AvgScanTime: 1.33 sec Spam: 157541 Autolearn: 0 AvgScore: 13.79 AvgScanTime: 1.60 sec Ham: 344318 Autolearn: 0 AvgScore: 0.91 AvgScanTime: 1.21 sec Time Spent Running SA: 185.84 hours Time Spent Processing Spam: 69.89 hours Time Spent Processing Ham: 115.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 157376 99.65 99.90 99.54 2 HTML_MESSAGE 153842 91.29 97.65 88.37 3 DKIM_SIGNED 145597 81.42 92.42 76.38 4 XM_DK_Pass 132921 78.02 84.37 75.12 5 RELAYCOUNTRY_US 132855 83.19 84.33 82.67 6 XM_B_Unicode 131701 76.13 83.60 72.72 7 DKIM_VALID 131678 77.07 83.58 74.09 8 DCC_CHECK 112383 45.05 71.34 33.02 9 XM_B_SpammyWords 110314 53.28 70.02 45.61 10 XMListUnsubscribeExists 104531 55.18 66.35 50.06 11 DKIM_VALID_AU 103386 62.85 65.62 61.59 12 LOC_TINY_FONT_1 78996 37.63 50.14 31.90 13 XM_B_Unicode3 77836 46.45 49.41 45.10 14 HTML_FONT_LOW_CONTRAST 67760 35.63 43.01 32.26 15 XM_DK_Undo_02 65773 16.76 41.75 5.32 16 XM_B_SpammyWords2 61909 25.51 39.30 19.21 17 BAYES_50 60704 53.66 38.53 60.58 18 FVGT_m_MULTI_ODD 60611 29.79 38.47 25.82 19 BAYES_99 50509 12.84 32.06 4.05 20 T_KAM_HTML_FONT_INVALID 47247 24.98 29.99 22.69 21 DKIM_VALID_EF 46583 29.67 29.57 29.71 22 DCC_CHECK_NEGATIVE 45044 54.86 28.59 66.88 23 TR_XM_DKIM_Undo 44715 10.09 28.38 1.72 24 XM_Multi_Part_URI 41874 18.60 26.58 14.95 25 MIME_HTML_ONLY 41542 21.52 26.37 19.31 26 XMSubLong 38973 24.20 24.74 23.95 27 XM_B_Unsub 38785 13.71 24.62 8.72 28 BAYES_999 38603 9.80 24.50 3.07 29 TR_XM_BayesUnsub 37709 12.24 23.94 6.88 30 TR_XM_DK_Unsub 34486 16.00 21.89 13.30 31 RCVD_IN_MSPIKE_H2 34148 17.86 21.68 16.11 32 UNPARSEABLE_RELAY 32669 15.32 20.74 12.84 33 TR_DCC_Bayes_99 32506 6.98 20.63 0.73 34 T_TM2_M_HEADER_IN_MSG 31988 27.41 20.30 30.67 35 RELAYCOUNTRY_META 29511 8.37 18.73 3.63 36 TR_MAX_INTL_RELAY 26051 9.76 16.54 6.65 37 TR_XM_SpammyRelay 23151 5.92 14.70 1.90 38 RCVD_IN_BL_SPAMCOP_NET 22879 4.98 14.52 0.62 39 XM_B_SpammyWords3 22030 8.41 13.98 5.85 40 LOTS_OF_MONEY 21653 8.05 13.74 5.45 41 BOTNET 21457 5.20 13.62 1.35 42 RCVD_IN_MSPIKE_WL 20863 19.78 13.24 22.77 43 TR_XM_SpammyWords4 19039 6.27 12.09 3.61 44 TR_XM_UnparsRelay 18597 5.01 11.80 1.91 45 BOTNET_IPINHOSTNAME 17868 5.76 11.34 3.21 46 TR_XM_SpammyWords2 17185 3.61 10.91 0.27 47 MPART_ALT_DIFF 17144 6.17 10.88 4.01 48 XM_Evil_Numbers_Gen 16901 9.72 10.73 9.26 49 FSL_BULK_SIG 16875 5.47 10.71 3.07 50 BAYES_80 15764 