Email: 462229 Autolearn: 0 AvgScore: 5.67 AvgScanTime: 1.39 sec Spam: 152214 Autolearn: 0 AvgScore: 14.73 AvgScanTime: 1.58 sec Ham: 310015 Autolearn: 0 AvgScore: 1.23 AvgScanTime: 1.30 sec Time Spent Running SA: 178.79 hours Time Spent Processing Spam: 66.61 hours Time Spent Processing Ham: 112.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145992 90.29 95.91 87.53 2 DKIM_SIGNED 132942 78.61 87.34 74.32 3 XM_B_Unicode 130124 76.03 85.49 71.38 4 XM_DK_Pass 125540 76.45 82.48 73.49 5 DKIM_VALID 124553 75.55 81.83 72.47 6 RELAYCOUNTRY_US 117857 78.00 77.43 78.28 7 DCC_CHECK 110454 52.45 72.56 42.57 8 XM_B_SpammyWords 106026 51.84 69.66 43.10 9 XMListUnsubscribeExists 98064 53.02 64.43 47.42 10 DKIM_VALID_AU 97070 60.61 63.77 59.05 11 XM_B_Unicode3 77796 42.56 51.11 38.36 12 LOC_TINY_FONT_1 71231 33.48 46.80 26.94 13 HTML_FONT_LOW_CONTRAST 62115 30.99 40.81 26.17 14 BAYES_50 61369 54.14 40.32 60.93 15 XM_DK_Undo_02 60447 16.43 39.71 5.01 16 XM_B_SpammyWords2 59603 25.27 39.16 18.45 17 FVGT_m_MULTI_ODD 52250 27.48 34.33 24.11 18 DKIM_VALID_EF 46366 30.57 30.46 30.62 19 BAYES_99 44327 11.89 29.12 3.43 20 T_KAM_HTML_FONT_INVALID 44137 24.45 29.00 22.22 21 TR_XM_DKIM_Undo 43522 10.60 28.59 1.77 22 MIME_HTML_ONLY 42434 22.25 27.88 19.49 23 DCC_CHECK_NEGATIVE 39769 47.09 26.13 57.38 24 XMSubLong 39218 26.63 25.77 27.05 25 TR_XM_DK_Unsub 34086 16.49 22.39 13.59 26 RCVD_IN_MSPIKE_H2 33869 19.24 22.25 17.75 27 XM_Multi_Part_URI 33571 16.26 22.06 13.42 28 BAYES_999 33571 9.00 22.06 2.59 29 RELAYCOUNTRY_META 33211 9.49 21.82 3.44 30 T_TM2_M_HEADER_IN_MSG 32654 26.19 21.45 28.52 31 TR_DCC_Bayes_99 31147 7.57 20.46 1.24 32 XM_B_Unsub 27954 11.86 18.36 8.67 33 UNPARSEABLE_RELAY 26930 13.72 17.69 11.76 34 TR_XM_BayesUnsub 26730 10.23 17.56 6.63 35 TR_XM_SpammyRelay 25226 6.64 16.57 1.76 36 TR_MAX_INTL_RELAY 25086 9.57 16.48 6.17 37 XM_B_SpammyWords3 22100 8.08 14.52 4.92 38 BOTNET 21285 5.43 13.98 1.23 39 LOTS_OF_MONEY 20507 8.57 13.47 6.16 40 TR_XM_SpammyWords4 18228 6.73 11.98 4.15 41 BOTNET_IPINHOSTNAME 18193 5.97 11.95 3.03 42 RCVD_IN_BL_SPAMCOP_NET 17062 4.20 11.21 0.76 43 FSL_BULK_SIG 16235 9.71 10.67 9.24 44 BAYES_80 15846 5.88 10.41 3.66 45 UNTRUSTED_Relay 15256 4.44 10.02 1.69 46 XM_Evil_Numbers_Gen 14933 8.56 9.81 7.95 47 XM_B_Phish_Phrases 14677 6.68 9.64 5.23 48 TR_XM_SpammyWords2 14268 3.37 9.37 0.42 49 TR_XM_UnparsRelay 