Email: 512636 Autolearn: 0 AvgScore: 3.55 AvgScanTime: 1.48 sec Spam: 138430 Autolearn: 0 AvgScore: 15.18 AvgScanTime: 1.75 sec Ham: 374206 Autolearn: 0 AvgScore: -0.75 AvgScanTime: 1.37 sec Time Spent Running SA: 210.11 hours Time Spent Processing Spam: 67.42 hours Time Spent Processing Ham: 142.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 135973 99.22 98.23 99.59 2 HTML_MESSAGE 131786 88.80 95.20 86.44 3 DKIM_SIGNED 117579 67.72 84.94 61.35 4 XM_DK_Pass 110604 65.73 79.90 60.49 5 DKIM_VALID 108176 64.61 78.14 59.61 6 XM_B_Unicode 108009 70.96 78.02 68.34 7 RELAYCOUNTRY_US 105781 78.02 76.41 78.62 8 DCC_CHECK 105113 50.30 75.93 40.82 9 XM_B_SpammyWords 89127 49.31 64.38 43.74 10 XMListUnsubscribeExists 86536 44.28 62.51 37.54 11 DKIM_VALID_AU 84451 51.72 61.01 48.28 12 XM_B_Unicode3 61533 41.79 44.45 40.80 13 LOC_TINY_FONT_1 59896 29.58 43.27 24.52 14 BAYES_50 57501 52.61 41.54 56.70 15 XM_DK_Undo_02 54171 13.45 39.13 3.95 16 XM_B_SpammyWords2 49463 20.91 35.73 15.43 17 MIME_HTML_ONLY 48859 24.97 35.30 21.14 18 HTML_FONT_LOW_CONTRAST 47804 26.92 34.53 24.10 19 FVGT_m_MULTI_ODD 42702 23.63 30.85 20.96 20 DKIM_VALID_EF 41384 27.09 29.90 26.05 21 BAYES_99 41160 9.99 29.73 2.69 22 T_KAM_HTML_FONT_INVALID 39145 20.51 28.28 17.64 23 TR_XM_DKIM_Undo 38962 8.81 28.15 1.65 24 XMSubLong 34579 22.50 24.98 21.59 25 XM_B_Unsub 34566 12.31 24.97 7.62 26 TR_XM_BayesUnsub 33090 10.75 23.90 5.88 27 BAYES_999 31876 7.67 23.03 1.99 28 DCC_CHECK_NEGATIVE 31165 49.25 22.51 59.14 29 TR_XM_DK_Unsub 30016 13.98 21.68 11.14 30 T_TM2_M_HEADER_IN_MSG 29693 28.77 21.45 31.48 31 RELAYCOUNTRY_META 29458 7.93 21.28 2.99 32 TR_DCC_Bayes_99 27817 6.09 20.09 0.92 33 XM_Multi_Part_URI 25578 13.00 18.48 10.97 34 RCVD_IN_MSPIKE_H2 25494 15.97 18.42 15.07 35 UNPARSEABLE_RELAY 22647 12.24 16.36 10.71 36 BOTNET 20643 4.72 14.91 0.95 37 TR_MAX_INTL_RELAY 19005 7.25 13.73 4.85 38 XM_B_SpammyWords3 18731 6.37 13.53 3.72 39 LOTS_OF_MONEY 18238 8.79 13.17 7.16 40 BOTNET_IPINHOSTNAME 17354 5.10 12.54 2.34 41 TR_XM_SpammyRelay 16365 4.30 11.82 1.52 42 TR_XM_SpammyWords4 16351 7.20 11.81 5.50 43 UNTRUSTED_Relay 16269 4.10 11.75 1.27 44 RCVD_IN_BL_SPAMCOP_NET 15256 3.47 11.02 0.68 45 XMStrtUSub 14754 9.79 10.66 9.47 46 FSL_BULK_SIG 14583 15.02 10.53 16.68 47 XM_Evil_Numbers_Gen 14494 10.71 10.47 10.80 48 TR_XM_SpammyWords2 13497 2.87 9.75 0.33 49 RCVD_IN_MSPIKE_WL 