Email: 429210 Autolearn: 0 AvgScore: 5.21 AvgScanTime: 1.33 sec Spam: 126750 Autolearn: 0 AvgScore: 14.93 AvgScanTime: 1.48 sec Ham: 302460 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.27 sec Time Spent Running SA: 158.80 hours Time Spent Processing Spam: 52.18 hours Time Spent Processing Ham: 106.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 124575 99.15 98.28 99.51 2 HTML_MESSAGE 120028 89.32 94.70 87.06 3 DKIM_SIGNED 111834 74.82 88.23 69.20 4 XM_DK_Pass 107487 73.12 84.80 68.22 5 DKIM_VALID 106651 72.31 84.14 67.36 6 XM_B_Unicode 105813 72.29 83.48 67.61 7 RELAYCOUNTRY_US 102637 82.08 80.98 82.54 8 DCC_CHECK 94067 47.95 74.21 36.94 9 XM_B_SpammyWords 89642 53.94 70.72 46.91 10 XMListUnsubscribeExists 84352 50.41 66.55 43.65 11 DKIM_VALID_AU 83627 58.25 65.98 55.01 12 XM_B_Unicode3 62208 42.54 49.08 39.79 13 LOC_TINY_FONT_1 61429 32.89 48.46 26.37 14 XM_DK_Undo_02 53246 15.93 42.01 5.00 15 XM_B_SpammyWords2 53027 26.72 41.84 20.39 16 BAYES_50 49969 55.45 39.42 62.17 17 HTML_FONT_LOW_CONTRAST 48597 32.86 38.34 30.56 18 FVGT_m_MULTI_ODD 44237 27.91 34.90 24.98 19 DKIM_VALID_EF 42749 29.90 33.73 28.30 20 BAYES_99 40825 11.98 32.21 3.51 21 TR_XM_DKIM_Undo 39007 10.64 30.77 2.20 22 MIME_HTML_ONLY 37385 22.49 29.50 19.55 23 T_KAM_HTML_FONT_INVALID 35613 21.90 28.10 19.31 24 BAYES_999 31816 9.28 25.10 2.65 25 XMSubLong 31574 22.84 24.91 21.98 26 DCC_CHECK_NEGATIVE 30739 51.57 24.25 63.01 27 TR_XM_DK_Unsub 30641 15.89 24.17 12.42 28 T_TM2_M_HEADER_IN_MSG 29627 31.83 23.37 35.37 29 XM_Multi_Part_URI 28925 16.38 22.82 13.68 30 TR_DCC_Bayes_99 28621 7.60 22.58 1.33 31 XM_B_Unsub 23633 12.74 18.65 10.26 32 UNPARSEABLE_RELAY 23309 13.41 18.39 11.33 33 RCVD_IN_MSPIKE_H2 23214 15.43 18.31 14.22 34 TR_XM_BayesUnsub 22540 10.35 17.78 7.23 35 RELAYCOUNTRY_META 22008 7.49 17.36 3.35 36 TR_MAX_INTL_RELAY 18579 8.41 14.66 5.79 37 LOTS_OF_MONEY 18532 8.42 14.62 5.82 38 XM_B_SpammyWords3 17796 8.13 14.04 5.66 39 TR_XM_SpammyWords4 17142 6.67 13.52 3.80 40 TR_XM_SpammyRelay 16980 5.20 13.40 1.77 41 TR_XM_SpammyWords2 15627 4.01 12.33 0.52 42 RCVD_IN_BL_SPAMCOP_NET 15075 3.92 11.89 0.58 43 BOTNET_IPINHOSTNAME 14139 5.52 11.16 3.16 44 FSL_BULK_SIG 13502 9.25 10.65 8.66 45 XM_B_Phish_Phrases 12634 8.25 9.97 7.53 46 RCVD_IN_MSPIKE_WL 12514 14.67 9.87 16.68 47 XM_Evil_Numbers_Gen 12255 11.14 9.67 11.76 48 BAYES_80 11868 5.30 9.36 