13480 3.95 8.86 1.54 50 BAYES_60 13477 7.65 8.85 7.06 51 RCVD_IN_MSPIKE_BL 13386 3.51 8.79 0.91 52 TR_XM_MSPIKECOMBO 13379 3.50 8.79 0.91 53 RCVD_IN_MSPIKE_WL 12174 13.36 8.00 15.99 54 MPART_ALT_DIFF 11945 8.18 7.85 8.34 55 LotsOfNums_01 11844 7.65 7.78 7.58 56 TR_XM_SpammyWords3 10868 2.66 7.14 0.46 57 RELAYCOUNTRY_CA 10001 2.65 6.57 0.73 58 TR_XM_SPAMCOP 9737 2.21 6.40 0.16 59 XMSubMetaSx_00 9636 4.13 6.33 3.05 60 XM_B_PhoneNumber 9214 8.32 6.05 9.43 61 DKIM_ADSP_NXDOMAIN 8905 2.15 5.85 0.33 62 BAYES_95 8795 3.59 5.78 2.52 63 XM_UncommonTLD01 8477 4.48 5.57 3.94 64 HTML_IMAGE_RATIO_02 8454 4.70 5.55 4.28 65 XM_H_Long_From01 8447 5.26 5.55 5.12 66 DKIM_INVALID 8389 3.06 5.51 1.85 67 XMStrtUSub 8292 5.09 5.45 4.91 68 XM_Body_Dirty_Words 8277 3.32 5.44 2.28 69 RCVD_IN_MSPIKE_L4 8184 1.81 5.38 0.06 70 HTML_IMAGE_RATIO_04 7669 4.60 5.04 4.38 71 ANY_BOUNCE_MESSAGE 7304 3.78 4.80 3.27 72 BOUNCE_MESSAGE 7303 3.77 4.80 3.26 73 XM_B_Investor 7273 2.57 4.78 1.48 74 TR_XM_PhishingBody 7248 2.58 4.76 1.50 75 XM_H_GMP 6864 5.14 4.51 5.46 76 TM2_M_VERY_LONG_WORD 6591 2.32 4.33 1.34 77 XMBounce_01 6333 1.40 4.16 0.04 78 RELAYCOUNTRY_PT 6216 1.34 4.08 0.00 79 RCVD_IN_MSPIKE_H3 6133 6.61 4.03 7.88 80 XMSexyCombo_05 6131 2.00 4.03 1.00 81 XMDiploma_00 6113 2.45 4.02 1.68 82 XM_B_SpammyTLD 6108 3.16 4.01 2.74 83 XM_OfRef6 5945 2.03 3.91 1.12 84 MIME_HTML_MOSTLY 5777 5.37 3.80 6.15 85 T_XMDrugObfuBody_14 5760 2.40 3.78 1.72 86 TooManyTo_001 5395 6.90 3.54 8.55 87 TR_XM_SpammyWords5 5243 2.29 3.44 1.73 88 USER_IN_DEF_DKIM_WL 5121 9.56 3.36 12.60 89 XM_URI_RBL 5089 1.30 3.34 0.30 90 XM_UB50 5057 1.84 3.32 1.11 91 TR_XM_NoHeaderRelay 5041 1.22 3.31 0.19 92 RELAYCOUNTRY_AU 4973 1.37 3.27 0.44 93 XMNumbers 4832 3.58 3.17 3.79 94 XM_B_Unsub2 4696 2.05 3.09 1.54 95 MIME_HTML_ONLY_MULTI 4675 2.57 3.07 2.33 96 HTML_IMAGE_RATIO_06 4609 3.32 3.03 3.47 97 MIME_QP_LONG_LINE 4402 4.49 2.89 5.28 98 XM_CamelCaseFrm001 4397 2.15 2.89 1.79 99 HTML_IMAGE_RATIO_08 4372 2.71 2.87 2.63 100 XM_B_URI_Unicode 4231 2.30 2.78 2.06 101 XMBrknScrpt_02 4227 1.53 2.78 0.91 102 XM_SPF_SoftFail 4216 1.80 2.77 1.33 103 XM_B_SpammyWords4 3976 1.41 2.61 0.82 104 T_XMDrugObfuBody_08 3923 1.74 2.58 1.33 105 RCVD_IN_VALIDITY_SAFE 3886 3.52 2.55 3.99 106 RCVD_IN_MSPIKE_L3 3832 1.40 2.52 0.85 107 XMStockSpam_06 3768 1.64 2.48 1.22 108 T_XMHurry_00 3683 1.25 2.42 0.68 109 