Email: 437461 Autolearn: 0 AvgScore: 4.53 AvgScanTime: 1.35 sec Spam: 128869 Autolearn: 0 AvgScore: 14.80 AvgScanTime: 1.47 sec Ham: 308592 Autolearn: 0 AvgScore: 0.24 AvgScanTime: 1.30 sec Time Spent Running SA: 164.20 hours Time Spent Processing Spam: 52.66 hours Time Spent Processing Ham: 111.54 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 121869 89.14 94.57 86.87 2 DKIM_SIGNED 114832 77.04 89.11 71.99 3 XM_DK_Pass 109513 74.77 84.98 70.51 4 XM_B_Unicode 108348 73.70 84.08 69.36 5 DKIM_VALID 108137 73.62 83.91 69.32 6 RELAYCOUNTRY_US 107516 81.86 83.43 81.21 7 DCC_CHECK 95701 47.11 74.26 35.77 8 XMListUnsubscribeExists 88748 51.55 68.87 44.32 9 XM_B_SpammyWords 88736 50.97 68.86 43.51 10 DKIM_VALID_AU 86242 58.72 66.92 55.29 11 XM_B_Unicode3 65173 43.05 50.57 39.90 12 LOC_TINY_FONT_1 61176 31.46 47.47 24.77 13 BAYES_50 54399 55.54 42.21 61.11 14 XM_B_SpammyWords2 52047 23.99 40.39 17.14 15 RCVD_IN_MSPIKE_H2 50687 35.71 39.33 34.19 16 XM_DK_Undo_02 48979 14.19 38.01 4.25 17 HTML_FONT_LOW_CONTRAST 47286 30.87 36.69 28.45 18 FVGT_m_MULTI_ODD 42119 26.75 32.68 24.27 19 T_KAM_HTML_FONT_INVALID 40488 23.08 31.42 19.59 20 BAYES_99 37199 10.68 28.87 3.08 21 DKIM_VALID_EF 36328 28.99 28.19 29.33 22 MIME_HTML_ONLY 35191 21.65 27.31 19.28 23 TR_XM_DKIM_Undo 34751 9.13 26.97 1.68 24 XMSubLong 31167 23.27 24.19 22.88 25 DCC_CHECK_NEGATIVE 30598 52.27 23.74 64.18 26 T_TM2_M_HEADER_IN_MSG 29360 30.99 22.78 34.41 27 BAYES_999 28440 8.11 22.07 2.29 28 XM_Multi_Part_URI 27308 14.95 21.19 12.34 29 TR_DCC_Bayes_99 26894 6.88 20.87 1.04 30 TR_XM_DK_Unsub 25385 14.32 19.70 12.07 31 UNPARSEABLE_RELAY 22468 13.34 17.43 11.62 32 XM_B_Unsub 21019 11.39 16.31 9.33 33 TR_XM_BayesUnsub 20300 9.47 15.75 6.84 34 RELAYCOUNTRY_META 19408 6.94 15.06 3.54 35 XM_B_SpammyWords3 19408 7.42 15.06 4.23 36 TR_MAX_INTL_RELAY 18535 8.08 14.38 5.45 37 LOTS_OF_MONEY 15861 7.98 12.31 6.17 38 BOTNET_IPINHOSTNAME 14264 5.38 11.07 3.01 39 TR_XM_SpammyWords4 14201 6.16 11.02 4.13 40 TR_XM_SpammyRelay 13968 4.49 10.84 1.84 41 TR_XM_SpammyWords2 12757 3.15 9.90 0.33 42 FSL_BULK_SIG 12424 7.70 9.64 6.88 43 XM_Evil_Numbers_Gen 12376 9.40 9.60 9.31 44 BOTNET 12268 3.65 9.52 1.20 45 BAYES_80 11607 4.94 9.01 3.25 46 TR_XM_UnparsRelay 11094 3.71 8.61 1.66 47 LotsOfNums_01 10297 9.31 7.99 9.85 48 BAYES_60 10292 6.64 7.99 6.08 49 XM_B_Phish_Phrases 10117 5.59 7.85 