Email: 497813 Autolearn: 0 AvgScore: 3.28 AvgScanTime: 1.59 sec Spam: 139356 Autolearn: 0 AvgScore: 14.68 AvgScanTime: 1.85 sec Ham: 358457 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.49 sec Time Spent Running SA: 220.33 hours Time Spent Processing Spam: 71.69 hours Time Spent Processing Ham: 148.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 137147 99.23 98.41 99.55 2 HTML_MESSAGE 131984 90.42 94.71 88.76 3 DKIM_SIGNED 124648 72.76 89.45 66.27 4 XM_DK_Pass 117362 70.55 84.22 65.24 5 XM_B_Unicode 117263 75.56 84.15 72.23 6 DKIM_VALID 116428 69.71 83.55 64.34 7 RELAYCOUNTRY_US 113760 83.25 81.63 83.88 8 DCC_CHECK 105320 51.89 75.58 42.68 9 XM_B_SpammyWords 97885 51.05 70.24 43.59 10 XMListUnsubscribeExists 95699 50.32 68.67 43.18 11 DKIM_VALID_AU 92909 56.25 66.67 52.20 12 XM_B_Unicode3 69083 44.66 49.57 42.75 13 LOC_TINY_FONT_1 68080 31.59 48.85 24.88 14 BAYES_50 58907 53.53 42.27 57.90 15 XM_B_SpammyWords2 56884 23.88 40.82 17.30 16 XM_DK_Undo_02 53816 13.81 38.62 4.17 17 HTML_FONT_LOW_CONTRAST 51654 28.04 37.07 24.53 18 FVGT_m_MULTI_ODD 48405 26.68 34.73 23.55 19 DKIM_VALID_EF 44861 27.99 32.19 26.36 20 BAYES_99 43011 10.77 30.86 2.96 21 T_KAM_HTML_FONT_INVALID 42436 23.20 30.45 20.38 22 MIME_HTML_ONLY 41934 25.76 30.09 24.07 23 TR_XM_DKIM_Undo 38840 9.03 27.87 1.71 24 XMSubLong 37394 25.34 26.83 24.75 25 BAYES_999 33429 8.33 23.99 2.24 26 TR_XM_DK_Unsub 33314 15.45 23.91 12.16 27 DCC_CHECK_NEGATIVE 32020 47.67 22.98 57.27 28 T_TM2_M_HEADER_IN_MSG 31851 25.74 22.86 26.87 29 TR_DCC_Bayes_99 29931 6.72 21.48 0.98 30 XM_Multi_Part_URI 28906 14.98 20.74 12.74 31 XM_B_Unsub 26150 12.84 18.76 10.54 32 RCVD_IN_MSPIKE_H2 25804 15.63 18.52 14.51 33 UNPARSEABLE_RELAY 25575 12.62 18.35 10.39 34 TR_XM_BayesUnsub 25302 9.70 18.16 6.41 35 RELAYCOUNTRY_META 23541 6.98 16.89 3.12 36 LOTS_OF_MONEY 21055 8.33 15.11 5.70 37 XM_B_SpammyWords3 21016 7.47 15.08 4.51 38 TR_MAX_INTL_RELAY 19371 7.76 13.90 5.38 39 TR_XM_SpammyWords4 18700 6.59 13.42 3.94 40 TR_XM_SpammyRelay 18186 4.86 13.05 1.67 41 BOTNET_IPINHOSTNAME 18004 5.46 12.92 2.56 42 TR_XM_SpammyWords2 15291 3.32 10.97 0.35 43 FSL_BULK_SIG 14459 13.45 10.38 14.64 44 RCVD_IN_MSPIKE_WL 13526 13.91 9.71 15.54 45 XM_Evil_Numbers_Gen 13469 9.42 9.67 9.32 46 TR_XM_UnparsRelay 13354 3.69 9.58 1.40 47 BOTNET 13034 3.49 9.35 1.21 48 RCVD_IN_BL_SPAMCOP_NET 12944 2.91 9.29 