5.97 10.01 4.12 51 XMSubMetaSx_00 14955 5.33 9.49 3.42 52 BAYES_60 14291 8.25 9.07 7.87 53 DKIM_INVALID 13919 4.35 8.84 2.29 54 RCVD_IN_MSPIKE_BL 13636 3.60 8.66 1.29 55 TR_XM_MSPIKECOMBO 13628 3.60 8.65 1.29 56 XM_B_Phish_Phrases 13029 6.43 8.27 5.58 57 TR_XM_SPAMCOP 10548 2.25 6.70 0.21 58 XMStrtUSub 10463 5.33 6.64 4.72 59 UNTRUSTED_Relay 10429 3.19 6.62 1.62 60 RCVD_IN_MSPIKE_H3 9990 8.64 6.34 9.69 61 HTML_IMAGE_RATIO_02 9981 5.46 6.34 5.06 62 TR_XM_SpammyWords3 9971 2.44 6.33 0.66 63 BAYES_95 9244 3.58 5.87 2.53 64 XM_B_PhoneNumber 9228 8.51 5.86 9.73 65 LotsOfNums_01 9198 9.32 5.84 10.91 66 HTML_IMAGE_RATIO_04 8872 4.78 5.63 4.39 67 XM_UncommonTLD01 8779 4.34 5.57 3.77 68 TR_XM_NoHeaderRelay 8651 1.83 5.49 0.15 69 RCVD_IN_MSPIKE_L3 8403 2.38 5.33 1.02 70 RELAYCOUNTRY_CA 8329 2.09 5.29 0.63 71 XM_H_Long_From01 8156 5.65 5.18 5.86 72 XM_H_GMP 8153 5.04 5.18 4.97 73 XM_B_Investor 7766 2.57 4.93 1.49 74 DKIM_ADSP_NXDOMAIN 7757 1.76 4.92 0.31 75 TR_XM_SpammyWords5 7673 2.61 4.87 1.58 76 XM_Body_Dirty_Words 7642 2.90 4.85 2.01 77 XM_B_SpammyTLD 7559 3.38 4.80 2.74 78 MIME_HTML_MOSTLY 7178 2.70 4.56 1.85 79 XMNumbers 6939 3.72 4.40 3.41 80 XMSexyCombo_05 6797 2.07 4.31 1.04 81 T_XMDrugObfuBody_14 6645 2.40 4.22 1.57 82 TR_XM_PhishingBody 6643 2.54 4.22 1.78 83 TooManyTo_001 6493 6.63 4.12 7.78 84 XM_H_DKIM_GOOG 6275 1.26 3.98 0.01 85 SCC_CANSPAM_2 6137 1.22 3.90 0.00 86 TM2_M_VERY_LONG_WORD 5918 4.39 3.76 4.67 87 XM_B_Unsub2 5908 2.19 3.75 1.47 88 MIME_QP_LONG_LINE 5818 4.74 3.69 5.22 89 RCVD_IN_MSPIKE_H5 5629 6.55 3.57 7.91 90 RCVD_IN_VALIDITY_RPBL 5386 1.10 3.42 0.04 91 XMStockSpam_06 5258 1.63 3.34 0.85 92 RCVD_IN_MSPIKE_H4 5244 4.60 3.33 5.18 93 XM_CamelCaseFrm001 5215 2.65 3.31 2.34 94 XMBody_17 5195 1.38 3.30 0.50 95 XM_OfRef6 4933 1.52 3.13 0.78 96 RELAYCOUNTRY_PL 4824 0.97 3.06 0.02 97 XMSubMetaSxObfu_03 4755 1.26 3.02 0.45 98 USER_IN_DEF_DKIM_WL 4750 10.01 3.02 13.21 99 HTML_IMAGE_RATIO_06 4685 3.16 2.97 3.24 100 XM_SPF_SoftFail 4648 1.77 2.95 1.22 101 XMDiploma_00 4545 1.82 2.88 1.34 102 T_XMDrugObfuBody_08 4515 1.88 2.87 1.42 103 TR_XM_MSPIKECOMBO2 4498 0.97 2.86 0.10 104 RELAYCOUNTRY_AU 4360 1.32 2.77 0.66 105 HTML_IMAGE_RATIO_08 4344 2.47 2.76 2.33 106 MIME_HTML_ONLY_MULTI 4264 2.46 2.71 2.34 107 XM_UB50 4069 1.58 2.58 1.11 108 NORDNS_LOW_CONTRAST 3917 0.79 2.49 0.01 109 T_TooManySym_01 3911 4.84 2.48 5.92 110 