Email: 534817 Autolearn: 0 AvgScore: 4.99 AvgScanTime: 1.51 sec Spam: 167959 Autolearn: 0 AvgScore: 13.08 AvgScanTime: 1.82 sec Ham: 366858 Autolearn: 0 AvgScore: 1.29 AvgScanTime: 1.37 sec Time Spent Running SA: 224.66 hours Time Spent Processing Spam: 85.11 hours Time Spent Processing Ham: 139.55 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 167765 99.62 99.88 99.49 2 HTML_MESSAGE 164104 91.64 97.70 88.86 3 DKIM_SIGNED 142936 74.65 85.10 69.86 4 XM_B_Unicode 139859 76.44 83.27 73.32 5 XM_DK_Pass 136021 72.61 80.98 68.78 6 DKIM_VALID 134973 71.94 80.36 68.08 7 RELAYCOUNTRY_US 133618 81.18 79.55 81.93 8 DCC_CHECK 111366 42.88 66.31 32.15 9 XM_B_SpammyWords 110670 51.59 65.89 45.04 10 XMListUnsubscribeExists 107897 53.68 64.24 48.85 11 DKIM_VALID_AU 107023 59.01 63.72 56.86 12 LOC_TINY_FONT_1 83525 35.35 49.73 28.77 13 XM_B_Unicode3 81265 46.66 48.38 45.87 14 HTML_FONT_LOW_CONTRAST 72762 31.70 43.32 26.37 15 XM_DK_Undo_02 68738 16.39 40.93 5.16 16 FVGT_m_MULTI_ODD 64015 29.11 38.11 24.99 17 XM_B_SpammyWords2 62164 23.75 37.01 17.67 18 BAYES_99 61926 14.53 36.87 4.31 19 BAYES_50 61433 51.72 36.58 58.66 20 DCC_CHECK_NEGATIVE 56438 57.05 33.60 67.78 21 T_KAM_HTML_FONT_INVALID 51961 24.79 30.94 21.98 22 MIME_HTML_ONLY 50656 24.79 30.16 22.33 23 BAYES_999 49071 11.45 29.22 3.31 24 DKIM_VALID_EF 47479 27.16 28.27 26.65 25 TR_XM_DKIM_Undo 46817 10.01 27.87 1.83 26 XMSubLong 44405 23.99 26.44 22.87 27 XM_Multi_Part_URI 43807 17.91 26.08 14.17 28 RCVD_IN_MSPIKE_H2 39131 17.95 23.30 15.50 29 TR_XM_DK_Unsub 35556 16.13 21.17 13.82 30 UNPARSEABLE_RELAY 35255 14.34 20.99 11.29 31 TR_DCC_Bayes_99 34022 6.99 20.26 0.92 32 T_TM2_M_HEADER_IN_MSG 33522 22.98 19.96 24.36 33 XM_B_Unsub 31505 11.26 18.76 7.82 34 TR_XM_BayesUnsub 30019 9.72 17.87 5.99 35 RELAYCOUNTRY_META 25360 7.19 15.10 3.57 36 TR_MAX_INTL_RELAY 23610 8.76 14.06 6.34 37 XM_B_SpammyWords3 23224 7.73 13.83 4.94 38 LOTS_OF_MONEY 20138 7.06 11.99 4.81 39 RCVD_IN_MSPIKE_WL 20068 18.26 11.95 21.15 40 TR_XM_UnparsRelay 19372 4.90 11.53 1.87 41 BOTNET_IPINHOSTNAME 19224 11.99 11.45 12.24 42 TR_XM_SpammyWords2 18954 3.81 11.28 0.39 43 RCVD_IN_BL_SPAMCOP_NET 18932 4.03 11.27 0.71 44 TR_XM_SpammyRelay 18434 4.81 10.98 1.98 45 TR_XM_SpammyWords4 18166 5.59 10.82 3.19 46 XM_Evil_Numbers_Gen 16626 9.09 9.90 8.72 47 XM_B_Phish_Phrases 16350 7.75 9.73 6.85 48 BOTNET 15755 3.76 9.38 1.19 