Email: 477699 Autolearn: 0 AvgScore: 3.75 AvgScanTime: 1.27 sec Spam: 141478 Autolearn: 0 AvgScore: 13.27 AvgScanTime: 1.40 sec Ham: 336221 Autolearn: 0 AvgScore: -0.25 AvgScanTime: 1.21 sec Time Spent Running SA: 168.68 hours Time Spent Processing Spam: 55.21 hours Time Spent Processing Ham: 113.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136301 88.48 96.34 85.18 2 DKIM_SIGNED 127517 78.04 90.13 72.95 3 XM_DK_Pass 121920 75.84 86.18 71.50 4 DKIM_VALID 119999 74.68 84.82 70.41 5 XM_B_Unicode 119129 72.16 84.20 67.10 6 RELAYCOUNTRY_US 114499 79.80 80.93 79.33 7 DCC_CHECK 102323 43.72 72.32 31.69 8 XM_B_SpammyWords 101427 51.15 71.69 42.51 9 XMListUnsubscribeExists 99777 53.92 70.52 46.94 10 DKIM_VALID_AU 88829 58.30 62.79 56.41 11 XM_B_Unicode3 63778 39.62 45.08 37.33 12 XM_DK_Undo_02 62266 16.86 44.01 5.44 13 XM_B_SpammyWords2 58122 24.56 41.08 17.61 14 LOC_TINY_FONT_1 57682 28.95 40.77 23.98 15 BAYES_50 53389 52.35 37.74 58.50 16 HTML_FONT_LOW_CONTRAST 51641 29.72 36.50 26.87 17 BAYES_99 49408 13.40 34.92 4.34 18 TR_XM_DKIM_Undo 47006 11.30 33.22 2.07 19 FVGT_m_MULTI_ODD 45948 27.31 32.48 25.14 20 RCVD_IN_MSPIKE_H2 44815 29.25 31.68 28.23 21 DKIM_VALID_EF 44201 29.85 31.24 29.26 22 MIME_HTML_ONLY 43407 22.78 30.68 19.45 23 T_KAM_HTML_FONT_INVALID 40472 22.27 28.61 19.60 24 DCC_CHECK_NEGATIVE 39132 56.24 27.66 68.27 25 BAYES_999 38672 10.43 27.33 3.32 26 TR_DCC_Bayes_99 34780 8.29 24.58 1.44 27 T_TM2_M_HEADER_IN_MSG 32196 27.91 22.76 30.08 28 XMSubLong 32126 22.50 22.71 22.41 29 TR_XM_DK_Unsub 30268 15.76 21.39 13.38 30 RELAYCOUNTRY_META 27786 8.75 19.64 4.16 31 XM_Multi_Part_URI 27687 15.22 19.57 13.38 32 XM_B_Unsub 22919 10.30 16.20 7.81 33 TR_XM_BayesUnsub 22216 9.00 15.70 6.19 34 TR_MAX_INTL_RELAY 22214 9.40 15.70 6.75 35 TR_XM_SpammyRelay 21257 6.02 15.02 2.23 36 LOTS_OF_MONEY 21155 9.14 14.95 6.70 37 XM_B_SpammyWords3 20463 7.60 14.46 4.71 38 UNPARSEABLE_RELAY 19762 11.45 13.97 10.40 39 BOTNET_IPINHOSTNAME 19675 6.88 13.91 3.92 40 TR_XM_SpammyWords4 18886 7.11 13.35 4.48 41 TR_XM_SpammyWords2 18548 4.20 13.11 0.45 42 RCVD_IN_BL_SPAMCOP_NET 16959 3.99 11.99 0.62 43 BAYES_80 13958 5.78 9.87 4.06 44 BOTNET 13946 3.73 9.86 1.15 45 RELAYCOUNTRY_CA 13936 3.92 9.85 1.43 46 TR_XM_SPAMCOP 13821 3.15 9.77 0.37 47 XM_Evil_Numbers_Gen 12454 7.84 8.80 7.43 48 FSL_BULK_SIG 12255 5.15 8.66 3.68 49 BAYES_60 11462 8.59 