Email: 532721 Autolearn: 0 AvgScore: 4.43 AvgScanTime: 1.10 sec Spam: 179343 Autolearn: 0 AvgScore: 13.27 AvgScanTime: 1.22 sec Ham: 353378 Autolearn: 0 AvgScore: -0.06 AvgScanTime: 1.04 sec Time Spent Running SA: 162.83 hours Time Spent Processing Spam: 60.53 hours Time Spent Processing Ham: 102.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 173837 89.32 96.93 85.45 2 DKIM_SIGNED 167540 81.50 93.42 75.45 3 XM_DK_Pass 161742 79.42 90.19 73.96 4 DKIM_VALID 159124 78.18 88.73 72.82 5 XM_B_Unicode 158470 75.55 88.36 69.05 6 RELAYCOUNTRY_US 157277 82.82 87.70 80.35 7 XMListUnsubscribeExists 138736 58.84 77.36 49.45 8 DCC_CHECK 137562 50.24 76.70 36.81 9 XM_B_SpammyWords 134997 54.75 75.27 44.33 10 DKIM_VALID_AU 130855 63.19 72.96 58.23 11 XM_DK_Undo_02 87341 20.17 48.70 5.69 12 XM_B_Unicode3 80852 41.43 45.08 39.57 13 LOC_TINY_FONT_1 78578 31.27 43.81 24.90 14 XM_B_SpammyWords2 78021 26.34 43.50 17.63 15 BAYES_99 72833 16.57 40.61 4.38 16 HTML_FONT_LOW_CONTRAST 72166 32.07 40.24 27.93 17 TR_XM_DKIM_Undo 68367 14.42 38.12 2.39 18 FVGT_m_MULTI_ODD 67069 29.41 37.40 25.36 19 RCVD_IN_MSPIKE_H2 65677 32.95 36.62 31.09 20 BAYES_50 62106 51.23 34.63 59.66 21 BAYES_999 59147 13.34 32.98 3.37 22 T_KAM_HTML_FONT_INVALID 57899 24.48 32.28 20.52 23 TR_DCC_Bayes_99 54628 11.25 30.46 1.50 24 DKIM_VALID_EF 50564 28.99 28.19 29.40 25 T_TM2_M_HEADER_IN_MSG 42415 28.57 23.65 31.07 26 DCC_CHECK_NEGATIVE 41758 49.73 23.28 63.15 27 MIME_HTML_ONLY 41676 19.91 23.24 18.22 28 XMSubLong 38835 21.67 21.65 21.67 29 TR_XM_DK_Unsub 38285 15.90 21.35 13.13 30 XM_Multi_Part_URI 32625 15.96 18.19 14.82 31 LOTS_OF_MONEY 31218 10.25 17.41 6.61 32 TR_XM_SpammyWords2 30793 6.21 17.17 0.65 33 TR_XM_SpammyWords4 29247 8.58 16.31 4.66 34 XM_B_SpammyWords3 25985 7.68 14.49 4.23 35 TR_MAX_INTL_RELAY 24720 9.20 13.78 6.87 36 XM_B_Unsub 24720 9.89 13.78 7.92 37 UNPARSEABLE_RELAY 24553 12.10 13.69 11.29 38 RELAYCOUNTRY_META 23575 7.25 13.15 4.26 39 TR_XM_BayesUnsub 23507 8.61 13.11 6.33 40 BOTNET_IPINHOSTNAME 22665 6.28 12.64 3.06 41 TR_XM_SpammyRelay 16484 4.61 9.19 2.29 42 XM_Evil_Numbers_Gen 15240 8.24 8.50 8.11 43 BAYES_80 15185 5.62 8.47 4.17 44 BOTNET 14222 3.51 7.93 1.26 45 TR_XM_UnparsRelay 13875 3.64 7.74 1.57 46 RCVD_IN_BL_SPAMCOP_NET 13594 3.00 7.58 0.68 47 BAYES_60 13212 8.77 7.37 9.49 48 LotsOfNums_01 12727 7.58 7.10 7.82 49 TR_LOTS_OF_MONEY3 