Email: 479770 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.37 sec Spam: 143343 Autolearn: 0 AvgScore: 14.84 AvgScanTime: 1.51 sec Ham: 336427 Autolearn: 0 AvgScore: 1.00 AvgScanTime: 1.31 sec Time Spent Running SA: 182.17 hours Time Spent Processing Spam: 60.21 hours Time Spent Processing Ham: 121.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 140780 99.09 98.21 99.47 2 HTML_MESSAGE 135018 90.05 94.19 88.28 3 DKIM_SIGNED 125420 76.89 87.50 72.37 4 XM_B_Unicode 119358 72.41 83.27 67.78 5 XM_DK_Pass 119078 74.81 83.07 71.29 6 DKIM_VALID 117881 73.82 82.24 70.24 7 RELAYCOUNTRY_US 114625 80.33 79.97 80.48 8 DCC_CHECK 107892 51.05 75.27 40.74 9 XM_B_SpammyWords 99401 51.54 69.34 43.96 10 XMListUnsubscribeExists 94267 52.57 65.76 46.94 11 DKIM_VALID_AU 93553 59.37 65.27 56.86 12 XM_B_Unicode3 69426 42.01 48.43 39.27 13 LOC_TINY_FONT_1 65226 32.74 45.50 27.30 14 BAYES_50 60878 55.20 42.47 60.63 15 XM_B_SpammyWords2 56819 25.37 39.64 19.30 16 XM_DK_Undo_02 55029 14.40 38.39 4.17 17 HTML_FONT_LOW_CONTRAST 50116 30.44 34.96 28.51 18 FVGT_m_MULTI_ODD 46174 27.17 32.21 25.02 19 DKIM_VALID_EF 44592 29.30 31.11 28.53 20 T_KAM_HTML_FONT_INVALID 44518 24.22 31.06 21.30 21 MIME_HTML_ONLY 43566 22.75 30.39 19.49 22 BAYES_99 43068 11.14 30.05 3.09 23 TR_XM_DKIM_Undo 39819 9.39 27.78 1.56 24 XMSubLong 37135 23.04 25.91 21.82 25 DCC_CHECK_NEGATIVE 33224 48.44 23.18 59.21 26 BAYES_999 32874 8.47 22.93 2.31 27 T_TM2_M_HEADER_IN_MSG 31498 29.02 21.97 32.02 28 TR_XM_DK_Unsub 31151 15.46 21.73 12.78 29 TR_DCC_Bayes_99 30801 7.20 21.49 1.11 30 XM_Multi_Part_URI 29308 16.07 20.45 14.21 31 XM_B_Unsub 28399 12.97 19.81 10.06 32 TR_XM_BayesUnsub 27443 10.47 19.14 6.78 33 RELAYCOUNTRY_META 26702 8.03 18.63 3.52 34 RCVD_IN_MSPIKE_H2 24716 15.75 17.24 15.11 35 UNPARSEABLE_RELAY 24378 12.95 17.01 11.22 36 XM_B_SpammyWords3 20369 7.44 14.21 4.55 37 LOTS_OF_MONEY 19521 8.56 13.62 6.40 38 TR_MAX_INTL_RELAY 19520 8.09 13.62 5.74 39 BOTNET_IPINHOSTNAME 19350 5.86 13.50 2.60 40 TR_XM_SpammyRelay 18532 5.10 12.93 1.76 41 TR_XM_SpammyWords4 17388 6.67 12.13 4.35 42 FSL_BULK_SIG 17283 10.61 12.06 10.00 43 TR_XM_SpammyWords2 15208 3.54 10.61 0.52 44 BOTNET 15068 3.89 10.51 1.07 45 XM_Evil_Numbers_Gen 14240 10.19 9.93 10.31 46 TR_XM_UnparsRelay 13059 3.72 9.11 1.42 47 XM_B_Phish_Phrases 12684 6.62 8.85 5.67 48 BAYES_80 12380 5.06 8.64 3.54 49 RCVD_IN_MSPIKE_WL 