Email: 633326 Autolearn: 0 AvgScore: 5.24 AvgScanTime: 1.65 sec Spam: 220904 Autolearn: 0 AvgScore: 12.71 AvgScanTime: 1.89 sec Ham: 412422 Autolearn: 0 AvgScore: 1.24 AvgScanTime: 1.53 sec Time Spent Running SA: 290.64 hours Time Spent Processing Spam: 115.82 hours Time Spent Processing Ham: 174.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 220526 99.69 99.83 99.62 2 HTML_MESSAGE 216119 92.30 97.83 89.34 3 DKIM_SIGNED 207477 84.94 93.92 80.12 4 XM_DK_Pass 198827 82.78 90.01 78.90 5 DKIM_VALID 197444 82.00 89.38 78.04 6 XM_B_Unicode 196691 80.16 89.04 75.41 7 RELAYCOUNTRY_US 191509 84.80 86.69 83.79 8 DCC_CHECK 170708 54.52 77.28 42.32 9 XMListUnsubscribeExists 163715 62.32 74.11 56.00 10 DKIM_VALID_AU 156127 66.87 70.68 64.83 11 XM_B_SpammyWords 147801 54.94 66.91 48.53 12 LOC_TINY_FONT_1 127297 43.16 57.63 35.42 13 XM_B_Unicode3 117236 48.91 53.07 46.68 14 HTML_FONT_LOW_CONTRAST 109115 39.15 49.39 33.67 15 XM_DK_Undo_02 98880 19.41 44.76 5.83 16 FVGT_m_MULTI_ODD 92209 32.57 41.74 27.65 17 BAYES_50 91850 54.47 41.58 61.37 18 XM_B_SpammyWords2 82103 26.75 37.17 21.17 19 DKIM_VALID_EF 72340 30.45 32.75 29.21 20 BAYES_99 66496 13.20 30.10 4.14 21 XM_Multi_Part_URI 64248 20.77 29.08 16.31 22 TR_XM_DKIM_Undo 62010 11.30 28.07 2.31 23 T_KAM_HTML_FONT_INVALID 60333 25.41 27.31 24.39 24 RCVD_IN_MSPIKE_H2 58178 20.11 26.34 16.77 25 UNPARSEABLE_RELAY 57345 18.47 25.96 14.46 26 TR_XM_DK_Unsub 57057 18.27 25.83 14.22 27 MIME_HTML_ONLY 54434 20.84 24.64 18.81 28 BAYES_999 50743 10.11 22.97 3.22 29 DCC_CHECK_NEGATIVE 50018 45.41 22.64 57.61 30 XMSubLong 48918 21.30 22.14 20.85 31 TR_DCC_Bayes_99 48419 8.44 21.92 1.22 32 T_TM2_M_HEADER_IN_MSG 39761 23.70 18.00 26.75 33 XM_B_Unsub 38838 12.18 17.58 9.29 34 TR_XM_BayesUnsub 37525 10.70 16.99 7.33 35 TR_MAX_INTL_RELAY 34400 9.84 15.57 6.77 36 RCVD_IN_BL_SPAMCOP_NET 31565 5.69 14.29 1.08 37 TR_XM_UnparsRelay 30618 6.25 13.86 2.17 38 RELAYCOUNTRY_META 28907 7.17 13.09 4.01 39 XM_B_SpammyWords3 27957 8.01 12.66 5.52 40 RCVD_IN_MSPIKE_WL 27710 19.24 12.54 22.83 41 XM_Evil_Numbers_Gen 26558 10.99 12.02 10.43 42 LOTS_OF_MONEY 26328 8.01 11.92 5.92 43 BOTNET_IPINHOSTNAME 25863 6.03 11.71 2.98 44 TR_XM_SpammyWords4 23314 6.36 10.55 4.11 45 TR_XM_SPAMCOP 22132 3.74 10.02 0.38 46 BAYES_80 22049 6.19 9.98 4.16 47 BAYES_60 21092 8.56 9.55 8.04 48 TR_XM_SpammyRelay 21060 4.77 9.53 2.23 49 