Email: 486363 Autolearn: 0 AvgScore: 4.67 AvgScanTime: 1.21 sec Spam: 170421 Autolearn: 0 AvgScore: 13.19 AvgScanTime: 1.33 sec Ham: 315942 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.15 sec Time Spent Running SA: 163.67 hours Time Spent Processing Spam: 63.18 hours Time Spent Processing Ham: 100.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165275 89.57 96.98 85.57 2 DKIM_SIGNED 158111 81.95 92.78 76.11 3 XM_DK_Pass 152274 79.91 89.35 74.82 4 DKIM_VALID 150650 78.96 88.40 73.86 5 XM_B_Unicode 147994 75.69 86.84 69.67 6 RELAYCOUNTRY_US 147531 83.10 86.57 81.23 7 XMListUnsubscribeExists 131011 60.66 76.87 51.91 8 DCC_CHECK 130119 51.90 76.35 38.71 9 XM_B_SpammyWords 125372 53.64 73.57 42.89 10 DKIM_VALID_AU 123299 63.91 72.35 59.35 11 XM_DK_Undo_02 81195 21.04 47.64 6.70 12 XM_B_Unicode3 76463 41.95 44.87 40.38 13 LOC_TINY_FONT_1 74096 32.52 43.48 26.60 14 XM_B_SpammyWords2 72046 26.34 42.28 17.74 15 HTML_FONT_LOW_CONTRAST 70149 33.92 41.16 30.01 16 RCVD_IN_MSPIKE_H2 70137 35.37 41.16 32.25 17 BAYES_99 66097 17.01 38.78 5.26 18 FVGT_m_MULTI_ODD 64833 31.05 38.04 27.28 19 BAYES_50 62299 51.91 36.56 60.19 20 TR_XM_DKIM_Undo 61013 14.23 35.80 2.59 21 BAYES_999 53923 13.75 31.64 4.10 22 T_KAM_HTML_FONT_INVALID 52991 24.68 31.09 21.22 23 DKIM_VALID_EF 49956 29.26 29.31 29.23 24 TR_DCC_Bayes_99 48833 11.47 28.65 2.20 25 DCC_CHECK_NEGATIVE 40286 48.07 23.64 61.25 26 T_TM2_M_HEADER_IN_MSG 40216 27.19 23.60 29.13 27 MIME_HTML_ONLY 39810 20.84 23.36 19.47 28 TR_XM_DK_Unsub 38010 17.19 22.30 14.44 29 XMSubLong 37191 22.41 21.82 22.73 30 XM_Multi_Part_URI 34831 17.07 20.44 15.25 31 LOTS_OF_MONEY 28515 10.26 16.73 6.77 32 TR_XM_SpammyWords2 27638 6.14 16.22 0.71 33 TR_XM_SpammyWords4 25603 8.32 15.02 4.71 34 UNPARSEABLE_RELAY 25601 11.83 15.02 10.11 35 XM_B_Unsub 24105 9.98 14.14 7.73 36 XM_B_SpammyWords3 23557 7.77 13.82 4.51 37 TR_MAX_INTL_RELAY 23463 9.40 13.77 7.05 38 RELAYCOUNTRY_META 23446 7.69 13.76 4.41 39 TR_XM_BayesUnsub 23209 8.83 13.62 6.24 40 BOTNET_IPINHOSTNAME 21628 7.48 12.69 4.66 41 TR_XM_SpammyRelay 16527 4.93 9.70 2.35 42 RCVD_IN_BL_SPAMCOP_NET 15035 3.55 8.82 0.71 43 XM_Evil_Numbers_Gen 14808 8.07 8.69 7.74 44 BAYES_80 14443 5.75 8.47 4.28 45 BOTNET 13524 3.76 7.94 1.50 46 TR_XM_UnparsRelay 13409 3.80 7.87 1.60 47 LotsOfNums_01 13393 8.35 7.86 8.61 48 BAYES_60 12891 9.03 7.56 9.82 49 XM_Body_Dirty_Words 