Email: 463624 Autolearn: 0 AvgScore: 5.16 AvgScanTime: 1.40 sec Spam: 144772 Autolearn: 0 AvgScore: 14.56 AvgScanTime: 1.56 sec Ham: 318852 Autolearn: 0 AvgScore: 0.90 AvgScanTime: 1.32 sec Time Spent Running SA: 180.00 hours Time Spent Processing Spam: 62.79 hours Time Spent Processing Ham: 117.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 141045 98.85 97.43 99.49 2 HTML_MESSAGE 135770 89.45 93.78 87.48 3 DKIM_SIGNED 128088 80.05 88.48 76.23 4 XM_DK_Pass 120976 77.80 83.56 75.18 5 DKIM_VALID 119861 76.84 82.79 74.14 6 XM_B_Unicode 119477 74.13 82.53 70.31 7 RELAYCOUNTRY_US 117915 81.97 81.45 82.21 8 DCC_CHECK 107764 51.44 74.44 41.00 9 XM_B_SpammyWords 98639 52.27 68.13 45.07 10 DKIM_VALID_AU 95038 61.87 65.65 60.16 11 XMListUnsubscribeExists 94204 54.02 65.07 49.00 12 LOC_TINY_FONT_1 70919 35.25 48.99 29.02 13 XM_B_Unicode3 68627 42.51 47.40 40.29 14 BAYES_50 57997 54.59 40.06 61.19 15 XM_DK_Undo_02 57630 15.43 39.81 4.37 16 XM_B_SpammyWords2 55917 24.66 38.62 18.32 17 HTML_FONT_LOW_CONTRAST 53126 31.17 36.70 28.66 18 FVGT_m_MULTI_ODD 48840 28.29 33.74 25.82 19 BAYES_99 45662 12.11 31.54 3.28 20 DKIM_VALID_EF 44039 30.56 30.42 30.62 21 MIME_HTML_ONLY 43418 23.35 29.99 20.33 22 T_KAM_HTML_FONT_INVALID 42317 23.94 29.23 21.53 23 TR_XM_DKIM_Undo 40672 10.06 28.09 1.87 24 BAYES_999 35394 9.31 24.45 2.43 25 XMSubLong 35365 23.76 24.43 23.46 26 DCC_CHECK_NEGATIVE 34904 48.07 24.11 58.95 27 T_TM2_M_HEADER_IN_MSG 32813 28.21 22.67 30.72 28 TR_XM_DK_Unsub 32338 16.55 22.34 13.92 29 XM_B_Unsub 31982 13.99 22.09 10.32 30 TR_DCC_Bayes_99 31664 7.70 21.87 1.27 31 TR_XM_BayesUnsub 30740 11.83 21.23 7.56 32 XM_Multi_Part_URI 28787 16.26 19.88 14.62 33 UNPARSEABLE_RELAY 26759 13.91 18.48 11.84 34 RCVD_IN_MSPIKE_H2 26240 17.12 18.13 16.67 35 RELAYCOUNTRY_META 24489 7.74 16.92 3.58 36 XM_B_SpammyWords3 21749 8.01 15.02 4.83 37 TR_MAX_INTL_RELAY 20892 8.83 14.43 6.28 38 BOTNET_IPINHOSTNAME 19170 6.07 13.24 2.81 39 LOTS_OF_MONEY 18805 8.32 12.99 6.20 40 TR_XM_SpammyRelay 17759 5.07 12.27 1.81 41 FSL_BULK_SIG 16949 9.79 11.71 8.91 42 TR_XM_SpammyWords4 16816 6.56 11.62 4.27 43 TR_XM_SpammyWords2 15134 3.61 10.45 0.50 44 RCVD_IN_BL_SPAMCOP_NET 14957 3.54 10.33 0.46 45 TR_XM_UnparsRelay 14428 4.28 9.97 1.69 46 XM_Evil_Numbers_Gen 14427 9.93 9.97 9.91 47 BOTNET 14174 3.81 9.79 1.10 48 RCVD_IN_MSPIKE_WL 13229 14.50 9.14 16.94 49 BAYES_80 