Email: 487050 Autolearn: 0 AvgScore: 4.43 AvgScanTime: 1.33 sec Spam: 147453 Autolearn: 0 AvgScore: 14.67 AvgScanTime: 1.48 sec Ham: 339597 Autolearn: 0 AvgScore: -0.02 AvgScanTime: 1.26 sec Time Spent Running SA: 179.87 hours Time Spent Processing Spam: 60.58 hours Time Spent Processing Ham: 119.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140563 89.83 95.33 87.45 2 DKIM_SIGNED 126782 76.47 85.98 72.35 3 XM_B_Unicode 123527 74.52 83.77 70.51 4 XM_DK_Pass 122056 74.53 82.78 70.95 5 RELAYCOUNTRY_US 120071 80.13 81.43 79.56 6 DKIM_VALID 119517 73.16 81.05 69.73 7 DCC_CHECK 107556 47.79 72.94 36.87 8 XM_B_SpammyWords 100035 52.03 67.84 45.16 9 XMListUnsubscribeExists 98033 51.66 66.48 45.22 10 DKIM_VALID_AU 93534 58.07 63.43 55.74 11 XM_B_Unicode3 74083 42.86 50.24 39.65 12 LOC_TINY_FONT_1 70331 33.50 47.70 27.33 13 BAYES_50 61439 54.86 41.67 60.58 14 RCVD_IN_MSPIKE_H2 60119 36.06 40.77 34.01 15 XM_B_SpammyWords2 58086 25.48 39.39 19.44 16 XM_DK_Undo_02 56456 14.60 38.29 4.31 17 HTML_FONT_LOW_CONTRAST 55289 29.70 37.50 26.32 18 FVGT_m_MULTI_ODD 46433 25.87 31.49 23.43 19 T_KAM_HTML_FONT_INVALID 45129 23.47 30.61 20.38 20 MIME_HTML_ONLY 43226 22.88 29.32 20.09 21 BAYES_99 42767 10.84 29.00 2.95 22 DKIM_VALID_EF 42089 28.03 28.54 27.81 23 TR_XM_DKIM_Undo 40336 9.74 27.36 2.09 24 T_TM2_M_HEADER_IN_MSG 38311 30.58 25.98 32.58 25 DCC_CHECK_NEGATIVE 37679 51.72 25.55 63.08 26 XMSubLong 37474 23.09 25.41 22.08 27 BAYES_999 32981 8.34 22.37 2.25 28 TR_DCC_Bayes_99 30582 7.08 20.74 1.15 29 XM_Multi_Part_URI 30138 15.24 20.44 12.98 30 TR_XM_DK_Unsub 29986 14.28 20.34 11.65 31 XM_B_Unsub 25930 11.12 17.59 8.31 32 TR_XM_BayesUnsub 24995 9.38 16.95 6.09 33 UNPARSEABLE_RELAY 24542 12.73 16.64 11.03 34 RELAYCOUNTRY_META 23911 7.32 16.22 3.45 35 TR_MAX_INTL_RELAY 22042 7.86 14.95 4.78 36 XM_B_SpammyWords3 21006 7.50 14.25 4.57 37 LOTS_OF_MONEY 17252 8.65 11.70 7.32 38 TR_XM_SpammyRelay 16893 4.64 11.46 1.68 39 XM_Evil_Numbers_Gen 16854 10.18 11.43 9.64 40 BOTNET_IPINHOSTNAME 15926 5.41 10.80 3.07 41 TR_XM_SpammyWords4 15673 6.98 10.63 5.39 42 FSL_BULK_SIG 15323 8.41 10.39 7.54 43 BOTNET 15283 4.13 10.36 1.42 44 TR_XM_SpammyWords2 15260 3.49 10.35 0.51 45 XM_B_Phish_Phrases 14296 6.55 9.70 5.19 46 LotsOfNums_01 14137 9.01 9.59 8.76 47 BAYES_80 13903 4.94 9.43 2.99 48 RCVD_IN_BL_SPAMCOP_NET 12876 3.01 8.73 0.52 49 TR_XM_UnparsRelay 