Email: 534171 Autolearn: 0 AvgScore: 4.42 AvgScanTime: 1.21 sec Spam: 176806 Autolearn: 0 AvgScore: 13.65 AvgScanTime: 1.32 sec Ham: 357365 Autolearn: 0 AvgScore: -0.15 AvgScanTime: 1.16 sec Time Spent Running SA: 180.03 hours Time Spent Processing Spam: 64.79 hours Time Spent Processing Ham: 115.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 172214 91.20 97.40 88.13 2 DKIM_SIGNED 161396 81.66 91.28 76.91 3 XM_DK_Pass 155396 79.68 87.89 75.62 4 DKIM_VALID 153042 78.55 86.56 74.59 5 XM_B_Unicode 151563 76.34 85.72 71.70 6 RELAYCOUNTRY_US 139833 81.87 79.09 83.24 7 DCC_CHECK 133656 50.75 75.59 38.46 8 XMListUnsubscribeExists 133213 59.88 75.34 52.22 9 XM_B_SpammyWords 129501 54.12 73.24 44.65 10 DKIM_VALID_AU 113251 61.19 64.05 59.78 11 XM_DK_Undo_02 83084 19.61 46.99 6.07 12 XM_B_Unicode3 78187 42.53 44.22 41.69 13 XM_B_SpammyWords2 77237 27.17 43.68 19.00 14 LOC_TINY_FONT_1 72011 31.10 40.73 26.33 15 HTML_FONT_LOW_CONTRAST 66630 31.42 37.69 28.32 16 BAYES_50 66379 52.41 37.54 59.77 17 BAYES_99 64314 15.10 36.38 4.57 18 TR_XM_DKIM_Undo 64108 13.85 36.26 2.76 19 FVGT_m_MULTI_ODD 59994 28.39 33.93 25.65 20 RCVD_IN_MSPIKE_H2 59359 31.21 33.57 30.03 21 DKIM_VALID_EF 55836 29.76 31.58 28.86 22 MIME_HTML_ONLY 54037 22.83 30.56 19.00 23 T_KAM_HTML_FONT_INVALID 53298 24.51 30.14 21.73 24 BAYES_999 50958 11.93 28.82 3.58 25 TR_DCC_Bayes_99 48513 10.62 27.44 2.31 26 TR_XM_DK_Unsub 43167 17.40 24.41 13.93 27 DCC_CHECK_NEGATIVE 43125 49.21 24.39 61.48 28 T_TM2_M_HEADER_IN_MSG 38634 26.74 21.85 29.16 29 XMSubLong 37337 22.22 21.12 22.76 30 RELAYCOUNTRY_META 36724 9.61 20.77 4.10 31 XM_Multi_Part_URI 32222 15.36 18.22 13.94 32 LOTS_OF_MONEY 31058 10.21 17.57 6.58 33 TR_XM_SpammyRelay 28895 6.97 16.34 2.33 34 TR_XM_SpammyWords4 28470 8.32 16.10 4.46 35 XM_B_Unsub 26607 10.12 15.05 7.69 36 TR_MAX_INTL_RELAY 26356 9.38 14.91 6.64 37 TR_XM_SpammyWords2 26064 5.31 14.74 0.65 38 TR_XM_BayesUnsub 25680 8.96 14.52 6.20 39 RCVD_IN_BL_SPAMCOP_NET 25673 5.35 14.52 0.81 40 XM_B_SpammyWords3 24913 8.01 14.09 5.00 41 UNPARSEABLE_RELAY 24609 11.82 13.92 10.77 42 BOTNET_IPINHOSTNAME 22800 6.87 12.90 3.90 43 TR_XM_SPAMCOP 22694 4.59 12.84 0.51 44 RELAYCOUNTRY_CA 20074 4.64 11.35 1.31 45 RCVD_IN_MSPIKE_H3 16799 7.24 9.50 6.12 46 RCVD_IN_MSPIKE_WL 16799 7.24 9.50 6.12 47 BOTNET 16471 3.91 9.32 1.23 48 BAYES_80 16200 5.69 9.16 3.98 49 XM_Evil_Numbers_Gen 