Email: 556607 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 1.67 sec Spam: 160041 Autolearn: 0 AvgScore: 14.42 AvgScanTime: 1.95 sec Ham: 396566 Autolearn: 0 AvgScore: -1.93 AvgScanTime: 1.56 sec Time Spent Running SA: 258.13 hours Time Spent Processing Spam: 86.70 hours Time Spent Processing Ham: 171.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 153021 90.14 95.61 87.93 2 DKIM_SIGNED 143375 75.09 89.59 69.24 3 XM_DK_Pass 138053 73.36 86.26 68.16 4 DKIM_VALID 136214 72.39 85.11 67.26 5 XM_B_Unicode 134148 77.09 83.82 74.37 6 RELAYCOUNTRY_US 133681 83.65 83.53 83.71 7 DCC_CHECK 118477 47.77 74.03 37.17 8 XM_B_SpammyWords 112749 52.68 70.45 45.51 9 XMListUnsubscribeExists 112504 53.48 70.30 46.70 10 DKIM_VALID_AU 107647 58.31 67.26 54.70 11 XM_B_Unicode3 79897 46.84 49.92 45.60 12 LOC_TINY_FONT_1 76426 31.11 47.75 24.40 13 BAYES_50 68791 54.27 42.98 58.83 14 XM_B_SpammyWords2 65295 24.85 40.80 18.42 15 XM_DK_Undo_02 61330 14.51 38.32 4.91 16 HTML_FONT_LOW_CONTRAST 60421 29.52 37.75 26.20 17 RCVD_IN_MSPIKE_H2 60383 32.74 37.73 30.73 18 FVGT_m_MULTI_ODD 53345 25.75 33.33 22.70 19 T_KAM_HTML_FONT_INVALID 48728 22.36 30.45 19.10 20 BAYES_99 46773 10.74 29.23 3.28 21 MIME_HTML_ONLY 46411 23.76 29.00 21.65 22 DKIM_VALID_EF 44889 26.45 28.05 25.80 23 TR_XM_DKIM_Undo 43401 9.49 27.12 2.37 24 XMSubLong 40905 22.31 25.56 20.99 25 DCC_CHECK_NEGATIVE 38856 51.72 24.28 62.79 26 XM_Multi_Part_URI 37098 17.28 23.18 14.90 27 T_TM2_M_HEADER_IN_MSG 36976 24.91 23.10 25.64 28 BAYES_999 36028 8.20 22.51 2.43 29 TR_DCC_Bayes_99 32106 6.73 20.06 1.34 30 TR_XM_DK_Unsub 30539 13.72 19.08 11.56 31 XM_B_Unsub 28282 10.48 17.67 7.58 32 UNPARSEABLE_RELAY 27968 12.01 17.48 9.81 33 TR_XM_BayesUnsub 26950 9.16 16.84 6.06 34 RELAYCOUNTRY_META 25010 7.01 15.63 3.54 35 XM_B_SpammyWords3 23731 7.83 14.83 5.01 36 TR_MAX_INTL_RELAY 22656 7.79 14.16 5.22 37 BOTNET_IPINHOSTNAME 21555 6.09 13.47 3.11 38 LOTS_OF_MONEY 20722 7.49 12.95 5.28 39 TR_XM_SpammyWords4 18586 5.90 11.61 3.59 40 TR_XM_SpammyRelay 18215 4.77 11.38 2.11 41 XM_Evil_Numbers_Gen 17453 9.90 10.91 9.50 42 TR_XM_SpammyWords2 15850 3.31 9.90 0.64 43 BOTNET 14749 3.64 9.22 1.39 44 XM_B_Phish_Phrases 14414 5.97 9.01 4.74 45 BAYES_80 14130 4.86 8.83 3.26 46 TR_XM_UnparsRelay 13902 3.52 8.69 1.44 47 FSL_BULK_SIG 13358 6.71 8.35 6.05 48 HTML_IMAGE_RATIO_02 13137 5.97 8.21 5.07 49 