Email: 423430 Autolearn: 0 AvgScore: 4.10 AvgScanTime: 1.31 sec Spam: 121603 Autolearn: 0 AvgScore: 14.41 AvgScanTime: 1.45 sec Ham: 301827 Autolearn: 0 AvgScore: -0.06 AvgScanTime: 1.25 sec Time Spent Running SA: 153.73 hours Time Spent Processing Spam: 49.10 hours Time Spent Processing Ham: 104.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 113849 87.63 93.62 85.21 2 DKIM_SIGNED 105865 79.03 87.06 75.79 3 XM_DK_Pass 101215 76.96 83.23 74.43 4 DKIM_VALID 100512 76.07 82.66 73.41 5 XM_B_Unicode 99767 72.85 82.04 69.14 6 RELAYCOUNTRY_US 97372 81.03 80.07 81.42 7 DCC_CHECK 90006 49.51 74.02 39.64 8 XM_B_SpammyWords 85045 53.55 69.94 46.94 9 DKIM_VALID_AU 80811 61.36 66.45 59.31 10 XMListUnsubscribeExists 79400 52.67 65.29 47.59 11 XM_B_Unicode3 60192 42.92 49.50 40.27 12 LOC_TINY_FONT_1 55843 33.86 45.92 29.00 13 BAYES_50 51139 56.02 42.05 61.64 14 XM_B_SpammyWords2 49278 26.61 40.52 21.00 15 T_SCC_BODY_TEXT_LINE 48626 41.44 39.99 42.02 16 XM_DK_Undo_02 46905 15.00 38.57 5.50 17 HTML_FONT_LOW_CONTRAST 43334 30.78 35.64 28.83 18 FVGT_m_MULTI_ODD 41677 28.32 34.27 25.92 19 T_KAM_HTML_FONT_INVALID 38418 23.73 31.59 20.56 20 BAYES_99 36831 11.47 30.29 3.88 21 DKIM_VALID_EF 35964 29.84 29.57 29.95 22 MIME_HTML_ONLY 35628 23.77 29.30 21.54 23 TR_XM_DKIM_Undo 34585 10.25 28.44 2.93 24 DCC_CHECK_NEGATIVE 29626 49.99 24.36 60.32 25 XMSubLong 29023 22.29 23.87 21.65 26 BAYES_999 28694 8.89 23.60 2.96 27 T_TM2_M_HEADER_IN_MSG 27239 28.08 22.40 30.37 28 XM_Multi_Part_URI 26263 15.97 21.60 13.70 29 TR_DCC_Bayes_99 25569 7.26 21.03 1.71 30 TR_XM_DK_Unsub 24743 15.07 20.35 12.94 31 XM_B_Unsub 23749 12.38 19.53 9.49 32 TR_XM_BayesUnsub 22922 10.43 18.85 7.04 33 RELAYCOUNTRY_META 22162 9.59 18.22 6.11 34 UNPARSEABLE_RELAY 21724 14.14 17.86 12.63 35 XM_B_SpammyWords3 17848 7.76 14.68 4.97 36 TR_MAX_INTL_RELAY 16893 8.13 13.89 5.81 37 TR_XM_SpammyRelay 16291 6.88 13.40 4.26 38 RCVD_IN_MSPIKE_H2 16287 14.50 13.39 14.95 39 LOTS_OF_MONEY 15593 8.00 12.82 6.06 40 BOTNET_IPINHOSTNAME 15548 6.11 12.79 3.41 41 FSL_BULK_SIG 14697 10.17 12.09 9.39 42 TR_XM_SpammyWords4 13768 6.26 11.32 4.22 43 TR_XM_SpammyWords2 13317 3.61 10.95 0.65 44 BOTNET 12598 4.07 10.36 1.54 45 XM_Evil_Numbers_Gen 11242 9.59 9.24 9.73 46 LotsOfNums_01 11160 9.03 9.18 8.97 47 TR_XM_UnparsRelay 11095 3.92 9.12 1.82 48 XM_B_Phish_Phrases 11050 6.01 9.09 4.77 49 