49 XM_H_Long_From01 15661 6.39 9.32 5.04 50 FSL_BULK_SIG 14914 5.32 8.88 3.69 51 BAYES_80 14751 5.42 8.78 3.88 52 BAYES_60 13468 7.50 8.02 7.27 53 UNTRUSTED_Relay 12953 3.55 7.71 1.64 54 RCVD_IN_MSPIKE_BL 12562 3.30 7.48 1.39 55 TR_XM_MSPIKECOMBO 12544 3.28 7.47 1.37 56 MPART_ALT_DIFF 12326 7.69 7.34 7.85 57 TR_XM_SPAMCOP 11801 2.36 7.03 0.22 58 HTML_IMAGE_RATIO_02 11119 5.58 6.62 5.11 59 ALL_TRUSTED 10856 12.26 6.46 14.92 60 XM_UncommonTLD01 10470 4.26 6.23 3.36 61 XMSubMetaSx_00 10184 3.73 6.06 2.66 62 XM_H_GMP 9897 5.59 5.89 5.45 63 HTML_IMAGE_RATIO_04 9859 10.60 5.87 12.77 64 RCVD_IN_MSPIKE_H3 9742 8.02 5.80 9.03 65 XM_B_PhoneNumber 9250 8.02 5.51 9.17 66 LotsOfNums_01 9132 8.30 5.44 9.62 67 TR_XM_SpammyWords3 8665 2.05 5.16 0.63 68 TR_XM_PhishingBody 8371 2.52 4.98 1.39 69 BAYES_95 8200 3.22 4.88 2.45 70 XMStrtUSub 8175 7.55 4.87 8.77 71 XM_Body_Dirty_Words 8002 2.79 4.76 1.88 72 DKIM_INVALID 7963 2.71 4.74 1.79 73 MIME_HTML_MOSTLY 7532 2.87 4.48 2.14 74 XM_B_SpammyTLD 7464 3.45 4.44 3.00 75 MIXED_HREF_CASE 7283 1.66 4.34 0.44 76 MIME_QP_LONG_LINE 7050 5.28 4.20 5.77 77 T_XMDrugObfuBody_14 6869 2.12 4.09 1.21 78 RCVD_IN_MSPIKE_L3 6725 2.02 4.00 1.11 79 HTML_FONT_SIZE_HUGE 6645 1.49 3.96 0.36 80 TM2_M_VERY_LONG_WORD 6601 2.28 3.93 1.52 81 RELAYCOUNTRY_CA 6433 1.65 3.83 0.65 82 TR_XM_SpammyWords5 6388 2.21 3.80 1.49 83 TM2_M_URI_OPT_OUT 6228 2.61 3.71 2.11 84 XMSexyCombo_05 6143 1.67 3.66 0.77 85 XM_B_Investor 6131 2.00 3.65 1.24 86 XM_OfRef6 5839 1.68 3.48 0.86 87 TooManyTo_001 5696 5.21 3.39 6.04 88 TR_XM_MSPIKECOMBO2 5627 1.12 3.35 0.10 89 XMNumbers 5436 3.36 3.24 3.42 90 XM_B_Unsub2 5429 1.85 3.23 1.22 91 MIME_HTML_ONLY_MULTI 5423 5.22 3.23 6.13 92 HTML_IMAGE_RATIO_06 5392 4.11 3.21 4.52 93 RCVD_IN_MSPIKE_H5 5389 5.97 3.21 7.23 94 HTML_MIME_NO_HTML_TAG 5349 2.27 3.18 1.85 95 XM_UB50 5248 1.76 3.12 1.13 96 XM_SPF_SoftFail 4953 1.62 2.95 1.01 97 RCVD_IN_MSPIKE_H4 4937 4.27 2.94 4.88 98 TR_XM_NoHeaderRelay 4906 1.02 2.92 0.15 99 USER_IN_DEF_DKIM_WL 4903 9.80 2.92 12.95 100 XMStockSpam_06 4883 1.43 2.91 0.75 101 XM_CamelCaseFrm001 4797 1.99 2.86 1.59 102 T_XMDrugObfuBody_08 4790 1.87 2.85 1.42 103 BOUNCE_MESSAGE 4739 4.91 2.82 5.86 104 ANY_BOUNCE_MESSAGE 4739 4.91 2.82 5.86 105 RCVD_IN_MSPIKE_L4 4664 1.04 2.78 0.24 106 XM_B_URI_Unicode 4605 1.88 2.74 1.49 107 XMPhish30 4532 1.17 2.70 0.47 108 HTML_IMAGE_RATIO_08 4531 2.13 