Email: 532995 Autolearn: 0 AvgScore: 7.16 AvgScanTime: 1.33 sec Spam: 219930 Autolearn: 0 AvgScore: 15.69 AvgScanTime: 1.37 sec Ham: 313065 Autolearn: 0 AvgScore: 1.16 AvgScanTime: 1.29 sec Time Spent Running SA: 196.18 hours Time Spent Processing Spam: 83.59 hours Time Spent Processing Ham: 112.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 213074 91.31 96.88 87.39 2 XM_B_Unicode 196239 78.68 89.23 71.27 3 XM_B_SpammyWords 173993 58.63 79.11 44.24 4 XM_B_Unicode3 147939 52.33 67.27 41.84 5 DKIM_SIGNED 129831 69.60 59.03 77.03 6 HTML_FONT_LOW_CONTRAST 129347 40.06 58.81 26.89 7 XM_DK_Pass 123691 67.86 56.24 76.03 8 DKIM_VALID 122720 67.04 55.80 74.94 9 RELAYCOUNTRY_US 115955 69.87 52.72 81.91 10 DCC_CHECK 109066 45.32 49.59 42.32 11 DCC_CHECK_NEGATIVE 108719 54.25 49.43 57.63 12 RELAYCOUNTRY_META 101250 21.09 46.04 3.56 13 XMListUnsubscribeExists 97820 47.63 44.48 49.85 14 DKIM_VALID_AU 95777 54.10 43.55 61.50 15 TR_XM_SpammyRelay 93677 18.60 42.59 1.75 16 BOTNET 89433 17.43 40.66 1.12 17 UNTRUSTED_Relay 85653 17.03 38.95 1.64 18 TR_XM_MSPIKECOMBO 83372 16.20 37.91 0.96 19 RCVD_IN_MSPIKE_BL 83372 16.20 37.91 0.96 20 TR_XM_SpammyWords3 81360 15.50 36.99 0.41 21 DKIM_ADSP_NXDOMAIN 77522 14.75 35.25 0.34 22 RCVD_IN_MSPIKE_L4 77259 14.53 35.13 0.05 23 ANY_BOUNCE_MESSAGE 76967 16.88 35.00 4.15 24 BOUNCE_MESSAGE 76967 16.88 35.00 4.15 25 XM_B_SpammyWords2 76627 25.15 34.84 18.33 26 XMBounce_01 75984 14.28 34.55 0.03 27 RELAYCOUNTRY_PT 75280 14.12 34.23 0.00 28 LOC_TINY_FONT_1 70446 30.07 32.03 28.69 29 BAYES_50 68171 48.40 31.00 60.62 30 XM_DK_Undo_02 57438 13.68 26.12 4.94 31 TR_MAX_INTL_RELAY 55884 14.25 25.41 6.41 32 FVGT_m_MULTI_ODD 52443 25.39 23.85 26.48 33 BAYES_99 51746 11.84 23.53 3.63 34 DKIM_VALID_EF 44538 26.24 20.25 30.44 35 MIME_HTML_ONLY 43971 19.62 19.99 19.36 36 T_KAM_HTML_FONT_INVALID 43561 21.44 19.81 22.59 37 DATE_IN_PAST_12_24 42405 7.99 19.28 0.06 38 TR_XM_DKIM_Undo 41644 9.07 18.94 2.14 39 XM_Multi_Part_URI 39958 15.84 18.17 14.21 40 BAYES_80 37000 9.27 16.82 3.96 41 BAYES_999 36734 8.47 16.70 2.68 42 XMSubLong 36495 20.25 16.59 22.82 43 BAYES_60 35819 10.97 16.29 7.23 44 DATE_IN_PAST_24_48 33003 6.20 15.01 0.01 45 TR_XM_DK_Unsub 32654 14.36 14.85 14.01 46 RCVD_IN_MSPIKE_H2 30916 16.28 14.06 17.84 47 T_TM2_M_HEADER_IN_MSG 30166 23.10 13.72 29.69 48 TR_DCC_Bayes_99 29444 6.46 13.39 1.60 49 XM_B_Unsub 