Email: 511063 Autolearn: 0 AvgScore: 3.95 AvgScanTime: 1.24 sec Spam: 158989 Autolearn: 0 AvgScore: 13.43 AvgScanTime: 1.40 sec Ham: 352074 Autolearn: 0 AvgScore: -0.34 AvgScanTime: 1.17 sec Time Spent Running SA: 175.87 hours Time Spent Processing Spam: 61.72 hours Time Spent Processing Ham: 114.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150953 88.43 94.95 85.49 2 DKIM_SIGNED 147365 80.21 92.69 74.57 3 XM_DK_Pass 140865 78.00 88.60 73.21 4 DKIM_VALID 139604 76.94 87.81 72.03 5 XM_B_Unicode 135790 74.07 85.41 68.95 6 RELAYCOUNTRY_US 130703 80.84 82.21 80.23 7 T_SCC_BODY_TEXT_LINE 127130 82.08 79.96 83.03 8 DCC_CHECK 115775 45.03 72.82 32.48 9 XM_B_SpammyWords 114768 52.47 72.19 43.57 10 XMListUnsubscribeExists 112837 55.77 70.97 48.90 11 DKIM_VALID_AU 105269 59.86 66.21 56.99 12 XM_B_Unicode3 77466 42.67 48.72 39.93 13 XM_DK_Undo_02 72008 18.03 45.29 5.72 14 XM_B_SpammyWords2 66905 25.71 42.08 18.32 15 LOC_TINY_FONT_1 63385 28.67 39.87 23.62 16 BAYES_50 62696 52.62 39.43 58.57 17 HTML_FONT_LOW_CONTRAST 61941 30.65 38.96 26.89 18 TR_XM_DKIM_Undo 56299 12.57 35.41 2.26 19 BAYES_99 54112 13.78 34.04 4.63 20 DKIM_VALID_EF 53614 30.42 33.72 28.93 21 MIME_HTML_ONLY 52261 23.05 32.87 18.62 22 FVGT_m_MULTI_ODD 51094 27.48 32.14 25.37 23 T_KAM_HTML_FONT_INVALID 45776 23.19 28.79 20.66 24 DCC_CHECK_NEGATIVE 43191 54.94 27.17 67.48 25 BAYES_999 43004 10.92 27.05 3.63 26 XMSubLong 40458 24.56 25.45 24.16 27 TR_DCC_Bayes_99 38611 8.54 24.29 1.43 28 T_TM2_M_HEADER_IN_MSG 38364 27.52 24.13 29.05 29 TR_XM_DK_Unsub 37625 16.56 23.67 13.35 30 RCVD_IN_MSPIKE_H2 33093 19.91 20.81 19.50 31 XM_Multi_Part_URI 31665 15.00 19.92 12.78 32 RELAYCOUNTRY_META 28766 8.48 18.09 4.14 33 XM_B_Unsub 27836 11.13 17.51 8.24 34 TR_XM_BayesUnsub 26880 9.60 16.91 6.30 35 BOTNET_IPINHOSTNAME 24852 7.83 15.63 4.31 36 UNPARSEABLE_RELAY 23573 11.67 14.83 10.25 37 TR_XM_SpammyRelay 23408 6.08 14.72 2.18 38 LOTS_OF_MONEY 22105 8.65 13.90 6.28 39 XM_B_SpammyWords3 22052 7.54 13.87 4.69 40 XM_Body_Dirty_Words 20750 8.38 13.05 6.26 41 TR_XM_SpammyWords2 19982 4.27 12.57 0.52 42 TR_XM_SpammyWords4 19265 6.57 12.12 4.06 43 RCVD_IN_BL_SPAMCOP_NET 19078 4.28 12.00 0.80 44 BOTNET 16514 4.09 10.39 1.25 45 TR_XM_SPAMCOP 16037 3.40 10.09 0.38 46 RELAYCOUNTRY_CA 15577 3.79 9.80 1.08 47 FSL_BULK_SIG 14915 5.30 9.38 3.46 48 XM_Evil_Numbers_Gen 14614 8.37 9.19 8.01 49 