Email: 422960 Autolearn: 0 AvgScore: 4.85 AvgScanTime: 1.28 sec Spam: 121827 Autolearn: 0 AvgScore: 14.54 AvgScanTime: 1.42 sec Ham: 301133 Autolearn: 0 AvgScore: 0.94 AvgScanTime: 1.23 sec Time Spent Running SA: 150.73 hours Time Spent Processing Spam: 48.14 hours Time Spent Processing Ham: 102.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 119547 99.08 98.13 99.46 2 HTML_MESSAGE 115828 89.22 95.08 86.85 3 DKIM_SIGNED 107394 77.24 88.15 72.82 4 XM_DK_Pass 102713 75.37 84.31 71.75 5 XM_B_Unicode 102178 72.38 83.87 67.73 6 DKIM_VALID 101771 74.29 83.54 70.55 7 RELAYCOUNTRY_US 98349 80.12 80.73 79.88 8 DCC_CHECK 90006 47.79 73.88 37.23 9 XM_B_SpammyWords 84418 51.35 69.29 44.10 10 DKIM_VALID_AU 80392 59.78 65.99 57.26 11 XMListUnsubscribeExists 79712 50.32 65.43 44.20 12 XM_B_Unicode3 58816 41.47 48.28 38.71 13 LOC_TINY_FONT_1 57610 33.00 47.29 27.22 14 BAYES_50 50834 54.08 41.73 59.08 15 XM_B_SpammyWords2 48065 24.15 39.45 17.96 16 XM_DK_Undo_02 47731 14.42 39.18 4.40 17 HTML_FONT_LOW_CONTRAST 43287 29.21 35.53 26.65 18 FVGT_m_MULTI_ODD 39103 27.06 32.10 25.03 19 MIME_HTML_ONLY 38222 24.64 31.37 21.92 20 DKIM_VALID_EF 38005 31.34 31.20 31.40 21 BAYES_99 37649 11.22 30.90 3.25 22 T_KAM_HTML_FONT_INVALID 35989 22.41 29.54 19.52 23 TR_XM_DKIM_Undo 35092 9.61 28.80 1.84 24 XMSubLong 30242 23.83 24.82 23.43 25 DCC_CHECK_NEGATIVE 29723 51.68 24.40 62.71 26 BAYES_999 29517 8.69 24.23 2.40 27 T_TM2_M_HEADER_IN_MSG 28889 29.79 23.71 32.26 28 TR_XM_DK_Unsub 26365 15.53 21.64 13.05 29 TR_DCC_Bayes_99 25464 6.94 20.90 1.29 30 XM_Multi_Part_URI 25245 15.82 20.72 13.84 31 XM_B_Unsub 25236 13.55 20.71 10.66 32 TR_XM_BayesUnsub 24152 11.14 19.82 7.62 33 RCVD_IN_MSPIKE_H2 24020 18.18 19.72 17.56 34 RELAYCOUNTRY_META 21459 7.54 17.61 3.47 35 UNPARSEABLE_RELAY 20474 13.74 16.81 12.50 36 LOTS_OF_MONEY 17688 8.68 14.52 6.32 37 XM_B_SpammyWords3 17641 7.57 14.48 4.78 38 TR_MAX_INTL_RELAY 16549 8.05 13.58 5.81 39 TR_XM_SpammyWords4 16360 6.90 13.43 4.26 40 TR_XM_SpammyRelay 16152 4.97 13.26 1.62 41 BOTNET_IPINHOSTNAME 15318 5.38 12.57 2.48 42 FSL_BULK_SIG 13238 9.28 10.87 8.64 43 XM_Evil_Numbers_Gen 12367 10.06 10.15 10.02 44 TR_XM_SpammyWords2 12340 3.26 10.13 0.49 45 BOTNET 11334 3.56 9.30 1.24 46 XM_B_Phish_Phrases 11249 7.16 9.23 6.31 47 RCVD_IN_MSPIKE_WL 10998 15.11 9.03 17.57 48 BAYES_80 10349 5.03 8.49 3.62 49 TR_XM_UnparsRelay 