Email: 466888 Autolearn: 0 AvgScore: 3.46 AvgScanTime: 1.44 sec Spam: 133273 Autolearn: 0 AvgScore: 14.50 AvgScanTime: 1.61 sec Ham: 333615 Autolearn: 0 AvgScore: -0.95 AvgScanTime: 1.37 sec Time Spent Running SA: 186.24 hours Time Spent Processing Spam: 59.43 hours Time Spent Processing Ham: 126.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 130712 99.07 98.08 99.47 2 HTML_MESSAGE 126116 90.06 94.63 88.23 3 DKIM_SIGNED 119466 74.34 89.64 68.23 4 XM_DK_Pass 112487 72.10 84.40 67.19 5 DKIM_VALID 111455 71.20 83.63 66.23 6 XM_B_Unicode 111069 75.96 83.34 73.01 7 RELAYCOUNTRY_US 108196 82.60 81.18 83.17 8 DCC_CHECK 99035 51.97 74.31 43.05 9 XM_B_SpammyWords 92959 51.40 69.75 44.07 10 XMListUnsubscribeExists 88669 50.19 66.53 43.67 11 DKIM_VALID_AU 86900 57.05 65.20 53.79 12 XM_B_Unicode3 63963 44.49 47.99 43.09 13 LOC_TINY_FONT_1 62555 31.45 46.94 25.27 14 BAYES_50 55887 53.05 41.93 57.49 15 XM_DK_Undo_02 53593 14.59 40.21 4.35 16 XM_B_SpammyWords2 51985 24.00 39.01 18.00 17 HTML_FONT_LOW_CONTRAST 47761 28.36 35.84 25.37 18 DKIM_VALID_EF 44822 29.46 33.63 27.80 19 FVGT_m_MULTI_ODD 43487 26.01 32.63 23.37 20 MIME_HTML_ONLY 42480 25.53 31.87 23.00 21 BAYES_99 40232 10.87 30.19 3.15 22 T_KAM_HTML_FONT_INVALID 39804 22.70 29.87 19.84 23 TR_XM_DKIM_Undo 39216 9.62 29.43 1.70 24 XMSubLong 34096 23.91 25.58 23.24 25 TR_XM_DK_Unsub 32228 15.90 24.18 12.60 26 DCC_CHECK_NEGATIVE 32191 47.55 24.15 56.90 27 BAYES_999 31150 8.38 23.37 2.39 28 RCVD_IN_MSPIKE_H2 30689 17.83 23.03 15.75 29 T_TM2_M_HEADER_IN_MSG 30605 26.02 22.96 27.25 30 XM_Multi_Part_URI 29285 15.77 21.97 13.30 31 TR_DCC_Bayes_99 27464 6.75 20.61 1.22 32 XM_B_Unsub 26474 12.21 19.86 9.15 33 TR_XM_BayesUnsub 25447 10.32 19.09 6.82 34 RELAYCOUNTRY_META 24237 7.49 18.19 3.22 35 UNPARSEABLE_RELAY 22618 12.42 16.97 10.60 36 XM_B_SpammyWords3 19146 7.74 14.37 5.09 37 LOTS_OF_MONEY 19118 8.33 14.34 5.92 38 TR_MAX_INTL_RELAY 18123 7.80 13.60 5.48 39 TR_XM_SpammyRelay 17793 4.95 13.35 1.60 40 TR_XM_SpammyWords4 17522 6.74 13.15 4.18 41 BOTNET_IPINHOSTNAME 16439 5.49 12.33 2.76 42 BOTNET 13848 3.74 10.39 1.09 43 FSL_BULK_SIG 13845 13.04 10.39 14.10 44 RCVD_IN_BL_SPAMCOP_NET 13605 3.31 10.21 0.55 45 TR_XM_SpammyWords2 13013 3.10 9.76 0.44 46 XM_Evil_Numbers_Gen 12938 9.20 9.71 9.00 47 RCVD_IN_MSPIKE_WL 12413 14.40 9.31 16.43 48 TR_XM_UnparsRelay 11732 3.58 8.80 1.49 49 