26773 10.30 12.17 8.98 50 UNPARSEABLE_RELAY 26049 11.95 11.84 12.02 51 TR_XM_BayesUnsub 25899 8.93 11.78 6.93 52 XM_UB60 25400 4.82 11.55 0.09 53 XM_B_Phish_Phrases 25278 7.62 11.49 4.89 54 XM_UB80 24156 4.54 10.98 0.02 55 XM_B_SpammyWords3 20558 6.85 9.35 5.10 56 LOTS_OF_MONEY 20216 7.05 9.19 5.55 57 BAYES_95 18368 4.89 8.35 2.45 58 TR_XM_SpammyWords4 18136 5.55 8.25 3.65 59 BOTNET_IPINHOSTNAME 17660 5.08 8.03 3.01 60 XM_B_SpammyTLD 16952 4.91 7.71 2.94 61 XM_Evil_Numbers_Gen 16538 8.55 7.52 9.28 62 TR_XM_SpammyWords2 15911 3.36 7.23 0.65 63 RCVD_IN_BL_SPAMCOP_NET 15323 3.22 6.97 0.60 64 FSL_BULK_SIG 14998 8.24 6.82 9.23 65 TR_XM_RelayPhish 14246 2.73 6.48 0.09 66 XM_UB50 14199 3.29 6.46 1.06 67 TR_XM_UnparsRelay 13353 3.48 6.07 1.66 68 RCVD_IN_MSPIKE_WL 12106 12.16 5.50 16.83 69 MPART_ALT_DIFF 11664 4.95 5.30 4.71 70 TR_XM_MSPIKECOMBO2 11463 2.18 5.21 0.06 71 LotsOfNums_01 10867 6.95 4.94 8.36 72 XM_UB99 10777 2.02 4.90 0.00 73 XM_UB95 10727 2.02 4.88 0.01 74 XMSubMetaSx_00 10485 3.87 4.77 3.23 75 XM_B_PhoneNumber 9586 7.58 4.36 9.84 76 HTML_IMAGE_RATIO_02 9461 4.37 4.30 4.42 77 XM_UncommonTLD01 9351 4.12 4.25 4.02 78 RELAYCOUNTRY_CA 9281 2.16 4.22 0.71 79 XM_Body_Dirty_Words 8598 3.15 3.91 2.62 80 XMStrtUSub 8140 4.38 3.70 4.87 81 HTML_IMAGE_RATIO_04 8098 3.93 3.68 4.11 82 XM_H_Long_From01 8005 4.88 3.64 5.75 83 XM_B_Investor 7436 2.49 3.38 1.86 84 XM_H_GMP 7436 4.96 3.38 6.08 85 DKIM_INVALID 7111 2.56 3.23 2.09 86 MIME_HTML_MOSTLY 6751 2.58 3.07 2.24 87 TR_XM_SPAMCOP 6728 1.34 3.06 0.12 88 TR_XM_PhishingBody 6416 2.11 2.92 1.54 89 TooManyTo_001 6381 6.32 2.90 8.72 90 RCVD_IN_MSPIKE_H3 6104 5.77 2.78 7.88 91 XMSexyCombo_05 6035 1.73 2.74 1.02 92 USER_IN_DEF_DKIM_WL 6003 8.48 2.73 12.52 93 TR_XM_SpammyWords5 5992 1.99 2.72 1.48 94 T_XMDrugObfuBody_01 5804 1.11 2.64 0.03 95 XM_UB999 5633 1.06 2.56 0.00 96 TM2_M_VERY_LONG_WORD 5416 1.81 2.46 1.35 97 T_XMDrugObfuBody_14 5404 1.96 2.46 1.61 98 MIME_QP_LONG_LINE 5323 4.43 2.42 5.83 99 HTML_IMAGE_RATIO_06 5298 3.12 2.41 3.62 100 XMNumbers 5231 3.08 2.38 3.57 101 XM_B_Unsub2 5138 1.76 2.34 1.35 102 XM_URI_RBL 5115 1.20 2.33 0.41 103 RELAYCOUNTRY_AU 5036 1.26 2.29 0.54 104 TR_XM_NoHeaderRelay 4676 1.00 2.13 0.21 105 XMDiploma_00 4595 1.82 2.09 1.63 106 MIME_HTML_ONLY_MULTI 4536 2.40 2.06 2.63 107 XM_SPF_SoftFail 4517 1.74 2.05 1.52 108 TM2_M_URI_OPT_OUT 4504 1.98 2.05 1.94 109 