Email: 498858 Autolearn: 0 AvgScore: 2.81 AvgScanTime: 1.38 sec Spam: 144006 Autolearn: 0 AvgScore: 14.90 AvgScanTime: 1.57 sec Ham: 354852 Autolearn: 0 AvgScore: -2.10 AvgScanTime: 1.30 sec Time Spent Running SA: 191.50 hours Time Spent Processing Spam: 62.92 hours Time Spent Processing Ham: 128.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134943 90.17 93.71 88.73 2 DKIM_SIGNED 127773 73.49 88.73 67.30 3 XM_DK_Pass 121988 71.42 84.71 66.02 4 RELAYCOUNTRY_US 120562 83.62 83.72 83.58 5 DKIM_VALID 120444 70.37 83.64 64.98 6 XM_B_Unicode 117343 75.35 81.48 72.87 7 DCC_CHECK 108602 46.21 75.41 34.35 8 XM_B_SpammyWords 100272 50.83 69.63 43.20 9 XMListUnsubscribeExists 100006 50.07 69.45 42.20 10 DKIM_VALID_AU 96784 56.42 67.21 52.04 11 XM_B_Unicode3 70322 45.11 48.83 43.60 12 LOC_TINY_FONT_1 68594 30.18 47.63 23.09 13 XM_B_SpammyWords2 61131 23.73 42.45 16.13 14 BAYES_50 60784 53.47 42.21 58.05 15 XM_DK_Undo_02 56073 14.32 38.94 4.33 16 HTML_FONT_LOW_CONTRAST 53393 28.55 37.08 25.09 17 RCVD_IN_MSPIKE_H2 53187 32.55 36.93 30.77 18 FVGT_m_MULTI_ODD 45862 25.06 31.85 22.30 19 T_KAM_HTML_FONT_INVALID 44930 21.59 31.20 17.69 20 BAYES_99 41617 10.27 28.90 2.71 21 DKIM_VALID_EF 40577 27.00 28.18 26.53 22 TR_XM_DKIM_Undo 38948 8.91 27.05 1.55 23 XMSubLong 38442 24.67 26.69 23.85 24 MIME_HTML_ONLY 38442 23.95 26.69 22.83 25 DCC_CHECK_NEGATIVE 32631 53.21 22.66 65.60 26 T_TM2_M_HEADER_IN_MSG 31758 26.34 22.05 28.08 27 BAYES_999 31693 7.77 22.01 1.99 28 XM_Multi_Part_URI 31294 14.84 21.73 12.04 29 TR_DCC_Bayes_99 30127 6.58 20.92 0.76 30 TR_XM_DK_Unsub 27847 13.52 19.34 11.16 31 XM_B_Unsub 23090 10.09 16.03 7.68 32 XM_B_SpammyWords3 22779 7.30 15.82 3.84 33 TR_XM_BayesUnsub 22124 8.56 15.36 5.79 34 TR_MAX_INTL_RELAY 21936 7.75 15.23 4.71 35 UNPARSEABLE_RELAY 21918 11.46 15.22 9.94 36 RELAYCOUNTRY_META 21379 6.77 14.85 3.50 37 LOTS_OF_MONEY 19091 7.39 13.26 5.01 38 TR_XM_SpammyWords4 17154 5.84 11.91 3.38 39 BOTNET_IPINHOSTNAME 16535 5.34 11.48 2.84 40 TR_XM_SpammyRelay 15690 4.34 10.90 1.68 41 TR_XM_SpammyWords2 14733 3.12 10.23 0.24 42 BOTNET 14231 3.75 9.88 1.26 43 FSL_BULK_SIG 13872 7.37 9.63 6.45 44 XM_Evil_Numbers_Gen 13792 9.20 9.58 9.05 45 BAYES_80 13170 4.72 9.15 2.92 46 RCVD_IN_BL_SPAMCOP_NET 13034 3.30 9.05 0.97 47 XM_Body_Dirty_Words 12292 4.31 8.54 2.60 48 XM_B_Phish_Phrases 12107 6.09 8.41 5.14 49 BAYES_60 