Email: 778503 Autolearn: 0 AvgScore: 1.79 AvgScanTime: 0.89 sec Spam: 146333 Autolearn: 0 AvgScore: 13.39 AvgScanTime: 1.30 sec Ham: 632170 Autolearn: 0 AvgScore: -0.90 AvgScanTime: 0.80 sec Time Spent Running SA: 192.53 hours Time Spent Processing Spam: 52.73 hours Time Spent Processing Ham: 139.80 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 146005 99.62 99.78 99.59 2 HTML_MESSAGE 141248 57.34 96.53 48.27 3 DKIM_SIGNED 132826 50.42 90.77 41.09 4 XM_DK_Pass 127569 49.08 87.18 40.26 5 DKIM_VALID 126140 48.40 86.20 39.65 6 XM_B_Unicode 125798 47.18 85.97 38.21 7 RELAYCOUNTRY_US 115269 51.81 78.77 45.57 8 XM_B_SpammyWords 108016 33.20 73.82 23.80 9 XMListUnsubscribeExists 105391 34.66 72.02 26.02 10 DCC_CHECK 104241 26.10 71.24 15.65 11 DKIM_VALID_AU 95773 38.24 65.45 31.94 12 XM_B_Unicode3 66125 26.08 45.19 21.66 13 XM_DK_Undo_02 65628 10.97 44.85 3.13 14 XM_B_SpammyWords2 63379 16.37 43.31 10.13 15 LOC_TINY_FONT_1 59176 18.23 40.44 13.09 16 BAYES_50 55486 46.65 37.92 48.67 17 HTML_FONT_LOW_CONTRAST 53519 19.84 36.57 15.97 18 BAYES_99 52039 8.62 35.56 2.38 19 TR_XM_DKIM_Undo 51014 7.51 34.86 1.18 20 FVGT_m_MULTI_ODD 47825 17.35 32.68 13.80 21 DKIM_VALID_EF 45613 18.67 31.17 15.78 22 MIME_HTML_ONLY 44522 14.83 30.43 11.22 23 RCVD_IN_MSPIKE_H2 43897 18.35 30.00 15.66 24 DCC_CHECK_NEGATIVE 42076 73.88 28.75 84.33 25 T_KAM_HTML_FONT_INVALID 41388 14.25 28.28 11.00 26 BAYES_999 40752 6.72 27.85 1.83 27 TR_DCC_Bayes_99 35893 5.10 24.53 0.60 28 T_TM2_M_HEADER_IN_MSG 34590 18.37 23.64 17.15 29 XMSubLong 34191 14.77 23.37 12.78 30 TR_XM_DK_Unsub 32119 9.94 21.95 7.16 31 RELAYCOUNTRY_META 32007 6.23 21.87 2.60 32 XM_Multi_Part_URI 26847 9.42 18.35 7.35 33 TR_XM_SpammyRelay 25166 4.28 17.20 1.29 34 XM_B_Unsub 23030 6.94 15.74 4.90 35 LOTS_OF_MONEY 22422 5.68 15.32 3.45 36 TR_XM_BayesUnsub 22097 5.56 15.10 3.35 37 TR_XM_SpammyWords2 21292 2.94 14.55 0.26 38 TR_MAX_INTL_RELAY 21236 5.65 14.51 3.60 39 BOTNET_IPINHOSTNAME 20416 4.45 13.95 2.25 40 TR_XM_SpammyWords4 19858 4.50 13.57 2.41 41 UNPARSEABLE_RELAY 19673 7.26 13.44 5.82 42 XM_B_SpammyWords3 18974 4.60 12.97 2.67 43 RCVD_IN_BL_SPAMCOP_NET 17548 2.53 11.99 0.34 44 RELAYCOUNTRY_CA 16914 2.77 11.56 0.74 45 TR_XM_SPAMCOP 14490 2.03 9.90 0.21 46 BOTNET 14444 2.42 9.87 0.69 47 XM_Evil_Numbers_Gen 13501 5.00 9.23 4.03 48 BAYES_80 13140 3.48 8.98 2.21 49 RCVD_IN_MSPIKE_H3 12242 