Email: 287108 Autolearn: 0 AvgScore: 5.16 AvgScanTime: 1.41 sec Spam: 97625 Autolearn: 0 AvgScore: 13.52 AvgScanTime: 1.52 sec Ham: 189483 Autolearn: 0 AvgScore: 0.84 AvgScanTime: 1.36 sec Time Spent Running SA: 112.81 hours Time Spent Processing Spam: 41.25 hours Time Spent Processing Ham: 71.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 97095 99.58 99.46 99.64 2 HTML_MESSAGE 92823 87.61 95.08 83.76 3 DKIM_SIGNED 88116 81.34 90.26 76.74 4 XM_DK_Pass 84938 79.66 87.00 75.88 5 DKIM_VALID 84357 79.09 86.41 75.32 6 XM_B_Unicode 83952 76.30 85.99 71.30 7 RELAYCOUNTRY_US 79270 80.79 81.20 80.59 8 DCC_CHECK 76638 58.65 78.50 48.43 9 XMListUnsubscribeExists 69001 60.38 70.68 55.08 10 DKIM_VALID_AU 66261 64.81 67.87 63.24 11 XM_B_SpammyWords 65761 51.92 67.36 43.96 12 XM_B_Unicode3 51834 48.22 53.10 45.71 13 LOC_TINY_FONT_1 50516 40.00 51.74 33.94 14 XM_DK_Undo_02 43224 19.06 44.28 6.07 15 HTML_FONT_LOW_CONTRAST 38039 34.96 38.96 32.89 16 BAYES_50 37323 52.95 38.23 60.53 17 XM_B_SpammyWords2 36369 25.48 37.25 19.42 18 BAYES_99 32837 14.75 33.64 5.03 19 FVGT_m_MULTI_ODD 32500 30.13 33.29 28.50 20 DKIM_VALID_EF 30936 30.78 31.69 30.31 21 TR_XM_DKIM_Undo 30390 12.06 31.13 2.24 22 MIME_HTML_ONLY 29865 24.55 30.59 21.44 23 T_KAM_HTML_FONT_INVALID 26455 23.83 27.10 22.15 24 BAYES_999 25488 11.38 26.11 3.79 25 TR_DCC_Bayes_99 24262 9.74 24.85 1.95 26 TR_XM_DK_Unsub 23978 19.79 24.56 17.33 27 XM_Multi_Part_URI 22226 18.61 22.77 16.46 28 XMSubLong 20905 22.16 21.41 22.54 29 RCVD_IN_MSPIKE_H2 20838 17.48 21.34 15.49 30 DCC_CHECK_NEGATIVE 20586 41.19 21.09 51.54 31 UNPARSEABLE_RELAY 20268 16.69 20.76 14.60 32 XM_B_Unsub 17975 13.80 18.41 11.42 33 RELAYCOUNTRY_META 17649 8.78 18.08 3.99 34 T_TM2_M_HEADER_IN_MSG 17393 22.74 17.82 25.27 35 TR_XM_BayesUnsub 17260 11.56 17.68 8.41 36 TR_MAX_INTL_RELAY 14747 9.92 15.11 7.24 37 XM_B_SpammyWords3 13093 8.02 13.41 5.25 38 TR_XM_SpammyRelay 12732 5.71 13.04 1.94 39 BOTNET_IPINHOSTNAME 12132 6.54 12.43 3.50 40 TR_XM_UnparsRelay 11429 5.49 11.71 2.29 41 RCVD_IN_BL_SPAMCOP_NET 11319 4.33 11.59 0.58 42 TR_XM_SpammyWords2 11225 4.35 11.50 0.66 43 FSL_BULK_SIG 10346 10.67 10.60 10.71 44 RCVD_IN_MSPIKE_WL 9270 14.90 9.50 17.68 45 XM_Evil_Numbers_Gen 9191 10.77 9.41 11.47 46 BAYES_80 9062 5.98 9.28 4.28 47 BOTNET 8909 3.83 9.13 1.11 48 BAYES_60 8130 7.99 8.33 7.82 49 HTML_IMAGE_RATIO_02 