Email: 429514 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.34 sec Spam: 126875 Autolearn: 0 AvgScore: 15.02 AvgScanTime: 1.52 sec Ham: 302639 Autolearn: 0 AvgScore: 1.07 AvgScanTime: 1.26 sec Time Spent Running SA: 160.01 hours Time Spent Processing Spam: 53.73 hours Time Spent Processing Ham: 106.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120106 89.02 94.66 86.66 2 DKIM_SIGNED 113780 77.23 89.68 72.01 3 XM_DK_Pass 108260 75.21 85.33 70.97 4 DKIM_VALID 107282 74.15 84.56 69.79 5 XM_B_Unicode 105815 73.60 83.40 69.49 6 RELAYCOUNTRY_US 100819 80.82 79.46 81.39 7 DCC_CHECK 95844 49.73 75.54 38.91 8 XM_B_SpammyWords 88082 50.72 69.42 42.88 9 XMListUnsubscribeExists 86279 51.26 68.00 44.24 10 DKIM_VALID_AU 84589 59.89 66.67 57.05 11 XM_B_Unicode3 62313 43.82 49.11 41.60 12 LOC_TINY_FONT_1 61419 33.30 48.41 26.97 13 XM_DK_Undo_02 51330 15.10 40.46 4.47 14 XM_B_SpammyWords2 50973 23.81 40.18 16.94 15 BAYES_50 49551 54.33 39.05 60.74 16 HTML_FONT_LOW_CONTRAST 43855 31.42 34.57 30.10 17 FVGT_m_MULTI_ODD 42830 27.82 33.76 25.34 18 BAYES_99 40821 11.86 32.17 3.34 19 DKIM_VALID_EF 40444 30.80 31.88 30.34 20 T_KAM_HTML_FONT_INVALID 38740 23.04 30.53 19.90 21 TR_XM_DKIM_Undo 37828 10.18 29.82 1.95 22 MIME_HTML_ONLY 36677 22.13 28.91 19.28 23 BAYES_999 31558 9.15 24.87 2.56 24 XMSubLong 30502 23.55 24.04 23.35 25 TR_DCC_Bayes_99 29513 7.80 23.26 1.32 26 DCC_CHECK_NEGATIVE 28874 49.73 22.76 61.04 27 T_TM2_M_HEADER_IN_MSG 28794 31.20 22.69 34.76 28 TR_XM_DK_Unsub 28529 15.77 22.49 12.96 29 RCVD_IN_MSPIKE_H2 25753 17.25 20.30 15.97 30 XM_Multi_Part_URI 24539 14.44 19.34 12.38 31 RELAYCOUNTRY_META 23982 8.17 18.90 3.68 32 XM_B_Unsub 23484 11.22 18.51 8.16 33 TR_XM_BayesUnsub 22623 9.73 17.83 6.33 34 UNPARSEABLE_RELAY 21590 13.35 17.02 11.81 35 XM_B_SpammyWords3 20049 7.84 15.80 4.50 36 TR_MAX_INTL_RELAY 19634 8.44 15.48 5.50 37 TR_XM_SpammyRelay 18126 5.48 14.29 1.79 38 LOTS_OF_MONEY 17886 8.64 14.10 6.35 39 BOTNET_IPINHOSTNAME 15887 5.83 12.52 3.02 40 TR_XM_SpammyWords4 15853 6.64 12.49 4.18 41 TR_XM_SpammyWords2 13546 3.44 10.68 0.40 42 BOTNET 12905 3.90 10.17 1.27 43 XM_Evil_Numbers_Gen 12651 9.96 9.97 9.95 44 RCVD_IN_MSPIKE_WL 12516 15.62 9.86 18.03 45 FSL_BULK_SIG 12300 9.50 9.69 9.41 46 BAYES_80 11982 5.17 9.44 3.38 47 RCVD_IN_BL_SPAMCOP_NET 11682 2.97 9.21 0.35 48 XM_B_Phish_Phrases 10788 5.77 8.50 4.62 49 