Email: 597861 Autolearn: 0 AvgScore: 3.10 AvgScanTime: 1.55 sec Spam: 187055 Autolearn: 0 AvgScore: 14.50 AvgScanTime: 1.74 sec Ham: 410806 Autolearn: 0 AvgScore: -2.09 AvgScanTime: 1.46 sec Time Spent Running SA: 256.74 hours Time Spent Processing Spam: 90.47 hours Time Spent Processing Ham: 166.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 179599 89.96 96.01 87.20 2 DKIM_SIGNED 168821 74.98 90.25 68.02 3 XM_DK_Pass 162261 73.06 86.75 66.84 4 RELAYCOUNTRY_US 161007 84.08 86.07 83.17 5 DKIM_VALID 159922 72.03 85.49 65.91 6 XM_B_Unicode 157363 76.41 84.13 72.90 7 DCC_CHECK 141041 48.47 75.40 36.21 8 XMListUnsubscribeExists 133891 53.18 71.58 44.81 9 XM_B_SpammyWords 131786 53.31 70.45 45.50 10 DKIM_VALID_AU 126368 58.14 67.56 53.85 11 XM_B_Unicode3 87182 45.33 46.61 44.75 12 LOC_TINY_FONT_1 86620 30.95 46.31 23.96 13 XM_DK_Undo_02 80591 16.69 43.08 4.67 14 HTML_FONT_LOW_CONTRAST 76924 30.90 41.12 26.25 15 BAYES_50 75077 52.83 40.14 58.61 16 XM_B_SpammyWords2 74951 24.52 40.07 17.44 17 RCVD_IN_MSPIKE_H2 71675 30.68 38.32 27.20 18 FVGT_m_MULTI_ODD 64187 25.43 34.31 21.38 19 BAYES_99 62490 12.47 33.41 2.94 20 TR_XM_DKIM_Undo 56811 10.92 30.37 2.06 21 T_KAM_HTML_FONT_INVALID 56275 22.60 30.08 19.19 22 MIME_HTML_ONLY 53423 24.37 28.56 22.46 23 DKIM_VALID_EF 52039 26.04 27.82 25.24 24 BAYES_999 50652 10.01 27.08 2.23 25 TR_DCC_Bayes_99 44698 8.25 23.90 1.13 26 XMSubLong 44324 23.37 23.70 23.22 27 DCC_CHECK_NEGATIVE 43268 51.05 23.13 63.76 28 T_TM2_M_HEADER_IN_MSG 41371 24.74 22.12 25.94 29 XM_Multi_Part_URI 39793 16.20 21.27 13.89 30 TR_XM_DK_Unsub 36453 13.59 19.49 10.91 31 XM_B_Unsub 34007 10.97 18.18 7.68 32 UNPARSEABLE_RELAY 33404 11.88 17.86 9.15 33 TR_XM_BayesUnsub 32764 9.58 17.52 5.97 34 XM_B_SpammyWords3 27245 7.72 14.57 4.60 35 LOTS_OF_MONEY 26856 8.89 14.36 6.39 36 TR_MAX_INTL_RELAY 24579 7.61 13.14 5.09 37 TR_XM_SpammyWords4 24280 7.17 12.98 4.53 38 RELAYCOUNTRY_META 24239 6.58 12.96 3.68 39 BOTNET_IPINHOSTNAME 24021 6.10 12.84 3.04 40 TR_XM_SpammyWords2 20714 3.73 11.07 0.39 41 TR_XM_SpammyRelay 17762 4.29 9.50 1.92 42 XM_Evil_Numbers_Gen 17686 9.77 9.45 9.91 43 BOTNET 16929 3.71 9.05 1.28 44 TR_XM_UnparsRelay 16865 3.69 9.02 1.26 45 RCVD_IN_BL_SPAMCOP_NET 16850 3.42 9.01 0.88 46 FSL_BULK_SIG 15754 6.76 8.42 6.01 47 XM_B_PhoneNumber 15324 8.26 8.19 8.30 48 BAYES_80 15259 4.71 8.16 3.14 49 BAYES_60 