8021 6.17 8.22 5.12 50 LOTS_OF_MONEY 7842 6.19 8.03 5.24 51 XM_B_Phish_Phrases 7291 6.42 7.47 5.87 52 UNTRUSTED_Relay 7008 3.83 7.18 2.10 53 TR_XM_SpammyWords4 6866 4.82 7.03 3.69 54 RELAYCOUNTRY_CA 6560 2.98 6.72 1.06 55 LotsOfNums_01 6121 7.43 6.27 8.03 56 XMSubMetaSx_00 6101 4.76 6.25 3.99 57 XM_UncommonTLD01 5907 5.17 6.05 4.71 58 XM_H_Long_From01 5828 5.54 5.97 5.31 59 RCVD_IN_MSPIKE_BL 5627 2.52 5.76 0.84 60 TR_XM_MSPIKECOMBO 5627 2.52 5.76 0.84 61 MPART_ALT_DIFF 5440 5.14 5.57 4.92 62 XM_H_GMP 5363 6.10 5.49 6.41 63 TR_XM_SPAMCOP 5356 1.94 5.49 0.11 64 BAYES_95 5348 3.82 5.48 2.96 65 HTML_IMAGE_RATIO_04 5325 4.54 5.45 4.07 66 XM_Body_Dirty_Words 5313 3.46 5.44 2.43 67 RCVD_IN_MSPIKE_H3 4944 6.78 5.06 7.67 68 XMNumbers 4667 5.42 4.78 5.75 69 XM_B_PhoneNumber 4646 6.67 4.76 7.65 70 XMStrtUSub 4615 5.44 4.73 5.81 71 TR_XM_SpammyWords5 4548 3.10 4.66 2.29 72 XM_CamelCaseFrm001 4380 2.81 4.49 1.94 73 TR_XM_PhishingBody 4325 2.41 4.43 1.36 74 T_XMDrugObfuBody_14 4262 2.97 4.37 2.24 75 XMSexyCombo_05 4105 2.57 4.20 1.73 76 TooManyTo_001 4045 5.95 4.14 6.88 77 XM_B_Investor 3873 2.48 3.97 1.72 78 TR_XM_NoHeaderRelay 3822 1.48 3.91 0.23 79 DKIM_INVALID 3759 2.25 3.85 1.42 80 TM2_M_VERY_LONG_WORD 3683 2.67 3.77 2.11 81 RCVD_IN_MSPIKE_L3 3659 1.65 3.75 0.56 82 TR_XM_SpammyWords3 3650 1.50 3.74 0.35 83 HTML_IMAGE_RATIO_06 3617 3.77 3.70 3.81 84 XM_B_SpammyTLD 3556 3.11 3.64 2.84 85 MIME_HTML_MOSTLY 3533 3.28 3.62 3.10 86 TM2_M_URI_OPT_OUT 3504 2.42 3.59 1.82 87 RCVD_IN_VALIDITY_RPBL 3369 1.32 3.45 0.23 88 XM_UB50 3347 2.03 3.43 1.31 89 FROM_EXCESS_BASE64 3212 2.86 3.29 2.65 90 XM_OfRef6 3195 1.66 3.27 0.83 91 XM_URI_RBL 3095 1.34 3.17 0.39 92 XM_SPF_SoftFail 2971 1.91 3.04 1.32 93 MIME_HTML_ONLY_MULTI 2895 2.59 2.97 2.40 94 T_FILL_THIS_FORM_SHORT 2870 1.41 2.94 0.62 95 RELAYCOUNTRY_AU 2846 1.34 2.92 0.53 96 RCVD_IN_MSPIKE_H4 2753 3.29 2.82 3.54 97 XM_B_Unsub2 2726 1.74 2.79 1.19 98 USER_IN_DEF_DKIM_WL 2704 12.29 2.77 17.20 99 RCVD_IN_VALIDITY_SAFE 2560 4.97 2.62 6.17 100 HTML_IMAGE_RATIO_08 2451 2.52 2.51 2.52 101 T_XMDrugObfuBody_08 2411 1.67 2.47 1.26 102 MIME_QP_LONG_LINE 2321 3.48 2.38 4.04 103 T_XMHurry_00 2266 1.38 2.32 0.90 104 T_TooManySym_01 2234 5.97 2.29 7.87 105 ALL_TRUSTED 2210 11.08 2.26 15.63 106 SUBJ_ALL_CAPS 2194 1.93 2.25 1.76 107 XMSubMetaI_00 2101 1.39 2.15 1.00 108 MAILING_LIST_MULTI 