10276 3.68 8.43 1.76 50 RCVD_IN_BL_SPAMCOP_NET 9422 2.49 7.73 0.37 51 HTML_IMAGE_RATIO_02 9094 5.29 7.46 4.41 52 BAYES_60 8945 6.75 7.34 6.51 53 RELAYCOUNTRY_CA 8584 2.56 7.05 0.74 54 XM_Body_Dirty_Words 8425 3.62 6.92 2.29 55 XM_B_PhoneNumber 7865 9.88 6.46 11.26 56 UNTRUSTED_Relay 7812 2.96 6.41 1.57 57 LotsOfNums_01 7756 7.07 6.37 7.36 58 XMSubMetaSx_00 7723 4.45 6.34 3.68 59 MPART_ALT_DIFF 7721 4.90 6.34 4.32 60 RCVD_IN_MSPIKE_BL 7005 2.21 5.75 0.78 61 XM_UncommonTLD01 7002 4.74 5.75 4.33 62 TR_XM_MSPIKECOMBO 6990 2.21 5.74 0.78 63 XM_H_Long_From01 6736 5.61 5.53 5.64 64 HTML_IMAGE_RATIO_04 6294 4.35 5.17 4.01 65 XM_B_Investor 6092 2.55 5.00 1.55 66 XM_H_GMP 5933 5.50 4.87 5.76 67 TR_XM_PhishingBody 5852 2.55 4.80 1.63 68 BAYES_95 5789 2.92 4.75 2.19 69 XMSexyCombo_05 5725 2.53 4.70 1.65 70 RCVD_IN_MSPIKE_H3 5703 6.70 4.68 7.51 71 TooManyTo_001 5676 8.68 4.66 10.31 72 XMStrtUSub 5641 4.62 4.63 4.62 73 DKIM_INVALID 5623 2.95 4.62 2.27 74 XMNumbers 5334 4.57 4.38 4.65 75 TR_XM_SpammyWords5 5242 2.17 4.30 1.31 76 XM_CamelCaseFrm001 5013 2.49 4.11 1.84 77 TM2_M_VERY_LONG_WORD 4916 2.38 4.04 1.71 78 XM_B_SpammyTLD 4891 3.07 4.01 2.69 79 TR_XM_SpammyWords3 4791 1.39 3.93 0.37 80 XM_OfRef6 4698 1.96 3.86 1.19 81 T_XMDrugObfuBody_14 4448 2.41 3.65 1.91 82 MIME_HTML_MOSTLY 4398 2.56 3.61 2.14 83 TR_XM_SPAMCOP 4034 1.03 3.31 0.11 84 XM_SPF_SoftFail 4033 2.06 3.31 1.56 85 HTML_IMAGE_RATIO_06 4027 2.89 3.31 2.72 86 XM_B_Unsub2 4013 1.85 3.29 1.27 87 XM_UB50 3851 1.63 3.16 1.02 88 MIME_QP_LONG_LINE 3789 4.19 3.11 4.62 89 RCVD_IN_VALIDITY_RPBL 3770 0.96 3.09 0.10 90 MIME_HTML_ONLY_MULTI 3752 2.56 3.08 2.35 91 HTML_IMAGE_RATIO_08 3643 2.44 2.99 2.22 92 XMDiploma_00 3601 1.86 2.96 1.42 93 TR_XM_NoHeaderRelay 3561 0.96 2.92 0.16 94 XM_B_URI_Unicode 3484 2.18 2.86 1.90 95 XMBody_17 3451 1.18 2.83 0.51 96 RCVD_IN_MSPIKE_L3 3415 1.19 2.80 0.53 97 RELAYCOUNTRY_AU 3370 1.11 2.77 0.44 98 XM_URI_RBL 3287 1.02 2.70 0.34 99 ALL_TRUSTED 3257 13.03 2.67 17.21 100 T_XMDrugObfuBody_08 3229 1.82 2.65 1.49 101 T_TooManySym_01 2966 4.92 2.43 5.92 102 T_FILL_THIS_FORM_SHORT 2951 1.42 2.42 1.01 103 TM2_M_URI_OPT_OUT 2874 1.88 2.36 1.69 104 XM_SendGrid 2807 2.88 2.30 3.11 105 TR_XM_INV_DKIM 2759 0.69 2.26 0.05 106 TR_LOTS_OF_MONEY3 2728 0.89 2.24 0.34 107 USER_IN_DEF_DKIM_WL 2722 9.17 2.23 11.98 108 XM_B_SpammyWords4 2710 1.14 2.22 0.70 109 