RCVD_IN_MSPIKE_WL 14150 7.59 8.90 7.00 50 RCVD_IN_MSPIKE_H3 14150 7.57 8.90 6.97 51 BAYES_80 13369 5.53 8.41 4.22 52 HTML_IMAGE_RATIO_02 12516 6.18 7.87 5.42 53 TR_XM_UnparsRelay 11751 3.60 7.39 1.89 54 BAYES_60 11584 8.48 7.29 9.01 55 LotsOfNums_01 11030 7.87 6.94 8.29 56 XM_UncommonTLD01 10809 4.86 6.80 3.98 57 XMSexyCombo_05 9929 3.37 6.25 2.08 58 HTML_IMAGE_RATIO_04 9402 4.74 5.91 4.22 59 XMSubMetaSx_00 9323 5.05 5.86 4.68 60 XM_H_Long_From01 9156 5.64 5.76 5.58 61 MPART_ALT_DIFF 9117 4.28 5.73 3.62 62 TooManyTo_001 8913 7.82 5.61 8.82 63 UNTRUSTED_Relay 8322 2.68 5.23 1.52 64 BAYES_95 8212 3.35 5.17 2.53 65 XMBody_17 8112 1.91 5.10 0.47 66 DKIM_INVALID 7761 3.27 4.88 2.54 67 XM_B_Phish_Phrases 7666 3.51 4.82 2.92 68 XMNumbers 7242 3.30 4.56 2.73 69 TR_XM_PhishingBody 6952 2.43 4.37 1.55 70 TR_XM_SpammyWords5 6851 2.19 4.31 1.23 71 XM_SPF_SoftFail 6522 3.56 4.10 3.32 72 XM_B_Investor 6510 2.37 4.09 1.58 73 XMStrtUSub 6297 4.45 3.96 4.67 74 XM_B_SpammyTLD 6245 2.87 3.93 2.39 75 HTML_IMAGE_RATIO_06 5984 2.92 3.76 2.54 76 T_XMDrugObfuBody_08 5923 2.31 3.73 1.66 77 TM2_M_VERY_LONG_WORD 5919 2.08 3.72 1.34 78 MIME_HTML_ONLY_MULTI 5909 2.63 3.72 2.13 79 SpammyFromTLD_01 5880 1.91 3.70 1.10 80 T_XMDrugObfuBody_14 5787 2.21 3.64 1.57 81 MIME_HTML_MOSTLY 5677 2.81 3.57 2.47 82 T_FILL_THIS_FORM_SHORT 5640 1.71 3.55 0.88 83 TR_XM_BayesRelay 5639 1.10 3.55 0.00 84 XM_OfRef6 5565 1.79 3.50 1.01 85 TM2_M_URI_OPT_OUT 5521 2.45 3.47 1.98 86 RCVD_IN_VALIDITY_SAFE 5269 3.73 3.31 3.92 87 MIME_QP_LONG_LINE 5122 4.68 3.22 5.34 88 HTML_IMAGE_RATIO_08 5095 2.30 3.20 1.89 89 XM_URI_RBL 4761 1.05 2.99 0.18 90 HK_RANDOM_REPLYTO 4315 0.91 2.71 0.09 91 XMDiploma_00 4150 1.84 2.61 1.49 92 XM_CamelCaseFrm001 4114 2.29 2.59 2.15 93 SCC_BODY_URI_ONLY 4101 2.46 2.58 2.40 94 XM_UB50 4053 1.41 2.55 0.89 95 HTML_MIME_NO_HTML_TAG 4024 2.51 2.53 2.50 96 RCVD_IN_VALIDITY_CERTIFIED 4017 3.07 2.53 3.31 97 XM_B_SpammyWords4 4015 1.20 2.53 0.60 98 T_TooManySym_01 3839 4.99 2.41 6.16 99 XM_B_Unsub2 3793 1.91 2.39 1.70 100 T_XMHurry_00 3706 1.14 2.33 0.60 101 TM2_M_BODY_EMPTY 3611 1.09 2.27 0.56 102 SUBJ_ALL_CAPS 3481 1.69 2.19 1.46 103 XMEmptyBody_01 3469 0.86 2.18 0.26 104 RELAYCOUNTRY_AU 3456 1.18 2.17 0.73 105 TR_XM_PHPForged 3341 0.93 2.10 0.40 106 TR_XM_PHPDW 3340 0.93 2.10 0.40 107 USER_IN_DEF_DKIM_WL 3295 9.33 2.07 12.60 108 XMStockSpam_06 3270 1.54 2.06 