Email: 604564 Autolearn: 0 AvgScore: 5.11 AvgScanTime: 1.18 sec Spam: 178093 Autolearn: 0 AvgScore: 12.93 AvgScanTime: 1.45 sec Ham: 426471 Autolearn: 0 AvgScore: 1.84 AvgScanTime: 1.07 sec Time Spent Running SA: 197.84 hours Time Spent Processing Spam: 71.52 hours Time Spent Processing Ham: 126.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 177760 99.66 99.81 99.60 2 HTML_MESSAGE 173875 92.72 97.63 90.67 3 DKIM_SIGNED 145608 66.19 81.76 59.69 4 XM_B_Unicode 139687 71.00 78.43 67.89 5 XM_DK_Pass 137973 64.20 77.47 58.66 6 DKIM_VALID 136808 63.52 76.82 57.97 7 RELAYCOUNTRY_US 135950 74.88 76.34 74.27 8 DCC_CHECK 115189 37.78 64.68 26.54 9 XM_B_SpammyWords 110093 46.66 61.82 40.33 10 DKIM_VALID_AU 107814 52.05 60.54 48.51 11 XMListUnsubscribeExists 107126 44.89 60.15 38.52 12 XM_B_Unicode3 80342 43.21 45.11 42.42 13 LOC_TINY_FONT_1 78312 30.62 43.97 25.04 14 HTML_FONT_LOW_CONTRAST 75511 30.19 42.40 25.10 15 XM_DK_Undo_02 69626 14.81 39.10 4.67 16 BAYES_50 66625 50.62 37.41 56.13 17 XM_B_SpammyWords2 64324 22.39 36.12 16.66 18 MIME_HTML_ONLY 64022 31.89 35.95 30.19 19 DCC_CHECK_NEGATIVE 62777 62.15 35.25 73.38 20 FVGT_m_MULTI_ODD 61913 24.81 34.76 20.65 21 BAYES_99 60867 16.70 34.18 9.41 22 T_KAM_HTML_FONT_INVALID 54514 21.78 30.61 18.10 23 DKIM_VALID_EF 49352 25.47 27.71 24.54 24 TR_XM_DKIM_Undo 46280 8.83 25.99 1.66 25 XMSubLong 43201 21.67 24.26 20.59 26 BAYES_999 41936 12.93 23.55 8.49 27 XM_Multi_Part_URI 39088 14.74 21.95 11.73 28 RCVD_IN_MSPIKE_H2 38193 15.17 21.45 12.55 29 TR_XM_DK_Unsub 36488 13.83 20.49 11.05 30 T_TM2_M_HEADER_IN_MSG 35681 24.07 20.04 25.76 31 TR_DCC_Bayes_99 35356 6.44 19.85 0.84 32 XM_B_Unsub 32677 10.61 18.35 7.38 33 UNPARSEABLE_RELAY 32394 11.73 18.19 9.03 34 TR_XM_BayesUnsub 31124 9.23 17.48 5.78 35 TR_MAX_INTL_RELAY 29582 9.87 16.61 7.06 36 RELAYCOUNTRY_META 27982 6.79 15.71 3.07 37 LOTS_OF_MONEY 24145 7.53 13.56 5.01 38 XM_B_SpammyWords3 23115 7.03 12.98 4.55 39 RCVD_IN_MSPIKE_WL 21158 16.32 11.88 18.18 40 TR_XM_SpammyWords4 21143 5.78 11.87 3.24 41 RCVD_IN_BL_SPAMCOP_NET 20968 3.96 11.77 0.69 42 TR_XM_SpammyRelay 20512 4.55 11.52 1.64 43 TR_XM_UnparsRelay 18260 3.95 10.25 1.32 44 ALL_TRUSTED 17896 19.27 10.05 23.12 45 BOTNET_IPINHOSTNAME 17542 10.67 9.85 11.02 46 XM_Evil_Numbers_Gen 17516 10.20 9.84 10.35 47 XM_UncommonTLD01 17514 5.63 9.83 3.88 48 TR_XM_SpammyWords2 16808 2.96 9.44 0.25 49 BAYES_80 