Email: 466399 Autolearn: 0 AvgScore: 4.58 AvgScanTime: 1.47 sec Spam: 145918 Autolearn: 0 AvgScore: 14.50 AvgScanTime: 1.62 sec Ham: 320481 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.41 sec Time Spent Running SA: 190.90 hours Time Spent Processing Spam: 65.56 hours Time Spent Processing Ham: 125.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138806 89.64 95.13 87.14 2 DKIM_SIGNED 132256 80.97 90.64 76.57 3 XM_DK_Pass 126772 78.83 86.88 75.17 4 DKIM_VALID 125441 77.76 85.97 74.02 5 RELAYCOUNTRY_US 121617 82.25 83.35 81.76 6 XM_B_Unicode 121592 74.87 83.33 71.01 7 DCC_CHECK 113872 51.62 78.04 39.59 8 XMListUnsubscribeExists 103658 55.98 71.04 49.13 9 XM_B_SpammyWords 100146 51.71 68.63 44.00 10 DKIM_VALID_AU 98000 61.34 67.16 58.70 11 XM_B_Unicode3 72025 43.04 49.36 40.17 12 LOC_TINY_FONT_1 70417 33.79 48.26 27.20 13 BAYES_50 60768 54.85 41.65 60.86 14 XM_B_SpammyWords2 58982 25.08 40.42 18.10 15 XM_DK_Undo_02 57329 15.30 39.29 4.38 16 RCVD_IN_MSPIKE_H2 54562 35.36 37.39 34.44 17 HTML_FONT_LOW_CONTRAST 53923 30.18 36.95 27.09 18 FVGT_m_MULTI_ODD 47505 27.35 32.56 24.99 19 T_KAM_HTML_FONT_INVALID 46880 25.51 32.13 22.50 20 BAYES_99 43267 11.16 29.65 2.75 21 MIME_HTML_ONLY 41722 22.35 28.59 19.51 22 DKIM_VALID_EF 41321 29.01 28.32 29.32 23 TR_XM_DKIM_Undo 40732 10.00 27.91 1.85 24 XMSubLong 34625 23.26 23.73 23.05 25 T_TM2_M_HEADER_IN_MSG 33159 27.21 22.72 29.25 26 BAYES_999 32706 8.39 22.41 2.01 27 TR_DCC_Bayes_99 32403 7.66 22.21 1.04 28 XM_Multi_Part_URI 32240 16.39 22.09 13.79 29 DCC_CHECK_NEGATIVE 29660 47.83 20.33 60.36 30 TR_XM_DK_Unsub 29583 15.28 20.27 13.00 31 UNPARSEABLE_RELAY 25315 13.52 17.35 11.78 32 XM_B_Unsub 24855 11.67 17.03 9.23 33 TR_XM_BayesUnsub 24059 9.99 16.49 7.03 34 RELAYCOUNTRY_META 22737 7.64 15.58 4.02 35 TR_MAX_INTL_RELAY 21814 8.61 14.95 5.73 36 XM_B_SpammyWords3 21679 7.83 14.86 4.62 37 LOTS_OF_MONEY 18766 8.55 12.86 6.58 38 TR_XM_SpammyWords4 16980 6.73 11.64 4.49 39 TR_XM_SpammyRelay 16126 4.83 11.05 2.00 40 BOTNET_IPINHOSTNAME 16052 5.74 11.00 3.35 41 TR_XM_SpammyWords2 15823 3.62 10.84 0.34 42 XM_Evil_Numbers_Gen 15532 9.12 10.64 8.43 43 FSL_BULK_SIG 15430 8.48 10.57 7.53 44 BAYES_80 13586 5.31 9.31 3.49 45 BOTNET 13261 3.95 9.09 1.61 46 LotsOfNums_01 12978 8.17 8.89 7.84 47 TR_XM_UnparsRelay 12698 3.95 8.70 1.78 48 BAYES_60 11865 7.25 8.13 6.85 49 XM_B_Phish_Phrases 