Email: 448247 Autolearn: 0 AvgScore: 5.10 AvgScanTime: 1.45 sec Spam: 140823 Autolearn: 0 AvgScore: 14.41 AvgScanTime: 1.57 sec Ham: 307424 Autolearn: 0 AvgScore: 0.84 AvgScanTime: 1.39 sec Time Spent Running SA: 180.38 hours Time Spent Processing Spam: 61.59 hours Time Spent Processing Ham: 118.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 138728 99.20 98.51 99.52 2 HTML_MESSAGE 134431 89.82 95.46 87.24 3 DKIM_SIGNED 125533 80.46 89.14 76.48 4 XM_B_Unicode 119596 75.55 84.93 71.25 5 XM_DK_Pass 118658 78.08 84.26 75.25 6 DKIM_VALID 117747 77.21 83.61 74.28 7 RELAYCOUNTRY_US 114146 81.70 81.06 81.99 8 DCC_CHECK 107244 52.02 76.16 40.97 9 XM_B_SpammyWords 97481 52.90 69.22 45.42 10 XMListUnsubscribeExists 95486 55.49 67.81 49.84 11 DKIM_VALID_AU 92977 61.88 66.02 59.99 12 XM_B_Unicode3 67541 43.05 47.96 40.80 13 LOC_TINY_FONT_1 67214 34.47 47.73 28.39 14 BAYES_50 59271 54.91 42.09 60.79 15 XM_DK_Undo_02 56016 15.65 39.78 4.60 16 XM_B_SpammyWords2 55826 25.77 39.64 19.41 17 HTML_FONT_LOW_CONTRAST 52355 31.02 37.18 28.20 18 FVGT_m_MULTI_ODD 46651 28.90 33.13 26.97 19 MIME_HTML_ONLY 44522 23.64 31.62 19.99 20 T_KAM_HTML_FONT_INVALID 44315 25.10 31.47 22.18 21 DKIM_VALID_EF 43955 30.84 31.21 30.67 22 BAYES_99 42424 11.70 30.13 3.26 23 TR_XM_DKIM_Undo 40419 10.16 28.70 1.66 24 XMSubLong 34736 24.21 24.67 24.00 25 BAYES_999 32648 8.98 23.18 2.47 26 TR_XM_DK_Unsub 32568 16.89 23.13 14.03 27 DCC_CHECK_NEGATIVE 31675 47.51 22.49 58.98 28 T_TM2_M_HEADER_IN_MSG 31271 27.39 22.21 29.76 29 TR_DCC_Bayes_99 29913 7.49 21.24 1.19 30 XM_Multi_Part_URI 29183 16.20 20.72 14.13 31 XM_B_Unsub 28550 13.73 20.27 10.73 32 TR_XM_BayesUnsub 27592 11.66 19.59 8.02 33 RELAYCOUNTRY_META 25465 8.20 18.08 3.67 34 RCVD_IN_MSPIKE_H2 24824 16.69 17.63 16.26 35 UNPARSEABLE_RELAY 23457 13.51 16.66 12.07 36 XM_B_SpammyWords3 20202 7.76 14.35 4.75 37 BOTNET_IPINHOSTNAME 19781 6.56 14.05 3.13 38 TR_MAX_INTL_RELAY 19584 8.59 13.91 6.16 39 TR_XM_SpammyRelay 18951 5.55 13.46 1.93 40 LOTS_OF_MONEY 17715 8.33 12.58 6.38 41 FSL_BULK_SIG 16637 9.58 11.81 8.56 42 TR_XM_SpammyWords4 15722 6.48 11.16 4.34 43 TR_XM_SpammyWords2 15035 3.62 10.68 0.39 44 BOTNET 14823 4.17 10.53 1.26 45 XM_B_Phish_Phrases 13822 6.93 9.82 5.61 46 RCVD_IN_BL_SPAMCOP_NET 13704 3.41 9.73 0.52 47 XM_Evil_Numbers_Gen 13458 9.12 9.56 8.91 48 RCVD_IN_MSPIKE_WL 12695 14.23 9.01 16.62 49 