12114 13.42 8.45 15.54 50 RCVD_IN_BL_SPAMCOP_NET 11654 2.74 8.13 0.44 51 LotsOfNums_01 11559 7.86 8.06 7.77 52 BAYES_60 10900 6.84 7.60 6.51 53 UNTRUSTED_Relay 10448 3.14 7.29 1.37 54 RELAYCOUNTRY_CA 9843 2.60 6.87 0.78 55 XM_Body_Dirty_Words 9675 4.02 6.75 2.86 56 HTML_IMAGE_RATIO_02 9603 4.90 6.70 4.13 57 XM_B_PhoneNumber 9593 9.86 6.69 11.21 58 XMSubMetaSx_00 8841 4.23 6.17 3.40 59 MPART_ALT_DIFF 8651 4.95 6.04 4.49 60 XM_H_Long_From01 8143 5.52 5.68 5.46 61 XM_H_GMP 7868 5.68 5.49 5.77 62 XM_UncommonTLD01 7819 4.45 5.45 4.02 63 XM_B_Investor 7809 2.90 5.45 1.82 64 DKIM_INVALID 7539 3.07 5.26 2.13 65 TR_XM_SpammyWords5 7474 2.54 5.21 1.39 66 RCVD_IN_MSPIKE_BL 7471 1.83 5.21 0.38 67 TR_XM_MSPIKECOMBO 7461 1.82 5.20 0.38 68 TooManyTo_001 7142 7.92 4.98 9.17 69 HTML_IMAGE_RATIO_04 7103 3.76 4.96 3.25 70 MIME_QP_LONG_LINE 6928 5.04 4.83 5.12 71 BAYES_95 6786 2.96 4.73 2.20 72 XMStrtUSub 6780 4.49 4.73 4.38 73 TR_XM_PhishingBody 6687 2.53 4.67 1.62 74 XMNumbers 6547 4.46 4.57 4.42 75 RCVD_IN_VALIDITY_RPBL 6323 1.42 4.41 0.15 76 RCVD_IN_MSPIKE_H3 6086 6.18 4.25 7.00 77 TM2_M_VERY_LONG_WORD 6074 3.77 4.24 3.57 78 XM_UB50 5943 1.86 4.15 0.89 79 TR_XM_NoHeaderRelay 5748 1.35 4.01 0.22 80 XMSexyCombo_05 5708 2.28 3.98 1.55 81 XM_B_SpammyTLD 5572 2.86 3.89 2.42 82 MIME_HTML_MOSTLY 5538 2.92 3.86 2.52 83 HTML_IMAGE_RATIO_06 5391 3.30 3.76 3.10 84 XM_OfRef6 5349 1.88 3.73 1.09 85 T_XMDrugObfuBody_14 5179 2.33 3.61 1.78 86 SUBJ_ALL_CAPS 4823 1.97 3.36 1.38 87 XM_SPF_SoftFail 4805 1.92 3.35 1.32 88 TR_XM_SpammyWords3 4650 1.08 3.24 0.15 89 MIME_HTML_ONLY_MULTI 4523 2.47 3.16 2.18 90 XM_CamelCaseFrm001 4520 2.55 3.15 2.30 91 XM_B_SpammyWords4 4493 1.54 3.13 0.86 92 XM_B_URI_Unicode 4486 2.28 3.13 1.91 93 T_XMDrugObfuBody_08 4447 1.85 3.10 1.32 94 XM_B_Unsub2 4442 1.85 3.10 1.31 95 XMDiploma_00 4403 1.86 3.07 1.35 96 T_TooManySym_01 4218 4.88 2.94 5.70 97 XM_URI_RBL 4141 1.07 2.89 0.30 98 RELAYCOUNTRY_AU 3996 1.29 2.79 0.65 99 TM2_M_URI_OPT_OUT 3917 1.93 2.73 1.58 100 HTML_IMAGE_RATIO_08 3833 2.28 2.67 2.11 101 ALL_TRUSTED 3830 12.50 2.67 16.69 102 T_FILL_THIS_FORM_SHORT 3692 1.41 2.58 0.92 103 RCVD_IN_MSPIKE_L3 3613 0.89 2.52 0.20 104 ANY_BOUNCE_MESSAGE 3609 4.64 2.52 5.54 105 BOUNCE_MESSAGE 3609 4.64 2.52 5.54 106 TR_XM_SPAMCOP 3417 0.80 2.38 0.12 107 XMStockSpam_06 3415 1.53 2.38 1.17 108 XMBody_17 3397 0.98 2.37 0.38 109 TR_XM_INV_DKIM 