Email: 678791 Autolearn: 0 AvgScore: 5.05 AvgScanTime: 1.37 sec Spam: 274111 Autolearn: 0 AvgScore: 12.30 AvgScanTime: 1.32 sec Ham: 404680 Autolearn: 0 AvgScore: 0.13 AvgScanTime: 1.41 sec Time Spent Running SA: 258.67 hours Time Spent Processing Spam: 100.38 hours Time Spent Processing Ham: 158.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 273488 99.59 99.77 99.47 2 HTML_MESSAGE 265103 90.42 96.71 86.16 3 RELAYCOUNTRY_US 230752 82.37 84.18 81.14 4 XM_B_Unicode 211903 73.03 77.31 70.14 5 DCC_CHECK 193633 47.93 70.64 32.54 6 DKIM_SIGNED 160584 65.67 58.58 70.47 7 XM_DK_Pass 152690 63.76 55.70 69.21 8 DKIM_VALID 150379 62.83 54.86 68.24 9 XM_B_SpammyWords 128772 43.61 46.98 41.33 10 XMListUnsubscribeExists 124734 45.47 45.50 45.45 11 BAYES_50 114963 52.43 41.94 59.53 12 XMSubLong 114817 32.70 41.89 26.48 13 DKIM_VALID_AU 109424 48.63 39.92 54.53 14 XM_SPF_SoftFail 105605 20.63 38.53 8.51 15 HELO_NODOT 89747 17.15 32.74 6.58 16 HELO_NO_DOMAIN 89745 17.14 32.74 6.58 17 XMNumbers 89553 18.05 32.67 8.15 18 FSL_HELO_NON_FQDN_1 89528 16.00 32.66 4.71 19 FSL_BULK_SIG 80650 14.65 29.42 4.64 20 DCC_CHECK_NEGATIVE 80451 52.04 29.35 67.41 21 XM_DK_Undo_02 79722 14.85 29.08 5.22 22 XM_B_SpammyWords2 77453 21.65 28.26 17.18 23 XM_B_Unicode3 77160 33.89 28.15 37.78 24 MIME_HTML_ONLY 72125 21.39 26.31 18.06 25 FVGT_m_MULTI_ODD 68432 23.70 24.97 22.85 26 T_TM2_M_HEADER_IN_MSG 67555 26.57 24.65 27.88 27 LOC_TINY_FONT_1 65783 23.78 24.00 23.64 28 BAYES_99 62583 11.87 22.83 4.45 29 TR_XM_DKIM_Undo 60213 10.16 21.97 2.16 30 HTML_FONT_LOW_CONTRAST 59932 23.91 21.86 25.29 31 RCVD_IN_MSPIKE_H2 57144 24.89 20.85 27.63 32 DKIM_VALID_EF 55159 24.23 20.12 27.01 33 BAYES_60 53826 14.27 19.64 10.64 34 T_KAM_HTML_FONT_INVALID 50271 18.40 18.34 18.45 35 BAYES_999 48027 9.08 17.52 3.37 36 TR_DCC_Bayes_99 43893 7.44 16.01 1.63 37 TR_XM_DK_Unsub 40877 13.33 14.91 12.26 38 RELAYCOUNTRY_META 38006 8.00 13.87 4.03 39 TR_MAX_INTL_RELAY 36579 9.31 13.34 6.57 40 XM_Multi_Part_URI 32670 11.94 11.92 11.96 41 XM_B_Unsub 29939 8.95 10.92 7.61 42 TR_XM_SpammyRelay 29751 5.65 10.85 2.13 43 LOTS_OF_MONEY 28953 7.77 10.56 5.87 44 TR_XM_BayesUnsub 28614 7.80 10.44 6.01 45 SHORT_HELO_AND_INLINE_IMAGE 28020 4.48 10.22 0.58 46 XM_B_SpammyWords3 26629 6.41 9.71 4.17 47 TR_XM_SpammyWords4 26546 6.41 9.68 4.19 48 RCVD_IN_BL_SPAMCOP_NET 24705 3.91 9.01 0.45 49 BAYES_80 24550 