Email: 374556 Autolearn: 0 AvgScore: 5.21 AvgScanTime: 1.33 sec Spam: 114374 Autolearn: 0 AvgScore: 14.97 AvgScanTime: 1.45 sec Ham: 260182 Autolearn: 0 AvgScore: 0.92 AvgScanTime: 1.27 sec Time Spent Running SA: 137.97 hours Time Spent Processing Spam: 46.17 hours Time Spent Processing Ham: 91.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 112564 99.15 98.42 99.47 2 HTML_MESSAGE 106554 87.62 93.16 85.18 3 DKIM_SIGNED 98366 76.98 86.00 73.02 4 XM_DK_Pass 93820 75.09 82.03 72.04 5 XM_B_Unicode 93288 72.14 81.56 68.00 6 DKIM_VALID 92935 74.11 81.26 70.97 7 RELAYCOUNTRY_US 88752 78.89 77.60 79.46 8 DCC_CHECK 86742 50.71 75.84 39.66 9 XM_B_SpammyWords 80309 50.86 70.22 42.36 10 XMListUnsubscribeExists 74159 51.47 64.84 45.59 11 DKIM_VALID_AU 72554 59.77 63.44 58.16 12 XM_B_Unicode3 53795 41.48 47.03 39.03 13 LOC_TINY_FONT_1 51346 31.96 44.89 26.27 14 BAYES_50 45797 54.29 40.04 60.56 15 XM_B_SpammyWords2 44459 24.90 38.87 18.75 16 XM_DK_Undo_02 44386 14.99 38.81 4.52 17 HTML_FONT_LOW_CONTRAST 38851 28.03 33.97 25.42 18 FVGT_m_MULTI_ODD 36438 27.78 31.86 25.98 19 BAYES_99 36088 12.17 31.55 3.65 20 DKIM_VALID_EF 35919 31.22 31.40 31.13 21 MIME_HTML_ONLY 35035 24.78 30.63 22.21 22 T_KAM_HTML_FONT_INVALID 34244 23.28 29.94 20.36 23 TR_XM_DKIM_Undo 33301 10.11 29.12 1.76 24 BAYES_999 27629 9.30 24.16 2.77 25 XMSubLong 27127 23.75 23.72 23.76 26 TR_DCC_Bayes_99 26621 8.02 23.28 1.31 27 DCC_CHECK_NEGATIVE 25996 48.83 22.73 60.30 28 T_TM2_M_HEADER_IN_MSG 25976 29.37 22.71 32.30 29 TR_XM_DK_Unsub 24958 16.32 21.82 13.90 30 RELAYCOUNTRY_META 23936 9.07 20.93 3.86 31 XM_B_Unsub 22684 14.39 19.83 12.00 32 XM_Multi_Part_URI 22225 15.60 19.43 13.92 33 TR_XM_BayesUnsub 21806 11.44 19.07 8.09 34 UNPARSEABLE_RELAY 19801 14.24 17.31 12.89 35 RCVD_IN_MSPIKE_H2 18990 15.59 16.60 15.15 36 TR_MAX_INTL_RELAY 17048 8.78 14.91 6.09 37 TR_XM_SpammyRelay 17031 5.76 14.89 1.75 38 XM_B_SpammyWords3 16488 7.39 14.42 4.30 39 BOTNET_IPINHOSTNAME 14851 5.86 12.98 2.73 40 FSL_BULK_SIG 14775 10.39 12.92 9.28 41 LOTS_OF_MONEY 14521 7.59 12.70 5.35 42 TR_XM_SpammyWords2 12991 3.84 11.36 0.53 43 TR_XM_SpammyWords4 12837 5.91 11.22 3.57 44 BOTNET 11827 3.86 10.34 1.01 45 TR_XM_UnparsRelay 10866 4.02 9.50 1.60 46 BAYES_80 10477 5.35 9.16 3.68 47 RCVD_IN_BL_SPAMCOP_NET 10312 3.08 9.02 0.46 48 XM_Evil_Numbers_Gen 10180 8.81 8.90 8.77 49 UNTRUSTED_Relay 9761 