12146 2.88 6.77 0.90 50 FSL_BULK_SIG 11815 5.98 6.59 5.67 51 TR_XM_SPAMCOP 11127 2.35 6.20 0.40 52 XM_Body_Dirty_Words 11077 3.97 6.18 2.85 53 XMBody_17 11014 2.55 6.14 0.73 54 XM_B_Investor 10900 3.07 6.08 1.55 55 HTML_IMAGE_RATIO_02 10801 4.85 6.02 4.26 56 MPART_ALT_DIFF 10462 4.16 5.83 3.31 57 XMSubMetaSx_00 10436 4.13 5.82 3.28 58 XM_H_Long_From01 10026 5.24 5.59 5.06 59 XM_B_PhoneNumber 9855 8.29 5.50 9.71 60 HTML_IMAGE_RATIO_04 9409 4.31 5.25 3.84 61 TR_XM_SpammyWords5 9340 2.80 5.21 1.58 62 UNTRUSTED_Relay 9128 2.80 5.09 1.63 63 BAYES_95 9074 3.49 5.06 2.70 64 XM_SPF_SoftFail 8730 3.28 4.87 2.47 65 RELAYCOUNTRY_CA 8582 2.45 4.79 1.26 66 XM_UncommonTLD01 8458 4.17 4.72 3.89 67 DKIM_INVALID 8416 3.32 4.69 2.63 68 XM_H_GMP 8200 5.25 4.57 5.60 69 XM_OfRef6 8183 2.26 4.56 1.09 70 XMStrtUSub 8178 4.53 4.56 4.52 71 XM_B_Phish_Phrases 8121 3.89 4.53 3.56 72 XMBrknScrpt_02 8042 2.30 4.48 1.19 73 XM_B_SEO 7976 2.28 4.45 1.18 74 TooManyTo_001 7874 7.31 4.39 8.80 75 HTML_IMAGE_RATIO_06 7644 3.18 4.26 2.62 76 RCVD_IN_VALIDITY_RPBL 7588 1.61 4.23 0.28 77 XMNumbers 7424 3.30 4.14 2.87 78 TR_XM_SEO4 7325 1.90 4.08 0.79 79 T_XMHurry_00 7190 1.81 4.01 0.70 80 HTML_IMAGE_RATIO_08 7027 2.82 3.92 2.26 81 TR_XM_PhishingBody 6953 2.41 3.88 1.67 82 MIME_HTML_MOSTLY 6930 2.84 3.86 2.32 83 MIME_HTML_ONLY_MULTI 6678 2.42 3.72 1.76 84 XMSexyCombo_05 6581 2.27 3.67 1.56 85 T_XMDrugObfuBody_08 6468 2.23 3.61 1.54 86 T_XMDrugObfuBody_14 6083 2.15 3.39 1.52 87 MIME_QP_LONG_LINE 6046 4.43 3.37 4.97 88 RCVD_IN_VALIDITY_SAFE 5859 4.35 3.27 4.90 89 XM_B_SpammyTLD 5810 4.04 3.24 4.45 90 XM_URI_RBL 5711 1.29 3.18 0.33 91 SUBJ_ALL_CAPS 5569 2.15 3.11 1.67 92 TM2_M_VERY_LONG_WORD 5498 1.88 3.07 1.28 93 USER_IN_DEF_DKIM_WL 5341 9.03 2.98 12.11 94 T_TooManySym_01 5300 4.74 2.96 5.65 95 XM_CamelCaseFrm001 5282 2.21 2.95 1.84 96 RCVD_IN_MSPIKE_H3 4988 4.56 2.78 5.47 97 RCVD_IN_MSPIKE_WL 4988 4.56 2.78 5.47 98 XM_UB50 4798 1.54 2.68 0.96 99 TM2_M_URI_OPT_OUT 4753 1.92 2.65 1.54 100 XMDiploma_00 4650 2.04 2.59 1.76 101 RCVD_IN_VALIDITY_CERTIFIED 4514 3.57 2.52 4.10 102 RELAYCOUNTRY_AU 4204 1.30 2.34 0.77 103 URI_TRY_3LD 4142 1.54 2.31 1.14 104 XM_B_SpammyWords4 3938 1.20 2.20 0.69 105 XM_B_Unsub2 3868 1.82 2.16 1.65 106 T_FILL_THIS_FORM_SHORT 3746 1.33 2.09 0.95 107 HTML_TAG_BALANCE_BODY 3495 1.06 1.95 0.60 108 TR_Caps_n_Bayes_99 3283 0.65 1.83 0.05 109 