13034 5.54 9.00 3.96 50 BAYES_60 12033 7.42 8.31 7.01 51 XM_B_Phish_Phrases 11988 6.74 8.28 6.04 52 XMSubMetaSx_00 11072 5.28 7.65 4.20 53 LotsOfNums_01 10101 7.83 6.98 8.21 54 XM_Body_Dirty_Words 9521 3.79 6.58 2.53 55 XM_B_PhoneNumber 9348 9.30 6.46 10.60 56 HTML_IMAGE_RATIO_02 8875 4.87 6.13 4.29 57 RELAYCOUNTRY_CA 8862 2.49 6.12 0.84 58 MPART_ALT_DIFF 8715 5.23 6.02 4.87 59 UNTRUSTED_Relay 8463 2.90 5.85 1.56 60 DKIM_INVALID 8227 3.21 5.68 2.09 61 XM_B_Investor 8174 3.00 5.65 1.80 62 XM_UncommonTLD01 8084 4.58 5.58 4.13 63 TR_XM_PhishingBody 7871 2.81 5.44 1.62 64 HTML_IMAGE_RATIO_04 7731 3.99 5.34 3.38 65 TR_XM_MSPIKECOMBO 7554 1.93 5.22 0.44 66 RCVD_IN_MSPIKE_BL 7554 1.94 5.22 0.45 67 XM_H_GMP 7521 5.67 5.20 5.89 68 XM_H_Long_From01 7347 5.24 5.07 5.32 69 BAYES_95 7164 3.14 4.95 2.31 70 T_XMDrugObfuBody_14 6967 2.82 4.81 1.91 71 HTML_IMAGE_RATIO_06 6876 3.84 4.75 3.43 72 TR_XM_SPAMCOP 6622 1.50 4.57 0.11 73 XMStrtUSub 6614 4.78 4.57 4.88 74 XMSexyCombo_05 6263 2.52 4.33 1.70 75 TR_XM_SpammyWords5 6175 2.43 4.27 1.60 76 RCVD_IN_MSPIKE_H3 6119 6.54 4.23 7.59 77 TooManyTo_001 6111 7.73 4.22 9.32 78 XM_OfRef6 5948 2.00 4.11 1.04 79 TR_XM_NoHeaderRelay 5895 1.40 4.07 0.19 80 MIME_QP_LONG_LINE 5826 4.81 4.02 5.17 81 RCVD_IN_VALIDITY_RPBL 5705 1.36 3.94 0.19 82 XMNumbers 5448 4.05 3.76 4.17 83 XM_B_SpammyTLD 5355 2.98 3.70 2.66 84 TM2_M_VERY_LONG_WORD 5350 2.35 3.70 1.74 85 T_XMDrugObfuBody_08 5305 2.55 3.66 2.04 86 TR_XM_SpammyWords3 4995 1.21 3.45 0.19 87 XM_B_Unsub2 4923 1.87 3.40 1.17 88 XM_URI_RBL 4853 1.26 3.35 0.31 89 ALL_TRUSTED 4772 11.15 3.30 14.72 90 MIME_HTML_MOSTLY 4676 2.81 3.23 2.61 91 TM2_M_URI_OPT_OUT 4568 2.17 3.16 1.73 92 XM_SPF_SoftFail 4563 1.96 3.15 1.42 93 MIME_HTML_ONLY_MULTI 4465 2.66 3.08 2.47 94 XM_CamelCaseFrm001 4453 2.47 3.08 2.19 95 RCVD_IN_MSPIKE_H4 4154 3.22 2.87 3.38 96 RELAYCOUNTRY_AU 4131 1.31 2.85 0.61 97 XMDiploma_00 4131 1.81 2.85 1.33 98 XM_UB50 4076 1.56 2.82 0.99 99 USER_IN_DEF_DKIM_WL 3836 9.90 2.65 13.20 100 XM_B_URI_Unicode 3782 2.10 2.61 1.87 101 XM_B_SpammyWords4 3717 1.42 2.57 0.90 102 RCVD_IN_MSPIKE_L3 3687 0.96 2.55 0.24 103 T_TooManySym_01 3436 4.52 2.37 5.49 104 XMBody_17 3433 1.07 2.37 0.48 105 T_FILL_THIS_FORM_SHORT 3289 1.31 2.27 0.87 106 TR_XM_INV_DKIM 3279 0.77 2.26 0.10 107 HTML_IMAGE_RATIO_08 3174 2.20 2.19 2.20 108 SUBJ_ALL_CAPS 3166 1.71 2.19 1.50 109 