Email: 411562 Autolearn: 0 AvgScore: 5.83 AvgScanTime: 1.39 sec Spam: 128808 Autolearn: 0 AvgScore: 16.00 AvgScanTime: 1.57 sec Ham: 282754 Autolearn: 0 AvgScore: 1.20 AvgScanTime: 1.31 sec Time Spent Running SA: 158.63 hours Time Spent Processing Spam: 56.01 hours Time Spent Processing Ham: 102.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 124490 98.63 96.65 99.53 2 HTML_MESSAGE 120857 88.50 93.83 86.08 3 DKIM_SIGNED 114283 80.09 88.72 76.15 4 XM_DK_Pass 109626 78.21 85.11 75.07 5 DKIM_VALID 108853 77.41 84.51 74.18 6 XM_B_Unicode 107320 74.38 83.32 70.31 7 RELAYCOUNTRY_US 103648 80.74 80.47 80.87 8 DCC_CHECK 93562 51.04 72.64 41.20 9 XM_B_SpammyWords 87865 52.44 68.21 45.25 10 XMListUnsubscribeExists 85918 54.06 66.70 48.29 11 DKIM_VALID_AU 84217 62.01 65.38 60.48 12 XM_B_Unicode3 63521 44.07 49.31 41.68 13 LOC_TINY_FONT_1 61439 34.59 47.70 28.61 14 XM_DK_Undo_02 54320 17.01 42.17 5.54 15 BAYES_50 51609 54.53 40.07 61.11 16 XM_B_SpammyWords2 51310 26.42 39.83 20.31 17 HTML_FONT_LOW_CONTRAST 48265 31.32 37.47 28.52 18 FVGT_m_MULTI_ODD 46819 30.34 36.35 27.60 19 DKIM_VALID_EF 41495 30.82 32.21 30.19 20 BAYES_99 39682 12.46 30.81 4.10 21 TR_XM_DKIM_Undo 38907 11.09 30.21 2.39 22 T_KAM_HTML_FONT_INVALID 37841 24.81 29.38 22.73 23 MIME_HTML_ONLY 36425 23.22 28.28 20.91 24 DCC_CHECK_NEGATIVE 31128 47.93 24.17 58.75 25 BAYES_999 30912 9.58 24.00 3.01 26 T_TM2_M_HEADER_IN_MSG 30704 28.59 23.84 30.75 27 TR_XM_DK_Unsub 29917 16.88 23.23 13.98 28 XMSubLong 29859 23.54 23.18 23.71 29 XM_Multi_Part_URI 28378 16.92 22.03 14.59 30 TR_DCC_Bayes_99 27383 7.73 21.26 1.56 31 RCVD_IN_MSPIKE_H2 26493 18.16 20.57 17.06 32 XM_B_Unsub 25474 13.18 19.78 10.18 33 TR_XM_BayesUnsub 24572 11.58 19.08 8.16 34 UNPARSEABLE_RELAY 22879 13.96 17.76 12.23 35 RELAYCOUNTRY_META 20825 7.70 16.17 3.85 36 XM_B_SpammyWords3 19525 8.07 15.16 4.84 37 TR_MAX_INTL_RELAY 17921 8.85 13.91 6.54 38 LOTS_OF_MONEY 16964 8.17 13.17 5.89 39 TR_XM_SpammyRelay 15158 4.95 11.77 1.84 40 RCVD_IN_BL_SPAMCOP_NET 15086 4.13 11.71 0.68 41 TR_XM_SpammyWords4 15042 6.40 11.68 4.00 42 BOTNET_IPINHOSTNAME 14955 5.93 11.61 3.35 43 TR_XM_SpammyWords2 14313 3.82 11.11 0.50 44 FSL_BULK_SIG 13025 9.47 10.11 9.18 45 XM_B_Phish_Phrases 12021 7.31 9.33 6.39 46 TR_XM_UnparsRelay 12017 4.14 9.33 1.78 47 XM_Evil_Numbers_Gen 11734 8.93 9.11 8.84 48 BOTNET 11411 3.73 8.86 1.40 49 