0.43 49 XM_B_Phish_Phrases 12277 6.19 8.81 5.17 50 BAYES_80 11758 4.75 8.44 3.32 51 XM_Body_Dirty_Words 11198 4.30 8.04 2.84 52 BAYES_60 10641 6.42 7.64 5.95 53 LotsOfNums_01 10094 7.14 7.24 7.10 54 XM_B_PhoneNumber 9256 10.01 6.64 11.31 55 XMSubMetaSx_00 8979 5.31 6.44 4.86 56 HTML_IMAGE_RATIO_02 8881 4.52 6.37 3.80 57 RELAYCOUNTRY_CA 8877 2.29 6.37 0.71 58 UNTRUSTED_Relay 8794 2.74 6.31 1.36 59 MPART_ALT_DIFF 8421 8.27 6.04 9.13 60 TR_XM_PhishingBody 8286 2.94 5.95 1.77 61 XM_H_Long_From01 8251 5.19 5.92 4.90 62 DKIM_INVALID 8220 3.04 5.90 1.93 63 XM_B_Investor 7374 2.53 5.29 1.45 64 XMSexyCombo_05 7317 3.90 5.25 3.37 65 RCVD_IN_MSPIKE_BL 7233 1.77 5.19 0.44 66 TR_XM_MSPIKECOMBO 7233 1.77 5.19 0.44 67 XM_UncommonTLD01 7156 4.04 5.14 3.61 68 XMStrtUSub 6999 8.95 5.02 10.48 69 HTML_IMAGE_RATIO_04 6911 11.36 4.96 13.86 70 BAYES_95 6691 2.82 4.80 2.05 71 T_XMDrugObfuBody_14 6184 2.46 4.44 1.69 72 XM_B_SpammyTLD 6167 3.01 4.43 2.46 73 RCVD_IN_MSPIKE_H3 6160 6.17 4.42 6.85 74 XM_H_GMP 6074 4.74 4.36 4.89 75 XM_OfRef6 5825 2.06 4.18 1.23 76 TR_XM_SpammyWords3 5822 1.30 4.18 0.18 77 TR_XM_SpammyWords5 5812 2.20 4.17 1.44 78 TR_XM_SPAMCOP 5739 1.22 4.12 0.09 79 RCVD_IN_VALIDITY_RPBL 5679 1.25 4.08 0.16 80 TooManyTo_001 5573 8.04 4.00 9.61 81 T_FILL_THIS_FORM_SHORT 5523 1.73 3.96 0.87 82 MIME_HTML_MOSTLY 5449 2.75 3.91 2.29 83 TM2_M_VERY_LONG_WORD 5235 1.92 3.76 1.21 84 XMNumbers 4889 4.99 3.51 5.56 85 XM_B_SpammyWords4 4797 1.85 3.44 1.24 86 XM_CamelCaseFrm001 4711 2.11 3.38 1.61 87 MIME_HTML_ONLY_MULTI 4706 6.26 3.38 7.39 88 XM_B_Unsub2 4706 1.89 3.38 1.31 89 XM_SPF_SoftFail 4687 1.93 3.36 1.38 90 T_XMDrugObfuBody_08 4680 1.84 3.36 1.25 91 XM_B_URI_Unicode 4670 2.23 3.35 1.79 92 HTML_IMAGE_RATIO_06 4560 4.01 3.27 4.30 93 RCVD_IN_MSPIKE_L3 4523 1.09 3.25 0.25 94 XM_UB50 4454 1.52 3.20 0.86 95 MIME_QP_LONG_LINE 4322 3.99 3.10 4.33 96 XM_URI_RBL 4252 1.08 3.05 0.31 97 TR_XM_NoHeaderRelay 4186 0.96 3.00 0.16 98 RCVD_IN_MSPIKE_H4 4103 3.02 2.94 3.04 99 RELAYCOUNTRY_AU 4039 1.23 2.90 0.58 100 HTML_IMAGE_RATIO_08 3990 2.35 2.86 2.15 101 TR_XM_INV_DKIM 3849 0.83 2.76 0.07 102 TR_LOTS_OF_MONEY3 3741 1.01 2.68 0.37 103 T_TooManySym_01 3702 4.64 2.66 5.42 104 XMBody_17 3686 0.96 2.65 0.30 105 XMDiploma_00 3634 1.68 2.61 1.32 106 ALL_TRUSTED 3632 10.53 2.61 13.61 107 TM2_M_URI_OPT_OUT 3352 1.94 2.41 1.76 108 RCVD_IN_MSPIKE_H5 3263 4.72 