Email: 484497 Autolearn: 0 AvgScore: 4.84 AvgScanTime: 1.45 sec Spam: 153308 Autolearn: 0 AvgScore: 13.15 AvgScanTime: 1.69 sec Ham: 331189 Autolearn: 0 AvgScore: 1.00 AvgScanTime: 1.34 sec Time Spent Running SA: 195.30 hours Time Spent Processing Spam: 71.85 hours Time Spent Processing Ham: 123.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 153055 99.64 99.83 99.55 2 HTML_MESSAGE 149419 90.91 97.46 87.88 3 DKIM_SIGNED 141497 83.64 92.30 79.63 4 XM_DK_Pass 132609 80.87 86.50 78.26 5 XM_B_Unicode 132495 77.61 86.42 73.53 6 DKIM_VALID 131402 79.94 85.71 77.27 7 RELAYCOUNTRY_US 128074 83.26 83.54 83.13 8 DCC_CHECK 112998 51.30 73.71 40.93 9 XM_B_SpammyWords 106814 54.66 69.67 47.72 10 DKIM_VALID_AU 103747 65.51 67.67 64.51 11 XMListUnsubscribeExists 101012 57.02 65.89 52.92 12 XM_B_Unicode3 77767 46.15 50.73 44.04 13 LOC_TINY_FONT_1 75707 37.62 49.38 32.17 14 XM_DK_Undo_02 64199 16.97 41.88 5.44 15 HTML_FONT_LOW_CONTRAST 62699 33.43 40.90 29.97 16 XM_B_SpammyWords2 61383 26.87 40.04 20.78 17 BAYES_50 60623 54.15 39.54 60.91 18 FVGT_m_MULTI_ODD 55369 30.03 36.12 27.21 19 BAYES_99 50120 12.93 32.69 3.79 20 T_KAM_HTML_FONT_INVALID 47911 25.48 31.25 22.81 21 DKIM_VALID_EF 47250 31.17 30.82 31.33 22 MIME_HTML_ONLY 45322 23.25 29.56 20.32 23 TR_XM_DKIM_Undo 44578 10.66 29.08 2.13 24 XMSubLong 40242 24.75 26.25 24.06 25 DCC_CHECK_NEGATIVE 40234 48.61 26.24 58.97 26 BAYES_999 39135 9.96 25.53 2.75 27 XM_Multi_Part_URI 37733 17.91 24.61 14.81 28 TR_DCC_Bayes_99 35072 8.08 22.88 1.23 29 XM_B_Unsub 34271 13.24 22.35 9.02 30 RCVD_IN_MSPIKE_H2 33692 18.31 21.98 16.62 31 T_TM2_M_HEADER_IN_MSG 33073 25.51 21.57 27.34 32 TR_XM_DK_Unsub 33016 16.77 21.54 14.56 33 TR_XM_BayesUnsub 32684 11.73 21.32 7.29 34 UNPARSEABLE_RELAY 29728 14.46 19.39 12.17 35 RELAYCOUNTRY_META 25501 7.63 16.63 3.47 36 TR_MAX_INTL_RELAY 24538 9.85 16.01 7.00 37 XM_B_SpammyWords3 21871 8.56 14.27 5.93 38 LOTS_OF_MONEY 21374 8.41 13.94 5.85 39 RCVD_IN_MSPIKE_WL 20667 20.57 13.48 23.86 40 TR_XM_SpammyWords4 18894 6.44 12.32 3.72 41 TR_XM_SpammyRelay 18827 5.17 12.28 1.87 42 BOTNET_IPINHOSTNAME 18158 6.07 11.84 3.39 43 TR_XM_SpammyWords2 17351 3.81 11.32 0.34 44 TR_XM_UnparsRelay 17130 4.85 11.17 1.93 45 XM_Evil_Numbers_Gen 16914 9.39 11.03 8.63 46 RCVD_IN_BL_SPAMCOP_NET 16421 3.87 10.71 0.71 47 BOTNET 16303 4.28 10.63 1.34 48 FSL_BULK_SIG 16290 7.53 10.63 6.10 49 