Email: 475137 Autolearn: 0 AvgScore: 4.64 AvgScanTime: 1.39 sec Spam: 152464 Autolearn: 0 AvgScore: 14.48 AvgScanTime: 1.54 sec Ham: 322673 Autolearn: 0 AvgScore: -0.00 AvgScanTime: 1.32 sec Time Spent Running SA: 183.16 hours Time Spent Processing Spam: 65.21 hours Time Spent Processing Ham: 117.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145278 89.88 95.29 87.32 2 DKIM_SIGNED 139036 80.71 91.19 75.75 3 XM_DK_Pass 130595 77.88 85.66 74.20 4 XM_B_Unicode 130223 75.77 85.41 71.22 5 DKIM_VALID 129322 76.81 84.82 73.03 6 RELAYCOUNTRY_US 127192 81.90 83.42 81.18 7 DCC_CHECK 118620 51.72 77.80 39.40 8 XMListUnsubscribeExists 108587 55.71 71.22 48.39 9 XM_B_SpammyWords 105689 52.74 69.32 44.91 10 DKIM_VALID_AU 101949 61.03 66.87 58.27 11 LOC_TINY_FONT_1 75694 34.83 49.65 27.83 12 XM_B_Unicode3 75461 43.55 49.49 40.74 13 BAYES_50 64106 54.52 42.05 60.41 14 XM_B_SpammyWords2 61229 24.74 40.16 17.46 15 RCVD_IN_MSPIKE_H2 61179 36.91 40.13 35.39 16 XM_DK_Undo_02 58371 15.16 38.29 4.24 17 HTML_FONT_LOW_CONTRAST 58178 31.06 38.16 27.70 18 FVGT_m_MULTI_ODD 48924 27.12 32.09 24.77 19 T_KAM_HTML_FONT_INVALID 48528 24.48 31.83 21.01 20 BAYES_99 44989 11.50 29.51 3.00 21 DKIM_VALID_EF 44026 29.16 28.88 29.30 22 MIME_HTML_ONLY 43181 23.18 28.32 20.76 23 TR_XM_DKIM_Undo 41979 10.14 27.53 1.92 24 XMSubLong 40048 24.03 26.27 22.97 25 BAYES_999 34547 8.80 22.66 2.25 26 XM_Multi_Part_URI 33854 16.50 22.20 13.80 27 T_TM2_M_HEADER_IN_MSG 33648 27.28 22.07 29.74 28 TR_DCC_Bayes_99 33018 7.77 21.66 1.20 29 TR_XM_DK_Unsub 32153 15.35 21.09 12.64 30 DCC_CHECK_NEGATIVE 31334 47.71 20.55 60.54 31 UNPARSEABLE_RELAY 26988 14.23 17.70 12.58 32 XM_B_Unsub 26426 11.72 17.33 9.07 33 TR_XM_BayesUnsub 25544 10.02 16.75 6.84 34 RELAYCOUNTRY_META 23342 7.47 15.31 3.77 35 XM_B_SpammyWords3 22850 7.86 14.99 4.49 36 TR_MAX_INTL_RELAY 21946 8.43 14.39 5.61 37 LOTS_OF_MONEY 18109 8.05 11.88 6.25 38 BOTNET_IPINHOSTNAME 17165 5.63 11.26 2.97 39 TR_XM_SpammyRelay 17150 4.96 11.25 1.98 40 TR_XM_SpammyWords4 16547 6.40 10.85 4.29 41 TR_XM_SpammyWords2 15774 3.58 10.35 0.38 42 XM_Evil_Numbers_Gen 15533 9.19 10.19 8.72 43 BOTNET 14919 4.02 9.79 1.30 44 FSL_BULK_SIG 14809 8.20 9.71 7.49 45 BAYES_80 13841 5.26 9.08 3.46 46 TR_XM_UnparsRelay 13368 3.90 8.77 1.60 47 BAYES_60 13133 7.27 8.61 6.63 48 RCVD_IN_BL_SPAMCOP_NET 12926 3.05 8.48 0.48 49 XM_B_Phish_Phrases 