13303 13.85 9.61 15.42 50 XM_B_Phish_Phrases 13195 6.32 9.53 5.13 51 TR_XM_UnparsRelay 12281 3.34 8.87 1.29 52 BAYES_80 12270 4.56 8.86 2.97 53 BAYES_60 12167 6.41 8.79 5.53 54 XM_Body_Dirty_Words 11325 3.81 8.18 2.20 55 TR_XM_NoHeaderRelay 11270 2.32 8.14 0.16 56 SCC_BODY_URI_ONLY 10552 5.52 7.62 4.74 57 RCVD_IN_MSPIKE_BL 9838 2.53 7.11 0.83 58 TR_XM_MSPIKECOMBO 9835 2.52 7.10 0.83 59 DKIM_INVALID 9403 3.10 6.79 1.74 60 XM_B_PhoneNumber 9314 7.93 6.73 8.37 61 MPART_ALT_DIFF 8929 7.90 6.45 8.44 62 XM_UB50 8924 2.36 6.45 0.84 63 RELAYCOUNTRY_CA 8908 2.18 6.44 0.61 64 XMSubMetaSx_00 8528 3.43 6.16 2.42 65 XM_H_Long_From01 8290 5.10 5.99 4.77 66 LotsOfNums_01 8256 8.19 5.96 9.01 67 XM_UncommonTLD01 8205 4.25 5.93 3.63 68 SCC_BODY_SINGLE_WORD 8192 1.61 5.92 0.02 69 HTML_IMAGE_ONLY_08 8191 1.70 5.92 0.14 70 BODY_URI_ONLY 8174 1.60 5.90 0.01 71 BODY_SINGLE_WORD 8164 1.60 5.90 0.01 72 BODY_SINGLE_URI 8161 1.60 5.90 0.01 73 HTML_SHORT_LINK_IMG_1 8120 1.59 5.87 0.01 74 SHORTENER_SHORT_IMG 8103 1.58 5.85 0.00 75 HTML_IMAGE_RATIO_02 7869 4.30 5.68 3.79 76 HTML_IMAGE_RATIO_04 7542 11.26 5.45 13.41 77 XM_B_Investor 6968 2.41 5.03 1.44 78 TR_XM_SPAMCOP 6798 1.49 4.91 0.22 79 XM_H_GMP 6722 4.86 4.86 4.85 80 RCVD_IN_MSPIKE_H3 6596 6.10 4.76 6.59 81 BAYES_95 6371 2.61 4.60 1.87 82 TR_XM_PhishingBody 6305 2.32 4.55 1.49 83 SHORT_SHORTNER 6230 1.22 4.50 0.01 84 XMSexyCombo_05 6222 1.83 4.49 0.84 85 RCVD_IN_VALIDITY_RPBL 6173 1.22 4.46 0.03 86 T_XMDrugObfuBody_08 6037 2.05 4.36 1.19 87 XM_OfRef6 5844 1.72 4.22 0.80 88 TooManyTo_001 5527 6.20 3.99 7.02 89 TR_XM_SpammyWords5 5306 1.71 3.83 0.93 90 T_XMDrugObfuBody_14 5252 2.14 3.79 1.52 91 XMNumbers 5223 2.96 3.77 2.66 92 XM_B_SpammyTLD 4981 2.65 3.60 2.31 93 TM2_M_VERY_LONG_WORD 4856 3.99 3.51 4.17 94 XM_URI_RBL 4790 1.17 3.46 0.32 95 XM_B_Unsub2 4530 1.82 3.27 1.29 96 XMDiploma_00 4370 1.87 3.16 1.39 97 MIME_HTML_MOSTLY 4282 2.12 3.09 1.76 98 XM_SPF_SoftFail 4270 1.76 3.08 1.27 99 MIME_QP_LONG_LINE 4236 3.98 3.06 4.32 100 RELAYCOUNTRY_NL 4233 0.94 3.06 0.15 101 MIME_HTML_ONLY_MULTI 4226 5.78 3.05 6.79 102 RCVD_IN_MSPIKE_L5 4197 0.82 3.03 0.00 103 HTML_IMAGE_RATIO_08 4190 2.28 3.03 2.01 104 XM_B_URI_Unicode 4174 2.02 3.02 1.66 105 XM_CamelCaseFrm001 4171 1.96 3.01 1.57 106 TR_XM_SpammyWords3 4069 1.06 2.94 0.36 107 TR_XM_INV_DKIM 4033 0.80 2.91 0.02 108 XMStockSpam_06 3864 1.28 2.79 0.72 109 