BAYES_80 15199 6.14 9.91 4.39 50 XM_B_Phish_Phrases 12672 6.32 8.27 5.42 51 BAYES_60 12440 8.26 8.11 8.33 52 RCVD_IN_MSPIKE_BL 11582 3.14 7.55 1.09 53 TR_XM_MSPIKECOMBO 11497 3.11 7.50 1.07 54 UNTRUSTED_Relay 11062 3.31 7.22 1.50 55 DKIM_INVALID 10095 3.69 6.58 2.36 56 XM_B_PhoneNumber 9971 8.81 6.50 9.88 57 TR_XM_SPAMCOP 9602 2.11 6.26 0.19 58 RCVD_IN_MSPIKE_H3 9512 8.88 6.20 10.11 59 XM_H_GMP 9340 5.36 6.09 5.02 60 LotsOfNums_01 9319 7.67 6.08 8.41 61 XMSubMetaSx_00 9306 4.72 6.07 4.10 62 MPART_ALT_DIFF 9215 5.43 6.01 5.17 63 XM_UncommonTLD01 9166 4.71 5.98 4.13 64 HTML_IMAGE_RATIO_02 8924 5.46 5.82 5.30 65 XM_H_Long_From01 8822 6.15 5.75 6.33 66 XM_Body_Dirty_Words 8672 3.43 5.66 2.40 67 RELAYCOUNTRY_CA 8592 2.23 5.60 0.66 68 BAYES_95 8437 3.53 5.50 2.61 69 TR_XM_SpammyWords3 7769 1.95 5.07 0.51 70 RCVD_IN_MSPIKE_L3 7731 2.23 5.04 0.93 71 T_XMDrugObfuBody_14 7708 2.58 5.03 1.44 72 XM_B_SpammyTLD 7247 3.45 4.73 2.85 73 TR_XM_PhishingBody 7238 2.75 4.72 1.84 74 HTML_IMAGE_RATIO_04 7134 4.17 4.65 3.94 75 XMStrtUSub 7105 5.16 4.63 5.41 76 MIME_HTML_MOSTLY 6746 3.10 4.40 2.50 77 XM_B_Investor 6503 2.40 4.24 1.55 78 HTML_IMAGE_RATIO_06 6274 3.80 4.09 3.66 79 TooManyTo_001 6033 6.09 3.94 7.09 80 RCVD_IN_MSPIKE_H5 5978 6.81 3.90 8.15 81 T_XMDrugObfuBody_08 5708 2.32 3.72 1.67 82 TM2_M_VERY_LONG_WORD 5591 2.37 3.65 1.78 83 TR_XM_SpammyWords5 5566 1.95 3.63 1.17 84 USER_IN_DEF_DKIM_WL 5444 10.81 3.55 14.17 85 XM_B_Unsub2 5231 2.05 3.41 1.41 86 XMSexyCombo_05 5202 1.80 3.39 1.06 87 XMNumbers 5199 3.34 3.39 3.32 88 RCVD_IN_MSPIKE_H4 5177 4.89 3.38 5.59 89 XM_OfRef6 5099 1.58 3.33 0.78 90 HTML_IMAGE_RATIO_08 5095 2.99 3.32 2.83 91 XM_CamelCaseFrm001 4948 2.70 3.23 2.45 92 TR_XM_MSPIKECOMBO2 4784 1.06 3.12 0.10 93 TR_XM_INV_DKIM 4755 0.99 3.10 0.01 94 XMDiploma_00 4689 1.93 3.06 1.41 95 TR_XM_NoHeaderRelay 4675 1.08 3.05 0.16 96 TM2_M_URI_OPT_OUT 4612 2.53 3.01 2.32 97 XM_UB50 4547 1.62 2.97 0.99 98 XMStockSpam_06 4420 1.49 2.88 0.84 99 XM_SPF_SoftFail 4357 1.80 2.84 1.32 100 MIME_QP_LONG_LINE 4205 4.78 2.74 5.72 101 RELAYCOUNTRY_AU 4172 1.26 2.72 0.59 102 MIME_HTML_ONLY_MULTI 4023 2.86 2.62 2.97 103 XM_URI_RBL 3946 1.00 2.57 0.28 104 XM_B_URI_Unicode 3885 2.28 2.53 2.16 105 XM_B_SpammyWords4 3845 1.26 2.51 0.69 106 T_FILL_THIS_FORM_SHORT 3784 1.34 2.47 0.82 107 T_TooManySym_01 3734 4.88 2.44 6.01 108 HTML_MIME_NO_HTML_TAG 3701 2.33 2.41 