Email: 488284 Autolearn: 0 AvgScore: 2.58 AvgScanTime: 1.37 sec Spam: 136595 Autolearn: 0 AvgScore: 14.75 AvgScanTime: 1.53 sec Ham: 351689 Autolearn: 0 AvgScore: -2.15 AvgScanTime: 1.31 sec Time Spent Running SA: 185.77 hours Time Spent Processing Spam: 58.03 hours Time Spent Processing Ham: 127.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129916 90.56 95.11 88.80 2 DKIM_SIGNED 121966 73.06 89.29 66.75 3 XM_DK_Pass 115399 70.80 84.48 65.48 4 DKIM_VALID 114245 69.78 83.64 64.40 5 XM_B_Unicode 113370 76.17 83.00 73.53 6 RELAYCOUNTRY_US 110760 82.62 81.09 83.22 7 DCC_CHECK 101447 47.61 74.27 37.26 8 XM_B_SpammyWords 93942 51.24 68.77 44.43 9 XMListUnsubscribeExists 92678 49.51 67.85 42.39 10 DKIM_VALID_AU 91355 56.18 66.88 52.02 11 XM_B_Unicode3 67034 44.51 49.08 42.73 12 LOC_TINY_FONT_1 64637 30.24 47.32 23.60 13 BAYES_50 57358 53.10 41.99 57.41 14 T_SCC_BODY_TEXT_LINE 54549 41.41 39.93 41.98 15 RCVD_IN_MSPIKE_H2 54365 33.27 39.80 30.74 16 XM_B_SpammyWords2 53932 22.60 39.48 16.05 17 XM_DK_Undo_02 52836 13.96 38.68 4.36 18 HTML_FONT_LOW_CONTRAST 48681 27.76 35.64 24.70 19 FVGT_m_MULTI_ODD 45086 25.57 33.01 22.69 20 DKIM_VALID_EF 42687 27.55 31.25 26.12 21 T_KAM_HTML_FONT_INVALID 42256 22.39 30.94 19.07 22 MIME_HTML_ONLY 41415 25.70 30.32 23.90 23 BAYES_99 39809 10.14 29.14 2.76 24 TR_XM_DKIM_Undo 38640 9.53 28.29 2.24 25 XMSubLong 36454 24.15 26.69 23.17 26 DCC_CHECK_NEGATIVE 32939 51.90 24.11 62.69 27 XM_Multi_Part_URI 30722 14.82 22.49 11.85 28 BAYES_999 30678 7.80 22.46 2.11 29 TR_XM_DK_Unsub 30538 14.45 22.36 11.38 30 T_TM2_M_HEADER_IN_MSG 29632 25.52 21.69 27.00 31 TR_DCC_Bayes_99 27277 6.36 19.97 1.08 32 UNPARSEABLE_RELAY 24997 12.76 18.30 10.61 33 RELAYCOUNTRY_META 24900 7.53 18.23 3.38 34 XM_B_Unsub 24018 10.75 17.58 8.09 35 TR_XM_BayesUnsub 23102 9.12 16.91 6.10 36 XM_B_SpammyWords3 20902 7.36 15.30 4.27 37 TR_MAX_INTL_RELAY 20086 7.41 14.70 4.57 38 BOTNET_IPINHOSTNAME 17342 5.85 12.70 3.19 39 LOTS_OF_MONEY 17051 7.38 12.48 5.40 40 TR_XM_SpammyRelay 16454 4.57 12.05 1.66 41 TR_XM_SpammyWords4 15365 5.75 11.25 3.61 42 BOTNET 15216 4.26 11.14 1.59 43 FSL_BULK_SIG 14812 9.76 10.84 9.34 44 TR_XM_UnparsRelay 13534 3.71 9.91 1.30 45 TR_XM_SpammyWords2 13003 2.94 9.52 0.39 46 XM_B_Phish_Phrases 12753 6.25 9.34 5.06 47 XM_Evil_Numbers_Gen 12542 9.38 9.18 9.46 48 BAYES_80 12269 4.48 8.98 2.74 49 BAYES_60 11503 