Email: 466837 Autolearn: 0 AvgScore: 5.50 AvgScanTime: 1.40 sec Spam: 147269 Autolearn: 0 AvgScore: 15.05 AvgScanTime: 1.60 sec Ham: 319568 Autolearn: 0 AvgScore: 1.09 AvgScanTime: 1.30 sec Time Spent Running SA: 181.34 hours Time Spent Processing Spam: 65.52 hours Time Spent Processing Ham: 115.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139970 90.19 95.04 87.95 2 DKIM_SIGNED 129950 77.93 88.24 73.18 3 XM_B_Unicode 122001 74.28 82.84 70.33 4 RELAYCOUNTRY_US 118605 81.96 80.54 82.61 5 XM_DK_Pass 117335 74.46 79.67 72.06 6 DKIM_VALID 116325 73.57 78.99 71.08 7 DCC_CHECK 106582 49.92 72.37 39.57 8 XM_B_SpammyWords 100041 52.63 67.93 45.58 9 XMListUnsubscribeExists 97764 53.59 66.38 47.70 10 DKIM_VALID_AU 91338 59.03 62.02 57.65 11 XM_B_Unicode3 72530 43.73 49.25 41.18 12 LOC_TINY_FONT_1 71055 34.60 48.25 28.31 13 BAYES_50 60599 54.91 41.15 61.25 14 XM_B_SpammyWords2 57903 24.84 39.32 18.17 15 XM_DK_Undo_02 56374 15.17 38.28 4.53 16 HTML_FONT_LOW_CONTRAST 50381 32.01 34.21 31.00 17 FVGT_m_MULTI_ODD 50338 27.97 34.18 25.11 18 BAYES_99 45660 12.19 31.00 3.52 19 DKIM_VALID_EF 43383 29.25 29.46 29.15 20 T_KAM_HTML_FONT_INVALID 42158 24.16 28.63 22.10 21 TR_XM_DKIM_Undo 40586 9.86 27.56 1.71 22 MIME_HTML_ONLY 40449 21.34 27.47 18.51 23 DCC_CHECK_NEGATIVE 38707 49.62 26.28 60.38 24 BAYES_999 34677 9.08 23.55 2.41 25 XMSubLong 34402 22.21 23.36 21.69 26 T_TM2_M_HEADER_IN_MSG 32725 29.58 22.22 32.98 27 TR_XM_DK_Unsub 31320 16.13 21.27 13.77 28 TR_DCC_Bayes_99 29944 7.24 20.33 1.21 29 XM_Multi_Part_URI 29872 15.37 20.28 13.11 30 XM_B_Unsub 28001 11.95 19.01 8.69 31 RELAYCOUNTRY_META 27813 8.40 18.89 3.57 32 RCVD_IN_MSPIKE_H2 27722 16.67 18.82 15.67 33 TR_XM_BayesUnsub 27056 10.26 18.37 6.52 34 UNPARSEABLE_RELAY 26213 13.85 17.80 12.03 35 TR_MAX_INTL_RELAY 22179 8.77 15.06 5.87 36 XM_B_SpammyWords3 20903 7.53 14.19 4.45 37 BOTNET 20394 5.22 13.85 1.24 38 BOTNET_IPINHOSTNAME 18670 5.94 12.68 2.84 39 LOTS_OF_MONEY 18055 7.96 12.26 5.97 40 TR_XM_SpammyRelay 17813 5.02 12.10 1.77 41 XM_Evil_Numbers_Gen 16430 11.47 11.16 11.62 42 TR_XM_SpammyWords4 