Email: 619049 Autolearn: 0 AvgScore: 2.71 AvgScanTime: 1.53 sec Spam: 180971 Autolearn: 0 AvgScore: 13.21 AvgScanTime: 1.69 sec Ham: 438078 Autolearn: 0 AvgScore: -1.62 AvgScanTime: 1.46 sec Time Spent Running SA: 262.42 hours Time Spent Processing Spam: 84.76 hours Time Spent Processing Ham: 177.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 179442 99.45 99.16 99.57 2 HTML_MESSAGE 175371 90.71 96.91 88.15 3 DKIM_SIGNED 155881 68.91 86.14 61.79 4 XM_B_Unicode 153207 76.85 84.66 73.62 5 XM_DK_Pass 148545 66.93 82.08 60.67 6 DKIM_VALID 146450 66.00 80.92 59.84 7 RELAYCOUNTRY_US 136658 76.64 75.51 77.10 8 DCC_CHECK 127547 42.12 70.48 30.40 9 XM_B_SpammyWords 123745 51.34 68.38 44.30 10 XMListUnsubscribeExists 122774 48.52 67.84 40.54 11 DKIM_VALID_AU 109109 51.98 60.29 48.54 12 XM_B_Unicode3 79928 41.40 44.17 40.25 13 XM_DK_Undo_02 78003 15.58 43.10 4.21 14 XM_B_SpammyWords2 74237 23.20 41.02 15.84 15 BAYES_50 68706 52.50 37.97 58.50 16 LOC_TINY_FONT_1 66811 25.56 36.92 20.86 17 BAYES_99 61676 12.39 34.08 3.42 18 FVGT_m_MULTI_ODD 58909 24.33 32.55 20.94 19 TR_XM_DKIM_Undo 58385 10.65 32.26 1.72 20 HTML_FONT_LOW_CONTRAST 58338 25.62 32.24 22.89 21 MIME_HTML_ONLY 56587 24.09 31.27 21.12 22 RCVD_IN_MSPIKE_H2 54633 25.76 30.19 23.93 23 DKIM_VALID_EF 53450 25.34 29.54 23.61 24 DCC_CHECK_NEGATIVE 53404 57.85 29.51 69.55 25 XMSubLong 50209 25.58 27.74 24.68 26 T_KAM_HTML_FONT_INVALID 49948 20.37 27.60 17.38 27 BAYES_999 48897 9.81 27.02 2.70 28 T_TM2_M_HEADER_IN_MSG 43676 26.78 24.13 27.87 29 TR_DCC_Bayes_99 42469 7.61 23.47 1.06 30 TR_XM_DK_Unsub 37966 13.63 20.98 10.60 31 RELAYCOUNTRY_META 36282 8.45 20.05 3.66 32 XM_Multi_Part_URI 32127 13.11 17.75 11.19 33 TR_MAX_INTL_RELAY 30607 8.92 16.91 5.62 34 XM_B_Unsub 26786 8.88 14.80 6.43 35 LOTS_OF_MONEY 26757 8.54 14.79 5.96 36 TR_XM_BayesUnsub 25883 7.74 14.30 5.03 37 XM_B_SpammyWords3 25683 7.08 14.19 4.15 38 TR_XM_SpammyRelay 25432 5.49 14.05 1.95 39 TR_XM_SpammyWords2 25080 4.39 13.86 0.48 40 UNPARSEABLE_RELAY 23624 9.59 13.05 8.16 41 TR_XM_SpammyWords4 23172 6.81 12.80 4.33 42 BOTNET_IPINHOSTNAME 22879 5.93 12.64 3.16 43 RCVD_IN_BL_SPAMCOP_NET 21802 3.93 12.05 0.57 44 TR_XM_SPAMCOP 19127 3.34 10.57 0.35 45 FSL_BULK_SIG 18741 6.87 10.36 5.42 46 BAYES_80 18302 5.52 10.11 3.62 47 RELAYCOUNTRY_CA 17192 3.54 9.50 1.07 48 BOTNET 16063 3.28 8.88 0.97 49 RCVD_IN_MSPIKE_H3 15021 