Email: 543404 Autolearn: 0 AvgScore: 2.14 AvgScanTime: 1.20 sec Spam: 156247 Autolearn: 0 AvgScore: 12.95 AvgScanTime: 1.37 sec Ham: 387157 Autolearn: 0 AvgScore: -2.23 AvgScanTime: 1.13 sec Time Spent Running SA: 181.23 hours Time Spent Processing Spam: 59.39 hours Time Spent Processing Ham: 121.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 151135 91.45 96.73 89.32 2 DKIM_SIGNED 143008 75.14 91.53 68.52 3 XM_DK_Pass 137571 73.37 88.05 67.45 4 DKIM_VALID 135933 72.39 87.00 66.49 5 RELAYCOUNTRY_US 134738 85.07 86.23 84.60 6 XM_B_Unicode 133286 77.04 85.30 73.71 7 DCC_CHECK 116258 45.77 74.41 34.22 8 XMListUnsubscribeExists 113179 53.41 72.44 45.73 9 XM_B_SpammyWords 112924 51.87 72.27 43.64 10 DKIM_VALID_AU 110230 58.91 70.55 54.21 11 XM_B_Unicode3 71272 44.38 45.61 43.88 12 LOC_TINY_FONT_1 66826 29.06 42.77 23.52 13 XM_DK_Undo_02 66659 15.85 42.66 5.03 14 XM_B_SpammyWords2 66089 23.90 42.30 16.48 15 BAYES_50 63752 53.35 40.80 58.41 16 HTML_FONT_LOW_CONTRAST 60029 30.44 38.42 27.21 17 FVGT_m_MULTI_ODD 58422 27.66 37.39 23.73 18 RCVD_IN_MSPIKE_H2 56746 29.49 36.32 26.73 19 BAYES_99 52351 12.21 33.51 3.62 20 T_KAM_HTML_FONT_INVALID 48111 22.07 30.79 18.54 21 TR_XM_DKIM_Undo 48005 10.26 30.72 1.99 22 DKIM_VALID_EF 43315 26.71 27.72 26.30 23 BAYES_999 40829 9.44 26.13 2.70 24 DCC_CHECK_NEGATIVE 39971 54.20 25.58 65.75 25 TR_DCC_Bayes_99 37653 7.88 24.10 1.33 26 MIME_HTML_ONLY 37607 22.70 24.07 22.14 27 T_TM2_M_HEADER_IN_MSG 36704 25.22 23.49 25.92 28 XMSubLong 35504 22.44 22.72 22.32 29 XM_Multi_Part_URI 32596 14.44 20.86 11.85 30 TR_XM_DK_Unsub 30092 14.23 19.26 12.20 31 XM_B_Unsub 24366 9.65 15.59 7.24 32 LOTS_OF_MONEY 24090 8.76 15.42 6.07 33 UNPARSEABLE_RELAY 23480 11.03 15.03 9.42 34 TR_XM_BayesUnsub 23230 8.28 14.87 5.62 35 XM_B_SpammyWords3 22860 7.00 14.63 3.93 36 TR_MAX_INTL_RELAY 22665 8.45 14.51 6.01 37 BOTNET_IPINHOSTNAME 22371 6.79 14.32 3.76 38 TR_XM_SpammyWords4 21874 6.94 14.00 4.09 39 RELAYCOUNTRY_META 21671 6.52 13.87 3.55 40 TR_XM_SpammyWords2 19424 3.89 12.43 0.44 41 TR_XM_SpammyRelay 15479 4.23 9.91 1.93 42 BOTNET 15287 3.67 9.78 1.21 43 XM_Evil_Numbers_Gen 14659 8.82 9.38 8.60 44 BAYES_80 13625 5.17 8.72 3.74 45 FSL_BULK_SIG 12675 5.77 8.11 4.82 46 XM_Body_Dirty_Words 11744 4.14 7.52 2.77 47 LotsOfNums_01 11689 7.51 7.48 7.52 48 TR_XM_UnparsRelay 11612 3.03 7.43 1.26 49 BAYES_60 11554 7.93 