4.65 50 RCVD_IN_BL_SPAMCOP_NET 8842 2.38 6.86 0.51 51 XMSubMetaSx_00 8622 4.15 6.69 3.09 52 XM_Body_Dirty_Words 8500 3.48 6.60 2.18 53 HTML_IMAGE_RATIO_02 8289 4.94 6.43 4.32 54 MPART_ALT_DIFF 7807 4.54 6.06 3.91 55 XM_B_PhoneNumber 7644 8.97 5.93 10.24 56 XM_UncommonTLD01 7533 4.76 5.85 4.31 57 RELAYCOUNTRY_CA 7399 2.37 5.74 0.96 58 UNTRUSTED_Relay 7227 2.66 5.61 1.43 59 DKIM_INVALID 6695 3.42 5.20 2.68 60 XM_B_Investor 6683 2.58 5.19 1.49 61 HTML_IMAGE_RATIO_04 6663 4.28 5.17 3.91 62 XM_H_GMP 6655 5.94 5.16 6.27 63 XM_H_Long_From01 6654 5.20 5.16 5.22 64 TR_XM_SPAMCOP 6547 1.70 5.08 0.29 65 BAYES_95 6506 3.04 5.05 2.20 66 TM2_M_VERY_LONG_WORD 6127 4.88 4.75 4.93 67 XMStrtUSub 6118 4.91 4.75 4.98 68 TooManyTo_001 5889 7.66 4.57 8.95 69 TR_XM_PhishingBody 5788 2.40 4.49 1.52 70 TR_XM_SpammyWords5 5785 2.36 4.49 1.47 71 XMSexyCombo_05 5681 2.01 4.41 1.01 72 XM_B_SpammyTLD 5497 2.88 4.27 2.30 73 HTML_IMAGE_RATIO_06 5487 3.18 4.26 2.73 74 XMNumbers 4865 3.27 3.78 3.05 75 T_XMDrugObfuBody_14 4761 2.50 3.69 2.00 76 MIME_HTML_MOSTLY 4732 2.59 3.67 2.13 77 MIME_HTML_ONLY_MULTI 4505 2.71 3.50 2.38 78 T_XMDrugObfuBody_08 4471 2.26 3.47 1.75 79 MIME_QP_LONG_LINE 4410 4.40 3.42 4.80 80 XM_SPF_SoftFail 4407 2.02 3.42 1.43 81 RCVD_IN_MSPIKE_WL 4355 4.54 3.38 5.02 82 RCVD_IN_MSPIKE_H3 4355 4.54 3.38 5.02 83 XM_CamelCaseFrm001 4156 2.38 3.22 2.02 84 XMDiploma_00 3954 2.11 3.07 1.71 85 XM_B_SpammyWords4 3849 1.42 2.99 0.76 86 XM_OfRef6 3812 1.69 2.96 1.16 87 TM2_M_URI_OPT_OUT 3768 2.07 2.92 1.72 88 XM_UB50 3729 1.49 2.89 0.90 89 XM_B_Unsub2 3629 2.02 2.82 1.69 90 HTML_IMAGE_RATIO_08 3368 2.11 2.61 1.89 91 RELAYCOUNTRY_AU 3332 1.14 2.59 0.54 92 XM_B_URI_Unicode 3263 2.14 2.53 1.98 93 MAILING_LIST_MULTI 3240 2.63 2.51 2.68 94 T_XMHurry_00 3208 1.20 2.49 0.67 95 XM_URI_RBL 3172 0.99 2.46 0.37 96 XMNoVowels 3169 2.33 2.46 2.27 97 RCVD_IN_VALIDITY_RPBL 3010 0.70 2.34 0.02 98 T_TooManySym_01 2941 4.87 2.28 5.95 99 MIME_CHARSET_FARAWAY 2917 2.32 2.26 2.34 100 ANY_BOUNCE_MESSAGE 2853 5.39 2.21 6.72 101 BOUNCE_MESSAGE 2853 5.39 2.21 6.72 102 KHOP_HELO_FCRDNS 2690 2.93 2.09 3.28 103 TR_XM_NoHeaderRelay 2685 0.77 2.08 0.22 104 SUBJ_ALL_CAPS 2597 1.73 2.02 1.61 105 RCVD_IN_ZEN_LASTEXTERNAL 2560 0.59 1.99 0.00 106 SHORTCIRCUIT 2560 0.59 1.99 0.00 107 XMBody_17 2550 0.90 1.98 0.46 108 T_REMOTE_IMAGE 2550 3.29 1.98 3.83 109 TR_MetaPhish_Combo_01 