12391 6.35 8.13 5.51 50 XMSubMetaSx_00 12085 4.86 7.93 3.41 51 LotsOfNums_01 10831 7.52 7.10 7.71 52 TR_XM_SPAMCOP 10445 2.37 6.85 0.25 53 MPART_ALT_DIFF 10248 5.63 6.72 5.11 54 HTML_IMAGE_RATIO_02 10026 5.13 6.58 4.45 55 XM_Body_Dirty_Words 10011 3.74 6.57 2.40 56 DKIM_INVALID 9714 3.89 6.37 2.72 57 RELAYCOUNTRY_CA 9703 2.72 6.36 1.00 58 HTML_IMAGE_RATIO_04 9638 4.84 6.32 4.14 59 XM_B_PhoneNumber 9323 8.78 6.11 10.04 60 XM_UncommonTLD01 8648 4.61 5.67 4.10 61 UNTRUSTED_Relay 7829 2.60 5.13 1.41 62 BAYES_95 7646 3.07 5.01 2.15 63 TR_XM_PhishingBody 7444 2.90 4.88 1.97 64 XM_H_Long_From01 7257 5.38 4.76 5.67 65 XMSexyCombo_05 7014 2.27 4.60 1.16 66 XM_H_GMP 6813 5.58 4.47 6.10 67 HTML_IMAGE_RATIO_06 6731 3.80 4.41 3.51 68 XM_B_Investor 6674 2.59 4.38 1.75 69 TR_XM_SpammyWords5 6019 2.30 3.95 1.52 70 T_XMDrugObfuBody_14 5707 2.47 3.74 1.87 71 XMStrtUSub 5639 4.16 3.70 4.38 72 RCVD_IN_MSPIKE_WL 5499 4.67 3.61 5.18 73 RCVD_IN_MSPIKE_H3 5499 4.67 3.61 5.18 74 MIME_HTML_MOSTLY 5464 2.88 3.58 2.55 75 MIME_HTML_ONLY_MULTI 5343 3.00 3.50 2.77 76 XMNumbers 5329 3.26 3.50 3.15 77 XM_B_SpammyTLD 5260 2.80 3.45 2.50 78 TooManyTo_001 5251 7.13 3.44 8.88 79 HTML_IMAGE_RATIO_08 4943 2.81 3.24 2.60 80 TM2_M_VERY_LONG_WORD 4886 1.96 3.20 1.37 81 MIME_QP_LONG_LINE 4636 4.56 3.04 5.27 82 XM_OfRef6 4622 1.64 3.03 0.98 83 XM_B_SpammyWords4 4553 1.58 2.99 0.92 84 XM_B_Unsub2 4448 1.92 2.92 1.46 85 T_TooManySym_01 4429 4.85 2.90 5.77 86 TM2_M_URI_OPT_OUT 4404 2.03 2.89 1.63 87 XMDiploma_00 4384 2.06 2.88 1.68 88 XM_URI_RBL 4379 1.15 2.87 0.34 89 XM_CamelCaseFrm001 4249 2.34 2.79 2.13 90 XM_UB50 4248 1.50 2.79 0.89 91 XM_SPF_SoftFail 4243 1.87 2.78 1.45 92 XM_B_URI_Unicode 4087 2.17 2.68 1.93 93 T_XMDrugObfuBody_08 3959 1.75 2.60 1.35 94 RELAYCOUNTRY_AU 3917 1.23 2.57 0.60 95 TR_XM_INV_DKIM 3908 0.96 2.56 0.20 96 XMBody_17 3820 1.12 2.51 0.47 97 RCVD_IN_VALIDITY_RPBL 3798 0.85 2.49 0.08 98 URI_TRY_3LD 3699 1.24 2.43 0.68 99 DIET_1 3518 0.94 2.31 0.29 100 MAILING_LIST_MULTI 3464 2.62 2.27 2.78 101 USER_IN_DEF_DKIM_WL 3455 8.87 2.27 11.99 102 T_XMHurry_00 3394 1.22 2.23 0.74 103 FROM_EXCESS_BASE64 3335 2.26 2.19 2.30 104 XMStockSpam_06 3309 1.67 2.17 1.44 105 SUBJ_ALL_CAPS 3068 1.71 2.01 1.56 106 ALL_TRUSTED 3060 11.41 2.01 15.85 107 SpammyFromTLD_02 3024 0.95 1.98 0.47 108 HTML_MIME_NO_HTML_TAG 2957 2.28 1.94 2.44 109 TR_XM_NoHeaderRelay 2904 