7.39 8.15 50 RCVD_IN_BL_SPAMCOP_NET 11402 2.58 7.30 0.68 51 XM_B_PhoneNumber 9595 8.30 6.14 9.17 52 HTML_IMAGE_RATIO_02 9342 4.79 5.98 4.31 53 UNTRUSTED_Relay 9093 2.58 5.82 1.27 54 TR_XM_SPAMCOP 9007 1.95 5.76 0.42 55 XM_B_SEO 8938 2.35 5.72 1.00 56 XMSubMetaSx_00 8832 4.11 5.65 3.49 57 MPART_ALT_DIFF 8660 7.74 5.54 8.63 58 XM_H_Long_From01 8613 5.07 5.51 4.89 59 BAYES_95 8309 3.15 5.32 2.27 60 TooManyTo_001 8293 6.89 5.31 7.53 61 TR_XM_SEO4 8129 1.90 5.20 0.57 62 XM_SPF_SoftFail 8122 3.69 5.20 3.08 63 XM_B_Investor 8016 2.51 5.13 1.46 64 XMBody_17 8013 1.89 5.13 0.59 65 HTML_IMAGE_RATIO_04 7904 11.04 5.06 13.45 66 RELAYCOUNTRY_CA 7790 2.22 4.99 1.10 67 XM_B_Phish_Phrases 7707 3.37 4.93 2.74 68 XM_UncommonTLD01 7430 3.85 4.76 3.48 69 TR_XM_PhishingBody 7258 2.56 4.65 1.72 70 DKIM_INVALID 7075 2.75 4.53 2.03 71 XM_H_GMP 6864 5.45 4.39 5.88 72 XM_OfRef6 6800 1.97 4.35 1.01 73 TR_LOTS_OF_MONEY3 6453 1.67 4.13 0.68 74 HTML_IMAGE_RATIO_06 6452 4.31 4.13 4.38 75 HTML_IMAGE_RATIO_08 6242 2.66 3.99 2.12 76 TR_XM_SpammyWords5 6212 2.28 3.98 1.60 77 T_XMDrugObfuBody_14 6120 2.28 3.92 1.61 78 XMSexyCombo_05 5941 2.20 3.80 1.56 79 XMStrtUSub 5932 8.47 3.80 10.36 80 XMNumbers 5585 2.94 3.57 2.68 81 MIME_HTML_MOSTLY 5476 2.55 3.50 2.16 82 T_XMDrugObfuBody_08 5472 2.17 3.50 1.63 83 MIME_HTML_ONLY_MULTI 5359 5.96 3.43 6.99 84 XM_B_SpammyTLD 5342 2.45 3.42 2.06 85 XMDiploma_00 5289 1.95 3.39 1.37 86 TM2_M_VERY_LONG_WORD 5193 1.70 3.32 1.04 87 MIME_QP_LONG_LINE 4847 4.25 3.10 4.72 88 RCVD_IN_VALIDITY_RPBL 4754 0.93 3.04 0.07 89 XM_CamelCaseFrm001 4668 2.41 2.99 2.18 90 XM_B_SpammyWords4 4611 1.31 2.95 0.64 91 TM2_M_URI_OPT_OUT 4427 1.88 2.83 1.49 92 T_TooManySym_01 4382 4.17 2.80 4.73 93 XM_B_Unsub2 4248 1.78 2.72 1.40 94 XM_UB50 4219 1.30 2.70 0.74 95 USER_IN_DEF_DKIM_WL 4149 9.68 2.66 12.51 96 XM_URI_RBL 3870 0.82 2.48 0.16 97 T_XMHurry_00 3826 1.05 2.45 0.49 98 RCVD_IN_MSPIKE_H3 3809 4.55 2.44 5.40 99 RCVD_IN_MSPIKE_WL 3809 4.55 2.44 5.40 100 XMBrknScrpt_02 3803 1.38 2.43 0.95 101 SUBJ_ALL_CAPS 3724 1.77 2.38 1.52 102 URI_TRY_3LD 3698 1.22 2.37 0.75 103 RELAYCOUNTRY_AU 3583 1.13 2.29 0.66 104 RCVD_IN_VALIDITY_SAFE 3199 4.38 2.05 5.32 105 FROM_EXCESS_BASE64 3194 1.89 2.04 1.83 106 T_XMDrugObfuBody_00 3057 0.94 1.96 0.53 107 MAILING_LIST_MULTI 3013 2.17 1.93 2.26 108 T_FILL_THIS_FORM_SHORT 2992 1.22 1.91 0.94 109 T_REMOTE_IMAGE 