XM_B_Phish_Phrases 11391 6.20 8.55 5.26 50 BAYES_80 11232 4.79 8.43 3.34 51 BAYES_60 10970 6.53 8.23 5.85 52 RELAYCOUNTRY_CA 10019 2.66 7.52 0.73 53 XM_B_PhoneNumber 9011 9.27 6.76 10.28 54 LotsOfNums_01 8726 6.95 6.55 7.11 55 XM_Body_Dirty_Words 8656 3.32 6.49 2.06 56 XMSubMetaSx_00 8305 4.15 6.23 3.32 57 MPART_ALT_DIFF 8267 8.17 6.20 8.95 58 XM_H_Long_From01 8219 5.62 6.17 5.40 59 DKIM_INVALID 8011 3.15 6.01 2.01 60 HTML_IMAGE_RATIO_02 7892 4.45 5.92 3.86 61 UNTRUSTED_Relay 7891 2.72 5.92 1.43 62 XM_UncommonTLD01 7516 4.38 5.64 3.88 63 TR_XM_SPAMCOP 7114 1.66 5.34 0.19 64 HTML_IMAGE_RATIO_04 7092 11.34 5.32 13.74 65 XM_H_GMP 6962 5.40 5.22 5.47 66 XM_B_Investor 6893 2.49 5.17 1.42 67 RCVD_IN_MSPIKE_BL 6618 1.95 4.97 0.75 68 TR_XM_MSPIKECOMBO 6617 1.95 4.96 0.75 69 BAYES_95 6396 2.90 4.80 2.14 70 RCVD_IN_MSPIKE_H3 6308 6.64 4.73 7.40 71 TR_XM_PhishingBody 6078 2.43 4.56 1.58 72 XMStrtUSub 5936 8.75 4.45 10.46 73 XM_OfRef6 5759 1.98 4.32 1.04 74 XMSexyCombo_05 5604 2.09 4.20 1.25 75 XM_B_SpammyTLD 5517 2.82 4.14 2.29 76 T_XMDrugObfuBody_14 5408 2.37 4.06 1.70 77 TooManyTo_001 5190 6.83 3.89 8.01 78 TR_XM_SpammyWords3 5174 1.34 3.88 0.32 79 TR_XM_SpammyWords5 5117 2.04 3.84 1.33 80 MIME_HTML_MOSTLY 4940 2.63 3.71 2.20 81 XMNumbers 4830 3.73 3.62 3.77 82 TM2_M_VERY_LONG_WORD 4750 1.94 3.56 1.30 83 TR_XM_NoHeaderRelay 4449 1.06 3.34 0.15 84 HTML_IMAGE_RATIO_06 4445 3.38 3.34 3.40 85 XM_B_URI_Unicode 4409 2.47 3.31 2.13 86 XM_CamelCaseFrm001 4386 2.13 3.29 1.67 87 XM_B_Unsub2 4297 1.76 3.22 1.18 88 MIME_HTML_ONLY_MULTI 4290 6.01 3.22 7.12 89 MIME_QP_LONG_LINE 4215 4.44 3.16 4.95 90 XM_UB50 4201 1.54 3.15 0.89 91 XM_URI_RBL 4091 1.08 3.07 0.29 92 XMDiploma_00 4077 1.90 3.06 1.43 93 T_XMDrugObfuBody_08 3903 1.85 2.93 1.42 94 XM_SPF_SoftFail 3863 1.79 2.90 1.35 95 RCVD_IN_MSPIKE_L3 3849 1.20 2.89 0.52 96 RCVD_IN_VALIDITY_RPBL 3815 0.88 2.86 0.08 97 TR_XM_INV_DKIM 3694 0.81 2.77 0.03 98 XM_SendGrid 3679 2.58 2.76 2.51 99 RELAYCOUNTRY_AU 3646 1.06 2.74 0.39 100 T_TooManySym_01 3593 4.72 2.70 5.53 101 HTML_IMAGE_RATIO_08 3574 2.27 2.68 2.10 102 ALL_TRUSTED 3515 10.86 2.64 14.14 103 XM_B_SpammyWords4 3446 1.26 2.59 0.73 104 TM2_M_URI_OPT_OUT 3417 2.00 2.56 1.77 105 RCVD_IN_MSPIKE_H4 3192 3.24 2.40 3.58 106 XMBody_17 3106 0.87 2.33 0.29 107 FROM_EXCESS_BASE64 2998 1.74 2.25 1.54 108 SpammyFromTLD_02 2944 0.94 2.21 0.44 109 RCVD_IN_VALIDITY_SAFE 