TR_XM_UnparsRelay 10735 3.60 8.46 1.57 50 BAYES_60 9929 6.85 7.83 6.44 51 LotsOfNums_01 9474 9.52 7.47 10.37 52 UNTRUSTED_Relay 9392 3.60 7.40 2.00 53 RELAYCOUNTRY_CA 9350 2.70 7.37 0.75 54 XMSubMetaSx_00 8812 4.29 6.95 3.18 55 XM_Body_Dirty_Words 8793 3.57 6.93 2.17 56 HTML_IMAGE_RATIO_02 8549 4.86 6.74 4.07 57 XM_UncommonTLD01 8524 4.94 6.72 4.19 58 MPART_ALT_DIFF 7665 5.03 6.04 4.61 59 RCVD_IN_MSPIKE_BL 7543 2.34 5.95 0.83 60 TR_XM_MSPIKECOMBO 7537 2.34 5.94 0.83 61 XM_B_PhoneNumber 7402 8.65 5.83 9.82 62 XM_B_Investor 7227 2.76 5.70 1.53 63 BAYES_95 7193 3.16 5.67 2.11 64 XM_H_GMP 6842 5.89 5.39 6.10 65 XM_H_Long_From01 6625 5.31 5.22 5.35 66 DKIM_INVALID 6498 3.07 5.12 2.21 67 TooManyTo_001 6220 7.50 4.90 8.59 68 RCVD_IN_MSPIKE_H3 5982 7.11 4.71 8.12 69 XMStrtUSub 5914 4.95 4.66 5.07 70 TR_XM_PhishingBody 5833 2.42 4.60 1.51 71 TR_XM_SpammyWords3 5707 1.61 4.50 0.40 72 XM_B_SpammyTLD 5701 3.09 4.49 2.50 73 XMSexyCombo_05 5630 1.99 4.44 0.96 74 HTML_IMAGE_RATIO_04 5604 4.16 4.42 4.05 75 T_XMDrugObfuBody_14 5315 2.53 4.19 1.83 76 TR_XM_SPAMCOP 5025 1.24 3.96 0.10 77 MIME_QP_LONG_LINE 4836 4.43 3.81 4.69 78 XMNumbers 4779 3.93 3.77 4.00 79 XM_OfRef6 4764 1.85 3.75 1.05 80 TR_XM_SpammyWords5 4700 2.05 3.70 1.35 81 MIME_HTML_MOSTLY 4625 2.76 3.65 2.39 82 TR_XM_NoHeaderRelay 4553 1.17 3.59 0.16 83 T_XMDrugObfuBody_08 4333 2.36 3.42 1.91 84 XM_CamelCaseFrm001 4328 2.28 3.41 1.81 85 XM_SPF_SoftFail 4160 2.13 3.28 1.64 86 TM2_M_VERY_LONG_WORD 4159 4.85 3.28 5.52 87 USER_IN_DEF_DKIM_WL 4096 9.62 3.23 12.30 88 XM_B_Unsub2 4026 1.79 3.17 1.21 89 MIME_HTML_ONLY_MULTI 3817 2.77 3.01 2.67 90 HTML_IMAGE_RATIO_08 3812 2.37 3.00 2.10 91 XM_URI_RBL 3811 1.07 3.00 0.26 92 RCVD_IN_MSPIKE_L3 3791 1.37 2.99 0.69 93 T_FILL_THIS_FORM_SHORT 3735 1.51 2.94 0.90 94 XMBrknScrpt_02 3715 1.67 2.93 1.14 95 HTML_IMAGE_RATIO_06 3699 2.78 2.92 2.72 96 XM_B_URI_Unicode 3648 2.26 2.88 2.00 97 RELAYCOUNTRY_AU 3624 1.28 2.86 0.61 98 XM_UB50 3570 1.80 2.81 1.38 99 XMDiploma_00 3541 2.01 2.79 1.68 100 SpammyFromTLD_02 3514 1.01 2.77 0.28 101 RCVD_IN_MSPIKE_H4 3513 3.59 2.77 3.94 102 XMBody_17 3471 1.08 2.74 0.38 103 T_TooManySym_01 3346 5.40 2.64 6.55 104 RCVD_IN_VALIDITY_SAFE 3253 3.03 2.56 3.22 105 TR_XM_MSPIKECOMBO2 3138 0.77 2.47 0.05 106 TM2_M_URI_OPT_OUT 3130 1.88 2.47 1.64 107 RCVD_IN_MSPIKE_H5 3021 4.92 2.38 5.98 108 FROM_EXCESS_BASE64 2943 1.64 