16127 6.21 10.95 4.02 43 RCVD_IN_BL_SPAMCOP_NET 15515 3.72 10.54 0.58 44 FSL_BULK_SIG 15184 9.25 10.31 8.76 45 TR_XM_SpammyWords2 14416 3.32 9.79 0.35 46 TR_XM_UnparsRelay 13821 4.15 9.38 1.74 47 DKIM_INVALID 13625 4.36 9.25 2.10 48 XM_B_Phish_Phrases 13547 7.07 9.20 6.09 49 BAYES_80 13321 5.30 9.05 3.58 50 RCVD_IN_MSPIKE_WL 13291 14.51 9.02 17.04 51 MPART_ALT_DIFF 12336 6.32 8.38 5.37 52 UNTRUSTED_Relay 11845 3.59 8.04 1.53 53 BAYES_60 11673 7.18 7.93 6.83 54 LotsOfNums_01 11568 10.87 7.86 12.26 55 XM_UncommonTLD01 10933 5.09 7.42 4.02 56 HTML_IMAGE_RATIO_02 10750 5.44 7.30 4.59 57 XM_B_PhoneNumber 10198 8.72 6.92 9.54 58 XM_Body_Dirty_Words 9453 3.52 6.42 2.18 59 RELAYCOUNTRY_CA 9250 2.51 6.28 0.78 60 XM_H_Long_From01 8960 5.88 6.08 5.78 61 XM_H_GMP 8460 5.75 5.74 5.76 62 XMSubMetaSx_00 8338 4.23 5.66 3.57 63 BAYES_95 8136 3.31 5.52 2.29 64 TR_XM_PhishingBody 7398 2.68 5.02 1.60 65 XM_B_Investor 7344 2.65 4.99 1.57 66 HTML_IMAGE_RATIO_04 7232 4.71 4.91 4.62 67 TR_XM_SPAMCOP 7078 1.68 4.81 0.24 68 RCVD_IN_MSPIKE_BL 7003 2.11 4.76 0.90 69 TR_XM_MSPIKECOMBO 7002 2.11 4.75 0.90 70 TM2_M_VERY_LONG_WORD 6695 5.95 4.55 6.59 71 HTML_FONT_TINY_NORDNS 6658 1.58 4.52 0.22 72 RCVD_IN_MSPIKE_H3 6508 6.79 4.42 7.89 73 XMSexyCombo_05 6226 1.93 4.23 0.88 74 NO_DNS_FOR_FROM 6058 1.60 4.11 0.43 75 HTML_IMAGE_RATIO_06 5968 3.92 4.05 3.85 76 XM_OfRef6 5711 1.77 3.88 0.79 77 T_XMDrugObfuBody_14 5677 2.54 3.85 1.94 78 TR_XM_MaxWHORU 5556 1.43 3.77 0.35 79 XMStrtUSub 5538 4.59 3.76 4.97 80 XM_B_SpammyTLD 5450 3.04 3.70 2.74 81 TR_XM_NoHeaderRelay 5445 1.30 3.70 0.19 82 KHOP_HELO_FCRDNS 5368 3.86 3.65 3.96 83 T_XMDrugObfuBody_08 5180 2.10 3.52 1.44 84 TR_XM_SpammyWords3 5138 1.40 3.49 0.43 85 TooManyTo_001 4984 6.69 3.38 8.22 86 XMNumbers 4923 3.32 3.34 3.31 87 MIME_HTML_MOSTLY 4916 3.03 3.34 2.89 88 XM_URI_RBL 4784 1.25 3.25 0.33 89 XM_SPF_SoftFail 4750 2.02 3.23 1.46 90 TR_XM_SpammyWords5 4746 1.85 3.22 1.22 91 XM_UB99 4638 0.99 3.15 0.00 92 TM2_M_URI_OPT_OUT 4606 2.47 3.13 2.17 93 XM_B_Unsub2 4482 1.91 3.04 1.38 94 BOTNET_NORDNS 4400 0.99 2.99 0.07 95 