4.24 8.37 3.28 50 RCVD_IN_MSPIKE_WL 12242 4.24 8.37 3.28 51 BAYES_60 12150 5.59 8.30 4.96 52 FSL_BULK_SIG 10787 2.60 7.37 1.50 53 TR_XM_UnparsRelay 10612 2.02 7.25 0.81 54 MPART_ALT_DIFF 9956 3.90 6.80 3.23 55 LotsOfNums_01 9858 4.78 6.74 4.33 56 XMBody_17 9817 1.57 6.71 0.38 57 UNTRUSTED_Relay 9676 1.86 6.61 0.77 58 XMSubMetaSx_00 9659 2.99 6.60 2.16 59 XM_Body_Dirty_Words 9492 2.57 6.49 1.66 60 XM_UncommonTLD01 8729 3.61 5.97 3.07 61 HTML_IMAGE_RATIO_02 8625 3.15 5.89 2.52 62 XM_B_Phish_Phrases 8550 2.61 5.84 1.87 63 TooManyTo_001 8427 5.09 5.76 4.93 64 HTML_IMAGE_RATIO_04 7803 2.86 5.33 2.29 65 XMStrtUSub 7739 3.16 5.29 2.67 66 BAYES_95 7565 2.09 5.17 1.38 67 XM_H_Long_From01 7549 3.18 5.16 2.72 68 XM_H_GMP 7428 3.94 5.08 3.68 69 XM_SPF_SoftFail 7240 3.23 4.95 2.83 70 XM_B_Investor 6924 1.63 4.73 0.92 71 DKIM_INVALID 6686 2.02 4.57 1.43 72 TR_XM_PhishingBody 6557 1.52 4.48 0.84 73 XM_B_SpammyTLD 6384 1.91 4.36 1.34 74 TR_LOTS_OF_MONEY3 6145 1.09 4.20 0.37 75 XM_OfRef6 6105 1.27 4.17 0.60 76 MIME_HTML_ONLY_MULTI 6080 2.58 4.15 2.22 77 XMSexyCombo_05 6056 1.76 4.14 1.21 78 T_XMDrugObfuBody_14 5815 1.51 3.97 0.94 79 TR_XM_SpammyWords5 5644 1.24 3.86 0.63 80 XMNumbers 5402 1.96 3.69 1.56 81 MIME_QP_LONG_LINE 5391 2.84 3.68 2.65 82 T_FILL_THIS_FORM_SHORT 5329 1.18 3.64 0.61 83 HTML_IMAGE_RATIO_06 5264 1.78 3.60 1.35 84 RCVD_IN_VALIDITY_SAFE 5257 2.79 3.59 2.61 85 TM2_M_URI_OPT_OUT 5103 2.40 3.49 2.15 86 TM2_M_VERY_LONG_WORD 4931 1.22 3.37 0.72 87 XM_UB50 4760 0.99 3.25 0.46 88 XM_URI_RBL 4740 0.68 3.24 0.08 89 RCVD_IN_VALIDITY_CERTIFIED 4662 2.40 3.19 2.21 90 MIME_HTML_MOSTLY 4602 1.80 3.14 1.49 91 USER_IN_DEF_DKIM_WL 4576 6.42 3.13 7.18 92 HTML_IMAGE_RATIO_08 4338 1.43 2.96 1.08 93 T_XMDrugObfuBody_08 3911 1.19 2.67 0.85 94 XM_CamelCaseFrm001 3860 1.52 2.64 1.27 95 TR_XM_BayesRelay 3705 0.48 2.53 0.00 96 TR_XM_NoHeaderRelay 3616 0.51 2.47 0.06 97 SpammyFromTLD_01 3578 0.84 2.45 0.46 98 FONT_INVIS_LONG_LINE 3541 0.47 2.42 0.02 99 XM_B_SpammyWords4 3461 0.69 2.37 0.31 100 BOUNCE_MESSAGE 3374 37.41 2.31 45.54 101 ANY_BOUNCE_MESSAGE 3374 37.41 2.31 45.54 102 XM_B_Unsub2 3337 1.16 2.28 0.90 103 TM2_M_A_HREF_HREF 3322 0.52 2.27 0.12 104 RELAYCOUNTRY_AU 3267 0.67 2.23 0.31 105 SUBJ_ALL_CAPS 3229 1.08 2.21 0.81 106 XMDiploma_00 3180 1.22 2.17 0.99 107 URI_HEX 3159 0.91 2.16 0.62 108 TR_XM_FormFill 3002 0.41 2.05 0.03 109 