BAYES_80 12346 5.39 8.77 3.85 50 TR_XM_UnparsRelay 12337 3.87 8.76 1.63 51 BAYES_60 11551 7.48 8.20 7.15 52 LotsOfNums_01 10154 7.79 7.21 8.05 53 XM_B_PhoneNumber 9799 9.65 6.96 10.88 54 HTML_IMAGE_RATIO_02 9735 5.60 6.91 4.99 55 RELAYCOUNTRY_CA 9535 2.75 6.77 0.91 56 XM_Body_Dirty_Words 9238 4.01 6.56 2.85 57 UNTRUSTED_Relay 9101 3.10 6.46 1.56 58 XMSubMetaSx_00 9076 4.61 6.44 3.77 59 MPART_ALT_DIFF 9067 4.75 6.44 3.98 60 RCVD_IN_MSPIKE_BL 8898 2.30 6.32 0.46 61 TR_XM_MSPIKECOMBO 8896 2.30 6.32 0.46 62 HTML_IMAGE_RATIO_04 8055 4.85 5.72 4.46 63 DKIM_INVALID 7786 3.24 5.53 2.20 64 XM_H_Long_From01 7730 5.79 5.49 5.93 65 XM_H_GMP 7514 5.86 5.34 6.10 66 XM_UncommonTLD01 7440 4.47 5.28 4.10 67 TR_XM_PhishingBody 7307 2.82 5.19 1.74 68 XM_B_Investor 7110 2.63 5.05 1.52 69 BAYES_95 6841 3.11 4.86 2.31 70 T_XMDrugObfuBody_14 6547 2.84 4.65 2.01 71 RCVD_IN_VALIDITY_RPBL 6479 1.59 4.60 0.22 72 TooManyTo_001 6428 7.59 4.56 8.98 73 XM_OfRef6 6162 2.08 4.38 1.03 74 XMSexyCombo_05 5991 2.55 4.25 1.76 75 XMStrtUSub 5936 4.64 4.22 4.83 76 MIME_QP_LONG_LINE 5909 5.15 4.20 5.58 77 RCVD_IN_MSPIKE_H3 5843 6.47 4.15 7.53 78 TR_XM_SpammyWords3 5778 1.43 4.10 0.20 79 XM_B_SpammyTLD 5657 3.46 4.02 3.21 80 TR_XM_NoHeaderRelay 5639 1.38 4.00 0.18 81 XMNumbers 5624 4.00 3.99 4.00 82 MIME_HTML_MOSTLY 5456 2.80 3.87 2.31 83 TR_XM_SPAMCOP 5455 1.29 3.87 0.10 84 TM2_M_VERY_LONG_WORD 5390 2.08 3.83 1.28 85 XM_UB50 5235 1.85 3.72 0.99 86 MIME_HTML_ONLY_MULTI 5041 2.73 3.58 2.35 87 TR_XM_SpammyWords5 4889 2.02 3.47 1.36 88 XM_CamelCaseFrm001 4845 2.54 3.44 2.13 89 HTML_IMAGE_RATIO_06 4833 3.47 3.43 3.49 90 RCVD_IN_MSPIKE_L3 4610 1.16 3.27 0.19 91 XM_URI_RBL 4492 1.22 3.19 0.31 92 TM2_M_URI_OPT_OUT 4355 2.13 3.09 1.69 93 XM_SPF_SoftFail 4305 1.92 3.06 1.40 94 XMDiploma_00 4225 2.41 3.00 2.13 95 RELAYCOUNTRY_AU 4197 1.33 2.98 0.57 96 XM_B_Unsub2 4175 1.95 2.96 1.48 97 T_TooManySym_01 4088 4.83 2.90 5.71 98 HTML_IMAGE_RATIO_08 4015 2.32 2.85 2.07 99 T_XMDrugObfuBody_08 4008 1.97 2.85 1.57 100 RCVD_IN_MSPIKE_H4 3946 3.16 2.80 3.33 101 T_FILL_THIS_FORM_SHORT 3902 1.37 2.77 0.73 102 XM_B_URI_Unicode 3557 2.38 2.53 2.32 103 USER_IN_DEF_DKIM_WL 3501 9.98 2.49 13.41 104 XM_B_SpammyWords4 3432 1.18 2.44 0.60 105 TR_XM_INV_DKIM 3232 0.79 2.30 0.10 106 ALL_TRUSTED 3213 10.95 2.28 14.93 107 MAILING_LIST_MULTI 3187 2.72 2.26 2.92 108 XMBody_17 3186 1.01 2.26 0.44 109 