Email: 462193 Autolearn: 0 AvgScore: 5.17 AvgScanTime: 1.45 sec Spam: 136601 Autolearn: 0 AvgScore: 14.99 AvgScanTime: 1.66 sec Ham: 325592 Autolearn: 0 AvgScore: 1.04 AvgScanTime: 1.36 sec Time Spent Running SA: 186.26 hours Time Spent Processing Spam: 63.11 hours Time Spent Processing Ham: 123.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129930 90.20 95.12 88.14 2 DKIM_SIGNED 122786 78.86 89.89 74.24 3 XM_DK_Pass 116850 76.94 85.54 73.33 4 DKIM_VALID 115904 75.98 84.85 72.26 5 XM_B_Unicode 115643 76.59 84.66 73.21 6 RELAYCOUNTRY_US 110092 81.20 80.59 81.46 7 DCC_CHECK 103623 50.41 75.86 39.74 8 XM_B_SpammyWords 94922 53.62 69.49 46.97 9 XMListUnsubscribeExists 93292 53.76 68.30 47.66 10 DKIM_VALID_AU 90813 61.38 66.48 59.23 11 XM_B_Unicode3 67008 42.78 49.05 40.14 12 LOC_TINY_FONT_1 65783 34.46 48.16 28.72 13 XM_B_SpammyWords2 55867 27.31 40.90 21.61 14 XM_DK_Undo_02 53511 14.55 39.17 4.22 15 BAYES_50 53135 55.01 38.90 61.77 16 FVGT_m_MULTI_ODD 47054 27.80 34.45 25.01 17 HTML_FONT_LOW_CONTRAST 47054 29.15 34.45 26.93 18 T_KAM_HTML_FONT_INVALID 42399 25.07 31.04 22.56 19 DKIM_VALID_EF 42140 29.67 30.85 29.17 20 BAYES_99 41331 11.14 30.26 3.12 21 MIME_HTML_ONLY 41059 21.09 30.06 17.32 22 TR_XM_DKIM_Undo 39347 9.72 28.80 1.72 23 XMSubLong 33753 22.77 24.71 21.96 24 BAYES_999 30999 8.31 22.69 2.28 25 TR_XM_DK_Unsub 30962 15.69 22.67 12.77 26 DCC_CHECK_NEGATIVE 30642 49.05 22.43 60.22 27 T_TM2_M_HEADER_IN_MSG 30314 30.38 22.19 33.81 28 TR_DCC_Bayes_99 29728 7.27 21.76 1.20 29 XM_Multi_Part_URI 28197 15.51 20.64 13.36 30 RCVD_IN_MSPIKE_H2 26737 17.12 19.57 16.08 31 XM_B_Unsub 26382 11.51 19.31 8.24 32 TR_XM_BayesUnsub 25337 10.12 18.55 6.58 33 RELAYCOUNTRY_META 24493 7.67 17.93 3.37 34 UNPARSEABLE_RELAY 23761 13.42 17.39 11.75 35 TR_MAX_INTL_RELAY 22981 9.14 16.82 5.92 36 XM_B_SpammyWords3 21902 8.08 16.03 4.74 37 LOTS_OF_MONEY 18867 9.33 13.81 7.45 38 TR_XM_SpammyRelay 18202 5.12 13.32 1.68 39 BOTNET_IPINHOSTNAME 17368 5.68 12.71 2.73 40 TR_XM_SpammyWords4 16970 7.46 12.42 5.38 41 XM_Evil_Numbers_Gen 14790 9.79 10.83 9.36 42 FSL_BULK_SIG 14660 9.14 10.73 8.47 43 TR_XM_SpammyWords2 14186 3.34 10.38 0.39 44 BAYES_80 14078 5.65 10.31 3.69 45 BOTNET 14006 3.78 10.25 1.07 46 RCVD_IN_MSPIKE_WL 13763 15.70 10.08 18.05 47 TR_XM_UnparsRelay 12724 3.92 9.31 1.66 48 XM_B_Phish_Phrases 12074 6.38 8.84 5.35 49 RCVD_IN_BL_SPAMCOP_NET 