Email: 502621 Autolearn: 0 AvgScore: 2.94 AvgScanTime: 1.46 sec Spam: 144002 Autolearn: 0 AvgScore: 14.93 AvgScanTime: 1.64 sec Ham: 358619 Autolearn: 0 AvgScore: -1.87 AvgScanTime: 1.38 sec Time Spent Running SA: 203.45 hours Time Spent Processing Spam: 65.76 hours Time Spent Processing Ham: 137.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137243 90.52 95.31 88.60 2 DKIM_SIGNED 129240 73.09 89.75 66.40 3 XM_DK_Pass 122135 70.81 84.81 65.19 4 DKIM_VALID 120855 69.89 83.93 64.26 5 XM_B_Unicode 119778 75.85 83.18 72.91 6 RELAYCOUNTRY_US 118431 82.29 82.24 82.32 7 DCC_CHECK 107834 46.30 74.88 34.83 8 XM_B_SpammyWords 99386 51.30 69.02 44.18 9 XMListUnsubscribeExists 98349 49.47 68.30 41.91 10 DKIM_VALID_AU 95034 55.85 65.99 51.78 11 XM_B_Unicode3 69747 44.32 48.43 42.66 12 LOC_TINY_FONT_1 66419 30.01 46.12 23.55 13 BAYES_50 58751 53.06 40.80 57.99 14 XM_DK_Undo_02 56454 14.19 39.20 4.15 15 RCVD_IN_MSPIKE_H2 56396 33.55 39.16 31.29 16 XM_B_SpammyWords2 56266 23.32 39.07 17.00 17 HTML_FONT_LOW_CONTRAST 52406 26.77 36.39 22.90 18 T_KAM_HTML_FONT_INVALID 46966 22.96 32.61 19.08 19 FVGT_m_MULTI_ODD 44872 24.32 31.16 21.57 20 MIME_HTML_ONLY 43779 25.24 30.40 23.16 21 DKIM_VALID_EF 42656 27.38 29.62 26.49 22 BAYES_99 42325 10.50 29.39 2.92 23 TR_XM_DKIM_Undo 41160 9.51 28.58 1.85 24 XMSubLong 36654 23.13 25.45 22.19 25 DCC_CHECK_NEGATIVE 33630 53.16 23.35 65.13 26 T_TM2_M_HEADER_IN_MSG 32573 25.98 22.62 27.33 27 BAYES_999 32384 8.06 22.49 2.27 28 TR_XM_DK_Unsub 30100 13.96 20.90 11.17 29 XM_Multi_Part_URI 29890 14.11 20.76 11.44 30 TR_DCC_Bayes_99 29402 6.64 20.42 1.10 31 XM_B_Unsub 24443 10.69 16.97 8.16 32 RELAYCOUNTRY_META 24285 7.12 16.86 3.20 33 UNPARSEABLE_RELAY 23650 12.12 16.42 10.39 34 TR_XM_BayesUnsub 23444 8.82 16.28 5.82 35 TR_MAX_INTL_RELAY 21721 7.57 15.08 4.55 36 XM_B_SpammyWords3 20155 6.53 14.00 3.54 37 LOTS_OF_MONEY 17805 7.89 12.36 6.09 38 TR_XM_SpammyRelay 17235 4.60 11.97 1.65 39 TR_XM_SpammyWords4 16062 6.29 11.15 4.34 40 FSL_BULK_SIG 15199 8.03 10.55 7.02 41 TR_XM_SpammyWords2 14931 3.18 10.37 0.30 42 BOTNET_IPINHOSTNAME 14855 4.99 10.32 2.85 43 BOTNET 14003 3.72 9.72 1.31 44 BAYES_80 13534 4.69 9.40 2.80 45 XM_Evil_Numbers_Gen 13042 9.03 9.06 9.02 46 BAYES_60 12657 6.59 8.79 5.71 47 RCVD_IN_BL_SPAMCOP_NET 12446 2.85 8.64 0.53 48 TR_XM_UnparsRelay 12233 3.28 8.50 1.19 49 XM_B_Phish_Phrases 