8.10 8.79 50 RCVD_IN_MSPIKE_WL 11070 6.53 7.82 5.99 51 RCVD_IN_MSPIKE_H3 11070 6.53 7.82 5.99 52 XM_Body_Dirty_Words 10716 4.39 7.57 3.05 53 HTML_IMAGE_RATIO_02 10711 5.76 7.57 5.00 54 TR_XM_UnparsRelay 10497 3.23 7.42 1.47 55 XMSubMetaSx_00 9093 5.00 6.43 4.39 56 MPART_ALT_DIFF 9089 3.98 6.42 2.95 57 LotsOfNums_01 9055 7.44 6.40 7.88 58 XMBody_17 8885 2.30 6.28 0.62 59 TooManyTo_001 8815 8.92 6.23 10.05 60 UNTRUSTED_Relay 8788 2.89 6.21 1.49 61 XM_UncommonTLD01 7966 5.07 5.63 4.84 62 BAYES_95 7661 3.50 5.41 2.70 63 XM_SPF_SoftFail 7559 4.67 5.34 4.39 64 DKIM_INVALID 7518 3.36 5.31 2.53 65 XM_B_Phish_Phrases 7322 3.89 5.18 3.35 66 XM_H_GMP 7231 6.32 5.11 6.83 67 XM_H_Long_From01 6928 5.04 4.90 5.10 68 XMSexyCombo_05 6755 3.18 4.77 2.51 69 T_XMDrugObfuBody_14 6062 2.53 4.28 1.79 70 XM_B_Investor 6036 2.32 4.27 1.50 71 HTML_IMAGE_RATIO_04 6017 3.98 4.25 3.86 72 XM_OfRef6 5943 2.12 4.20 1.24 73 MIME_HTML_MOSTLY 5941 2.77 4.20 2.17 74 HTML_IMAGE_RATIO_06 5907 2.78 4.18 2.19 75 TR_XM_PhishingBody 5846 2.28 4.13 1.50 76 TR_XM_SpammyWords5 5802 2.12 4.10 1.29 77 XMStrtUSub 5335 4.27 3.77 4.48 78 T_XMDrugObfuBody_08 5111 2.11 3.61 1.48 79 TR_LOTS_OF_MONEY3 4767 1.41 3.37 0.58 80 MIME_HTML_ONLY_MULTI 4723 2.12 3.34 1.60 81 T_FILL_THIS_FORM_SHORT 4684 1.59 3.31 0.87 82 TM2_M_URI_OPT_OUT 4667 2.22 3.30 1.77 83 RCVD_IN_VALIDITY_SAFE 4653 4.42 3.29 4.89 84 XMNumbers 4630 2.91 3.27 2.76 85 XM_B_SpammyTLD 4560 2.68 3.22 2.45 86 TM2_M_VERY_LONG_WORD 4387 1.93 3.10 1.44 87 HTML_IMAGE_RATIO_08 4341 2.32 3.07 2.01 88 XM_CamelCaseFrm001 4106 2.44 2.90 2.25 89 MIME_QP_LONG_LINE 4100 4.19 2.90 4.73 90 SUBJ_ALL_CAPS 4022 2.13 2.84 1.83 91 XM_B_SpammyWords4 4012 1.36 2.84 0.74 92 XM_UB50 3976 1.46 2.81 0.90 93 RCVD_IN_VALIDITY_CERTIFIED 3961 3.75 2.80 4.15 94 HK_RANDOM_REPLYTO 3929 0.91 2.78 0.13 95 XM_URI_RBL 3865 0.93 2.73 0.17 96 USER_IN_DEF_DKIM_WL 3748 9.98 2.65 13.07 97 TR_XM_BayesRelay 3533 0.74 2.50 0.00 98 XMDiploma_00 3494 1.98 2.47 1.77 99 RELAYCOUNTRY_AU 3291 1.13 2.33 0.63 100 T_TooManySym_01 3150 4.41 2.23 5.32 101 ANY_BOUNCE_MESSAGE 3082 3.72 2.18 4.37 102 BOUNCE_MESSAGE 3080 3.72 2.18 4.37 103 SpammyFromTLD_01 2958 1.22 2.09 0.86 104 T_REMOTE_IMAGE 2909 3.31 2.06 3.84 105 XM_B_Unsub2 2907 1.70 2.05 1.55 106 TR_XM_FormFill 2895 0.63 2.05 0.03 107 FONT_INVIS_LONG_LINE 2790 0.61 1.97 0.03 108 SpammyFromTLD_02 2787 1.44 1.97 