6.23 8.30 5.37 50 RCVD_IN_MSPIKE_WL 15021 6.23 8.30 5.37 51 BAYES_60 14837 8.04 8.20 7.97 52 XM_SPF_SoftFail 14773 4.70 8.16 3.26 53 XM_Evil_Numbers_Gen 14432 7.91 7.97 7.89 54 UNTRUSTED_Relay 14100 3.29 7.79 1.43 55 TR_XM_UnparsRelay 12512 2.83 6.91 1.15 56 LotsOfNums_01 11799 6.65 6.52 6.70 57 XM_Body_Dirty_Words 11363 3.47 6.28 2.31 58 MPART_ALT_DIFF 11282 7.63 6.23 8.20 59 BAYES_95 11100 3.21 6.13 2.00 60 T_TooManySym_01 10494 5.10 5.80 4.82 61 XM_UncommonTLD01 10135 3.89 5.60 3.19 62 ALL_TRUSTED 10087 15.82 5.57 20.05 63 XMSubMetaSx_00 10056 4.01 5.56 3.37 64 XMBody_17 9838 1.96 5.44 0.52 65 HTML_IMAGE_RATIO_02 9555 4.28 5.28 3.87 66 DKIM_INVALID 9431 2.91 5.21 1.95 67 TooManyTo_001 8958 6.65 4.95 7.36 68 XM_B_Investor 8928 2.50 4.93 1.49 69 TR_Symld_Words 8917 2.59 4.93 1.62 70 XM_H_Long_From01 8686 4.58 4.80 4.49 71 XM_B_SpammyTLD 8658 3.24 4.78 2.60 72 XM_B_Phish_Phrases 8629 3.63 4.77 3.16 73 XM_OfRef6 8618 2.21 4.76 1.16 74 XM_H_GMP 8541 5.19 4.72 5.38 75 XM_B_SEO 8057 2.18 4.45 1.24 76 HTML_IMAGE_RATIO_04 7883 10.52 4.36 13.07 77 TR_XM_SpammyWords5 7699 3.74 4.25 3.53 78 HTML_IMAGE_RATIO_06 7546 4.03 4.17 3.97 79 TR_XM_PhishingBody 7501 2.10 4.14 1.26 80 TR_XM_SEO4 6952 1.74 3.84 0.87 81 XMNumbers 6801 5.42 3.76 6.10 82 MIME_QP_LONG_LINE 6660 6.16 3.68 7.19 83 T_TooManySym_02 6616 2.75 3.66 2.37 84 XMSexyCombo_05 6503 1.97 3.59 1.30 85 TR_LOTS_OF_MONEY3 6276 1.38 3.47 0.51 86 MIME_HTML_MOSTLY 6114 2.52 3.38 2.17 87 T_XMDrugObfuBody_14 5957 2.24 3.29 1.80 88 MIME_HTML_ONLY_MULTI 5944 5.48 3.28 6.38 89 XMStrtUSub 5933 7.93 3.28 9.86 90 T_TooManySym_03 5865 1.64 3.24 0.98 91 XM_UB50 5794 1.55 3.20 0.87 92 HTML_IMAGE_RATIO_08 5663 2.46 3.13 2.19 93 T_TooManySym_04 5527 1.22 3.05 0.46 94 T_FILL_THIS_FORM_SHORT 5407 1.48 2.99 0.85 95 TM2_M_URI_OPT_OUT 5382 3.90 2.97 4.28 96 USER_IN_DEF_DKIM_WL 5193 9.02 2.87 11.56 97 T_XMDrugObfuBody_08 5158 1.70 2.85 1.23 98 TM2_M_VERY_LONG_WORD 5117 1.59 2.83 1.08 99 SUBJ_ALL_CAPS 5031 1.73 2.78 1.30 100 XM_B_Unsub2 4908 1.67 2.71 1.24 101 BOUNCE_MESSAGE 4748 4.50 2.62 5.28 102 ANY_BOUNCE_MESSAGE 4748 4.50 2.62 5.28 103 XMDiploma_00 4614 1.82 2.55 1.51 104 SpammyFromTLD_01 4392 1.25 2.43 0.76 105 TR_XM_BayesRelay 4369 0.71 2.41 0.00 106 XM_URI_RBL 4327 0.79 2.39 0.13 107 RCVD_IN_VALIDITY_SAFE 4270 3.70 2.36 4.25 108 XM_CamelCaseFrm001 4265 1.96 2.36 1.79 109 FONT_INVIS_LONG_LINE 