6.03 8.96 4.05 50 UNPARSEABLE_RELAY 24547 9.57 8.96 9.98 51 TR_XM_SpammyWords2 24154 3.78 8.81 0.37 52 BOTNET_IPINHOSTNAME 23686 5.57 8.64 3.48 53 SCC_BODY_URI_ONLY 22673 5.14 8.27 3.01 54 TR_Mismatch_TLD_01 22129 3.37 8.07 0.19 55 HTML_IMAGE_ONLY_04 21944 3.30 8.01 0.11 56 DC_PNG_UNO_LARGO 21926 3.37 8.00 0.24 57 TR_XM_SPAMCOP 20691 3.24 7.55 0.32 58 T_TooManySym_01 20292 6.45 7.40 5.80 59 RELAYCOUNTRY_CA 18766 3.46 6.85 1.17 60 BODY_URI_ONLY 18727 2.77 6.83 0.01 61 TR_Symld_Words 17370 3.69 6.34 1.90 62 BOTNET 16088 3.06 5.87 1.15 63 RCVD_IN_MSPIKE_WL 15595 6.09 5.69 6.37 64 RCVD_IN_MSPIKE_H3 15595 6.09 5.69 6.37 65 XM_Evil_Numbers_Gen 15138 6.97 5.52 7.94 66 TR_XM_UnparsRelay 13224 2.94 4.82 1.66 67 XM_UncommonTLD01 12914 3.98 4.71 3.49 68 XM_B_SpammyTLD 12560 3.33 4.58 2.48 69 LotsOfNums_01 12198 6.67 4.45 8.18 70 XM_B_Phish_Phrases 11639 3.69 4.25 3.31 71 XMBody_17 11594 2.15 4.23 0.75 72 T_TooManySym_02 11522 3.33 4.20 2.74 73 UNTRUSTED_Relay 11027 2.54 4.02 1.53 74 BAYES_95 10994 3.12 4.01 2.52 75 XM_Body_Dirty_Words 10956 3.06 4.00 2.43 76 ALL_TRUSTED 10749 10.95 3.92 15.71 77 XM_ShortIntro_01 10715 2.04 3.91 0.78 78 HTML_IMAGE_ONLY_08 10447 1.61 3.81 0.12 79 T_TooManySym_03 10434 2.11 3.81 0.97 80 HTML_SHORT_LINK_IMG_1 10387 1.54 3.79 0.01 81 DKIM_INVALID 10205 2.84 3.72 2.23 82 HTML_IMAGE_RATIO_02 10166 3.91 3.71 4.05 83 MPART_ALT_DIFF 10133 3.54 3.70 3.43 84 XM_OfRef6 10119 2.43 3.69 1.58 85 T_TooManySym_04 10007 1.66 3.65 0.31 86 T_TooManySym_05 9812 1.51 3.58 0.12 87 XMSubMetaSx_00 9707 3.42 3.54 3.33 88 XM_B_Investor 9514 2.44 3.47 1.74 89 TVD_SPACE_RATIO_MINFP 9144 1.36 3.34 0.03 90 TooManyTo_001 9095 6.32 3.32 8.36 91 TVD_SPACE_RATIO 9074 1.93 3.31 0.99 92 XMStrtUSub 8935 3.88 3.26 4.30 93 XM_H_GMP 8732 5.00 3.19 6.23 94 HTML_IMAGE_RATIO_04 8511 3.91 3.10 4.46 95 TR_XM_SpammyWords5 8431 2.01 3.08 1.29 96 TR_XM_PhishingBody 8232 2.15 3.00 1.58 97 XM_H_Long_From01 8208 4.12 2.99 4.88 98 ANY_BOUNCE_MESSAGE 7940 4.31 2.90 5.26 99 BOUNCE_MESSAGE 7939 4.30 2.90 5.26 100 XM_B_SEO 7841 1.86 2.86 1.18 101 HTML_IMAGE_RATIO_06 7547 3.04 2.75 3.24 102 MIME_QP_LONG_LINE 6984 4.17 2.55 5.27 103 T_FILL_THIS_FORM_SHORT 6864 1.58 2.50 0.95 104 XMSexyCombo_05 6724 1.80 2.45 1.36 105 TR_XM_SEO4 6710 1.43 2.45 0.74 106 TR_LOTS_OF_MONEY3 6655 1.22 2.43 0.40 107 TM2_M_URI_OPT_OUT 6250 2.04 2.28 1.87 108 XM_B_SpammyTLD2 6108 1.20 2.23 0.50 