XM_B_URI_Unicode 3889 1.95 2.47 1.71 111 TR_XM_INV_DKIM 3858 0.78 2.45 0.01 112 TM2_M_URI_OPT_OUT 3777 1.88 2.40 1.65 113 XM_URI_RBL 3648 0.97 2.32 0.35 114 XM_ProductURIs 3601 1.02 2.29 0.44 115 SUBJ_ALL_CAPS 3587 1.87 2.28 1.69 116 RCVD_IN_MSPIKE_L4 3552 0.88 2.25 0.25 117 T_XMHurry_00 3524 1.23 2.24 0.77 118 BOTNET_NORDNS 3508 0.70 2.23 0.01 119 XM_B_SpammyWords4 3396 1.16 2.16 0.70 120 TR_XM_MaxSPIKE 3205 0.70 2.03 0.09 121 MAILING_LIST_MULTI 3106 2.68 1.97 3.01 122 RCVD_IN_VALIDITY_SAFE 2947 3.87 1.87 4.78 123 XM_B_DNDMA 2925 1.27 1.86 1.00 124 T_XMDrugObfuBody_00 2904 1.44 1.84 1.26 125 RCVD_IN_IADB_LISTED 2895 2.88 1.84 3.35 126 T_FILL_THIS_FORM_SHORT 2894 1.16 1.84 0.85 127 SpammyFromTLD_02 2853 0.74 1.81 0.25 128 BAYES_40 2835 4.51 1.80 5.75 129 FROM_EXCESS_BASE64 2817 1.99 1.79 2.09 130 T_REMOTE_IMAGE 2759 3.05 1.75 3.64 131 XMPhish30 2702 1.00 1.72 0.67 132 URI_TRY_3LD 2596 0.96 1.65 0.65 133 HK_RANDOM_REPLYTO 2596 0.56 1.65 0.07 134 MPART_ALT_DIFF_COUNT 2490 0.80 1.58 0.44 135 XMGenDplmaNmb 2483 0.97 1.58 0.69 136 TR_LOTS_OF_MONEY3 2474 0.72 1.57 0.34 137 XMBrknScrpt_02 2418 1.23 1.53 1.08 138 URI_NOVOWEL 2416 1.35 1.53 1.27 139 XM_UB99 2362 0.47 1.50 0.00 140 RCVD_IN_IADB_SPF 2361 2.53 1.50 3.01 141 XM_DK_Undo_01 2358 1.76 1.50 1.88 142 RELAYCOUNTRY_FR 2342 0.70 1.49 0.35 143 XM_SendGrid 2304 1.52 1.46 1.55 144 XMSubMetaI_00 2175 0.87 1.38 0.64 145 HTML_MIME_NO_HTML_TAG 2151 2.39 1.37 2.85 146 RCVD_IN_IADB_DK 2135 2.23 1.36 2.64 147 BAYES_20 2130 3.10 1.35 3.90 148 RCVD_IN_IADB_SENDERID 2105 2.29 1.34 2.73 149 HTML_FONT_SIZE_LARGE 2091 0.45 1.33 0.05 150 XM_B_SEO 2079 0.59 1.32 0.25 151 RCVD_IN_PSBL 2051 0.41 1.30 0.00 152 SHOPIFY_IMG_NOT_RCVD_SFY 2036 0.57 1.29 0.25 153 XM_H_Long_From02 1980 0.90 1.26 0.74 154 RCVD_IN_VALIDITY_CERTIFIED 1958 3.16 1.24 4.03 155 T_MONEY_PERCENT 1950 0.55 1.24 0.24 156 TR_LOTS_OF_MONEY2 1950 0.55 1.24 0.24 157 THIS_AD 1879 0.59 1.19 0.31 158 TR_XM_SEO4 1810 0.44 1.15 0.12 159 URI_HEX 1806 1.03 1.15 0.98 160 SpammyFromTLD_01 1791 0.82 1.14 0.67 161 RCVD_IN_IADB_VOUCHED 1782 1.77 1.13 2.06 162 ALL_TRUSTED 1753 10.10 1.11 14.21 163 XM_B_Phish66 1731 0.64 1.10 0.43 164 XMBdyGiftCard01 1728 0.90 1.10 0.80 165 HTML_IMAGE_ONLY_16 1687 0.53 1.07 0.29 166 RDNS_DYNAMIC 1682 0.44 1.07 0.16 167 XM_UB999 1679 0.33 1.07 0.00 168 TR_MetaPhish_Combo_01 1674 0.98 1.06 0.94 169 RCVD_IN_MSPIKE_L5 1673 0.34 1.06 