1.31 109 MAILING_LIST_MULTI 3252 2.57 2.05 2.81 110 TR_XM_FormFill2 3252 0.91 2.05 0.39 111 TR_LOTS_OF_MONEY3 3211 0.90 2.02 0.40 112 TR_XM_FormFill 3207 0.63 2.02 0.01 113 XM_H_PHPOS 3205 0.88 2.02 0.37 114 BAYES_40 3165 3.79 1.99 4.60 115 XM_H_Undi_Recip 3147 0.86 1.98 0.36 116 XM_DIRTYINTL 3136 0.82 1.97 0.29 117 T_REMOTE_IMAGE 3096 3.18 1.95 3.74 118 XM_H_Long_From02 3058 1.23 1.92 0.92 119 FONT_INVIS_LONG_LINE 3005 0.64 1.89 0.08 120 XM_DK_Undo_01 2976 1.87 1.87 1.87 121 FROM_EXCESS_BASE64 2974 1.78 1.87 1.74 122 HTML_TAG_BALANCE_BODY 2913 0.98 1.83 0.60 123 URI_HEX 2898 1.30 1.82 1.06 124 TR_XM_NoHeaderRelay 2885 0.65 1.81 0.12 125 ANY_BOUNCE_MESSAGE 2874 3.43 1.81 4.16 126 BOUNCE_MESSAGE 2870 3.43 1.81 4.16 127 BAYES_20 2737 2.93 1.72 3.48 128 SpammyFromTLD_02 2678 0.86 1.68 0.49 129 T_XMDrugObfuBody_00 2502 1.06 1.57 0.83 130 XM_SendGrid 2462 1.39 1.55 1.32 131 TR_XM_INV_DKIM 2457 0.51 1.55 0.04 132 URI_TRY_3LD 2420 0.90 1.52 0.62 133 TR_XM_Undi_Recip2 2398 0.59 1.51 0.17 134 XMSexyCombo_01 2377 0.97 1.50 0.73 135 RCVD_IN_IADB_LISTED 2339 3.74 1.47 4.76 136 TR_Mismatch_TLD_02 2329 0.53 1.46 0.10 137 XMPhish30 2322 0.81 1.46 0.51 138 XM_HighProb1 2307 0.46 1.45 0.01 139 HTTPS_HTTP_MISMATCH 2253 1.08 1.42 0.93 140 AC_BR_BONANZA 2208 0.49 1.39 0.09 141 XM_B_COVIDMETA 2154 0.60 1.35 0.26 142 URI_NOVOWEL 2141 1.72 1.35 1.89 143 XMGenDplmaNmb 2128 0.96 1.34 0.79 144 RCVD_IN_IADB_SPF 2073 3.33 1.30 4.24 145 TR_XM_InvalidRelay 2037 0.41 1.28 0.02 146 TR_MetaPhish_Combo_01 1967 0.87 1.24 0.70 147 XM_ProductURIs 1964 0.91 1.24 0.76 148 RCVD_IN_IADB_SENDERID 1962 3.02 1.23 3.83 149 RCVD_IN_IADB_DK 1956 2.95 1.23 3.73 150 XMHTML_After_End 1938 0.83 1.22 0.65 151 ALL_TRUSTED 1912 11.88 1.20 16.70 152 XMBdyGiftCard01 1827 0.79 1.15 0.63 153 KHOP_HELO_FCRDNS 1820 1.22 1.14 1.25 154 XM_B_Phish66 1793 0.55 1.13 0.29 155 RCVD_IN_VALIDITY_RPBL 1791 0.36 1.13 0.02 156 XMPhish14 1747 0.60 1.10 0.37 157 HTML_FONT_TINY_NORDNS 1739 0.45 1.09 0.16 158 RELAYCOUNTRY_FR 1739 0.51 1.09 0.25 159 XMSubMetaI_00 1717 0.67 1.08 0.49 160 TR_Symld_Words 1700 1.45 1.07 1.62 161 TR_Caps_n_Bayes_99 1618 0.33 1.02 0.02 162 BAYES_05 1561 2.20 0.98 2.75 163 BAYES_00 1553 7.32 0.98 10.19 164 TR_XM_Base64_M1 1541 0.79 0.97 0.71 165 TR_XM_DK_SendGrid 1506 0.88 0.95 0.84 166 T_Symld_Words_02 1455 0.70 0.92 0.61 167 URIBL_DBL_SPAM 1453 0.29 0.91 0.01 168 XM_UB99 