14435 8.28 8.16 8.33 50 BAYES_60 13483 8.76 7.63 9.32 51 FSL_BULK_SIG 13144 6.17 7.43 5.54 52 TR_XM_UnparsRelay 13117 3.62 7.42 1.75 53 XMBody_17 12894 2.89 7.29 0.72 54 UNTRUSTED_Relay 11607 3.14 6.56 1.45 55 LotsOfNums_01 11555 8.07 6.54 8.84 56 HTML_IMAGE_RATIO_02 11045 5.35 6.25 4.91 57 XM_Body_Dirty_Words 10766 4.11 6.09 3.13 58 XM_B_PhoneNumber 9716 8.67 5.50 10.24 59 XMSubMetaSx_00 9672 4.49 5.47 4.01 60 BAYES_95 9638 3.58 5.45 2.66 61 XM_UncommonTLD01 9615 4.40 5.44 3.89 62 TR_LOTS_OF_MONEY3 9552 2.34 5.40 0.82 63 MPART_ALT_DIFF 9307 4.60 5.26 4.27 64 HTML_IMAGE_RATIO_04 9218 4.40 5.21 3.99 65 XM_B_SEO 8730 2.61 4.94 1.46 66 XM_SPF_SoftFail 8591 3.87 4.86 3.37 67 XMStrtUSub 8566 4.36 4.84 4.13 68 HTML_IMAGE_RATIO_08 8553 3.43 4.84 2.73 69 DKIM_INVALID 8354 3.11 4.72 2.32 70 XM_OfRef6 7834 2.21 4.43 1.11 71 TooManyTo_001 7742 7.28 4.38 8.72 72 TR_XM_PhishingBody 7717 2.49 4.36 1.57 73 XM_B_Investor 7583 2.58 4.29 1.73 74 TR_XM_SEO4 7497 2.06 4.24 0.99 75 HTML_IMAGE_RATIO_06 7412 3.69 4.19 3.44 76 XM_B_Phish_Phrases 7364 3.88 4.17 3.73 77 TR_XM_SpammyWords5 7335 2.31 4.15 1.40 78 XM_H_Long_From01 7329 5.00 4.15 5.42 79 XM_H_GMP 7210 5.60 4.08 6.36 80 XMNumbers 7074 3.27 4.00 2.91 81 HK_RANDOM_REPLYTO 7054 1.43 3.99 0.16 82 XMSexyCombo_05 7030 2.50 3.98 1.77 83 T_XMDrugObfuBody_14 6339 2.25 3.59 1.59 84 MIME_HTML_MOSTLY 6316 2.65 3.57 2.19 85 T_FILL_THIS_FORM_SHORT 6236 1.75 3.53 0.87 86 XM_UB50 6177 1.77 3.49 0.91 87 TM2_M_URI_OPT_OUT 6058 2.22 3.43 1.62 88 TR_XM_BayesRelay 5939 1.11 3.36 0.00 89 RCVD_IN_VALIDITY_RPBL 5867 1.20 3.32 0.15 90 T_XMDrugObfuBody_08 5566 2.01 3.15 1.45 91 XM_B_SpammyTLD 5333 2.50 3.02 2.25 92 MIME_QP_LONG_LINE 5297 4.70 3.00 5.55 93 T_XMHurry_00 5287 1.66 2.99 1.00 94 TM2_M_VERY_LONG_WORD 5280 1.77 2.99 1.17 95 MIME_HTML_ONLY_MULTI 5176 2.59 2.93 2.42 96 XM_B_Unsub2 5015 1.91 2.84 1.46 97 FONT_INVIS_LONG_LINE 4579 0.87 2.59 0.02 98 XMDiploma_00 4563 1.97 2.58 1.66 99 USER_IN_DEF_DKIM_WL 4421 9.87 2.50 13.52 100 RCVD_IN_VALIDITY_SAFE 4391 4.07 2.48 4.85 101 SpammyFromTLD_01 4347 1.43 2.46 0.92 102 XM_CamelCaseFrm001 4232 2.45 2.39 2.48 103 XM_URI_RBL 4219 0.88 2.39 0.14 104 HOSTED_IMG_MULTI_PUB_01 4126 0.79 2.33 0.02 105 RELAYCOUNTRY_AU 4102 1.28 2.32 0.77 106 XMBrknScrpt_02 4045 1.35 2.29 0.89 107 T_TooManySym_01 3887 4.44 2.20 5.55 108 URI_TRY_3LD 3733 1.28 2.11 0.86 109 