11461 2.77 8.39 0.41 50 LotsOfNums_01 11420 9.72 8.36 10.29 51 BAYES_60 11234 7.40 8.22 7.05 52 XM_Body_Dirty_Words 9580 3.75 7.01 2.38 53 RELAYCOUNTRY_CA 9535 2.55 6.98 0.69 54 UNTRUSTED_Relay 9390 3.07 6.87 1.47 55 XMSubMetaSx_00 9360 4.24 6.85 3.14 56 XM_B_PhoneNumber 8839 8.74 6.47 9.69 57 BAYES_95 8420 3.39 6.16 2.22 58 HTML_IMAGE_RATIO_02 8368 4.71 6.13 4.11 59 XM_UncommonTLD01 8304 4.80 6.08 4.27 60 MPART_ALT_DIFF 8292 5.08 6.07 4.67 61 RCVD_IN_MSPIKE_BL 8132 2.40 5.95 0.91 62 TR_XM_MSPIKECOMBO 8131 2.40 5.95 0.91 63 XM_B_Investor 7865 2.95 5.76 1.78 64 XM_H_Long_From01 7450 5.43 5.45 5.42 65 XMStrtUSub 7259 5.09 5.31 5.00 66 XM_H_GMP 7024 5.56 5.14 5.74 67 HTML_IMAGE_RATIO_04 6973 4.06 5.10 3.62 68 DKIM_INVALID 6882 2.88 5.04 1.98 69 RCVD_IN_MSPIKE_H3 6562 7.36 4.80 8.44 70 MIME_QP_LONG_LINE 6198 5.06 4.54 5.28 71 TR_XM_PhishingBody 6148 2.64 4.50 1.86 72 TooManyTo_001 6083 7.06 4.45 8.15 73 T_XMDrugObfuBody_14 5943 2.42 4.35 1.62 74 XMSexyCombo_05 5881 1.96 4.31 0.97 75 TR_XM_SpammyWords5 5611 2.23 4.11 1.45 76 TR_XM_SpammyWords3 5464 1.44 4.00 0.37 77 XM_OfRef6 5366 1.77 3.93 0.86 78 XM_B_SpammyTLD 5346 3.10 3.91 2.76 79 TM2_M_VERY_LONG_WORD 5199 4.39 3.81 4.64 80 TR_XM_SPAMCOP 5020 1.17 3.67 0.11 81 XMNumbers 4958 3.42 3.63 3.33 82 XMDiploma_00 4675 2.11 3.42 1.56 83 HTML_IMAGE_RATIO_06 4646 3.32 3.40 3.28 84 TM2_M_URI_OPT_OUT 4557 2.14 3.34 1.64 85 MIME_HTML_MOSTLY 4490 2.87 3.29 2.69 86 XM_SPF_SoftFail 4432 1.89 3.24 1.32 87 MIME_HTML_ONLY_MULTI 4398 2.52 3.22 2.23 88 TR_XM_NoHeaderRelay 4361 1.10 3.19 0.23 89 T_XMDrugObfuBody_08 4335 1.83 3.17 1.26 90 XM_B_URI_Unicode 4125 2.33 3.02 2.05 91 XM_B_Unsub2 4089 1.86 2.99 1.39 92 XM_CamelCaseFrm001 4086 2.35 2.99 2.08 93 RCVD_IN_MSPIKE_H4 4069 3.50 2.98 3.73 94 RELAYCOUNTRY_AU 4057 1.26 2.97 0.54 95 RCVD_IN_MSPIKE_L3 4009 1.41 2.93 0.77 96 T_FILL_THIS_FORM_SHORT 3983 1.43 2.92 0.81 97 HTML_IMAGE_RATIO_08 3983 2.50 2.92 2.33 98 XM_URI_RBL 3896 1.12 2.85 0.39 99 XM_B_SpammyWords4 3859 1.29 2.83 0.64 100 USER_IN_DEF_DKIM_WL 3737 9.95 2.74 12.98 101 T_TooManySym_01 3725 4.92 2.73 5.84 102 XM_UB50 3537 1.43 2.59 0.94 103 SpammyFromTLD_02 3519 1.10 2.58 0.49 104 FROM_EXCESS_BASE64 3323 1.67 2.43 1.34 105 RCVD_IN_VALIDITY_SAFE 3264 3.44 2.39 3.88 106 RCVD_IN_VALIDITY_RPBL 3148 0.72 2.30 0.05 107 TR_XM_INV_DKIM 3139 0.69 2.30 0.02 108 RCVD_IN_MSPIKE_H5 3132 4.83 2.29 