0.79 1.90 0.26 110 DKIM_ADSP_NXDOMAIN 2892 0.82 1.90 0.32 111 NO_DNS_FOR_FROM 2884 0.79 1.89 0.27 112 TR_XM_MaxWHORU 2852 0.73 1.87 0.20 113 URI_HEX 2836 1.54 1.86 1.39 114 XM_DK_Undo_01 2780 1.89 1.82 1.92 115 RCVD_IN_VALIDITY_SAFE 2739 3.03 1.80 3.61 116 T_REMOTE_IMAGE 2695 3.03 1.77 3.63 117 SHORTCIRCUIT 2490 0.52 1.63 0.00 118 RCVD_IN_ZEN_LASTEXTERNAL 2490 0.52 1.63 0.00 119 RCVD_IN_VALIDITY_CERTIFIED 2461 2.53 1.61 2.97 120 XM_H_Long_From02 2443 1.05 1.60 0.78 121 BAYES_40 2427 4.38 1.59 5.70 122 XMPhish30 2362 0.79 1.55 0.43 123 XMBody_78 2361 0.75 1.55 0.37 124 T_FILL_THIS_FORM_SHORT 2344 1.23 1.54 1.08 125 TR_Symld_Words 2336 1.67 1.53 1.73 126 T_XMDrugObfuBody_00 2320 1.04 1.52 0.81 127 TR_MetaPhish_Combo_01 2277 0.98 1.49 0.73 128 SpammyFromTLD_01 2275 1.05 1.49 0.84 129 KHOP_HELO_FCRDNS 2206 1.41 1.45 1.39 130 XMGenDplmaNmb 2189 1.01 1.44 0.81 131 XM_SendGrid 2160 1.46 1.42 1.47 132 XMMoneyMeta_00 2083 0.86 1.37 0.62 133 XM_B_COPY_HTML 2054 0.82 1.35 0.57 134 MPART_ALT_DIFF_COUNT 2034 0.85 1.33 0.63 135 XMBrknScrpt_02 2027 1.07 1.33 0.94 136 LongTLD 2015 0.75 1.32 0.48 137 HTTPS_HTTP_MISMATCH 2012 0.94 1.32 0.76 138 TR_LOTS_OF_MONEY3 1991 0.65 1.31 0.34 139 BAYES_20 1975 3.22 1.30 4.13 140 XM_B_Phish66 1967 0.65 1.29 0.35 141 URI_NOVOWEL 1914 1.46 1.26 1.55 142 XM_B_SEO 1738 0.52 1.14 0.23 143 TR_XM_PHPForged 1729 0.58 1.13 0.32 144 TR_XM_PHPDW 1728 0.58 1.13 0.32 145 TR_XM_FormFill2 1724 0.58 1.13 0.32 146 RCVD_IN_PBL 1713 0.81 1.12 0.67 147 XM_HighProb1 1710 0.37 1.12 0.01 148 XM_H_PHPOS 1686 0.57 1.11 0.31 149 TR_XM_Base64_M1 1685 0.83 1.11 0.71 150 XMBdyGiftCard01 1673 0.74 1.10 0.58 151 SHOPIFY_IMG_NOT_RCVD_SFY 1636 0.52 1.07 0.26 152 RELAYCOUNTRY_FR 1630 0.50 1.07 0.24 153 T_Symld_Words_02 1619 0.68 1.06 0.50 154 RCVD_IN_PSBL 1567 0.46 1.03 0.19 155 DKIM_ADSP_CUSTOM_MED 1551 0.94 1.02 0.91 156 XMPhish14 1551 0.87 1.02 0.80 157 TR_XM_SEO4 1531 0.42 1.00 0.14 158 RELAYCOUNTRY_GB 1506 0.67 0.99 0.51 159 RDNS_DYNAMIC 1506 0.51 0.99 0.29 160 RCVD_IN_IADB_LISTED 1494 2.82 0.98 3.69 161 XMReplyNow 1488 0.50 0.98 0.27 162 PDS_RDNS_DYNAMIC_FP 1485 0.43 0.97 0.17 163 TR_Mismatch_TLD_02 1441 0.35 0.95 0.07 164 NORDNS_LOW_CONTRAST 1429 0.33 0.94 0.05 165 XMSexyCombo_01 1428 0.41 0.94 0.15 166 MultiRelay_CC 1396 0.37 0.92 0.11 167 RCVD_IN_IADB_SPF 1392 2.51 0.91 3.27 168 HTML_FONT_TINY_NORDNS 1388 0.34 0.91 0.07 169 