12670 3.50 8.59 1.29 50 BAYES_60 12541 7.11 8.51 6.51 51 T_SCC_BODY_TEXT_LINE 11417 8.26 7.74 8.49 52 UNTRUSTED_Relay 11245 3.22 7.63 1.30 53 TR_XM_SPAMCOP 10691 2.38 7.25 0.27 54 XM_Body_Dirty_Words 10209 3.85 6.92 2.52 55 XM_UncommonTLD01 10002 4.80 6.78 3.93 56 XM_B_PhoneNumber 9900 8.77 6.71 9.66 57 XMSubMetaSx_00 9863 4.54 6.69 3.61 58 HTML_IMAGE_RATIO_02 9321 4.85 6.32 4.21 59 MPART_ALT_DIFF 8938 5.13 6.06 4.72 60 HTML_IMAGE_RATIO_04 8381 4.24 5.68 3.61 61 RELAYCOUNTRY_CA 8066 2.27 5.47 0.89 62 XM_H_Long_From01 7838 5.52 5.32 5.60 63 BAYES_95 7547 2.80 5.12 1.79 64 TM2_M_VERY_LONG_WORD 7543 3.33 5.12 2.56 65 TR_XM_PhishingBody 7508 2.82 5.09 1.84 66 DKIM_INVALID 7265 3.32 4.93 2.62 67 HTML_IMAGE_RATIO_06 7007 4.20 4.75 3.96 68 XM_B_Investor 6939 2.72 4.71 1.86 69 XM_H_GMP 6844 5.51 4.64 5.89 70 XMStrtUSub 6400 5.06 4.34 5.37 71 T_XMDrugObfuBody_14 6255 2.62 4.24 1.92 72 XMSexyCombo_05 6221 2.22 4.22 1.35 73 TooManyTo_001 6147 7.36 4.17 8.74 74 XM_SPF_SoftFail 5563 2.06 3.77 1.32 75 XM_UB50 5537 1.69 3.76 0.80 76 XM_B_SpammyTLD 5242 2.81 3.56 2.49 77 XMNumbers 5237 2.93 3.55 2.66 78 MIME_QP_LONG_LINE 5111 4.56 3.47 5.03 79 MIME_HTML_MOSTLY 5074 2.44 3.44 2.00 80 XM_CamelCaseFrm001 4955 2.49 3.36 2.12 81 TR_XM_SpammyWords5 4884 1.86 3.31 1.23 82 T_REMOTE_IMAGE 4763 3.71 3.23 3.91 83 MIME_HTML_ONLY_MULTI 4747 2.91 3.22 2.78 84 ANY_BOUNCE_MESSAGE 4579 4.34 3.11 4.88 85 BOUNCE_MESSAGE 4578 4.34 3.10 4.88 86 HTML_IMAGE_RATIO_08 4578 2.56 3.10 2.33 87 T_XMDrugObfuBody_08 4392 2.01 2.98 1.59 88 RCVD_IN_VALIDITY_RPBL 4387 0.94 2.98 0.06 89 XM_B_Unsub2 4236 1.91 2.87 1.50 90 TM2_M_URI_OPT_OUT 4141 1.96 2.81 1.59 91 XM_URI_RBL 4067 1.08 2.76 0.35 92 RCVD_IN_PSBL 4029 0.97 2.73 0.21 93 XMDiploma_00 4024 1.81 2.73 1.41 94 RCVD_IN_MSPIKE_WL 3936 4.43 2.67 5.19 95 RCVD_IN_MSPIKE_H3 3936 4.43 2.67 5.19 96 XM_OfRef6 3895 1.54 2.64 1.07 97 HTML_MIME_NO_HTML_TAG 3859 2.64 2.62 2.65 98 XM_B_SpammyWords4 3794 1.35 2.57 0.82 99 ALL_TRUSTED 3766 13.18 2.55 17.79 100 XM_B_URI_Unicode 3662 2.05 2.48 1.87 101 T_TooManySym_01 3604 4.80 2.44 5.82 102 RELAYCOUNTRY_AU 3596 1.13 2.44 0.56 103 MAILING_LIST_MULTI 3584 2.64 2.43 2.73 104 KHOP_HELO_FCRDNS 3434 2.13 2.33 2.04 105 SpammyFromTLD_02 3077 0.94 2.09 0.44 106 BAYES_40 2999 5.03 2.03 6.33 107 MAY_BE_FORGED 2953 1.67 2.00 1.52 108 TR_XM_INV_DKIM 2927 0.72 1.99 0.17 109 RCVD_IN_VALIDITY_SAFE 