RCVD_IN_MSPIKE_WL 11277 15.33 8.75 18.33 50 BAYES_80 10987 5.41 8.53 3.99 51 BAYES_60 9917 7.74 7.70 7.76 52 XM_Body_Dirty_Words 9602 4.74 7.45 3.51 53 LotsOfNums_01 9300 7.67 7.22 7.88 54 RELAYCOUNTRY_CA 9179 2.75 7.13 0.76 55 HTML_IMAGE_RATIO_02 8289 5.23 6.44 4.68 56 XMSubMetaSx_00 8238 4.79 6.40 4.06 57 XM_B_PhoneNumber 8020 8.02 6.23 8.83 58 MPART_ALT_DIFF 7863 6.03 6.10 5.99 59 TR_XM_SPAMCOP 7808 2.04 6.06 0.21 60 XM_UncommonTLD01 7231 4.60 5.61 4.13 61 XM_B_Investor 7169 2.77 5.57 1.50 62 TR_XM_PhishingBody 7049 2.80 5.47 1.58 63 UNTRUSTED_Relay 6810 2.73 5.29 1.56 64 XM_H_Long_From01 6761 5.66 5.25 5.85 65 XM_H_GMP 6709 5.95 5.21 6.29 66 TM2_M_VERY_LONG_WORD 6613 2.83 5.13 1.78 67 BAYES_95 6494 3.33 5.04 2.54 68 HTML_IMAGE_RATIO_04 6374 5.09 4.95 5.15 69 XMSexyCombo_05 6345 2.62 4.93 1.57 70 RCVD_IN_MSPIKE_BL 5917 2.10 4.59 0.96 71 TR_XM_MSPIKECOMBO 5917 2.10 4.59 0.96 72 RCVD_IN_MSPIKE_H3 5740 6.81 4.46 7.89 73 RCVD_IN_VALIDITY_RPBL 5639 1.39 4.38 0.03 74 DKIM_INVALID 5430 2.67 4.22 1.97 75 T_XMDrugObfuBody_14 5373 2.67 4.17 1.98 76 XM_B_SpammyTLD 5222 3.26 4.05 2.90 77 TooManyTo_001 5158 7.02 4.00 8.39 78 XM_B_Unsub2 5063 2.69 3.93 2.13 79 MIME_HTML_MOSTLY 4948 2.86 3.84 2.42 80 XM_OfRef6 4907 2.01 3.81 1.18 81 XMStrtUSub 4704 4.36 3.65 4.68 82 XM_CamelCaseFrm001 4315 2.43 3.35 2.02 83 MIME_HTML_ONLY_MULTI 4139 2.89 3.21 2.75 84 RCVD_IN_ZEN_LASTEXTERNAL 4097 1.00 3.18 0.00 85 SHORTCIRCUIT 4097 1.00 3.18 0.00 86 TR_XM_SpammyWords5 4072 1.82 3.16 1.20 87 TR_XM_SpammyWords3 4040 1.23 3.14 0.36 88 T_TooManySym_01 3927 5.86 3.05 7.13 89 XMNumbers 3906 3.19 3.03 3.26 90 XM_SendGrid 3862 3.12 3.00 3.18 91 T_XMDrugObfuBody_08 3840 1.95 2.98 1.48 92 HTML_IMAGE_RATIO_06 3822 3.77 2.97 4.14 93 XM_SPF_SoftFail 3795 1.90 2.95 1.42 94 XMBody_17 3747 1.18 2.91 0.39 95 XM_URI_RBL 3658 1.11 2.84 0.33 96 RELAYCOUNTRY_AU 3524 1.33 2.74 0.69 97 XM_UB50 3501 1.51 2.72 0.96 98 XM_B_URI_Unicode 3497 2.12 2.71 1.85 99 HTML_IMAGE_RATIO_08 3466 2.41 2.69 2.28 100 MIME_QP_LONG_LINE 3453 4.11 2.68 4.75 101 TR_XM_NoHeaderRelay 3450 0.98 2.68 0.21 102 RCVD_IN_VALIDITY_SAFE 3416 3.56 2.65 3.98 103 XMDiploma_00 3410 1.85 2.65 1.48 104 FROM_EXCESS_BASE64 3345 1.90 2.60 1.59 105 RCVD_IN_MSPIKE_L3 3162 1.21 2.45 0.65 106 USER_IN_DEF_DKIM_WL 2995 10.03 2.33 13.54 107 TM2_M_URI_OPT_OUT 2993 1.99 2.32 1.84 108 RCVD_IN_MSPIKE_H4 2940 3.40 2.28 3.91 109 