2.34 5.65 109 XMStockSpam_06 3132 1.42 2.25 1.10 110 FROM_EXCESS_BASE64 3118 1.75 2.24 1.56 111 XMPhish30 3057 1.03 2.19 0.58 112 MAILING_LIST_MULTI 2999 2.51 2.15 2.65 113 T_XMHurry_00 2990 1.03 2.15 0.60 114 BAYES_40 2830 4.36 2.03 5.26 115 SUBJ_ALL_CAPS 2807 1.49 2.01 1.28 116 XMBrknScrpt_02 2799 1.05 2.01 0.68 117 XM_H_Long_From02 2702 1.11 1.94 0.79 118 URI_TRY_3LD 2608 0.96 1.87 0.60 119 RCVD_IN_PSBL 2603 0.79 1.87 0.36 120 RCVD_IN_VALIDITY_SAFE 2588 3.30 1.86 3.87 121 SpammyFromTLD_02 2571 0.87 1.84 0.49 122 T_XMDrugObfuBody_00 2521 0.85 1.81 0.48 123 TR_LOTS_OF_MONEY2 2465 0.66 1.77 0.23 124 T_MONEY_PERCENT 2465 0.66 1.77 0.23 125 TR_XM_MSPIKECOMBO2 2401 0.48 1.72 0.00 126 XMGenDplmaNmb 2367 0.97 1.70 0.68 127 KHOP_HELO_FCRDNS 2345 1.28 1.68 1.13 128 T_REMOTE_IMAGE 2332 2.76 1.67 3.18 129 USER_IN_DEF_DKIM_WL 2290 9.20 1.64 12.14 130 RELAYCOUNTRY_FR 2274 0.65 1.63 0.27 131 SpammyFromTLD_01 2216 0.90 1.59 0.63 132 HTML_IMAGE_ONLY_20 2209 0.68 1.59 0.33 133 URI_HEX 2206 1.17 1.58 1.01 134 XM_B_Phish66 2191 0.67 1.57 0.32 135 SCC_BODY_URI_ONLY 2166 1.92 1.55 2.06 136 XM_DK_Undo_01 2160 1.51 1.55 1.50 137 HTML_MIME_NO_HTML_TAG 2123 2.10 1.52 2.32 138 RCVD_IN_ZEN_LASTEXTERNAL 2002 0.40 1.44 0.00 139 SHORTCIRCUIT 2002 0.40 1.44 0.00 140 XM_ProductURIs 1988 0.73 1.43 0.46 141 TR_XM_RelayPhish 1929 0.44 1.38 0.07 142 HTTPS_HTTP_MISMATCH 1906 0.83 1.37 0.63 143 RCVD_IN_XBL 1897 0.39 1.36 0.02 144 URI_NOVOWEL 1891 1.32 1.36 1.30 145 RCVD_IN_MSPIKE_L4 1884 0.42 1.35 0.06 146 RCVD_IN_PBL 1868 0.82 1.34 0.62 147 RCVD_IN_SBL_CSS 1868 0.40 1.34 0.03 148 XM_B_DNDMA 1860 0.60 1.33 0.32 149 XM_B_COPY_HTML 1843 0.87 1.32 0.69 150 RCVD_IN_VALIDITY_CERTIFIED 1835 2.69 1.32 3.23 151 TR_XM_InvalidRelay 1823 0.37 1.31 0.01 152 TR_XM_FormFill 1810 0.37 1.30 0.01 153 XM_SendGrid 1806 1.27 1.30 1.26 154 XM_UB99 1775 0.36 1.27 0.00 155 RDNS_DYNAMIC 1769 0.46 1.27 0.14 156 TM2_M_OBFU_COMMENT 1748 0.65 1.25 0.41 157 BOTNET_NORDNS 1744 0.36 1.25 0.01 158 TR_MetaPhish_Combo_01 1714 1.34 1.23 1.39 159 PDS_RDNS_DYNAMIC_FP 1709 0.36 1.23 0.03 160 HK_RANDOM_REPLYTO 1708 0.42 1.23 0.10 161 XM_B_SEO 1706 0.48 1.22 0.19 162 XM_DIRTYINTL 1695 0.38 1.22 0.05 163 DKIM_ADSP_CUSTOM_MED 1672 0.80 1.20 0.64 164 XM_B_COVIDMETA 1655 0.41 1.19 0.10 165 BAYES_20 1646 3.41 1.18 4.27 166 DIET_1 1621 0.48 1.16 0.22 167 TR_Symld_Words 1593 1.29 1.14 1.35 168 