14463 7.47 7.73 7.36 50 XMSubMetaSx_00 14255 4.39 7.62 2.92 51 XM_Body_Dirty_Words 13934 4.04 7.45 2.49 52 HTML_IMAGE_RATIO_02 13714 5.32 7.33 4.41 53 TR_XM_SPAMCOP 13599 2.58 7.27 0.45 54 LotsOfNums_01 13465 7.15 7.20 7.13 55 XMSexyCombo_05 11516 2.67 6.16 1.08 56 XM_H_Long_From01 11449 5.19 6.12 4.76 57 TooManyTo_001 10961 6.86 5.86 7.31 58 XM_UncommonTLD01 10507 4.05 5.62 3.34 59 UNTRUSTED_Relay 10434 2.63 5.58 1.29 60 XM_B_Phish_Phrases 10147 4.42 5.42 3.96 61 MPART_ALT_DIFF 9979 7.88 5.33 9.03 62 XM_B_SEO 9847 2.32 5.26 0.98 63 HTML_IMAGE_RATIO_04 9661 11.24 5.16 14.00 64 DKIM_INVALID 8899 2.94 4.76 2.12 65 RELAYCOUNTRY_CA 8825 2.12 4.72 0.93 66 XMBody_17 8719 1.82 4.66 0.52 67 BAYES_95 8698 2.79 4.65 1.94 68 XM_B_Investor 8565 2.36 4.58 1.35 69 TR_XM_SEO4 8406 1.83 4.49 0.62 70 XM_SPF_SoftFail 8355 2.48 4.47 1.57 71 XMStrtUSub 8305 8.96 4.44 11.02 72 TR_LOTS_OF_MONEY3 7838 1.88 4.19 0.82 73 XM_H_GMP 7830 4.49 4.19 4.64 74 TR_XM_PhishingBody 7350 2.41 3.93 1.72 75 XM_OfRef6 7314 1.79 3.91 0.83 76 TR_XM_SpammyWords5 7292 2.56 3.90 1.95 77 HTML_IMAGE_RATIO_06 7278 4.47 3.89 4.74 78 XM_B_SpammyTLD 7084 3.96 3.79 4.04 79 XMBrknScrpt_02 6779 1.98 3.62 1.23 80 XMNumbers 6697 2.96 3.58 2.68 81 HTML_IMAGE_RATIO_08 6513 2.56 3.48 2.14 82 T_XMDrugObfuBody_14 6438 2.11 3.44 1.50 83 MIME_QP_LONG_LINE 6319 4.33 3.38 4.76 84 XM_CamelCaseFrm001 5994 2.55 3.20 2.25 85 MIME_HTML_ONLY_MULTI 5978 5.99 3.20 7.26 86 XM_B_SpammyWords4 5943 1.45 3.18 0.66 87 MIME_HTML_MOSTLY 5908 2.54 3.16 2.26 88 RCVD_IN_MSPIKE_H3 5837 4.44 3.12 5.04 89 RCVD_IN_MSPIKE_WL 5837 4.44 3.12 5.04 90 XM_URI_RBL 5602 1.23 2.99 0.42 91 XM_B_Unsub2 5591 1.98 2.99 1.52 92 XMDiploma_00 5532 1.96 2.96 1.51 93 TM2_M_VERY_LONG_WORD 5476 1.72 2.93 1.17 94 XM_UB50 5368 1.47 2.87 0.84 95 TM2_M_URI_OPT_OUT 5336 2.03 2.85 1.66 96 T_XMDrugObfuBody_08 5283 1.73 2.82 1.24 97 T_XMHurry_00 5241 1.58 2.80 1.02 98 XM_B_URI_Unicode 5076 1.98 2.71 1.65 99 SUBJ_ALL_CAPS 5046 2.16 2.70 1.92 100 RCVD_IN_VALIDITY_RPBL 4566 0.83 2.44 0.10 101 USER_IN_DEF_DKIM_WL 4477 9.69 2.39 13.01 102 TR_XM_FormFill 4466 0.76 2.39 0.02 103 TooManyTo_002 4257 2.07 2.28 1.98 104 T_TooManySym_01 4142 4.09 2.21 4.94 105 RCVD_IN_VALIDITY_SAFE 4060 3.93 2.17 4.72 106 RELAYCOUNTRY_AU 3955 1.20 2.11 0.78 107 SpammyFromTLD_01 3874 1.17 2.07 0.76 108 MAILING_LIST_MULTI 3744 2.64 2.00 2.92 109 XM_DK_Undo_01 