16616 5.52 9.33 3.93 50 FSL_BULK_SIG 16238 4.71 9.12 2.87 51 PDS_FROM_NAME_TO_DOMAIN 15299 5.71 8.59 4.51 52 PDS_FRNOM_TODOM_NAKED_TO 15297 5.71 8.59 4.51 53 BAYES_60 14550 6.96 8.17 6.45 54 BOTNET 13811 3.03 7.75 1.05 55 XM_B_Phish_Phrases 13713 5.75 7.70 4.93 56 TR_XM_PhishingBody 12534 3.14 7.04 1.51 57 TR_XM_SPAMCOP 12293 2.23 6.90 0.27 58 BAYES_95 12146 4.22 6.82 3.13 59 RCVD_IN_MSPIKE_BL 11913 2.58 6.69 0.86 60 TR_XM_MSPIKECOMBO 11896 2.58 6.68 0.86 61 UNTRUSTED_Relay 11579 2.89 6.50 1.38 62 XM_H_GMP 11578 5.23 6.50 4.70 63 LotsOfNums_01 11574 8.50 6.50 9.33 64 XM_H_Long_From01 11421 5.15 6.41 4.62 65 XMStrtUSub 10759 7.80 6.04 8.53 66 XM_B_PhoneNumber 10500 7.76 5.90 8.54 67 HTML_IMAGE_RATIO_02 10316 4.44 5.79 3.87 68 MPART_ALT_DIFF 10224 6.84 5.74 7.31 69 RCVD_IN_MSPIKE_H3 9885 7.24 5.55 7.94 70 TR_XM_SpoofStaff 9800 1.66 5.50 0.06 71 XMSpoofStaff2 9784 1.66 5.49 0.06 72 TR_XM_PSC1 9744 1.65 5.47 0.06 73 XM_H_SpoofStaff4 9734 1.65 5.47 0.06 74 XM_B_SpammyTLD 9262 3.11 5.20 2.24 75 XM_Body_Dirty_Words 8830 2.74 4.96 1.82 76 DKIM_INVALID 8800 2.67 4.94 1.72 77 HTML_IMAGE_RATIO_04 8786 10.05 4.93 12.18 78 XMSubMetaSx_00 8776 3.42 4.93 2.79 79 RELAYCOUNTRY_CA 8543 1.80 4.80 0.55 80 RCVD_IN_MSPIKE_L3 8320 1.89 4.67 0.73 81 XM_B_Investor 7842 2.20 4.40 1.28 82 XMPhish30 7754 1.60 4.35 0.46 83 TR_XM_SpammyWords3 7749 1.61 4.35 0.47 84 T_XMDrugObfuBody_14 7306 2.15 4.10 1.34 85 TM2_M_VERY_LONG_WORD 7130 4.45 4.00 4.63 86 XM_B_Unsub2 7019 2.32 3.94 1.65 87 HTML_IMAGE_RATIO_06 6790 4.91 3.81 5.36 88 XMNumbers 6329 3.37 3.55 3.29 89 XM_CamelCaseFrm001 6132 2.07 3.44 1.49 90 TR_MetaPhish_Combo_01b 6002 2.21 3.37 1.72 91 XMSexyCombo_05 5981 1.66 3.36 0.95 92 RCVD_IN_MSPIKE_H4 5905 3.80 3.32 4.00 93 TR_XM_SpammyWords5 5787 1.80 3.25 1.19 94 MIME_HTML_MOSTLY 5602 2.26 3.15 1.90 95 MIME_HTML_ONLY_MULTI 5454 4.94 3.06 5.72 96 KHOP_HELO_FCRDNS 5420 2.74 3.04 2.61 97 XM_OfRef6 5386 1.37 3.02 0.69 98 RCVD_IN_MSPIKE_H5 5368 5.29 3.01 6.24 99 T_REMOTE_IMAGE 5270 2.86 2.96 2.81 100 XMDiploma_00 5196 1.78 2.92 1.31 101 TR_XM_MSPIKECOMBO2 5119 0.88 2.87 0.05 102 RELAYCOUNTRY_AU 4977 1.17 2.79 0.49 103 TooManyTo_001 4977 4.86 2.79 5.72 104 RELAYCOUNTRY_FR 4944 1.09 2.78 0.39 105 XMStockSpam_06 4923 1.23 2.76 0.58 106 TR_XM_INV_DKIM 4915 0.82 2.76 0.00 107 TR_XM_NoHeaderRelay 4862 0.92 2.73 0.16 108 T_XMDrugObfuBody_08 4844 1.63 2.72 1.18 109 