2.32 1.36 109 RCVD_IN_MSPIKE_L4 2904 0.76 2.29 0.13 110 TR_XM_INV_DKIM 2895 0.68 2.28 0.01 111 XM_B_SpammyWords4 2884 1.24 2.27 0.81 112 MAILING_LIST_MULTI 2707 2.89 2.13 3.21 113 RCVD_IN_VALIDITY_CERTIFIED 2700 2.50 2.13 2.66 114 T_REMOTE_IMAGE 2448 3.17 1.93 3.69 115 XMStockSpam_06 2383 1.48 1.88 1.31 116 XMBdyGiftCard01 2328 0.76 1.83 0.31 117 DKIM_ADSP_NXDOMAIN 2320 0.79 1.83 0.35 118 XM_UB99 2301 0.54 1.81 0.00 119 BAYES_40 2227 5.28 1.76 6.75 120 RCVD_IN_VALIDITY_RPBL 2189 0.56 1.73 0.07 121 T_XMHurry_00 2182 0.91 1.72 0.57 122 SpammyFromTLD_01 2162 1.06 1.70 0.80 123 ALL_TRUSTED 2157 11.13 1.70 15.08 124 HTML_MIME_NO_HTML_TAG 2143 2.51 1.69 2.85 125 RCVD_IN_ZEN_LASTEXTERNAL 2134 0.50 1.68 0.00 126 SHORTCIRCUIT 2134 0.50 1.68 0.00 127 SUBJ_ALL_CAPS 2133 1.49 1.68 1.41 128 ANY_BOUNCE_MESSAGE 2113 6.15 1.67 8.03 129 BOUNCE_MESSAGE 2112 6.15 1.66 8.03 130 T_XMDrugObfuBody_00 2054 0.94 1.62 0.65 131 XMGenDplmaNmb 2027 1.15 1.60 0.97 132 XM_B_Phish66 2015 0.67 1.59 0.29 133 XMPhish30 1987 0.86 1.57 0.57 134 XM_DK_Undo_01 1963 1.84 1.55 1.96 135 TR_XM_INTL_Spamhaus 1942 0.60 1.53 0.21 136 URI_HEX 1915 1.18 1.51 1.04 137 URI_NOVOWEL 1911 1.32 1.51 1.24 138 TR_LOTS_OF_MONEY3 1904 0.83 1.50 0.55 139 XM_B_SEO 1881 0.58 1.48 0.20 140 XM_B_COPY_HTML 1873 0.86 1.48 0.60 141 URI_TRY_3LD 1853 0.90 1.46 0.66 142 LongTLD 1836 0.79 1.45 0.51 143 RCVD_IN_PSBL 1823 0.71 1.44 0.40 144 XM_H_Long_From02 1778 1.01 1.40 0.84 145 TR_XM_PHPForged 1761 0.71 1.39 0.42 146 T_MONEY_PERCENT 1758 0.60 1.39 0.28 147 TR_LOTS_OF_MONEY2 1758 0.60 1.39 0.28 148 XM_SendGrid 1757 1.53 1.38 1.58 149 TR_XM_FormFill2 1731 0.70 1.36 0.42 150 RDNS_DYNAMIC 1729 0.52 1.36 0.16 151 TR_XM_PHPDW 1723 0.69 1.36 0.41 152 XM_H_PHPOS 1703 0.68 1.34 0.41 153 KHOP_HELO_FCRDNS 1696 3.15 1.34 3.91 154 TR_XM_GMP_BULK_SIG 1684 0.50 1.33 0.15 155 PDS_RDNS_DYNAMIC_FP 1683 0.42 1.33 0.03 156 TR_Symld_Words 1682 1.42 1.33 1.46 157 RELAYCOUNTRY_FR 1660 0.56 1.31 0.24 158 XM_UB999 1649 0.38 1.30 0.00 159 TR_XM_SEO4 1645 0.47 1.30 0.12 160 RCVD_IN_IADB_LISTED 1623 2.50 1.28 3.02 161 TR_XM_MaxSPIKE 1569 0.40 1.24 0.05 162 TR_XM_FormFill 1546 0.37 1.22 0.01 163 RCVD_IN_PBL 1515 0.91 1.19 0.79 164 BAYES_20 1512 3.49 1.19 4.46 165 TM2_M_A_HREF_HREF 1505 0.53 1.19 0.25 166 XMSubMetaI_00 1496 1.00 1.18 0.93 167 LONGLN_LOW_CONTRAST 1490 0.50 1.17 0.21 168 DKIM_ADSP_CUSTOM_MED 1478 