Email: 447550 Autolearn: 0 AvgScore: 5.17 AvgScanTime: 1.33 sec Spam: 139497 Autolearn: 0 AvgScore: 14.90 AvgScanTime: 1.49 sec Ham: 308053 Autolearn: 0 AvgScore: 0.76 AvgScanTime: 1.26 sec Time Spent Running SA: 165.69 hours Time Spent Processing Spam: 57.63 hours Time Spent Processing Ham: 108.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 136869 99.06 98.12 99.49 2 HTML_MESSAGE 132631 89.08 95.08 86.37 3 DKIM_SIGNED 125587 81.26 90.03 77.29 4 XM_DK_Pass 119228 78.96 85.47 76.01 5 DKIM_VALID 118243 78.00 84.76 74.93 6 XM_B_Unicode 116694 74.69 83.65 70.63 7 RELAYCOUNTRY_US 112438 81.26 80.60 81.56 8 DCC_CHECK 106074 52.17 76.04 41.36 9 XM_B_SpammyWords 95216 51.86 68.26 44.43 10 XMListUnsubscribeExists 93802 55.09 67.24 49.58 11 DKIM_VALID_AU 91533 62.35 65.62 60.87 12 XM_B_Unicode3 67401 43.07 48.32 40.69 13 LOC_TINY_FONT_1 66719 34.95 47.83 29.12 14 XM_DK_Undo_02 59455 16.90 42.62 5.25 15 BAYES_50 56559 54.62 40.54 61.00 16 XM_B_SpammyWords2 54472 24.77 39.05 18.31 17 HTML_FONT_LOW_CONTRAST 49533 30.47 35.51 28.19 18 FVGT_m_MULTI_ODD 46742 28.48 33.51 26.21 19 DKIM_VALID_EF 44212 30.96 31.69 30.62 20 MIME_HTML_ONLY 43320 22.70 31.05 18.91 21 BAYES_99 43205 12.33 30.97 3.88 22 TR_XM_DKIM_Undo 41956 11.04 30.08 2.41 23 T_KAM_HTML_FONT_INVALID 41236 24.44 29.56 22.12 24 XMSubLong 34103 23.63 24.45 23.26 25 BAYES_999 33556 9.55 24.05 2.98 26 TR_XM_DK_Unsub 32859 17.13 23.56 14.22 27 T_TM2_M_HEADER_IN_MSG 31947 28.34 22.90 30.81 28 TR_DCC_Bayes_99 31035 8.14 22.25 1.75 29 DCC_CHECK_NEGATIVE 30997 47.25 22.22 58.58 30 XM_B_Unsub 28292 12.59 20.28 9.10 31 XM_Multi_Part_URI 28087 16.38 20.13 14.68 32 TR_XM_BayesUnsub 27387 11.15 19.63 7.31 33 RCVD_IN_MSPIKE_H2 26701 17.58 19.14 16.88 34 RELAYCOUNTRY_META 25956 8.68 18.61 4.19 35 UNPARSEABLE_RELAY 24954 14.12 17.89 12.42 36 TR_MAX_INTL_RELAY 21149 9.13 15.16 6.40 37 XM_B_SpammyWords3 19977 7.89 14.32 4.98 38 TR_XM_SpammyRelay 19254 5.71 13.80 2.04 39 BOTNET_IPINHOSTNAME 18056 6.20 12.94 3.15 40 LOTS_OF_MONEY 16081 8.16 11.53 6.64 41 FSL_BULK_SIG 16010 9.41 11.48 8.47 42 RCVD_IN_BL_SPAMCOP_NET 15664 3.89 11.23 0.56 43 BOTNET 15354 4.35 11.01 1.34 44 TR_XM_SpammyWords2 14282 3.57 10.24 0.56 45 TR_XM_SpammyWords4 14032 5.92 10.06 4.04 46 TR_XM_UnparsRelay 14003 4.61 10.04 2.15 47 XM_Evil_Numbers_Gen 13877 9.67 9.95 9.55 48 XM_B_Phish_Phrases 13560 6.98 9.72 5.74 49 BAYES_80 