5.89 109 XMBrknScrpt_02 3128 1.42 2.29 1.05 110 TR_XM_MSPIKECOMBO2 3051 0.69 2.23 0.04 111 XM_H_Long_From02 2926 1.17 2.14 0.76 112 SUBJ_ALL_CAPS 2909 1.60 2.13 1.38 113 RCVD_IN_VALIDITY_CERTIFIED 2759 2.87 2.02 3.23 114 MAILING_LIST_MULTI 2750 2.66 2.01 2.93 115 XMGenDplmaNmb 2740 1.19 2.01 0.85 116 RCVD_IN_MSPIKE_L4 2695 0.68 1.97 0.14 117 XMStockSpam_06 2682 1.46 1.96 1.25 118 ANY_BOUNCE_MESSAGE 2631 5.03 1.93 6.33 119 BOUNCE_MESSAGE 2630 5.02 1.93 6.33 120 TR_LOTS_OF_MONEY3 2618 0.89 1.92 0.46 121 DKIM_ADSP_NXDOMAIN 2578 0.76 1.89 0.29 122 XMBody_17 2549 0.79 1.87 0.34 123 BAYES_40 2493 4.73 1.83 5.95 124 HTML_MIME_NO_HTML_TAG 2473 2.17 1.81 2.32 125 SpammyFromTLD_01 2401 1.04 1.76 0.73 126 SHORTCIRCUIT 2314 0.50 1.69 0.00 127 RCVD_IN_ZEN_LASTEXTERNAL 2314 0.50 1.69 0.00 128 T_REMOTE_IMAGE 2284 2.95 1.67 3.49 129 XM_B_Phish66 2199 0.77 1.61 0.42 130 URI_TRY_3LD 2198 0.81 1.61 0.48 131 RCVD_IN_PSBL 2189 0.72 1.60 0.36 132 XMBdyGiftCard01 2155 0.66 1.58 0.27 133 XM_DK_Undo_01 2126 1.80 1.56 1.90 134 HK_RANDOM_REPLYTO 2052 0.50 1.50 0.08 135 URI_HEX 2019 1.34 1.48 1.28 136 T_XMDrugObfuBody_00 2015 1.01 1.48 0.82 137 ALL_TRUSTED 2011 11.49 1.47 15.69 138 T_XMHurry_00 2010 0.77 1.47 0.47 139 URI_NOVOWEL 1971 1.30 1.44 1.24 140 RCVD_IN_IADB_LISTED 1938 3.21 1.42 3.97 141 TR_XM_INTL_Spamhaus 1930 0.54 1.41 0.17 142 RCVD_IN_PBL 1881 0.90 1.38 0.69 143 XMPhish30 1869 0.75 1.37 0.49 144 TM2_M_A_HREF_HREF 1867 0.59 1.37 0.27 145 BAYES_20 1862 3.18 1.36 3.94 146 RDNS_DYNAMIC 1840 0.50 1.35 0.14 147 KHOP_HELO_FCRDNS 1826 2.45 1.34 2.91 148 XM_HighProb1 1819 0.39 1.33 0.00 149 PDS_RDNS_DYNAMIC_FP 1811 0.41 1.33 0.02 150 LONGLN_LOW_CONTRAST 1799 0.61 1.32 0.31 151 XM_UB99 1772 0.38 1.30 0.00 152 RCVD_IN_IADB_SPF 1765 2.78 1.29 3.41 153 XM_SendGrid 1764 1.45 1.29 1.51 154 XM_B_SEO 1753 0.54 1.28 0.23 155 DIET_1 1740 0.62 1.27 0.35 156 XMBounce_01 1715 0.38 1.26 0.01 157 TR_XM_MaxSPIKE 1708 0.39 1.25 0.03 158 TR_XM_RelayPhish 1698 0.41 1.24 0.06 159 TR_Symld_Words 1695 1.30 1.24 1.33 160 RELAYCOUNTRY_FR 1677 0.54 1.23 0.25 161 URIBL_BLACK 1666 0.37 1.22 0.01 162 RCVD_IN_IADB_DK 1657 2.40 1.21 2.90 163 T_MONEY_PERCENT 1638 0.47 1.20 0.16 164 TR_LOTS_OF_MONEY2 1638 0.47 1.20 0.16 165 RCVD_IN_IADB_SENDERID 1632 2.49 1.19 3.03 166 TVD_RCVD_IP 1622 0.89 1.19 0.77 167 RELAYCOUNTRY_TH 1619 0.35 1.19 0.00 168 DKIM_ADSP_CUSTOM_MED 1614 0.93 1.18 