BAYES_80 10546 5.00 8.67 3.52 50 RELAYCOUNTRY_CA 9542 4.56 7.85 3.23 51 BAYES_60 9454 6.73 7.77 6.31 52 XM_Body_Dirty_Words 9095 4.34 7.48 3.08 53 RCVD_IN_BL_SPAMCOP_NET 8556 2.51 7.04 0.68 54 RCVD_IN_MSPIKE_WL 8499 10.79 6.99 12.33 55 UNTRUSTED_Relay 8191 2.95 6.74 1.42 56 XMSubMetaSx_00 7805 4.40 6.42 3.58 57 HTML_IMAGE_RATIO_02 7758 4.93 6.38 4.34 58 XM_H_Long_From01 7361 5.91 6.05 5.85 59 MPART_ALT_DIFF 7264 4.90 5.97 4.47 60 XM_B_PhoneNumber 7063 8.16 5.81 9.11 61 XM_UncommonTLD01 7055 4.60 5.80 4.11 62 TooManyTo_001 6192 7.39 5.09 8.31 63 HTML_IMAGE_RATIO_04 6133 4.47 5.04 4.23 64 TR_XM_PhishingBody 6050 2.61 4.98 1.65 65 XM_B_Investor 6032 2.60 4.96 1.64 66 BAYES_95 5998 3.04 4.93 2.28 67 XM_OfRef6 5744 2.23 4.72 1.23 68 TM2_M_VERY_LONG_WORD 5621 2.38 4.62 1.47 69 XM_B_SpammyTLD 5582 3.38 4.59 2.89 70 XM_H_GMP 5545 5.39 4.56 5.72 71 XMStrtUSub 5471 5.11 4.50 5.36 72 T_XMDrugObfuBody_14 5427 2.76 4.46 2.08 73 DKIM_INVALID 5353 2.96 4.40 2.38 74 XMSexyCombo_05 5221 2.25 4.29 1.42 75 MIME_QP_LONG_LINE 5170 4.43 4.25 4.50 76 RCVD_IN_MSPIKE_H3 5149 5.43 4.23 5.91 77 MIME_HTML_MOSTLY 5125 2.79 4.21 2.21 78 TR_XM_SpammyWords5 4713 2.05 3.88 1.32 79 XM_CamelCaseFrm001 4680 2.60 3.85 2.10 80 XMNumbers 4562 3.79 3.75 3.81 81 MIME_HTML_ONLY_MULTI 4230 2.91 3.48 2.68 82 TR_XM_NoHeaderRelay 4144 1.11 3.41 0.18 83 ANY_BOUNCE_MESSAGE 4109 5.57 3.38 6.45 84 BOUNCE_MESSAGE 4104 5.57 3.37 6.45 85 HTML_IMAGE_RATIO_06 3992 3.01 3.28 2.90 86 XM_UB50 3867 1.58 3.18 0.93 87 XM_B_Unsub2 3817 1.89 3.14 1.38 88 T_XMDrugObfuBody_08 3745 2.10 3.08 1.70 89 XM_SPF_SoftFail 3645 1.92 3.00 1.49 90 RCVD_IN_VALIDITY_SAFE 3556 3.79 2.92 4.14 91 XMDiploma_00 3480 1.75 2.86 1.30 92 RCVD_IN_VALIDITY_RPBL 3413 0.88 2.81 0.10 93 XM_URI_RBL 3379 1.08 2.78 0.40 94 MAILING_LIST_MULTI 3282 2.81 2.70 2.86 95 XM_B_URI_Unicode 3237 2.08 2.66 1.85 96 XM_B_SpammyWords4 3203 1.37 2.63 0.87 97 TR_XM_SPAMCOP 3048 0.86 2.51 0.19 98 RELAYCOUNTRY_AU 3046 1.28 2.50 0.79 99 T_TooManySym_01 3012 4.86 2.48 5.81 100 T_FILL_THIS_FORM_SHORT 3010 1.43 2.48 1.02 101 HTML_IMAGE_RATIO_08 2903 2.17 2.39 2.08 102 USER_IN_DEF_DKIM_WL 2892 10.39 2.38 13.62 103 TM2_M_URI_OPT_OUT 2818 1.78 2.32 1.57 104 XMBody_17 2806 1.02 2.31 0.50 105 ALL_TRUSTED 2740 10.21 2.25 13.41 106 RCVD_IN_VALIDITY_CERTIFIED 2685 2.90 2.21 3.17 107 RCVD_IN_MSPIKE_H5 2665 4.43 2.19 5.34 108 FROM_EXCESS_BASE64 