Email: 521021 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 1.49 sec Spam: 148833 Autolearn: 0 AvgScore: 14.58 AvgScanTime: 1.69 sec Ham: 372188 Autolearn: 0 AvgScore: -1.95 AvgScanTime: 1.41 sec Time Spent Running SA: 215.65 hours Time Spent Processing Spam: 69.89 hours Time Spent Processing Ham: 145.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142313 90.87 95.62 88.97 2 DKIM_SIGNED 134989 74.28 90.70 67.71 3 XM_DK_Pass 128466 72.08 86.32 66.38 4 DKIM_VALID 127113 71.14 85.41 65.44 5 RELAYCOUNTRY_US 124839 83.31 83.88 83.08 6 XM_B_Unicode 123936 75.97 83.27 73.05 7 DCC_CHECK 112558 47.21 75.63 35.85 8 XMListUnsubscribeExists 106850 51.47 71.79 43.34 9 XM_B_SpammyWords 104034 51.55 69.90 44.21 10 DKIM_VALID_AU 98844 56.39 66.41 52.38 11 LOC_TINY_FONT_1 73488 30.98 49.38 23.62 12 XM_B_Unicode3 71071 44.31 47.75 42.94 13 BAYES_50 62678 53.81 42.11 58.49 14 XM_B_SpammyWords2 60406 23.81 40.59 17.11 15 RCVD_IN_MSPIKE_H2 59995 33.91 40.31 31.36 16 XM_DK_Undo_02 58998 14.13 39.64 3.92 17 HTML_FONT_LOW_CONTRAST 55644 27.77 37.39 23.93 18 T_KAM_HTML_FONT_INVALID 51170 23.97 34.38 19.81 19 FVGT_m_MULTI_ODD 48601 24.87 32.65 21.75 20 DKIM_VALID_EF 44889 26.74 30.16 25.37 21 BAYES_99 43104 10.03 28.96 2.46 22 MIME_HTML_ONLY 42283 24.53 28.41 22.98 23 TR_XM_DKIM_Undo 41636 9.30 27.97 1.83 24 XMSubLong 38076 23.44 25.58 22.59 25 DCC_CHECK_NEGATIVE 33734 52.26 22.67 64.10 26 BAYES_999 33084 7.70 22.23 1.89 27 XM_Multi_Part_URI 32674 14.49 21.95 11.51 28 TR_DCC_Bayes_99 31655 6.75 21.27 0.94 29 TR_XM_DK_Unsub 31068 13.53 20.87 10.59 30 T_TM2_M_HEADER_IN_MSG 30709 24.10 20.63 25.49 31 XM_B_Unsub 24542 10.50 16.49 8.10 32 TR_XM_BayesUnsub 23464 8.82 15.77 6.05 33 UNPARSEABLE_RELAY 23379 11.83 15.71 10.28 34 XM_B_SpammyWords3 22449 7.55 15.08 4.54 35 TR_MAX_INTL_RELAY 21564 7.22 14.49 4.32 36 RELAYCOUNTRY_META 21396 6.57 14.38 3.45 37 LOTS_OF_MONEY 19252 7.57 12.94 5.42 38 TR_XM_SpammyWords4 16941 5.76 11.38 3.52 39 TR_XM_SpammyWords2 16680 3.41 11.21 0.30 40 TR_XM_SpammyRelay 15851 4.19 10.65 1.60 41 BOTNET_IPINHOSTNAME 15366 5.04 10.32 2.92 42 XM_Evil_Numbers_Gen 14596 9.35 9.81 9.16 43 RCVD_IN_BL_SPAMCOP_NET 13722 3.08 9.22 0.63 44 BOTNET 13426 3.62 9.02 1.46 45 BAYES_80 13275 4.47 8.92 2.69 46 XM_Body_Dirty_Words 13014 4.09 8.74 2.23 47 LotsOfNums_01 12324 7.61 8.28 7.35 48 FSL_BULK_SIG 12218 6.98 8.21 6.49 49 