T_FILL_THIS_FORM_SHORT 3648 1.41 2.40 0.92 110 XM_UB80 3553 0.78 2.33 0.01 111 TR_XM_INV_DKIM 3532 0.77 2.32 0.01 112 HK_RANDOM_REPLYTO 3516 0.83 2.31 0.11 113 T_TooManySym_01 3459 4.82 2.27 6.08 114 SpammyFromTLD_02 3430 1.08 2.25 0.50 115 TR_LOTS_OF_MONEY3 3209 1.00 2.11 0.46 116 XMGenDplmaNmb 3206 1.43 2.11 1.10 117 RCVD_IN_MSPIKE_H4 3191 2.81 2.10 3.16 118 XMBody_17 3166 0.89 2.08 0.31 119 T_REMOTE_IMAGE 3158 3.05 2.07 3.53 120 RCVD_IN_VALIDITY_CERTIFIED 3114 3.02 2.05 3.50 121 FROM_EXCESS_BASE64 3079 1.66 2.02 1.48 122 ALL_TRUSTED 3045 13.18 2.00 18.66 123 XM_UB60 2965 0.69 1.95 0.08 124 DATE_IN_PAST_03_06 2876 0.67 1.89 0.07 125 RCVD_IN_MSPIKE_H5 2850 3.94 1.87 4.95 126 TM2_M_URI_OPT_OUT 2842 1.75 1.87 1.69 127 SUBJ_ALL_CAPS 2837 1.50 1.86 1.32 128 MAILING_LIST_MULTI 2822 2.62 1.85 2.99 129 XM_H_Long_From02 2795 1.08 1.84 0.71 130 XMPhish30 2543 0.88 1.67 0.49 131 T_XMDrugObfuBody_00 2518 1.24 1.65 1.04 132 URI_TRY_3LD 2517 0.95 1.65 0.60 133 MultiRelay_CC 2454 0.63 1.61 0.15 134 BAYES_40 2403 4.65 1.58 6.16 135 KHOP_HELO_FCRDNS 2402 1.34 1.58 1.22 136 HTML_MIME_NO_HTML_TAG 2389 2.37 1.57 2.76 137 XMBdyGiftCard01 2363 0.74 1.55 0.34 138 RCVD_IN_VALIDITY_RPBL 2356 0.54 1.55 0.04 139 SpammyFromTLD_01 2354 1.00 1.55 0.74 140 XM_SendGrid 2344 1.51 1.54 1.50 141 RCVD_IN_IADB_LISTED 2277 2.82 1.50 3.47 142 RCVD_IN_PSBL 2266 0.77 1.49 0.42 143 RELAYCOUNTRY_IN 2220 0.50 1.46 0.03 144 TR_LOTS_OF_MONEY2 2180 0.63 1.43 0.24 145 T_MONEY_PERCENT 2180 0.63 1.43 0.24 146 TR_XM_MSPIKECOMBO2 2129 0.54 1.40 0.11 147 DIET_1 2095 0.70 1.38 0.37 148 TVD_RCVD_IP 2079 1.20 1.37 1.12 149 XM_B_DNDMA 2012 0.66 1.32 0.33 150 RCVD_IN_IADB_SPF 1995 2.49 1.31 3.07 151 URI_NOVOWEL 1978 1.27 1.30 1.25 152 XM_B_Phish66 1971 0.68 1.29 0.37 153 URI_HEX 1965 1.43 1.29 1.50 154 SHORTCIRCUIT 1955 0.42 1.28 0.00 155 RCVD_IN_ZEN_LASTEXTERNAL 1955 0.42 1.28 0.00 156 TR_XM_INTL_Spamhaus 1952 0.51 1.28 0.13 157 BAYES_20 1933 3.30 1.27 4.29 158 RELAYCOUNTRY_DE 1916 0.62 1.26 0.31 159 TR_MetaPhish_Combo_01 1903 1.01 1.25 0.89 160 XM_B_COPY_HTML 1901 0.91 1.25 0.75 161 RCVD_IN_IADB_DK 1869 2.20 1.23 2.67 162 XM_DK_Undo_01 1831 1.66 1.20 1.88 163 RCVD_IN_IADB_SENDERID 1828 2.23 1.20 2.74 164 THIS_AD 1827 0.59 1.20 0.29 165 STY_INVIS_DIRECT 1793 0.58 1.18 0.29 166 XM_UB95 1777 0.39 1.17 0.01 167 XM_H_DKIM_GOOG 1776 0.39 1.17 0.01 168 HTTPS_HTTP_MISMATCH 1692 