2633 1.98 2.17 1.91 109 TR_XM_INV_DKIM 2540 0.72 2.09 0.16 110 SUBJ_ALL_CAPS 2497 1.53 2.05 1.32 111 XMStockSpam_06 2481 1.47 2.04 1.24 112 T_REMOTE_IMAGE 2462 3.55 2.02 4.16 113 T_XMHurry_00 2406 0.90 1.98 0.47 114 BAYES_40 2384 4.50 1.96 5.53 115 XMBrknScrpt_02 2363 1.30 1.94 1.04 116 SpammyFromTLD_01 2298 1.04 1.89 0.70 117 HTML_MIME_NO_HTML_TAG 2297 2.44 1.89 2.66 118 KHOP_HELO_FCRDNS 2214 2.07 1.82 2.16 119 XMGenDplmaNmb 2197 1.03 1.81 0.71 120 XM_DK_Undo_01 2150 1.77 1.77 1.76 121 LONG_JUNK_URI 2120 1.26 1.74 1.07 122 SHORT_URI 2100 0.99 1.73 0.70 123 T_XMDrugObfuBody_00 2054 1.77 1.69 1.80 124 TR_LOTS_OF_MONEY3 2045 0.69 1.68 0.29 125 DKIM_ADSP_NXDOMAIN 2044 0.72 1.68 0.34 126 SpammyFromTLD_02 2043 0.84 1.68 0.50 127 RCVD_IN_ZEN_LASTEXTERNAL 1950 0.46 1.60 0.00 128 SHORTCIRCUIT 1950 0.46 1.60 0.00 129 XMPhish30 1849 0.79 1.52 0.50 130 MPART_ALT_DIFF_COUNT 1764 0.80 1.45 0.53 131 RCVD_IN_MSPIKE_BL 1761 0.76 1.45 0.49 132 TR_XM_MSPIKECOMBO 1747 0.76 1.44 0.49 133 XM_SendGrid 1745 1.50 1.43 1.52 134 T_MONEY_PERCENT 1740 0.55 1.43 0.20 135 TR_LOTS_OF_MONEY2 1740 0.55 1.43 0.20 136 XMPhish14 1736 0.77 1.43 0.51 137 URI_HEX 1723 1.17 1.42 1.07 138 BOTNET_NORDNS 1699 0.41 1.40 0.01 139 DIET_1 1677 0.56 1.38 0.24 140 XM_ProductURIs 1651 0.83 1.36 0.62 141 XMSubMetaI_00 1623 0.68 1.33 0.42 142 XMBdyGiftCard01 1599 0.67 1.31 0.41 143 XM_B_COPY_HTML 1579 0.82 1.30 0.63 144 RCVD_IN_PSBL 1555 0.59 1.28 0.31 145 XM_H_Long_From02 1550 0.97 1.27 0.85 146 XM_B_Phish66 1530 0.62 1.26 0.36 147 URI_NOVOWEL 1525 1.47 1.25 1.56 148 URI_TRY_3LD 1494 0.81 1.23 0.64 149 XM_B_DNDMA 1494 0.74 1.23 0.54 150 XM_B_SEO 1476 0.51 1.21 0.23 151 XMBounce_01 1474 0.36 1.21 0.02 152 RELAYCOUNTRY_FR 1436 0.53 1.18 0.27 153 BAYES_20 1435 3.00 1.18 3.74 154 XMSexyCombo_01 1420 0.54 1.17 0.29 155 RDNS_DYNAMIC 1420 0.46 1.17 0.18 156 HTML_TAG_BALANCE_BODY 1413 0.70 1.16 0.52 157 TR_Mismatch_TLD_02 1400 0.39 1.15 0.08 158 TR_XM_PHPForged 1392 0.57 1.14 0.33 159 TR_XM_PHPDW 1385 0.56 1.14 0.33 160 TR_XM_FormFill2 1371 0.57 1.13 0.34 161 RCVD_IN_PBL 1371 0.85 1.13 0.74 162 XM_H_PHPOS 1338 0.54 1.10 0.32 163 TR_XM_SEO4 1324 0.39 1.09 0.10 164 HTTPS_HTTP_MISMATCH 1320 0.83 1.09 0.73 165 XM_UB99 1307 0.31 1.07 0.00 166 TR_XM_RelayPhish 1292 0.37 1.06 0.10 167 RCVD_IN_MSPIKE_L3 1290 0.65 1.06 0.48 168 SHOPIFY_IMG_NOT_RCVD_SFY 1288 0.53 1.06 0.32 169 