12996 5.58 9.32 3.88 50 RCVD_IN_MSPIKE_WL 12938 16.09 9.27 19.17 51 BAYES_60 11007 7.45 7.89 7.25 52 LotsOfNums_01 10694 8.10 7.67 8.30 53 RELAYCOUNTRY_CA 10341 2.84 7.41 0.78 54 XM_B_PhoneNumber 10143 9.55 7.27 10.58 55 HTML_IMAGE_RATIO_02 9844 5.32 7.06 4.54 56 XMSubMetaSx_00 9378 4.27 6.72 3.16 57 UNTRUSTED_Relay 8710 3.08 6.24 1.65 58 MPART_ALT_DIFF 8297 5.18 5.95 4.84 59 XM_UncommonTLD01 8025 4.87 5.75 4.47 60 XM_Body_Dirty_Words 7851 3.28 5.63 2.22 61 XM_H_Long_From01 7746 5.64 5.55 5.67 62 RCVD_IN_MSPIKE_BL 7587 2.39 5.44 1.01 63 TR_XM_MSPIKECOMBO 7587 2.39 5.44 1.01 64 BAYES_95 7430 3.39 5.33 2.51 65 XM_B_Investor 7416 2.94 5.32 1.87 66 DKIM_INVALID 7344 3.26 5.26 2.35 67 HTML_IMAGE_RATIO_04 7145 4.33 5.12 3.97 68 TR_XM_PhishingBody 6886 2.79 4.94 1.81 69 XM_H_GMP 6721 5.71 4.82 6.11 70 TR_XM_SPAMCOP 6494 1.59 4.66 0.20 71 RCVD_IN_MSPIKE_H3 6245 7.26 4.48 8.51 72 XMStrtUSub 6235 4.85 4.47 5.02 73 TooManyTo_001 5892 7.11 4.22 8.42 74 XMSexyCombo_05 5720 1.85 4.10 0.83 75 HTML_IMAGE_RATIO_06 5436 3.48 3.90 3.29 76 T_XMDrugObfuBody_14 5422 2.45 3.89 1.80 77 XM_B_SpammyTLD 5252 2.85 3.76 2.43 78 TM2_M_VERY_LONG_WORD 5150 2.23 3.69 1.57 79 TR_XM_SpammyWords3 5129 1.44 3.68 0.43 80 RCVD_IN_VALIDITY_RPBL 5088 1.30 3.65 0.24 81 XM_B_Unsub2 5086 2.10 3.65 1.40 82 TR_XM_SpammyWords5 5085 2.09 3.65 1.39 83 T_XMDrugObfuBody_08 5036 2.14 3.61 1.47 84 XM_OfRef6 4812 1.80 3.45 1.06 85 MIME_QP_LONG_LINE 4736 4.91 3.40 5.59 86 XMNumbers 4728 3.28 3.39 3.24 87 XM_CamelCaseFrm001 4721 2.45 3.38 2.02 88 TR_XM_NoHeaderRelay 4652 1.21 3.33 0.24 89 XM_URI_RBL 4631 1.29 3.32 0.37 90 XM_UB50 4572 1.75 3.28 1.06 91 MIME_HTML_ONLY_MULTI 4403 2.73 3.16 2.54 92 RCVD_IN_MSPIKE_L3 4263 1.48 3.06 0.77 93 XM_SPF_SoftFail 4227 1.95 3.03 1.47 94 RELAYCOUNTRY_AU 4089 1.38 2.93 0.67 95 TM2_M_URI_OPT_OUT 4060 2.13 2.91 1.78 96 MIME_HTML_MOSTLY 4019 2.75 2.88 2.69 97 T_TooManySym_01 3980 5.48 2.85 6.67 98 HTML_IMAGE_RATIO_08 3909 2.41 2.80 2.23 99 RCVD_IN_MSPIKE_H4 3903 3.66 2.80 4.05 100 XM_B_URI_Unicode 3667 2.14 2.63 1.91 101 XM_SendGrid 3656 3.15 2.62 3.39 102 XMDiploma_00 3595 2.02 2.58 1.77 103 XM_B_SpammyWords4 3469 1.27 2.49 0.72 104 XMBody_17 3448 1.23 2.47 0.66 105 SpammyFromTLD_02 3129 1.04 2.24 0.50 106 FROM_EXCESS_BASE64 3120 1.77 2.24 1.56 107 SUBJ_ALL_CAPS 3071 1.81 2.20 1.64 108 T_FILL_THIS_FORM_SHORT 3054 1.29 2.19 0.89 109 MAILING_LIST_MULTI 