3.60 49 TR_XM_UnparsRelay 11802 3.83 9.31 1.53 50 LotsOfNums_01 10393 12.08 8.20 13.71 51 BOTNET 10265 3.34 8.10 1.34 52 BAYES_60 9863 6.53 7.78 6.01 53 XM_B_PhoneNumber 8932 9.32 7.05 10.27 54 HTML_IMAGE_RATIO_02 8897 5.20 7.02 4.43 55 XMSubMetaSx_00 8861 4.32 6.99 3.20 56 XM_Body_Dirty_Words 8833 4.11 6.97 2.91 57 RELAYCOUNTRY_CA 8429 2.53 6.65 0.80 58 XM_UncommonTLD01 8062 4.60 6.36 3.86 59 UNTRUSTED_Relay 7988 2.84 6.30 1.39 60 TR_XM_SPAMCOP 7910 1.96 6.24 0.17 61 XM_B_Investor 7224 2.79 5.70 1.56 62 XM_H_Long_From01 7198 5.43 5.68 5.33 63 RCVD_IN_MSPIKE_H3 7144 6.86 5.64 7.37 64 MPART_ALT_DIFF 7055 4.81 5.57 4.50 65 XM_H_GMP 6534 5.35 5.16 5.43 66 TM2_M_VERY_LONG_WORD 6390 8.00 5.04 9.23 67 HTML_IMAGE_RATIO_04 6350 5.00 5.01 5.00 68 BAYES_95 6237 3.00 4.92 2.19 69 RCVD_IN_MSPIKE_BL 6144 2.01 4.85 0.82 70 TR_XM_MSPIKECOMBO 6082 2.00 4.80 0.82 71 TR_XM_SpammyWords5 5762 2.37 4.55 1.46 72 XMSexyCombo_05 5757 2.24 4.54 1.27 73 TR_XM_PhishingBody 5668 2.31 4.47 1.41 74 T_XMDrugObfuBody_14 5351 2.57 4.22 1.88 75 XMStrtUSub 5247 4.54 4.14 4.70 76 DKIM_INVALID 5183 2.51 4.09 1.84 77 XM_B_SpammyTLD 4982 3.05 3.93 2.68 78 TR_XM_SpammyWords3 4783 1.33 3.77 0.30 79 XM_SPF_SoftFail 4765 2.07 3.76 1.36 80 TooManyTo_001 4750 7.33 3.75 8.83 81 XM_OfRef6 4730 1.82 3.73 1.02 82 XM_CamelCaseFrm001 4570 2.34 3.61 1.81 83 MIME_HTML_MOSTLY 4528 2.75 3.57 2.41 84 HTML_IMAGE_RATIO_06 4440 2.88 3.50 2.61 85 RCVD_IN_MSPIKE_L3 4291 1.36 3.39 0.51 86 XM_B_Unsub2 4251 1.85 3.35 1.22 87 XMNumbers 4201 3.92 3.31 4.18 88 TR_XM_NoHeaderRelay 4165 1.13 3.29 0.22 89 MIME_HTML_ONLY_MULTI 4061 2.72 3.20 2.52 90 XM_URI_RBL 4036 1.12 3.18 0.26 91 T_FILL_THIS_FORM_SHORT 3974 1.49 3.14 0.80 92 RCVD_IN_VALIDITY_RPBL 3720 0.93 2.93 0.09 93 MIME_QP_LONG_LINE 3641 4.14 2.87 4.67 94 TM2_M_URI_OPT_OUT 3602 2.02 2.84 1.68 95 XMDiploma_00 3588 1.96 2.83 1.60 96 XMBody_17 3539 1.07 2.79 0.35 97 RELAYCOUNTRY_AU 3507 1.25 2.77 0.62 98 T_TooManySym_01 3421 4.89 2.70 5.81 99 XM_B_SpammyWords4 3373 1.23 2.66 0.63 100 XM_B_URI_Unicode 3351 1.97 2.64 1.69 101 T_XMDrugObfuBody_08 3282 1.68 2.59 1.30 102 XM_UB50 3235 1.34 2.55 0.83 103 XMStockSpam_06 3186 1.56 2.51 1.15 104 RCVD_IN_MSPIKE_H4 3066 3.22 2.42 3.55 105 USER_IN_DEF_DKIM_WL 3011 9.73 2.38 12.81 106 ALL_TRUSTED 2898 11.08 2.29 14.77 107 HTML_IMAGE_RATIO_08 2851 2.30 2.25 2.32 108 ANY_BOUNCE_MESSAGE 2849 8.72 2.25 