12714 4.97 7.46 3.63 50 FSL_BULK_SIG 12609 6.25 7.40 5.63 51 TR_XM_SPAMCOP 11989 2.73 7.03 0.41 52 XMBody_17 10576 2.59 6.21 0.64 53 UNTRUSTED_Relay 10348 3.40 6.07 1.96 54 HTML_IMAGE_RATIO_02 10243 5.28 6.01 4.88 55 MPART_ALT_DIFF 10174 4.79 5.97 4.16 56 TR_LOTS_OF_MONEY3 10129 2.59 5.94 0.78 57 XMSubMetaSx_00 9015 4.49 5.29 4.06 58 XM_B_PhoneNumber 8955 8.18 5.25 9.75 59 XM_H_Long_From01 8874 5.16 5.21 5.13 60 HTML_IMAGE_RATIO_04 8784 4.74 5.15 4.51 61 BAYES_95 8404 3.53 4.93 2.77 62 TooManyTo_001 8378 7.50 4.92 8.90 63 XM_B_SEO 8267 2.65 4.85 1.46 64 XM_UncommonTLD01 8065 4.37 4.73 4.18 65 RELAYCOUNTRY_CA 7891 2.45 4.63 1.28 66 XM_B_Phish_Phrases 7884 3.77 4.63 3.31 67 TR_XM_SpammyWords5 7682 2.48 4.51 1.38 68 XMSexyCombo_05 7590 2.75 4.45 1.83 69 XM_SPF_SoftFail 7522 3.53 4.41 3.05 70 TR_XM_SEO4 7485 2.16 4.39 0.96 71 DKIM_INVALID 7461 2.99 4.38 2.24 72 HTML_IMAGE_RATIO_06 7327 3.20 4.30 2.61 73 XM_B_Investor 7121 2.63 4.18 1.80 74 T_XMDrugObfuBody_14 6960 2.68 4.08 1.93 75 XM_OfRef6 6956 2.13 4.08 1.08 76 MIME_HTML_MOSTLY 6943 2.97 4.07 2.38 77 XM_H_GMP 6799 5.57 3.99 6.42 78 XMNumbers 6656 3.00 3.91 2.52 79 MIME_QP_LONG_LINE 6600 4.93 3.87 5.50 80 XMStrtUSub 6456 4.52 3.79 4.91 81 RCVD_IN_VALIDITY_SAFE 6213 4.39 3.65 4.79 82 TR_XM_PhishingBody 6119 2.39 3.59 1.74 83 XM_URI_RBL 6072 1.40 3.56 0.23 84 MIME_HTML_ONLY_MULTI 6004 2.62 3.52 2.13 85 T_XMDrugObfuBody_08 5899 2.13 3.46 1.41 86 TM2_M_VERY_LONG_WORD 5798 2.07 3.40 1.35 87 XM_B_SpammyTLD 5586 3.90 3.28 4.23 88 XM_UB50 5555 1.80 3.26 1.02 89 HTML_IMAGE_RATIO_08 5545 2.44 3.25 2.00 90 USER_IN_DEF_DKIM_WL 5514 10.47 3.24 14.38 91 T_XMHurry_00 4960 1.57 2.91 0.84 92 RCVD_IN_VALIDITY_CERTIFIED 4881 3.61 2.86 4.02 93 XMDiploma_00 4836 2.18 2.84 1.83 94 XM_CamelCaseFrm001 4822 2.50 2.83 2.32 95 URI_TRY_3LD 4778 1.55 2.80 0.87 96 RCVD_IN_MSPIKE_WL 4430 4.86 2.60 6.08 97 RCVD_IN_MSPIKE_H3 4430 4.86 2.60 6.08 98 SUBJ_ALL_CAPS 4305 2.01 2.53 1.72 99 XM_B_Unsub2 4284 1.82 2.51 1.45 100 TM2_M_URI_OPT_OUT 4270 1.99 2.51 1.71 101 XMBrknScrpt_02 4228 1.67 2.48 1.23 102 T_TooManySym_01 4101 4.24 2.41 5.23 103 RELAYCOUNTRY_AU 4008 1.46 2.35 0.98 104 TR_XM_NoHeaderRelay 3820 0.86 2.24 0.11 105 T_REMOTE_IMAGE 3521 2.97 2.07 3.45 106 XM_B_SpammyWords4 3458 1.09 2.03 0.58 107 RCVD_IN_VALIDITY_RPBL 3235 0.74 1.90 0.11 108 AC_BR_BONANZA 3188 0.75 1.87 0.15 109 XM_HighProb1 