6.69 8.42 6.02 50 RCVD_IN_BL_SPAMCOP_NET 10861 2.57 7.95 0.49 51 XM_Body_Dirty_Words 10857 4.00 7.95 2.46 52 UNTRUSTED_Relay 10099 3.01 7.39 1.30 53 LotsOfNums_01 9904 7.27 7.25 7.27 54 XMSubMetaSx_00 9451 4.25 6.92 3.21 55 MPART_ALT_DIFF 9193 8.90 6.73 9.74 56 XM_B_PhoneNumber 8976 8.37 6.57 9.07 57 HTML_IMAGE_RATIO_02 8858 4.76 6.48 4.09 58 RELAYCOUNTRY_CA 8792 2.42 6.44 0.86 59 TR_XM_SPAMCOP 8399 1.88 6.15 0.22 60 XM_H_Long_From01 8077 5.43 5.91 5.24 61 DKIM_INVALID 7721 3.28 5.65 2.36 62 XM_UncommonTLD01 7696 4.25 5.63 3.71 63 TR_XM_PhishingBody 7240 2.65 5.30 1.62 64 BAYES_95 7177 2.79 5.25 1.84 65 XMStrtUSub 7051 9.77 5.16 11.57 66 XM_H_GMP 6794 5.40 4.97 5.56 67 HTML_IMAGE_RATIO_04 6355 11.68 4.65 14.41 68 XM_B_Investor 6281 2.50 4.60 1.68 69 T_XMDrugObfuBody_14 5856 2.58 4.29 1.92 70 TR_XM_SpammyWords5 5840 2.22 4.28 1.42 71 XMNumbers 5799 3.50 4.25 3.21 72 XMSexyCombo_05 5769 1.97 4.22 1.10 73 TooManyTo_001 5766 6.67 4.22 7.63 74 XM_SPF_SoftFail 5605 2.00 4.10 1.18 75 XM_B_SpammyTLD 5576 2.74 4.08 2.22 76 HTML_IMAGE_RATIO_06 5484 4.46 4.01 4.64 77 XM_UB50 5309 1.68 3.89 0.82 78 MIME_HTML_MOSTLY 5119 2.57 3.75 2.11 79 MIME_HTML_ONLY_MULTI 5018 6.90 3.67 8.16 80 TM2_M_VERY_LONG_WORD 5016 2.04 3.67 1.41 81 XM_OfRef6 5016 1.71 3.67 0.94 82 MIME_QP_LONG_LINE 4923 4.36 3.60 4.65 83 XM_B_Unsub2 4644 1.88 3.40 1.29 84 XM_CamelCaseFrm001 4597 2.19 3.37 1.74 85 XMDiploma_00 4544 1.95 3.33 1.41 86 T_XMDrugObfuBody_08 4517 1.85 3.31 1.28 87 HTML_IMAGE_RATIO_08 4267 2.42 3.12 2.15 88 XM_B_URI_Unicode 4226 2.08 3.09 1.68 89 RCVD_IN_MSPIKE_H3 4155 4.34 3.04 4.85 90 RCVD_IN_MSPIKE_WL 4155 4.35 3.04 4.86 91 XM_URI_RBL 3876 1.06 2.84 0.37 92 XM_B_SpammyWords4 3838 1.34 2.81 0.77 93 TR_XM_NoHeaderRelay 3700 0.91 2.71 0.21 94 RELAYCOUNTRY_AU 3663 1.14 2.68 0.54 95 RCVD_IN_VALIDITY_RPBL 3595 0.77 2.63 0.05 96 TR_XM_INV_DKIM 3522 0.82 2.58 0.14 97 FROM_EXCESS_BASE64 3444 1.82 2.52 1.55 98 MAILING_LIST_MULTI 3412 2.76 2.50 2.86 99 TM2_M_URI_OPT_OUT 3245 1.67 2.38 1.40 100 T_TooManySym_01 3161 4.45 2.31 5.27 101 XMBody_17 3132 0.93 2.29 0.40 102 RCVD_IN_PBL 3058 1.13 2.24 0.69 103 RCVD_IN_VALIDITY_SAFE 2848 3.05 2.08 3.42 104 XMStockSpam_06 2829 1.38 2.07 1.11 105 SpammyFromTLD_02 2819 0.89 2.06 0.44 106 SUBJ_ALL_CAPS 2803 1.59 2.05 1.41 107 XMBrknScrpt_02 2761 1.00 2.02 0.61 108 T_FILL_THIS_FORM_SHORT 2748 1.13 2.01 0.78 109 