BAYES_60 11855 6.51 7.97 5.93 50 XM_B_Phish_Phrases 11772 5.73 7.91 4.86 51 TR_XM_SPAMCOP 11195 2.44 7.52 0.41 52 TR_XM_UnparsRelay 10802 2.91 7.26 1.17 53 XM_B_PhoneNumber 9326 7.95 6.27 8.62 54 MPART_ALT_DIFF 9138 8.21 6.14 9.04 55 XMSubMetaSx_00 9113 3.89 6.12 2.99 56 XM_UncommonTLD01 8785 4.33 5.90 3.71 57 RELAYCOUNTRY_CA 8273 2.27 5.56 0.96 58 HTML_IMAGE_RATIO_02 8230 4.73 5.53 4.41 59 HTML_IMAGE_RATIO_04 8152 11.24 5.48 13.55 60 XM_H_Long_From01 7984 5.33 5.36 5.31 61 TR_XM_PhishingBody 7951 2.60 5.34 1.51 62 BAYES_95 7885 2.67 5.30 1.62 63 DKIM_INVALID 7876 3.13 5.29 2.27 64 UNTRUSTED_Relay 7841 2.44 5.27 1.31 65 XM_H_GMP 7240 5.10 4.86 5.19 66 XM_B_Investor 6477 2.24 4.35 1.39 67 XMSexyCombo_05 6255 1.91 4.20 0.99 68 T_XMDrugObfuBody_14 6151 2.31 4.13 1.59 69 HTML_IMAGE_RATIO_06 6023 4.22 4.05 4.29 70 TM2_M_VERY_LONG_WORD 5962 2.03 4.01 1.23 71 RCVD_IN_MSPIKE_WL 5857 4.61 3.94 4.88 72 RCVD_IN_MSPIKE_H3 5857 4.61 3.94 4.88 73 XM_OfRef6 5817 1.89 3.91 1.09 74 TooManyTo_001 5594 6.63 3.76 7.78 75 TR_XM_SpammyWords5 5278 1.89 3.55 1.23 76 XMStrtUSub 5196 8.06 3.49 9.88 77 XMDiploma_00 5090 2.13 3.42 1.61 78 XM_B_SpammyTLD 5089 2.67 3.42 2.37 79 XMNoVowels 5033 2.50 3.38 2.15 80 MIME_HTML_ONLY_MULTI 4931 6.21 3.31 7.36 81 MIME_QP_LONG_LINE 4796 4.18 3.22 4.57 82 MIME_HTML_MOSTLY 4772 2.36 3.21 2.02 83 XM_B_Unsub2 4529 1.85 3.04 1.37 84 T_XMDrugObfuBody_08 4492 1.93 3.02 1.49 85 XM_B_SpammyWords4 4387 1.47 2.95 0.87 86 RCVD_IN_VALIDITY_RPBL 4365 0.87 2.93 0.05 87 MAILING_LIST_MULTI 4251 2.97 2.86 3.02 88 XM_B_URI_Unicode 4221 2.12 2.84 1.84 89 TM2_M_URI_OPT_OUT 4136 1.90 2.78 1.54 90 XMNumbers 4119 2.55 2.77 2.47 91 HTML_IMAGE_RATIO_08 4064 2.18 2.73 1.95 92 XM_CamelCaseFrm001 4049 2.54 2.72 2.47 93 XM_SPF_SoftFail 4006 1.68 2.69 1.28 94 T_TooManySym_01 3984 4.50 2.68 5.23 95 XM_UB50 3805 1.30 2.56 0.80 96 RELAYCOUNTRY_AU 3774 1.11 2.54 0.54 97 T_XMHurry_00 3759 1.07 2.53 0.49 98 T_XMDrugObfuBody_00 3543 1.29 2.38 0.85 99 DKIM_ADSP_NXDOMAIN 3538 0.88 2.38 0.28 100 XM_URI_RBL 3513 1.00 2.36 0.46 101 XMPhish30 3511 0.97 2.36 0.42 102 NO_DNS_FOR_FROM 3444 0.83 2.31 0.24 103 TR_XM_MaxWHORU 3428 0.80 2.30 0.19 104 TR_XM_NoHeaderRelay 3105 0.72 2.09 0.17 105 RCVD_IN_VALIDITY_SAFE 3072 3.20 2.06 3.65 106 FROM_EXCESS_BASE64 2986 1.73 2.01 1.62 107 BAYES_40 2968 4.67 1.99 5.74 108 HTML_MIME_NO_HTML_TAG 2946 2.29 1.98 2.41 109 