0.82 1.11 0.67 169 RDNS_DYNAMIC 1691 0.47 1.11 0.16 170 XM_B_SEO 1691 0.49 1.11 0.19 171 TM2_M_OBFU_COMMENT 1678 0.53 1.10 0.24 172 HTML_IMAGE_ONLY_20 1676 0.74 1.10 0.56 173 TR_XM_RelayPhish 1665 0.40 1.09 0.07 174 XMPhish14 1644 0.64 1.08 0.43 175 XMSubMetaI_00 1639 0.68 1.08 0.49 176 PDS_RDNS_DYNAMIC_FP 1638 0.38 1.08 0.03 177 URIBL_BLACK 1623 0.36 1.07 0.01 178 XM_HighProb1 1622 0.35 1.07 0.00 179 LONGLN_LOW_CONTRAST 1620 0.65 1.06 0.45 180 XM_ProductURIs 1573 0.72 1.03 0.57 181 MPART_ALT_DIFF_COUNT 1569 0.68 1.03 0.51 182 RELAYCOUNTRY_FR 1551 0.53 1.02 0.29 183 TR_XM_DK_SendGrid 1502 1.01 0.99 1.03 184 TM2_M_A_HREF_HREF 1494 0.51 0.98 0.28 185 XMBody_78 1493 0.52 0.98 0.29 186 XM_UB99 1485 0.32 0.98 0.00 187 SH_BODYURI_REVERSE_SBL 1475 0.32 0.97 0.00 188 URIBL_SBL_A 1473 0.32 0.97 0.00 189 URIBL_SBL 1473 0.32 0.97 0.00 190 TR_XM_Base64_M1 1465 0.61 0.96 0.43 191 TR_XM_PHPForged 1459 0.71 0.96 0.59 192 TR_XM_GMP_BULK_SIG 1438 0.45 0.94 0.20 193 RCVD_IN_PBL 1433 0.76 0.94 0.67 194 TR_XM_FormFill2 1417 0.71 0.93 0.60 195 TR_XM_PHPDW 1407 0.70 0.92 0.59 196 XM_H_PHPOS 1395 0.69 0.92 0.58 197 RCVD_IN_XBL 1390 0.31 0.91 0.01 198 SHOPIFY_IMG_NOT_RCVD_SFY 1387 0.43 0.91 0.19 199 LongTLD 1383 0.59 0.91 0.44 200 XMHTML_After_End 1374 0.57 0.90 0.40 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 271353 90.29 95.91 87.53 2 RELAYCOUNTRY_US 242682 78.00 77.43 78.28 3 DKIM_SIGNED 230407 78.61 87.34 74.32 4 XM_DK_Pass 227821 76.45 82.48 73.49 5 DKIM_VALID 224657 75.55 81.83 72.47 6 XM_B_Unicode 221295 76.03 85.49 71.38 7 BAYES_50 188891 54.14 40.32 60.93 8 DKIM_VALID_AU 183065 60.61 63.77 59.05 9 DCC_CHECK_NEGATIVE 177878 47.09 26.13 57.38 10 XMListUnsubscribeExists 147014 53.02 64.43 47.42 11 XM_B_SpammyWords 133611 51.84 69.66 43.10 12 DCC_CHECK 131983 52.45 72.56 42.57 13 XM_B_Unicode3 118922 42.56 51.11 38.36 14 DKIM_VALID_EF 94928 30.57 30.46 30.62 15 T_TM2_M_HEADER_IN_MSG 88404 26.19 21.45 28.52 16 XMSubLong 83852 26.63 25.77 27.05 17 LOC_TINY_FONT_1 83504 33.48 46.80 26.94 18 HTML_FONT_LOW_CONTRAST 81143 30.99 40.81 26.17 19 FVGT_m_MULTI_ODD 74749 27.48 34.33 24.11 20 T_KAM_HTML_FONT_INVALID 68895 24.45 29.00 22.22 21 MIME_HTML_ONLY 60414 22.25 27.88 19.49 22 ALL_TRUSTED 57854 13.18 2.00 18.66 23 XM_B_SpammyWords2 57193 25.27 39.16 18.45 24 RCVD_IN_MSPIKE_H2 55042 19.24 22.25 17.75 25 RCVD_IN_MSPIKE_WL 49568 13.36 