HTML_IMAGE_RATIO_06 3812 4.84 2.75 5.61 110 RCVD_IN_MSPIKE_H4 3668 3.24 2.65 3.46 111 RELAYCOUNTRY_AU 3623 0.98 2.62 0.37 112 RCVD_IN_MSPIKE_L3 3616 1.16 2.61 0.63 113 XM_SendGrid 3313 2.47 2.39 2.50 114 T_FILL_THIS_FORM_SHORT 3303 1.18 2.39 0.73 115 TM2_M_URI_OPT_OUT 3273 1.80 2.36 1.59 116 T_TooManySym_01 3201 4.37 2.31 5.13 117 XMBody_17 3190 0.88 2.30 0.35 118 SpammyFromTLD_02 3133 0.94 2.26 0.46 119 XM_UB60 3098 0.66 2.24 0.08 120 RCVD_IN_MSPIKE_H5 3039 4.51 2.20 5.37 121 RELAYCOUNTRY_MD 3033 0.59 2.19 0.00 122 FROM_EXCESS_BASE64 3009 1.54 2.17 1.30 123 MAILING_LIST_MULTI 2950 2.55 2.13 2.70 124 XMGenDplmaNmb 2937 1.11 2.12 0.74 125 USER_IN_DEF_DKIM_WL 2917 7.56 2.11 9.58 126 XM_B_SpammyWords4 2785 0.87 2.01 0.44 127 HTML_IMAGE_ONLY_20 2627 0.74 1.90 0.32 128 HTML_TAG_BALANCE_BODY 2577 0.78 1.86 0.38 129 BAYES_40 2534 5.29 1.83 6.58 130 ALL_TRUSTED 2512 14.33 1.81 18.96 131 SUBJ_ALL_CAPS 2478 1.34 1.79 1.17 132 RCVD_IN_VALIDITY_SAFE 2455 2.91 1.77 3.32 133 SpammyFromTLD_01 2398 0.97 1.73 0.69 134 DKIM_ADSP_NXDOMAIN 2326 0.63 1.68 0.25 135 T_REMOTE_IMAGE 2255 2.90 1.63 3.37 136 XM_H_Long_From02 2192 0.97 1.58 0.74 137 RCVD_IN_ZEN_LASTEXTERNAL 2136 0.42 1.54 0.00 138 SHORTCIRCUIT 2136 0.42 1.54 0.00 139 HTML_MIME_NO_HTML_TAG 2133 2.10 1.54 2.30 140 T_XMDrugObfuBody_00 2101 0.86 1.52 0.61 141 URI_HEX 2095 1.28 1.51 1.20 142 T_XMHurry_00 2071 0.74 1.50 0.46 143 XM_Sams_Club_Forge 2068 0.41 1.49 0.02 144 RCVD_IN_MSPIKE_L4 2024 0.54 1.46 0.20 145 TR_XM_MSPIKECOMBO2 2011 0.43 1.45 0.06 146 TR_XM_DK_SendGrid 2002 1.61 1.45 1.68 147 XM_B_Phish66 1986 0.63 1.43 0.33 148 BAYES_20 1939 5.82 1.40 7.45 149 TR_LOTS_OF_MONEY3 1913 0.52 1.38 0.21 150 RCVD_IN_VALIDITY_CERTIFIED 1886 2.46 1.36 2.87 151 XMBody_78 1870 0.57 1.35 0.29 152 XM_DK_Undo_01 1867 1.42 1.35 1.44 153 URI_TRY_3LD 1861 0.75 1.34 0.53 154 RCVD_IN_PBL 1839 0.87 1.33 0.71 155 HK_RANDOM_REPLYTO 1827 0.44 1.32 0.12 156 MPART_ALT_DIFF_COUNT 1819 0.67 1.31 0.44 157 XM_UB80 1815 0.36 1.31 0.01 158 XM_HighProb1 1787 0.35 1.29 0.00 159 XMPhish30 1776 0.73 1.28 0.52 160 XMBrknScrpt_02 1761 0.82 1.27 0.66 161 TR_LOTS_OF_MONEY2 1760 0.47 1.27 0.18 162 T_MONEY_PERCENT 1760 0.47 1.27 0.18 163 RCVD_IN_XBL 1740 0.36 1.26 0.02 164 RCVD_IN_IADB_LISTED 1716 2.32 1.24 2.72 165 XMSubMetaI_00 1691 0.66 1.22 0.45 166 TM2_M_OBFU_COMMENT 1688 0.47 1.22 0.19 167 KHOP_HELO_FCRDNS 1675 2.38 1.21 2.81 168 