Email: 471761 Autolearn: 0 AvgScore: 4.65 AvgScanTime: 1.29 sec Spam: 149493 Autolearn: 0 AvgScore: 14.48 AvgScanTime: 1.37 sec Ham: 322268 Autolearn: 0 AvgScore: 0.10 AvgScanTime: 1.26 sec Time Spent Running SA: 169.62 hours Time Spent Processing Spam: 56.96 hours Time Spent Processing Ham: 112.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139513 88.66 93.32 86.49 2 DKIM_SIGNED 121160 77.82 81.05 76.33 3 XM_B_Unicode 115556 72.22 77.30 69.86 4 XM_DK_Pass 115395 75.55 77.19 74.79 5 DKIM_VALID 114597 74.60 76.66 73.65 6 RELAYCOUNTRY_US 111653 79.20 74.69 81.29 7 DCC_CHECK 101888 48.28 68.16 39.05 8 XM_B_SpammyWords 93369 50.17 62.46 44.48 9 XMListUnsubscribeExists 92348 53.01 61.77 48.95 10 DKIM_VALID_AU 91539 59.57 61.23 58.80 11 XM_B_Unicode3 65617 40.93 43.89 39.56 12 LOC_TINY_FONT_1 63894 32.70 42.74 28.04 13 BAYES_50 62013 54.44 41.48 60.45 14 T_SCC_BODY_TEXT_LINE 59023 40.95 39.48 41.63 15 XM_B_SpammyWords2 54185 24.29 36.25 18.74 16 XM_DK_Undo_02 54131 15.07 36.21 5.26 17 MIME_HTML_ONLY 51204 24.28 34.25 19.65 18 HTML_FONT_LOW_CONTRAST 48025 28.50 32.13 26.83 19 DCC_CHECK_NEGATIVE 45165 51.18 30.21 60.90 20 FVGT_m_MULTI_ODD 44029 27.17 29.45 26.12 21 BAYES_99 43159 11.75 28.87 3.81 22 T_KAM_HTML_FONT_INVALID 42864 24.19 28.67 22.10 23 DKIM_VALID_EF 40750 29.18 27.26 30.07 24 TR_XM_DKIM_Undo 38929 9.96 26.04 2.51 25 XM_B_Unsub 35833 13.72 23.97 8.97 26 RELAYCOUNTRY_META 34415 10.01 23.02 3.97 27 XMSubLong 33333 22.46 22.30 22.53 28 BAYES_999 32279 8.83 21.59 2.91 29 TR_XM_BayesUnsub 31425 11.23 21.02 6.68 30 XM_Multi_Part_URI 29993 15.72 20.06 13.71 31 T_TM2_M_HEADER_IN_MSG 29019 27.50 19.41 31.25 32 TR_DCC_Bayes_99 28875 7.23 19.32 1.63 33 TR_XM_DK_Unsub 28383 15.26 18.99 13.53 34 UNPARSEABLE_RELAY 24886 13.73 16.65 12.38 35 XM_B_SpammyWords3 21658 7.90 14.49 4.85 36 TR_MAX_INTL_RELAY 20563 8.59 13.76 6.19 37 UNTRUSTED_Relay 19190 5.11 12.84 1.53 38 LOTS_OF_MONEY 18659 8.40 12.48 6.50 39 RCVD_IN_MSPIKE_H2 18174 13.88 12.16 14.68 40 BOTNET_IPINHOSTNAME 17882 5.87 11.96 3.04 41 TR_XM_SpammyWords4 16912 6.74 11.31 4.61 42 TR_XM_SpammyRelay 16620 4.91 11.12 2.03 43 FSL_BULK_SIG 15311 8.24 10.24 7.31 44 TR_XM_SpammyWords2 15146 3.72 10.13 0.75 45 BOTNET 14954 4.16 10.00 1.45 46 TR_XM_NoHeaderRelay 14305 3.21 9.57 0.26 47 TR_XM_UnparsRelay 13465 4.06 9.01 1.77 48 SpammyFromTLD_01 13280 3.37 8.88 0.81 49 XM_Evil_Numbers_Gen 