0.82 169 XM_B_COPY_HTML 1599 0.99 1.17 0.91 170 TR_XM_GMP_BULK_SIG 1593 0.46 1.17 0.17 171 TR_XM_Base64_M1 1586 0.76 1.16 0.59 172 TR_XM_PHPForged 1582 0.51 1.16 0.24 173 TR_XM_PHPDW 1577 0.51 1.15 0.24 174 TR_XM_FormFill2 1553 0.50 1.14 0.23 175 MPART_ALT_DIFF_COUNT 1543 0.71 1.13 0.53 176 XM_H_PHPOS 1538 0.49 1.13 0.23 177 TR_XM_SEO4 1451 0.39 1.06 0.11 178 HTTPS_HTTP_MISMATCH 1444 0.77 1.06 0.65 179 TR_XM_FormFill 1429 0.31 1.05 0.00 180 RCVD_IN_MSPIKE_L5 1427 0.31 1.04 0.01 181 SHOPIFY_IMG_NOT_RCVD_SFY 1408 0.49 1.03 0.26 182 HELO_DYNAMIC_SPLIT_IP 1407 0.31 1.03 0.00 183 XMSexyCombo_01 1407 0.45 1.03 0.21 184 T_Symld_Words_02 1402 0.78 1.03 0.67 185 XMPhish14 1391 0.75 1.02 0.64 186 XM_B_DNDMA 1387 0.60 1.02 0.43 187 XM_ProductURIs 1378 0.62 1.01 0.45 188 HTML_FONT_TINY_NORDNS 1361 0.34 1.00 0.07 189 XM_UB80 1352 0.30 0.99 0.02 190 STY_INVIS_DIRECT 1347 0.53 0.99 0.34 191 HTML_IMAGE_ONLY_20 1318 0.69 0.96 0.57 192 TR_XM_InvalidRelay 1315 0.29 0.96 0.01 193 XM_B_COVIDMETA 1313 0.37 0.96 0.12 194 XMHTML_After_End 1301 0.56 0.95 0.39 195 XMBody_78 1294 0.47 0.95 0.27 196 NML_ADSP_CUSTOM_MED 1292 0.65 0.95 0.53 197 SH_BODYURI_REVERSE_SBL 1270 0.28 0.93 0.00 198 URIBL_SBL_A 1267 0.28 0.93 0.00 199 URIBL_SBL 1267 0.28 0.93 0.00 200 THIS_AD 1252 0.44 0.92 0.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286976 90.20 95.12 88.14 2 RELAYCOUNTRY_US 265212 81.20 80.59 81.46 3 DKIM_SIGNED 241722 78.86 89.89 74.24 4 XM_DK_Pass 238748 76.94 85.54 73.33 5 XM_B_Unicode 238351 76.59 84.66 73.21 6 DKIM_VALID 235287 75.98 84.85 72.26 7 BAYES_50 201113 55.01 38.90 61.77 8 DCC_CHECK_NEGATIVE 196062 49.05 22.43 60.22 9 DKIM_VALID_AU 192860 61.38 66.48 59.23 10 XMListUnsubscribeExists 155168 53.76 68.30 47.66 11 XM_B_SpammyWords 152922 53.62 69.49 46.97 12 XM_B_Unicode3 130703 42.78 49.05 40.14 13 DCC_CHECK 129377 50.41 75.86 39.74 14 T_TM2_M_HEADER_IN_MSG 110089 30.38 22.19 33.81 15 DKIM_VALID_EF 94976 29.67 30.85 29.17 16 LOC_TINY_FONT_1 93510 34.46 48.16 28.72 17 HTML_FONT_LOW_CONTRAST 87674 29.15 34.45 26.93 18 FVGT_m_MULTI_ODD 81420 27.80 34.45 25.01 19 T_KAM_HTML_FONT_INVALID 73455 25.07 31.04 22.56 20 XMSubLong 71510 22.77 24.71 21.96 21 XM_B_SpammyWords2 70357 27.31 40.90 21.61 22 RCVD_IN_MSPIKE_WL 58782 15.70 10.08 18.05 23 MIME_HTML_ONLY 56400 21.09 30.06 17.32 24 RCVD_IN_MSPIKE_H2 52370 17.12 19.57 16.08 25 ALL_TRUSTED 51073 