2973 2.92 1.90 3.33 110 TR_XM_NoHeaderRelay 2805 0.61 1.80 0.13 111 KHOP_HELO_FCRDNS 2754 1.43 1.76 1.29 112 HTTPS_HTTP_MISMATCH 2746 1.08 1.76 0.80 113 XMStockSpam_06 2708 1.23 1.73 1.03 114 AC_BR_BONANZA 2668 0.55 1.71 0.08 115 ANY_BOUNCE_MESSAGE 2666 2.86 1.71 3.33 116 BOUNCE_MESSAGE 2663 2.86 1.70 3.33 117 SpammyFromTLD_01 2634 1.03 1.69 0.77 118 XMGenDplmaNmb 2564 0.99 1.64 0.73 119 BAYES_40 2501 3.96 1.60 4.91 120 URI_HEX 2467 1.08 1.58 0.88 121 XM_DK_Undo_01 2462 1.64 1.58 1.67 122 HTML_MIME_NO_HTML_TAG 2449 1.82 1.57 1.92 123 HOSTED_IMG_MULTI_PUB_01 2415 0.47 1.55 0.03 124 RCVD_IN_VALIDITY_CERTIFIED 2404 3.83 1.54 4.75 125 HTML_TAG_BALANCE_BODY 2293 0.77 1.47 0.50 126 TR_XM_PHPForged 2262 0.63 1.45 0.30 127 TR_XM_INV_DKIM 2262 0.47 1.45 0.07 128 XM_B_Phish66 2251 0.59 1.44 0.25 129 TR_XM_PHPDW 2211 0.64 1.42 0.32 130 ALL_TRUSTED 2209 9.41 1.41 12.64 131 XMPhish30 2201 0.94 1.41 0.74 132 TR_XM_FormFill2 2176 0.62 1.39 0.30 133 XM_H_PHPOS 2162 0.61 1.38 0.29 134 XMBdyGiftCard01 2135 0.88 1.37 0.69 135 XM_HighProb1 2107 0.39 1.35 0.00 136 TR_XM_InvalidRelay 2079 0.40 1.33 0.03 137 XM_DIRTYINTL 2078 0.48 1.33 0.13 138 RDNS_DYNAMIC 2068 0.63 1.32 0.36 139 PDS_RDNS_DYNAMIC_FP 2021 0.53 1.29 0.22 140 XM_SendGrid 1994 1.22 1.28 1.20 141 RCVD_IN_IADB_LISTED 1933 2.59 1.24 3.13 142 SpammyFromTLD_02 1921 0.62 1.23 0.37 143 XMReplyNow 1865 0.49 1.19 0.20 144 BAYES_20 1836 2.80 1.18 3.46 145 XMSexyCombo_01 1814 0.48 1.16 0.21 146 TR_XM_FormFill 1798 0.34 1.15 0.02 147 TR_XM_Base64_M1 1792 0.80 1.15 0.66 148 TooManyTo_002 1790 2.00 1.15 2.35 149 XMHTML_After_End 1765 0.52 1.13 0.27 150 LONGLN_LOW_CONTRAST 1741 0.51 1.11 0.27 151 BOTNET_NORDNS 1706 0.32 1.09 0.01 152 XMSubMetaI_00 1699 0.60 1.09 0.40 153 HTML_IMAGE_ONLY_20 1692 0.55 1.08 0.33 154 XM_PDF 1682 3.30 1.08 4.20 155 RCVD_IN_IADB_SPF 1681 2.28 1.08 2.77 156 TooManyTo_003 1661 1.28 1.06 1.37 157 DKIM_ADSP_CUSTOM_MED 1651 0.82 1.06 0.72 158 TVD_RCVD_IP 1626 1.29 1.04 1.39 159 XMLngstWrd_00 1624 0.85 1.04 0.77 160 TR_LOTS_OF_MONEY2 1623 0.45 1.04 0.22 161 T_MONEY_PERCENT 1623 0.45 1.04 0.22 162 TooManyTo_004 1562 1.02 1.00 1.02 163 RCVD_IN_IADB_SENDERID 1557 2.06 1.00 2.49 164 RCVD_IN_IADB_DK 1549 2.00 0.99 2.41 165 TR_Symld_Words 1541 1.28 0.99 1.40 166 XM_B_COPY_HTML 1541 0.79 0.99 0.71 167 DKIM_ADSP_NXDOMAIN 1521 0.52 0.97 0.34 168 TR_MetaPhish_Combo_01 1512 