XMSlimDrugH 1368 0.58 0.90 0.43 170 XM_B_DNDMA 1361 0.59 0.89 0.44 171 RCVD_IN_IADB_DK 1348 2.23 0.88 2.87 172 XMHTML_After_End 1333 0.52 0.87 0.36 173 XMSubMetaI_00 1328 0.73 0.87 0.66 174 RCVD_IN_IADB_SENDERID 1328 2.27 0.87 2.94 175 XM_PDF 1327 3.54 0.87 4.81 176 TR_XM_DK_SendGrid 1316 0.91 0.86 0.94 177 BOTNET_NORDNS 1305 0.28 0.86 0.01 178 RCVD_IN_SORBS_DUL 1299 0.30 0.85 0.04 179 XM_DIRTYINTL 1278 0.31 0.84 0.06 180 TM2_M_OBFU_COMMENT 1257 0.49 0.82 0.33 181 TM2_M_A_HREF_HREF 1254 0.44 0.82 0.26 182 NML_ADSP_CUSTOM_MED 1241 0.70 0.81 0.65 183 FORGED_GMAIL_RCVD 1238 0.65 0.81 0.57 184 T_MONEY_PERCENT 1220 0.37 0.80 0.17 185 TR_LOTS_OF_MONEY2 1220 0.37 0.80 0.17 186 HTML_IMAGE_ONLY_20 1210 0.65 0.79 0.58 187 XMGppyBdWords 1205 0.36 0.79 0.16 188 HTML_TAG_BALANCE_BODY 1197 0.75 0.79 0.74 189 AC_HTML_NONSENSE_TAGS 1193 0.30 0.78 0.07 190 XM_ProductURIs 1181 0.51 0.77 0.38 191 TVD_RCVD_IP 1180 0.68 0.77 0.64 192 TR_XM_RelayPhish 1177 0.30 0.77 0.08 193 HTML_FONT_FACE_BAD 1147 0.49 0.75 0.36 194 XM_GoogleGroups 1130 1.09 0.74 1.25 195 T_STY_INVIS_DIRECT 1108 0.59 0.73 0.52 196 XM_B_COVIDMETA 1101 0.33 0.72 0.14 197 XMNoVowels 1101 0.70 0.72 0.69 198 SUSP_UTF8_WORD_SUBJ 1087 0.24 0.71 0.01 199 URIBL_BLACK 1076 0.26 0.71 0.05 200 TR_XM_InvalidRelay 1073 0.24 0.70 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 281767 89.88 95.29 87.32 2 RELAYCOUNTRY_US 261945 81.90 83.42 81.18 3 DKIM_SIGNED 244434 80.71 91.19 75.75 4 XM_DK_Pass 239432 77.88 85.66 74.20 5 DKIM_VALID 235648 76.81 84.82 73.03 6 XM_B_Unicode 229799 75.77 85.41 71.22 7 DCC_CHECK_NEGATIVE 195341 47.71 20.55 60.54 8 BAYES_50 194915 54.52 42.05 60.41 9 DKIM_VALID_AU 188031 61.03 66.87 58.27 10 XMListUnsubscribeExists 156130 55.71 71.22 48.39 11 XM_B_SpammyWords 144906 52.74 69.32 44.91 12 XM_B_Unicode3 131458 43.55 49.49 40.74 13 DCC_CHECK 127125 51.72 77.80 39.40 14 RCVD_IN_MSPIKE_H2 114189 36.91 40.13 35.39 15 T_TM2_M_HEADER_IN_MSG 95974 27.28 22.07 29.74 16 DKIM_VALID_EF 94541 29.16 28.88 29.30 17 LOC_TINY_FONT_1 89808 34.83 49.65 27.83 18 HTML_FONT_LOW_CONTRAST 89396 31.06 38.16 27.70 19 FVGT_m_MULTI_ODD 79939 27.12 32.09 24.77 20 XMSubLong 74127 24.03 26.27 22.97 21 T_KAM_HTML_FONT_INVALID 67778 24.48 31.83 21.01 22 MIME_HTML_ONLY 66975 23.18 28.32 20.76 23 XM_B_SpammyWords2 56338 24.74 40.16 17.46 24 ALL_TRUSTED 51136 11.41 2.01 15.85 25 XM_Multi_Part_URI 