XM_OfRef6 4395 1.34 2.00 0.87 110 XMStockSpam_06 4377 1.33 1.99 0.86 111 T_TooManySym_01 4367 4.30 1.99 5.92 112 HTML_IMAGE_RATIO_08 4238 2.20 1.93 2.39 113 URI_HEX 4234 1.49 1.93 1.19 114 XM_CamelCaseFrm001 4214 2.23 1.92 2.45 115 SpammyFromTLD_02 4212 1.11 1.92 0.54 116 FROM_EXCESS_BASE64 4194 1.76 1.91 1.66 117 RCVD_IN_MSPIKE_L3 4157 1.31 1.89 0.89 118 XM_B_SpammyWords4 4060 1.22 1.85 0.78 119 T_XMDrugObfuBody_08 3862 1.51 1.76 1.33 120 T_FILL_THIS_FORM_SHORT 3723 1.22 1.69 0.89 121 RCVD_IN_VALIDITY_RPBL 3653 0.71 1.66 0.05 122 RCVD_IN_VALIDITY_SAFE 3549 3.12 1.61 4.17 123 XMBrknScrpt_02 3443 1.18 1.57 0.91 124 KHOP_HELO_FCRDNS 3413 1.56 1.55 1.57 125 RCVD_IN_MSPIKE_H4 3398 2.53 1.55 3.23 126 SUBJ_ALL_CAPS 3367 1.55 1.53 1.57 127 XM_B_URI_Unicode 3353 1.99 1.52 2.31 128 MAILING_LIST_MULTI 3182 2.64 1.45 3.48 129 RCVD_IN_VALIDITY_CERTIFIED 2927 2.63 1.33 3.54 130 TR_XM_INV_DKIM 2922 0.56 1.33 0.01 131 ALL_TRUSTED 2858 9.35 1.30 15.00 132 T_XMDrugObfuBody_00 2757 0.96 1.25 0.76 133 XM_H_Long_From02 2745 1.04 1.25 0.89 134 T_XMHurry_00 2737 0.90 1.24 0.66 135 BAYES_40 2732 3.74 1.24 5.50 136 XMBody_17 2698 0.71 1.23 0.35 137 XM_SendGrid 2694 1.41 1.22 1.54 138 T_REMOTE_IMAGE 2671 2.67 1.21 3.70 139 URI_TRY_3LD 2641 0.99 1.20 0.84 140 RCVD_IN_MSPIKE_H5 2604 3.86 1.18 5.73 141 SpammyFromTLD_01 2590 0.90 1.18 0.70 142 RCVD_IN_PSBL 2571 0.75 1.17 0.46 143 TR_LOTS_OF_MONEY3 2527 0.67 1.15 0.34 144 XMGenDplmaNmb 2520 1.04 1.15 0.96 145 TR_MetaPhish_Combo_01 2492 1.02 1.13 0.94 146 XMSubMetaSxObfu_03 2462 0.70 1.12 0.41 147 XM_HighProb1 2455 0.46 1.12 0.00 148 XMPhish30 2447 0.70 1.11 0.41 149 RCVD_IN_IADB_LISTED 2440 2.58 1.11 3.61 150 MPART_ALT_DIFF_COUNT 2320 0.72 1.05 0.49 151 TVD_RCVD_IP 2312 0.97 1.05 0.91 152 XMBdyGiftCard01 2302 0.58 1.05 0.26 153 XM_DK_Undo_01 2294 1.60 1.04 2.00 154 HTML_MIME_NO_HTML_TAG 2252 1.97 1.02 2.64 155 DIET_1 2190 0.69 1.00 0.47 156 TR_XM_INTL_Spamhaus 2175 0.51 0.99 0.17 157 RCVD_IN_IADB_SPF 2154 2.29 0.98 3.21 158 TR_XM_PHPForged 2124 0.69 0.97 0.49 159 RCVD_IN_ZEN_LASTEXTERNAL 2114 0.40 0.96 0.00 160 SHORTCIRCUIT 2114 0.40 0.96 0.00 161 TR_XM_PHPDW 2101 0.69 0.96 0.50 162 TR_XM_FormFill2 2096 0.69 0.95 0.50 163 LONG_JUNK_URI3 2096 0.42 0.95 0.05 164 BAYES_20 2092 2.67 0.95 3.88 165 XM_H_PHPOS 2087 0.68 0.95 0.49 166 STY_INVIS_DIRECT 2034 0.57 0.92 0.32 167 RCVD_IN_XBL 2029 0.39 0.92 0.01 168 