8.00 15.99 26 TR_XM_DK_Unsub 42146 16.49 22.39 13.59 27 XM_Multi_Part_URI 41596 16.26 22.06 13.42 28 USER_IN_DEF_DKIM_WL 39075 9.56 3.36 12.60 29 UNPARSEABLE_RELAY 36465 13.72 17.69 11.76 30 BAYES_00 29862 6.70 0.74 9.63 31 XM_B_PhoneNumber 29248 8.32 6.05 9.43 32 FSL_BULK_SIG 28643 9.71 10.67 9.24 33 XM_B_Unsub 26882 11.86 18.36 8.67 34 TooManyTo_001 26514 6.90 3.54 8.55 35 MPART_ALT_DIFF 25868 8.18 7.85 8.34 36 XM_Evil_Numbers_Gen 24633 8.56 9.81 7.95 37 RCVD_IN_MSPIKE_H3 24427 6.61 4.03 7.88 38 LotsOfNums_01 23499 7.65 7.78 7.58 39 BAYES_60 21883 7.65 8.85 7.06 40 TR_XM_BayesUnsub 20568 10.23 17.56 6.63 41 TR_XM_DK_Bayes 19931 4.50 0.58 6.43 42 TR_XM_DK_Bayes1 19671 4.44 0.57 6.35 43 TR_MAX_INTL_RELAY 19141 9.57 16.48 6.17 44 LOTS_OF_MONEY 19101 8.57 13.47 6.16 45 BAYES_40 19100 4.65 1.58 6.16 46 MIME_HTML_MOSTLY 19054 5.37 3.80 6.15 47 XM_DKIMWhitelistDomains 18967 4.11 0.02 6.12 48 T_TooManySym_01 18834 4.82 2.27 6.08 49 XM_H_GMP 16916 5.14 4.51 5.46 50 TR_XM_DK_Bayes2 16556 3.67 0.28 5.34 51 MIME_QP_LONG_LINE 16356 4.49 2.89 5.28 52 XM_B_Phish_Phrases 16207 6.68 9.64 5.23 53 XM_H_Long_From01 15878 5.26 5.55 5.12 54 XM_DK_Undo_02 15519 16.43 39.71 5.01 55 RCVD_IN_MSPIKE_H5 15355 3.94 1.87 4.95 56 XM_B_SpammyWords3 15257 8.08 14.52 4.92 57 XMStrtUSub 15216 5.09 5.45 4.91 58 XM_PDF 14093 3.32 0.81 4.55 59 HTML_IMAGE_RATIO_04 13573 4.60 5.04 4.38 60 BAYES_20 13299 3.30 1.27 4.29 61 HTML_IMAGE_RATIO_02 13254 4.70 5.55 4.28 62 TR_XM_SpammyWords4 12870 6.73 11.98 4.15 63 HTML_IMAGE_ONLY_24 12554 2.96 0.75 4.05 64 RCVD_IN_VALIDITY_SAFE 12362 3.52 2.55 3.99 65 XM_UncommonTLD01 12229 4.48 5.57 3.94 66 DC_PNG_UNO_LARGO 12108 2.76 0.44 3.91 67 XMNumbers 11735 3.58 3.17 3.79 68 BAYES_80 11341 5.88 10.41 3.66 69 T_REMOTE_IMAGE 10954 3.05 2.07 3.53 70 RCVD_IN_VALIDITY_CERTIFIED 10863 3.02 2.05 3.50 71 RCVD_IN_IADB_LISTED 10758 2.82 1.50 3.47 72 HTML_IMAGE_RATIO_06 10746 3.32 3.03 3.47 73 RELAYCOUNTRY_META 10666 9.49 21.82 3.44 74 BAYES_99 10629 11.89 29.12 3.43 75 ANY_BOUNCE_MESSAGE 10152 3.78 4.80 3.27 76 BOUNCE_MESSAGE 10121 3.77 4.80 3.26 77 RCVD_IN_MSPIKE_H4 9786 2.81 2.10 3.16 78 T_TooManySym_02 9529 2.27 0.62 3.07 79 RCVD_IN_IADB_SPF 9505 2.49 1.31 3.07 80 XMSubMetaSx_00 9450 4.13 6.33 3.05 81 BOTNET_IPINHOSTNAME 9380 5.97 11.95 3.03 82 MAILING_LIST_MULTI 9277 2.62 1.85 2.99 83 HTML_MIME_NO_HTML_TAG 8552 2.37 1.57 2.76 