XM_B_SpammyWords4 2876 1.18 2.23 0.69 110 ALL_TRUSTED 2830 11.76 2.20 16.12 111 SpammyFromTLD_02 2822 1.12 2.19 0.63 112 XMStockSpam_06 2820 1.52 2.19 1.22 113 RCVD_IN_VALIDITY_CERTIFIED 2746 3.01 2.13 3.42 114 XMPhish30 2715 0.94 2.11 0.40 115 MAILING_LIST_MULTI 2710 3.02 2.10 3.44 116 XMBrknScrpt_02 2629 1.33 2.04 1.01 117 RCVD_IN_MSPIKE_H5 2597 5.11 2.02 6.52 118 ANY_BOUNCE_MESSAGE 2596 3.92 2.02 4.79 119 SUBJ_ALL_CAPS 2587 1.80 2.01 1.71 120 MPART_ALT_DIFF_COUNT 2582 0.93 2.00 0.45 121 T_XMDrugObfuBody_00 2571 1.14 2.00 0.76 122 BOUNCE_MESSAGE 2564 3.90 1.99 4.78 123 XM_B_Phish66 2475 0.85 1.92 0.36 124 BAYES_40 2459 4.18 1.91 5.22 125 URI_OPTOUT_3LD 2380 1.61 1.85 1.50 126 T_FILL_THIS_FORM_SHORT 2356 1.18 1.83 0.88 127 T_XMHurry_00 2308 0.97 1.79 0.59 128 SpammyFromTLD_01 2292 1.01 1.78 0.65 129 TR_XM_DK_SendGrid 2271 1.98 1.76 2.07 130 TR_XM_INV_DKIM 2221 0.58 1.72 0.06 131 TR_LOTS_OF_MONEY3 2116 0.71 1.64 0.28 132 XM_B_SEO 2101 0.66 1.63 0.22 133 HTML_MIME_NO_HTML_TAG 2096 2.29 1.63 2.60 134 XMLngstWrd_00 2078 1.17 1.61 0.97 135 HK_RANDOM_REPLYTO 1985 0.57 1.54 0.12 136 URI_NOVOWEL 1967 1.27 1.53 1.15 137 KHOP_HELO_FCRDNS 1957 1.60 1.52 1.63 138 XMGenDplmaNmb 1952 1.07 1.52 0.87 139 TM2_M_OBFU_COMMENT 1910 0.73 1.48 0.38 140 TR_XM_SEO4 1908 0.51 1.48 0.07 141 RCVD_IN_MSPIKE_L4 1899 0.67 1.47 0.31 142 XMLngstWrd_01 1889 0.96 1.47 0.72 143 XMBdyGiftCard01 1872 0.84 1.45 0.56 144 T_REMOTE_IMAGE 1837 2.99 1.43 3.71 145 XM_DK_Undo_01 1836 1.74 1.43 1.89 146 XM_B_COPY_HTML 1821 1.18 1.41 1.07 147 TR_XM_MSPIKECOMBO2 1809 0.46 1.40 0.03 148 URI_HEX 1806 1.29 1.40 1.24 149 TR_XM_PHPForged 1758 0.67 1.36 0.35 150 RDNS_DYNAMIC 1755 0.54 1.36 0.17 151 SCC_BODY_URI_ONLY 1754 2.10 1.36 2.44 152 URI_TRY_3LD 1745 0.78 1.35 0.51 153 TR_XM_FormFill2 1727 0.66 1.34 0.35 154 PDS_RDNS_DYNAMIC_FP 1714 0.43 1.33 0.03 155 XMLngstWrd_02 1713 0.75 1.33 0.49 156 XMSexyCombo_01 1706 1.02 1.32 0.88 157 TR_XM_PHPDW 1704 0.65 1.32 0.34 158 XM_H_PHPOS 1690 0.64 1.31 0.33 159 DIET_1 1657 0.71 1.29 0.45 160 XM_H_Long_From02 1643 1.04 1.28 0.93 161 T_MONEY_PERCENT 1630 0.56 1.27 0.24 162 TR_LOTS_OF_MONEY2 1630 0.56 1.27 0.24 163 TR_MetaPhish_Combo_01 1614 1.33 1.25 1.36 164 RCVD_IN_IADB_LISTED 1551 2.76 1.20 3.47 165 DKIM_ADSP_CUSTOM_MED 1530 0.88 1.19 0.75 166 BAYES_20 1504 2.79 1.17 3.52 167 TVD_RCVD_IP 1478 0.94 1.15 0.85 168 XMLngstWrd_03 1455 