TR_Symld_Words 2005 1.25 0.91 1.50 169 RCVD_IN_IADB_DK 2005 2.02 0.91 2.80 170 RCVD_IN_IADB_SENDERID 1994 2.07 0.91 2.88 171 XM_B_COPY_HTML 1962 0.75 0.89 0.65 172 RCVD_IN_MSPIKE_L5 1956 0.37 0.89 0.01 173 URI_NOVOWEL 1942 1.22 0.88 1.46 174 RCVD_IN_SBL_CSS 1907 0.38 0.87 0.04 175 RCVD_IN_PBL 1861 0.77 0.85 0.72 176 RELAYCOUNTRY_FR 1851 0.54 0.84 0.34 177 RDNS_DYNAMIC 1832 0.44 0.83 0.16 178 T_MONEY_PERCENT 1806 0.49 0.82 0.25 179 TR_LOTS_OF_MONEY2 1806 0.49 0.82 0.25 180 TR_XM_Base64_M1 1795 0.67 0.82 0.57 181 TR_XM_SB_Phish 1788 0.45 0.81 0.20 182 XMReplyNow 1776 0.49 0.81 0.26 183 PDS_RDNS_DYNAMIC_FP 1768 0.35 0.80 0.03 184 XM_B_Phish66 1725 0.55 0.78 0.39 185 XM_B_SEO 1704 0.49 0.77 0.28 186 URIBL_BLACK 1631 0.32 0.74 0.02 187 T_TooManySym_02 1592 2.17 0.72 3.18 188 THIS_AD 1575 0.49 0.72 0.34 189 XMBody_78 1572 0.51 0.71 0.37 190 SHOPIFY_IMG_NOT_RCVD_SFY 1568 0.43 0.71 0.22 191 XMSubPhish11 1564 0.39 0.71 0.17 192 URIBL_SBL_A 1552 0.29 0.71 0.00 193 URIBL_SBL 1552 0.29 0.71 0.00 194 XM_ProductURIs 1522 0.58 0.69 0.50 195 DKIM_ADSP_CUSTOM_MED 1521 0.74 0.69 0.78 196 SH_BODYURI_REVERSE_SBL 1514 0.29 0.69 0.00 197 HK_RANDOM_REPLYTO 1513 0.33 0.69 0.08 198 LONGLN_LOW_CONTRAST 1479 0.42 0.67 0.24 199 MultiRelay_CC 1477 0.38 0.67 0.17 200 LongTLD 1424 0.59 0.65 0.54 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 273584 91.31 96.88 87.39 2 RELAYCOUNTRY_US 256427 69.87 52.72 81.91 3 DKIM_SIGNED 241150 69.60 59.03 77.03 4 XM_DK_Pass 238024 67.86 56.24 76.03 5 DKIM_VALID 234622 67.04 55.80 74.94 6 XM_B_Unicode 223122 78.68 89.23 71.27 7 DKIM_VALID_AU 192550 54.10 43.55 61.50 8 BAYES_50 189779 48.40 31.00 60.62 9 DCC_CHECK_NEGATIVE 180422 54.25 49.43 57.63 10 XMListUnsubscribeExists 156051 47.63 44.48 49.85 11 XM_B_SpammyWords 138486 58.63 79.11 44.24 12 DCC_CHECK 132492 45.32 49.59 42.32 13 XM_B_Unicode3 130997 52.33 67.27 41.84 14 DKIM_VALID_EF 95304 26.24 20.25 30.44 15 T_TM2_M_HEADER_IN_MSG 92944 23.10 13.72 29.69 16 LOC_TINY_FONT_1 89820 30.07 32.03 28.69 17 HTML_FONT_LOW_CONTRAST 84197 40.06 58.81 26.89 18 FVGT_m_MULTI_ODD 82892 25.39 23.85 26.48 19 XMSubLong 71457 20.25 16.59 22.82 20 T_KAM_HTML_FONT_INVALID 70725 21.44 19.81 22.59 21 MIME_HTML_ONLY 60607 19.62 19.99 19.36 22 XM_B_SpammyWords2 57399 25.15 34.84 18.33 23 RCVD_IN_MSPIKE_H2 55849 16.28 14.06 17.84 24 RCVD_IN_MSPIKE_WL 52704 12.16 5.50 16.83 25 ALL_TRUSTED 