11.44 109 BOUNCE_MESSAGE 2848 8.72 2.25 11.44 110 SpammyFromTLD_02 2804 1.09 2.21 0.62 111 T_REMOTE_IMAGE 2798 3.12 2.21 3.50 112 RCVD_IN_SBL_CSS 2797 0.68 2.21 0.03 113 SUBJ_ALL_CAPS 2773 1.70 2.19 1.50 114 T_XMHurry_00 2647 0.99 2.09 0.53 115 HK_RANDOM_REPLYTO 2620 0.71 2.07 0.14 116 RCVD_IN_VALIDITY_SAFE 2544 3.28 2.01 3.81 117 FROM_EXCESS_BASE64 2542 1.77 2.01 1.68 118 KHOP_HELO_FCRDNS 2491 4.45 1.97 5.49 119 BAYES_40 2425 4.53 1.91 5.62 120 MAILING_LIST_MULTI 2424 2.35 1.91 2.53 121 RCVD_IN_XBL 2306 0.55 1.82 0.02 122 RCVD_IN_MSPIKE_H5 2304 4.59 1.82 5.76 123 SpammyFromTLD_01 2231 1.03 1.76 0.72 124 XMBrknScrpt_02 2211 1.14 1.74 0.89 125 TR_XM_INV_DKIM 2203 0.54 1.74 0.03 126 XMGenDplmaNmb 2196 1.16 1.73 0.92 127 T_XMDrugObfuBody_00 2129 1.12 1.68 0.89 128 TR_Symld_Words 2101 1.43 1.66 1.34 129 RCVD_IN_SBL 2078 0.48 1.64 0.00 130 RCVD_IN_VALIDITY_CERTIFIED 1999 2.64 1.58 3.08 131 RCVD_IN_SBL_DROP 1999 0.47 1.58 0.00 132 XMPhish30 1976 0.84 1.56 0.54 133 XM_DK_Undo_01 1962 1.57 1.55 1.57 134 TR_XM_MSPIKECOMBO2 1932 0.46 1.52 0.01 135 SHORTCIRCUIT 1920 0.45 1.51 0.00 136 RCVD_IN_ZEN_LASTEXTERNAL 1920 0.45 1.51 0.00 137 TR_Mismatch_TLD_02 1918 0.49 1.51 0.06 138 URI_TRY_3LD 1909 0.81 1.51 0.52 139 TR_XM_RelayPhish 1894 0.48 1.49 0.06 140 XM_ProductURIs 1862 0.72 1.47 0.41 141 TR_LOTS_OF_MONEY3 1836 0.60 1.45 0.25 142 HTML_MIME_NO_HTML_TAG 1831 2.14 1.44 2.44 143 RELAYCOUNTRY_GB 1829 0.80 1.44 0.53 144 BAYES_20 1822 3.09 1.44 3.78 145 SCC_BODY_URI_ONLY 1783 2.01 1.41 2.26 146 BOTNET_NORDNS 1769 0.42 1.40 0.01 147 XM_B_SEO 1748 0.61 1.38 0.29 148 TR_MetaPhish_Combo_01 1742 1.47 1.37 1.51 149 XM_H_Long_From02 1741 0.95 1.37 0.77 150 XM_SendGrid 1738 1.40 1.37 1.41 151 URI_NOVOWEL 1731 1.24 1.37 1.18 152 XM_B_COPY_HTML 1707 0.87 1.35 0.67 153 RCVD_IN_PBL 1665 0.89 1.31 0.72 154 XMBdyGiftCard01 1588 0.71 1.25 0.49 155 RELAYCOUNTRY_FR 1570 0.54 1.24 0.25 156 TM2_M_OBFU_COMMENT 1536 0.82 1.21 0.66 157 XM_B_Phish66 1532 0.54 1.21 0.27 158 XMBody_78 1490 0.58 1.18 0.33 159 URI_HEX 1486 1.27 1.17 1.32 160 XM_UB80 1472 0.35 1.16 0.01 161 SHOPIFY_IMG_NOT_RCVD_SFY 1472 0.51 1.16 0.24 162 DEAR_SOMETHING 1465 0.36 1.16 0.03 163 XM_UB99 1459 0.34 1.15 0.00 164 MISSING_HEADERS 1457 0.59 1.15 0.36 165 T_Symld_Words_02 1452 0.67 1.15 0.48 166 XM_B_DNDMA 1447 0.61 1.14 0.39 167 DIET_1 1424 0.59 1.12 0.37 168 RDNS_DYNAMIC 1421 0.45 1.12 0.17 