Email: 456886 Autolearn: 0 AvgScore: 5.04 AvgScanTime: 1.38 sec Spam: 135830 Autolearn: 0 AvgScore: 14.37 AvgScanTime: 1.58 sec Ham: 321056 Autolearn: 0 AvgScore: 1.10 AvgScanTime: 1.30 sec Time Spent Running SA: 175.73 hours Time Spent Processing Spam: 59.61 hours Time Spent Processing Ham: 116.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 133681 99.19 98.42 99.52 2 HTML_MESSAGE 129466 89.78 95.31 87.44 3 DKIM_SIGNED 121798 78.76 89.67 74.14 4 XM_DK_Pass 115897 76.71 85.33 73.07 5 XM_B_Unicode 115407 76.82 84.96 73.38 6 DKIM_VALID 114942 75.80 84.62 72.06 7 RELAYCOUNTRY_US 110340 78.84 81.23 77.83 8 DCC_CHECK 100584 49.68 74.05 39.37 9 XM_B_SpammyWords 93741 51.26 69.01 43.75 10 XMListUnsubscribeExists 91153 53.84 67.11 48.23 11 DKIM_VALID_AU 89458 60.60 65.86 58.37 12 XM_B_Unicode3 66539 46.28 48.99 45.13 13 LOC_TINY_FONT_1 65532 34.23 48.25 28.30 14 XM_DK_Undo_02 56216 15.85 41.39 5.05 15 BAYES_50 54992 54.33 40.49 60.18 16 XM_B_SpammyWords2 54498 24.77 40.12 18.27 17 HTML_FONT_LOW_CONTRAST 51625 33.83 38.01 32.06 18 FVGT_m_MULTI_ODD 47654 28.81 35.08 26.15 19 DKIM_VALID_EF 43003 30.13 31.66 29.49 20 BAYES_99 42394 11.71 31.21 3.45 21 MIME_HTML_ONLY 40563 25.33 29.86 23.42 22 TR_XM_DKIM_Undo 40522 10.46 29.83 2.26 23 T_KAM_HTML_FONT_INVALID 40109 27.25 29.53 26.29 24 DCC_CHECK_NEGATIVE 33324 49.86 24.53 60.57 25 BAYES_999 32729 8.96 24.10 2.56 26 XMSubLong 32492 23.06 23.92 22.70 27 TR_XM_DK_Unsub 31460 16.60 23.16 13.82 28 T_TM2_M_HEADER_IN_MSG 30212 27.03 22.24 29.06 29 TR_DCC_Bayes_99 29901 7.52 22.01 1.38 30 XM_Multi_Part_URI 28808 16.73 21.21 14.84 31 RCVD_IN_MSPIKE_H2 27632 17.33 20.34 16.05 32 XM_B_Unsub 27181 12.46 20.01 9.27 33 TR_XM_BayesUnsub 25957 11.02 19.11 7.60 34 UNPARSEABLE_RELAY 24550 13.78 18.07 11.96 35 RELAYCOUNTRY_META 24117 8.08 17.76 3.99 36 XM_B_SpammyWords3 20577 7.86 15.15 4.77 37 TR_MAX_INTL_RELAY 20262 9.12 14.92 6.67 38 LOTS_OF_MONEY 18215 8.19 13.41 5.98 39 TR_XM_SpammyRelay 17823 5.43 13.12 2.18 40 BOTNET_IPINHOSTNAME 17443 6.12 12.84 3.27 41 TR_XM_SpammyWords4 16599 6.54 12.22 4.14 42 XM_Evil_Numbers_Gen 14440 9.37 10.63 8.84 43 RCVD_IN_BL_SPAMCOP_NET 14306 3.55 10.53 0.59 44 TR_XM_SpammyWords2 14273 3.49 10.51 0.53 45 FSL_BULK_SIG 13805 8.86 10.16 8.31 46 BOTNET 13083 3.91 9.63 1.49 47 TR_XM_UnparsRelay 12817 4.10 9.44 1.84 48 RCVD_IN_MSPIKE_WL 12587 15.69 9.27 18.41 49 