3100 0.65 1.82 0.01 110 T_XMDrugObfuBody_00 3080 1.07 1.81 0.68 111 HTML_TAG_BALANCE_BODY 3014 0.98 1.77 0.56 112 MAILING_LIST_MULTI 3006 2.44 1.76 2.80 113 FROM_EXCESS_BASE64 2955 1.83 1.73 1.88 114 XMStockSpam_06 2908 1.37 1.71 1.19 115 URI_NOVOWEL 2785 2.57 1.63 3.07 116 LONGLN_LOW_CONTRAST 2661 0.72 1.56 0.27 117 TR_XM_INV_DKIM 2637 0.59 1.55 0.07 118 XM_ProductURIs 2622 1.31 1.54 1.19 119 SpammyFromTLD_01 2577 0.97 1.51 0.68 120 SpammyFromTLD_02 2573 0.85 1.51 0.50 121 XMGenDplmaNmb 2517 1.03 1.48 0.79 122 XM_DK_Undo_01 2454 1.80 1.44 1.99 123 BAYES_40 2392 3.59 1.40 4.77 124 HTML_MIME_NO_HTML_TAG 2371 2.04 1.39 2.38 125 ANY_BOUNCE_MESSAGE 2313 2.56 1.36 3.21 126 BOUNCE_MESSAGE 2310 2.56 1.36 3.21 127 URI_HEX 2302 1.11 1.35 0.98 128 DIET_1 2290 0.61 1.34 0.21 129 XM_DIRTYINTL 2272 0.53 1.33 0.09 130 RCVD_IN_IADB_LISTED 2221 3.01 1.30 3.93 131 TR_Symld_Words 2213 1.51 1.30 1.62 132 THIS_AD 2204 0.72 1.29 0.42 133 URIBL_DBL_SPAM 2163 0.45 1.27 0.01 134 TR_XM_PHPForged 2133 0.74 1.25 0.46 135 T_FILL_THIS_FORM_SHORT 2124 0.98 1.25 0.84 136 TR_XM_PHPDW 2121 0.73 1.24 0.45 137 KHOP_HELO_FCRDNS 2109 1.27 1.24 1.29 138 DKIM_ADSP_NXDOMAIN 2089 0.62 1.23 0.30 139 TR_XM_FormFill2 2089 0.72 1.23 0.45 140 XM_H_PHPOS 2073 0.71 1.22 0.44 141 XMPhish30 2067 0.97 1.21 0.84 142 TR_Caps_n_Bayes_99 2065 0.45 1.21 0.04 143 XMSlimDrugH 1964 0.68 1.15 0.42 144 RCVD_IN_IADB_SPF 1963 2.66 1.15 3.48 145 XMBdyGiftCard01 1954 0.87 1.15 0.73 146 XMSexyCombo_01 1948 0.86 1.14 0.71 147 ALL_TRUSTED 1924 10.20 1.13 15.10 148 HTTPS_HTTP_MISMATCH 1873 0.89 1.10 0.78 149 RCVD_IN_IADB_DK 1858 2.35 1.09 3.02 150 RCVD_IN_IADB_SENDERID 1828 2.40 1.07 3.12 151 HOSTED_IMG_MULTI_PUB_01 1822 0.38 1.07 0.02 152 XMReplyNow 1799 0.50 1.06 0.21 153 DKIM_ADSP_CUSTOM_MED 1797 1.02 1.05 1.00 154 BAYES_20 1792 2.31 1.05 2.99 155 XM_B_COPY_HTML 1789 0.83 1.05 0.71 156 XM_SendGrid 1761 1.17 1.03 1.25 157 T_MONEY_PERCENT 1746 0.54 1.02 0.27 158 TR_LOTS_OF_MONEY2 1746 0.54 1.02 0.27 159 TR_XM_Base64_M1 1734 0.81 1.02 0.70 160 XMHTMLBadTable_001 1694 0.51 0.99 0.24 161 TR_MetaPhish_Combo_01 1677 0.86 0.98 0.80 162 XM_B_Phish66 1627 0.58 0.95 0.38 163 XM_B_DNDMA 1600 0.76 0.94 0.67 164 AC_HTML_NONSENSE_TAGS 1585 0.35 0.93 0.04 165 XMHTML_After_End 1582 0.51 0.93 0.28 166 T_Symld_Words_02 1542 0.56 0.90 0.37 167 T_STY_INVIS_DIRECT 1538 0.54 0.90 0.35 168 RELAYCOUNTRY_IN 