3.91 8.53 1.87 50 BAYES_60 9643 7.18 8.43 6.63 51 RCVD_IN_MSPIKE_WL 9028 13.52 7.89 16.00 52 RELAYCOUNTRY_CA 8937 2.99 7.81 0.86 53 XM_B_Phish_Phrases 8738 6.16 7.64 5.51 54 XM_Body_Dirty_Words 7820 3.67 6.84 2.28 55 LotsOfNums_01 7813 7.13 6.83 7.26 56 HTML_IMAGE_RATIO_02 7422 5.78 6.49 5.46 57 XMSubMetaSx_00 7351 4.12 6.43 3.10 58 RCVD_IN_MSPIKE_BL 7317 2.24 6.40 0.41 59 TR_XM_MSPIKECOMBO 7312 2.23 6.39 0.41 60 XM_H_GMP 7296 6.30 6.38 6.27 61 XM_B_PhoneNumber 7033 9.76 6.15 11.35 62 XM_UncommonTLD01 6792 4.74 5.94 4.21 63 XM_H_Long_From01 6577 5.49 5.75 5.38 64 TooManyTo_001 6372 8.61 5.57 9.95 65 HTML_IMAGE_RATIO_04 6291 4.19 5.50 3.62 66 RCVD_IN_VALIDITY_RPBL 6168 1.76 5.39 0.17 67 MPART_ALT_DIFF 6109 4.50 5.34 4.12 68 XM_B_Investor 5980 2.57 5.23 1.41 69 BAYES_95 5847 3.24 5.11 2.41 70 XMSexyCombo_05 5719 2.50 5.00 1.40 71 TR_XM_NoHeaderRelay 5676 1.66 4.96 0.21 72 XMStrtUSub 5604 4.68 4.90 4.59 73 TM2_M_VERY_LONG_WORD 5458 2.73 4.77 1.83 74 DKIM_INVALID 5431 2.87 4.75 2.05 75 XM_OfRef6 5284 2.28 4.62 1.25 76 TR_XM_PhishingBody 5176 2.30 4.53 1.32 77 T_XMDrugObfuBody_14 5157 2.69 4.51 1.88 78 XM_UB50 5153 2.23 4.51 1.23 79 MIME_HTML_MOSTLY 4922 2.88 4.30 2.25 80 TR_XM_SpammyWords5 4787 2.29 4.19 1.45 81 TR_XM_SpammyWords3 4751 1.40 4.15 0.20 82 MIME_QP_LONG_LINE 4633 4.05 4.05 4.05 83 RCVD_IN_MSPIKE_H3 4514 5.71 3.95 6.49 84 T_XMDrugObfuBody_08 4452 2.07 3.89 1.26 85 XM_SPF_SoftFail 4410 2.16 3.86 1.41 86 XMNumbers 4398 4.81 3.85 5.23 87 XM_B_SpammyTLD 4379 2.99 3.83 2.63 88 XM_CamelCaseFrm001 4145 2.21 3.62 1.59 89 RCVD_IN_MSPIKE_L3 3669 1.12 3.21 0.20 90 ANY_BOUNCE_MESSAGE 3606 3.91 3.15 4.25 91 BOUNCE_MESSAGE 3606 3.91 3.15 4.25 92 ALL_TRUSTED 3482 12.98 3.04 17.34 93 HTML_IMAGE_RATIO_06 3399 3.27 2.97 3.40 94 T_TooManySym_01 3232 5.52 2.83 6.71 95 XM_B_Unsub2 3229 1.65 2.82 1.13 96 T_FILL_THIS_FORM_SHORT 3156 1.40 2.76 0.81 97 XM_URI_RBL 3143 1.12 2.75 0.41 98 DKIM_ADSP_NXDOMAIN 3064 1.07 2.68 0.36 99 MIME_HTML_ONLY_MULTI 2902 2.49 2.54 2.47 100 XM_B_SpammyWords4 2846 1.21 2.49 0.65 101 XM_B_URI_Unicode 2841 2.12 2.48 1.96 102 XMDiploma_00 2802 1.62 2.45 1.26 103 TR_XM_SPAMCOP 2802 0.81 2.45 0.09 104 RELAYCOUNTRY_AU 2792 1.03 2.44 0.41 105 HTML_IMAGE_RATIO_08 2709 2.23 2.37 2.17 106 XMBody_17 2694 1.10 2.36 0.55 107 SpammyFromTLD_02 2647 0.87 2.31 0.24 108 MAILING_LIST_MULTI 2629 2.71 2.30 2.89 109 T_XMHurry_00 