BAYES_80 12545 5.72 9.24 4.23 50 XM_B_Phish_Phrases 12343 6.45 9.09 5.34 51 BAYES_60 10554 8.63 7.77 9.00 52 LotsOfNums_01 9653 7.76 7.11 8.03 53 RELAYCOUNTRY_CA 9270 2.55 6.82 0.74 54 XM_Body_Dirty_Words 9134 4.15 6.72 3.06 55 HTML_IMAGE_RATIO_02 8973 4.97 6.61 4.28 56 XM_B_PhoneNumber 8933 9.01 6.58 10.04 57 MPART_ALT_DIFF 8810 8.67 6.49 9.59 58 XMSubMetaSx_00 8750 4.47 6.44 3.64 59 UNTRUSTED_Relay 8552 2.97 6.30 1.56 60 XM_H_Long_From01 8352 5.84 6.15 5.71 61 XM_UncommonTLD01 8110 4.77 5.97 4.26 62 XM_B_Investor 7626 2.83 5.61 1.65 63 XM_H_GMP 7577 5.75 5.58 5.82 64 TR_XM_SPAMCOP 7301 1.70 5.38 0.15 65 HTML_IMAGE_RATIO_04 6860 5.82 5.05 6.14 66 BAYES_95 6859 3.22 5.05 2.44 67 DKIM_INVALID 6856 2.96 5.05 2.08 68 TR_XM_PhishingBody 6705 2.61 4.94 1.63 69 RCVD_IN_MSPIKE_H3 6447 7.00 4.75 7.96 70 TR_XM_MSPIKECOMBO 6402 2.00 4.71 0.85 71 RCVD_IN_MSPIKE_BL 6402 2.00 4.71 0.85 72 XMSexyCombo_05 6278 2.60 4.62 1.74 73 XMStrtUSub 5828 4.53 4.29 4.63 74 TM2_M_VERY_LONG_WORD 5517 2.13 4.06 1.32 75 HTML_IMAGE_RATIO_06 5411 5.67 3.98 6.38 76 T_XMDrugObfuBody_14 5392 2.54 3.97 1.93 77 TooManyTo_001 5205 6.66 3.83 7.85 78 RCVD_IN_VALIDITY_RPBL 5196 1.16 3.83 0.03 79 TR_XM_SpammyWords5 5169 1.99 3.81 1.22 80 XM_OfRef6 5065 1.75 3.73 0.92 81 MIME_HTML_MOSTLY 4951 2.67 3.64 2.26 82 XM_B_SpammyTLD 4951 3.04 3.64 2.78 83 XMNumbers 4916 3.23 3.62 3.06 84 TR_XM_SpammyWords3 4866 1.34 3.58 0.39 85 TR_XM_NoHeaderRelay 4645 1.17 3.42 0.22 86 XM_B_Unsub2 4547 1.92 3.35 1.32 87 XM_URI_RBL 4470 1.18 3.29 0.29 88 XM_SPF_SoftFail 4457 1.98 3.28 1.43 89 XM_CamelCaseFrm001 4396 2.44 3.24 2.11 90 XM_UB50 4185 1.61 3.08 0.99 91 MIME_QP_LONG_LINE 4171 4.75 3.07 5.46 92 MIME_HTML_ONLY_MULTI 4142 2.84 3.05 2.75 93 XM_B_URI_Unicode 4130 2.19 3.04 1.83 94 XM_SendGrid 4110 2.99 3.03 2.98 95 TM2_M_URI_OPT_OUT 4104 2.20 3.02 1.85 96 T_XMDrugObfuBody_08 3796 1.86 2.79 1.46 97 ALL_TRUSTED 3668 14.22 2.70 19.09 98 RELAYCOUNTRY_AU 3642 1.42 2.68 0.89 99 XMDiploma_00 3561 1.69 2.62 1.30 100 HTML_IMAGE_RATIO_08 3546 2.36 2.61 2.26 101 T_TooManySym_01 3527 4.91 2.60 5.89 102 RCVD_IN_MSPIKE_H4 3337 3.52 2.46 3.96 103 XM_B_SpammyWords4 3337 1.09 2.46 0.51 104 XMStockSpam_06 3325 1.52 2.45 1.12 105 TR_XM_INV_DKIM 3254 0.77 2.40 0.08 106 RCVD_IN_MSPIKE_L3 3225 1.16 2.37 0.64 107 FROM_EXCESS_BASE64 3080 1.82 2.27 1.63 108 XMBody_17 3063 0.97 2.26 0.43 109 MAILING_LIST_MULTI 