11028 6.03 7.56 5.33 50 RCVD_IN_BL_SPAMCOP_NET 11025 2.74 7.56 0.55 51 MPART_ALT_DIFF 9951 5.10 6.82 4.32 52 XM_UncommonTLD01 9620 5.05 6.59 4.34 53 XM_B_PhoneNumber 9616 9.23 6.59 10.44 54 HTML_IMAGE_RATIO_02 9412 5.00 6.45 4.33 55 UNTRUSTED_Relay 9377 3.02 6.43 1.47 56 XM_Body_Dirty_Words 8974 3.86 6.15 2.82 57 XMSubMetaSx_00 8693 4.72 5.96 4.16 58 TR_XM_SPAMCOP 8305 1.98 5.69 0.29 59 RELAYCOUNTRY_CA 8028 2.49 5.50 1.12 60 XM_B_Investor 7923 2.97 5.43 1.86 61 BAYES_95 7786 3.21 5.34 2.24 62 HTML_IMAGE_RATIO_06 7704 4.22 5.28 3.73 63 HTML_IMAGE_RATIO_04 7600 4.58 5.21 4.29 64 XM_H_Long_From01 7492 5.71 5.13 5.97 65 TR_XM_SpammyWords5 7432 2.45 5.09 1.25 66 XM_B_SpammyTLD 7181 3.31 4.92 2.58 67 DKIM_INVALID 6815 3.22 4.67 2.55 68 TR_XM_PhishingBody 6814 2.58 4.67 1.63 69 XM_H_GMP 6348 5.57 4.35 6.12 70 XMStrtUSub 5955 4.63 4.08 4.88 71 TM2_M_URI_OPT_OUT 5400 2.31 3.70 1.67 72 XM_OfRef6 5313 1.94 3.64 1.17 73 XMSexyCombo_05 5312 2.20 3.64 1.54 74 XM_UB50 5306 1.78 3.64 0.93 75 TooManyTo_001 5302 7.32 3.63 9.00 76 MIME_QP_LONG_LINE 5121 4.42 3.51 4.84 77 TM2_M_VERY_LONG_WORD 4938 1.90 3.38 1.23 78 MIME_HTML_MOSTLY 4887 2.45 3.35 2.05 79 XMNumbers 4874 2.98 3.34 2.81 80 MIME_HTML_ONLY_MULTI 4845 2.90 3.32 2.70 81 T_XMDrugObfuBody_08 4816 2.63 3.30 2.32 82 T_XMDrugObfuBody_14 4800 2.34 3.29 1.91 83 TR_XM_NoHeaderRelay 4507 1.15 3.09 0.27 84 XM_B_Unsub2 4473 2.09 3.07 1.65 85 RCVD_IN_MSPIKE_WL 4442 4.40 3.04 5.01 86 RCVD_IN_MSPIKE_H3 4442 4.40 3.04 5.01 87 XM_SPF_SoftFail 4421 1.92 3.03 1.41 88 USER_IN_DEF_DKIM_WL 4099 9.44 2.81 12.45 89 SUBJ_ALL_CAPS 4002 1.88 2.74 1.49 90 XM_CamelCaseFrm001 3967 2.35 2.72 2.18 91 XM_B_SpammyWords4 3963 1.49 2.72 0.94 92 RELAYCOUNTRY_AU 3828 1.32 2.62 0.73 93 MAILING_LIST_MULTI 3729 3.01 2.56 3.22 94 XM_B_URI_Unicode 3670 2.04 2.52 1.83 95 HTML_IMAGE_RATIO_08 3567 2.84 2.44 3.02 96 XMDiploma_00 3557 2.13 2.44 1.99 97 XMNoVowels 3543 2.10 2.43 1.95 98 RCVD_IN_VALIDITY_RPBL 3505 0.79 2.40 0.05 99 XM_URI_RBL 3440 1.07 2.36 0.49 100 XMBody_17 3402 1.01 2.33 0.41 101 T_XMHurry_00 3223 1.11 2.21 0.60 102 T_TooManySym_01 3144 4.85 2.15 6.07 103 FROM_EXCESS_BASE64 3045 1.82 2.09 1.69 104 SpammyFromTLD_02 2940 0.94 2.01 0.45 105 RCVD_IN_VALIDITY_SAFE 2901 3.02 1.99 3.48 106 DIET_1 2862 0.87 1.96 0.37 107 XM_DK_Undo_01 2786 1.67 1.91 1.56 108 RCVD_IN_IADB_LISTED 2780 3.49 1.91 4.22 109 RCVD_IN_IADB_SPF 