RELAYCOUNTRY_FR 1664 0.49 1.20 0.23 169 RDNS_DYNAMIC 1658 0.42 1.20 0.13 170 URI_NOVOWEL 1648 1.17 1.19 1.17 171 TR_XM_PHPForged 1636 0.52 1.18 0.27 172 TR_XM_FormFill2 1624 0.51 1.17 0.27 173 PDS_RDNS_DYNAMIC_FP 1620 0.34 1.17 0.03 174 TR_XM_PHPDW 1618 0.51 1.17 0.27 175 ANY_BOUNCE_MESSAGE 1604 6.95 1.16 9.09 176 BOUNCE_MESSAGE 1604 6.95 1.16 9.09 177 HTTPS_HTTP_MISMATCH 1601 0.73 1.16 0.58 178 XM_ProductURIs 1598 0.63 1.15 0.44 179 XM_H_PHPOS 1578 0.49 1.14 0.26 180 XM_B_SEO 1573 0.50 1.14 0.27 181 TM2_M_A_HREF_HREF 1545 0.47 1.12 0.23 182 TR_XM_MaxSPIKE 1524 0.33 1.10 0.05 183 TR_XM_FormFill 1521 0.30 1.10 0.01 184 T_STY_INVIS_DIRECT 1509 0.59 1.09 0.40 185 RCVD_IN_IADB_SPF 1497 2.04 1.08 2.40 186 MultiRelay_CC 1483 0.40 1.07 0.15 187 LongTLD 1469 0.70 1.06 0.56 188 TR_Mismatch_TLD_02 1461 0.33 1.06 0.06 189 TVD_RCVD_IP 1427 1.02 1.03 1.01 190 XM_B_COPY_HTML 1417 0.82 1.02 0.74 191 DKIM_ADSP_CUSTOM_MED 1414 0.75 1.02 0.65 192 URIBL_BLACK 1406 0.28 1.02 0.01 193 RCVD_IN_IADB_DK 1394 1.80 1.01 2.09 194 RCVD_IN_SBL_CSS 1393 0.29 1.01 0.03 195 TR_XM_SEO4 1389 0.39 1.00 0.17 196 RCVD_IN_IADB_SENDERID 1376 1.83 0.99 2.14 197 XM_DIRTYINTL 1374 0.31 0.99 0.05 198 DIET_1 1367 0.41 0.99 0.20 199 XM_GoogleGroups 1343 1.05 0.97 1.08 200 XMPhish08 1340 0.35 0.97 0.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 372659 99.22 98.23 99.59 2 HTML_MESSAGE 323457 88.80 95.20 86.44 3 RELAYCOUNTRY_US 294201 78.02 76.41 78.62 4 XM_B_Unicode 255732 70.96 78.02 68.34 5 DKIM_SIGNED 229571 67.72 84.94 61.35 6 XM_DK_Pass 226366 65.73 79.90 60.49 7 DKIM_VALID 223058 64.61 78.14 59.61 8 DCC_CHECK_NEGATIVE 221302 49.25 22.51 59.14 9 BAYES_50 212174 52.61 41.54 56.70 10 DKIM_VALID_AU 180670 51.72 61.01 48.28 11 XM_B_SpammyWords 163660 49.31 64.38 43.74 12 DCC_CHECK 152743 50.30 75.93 40.82 13 XM_B_Unicode3 152692 41.79 44.45 40.80 14 XMListUnsubscribeExists 140476 44.28 62.51 37.54 15 T_TM2_M_HEADER_IN_MSG 117813 28.77 21.45 31.48 16 DKIM_VALID_EF 97472 27.09 29.90 26.05 17 LOC_TINY_FONT_1 91767 29.58 43.27 24.52 18 HTML_FONT_LOW_CONTRAST 90187 26.92 34.53 24.10 19 XMSubLong 80779 22.50 24.98 21.59 20 MIME_HTML_ONLY 79123 24.97 35.30 21.14 21 FVGT_m_MULTI_ODD 78443 23.63 30.85 20.96 22 ALL_TRUSTED 70949 14.33 1.81 18.96 23 T_KAM_HTML_FONT_INVALID 66006 20.51 28.28 17.64 24 FSL_BULK_SIG 62426 15.02 10.53 16.68 25 XM_B_SpammyWords2 57741 20.91 35.73 