1437 0.28 0.90 0.00 169 XMReplyNow 1433 0.46 0.90 0.26 170 MPART_ALT_DIFF_COUNT 1419 0.68 0.89 0.58 171 T_MONEY_PERCENT 1400 0.39 0.88 0.17 172 TR_LOTS_OF_MONEY2 1400 0.39 0.88 0.17 173 PDS_OTHER_BAD_TLD 1379 0.34 0.87 0.11 174 T_TooManySym_02 1366 2.09 0.86 2.64 175 DKIM_ADSP_CUSTOM_MED 1361 0.95 0.86 0.99 176 XMBody_78 1312 0.48 0.83 0.33 177 XMBrknScrpt_02 1296 0.60 0.82 0.50 178 XM_Body_Dirty_Words_01 1285 0.39 0.81 0.20 179 BOTNET_NORDNS 1269 0.26 0.80 0.01 180 XMClaimOffer 1263 0.33 0.79 0.12 181 RDNS_DYNAMIC 1251 0.46 0.79 0.31 182 HTML_FONT_FACE_BAD 1243 0.51 0.78 0.39 183 XM_B_REG_HTML 1229 0.42 0.77 0.25 184 TR_XM_DK_Bayes 1228 5.13 0.77 7.10 185 XMMoneyMeta_00 1226 0.62 0.77 0.56 186 TR_XM_DK_Bayes1 1222 5.06 0.77 6.99 187 NML_ADSP_CUSTOM_MED 1220 0.71 0.77 0.68 188 XM_OfRef7 1191 0.35 0.75 0.18 189 THIS_AD 1189 0.45 0.75 0.32 190 DIET_1 1179 0.45 0.74 0.32 191 FORGED_GMAIL_RCVD 1160 0.62 0.73 0.58 192 XMBody_29 1155 0.27 0.73 0.06 193 URIBL_BLACK 1144 0.26 0.72 0.05 194 XM_S_SpammyWords 1141 0.39 0.72 0.24 195 TR_XM_Spammywords 1141 0.39 0.72 0.24 196 XMHTMLBadTable_001 1138 0.45 0.72 0.33 197 XM_B_SEO 1122 0.31 0.71 0.13 198 RCVD_IN_PSBL 1117 0.31 0.70 0.13 199 XMSlimDrugH 1113 0.55 0.70 0.49 200 XM_B_DNDMA 1113 0.43 0.70 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 300986 88.43 94.95 85.49 2 T_SCC_BODY_TEXT_LINE 292337 82.08 79.96 83.03 3 RELAYCOUNTRY_US 282463 80.84 82.21 80.23 4 DKIM_SIGNED 262542 80.21 92.69 74.57 5 XM_DK_Pass 257758 78.00 88.60 73.21 6 DKIM_VALID 253592 76.94 87.81 72.03 7 XM_B_Unicode 242743 74.07 85.41 68.95 8 DCC_CHECK_NEGATIVE 237573 54.94 27.17 67.48 9 BAYES_50 206219 52.62 39.43 58.57 10 DKIM_VALID_AU 200631 59.86 66.21 56.99 11 XMListUnsubscribeExists 172168 55.77 70.97 48.90 12 XM_B_SpammyWords 153409 52.47 72.19 43.57 13 XM_B_Unicode3 140582 42.67 48.72 39.93 14 DCC_CHECK 114344 45.03 72.82 32.48 15 T_TM2_M_HEADER_IN_MSG 102265 27.52 24.13 29.05 16 DKIM_VALID_EF 101861 30.42 33.72 28.93 17 HTML_FONT_LOW_CONTRAST 94678 30.65 38.96 26.89 18 FVGT_m_MULTI_ODD 89334 27.48 32.14 25.37 19 XMSubLong 85069 24.56 25.45 24.16 20 LOC_TINY_FONT_1 83150 28.67 39.87 23.62 21 T_KAM_HTML_FONT_INVALID 72748 23.19 28.79 20.66 22 RCVD_IN_MSPIKE_H2 68663 19.91 20.81 19.50 23 MIME_HTML_ONLY 65554 23.05 32.87 18.62 24 XM_B_SpammyWords2 64488 25.71 42.08 18.32 25 ALL_TRUSTED 58779 11.88 1.20 