2863 2.86 1.94 3.26 110 USER_IN_DEF_DKIM_WL 2843 9.34 1.93 12.56 111 XMBrknScrpt_02 2835 1.15 1.92 0.81 112 T_XMDrugObfuBody_00 2812 1.10 1.91 0.75 113 MPART_ALT_DIFF_COUNT 2771 0.92 1.88 0.51 114 SpammyFromTLD_01 2763 1.16 1.87 0.85 115 XM_H_Long_From02 2730 1.16 1.85 0.86 116 TR_XM_NoHeaderRelay 2729 0.72 1.85 0.23 117 XMBody_17 2707 0.82 1.84 0.38 118 FROM_EXCESS_BASE64 2681 1.78 1.82 1.76 119 T_FILL_THIS_FORM_SHORT 2611 1.15 1.77 0.88 120 XMStockSpam_06 2509 1.07 1.70 0.80 121 XM_DK_Undo_01 2499 1.87 1.69 1.94 122 HTML_FONT_TINY_NORDNS 2404 0.55 1.63 0.08 123 T_XMHurry_00 2402 0.81 1.63 0.46 124 URI_HEX 2291 1.31 1.55 1.21 125 HTTPS_HTTP_MISMATCH 2266 1.06 1.54 0.85 126 XMGenDplmaNmb 2265 1.03 1.54 0.81 127 RCVD_IN_VALIDITY_CERTIFIED 2262 2.35 1.53 2.70 128 TR_XM_InvalidRelay 2240 0.47 1.52 0.01 129 RCVD_IN_ZEN_LASTEXTERNAL 2197 0.45 1.49 0.00 130 SHORTCIRCUIT 2197 0.45 1.49 0.00 131 XM_PDF 2140 3.96 1.45 5.05 132 TR_LOTS_OF_MONEY3 2140 0.59 1.45 0.21 133 T_STY_INVIS_DIRECT 2109 0.74 1.43 0.44 134 SUBJ_ALL_CAPS 2101 1.48 1.42 1.51 135 TR_XM_PHPForged 2094 0.77 1.42 0.49 136 TR_XM_PHPDW 2089 0.77 1.42 0.49 137 XMPhish30 2086 0.80 1.41 0.53 138 XM_SendGrid 2074 1.38 1.41 1.37 139 TR_XM_FormFill2 2067 0.77 1.40 0.49 140 BAYES_20 2065 3.30 1.40 4.13 141 DKIM_ADSP_NXDOMAIN 2050 0.64 1.39 0.31 142 XM_H_PHPOS 2033 0.75 1.38 0.48 143 XM_DIRTYINTL 2031 0.49 1.38 0.10 144 BOTNET_NORDNS 2024 0.42 1.37 0.01 145 LongTLD 1953 0.72 1.32 0.45 146 RELAYCOUNTRY_RU 1940 0.41 1.32 0.02 147 XM_B_Phish66 1936 0.66 1.31 0.38 148 TR_Mismatch_TLD_02 1875 0.43 1.27 0.07 149 HTML_TAG_BALANCE_BODY 1874 0.87 1.27 0.70 150 T_Symld_Words_02 1851 0.87 1.26 0.71 151 URI_TRY_3LD 1810 0.74 1.23 0.52 152 RCVD_IN_PBL 1783 0.87 1.21 0.72 153 XMHTML_After_End 1736 0.64 1.18 0.40 154 TR_MetaPhish_Combo_01 1686 0.79 1.14 0.64 155 LONG_INVISIBLE_TEXT 1671 0.41 1.13 0.10 156 XM_H_Undi_Recip 1669 0.49 1.13 0.21 157 XM_B_COPY_HTML 1664 0.74 1.13 0.57 158 NO_DNS_FOR_FROM 1657 0.53 1.12 0.27 159 XM_UB99 1648 0.34 1.12 0.01 160 RCVD_IN_IADB_LISTED 1643 2.86 1.11 3.61 161 URI_NOVOWEL 1640 1.59 1.11 1.79 162 DIET_1 1618 0.51 1.10 0.26 163 XMPhish14 1594 0.73 1.08 0.58 164 TR_XM_MaxWHORU 1591 0.47 1.08 0.21 165 XMSubMetaI_00 1590 0.71 1.08 0.55 166 XM_HighProb1 1584 0.33 1.07 0.01 167 XMSexyCombo_01 1580 0.44 1.07 0.17 168 RCVD_IN_IADB_SPF 1576 2.54 1.07 