15.43 26 RCVD_IN_MSPIKE_WL 57699 13.85 9.61 15.42 27 RCVD_IN_MSPIKE_H2 56389 15.97 18.42 15.07 28 HTML_IMAGE_RATIO_04 50166 11.26 5.45 13.41 29 BAYES_00 48449 9.70 0.91 12.95 30 HTML_FONT_FACE_BAD 42174 8.36 0.48 11.27 31 TR_XM_DK_Unsub 41674 13.98 21.68 11.14 32 XM_Multi_Part_URI 41054 13.00 18.48 10.97 33 XM_Evil_Numbers_Gen 40405 10.71 10.47 10.80 34 UNPARSEABLE_RELAY 40091 12.24 16.36 10.71 35 XM_H_Trusted_IP 39579 7.72 0.00 10.58 36 USER_IN_DEF_DKIM_WL 35833 7.56 2.11 9.58 37 XMStrtUSub 35441 9.79 10.66 9.47 38 BOUNCE_MESSAGE 34030 6.95 1.16 9.09 39 ANY_BOUNCE_MESSAGE 34030 6.95 1.16 9.09 40 LotsOfNums_01 33724 8.19 5.96 9.01 41 MPART_ALT_DIFF 31591 7.90 6.45 8.44 42 XM_B_PhoneNumber 31326 7.93 6.73 8.37 43 XM_B_Unsub 28516 12.31 24.97 7.62 44 BAYES_20 27875 5.82 1.40 7.45 45 LOTS_OF_MONEY 26798 8.79 13.17 7.16 46 TooManyTo_001 26279 6.20 3.99 7.02 47 MIME_HTML_ONLY_MULTI 25417 5.78 3.05 6.79 48 RCVD_IN_MSPIKE_H3 24672 6.10 4.76 6.59 49 BAYES_40 24610 5.29 1.83 6.58 50 TR_XM_BayesUnsub 22003 10.75 23.90 5.88 51 TR_XM_DK_Bayes 21420 4.40 0.81 5.72 52 HTML_IMAGE_RATIO_06 20999 4.84 2.75 5.61 53 TR_XM_DK_Bayes1 20986 4.31 0.79 5.61 54 BAYES_60 20693 6.41 8.79 5.53 55 TR_XM_SpammyWords4 20569 7.20 11.81 5.50 56 RCVD_IN_MSPIKE_H5 20081 4.51 2.20 5.37 57 XM_DKIMWhitelistDomains 20018 3.92 0.06 5.35 58 T_TooManySym_01 19207 4.37 2.31 5.13 59 XM_B_Phish_Phrases 19206 6.32 9.53 5.13 60 XM_H_GMP 18167 4.86 4.86 4.85 61 TR_MAX_INTL_RELAY 18152 7.25 13.73 4.85 62 XM_H_Long_From01 17868 5.10 5.99 4.77 63 SCC_BODY_URI_ONLY 17736 5.52 7.62 4.74 64 TR_XM_DK_Bayes2 17451 3.50 0.37 4.66 65 MIME_QP_LONG_LINE 16171 3.98 3.06 4.32 66 XM_PDF 15866 3.33 0.87 4.24 67 TM2_M_VERY_LONG_WORD 15619 3.99 3.51 4.17 68 XM_DK_Undo_02 14795 13.45 39.13 3.95 69 XMSubNoVowel 14639 2.95 0.35 3.91 70 HTML_IMAGE_RATIO_02 14191 4.30 5.68 3.79 71 XM_B_SpammyWords3 13926 6.37 13.53 3.72 72 XM_UncommonTLD01 13587 4.25 5.93 3.63 73 RCVD_IN_MSPIKE_H4 12946 3.24 2.65 3.46 74 T_REMOTE_IMAGE 12615 2.90 1.63 3.37 75 RCVD_IN_VALIDITY_SAFE 12441 2.91 1.77 3.32 76 BAYES_05 12189 2.59 0.79 3.26 77 MAY_BE_FORGED 11713 2.29 0.02 3.13 78 RELAYCOUNTRY_META 11171 7.93 21.28 2.99 79 BAYES_80 11130 4.56 8.86 2.97 80 RCVD_IN_VALIDITY_CERTIFIED 10726 2.46 1.36 2.87 81 KHOP_HELO_FCRDNS 10526 2.38 1.21 2.81 82 RCVD_IN_IADB_LISTED 10190 2.32 1.24 2.72 83 MAILING_LIST_MULTI 10113 2.55 