0.71 0.97 0.61 169 MPART_ALT_DIFF_COUNT 1512 0.63 0.97 0.50 170 T_STY_INVIS_DIRECT 1498 0.51 0.96 0.33 171 TooManyTo_005 1476 0.87 0.94 0.84 172 NML_ADSP_CUSTOM_MED 1463 0.62 0.94 0.49 173 XM_UB99 1446 0.27 0.93 0.00 174 XMPhish14 1445 0.57 0.92 0.42 175 THIS_AD 1444 0.46 0.92 0.27 176 XMSlimDrugH 1406 0.51 0.90 0.36 177 XM_H_Long_From02 1406 1.00 0.90 1.04 178 BAYES_00 1396 9.25 0.89 12.62 179 XM_H_Undi_Recip 1395 0.39 0.89 0.19 180 RELAYCOUNTRY_FR 1379 0.37 0.88 0.16 181 XMHTMLBadTable_001 1344 0.42 0.86 0.24 182 TM2_M_OBFU_COMMENT 1341 0.48 0.86 0.32 183 TM2_M_A_HREF_HREF 1338 0.37 0.86 0.17 184 HTML_FONT_FACE_BAD 1253 8.85 0.80 12.09 185 TR_XM_DK_SendGrid 1251 0.79 0.80 0.78 186 URI_NOVOWEL 1246 0.95 0.80 1.01 187 XMClaimOffer 1233 0.47 0.79 0.34 188 XMMoneyMeta_00 1222 0.56 0.78 0.48 189 FORGED_GMAIL_RCVD 1219 0.51 0.78 0.40 190 URIBL_DBL_SPAM 1207 0.23 0.77 0.01 191 AC_HTML_NONSENSE_TAGS 1201 0.25 0.77 0.04 192 DIET_1 1188 0.35 0.76 0.18 193 RELAYCOUNTRY_DE 1185 0.40 0.76 0.26 194 TR_Caps_n_Bayes_99 1180 0.23 0.76 0.01 195 URIBL_BLACK 1158 0.24 0.74 0.04 196 XM_UB60 1157 0.26 0.74 0.06 197 HTML_FONT_TINY_NORDNS 1148 0.28 0.73 0.10 198 XM_B_DNDMA 1147 0.63 0.73 0.58 199 XMPhish08 1133 0.39 0.73 0.25 200 RELAYCOUNTRY_GB 1130 0.50 0.72 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 345805 91.45 96.73 89.32 2 RELAYCOUNTRY_US 327537 85.07 86.23 84.60 3 XM_B_Unicode 285360 77.04 85.30 73.71 4 DKIM_SIGNED 265280 75.14 91.53 68.52 5 XM_DK_Pass 261126 73.37 88.05 67.45 6 DKIM_VALID 257429 72.39 87.00 66.49 7 DCC_CHECK_NEGATIVE 254556 54.20 25.58 65.75 8 BAYES_50 226154 53.35 40.80 58.41 9 DKIM_VALID_AU 209880 58.91 70.55 54.21 10 XMListUnsubscribeExists 177040 53.41 72.44 45.73 11 XM_B_Unicode3 169886 44.38 45.61 43.88 12 XM_B_SpammyWords 168951 51.87 72.27 43.64 13 DCC_CHECK 132466 45.77 74.41 34.22 14 HTML_FONT_LOW_CONTRAST 105359 30.44 38.42 27.21 15 RCVD_IN_MSPIKE_H2 103489 29.49 36.32 26.73 16 DKIM_VALID_EF 101825 26.71 27.72 26.30 17 T_TM2_M_HEADER_IN_MSG 100341 25.22 23.49 25.92 18 FVGT_m_MULTI_ODD 91863 27.66 37.39 23.73 19 LOC_TINY_FONT_1 91064 29.06 42.77 23.52 20 XMSubLong 86422 22.44 22.72 22.32 21 MIME_HTML_ONLY 85735 22.70 24.07 22.14 22 T_KAM_HTML_FONT_INVALID 71797 22.07 30.79 18.54 23 XM_B_SpammyWords2 63790 23.90 42.30 16.48 24 HTML_IMAGE_RATIO_04 52089 11.04 5.06 13.45 25 ALL_TRUSTED 48928 