11442 5.18 7.95 4.06 50 LotsOfNums_01 11236 7.30 7.80 7.10 51 XM_Body_Dirty_Words 10597 3.62 7.36 2.11 52 XM_UncommonTLD01 9455 4.60 6.57 3.81 53 XM_B_PhoneNumber 9250 8.47 6.42 9.29 54 RELAYCOUNTRY_CA 9166 2.38 6.37 0.79 55 UNTRUSTED_Relay 9147 2.71 6.35 1.25 56 HTML_IMAGE_RATIO_02 8938 4.58 6.21 3.93 57 MPART_ALT_DIFF 8805 8.46 6.11 9.40 58 TR_XM_SPAMCOP 8697 1.92 6.04 0.27 59 DKIM_INVALID 8385 3.20 5.82 2.14 60 XMSubMetaSx_00 8055 3.61 5.59 2.81 61 XM_H_Long_From01 7724 4.98 5.36 4.82 62 BAYES_95 7668 2.77 5.32 1.75 63 HTML_IMAGE_RATIO_04 7002 11.08 4.86 13.58 64 XM_H_GMP 6905 5.24 4.80 5.42 65 TR_XM_PhishingBody 6723 2.61 4.67 1.78 66 T_XMDrugObfuBody_14 6564 2.40 4.56 1.54 67 XMSexyCombo_05 6508 2.08 4.52 1.10 68 TR_XM_SpammyWords5 6379 2.01 4.43 1.03 69 XM_B_Investor 5884 2.12 4.09 1.33 70 XMStrtUSub 5863 8.75 4.07 10.63 71 HTML_IMAGE_RATIO_06 5741 4.33 3.99 4.46 72 XM_OfRef6 5413 1.79 3.76 1.00 73 MIME_HTML_ONLY_MULTI 5305 6.36 3.68 7.44 74 XMNumbers 5258 2.90 3.65 2.60 75 TM2_M_VERY_LONG_WORD 5198 1.91 3.61 1.23 76 RCVD_IN_VALIDITY_RPBL 5077 1.13 3.53 0.17 77 TooManyTo_001 5069 6.87 3.52 8.21 78 XM_B_SpammyTLD 4923 2.50 3.42 2.13 79 RCVD_IN_MSPIKE_WL 4878 4.21 3.39 4.55 80 RCVD_IN_MSPIKE_H3 4878 4.21 3.39 4.55 81 HTML_IMAGE_RATIO_08 4825 2.55 3.35 2.22 82 XM_SPF_SoftFail 4772 1.85 3.31 1.26 83 MIME_QP_LONG_LINE 4760 4.22 3.31 4.58 84 XM_B_Unsub2 4558 1.82 3.17 1.27 85 XM_CamelCaseFrm001 4433 2.28 3.08 1.95 86 MIME_HTML_MOSTLY 4381 2.42 3.04 2.17 87 XM_UB50 4347 1.44 3.02 0.80 88 XM_URI_RBL 4269 1.14 2.96 0.40 89 XM_B_URI_Unicode 4229 2.20 2.94 1.90 90 T_XMDrugObfuBody_08 4213 1.82 2.93 1.37 91 XMDiploma_00 4076 1.83 2.83 1.42 92 RELAYCOUNTRY_AU 3974 1.22 2.76 0.60 93 TM2_M_URI_OPT_OUT 3695 1.80 2.57 1.49 94 TR_XM_INV_DKIM 3652 0.82 2.54 0.13 95 TR_XM_NoHeaderRelay 3619 0.82 2.51 0.14 96 HTML_MIME_NO_HTML_TAG 3591 2.39 2.49 2.35 97 SUBJ_ALL_CAPS 3586 1.63 2.49 1.28 98 SH_BODYURI_REVERSE_CSS 3494 0.99 2.43 0.41 99 T_FILL_THIS_FORM_SHORT 3493 1.22 2.43 0.74 100 T_TooManySym_01 3412 4.63 2.37 5.54 101 URIBL_CSS_A 3400 0.95 2.36 0.38 102 URIBL_CSS 3400 0.95 2.36 0.38 103 MAILING_LIST_MULTI 3396 2.73 2.36 2.88 104 XMStockSpam_06 3375 1.46 2.34 1.11 105 DIET_1 3324 0.95 2.31 0.40 106 XMBody_17 3255 0.95 2.26 0.43 107 SpammyFromTLD_01 3220 1.29 2.24 0.91 108 T_REMOTE_IMAGE 3217 2.87 2.23 3.12 109 