Email: 484350 Autolearn: 0 AvgScore: 4.80 AvgScanTime: 1.46 sec Spam: 150873 Autolearn: 0 AvgScore: 14.87 AvgScanTime: 1.63 sec Ham: 333477 Autolearn: 0 AvgScore: 0.25 AvgScanTime: 1.39 sec Time Spent Running SA: 197.04 hours Time Spent Processing Spam: 68.45 hours Time Spent Processing Ham: 128.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143162 89.37 94.89 86.87 2 DKIM_SIGNED 135482 79.04 89.80 74.18 3 XM_DK_Pass 129048 76.80 85.53 72.85 4 RELAYCOUNTRY_US 128196 82.84 84.97 81.88 5 DKIM_VALID 127203 75.65 84.31 71.73 6 XM_B_Unicode 126174 73.01 83.63 68.20 7 DCC_CHECK 115600 50.54 76.62 38.73 8 XMListUnsubscribeExists 108228 54.84 71.73 47.19 9 XM_B_SpammyWords 106311 52.91 70.46 44.97 10 DKIM_VALID_AU 99764 59.91 66.12 57.10 11 LOC_TINY_FONT_1 74804 33.21 49.58 25.81 12 XM_B_Unicode3 73705 42.80 48.85 40.06 13 XM_B_SpammyWords2 65119 26.64 43.16 19.17 14 BAYES_50 61042 54.57 40.46 60.95 15 XM_DK_Undo_02 59529 15.05 39.46 4.01 16 RCVD_IN_MSPIKE_H2 58120 34.82 38.52 33.15 17 HTML_FONT_LOW_CONTRAST 57782 30.00 38.30 26.25 18 FVGT_m_MULTI_ODD 50267 26.62 33.32 23.59 19 T_KAM_HTML_FONT_INVALID 48336 23.90 32.04 20.22 20 BAYES_99 45532 11.19 30.18 2.60 21 DKIM_VALID_EF 42812 28.43 28.38 28.45 22 TR_XM_DKIM_Undo 42436 9.87 28.13 1.62 23 MIME_HTML_ONLY 40303 22.06 26.71 19.96 24 XMSubLong 36562 23.40 24.23 23.02 25 XM_Multi_Part_URI 35863 16.32 23.77 12.95 26 BAYES_999 34935 8.49 23.16 1.85 27 TR_DCC_Bayes_99 34330 7.73 22.75 0.93 28 T_TM2_M_HEADER_IN_MSG 33322 27.88 22.09 30.50 29 DCC_CHECK_NEGATIVE 32341 48.83 21.44 61.22 30 TR_XM_DK_Unsub 31523 14.77 20.89 12.00 31 UNPARSEABLE_RELAY 27096 13.18 17.96 11.01 32 XM_B_Unsub 25236 11.72 16.73 9.46 33 TR_XM_BayesUnsub 24485 9.73 16.23 6.78 34 XM_B_SpammyWords3 23289 8.36 15.44 5.16 35 TR_MAX_INTL_RELAY 23169 8.45 15.36 5.33 36 RELAYCOUNTRY_META 22271 7.23 14.76 3.82 37 LOTS_OF_MONEY 19191 8.11 12.72 6.03 38 TR_XM_SpammyWords2 18952 4.15 12.56 0.35 39 BOTNET_IPINHOSTNAME 17902 5.59 11.87 2.75 40 TR_XM_SpammyWords4 17364 6.44 11.51 4.15 41 TR_XM_SpammyRelay 16115 4.63 10.68 1.89 42 XM_Evil_Numbers_Gen 15071 9.69 9.99 9.56 43 RCVD_IN_BL_SPAMCOP_NET 14584 3.48 9.67 0.68 44 BAYES_80 14138 5.20 9.37 3.32 45 TR_XM_UnparsRelay 13763 3.80 9.12 1.40 46 XM_Body_Dirty_Words 13129 4.79 8.70 3.02 47 LotsOfNums_01 12917 9.33 8.56 9.68 48 BOTNET 12911 3.49 8.56 1.19 49 FSL_BULK_SIG 