2701 3.08 1.85 3.63 110 T_REMOTE_IMAGE 2683 3.16 1.84 3.77 111 RCVD_IN_IADB_DK 2660 2.70 1.82 3.10 112 RCVD_IN_IADB_SENDERID 2658 2.77 1.82 3.20 113 TR_XM_INV_DKIM 2583 0.66 1.77 0.15 114 BAYES_40 2577 4.24 1.77 5.36 115 T_XMDrugObfuBody_00 2564 0.98 1.76 0.62 116 XMStockSpam_06 2535 1.52 1.74 1.42 117 SpammyFromTLD_01 2463 1.17 1.69 0.94 118 RCVD_IN_PSBL 2409 0.70 1.65 0.26 119 T_FILL_THIS_FORM_SHORT 2383 1.14 1.63 0.91 120 SHORTCIRCUIT 2370 0.51 1.62 0.00 121 RCVD_IN_ZEN_LASTEXTERNAL 2370 0.51 1.62 0.00 122 TR_LOTS_OF_MONEY3 2363 0.97 1.62 0.67 123 ALL_TRUSTED 2349 10.89 1.61 15.11 124 XMPhish30 2340 0.80 1.60 0.43 125 DKIM_ADSP_NXDOMAIN 2318 0.70 1.59 0.30 126 RCVD_IN_VALIDITY_CERTIFIED 2315 2.47 1.59 2.87 127 XM_H_Long_From02 2281 1.21 1.56 1.05 128 XMBrknScrpt_02 2223 1.01 1.52 0.77 129 URI_HEX 2221 1.48 1.52 1.46 130 LongTLD 2212 0.77 1.52 0.43 131 HTML_MIME_NO_HTML_TAG 2183 2.26 1.50 2.61 132 TR_Mismatch_TLD_02 2165 0.52 1.48 0.08 133 URI_NOVOWEL 2136 1.75 1.46 1.89 134 XMGenDplmaNmb 2049 1.16 1.40 1.05 135 URI_TRY_3LD 1987 0.80 1.36 0.55 136 XM_B_Phish66 1935 0.65 1.33 0.34 137 RCVD_IN_PBL 1914 0.94 1.31 0.77 138 XM_SendGrid 1883 1.31 1.29 1.32 139 BAYES_20 1883 3.14 1.29 3.99 140 MultiRelay_CC 1830 0.50 1.25 0.15 141 XMReplyNow 1749 0.53 1.20 0.22 142 TR_Caps_n_Bayes_99 1742 0.39 1.19 0.02 143 TR_XM_Base64_M1 1715 0.89 1.18 0.76 144 HTML_TAG_BALANCE_BODY 1684 0.79 1.15 0.62 145 RELAYCOUNTRY_FR 1682 0.53 1.15 0.24 146 MPART_ALT_DIFF_COUNT 1678 0.85 1.15 0.71 147 DKIM_ADSP_CUSTOM_MED 1671 1.11 1.15 1.10 148 FORGED_MUA_OUTLOOK 1629 0.37 1.12 0.02 149 XMHTML_After_End 1626 0.58 1.11 0.33 150 KHOP_HELO_FCRDNS 1622 1.24 1.11 1.29 151 XMMoneyMeta_00 1615 0.72 1.11 0.54 152 BOTNET_NORDNS 1614 0.35 1.11 0.01 153 HTML_FONT_TINY_NORDNS 1611 0.40 1.10 0.08 154 NO_DNS_FOR_FROM 1588 0.53 1.09 0.27 155 MISSING_HEADERS 1578 0.61 1.08 0.39 156 TR_XM_InvalidRelay 1556 0.34 1.07 0.01 157 SHOPIFY_IMG_NOT_RCVD_SFY 1548 0.52 1.06 0.27 158 XM_B_COPY_HTML 1542 0.87 1.06 0.78 159 TR_Mismatch_TLD_01 1529 0.49 1.05 0.24 160 XM_B_SEO 1516 0.51 1.04 0.26 161 TR_XM_MaxWHORU 1503 0.46 1.03 0.21 162 FSL_CTYPE_WIN1251 1502 0.32 1.03 0.00 163 FSL_NEW_HELO_USER 1478 0.32 1.01 0.00 164 XM_H_Undi_Recip 1442 0.42 0.99 0.15 165 XMPhish14 1420 0.62 0.97 0.46 166 TR_XM_PHPForged 1385 0.53 0.95 0.34 167 TR_XM_RelayPhish 1379 0.35 0.95 0.08 168 