URI_TRY_3LD 3002 0.73 2.05 0.42 110 T_XMHurry_00 2937 0.61 2.01 0.29 111 T_REMOTE_IMAGE 2916 2.02 1.99 2.03 112 FROM_EXCESS_BASE64 2858 1.13 1.95 0.94 113 XMBrknScrpt_02 2856 0.66 1.95 0.36 114 T_TooManySym_01 2834 3.54 1.94 3.91 115 MAILING_LIST_MULTI 2820 2.30 1.93 2.39 116 HTML_MIME_NO_HTML_TAG 2496 1.23 1.71 1.13 117 XM_DK_Undo_01 2343 1.14 1.60 1.03 118 XM_HighProb1 2302 0.30 1.57 0.00 119 XMPhish14 2293 0.51 1.57 0.26 120 XM_B_DNDMA 2288 0.51 1.56 0.27 121 TR_XM_INV_DKIM 2243 0.31 1.53 0.03 122 DIET_1 2197 0.39 1.50 0.13 123 BAYES_40 2192 7.37 1.50 8.73 124 SpammyFromTLD_02 2187 1.16 1.49 1.09 125 XMStockSpam_06 2168 0.79 1.48 0.63 126 AC_BR_BONANZA 2124 0.31 1.45 0.05 127 TR_XM_PHPForged 2123 0.49 1.45 0.27 128 TR_XM_PHPDW 2121 0.49 1.45 0.27 129 XMBdyGiftCard01 2078 0.50 1.42 0.28 130 TR_XM_FormFill2 2073 0.48 1.42 0.27 131 KHOP_HELO_FCRDNS 2072 0.87 1.42 0.75 132 XM_H_PHPOS 2063 0.48 1.41 0.26 133 TR_Mismatch_TLD_02 1962 0.30 1.34 0.06 134 XMHTML_After_End 1959 0.44 1.34 0.23 135 XM_SendGrid 1953 0.88 1.33 0.77 136 XMReplyNow 1939 0.33 1.33 0.10 137 XM_H_Undi_Recip 1930 0.34 1.32 0.11 138 RCVD_IN_IADB_LISTED 1912 2.20 1.31 2.41 139 BOTNET_NORDNS 1911 0.25 1.31 0.01 140 RCVD_IN_VALIDITY_RPBL 1907 0.29 1.30 0.05 141 XM_B_COPY_HTML 1905 0.59 1.30 0.42 142 TR_XM_InvalidRelay 1899 0.25 1.30 0.01 143 TR_Symld_Words 1892 0.93 1.29 0.85 144 XMLngstWrd_00 1882 12.87 1.29 15.55 145 HTTPS_HTTP_MISMATCH 1853 0.63 1.27 0.48 146 T_XMDrugObfuBody_00 1850 0.48 1.26 0.29 147 XMPhish30 1838 0.44 1.26 0.25 148 XMGenDplmaNmb 1820 0.71 1.24 0.58 149 HK_RANDOM_REPLYTO 1811 0.28 1.24 0.06 150 ALL_TRUSTED 1804 43.04 1.23 52.72 151 HTML_TAG_BALANCE_BODY 1762 0.42 1.20 0.23 152 BAYES_20 1719 1.79 1.17 1.94 153 RCVD_IN_IADB_SPF 1718 1.95 1.17 2.13 154 TR_XM_Undi_Recip19 1709 0.25 1.17 0.04 155 XMSubMetaI_00 1703 0.56 1.16 0.42 156 TR_XM_RelayPhish 1701 0.24 1.16 0.03 157 DKIM_ADSP_NXDOMAIN 1698 0.32 1.16 0.13 158 TR_MetaPhish_Combo_01 1688 0.69 1.15 0.59 159 XMSubMetaSSx_00 1652 0.31 1.13 0.12 160 HOSTED_IMG_MULTI_PUB_01 1636 0.22 1.12 0.01 161 XMSexyCombo_01 1635 0.28 1.12 0.08 162 TR_XM_Base64_M1 1633 0.64 1.12 0.52 163 XM_UB99 1621 0.21 1.11 0.00 164 URI_NOVOWEL 1617 0.90 1.11 0.85 165 RCVD_IN_IADB_SENDERID 1599 1.76 1.09 1.91 166 RCVD_IN_IADB_DK 1597 1.72 1.09 1.87 167 TR_XM_Undi_RecipCombo2 1544 0.20 1.06 0.00 168 TR_Caps_n_Bayes_99 1518 