TR_XM_SpammyWords2 20285 3.61 9.18 0.62 50 BOTNET 19644 3.76 8.89 1.01 51 FSL_BULK_SIG 18471 5.50 8.36 3.96 52 HTML_IMAGE_RATIO_02 17477 6.73 7.91 6.10 53 XM_B_Phish_Phrases 16974 6.05 7.68 5.17 54 RCVD_IN_MSPIKE_BL 15036 3.43 6.81 1.62 55 TR_XM_MSPIKECOMBO 14958 3.39 6.77 1.58 56 XM_H_Long_From01 14313 5.74 6.48 5.35 57 MPART_ALT_DIFF 14262 5.37 6.46 4.79 58 XM_B_PhoneNumber 13733 8.78 6.22 10.15 59 RCVD_IN_MSPIKE_H3 13554 8.90 6.14 10.38 60 TR_XM_SpammyWords5 13499 3.84 6.11 2.62 61 LotsOfNums_01 13414 9.19 6.07 10.86 62 XM_B_SpammyTLD 13174 3.78 5.96 2.61 63 SUBJ_ALL_CAPS 12119 3.91 5.49 3.07 64 BAYES_95 11753 3.56 5.32 2.61 65 UNTRUSTED_Relay 11704 3.20 5.30 2.08 66 XMSubMetaSx_00 11685 3.87 5.29 3.10 67 HTML_IMAGE_RATIO_04 11281 5.11 5.11 5.10 68 XM_H_GMP 11226 4.68 5.08 4.46 69 TR_XM_PhishingBody 10875 2.98 4.92 1.94 70 XMStrtUSub 10694 4.86 4.84 4.87 71 XM_UncommonTLD01 10109 3.79 4.58 3.37 72 DKIM_INVALID 10033 2.94 4.54 2.08 73 MIME_HTML_MOSTLY 9877 3.32 4.47 2.71 74 RCVD_IN_MSPIKE_L3 9508 2.35 4.30 1.30 75 TR_XM_SpammyWords3 9168 1.95 4.15 0.77 76 RELAYCOUNTRY_CA 9021 1.89 4.08 0.71 77 XM_Body_Dirty_Words 8905 3.15 4.03 2.68 78 TM2_M_VERY_LONG_WORD 8598 3.42 3.89 3.16 79 T_XMHurry_00 8359 2.32 3.78 1.53 80 XM_B_Investor 8293 2.14 3.75 1.28 81 T_XMDrugObfuBody_14 7773 2.31 3.52 1.66 82 HTML_IMAGE_RATIO_06 7586 3.25 3.43 3.14 83 TooManyTo_001 7420 5.83 3.36 7.16 84 USER_IN_DEF_DKIM_WL 7404 11.48 3.35 15.83 85 RCVD_IN_MSPIKE_H4 7273 4.49 3.29 5.14 86 XMNumbers 7255 3.38 3.28 3.43 87 XM_CamelCaseFrm001 7086 2.38 3.21 1.94 88 RCVD_IN_MSPIKE_H5 6883 5.85 3.12 7.31 89 XMStockSpam_06 6871 2.04 3.11 1.46 90 XM_B_URI_Unicode 6759 2.20 3.06 1.74 91 XMSexyCombo_05 6591 1.81 2.98 1.18 92 TR_XM_MSPIKECOMBO2 6446 1.11 2.92 0.14 93 HTML_IMAGE_RATIO_08 6278 2.44 2.84 2.23 94 XMSubMetaI_00 6221 2.02 2.82 1.59 95 MIME_HTML_ONLY_MULTI 6097 2.58 2.76 2.49 96 RELAYCOUNTRY_AU 6090 1.32 2.76 0.55 97 XMDiploma_00 5972 1.80 2.70 1.31 98 XM_SPF_SoftFail 5920 1.62 2.68 1.05 99 XM_B_Unsub2 5819 1.78 2.63 1.32 100 XM_B_SpammyWords4 5666 1.60 2.56 1.08 101 XM_UB50 5626 1.88 2.55 1.53 102 T_TooManySym_01 5561 4.53 2.52 5.61 103 XM_OfRef6 5507 1.29 2.49 0.65 104 TM2_M_URI_OPT_OUT 5478 2.10 2.48 1.89 105 TR_XM_NoHeaderRelay 5453 1.02 2.47 0.24 106 XM_ProductURIs 5412 1.65 2.45 1.22 107 SHOPIFY_IMG_NOT_RCVD_SFY 5389 1.12 2.44 0.41 108 MIME_QP_LONG_LINE 5384 