2095 2.72 2.15 3.02 109 SHOPIFY_IMG_NOT_RCVD_SFY 2076 1.00 2.13 0.42 110 RDNS_DYNAMIC 2059 0.87 2.11 0.24 111 XMDiploma_00 2058 1.47 2.11 1.14 112 PDS_RDNS_DYNAMIC_FP 2014 0.74 2.06 0.06 113 SpammyFromTLD_01 1982 0.99 2.03 0.46 114 SpammyFromTLD_02 1970 0.90 2.02 0.32 115 XM_B_URI_Unicode 1955 1.81 2.00 1.71 116 TR_MetaPhish_Combo_01 1919 2.14 1.97 2.23 117 XMBrknScrpt_02 1908 1.35 1.95 1.04 118 XM_B_SpammyWords4 1859 1.08 1.90 0.66 119 RCVD_IN_PSBL 1841 1.07 1.89 0.65 120 BAYES_40 1819 3.60 1.86 4.49 121 RCVD_IN_VALIDITY_CERTIFIED 1816 4.00 1.86 5.10 122 KHOP_HELO_FCRDNS 1801 1.55 1.84 1.40 123 XMStockSpam_06 1768 1.66 1.81 1.59 124 XM_H_Long_From02 1714 1.16 1.76 0.85 125 TVD_RCVD_IP 1710 1.42 1.75 1.25 126 TR_XM_INV_DKIM 1703 0.68 1.74 0.14 127 SCC_BODY_URI_ONLY 1614 2.46 1.65 2.87 128 RCVD_IN_MSPIKE_H5 1573 4.82 1.61 6.47 129 XMBdyGiftCard01 1562 1.19 1.60 0.97 130 RCVD_IN_XBL 1542 0.55 1.58 0.02 131 TR_XM_MSPIKECOMBO2 1539 0.55 1.58 0.01 132 XMClaimOffer 1514 0.65 1.55 0.19 133 XM_SendGrid 1472 1.49 1.51 1.49 134 BAYES_20 1467 2.54 1.50 3.07 135 RCVD_IN_PBL 1447 0.99 1.48 0.73 136 XM_B_DNDMA 1442 0.93 1.48 0.64 137 XM_HighProb1 1421 0.50 1.46 0.00 138 HELO_DYNAMIC_SPLIT_IP 1390 0.49 1.42 0.00 139 MPART_ALT_DIFF_COUNT 1381 0.84 1.41 0.54 140 HTML_MIME_NO_HTML_TAG 1380 1.78 1.41 1.96 141 XMPhish30 1369 0.75 1.40 0.42 142 XMBody_17 1363 0.75 1.40 0.41 143 T_REMOTE_IMAGE 1347 2.56 1.38 3.17 144 RCVD_IN_MSPIKE_L4 1340 0.65 1.37 0.27 145 RCVD_IN_SBL_CSS 1317 0.47 1.35 0.01 146 TR_XM_PHPForged 1316 0.97 1.35 0.77 147 TR_XM_Base64_M1 1309 0.97 1.34 0.79 148 TR_Mismatch_TLD_02 1302 0.51 1.33 0.08 149 THIS_AD 1301 0.73 1.33 0.42 150 XM_ProductURIs 1298 1.39 1.33 1.41 151 DKIM_ADSP_NXDOMAIN 1297 0.71 1.33 0.40 152 DIET_1 1294 0.75 1.33 0.45 153 T_XMDrugObfuBody_00 1293 0.78 1.32 0.50 154 TR_XM_FormFill2 1291 0.97 1.32 0.79 155 TR_XM_PHPDW 1285 0.96 1.32 0.77 156 BOTNET_NORDNS 1281 0.45 1.31 0.00 157 TR_XM_InvalidRelay 1272 0.46 1.30 0.02 158 RELAYCOUNTRY_FR 1268 0.62 1.30 0.27 159 XM_H_PHPOS 1265 0.95 1.30 0.76 160 URI_NOVOWEL 1160 1.31 1.19 1.37 161 XM_B_COPY_HTML 1145 0.88 1.17 0.73 162 TR_XM_MaxSPIKE 1138 0.40 1.17 0.01 163 XM_UB99 1129 0.39 1.16 0.00 164 MultiRelay_CC 1127 0.52 1.15 0.19 165 XM_B_SEO 1124 0.57 1.15 0.28 166 XM_DK_Undo_01 1117 1.42 1.14 1.56 167 TR_XM_FormFill 1116 0.39 1.14 0.01 168 RELAYCOUNTRY_GB 