11.49 1.47 15.69 26 XM_Multi_Part_URI 43488 15.51 20.64 13.36 27 USER_IN_DEF_DKIM_WL 42264 9.95 2.74 12.98 28 TR_XM_DK_Unsub 41562 15.69 22.67 12.77 29 UNPARSEABLE_RELAY 38269 13.42 17.39 11.75 30 LotsOfNums_01 33512 9.72 8.36 10.29 31 BAYES_00 32698 7.24 0.56 10.04 32 XM_B_PhoneNumber 31561 8.74 6.47 9.69 33 XM_Evil_Numbers_Gen 30478 9.79 10.83 9.36 34 FSL_BULK_SIG 27589 9.14 10.73 8.47 35 RCVD_IN_MSPIKE_H3 27464 7.36 4.80 8.44 36 XM_B_Unsub 26824 11.51 19.31 8.24 37 TooManyTo_001 26541 7.06 4.45 8.15 38 LOTS_OF_MONEY 24269 9.33 13.81 7.45 39 BAYES_60 22951 7.40 8.22 7.05 40 TR_XM_BayesUnsub 21437 10.12 18.55 6.58 41 TR_XM_DK_Bayes 21130 4.70 0.43 6.49 42 TR_XM_DK_Bayes1 20736 4.61 0.42 6.37 43 ANY_BOUNCE_MESSAGE 20599 5.03 1.93 6.33 44 BOUNCE_MESSAGE 20595 5.02 1.93 6.33 45 XM_DKIMWhitelistDomains 20516 4.44 0.01 6.30 46 BAYES_40 19378 4.73 1.83 5.95 47 TR_MAX_INTL_RELAY 19265 9.14 16.82 5.92 48 RCVD_IN_MSPIKE_H5 19189 4.83 2.29 5.89 49 T_TooManySym_01 19008 4.92 2.73 5.84 50 XM_H_GMP 18685 5.56 5.14 5.74 51 XM_H_Long_From01 17633 5.43 5.45 5.42 52 TR_XM_SpammyWords4 17509 7.46 12.42 5.38 53 TR_XM_DK_Bayes2 17477 3.86 0.27 5.37 54 XM_B_Phish_Phrases 17406 6.38 8.84 5.35 55 MIME_QP_LONG_LINE 17205 5.06 4.54 5.28 56 XMStrtUSub 16282 5.09 5.31 5.00 57 XM_B_SpammyWords3 15425 8.08 16.03 4.74 58 MPART_ALT_DIFF 15205 5.08 6.07 4.67 59 TM2_M_VERY_LONG_WORD 15105 4.39 3.81 4.64 60 XM_PDF 14272 3.34 0.86 4.38 61 XM_UncommonTLD01 13887 4.80 6.08 4.27 62 XM_DK_Undo_02 13739 14.55 39.17 4.22 63 HTML_IMAGE_RATIO_02 13386 4.71 6.13 4.11 64 RCVD_IN_IADB_LISTED 12915 3.21 1.42 3.97 65 BAYES_20 12840 3.18 1.36 3.94 66 RCVD_IN_VALIDITY_SAFE 12635 3.44 2.39 3.88 67 RCVD_IN_MSPIKE_H4 12129 3.50 2.98 3.73 68 BAYES_80 12020 5.65 10.31 3.69 69 HTML_IMAGE_RATIO_04 11795 4.06 5.10 3.62 70 T_REMOTE_IMAGE 11353 2.95 1.67 3.49 71 RCVD_IN_IADB_SPF 11091 2.78 1.29 3.41 72 RELAYCOUNTRY_META 10970 7.67 17.93 3.37 73 XMNumbers 10852 3.42 3.63 3.33 74 HTML_IMAGE_RATIO_06 10676 3.32 3.40 3.28 75 RCVD_IN_VALIDITY_CERTIFIED 10522 2.87 2.02 3.23 76 T_TooManySym_02 10312 2.44 0.72 3.17 77 XMSubMetaSx_00 10236 4.24 6.85 3.14 78 BAYES_99 10164 11.14 30.26 3.12 79 RCVD_IN_IADB_SENDERID 9868 2.49 1.19 3.03 80 MAILING_LIST_MULTI 9545 2.66 2.01 2.93 81 KHOP_HELO_FCRDNS 9480 2.45 1.34 2.91 82 RCVD_IN_IADB_DK 9448 2.40 1.21 2.90 83 XM_B_SpammyTLD 8986 3.10 3.91 