Email: 404428 Autolearn: 0 AvgScore: 6.30 AvgScanTime: 1.31 sec Spam: 134521 Autolearn: 0 AvgScore: 16.90 AvgScanTime: 1.40 sec Ham: 269907 Autolearn: 0 AvgScore: 1.02 AvgScanTime: 1.26 sec Time Spent Running SA: 146.75 hours Time Spent Processing Spam: 52.39 hours Time Spent Processing Ham: 94.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 129997 98.56 96.64 99.52 2 HTML_MESSAGE 125593 88.18 93.36 85.59 3 DKIM_SIGNED 115333 78.78 85.74 75.32 4 XM_DK_Pass 106963 75.90 79.51 74.09 5 DKIM_VALID 106062 75.04 78.84 73.15 6 RELAYCOUNTRY_US 104509 80.03 77.69 81.19 7 XM_B_Unicode 102527 71.52 76.22 69.18 8 DCC_CHECK 95354 51.79 70.88 42.27 9 XM_B_SpammyWords 94472 52.99 70.23 44.39 10 DKIM_VALID_AU 84430 61.15 62.76 60.35 11 XMListUnsubscribeExists 80552 52.05 59.88 48.15 12 XM_B_Unicode3 60250 42.46 44.79 41.30 13 LOC_TINY_FONT_1 58758 34.26 43.68 29.56 14 XM_DK_Undo_02 53373 16.98 39.68 5.66 15 XM_B_SpammyWords2 52541 25.37 39.06 18.54 16 BAYES_50 51814 52.97 38.52 60.17 17 HTML_FONT_LOW_CONTRAST 43363 30.21 32.24 29.19 18 BAYES_99 43341 13.76 32.22 4.56 19 FVGT_m_MULTI_ODD 43043 28.61 32.00 26.93 20 MIME_HTML_ONLY 42259 23.43 31.41 19.46 21 DKIM_VALID_EF 40304 31.06 29.96 31.61 22 TR_XM_DKIM_Undo 39764 11.61 29.56 2.66 23 DCC_CHECK_NEGATIVE 34878 47.12 25.93 57.69 24 T_KAM_HTML_FONT_INVALID 34451 22.55 25.61 21.03 25 T_TM2_M_HEADER_IN_MSG 33993 28.62 25.27 30.29 26 BAYES_999 32183 10.31 23.92 3.52 27 XMSubLong 32074 23.31 23.84 23.04 28 XM_B_Unsub 30260 13.79 22.49 9.45 29 TR_XM_BayesUnsub 29079 12.31 21.62 7.67 30 TR_XM_DK_Unsub 28846 17.08 21.44 14.90 31 TR_DCC_Bayes_99 28551 8.32 21.22 1.90 32 RELAYCOUNTRY_META 28383 9.56 21.10 3.81 33 XM_Multi_Part_URI 24931 15.89 18.53 14.57 34 RCVD_IN_MSPIKE_H2 23433 15.97 17.42 15.24 35 TR_XM_SpammyRelay 22155 6.66 16.47 1.77 36 LOTS_OF_MONEY 21547 9.67 16.02 6.50 37 UNPARSEABLE_RELAY 21327 13.82 15.85 12.81 38 TR_MAX_INTL_RELAY 20807 9.83 15.47 7.02 39 XM_B_SpammyWords3 19856 8.33 14.76 5.12 40 TR_XM_SpammyWords4 19709 8.01 14.65 4.70 41 BOTNET_IPINHOSTNAME 17815 6.44 13.24 3.05 42 FSL_BULK_SIG 17235 10.78 12.81 9.76 43 BOTNET 17075 5.00 12.69 1.17 44 TR_XM_SpammyWords2 13916 3.78 10.34 0.50 45 XM_B_Phish_Phrases 13280 7.01 9.87 5.59 46 RCVD_IN_BL_SPAMCOP_NET 13217 3.58 9.83 0.47 47 XM_Evil_Numbers_Gen 12625 9.75 9.39 9.94 48 BAYES_80 11666 5.65 8.67 4.15 49 TR_XM_UnparsRelay 