46964 9.35 1.30 15.00 26 XM_Multi_Part_URI 44487 15.84 18.17 14.21 27 TR_XM_DK_Unsub 43858 14.36 14.85 14.01 28 USER_IN_DEF_DKIM_WL 39183 8.48 2.73 12.52 29 UNPARSEABLE_RELAY 37622 11.95 11.84 12.02 30 BAYES_00 32769 6.31 0.39 10.47 31 XM_B_PhoneNumber 30806 7.58 4.36 9.84 32 XM_Evil_Numbers_Gen 29043 8.55 7.52 9.28 33 FSL_BULK_SIG 28902 8.24 6.82 9.23 34 XM_B_Unsub 28114 10.30 12.17 8.98 35 TooManyTo_001 27288 6.32 2.90 8.72 36 LotsOfNums_01 26178 6.95 4.94 8.36 37 RCVD_IN_MSPIKE_H3 24655 5.77 2.78 7.88 38 BAYES_60 22648 10.97 16.29 7.23 39 TR_XM_DK_Bayes 21808 4.22 0.30 6.97 40 TR_XM_BayesUnsub 21692 8.93 11.78 6.93 41 TR_XM_DK_Bayes1 21473 4.15 0.30 6.86 42 XM_DKIMWhitelistDomains 20781 3.93 0.08 6.64 43 TR_MAX_INTL_RELAY 20060 14.25 25.41 6.41 44 XM_H_GMP 19027 4.96 3.38 6.08 45 T_TooManySym_01 18528 4.30 1.99 5.92 46 MIME_QP_LONG_LINE 18267 4.43 2.42 5.83 47 TR_XM_DK_Bayes2 18120 3.48 0.20 5.79 48 XM_H_Long_From01 17994 4.88 3.64 5.75 49 RCVD_IN_MSPIKE_H5 17952 3.86 1.18 5.73 50 LOTS_OF_MONEY 17372 7.05 9.19 5.55 51 BAYES_40 17226 3.74 1.24 5.50 52 XM_B_SpammyWords3 15968 6.85 9.35 5.10 53 XM_DK_Undo_02 15458 13.68 26.12 4.94 54 XM_B_Phish_Phrases 15311 7.62 11.49 4.89 55 XMStrtUSub 15231 4.38 3.70 4.87 56 MPART_ALT_DIFF 14730 4.95 5.30 4.71 57 XM_PDF 14244 2.90 0.56 4.55 58 HTML_IMAGE_RATIO_02 13849 4.37 4.30 4.42 59 RCVD_IN_VALIDITY_SAFE 13063 3.12 1.61 4.17 60 BOUNCE_MESSAGE 12977 16.88 35.00 4.15 61 ANY_BOUNCE_MESSAGE 12977 16.88 35.00 4.15 62 HTML_IMAGE_RATIO_04 12861 3.93 3.68 4.11 63 XM_UncommonTLD01 12586 4.12 4.25 4.02 64 BAYES_80 12383 9.27 16.82 3.96 65 BAYES_20 12147 2.67 0.95 3.88 66 T_REMOTE_IMAGE 11574 2.67 1.21 3.70 67 TR_XM_SpammyWords4 11426 5.55 8.25 3.65 68 BAYES_99 11354 11.84 23.53 3.63 69 HTML_IMAGE_RATIO_06 11320 3.12 2.41 3.62 70 RCVD_IN_IADB_LISTED 11317 2.58 1.11 3.61 71 XMNumbers 11180 3.08 2.38 3.57 72 RELAYCOUNTRY_META 11149 21.09 46.04 3.56 73 RCVD_IN_VALIDITY_CERTIFIED 11069 2.63 1.33 3.54 74 MAILING_LIST_MULTI 10894 2.64 1.45 3.48 75 XMSubMetaSx_00 10116 3.87 4.77 3.23 76 RCVD_IN_MSPIKE_H4 10097 2.53 1.55 3.23 77 RCVD_IN_IADB_SPF 10036 2.29 0.98 3.21 78 T_TooManySym_02 9960 2.17 0.72 3.18 79 BOTNET_IPINHOSTNAME 9409 5.08 8.03 3.01 80 XM_B_SpammyTLD 9218 4.91 7.71 2.94 81 TooManyTo_002 9112 1.96 0.60 2.91 82 RCVD_IN_IADB_SENDERID 9020 2.07 0.91 2.88 83 RCVD_IN_IADB_DK 8754 2.02 0.91 