2.76 84 BOTNET_IPINHOSTNAME 8904 5.68 12.71 2.73 85 RCVD_IN_IADB_VOUCHED 8791 2.09 0.65 2.70 86 MIME_HTML_MOSTLY 8765 2.87 3.29 2.69 87 TooManyTo_002 7973 1.93 0.70 2.45 88 XM_Body_Dirty_Words 7745 3.75 7.01 2.38 89 HTML_IMAGE_RATIO_08 7580 2.50 2.92 2.33 90 HTML_MIME_NO_HTML_TAG 7542 2.17 1.81 2.32 91 BAYES_999 7418 8.31 22.69 2.28 92 MIME_HTML_ONLY_MULTI 7251 2.52 3.22 2.23 93 BAYES_95 7243 3.39 6.16 2.22 94 BAYES_05 7185 1.76 0.71 2.21 95 INVALID_MSGID 7164 1.61 0.20 2.20 96 XM_CamelCaseFrm001 6760 2.35 2.99 2.08 97 TO_MALFORMED 6736 1.46 0.01 2.07 98 XM_B_URI_Unicode 6663 2.33 3.02 2.05 99 DKIM_INVALID 6435 2.88 5.04 1.98 100 MSGID_NOFQDN1 6406 1.39 0.01 1.97 101 XM_DK_Undo_01 6182 1.80 1.56 1.90 102 RCVD_IN_IADB_OPTIN 6179 1.48 0.49 1.90 103 TR_XM_PhishingBody 6062 2.64 4.50 1.86 104 XM_B_Investor 5789 2.95 5.76 1.78 105 TR_XM_DKIM_Undo 5591 9.72 28.80 1.72 106 TR_XM_SpammyRelay 5459 5.12 13.32 1.68 107 TR_XM_UnparsRelay 5391 3.92 9.31 1.66 108 TM2_M_URI_OPT_OUT 5339 2.14 3.34 1.64 109 T_XMDrugObfuBody_14 5262 2.42 4.35 1.62 110 XMDiploma_00 5076 2.11 3.42 1.56 111 TooManyTo_003 5073 1.28 0.61 1.56 112 XM_SendGrid 4920 1.45 1.29 1.51 113 HELO_NODOT 4799 1.07 0.10 1.47 114 HELO_NO_DOMAIN 4793 1.06 0.09 1.47 115 UNTRUSTED_Relay 4777 3.07 6.87 1.47 116 TR_XM_SpammyWords5 4711 2.23 4.11 1.45 117 XM_B_Unsub2 4511 1.86 2.99 1.39 118 SUBJ_ALL_CAPS 4494 1.60 2.13 1.38 119 FROM_EXCESS_BASE64 4379 1.67 2.43 1.34 120 TR_Symld_Words 4323 1.30 1.24 1.33 121 XM_SPF_SoftFail 4306 1.89 3.24 1.32 122 URI_HEX 4153 1.34 1.48 1.28 123 XMGappySubj_01 4139 0.99 0.33 1.27 124 T_XMDrugObfuBody_08 4103 1.83 3.17 1.26 125 XMStockSpam_06 4060 1.46 1.96 1.25 126 IN_HORDE_ADDRESS_BOOK 4057 0.90 0.09 1.25 127 XM_GoogleGroups 4039 1.14 0.89 1.24 128 URI_NOVOWEL 4022 1.30 1.44 1.24 129 TR_DCC_Bayes_99 3896 7.27 21.76 1.20 130 T_TooManySym_03 3785 0.90 0.29 1.16 131 TVD_SPACE_RATIO 3753 0.84 0.11 1.15 132 TooManyTo_004 3677 0.95 0.52 1.13 133 XMCapTrack 3601 0.94 0.54 1.11 134 BOTNET 3484 3.78 10.25 1.07 135 XMBrknScrpt_02 3414 1.42 2.29 1.05 136 TR_XM_DK_SendGrid 3383 1.00 0.90 1.04 137 XMSexyCombo_05 3168 1.96 4.31 0.97 138 XM_UB50 3053 1.43 2.59 0.94 139 TooManyTo_005 2972 0.78 0.48 0.91 140 RCVD_IN_MSPIKE_BL 2972 2.40 5.95 0.91 141 XM_B_COPY_HTML 2971 0.99 1.17 0.91 142 TR_XM_MSPIKECOMBO 2967 2.40 5.95 0.91 143 XMLngstWrd_00 2932 0.75 0.41 0.90 144 