0.54 1.13 0.27 169 J_POPCORN_WO_D 1455 0.52 1.13 0.24 170 RCVD_IN_PSBL 1420 0.71 1.10 0.52 171 RCVD_IN_IADB_SPF 1377 2.43 1.07 3.05 172 HTTPS_HTTP_MISMATCH 1338 0.73 1.04 0.60 173 PLING_QUERY 1336 0.68 1.04 0.51 174 XMBody_78 1333 0.52 1.03 0.28 175 XM_GoogleGroups 1331 1.24 1.03 1.33 176 LongTLD 1312 0.64 1.02 0.46 177 RELAYCOUNTRY_FR 1311 0.48 1.02 0.24 178 TR_Symld_Words 1288 1.32 1.00 1.47 179 URIBL_BLACK 1280 0.32 0.99 0.02 180 THIS_AD 1275 0.54 0.99 0.33 181 XMSubMetaSSx_00 1273 0.40 0.99 0.13 182 XMSubMetaI_00 1271 0.66 0.99 0.52 183 XM_DIRTYINTL 1249 0.35 0.97 0.06 184 RCVD_IN_IADB_DK 1245 2.12 0.97 2.65 185 RCVD_IN_IADB_SENDERID 1245 2.17 0.97 2.72 186 XM_HighProb1 1241 0.31 0.96 0.01 187 BOTNET_NORDNS 1217 0.30 0.94 0.01 188 HELO_DYNAMIC_SPLIT_IP 1195 0.29 0.93 0.00 189 TR_XM_Base64_M1 1194 0.74 0.93 0.65 190 HTML_FONT_TINY_NORDNS 1193 0.34 0.93 0.08 191 BAYES_00 1191 7.00 0.92 9.77 192 RCVD_IN_PBL 1186 0.82 0.92 0.78 193 XM_ProductURIs 1185 0.63 0.92 0.49 194 TM2_M_A_HREF_HREF 1178 0.50 0.91 0.31 195 TR_Mismatch_TLD_02 1168 0.32 0.91 0.05 196 XM_UB99 1125 0.27 0.87 0.00 197 TR_XM_InvalidRelay 1122 0.28 0.87 0.01 198 XMLngstWrd_04 1121 0.39 0.87 0.17 199 T_STY_INVIS_DIRECT 1106 0.51 0.86 0.36 200 XMPhish14 1048 0.52 0.81 0.38 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 281423 98.63 96.65 99.53 2 HTML_MESSAGE 243395 88.50 93.83 86.08 3 RELAYCOUNTRY_US 228652 80.74 80.47 80.87 4 DKIM_SIGNED 215326 80.09 88.72 76.15 5 XM_DK_Pass 212259 78.21 85.11 75.07 6 DKIM_VALID 209751 77.41 84.51 74.18 7 XM_B_Unicode 198815 74.38 83.32 70.31 8 BAYES_50 172805 54.53 40.07 61.11 9 DKIM_VALID_AU 170998 62.01 65.38 60.48 10 DCC_CHECK_NEGATIVE 166122 47.93 24.17 58.75 11 XMListUnsubscribeExists 136556 54.06 66.70 48.29 12 XM_B_SpammyWords 127943 52.44 68.21 45.25 13 XM_B_Unicode3 117852 44.07 49.31 41.68 14 DCC_CHECK 116492 51.04 72.64 41.20 15 T_TM2_M_HEADER_IN_MSG 86945 28.59 23.84 30.75 16 DKIM_VALID_EF 85355 30.82 32.21 30.19 17 LOC_TINY_FONT_1 80903 34.59 47.70 28.61 18 HTML_FONT_LOW_CONTRAST 80653 31.32 37.47 28.52 19 FVGT_m_MULTI_ODD 78032 30.34 36.35 27.60 20 XMSubLong 67036 23.54 23.18 23.71 21 T_KAM_HTML_FONT_INVALID 64280 24.81 29.38 22.73 22 MIME_HTML_ONLY 59130 23.22 28.28 20.91 23 XM_B_SpammyWords2 57424 26.42 39.83 20.31 24 RCVD_IN_MSPIKE_WL 51817 15.33 8.75 18.33 25 RCVD_IN_MSPIKE_H2 48230 18.16 20.57 