109 T_XMDrugObfuBody_14 5915 1.75 2.16 1.48 110 HTML_IMAGE_RATIO_08 5687 2.19 2.07 2.26 111 TM2_M_VERY_LONG_WORD 5657 1.49 2.06 1.11 112 TR_XM_NoHeaderRelay 5554 0.91 2.03 0.15 113 MIME_HTML_ONLY_MULTI 5480 1.98 2.00 1.97 114 XM_UB50 5464 1.34 1.99 0.90 115 XM_B_SpammyWords4 5394 1.15 1.97 0.59 116 MIME_HTML_MOSTLY 5342 1.99 1.95 2.02 117 FONT_INVIS_LONG_LINE 5218 0.79 1.90 0.03 118 XM_CamelCaseFrm001 5065 1.95 1.85 2.02 119 XM_SendGrid 4967 1.53 1.81 1.34 120 XM_URI_RBL 4958 0.81 1.81 0.13 121 SUBJ_ALL_CAPS 4855 1.62 1.77 1.52 122 T_XMDrugObfuBody_08 4843 1.56 1.77 1.42 123 XMLngstWrd_00 4694 1.11 1.71 0.71 124 TR_XM_BayesRelay 4622 0.68 1.69 0.00 125 XMDiploma_00 4418 1.54 1.61 1.50 126 RCVD_IN_VALIDITY_RPBL 4407 0.67 1.61 0.03 127 RCVD_IN_VALIDITY_SAFE 4397 3.54 1.60 4.84 128 TR_XM_FormFill 4303 0.64 1.57 0.02 129 USER_IN_DEF_DKIM_WL 4232 8.53 1.54 13.25 130 XM_B_Unsub2 4217 1.48 1.54 1.44 131 URI_OPTOUT_3LD 4073 0.77 1.49 0.28 132 RELAYCOUNTRY_AU 4067 1.00 1.48 0.68 133 SpammyFromTLD_01 3820 1.04 1.39 0.80 134 XMBrknScrpt_02 3745 1.01 1.37 0.76 135 SpammyFromTLD_02 3728 0.67 1.36 0.20 136 XMLngstWrd_01 3697 0.77 1.35 0.38 137 XMLngstWrd_02 3493 0.69 1.27 0.30 138 FROM_EXCESS_BASE64 3474 1.68 1.27 1.96 139 TR_XM_INV_DKIM 3457 0.56 1.26 0.09 140 XM_DK_Undo_01 3423 1.78 1.25 2.14 141 HTML_MIME_NO_HTML_TAG 3303 1.57 1.20 1.82 142 RCVD_IN_VALIDITY_CERTIFIED 3295 2.85 1.20 3.96 143 XM_B_Phish66 3288 0.65 1.20 0.28 144 HOSTED_IMG_MULTI_PUB_01 3220 0.49 1.17 0.02 145 XMLngstWrd_03 3207 0.60 1.17 0.21 146 MAILING_LIST_MULTI 3130 2.18 1.14 2.88 147 BAYES_40 2955 3.10 1.08 4.46 148 T_REMOTE_IMAGE 2934 2.52 1.07 3.50 149 DKIM_ADSP_NXDOMAIN 2901 0.68 1.06 0.42 150 T_XMHurry_00 2890 0.77 1.05 0.57 151 XMStockSpam_06 2831 1.06 1.03 1.07 152 XMLngstWrd_04 2803 0.51 1.02 0.16 153 URI_HEX 2650 0.89 0.97 0.85 154 THIS_AD 2629 0.61 0.96 0.37 155 HTTPS_HTTP_MISMATCH 2619 0.93 0.96 0.92 156 TR_Mismatch_TLD_02 2614 0.42 0.95 0.06 157 URI_TRY_3LD 2596 0.69 0.95 0.52 158 T_XMDrugObfuBody_00 2507 0.76 0.91 0.66 159 TR_XM_PHPForged 2492 0.69 0.91 0.54 160 TR_XM_PHPDW 2464 0.68 0.90 0.54 161 KHOP_HELO_FCRDNS 2449 1.06 0.89 1.17 162 HK_RANDOM_REPLYTO 2435 0.41 0.89 0.09 163 TR_XM_FormFill2 2387 0.68 0.87 0.55 164 XM_H_PHPOS 2375 0.66 0.87 0.53 165 XMGenDplmaNmb 2333 0.87 0.85 0.88 166 TR_Caps_n_Bayes_99 2307 0.36 0.84 0.03 167 BAYES_20 2202 2.26 0.80 