4247 0.72 2.35 0.05 110 TR_XM_INV_DKIM 4198 0.72 2.32 0.06 111 RCVD_IN_VALIDITY_RPBL 4059 0.72 2.24 0.09 112 XM_B_SpammyWords4 3974 1.25 2.20 0.85 113 TR_XM_NoHeaderRelay 3776 0.66 2.09 0.08 114 HOSTED_IMG_MULTI_PUB_01 3645 0.60 2.01 0.02 115 RELAYCOUNTRY_AU 3592 1.04 1.98 0.65 116 RELAYCOUNTRY_NL 3418 0.69 1.89 0.19 117 RCVD_IN_VALIDITY_CERTIFIED 3408 3.19 1.88 3.72 118 XM_DK_Undo_01 3350 1.74 1.85 1.70 119 DKIM_ADSP_NXDOMAIN 3331 0.74 1.84 0.28 120 T_REMOTE_IMAGE 3277 2.65 1.81 3.00 121 HTML_MIME_NO_HTML_TAG 3183 1.78 1.76 1.79 122 TR_XM_FormFill 3119 0.51 1.72 0.01 123 RELAYCOUNTRY_PK 3036 0.57 1.68 0.11 124 MAILING_LIST_MULTI 3023 2.10 1.67 2.28 125 TR_Mismatch_TLD_02 2930 0.51 1.62 0.05 126 XMBrknScrpt_02 2843 0.93 1.57 0.66 127 XMGenDplmaNmb 2769 1.04 1.53 0.83 128 FROM_EXCESS_BASE64 2725 1.50 1.51 1.50 129 T_XMHurry_00 2710 0.71 1.50 0.39 130 XM_H_Undi_Recip 2619 0.54 1.45 0.17 131 URI_TRY_3LD 2612 0.85 1.44 0.61 132 BAYES_40 2580 3.99 1.43 5.06 133 XMStockSpam_06 2579 1.07 1.43 0.93 134 SpammyFromTLD_02 2517 0.65 1.39 0.35 135 URI_HEX 2470 1.04 1.36 0.91 136 TR_Caps_n_Bayes_99 2453 0.40 1.36 0.01 137 XM_UB95 2416 0.40 1.34 0.01 138 HTTPS_HTTP_MISMATCH 2411 0.90 1.33 0.72 139 TR_XM_PHPForged 2379 0.61 1.31 0.32 140 XMPhish14 2336 0.65 1.29 0.39 141 TR_XM_PHPDW 2325 0.59 1.28 0.31 142 HK_RANDOM_REPLYTO 2312 0.42 1.28 0.06 143 TR_XM_FormFill2 2287 0.60 1.26 0.32 144 XMBdyGiftCard01 2285 0.81 1.26 0.62 145 XM_H_PHPOS 2272 0.58 1.26 0.30 146 TR_XM_Undi_Recip19 2251 0.41 1.24 0.07 147 RCVD_IN_IADB_LISTED 2180 2.49 1.20 3.02 148 XM_SendGrid 2123 1.17 1.17 1.17 149 HTML_TAG_BALANCE_BODY 2115 0.65 1.17 0.44 150 XM_HighProb1 2115 0.34 1.17 0.00 151 XMPhish30 2104 0.59 1.16 0.35 152 XMLngstWrd_00 2089 0.92 1.15 0.82 153 XM_UB99 2076 0.34 1.15 0.00 154 AC_BR_BONANZA 2075 0.37 1.15 0.06 155 TR_XM_Undi_RecipCombo2 2062 0.34 1.14 0.01 156 XMHTML_After_End 2056 0.60 1.14 0.38 157 XM_DIRTYINTL 2008 0.39 1.11 0.09 158 KHOP_HELO_FCRDNS 1966 1.03 1.09 1.01 159 RCVD_IN_IADB_SPF 1953 2.20 1.08 2.67 160 BAYES_20 1922 2.93 1.06 3.69 161 URI_NOVOWEL 1918 1.04 1.06 1.04 162 HTML_IMAGE_ONLY_20 1891 0.55 1.04 0.35 163 TR_XM_InvalidRelay 1875 0.32 1.04 0.02 164 XMSubMetaI_00 1860 0.90 1.03 0.84 165 RCVD_IN_IADB_DK 1860 1.95 1.03 2.33 166 DKIM_ADSP_CUSTOM_MED 1857 0.87 1.03 0.81 167 RCVD_IN_IADB_SENDERID 1835 1.99 1.01 2.39 168 XMReplyNow 