2.30 109 SpammyFromTLD_02 3548 1.09 2.31 0.53 110 TR_XM_MaxSPIKE 3495 0.78 2.28 0.09 111 MAILING_LIST_MULTI 3440 2.85 2.24 3.13 112 T_XMHurry_00 3400 1.25 2.22 0.80 113 XMBdyGiftCard01 3300 1.16 2.15 0.71 114 URI_NOVOWEL 3147 1.55 2.05 1.32 115 FROM_EXCESS_BASE64 3075 2.02 2.01 2.03 116 XMPhish30 2922 0.96 1.91 0.53 117 RCVD_IN_MSPIKE_L4 2838 0.67 1.85 0.12 118 XMGenDplmaNmb 2817 1.10 1.84 0.76 119 RCVD_IN_IADB_LISTED 2782 2.80 1.81 3.26 120 T_XMDrugObfuBody_00 2743 1.50 1.79 1.37 121 SUBJ_ALL_CAPS 2738 1.41 1.79 1.23 122 XMBody_17 2720 0.86 1.77 0.44 123 XM_DK_Undo_01 2711 1.98 1.77 2.08 124 TR_LOTS_OF_MONEY3 2700 0.80 1.76 0.36 125 BAYES_40 2658 4.05 1.73 5.12 126 RCVD_IN_VALIDITY_RPBL 2645 0.57 1.73 0.04 127 RCVD_IN_VALIDITY_SAFE 2629 3.39 1.71 4.17 128 T_REMOTE_IMAGE 2535 2.81 1.65 3.35 129 HK_RANDOM_REPLYTO 2528 0.57 1.65 0.08 130 XM_UB99 2510 0.52 1.64 0.00 131 NO_DNS_FOR_FROM 2497 0.67 1.63 0.22 132 TR_XM_MaxWHORU 2490 0.64 1.62 0.18 133 XMBrknScrpt_02 2476 1.10 1.62 0.86 134 XM_H_Long_From02 2456 1.24 1.60 1.08 135 RELAYCOUNTRY_FR 2349 0.72 1.53 0.34 136 TR_MetaPhish_Combo_01 2336 1.15 1.52 0.98 137 XM_B_COPY_HTML 2303 0.98 1.50 0.74 138 XM_ProductURIs 2286 0.84 1.49 0.54 139 XM_B_SEO 2256 0.63 1.47 0.24 140 RCVD_IN_IADB_SPF 2245 2.46 1.46 2.93 141 XM_B_Phish66 2237 0.74 1.46 0.40 142 SpammyFromTLD_01 2235 1.07 1.46 0.89 143 TR_XM_GMP_BULK_SIG 2195 0.52 1.43 0.10 144 XM_SendGrid 2149 1.42 1.40 1.43 145 BOTNET_NORDNS 2099 0.44 1.37 0.01 146 URI_HEX 2074 1.43 1.35 1.47 147 LOW_PRICE 2049 0.59 1.34 0.25 148 RCVD_IN_IADB_DK 2045 2.17 1.33 2.56 149 XM_B_DNDMA 2043 0.97 1.33 0.80 150 URI_TRY_3LD 2007 0.81 1.31 0.58 151 RCVD_IN_IADB_SENDERID 2000 2.23 1.30 2.66 152 THIS_AD 1966 0.77 1.28 0.53 153 TR_XM_SEO4 1934 0.51 1.26 0.16 154 DKIM_ADSP_NXDOMAIN 1908 0.59 1.24 0.29 155 TR_XM_PHPForged 1896 0.55 1.24 0.24 156 TR_XM_FormFill2 1884 0.55 1.23 0.24 157 TR_XM_InvalidRelay 1871 0.39 1.22 0.01 158 TR_XM_PHPDW 1859 0.55 1.21 0.24 159 HTTPS_HTTP_MISMATCH 1854 0.91 1.21 0.77 160 XM_H_PHPOS 1848 0.54 1.21 0.23 161 BAYES_20 1829 2.84 1.19 3.60 162 RCVD_IN_IADB_VOUCHED 1824 1.78 1.19 2.06 163 RCVD_IN_PSBL 1803 0.37 1.18 0.00 164 XM_UB999 1790 0.37 1.17 0.00 165 XM_GoogleGroups 1788 1.33 1.17 1.41 166 MPART_ALT_DIFF_COUNT 1788 0.70 1.17 0.48 167 TR_Mismatch_TLD_02 1776 0.48 1.16 0.17 168 XMSubMetaI_00 1773 0.69 1.16 0.48 169 ALL_TRUSTED 