3008 2.86 2.21 3.13 110 USER_IN_DEF_DKIM_WL 2997 9.86 2.21 13.10 111 RCVD_IN_VALIDITY_SAFE 2894 3.40 2.13 3.93 112 XM_H_Long_From02 2835 1.26 2.09 0.91 113 RCVD_IN_MSPIKE_H5 2803 5.17 2.06 6.49 114 T_FILL_THIS_FORM_SHORT 2798 1.27 2.06 0.94 115 SpammyFromTLD_02 2787 0.89 2.05 0.40 116 SUBJ_ALL_CAPS 2694 1.58 1.98 1.42 117 T_XMHurry_00 2644 0.96 1.95 0.54 118 HTML_MIME_NO_HTML_TAG 2592 2.30 1.91 2.47 119 SpammyFromTLD_01 2518 1.25 1.85 0.99 120 BAYES_40 2506 4.07 1.84 5.01 121 TR_XM_DK_SendGrid 2453 1.96 1.81 2.03 122 XM_DK_Undo_01 2424 1.72 1.78 1.70 123 TR_XM_MSPIKECOMBO2 2344 0.54 1.73 0.04 124 RCVD_IN_VALIDITY_CERTIFIED 2313 2.87 1.70 3.36 125 XMBrknScrpt_02 2256 1.11 1.66 0.87 126 URI_NOVOWEL 2210 1.50 1.63 1.45 127 DKIM_ADSP_CUSTOM_MED 2177 1.05 1.60 0.82 128 MPART_ALT_DIFF_COUNT 2160 0.79 1.59 0.45 129 SCC_BODY_URI_ONLY 2147 2.16 1.58 2.40 130 TR_LOTS_OF_MONEY3 2143 0.66 1.58 0.28 131 XMGenDplmaNmb 2115 0.90 1.56 0.62 132 T_XMDrugObfuBody_00 2106 1.04 1.55 0.82 133 RCVD_IN_MSPIKE_L4 2080 0.60 1.53 0.20 134 XMPhish14 2024 0.81 1.49 0.52 135 BAYES_20 2001 2.95 1.47 3.57 136 URI_HEX 1994 1.33 1.47 1.27 137 T_REMOTE_IMAGE 1987 2.79 1.46 3.35 138 XMPhish30 1965 0.74 1.45 0.44 139 KHOP_HELO_FCRDNS 1902 1.31 1.40 1.28 140 SHORTCIRCUIT 1897 0.42 1.40 0.00 141 RCVD_IN_ZEN_LASTEXTERNAL 1897 0.42 1.40 0.00 142 NML_ADSP_CUSTOM_MED 1869 0.78 1.38 0.53 143 BOTNET_NORDNS 1805 0.40 1.33 0.01 144 FORGED_GMAIL_RCVD 1777 0.75 1.31 0.52 145 URI_TRY_3LD 1759 0.66 1.30 0.39 146 RCVD_IN_IADB_LISTED 1742 2.95 1.28 3.65 147 XM_B_COPY_HTML 1736 0.78 1.28 0.56 148 XMBdyGiftCard01 1733 0.80 1.28 0.60 149 XM_B_Phish66 1733 0.65 1.28 0.39 150 T_MONEY_PERCENT 1702 0.50 1.25 0.18 151 TR_LOTS_OF_MONEY2 1702 0.50 1.25 0.18 152 DIET_1 1674 0.64 1.23 0.40 153 XM_B_DNDMA 1644 0.68 1.21 0.45 154 RDNS_DYNAMIC 1622 0.47 1.19 0.16 155 RELAYCOUNTRY_FR 1619 0.54 1.19 0.27 156 TR_MetaPhish_Combo_01 1607 1.39 1.18 1.48 157 PDS_RDNS_DYNAMIC_FP 1595 0.37 1.17 0.04 158 HTTPS_HTTP_MISMATCH 1590 0.81 1.17 0.66 159 TR_XM_InvalidRelay 1579 0.35 1.16 0.01 160 TR_XM_PHPForged 1553 0.58 1.14 0.34 161 XM_B_SEO 1547 0.51 1.14 0.25 162 TR_XM_FormFill2 1542 0.59 1.14 0.36 163 TM2_M_A_HREF_HREF 1525 0.54 1.12 0.30 164 TR_XM_PHPDW 1522 0.58 1.12 0.35 165 RCVD_IN_PSBL 1512 0.69 1.11 0.51 166 RCVD_IN_PBL 1511 0.81 1.11 0.68 167 RCVD_IN_IADB_SPF 1506 2.55 1.11 3.16 168 