0.99 1.16 0.92 169 MPART_ALT_DIFF_COUNT 1418 0.67 1.12 0.48 170 RCVD_IN_XBL 1410 0.34 1.11 0.02 171 TR_Mismatch_TLD_02 1400 0.39 1.10 0.09 172 XMBounce_01 1397 0.35 1.10 0.03 173 SH_BODYURI_REVERSE_SBL 1397 0.33 1.10 0.01 174 RCVD_IN_IADB_SPF 1395 2.21 1.10 2.67 175 TR_XM_InvalidRelay 1386 0.33 1.09 0.01 176 XM_HighProb1 1381 0.32 1.09 0.00 177 URIBL_SBL_A 1361 0.32 1.07 0.00 178 URIBL_SBL 1361 0.32 1.07 0.00 179 HTTPS_HTTP_MISMATCH 1350 0.79 1.06 0.68 180 TVD_RCVD_IP 1338 0.92 1.05 0.87 181 RELAYCOUNTRY_TH 1325 0.31 1.04 0.00 182 XM_DIRTYINTL 1316 0.35 1.04 0.06 183 XM_ProductURIs 1310 0.71 1.03 0.58 184 URIBL_BLACK 1292 0.31 1.02 0.02 185 RCVD_IN_IADB_DK 1281 1.96 1.01 2.35 186 XM_PDF 1263 3.64 1.00 4.76 187 STY_INVIS_DIRECT 1253 0.55 0.99 0.37 188 RCVD_IN_IADB_SENDERID 1248 2.00 0.98 2.43 189 TR_XM_RelayPhish 1235 0.35 0.97 0.09 190 NML_ADSP_CUSTOM_MED 1234 0.70 0.97 0.59 191 TR_XM_Base64_M1 1218 0.67 0.96 0.55 192 XMPhish14 1212 0.55 0.96 0.37 193 MISSING_HEADERS 1211 0.56 0.95 0.39 194 DIET_1 1192 0.56 0.94 0.40 195 HELO_DYNAMIC_SPLIT_IP 1183 0.28 0.93 0.00 196 BOTNET_NORDNS 1182 0.28 0.93 0.01 197 XMBody_78 1181 0.49 0.93 0.31 198 RCVD_IN_SBL_CSS 1178 0.31 0.93 0.05 199 XM_B_DNDMA 1173 0.57 0.92 0.42 200 THIS_AD 1164 0.46 0.92 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 262266 89.02 94.66 86.66 2 RELAYCOUNTRY_US 246325 80.82 79.46 81.39 3 DKIM_SIGNED 217926 77.23 89.68 72.01 4 XM_DK_Pass 214780 75.21 85.33 70.97 5 DKIM_VALID 211223 74.15 84.56 69.79 6 XM_B_Unicode 210295 73.60 83.40 69.49 7 DCC_CHECK_NEGATIVE 184734 49.73 22.76 61.04 8 BAYES_50 183810 54.33 39.05 60.74 9 DKIM_VALID_AU 172654 59.89 66.67 57.05 10 XMListUnsubscribeExists 133889 51.26 68.00 44.24 11 XM_B_SpammyWords 129776 50.72 69.42 42.88 12 XM_B_Unicode3 125911 43.82 49.11 41.60 13 DCC_CHECK 117761 49.73 75.54 38.91 14 T_TM2_M_HEADER_IN_MSG 105212 31.20 22.69 34.76 15 DKIM_VALID_EF 91832 30.80 31.88 30.34 16 HTML_FONT_LOW_CONTRAST 91099 31.42 34.57 30.10 17 LOC_TINY_FONT_1 81621 33.30 48.41 26.97 18 FVGT_m_MULTI_ODD 76676 27.82 33.76 25.34 19 XMSubLong 70663 23.55 24.04 23.35 20 T_KAM_HTML_FONT_INVALID 60216 23.04 30.53 19.90 21 MIME_HTML_ONLY 58354 22.13 28.91 19.28 22 RCVD_IN_MSPIKE_WL 54571 15.62 9.86 18.03 23 XM_B_SpammyWords2 51279 23.81 40.18 16.94 24 RCVD_IN_MSPIKE_H2 48331 17.25 20.30 15.97 25 ALL_TRUSTED 45646 11.13 1.70 15.08 