LotsOfNums_01 13022 7.82 8.14 7.69 50 XM_Body_Dirty_Words 12813 4.24 8.01 2.72 51 XM_B_PhoneNumber 12569 8.37 7.85 8.58 52 BAYES_60 12268 7.76 7.67 7.80 53 RCVD_IN_BL_SPAMCOP_NET 10836 2.41 6.77 0.65 54 XM_H_Long_From01 10655 5.56 6.66 5.12 55 TooManyTo_001 10345 6.84 6.46 6.99 56 MPART_ALT_DIFF 9824 8.17 6.14 8.98 57 UNTRUSTED_Relay 9822 2.74 6.14 1.38 58 XMSubMetaSx_00 9291 3.47 5.81 2.53 59 XM_UncommonTLD01 9023 4.07 5.64 3.44 60 XM_B_SEO 8908 2.47 5.57 1.21 61 RELAYCOUNTRY_CA 8870 2.38 5.54 1.10 62 HTML_IMAGE_RATIO_04 8453 11.62 5.28 14.17 63 BAYES_95 7992 2.83 4.99 1.96 64 TR_XM_SEO4 7939 1.90 4.96 0.67 65 TR_XM_SPAMCOP 7918 1.63 4.95 0.29 66 XM_H_GMP 7832 4.65 4.89 4.55 67 XMSexyCombo_05 7483 2.31 4.68 1.35 68 XM_SPF_SoftFail 7191 2.37 4.49 1.51 69 DKIM_INVALID 7161 2.70 4.47 1.98 70 TR_XM_PhishingBody 6908 2.56 4.32 1.85 71 XM_B_Investor 6753 2.10 4.22 1.25 72 XM_B_SpammyTLD 6736 4.09 4.21 4.05 73 T_XMDrugObfuBody_14 6572 2.33 4.11 1.62 74 XMStrtUSub 6347 8.91 3.97 10.90 75 TR_XM_SpammyWords5 6321 2.18 3.95 1.47 76 MIME_HTML_MOSTLY 6102 2.75 3.81 2.32 77 HTML_IMAGE_RATIO_06 5860 4.00 3.66 4.14 78 RCVD_IN_MSPIKE_WL 5743 4.60 3.59 5.01 79 RCVD_IN_MSPIKE_H3 5743 4.60 3.59 5.01 80 XMNumbers 5698 2.94 3.56 2.69 81 XM_CamelCaseFrm001 5596 2.87 3.50 2.62 82 TM2_M_VERY_LONG_WORD 5549 1.78 3.47 1.09 83 MIME_QP_LONG_LINE 5542 4.52 3.46 4.95 84 MIME_HTML_ONLY_MULTI 5535 6.15 3.46 7.23 85 XM_UB50 5521 1.57 3.45 0.81 86 TM2_M_URI_OPT_OUT 5206 1.99 3.25 1.47 87 XMDiploma_00 5173 1.92 3.23 1.39 88 XM_OfRef6 4985 1.79 3.11 1.26 89 XM_URI_RBL 4984 1.20 3.11 0.42 90 RELAYCOUNTRY_AU 4884 1.37 3.05 0.69 91 XM_B_URI_Unicode 4804 2.04 3.00 1.65 92 T_TooManySym_01 4799 4.14 3.00 4.60 93 T_XMDrugObfuBody_08 4733 1.65 2.96 1.12 94 XM_B_Unsub2 4627 1.93 2.89 1.55 95 HTML_IMAGE_RATIO_08 4547 2.41 2.84 2.24 96 XM_B_SpammyWords4 4533 1.11 2.83 0.41 97 RCVD_IN_VALIDITY_SAFE 4074 4.26 2.55 4.95 98 T_XMHurry_00 3929 1.15 2.45 0.63 99 TR_XM_NoHeaderRelay 3788 0.77 2.37 0.13 100 USER_IN_DEF_DKIM_WL 3777 10.30 2.36 13.51 101 XMStockSpam_06 3725 1.48 2.33 1.14 102 XMBody_17 3714 0.91 2.32 0.34 103 TooManyTo_002 3615 2.04 2.26 1.95 104 FROM_EXCESS_BASE64 3571 2.10 2.23 2.04 105 MAILING_LIST_MULTI 3480 2.38 2.17 2.47 106 SUBJ_ALL_CAPS 3391 1.53 2.12 1.30 107 SpammyFromTLD_01 3274 1.09 2.05 0.70 108 XMBrknScrpt_02 3161 1.11 1.98 0.76 109 