USER_IN_DEF_DKIM_WL 4761 8.34 2.67 10.71 110 XM_SPF_SoftFail 4731 1.42 2.66 0.90 111 XM_B_URI_Unicode 4723 1.73 2.65 1.34 112 XM_UB50 4703 1.46 2.64 0.97 113 TR_XM_GMP_BULK_SIG 4528 0.81 2.54 0.09 114 XMBody_17 4493 1.11 2.52 0.52 115 TR_LOTS_OF_MONEY3 4472 1.25 2.51 0.73 116 HTML_IMAGE_RATIO_08 4376 2.39 2.46 2.36 117 XM_URI_RBL 4241 0.86 2.38 0.22 118 T_TooManySym_01 4198 4.22 2.36 5.00 119 T_FILL_THIS_FORM_SHORT 4099 1.12 2.30 0.63 120 MIME_QP_LONG_LINE 4062 3.87 2.28 4.53 121 T_XMHurry_00 4044 1.52 2.27 1.20 122 TM2_M_URI_OPT_OUT 3999 1.89 2.25 1.73 123 SUBJ_ALL_CAPS 3992 1.42 2.24 1.08 124 TR_XM_MaxSPIKE 3844 0.67 2.16 0.04 125 XM_B_SpammyWords4 3672 1.07 2.06 0.65 126 T_Symld_Words_02 3667 1.14 2.06 0.76 127 HTML_IMAGE_ONLY_24 3413 0.76 1.92 0.28 128 RCVD_IN_VALIDITY_SAFE 3338 3.02 1.87 3.50 129 SpammyFromTLD_02 3267 0.84 1.83 0.42 130 RCVD_IN_MSPIKE_L4 3155 0.60 1.77 0.12 131 XMGenDplmaNmb 3030 0.93 1.70 0.60 132 HTML_FONT_FACE_BAD 3000 7.40 1.68 9.79 133 BAYES_40 2985 3.79 1.68 4.67 134 MAILING_LIST_MULTI 2984 2.30 1.68 2.56 135 URI_TRY_3LD 2904 0.80 1.63 0.46 136 ANY_BOUNCE_MESSAGE 2797 5.46 1.57 7.08 137 BOUNCE_MESSAGE 2794 5.46 1.57 7.08 138 XM_H_Long_From02 2784 0.99 1.56 0.74 139 RCVD_IN_IADB_LISTED 2772 2.18 1.56 2.45 140 HTML_IMAGE_ONLY_20 2739 0.80 1.54 0.50 141 URI_HEX 2738 1.18 1.54 1.02 142 T_XMDrugObfuBody_00 2629 0.88 1.48 0.63 143 XM_ProductURIs 2626 0.67 1.47 0.33 144 XM_DK_Undo_01 2585 1.55 1.45 1.59 145 XMBrknScrpt_02 2579 1.06 1.45 0.90 146 RCVD_IN_VALIDITY_RPBL 2543 0.53 1.43 0.15 147 RCVD_IN_VALIDITY_CERTIFIED 2485 2.50 1.40 2.96 148 XM_B_DNDMA 2440 0.66 1.37 0.37 149 FROM_EXCESS_BASE64 2382 1.35 1.34 1.36 150 XM_B_SEO 2353 0.50 1.32 0.16 151 XM_UB99 2342 0.39 1.32 0.00 152 HTTPS_HTTP_MISMATCH 2328 0.84 1.31 0.65 153 XMSubNoVowel 2255 2.46 1.27 2.96 154 RCVD_IN_IADB_SPF 2246 1.95 1.26 2.23 155 TR_LOTS_OF_MONEY2 2246 0.52 1.26 0.21 156 T_MONEY_PERCENT 2246 0.52 1.26 0.21 157 LOW_PRICE 2218 0.52 1.25 0.21 158 XM_SendGrid 2189 1.15 1.23 1.12 159 TR_XM_SEO4 2162 0.41 1.21 0.07 160 TR_MetaPhish_Combo_01 2162 0.94 1.21 0.83 161 XMSubMetaI_00 2161 0.79 1.21 0.61 162 THIS_AD 2128 0.61 1.19 0.36 163 NORDNS_LOW_CONTRAST 2126 0.68 1.19 0.47 164 URI_NOVOWEL 2117 0.98 1.19 0.90 165 BAYES_20 2037 2.68 1.14 3.32 166 HTML_MIME_NO_HTML_TAG 2027 1.77 1.14 2.04 167 RCVD_IN_IADB_DK 2019 1.72 1.13 1.97 168 XM_B_COPY_HTML 1996 0.72 1.12 