3.24 168 RCVD_IN_IADB_LISTED 2197 2.56 0.80 3.74 169 XM_HighProb1 2104 0.31 0.77 0.00 170 XM_B_DNDMA 2068 0.54 0.75 0.40 171 XMHTML_After_End 2050 0.56 0.75 0.44 172 XMSubMetaI_00 2041 0.69 0.74 0.64 173 RELAYCOUNTRY_RU 2038 0.32 0.74 0.03 174 DKIM_ADSP_CUSTOM_MED 2037 0.87 0.74 0.95 175 XM_DIRTYINTL 2020 0.37 0.74 0.12 176 RCVD_IN_IADB_SPF 1920 2.23 0.70 3.27 177 XM_BadFromFormat 1903 0.35 0.69 0.12 178 AC_BR_BONANZA 1881 0.33 0.69 0.08 179 BOTNET_NORDNS 1856 0.28 0.68 0.01 180 XMPhish30 1844 0.51 0.67 0.40 181 TR_XM_InvalidRelay 1833 0.28 0.67 0.02 182 XMSexyCombo_01 1829 0.37 0.67 0.17 183 XMReplyNow 1816 0.47 0.66 0.34 184 HTML_TAG_BALANCE_BODY 1804 0.55 0.66 0.48 185 XMBdyGiftCard01 1803 0.76 0.66 0.83 186 RCVD_IN_IADB_DK 1800 1.96 0.66 2.84 187 RCVD_IN_IADB_SENDERID 1789 2.01 0.65 2.94 188 XM_H_Undi_Recip 1785 0.38 0.65 0.19 189 XMMoneyMeta_00 1735 0.58 0.63 0.54 190 DIET_1 1731 0.36 0.63 0.18 191 RDNS_DYNAMIC 1719 0.43 0.63 0.29 192 XM_UB99 1712 0.25 0.62 0.00 193 XMBounce_01 1676 0.26 0.61 0.03 194 T_MONEY_PERCENT 1631 0.39 0.60 0.24 195 TR_LOTS_OF_MONEY2 1631 0.39 0.60 0.24 196 PLING_QUERY 1618 0.60 0.59 0.61 197 LongTLD 1609 0.44 0.59 0.35 198 TooManyTo_002 1596 1.88 0.58 2.76 199 RELAYCOUNTRY_CN 1577 0.28 0.58 0.08 200 MPART_ALT_DIFF_COUNT 1568 0.58 0.57 0.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 402538 99.59 99.77 99.47 2 HTML_MESSAGE 348674 90.42 96.71 86.16 3 RELAYCOUNTRY_US 328375 82.37 84.18 81.14 4 DKIM_SIGNED 285177 65.67 58.58 70.47 5 XM_B_Unicode 283827 73.03 77.31 70.14 6 XM_DK_Pass 280078 63.76 55.70 69.21 7 DKIM_VALID 276136 62.83 54.86 68.24 8 DCC_CHECK_NEGATIVE 272805 52.04 29.35 67.41 9 BAYES_50 240910 52.43 41.94 59.53 10 DKIM_VALID_AU 220660 48.63 39.92 54.53 11 XMListUnsubscribeExists 183941 45.47 45.50 45.45 12 XM_B_SpammyWords 167263 43.61 46.98 41.33 13 XM_B_Unicode3 152892 33.89 28.15 37.78 14 DCC_CHECK 131697 47.93 70.64 32.54 15 T_TM2_M_HEADER_IN_MSG 112807 26.57 24.65 27.88 16 RCVD_IN_MSPIKE_H2 111816 24.89 20.85 27.63 17 DKIM_VALID_EF 109305 24.23 20.12 27.01 18 XMSubLong 107145 32.70 41.89 26.48 19 HTML_FONT_LOW_CONTRAST 102341 23.91 21.86 25.29 20 LOC_TINY_FONT_1 95652 23.78 24.00 23.64 21 FVGT_m_MULTI_ODD 92473 23.70 24.97 22.85 22 T_KAM_HTML_FONT_INVALID 74645 18.40 18.34 18.45 23 MIME_HTML_ONLY 73091 21.39 26.31 18.06 24 XM_B_SpammyWords2 69528 21.65 28.26 17.18 25 ALL_TRUSTED 