2541 1.17 1.97 0.83 110 SpammyFromTLD_02 2519 0.73 1.95 0.21 111 DIET_1 2494 0.88 1.94 0.44 112 HTML_MIME_NO_HTML_TAG 2465 2.51 1.91 2.76 113 BAYES_40 2457 4.93 1.91 6.19 114 TR_XM_INV_DKIM 2449 0.69 1.90 0.18 115 XMStockSpam_06 2360 1.39 1.83 1.21 116 T_XMDrugObfuBody_00 2345 0.95 1.82 0.59 117 FROM_EXCESS_BASE64 2308 1.89 1.79 1.94 118 ALL_TRUSTED 2284 11.78 1.77 15.95 119 XMBrknScrpt_02 2256 1.25 1.75 1.05 120 SpammyFromTLD_01 2221 1.12 1.72 0.87 121 RCVD_IN_VALIDITY_SAFE 2183 2.96 1.69 3.49 122 XM_DK_Undo_01 2155 1.72 1.67 1.75 123 TR_Symld_Words 2140 1.73 1.66 1.76 124 USER_IN_DEF_DKIM_WL 2125 8.43 1.65 11.27 125 URI_HEX 2095 1.47 1.63 1.41 126 XMPhish30 2066 0.85 1.60 0.53 127 XM_H_Long_From02 1960 1.13 1.52 0.97 128 XM_SendGrid 1933 1.44 1.50 1.42 129 XMGenDplmaNmb 1920 0.99 1.49 0.78 130 CHARSET_FARAWAY_HEADER 1875 1.87 1.45 2.04 131 MAY_BE_FORGED 1865 3.04 1.45 3.71 132 TR_LOTS_OF_MONEY2 1859 0.65 1.44 0.33 133 T_MONEY_PERCENT 1859 0.65 1.44 0.33 134 BAYES_20 1849 3.28 1.43 4.05 135 RCVD_IN_VALIDITY_CERTIFIED 1808 2.41 1.40 2.83 136 T_FILL_THIS_FORM_SHORT 1782 1.10 1.38 0.98 137 URI_NOVOWEL 1714 1.45 1.33 1.50 138 RCVD_IN_PBL 1707 0.95 1.32 0.79 139 TR_LOTS_OF_MONEY3 1677 0.56 1.30 0.25 140 XM_B_COPY_HTML 1663 0.84 1.29 0.65 141 XM_B_DNDMA 1661 0.67 1.29 0.42 142 HTML_TAG_BALANCE_BODY 1629 0.77 1.26 0.56 143 RCVD_IN_PSBL 1617 0.54 1.25 0.24 144 XMEqualsVooDoo_00 1613 0.48 1.25 0.15 145 URI_TRY_3LD 1580 0.86 1.23 0.70 146 XM_B_Phish66 1574 0.57 1.22 0.30 147 XMEqualsVooDoo_01 1543 0.35 1.20 0.00 148 XMEqualsVooDoo_02 1536 0.35 1.19 0.00 149 XMEqualsVooDoo_03 1532 0.35 1.19 0.00 150 T_Symld_Words_02 1510 0.66 1.17 0.45 151 XMHTML_After_End 1502 0.57 1.17 0.32 152 RCVD_IN_IADB_LISTED 1479 2.77 1.15 3.44 153 XMReplyNow 1476 0.51 1.15 0.24 154 LongTLD 1467 0.62 1.14 0.41 155 HTTPS_HTTP_MISMATCH 1453 0.91 1.13 0.82 156 TR_XM_PHPForged 1437 0.66 1.12 0.47 157 DKIM_ADSP_CUSTOM_MED 1431 0.99 1.11 0.94 158 TR_XM_PHPDW 1426 0.66 1.11 0.47 159 MPART_ALT_DIFF_COUNT 1417 0.82 1.10 0.71 160 TR_XM_InvalidRelay 1401 0.33 1.09 0.02 161 XM_B_SEO 1399 0.50 1.09 0.25 162 XM_H_Undi_Recip 1399 0.50 1.09 0.25 163 TR_XM_FormFill2 1394 0.65 1.08 0.48 164 TM2_M_OBFU_COMMENT 1391 0.57 1.08 0.36 165 RCVD_IN_IADB_SPF 1377 2.41 1.07 2.98 166 XM_H_PHPOS 1360 0.63 1.06 0.46 167 RELAYCOUNTRY_FR 1355 0.46 1.05 0.21 168 HTML_FONT_TINY_NORDNS 