TR_XM_Base64_M1 1562 0.68 1.12 0.51 169 XMReplyNow 1533 0.48 1.10 0.24 170 RCVD_IN_IADB_LISTED 1526 2.55 1.10 3.12 171 TR_XM_SEO4 1505 0.36 1.08 0.09 172 MPART_ALT_DIFF_COUNT 1500 0.62 1.08 0.44 173 XMPhish14 1489 0.73 1.07 0.60 174 SHOPIFY_IMG_NOT_RCVD_SFY 1468 0.46 1.05 0.23 175 NML_ADSP_CUSTOM_MED 1464 0.59 1.05 0.41 176 XM_HighProb1 1455 0.29 1.04 0.00 177 TR_XM_PHPDW 1446 0.64 1.04 0.48 178 TR_XM_PHPForged 1440 0.63 1.03 0.48 179 TVD_RCVD_IP 1437 0.85 1.03 0.78 180 TM2_M_A_HREF_HREF 1424 0.46 1.02 0.24 181 FONT_INVIS_LONG_LINE 1410 0.30 1.01 0.03 182 TR_XM_FormFill2 1409 0.62 1.01 0.47 183 XMBody_78 1397 0.52 1.00 0.33 184 XM_H_PHPOS 1366 0.61 0.98 0.46 185 RELAYCOUNTRY_GB 1366 0.59 0.98 0.44 186 T_TooManySym_02 1364 2.20 0.98 2.68 187 DEAR_FRIEND 1363 0.32 0.98 0.07 188 THIS_AD 1362 0.68 0.98 0.56 189 FORGED_GMAIL_RCVD 1344 0.55 0.96 0.39 190 XMMoneyMeta_00 1330 0.62 0.95 0.49 191 XM_UB999 1315 0.27 0.94 0.00 192 XMHTML_After_End 1295 0.47 0.93 0.29 193 URIBL_BLACK 1288 0.27 0.92 0.01 194 DKIM_ADSP_NXDOMAIN 1287 0.44 0.92 0.25 195 RCVD_IN_IADB_SPF 1285 2.22 0.92 2.72 196 MultiRelay_CC 1283 0.34 0.92 0.12 197 XM_Nigeria_01 1273 0.40 0.91 0.20 198 TR_Mismatch_TLD_02 1238 0.31 0.89 0.09 199 RCVD_IN_IADB_SENDERID 1219 1.98 0.87 2.41 200 RCVD_IN_IADB_DK 1219 1.93 0.87 2.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 356854 99.23 98.41 99.55 2 HTML_MESSAGE 318160 90.42 94.71 88.76 3 RELAYCOUNTRY_US 300683 83.25 81.63 83.88 4 XM_B_Unicode 258898 75.56 84.15 72.23 5 DKIM_SIGNED 237545 72.76 89.45 66.27 6 XM_DK_Pass 233842 70.55 84.22 65.24 7 DKIM_VALID 230617 69.71 83.55 64.34 8 BAYES_50 207551 53.53 42.27 57.90 9 DCC_CHECK_NEGATIVE 205288 47.67 22.98 57.27 10 DKIM_VALID_AU 187106 56.25 66.67 52.20 11 XM_B_SpammyWords 156269 51.05 70.24 43.59 12 XMListUnsubscribeExists 154785 50.32 68.67 43.18 13 XM_B_Unicode3 153223 44.66 49.57 42.75 14 DCC_CHECK 153001 51.89 75.58 42.68 15 T_TM2_M_HEADER_IN_MSG 96302 25.74 22.86 26.87 16 DKIM_VALID_EF 94472 27.99 32.19 26.36 17 LOC_TINY_FONT_1 89173 31.59 48.85 24.88 18 XMSubLong 88729 25.34 26.83 24.75 19 HTML_FONT_LOW_CONTRAST 87914 28.04 37.07 24.53 20 MIME_HTML_ONLY 86290 25.76 30.09 24.07 21 FVGT_m_MULTI_ODD 84411 26.68 34.73 23.55 22 T_KAM_HTML_FONT_INVALID 73049 23.20 30.45 20.38 23 XM_B_SpammyWords2 62017 23.88 40.82 17.30 24 RCVD_IN_MSPIKE_WL 55719 13.91 9.71 15.54 25 BAYES_00 