TR_XM_FormFill 3689 0.70 2.09 0.01 110 HTML_MIME_NO_HTML_TAG 3558 2.09 2.01 2.13 111 TR_XM_NoHeaderRelay 3547 0.76 2.01 0.14 112 SUBJ_ALL_CAPS 3430 1.58 1.94 1.40 113 T_REMOTE_IMAGE 3379 3.03 1.91 3.59 114 FROM_EXCESS_BASE64 3342 1.77 1.89 1.71 115 RCVD_IN_VALIDITY_CERTIFIED 3327 3.49 1.88 4.28 116 XM_B_SpammyWords4 3066 1.16 1.73 0.87 117 TR_XM_INV_DKIM 3041 0.62 1.72 0.07 118 XM_DK_Undo_01 2978 1.95 1.68 2.08 119 URIBL_DBL_SPAM 2976 0.56 1.68 0.01 120 MAILING_LIST_MULTI 2972 2.38 1.68 2.73 121 BAYES_40 2905 3.60 1.64 4.56 122 URI_HEX 2845 1.30 1.61 1.15 123 T_XMDrugObfuBody_00 2599 1.00 1.47 0.77 124 XMStockSpam_06 2565 1.12 1.45 0.96 125 XM_H_Long_From02 2553 1.17 1.44 1.04 126 AC_BR_BONANZA 2492 0.54 1.41 0.11 127 HTML_TAG_BALANCE_BODY 2484 0.85 1.40 0.57 128 RCVD_IN_IADB_LISTED 2474 3.14 1.40 4.00 129 ANY_BOUNCE_MESSAGE 2445 2.56 1.38 3.14 130 BOUNCE_MESSAGE 2443 2.56 1.38 3.14 131 SpammyFromTLD_02 2435 0.72 1.38 0.39 132 TR_Mismatch_TLD_02 2422 0.50 1.37 0.07 133 XMGenDplmaNmb 2355 1.02 1.33 0.86 134 XMSlimDrugH 2318 0.65 1.31 0.33 135 XM_SendGrid 2266 1.30 1.28 1.31 136 XMPhish30 2240 0.75 1.27 0.49 137 THIS_AD 2184 0.72 1.24 0.46 138 ALL_TRUSTED 2181 9.41 1.23 13.46 139 XM_HighProb1 2137 0.40 1.21 0.01 140 RCVD_IN_IADB_SPF 2107 2.75 1.19 3.52 141 TR_XM_InvalidRelay 2083 0.41 1.18 0.02 142 XM_B_Phish66 2059 0.56 1.16 0.26 143 HTTPS_HTTP_MISMATCH 2026 0.97 1.15 0.88 144 TR_XM_PHPForged 2012 0.61 1.14 0.34 145 DKIM_ADSP_CUSTOM_MED 1971 0.98 1.11 0.91 146 RCVD_IN_IADB_DK 1969 2.42 1.11 3.07 147 RCVD_IN_IADB_SENDERID 1964 2.48 1.11 3.16 148 URI_NOVOWEL 1959 1.18 1.11 1.21 149 TR_XM_PHPDW 1956 0.59 1.11 0.34 150 TR_XM_FormFill2 1932 0.59 1.09 0.35 151 BOTNET_NORDNS 1929 0.37 1.09 0.01 152 XM_H_PHPOS 1923 0.58 1.09 0.33 153 MPART_ALT_DIFF_COUNT 1921 0.75 1.09 0.58 154 XMPhish14 1878 0.68 1.06 0.49 155 BAYES_20 1864 2.60 1.05 3.37 156 DKIM_ADSP_NXDOMAIN 1850 0.58 1.05 0.35 157 KHOP_HELO_FCRDNS 1843 1.15 1.04 1.21 158 XM_DIRTYINTL 1804 0.40 1.02 0.10 159 TR_LOTS_OF_MONEY2 1794 0.54 1.01 0.30 160 T_MONEY_PERCENT 1794 0.54 1.01 0.30 161 TR_XM_Base64_M1 1779 0.75 1.01 0.62 162 XMSexyCombo_01 1723 0.46 0.97 0.20 163 TR_Symld_Words 1678 1.35 0.95 1.55 164 NML_ADSP_CUSTOM_MED 1653 0.70 0.93 0.58 165 TR_Mismatch_TLD_01 1631 0.47 0.92 0.24 166 XMHTML_After_End 1605 0.57 0.91 0.41 167 FORGED_GMAIL_RCVD 1583 0.67 0.90 0.56 168 