11368 4.08 8.45 1.91 50 UNTRUSTED_Relay 11174 3.84 8.31 1.62 51 RCVD_IN_MSPIKE_WL 11153 15.01 8.29 18.37 52 BAYES_60 10234 7.38 7.61 7.27 53 XM_H_GMP 9342 6.56 6.94 6.37 54 XM_UncommonTLD01 9316 5.18 6.93 4.32 55 DKIM_INVALID 9271 3.74 6.89 2.17 56 HTML_IMAGE_RATIO_02 9191 5.31 6.83 4.54 57 RELAYCOUNTRY_CA 9034 2.83 6.72 0.89 58 MPART_ALT_DIFF 8232 4.86 6.12 4.23 59 TR_XM_MSPIKECOMBO 8228 2.63 6.12 0.90 60 RCVD_IN_MSPIKE_BL 8228 2.63 6.12 0.90 61 LotsOfNums_01 8123 7.23 6.04 7.83 62 XMSubMetaSx_00 7954 4.18 5.91 3.32 63 XM_B_PhoneNumber 7945 8.00 5.91 9.04 64 TR_XM_NoHeaderRelay 7266 2.01 5.40 0.32 65 XM_Body_Dirty_Words 7002 3.06 5.21 1.99 66 BAYES_95 6876 3.61 5.11 2.86 67 XM_B_Unsub2 6701 2.65 4.98 1.49 68 XM_B_Investor 6682 2.66 4.97 1.51 69 XM_H_Long_From01 6542 5.13 4.86 5.26 70 HTML_IMAGE_RATIO_04 6418 4.29 4.77 4.06 71 TR_XM_SpammyWords3 6366 1.83 4.73 0.39 72 XM_OfRef6 6241 2.31 4.64 1.15 73 TR_XM_PhishingBody 6228 2.89 4.63 2.03 74 TR_XM_SpammyWords5 5644 2.21 4.20 1.22 75 RCVD_IN_MSPIKE_H3 5566 6.58 4.14 7.80 76 XMStrtUSub 5506 4.65 4.09 4.92 77 XM_UB50 5476 2.03 4.07 1.01 78 RCVD_IN_VALIDITY_RPBL 5461 1.39 4.06 0.06 79 TR_XM_SPAMCOP 5438 1.43 4.04 0.13 80 XMSexyCombo_05 5245 1.92 3.90 0.93 81 XM_B_SpammyTLD 5189 2.98 3.86 2.54 82 RCVD_IN_MSPIKE_L3 5060 1.71 3.76 0.68 83 SpammyFromTLD_02 5004 1.42 3.72 0.27 84 XMNumbers 4915 3.47 3.65 3.38 85 TM2_M_VERY_LONG_WORD 4890 2.97 3.64 2.64 86 XM_SPF_SoftFail 4888 2.20 3.63 1.49 87 T_XMDrugObfuBody_14 4863 2.59 3.62 2.08 88 TooManyTo_001 4845 6.93 3.60 8.58 89 KHOP_HELO_FCRDNS 4823 2.74 3.59 2.32 90 XM_CamelCaseFrm001 4588 2.31 3.41 1.76 91 TM2_M_URI_OPT_OUT 4527 2.31 3.37 1.79 92 HTML_IMAGE_RATIO_06 4478 3.09 3.33 2.97 93 MIME_HTML_MOSTLY 4465 2.70 3.32 2.40 94 RCVD_IN_ZEN_LASTEXTERNAL 4248 1.05 3.16 0.00 95 SHORTCIRCUIT 4248 1.05 3.16 0.00 96 XMBody_17 4231 1.40 3.15 0.54 97 MIME_QP_LONG_LINE 4076 3.98 3.03 4.46 98 T_REMOTE_IMAGE 4056 3.22 3.02 3.32 99 MIME_HTML_ONLY_MULTI 4041 2.60 3.00 2.40 100 ANY_BOUNCE_MESSAGE 3966 5.52 2.95 6.81 101 BOUNCE_MESSAGE 3966 5.52 2.95 6.80 102 HTML_IMAGE_RATIO_08 3961 2.57 2.94 2.39 103 TR_XM_INV_DKIM 3886 1.01 2.89 0.07 104 T_XMDrugObfuBody_08 3750 1.86 2.79 1.40 105 RELAYCOUNTRY_AU 3664 1.28 2.72 0.57 106 XM_URI_RBL 3529 1.06 2.62 0.28 107 T_TooManySym_01 3491 5.19 2.60 6.48 108 RELAYCOUNTRY_RU 3402 0.86 2.53 0.03 109 XM_B_SpammyWords4 