RCVD_IN_SORBS_DUL 1364 0.33 0.93 0.05 169 TR_XM_SEO4 1354 0.35 0.93 0.09 170 TR_XM_PHPDW 1349 0.52 0.92 0.34 171 TR_XM_FormFill2 1344 0.52 0.92 0.34 172 XM_UB60 1342 0.33 0.92 0.06 173 XM_ProductURIs 1339 0.67 0.92 0.56 174 HTTPS_HTTP_MISMATCH 1336 0.81 0.92 0.77 175 FORGED_GMAIL_RCVD 1331 0.78 0.91 0.72 176 XM_H_PHPOS 1320 0.51 0.90 0.33 177 NML_ADSP_CUSTOM_MED 1314 0.81 0.90 0.77 178 XM_RXBody 1306 0.79 0.90 0.74 179 TR_Symld_Words 1302 1.36 0.89 1.57 180 XMBdyGiftCard01 1273 0.74 0.87 0.68 181 T_MONEY_PERCENT 1243 0.41 0.85 0.21 182 TR_LOTS_OF_MONEY2 1243 0.41 0.85 0.21 183 REPLYTO_WITHOUT_TO_CC 1234 0.28 0.85 0.03 184 RELAYCOUNTRY_PL 1232 0.28 0.84 0.02 185 TR_XM_DK_SendGrid 1231 0.83 0.84 0.82 186 XMSubMetaI_00 1228 0.66 0.84 0.58 187 XMBody_78 1219 0.50 0.84 0.35 188 FROM_MISSP_EH_MATCH 1212 0.26 0.83 0.00 189 XM_B_COVIDMETA 1206 0.38 0.83 0.18 190 FROM_MISSP_REPLYTO 1202 0.26 0.82 0.00 191 TR_MetaPhish_Combo_01 1199 0.82 0.82 0.83 192 PLING_QUERY 1189 0.53 0.81 0.40 193 XM_B_DNDMA 1183 0.58 0.81 0.47 194 XM_DIRTYINTL 1168 0.33 0.80 0.11 195 HTML_IMAGE_ONLY_20 1167 0.62 0.80 0.54 196 HK_RANDOM_REPLYTO 1143 0.34 0.78 0.14 197 FORGED_OUTLOOK_HTML 1134 0.24 0.78 0.00 198 TM2_M_OBFU_COMMENT 1133 0.55 0.78 0.44 199 FORGED_OUTLOOK_TAGS 1132 0.25 0.78 0.00 200 XMSexyCombo_01 1126 0.36 0.77 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 279270 89.64 95.13 87.14 2 RELAYCOUNTRY_US 262011 82.25 83.35 81.76 3 DKIM_SIGNED 245405 80.97 90.64 76.57 4 XM_DK_Pass 240913 78.83 86.88 75.17 5 DKIM_VALID 237220 77.76 85.97 74.02 6 XM_B_Unicode 227589 74.87 83.33 71.01 7 BAYES_50 195045 54.85 41.65 60.86 8 DCC_CHECK_NEGATIVE 193428 47.83 20.33 60.36 9 DKIM_VALID_AU 188109 61.34 67.16 58.70 10 XMListUnsubscribeExists 157455 55.98 71.04 49.13 11 XM_B_SpammyWords 141016 51.71 68.63 44.00 12 XM_B_Unicode3 128727 43.04 49.36 40.17 13 DCC_CHECK 126891 51.62 78.04 39.59 14 RCVD_IN_MSPIKE_H2 110364 35.36 37.39 34.44 15 DKIM_VALID_EF 93978 29.01 28.32 29.32 16 T_TM2_M_HEADER_IN_MSG 93740 27.21 22.72 29.25 17 LOC_TINY_FONT_1 87176 33.79 48.26 27.20 18 HTML_FONT_LOW_CONTRAST 86834 30.18 36.95 27.09 19 FVGT_m_MULTI_ODD 80074 27.35 32.56 24.99 20 XMSubLong 73875 23.26 23.73 23.05 21 T_KAM_HTML_FONT_INVALID 72116 25.51 32.13 22.50 22 MIME_HTML_ONLY 62521 22.35 28.59 19.51 23 XM_B_SpammyWords2 58002 25.08 40.42 18.10 24 ALL_TRUSTED 48437 10.89 