84 RCVD_IN_IADB_SENDERID 8501 2.23 1.20 2.74 85 XM_B_SpammyTLD 8487 3.16 4.01 2.74 86 RCVD_IN_IADB_DK 8286 2.20 1.23 2.67 87 TooManyTo_002 8253 2.02 0.71 2.66 88 HTML_IMAGE_RATIO_08 8144 2.71 2.87 2.63 89 BAYES_999 8018 9.00 22.06 2.59 90 BAYES_95 7798 3.59 5.78 2.52 91 INVALID_MSGID 7228 1.63 0.21 2.33 92 BAYES_05 7212 1.77 0.64 2.33 93 MIME_HTML_ONLY_MULTI 7211 2.57 3.07 2.33 94 XM_Body_Dirty_Words 7077 3.32 5.44 2.28 95 RCVD_IN_IADB_VOUCHED 7061 1.76 0.72 2.28 96 MSGID_NOFQDN1 6500 1.41 0.02 2.10 97 XM_B_URI_Unicode 6384 2.30 2.78 2.06 98 TO_MALFORMED 6308 1.38 0.04 2.03 99 XM_DK_Undo_01 5834 1.66 1.20 1.88 100 DKIM_INVALID 5750 3.06 5.51 1.85 101 XM_CamelCaseFrm001 5537 2.15 2.89 1.79 102 TR_XM_DKIM_Undo 5493 10.60 28.59 1.77 103 TR_XM_SpammyRelay 5446 6.64 16.57 1.76 104 TR_XM_SpammyWords5 5349 2.29 3.44 1.73 105 T_XMDrugObfuBody_14 5345 2.40 3.78 1.72 106 UNTRUSTED_Relay 5252 4.44 10.02 1.69 107 TM2_M_URI_OPT_OUT 5246 1.75 1.87 1.69 108 XMDiploma_00 5211 2.45 4.02 1.68 109 XMGappySubj_01 4996 1.19 0.34 1.61 110 RCVD_IN_IADB_OPTIN 4942 1.22 0.47 1.59 111 TR_XM_UnparsRelay 4785 3.95 8.86 1.54 112 XM_B_Unsub2 4774 2.05 3.09 1.54 113 TooManyTo_003 4758 1.22 0.58 1.53 114 TR_XM_PhishingBody 4661 2.58 4.76 1.50 115 URI_HEX 4646 1.43 1.29 1.50 116 XM_SendGrid 4645 1.51 1.54 1.50 117 FROM_EXCESS_BASE64 4603 1.66 2.02 1.48 118 XM_B_Investor 4595 2.57 4.78 1.48 119 TR_Symld_Words 4456 1.23 0.80 1.44 120 HELO_NODOT 4311 0.97 0.12 1.39 121 HELO_NO_DOMAIN 4304 0.97 0.12 1.39 122 XM_GoogleGroups 4248 1.18 0.79 1.37 123 TM2_M_VERY_LONG_WORD 4141 2.32 4.33 1.34 124 T_XMDrugObfuBody_08 4131 1.74 2.58 1.33 125 XM_SPF_SoftFail 4118 1.80 2.77 1.33 126 SUBJ_ALL_CAPS 4098 1.50 1.86 1.32 127 IN_HORDE_ADDRESS_BOOK 3989 0.90 0.10 1.29 128 URI_NOVOWEL 3882 1.27 1.30 1.25 129 TR_DCC_Bayes_99 3844 7.57 20.46 1.24 130 BOTNET 3801 5.43 13.98 1.23 131 XMStockSpam_06 3795 1.64 2.48 1.22 132 KHOP_HELO_FCRDNS 3781 1.34 1.58 1.22 133 T_TooManySym_03 3714 0.87 0.20 1.20 134 TooManyTo_004 3607 0.94 0.50 1.16 135 TVD_RCVD_IP 3469 1.20 1.37 1.12 136 XM_OfRef6 3458 2.03 3.91 1.12 137 XM_UB50 3444 1.84 3.32 1.11 138 XMGenDplmaNmb 3415 1.43 2.11 1.10 139 XMCapTrack 3406 0.87 0.39 1.10 140 XM_ShortIntro_01 3374 0.84 0.33 1.09 141 T_XMDrugObfuBody_00 3212 1.24 1.65 1.04 142 TR_XM_DK_SendGrid 3189 1.01 0.99 1.03 143 XMSexyCombo_05 3109 2.00 4.03 1.00 144 