1535 0.34 0.90 0.04 169 HTML_FONT_TINY_NORDNS 1527 0.36 0.90 0.07 170 TM2_M_OBFU_COMMENT 1523 0.61 0.89 0.46 171 PLING_QUERY 1519 0.70 0.89 0.59 172 RDNS_DYNAMIC 1482 0.55 0.87 0.38 173 PDS_RDNS_DYNAMIC_FP 1446 0.43 0.85 0.21 174 LongTLD 1443 0.56 0.85 0.40 175 MPART_ALT_DIFF_COUNT 1412 0.57 0.83 0.43 176 HTML_FONT_FACE_BAD 1411 0.58 0.83 0.44 177 XM_H_Long_From02 1407 1.01 0.83 1.11 178 HTML_OBFUSCATE_05_10 1391 0.38 0.82 0.15 179 BOTNET_NORDNS 1379 0.29 0.81 0.01 180 SUBJ_DOLLARS 1368 0.42 0.80 0.21 181 XM_H_Undi_Recip 1361 0.39 0.80 0.17 182 XM_UB60 1359 0.32 0.80 0.06 183 TooManyTo_002 1358 2.25 0.80 3.03 184 TR_XM_InvalidRelay 1346 0.30 0.79 0.03 185 TM2_M_A_HREF_HREF 1318 0.40 0.77 0.20 186 NML_ADSP_CUSTOM_MED 1306 0.64 0.77 0.58 187 FORGED_GMAIL_RCVD 1305 0.69 0.77 0.65 188 RELAYCOUNTRY_CN 1299 0.33 0.76 0.09 189 SHOPIFY_IMG_NOT_RCVD_SFY 1267 0.50 0.74 0.37 190 XMSubMetaI_00 1258 0.76 0.74 0.77 191 TVD_RCVD_IP 1252 1.34 0.73 1.66 192 TR_Mismatch_TLD_02 1247 0.30 0.73 0.06 193 XM_UB99 1225 0.25 0.72 0.00 194 TooManyTo_003 1209 1.19 0.71 1.45 195 TR_XM_FormFill 1201 0.26 0.70 0.01 196 TR_XM_DK_SendGrid 1181 0.78 0.69 0.82 197 XMPhish14 1180 0.42 0.69 0.28 198 XMBounce_01 1178 0.26 0.69 0.02 199 BAYES_00 1149 5.49 0.67 8.09 200 XMMoneyMeta_00 1148 0.55 0.67 0.48 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 270348 89.57 96.98 85.57 2 RELAYCOUNTRY_US 256653 83.10 86.57 81.23 3 DKIM_SIGNED 240452 81.95 92.78 76.11 4 XM_DK_Pass 236395 79.91 89.35 74.82 5 DKIM_VALID 233368 78.96 88.40 73.86 6 XM_B_Unicode 220121 75.69 86.84 69.67 7 DCC_CHECK_NEGATIVE 193521 48.07 23.64 61.25 8 BAYES_50 190170 51.91 36.56 60.19 9 DKIM_VALID_AU 187521 63.91 72.35 59.35 10 XMListUnsubscribeExists 164009 60.66 76.87 51.91 11 XM_B_SpammyWords 135495 53.64 73.57 42.89 12 XM_B_Unicode3 127572 41.95 44.87 40.38 13 DCC_CHECK 122288 51.90 76.35 38.71 14 RCVD_IN_MSPIKE_H2 101879 35.37 41.16 32.25 15 HTML_FONT_LOW_CONTRAST 94808 33.92 41.16 30.01 16 DKIM_VALID_EF 92355 29.26 29.31 29.23 17 T_TM2_M_HEADER_IN_MSG 92043 27.19 23.60 29.13 18 FVGT_m_MULTI_ODD 86183 31.05 38.04 27.28 19 LOC_TINY_FONT_1 84052 32.52 43.48 26.60 20 XMSubLong 71813 22.41 21.82 22.73 21 T_KAM_HTML_FONT_INVALID 67043 24.68 31.09 21.22 22 MIME_HTML_ONLY 61526 20.84 23.36 19.47 23 XM_B_SpammyWords2 56047 26.34 42.28 17.74 24 XM_Multi_Part_URI 48195 17.07 20.44 15.25 25 