Email: 475555 Autolearn: 0 AvgScore: 5.92 AvgScanTime: 1.31 sec Spam: 183281 Autolearn: 0 AvgScore: 15.00 AvgScanTime: 1.36 sec Ham: 292274 Autolearn: 0 AvgScore: 0.23 AvgScanTime: 1.28 sec Time Spent Running SA: 172.97 hours Time Spent Processing Spam: 69.25 hours Time Spent Processing Ham: 103.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 176255 89.77 96.17 85.76 2 XM_B_Unicode 161521 76.30 88.13 68.89 3 XM_B_SpammyWords 141192 55.99 77.04 42.80 4 DKIM_SIGNED 118697 70.61 64.76 74.27 5 XM_B_Unicode3 112838 47.64 61.57 38.90 6 XM_DK_Pass 111741 68.54 60.97 73.29 7 DKIM_VALID 110646 67.59 60.37 72.11 8 RELAYCOUNTRY_US 105792 71.89 57.72 80.78 9 DCC_CHECK 99287 46.09 54.17 41.02 10 HTML_FONT_LOW_CONTRAST 97905 37.19 53.42 27.02 11 XMListUnsubscribeExists 88049 46.52 48.04 45.57 12 DKIM_VALID_AU 85650 54.27 46.73 59.00 13 DCC_CHECK_NEGATIVE 81994 53.46 44.74 58.93 14 RELAYCOUNTRY_META 74819 18.00 40.82 3.69 15 TR_XM_SpammyRelay 69339 15.70 37.83 1.82 16 XM_B_SpammyWords2 63837 24.28 34.83 17.66 17 LOC_TINY_FONT_1 62321 30.01 34.00 27.51 18 BOTNET 62163 13.80 33.92 1.18 19 UNTRUSTED_Relay 60264 13.72 32.88 1.70 20 BAYES_50 59254 49.65 32.33 60.50 21 DKIM_ADSP_NXDOMAIN 52414 11.25 28.60 0.37 22 XM_DK_Undo_02 52401 13.86 28.59 4.63 23 ANY_BOUNCE_MESSAGE 51871 13.69 28.30 4.53 24 BOUNCE_MESSAGE 51870 13.69 28.30 4.52 25 XMBounce_01 50484 10.74 27.54 0.20 26 RELAYCOUNTRY_PT 50111 10.54 27.34 0.00 27 BAYES_99 48529 12.26 26.48 3.34 28 FVGT_m_MULTI_ODD 46184 24.89 25.20 24.70 29 TR_MAX_INTL_RELAY 43023 12.62 23.47 5.81 30 DKIM_VALID_EF 42926 28.32 23.42 31.40 31 MIME_HTML_ONLY 38349 20.04 20.92 19.48 32 TR_XM_DKIM_Undo 37925 9.15 20.69 1.92 33 T_KAM_HTML_FONT_INVALID 37007 20.37 20.19 20.49 34 BAYES_999 34827 8.90 19.00 2.56 35 XM_Multi_Part_URI 33348 15.15 18.20 13.24 36 XMSubLong 31535 20.73 17.21 22.93 37 RCVD_IN_MSPIKE_BL 31283 7.10 17.07 0.84 38 TR_XM_MSPIKECOMBO 31281 7.09 17.07 0.84 39 TR_XM_DK_Unsub 30980 14.79 16.90 13.46 40 T_TM2_M_HEADER_IN_MSG 29753 26.17 16.23 32.40 41 TR_DCC_Bayes_99 28852 6.84 15.74 1.25 42 TR_XM_SpammyWords3 28720 6.30 15.67 0.43 43 BAYES_80 27688 8.03 15.11 3.59 44 BAYES_60 26074 9.74 14.23 6.93 45 RCVD_IN_MSPIKE_H2 25618 15.41 13.98 16.32 46 XM_B_Unsub 25504 10.80 13.92 8.85 47 RCVD_IN_MSPIKE_L4 25118 5.31 13.70 0.05 48 TR_XM_BayesUnsub 24780 9.37 13.52 6.76 49 UNPARSEABLE_RELAY 23411 12.55 12.77 