3316 0.75 2.31 0.08 110 RCVD_IN_VALIDITY_SAFE 3276 3.44 2.29 3.93 111 DKIM_ADSP_NXDOMAIN 3265 2.50 2.28 2.60 112 MAILING_LIST_MULTI 3167 2.76 2.21 2.99 113 T_XMDrugObfuBody_00 3159 1.37 2.20 1.01 114 RCVD_IN_MSPIKE_H4 3110 2.76 2.17 3.01 115 USER_IN_DEF_DKIM_WL 3033 9.17 2.12 12.17 116 SpammyFromTLD_02 3009 0.83 2.10 0.29 117 KHOP_HELO_FCRDNS 3007 2.38 2.10 2.50 118 RCVD_IN_MSPIKE_H5 2918 4.48 2.04 5.52 119 FROM_EXCESS_BASE64 2910 1.82 2.03 1.73 120 RCVD_IN_PSBL 2852 0.87 1.99 0.39 121 HK_RANDOM_REPLYTO 2711 0.62 1.89 0.08 122 SCC_BODY_URI_ONLY 2710 2.02 1.89 2.08 123 BAYES_40 2707 4.80 1.89 6.03 124 TR_LOTS_OF_MONEY3 2583 0.94 1.80 0.58 125 T_XMHurry_00 2577 0.91 1.80 0.52 126 XM_DK_Undo_01 2549 1.91 1.78 1.97 127 RDNS_DYNAMIC 2538 0.64 1.77 0.15 128 XMGenDplmaNmb 2472 1.02 1.72 0.72 129 XMBrknScrpt_02 2469 1.09 1.72 0.82 130 PDS_RDNS_DYNAMIC_FP 2461 0.54 1.72 0.04 131 RCVD_IN_VALIDITY_CERTIFIED 2397 2.72 1.67 3.17 132 SpammyFromTLD_01 2392 1.08 1.67 0.82 133 XM_SendGrid 2287 1.55 1.60 1.53 134 URI_HEX 2285 1.40 1.59 1.31 135 BAYES_20 2279 3.14 1.59 3.80 136 URI_TRY_3LD 2261 0.84 1.58 0.52 137 HTML_MIME_NO_HTML_TAG 2241 2.17 1.56 2.42 138 XMBdyGiftCard01 2211 1.12 1.54 0.94 139 SHORTCIRCUIT 2193 0.46 1.53 0.00 140 RCVD_IN_ZEN_LASTEXTERNAL 2193 0.46 1.53 0.00 141 RCVD_IN_MSPIKE_L5 2162 0.51 1.51 0.09 142 XM_H_Long_From02 2158 1.00 1.51 0.79 143 RCVD_IN_IADB_LISTED 2146 3.08 1.50 3.75 144 XMPhish30 2122 0.80 1.48 0.51 145 DKIM_ADSP_CUSTOM_MED 2067 1.02 1.44 0.85 146 TVD_RCVD_IP 2039 0.95 1.42 0.75 147 XM_B_SEO 2017 0.60 1.41 0.25 148 XMBounce_01 1979 0.42 1.38 0.01 149 RCVD_IN_IADB_SPF 1932 2.72 1.35 3.30 150 XM_B_COPY_HTML 1928 0.84 1.35 0.63 151 RCVD_IN_PBL 1898 0.89 1.32 0.71 152 XM_H_Undi_Recip 1897 0.52 1.32 0.18 153 RELAYCOUNTRY_FR 1888 0.60 1.32 0.29 154 TR_XM_PHPForged 1881 0.56 1.31 0.24 155 RCVD_IN_IADB_DK 1860 2.39 1.30 2.86 156 TR_XM_FormFill2 1859 0.56 1.30 0.24 157 RCVD_IN_IADB_SENDERID 1853 2.44 1.29 2.94 158 URI_NOVOWEL 1850 1.49 1.29 1.57 159 T_REMOTE_IMAGE 1841 2.86 1.28 3.53 160 TR_XM_PHPDW 1833 0.55 1.28 0.24 161 NML_ADSP_CUSTOM_MED 1821 0.78 1.27 0.56 162 XM_H_PHPOS 1813 0.54 1.26 0.23 163 HTTPS_HTTP_MISMATCH 1786 0.93 1.25 0.79 164 TR_XM_SEO4 1776 0.45 1.24 0.12 165 HTML_IMAGE_ONLY_20 1735 0.64 1.21 0.40 166 T_MONEY_PERCENT 1715 0.49 1.20 0.19 167 TR_LOTS_OF_MONEY2 1715 0.49 1.20 0.19 168 FORGED_GMAIL_RCVD 1711 