4.54 2.44 5.66 109 TR_LOTS_OF_MONEY3 5307 1.32 2.40 0.74 110 RCVD_IN_VALIDITY_SAFE 5276 4.58 2.39 5.76 111 T_XMDrugObfuBody_08 5111 1.90 2.31 1.68 112 XMBody_17 4949 1.13 2.24 0.53 113 THIS_AD 4859 1.17 2.20 0.62 114 XM_URI_RBL 4810 0.97 2.18 0.32 115 TR_XM_INV_DKIM 4748 0.76 2.15 0.01 116 T_REMOTE_IMAGE 4687 2.76 2.12 3.10 117 TR_XM_MaxSPIKE 4610 0.81 2.09 0.13 118 MPART_ALT_DIFF_COUNT 4596 1.12 2.08 0.60 119 XMPhish30 4455 1.13 2.02 0.66 120 XMBrknScrpt_02 4441 1.64 2.01 1.44 121 RCVD_IN_MSPIKE_L4 4353 0.86 1.97 0.26 122 RCVD_IN_IADB_LISTED 4331 3.24 1.96 3.92 123 LOW_PRICE 4287 1.26 1.94 0.89 124 SpammyFromTLD_02 4268 0.87 1.93 0.30 125 MAILING_LIST_MULTI 3959 2.58 1.79 2.99 126 FROM_EXCESS_BASE64 3741 2.22 1.69 2.51 127 TR_XM_GMP_BULK_SIG 3653 0.62 1.65 0.07 128 XM_DK_Undo_01 3575 1.92 1.62 2.09 129 T_FILL_THIS_FORM_SHORT 3520 1.06 1.59 0.77 130 RCVD_IN_IADB_SPF 3406 2.83 1.54 3.52 131 URI_HEX 3339 1.27 1.51 1.13 132 BAYES_40 3248 3.81 1.47 5.06 133 KHOP_HELO_FCRDNS 3242 1.62 1.47 1.70 134 URI_NOVOWEL 3203 1.42 1.45 1.41 135 RCVD_IN_VALIDITY_RPBL 3192 0.54 1.44 0.05 136 XMBdyGiftCard01 3175 1.17 1.44 1.03 137 XM_B_Phish66 3093 0.71 1.40 0.34 138 RCVD_IN_IADB_DK 3055 2.47 1.38 3.06 139 XM_SendGrid 2990 1.50 1.35 1.57 140 XM_B_COPY_HTML 2982 0.95 1.35 0.74 141 XMGenDplmaNmb 2978 0.91 1.35 0.67 142 RCVD_IN_IADB_SENDERID 2943 2.55 1.33 3.19 143 RCVD_IN_IADB_VOUCHED 2938 2.02 1.33 2.40 144 RCVD_IN_VALIDITY_CERTIFIED 2907 3.56 1.32 4.76 145 T_XMDrugObfuBody_00 2855 0.99 1.29 0.83 146 XM_H_Long_From02 2799 0.92 1.27 0.74 147 XMSubMetaSxObfu_03 2787 0.91 1.26 0.72 148 RELAYCOUNTRY_FR 2765 0.65 1.25 0.33 149 XMClaimOffer 2726 0.73 1.23 0.46 150 XM_B_DNDMA 2715 0.83 1.23 0.62 151 ALL_TRUSTED 2608 8.50 1.18 12.42 152 RCVD_IN_PSBL 2593 0.42 1.17 0.02 153 RDNS_DYNAMIC 2480 0.48 1.12 0.13 154 TR_Symld_Words 2394 1.26 1.08 1.35 155 URI_TRY_3LD 2362 0.77 1.07 0.61 156 HTML_MIME_NO_HTML_TAG 2335 1.78 1.06 2.16 157 T_MONEY_PERCENT 2309 0.62 1.05 0.39 158 TR_LOTS_OF_MONEY2 2309 0.62 1.05 0.39 159 XM_B_SEO 2273 0.50 1.03 0.22 160 BAYES_20 2213 2.89 1.00 3.90 161 SpammyFromTLD_01 2206 0.80 1.00 0.69 162 XMBody_78 2165 0.56 0.98 0.33 163 BOTNET_NORDNS 2123 0.34 0.96 0.01 164 TVD_RCVD_IP 2105 0.84 0.95 0.78 165 XM_B_REG_HTML 2105 0.52 0.95 0.29 166 TM2_M_A_HREF_HREF 2093 0.52 0.95 0.30 167 TR_Mismatch_TLD_02 2089 0.38 0.95 0.08 168 XM_GoogleGroups 