12.40 50 XM_B_SpammyWords3 19139 6.64 10.44 4.26 51 LOTS_OF_MONEY 17464 7.71 9.53 6.56 52 XM_UB60 16116 3.44 8.79 0.09 53 XM_B_Phish_Phrases 16023 6.33 8.74 4.81 54 TR_XM_SpammyWords2 16012 3.68 8.74 0.51 55 XM_UB80 15774 3.33 8.61 0.02 56 TR_XM_SpammyWords4 15701 5.94 8.57 4.29 57 BOTNET_IPINHOSTNAME 15066 5.09 8.22 3.12 58 BAYES_95 14887 4.49 8.12 2.22 59 XM_Evil_Numbers_Gen 14523 8.47 7.92 8.81 60 DATE_IN_PAST_03_06 14511 3.23 7.92 0.28 61 FSL_BULK_SIG 14507 9.74 7.92 10.88 62 DATE_IN_PAST_06_12 14358 3.21 7.83 0.31 63 RCVD_IN_BL_SPAMCOP_NET 13301 3.12 7.26 0.52 64 TR_XM_UnparsRelay 12457 3.54 6.80 1.49 65 XM_B_SpammyTLD 12227 4.47 6.67 3.09 66 RCVD_IN_MSPIKE_WL 11222 12.62 6.12 16.69 67 XM_UB50 11012 2.95 6.01 1.04 68 MPART_ALT_DIFF 10966 5.14 5.98 4.62 69 RELAYCOUNTRY_CA 9855 2.53 5.38 0.75 70 XM_H_GMP 9568 5.99 5.22 6.48 71 XM_UB99 9042 1.90 4.93 0.00 72 HTML_IMAGE_RATIO_02 9012 4.79 4.92 4.72 73 XMSubMetaSx_00 8945 3.97 4.88 3.39 74 LotsOfNums_01 8939 6.49 4.88 7.50 75 XM_UncommonTLD01 8329 4.42 4.54 4.35 76 DATE_IN_PAST_12_24 8057 1.72 4.40 0.05 77 DKIM_INVALID 8051 3.02 4.39 2.16 78 XM_B_PhoneNumber 8037 7.91 4.39 10.13 79 XM_UB95 8032 1.69 4.38 0.01 80 XM_Body_Dirty_Words 7640 2.88 4.17 2.07 81 XM_H_Long_From01 6902 4.69 3.77 5.27 82 XMStrtUSub 6688 4.41 3.65 4.89 83 TR_XM_SpammyWords5 6275 2.53 3.42 1.97 84 HTML_IMAGE_RATIO_04 6267 3.77 3.42 4.00 85 XM_B_Investor 6237 2.16 3.40 1.38 86 TR_XM_RelayPhish 5781 1.26 3.15 0.07 87 RCVD_IN_MSPIKE_H3 5754 6.20 3.14 8.12 88 XMSexyCombo_05 5556 1.92 3.03 1.22 89 XMNumbers 5539 3.48 3.02 3.76 90 TR_XM_SPAMCOP 5446 1.22 2.97 0.13 91 T_XMDrugObfuBody_14 5322 2.13 2.90 1.64 92 TooManyTo_001 5277 6.68 2.88 9.07 93 TR_XM_MSPIKECOMBO2 5256 1.15 2.87 0.08 94 XMDiploma_00 5239 2.14 2.86 1.70 95 TR_XM_PhishingBody 5225 2.00 2.85 1.46 96 XM_OfRef6 5185 1.60 2.83 0.83 97 MIME_HTML_MOSTLY 5075 2.64 2.77 2.56 98 TM2_M_VERY_LONG_WORD 4827 1.79 2.63 1.26 99 RCVD_IN_MSPIKE_L3 4806 1.49 2.62 0.77 100 MIME_QP_LONG_LINE 4477 4.11 2.44 5.15 101 XM_B_Unsub2 4422 1.73 2.41 1.30 102 XM_SPF_SoftFail 4366 2.37 2.38 2.36 103 XM_UB999 4266 0.90 2.33 0.00 104 TR_XM_NoHeaderRelay 4009 0.97 2.19 0.20 105 T_XMDrugObfuBody_01 3984 0.88 2.17 0.07 106 MIME_HTML_ONLY_MULTI 3910 2.28 2.13 2.36 107 USER_IN_DEF_DKIM_WL 3883 8.17 2.12 11.96 108 HTML_IMAGE_RATIO_06 3830 2.47 2.09 2.70 109 T_XMDrugObfuBody_08 3736 