11720 7.62 8.14 7.41 50 LotsOfNums_01 11659 7.42 8.10 7.14 51 TR_XM_UnparsRelay 11032 3.10 7.66 1.24 52 TR_XM_SPAMCOP 10718 2.64 7.44 0.69 53 XM_H_Long_From01 9564 5.30 6.64 4.76 54 XM_UncommonTLD01 9344 4.51 6.49 3.71 55 XMSubMetaSx_00 9045 3.97 6.28 3.03 56 HTML_IMAGE_RATIO_02 8967 4.56 6.23 3.89 57 MPART_ALT_DIFF 8481 8.25 5.89 9.21 58 XM_H_GMP 8451 5.43 5.87 5.25 59 XM_B_PhoneNumber 8278 8.13 5.75 9.10 60 BAYES_95 8210 2.91 5.70 1.78 61 UNTRUSTED_Relay 8205 2.56 5.70 1.29 62 RELAYCOUNTRY_CA 8010 2.41 5.56 1.13 63 TR_XM_PhishingBody 7548 2.78 5.24 1.78 64 DKIM_INVALID 7329 3.12 5.09 2.32 65 XM_B_Investor 6863 2.70 4.77 1.86 66 XM_B_SpammyTLD 6725 2.97 4.67 2.28 67 TooManyTo_001 6600 7.09 4.58 8.11 68 XMSexyCombo_05 6597 2.04 4.58 1.00 69 HTML_IMAGE_RATIO_04 6348 11.08 4.41 13.79 70 TM2_M_VERY_LONG_WORD 6303 2.44 4.38 1.65 71 RCVD_IN_MSPIKE_WL 6128 4.57 4.26 4.70 72 RCVD_IN_MSPIKE_H3 6128 4.57 4.26 4.70 73 T_XMDrugObfuBody_14 5940 2.39 4.12 1.68 74 XMStrtUSub 5791 8.36 4.02 10.12 75 MIME_HTML_ONLY_MULTI 5555 6.55 3.86 7.64 76 TR_XM_SpammyWords5 5488 1.97 3.81 1.22 77 XM_SPF_SoftFail 5037 2.02 3.50 1.41 78 HTML_IMAGE_RATIO_06 4864 4.25 3.38 4.61 79 XMNumbers 4837 2.79 3.36 2.56 80 XMDiploma_00 4810 2.20 3.34 1.74 81 XM_CamelCaseFrm001 4797 2.26 3.33 1.82 82 RCVD_IN_VALIDITY_RPBL 4479 0.92 3.11 0.04 83 MIME_HTML_MOSTLY 4197 2.23 2.91 1.95 84 XM_OfRef6 4188 1.53 2.91 0.96 85 XM_B_URI_Unicode 4046 2.22 2.81 1.98 86 XM_UB50 4031 1.39 2.80 0.82 87 MIME_QP_LONG_LINE 3982 4.41 2.77 5.08 88 T_XMDrugObfuBody_08 3969 1.68 2.76 1.25 89 HTML_IMAGE_RATIO_08 3955 2.23 2.75 2.01 90 XM_URI_RBL 3947 1.03 2.74 0.33 91 RELAYCOUNTRY_AU 3942 1.17 2.74 0.53 92 XM_B_Unsub2 3911 1.72 2.72 1.32 93 FROM_EXCESS_BASE64 3642 1.96 2.53 1.73 94 T_TooManySym_01 3607 4.63 2.50 5.50 95 XM_B_SpammyWords4 3606 1.14 2.50 0.59 96 TM2_M_URI_OPT_OUT 3564 2.06 2.47 1.90 97 SpammyFromTLD_01 3548 1.28 2.46 0.80 98 RCVD_IN_VALIDITY_SAFE 3536 3.40 2.46 3.78 99 XMBody_78 3531 0.93 2.45 0.31 100 T_XMDrugObfuBody_00 3501 1.20 2.43 0.70 101 TR_XM_NoHeaderRelay 3477 0.87 2.41 0.25 102 SUSP_UTF8_WORD_SUBJ 3439 0.70 2.39 0.02 103 T_FILL_THIS_FORM_SHORT 3378 1.30 2.35 0.88 104 XMBody_17 3344 1.06 2.32 0.54 105 NO_DNS_FOR_FROM 3212 0.88 2.23 0.33 106 SUSP_UTF8_WORD_COMBO 3202 0.67 2.22 0.04 107 TR_XM_MaxWHORU 3187 0.85 2.21 0.29 108 XMPhish30 3144 1.09 2.18 0.65 109 