T_XMHurry_00 3132 1.17 2.22 0.69 110 XMStockSpam_06 3037 1.69 2.16 1.48 111 DKIM_ADSP_NXDOMAIN 3001 0.86 2.13 0.27 112 RCVD_IN_VALIDITY_SAFE 2951 3.38 2.10 3.97 113 RCVD_IN_MSPIKE_H5 2906 4.60 2.06 5.76 114 XM_H_Long_From02 2860 1.24 2.03 0.88 115 XM_DK_Undo_01 2823 1.80 2.00 1.70 116 FROM_EXCESS_BASE64 2807 1.84 1.99 1.77 117 SpammyFromTLD_02 2779 1.02 1.97 0.58 118 XMPhish30 2665 1.03 1.89 0.63 119 XMBrknScrpt_02 2606 1.21 1.85 0.92 120 BAYES_40 2553 4.13 1.81 5.19 121 T_XMDrugObfuBody_00 2542 1.25 1.81 0.99 122 SpammyFromTLD_01 2483 1.09 1.76 0.78 123 URI_HEX 2456 1.40 1.74 1.25 124 TR_LOTS_OF_MONEY3 2417 0.77 1.72 0.33 125 XMGenDplmaNmb 2367 1.34 1.68 1.18 126 ANY_BOUNCE_MESSAGE 2353 2.95 1.67 3.54 127 BOUNCE_MESSAGE 2353 2.95 1.67 3.54 128 SUBJ_ALL_CAPS 2352 1.50 1.67 1.42 129 KHOP_HELO_FCRDNS 2338 1.43 1.66 1.32 130 T_REMOTE_IMAGE 2314 2.99 1.64 3.61 131 SCC_BODY_URI_ONLY 2287 2.08 1.62 2.29 132 URI_TRY_3LD 2209 0.84 1.57 0.51 133 RELAYCOUNTRY_FR 2203 0.70 1.56 0.30 134 RCVD_IN_MSPIKE_L4 2202 0.61 1.56 0.17 135 RCVD_IN_VALIDITY_CERTIFIED 2201 2.80 1.56 3.36 136 HTML_MIME_NO_HTML_TAG 2121 2.19 1.51 2.50 137 RCVD_IN_MSPIKE_L5 2085 0.53 1.48 0.10 138 TR_XM_MSPIKECOMBO2 2039 0.46 1.45 0.01 139 BAYES_20 2030 3.03 1.44 3.76 140 XM_ProductURIs 1952 0.93 1.39 0.72 141 XMBdyGiftCard01 1894 0.76 1.34 0.49 142 RCVD_IN_PSBL 1886 0.80 1.34 0.55 143 SHORTCIRCUIT 1885 0.42 1.34 0.00 144 RCVD_IN_ZEN_LASTEXTERNAL 1885 0.42 1.34 0.00 145 HTML_IMAGE_ONLY_20 1871 0.67 1.33 0.37 146 XM_B_DNDMA 1868 0.83 1.33 0.61 147 XM_B_Phish66 1866 0.65 1.33 0.35 148 XM_SendGrid 1851 1.41 1.31 1.45 149 MPART_ALT_DIFF_COUNT 1845 0.93 1.31 0.76 150 RDNS_DYNAMIC 1793 0.53 1.27 0.18 151 XM_B_COPY_HTML 1791 0.90 1.27 0.74 152 PDS_RDNS_DYNAMIC_FP 1748 0.42 1.24 0.04 153 TR_MetaPhish_Combo_01 1743 1.42 1.24 1.50 154 HTTPS_HTTP_MISMATCH 1731 0.88 1.23 0.72 155 TR_XM_RelayPhish 1695 0.42 1.20 0.05 156 XMSubMetaI_00 1673 0.76 1.19 0.57 157 XM_B_SEO 1667 0.52 1.18 0.22 158 RCVD_IN_IADB_LISTED 1643 2.82 1.17 3.58 159 TR_Symld_Words 1639 1.41 1.16 1.52 160 RELAYCOUNTRY_GB 1637 0.74 1.16 0.55 161 T_MONEY_PERCENT 1626 0.51 1.15 0.22 162 TR_LOTS_OF_MONEY2 1626 0.51 1.15 0.22 163 TR_XM_PHPForged 1554 0.65 1.10 0.44 164 XMHTML_After_End 1531 0.59 1.09 0.37 165 THIS_AD 1524 0.66 1.08 0.47 166 TR_XM_FormFill2 1520 0.64 1.08 0.44 167 TR_XM_PHPDW 1513 0.64 1.07 0.45 168 