0.73 1.19 0.53 169 RCVD_IN_MSPIKE_L4 1686 0.42 1.18 0.09 170 HK_SCAM 1642 0.36 1.15 0.02 171 TR_XM_FormFill 1619 0.34 1.13 0.01 172 TR_Sbj_FN_Bdy 1599 0.41 1.12 0.11 173 TR_MetaPhish_Combo_01 1597 1.44 1.11 1.57 174 XMPhish14 1587 0.61 1.11 0.40 175 RELAYCOUNTRY_GB 1577 0.73 1.10 0.57 176 TR_XM_Undi_Recip19 1577 0.39 1.10 0.09 177 MPART_ALT_DIFF_COUNT 1561 0.72 1.09 0.57 178 XM_B_Phish66 1561 0.61 1.09 0.41 179 RELAYCOUNTRY_TH 1553 0.33 1.08 0.01 180 RCVD_IN_XBL 1538 0.34 1.07 0.02 181 XM_ProductURIs 1521 0.64 1.06 0.47 182 TR_Symld_Words 1518 1.32 1.06 1.43 183 TR_XM_MSPIKECOMBO2 1505 0.32 1.05 0.00 184 TM2_M_A_HREF_HREF 1505 0.51 1.05 0.27 185 SHOPIFY_IMG_NOT_RCVD_SFY 1502 0.47 1.05 0.22 186 XMHTML_After_End 1496 0.56 1.04 0.36 187 TR_XM_RelayPhish 1473 0.36 1.03 0.07 188 DIET_1 1466 0.43 1.02 0.18 189 XM_DIRTYINTL 1459 0.36 1.02 0.09 190 XM_HighProb1 1456 0.31 1.02 0.00 191 XM_B_DNDMA 1427 0.69 1.00 0.56 192 XM_Nigeria_01 1426 0.33 0.99 0.05 193 RCVD_IN_SBL_CSS 1406 0.32 0.98 0.03 194 RELAYCOUNTRY_CN 1403 0.34 0.98 0.07 195 TR_XM_Undi_RecipCombo2 1400 0.29 0.98 0.00 196 TM2_M_OBFU_COMMENT 1376 0.69 0.96 0.58 197 HELO_DYNAMIC_SPLIT_IP 1366 0.29 0.95 0.00 198 URIBL_BLACK 1365 0.30 0.95 0.02 199 TO_NO_BRKTS_HTML_ONLY 1356 0.58 0.95 0.42 200 XMSubMetaI_00 1350 0.64 0.94 0.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 334632 99.09 98.21 99.47 2 HTML_MESSAGE 297006 90.05 94.19 88.28 3 RELAYCOUNTRY_US 270767 80.33 79.97 80.48 4 DKIM_SIGNED 243479 76.89 87.50 72.37 5 XM_DK_Pass 239852 74.81 83.07 71.29 6 DKIM_VALID 236298 73.82 82.24 70.24 7 XM_B_Unicode 228038 72.41 83.27 67.78 8 BAYES_50 203964 55.20 42.47 60.63 9 DCC_CHECK_NEGATIVE 199199 48.44 23.18 59.21 10 DKIM_VALID_AU 191305 59.37 65.27 56.86 11 XMListUnsubscribeExists 157935 52.57 65.76 46.94 12 XM_B_SpammyWords 147881 51.54 69.34 43.96 13 DCC_CHECK 137054 51.05 75.27 40.74 14 XM_B_Unicode3 132108 42.01 48.43 39.27 15 T_TM2_M_HEADER_IN_MSG 107727 29.02 21.97 32.02 16 DKIM_VALID_EF 95967 29.30 31.11 28.53 17 HTML_FONT_LOW_CONTRAST 95925 30.44 34.96 28.51 18 LOC_TINY_FONT_1 91835 32.74 45.50 27.30 19 FVGT_m_MULTI_ODD 84190 27.17 32.21 25.02 20 XMSubLong 73405 23.04 25.91 21.82 21 T_KAM_HTML_FONT_INVALID 71666 24.22 31.06 21.30 22 MIME_HTML_ONLY 65580 22.75 30.39 19.49 23 XM_B_SpammyWords2 64915 25.37 39.64 19.30 24 ALL_TRUSTED 56142 12.50 2.67 16.69 25 RCVD_IN_MSPIKE_WL 