SUBJ_ALL_CAPS 3136 1.57 2.18 1.33 110 T_XMHurry_00 3097 0.86 2.15 0.34 111 MAILING_LIST_MULTI 3071 2.61 2.13 2.80 112 XMStockSpam_06 3059 1.40 2.12 1.11 113 DKIM_ADSP_NXDOMAIN 2987 0.78 2.07 0.25 114 USER_IN_DEF_DKIM_WL 2879 8.73 2.00 11.46 115 XMBrknScrpt_02 2852 1.32 1.98 1.05 116 T_REMOTE_IMAGE 2784 3.06 1.93 3.52 117 RCVD_IN_ZEN_LASTEXTERNAL 2724 0.55 1.89 0.00 118 SHORTCIRCUIT 2724 0.55 1.89 0.00 119 ALL_TRUSTED 2711 10.21 1.88 13.59 120 XM_H_Undi_Recip 2617 0.64 1.82 0.17 121 RCVD_IN_VALIDITY_CERTIFIED 2509 2.47 1.74 2.77 122 XM_B_SEO 2508 0.66 1.74 0.23 123 URI_HEX 2429 1.23 1.69 1.04 124 HTML_MIME_NO_HTML_TAG 2398 1.97 1.67 2.10 125 XM_DK_Undo_01 2393 1.59 1.66 1.56 126 XM_B_COPY_HTML 2369 1.07 1.65 0.84 127 SpammyFromTLD_02 2363 0.80 1.64 0.46 128 XMGenDplmaNmb 2312 1.19 1.61 1.02 129 BAYES_40 2303 4.12 1.60 5.14 130 TR_XM_Undi_Recip19 2276 0.51 1.58 0.07 131 RCVD_IN_IADB_LISTED 2272 2.69 1.58 3.15 132 TR_Symld_Words 2053 1.50 1.43 1.53 133 TooManyTo_002 2028 2.34 1.41 2.72 134 TR_XM_SEO4 1993 0.47 1.38 0.10 135 TR_XM_PHPForged 1987 0.60 1.38 0.28 136 TR_XM_PHPDW 1977 0.60 1.37 0.28 137 KHOP_HELO_FCRDNS 1977 1.38 1.37 1.39 138 T_MONEY_PERCENT 1952 0.49 1.36 0.14 139 TR_LOTS_OF_MONEY2 1952 0.49 1.36 0.14 140 TR_XM_FormFill2 1938 0.59 1.35 0.29 141 XM_H_PHPOS 1910 0.58 1.33 0.27 142 TR_XM_INV_DKIM 1868 0.42 1.30 0.06 143 TooManyTo_003 1865 1.49 1.30 1.57 144 BOTNET_NORDNS 1837 0.38 1.28 0.02 145 RELAYCOUNTRY_FR 1833 0.51 1.27 0.21 146 TM2_M_A_HREF_HREF 1825 0.52 1.27 0.21 147 XM_H_Long_From02 1800 1.03 1.25 0.95 148 RCVD_IN_IADB_SPF 1769 2.37 1.23 2.83 149 XM_SendGrid 1763 1.29 1.22 1.31 150 TooManyTo_004 1763 1.20 1.22 1.18 151 XM_B_COVIDMETA 1746 0.50 1.21 0.21 152 XM_B_DNDMA 1744 0.70 1.21 0.49 153 XMReplyNow 1735 0.57 1.20 0.31 154 TR_XM_Undi_RecipCombo2 1706 0.35 1.18 0.01 155 TooManyTo_005 1702 1.02 1.18 0.96 156 DKIM_ADSP_CUSTOM_MED 1694 1.01 1.18 0.94 157 URI_NOVOWEL 1684 1.15 1.17 1.14 158 XM_B_Phish66 1668 0.55 1.16 0.30 159 XMMoneyMeta_00 1598 0.68 1.11 0.51 160 XM_ProductURIs 1595 0.77 1.11 0.64 161 BAYES_20 1593 3.15 1.11 3.98 162 RCVD_IN_IADB_SENDERID 1584 2.12 1.10 2.54 163 XM_DIRTYINTL 1574 0.41 1.09 0.13 164 DIET_1 1565 0.48 1.09 0.23 165 HTML_TAG_BALANCE_BODY 1560 0.67 1.08 0.50 166 XMHTML_After_End 1558 0.54 1.08 0.32 167 RCVD_IN_IADB_DK 1551 2.08 1.08 2.49 168 RCVD_IN_IADB_VOUCHED 1521 1.73 