TR_Mismatch_TLD_02 1511 0.39 1.07 0.07 169 XM_HighProb1 1510 0.35 1.07 0.01 170 URI_NOVOWEL 1509 1.46 1.07 1.63 171 XMBounce_01 1508 0.35 1.07 0.02 172 XM_H_PHPOS 1482 0.63 1.05 0.43 173 DKIM_ADSP_CUSTOM_MED 1462 0.92 1.04 0.86 174 RCVD_IN_IADB_SPF 1458 2.48 1.04 3.14 175 SHOPIFY_IMG_NOT_RCVD_SFY 1450 0.51 1.03 0.27 176 TR_XM_SEO4 1441 0.38 1.02 0.09 177 TVD_RCVD_IP 1428 0.92 1.01 0.88 178 XM_B_COVIDMETA 1415 0.42 1.00 0.15 179 TR_XM_InvalidRelay 1401 0.32 0.99 0.01 180 URIBL_BLACK 1394 0.32 0.99 0.01 181 DIET_1 1393 0.50 0.99 0.27 182 RCVD_IN_IADB_DK 1379 2.17 0.98 2.72 183 RCVD_IN_IADB_SENDERID 1376 2.23 0.98 2.80 184 XMBody_78 1356 0.53 0.96 0.33 185 T_Symld_Words_02 1349 0.75 0.96 0.65 186 XMPhish14 1347 0.62 0.96 0.47 187 XM_DIRTYINTL 1336 0.35 0.95 0.07 188 TM2_M_A_HREF_HREF 1299 0.45 0.92 0.24 189 TR_XM_FormFill 1284 0.29 0.91 0.01 190 TM2_M_OBFU_COMMENT 1281 0.62 0.91 0.48 191 RCVD_IN_PBL 1267 0.75 0.90 0.69 192 RELAYCOUNTRY_CN 1253 0.30 0.89 0.03 193 TR_XM_Base64_M1 1249 0.77 0.89 0.71 194 XM_S_SpammyWords 1237 0.45 0.88 0.25 195 TR_XM_Spammywords 1236 0.45 0.88 0.25 196 XM_UB99 1236 0.28 0.88 0.00 197 XMReplyNow 1214 0.49 0.86 0.32 198 XM_GoogleGroups 1212 1.15 0.86 1.29 199 HTML_TAG_BALANCE_BODY 1205 0.68 0.86 0.60 200 HELO_DYNAMIC_SPLIT_IP 1195 0.28 0.85 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 305937 99.20 98.51 99.52 2 HTML_MESSAGE 268206 89.82 95.46 87.24 3 RELAYCOUNTRY_US 252051 81.70 81.06 81.99 4 DKIM_SIGNED 235107 80.46 89.14 76.48 5 XM_DK_Pass 231334 78.08 84.26 75.25 6 DKIM_VALID 228351 77.21 83.61 74.28 7 XM_B_Unicode 219053 75.55 84.93 71.25 8 BAYES_50 186869 54.91 42.09 60.79 9 DKIM_VALID_AU 184411 61.88 66.02 59.99 10 DCC_CHECK_NEGATIVE 181305 47.51 22.49 58.98 11 XMListUnsubscribeExists 153225 55.49 67.81 49.84 12 XM_B_SpammyWords 139626 52.90 69.22 45.42 13 DCC_CHECK 125938 52.02 76.16 40.97 14 XM_B_Unicode3 125420 43.05 47.96 40.80 15 DKIM_VALID_EF 94280 30.84 31.21 30.67 16 T_TM2_M_HEADER_IN_MSG 91502 27.39 22.21 29.76 17 LOC_TINY_FONT_1 87284 34.47 47.73 28.39 18 HTML_FONT_LOW_CONTRAST 86703 31.02 37.18 28.20 19 FVGT_m_MULTI_ODD 82902 28.90 33.13 26.97 20 XMSubLong 73783 24.21 24.67 24.00 21 T_KAM_HTML_FONT_INVALID 68174 25.10 31.47 22.18 22 MIME_HTML_ONLY 61442 23.64 31.62 19.99 23 XM_B_SpammyWords2 59665 25.77 39.64 19.41 24 RCVD_IN_MSPIKE_WL 51094 14.23 9.01 16.62 25 