169 RCVD_IN_IADB_LISTED 1418 2.64 1.12 3.27 170 HTTPS_HTTP_MISMATCH 1407 0.79 1.11 0.65 171 TR_LOTS_OF_MONEY2 1404 0.42 1.11 0.13 172 T_MONEY_PERCENT 1404 0.42 1.11 0.13 173 PDS_RDNS_DYNAMIC_FP 1401 0.36 1.11 0.05 174 RCVD_IN_PSBL 1400 0.56 1.10 0.33 175 XM_HighProb1 1399 0.33 1.10 0.00 176 TR_XM_SEO4 1380 0.42 1.09 0.14 177 XM_DIRTYINTL 1362 0.36 1.07 0.07 178 TR_XM_MaxSPIKE 1358 0.32 1.07 0.01 179 XMSubMetaSxObfu_03 1346 0.62 1.06 0.44 180 TR_XM_PHPForged 1339 0.65 1.06 0.48 181 DKIM_ADSP_CUSTOM_MED 1331 0.86 1.05 0.78 182 TR_XM_PHPDW 1318 0.65 1.04 0.49 183 TR_XM_InvalidRelay 1310 0.31 1.03 0.01 184 TR_XM_FormFill2 1306 0.65 1.03 0.49 185 RCVD_IN_IADB_SPF 1291 2.34 1.02 2.90 186 MultiRelay_CC 1282 0.40 1.01 0.14 187 XM_OfRef7 1282 0.49 1.01 0.28 188 XM_H_PHPOS 1279 0.63 1.01 0.48 189 TR_XM_FormFill 1255 0.30 0.99 0.01 190 RCVD_IN_MSPIKE_L4 1250 0.44 0.99 0.20 191 HK_SCAM 1241 0.30 0.98 0.01 192 LongTLD 1238 0.57 0.98 0.40 193 RELAYCOUNTRY_CN 1229 0.34 0.97 0.08 194 RCVD_IN_IADB_SENDERID 1219 2.10 0.96 2.58 195 MPART_ALT_DIFF_COUNT 1214 0.64 0.96 0.51 196 RCVD_IN_IADB_DK 1208 2.07 0.95 2.53 197 XMReplyNow 1196 0.45 0.94 0.25 198 TR_Mismatch_TLD_01 1172 0.46 0.92 0.26 199 J_POPCORN_WO_D 1146 0.51 0.90 0.34 200 NML_ADSP_CUSTOM_MED 1137 0.57 0.90 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 300973 99.15 98.28 99.51 2 HTML_MESSAGE 263321 89.32 94.70 87.06 3 RELAYCOUNTRY_US 249646 82.08 80.98 82.54 4 DKIM_SIGNED 209310 74.82 88.23 69.20 5 XM_DK_Pass 206347 73.12 84.80 68.22 6 XM_B_Unicode 204480 72.29 83.48 67.61 7 DKIM_VALID 203731 72.31 84.14 67.36 8 DCC_CHECK_NEGATIVE 190587 51.57 24.25 63.01 9 BAYES_50 188032 55.45 39.42 62.17 10 DKIM_VALID_AU 166385 58.25 65.98 55.01 11 XM_B_SpammyWords 141879 53.94 70.72 46.91 12 XMListUnsubscribeExists 132033 50.41 66.55 43.65 13 XM_B_Unicode3 120358 42.54 49.08 39.79 14 DCC_CHECK 111733 47.95 74.21 36.94 15 T_TM2_M_HEADER_IN_MSG 106984 31.83 23.37 35.37 16 HTML_FONT_LOW_CONTRAST 92429 32.86 38.34 30.56 17 DKIM_VALID_EF 85605 29.90 33.73 28.30 18 LOC_TINY_FONT_1 79757 32.89 48.46 26.37 19 FVGT_m_MULTI_ODD 75567 27.91 34.90 24.98 20 XMSubLong 66466 22.84 24.91 21.98 21 XM_B_SpammyWords2 61676 26.72 41.84 20.39 22 MIME_HTML_ONLY 59142 22.49 29.50 19.55 23 T_KAM_HTML_FONT_INVALID 58394 21.90 28.10 19.31 24 RCVD_IN_MSPIKE_WL 50461 14.67 9.87 16.68 25 ALL_TRUSTED 44671 11.08 2.29 