ALL_TRUSTED 2938 10.80 1.97 14.33 110 PLING_QUERY 2917 1.08 1.96 0.72 111 SpammyFromTLD_01 2869 1.17 1.93 0.87 112 SpammyFromTLD_02 2846 0.83 1.91 0.39 113 XMStockSpam_06 2813 1.28 1.89 1.03 114 SUBJ_ALL_CAPS 2764 1.68 1.86 1.62 115 XMBody_17 2752 0.81 1.85 0.40 116 XMGenDplmaNmb 2711 1.09 1.82 0.80 117 T_FILL_THIS_FORM_SHORT 2669 1.32 1.79 1.12 118 RCVD_IN_VALIDITY_CERTIFIED 2628 2.73 1.77 3.12 119 TR_LOTS_OF_MONEY3 2536 0.70 1.70 0.30 120 TR_XM_INV_DKIM 2530 0.59 1.70 0.15 121 RCVD_IN_ZEN_LASTEXTERNAL 2526 0.48 1.70 0.00 122 SHORTCIRCUIT 2526 0.48 1.70 0.00 123 T_REMOTE_IMAGE 2486 2.78 1.67 3.22 124 HTTPS_HTTP_MISMATCH 2482 1.06 1.67 0.82 125 DIET_1 2463 0.77 1.65 0.41 126 NORDNS_LOW_CONTRAST 2453 0.49 1.65 0.03 127 URI_HEX 2397 1.26 1.61 1.12 128 USER_IN_DEF_DKIM_WL 2268 9.20 1.52 12.26 129 XMBrknScrpt_02 2224 0.92 1.49 0.69 130 BAYES_20 2205 3.70 1.48 4.59 131 RCVD_IN_IADB_LISTED 2080 3.06 1.40 3.72 132 LongTLD 2007 0.64 1.35 0.36 133 XM_DK_Undo_01 2004 1.53 1.35 1.60 134 XM_SendGrid 2002 1.26 1.35 1.22 135 RCVD_IN_IADB_SPF 1996 2.73 1.34 3.28 136 RCVD_IN_IADB_DK 1955 2.43 1.31 2.88 137 RCVD_IN_IADB_SENDERID 1951 2.48 1.31 2.95 138 URI_NOVOWEL 1946 1.52 1.31 1.61 139 XM_B_Phish66 1942 0.64 1.30 0.38 140 RCVD_IN_PSBL 1939 0.67 1.30 0.42 141 RDNS_DYNAMIC 1915 0.59 1.29 0.31 142 XM_B_SEO 1915 0.58 1.29 0.30 143 HK_RANDOM_REPLYTO 1895 0.44 1.27 0.11 144 PDS_RDNS_DYNAMIC_FP 1858 0.52 1.25 0.23 145 KHOP_HELO_FCRDNS 1848 1.25 1.24 1.25 146 HTML_IMAGE_ONLY_20 1835 0.70 1.23 0.48 147 RCVD_IN_PBL 1822 0.86 1.22 0.71 148 XMBdyGiftCard01 1804 0.79 1.21 0.63 149 HTML_TAG_BALANCE_BODY 1794 0.73 1.21 0.53 150 TR_Symld_Words 1770 1.35 1.19 1.41 151 XM_B_COPY_HTML 1742 0.99 1.17 0.92 152 XM_B_COVIDMETA 1726 0.46 1.16 0.18 153 XM_H_Long_From02 1719 0.92 1.15 0.83 154 RELAYCOUNTRY_FR 1693 0.57 1.14 0.35 155 TR_XM_SEO4 1667 0.44 1.12 0.17 156 XMMoneyMeta_00 1631 0.66 1.10 0.49 157 XM_OfRef7 1619 0.46 1.09 0.21 158 TVD_RCVD_IP 1615 0.83 1.09 0.73 159 SHOPIFY_IMG_NOT_RCVD_SFY 1610 0.44 1.08 0.18 160 XM_B_DNDMA 1579 0.63 1.06 0.45 161 TM2_M_OBFU_COMMENT 1576 0.55 1.06 0.35 162 XM_RXBody 1520 0.77 1.02 0.66 163 T_STY_INVIS_DIRECT 1518 0.50 1.02 0.30 164 TR_LOTS_OF_MONEY2 1514 0.41 1.02 0.16 165 T_MONEY_PERCENT 1514 0.41 1.02 0.16 166 HELO_DYNAMIC_SPLIT_IP 1510 0.29 1.01 0.00 167 URI_TRY_3LD 1504 0.64 1.01 0.49 168 XM_UB99 1477 0.29 