MAILING_LIST_MULTI 3259 2.56 1.82 2.93 110 XMStockSpam_06 3236 1.37 1.80 1.15 111 T_REMOTE_IMAGE 3231 3.19 1.80 3.89 112 FROM_EXCESS_BASE64 3038 1.60 1.69 1.55 113 URIBL_DBL_SPAM 3001 0.57 1.67 0.01 114 HTTPS_HTTP_MISMATCH 2912 1.22 1.62 1.01 115 AC_BR_BONANZA 2902 0.62 1.62 0.11 116 URI_NOVOWEL 2798 2.88 1.56 3.55 117 HOSTED_IMG_MULTI_PUB_01 2742 0.58 1.53 0.10 118 BAYES_40 2658 3.90 1.48 5.13 119 SpammyFromTLD_02 2612 0.63 1.46 0.21 120 T_XMDrugObfuBody_00 2608 0.99 1.45 0.76 121 XMGenDplmaNmb 2545 1.04 1.42 0.84 122 SpammyFromTLD_01 2544 1.04 1.42 0.85 123 TR_XM_NoHeaderRelay 2540 0.57 1.42 0.13 124 XM_DK_Undo_01 2516 1.73 1.40 1.90 125 RCVD_IN_IADB_LISTED 2413 3.06 1.35 3.92 126 THIS_AD 2391 0.79 1.33 0.51 127 KHOP_HELO_FCRDNS 2380 1.35 1.33 1.37 128 TR_XM_INV_DKIM 2364 0.48 1.32 0.06 129 TR_Symld_Words 2333 1.99 1.30 2.35 130 URI_HEX 2330 1.11 1.30 1.01 131 HTML_MIME_NO_HTML_TAG 2300 1.87 1.28 2.16 132 XMSubMetaI_00 2247 0.90 1.25 0.72 133 XM_HighProb1 2226 0.43 1.24 0.01 134 TR_XM_PHPForged 2163 0.77 1.21 0.55 135 XMReplyNow 2152 0.57 1.20 0.26 136 TR_XM_PHPDW 2136 0.77 1.19 0.55 137 ALL_TRUSTED 2135 11.23 1.19 16.32 138 TR_XM_FormFill2 2083 0.76 1.16 0.55 139 XM_H_PHPOS 2075 0.75 1.16 0.54 140 RCVD_IN_IADB_SPF 2058 2.66 1.15 3.42 141 RDNS_DYNAMIC 2015 0.56 1.12 0.27 142 DIET_1 1993 0.54 1.11 0.25 143 PDS_RDNS_DYNAMIC_FP 1990 0.46 1.11 0.13 144 XMPhish30 1979 0.85 1.10 0.73 145 XMPhish14 1969 0.65 1.10 0.43 146 XM_B_COPY_HTML 1964 0.64 1.10 0.41 147 T_Symld_Words_02 1960 0.65 1.09 0.43 148 PLING_QUERY 1957 0.61 1.09 0.36 149 DKIM_ADSP_CUSTOM_MED 1952 1.02 1.09 0.99 150 BAYES_00 1934 6.34 1.08 9.01 151 RCVD_IN_IADB_SENDERID 1920 2.36 1.07 3.01 152 RCVD_IN_IADB_DK 1909 2.27 1.06 2.89 153 XMSexyCombo_01 1905 0.46 1.06 0.15 154 XMHTML_After_End 1886 0.57 1.05 0.33 155 XM_ProductURIs 1852 0.84 1.03 0.74 156 XM_H_Undi_Recip 1848 0.54 1.03 0.29 157 XMSlimDrugH 1834 0.59 1.02 0.37 158 XM_B_COVIDMETA 1804 0.45 1.01 0.17 159 TR_XM_FormFill 1783 0.34 0.99 0.01 160 TR_LOTS_OF_MONEY2 1763 0.49 0.98 0.25 161 T_MONEY_PERCENT 1763 0.49 0.98 0.25 162 TVD_RCVD_IP 1740 0.63 0.97 0.46 163 XM_SendGrid 1740 1.23 0.97 1.36 164 RELAYCOUNTRY_FR 1734 0.48 0.97 0.23 165 T_STY_INVIS_DIRECT 1713 0.51 0.96 0.28 166 XM_B_Phish66 1711 0.50 0.95 0.27 167 TR_Mismatch_TLD_01 1698 0.47 0.95 0.23 168 TR_MetaPhish_Combo_01 1686 0.74 0.94 0.65 169 