TM2_M_OBFU_COMMENT 1505 0.50 1.11 0.25 169 URIBL_BLACK 1500 0.37 1.10 0.06 170 XM_H_PHPOS 1493 0.56 1.10 0.34 171 XM_HighProb1 1486 0.33 1.09 0.00 172 TR_XM_Base64_M1 1470 0.78 1.08 0.66 173 TVD_RCVD_IP 1448 0.94 1.07 0.89 174 HTML_IMAGE_ONLY_20 1446 0.54 1.06 0.31 175 XMMoneyMeta_00 1445 0.68 1.06 0.52 176 XMSubMetaI_00 1392 0.63 1.02 0.46 177 RCVD_IN_IADB_SENDERID 1391 2.28 1.02 2.81 178 RCVD_IN_IADB_DK 1389 2.21 1.02 2.72 179 TR_XM_SEO4 1378 0.37 1.01 0.10 180 XM_B_COVIDMETA 1366 0.38 1.01 0.12 181 TR_XM_RelayPhish 1320 0.33 0.97 0.06 182 XM_UB60 1320 0.35 0.97 0.09 183 XM_UB99 1306 0.29 0.96 0.00 184 XM_PDF 1304 3.34 0.96 4.34 185 XM_ProductURIs 1295 0.71 0.95 0.60 186 LongTLD 1268 0.60 0.93 0.46 187 MISSING_HEADERS 1250 0.48 0.92 0.30 188 HTML_FONT_TINY_NORDNS 1244 0.36 0.92 0.13 189 XMHTML_After_End 1244 0.56 0.92 0.41 190 XMClaimOffer 1240 0.68 0.91 0.58 191 RELAYCOUNTRY_GB 1236 0.70 0.91 0.61 192 TR_Symld_Words 1210 1.32 0.89 1.50 193 XM_GoogleGroups 1209 1.20 0.89 1.33 194 XM_Combo_Sbj 1203 0.40 0.89 0.19 195 T_TooManySym_02 1199 2.27 0.88 2.86 196 XM_DIRTYINTL 1185 0.30 0.87 0.05 197 TR_XM_MaxSPIKE 1182 0.29 0.87 0.04 198 HELO_DYNAMIC_SPLIT_IP 1172 0.26 0.86 0.01 199 XMSexyCombo_01 1156 0.38 0.85 0.18 200 THIS_AD 1152 0.50 0.85 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 319518 99.19 98.42 99.52 2 HTML_MESSAGE 280724 89.78 95.31 87.44 3 RELAYCOUNTRY_US 249890 78.84 81.23 77.83 4 DKIM_SIGNED 238038 78.76 89.67 74.14 5 XM_B_Unicode 235587 76.82 84.96 73.38 6 XM_DK_Pass 234599 76.71 85.33 73.07 7 DKIM_VALID 231355 75.80 84.62 72.06 8 DCC_CHECK_NEGATIVE 194462 49.86 24.53 60.57 9 BAYES_50 193217 54.33 40.49 60.18 10 DKIM_VALID_AU 187395 60.60 65.86 58.37 11 XMListUnsubscribeExists 154830 53.84 67.11 48.23 12 XM_B_Unicode3 144908 46.28 48.99 45.13 13 XM_B_SpammyWords 140461 51.26 69.01 43.75 14 DCC_CHECK 126391 49.68 74.05 39.37 15 HTML_FONT_LOW_CONTRAST 102941 33.83 38.01 32.06 16 DKIM_VALID_EF 94666 30.13 31.66 29.49 17 T_TM2_M_HEADER_IN_MSG 93287 27.03 22.24 29.06 18 LOC_TINY_FONT_1 90854 34.23 48.25 28.30 19 T_KAM_HTML_FONT_INVALID 84412 27.25 29.53 26.29 20 FVGT_m_MULTI_ODD 83969 28.81 35.08 26.15 21 MIME_HTML_ONLY 75181 25.33 29.86 23.42 22 XMSubLong 72872 23.06 23.92 22.70 23 ALL_TRUSTED 61287 14.22 2.70 19.09 24 RCVD_IN_MSPIKE_WL 59108 15.69 9.27 18.41 25 XM_B_SpammyWords2 58653 24.77 40.12 18.27 