0.55 169 RCVD_IN_IADB_SENDERID 1989 1.77 1.12 2.04 170 XMBdyGiftCard01 1985 0.80 1.11 0.67 171 RDNS_DYNAMIC 1907 0.39 1.07 0.11 172 RCVD_IN_PSBL 1878 0.33 1.05 0.02 173 RCVD_IN_IADB_VOUCHED 1831 1.27 1.03 1.37 174 SpammyFromTLD_01 1828 0.72 1.03 0.59 175 MPART_ALT_DIFF_COUNT 1807 0.61 1.01 0.44 176 TR_XM_FormFill 1795 0.30 1.01 0.01 177 MultiRelay_CC 1793 0.41 1.01 0.16 178 XM_B_Phish66 1783 0.48 1.00 0.26 179 BOTNET_NORDNS 1768 0.30 0.99 0.00 180 XM_UB60 1764 0.37 0.99 0.11 181 TR_Symld_Words 1760 1.13 0.99 1.19 182 HK_RANDOM_REPLYTO 1752 0.35 0.98 0.08 183 XMBody_78 1689 0.50 0.95 0.32 184 HK_RANDOM_FROM 1666 0.36 0.94 0.12 185 TM2_M_A_HREF_HREF 1661 0.42 0.93 0.21 186 SHOPIFY_IMG_NOT_RCVD_SFY 1617 0.38 0.91 0.16 187 TVD_RCVD_IP 1616 0.82 0.91 0.78 188 DKIM_ADSP_CUSTOM_MED 1606 0.70 0.90 0.62 189 XMClaimOffer 1567 0.33 0.88 0.11 190 TR_Caps_n_Bayes_99 1540 0.26 0.86 0.01 191 XM_S_SpammyWords 1518 0.47 0.85 0.30 192 TM2_M_OBFU_COMMENT 1516 0.47 0.85 0.32 193 TR_XM_Spammywords 1514 0.46 0.85 0.30 194 NO_DNS_FOR_FROM 1504 0.42 0.84 0.24 195 XM_UB999 1500 0.25 0.84 0.00 196 XM_UB80 1496 0.26 0.84 0.02 197 HELO_DYNAMIC_SPLIT_IP 1475 0.25 0.83 0.01 198 TR_XM_DK_SendGrid 1448 0.80 0.81 0.79 199 DIET_1 1446 0.42 0.81 0.26 200 TR_Mismatch_TLD_02 1404 0.28 0.79 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 424746 99.66 99.81 99.60 2 HTML_MESSAGE 386669 92.72 97.63 90.67 3 RELAYCOUNTRY_US 316746 74.88 76.34 74.27 4 DCC_CHECK_NEGATIVE 312948 62.15 35.25 73.38 5 XM_B_Unicode 289552 71.00 78.43 67.89 6 DKIM_SIGNED 254564 66.19 81.76 59.69 7 XM_DK_Pass 250183 64.20 77.47 58.66 8 DKIM_VALID 247218 63.52 76.82 57.97 9 BAYES_50 239381 50.62 37.41 56.13 10 DKIM_VALID_AU 206864 52.05 60.54 48.51 11 XM_B_Unicode3 180896 43.21 45.11 42.42 12 XM_B_SpammyWords 171984 46.66 61.82 40.33 13 XMListUnsubscribeExists 164290 44.89 60.15 38.52 14 MIME_HTML_ONLY 128760 31.89 35.95 30.19 15 DCC_CHECK 113205 37.78 64.68 26.54 16 T_TM2_M_HEADER_IN_MSG 109864 24.07 20.04 25.76 17 HTML_FONT_LOW_CONTRAST 107033 30.19 42.40 25.10 18 LOC_TINY_FONT_1 106805 30.62 43.97 25.04 19 DKIM_VALID_EF 104643 25.47 27.71 24.54 20 ALL_TRUSTED 98605 19.27 10.05 23.12 21 FVGT_m_MULTI_ODD 88064 24.81 34.76 20.65 22 XMSubLong 87812 21.67 24.26 20.59 23 RCVD_IN_MSPIKE_WL 77518 16.32 11.88 18.18 24 T_KAM_HTML_FONT_INVALID 77185 21.78 30.61 18.10 25 XM_B_SpammyWords2 71049 22.39 36.12 