RCVD_IN_VALIDITY_CERTIFIED 3124 3.45 1.95 4.06 110 T_FILL_THIS_FORM_SHORT 2856 1.03 1.78 0.73 111 BAYES_40 2753 4.25 1.72 5.27 112 TR_XM_FormFill 2734 0.50 1.71 0.01 113 XM_DK_Undo_01 2705 1.74 1.69 1.77 114 RCVD_IN_ZEN_LASTEXTERNAL 2686 0.48 1.68 0.00 115 SHORTCIRCUIT 2686 0.48 1.68 0.00 116 RCVD_IN_VALIDITY_RPBL 2673 0.58 1.67 0.14 117 URI_HEX 2628 1.17 1.64 0.98 118 XMGenDplmaNmb 2626 1.00 1.64 0.74 119 TR_LOTS_OF_MONEY3 2604 0.68 1.63 0.30 120 T_MONEY_PERCENT 2568 0.65 1.60 0.27 121 TR_LOTS_OF_MONEY2 2568 0.65 1.60 0.27 122 HTTPS_HTTP_MISMATCH 2458 0.93 1.54 0.68 123 SpammyFromTLD_02 2448 0.72 1.53 0.39 124 XM_SendGrid 2419 1.30 1.51 1.22 125 T_XMDrugObfuBody_00 2370 0.81 1.48 0.54 126 HTML_MIME_NO_HTML_TAG 2358 1.69 1.47 1.78 127 SHOPIFY_IMG_NOT_RCVD_SFY 2353 0.59 1.47 0.23 128 XMPhish30 2327 0.94 1.45 0.73 129 ALL_TRUSTED 2299 9.95 1.44 13.39 130 XM_H_Long_From02 2258 1.08 1.41 0.94 131 DIET_1 2224 0.68 1.39 0.40 132 TR_Symld_Words 2211 1.45 1.38 1.48 133 XM_B_COPY_HTML 2150 0.86 1.34 0.67 134 RCVD_IN_IADB_LISTED 2134 2.88 1.33 3.51 135 URI_NOVOWEL 2122 2.53 1.33 3.02 136 MPART_ALT_DIFF_COUNT 2110 0.72 1.32 0.47 137 XM_B_FormFill 2064 0.55 1.29 0.25 138 T_REMOTE_IMAGE 2054 2.61 1.28 3.15 139 XMSubMetaI_00 2020 0.88 1.26 0.73 140 BAYES_20 1998 2.84 1.25 3.49 141 XM_Appointment_Request 1973 0.36 1.23 0.00 142 THIS_AD 1959 0.58 1.22 0.33 143 XM_B_COVIDMETA 1949 0.49 1.22 0.19 144 TR_XM_PHPForged 1918 0.57 1.20 0.32 145 RCVD_IN_IADB_SPF 1914 2.56 1.20 3.10 146 TR_XM_PHPDW 1912 0.57 1.19 0.32 147 XM_ProductURIs 1886 0.89 1.18 0.77 148 TR_XM_FormFill2 1862 0.56 1.16 0.32 149 XM_H_PHPOS 1839 0.55 1.15 0.31 150 RCVD_IN_IADB_SENDERID 1837 2.33 1.15 2.81 151 RCVD_IN_IADB_DK 1807 2.28 1.13 2.75 152 XM_B_REG_HTML 1796 0.41 1.12 0.13 153 TR_XM_Base64_M1 1782 0.76 1.11 0.62 154 XMPhish14 1773 0.69 1.11 0.53 155 DKIM_ADSP_CUSTOM_MED 1766 0.78 1.10 0.65 156 KHOP_HELO_FCRDNS 1745 1.06 1.09 1.05 157 XMHTML_After_End 1739 0.49 1.09 0.25 158 XMBdyGiftCard01 1728 1.09 1.08 1.09 159 TR_XM_InvalidRelay 1714 0.32 1.07 0.02 160 XMReplyNow 1708 0.47 1.07 0.23 161 RELAYCOUNTRY_FR 1688 0.46 1.05 0.21 162 TR_XM_INV_DKIM 1653 0.35 1.03 0.08 163 XM_DIRTYINTL 1645 0.40 1.03 0.15 164 RELAYCOUNTRY_GB 1637 0.57 1.02 0.38 165 RCVD_IN_PBL 1615 0.72 1.01 0.60 166 BAYES_00 1563 9.77 0.98 13.33 167 URI_TRY_3LD 1562 0.67 0.98 0.55 168 RDNS_DYNAMIC 1532 