0.20 1.04 0.01 169 RELAYCOUNTRY_IN 1493 0.21 1.02 0.03 170 RDNS_DYNAMIC 1470 0.34 1.00 0.18 171 RELAYCOUNTRY_CN 1432 0.22 0.98 0.04 172 RELAYCOUNTRY_FR 1428 0.27 0.98 0.11 173 XM_B_Phish66 1420 0.31 0.97 0.16 174 XM_DIRTYINTL 1413 0.28 0.97 0.12 175 XM_ProductURIs 1411 0.45 0.96 0.33 176 DKIM_ADSP_CUSTOM_MED 1408 0.62 0.96 0.54 177 T_STY_INVIS_DIRECT 1388 0.28 0.95 0.12 178 PDS_OTHER_BAD_TLD 1385 0.23 0.95 0.07 179 XM_B_SEO 1385 0.25 0.95 0.08 180 MPART_ALT_DIFF_COUNT 1370 0.49 0.94 0.39 181 T_MONEY_PERCENT 1361 0.27 0.93 0.12 182 TR_LOTS_OF_MONEY2 1361 0.27 0.93 0.12 183 LongTLD 1347 0.36 0.92 0.23 184 TVD_RCVD_IP 1323 0.88 0.90 0.88 185 UNDISC_MONEY 1311 0.17 0.90 0.00 186 TooManyTo_002 1309 1.42 0.89 1.54 187 XMHTMLBadTable_001 1297 0.28 0.89 0.14 188 XM_B_Phish68 1294 0.17 0.88 0.00 189 XM_UB999 1281 0.17 0.88 0.00 190 THIS_AD 1277 0.39 0.87 0.28 191 XM_UB60 1259 0.19 0.86 0.03 192 SCC_BODY_URI_ONLY 1244 19.07 0.85 23.28 193 TR_XM_SEO4 1228 0.19 0.84 0.04 194 XM_H_Long_From02 1223 0.61 0.84 0.56 195 XM_B_COVIDMETA 1212 0.27 0.83 0.14 196 XM_OfRef7 1200 0.23 0.82 0.09 197 AC_HTML_NONSENSE_TAGS 1155 0.17 0.79 0.02 198 TR_XM_Undi_Recip5 1153 0.15 0.79 0.00 199 TR_XM_Undi_RecipCombo3 1152 0.15 0.79 0.00 200 GB_URI_FLEEK_STO_HTM 1148 0.15 0.78 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 629558 99.62 99.78 99.59 2 DCC_CHECK_NEGATIVE 533079 73.88 28.75 84.33 3 ALL_TRUSTED 333280 43.04 1.23 52.72 4 BAYES_50 307671 46.65 37.92 48.67 5 HTML_MESSAGE 305145 57.34 96.53 48.27 6 RELAYCOUNTRY_US 288106 51.81 78.77 45.57 7 ANY_BOUNCE_MESSAGE 287899 37.41 2.31 45.54 8 BOUNCE_MESSAGE 287898 37.41 2.31 45.54 9 DKIM_SIGNED 259728 50.42 90.77 41.09 10 XM_DK_Pass 254539 49.08 87.18 40.26 11 DKIM_VALID 250666 48.40 86.20 39.65 12 XM_B_Unicode 241532 47.18 85.97 38.21 13 DKIM_VALID_AU 201900 38.24 65.45 31.94 14 BAYES_00 177220 22.91 0.77 28.03 15 XMListUnsubscribeExists 164461 34.66 72.02 26.02 16 XM_B_SpammyWords 150452 33.20 73.82 23.80 17 SCC_BODY_URI_ONLY 147196 19.07 0.85 23.28 18 XM_B_Unicode3 136898 26.08 45.19 21.66 19 T_TM2_M_HEADER_IN_MSG 108387 18.37 23.64 17.15 20 HTML_FONT_LOW_CONTRAST 100958 19.84 36.57 15.97 21 DKIM_VALID_EF 99729 18.67 31.17 15.78 22 RCVD_IN_MSPIKE_H2 98994 18.35 30.00 15.66 23 DCC_CHECK 98941 26.10 71.24 15.65 24 XMLngstWrd_00 98291 12.87 1.29 15.55 25 FVGT_m_MULTI_ODD 87258 17.35 32.68 13.80 26 