0.99 0.00 169 XMSexyCombo_01 1476 0.38 0.99 0.13 170 XMReplyNow 1466 0.44 0.98 0.22 171 XMPhish14 1430 0.60 0.96 0.45 172 FONT_INVIS_LONG_LINE 1429 0.35 0.96 0.11 173 XMHTML_After_End 1420 0.50 0.95 0.31 174 XM_DIRTYINTL 1417 0.37 0.95 0.14 175 XM_B_REG_HTML 1407 0.40 0.95 0.18 176 TR_XM_RelayPhish 1402 0.31 0.94 0.06 177 MPART_ALT_DIFF_COUNT 1387 0.63 0.93 0.51 178 T_Symld_Words_02 1382 0.69 0.93 0.59 179 TR_XM_PHPDW 1363 0.49 0.92 0.32 180 XM_PDF 1349 3.22 0.91 4.15 181 TR_XM_PHPForged 1345 0.49 0.90 0.32 182 BAYES_00 1330 10.89 0.89 14.89 183 XMSubMetaI_00 1328 0.59 0.89 0.47 184 TR_XM_FormFill2 1326 0.48 0.89 0.32 185 MultiRelay_CC 1319 0.36 0.89 0.15 186 DKIM_ADSP_CUSTOM_MED 1307 0.83 0.88 0.81 187 HTML_FONT_TINY_NORDNS 1298 0.30 0.87 0.07 188 XM_H_PHPOS 1294 0.47 0.87 0.31 189 TR_Mismatch_TLD_02 1286 0.29 0.86 0.07 190 TR_XM_Spammywords 1280 0.41 0.86 0.23 191 XM_S_SpammyWords 1280 0.41 0.86 0.23 192 TR_XM_DK_SendGrid 1264 0.79 0.85 0.76 193 HTML_FONT_FACE_BAD 1258 8.76 0.85 11.92 194 HOSTED_IMG_MULTI_PUB_01 1243 0.24 0.84 0.01 195 XM_ProductURIs 1237 0.48 0.83 0.34 196 FROM_SUSPICIOUS_NTLD 1219 0.25 0.82 0.03 197 RCVD_IN_SORBS_DUL 1210 0.26 0.81 0.04 198 TM2_M_A_HREF_HREF 1185 0.41 0.80 0.25 199 URIBL_BLACK 1155 0.25 0.78 0.04 200 XM_H_Undi_Recip 1154 0.34 0.78 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 331151 90.87 95.62 88.97 2 RELAYCOUNTRY_US 309230 83.31 83.88 83.08 3 XM_B_Unicode 271869 75.97 83.27 73.05 4 DKIM_SIGNED 252016 74.28 90.70 67.71 5 XM_DK_Pass 247068 72.08 86.32 66.38 6 DKIM_VALID 243564 71.14 85.41 65.44 7 DCC_CHECK_NEGATIVE 238570 52.26 22.67 64.10 8 BAYES_50 217707 53.81 42.11 58.49 9 DKIM_VALID_AU 194961 56.39 66.41 52.38 10 XM_B_SpammyWords 164561 51.55 69.90 44.21 11 XMListUnsubscribeExists 161294 51.47 71.79 43.34 12 XM_B_Unicode3 159805 44.31 47.75 42.94 13 DCC_CHECK 133436 47.21 75.63 35.85 14 RCVD_IN_MSPIKE_H2 116705 33.91 40.31 31.36 15 T_TM2_M_HEADER_IN_MSG 94880 24.10 20.63 25.49 16 DKIM_VALID_EF 94437 26.74 30.16 25.37 17 HTML_FONT_LOW_CONTRAST 89067 27.77 37.39 23.93 18 LOC_TINY_FONT_1 87924 30.98 49.38 23.62 19 MIME_HTML_ONLY 85521 24.53 28.41 22.98 20 XMSubLong 84077 23.44 25.58 22.59 21 FVGT_m_MULTI_ODD 80958 24.87 32.65 21.75 22 T_KAM_HTML_FONT_INVALID 73721 23.97 34.38 19.81 23 XM_B_SpammyWords2 63668 23.81 40.59 17.11 24 BAYES_00 55424 10.89 0.89 14.89 25 ALL_TRUSTED 