Email: 489263 Autolearn: 0 AvgScore: 4.35 AvgScanTime: 1.43 sec Spam: 152353 Autolearn: 0 AvgScore: 14.13 AvgScanTime: 1.57 sec Ham: 336910 Autolearn: 0 AvgScore: -0.07 AvgScanTime: 1.36 sec Time Spent Running SA: 193.88 hours Time Spent Processing Spam: 66.47 hours Time Spent Processing Ham: 127.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145739 89.14 95.66 86.19 2 DKIM_SIGNED 136173 81.50 89.38 77.94 3 XM_DK_Pass 130858 79.52 85.89 76.63 4 DKIM_VALID 128902 78.46 84.61 75.68 5 XM_B_Unicode 128516 76.00 84.35 72.23 6 RELAYCOUNTRY_US 128506 82.22 84.35 81.26 7 DCC_CHECK 112840 52.72 74.06 43.07 8 XMListUnsubscribeExists 107298 57.62 70.43 51.82 9 XM_B_SpammyWords 107190 54.04 70.36 46.66 10 DKIM_VALID_AU 100605 62.95 66.03 61.55 11 XM_B_Unicode3 77239 45.75 50.70 43.52 12 LOC_TINY_FONT_1 71553 34.88 46.97 29.42 13 BAYES_50 65032 55.80 42.69 61.73 14 XM_B_SpammyWords2 62332 26.20 40.91 19.55 15 XM_DK_Undo_02 58902 15.73 38.66 5.35 16 HTML_FONT_LOW_CONTRAST 57978 32.05 38.06 29.34 17 RCVD_IN_MSPIKE_H2 57364 35.60 37.65 34.67 18 FVGT_m_MULTI_ODD 51854 27.22 34.04 24.14 19 MIME_HTML_ONLY 45850 22.70 30.09 19.35 20 T_KAM_HTML_FONT_INVALID 45790 23.40 30.06 20.39 21 BAYES_99 45366 11.94 29.78 3.88 22 DKIM_VALID_EF 43460 28.99 28.53 29.21 23 TR_XM_DKIM_Undo 41941 10.30 27.53 2.50 24 DCC_CHECK_NEGATIVE 37287 46.79 24.47 56.88 25 BAYES_999 34993 9.23 22.97 3.02 26 XM_Multi_Part_URI 34427 19.45 22.60 18.02 27 XMSubLong 33783 21.97 22.17 21.87 28 T_TM2_M_HEADER_IN_MSG 32726 25.57 21.48 27.42 29 TR_DCC_Bayes_99 31704 7.49 20.81 1.47 30 TR_XM_DK_Unsub 30707 14.82 20.16 12.40 31 UNPARSEABLE_RELAY 27062 13.09 17.76 10.97 32 XM_B_Unsub 26860 11.56 17.63 8.81 33 TR_XM_BayesUnsub 25721 10.18 16.88 7.15 34 TR_MAX_INTL_RELAY 22014 8.59 14.45 5.94 35 RELAYCOUNTRY_META 21746 7.34 14.27 4.20 36 XM_B_SpammyWords3 20855 7.92 13.69 5.32 37 BOTNET_IPINHOSTNAME 19401 6.33 12.73 3.44 38 LOTS_OF_MONEY 17778 7.61 11.67 5.77 39 TR_XM_SpammyRelay 16801 5.05 11.03 2.34 40 TR_XM_SpammyWords2 16276 3.71 10.68 0.56 41 TR_XM_SpammyWords4 16194 5.96 10.63 3.85 42 XM_Evil_Numbers_Gen 15576 9.73 10.22 9.50 43 FSL_BULK_SIG 