1807 0.47 1.00 0.25 169 XMClaimOffer 1754 0.37 0.97 0.13 170 BOTNET_NORDNS 1750 0.29 0.97 0.01 171 T_XMDrugObfuBody_00 1745 0.73 0.96 0.64 172 T_MONEY_PERCENT 1737 0.45 0.96 0.24 173 TR_LOTS_OF_MONEY2 1737 0.45 0.96 0.24 174 RELAYCOUNTRY_FR 1732 0.44 0.96 0.22 175 XMMoneyMeta_00 1714 0.62 0.95 0.48 176 TR_MetaPhish_Combo_01 1690 1.15 0.93 1.24 177 TooManyTo_002 1672 2.02 0.92 2.47 178 XM_B_DNDMA 1667 0.50 0.92 0.33 179 T_Symld_Words_02 1665 0.67 0.92 0.57 180 XM_UB80 1655 0.28 0.91 0.01 181 XM_ProductURIs 1637 0.82 0.90 0.79 182 SCC_BODY_URI_ONLY 1625 2.05 0.90 2.53 183 NML_ADSP_CUSTOM_MED 1609 0.69 0.89 0.61 184 T_STY_INVIS_DIRECT 1609 0.44 0.89 0.25 185 XM_B_COVIDMETA 1606 0.37 0.89 0.16 186 UNDISC_MONEY 1598 0.26 0.88 0.01 187 XM_B_Phish66 1590 0.45 0.88 0.28 188 XM_B_COPY_HTML 1581 0.67 0.87 0.59 189 XMSexyCombo_01 1560 0.33 0.86 0.11 190 XMSlimDrugH 1553 0.43 0.86 0.25 191 XM_OfRef7 1524 0.36 0.84 0.16 192 XM_UB60 1504 0.32 0.83 0.11 193 TR_XM_Undi_Recip5 1502 0.24 0.83 0.00 194 XM_H_Long_From02 1500 0.92 0.83 0.96 195 RCVD_IN_PSBL 1499 0.35 0.83 0.16 196 TM2_M_OBFU_COMMENT 1489 0.39 0.82 0.22 197 RDNS_DYNAMIC 1481 0.42 0.82 0.26 198 HTML_FONT_FACE_BAD 1472 8.72 0.81 11.99 199 TR_Sbj_FN_Bdy 1452 0.30 0.80 0.09 200 XMBounce_01 1446 0.29 0.80 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 436182 99.45 99.16 99.57 2 HTML_MESSAGE 386171 90.71 96.91 88.15 3 RELAYCOUNTRY_US 337758 76.64 75.51 77.10 4 XM_B_Unicode 322515 76.85 84.66 73.62 5 DCC_CHECK_NEGATIVE 304705 57.85 29.51 69.55 6 DKIM_SIGNED 270707 68.91 86.14 61.79 7 XM_DK_Pass 265769 66.93 82.08 60.67 8 DKIM_VALID 262143 66.00 80.92 59.84 9 BAYES_50 256282 52.50 37.97 58.50 10 DKIM_VALID_AU 212661 51.98 60.29 48.54 11 XM_B_SpammyWords 194058 51.34 68.38 44.30 12 XMListUnsubscribeExists 177596 48.52 67.84 40.54 13 XM_B_Unicode3 176343 41.40 44.17 40.25 14 DCC_CHECK 133182 42.12 70.48 30.40 15 T_TM2_M_HEADER_IN_MSG 122079 26.78 24.13 27.87 16 XMSubLong 108120 25.58 27.74 24.68 17 RCVD_IN_MSPIKE_H2 104842 25.76 30.19 23.93 18 DKIM_VALID_EF 103419 25.34 29.54 23.61 19 HTML_FONT_LOW_CONTRAST 100267 25.62 32.24 22.89 20 MIME_HTML_ONLY 92523 24.09 31.27 21.12 21 FVGT_m_MULTI_ODD 91724 24.33 32.55 20.94 22 LOC_TINY_FONT_1 91399 25.56 36.92 20.86 23 ALL_TRUSTED 87832 15.82 5.57 20.05 24 T_KAM_HTML_FONT_INVALID 76137 20.37 27.60 17.38 25 XM_B_SpammyWords2 69377 