1.60 2.04 1.33 110 XM_URI_RBL 3674 0.91 2.00 0.22 111 URI_HEX 3666 1.50 2.00 1.19 112 SpammyFromTLD_02 3573 0.91 1.95 0.26 113 RELAYCOUNTRY_AU 3566 1.04 1.95 0.47 114 XM_CamelCaseFrm001 3550 1.96 1.94 1.97 115 KHOP_HELO_FCRDNS 3505 2.44 1.91 2.77 116 SUBJ_ALL_CAPS 3456 1.98 1.89 2.05 117 TM2_M_URI_OPT_OUT 3449 1.87 1.88 1.87 118 XMBrknScrpt_02 3359 1.36 1.83 1.06 119 XM_B_URI_Unicode 3270 1.90 1.78 1.97 120 HTML_IMAGE_RATIO_08 3247 1.93 1.77 2.03 121 TR_XM_INV_DKIM 3186 0.68 1.74 0.02 122 T_FILL_THIS_FORM_SHORT 3175 1.32 1.73 1.06 123 T_TooManySym_01 3171 4.49 1.73 6.22 124 RCVD_IN_VALIDITY_RPBL 3156 0.69 1.72 0.04 125 T_REMOTE_IMAGE 3091 3.02 1.69 3.86 126 XM_B_SpammyWords4 3072 0.97 1.68 0.53 127 RCVD_IN_MSPIKE_H4 2963 2.61 1.62 3.24 128 XM_H_Long_From02 2873 1.12 1.57 0.84 129 ALL_TRUSTED 2799 10.48 1.53 16.09 130 RCVD_IN_VALIDITY_SAFE 2777 2.74 1.52 3.51 131 MAILING_LIST_MULTI 2777 2.68 1.52 3.40 132 T_XMDrugObfuBody_00 2759 1.16 1.51 0.94 133 FROM_EXCESS_BASE64 2754 1.44 1.50 1.40 134 XMBody_17 2735 0.85 1.49 0.45 135 XMGenDplmaNmb 2654 1.16 1.45 0.98 136 RCVD_IN_MSPIKE_H5 2505 3.80 1.37 5.33 137 XMStockSpam_06 2354 1.32 1.28 1.34 138 TR_LOTS_OF_MONEY3 2276 0.75 1.24 0.43 139 T_XMHurry_00 2272 0.80 1.24 0.53 140 HTML_MIME_NO_HTML_TAG 2260 2.22 1.23 2.85 141 RCVD_IN_IADB_LISTED 2221 2.47 1.21 3.25 142 SpammyFromTLD_01 2195 0.92 1.20 0.75 143 RCVD_IN_VALIDITY_CERTIFIED 2186 2.23 1.19 2.87 144 XM_SendGrid 2184 1.36 1.19 1.47 145 TR_XM_GMP_BULK_SIG 2065 0.57 1.13 0.22 146 DIET_1 2059 0.64 1.12 0.34 147 URI_TRY_3LD 2017 0.71 1.10 0.47 148 BAYES_40 1984 4.07 1.08 5.94 149 RCVD_IN_ZEN_LASTEXTERNAL 1979 0.42 1.08 0.00 150 SHORTCIRCUIT 1979 0.42 1.08 0.00 151 XMReplyNow 1961 0.58 1.07 0.28 152 XM_DK_Undo_01 1941 1.57 1.06 1.89 153 XM_B_SEO 1935 0.54 1.06 0.21 154 RCVD_IN_IADB_SPF 1922 2.17 1.05 2.87 155 RCVD_IN_PSBL 1913 0.70 1.04 0.48 156 XM_H_DKIM_GOOG 1874 0.40 1.02 0.01 157 XMSubNoVowel 1853 0.53 1.01 0.23 158 URI_NOVOWEL 1821 1.19 0.99 1.31 159 TR_XM_InvalidRelay 1806 0.39 0.99 0.01 160 DKIM_ADSP_CUSTOM_MED 1782 0.91 0.97 0.87 161 RCVD_IN_IADB_DK 1755 1.90 0.96 2.49 162 XMPhish30 1713 0.67 0.93 0.50 163 RCVD_IN_IADB_SENDERID 1707 1.94 0.93 2.58 164 RELAYCOUNTRY_FR 1703 0.53 0.93 0.28 165 XMSubMetaI_00 1698 0.71 0.93 0.57 166 RELAYCOUNTRY_CN 1697 0.39 0.93 0.06 167 TR_XM_INTL_Spamhaus 1691 0.46 0.92 0.16 168 STY_INVIS_DIRECT 1671 