TVD_SPACE_RATIO 3044 0.72 0.20 0.98 145 T_Symld_Words_02 2947 0.92 0.86 0.95 146 T_FILL_THIS_FORM_SHORT 2866 1.41 2.40 0.92 147 TooManyTo_005 2853 0.75 0.41 0.92 148 XMBrknScrpt_02 2836 1.53 2.78 0.91 149 RCVD_IN_MSPIKE_BL 2824 3.51 8.79 0.91 150 TR_XM_MSPIKECOMBO 2820 3.50 8.79 0.91 151 FROM_GOV_DKIM_AU 2774 0.76 0.47 0.89 152 XM_H_PHPMailer 2765 0.73 0.40 0.89 153 TR_MetaPhish_Combo_01 2750 1.01 1.25 0.89 154 RCVD_IN_MSPIKE_L3 2632 1.40 2.52 0.85 155 XM_B_SpammyWords4 2538 1.41 2.61 0.82 156 XMGappySubj_02 2439 0.57 0.14 0.79 157 RCVD_IN_BL_SPAMCOP_NET 2343 4.20 11.21 0.76 158 XM_B_COPY_HTML 2318 0.91 1.25 0.75 159 SpammyFromTLD_01 2287 1.00 1.55 0.74 160 DKIM_ADSP_CUSTOM_MED 2255 0.73 0.75 0.73 161 RELAYCOUNTRY_CA 2249 2.65 6.57 0.73 162 XM_H_Long_From02 2203 1.08 1.84 0.71 163 T_XMHurry_00 2108 1.25 2.42 0.68 164 RCVD_IN_PBL 2091 0.76 0.94 0.67 165 RELAYCOUNTRY_GB 2088 0.74 0.87 0.67 166 HTTPS_HTTP_MISMATCH 2079 0.82 1.11 0.67 167 T_OBFU_PDF_ATTACH 2039 0.50 0.17 0.66 168 XMLngstWrd_00 1953 0.55 0.38 0.63 169 XMNoVowels 1942 0.55 0.39 0.63 170 TO_NO_BRKTS_HTML_ONLY 1923 0.49 0.24 0.62 171 URI_TRY_3LD 1862 0.95 1.65 0.60 172 TR_XM_FormFill2 1853 0.71 0.93 0.60 173 TR_XM_PHPForged 1841 0.71 0.96 0.59 174 TR_XM_PHPDW 1835 0.70 0.92 0.59 175 XM_H_PHPOS 1813 0.69 0.92 0.58 176 XMBSHREFv2 1776 0.48 0.28 0.57 177 XM_ProductURIs 1761 0.72 1.03 0.57 178 HTML_IMAGE_ONLY_20 1747 0.74 1.10 0.56 179 XM_B_FormFill 1643 0.36 0.01 0.53 180 XMLngstWrd_01 1639 0.46 0.32 0.53 181 MPART_ALT_DIFF_COUNT 1575 0.68 1.03 0.51 182 MSGID_FROM_MTA_HEADER 1549 0.42 0.26 0.50 183 SpammyFromTLD_02 1541 1.08 2.25 0.50 184 NML_ADSP_CUSTOM_MED 1522 0.54 0.65 0.49 185 XMPhish30 1521 0.88 1.67 0.49 186 XMSubMetaI_00 1513 0.68 1.08 0.49 187 TRACKER_ID 1478 0.37 0.16 0.48 188 XMSolicitRefs_0 1441 0.47 0.47 0.46 189 XMSubMetaSxObfu_03 1440 0.58 0.81 0.46 190 TR_XM_SpammyWords3 1438 2.66 7.14 0.46 191 TR_LOTS_OF_MONEY3 1425 1.00 2.11 0.46 192 LONGLN_LOW_CONTRAST 1399 0.65 1.06 0.45 193 XMSlimDrugH 1380 0.56 0.81 0.45 194 HTML_IMAGE_ONLY_32 1373 0.36 0.18 0.44 195 RELAYCOUNTRY_AU 1367 1.37 3.27 0.44 196 LongTLD 1359 0.59 0.91 0.44 197 XMMoneyMeta_00 1358 0.51 0.66 0.44 198 FORGED_GMAIL_RCVD 1344 0.47 0.53 0.43 199 TR_XM_Base64_M1 1333 0.61 0.96 0.43 200 XMPhish14 1329 0.64 1.08 0.43 ----------------------------------------------------------------------