23.20 41.02 15.84 26 HTML_IMAGE_RATIO_04 57269 10.52 4.36 13.07 27 BAYES_00 52984 8.72 0.54 12.09 28 HTML_FONT_FACE_BAD 52512 8.72 0.81 11.99 29 USER_IN_DEF_DKIM_WL 50621 9.02 2.87 11.56 30 XM_Multi_Part_URI 49006 13.11 17.75 11.19 31 TR_XM_DK_Unsub 46415 13.63 20.98 10.60 32 XM_H_Trusted_IP 46373 7.49 0.00 10.59 33 XMStrtUSub 43177 7.93 3.28 9.86 34 MPART_ALT_DIFF 35935 7.63 6.23 8.20 35 UNPARSEABLE_RELAY 35740 9.59 13.05 8.16 36 BAYES_60 34909 8.04 8.20 7.97 37 XM_Evil_Numbers_Gen 34553 7.91 7.97 7.89 38 TooManyTo_001 32227 6.65 4.95 7.36 39 MIME_QP_LONG_LINE 31491 6.16 3.68 7.19 40 LotsOfNums_01 29339 6.65 6.52 6.70 41 XM_B_Unsub 28161 8.88 14.80 6.43 42 MIME_HTML_ONLY_MULTI 27968 5.48 3.28 6.38 43 XM_DKIMWhitelistDomains 27572 4.46 0.02 6.29 44 XMNumbers 26725 5.42 3.76 6.10 45 LOTS_OF_MONEY 26088 8.54 14.79 5.96 46 IN_ZIMBRA_NJ_WHITELIST 25326 4.12 0.10 5.78 47 TR_MAX_INTL_RELAY 24619 8.92 16.91 5.62 48 FSL_BULK_SIG 23758 6.87 10.36 5.42 49 XM_H_GMP 23575 5.19 4.72 5.38 50 RCVD_IN_MSPIKE_H3 23544 6.23 8.30 5.37 51 RCVD_IN_MSPIKE_WL 23544 6.23 8.30 5.37 52 BOUNCE_MESSAGE 23132 4.50 2.62 5.28 53 ANY_BOUNCE_MESSAGE 23132 4.50 2.62 5.28 54 TR_XM_DK_Bayes 22229 3.69 0.35 5.07 55 BAYES_40 22150 3.99 1.43 5.06 56 TR_XM_BayesUnsub 22019 7.74 14.30 5.03 57 TR_XM_DK_Bayes1 21945 3.64 0.34 5.01 58 T_TooManySym_01 21101 5.10 5.80 4.82 59 XM_H_Long_From01 19678 4.58 4.80 4.49 60 TR_XM_SpammyWords4 18968 6.81 12.80 4.33 61 TR_XM_DK_Bayes2 18786 3.12 0.28 4.29 62 TM2_M_URI_OPT_OUT 18767 3.90 2.97 4.28 63 RCVD_IN_VALIDITY_SAFE 18629 3.70 2.36 4.25 64 XM_DK_Undo_02 18458 15.58 43.10 4.21 65 XM_B_SpammyWords3 18170 7.08 14.19 4.15 66 HTML_IMAGE_RATIO_06 17392 4.03 4.17 3.97 67 HTML_IMAGE_RATIO_02 16952 4.28 5.28 3.87 68 XM_PDF 16532 2.90 0.79 3.77 69 RCVD_IN_VALIDITY_CERTIFIED 16311 3.19 1.88 3.72 70 BAYES_20 16186 2.93 1.06 3.69 71 RELAYCOUNTRY_META 16012 8.45 20.05 3.66 72 XMSubNoVowel 15982 2.69 0.36 3.65 73 BAYES_05 15949 2.72 0.48 3.64 74 BAYES_80 15851 5.52 10.11 3.62 75 TR_XM_SpammyWords5 15479 3.74 4.25 3.53 76 BAYES_99 15003 12.39 34.08 3.42 77 XMSubMetaSx_00 14755 4.01 5.56 3.37 78 XM_SPF_SoftFail 14301 4.70 8.16 3.26 79 XM_UncommonTLD01 13975 3.89 5.60 3.19 80 BOTNET_IPINHOSTNAME 13860 5.93 12.64 3.16 81 XM_B_Phish_Phrases 13843 3.63 4.77 3.16 82 RCVD_IN_IADB_LISTED 13243 2.49 1.20 3.02 83 XMGappySubj_01 13155 2.25 0.42 