9.41 1.41 12.64 26 BAYES_00 48870 9.25 0.89 12.62 27 USER_IN_DEF_DKIM_WL 48430 9.68 2.66 12.51 28 TR_XM_DK_Unsub 47221 14.23 19.26 12.20 29 HTML_FONT_FACE_BAD 46819 8.85 0.80 12.09 30 XM_Multi_Part_URI 45892 14.44 20.86 11.85 31 XM_H_Trusted_IP 44137 8.12 0.00 11.40 32 XMStrtUSub 40119 8.47 3.80 10.36 33 UNPARSEABLE_RELAY 36459 11.03 15.03 9.42 34 XM_B_PhoneNumber 35495 8.30 6.14 9.17 35 MPART_ALT_DIFF 33424 7.74 5.54 8.63 36 XM_Evil_Numbers_Gen 33291 8.82 9.38 8.60 37 BAYES_60 31562 7.93 7.39 8.15 38 TooManyTo_001 29164 6.89 5.31 7.53 39 LotsOfNums_01 29106 7.51 7.48 7.52 40 XM_B_Unsub 28047 9.65 15.59 7.24 41 MIME_HTML_ONLY_MULTI 27046 5.96 3.43 6.99 42 XM_DKIMWhitelistDomains 26022 4.79 0.02 6.72 43 IN_ZIMBRA_NJ_WHITELIST 25311 4.68 0.09 6.54 44 LOTS_OF_MONEY 23506 8.76 15.42 6.07 45 TR_MAX_INTL_RELAY 23277 8.45 14.51 6.01 46 XM_H_GMP 22765 5.45 4.39 5.88 47 TR_XM_DK_Bayes 21945 4.24 0.70 5.67 48 TR_XM_BayesUnsub 21764 8.28 14.87 5.62 49 TR_XM_DK_Bayes1 21680 4.19 0.68 5.60 50 RCVD_IN_MSPIKE_WL 20922 4.55 2.44 5.40 51 RCVD_IN_MSPIKE_H3 20921 4.55 2.44 5.40 52 RCVD_IN_VALIDITY_SAFE 20584 4.38 2.05 5.32 53 XM_DK_Undo_02 19491 15.85 42.66 5.03 54 BAYES_40 19003 3.96 1.60 4.91 55 XM_H_Long_From01 18919 5.07 5.51 4.89 56 FSL_BULK_SIG 18677 5.77 8.11 4.82 57 TR_XM_DK_Bayes2 18457 3.55 0.52 4.77 58 RCVD_IN_VALIDITY_CERTIFIED 18393 3.83 1.54 4.75 59 T_TooManySym_01 18294 4.17 2.80 4.73 60 MIME_QP_LONG_LINE 18256 4.25 3.10 4.72 61 HTML_IMAGE_RATIO_06 16960 4.31 4.13 4.38 62 HTML_IMAGE_RATIO_02 16698 4.79 5.98 4.31 63 XM_PDF 16249 3.30 1.08 4.20 64 TR_XM_SpammyWords4 15826 6.94 14.00 4.09 65 XMSubNoVowel 15206 2.93 0.45 3.93 66 XM_B_SpammyWords3 15201 7.00 14.63 3.93 67 BOTNET_IPINHOSTNAME 14540 6.79 14.32 3.76 68 BAYES_80 14466 5.17 8.72 3.74 69 BAYES_99 14017 12.21 33.51 3.62 70 RELAYCOUNTRY_META 13745 6.52 13.87 3.55 71 XMSubMetaSx_00 13523 4.11 5.65 3.49 72 XM_UncommonTLD01 13468 3.85 4.76 3.48 73 BAYES_20 13389 2.80 1.18 3.46 74 T_REMOTE_IMAGE 12898 2.92 1.90 3.33 75 ANY_BOUNCE_MESSAGE 12880 2.86 1.71 3.33 76 BOUNCE_MESSAGE 12878 2.86 1.70 3.33 77 RCVD_IN_IADB_LISTED 12121 2.59 1.24 3.13 78 XM_SPF_SoftFail 11929 3.69 5.20 3.08 79 BAYES_05 10891 2.17 0.59 2.81 80 XM_Body_Dirty_Words 10740 4.14 7.52 2.77 81 RCVD_IN_IADB_SPF 10715 2.28 1.08 2.77 82 XM_B_Phish_Phrases 10609 3.37 4.93 2.74 83 BAYES_999 10455 9.44 26.13 