1353 0.35 1.05 0.06 169 RCVD_IN_IADB_DK 1342 2.13 1.04 2.58 170 XMSubMetaI_00 1329 0.64 1.03 0.48 171 BOTNET_NORDNS 1327 0.31 1.03 0.01 172 RCVD_IN_IADB_SENDERID 1321 2.18 1.03 2.66 173 RCVD_IN_SORBS_DUL 1299 0.32 1.01 0.04 174 XMBdyGiftCard01 1290 0.66 1.00 0.51 175 NO_DNS_FOR_FROM 1287 0.50 1.00 0.29 176 SHOPIFY_IMG_NOT_RCVD_SFY 1269 0.44 0.98 0.22 177 TR_XM_MaxWHORU 1268 0.44 0.98 0.22 178 TR_XM_SEO4 1253 0.37 0.97 0.12 179 XM_ProductURIs 1238 0.57 0.96 0.41 180 TR_XM_DK_SendGrid 1225 0.93 0.95 0.92 181 TR_XM_RelayPhish 1195 0.33 0.93 0.08 182 XM_PDF 1182 3.67 0.92 4.82 183 XMMoneyMeta_00 1181 0.64 0.92 0.53 184 MultiRelay_CC 1173 0.39 0.91 0.17 185 RELAYCOUNTRY_GB 1151 0.60 0.89 0.47 186 XMBody_78 1144 0.41 0.89 0.20 187 DKIM_ADSP_NXDOMAIN 1130 0.51 0.88 0.35 188 XM_GoogleGroups 1120 1.07 0.87 1.16 189 XM_UB99 1117 0.26 0.87 0.01 190 XM_HighProb1 1117 0.26 0.87 0.01 191 XM_DIRTYINTL 1103 0.33 0.86 0.10 192 XMSexyCombo_01 1079 0.35 0.84 0.15 193 NML_ADSP_CUSTOM_MED 1078 0.71 0.84 0.66 194 TM2_M_A_HREF_HREF 1073 0.39 0.83 0.20 195 BAYES_00 1072 8.51 0.83 11.71 196 XM_B_REG_HTML 1053 0.42 0.82 0.25 197 XM_B_COVIDMETA 1036 0.35 0.80 0.16 198 RCVD_IN_XBL 1026 0.26 0.80 0.03 199 TR_Mismatch_TLD_02 1017 0.28 0.79 0.07 200 HTML_FONT_FACE_BAD 1017 0.53 0.79 0.42 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 268063 89.14 94.57 86.87 2 RELAYCOUNTRY_US 250607 81.86 83.43 81.21 3 DKIM_SIGNED 222169 77.04 89.11 71.99 4 XM_DK_Pass 217581 74.77 84.98 70.51 5 XM_B_Unicode 214044 73.70 84.08 69.36 6 DKIM_VALID 213911 73.62 83.91 69.32 7 DCC_CHECK_NEGATIVE 198057 52.27 23.74 64.18 8 BAYES_50 188584 55.54 42.21 61.11 9 DKIM_VALID_AU 170620 58.72 66.92 55.29 10 XMListUnsubscribeExists 136781 51.55 68.87 44.32 11 XM_B_SpammyWords 134255 50.97 68.86 43.51 12 XM_B_Unicode3 123134 43.05 50.57 39.90 13 DCC_CHECK 110388 47.11 74.26 35.77 14 T_TM2_M_HEADER_IN_MSG 106192 30.99 22.78 34.41 15 RCVD_IN_MSPIKE_H2 105512 35.71 39.33 34.19 16 DKIM_VALID_EF 90496 28.99 28.19 29.33 17 HTML_FONT_LOW_CONTRAST 87779 30.87 36.69 28.45 18 LOC_TINY_FONT_1 76436 31.46 47.47 24.77 19 FVGT_m_MULTI_ODD 74906 26.75 32.68 24.27 20 XMSubLong 70621 23.27 24.19 22.88 21 T_KAM_HTML_FONT_INVALID 60463 23.08 31.42 19.59 22 MIME_HTML_ONLY 59507 21.65 27.31 19.28 23 XM_B_SpammyWords2 52905 23.99 40.39 17.14 24 ALL_TRUSTED 49235 11.78 1.77 15.95 25 