54291 11.13 0.81 15.15 26 FSL_BULK_SIG 52478 13.45 10.38 14.64 27 RCVD_IN_MSPIKE_H2 52015 15.63 18.52 14.51 28 HTML_IMAGE_RATIO_04 49665 11.36 4.96 13.86 29 ALL_TRUSTED 48795 10.53 2.61 13.61 30 XM_Multi_Part_URI 45670 14.98 20.74 12.74 31 HTML_FONT_FACE_BAD 43640 8.95 0.66 12.17 32 TR_XM_DK_Unsub 43574 15.45 23.91 12.16 33 USER_IN_DEF_DKIM_WL 43528 9.20 1.64 12.14 34 XM_H_Trusted_IP 41391 8.31 0.00 11.55 35 XM_B_PhoneNumber 40558 10.01 6.64 11.31 36 XM_B_Unsub 37791 12.84 18.76 10.54 37 XMStrtUSub 37564 8.95 5.02 10.48 38 UNPARSEABLE_RELAY 37250 12.62 18.35 10.39 39 TooManyTo_001 34449 8.04 4.00 9.61 40 XM_Evil_Numbers_Gen 33413 9.42 9.67 9.32 41 MPART_ALT_DIFF 32737 8.27 6.04 9.13 42 MIME_HTML_ONLY_MULTI 26477 6.26 3.38 7.39 43 LotsOfNums_01 25433 7.14 7.24 7.10 44 RCVD_IN_MSPIKE_H3 24553 6.17 4.42 6.85 45 TR_XM_BayesUnsub 22978 9.70 18.16 6.41 46 XM_DKIMWhitelistDomains 22266 4.50 0.10 6.21 47 BAYES_60 21331 6.42 7.64 5.95 48 TR_XM_DK_Bayes 20599 4.28 0.51 5.75 49 LOTS_OF_MONEY 20423 8.33 15.11 5.70 50 RCVD_IN_MSPIKE_H5 20251 4.72 2.34 5.65 51 TR_XM_DK_Bayes1 20198 4.20 0.49 5.63 52 XMNumbers 19941 4.99 3.51 5.56 53 T_TooManySym_01 19421 4.64 2.66 5.42 54 TR_MAX_INTL_RELAY 19284 7.76 13.90 5.38 55 BAYES_40 18866 4.36 2.03 5.26 56 XM_B_Phish_Phrases 18547 6.19 8.81 5.17 57 XM_H_Long_From01 17570 5.19 5.92 4.90 58 XM_H_GMP 17512 4.74 4.36 4.89 59 XMSubMetaSx_00 17430 5.31 6.44 4.86 60 TooManyTo_002 17198 3.64 0.66 4.80 61 TR_XM_DK_Bayes2 16761 3.46 0.34 4.68 62 XM_B_SpammyWords3 16182 7.47 15.08 4.51 63 MIME_QP_LONG_LINE 15522 3.99 3.10 4.33 64 HTML_IMAGE_RATIO_06 15411 4.01 3.27 4.30 65 BAYES_20 15307 3.41 1.18 4.27 66 XMSubNoVowel 15220 3.16 0.36 4.25 67 XM_DK_Undo_02 14944 13.81 38.62 4.17 68 TR_XM_SpammyWords4 14125 6.59 13.42 3.94 69 RCVD_IN_VALIDITY_SAFE 13861 3.30 1.86 3.87 70 XM_PDF 13837 2.99 0.73 3.86 71 HTML_IMAGE_RATIO_02 13617 4.52 6.37 3.80 72 XM_UncommonTLD01 12935 4.04 5.14 3.61 73 XMSexyCombo_05 12083 3.90 5.25 3.37 74 BAYES_80 11900 4.75 8.44 3.32 75 RCVD_IN_VALIDITY_CERTIFIED 11569 2.69 1.32 3.23 76 T_REMOTE_IMAGE 11405 2.76 1.67 3.18 77 BAYES_05 11212 2.40 0.53 3.13 78 RCVD_IN_IADB_LISTED 11187 2.55 1.10 3.12 79 RELAYCOUNTRY_META 11183 6.98 16.89 3.12 80 RCVD_IN_MSPIKE_H4 10915 3.02 2.94 3.04 81 BAYES_99 10621 10.77 30.86 2.96 82 ANY_BOUNCE_MESSAGE 10619 2.34 0.74 2.96 83 BOUNCE_MESSAGE 10614 2.34 