3050 3.34 2.19 3.86 110 RCVD_IN_MSPIKE_L4 3048 0.84 2.18 0.23 111 HTML_MIME_NO_HTML_TAG 2968 2.40 2.13 2.52 112 USER_IN_DEF_DKIM_WL 2933 9.71 2.10 13.16 113 TR_XM_INV_DKIM 2817 0.68 2.02 0.07 114 RCVD_IN_MSPIKE_H5 2790 5.17 2.00 6.60 115 XM_H_Long_From02 2762 1.22 1.98 0.88 116 BAYES_40 2644 4.17 1.90 5.20 117 BOTNET_NORDNS 2632 0.60 1.89 0.01 118 ALL_TRUSTED 2623 11.00 1.88 15.13 119 XMStockSpam_06 2506 1.21 1.80 0.94 120 T_XMHurry_00 2481 0.99 1.78 0.63 121 T_REMOTE_IMAGE 2466 3.05 1.77 3.64 122 URI_NOVOWEL 2445 1.51 1.75 1.40 123 RCVD_IN_VALIDITY_SAFE 2401 3.41 1.72 4.17 124 SHORTCIRCUIT 2397 0.54 1.72 0.00 125 RCVD_IN_ZEN_LASTEXTERNAL 2397 0.54 1.72 0.00 126 MPART_ALT_DIFF_COUNT 2375 0.87 1.70 0.49 127 TR_XM_DK_SendGrid 2347 2.04 1.68 2.21 128 XMBrknScrpt_02 2296 1.16 1.65 0.95 129 SCC_BODY_URI_ONLY 2278 2.11 1.63 2.32 130 XM_DK_Undo_01 2269 1.84 1.63 1.93 131 SpammyFromTLD_01 2253 1.17 1.62 0.97 132 URI_TRY_3LD 2240 0.83 1.61 0.48 133 TR_XM_MSPIKECOMBO2 2128 0.50 1.53 0.03 134 XMGenDplmaNmb 2081 1.12 1.49 0.95 135 T_XMDrugObfuBody_00 2057 0.99 1.47 0.77 136 XMPhish14 2053 0.88 1.47 0.61 137 RCVD_IN_IADB_LISTED 1985 3.13 1.42 3.91 138 RDNS_DYNAMIC 1963 0.56 1.41 0.17 139 XMPhish30 1942 0.78 1.39 0.50 140 PDS_RDNS_DYNAMIC_FP 1941 0.47 1.39 0.05 141 XM_B_Phish66 1907 0.70 1.37 0.40 142 URI_HEX 1899 1.43 1.36 1.47 143 TR_XM_RelayPhish 1891 0.47 1.36 0.08 144 RCVD_IN_VALIDITY_CERTIFIED 1889 2.75 1.35 3.38 145 XMSubMetaI_00 1835 0.78 1.32 0.54 146 XMBody_78 1814 0.67 1.30 0.38 147 TR_Symld_Words 1813 1.46 1.30 1.53 148 XM_HighProb1 1781 0.40 1.28 0.00 149 RCVD_IN_IADB_SPF 1760 2.75 1.26 3.42 150 RCVD_IN_PBL 1746 0.95 1.25 0.81 151 XM_B_DNDMA 1734 0.64 1.24 0.36 152 HTTPS_HTTP_MISMATCH 1725 0.85 1.24 0.68 153 HK_RANDOM_REPLYTO 1705 0.44 1.22 0.09 154 DKIM_ADSP_CUSTOM_MED 1703 0.94 1.22 0.82 155 XM_B_COPY_HTML 1688 0.82 1.21 0.65 156 KHOP_HELO_FCRDNS 1676 1.48 1.20 1.61 157 RCVD_IN_IADB_DK 1662 2.41 1.19 2.96 158 RCVD_IN_IADB_SENDERID 1655 2.47 1.19 3.05 159 TR_XM_PHPForged 1632 0.83 1.17 0.67 160 TVD_RCVD_IP 1619 0.97 1.16 0.88 161 RELAYCOUNTRY_RU 1612 0.38 1.16 0.03 162 DIET_1 1612 0.54 1.16 0.26 163 TR_LOTS_OF_MONEY3 1607 0.54 1.15 0.26 164 HTML_TAG_BALANCE_BODY 1607 0.77 1.15 0.60 165 TM2_M_A_HREF_HREF 1606 0.55 1.15 0.28 166 TR_XM_MaxSPIKE 1606 0.38 1.15 0.03 167 TR_XM_FormFill2 1591 0.81 1.14 0.66 168 RELAYCOUNTRY_FR 