3.17 169 THIS_AD 1571 0.57 1.07 0.36 170 DKIM_ADSP_CUSTOM_MED 1557 0.96 1.06 0.92 171 RDNS_DYNAMIC 1553 0.50 1.05 0.26 172 RELAYCOUNTRY_FR 1550 0.49 1.05 0.25 173 RCVD_IN_IADB_DK 1546 2.26 1.05 2.79 174 RCVD_IN_IADB_SENDERID 1544 2.31 1.05 2.86 175 XMBdyGiftCard01 1543 0.69 1.05 0.53 176 XM_ProductURIs 1535 0.68 1.04 0.52 177 SHOPIFY_IMG_NOT_RCVD_SFY 1520 0.47 1.03 0.23 178 NORDNS_LOW_CONTRAST 1464 0.33 0.99 0.04 179 XM_B_SEO 1459 0.45 0.99 0.22 180 TR_XM_RelayPhish 1425 0.34 0.97 0.07 181 TR_XM_SEO4 1419 0.35 0.96 0.09 182 XMBody_78 1392 0.56 0.94 0.39 183 PDS_RDNS_DYNAMIC_FP 1388 0.38 0.94 0.13 184 XM_UB80 1371 0.29 0.93 0.01 185 TR_LOTS_OF_MONEY2 1350 0.48 0.92 0.29 186 T_MONEY_PERCENT 1350 0.48 0.92 0.29 187 TR_XM_DK_SendGrid 1297 0.86 0.88 0.86 188 XM_UB60 1295 0.30 0.88 0.05 189 URIBL_BLACK 1293 0.29 0.88 0.04 190 RELAYCOUNTRY_GB 1277 0.62 0.87 0.51 191 XM_B_COVIDMETA 1273 0.41 0.86 0.21 192 TR_XM_Base64_M1 1260 0.70 0.85 0.63 193 MultiRelay_CC 1252 0.38 0.85 0.17 194 XMReplyNow 1247 0.42 0.85 0.24 195 TVD_RCVD_IP 1247 0.71 0.85 0.65 196 TR_XM_Undi_Recip11 1233 0.28 0.84 0.04 197 TM2_M_A_HREF_HREF 1232 0.43 0.84 0.25 198 BASE64_LENGTH_79_INF 1212 0.51 0.82 0.37 199 RCVD_IN_SORBS_DUL 1208 0.27 0.82 0.04 200 XM_B_DNDMA 1206 0.56 0.82 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 296968 89.83 95.33 87.45 2 RELAYCOUNTRY_US 270179 80.13 81.43 79.56 3 DKIM_SIGNED 245688 76.47 85.98 72.35 4 XM_DK_Pass 240957 74.53 82.78 70.95 5 XM_B_Unicode 239434 74.52 83.77 70.51 6 DKIM_VALID 236796 73.16 81.05 69.73 7 DCC_CHECK_NEGATIVE 214215 51.72 25.55 63.08 8 BAYES_50 205743 54.86 41.67 60.58 9 DKIM_VALID_AU 189308 58.07 63.43 55.74 10 XMListUnsubscribeExists 153564 51.66 66.48 45.22 11 XM_B_SpammyWords 153378 52.03 67.84 45.16 12 XM_B_Unicode3 134650 42.86 50.24 39.65 13 DCC_CHECK 125211 47.79 72.94 36.87 14 RCVD_IN_MSPIKE_H2 115492 36.06 40.77 34.01 15 T_TM2_M_HEADER_IN_MSG 110645 30.58 25.98 32.58 16 DKIM_VALID_EF 94432 28.03 28.54 27.81 17 LOC_TINY_FONT_1 92807 33.50 47.70 27.33 18 HTML_FONT_LOW_CONTRAST 89370 29.70 37.50 26.32 19 FVGT_m_MULTI_ODD 79565 25.87 31.49 23.43 20 XMSubLong 74981 23.09 25.41 22.08 21 T_KAM_HTML_FONT_INVALID 69196 23.47 30.61 20.38 22 MIME_HTML_ONLY 68217 22.88 29.32 20.09 23 XM_B_SpammyWords2 66033 25.48 39.39 19.44 24 ALL_TRUSTED 60417 13.18 2.55 17.79 25 XM_Multi_Part_URI 44070 15.24 