1.06 2.00 169 T_Symld_Words_02 1502 0.87 1.04 0.81 170 HTTPS_HTTP_MISMATCH 1491 0.76 1.04 0.65 171 TVD_RCVD_IP 1478 0.77 1.03 0.67 172 THIS_AD 1461 0.65 1.01 0.50 173 TR_XM_Undi_Recip11 1459 0.31 1.01 0.03 174 TR_LOTS_OF_MONEY3 1406 0.42 0.98 0.19 175 TR_XM_Base64_M1 1398 0.65 0.97 0.52 176 TM2_M_OBFU_COMMENT 1396 0.57 0.97 0.41 177 XM_B_REG_HTML 1395 0.39 0.97 0.15 178 NML_ADSP_CUSTOM_MED 1378 0.76 0.96 0.68 179 URIBL_BLACK 1373 0.30 0.95 0.03 180 T_STY_INVIS_DIRECT 1368 0.54 0.95 0.37 181 HTML_IMAGE_ONLY_20 1367 0.54 0.95 0.38 182 UNDISC_MONEY 1341 0.27 0.93 0.00 183 HK_SCAM 1334 0.27 0.93 0.01 184 XM_UB99 1333 0.28 0.93 0.01 185 LongTLD 1327 0.53 0.92 0.37 186 XMBdyGiftCard01 1315 0.74 0.91 0.67 187 XMSexyCombo_01 1311 0.40 0.91 0.20 188 TR_XM_Undi_Recip5 1306 0.26 0.91 0.00 189 RCVD_IN_SORBS_DUL 1280 0.29 0.89 0.04 190 TR_XM_Spammywords 1274 0.39 0.88 0.19 191 XM_S_SpammyWords 1274 0.39 0.88 0.19 192 URI_TRY_3LD 1251 0.64 0.87 0.54 193 RDNS_DYNAMIC 1236 0.47 0.86 0.32 194 RCVD_IN_PBL 1230 0.71 0.85 0.66 195 MPART_ALT_DIFF_COUNT 1226 0.57 0.85 0.46 196 TR_XM_Undi_RecipCombo3 1216 0.24 0.84 0.00 197 XM_BadFromFormat 1216 0.34 0.84 0.14 198 ANY_BOUNCE_MESSAGE 1216 2.41 0.84 3.05 199 BOUNCE_MESSAGE 1214 2.41 0.84 3.05 200 PDS_RDNS_DYNAMIC_FP 1201 0.36 0.83 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 314877 90.17 93.71 88.73 2 RELAYCOUNTRY_US 296587 83.62 83.72 83.58 3 XM_B_Unicode 258566 75.35 81.48 72.87 4 DKIM_SIGNED 238826 73.49 88.73 67.30 5 XM_DK_Pass 234276 71.42 84.71 66.02 6 DCC_CHECK_NEGATIVE 232791 53.21 22.66 65.60 7 DKIM_VALID 230596 70.37 83.64 64.98 8 BAYES_50 205977 53.47 42.21 58.05 9 DKIM_VALID_AU 184675 56.42 67.21 52.04 10 XM_B_Unicode3 154717 45.11 48.83 43.60 11 XM_B_SpammyWords 153295 50.83 69.63 43.20 12 XMListUnsubscribeExists 149755 50.07 69.45 42.20 13 DCC_CHECK 121902 46.21 75.41 34.35 14 RCVD_IN_MSPIKE_H2 109179 32.55 36.93 30.77 15 T_TM2_M_HEADER_IN_MSG 99625 26.34 22.05 28.08 16 DKIM_VALID_EF 94125 27.00 28.18 26.53 17 HTML_FONT_LOW_CONTRAST 89037 28.55 37.08 25.09 18 XMSubLong 84634 24.67 26.69 23.85 19 LOC_TINY_FONT_1 81937 30.18 47.63 23.09 20 MIME_HTML_ONLY 81012 23.95 26.69 22.83 21 FVGT_m_MULTI_ODD 79132 25.06 31.85 22.30 22 T_KAM_HTML_FONT_INVALID 62770 21.59 31.20 17.69 23 XM_B_SpammyWords2 57248 23.73 42.45 16.13 24 BAYES_00 52367 10.71 0.74 14.76 25 HTML_IMAGE_RATIO_04 