2.70 84 XMNumbers 10366 2.94 3.57 2.68 85 RCVD_IN_IADB_SENDERID 9633 2.06 1.00 2.49 86 RCVD_IN_IADB_DK 9329 2.00 0.99 2.41 87 TooManyTo_002 9080 2.00 1.15 2.35 88 BAYES_95 8805 3.15 5.32 2.27 89 MAILING_LIST_MULTI 8764 2.17 1.93 2.26 90 T_TooManySym_02 8735 1.81 0.72 2.26 91 XM_CamelCaseFrm001 8433 2.41 2.99 2.18 92 MIME_HTML_MOSTLY 8362 2.55 3.50 2.16 93 HTML_IMAGE_RATIO_08 8224 2.66 3.99 2.12 94 XM_B_SpammyTLD 7981 2.45 3.42 2.06 95 DKIM_INVALID 7851 2.75 4.53 2.03 96 RCVD_IN_IADB_VOUCHED 7839 1.64 0.67 2.02 97 TR_XM_DKIM_Undo 7722 10.26 30.72 1.99 98 TR_XM_SpammyRelay 7485 4.23 9.91 1.93 99 HTML_MIME_NO_HTML_TAG 7422 1.82 1.57 1.92 100 INVALID_MSGID 7358 1.43 0.26 1.90 101 XMSubLongNoVowel 7346 1.36 0.04 1.90 102 XMSubGarbage 7150 1.32 0.02 1.85 103 FROM_EXCESS_BASE64 7093 1.89 2.04 1.83 104 TR_XM_PhishingBody 6678 2.56 4.65 1.72 105 HELO_NODOT 6512 1.29 0.32 1.68 106 HELO_NO_DOMAIN 6507 1.29 0.32 1.68 107 TO_MALFORMED 6503 1.20 0.02 1.68 108 XM_DK_Undo_01 6456 1.64 1.58 1.67 109 T_XMDrugObfuBody_08 6320 2.17 3.50 1.63 110 T_XMDrugObfuBody_14 6247 2.28 3.92 1.61 111 TR_XM_SpammyWords5 6188 2.28 3.98 1.60 112 XMSexyCombo_05 6032 2.20 3.80 1.56 113 SUBJ_ALL_CAPS 5900 1.77 2.38 1.52 114 TM2_M_URI_OPT_OUT 5779 1.88 2.83 1.49 115 XM_B_Investor 5641 2.51 5.13 1.46 116 TR_Symld_Words 5415 1.28 0.99 1.40 117 XM_B_Unsub2 5401 1.78 2.72 1.40 118 TVD_RCVD_IP 5383 1.29 1.04 1.39 119 XMDiploma_00 5319 1.95 3.39 1.37 120 TooManyTo_003 5315 1.28 1.06 1.37 121 RCVD_IN_IADB_OPTIN 5295 1.10 0.43 1.37 122 TR_DCC_Bayes_99 5147 7.88 24.10 1.33 123 KHOP_HELO_FCRDNS 4999 1.43 1.76 1.29 124 UNTRUSTED_Relay 4925 2.58 5.82 1.27 125 IN_HORDE_ADDRESS_BOOK 4924 0.92 0.06 1.27 126 TR_XM_UnparsRelay 4874 3.03 7.43 1.26 127 BOTNET 4680 3.67 9.78 1.21 128 XM_SendGrid 4636 1.22 1.28 1.20 129 RELAYCOUNTRY_CA 4270 2.22 4.99 1.10 130 TVD_SPACE_RATIO 4071 0.78 0.12 1.05 131 TM2_M_VERY_LONG_WORD 4042 1.70 3.32 1.04 132 XM_H_Long_From02 4033 1.00 0.90 1.04 133 XMStockSpam_06 3969 1.23 1.73 1.03 134 TooManyTo_004 3955 1.02 1.00 1.02 135 XMBSHREFv2 3920 0.82 0.33 1.01 136 XMGappySubj_01 3906 0.78 0.20 1.01 137 URI_NOVOWEL 3892 0.95 0.80 1.01 138 XM_OfRef6 3891 1.97 4.35 1.01 139 XM_B_SEO 3857 2.35 5.72 1.00 140 XM_GoogleGroups 3787 0.89 0.66 0.98 141 XMCapTrack 3770 0.84 0.52 0.97 142 XMBrknScrpt_02 3681 1.38 2.43 0.95 143 T_FILL_THIS_FORM_SHORT 3635 