20.44 12.98 26 USER_IN_DEF_DKIM_WL 42650 9.34 1.93 12.56 27 BAYES_00 40860 8.61 0.74 12.03 28 TR_XM_DK_Unsub 39559 14.28 20.34 11.65 29 UNPARSEABLE_RELAY 37464 12.73 16.64 11.03 30 XM_B_PhoneNumber 32800 8.77 6.71 9.66 31 XM_Evil_Numbers_Gen 32741 10.18 11.43 9.64 32 LotsOfNums_01 29752 9.01 9.59 8.76 33 TooManyTo_001 29689 7.36 4.17 8.74 34 T_SCC_BODY_TEXT_LINE 28828 8.26 7.74 8.49 35 XM_B_Unsub 28209 11.12 17.59 8.31 36 TR_XM_DK_Bayes 26051 5.49 0.46 7.67 37 FSL_BULK_SIG 25621 8.41 10.39 7.54 38 TR_XM_DK_Bayes1 25403 5.35 0.45 7.48 39 LOTS_OF_MONEY 24862 8.65 11.70 7.32 40 IN_ZIMBRA_NJ_WHITELIST 22145 4.59 0.14 6.52 41 BAYES_60 22109 7.11 8.51 6.51 42 XM_DKIMWhitelistDomains 21787 4.51 0.11 6.42 43 BAYES_40 21508 5.03 2.03 6.33 44 TR_XM_DK_Bayes2 21210 4.46 0.34 6.25 45 TR_XM_BayesUnsub 20696 9.38 16.95 6.09 46 XM_H_GMP 20009 5.51 4.64 5.89 47 T_TooManySym_01 19775 4.80 2.44 5.82 48 XM_H_Long_From01 19034 5.52 5.32 5.60 49 TR_XM_SpammyWords4 18321 6.98 10.63 5.39 50 XMStrtUSub 18251 5.06 4.34 5.37 51 RCVD_IN_MSPIKE_H3 17639 4.43 2.67 5.19 52 RCVD_IN_MSPIKE_WL 17639 4.43 2.67 5.19 53 XM_B_Phish_Phrases 17615 6.55 9.70 5.19 54 XM_PDF 17160 3.96 1.45 5.05 55 MIME_QP_LONG_LINE 17077 4.56 3.47 5.03 56 ANY_BOUNCE_MESSAGE 16561 4.34 3.11 4.88 57 BOUNCE_MESSAGE 16559 4.34 3.10 4.88 58 TR_MAX_INTL_RELAY 16228 7.86 14.95 4.78 59 MPART_ALT_DIFF 16026 5.13 6.06 4.72 60 XM_B_SpammyWords3 15505 7.50 14.25 4.57 61 XM_DK_Undo_02 14639 14.60 38.29 4.31 62 HTML_IMAGE_RATIO_02 14283 4.85 6.32 4.21 63 BAYES_20 14016 3.30 1.40 4.13 64 HTML_IMAGE_RATIO_06 13462 4.20 4.75 3.96 65 XM_UncommonTLD01 13359 4.80 6.78 3.93 66 T_REMOTE_IMAGE 13289 3.71 3.23 3.91 67 RCVD_IN_IADB_LISTED 12276 2.86 1.11 3.61 68 HTML_IMAGE_RATIO_04 12260 4.24 5.68 3.61 69 XMSubMetaSx_00 12250 4.54 6.69 3.61 70 RELAYCOUNTRY_META 11720 7.32 16.22 3.45 71 RCVD_IN_VALIDITY_SAFE 11083 2.86 1.94 3.26 72 RCVD_IN_IADB_SPF 10774 2.54 1.07 3.17 73 BOTNET_IPINHOSTNAME 10424 5.41 10.80 3.07 74 BAYES_80 10143 4.94 9.43 2.99 75 TooManyTo_002 10090 2.26 0.63 2.97 76 BAYES_99 10035 10.84 29.00 2.95 77 T_TooManySym_02 9829 2.22 0.67 2.89 78 RCVD_IN_IADB_SENDERID 9729 2.31 1.05 2.86 79 RCVD_IN_IADB_DK 9478 2.26 1.05 2.79 80 MIME_HTML_ONLY_MULTI 9443 2.91 3.22 2.78 81 MAILING_LIST_MULTI 9257 2.64 2.43 2.73 82 RCVD_IN_VALIDITY_CERTIFIED 9177 2.35 1.53 2.70 83 BAYES_05 9103 2.05 0.61 