XM_ShortIntro_01 2920 0.75 0.40 0.90 145 HTML_IMAGE_ONLY_32 2827 0.67 0.21 0.87 146 XM_OfRef6 2815 1.77 3.93 0.86 147 XMGenDplmaNmb 2753 1.19 2.01 0.85 148 T_XMDrugObfuBody_00 2671 1.01 1.48 0.82 149 DKIM_ADSP_CUSTOM_MED 2667 0.93 1.18 0.82 150 T_FILL_THIS_FORM_SHORT 2636 1.43 2.92 0.81 151 MIME_CHARSET_FARAWAY 2519 0.65 0.37 0.77 152 RCVD_IN_MSPIKE_L3 2502 1.41 2.93 0.77 153 TVD_RCVD_IP 2501 0.89 1.19 0.77 154 XM_H_Long_From02 2478 1.17 2.14 0.76 155 XM_H_PHPMailer 2402 0.66 0.49 0.74 156 TR_MetaPhish_Combo_01 2399 0.71 0.65 0.74 157 SpammyFromTLD_01 2389 1.04 1.76 0.73 158 FROM_GOV_DKIM_AU 2286 0.53 0.12 0.70 159 RELAYCOUNTRY_CA 2261 2.55 6.98 0.69 160 XMSubMetaI_00 2257 0.72 0.78 0.69 161 RCVD_IN_PBL 2256 0.90 1.38 0.69 162 XMGappySubj_02 2219 0.49 0.03 0.68 163 CHARSET_FARAWAY_HEADER 2215 0.54 0.20 0.68 164 T_Symld_Words_02 2183 0.78 1.03 0.67 165 HTTPS_HTTP_MISMATCH 2106 0.77 1.06 0.65 166 XM_B_SpammyWords4 2095 1.29 2.83 0.64 167 XMPhish14 2089 0.75 1.02 0.64 168 RELAYCOUNTRY_GB 2009 0.68 0.83 0.62 169 TR_XM_Base64_M1 1915 0.76 1.16 0.59 170 XMNoVowels 1910 0.53 0.39 0.59 171 T_OBFU_PDF_ATTACH 1896 0.47 0.20 0.58 172 TO_NO_BRKTS_HTML_ONLY 1871 0.47 0.23 0.57 173 HTML_IMAGE_ONLY_20 1855 0.69 0.96 0.57 174 RELAYCOUNTRY_AU 1750 1.26 2.97 0.54 175 MPART_ALT_DIFF_COUNT 1737 0.71 1.13 0.53 176 NML_ADSP_CUSTOM_MED 1729 0.65 0.95 0.53 177 XMSlimDrugH 1717 0.63 0.88 0.53 178 HTML_TAG_BALANCE_BODY 1673 0.60 0.82 0.51 179 FORGED_GMAIL_RCVD 1654 0.63 0.91 0.51 180 XMBSHREFv2 1614 0.51 0.53 0.50 181 XMPhish30 1600 0.75 1.37 0.49 182 XM_B_REG_HTML 1581 0.54 0.68 0.49 183 SpammyFromTLD_02 1581 1.10 2.58 0.49 184 TRACKER_ID 1576 0.41 0.24 0.48 185 MSGID_FROM_MTA_HEADER 1559 0.41 0.25 0.48 186 URI_TRY_3LD 1549 0.81 1.61 0.48 187 T_XMHurry_00 1534 0.77 1.47 0.47 188 XMMoneyMeta_00 1500 0.58 0.87 0.46 189 TR_LOTS_OF_MONEY3 1489 0.89 1.92 0.46 190 XM_ProductURIs 1472 0.62 1.01 0.45 191 LongTLD 1457 0.59 0.91 0.45 192 XMDateMe_00 1421 0.48 0.57 0.44 193 XM_B_DNDMA 1401 0.60 1.02 0.43 194 XM_B_Phish66 1366 0.77 1.61 0.42 195 MISSING_HEADERS 1348 0.47 0.62 0.41 196 RCVD_IN_BL_SPAMCOP_NET 1328 2.77 8.39 0.41 197 SHORT_HELO_AND_INLINE_IMAGE 1305 0.29 0.03 0.40 198 XMBody_95 1292 0.32 0.15 0.40 199 XM_URI_RBL 1276 1.12 2.85 0.39 200 TR_XM_SpammyWords2 1273 3.34 10.38 0.39 ----------------------------------------------------------------------