TR_XM_DK_Bayes 1670 4.54 0.93 6.38 170 RCVD_IN_PSBL 1642 0.35 0.92 0.06 171 LongTLD 1633 0.58 0.91 0.42 172 BAYES_20 1580 2.58 0.88 3.45 173 XMSubMetaSxObfu_02 1552 0.41 0.87 0.18 174 FORGED_GMAIL_RCVD 1550 0.68 0.86 0.59 175 MPART_ALT_DIFF_COUNT 1539 0.74 0.86 0.68 176 NML_ADSP_CUSTOM_MED 1534 0.71 0.86 0.63 177 BOTNET_NORDNS 1533 0.29 0.85 0.01 178 T_TooManySym_02 1528 2.09 0.85 2.72 179 XMClaimOffer 1492 0.33 0.83 0.07 180 TR_XM_Undi_Recip19 1471 0.34 0.82 0.10 181 TR_XM_InvalidRelay 1457 0.29 0.81 0.02 182 RELAYCOUNTRY_IN 1433 0.32 0.80 0.07 183 XM_DIRTYINTL 1419 0.33 0.79 0.09 184 TR_XM_Base64_M1 1387 0.62 0.77 0.54 185 XMBdyGiftCard01 1383 0.82 0.77 0.85 186 TM2_M_A_HREF_HREF 1379 0.41 0.77 0.22 187 XMHTMLBadTable_001 1361 0.42 0.76 0.24 188 XM_UB99 1351 0.26 0.75 0.00 189 TR_Mismatch_TLD_02 1347 0.29 0.75 0.06 190 XM_B_REG_HTML 1342 0.51 0.75 0.38 191 XM_H_Long_From02 1322 0.96 0.74 1.07 192 DKIM_ADSP_NXDOMAIN 1319 0.45 0.74 0.30 193 XMMoneyMeta_00 1308 0.54 0.73 0.45 194 TM2_M_OBFU_COMMENT 1271 0.43 0.71 0.28 195 TR_XM_COVIDMETA4 1245 0.30 0.69 0.11 196 RCVD_IN_IADB_VOUCHED 1243 2.06 0.69 2.75 197 URG_BIZ 1223 0.28 0.68 0.07 198 ANY_BOUNCE_MESSAGE 1208 2.33 0.67 3.17 199 BOUNCE_MESSAGE 1208 2.33 0.67 3.17 200 HTML_FONT_FACE_BAD 1176 0.49 0.66 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 301976 89.32 96.93 85.45 2 RELAYCOUNTRY_US 283938 82.82 87.70 80.35 3 DKIM_SIGNED 266625 81.50 93.42 75.45 4 XM_DK_Pass 261358 79.42 90.19 73.96 5 DKIM_VALID 257341 78.18 88.73 72.82 6 XM_B_Unicode 244023 75.55 88.36 69.05 7 DCC_CHECK_NEGATIVE 223166 49.73 23.28 63.15 8 BAYES_50 210815 51.23 34.63 59.66 9 DKIM_VALID_AU 205784 63.19 72.96 58.23 10 XMListUnsubscribeExists 174728 58.84 77.36 49.45 11 XM_B_SpammyWords 156642 54.75 75.27 44.33 12 XM_B_Unicode3 139839 41.43 45.08 39.57 13 DCC_CHECK 130065 50.24 76.70 36.81 14 RCVD_IN_MSPIKE_H2 109870 32.95 36.62 31.09 15 T_TM2_M_HEADER_IN_MSG 109804 28.57 23.65 31.07 16 DKIM_VALID_EF 103882 28.99 28.19 29.40 17 HTML_FONT_LOW_CONTRAST 98696 32.07 40.24 27.93 18 FVGT_m_MULTI_ODD 89618 29.41 37.40 25.36 19 LOC_TINY_FONT_1 87980 31.27 43.81 24.90 20 XMSubLong 76585 21.67 21.65 21.67 21 T_KAM_HTML_FONT_INVALID 72526 24.48 32.28 20.52 22 MIME_HTML_ONLY 64399 19.91 23.24 18.22 23 XM_B_SpammyWords2 62309 26.34 43.50 17.63 24 ALL_TRUSTED 57686 11.23 1.19 16.32 25 XM_Multi_Part_URI 52384 