16.66 26 RCVD_IN_MSPIKE_H2 53502 15.17 21.45 12.55 27 HTML_IMAGE_RATIO_04 51949 10.05 4.93 12.18 28 XM_Multi_Part_URI 50039 14.74 21.95 11.73 29 TR_XM_DK_Unsub 47115 13.83 20.49 11.05 30 BOTNET_IPINHOSTNAME 46985 10.67 9.85 11.02 31 USER_IN_DEF_DKIM_WL 45679 8.34 2.67 10.71 32 BAYES_00 45176 7.66 0.64 10.59 33 XM_Evil_Numbers_Gen 44144 10.20 9.84 10.35 34 HTML_FONT_FACE_BAD 41762 7.40 1.68 9.79 35 BAYES_99 40120 16.70 34.18 9.41 36 LotsOfNums_01 39784 8.50 6.50 9.33 37 UNPARSEABLE_RELAY 38503 11.73 18.19 9.03 38 XM_B_PhoneNumber 36404 7.76 5.90 8.54 39 XMStrtUSub 36373 7.80 6.04 8.53 40 BAYES_999 36219 12.93 23.55 8.49 41 RCVD_IN_MSPIKE_H3 33869 7.24 5.55 7.94 42 XM_B_Unsub 31489 10.61 18.35 7.38 43 MPART_ALT_DIFF 31157 6.84 5.74 7.31 44 BOUNCE_MESSAGE 30207 5.46 1.57 7.08 45 ANY_BOUNCE_MESSAGE 30207 5.46 1.57 7.08 46 TR_MAX_INTL_RELAY 30102 9.87 16.61 7.06 47 TO_NO_BRKTS_HTML_ONLY 28712 4.84 0.30 6.73 48 BAYES_60 27516 6.96 8.17 6.45 49 RCVD_IN_MSPIKE_H5 26606 5.29 3.01 6.24 50 TR_XM_BayesUnsub 24648 9.23 17.48 5.78 51 TooManyTo_001 24404 4.86 2.79 5.72 52 MIME_HTML_ONLY_MULTI 24393 4.94 3.06 5.72 53 XM_DKIMWhitelistDomains 22901 3.79 0.02 5.37 54 HTML_IMAGE_RATIO_06 22876 4.91 3.81 5.36 55 TR_XM_DK_Bayes 22644 3.89 0.49 5.31 56 TR_XM_DK_Bayes1 22271 3.83 0.49 5.22 57 LOTS_OF_MONEY 21384 7.53 13.56 5.01 58 T_TooManySym_01 21332 4.22 2.36 5.00 59 XM_B_Phish_Phrases 21045 5.75 7.70 4.93 60 XM_H_GMP 20060 5.23 6.50 4.70 61 XM_DK_Undo_02 19932 14.81 39.10 4.67 62 BAYES_40 19926 3.79 1.68 4.67 63 TM2_M_VERY_LONG_WORD 19766 4.45 4.00 4.63 64 XM_H_Long_From01 19716 5.15 6.41 4.62 65 XM_B_SpammyWords3 19396 7.03 12.98 4.55 66 MIME_QP_LONG_LINE 19324 3.87 2.28 4.53 67 PDS_FROM_NAME_TO_DOMAIN 19220 5.71 8.59 4.51 68 PDS_FRNOM_TODOM_NAKED_TO 19219 5.71 8.59 4.51 69 TR_XM_DK_Bayes2 18666 3.20 0.36 4.38 70 RCVD_IN_MSPIKE_H4 17043 3.80 3.32 4.00 71 BAYES_80 16745 5.52 9.33 3.93 72 XM_UncommonTLD01 16553 5.63 9.83 3.88 73 HTML_IMAGE_RATIO_02 16518 4.44 5.79 3.87 74 RCVD_IN_VALIDITY_SAFE 14907 3.02 1.87 3.50 75 XM_PDF 14251 2.52 0.54 3.34 76 BAYES_20 14163 2.68 1.14 3.32 77 XMNumbers 14033 3.37 3.55 3.29 78 TR_XM_SpammyWords4 13827 5.78 11.87 3.24 79 BAYES_95 13352 4.22 6.82 3.13 80 RELAYCOUNTRY_META 13087 6.79 15.71 3.07 81 RCVD_IN_VALIDITY_CERTIFIED 12623 2.50 1.40 2.96 82 XMSubNoVowel 12612 2.46 1.27 2.96 83 FSL_BULK_SIG 12230 4.71 9.12 2.87 84 