2.70 1.87 109 SUBJ_ALL_CAPS 4508 2.02 2.68 1.72 110 RELAYCOUNTRY_AU 4432 1.26 2.64 0.62 111 XMBody_17 4113 1.12 2.45 0.52 112 KHOP_HELO_FCRDNS 4095 2.24 2.44 2.15 113 TR_XM_INV_DKIM 4053 0.77 2.41 0.01 114 XM_B_SpammyWords4 4006 1.34 2.39 0.86 115 T_XMDrugObfuBody_00 3947 1.58 2.35 1.23 116 XMDiploma_00 3893 1.54 2.32 1.18 117 MIME_HEADER_CTYPE_ONLY 3891 0.87 2.32 0.21 118 XM_URI_RBL 3816 0.92 2.27 0.29 119 TO_IN_SUBJ 3745 0.75 2.23 0.07 120 T_REMOTE_IMAGE 3652 2.54 2.17 2.71 121 MAILING_LIST_MULTI 3650 2.99 2.17 3.36 122 T_XMHurry_00 3510 1.03 2.09 0.54 123 SpammyFromTLD_02 3430 0.93 2.04 0.42 124 RCVD_IN_VALIDITY_SAFE 3400 3.43 2.02 4.08 125 TR_XM_MaxSPIKE 3396 0.70 2.02 0.09 126 T_TooManySym_01 3382 4.62 2.01 5.81 127 BAYES_40 3261 4.24 1.94 5.29 128 THIS_AD 3097 0.90 1.84 0.47 129 XM_UB99 3093 0.58 1.84 0.00 130 TR_MetaPhish_Combo_01b 2958 0.68 1.76 0.19 131 XMSubMetaI_00 2838 1.01 1.69 0.70 132 HTML_FONT_FACE_BAD 2837 7.90 1.69 10.75 133 TR_XM_GMP_BULK_SIG 2807 0.58 1.67 0.09 134 TR_XM_RelayPhish 2795 0.58 1.66 0.08 135 URI_NOVOWEL 2748 1.19 1.64 0.98 136 T_FILL_THIS_FORM_SHORT 2698 1.01 1.61 0.74 137 RCVD_IN_IADB_LISTED 2622 3.00 1.56 3.66 138 XM_ProductURIs 2612 0.83 1.56 0.49 139 BOTNET_NORDNS 2610 0.49 1.55 0.00 140 RELAYCOUNTRY_FR 2535 0.70 1.51 0.33 141 XM_DK_Undo_01 2516 1.51 1.50 1.52 142 FROM_EXCESS_BASE64 2458 1.82 1.46 1.98 143 BAYES_20 2414 2.88 1.44 3.54 144 XM_SendGrid 2405 1.33 1.43 1.28 145 XM_UB999 2381 0.45 1.42 0.00 146 XM_B_COPY_HTML 2344 0.79 1.40 0.51 147 XMBrknScrpt_02 2342 1.02 1.39 0.85 148 SHOPIFY_IMG_NOT_RCVD_SFY 2299 0.59 1.37 0.23 149 XM_B_DNDMA 2295 1.04 1.37 0.89 150 LOW_PRICE 2286 0.62 1.36 0.27 151 XMGenDplmaNmb 2266 0.81 1.35 0.57 152 TR_LOTS_OF_MONEY3 2246 0.70 1.34 0.41 153 RCVD_IN_VALIDITY_RPBL 2242 0.45 1.33 0.05 154 RCVD_IN_VALIDITY_CERTIFIED 2203 2.59 1.31 3.17 155 XM_B_SEO 2172 0.55 1.29 0.22 156 MPART_ALT_DIFF_COUNT 2109 0.63 1.26 0.35 157 RCVD_IN_IADB_SPF 2092 2.66 1.25 3.31 158 XMSubNoVowel 2054 2.78 1.22 3.49 159 URI_TRY_3LD 2049 0.75 1.22 0.53 160 TR_XM_InvalidRelay 2013 0.38 1.20 0.01 161 RELAYCOUNTRY_JP 1976 0.38 1.18 0.02 162 XM_B_Phish66 1938 0.58 1.15 0.31 163 XMBdyGiftCard01 1937 0.89 1.15 0.76 164 HTML_FONT_SIZE_LARGE 1913 0.40 1.14 0.07 165 HTTPS_HTTP_MISMATCH 1901 0.77 1.13 0.60 166 TR_Mismatch_TLD_02 1894 0.41 1.13 0.09 167 RCVD_IN_IADB_DK 1894 2.37 1.13 2.93 168 