RCVD_IN_MSPIKE_H2 49979 16.69 17.63 16.26 26 ALL_TRUSTED 45889 10.95 2.28 14.93 27 XM_Multi_Part_URI 43454 16.20 20.72 14.13 28 TR_XM_DK_Unsub 43122 16.89 23.13 14.03 29 USER_IN_DEF_DKIM_WL 41220 9.98 2.49 13.41 30 UNPARSEABLE_RELAY 37110 13.51 16.66 12.07 31 BAYES_00 34995 8.04 0.74 11.38 32 XM_B_PhoneNumber 33461 9.65 6.96 10.88 33 XM_B_Unsub 32975 13.73 20.27 10.73 34 TooManyTo_001 27598 7.59 4.56 8.98 35 XM_Evil_Numbers_Gen 27405 9.12 9.56 8.91 36 FSL_BULK_SIG 26304 9.58 11.81 8.56 37 LotsOfNums_01 24744 7.79 7.21 8.05 38 TR_XM_BayesUnsub 24667 11.66 19.59 8.02 39 RCVD_IN_MSPIKE_H3 23159 6.47 4.15 7.53 40 TR_XM_DK_Bayes 22669 5.24 0.60 7.37 41 TR_XM_DK_Bayes1 22294 5.16 0.58 7.25 42 BAYES_60 21996 7.48 8.20 7.15 43 XM_DKIMWhitelistDomains 21746 4.85 0.01 7.07 44 LOTS_OF_MONEY 19627 8.33 12.58 6.38 45 TR_XM_DK_Bayes2 19060 4.40 0.49 6.20 46 TR_MAX_INTL_RELAY 18939 8.59 13.91 6.16 47 XM_H_GMP 18753 5.86 5.34 6.10 48 XM_H_Long_From01 18237 5.79 5.49 5.93 49 RCVD_IN_MSPIKE_H5 17707 4.60 2.06 5.76 50 T_TooManySym_01 17547 4.83 2.90 5.71 51 XM_B_Phish_Phrases 17261 6.93 9.82 5.61 52 MIME_QP_LONG_LINE 17157 5.15 4.20 5.58 53 BAYES_40 15946 4.13 1.81 5.19 54 HTML_IMAGE_RATIO_02 15347 5.60 6.91 4.99 55 XMStrtUSub 14851 4.64 4.22 4.83 56 XM_B_SpammyWords3 14598 7.76 14.35 4.75 57 XM_DK_Undo_02 14139 15.65 39.78 4.60 58 HTML_IMAGE_RATIO_04 13701 4.85 5.72 4.46 59 XM_PDF 13593 3.24 0.66 4.42 60 TR_XM_SpammyWords4 13327 6.48 11.16 4.34 61 XM_UncommonTLD01 12612 4.47 5.28 4.10 62 XMNumbers 12312 4.00 3.99 4.00 63 MPART_ALT_DIFF 12233 4.75 6.44 3.98 64 RCVD_IN_VALIDITY_SAFE 12218 3.38 2.10 3.97 65 BAYES_80 11826 5.39 8.77 3.85 66 XMSubMetaSx_00 11576 4.61 6.44 3.77 67 BAYES_20 11559 3.03 1.44 3.76 68 RELAYCOUNTRY_META 11293 8.20 18.08 3.67 69 T_REMOTE_IMAGE 11083 2.99 1.64 3.61 70 RCVD_IN_IADB_LISTED 10997 2.82 1.17 3.58 71 ANY_BOUNCE_MESSAGE 10887 2.95 1.67 3.54 72 BOUNCE_MESSAGE 10886 2.95 1.67 3.54 73 HTML_IMAGE_RATIO_06 10729 3.47 3.43 3.49 74 TooManyTo_002 10644 2.59 0.67 3.46 75 RCVD_IN_VALIDITY_CERTIFIED 10334 2.80 1.56 3.36 76 RCVD_IN_MSPIKE_H4 10228 3.16 2.80 3.33 77 BAYES_99 10008 11.70 30.13 3.26 78 XM_B_SpammyTLD 9866 3.46 4.02 3.21 79 RCVD_IN_IADB_SPF 9644 2.48 1.04 3.14 80 BOTNET_IPINHOSTNAME 9615 6.56 14.05 3.13 81 MAILING_LIST_MULTI 8985 2.72 2.26 2.92 82 XM_Body_Dirty_Words 8750 4.01 6.56 2.85 83 T_TooManySym_02 8704 