T_XMHurry_00 3198 0.95 2.22 0.45 110 RCVD_IN_VALIDITY_SAFE 2928 3.23 2.03 3.71 111 SpammyFromTLD_02 2912 0.79 2.02 0.30 112 XM_B_SpammyWords4 2869 0.89 1.99 0.44 113 ALL_TRUSTED 2758 11.41 1.92 15.22 114 KHOP_HELO_FCRDNS 2691 1.38 1.87 1.19 115 URI_HEX 2675 1.42 1.86 1.24 116 XMBrknScrpt_02 2666 1.12 1.85 0.82 117 USER_IN_DEF_DKIM_WL 2630 8.42 1.83 11.07 118 T_XMDrugObfuBody_00 2533 0.96 1.76 0.64 119 RCVD_IN_ZEN_LASTEXTERNAL 2527 0.50 1.75 0.00 120 SHORTCIRCUIT 2527 0.50 1.75 0.00 121 RCVD_IN_PSBL 2402 0.54 1.67 0.09 122 BAYES_40 2380 4.98 1.65 6.32 123 RCVD_IN_VALIDITY_CERTIFIED 2292 2.65 1.59 3.08 124 XMGenDplmaNmb 2289 1.10 1.59 0.90 125 FROM_EXCESS_BASE64 2263 1.68 1.57 1.72 126 XM_DIRTYINTL 2210 0.49 1.53 0.07 127 XM_DK_Undo_01 2182 1.56 1.52 1.58 128 XMPhish30 2099 0.81 1.46 0.56 129 TR_LOTS_OF_MONEY2 2073 0.52 1.44 0.15 130 T_MONEY_PERCENT 2073 0.52 1.44 0.15 131 HTML_IMAGE_ONLY_20 2068 0.74 1.44 0.46 132 TR_XM_InvalidRelay 1988 0.40 1.38 0.01 133 XM_B_DNDMA 1933 0.68 1.34 0.41 134 RCVD_IN_XBL 1924 0.40 1.34 0.03 135 XMSlimDrugH 1904 0.67 1.32 0.41 136 BAYES_20 1870 3.93 1.30 4.98 137 LongTLD 1853 0.56 1.29 0.27 138 XMMoneyMeta_00 1844 0.70 1.28 0.46 139 MultiRelay_CC 1821 0.47 1.26 0.14 140 TR_Symld_Words 1810 1.39 1.26 1.44 141 BOTNET_NORDNS 1803 0.37 1.25 0.01 142 HTML_FONT_TINY_NORDNS 1791 0.40 1.24 0.06 143 XMReplyNow 1744 0.49 1.21 0.20 144 URI_TRY_3LD 1734 0.75 1.20 0.57 145 XM_B_COPY_HTML 1723 1.07 1.20 1.02 146 XM_HighProb1 1720 0.35 1.19 0.01 147 TR_XM_PHPForged 1720 0.57 1.19 0.31 148 TR_XM_FormFill2 1700 0.57 1.18 0.32 149 TR_XM_PHPDW 1690 0.56 1.17 0.32 150 XM_B_Phish66 1681 0.56 1.17 0.31 151 HTML_TAG_BALANCE_BODY 1679 0.68 1.17 0.48 152 RCVD_IN_PBL 1677 0.82 1.16 0.68 153 XM_H_PHPOS 1660 0.55 1.15 0.31 154 XM_B_SEO 1646 0.48 1.14 0.21 155 TR_LOTS_OF_MONEY3 1617 0.47 1.12 0.20 156 RCVD_IN_IADB_LISTED 1609 2.48 1.12 3.03 157 XMBdyGiftCard01 1588 1.09 1.10 1.08 158 XM_H_Long_From02 1586 0.85 1.10 0.76 159 HTTPS_HTTP_MISMATCH 1584 0.76 1.10 0.62 160 RELAYCOUNTRY_FR 1549 0.46 1.08 0.22 161 XM_SendGrid 1524 1.14 1.06 1.18 162 RCVD_IN_IADB_SPF 1522 2.21 1.06 2.67 163 TM2_M_OBFU_COMMENT 1505 0.53 1.05 0.32 164 DKIM_ADSP_CUSTOM_MED 1497 0.89 1.04 0.83 165 XM_H_Undi_Recip 1495 0.41 1.04 0.16 166 RCVD_IN_IADB_SENDERID 1482 2.02 1.03 2.42 167 RCVD_IN_IADB_DK 1480 1.97 1.03 2.35 168 XM_UB60 1477 