XMMoneyMeta_00 1576 0.68 0.89 0.57 169 XMSubMetaI_00 1570 0.73 0.89 0.65 170 XMReplyNow 1531 0.47 0.87 0.27 171 XM_UB60 1531 0.33 0.87 0.07 172 XMBdyGiftCard01 1508 0.77 0.85 0.74 173 XM_S_SpammyWords 1495 0.50 0.85 0.33 174 TR_XM_Spammywords 1489 0.50 0.84 0.33 175 T_STY_INVIS_DIRECT 1483 0.49 0.84 0.32 176 XMClaimOffer 1482 0.50 0.84 0.34 177 XM_ProductURIs 1482 0.72 0.84 0.66 178 TR_Caps_n_Bayes_99 1464 0.30 0.83 0.04 179 TR_MetaPhish_Combo_01 1451 0.81 0.82 0.80 180 RELAYCOUNTRY_GB 1449 0.57 0.82 0.44 181 XM_Dr_From 1428 0.35 0.81 0.13 182 TR_XM_DK_SendGrid 1415 0.85 0.80 0.88 183 HTML_IMAGE_ONLY_20 1414 0.53 0.80 0.39 184 RCVD_IN_IADB_VOUCHED 1396 2.07 0.79 2.70 185 XM_UB99 1394 0.26 0.79 0.00 186 LongTLD 1378 0.54 0.78 0.42 187 XMHTMLBadTable_001 1375 0.43 0.78 0.26 188 XM_B_COPY_HTML 1372 0.71 0.78 0.68 189 PLING_QUERY 1355 0.52 0.77 0.40 190 XM_OfRef7 1342 0.36 0.76 0.17 191 RELAYCOUNTRY_FR 1318 0.41 0.75 0.25 192 HTML_IMAGE_ONLY_08 1290 0.34 0.73 0.14 193 HTML_FONT_SIZE_LARGE 1288 0.30 0.73 0.08 194 RDNS_DYNAMIC 1287 0.45 0.73 0.32 195 SUBJ_DOLLARS 1286 0.47 0.73 0.35 196 XMPhish08 1280 0.42 0.72 0.27 197 MIME_CHARSET_FARAWAY 1278 0.43 0.72 0.28 198 XMBody_78 1256 0.43 0.71 0.28 199 HTML_FONT_FACE_BAD 1252 0.50 0.71 0.39 200 TR_XM_Base64_L1 1236 0.33 0.70 0.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 314939 91.20 97.40 88.13 2 RELAYCOUNTRY_US 297479 81.87 79.09 83.24 3 DKIM_SIGNED 274834 81.66 91.28 76.91 4 XM_DK_Pass 270247 79.68 87.89 75.62 5 DKIM_VALID 266557 78.55 86.56 74.59 6 XM_B_Unicode 256227 76.34 85.72 71.70 7 DCC_CHECK_NEGATIVE 219723 49.21 24.39 61.48 8 DKIM_VALID_AU 213629 61.19 64.05 59.78 9 BAYES_50 213582 52.41 37.54 59.77 10 XMListUnsubscribeExists 186629 59.88 75.34 52.22 11 XM_B_SpammyWords 159566 54.12 73.24 44.65 12 XM_B_Unicode3 148981 42.53 44.22 41.69 13 DCC_CHECK 137457 50.75 75.59 38.46 14 RCVD_IN_MSPIKE_H2 107334 31.21 33.57 30.03 15 T_TM2_M_HEADER_IN_MSG 104216 26.74 21.85 29.16 16 DKIM_VALID_EF 103130 29.76 31.58 28.86 17 HTML_FONT_LOW_CONTRAST 101196 31.42 37.69 28.32 18 LOC_TINY_FONT_1 94094 31.10 40.73 26.33 19 FVGT_m_MULTI_ODD 91675 28.39 33.93 25.65 20 XMSubLong 81331 22.22 21.12 22.76 21 T_KAM_HTML_FONT_INVALID 77644 24.51 30.14 21.73 22 MIME_HTML_ONLY 67895 22.83 30.56 19.00 23 XM_B_SpammyWords2 67889 27.17 43.68 19.00 24 XM_Multi_Part_URI 49810 15.36 18.22 13.94 25 