0.46 0.96 0.25 169 XM_B_Phish66 1518 0.47 0.95 0.28 170 HTML_TAG_BALANCE_BODY 1513 0.65 0.95 0.53 171 PDS_RDNS_DYNAMIC_FP 1501 0.36 0.94 0.12 172 TooManyTo_003 1498 1.16 0.94 1.25 173 XMMoneyMeta_00 1492 0.70 0.93 0.60 174 T_TooManySym_02 1443 1.95 0.90 2.37 175 XM_B_DNDMA 1439 1.00 0.90 1.04 176 HOSTED_IMG_MULTI_PUB_01 1434 0.27 0.90 0.02 177 XMHTMLBadTable_001 1424 0.41 0.89 0.22 178 RCVD_IN_SORBS_DUL 1420 0.29 0.89 0.05 179 NML_ADSP_CUSTOM_MED 1414 0.55 0.88 0.41 180 XM_S_SpammyWords 1407 0.47 0.88 0.30 181 TR_XM_Spammywords 1407 0.47 0.88 0.30 182 TooManyTo_004 1401 0.91 0.88 0.92 183 XM_UB99 1384 0.25 0.86 0.00 184 XM_H_Undi_Recip 1372 0.42 0.86 0.24 185 TM2_M_OBFU_COMMENT 1372 0.66 0.86 0.58 186 TM2_M_A_HREF_HREF 1366 0.40 0.85 0.22 187 BOTNET_NORDNS 1363 0.25 0.85 0.01 188 TR_XM_DK_Bayes 1354 5.04 0.85 6.73 189 TVD_RCVD_IP 1347 0.55 0.84 0.43 190 T_STY_INVIS_DIRECT 1341 0.45 0.84 0.30 191 TooManyTo_005 1339 0.76 0.84 0.72 192 ANY_BOUNCE_MESSAGE 1325 2.27 0.83 2.86 193 TR_XM_DK_Bayes1 1325 4.98 0.83 6.66 194 BOUNCE_MESSAGE 1325 2.27 0.83 2.86 195 PLING_QUERY 1290 0.50 0.81 0.37 196 TR_XM_RelayPhish 1273 0.27 0.80 0.06 197 XM_HighProb1 1246 0.23 0.78 0.01 198 LongTLD 1232 0.50 0.77 0.39 199 RCVD_IN_PSBL 1216 0.28 0.76 0.08 200 XM_PDF 1214 2.77 0.76 3.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 348686 90.14 95.61 87.93 2 RELAYCOUNTRY_US 331948 83.65 83.53 83.71 3 XM_B_Unicode 294942 77.09 83.82 74.37 4 DKIM_SIGNED 274585 75.09 89.59 69.24 5 XM_DK_Pass 270300 73.36 86.26 68.16 6 DKIM_VALID 266716 72.39 85.11 67.26 7 DCC_CHECK_NEGATIVE 248998 51.72 24.28 62.79 8 BAYES_50 233300 54.27 42.98 58.83 9 DKIM_VALID_AU 216935 58.31 67.26 54.70 10 XMListUnsubscribeExists 185184 53.48 70.30 46.70 11 XM_B_Unicode3 180832 46.84 49.92 45.60 12 XM_B_SpammyWords 180459 52.68 70.45 45.51 13 DCC_CHECK 147390 47.77 74.03 37.17 14 RCVD_IN_MSPIKE_H2 121869 32.74 37.73 30.73 15 HTML_FONT_LOW_CONTRAST 103897 29.52 37.75 26.20 16 DKIM_VALID_EF 102306 26.45 28.05 25.80 17 T_TM2_M_HEADER_IN_MSG 101694 24.91 23.10 25.64 18 LOC_TINY_FONT_1 96757 31.11 47.75 24.40 19 FVGT_m_MULTI_ODD 90001 25.75 33.33 22.70 20 MIME_HTML_ONLY 85849 23.76 29.00 21.65 21 XMSubLong 83248 22.31 25.56 20.99 22 T_KAM_HTML_FONT_INVALID 75727 22.36 30.45 19.10 23 XM_B_SpammyWords2 73034 24.85 40.80 18.42 24 XM_Multi_Part_URI 59084 17.28 23.18 14.90 25 