12749 7.70 8.45 7.36 50 XM_B_Phish_Phrases 12741 7.35 8.44 6.86 51 BAYES_60 12639 8.33 8.38 8.32 52 TR_XM_SPAMCOP 12111 2.77 8.03 0.39 53 XMSubMetaSx_00 10478 5.84 6.94 5.34 54 MPART_ALT_DIFF 10020 5.20 6.64 4.55 55 XM_H_Long_From01 10016 5.98 6.64 5.68 56 HTML_IMAGE_RATIO_02 9900 5.23 6.56 4.63 57 XM_B_PhoneNumber 9498 9.22 6.30 10.54 58 XM_UncommonTLD01 9271 4.77 6.14 4.15 59 BAYES_95 8639 3.17 5.73 2.01 60 DKIM_INVALID 8279 3.39 5.49 2.44 61 UNTRUSTED_Relay 8157 2.71 5.41 1.48 62 XM_H_GMP 7711 5.42 5.11 5.55 63 XM_B_Investor 7698 2.72 5.10 1.65 64 RELAYCOUNTRY_CA 7426 2.30 4.92 1.11 65 T_XMDrugObfuBody_14 7122 2.68 4.72 1.75 66 HTML_IMAGE_RATIO_04 7038 4.20 4.66 3.99 67 XMStrtUSub 6394 4.55 4.24 4.69 68 TR_XM_PhishingBody 6233 2.50 4.13 1.76 69 XM_B_SpammyTLD 6093 2.90 4.04 2.39 70 XMSexyCombo_05 5971 2.79 3.96 2.26 71 RCVD_IN_MSPIKE_H3 5916 5.23 3.92 5.83 72 RCVD_IN_MSPIKE_WL 5916 5.23 3.92 5.83 73 TM2_M_VERY_LONG_WORD 5883 3.17 3.90 2.84 74 MIME_HTML_ONLY_MULTI 5880 3.05 3.90 2.66 75 XM_OfRef6 5801 1.83 3.84 0.91 76 TooManyTo_001 5696 7.55 3.78 9.26 77 RCVD_IN_VALIDITY_RPBL 5351 1.18 3.55 0.11 78 XM_CamelCaseFrm001 5277 2.77 3.50 2.44 79 XMNumbers 5236 3.20 3.47 3.08 80 HTML_IMAGE_RATIO_08 5201 2.56 3.45 2.16 81 HTML_IMAGE_RATIO_06 5179 3.73 3.43 3.86 82 TR_XM_SpammyWords5 4976 2.04 3.30 1.47 83 XM_SPF_SoftFail 4924 2.14 3.26 1.64 84 MIME_HTML_MOSTLY 4735 2.56 3.14 2.29 85 MIME_QP_LONG_LINE 4686 4.89 3.11 5.70 86 TM2_M_URI_OPT_OUT 4660 2.04 3.09 1.56 87 XM_UB50 4310 1.55 2.86 0.96 88 T_XMHurry_00 4192 1.25 2.78 0.56 89 XM_B_Unsub2 3993 1.68 2.65 1.24 90 XM_B_SpammyWords4 3974 1.28 2.63 0.67 91 XM_URI_RBL 3951 1.11 2.62 0.43 92 XMDiploma_00 3895 1.75 2.58 1.37 93 RELAYCOUNTRY_AU 3831 1.24 2.54 0.65 94 T_XMDrugObfuBody_08 3723 1.80 2.47 1.50 95 XM_B_URI_Unicode 3476 2.14 2.30 2.06 96 T_XMDrugObfuBody_00 3457 1.11 2.29 0.58 97 T_TooManySym_01 3402 4.89 2.25 6.08 98 SpammyFromTLD_02 3325 0.98 2.20 0.43 99 MAILING_LIST_MULTI 3315 2.84 2.20 3.14 100 TR_XM_NoHeaderRelay 3242 0.85 2.15 0.26 101 FROM_EXCESS_BASE64 3231 1.84 2.14 1.70 102 XMBody_17 3145 0.91 2.08 0.38 103 XMStockSpam_06 3141 1.59 2.08 1.37 104 DKIM_ADSP_NXDOMAIN 3086 0.82 2.05 0.26 105 T_FILL_THIS_FORM_SHORT 3085 1.37 2.04 1.06 106 SpammyFromTLD_01 3053 1.30 2.02 0.97 107 RCVD_IN_VALIDITY_SAFE 3020 3.43 2.00 4.07 108 USER_IN_DEF_DKIM_WL 3004 9.02 1.99 12.20 