TR_XM_DK_Unsub 49791 17.40 24.41 13.93 26 USER_IN_DEF_DKIM_WL 48320 9.87 2.50 13.52 27 ALL_TRUSTED 48105 9.41 1.23 13.46 28 UNPARSEABLE_RELAY 38504 11.82 13.92 10.77 29 XM_B_PhoneNumber 36595 8.67 5.50 10.24 30 BAYES_00 34768 6.71 0.62 9.73 31 BAYES_60 33313 8.76 7.63 9.32 32 LotsOfNums_01 31576 8.07 6.54 8.84 33 TooManyTo_001 31172 7.28 4.38 8.72 34 XM_Evil_Numbers_Gen 29769 8.28 8.16 8.33 35 XM_B_Unsub 27471 10.12 15.05 7.69 36 XM_DKIMWhitelistDomains 26223 4.97 0.18 7.34 37 IN_ZIMBRA_NJ_WHITELIST 25429 4.78 0.07 7.12 38 TR_MAX_INTL_RELAY 23729 9.38 14.91 6.64 39 TR_XM_DK_Bayes 23532 4.56 0.48 6.58 40 LOTS_OF_MONEY 23502 10.21 17.57 6.58 41 TR_XM_DK_Bayes1 23131 4.49 0.47 6.47 42 XM_H_GMP 22728 5.60 4.08 6.36 43 TR_XM_BayesUnsub 22173 8.96 14.52 6.20 44 RCVD_IN_MSPIKE_WL 21888 7.24 9.50 6.12 45 RCVD_IN_MSPIKE_H3 21888 7.24 9.50 6.12 46 XM_DK_Undo_02 21689 19.61 46.99 6.07 47 TR_XM_DK_Bayes2 19903 3.86 0.41 5.57 48 MIME_QP_LONG_LINE 19832 4.70 3.00 5.55 49 T_TooManySym_01 19823 4.44 2.20 5.55 50 FSL_BULK_SIG 19811 6.17 7.43 5.54 51 XM_H_Long_From01 19355 5.00 4.15 5.42 52 XM_B_SpammyWords3 17884 8.01 14.09 5.00 53 HTML_IMAGE_RATIO_02 17543 5.35 6.25 4.91 54 RCVD_IN_VALIDITY_SAFE 17349 4.07 2.48 4.85 55 XM_PDF 16637 3.31 0.60 4.66 56 BAYES_99 16320 15.10 36.38 4.57 57 BAYES_40 16310 3.60 1.64 4.56 58 TR_XM_SpammyWords4 15954 8.32 16.10 4.46 59 RCVD_IN_VALIDITY_CERTIFIED 15308 3.49 1.88 4.28 60 MPART_ALT_DIFF 15246 4.60 5.26 4.27 61 XMStrtUSub 14743 4.36 4.84 4.13 62 RELAYCOUNTRY_META 14635 9.61 20.77 4.10 63 XMSubMetaSx_00 14330 4.49 5.47 4.01 64 RCVD_IN_IADB_LISTED 14300 3.14 1.40 4.00 65 HTML_IMAGE_RATIO_04 14272 4.40 5.21 3.99 66 BAYES_80 14217 5.69 9.16 3.98 67 BOTNET_IPINHOSTNAME 13920 6.87 12.90 3.90 68 XM_UncommonTLD01 13905 4.40 5.44 3.89 69 XM_B_Phish_Phrases 13342 3.88 4.17 3.73 70 T_REMOTE_IMAGE 12832 3.03 1.91 3.59 71 BAYES_999 12776 11.93 28.82 3.58 72 RCVD_IN_IADB_SPF 12577 2.75 1.19 3.52 73 HTML_IMAGE_RATIO_06 12283 3.69 4.19 3.44 74 XM_SPF_SoftFail 12055 3.87 4.86 3.37 75 BAYES_20 12050 2.60 1.05 3.37 76 RCVD_IN_IADB_SENDERID 11288 2.48 1.11 3.16 77 ANY_BOUNCE_MESSAGE 11218 2.56 1.38 3.14 78 BOUNCE_MESSAGE 11214 2.56 1.38 3.14 79 XM_Body_Dirty_Words 11168 4.11 6.09 3.13 80 RCVD_IN_IADB_DK 10965 2.42 1.11 3.07 81 XMNumbers 10412 3.27 4.00 2.91 82 TooManyTo_002 9864 2.06 0.65 2.76 83 TR_XM_DKIM_Undo 9849 