16.70 26 TR_XM_DK_Unsub 47018 16.56 23.67 13.35 27 XM_Multi_Part_URI 44980 15.00 19.92 12.78 28 USER_IN_DEF_DKIM_WL 44366 9.33 2.07 12.60 29 UNPARSEABLE_RELAY 36080 11.67 14.83 10.25 30 BAYES_00 35880 7.32 0.98 10.19 31 BAYES_60 31731 8.48 7.29 9.01 32 TooManyTo_001 31053 7.82 5.61 8.82 33 LotsOfNums_01 29188 7.87 6.94 8.29 34 XM_B_Unsub 29026 11.13 17.51 8.24 35 XM_Evil_Numbers_Gen 28185 8.37 9.19 8.01 36 XM_DKIMWhitelistDomains 25870 5.08 0.06 7.35 37 IN_ZIMBRA_NJ_WHITELIST 25331 4.99 0.11 7.19 38 TR_XM_DK_Bayes 25014 5.13 0.77 7.10 39 RCVD_IN_MSPIKE_WL 24642 7.59 8.90 7.00 40 TR_XM_DK_Bayes1 24626 5.06 0.77 6.99 41 RCVD_IN_MSPIKE_H3 24552 7.57 8.90 6.97 42 TR_XM_BayesUnsub 22186 9.60 16.91 6.30 43 LOTS_OF_MONEY 22100 8.65 13.90 6.28 44 XM_Body_Dirty_Words 22055 8.38 13.05 6.26 45 T_TooManySym_01 21684 4.99 2.41 6.16 46 TR_XM_DK_Bayes2 20430 4.19 0.62 5.80 47 XM_DK_Undo_02 20141 18.03 45.29 5.72 48 XM_H_Long_From01 19656 5.64 5.76 5.58 49 HTML_IMAGE_RATIO_02 19075 6.18 7.87 5.42 50 MIME_QP_LONG_LINE 18815 4.68 3.22 5.34 51 XM_PDF 17549 3.61 0.55 4.98 52 RCVD_IN_IADB_LISTED 16750 3.74 1.47 4.76 53 XM_B_SpammyWords3 16500 7.54 13.87 4.69 54 XMSubMetaSx_00 16491 5.05 5.86 4.68 55 XMStrtUSub 16441 4.45 3.96 4.67 56 BAYES_99 16293 13.78 34.04 4.63 57 BAYES_40 16210 3.79 1.99 4.60 58 BOTNET_IPINHOSTNAME 15187 7.83 15.63 4.31 59 RCVD_IN_IADB_SPF 14934 3.33 1.30 4.24 60 BAYES_80 14873 5.53 8.41 4.22 61 HTML_IMAGE_RATIO_04 14841 4.74 5.91 4.22 62 ANY_BOUNCE_MESSAGE 14648 3.43 1.81 4.16 63 BOUNCE_MESSAGE 14638 3.43 1.81 4.16 64 RELAYCOUNTRY_META 14591 8.48 18.09 4.14 65 TR_XM_SpammyWords4 14310 6.57 12.12 4.06 66 XM_UncommonTLD01 14029 4.86 6.80 3.98 67 RCVD_IN_VALIDITY_SAFE 13802 3.73 3.31 3.92 68 RCVD_IN_IADB_SENDERID 13492 3.02 1.23 3.83 69 T_REMOTE_IMAGE 13172 3.18 1.95 3.74 70 RCVD_IN_IADB_DK 13140 2.95 1.23 3.73 71 BAYES_999 12789 10.92 27.05 3.63 72 MPART_ALT_DIFF 12748 4.28 5.73 3.62 73 BAYES_20 12261 2.93 1.72 3.48 74 FSL_BULK_SIG 12172 5.30 9.38 3.46 75 XM_SPF_SoftFail 11695 3.56 4.10 3.32 76 RCVD_IN_VALIDITY_CERTIFIED 11655 3.07 2.53 3.31 77 XM_B_Phish_Phrases 10284 3.51 4.82 2.92 78 RCVD_IN_IADB_VOUCHED 9980 2.16 0.66 2.83 79 MAILING_LIST_MULTI 9899 2.57 2.05 2.81 80 BAYES_05 9691 2.20 0.98 2.75 81 XMNumbers 9616 3.30 4.56 2.73 82 T_TooManySym_02 9303 2.09 0.86 2.64 83 TooManyTo_002 9014 1.94 0.57 2.56 84 DKIM_INVALID 