12991 8.44 8.69 8.32 50 BAYES_80 12966 5.38 8.67 3.86 51 XM_B_Phish_Phrases 12669 5.95 8.47 4.77 52 BAYES_60 12292 7.32 8.22 6.90 53 XM_UB50 11733 3.20 7.85 1.04 54 RELAYCOUNTRY_ES 10887 2.33 7.28 0.03 55 HTML_IMAGE_ONLY_08 10850 2.43 7.26 0.19 56 HTML_SHORT_LINK_IMG_1 10741 2.29 7.18 0.03 57 BODY_SINGLE_URI 10731 2.29 7.18 0.02 58 BODY_URI_ONLY 10731 2.28 7.18 0.01 59 XM_Body_Dirty_Words 10613 4.04 7.10 2.62 60 RCVD_IN_BL_SPAMCOP_NET 10130 2.56 6.78 0.60 61 LotsOfNums_01 9902 7.58 6.62 8.03 62 RCVD_IN_MSPIKE_WL 9727 10.24 6.51 11.98 63 XM_UncommonTLD01 8968 4.99 6.00 4.52 64 RELAYCOUNTRY_CA 8862 2.58 5.93 1.03 65 HTML_IMAGE_RATIO_02 8797 4.95 5.88 4.51 66 XM_B_PhoneNumber 8690 9.08 5.81 10.60 67 MPART_ALT_DIFF 8247 4.85 5.52 4.55 68 XMSubMetaSx_00 8042 4.10 5.38 3.51 69 XMNumbers 7517 3.91 5.03 3.39 70 HTML_IMAGE_RATIO_04 7239 4.29 4.84 4.04 71 XM_H_Long_From01 7206 5.21 4.82 5.39 72 BAYES_95 7146 3.11 4.78 2.33 73 XMStrtUSub 6970 5.06 4.66 5.24 74 XM_B_Investor 6933 2.68 4.64 1.77 75 XM_OfRef6 6793 2.27 4.54 1.22 76 DKIM_INVALID 6563 3.22 4.39 2.68 77 TooManyTo_001 6417 7.35 4.29 8.77 78 XMSexyCombo_05 6382 2.29 4.27 1.38 79 TR_XM_PhishingBody 5955 2.49 3.98 1.79 80 XM_B_SpammyTLD 5686 2.97 3.80 2.58 81 RCVD_IN_MSPIKE_H3 5613 5.13 3.75 5.77 82 T_XMDrugObfuBody_14 5583 2.52 3.73 1.95 83 XM_H_GMP 5550 5.34 3.71 6.10 84 TR_XM_SpammyWords5 5388 2.26 3.60 1.63 85 MIME_QP_LONG_LINE 5313 4.75 3.55 5.31 86 ALL_TRUSTED 5172 11.67 3.46 15.48 87 XM_CamelCaseFrm001 5156 2.40 3.45 1.91 88 MIME_HTML_MOSTLY 5086 2.67 3.40 2.33 89 HTML_IMAGE_RATIO_06 4848 3.11 3.24 3.04 90 BAYES_40 4819 4.76 3.22 5.47 91 XM_B_SpammyWords4 4659 1.69 3.12 1.03 92 TM2_M_VERY_LONG_WORD 4569 1.86 3.06 1.30 93 MIME_HTML_ONLY_MULTI 4489 2.54 3.00 2.33 94 SCC_BODY_SINGLE_WORD 4438 0.95 2.97 0.01 95 BODY_SINGLE_WORD 4431 0.94 2.96 0.01 96 XM_SPF_SoftFail 4390 1.93 2.94 1.46 97 XM_B_URI_Unicode 4260 2.18 2.85 1.87 98 HTML_IMAGE_RATIO_08 4232 2.29 2.83 2.05 99 T_XMDrugObfuBody_08 4192 1.94 2.80 1.54 100 T_XMHurry_00 4191 1.51 2.80 0.92 101 T_FILL_THIS_FORM_SHORT 4007 1.48 2.68 0.92 102 TR_XM_SPAMCOP 3935 0.95 2.63 0.18 103 XM_B_Unsub2 3855 1.73 2.58 1.34 104 SUBJ_DOLLARS 3803 0.92 2.54 0.17 105 XMDiploma_00 3718 1.91 2.49 1.64 106 RELAYCOUNTRY_AU 3661 1.27 2.45 0.73 107 XM_URI_RBL 3617 1.07 2.42 0.44 108 SUBJ_ALL_CAPS 3434 2.02 2.30 1.89 109 RCVD_IN_VALIDITY_RPBL 