T_REMOTE_IMAGE 12005 2.86 2.96 2.81 85 XMSubMetaSx_00 11884 3.42 4.93 2.79 86 MAY_BE_FORGED 11280 2.01 0.50 2.64 87 KHOP_HELO_FCRDNS 11127 2.74 3.04 2.61 88 MAILING_LIST_MULTI 10909 2.30 1.68 2.56 89 RCVD_IN_IADB_LISTED 10431 2.18 1.56 2.45 90 T_TooManySym_02 10101 1.84 0.59 2.37 91 BAYES_05 10085 1.86 0.63 2.36 92 HTML_IMAGE_RATIO_08 10078 2.39 2.46 2.36 93 XM_B_SpammyTLD 9567 3.11 5.20 2.24 94 RCVD_IN_IADB_SPF 9517 1.95 1.26 2.23 95 HTML_MIME_NO_HTML_TAG 8700 1.77 1.14 2.04 96 RCVD_IN_IADB_SENDERID 8697 1.77 1.12 2.04 97 RCVD_IN_IADB_DK 8409 1.72 1.13 1.97 98 MIME_HTML_MOSTLY 8085 2.26 3.15 1.90 99 XM_Body_Dirty_Words 7763 2.74 4.96 1.82 100 TooManyTo_002 7481 1.38 0.47 1.75 101 TM2_M_URI_OPT_OUT 7399 1.89 2.25 1.73 102 TO_MALFORMED 7363 1.22 0.00 1.73 103 DKIM_INVALID 7346 2.67 4.94 1.72 104 TR_MetaPhish_Combo_01b 7332 2.21 3.37 1.72 105 TR_XM_DKIM_Undo 7082 8.83 25.99 1.66 106 INVALID_MSGID 7022 1.26 0.32 1.65 107 XM_B_Unsub2 7019 2.32 3.94 1.65 108 TR_XM_SpammyRelay 6991 4.55 11.52 1.64 109 XM_DK_Undo_01 6773 1.55 1.45 1.59 110 MIME_CHARSET_FARAWAY 6514 1.20 0.40 1.53 111 TR_XM_PhishingBody 6435 3.14 7.04 1.51 112 XM_CamelCaseFrm001 6357 2.07 3.44 1.49 113 XMSubLongNoVowel 6102 1.22 0.72 1.43 114 CHARSET_FARAWAY_HEADER 6058 1.09 0.29 1.42 115 XMSubGarbage 6022 1.16 0.57 1.41 116 UNTRUSTED_Relay 5899 2.89 6.50 1.38 117 RCVD_IN_IADB_VOUCHED 5849 1.27 1.03 1.37 118 FROM_EXCESS_BASE64 5780 1.35 1.34 1.36 119 XM_B_URI_Unicode 5733 1.73 2.65 1.34 120 T_XMDrugObfuBody_14 5706 2.15 4.10 1.34 121 TR_XM_UnparsRelay 5633 3.95 10.25 1.32 122 XMDiploma_00 5569 1.78 2.92 1.31 123 XM_B_Investor 5440 2.20 4.40 1.28 124 HELO_NODOT 5268 1.02 0.50 1.24 125 HELO_NO_DOMAIN 5260 1.02 0.50 1.23 126 T_XMHurry_00 5116 1.52 2.27 1.20 127 TR_XM_SpammyWords5 5089 1.80 3.25 1.19 128 TR_Symld_Words 5070 1.13 0.99 1.19 129 T_XMDrugObfuBody_08 5013 1.63 2.72 1.18 130 IN_HORDE_ADDRESS_BOOK 4906 0.83 0.05 1.15 131 XM_SendGrid 4771 1.15 1.23 1.12 132 TooManyTo_003 4748 0.89 0.36 1.11 133 SUBJ_ALL_CAPS 4599 1.42 2.24 1.08 134 BOTNET 4496 3.03 7.75 1.05 135 URI_HEX 4367 1.18 1.54 1.02 136 T_TooManySym_03 4326 0.78 0.20 1.01 137 XM_GoogleGroups 4162 0.90 0.71 0.98 138 XMGappySubj_01 4154 0.77 0.29 0.97 139 XM_UB50 4143 1.46 2.64 0.97 140 RCVD_IN_IADB_OPTIN 4080 0.88 0.68 0.96 141 XMSexyCombo_05 4066 1.66 3.36 0.95 142 XMLngstWrd_00 3958 0.80 0.50 0.93 143 XMBrknScrpt_02 