109 RCVD_IN_ZEN_LASTEXTERNAL 2887 0.60 1.91 0.00 110 SHORTCIRCUIT 2887 0.60 1.91 0.00 111 NO_DNS_FOR_FROM 2809 0.79 1.86 0.31 112 TR_XM_MaxWHORU 2792 0.76 1.85 0.27 113 XM_DK_Undo_01 2791 1.71 1.85 1.65 114 SUBJ_ALL_CAPS 2738 1.54 1.81 1.41 115 XM_H_Long_From02 2664 1.22 1.77 0.97 116 SUSP_UTF8_WORD_SUBJ 2653 0.63 1.76 0.12 117 TR_XM_INV_DKIM 2519 0.57 1.67 0.07 118 XMBrknScrpt_02 2503 1.07 1.66 0.80 119 DKIM_ADSP_CUSTOM_MED 2459 1.13 1.63 0.91 120 XM_SendGrid 2421 1.50 1.60 1.45 121 XMGenDplmaNmb 2359 1.05 1.56 0.82 122 URI_NOVOWEL 2284 1.46 1.51 1.43 123 BAYES_40 2266 3.78 1.50 4.82 124 RCVD_IN_VALIDITY_CERTIFIED 2264 2.65 1.50 3.17 125 URI_TRY_3LD 2240 0.89 1.48 0.62 126 URI_HEX 2224 1.26 1.47 1.17 127 T_REMOTE_IMAGE 2201 2.87 1.46 3.50 128 XMPhish30 2176 0.82 1.44 0.53 129 XM_B_SEO 2158 0.73 1.43 0.41 130 RCVD_IN_IADB_LISTED 2155 3.25 1.43 4.07 131 SUSP_UTF8_WORD_COMBO 2131 0.54 1.41 0.14 132 TR_XM_PHPForged 2127 0.68 1.41 0.35 133 HTML_MIME_NO_HTML_TAG 2100 2.07 1.39 2.37 134 TR_XM_PHPDW 2079 0.67 1.38 0.35 135 TR_XM_FormFill2 2071 0.67 1.37 0.36 136 XM_H_PHPOS 2051 0.66 1.36 0.34 137 TR_LOTS_OF_MONEY3 2021 0.73 1.34 0.45 138 XM_B_COVIDMETA 1967 0.59 1.30 0.27 139 ALL_TRUSTED 1967 10.71 1.30 14.97 140 NML_ADSP_CUSTOM_MED 1958 0.78 1.30 0.55 141 XM_B_COPY_HTML 1925 0.80 1.28 0.59 142 RELAYCOUNTRY_GB 1922 0.73 1.27 0.49 143 XMSexyCombo_01 1922 0.93 1.27 0.78 144 RCVD_IN_IADB_SPF 1910 2.86 1.27 3.58 145 DIET_1 1864 0.61 1.24 0.33 146 TR_Symld_Words 1854 1.45 1.23 1.55 147 XM_B_DNDMA 1830 0.83 1.21 0.66 148 RELAYCOUNTRY_FR 1822 0.55 1.21 0.26 149 T_Symld_Words_02 1822 0.72 1.21 0.50 150 RCVD_IN_IADB_DK 1821 2.52 1.21 3.11 151 RCVD_IN_IADB_SENDERID 1797 2.57 1.19 3.19 152 XMReplyNow 1785 0.56 1.18 0.28 153 MPART_ALT_DIFF_COUNT 1773 0.70 1.18 0.48 154 TR_XM_SEO4 1764 0.49 1.17 0.18 155 XMSubMetaI_00 1694 0.77 1.12 0.61 156 XM_ProductURIs 1683 1.16 1.12 1.18 157 KHOP_HELO_FCRDNS 1679 1.85 1.11 2.19 158 HTML_TAG_BALANCE_BODY 1665 0.78 1.10 0.64 159 FORGED_GMAIL_RCVD 1664 0.73 1.10 0.56 160 SHOPIFY_IMG_NOT_RCVD_SFY 1661 0.49 1.10 0.21 161 BAYES_20 1652 2.78 1.09 3.54 162 HTTPS_HTTP_MISMATCH 1647 0.99 1.09 0.94 163 BOTNET_NORDNS 1607 0.34 1.07 0.01 164 XMBody_78 1588 0.50 1.05 0.25 165 T_MONEY_PERCENT 1578 0.46 1.05 0.19 166 TR_LOTS_OF_MONEY2 1578 0.46 1.05 0.19 167 XMHTML_After_End 1575 0.58 1.04 0.37 168 MIME_CHARSET_FARAWAY 