14.77 26 RCVD_IN_MSPIKE_H2 43018 15.43 18.31 14.22 27 LotsOfNums_01 41473 12.08 8.20 13.71 28 XM_Multi_Part_URI 41362 16.38 22.82 13.68 29 USER_IN_DEF_DKIM_WL 38747 9.73 2.38 12.81 30 TR_XM_DK_Unsub 37572 15.89 24.17 12.42 31 XM_Evil_Numbers_Gen 35571 11.14 9.67 11.76 32 ANY_BOUNCE_MESSAGE 34594 8.72 2.25 11.44 33 BOUNCE_MESSAGE 34591 8.72 2.25 11.44 34 UNPARSEABLE_RELAY 34261 13.41 18.39 11.33 35 BAYES_00 32932 7.87 0.67 10.89 36 XM_B_PhoneNumber 31052 9.32 7.05 10.27 37 XM_B_Unsub 31044 12.74 18.65 10.26 38 TM2_M_VERY_LONG_WORD 27931 8.00 5.04 9.23 39 TooManyTo_001 26714 7.33 3.75 8.83 40 FSL_BULK_SIG 26205 9.25 10.65 8.66 41 MAY_BE_FORGED 24673 6.00 0.87 8.16 42 XM_B_Phish_Phrases 22764 8.25 9.97 7.53 43 RCVD_IN_MSPIKE_H3 22303 6.86 5.64 7.37 44 TR_XM_BayesUnsub 21868 10.35 17.78 7.23 45 TR_XM_DK_Bayes 20929 5.02 0.50 6.92 46 XM_DKIMWhitelistDomains 20691 4.82 0.01 6.84 47 TR_XM_DK_Bayes1 20591 4.94 0.49 6.81 48 BAYES_60 18172 6.53 7.78 6.01 49 LOTS_OF_MONEY 17598 8.42 14.62 5.82 50 T_TooManySym_01 17582 4.89 2.70 5.81 51 TR_MAX_INTL_RELAY 17512 8.41 14.66 5.79 52 RCVD_IN_MSPIKE_H5 17413 4.59 1.82 5.76 53 XM_B_SpammyWords3 17113 8.13 14.04 5.66 54 TR_XM_DK_Bayes2 17088 4.08 0.35 5.65 55 BAYES_40 17012 4.53 1.91 5.62 56 HTML_IMAGE_ONLY_32 16666 3.94 0.21 5.51 57 KHOP_HELO_FCRDNS 16597 4.45 1.97 5.49 58 XM_H_GMP 16431 5.35 5.16 5.43 59 XM_H_Long_From01 16129 5.43 5.68 5.33 60 XM_DK_Undo_02 15114 15.93 42.01 5.00 61 HTML_IMAGE_RATIO_04 15110 5.00 5.01 5.00 62 XMStrtUSub 14229 4.54 4.14 4.70 63 MIME_QP_LONG_LINE 14129 4.14 2.87 4.67 64 XM_PDF 14001 3.51 0.83 4.63 65 MPART_ALT_DIFF 13602 4.81 5.57 4.50 66 HTML_IMAGE_RATIO_02 13405 5.20 7.02 4.43 67 XMNumbers 12642 3.92 3.31 4.18 68 XM_UncommonTLD01 11665 4.60 6.36 3.86 69 RCVD_IN_VALIDITY_SAFE 11516 3.28 2.01 3.81 70 TR_XM_SpammyWords4 11502 6.67 13.52 3.80 71 BAYES_20 11444 3.09 1.44 3.78 72 BAYES_80 10880 5.30 9.36 3.60 73 RCVD_IN_MSPIKE_H4 10745 3.22 2.42 3.55 74 BAYES_99 10606 11.98 32.21 3.51 75 T_REMOTE_IMAGE 10601 3.12 2.21 3.50 76 TooManyTo_002 10583 2.69 0.75 3.50 77 RELAYCOUNTRY_META 10139 7.49 17.36 3.35 78 RCVD_IN_IADB_LISTED 9897 2.64 1.12 3.27 79 XMSubMetaSx_00 9685 4.32 6.99 3.20 80 BOTNET_IPINHOSTNAME 9557 5.52 11.16 3.16 81 RCVD_IN_VALIDITY_CERTIFIED 9317 2.64 1.58 3.08 82 XM_Body_Dirty_Words 8790 4.11 6.97 2.91 83 RCVD_IN_IADB_SPF 8760 2.34 1.02 2.90 84 