3859 1.06 1.45 0.90 144 URI_NOVOWEL 3830 0.98 1.19 0.90 145 XM_SPF_SoftFail 3829 1.42 2.66 0.90 146 RCVD_IN_MSPIKE_BL 3680 2.58 6.69 0.86 147 TR_XM_MSPIKECOMBO 3679 2.58 6.68 0.86 148 TR_DCC_Bayes_99 3591 6.44 19.85 0.84 149 TR_MetaPhish_Combo_01 3549 0.94 1.21 0.83 150 XMCapTrack 3491 0.72 0.49 0.82 151 FROM_GOV_DKIM_AU 3476 0.66 0.30 0.82 152 TR_XM_DK_SendGrid 3383 0.80 0.81 0.79 153 TooManyTo_004 3366 0.64 0.28 0.79 154 TVD_RCVD_IP 3338 0.82 0.91 0.78 155 T_Symld_Words_02 3221 1.14 2.06 0.76 156 XM_H_Long_From02 3177 0.99 1.56 0.74 157 RCVD_IN_MSPIKE_L3 3099 1.89 4.67 0.73 158 TR_LOTS_OF_MONEY3 3093 1.25 2.51 0.73 159 RCVD_IN_BL_SPAMCOP_NET 2955 3.96 11.77 0.69 160 MY_SERVERS_FOUND 2928 0.58 0.33 0.69 161 XM_ShortIntro_01 2926 0.67 0.63 0.69 162 XM_OfRef6 2922 1.37 3.02 0.69 163 XMBdyGiftCard01 2865 0.80 1.11 0.67 164 XM_B_SpammyWords4 2788 1.07 2.06 0.65 165 HTTPS_HTTP_MISMATCH 2764 0.84 1.31 0.65 166 TooManyTo_005 2735 0.53 0.26 0.64 167 T_FILL_THIS_FORM_SHORT 2694 1.12 2.30 0.63 168 TR_XM_Base64_M1 2694 0.63 0.62 0.63 169 T_XMDrugObfuBody_00 2674 0.88 1.48 0.63 170 DKIM_ADSP_CUSTOM_MED 2642 0.70 0.90 0.62 171 XMSubMetaI_00 2615 0.79 1.21 0.61 172 XMGenDplmaNmb 2569 0.93 1.70 0.60 173 XM_H_PHPMailer 2557 0.53 0.36 0.60 174 SpammyFromTLD_01 2510 0.72 1.03 0.59 175 XMStockSpam_06 2492 1.23 2.76 0.58 176 TVD_SPACE_RATIO 2424 0.45 0.15 0.57 177 RELAYCOUNTRY_GB 2370 0.61 0.72 0.56 178 RELAYCOUNTRY_CA 2355 1.80 4.80 0.55 179 XM_B_COPY_HTML 2330 0.72 1.12 0.55 180 XMBSHREFv2 2263 0.48 0.35 0.53 181 XM_E_Blogspot 2256 0.53 0.55 0.53 182 TRACKER_ID 2253 0.40 0.08 0.53 183 URI_WP_HACKED_2 2207 0.41 0.15 0.52 184 XMBody_17 2204 1.11 2.52 0.52 185 T_OBFU_PDF_ATTACH 2139 0.38 0.10 0.50 186 HTML_IMAGE_ONLY_20 2123 0.80 1.54 0.50 187 RELAYCOUNTRY_AU 2075 1.17 2.79 0.49 188 XMNoVowels 2072 0.49 0.50 0.49 189 NORDNS_LOW_CONTRAST 2004 0.68 1.19 0.47 190 TR_XM_SpammyWords3 1987 1.61 4.35 0.47 191 URI_TRY_3LD 1956 0.80 1.63 0.46 192 XMPhish30 1941 1.60 4.35 0.46 193 MPART_ALT_DIFF_COUNT 1865 0.61 1.01 0.44 194 XMBody_95 1795 0.35 0.17 0.42 195 SpammyFromTLD_02 1787 0.84 1.83 0.42 196 XMPhish14 1743 0.51 0.76 0.41 197 XMLngstWrd_01 1713 0.37 0.30 0.40 198 XMGappySubj_02 1713 0.29 0.03 0.40 199 SHORT_HELO_AND_INLINE_IMAGE 1692 0.32 0.12 0.40 200 NML_ADSP_CUSTOM_MED 1661 0.48 0.71 0.39 ----------------------------------------------------------------------