XM_Multi_Part_URI 38080 14.95 21.19 12.34 26 TR_XM_DK_Unsub 37258 14.32 19.70 12.07 27 BAYES_00 36149 8.51 0.83 11.71 28 UNPARSEABLE_RELAY 35872 13.34 17.43 11.62 29 USER_IN_DEF_DKIM_WL 34764 8.43 1.65 11.27 30 XM_B_PhoneNumber 31613 8.97 5.93 10.24 31 LotsOfNums_01 30410 9.31 7.99 9.85 32 XM_B_Unsub 28798 11.39 16.31 9.33 33 XM_Evil_Numbers_Gen 28729 9.40 9.60 9.31 34 TooManyTo_001 27621 7.66 4.57 8.95 35 TR_XM_DK_Bayes 22361 5.32 0.70 7.25 36 TR_XM_DK_Bayes1 21860 5.20 0.69 7.08 37 FSL_BULK_SIG 21240 7.70 9.64 6.88 38 TR_XM_BayesUnsub 21109 9.47 15.75 6.84 39 ANY_BOUNCE_MESSAGE 20741 5.39 2.21 6.72 40 BOUNCE_MESSAGE 20741 5.39 2.21 6.72 41 XM_DKIMWhitelistDomains 20088 4.64 0.16 6.51 42 IN_ZIMBRA_NJ_WHITELIST 20004 4.61 0.12 6.48 43 XM_H_GMP 19338 5.94 5.16 6.27 44 BAYES_40 19099 4.93 1.91 6.19 45 LOTS_OF_MONEY 19047 7.98 12.31 6.17 46 BAYES_60 18766 6.64 7.99 6.08 47 TR_XM_DK_Bayes2 18568 4.39 0.50 6.02 48 T_TooManySym_01 18350 4.87 2.28 5.95 49 TR_MAX_INTL_RELAY 16816 8.08 14.38 5.45 50 XM_H_Long_From01 16108 5.20 5.16 5.22 51 RCVD_IN_MSPIKE_WL 15485 4.54 3.38 5.02 52 RCVD_IN_MSPIKE_H3 15485 4.54 3.38 5.02 53 XMStrtUSub 15356 4.91 4.75 4.98 54 TM2_M_VERY_LONG_WORD 15212 4.88 4.75 4.93 55 XM_PDF 14882 3.67 0.92 4.82 56 MIME_QP_LONG_LINE 14817 4.40 3.42 4.80 57 XM_B_Phish_Phrases 14335 5.59 7.85 4.65 58 HTML_IMAGE_RATIO_02 13340 4.94 6.43 4.32 59 XM_UncommonTLD01 13310 4.76 5.85 4.31 60 XM_DK_Undo_02 13100 14.19 38.01 4.25 61 XM_B_SpammyWords3 13065 7.42 15.06 4.23 62 HTML_IMAGE_ONLY_32 12951 3.05 0.30 4.20 63 TR_XM_SpammyWords4 12749 6.16 11.02 4.13 64 BAYES_20 12509 3.28 1.43 4.05 65 HTML_IMAGE_RATIO_04 12066 4.28 5.17 3.91 66 MPART_ALT_DIFF 12053 4.54 6.06 3.91 67 T_REMOTE_IMAGE 11827 3.29 1.98 3.83 68 MAY_BE_FORGED 11435 3.04 1.45 3.71 69 RELAYCOUNTRY_META 10938 6.94 15.06 3.54 70 RCVD_IN_VALIDITY_SAFE 10756 2.96 1.69 3.49 71 RCVD_IN_IADB_LISTED 10626 2.77 1.15 3.44 72 TooManyTo_002 10592 2.65 0.78 3.43 73 KHOP_HELO_FCRDNS 10122 2.93 2.09 3.28 74 BAYES_80 10017 4.94 9.01 3.25 75 T_TooManySym_02 9906 2.49 0.75 3.21 76 XMSubMetaSx_00 9527 4.15 6.69 3.09 77 BAYES_99 9512 10.68 28.87 3.08 78 XMNumbers 9426 3.27 3.78 3.05 79 BOTNET_IPINHOSTNAME 9288 5.38 11.07 3.01 80 RCVD_IN_IADB_SPF 9186 2.41 1.07 2.98 81 RCVD_IN_VALIDITY_CERTIFIED 8727 2.41 1.40 2.83 82 HTML_MIME_NO_HTML_TAG 8520 2.51 1.91 2.76 83 HTML_IMAGE_RATIO_06 