2.17 0.72 2.83 84 RCVD_IN_IADB_SENDERID 8616 2.23 0.98 2.80 85 RCVD_IN_IADB_DK 8370 2.17 0.98 2.72 86 HTML_MIME_NO_HTML_TAG 7678 2.19 1.51 2.50 87 BAYES_999 7590 8.98 23.18 2.47 88 RCVD_IN_IADB_VOUCHED 7408 1.81 0.51 2.41 89 INVALID_MSGID 7225 1.66 0.17 2.35 90 MIME_HTML_ONLY_MULTI 7213 2.73 3.58 2.35 91 XM_B_URI_Unicode 7123 2.38 2.53 2.32 92 BAYES_05 7108 1.78 0.62 2.31 93 BAYES_95 7104 3.11 4.86 2.31 94 MIME_HTML_MOSTLY 7095 2.80 3.87 2.31 95 SCC_BODY_URI_ONLY 7032 2.08 1.62 2.29 96 DKIM_INVALID 6756 3.24 5.53 2.20 97 XMDiploma_00 6562 2.41 3.00 2.13 98 XM_CamelCaseFrm001 6533 2.54 3.44 2.13 99 HTML_IMAGE_RATIO_08 6369 2.32 2.85 2.07 100 TO_MALFORMED 6287 1.41 0.02 2.05 101 T_XMDrugObfuBody_14 6186 2.84 4.65 2.01 102 TR_XM_SpammyRelay 5941 5.55 13.46 1.93 103 FROM_EXCESS_BASE64 5442 1.84 1.99 1.77 104 XMSexyCombo_05 5424 2.55 4.25 1.76 105 TR_XM_PhishingBody 5348 2.82 5.19 1.74 106 RCVD_IN_IADB_OPTIN 5247 1.28 0.33 1.71 107 XM_DK_Undo_01 5228 1.80 2.00 1.70 108 TM2_M_URI_OPT_OUT 5209 2.13 3.09 1.69 109 TR_XM_DKIM_Undo 5109 10.16 28.70 1.66 110 URI_NOVOWEL 5019 1.46 1.07 1.63 111 TR_XM_UnparsRelay 5005 3.87 8.76 1.63 112 XMGappySubj_01 4840 1.12 0.14 1.57 113 T_XMDrugObfuBody_08 4839 1.97 2.85 1.57 114 TooManyTo_003 4808 1.25 0.56 1.56 115 UNTRUSTED_Relay 4806 3.10 6.46 1.56 116 XM_B_Investor 4685 2.63 5.05 1.52 117 TR_Symld_Words 4676 1.41 1.16 1.52 118 TR_MetaPhish_Combo_01 4622 1.42 1.24 1.50 119 XMStockSpam_06 4558 1.69 2.16 1.48 120 XM_B_Unsub2 4545 1.95 2.96 1.48 121 XM_SendGrid 4453 1.41 1.31 1.45 122 SUBJ_ALL_CAPS 4358 1.50 1.67 1.42 123 XM_SPF_SoftFail 4318 1.92 3.06 1.40 124 TR_XM_SpammyWords5 4167 2.02 3.47 1.36 125 KHOP_HELO_FCRDNS 4065 1.43 1.66 1.32 126 IN_HORDE_ADDRESS_BOOK 4049 0.93 0.07 1.32 127 XM_GoogleGroups 3957 1.15 0.86 1.29 128 TM2_M_VERY_LONG_WORD 3941 2.08 3.83 1.28 129 HELO_NODOT 3885 0.90 0.11 1.26 130 BOTNET 3881 4.17 10.53 1.26 131 HELO_NO_DOMAIN 3877 0.90 0.10 1.26 132 URI_HEX 3838 1.40 1.74 1.25 133 XM_B_FormFill 3760 0.85 0.04 1.22 134 TR_DCC_Bayes_99 3658 7.49 21.24 1.19 135 XMGenDplmaNmb 3631 1.34 1.68 1.18 136 TooManyTo_004 3568 0.96 0.52 1.16 137 XM_ShortIntro_01 3509 0.91 0.40 1.14 138 T_TooManySym_03 3450 0.88 0.34 1.12 139 XM_OfRef6 3163 2.08 4.38 1.03 140 TVD_SPACE_RATIO 3148 0.78 0.24 1.02 141 XMCapTrack 3121 0.84 0.47 1.02 142 XMGappySubj_02 3065 0.69 0.03 1.00 143 T_XMDrugObfuBody_00 