26 TR_XM_DK_Unsub 39207 15.77 22.49 12.96 27 XM_Multi_Part_URI 37467 14.44 19.34 12.38 28 USER_IN_DEF_DKIM_WL 37223 9.62 3.23 12.30 29 UNPARSEABLE_RELAY 35746 13.35 17.02 11.81 30 LotsOfNums_01 31395 9.52 7.47 10.37 31 BAYES_00 31067 7.41 0.59 10.27 32 XM_Evil_Numbers_Gen 30125 9.96 9.97 9.95 33 XM_B_PhoneNumber 29733 8.65 5.83 9.82 34 FSL_BULK_SIG 28484 9.50 9.69 9.41 35 TooManyTo_001 25992 7.50 4.90 8.59 36 XM_B_Unsub 24695 11.22 18.51 8.16 37 RCVD_IN_MSPIKE_H3 24560 7.11 4.71 8.12 38 ANY_BOUNCE_MESSAGE 24310 6.15 1.67 8.03 39 BOUNCE_MESSAGE 24307 6.15 1.66 8.03 40 TR_XM_DK_Bayes 20515 4.91 0.45 6.78 41 BAYES_40 20430 5.28 1.76 6.75 42 TR_XM_DK_Bayes1 20178 4.83 0.45 6.67 43 T_TooManySym_01 19834 5.40 2.64 6.55 44 BAYES_60 19499 6.85 7.83 6.44 45 LOTS_OF_MONEY 19210 8.64 14.10 6.35 46 TR_XM_BayesUnsub 19155 9.73 17.83 6.33 47 XM_DKIMWhitelistDomains 19025 4.45 0.06 6.29 48 XM_H_GMP 18451 5.89 5.39 6.10 49 RCVD_IN_MSPIKE_H5 18099 4.92 2.38 5.98 50 TR_XM_DK_Bayes2 16856 4.03 0.37 5.57 51 TM2_M_VERY_LONG_WORD 16693 4.85 3.28 5.52 52 TR_MAX_INTL_RELAY 16638 8.44 15.48 5.50 53 XM_H_Long_From01 16187 5.31 5.22 5.35 54 HTML_IMAGE_ONLY_32 15412 3.64 0.18 5.09 55 XMStrtUSub 15346 4.95 4.66 5.07 56 XM_PDF 14392 3.64 1.00 4.76 57 MIME_QP_LONG_LINE 14181 4.43 3.81 4.69 58 XM_B_Phish_Phrases 13988 5.77 8.50 4.62 59 MPART_ALT_DIFF 13937 5.03 6.04 4.61 60 XM_B_SpammyWords3 13631 7.84 15.80 4.50 61 XM_DK_Undo_02 13529 15.10 40.46 4.47 62 BAYES_20 13497 3.49 1.19 4.46 63 XM_UncommonTLD01 12684 4.94 6.72 4.19 64 TR_XM_SpammyWords4 12664 6.64 12.49 4.18 65 HTML_IMAGE_RATIO_02 12313 4.86 6.74 4.07 66 HTML_IMAGE_RATIO_04 12244 4.16 4.42 4.05 67 XMNumbers 12100 3.93 3.77 4.00 68 RCVD_IN_MSPIKE_H4 11912 3.59 2.77 3.94 69 KHOP_HELO_FCRDNS 11829 3.15 1.34 3.91 70 T_REMOTE_IMAGE 11180 3.17 1.93 3.69 71 RELAYCOUNTRY_META 11130 8.17 18.90 3.68 72 BAYES_80 10236 5.17 9.44 3.38 73 BAYES_99 10112 11.86 32.17 3.34 74 T_TooManySym_02 9774 2.50 0.77 3.23 75 RCVD_IN_VALIDITY_SAFE 9759 3.03 2.56 3.22 76 MAILING_LIST_MULTI 9727 2.89 2.13 3.21 77 XMSubMetaSx_00 9631 4.29 6.95 3.18 78 BOTNET_IPINHOSTNAME 9150 5.83 12.52 3.02 79 RCVD_IN_IADB_LISTED 9129 2.50 1.28 3.02 80 HTML_MIME_NO_HTML_TAG 8639 2.51 1.69 2.85 81 TooManyTo_002 8361 2.17 0.75 2.76 82 HTML_IMAGE_RATIO_06 8226 2.78 2.92 2.72 83 MIME_CHARSET_FARAWAY 8090 1.98 0.32 2.67 84 RCVD_IN_IADB_SPF 