2.13 2.70 84 BAYES_99 10068 9.99 29.73 2.69 85 XMNumbers 9969 2.96 3.77 2.66 86 T_TooManySym_02 9894 2.15 0.81 2.64 87 XM_SendGrid 9342 2.47 2.39 2.50 88 XMSubMetaSx_00 9039 3.43 6.16 2.42 89 RCVD_IN_IADB_SPF 8986 2.04 1.08 2.40 90 BOTNET_IPINHOSTNAME 8775 5.10 12.54 2.34 91 XM_B_SpammyTLD 8626 2.65 3.60 2.31 92 HTML_MIME_NO_HTML_TAG 8623 2.10 1.54 2.30 93 TooManyTo_002 8312 1.83 0.76 2.22 94 XM_Body_Dirty_Words 8215 3.81 8.18 2.20 95 RCVD_IN_IADB_SENDERID 8015 1.83 0.99 2.14 96 RCVD_IN_IADB_DK 7834 1.80 1.01 2.09 97 HTML_IMAGE_RATIO_08 7518 2.28 3.03 2.01 98 INVALID_MSGID 7494 1.56 0.38 2.00 99 BAYES_999 7439 7.67 23.03 1.99 100 XMSubLongNoVowel 7432 1.48 0.12 1.99 101 XMSubGarbage 7273 1.43 0.03 1.94 102 BAYES_95 7010 2.61 4.60 1.87 103 MIME_HTML_MOSTLY 6599 2.12 3.09 1.76 104 RCVD_IN_IADB_VOUCHED 6541 1.47 0.71 1.75 105 DKIM_INVALID 6513 3.10 6.79 1.74 106 TO_MALFORMED 6386 1.27 0.08 1.71 107 TR_XM_DK_SendGrid 6277 1.61 1.45 1.68 108 XM_B_URI_Unicode 6197 2.02 3.02 1.66 109 TR_XM_DKIM_Undo 6189 8.81 28.15 1.65 110 TM2_M_URI_OPT_OUT 5966 1.80 2.36 1.59 111 XM_CamelCaseFrm001 5862 1.96 3.01 1.57 112 T_XMDrugObfuBody_14 5698 2.14 3.79 1.52 113 TR_XM_SpammyRelay 5697 4.30 11.82 1.52 114 TR_XM_PhishingBody 5584 2.32 4.55 1.49 115 XM_DK_Undo_01 5397 1.42 1.35 1.44 116 XM_B_Investor 5375 2.41 5.03 1.44 117 TooManyTo_003 5292 1.19 0.58 1.41 118 XMDiploma_00 5193 1.87 3.16 1.39 119 HTML_IMAGE_ONLY_32 4866 0.99 0.16 1.30 120 FROM_EXCESS_BASE64 4864 1.54 2.17 1.30 121 TR_XM_UnparsRelay 4840 3.34 8.87 1.29 122 XM_B_Unsub2 4824 1.82 3.27 1.29 123 XM_SPF_SoftFail 4762 1.76 3.08 1.27 124 UNTRUSTED_Relay 4734 4.10 11.75 1.27 125 TR_Symld_Words 4541 1.11 0.85 1.21 126 URI_HEX 4487 1.28 1.51 1.20 127 T_XMDrugObfuBody_08 4471 2.05 4.36 1.19 128 RCVD_IN_IADB_OPTIN 4442 1.00 0.48 1.19 129 SUBJ_ALL_CAPS 4396 1.34 1.79 1.17 130 HELO_NODOT 4378 0.89 0.12 1.17 131 HELO_NO_DOMAIN 4373 0.88 0.12 1.17 132 URI_NOVOWEL 4360 1.17 1.19 1.17 133 XMGappySubj_01 4167 0.88 0.26 1.11 134 IN_HORDE_ADDRESS_BOOK 4166 0.83 0.06 1.11 135 XM_GoogleGroups 4044 1.05 0.97 1.08 136 TooManyTo_004 3997 0.92 0.51 1.07 137 T_TooManySym_03 3904 0.86 0.37 1.04 138 MIME_CHARSET_FARAWAY 3874 0.84 0.32 1.04 139 XMCapTrack 3817 0.95 0.75 1.02 140 TVD_RCVD_IP 3794 1.02 1.03 1.01 141 XMLngstWrd_00 3697 0.82 0.37 0.99 142 BOTNET 3565 4.72 14.91 0.95 143 XM_ShortIntro_01 3541 0.81 0.46 