3366 0.76 2.25 0.07 110 RCVD_IN_VALIDITY_SAFE 3293 3.41 2.20 3.98 111 RCVD_IN_PSBL 3241 0.88 2.17 0.28 112 RCVD_IN_MSPIKE_BL 3197 0.98 2.14 0.44 113 TR_XM_MSPIKECOMBO 3183 0.98 2.13 0.44 114 RCVD_IN_MSPIKE_H5 3157 4.18 2.11 5.14 115 TM2_M_URI_OPT_OUT 3111 1.92 2.08 1.85 116 XMSubGiftCard1 3101 0.70 2.07 0.06 117 T_TooManySym_01 3096 4.73 2.07 5.96 118 USER_IN_DEF_DKIM_WL 3090 8.96 2.07 12.16 119 XMSubGiftCard2 3079 0.68 2.06 0.04 120 XMSubject_48 3038 0.67 2.03 0.04 121 MAILING_LIST_MULTI 2963 2.76 1.98 3.12 122 TR_XM_INV_DKIM 2892 0.73 1.93 0.17 123 XMBody_17 2877 1.02 1.92 0.60 124 FROM_EXCESS_BASE64 2816 1.76 1.88 1.70 125 BAYES_20 2805 3.31 1.88 3.97 126 XMBrknScrpt_02 2718 1.28 1.82 1.03 127 XMStockSpam_06 2699 1.10 1.81 0.77 128 XM_DK_Undo_01 2589 1.83 1.73 1.87 129 HTML_MIME_NO_HTML_TAG 2472 2.58 1.65 3.00 130 SHORTCIRCUIT 2421 0.51 1.62 0.00 131 RCVD_IN_ZEN_LASTEXTERNAL 2421 0.51 1.62 0.00 132 T_XMDrugObfuBody_00 2413 1.03 1.61 0.75 133 RCVD_IN_VALIDITY_CERTIFIED 2371 2.63 1.59 3.12 134 XM_OfRef7 2367 0.71 1.58 0.31 135 URI_NOVOWEL 2339 1.65 1.56 1.70 136 SpammyFromTLD_02 2331 0.66 1.56 0.25 137 T_REMOTE_IMAGE 2112 2.87 1.41 3.54 138 XMGenDplmaNmb 2107 1.15 1.41 1.02 139 XMSubMetaI_00 2100 0.95 1.40 0.73 140 URI_HEX 2099 1.31 1.40 1.27 141 TR_XM_RelayPhish 2090 0.51 1.40 0.10 142 TM2_M_BODY_EMPTY 2065 1.05 1.38 0.90 143 XMEmptyBody_01 2010 0.85 1.34 0.61 144 URI_TRY_3LD 2005 0.81 1.34 0.56 145 BOTNET_NORDNS 1957 0.42 1.31 0.01 146 TR_LOTS_OF_MONEY3 1945 0.79 1.30 0.56 147 XMBdyGiftCard01 1934 0.96 1.29 0.80 148 XMPhish30 1879 0.73 1.26 0.48 149 KHOP_HELO_FCRDNS 1868 1.30 1.25 1.32 150 XM_SendGrid 1839 1.42 1.23 1.51 151 XM_ProductURIs 1839 0.77 1.23 0.56 152 RELAYCOUNTRY_FR 1835 0.59 1.23 0.29 153 TR_Mismatch_TLD_02 1815 0.45 1.21 0.10 154 TR_XM_SpammyWords3 1789 0.49 1.20 0.17 155 RCVD_IN_IADB_LISTED 1771 2.97 1.18 3.80 156 DKIM_ADSP_NXDOMAIN 1692 0.73 1.13 0.55 157 HTTPS_HTTP_MISMATCH 1678 0.87 1.12 0.75 158 THIS_AD 1650 0.61 1.10 0.38 159 RDNS_DYNAMIC 1645 0.49 1.10 0.20 160 XMReplyNow 1626 0.47 1.09 0.19 161 XM_H_Long_From02 1617 0.90 1.08 0.82 162 ANY_BOUNCE_MESSAGE 1615 2.82 1.08 3.63 163 HTML_TAG_BALANCE_BODY 1612 0.73 1.08 0.56 164 BOUNCE_MESSAGE 1612 2.82 1.08 3.62 165 XM_B_COPY_HTML 1609 0.77 1.08 0.63 166 XM_DIRTYINTL 1591 0.41 1.06 0.11 167 RCVD_IN_IADB_SPF 1587 2.60 1.06 3.32 168 TR_Symld_Words 