XM_OfRef7 1286 0.54 1.06 0.33 170 TR_XM_SpammyWords3 1285 0.42 1.06 0.17 171 TVD_RCVD_IP 1269 0.88 1.04 0.82 172 XMBody_78 1268 0.52 1.04 0.31 173 XM_B_COVIDMETA 1264 0.46 1.04 0.23 174 XPRIO 1253 0.31 1.03 0.01 175 XMReplyNow 1230 0.43 1.01 0.20 176 RELAYCOUNTRY_TH 1226 0.29 1.01 0.00 177 XM_PDF 1220 3.76 1.00 4.87 178 RCVD_IN_IADB_LISTED 1184 2.94 0.97 3.73 179 DKIM_ADSP_CUSTOM_MED 1181 0.87 0.97 0.83 180 XM_DIRTYINTL 1164 0.35 0.96 0.10 181 TR_MetaPhish_Combo_01 1161 0.72 0.95 0.62 182 TR_Symld_Words 1147 1.28 0.94 1.42 183 HTML_IMAGE_ONLY_20 1143 0.58 0.94 0.43 184 TR_XM_Base64_M1 1140 0.76 0.94 0.68 185 T_STY_INVIS_DIRECT 1125 0.63 0.93 0.51 186 XM_UB60 1123 0.31 0.92 0.06 187 TR_XM_DK_SendGrid 1110 0.99 0.91 1.01 188 XMHTML_After_End 1102 0.55 0.91 0.41 189 HELO_DYNAMIC_SPLIT_IP 1094 0.26 0.90 0.01 190 RCVD_IN_IADB_SPF 1088 2.55 0.89 3.22 191 BAYES_00 1086 8.02 0.89 10.89 192 RCVD_IN_IADB_DK 1070 2.20 0.88 2.73 193 TR_XM_InvalidRelay 1066 0.26 0.88 0.02 194 RCVD_IN_SORBS_DUL 1060 0.27 0.87 0.03 195 RCVD_IN_IADB_SENDERID 1055 2.25 0.87 2.81 196 TO_NO_BRKTS_HTML_ONLY 1045 0.53 0.86 0.40 197 URIBL_BLACK 1035 0.29 0.85 0.06 198 MultiRelay_CC 1035 0.35 0.85 0.15 199 XM_GoogleGroups 1012 1.24 0.83 1.41 200 LongTLD 1007 0.59 0.83 0.49 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 257196 87.63 93.62 85.21 2 RELAYCOUNTRY_US 245733 81.03 80.07 81.42 3 DKIM_SIGNED 228765 79.03 87.06 75.79 4 XM_DK_Pass 224646 76.96 83.23 74.43 5 DKIM_VALID 221577 76.07 82.66 73.41 6 XM_B_Unicode 208696 72.85 82.04 69.14 7 BAYES_50 186046 56.02 42.05 61.64 8 DCC_CHECK_NEGATIVE 182059 49.99 24.36 60.32 9 DKIM_VALID_AU 179012 61.36 66.45 59.31 10 XMListUnsubscribeExists 143640 52.67 65.29 47.59 11 XM_B_SpammyWords 141683 53.55 69.94 46.94 12 T_SCC_BODY_TEXT_LINE 126835 41.44 39.99 42.02 13 XM_B_Unicode3 121558 42.92 49.50 40.27 14 DCC_CHECK 119645 49.51 74.02 39.64 15 T_TM2_M_HEADER_IN_MSG 91667 28.08 22.40 30.37 16 DKIM_VALID_EF 90386 29.84 29.57 29.95 17 LOC_TINY_FONT_1 87531 33.86 45.92 29.00 18 HTML_FONT_LOW_CONTRAST 87012 30.78 35.64 28.83 19 FVGT_m_MULTI_ODD 78230 28.32 34.27 25.92 20 XMSubLong 65356 22.29 23.87 21.65 21 MIME_HTML_ONLY 65020 23.77 29.30 21.54 22 XM_B_SpammyWords2 63391 26.61 40.52 21.00 23 T_KAM_HTML_FONT_INVALID 62041 23.73 31.59 20.56 24 RCVD_IN_MSPIKE_H2 45130 14.50 13.39 14.95 25 XM_Multi_Part_URI 41350 