0.33 1.03 0.05 169 THIS_AD 1470 0.56 1.02 0.38 170 TR_Mismatch_TLD_01 1465 0.42 1.02 0.17 171 TR_XM_SEO4 1450 0.37 1.01 0.11 172 SHOPIFY_IMG_NOT_RCVD_SFY 1417 0.41 0.98 0.18 173 NO_DNS_FOR_FROM 1410 0.45 0.98 0.24 174 TR_XM_MaxWHORU 1393 0.41 0.97 0.18 175 BAYES_00 1393 10.23 0.97 13.95 176 RDNS_DYNAMIC 1392 0.44 0.97 0.23 177 MPART_ALT_DIFF_COUNT 1390 0.62 0.97 0.48 178 T_STY_INVIS_DIRECT 1377 0.56 0.96 0.41 179 TR_XM_RelayPhish 1370 0.33 0.95 0.08 180 PDS_RDNS_DYNAMIC_FP 1347 0.36 0.94 0.13 181 XM_UB99 1343 0.27 0.93 0.00 182 XM_OfRef7 1339 0.43 0.93 0.23 183 RCVD_IN_SORBS_DUL 1328 0.28 0.92 0.02 184 TR_Mismatch_TLD_02 1326 0.31 0.92 0.06 185 T_Symld_Words_02 1316 0.60 0.91 0.48 186 RCVD_IN_SBL_CSS 1306 0.28 0.91 0.03 187 XM_PDF 1289 3.47 0.90 4.50 188 URI_NOVOWEL 1283 1.29 0.89 1.45 189 MISSING_HEADERS 1281 0.50 0.89 0.34 190 URIBL_BLACK 1265 0.28 0.88 0.04 191 XMSexyCombo_01 1255 0.32 0.87 0.10 192 PLING_QUERY 1254 0.53 0.87 0.39 193 XM_B_REG_HTML 1253 0.40 0.87 0.21 194 TM2_M_A_HREF_HREF 1238 0.40 0.86 0.21 195 XMPhish14 1224 0.67 0.85 0.59 196 XMBody_78 1215 0.45 0.84 0.29 197 DKIM_ADSP_NXDOMAIN 1215 0.45 0.84 0.29 198 TR_XM_DK_Bayes 1213 4.90 0.84 6.53 199 TR_XM_DK_Bayes1 1209 4.81 0.84 6.41 200 DEAR_FRIEND 1208 0.28 0.84 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 317739 90.52 95.31 88.60 2 RELAYCOUNTRY_US 295200 82.29 82.24 82.32 3 XM_B_Unicode 261461 75.85 83.18 72.91 4 DKIM_SIGNED 238113 73.09 89.75 66.40 5 XM_DK_Pass 233793 70.81 84.81 65.19 6 DCC_CHECK_NEGATIVE 233566 53.16 23.35 65.13 7 DKIM_VALID 230432 69.89 83.93 64.26 8 BAYES_50 207956 53.06 40.80 57.99 9 DKIM_VALID_AU 185701 55.85 65.99 51.78 10 XM_B_SpammyWords 158449 51.30 69.02 44.18 11 XM_B_Unicode3 153003 44.32 48.43 42.66 12 XMListUnsubscribeExists 150296 49.47 68.30 41.91 13 DCC_CHECK 124899 46.30 74.88 34.83 14 RCVD_IN_MSPIKE_H2 112211 33.55 39.16 31.29 15 T_TM2_M_HEADER_IN_MSG 98007 25.98 22.62 27.33 16 DKIM_VALID_EF 94984 27.38 29.62 26.49 17 LOC_TINY_FONT_1 84441 30.01 46.12 23.55 18 MIME_HTML_ONLY 83074 25.24 30.40 23.16 19 HTML_FONT_LOW_CONTRAST 82127 26.77 36.39 22.90 20 XMSubLong 79579 23.13 25.45 22.19 21 FVGT_m_MULTI_ODD 77365 24.32 31.16 21.57 22 T_KAM_HTML_FONT_INVALID 68439 22.96 32.61 19.08 23 XM_B_SpammyWords2 60963 23.32 39.07 17.00 24 ALL_TRUSTED 54598 11.41 1.92 15.22 25 BAYES_00 50033 10.23 0.97 13.95 