1575 1.45 1.05 1.63 169 TR_XM_PHPForged 1571 0.76 1.05 0.63 170 TR_XM_FormFill2 1564 0.76 1.05 0.63 171 MultiRelay_CC 1551 0.47 1.04 0.21 172 RCVD_IN_IADB_DK 1551 2.28 1.04 2.85 173 TR_XM_PHPDW 1551 0.76 1.04 0.63 174 SHOPIFY_IMG_NOT_RCVD_SFY 1548 0.51 1.04 0.27 175 RCVD_IN_IADB_SENDERID 1540 2.34 1.03 2.95 176 TR_XM_InvalidRelay 1530 0.33 1.02 0.02 177 TR_MetaPhish_Combo_01 1528 1.12 1.02 1.17 178 XM_H_PHPOS 1524 0.74 1.02 0.61 179 XM_B_SEO 1502 0.52 1.00 0.29 180 XM_B_Phish66 1488 0.53 1.00 0.32 181 XM_HighProb1 1454 0.31 0.97 0.01 182 XM_B_DNDMA 1425 0.74 0.95 0.64 183 T_MONEY_PERCENT 1392 0.51 0.93 0.31 184 TR_LOTS_OF_MONEY2 1392 0.51 0.93 0.31 185 HTML_FONT_TINY_NORDNS 1375 0.35 0.92 0.09 186 MPART_ALT_DIFF_COUNT 1374 0.64 0.92 0.51 187 XMPhish14 1367 0.70 0.91 0.60 188 RELAYCOUNTRY_GB 1366 0.64 0.91 0.51 189 RCVD_IN_MSPIKE_L3 1360 0.59 0.91 0.44 190 RCVD_IN_PBL 1337 0.88 0.89 0.87 191 RCVD_IN_SORBS_DUL 1333 0.31 0.89 0.04 192 TR_XM_SEO4 1309 0.37 0.88 0.13 193 TM2_M_OBFU_COMMENT 1301 0.64 0.87 0.53 194 DIET_1 1296 0.44 0.87 0.24 195 HTML_IMAGE_ONLY_20 1289 0.65 0.86 0.56 196 XMHTML_After_End 1279 0.58 0.86 0.45 197 XMSexyCombo_01 1247 0.37 0.83 0.15 198 XMBody_78 1246 0.52 0.83 0.37 199 LongTLD 1242 0.68 0.83 0.61 200 TVD_RCVD_IP 1241 0.76 0.83 0.73 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 278739 88.66 93.32 86.49 2 RELAYCOUNTRY_US 261979 79.20 74.69 81.29 3 DKIM_SIGNED 245973 77.82 81.05 76.33 4 XM_DK_Pass 241012 75.55 77.19 74.79 5 DKIM_VALID 237351 74.60 76.66 73.65 6 XM_B_Unicode 225148 72.22 77.30 69.86 7 DCC_CHECK_NEGATIVE 196262 51.18 30.21 60.90 8 BAYES_50 194795 54.44 41.48 60.45 9 DKIM_VALID_AU 189486 59.57 61.23 58.80 10 XMListUnsubscribeExists 157739 53.01 61.77 48.95 11 XM_B_SpammyWords 143331 50.17 62.46 44.48 12 T_SCC_BODY_TEXT_LINE 134161 40.95 39.48 41.63 13 XM_B_Unicode3 127497 40.93 43.89 39.56 14 DCC_CHECK 125861 48.28 68.16 39.05 15 T_TM2_M_HEADER_IN_MSG 100706 27.50 19.41 31.25 16 DKIM_VALID_EF 96914 29.18 27.26 30.07 17 LOC_TINY_FONT_1 90370 32.70 42.74 28.04 18 HTML_FONT_LOW_CONTRAST 86449 28.50 32.13 26.83 19 FVGT_m_MULTI_ODD 84169 27.17 29.45 26.12 20 XMSubLong 72621 22.46 22.30 22.53 21 T_KAM_HTML_FONT_INVALID 71236 24.19 28.67 22.10 22 MIME_HTML_ONLY 63327 24.28 34.25 19.65 23 XM_B_SpammyWords2 60388 24.29 36.25 18.74 24 ALL_TRUSTED 49888 11.67 3.46 15.48 25 RCVD_IN_MSPIKE_H2 