13.85 36.26 2.76 84 HTML_IMAGE_RATIO_08 9768 3.43 4.84 2.73 85 MAILING_LIST_MULTI 9760 2.38 1.68 2.73 86 RCVD_IN_IADB_VOUCHED 9657 2.07 0.79 2.70 87 BAYES_95 9499 3.58 5.45 2.66 88 T_TooManySym_02 9318 1.93 0.56 2.61 89 XM_CamelCaseFrm001 8866 2.45 2.39 2.48 90 MIME_HTML_ONLY_MULTI 8647 2.59 2.93 2.42 91 TR_XM_SpammyRelay 8344 6.97 16.34 2.33 92 DKIM_INVALID 8277 3.11 4.72 2.32 93 TR_DCC_Bayes_99 8242 10.62 27.44 2.31 94 XM_B_SpammyTLD 8027 2.50 3.02 2.25 95 MIME_HTML_MOSTLY 7822 2.65 3.57 2.19 96 HTML_MIME_NO_HTML_TAG 7624 2.09 2.01 2.13 97 XM_DK_Undo_01 7436 1.95 1.68 2.08 98 INVALID_MSGID 7354 1.42 0.14 2.06 99 BAYES_05 7296 1.54 0.52 2.04 100 TO_MALFORMED 7115 1.34 0.01 1.99 101 HELO_NODOT 6664 1.35 0.31 1.86 102 HELO_NO_DOMAIN 6663 1.35 0.31 1.86 103 RCVD_IN_IADB_OPTIN 6512 1.38 0.49 1.82 104 XMSexyCombo_05 6325 2.50 3.98 1.77 105 TR_XM_UnparsRelay 6240 3.62 7.42 1.75 106 XM_B_Investor 6185 2.58 4.29 1.73 107 FROM_EXCESS_BASE64 6107 1.77 1.89 1.71 108 XMDiploma_00 5943 1.97 2.58 1.66 109 TM2_M_URI_OPT_OUT 5777 2.22 3.43 1.62 110 T_XMDrugObfuBody_14 5683 2.25 3.59 1.59 111 TR_XM_PhishingBody 5599 2.49 4.36 1.57 112 TR_Symld_Words 5543 1.35 0.95 1.55 113 TooManyTo_003 5408 1.19 0.53 1.51 114 XM_B_SEO 5233 2.61 4.94 1.46 115 XM_B_Unsub2 5203 1.91 2.84 1.46 116 T_XMDrugObfuBody_08 5183 2.01 3.15 1.45 117 UNTRUSTED_Relay 5178 3.14 6.56 1.45 118 IN_HORDE_ADDRESS_BOOK 5047 0.97 0.07 1.41 119 TR_XM_SpammyWords5 4993 2.31 4.15 1.40 120 SUBJ_ALL_CAPS 4986 1.58 1.94 1.40 121 TVD_RCVD_IP 4984 1.15 0.66 1.39 122 XMGappySubj_01 4767 0.93 0.13 1.33 123 RELAYCOUNTRY_CA 4696 4.64 11.35 1.31 124 XM_SendGrid 4664 1.30 1.28 1.31 125 BOTNET 4391 3.91 9.32 1.23 126 XM_GoogleGroups 4351 0.98 0.51 1.22 127 URI_NOVOWEL 4338 1.18 1.11 1.21 128 KHOP_HELO_FCRDNS 4321 1.15 1.04 1.21 129 TM2_M_VERY_LONG_WORD 4181 1.77 2.99 1.17 130 URI_HEX 4120 1.30 1.61 1.15 131 TooManyTo_004 4036 0.92 0.49 1.13 132 XMCapTrack 3979 0.89 0.44 1.11 133 XM_OfRef6 3952 2.21 4.43 1.11 134 TVD_SPACE_RATIO 3905 0.76 0.08 1.09 135 XMBSHREFv2 3720 0.77 0.22 1.04 136 XM_H_Long_From02 3718 1.17 1.44 1.04 137 XMNoVowels 3576 0.88 0.64 1.00 138 T_XMHurry_00 3557 1.66 2.99 1.00 139 TR_XM_SEO4 3530 2.06 4.24 0.99 140 XMStockSpam_06 3426 1.12 1.45 0.96 141 T_TooManySym_03 3340 0.66 0.12 0.93 142 XM_H_Trusted_IP 3334 0.62 0.00 0.93 143 SpammyFromTLD_01 3305 1.43 2.46 0.92 144 