2621 1.17 2.29 0.68 110 USER_IN_DEF_DKIM_WL 2596 9.81 2.27 13.12 111 KHOP_HELO_FCRDNS 2580 1.64 2.26 1.37 112 FROM_EXCESS_BASE64 2566 2.08 2.24 2.01 113 RCVD_IN_VALIDITY_SAFE 2517 3.55 2.20 4.14 114 SUBJ_ALL_CAPS 2491 1.60 2.18 1.34 115 RCVD_IN_PSBL 2486 0.96 2.17 0.43 116 RCVD_IN_MSPIKE_H4 2372 2.78 2.07 3.10 117 TM2_M_URI_OPT_OUT 2321 1.69 2.03 1.53 118 TR_XM_INV_DKIM 2288 0.68 2.00 0.09 119 SCC_BODY_URI_ONLY 2253 2.37 1.97 2.55 120 RCVD_IN_MSPIKE_L5 2158 0.65 1.89 0.10 121 RCVD_IN_MSPIKE_H5 2142 5.03 1.87 6.41 122 XMStockSpam_06 2061 1.43 1.80 1.26 123 DKIM_ADSP_CUSTOM_MED 2059 1.15 1.80 0.86 124 HK_RANDOM_REPLYTO 2032 0.62 1.78 0.12 125 RCVD_IN_XBL 2026 0.55 1.77 0.02 126 HTML_MIME_NO_HTML_TAG 1998 2.55 1.75 2.91 127 XMBrknScrpt_02 1966 1.15 1.72 0.90 128 XM_OfRef7 1961 0.87 1.71 0.49 129 BAYES_40 1958 4.44 1.71 5.64 130 SpammyFromTLD_01 1900 0.91 1.66 0.58 131 TR_LOTS_OF_MONEY3 1889 0.70 1.65 0.28 132 RCVD_IN_PBL 1887 1.13 1.65 0.91 133 RCVD_IN_VALIDITY_CERTIFIED 1874 2.88 1.64 3.43 134 XMBounce_01 1872 0.51 1.64 0.02 135 XM_DK_Undo_01 1859 1.67 1.63 1.68 136 TR_MetaPhish_Combo_01 1839 1.61 1.61 1.61 137 NML_ADSP_CUSTOM_MED 1817 0.89 1.59 0.59 138 XM_SendGrid 1808 1.56 1.58 1.56 139 T_XMDrugObfuBody_00 1794 0.94 1.57 0.66 140 XMSubMetaI_00 1794 0.91 1.57 0.62 141 FORGED_GMAIL_RCVD 1786 0.83 1.56 0.50 142 RDNS_DYNAMIC 1785 0.63 1.56 0.22 143 T_REMOTE_IMAGE 1691 3.06 1.48 3.76 144 PDS_RDNS_DYNAMIC_FP 1675 0.48 1.46 0.05 145 TR_XM_InvalidRelay 1671 0.45 1.46 0.01 146 RELAYCOUNTRY_TH 1669 0.45 1.46 0.01 147 MultiRelay_CC 1632 0.64 1.43 0.30 148 TVD_RCVD_IP 1631 1.19 1.43 1.08 149 RCVD_IN_ZEN_LASTEXTERNAL 1605 0.43 1.40 0.00 150 SHORTCIRCUIT 1605 0.43 1.40 0.00 151 URI_HEX 1559 1.28 1.36 1.25 152 RELAYCOUNTRY_FR 1549 0.67 1.35 0.37 153 BAYES_20 1539 3.04 1.35 3.79 154 HTML_IMAGE_ONLY_20 1519 0.70 1.33 0.42 155 XM_H_Undi_Recip 1505 0.53 1.32 0.19 156 XMPhish30 1490 0.71 1.30 0.45 157 RCVD_IN_MSPIKE_L4 1486 0.47 1.30 0.11 158 TR_LOTS_OF_MONEY2 1485 0.50 1.30 0.15 159 T_MONEY_PERCENT 1485 0.50 1.30 0.15 160 URI_TRY_3LD 1470 0.84 1.29 0.64 161 MIME_CHARSET_FARAWAY 1456 0.73 1.27 0.49 162 HTTPS_HTTP_MISMATCH 1435 0.83 1.25 0.64 163 XM_UB60 1431 0.43 1.25 0.07 164 XM_HighProb1 1417 0.38 1.24 0.01 165 TR_XM_PHPForged 1410 0.90 1.23 0.76 166 XM_B_SEO 1399 0.53 1.22 0.23 167 RCVD_IN_IADB_LISTED 1394 2.50 1.22 3.07 168 