0.54 0.91 0.31 169 HTML_IMAGE_ONLY_20 1645 0.70 0.90 0.58 170 MPART_ALT_DIFF_COUNT 1637 0.71 0.89 0.60 171 XM_HighProb1 1625 0.34 0.89 0.00 172 XMBdyGiftCard01 1597 0.54 0.87 0.34 173 RDNS_DYNAMIC 1593 0.45 0.87 0.18 174 TR_XM_MaxSPIKE 1590 0.38 0.87 0.08 175 PDS_RDNS_DYNAMIC_FP 1563 0.36 0.85 0.04 176 XM_PDF 1560 3.39 0.85 4.98 177 XM_B_Phish66 1551 0.54 0.85 0.35 178 MIME_CHARSET_FARAWAY 1547 0.41 0.84 0.14 179 XM_ProductURIs 1531 0.64 0.84 0.51 180 MISSING_HEADERS 1516 0.67 0.83 0.57 181 TR_Symld_Words 1478 1.32 0.81 1.64 182 TR_XM_PHPForged 1463 0.47 0.80 0.26 183 NML_ADSP_CUSTOM_MED 1453 0.67 0.79 0.59 184 TR_XM_SEO4 1435 0.37 0.78 0.11 185 XM_B_COPY_HTML 1434 0.71 0.78 0.67 186 TR_XM_PHPDW 1430 0.46 0.78 0.26 187 TR_Mismatch_TLD_02 1426 0.36 0.78 0.10 188 RCVD_IN_PBL 1426 0.78 0.78 0.78 189 TR_MetaPhish_Combo_01 1425 0.90 0.78 0.97 190 TR_XM_FormFill2 1424 0.46 0.78 0.25 191 BAYES_20 1420 3.00 0.77 4.40 192 XM_H_PHPOS 1416 0.45 0.77 0.25 193 FORGED_GMAIL_RCVD 1404 0.61 0.77 0.51 194 TVD_RCVD_IP 1402 1.46 0.76 1.90 195 HTML_FONT_TINY_NORDNS 1375 0.33 0.75 0.07 196 XM_B_DNDMA 1367 0.54 0.75 0.41 197 XM_GoogleGroups 1364 1.17 0.74 1.43 198 RCVD_IN_MSPIKE_L5 1357 0.30 0.74 0.02 199 XMHTML_After_End 1357 0.58 0.74 0.47 200 LONGLN_LOW_CONTRAST 1344 0.43 0.73 0.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 250662 89.77 96.17 85.76 2 RELAYCOUNTRY_US 236092 71.89 57.72 80.78 3 DKIM_SIGNED 217073 70.61 64.76 74.27 4 XM_DK_Pass 214194 68.54 60.97 73.29 5 DKIM_VALID 210759 67.59 60.37 72.11 6 XM_B_Unicode 201344 76.30 88.13 68.89 7 BAYES_50 176839 49.65 32.33 60.50 8 DKIM_VALID_AU 172453 54.27 46.73 59.00 9 DCC_CHECK_NEGATIVE 172234 53.46 44.74 58.93 10 XMListUnsubscribeExists 133176 46.52 48.04 45.57 11 XM_B_SpammyWords 125092 55.99 77.04 42.80 12 DCC_CHECK 119882 46.09 54.17 41.02 13 XM_B_Unicode3 113703 47.64 61.57 38.90 14 T_TM2_M_HEADER_IN_MSG 94687 26.17 16.23 32.40 15 DKIM_VALID_EF 91764 28.32 23.42 31.40 16 LOC_TINY_FONT_1 80398 30.01 34.00 27.51 17 HTML_FONT_LOW_CONTRAST 78961 37.19 53.42 27.02 18 FVGT_m_MULTI_ODD 72200 24.89 25.20 24.70 19 XMSubLong 67032 20.73 17.21 22.93 20 T_KAM_HTML_FONT_INVALID 59877 20.37 20.19 20.49 21 MIME_HTML_ONLY 56943 20.04 20.92 19.48 22 XM_B_SpammyWords2 51622 24.28 34.83 17.66 23 RCVD_IN_MSPIKE_WL 48791 12.62 6.12 16.69 24 RCVD_IN_MSPIKE_H2 47685 15.41 13.98 16.32 25 ALL_TRUSTED 47040 