USER_IN_DEF_DKIM_WL 2688 9.03 1.97 11.78 110 HTML_MIME_NO_HTML_TAG 2662 2.12 1.95 2.18 111 BAYES_40 2636 4.81 1.93 5.93 112 URI_HEX 2613 1.33 1.91 1.10 113 XMGenDplmaNmb 2542 1.02 1.86 0.70 114 ALL_TRUSTED 2515 10.71 1.84 14.15 115 BOTNET_NORDNS 2495 0.52 1.83 0.01 116 T_XMHurry_00 2436 0.78 1.78 0.39 117 TR_XM_InvalidRelay 2429 0.51 1.78 0.02 118 T_REMOTE_IMAGE 2312 2.83 1.69 3.28 119 XM_DIRTYINTL 2272 0.53 1.66 0.09 120 HTTPS_HTTP_MISMATCH 2244 0.98 1.64 0.72 121 XM_DK_Undo_01 2234 1.61 1.64 1.60 122 T_XMDrugObfuBody_00 2206 1.01 1.61 0.77 123 URI_NOVOWEL 2201 1.48 1.61 1.43 124 XM_SendGrid 2187 1.48 1.60 1.44 125 RCVD_IN_ZEN_LASTEXTERNAL 2184 0.45 1.60 0.00 126 SHORTCIRCUIT 2184 0.45 1.60 0.00 127 XM_B_Phish66 2167 0.70 1.59 0.36 128 SpammyFromTLD_01 2147 1.03 1.57 0.81 129 DIET_1 2118 0.57 1.55 0.19 130 RCVD_IN_VALIDITY_CERTIFIED 2091 2.42 1.53 2.76 131 XMPhish30 2058 0.73 1.51 0.43 132 HTML_IMAGE_ONLY_20 2046 0.77 1.50 0.48 133 BAYES_20 2024 4.09 1.48 5.10 134 URI_TRY_3LD 2017 0.73 1.48 0.44 135 RELAYCOUNTRY_FR 1936 0.55 1.42 0.21 136 KHOP_HELO_FCRDNS 1931 1.34 1.41 1.30 137 XM_B_COPY_HTML 1861 0.83 1.36 0.63 138 DKIM_ADSP_CUSTOM_MED 1845 0.99 1.35 0.85 139 MultiRelay_CC 1816 0.50 1.33 0.18 140 BOUNCE_MESSAGE 1751 2.90 1.28 3.53 141 ANY_BOUNCE_MESSAGE 1751 2.90 1.28 3.53 142 HTML_FONT_TINY_NORDNS 1696 0.38 1.24 0.04 143 XM_H_Long_From02 1693 0.97 1.24 0.86 144 TR_XM_PHPForged 1681 0.57 1.23 0.31 145 TR_XM_PHPDW 1650 0.57 1.21 0.33 146 TR_XM_FormFill2 1635 0.57 1.20 0.32 147 XM_UB60 1630 0.37 1.19 0.06 148 XM_B_COVIDMETA 1627 0.45 1.19 0.17 149 NML_ADSP_CUSTOM_MED 1626 0.72 1.19 0.53 150 TR_Symld_Words 1610 1.43 1.18 1.52 151 T_MONEY_PERCENT 1603 0.46 1.17 0.19 152 TR_LOTS_OF_MONEY2 1603 0.46 1.17 0.19 153 XM_H_PHPOS 1592 0.55 1.17 0.31 154 T_Symld_Words_02 1565 0.76 1.15 0.61 155 TR_LOTS_OF_MONEY3 1562 0.47 1.14 0.20 156 RCVD_IN_PSBL 1534 0.51 1.12 0.27 157 DKIM_ADSP_NXDOMAIN 1522 0.53 1.11 0.30 158 TR_XM_RelayPhish 1518 0.38 1.11 0.09 159 TR_MetaPhish_Combo_01 1496 0.81 1.10 0.70 160 XM_B_SEO 1493 0.46 1.09 0.22 161 XMSexyCombo_01 1492 0.40 1.09 0.13 162 TM2_M_OBFU_COMMENT 1482 0.64 1.08 0.46 163 MPART_ALT_DIFF_COUNT 1460 0.68 1.07 0.52 164 T_HTML_ATTACH 1457 0.34 1.07 0.05 165 LongTLD 1456 0.56 1.07 0.37 166 FORGED_GMAIL_RCVD 1427 0.66 1.04 0.51 167 XMPhish14 1415 0.62 1.04 0.46 168 RCVD_IN_IADB_LISTED 1401 2.60 