RCVD_IN_VALIDITY_SAFE 3048 3.46 2.11 4.08 110 FROM_EXCESS_BASE64 3025 1.92 2.09 1.84 111 XMStockSpam_06 2986 1.51 2.06 1.26 112 RCVD_IN_MSPIKE_H5 2956 4.74 2.04 5.96 113 T_XMHurry_00 2955 1.03 2.04 0.57 114 BAYES_40 2909 4.19 2.01 5.18 115 SpammyFromTLD_02 2883 0.93 1.99 0.45 116 XM_H_Long_From02 2769 1.20 1.91 0.88 117 URI_TRY_3LD 2762 0.93 1.91 0.49 118 XMPhish30 2744 0.96 1.90 0.53 119 MAILING_LIST_MULTI 2727 2.60 1.88 2.92 120 SpammyFromTLD_01 2661 1.10 1.84 0.76 121 TR_LOTS_OF_MONEY3 2639 0.91 1.82 0.49 122 T_XMDrugObfuBody_00 2461 0.98 1.70 0.66 123 XM_DK_Undo_01 2459 1.70 1.70 1.70 124 DKIM_ADSP_NXDOMAIN 2432 0.71 1.68 0.27 125 RCVD_IN_VALIDITY_CERTIFIED 2390 2.86 1.65 3.40 126 XMBrknScrpt_02 2361 1.21 1.63 1.02 127 SCC_BODY_URI_ONLY 2280 2.06 1.57 2.28 128 URI_HEX 2271 1.36 1.57 1.26 129 XM_SendGrid 2218 1.43 1.53 1.38 130 HTML_MIME_NO_HTML_TAG 2166 2.24 1.50 2.58 131 RELAYCOUNTRY_FR 2153 0.67 1.49 0.30 132 XM_B_Phish66 2144 0.68 1.48 0.32 133 RCVD_IN_MSPIKE_L5 2124 0.52 1.47 0.09 134 RDNS_DYNAMIC 2103 0.57 1.45 0.17 135 RCVD_IN_ZEN_LASTEXTERNAL 2078 0.45 1.44 0.00 136 SHORTCIRCUIT 2078 0.45 1.44 0.00 137 TR_Symld_Words 2055 1.48 1.42 1.50 138 PDS_RDNS_DYNAMIC_FP 2040 0.47 1.41 0.05 139 DIET_1 2034 0.58 1.40 0.21 140 URI_NOVOWEL 2027 1.46 1.40 1.49 141 TR_XM_MSPIKECOMBO2 2013 0.44 1.39 0.01 142 KHOP_HELO_FCRDNS 2009 1.61 1.39 1.71 143 MPART_ALT_DIFF_COUNT 1984 0.79 1.37 0.52 144 XMGenDplmaNmb 1973 0.91 1.36 0.71 145 T_REMOTE_IMAGE 1944 2.94 1.34 3.66 146 RCVD_IN_PSBL 1939 0.72 1.34 0.44 147 T_MONEY_PERCENT 1933 0.57 1.34 0.22 148 TR_LOTS_OF_MONEY2 1933 0.57 1.34 0.22 149 XM_B_COPY_HTML 1926 0.91 1.33 0.72 150 HTML_IMAGE_ONLY_20 1914 0.69 1.32 0.40 151 RELAYCOUNTRY_CN 1884 0.46 1.30 0.08 152 RCVD_IN_PBL 1850 0.96 1.28 0.82 153 MultiRelay_CC 1825 0.50 1.26 0.16 154 BAYES_20 1804 2.87 1.25 3.61 155 XMBdyGiftCard01 1781 0.80 1.23 0.61 156 XM_HighProb1 1745 0.38 1.21 0.00 157 RCVD_IN_MSPIKE_L4 1743 0.46 1.20 0.12 158 TR_MetaPhish_Combo_01 1726 1.64 1.19 1.84 159 RCVD_IN_SBL_CSS 1721 0.39 1.19 0.03 160 T_Symld_Words_02 1719 0.82 1.19 0.66 161 XM_B_SEO 1713 0.57 1.18 0.29 162 XM_ProductURIs 1684 0.68 1.16 0.46 163 XM_B_DNDMA 1676 0.70 1.16 0.49 164 SHOPIFY_IMG_NOT_RCVD_SFY 1673 0.57 1.16 0.31 165 XMSubMetaI_00 1660 0.83 1.15 0.69 166 RCVD_IN_IADB_LISTED 1646 2.95 1.14 3.77 167 TVD_RCVD_IP 1610 0.89 1.11 0.79 168 RCVD_IN_XBL 1601 