8950 3.27 4.88 2.54 85 HTML_IMAGE_RATIO_06 8927 2.92 3.76 2.54 86 BAYES_95 8916 3.35 5.17 2.53 87 HTML_MIME_NO_HTML_TAG 8813 2.51 2.53 2.50 88 MIME_HTML_MOSTLY 8703 2.81 3.57 2.47 89 SCC_BODY_URI_ONLY 8453 2.46 2.58 2.40 90 XM_B_SpammyTLD 8411 2.87 3.93 2.39 91 TR_XM_DKIM_Undo 7942 12.57 35.41 2.26 92 TR_XM_SpammyRelay 7675 6.08 14.72 2.18 93 XM_CamelCaseFrm001 7566 2.29 2.59 2.15 94 MIME_HTML_ONLY_MULTI 7510 2.63 3.72 2.13 95 XMSexyCombo_05 7307 3.37 6.25 2.08 96 INVALID_MSGID 7232 1.49 0.23 2.05 97 TM2_M_URI_OPT_OUT 6980 2.45 3.47 1.98 98 RCVD_IN_IADB_OPTIN 6863 1.48 0.43 1.95 99 HELO_NODOT 6680 1.37 0.21 1.90 100 HELO_NO_DOMAIN 6674 1.37 0.21 1.90 101 URI_NOVOWEL 6671 1.72 1.35 1.89 102 HTML_IMAGE_RATIO_08 6666 2.30 3.20 1.89 103 TR_XM_UnparsRelay 6659 3.60 7.39 1.89 104 XM_DK_Undo_01 6597 1.87 1.87 1.87 105 TO_MALFORMED 6145 1.22 0.06 1.75 106 FROM_EXCESS_BASE64 6115 1.78 1.87 1.74 107 XM_B_Unsub2 5970 1.91 2.39 1.70 108 T_XMDrugObfuBody_08 5859 2.31 3.73 1.66 109 TR_Symld_Words 5690 1.45 1.07 1.62 110 XM_B_Investor 5580 2.37 4.09 1.58 111 TVD_RCVD_IP 5543 1.29 0.67 1.57 112 T_XMDrugObfuBody_14 5512 2.21 3.64 1.57 113 TR_XM_PhishingBody 5461 2.43 4.37 1.55 114 IN_HORDE_ADDRESS_BOOK 5373 1.08 0.08 1.53 115 UNTRUSTED_Relay 5349 2.68 5.23 1.52 116 XMDiploma_00 5258 1.84 2.61 1.49 117 TooManyTo_003 5220 1.16 0.44 1.48 118 SUBJ_ALL_CAPS 5144 1.69 2.19 1.46 119 TR_DCC_Bayes_99 5050 8.54 24.29 1.43 120 TM2_M_VERY_LONG_WORD 4704 2.08 3.72 1.34 121 XM_SendGrid 4661 1.39 1.55 1.32 122 XMGappySubj_01 4657 0.96 0.14 1.32 123 XMStockSpam_06 4608 1.54 2.06 1.31 124 XM_GoogleGroups 4579 1.06 0.54 1.30 125 KHOP_HELO_FCRDNS 4414 1.22 1.14 1.25 126 BOTNET 4411 4.09 10.39 1.25 127 TR_XM_SpammyWords5 4343 2.19 4.31 1.23 128 XMCapTrack 4320 0.98 0.42 1.23 129 XMBody_95 4053 0.86 0.22 1.15 130 XMBSHREFv2 4017 0.90 0.35 1.14 131 SpammyFromTLD_01 3885 1.91 3.70 1.10 132 TVD_SPACE_RATIO 3819 0.78 0.11 1.08 133 RELAYCOUNTRY_CA 3788 3.79 9.80 1.08 134 TooManyTo_004 3740 0.85 0.39 1.06 135 URI_HEX 3738 1.30 1.82 1.06 136 XM_OfRef6 3563 1.79 3.50 1.01 137 DKIM_ADSP_CUSTOM_MED 3481 0.95 0.86 0.99 138 HTTPS_HTTP_MISMATCH 3257 1.08 1.42 0.93 139 XM_H_Long_From02 3231 1.23 1.92 0.92 140 XM_UB50 3144 1.41 2.55 0.89 141 TooManyTo_005 3117 0.72 0.35 0.89 142 T_TooManySym_03 3114 0.68 0.22 0.88 143 T_FILL_THIS_FORM_SHORT 3088 1.71 3.55 0.88 144 