1764 9.86 1.15 13.89 170 RDNS_DYNAMIC 1754 0.47 1.14 0.16 171 TR_Symld_Words 1753 1.40 1.14 1.52 172 T_Symld_Words_02 1729 0.92 1.13 0.82 173 XMHTML_After_End 1717 0.61 1.12 0.37 174 T_MONEY_PERCENT 1711 0.50 1.12 0.22 175 TR_LOTS_OF_MONEY2 1711 0.50 1.12 0.22 176 TR_XM_Base64_M1 1680 0.84 1.10 0.72 177 SHOPIFY_IMG_NOT_RCVD_SFY 1652 0.50 1.08 0.23 178 XMBody_78 1644 0.55 1.07 0.30 179 ANY_BOUNCE_MESSAGE 1622 2.65 1.06 3.39 180 BOUNCE_MESSAGE 1619 2.65 1.06 3.39 181 RCVD_IN_VALIDITY_CERTIFIED 1577 2.72 1.03 3.51 182 HTML_IMAGE_ONLY_20 1536 0.70 1.00 0.55 183 MultiRelay_CC 1521 0.39 0.99 0.11 184 TVD_RCVD_IP 1506 0.97 0.98 0.96 185 TR_XM_FormFill 1482 0.31 0.97 0.01 186 XM_UB60 1477 0.37 0.96 0.09 187 DIET_1 1468 0.60 0.96 0.44 188 TR_XM_DK_SendGrid 1460 0.98 0.95 0.99 189 RELAYCOUNTRY_RU 1418 0.31 0.92 0.02 190 DKIM_ADSP_CUSTOM_MED 1392 0.88 0.91 0.87 191 TVD_SPACE_RATIO 1384 0.91 0.90 0.91 192 TM2_M_A_HREF_HREF 1349 0.48 0.88 0.29 193 XM_DIRTYINTL 1339 0.32 0.87 0.07 194 HELO_DYNAMIC_SPLIT_IP 1331 0.28 0.87 0.01 195 RELAYCOUNTRY_GB 1331 0.75 0.87 0.70 196 TVD_SPACE_RATIO_MINFP 1325 0.28 0.86 0.00 197 XM_HighProb1 1315 0.28 0.86 0.01 198 XMCapTrack 1284 0.93 0.84 0.98 199 NORDNS_LOW_CONTRAST 1269 0.28 0.83 0.02 200 HTML_TAG_BALANCE_BODY 1269 0.57 0.83 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 329685 99.64 99.83 99.55 2 HTML_MESSAGE 291040 90.91 97.46 87.88 3 RELAYCOUNTRY_US 275316 83.26 83.54 83.13 4 DKIM_SIGNED 263724 83.64 92.30 79.63 5 XM_DK_Pass 259187 80.87 86.50 78.26 6 DKIM_VALID 255924 79.94 85.71 77.27 7 XM_B_Unicode 243539 77.61 86.42 73.53 8 DKIM_VALID_AU 213655 65.51 67.67 64.51 9 BAYES_50 201721 54.15 39.54 60.91 10 DCC_CHECK_NEGATIVE 195295 48.61 26.24 58.97 11 XMListUnsubscribeExists 175267 57.02 65.89 52.92 12 XM_B_SpammyWords 158029 54.66 69.67 47.72 13 XM_B_Unicode3 145852 46.15 50.73 44.04 14 DCC_CHECK 135572 51.30 73.71 40.93 15 LOC_TINY_FONT_1 106553 37.62 49.38 32.17 16 DKIM_VALID_EF 103749 31.17 30.82 31.33 17 HTML_FONT_LOW_CONTRAST 99269 33.43 40.90 29.97 18 T_TM2_M_HEADER_IN_MSG 90538 25.51 21.57 27.34 19 FVGT_m_MULTI_ODD 90129 30.03 36.12 27.21 20 XMSubLong 79670 24.75 26.25 24.06 21 RCVD_IN_MSPIKE_WL 79008 20.57 13.48 23.86 22 T_KAM_HTML_FONT_INVALID 75543 25.48 31.25 22.81 23 XM_B_SpammyWords2 68822 26.87 40.04 20.78 24 MIME_HTML_ONLY 67301 23.25 29.56 20.32 25 RCVD_IN_MSPIKE_H2 