1575 0.75 1.04 0.62 169 TR_XM_Base64_M1 1571 0.85 1.04 0.77 170 HOSTED_IMG_MULTI_PUB_01 1542 0.35 1.02 0.04 171 LongTLD 1532 0.63 1.02 0.46 172 RCVD_IN_PBL 1526 0.83 1.01 0.74 173 XMMoneyMeta_00 1513 0.66 1.00 0.51 174 XMPhish14 1468 0.65 0.97 0.50 175 XM_DIRTYINTL 1467 0.38 0.97 0.11 176 TR_XM_RelayPhish 1439 0.35 0.95 0.07 177 SUBJ_DOLLARS 1435 0.48 0.95 0.27 178 XM_OfRef7 1425 0.40 0.94 0.15 179 XM_B_Phish66 1416 0.53 0.94 0.34 180 TR_XM_InvalidRelay 1371 0.29 0.91 0.01 181 XM_H_Undi_Recip 1361 0.42 0.90 0.20 182 ANY_BOUNCE_MESSAGE 1336 3.35 0.89 4.46 183 BOUNCE_MESSAGE 1336 3.35 0.89 4.46 184 XM_ShortIntro_01 1317 0.85 0.87 0.84 185 XMClaimOffer 1315 0.47 0.87 0.28 186 XM_Body_Dirty_Words_01 1294 0.30 0.86 0.05 187 RDNS_DYNAMIC 1276 0.49 0.85 0.32 188 XMBdyGiftCard01 1274 0.51 0.84 0.35 189 TR_XM_DK_SendGrid 1266 0.92 0.84 0.96 190 TooManyTo_002 1261 2.75 0.84 3.61 191 XM_HighProb1 1254 0.26 0.83 0.01 192 RCVD_IN_SORBS_DUL 1253 0.30 0.83 0.05 193 TM2_M_A_HREF_HREF 1249 0.43 0.83 0.25 194 PDS_RDNS_DYNAMIC_FP 1246 0.39 0.83 0.19 195 TR_XM_Spammywords 1242 0.34 0.82 0.12 196 XM_S_SpammyWords 1242 0.34 0.82 0.12 197 XM_UB99 1233 0.26 0.82 0.00 198 HTML_FONT_FACE_BAD 1210 0.56 0.80 0.45 199 T_STY_INVIS_DIRECT 1201 0.47 0.80 0.33 200 XM_B_REG_HTML 1178 0.37 0.78 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 289706 89.37 94.89 86.87 2 RELAYCOUNTRY_US 273040 82.84 84.97 81.88 3 DKIM_SIGNED 247365 79.04 89.80 74.18 4 XM_DK_Pass 242941 76.80 85.53 72.85 5 DKIM_VALID 239217 75.65 84.31 71.73 6 XM_B_Unicode 227441 73.01 83.63 68.20 7 DCC_CHECK_NEGATIVE 204156 48.83 21.44 61.22 8 BAYES_50 203244 54.57 40.46 60.95 9 DKIM_VALID_AU 190411 59.91 66.12 57.10 10 XMListUnsubscribeExists 157374 54.84 71.73 47.19 11 XM_B_SpammyWords 149950 52.91 70.46 44.97 12 XM_B_Unicode3 133584 42.80 48.85 40.06 13 DCC_CHECK 129167 50.54 76.62 38.73 14 RCVD_IN_MSPIKE_H2 110552 34.82 38.52 33.15 15 T_TM2_M_HEADER_IN_MSG 101720 27.88 22.09 30.50 16 DKIM_VALID_EF 94866 28.43 28.38 28.45 17 HTML_FONT_LOW_CONTRAST 87538 30.00 38.30 26.25 18 LOC_TINY_FONT_1 86071 33.21 49.58 25.81 19 FVGT_m_MULTI_ODD 78658 26.62 33.32 23.59 20 XMSubLong 76755 23.40 24.23 23.02 21 T_KAM_HTML_FONT_INVALID 67424 23.90 32.04 20.22 22 MIME_HTML_ONLY 66566 22.06 26.71 19.96 23 XM_B_SpammyWords2 63930 26.64 43.16 19.17 24 ALL_TRUSTED 49909 10.71 1.30 14.97 25 