1.03 3.21 169 XM_OfRef7 1381 0.39 1.01 0.15 170 XM_ProductURIs 1378 0.54 1.01 0.36 171 TM2_M_A_HREF_HREF 1375 0.46 1.01 0.24 172 RCVD_IN_IADB_SPF 1341 2.31 0.98 2.82 173 XMBody_78 1330 0.52 0.97 0.35 174 SHOPIFY_IMG_NOT_RCVD_SFY 1323 0.43 0.97 0.23 175 RCVD_IN_IADB_DK 1323 2.03 0.97 2.44 176 RCVD_IN_IADB_SENDERID 1316 2.09 0.96 2.52 177 HTML_TAG_BALANCE_BODY 1304 0.63 0.95 0.51 178 TR_XM_SEO4 1298 0.33 0.95 0.09 179 XM_B_DNDMA 1296 0.62 0.95 0.49 180 XM_UB99 1290 0.27 0.94 0.00 181 T_OBFU_HTML_ATTACH 1278 0.26 0.94 0.00 182 TR_XM_HtmlAttach 1276 0.26 0.93 0.00 183 RELAYCOUNTRY_KR 1276 0.27 0.93 0.01 184 RELAYCOUNTRY_GB 1273 0.63 0.93 0.52 185 XM_HighProb1 1271 0.26 0.93 0.00 186 RDNS_DYNAMIC 1264 0.45 0.93 0.26 187 XMReplyNow 1263 0.43 0.92 0.23 188 T_TooManySym_02 1245 2.30 0.91 2.84 189 URIBL_BLACK 1208 0.29 0.88 0.06 190 XMPhish08 1205 0.43 0.88 0.25 191 TR_Mismatch_TLD_02 1204 0.29 0.88 0.07 192 T_STY_INVIS_DIRECT 1202 0.55 0.88 0.42 193 XMHTML_After_End 1193 0.52 0.87 0.39 194 RCVD_IN_XBL 1188 0.26 0.87 0.03 195 TR_XM_DK_SendGrid 1172 0.84 0.86 0.83 196 RCVD_IN_SORBS_DUL 1119 0.26 0.82 0.04 197 TR_XM_Spammywords 1113 0.35 0.81 0.17 198 XM_S_SpammyWords 1113 0.35 0.81 0.17 199 XMSubMetaI_00 1101 0.46 0.81 0.32 200 XM_PDF 1080 3.14 0.79 4.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312295 90.56 95.11 88.80 2 RELAYCOUNTRY_US 292673 82.62 81.09 83.22 3 XM_B_Unicode 258580 76.17 83.00 73.53 4 DKIM_SIGNED 234760 73.06 89.29 66.75 5 XM_DK_Pass 230284 70.80 84.48 65.48 6 DKIM_VALID 226474 69.78 83.64 64.40 7 DCC_CHECK_NEGATIVE 220480 51.90 24.11 62.69 8 BAYES_50 201902 53.10 41.99 57.41 9 DKIM_VALID_AU 182952 56.18 66.88 52.02 10 XM_B_SpammyWords 156262 51.24 68.77 44.43 11 XM_B_Unicode3 150284 44.51 49.08 42.73 12 XMListUnsubscribeExists 149086 49.51 67.85 42.39 13 T_SCC_BODY_TEXT_LINE 147631 41.41 39.93 41.98 14 DCC_CHECK 131036 47.61 74.27 37.26 15 RCVD_IN_MSPIKE_H2 108107 33.27 39.80 30.74 16 T_TM2_M_HEADER_IN_MSG 94966 25.52 21.69 27.00 17 DKIM_VALID_EF 91857 27.55 31.25 26.12 18 HTML_FONT_LOW_CONTRAST 86880 27.76 35.64 24.70 19 MIME_HTML_ONLY 84058 25.70 30.32 23.90 20 LOC_TINY_FONT_1 83001 30.24 47.32 23.60 21 XMSubLong 81470 24.15 26.69 23.17 22 FVGT_m_MULTI_ODD 79784 25.57 33.01 22.69 23 T_KAM_HTML_FONT_INVALID 67065 22.39 30.94 19.07 24 XM_B_SpammyWords2 56429 22.60 39.48 16.05 25 BAYES_00 51776 10.77 