Email: 478986 Autolearn: 0 AvgScore: 4.59 AvgScanTime: 1.42 sec Spam: 149902 Autolearn: 0 AvgScore: 14.71 AvgScanTime: 1.56 sec Ham: 329084 Autolearn: 0 AvgScore: -0.02 AvgScanTime: 1.35 sec Time Spent Running SA: 188.76 hours Time Spent Processing Spam: 65.05 hours Time Spent Processing Ham: 123.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141432 89.77 94.35 87.69 2 DKIM_SIGNED 134124 79.85 89.47 75.47 3 XM_DK_Pass 125957 77.04 84.03 73.86 4 XM_B_Unicode 125744 75.16 83.88 71.19 5 DKIM_VALID 124554 75.92 83.09 72.66 6 RELAYCOUNTRY_US 122789 81.96 81.91 81.99 7 DCC_CHECK 113268 50.09 75.56 38.49 8 XM_B_SpammyWords 103874 51.80 69.29 43.83 9 XMListUnsubscribeExists 103816 55.04 69.26 48.57 10 DKIM_VALID_AU 98123 60.40 65.46 58.09 11 XM_B_Unicode3 74101 43.78 49.43 41.21 12 LOC_TINY_FONT_1 71029 33.60 47.38 27.32 13 BAYES_50 60865 54.65 40.60 61.05 14 XM_B_SpammyWords2 59393 24.47 39.62 17.57 15 RCVD_IN_MSPIKE_H2 58742 36.20 39.19 34.83 16 XM_DK_Undo_02 57899 15.28 38.62 4.64 17 HTML_FONT_LOW_CONTRAST 55352 30.49 36.93 27.56 18 FVGT_m_MULTI_ODD 48474 26.50 32.34 23.84 19 T_KAM_HTML_FONT_INVALID 47126 25.00 31.44 22.07 20 BAYES_99 44190 11.24 29.48 2.93 21 MIME_HTML_ONLY 42679 23.15 28.47 20.72 22 TR_XM_DKIM_Undo 42567 10.22 28.40 1.94 23 DKIM_VALID_EF 42460 28.62 28.33 28.75 24 XMSubLong 38430 23.74 25.64 22.87 25 DCC_CHECK_NEGATIVE 33983 49.31 22.67 61.44 26 BAYES_999 33772 8.60 22.53 2.26 27 T_TM2_M_HEADER_IN_MSG 32305 27.44 21.55 30.13 28 TR_DCC_Bayes_99 31527 7.34 21.03 1.10 29 XM_Multi_Part_URI 31264 15.41 20.86 12.93 30 TR_XM_DK_Unsub 30099 14.84 20.08 12.46 31 XM_B_Unsub 26379 11.66 17.60 8.96 32 UNPARSEABLE_RELAY 26030 13.25 17.36 11.37 33 TR_XM_BayesUnsub 25575 10.05 17.06 6.86 34 TR_MAX_INTL_RELAY 23011 8.49 15.35 5.37 35 RELAYCOUNTRY_META 22992 7.33 15.34 3.68 36 XM_B_SpammyWords3 21592 7.53 14.40 4.40 37 LOTS_OF_MONEY 18629 8.15 12.43 6.20 38 TR_XM_SpammyRelay 17218 4.86 11.49 1.84 39 TR_XM_SpammyWords4 16625 6.00 11.09 3.68 40 TR_XM_SpammyWords2 16562 3.72 11.05 0.39 41 BOTNET_IPINHOSTNAME 16315 5.50 10.88 3.04 42 FSL_BULK_SIG 15491 8.02 10.33 6.96 43 BOTNET 14967 4.34 9.98 1.77 44 XM_Evil_Numbers_Gen 14509 9.03 9.68 8.73 45 BAYES_80 14422 5.30 9.62 3.33 46 TR_XM_UnparsRelay 13588 3.84 9.06 1.46 47 RCVD_IN_BL_SPAMCOP_NET 12713 3.05 8.48 0.57 48 BAYES_60 12613 7.60 8.41 7.23 49 XM_B_Phish_Phrases 