0.02 170 TR_XM_Base64_M1 1653 0.89 1.05 0.81 171 XM_RXBody 1627 0.47 1.03 0.21 172 XMBody_78 1624 0.56 1.03 0.35 173 TR_XM_DK_SendGrid 1622 1.05 1.03 1.06 174 RELAYCOUNTRY_GB 1585 0.79 1.01 0.70 175 XM_B_COPY_HTML 1554 0.91 0.99 0.88 176 FVGT_m_MULTI_ODD_EMAIL 1552 0.35 0.99 0.06 177 XMHTML_After_End 1536 0.53 0.97 0.32 178 HTML_IMAGE_ONLY_28 1526 0.53 0.97 0.33 179 HTML_SHORT_LINK_IMG_3 1520 0.36 0.96 0.09 180 HTML_IMAGE_ONLY_20 1490 0.67 0.95 0.54 181 BOUNCE_MESSAGE 1479 4.64 0.94 6.34 182 ANY_BOUNCE_MESSAGE 1479 4.64 0.94 6.34 183 XM_UB60 1463 0.36 0.93 0.10 184 XM_GoogleGroups 1461 1.07 0.93 1.14 185 XM_S_SpammyWords 1447 0.53 0.92 0.36 186 TR_XM_Spammywords 1445 0.53 0.92 0.36 187 XMPhish14 1434 0.57 0.91 0.41 188 MIME_BOUND_DIGITS_15 1433 0.29 0.91 0.00 189 HTTPS_HTTP_MISMATCH 1426 0.78 0.91 0.73 190 TVD_RCVD_IP 1423 0.88 0.90 0.87 191 FROM_DOMAIN_NOVOWEL 1410 0.30 0.90 0.03 192 NO_DNS_FOR_FROM 1404 0.44 0.89 0.23 193 TR_XM_MaxWHORU 1387 0.40 0.88 0.18 194 TR_XM_InvalidRelay 1367 0.28 0.87 0.01 195 MultiRelay_CC 1358 0.39 0.86 0.18 196 TR_BOTNET_NEGATE 1334 0.38 0.85 0.17 197 MIXED_HREF_CASE 1316 0.32 0.84 0.09 198 DKIM_ADSP_CUSTOM_MED 1312 0.83 0.83 0.83 199 XM_OfRef7 1294 0.34 0.82 0.12 200 HTML_TAG_BALANCE_BODY 1279 0.59 0.81 0.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 342735 99.65 99.90 99.54 2 HTML_MESSAGE 304286 91.29 97.65 88.37 3 RELAYCOUNTRY_US 284646 83.19 84.33 82.67 4 DKIM_SIGNED 262993 81.42 92.42 76.38 5 XM_DK_Pass 258635 78.02 84.37 75.12 6 DKIM_VALID 255105 77.07 83.58 74.09 7 XM_B_Unicode 250375 76.13 83.60 72.72 8 DCC_CHECK_NEGATIVE 230284 54.86 28.59 66.88 9 DKIM_VALID_AU 212052 62.85 65.62 61.59 10 BAYES_50 208591 53.66 38.53 60.58 11 XMListUnsubscribeExists 172375 55.18 66.35 50.06 12 XM_B_SpammyWords 157054 53.28 70.02 45.61 13 XM_B_Unicode3 155286 46.45 49.41 45.10 14 DCC_CHECK 113692 45.05 71.34 33.02 15 HTML_FONT_LOW_CONTRAST 111072 35.63 43.01 32.26 16 LOC_TINY_FONT_1 109848 37.63 50.14 31.90 17 T_TM2_M_HEADER_IN_MSG 105596 27.41 20.30 30.67 18 DKIM_VALID_EF 102308 29.67 29.57 29.71 19 FVGT_m_MULTI_ODD 88910 29.79 38.47 25.82 20 XMSubLong 82479 24.20 24.74 23.95 21 RCVD_IN_MSPIKE_WL 78401 19.78 13.24 22.77 22 T_KAM_HTML_FONT_INVALID 78123 24.98 29.99 22.69 23 MIME_HTML_ONLY 66483 21.52 26.37 19.31 24 XM_B_SpammyWords2 66132 25.51 39.30 19.21 25 RCVD_IN_MSPIKE_H2 55480 17.86 21.68 16.11 