Email: 445737 Autolearn: 0 AvgScore: 5.28 AvgScanTime: 1.45 sec Spam: 139307 Autolearn: 0 AvgScore: 14.78 AvgScanTime: 1.61 sec Ham: 306430 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.38 sec Time Spent Running SA: 179.71 hours Time Spent Processing Spam: 62.14 hours Time Spent Processing Ham: 117.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 136977 99.09 98.33 99.43 2 HTML_MESSAGE 133129 89.88 95.57 87.30 3 DKIM_SIGNED 122097 80.12 87.65 76.70 4 XM_DK_Pass 114864 77.80 82.45 75.68 5 DKIM_VALID 113961 76.89 81.81 74.65 6 XM_B_Unicode 112654 73.79 80.87 70.57 7 RELAYCOUNTRY_US 109197 80.20 78.39 81.03 8 DCC_CHECK 103302 51.16 74.15 40.71 9 XM_B_SpammyWords 93530 52.51 67.14 45.86 10 XMListUnsubscribeExists 90807 53.78 65.18 48.59 11 DKIM_VALID_AU 88499 61.54 63.53 60.63 12 XM_B_Unicode3 66980 42.67 48.08 40.22 13 LOC_TINY_FONT_1 64791 34.17 46.51 28.56 14 XM_DK_Undo_02 56592 16.01 40.62 4.82 15 BAYES_50 56445 54.38 40.52 60.68 16 XM_B_SpammyWords2 53952 25.11 38.73 18.92 17 HTML_FONT_LOW_CONTRAST 49785 30.34 35.74 27.88 18 MIME_HTML_ONLY 46977 24.11 33.72 19.74 19 FVGT_m_MULTI_ODD 44002 27.22 31.59 25.24 20 DKIM_VALID_EF 42696 31.00 30.65 31.16 21 BAYES_99 41698 11.69 29.93 3.40 22 TR_XM_DKIM_Undo 41072 10.60 29.48 2.01 23 T_KAM_HTML_FONT_INVALID 40370 24.32 28.98 22.20 24 DCC_CHECK_NEGATIVE 33909 48.32 24.34 59.23 25 XMSubLong 32661 23.12 23.45 22.98 26 BAYES_999 32197 8.97 23.11 2.54 27 XM_B_Unsub 31806 13.46 22.83 9.19 28 TR_XM_DK_Unsub 31145 16.76 22.36 14.22 29 T_TM2_M_HEADER_IN_MSG 31047 27.34 22.29 29.64 30 TR_XM_BayesUnsub 30824 11.99 22.13 7.38 31 RELAYCOUNTRY_META 28592 9.12 20.52 3.93 32 TR_DCC_Bayes_99 28482 7.27 20.45 1.28 33 XM_Multi_Part_URI 26965 15.73 19.36 14.08 34 RCVD_IN_MSPIKE_H2 26590 17.74 19.09 17.12 35 UNPARSEABLE_RELAY 24062 13.95 17.27 12.44 36 TR_MAX_INTL_RELAY 20885 8.92 14.99 6.16 37 BOTNET 18594 4.94 13.35 1.11 38 XM_B_SpammyWords3 18422 7.52 13.22 4.93 39 TR_XM_SpammyRelay 17939 5.43 12.88 2.05 40 BOTNET_IPINHOSTNAME 17182 6.01 12.33 3.14 41 LOTS_OF_MONEY 15947 7.98 11.45 6.40 42 RCVD_IN_BL_SPAMCOP_NET 15385 3.92 11.04 0.68 43 TR_XM_SpammyWords2 14745 3.63 10.58 0.47 44 TR_XM_SpammyWords4 14561 6.34 10.45 4.47 45 FSL_BULK_SIG 14325 9.58 10.28 9.27 46 XM_Evil_Numbers_Gen 13762 9.78 9.88 9.74 47 RCVD_IN_MSPIKE_WL 13403 16.15 9.62 19.12 48 BAYES_80 13051 5.60 9.37 3.88 49 