12121 6.17 8.09 5.29 50 LotsOfNums_01 11029 7.57 7.36 7.67 51 TR_XM_SPAMCOP 10370 2.35 6.92 0.26 52 XMSubMetaSx_00 10210 4.56 6.81 3.53 53 XM_Body_Dirty_Words 10177 3.67 6.79 2.25 54 XM_B_PhoneNumber 10017 9.29 6.68 10.48 55 DKIM_INVALID 9570 3.93 6.38 2.81 56 HTML_IMAGE_RATIO_02 9337 4.96 6.23 4.38 57 XM_UncommonTLD01 9077 4.77 6.06 4.18 58 RELAYCOUNTRY_CA 9075 2.56 6.05 0.97 59 UNTRUSTED_Relay 8823 2.82 5.89 1.42 60 XM_H_Long_From01 8180 5.77 5.46 5.92 61 MPART_ALT_DIFF 8065 5.03 5.38 4.87 62 BAYES_95 8002 3.07 5.34 2.04 63 TR_XM_PhishingBody 7811 2.99 5.21 1.98 64 HTML_IMAGE_RATIO_04 6981 3.91 4.66 3.58 65 XM_H_GMP 6926 5.56 4.62 5.99 66 XM_B_Investor 6795 2.82 4.53 2.04 67 XMStrtUSub 6671 4.55 4.45 4.60 68 TR_XM_SpammyWords5 5967 1.97 3.98 1.05 69 RCVD_IN_MSPIKE_WL 5908 5.00 3.94 5.48 70 RCVD_IN_MSPIKE_H3 5908 5.00 3.94 5.48 71 HTML_IMAGE_RATIO_06 5871 3.43 3.92 3.20 72 T_XMDrugObfuBody_14 5683 2.53 3.79 1.96 73 XM_B_SpammyTLD 5446 2.78 3.63 2.40 74 XM_OfRef6 5445 1.71 3.63 0.83 75 XMSexyCombo_05 5436 2.02 3.63 1.29 76 XMNumbers 5329 3.04 3.55 2.80 77 TooManyTo_001 5246 7.11 3.50 8.76 78 TM2_M_URI_OPT_OUT 5134 2.24 3.42 1.70 79 TM2_M_VERY_LONG_WORD 4910 1.86 3.28 1.21 80 MIME_HTML_ONLY_MULTI 4793 2.99 3.20 2.89 81 ALL_TRUSTED 4760 11.43 3.18 15.19 82 MIME_QP_LONG_LINE 4648 4.44 3.10 5.06 83 XM_URI_RBL 4537 1.25 3.03 0.44 84 XM_B_Unsub2 4402 2.03 2.94 1.62 85 MIME_HTML_MOSTLY 4388 2.62 2.93 2.47 86 XMDiploma_00 4383 2.08 2.92 1.69 87 XM_CamelCaseFrm001 4255 2.55 2.84 2.42 88 XM_B_SpammyWords4 4254 1.28 2.84 0.58 89 XM_SPF_SoftFail 4250 1.87 2.84 1.43 90 RCVD_IN_VALIDITY_RPBL 4228 0.93 2.82 0.07 91 XM_UB50 4216 1.52 2.81 0.93 92 XM_B_URI_Unicode 4216 2.33 2.81 2.11 93 HTML_IMAGE_RATIO_08 4080 2.87 2.72 2.94 94 T_XMDrugObfuBody_08 3972 1.92 2.65 1.58 95 T_TooManySym_01 3889 4.65 2.59 5.59 96 RELAYCOUNTRY_AU 3803 1.20 2.54 0.60 97 MAILING_LIST_MULTI 3776 2.91 2.52 3.09 98 RCVD_IN_VALIDITY_SAFE 3756 3.35 2.51 3.73 99 DIET_1 3547 0.94 2.37 0.29 100 RCVD_IN_VALIDITY_CERTIFIED 3312 2.74 2.21 2.98 101 FROM_EXCESS_BASE64 3298 1.94 2.20 1.82 102 T_FILL_THIS_FORM_SHORT 3269 1.28 2.18 0.87 103 TR_XM_NoHeaderRelay 3173 0.81 2.12 0.21 104 T_XMDrugObfuBody_00 3168 1.29 2.11 0.91 105 HTML_MIME_NO_HTML_TAG 3144 2.57 2.10 2.79 106 XMStockSpam_06 3099 1.25 2.07 0.88 107 TR_XM_INV_DKIM 3095 0.76 2.06 0.17 108 SpammyFromTLD_02 3081 0.99 