MIME_HTML_ONLY_MULTI 4389 2.67 2.98 2.53 96 HTML_IMAGE_RATIO_08 4365 2.43 2.96 2.18 97 XM_CamelCaseFrm001 4305 2.49 2.92 2.28 98 TR_XM_INV_DKIM 4267 0.94 2.90 0.03 99 MIME_QP_LONG_LINE 4169 4.63 2.83 5.46 100 RCVD_IN_MSPIKE_H4 4017 3.37 2.73 3.67 101 XMDiploma_00 3975 1.87 2.70 1.48 102 XM_UB999 3933 0.84 2.67 0.00 103 XM_B_URI_Unicode 3865 2.02 2.62 1.74 104 RCVD_IN_MSPIKE_L3 3857 1.27 2.62 0.65 105 T_FILL_THIS_FORM_SHORT 3784 1.31 2.57 0.73 106 XM_UB50 3780 1.48 2.57 0.98 107 T_TooManySym_01 3695 4.51 2.51 5.44 108 RELAYCOUNTRY_AU 3692 1.13 2.51 0.50 109 XM_H_Long_From02 3572 1.38 2.43 0.90 110 USER_IN_DEF_DKIM_WL 3523 9.68 2.39 13.04 111 XM_B_SpammyWords4 3476 1.24 2.36 0.73 112 XMBody_17 3308 0.97 2.25 0.38 113 RCVD_IN_VALIDITY_SAFE 3176 3.52 2.16 4.15 114 RELAYCOUNTRY_JP 3144 0.69 2.13 0.02 115 SpammyFromTLD_02 3116 1.02 2.12 0.52 116 RCVD_IN_VALIDITY_RPBL 2929 0.67 1.99 0.07 117 MAILING_LIST_MULTI 2865 2.75 1.95 3.12 118 BODY_URI_ONLY 2840 0.61 1.93 0.01 119 FROM_EXCESS_BASE64 2838 1.69 1.93 1.58 120 HTML_SHORT_LINK_IMG_1 2776 0.90 1.88 0.45 121 DC_PNG_UNO_LARGO 2770 1.04 1.88 0.65 122 T_XMDrugObfuBody_00 2770 1.46 1.88 1.27 123 RCVD_IN_MSPIKE_H5 2766 4.35 1.88 5.49 124 HTML_IMAGE_ONLY_04 2761 0.92 1.87 0.49 125 TR_XM_INTL_Spamhaus 2757 0.70 1.87 0.16 126 CONTENT_AFTER_HTML 2728 0.59 1.85 0.00 127 XM_JunkDunk 2721 0.58 1.85 0.00 128 TR_XM_IMAGE_URI 2706 0.58 1.84 0.00 129 XMBrknScrpt_02 2701 1.15 1.83 0.83 130 DKIM_ADSP_NXDOMAIN 2691 0.79 1.83 0.31 131 XMStockSpam_06 2630 1.39 1.79 1.21 132 URI_NOVOWEL 2589 1.33 1.76 1.14 133 ANY_BOUNCE_MESSAGE 2581 6.68 1.75 8.95 134 TR_XM_MSPIKECOMBO2 2580 0.59 1.75 0.05 135 BOUNCE_MESSAGE 2580 6.68 1.75 8.95 136 DKIM_ADSP_CUSTOM_MED 2579 1.15 1.75 0.87 137 ALL_TRUSTED 2556 10.39 1.74 14.38 138 RCVD_IN_VALIDITY_CERTIFIED 2538 2.99 1.72 3.58 139 MPART_ALT_DIFF_COUNT 2524 0.99 1.71 0.65 140 XMGenDplmaNmb 2518 1.12 1.71 0.85 141 SpammyFromTLD_01 2441 1.00 1.66 0.70 142 HTML_MIME_NO_HTML_TAG 2418 2.31 1.64 2.62 143 T_XMHurry_00 2383 0.93 1.62 0.61 144 XM_DK_Undo_01 2340 1.84 1.59 1.96 145 RCVD_IN_XBL 2337 0.51 