TR_XM_PHPDW 1392 0.90 1.22 0.75 169 TR_XM_FormFill 1390 0.38 1.22 0.01 170 TR_XM_FormFill2 1385 0.90 1.21 0.76 171 TR_Symld_Words 1381 1.53 1.21 1.67 172 XM_H_Long_From02 1376 0.89 1.20 0.76 173 FILL_THIS_FORM 1373 0.94 1.20 0.83 174 XMGenDplmaNmb 1369 0.76 1.20 0.57 175 TR_Mismatch_TLD_02 1368 0.42 1.20 0.07 176 XM_B_Phish66 1364 0.59 1.19 0.32 177 DIET_1 1362 0.54 1.19 0.25 178 RELAYCOUNTRY_CN 1358 0.44 1.19 0.11 179 BOTNET_NORDNS 1357 0.37 1.19 0.01 180 XM_S_SpammyWords 1354 0.45 1.18 0.13 181 TR_XM_Spammywords 1352 0.45 1.18 0.13 182 XM_H_PHPOS 1341 0.87 1.17 0.74 183 MPART_ALT_DIFF_COUNT 1335 0.81 1.17 0.65 184 XM_DIRTYINTL 1329 0.41 1.16 0.08 185 XM_UB99 1311 0.35 1.15 0.00 186 TR_XM_Undi_Recip19 1305 0.41 1.14 0.09 187 TR_XM_MSPIKECOMBO2 1278 0.34 1.12 0.00 188 URI_NOVOWEL 1262 1.44 1.10 1.58 189 RCVD_IN_SBL_CSS 1259 0.37 1.10 0.05 190 TR_XM_RelayPhish 1252 0.42 1.09 0.12 191 MONEY_FRAUD_3 1250 0.34 1.09 0.01 192 TR_XM_Undi_RecipCombo2 1238 0.34 1.08 0.01 193 MONEY_FORM 1216 0.34 1.06 0.02 194 MISSING_HEADERS 1212 0.58 1.06 0.38 195 TR_XM_Undi_Recip11 1207 0.35 1.06 0.04 196 SHOPIFY_IMG_NOT_RCVD_SFY 1203 0.49 1.05 0.24 197 TR_XM_SEO4 1202 0.38 1.05 0.09 198 HTML_TAG_BALANCE_BODY 1195 0.78 1.04 0.66 199 XM_B_COPY_HTML 1192 0.98 1.04 0.96 200 THIS_AD 1187 0.63 1.04 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 258811 99.15 98.42 99.47 2 HTML_MESSAGE 221635 87.62 93.16 85.18 3 RELAYCOUNTRY_US 206744 78.89 77.60 79.46 4 DKIM_SIGNED 189976 76.98 86.00 73.02 5 XM_DK_Pass 187433 75.09 82.03 72.04 6 DKIM_VALID 184647 74.11 81.26 70.97 7 XM_B_Unicode 176935 72.14 81.56 68.00 8 BAYES_50 157564 54.29 40.04 60.56 9 DCC_CHECK_NEGATIVE 156886 48.83 22.73 60.30 10 DKIM_VALID_AU 151317 59.77 63.44 58.16 11 XMListUnsubscribeExists 118611 51.47 64.84 45.59 12 XM_B_SpammyWords 110208 50.86 70.22 42.36 13 DCC_CHECK 103188 50.71 75.84 39.66 14 XM_B_Unicode3 101561 41.48 47.03 39.03 15 T_TM2_M_HEADER_IN_MSG 84043 29.37 22.71 32.30 16 DKIM_VALID_EF 81007 31.22 31.40 31.13 17 LOC_TINY_FONT_1 68362 31.96 44.89 26.27 18 FVGT_m_MULTI_ODD 67606 27.78 31.86 25.98 19 HTML_FONT_LOW_CONTRAST 66140 28.03 33.97 25.42 20 XMSubLong 61812 23.75 23.72 23.76 21 MIME_HTML_ONLY 57798 24.78 30.63 22.21 22 T_KAM_HTML_FONT_INVALID 52967 23.28 29.94 20.36 23 XM_B_SpammyWords2 48794 24.90 38.87 18.75 24 ALL_TRUSTED 45127 12.98 3.04 17.34 25 RCVD_IN_MSPIKE_WL 