63580 10.95 3.92 15.71 26 USER_IN_DEF_DKIM_WL 53635 8.53 1.54 13.25 27 TR_XM_DK_Unsub 49628 13.33 14.91 12.26 28 XM_Multi_Part_URI 48406 11.94 11.92 11.96 29 BAYES_60 43067 14.27 19.64 10.64 30 UNPARSEABLE_RELAY 40405 9.57 8.96 9.98 31 BAYES_00 34758 5.28 0.38 8.59 32 XM_SPF_SoftFail 34423 20.63 38.53 8.51 33 TooManyTo_001 33824 6.32 3.32 8.36 34 LotsOfNums_01 33109 6.67 4.45 8.18 35 XMNumbers 32979 18.05 32.67 8.15 36 XM_Evil_Numbers_Gen 32150 6.97 5.52 7.94 37 XM_B_Unsub 30784 8.95 10.92 7.61 38 XM_DKIMWhitelistDomains 29542 4.38 0.08 7.30 39 HELO_NODOT 26641 17.15 32.74 6.58 40 HELO_NO_DOMAIN 26631 17.14 32.74 6.58 41 TR_MAX_INTL_RELAY 26598 9.31 13.34 6.57 42 RCVD_IN_MSPIKE_WL 25766 6.09 5.69 6.37 43 RCVD_IN_MSPIKE_H3 25762 6.09 5.69 6.37 44 IN_ZIMBRA_NJ_WHITELIST 25634 3.80 0.07 6.33 45 XM_H_GMP 25206 5.00 3.19 6.23 46 TR_XM_BayesUnsub 24306 7.80 10.44 6.01 47 LOTS_OF_MONEY 23771 7.77 10.56 5.87 48 T_TooManySym_01 23484 6.45 7.40 5.80 49 TR_XM_DK_Bayes 22599 3.45 0.29 5.58 50 TR_XM_DK_Bayes1 22244 3.39 0.29 5.50 51 MIME_QP_LONG_LINE 21322 4.17 2.55 5.27 52 ANY_BOUNCE_MESSAGE 21282 4.31 2.90 5.26 53 BOUNCE_MESSAGE 21277 4.30 2.90 5.26 54 XM_DK_Undo_02 21111 14.85 29.08 5.22 55 XM_H_Long_From01 19737 4.12 2.99 4.88 56 RCVD_IN_VALIDITY_SAFE 19603 3.54 1.60 4.84 57 FSL_HELO_NON_FQDN_1 19059 16.00 32.66 4.71 58 TR_XM_DK_Bayes2 18894 2.86 0.19 4.67 59 FSL_BULK_SIG 18771 14.65 29.42 4.64 60 BAYES_40 18054 3.10 1.08 4.46 61 HTML_IMAGE_RATIO_04 18042 3.91 3.10 4.46 62 BAYES_99 17990 11.87 22.83 4.45 63 XMStrtUSub 17421 3.88 3.26 4.30 64 XM_PDF 17361 2.75 0.47 4.29 65 TR_XM_SpammyWords4 16961 6.41 9.68 4.19 66 XM_B_SpammyWords3 16871 6.41 9.71 4.17 67 BAYES_80 16386 6.03 8.96 4.05 68 HTML_IMAGE_RATIO_02 16370 3.91 3.71 4.05 69 RELAYCOUNTRY_META 16322 8.00 13.87 4.03 70 RCVD_IN_VALIDITY_CERTIFIED 16040 2.85 1.20 3.96 71 RCVD_IN_IADB_LISTED 15154 2.56 0.80 3.74 72 T_REMOTE_IMAGE 14165 2.52 1.07 3.50 73 XM_UncommonTLD01 14116 3.98 4.71 3.49 74 BOTNET_IPINHOSTNAME 14099 5.57 8.64 3.48 75 MPART_ALT_DIFF 13885 3.54 3.70 3.43 76 BAYES_999 13619 9.08 17.52 3.37 77 XMSubMetaSx_00 13478 3.42 3.54 3.33 78 XM_B_Phish_Phrases 13392 3.69 4.25 3.31 79 RCVD_IN_IADB_SPF 13240 2.23 0.70 3.27 80 BAYES_20 13117 2.26 0.80 3.24 81 HTML_IMAGE_RATIO_06 13095 3.04 2.75 3.24 82 SCC_BODY_URI_ONLY 12194 5.14 8.27 3.01 83 RCVD_IN_IADB_SENDERID 11881 2.01 0.65 2.94 