1586 0.55 1.14 0.29 169 TR_XM_PHPDW 1580 0.81 1.13 0.67 170 XM_B_SEO 1571 0.55 1.13 0.29 171 TM2_M_OBFU_COMMENT 1566 0.52 1.12 0.24 172 XM_H_PHPOS 1561 0.80 1.12 0.66 173 TR_MetaPhish_Combo_01 1554 1.00 1.11 0.94 174 RCVD_IN_XBL 1537 0.35 1.10 0.02 175 BAYES_20 1536 2.84 1.10 3.63 176 HTML_FONT_SIZE_LARGE 1509 0.40 1.08 0.09 177 XMBdyGiftCard01 1485 0.76 1.06 0.62 178 TR_XM_InvalidRelay 1473 0.34 1.06 0.01 179 URIBL_BLACK 1472 0.34 1.06 0.02 180 T_MONEY_PERCENT 1472 0.45 1.06 0.17 181 TR_LOTS_OF_MONEY2 1472 0.45 1.06 0.17 182 XM_ProductURIs 1468 0.66 1.05 0.48 183 TR_XM_SEO4 1464 0.40 1.05 0.11 184 HTML_FONT_TINY_NORDNS 1420 0.38 1.02 0.10 185 ANY_BOUNCE_MESSAGE 1384 3.08 0.99 4.03 186 BOUNCE_MESSAGE 1384 3.08 0.99 4.03 187 MultiRelay_CC 1370 0.43 0.98 0.17 188 XMReplyNow 1369 0.45 0.98 0.21 189 XM_DIRTYINTL 1363 0.36 0.98 0.07 190 XMHTML_After_End 1340 0.54 0.96 0.35 191 RCVD_IN_PSBL 1337 0.60 0.96 0.43 192 TR_Mismatch_TLD_02 1333 0.35 0.96 0.07 193 RELAYCOUNTRY_GB 1331 0.78 0.95 0.71 194 RCVD_IN_SBL_CSS 1309 0.31 0.94 0.03 195 XMHTMLBadTable_001 1308 0.49 0.94 0.29 196 HELO_DYNAMIC_SPLIT_IP 1303 0.30 0.93 0.01 197 XM_GoogleGroups 1297 1.21 0.93 1.34 198 TR_XM_Base64_M1 1296 0.77 0.93 0.70 199 T_Symld_Words_02 1245 0.73 0.89 0.66 200 FORGED_GMAIL_RCVD 1229 0.61 0.88 0.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 306495 99.06 98.12 99.49 2 HTML_MESSAGE 266065 89.08 95.08 86.37 3 RELAYCOUNTRY_US 251255 81.26 80.60 81.56 4 DKIM_SIGNED 238086 81.26 90.03 77.29 5 XM_DK_Pass 234164 78.96 85.47 76.01 6 DKIM_VALID 230838 78.00 84.76 74.93 7 XM_B_Unicode 217570 74.69 83.65 70.63 8 BAYES_50 187915 54.62 40.54 61.00 9 DKIM_VALID_AU 187506 62.35 65.62 60.87 10 DCC_CHECK_NEGATIVE 180462 47.25 22.22 58.58 11 XMListUnsubscribeExists 152737 55.09 67.24 49.58 12 XM_B_SpammyWords 136877 51.86 68.26 44.43 13 DCC_CHECK 127417 52.17 76.04 41.36 14 XM_B_Unicode3 125339 43.07 48.32 40.69 15 T_TM2_M_HEADER_IN_MSG 94896 28.34 22.90 30.81 16 DKIM_VALID_EF 94333 30.96 31.69 30.62 17 LOC_TINY_FONT_1 89704 34.95 47.83 29.12 18 HTML_FONT_LOW_CONTRAST 86829 30.47 35.51 28.19 19 FVGT_m_MULTI_ODD 80740 28.48 33.51 26.21 20 XMSubLong 71650 23.63 24.45 23.26 21 T_KAM_HTML_FONT_INVALID 68148 24.44 29.56 22.12 22 RCVD_IN_MSPIKE_WL 59052 16.09 9.27 19.17 23 MIME_HTML_ONLY 58259 22.70 31.05 18.91 24 XM_B_SpammyWords2 56400 24.77 39.05 18.31 25 RCVD_IN_MSPIKE_H2 