2040 1.15 0.92 1.26 169 HTTPS_HTTP_MISMATCH 2020 0.74 0.91 0.65 170 HTML_IMAGE_ONLY_24 2017 0.50 0.91 0.28 171 XM_S_SpammyWords 2002 0.60 0.91 0.44 172 TR_XM_Spammywords 2001 0.60 0.91 0.44 173 TR_XM_DK_SendGrid 2000 1.06 0.91 1.14 174 NO_DNS_FOR_FROM 1979 0.46 0.90 0.23 175 RCVD_IN_IADB_OPTIN 1972 1.42 0.89 1.71 176 HELO_DYNAMIC_SPLIT_IP 1972 0.32 0.89 0.02 177 TR_XM_MaxWHORU 1941 0.43 0.88 0.19 178 TR_XM_SEO4 1937 0.38 0.88 0.12 179 XM_UB99 1842 0.29 0.83 0.00 180 DIET_1 1825 0.47 0.83 0.28 181 TR_Caps_n_Bayes_99 1824 0.33 0.83 0.06 182 DKIM_ADSP_CUSTOM_MED 1820 0.80 0.82 0.78 183 DKIM_ADSP_NXDOMAIN 1771 0.48 0.80 0.31 184 RELAYCOUNTRY_GB 1768 0.82 0.80 0.84 185 TR_XM_RelayPhish 1674 0.31 0.76 0.08 186 XMPhish14 1667 0.56 0.75 0.46 187 T_TooManySym_02 1664 1.96 0.75 2.61 188 URIBL_BLACK 1654 0.27 0.75 0.01 189 T_Symld_Words_02 1634 0.62 0.74 0.56 190 TR_MetaPhish_Combo_01 1601 0.60 0.72 0.53 191 XMPhish08 1568 0.50 0.71 0.39 192 HTML_TAG_BALANCE_BODY 1543 0.56 0.70 0.49 193 TR_BOTNET_NEGATE 1528 0.33 0.69 0.14 194 XM_UB60 1502 0.30 0.68 0.10 195 TR_XM_InvalidRelay 1497 0.24 0.68 0.01 196 HK_RANDOM_FROM 1490 0.32 0.67 0.13 197 XM_UB80 1482 0.25 0.67 0.03 198 XM_RXBody 1457 0.35 0.66 0.19 199 NML_ADSP_CUSTOM_MED 1456 0.50 0.66 0.42 200 XM_HighProb1 1453 0.23 0.66 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 410847 99.69 99.83 99.62 2 HTML_MESSAGE 368463 92.30 97.83 89.34 3 RELAYCOUNTRY_US 345579 84.80 86.69 83.79 4 DKIM_SIGNED 330452 84.94 93.92 80.12 5 XM_DK_Pass 325410 82.78 90.01 78.90 6 DKIM_VALID 321855 82.00 89.38 78.04 7 XM_B_Unicode 311004 80.16 89.04 75.41 8 DKIM_VALID_AU 267368 66.87 70.68 64.83 9 BAYES_50 253114 54.47 41.58 61.37 10 DCC_CHECK_NEGATIVE 237593 45.41 22.64 57.61 11 XMListUnsubscribeExists 230945 62.32 74.11 56.00 12 XM_B_SpammyWords 200163 54.94 66.91 48.53 13 XM_B_Unicode3 192501 48.91 53.07 46.68 14 DCC_CHECK 174553 54.52 77.28 42.32 15 LOC_TINY_FONT_1 146077 43.16 57.63 35.42 16 HTML_FONT_LOW_CONTRAST 138859 39.15 49.39 33.67 17 DKIM_VALID_EF 120480 30.45 32.75 29.21 18 FVGT_m_MULTI_ODD 114047 32.57 41.74 27.65 19 T_TM2_M_HEADER_IN_MSG 110307 23.70 18.00 26.75 20 T_KAM_HTML_FONT_INVALID 100577 25.41 27.31 24.39 21 RCVD_IN_MSPIKE_WL 94160 19.24 12.54 22.83 22 XM_B_SpammyWords2 87329 26.75 37.17 21.17 23 XMSubLong 85997 21.30 22.14 20.85 24 MIME_HTML_ONLY 77576 20.84 24.64 18.81 25 