0.35 1.11 0.01 169 XM_DIRTYINTL 1594 0.40 1.10 0.08 170 RELAYCOUNTRY_GB 1576 0.70 1.09 0.52 171 BOTNET_NORDNS 1562 0.34 1.08 0.01 172 TR_XM_PHPForged 1554 0.52 1.07 0.27 173 XMReplyNow 1528 0.49 1.06 0.24 174 TR_XM_PHPDW 1527 0.52 1.05 0.27 175 TR_XM_FormFill2 1524 0.52 1.05 0.28 176 XM_UB99 1524 0.33 1.05 0.00 177 DKIM_ADSP_CUSTOM_MED 1522 0.85 1.05 0.76 178 TM2_M_BODY_EMPTY 1514 0.56 1.05 0.33 179 TR_XM_SEO4 1498 0.40 1.03 0.11 180 XM_H_PHPOS 1496 0.50 1.03 0.26 181 HTTPS_HTTP_MISMATCH 1480 0.81 1.02 0.71 182 RCVD_IN_IADB_SPF 1478 2.59 1.02 3.30 183 XMBody_78 1465 0.52 1.01 0.30 184 XMSexyCombo_01 1459 0.42 1.01 0.15 185 XMEmptyBody_01 1443 0.35 1.00 0.06 186 XM_OfRef7 1436 0.48 0.99 0.25 187 HELO_DYNAMIC_SPLIT_IP 1404 0.30 0.97 0.00 188 HTML_TAG_BALANCE_BODY 1393 0.65 0.96 0.51 189 HK_RANDOM_REPLYTO 1382 0.38 0.95 0.12 190 XMPhish08 1358 0.44 0.94 0.22 191 TR_XM_DK_SendGrid 1357 0.93 0.94 0.93 192 RCVD_IN_IADB_DK 1356 2.23 0.94 2.82 193 RCVD_IN_IADB_SENDERID 1354 2.30 0.94 2.92 194 TR_XM_RelayPhish 1341 0.34 0.93 0.07 195 T_STY_INVIS_DIRECT 1339 0.62 0.92 0.48 196 TR_XM_InvalidRelay 1292 0.29 0.89 0.01 197 XM_H_DKIM_GOOG 1281 0.29 0.88 0.01 198 URIBL_BLACK 1270 0.32 0.88 0.06 199 HTML_FONT_TINY_NORDNS 1239 0.35 0.86 0.13 200 XMMoneyMeta_00 1233 0.60 0.85 0.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 317227 98.85 97.43 99.49 2 HTML_MESSAGE 278925 89.45 93.78 87.48 3 RELAYCOUNTRY_US 262116 81.97 81.45 82.21 4 DKIM_SIGNED 243048 80.05 88.48 76.23 5 XM_DK_Pass 239720 77.80 83.56 75.18 6 DKIM_VALID 236388 76.84 82.79 74.14 7 XM_B_Unicode 224197 74.13 82.53 70.31 8 BAYES_50 195097 54.59 40.06 61.19 9 DKIM_VALID_AU 191812 61.87 65.65 60.16 10 DCC_CHECK_NEGATIVE 187971 48.07 24.11 58.95 11 XMListUnsubscribeExists 156223 54.02 65.07 49.00 12 XM_B_SpammyWords 143709 52.27 68.13 45.07 13 DCC_CHECK 130719 51.44 74.44 41.00 14 XM_B_Unicode3 128457 42.51 47.40 40.29 15 T_TM2_M_HEADER_IN_MSG 97960 28.21 22.67 30.72 16 DKIM_VALID_EF 97645 30.56 30.42 30.62 17 LOC_TINY_FONT_1 92518 35.25 48.99 29.02 18 HTML_FONT_LOW_CONTRAST 91395 31.17 36.70 28.66 19 FVGT_m_MULTI_ODD 82330 28.29 33.74 25.82 20 XMSubLong 74790 23.76 24.43 23.46 21 T_KAM_HTML_FONT_INVALID 68657 23.94 29.23 21.53 22 MIME_HTML_ONLY 64821 23.35 29.99 20.33 23 XM_B_SpammyWords2 58403 24.66 38.62 18.32 24 RCVD_IN_MSPIKE_WL 54017 14.50 9.14 16.94 25 RCVD_IN_MSPIKE_H2 