44532 16.50 22.20 13.80 26 TR_XM_DK_Unsub 40788 15.35 21.09 12.64 27 UNPARSEABLE_RELAY 40608 14.23 17.70 12.58 28 USER_IN_DEF_DKIM_WL 38697 8.87 2.27 11.99 29 BAYES_00 38499 8.30 0.62 11.93 30 XM_B_PhoneNumber 32397 8.78 6.11 10.04 31 XM_B_Unsub 29267 11.72 17.33 9.07 32 TooManyTo_001 28646 7.13 3.44 8.88 33 XM_Evil_Numbers_Gen 28144 9.19 10.19 8.72 34 LotsOfNums_01 24885 7.52 7.10 7.71 35 TR_XM_DK_Bayes 24161 5.25 0.51 7.49 36 FSL_BULK_SIG 24160 8.20 9.71 7.49 37 TR_XM_DK_Bayes1 23632 5.13 0.50 7.32 38 TR_XM_BayesUnsub 22068 10.02 16.75 6.84 39 IN_ZIMBRA_NJ_WHITELIST 21929 4.66 0.13 6.80 40 XM_DKIMWhitelistDomains 21824 4.63 0.10 6.76 41 BAYES_60 21399 7.27 8.61 6.63 42 TR_XM_DK_Bayes2 20517 4.43 0.36 6.36 43 LOTS_OF_MONEY 20159 8.05 11.88 6.25 44 XM_H_GMP 19677 5.58 4.47 6.10 45 T_TooManySym_01 18611 4.85 2.90 5.77 46 BAYES_40 18407 4.38 1.59 5.70 47 XM_H_Long_From01 18299 5.38 4.76 5.67 48 TR_MAX_INTL_RELAY 18104 8.43 14.39 5.61 49 XM_B_Phish_Phrases 17795 6.35 8.13 5.51 50 MIME_QP_LONG_LINE 17016 4.56 3.04 5.27 51 RCVD_IN_MSPIKE_WL 16700 4.67 3.61 5.18 52 RCVD_IN_MSPIKE_H3 16700 4.67 3.61 5.18 53 MPART_ALT_DIFF 16494 5.63 6.72 5.11 54 XM_PDF 15515 3.54 0.87 4.81 55 XM_B_SpammyWords3 14501 7.86 14.99 4.49 56 HTML_IMAGE_RATIO_02 14357 5.13 6.58 4.45 57 XMStrtUSub 14139 4.16 3.70 4.38 58 TR_XM_SpammyWords4 13851 6.40 10.85 4.29 59 XM_DK_Undo_02 13673 15.16 38.29 4.24 60 HTML_IMAGE_RATIO_04 13356 4.84 6.32 4.14 61 BAYES_20 13312 3.22 1.30 4.13 62 XM_UncommonTLD01 13240 4.61 5.67 4.10 63 RELAYCOUNTRY_META 12165 7.47 15.31 3.77 64 RCVD_IN_IADB_LISTED 11920 2.82 0.98 3.69 65 T_REMOTE_IMAGE 11714 3.03 1.77 3.63 66 RCVD_IN_VALIDITY_SAFE 11639 3.03 1.80 3.61 67 HTML_IMAGE_RATIO_06 11337 3.80 4.41 3.51 68 BAYES_80 11161 5.26 9.08 3.46 69 XMSubMetaSx_00 11001 4.86 7.93 3.41 70 RCVD_IN_IADB_SPF 10547 2.51 0.91 3.27 71 BOUNCE_MESSAGE 10536 2.43 0.68 3.27 72 ANY_BOUNCE_MESSAGE 10536 2.43 0.68 3.27 73 T_TooManySym_02 10467 2.38 0.56 3.24 74 XMNumbers 10166 3.26 3.50 3.15 75 TooManyTo_002 10051 2.31 0.59 3.11 76 BAYES_99 9672 11.50 29.51 3.00 77 BOTNET_IPINHOSTNAME 9575 5.63 11.26 2.97 78 RCVD_IN_VALIDITY_CERTIFIED 9569 2.53 1.61 2.97 79 RCVD_IN_IADB_SENDERID 9475 2.27 0.87 2.94 80 RCVD_IN_IADB_DK 9259 2.23 0.88 2.87 81 MAILING_LIST_MULTI 8976 2.62 2.27 2.78 82 MIME_HTML_ONLY_MULTI 8929 3.00 3.50 2.77 83 DKIM_INVALID 8786 