1.61 15.11 25 XM_Multi_Part_URI 44190 16.39 22.09 13.79 26 TR_XM_DK_Unsub 41661 15.28 20.27 13.00 27 USER_IN_DEF_DKIM_WL 39915 9.44 2.81 12.45 28 BAYES_00 38757 8.54 0.75 12.09 29 UNPARSEABLE_RELAY 37758 13.52 17.35 11.78 30 XM_B_PhoneNumber 33443 9.23 6.59 10.44 31 XM_B_Unsub 29593 11.67 17.03 9.23 32 TooManyTo_001 28844 7.32 3.63 9.00 33 XM_Evil_Numbers_Gen 27010 9.12 10.64 8.43 34 LotsOfNums_01 25130 8.17 8.89 7.84 35 TR_XM_DK_Bayes 24511 5.45 0.63 7.65 36 FSL_BULK_SIG 24125 8.48 10.57 7.53 37 TR_XM_DK_Bayes1 23920 5.32 0.62 7.46 38 TR_XM_BayesUnsub 22543 9.99 16.49 7.03 39 XM_DKIMWhitelistDomains 22436 4.95 0.45 7.00 40 BAYES_60 21965 7.25 8.13 6.85 41 IN_ZIMBRA_NJ_WHITELIST 21706 4.69 0.11 6.77 42 LOTS_OF_MONEY 21097 8.55 12.86 6.58 43 TR_XM_DK_Bayes2 20212 4.43 0.32 6.31 44 XM_H_GMP 19608 5.57 4.35 6.12 45 T_TooManySym_01 19468 4.85 2.15 6.07 46 XM_H_Long_From01 19141 5.71 5.13 5.97 47 TR_MAX_INTL_RELAY 18352 8.61 14.95 5.73 48 BAYES_40 17181 4.24 1.77 5.36 49 XM_B_Phish_Phrases 17089 6.03 7.56 5.33 50 RCVD_IN_MSPIKE_H3 16065 4.40 3.04 5.01 51 RCVD_IN_MSPIKE_WL 16065 4.40 3.04 5.01 52 XMStrtUSub 15652 4.63 4.08 4.88 53 MIME_QP_LONG_LINE 15516 4.42 3.51 4.84 54 XM_B_SpammyWords3 14820 7.83 14.86 4.62 55 XM_PDF 14628 3.34 0.66 4.56 56 TR_XM_SpammyWords4 14404 6.73 11.64 4.49 57 XM_DK_Undo_02 14039 15.30 39.29 4.38 58 XM_UncommonTLD01 13915 5.05 6.59 4.34 59 HTML_IMAGE_RATIO_02 13886 5.00 6.45 4.33 60 MPART_ALT_DIFF 13829 5.10 6.82 4.32 61 HTML_IMAGE_RATIO_04 13742 4.58 5.21 4.29 62 RCVD_IN_IADB_LISTED 13516 3.49 1.91 4.22 63 XMSubMetaSx_00 13334 4.72 5.96 4.16 64 RELAYCOUNTRY_META 12873 7.64 15.58 4.02 65 BAYES_20 12774 3.14 1.29 3.99 66 T_REMOTE_IMAGE 12068 3.16 1.84 3.77 67 HTML_IMAGE_RATIO_06 11956 4.22 5.28 3.73 68 RCVD_IN_IADB_SPF 11641 3.08 1.85 3.63 69 BAYES_80 11179 5.31 9.31 3.49 70 RCVD_IN_VALIDITY_SAFE 11163 3.02 1.99 3.48 71 BOTNET_IPINHOSTNAME 10727 5.74 11.00 3.35 72 MAILING_LIST_MULTI 10327 3.01 2.56 3.22 73 T_TooManySym_02 10318 2.42 0.66 3.22 74 RCVD_IN_IADB_SENDERID 10259 2.77 1.82 3.20 75 TooManyTo_002 9964 2.30 0.51 3.11 76 RCVD_IN_IADB_DK 9930 2.70 1.82 3.10 77 ANY_BOUNCE_MESSAGE 9906 2.36 0.76 3.09 78 BOUNCE_MESSAGE 9905 2.36 0.76 3.09 79 HTML_IMAGE_RATIO_08 9687 2.84 2.44 3.02 80 RCVD_IN_IADB_VOUCHED 9409 2.14 0.39 2.94 81 RCVD_IN_VALIDITY_CERTIFIED 9212 2.47 1.59 2.87 82 XM_Body_Dirty_Words 