3365 1.44 2.50 0.91 110 XMDiploma_00 3259 1.79 2.42 1.47 111 MIME_HEADER_CTYPE_ONLY 3143 1.35 2.34 0.86 112 ALL_TRUSTED 3089 11.29 2.30 15.77 113 TR_XM_MSPIKECOMBO2 3068 0.78 2.28 0.03 114 XM_SendGrid 3043 2.91 2.26 3.23 115 XM_B_URI_Unicode 3000 2.18 2.23 2.15 116 RCVD_IN_PSBL 2970 1.07 2.21 0.50 117 RCVD_IN_MSPIKE_H4 2955 3.31 2.20 3.86 118 BAYES_40 2898 4.21 2.15 5.23 119 T_FILL_THIS_FORM_SHORT 2847 1.28 2.12 0.86 120 XMBrknScrpt_02 2802 1.36 2.08 1.00 121 FROM_EXCESS_BASE64 2799 1.88 2.08 1.78 122 SUBJ_ALL_CAPS 2772 1.68 2.06 1.49 123 HTML_MIME_NO_HTML_TAG 2754 2.59 2.05 2.85 124 RELAYCOUNTRY_DE 2751 0.92 2.05 0.35 125 ADVANCE_FEE_2_NEW_MONEY 2676 0.94 1.99 0.42 126 MAILING_LIST_MULTI 2642 2.82 1.96 3.24 127 RCVD_IN_MSPIKE_H5 2632 5.12 1.96 6.70 128 RCVD_IN_MSPIKE_L4 2563 0.76 1.91 0.20 129 TM2_M_OBFU_COMMENT 2560 0.87 1.90 0.35 130 MY_SERVERS_FOUND 2539 1.10 1.89 0.70 131 XMStockSpam_06 2539 1.59 1.89 1.44 132 DKIM_ADSP_ALL 2504 0.65 1.86 0.04 133 RCVD_IN_VALIDITY_SAFE 2443 3.07 1.82 3.69 134 XM_DK_Undo_01 2384 1.84 1.77 1.88 135 USER_IN_DEF_DKIM_WL 2337 9.08 1.74 12.74 136 HTML_TAG_BALANCE_BODY 2298 0.93 1.71 0.55 137 XMLngstWrd_00 2283 1.21 1.70 0.97 138 T_XMHurry_00 2266 0.91 1.68 0.52 139 URI_OPTOUT_3LD 2256 0.80 1.68 0.36 140 TR_XM_MaxSPIKE 2246 0.57 1.67 0.03 141 SpammyFromTLD_01 2232 1.09 1.66 0.81 142 T_XMDrugObfuBody_00 2229 0.98 1.66 0.65 143 XM_B_DNDMA 2213 0.91 1.65 0.55 144 HTML_IMAGE_ONLY_20 2186 0.74 1.63 0.30 145 XMPhish30 2170 0.90 1.61 0.55 146 MultiRelay_CC 2115 0.66 1.57 0.21 147 XM_ProductURIs 2081 1.30 1.55 1.17 148 TR_LOTS_OF_MONEY3 2077 0.72 1.54 0.30 149 SCC_BODY_URI_ONLY 2070 2.81 1.54 3.45 150 URI_TRY_3LD 2064 0.85 1.53 0.51 151 TR_XM_DK_SendGrid 2029 1.92 1.51 2.12 152 XM_B_COVIDMETA 2012 0.58 1.50 0.12 153 FILL_THIS_FORM 2007 0.78 1.49 0.43 154 XMLngstWrd_01 2002 0.90 1.49 0.61 155 RDNS_DYNAMIC 1999 0.60 1.49 0.17 156 PDS_RDNS_DYNAMIC_FP 1978 0.51 1.47 0.03 157 DKIM_ADSP_NXDOMAIN 1938 0.72 1.44 0.36 158 XM_B_SEO 1908 0.70 1.42 0.34 159 RCVD_IN_VALIDITY_CERTIFIED 1902 2.59 1.41 3.18 160 BOTNET_NORDNS 1901 0.48 1.41 0.01 161 RCVD_IN_XBL 1897 0.48 1.41 0.02 162 TVD_RCVD_IP 1870 1.11 1.39 0.97 163 HK_RANDOM_REPLYTO 1818 0.52 1.35 0.10 164 URI_NOVOWEL 1806 1.40 1.34 1.43 165 T_MONEY_PERCENT 1792 0.74 1.33 0.44 166 TR_LOTS_OF_MONEY2 1792 0.74 1.33 0.44 167 TR_XM_SEO4 1738 0.50 1.29 0.11 