RCVD_IN_VALIDITY_SAFE 2677 3.34 2.20 3.80 110 RCVD_IN_MSPIKE_H5 2651 5.12 2.18 6.31 111 RCVD_IN_MSPIKE_H4 2644 3.29 2.17 3.74 112 FROM_EXCESS_BASE64 2498 1.73 2.05 1.60 113 RCVD_IN_MSPIKE_L4 2473 0.75 2.03 0.24 114 SUBJ_ALL_CAPS 2434 1.60 2.00 1.45 115 MAILING_LIST_MULTI 2385 2.65 1.96 2.93 116 SpammyFromTLD_02 2371 0.75 1.95 0.27 117 BAYES_40 2318 4.52 1.90 5.58 118 XMStockSpam_06 2290 1.46 1.88 1.29 119 XMBrknScrpt_02 2273 1.29 1.87 1.06 120 SpammyFromTLD_01 2264 1.18 1.86 0.90 121 TR_XM_MSPIKECOMBO2 2169 0.53 1.78 0.02 122 URI_TRY_3LD 2157 0.89 1.77 0.53 123 HTML_MIME_NO_HTML_TAG 2116 3.41 1.74 4.09 124 T_XMDrugObfuBody_00 2085 1.07 1.71 0.81 125 SHORTCIRCUIT 2079 0.49 1.71 0.00 126 RCVD_IN_ZEN_LASTEXTERNAL 2079 0.49 1.71 0.00 127 SCC_BODY_URI_ONLY 2078 2.35 1.71 2.62 128 XMPhish30 2031 0.88 1.67 0.56 129 BAYES_20 1963 3.26 1.61 3.93 130 RCVD_IN_VALIDITY_CERTIFIED 1938 2.74 1.59 3.20 131 T_REMOTE_IMAGE 1915 3.10 1.57 3.72 132 TR_LOTS_OF_MONEY2 1893 0.73 1.55 0.39 133 T_MONEY_PERCENT 1893 0.73 1.55 0.39 134 XMSubMetaI_00 1881 1.01 1.54 0.79 135 T_XMHurry_00 1875 0.83 1.54 0.54 136 MPART_ALT_DIFF_COUNT 1827 0.90 1.50 0.66 137 XM_B_COPY_HTML 1826 0.92 1.50 0.69 138 XMGenDplmaNmb 1817 0.97 1.49 0.76 139 XM_B_SEO 1744 0.59 1.43 0.24 140 KHOP_HELO_FCRDNS 1733 1.82 1.42 1.98 141 TR_XM_SEO4 1719 0.47 1.41 0.09 142 RDNS_DYNAMIC 1710 0.52 1.40 0.17 143 TR_XM_DK_SendGrid 1692 1.94 1.39 2.16 144 PDS_RDNS_DYNAMIC_FP 1691 0.43 1.39 0.04 145 XM_H_Long_From02 1688 0.99 1.39 0.83 146 XM_B_Phish66 1662 0.68 1.36 0.40 147 XM_DK_Undo_01 1592 1.73 1.31 1.90 148 RCVD_IN_PSBL 1588 0.56 1.30 0.25 149 URI_HEX 1565 1.31 1.28 1.31 150 XMSexyCombo_01 1546 0.48 1.27 0.16 151 HTML_IMAGE_ONLY_20 1546 0.65 1.27 0.39 152 RCVD_IN_IADB_LISTED 1520 2.70 1.25 3.28 153 TR_XM_PHPForged 1512 0.70 1.24 0.48 154 TR_XM_FormFill2 1491 0.69 1.22 0.48 155 HTTPS_HTTP_MISMATCH 1479 0.85 1.21 0.70 156 TR_XM_PHPDW 1477 0.69 1.21 0.48 157 RCVD_IN_PBL 1464 0.92 1.20 0.80 158 HK_RANDOM_REPLYTO 1461 0.42 1.20 0.11 159 XM_H_PHPOS 1451 0.68 1.19 0.47 160 T_Symld_Words_02 1441 0.77 1.18 0.60 161 RELAYCOUNTRY_FR 1439 0.54 1.18 0.28 162 DIET_1 1427 0.48 1.17 0.19 163 URI_NOVOWEL 1418 1.33 1.16 1.40 164 TR_Symld_Words 1383 1.41 1.14 1.52 165 DKIM_ADSP_CUSTOM_MED 1373 0.94 1.13 0.87 166 THIS_AD 1364 0.63 1.12 0.43 167 BOTNET_NORDNS 1358 0.33 1.11 0.01 168 TVD_RCVD_IP 1354 