ALL_TRUSTED 47708 10.20 1.13 15.10 26 TR_XM_DK_Unsub 45616 17.19 22.30 14.44 27 USER_IN_DEF_DKIM_WL 45419 10.47 3.24 14.38 28 UNPARSEABLE_RELAY 31955 11.83 15.02 10.11 29 BAYES_60 31034 9.03 7.56 9.82 30 XM_B_PhoneNumber 30820 8.18 5.25 9.75 31 TooManyTo_001 28113 7.50 4.92 8.90 32 LotsOfNums_01 27202 8.35 7.86 8.61 33 XM_DKIMWhitelistDomains 25941 5.36 0.07 8.21 34 BAYES_00 25546 5.49 0.67 8.09 35 XM_Evil_Numbers_Gen 24459 8.07 8.69 7.74 36 XM_B_Unsub 24410 9.98 14.14 7.73 37 IN_ZIMBRA_NJ_WHITELIST 23056 4.77 0.10 7.30 38 TR_MAX_INTL_RELAY 22269 9.40 13.77 7.05 39 LOTS_OF_MONEY 21393 10.26 16.73 6.77 40 XM_DK_Undo_02 21155 21.04 47.64 6.70 41 XM_H_GMP 20273 5.57 3.99 6.42 42 TR_XM_BayesUnsub 19730 8.83 13.62 6.24 43 RCVD_IN_MSPIKE_WL 19205 4.86 2.60 6.08 44 RCVD_IN_MSPIKE_H3 19204 4.86 2.60 6.08 45 TR_XM_DK_Bayes 18854 4.05 0.49 5.97 46 TR_XM_DK_Bayes1 18626 3.99 0.47 5.90 47 FSL_BULK_SIG 17792 6.25 7.40 5.63 48 MIME_QP_LONG_LINE 17385 4.93 3.87 5.50 49 BAYES_99 16623 17.01 38.78 5.26 50 T_TooManySym_01 16516 4.24 2.41 5.23 51 XM_H_Long_From01 16219 5.16 5.21 5.13 52 TR_XM_DK_Bayes2 15840 3.37 0.34 5.01 53 XMStrtUSub 15517 4.52 3.79 4.91 54 HTML_IMAGE_RATIO_02 15428 5.28 6.01 4.88 55 RCVD_IN_VALIDITY_SAFE 15127 4.39 3.65 4.79 56 BAYES_40 15074 3.59 1.40 4.77 57 TR_XM_SpammyWords4 14869 8.32 15.02 4.71 58 BOTNET_IPINHOSTNAME 14735 7.48 12.69 4.66 59 XM_PDF 14689 3.25 0.66 4.65 60 HTML_IMAGE_RATIO_04 14257 4.74 5.15 4.51 61 XM_B_SpammyWords3 14239 7.77 13.82 4.51 62 RELAYCOUNTRY_META 13945 7.69 13.76 4.41 63 BAYES_80 13516 5.75 8.47 4.28 64 XM_B_SpammyTLD 13368 3.90 3.28 4.23 65 XM_UncommonTLD01 13201 4.37 4.73 4.18 66 MPART_ALT_DIFF 13136 4.79 5.97 4.16 67 BAYES_999 12949 13.75 31.64 4.10 68 XMSubMetaSx_00 12824 4.49 5.29 4.06 69 RCVD_IN_VALIDITY_CERTIFIED 12687 3.61 2.86 4.02 70 RCVD_IN_IADB_LISTED 12431 3.01 1.30 3.93 71 XM_Body_Dirty_Words 11464 4.97 7.46 3.63 72 RCVD_IN_IADB_SPF 10989 2.66 1.15 3.48 73 T_REMOTE_IMAGE 10906 2.97 2.07 3.45 74 XM_B_Phish_Phrases 10458 3.77 4.63 3.31 75 ANY_BOUNCE_MESSAGE 10130 2.56 1.36 3.21 76 BOUNCE_MESSAGE 10126 2.56 1.36 3.21 77 RCVD_IN_IADB_SENDERID 9844 2.40 1.07 3.12 78 URI_NOVOWEL 9714 2.57 1.63 3.07 79 XM_SPF_SoftFail 9632 3.53 4.41 3.05 80 TooManyTo_002 9571 2.25 0.80 3.03 81 RCVD_IN_IADB_DK 9549 2.35 1.09 3.02 82 BAYES_20 9451 2.31 1.05 2.99 83 MAILING_LIST_MULTI 8852 2.44 