15.97 21.60 13.70 26 USER_IN_DEF_DKIM_WL 41097 10.39 2.38 13.62 27 ALL_TRUSTED 40478 10.21 2.25 13.41 28 TR_XM_DK_Unsub 39057 15.07 20.35 12.94 29 UNPARSEABLE_RELAY 38134 14.14 17.86 12.63 30 RCVD_IN_MSPIKE_WL 37203 10.79 6.99 12.33 31 BAYES_00 32869 8.02 0.89 10.89 32 XM_Evil_Numbers_Gen 29376 9.59 9.24 9.73 33 XM_B_Unsub 28656 12.38 19.53 9.49 34 FSL_BULK_SIG 28353 10.17 12.09 9.39 35 XM_B_PhoneNumber 27506 8.16 5.81 9.11 36 LotsOfNums_01 27073 9.03 9.18 8.97 37 TooManyTo_001 25080 7.39 5.09 8.31 38 TR_XM_DK_Bayes 22912 5.61 0.69 7.59 39 TR_XM_DK_Bayes1 22492 5.51 0.69 7.45 40 XM_DKIMWhitelistDomains 22125 5.24 0.06 7.33 41 IN_ZIMBRA_NJ_WHITELIST 21931 5.21 0.11 7.27 42 TR_XM_BayesUnsub 21261 10.43 18.85 7.04 43 ANY_BOUNCE_MESSAGE 19475 5.57 3.38 6.45 44 BOUNCE_MESSAGE 19464 5.57 3.37 6.45 45 BAYES_60 19051 6.73 7.77 6.31 46 TR_XM_DK_Bayes2 18705 4.57 0.53 6.20 47 RELAYCOUNTRY_META 18437 9.59 18.22 6.11 48 LOTS_OF_MONEY 18298 8.00 12.82 6.06 49 RCVD_IN_MSPIKE_H3 17826 5.43 4.23 5.91 50 XM_H_Long_From01 17663 5.91 6.05 5.85 51 T_TooManySym_01 17547 4.86 2.48 5.81 52 TR_MAX_INTL_RELAY 17533 8.13 13.89 5.81 53 XM_H_GMP 17259 5.39 4.56 5.72 54 BAYES_40 16679 4.50 1.96 5.53 55 XM_DK_Undo_02 16607 15.00 38.57 5.50 56 XMStrtUSub 16174 5.11 4.50 5.36 57 RCVD_IN_MSPIKE_H5 16105 4.43 2.19 5.34 58 XM_B_SpammyWords3 15014 7.76 14.68 4.97 59 XM_PDF 14687 3.76 1.00 4.87 60 XM_B_Phish_Phrases 14405 6.01 9.09 4.77 61 MIME_QP_LONG_LINE 13596 4.43 4.25 4.50 62 MPART_ALT_DIFF 13499 4.90 5.97 4.47 63 HTML_IMAGE_RATIO_02 13108 4.93 6.38 4.34 64 TR_XM_SpammyRelay 12853 6.88 13.40 4.26 65 HTML_IMAGE_RATIO_04 12781 4.47 5.04 4.23 66 TR_XM_SpammyWords4 12741 6.26 11.32 4.22 67 T_REMOTE_IMAGE 12563 3.55 2.02 4.16 68 RCVD_IN_VALIDITY_SAFE 12492 3.79 2.92 4.14 69 XM_UncommonTLD01 12418 4.60 5.80 4.11 70 BAYES_99 11717 11.47 30.29 3.88 71 XMNumbers 11485 3.79 3.75 3.81 72 BAYES_20 11283 3.00 1.18 3.74 73 RCVD_IN_IADB_LISTED 11254 2.94 0.97 3.73 74 XMSubMetaSx_00 10805 4.40 6.42 3.58 75 BAYES_80 10622 5.00 8.67 3.52 76 BOTNET_IPINHOSTNAME 10304 6.11 12.79 3.41 77 RELAYCOUNTRY_CA 9763 4.56 7.85 3.23 78 RCVD_IN_IADB_SPF 9723 2.55 0.89 3.22 79 RCVD_IN_VALIDITY_CERTIFIED 9575 2.90 2.21 3.17 80 XM_Body_Dirty_Words 9292 4.34 7.48 3.08 81 T_TooManySym_02 9285 2.39 0.69 3.08 82 TooManyTo_002 9189 2.35 0.64 3.04 83 BAYES_999 8930 8.89 23.60 2.96 84 