2.06 0.51 109 SpammyFromTLD_01 3079 1.29 2.05 0.94 110 T_XMHurry_00 3001 1.08 2.00 0.65 111 XMBody_17 2960 0.90 1.97 0.40 112 BAYES_40 2823 4.46 1.88 5.64 113 XMSubMetaI_00 2747 1.16 1.83 0.85 114 SUBJ_ALL_CAPS 2744 1.63 1.83 1.54 115 XM_DK_Undo_01 2698 1.86 1.80 1.89 116 SHORTCIRCUIT 2640 0.55 1.76 0.00 117 RCVD_IN_ZEN_LASTEXTERNAL 2640 0.55 1.76 0.00 118 USER_IN_DEF_DKIM_WL 2599 9.15 1.73 12.52 119 XM_H_Long_From02 2536 1.12 1.69 0.86 120 XMGenDplmaNmb 2505 1.17 1.67 0.95 121 URI_TRY_3LD 2352 0.83 1.57 0.49 122 URI_HEX 2327 1.45 1.55 1.41 123 RCVD_IN_PSBL 2300 0.57 1.53 0.14 124 TR_LOTS_OF_MONEY3 2268 0.69 1.51 0.31 125 T_REMOTE_IMAGE 2264 3.18 1.51 3.94 126 XMPhish30 2253 0.80 1.50 0.47 127 XM_SendGrid 2144 1.34 1.43 1.30 128 BAYES_20 2128 3.12 1.42 3.89 129 XM_B_Phish66 2103 0.64 1.40 0.29 130 KHOP_HELO_FCRDNS 2072 1.80 1.38 2.00 131 DKIM_ADSP_CUSTOM_MED 2043 1.10 1.36 0.99 132 XM_PDF 1963 3.68 1.31 4.76 133 XMBrknScrpt_02 1949 1.09 1.30 1.00 134 HTML_FONT_TINY_NORDNS 1885 0.52 1.26 0.19 135 NO_DNS_FOR_FROM 1882 0.58 1.26 0.28 136 TR_XM_Base64_M1 1875 0.88 1.25 0.70 137 TR_MetaPhish_Combo_01 1872 1.00 1.25 0.89 138 THIS_AD 1861 0.73 1.24 0.50 139 TR_XM_MaxWHORU 1859 0.53 1.24 0.21 140 LongTLD 1852 0.68 1.24 0.43 141 DKIM_ADSP_NXDOMAIN 1851 0.59 1.23 0.30 142 XM_B_COVIDMETA 1849 0.51 1.23 0.18 143 HTTPS_HTTP_MISMATCH 1803 0.92 1.20 0.79 144 XM_DIRTYINTL 1779 0.43 1.19 0.08 145 XM_HighProb1 1771 0.38 1.18 0.02 146 TR_XM_PHPForged 1757 0.58 1.17 0.31 147 XM_B_DNDMA 1738 0.71 1.16 0.51 148 XM_B_REG_HTML 1730 0.51 1.15 0.21 149 TR_XM_PHPDW 1725 0.58 1.15 0.32 150 SHOPIFY_IMG_NOT_RCVD_SFY 1721 0.54 1.15 0.26 151 TR_XM_FormFill2 1721 0.57 1.15 0.31 152 XM_B_SEO 1716 0.52 1.14 0.24 153 XMSexyCombo_01 1701 0.49 1.13 0.20 154 MPART_ALT_DIFF_COUNT 1696 0.70 1.13 0.50 155 URI_NOVOWEL 1694 1.46 1.13 1.62 156 TR_XM_SEO4 1692 0.44 1.13 0.12 157 XM_B_COPY_HTML 1684 0.74 1.12 0.56 158 NML_ADSP_CUSTOM_MED 1682 0.83 1.12 0.70 159 XM_H_PHPOS 1682 0.55 1.12 0.30 160 RCVD_IN_IADB_LISTED 1680 2.98 1.12 3.82 161 RCVD_IN_PBL 1673 0.83 1.12 0.70 162 XMPhish14 1635 0.84 1.09 0.73 163 BOTNET_NORDNS 1602 0.46 1.07 0.18 164 XMReplyNow 1596 0.51 1.06 0.26 165 XM_ProductURIs 1596 0.60 1.06 0.39 166 FORGED_GMAIL_RCVD 1588 0.75 1.06 0.60 167 XMBody_78 1582 0.58 1.06 0.36 168 T_MONEY_PERCENT 1556 0.46 1.04 0.20 169 TR_LOTS_OF_MONEY2 1556 0.46 