HTML_IMAGE_RATIO_04 56207 11.62 5.28 14.17 26 USER_IN_DEF_DKIM_WL 53566 10.30 2.36 13.51 27 ALL_TRUSTED 53092 9.95 1.44 13.39 28 BAYES_00 52845 9.77 0.98 13.33 29 HTML_FONT_FACE_BAD 47829 8.81 0.74 12.06 30 XM_H_Trusted_IP 45950 8.26 0.00 11.59 31 TR_XM_DK_Unsub 45824 13.72 19.08 11.56 32 XMStrtUSub 43245 8.91 3.97 10.90 33 UNPARSEABLE_RELAY 38884 12.01 17.48 9.81 34 XM_Evil_Numbers_Gen 37661 9.90 10.91 9.50 35 MPART_ALT_DIFF 35625 8.17 6.14 8.98 36 XM_B_PhoneNumber 34016 8.37 7.85 8.58 37 BAYES_60 30949 7.76 7.67 7.80 38 LotsOfNums_01 30480 7.82 8.14 7.69 39 XM_B_Unsub 30044 10.48 17.67 7.58 40 MIME_HTML_ONLY_MULTI 28674 6.15 3.46 7.23 41 TooManyTo_001 27711 6.84 6.46 6.99 42 TR_XM_DK_Bayes 26682 5.04 0.85 6.73 43 TR_XM_DK_Bayes1 26394 4.98 0.83 6.66 44 XM_DKIMWhitelistDomains 25214 4.57 0.13 6.36 45 TR_XM_BayesUnsub 24028 9.16 16.84 6.06 46 FSL_BULK_SIG 23994 6.71 8.35 6.05 47 IN_ZIMBRA_NJ_WHITELIST 23704 4.29 0.12 5.98 48 TR_XM_DK_Bayes2 22693 4.27 0.67 5.72 49 LOTS_OF_MONEY 20954 7.49 12.95 5.28 50 BAYES_40 20909 4.25 1.72 5.27 51 TR_MAX_INTL_RELAY 20707 7.79 14.16 5.22 52 XM_H_Long_From01 20299 5.56 6.66 5.12 53 HTML_IMAGE_RATIO_02 20113 5.97 8.21 5.07 54 XM_B_SpammyWords3 19877 7.83 14.83 5.01 55 RCVD_IN_MSPIKE_H3 19862 4.60 3.59 5.01 56 RCVD_IN_MSPIKE_WL 19862 4.60 3.59 5.01 57 MIME_QP_LONG_LINE 19636 4.52 3.46 4.95 58 RCVD_IN_VALIDITY_SAFE 19632 4.26 2.55 4.95 59 XM_DK_Undo_02 19455 14.51 38.32 4.91 60 XM_B_Phish_Phrases 18802 5.97 9.01 4.74 61 T_TooManySym_01 18232 4.14 3.00 4.60 62 XM_H_GMP 18038 4.65 4.89 4.55 63 XMSubNoVowel 16946 3.23 0.65 4.27 64 HTML_IMAGE_RATIO_06 16422 4.00 3.66 4.14 65 RCVD_IN_VALIDITY_CERTIFIED 16082 3.45 1.95 4.06 66 XM_B_SpammyTLD 16047 4.09 4.21 4.05 67 TR_XM_SpammyWords4 14247 5.90 11.61 3.59 68 XM_PDF 14179 2.77 0.76 3.58 69 RELAYCOUNTRY_META 14028 7.01 15.63 3.54 70 RCVD_IN_IADB_LISTED 13919 2.88 1.33 3.51 71 BAYES_20 13830 2.84 1.25 3.49 72 XM_UncommonTLD01 13639 4.07 5.64 3.44 73 BAYES_99 13014 10.74 29.23 3.28 74 BAYES_80 12910 4.86 8.83 3.26 75 T_REMOTE_IMAGE 12499 2.61 1.28 3.15 76 BOTNET_IPINHOSTNAME 12333 6.09 13.47 3.11 77 RCVD_IN_IADB_SPF 12312 2.56 1.20 3.10 78 URI_NOVOWEL 11971 2.53 1.33 3.02 79 BOUNCE_MESSAGE 11332 2.27 0.83 2.86 80 ANY_BOUNCE_MESSAGE 11332 2.27 0.83 2.86 81 RCVD_IN_IADB_SENDERID 11135 2.33 1.15 2.81 82 BAYES_05 11025 2.18 0.68 2.78 83 RCVD_IN_IADB_DK 