2915 3.49 2.19 4.01 110 RCVD_IN_MSPIKE_H5 2913 4.52 2.19 5.45 111 USER_IN_DEF_DKIM_WL 2829 9.48 2.12 12.42 112 T_FILL_THIS_FORM_SHORT 2826 1.18 2.12 0.80 113 XMStockSpam_06 2810 1.50 2.11 1.26 114 SUBJ_ALL_CAPS 2713 1.57 2.04 1.38 115 XMGenDplmaNmb 2682 1.15 2.01 0.80 116 MAILING_LIST_MULTI 2592 2.63 1.94 2.91 117 BAYES_40 2535 4.95 1.90 6.16 118 HTML_MIME_NO_HTML_TAG 2456 1.99 1.84 2.04 119 T_REMOTE_IMAGE 2429 3.05 1.82 3.54 120 T_XMHurry_00 2408 0.92 1.81 0.57 121 URI_NOVOWEL 2391 1.32 1.79 1.14 122 XMBrknScrpt_02 2344 1.06 1.76 0.78 123 RCVD_IN_VALIDITY_CERTIFIED 2304 2.97 1.73 3.46 124 SpammyFromTLD_01 2300 1.07 1.73 0.81 125 T_XMDrugObfuBody_00 2245 1.02 1.68 0.76 126 XMSubMetaI_00 2222 1.04 1.67 0.79 127 HTML_IMAGE_ONLY_20 2201 0.68 1.65 0.29 128 XM_H_Long_From02 2115 0.98 1.59 0.74 129 T_MONEY_PERCENT 2114 0.64 1.59 0.26 130 TR_LOTS_OF_MONEY2 2114 0.64 1.59 0.26 131 TR_XM_MSPIKECOMBO2 2110 0.47 1.58 0.02 132 TR_XM_DK_SendGrid 2109 1.65 1.58 1.67 133 SCC_BODY_URI_ONLY 2098 2.07 1.57 2.27 134 URI_HEX 2089 1.41 1.57 1.35 135 RCVD_IN_ZEN_LASTEXTERNAL 2028 0.43 1.52 0.00 136 SHORTCIRCUIT 2028 0.43 1.52 0.00 137 RCVD_IN_MSPIKE_L4 1975 0.58 1.48 0.22 138 BAYES_20 1972 4.07 1.48 5.11 139 URI_TRY_3LD 1908 0.72 1.43 0.44 140 TM2_M_OBFU_COMMENT 1884 0.71 1.41 0.43 141 RELAYCOUNTRY_FR 1882 0.55 1.41 0.21 142 XMPhish30 1833 0.79 1.38 0.56 143 XM_B_Phish66 1792 0.64 1.34 0.36 144 XMMoneyMeta_00 1784 0.72 1.34 0.48 145 TR_MetaPhish_Combo_01 1764 1.31 1.32 1.31 146 BOTNET_NORDNS 1733 0.38 1.30 0.01 147 XM_DK_Undo_01 1718 1.58 1.29 1.70 148 KHOP_HELO_FCRDNS 1701 1.28 1.28 1.28 149 XM_B_COPY_HTML 1663 0.77 1.25 0.58 150 TR_LOTS_OF_MONEY3 1641 0.59 1.23 0.33 151 RDNS_DYNAMIC 1617 0.45 1.21 0.15 152 HTTPS_HTTP_MISMATCH 1605 0.80 1.20 0.63 153 XM_B_SEO 1604 0.48 1.20 0.19 154 XM_HighProb1 1589 0.34 1.19 0.00 155 PDS_RDNS_DYNAMIC_FP 1586 0.36 1.19 0.03 156 MPART_ALT_DIFF_COUNT 1571 0.73 1.18 0.54 157 RCVD_IN_IADB_LISTED 1566 2.62 1.18 3.19 158 RCVD_IN_PBL 1559 0.85 1.17 0.72 159 XM_B_DNDMA 1527 0.68 1.15 0.49 160 TR_XM_PHPForged 1503 0.66 1.13 0.47 161 XM_H_Undi_Recip 1490 0.42 1.12 0.15 162 FILL_THIS_FORM 1487 0.67 1.12 0.49 163 TR_XM_PHPDW 1468 0.66 1.10 0.48 164 DIET_1 1466 0.49 1.10 0.25 165 TR_XM_FormFill2 1464 0.65 1.10 0.47 166 RCVD_IN_PSBL 1449 0.70 1.09 0.54 167 TR_XM_RelayPhish 1447 0.37 1.09 0.08 168 TR_Symld_Words 