TR_Symld_Words 1887 1.13 1.12 1.14 169 RCVD_IN_IADB_SENDERID 1862 2.42 1.11 3.02 170 T_MONEY_PERCENT 1855 0.44 1.10 0.13 171 TR_LOTS_OF_MONEY2 1855 0.44 1.10 0.13 172 URI_HEX 1833 1.05 1.09 1.04 173 XM_UB60 1817 0.41 1.08 0.10 174 XM_H_Long_From02 1817 0.79 1.08 0.65 175 HTML_IMAGE_ONLY_20 1806 0.58 1.08 0.35 176 SpammyFromTLD_01 1804 0.73 1.07 0.57 177 RCVD_IN_IADB_VOUCHED 1791 1.83 1.07 2.18 178 TR_XM_SEO4 1775 0.40 1.06 0.10 179 DIET_1 1724 0.66 1.03 0.49 180 TR_XM_SpoofStaff 1640 0.36 0.98 0.08 181 XM_UB80 1637 0.32 0.97 0.02 182 TM2_M_A_HREF_HREF 1633 0.47 0.97 0.24 183 XMSpoofStaff2 1628 0.36 0.97 0.08 184 TR_MetaPhish_Combo_01 1623 0.98 0.97 0.99 185 TR_XM_PSC1 1607 0.36 0.96 0.08 186 XM_H_SpoofStaff4 1606 0.36 0.96 0.08 187 DKIM_ADSP_NXDOMAIN 1588 0.48 0.95 0.26 188 XMClaimOffer 1582 0.56 0.94 0.39 189 TR_XM_PhishingBody3 1580 0.30 0.94 0.01 190 URI_PHISH 1573 0.31 0.94 0.02 191 RCVD_IN_PSBL 1564 0.30 0.93 0.01 192 XMSubMetaSxObfu_03 1560 0.57 0.93 0.40 193 NORDNS_LOW_CONTRAST 1557 0.66 0.93 0.53 194 TR_XM_SpoofStaff4 1552 0.34 0.92 0.07 195 XM_GoogleGroups 1551 1.07 0.92 1.14 196 XMBody_78 1542 0.50 0.92 0.30 197 TR_XM_SpoofStaff2 1532 0.29 0.91 0.00 198 PDS_FRNOM_TODOM_NAKED_TO 1518 0.28 0.90 0.00 199 PDS_FROM_NAME_TO_DOMAIN 1518 0.28 0.90 0.00 200 RDNS_DYNAMIC 1514 0.37 0.90 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 364995 99.62 99.88 99.49 2 HTML_MESSAGE 325999 91.64 97.70 88.86 3 RELAYCOUNTRY_US 300561 81.18 79.55 81.93 4 XM_B_Unicode 268967 76.44 83.27 73.32 5 DKIM_SIGNED 256302 74.65 85.10 69.86 6 XM_DK_Pass 252314 72.61 80.98 68.78 7 DKIM_VALID 249751 71.94 80.36 68.08 8 DCC_CHECK_NEGATIVE 248651 57.05 33.60 67.78 9 BAYES_50 215195 51.72 36.58 58.66 10 DKIM_VALID_AU 208584 59.01 63.72 56.86 11 XMListUnsubscribeExists 179201 53.68 64.24 48.85 12 XM_B_Unicode3 168276 46.66 48.38 45.87 13 XM_B_SpammyWords 165244 51.59 65.89 45.04 14 DCC_CHECK 117954 42.88 66.31 32.15 15 LOC_TINY_FONT_1 105531 35.35 49.73 28.77 16 DKIM_VALID_EF 97781 27.16 28.27 26.65 17 HTML_FONT_LOW_CONTRAST 96756 31.70 43.32 26.37 18 FVGT_m_MULTI_ODD 91694 29.11 38.11 24.99 19 T_TM2_M_HEADER_IN_MSG 89361 22.98 19.96 24.36 20 XMSubLong 83901 23.99 26.44 22.87 21 MIME_HTML_ONLY 81911 24.79 30.16 22.33 22 T_KAM_HTML_FONT_INVALID 80619 24.79 30.94 21.98 23 RCVD_IN_MSPIKE_WL 77579 18.26 11.95 21.15 24 XM_B_SpammyWords2 64838 23.75 37.01 