52273 13.42 8.45 15.54 26 RCVD_IN_MSPIKE_H2 50837 15.75 17.24 15.11 27 XM_Multi_Part_URI 47792 16.07 20.45 14.21 28 TR_XM_DK_Unsub 43005 15.46 21.73 12.78 29 USER_IN_DEF_DKIM_WL 40955 9.17 2.12 12.17 30 BAYES_00 40049 8.55 0.67 11.90 31 UNPARSEABLE_RELAY 37760 12.95 17.01 11.22 32 XM_B_PhoneNumber 37705 9.86 6.69 11.21 33 XM_Evil_Numbers_Gen 34669 10.19 9.93 10.31 34 XM_B_Unsub 33839 12.97 19.81 10.06 35 FSL_BULK_SIG 33636 10.61 12.06 10.00 36 TooManyTo_001 30860 7.92 4.98 9.17 37 LotsOfNums_01 26142 7.86 8.06 7.77 38 TR_XM_DK_Bayes 24371 5.24 0.52 7.24 39 TR_XM_DK_Bayes1 23859 5.13 0.52 7.09 40 RCVD_IN_MSPIKE_H3 23556 6.18 4.25 7.00 41 TR_XM_BayesUnsub 22804 10.47 19.14 6.78 42 XM_DKIMWhitelistDomains 22148 4.62 0.02 6.58 43 BAYES_60 21902 6.84 7.60 6.51 44 LOTS_OF_MONEY 21546 8.56 13.62 6.40 45 BAYES_40 20300 4.80 1.89 6.03 46 TR_XM_DK_Bayes2 20057 4.30 0.40 5.96 47 XM_H_GMP 19403 5.68 5.49 5.77 48 TR_MAX_INTL_RELAY 19316 8.09 13.62 5.74 49 T_TooManySym_01 19180 4.88 2.94 5.70 50 XM_B_Phish_Phrases 19079 6.62 8.85 5.67 51 ANY_BOUNCE_MESSAGE 18634 4.64 2.52 5.54 52 BOUNCE_MESSAGE 18634 4.64 2.52 5.54 53 RCVD_IN_MSPIKE_H5 18585 4.48 2.04 5.52 54 XM_H_Long_From01 18359 5.52 5.68 5.46 55 MIME_QP_LONG_LINE 17229 5.04 4.83 5.12 56 XM_B_SpammyWords3 15324 7.44 14.21 4.55 57 MPART_ALT_DIFF 15113 4.95 6.04 4.49 58 XMNumbers 14865 4.46 4.57 4.42 59 XM_PDF 14825 3.32 0.77 4.41 60 XMStrtUSub 14744 4.49 4.73 4.38 61 TR_XM_SpammyWords4 14622 6.67 12.13 4.35 62 XM_DK_Undo_02 14045 14.40 38.39 4.17 63 HTML_IMAGE_RATIO_02 13904 4.90 6.70 4.13 64 XM_UncommonTLD01 13519 4.45 5.45 4.02 65 RCVD_IN_VALIDITY_SAFE 13229 3.44 2.29 3.93 66 TooManyTo_002 13125 2.91 0.59 3.90 67 BAYES_20 12769 3.14 1.59 3.80 68 RCVD_IN_IADB_LISTED 12623 3.08 1.50 3.75 69 TM2_M_VERY_LONG_WORD 12026 3.77 4.24 3.57 70 BAYES_80 11908 5.06 8.64 3.54 71 T_REMOTE_IMAGE 11867 2.86 1.28 3.53 72 RELAYCOUNTRY_META 11829 8.03 18.63 3.52 73 XMSubMetaSx_00 11438 4.23 6.17 3.40 74 RCVD_IN_IADB_SPF 11098 2.72 1.35 3.30 75 HTML_IMAGE_RATIO_04 10927 3.76 4.96 3.25 76 RCVD_IN_VALIDITY_CERTIFIED 10675 2.72 1.67 3.17 77 HTML_IMAGE_RATIO_06 10428 3.30 3.76 3.10 78 BAYES_99 10400 11.14 30.05 3.09 79 RCVD_IN_MSPIKE_H4 10132 2.76 2.17 3.01 80 MAILING_LIST_MULTI 10071 2.76 2.21 2.99 81 RCVD_IN_IADB_SENDERID 9877 2.44 1.29 2.94 82 XM_Body_Dirty_Words 9614 4.02 6.75 2.86 83 RCVD_IN_IADB_DK 9609 