0.95 144 CHARSET_FARAWAY_HEADER 3480 0.72 0.15 0.93 145 TR_XM_SpammyWords5 3475 1.71 3.83 0.93 146 TR_DCC_Bayes_99 3427 6.09 20.09 0.92 147 XM_H_PHPMailer 3339 0.83 0.66 0.89 148 TooManyTo_005 3229 0.75 0.45 0.86 149 XM_E_Blogspot 3191 0.66 0.14 0.85 150 XM_UB50 3152 2.36 6.45 0.84 151 XMSexyCombo_05 3134 1.83 4.49 0.84 152 RCVD_IN_MSPIKE_BL 3107 2.53 7.11 0.83 153 TR_XM_MSPIKECOMBO 3107 2.52 7.10 0.83 154 XM_OfRef6 2982 1.72 4.22 0.80 155 TVD_SPACE_RATIO 2894 0.60 0.14 0.77 156 XM_B_COPY_HTML 2769 0.82 1.02 0.74 157 XM_H_Long_From02 2768 0.97 1.58 0.74 158 XMGenDplmaNmb 2767 1.11 2.12 0.74 159 T_FILL_THIS_FORM_SHORT 2722 1.18 2.39 0.73 160 XMStockSpam_06 2699 1.28 2.79 0.72 161 RCVD_IN_PBL 2641 0.87 1.33 0.71 162 SpammyFromTLD_01 2573 0.97 1.73 0.69 163 RCVD_IN_BL_SPAMCOP_NET 2544 3.47 11.02 0.68 164 TR_MetaPhish_Combo_01 2535 0.73 0.88 0.68 165 TR_XM_Base64_M1 2508 0.73 0.89 0.67 166 FROM_GOV_DKIM_AU 2467 0.61 0.46 0.66 167 XMBrknScrpt_02 2453 0.82 1.27 0.66 168 DKIM_ADSP_CUSTOM_MED 2426 0.75 1.02 0.65 169 RCVD_IN_MSPIKE_L3 2348 1.16 2.61 0.63 170 T_OBFU_PDF_ATTACH 2325 0.52 0.24 0.62 171 T_XMDrugObfuBody_00 2296 0.86 1.52 0.61 172 RELAYCOUNTRY_CA 2273 2.18 6.44 0.61 173 XMGappySubj_02 2173 0.44 0.04 0.58 174 HTTPS_HTTP_MISMATCH 2161 0.73 1.16 0.58 175 RELAYCOUNTRY_GB 2160 0.66 0.89 0.58 176 XMLngstWrd_01 2143 0.51 0.32 0.57 177 LongTLD 2097 0.70 1.06 0.56 178 XMNoVowels 2093 0.52 0.42 0.56 179 URI_TRY_3LD 2001 0.75 1.34 0.53 180 XMPhish30 1946 0.73 1.28 0.52 181 T_Symld_Words_02 1919 0.53 0.58 0.51 182 XMBdyGiftCard01 1817 0.58 0.85 0.49 183 XMBSHREFv2 1778 0.44 0.33 0.48 184 XMMoneyMeta_00 1738 0.57 0.87 0.46 185 SpammyFromTLD_02 1711 0.94 2.26 0.46 186 T_XMHurry_00 1707 0.74 1.50 0.46 187 XMSubMetaI_00 1681 0.66 1.22 0.45 188 MSGID_FROM_MTA_HEADER 1669 0.37 0.17 0.45 189 XM_B_SpammyWords4 1664 0.87 2.01 0.44 190 XMEqualsVooDoo_00 1655 0.33 0.03 0.44 191 XM_H_OutlookMailer 1648 0.35 0.10 0.44 192 XMPhish14 1647 0.55 0.86 0.44 193 XMLngstWrd_02 1646 0.39 0.27 0.44 194 MPART_ALT_DIFF_COUNT 1639 0.67 1.31 0.44 195 XM_ProductURIs 1635 0.63 1.15 0.44 196 NML_ADSP_CUSTOM_MED 1536 0.47 0.65 0.41 197 T_STY_INVIS_DIRECT 1514 0.59 1.09 0.40 198 FORGED_GMAIL_RCVD 1478 0.44 0.55 0.39 199 XMSlimDrugH 1462 0.53 0.92 0.39 200 TO_NO_BRKTS_HTML_ONLY 1450 0.47 0.70 0.39 ----------------------------------------------------------------------