TR_XM_DK_SendGrid 2974 0.88 0.95 0.84 145 FROM_GOV_DKIM_AU 2937 0.66 0.27 0.83 146 T_XMDrugObfuBody_00 2913 1.06 1.57 0.83 147 RCVD_IN_BL_SPAMCOP_NET 2814 4.28 12.00 0.80 148 XMGenDplmaNmb 2793 0.96 1.34 0.79 149 XM_H_Trusted_IP 2775 0.54 0.00 0.79 150 XM_ProductURIs 2688 0.91 1.24 0.76 151 XM_H_PHPMailer 2644 0.72 0.66 0.75 152 RCVD_IN_RP_SAFE 2641 0.73 0.68 0.75 153 XM_ShortIntro_01 2589 0.62 0.35 0.74 154 XMSexyCombo_01 2571 0.97 1.50 0.73 155 RELAYCOUNTRY_AU 2571 1.18 2.17 0.73 156 XMSubNoVowel 2539 0.63 0.43 0.72 157 TR_XM_Base64_M1 2515 0.79 0.97 0.71 158 TR_MetaPhish_Combo_01 2481 0.87 1.24 0.70 159 XMGappySubj_02 2437 0.50 0.06 0.69 160 NML_ADSP_CUSTOM_MED 2405 0.71 0.77 0.68 161 MSGID_NOFQDN1 2303 0.46 0.02 0.65 162 XMHTML_After_End 2291 0.83 1.22 0.65 163 RCVD_IN_RP_CERTIFIED 2228 0.60 0.53 0.63 164 XMBdyGiftCard01 2201 0.79 1.15 0.63 165 URI_TRY_3LD 2194 0.90 1.52 0.62 166 T_Symld_Words_02 2133 0.70 0.92 0.61 167 XM_B_SpammyWords4 2124 1.20 2.53 0.60 168 SHORT_HELO_AND_INLINE_IMAGE 2119 0.43 0.05 0.60 169 HTML_TAG_BALANCE_BODY 2112 0.98 1.83 0.60 170 T_XMHurry_00 2102 1.14 2.33 0.60 171 XMNoVowels 2049 0.53 0.41 0.58 172 RELAYCOUNTRY_GB 2041 0.61 0.66 0.58 173 MPART_ALT_DIFF_COUNT 2037 0.68 0.89 0.58 174 FORGED_GMAIL_RCVD 2032 0.62 0.73 0.58 175 T_OBFU_PDF_ATTACH 1989 0.42 0.10 0.56 176 TM2_M_BODY_EMPTY 1978 1.09 2.27 0.56 177 XMMoneyMeta_00 1958 0.62 0.77 0.56 178 TR_XM_SpammyWords2 1835 4.27 12.57 0.52 179 HTML_IMAGE_ONLY_28 1820 0.46 0.33 0.52 180 XMLngstWrd_00 1815 0.45 0.31 0.52 181 XMPhish30 1809 0.81 1.46 0.51 182 XMSexyCombo_04 1769 0.48 0.42 0.50 183 XMBrknScrpt_02 1769 0.60 0.82 0.50 184 XM_B_COPY_HTML 1744 0.56 0.70 0.50 185 SpammyFromTLD_02 1730 0.86 1.68 0.49 186 XMSlimDrugH 1713 0.55 0.70 0.49 187 FILL_THIS_FORM 1713 0.45 0.37 0.49 188 XMSubMetaI_00 1711 0.67 1.08 0.49 189 HTML_IMAGE_ONLY_20 1700 0.47 0.44 0.48 190 XMBody_17 1664 1.91 5.10 0.47 191 MISSING_HEADERS 1640 0.43 0.34 0.47 192 USER_IN_WELCOMELIST 1629 0.32 0.00 0.46 193 USER_IN_WHITELIST 1629 0.32 0.00 0.46 194 XMDateMe_00 1613 0.46 0.47 0.46 195 BASE64_LENGTH_79_INF 1613 0.35 0.12 0.46 196 PLING_QUERY 1585 0.52 0.67 0.45 197 XMLngstWrd_01 1550 0.39 0.29 0.44 198 XM_B_FormFill 1511 0.31 0.06 0.43 199 HTML_IMAGE_ONLY_32 1492 0.33 0.13 0.42 200 TRACKER_ID 1479 0.31 0.06 0.42 ----------------------------------------------------------------------