9041 3.86 6.15 2.82 83 XMNumbers 9017 2.98 3.34 2.81 84 BAYES_99 8799 11.16 29.65 2.75 85 MIME_HTML_ONLY_MULTI 8662 2.90 3.32 2.70 86 HTML_MIME_NO_HTML_TAG 8370 2.26 1.50 2.61 87 XM_B_SpammyTLD 8273 3.31 4.92 2.58 88 DKIM_INVALID 8185 3.22 4.67 2.55 89 BAYES_05 7611 1.79 0.50 2.37 90 T_XMDrugObfuBody_08 7428 2.63 3.30 2.32 91 INVALID_MSGID 7315 1.62 0.16 2.28 92 BAYES_95 7164 3.21 5.34 2.24 93 XM_CamelCaseFrm001 6985 2.35 2.72 2.18 94 RCVD_IN_IADB_OPTIN 6592 1.49 0.25 2.06 95 MIME_HTML_MOSTLY 6561 2.45 3.35 2.05 96 BAYES_999 6428 8.39 22.41 2.01 97 TR_XM_SpammyRelay 6406 4.83 11.05 2.00 98 XMDiploma_00 6369 2.13 2.44 1.99 99 TO_MALFORMED 6281 1.36 0.04 1.96 100 XMNoVowels 6242 2.10 2.43 1.95 101 T_XMDrugObfuBody_14 6108 2.34 3.29 1.91 102 URI_NOVOWEL 6048 1.75 1.46 1.89 103 XM_B_Investor 5946 2.97 5.43 1.86 104 TR_XM_DKIM_Undo 5919 10.00 27.91 1.85 105 XM_B_URI_Unicode 5855 2.04 2.52 1.83 106 TR_XM_UnparsRelay 5716 3.95 8.70 1.78 107 TooManyTo_003 5618 1.34 0.44 1.75 108 FROM_EXCESS_BASE64 5422 1.82 2.09 1.69 109 TM2_M_URI_OPT_OUT 5362 2.31 3.70 1.67 110 XM_B_Unsub2 5286 2.09 3.07 1.65 111 TR_XM_PhishingBody 5238 2.58 4.67 1.63 112 BOTNET 5155 3.95 9.09 1.61 113 TR_Symld_Words 5042 1.36 0.89 1.57 114 XM_DK_Undo_01 5015 1.67 1.91 1.56 115 XMSexyCombo_05 4938 2.20 3.64 1.54 116 SUBJ_ALL_CAPS 4769 1.88 2.74 1.49 117 UNTRUSTED_Relay 4697 3.02 6.43 1.47 118 URI_HEX 4667 1.48 1.52 1.46 119 XMGappySubj_01 4620 1.03 0.14 1.44 120 IN_HORDE_ADDRESS_BOOK 4564 1.00 0.08 1.42 121 XMStockSpam_06 4562 1.52 1.74 1.42 122 XM_SPF_SoftFail 4526 1.92 3.03 1.41 123 HELO_NODOT 4402 0.98 0.12 1.37 124 HELO_NO_DOMAIN 4397 0.98 0.12 1.37 125 XM_SendGrid 4223 1.31 1.29 1.32 126 KHOP_HELO_FCRDNS 4140 1.24 1.11 1.29 127 T_TooManySym_03 4119 0.94 0.20 1.29 128 XM_GoogleGroups 4064 1.11 0.76 1.27 129 TR_XM_SpammyWords5 4018 2.45 5.09 1.25 130 TooManyTo_004 3976 0.97 0.37 1.24 131 TM2_M_VERY_LONG_WORD 3939 1.90 3.38 1.23 132 XMCapTrack 3935 0.99 0.47 1.23 133 XM_OfRef6 3736 1.94 3.64 1.17 134 RELAYCOUNTRY_CA 3598 2.49 5.50 1.12 135 DKIM_ADSP_CUSTOM_MED 3518 1.11 1.15 1.10 136 XM_H_Long_From02 3373 1.21 1.56 1.05 137 XMGenDplmaNmb 3362 1.16 1.40 1.05 138 TVD_SPACE_RATIO 3320 0.75 0.13 1.04 139 TR_DCC_Bayes_99 3319 7.66 22.21 1.04 140 TooManyTo_005 3285 0.81 0.33 1.03 141 FROM_GOV_DKIM_AU 3161 0.71 0.11 0.99 142 SpammyFromTLD_01 3004 1.17 1.69 0.94 143 