17.67 25 RCVD_IN_MSPIKE_H2 56852 17.95 23.30 15.50 26 ALL_TRUSTED 54735 12.26 6.46 14.92 27 XM_Multi_Part_URI 51992 17.91 26.08 14.17 28 TR_XM_DK_Unsub 50712 16.13 21.17 13.82 29 USER_IN_DEF_DKIM_WL 47521 9.80 2.92 12.95 30 HTML_IMAGE_RATIO_04 46845 10.60 5.87 12.77 31 BAYES_00 45416 8.73 0.76 12.38 32 BOTNET_IPINHOSTNAME 44900 11.99 11.45 12.24 33 UNPARSEABLE_RELAY 41416 14.34 20.99 11.29 34 HTML_FONT_FACE_BAD 39436 7.90 1.69 10.75 35 LotsOfNums_01 35281 8.30 5.44 9.62 36 XM_B_PhoneNumber 33654 8.02 5.51 9.17 37 RCVD_IN_MSPIKE_H3 33143 8.02 5.80 9.03 38 XMStrtUSub 32189 7.55 4.87 8.77 39 XM_Evil_Numbers_Gen 31984 9.09 9.90 8.72 40 MPART_ALT_DIFF 28811 7.69 7.34 7.85 41 XM_B_Unsub 28698 11.26 18.76 7.82 42 BAYES_60 26668 7.50 8.02 7.27 43 RCVD_IN_MSPIKE_H5 26518 5.97 3.21 7.23 44 XM_B_Phish_Phrases 25118 7.75 9.73 6.85 45 TR_MAX_INTL_RELAY 23250 8.76 14.06 6.34 46 XM_DKIMWhitelistDomains 22509 4.23 0.08 6.14 47 MIME_HTML_ONLY_MULTI 22490 5.22 3.23 6.13 48 TooManyTo_001 22169 5.21 3.39 6.04 49 TR_XM_BayesUnsub 21986 9.72 17.87 5.99 50 ANY_BOUNCE_MESSAGE 21495 4.91 2.82 5.86 51 BOUNCE_MESSAGE 21494 4.91 2.82 5.86 52 TR_XM_DK_Bayes 21454 4.21 0.64 5.85 53 T_TooManySym_01 21313 4.62 2.01 5.81 54 MIME_QP_LONG_LINE 21179 5.28 4.20 5.77 55 TR_XM_DK_Bayes1 21166 4.16 0.63 5.77 56 XM_H_GMP 20001 5.59 5.89 5.45 57 BAYES_40 19405 4.24 1.94 5.29 58 XM_DK_Undo_02 18914 16.39 40.93 5.16 59 HTML_IMAGE_RATIO_02 18748 5.58 6.62 5.11 60 TR_XM_DK_Bayes2 18629 3.66 0.56 5.08 61 XM_H_Long_From01 18504 6.39 9.32 5.04 62 XM_B_SpammyWords3 18111 7.73 13.83 4.94 63 RCVD_IN_MSPIKE_H4 17918 4.27 2.94 4.88 64 LOTS_OF_MONEY 17634 7.06 11.99 4.81 65 HTML_IMAGE_RATIO_06 16576 4.11 3.21 4.52 66 XM_PDF 15845 3.15 0.61 4.32 67 BAYES_99 15802 14.53 36.87 4.31 68 RCVD_IN_VALIDITY_SAFE 14969 3.43 2.02 4.08 69 BAYES_80 14242 5.42 8.78 3.88 70 FSL_BULK_SIG 13528 5.32 8.88 3.69 71 RCVD_IN_IADB_LISTED 13435 3.00 1.56 3.66 72 RELAYCOUNTRY_META 13109 7.19 15.10 3.57 73 BAYES_20 12990 2.88 1.44 3.54 74 XMSubNoVowel 12815 2.78 1.22 3.49 75 XMNumbers 12546 3.36 3.24 3.42 76 XM_UncommonTLD01 12317 4.26 6.23 3.36 77 MAILING_LIST_MULTI 12316 2.99 2.17 3.36 78 RCVD_IN_IADB_SPF 12154 2.66 1.25 3.31 79 BAYES_999 12149 11.45 29.22 3.31 80 TR_XM_SpammyWords4 11709 5.59 10.82 3.19 81 RCVD_IN_VALIDITY_CERTIFIED 11632 2.59 1.31 3.17 82 RCVD_IN_IADB_SENDERID 11088 2.42 1.11 3.02 