10.48 1.53 16.09 26 TR_XM_DK_Unsub 39339 14.79 16.90 13.46 27 XM_Multi_Part_URI 38688 15.15 18.20 13.24 28 UNPARSEABLE_RELAY 36251 12.55 12.77 12.40 29 USER_IN_DEF_DKIM_WL 34963 8.17 2.12 11.96 30 FSL_BULK_SIG 31810 9.74 7.92 10.88 31 BAYES_00 30841 6.64 0.40 10.55 32 XM_B_PhoneNumber 29603 7.91 4.39 10.13 33 TooManyTo_001 26510 6.68 2.88 9.07 34 XM_B_Unsub 25877 10.80 13.92 8.85 35 XM_Evil_Numbers_Gen 25755 8.47 7.92 8.81 36 RCVD_IN_MSPIKE_H3 23746 6.20 3.14 8.12 37 LotsOfNums_01 21911 6.49 4.88 7.50 38 BAYES_60 20258 9.74 14.23 6.93 39 TR_XM_BayesUnsub 19764 9.37 13.52 6.76 40 TR_XM_DK_Bayes 19317 4.17 0.27 6.61 41 LOTS_OF_MONEY 19178 7.71 9.53 6.56 42 TR_XM_DK_Bayes1 18984 4.10 0.27 6.50 43 XM_H_GMP 18935 5.99 5.22 6.48 44 XM_DKIMWhitelistDomains 18218 3.84 0.01 6.23 45 T_TooManySym_01 18167 4.49 1.73 6.22 46 BAYES_40 17357 4.07 1.08 5.94 47 TR_MAX_INTL_RELAY 16969 12.62 23.47 5.81 48 TR_XM_DK_Bayes2 15779 3.38 0.16 5.40 49 RCVD_IN_MSPIKE_H5 15578 3.80 1.37 5.33 50 XM_H_Long_From01 15389 4.69 3.77 5.27 51 MIME_QP_LONG_LINE 15050 4.11 2.44 5.15 52 XM_PDF 14555 3.39 0.85 4.98 53 XMStrtUSub 14294 4.41 3.65 4.89 54 XM_B_Phish_Phrases 14068 6.33 8.74 4.81 55 HTML_IMAGE_RATIO_02 13783 4.79 4.92 4.72 56 XM_DK_Undo_02 13532 13.86 28.59 4.63 57 MPART_ALT_DIFF 13494 5.14 5.98 4.62 58 ANY_BOUNCE_MESSAGE 13230 13.69 28.30 4.53 59 BOUNCE_MESSAGE 13225 13.69 28.30 4.52 60 BAYES_20 12855 3.00 0.77 4.40 61 XM_UncommonTLD01 12709 4.42 4.54 4.35 62 TR_XM_SpammyWords4 12549 5.94 8.57 4.29 63 XM_B_SpammyWords3 12456 6.64 10.44 4.26 64 HTML_IMAGE_RATIO_04 11680 3.77 3.42 4.00 65 T_REMOTE_IMAGE 11286 3.02 1.69 3.86 66 XMNumbers 10987 3.48 3.02 3.76 67 RELAYCOUNTRY_META 10793 18.00 40.82 3.69 68 BAYES_80 10481 8.03 15.11 3.59 69 RCVD_IN_VALIDITY_SAFE 10255 2.74 1.52 3.51 70 MAILING_LIST_MULTI 9948 2.68 1.52 3.40 71 XMSubMetaSx_00 9921 3.97 4.88 3.39 72 T_TooManySym_02 9776 2.26 0.52 3.34 73 BAYES_99 9766 12.26 26.48 3.34 74 RCVD_IN_IADB_LISTED 9503 2.47 1.21 3.25 75 RCVD_IN_MSPIKE_H4 9467 2.61 1.62 3.24 76 BOTNET_IPINHOSTNAME 9118 5.09 8.22 3.12 77 XM_B_SpammyTLD 9025 4.47 6.67 3.09 78 RCVD_IN_VALIDITY_CERTIFIED 8400 2.23 1.19 2.87 79 RCVD_IN_IADB_SPF 8397 2.17 1.05 2.87 80 TooManyTo_002 8341 2.00 0.63 2.85 81 HTML_MIME_NO_HTML_TAG 8318 2.22 1.23 2.85 82 KHOP_HELO_FCRDNS 8083 2.44 1.91 2.77 83 HTML_IMAGE_RATIO_06 7905 2.47 2.09 2.70 84 INVALID_MSGID 