26 HTML_IMAGE_RATIO_04 48689 11.08 4.86 13.58 27 HTML_FONT_FACE_BAD 42952 8.78 0.81 11.98 28 XM_Multi_Part_URI 41035 14.11 20.76 11.44 29 XM_H_Trusted_IP 40572 8.07 0.00 11.31 30 TR_XM_DK_Unsub 40052 13.96 20.90 11.17 31 USER_IN_DEF_DKIM_WL 39692 8.42 1.83 11.07 32 XMStrtUSub 38109 8.75 4.07 10.63 33 UNPARSEABLE_RELAY 37249 12.12 16.42 10.39 34 MPART_ALT_DIFF 33694 8.46 6.11 9.40 35 XM_B_PhoneNumber 33332 8.47 6.42 9.29 36 XM_Evil_Numbers_Gen 32347 9.03 9.06 9.02 37 TooManyTo_001 29455 6.87 3.52 8.21 38 XM_B_Unsub 29268 10.69 16.97 8.16 39 MIME_HTML_ONLY_MULTI 26683 6.36 3.68 7.44 40 LotsOfNums_01 25474 7.30 7.80 7.10 41 FSL_BULK_SIG 25177 8.03 10.55 7.02 42 TR_XM_DK_Bayes 23428 4.90 0.84 6.53 43 TR_XM_DK_Bayes1 22977 4.81 0.84 6.41 44 BAYES_40 22664 4.98 1.65 6.32 45 LOTS_OF_MONEY 21831 7.89 12.36 6.09 46 IN_ZIMBRA_NJ_WHITELIST 21351 4.28 0.10 5.95 47 TR_XM_BayesUnsub 20876 8.82 16.28 5.82 48 XM_DKIMWhitelistDomains 20692 4.13 0.05 5.77 49 BAYES_60 20472 6.59 8.79 5.71 50 T_TooManySym_01 19866 4.63 2.37 5.54 51 XM_H_GMP 19425 5.24 4.80 5.42 52 TR_XM_DK_Bayes2 19078 3.96 0.56 5.32 53 BAYES_20 17869 3.93 1.30 4.98 54 XM_H_Long_From01 17288 4.98 5.36 4.82 55 MIME_QP_LONG_LINE 16442 4.22 3.31 4.58 56 TR_MAX_INTL_RELAY 16314 7.57 15.08 4.55 57 RCVD_IN_MSPIKE_H3 16304 4.21 3.39 4.55 58 RCVD_IN_MSPIKE_WL 16304 4.21 3.39 4.55 59 XM_PDF 16150 3.47 0.90 4.50 60 HTML_IMAGE_RATIO_06 16005 4.33 3.99 4.46 61 TR_XM_SpammyWords4 15562 6.29 11.15 4.34 62 XMSubNoVowel 15213 3.14 0.39 4.24 63 XM_DK_Undo_02 14873 14.19 39.20 4.15 64 XM_B_Phish_Phrases 14570 5.18 7.95 4.06 65 HTML_IMAGE_RATIO_02 14099 4.58 6.21 3.93 66 XM_UncommonTLD01 13664 4.60 6.57 3.81 67 RCVD_IN_VALIDITY_SAFE 13298 3.23 2.03 3.71 68 BAYES_05 12855 2.74 0.62 3.58 69 XM_B_SpammyWords3 12690 6.53 14.00 3.54 70 TooManyTo_002 11631 2.49 0.61 3.24 71 BOUNCE_MESSAGE 11509 2.51 0.78 3.21 72 ANY_BOUNCE_MESSAGE 11509 2.51 0.78 3.21 73 RELAYCOUNTRY_META 11477 7.12 16.86 3.20 74 T_REMOTE_IMAGE 11190 2.87 2.23 3.12 75 RCVD_IN_VALIDITY_CERTIFIED 11050 2.65 1.59 3.08 76 RCVD_IN_IADB_LISTED 10867 2.48 1.12 3.03 77 T_TooManySym_02 10616 2.33 0.75 2.96 78 BAYES_99 10459 10.50 29.39 2.92 79 MAILING_LIST_MULTI 10341 2.73 2.36 2.88 80 BOTNET_IPINHOSTNAME 10227 4.99 10.32 2.85 81 XMSubMetaSx_00 10072 3.61 5.59 2.81 82 BAYES_80 10041 4.69 9.40 2.80 83 RCVD_IN_IADB_SPF 9574 2.21 