41618 13.52 7.89 16.00 26 RCVD_IN_MSPIKE_H2 39410 15.59 16.60 15.15 27 XM_Multi_Part_URI 36207 15.60 19.43 13.92 28 TR_XM_DK_Unsub 36159 16.32 21.82 13.90 29 USER_IN_DEF_DKIM_WL 34139 9.81 2.27 13.12 30 UNPARSEABLE_RELAY 33525 14.24 17.31 12.89 31 XM_B_Unsub 31210 14.39 19.83 12.00 32 BAYES_00 29690 8.08 0.50 11.41 33 XM_B_PhoneNumber 29530 9.76 6.15 11.35 34 TooManyTo_001 25889 8.61 5.57 9.95 35 FSL_BULK_SIG 24136 10.39 12.92 9.28 36 XM_Evil_Numbers_Gen 22826 8.81 8.90 8.77 37 TR_XM_BayesUnsub 21053 11.44 19.07 8.09 38 LotsOfNums_01 18881 7.13 6.83 7.26 39 T_TooManySym_01 17453 5.52 2.83 6.71 40 TR_XM_DK_Bayes 17406 4.76 0.37 6.69 41 BAYES_60 17242 7.18 8.43 6.63 42 TR_XM_DK_Bayes1 17002 4.65 0.36 6.53 43 RCVD_IN_MSPIKE_H3 16877 5.71 3.95 6.49 44 RCVD_IN_MSPIKE_H5 16683 5.03 1.87 6.41 45 XM_DKIMWhitelistDomains 16589 4.43 0.02 6.38 46 XM_H_GMP 16313 6.30 6.38 6.27 47 TR_MAX_INTL_RELAY 15853 8.78 14.91 6.09 48 BAYES_40 14683 4.44 1.71 5.64 49 XM_B_Phish_Phrases 14337 6.16 7.64 5.51 50 TR_XM_DK_Bayes2 14254 3.88 0.24 5.48 51 HTML_IMAGE_RATIO_02 14211 5.78 6.49 5.46 52 XM_H_Long_From01 13988 5.49 5.75 5.38 53 LOTS_OF_MONEY 13913 7.59 12.70 5.35 54 XMNumbers 13620 4.81 3.85 5.23 55 TooManyTo_002 11947 3.43 0.80 4.59 56 XMStrtUSub 11941 4.68 4.90 4.59 57 XM_DK_Undo_02 11754 14.99 38.81 4.52 58 XM_PDF 11317 3.26 0.77 4.35 59 XM_B_SpammyWords3 11200 7.39 14.42 4.30 60 ANY_BOUNCE_MESSAGE 11052 3.91 3.15 4.25 61 BOUNCE_MESSAGE 11049 3.91 3.15 4.25 62 XM_UncommonTLD01 10946 4.74 5.94 4.21 63 RCVD_IN_VALIDITY_SAFE 10770 3.55 2.20 4.14 64 MPART_ALT_DIFF 10732 4.50 5.34 4.12 65 MIME_QP_LONG_LINE 10533 4.05 4.05 4.05 66 RELAYCOUNTRY_META 10054 9.07 20.93 3.86 67 BAYES_20 9859 3.04 1.35 3.79 68 T_REMOTE_IMAGE 9775 3.06 1.48 3.76 69 BAYES_80 9562 5.35 9.16 3.68 70 BAYES_99 9490 12.17 31.55 3.65 71 HTML_IMAGE_RATIO_04 9407 4.19 5.50 3.62 72 TR_XM_SpammyWords4 9281 5.91 11.22 3.57 73 T_TooManySym_02 9076 2.68 0.83 3.49 74 RCVD_IN_VALIDITY_CERTIFIED 8914 2.88 1.64 3.43 75 HTML_IMAGE_RATIO_06 8853 3.27 2.97 3.40 76 XMSubMetaSx_00 8072 4.12 6.43 3.10 77 RCVD_IN_MSPIKE_H4 8058 2.78 2.07 3.10 78 RCVD_IN_IADB_LISTED 7984 2.50 1.22 3.07 79 HTML_MIME_NO_HTML_TAG 7562 2.55 1.75 2.91 80 MAILING_LIST_MULTI 7509 2.71 2.30 2.89 81 BAYES_999 7212 9.30 24.16 2.77 82 BOTNET_IPINHOSTNAME 7094 5.86 12.98 2.73 83 RCVD_IN_IADB_SPF 6989 2.18 1.02 