53146 17.12 18.13 16.67 26 ALL_TRUSTED 46945 11.15 3.30 14.72 27 XM_Multi_Part_URI 46614 16.26 19.88 14.62 28 TR_XM_DK_Unsub 44372 16.55 22.34 13.92 29 USER_IN_DEF_DKIM_WL 42079 9.90 2.65 13.20 30 UNPARSEABLE_RELAY 37751 13.91 18.48 11.84 31 BAYES_00 36119 8.05 0.84 11.33 32 XM_B_PhoneNumber 33792 9.30 6.46 10.60 33 XM_B_Unsub 32892 13.99 22.09 10.32 34 XM_Evil_Numbers_Gen 31592 9.93 9.97 9.91 35 TooManyTo_001 29720 7.73 4.22 9.32 36 FSL_BULK_SIG 28423 9.79 11.71 8.91 37 LotsOfNums_01 26179 7.83 6.98 8.21 38 RCVD_IN_MSPIKE_H3 24216 6.54 4.23 7.59 39 TR_XM_BayesUnsub 24105 11.83 21.23 7.56 40 TR_XM_DK_Bayes 23013 5.17 0.65 7.22 41 TR_XM_DK_Bayes1 22579 5.07 0.63 7.08 42 BAYES_60 22360 7.42 8.31 7.01 43 XM_DKIMWhitelistDomains 22148 4.78 0.01 6.95 44 TR_MAX_INTL_RELAY 20026 8.83 14.43 6.28 45 LOTS_OF_MONEY 19755 8.32 12.99 6.20 46 XM_B_Phish_Phrases 19245 6.74 8.28 6.04 47 TR_XM_DK_Bayes2 19031 4.27 0.54 5.97 48 RCVD_IN_MSPIKE_H5 19017 4.74 2.04 5.96 49 XM_H_GMP 18769 5.67 5.20 5.89 50 T_TooManySym_01 17501 4.52 2.37 5.49 51 XM_H_Long_From01 16950 5.24 5.07 5.32 52 BAYES_40 16528 4.19 2.01 5.18 53 MIME_QP_LONG_LINE 16495 4.81 4.02 5.17 54 XMStrtUSub 15546 4.78 4.57 4.88 55 MPART_ALT_DIFF 15522 5.23 6.02 4.87 56 XM_B_SpammyWords3 15388 8.01 15.02 4.83 57 XM_PDF 14416 3.35 0.77 4.52 58 XM_DK_Undo_02 13929 15.43 39.81 4.37 59 HTML_IMAGE_RATIO_02 13687 4.87 6.13 4.29 60 TR_XM_SpammyWords4 13607 6.56 11.62 4.27 61 XMSubMetaSx_00 13403 5.28 7.65 4.20 62 ANY_BOUNCE_MESSAGE 13400 3.15 0.82 4.20 63 BOUNCE_MESSAGE 13386 3.14 0.82 4.20 64 XMNumbers 13310 4.05 3.76 4.17 65 XM_UncommonTLD01 13157 4.58 5.58 4.13 66 RCVD_IN_VALIDITY_SAFE 12995 3.46 2.11 4.08 67 BAYES_80 12641 5.54 9.00 3.96 68 RCVD_IN_IADB_LISTED 12032 2.95 1.14 3.77 69 T_REMOTE_IMAGE 11668 2.94 1.34 3.66 70 BAYES_20 11503 2.87 1.25 3.61 71 RELAYCOUNTRY_META 11414 7.74 16.92 3.58 72 TooManyTo_002 11153 2.61 0.66 3.50 73 HTML_IMAGE_RATIO_06 10922 3.84 4.75 3.43 74 RCVD_IN_VALIDITY_CERTIFIED 10849 2.86 1.65 3.40 75 HTML_IMAGE_RATIO_04 10788 3.99 5.34 3.38 76 RCVD_IN_MSPIKE_H4 10784 3.22 2.87 3.38 77 RCVD_IN_IADB_SPF 10526 2.59 1.02 3.30 78 BAYES_99 10470 12.11 31.54 3.28 79 T_TooManySym_02 9370 2.28 0.84 2.94 80 MAILING_LIST_MULTI 9306 2.60 1.88 2.92 81 RCVD_IN_IADB_SENDERID 9303 2.30 0.94 2.92 82 RCVD_IN_IADB_DK 9005 2.23 0.94 2.82 83 BOTNET_IPINHOSTNAME 8950 6.07 13.24 