26 XM_Multi_Part_URI 51459 18.60 26.58 14.95 27 ALL_TRUSTED 48916 10.10 1.11 14.21 28 TR_XM_DK_Unsub 45792 16.00 21.89 13.30 29 USER_IN_DEF_DKIM_WL 45476 10.01 3.02 13.21 30 UNPARSEABLE_RELAY 44216 15.32 20.74 12.84 31 LotsOfNums_01 37559 9.32 5.84 10.91 32 XM_B_PhoneNumber 33489 8.51 5.86 9.73 33 RCVD_IN_MSPIKE_H3 33348 8.64 6.34 9.69 34 XM_Evil_Numbers_Gen 31889 9.72 10.73 9.26 35 BAYES_00 31102 6.42 0.71 9.03 36 XM_B_Unsub 30028 13.71 24.62 8.72 37 RCVD_IN_MSPIKE_H5 27231 6.55 3.57 7.91 38 BAYES_60 27094 8.25 9.07 7.87 39 TooManyTo_001 26776 6.63 4.12 7.78 40 XM_DKIMWhitelistDomains 24516 4.89 0.02 7.12 41 TR_XM_BayesUnsub 23697 12.24 23.94 6.88 42 TR_MAX_INTL_RELAY 22911 9.76 16.54 6.65 43 TR_XM_DK_Bayes 22292 4.61 0.53 6.47 44 TR_XM_DK_Bayes1 21949 4.54 0.52 6.37 45 BOUNCE_MESSAGE 21813 4.64 0.94 6.34 46 ANY_BOUNCE_MESSAGE 21813 4.64 0.94 6.34 47 T_TooManySym_01 20371 4.84 2.48 5.92 48 XM_H_Long_From01 20181 5.65 5.18 5.86 49 XM_B_SpammyWords3 20155 8.41 13.98 5.85 50 BAYES_40 19800 4.51 1.80 5.75 51 XM_B_Phish_Phrases 19228 6.43 8.27 5.58 52 TR_XM_DK_Bayes2 19107 3.94 0.43 5.55 53 LOTS_OF_MONEY 18749 8.05 13.74 5.45 54 XM_DK_Undo_02 18334 16.76 41.75 5.32 55 MIME_QP_LONG_LINE 17965 4.74 3.69 5.22 56 RCVD_IN_MSPIKE_H4 17822 4.60 3.33 5.18 57 HTML_IMAGE_RATIO_02 17432 5.46 6.34 5.06 58 XM_H_GMP 17128 5.04 5.18 4.97 59 RCVD_IN_VALIDITY_SAFE 16465 3.87 1.87 4.78 60 XMStrtUSub 16268 5.33 6.64 4.72 61 TM2_M_VERY_LONG_WORD 16095 4.39 3.76 4.67 62 XM_PDF 15760 3.35 0.65 4.58 63 HTML_IMAGE_RATIO_04 15121 4.78 5.63 4.39 64 BAYES_80 14183 5.97 10.01 4.12 65 BAYES_99 13946 12.84 32.06 4.05 66 RCVD_IN_VALIDITY_CERTIFIED 13892 3.16 1.24 4.03 67 MPART_ALT_DIFF 13802 6.17 10.88 4.01 68 BAYES_20 13436 3.10 1.35 3.90 69 XM_UncommonTLD01 12978 4.34 5.57 3.77 70 T_REMOTE_IMAGE 12548 3.05 1.75 3.64 71 RELAYCOUNTRY_META 12510 8.37 18.73 3.63 72 TR_XM_SpammyWords4 12418 6.27 12.09 3.61 73 XMSubMetaSx_00 11777 5.33 9.49 3.42 74 XMNumbers 11738 3.72 4.40 3.41 75 RCVD_IN_IADB_LISTED 11536 2.88 1.84 3.35 76 HTML_IMAGE_RATIO_06 11159 3.16 2.97 3.24 77 BOTNET_IPINHOSTNAME 11039 5.76 11.34 3.21 78 FSL_BULK_SIG 10585 5.47 10.71 3.07 79 BAYES_999 10582 9.80 24.50 3.07 80 RCVD_IN_IADB_SPF 10350 2.53 1.50 3.01 81 MAILING_LIST_MULTI 10348 2.68 1.97 3.01 82 T_TooManySym_02 10113 2.22 0.65 2.94 83 HTML_MIME_NO_HTML_TAG 9828 2.39 1.37 2.85 84 XM_B_SpammyTLD 9427 