2.80 84 BAYES_999 8392 8.47 16.70 2.68 85 HTML_MIME_NO_HTML_TAG 8251 1.97 1.02 2.64 86 MIME_HTML_ONLY_MULTI 8239 2.40 2.06 2.63 87 XM_Body_Dirty_Words 8197 3.15 3.91 2.62 88 BAYES_95 7673 4.89 8.35 2.45 89 XM_CamelCaseFrm001 7671 2.23 1.92 2.45 90 HTML_IMAGE_RATIO_08 7476 2.20 1.93 2.39 91 INVALID_MSGID 7467 1.49 0.22 2.39 92 RCVD_IN_IADB_VOUCHED 7360 1.60 0.53 2.35 93 XM_B_URI_Unicode 7227 1.99 1.52 2.31 94 BAYES_05 7085 1.52 0.47 2.26 95 MIME_HTML_MOSTLY 7006 2.58 3.07 2.24 96 MSGID_NOFQDN1 6772 1.31 0.09 2.16 97 TR_XM_DKIM_Undo 6703 9.07 18.94 2.14 98 DKIM_INVALID 6528 2.56 3.23 2.09 99 TO_MALFORMED 6346 1.19 0.00 2.03 100 XM_DK_Undo_01 6260 1.60 1.04 2.00 101 TM2_M_URI_OPT_OUT 6071 1.98 2.05 1.94 102 XM_B_Investor 5829 2.49 3.38 1.86 103 TR_XM_SpammyRelay 5467 18.60 42.59 1.75 104 TooManyTo_003 5214 1.18 0.49 1.67 105 FROM_EXCESS_BASE64 5203 1.76 1.91 1.66 106 TR_XM_UnparsRelay 5199 3.48 6.07 1.66 107 UNTRUSTED_Relay 5142 17.03 38.95 1.64 108 XMDiploma_00 5117 1.82 2.09 1.63 109 T_XMDrugObfuBody_14 5025 1.96 2.46 1.61 110 RCVD_IN_IADB_OPTIN 4997 1.08 0.34 1.60 111 TR_DCC_Bayes_99 4995 6.46 13.39 1.60 112 SUBJ_ALL_CAPS 4920 1.55 1.53 1.57 113 KHOP_HELO_FCRDNS 4914 1.56 1.55 1.57 114 XM_SendGrid 4818 1.41 1.22 1.54 115 TR_XM_PhishingBody 4812 2.11 2.92 1.54 116 XM_SPF_SoftFail 4743 1.74 2.05 1.52 117 TR_Symld_Words 4681 1.25 0.91 1.50 118 TR_XM_SpammyWords5 4641 1.99 2.72 1.48 119 XM_GoogleGroups 4570 1.12 0.63 1.46 120 URI_NOVOWEL 4568 1.22 0.88 1.46 121 HELO_NODOT 4545 0.89 0.10 1.45 122 HELO_NO_DOMAIN 4538 0.89 0.09 1.45 123 TM2_M_VERY_LONG_WORD 4232 1.81 2.46 1.35 124 XM_B_Unsub2 4232 1.76 2.34 1.35 125 XMGappySubj_01 4207 0.85 0.14 1.34 126 IN_HORDE_ADDRESS_BOOK 4163 0.80 0.04 1.33 127 T_XMDrugObfuBody_08 4161 1.51 1.76 1.33 128 XM_ShortIntro_01 3887 0.84 0.28 1.24 129 TooManyTo_004 3857 0.89 0.40 1.23 130 T_TooManySym_03 3857 0.90 0.42 1.23 131 URI_HEX 3724 1.49 1.93 1.19 132 BOTNET 3493 17.43 40.66 1.12 133 XMCapTrack 3461 0.80 0.37 1.11 134 XM_UB50 3330 3.29 6.46 1.06 135 XMSexyCombo_05 3208 1.73 2.74 1.02 136 TR_XM_DK_SendGrid 3053 0.82 0.59 0.98 137 TooManyTo_005 3047 0.72 0.35 0.97 138 T_TVD_MIME_NO_HEADERS 3040 0.59 0.05 0.97 139 XMGenDplmaNmb 3004 1.04 1.15 0.96 140 RCVD_IN_MSPIKE_BL 2993 16.20 37.91 0.96 141 TR_XM_MSPIKECOMBO 2990 16.20 37.91 0.96 142 TR_MetaPhish_Combo_01 2930 1.02 1.13 0.94 143 TVD_SPACE_RATIO 