48922 11.08 4.41 13.79 26 ALL_TRUSTED 48208 10.21 1.88 13.59 27 HTML_FONT_FACE_BAD 45042 9.18 0.53 12.69 28 XM_Multi_Part_URI 42730 14.84 21.73 12.04 29 XM_H_Trusted_IP 42401 8.50 0.00 11.95 30 USER_IN_DEF_DKIM_WL 40655 8.73 2.00 11.46 31 TR_XM_DK_Unsub 39599 13.52 19.34 11.16 32 XMStrtUSub 35924 8.36 4.02 10.12 33 UNPARSEABLE_RELAY 35275 11.46 15.22 9.94 34 MPART_ALT_DIFF 32687 8.25 5.89 9.21 35 XM_B_PhoneNumber 32277 8.13 5.75 9.10 36 XM_Evil_Numbers_Gen 32122 9.20 9.58 9.05 37 TooManyTo_001 28768 7.09 4.58 8.11 38 XM_B_Unsub 27261 10.09 16.03 7.68 39 MIME_HTML_ONLY_MULTI 27121 6.55 3.86 7.64 40 BAYES_60 26283 7.62 8.14 7.41 41 LotsOfNums_01 25332 7.42 8.10 7.14 42 FSL_BULK_SIG 22874 7.37 9.63 6.45 43 IN_ZIMBRA_NJ_WHITELIST 22443 4.52 0.08 6.32 44 TR_XM_DK_Bayes 22379 4.66 0.60 6.31 45 TR_XM_DK_Bayes1 22060 4.60 0.60 6.22 46 XM_DKIMWhitelistDomains 22040 4.43 0.02 6.21 47 TR_XM_BayesUnsub 20560 8.56 15.36 5.79 48 T_TooManySym_01 19505 4.63 2.50 5.50 49 TR_XM_DK_Bayes2 19050 3.94 0.42 5.37 50 XM_H_GMP 18615 5.43 5.87 5.25 51 BAYES_40 18254 4.12 1.60 5.14 52 XM_B_Phish_Phrases 18251 6.09 8.41 5.14 53 MIME_QP_LONG_LINE 18035 4.41 2.77 5.08 54 LOTS_OF_MONEY 17789 7.39 13.26 5.01 55 XM_H_Long_From01 16888 5.30 6.64 4.76 56 TR_MAX_INTL_RELAY 16729 7.75 15.23 4.71 57 RCVD_IN_MSPIKE_H3 16672 4.57 4.26 4.70 58 RCVD_IN_MSPIKE_WL 16672 4.57 4.26 4.70 59 HTML_IMAGE_RATIO_06 16354 4.25 3.38 4.61 60 XMSubNoVowel 16104 3.41 0.62 4.54 61 XM_DK_Undo_02 15376 14.32 38.94 4.33 62 XM_PDF 14964 3.23 0.79 4.22 63 BAYES_20 14122 3.15 1.11 3.98 64 HTML_IMAGE_RATIO_02 13805 4.56 6.23 3.89 65 XM_B_SpammyWords3 13622 7.30 15.82 3.84 66 RCVD_IN_VALIDITY_SAFE 13415 3.40 2.46 3.78 67 XM_UncommonTLD01 13152 4.51 6.49 3.71 68 T_REMOTE_IMAGE 12501 3.06 1.93 3.52 69 RELAYCOUNTRY_META 12410 6.77 14.85 3.50 70 TR_XM_SpammyWords4 11981 5.84 11.91 3.38 71 BAYES_05 11535 2.48 0.57 3.25 72 RCVD_IN_IADB_LISTED 11168 2.69 1.58 3.15 73 ANY_BOUNCE_MESSAGE 10822 2.41 0.84 3.05 74 BOUNCE_MESSAGE 10822 2.41 0.84 3.05 75 XMSubMetaSx_00 10764 3.97 6.28 3.03 76 BAYES_80 10370 4.72 9.15 2.92 77 BOTNET_IPINHOSTNAME 10080 5.34 11.48 2.84 78 RCVD_IN_IADB_SPF 10040 2.37 1.23 2.83 79 MAILING_LIST_MULTI 9950 2.61 2.13 2.80 80 RCVD_IN_VALIDITY_CERTIFIED 9817 2.47 1.74 2.77 81 TooManyTo_002 9652 2.34 1.41 2.72 82 BAYES_99 9625 10.27 28.90 2.71 83 T_TooManySym_02 9327 