RCVD_IN_MSPIKE_H2 69183 20.11 26.34 16.77 26 XM_Multi_Part_URI 67269 20.77 29.08 16.31 27 USER_IN_DEF_DKIM_WL 65276 11.48 3.35 15.83 28 UNPARSEABLE_RELAY 59654 18.47 25.96 14.46 29 TR_XM_DK_Unsub 58641 18.27 25.83 14.22 30 ALL_TRUSTED 51237 8.50 1.18 12.42 31 LotsOfNums_01 44809 9.19 6.07 10.86 32 XM_Evil_Numbers_Gen 43035 10.99 12.02 10.43 33 RCVD_IN_MSPIKE_H3 42822 8.90 6.14 10.38 34 XM_B_PhoneNumber 41842 8.78 6.22 10.15 35 XM_B_Unsub 38303 12.18 17.58 9.29 36 BAYES_00 35925 5.86 0.54 8.71 37 BAYES_60 33146 8.56 9.55 8.04 38 TR_XM_BayesUnsub 30242 10.70 16.99 7.33 39 RCVD_IN_MSPIKE_H5 30143 5.85 3.12 7.31 40 TooManyTo_001 29517 5.83 3.36 7.16 41 TR_MAX_INTL_RELAY 27940 9.84 15.57 6.77 42 XM_DKIMWhitelistDomains 27899 4.41 0.02 6.76 43 TR_XM_DK_Bayes 25921 4.22 0.35 6.29 44 TR_XM_DK_Bayes1 25504 4.15 0.35 6.18 45 HTML_IMAGE_RATIO_02 25157 6.73 7.91 6.10 46 LOTS_OF_MONEY 24432 8.01 11.92 5.92 47 XM_DK_Undo_02 24058 19.41 44.76 5.83 48 RCVD_IN_VALIDITY_SAFE 23758 4.58 2.39 5.76 49 MIME_QP_LONG_LINE 23342 4.54 2.44 5.66 50 T_TooManySym_01 23144 4.53 2.52 5.61 51 XM_B_SpammyWords3 22767 8.01 12.66 5.52 52 TR_XM_DK_Bayes2 22160 3.60 0.30 5.37 53 XM_H_Long_From01 22053 5.74 6.48 5.35 54 XM_B_Phish_Phrases 21320 6.05 7.68 5.17 55 RCVD_IN_MSPIKE_H4 21195 4.49 3.29 5.14 56 HTML_IMAGE_RATIO_04 21054 5.11 5.11 5.10 57 BAYES_40 20887 3.81 1.47 5.06 58 XMStrtUSub 20091 4.86 4.84 4.87 59 MPART_ALT_DIFF 19756 5.37 6.46 4.79 60 ANY_BOUNCE_MESSAGE 19630 3.27 0.50 4.76 61 BOUNCE_MESSAGE 19628 3.27 0.50 4.76 62 RCVD_IN_VALIDITY_CERTIFIED 19619 3.56 1.32 4.76 63 XM_H_GMP 18411 4.68 5.08 4.46 64 BAYES_80 17163 6.19 9.98 4.16 65 BAYES_99 17080 13.20 30.10 4.14 66 TR_XM_SpammyWords4 16942 6.36 10.55 4.11 67 RELAYCOUNTRY_META 16518 7.17 13.09 4.01 68 FSL_BULK_SIG 16335 5.50 8.36 3.96 69 RCVD_IN_IADB_LISTED 16187 3.24 1.96 3.92 70 BAYES_20 16064 2.89 1.00 3.90 71 XM_PDF 15430 2.61 0.49 3.74 72 RCVD_IN_IADB_SPF 14512 2.83 1.54 3.52 73 XMNumbers 14144 3.38 3.28 3.43 74 XM_UncommonTLD01 13896 3.79 4.58 3.37 75 BAYES_999 13274 10.11 22.97 3.22 76 RCVD_IN_IADB_SENDERID 13176 2.55 1.33 3.19 77 TM2_M_VERY_LONG_WORD 13036 3.42 3.89 3.16 78 HTML_IMAGE_RATIO_06 12970 3.25 3.43 3.14 79 XMSubMetaSx_00 12798 3.87 5.29 3.10 80 T_REMOTE_IMAGE 12785 2.76 2.12 3.10 81 SUBJ_ALL_CAPS 12646 3.91 5.49 3.07 82 RCVD_IN_IADB_DK 12618 2.47 1.38 3.06 83 MAILING_LIST_MULTI 12351 2.58 