51989 17.58 19.14 16.88 26 ALL_TRUSTED 46619 11.00 1.88 15.13 27 XM_Multi_Part_URI 45236 16.38 20.13 14.68 28 TR_XM_DK_Unsub 43797 17.13 23.56 14.22 29 USER_IN_DEF_DKIM_WL 40527 9.71 2.10 13.16 30 UNPARSEABLE_RELAY 38251 14.12 17.89 12.42 31 XM_B_PhoneNumber 32607 9.55 7.27 10.58 32 BAYES_00 32317 7.42 0.64 10.49 33 XM_Evil_Numbers_Gen 29410 9.67 9.95 9.55 34 XM_B_Unsub 28043 12.59 20.28 9.10 35 RCVD_IN_MSPIKE_H3 26229 7.26 4.48 8.51 36 FSL_BULK_SIG 26089 9.41 11.48 8.47 37 TooManyTo_001 25928 7.11 4.22 8.42 38 LotsOfNums_01 25570 8.10 7.67 8.30 39 XM_DKIMWhitelistDomains 22905 5.15 0.10 7.44 40 TR_XM_BayesUnsub 22521 11.15 19.63 7.31 41 BAYES_60 22331 7.45 7.89 7.25 42 TR_XM_DK_Bayes 21626 5.00 0.54 7.02 43 TR_XM_DK_Bayes1 21222 4.91 0.53 6.89 44 T_TooManySym_01 20536 5.48 2.85 6.67 45 LOTS_OF_MONEY 20453 8.16 11.53 6.64 46 RCVD_IN_MSPIKE_H5 20334 5.17 2.00 6.60 47 TR_MAX_INTL_RELAY 19714 9.13 15.16 6.40 48 XM_H_GMP 18812 5.71 4.82 6.11 49 TR_XM_DK_Bayes2 17804 4.11 0.41 5.78 50 XM_B_Phish_Phrases 17697 6.98 9.72 5.74 51 XM_H_Long_From01 17477 5.64 5.55 5.67 52 MIME_QP_LONG_LINE 17231 4.91 3.40 5.59 53 XM_DK_Undo_02 16185 16.90 42.62 5.25 54 BAYES_40 16008 4.17 1.90 5.20 55 XMStrtUSub 15465 4.85 4.47 5.02 56 XM_B_SpammyWords3 15353 7.89 14.32 4.98 57 MPART_ALT_DIFF 14898 5.18 5.95 4.84 58 XM_PDF 14135 3.42 0.85 4.59 59 HTML_IMAGE_RATIO_02 13978 5.32 7.06 4.54 60 XM_UncommonTLD01 13783 4.87 5.75 4.47 61 RELAYCOUNTRY_META 12895 8.68 18.61 4.19 62 RCVD_IN_VALIDITY_SAFE 12848 3.41 1.72 4.17 63 RCVD_IN_MSPIKE_H4 12489 3.66 2.80 4.05 64 TR_XM_SpammyWords4 12460 5.92 10.06 4.04 65 ANY_BOUNCE_MESSAGE 12406 3.08 0.99 4.03 66 BOUNCE_MESSAGE 12402 3.08 0.99 4.03 67 HTML_IMAGE_RATIO_04 12218 4.33 5.12 3.97 68 RCVD_IN_IADB_LISTED 12031 3.13 1.42 3.91 69 BAYES_80 11963 5.58 9.32 3.88 70 BAYES_99 11961 12.33 30.97 3.88 71 MAILING_LIST_MULTI 11876 3.34 2.19 3.86 72 T_REMOTE_IMAGE 11206 3.05 1.77 3.64 73 BAYES_20 11182 2.84 1.10 3.63 74 RCVD_IN_IADB_SPF 10528 2.75 1.26 3.42 75 XM_SendGrid 10444 3.15 2.62 3.39 76 RCVD_IN_VALIDITY_CERTIFIED 10400 2.75 1.35 3.38 77 T_TooManySym_02 10237 2.55 0.85 3.32 78 HTML_IMAGE_RATIO_06 10144 3.48 3.90 3.29 79 XMNumbers 9967 3.28 3.39 3.24 80 XMSubMetaSx_00 9746 4.27 6.72 3.16 81 BOTNET_IPINHOSTNAME 9705 6.20 12.94 3.15 82 RCVD_IN_IADB_SENDERID 9395 2.47 1.19 3.05 83 BAYES_999 9179 9.55 24.05 2.98 84 