1.21 109 FROM_EXCESS_BASE64 2746 1.93 1.94 1.93 110 TR_XM_PHPForged 2706 1.00 1.91 0.61 111 MAILING_LIST_MULTI 2697 2.41 1.91 2.63 112 XMBrknScrpt_02 2663 0.98 1.88 0.60 113 TR_XM_INV_DKIM 2656 0.60 1.88 0.06 114 TR_XM_PHPDW 2655 0.98 1.88 0.60 115 TR_XM_NoHeaderRelay 2583 0.61 1.83 0.10 116 TR_XM_FormFill2 2581 0.97 1.82 0.61 117 XM_DK_Undo_01 2573 1.90 1.82 1.94 118 XM_H_PHPOS 2568 0.95 1.82 0.59 119 XM_H_Undi_Recip 2499 0.66 1.77 0.19 120 XMStockSpam_06 2433 1.41 1.72 1.28 121 URI_HEX 2412 1.25 1.70 1.06 122 URI_TRY_3LD 2267 0.98 1.60 0.71 123 HTML_TAG_BALANCE_BODY 2254 0.79 1.59 0.45 124 HTML_MIME_NO_HTML_TAG 2185 2.03 1.54 2.23 125 AC_BR_BONANZA 2165 0.51 1.53 0.08 126 BAYES_40 2124 3.91 1.50 4.93 127 TR_Symld_Words 2047 1.44 1.45 1.44 128 KHOP_HELO_FCRDNS 2005 1.28 1.42 1.22 129 TR_XM_Undi_RecipCombo2 2000 0.42 1.41 0.01 130 XMGenDplmaNmb 1996 1.08 1.41 0.94 131 RCVD_IN_IADB_LISTED 1974 3.04 1.40 3.73 132 XM_HighProb1 1947 0.41 1.38 0.01 133 ALL_TRUSTED 1931 12.68 1.36 17.44 134 XMReplyNow 1914 0.56 1.35 0.22 135 T_XMHurry_00 1901 0.72 1.34 0.45 136 TR_Mismatch_TLD_02 1872 0.45 1.32 0.08 137 XMSexyCombo_01 1838 0.57 1.30 0.26 138 XMPhish30 1833 0.72 1.30 0.48 139 HTTPS_HTTP_MISMATCH 1820 0.97 1.29 0.83 140 URI_NOVOWEL 1813 1.45 1.28 1.52 141 BOTNET_NORDNS 1803 0.39 1.27 0.01 142 RCVD_IN_IADB_SPF 1791 2.71 1.27 3.32 143 XM_SendGrid 1752 1.36 1.24 1.41 144 T_XMDrugObfuBody_00 1721 0.83 1.22 0.67 145 XMBody_78 1721 0.55 1.22 0.27 146 XMHTML_After_End 1699 0.69 1.20 0.47 147 RCVD_IN_IADB_DK 1688 2.41 1.19 2.93 148 RCVD_IN_IADB_SENDERID 1685 2.46 1.19 3.00 149 TR_XM_InvalidRelay 1680 0.37 1.19 0.03 150 TR_XM_Undi_Recip11 1674 0.37 1.18 0.03 151 TR_MetaPhish_Combo_01 1649 0.89 1.17 0.78 152 DIET_1 1633 0.56 1.15 0.31 153 UNDISC_MONEY 1631 0.34 1.15 0.00 154 T_MONEY_PERCENT 1623 0.50 1.15 0.23 155 TR_LOTS_OF_MONEY2 1623 0.50 1.15 0.23 156 TR_XM_Undi_Recip19 1595 0.39 1.13 0.08 157 TR_XM_Base64_M1 1579 0.75 1.12 0.60 158 XM_DIRTYINTL 1565 0.47 1.11 0.20 159 DKIM_ADSP_CUSTOM_MED 1564 1.02 1.11 0.98 160 TR_XM_Undi_Recip5 1525 0.32 1.08 0.00 161 XMLngstWrd_00 1517 0.79 1.07 0.68 162 XM_B_COPY_HTML 1487 0.71 1.05 0.56 163 MPART_ALT_DIFF_COUNT 1482 0.84 1.05 0.75 164 BAYES_20 1478 2.93 1.04 3.72 165 XMBdyGiftCard01 1470 0.75 1.04 0.62 166 THIS_AD 1468 0.67 1.04 0.51 167 XMPhish14 1440 0.59 1.02 0.41 168 XM_UB99 1423 0.30 1.01 