1.76 2.80 84 BAYES_95 8743 3.53 4.93 2.77 85 T_TooManySym_02 8434 1.95 0.63 2.67 86 RCVD_IN_IADB_VOUCHED 8418 1.95 0.63 2.66 87 HTML_IMAGE_RATIO_06 8233 3.20 4.30 2.61 88 TR_XM_DKIM_Undo 8194 14.23 35.80 2.59 89 XMNumbers 7953 3.00 3.91 2.52 90 HTML_MIME_NO_HTML_TAG 7535 2.04 1.39 2.38 91 MIME_HTML_MOSTLY 7514 2.97 4.07 2.38 92 TR_XM_SpammyRelay 7433 4.93 9.70 2.35 93 XM_CamelCaseFrm001 7338 2.50 2.83 2.32 94 INVALID_MSGID 7195 1.53 0.14 2.28 95 TO_MALFORMED 7090 1.46 0.02 2.24 96 DKIM_INVALID 7084 2.99 4.38 2.24 97 TR_DCC_Bayes_99 6942 11.47 28.65 2.20 98 MIME_HTML_ONLY_MULTI 6741 2.62 3.52 2.13 99 HTML_IMAGE_RATIO_08 6316 2.44 3.25 2.00 100 XM_DK_Undo_01 6282 1.80 1.44 1.99 101 UNTRUSTED_Relay 6201 3.40 6.07 1.96 102 T_XMDrugObfuBody_14 6096 2.68 4.08 1.93 103 FROM_EXCESS_BASE64 5931 1.83 1.73 1.88 104 XMSexyCombo_05 5790 2.75 4.45 1.83 105 BAYES_05 5785 1.39 0.56 1.83 106 XMDiploma_00 5768 2.18 2.84 1.83 107 XM_B_Investor 5691 2.63 4.18 1.80 108 RCVD_IN_IADB_OPTIN 5593 1.28 0.37 1.77 109 TR_XM_PhishingBody 5509 2.39 3.59 1.74 110 SUBJ_ALL_CAPS 5448 2.01 2.53 1.72 111 TM2_M_URI_OPT_OUT 5413 1.99 2.51 1.71 112 TVD_RCVD_IP 5248 1.34 0.73 1.66 113 TR_Symld_Words 5130 1.51 1.30 1.62 114 TR_XM_UnparsRelay 5069 3.80 7.87 1.60 115 HELO_NODOT 5054 1.17 0.36 1.60 116 HELO_NO_DOMAIN 5051 1.16 0.35 1.60 117 BOTNET 4744 3.76 7.94 1.50 118 IN_HORDE_ADDRESS_BOOK 4647 0.99 0.09 1.47 119 XM_B_SEO 4602 2.65 4.85 1.46 120 TooManyTo_003 4580 1.19 0.71 1.45 121 XM_B_Unsub2 4576 1.82 2.51 1.45 122 T_XMDrugObfuBody_08 4452 2.13 3.46 1.41 123 TR_XM_SpammyWords5 4356 2.48 4.51 1.38 124 XMGappySubj_01 4334 0.94 0.13 1.37 125 TM2_M_VERY_LONG_WORD 4259 2.07 3.40 1.35 126 KHOP_HELO_FCRDNS 4076 1.27 1.24 1.29 127 RELAYCOUNTRY_CA 4034 2.45 4.63 1.28 128 XM_SendGrid 3938 1.17 1.03 1.25 129 XMBSHREFv2 3934 0.92 0.32 1.25 130 XM_GoogleGroups 3899 1.02 0.62 1.23 131 XMBrknScrpt_02 3872 1.67 2.48 1.23 132 TVD_SPACE_RATIO 3788 0.82 0.12 1.20 133 XM_ProductURIs 3772 1.31 1.54 1.19 134 XMStockSpam_06 3767 1.37 1.71 1.19 135 XM_H_Long_From02 3504 1.01 0.83 1.11 136 XM_OfRef6 3401 2.13 4.08 1.08 137 TooManyTo_004 3323 0.91 0.66 1.05 138 XM_TLDProd2 3219 0.78 0.34 1.02 139 XM_UB50 3213 1.80 3.26 1.02 140 DKIM_ADSP_CUSTOM_MED 3150 1.02 1.05 1.00 141 XMCapTrack 3149 0.83 0.52 1.00 142 T_TooManySym_03 3148 0.73 0.23 1.00 143 LOW_PRICE 3130 0.72 0.23 0.99 144 