2.39 1.30 2.86 84 T_TooManySym_02 9288 2.13 0.65 2.76 85 HTML_IMAGE_ONLY_32 8850 1.96 0.39 2.63 86 BOTNET_IPINHOSTNAME 8744 5.86 13.50 2.60 87 DKIM_ADSP_NXDOMAIN 8732 2.50 2.28 2.60 88 NO_DNS_FOR_FROM 8525 1.99 0.72 2.53 89 MIME_HTML_MOSTLY 8473 2.92 3.86 2.52 90 KHOP_HELO_FCRDNS 8427 2.38 2.10 2.50 91 MAY_BE_FORGED 8302 1.87 0.46 2.47 92 RCVD_IN_IADB_VOUCHED 8162 1.87 0.57 2.43 93 HTML_MIME_NO_HTML_TAG 8156 2.17 1.56 2.42 94 XM_B_SpammyTLD 8126 2.86 3.89 2.42 95 BAYES_999 7777 8.47 22.93 2.31 96 XM_CamelCaseFrm001 7725 2.55 3.15 2.30 97 BAYES_05 7719 1.86 0.83 2.29 98 BAYES_95 7404 2.96 4.73 2.20 99 INVALID_MSGID 7377 1.61 0.24 2.19 100 MIME_HTML_ONLY_MULTI 7339 2.47 3.16 2.18 101 DKIM_INVALID 7181 3.07 5.26 2.13 102 HTML_IMAGE_RATIO_08 7098 2.28 2.67 2.11 103 SCC_BODY_URI_ONLY 6991 2.02 1.89 2.08 104 XM_DK_Undo_01 6636 1.91 1.78 1.97 105 TR_XM_MaxWHORU 6538 1.57 0.70 1.94 106 XM_B_URI_Unicode 6435 2.28 3.13 1.91 107 TO_MALFORMED 6317 1.32 0.02 1.88 108 XM_B_Investor 6108 2.90 5.45 1.82 109 T_XMDrugObfuBody_14 6002 2.33 3.61 1.78 110 TR_XM_SpammyRelay 5927 5.10 12.93 1.76 111 RCVD_IN_IADB_OPTIN 5887 1.32 0.32 1.75 112 FROM_EXCESS_BASE64 5804 1.82 2.03 1.73 113 XM_B_FormFill 5761 1.21 0.02 1.71 114 TR_XM_PhishingBody 5462 2.53 4.67 1.62 115 TM2_M_URI_OPT_OUT 5328 1.93 2.73 1.58 116 TR_MetaPhish_Combo_01 5290 1.44 1.11 1.57 117 URI_NOVOWEL 5276 1.49 1.29 1.57 118 TR_XM_DKIM_Undo 5252 9.39 27.78 1.56 119 XMSexyCombo_05 5220 2.28 3.98 1.55 120 TooManyTo_003 5154 1.22 0.50 1.53 121 XM_SendGrid 5141 1.55 1.60 1.53 122 TR_Symld_Words 4809 1.32 1.06 1.43 123 TR_XM_UnparsRelay 4779 3.72 9.11 1.42 124 TR_XM_SpammyWords5 4689 2.54 5.21 1.39 125 SUBJ_ALL_CAPS 4626 1.97 3.36 1.38 126 UNTRUSTED_Relay 4605 3.14 7.29 1.37 127 XMDiploma_00 4528 1.86 3.07 1.35 128 XMGappySubj_01 4507 1.02 0.28 1.34 129 HELO_NODOT 4465 1.06 0.42 1.33 130 HELO_NO_DOMAIN 4460 1.04 0.39 1.33 131 T_XMDrugObfuBody_08 4440 1.85 3.10 1.32 132 XM_SPF_SoftFail 4426 1.92 3.35 1.32 133 XM_B_Unsub2 4413 1.85 3.10 1.31 134 URI_HEX 4408 1.40 1.59 1.31 135 XM_GoogleGroups 4252 1.14 0.83 1.26 136 IN_HORDE_ADDRESS_BOOK 4151 0.89 0.07 1.23 137 XMCapTrack 4065 0.99 0.47 1.21 138 XMStockSpam_06 3935 1.53 2.38 1.17 139 TooManyTo_004 3818 0.93 0.45 1.13 140 TR_DCC_Bayes_99 3751 7.20 21.49 1.11 141 MIME_CHARSET_FARAWAY 3751 1.01 0.76 1.11 142 T_TooManySym_03 3708 0.87 0.31 1.10 143 XM_OfRef6 