53316 10.80 1.97 14.33 26 HTML_IMAGE_RATIO_04 50420 11.24 5.48 13.55 27 USER_IN_DEF_DKIM_WL 45642 9.20 1.52 12.26 28 HTML_FONT_FACE_BAD 44363 8.76 0.85 11.92 29 XM_Multi_Part_URI 42832 14.49 21.95 11.51 30 XM_H_Trusted_IP 41872 8.04 0.00 11.25 31 TR_XM_DK_Unsub 39427 13.53 20.87 10.59 32 UNPARSEABLE_RELAY 38250 11.83 15.71 10.28 33 XMStrtUSub 36774 8.06 3.49 9.88 34 XM_Evil_Numbers_Gen 34102 9.35 9.81 9.16 35 MPART_ALT_DIFF 33632 8.21 6.14 9.04 36 XM_B_PhoneNumber 32070 7.95 6.27 8.62 37 XM_B_Unsub 30157 10.50 16.49 8.10 38 TooManyTo_001 28946 6.63 3.76 7.78 39 MIME_HTML_ONLY_MULTI 27408 6.21 3.31 7.36 40 LotsOfNums_01 27347 7.61 8.28 7.35 41 TR_XM_DK_Bayes 24318 4.88 0.76 6.53 42 FSL_BULK_SIG 24145 6.98 8.21 6.49 43 TR_XM_DK_Bayes1 23798 4.78 0.75 6.39 44 TR_XM_BayesUnsub 22516 8.82 15.77 6.05 45 IN_ZIMBRA_NJ_WHITELIST 22243 4.29 0.09 5.98 46 BAYES_60 22059 6.51 7.97 5.93 47 XM_DKIMWhitelistDomains 21814 4.20 0.04 5.86 48 BAYES_40 21375 4.67 1.99 5.74 49 LOTS_OF_MONEY 20186 7.57 12.94 5.42 50 TR_XM_DK_Bayes2 20110 4.03 0.60 5.40 51 XM_H_Long_From01 19769 5.33 5.36 5.31 52 T_TooManySym_01 19462 4.50 2.68 5.23 53 XM_H_GMP 19330 5.10 4.86 5.19 54 RCVD_IN_MSPIKE_H3 18152 4.61 3.94 4.88 55 RCVD_IN_MSPIKE_WL 18152 4.61 3.94 4.88 56 XM_B_Phish_Phrases 18105 5.73 7.91 4.86 57 BAYES_20 17092 3.70 1.48 4.59 58 MIME_QP_LONG_LINE 17003 4.18 3.22 4.57 59 XM_B_SpammyWords3 16879 7.55 15.08 4.54 60 HTML_IMAGE_RATIO_02 16408 4.73 5.53 4.41 61 TR_MAX_INTL_RELAY 16068 7.22 14.49 4.32 62 HTML_IMAGE_RATIO_06 15965 4.22 4.05 4.29 63 XMSubNoVowel 15745 3.13 0.38 4.23 64 XM_PDF 15442 3.22 0.91 4.15 65 XM_DK_Undo_02 14606 14.13 39.64 3.92 66 RCVD_IN_IADB_LISTED 13846 3.06 1.40 3.72 67 XM_UncommonTLD01 13798 4.33 5.90 3.71 68 RCVD_IN_VALIDITY_SAFE 13601 3.20 2.06 3.65 69 BAYES_05 13321 2.75 0.68 3.58 70 TR_XM_SpammyWords4 13085 5.76 11.38 3.52 71 RELAYCOUNTRY_META 12852 6.57 14.38 3.45 72 ANY_BOUNCE_MESSAGE 12283 2.58 0.77 3.30 73 BOUNCE_MESSAGE 12271 2.57 0.77 3.30 74 RCVD_IN_IADB_SPF 12210 2.73 1.34 3.28 75 T_REMOTE_IMAGE 11998 2.78 1.67 3.22 76 RCVD_IN_VALIDITY_CERTIFIED 11604 2.73 1.77 3.12 77 MAILING_LIST_MULTI 11243 2.97 2.86 3.02 78 XMSubMetaSx_00 11147 3.89 6.12 2.99 79 RCVD_IN_IADB_SENDERID 10963 2.48 1.31 2.95 80 BOTNET_IPINHOSTNAME 10881 5.04 10.32 2.92 81 RCVD_IN_IADB_DK 10702 2.43 1.31 2.88 82 T_TooManySym_02 10181 2.14 