0.00 169 XM_Nigeria_01 1415 0.33 1.00 0.04 170 XM_H_Long_From02 1376 1.03 0.97 1.05 171 NML_ADSP_CUSTOM_MED 1359 0.75 0.96 0.67 172 XM_B_DNDMA 1320 0.56 0.93 0.41 173 TooManyTo_002 1313 2.74 0.93 3.50 174 TR_XM_RelayPhish 1310 0.32 0.93 0.07 175 RDNS_DYNAMIC 1289 0.53 0.91 0.37 176 T_STY_INVIS_DIRECT 1289 0.42 0.91 0.21 177 FILL_THIS_FORM 1270 0.82 0.90 0.79 178 XM_B_Phish66 1252 0.49 0.88 0.32 179 RCVD_IN_VALIDITY_RPBL 1239 0.28 0.88 0.03 180 XM_S_SpammyWords 1229 0.44 0.87 0.25 181 TR_XM_Spammywords 1229 0.44 0.87 0.25 182 PLING_QUERY 1192 0.52 0.84 0.38 183 T_Symld_Words_02 1190 0.57 0.84 0.45 184 FORGED_GMAIL_RCVD 1180 0.62 0.83 0.54 185 XM_UB60 1176 0.29 0.83 0.07 186 LongTLD 1171 0.50 0.83 0.36 187 RELAYCOUNTRY_FR 1169 0.41 0.83 0.23 188 XM_B_COVIDMETA 1166 0.40 0.82 0.22 189 XM_BadFromFormat 1156 0.31 0.82 0.09 190 XM_H_PHPMailer 1156 0.74 0.82 0.71 191 TM2_M_A_HREF_HREF 1149 0.39 0.81 0.22 192 HTML_FONT_FACE_BAD 1146 0.52 0.81 0.39 193 BAYES_00 1145 7.25 0.81 9.96 194 XM_OfRef7 1138 0.35 0.80 0.17 195 TM2_M_OBFU_COMMENT 1128 0.46 0.80 0.32 196 PDS_OTHER_BAD_TLD 1125 0.32 0.80 0.12 197 TR_XM_Base64_L1 1121 0.33 0.79 0.13 198 TooManyTo_003 1114 1.40 0.79 1.66 199 MONEY_FORM 1105 0.24 0.78 0.01 200 RELAYCOUNTRY_GB 1057 0.53 0.75 0.44 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286384 88.48 96.34 85.18 2 RELAYCOUNTRY_US 266716 79.80 80.93 79.33 3 DKIM_SIGNED 245264 78.04 90.13 72.95 4 XM_DK_Pass 240389 75.84 86.18 71.50 5 DKIM_VALID 236747 74.68 84.82 70.41 6 DCC_CHECK_NEGATIVE 229537 56.24 27.66 68.27 7 XM_B_Unicode 225602 72.16 84.20 67.10 8 BAYES_50 196706 52.35 37.74 58.50 9 DKIM_VALID_AU 189673 58.30 62.79 56.41 10 XMListUnsubscribeExists 157808 53.92 70.52 46.94 11 XM_B_SpammyWords 142930 51.15 71.69 42.51 12 XM_B_Unicode3 125504 39.62 45.08 37.33 13 DCC_CHECK 106536 43.72 72.32 31.69 14 T_TM2_M_HEADER_IN_MSG 101144 27.91 22.76 30.08 15 DKIM_VALID_EF 98377 29.85 31.24 29.26 16 RCVD_IN_MSPIKE_H2 94907 29.25 31.68 28.23 17 HTML_FONT_LOW_CONTRAST 90343 29.72 36.50 26.87 18 FVGT_m_MULTI_ODD 84515 27.31 32.48 25.14 19 LOC_TINY_FONT_1 80612 28.95 40.77 23.98 20 XMSubLong 75345 22.50 22.71 22.41 21 T_KAM_HTML_FONT_INVALID 65914 22.27 28.61 19.60 22 MIME_HTML_ONLY 65399 22.78 30.68 19.45 23 XM_B_SpammyWords2 59196 24.56 41.08 17.61 24 ALL_TRUSTED 58625 12.68 1.36 17.44 25 TR_XM_DK_Unsub 45002 15.76 21.39 