168 XMLngstWrd_02 1736 0.70 1.29 0.41 169 XM_UB60 1728 0.48 1.28 0.09 170 XM_H_Long_From02 1689 0.87 1.26 0.67 171 URI_HEX 1686 1.34 1.25 1.38 172 BAYES_20 1656 3.32 1.23 4.36 173 HTML_FONT_TINY_NORDNS 1649 0.46 1.23 0.08 174 RELAYCOUNTRY_FR 1643 0.58 1.22 0.26 175 RCVD_IN_PBL 1618 0.91 1.20 0.77 176 SCC_CANSPAM_2 1614 0.40 1.20 0.00 177 RCVD_IN_IADB_LISTED 1586 2.41 1.18 3.02 178 TR_XM_RelayPhish 1575 0.44 1.17 0.08 179 TR_Symld_Words 1567 1.30 1.16 1.37 180 HTML_FONT_SIZE_LARGE 1566 0.43 1.16 0.07 181 XM_UB80 1556 0.40 1.16 0.02 182 XM_B_COPY_HTML 1554 0.86 1.16 0.71 183 TR_XM_InvalidRelay 1509 0.38 1.12 0.01 184 XMGenDplmaNmb 1508 0.87 1.12 0.75 185 XM_B_Phish66 1458 0.58 1.08 0.33 186 XMPhish14 1453 0.63 1.08 0.40 187 T_FILL_THIS_FORM_FRAUD_PHISH 1440 0.40 1.07 0.06 188 RCVD_IN_SBL_CSS 1426 0.37 1.06 0.03 189 XMLngstWrd_03 1424 0.51 1.06 0.24 190 TR_XM_Base64_M1 1414 0.82 1.05 0.70 191 RCVD_IN_IADB_SPF 1406 2.14 1.05 2.69 192 XM_UB99 1393 0.34 1.04 0.00 193 DKIM_ADSP_CUSTOM_MED 1389 0.83 1.03 0.73 194 TR_XM_PHPForged 1377 0.56 1.02 0.33 195 XMSubMetaI_00 1364 0.73 1.01 0.58 196 XMBody_78 1364 0.59 1.01 0.37 197 TR_XM_FormFill2 1361 0.55 1.01 0.33 198 THIS_AD 1350 0.60 1.00 0.40 199 TR_XM_PHPDW 1349 0.55 1.00 0.32 200 DIET_1 1344 0.50 1.00 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 268601 98.56 96.64 99.52 2 HTML_MESSAGE 231014 88.18 93.36 85.59 3 RELAYCOUNTRY_US 219147 80.03 77.69 81.19 4 DKIM_SIGNED 203281 78.78 85.74 75.32 5 XM_DK_Pass 199987 75.90 79.51 74.09 6 DKIM_VALID 197434 75.04 78.84 73.15 7 XM_B_Unicode 186712 71.52 76.22 69.18 8 DKIM_VALID_AU 162887 61.15 62.76 60.35 9 BAYES_50 162399 52.97 38.52 60.17 10 DCC_CHECK_NEGATIVE 155701 47.12 25.93 57.69 11 XMListUnsubscribeExists 129961 52.05 59.88 48.15 12 XM_B_SpammyWords 119816 52.99 70.23 44.39 13 DCC_CHECK 114089 51.79 70.88 42.27 14 XM_B_Unicode3 111485 42.46 44.79 41.30 15 DKIM_VALID_EF 85327 31.06 29.96 31.61 16 T_TM2_M_HEADER_IN_MSG 81753 28.62 25.27 30.29 17 LOC_TINY_FONT_1 79781 34.26 43.68 29.56 18 HTML_FONT_LOW_CONTRAST 78795 30.21 32.24 29.19 19 FVGT_m_MULTI_ODD 72680 28.61 32.00 26.93 20 XMSubLong 62192 23.31 23.84 23.04 21 T_KAM_HTML_FONT_INVALID 56767 22.55 25.61 21.03 22 MIME_HTML_ONLY 52514 23.43 31.41 19.46 23 XM_B_SpammyWords2 50048 25.37 39.06 18.54 24 RCVD_IN_MSPIKE_WL 49569 15.01 8.29 18.37 25 ALL_TRUSTED 42574 11.29 2.30 15.77 