0.65 2.74 83 BAYES_80 10017 4.47 8.92 2.69 84 TooManyTo_002 9806 2.10 0.75 2.63 85 XMNumbers 9188 2.55 2.77 2.47 86 XM_CamelCaseFrm001 9184 2.54 2.72 2.47 87 BAYES_99 9138 10.03 28.96 2.46 88 RCVD_IN_IADB_VOUCHED 8972 1.84 0.41 2.41 89 HTML_MIME_NO_HTML_TAG 8966 2.29 1.98 2.41 90 XM_B_SpammyTLD 8830 2.67 3.42 2.37 91 DKIM_INVALID 8452 3.13 5.29 2.27 92 XM_Body_Dirty_Words 8291 4.09 8.74 2.23 93 XMNoVowels 8004 2.50 3.38 2.15 94 XMSubLongNoVowel 7606 1.48 0.06 2.04 95 INVALID_MSGID 7598 1.53 0.26 2.04 96 MIME_HTML_MOSTLY 7521 2.36 3.21 2.02 97 XMSubGarbage 7413 1.43 0.02 1.99 98 HTML_IMAGE_RATIO_08 7276 2.18 2.73 1.95 99 BAYES_999 7049 7.70 22.23 1.89 100 XM_B_URI_Unicode 6847 2.12 2.84 1.84 101 TR_XM_DKIM_Undo 6808 9.30 27.97 1.83 102 TO_MALFORMED 6280 1.25 0.15 1.69 103 RCVD_IN_IADB_OPTIN 6194 1.27 0.30 1.66 104 BAYES_95 6045 2.67 5.30 1.62 105 FROM_EXCESS_BASE64 6018 1.73 2.01 1.62 106 SUBJ_ALL_CAPS 6015 1.68 1.86 1.62 107 URI_NOVOWEL 5997 1.52 1.31 1.61 108 XMDiploma_00 5994 2.13 3.42 1.61 109 TR_XM_SpammyRelay 5957 4.19 10.65 1.60 110 XM_DK_Undo_01 5950 1.53 1.35 1.60 111 T_XMDrugObfuBody_14 5902 2.31 4.13 1.59 112 TooManyTo_003 5785 1.29 0.64 1.55 113 TM2_M_URI_OPT_OUT 5749 1.90 2.78 1.54 114 TR_XM_PhishingBody 5611 2.60 5.34 1.51 115 T_XMDrugObfuBody_08 5558 1.93 3.02 1.49 116 BOTNET 5429 3.62 9.02 1.46 117 TR_Symld_Words 5242 1.35 1.19 1.41 118 XM_B_Investor 5180 2.24 4.35 1.39 119 XM_B_Unsub2 5109 1.85 3.04 1.37 120 HELO_NODOT 4900 0.98 0.15 1.32 121 HELO_NO_DOMAIN 4897 0.98 0.15 1.32 122 UNTRUSTED_Relay 4876 2.44 5.27 1.31 123 IN_HORDE_ADDRESS_BOOK 4786 0.95 0.11 1.29 124 XM_SPF_SoftFail 4753 1.68 2.69 1.28 125 KHOP_HELO_FCRDNS 4647 1.25 1.24 1.25 126 TM2_M_VERY_LONG_WORD 4592 2.03 4.01 1.23 127 TR_XM_SpammyWords5 4589 1.89 3.55 1.23 128 XM_SendGrid 4550 1.26 1.35 1.22 129 XMGappySubj_01 4534 0.92 0.18 1.22 130 TR_MetaPhish_Combo_01 4412 1.05 0.72 1.19 131 TR_XM_UnparsRelay 4363 2.91 7.26 1.17 132 T_TooManySym_03 4351 0.90 0.23 1.17 133 TooManyTo_004 4254 0.98 0.57 1.14 134 T_FILL_THIS_FORM_SHORT 4184 1.32 1.79 1.12 135 XMCapTrack 4164 0.91 0.39 1.12 136 URI_HEX 4151 1.26 1.61 1.12 137 XM_OfRef6 4040 1.89 3.91 1.09 138 XM_GoogleGroups 3941 0.97 0.76 1.06 139 XMStockSpam_06 3837 1.28 1.89 1.03 140 XMSexyCombo_05 3696 1.91 4.20 0.99 141 RELAYCOUNTRY_CA 3577 2.27 5.56 0.96 142 TR_DCC_Bayes_99 3516 6.75 21.27 