UNTRUSTED_Relay 12971 3.95 9.31 1.52 50 TR_XM_UnparsRelay 12542 3.98 9.00 1.70 51 BAYES_60 12537 7.84 9.00 7.31 52 XM_B_Phish_Phrases 11489 5.91 8.25 4.84 53 XMStrtUSub 10509 6.35 7.54 5.80 54 XM_Body_Dirty_Words 9933 4.35 7.13 3.09 55 RCVD_IN_MSPIKE_BL 9916 3.03 7.12 1.18 56 TR_XM_MSPIKECOMBO 9909 3.03 7.11 1.18 57 LotsOfNums_01 9852 8.30 7.07 8.85 58 TR_XM_NoHeaderRelay 9791 2.44 7.03 0.36 59 RELAYCOUNTRY_CA 9492 2.69 6.81 0.82 60 XMSubMetaSx_00 9383 4.39 6.74 3.33 61 HTML_IMAGE_RATIO_02 8973 5.03 6.44 4.39 62 XM_B_PhoneNumber 8865 8.90 6.36 10.06 63 XM_UncommonTLD01 8811 4.94 6.32 4.31 64 DKIM_INVALID 8136 3.23 5.84 2.05 65 MPART_ALT_DIFF 8122 4.92 5.83 4.51 66 XM_H_Long_From01 8066 5.97 5.79 6.05 67 XM_B_Investor 7193 2.65 5.16 1.50 68 BAYES_95 7162 3.17 5.14 2.28 69 HTML_IMAGE_RATIO_04 6851 4.44 4.92 4.22 70 XM_H_GMP 6513 5.65 4.68 6.09 71 TR_XM_PhishingBody 6475 2.78 4.65 1.94 72 RCVD_IN_VALIDITY_RPBL 6432 1.47 4.62 0.04 73 RCVD_IN_MSPIKE_H3 6344 7.33 4.55 8.60 74 TR_XM_SPAMCOP 6256 1.52 4.49 0.18 75 XM_UB50 6014 2.02 4.32 0.98 76 XMSexyCombo_05 5978 1.96 4.29 0.90 77 T_XMDrugObfuBody_14 5770 2.68 4.14 2.01 78 TooManyTo_001 5464 7.04 3.92 8.46 79 SCC_BODY_URI_ONLY 5347 3.10 3.84 2.76 80 XM_B_SpammyTLD 5220 3.02 3.75 2.69 81 XM_OfRef6 5207 1.92 3.74 1.09 82 HTML_SHORT_LINK_IMG_1 5123 1.15 3.68 0.01 83 HTML_IMAGE_ONLY_08 5032 1.21 3.61 0.12 84 MIME_HTML_ONLY_MULTI 4984 2.77 3.58 2.41 85 TM2_M_VERY_LONG_WORD 4935 2.52 3.54 2.06 86 SHORTENER_SHORT_IMG 4882 1.10 3.50 0.00 87 HTML_IMAGE_RATIO_08 4824 2.72 3.46 2.38 88 TR_XM_SpammyWords5 4778 2.07 3.43 1.45 89 XM_CamelCaseFrm001 4449 2.31 3.19 1.91 90 T_XMDrugObfuBody_08 4445 2.03 3.19 1.51 91 HTML_IMAGE_RATIO_06 4363 3.37 3.13 3.47 92 MIME_HTML_MOSTLY 4337 2.62 3.11 2.40 93 XMNumbers 4285 3.16 3.08 3.20 94 HTML_MIME_NO_HTML_TAG 4279 2.80 3.07 2.67 95 XM_B_Unsub2 4196 1.83 3.01 1.29 96 TM2_M_URI_OPT_OUT 4185 2.19 3.00 1.83 97 RCVD_IN_MSPIKE_L5 4158 0.94 2.98 0.00 98 T_TooManySym_01 4130 5.09 2.96 6.06 99 RELAYCOUNTRY_NL 4090 1.04 2.94 0.18 100 TR_XM_SpammyWords3 4052 1.28 2.91 0.54 101 XM_SPF_SoftFail 3987 1.94 2.86 1.52 102 RELAYCOUNTRY_AU 3945 1.38 2.83 0.72 103 RCVD_IN_MSPIKE_H4 3854 3.75 2.77 4.20 104 XM_URI_RBL 3807 1.12 2.73 0.38 105 XM_SendGrid 3717 2.71 2.67 2.73 106 MIME_QP_LONG_LINE 3713 4.76 2.67 5.72 107 TR_XM_INV_DKIM 3700 0.85 2.66 0.03 108 RCVD_IN_MSPIKE_L3 3653 1.44 