26 RCVD_IN_MSPIKE_H2 41139 15.97 17.42 15.24 27 TR_XM_DK_Unsub 40221 17.08 21.44 14.90 28 XM_Multi_Part_URI 39322 15.89 18.53 14.57 29 UNPARSEABLE_RELAY 34569 13.82 15.85 12.81 30 USER_IN_DEF_DKIM_WL 34381 9.08 1.74 12.74 31 XM_Evil_Numbers_Gen 26825 9.75 9.39 9.94 32 FSL_BULK_SIG 26346 10.78 12.81 9.76 33 XM_B_Unsub 25519 13.79 22.49 9.45 34 BAYES_00 25148 6.47 0.77 9.32 35 XM_B_PhoneNumber 24402 8.00 5.91 9.04 36 TooManyTo_001 23163 6.93 3.60 8.58 37 LotsOfNums_01 21133 7.23 6.04 7.83 38 RCVD_IN_MSPIKE_H3 21057 6.58 4.14 7.80 39 TR_XM_BayesUnsub 20708 12.31 21.62 7.67 40 XM_DKIMWhitelistDomains 20601 5.11 0.04 7.63 41 BAYES_60 19624 7.38 7.61 7.27 42 TR_MAX_INTL_RELAY 18948 9.83 15.47 7.02 43 ANY_BOUNCE_MESSAGE 18368 5.52 2.95 6.81 44 BOUNCE_MESSAGE 18366 5.52 2.95 6.80 45 RCVD_IN_MSPIKE_H5 18088 5.12 1.96 6.70 46 TR_XM_DK_Bayes 17579 4.56 0.64 6.51 47 LOTS_OF_MONEY 17544 9.67 16.02 6.50 48 T_TooManySym_01 17491 5.19 2.60 6.48 49 TR_XM_DK_Bayes1 17304 4.49 0.64 6.41 50 XM_H_GMP 17192 6.56 6.94 6.37 51 XM_DK_Undo_02 15289 16.98 39.68 5.66 52 XM_B_Phish_Phrases 15089 7.01 9.87 5.59 53 TR_XM_DK_Bayes2 14675 3.81 0.54 5.44 54 XM_H_Long_From01 14199 5.13 4.86 5.26 55 BAYES_40 14119 4.21 2.15 5.23 56 XM_B_SpammyWords3 13823 8.33 14.76 5.12 57 XMStrtUSub 13286 4.65 4.09 4.92 58 TR_XM_SpammyWords4 12678 8.01 14.65 4.70 59 BAYES_99 12313 13.76 32.22 4.56 60 HTML_IMAGE_RATIO_02 12264 5.31 6.83 4.54 61 MIME_QP_LONG_LINE 12032 3.98 3.03 4.46 62 BAYES_20 11763 3.32 1.23 4.36 63 XM_UncommonTLD01 11649 5.18 6.93 4.32 64 MPART_ALT_DIFF 11415 4.86 6.12 4.23 65 BAYES_80 11195 5.65 8.67 4.15 66 HTML_IMAGE_RATIO_04 10947 4.29 4.77 4.06 67 RCVD_IN_MSPIKE_H4 10424 3.31 2.20 3.86 68 XM_PDF 10423 2.80 0.66 3.86 69 RELAYCOUNTRY_META 10291 9.56 21.10 3.81 70 RCVD_IN_VALIDITY_SAFE 9969 3.07 1.82 3.69 71 BAYES_999 9512 10.31 23.92 3.52 72 T_TooManySym_02 9421 2.65 0.96 3.49 73 SCC_BODY_URI_ONLY 9305 2.81 1.54 3.45 74 XMNumbers 9132 3.47 3.65 3.38 75 T_REMOTE_IMAGE 8962 3.22 3.02 3.32 76 XMSubMetaSx_00 8948 4.18 5.91 3.32 77 MAILING_LIST_MULTI 8749 2.82 1.96 3.24 78 XM_SendGrid 8723 2.91 2.26 3.23 79 RCVD_IN_VALIDITY_CERTIFIED 8586 2.59 1.41 3.18 80 BOTNET_IPINHOSTNAME 8244 6.44 13.24 3.05 81 RCVD_IN_IADB_LISTED 8163 2.41 1.18 3.02 82 HTML_IMAGE_RATIO_06 8011 3.09 3.33 2.97 83 BAYES_95 7717 3.61 5.11 2.86 84 TooManyTo_002 7716 2.14 0.68 2.86 85 