DKIM_ADSP_CUSTOM_MED 3257 0.98 1.11 0.91 145 XM_UB50 3254 1.77 3.49 0.91 146 TooManyTo_005 3222 0.76 0.46 0.90 147 XMBrknScrpt_02 3179 1.35 2.29 0.89 148 TR_XM_DK_SendGrid 3132 0.85 0.80 0.88 149 HTTPS_HTTP_MISMATCH 3131 0.97 1.15 0.88 150 XM_B_SpammyWords4 3117 1.16 1.73 0.87 151 T_FILL_THIS_FORM_SHORT 3106 1.75 3.53 0.87 152 URI_TRY_3LD 3090 1.28 2.11 0.86 153 XMGenDplmaNmb 3068 1.02 1.33 0.86 154 TR_LOTS_OF_MONEY3 2929 2.34 5.40 0.82 155 RCVD_IN_BL_SPAMCOP_NET 2884 5.35 14.52 0.81 156 TR_MetaPhish_Combo_01 2862 0.81 0.82 0.80 157 XM_B_FormFill 2788 0.55 0.08 0.78 158 T_XMDrugObfuBody_00 2753 1.00 1.47 0.77 159 RELAYCOUNTRY_AU 2747 1.28 2.32 0.77 160 XMGappySubj_02 2725 0.52 0.04 0.76 161 XMBdyGiftCard01 2627 0.77 0.85 0.74 162 XMBody_17 2557 2.89 7.29 0.72 163 XM_ShortIntro_01 2544 0.61 0.42 0.71 164 XM_B_COPY_HTML 2444 0.71 0.78 0.68 165 XMBody_95 2361 0.51 0.21 0.66 166 T_OBFU_PDF_ATTACH 2357 0.48 0.10 0.66 167 XM_ProductURIs 2356 0.72 0.84 0.66 168 TR_XM_SpammyWords2 2325 5.31 14.74 0.65 169 XMSubMetaI_00 2321 0.73 0.89 0.65 170 TR_XM_Base64_M1 2220 0.75 1.01 0.62 171 XMSubNoVowel 2197 0.51 0.30 0.61 172 XM_H_PHPMailer 2177 0.61 0.61 0.61 173 SHORT_HELO_AND_INLINE_IMAGE 2172 0.43 0.07 0.61 174 FROM_GOV_DKIM_AU 2103 0.43 0.10 0.59 175 NML_ADSP_CUSTOM_MED 2077 0.70 0.93 0.58 176 MPART_ALT_DIFF_COUNT 2059 0.75 1.09 0.58 177 HTML_TAG_BALANCE_BODY 2044 0.85 1.40 0.57 178 XMMoneyMeta_00 2032 0.68 0.89 0.57 179 FORGED_GMAIL_RCVD 2013 0.67 0.90 0.56 180 FILL_THIS_FORM 2008 0.45 0.22 0.56 181 USER_IN_WHITELIST 1903 0.36 0.00 0.53 182 USER_IN_WELCOMELIST 1903 0.36 0.00 0.53 183 TR_XM_SPAMCOP 1825 4.59 12.84 0.51 184 XM_B_DNDMA 1755 0.54 0.65 0.49 185 RCVD_IN_PSBL 1754 0.53 0.62 0.49 186 XMPhish14 1748 0.68 1.06 0.49 187 XMPhish30 1747 0.75 1.27 0.49 188 HTML_IMAGE_ONLY_28 1726 0.44 0.34 0.48 189 HTML_IMAGE_ONLY_32 1690 0.44 0.38 0.47 190 TO_NO_BRKTS_HTML_ONLY 1666 0.38 0.19 0.47 191 THIS_AD 1641 0.72 1.24 0.46 192 T_Symld_Words_02 1613 0.53 0.69 0.45 193 RELAYCOUNTRY_GB 1575 0.57 0.82 0.44 194 XMSubMetaSxObfu_02 1573 0.40 0.33 0.44 195 LongTLD 1493 0.54 0.78 0.42 196 MISSING_HEADERS 1479 0.47 0.58 0.41 197 XM_RXBody 1468 0.38 0.33 0.41 198 TM2_M_BODY_EMPTY 1462 0.30 0.07 0.41 199 XMHTML_After_End 1448 0.57 0.91 0.41 200 XMDateMe_00 1442 0.41 0.42 0.40 ----------------------------------------------------------------------