1.59 0.01 146 BAYES_40 2277 4.64 1.55 6.06 147 XMPhish14 2258 0.76 1.53 0.41 148 XM_SendGrid 2220 1.50 1.51 1.49 149 NML_ADSP_CUSTOM_MED 2194 0.84 1.49 0.53 150 RCVD_IN_PBL 2178 0.93 1.48 0.68 151 XMPhish30 2171 0.82 1.47 0.51 152 TR_XM_GMP_BULK_SIG 2165 0.57 1.47 0.15 153 FORGED_GMAIL_RCVD 2099 0.82 1.43 0.54 154 TR_LOTS_OF_MONEY3 2074 0.73 1.41 0.42 155 XMBdyGiftCard01 2060 0.63 1.40 0.28 156 XMSubMetaI_00 2057 0.92 1.40 0.71 157 URI_HEX 2031 1.28 1.38 1.23 158 XM_H_DKIM_GOOG 2015 0.44 1.37 0.01 159 RCVD_IN_MSPIKE_L4 2013 0.59 1.37 0.24 160 SUBJ_ALL_CAPS 1997 1.32 1.36 1.30 161 URI_TRY_3LD 1978 0.78 1.34 0.52 162 RCVD_IN_PSBL 1977 0.70 1.34 0.41 163 RCVD_IN_IADB_LISTED 1949 2.85 1.32 3.55 164 RCVD_IN_ZEN_LASTEXTERNAL 1948 0.42 1.32 0.00 165 SHORTCIRCUIT 1948 0.42 1.32 0.00 166 RELAYCOUNTRY_FR 1933 0.60 1.31 0.28 167 XM_HighProb1 1924 0.41 1.31 0.00 168 XM_B_Phish66 1918 0.66 1.30 0.36 169 RCVD_IN_SBL_CSS 1895 0.43 1.29 0.03 170 T_REMOTE_IMAGE 1894 2.99 1.29 3.78 171 DIET_1 1823 0.66 1.24 0.40 172 T_MONEY_PERCENT 1804 0.52 1.22 0.20 173 TR_LOTS_OF_MONEY2 1804 0.52 1.22 0.20 174 TR_XM_InvalidRelay 1773 0.39 1.20 0.01 175 RCVD_IN_IADB_SPF 1729 2.50 1.17 3.11 176 T_Symld_Words_02 1716 0.82 1.17 0.66 177 MultiRelay_CC 1684 0.44 1.14 0.11 178 XM_B_SEO 1683 0.48 1.14 0.17 179 XM_B_COPY_HTML 1665 0.83 1.13 0.69 180 XM_Nigeria_01 1647 0.37 1.12 0.03 181 RDNS_DYNAMIC 1616 0.46 1.10 0.16 182 TR_XM_FormFill 1606 0.35 1.09 0.01 183 HTML_IMAGE_ONLY_20 1599 0.67 1.09 0.48 184 RCVD_IN_IADB_DK 1597 2.20 1.08 2.71 185 BAYES_20 1593 3.10 1.08 4.03 186 RCVD_IN_IADB_SENDERID 1578 2.26 1.07 2.80 187 PDS_RDNS_DYNAMIC_FP 1573 0.36 1.07 0.04 188 TR_XM_PHPForged 1563 0.50 1.06 0.24 189 XM_DIRTYINTL 1563 0.37 1.06 0.06 190 TM2_M_A_HREF_HREF 1561 0.53 1.06 0.28 191 XM_ProductURIs 1554 0.68 1.06 0.51 192 TR_XM_PHPDW 1551 0.50 1.05 0.24 193 TR_XM_FormFill2 1542 0.50 1.05 0.24 194 XMLngstWrd_00 1530 0.79 1.04 0.68 195 XMHTML_After_End 1519 0.56 1.03 0.34 196 TR_XM_RelayPhish 1518 0.39 1.03 0.09 197 XM_H_PHPOS 1515 0.48 1.03 0.23 198 TR_XM_MaxSPIKE 1500 0.35 1.02 0.05 