TR_XM_DKIM_Undo 8830 10.25 28.44 2.93 85 HTML_IMAGE_RATIO_06 8761 3.01 3.28 2.90 86 XM_B_SpammyTLD 8735 3.38 4.59 2.89 87 MAILING_LIST_MULTI 8623 2.81 2.70 2.86 88 RCVD_IN_IADB_SENDERID 8490 2.25 0.87 2.81 89 RCVD_IN_IADB_DK 8249 2.20 0.88 2.73 90 MIME_HTML_ONLY_MULTI 8098 2.91 3.48 2.68 91 HTML_MIME_NO_HTML_TAG 8039 2.44 1.89 2.66 92 RCVD_IN_IADB_VOUCHED 8030 2.00 0.34 2.66 93 INVALID_MSGID 7238 1.79 0.28 2.40 94 DKIM_INVALID 7188 2.96 4.40 2.38 95 BAYES_95 6892 3.04 4.93 2.28 96 MIME_HTML_MOSTLY 6681 2.79 4.21 2.21 97 BAYES_05 6655 1.76 0.64 2.20 98 KHOP_HELO_FCRDNS 6530 2.07 1.82 2.16 99 XM_CamelCaseFrm001 6325 2.60 3.85 2.10 100 HTML_IMAGE_RATIO_08 6287 2.17 2.39 2.08 101 T_XMDrugObfuBody_14 6266 2.76 4.46 2.08 102 TO_MALFORMED 6265 1.60 0.44 2.08 103 FROM_EXCESS_BASE64 5758 1.98 2.17 1.91 104 RCVD_IN_IADB_OPTIN 5611 1.38 0.20 1.86 105 XM_B_URI_Unicode 5588 2.08 2.66 1.85 106 TR_XM_UnparsRelay 5504 3.92 9.12 1.82 107 T_XMDrugObfuBody_00 5431 1.77 1.69 1.80 108 XM_DK_Undo_01 5326 1.77 1.77 1.76 109 T_TVD_MIME_NO_HEADERS 5177 1.24 0.05 1.72 110 TR_DCC_Bayes_99 5172 7.26 21.03 1.71 111 T_XMDrugObfuBody_08 5129 2.10 3.08 1.70 112 TooManyTo_003 5123 1.37 0.56 1.70 113 TR_XM_PhishingBody 4993 2.61 4.98 1.65 114 XM_B_Investor 4958 2.60 4.96 1.64 115 TM2_M_URI_OPT_OUT 4726 1.78 2.32 1.57 116 URI_NOVOWEL 4697 1.47 1.25 1.56 117 BOTNET 4651 4.07 10.36 1.54 118 XM_SendGrid 4602 1.50 1.43 1.52 119 XM_SPF_SoftFail 4501 1.92 3.00 1.49 120 TM2_M_VERY_LONG_WORD 4438 2.38 4.62 1.47 121 IN_HORDE_ADDRESS_BOOK 4319 1.05 0.09 1.43 122 UNTRUSTED_Relay 4292 2.95 6.74 1.42 123 XMSexyCombo_05 4292 2.25 4.29 1.42 124 TR_Symld_Words 4287 1.28 0.94 1.42 125 XM_GoogleGroups 4252 1.24 0.83 1.41 126 XM_B_Unsub2 4168 1.89 3.14 1.38 127 TR_XM_SpammyWords5 3981 2.05 3.88 1.32 128 SUBJ_ALL_CAPS 3980 1.53 2.05 1.32 129 TooManyTo_004 3930 1.07 0.50 1.30 130 XMDiploma_00 3922 1.75 2.86 1.30 131 T_TooManySym_03 3850 0.97 0.20 1.28 132 XMStockSpam_06 3744 1.47 2.04 1.24 133 XMGappySubj_01 3739 0.95 0.24 1.24 134 XM_OfRef6 3719 2.23 4.72 1.23 135 XMCapTrack 3371 0.91 0.40 1.12 136 RCVD_IN_MSPIKE_H4 3272 0.93 0.56 1.08 137 HELO_NODOT 3230 0.85 0.30 1.07 138 LONG_JUNK_URI 3228 1.26 1.74 1.07 139 HELO_NO_DOMAIN 3223 0.84 0.29 1.07 140 URI_HEX 3216 1.17 1.42 1.07 141 TVD_SPACE_RATIO 3155 0.80 0.19 1.05 142 TooManyTo_005 3148 0.88 0.47 1.04 143 XMBrknScrpt_02 