47322 13.88 12.16 14.68 26 XM_Multi_Part_URI 44177 15.72 20.06 13.71 27 TR_XM_DK_Unsub 43590 15.26 18.99 13.53 28 UNPARSEABLE_RELAY 39897 13.73 16.65 12.38 29 USER_IN_DEF_DKIM_WL 39200 8.96 2.07 12.16 30 RCVD_IN_MSPIKE_WL 38602 10.24 6.51 11.98 31 BAYES_00 34795 7.55 0.55 10.80 32 XM_B_PhoneNumber 34154 9.08 5.81 10.60 33 XM_B_Unsub 28909 13.72 23.97 8.97 34 TooManyTo_001 28251 7.35 4.29 8.77 35 XM_Evil_Numbers_Gen 26826 8.44 8.69 8.32 36 LotsOfNums_01 25865 7.58 6.62 8.03 37 FSL_BULK_SIG 23557 8.24 10.24 7.31 38 TR_XM_DK_Bayes 23134 5.04 0.42 7.18 39 IN_ZIMBRA_NJ_WHITELIST 22698 4.84 0.09 7.04 40 TR_XM_DK_Bayes1 22588 4.92 0.42 7.01 41 BAYES_60 22239 7.32 8.22 6.90 42 TR_XM_BayesUnsub 21543 11.23 21.02 6.68 43 LOTS_OF_MONEY 20958 8.40 12.48 6.50 44 XM_DKIMWhitelistDomains 20777 4.41 0.02 6.45 45 TR_MAX_INTL_RELAY 19954 8.59 13.76 6.19 46 XM_H_GMP 19650 5.34 3.71 6.10 47 T_TooManySym_01 19204 4.73 2.07 5.96 48 TR_XM_DK_Bayes2 18991 4.12 0.29 5.89 49 RCVD_IN_MSPIKE_H3 18592 5.13 3.75 5.77 50 BAYES_40 17617 4.76 3.22 5.47 51 XM_H_Long_From01 17378 5.21 4.82 5.39 52 MIME_QP_LONG_LINE 17110 4.75 3.55 5.31 53 XM_DK_Undo_02 16966 15.07 36.21 5.26 54 XMStrtUSub 16879 5.06 4.66 5.24 55 RCVD_IN_MSPIKE_H5 16571 4.18 2.11 5.14 56 XM_B_SpammyWords3 15634 7.90 14.49 4.85 57 XM_B_Phish_Phrases 15383 5.95 8.47 4.77 58 TR_XM_SpammyWords4 14862 6.74 11.31 4.61 59 XM_PDF 14815 3.40 0.81 4.60 60 MPART_ALT_DIFF 14649 4.85 5.52 4.55 61 XM_UncommonTLD01 14580 4.99 6.00 4.52 62 HTML_IMAGE_RATIO_02 14548 4.95 5.88 4.51 63 HTML_IMAGE_RATIO_04 13015 4.29 4.84 4.04 64 RCVD_IN_VALIDITY_SAFE 12817 3.41 2.20 3.98 65 RELAYCOUNTRY_META 12789 10.01 23.02 3.97 66 BAYES_20 12787 3.31 1.88 3.97 67 BAYES_80 12426 5.38 8.67 3.86 68 BAYES_99 12294 11.75 28.87 3.81 69 RCVD_IN_IADB_LISTED 12256 2.97 1.18 3.80 70 ANY_BOUNCE_MESSAGE 11686 2.82 1.08 3.63 71 BOUNCE_MESSAGE 11681 2.82 1.08 3.62 72 T_REMOTE_IMAGE 11409 2.87 1.41 3.54 73 XMSubMetaSx_00 11318 4.10 5.38 3.51 74 XMNumbers 10917 3.91 5.03 3.39 75 RCVD_IN_IADB_SPF 10694 2.60 1.06 3.32 76 MAILING_LIST_MULTI 10058 2.76 1.98 3.12 77 RCVD_IN_VALIDITY_CERTIFIED 10041 2.63 1.59 3.12 78 TooManyTo_002 9961 2.36 0.79 3.09 79 T_TooManySym_02 9836 2.29 0.64 3.05 80 HTML_IMAGE_RATIO_06 9810 3.11 3.24 3.04 81 BOTNET_IPINHOSTNAME 9791 5.87 11.96 3.04 82 HTML_MIME_NO_HTML_TAG 9684 2.58 1.65 3.00 83 RCVD_IN_IADB_SENDERID 