XM_Multi_Part_URI 43171 16.32 23.77 12.95 26 USER_IN_DEF_DKIM_WL 40699 9.02 1.99 12.20 27 BAYES_00 40576 8.60 0.71 12.17 28 TR_XM_DK_Unsub 40026 14.77 20.89 12.00 29 UNPARSEABLE_RELAY 36720 13.18 17.96 11.01 30 XM_B_PhoneNumber 35160 9.22 6.30 10.54 31 LotsOfNums_01 32280 9.33 8.56 9.68 32 XM_Evil_Numbers_Gen 31885 9.69 9.99 9.56 33 XM_B_Unsub 31533 11.72 16.73 9.46 34 TooManyTo_001 30870 7.55 3.78 9.26 35 BAYES_60 27731 8.33 8.38 8.32 36 FSL_BULK_SIG 24553 7.70 8.45 7.36 37 TR_XM_DK_Bayes 24520 5.25 0.62 7.35 38 TR_XM_DK_Bayes1 24085 5.16 0.61 7.22 39 XM_B_Phish_Phrases 22868 7.35 8.44 6.86 40 IN_ZIMBRA_NJ_WHITELIST 22689 4.71 0.08 6.80 41 TR_XM_BayesUnsub 22626 9.73 16.23 6.78 42 XM_DKIMWhitelistDomains 21155 4.38 0.05 6.34 43 TR_XM_DK_Bayes2 20734 4.41 0.41 6.22 44 T_TooManySym_01 20260 4.89 2.25 6.08 45 LOTS_OF_MONEY 20107 8.11 12.72 6.03 46 RCVD_IN_MSPIKE_WL 19439 5.23 3.92 5.83 47 RCVD_IN_MSPIKE_H3 19439 5.23 3.92 5.83 48 MIME_QP_LONG_LINE 18992 4.89 3.11 5.70 49 XM_H_Long_From01 18947 5.98 6.64 5.68 50 XM_H_GMP 18523 5.42 5.11 5.55 51 XMSubMetaSx_00 17814 5.84 6.94 5.34 52 TR_MAX_INTL_RELAY 17768 8.45 15.36 5.33 53 XM_B_SpammyWords3 17214 8.36 15.44 5.16 54 XM_PDF 16696 3.67 0.71 5.01 55 BAYES_40 16058 3.78 1.50 4.82 56 XMStrtUSub 15649 4.55 4.24 4.69 57 HTML_IMAGE_RATIO_02 15442 5.23 6.56 4.63 58 MPART_ALT_DIFF 15160 5.20 6.64 4.55 59 ANY_BOUNCE_MESSAGE 14888 3.35 0.89 4.46 60 BOUNCE_MESSAGE 14888 3.35 0.89 4.46 61 XM_UncommonTLD01 13852 4.77 6.14 4.15 62 TR_XM_SpammyWords4 13833 6.44 11.51 4.15 63 RCVD_IN_VALIDITY_SAFE 13584 3.43 2.00 4.07 64 RCVD_IN_IADB_LISTED 13569 3.25 1.43 4.07 65 XM_DK_Undo_02 13380 15.05 39.46 4.01 66 HTML_IMAGE_RATIO_04 13313 4.20 4.66 3.99 67 HTML_IMAGE_RATIO_06 12867 3.73 3.43 3.86 68 RELAYCOUNTRY_META 12724 7.23 14.76 3.82 69 TooManyTo_002 12054 2.75 0.84 3.61 70 RCVD_IN_IADB_SPF 11932 2.86 1.27 3.58 71 BAYES_20 11797 2.78 1.09 3.54 72 T_REMOTE_IMAGE 11680 2.87 1.46 3.50 73 T_TooManySym_02 11321 2.55 0.67 3.39 74 BAYES_80 11058 5.20 9.37 3.32 75 RCVD_IN_IADB_SENDERID 10644 2.57 1.19 3.19 76 RCVD_IN_VALIDITY_CERTIFIED 10560 2.65 1.50 3.17 77 MAILING_LIST_MULTI 10459 2.84 2.20 3.14 78 RCVD_IN_IADB_DK 10385 2.52 1.21 3.11 79 XMNumbers 10286 3.20 3.47 3.08 80 XM_Body_Dirty_Words 10087 4.79 8.70 3.02 81 TM2_M_VERY_LONG_WORD 9482 3.17 3.90 2.84 82 BOTNET_IPINHOSTNAME 9163 5.59 11.87 2.75 83 