3128 1.30 1.94 1.04 144 T_FILL_THIS_FORM_SHORT 3065 1.43 2.48 1.02 145 TR_XM_DK_SendGrid 3062 0.99 0.91 1.01 146 XM_UB50 2812 1.58 3.18 0.93 147 FROM_GOV_DKIM_AU 2796 0.70 0.15 0.93 148 XM_ShortIntro_01 2704 0.80 0.55 0.90 149 XM_B_SpammyWords4 2619 1.37 2.63 0.87 150 XM_H_Long_From02 2552 0.97 1.27 0.85 151 DKIM_ADSP_CUSTOM_MED 2506 0.87 0.97 0.83 152 TVD_RCVD_IP 2474 0.88 1.04 0.82 153 RELAYCOUNTRY_AU 2374 1.28 2.50 0.79 154 XM_B_FormFill 2248 0.54 0.03 0.74 155 XMNoVowels 2242 0.72 0.68 0.74 156 RCVD_IN_PBL 2224 0.85 1.13 0.74 157 HTTPS_HTTP_MISMATCH 2209 0.83 1.09 0.73 158 XMGenDplmaNmb 2157 1.03 1.81 0.71 159 TM2_M_OBFU_COMMENT 2123 0.73 0.80 0.70 160 SpammyFromTLD_01 2114 1.04 1.89 0.70 161 SHORT_URI 2107 0.99 1.73 0.70 162 XM_H_PHPMailer 2069 0.67 0.63 0.69 163 TR_XM_Base64_M1 2058 0.76 0.94 0.68 164 RCVD_IN_BL_SPAMCOP_NET 2054 2.51 7.04 0.68 165 T_OBFU_PDF_ATTACH 2019 0.52 0.16 0.67 166 TR_XM_SpammyWords2 1954 3.61 10.95 0.65 167 URI_TRY_3LD 1923 0.81 1.23 0.64 168 XM_B_COPY_HTML 1898 0.82 1.30 0.63 169 HTML_IMAGE_ONLY_32 1885 0.49 0.16 0.62 170 TR_MetaPhish_Combo_01 1872 0.72 0.95 0.62 171 XM_ProductURIs 1864 0.83 1.36 0.62 172 XMGappySubj_02 1825 0.44 0.04 0.60 173 XMSubMetaSxObfu_03 1693 0.58 0.62 0.56 174 T_Symld_Words_02 1649 0.59 0.69 0.55 175 XMLngstWrd_00 1641 0.53 0.50 0.54 176 XM_B_DNDMA 1630 0.74 1.23 0.54 177 NML_ADSP_CUSTOM_MED 1625 0.61 0.80 0.54 178 RELAYCOUNTRY_GB 1617 0.61 0.81 0.54 179 MPART_ALT_DIFF_COUNT 1613 0.80 1.45 0.53 180 SHORT_URI_2 1599 0.40 0.09 0.53 181 SHORT_URI_3 1595 0.41 0.11 0.53 182 HTML_TAG_BALANCE_BODY 1556 0.70 1.16 0.52 183 XMBody_95 1548 0.43 0.21 0.51 184 T_STY_INVIS_DIRECT 1542 0.63 0.93 0.51 185 J_POPCORN_WO_D 1536 0.51 0.50 0.51 186 XMPhish14 1531 0.77 1.43 0.51 187 XMBSHREFv2 1528 0.47 0.38 0.51 188 XMSlimDrugH 1527 0.54 0.63 0.51 189 XMPhish30 1502 0.79 1.52 0.50 190 FORGED_GMAIL_RCVD 1498 0.55 0.68 0.50 191 XMBody_17 1496 1.02 2.31 0.50 192 SpammyFromTLD_02 1495 0.84 1.68 0.50 193 MSGID_FROM_MTA_HEADER 1487 0.43 0.28 0.49 194 LongTLD 1472 0.59 0.83 0.49 195 RCVD_IN_MSPIKE_BL 1470 0.76 1.45 0.49 196 TR_XM_MSPIKECOMBO 1469 0.76 1.44 0.49 197 RCVD_IN_MSPIKE_L3 1457 0.65 1.06 0.48 198 XMLngstWrd_01 1450 0.47 0.44 0.48 199 FILL_THIS_FORM 1429 0.41 0.25 0.47 200 T_XMHurry_00 1406 0.90 1.98 0.47 ----------------------------------------------------------------------