T_TooManySym_02 8660 2.26 0.84 2.86 85 XM_B_SpammyTLD 8098 3.05 3.93 2.68 86 BAYES_999 8014 9.28 25.10 2.65 87 HTML_IMAGE_RATIO_06 7905 2.88 3.50 2.61 88 RCVD_IN_IADB_SENDERID 7815 2.10 0.96 2.58 89 RCVD_IN_IADB_DK 7665 2.07 0.95 2.53 90 MAILING_LIST_MULTI 7651 2.35 1.91 2.53 91 MIME_HTML_ONLY_MULTI 7627 2.72 3.20 2.52 92 HTML_MIME_NO_HTML_TAG 7371 2.14 1.44 2.44 93 MIME_HTML_MOSTLY 7291 2.75 3.57 2.41 94 MIME_CHARSET_FARAWAY 7113 1.90 0.82 2.35 95 INVALID_MSGID 7067 1.71 0.23 2.34 96 HTML_IMAGE_RATIO_08 7025 2.30 2.25 2.32 97 SCC_BODY_URI_ONLY 6841 2.01 1.41 2.26 98 BAYES_05 6751 1.80 0.77 2.23 99 CHARSET_FARAWAY_HEADER 6705 1.73 0.58 2.22 100 TR_XM_DKIM_Undo 6643 10.64 30.77 2.20 101 BAYES_95 6624 3.00 4.92 2.19 102 RCVD_IN_IADB_VOUCHED 6345 1.63 0.52 2.10 103 TO_MALFORMED 6265 1.47 0.03 2.07 104 T_XMDrugObfuBody_14 5701 2.57 4.22 1.88 105 DKIM_INVALID 5579 2.51 4.09 1.84 106 XM_CamelCaseFrm001 5466 2.34 3.61 1.81 107 HTML_EXTRA_CLOSE 5459 1.28 0.01 1.80 108 TR_XM_SpammyRelay 5351 5.20 13.40 1.77 109 XM_B_URI_Unicode 5098 1.97 2.64 1.69 110 TM2_M_URI_OPT_OUT 5086 2.02 2.84 1.68 111 FROM_EXCESS_BASE64 5067 1.77 2.01 1.68 112 XMDiploma_00 4838 1.96 2.83 1.60 113 TooManyTo_003 4779 1.30 0.64 1.58 114 XM_DK_Undo_01 4757 1.57 1.55 1.57 115 XM_B_Investor 4733 2.79 5.70 1.56 116 TR_XM_UnparsRelay 4629 3.83 9.31 1.53 117 TR_MetaPhish_Combo_01 4578 1.47 1.37 1.51 118 SUBJ_ALL_CAPS 4540 1.70 2.19 1.50 119 RCVD_IN_IADB_OPTIN 4442 1.15 0.40 1.47 120 TR_XM_SpammyWords5 4428 2.37 4.55 1.46 121 XM_SendGrid 4273 1.40 1.37 1.41 122 TR_XM_PhishingBody 4256 2.31 4.47 1.41 123 UNTRUSTED_Relay 4190 2.84 6.30 1.39 124 IN_HORDE_ADDRESS_BOOK 4117 0.99 0.10 1.36 125 XM_SPF_SoftFail 4116 2.07 3.76 1.36 126 BOTNET 4056 3.34 8.10 1.34 127 XM_B_FormFill 4054 0.96 0.04 1.34 128 TR_Symld_Words 4038 1.43 1.66 1.34 129 TR_DCC_Bayes_99 4014 7.60 22.58 1.33 130 URI_HEX 3981 1.27 1.17 1.32 131 XMGappySubj_01 3976 1.02 0.32 1.31 132 T_XMDrugObfuBody_08 3929 1.68 2.59 1.30 133 XMSexyCombo_05 3855 2.24 4.54 1.27 134 XM_B_Unsub2 3680 1.85 3.35 1.22 135 T_TooManySym_03 3625 0.97 0.41 1.20 136 URI_NOVOWEL 3584 1.24 1.37 1.18 137 TooManyTo_004 3513 0.99 0.58 1.16 138 XMStockSpam_06 3490 1.56 2.51 1.15 139 XM_GoogleGroups 3468 1.03 0.75 1.15 140 HELO_NODOT 3373 0.82 0.13 1.12 141 HELO_NO_DOMAIN 3366 0.82 0.12 1.11 142 TVD_SPACE_RATIO 3165 0.85 0.40 1.05 143 XM_OfRef6 