15.96 18.19 14.82 26 TR_XM_DK_Unsub 46412 15.90 21.35 13.13 27 USER_IN_DEF_DKIM_WL 42779 9.03 2.98 12.11 28 UNPARSEABLE_RELAY 39887 12.10 13.69 11.29 29 XM_B_PhoneNumber 34318 8.29 5.50 9.71 30 BAYES_60 33520 8.77 7.37 9.49 31 BAYES_00 31856 6.34 1.08 9.01 32 TooManyTo_001 31081 7.31 4.39 8.80 33 XM_Evil_Numbers_Gen 28667 8.24 8.50 8.11 34 XM_B_Unsub 27985 9.89 13.78 7.92 35 LotsOfNums_01 27647 7.58 7.10 7.82 36 XM_DKIMWhitelistDomains 26859 5.06 0.05 7.60 37 IN_ZIMBRA_NJ_WHITELIST 24468 4.62 0.08 6.92 38 TR_MAX_INTL_RELAY 24293 9.20 13.78 6.87 39 LOTS_OF_MONEY 23370 10.25 17.41 6.61 40 TR_XM_DK_Bayes 22539 4.54 0.93 6.38 41 TR_XM_BayesUnsub 22365 8.61 13.11 6.33 42 TR_XM_DK_Bayes1 21915 4.32 0.62 6.20 43 XM_DK_Undo_02 20111 20.17 48.70 5.69 44 FSL_BULK_SIG 20030 5.98 6.59 5.67 45 T_TooManySym_01 19966 4.74 2.96 5.65 46 XM_H_GMP 19788 5.25 4.57 5.60 47 RCVD_IN_MSPIKE_WL 19330 4.56 2.78 5.47 48 RCVD_IN_MSPIKE_H3 19329 4.56 2.78 5.47 49 TR_XM_DK_Bayes2 18191 3.57 0.47 5.15 50 BAYES_40 18122 3.90 1.48 5.13 51 XM_H_Long_From01 17898 5.24 5.59 5.06 52 MIME_QP_LONG_LINE 17561 4.43 3.37 4.97 53 RCVD_IN_VALIDITY_SAFE 17321 4.35 3.27 4.90 54 TR_XM_SpammyWords4 16453 8.58 16.31 4.66 55 XM_PDF 15977 3.20 0.61 4.52 56 XMStrtUSub 15966 4.53 4.56 4.52 57 XM_B_SpammyTLD 15711 4.04 3.24 4.45 58 BAYES_99 15461 16.57 40.61 4.38 59 RELAYCOUNTRY_META 15068 7.25 13.15 4.26 60 HTML_IMAGE_RATIO_02 15062 4.85 6.02 4.26 61 XM_B_SpammyWords3 14941 7.68 14.49 4.23 62 BAYES_80 14742 5.62 8.47 4.17 63 RCVD_IN_VALIDITY_CERTIFIED 14497 3.57 2.52 4.10 64 RCVD_IN_IADB_LISTED 13863 3.06 1.35 3.92 65 T_REMOTE_IMAGE 13747 3.19 1.80 3.89 66 XM_UncommonTLD01 13735 4.17 4.72 3.89 67 HTML_IMAGE_RATIO_04 13554 4.31 5.25 3.84 68 XM_B_Phish_Phrases 12589 3.89 4.53 3.56 69 URI_NOVOWEL 12549 2.88 1.56 3.55 70 BAYES_20 12182 2.58 0.88 3.45 71 RCVD_IN_IADB_SPF 12090 2.66 1.15 3.42 72 BAYES_999 11905 13.34 32.98 3.37 73 MPART_ALT_DIFF 11698 4.16 5.83 3.31 74 XMSubMetaSx_00 11577 4.13 5.82 3.28 75 ANY_BOUNCE_MESSAGE 11202 2.33 0.67 3.17 76 BOUNCE_MESSAGE 11200 2.33 0.67 3.17 77 BOTNET_IPINHOSTNAME 10796 6.28 12.64 3.06 78 RCVD_IN_IADB_SENDERID 10632 2.36 1.07 3.01 79 TooManyTo_002 10411 2.17 0.65 2.95 80 MAILING_LIST_MULTI 10370 2.56 1.82 2.93 81 RCVD_IN_IADB_DK 10208 2.27 1.06 2.89 82 XMNumbers 10149 3.30 4.14 2.87 83 XM_Body_Dirty_Words 10085 3.97 6.18 2.85 84 