10901 2.28 1.13 2.75 84 XM_Body_Dirty_Words 10800 4.24 8.01 2.72 85 XMNumbers 10667 2.94 3.56 2.69 86 XM_CamelCaseFrm001 10378 2.87 3.50 2.62 87 XMSubMetaSx_00 10022 3.47 5.81 2.53 88 MAILING_LIST_MULTI 9776 2.38 2.17 2.47 89 BAYES_999 9633 8.20 22.51 2.43 90 T_TooManySym_02 9401 1.95 0.90 2.37 91 TR_XM_DKIM_Undo 9394 9.49 27.12 2.37 92 MIME_HTML_MOSTLY 9200 2.75 3.81 2.32 93 HTML_IMAGE_RATIO_08 8888 2.41 2.84 2.24 94 RCVD_IN_IADB_VOUCHED 8497 1.70 0.60 2.14 95 TR_XM_SpammyRelay 8358 4.77 11.38 2.11 96 FROM_EXCESS_BASE64 8104 2.10 2.23 2.04 97 XMSubLongNoVowel 7953 1.45 0.09 2.01 98 DKIM_INVALID 7869 2.70 4.47 1.98 99 BAYES_95 7783 2.83 4.99 1.96 100 XMSubGarbage 7743 1.40 0.03 1.95 101 TooManyTo_002 7726 2.04 2.26 1.95 102 TR_XM_PhishingBody 7325 2.56 4.32 1.85 103 INVALID_MSGID 7179 1.36 0.23 1.81 104 HTML_MIME_NO_HTML_TAG 7040 1.69 1.47 1.78 105 XM_DK_Undo_01 7001 1.74 1.69 1.77 106 XM_B_URI_Unicode 6547 2.04 3.00 1.65 107 T_XMDrugObfuBody_14 6409 2.33 4.11 1.62 108 XM_B_Unsub2 6143 1.93 2.89 1.55 109 TO_MALFORMED 6108 1.10 0.01 1.54 110 XM_SPF_SoftFail 6001 2.37 4.49 1.51 111 TR_Symld_Words 5854 1.45 1.38 1.48 112 TM2_M_URI_OPT_OUT 5846 1.99 3.25 1.47 113 RCVD_IN_IADB_OPTIN 5825 1.16 0.38 1.47 114 TR_XM_SpammyWords5 5823 2.18 3.95 1.47 115 TR_XM_UnparsRelay 5705 3.52 8.69 1.44 116 BOTNET 5518 3.64 9.22 1.39 117 XMDiploma_00 5513 1.92 3.23 1.39 118 UNTRUSTED_Relay 5453 2.74 6.14 1.38 119 XMSexyCombo_05 5366 2.31 4.68 1.35 120 TR_DCC_Bayes_99 5333 6.73 20.06 1.34 121 SUBJ_ALL_CAPS 5138 1.53 2.12 1.30 122 XM_OfRef6 4987 1.79 3.11 1.26 123 TooManyTo_003 4953 1.16 0.94 1.25 124 XM_B_Investor 4953 2.10 4.22 1.25 125 IN_HORDE_ADDRESS_BOOK 4838 0.91 0.13 1.22 126 XMGappySubj_01 4833 0.95 0.29 1.22 127 XM_SendGrid 4823 1.30 1.51 1.22 128 XM_B_SEO 4818 2.47 5.57 1.21 129 TR_MetaPhish_Combo_01 4555 1.02 0.69 1.15 130 XMStockSpam_06 4511 1.48 2.33 1.14 131 T_XMDrugObfuBody_08 4431 1.65 2.96 1.12 132 RELAYCOUNTRY_CA 4371 2.38 5.54 1.10 133 TM2_M_VERY_LONG_WORD 4341 1.78 3.47 1.09 134 XMBdyGiftCard01 4323 1.09 1.08 1.09 135 XM_TLDProd2 4279 0.86 0.31 1.08 136 KHOP_HELO_FCRDNS 4169 1.06 1.09 1.05 137 XM_B_DNDMA 4134 1.00 0.90 1.04 138 XM_GoogleGroups 3982 0.92 0.71 1.00 139 TVD_SPACE_RATIO 3888 0.72 0.09 0.98 140 URI_HEX 3871 1.17 1.64 0.98 141 FROM_GOV_DKIM_AU 3845 0.85 0.54 0.97 142 XM_H_Long_From02 3737 1.08 1.41 0.94 