1116 0.74 1.14 0.53 169 TR_XM_Base64_L1 1082 0.52 1.11 0.22 170 HTML_TAG_BALANCE_BODY 1073 0.74 1.10 0.56 171 XM_B_Phish66 1071 0.57 1.10 0.30 172 URI_HEX 1071 1.06 1.10 1.04 173 URI_TRY_3LD 997 0.71 1.02 0.55 174 T_STY_INVIS_DIRECT 986 0.70 1.01 0.54 175 XMReplyNow 984 0.51 1.01 0.25 176 FONT_INVIS_LONG_LINE 979 0.37 1.00 0.04 177 XM_DIRTYINTL 974 0.40 1.00 0.10 178 HK_RANDOM_REPLYTO 960 0.43 0.98 0.14 179 XMPhish14 955 0.53 0.98 0.30 180 HTTPS_HTTP_MISMATCH 953 0.61 0.98 0.42 181 XM_UB60 951 0.38 0.97 0.07 182 BOUNCE_MESSAGE 949 3.70 0.97 5.11 183 ANY_BOUNCE_MESSAGE 949 3.70 0.97 5.11 184 TM2_M_A_HREF_HREF 937 0.47 0.96 0.22 185 TR_XM_SEO4 924 0.39 0.95 0.10 186 DKIM_ADSP_CUSTOM_MED 921 0.84 0.94 0.79 187 RELAYCOUNTRY_CN 919 0.40 0.94 0.12 188 RCVD_IN_IADB_LISTED 902 2.17 0.92 2.82 189 TR_Mismatch_TLD_01 881 0.49 0.90 0.28 190 BAD_CREDIT 857 0.31 0.88 0.02 191 TR_Symld_Words 838 1.08 0.86 1.20 192 RCVD_IN_IADB_SPF 832 1.94 0.85 2.51 193 TR_XM_RelayPhish 815 0.32 0.83 0.05 194 HTML_FONT_FACE_BAD 813 0.57 0.83 0.44 195 RCVD_IN_IADB_SENDERID 812 1.78 0.83 2.27 196 RCVD_IN_IADB_DK 806 1.75 0.83 2.23 197 XM_UB999 805 0.28 0.82 0.00 198 TR_LOTS_OF_MONEY2 788 0.34 0.81 0.09 199 T_MONEY_PERCENT 788 0.34 0.81 0.09 200 XMBody_78 786 0.47 0.81 0.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 188797 99.58 99.46 99.64 2 HTML_MESSAGE 158719 87.61 95.08 83.76 3 RELAYCOUNTRY_US 152696 80.79 81.20 80.59 4 DKIM_SIGNED 145413 81.34 90.26 76.74 5 XM_DK_Pass 143775 79.66 87.00 75.88 6 DKIM_VALID 142716 79.09 86.41 75.32 7 XM_B_Unicode 135100 76.30 85.99 71.30 8 DKIM_VALID_AU 119828 64.81 67.87 63.24 9 BAYES_50 114693 52.95 38.23 60.53 10 XMListUnsubscribeExists 104364 60.38 70.68 55.08 11 DCC_CHECK_NEGATIVE 97666 41.19 21.09 51.54 12 DCC_CHECK 91760 58.65 78.50 48.43 13 XM_B_Unicode3 86617 48.22 53.10 45.71 14 XM_B_SpammyWords 83300 51.92 67.36 43.96 15 LOC_TINY_FONT_1 64319 40.00 51.74 33.94 16 HTML_FONT_LOW_CONTRAST 62321 34.96 38.96 32.89 17 DKIM_VALID_EF 57429 30.78 31.69 30.31 18 FVGT_m_MULTI_ODD 53998 30.13 33.29 28.50 19 T_TM2_M_HEADER_IN_MSG 47889 22.74 17.82 25.27 20 XMSubLong 42715 22.16 21.41 22.54 21 T_KAM_HTML_FONT_INVALID 41962 23.83 27.10 22.15 22 MIME_HTML_ONLY 40630 24.55 30.59 21.44 23 XM_B_SpammyWords2 36800 25.48 37.25 19.42 24 RCVD_IN_MSPIKE_WL 33495 14.90 9.50 17.68 25 TR_XM_DK_Unsub 32844 