199 SHOPIFY_IMG_NOT_RCVD_SFY 1479 0.47 1.00 0.22 200 TR_XM_DK_SendGrid 1478 0.99 1.00 0.99 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 281057 90.19 95.04 87.95 2 RELAYCOUNTRY_US 264008 81.96 80.54 82.61 3 DKIM_SIGNED 233846 77.93 88.24 73.18 4 XM_DK_Pass 230293 74.46 79.67 72.06 5 DKIM_VALID 227134 73.57 78.99 71.08 6 XM_B_Unicode 224745 74.28 82.84 70.33 7 BAYES_50 195735 54.91 41.15 61.25 8 DCC_CHECK_NEGATIVE 192953 49.62 26.28 60.38 9 DKIM_VALID_AU 184233 59.03 62.02 57.65 10 XMListUnsubscribeExists 152435 53.59 66.38 47.70 11 XM_B_SpammyWords 145654 52.63 67.93 45.58 12 XM_B_Unicode3 131599 43.73 49.25 41.18 13 DCC_CHECK 126457 49.92 72.37 39.57 14 T_TM2_M_HEADER_IN_MSG 105384 29.58 22.22 32.98 15 HTML_FONT_LOW_CONTRAST 99051 32.01 34.21 31.00 16 DKIM_VALID_EF 93155 29.25 29.46 29.15 17 LOC_TINY_FONT_1 90468 34.60 48.25 28.31 18 FVGT_m_MULTI_ODD 80252 27.97 34.18 25.11 19 T_KAM_HTML_FONT_INVALID 70628 24.16 28.63 22.10 20 XMSubLong 69305 22.21 23.36 21.69 21 MIME_HTML_ONLY 59160 21.34 27.47 18.51 22 XM_B_SpammyWords2 58081 24.84 39.32 18.17 23 RCVD_IN_MSPIKE_WL 54467 14.51 9.02 17.04 24 RCVD_IN_MSPIKE_H2 50082 16.67 18.82 15.67 25 ALL_TRUSTED 45945 10.39 1.74 14.38 26 TR_XM_DK_Unsub 44001 16.13 21.27 13.77 27 XM_Multi_Part_URI 41884 15.37 20.28 13.11 28 USER_IN_DEF_DKIM_WL 41662 9.68 2.39 13.04 29 LotsOfNums_01 39172 10.87 7.86 12.26 30 UNPARSEABLE_RELAY 38457 13.85 17.80 12.03 31 XM_Evil_Numbers_Gen 37126 11.47 11.16 11.62 32 BAYES_00 32368 7.18 0.77 10.13 33 XM_B_PhoneNumber 30496 8.72 6.92 9.54 34 ANY_BOUNCE_MESSAGE 28607 6.68 1.75 8.95 35 BOUNCE_MESSAGE 28604 6.68 1.75 8.95 36 FSL_BULK_SIG 27985 9.25 10.31 8.76 37 XM_B_Unsub 27777 11.95 19.01 8.69 38 TooManyTo_001 26258 6.69 3.38 8.22 39 RCVD_IN_MSPIKE_H3 25207 6.79 4.42 7.89 40 BAYES_60 21825 7.18 7.93 6.83 41 TM2_M_VERY_LONG_WORD 21068 5.95 4.55 6.59 42 TR_XM_DK_Bayes 21062 4.66 0.46 6.59 43 TR_XM_BayesUnsub 20837 10.26 18.37 6.52 44 TR_XM_DK_Bayes1 20778 4.60 0.46 6.50 45 XM_B_Phish_Phrases 19465 7.07 9.20 6.09 46 BAYES_40 19365 4.64 1.55 6.06 47 LOTS_OF_MONEY 19083 7.96 