0.74 2.96 84 XM_Body_Dirty_Words 10197 4.30 8.04 2.84 85 XM_B_FormFill 9864 1.99 0.04 2.75 86 RCVD_IN_IADB_SPF 9766 2.22 0.92 2.72 87 T_TooManySym_02 9607 2.20 0.98 2.68 88 MAILING_LIST_MULTI 9496 2.51 2.15 2.65 89 BOTNET_IPINHOSTNAME 9179 5.46 12.92 2.56 90 XM_B_SpammyTLD 8801 3.01 4.43 2.46 91 RCVD_IN_IADB_SENDERID 8637 1.98 0.87 2.41 92 RCVD_IN_IADB_DK 8390 1.93 0.87 2.34 93 HTML_MIME_NO_HTML_TAG 8308 2.10 1.52 2.32 94 MIME_HTML_MOSTLY 8224 2.75 3.91 2.29 95 BAYES_999 8044 8.33 23.99 2.24 96 XMSubLongNoVowel 7718 1.58 0.11 2.15 97 HTML_IMAGE_RATIO_08 7712 2.35 2.86 2.15 98 RCVD_IN_IADB_VOUCHED 7679 1.70 0.56 2.14 99 XMSubGarbage 7550 1.52 0.03 2.11 100 SCC_BODY_URI_ONLY 7390 1.92 1.55 2.06 101 BAYES_95 7365 2.82 4.80 2.05 102 INVALID_MSGID 7186 1.56 0.40 2.00 103 DKIM_INVALID 6928 3.04 5.90 1.93 104 XM_B_URI_Unicode 6417 2.23 3.35 1.79 105 TR_XM_PhishingBody 6357 2.94 5.95 1.77 106 TM2_M_URI_OPT_OUT 6309 1.94 2.41 1.76 107 TO_MALFORMED 6252 1.27 0.05 1.74 108 TR_XM_DKIM_Undo 6128 9.03 27.87 1.71 109 T_XMDrugObfuBody_14 6057 2.46 4.44 1.69 110 TR_XM_SpammyRelay 5983 4.86 13.05 1.67 111 XM_CamelCaseFrm001 5774 2.11 3.38 1.61 112 FROM_EXCESS_BASE64 5599 1.75 2.24 1.56 113 RCVD_IN_IADB_OPTIN 5395 1.17 0.29 1.51 114 XM_DK_Undo_01 5377 1.51 1.55 1.50 115 TooManyTo_003 5207 1.20 0.54 1.45 116 XM_B_Investor 5198 2.53 5.29 1.45 117 TR_XM_SpammyWords5 5160 2.20 4.17 1.44 118 TR_XM_UnparsRelay 5036 3.69 9.58 1.40 119 TR_MetaPhish_Combo_01 4969 1.34 1.23 1.39 120 XM_SPF_SoftFail 4944 1.93 3.36 1.38 121 UNTRUSTED_Relay 4867 2.74 6.31 1.36 122 TR_Symld_Words 4829 1.29 1.14 1.35 123 XMDiploma_00 4725 1.68 2.61 1.32 124 XM_B_Unsub2 4678 1.89 3.38 1.31 125 URI_NOVOWEL 4676 1.32 1.36 1.30 126 SUBJ_ALL_CAPS 4599 1.49 2.01 1.28 127 XM_SendGrid 4510 1.27 1.30 1.26 128 T_XMDrugObfuBody_08 4495 1.84 3.36 1.25 129 XMGappySubj_01 4493 0.97 0.23 1.25 130 XM_B_SpammyWords4 4436 1.85 3.44 1.24 131 XM_OfRef6 4414 2.06 4.18 1.23 132 BOTNET 4330 3.49 9.35 1.21 133 TM2_M_VERY_LONG_WORD 4329 1.92 3.76 1.21 134 IN_HORDE_ADDRESS_BOOK 4300 0.89 0.08 1.20 135 KHOP_HELO_FCRDNS 4051 1.28 1.68 1.13 136 HELO_NODOT 4040 0.84 0.11 1.13 137 HELO_NO_DOMAIN 4037 0.84 0.10 1.13 138 XM_GoogleGroups 3945 1.01 0.79 1.10 139 XMStockSpam_06 3934 1.42 2.25 1.10 140 TooManyTo_004 3795 0.90 0.48 1.06 141 T_TooManySym_03 3719 0.87 0.45 1.04 142 URI_HEX 3633 1.17 1.58 