0.60 14.72 26 HTML_IMAGE_RATIO_04 50668 11.68 4.65 14.41 27 ALL_TRUSTED 49770 10.71 1.84 14.15 28 HTML_FONT_FACE_BAD 45798 9.58 0.71 13.02 29 XM_H_Trusted_IP 42977 8.80 0.00 12.22 30 XM_Multi_Part_URI 41660 14.82 22.49 11.85 31 USER_IN_DEF_DKIM_WL 41425 9.03 1.97 11.78 32 XMStrtUSub 40673 9.77 5.16 11.57 33 TR_XM_DK_Unsub 40018 14.45 22.36 11.38 34 UNPARSEABLE_RELAY 37304 12.76 18.30 10.61 35 MPART_ALT_DIFF 34269 8.90 6.73 9.74 36 XM_Evil_Numbers_Gen 33273 9.38 9.18 9.46 37 FSL_BULK_SIG 32860 9.76 10.84 9.34 38 XM_B_PhoneNumber 31907 8.37 6.57 9.07 39 MIME_HTML_ONLY_MULTI 28690 6.90 3.67 8.16 40 XM_B_Unsub 28465 10.75 17.58 8.09 41 TooManyTo_001 26817 6.67 4.22 7.63 42 LotsOfNums_01 25575 7.27 7.25 7.27 43 TR_XM_DK_Bayes 24741 5.19 0.44 7.03 44 TR_XM_DK_Bayes1 24217 5.08 0.44 6.89 45 IN_ZIMBRA_NJ_WHITELIST 23166 4.77 0.10 6.59 46 XM_DKIMWhitelistDomains 21786 4.47 0.01 6.19 47 TR_XM_BayesUnsub 21453 9.12 16.91 6.10 48 BAYES_60 21161 6.69 8.42 6.02 49 BAYES_40 20838 4.81 1.93 5.93 50 TR_XM_DK_Bayes2 20716 4.31 0.25 5.89 51 XM_H_GMP 19566 5.40 4.97 5.56 52 LOTS_OF_MONEY 18976 7.38 12.48 5.40 53 T_TooManySym_01 18544 4.45 2.31 5.27 54 XM_H_Long_From01 18427 5.43 5.91 5.24 55 BAYES_20 17947 4.09 1.48 5.10 56 XM_B_Phish_Phrases 17778 6.25 9.34 5.06 57 RCVD_IN_MSPIKE_WL 17075 4.35 3.04 4.86 58 RCVD_IN_MSPIKE_H3 17056 4.34 3.04 4.85 59 MIME_QP_LONG_LINE 16345 4.36 3.60 4.65 60 HTML_IMAGE_RATIO_06 16314 4.46 4.01 4.64 61 TR_MAX_INTL_RELAY 16087 7.41 14.70 4.57 62 XM_DK_Undo_02 15319 13.96 38.68 4.36 63 XMSubNoVowel 15168 3.22 0.40 4.31 64 XM_B_SpammyWords3 15020 7.36 15.30 4.27 65 HTML_IMAGE_RATIO_02 14368 4.76 6.48 4.09 66 XM_PDF 14274 3.14 0.79 4.06 67 XM_UncommonTLD01 13059 4.25 5.63 3.71 68 TR_XM_SpammyWords4 12699 5.75 11.25 3.61 69 ANY_BOUNCE_MESSAGE 12405 2.90 1.28 3.53 70 BOUNCE_MESSAGE 12401 2.90 1.28 3.53 71 BAYES_05 12254 2.68 0.60 3.48 72 RCVD_IN_VALIDITY_SAFE 12032 3.05 2.08 3.42 73 RELAYCOUNTRY_META 11887 7.53 18.23 3.38 74 T_REMOTE_IMAGE 11519 2.83 1.69 3.28 75 XMNumbers 11291 3.50 4.25 3.21 76 RCVD_IN_IADB_LISTED 11290 2.60 1.03 3.21 77 XMSubMetaSx_00 11286 4.25 6.92 3.21 78 BOTNET_IPINHOSTNAME 11234 5.85 12.70 3.19 79 MAILING_LIST_MULTI 10067 2.76 2.50 2.86 80 T_TooManySym_02 9987 2.30 0.91 2.84 81 RCVD_IN_IADB_SPF 9917 2.31 0.98 2.82 82 BAYES_99 9717 10.14 29.14 2.76 83 RCVD_IN_VALIDITY_CERTIFIED 9715 2.42 