RELAYCOUNTRY_AU 3101 1.46 2.35 0.98 145 URI_HEX 3093 1.11 1.35 0.98 146 TR_XM_SEO4 3029 2.16 4.39 0.96 147 URI_TRY_3LD 2745 1.55 2.80 0.87 148 TooManyTo_005 2721 0.78 0.63 0.86 149 T_XMHurry_00 2661 1.57 2.91 0.84 150 FROM_GOV_DKIM_AU 2657 0.64 0.27 0.84 151 XMPhish30 2650 0.97 1.21 0.84 152 T_FILL_THIS_FORM_SHORT 2650 0.98 1.25 0.84 153 XM_B_FormFill 2603 0.55 0.04 0.82 154 TR_XM_DK_SendGrid 2597 0.78 0.69 0.82 155 TR_MetaPhish_Combo_01 2513 0.86 0.98 0.80 156 XMGenDplmaNmb 2508 1.03 1.48 0.79 157 TR_LOTS_OF_MONEY3 2471 2.59 5.94 0.78 158 HTTPS_HTTP_MISMATCH 2460 0.89 1.10 0.78 159 XMSubMetaI_00 2431 0.76 0.74 0.77 160 XMBdyGiftCard01 2300 0.87 1.15 0.73 161 XM_ShortIntro_01 2277 0.70 0.66 0.72 162 XM_B_COPY_HTML 2247 0.83 1.05 0.71 163 XMSexyCombo_01 2246 0.86 1.14 0.71 164 RCVD_IN_BL_SPAMCOP_NET 2245 3.55 8.82 0.71 165 TR_XM_SpammyWords2 2243 6.14 16.22 0.71 166 XMNoVowels 2227 0.63 0.49 0.70 167 TR_XM_Base64_M1 2219 0.81 1.02 0.70 168 XMGappySubj_02 2192 0.48 0.08 0.69 169 XMBody_95 2164 0.50 0.15 0.68 170 XM_H_PHPMailer 2153 0.65 0.60 0.68 171 SpammyFromTLD_01 2135 0.97 1.51 0.68 172 T_XMDrugObfuBody_00 2133 1.07 1.81 0.68 173 XM_B_DNDMA 2111 0.76 0.94 0.67 174 T_OBFU_PDF_ATTACH 2108 0.46 0.09 0.67 175 FORGED_GMAIL_RCVD 2052 0.69 0.77 0.65 176 XMBody_17 2010 2.59 6.21 0.64 177 USER_IN_WHITELIST 1928 0.40 0.00 0.61 178 USER_IN_WELCOMELIST 1928 0.40 0.00 0.61 179 XMLngstWrd_00 1912 0.58 0.53 0.61 180 PLING_QUERY 1879 0.70 0.89 0.59 181 XM_B_SpammyWords4 1826 1.09 2.03 0.58 182 NML_ADSP_CUSTOM_MED 1818 0.64 0.77 0.58 183 HTML_TAG_BALANCE_BODY 1757 0.98 1.77 0.56 184 NO_DNS_FOR_FROM 1744 0.54 0.51 0.55 185 XMSexyCombo_04 1705 0.50 0.44 0.54 186 TO_NO_BRKTS_HTML_ONLY 1696 0.41 0.19 0.54 187 XMSubMetaSxObfu_03 1620 0.52 0.54 0.51 188 SHORT_HELO_AND_INLINE_IMAGE 1596 0.35 0.05 0.51 189 RELAYCOUNTRY_GB 1591 0.56 0.66 0.50 190 SpammyFromTLD_02 1571 0.85 1.51 0.50 191 XMMoneyMeta_00 1518 0.55 0.67 0.48 192 TM2_M_OBFU_COMMENT 1465 0.61 0.89 0.46 193 TR_XM_PHPForged 1454 0.74 1.25 0.46 194 TR_XM_PHPDW 1423 0.73 1.24 0.45 195 TR_XM_FormFill2 1421 0.72 1.23 0.45 196 HTML_FONT_FACE_BAD 1404 0.58 0.83 0.44 197 XMSubMetaSxObfu_02 1382 0.44 0.45 0.44 198 XM_H_PHPOS 1381 0.71 1.22 0.44 199 MISSING_HEADERS 1377 0.45 0.47 0.44 200 HTML_IMAGE_ONLY_28 1373 0.41 0.37 0.43 ----------------------------------------------------------------------