9522 2.34 1.03 2.95 84 BAYES_999 9390 8.83 21.59 2.91 85 RCVD_IN_IADB_DK 9188 2.28 1.04 2.85 86 DKIM_INVALID 8622 3.22 4.39 2.68 87 XM_Body_Dirty_Words 8442 4.04 7.10 2.62 88 RCVD_IN_IADB_VOUCHED 8348 1.90 0.42 2.59 89 XM_B_SpammyTLD 8321 2.97 3.80 2.58 90 TR_XM_DKIM_Undo 8076 9.96 26.04 2.51 91 BAYES_05 7779 1.87 0.70 2.41 92 BAYES_95 7522 3.11 4.78 2.33 93 MIME_HTML_ONLY_MULTI 7513 2.54 3.00 2.33 94 MIME_HTML_MOSTLY 7510 2.67 3.40 2.33 95 INVALID_MSGID 7324 1.63 0.23 2.27 96 HTML_IMAGE_RATIO_08 6591 2.29 2.83 2.05 97 TR_XM_SpammyRelay 6543 4.91 11.12 2.03 98 T_XMDrugObfuBody_14 6299 2.52 3.73 1.95 99 TO_MALFORMED 6261 1.33 0.01 1.94 100 XM_CamelCaseFrm001 6159 2.40 3.45 1.91 101 SUBJ_ALL_CAPS 6096 2.02 2.30 1.89 102 XM_DK_Undo_01 6042 1.83 1.73 1.87 103 XM_B_URI_Unicode 6025 2.18 2.85 1.87 104 RCVD_IN_IADB_OPTIN 5952 1.34 0.25 1.85 105 TM2_M_URI_OPT_OUT 5952 1.92 2.08 1.85 106 TR_XM_PhishingBody 5770 2.49 3.98 1.79 107 XM_B_Investor 5712 2.68 4.64 1.77 108 TR_XM_UnparsRelay 5709 4.06 9.01 1.77 109 FROM_EXCESS_BASE64 5480 1.76 1.88 1.70 110 URI_NOVOWEL 5468 1.65 1.56 1.70 111 TooManyTo_003 5449 1.37 0.69 1.69 112 XMDiploma_00 5273 1.91 2.49 1.64 113 TR_XM_SpammyWords5 5257 2.26 3.60 1.63 114 TR_Symld_Words 5255 1.45 1.05 1.63 115 TR_DCC_Bayes_99 5245 7.23 19.32 1.63 116 T_XMDrugObfuBody_08 4960 1.94 2.80 1.54 117 UNTRUSTED_Relay 4919 5.11 12.84 1.53 118 HELO_NODOT 4883 1.10 0.19 1.52 119 HELO_NO_DOMAIN 4869 1.09 0.19 1.51 120 XM_SendGrid 4868 1.42 1.23 1.51 121 XM_SPF_SoftFail 4702 1.93 2.94 1.46 122 BOTNET 4670 4.16 10.00 1.45 123 XM_GoogleGroups 4495 1.18 0.71 1.39 124 XMSexyCombo_05 4443 2.29 4.27 1.38 125 XMCapTrack 4416 1.07 0.43 1.37 126 XM_B_Unsub2 4314 1.73 2.58 1.34 127 KHOP_HELO_FCRDNS 4263 1.30 1.25 1.32 128 IN_HORDE_ADDRESS_BOOK 4206 0.92 0.09 1.31 129 TM2_M_VERY_LONG_WORD 4195 1.86 3.06 1.30 130 T_TooManySym_03 4131 0.94 0.22 1.28 131 TooManyTo_004 4108 1.07 0.62 1.27 132 URI_HEX 4081 1.31 1.40 1.27 133 XM_OfRef6 3936 2.27 4.54 1.22 134 TR_MetaPhish_Combo_01 3769 1.12 1.02 1.17 135 XM_ShortIntro_01 3485 0.90 0.50 1.08 136 RCVD_IN_MSPIKE_H4 3439 0.93 0.64 1.07 137 XM_UB50 3344 3.20 7.85 1.04 138 RELAYCOUNTRY_CA 3329 2.58 5.93 1.03 139 XMBrknScrpt_02 3326 1.28 1.82 1.03 140 XM_B_SpammyWords4 3310 1.69 3.12 1.03 141 XMGenDplmaNmb 3303 1.15 1.41 1.02 142 TooManyTo_005 3243 0.87 0.57 1.01 143 TVD_SPACE_RATIO 3229 