LOC_TINY_FONT_1 82738 18.23 40.44 13.09 27 XMSubLong 80790 14.77 23.37 12.78 28 MIME_HTML_ONLY 70937 14.83 30.43 11.22 29 T_KAM_HTML_FONT_INVALID 69528 14.25 28.28 11.00 30 XM_B_SpammyWords2 64051 16.37 43.31 10.13 31 BAYES_40 55203 7.37 1.50 8.73 32 XM_Multi_Part_URI 46450 9.42 18.35 7.35 33 USER_IN_DEF_DKIM_WL 45414 6.42 3.13 7.18 34 TR_XM_DK_Unsub 45251 9.94 21.95 7.16 35 UNPARSEABLE_RELAY 36821 7.26 13.44 5.82 36 BAYES_60 31362 5.59 8.30 4.96 37 TooManyTo_001 31194 5.09 5.76 4.93 38 XM_B_Unsub 30991 6.94 15.74 4.90 39 LotsOfNums_01 27357 4.78 6.74 4.33 40 XM_Evil_Numbers_Gen 25451 5.00 9.23 4.03 41 XM_DKIMWhitelistDomains 25349 3.27 0.07 4.01 42 T_TooManySym_01 24697 3.54 1.94 3.91 43 IN_ZIMBRA_NJ_WHITELIST 24293 3.14 0.09 3.84 44 XM_H_GMP 23240 3.94 5.08 3.68 45 TR_MAX_INTL_RELAY 22729 5.65 14.51 3.60 46 LOTS_OF_MONEY 21805 5.68 15.32 3.45 47 TR_XM_DK_Bayes 21795 2.87 0.39 3.45 48 TR_XM_DK_Bayes1 21502 2.83 0.38 3.40 49 TR_XM_BayesUnsub 21149 5.56 15.10 3.35 50 RCVD_IN_MSPIKE_H3 20734 4.24 8.37 3.28 51 RCVD_IN_MSPIKE_WL 20734 4.24 8.37 3.28 52 MPART_ALT_DIFF 20418 3.90 6.80 3.23 53 XM_DK_Undo_02 19811 10.97 44.85 3.13 54 XM_UncommonTLD01 19407 3.61 5.97 3.07 55 TR_XM_DK_Bayes2 18738 2.46 0.28 2.96 56 XM_PDF 18199 2.44 0.54 2.88 57 XM_SPF_SoftFail 17907 3.23 4.95 2.83 58 XM_H_Long_From01 17186 3.18 5.16 2.72 59 XMStrtUSub 16900 3.16 5.29 2.67 60 XM_B_SpammyWords3 16859 4.60 12.97 2.67 61 MIME_QP_LONG_LINE 16738 2.84 3.68 2.65 62 RCVD_IN_VALIDITY_SAFE 16479 2.79 3.59 2.61 63 RELAYCOUNTRY_META 16462 6.23 21.87 2.60 64 HTML_IMAGE_RATIO_02 15903 3.15 5.89 2.52 65 RCVD_IN_IADB_LISTED 15212 2.20 1.31 2.41 66 TR_XM_SpammyWords4 15209 4.50 13.57 2.41 67 MAILING_LIST_MULTI 15103 2.30 1.93 2.39 68 BAYES_99 15066 8.62 35.56 2.38 69 HTML_IMAGE_RATIO_04 14469 2.86 5.33 2.29 70 BOTNET_IPINHOSTNAME 14230 4.45 13.95 2.25 71 MIME_HTML_ONLY_MULTI 14028 2.58 4.15 2.22 72 RCVD_IN_VALIDITY_CERTIFIED 13987 2.40 3.19 2.21 73 BAYES_80 13979 3.48 8.98 2.21 74 XMSubMetaSx_00 13624 2.99 6.60 2.16 75 TM2_M_URI_OPT_OUT 13598 2.40 3.49 2.15 76 RCVD_IN_IADB_SPF 13451 1.95 1.17 2.13 77 T_REMOTE_IMAGE 12833 2.02 1.99 2.03 78 T_TooManySym_02 12617 1.76 0.76 2.00 79 BAYES_20 12239 1.79 1.17 1.94 80 RCVD_IN_IADB_SENDERID 12085 1.76 1.09 1.91 81 XM_B_Phish_Phrases 11807 2.61 5.84 1.87 82 RCVD_IN_IADB_DK 11798 1.72 1.09 1.87 83 BAYES_999 11546 6.72 