3.89 6.37 2.72 84 HTML_IMAGE_RATIO_08 8402 2.81 3.24 2.60 85 BAYES_05 8363 1.95 0.60 2.59 86 MIME_HTML_MOSTLY 8236 2.88 3.58 2.55 87 XM_B_SpammyTLD 8054 2.80 3.45 2.50 88 HTML_MIME_NO_HTML_TAG 7860 2.28 1.94 2.44 89 XM_Body_Dirty_Words 7752 3.74 6.57 2.40 90 RCVD_IN_IADB_VOUCHED 7696 1.74 0.36 2.39 91 FROM_EXCESS_BASE64 7415 2.26 2.19 2.30 92 BAYES_999 7265 8.80 22.66 2.25 93 INVALID_MSGID 7257 1.62 0.28 2.25 94 BAYES_95 6933 3.07 5.01 2.15 95 XM_CamelCaseFrm001 6863 2.34 2.79 2.13 96 TR_XM_SpammyRelay 6404 4.96 11.25 1.98 97 TR_XM_PhishingBody 6353 2.90 4.88 1.97 98 TO_MALFORMED 6276 1.33 0.03 1.95 99 XM_B_URI_Unicode 6216 2.17 2.68 1.93 100 XM_DK_Undo_01 6189 1.89 1.82 1.92 101 TR_XM_DKIM_Undo 6181 10.14 27.53 1.92 102 T_XMDrugObfuBody_14 6019 2.47 3.74 1.87 103 XM_B_Investor 5633 2.59 4.38 1.75 104 TooManyTo_003 5624 1.34 0.49 1.74 105 TR_Symld_Words 5589 1.67 1.53 1.73 106 XMDiploma_00 5416 2.06 2.88 1.68 107 RCVD_IN_IADB_OPTIN 5339 1.20 0.24 1.65 108 TM2_M_URI_OPT_OUT 5252 2.03 2.89 1.63 109 TR_XM_UnparsRelay 5151 3.90 8.77 1.60 110 SUBJ_ALL_CAPS 5041 1.71 2.01 1.56 111 URI_NOVOWEL 5007 1.46 1.26 1.55 112 TR_XM_SpammyWords5 4901 2.30 3.95 1.52 113 T_TooManySym_03 4865 1.10 0.23 1.51 114 XM_SendGrid 4757 1.46 1.42 1.47 115 XM_B_Unsub2 4695 1.92 2.92 1.46 116 XM_SPF_SoftFail 4665 1.87 2.78 1.45 117 XMStockSpam_06 4642 1.67 2.17 1.44 118 IN_HORDE_ADDRESS_BOOK 4550 0.99 0.10 1.41 119 UNTRUSTED_Relay 4544 2.60 5.13 1.41 120 URI_HEX 4486 1.54 1.86 1.39 121 HELO_NODOT 4485 1.03 0.26 1.39 122 HELO_NO_DOMAIN 4483 1.03 0.26 1.39 123 KHOP_HELO_FCRDNS 4480 1.41 1.45 1.39 124 TM2_M_VERY_LONG_WORD 4432 1.96 3.20 1.37 125 T_XMDrugObfuBody_08 4342 1.75 2.60 1.35 126 BOTNET 4191 4.02 9.79 1.30 127 XM_GoogleGroups 4034 1.09 0.74 1.25 128 XMCapTrack 4019 0.99 0.46 1.25 129 TooManyTo_004 4013 0.98 0.42 1.24 130 XMGappySubj_01 3906 0.87 0.16 1.21 131 TR_DCC_Bayes_99 3884 7.77 21.66 1.20 132 XMSexyCombo_05 3754 2.27 4.60 1.16 133 T_FILL_THIS_FORM_SHORT 3493 1.23 1.54 1.08 134 TVD_SPACE_RATIO 3328 0.76 0.18 1.03 135 RELAYCOUNTRY_CA 3236 2.72 6.36 1.00 136 TooManyTo_005 3235 0.80 0.37 1.00 137 XM_OfRef6 3172 1.64 3.03 0.98 138 XMBrknScrpt_02 3046 1.07 1.33 0.94 139 TR_XM_DK_SendGrid 3026 0.91 0.86 0.94 140 XM_ShortIntro_01 2983 0.74 0.35 0.92 141 XM_B_SpammyWords4 2969 1.58 2.99 0.92 142 XM_H_Trusted_IP 2936 0.62 0.00 0.91 143 