3.38 4.80 2.74 85 KHOP_HELO_FCRDNS 9425 2.12 0.78 2.74 86 RCVD_IN_IADB_SENDERID 9399 2.29 1.34 2.73 87 RCVD_IN_IADB_DK 9079 2.23 1.36 2.64 88 BAYES_95 8723 3.58 5.87 2.53 89 MAY_BE_FORGED 8526 1.71 0.04 2.48 90 MIME_HTML_ONLY_MULTI 8069 2.46 2.71 2.34 91 XM_CamelCaseFrm001 8067 2.65 3.31 2.34 92 HTML_IMAGE_RATIO_08 8031 2.47 2.76 2.33 93 DKIM_INVALID 7888 4.35 8.84 2.29 94 TooManyTo_002 7878 1.75 0.57 2.29 95 TO_MALFORMED 7514 1.50 0.01 2.18 96 BAYES_05 7439 1.67 0.60 2.16 97 FROM_EXCESS_BASE64 7188 1.99 1.79 2.09 98 MIME_CHARSET_FARAWAY 7172 1.52 0.27 2.08 99 INVALID_MSGID 7120 1.53 0.34 2.07 100 RCVD_IN_IADB_VOUCHED 7093 1.77 1.13 2.06 101 XM_Body_Dirty_Words 6925 2.90 4.85 2.01 102 CHARSET_FARAWAY_HEADER 6706 1.36 0.08 1.95 103 TR_XM_UnparsRelay 6562 5.01 11.80 1.91 104 TR_XM_SpammyRelay 6548 5.92 14.70 1.90 105 XM_DK_Undo_01 6461 1.76 1.50 1.88 106 MIME_HTML_MOSTLY 6369 2.70 4.56 1.85 107 TR_XM_PhishingBody 6122 2.54 4.22 1.78 108 TR_XM_DKIM_Undo 5924 10.09 28.38 1.72 109 XM_B_URI_Unicode 5880 1.95 2.47 1.71 110 SUBJ_ALL_CAPS 5817 1.87 2.28 1.69 111 TM2_M_URI_OPT_OUT 5670 1.88 2.40 1.65 112 UNTRUSTED_Relay 5576 3.19 6.62 1.62 113 TR_XM_SpammyWords5 5443 2.61 4.87 1.58 114 T_XMDrugObfuBody_14 5394 2.40 4.22 1.57 115 XM_SendGrid 5334 1.52 1.46 1.55 116 TooManyTo_003 5300 1.20 0.45 1.54 117 XM_B_Investor 5121 2.57 4.93 1.49 118 RCVD_IN_IADB_OPTIN 5092 1.25 0.76 1.48 119 XM_B_Unsub2 5069 2.19 3.75 1.47 120 HELO_NODOT 5042 1.17 0.53 1.46 121 HELO_NO_DOMAIN 5037 1.17 0.52 1.46 122 T_XMDrugObfuBody_08 4900 1.88 2.87 1.42 123 TR_Symld_Words 4871 1.21 0.77 1.41 124 BOTNET 4636 5.20 13.62 1.35 125 XMDiploma_00 4610 1.82 2.88 1.34 126 RCVD_IN_MSPIKE_BL 4438 3.60 8.66 1.29 127 TR_XM_MSPIKECOMBO 4431 3.60 8.65 1.29 128 URI_NOVOWEL 4360 1.35 1.53 1.27 129 T_XMDrugObfuBody_00 4337 1.44 1.84 1.26 130 T_TooManySym_03 4233 0.92 0.25 1.23 131 XM_SPF_SoftFail 4213 1.77 2.95 1.22 132 IN_HORDE_ADDRESS_BOOK 4153 0.85 0.06 1.21 133 XMLngstWrd_00 4127 0.92 0.30 1.20 134 TooManyTo_004 3984 0.91 0.38 1.16 135 XM_GoogleGroups 3919 1.07 0.93 1.14 136 XM_UB50 3839 1.58 2.58 1.11 137 TVD_SPACE_RATIO 3815 0.83 0.21 1.11 138 XMBrknScrpt_02 3733 1.23 1.53 1.08 139 TR_XM_DK_SendGrid 3666 1.05 1.03 1.06 140 XMSexyCombo_05 3568 2.07 4.31 1.04 141 XMCapTrack 3535 0.90 0.61 1.03 142 RCVD_IN_MSPIKE_L3 3520 2.38 5.33 1.02 143 XM_B_DNDMA 3427 1.27 1.86 1.00 144 URI_HEX 