HTML_MIME_NO_HTML_TAG 7704 2.59 2.05 2.85 86 RCVD_IN_IADB_SPF 7255 2.14 1.05 2.69 87 TR_XM_DKIM_Undo 7184 11.61 29.56 2.66 88 TM2_M_VERY_LONG_WORD 7114 2.97 3.64 2.64 89 XM_B_SpammyTLD 6866 2.98 3.86 2.54 90 INVALID_MSGID 6566 1.68 0.18 2.43 91 RCVD_IN_IADB_SENDERID 6494 1.93 0.97 2.41 92 MIME_HTML_ONLY_MULTI 6470 2.60 3.00 2.40 93 MIME_HTML_MOSTLY 6469 2.70 3.32 2.40 94 HTML_IMAGE_RATIO_08 6447 2.57 2.94 2.39 95 TO_MALFORMED 6414 1.59 0.01 2.38 96 RCVD_IN_IADB_DK 6291 1.88 0.98 2.33 97 KHOP_HELO_FCRDNS 6257 2.74 3.59 2.32 98 DKIM_INVALID 5847 3.74 6.89 2.17 99 XM_B_URI_Unicode 5801 2.18 2.23 2.15 100 TR_XM_DK_SendGrid 5716 1.92 1.51 2.12 101 BAYES_05 5624 1.58 0.56 2.08 102 T_XMDrugObfuBody_14 5624 2.59 3.62 2.08 103 TR_XM_PhishingBody 5480 2.89 4.63 2.03 104 XM_Body_Dirty_Words 5380 3.06 5.21 1.99 105 RCVD_IN_IADB_VOUCHED 5336 1.53 0.63 1.98 106 TR_XM_UnparsRelay 5152 4.08 8.45 1.91 107 TR_DCC_Bayes_99 5115 8.32 21.22 1.90 108 XM_DK_Undo_01 5077 1.84 1.77 1.88 109 TooManyTo_003 5052 1.45 0.60 1.87 110 TM2_M_URI_OPT_OUT 4835 2.31 3.37 1.79 111 FROM_EXCESS_BASE64 4815 1.88 2.08 1.78 112 TR_XM_SpammyRelay 4783 6.66 16.47 1.77 113 XM_CamelCaseFrm001 4748 2.31 3.41 1.76 114 UNTRUSTED_Relay 4359 3.84 8.31 1.62 115 HTML_IMAGE_ONLY_32 4348 1.17 0.29 1.61 116 XM_B_Investor 4067 2.66 4.97 1.51 117 XM_B_Unsub2 4023 2.65 4.98 1.49 118 XM_SPF_SoftFail 4014 2.20 3.63 1.49 119 SUBJ_ALL_CAPS 4010 1.68 2.06 1.49 120 XMDiploma_00 3962 1.79 2.42 1.47 121 XMStockSpam_06 3887 1.59 1.89 1.44 122 XM_GoogleGroups 3881 1.22 0.79 1.44 123 URI_NOVOWEL 3856 1.40 1.34 1.43 124 TooManyTo_004 3820 1.13 0.56 1.42 125 T_XMDrugObfuBody_08 3785 1.86 2.79 1.40 126 IN_HORDE_ADDRESS_BOOK 3763 0.98 0.15 1.39 127 RCVD_IN_IADB_OPTIN 3747 1.08 0.45 1.39 128 URI_HEX 3725 1.34 1.25 1.38 129 TR_Symld_Words 3704 1.30 1.16 1.37 130 T_TooManySym_03 3631 1.01 0.33 1.35 131 T_TVD_MIME_NO_HEADERS 3543 0.91 0.09 1.31 132 TR_XM_SpammyWords5 3304 2.21 4.20 1.22 133 TooManyTo_005 3209 0.96 0.51 1.19 134 MAY_BE_FORGED 3171 0.80 0.04 1.17 135 XM_ProductURIs 3171 1.30 1.55 1.17 136 BOTNET 3163 5.00 12.69 1.17 137 XMBdyGiftCard01 3160 1.07 0.88 1.17 138 XM_OfRef6 3105 2.31 4.64 1.15 139 XMGappySubj_01 3093 0.83 0.20 1.15 140 TVD_SPACE_RATIO 2955 0.81 0.22 1.09 141 XMCapTrack 2939 0.91 0.56 1.09 142 HELO_NODOT 2845 0.73 0.09 1.05 143 HELO_NO_DOMAIN 2842 0.73 0.09 1.05 144 XM_UB50 