7767 1.68 0.12 2.66 85 RCVD_IN_IADB_SENDERID 7542 1.94 0.93 2.58 86 MIME_HTML_MOSTLY 7495 2.64 2.77 2.56 87 BAYES_999 7478 8.90 19.00 2.56 88 BAYES_05 7390 1.71 0.40 2.53 89 RCVD_IN_IADB_DK 7273 1.90 0.96 2.49 90 MIME_HTML_ONLY_MULTI 6910 2.28 2.13 2.36 91 MSGID_NOFQDN1 6909 1.46 0.02 2.36 92 XM_SPF_SoftFail 6890 2.37 2.38 2.36 93 BAYES_95 6486 4.49 8.12 2.22 94 RCVD_IN_IADB_VOUCHED 6365 1.59 0.65 2.18 95 DKIM_INVALID 6314 3.02 4.39 2.16 96 TO_MALFORMED 6302 1.33 0.02 2.16 97 XM_Body_Dirty_Words 6060 2.88 4.17 2.07 98 SUBJ_ALL_CAPS 5982 1.98 1.89 2.05 99 HTML_IMAGE_RATIO_08 5932 1.93 1.77 2.03 100 XM_B_URI_Unicode 5768 1.90 1.78 1.97 101 TR_XM_SpammyWords5 5767 2.53 3.42 1.97 102 XM_CamelCaseFrm001 5755 1.96 1.94 1.97 103 TR_XM_DKIM_Undo 5601 9.15 20.69 1.92 104 TVD_RCVD_IP 5554 1.46 0.76 1.90 105 XM_DK_Undo_01 5532 1.57 1.06 1.89 106 TM2_M_URI_OPT_OUT 5452 1.87 1.88 1.87 107 TR_XM_SpammyRelay 5315 15.70 37.83 1.82 108 TooManyTo_003 5266 1.30 0.51 1.80 109 UNTRUSTED_Relay 4967 13.72 32.88 1.70 110 XMDiploma_00 4960 2.14 2.86 1.70 111 T_XMDrugObfuBody_14 4795 2.13 2.90 1.64 112 TR_Symld_Words 4785 1.32 0.81 1.64 113 RCVD_IN_IADB_OPTIN 4427 1.10 0.43 1.51 114 TR_XM_UnparsRelay 4363 3.54 6.80 1.49 115 IN_HORDE_ADDRESS_BOOK 4301 0.92 0.04 1.47 116 XM_SendGrid 4294 1.36 1.19 1.47 117 TR_XM_PhishingBody 4281 2.00 2.85 1.46 118 HELO_NODOT 4275 0.98 0.21 1.46 119 HELO_NO_DOMAIN 4268 0.98 0.21 1.46 120 XM_GoogleGroups 4190 1.17 0.74 1.43 121 FROM_EXCESS_BASE64 4085 1.44 1.50 1.40 122 XM_B_Investor 4046 2.16 3.40 1.38 123 TooManyTo_004 3983 0.99 0.40 1.36 124 XMStockSpam_06 3928 1.32 1.28 1.34 125 T_XMDrugObfuBody_08 3885 1.60 2.04 1.33 126 XMCapTrack 3869 0.98 0.42 1.32 127 URI_NOVOWEL 3827 1.19 0.99 1.31 128 XM_B_Unsub2 3796 1.73 2.41 1.30 129 TM2_M_VERY_LONG_WORD 3697 1.79 2.63 1.26 130 XM_ShortIntro_01 3673 0.89 0.31 1.26 131 TR_DCC_Bayes_99 3657 6.84 15.74 1.25 132 T_TooManySym_03 3645 0.83 0.18 1.25 133 XMGappySubj_01 3582 0.80 0.13 1.23 134 XMSexyCombo_05 3574 1.92 3.03 1.22 135 T_TVD_MIME_NO_HEADERS 3560 0.78 0.07 1.22 136 URI_HEX 3488 1.50 2.00 1.19 137 BOTNET 3458 13.80 33.92 1.18 138 XMNoVowels 3295 0.94 0.63 1.13 139 TooManyTo_005 3188 0.80 0.34 1.09 140 XMBrknScrpt_02 3092 1.36 1.83 1.06 141 T_FILL_THIS_FORM_SHORT 3085 1.32 1.73 1.06 142 TVD_SPACE_RATIO 3084 0.70 0.12 1.06 143 XM_UB50 3032 2.95 6.01 1.04 144 XMGenDplmaNmb 