12.26 5.97 48 TR_MAX_INTL_RELAY 18766 8.77 15.06 5.87 49 XM_H_Long_From01 18472 5.88 6.08 5.78 50 XM_DKIMWhitelistDomains 18426 3.95 0.01 5.77 51 XM_H_GMP 18396 5.75 5.74 5.76 52 TR_XM_DK_Bayes2 17707 3.90 0.35 5.54 53 RCVD_IN_MSPIKE_H5 17541 4.35 1.88 5.49 54 MIME_QP_LONG_LINE 17435 4.63 2.83 5.46 55 T_TooManySym_01 17377 4.51 2.51 5.44 56 MPART_ALT_DIFF 17172 6.32 8.38 5.37 57 XMStrtUSub 15890 4.59 3.76 4.97 58 HTML_IMAGE_RATIO_04 14767 4.71 4.91 4.62 59 HTML_IMAGE_RATIO_02 14668 5.44 7.30 4.59 60 HTML_IMAGE_ONLY_32 14627 3.21 0.25 4.58 61 XM_DK_Undo_02 14467 15.17 38.28 4.53 62 XM_B_SpammyWords3 14229 7.53 14.19 4.45 63 XM_PDF 13980 3.21 0.70 4.37 64 RCVD_IN_VALIDITY_SAFE 13269 3.52 2.16 4.15 65 BAYES_20 12874 3.10 1.08 4.03 66 TR_XM_SpammyWords4 12846 6.21 10.95 4.02 67 XM_UncommonTLD01 12833 5.09 7.42 4.02 68 KHOP_HELO_FCRDNS 12646 3.86 3.65 3.96 69 HTML_IMAGE_RATIO_06 12319 3.92 4.05 3.85 70 T_REMOTE_IMAGE 12084 2.99 1.29 3.78 71 RCVD_IN_MSPIKE_H4 11719 3.37 2.73 3.67 72 RCVD_IN_VALIDITY_CERTIFIED 11442 2.99 1.72 3.58 73 BAYES_80 11437 5.30 9.05 3.58 74 RELAYCOUNTRY_META 11412 8.40 18.89 3.57 75 XMSubMetaSx_00 11401 4.23 5.66 3.57 76 RCVD_IN_IADB_LISTED 11345 2.85 1.32 3.55 77 BAYES_99 11236 12.19 31.00 3.52 78 XMNumbers 10582 3.32 3.34 3.31 79 MAILING_LIST_MULTI 9959 2.75 1.95 3.12 80 RCVD_IN_IADB_SPF 9923 2.50 1.17 3.11 81 T_TooManySym_02 9309 2.18 0.60 2.91 82 MIME_HTML_MOSTLY 9238 3.03 3.34 2.89 83 BOTNET_IPINHOSTNAME 9074 5.94 12.68 2.84 84 RCVD_IN_IADB_SENDERID 8960 2.26 1.07 2.80 85 XM_B_SpammyTLD 8742 3.04 3.70 2.74 86 RCVD_IN_IADB_DK 8674 2.20 1.08 2.71 87 HTML_MIME_NO_HTML_TAG 8382 2.31 1.64 2.62 88 TooManyTo_002 8245 1.93 0.53 2.58 89 MIME_HTML_ONLY_MULTI 8086 2.67 2.98 2.53 90 BAYES_999 7695 9.08 23.55 2.41 91 BAYES_05 7400 1.78 0.63 2.32 92 BAYES_95 7328 3.31 5.52 2.29 93 XM_CamelCaseFrm001 7297 2.49 2.92 2.28 94 RCVD_IN_IADB_VOUCHED 7221 1.76 0.68 2.26 95 INVALID_MSGID 7214 1.60 0.18 2.26 96 MIME_CHARSET_FARAWAY 7029 1.82 0.99 2.20 97 XM_Body_Dirty_Words 6965 3.52 6.42 2.18 98 HTML_IMAGE_RATIO_08 6965 2.43 2.96 2.18 99 