RCVD_IN_IADB_DK 9106 2.41 1.19 2.96 85 MIME_HTML_MOSTLY 8296 2.75 2.88 2.69 86 TooManyTo_002 8063 2.01 0.66 2.62 87 MIME_HTML_ONLY_MULTI 7833 2.73 3.16 2.54 88 HTML_MIME_NO_HTML_TAG 7776 2.40 2.13 2.52 89 RCVD_IN_IADB_VOUCHED 7750 1.95 0.69 2.52 90 BAYES_95 7746 3.39 5.33 2.51 91 XM_B_SpammyTLD 7496 2.85 3.76 2.43 92 TR_XM_DKIM_Undo 7436 11.04 30.08 2.41 93 DKIM_INVALID 7248 3.26 5.26 2.35 94 INVALID_MSGID 7199 1.68 0.22 2.34 95 SCC_BODY_URI_ONLY 7159 2.11 1.63 2.32 96 HTML_IMAGE_RATIO_08 6861 2.41 2.80 2.23 97 XM_Body_Dirty_Words 6839 3.28 5.63 2.22 98 TR_XM_DK_SendGrid 6804 2.04 1.68 2.21 99 BAYES_05 6623 1.67 0.60 2.15 100 TR_XM_UnparsRelay 6621 4.61 10.04 2.15 101 TO_MALFORMED 6402 1.43 0.01 2.08 102 TR_XM_SpammyRelay 6294 5.71 13.80 2.04 103 XM_CamelCaseFrm001 6227 2.45 3.38 2.02 104 XM_DK_Undo_01 5950 1.84 1.63 1.93 105 XM_B_URI_Unicode 5895 2.14 2.63 1.91 106 XM_B_Investor 5758 2.94 5.32 1.87 107 TR_XM_PhishingBody 5587 2.79 4.94 1.81 108 T_XMDrugObfuBody_14 5559 2.45 3.89 1.80 109 TM2_M_URI_OPT_OUT 5482 2.13 2.91 1.78 110 XMDiploma_00 5447 2.02 2.58 1.77 111 RCVD_IN_IADB_OPTIN 5440 1.36 0.45 1.77 112 TR_DCC_Bayes_99 5378 8.14 22.25 1.75 113 TooManyTo_003 5172 1.33 0.56 1.68 114 UNTRUSTED_Relay 5094 3.08 6.24 1.65 115 SUBJ_ALL_CAPS 5045 1.81 2.20 1.64 116 KHOP_HELO_FCRDNS 4964 1.48 1.20 1.61 117 TM2_M_VERY_LONG_WORD 4837 2.23 3.69 1.57 118 FROM_EXCESS_BASE64 4806 1.77 2.24 1.56 119 TR_Symld_Words 4716 1.46 1.30 1.53 120 T_XMDrugObfuBody_08 4521 2.14 3.61 1.47 121 XM_SPF_SoftFail 4520 1.95 3.03 1.47 122 URI_HEX 4517 1.43 1.36 1.47 123 HELO_NODOT 4504 1.07 0.20 1.46 124 HELO_NO_DOMAIN 4494 1.06 0.19 1.46 125 XM_B_Unsub2 4325 2.10 3.65 1.40 126 URI_NOVOWEL 4309 1.51 1.75 1.40 127 TR_XM_SpammyWords5 4269 2.09 3.65 1.39 128 BOTNET 4133 4.35 11.01 1.34 129 XM_GoogleGroups 4115 1.21 0.93 1.34 130 IN_HORDE_ADDRESS_BOOK 4112 0.95 0.11 1.33 131 T_TooManySym_03 4056 1.03 0.40 1.32 132 TooManyTo_004 3797 1.01 0.52 1.23 133 XMGappySubj_01 3684 0.89 0.20 1.20 134 XMCapTrack 3612 0.99 0.58 1.17 135 XMNoVowels 3330 0.92 0.57 1.08 136 XM_UB50 3269 1.75 3.28 1.06 137 XM_OfRef6 3262 1.80 3.45 1.06 138 XM_ShortIntro_01 3224 0.87 0.48 1.05 139 RCVD_IN_MSPIKE_BL 3098 2.39 5.44 1.01 140 TR_XM_MSPIKECOMBO 3098 2.39 5.44 1.01 141 TooManyTo_005 3081 0.84 0.48 1.00 142 TVD_SPACE_RATIO 3007 0.76 0.30 0.98 143 SpammyFromTLD_01 2985 1.17 1.62 0.97 