13.38 26 XM_Multi_Part_URI 44997 15.22 19.57 13.38 27 USER_IN_DEF_DKIM_WL 43941 9.98 2.65 13.07 28 UNPARSEABLE_RELAY 34955 11.45 13.97 10.40 29 TooManyTo_001 33787 8.92 6.23 10.05 30 BAYES_00 33496 7.25 0.81 9.96 31 BAYES_60 29563 8.59 8.10 8.79 32 LotsOfNums_01 26488 7.44 6.40 7.88 33 XM_B_Unsub 26267 10.30 16.20 7.81 34 XM_DKIMWhitelistDomains 25363 5.33 0.08 7.54 35 XM_Evil_Numbers_Gen 24982 7.84 8.80 7.43 36 IN_ZIMBRA_NJ_WHITELIST 23694 4.99 0.09 7.05 37 XM_H_GMP 22964 6.32 5.11 6.83 38 TR_MAX_INTL_RELAY 22711 9.40 15.70 6.75 39 LOTS_OF_MONEY 22526 9.14 14.95 6.70 40 TR_XM_DK_Bayes 22004 4.77 0.56 6.54 41 TR_XM_DK_Bayes1 21651 4.69 0.54 6.44 42 TR_XM_BayesUnsub 20798 9.00 15.70 6.19 43 RCVD_IN_MSPIKE_H3 20124 6.53 7.82 5.99 44 RCVD_IN_MSPIKE_WL 20124 6.53 7.82 5.99 45 TR_XM_DK_Bayes2 18610 4.01 0.40 5.54 46 XM_DK_Undo_02 18286 16.86 44.01 5.44 47 XM_PDF 17951 3.93 0.60 5.34 48 T_TooManySym_01 17897 4.41 2.23 5.32 49 XM_H_Long_From01 17159 5.04 4.90 5.10 50 HTML_IMAGE_RATIO_02 16821 5.76 7.57 5.00 51 BAYES_40 16568 3.91 1.50 4.93 52 RCVD_IN_VALIDITY_SAFE 16455 4.42 3.29 4.89 53 XM_UncommonTLD01 16271 5.07 5.63 4.84 54 MIME_QP_LONG_LINE 15897 4.19 2.90 4.73 55 XM_B_SpammyWords3 15845 7.60 14.46 4.71 56 TR_XM_SpammyWords4 15069 7.11 13.35 4.48 57 XMStrtUSub 15059 4.27 3.77 4.48 58 XMSubMetaSx_00 14769 5.00 6.43 4.39 59 XM_SPF_SoftFail 14757 4.67 5.34 4.39 60 ANY_BOUNCE_MESSAGE 14706 3.72 2.18 4.37 61 BOUNCE_MESSAGE 14703 3.72 2.18 4.37 62 BAYES_99 14594 13.40 34.92 4.34 63 RELAYCOUNTRY_META 13996 8.75 19.64 4.16 64 RCVD_IN_VALIDITY_CERTIFIED 13953 3.75 2.80 4.15 65 BAYES_80 13634 5.78 9.87 4.06 66 BOTNET_IPINHOSTNAME 13167 6.88 13.91 3.92 67 HTML_IMAGE_RATIO_04 12987 3.98 4.25 3.86 68 T_REMOTE_IMAGE 12915 3.31 2.06 3.84 69 RCVD_IN_IADB_LISTED 12551 3.04 1.40 3.73 70 BAYES_20 12521 2.93 1.04 3.72 71 FSL_BULK_SIG 12362 5.15 8.66 3.68 72 TooManyTo_002 11767 2.74 0.93 3.50 73 XM_B_Phish_Phrases 11267 3.89 5.18 3.35 74 BAYES_999 11158 10.43 27.33 3.32 75 RCVD_IN_IADB_SPF 11158 2.71 1.27 3.32 76 XM_Body_Dirty_Words 10258 4.39 7.57 3.05 77 RCVD_IN_IADB_SENDERID 10087 2.46 1.19 3.00 78 BAYES_05 10069 2.29 0.60 2.99 79 MPART_ALT_DIFF 9914 3.98 6.42 2.95 80 RCVD_IN_IADB_DK 9835 2.41 1.19 2.93 81 XMNumbers 9294 2.91 3.27 2.76 82 BAYES_95 9070 3.50 5.41 2.70 83 MAILING_LIST_MULTI 8826 2.41 1.91 2.63 84 T_TooManySym_02 8824 2.04 