2.68 84 XMNumbers 9048 2.93 3.55 2.66 85 HTML_MIME_NO_HTML_TAG 8999 2.64 2.62 2.65 86 DKIM_INVALID 8892 3.32 4.93 2.62 87 TM2_M_VERY_LONG_WORD 8687 3.33 5.12 2.56 88 XM_Body_Dirty_Words 8554 3.85 6.92 2.52 89 XM_B_SpammyTLD 8458 2.81 3.56 2.49 90 RCVD_IN_IADB_VOUCHED 8116 1.78 0.39 2.39 91 HTML_IMAGE_RATIO_08 7899 2.56 3.10 2.33 92 BAYES_999 7649 8.34 22.37 2.25 93 XM_CamelCaseFrm001 7185 2.49 3.36 2.12 94 INVALID_MSGID 7105 1.53 0.24 2.09 95 TR_XM_DKIM_Undo 7082 9.74 27.36 2.09 96 KHOP_HELO_FCRDNS 6941 2.13 2.33 2.04 97 MIME_HTML_MOSTLY 6789 2.44 3.44 2.00 98 XM_DK_Undo_01 6597 1.87 1.69 1.94 99 T_XMDrugObfuBody_14 6520 2.62 4.24 1.92 100 TR_Symld_Words 6371 1.55 0.78 1.88 101 XM_B_URI_Unicode 6346 2.05 2.48 1.87 102 XM_B_Investor 6303 2.72 4.71 1.86 103 TO_MALFORMED 6289 1.30 0.01 1.85 104 TR_XM_PhishingBody 6247 2.82 5.09 1.84 105 URI_NOVOWEL 6083 1.59 1.11 1.79 106 BAYES_95 6077 2.80 5.12 1.79 107 FROM_EXCESS_BASE64 5976 1.78 1.82 1.76 108 TooManyTo_003 5855 1.37 0.57 1.72 109 TR_XM_SpammyRelay 5714 4.64 11.46 1.68 110 RCVD_IN_IADB_OPTIN 5495 1.19 0.20 1.62 111 TM2_M_URI_OPT_OUT 5400 1.96 2.81 1.59 112 T_XMDrugObfuBody_08 5390 2.01 2.98 1.59 113 MAY_BE_FORGED 5172 1.67 2.00 1.52 114 SUBJ_ALL_CAPS 5127 1.48 1.42 1.51 115 XM_B_Unsub2 5078 1.91 2.87 1.50 116 HELO_NODOT 4943 1.07 0.17 1.46 117 HELO_NO_DOMAIN 4935 1.06 0.16 1.45 118 BOTNET 4828 4.13 10.36 1.42 119 XMDiploma_00 4788 1.81 2.73 1.41 120 XM_SendGrid 4661 1.38 1.41 1.37 121 XMSexyCombo_05 4592 2.22 4.22 1.35 122 IN_HORDE_ADDRESS_BOOK 4555 0.96 0.09 1.34 123 XM_SPF_SoftFail 4489 2.06 3.77 1.32 124 UNTRUSTED_Relay 4423 3.22 7.63 1.30 125 TR_XM_UnparsRelay 4371 3.50 8.59 1.29 126 XM_GoogleGroups 4322 1.11 0.74 1.27 127 XMCapTrack 4269 1.03 0.52 1.26 128 TooManyTo_004 4170 1.01 0.51 1.23 129 TR_XM_SpammyWords5 4168 1.86 3.31 1.23 130 URI_HEX 4094 1.31 1.55 1.21 131 XMGappySubj_01 4087 0.95 0.35 1.20 132 TR_DCC_Bayes_99 3906 7.08 20.74 1.15 133 TVD_SPACE_RATIO 3892 0.91 0.36 1.15 134 T_TooManySym_03 3715 0.83 0.23 1.09 135 XM_OfRef6 3619 1.54 2.64 1.07 136 TooManyTo_005 3497 0.86 0.47 1.03 137 MIME_CHARSET_FARAWAY 3120 0.73 0.29 0.92 138 DKIM_ADSP_CUSTOM_MED 3113 0.96 1.06 0.92 139 XMLngstWrd_00 3066 0.78 0.51 0.90 140 RELAYCOUNTRY_CA 3008 2.27 5.47 0.89 141 T_FILL_THIS_FORM_SHORT 2985 1.15 1.77 0.88 142 T_OBFU_PDF_ATTACH 2943 0.81 0.68 0.87 143 XM_H_Trusted_IP 