8432 3.18 4.26 2.73 84 MAILING_LIST_MULTI 8272 2.63 2.51 2.68 85 DKIM_INVALID 8258 3.42 5.20 2.68 86 RCVD_IN_IADB_SENDERID 8202 2.18 1.03 2.66 87 RCVD_IN_IADB_DK 7959 2.13 1.04 2.58 88 MIME_HTML_ONLY_MULTI 7336 2.71 3.50 2.38 89 RCVD_IN_IADB_VOUCHED 7282 1.77 0.34 2.36 90 INVALID_MSGID 7262 1.71 0.16 2.35 91 MIME_CHARSET_FARAWAY 7230 2.32 2.26 2.34 92 BAYES_05 7165 1.85 0.72 2.32 93 XM_B_SpammyTLD 7102 2.88 4.27 2.30 94 BAYES_999 7055 8.11 22.07 2.29 95 XMNoVowels 7007 2.33 2.46 2.27 96 BAYES_95 6786 3.04 5.05 2.20 97 XM_Body_Dirty_Words 6730 3.48 6.60 2.18 98 MIME_HTML_MOSTLY 6583 2.59 3.67 2.13 99 CHARSET_FARAWAY_HEADER 6291 1.87 1.45 2.04 100 TO_MALFORMED 6281 1.45 0.03 2.04 101 XM_CamelCaseFrm001 6239 2.38 3.22 2.02 102 T_XMDrugObfuBody_14 6173 2.50 3.69 2.00 103 XM_B_URI_Unicode 6112 2.14 2.53 1.98 104 TooManyTo_003 6026 1.58 0.70 1.95 105 FROM_EXCESS_BASE64 5978 1.89 1.79 1.94 106 HTML_IMAGE_RATIO_08 5847 2.11 2.61 1.89 107 TR_XM_SpammyRelay 5684 4.49 10.84 1.84 108 TR_Symld_Words 5442 1.73 1.66 1.76 109 T_XMDrugObfuBody_08 5414 2.26 3.47 1.75 110 XM_DK_Undo_01 5387 1.72 1.67 1.75 111 TM2_M_URI_OPT_OUT 5295 2.07 2.92 1.72 112 XMDiploma_00 5292 2.11 3.07 1.71 113 XM_B_Unsub2 5200 2.02 2.82 1.69 114 TR_XM_DKIM_Undo 5197 9.13 26.97 1.68 115 TR_XM_UnparsRelay 5130 3.71 8.61 1.66 116 RCVD_IN_IADB_OPTIN 5045 1.21 0.18 1.63 117 XMLngstWrd_00 4978 1.32 0.61 1.61 118 SUBJ_ALL_CAPS 4977 1.73 2.02 1.61 119 TR_XM_PhishingBody 4690 2.40 4.49 1.52 120 URI_NOVOWEL 4627 1.45 1.33 1.50 121 XM_B_Investor 4611 2.58 5.19 1.49 122 TooManyTo_004 4554 1.23 0.63 1.48 123 TR_XM_SpammyWords5 4535 2.36 4.49 1.47 124 IN_HORDE_ADDRESS_BOOK 4462 1.05 0.11 1.45 125 XM_SPF_SoftFail 4424 2.02 3.42 1.43 126 UNTRUSTED_Relay 4411 2.66 5.61 1.43 127 XM_SendGrid 4382 1.44 1.50 1.42 128 URI_HEX 4356 1.47 1.63 1.41 129 XMCapTrack 4313 1.17 0.63 1.40 130 HELO_NODOT 4308 1.08 0.33 1.40 131 HELO_NO_DOMAIN 4305 1.08 0.33 1.40 132 XMGappySubj_01 4088 1.02 0.30 1.32 133 T_TooManySym_03 3904 0.96 0.23 1.27 134 TooManyTo_005 3755 1.03 0.57 1.22 135 XMStockSpam_06 3738 1.39 1.83 1.21 136 BOTNET 3700 3.65 9.52 1.20 137 XM_OfRef6 3572 1.69 2.96 1.16 138 XM_GoogleGroups 3565 1.07 0.87 1.16 139 TVD_SPACE_RATIO 3323 0.85 0.30 1.08 140 XMBrknScrpt_02 3231 1.25 1.75 1.05 141 TR_DCC_Bayes_99 3197 6.88 20.87 1.04 142 XMSexyCombo_05 3131 2.01 4.41 1.01 143 T_FILL_THIS_FORM_SHORT 