TM2_M_URI_OPT_OUT 6927 2.47 3.13 2.17 100 CHARSET_FARAWAY_HEADER 6714 1.70 0.81 2.10 101 DKIM_INVALID 6712 4.36 9.25 2.10 102 MSGID_NOFQDN1 6522 1.40 0.01 2.04 103 TO_MALFORMED 6416 1.38 0.02 2.01 104 XM_DK_Undo_01 6251 1.84 1.59 1.96 105 T_XMDrugObfuBody_14 6201 2.54 3.85 1.94 106 TR_XM_SpammyRelay 5644 5.02 12.10 1.77 107 TR_XM_UnparsRelay 5556 4.15 9.38 1.74 108 XM_B_URI_Unicode 5546 2.02 2.62 1.74 109 TR_XM_DKIM_Undo 5451 9.86 27.56 1.71 110 RCVD_IN_IADB_OPTIN 5121 1.25 0.49 1.60 111 TR_XM_PhishingBody 5099 2.68 5.02 1.60 112 FROM_EXCESS_BASE64 5057 1.69 1.93 1.58 113 XM_B_Investor 5006 2.65 4.99 1.57 114 TooManyTo_003 4904 1.18 0.41 1.53 115 UNTRUSTED_Relay 4902 3.59 8.04 1.53 116 XM_SendGrid 4766 1.50 1.51 1.49 117 XMDiploma_00 4737 1.87 2.70 1.48 118 XMGappySubj_01 4697 1.08 0.24 1.47 119 XM_SPF_SoftFail 4663 2.02 3.23 1.46 120 T_XMDrugObfuBody_08 4614 2.10 3.52 1.44 121 XM_B_Unsub2 4421 1.91 3.04 1.38 122 XM_GoogleGroups 4378 1.19 0.81 1.37 123 TR_Symld_Words 4236 1.17 0.83 1.33 124 SUBJ_ALL_CAPS 4154 1.32 1.36 1.30 125 HELO_NODOT 4141 0.94 0.17 1.30 126 HELO_NO_DOMAIN 4136 0.94 0.16 1.29 127 T_XMDrugObfuBody_00 4066 1.46 1.88 1.27 128 IN_HORDE_ADDRESS_BOOK 4041 0.89 0.08 1.26 129 BOTNET 3960 5.22 13.85 1.24 130 URI_HEX 3940 1.28 1.38 1.23 131 TR_XM_SpammyWords5 3901 1.85 3.22 1.22 132 XMStockSpam_06 3863 1.39 1.79 1.21 133 TR_DCC_Bayes_99 3858 7.24 20.33 1.21 134 T_TooManySym_03 3697 0.84 0.15 1.16 135 URI_NOVOWEL 3643 1.33 1.76 1.14 136 XMCapTrack 3583 0.90 0.42 1.12 137 TooManyTo_004 3478 0.85 0.34 1.09 138 XM_ShortIntro_01 3380 0.86 0.43 1.06 139 TR_XM_DK_SendGrid 3155 0.99 1.00 0.99 140 FROM_GOV_DKIM_AU 3142 0.75 0.24 0.98 141 XM_UB50 3132 1.48 2.57 0.98 142 TVD_RCVD_IP 2968 0.94 0.95 0.93 143 XM_H_Long_From02 2881 1.38 2.43 0.90 144 RCVD_IN_MSPIKE_BL 2863 2.11 4.76 0.90 145 TR_XM_MSPIKECOMBO 2863 2.11 4.75 0.90 146 TVD_SPACE_RATIO 2838 0.65 0.12 0.89 147 XMSexyCombo_05 2801 1.93 4.23 0.88 148 DKIM_ADSP_CUSTOM_MED 2781 1.15 1.75 0.87 149 TooManyTo_005 2717 0.68 0.31 0.85 150 XMGenDplmaNmb 2714 1.12 1.71 0.85 151 XMBrknScrpt_02 