3054 1.25 1.81 0.99 144 XM_UB50 3049 1.85 3.72 0.99 145 TR_XM_DK_SendGrid 2926 0.90 0.79 0.95 146 FROM_GOV_DKIM_AU 2838 0.70 0.22 0.92 147 XMBrknScrpt_02 2828 1.21 1.85 0.92 148 TooManyTo_005 2825 0.78 0.46 0.92 149 RELAYCOUNTRY_CA 2803 2.75 6.77 0.91 150 XM_H_Long_From02 2699 1.24 2.03 0.88 151 TVD_RCVD_IP 2694 0.92 1.01 0.88 152 DKIM_ADSP_CUSTOM_MED 2655 0.92 1.04 0.86 153 URI_OPTOUT_3LD 2490 0.74 0.58 0.81 154 SpammyFromTLD_01 2409 1.09 1.76 0.78 155 XM_H_PHPMailer 2362 0.71 0.57 0.77 156 MPART_ALT_DIFF_COUNT 2333 0.93 1.31 0.76 157 XMNoVowels 2302 0.74 0.73 0.75 158 XM_B_COPY_HTML 2264 0.90 1.27 0.74 159 T_FILL_THIS_FORM_SHORT 2235 1.37 2.77 0.73 160 XM_ProductURIs 2217 0.93 1.39 0.72 161 HTTPS_HTTP_MISMATCH 2209 0.88 1.23 0.72 162 TR_XM_Base64_M1 2184 0.77 0.89 0.71 163 XMSlimDrugH 2130 0.72 0.78 0.69 164 RCVD_IN_PBL 2116 0.75 0.90 0.69 165 T_XMHurry_00 2108 1.17 2.22 0.69 166 MSGID_FROM_MTA_HEADER 2105 0.50 0.11 0.68 167 XMBSHREFv2 2068 0.60 0.44 0.67 168 T_TVD_MIME_NO_HEADERS 2020 0.47 0.05 0.66 169 T_Symld_Words_02 1993 0.75 0.96 0.65 170 XMPhish30 1940 1.03 1.89 0.63 171 T_OBFU_PDF_ATTACH 1873 0.46 0.13 0.61 172 XM_B_DNDMA 1861 0.83 1.33 0.61 173 XM_B_SpammyWords4 1855 1.18 2.44 0.60 174 HTML_TAG_BALANCE_BODY 1851 0.68 0.86 0.60 175 SpammyFromTLD_02 1791 1.02 1.97 0.58 176 FORGED_GMAIL_RCVD 1761 0.64 0.77 0.57 177 RELAYCOUNTRY_AU 1750 1.33 2.98 0.57 178 XMSubMetaI_00 1750 0.76 1.19 0.57 179 RCVD_IN_PSBL 1683 0.80 1.34 0.55 180 RELAYCOUNTRY_GB 1680 0.74 1.16 0.55 181 NML_ADSP_CUSTOM_MED 1674 0.64 0.84 0.54 182 XMLngstWrd_00 1657 0.54 0.55 0.54 183 T_STY_INVIS_DIRECT 1607 0.58 0.69 0.52 184 XMBody_95 1589 0.43 0.23 0.52 185 RCVD_IN_BL_SPAMCOP_NET 1586 3.41 9.73 0.52 186 HTML_IMAGE_ONLY_32 1574 0.41 0.20 0.51 187 URI_TRY_3LD 1556 0.84 1.57 0.51 188 XMBdyGiftCard01 1502 0.76 1.34 0.49 189 TM2_M_OBFU_COMMENT 1484 0.62 0.91 0.48 190 T_MANY_PILL_PRICE 1469 0.33 0.00 0.48 191 FILL_THIS_FORM 1468 0.54 0.67 0.48 192 XMLngstWrd_01 1457 0.48 0.50 0.47 193 HTML_EXTRA_CLOSE 1452 0.33 0.01 0.47 194 XMPhish14 1451 0.62 0.96 0.47 195 THIS_AD 1431 0.66 1.08 0.47 196 TR_XM_MSPIKECOMBO 1409 2.30 6.32 0.46 197 RCVD_IN_MSPIKE_BL 1409 2.30 6.32 0.46 198 LongTLD 1401 0.57 0.81 0.46 199 XMMoneyMeta_00 1383 0.57 0.82 0.45 200 TR_XM_PHPDW 1376 0.64 1.07 0.45 ----------------------------------------------------------------------