26 RCVD_IN_MSPIKE_H2 51543 17.33 20.34 16.05 27 XM_Multi_Part_URI 47632 16.73 21.21 14.84 28 TR_XM_DK_Unsub 44378 16.60 23.16 13.82 29 USER_IN_DEF_DKIM_WL 42045 9.86 2.21 13.10 30 UNPARSEABLE_RELAY 38411 13.78 18.07 11.96 31 XM_B_PhoneNumber 32218 9.01 6.58 10.04 32 BAYES_00 31979 7.25 0.83 9.96 33 MPART_ALT_DIFF 30790 8.67 6.49 9.59 34 XM_B_Unsub 29762 12.46 20.01 9.27 35 BAYES_60 28886 8.63 7.77 9.00 36 XM_Evil_Numbers_Gen 28373 9.37 10.63 8.84 37 FSL_BULK_SIG 26693 8.86 10.16 8.31 38 LotsOfNums_01 25779 7.76 7.11 8.03 39 RCVD_IN_MSPIKE_H3 25554 7.00 4.75 7.96 40 TooManyTo_001 25204 6.66 3.83 7.85 41 TR_XM_BayesUnsub 24409 11.02 19.11 7.60 42 XM_DKIMWhitelistDomains 23157 5.07 0.01 7.21 43 TR_XM_DK_Bayes 22614 5.15 0.68 7.04 44 TR_XM_DK_Bayes1 22245 5.07 0.67 6.93 45 TR_MAX_INTL_RELAY 21419 9.12 14.92 6.67 46 RCVD_IN_MSPIKE_H5 20827 5.17 2.06 6.49 47 HTML_IMAGE_RATIO_06 20497 5.67 3.98 6.38 48 HTML_IMAGE_RATIO_04 19723 5.82 5.05 6.14 49 LOTS_OF_MONEY 19189 8.19 13.41 5.98 50 T_TooManySym_01 18895 4.91 2.60 5.89 51 XM_H_GMP 18701 5.75 5.58 5.82 52 TR_XM_DK_Bayes2 18639 4.23 0.51 5.81 53 XM_H_Long_From01 18336 5.84 6.15 5.71 54 MIME_QP_LONG_LINE 17540 4.75 3.07 5.46 55 BASE64_LENGTH_79_INF 17247 3.98 0.68 5.37 56 XM_B_Phish_Phrases 17147 6.45 9.09 5.34 57 TO_NO_BRKTS_HTML_IMG 16234 3.71 0.52 5.06 58 XM_DK_Undo_02 16219 15.85 41.39 5.05 59 BAYES_40 16089 4.07 1.84 5.01 60 XM_B_SpammyWords3 15328 7.86 15.15 4.77 61 XMStrtUSub 14861 4.53 4.29 4.63 62 XM_PDF 13937 3.34 0.96 4.34 63 HTML_IMAGE_RATIO_02 13750 4.97 6.61 4.28 64 XM_UncommonTLD01 13689 4.77 5.97 4.26 65 BAYES_80 13579 5.72 9.24 4.23 66 TR_XM_SpammyWords4 13304 6.54 12.22 4.14 67 RELAYCOUNTRY_META 12801 8.08 17.76 3.99 68 RCVD_IN_MSPIKE_H4 12727 3.52 2.46 3.96 69 RCVD_IN_VALIDITY_SAFE 12632 3.40 2.13 3.93 70 RCVD_IN_IADB_LISTED 11715 2.95 1.28 3.65 71 XMSubMetaSx_00 11686 4.47 6.44 3.64 72 BAYES_20 11472 2.95 1.47 3.57 73 BAYES_99 11087 11.71 31.21 3.45 74 RCVD_IN_VALIDITY_CERTIFIED 10779 2.87 1.70 3.36 75 T_REMOTE_IMAGE 10769 2.79 1.46 3.35 76 BOTNET_IPINHOSTNAME 10505 6.12 12.84 3.27 77 RCVD_IN_IADB_SPF 10155 2.55 1.11 3.16 78 MAILING_LIST_MULTI 10065 2.86 2.21 3.13 79 XMNumbers 9836 3.23 3.62 3.06 80 ANY_BOUNCE_MESSAGE 9812 2.39 0.80 3.06 81 XM_Body_Dirty_Words 9812 4.15 6.72 3.06 82 BOUNCE_MESSAGE 9809 2.38 0.80 3.06 83 XM_SendGrid 9563 2.99 3.03 2.98 84 