2.69 84 XM_B_SpammyTLD 6837 2.99 3.83 2.63 85 INVALID_MSGID 6763 1.88 0.25 2.60 86 SCC_BODY_URI_ONLY 6623 2.37 1.97 2.55 87 MIME_HTML_ONLY_MULTI 6435 2.49 2.54 2.47 88 BAYES_95 6283 3.24 5.11 2.41 89 TO_MALFORMED 6280 1.68 0.02 2.41 90 RCVD_IN_IADB_SENDERID 6176 1.94 0.96 2.37 91 RCVD_IN_IADB_DK 6042 1.91 0.96 2.32 92 XM_Body_Dirty_Words 5926 3.67 6.84 2.28 93 XM_B_FormFill 5905 1.59 0.04 2.27 94 MIME_HTML_MOSTLY 5864 2.88 4.30 2.25 95 BAYES_05 5800 1.77 0.74 2.23 96 HTML_IMAGE_RATIO_08 5635 2.23 2.37 2.17 97 RCVD_IN_IADB_VOUCHED 5392 1.62 0.59 2.07 98 DKIM_INVALID 5329 2.87 4.75 2.05 99 FROM_EXCESS_BASE64 5228 2.08 2.24 2.01 100 XM_B_URI_Unicode 5092 2.12 2.48 1.96 101 T_XMDrugObfuBody_14 4904 2.69 4.51 1.88 102 UNTRUSTED_Relay 4876 3.91 8.53 1.87 103 TM2_M_VERY_LONG_WORD 4755 2.73 4.77 1.83 104 TR_XM_DKIM_Undo 4574 10.11 29.12 1.76 105 TR_XM_SpammyRelay 4550 5.76 14.89 1.75 106 TooManyTo_003 4471 1.40 0.69 1.72 107 XM_DK_Undo_01 4378 1.67 1.63 1.68 108 TR_Symld_Words 4337 1.53 1.21 1.67 109 TR_MetaPhish_Combo_01 4198 1.61 1.61 1.61 110 TR_XM_UnparsRelay 4173 4.02 9.50 1.60 111 XM_CamelCaseFrm001 4131 2.21 3.62 1.59 112 URI_NOVOWEL 4115 1.44 1.10 1.58 113 XM_SendGrid 4053 1.56 1.58 1.56 114 TM2_M_URI_OPT_OUT 3991 1.69 2.03 1.53 115 RCVD_IN_IADB_OPTIN 3799 1.11 0.32 1.46 116 TR_XM_SpammyWords5 3778 2.29 4.19 1.45 117 XM_SPF_SoftFail 3667 2.16 3.86 1.41 118 XM_B_Investor 3662 2.57 5.23 1.41 119 XMSexyCombo_05 3636 2.50 5.00 1.40 120 T_TooManySym_03 3600 1.09 0.41 1.38 121 KHOP_HELO_FCRDNS 3576 1.64 2.26 1.37 122 SUBJ_ALL_CAPS 3495 1.60 2.18 1.34 123 IN_HORDE_ADDRESS_BOOK 3451 0.94 0.06 1.33 124 XMGappySubj_01 3449 0.99 0.24 1.33 125 TR_XM_PhishingBody 3435 2.30 4.53 1.32 126 TooManyTo_004 3410 1.10 0.63 1.31 127 TR_DCC_Bayes_99 3407 8.02 23.28 1.31 128 XM_GoogleGroups 3303 1.12 0.79 1.27 129 XMStockSpam_06 3291 1.43 1.80 1.26 130 T_XMDrugObfuBody_08 3291 2.07 3.89 1.26 131 XMDiploma_00 3280 1.62 2.45 1.26 132 XMCapTrack 3269 1.03 0.52 1.26 133 URI_HEX 3246 1.28 1.36 1.25 134 XM_OfRef6 3242 2.28 4.62 1.25 135 XM_UB50 3195 2.23 4.51 1.23 136 TVD_SPACE_RATIO 3099 0.91 0.26 1.19 137 XM_B_Unsub2 2949 1.65 2.82 1.13 138 TVD_RCVD_IP 2815 1.19 1.43 1.08 139 TooManyTo_005 2787 0.92 0.58 1.07 140 HELO_NODOT 2784 0.80 0.19 1.07 141 HELO_NO_DOMAIN 2783 0.80 0.18 1.07 142 BOTNET 2631 3.86 10.34 1.01 143 TR_XM_DK_SendGrid 2613 0.96 