2926 0.63 0.20 0.93 144 TVD_RCVD_IP 2858 0.97 1.05 0.91 145 XMBrknScrpt_02 2835 1.18 1.57 0.91 146 RCVD_IN_MSPIKE_L3 2800 1.31 1.89 0.89 147 T_FILL_THIS_FORM_SHORT 2794 1.22 1.69 0.89 148 XM_H_PHPMailer 2785 0.65 0.30 0.89 149 XM_H_Long_From02 2776 1.04 1.25 0.89 150 XM_OfRef6 2724 1.34 2.00 0.87 151 XMStockSpam_06 2704 1.33 1.99 0.86 152 URI_TRY_3LD 2634 0.99 1.20 0.84 153 DKIM_ADSP_CUSTOM_MED 2436 0.74 0.69 0.78 154 XM_B_SpammyWords4 2427 1.22 1.85 0.78 155 T_XMDrugObfuBody_00 2370 0.96 1.25 0.76 156 RCVD_IN_PBL 2254 0.77 0.85 0.72 157 RELAYCOUNTRY_CA 2211 2.16 4.22 0.71 158 FROM_GOV_DKIM_AU 2205 0.46 0.10 0.70 159 SpammyFromTLD_01 2199 0.90 1.18 0.70 160 HTTPS_HTTP_MISMATCH 2161 0.65 0.60 0.69 161 TO_NO_BRKTS_HTML_ONLY 2158 0.48 0.18 0.69 162 T_XMHurry_00 2081 0.90 1.24 0.66 163 RELAYCOUNTRY_GB 2068 0.63 0.59 0.66 164 T_Symld_Words_02 2064 0.60 0.52 0.66 165 TR_XM_SpammyWords2 2024 3.36 7.23 0.65 166 XM_B_COPY_HTML 2021 0.75 0.89 0.65 167 XMNoVowels 1981 0.52 0.36 0.63 168 XMGappySubj_02 1966 0.38 0.02 0.63 169 XMLngstWrd_00 1965 0.54 0.41 0.63 170 T_OBFU_PDF_ATTACH 1894 0.40 0.10 0.60 171 XM_B_FormFill 1872 0.35 0.01 0.60 172 RCVD_IN_BL_SPAMCOP_NET 1864 3.22 6.97 0.60 173 XMSlimDrugH 1863 0.57 0.54 0.60 174 TR_XM_Base64_M1 1788 0.67 0.82 0.57 175 XMMoneyMeta_00 1782 0.52 0.46 0.57 176 LongTLD 1705 0.59 0.65 0.54 177 SpammyFromTLD_02 1697 1.11 1.92 0.54 178 RELAYCOUNTRY_AU 1680 1.26 2.29 0.54 179 XMLngstWrd_01 1668 0.44 0.31 0.53 180 HTML_TAG_BALANCE_BODY 1660 0.51 0.49 0.53 181 XMSolicitRefs_0 1658 0.44 0.31 0.53 182 XMBSHREFv2 1649 0.43 0.28 0.53 183 MSGID_FROM_MTA_HEADER 1637 0.39 0.19 0.52 184 TR_XM_PHPDW 1566 0.69 0.96 0.50 185 NML_ADSP_CUSTOM_MED 1564 0.52 0.56 0.50 186 TR_XM_FormFill2 1560 0.69 0.95 0.50 187 HTML_IMAGE_ONLY_20 1560 0.51 0.52 0.50 188 XM_ProductURIs 1551 0.58 0.69 0.50 189 TR_XM_PHPForged 1547 0.69 0.97 0.49 190 XMDateMe_00 1533 0.38 0.23 0.49 191 XM_H_PHPOS 1526 0.68 0.95 0.49 192 MPART_ALT_DIFF_COUNT 1520 0.72 1.05 0.49 193 FORGED_GMAIL_RCVD 1489 0.50 0.53 0.48 194 DIET_1 1477 0.69 1.00 0.47 195 HTML_IMAGE_ONLY_32 1461 0.32 0.12 0.47 196 RCVD_IN_PSBL 1449 0.75 1.17 0.46 197 MISSING_HEADERS 1406 0.45 0.44 0.45 198 XMHTML_After_End 1400 0.52 0.62 0.45 199 XMPhish14 1361 0.51 0.63 0.43 200 XMLngstWrd_02 1337 0.36 0.27 0.43 ----------------------------------------------------------------------