1.04 0.20 170 NORDNS_LOW_CONTRAST 1544 0.44 1.03 0.18 171 T_Symld_Words_02 1543 0.79 1.03 0.69 172 XM_UB99 1526 0.32 1.02 0.00 173 RELAYCOUNTRY_FR 1485 0.47 0.99 0.23 174 RCVD_IN_IADB_SPF 1481 2.62 0.99 3.36 175 RCVD_IN_IADB_DK 1444 2.32 0.96 2.94 176 XMBdyGiftCard01 1441 0.68 0.96 0.55 177 RCVD_IN_IADB_SENDERID 1435 2.36 0.96 3.00 178 BASE64_LENGTH_79_INF 1434 0.53 0.96 0.33 179 TR_Mismatch_TLD_02 1417 0.34 0.95 0.07 180 XMHTML_After_End 1376 0.57 0.92 0.41 181 HTML_TAG_BALANCE_BODY 1369 0.71 0.91 0.62 182 TR_Symld_Words 1314 1.43 0.88 1.68 183 MultiRelay_CC 1295 0.37 0.86 0.15 184 RDNS_DYNAMIC 1290 0.40 0.86 0.19 185 XMSlimDrugH 1287 0.57 0.86 0.44 186 TM2_M_A_HREF_HREF 1281 0.42 0.85 0.23 187 FROM_SUSPICIOUS_NTLD 1251 0.28 0.83 0.03 188 PDS_RDNS_DYNAMIC_FP 1249 0.31 0.83 0.07 189 TR_XM_DK_SendGrid 1238 0.85 0.83 0.86 190 TR_XM_RelayPhish 1226 0.31 0.82 0.08 191 RCVD_IN_SORBS_DUL 1221 0.29 0.81 0.05 192 XMPhish08 1211 0.50 0.81 0.37 193 T_STY_INVIS_DIRECT 1201 0.56 0.80 0.45 194 HTML_IMAGE_ONLY_20 1195 0.64 0.80 0.56 195 XM_OfRef7 1187 0.40 0.79 0.22 196 XM_UB999 1184 0.25 0.79 0.00 197 HOSTED_IMG_MULTI_PUB_01 1182 0.26 0.79 0.01 198 TM2_M_OBFU_COMMENT 1169 0.44 0.78 0.29 199 XMNoVowels 1149 0.90 0.77 0.96 200 RELAYCOUNTRY_GB 1146 0.58 0.76 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 288570 89.77 94.35 87.69 2 RELAYCOUNTRY_US 269806 81.96 81.91 81.99 3 DKIM_SIGNED 248345 79.85 89.47 75.47 4 XM_DK_Pass 243054 77.04 84.03 73.86 5 DKIM_VALID 239108 75.92 83.09 72.66 6 XM_B_Unicode 234269 75.16 83.88 71.19 7 DCC_CHECK_NEGATIVE 202205 49.31 22.67 61.44 8 BAYES_50 200913 54.65 40.60 61.05 9 DKIM_VALID_AU 191177 60.40 65.46 58.09 10 XMListUnsubscribeExists 159841 55.04 69.26 48.57 11 XM_B_SpammyWords 144226 51.80 69.29 43.83 12 XM_B_Unicode3 135621 43.78 49.43 41.21 13 DCC_CHECK 126652 50.09 75.56 38.49 14 RCVD_IN_MSPIKE_H2 114629 36.20 39.19 34.83 15 T_TM2_M_HEADER_IN_MSG 99139 27.44 21.55 30.13 16 DKIM_VALID_EF 94605 28.62 28.33 28.75 17 HTML_FONT_LOW_CONTRAST 90699 30.49 36.93 27.56 18 LOC_TINY_FONT_1 89894 33.60 47.38 27.32 19 FVGT_m_MULTI_ODD 78449 26.50 32.34 23.84 20 XMSubLong 75276 23.74 25.64 22.87 21 T_KAM_HTML_FONT_INVALID 72633 25.00 31.44 22.07 22 MIME_HTML_ONLY 68202 23.15 28.47 20.72 23 XM_B_SpammyWords2 57815 24.47 39.62 17.57 24 ALL_TRUSTED 50003 11.43 3.18 15.19 25 XM_Multi_Part_URI 42558 15.41 