2649 1.15 1.83 0.83 152 XM_OfRef6 2539 1.77 3.88 0.79 153 RELAYCOUNTRY_CA 2478 2.51 6.28 0.78 154 XMGappySubj_02 2412 0.53 0.03 0.75 155 XMSubMetaSxObfu_03 2389 0.72 0.65 0.75 156 XM_B_SpammyWords4 2326 1.24 2.36 0.73 157 T_FILL_THIS_FORM_SHORT 2320 1.31 2.57 0.73 158 XMSubMetaI_00 2257 0.92 1.40 0.71 159 SpammyFromTLD_01 2244 1.00 1.66 0.70 160 XM_B_COPY_HTML 2201 0.83 1.13 0.69 161 RCVD_IN_PBL 2186 0.93 1.48 0.68 162 XMLngstWrd_00 2161 0.79 1.04 0.68 163 XM_H_PHPMailer 2154 0.63 0.52 0.67 164 T_OBFU_PDF_ATTACH 2150 0.50 0.13 0.67 165 TR_MetaPhish_Combo_01 2142 0.73 0.87 0.67 166 T_Symld_Words_02 2100 0.82 1.17 0.66 167 XMSlimDrugH 2096 0.67 0.71 0.66 168 RCVD_IN_MSPIKE_L3 2089 1.27 2.62 0.65 169 DC_PNG_UNO_LARGO 2086 1.04 1.88 0.65 170 XM_B_DNDMA 2082 0.74 0.93 0.65 171 MPART_ALT_DIFF_COUNT 2080 0.99 1.71 0.65 172 RELAYCOUNTRY_GB 2069 0.71 0.84 0.65 173 XMNoVowels 1999 0.57 0.45 0.63 174 MSGID_FROM_MTA_HEADER 1985 0.53 0.34 0.62 175 HTTPS_HTTP_MISMATCH 1966 0.69 0.85 0.62 176 TR_XM_Base64_M1 1961 0.73 0.99 0.61 177 T_XMHurry_00 1953 0.93 1.62 0.61 178 RCVD_IN_BL_SPAMCOP_NET 1854 3.72 10.54 0.58 179 LongTLD 1832 0.67 0.87 0.57 180 FORGED_GMAIL_RCVD 1741 0.82 1.43 0.54 181 XMBody_95 1722 0.40 0.11 0.54 182 HTML_TAG_BALANCE_BODY 1715 0.64 0.87 0.54 183 NML_ADSP_CUSTOM_MED 1709 0.84 1.49 0.53 184 URI_TRY_3LD 1670 0.78 1.34 0.52 185 SpammyFromTLD_02 1648 1.02 2.12 0.52 186 XM_ProductURIs 1640 0.68 1.06 0.51 187 XMPhish30 1639 0.82 1.47 0.51 188 XMBSHREFv2 1630 0.47 0.39 0.51 189 RELAYCOUNTRY_AU 1590 1.13 2.51 0.50 190 HTML_IMAGE_ONLY_04 1555 0.92 1.87 0.49 191 T_TVD_MIME_NO_HEADERS 1551 0.35 0.05 0.49 192 HTML_IMAGE_ONLY_20 1540 0.67 1.09 0.48 193 TO_NO_BRKTS_HTML_ONLY 1533 0.47 0.45 0.48 194 XM_B_FormFill 1473 0.32 0.02 0.46 195 HTML_SHORT_LINK_IMG_1 1447 0.90 1.88 0.45 196 T_MANY_PILL_PRICE 1446 0.31 0.01 0.45 197 CONTENT_AFTER_HTML_WEAK 1443 0.31 0.02 0.45 198 XMMoneyMeta_00 1435 0.55 0.78 0.45 199 STY_INVIS_DIRECT 1400 0.60 0.94 0.44 200 XMLngstWrd_01 1396 0.44 0.44 0.44 ----------------------------------------------------------------------