2.62 0.91 109 XMDiploma_00 3505 1.97 2.52 1.72 110 XM_B_URI_Unicode 3495 2.09 2.51 1.90 111 SpammyFromTLD_02 3248 1.08 2.33 0.50 112 RCVD_IN_MSPIKE_H5 3205 5.07 2.30 6.32 113 SHORT_SHORTNER 3140 0.71 2.25 0.01 114 SCC_BODY_SINGLE_WORD 3105 0.71 2.23 0.02 115 BODY_SINGLE_WORD 3100 0.70 2.23 0.01 116 BODY_SINGLE_URI 3100 0.70 2.23 0.01 117 SUBJ_ALL_CAPS 3035 1.65 2.18 1.41 118 FROM_EXCESS_BASE64 2915 1.64 2.09 1.44 119 XMBody_17 2897 1.04 2.08 0.56 120 XMStockSpam_06 2882 1.66 2.07 1.47 121 RCVD_IN_VALIDITY_SAFE 2825 3.70 2.03 4.46 122 XM_B_SpammyWords4 2809 1.07 2.02 0.64 123 USER_IN_DEF_DKIM_WL 2807 9.99 2.01 13.62 124 XM_H_Long_From02 2682 1.13 1.93 0.77 125 MAILING_LIST_MULTI 2677 2.88 1.92 3.32 126 XM_UB60 2649 0.66 1.90 0.10 127 T_FILL_THIS_FORM_SHORT 2625 1.21 1.88 0.91 128 ALL_TRUSTED 2533 11.37 1.82 15.71 129 SpammyFromTLD_01 2499 1.09 1.79 0.78 130 T_XMDrugObfuBody_00 2423 1.17 1.74 0.91 131 BAYES_40 2408 4.37 1.73 5.58 132 TR_XM_MSPIKECOMBO2 2366 0.58 1.70 0.07 133 URI_NOVOWEL 2293 1.39 1.65 1.28 134 RCVD_IN_IADB_LISTED 2263 3.19 1.62 3.90 135 BODY_URI_ONLY 2181 0.50 1.57 0.01 136 HTML_TAG_BALANCE_CENTER 2121 0.55 1.52 0.11 137 RCVD_IN_VALIDITY_CERTIFIED 2100 3.02 1.51 3.71 138 RCVD_IN_MSPIKE_L4 2098 0.65 1.51 0.27 139 XMBody_78 2092 0.70 1.50 0.33 140 SHORTCIRCUIT 2068 0.46 1.48 0.00 141 RCVD_IN_ZEN_LASTEXTERNAL 2068 0.46 1.48 0.00 142 TR_XM_DK_SendGrid 2067 1.72 1.48 1.83 143 URI_TRY_3LD 2057 0.81 1.48 0.51 144 BAYES_20 2032 3.26 1.46 4.08 145 RELAYCOUNTRY_RU 2013 0.47 1.45 0.03 146 XMGenDplmaNmb 2012 1.10 1.44 0.94 147 XM_DK_Undo_01 2012 1.78 1.44 1.94 148 T_REMOTE_IMAGE 2008 3.25 1.44 4.08 149 URI_HEX 2006 1.41 1.44 1.40 150 HTML_IMAGE_ONLY_20 2000 0.68 1.44 0.33 151 RCVD_IN_IADB_SPF 1958 2.79 1.41 3.42 152 T_XMHurry_00 1892 0.78 1.36 0.51 153 HTML_EXTRA_CLOSE 1853 0.67 1.33 0.37 154 XMPhish30 1850 1.02 1.33 0.88 155 KHOP_HELO_FCRDNS 1847 1.62 1.33 1.75 156 XMSexyCombo_01 1826 0.66 1.31 0.36 157 BOTNET_NORDNS 1817 0.41 1.30 0.01 158 RCVD_IN_IADB_DK 1816 2.44 1.30 2.96 159 XM_UB80 1813 0.42 1.30 0.02 160 RCVD_IN_IADB_SENDERID 1807 2.49 1.30 3.03 161 RCVD_IN_PBL 1784 0.98 1.28 0.85 162 XM_B_SEO 1738 0.61 1.25 0.32 163 XMBrknScrpt_02 1734 0.86 1.24 0.69 164 DKIM_ADSP_NXDOMAIN 1706 0.57 1.22 0.28 165 XM_B_Phish66 1686 0.61 1.21 0.34 166 XM_B_DNDMA 1679 0.71 1.21 0.48 167 RDNS_DYNAMIC 1676 0.50 1.20 0.18 168 