2.09 0.75 2.63 84 XM_Body_Dirty_Words 9218 4.31 8.54 2.60 85 XMNumbers 9096 2.79 3.36 2.56 86 RCVD_IN_IADB_SENDERID 9011 2.12 1.10 2.54 87 RCVD_IN_IADB_DK 8822 2.08 1.08 2.49 88 XMSubLongNoVowel 8517 1.81 0.37 2.40 89 XMSubGarbage 8341 1.69 0.08 2.35 90 DKIM_INVALID 8230 3.12 5.09 2.32 91 XM_B_SpammyTLD 8074 2.97 4.67 2.28 92 HTML_MIME_NO_HTML_TAG 7450 1.97 1.67 2.10 93 INVALID_MSGID 7163 1.51 0.26 2.02 94 HTML_IMAGE_RATIO_08 7147 2.23 2.75 2.01 95 RCVD_IN_IADB_VOUCHED 7093 1.73 1.06 2.00 96 BAYES_999 7069 7.77 22.01 1.99 97 XM_B_URI_Unicode 7034 2.22 2.81 1.98 98 MIME_HTML_MOSTLY 6932 2.23 2.91 1.95 99 TM2_M_URI_OPT_OUT 6727 2.06 2.47 1.90 100 XM_B_Investor 6609 2.70 4.77 1.86 101 XM_CamelCaseFrm001 6458 2.26 3.33 1.82 102 BAYES_95 6318 2.91 5.70 1.78 103 TR_XM_PhishingBody 6313 2.78 5.24 1.78 104 TO_MALFORMED 6244 1.27 0.05 1.76 105 XMDiploma_00 6168 2.20 3.34 1.74 106 FROM_EXCESS_BASE64 6134 1.96 2.53 1.73 107 T_XMDrugObfuBody_14 5968 2.39 4.12 1.68 108 TR_XM_SpammyRelay 5945 4.34 10.90 1.68 109 TM2_M_VERY_LONG_WORD 5862 2.44 4.38 1.65 110 TooManyTo_003 5582 1.49 1.30 1.57 111 XM_DK_Undo_01 5552 1.59 1.66 1.56 112 TR_XM_DKIM_Undo 5502 8.91 27.05 1.55 113 IN_HORDE_ADDRESS_BOOK 5478 1.14 0.13 1.54 114 TR_Symld_Words 5435 1.50 1.43 1.53 115 XM_SPF_SoftFail 5021 2.02 3.50 1.41 116 RCVD_IN_IADB_OPTIN 5009 1.19 0.65 1.41 117 KHOP_HELO_FCRDNS 4915 1.38 1.37 1.39 118 SUBJ_ALL_CAPS 4710 1.57 2.18 1.33 119 XM_B_Unsub2 4688 1.72 2.72 1.32 120 XM_SendGrid 4654 1.29 1.22 1.31 121 UNTRUSTED_Relay 4563 2.56 5.70 1.29 122 BOTNET 4455 3.75 9.88 1.26 123 T_XMDrugObfuBody_08 4430 1.68 2.76 1.25 124 TR_XM_UnparsRelay 4415 3.10 7.66 1.24 125 HELO_NODOT 4382 0.97 0.31 1.23 126 HELO_NO_DOMAIN 4379 0.97 0.30 1.23 127 TR_XM_SpammyWords5 4332 1.97 3.81 1.22 128 XMGappySubj_01 4329 0.92 0.18 1.22 129 TooManyTo_004 4200 1.20 1.22 1.18 130 XM_GoogleGroups 4183 1.04 0.69 1.18 131 XMCapTrack 4122 0.97 0.50 1.16 132 URI_NOVOWEL 4038 1.15 1.17 1.14 133 RELAYCOUNTRY_CA 4005 2.41 5.56 1.13 134 XMStockSpam_06 3947 1.40 2.12 1.11 135 TVD_SPACE_RATIO 3929 0.83 0.15 1.11 136 XMBody_95 3835 0.81 0.14 1.08 137 XMBrknScrpt_02 3720 1.32 1.98 1.05 138 URI_HEX 3693 1.23 1.69 1.04 139 XMGenDplmaNmb 3604 1.19 1.61 1.02 140 XMSexyCombo_05 3565 2.04 4.58 1.00 141 RCVD_IN_BL_SPAMCOP_NET 3435 3.30 9.05 0.97 142 XM_OfRef6 3422 1.53 2.91 0.96 143 TooManyTo_005 3390 