RCVD_IN_IADB_VOUCHED 9721 2.06 0.69 2.75 85 T_TooManySym_02 9600 2.09 0.85 2.72 86 BAYES_95 9542 3.49 5.06 2.70 87 DKIM_INVALID 9284 3.32 4.69 2.63 88 HTML_IMAGE_RATIO_06 9270 3.18 4.26 2.62 89 XM_SPF_SoftFail 8742 3.28 4.87 2.47 90 TR_XM_DKIM_Undo 8463 14.42 38.12 2.39 91 TR_Symld_Words 8290 1.99 1.30 2.35 92 MIME_HTML_MOSTLY 8195 2.84 3.86 2.32 93 TR_XM_SpammyRelay 8099 4.61 9.19 2.29 94 HTML_IMAGE_RATIO_08 7974 2.82 3.92 2.26 95 HTML_MIME_NO_HTML_TAG 7636 1.87 1.28 2.16 96 INVALID_MSGID 7465 1.44 0.11 2.11 97 BAYES_05 7137 1.48 0.42 2.02 98 HELO_NODOT 6967 1.41 0.31 1.97 99 HELO_NO_DOMAIN 6963 1.41 0.31 1.97 100 RCVD_IN_IADB_OPTIN 6877 1.44 0.43 1.95 101 XM_DK_Undo_01 6710 1.73 1.40 1.90 102 TO_MALFORMED 6600 1.24 0.01 1.87 103 XM_CamelCaseFrm001 6501 2.21 2.95 1.84 104 XMDiploma_00 6231 2.04 2.59 1.76 105 MIME_HTML_ONLY_MULTI 6213 2.42 3.72 1.76 106 TooManyTo_003 5992 1.32 0.57 1.70 107 TR_XM_PhishingBody 5894 2.41 3.88 1.67 108 SUBJ_ALL_CAPS 5890 2.15 3.11 1.67 109 XM_B_Unsub2 5817 1.82 2.16 1.65 110 UNTRUSTED_Relay 5769 2.80 5.09 1.63 111 TR_XM_SpammyWords5 5582 2.80 5.21 1.58 112 TR_XM_UnparsRelay 5536 3.64 7.74 1.57 113 XMSexyCombo_05 5520 2.27 3.67 1.56 114 XM_B_Investor 5461 3.07 6.08 1.55 115 FROM_EXCESS_BASE64 5460 1.60 1.69 1.55 116 TM2_M_URI_OPT_OUT 5453 1.92 2.65 1.54 117 T_XMDrugObfuBody_08 5430 2.23 3.61 1.54 118 T_XMDrugObfuBody_14 5368 2.15 3.39 1.52 119 TR_DCC_Bayes_99 5287 11.25 30.46 1.50 120 IN_HORDE_ADDRESS_BOOK 4927 0.95 0.07 1.39 121 KHOP_HELO_FCRDNS 4825 1.35 1.33 1.37 122 XM_SendGrid 4803 1.23 0.97 1.36 123 XM_GoogleGroups 4724 1.08 0.57 1.34 124 TM2_M_VERY_LONG_WORD 4515 1.88 3.07 1.28 125 RELAYCOUNTRY_CA 4467 2.45 4.79 1.26 126 BOTNET 4467 3.51 7.93 1.26 127 TooManyTo_004 4445 1.01 0.52 1.26 128 XMCapTrack 4355 0.97 0.44 1.23 129 XMBrknScrpt_02 4201 2.30 4.48 1.19 130 XM_B_SEO 4171 2.28 4.45 1.18 131 XM_TLDProd2 4146 0.90 0.37 1.17 132 XMStockSpam_06 4067 1.37 1.80 1.15 133 URI_TRY_3LD 4045 1.54 2.31 1.14 134 TVD_SPACE_RATIO 3996 0.79 0.13 1.13 135 XM_OfRef6 3850 2.26 4.56 1.09 136 XM_H_Long_From02 3797 0.96 0.74 1.07 137 TooManyTo_005 3686 0.86 0.50 1.04 138 HTTPS_HTTP_MISMATCH 3564 1.22 1.62 1.01 139 URI_HEX 3563 1.11 1.30 1.01 140 DKIM_ADSP_CUSTOM_MED 3493 1.02 1.09 0.99 141 XM_UB50 3399 1.54 2.68 0.96 142 T_FILL_THIS_FORM_SHORT 3353 1.33 2.09 0.95 143 T_TooManySym_03 3352 0.73 0.29 