XM_B_SpammyWords4 2997 1.49 2.72 0.94 144 XM_UB50 2996 1.78 3.64 0.93 145 XM_H_Trusted_IP 2965 0.64 0.00 0.93 146 XMSubMetaSxObfu_03 2932 0.81 0.58 0.91 147 T_FILL_THIS_FORM_SHORT 2931 1.14 1.63 0.91 148 XM_ShortIntro_01 2864 0.74 0.40 0.89 149 TR_MetaPhish_Combo_01 2647 0.82 0.82 0.83 150 TR_XM_DK_SendGrid 2619 0.83 0.84 0.82 151 T_Symld_Words_02 2526 0.78 0.77 0.79 152 XM_B_COPY_HTML 2498 0.87 1.06 0.78 153 RCVD_IN_PBL 2476 0.94 1.31 0.77 154 XMBrknScrpt_02 2466 1.01 1.52 0.77 155 NML_ADSP_CUSTOM_MED 2464 0.81 0.90 0.77 156 HTTPS_HTTP_MISMATCH 2456 0.81 0.92 0.77 157 XM_H_PHPMailer 2433 0.69 0.53 0.76 158 TR_XM_Base64_M1 2421 0.89 1.18 0.76 159 XMGappySubj_02 2399 0.53 0.06 0.75 160 TO_NO_BRKTS_HTML_ONLY 2396 0.66 0.45 0.75 161 XM_RXBody 2361 0.79 0.90 0.74 162 RELAYCOUNTRY_AU 2342 1.32 2.62 0.73 163 FORGED_GMAIL_RCVD 2293 0.78 0.91 0.72 164 MPART_ALT_DIFF_COUNT 2290 0.85 1.15 0.71 165 XMSubNoVowel 2251 0.62 0.45 0.70 166 XMBdyGiftCard01 2186 0.74 0.87 0.68 167 XM_B_FormFill 2150 0.47 0.02 0.67 168 TR_LOTS_OF_MONEY3 2145 0.97 1.62 0.67 169 T_OBFU_PDF_ATTACH 2129 0.50 0.13 0.66 170 T_XMDrugObfuBody_00 2002 0.98 1.76 0.62 171 TVD_RCVD_IP 1985 0.61 0.60 0.62 172 HTML_TAG_BALANCE_BODY 1983 0.79 1.15 0.62 173 T_XMHurry_00 1934 1.11 2.21 0.60 174 XMSubMetaI_00 1870 0.66 0.84 0.58 175 XM_ProductURIs 1781 0.67 0.92 0.56 176 RCVD_IN_BL_SPAMCOP_NET 1758 2.74 7.56 0.55 177 URI_TRY_3LD 1749 0.80 1.36 0.55 178 XMMoneyMeta_00 1732 0.72 1.11 0.54 179 HTML_IMAGE_ONLY_20 1722 0.62 0.80 0.54 180 XMBody_95 1707 0.43 0.22 0.53 181 XMLngstWrd_00 1617 0.49 0.46 0.50 182 RELAYCOUNTRY_GB 1567 0.57 0.74 0.49 183 XM_URI_RBL 1565 1.07 2.36 0.49 184 XM_B_DNDMA 1516 0.58 0.81 0.47 185 XMPhish14 1479 0.62 0.97 0.46 186 TRACKER_ID 1457 0.42 0.34 0.45 187 SpammyFromTLD_02 1452 0.94 2.01 0.45 188 XMSlimDrugH 1440 0.50 0.61 0.45 189 MSGID_FROM_MTA_HEADER 1437 0.33 0.06 0.45 190 T_STY_INVIS_DIRECT 1424 0.53 0.72 0.44 191 TM2_M_OBFU_COMMENT 1413 0.55 0.78 0.44 192 XMPhish30 1390 0.80 1.60 0.43 193 LongTLD 1388 0.77 1.52 0.43 194 HTML_IMAGE_ONLY_32 1388 0.39 0.29 0.43 195 XMDateMe_00 1334 0.41 0.41 0.42 196 XMBody_17 1303 1.01 2.33 0.41 197 XMBSHREFv2 1299 0.38 0.31 0.41 198 PLING_QUERY 1285 0.53 0.81 0.40 199 HELO_MISC_IP 1285 0.29 0.06 0.40 200 MISSING_HEADERS 1252 0.61 1.08 0.39 ----------------------------------------------------------------------