T_TooManySym_02 9170 2.27 0.88 2.86 85 RCVD_IN_IADB_SENDERID 9019 2.28 1.02 2.81 86 XM_B_SpammyTLD 8938 3.04 3.64 2.78 87 MIME_HTML_ONLY_MULTI 8834 2.84 3.05 2.75 88 RCVD_IN_IADB_DK 8724 2.21 1.02 2.72 89 TooManyTo_002 8271 2.02 0.71 2.58 90 BAYES_999 8213 8.96 24.10 2.56 91 HTML_MIME_NO_HTML_TAG 7923 2.30 1.91 2.47 92 RCVD_IN_IADB_VOUCHED 7891 1.96 0.77 2.46 93 BAYES_95 7830 3.22 5.05 2.44 94 SCC_BODY_URI_ONLY 7699 2.16 1.58 2.40 95 TR_XM_DKIM_Undo 7252 10.46 29.83 2.26 96 MIME_HTML_MOSTLY 7244 2.67 3.64 2.26 97 HTML_IMAGE_RATIO_08 7241 2.36 2.61 2.26 98 INVALID_MSGID 7179 1.63 0.18 2.24 99 TR_XM_SpammyRelay 6984 5.43 13.12 2.18 100 BAYES_05 6906 1.72 0.70 2.15 101 XM_CamelCaseFrm001 6771 2.44 3.24 2.11 102 DKIM_INVALID 6683 2.96 5.05 2.08 103 TR_XM_DK_SendGrid 6519 1.96 1.81 2.03 104 TO_MALFORMED 6382 1.40 0.00 1.99 105 T_XMDrugObfuBody_14 6196 2.54 3.97 1.93 106 TM2_M_URI_OPT_OUT 5952 2.20 3.02 1.85 107 TR_XM_UnparsRelay 5902 4.10 9.44 1.84 108 XM_B_URI_Unicode 5877 2.19 3.04 1.83 109 XMSexyCombo_05 5582 2.60 4.62 1.74 110 RCVD_IN_IADB_OPTIN 5492 1.36 0.52 1.71 111 XM_DK_Undo_01 5455 1.72 1.78 1.70 112 XM_B_Investor 5293 2.83 5.61 1.65 113 FROM_EXCESS_BASE64 5232 1.82 2.27 1.63 114 TR_XM_PhishingBody 5225 2.61 4.94 1.63 115 TooManyTo_003 5142 1.30 0.57 1.60 116 UNTRUSTED_Relay 5002 2.97 6.30 1.56 117 TR_Symld_Words 4821 1.32 0.89 1.50 118 BOTNET 4778 3.91 9.63 1.49 119 TR_MetaPhish_Combo_01 4766 1.39 1.18 1.48 120 T_XMDrugObfuBody_08 4701 1.86 2.79 1.46 121 URI_NOVOWEL 4647 1.50 1.63 1.45 122 XM_SPF_SoftFail 4589 1.98 3.28 1.43 123 SUBJ_ALL_CAPS 4543 1.58 1.98 1.42 124 TR_DCC_Bayes_99 4440 7.52 22.01 1.38 125 XM_GoogleGroups 4279 1.20 0.89 1.33 126 HELO_NODOT 4246 0.99 0.19 1.32 127 HELO_NO_DOMAIN 4237 0.98 0.18 1.32 128 XM_B_Unsub2 4233 1.92 3.35 1.32 129 TM2_M_VERY_LONG_WORD 4227 2.13 4.06 1.32 130 XMDiploma_00 4168 1.69 2.62 1.30 131 KHOP_HELO_FCRDNS 4103 1.31 1.40 1.28 132 URI_HEX 4075 1.33 1.47 1.27 133 TR_XM_SpammyWords5 3918 1.99 3.81 1.22 134 XMCapTrack 3828 0.99 0.51 1.19 135 XMGappySubj_01 3818 0.88 0.16 1.19 136 IN_HORDE_ADDRESS_BOOK 3799 0.87 0.14 1.18 137 TooManyTo_004 3666 0.95 0.49 1.14 138 XMStockSpam_06 3600 1.52 2.45 1.12 139 T_TooManySym_03 3513 0.87 0.35 1.09 140 SpammyFromTLD_01 3182 1.25 1.85 0.99 141 XM_UB50 3178 1.61 3.08 0.99 142 TVD_SPACE_RATIO 3062 0.72 0.17 0.95 143 T_FILL_THIS_FORM_SHORT 