144 XMGenDplmaNmb 2937 1.12 1.49 0.95 145 XMBrknScrpt_02 2917 1.16 1.65 0.95 146 TR_MetaPhish_Combo_01 2905 1.00 1.11 0.94 147 XMStockSpam_06 2887 1.21 1.80 0.94 148 XM_H_PHPMailer 2750 0.79 0.56 0.89 149 T_FILL_THIS_FORM_SHORT 2741 1.29 2.19 0.89 150 TVD_RCVD_IP 2723 0.97 1.16 0.88 151 XM_H_Long_From02 2705 1.22 1.98 0.88 152 XMSexyCombo_05 2542 1.85 4.10 0.83 153 DKIM_ADSP_CUSTOM_MED 2515 0.94 1.22 0.82 154 RCVD_IN_PBL 2489 0.95 1.25 0.81 155 T_TVD_MIME_NO_HEADERS 2471 0.56 0.04 0.80 156 RELAYCOUNTRY_CA 2391 2.84 7.41 0.78 157 T_XMDrugObfuBody_00 2383 0.99 1.47 0.77 158 RCVD_IN_MSPIKE_L3 2366 1.48 3.06 0.77 159 FROM_GOV_DKIM_AU 2359 0.58 0.18 0.77 160 XM_B_SpammyWords4 2218 1.27 2.49 0.72 161 RELAYCOUNTRY_GB 2173 0.78 0.95 0.71 162 TR_XM_Base64_M1 2148 0.77 0.93 0.70 163 HTTPS_HTTP_MISMATCH 2096 0.85 1.24 0.68 164 TR_XM_PHPForged 2073 0.83 1.17 0.67 165 RELAYCOUNTRY_AU 2066 1.38 2.93 0.67 166 TR_XM_PHPDW 2062 0.81 1.13 0.67 167 TR_XM_FormFill2 2047 0.81 1.14 0.66 168 XMBody_17 2037 1.23 2.47 0.66 169 T_Symld_Words_02 2031 0.73 0.89 0.66 170 XM_H_PHPOS 2023 0.80 1.12 0.66 171 XM_B_COPY_HTML 1996 0.82 1.21 0.65 172 XMLngstWrd_00 1993 0.61 0.54 0.65 173 T_XMHurry_00 1954 0.99 1.78 0.63 174 XMSlimDrugH 1927 0.65 0.72 0.63 175 LongTLD 1923 0.69 0.82 0.62 176 XMBdyGiftCard01 1897 0.76 1.06 0.62 177 XMPhish14 1890 0.88 1.47 0.61 178 T_OBFU_PDF_ATTACH 1862 0.49 0.23 0.60 179 HTML_TAG_BALANCE_BODY 1857 0.77 1.15 0.60 180 XMBSHREFv2 1793 0.49 0.29 0.58 181 XMGappySubj_02 1743 0.41 0.08 0.57 182 RCVD_IN_BL_SPAMCOP_NET 1733 3.89 11.23 0.56 183 TR_XM_SpammyWords2 1711 3.57 10.24 0.56 184 MSGID_FROM_MTA_HEADER 1695 0.47 0.29 0.55 185 XMLngstWrd_01 1676 0.53 0.49 0.54 186 XMSubMetaI_00 1674 0.78 1.32 0.54 187 NML_ADSP_CUSTOM_MED 1648 0.62 0.80 0.53 188 HTML_IMAGE_ONLY_32 1605 0.42 0.21 0.52 189 XMMoneyMeta_00 1600 0.54 0.60 0.52 190 XMDateMe_00 1598 0.49 0.41 0.52 191 XMPhish30 1532 0.78 1.39 0.50 192 SpammyFromTLD_02 1531 1.04 2.24 0.50 193 MPART_ALT_DIFF_COUNT 1507 0.87 1.70 0.49 194 FORGED_GMAIL_RCVD 1495 0.61 0.88 0.49 195 URI_TRY_3LD 1493 0.83 1.61 0.48 196 XM_ProductURIs 1483 0.66 1.05 0.48 197 XMBody_95 1454 0.38 0.18 0.47 198 SHORT_HELO_AND_INLINE_IMAGE 1399 0.32 0.03 0.45 199 TO_NO_BRKTS_HTML_ONLY 1364 0.55 0.79 0.44 200 TR_XM_SpammyWords3 1337 1.44 3.68 0.43 ----------------------------------------------------------------------