20.86 12.93 26 USER_IN_DEF_DKIM_WL 41211 9.15 1.73 12.52 27 TR_XM_DK_Unsub 40992 14.84 20.08 12.46 28 BAYES_00 37918 8.15 0.73 11.52 29 UNPARSEABLE_RELAY 37420 13.25 17.36 11.37 30 XM_B_PhoneNumber 34499 9.29 6.68 10.48 31 XM_B_Unsub 29477 11.66 17.60 8.96 32 TooManyTo_001 28820 7.11 3.50 8.76 33 XM_Evil_Numbers_Gen 28728 9.03 9.68 8.73 34 LotsOfNums_01 25237 7.57 7.36 7.67 35 TR_XM_DK_Bayes 24746 5.35 0.58 7.52 36 TR_XM_DK_Bayes1 24252 5.24 0.58 7.37 37 BAYES_60 23795 7.60 8.41 7.23 38 FSL_BULK_SIG 22913 8.02 10.33 6.96 39 TR_XM_BayesUnsub 22573 10.05 17.06 6.86 40 IN_ZIMBRA_NJ_WHITELIST 21898 4.60 0.10 6.65 41 XM_DKIMWhitelistDomains 21203 4.44 0.05 6.44 42 TR_XM_DK_Bayes2 21152 4.55 0.44 6.43 43 LOTS_OF_MONEY 20395 8.15 12.43 6.20 44 XM_H_GMP 19713 5.56 4.62 5.99 45 XM_H_Long_From01 19481 5.77 5.46 5.92 46 BAYES_40 18545 4.46 1.88 5.64 47 T_TooManySym_01 18383 4.65 2.59 5.59 48 RCVD_IN_MSPIKE_WL 18025 5.00 3.94 5.48 49 RCVD_IN_MSPIKE_H3 18025 5.00 3.94 5.48 50 TR_MAX_INTL_RELAY 17668 8.49 15.35 5.37 51 XM_B_Phish_Phrases 17416 6.17 8.09 5.29 52 MIME_QP_LONG_LINE 16641 4.44 3.10 5.06 53 MPART_ALT_DIFF 16010 5.03 5.38 4.87 54 XM_PDF 15659 3.68 1.31 4.76 55 XM_DK_Undo_02 15276 15.28 38.62 4.64 56 XMStrtUSub 15125 4.55 4.45 4.60 57 XM_B_SpammyWords3 14487 7.53 14.40 4.40 58 HTML_IMAGE_RATIO_02 14398 4.96 6.23 4.38 59 XM_UncommonTLD01 13750 4.77 6.06 4.18 60 T_REMOTE_IMAGE 12967 3.18 1.51 3.94 61 BAYES_20 12817 3.12 1.42 3.89 62 ANY_BOUNCE_MESSAGE 12657 2.86 0.69 3.85 63 BOUNCE_MESSAGE 12656 2.86 0.69 3.85 64 RCVD_IN_IADB_LISTED 12578 2.98 1.12 3.82 65 RCVD_IN_VALIDITY_SAFE 12289 3.35 2.51 3.73 66 TR_XM_SpammyWords4 12125 6.00 11.09 3.68 67 RELAYCOUNTRY_META 12109 7.33 15.34 3.68 68 HTML_IMAGE_RATIO_04 11768 3.91 4.66 3.58 69 XMSubMetaSx_00 11619 4.56 6.81 3.53 70 RCVD_IN_IADB_SPF 11045 2.62 0.99 3.36 71 BAYES_80 10953 5.30 9.62 3.33 72 TooManyTo_002 10798 2.44 0.60 3.28 73 HTML_IMAGE_RATIO_06 10540 3.43 3.92 3.20 74 MAILING_LIST_MULTI 10174 2.91 2.52 3.09 75 BOTNET_IPINHOSTNAME 10018 5.50 10.88 3.04 76 RCVD_IN_IADB_SENDERID 9888 2.36 0.96 3.00 77 T_TooManySym_02 9875 2.24 0.59 3.00 78 RCVD_IN_VALIDITY_CERTIFIED 9812 2.74 2.21 2.98 79 RCVD_IN_IADB_DK 9678 2.32 0.96 2.94 80 HTML_IMAGE_RATIO_08 9669 2.87 2.72 2.94 81 BAYES_99 9642 11.24 29.48 2.93 82 MIME_HTML_ONLY_MULTI 9519 2.99 3.20 2.89 83 DKIM_INVALID 9237 3.93 6.38 