0.62 1.11 0.41 169 XM_ProductURIs 1345 1.06 1.10 1.04 170 XM_B_DNDMA 1330 0.69 1.09 0.53 171 DKIM_ADSP_NXDOMAIN 1325 0.53 1.09 0.31 172 XM_UB99 1310 0.31 1.08 0.00 173 TM2_M_OBFU_COMMENT 1306 0.49 1.07 0.26 174 TR_XM_RelayPhish 1297 0.37 1.06 0.08 175 URIBL_BLACK 1293 0.32 1.06 0.02 176 ANY_BOUNCE_MESSAGE 1290 3.39 1.06 4.33 177 BOUNCE_MESSAGE 1290 3.39 1.06 4.33 178 XMPhish14 1270 0.61 1.04 0.43 179 RCVD_IN_IADB_SPF 1269 2.34 1.04 2.87 180 XM_OfRef7 1256 0.51 1.03 0.29 181 TR_XM_MaxSPIKE 1251 0.31 1.03 0.02 182 XMMoneyMeta_00 1246 0.70 1.02 0.57 183 XM_DIRTYINTL 1244 0.35 1.02 0.08 184 TR_Mismatch_TLD_02 1228 0.37 1.01 0.12 185 RCVD_IN_XBL 1201 0.30 0.99 0.03 186 TM2_M_A_HREF_HREF 1194 0.47 0.98 0.27 187 XM_PDF 1176 3.70 0.97 4.81 188 XM_HighProb1 1173 0.28 0.96 0.00 189 RCVD_IN_IADB_DK 1172 2.02 0.96 2.44 190 RCVD_IN_IADB_SENDERID 1162 2.08 0.95 2.54 191 T_TooManySym_02 1152 2.49 0.95 3.12 192 HELO_DYNAMIC_SPLIT_IP 1144 0.27 0.94 0.00 193 TR_MetaPhish_Combo_01 1133 1.25 0.93 1.37 194 RCVD_IN_MSPIKE_L5 1103 0.27 0.91 0.01 195 NML_ADSP_CUSTOM_MED 1098 0.67 0.90 0.58 196 XMHTML_After_End 1097 0.56 0.90 0.42 197 XMBody_78 1093 0.49 0.90 0.33 198 XMReplyNow 1082 0.43 0.89 0.25 199 TR_XM_InvalidRelay 1081 0.27 0.89 0.02 200 TO_NO_BRKTS_HTML_ONLY 1078 0.54 0.88 0.40 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 299510 99.08 98.13 99.46 2 HTML_MESSAGE 261535 89.22 95.08 86.85 3 RELAYCOUNTRY_US 240547 80.12 80.73 79.88 4 DKIM_SIGNED 219283 77.24 88.15 72.82 5 XM_DK_Pass 216073 75.37 84.31 71.75 6 DKIM_VALID 212441 74.29 83.54 70.55 7 XM_B_Unicode 203965 72.38 83.87 67.73 8 DCC_CHECK_NEGATIVE 188853 51.68 24.40 62.71 9 BAYES_50 177910 54.08 41.73 59.08 10 DKIM_VALID_AU 172438 59.78 65.99 57.26 11 XMListUnsubscribeExists 133111 50.32 65.43 44.20 12 XM_B_SpammyWords 132790 51.35 69.29 44.10 13 XM_B_Unicode3 116583 41.47 48.28 38.71 14 DCC_CHECK 112124 47.79 73.88 37.23 15 T_TM2_M_HEADER_IN_MSG 97131 29.79 23.71 32.26 16 DKIM_VALID_EF 94546 31.34 31.20 31.40 17 LOC_TINY_FONT_1 81983 33.00 47.29 27.22 18 HTML_FONT_LOW_CONTRAST 80259 29.21 35.53 26.65 19 FVGT_m_MULTI_ODD 75371 27.06 32.10 25.03 20 XMSubLong 70558 23.83 24.82 23.43 21 MIME_HTML_ONLY 66004 24.64 31.37 21.92 22 T_KAM_HTML_FONT_INVALID 58776 22.41 29.54 19.52 23 XM_B_SpammyWords2 54080 24.15 39.45 17.96 24 RCVD_IN_MSPIKE_WL 52896 15.11 9.03 17.57 25 