19.79 24.56 17.33 26 USER_IN_DEF_DKIM_WL 32586 12.29 2.77 17.20 27 XM_Multi_Part_URI 31193 18.61 22.77 16.46 28 ALL_TRUSTED 29615 11.08 2.26 15.63 29 RCVD_IN_MSPIKE_H2 29355 17.48 21.34 15.49 30 UNPARSEABLE_RELAY 27661 16.69 20.76 14.60 31 XM_Evil_Numbers_Gen 21741 10.77 9.41 11.47 32 XM_B_Unsub 21642 13.80 18.41 11.42 33 FSL_BULK_SIG 20297 10.67 10.60 10.71 34 BAYES_00 19130 6.84 0.51 10.10 35 TR_XM_BayesUnsub 15934 11.56 17.68 8.41 36 LotsOfNums_01 15217 7.43 6.27 8.03 37 T_TooManySym_01 14911 5.97 2.29 7.87 38 BAYES_60 14824 7.99 8.33 7.82 39 RCVD_IN_MSPIKE_H3 14528 6.78 5.06 7.67 40 XM_B_PhoneNumber 14504 6.67 4.76 7.65 41 XM_DKIMWhitelistDomains 14415 5.02 0.01 7.61 42 TR_MAX_INTL_RELAY 13720 9.92 15.11 7.24 43 TR_XM_DK_Bayes 13568 4.85 0.38 7.16 44 TR_XM_DK_Bayes1 13462 4.82 0.37 7.10 45 TooManyTo_001 13043 5.95 4.14 6.88 46 RCVD_IN_MSPIKE_H5 12267 4.82 1.61 6.47 47 XM_H_GMP 12137 6.10 5.49 6.41 48 TR_XM_DK_Bayes2 11700 4.16 0.26 6.17 49 RCVD_IN_VALIDITY_SAFE 11695 4.97 2.62 6.17 50 XM_DK_Undo_02 11504 19.06 44.28 6.07 51 XM_B_Phish_Phrases 11128 6.42 7.47 5.87 52 XMStrtUSub 11009 5.44 4.73 5.81 53 XMNumbers 10904 5.42 4.78 5.75 54 XM_H_Long_From01 10071 5.54 5.97 5.31 55 XM_B_SpammyWords3 9939 8.02 13.41 5.25 56 LOTS_OF_MONEY 9934 6.19 8.03 5.24 57 HTML_IMAGE_RATIO_02 9706 6.17 8.22 5.12 58 ANY_BOUNCE_MESSAGE 9686 3.70 0.97 5.11 59 BOUNCE_MESSAGE 9685 3.70 0.97 5.11 60 RCVD_IN_VALIDITY_CERTIFIED 9660 4.00 1.86 5.10 61 BAYES_99 9522 14.75 33.64 5.03 62 MPART_ALT_DIFF 9318 5.14 5.57 4.92 63 XM_UncommonTLD01 8928 5.17 6.05 4.71 64 BAYES_40 8513 3.60 1.86 4.49 65 BAYES_80 8105 5.98 9.28 4.28 66 T_TooManySym_02 7955 3.00 0.69 4.20 67 HTML_IMAGE_RATIO_04 7715 4.54 5.45 4.07 68 MIME_QP_LONG_LINE 7659 3.48 2.38 4.04 69 XMSubMetaSx_00 7565 4.76 6.25 3.99 70 RELAYCOUNTRY_META 7565 8.78 18.08 3.99 71 HTML_IMAGE_RATIO_06 7210 3.77 3.70 3.81 72 BAYES_999 7178 11.38 26.11 3.79 73 TR_XM_SpammyWords4 6984 4.82 7.03 3.69 74 RCVD_IN_MSPIKE_H4 6700 3.29 2.82 3.54 75 BOTNET_IPINHOSTNAME 6636 6.54 12.43 3.50 76 INVALID_MSGID 6384 2.30 0.24 3.37 77 TO_MALFORMED 6300 2.21 0.06 3.32 78 T_REMOTE_IMAGE 6012 2.56 1.38 3.17 79 TooManyTo_002 5893 2.28 0.66 3.11 80 MIME_HTML_MOSTLY 5873 3.28 3.62 3.10 81 BAYES_20 5813 2.54 1.50 3.07 82 MAILING_LIST_MULTI 5726 2.72 2.15 3.02 83 BAYES_95 5610 3.82 5.48 2.96 84 SCC_BODY_URI_ONLY 