3630 1.71 1.94 1.61 110 FROM_EXCESS_BASE64 3609 1.90 1.93 1.88 111 TR_XM_NoHeaderRelay 3512 0.66 1.88 0.11 112 XMStockSpam_06 3440 1.64 1.84 1.56 113 TR_LOTS_OF_MONEY2 3426 0.72 1.83 0.21 114 T_MONEY_PERCENT 3426 0.72 1.83 0.21 115 XM_B_FormFill 3390 0.67 1.81 0.15 116 URI_HEX 3366 1.29 1.80 1.05 117 BAYES_40 3288 4.12 1.76 5.19 118 XM_Appointment_Request 3253 0.55 1.74 0.01 119 SpammyFromTLD_02 3231 0.81 1.73 0.39 120 XMSubMetaI_00 3152 1.16 1.69 0.92 121 T_XMDrugObfuBody_00 3032 0.98 1.62 0.69 122 XMGenDplmaNmb 3031 1.05 1.62 0.79 123 XMBdyGiftCard01 3026 1.25 1.62 1.08 124 T_REMOTE_IMAGE 2966 2.60 1.59 3.06 125 HTML_MIME_NO_HTML_TAG 2795 1.77 1.49 1.89 126 T_FILL_THIS_FORM_SHORT 2740 1.10 1.46 0.94 127 SHORTCIRCUIT 2727 0.46 1.46 0.00 128 RCVD_IN_ZEN_LASTEXTERNAL 2727 0.46 1.46 0.00 129 RCVD_IN_VALIDITY_CERTIFIED 2714 3.17 1.45 3.95 130 RCVD_IN_IADB_LISTED 2649 2.62 1.42 3.16 131 XM_SendGrid 2626 1.30 1.40 1.25 132 URI_NOVOWEL 2602 2.46 1.39 2.94 133 HTTPS_HTTP_MISMATCH 2599 0.96 1.39 0.77 134 XM_H_Long_From02 2471 1.03 1.32 0.90 135 XM_B_Phish66 2440 0.59 1.30 0.27 136 THIS_AD 2412 0.69 1.29 0.41 137 SHOPIFY_IMG_NOT_RCVD_SFY 2411 0.50 1.29 0.14 138 BAYES_20 2360 2.87 1.26 3.60 139 RCVD_IN_IADB_SPF 2333 2.32 1.25 2.81 140 TR_XM_INV_DKIM 2269 0.42 1.21 0.05 141 XM_B_REG_HTML 2201 0.45 1.18 0.12 142 RCVD_IN_IADB_SENDERID 2171 2.09 1.16 2.52 143 RCVD_IN_IADB_DK 2149 2.04 1.15 2.45 144 TR_Symld_Words 2128 1.41 1.14 1.53 145 XM_B_COPY_HTML 2115 0.74 1.13 0.56 146 XMSexyCombo_01 2097 0.57 1.12 0.32 147 AC_BR_BONANZA 2053 0.40 1.10 0.09 148 XMPhish30 2036 0.77 1.09 0.62 149 TR_XM_PHPForged 2018 0.66 1.08 0.47 150 TR_XM_PHPDW 1989 0.66 1.06 0.48 151 URI_TRY_3LD 1978 0.85 1.06 0.76 152 ALL_TRUSTED 1974 10.04 1.06 14.12 153 KHOP_HELO_FCRDNS 1950 1.09 1.04 1.11 154 TR_XM_FormFill2 1939 0.65 1.04 0.48 155 XMHTMLBadTable_001 1932 0.49 1.03 0.24 156 XM_H_PHPOS 1922 0.64 1.03 0.47 157 XM_H_Undi_Recip 1906 0.44 1.02 0.17 158 HDRS_MISSP 1901 0.34 1.02 0.04 159 LongTLD 1888 0.56 1.01 0.35 160 DKIM_ADSP_CUSTOM_MED 1882 0.80 1.01 0.70 161 RELAYCOUNTRY_FR 1879 0.49 1.00 0.26 162 HTML_TAG_BALANCE_BODY 1863 0.70 1.00 0.56 163 TR_MetaPhish_Combo_01 1823 0.72 0.97 0.60 164 TR_XM_InvalidRelay 1816 0.32 0.97 0.02 165 XMHTML_After_End 1794 0.49 0.96 0.28 166 XM_DIRTYINTL 1794 0.49 0.96 0.28 167 DIET_1 1784 0.49 0.95 0.28 168 TR_Caps_n_Bayes_99 