RCVD_IN_MSPIKE_H2 52882 18.18 19.72 17.56 26 ALL_TRUSTED 51840 13.03 2.67 17.21 27 XM_Multi_Part_URI 41676 15.82 20.72 13.84 28 BAYES_00 40404 9.76 0.72 13.42 29 TR_XM_DK_Unsub 39306 15.53 21.64 13.05 30 UNPARSEABLE_RELAY 37650 13.74 16.81 12.50 31 USER_IN_DEF_DKIM_WL 36071 9.17 2.23 11.98 32 XM_B_PhoneNumber 33913 9.88 6.46 11.26 33 XM_B_Unsub 32093 13.55 20.71 10.66 34 TooManyTo_001 31053 8.68 4.66 10.31 35 XM_Evil_Numbers_Gen 30186 10.06 10.15 10.02 36 FSL_BULK_SIG 26020 9.28 10.87 8.64 37 TR_XM_BayesUnsub 22946 11.14 19.82 7.62 38 RCVD_IN_MSPIKE_H3 22615 6.70 4.68 7.51 39 TR_XM_DK_Bayes 22193 5.39 0.51 7.37 40 LotsOfNums_01 22160 7.07 6.37 7.36 41 TR_XM_DK_Bayes1 21780 5.29 0.50 7.23 42 BAYES_60 19589 6.75 7.34 6.51 43 LOTS_OF_MONEY 19020 8.68 14.52 6.32 44 XM_B_Phish_Phrases 19016 7.16 9.23 6.31 45 RCVD_IN_MSPIKE_H5 19015 5.12 2.18 6.31 46 XM_DKIMWhitelistDomains 18932 4.48 0.02 6.29 47 TR_XM_DK_Bayes2 18466 4.47 0.36 6.13 48 T_TooManySym_01 17839 4.92 2.43 5.92 49 TR_MAX_INTL_RELAY 17502 8.05 13.58 5.81 50 XM_H_GMP 17344 5.50 4.87 5.76 51 XM_H_Long_From01 16976 5.61 5.53 5.64 52 BAYES_40 16789 4.52 1.90 5.58 53 XM_PDF 14479 3.70 0.97 4.81 54 XM_B_SpammyWords3 14392 7.57 14.48 4.78 55 XMNumbers 13993 4.57 4.38 4.65 56 MIME_QP_LONG_LINE 13920 4.19 3.11 4.62 57 XMStrtUSub 13906 4.62 4.63 4.62 58 HTML_IMAGE_RATIO_02 13280 5.29 7.46 4.41 59 XM_DK_Undo_02 13248 14.42 39.18 4.40 60 TooManyTo_002 13068 3.31 0.76 4.34 61 ANY_BOUNCE_MESSAGE 13052 3.39 1.06 4.33 62 BOUNCE_MESSAGE 13050 3.39 1.06 4.33 63 XM_UncommonTLD01 13035 4.74 5.75 4.33 64 MPART_ALT_DIFF 13015 4.90 6.34 4.32 65 TR_XM_SpammyWords4 12819 6.90 13.43 4.26 66 HTML_MIME_NO_HTML_TAG 12303 3.41 1.74 4.09 67 HTML_IMAGE_RATIO_04 12090 4.35 5.17 4.01 68 BAYES_20 11830 3.26 1.61 3.93 69 RCVD_IN_VALIDITY_SAFE 11447 3.34 2.20 3.80 70 RCVD_IN_MSPIKE_H4 11266 3.29 2.17 3.74 71 T_REMOTE_IMAGE 11211 3.10 1.57 3.72 72 XMSubMetaSx_00 11085 4.45 6.34 3.68 73 BAYES_80 10910 5.03 8.49 3.62 74 RELAYCOUNTRY_META 10441 7.54 17.61 3.47 75 RCVD_IN_IADB_LISTED 9879 2.70 1.25 3.28 76 BAYES_99 9789 11.22 30.90 3.25 77 RCVD_IN_VALIDITY_CERTIFIED 9644 2.74 1.59 3.20 78 T_TooManySym_02 9386 2.49 0.95 3.12 79 XM_SendGrid 9375 2.88 2.30 3.11 80 MAILING_LIST_MULTI 8809 2.65 1.96 2.93 81 RCVD_IN_IADB_SPF 8648 2.34 1.04 2.87 82 HTML_IMAGE_RATIO_06 8186 2.89 3.31 2.72 83 XM_B_SpammyTLD 8102 3.07 