0.64 2.62 85 DKIM_INVALID 8517 3.36 5.31 2.53 86 XMSexyCombo_05 8453 3.18 4.77 2.51 87 XM_B_SpammyTLD 8229 2.68 3.22 2.45 88 RCVD_IN_IADB_VOUCHED 7698 1.79 0.59 2.29 89 XM_CamelCaseFrm001 7562 2.44 2.90 2.25 90 TR_XM_SpammyRelay 7508 6.02 15.02 2.23 91 HTML_MIME_NO_HTML_TAG 7506 2.03 1.54 2.23 92 HTML_IMAGE_RATIO_06 7374 2.78 4.18 2.19 93 MIME_HTML_MOSTLY 7300 2.77 4.20 2.17 94 INVALID_MSGID 7079 1.56 0.27 2.11 95 TR_XM_DKIM_Undo 6969 11.30 33.22 2.07 96 HELO_NODOT 6922 1.56 0.37 2.06 97 HELO_NO_DOMAIN 6919 1.56 0.37 2.06 98 HTML_IMAGE_RATIO_08 6764 2.32 3.07 2.01 99 TO_MALFORMED 6725 1.43 0.09 2.00 100 MSGID_NOFQDN1 6612 1.42 0.14 1.97 101 XM_DK_Undo_01 6514 1.90 1.82 1.94 102 FROM_EXCESS_BASE64 6479 1.93 1.94 1.93 103 SUBJ_ALL_CAPS 6148 2.13 2.84 1.83 104 T_XMDrugObfuBody_14 6003 2.53 4.28 1.79 105 XMDiploma_00 5966 1.98 2.47 1.77 106 TM2_M_URI_OPT_OUT 5936 2.22 3.30 1.77 107 TooManyTo_003 5589 1.40 0.79 1.66 108 TVD_RCVD_IP 5522 1.37 0.72 1.64 109 MIME_HTML_ONLY_MULTI 5381 2.12 3.34 1.60 110 RCVD_IN_IADB_OPTIN 5327 1.24 0.42 1.58 111 XM_B_Unsub2 5210 1.70 2.05 1.55 112 URI_NOVOWEL 5120 1.45 1.28 1.52 113 XM_B_Investor 5054 2.32 4.27 1.50 114 TR_XM_PhishingBody 5027 2.28 4.13 1.50 115 UNTRUSTED_Relay 5003 2.89 6.21 1.49 116 T_XMDrugObfuBody_08 4962 2.11 3.61 1.48 117 TR_XM_UnparsRelay 4950 3.23 7.42 1.47 118 TR_Symld_Words 4838 1.44 1.45 1.44 119 TM2_M_VERY_LONG_WORD 4828 1.93 3.10 1.44 120 TR_DCC_Bayes_99 4825 8.29 24.58 1.44 121 RELAYCOUNTRY_CA 4804 3.92 9.85 1.43 122 IN_HORDE_ADDRESS_BOOK 4754 1.02 0.07 1.41 123 XM_SendGrid 4744 1.36 1.24 1.41 124 XMGappySubj_01 4355 0.96 0.16 1.30 125 TR_XM_SpammyWords5 4346 2.12 4.10 1.29 126 XMStockSpam_06 4303 1.41 1.72 1.28 127 TooManyTo_004 4237 1.10 0.72 1.26 128 XM_OfRef6 4178 2.12 4.20 1.24 129 KHOP_HELO_FCRDNS 4105 1.28 1.42 1.22 130 SpammyFromTLD_02 4070 1.44 1.97 1.21 131 XMCapTrack 4063 0.96 0.38 1.21 132 TVD_SPACE_RATIO 4019 0.87 0.09 1.20 133 XM_GoogleGroups 3969 0.98 0.51 1.18 134 XMBSHREFv2 3954 0.93 0.34 1.18 135 XMBody_95 3882 0.87 0.20 1.15 136 BOTNET 3876 3.73 9.86 1.15 137 XM_B_FormFill 3848 0.82 0.05 1.14 138 URI_HEX 3549 1.25 1.70 1.06 139 XM_H_Long_From02 3523 1.03 0.97 1.05 140 TooManyTo_005 3519 0.94 0.68 1.05 141 DKIM_ADSP_CUSTOM_MED 3287 1.02 1.11 0.98 142 XMGenDplmaNmb 3148 1.08 1.41 0.94 143 T_TooManySym_03 3087 0.70 0.18 0.92 144 TR_XM_DK_SendGrid 