143 HELO_NODOT 3663 0.70 0.15 0.92 144 HELO_NO_DOMAIN 3659 0.70 0.15 0.92 145 TooManyTo_004 3637 0.91 0.88 0.92 146 XMCapTrack 3507 0.79 0.55 0.88 147 XM_E_Blogspot 3454 0.67 0.16 0.87 148 T_TooManySym_03 3402 0.74 0.45 0.86 149 XM_UB50 3205 1.57 3.45 0.81 150 XM_ProductURIs 3045 0.89 1.18 0.77 151 XMBrknScrpt_02 3008 1.11 1.98 0.76 152 TR_XM_DK_SendGrid 2951 0.74 0.73 0.74 153 XMGenDplmaNmb 2934 1.00 1.64 0.74 154 XMPhish30 2903 0.94 1.45 0.73 155 T_FILL_THIS_FORM_SHORT 2901 1.03 1.78 0.73 156 XMSubMetaI_00 2892 0.88 1.26 0.73 157 TooManyTo_005 2866 0.76 0.84 0.72 158 SpammyFromTLD_01 2780 1.09 2.05 0.70 159 RELAYCOUNTRY_AU 2752 1.37 3.05 0.69 160 HTTPS_HTTP_MISMATCH 2713 0.93 1.54 0.68 161 XM_B_COPY_HTML 2651 0.86 1.34 0.67 162 TR_XM_SEO4 2641 1.90 4.96 0.67 163 XMGappySubj_02 2593 0.49 0.09 0.65 164 RCVD_IN_BL_SPAMCOP_NET 2580 2.41 6.77 0.65 165 DKIM_ADSP_CUSTOM_MED 2573 0.78 1.10 0.65 166 XMBody_95 2568 0.54 0.28 0.65 167 TR_XM_SpammyWords2 2546 3.31 9.90 0.64 168 T_XMHurry_00 2491 1.15 2.45 0.63 169 TR_XM_Base64_M1 2469 0.76 1.11 0.62 170 XM_ShortIntro_01 2400 0.58 0.52 0.61 171 HTML_IMAGE_ONLY_20 2398 0.63 0.69 0.60 172 RCVD_IN_PBL 2393 0.72 1.01 0.60 173 XMMoneyMeta_00 2387 0.70 0.93 0.60 174 TM2_M_OBFU_COMMENT 2315 0.66 0.86 0.58 175 T_Symld_Words_02 2307 0.63 0.74 0.58 176 XMNoVowels 2262 0.59 0.64 0.57 177 XM_RXBody 2219 0.57 0.60 0.56 178 URI_TRY_3LD 2164 0.67 0.98 0.55 179 T_XMDrugObfuBody_00 2159 0.81 1.48 0.54 180 XM_H_PHPMailer 2123 0.54 0.54 0.54 181 HTML_TAG_BALANCE_BODY 2098 0.65 0.95 0.53 182 XMPhish14 2082 0.69 1.11 0.53 183 MPART_ALT_DIFF_COUNT 1874 0.72 1.32 0.47 184 XMLngstWrd_00 1797 0.45 0.43 0.45 185 T_OBFU_PDF_ATTACH 1736 0.39 0.26 0.44 186 TVD_RCVD_IP 1695 0.55 0.84 0.43 187 XM_URI_RBL 1680 1.20 3.11 0.42 188 NML_ADSP_CUSTOM_MED 1644 0.55 0.88 0.41 189 XMSolicitRefs_0 1638 0.41 0.41 0.41 190 XM_B_SpammyWords4 1623 1.11 2.83 0.41 191 DIET_1 1587 0.68 1.39 0.40 192 T_MANY_PILL_PRICE 1568 0.29 0.02 0.40 193 SpammyFromTLD_02 1566 0.72 1.53 0.39 194 FORGED_GMAIL_RCVD 1558 0.49 0.73 0.39 195 LongTLD 1532 0.50 0.77 0.39 196 RELAYCOUNTRY_GB 1520 0.57 1.02 0.38 197 MIME_CHARSET_FARAWAY 1507 0.47 0.71 0.38 198 XMBSHREFv2 1495 0.36 0.32 0.38 199 USER_IN_WHITELIST 1494 0.27 0.00 0.38 200 USER_IN_WELCOMELIST 1494 0.27 0.00 0.38 ----------------------------------------------------------------------