4.01 2.69 84 SCC_BODY_URI_ONLY 7877 2.35 1.71 2.62 85 RCVD_IN_IADB_SENDERID 7648 2.08 0.95 2.54 86 BOTNET_IPINHOSTNAME 7457 5.38 12.57 2.48 87 RCVD_IN_IADB_DK 7357 2.02 0.96 2.44 88 BAYES_05 7323 1.97 0.84 2.43 89 INVALID_MSGID 7314 1.78 0.19 2.43 90 BAYES_999 7221 8.69 24.23 2.40 91 MIME_HTML_ONLY_MULTI 7085 2.56 3.08 2.35 92 XM_Body_Dirty_Words 6904 3.62 6.92 2.29 93 DKIM_INVALID 6842 2.95 4.62 2.27 94 HTML_IMAGE_RATIO_08 6677 2.44 2.99 2.22 95 RCVD_IN_IADB_VOUCHED 6602 1.78 0.75 2.19 96 BAYES_95 6582 2.92 4.75 2.19 97 TR_XM_DK_SendGrid 6505 1.94 1.39 2.16 98 MIME_HTML_MOSTLY 6443 2.56 3.61 2.14 99 TO_MALFORMED 6327 1.51 0.03 2.10 100 KHOP_HELO_FCRDNS 5964 1.82 1.42 1.98 101 TooManyTo_003 5769 1.53 0.58 1.92 102 T_XMDrugObfuBody_14 5741 2.41 3.65 1.91 103 XM_DK_Undo_01 5735 1.73 1.31 1.90 104 XM_B_URI_Unicode 5721 2.18 2.86 1.90 105 TR_XM_DKIM_Undo 5540 9.61 28.80 1.84 106 XM_CamelCaseFrm001 5532 2.49 4.11 1.84 107 TR_XM_UnparsRelay 5288 3.68 8.43 1.76 108 XM_B_FormFill 5240 1.27 0.09 1.74 109 TM2_M_VERY_LONG_WORD 5141 2.38 4.04 1.71 110 TM2_M_URI_OPT_OUT 5081 1.88 2.36 1.69 111 XMSexyCombo_05 4977 2.53 4.70 1.65 112 TR_XM_PhishingBody 4915 2.55 4.80 1.63 113 TR_XM_SpammyRelay 4889 4.97 13.26 1.62 114 FROM_EXCESS_BASE64 4816 1.73 2.05 1.60 115 UNTRUSTED_Relay 4726 2.96 6.41 1.57 116 XM_SPF_SoftFail 4700 2.06 3.31 1.56 117 RCVD_IN_IADB_OPTIN 4677 1.25 0.50 1.55 118 XM_B_Investor 4675 2.55 5.00 1.55 119 TR_Symld_Words 4572 1.41 1.14 1.52 120 T_XMDrugObfuBody_08 4482 1.82 2.65 1.49 121 SUBJ_ALL_CAPS 4354 1.60 2.00 1.45 122 TooManyTo_004 4312 1.17 0.51 1.43 123 XMDiploma_00 4286 1.86 2.96 1.42 124 URI_NOVOWEL 4205 1.33 1.16 1.40 125 HELO_NODOT 4176 1.06 0.24 1.39 126 HELO_NO_DOMAIN 4175 1.05 0.23 1.39 127 TR_MetaPhish_Combo_01 4139 1.25 0.93 1.37 128 URI_HEX 3959 1.31 1.28 1.31 129 IN_HORDE_ADDRESS_BOOK 3943 0.96 0.10 1.31 130 TR_XM_SpammyWords5 3934 2.17 4.30 1.31 131 TR_DCC_Bayes_99 3892 6.94 20.90 1.29 132 XM_GoogleGroups 3873 1.16 0.83 1.29 133 XMStockSpam_06 3871 1.46 1.88 1.29 134 XMCapTrack 3831 1.04 0.48 1.27 135 XM_B_Unsub2 3819 1.85 3.29 1.27 136 T_TVD_MIME_NO_HEADERS 3761 0.90 0.05 1.25 137 BOTNET 3738 3.56 9.30 1.24 138 T_TooManySym_03 3683 1.00 0.43 1.22 139 XM_OfRef6 3593 1.96 3.86 1.19 140 TooManyTo_005 3536 0.97 0.46 1.17 141 XM_ShortIntro_01 3308 0.91 0.43 1.10 142 XMGappySubj_01 3269 0.83 0.20 1.09 