55043 18.31 21.98 16.62 26 XM_Multi_Part_URI 49051 17.91 24.61 14.81 27 TR_XM_DK_Unsub 48211 16.77 21.54 14.56 28 USER_IN_DEF_DKIM_WL 46946 10.81 3.55 14.17 29 ALL_TRUSTED 46015 9.86 1.15 13.89 30 UNPARSEABLE_RELAY 40320 14.46 19.39 12.17 31 RCVD_IN_MSPIKE_H3 33491 8.88 6.20 10.11 32 XM_B_PhoneNumber 32711 8.81 6.50 9.88 33 BAYES_00 30682 6.52 0.60 9.26 34 XM_B_Unsub 29859 13.24 22.35 9.02 35 XM_Evil_Numbers_Gen 28582 9.39 11.03 8.63 36 LotsOfNums_01 27860 7.67 6.08 8.41 37 BAYES_60 27574 8.26 8.11 8.33 38 RCVD_IN_MSPIKE_H5 26997 6.81 3.90 8.15 39 TR_XM_BayesUnsub 24136 11.73 21.32 7.29 40 TooManyTo_001 23494 6.09 3.94 7.09 41 XM_DKIMWhitelistDomains 23339 4.84 0.06 7.05 42 TR_MAX_INTL_RELAY 23178 9.85 16.01 7.00 43 TR_XM_DK_Bayes 22464 4.76 0.39 6.78 44 TR_XM_DK_Bayes1 22155 4.70 0.39 6.69 45 XM_H_Long_From01 20973 6.15 5.75 6.33 46 FSL_BULK_SIG 20214 7.53 10.63 6.10 47 T_TooManySym_01 19911 4.88 2.44 6.01 48 XM_B_SpammyWords3 19624 8.56 14.27 5.93 49 LOTS_OF_MONEY 19371 8.41 13.94 5.85 50 TR_XM_DK_Bayes2 19061 4.03 0.30 5.76 51 MIME_QP_LONG_LINE 18942 4.78 2.74 5.72 52 RCVD_IN_MSPIKE_H4 18520 4.89 3.38 5.59 53 XM_DK_Undo_02 18026 16.97 41.88 5.44 54 XM_B_Phish_Phrases 17940 6.32 8.27 5.42 55 XMStrtUSub 17917 5.16 4.63 5.41 56 HTML_IMAGE_RATIO_02 17544 5.46 5.82 5.30 57 MPART_ALT_DIFF 17106 5.43 6.01 5.17 58 BAYES_40 16947 4.05 1.73 5.12 59 XM_H_GMP 16640 5.36 6.09 5.02 60 BAYES_80 14525 6.14 9.91 4.39 61 RCVD_IN_VALIDITY_SAFE 13801 3.39 1.71 4.17 62 XM_UncommonTLD01 13673 4.71 5.98 4.13 63 XMSubMetaSx_00 13584 4.72 6.07 4.10 64 XM_PDF 13380 3.01 0.78 4.04 65 HTML_IMAGE_RATIO_04 13058 4.17 4.65 3.94 66 BAYES_99 12537 12.93 32.69 3.79 67 TR_XM_SpammyWords4 12318 6.44 12.32 3.72 68 HTML_IMAGE_RATIO_06 12123 3.80 4.09 3.66 69 BAYES_20 11914 2.84 1.19 3.60 70 RCVD_IN_VALIDITY_CERTIFIED 11611 2.72 1.03 3.51 71 RELAYCOUNTRY_META 11485 7.63 16.63 3.47 72 BOTNET_IPINHOSTNAME 11237 6.07 11.84 3.39 73 ANY_BOUNCE_MESSAGE 11214 2.65 1.06 3.39 74 BOUNCE_MESSAGE 11211 2.65 1.06 3.39 75 T_REMOTE_IMAGE 11092 2.81 1.65 3.35 76 XMNumbers 10992 3.34 3.39 3.32 77 RCVD_IN_IADB_LISTED 10795 2.80 1.81 3.26 78 MAILING_LIST_MULTI 10352 2.85 2.24 3.13 79 T_TooManySym_02 10062 2.29 0.68 3.04 80 MIME_HTML_ONLY_MULTI 9851 2.86 2.62 2.97 81 RCVD_IN_IADB_SPF 9693 2.46 1.46 2.93 82 XM_B_SpammyTLD 9454 3.45 4.73 2.85 83 HTML_IMAGE_RATIO_08 9384 2.99 3.32 