1434 1.25 1.08 1.31 169 XMBody_78 1433 0.56 1.08 0.36 170 THIS_AD 1425 0.62 1.07 0.45 171 TR_XM_SEO4 1417 0.36 1.06 0.08 172 XM_H_PHPOS 1416 0.63 1.06 0.46 173 TVD_RCVD_IP 1411 1.09 1.06 1.10 174 TR_XM_Base64_M1 1406 0.73 1.05 0.59 175 DKIM_ADSP_CUSTOM_MED 1386 0.90 1.04 0.84 176 RCVD_IN_IADB_SPF 1371 2.32 1.03 2.84 177 T_TooManySym_02 1355 2.35 1.02 2.88 178 XMBdyGiftCard01 1351 0.59 1.01 0.43 179 DKIM_ADSP_NXDOMAIN 1334 0.47 1.00 0.25 180 URIBL_BLACK 1317 0.29 0.99 0.01 181 BOUNCE_MESSAGE 1315 2.68 0.99 3.36 182 ANY_BOUNCE_MESSAGE 1315 2.68 0.99 3.36 183 MultiRelay_CC 1307 0.40 0.98 0.17 184 TR_XM_MaxSPIKE 1302 0.29 0.98 0.02 185 RCVD_IN_IADB_DK 1302 2.05 0.98 2.47 186 RCVD_IN_IADB_SENDERID 1284 2.09 0.96 2.55 187 XMHTML_After_End 1280 0.57 0.96 0.42 188 XMPhish08 1280 0.35 0.96 0.11 189 TR_XM_InvalidRelay 1259 0.28 0.94 0.01 190 FILL_THIS_FORM_LONG 1252 0.47 0.94 0.28 191 TR_XM_Undi_Recip19 1223 0.31 0.92 0.07 192 XM_UB99 1221 0.26 0.92 0.00 193 TM2_M_A_HREF_HREF 1220 0.44 0.92 0.25 194 URG_BIZ 1205 0.28 0.90 0.04 195 T_FILL_THIS_FORM_FRAUD_PHISH 1198 0.31 0.90 0.08 196 T_Symld_Words_02 1198 0.64 0.90 0.53 197 TR_XM_Undi_RecipCombo2 1192 0.26 0.89 0.00 198 TR_XM_Undi_Recip11 1192 0.28 0.89 0.03 199 RELAYCOUNTRY_GB 1180 0.65 0.89 0.55 200 NML_ADSP_CUSTOM_MED 1171 0.65 0.88 0.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 331856 99.07 98.08 99.47 2 HTML_MESSAGE 294353 90.06 94.63 88.23 3 RELAYCOUNTRY_US 277464 82.60 81.18 83.17 4 XM_B_Unicode 243566 75.96 83.34 73.01 5 DKIM_SIGNED 227637 74.34 89.64 68.23 6 XM_DK_Pass 224140 72.10 84.40 67.19 7 DKIM_VALID 220946 71.20 83.63 66.23 8 BAYES_50 191808 53.05 41.93 57.49 9 DCC_CHECK_NEGATIVE 189822 47.55 24.15 56.90 10 DKIM_VALID_AU 179466 57.05 65.20 53.79 11 XM_B_SpammyWords 147012 51.40 69.75 44.07 12 XMListUnsubscribeExists 145675 50.19 66.53 43.67 13 XM_B_Unicode3 143762 44.49 47.99 43.09 14 DCC_CHECK 143608 51.97 74.31 43.05 15 DKIM_VALID_EF 92742 29.46 33.63 27.80 16 T_TM2_M_HEADER_IN_MSG 90899 26.02 22.96 27.25 17 HTML_FONT_LOW_CONTRAST 84634 28.36 35.84 25.37 18 LOC_TINY_FONT_1 84303 31.45 46.94 25.27 19 FVGT_m_MULTI_ODD 77970 26.01 32.63 23.37 20 XMSubLong 77547 23.91 25.58 23.24 21 MIME_HTML_ONLY 76734 25.53 31.87 23.00 22 T_KAM_HTML_FONT_INVALID 66177 22.70 29.87 19.84 23 XM_B_SpammyWords2 60057 24.00 39.01 18.00 24 RCVD_IN_MSPIKE_WL 54813 14.40 9.31 16.43 