0.73 0.14 1.00 144 XMGappySubj_01 3200 0.73 0.16 0.99 145 TR_XM_DK_SendGrid 3196 0.89 0.67 0.99 146 T_FILL_THIS_FORM_SHORT 2952 1.48 2.68 0.92 147 T_XMHurry_00 2950 1.51 2.80 0.92 148 TM2_M_BODY_EMPTY 2896 1.05 1.38 0.90 149 TO_NO_BRKTS_HTML_ONLY 2866 0.77 0.52 0.89 150 RCVD_IN_PBL 2806 0.88 0.89 0.87 151 DKIM_ADSP_CUSTOM_MED 2738 0.83 0.80 0.85 152 XM_H_Long_From02 2641 0.90 1.08 0.82 153 SpammyFromTLD_01 2600 3.37 8.88 0.81 154 XMBdyGiftCard01 2594 0.96 1.29 0.80 155 XM_H_PHPMailer 2514 0.67 0.45 0.78 156 XMStockSpam_06 2489 1.10 1.81 0.77 157 XMNoVowels 2438 0.67 0.49 0.76 158 HTTPS_HTTP_MISMATCH 2433 0.87 1.12 0.75 159 T_XMDrugObfuBody_00 2429 1.03 1.61 0.75 160 TR_XM_SpammyWords2 2403 3.72 10.13 0.75 161 TR_XM_Base64_M1 2398 0.76 0.80 0.74 162 TVD_RCVD_IP 2362 0.76 0.83 0.73 163 XMSubMetaI_00 2359 0.95 1.40 0.73 164 RELAYCOUNTRY_AU 2346 1.27 2.45 0.73 165 XM_B_FormFill 2193 0.48 0.04 0.68 166 MSGID_FROM_MTA_HEADER 2183 0.51 0.15 0.68 167 XM_B_DNDMA 2077 0.74 0.95 0.64 168 XMSlimDrugH 2043 0.60 0.52 0.63 169 T_Symld_Words_02 2032 0.65 0.68 0.63 170 TR_XM_PHPDW 2027 0.76 1.04 0.63 171 XM_B_COPY_HTML 2024 0.77 1.08 0.63 172 TR_XM_PHPForged 2023 0.76 1.05 0.63 173 TR_XM_FormFill2 2021 0.76 1.05 0.63 174 XMGappySubj_02 2021 0.45 0.08 0.63 175 T_OBFU_PDF_ATTACH 2006 0.48 0.19 0.62 176 LongTLD 1979 0.68 0.83 0.61 177 XM_H_PHPOS 1979 0.74 1.02 0.61 178 XMEmptyBody_01 1977 0.85 1.34 0.61 179 XMLngstWrd_00 1971 0.54 0.38 0.61 180 XMBody_17 1946 1.02 1.92 0.60 181 RCVD_IN_BL_SPAMCOP_NET 1941 2.56 6.78 0.60 182 XMPhish14 1935 0.70 0.91 0.60 183 URI_TRY_3LD 1820 0.81 1.34 0.56 184 HTML_TAG_BALANCE_BODY 1818 0.73 1.08 0.56 185 HTML_IMAGE_ONLY_20 1801 0.65 0.86 0.56 186 FROM_GOV_DKIM_AU 1795 0.43 0.15 0.56 187 TR_LOTS_OF_MONEY3 1794 0.79 1.30 0.56 188 XM_ProductURIs 1790 0.77 1.23 0.56 189 DKIM_ADSP_NXDOMAIN 1761 0.73 1.13 0.55 190 XMMoneyMeta_00 1757 0.53 0.48 0.55 191 NML_ADSP_CUSTOM_MED 1733 0.56 0.61 0.54 192 TM2_M_OBFU_COMMENT 1717 0.64 0.87 0.53 193 XMLngstWrd_01 1701 0.47 0.34 0.53 194 MPART_ALT_DIFF_COUNT 1654 0.64 0.92 0.51 195 RELAYCOUNTRY_GB 1640 0.64 0.91 0.51 196 T_STY_INVIS_DIRECT 1597 0.57 0.72 0.50 197 HTML_IMAGE_ONLY_32 1595 0.41 0.24 0.49 198 XMPhish30 1550 0.73 1.26 0.48 199 FORGED_GMAIL_RCVD 1524 0.50 0.57 0.47 200 XMBSHREFv2 1498 0.40 0.27 0.46 ----------------------------------------------------------------------