1784 0.32 0.95 0.03 169 XM_UB99 1733 0.29 0.93 0.00 170 BOTNET_NORDNS 1713 0.29 0.92 0.00 171 T_Symld_Words_02 1689 1.03 0.90 1.08 172 XM_ProductURIs 1683 0.81 0.90 0.77 173 MPART_ALT_DIFF_COUNT 1667 0.56 0.89 0.41 174 XM_HighProb1 1649 0.28 0.88 0.01 175 XMMoneyMeta_00 1622 0.54 0.87 0.40 176 TR_Mismatch_TLD_02 1608 0.31 0.86 0.06 177 XM_OfRef7 1560 0.32 0.83 0.09 178 TM2_M_OBFU_COMMENT 1528 0.60 0.82 0.50 179 NML_ADSP_CUSTOM_MED 1526 0.59 0.82 0.48 180 XMPhish14 1509 0.56 0.81 0.45 181 XMReplyNow 1499 0.40 0.80 0.22 182 RDNS_DYNAMIC 1483 0.47 0.79 0.32 183 TR_XM_DK_SendGrid 1479 0.81 0.79 0.82 184 PDS_RDNS_DYNAMIC_FP 1459 0.38 0.78 0.19 185 TR_XM_Undi_Recip19 1451 0.29 0.78 0.07 186 T_STY_INVIS_DIRECT 1434 0.45 0.77 0.30 187 XMSubMetaSxObfu_02 1434 0.35 0.77 0.16 188 XMSolicitRefs_0 1413 0.51 0.76 0.40 189 XM_B_DNDMA 1404 0.62 0.75 0.55 190 XM_B_COVIDMETA 1390 0.36 0.74 0.18 191 HOSTED_IMG_MULTI_PUB_01 1389 0.25 0.74 0.03 192 BAYES_05 1388 2.33 0.74 3.05 193 XMClaimOffer 1387 0.42 0.74 0.28 194 TR_XM_Base64_M1 1376 0.59 0.74 0.52 195 TM2_M_A_HREF_HREF 1370 0.36 0.73 0.19 196 ANY_BOUNCE_MESSAGE 1341 2.28 0.72 2.99 197 BOUNCE_MESSAGE 1341 2.28 0.72 2.99 198 RCVD_IN_IADB_VOUCHED 1332 1.61 0.71 2.02 199 BAYES_00 1297 9.96 0.69 14.18 200 XM_RXBody 1293 0.33 0.69 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 358217 89.96 96.01 87.20 2 RELAYCOUNTRY_US 341659 84.08 86.07 83.17 3 XM_B_Unicode 299476 76.41 84.13 72.90 4 DKIM_SIGNED 279439 74.98 90.25 68.02 5 XM_DK_Pass 274566 73.06 86.75 66.84 6 DKIM_VALID 270747 72.03 85.49 65.91 7 DCC_CHECK_NEGATIVE 261914 51.05 23.13 63.76 8 BAYES_50 240753 52.83 40.14 58.61 9 DKIM_VALID_AU 221203 58.14 67.56 53.85 10 XM_B_SpammyWords 186928 53.31 70.45 45.50 11 XMListUnsubscribeExists 184077 53.18 71.58 44.81 12 XM_B_Unicode3 183846 45.33 46.61 44.75 13 DCC_CHECK 148743 48.47 75.40 36.21 14 RCVD_IN_MSPIKE_H2 111758 30.68 38.32 27.20 15 HTML_FONT_LOW_CONTRAST 107822 30.90 41.12 26.25 16 T_TM2_M_HEADER_IN_MSG 106566 24.74 22.12 25.94 17 DKIM_VALID_EF 103673 26.04 27.82 25.24 18 LOC_TINY_FONT_1 98422 30.95 46.31 23.96 19 XMSubLong 95380 23.37 23.70 23.22 20 MIME_HTML_ONLY 92266 24.37 28.56 22.46 21 FVGT_m_MULTI_ODD 87828 25.43 34.31 21.38 22 T_KAM_HTML_FONT_INVALID 78837 22.60 30.08 19.19 23 XM_B_SpammyWords2 71634 24.52 40.07 17.44 24 BAYES_00 58233 9.96 0.69 14.18 25 