0.86 1.00 144 XM_H_PHPMailer 2610 0.91 0.69 1.00 145 URI_OPTOUT_3LD 2497 0.88 0.71 0.96 146 XM_B_COPY_HTML 2496 0.98 1.04 0.96 147 XMGappySubj_02 2473 0.69 0.11 0.95 148 XMNoVowels 2468 0.81 0.49 0.95 149 RCVD_IN_PBL 2356 1.13 1.65 0.91 150 XMBrknScrpt_02 2339 1.15 1.72 0.90 151 RELAYCOUNTRY_CA 2244 2.99 7.81 0.86 152 DKIM_ADSP_CUSTOM_MED 2241 1.15 1.80 0.86 153 XM_ShortIntro_01 2196 0.71 0.42 0.84 154 FILL_THIS_FORM 2165 0.94 1.20 0.83 155 T_FILL_THIS_FORM_SHORT 2100 1.40 2.76 0.81 156 TR_XM_Base64_M1 2007 0.77 0.76 0.77 157 TR_XM_FormFill2 1975 0.90 1.21 0.76 158 XM_H_Long_From02 1973 0.89 1.20 0.76 159 TR_XM_PHPForged 1973 0.90 1.23 0.76 160 TR_XM_PHPDW 1964 0.90 1.22 0.75 161 XM_H_PHPOS 1921 0.87 1.17 0.74 162 XMSlimDrugH 1776 0.62 0.49 0.68 163 T_Symld_Words_02 1763 0.72 0.81 0.68 164 T_XMHurry_00 1757 1.17 2.29 0.68 165 HTML_TAG_BALANCE_BODY 1729 0.78 1.04 0.66 166 T_XMDrugObfuBody_00 1727 0.94 1.57 0.66 167 HTML_IMAGE_ONLY_32 1716 0.55 0.29 0.66 168 MPART_ALT_DIFF_COUNT 1702 0.81 1.17 0.65 169 XM_B_SpammyWords4 1690 1.21 2.49 0.65 170 URI_TRY_3LD 1674 0.84 1.29 0.64 171 HTTPS_HTTP_MISMATCH 1672 0.83 1.25 0.64 172 XMBdyGiftCard01 1661 0.76 1.03 0.64 173 XMSubMetaI_00 1603 0.91 1.57 0.62 174 XMBSHREFv2 1583 0.53 0.34 0.61 175 MSGID_FROM_MTA_HEADER 1572 0.46 0.13 0.60 176 NML_ADSP_CUSTOM_MED 1534 0.89 1.59 0.59 177 XMLngstWrd_00 1529 0.60 0.63 0.59 178 FILL_THIS_FORM_LONG 1524 0.69 0.93 0.59 179 SpammyFromTLD_01 1521 0.91 1.66 0.58 180 T_STY_INVIS_DIRECT 1499 0.67 0.88 0.58 181 XMGenDplmaNmb 1488 0.76 1.20 0.57 182 XMBody_17 1429 1.10 2.36 0.55 183 XM_ProductURIs 1406 0.65 0.90 0.54 184 TR_XM_SpammyWords2 1391 3.84 11.36 0.53 185 MAY_BE_FORGED 1355 0.61 0.82 0.52 186 XM_B_DNDMA 1349 0.64 0.91 0.52 187 RELAYCOUNTRY_GB 1338 0.66 0.98 0.51 188 FORGED_GMAIL_RCVD 1313 0.83 1.56 0.50 189 XM_OfRef7 1287 0.87 1.71 0.49 190 MIME_CHARSET_FARAWAY 1275 0.73 1.27 0.49 191 T_OBFU_PDF_ATTACH 1263 0.41 0.24 0.49 192 XMLngstWrd_01 1262 0.50 0.53 0.49 193 HTML_FONT_FACE_BAD 1238 0.62 0.95 0.48 194 RCVD_IN_BL_SPAMCOP_NET 1207 3.08 9.02 0.46 195 XMBody_95 1205 0.37 0.17 0.46 196 TM2_M_OBFU_COMMENT 1184 0.51 0.62 0.46 197 XMPhish30 1174 0.71 1.30 0.45 198 THIS_AD 1169 0.63 1.04 0.45 199 HTML_EXTRA_CLOSE 1154 0.32 0.03 0.44 200 XMHTML_After_End 1117 0.56 0.85 0.43 ----------------------------------------------------------------------