17.06 26 ALL_TRUSTED 45580 11.76 2.20 16.12 27 XM_Multi_Part_URI 41245 16.92 22.03 14.59 28 TR_XM_DK_Unsub 39535 16.88 23.23 13.98 29 USER_IN_DEF_DKIM_WL 38296 10.03 2.33 13.54 30 UNPARSEABLE_RELAY 34583 13.96 17.76 12.23 31 XM_B_Unsub 28779 13.18 19.78 10.18 32 BAYES_00 27627 7.00 0.92 9.77 33 FSL_BULK_SIG 25944 9.47 10.11 9.18 34 XM_Evil_Numbers_Gen 25006 8.93 9.11 8.84 35 XM_B_PhoneNumber 24968 8.02 6.23 8.83 36 TooManyTo_001 23719 7.02 4.00 8.39 37 TR_XM_BayesUnsub 23073 11.58 19.08 8.16 38 RCVD_IN_MSPIKE_H3 22305 6.81 4.46 7.89 39 LotsOfNums_01 22269 7.67 7.22 7.88 40 BAYES_60 21930 7.74 7.70 7.76 41 XM_DKIMWhitelistDomains 21209 5.17 0.04 7.50 42 T_TooManySym_01 20170 5.86 3.05 7.13 43 TR_XM_DK_Bayes 19693 5.00 0.70 6.96 44 TR_XM_DK_Bayes1 19446 4.94 0.70 6.88 45 TR_MAX_INTL_RELAY 18485 8.85 13.91 6.54 46 RCVD_IN_MSPIKE_H5 18447 5.11 2.02 6.52 47 XM_B_Phish_Phrases 18070 7.31 9.33 6.39 48 XM_H_GMP 17791 5.95 5.21 6.29 49 MPART_ALT_DIFF 16938 6.03 6.10 5.99 50 LOTS_OF_MONEY 16666 8.17 13.17 5.89 51 XM_H_Long_From01 16547 5.66 5.25 5.85 52 TR_XM_DK_Bayes2 16268 4.13 0.56 5.75 53 XM_DK_Undo_02 15674 17.01 42.17 5.54 54 BAYES_40 14763 4.18 1.91 5.22 55 HTML_IMAGE_RATIO_04 14561 5.09 4.95 5.15 56 XM_B_SpammyWords3 13694 8.07 15.16 4.84 57 ANY_BOUNCE_MESSAGE 13546 3.92 2.02 4.79 58 BOUNCE_MESSAGE 13504 3.90 1.99 4.78 59 MIME_QP_LONG_LINE 13444 4.11 2.68 4.75 60 HTML_IMAGE_RATIO_02 13246 5.23 6.44 4.68 61 XMStrtUSub 13223 4.36 3.65 4.68 62 XM_PDF 12385 3.26 0.81 4.38 63 HTML_IMAGE_RATIO_06 11697 3.77 2.97 4.14 64 XM_UncommonTLD01 11691 4.60 5.61 4.13 65 BAYES_99 11602 12.46 30.81 4.10 66 XMSubMetaSx_00 11469 4.79 6.40 4.06 67 TR_XM_SpammyWords4 11312 6.40 11.68 4.00 68 BAYES_80 11290 5.41 8.53 3.99 69 RCVD_IN_VALIDITY_SAFE 11256 3.56 2.65 3.98 70 RCVD_IN_MSPIKE_H4 11065 3.40 2.28 3.91 71 RELAYCOUNTRY_META 10873 7.70 16.17 3.85 72 T_REMOTE_IMAGE 10479 2.99 1.43 3.71 73 BAYES_20 9964 2.79 1.17 3.52 74 XM_Body_Dirty_Words 9920 4.74 7.45 3.51 75 RCVD_IN_IADB_LISTED 9808 2.76 1.20 3.47 76 MAILING_LIST_MULTI 9725 3.02 2.10 3.44 77 RCVD_IN_VALIDITY_CERTIFIED 9662 3.01 2.13 3.42 78 T_TooManySym_02 9585 2.57 0.77 3.39 79 BOTNET_IPINHOSTNAME 9466 5.93 11.61 3.35 80 XMNumbers 9218 3.19 3.03 3.26 81 XM_SendGrid 8990 3.12 3.00 3.18 82 RCVD_IN_IADB_SPF 8616 2.43 1.07 3.05 83 BAYES_999 8522 9.58 24.00 3.01 84 XM_B_SpammyTLD 8191 3.26 4.05 