25 RCVD_IN_MSPIKE_H2 52535 17.83 23.03 15.75 26 ALL_TRUSTED 47178 10.86 2.64 14.14 27 FSL_BULK_SIG 47054 13.04 10.39 14.10 28 HTML_IMAGE_RATIO_04 45835 11.34 5.32 13.74 29 BAYES_00 44489 9.76 0.82 13.34 30 XM_Multi_Part_URI 44357 15.77 21.97 13.30 31 TR_XM_DK_Unsub 42029 15.90 24.18 12.60 32 USER_IN_DEF_DKIM_WL 41440 9.48 2.12 12.42 33 HTML_FONT_FACE_BAD 37382 8.17 0.56 11.21 34 UNPARSEABLE_RELAY 35363 12.42 16.97 10.60 35 XM_H_Trusted_IP 35140 7.53 0.00 10.53 36 XMStrtUSub 34907 8.75 4.45 10.46 37 XM_B_PhoneNumber 34283 9.27 6.76 10.28 38 XM_B_Unsub 30522 12.21 19.86 9.15 39 XM_Evil_Numbers_Gen 30030 9.20 9.71 9.00 40 MPART_ALT_DIFF 29871 8.17 6.20 8.95 41 TooManyTo_001 26710 6.83 3.89 8.01 42 RCVD_IN_MSPIKE_H3 24676 6.64 4.73 7.40 43 MIME_HTML_ONLY_MULTI 23770 6.01 3.22 7.12 44 LotsOfNums_01 23705 6.95 6.55 7.11 45 TR_XM_BayesUnsub 22743 10.32 19.09 6.82 46 TR_XM_DK_Bayes 22120 4.94 0.70 6.63 47 XM_DKIMWhitelistDomains 21820 4.68 0.03 6.54 48 TR_XM_DK_Bayes1 21670 4.84 0.69 6.50 49 BAYES_40 20566 4.95 1.90 6.16 50 LOTS_OF_MONEY 19754 8.33 14.34 5.92 51 BAYES_60 19511 6.53 8.23 5.85 52 T_TooManySym_01 18436 4.72 2.70 5.53 53 TR_MAX_INTL_RELAY 18274 7.80 13.60 5.48 54 XM_H_GMP 18251 5.40 5.22 5.47 55 RCVD_IN_MSPIKE_H5 18180 4.52 2.19 5.45 56 TR_XM_DK_Bayes2 18172 3.99 0.33 5.45 57 XM_H_Long_From01 18030 5.62 6.17 5.40 58 XM_B_Phish_Phrases 17543 6.20 8.55 5.26 59 BAYES_20 17037 4.07 1.48 5.11 60 XM_B_SpammyWords3 16972 7.74 14.37 5.09 61 MIME_QP_LONG_LINE 16519 4.44 3.16 4.95 62 XM_DK_Undo_02 14506 14.59 40.21 4.35 63 TR_XM_SpammyWords4 13936 6.74 13.15 4.18 64 RCVD_IN_VALIDITY_SAFE 13384 3.49 2.19 4.01 65 XM_PDF 13238 3.06 0.79 3.97 66 XM_UncommonTLD01 12937 4.38 5.64 3.88 67 HTML_IMAGE_RATIO_02 12894 4.45 5.92 3.86 68 XMNumbers 12574 3.73 3.62 3.77 69 XMSubNoVowel 12225 2.83 0.73 3.66 70 RCVD_IN_MSPIKE_H4 11957 3.24 2.40 3.58 71 T_REMOTE_IMAGE 11798 3.05 1.82 3.54 72 RCVD_IN_VALIDITY_CERTIFIED 11541 2.97 1.73 3.46 73 BAYES_05 11402 2.64 0.70 3.42 74 HTML_IMAGE_RATIO_06 11344 3.38 3.34 3.40 75 ANY_BOUNCE_MESSAGE 11219 2.68 0.99 3.36 76 BOUNCE_MESSAGE 11215 2.68 0.99 3.36 77 BAYES_80 11132 4.79 8.43 3.34 78 XMSubMetaSx_00 11062 4.15 6.23 3.32 79 RELAYCOUNTRY_META 10752 7.49 18.19 3.22 80 RCVD_IN_IADB_LISTED 10657 2.62 1.18 3.19 81 BAYES_99 10507 10.87 30.19 3.15 82 TooManyTo_002 9992 2.31 0.60 3.00 83 MAILING_LIST_MULTI 