0.94 143 TooManyTo_005 3516 0.83 0.54 0.94 144 FROM_GOV_DKIM_AU 3443 0.80 0.49 0.93 145 XM_B_COPY_HTML 3437 0.99 1.17 0.92 146 XM_E_Blogspot 3383 0.67 0.08 0.91 147 XM_B_SpammyWords4 3254 1.47 2.95 0.87 148 TVD_SPACE_RATIO 3243 0.68 0.21 0.87 149 SpammyFromTLD_01 3223 1.17 1.93 0.87 150 T_XMDrugObfuBody_00 3166 1.29 2.38 0.85 151 XM_H_Long_From02 3094 0.92 1.15 0.83 152 HTTPS_HTTP_MISMATCH 3047 1.06 1.67 0.82 153 DKIM_ADSP_CUSTOM_MED 3028 0.83 0.88 0.81 154 XM_UB50 2992 1.30 2.56 0.80 155 XMGenDplmaNmb 2967 1.09 1.82 0.80 156 XM_ShortIntro_01 2951 0.75 0.64 0.79 157 TR_XM_Base64_M1 2893 0.74 0.66 0.78 158 TR_XM_DK_SendGrid 2842 0.79 0.85 0.76 159 TVD_RCVD_IP 2710 0.83 1.09 0.73 160 PLING_QUERY 2690 1.08 1.96 0.72 161 RCVD_IN_PBL 2638 0.86 1.22 0.71 162 XMGappySubj_02 2634 0.53 0.07 0.71 163 XMBrknScrpt_02 2551 0.92 1.49 0.69 164 XM_RXBody 2468 0.77 1.02 0.66 165 T_OBFU_PDF_ATTACH 2412 0.54 0.26 0.65 166 RCVD_IN_BL_SPAMCOP_NET 2332 3.08 9.22 0.63 167 XMBdyGiftCard01 2331 0.79 1.21 0.63 168 TO_NO_BRKTS_HTML_ONLY 2229 0.52 0.31 0.60 169 XM_H_PHPMailer 2206 0.60 0.62 0.59 170 T_Symld_Words_02 2196 0.69 0.93 0.59 171 LOW_PRICE 2142 0.54 0.45 0.58 172 NML_ADSP_CUSTOM_MED 2127 0.61 0.71 0.57 173 RELAYCOUNTRY_AU 2024 1.11 2.54 0.54 174 HTML_TAG_BALANCE_BODY 1985 0.73 1.21 0.53 175 XMBody_95 1902 0.41 0.16 0.51 176 MPART_ALT_DIFF_COUNT 1887 0.63 0.93 0.51 177 FORGED_GMAIL_RCVD 1871 0.53 0.58 0.50 178 T_XMHurry_00 1831 1.07 2.53 0.49 179 XMMoneyMeta_00 1828 0.66 1.10 0.49 180 URI_TRY_3LD 1825 0.64 1.01 0.49 181 XMLngstWrd_00 1809 0.47 0.42 0.49 182 SUBJ_BUY 1794 0.36 0.06 0.48 183 HTML_IMAGE_ONLY_20 1788 0.70 1.23 0.48 184 XMSubMetaI_00 1748 0.59 0.89 0.47 185 XM_URI_RBL 1707 1.00 2.36 0.46 186 XM_B_DNDMA 1689 0.63 1.06 0.45 187 XMPhish14 1677 0.60 0.96 0.45 188 HTML_IMAGE_ONLY_28 1657 0.42 0.35 0.45 189 XMSlimDrugH 1646 0.54 0.77 0.44 190 MIME_CHARSET_FARAWAY 1629 0.53 0.75 0.44 191 XMLngstWrd_01 1598 0.42 0.38 0.43 192 XMDateMe_00 1597 0.42 0.40 0.43 193 FILL_THIS_FORM 1571 0.36 0.19 0.42 194 SHORT_HELO_AND_INLINE_IMAGE 1568 0.31 0.03 0.42 195 RELAYCOUNTRY_GB 1551 0.50 0.71 0.42 196 RCVD_IN_PSBL 1547 0.67 1.30 0.42 197 XMPhish30 1545 0.97 2.36 0.42 198 HTML_IMAGE_ONLY_32 1544 0.35 0.20 0.41 199 DIET_1 1525 0.77 1.65 0.41 200 XMBSHREFv2 1518 0.39 0.34 0.41 ----------------------------------------------------------------------