2.90 85 TooManyTo_002 8108 2.16 0.62 2.87 86 MIME_HTML_ONLY_MULTI 7765 2.89 3.21 2.75 87 RCVD_IN_IADB_SENDERID 7685 2.17 0.97 2.72 88 RCVD_IN_IADB_DK 7495 2.12 0.97 2.65 89 HTML_MIME_NO_HTML_TAG 7349 2.29 1.63 2.60 90 BAYES_95 7191 3.33 5.04 2.54 91 INVALID_MSGID 7070 1.79 0.23 2.50 92 SCC_BODY_URI_ONLY 6894 2.10 1.36 2.44 93 MIME_HTML_MOSTLY 6829 2.86 3.84 2.42 94 TR_XM_DKIM_Undo 6754 11.09 30.21 2.39 95 HTML_IMAGE_RATIO_08 6454 2.41 2.69 2.28 96 TO_MALFORMED 6355 1.55 0.01 2.25 97 RCVD_IN_IADB_VOUCHED 6212 1.72 0.67 2.20 98 XM_B_Unsub2 6015 2.69 3.93 2.13 99 TR_XM_DK_SendGrid 5859 1.98 1.76 2.07 100 XM_CamelCaseFrm001 5701 2.43 3.35 2.02 101 T_XMDrugObfuBody_14 5600 2.67 4.17 1.98 102 DKIM_INVALID 5575 2.67 4.22 1.97 103 BAYES_05 5564 1.56 0.65 1.97 104 XM_DK_Undo_01 5342 1.74 1.43 1.89 105 XM_B_URI_Unicode 5218 2.12 2.71 1.85 106 TR_XM_SpammyRelay 5207 4.95 11.77 1.84 107 TM2_M_URI_OPT_OUT 5202 1.99 2.32 1.84 108 TooManyTo_003 5024 1.39 0.54 1.78 109 TR_XM_UnparsRelay 5023 4.14 9.33 1.78 110 TM2_M_VERY_LONG_WORD 5022 2.83 5.13 1.78 111 SUBJ_ALL_CAPS 4829 1.80 2.01 1.71 112 KHOP_HELO_FCRDNS 4615 1.60 1.52 1.63 113 BASE64_LENGTH_79_INF 4588 1.18 0.22 1.62 114 RCVD_IN_IADB_OPTIN 4545 1.26 0.49 1.61 115 FROM_EXCESS_BASE64 4489 1.90 2.60 1.59 116 TR_XM_PhishingBody 4465 2.80 5.47 1.58 117 XMSexyCombo_05 4427 2.62 4.93 1.57 118 UNTRUSTED_Relay 4419 2.73 5.29 1.56 119 TR_DCC_Bayes_99 4416 7.73 21.26 1.56 120 XMGappySubj_01 4358 1.12 0.19 1.54 121 URI_OPTOUT_3LD 4237 1.61 1.85 1.50 122 XM_B_Investor 4228 2.77 5.57 1.50 123 T_XMDrugObfuBody_08 4196 1.95 2.98 1.48 124 XMDiploma_00 4184 1.85 2.65 1.48 125 TR_Symld_Words 4163 1.32 1.00 1.47 126 XM_SPF_SoftFail 4025 1.90 2.95 1.42 127 IN_HORDE_ADDRESS_BOOK 3981 1.00 0.09 1.41 128 BOTNET 3947 3.73 8.86 1.40 129 T_TooManySym_03 3892 1.07 0.39 1.38 130 TR_MetaPhish_Combo_01 3849 1.33 1.25 1.36 131 XM_GoogleGroups 3759 1.24 1.03 1.33 132 TO_NO_BRKTS_HTML_IMG 3672 0.91 0.05 1.30 133 TooManyTo_004 3607 1.03 0.48 1.28 134 URI_HEX 3518 1.29 1.40 1.24 135 XMStockSpam_06 3437 1.52 2.19 1.22 136 TR_XM_SpammyWords5 3404 1.82 3.16 1.20 137 XM_OfRef6 3349 2.01 3.81 1.18 138 URI_NOVOWEL 3256 1.27 1.53 1.15 139 XM_B_COPY_HTML 3031 1.18 1.41 1.07 140 HELO_NODOT 3007 0.76 0.10 1.06 141 HELO_NO_DOMAIN 3004 0.76 0.09 1.06 142 XMNoVowels 2954 0.95 0.73 1.04 143 TVD_SPACE_RATIO 2949 0.76 0.15 1.04 