3.00 84 T_REMOTE_IMAGE 13154 2.65 1.81 3.00 85 BAYES_999 11807 9.81 27.02 2.70 86 RCVD_IN_IADB_SPF 11692 2.20 1.08 2.67 87 XM_B_SpammyTLD 11380 3.24 4.78 2.60 88 SCC_BODY_URI_ONLY 11083 2.05 0.90 2.53 89 XMGappySubj_02 10970 1.87 0.34 2.50 90 TooManyTo_002 10821 2.02 0.92 2.47 91 RCVD_IN_IADB_SENDERID 10467 1.99 1.01 2.39 92 T_TooManySym_02 10384 2.75 3.66 2.37 93 RCVD_IN_IADB_DK 10219 1.95 1.03 2.33 94 XM_Body_Dirty_Words 10110 3.47 6.28 2.31 95 MAILING_LIST_MULTI 9981 2.10 1.67 2.28 96 HTML_IMAGE_RATIO_08 9574 2.46 3.13 2.19 97 MIME_HTML_MOSTLY 9497 2.52 3.38 2.17 98 XMSubject_60 9122 1.56 0.30 2.08 99 BAYES_95 8764 3.21 6.13 2.00 100 RCVD_IN_IADB_VOUCHED 8635 1.58 0.62 1.97 101 DKIM_INVALID 8564 2.91 5.21 1.95 102 TR_XM_SpammyRelay 8562 5.49 14.05 1.95 103 XMSubLongNoVowel 7949 1.32 0.12 1.81 104 T_XMDrugObfuBody_14 7884 2.24 3.29 1.80 105 XM_CamelCaseFrm001 7859 1.96 2.36 1.79 106 HTML_MIME_NO_HTML_TAG 7844 1.78 1.76 1.79 107 XMSubGarbage 7731 1.26 0.02 1.76 108 INVALID_MSGID 7620 1.27 0.14 1.74 109 TR_XM_DKIM_Undo 7533 10.65 32.26 1.72 110 XM_DK_Undo_01 7451 1.74 1.85 1.70 111 HELO_NODOT 7201 1.26 0.33 1.64 112 HELO_NO_DOMAIN 7196 1.26 0.33 1.64 113 TR_Symld_Words 7113 2.59 4.93 1.62 114 TO_MALFORMED 7055 1.15 0.03 1.61 115 XMDiploma_00 6626 1.82 2.55 1.51 116 FROM_EXCESS_BASE64 6581 1.50 1.51 1.50 117 XM_B_Investor 6545 2.50 4.93 1.49 118 UNTRUSTED_Relay 6268 3.29 7.79 1.43 119 RCVD_IN_IADB_OPTIN 5965 1.07 0.36 1.36 120 XMSexyCombo_05 5705 1.97 3.59 1.30 121 SUBJ_ALL_CAPS 5693 1.73 2.78 1.30 122 TVD_RCVD_IP 5619 1.11 0.69 1.28 123 TR_XM_PhishingBody 5514 2.10 4.14 1.26 124 TooManyTo_003 5477 1.11 0.77 1.25 125 XM_B_Unsub2 5448 1.67 2.71 1.24 126 XM_B_SEO 5442 2.18 4.45 1.24 127 TR_MetaPhish_Combo_01 5433 1.15 0.93 1.24 128 IN_HORDE_ADDRESS_BOOK 5412 0.90 0.07 1.24 129 T_XMDrugObfuBody_08 5387 1.70 2.85 1.23 130 XM_SendGrid 5145 1.17 1.17 1.17 131 XM_OfRef6 5091 2.21 4.76 1.16 132 TR_XM_UnparsRelay 5030 2.83 6.91 1.15 133 TM2_M_VERY_LONG_WORD 4728 1.59 2.83 1.08 134 RELAYCOUNTRY_CA 4699 3.54 9.50 1.07 135 TR_DCC_Bayes_99 4652 7.61 23.47 1.06 136 URI_NOVOWEL 4540 1.04 1.06 1.04 137 KHOP_HELO_FCRDNS 4435 1.03 1.09 1.01 138 XM_GoogleGroups 4272 0.86 0.57 0.98 139 T_TooManySym_03 4272 1.64 3.24 0.98 140 BOTNET 4252 3.28 8.88 0.97 141 XM_H_Long_From02 4212 0.92 0.83 0.96 142 XMCapTrack 4199 0.82 0.50 0.96 143 