2.81 84 XM_B_SpammyTLD 8483 2.98 3.70 2.66 85 MIME_HTML_MOSTLY 8330 2.81 3.23 2.61 86 HTML_MIME_NO_HTML_TAG 8219 2.24 1.50 2.58 87 RCVD_IN_IADB_VOUCHED 8206 1.96 0.62 2.57 88 XM_Body_Dirty_Words 8065 3.79 6.58 2.53 89 MIME_HTML_ONLY_MULTI 7872 2.66 3.08 2.47 90 BAYES_999 7760 9.31 24.45 2.43 91 INVALID_MSGID 7488 1.68 0.21 2.35 92 BAYES_95 7378 3.14 4.95 2.31 93 SCC_BODY_URI_ONLY 7275 2.06 1.57 2.28 94 HTML_IMAGE_RATIO_08 7009 2.20 2.19 2.20 95 XM_CamelCaseFrm001 6996 2.47 3.08 2.19 96 BAYES_05 6749 1.65 0.61 2.12 97 DKIM_INVALID 6660 3.21 5.68 2.09 98 T_XMDrugObfuBody_08 6517 2.55 3.66 2.04 99 TO_MALFORMED 6288 1.37 0.04 1.97 100 T_XMDrugObfuBody_14 6086 2.82 4.81 1.91 101 XM_B_URI_Unicode 5971 2.10 2.61 1.87 102 TR_XM_DKIM_Undo 5959 10.06 28.09 1.87 103 FROM_EXCESS_BASE64 5860 1.92 2.09 1.84 104 TR_MetaPhish_Combo_01 5857 1.64 1.19 1.84 105 TR_XM_SpammyRelay 5764 5.07 12.27 1.81 106 XM_B_Investor 5730 3.00 5.65 1.80 107 RCVD_IN_IADB_OPTIN 5708 1.36 0.43 1.79 108 TM2_M_VERY_LONG_WORD 5533 2.35 3.70 1.74 109 TM2_M_URI_OPT_OUT 5506 2.17 3.16 1.73 110 KHOP_HELO_FCRDNS 5443 1.61 1.39 1.71 111 XM_DK_Undo_01 5429 1.70 1.70 1.70 112 XMSexyCombo_05 5421 2.52 4.33 1.70 113 TR_XM_UnparsRelay 5401 4.28 9.97 1.69 114 TR_XM_PhishingBody 5180 2.81 5.44 1.62 115 TR_XM_SpammyWords5 5105 2.43 4.27 1.60 116 UNTRUSTED_Relay 4989 2.90 5.85 1.56 117 TooManyTo_003 4971 1.24 0.53 1.56 118 TR_Symld_Words 4797 1.48 1.42 1.50 119 SUBJ_ALL_CAPS 4779 1.71 2.19 1.50 120 URI_NOVOWEL 4751 1.46 1.40 1.49 121 XM_SPF_SoftFail 4514 1.96 3.15 1.42 122 XM_SendGrid 4410 1.43 1.53 1.38 123 HELO_NODOT 4337 0.97 0.10 1.36 124 HELO_NO_DOMAIN 4329 0.96 0.10 1.36 125 XMDiploma_00 4241 1.81 2.85 1.33 126 IN_HORDE_ADDRESS_BOOK 4218 0.93 0.08 1.32 127 TR_DCC_Bayes_99 4036 7.70 21.87 1.27 128 URI_HEX 4024 1.36 1.57 1.26 129 XMStockSpam_06 4023 1.51 2.06 1.26 130 XM_GoogleGroups 3930 1.11 0.84 1.23 131 XM_B_FormFill 3929 0.86 0.06 1.23 132 XMGappySubj_01 3880 0.92 0.26 1.22 133 XM_B_Unsub2 3745 1.87 3.40 1.17 134 T_TooManySym_03 3718 0.91 0.33 1.17 135 XMCapTrack 3658 0.93 0.45 1.15 136 TooManyTo_004 3595 0.92 0.47 1.13 137 BOTNET 3495 3.81 9.79 1.10 138 XM_ShortIntro_01 3345 0.82 0.31 1.05 139 XM_OfRef6 3309 2.00 4.11 1.04 140 TVD_SPACE_RATIO 3295 0.77 0.19 1.03 141 XMBrknScrpt_02 3248 1.21 1.63 1.02 142 XM_UB50 3158 1.56 2.82 0.99 143 HTML_IMAGE_ONLY_32 3060 0.73 