83 XM_B_SpammyTLD 10991 3.45 4.44 3.00 84 RCVD_IN_IADB_DK 10763 2.37 1.13 2.93 85 T_REMOTE_IMAGE 9940 2.54 2.17 2.71 86 T_TooManySym_02 9842 1.99 0.48 2.68 87 XMSubMetaSx_00 9744 3.73 6.06 2.66 88 BAYES_95 9003 3.22 4.88 2.45 89 BAYES_05 8123 1.75 0.73 2.21 90 RCVD_IN_IADB_VOUCHED 7985 1.83 1.07 2.18 91 KHOP_HELO_FCRDNS 7898 2.24 2.44 2.15 92 MIME_HTML_MOSTLY 7839 2.87 4.48 2.14 93 TM2_M_URI_OPT_OUT 7740 2.61 3.71 2.11 94 TO_MALFORMED 7524 1.41 0.01 2.05 95 TR_XM_SpammyRelay 7270 4.81 10.98 1.98 96 FROM_EXCESS_BASE64 7267 1.82 1.46 1.98 97 XM_Body_Dirty_Words 6910 2.79 4.76 1.88 98 TR_XM_UnparsRelay 6857 4.90 11.53 1.87 99 HTML_IMAGE_RATIO_08 6850 2.13 2.70 1.87 100 HTML_MIME_NO_HTML_TAG 6780 2.27 3.18 1.85 101 TR_XM_DKIM_Undo 6725 10.01 27.87 1.83 102 INVALID_MSGID 6640 1.34 0.32 1.81 103 DKIM_INVALID 6551 2.71 4.74 1.79 104 SUBJ_ALL_CAPS 6307 2.02 2.68 1.72 105 XMSubLongNoVowel 6267 1.39 0.71 1.71 106 T_OBFU_PDF_ATTACH 6125 1.16 0.05 1.67 107 TooManyTo_002 6100 1.26 0.38 1.66 108 UNTRUSTED_Relay 6019 3.55 7.71 1.64 109 XMHTML_After_End 5907 1.38 0.87 1.61 110 XM_CamelCaseFrm001 5846 1.99 2.86 1.59 111 XMSubGarbage 5734 1.25 0.56 1.56 112 TM2_M_VERY_LONG_WORD 5591 2.28 3.93 1.52 113 RCVD_IN_IADB_OPTIN 5579 1.26 0.68 1.52 114 XM_DK_Undo_01 5570 1.51 1.50 1.52 115 XM_B_URI_Unicode 5459 1.88 2.74 1.49 116 URI_TRUNCATED 5450 1.07 0.16 1.49 117 TR_XM_SpammyWords5 5449 2.21 3.80 1.49 118 T_XMDrugObfuBody_08 5208 1.87 2.85 1.42 119 TR_XM_PhishingBody 5115 2.52 4.98 1.39 120 RCVD_IN_MSPIKE_BL 5081 3.30 7.48 1.39 121 TR_XM_MSPIKECOMBO 5013 3.28 7.47 1.37 122 XM_SendGrid 4687 1.33 1.43 1.28 123 XM_B_Investor 4552 2.00 3.65 1.24 124 T_XMDrugObfuBody_00 4515 1.58 2.35 1.23 125 XM_B_Unsub2 4466 1.85 3.23 1.22 126 T_XMDrugObfuBody_14 4454 2.12 4.09 1.21 127 BOTNET 4363 3.76 9.38 1.19 128 T_TooManySym_03 4336 0.86 0.14 1.18 129 XMDiploma_00 4333 1.54 2.32 1.18 130 XM_GoogleGroups 4195 1.07 0.92 1.14 131 TR_Symld_Words 4182 1.13 1.12 1.14 132 XM_UB50 4152 1.76 3.12 1.13 133 IN_HORDE_ADDRESS_BOOK 4134 0.79 0.04 1.13 134 TooManyTo_003 4095 0.86 0.30 1.12 135 RCVD_IN_MSPIKE_L3 4073 2.02 4.00 1.11 136 XMGappySubj_01 4065 0.82 0.19 1.11 137 TVD_RCVD_IP 3981 0.98 0.75 1.09 138 URI_HEX 3798 1.05 1.09 1.04 139 XM_SPF_SoftFail 3718 1.62 2.95 1.01 140 TR_MetaPhish_Combo_01 3619 0.98 0.97 0.99 141 URI_NOVOWEL 3590 1.19 1.64 0.98 142 TR_XM_DK_SendGrid 