1.53 2.76 84 BAYES_80 9619 4.48 8.98 2.74 85 TooManyTo_002 9236 2.05 0.56 2.63 86 RCVD_IN_IADB_SENDERID 8878 2.09 0.96 2.52 87 XM_Body_Dirty_Words 8666 4.00 7.95 2.46 88 RCVD_IN_IADB_DK 8594 2.03 0.97 2.44 89 DKIM_INVALID 8286 3.28 5.65 2.36 90 TR_XM_DKIM_Undo 7872 9.53 28.29 2.24 91 XM_B_SpammyTLD 7808 2.74 4.08 2.22 92 HTML_MIME_NO_HTML_TAG 7669 2.12 1.95 2.18 93 HTML_IMAGE_RATIO_08 7553 2.42 3.12 2.15 94 RCVD_IN_IADB_VOUCHED 7438 1.61 0.30 2.11 95 BAYES_999 7424 7.80 22.46 2.11 96 MIME_HTML_MOSTLY 7420 2.57 3.75 2.11 97 INVALID_MSGID 7138 1.55 0.30 2.03 98 XMSubLongNoVowel 7004 1.46 0.10 1.99 99 XMSubGarbage 6784 1.39 0.02 1.93 100 T_XMDrugObfuBody_14 6760 2.58 4.29 1.92 101 BAYES_95 6462 2.79 5.25 1.84 102 TO_MALFORMED 6308 1.31 0.07 1.79 103 XM_CamelCaseFrm001 6103 2.19 3.37 1.74 104 XM_B_URI_Unicode 5925 2.08 3.09 1.68 105 XM_B_Investor 5918 2.50 4.60 1.68 106 TR_XM_SpammyRelay 5841 4.57 12.05 1.66 107 TR_XM_PhishingBody 5698 2.65 5.30 1.62 108 XM_DK_Undo_01 5626 1.61 1.64 1.60 109 BOTNET 5599 4.26 11.14 1.59 110 TooManyTo_003 5509 1.25 0.45 1.57 111 FROM_EXCESS_BASE64 5442 1.82 2.52 1.55 112 TR_Symld_Words 5357 1.43 1.18 1.52 113 RCVD_IN_IADB_OPTIN 5151 1.11 0.18 1.46 114 XM_SendGrid 5050 1.48 1.60 1.44 115 URI_NOVOWEL 5035 1.48 1.61 1.43 116 TR_XM_SpammyWords5 5004 2.22 4.28 1.42 117 XMDiploma_00 4968 1.95 3.33 1.41 118 TM2_M_VERY_LONG_WORD 4955 2.04 3.67 1.41 119 SUBJ_ALL_CAPS 4950 1.59 2.05 1.41 120 TM2_M_URI_OPT_OUT 4922 1.67 2.38 1.40 121 KHOP_HELO_FCRDNS 4588 1.34 1.41 1.30 122 UNTRUSTED_Relay 4587 3.01 7.39 1.30 123 TR_XM_UnparsRelay 4563 3.71 9.91 1.30 124 XM_B_Unsub2 4550 1.88 3.40 1.29 125 HELO_NODOT 4543 1.01 0.29 1.29 126 HELO_NO_DOMAIN 4535 1.01 0.29 1.29 127 T_XMDrugObfuBody_08 4512 1.85 3.31 1.28 128 XM_GoogleGroups 4456 1.12 0.75 1.27 129 XM_SPF_SoftFail 4145 2.00 4.10 1.18 130 XMCapTrack 4119 1.00 0.56 1.17 131 IN_HORDE_ADDRESS_BOOK 4088 0.87 0.12 1.16 132 TooManyTo_004 4055 0.93 0.37 1.15 133 XMStockSpam_06 3915 1.38 2.07 1.11 134 T_TooManySym_03 3904 0.85 0.18 1.11 135 XMGappySubj_01 3887 0.98 0.65 1.11 136 URI_HEX 3868 1.33 1.91 1.10 137 XMSexyCombo_05 3865 1.97 4.22 1.10 138 TR_DCC_Bayes_99 3790 6.36 19.97 1.08 139 XM_E_Blogspot 3613 0.78 0.16 1.03 140 FROM_GOV_DKIM_AU 3503 0.83 0.41 1.00 141 XM_OfRef6 3323 1.71 3.67 0.94 142 TooManyTo_005 3258 0.76 0.32 0.93 143 TVD_SPACE_RATIO 3209 0.73 