1.06 2.67 84 XMNumbers 9322 2.90 3.65 2.60 85 RCVD_IN_IADB_SENDERID 8665 2.02 1.03 2.42 86 HTML_MIME_NO_HTML_TAG 8430 2.39 2.49 2.35 87 RCVD_IN_IADB_DK 8422 1.97 1.03 2.35 88 BAYES_999 8129 8.06 22.49 2.27 89 HTML_IMAGE_RATIO_08 7974 2.55 3.35 2.22 90 MIME_HTML_MOSTLY 7788 2.42 3.04 2.17 91 DKIM_INVALID 7681 3.20 5.82 2.14 92 XM_B_SpammyTLD 7622 2.50 3.42 2.13 93 XM_Body_Dirty_Words 7579 3.62 7.36 2.11 94 XMSubLongNoVowel 7507 1.52 0.09 2.09 95 XMSubGarbage 7339 1.47 0.04 2.05 96 INVALID_MSGID 7183 1.52 0.33 2.00 97 XM_CamelCaseFrm001 7009 2.28 3.08 1.95 98 RCVD_IN_IADB_VOUCHED 6952 1.51 0.43 1.94 99 XM_B_URI_Unicode 6807 2.20 2.94 1.90 100 TR_XM_DKIM_Undo 6648 9.51 28.58 1.85 101 TR_XM_PhishingBody 6389 2.61 4.67 1.78 102 TO_MALFORMED 6272 1.25 0.00 1.75 103 BAYES_95 6265 2.77 5.32 1.75 104 FROM_EXCESS_BASE64 6178 1.68 1.57 1.72 105 TR_XM_SpammyRelay 5906 4.60 11.97 1.65 106 TooManyTo_003 5754 1.29 0.51 1.60 107 XM_DK_Undo_01 5677 1.56 1.52 1.58 108 T_XMDrugObfuBody_14 5518 2.40 4.56 1.54 109 TM2_M_URI_OPT_OUT 5333 1.80 2.57 1.49 110 URI_NOVOWEL 5199 1.29 0.89 1.45 111 TR_Symld_Words 5154 1.39 1.26 1.44 112 XMDiploma_00 5103 1.83 2.83 1.42 113 T_XMDrugObfuBody_08 4921 1.82 2.93 1.37 114 RCVD_IN_IADB_OPTIN 4786 1.05 0.33 1.33 115 XM_B_Investor 4766 2.12 4.09 1.33 116 BOTNET 4715 3.72 9.72 1.31 117 SUBJ_ALL_CAPS 4608 1.63 2.49 1.28 118 IN_HORDE_ADDRESS_BOOK 4599 0.95 0.11 1.28 119 XM_B_Unsub2 4565 1.82 3.17 1.27 120 XM_SPF_SoftFail 4534 1.85 3.31 1.26 121 UNTRUSTED_Relay 4471 2.71 6.35 1.25 122 URI_HEX 4438 1.42 1.86 1.24 123 TM2_M_VERY_LONG_WORD 4417 1.91 3.61 1.23 124 TooManyTo_004 4358 0.99 0.43 1.22 125 TR_XM_UnparsRelay 4253 3.28 8.50 1.19 126 KHOP_HELO_FCRDNS 4252 1.38 1.87 1.19 127 XM_SendGrid 4225 1.14 1.06 1.18 128 HELO_NODOT 4223 0.87 0.10 1.18 129 HELO_NO_DOMAIN 4217 0.87 0.10 1.18 130 XMGappySubj_01 4111 0.86 0.15 1.15 131 XMStockSpam_06 3983 1.46 2.34 1.11 132 TR_DCC_Bayes_99 3953 6.64 20.42 1.10 133 XMSexyCombo_05 3927 2.08 4.52 1.10 134 T_TooManySym_03 3926 0.82 0.14 1.09 135 XM_GoogleGroups 3921 0.97 0.67 1.09 136 XMBdyGiftCard01 3879 1.09 1.10 1.08 137 XMCapTrack 3846 0.89 0.44 1.07 138 TR_XM_SpammyWords5 3706 2.01 4.43 1.03 139 XM_B_COPY_HTML 3645 1.07 1.20 1.02 140 XM_E_Blogspot 3613 0.76 0.15 1.01 141 TooManyTo_005 3604 0.82 0.37 1.00 142 XM_OfRef6 3582 1.79 3.76 1.00 143 XM_B_FormFill 