0.21 0.96 144 TR_XM_DK_SendGrid 2969 0.93 0.94 0.93 145 TooManyTo_005 2871 0.75 0.41 0.90 146 XM_B_SpammyWords4 2868 1.42 2.57 0.90 147 XM_H_Long_From02 2802 1.20 1.91 0.88 148 T_FILL_THIS_FORM_SHORT 2786 1.31 2.27 0.87 149 XM_H_PHPMailer 2726 0.73 0.45 0.85 150 RELAYCOUNTRY_CA 2688 2.49 6.12 0.84 151 RCVD_IN_PBL 2603 0.96 1.28 0.82 152 URI_OPTOUT_3LD 2525 0.69 0.45 0.79 153 TVD_RCVD_IP 2503 0.89 1.11 0.79 154 SpammyFromTLD_01 2437 1.10 1.84 0.76 155 DKIM_ADSP_CUSTOM_MED 2414 0.85 1.05 0.76 156 T_TVD_MIME_NO_HEADERS 2359 0.52 0.04 0.74 157 XM_B_COPY_HTML 2309 0.91 1.33 0.72 158 HTTPS_HTTP_MISMATCH 2271 0.81 1.02 0.71 159 XMGenDplmaNmb 2264 0.91 1.36 0.71 160 XMSubMetaI_00 2194 0.83 1.15 0.69 161 XMGappySubj_02 2177 0.51 0.11 0.68 162 XMNoVowels 2167 0.66 0.63 0.68 163 T_Symld_Words_02 2103 0.82 1.19 0.66 164 T_XMDrugObfuBody_00 2102 0.98 1.70 0.66 165 FROM_GOV_DKIM_AU 2024 0.50 0.22 0.63 166 RELAYCOUNTRY_AU 1952 1.31 2.85 0.61 167 XMBdyGiftCard01 1937 0.80 1.23 0.61 168 MAY_BE_FORGED 1916 0.42 0.01 0.60 169 T_OBFU_PDF_ATTACH 1908 0.46 0.17 0.60 170 T_XMHurry_00 1826 1.03 2.04 0.57 171 XMBSHREFv2 1825 0.49 0.31 0.57 172 LongTLD 1770 0.63 0.81 0.56 173 XMPhish30 1690 0.96 1.90 0.53 174 RELAYCOUNTRY_GB 1670 0.70 1.09 0.52 175 TR_XM_Base64_M1 1669 0.57 0.67 0.52 176 MPART_ALT_DIFF_COUNT 1656 0.79 1.37 0.52 177 NML_ADSP_CUSTOM_MED 1628 0.62 0.85 0.51 178 XMSlimDrugH 1620 0.61 0.82 0.51 179 HTML_TAG_BALANCE_BODY 1619 0.65 0.96 0.51 180 MSGID_FROM_MTA_HEADER 1617 0.41 0.21 0.51 181 PLING_QUERY 1595 0.52 0.57 0.50 182 TR_XM_SpammyWords2 1591 3.61 10.45 0.50 183 TR_LOTS_OF_MONEY3 1570 0.91 1.82 0.49 184 XMMoneyMeta_00 1562 0.60 0.85 0.49 185 URI_TRY_3LD 1555 0.93 1.91 0.49 186 XM_B_DNDMA 1549 0.70 1.16 0.49 187 T_STY_INVIS_DIRECT 1539 0.62 0.92 0.48 188 XMLngstWrd_00 1519 0.50 0.54 0.48 189 XMBody_17 1519 1.07 2.37 0.48 190 XMSubMetaSxObfu_02 1509 0.45 0.39 0.47 191 XMSubMetaSxObfu_03 1506 0.50 0.56 0.47 192 XM_ProductURIs 1470 0.68 1.16 0.46 193 RCVD_IN_BL_SPAMCOP_NET 1451 3.54 10.33 0.46 194 RCVD_IN_MSPIKE_BL 1445 1.94 5.22 0.45 195 FORGED_GMAIL_RCVD 1442 0.56 0.80 0.45 196 SpammyFromTLD_02 1430 0.93 1.99 0.45 197 XMPhish14 1429 0.57 0.85 0.45 198 TR_XM_MSPIKECOMBO 1417 1.93 5.22 0.44 199 RCVD_IN_PSBL 1388 0.72 1.34 0.44 200 FILL_THIS_FORM 1373 0.41 0.35 0.43 ----------------------------------------------------------------------