2936 0.60 0.00 0.86 144 XM_H_Long_From02 2916 1.16 1.85 0.86 145 TR_XM_DK_SendGrid 2914 0.86 0.88 0.86 146 XM_ShortIntro_01 2887 0.72 0.41 0.85 147 HTTPS_HTTP_MISMATCH 2881 1.06 1.54 0.85 148 SpammyFromTLD_01 2871 1.16 1.87 0.85 149 XM_H_PHPMailer 2864 0.76 0.56 0.84 150 FROM_GOV_DKIM_AU 2821 0.61 0.11 0.83 151 XM_B_SpammyWords4 2776 1.35 2.57 0.82 152 XMBrknScrpt_02 2751 1.15 1.92 0.81 153 XMGenDplmaNmb 2751 1.03 1.54 0.81 154 XMStockSpam_06 2719 1.07 1.70 0.80 155 XM_UB50 2708 1.69 3.76 0.80 156 XMSubNoVowel 2627 0.65 0.36 0.77 157 CHARSET_FARAWAY_HEADER 2607 0.57 0.11 0.77 158 T_XMDrugObfuBody_00 2553 1.10 1.91 0.75 159 RCVD_IN_PBL 2455 0.87 1.21 0.72 160 T_Symld_Words_02 2408 0.87 1.26 0.71 161 HTML_TAG_BALANCE_BODY 2373 0.87 1.27 0.70 162 TVD_RCVD_IP 2194 0.71 0.85 0.65 163 TO_NO_BRKTS_HTML_ONLY 2179 0.59 0.47 0.64 164 TR_MetaPhish_Combo_01 2175 0.79 1.14 0.64 165 TR_XM_Base64_M1 2141 0.70 0.85 0.63 166 XMNoVowels 2133 0.61 0.57 0.63 167 XMGappySubj_02 2053 0.43 0.03 0.60 168 HTML_IMAGE_ONLY_32 2044 0.48 0.18 0.60 169 NML_ADSP_CUSTOM_MED 2024 0.65 0.76 0.60 170 XMPhish14 1966 0.73 1.08 0.58 171 XM_B_COPY_HTML 1942 0.74 1.13 0.57 172 XM_B_FormFill 1929 0.42 0.09 0.57 173 FORGED_GMAIL_RCVD 1929 0.64 0.79 0.57 174 RELAYCOUNTRY_AU 1893 1.13 2.44 0.56 175 XMSubMetaI_00 1855 0.71 1.08 0.55 176 HTML_IMAGE_ONLY_20 1851 0.61 0.76 0.55 177 XMPhish30 1813 0.80 1.41 0.53 178 XMBdyGiftCard01 1796 0.69 1.05 0.53 179 MSGID_FROM_MTA_HEADER 1791 0.41 0.12 0.53 180 RCVD_IN_BL_SPAMCOP_NET 1782 3.01 8.73 0.52 181 URI_TRY_3LD 1772 0.74 1.23 0.52 182 XM_ProductURIs 1758 0.68 1.04 0.52 183 RELAYCOUNTRY_GB 1735 0.62 0.87 0.51 184 TR_XM_SpammyWords2 1724 3.49 10.35 0.51 185 MPART_ALT_DIFF_COUNT 1719 0.92 1.88 0.51 186 XMSlimDrugH 1682 0.52 0.58 0.50 187 TR_XM_PHPDW 1671 0.77 1.42 0.49 188 XMMoneyMeta_00 1666 0.53 0.61 0.49 189 TR_XM_FormFill2 1665 0.77 1.40 0.49 190 TR_XM_PHPForged 1661 0.77 1.42 0.49 191 XM_H_PHPOS 1628 0.75 1.38 0.48 192 T_XMHurry_00 1553 0.81 1.63 0.46 193 XM_B_DNDMA 1536 0.56 0.82 0.45 194 LongTLD 1533 0.72 1.32 0.45 195 XMDateMe_00 1519 0.43 0.40 0.45 196 XMBody_95 1518 0.35 0.12 0.45 197 SpammyFromTLD_02 1503 0.94 2.09 0.44 198 T_STY_INVIS_DIRECT 1501 0.74 1.43 0.44 199 MISSING_HEADERS 1455 0.41 0.38 0.43 200 XMLngstWrd_01 1445 0.42 0.39 0.43 ----------------------------------------------------------------------