2857 1.16 1.45 0.98 145 TR_XM_DK_SendGrid 2848 0.82 0.58 0.97 146 TO_NO_BRKTS_HTML_ONLY 2838 0.67 0.19 0.97 147 TR_MetaPhish_Combo_01 2832 0.90 0.78 0.97 148 T_XMDrugObfuBody_00 2740 1.16 1.51 0.94 149 XM_shorewaves_Whitelist 2735 0.58 0.00 0.94 150 XM_H_PHPMailer 2603 0.67 0.33 0.89 151 DKIM_ADSP_CUSTOM_MED 2557 0.91 0.97 0.87 152 HTML_IMAGE_ONLY_32 2468 0.57 0.12 0.84 153 XM_H_Long_From02 2468 1.12 1.57 0.84 154 RCVD_IN_MSPIKE_BL 2463 7.10 17.07 0.84 155 TR_XM_MSPIKECOMBO 2453 7.09 17.07 0.84 156 XM_OfRef6 2426 1.60 2.83 0.83 157 XMGappySubj_02 2320 0.50 0.03 0.79 158 RCVD_IN_PBL 2271 0.78 0.78 0.78 159 RCVD_IN_MSPIKE_L3 2258 1.49 2.62 0.77 160 SpammyFromTLD_01 2200 0.92 1.20 0.75 161 RELAYCOUNTRY_CA 2194 2.53 5.38 0.75 162 TR_XM_Base64_M1 2105 0.72 0.73 0.72 163 RELAYCOUNTRY_GB 2055 0.65 0.57 0.70 164 HTTPS_HTTP_MISMATCH 2027 0.68 0.66 0.69 165 T_Symld_Words_02 1957 0.65 0.61 0.67 166 XM_B_COPY_HTML 1955 0.71 0.78 0.67 167 LongTLD 1894 0.67 0.72 0.65 168 MSGID_FROM_MTA_HEADER 1881 0.47 0.18 0.64 169 T_OBFU_PDF_ATTACH 1828 0.47 0.22 0.63 170 XMLngstWrd_00 1827 0.56 0.45 0.63 171 XMSlimDrugH 1818 0.57 0.49 0.62 172 MPART_ALT_DIFF_COUNT 1761 0.71 0.89 0.60 173 FROM_GOV_DKIM_AU 1758 0.42 0.13 0.60 174 NML_ADSP_CUSTOM_MED 1719 0.67 0.79 0.59 175 HTML_IMAGE_ONLY_20 1681 0.70 0.90 0.58 176 XMBSHREFv2 1658 0.47 0.31 0.57 177 XMSubMetaI_00 1655 0.71 0.93 0.57 178 MISSING_HEADERS 1655 0.67 0.83 0.57 179 XMLngstWrd_01 1632 0.50 0.40 0.56 180 XMSubMetaSxObfu_03 1602 0.57 0.62 0.55 181 HTML_TAG_BALANCE_BODY 1592 0.56 0.58 0.54 182 XM_B_SpammyTLD2 1555 0.37 0.11 0.53 183 T_XMHurry_00 1544 0.80 1.24 0.53 184 XM_B_SpammyWords4 1541 0.97 1.68 0.53 185 RCVD_IN_BL_SPAMCOP_NET 1526 3.12 7.26 0.52 186 XM_ProductURIs 1493 0.64 0.84 0.51 187 TR_XM_SpammyWords2 1486 3.68 8.74 0.51 188 FORGED_GMAIL_RCVD 1485 0.61 0.77 0.51 189 XMPhish30 1465 0.67 0.93 0.50 190 RCVD_IN_PSBL 1403 0.70 1.04 0.48 191 XMHTML_After_End 1381 0.58 0.74 0.47 192 URI_TRY_3LD 1371 0.71 1.10 0.47 193 RELAYCOUNTRY_AU 1366 1.04 1.95 0.47 194 PLING_QUERY 1326 0.46 0.48 0.45 195 XMBody_17 1305 0.85 1.49 0.45 196 HTML_FONT_FACE_BAD 1281 0.41 0.38 0.44 197 TR_LOTS_OF_MONEY3 1267 0.75 1.24 0.43 198 XMLngstWrd_02 1262 0.39 0.32 0.43 199 XMSolicitRefs_0 1257 0.42 0.40 0.43 200 TR_XM_SpammyWords3 1243 6.30 15.67 0.43 ----------------------------------------------------------------------