3670 1.88 3.73 1.09 144 XM_ShortIntro_01 3606 0.87 0.40 1.07 145 BOTNET 3588 3.89 10.51 1.07 146 T_XMDrugObfuBody_00 3409 1.37 2.20 1.01 147 TVD_SPACE_RATIO 3361 0.75 0.17 1.00 148 CHARSET_FARAWAY_HEADER 3293 0.87 0.60 0.98 149 TR_XM_DK_SendGrid 3267 0.94 0.88 0.97 150 XMBdyGiftCard01 3177 1.12 1.54 0.94 151 T_FILL_THIS_FORM_SHORT 3083 1.41 2.58 0.92 152 TooManyTo_005 3051 0.76 0.40 0.91 153 XM_UB50 2995 1.86 4.15 0.89 154 XM_B_SpammyWords4 2904 1.54 3.13 0.86 155 TR_XM_Base64_M1 2886 0.83 0.77 0.86 156 DKIM_ADSP_CUSTOM_MED 2846 1.02 1.44 0.85 157 XM_H_PHPMailer 2841 0.77 0.61 0.84 158 SpammyFromTLD_01 2772 1.08 1.67 0.82 159 XMBrknScrpt_02 2748 1.09 1.72 0.82 160 XM_H_Long_From02 2663 1.00 1.51 0.79 161 HTTPS_HTTP_MISMATCH 2660 0.93 1.25 0.79 162 RELAYCOUNTRY_CA 2625 2.60 6.87 0.78 163 XMGappySubj_02 2559 0.55 0.04 0.76 164 TVD_RCVD_IP 2516 0.95 1.42 0.75 165 URI_OPTOUT_3LD 2494 0.72 0.66 0.74 166 XMGenDplmaNmb 2438 1.02 1.72 0.72 167 RCVD_IN_PBL 2374 0.89 1.32 0.71 168 XMNoVowels 2256 0.62 0.51 0.67 169 RELAYCOUNTRY_AU 2183 1.29 2.79 0.65 170 T_OBFU_PDF_ATTACH 2130 0.49 0.14 0.63 171 XM_B_COPY_HTML 2118 0.84 1.35 0.63 172 XMSlimDrugH 2109 0.64 0.67 0.63 173 MSGID_FROM_MTA_HEADER 2094 0.47 0.12 0.62 174 XM_RXBody 2092 0.64 0.68 0.62 175 XMClaimOffer 2052 0.64 0.70 0.61 176 T_Symld_Words_02 1985 0.70 0.94 0.59 177 TR_LOTS_OF_MONEY3 1948 0.94 1.80 0.58 178 TM2_M_OBFU_COMMENT 1943 0.69 0.96 0.58 179 FROM_GOV_DKIM_AU 1936 0.45 0.17 0.58 180 MPART_ALT_DIFF_COUNT 1913 0.72 1.09 0.57 181 RELAYCOUNTRY_GB 1909 0.73 1.10 0.57 182 NML_ADSP_CUSTOM_MED 1899 0.78 1.27 0.56 183 XM_B_DNDMA 1894 0.69 1.00 0.56 184 FILL_THIS_FORM 1882 0.50 0.37 0.56 185 LongTLD 1839 0.63 0.84 0.55 186 XMBSHREFv2 1784 0.51 0.45 0.53 187 FORGED_GMAIL_RCVD 1780 0.73 1.19 0.53 188 T_XMHurry_00 1766 0.91 1.80 0.52 189 TR_XM_SpammyWords2 1758 3.54 10.61 0.52 190 URI_TRY_3LD 1756 0.84 1.58 0.52 191 XMSubMetaI_00 1744 0.64 0.94 0.52 192 HTML_TAG_BALANCE_BODY 1734 0.57 0.69 0.52 193 XMPhish30 1715 0.80 1.48 0.51 194 XMLngstWrd_00 1655 0.53 0.63 0.49 195 XMMoneyMeta_00 1579 0.56 0.77 0.47 196 HTML_IMAGE_ONLY_28 1574 0.51 0.59 0.47 197 XM_ProductURIs 1567 0.64 1.06 0.47 198 XMBody_95 1529 0.36 0.14 0.45 199 RCVD_IN_BL_SPAMCOP_NET 1497 2.74 8.13 0.44 200 SHORT_HELO_AND_INLINE_IMAGE 1440 0.31 0.02 0.43 ----------------------------------------------------------------------