TR_XM_PHPForged 1672 0.60 1.20 0.33 169 TR_XM_PHPDW 1657 0.60 1.19 0.33 170 PDS_RDNS_DYNAMIC_FP 1631 0.39 1.17 0.04 171 TR_XM_FormFill2 1628 0.59 1.17 0.33 172 TR_XM_MaxSPIKE 1616 0.41 1.16 0.06 173 XM_H_PHPOS 1602 0.58 1.15 0.32 174 XM_ProductURIs 1594 0.75 1.14 0.57 175 DIET_1 1566 0.58 1.12 0.33 176 TR_Mismatch_TLD_02 1564 0.39 1.12 0.06 177 XM_HighProb1 1546 0.35 1.11 0.00 178 XMBdyGiftCard01 1542 0.56 1.11 0.31 179 MPART_ALT_DIFF_COUNT 1539 0.79 1.10 0.65 180 TR_XM_SEO4 1532 0.48 1.10 0.19 181 LongTLD 1528 0.81 1.10 0.68 182 TR_XM_Base64_M1 1514 0.82 1.09 0.70 183 TR_LOTS_OF_MONEY3 1499 0.48 1.08 0.22 184 RELAYCOUNTRY_FR 1490 0.52 1.07 0.27 185 XM_B_COPY_HTML 1462 0.81 1.05 0.70 186 XMPhish14 1447 0.61 1.04 0.41 187 TR_Symld_Words 1427 1.35 1.02 1.50 188 XMHTML_After_End 1420 0.65 1.02 0.48 189 T_TooManySym_02 1407 2.46 1.01 3.12 190 XM_UB99 1405 0.32 1.01 0.00 191 DKIM_ADSP_CUSTOM_MED 1401 0.92 1.01 0.88 192 TR_MetaPhish_Combo_01 1396 0.81 1.00 0.72 193 RCVD_IN_XBL 1374 0.32 0.99 0.02 194 HTTPS_HTTP_MISMATCH 1372 0.71 0.98 0.59 195 TVD_RCVD_IP 1358 0.88 0.97 0.84 196 ANY_BOUNCE_MESSAGE 1349 3.02 0.97 3.96 197 BOUNCE_MESSAGE 1349 3.02 0.97 3.96 198 RCVD_IN_IADB_VOUCHED 1336 2.05 0.96 2.54 199 TM2_M_A_HREF_HREF 1313 0.47 0.94 0.25 200 XM_DIRTYINTL 1308 0.37 0.94 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 304691 99.09 98.33 99.43 2 HTML_MESSAGE 267499 89.88 95.57 87.30 3 RELAYCOUNTRY_US 248294 80.20 78.39 81.03 4 DKIM_SIGNED 235028 80.12 87.65 76.70 5 XM_DK_Pass 231921 77.80 82.45 75.68 6 DKIM_VALID 228750 76.89 81.81 74.65 7 XM_B_Unicode 216258 73.79 80.87 70.57 8 BAYES_50 185942 54.38 40.52 60.68 9 DKIM_VALID_AU 185791 61.54 63.53 60.63 10 DCC_CHECK_NEGATIVE 181492 48.32 24.34 59.23 11 XMListUnsubscribeExists 148907 53.78 65.18 48.59 12 XM_B_SpammyWords 140530 52.51 67.14 45.86 13 DCC_CHECK 124733 51.16 74.15 40.71 14 XM_B_Unicode3 123233 42.67 48.08 40.22 15 DKIM_VALID_EF 95491 31.00 30.65 31.16 16 T_TM2_M_HEADER_IN_MSG 90822 27.34 22.29 29.64 17 LOC_TINY_FONT_1 87526 34.17 46.51 28.56 18 HTML_FONT_LOW_CONTRAST 85432 30.34 35.74 27.88 19 FVGT_m_MULTI_ODD 77328 27.22 31.59 25.24 20 XMSubLong 70406 23.12 23.45 22.98 21 T_KAM_HTML_FONT_INVALID 68025 24.32 28.98 22.20 22 MIME_HTML_ONLY 60494 24.11 33.72 19.74 23 RCVD_IN_MSPIKE_WL 58585 16.15 9.62 19.12 24 XM_B_SpammyWords2 57982 25.11 38.73 18.92 25 RCVD_IN_MSPIKE_H2 