84 MAILING_LIST_MULTI 11663 2.18 1.14 2.88 85 RCVD_IN_IADB_DK 11508 1.96 0.66 2.84 86 TooManyTo_002 11174 1.88 0.58 2.76 87 T_TooManySym_02 11082 3.33 4.20 2.74 88 BAYES_95 10207 3.12 4.01 2.52 89 BAYES_05 10189 1.65 0.36 2.52 90 XM_B_SpammyTLD 10044 3.33 4.58 2.48 91 XM_Body_Dirty_Words 9830 3.06 4.00 2.43 92 RCVD_IN_IADB_VOUCHED 9700 1.58 0.37 2.40 93 HTML_IMAGE_RATIO_08 9145 2.19 2.07 2.26 94 DKIM_INVALID 9041 2.84 3.72 2.23 95 TR_XM_DKIM_Undo 8758 10.16 21.97 2.16 96 XM_DK_Undo_01 8652 1.78 1.25 2.14 97 TR_XM_SpammyRelay 8622 5.65 10.85 2.13 98 XM_CamelCaseFrm001 8183 1.95 1.85 2.02 99 MIME_HTML_MOSTLY 8157 1.99 1.95 2.02 100 INVALID_MSGID 8157 1.26 0.14 2.02 101 MIME_HTML_ONLY_MULTI 7964 1.98 2.00 1.97 102 FROM_EXCESS_BASE64 7950 1.68 1.27 1.96 103 TR_Symld_Words 7707 3.69 6.34 1.90 104 TM2_M_URI_OPT_OUT 7571 2.04 2.28 1.87 105 HTML_MIME_NO_HTML_TAG 7361 1.57 1.20 1.82 106 TO_MALFORMED 7080 1.05 0.02 1.75 107 XM_B_Investor 7057 2.44 3.47 1.74 108 TR_XM_UnparsRelay 6707 2.94 4.82 1.66 109 TR_DCC_Bayes_99 6600 7.44 16.01 1.63 110 RCVD_IN_IADB_OPTIN 6581 1.06 0.23 1.63 111 XM_OfRef6 6404 2.43 3.69 1.58 112 TR_XM_PhishingBody 6382 2.15 3.00 1.58 113 UNTRUSTED_Relay 6187 2.54 4.02 1.53 114 SUBJ_ALL_CAPS 6140 1.62 1.77 1.52 115 XMDiploma_00 6058 1.54 1.61 1.50 116 TooManyTo_003 5994 1.08 0.49 1.48 117 T_XMDrugObfuBody_14 5984 1.75 2.16 1.48 118 XM_B_Unsub2 5822 1.48 1.54 1.44 119 T_XMDrugObfuBody_08 5744 1.56 1.77 1.42 120 IN_HORDE_ADDRESS_BOOK 5743 0.86 0.04 1.42 121 XMSexyCombo_05 5523 1.80 2.45 1.36 122 XM_SendGrid 5436 1.53 1.81 1.34 123 TVD_RCVD_IP 5404 0.99 0.49 1.34 124 TR_XM_SpammyWords5 5212 2.01 3.08 1.29 125 XM_B_SEO 4762 1.86 2.86 1.18 126 RELAYCOUNTRY_CA 4751 3.46 6.85 1.17 127 KHOP_HELO_FCRDNS 4740 1.06 0.89 1.17 128 XM_GoogleGroups 4712 0.82 0.32 1.16 129 BOTNET 4659 3.06 5.87 1.15 130 TooManyTo_004 4543 0.85 0.45 1.12 131 TM2_M_VERY_LONG_WORD 4478 1.49 2.06 1.11 132 XMCapTrack 4386 0.77 0.31 1.08 133 XMStockSpam_06 4340 1.06 1.03 1.07 134 URI_NOVOWEL 4327 0.85 0.52 1.07 135 XMBSHREFv2 4049 0.66 0.16 1.00 136 TVD_SPACE_RATIO 4012 1.93 3.31 0.99 137 XM_H_Long_From02 4000 0.79 0.50 0.99 138 T_TooManySym_03 3912 2.11 3.81 0.97 139 TooManyTo_005 3887 0.74 0.42 0.96 140 DKIM_ADSP_CUSTOM_MED 3841 0.87 0.74 0.95 141 T_FILL_THIS_FORM_SHORT 3839 1.58 2.50 0.95 142 XMGappySubj_01 3736 0.59 0.09 0.92 143 HTTPS_HTTP_MISMATCH 