ALL_TRUSTED 58024 10.04 1.06 14.12 26 HTML_IMAGE_RATIO_04 57526 11.24 5.16 14.00 27 XM_Multi_Part_URI 57079 16.20 21.27 13.89 28 USER_IN_DEF_DKIM_WL 53447 9.69 2.39 13.01 29 HTML_FONT_FACE_BAD 50392 8.63 0.65 12.27 30 XM_H_Trusted_IP 47437 7.93 0.00 11.55 31 XMStrtUSub 45282 8.96 4.44 11.02 32 TR_XM_DK_Unsub 44820 13.59 19.49 10.91 33 XM_Evil_Numbers_Gen 40712 9.77 9.45 9.91 34 UNPARSEABLE_RELAY 37594 11.88 17.86 9.15 35 MPART_ALT_DIFF 37114 7.88 5.33 9.03 36 XM_B_PhoneNumber 34081 8.26 8.19 8.30 37 XM_B_Unsub 31562 10.97 18.18 7.68 38 BAYES_60 30223 7.47 7.73 7.36 39 TooManyTo_001 30050 6.86 5.86 7.31 40 MIME_HTML_ONLY_MULTI 29835 5.99 3.20 7.26 41 TR_XM_DK_Bayes 29630 5.13 0.57 7.21 42 LotsOfNums_01 29274 7.15 7.20 7.13 43 TR_XM_DK_Bayes1 29172 5.05 0.56 7.10 44 XM_DKIMWhitelistDomains 27417 4.60 0.04 6.67 45 LOTS_OF_MONEY 26270 8.89 14.36 6.39 46 IN_ZIMBRA_NJ_WHITELIST 25148 4.24 0.10 6.12 47 TR_XM_DK_Bayes2 25040 4.32 0.41 6.10 48 FSL_BULK_SIG 24678 6.76 8.42 6.01 49 TR_XM_BayesUnsub 24527 9.58 17.52 5.97 50 BAYES_40 21329 4.12 1.76 5.19 51 TR_MAX_INTL_RELAY 20898 7.61 13.14 5.09 52 RCVD_IN_MSPIKE_WL 20707 4.44 3.12 5.04 53 RCVD_IN_MSPIKE_H3 20707 4.44 3.12 5.04 54 T_TooManySym_01 20295 4.09 2.21 4.94 55 XM_H_Long_From01 19571 5.19 6.12 4.76 56 MIME_QP_LONG_LINE 19560 4.33 3.38 4.76 57 HTML_IMAGE_RATIO_06 19471 4.47 3.89 4.74 58 RCVD_IN_VALIDITY_SAFE 19407 3.93 2.17 4.72 59 XM_DK_Undo_02 19172 16.69 43.08 4.67 60 XM_H_GMP 19043 4.49 4.19 4.64 61 XM_B_SpammyWords3 18912 7.72 14.57 4.60 62 TR_XM_SpammyWords4 18602 7.17 12.98 4.53 63 HTML_IMAGE_RATIO_02 18111 5.32 7.33 4.41 64 XMSubNoVowel 16660 2.85 0.21 4.06 65 XM_B_SpammyTLD 16585 3.96 3.79 4.04 66 XM_PDF 16577 2.93 0.50 4.04 67 XM_B_Phish_Phrases 16260 4.42 5.42 3.96 68 RCVD_IN_VALIDITY_CERTIFIED 16229 3.17 1.45 3.95 69 RELAYCOUNTRY_META 15110 6.58 12.96 3.68 70 BAYES_20 14771 2.87 1.26 3.60 71 XM_UncommonTLD01 13735 4.05 5.62 3.34 72 RCVD_IN_IADB_LISTED 12998 2.62 1.42 3.16 73 BAYES_80 12899 4.71 8.16 3.14 74 T_REMOTE_IMAGE 12587 2.60 1.59 3.06 75 BAYES_05 12513 2.33 0.74 3.05 76 BOTNET_IPINHOSTNAME 12470 6.10 12.84 3.04 77 ANY_BOUNCE_MESSAGE 12269 2.28 0.72 2.99 78 BOUNCE_MESSAGE 12268 2.28 0.72 2.99 79 BAYES_99 12088 12.47 33.41 2.94 80 URI_NOVOWEL 12087 2.46 1.39 2.94 81 MAILING_LIST_MULTI 12016 2.64 2.00 2.92 82 XMSubMetaSx_00 11996 4.39 7.62 2.92 83 