3533 0.72 0.04 0.99 144 TVD_SPACE_RATIO 3413 0.75 0.26 0.95 145 SpammyFromTLD_01 3275 1.29 2.24 0.91 146 XMGenDplmaNmb 3236 1.10 1.59 0.90 147 DKIM_ADSP_CUSTOM_MED 2992 0.89 1.04 0.83 148 XMBrknScrpt_02 2957 1.12 1.85 0.82 149 XM_ShortIntro_01 2882 0.71 0.48 0.80 150 XM_UB50 2867 1.44 3.02 0.80 151 TR_XM_DK_SendGrid 2824 0.75 0.66 0.79 152 RELAYCOUNTRY_CA 2816 2.38 6.37 0.79 153 XMSubMetaI_00 2747 0.74 0.67 0.77 154 XM_H_Long_From02 2710 0.85 1.10 0.76 155 TR_MetaPhish_Combo_01 2675 0.76 0.79 0.75 156 T_FILL_THIS_FORM_SHORT 2646 1.22 2.43 0.74 157 T_OBFU_PDF_ATTACH 2588 0.56 0.17 0.72 158 XMNoVowels 2546 0.68 0.61 0.71 159 TR_XM_Base64_M1 2492 0.70 0.70 0.69 160 RCVD_IN_PBL 2446 0.82 1.16 0.68 161 XMGappySubj_02 2439 0.50 0.06 0.68 162 XM_H_PHPMailer 2424 0.65 0.60 0.68 163 TVD_RCVD_IP 2345 0.65 0.63 0.65 164 T_XMDrugObfuBody_00 2299 0.96 1.76 0.64 165 XMLngstWrd_00 2287 0.61 0.53 0.64 166 FROM_GOV_DKIM_AU 2246 0.56 0.40 0.63 167 HTTPS_HTTP_MISMATCH 2224 0.76 1.10 0.62 168 NML_ADSP_CUSTOM_MED 2160 0.65 0.75 0.60 169 RELAYCOUNTRY_AU 2154 1.22 2.76 0.60 170 XMPhish14 2119 0.67 0.85 0.59 171 URI_TRY_3LD 2050 0.75 1.20 0.57 172 TO_NO_BRKTS_HTML_ONLY 2042 0.52 0.40 0.57 173 XMPhish30 1994 0.81 1.46 0.56 174 FORGED_GMAIL_RCVD 1971 0.63 0.82 0.55 175 RCVD_IN_BL_SPAMCOP_NET 1900 2.85 8.64 0.53 176 HTML_IMAGE_ONLY_32 1864 0.44 0.26 0.52 177 XMBody_95 1782 0.45 0.32 0.50 178 MPART_ALT_DIFF_COUNT 1723 0.62 0.97 0.48 179 HTML_TAG_BALANCE_BODY 1721 0.68 1.17 0.48 180 T_Symld_Words_02 1718 0.60 0.91 0.48 181 FILL_THIS_FORM 1717 0.52 0.61 0.48 182 SUBJ_BUY 1679 0.36 0.08 0.47 183 XMMoneyMeta_00 1652 0.70 1.28 0.46 184 HTML_IMAGE_ONLY_20 1636 0.74 1.44 0.46 185 XMDateMe_00 1605 0.41 0.30 0.45 186 T_XMHurry_00 1602 0.95 2.22 0.45 187 RELAYCOUNTRY_GB 1599 0.55 0.82 0.45 188 XM_B_SpammyWords4 1594 0.89 1.99 0.44 189 XMBody_17 1526 0.95 2.26 0.43 190 XMLngstWrd_01 1525 0.43 0.43 0.43 191 XMSlimDrugH 1472 0.67 1.32 0.41 192 HELO_MISC_IP 1471 0.33 0.14 0.41 193 XM_B_DNDMA 1468 0.68 1.34 0.41 194 SH_BODYURI_REVERSE_CSS 1457 0.99 2.43 0.41 195 T_STY_INVIS_DIRECT 1453 0.56 0.96 0.41 196 XM_URI_RBL 1443 1.14 2.96 0.40 197 DIET_1 1428 0.95 2.31 0.40 198 HTML_IMAGE_ONLY_28 1411 0.41 0.45 0.39 199 PLING_QUERY 1402 0.53 0.87 0.39 200 XMBSHREFv2 1378 0.44 0.56 0.38 ----------------------------------------------------------------------