5442 2.46 1.65 2.87 85 XM_B_SpammyTLD 5383 3.11 3.64 2.84 86 RCVD_IN_IADB_LISTED 5338 2.17 0.92 2.82 87 FROM_EXCESS_BASE64 5012 2.86 3.29 2.65 88 HTML_IMAGE_RATIO_08 4779 2.52 2.51 2.52 89 RCVD_IN_IADB_SPF 4751 1.94 0.85 2.51 90 XM_Body_Dirty_Words 4612 3.46 5.44 2.43 91 MIME_HTML_ONLY_MULTI 4550 2.59 2.97 2.40 92 TR_XM_SpammyWords5 4346 3.10 4.66 2.29 93 TR_XM_UnparsRelay 4330 5.49 11.71 2.29 94 RCVD_IN_IADB_SENDERID 4305 1.78 0.83 2.27 95 T_XMDrugObfuBody_14 4252 2.97 4.37 2.24 96 TR_XM_DKIM_Undo 4241 12.06 31.13 2.24 97 RCVD_IN_IADB_DK 4226 1.75 0.83 2.23 98 TR_MetaPhish_Combo_01 4225 2.14 1.97 2.23 99 TM2_M_VERY_LONG_WORD 3994 2.67 3.77 2.11 100 UNTRUSTED_Relay 3975 3.83 7.18 2.10 101 HTML_MIME_NO_HTML_TAG 3721 1.78 1.41 1.96 102 TR_DCC_Bayes_99 3691 9.74 24.85 1.95 103 XM_CamelCaseFrm001 3684 2.81 4.49 1.94 104 TR_XM_SpammyRelay 3669 5.71 13.04 1.94 105 XM_PDF 3592 1.40 0.44 1.90 106 RCVD_IN_IADB_VOUCHED 3469 1.33 0.34 1.83 107 TM2_M_URI_OPT_OUT 3456 2.42 3.59 1.82 108 SUBJ_ALL_CAPS 3339 1.93 2.25 1.76 109 XMSexyCombo_05 3270 2.57 4.20 1.73 110 BAYES_05 3268 1.40 0.78 1.72 111 XM_B_Investor 3252 2.48 3.97 1.72 112 XM_B_URI_Unicode 3243 1.81 2.00 1.71 113 T_TooManySym_03 3234 1.25 0.37 1.71 114 XM_B_FormFill 3141 1.10 0.01 1.66 115 XMStockSpam_06 3005 1.66 1.81 1.59 116 IN_HORDE_ADDRESS_BOOK 2966 1.06 0.09 1.57 117 XM_DK_Undo_01 2965 1.42 1.14 1.56 118 XM_SendGrid 2820 1.49 1.51 1.49 119 XMGappySubj_01 2764 1.04 0.23 1.46 120 DKIM_INVALID 2697 2.25 3.85 1.42 121 XM_ProductURIs 2679 1.39 1.33 1.41 122 TVD_SPACE_RATIO 2661 1.04 0.33 1.40 123 KHOP_HELO_FCRDNS 2653 1.55 1.84 1.40 124 URI_NOVOWEL 2594 1.31 1.19 1.37 125 TR_XM_PhishingBody 2583 2.41 4.43 1.36 126 URI_OPTOUT_3LD 2558 1.08 0.56 1.35 127 XM_GoogleGroups 2541 1.14 0.76 1.34 128 XM_SPF_SoftFail 2508 1.91 3.04 1.32 129 RCVD_IN_IADB_OPTIN 2477 0.94 0.23 1.31 130 XM_UB50 2473 2.03 3.43 1.31 131 T_TVD_MIME_NO_HEADERS 2431 0.86 0.04 1.28 132 T_XMDrugObfuBody_08 2389 1.67 2.47 1.26 133 TVD_RCVD_IP 2377 1.42 1.75 1.25 134 TR_Symld_Words 2275 1.08 0.86 1.20 135 XM_B_Unsub2 2258 1.74 2.79 1.19 136 XMDiploma_00 2159 1.47 2.11 1.14 137 BOTNET 2100 3.83 9.13 1.11 138 TooManyTo_003 2043 0.91 0.59 1.08 139 RELAYCOUNTRY_CA 2005 2.98 6.72 1.06 140 XMBrknScrpt_02 1976 1.35 1.95 1.04 141 URI_HEX 1975 1.06 1.10 1.04 142 XMSubMetaI_00 1902 1.39 2.15 1.00 143 