8088 2.21 1.10 2.67 85 MIME_HTML_ONLY_MULTI 8076 2.77 3.01 2.67 86 RCVD_IN_VALIDITY_CERTIFIED 8042 2.50 2.13 2.66 87 TO_MALFORMED 7948 1.85 0.01 2.63 88 CHARSET_FARAWAY_HEADER 7790 1.86 0.16 2.57 89 BAYES_999 7738 9.15 24.87 2.56 90 BAYES_05 7590 1.95 0.61 2.51 91 XM_B_SpammyTLD 7558 3.09 4.49 2.50 92 RCVD_IN_IADB_SENDERID 7349 2.00 0.98 2.43 93 MIME_HTML_MOSTLY 7220 2.76 3.65 2.39 94 INVALID_MSGID 7194 1.73 0.20 2.38 95 RCVD_IN_IADB_DK 7127 1.96 1.01 2.35 96 DKIM_INVALID 6703 3.07 5.12 2.21 97 XM_Body_Dirty_Words 6555 3.57 6.93 2.17 98 MSGID_NOFQDN1 6514 1.52 0.02 2.15 99 BAYES_95 6398 3.16 5.67 2.11 100 HTML_IMAGE_RATIO_08 6370 2.37 3.00 2.10 101 XM_B_URI_Unicode 6056 2.26 2.88 2.00 102 UNTRUSTED_Relay 6055 3.60 7.40 2.00 103 XM_DK_Undo_01 5929 1.84 1.55 1.96 104 TR_XM_DKIM_Undo 5892 10.18 29.82 1.95 105 T_XMDrugObfuBody_08 5790 2.36 3.42 1.91 106 RCVD_IN_IADB_VOUCHED 5753 1.55 0.72 1.90 107 T_XMDrugObfuBody_14 5534 2.53 4.19 1.83 108 XM_CamelCaseFrm001 5479 2.28 3.41 1.81 109 TR_XM_SpammyRelay 5406 5.48 14.29 1.79 110 TooManyTo_003 5314 1.43 0.64 1.76 111 XMDiploma_00 5093 2.01 2.79 1.68 112 XM_SPF_SoftFail 4977 2.13 3.28 1.64 113 TM2_M_URI_OPT_OUT 4964 1.88 2.47 1.64 114 XM_SendGrid 4795 1.53 1.38 1.58 115 TR_XM_UnparsRelay 4743 3.60 8.46 1.57 116 HELO_NODOT 4696 1.17 0.26 1.55 117 HELO_NO_DOMAIN 4691 1.16 0.25 1.55 118 XM_B_Investor 4635 2.76 5.70 1.53 119 TR_XM_PhishingBody 4564 2.42 4.60 1.51 120 XMLngstWrd_00 4419 1.15 0.41 1.46 121 TR_Symld_Words 4410 1.42 1.33 1.46 122 SUBJ_ALL_CAPS 4272 1.49 1.68 1.41 123 RCVD_IN_IADB_OPTIN 4197 1.13 0.51 1.39 124 XM_UB50 4173 1.80 2.81 1.38 125 FROM_EXCESS_BASE64 4114 1.64 2.32 1.36 126 XM_GoogleGroups 4102 1.21 0.87 1.36 127 TR_XM_SpammyWords5 4091 2.05 3.70 1.35 128 XMCapTrack 4063 1.12 0.60 1.34 129 TR_DCC_Bayes_99 3983 7.80 23.26 1.32 130 XMStockSpam_06 3958 1.48 1.88 1.31 131 T_TooManySym_03 3901 0.97 0.22 1.29 132 TooManyTo_004 3894 1.07 0.55 1.29 133 IN_HORDE_ADDRESS_BOOK 3866 0.92 0.06 1.28 134 BOTNET 3850 3.90 10.17 1.27 135 T_TVD_MIME_NO_HEADERS 3841 0.91 0.05 1.27 136 URI_NOVOWEL 3754 1.32 1.51 1.24 137 XM_B_Unsub2 3669 1.79 3.17 1.21 138 XMBrknScrpt_02 3446 1.67 2.93 1.14 139 XMGappySubj_01 3320 0.88 0.37 1.10 140 TR_XM_DK_SendGrid 3201 0.96 0.74 1.06 141 XM_ShortIntro_01 3174 0.87 0.43 1.05 142 XM_OfRef6 3166 1.85 3.75 1.05 143 URI_HEX 3141 1.18 1.51 1.04 