52474 17.74 19.09 17.12 26 ALL_TRUSTED 48128 11.37 1.82 15.71 27 TR_XM_DK_Unsub 43579 16.76 22.36 14.22 28 XM_Multi_Part_URI 43151 15.73 19.36 14.08 29 USER_IN_DEF_DKIM_WL 41723 9.99 2.01 13.62 30 UNPARSEABLE_RELAY 38108 13.95 17.27 12.44 31 BAYES_00 32090 7.40 0.66 10.47 32 XM_B_PhoneNumber 30824 8.90 6.36 10.06 33 XM_Evil_Numbers_Gen 29847 9.78 9.88 9.74 34 FSL_BULK_SIG 28393 9.58 10.28 9.27 35 XM_B_Unsub 28174 13.46 22.83 9.19 36 LotsOfNums_01 27127 8.30 7.07 8.85 37 RCVD_IN_MSPIKE_H3 26341 7.33 4.55 8.60 38 TooManyTo_001 25914 7.04 3.92 8.46 39 TR_XM_BayesUnsub 22615 11.99 22.13 7.38 40 BAYES_60 22388 7.84 9.00 7.31 41 TR_XM_DK_Bayes 22055 5.11 0.50 7.20 42 TR_XM_DK_Bayes1 21571 4.99 0.49 7.04 43 LOTS_OF_MONEY 19623 7.98 11.45 6.40 44 RCVD_IN_MSPIKE_H5 19378 5.07 2.30 6.32 45 XM_DKIMWhitelistDomains 19010 4.27 0.01 6.20 46 TR_MAX_INTL_RELAY 18884 8.92 14.99 6.16 47 XM_H_GMP 18665 5.65 4.68 6.09 48 T_TooManySym_01 18564 5.09 2.96 6.06 49 XM_H_Long_From01 18533 5.97 5.79 6.05 50 TR_XM_DK_Bayes2 18496 4.27 0.40 6.04 51 XMStrtUSub 17782 6.35 7.54 5.80 52 MIME_QP_LONG_LINE 17518 4.76 2.67 5.72 53 BAYES_40 17088 4.37 1.73 5.58 54 XM_PDF 15581 3.79 0.93 5.08 55 XM_B_SpammyWords3 15111 7.52 13.22 4.93 56 XM_B_Phish_Phrases 14833 5.91 8.25 4.84 57 XM_DK_Undo_02 14779 16.01 40.62 4.82 58 MPART_ALT_DIFF 13807 4.92 5.83 4.51 59 TR_XM_SpammyWords4 13694 6.34 10.45 4.47 60 RCVD_IN_VALIDITY_SAFE 13666 3.70 2.03 4.46 61 HTML_IMAGE_RATIO_02 13455 5.03 6.44 4.39 62 XM_UncommonTLD01 13199 4.94 6.32 4.31 63 HTML_IMAGE_RATIO_04 12945 4.44 4.92 4.22 64 RCVD_IN_MSPIKE_H4 12866 3.75 2.77 4.20 65 BAYES_20 12517 3.26 1.46 4.08 66 T_REMOTE_IMAGE 12489 3.25 1.44 4.08 67 ANY_BOUNCE_MESSAGE 12127 3.02 0.97 3.96 68 BOUNCE_MESSAGE 12122 3.02 0.97 3.96 69 RELAYCOUNTRY_META 12039 9.12 20.52 3.93 70 RCVD_IN_IADB_LISTED 11951 3.19 1.62 3.90 71 BAYES_80 11897 5.60 9.37 3.88 72 RCVD_IN_VALIDITY_CERTIFIED 11377 3.02 1.51 3.71 73 HTML_IMAGE_RATIO_06 10648 3.37 3.13 3.47 74 RCVD_IN_IADB_SPF 10469 2.79 1.41 3.42 75 BAYES_99 10424 11.69 29.93 3.40 76 XMSubMetaSx_00 10190 4.39 6.74 3.33 77 MAILING_LIST_MULTI 10165 2.88 1.92 3.32 78 XMNumbers 9821 3.16 3.08 3.20 79 BOTNET_IPINHOSTNAME 9626 6.01 12.33 3.14 80 T_TooManySym_02 9551 2.46 1.01 3.12 81 XM_Body_Dirty_Words 9457 4.35 7.13 3.09 82 RCVD_IN_IADB_SENDERID 9295 2.49 1.30 3.03 83 RCVD_IN_IADB_DK 9056 2.44 1.30 