27.85 1.83 84 BAYES_05 10693 1.49 0.63 1.69 85 XM_Body_Dirty_Words 10497 2.57 6.49 1.66 86 XMNumbers 9870 1.96 3.69 1.56 87 TooManyTo_002 9756 1.42 0.89 1.54 88 RCVD_IN_IADB_VOUCHED 9517 1.33 0.58 1.51 89 FSL_BULK_SIG 9488 2.60 7.37 1.50 90 MIME_HTML_MOSTLY 9401 1.80 3.14 1.49 91 DKIM_INVALID 9062 2.02 4.57 1.43 92 XM_H_Trusted_IP 8757 1.12 0.00 1.39 93 BAYES_95 8737 2.09 5.17 1.38 94 HTML_IMAGE_RATIO_06 8559 1.78 3.60 1.35 95 XMNoVowels 8505 1.15 0.33 1.35 96 XM_B_SpammyTLD 8452 1.91 4.36 1.34 97 TR_XM_SpammyRelay 8160 4.28 17.20 1.29 98 XM_CamelCaseFrm001 8002 1.52 2.64 1.27 99 XMSexyCombo_05 7633 1.76 4.14 1.21 100 INVALID_MSGID 7549 1.00 0.14 1.19 101 TR_XM_DKIM_Undo 7454 7.51 34.86 1.18 102 HTML_MIME_NO_HTML_TAG 7118 1.23 1.71 1.13 103 MSGID_NOFQDN1 7057 0.91 0.04 1.12 104 HELO_NODOT 7044 0.96 0.29 1.11 105 HELO_NO_DOMAIN 7039 0.96 0.27 1.11 106 TO_MALFORMED 6871 0.88 0.01 1.09 107 SpammyFromTLD_02 6862 1.16 1.49 1.09 108 HTML_IMAGE_RATIO_08 6814 1.43 2.96 1.08 109 RCVD_IN_IADB_OPTIN 6622 0.93 0.43 1.05 110 XM_DK_Undo_01 6508 1.14 1.60 1.03 111 XMDiploma_00 6279 1.22 2.17 0.99 112 FROM_EXCESS_BASE64 5954 1.13 1.95 0.94 113 T_XMDrugObfuBody_14 5939 1.51 3.97 0.94 114 XM_B_Investor 5787 1.63 4.73 0.92 115 XM_B_Unsub2 5664 1.16 2.28 0.90 116 TooManyTo_003 5600 0.86 0.75 0.89 117 TVD_RCVD_IP 5564 0.88 0.90 0.88 118 T_XMDrugObfuBody_08 5390 1.19 2.67 0.85 119 URI_NOVOWEL 5362 0.90 1.11 0.85 120 TR_Symld_Words 5351 0.93 1.29 0.85 121 TR_XM_PhishingBody 5295 1.52 4.48 0.84 122 IN_HORDE_ADDRESS_BOOK 5205 0.68 0.05 0.82 123 SUBJ_ALL_CAPS 5149 1.08 2.21 0.81 124 TR_XM_UnparsRelay 5126 2.02 7.25 0.81 125 XM_SendGrid 4862 0.88 1.33 0.77 126 UNTRUSTED_Relay 4841 1.86 6.61 0.77 127 KHOP_HELO_FCRDNS 4714 0.87 1.42 0.75 128 XMGappySubj_01 4673 0.63 0.18 0.74 129 RELAYCOUNTRY_CA 4650 2.77 11.56 0.74 130 T_TooManySym_03 4609 0.64 0.26 0.73 131 TM2_M_VERY_LONG_WORD 4542 1.22 3.37 0.72 132 BOTNET 4387 2.42 9.87 0.69 133 TooManyTo_004 4174 0.67 0.70 0.66 134 XMCapTrack 4117 0.60 0.38 0.65 135 TVD_SPACE_RATIO 4079 0.54 0.10 0.65 136 XM_GoogleGroups 4037 0.61 0.51 0.64 137 XMStockSpam_06 3987 0.79 1.48 0.63 138 TR_XM_SpammyWords5 3986 1.24 3.86 0.63 139 URI_HEX 3931 0.91 2.16 0.62 140 XMBSHREFv2 3914 0.60 0.51 0.62 141 XMBody_95 3908 0.54 0.20 0.62 142 T_FILL_THIS_FORM_SHORT 3876 1.18 3.64 0.61 143 XMSubNoVowel 3854 0.57 0.40 0.61 144 