XMStockSpam_06 4066 1.07 1.43 0.93 144 TooManyTo_004 4059 0.87 0.72 0.93 145 URI_HEX 3988 1.04 1.36 0.91 146 TVD_SPACE_RATIO 3870 0.66 0.13 0.88 147 XM_E_Blogspot 3836 0.65 0.09 0.88 148 XMBSHREFv2 3830 0.70 0.29 0.87 149 TR_XM_SEO4 3809 1.74 3.84 0.87 150 XM_UB50 3793 1.55 3.20 0.87 151 T_FILL_THIS_FORM_SHORT 3743 1.48 2.99 0.85 152 XM_B_SpammyWords4 3741 1.25 2.20 0.85 153 XMSubMetaI_00 3685 0.90 1.03 0.84 154 XMGenDplmaNmb 3640 1.04 1.53 0.83 155 XMLngstWrd_00 3580 0.92 1.15 0.82 156 DKIM_ADSP_CUSTOM_MED 3554 0.87 1.03 0.81 157 XM_ProductURIs 3462 0.82 0.90 0.79 158 TooManyTo_005 3386 0.74 0.67 0.77 159 SpammyFromTLD_01 3321 1.25 2.43 0.76 160 XM_B_FormFill 3307 0.55 0.07 0.75 161 TR_XM_DK_SendGrid 3174 0.73 0.75 0.72 162 HTTPS_HTTP_MISMATCH 3159 0.90 1.33 0.72 163 XMBrknScrpt_02 2887 0.93 1.57 0.66 164 FILL_THIS_FORM 2884 0.52 0.19 0.66 165 RELAYCOUNTRY_AU 2858 1.04 1.98 0.65 166 T_XMDrugObfuBody_00 2787 0.73 0.96 0.64 167 XMBdyGiftCard01 2705 0.81 1.26 0.62 168 URI_TRY_3LD 2679 0.85 1.44 0.61 169 XM_ShortIntro_01 2676 0.57 0.47 0.61 170 NML_ADSP_CUSTOM_MED 2651 0.69 0.89 0.61 171 XMBody_95 2631 0.51 0.28 0.60 172 XM_H_PHPMailer 2576 0.62 0.70 0.59 173 XM_B_COPY_HTML 2575 0.67 0.87 0.59 174 FROM_GOV_DKIM_AU 2511 0.51 0.37 0.57 175 RCVD_IN_BL_SPAMCOP_NET 2497 3.93 12.05 0.57 176 T_Symld_Words_02 2497 0.67 0.92 0.57 177 XM_RXBody 2371 0.52 0.48 0.54 178 T_OBFU_PDF_ATTACH 2311 0.41 0.12 0.53 179 XMBody_17 2299 1.96 5.44 0.52 180 SHORT_HELO_AND_INLINE_IMAGE 2279 0.38 0.06 0.52 181 TR_LOTS_OF_MONEY3 2255 1.38 3.47 0.51 182 TR_XM_Base64_M1 2254 0.55 0.65 0.51 183 XMNoVowels 2171 0.54 0.64 0.50 184 TR_XM_SpammyWords2 2121 4.39 13.86 0.48 185 XMMoneyMeta_00 2113 0.62 0.95 0.48 186 FORGED_GMAIL_RCVD 2046 0.54 0.73 0.47 187 T_TooManySym_04 2001 1.22 3.05 0.46 188 HTML_TAG_BALANCE_BODY 1933 0.65 1.17 0.44 189 MPART_ALT_DIFF_COUNT 1916 0.50 0.66 0.44 190 XMPhish14 1710 0.65 1.29 0.39 191 T_XMHurry_00 1703 0.71 1.50 0.39 192 RELAYCOUNTRY_GB 1691 0.50 0.78 0.39 193 XMOemUri 1687 0.41 0.46 0.39 194 XMHTML_After_End 1666 0.60 1.14 0.38 195 PLING_QUERY 1588 0.48 0.77 0.36 196 HTML_IMAGE_ONLY_32 1564 0.33 0.26 0.36 197 MISSING_HEADERS 1551 0.39 0.46 0.35 198 TR_XM_SPAMCOP 1548 3.34 10.57 0.35 199 XMPhish30 1544 0.59 1.16 0.35 200 HTML_IMAGE_ONLY_20 1541 0.55 1.04 0.35 ----------------------------------------------------------------------