2732 2.03 4.07 1.01 145 XMBrknScrpt_02 2703 1.36 2.08 1.00 146 TVD_RCVD_IP 2629 1.11 1.39 0.97 147 XMLngstWrd_00 2618 1.21 1.70 0.97 148 XMSexyCombo_05 2520 1.92 3.90 0.93 149 XMSolicitRefs_0 2468 0.76 0.44 0.91 150 XM_B_SpammyWords4 2449 1.44 2.50 0.91 151 TR_XM_MSPIKECOMBO 2425 2.63 6.12 0.90 152 RCVD_IN_MSPIKE_BL 2425 2.63 6.12 0.90 153 RELAYCOUNTRY_CA 2412 2.83 6.72 0.89 154 T_FILL_THIS_FORM_SHORT 2334 1.28 2.12 0.86 155 MIME_HEADER_CTYPE_ONLY 2320 1.35 2.34 0.86 156 SpammyFromTLD_01 2193 1.09 1.66 0.81 157 XM_H_PHPMailer 2094 0.71 0.59 0.78 158 RCVD_IN_PBL 2076 0.91 1.20 0.77 159 XM_ShortIntro_01 2073 0.65 0.41 0.77 160 XMGappySubj_02 2049 0.52 0.05 0.76 161 XMGenDplmaNmb 2013 0.87 1.12 0.75 162 DKIM_ADSP_CUSTOM_MED 1966 0.83 1.03 0.73 163 XM_B_COPY_HTML 1914 0.86 1.16 0.71 164 XMNoVowels 1902 0.63 0.48 0.70 165 MY_SERVERS_FOUND 1900 1.10 1.89 0.70 166 TR_XM_Base64_M1 1886 0.82 1.05 0.70 167 RCVD_IN_MSPIKE_L3 1845 1.71 3.76 0.68 168 MIME_CHARSET_FARAWAY 1844 0.59 0.42 0.68 169 XM_H_Long_From02 1810 0.87 1.26 0.67 170 TVD_PH_BODY_ACCOUNTS_PRE 1786 0.58 0.41 0.66 171 T_XMDrugObfuBody_00 1741 0.98 1.66 0.65 172 T_Symld_Words_02 1716 0.67 0.74 0.64 173 XMBSHREFv2 1673 0.52 0.33 0.62 174 XMLngstWrd_01 1645 0.90 1.49 0.61 175 XMPhish11 1608 0.53 0.41 0.60 176 XMSubMetaI_00 1569 0.73 1.01 0.58 177 T_XMDrugObfuBody_01 1561 0.41 0.07 0.58 178 MSGID_FROM_MTA_HEADER 1552 0.47 0.27 0.58 179 HTTPS_HTTP_MISMATCH 1544 0.67 0.86 0.57 180 TR_MetaPhish_Combo_01 1536 0.67 0.87 0.57 181 XMSlimDrugH 1526 0.59 0.63 0.57 182 RELAYCOUNTRY_AU 1526 1.28 2.72 0.57 183 PLING_QUERY 1510 0.51 0.41 0.56 184 RELAYCOUNTRY_GB 1504 0.63 0.77 0.56 185 TO_NO_BRKTS_HTML_ONLY 1483 0.64 0.82 0.55 186 HTML_TAG_BALANCE_BODY 1477 0.93 1.71 0.55 187 XMPhish30 1477 0.90 1.61 0.55 188 CHARSET_FARAWAY_HEADER 1474 0.45 0.26 0.55 189 XM_B_DNDMA 1471 0.91 1.65 0.55 190 XMBody_17 1449 1.40 3.15 0.54 191 T_XMHurry_00 1401 0.91 1.68 0.52 192 ACCT_PHISHING_MANY 1391 0.35 0.03 0.52 193 URI_TRY_3LD 1372 0.85 1.53 0.51 194 TR_XM_SpammyWords2 1356 3.78 10.34 0.50 195 RCVD_IN_PSBL 1343 1.07 2.21 0.50 196 T_OBFU_PDF_ATTACH 1327 0.38 0.17 0.49 197 XM_B_FormFill 1261 0.32 0.01 0.47 198 RCVD_IN_BL_SPAMCOP_NET 1259 3.58 9.83 0.47 199 XMMoneyMeta_00 1208 0.58 0.86 0.45 200 NML_ADSP_CUSTOM_MED 1206 0.57 0.81 0.45 ----------------------------------------------------------------------