TR_DCC_Bayes_99 3824 5.10 24.53 0.60 145 XM_OfRef6 3766 1.27 4.17 0.60 146 TR_MetaPhish_Combo_01 3702 0.69 1.15 0.59 147 XMGenDplmaNmb 3691 0.71 1.24 0.58 148 XM_H_Long_From02 3513 0.61 0.84 0.56 149 RELAYCOUNTRY_NL 3452 0.48 0.21 0.55 150 DKIM_ADSP_CUSTOM_MED 3432 0.62 0.96 0.54 151 TooManyTo_005 3432 0.56 0.64 0.54 152 TR_XM_DK_SendGrid 3396 0.57 0.73 0.54 153 TR_XM_Base64_M1 3315 0.64 1.12 0.52 154 HTTPS_HTTP_MISMATCH 3042 0.63 1.27 0.48 155 XM_ShortIntro_01 2947 0.49 0.58 0.47 156 SpammyFromTLD_01 2927 0.84 2.45 0.46 157 XM_UB50 2922 0.99 3.25 0.46 158 XMSubMetaSxObfu_03 2820 0.47 0.55 0.45 159 XM_B_COPY_HTML 2662 0.59 1.30 0.42 160 URI_TRY_3LD 2653 0.73 2.05 0.42 161 XMSubMetaI_00 2646 0.56 1.16 0.42 162 XMGappySubj_02 2590 0.36 0.12 0.41 163 MPART_ALT_DIFF_COUNT 2449 0.49 0.94 0.39 164 XM_H_PHPMailer 2401 0.42 0.62 0.38 165 XMBody_17 2382 1.57 6.71 0.38 166 TR_LOTS_OF_MONEY3 2363 1.09 4.20 0.37 167 SHORT_HELO_AND_INLINE_IMAGE 2295 0.30 0.05 0.36 168 XMBrknScrpt_02 2288 0.66 1.95 0.36 169 T_OBFU_PDF_ATTACH 2219 0.31 0.12 0.35 170 RCVD_IN_BL_SPAMCOP_NET 2140 2.53 11.99 0.34 171 XM_B_REG_HTML 2130 0.38 0.57 0.34 172 XM_ProductURIs 2079 0.45 0.96 0.33 173 NML_ADSP_CUSTOM_MED 2062 0.41 0.76 0.33 174 T_TooManySym_04 2051 0.29 0.13 0.32 175 FORGED_GMAIL_RCVD 2050 0.41 0.78 0.32 176 FILL_THIS_FORM 2031 0.39 0.66 0.32 177 RELAYCOUNTRY_AU 1982 0.67 2.23 0.31 178 USER_IN_WHITELIST 1971 0.25 0.00 0.31 179 USER_IN_WELCOMELIST 1971 0.25 0.00 0.31 180 XM_B_SpammyWords4 1941 0.69 2.37 0.31 181 FROM_GOV_DKIM_AU 1929 0.27 0.09 0.31 182 T_XMDrugObfuBody_00 1856 0.48 1.26 0.29 183 T_XMHurry_00 1842 0.61 2.01 0.29 184 HTML_IMAGE_ONLY_28 1841 0.27 0.20 0.29 185 XMBdyGiftCard01 1800 0.50 1.42 0.28 186 XM_B_FormFill 1780 0.24 0.07 0.28 187 THIS_AD 1749 0.39 0.87 0.28 188 XM_B_DNDMA 1705 0.51 1.56 0.27 189 TR_XM_PHPForged 1703 0.49 1.45 0.27 190 NUMERIC_HTTP_ADDR 1684 0.29 0.42 0.27 191 TR_XM_PHPDW 1680 0.49 1.45 0.27 192 HTML_FONT_FACE_BAD 1680 0.36 0.76 0.27 193 TR_XM_FormFill2 1678 0.48 1.42 0.27 194 RCVD_IN_PSBL 1678 0.35 0.73 0.27 195 XMPhish14 1661 0.51 1.57 0.26 196 HTML_IMAGE_ONLY_32 1646 0.25 0.18 0.26 197 TO_NO_BRKTS_HTML_ONLY 1638 0.25 0.20 0.26 198 XM_H_PHPOS 1637 0.48 1.41 0.26 199 TR_XM_SpammyWords2 1634 2.94 14.55 0.26 200 TM2_M_BODY_EMPTY 1593 0.23 0.14 0.25 ----------------------------------------------------------------------