3087 1.82 3.73 1.02 144 XMCapTrack 3053 0.84 0.43 1.01 145 FROM_GOV_DKIM_AU 3038 0.78 0.25 1.00 146 TR_XM_DK_SendGrid 2867 0.92 0.86 0.95 147 TooManyTo_005 2854 0.82 0.54 0.94 148 XMGenDplmaNmb 2796 1.16 1.73 0.92 149 TVD_RCVD_IP 2727 0.90 0.89 0.90 150 XMBrknScrpt_02 2691 1.14 1.74 0.89 151 T_XMDrugObfuBody_00 2686 1.12 1.68 0.89 152 XM_ShortIntro_01 2617 0.73 0.40 0.87 153 URI_OPTOUT_3LD 2541 0.75 0.54 0.84 154 XM_UB50 2500 1.34 2.55 0.83 155 TR_XM_MSPIKECOMBO 2490 2.00 4.80 0.82 156 RCVD_IN_MSPIKE_BL 2490 2.01 4.85 0.82 157 T_FILL_THIS_FORM_SHORT 2433 1.49 3.14 0.80 158 RELAYCOUNTRY_CA 2414 2.53 6.65 0.80 159 DKIM_ADSP_CUSTOM_MED 2359 0.86 1.05 0.78 160 XM_H_Long_From02 2328 0.95 1.37 0.77 161 XM_H_PHPMailer 2246 0.70 0.61 0.74 162 T_TVD_MIME_NO_HEADERS 2189 0.52 0.04 0.72 163 SpammyFromTLD_01 2172 1.03 1.76 0.72 164 FILL_THIS_FORM 2172 0.62 0.38 0.72 165 RCVD_IN_PBL 2164 0.89 1.31 0.72 166 XM_B_COPY_HTML 2037 0.87 1.35 0.67 167 T_OBFU_PDF_ATTACH 2018 0.50 0.12 0.67 168 TM2_M_OBFU_COMMENT 1994 0.82 1.21 0.66 169 HTTPS_HTTP_MISMATCH 1970 0.79 1.11 0.65 170 XM_B_SpammyWords4 1905 1.23 2.66 0.63 171 XMLngstWrd_00 1894 0.64 0.67 0.63 172 RELAYCOUNTRY_AU 1875 1.25 2.77 0.62 173 SpammyFromTLD_02 1866 1.09 2.21 0.62 174 XMNoVowels 1767 0.56 0.50 0.58 175 XMBSHREFv2 1761 0.58 0.56 0.58 176 RCVD_IN_BL_SPAMCOP_NET 1744 3.92 11.89 0.58 177 XMSlimDrugH 1714 0.61 0.71 0.57 178 TR_XM_Base64_M1 1697 0.63 0.80 0.56 179 XMSolicitRefs_0 1676 0.56 0.58 0.55 180 XMPhish30 1619 0.84 1.56 0.54 181 RELAYCOUNTRY_GB 1600 0.80 1.44 0.53 182 T_XMHurry_00 1588 0.99 2.09 0.53 183 URI_TRY_3LD 1570 0.81 1.51 0.52 184 TR_XM_SpammyWords2 1566 4.01 12.33 0.52 185 XMLngstWrd_01 1547 0.49 0.43 0.51 186 FORGED_GMAIL_RCVD 1537 0.59 0.78 0.51 187 RCVD_IN_MSPIKE_L3 1535 1.36 3.39 0.51 188 MPART_ALT_DIFF_COUNT 1534 0.64 0.96 0.51 189 TR_XM_PHPDW 1481 0.65 1.04 0.49 190 TR_XM_FormFill2 1479 0.65 1.03 0.49 191 T_MANY_PILL_PRICE 1478 0.34 0.00 0.49 192 XMBdyGiftCard01 1473 0.71 1.25 0.49 193 XMGappySubj_02 1472 0.36 0.06 0.49 194 TR_XM_PHPForged 1464 0.65 1.06 0.48 195 XMSubMetaI_00 1459 0.58 0.82 0.48 196 XM_H_PHPOS 1446 0.63 1.01 0.48 197 T_Symld_Words_02 1443 0.67 1.15 0.48 198 XMMoneyMeta_00 1413 0.46 0.46 0.47 199 XMDateMe_00 1381 0.45 0.44 0.46 200 MSGID_FROM_MTA_HEADER 1358 0.38 0.21 0.45 ----------------------------------------------------------------------