0.95 144 TR_XM_DK_SendGrid 3196 0.82 0.64 0.90 145 TR_LOTS_OF_MONEY3 3190 2.88 6.77 0.90 146 XMGappySubj_01 3148 0.67 0.24 0.89 147 XM_B_DNDMA 3080 0.80 0.65 0.87 148 SpammyFromTLD_01 3015 1.04 1.42 0.85 149 XMBdyGiftCard01 2988 0.82 0.77 0.85 150 XM_ShortIntro_01 2983 0.69 0.39 0.84 151 XMGenDplmaNmb 2974 1.04 1.42 0.84 152 HTML_IMAGE_ONLY_32 2902 0.59 0.12 0.82 153 TR_XM_SEO4 2791 1.90 4.08 0.79 154 RELAYCOUNTRY_AU 2711 1.30 2.34 0.77 155 XM_H_PHPMailer 2697 0.70 0.56 0.76 156 T_XMDrugObfuBody_00 2690 0.99 1.45 0.76 157 XMSubMetaSxObfu_03 2659 0.66 0.48 0.75 158 XM_ProductURIs 2603 0.84 1.03 0.74 159 XMBody_17 2571 2.55 6.14 0.73 160 XMPhish30 2568 0.85 1.10 0.73 161 XMNoVowels 2543 0.64 0.49 0.72 162 XMSubMetaI_00 2530 0.90 1.25 0.72 163 FROM_GOV_DKIM_AU 2522 0.58 0.33 0.71 164 XMBody_95 2521 0.53 0.16 0.71 165 T_OBFU_PDF_ATTACH 2490 0.50 0.11 0.70 166 T_XMHurry_00 2462 1.81 4.01 0.70 167 XM_B_SpammyWords4 2454 1.20 2.20 0.69 168 MPART_ALT_DIFF_COUNT 2409 0.74 0.86 0.68 169 RCVD_IN_BL_SPAMCOP_NET 2400 3.00 7.58 0.68 170 TO_NO_BRKTS_HTML_ONLY 2328 0.49 0.16 0.66 171 TR_XM_SpammyWords2 2290 6.21 17.17 0.65 172 TR_MetaPhish_Combo_01 2281 0.74 0.94 0.65 173 XM_RXBody 2245 0.51 0.27 0.64 174 NML_ADSP_CUSTOM_MED 2236 0.71 0.86 0.63 175 XMLngstWrd_00 2204 0.57 0.47 0.62 176 HTML_TAG_BALANCE_BODY 2135 1.06 1.95 0.60 177 FORGED_GMAIL_RCVD 2070 0.68 0.86 0.59 178 SHORT_HELO_AND_INLINE_IMAGE 2062 0.40 0.05 0.58 179 LOW_PRICE 2049 0.48 0.30 0.58 180 HTML_IMAGE_ONLY_20 2033 0.47 0.25 0.58 181 XM_B_FormFill 1980 0.38 0.04 0.56 182 TR_XM_PHPForged 1957 0.77 1.21 0.55 183 TR_XM_FormFill2 1957 0.76 1.16 0.55 184 TR_XM_PHPDW 1949 0.77 1.19 0.55 185 USER_IN_WELCOMELIST 1923 0.36 0.00 0.54 186 USER_IN_WHITELIST 1923 0.36 0.00 0.54 187 XM_H_PHPOS 1909 0.75 1.16 0.54 188 TR_XM_Base64_M1 1906 0.62 0.77 0.54 189 XMGappySubj_02 1870 0.38 0.09 0.53 190 THIS_AD 1800 0.79 1.33 0.51 191 T_TVD_MIME_NO_HEADERS 1647 0.32 0.02 0.47 192 RELAYCOUNTRY_GB 1645 0.50 0.58 0.47 193 TVD_RCVD_IP 1638 0.63 0.97 0.46 194 FILL_THIS_FORM 1637 0.40 0.27 0.46 195 XMOemUri 1615 0.41 0.32 0.46 196 MSGID_FROM_MTA_HEADER 1614 0.33 0.07 0.46 197 MISSING_HEADERS 1613 0.48 0.53 0.46 198 T_MANY_PILL_PRICE 1587 0.30 0.00 0.45 199 XMMoneyMeta_00 1586 0.54 0.73 0.45 200 XMLngstWrd_01 1564 0.43 0.41 0.44 ----------------------------------------------------------------------