2.96 84 SCC_BODY_URI_ONLY 8463 3.10 3.84 2.76 85 XM_SendGrid 8357 2.71 2.67 2.73 86 XM_B_SpammyTLD 8228 3.02 3.75 2.69 87 HTML_MIME_NO_HTML_TAG 8186 2.80 3.07 2.67 88 RCVD_IN_IADB_VOUCHED 7795 2.05 0.96 2.54 89 BAYES_999 7780 8.97 23.11 2.54 90 TooManyTo_002 7425 1.92 0.82 2.42 91 MIME_HTML_ONLY_MULTI 7379 2.77 3.58 2.41 92 MIME_HTML_MOSTLY 7350 2.62 3.11 2.40 93 HTML_IMAGE_RATIO_08 7295 2.72 3.46 2.38 94 INVALID_MSGID 7232 1.70 0.25 2.36 95 BAYES_05 7107 1.82 0.71 2.32 96 BAYES_95 6972 3.17 5.14 2.28 97 TO_MALFORMED 6404 1.46 0.08 2.09 98 TM2_M_VERY_LONG_WORD 6307 2.52 3.54 2.06 99 DKIM_INVALID 6278 3.23 5.84 2.05 100 TR_XM_SpammyRelay 6275 5.43 12.88 2.05 101 T_XMDrugObfuBody_14 6172 2.68 4.14 2.01 102 TR_XM_DKIM_Undo 6165 10.60 29.48 2.01 103 TR_XM_PhishingBody 5935 2.78 4.65 1.94 104 XM_DK_Undo_01 5935 1.78 1.44 1.94 105 XM_CamelCaseFrm001 5852 2.31 3.19 1.91 106 XM_B_URI_Unicode 5824 2.09 2.51 1.90 107 TR_XM_DK_SendGrid 5619 1.72 1.48 1.83 108 TM2_M_URI_OPT_OUT 5597 2.19 3.00 1.83 109 RCVD_IN_IADB_OPTIN 5529 1.42 0.58 1.80 110 KHOP_HELO_FCRDNS 5361 1.62 1.33 1.75 111 XMDiploma_00 5265 1.97 2.52 1.72 112 TR_XM_UnparsRelay 5215 3.98 9.00 1.70 113 TooManyTo_003 4935 1.29 0.60 1.61 114 XM_SPF_SoftFail 4655 1.94 2.86 1.52 115 UNTRUSTED_Relay 4645 3.95 9.31 1.52 116 T_XMDrugObfuBody_08 4619 2.03 3.19 1.51 117 XM_B_Investor 4604 2.65 5.16 1.50 118 TR_Symld_Words 4593 1.35 1.02 1.50 119 XMStockSpam_06 4509 1.66 2.07 1.47 120 TR_XM_SpammyWords5 4429 2.07 3.43 1.45 121 XMGappySubj_01 4422 1.23 0.75 1.44 122 FROM_EXCESS_BASE64 4414 1.64 2.09 1.44 123 SUBJ_ALL_CAPS 4307 1.65 2.18 1.41 124 URI_HEX 4276 1.41 1.44 1.40 125 XM_GoogleGroups 4167 1.17 0.75 1.36 126 IN_HORDE_ADDRESS_BOOK 4151 0.96 0.08 1.35 127 HELO_NODOT 4128 0.96 0.12 1.35 128 HELO_NO_DOMAIN 4125 0.96 0.10 1.35 129 XM_B_Unsub2 3960 1.83 3.01 1.29 130 URI_NOVOWEL 3911 1.39 1.65 1.28 131 TR_DCC_Bayes_99 3907 7.27 20.45 1.28 132 T_TooManySym_03 3787 0.97 0.38 1.24 133 TooManyTo_004 3677 0.99 0.52 1.20 134 RCVD_IN_MSPIKE_BL 3612 3.03 7.12 1.18 135 TR_XM_MSPIKECOMBO 3609 3.03 7.11 1.18 136 BOTNET 3415 4.94 13.35 1.11 137 XMCapTrack 3412 0.92 0.48 1.11 138 XM_OfRef6 3355 1.92 3.74 1.09 139 HTML_IMAGE_ONLY_32 3346 0.79 0.13 1.09 140 TVD_SPACE_RATIO 3183 0.76 0.16 1.04 141 XM_H_PHPMailer 3180 0.88 0.52 1.04 142 XM_ShortIntro_01 3015 0.81 0.41 0.98 143 XM_UB50 2999 2.02 4.32 0.98 