1.22 1.91 0.94 144 XM_E_Blogspot 3546 0.67 0.07 0.92 145 URI_HEX 3411 1.08 1.58 0.88 146 TooManyTo_005 3235 0.87 0.94 0.84 147 HTTPS_HTTP_MISMATCH 3098 1.08 1.76 0.80 148 T_TooManySym_03 3071 0.64 0.26 0.79 149 TR_XM_DK_SendGrid 3035 0.79 0.80 0.78 150 XMLngstWrd_00 2972 0.85 1.04 0.77 151 SpammyFromTLD_01 2964 1.03 1.69 0.77 152 URI_TRY_3LD 2914 1.22 2.37 0.75 153 XMPhish30 2882 0.94 1.41 0.74 154 XM_UB50 2870 1.30 2.70 0.74 155 XMGenDplmaNmb 2823 0.99 1.64 0.73 156 XMBody_95 2814 0.60 0.30 0.73 157 DKIM_ADSP_CUSTOM_MED 2799 0.82 1.06 0.72 158 XM_B_COPY_HTML 2756 0.79 0.99 0.71 159 T_OBFU_PDF_ATTACH 2658 0.53 0.15 0.69 160 XM_ShortIntro_01 2653 0.70 0.72 0.69 161 XMBdyGiftCard01 2653 0.88 1.37 0.69 162 TR_LOTS_OF_MONEY3 2640 1.67 4.13 0.68 163 RCVD_IN_BL_SPAMCOP_NET 2627 2.58 7.30 0.68 164 FROM_GOV_DKIM_AU 2575 0.62 0.51 0.67 165 RELAYCOUNTRY_AU 2571 1.13 2.29 0.66 166 TR_XM_Base64_M1 2550 0.80 1.15 0.66 167 XM_B_SpammyWords4 2497 1.31 2.95 0.64 168 XM_H_PHPMailer 2392 0.64 0.70 0.62 169 TR_MetaPhish_Combo_01 2346 0.71 0.97 0.61 170 XMBody_17 2282 1.89 5.13 0.59 171 XM_B_DNDMA 2251 0.63 0.73 0.58 172 XM_ProductURIs 2224 0.59 0.61 0.57 173 TR_XM_SEO4 2191 1.90 5.20 0.57 174 XMGappySubj_02 2171 0.43 0.10 0.56 175 XMNoVowels 2158 0.57 0.59 0.56 176 USER_IN_WELCOMELIST 2074 0.38 0.00 0.54 177 USER_IN_WHITELIST 2074 0.38 0.00 0.54 178 T_XMDrugObfuBody_00 2034 0.94 1.96 0.53 179 SHORT_HELO_AND_INLINE_IMAGE 2024 0.39 0.06 0.52 180 T_Symld_Words_02 1937 0.55 0.69 0.50 181 MPART_ALT_DIFF_COUNT 1925 0.63 0.97 0.50 182 HTML_TAG_BALANCE_BODY 1918 0.77 1.47 0.50 183 NML_ADSP_CUSTOM_MED 1903 0.62 0.94 0.49 184 T_XMHurry_00 1900 1.05 2.45 0.49 185 XMMoneyMeta_00 1841 0.56 0.78 0.48 186 HTML_IMAGE_ONLY_28 1805 0.43 0.36 0.47 187 TR_XM_SpammyWords2 1715 3.89 12.43 0.44 188 PLING_QUERY 1691 0.51 0.70 0.44 189 XM_B_REG_HTML 1647 0.41 0.36 0.43 190 XMPhish14 1642 0.57 0.92 0.42 191 TM2_M_BODY_EMPTY 1628 0.33 0.10 0.42 192 TR_XM_SPAMCOP 1609 1.95 5.76 0.42 193 TO_NO_BRKTS_HTML_ONLY 1589 0.35 0.19 0.41 194 RELAYCOUNTRY_GB 1580 0.50 0.72 0.41 195 XMDateMe_00 1563 0.37 0.29 0.40 196 FORGED_GMAIL_RCVD 1554 0.51 0.78 0.40 197 RCVD_IN_PSBL 1553 0.47 0.65 0.40 198 XMSubMetaI_00 1550 0.60 1.09 0.40 199 XM_B_FormFill 1539 0.31 0.08 0.40 200 XMLngstWrd_01 1524 0.42 0.48 0.39 ----------------------------------------------------------------------