1.79 2.99 84 BOTNET_IPINHOSTNAME 12307 6.03 11.71 2.98 85 MIME_HTML_MOSTLY 11177 3.32 4.47 2.71 86 XM_Body_Dirty_Words 11057 3.15 4.03 2.68 87 TR_XM_SpammyWords5 10824 3.84 6.11 2.62 88 XM_B_SpammyTLD 10776 3.78 5.96 2.61 89 T_TooManySym_02 10774 1.96 0.75 2.61 90 BAYES_95 10772 3.56 5.32 2.61 91 FROM_EXCESS_BASE64 10336 2.22 1.69 2.51 92 MIME_HTML_ONLY_MULTI 10254 2.58 2.76 2.49 93 RCVD_IN_IADB_VOUCHED 9882 2.02 1.33 2.40 94 TR_XM_DKIM_Undo 9526 11.30 28.07 2.31 95 HTML_IMAGE_RATIO_08 9187 2.44 2.84 2.23 96 TR_XM_SpammyRelay 9177 4.77 9.53 2.23 97 TooManyTo_002 9148 1.57 0.37 2.22 98 TR_XM_UnparsRelay 8958 6.25 13.86 2.17 99 HTML_MIME_NO_HTML_TAG 8908 1.78 1.06 2.16 100 XM_DK_Undo_01 8613 1.92 1.62 2.09 101 DKIM_INVALID 8597 2.94 4.54 2.08 102 UNTRUSTED_Relay 8594 3.20 5.30 2.08 103 BAYES_05 8257 1.46 0.46 2.00 104 XM_CamelCaseFrm001 8010 2.38 3.21 1.94 105 TR_XM_PhishingBody 7991 2.98 4.92 1.94 106 TM2_M_URI_OPT_OUT 7800 2.10 2.48 1.89 107 TO_MALFORMED 7470 1.19 0.03 1.81 108 XM_B_URI_Unicode 7164 2.20 3.06 1.74 109 INVALID_MSGID 7150 1.18 0.15 1.73 110 RCVD_IN_IADB_OPTIN 7045 1.42 0.89 1.71 111 KHOP_HELO_FCRDNS 7006 1.62 1.47 1.70 112 T_XMDrugObfuBody_08 6946 1.90 2.31 1.68 113 T_XMDrugObfuBody_14 6843 2.31 3.52 1.66 114 RCVD_IN_MSPIKE_BL 6682 3.43 6.81 1.62 115 XMSubMetaI_00 6549 2.02 2.82 1.59 116 TR_XM_MSPIKECOMBO 6528 3.39 6.77 1.58 117 XM_SendGrid 6489 1.50 1.35 1.57 118 T_XMHurry_00 6327 2.32 3.78 1.53 119 XM_UB50 6309 1.88 2.55 1.53 120 XMStockSpam_06 6021 2.04 3.11 1.46 121 XMBrknScrpt_02 5931 1.64 2.01 1.44 122 URI_NOVOWEL 5808 1.42 1.45 1.41 123 TooManyTo_003 5714 0.99 0.26 1.39 124 TR_Symld_Words 5577 1.26 1.08 1.35 125 HELO_NODOT 5561 1.03 0.44 1.35 126 HELO_NO_DOMAIN 5558 1.03 0.43 1.35 127 XM_B_Unsub2 5451 1.78 2.63 1.32 128 XMDiploma_00 5413 1.80 2.70 1.31 129 IN_HORDE_ADDRESS_BOOK 5411 0.87 0.05 1.31 130 RCVD_IN_MSPIKE_L3 5379 2.35 4.30 1.30 131 XM_B_Investor 5284 2.14 3.75 1.28 132 XM_GoogleGroups 5214 1.15 0.92 1.26 133 XM_ProductURIs 5044 1.65 2.45 1.22 134 TR_DCC_Bayes_99 5026 8.44 21.92 1.22 135 MAY_BE_FORGED 4953 0.79 0.01 1.20 136 XMSexyCombo_05 4886 1.81 2.98 1.18 137 TR_XM_DK_SendGrid 4718 1.06 0.91 1.14 138 MIME_CHARSET_FARAWAY 4713 0.85 0.29 1.14 139 URI_HEX 4677 1.27 1.51 1.13 140 RCVD_IN_BL_SPAMCOP_NET 4456 5.69 14.29 1.08 141 XM_B_SpammyWords4 4444 1.60 2.56 1.08 142 T_TooManySym_03 4414 0.77 