3036 1.10 1.38 0.98 144 XM_H_Long_From02 3001 1.13 1.52 0.97 145 RELAYCOUNTRY_CA 2950 2.37 5.74 0.96 146 DKIM_ADSP_CUSTOM_MED 2904 0.99 1.11 0.94 147 TR_XM_DK_SendGrid 2852 0.93 0.95 0.92 148 XM_UB50 2787 1.49 2.89 0.90 149 XM_ShortIntro_01 2769 0.76 0.44 0.90 150 XMGappySubj_02 2716 0.65 0.10 0.88 151 SpammyFromTLD_01 2698 1.12 1.72 0.87 152 TR_MetaPhish_Combo_01 2574 1.17 1.97 0.83 153 HTTPS_HTTP_MISMATCH 2533 0.91 1.13 0.82 154 RCVD_IN_PBL 2433 0.95 1.32 0.79 155 XMGenDplmaNmb 2416 0.99 1.49 0.78 156 XM_B_FormFill 2407 0.56 0.03 0.78 157 XM_H_PHPMailer 2376 0.76 0.75 0.77 158 XM_B_SpammyWords4 2353 1.42 2.99 0.76 159 TO_NO_BRKTS_HTML_ONLY 2346 0.64 0.36 0.76 160 TR_XM_Base64_M1 2344 0.77 0.78 0.76 161 MPART_ALT_DIFF_COUNT 2189 0.82 1.10 0.71 162 URI_TRY_3LD 2172 0.86 1.23 0.70 163 TVD_RCVD_IP 2086 0.66 0.61 0.68 164 T_OBFU_PDF_ATTACH 2057 0.53 0.19 0.67 165 T_XMHurry_00 2054 1.20 2.49 0.67 166 NML_ADSP_CUSTOM_MED 2039 0.71 0.84 0.66 167 XM_B_COPY_HTML 2012 0.84 1.29 0.65 168 FROM_GOV_DKIM_AU 1947 0.48 0.12 0.63 169 T_XMDrugObfuBody_00 1814 0.95 1.82 0.59 170 FORGED_GMAIL_RCVD 1804 0.64 0.77 0.58 171 MSGID_FROM_MTA_HEADER 1777 0.45 0.14 0.58 172 HTML_TAG_BALANCE_BODY 1727 0.77 1.26 0.56 173 HTML_IMAGE_ONLY_20 1700 0.61 0.74 0.55 174 XMLngstWrd_01 1679 0.49 0.37 0.54 175 T_TVD_MIME_NO_HEADERS 1662 0.39 0.02 0.54 176 RELAYCOUNTRY_AU 1653 1.14 2.59 0.54 177 PLING_QUERY 1651 0.58 0.70 0.54 178 XMPhish30 1632 0.85 1.60 0.53 179 XMMoneyMeta_00 1628 0.64 0.92 0.53 180 XMBdyGiftCard01 1589 0.66 1.00 0.51 181 XMSlimDrugH 1588 0.59 0.77 0.51 182 RCVD_IN_BL_SPAMCOP_NET 1566 2.38 6.86 0.51 183 XMBody_95 1541 0.43 0.26 0.50 184 FILL_THIS_FORM 1524 0.43 0.27 0.49 185 XMSubMetaI_00 1473 0.64 1.03 0.48 186 TR_XM_FormFill2 1468 0.65 1.08 0.48 187 RELAYCOUNTRY_GB 1455 0.60 0.89 0.47 188 TR_XM_PHPForged 1453 0.66 1.12 0.47 189 TR_XM_PHPDW 1452 0.66 1.11 0.47 190 XM_H_PHPOS 1414 0.63 1.06 0.46 191 XMBody_17 1409 0.90 1.98 0.46 192 T_Symld_Words_02 1375 0.66 1.17 0.45 193 DIET_1 1366 0.88 1.94 0.44 194 MISSING_HEADERS 1328 0.52 0.74 0.43 195 XMPhish14 1325 0.53 0.79 0.43 196 XMBSHREFv2 1313 0.46 0.54 0.43 197 XM_B_DNDMA 1290 0.67 1.29 0.42 198 HTML_FONT_FACE_BAD 1287 0.53 0.79 0.42 199 XMDateMe_00 1274 0.42 0.42 0.41 200 XMLngstWrd_02 1269 0.38 0.30 0.41 ----------------------------------------------------------------------