0.25 0.91 144 RELAYCOUNTRY_CA 3029 2.42 6.44 0.86 145 XM_H_Long_From02 3025 0.97 1.24 0.86 146 DKIM_ADSP_CUSTOM_MED 2995 0.99 1.35 0.85 147 TR_XM_DK_SendGrid 2935 0.84 0.86 0.83 148 XM_UB50 2876 1.68 3.89 0.82 149 SpammyFromTLD_01 2858 1.03 1.57 0.81 150 T_FILL_THIS_FORM_SHORT 2758 1.13 2.01 0.78 151 T_XMDrugObfuBody_00 2720 1.01 1.61 0.77 152 XM_ShortIntro_01 2719 0.71 0.55 0.77 153 XM_B_SpammyWords4 2704 1.34 2.81 0.77 154 XMBdyGiftCard01 2630 0.76 0.79 0.75 155 XM_H_PHPMailer 2527 0.72 0.73 0.72 156 HTTPS_HTTP_MISMATCH 2518 0.98 1.64 0.72 157 TR_XM_Base64_M1 2505 0.72 0.75 0.71 158 XMLngstWrd_00 2492 0.65 0.51 0.71 159 TR_MetaPhish_Combo_01 2468 0.81 1.10 0.70 160 XMGenDplmaNmb 2461 1.02 1.86 0.70 161 RCVD_IN_PBL 2441 1.13 2.24 0.69 162 LOW_PRICE 2388 0.64 0.54 0.68 163 XMNoVowels 2371 0.66 0.61 0.67 164 TVD_RCVD_IP 2349 0.69 0.76 0.67 165 HTML_IMAGE_ONLY_32 2320 0.55 0.27 0.66 166 XM_B_COPY_HTML 2210 0.83 1.36 0.63 167 T_Symld_Words_02 2141 0.76 1.15 0.61 168 XMBrknScrpt_02 2139 1.00 2.02 0.61 169 TO_NO_BRKTS_HTML_ONLY 2137 0.60 0.57 0.61 170 T_OBFU_PDF_ATTACH 2021 0.46 0.16 0.57 171 XMGappySubj_02 1988 0.42 0.04 0.57 172 RELAYCOUNTRY_AU 1886 1.14 2.68 0.54 173 NML_ADSP_CUSTOM_MED 1875 0.72 1.19 0.53 174 MPART_ALT_DIFF_COUNT 1844 0.68 1.07 0.52 175 XMLngstWrd_01 1838 0.50 0.45 0.52 176 RELAYCOUNTRY_GB 1822 0.63 0.93 0.52 177 XMSubMetaSxObfu_03 1819 0.57 0.71 0.52 178 FORGED_GMAIL_RCVD 1800 0.66 1.04 0.51 179 HTML_TAG_BALANCE_BODY 1792 0.63 0.95 0.51 180 XM_B_DNDMA 1707 0.62 0.95 0.49 181 RCVD_IN_BL_SPAMCOP_NET 1706 2.57 7.95 0.49 182 HTML_IMAGE_ONLY_20 1694 0.77 1.50 0.48 183 XM_B_FormFill 1660 0.36 0.05 0.47 184 XMBSHREFv2 1643 0.45 0.41 0.47 185 TM2_M_OBFU_COMMENT 1630 0.64 1.08 0.46 186 MSGID_FROM_MTA_HEADER 1606 0.37 0.14 0.46 187 XMPhish14 1606 0.62 1.04 0.46 188 XMMoneyMeta_00 1551 0.51 0.67 0.44 189 URI_TRY_3LD 1549 0.73 1.48 0.44 190 SpammyFromTLD_02 1536 0.89 2.06 0.44 191 XMSlimDrugH 1532 0.49 0.63 0.44 192 HTML_IMAGE_ONLY_28 1527 0.42 0.40 0.43 193 XMPhish30 1518 0.73 1.51 0.43 194 TRACKER_ID 1517 0.34 0.10 0.43 195 T_STY_INVIS_DIRECT 1492 0.55 0.88 0.42 196 XMBody_95 1464 0.39 0.32 0.42 197 XMBody_17 1424 0.93 2.29 0.40 198 PLING_QUERY 1394 0.48 0.70 0.40 199 T_XMHurry_00 1380 0.78 1.78 0.39 200 TR_XM_SpammyWords2 1358 2.94 9.52 0.39 ----------------------------------------------------------------------