2.81 84 XMNumbers 9223 3.04 3.55 2.80 85 HTML_MIME_NO_HTML_TAG 9180 2.57 2.10 2.79 86 RCVD_IN_IADB_VOUCHED 8622 1.94 0.44 2.62 87 MIME_HTML_MOSTLY 8140 2.62 2.93 2.47 88 XM_CamelCaseFrm001 7954 2.55 2.84 2.42 89 XM_B_SpammyTLD 7886 2.78 3.63 2.40 90 BAYES_05 7779 1.86 0.75 2.36 91 BAYES_999 7423 8.60 22.53 2.26 92 XM_Body_Dirty_Words 7405 3.67 6.79 2.25 93 INVALID_MSGID 7221 1.60 0.30 2.19 94 XM_B_URI_Unicode 6956 2.33 2.81 2.11 95 XM_B_Investor 6708 2.82 4.53 2.04 96 BAYES_95 6706 3.07 5.34 2.04 97 KHOP_HELO_FCRDNS 6572 1.80 1.38 2.00 98 TR_XM_PhishingBody 6502 2.99 5.21 1.98 99 T_XMDrugObfuBody_14 6441 2.53 3.79 1.96 100 TR_XM_DKIM_Undo 6379 10.22 28.40 1.94 101 TO_MALFORMED 6299 1.33 0.04 1.91 102 XM_DK_Undo_01 6212 1.86 1.80 1.89 103 TR_XM_SpammyRelay 6062 4.86 11.49 1.84 104 TooManyTo_003 6021 1.41 0.50 1.83 105 RCVD_IN_IADB_OPTIN 6011 1.33 0.25 1.83 106 FROM_EXCESS_BASE64 5988 1.94 2.20 1.82 107 BOTNET 5815 4.34 9.98 1.77 108 TM2_M_URI_OPT_OUT 5587 2.24 3.42 1.70 109 XMDiploma_00 5568 2.08 2.92 1.69 110 TR_Symld_Words 5523 1.43 0.88 1.68 111 URI_NOVOWEL 5317 1.46 1.13 1.62 112 XM_B_Unsub2 5316 2.03 2.94 1.62 113 T_XMDrugObfuBody_08 5210 1.92 2.65 1.58 114 SUBJ_ALL_CAPS 5080 1.63 1.83 1.54 115 TR_XM_UnparsRelay 4798 3.84 9.06 1.46 116 XM_SPF_SoftFail 4700 1.87 2.84 1.43 117 UNTRUSTED_Relay 4676 2.82 5.89 1.42 118 IN_HORDE_ADDRESS_BOOK 4652 1.00 0.10 1.41 119 URI_HEX 4635 1.45 1.55 1.41 120 HELO_NODOT 4468 1.02 0.27 1.36 121 HELO_NO_DOMAIN 4459 1.02 0.27 1.35 122 XM_GoogleGroups 4449 1.15 0.71 1.35 123 TooManyTo_004 4299 1.04 0.44 1.31 124 XM_SendGrid 4268 1.34 1.43 1.30 125 XMSexyCombo_05 4233 2.02 3.63 1.29 126 XMCapTrack 4136 1.00 0.45 1.26 127 XMGappySubj_01 4129 0.93 0.22 1.25 128 T_TooManySym_03 3992 0.88 0.14 1.21 129 TM2_M_VERY_LONG_WORD 3976 1.86 3.28 1.21 130 FROM_GOV_DKIM_AU 3938 0.85 0.10 1.20 131 TR_DCC_Bayes_99 3625 7.34 21.03 1.10 132 TooManyTo_005 3522 0.86 0.39 1.07 133 TVD_SPACE_RATIO 3463 0.79 0.23 1.05 134 TR_XM_SpammyWords5 3456 1.97 3.98 1.05 135 HTML_IMAGE_ONLY_32 3368 0.75 0.14 1.02 136 XMBrknScrpt_02 3289 1.09 1.30 1.00 137 DKIM_ADSP_CUSTOM_MED 3244 1.10 1.36 0.99 138 T_TVD_MIME_NO_HEADERS 3236 0.70 0.08 0.98 139 RELAYCOUNTRY_CA 3206 2.56 6.05 0.97 140 XMNoVowels 3163 0.90 0.77 0.96 141 XMGenDplmaNmb 3111 1.17 1.67 0.95 142 SpammyFromTLD_01 3108 1.29 2.05 0.94 143 XM_UB50 3047 1.52 2.81 