RCVD_IN_IADB_SPF 11536 2.32 1.25 2.81 84 XMNumbers 11012 2.96 3.58 2.68 85 RCVD_IN_IADB_SENDERID 10343 2.09 1.16 2.52 86 XM_Body_Dirty_Words 10213 4.04 7.45 2.49 87 RCVD_IN_IADB_DK 10059 2.04 1.15 2.45 88 T_TooManySym_02 9934 1.87 0.67 2.42 89 MIME_HTML_MOSTLY 9269 2.54 3.16 2.26 90 XM_CamelCaseFrm001 9223 2.55 3.20 2.25 91 BAYES_999 9168 10.01 27.08 2.23 92 HTML_IMAGE_RATIO_08 8809 2.56 3.48 2.14 93 DKIM_INVALID 8692 2.94 4.76 2.12 94 TR_XM_DKIM_Undo 8460 10.92 30.37 2.06 95 RCVD_IN_IADB_VOUCHED 8305 1.61 0.71 2.02 96 XMSubLongNoVowel 8193 1.39 0.06 1.99 97 TooManyTo_002 8131 2.07 2.28 1.98 98 XMSubGarbage 8013 1.35 0.04 1.95 99 TR_XM_SpammyWords5 7992 2.56 3.90 1.95 100 BAYES_95 7990 2.79 4.65 1.94 101 TR_XM_SpammyRelay 7890 4.29 9.50 1.92 102 SUBJ_ALL_CAPS 7871 2.16 2.70 1.92 103 HTML_MIME_NO_HTML_TAG 7764 1.77 1.49 1.89 104 FROM_EXCESS_BASE64 7728 1.90 1.93 1.88 105 INVALID_MSGID 7660 1.34 0.18 1.86 106 TR_XM_PhishingBody 7065 2.41 3.93 1.72 107 TM2_M_URI_OPT_OUT 6812 2.03 2.85 1.66 108 XM_B_URI_Unicode 6777 1.98 2.71 1.65 109 XM_DK_Undo_01 6614 1.71 1.94 1.61 110 TO_MALFORMED 6511 1.09 0.01 1.58 111 XM_SPF_SoftFail 6462 2.48 4.47 1.57 112 XMStockSpam_06 6392 1.64 1.84 1.56 113 TR_Symld_Words 6296 1.41 1.14 1.53 114 XM_B_Unsub2 6262 1.98 2.99 1.52 115 XMDiploma_00 6192 1.96 2.96 1.51 116 T_XMDrugObfuBody_14 6153 2.11 3.44 1.50 117 RCVD_IN_IADB_OPTIN 5807 1.12 0.48 1.41 118 XM_B_Investor 5539 2.36 4.58 1.35 119 TooManyTo_003 5437 1.05 0.45 1.32 120 UNTRUSTED_Relay 5300 2.63 5.58 1.29 121 BOTNET 5265 3.71 9.05 1.28 122 TR_XM_UnparsRelay 5169 3.69 9.02 1.26 123 XM_SendGrid 5136 1.30 1.40 1.25 124 T_XMDrugObfuBody_08 5082 1.73 2.82 1.24 125 IN_HORDE_ADDRESS_BOOK 5069 0.88 0.10 1.23 126 XMBrknScrpt_02 5039 1.98 3.62 1.23 127 XMGappySubj_01 5015 0.96 0.37 1.22 128 TM2_M_VERY_LONG_WORD 4797 1.72 2.93 1.17 129 TR_DCC_Bayes_99 4623 8.25 23.90 1.13 130 KHOP_HELO_FCRDNS 4554 1.09 1.04 1.11 131 XMSexyCombo_05 4456 2.67 6.16 1.08 132 T_Symld_Words_02 4454 1.03 0.90 1.08 133 XMBdyGiftCard01 4445 1.25 1.62 1.08 134 TVD_SPACE_RATIO 4374 0.76 0.10 1.06 135 XM_TLDProd2 4334 0.79 0.20 1.05 136 URI_HEX 4324 1.29 1.80 1.05 137 XM_GoogleGroups 4265 0.89 0.57 1.04 138 T_XMHurry_00 4178 1.58 2.80 1.02 139 HELO_NODOT 4029 0.77 0.31 0.98 140 HELO_NO_DOMAIN 4024 0.77 0.31 0.98 141 XM_B_SEO 4022 2.32 5.26 0.98 142 TooManyTo_004 3978 0.80 0.42 