9695 2.63 1.94 2.91 84 T_TooManySym_02 9597 2.35 1.02 2.88 85 RCVD_IN_IADB_SPF 9481 2.32 1.03 2.84 86 BOTNET_IPINHOSTNAME 9206 5.49 12.33 2.76 87 RCVD_IN_IADB_SENDERID 8495 2.09 0.96 2.55 88 XM_SendGrid 8390 2.58 2.76 2.51 89 RCVD_IN_IADB_DK 8254 2.05 0.98 2.47 90 BAYES_999 7979 8.38 23.37 2.39 91 XM_B_SpammyTLD 7629 2.82 4.14 2.29 92 SCC_BODY_URI_ONLY 7563 2.07 1.57 2.27 93 MIME_HTML_MOSTLY 7331 2.63 3.71 2.20 94 INVALID_MSGID 7190 1.60 0.20 2.16 95 BAYES_95 7139 2.90 4.80 2.14 96 XM_B_URI_Unicode 7109 2.47 3.31 2.13 97 HTML_IMAGE_RATIO_08 7020 2.27 2.68 2.10 98 XM_Body_Dirty_Words 6859 3.32 6.49 2.06 99 RCVD_IN_IADB_VOUCHED 6839 1.65 0.65 2.05 100 HTML_MIME_NO_HTML_TAG 6817 1.99 1.84 2.04 101 DKIM_INVALID 6691 3.15 6.01 2.01 102 TO_MALFORMED 6396 1.37 0.02 1.92 103 TM2_M_URI_OPT_OUT 5910 2.00 2.56 1.77 104 TR_XM_DKIM_Undo 5679 9.62 29.43 1.70 105 T_XMDrugObfuBody_14 5674 2.37 4.06 1.70 106 XM_DK_Undo_01 5665 1.58 1.29 1.70 107 TR_XM_DK_SendGrid 5577 1.65 1.58 1.67 108 XM_CamelCaseFrm001 5567 2.13 3.29 1.67 109 XMSubLongNoVowel 5478 1.29 0.42 1.64 110 TR_XM_SpammyRelay 5334 4.95 13.35 1.60 111 XMSubGarbage 5299 1.15 0.04 1.59 112 TR_XM_PhishingBody 5255 2.43 4.56 1.58 113 FROM_EXCESS_BASE64 5149 1.74 2.25 1.54 114 TooManyTo_003 5131 1.24 0.50 1.54 115 TR_XM_UnparsRelay 4973 3.58 8.80 1.49 116 RCVD_IN_IADB_OPTIN 4861 1.16 0.41 1.46 117 UNTRUSTED_Relay 4786 2.72 5.92 1.43 118 XMDiploma_00 4778 1.90 3.06 1.43 119 T_XMDrugObfuBody_08 4752 1.85 2.93 1.42 120 XM_B_Investor 4745 2.49 5.17 1.42 121 SUBJ_ALL_CAPS 4603 1.57 2.04 1.38 122 XM_SPF_SoftFail 4499 1.79 2.90 1.35 123 URI_HEX 4494 1.41 1.57 1.35 124 TR_XM_SpammyWords5 4425 2.04 3.84 1.33 125 TR_Symld_Words 4387 1.25 1.08 1.31 126 TR_MetaPhish_Combo_01 4361 1.31 1.32 1.31 127 TM2_M_VERY_LONG_WORD 4322 1.94 3.56 1.30 128 KHOP_HELO_FCRDNS 4276 1.28 1.28 1.28 129 IN_HORDE_ADDRESS_BOOK 4243 0.93 0.09 1.27 130 HELO_NODOT 4232 0.94 0.11 1.27 131 HELO_NO_DOMAIN 4228 0.94 0.11 1.27 132 XMStockSpam_06 4205 1.50 2.11 1.26 133 XMSexyCombo_05 4170 2.09 4.20 1.25 134 TR_DCC_Bayes_99 4065 6.75 20.61 1.22 135 XM_B_Unsub2 3943 1.76 3.22 1.18 136 XMGappySubj_01 3914 0.93 0.31 1.17 137 XM_GoogleGroups 3874 1.07 0.85 1.16 138 URI_NOVOWEL 3794 1.32 1.79 1.14 139 T_TooManySym_03 3762 0.95 0.50 1.13 140 TooManyTo_004 3696 0.92 0.44 1.11 141 TVD_RCVD_IP 3667 1.09 1.06 1.10 142 XMCapTrack 3629 