XMGappySubj_02 1901 0.70 0.10 1.00 144 XMBdyGiftCard01 1841 1.19 1.60 0.97 145 TR_XM_DK_SendGrid 1809 0.89 0.76 0.95 146 XMBSHREFv2 1744 0.71 0.32 0.92 147 T_XMHurry_00 1699 1.38 2.32 0.90 148 TooManyTo_004 1623 0.75 0.56 0.86 149 XM_H_Long_From02 1611 1.16 1.76 0.85 150 RCVD_IN_MSPIKE_BL 1597 2.52 5.76 0.84 151 TR_XM_MSPIKECOMBO 1597 2.52 5.76 0.84 152 XM_OfRef6 1578 1.66 3.27 0.83 153 TR_XM_FormFill2 1495 0.97 1.32 0.79 154 TR_XM_Base64_M1 1489 0.97 1.34 0.79 155 DKIM_ADSP_CUSTOM_MED 1488 0.84 0.94 0.79 156 TR_XM_PHPDW 1466 0.96 1.32 0.77 157 TR_XM_PHPForged 1463 0.97 1.35 0.77 158 XM_H_PHPOS 1449 0.95 1.30 0.76 159 XM_B_COPY_HTML 1390 0.88 1.17 0.73 160 RCVD_IN_PBL 1382 0.99 1.48 0.73 161 TooManyTo_005 1357 0.65 0.52 0.72 162 HTML_IMAGE_ONLY_32 1344 0.55 0.24 0.71 163 XMLngstWrd_00 1322 0.56 0.30 0.70 164 XMNoVowels 1264 0.60 0.48 0.67 165 TR_XM_SpammyWords2 1260 4.35 11.50 0.66 166 XM_B_SpammyWords4 1255 1.08 1.90 0.66 167 RCVD_IN_PSBL 1238 1.07 1.89 0.65 168 XM_B_DNDMA 1220 0.93 1.48 0.64 169 XM_H_PHPMailer 1184 0.63 0.64 0.62 170 T_FILL_THIS_FORM_SHORT 1181 1.41 2.94 0.62 171 RCVD_IN_BL_SPAMCOP_NET 1101 4.33 11.59 0.58 172 RCVD_IN_MSPIKE_L3 1066 1.65 3.75 0.56 173 HTML_TAG_BALANCE_BODY 1056 0.74 1.10 0.56 174 URI_TRY_3LD 1034 0.71 1.02 0.55 175 XMBody_95 1030 0.42 0.18 0.54 176 XM_ShortIntro_01 1028 0.54 0.54 0.54 177 T_STY_INVIS_DIRECT 1024 0.70 1.01 0.54 178 MPART_ALT_DIFF_COUNT 1023 0.84 1.41 0.54 179 RELAYCOUNTRY_AU 1011 1.34 2.92 0.53 180 USER_IN_WELCOMELIST 999 0.35 0.00 0.53 181 USER_IN_WHITELIST 999 0.35 0.00 0.53 182 MAY_BE_FORGED 998 0.35 0.00 0.53 183 RELAYCOUNTRY_GB 997 0.74 1.14 0.53 184 TM2_M_OBFU_COMMENT 996 0.61 0.77 0.53 185 SUBJ_DOLLARS 977 0.55 0.63 0.52 186 XMGenDplmaNmb 976 0.57 0.69 0.52 187 T_XMDrugObfuBody_00 947 0.78 1.32 0.50 188 FILL_THIS_FORM 946 0.45 0.35 0.50 189 FORGED_GMAIL_RCVD 915 0.56 0.71 0.48 190 NML_ADSP_CUSTOM_MED 914 0.57 0.74 0.48 191 XMSolicitRefs_0 894 0.48 0.50 0.47 192 XMCapTrack 882 0.44 0.38 0.47 193 PLING_QUERY 876 0.53 0.65 0.46 194 MSGID_FROM_MTA_HEADER 874 0.35 0.14 0.46 195 SpammyFromTLD_01 874 0.99 2.03 0.46 196 XMLngstWrd_01 869 0.39 0.26 0.46 197 DIET_1 847 0.75 1.33 0.45 198 RELAYCOUNTRY_DE 843 0.46 0.50 0.44 199 T_TooManySym_04 840 0.35 0.18 0.44 200 XMSlimDrugH 832 0.44 0.44 0.44 ----------------------------------------------------------------------