2.83 84 BAYES_999 9103 9.96 25.53 2.75 85 RCVD_IN_IADB_SENDERID 8795 2.23 1.30 2.66 86 BAYES_95 8646 3.53 5.50 2.61 87 RCVD_IN_IADB_DK 8483 2.17 1.33 2.56 88 MIME_HTML_MOSTLY 8280 3.10 4.40 2.50 89 XM_CamelCaseFrm001 8127 2.70 3.23 2.45 90 XM_Body_Dirty_Words 7940 3.43 5.66 2.40 91 DKIM_INVALID 7800 3.69 6.58 2.36 92 TM2_M_URI_OPT_OUT 7669 2.53 3.01 2.32 93 HTML_MIME_NO_HTML_TAG 7602 2.33 2.41 2.30 94 TO_MALFORMED 7385 1.54 0.04 2.23 95 XM_B_URI_Unicode 7149 2.28 2.53 2.16 96 TooManyTo_002 7069 1.67 0.65 2.13 97 TR_XM_DKIM_Undo 7064 10.66 29.08 2.13 98 INVALID_MSGID 7013 1.52 0.23 2.12 99 XM_DK_Undo_01 6879 1.98 1.77 2.08 100 RCVD_IN_IADB_VOUCHED 6818 1.78 1.19 2.06 101 FROM_EXCESS_BASE64 6716 2.02 2.01 2.03 102 BAYES_05 6641 1.59 0.71 2.01 103 TR_XM_UnparsRelay 6380 4.85 11.17 1.93 104 TR_XM_SpammyRelay 6204 5.17 12.28 1.87 105 TR_XM_PhishingBody 6095 2.75 4.72 1.84 106 TM2_M_VERY_LONG_WORD 5886 2.37 3.65 1.78 107 T_XMDrugObfuBody_08 5527 2.32 3.72 1.67 108 XM_B_Investor 5134 2.40 4.24 1.55 109 TR_Symld_Words 5045 1.40 1.14 1.52 110 UNTRUSTED_Relay 4976 3.31 7.22 1.50 111 HELO_NODOT 4900 1.16 0.48 1.48 112 HELO_NO_DOMAIN 4896 1.16 0.48 1.48 113 URI_HEX 4857 1.43 1.35 1.47 114 T_XMDrugObfuBody_14 4770 2.58 5.03 1.44 115 XM_SendGrid 4750 1.42 1.40 1.43 116 RCVD_IN_IADB_OPTIN 4742 1.23 0.79 1.43 117 XM_B_Unsub2 4682 2.05 3.41 1.41 118 XM_GoogleGroups 4667 1.33 1.17 1.41 119 XMDiploma_00 4661 1.93 3.06 1.41 120 T_XMDrugObfuBody_00 4540 1.50 1.79 1.37 121 IN_HORDE_ADDRESS_BOOK 4535 0.97 0.09 1.37 122 BOTNET 4437 4.28 10.63 1.34 123 TooManyTo_003 4427 1.08 0.52 1.34 124 URI_NOVOWEL 4380 1.55 2.05 1.32 125 T_TooManySym_03 4366 0.97 0.22 1.32 126 XM_SPF_SoftFail 4362 1.80 2.84 1.32 127 SUBJ_ALL_CAPS 4090 1.41 1.79 1.23 128 TR_DCC_Bayes_99 4086 8.08 22.88 1.23 129 KHOP_HELO_FCRDNS 3986 1.08 0.82 1.20 130 TR_XM_SpammyWords5 3888 1.95 3.63 1.17 131 RCVD_IN_MSPIKE_BL 3616 3.14 7.55 1.09 132 XM_H_Long_From02 3573 1.24 1.60 1.08 133 TR_XM_MSPIKECOMBO 3547 3.11 7.50 1.07 134 XMSexyCombo_05 3496 1.80 3.39 1.06 135 XMGappySubj_01 3487 0.79 0.22 1.05 136 XMSubMetaSxObfu_03 3445 0.96 0.80 1.04 137 XM_UB50 3284 1.62 2.97 0.99 138 TR_XM_DK_SendGrid 3272 0.98 0.95 0.99 139 XMCapTrack 3246 0.93 0.84 0.98 140 TR_MetaPhish_Combo_01 3236 1.15 1.52 0.98 141 TooManyTo_004 3208 0.81 0.46 0.97 142 TVD_RCVD_IP 3190 0.97 0.98 0.96 143 RCVD_IN_MSPIKE_L3 3085 