3074 0.85 0.70 0.91 145 XM_UB50 3010 1.46 2.81 0.90 146 XMGappySubj_02 2934 0.63 0.06 0.87 147 T_FILL_THIS_FORM_SHORT 2922 1.59 3.31 0.87 148 SpammyFromTLD_01 2884 1.22 2.09 0.86 149 XMSubMetaSxObfu_03 2824 0.78 0.64 0.84 150 HTTPS_HTTP_MISMATCH 2799 0.97 1.29 0.83 151 FILL_THIS_FORM 2668 0.82 0.90 0.79 152 TR_MetaPhish_Combo_01 2616 0.89 1.17 0.78 153 XM_ShortIntro_01 2525 0.69 0.54 0.75 154 MPART_ALT_DIFF_COUNT 2510 0.84 1.05 0.75 155 XM_B_SpammyWords4 2475 1.36 2.84 0.74 156 T_OBFU_PDF_ATTACH 2414 0.54 0.10 0.72 157 URI_TRY_3LD 2400 0.98 1.60 0.71 158 XM_H_PHPMailer 2395 0.74 0.82 0.71 159 XMLngstWrd_00 2274 0.79 1.07 0.68 160 T_XMDrugObfuBody_00 2258 0.83 1.22 0.67 161 NML_ADSP_CUSTOM_MED 2246 0.75 0.96 0.67 162 SHORT_HELO_AND_INLINE_IMAGE 2134 0.46 0.04 0.63 163 RELAYCOUNTRY_AU 2121 1.13 2.33 0.63 164 XMBody_17 2096 2.30 6.28 0.62 165 XMBdyGiftCard01 2095 0.75 1.04 0.62 166 RCVD_IN_BL_SPAMCOP_NET 2083 3.99 11.99 0.62 167 TR_XM_FormFill2 2056 0.97 1.82 0.61 168 TR_XM_PHPForged 2050 1.00 1.91 0.61 169 TR_XM_PHPDW 2024 0.98 1.88 0.60 170 XMBrknScrpt_02 2020 0.98 1.88 0.60 171 TR_XM_Base64_M1 2011 0.75 1.12 0.60 172 XM_H_PHPOS 1987 0.95 1.82 0.59 173 XMNoVowels 1984 0.53 0.38 0.59 174 XMSubMetaSx_01 1983 0.52 0.35 0.59 175 XM_ProductURIs 1981 0.63 0.73 0.59 176 USER_IN_WELCOMELIST 1960 0.41 0.00 0.58 177 USER_IN_WHITELIST 1960 0.41 0.00 0.58 178 TR_LOTS_OF_MONEY3 1955 1.41 3.37 0.58 179 XM_B_COPY_HTML 1882 0.71 1.05 0.56 180 FORGED_GMAIL_RCVD 1802 0.62 0.83 0.54 181 GMD_PDF_EMPTY_BODY 1733 0.38 0.06 0.52 182 HTML_IMAGE_ONLY_32 1721 0.40 0.15 0.51 183 THIS_AD 1714 0.67 1.04 0.51 184 XMMoneyMeta_00 1707 0.58 0.74 0.51 185 XMPhish30 1622 0.72 1.30 0.48 186 RCVD_IN_PSBL 1617 0.51 0.57 0.48 187 HTML_IMAGE_ONLY_28 1609 0.44 0.36 0.48 188 XMOemUri 1592 0.42 0.28 0.47 189 XMHTML_After_End 1585 0.69 1.20 0.47 190 TM2_M_BODY_EMPTY 1574 0.37 0.15 0.47 191 FROM_GOV_DKIM_AU 1556 0.36 0.12 0.46 192 TO_NO_BRKTS_HTML_ONLY 1525 0.43 0.38 0.45 193 TR_XM_SpammyWords2 1525 4.20 13.11 0.45 194 T_XMHurry_00 1515 0.72 1.34 0.45 195 T_Symld_Words_02 1512 0.57 0.84 0.45 196 XMSubMetaSxObfu_02 1502 0.39 0.27 0.45 197 HTML_TAG_BALANCE_BODY 1500 0.79 1.59 0.45 198 RELAYCOUNTRY_GB 1487 0.53 0.75 0.44 199 XMSubMetaI_00 1441 0.52 0.74 0.43 200 XMDateMe_00 1434 0.42 0.40 0.43 ----------------------------------------------------------------------