144 TooManyTo_005 2956 0.81 0.46 0.96 145 XMGenDplmaNmb 2876 1.10 1.44 0.94 146 T_XMDrugObfuBody_00 2793 1.17 1.74 0.91 147 RCVD_IN_MSPIKE_L3 2784 1.44 2.62 0.91 148 T_FILL_THIS_FORM_SHORT 2776 1.21 1.88 0.91 149 XMSexyCombo_05 2761 1.96 4.29 0.90 150 T_Symld_Words_02 2706 0.83 0.70 0.88 151 DKIM_ADSP_CUSTOM_MED 2705 0.92 1.01 0.88 152 XMPhish30 2693 1.02 1.33 0.88 153 RCVD_IN_PBL 2591 0.98 1.28 0.85 154 TVD_RCVD_IP 2568 0.88 0.97 0.84 155 T_OBFU_PDF_ATTACH 2530 0.63 0.20 0.83 156 RELAYCOUNTRY_CA 2513 2.69 6.81 0.82 157 FROM_GOV_DKIM_AU 2503 0.65 0.28 0.82 158 MAY_BE_FORGED 2383 0.57 0.10 0.78 159 SpammyFromTLD_01 2377 1.09 1.79 0.78 160 XM_H_Long_From02 2358 1.13 1.93 0.77 161 XMGappySubj_02 2287 0.53 0.04 0.75 162 XMSlimDrugH 2216 0.77 0.88 0.72 163 RELAYCOUNTRY_AU 2215 1.38 2.83 0.72 164 TR_MetaPhish_Combo_01 2199 0.81 1.00 0.72 165 RELAYCOUNTRY_GB 2164 0.73 0.80 0.71 166 TR_XM_Base64_M1 2151 0.82 1.09 0.70 167 XM_B_COPY_HTML 2149 0.81 1.05 0.70 168 XMBrknScrpt_02 2116 0.86 1.24 0.69 169 RCVD_IN_BL_SPAMCOP_NET 2088 3.92 11.04 0.68 170 LongTLD 2076 0.81 1.10 0.68 171 XMNoVowels 2051 0.63 0.55 0.67 172 MPART_ALT_DIFF_COUNT 1989 0.79 1.10 0.65 173 XM_B_SpammyWords4 1948 1.07 2.02 0.64 174 LOW_PRICE 1932 0.54 0.36 0.63 175 TO_NO_BRKTS_HTML_ONLY 1868 0.63 0.68 0.61 176 MSGID_FROM_MTA_HEADER 1849 0.46 0.16 0.60 177 FORGED_GMAIL_RCVD 1822 0.65 0.78 0.59 178 XMLngstWrd_00 1818 0.55 0.45 0.59 179 HTTPS_HTTP_MISMATCH 1811 0.71 0.98 0.59 180 HTML_TAG_BALANCE_BODY 1806 0.64 0.75 0.59 181 XM_ProductURIs 1732 0.75 1.14 0.57 182 XMBody_17 1730 1.04 2.08 0.56 183 XMSubMetaI_00 1729 0.68 0.94 0.56 184 NML_ADSP_CUSTOM_MED 1688 0.61 0.74 0.55 185 TR_XM_SpammyWords3 1646 1.28 2.91 0.54 186 XMBSHREFv2 1601 0.45 0.29 0.52 187 T_XMHurry_00 1565 0.78 1.36 0.51 188 URI_TRY_3LD 1559 0.81 1.48 0.51 189 SpammyFromTLD_02 1547 1.08 2.33 0.50 190 T_TVD_MIME_NO_HEADERS 1512 0.42 0.27 0.49 191 XM_B_DNDMA 1469 0.71 1.21 0.48 192 XMHTML_After_End 1457 0.65 1.02 0.48 193 TR_XM_SpammyWords2 1455 3.63 10.58 0.47 194 XMMoneyMeta_00 1451 0.61 0.90 0.47 195 XMSolicitRefs_0 1400 0.49 0.58 0.46 196 XMLngstWrd_01 1395 0.42 0.34 0.46 197 TR_Mismatch_TLD_01 1391 0.51 0.64 0.45 198 XMBody_95 1370 0.36 0.16 0.45 199 T_STY_INVIS_DIRECT 1312 0.56 0.86 0.43 200 MIME_CHARSET_FARAWAY 1310 0.42 0.41 0.43 ----------------------------------------------------------------------