0.97 143 XMCapTrack 3970 0.82 0.51 0.97 144 T_FILL_THIS_FORM_SHORT 3864 1.10 1.46 0.94 145 RELAYCOUNTRY_CA 3820 2.12 4.72 0.93 146 T_TooManySym_03 3808 0.71 0.24 0.93 147 XMSubMetaI_00 3767 1.16 1.69 0.92 148 XM_H_Long_From02 3686 1.03 1.32 0.90 149 FROM_GOV_DKIM_AU 3641 0.71 0.33 0.89 150 XM_E_Blogspot 3623 0.68 0.23 0.88 151 RCVD_IN_BL_SPAMCOP_NET 3622 3.42 9.01 0.88 152 XM_UB50 3433 1.47 2.87 0.84 153 XM_OfRef6 3394 1.79 3.91 0.83 154 TR_LOTS_OF_MONEY3 3372 1.88 4.19 0.82 155 TR_XM_DK_SendGrid 3355 0.81 0.79 0.82 156 TooManyTo_005 3308 0.68 0.40 0.81 157 XMGenDplmaNmb 3259 1.05 1.62 0.79 158 RELAYCOUNTRY_AU 3197 1.20 2.11 0.78 159 T_OBFU_PDF_ATTACH 3190 0.57 0.10 0.78 160 XM_ProductURIs 3170 0.81 0.90 0.77 161 HTTPS_HTTP_MISMATCH 3150 0.96 1.39 0.77 162 URI_TRY_3LD 3127 0.85 1.06 0.76 163 SpammyFromTLD_01 3127 1.17 2.07 0.76 164 XMGappySubj_02 2982 0.54 0.12 0.73 165 DKIM_ADSP_CUSTOM_MED 2881 0.80 1.01 0.70 166 XMNoVowels 2848 0.59 0.36 0.69 167 T_XMDrugObfuBody_00 2842 0.98 1.62 0.69 168 PLING_QUERY 2825 0.68 0.66 0.69 169 XM_B_SpammyWords4 2707 1.45 3.18 0.66 170 XM_ShortIntro_01 2617 0.56 0.40 0.64 171 TR_XM_SEO4 2549 1.83 4.49 0.62 172 XMPhish30 2543 0.77 1.09 0.62 173 XM_H_PHPMailer 2538 0.59 0.53 0.62 174 TR_MetaPhish_Combo_01 2469 0.72 0.97 0.60 175 XMBody_95 2438 0.50 0.28 0.59 176 HTML_TAG_BALANCE_BODY 2319 0.70 1.00 0.56 177 RCVD_IN_PBL 2312 0.58 0.63 0.56 178 XM_B_COPY_HTML 2309 0.74 1.13 0.56 179 XM_B_DNDMA 2279 0.62 0.75 0.55 180 XMLngstWrd_00 2141 0.49 0.41 0.52 181 XMBody_17 2141 1.82 4.66 0.52 182 TR_XM_Base64_M1 2129 0.59 0.74 0.52 183 TM2_M_OBFU_COMMENT 2050 0.60 0.82 0.50 184 TR_XM_PHPDW 1979 0.66 1.06 0.48 185 NML_ADSP_CUSTOM_MED 1976 0.59 0.82 0.48 186 TR_XM_FormFill2 1965 0.65 1.04 0.48 187 TR_XM_PHPForged 1946 0.66 1.08 0.47 188 XM_H_PHPOS 1924 0.64 1.03 0.47 189 RELAYCOUNTRY_GB 1864 0.52 0.68 0.45 190 TR_XM_SPAMCOP 1852 2.58 7.27 0.45 191 XMPhish14 1851 0.56 0.81 0.45 192 XMLngstWrd_01 1839 0.43 0.39 0.45 193 HTML_IMAGE_ONLY_32 1820 0.40 0.31 0.44 194 TVD_RCVD_IP 1808 0.51 0.66 0.44 195 HTML_IMAGE_ONLY_20 1731 0.50 0.66 0.42 196 TM2_M_BODY_EMPTY 1730 0.30 0.04 0.42 197 XM_URI_RBL 1729 1.23 2.99 0.42 198 THIS_AD 1700 0.69 1.29 0.41 199 HTML_IMAGE_ONLY_28 1700 0.40 0.37 0.41 200 MPART_ALT_DIFF_COUNT 1676 0.56 0.89 0.41 ----------------------------------------------------------------------