3718 0.93 0.96 0.92 144 XM_UB50 3660 1.34 1.99 0.90 145 XMGenDplmaNmb 3552 0.87 0.85 0.88 146 URI_HEX 3420 0.89 0.97 0.85 147 TR_XM_DK_SendGrid 3384 0.71 0.52 0.84 148 XMBdyGiftCard01 3361 0.76 0.66 0.83 149 FILL_THIS_FORM 3318 0.59 0.26 0.82 150 XM_B_FormFill 3317 0.53 0.10 0.82 151 SpammyFromTLD_01 3243 1.04 1.39 0.80 152 XM_ShortIntro_01 3141 2.04 3.91 0.78 153 XMNoVowels 3122 0.65 0.47 0.77 154 XMBrknScrpt_02 3078 1.01 1.37 0.76 155 TR_XM_Base64_M1 3062 0.67 0.55 0.76 156 XMBody_17 3023 2.15 4.23 0.75 157 TR_XM_SEO4 3010 1.43 2.45 0.74 158 XM_H_Trusted_IP 2961 0.44 0.00 0.73 159 XMLngstWrd_00 2859 1.11 1.71 0.71 160 T_OBFU_PDF_ATTACH 2850 0.44 0.06 0.70 161 TR_MetaPhish_Combo_01 2833 0.63 0.53 0.70 162 RELAYCOUNTRY_AU 2737 1.00 1.48 0.68 163 XM_H_PHPMailer 2729 0.58 0.43 0.67 164 XMBody_95 2713 0.45 0.11 0.67 165 T_XMDrugObfuBody_00 2669 0.76 0.91 0.66 166 NML_ADSP_CUSTOM_MED 2652 0.62 0.57 0.66 167 XMSubMetaI_00 2610 0.69 0.74 0.64 168 XM_B_COPY_HTML 2464 0.59 0.56 0.61 169 PLING_QUERY 2449 0.60 0.59 0.61 170 XM_B_SpammyWords4 2392 1.15 1.97 0.59 171 SHORT_HELO_AND_INLINE_IMAGE 2359 4.48 10.22 0.58 172 MPART_ALT_DIFF_COUNT 2337 0.58 0.57 0.58 173 T_XMHurry_00 2310 0.77 1.05 0.57 174 XM_ProductURIs 2230 0.52 0.48 0.55 175 TR_XM_FormFill2 2208 0.68 0.87 0.55 176 FORGED_GMAIL_RCVD 2205 0.54 0.53 0.54 177 XMGappySubj_02 2198 0.34 0.05 0.54 178 XMSubNoVowel 2196 0.41 0.21 0.54 179 XMPhish14 2192 0.55 0.56 0.54 180 TR_XM_PHPForged 2184 0.69 0.91 0.54 181 TR_XM_PHPDW 2176 0.68 0.90 0.54 182 T_Symld_Words_02 2176 0.52 0.50 0.54 183 XMMoneyMeta_00 2171 0.58 0.63 0.54 184 XM_H_PHPOS 2125 0.66 0.87 0.53 185 URI_TRY_3LD 2115 0.69 0.95 0.52 186 TO_NO_BRKTS_HTML_ONLY 2113 0.40 0.22 0.52 187 SUBJ_BUY 2096 0.37 0.14 0.52 188 XM_B_SpammyTLD2 2020 1.20 2.23 0.50 189 T_FILL_THIS_FORM_LOAN 1987 0.35 0.13 0.49 190 HTML_TAG_BALANCE_BODY 1962 0.55 0.66 0.48 191 FROM_GOV_DKIM_AU 1891 0.31 0.07 0.47 192 FILL_THIS_FORM_LONG 1851 0.35 0.20 0.46 193 MIME_HEADER_CTYPE_ONLY 1815 0.29 0.05 0.45 194 RCVD_IN_BL_SPAMCOP_NET 1805 3.91 9.01 0.45 195 XMHTML_After_End 1776 0.56 0.75 0.44 196 HTML_IMAGE_ONLY_32 1772 0.29 0.07 0.44 197 HTML_FONT_FACE_BAD 1761 0.45 0.47 0.44 198 RELAYCOUNTRY_GB 1753 0.45 0.47 0.43 199 MISSING_HEADERS 1716 0.39 0.33 0.42 200 HTML_IMAGE_ONLY_28 1705 0.33 0.21 0.42 ----------------------------------------------------------------------