3003 1.27 2.06 0.94 144 XM_OfRef6 2938 1.75 3.73 0.92 145 XM_H_Long_From02 2907 1.26 2.09 0.91 146 TooManyTo_005 2856 0.75 0.43 0.89 147 RELAYCOUNTRY_AU 2844 1.42 2.68 0.89 148 TVD_RCVD_IP 2842 0.94 1.07 0.89 149 XMBrknScrpt_02 2799 1.11 1.66 0.87 150 XM_ShortIntro_01 2734 0.73 0.44 0.85 151 TR_XM_MSPIKECOMBO 2726 2.00 4.71 0.85 152 RCVD_IN_MSPIKE_BL 2726 2.00 4.71 0.85 153 T_XMDrugObfuBody_00 2633 1.04 1.55 0.82 154 DKIM_ADSP_CUSTOM_MED 2623 1.05 1.60 0.82 155 RELAYCOUNTRY_CA 2372 2.55 6.82 0.74 156 URI_OPTOUT_3LD 2286 0.73 0.77 0.71 157 FROM_GOV_DKIM_AU 2228 0.59 0.36 0.69 158 XM_H_PHPMailer 2203 0.66 0.60 0.69 159 RCVD_IN_PBL 2193 0.81 1.11 0.68 160 T_Symld_Words_02 2147 0.67 0.67 0.67 161 TR_XM_Base64_M1 2116 0.78 1.08 0.66 162 HTTPS_HTTP_MISMATCH 2115 0.81 1.17 0.66 163 XMGappySubj_02 2060 0.46 0.05 0.64 164 RCVD_IN_MSPIKE_L3 2060 1.16 2.37 0.64 165 XMSlimDrugH 2053 0.68 0.77 0.64 166 XMNoVowels 2028 0.58 0.46 0.63 167 XMBSHREFv2 2008 0.53 0.31 0.63 168 T_OBFU_PDF_ATTACH 2004 0.51 0.22 0.62 169 XMGenDplmaNmb 1996 0.90 1.56 0.62 170 RELAYCOUNTRY_GB 1956 0.70 0.91 0.61 171 XM_ProductURIs 1928 0.71 0.95 0.60 172 XMBdyGiftCard01 1922 0.80 1.28 0.60 173 RCVD_IN_BL_SPAMCOP_NET 1896 3.55 10.53 0.59 174 XMClaimOffer 1867 0.68 0.91 0.58 175 XM_B_COPY_HTML 1806 0.78 1.28 0.56 176 T_XMHurry_00 1726 0.96 1.95 0.54 177 NML_ADSP_CUSTOM_MED 1699 0.78 1.38 0.53 178 TR_XM_SpammyWords2 1687 3.49 10.51 0.53 179 XMMoneyMeta_00 1669 0.68 1.06 0.52 180 FORGED_GMAIL_RCVD 1664 0.75 1.31 0.52 181 XMPhish14 1662 0.81 1.49 0.52 182 MSGID_FROM_MTA_HEADER 1655 0.42 0.21 0.52 183 XM_B_SpammyWords4 1642 1.09 2.46 0.51 184 RCVD_IN_PSBL 1631 0.69 1.11 0.51 185 XMSolicitRefs_0 1615 0.50 0.49 0.50 186 HTML_TAG_BALANCE_BODY 1575 0.59 0.82 0.49 187 HTML_IMAGE_ONLY_32 1572 0.39 0.16 0.49 188 XMLngstWrd_00 1543 0.47 0.45 0.48 189 T_TVD_MIME_NO_HEADERS 1501 0.35 0.06 0.47 190 XMSubMetaI_00 1486 0.63 1.02 0.46 191 LongTLD 1472 0.60 0.93 0.46 192 XM_B_DNDMA 1449 0.68 1.21 0.45 193 MPART_ALT_DIFF_COUNT 1431 0.79 1.59 0.45 194 XMBody_95 1410 0.34 0.12 0.44 195 XMPhish30 1409 0.74 1.45 0.44 196 XMBody_17 1382 0.97 2.26 0.43 197 XMLngstWrd_01 1362 0.42 0.41 0.42 198 SHORT_HELO_AND_INLINE_IMAGE 1336 0.30 0.03 0.42 199 XMDateMe_00 1327 0.46 0.57 0.41 200 XMHTML_After_End 1325 0.56 0.92 0.41 ----------------------------------------------------------------------