2.23 5.04 0.93 144 TVD_SPACE_RATIO 3010 0.91 0.90 0.91 145 SpammyFromTLD_01 2942 1.07 1.46 0.89 146 XM_ShortIntro_01 2907 0.76 0.51 0.88 147 DKIM_ADSP_CUSTOM_MED 2894 0.88 0.91 0.87 148 FROM_GOV_DKIM_AU 2863 0.68 0.28 0.86 149 XMBrknScrpt_02 2842 1.10 1.62 0.86 150 XMStockSpam_06 2796 1.49 2.88 0.84 151 T_FILL_THIS_FORM_SHORT 2719 1.34 2.47 0.82 152 T_Symld_Words_02 2709 0.92 1.13 0.82 153 T_XMHurry_00 2650 1.25 2.22 0.80 154 XM_B_DNDMA 2637 0.97 1.33 0.80 155 XM_OfRef6 2577 1.58 3.33 0.78 156 TooManyTo_005 2569 0.67 0.43 0.78 157 HTTPS_HTTP_MISMATCH 2546 0.91 1.21 0.77 158 XMGenDplmaNmb 2527 1.10 1.84 0.76 159 XM_B_COPY_HTML 2446 0.98 1.50 0.74 160 TR_XM_Base64_M1 2370 0.84 1.10 0.72 161 XM_H_PHPMailer 2353 0.60 0.38 0.71 162 RCVD_IN_BL_SPAMCOP_NET 2343 3.87 10.71 0.71 163 XMBdyGiftCard01 2338 1.16 2.15 0.71 164 XMBSHREFv2 2304 0.61 0.44 0.70 165 RELAYCOUNTRY_GB 2302 0.75 0.87 0.70 166 XM_B_SpammyWords4 2280 1.26 2.51 0.69 167 RELAYCOUNTRY_CA 2202 2.23 5.60 0.66 168 XMSlimDrugH 2094 0.64 0.64 0.63 169 T_OBFU_PDF_ATTACH 2007 0.46 0.16 0.61 170 RELAYCOUNTRY_AU 1945 1.26 2.72 0.59 171 TO_NO_BRKTS_HTML_ONLY 1935 0.45 0.15 0.58 172 URI_TRY_3LD 1927 0.81 1.31 0.58 173 XMNoVowels 1921 0.52 0.40 0.58 174 FORGED_GMAIL_RCVD 1915 0.63 0.73 0.58 175 XMPhish14 1910 0.65 0.81 0.58 176 MSGID_FROM_MTA_HEADER 1846 0.48 0.30 0.56 177 HTML_IMAGE_ONLY_20 1836 0.70 1.00 0.55 178 XM_ProductURIs 1798 0.84 1.49 0.54 179 XMPhish30 1747 0.96 1.91 0.53 180 SpammyFromTLD_02 1746 1.09 2.31 0.53 181 THIS_AD 1742 0.77 1.28 0.53 182 TR_XM_SpammyWords3 1681 1.95 5.07 0.51 183 XMGappySubj_02 1607 0.35 0.05 0.49 184 MPART_ALT_DIFF_COUNT 1605 0.70 1.17 0.48 185 XMSubMetaI_00 1589 0.69 1.16 0.48 186 NML_ADSP_CUSTOM_MED 1565 0.57 0.77 0.47 187 T_TooManySym_04 1535 0.33 0.04 0.46 188 XMLngstWrd_00 1525 0.42 0.32 0.46 189 HTML_TAG_BALANCE_BODY 1506 0.57 0.83 0.45 190 SHORT_HELO_AND_INLINE_IMAGE 1500 0.35 0.12 0.45 191 HTML_FONT_FACE_BAD 1491 0.48 0.55 0.45 192 XMMoneyMeta_00 1465 0.51 0.66 0.44 193 XMDateMe_00 1457 0.42 0.39 0.44 194 DIET_1 1454 0.60 0.96 0.44 195 XMBody_17 1447 0.86 1.77 0.44 196 T_TVD_MIME_NO_HEADERS 1431 0.31 0.04 0.43 197 TR_XM_GMP_MSPIKE_UNDO2 1429 0.40 0.33 0.43 198 XMSolicitRefs_0 1391 0.41 0.40 0.42 199 LongTLD 1388 0.55 0.83 0.42 200 XM_B_Phish66 1335 0.74 1.46 0.40 ----------------------------------------------------------------------