3439 0.92 0.88 0.94 143 TR_DCC_Bayes_99 3384 6.99 20.26 0.92 144 HELO_NODOT 3301 0.74 0.38 0.90 145 HELO_NO_DOMAIN 3298 0.74 0.38 0.90 146 XM_B_DNDMA 3257 1.04 1.37 0.89 147 TooManyTo_004 3212 0.68 0.26 0.88 148 XM_B_SpammyWords4 3168 1.34 2.39 0.86 149 XM_OfRef6 3152 1.68 3.48 0.86 150 XMBrknScrpt_02 3100 1.02 1.39 0.85 151 TVD_SPACE_RATIO 2904 0.62 0.25 0.79 152 XMSexyCombo_05 2810 1.67 3.66 0.77 153 XMBdyGiftCard01 2804 0.89 1.15 0.76 154 XMStockSpam_06 2760 1.43 2.91 0.75 155 T_FILL_THIS_FORM_SHORT 2712 1.01 1.61 0.74 156 TooManyTo_005 2675 0.57 0.23 0.73 157 RCVD_IN_BL_SPAMCOP_NET 2619 4.03 11.27 0.71 158 XMSubMetaI_00 2579 1.01 1.69 0.70 159 DKIM_ADSP_CUSTOM_MED 2460 0.70 0.77 0.67 160 FROM_GOV_DKIM_AU 2451 0.65 0.61 0.67 161 XMGappySubj_02 2422 0.46 0.03 0.66 162 XMBSHREFv2 2402 0.54 0.30 0.65 163 XM_H_Long_From02 2396 0.79 1.08 0.65 164 XMCapTrack 2396 0.61 0.50 0.65 165 RELAYCOUNTRY_CA 2377 1.65 3.83 0.65 166 XMLngstWrd_00 2317 0.58 0.46 0.63 167 TR_XM_SpammyWords3 2317 2.05 5.16 0.63 168 TVD_PH_BODY_ACCOUNTS_PRE 2307 0.47 0.12 0.63 169 HTML_TAG_BALANCE_BODY 2293 0.65 0.70 0.63 170 XM_ShortIntro_01 2292 0.64 0.66 0.62 171 RELAYCOUNTRY_AU 2288 1.26 2.64 0.62 172 PDS_LITECOIN_ID 2275 0.44 0.05 0.62 173 RELAYCOUNTRY_GB 2250 0.62 0.65 0.61 174 T_Symld_Words_02 2247 0.64 0.69 0.61 175 XM_E_Blogspot 2216 0.58 0.52 0.60 176 HTTPS_HTTP_MISMATCH 2191 0.77 1.13 0.60 177 XMGenDplmaNmb 2092 0.81 1.35 0.57 178 SpammyFromTLD_01 2076 0.73 1.07 0.57 179 T_XMHurry_00 1998 1.03 2.09 0.54 180 XM_H_PHPMailer 1966 0.45 0.25 0.54 181 NORDNS_LOW_CONTRAST 1962 0.66 0.93 0.53 182 URI_TRY_3LD 1949 0.75 1.22 0.53 183 XMBody_17 1896 1.12 2.45 0.52 184 XM_B_COPY_HTML 1869 0.79 1.40 0.51 185 XMNoVowels 1836 0.49 0.47 0.50 186 XM_ProductURIs 1809 0.83 1.56 0.49 187 DIET_1 1786 0.66 1.03 0.49 188 TR_XM_Base64_M1 1754 0.58 0.81 0.48 189 THIS_AD 1726 0.90 1.84 0.47 190 XMPhish30 1714 1.17 2.70 0.47 191 FORGED_GMAIL_RCVD 1705 0.52 0.64 0.46 192 TVD_PH_7 1645 0.33 0.06 0.45 193 MIXED_HREF_CASE 1614 1.66 4.34 0.44 194 PLING_QUERY 1612 0.55 0.79 0.44 195 T_TooManySym_04 1604 0.31 0.02 0.44 196 SpammyFromTLD_02 1537 0.93 2.04 0.42 197 XMPhish14 1521 0.53 0.77 0.41 198 TR_LOTS_OF_MONEY3 1511 0.70 1.34 0.41 199 XMSubMetaSxObfu_03 1463 0.57 0.93 0.40 200 XMLngstWrd_01 1428 0.41 0.45 0.39 ----------------------------------------------------------------------