0.93 144 T_XMDrugObfuBody_00 2993 1.29 2.11 0.91 145 TR_MetaPhish_Combo_01 2913 1.00 1.25 0.89 146 XMStockSpam_06 2881 1.25 2.07 0.88 147 T_FILL_THIS_FORM_SHORT 2872 1.28 2.18 0.87 148 XM_H_Long_From02 2828 1.12 1.69 0.86 149 TR_XM_DK_SendGrid 2818 0.85 0.83 0.86 150 XMSubMetaI_00 2788 1.16 1.83 0.85 151 XM_ShortIntro_01 2746 0.68 0.33 0.83 152 XM_OfRef6 2738 1.71 3.63 0.83 153 XM_H_Trusted_IP 2648 0.55 0.00 0.80 154 XM_H_PHPMailer 2617 0.77 0.72 0.80 155 HTTPS_HTTP_MISMATCH 2614 0.92 1.20 0.79 156 T_OBFU_PDF_ATTACH 2607 0.76 0.70 0.79 157 XMPhish14 2388 0.84 1.09 0.73 158 XM_B_FormFill 2383 0.51 0.02 0.72 159 TR_XM_Base64_M1 2319 0.88 1.25 0.70 160 RCVD_IN_PBL 2299 0.83 1.12 0.70 161 NML_ADSP_CUSTOM_MED 2291 0.83 1.12 0.70 162 T_Symld_Words_02 2257 0.79 1.03 0.69 163 XMSubNoVowel 2216 0.67 0.67 0.67 164 T_XMHurry_00 2149 1.08 2.00 0.65 165 XMGappySubj_02 2067 0.45 0.05 0.63 166 HTML_TAG_BALANCE_BODY 2050 0.71 0.91 0.62 167 FORGED_GMAIL_RCVD 1982 0.75 1.06 0.60 168 RELAYCOUNTRY_AU 1963 1.20 2.54 0.60 169 TO_NO_BRKTS_HTML_ONLY 1951 0.58 0.56 0.59 170 XM_B_SpammyWords4 1899 1.28 2.84 0.58 171 RCVD_IN_BL_SPAMCOP_NET 1886 3.05 8.48 0.57 172 XMLngstWrd_00 1880 0.57 0.57 0.57 173 XM_B_COPY_HTML 1856 0.74 1.12 0.56 174 HTML_IMAGE_ONLY_20 1850 0.64 0.80 0.56 175 XMDateMe_00 1818 0.48 0.33 0.55 176 XMBdyGiftCard01 1804 0.68 0.96 0.55 177 TVD_RCVD_IP 1769 0.58 0.67 0.54 178 XM_B_DNDMA 1671 0.71 1.16 0.51 179 SpammyFromTLD_02 1670 0.99 2.06 0.51 180 MPART_ALT_DIFF_COUNT 1660 0.70 1.13 0.50 181 THIS_AD 1641 0.73 1.24 0.50 182 RELAYCOUNTRY_GB 1630 0.58 0.76 0.50 183 XMBody_95 1628 0.39 0.16 0.49 184 URI_TRY_3LD 1626 0.83 1.57 0.49 185 XMMoneyMeta_00 1584 0.55 0.71 0.48 186 XMPhish30 1561 0.80 1.50 0.47 187 T_STY_INVIS_DIRECT 1487 0.56 0.80 0.45 188 HTML_IMAGE_ONLY_24 1481 0.38 0.22 0.45 189 XM_URI_RBL 1460 1.25 3.03 0.44 190 XMSlimDrugH 1439 0.57 0.86 0.44 191 LongTLD 1426 0.68 1.24 0.43 192 HTML_IMAGE_ONLY_28 1401 0.40 0.35 0.43 193 MSGID_FROM_MTA_HEADER 1380 0.32 0.12 0.42 194 SHORT_HELO_AND_INLINE_IMAGE 1359 0.29 0.03 0.41 195 TM2_M_BODY_EMPTY 1352 0.32 0.12 0.41 196 XMHTML_After_End 1339 0.57 0.92 0.41 197 XMBody_17 1327 0.90 1.97 0.40 198 MISSING_HEADERS 1316 0.49 0.69 0.40 199 XM_ProductURIs 1299 0.60 1.06 0.39 200 TR_XM_SpammyWords2 1273 3.72 11.05 0.39 ----------------------------------------------------------------------