1.02 1.18 0.96 144 XM_H_Long_From02 3363 1.03 1.25 0.95 145 DKIM_ADSP_CUSTOM_MED 3334 1.01 1.18 0.94 146 T_TooManySym_03 3316 0.74 0.27 0.93 147 XM_E_Blogspot 3236 0.69 0.15 0.91 148 T_FILL_THIS_FORM_SHORT 3107 1.30 2.35 0.88 149 FROM_GOV_DKIM_AU 3083 0.76 0.48 0.87 150 XM_B_COPY_HTML 2991 1.07 1.65 0.84 151 XM_UB50 2913 1.39 2.80 0.82 152 TR_XM_DK_SendGrid 2894 0.76 0.63 0.82 153 T_Symld_Words_02 2859 0.87 1.04 0.81 154 SpammyFromTLD_01 2822 1.28 2.46 0.80 155 TR_DCC_Bayes_99 2691 6.58 20.92 0.76 156 XM_ShortIntro_01 2590 0.71 0.67 0.73 157 T_XMDrugObfuBody_00 2475 1.20 2.43 0.70 158 XMNoVowels 2442 0.67 0.62 0.69 159 TR_XM_SPAMCOP 2439 2.64 7.44 0.69 160 NML_ADSP_CUSTOM_MED 2407 0.76 0.96 0.68 161 XMBdyGiftCard01 2392 0.74 0.91 0.67 162 TVD_RCVD_IP 2381 0.77 1.03 0.67 163 TR_MetaPhish_Combo_01 2371 0.71 0.81 0.67 164 RCVD_IN_PBL 2331 0.71 0.85 0.66 165 HTTPS_HTTP_MISMATCH 2315 0.76 1.04 0.65 166 XMPhish30 2300 1.09 2.18 0.65 167 XM_ProductURIs 2264 0.77 1.11 0.64 168 XMLngstWrd_00 2234 0.57 0.43 0.63 169 XMGappySubj_02 2194 0.46 0.06 0.62 170 FORGED_GMAIL_RCVD 2176 0.65 0.75 0.61 171 XM_H_PHPMailer 2117 0.62 0.69 0.60 172 XM_B_SpammyWords4 2097 1.14 2.50 0.59 173 XMPhish14 2033 0.62 0.73 0.57 174 XMBody_17 1932 1.06 2.32 0.54 175 URI_TRY_3LD 1931 0.64 0.87 0.54 176 T_OBFU_PDF_ATTACH 1893 0.44 0.22 0.53 177 XM_B_FormFill 1884 0.38 0.02 0.53 178 RELAYCOUNTRY_AU 1879 1.17 2.74 0.53 179 TR_XM_Base64_M1 1836 0.65 0.97 0.52 180 XMMoneyMeta_00 1819 0.68 1.11 0.51 181 THIS_AD 1787 0.65 1.01 0.50 182 HTML_TAG_BALANCE_BODY 1770 0.67 1.08 0.50 183 XM_B_DNDMA 1742 0.70 1.21 0.49 184 RELAYCOUNTRY_GB 1656 0.55 0.77 0.47 185 SpammyFromTLD_02 1648 0.80 1.64 0.46 186 MPART_ALT_DIFF_COUNT 1631 0.57 0.85 0.46 187 XMDateMe_00 1582 0.45 0.47 0.45 188 FROM_GOV_SPOOF 1548 0.35 0.15 0.44 189 HTML_IMAGE_ONLY_32 1544 0.35 0.15 0.44 190 MIME_CHARSET_FARAWAY 1532 0.52 0.73 0.43 191 XMSubMetaI_00 1530 0.53 0.76 0.43 192 XMLngstWrd_01 1509 0.40 0.35 0.43 193 TO_NO_BRKTS_HTML_ONLY 1499 0.38 0.29 0.42 194 FILL_THIS_FORM 1487 0.38 0.27 0.42 195 MISSING_HEADERS 1484 0.50 0.71 0.42 196 TRACKER_ID 1472 0.31 0.05 0.41 197 TM2_M_OBFU_COMMENT 1465 0.57 0.97 0.41 198 HTML_IMAGE_ONLY_28 1425 0.37 0.31 0.40 199 PLING_QUERY 1354 0.49 0.76 0.38 200 HTML_IMAGE_ONLY_20 1351 0.54 0.95 0.38 ----------------------------------------------------------------------