144 TooManyTo_005 3093 0.87 0.50 1.02 145 TVD_SPACE_RATIO 3031 0.76 0.17 1.00 146 XMGenDplmaNmb 2930 1.15 1.60 0.97 147 XMSexyCombo_05 2909 1.99 4.44 0.96 148 XMSubMetaI_00 2809 1.00 1.18 0.93 149 DKIM_ADSP_CUSTOM_MED 2772 0.99 1.16 0.92 150 T_FILL_THIS_FORM_SHORT 2732 1.51 2.94 0.90 151 XM_H_PHPMailer 2633 0.78 0.56 0.87 152 TVD_RCVD_IP 2629 0.92 1.05 0.87 153 XM_H_Long_From02 2554 1.01 1.40 0.84 154 RCVD_IN_MSPIKE_BL 2523 2.34 5.95 0.83 155 TR_XM_MSPIKECOMBO 2512 2.34 5.94 0.83 156 XM_B_SpammyWords4 2443 1.24 2.27 0.81 157 SpammyFromTLD_01 2409 1.06 1.70 0.80 158 RCVD_IN_PBL 2378 0.91 1.19 0.79 159 RELAYCOUNTRY_CA 2264 2.70 7.37 0.75 160 T_Symld_Words_02 2174 0.75 0.82 0.72 161 XMNoVowels 2167 0.68 0.58 0.72 162 T_OBFU_PDF_ATTACH 2121 0.58 0.29 0.70 163 XMGappySubj_02 2106 0.50 0.05 0.70 164 RCVD_IN_MSPIKE_L3 2086 1.37 2.99 0.69 165 HTTPS_HTTP_MISMATCH 2046 0.79 1.06 0.68 166 TO_NO_BRKTS_HTML_ONLY 2045 0.54 0.23 0.68 167 HTML_IMAGE_ONLY_20 2040 0.73 0.87 0.67 168 URI_TRY_3LD 1992 0.90 1.46 0.66 169 T_XMDrugObfuBody_00 1982 0.94 1.62 0.65 170 RELAYCOUNTRY_GB 1918 0.71 0.91 0.63 171 TR_MetaPhish_Combo_01 1894 0.66 0.73 0.63 172 RELAYCOUNTRY_AU 1861 1.28 2.86 0.61 173 XMSlimDrugH 1857 0.63 0.66 0.61 174 XM_B_COPY_HTML 1823 0.86 1.48 0.60 175 MSGID_FROM_MTA_HEADER 1818 0.52 0.32 0.60 176 NML_ADSP_CUSTOM_MED 1783 0.70 0.97 0.59 177 XM_ProductURIs 1742 0.71 1.03 0.58 178 T_XMHurry_00 1733 0.91 1.72 0.57 179 XMPhish30 1723 0.86 1.57 0.57 180 FORGED_GMAIL_RCVD 1711 0.67 0.91 0.57 181 HTML_TAG_BALANCE_BODY 1710 0.67 0.92 0.57 182 TR_LOTS_OF_MONEY3 1670 0.83 1.50 0.55 183 TR_XM_Base64_M1 1655 0.67 0.96 0.55 184 XMSolicitRefs_0 1590 0.55 0.62 0.53 185 LongTLD 1548 0.79 1.45 0.51 186 XMBSHREFv2 1546 0.49 0.43 0.51 187 FROM_GOV_DKIM_AU 1519 0.38 0.10 0.50 188 WORD_INVIS 1454 0.34 0.02 0.48 189 MPART_ALT_DIFF_COUNT 1439 0.67 1.12 0.48 190 T_MANY_PILL_PRICE 1434 0.34 0.02 0.47 191 XMLngstWrd_01 1425 0.44 0.36 0.47 192 XMBody_95 1392 0.37 0.14 0.46 193 XMMoneyMeta_00 1374 0.52 0.69 0.45 194 PLING_QUERY 1336 0.51 0.67 0.44 195 XMDateMe_00 1314 0.57 0.89 0.43 196 SHORT_HELO_AND_INLINE_IMAGE 1295 0.32 0.05 0.43 197 TR_XM_PHPForged 1273 0.71 1.39 0.42 198 XM_B_DNDMA 1270 0.57 0.92 0.42 199 TR_XM_FormFill2 1261 0.70 1.36 0.42 200 FILL_THIS_FORM 1260 0.42 0.42 0.42 ----------------------------------------------------------------------