MIME_HTML_ONLY_MULTI 8881 3.05 3.90 2.66 84 RCVD_IN_IADB_VOUCHED 8821 2.02 0.63 2.65 85 BAYES_99 8671 11.19 30.18 2.60 86 DKIM_INVALID 8148 3.39 5.49 2.44 87 XM_CamelCaseFrm001 8140 2.77 3.50 2.44 88 XM_B_SpammyTLD 7960 2.90 4.04 2.39 89 HTML_MIME_NO_HTML_TAG 7920 2.07 1.39 2.37 90 MIME_HTML_MOSTLY 7653 2.56 3.14 2.29 91 BAYES_05 7639 1.79 0.67 2.29 92 XMSexyCombo_05 7548 2.79 3.96 2.26 93 KHOP_HELO_FCRDNS 7291 1.85 1.11 2.19 94 HTML_IMAGE_RATIO_08 7196 2.56 3.45 2.16 95 INVALID_MSGID 7194 1.53 0.14 2.16 96 XM_B_URI_Unicode 6883 2.14 2.30 2.06 97 BAYES_95 6695 3.17 5.73 2.01 98 TR_XM_SpammyRelay 6308 4.63 10.68 1.89 99 TO_MALFORMED 6184 1.28 0.01 1.85 100 BAYES_999 6173 8.49 23.16 1.85 101 RCVD_IN_IADB_OPTIN 6092 1.38 0.38 1.83 102 TR_XM_PhishingBody 5859 2.50 4.13 1.76 103 T_XMDrugObfuBody_14 5850 2.68 4.72 1.75 104 FROM_EXCESS_BASE64 5682 1.84 2.14 1.70 105 XM_DK_Undo_01 5511 1.71 1.85 1.65 106 XM_B_Investor 5492 2.72 5.10 1.65 107 TooManyTo_003 5467 1.36 0.74 1.64 108 XM_SPF_SoftFail 5462 2.14 3.26 1.64 109 TR_XM_DKIM_Undo 5392 9.87 28.13 1.62 110 TM2_M_URI_OPT_OUT 5213 2.04 3.09 1.56 111 TR_Symld_Words 5166 1.45 1.23 1.55 112 T_XMDrugObfuBody_08 5012 1.80 2.47 1.50 113 UNTRUSTED_Relay 4951 2.71 5.41 1.48 114 TR_XM_SpammyWords5 4903 2.04 3.30 1.47 115 XM_SendGrid 4821 1.50 1.60 1.45 116 IN_HORDE_ADDRESS_BOOK 4806 1.03 0.13 1.44 117 URI_NOVOWEL 4765 1.46 1.51 1.43 118 XMGappySubj_01 4709 1.02 0.15 1.41 119 SUBJ_ALL_CAPS 4705 1.54 1.81 1.41 120 TR_XM_UnparsRelay 4664 3.80 9.12 1.40 121 XMDiploma_00 4577 1.75 2.58 1.37 122 XMStockSpam_06 4568 1.59 2.08 1.37 123 XMNoVowels 4418 1.10 0.61 1.32 124 TVD_SPACE_RATIO 4352 0.94 0.14 1.31 125 HELO_NODOT 4289 0.96 0.24 1.29 126 HELO_NO_DOMAIN 4287 0.96 0.24 1.29 127 XM_B_Unsub2 4146 1.68 2.65 1.24 128 XM_GoogleGroups 4084 1.07 0.74 1.22 129 TooManyTo_004 4037 1.05 0.70 1.21 130 XM_B_FormFill 4018 0.88 0.16 1.20 131 XMCapTrack 4006 0.99 0.54 1.20 132 BOTNET 3977 3.49 8.56 1.19 133 XM_ProductURIs 3920 1.16 1.12 1.18 134 URI_HEX 3902 1.26 1.47 1.17 135 T_TooManySym_03 3851 0.86 0.21 1.15 136 RELAYCOUNTRY_CA 3706 2.30 4.92 1.11 137 T_FILL_THIS_FORM_SHORT 3549 1.37 2.04 1.06 138 TooManyTo_005 3289 0.89 0.66 0.99 139 SpammyFromTLD_01 3245 1.30 2.02 0.97 140 XM_H_Long_From02 3222 1.22 1.77 0.97 141 TR_XM_DK_SendGrid 3210 0.92 0.84 0.96 142 XM_UB50 3194 1.55 2.86 0.96 143 HTTPS_HTTP_MISMATCH 