143 TVD_SPACE_RATIO 3209 0.81 0.16 1.07 144 XMBrknScrpt_02 3192 1.29 1.87 1.06 145 XM_ProductURIs 3122 1.06 1.10 1.04 146 XM_UB50 3064 1.63 3.16 1.02 147 HTML_IMAGE_ONLY_32 3051 0.77 0.17 1.01 148 T_FILL_THIS_FORM_SHORT 3050 1.42 2.42 1.01 149 SpammyFromTLD_01 2718 1.18 1.86 0.90 150 DKIM_ADSP_CUSTOM_MED 2619 0.94 1.13 0.87 151 XM_H_PHPMailer 2518 0.78 0.63 0.84 152 XM_H_Long_From02 2489 0.99 1.39 0.83 153 T_XMDrugObfuBody_00 2447 1.07 1.71 0.81 154 RCVD_IN_PBL 2420 0.92 1.20 0.80 155 XMSubMetaI_00 2381 1.01 1.54 0.79 156 RCVD_IN_MSPIKE_BL 2344 2.21 5.75 0.78 157 TR_XM_MSPIKECOMBO 2344 2.21 5.74 0.78 158 XMGenDplmaNmb 2288 0.97 1.49 0.76 159 RELAYCOUNTRY_CA 2237 2.56 7.05 0.74 160 URI_OPTOUT_3LD 2233 0.73 0.69 0.74 161 XMNoVowels 2207 0.64 0.42 0.73 162 XMLngstWrd_00 2164 0.64 0.44 0.72 163 HTTPS_HTTP_MISMATCH 2100 0.85 1.21 0.70 164 XM_B_SpammyWords4 2096 1.14 2.22 0.70 165 XM_B_COPY_HTML 2080 0.92 1.50 0.69 166 T_OBFU_PDF_ATTACH 2056 0.57 0.29 0.68 167 XMGappySubj_02 1991 0.49 0.05 0.66 168 MPART_ALT_DIFF_COUNT 1987 0.90 1.50 0.66 169 MSGID_FROM_MTA_HEADER 1970 0.54 0.26 0.65 170 XMBdyGiftCard01 1901 0.69 0.84 0.63 171 RELAYCOUNTRY_GB 1871 0.70 0.88 0.62 172 TR_XM_Base64_M1 1870 0.69 0.85 0.62 173 XMSlimDrugH 1841 0.60 0.57 0.61 174 T_Symld_Words_02 1817 0.77 1.18 0.60 175 FROM_GOV_DKIM_AU 1773 0.47 0.17 0.59 176 NML_ADSP_CUSTOM_MED 1756 0.67 0.90 0.58 177 XMMoneyMeta_00 1716 0.70 1.02 0.57 178 FILL_THIS_FORM 1692 0.56 0.56 0.56 179 XMPhish30 1684 0.88 1.67 0.56 180 T_XMHurry_00 1634 0.83 1.54 0.54 181 XM_B_DNDMA 1603 0.69 1.09 0.53 182 RCVD_IN_MSPIKE_L3 1601 1.19 2.80 0.53 183 URI_TRY_3LD 1589 0.89 1.77 0.53 184 T_XMDrugObfuBody_01 1570 0.39 0.07 0.52 185 XMLngstWrd_01 1543 0.48 0.38 0.51 186 LongTLD 1541 0.59 0.78 0.51 187 FORGED_GMAIL_RCVD 1525 0.60 0.82 0.51 188 XMBody_17 1522 1.18 2.83 0.51 189 HTML_TAG_BALANCE_BODY 1480 0.55 0.70 0.49 190 TR_XM_SpammyWords2 1464 3.26 10.13 0.49 191 TR_XM_PHPForged 1448 0.70 1.24 0.48 192 TR_XM_FormFill2 1442 0.69 1.22 0.48 193 TR_XM_PHPDW 1439 0.69 1.21 0.48 194 XMBody_95 1422 0.37 0.11 0.47 195 XM_H_PHPOS 1406 0.68 1.19 0.47 196 XMDateMe_00 1364 0.49 0.58 0.45 197 RELAYCOUNTRY_AU 1335 1.11 2.77 0.44 198 THIS_AD 1308 0.63 1.12 0.43 199 XMPhish14 1300 0.61 1.04 0.43 200 MAY_BE_FORGED 1276 0.32 0.07 0.42 ----------------------------------------------------------------------