144 XMCapTrack 2920 0.94 0.74 1.03 145 XMBrknScrpt_02 2863 1.33 2.04 1.01 146 FROM_GOV_DKIM_AU 2813 0.75 0.21 0.99 147 TooManyTo_005 2762 0.80 0.42 0.98 148 XMLngstWrd_00 2733 1.17 1.61 0.97 149 TR_XM_MSPIKECOMBO 2715 2.10 4.59 0.96 150 RCVD_IN_MSPIKE_BL 2715 2.10 4.59 0.96 151 XM_UB50 2713 1.51 2.72 0.96 152 XM_ShortIntro_01 2694 0.76 0.34 0.95 153 XM_H_Long_From02 2634 1.04 1.28 0.93 154 T_FILL_THIS_FORM_SHORT 2494 1.18 1.83 0.88 155 XMSexyCombo_01 2483 1.02 1.32 0.88 156 XMGenDplmaNmb 2457 1.07 1.52 0.87 157 TVD_RCVD_IP 2401 0.94 1.15 0.85 158 XMSubMetaSxObfu_03 2340 0.75 0.58 0.83 159 T_TVD_MIME_NO_HEADERS 2323 0.58 0.05 0.82 160 MIME_HEADER_CTYPE_ONLY 2293 0.59 0.09 0.81 161 XM_H_PHPMailer 2282 0.74 0.59 0.81 162 RCVD_IN_PBL 2205 0.82 0.92 0.78 163 XMGappySubj_02 2171 0.54 0.04 0.77 164 RELAYCOUNTRY_CA 2153 2.75 7.13 0.76 165 T_XMDrugObfuBody_00 2141 1.14 2.00 0.76 166 DKIM_ADSP_CUSTOM_MED 2108 0.88 1.19 0.75 167 XMLngstWrd_01 2044 0.96 1.47 0.72 168 XM_B_SpammyWords4 1962 1.18 2.23 0.69 169 RELAYCOUNTRY_AU 1946 1.33 2.74 0.69 170 RCVD_IN_BL_SPAMCOP_NET 1930 4.13 11.71 0.68 171 SpammyFromTLD_01 1849 1.01 1.78 0.65 172 TR_XM_Base64_M1 1846 0.74 0.93 0.65 173 RCVD_IN_MSPIKE_L3 1835 1.21 2.45 0.65 174 SpammyFromTLD_02 1794 1.12 2.19 0.63 175 HTML_IMAGE_ONLY_32 1773 0.48 0.15 0.63 176 T_OBFU_PDF_ATTACH 1757 0.49 0.21 0.62 177 XMSubMetaSx_01 1717 0.53 0.35 0.61 178 XMSolicitRefs_0 1689 0.58 0.55 0.60 179 HTTPS_HTTP_MISMATCH 1683 0.73 1.04 0.60 180 T_XMHurry_00 1677 0.97 1.79 0.59 181 RELAYCOUNTRY_GB 1619 0.61 0.71 0.57 182 XMBdyGiftCard01 1595 0.84 1.45 0.56 183 XMBSHREFv2 1594 0.48 0.29 0.56 184 XMSlimDrugH 1575 0.54 0.51 0.56 185 T_Symld_Words_02 1516 0.60 0.73 0.54 186 RCVD_IN_PSBL 1483 0.71 1.10 0.52 187 XMSubMetaI_00 1461 0.66 0.99 0.52 188 URI_TRY_3LD 1450 0.78 1.35 0.51 189 PLING_QUERY 1443 0.68 1.04 0.51 190 XMSexyCombo_04 1423 0.56 0.67 0.50 191 XMSexyCombo_02 1420 0.51 0.53 0.50 192 HTML_FONT_FACE_BAD 1415 0.53 0.59 0.50 193 TR_XM_SpammyWords2 1415 3.82 11.11 0.50 194 MSGID_FROM_MTA_HEADER 1411 0.41 0.21 0.50 195 XM_ProductURIs 1398 0.63 0.92 0.49 196 XMLngstWrd_02 1381 0.75 1.33 0.49 197 FORGED_GMAIL_RCVD 1375 0.56 0.72 0.49 198 XMMoneyMeta_00 1373 0.56 0.74 0.49 199 HTML_TAG_BALANCE_BODY 1357 0.49 0.52 0.48 200 LongTLD 1313 0.64 1.02 0.46 ----------------------------------------------------------------------