3373 1.03 1.15 0.98 145 XM_ShortIntro_01 3282 0.80 0.45 0.95 146 TR_MetaPhish_Combo_01 3245 0.98 1.06 0.94 147 XMGappySubj_01 3225 0.72 0.24 0.94 148 TooManyTo_005 3189 0.74 0.33 0.93 149 XM_B_COPY_HTML 3026 0.91 0.99 0.88 150 TVD_RCVD_IP 3007 0.88 0.90 0.87 151 T_FILL_THIS_FORM_SHORT 2941 1.16 1.84 0.85 152 XMStockSpam_06 2935 1.63 3.34 0.85 153 DKIM_ADSP_CUSTOM_MED 2852 0.83 0.83 0.83 154 TR_XM_Base64_M1 2793 0.89 1.05 0.81 155 XMBdyGiftCard01 2769 0.90 1.10 0.80 156 XM_OfRef6 2672 1.52 3.13 0.78 157 T_XMHurry_00 2660 1.23 2.24 0.77 158 XMBSHREFv2 2612 0.66 0.44 0.76 159 XM_H_Long_From02 2548 0.90 1.26 0.74 160 TR_DCC_Bayes_99 2512 6.98 20.63 0.73 161 HTTPS_HTTP_MISMATCH 2509 0.78 0.91 0.73 162 XM_B_SpammyWords4 2403 1.16 2.16 0.70 163 RELAYCOUNTRY_GB 2397 0.79 1.01 0.70 164 XM_H_PHPMailer 2386 0.58 0.34 0.69 165 FROM_GOV_DKIM_AU 2386 0.57 0.29 0.69 166 XMGenDplmaNmb 2362 0.97 1.58 0.69 167 SpammyFromTLD_01 2323 0.82 1.14 0.67 168 XMPhish30 2302 1.00 1.72 0.67 169 RELAYCOUNTRY_AU 2276 1.32 2.77 0.66 170 TR_XM_SpammyWords3 2261 2.44 6.33 0.66 171 URI_TRY_3LD 2243 0.96 1.65 0.65 172 PLING_QUERY 2236 0.64 0.61 0.65 173 XMSubMetaI_00 2209 0.87 1.38 0.64 174 RELAYCOUNTRY_CA 2175 2.09 5.29 0.63 175 XMNoVowels 2152 0.59 0.52 0.63 176 RCVD_IN_BL_SPAMCOP_NET 2121 4.98 14.52 0.62 177 T_Symld_Words_02 2006 0.60 0.62 0.58 178 FORGED_GMAIL_RCVD 1931 0.58 0.63 0.56 179 XMGappySubj_02 1906 0.40 0.06 0.55 180 TO_NO_BRKTS_HTML_ONLY 1900 0.43 0.15 0.55 181 HTML_IMAGE_ONLY_20 1869 0.67 0.95 0.54 182 T_OBFU_PDF_ATTACH 1848 0.41 0.13 0.54 183 TVD_PH_BODY_ACCOUNTS_PRE 1803 0.39 0.09 0.52 184 XMBody_17 1716 1.38 3.30 0.50 185 T_TVD_MIME_NO_HEADERS 1709 0.35 0.03 0.50 186 TRACKER_ID 1707 0.45 0.34 0.50 187 HTML_IMAGE_ONLY_24 1680 0.42 0.28 0.49 188 HTML_TAG_BALANCE_BODY 1676 0.59 0.81 0.49 189 SHORT_HELO_AND_INLINE_IMAGE 1613 0.36 0.12 0.47 190 HTML_IMAGE_ONLY_32 1579 0.36 0.16 0.46 191 XMMoneyMeta_00 1570 0.47 0.49 0.46 192 XMSubMetaSxObfu_03 1564 1.26 3.02 0.45 193 NML_ADSP_CUSTOM_MED 1549 0.53 0.69 0.45 194 MPART_ALT_DIFF_COUNT 1519 0.80 1.58 0.44 195 MISSING_HEADERS 1506 0.44 0.46 0.44 196 XM_ProductURIs 1504 1.02 2.29 0.44 197 XM_B_Phish66 1472 0.64 1.10 0.43 198 MSGID_FROM_MTA_HEADER 1426 0.36 0.24 0.41 199 XMPhish14 1420 0.57 0.91 0.41 200 XMLngstWrd_01 1370 0.36 0.27 0.40 ----------------------------------------------------------------------