3150 0.99 1.09 0.94 144 TR_DCC_Bayes_99 3100 7.73 22.75 0.93 145 XM_OfRef6 3048 1.83 3.84 0.91 146 HTML_EXTRA_CLOSE 3037 0.64 0.05 0.91 147 XM_H_Trusted_IP 3027 0.62 0.00 0.91 148 DKIM_ADSP_CUSTOM_MED 3019 1.13 1.63 0.91 149 FROM_GOV_DKIM_AU 2936 0.64 0.10 0.88 150 XMGappySubj_02 2881 0.61 0.05 0.86 151 XM_H_PHPMailer 2866 0.78 0.62 0.86 152 TR_MetaPhish_Combo_01 2800 0.82 0.78 0.84 153 XM_ShortIntro_01 2794 0.85 0.87 0.84 154 XMSubMetaSxObfu_03 2757 0.74 0.56 0.83 155 XMGenDplmaNmb 2729 1.05 1.56 0.82 156 XMBrknScrpt_02 2674 1.07 1.66 0.80 157 XMSexyCombo_01 2585 0.93 1.27 0.78 158 TR_XM_Base64_M1 2568 0.85 1.04 0.77 159 XMSubNoVowel 2529 0.68 0.51 0.76 160 RCVD_IN_PBL 2474 0.83 1.01 0.74 161 RCVD_IN_BL_SPAMCOP_NET 2281 3.48 9.67 0.68 162 XMLngstWrd_00 2275 0.68 0.67 0.68 163 XM_B_SpammyWords4 2228 1.28 2.63 0.67 164 T_OBFU_PDF_ATTACH 2217 0.50 0.13 0.66 165 XM_B_DNDMA 2214 0.83 1.21 0.66 166 RELAYCOUNTRY_AU 2180 1.24 2.54 0.65 167 XMBody_95 2166 0.51 0.19 0.65 168 HTML_TAG_BALANCE_BODY 2132 0.78 1.10 0.64 169 MIME_CHARSET_FARAWAY 2076 0.75 1.04 0.62 170 URI_TRY_3LD 2069 0.89 1.48 0.62 171 XMSubMetaI_00 2021 0.77 1.12 0.61 172 XM_B_COPY_HTML 1967 0.80 1.28 0.59 173 TVD_RCVD_IP 1943 0.58 0.59 0.58 174 T_XMDrugObfuBody_00 1938 1.11 2.29 0.58 175 XMSexyCombo_04 1890 0.46 0.22 0.57 176 FORGED_GMAIL_RCVD 1878 0.73 1.10 0.56 177 T_XMHurry_00 1876 1.25 2.78 0.56 178 NML_ADSP_CUSTOM_MED 1828 0.78 1.30 0.55 179 TM2_M_BODY_EMPTY 1827 0.40 0.06 0.55 180 XMPhish30 1776 0.82 1.44 0.53 181 HTML_IMAGE_ONLY_32 1755 0.41 0.15 0.53 182 XMMoneyMeta_00 1698 0.66 1.00 0.51 183 TO_NO_BRKTS_HTML_ONLY 1691 0.41 0.20 0.51 184 XMPhish14 1668 0.65 0.97 0.50 185 T_Symld_Words_02 1656 0.72 1.21 0.50 186 HTML_IMAGE_ONLY_28 1654 0.42 0.25 0.50 187 RELAYCOUNTRY_GB 1624 0.73 1.27 0.49 188 MPART_ALT_DIFF_COUNT 1602 0.70 1.18 0.48 189 MISSING_HEADERS 1600 0.50 0.54 0.48 190 FROM_GOV_SPOOF 1556 0.35 0.10 0.47 191 XMDateMe_00 1526 0.46 0.46 0.46 192 LongTLD 1520 0.63 1.02 0.46 193 HTML_FONT_FACE_BAD 1511 0.56 0.80 0.45 194 TR_LOTS_OF_MONEY3 1502 0.73 1.34 0.45 195 HTML_IMAGE_ONLY_20 1463 0.49 0.59 0.44 196 PLING_QUERY 1454 0.47 0.54 0.44 197 SpammyFromTLD_02 1434 0.98 2.20 0.43 198 XM_URI_RBL 1424 1.11 2.62 0.43 199 XMSlimDrugH 1418 0.50 0.66 0.43 200 XM_B_SEO 1378 0.73 1.43 0.41 ----------------------------------------------------------------------