1.01 143 XMCapTrack 3569 0.82 0.38 1.00 144 TR_DCC_Bayes_99 3523 6.72 21.48 0.98 145 XM_E_Blogspot 3521 0.75 0.14 0.98 146 TVD_SPACE_RATIO 3145 0.67 0.15 0.88 147 T_FILL_THIS_FORM_SHORT 3107 1.73 3.96 0.87 148 XM_UB50 3088 1.52 3.20 0.86 149 XM_ShortIntro_01 3087 0.71 0.33 0.86 150 TooManyTo_005 3071 0.74 0.43 0.86 151 TR_XM_DK_SendGrid 2968 0.83 0.82 0.83 152 FILL_THIS_FORM 2827 0.72 0.54 0.79 153 XM_H_Long_From02 2815 1.11 1.94 0.79 154 TVD_RCVD_IP 2801 0.85 1.03 0.78 155 URI_OPTOUT_3LD 2762 0.69 0.48 0.77 156 XM_H_PHPMailer 2621 0.69 0.59 0.73 157 RELAYCOUNTRY_CA 2539 2.29 6.37 0.71 158 XM_B_COPY_HTML 2490 0.87 1.32 0.69 159 XMBrknScrpt_02 2443 1.05 2.01 0.68 160 XMGenDplmaNmb 2438 0.97 1.70 0.68 161 FROM_GOV_DKIM_AU 2405 0.62 0.50 0.67 162 DKIM_ADSP_CUSTOM_MED 2290 0.80 1.20 0.64 163 XMNoVowels 2268 0.59 0.46 0.63 164 SpammyFromTLD_01 2264 0.90 1.59 0.63 165 XMGappySubj_02 2251 0.47 0.06 0.63 166 HTTPS_HTTP_MISMATCH 2249 0.83 1.37 0.63 167 RCVD_IN_PBL 2207 0.82 1.34 0.62 168 XMPhish14 2167 0.73 1.07 0.60 169 URI_TRY_3LD 2166 0.96 1.87 0.60 170 T_XMHurry_00 2143 1.03 2.15 0.60 171 XMPhish30 2095 1.03 2.19 0.58 172 RELAYCOUNTRY_AU 2082 1.23 2.90 0.58 173 XMBSHREFv2 2023 0.49 0.31 0.56 174 FILL_THIS_FORM_LONG 2011 0.45 0.15 0.56 175 THIS_AD 2001 0.68 0.98 0.56 176 XMSubMetaI_00 1970 0.62 0.81 0.55 177 T_Symld_Words_02 1964 0.64 0.87 0.55 178 XMLngstWrd_00 1936 0.51 0.42 0.54 179 TR_XM_Base64_M1 1813 0.68 1.12 0.51 180 T_OBFU_PDF_ATTACH 1795 0.41 0.16 0.50 181 XMSubMetaSxObfu_03 1774 0.56 0.74 0.49 182 XMLngstWrd_01 1753 0.45 0.37 0.49 183 XMMoneyMeta_00 1742 0.62 0.95 0.49 184 SpammyFromTLD_02 1739 0.87 1.84 0.49 185 TR_XM_PHPDW 1728 0.64 1.04 0.48 186 T_XMDrugObfuBody_00 1710 0.85 1.81 0.48 187 TR_XM_PHPForged 1704 0.63 1.03 0.48 188 TR_XM_FormFill2 1701 0.62 1.01 0.47 189 XM_H_PHPOS 1660 0.61 0.98 0.46 190 XMBdyGiftCard01 1647 0.57 0.86 0.46 191 XM_ProductURIs 1634 0.73 1.43 0.46 192 HTML_TAG_BALANCE_BODY 1629 0.55 0.80 0.45 193 PLING_QUERY 1593 0.54 0.80 0.44 194 RELAYCOUNTRY_GB 1584 0.59 0.98 0.44 195 LongTLD 1581 0.55 0.82 0.44 196 RCVD_IN_MSPIKE_BL 1579 1.77 5.19 0.44 197 TR_XM_MSPIKECOMBO 1579 1.77 5.19 0.44 198 MPART_ALT_DIFF_COUNT 1572 0.62 1.08 0.44 199 RCVD_IN_BL_SPAMCOP_NET 1551 2.91 9.29 0.43 200 MSGID_FROM_MTA_HEADER 1546 0.36 0.19 0.43 ----------------------------------------------------------------------