0.92 0.51 1.09 143 BOTNET 3624 3.74 10.39 1.09 144 XM_OfRef6 3479 1.98 4.32 1.04 145 XM_E_Blogspot 3255 0.74 0.14 0.98 146 TVD_SPACE_RATIO 3039 0.69 0.14 0.91 147 XM_UB50 2976 1.54 3.15 0.89 148 TooManyTo_005 2912 0.74 0.40 0.87 149 XM_ShortIntro_01 2847 0.73 0.41 0.85 150 XM_B_FormFill 2801 0.61 0.04 0.84 151 DKIM_ADSP_CUSTOM_MED 2801 0.90 1.04 0.84 152 SpammyFromTLD_01 2690 1.07 1.73 0.81 153 T_FILL_THIS_FORM_SHORT 2670 1.18 2.12 0.80 154 XMGenDplmaNmb 2668 1.15 2.01 0.80 155 XMSubMetaI_00 2623 1.04 1.67 0.79 156 XMBrknScrpt_02 2595 1.06 1.76 0.78 157 T_XMDrugObfuBody_00 2523 1.02 1.68 0.76 158 RCVD_IN_MSPIKE_BL 2490 1.95 4.97 0.75 159 TR_XM_MSPIKECOMBO 2490 1.95 4.96 0.75 160 URI_OPTOUT_3LD 2483 0.72 0.66 0.74 161 XM_H_Long_From02 2458 0.98 1.59 0.74 162 XM_B_SpammyWords4 2438 1.26 2.59 0.73 163 FROM_GOV_DKIM_AU 2424 0.65 0.47 0.73 164 RELAYCOUNTRY_CA 2421 2.66 7.52 0.73 165 RCVD_IN_PBL 2413 0.85 1.17 0.72 166 XM_ProductURIs 2388 0.76 0.86 0.72 167 XM_H_PHPMailer 2351 0.68 0.63 0.70 168 XMBSHREFv2 2339 0.60 0.35 0.70 169 HTTPS_HTTP_MISMATCH 2109 0.80 1.20 0.63 170 XMNoVowels 2002 0.62 0.67 0.60 171 TR_XM_Base64_M1 1981 0.73 1.05 0.59 172 XM_B_COPY_HTML 1939 0.77 1.25 0.58 173 T_XMHurry_00 1906 0.92 1.81 0.57 174 XMGappySubj_02 1865 0.41 0.05 0.56 175 XMPhish30 1861 0.79 1.38 0.56 176 NML_ADSP_CUSTOM_MED 1860 0.65 0.88 0.56 177 RELAYCOUNTRY_GB 1850 0.65 0.89 0.55 178 RCVD_IN_BL_SPAMCOP_NET 1838 3.31 10.21 0.55 179 MPART_ALT_DIFF_COUNT 1814 0.73 1.18 0.54 180 RCVD_IN_PSBL 1797 0.70 1.09 0.54 181 T_Symld_Words_02 1775 0.64 0.90 0.53 182 FORGED_GMAIL_RCVD 1753 0.58 0.73 0.53 183 RCVD_IN_MSPIKE_L3 1744 1.20 2.89 0.52 184 XM_B_DNDMA 1647 0.68 1.15 0.49 185 HTML_IMAGE_ONLY_32 1634 0.42 0.24 0.49 186 XMPhish14 1630 0.56 0.74 0.49 187 FILL_THIS_FORM 1624 0.67 1.12 0.49 188 T_OBFU_PDF_ATTACH 1621 0.40 0.17 0.49 189 TR_XM_PHPDW 1612 0.66 1.10 0.48 190 XMLngstWrd_00 1610 0.47 0.43 0.48 191 XMMoneyMeta_00 1593 0.72 1.34 0.48 192 HTML_TAG_BALANCE_BODY 1578 0.55 0.76 0.47 193 XMSlimDrugH 1576 0.53 0.67 0.47 194 TR_XM_FormFill2 1576 0.65 1.10 0.47 195 TR_XM_PHPForged 1569 0.66 1.13 0.47 196 XM_H_PHPOS 1542 0.63 1.06 0.46 197 MSGID_FROM_MTA_HEADER 1525 0.38 0.20 0.46 198 LongTLD 1507 0.57 0.87 0.45 199 XMDateMe_00 1492 0.44 0.44 0.45 200 THIS_AD 1489 0.62 1.07 0.45 ----------------------------------------------------------------------