DKIM_ADSP_CUSTOM_MED 2928 0.94 1.02 0.91 144 XM_H_PHPMailer 2912 0.80 0.58 0.90 145 XM_UB50 2863 1.50 2.79 0.89 146 T_OBFU_PDF_ATTACH 2817 0.65 0.19 0.87 147 SpammyFromTLD_01 2695 1.05 1.49 0.84 148 XMGenDplmaNmb 2625 1.01 1.44 0.81 149 FROM_GOV_DKIM_AU 2605 0.60 0.15 0.81 150 T_XMDrugObfuBody_00 2601 1.04 1.52 0.81 151 XMPhish14 2571 0.87 1.02 0.80 152 XM_H_Long_From02 2523 1.05 1.60 0.78 153 HTTPS_HTTP_MISMATCH 2453 0.94 1.32 0.76 154 HTML_TAG_BALANCE_BODY 2386 0.75 0.79 0.74 155 T_XMHurry_00 2384 1.22 2.23 0.74 156 XMSubNoVowel 2369 0.66 0.51 0.73 157 TR_MetaPhish_Combo_01 2356 0.98 1.49 0.73 158 TR_XM_Base64_M1 2276 0.83 1.11 0.71 159 XMNoVowels 2227 0.70 0.72 0.69 160 URI_TRY_3LD 2205 1.24 2.43 0.68 161 RCVD_IN_PBL 2158 0.81 1.12 0.67 162 XMSubMetaI_00 2131 0.73 0.87 0.66 163 NML_ADSP_CUSTOM_MED 2106 0.70 0.81 0.65 164 XM_B_FormFill 2097 0.45 0.02 0.65 165 TVD_RCVD_IP 2057 0.68 0.77 0.64 166 MPART_ALT_DIFF_COUNT 2020 0.85 1.33 0.63 167 XMGappySubj_02 2017 0.44 0.04 0.63 168 HTML_IMAGE_ONLY_32 2005 0.48 0.17 0.62 169 XMMoneyMeta_00 1998 0.86 1.37 0.62 170 TO_NO_BRKTS_HTML_ONLY 1987 0.55 0.41 0.62 171 RELAYCOUNTRY_AU 1921 1.23 2.57 0.60 172 HTML_IMAGE_ONLY_20 1887 0.65 0.79 0.58 173 XMBdyGiftCard01 1860 0.74 1.10 0.58 174 FORGED_GMAIL_RCVD 1845 0.65 0.81 0.57 175 XM_B_COPY_HTML 1839 0.82 1.35 0.57 176 T_STY_INVIS_DIRECT 1691 0.59 0.73 0.52 177 FILL_THIS_FORM 1691 0.46 0.32 0.52 178 RELAYCOUNTRY_GB 1655 0.67 0.99 0.51 179 XMLngstWrd_00 1644 0.49 0.44 0.51 180 T_Symld_Words_02 1629 0.68 1.06 0.50 181 XMBody_95 1592 0.37 0.11 0.49 182 RCVD_IN_BL_SPAMCOP_NET 1552 3.05 8.48 0.48 183 LongTLD 1546 0.75 1.32 0.48 184 XMDateMe_00 1515 0.44 0.36 0.47 185 XMBody_17 1514 1.12 2.51 0.47 186 SpammyFromTLD_02 1507 0.95 1.98 0.47 187 XMWhlSbjSex 1468 0.40 0.29 0.45 188 MSGID_FROM_MTA_HEADER 1435 0.34 0.12 0.44 189 XM_B_DNDMA 1421 0.59 0.89 0.44 190 XMSlimDrugH 1394 0.58 0.90 0.43 191 XMPhish30 1392 0.79 1.55 0.43 192 XMBSHREFv2 1392 0.41 0.36 0.43 193 XM_H_XFINITY 1364 0.29 0.02 0.42 194 HELO_MISC_IP 1358 0.32 0.10 0.42 195 SHORT_HELO_AND_INLINE_IMAGE 1340 0.29 0.02 0.42 196 PLING_QUERY 1330 0.46 0.55 0.41 197 HTML_IMAGE_ONLY_28 1307 0.41 0.41 0.41 198 TM2_M_BODY_EMPTY 1300 0.29 0.06 0.40 199 XMLngstWrd_01 1264 0.38 0.36 0.39 200 TR_XM_SpammyWords2 1241 3.58 10.35 0.38 ----------------------------------------------------------------------