0.21 1.07 143 XM_SPF_SoftFail 4343 1.62 2.68 1.05 144 XMBdyGiftCard01 4264 1.17 1.44 1.03 145 TooManyTo_004 4212 0.75 0.23 1.02 146 BOTNET 4149 3.76 8.89 1.01 147 XMCapTrack 3959 0.82 0.57 0.96 148 CHARSET_FARAWAY_HEADER 3795 0.62 0.07 0.92 149 LOW_PRICE 3687 1.26 1.94 0.89 150 XM_ShortIntro_01 3528 0.75 0.54 0.86 151 RELAYCOUNTRY_GB 3445 0.82 0.80 0.84 152 T_XMDrugObfuBody_00 3418 0.99 1.29 0.83 153 TooManyTo_005 3375 0.60 0.19 0.82 154 XMGappySubj_01 3366 0.59 0.18 0.82 155 DKIM_ADSP_CUSTOM_MED 3219 0.80 0.82 0.78 156 TVD_RCVD_IP 3207 0.84 0.95 0.78 157 TR_XM_SpammyWords3 3175 1.95 4.15 0.77 158 T_FILL_THIS_FORM_SHORT 3172 1.06 1.59 0.77 159 XMLngstWrd_00 3155 0.60 0.29 0.76 160 XM_B_COPY_HTML 3060 0.95 1.35 0.74 161 XM_H_Long_From02 3054 0.92 1.27 0.74 162 TR_LOTS_OF_MONEY3 3032 1.32 2.40 0.74 163 TVD_SPACE_RATIO 2994 0.54 0.20 0.73 164 XMSubMetaSxObfu_03 2982 0.91 1.26 0.72 165 TR_XM_Base64_M1 2954 0.69 0.65 0.72 166 RELAYCOUNTRY_CA 2928 1.89 4.08 0.71 167 SpammyFromTLD_01 2836 0.80 1.00 0.69 168 XMGenDplmaNmb 2777 0.91 1.35 0.67 169 XMPhish30 2712 1.13 2.02 0.66 170 XM_OfRef6 2691 1.29 2.49 0.65 171 HTTPS_HTTP_MISMATCH 2689 0.74 0.91 0.65 172 XMBSHREFv2 2613 0.52 0.30 0.63 173 T_OBFU_PDF_ATTACH 2607 0.45 0.10 0.63 174 THIS_AD 2570 1.17 2.20 0.62 175 XM_B_DNDMA 2551 0.83 1.23 0.62 176 TR_XM_SpammyWords2 2547 3.61 9.18 0.62 177 URI_TRY_3LD 2512 0.77 1.07 0.61 178 MPART_ALT_DIFF_COUNT 2469 1.12 2.08 0.60 179 XM_H_PHPMailer 2407 0.47 0.27 0.58 180 T_Symld_Words_02 2323 0.62 0.74 0.56 181 RELAYCOUNTRY_AU 2281 1.32 2.76 0.55 182 TR_MetaPhish_Combo_01 2193 0.60 0.72 0.53 183 FORGED_GMAIL_RCVD 2193 0.54 0.56 0.53 184 XMBody_17 2191 1.13 2.24 0.53 185 TRACKER_ID 2097 0.38 0.13 0.51 186 TR_XM_PHPDW 2037 0.50 0.52 0.49 187 TR_XM_PHPForged 2035 0.51 0.53 0.49 188 HTML_TAG_BALANCE_BODY 2022 0.56 0.70 0.49 189 TR_XM_FormFill2 2021 0.50 0.51 0.49 190 XMGappySubj_02 2002 0.34 0.06 0.49 191 XM_H_PHPOS 1996 0.49 0.50 0.48 192 XMClaimOffer 1898 0.73 1.23 0.46 193 XMPhish14 1893 0.56 0.75 0.46 194 FROM_GOV_DKIM_AU 1889 0.34 0.11 0.46 195 XMNoVowels 1827 0.44 0.44 0.44 196 XM_S_SpammyWords 1816 0.60 0.91 0.44 197 TR_XM_Spammywords 1816 0.60 0.91 0.44 198 T_TVD_MIME_NO_HEADERS 1791 0.29 0.03 0.43 199 NML_ADSP_CUSTOM_MED 1730 0.50 0.66 0.42 200 XMBody_95 1703 0.33 0.18 0.41 ----------------------------------------------------------------------