14206 7.90 9.32 7.26 44 LotsOfNums_01 14017 9.16 9.20 9.14 45 BAYES_80 13695 5.36 8.99 3.72 46 TR_XM_UnparsRelay 13133 3.78 8.62 1.59 47 XM_B_Phish_Phrases 12952 6.46 8.50 5.54 48 RCVD_IN_BL_SPAMCOP_NET 12348 3.05 8.10 0.76 49 BOTNET 12241 3.44 8.03 1.37 50 BAYES_60 11857 8.63 7.78 9.02 51 XM_Body_Dirty_Words 11762 4.61 7.72 3.20 52 HTML_IMAGE_RATIO_02 11310 6.23 7.42 5.70 53 XM_B_PhoneNumber 9516 7.91 6.25 8.66 54 MPART_ALT_DIFF 9447 5.48 6.20 5.16 55 TR_XM_SPAMCOP 9404 2.20 6.17 0.40 56 XMSubMetaSx_00 9170 4.45 6.02 3.75 57 RELAYCOUNTRY_CA 9132 2.72 5.99 1.24 58 XM_UncommonTLD01 9072 4.47 5.95 3.80 59 XM_H_Long_From01 8987 5.84 5.90 5.82 60 HTML_IMAGE_RATIO_04 8901 5.67 5.84 5.59 61 XM_B_SEO 8545 3.07 5.61 1.92 62 TooManyTo_001 8373 7.33 5.50 8.16 63 BAYES_95 7920 3.14 5.20 2.21 64 TR_XM_SEO4 7800 2.65 5.12 1.53 65 XMSexyCombo_05 7790 2.56 5.11 1.40 66 UNTRUSTED_Relay 7340 2.61 4.82 1.61 67 DKIM_INVALID 7271 3.04 4.77 2.25 68 XM_H_GMP 7011 4.70 4.60 4.75 69 T_XMDrugObfuBody_14 6834 2.75 4.49 1.96 70 TM2_M_VERY_LONG_WORD 6735 2.86 4.42 2.15 71 TR_XM_PhishingBody 6642 2.29 4.36 1.36 72 XM_B_Investor 6622 2.38 4.35 1.49 73 XM_SPF_SoftFail 6586 2.49 4.32 1.66 74 RCVD_IN_MSPIKE_H3 6398 4.84 4.20 5.13 75 RCVD_IN_MSPIKE_WL 6398 4.84 4.20 5.13 76 XMStrtUSub 6115 4.75 4.01 5.08 77 XM_B_SpammyTLD 5842 4.22 3.83 4.40 78 MIME_HTML_ONLY_MULTI 5832 3.04 3.83 2.69 79 TR_XM_SpammyWords5 5789 2.20 3.80 1.48 80 MIME_HTML_MOSTLY 5651 3.36 3.71 3.21 81 XM_CamelCaseFrm001 5647 3.07 3.71 2.78 82 MIME_QP_LONG_LINE 5477 5.26 3.59 6.01 83 HTML_IMAGE_RATIO_06 5077 2.80 3.33 2.55 84 XM_URI_RBL 4996 1.40 3.28 0.54 85 TM2_M_URI_OPT_OUT 4928 2.60 3.23 2.31 86 HTML_IMAGE_RATIO_08 4793 2.34 3.15 1.97 87 XMNumbers 4706 2.71 3.09 2.55 88 XMDiploma_00 4593 1.96 3.01 1.49 89 RCVD_IN_VALIDITY_SAFE 4465 4.69 2.93 5.48 90 T_XMDrugObfuBody_08 4415 1.79 2.90 1.28 91 RCVD_IN_VALIDITY_RPBL 4363 0.98 2.86 0.13 92 XM_B_URI_Unicode 4335 2.22 2.85 1.93 93 RELAYCOUNTRY_AU 4190 1.51 2.75 0.95 94 FROM_EXCESS_BASE64 4041 2.35 2.65 2.21 95 SUBJ_ALL_CAPS 3975 1.76 2.61 1.38 96 XM_B_Unsub2 3919 1.73 2.57 1.35 97 XM_UB50 3829 1.46 2.51 0.99 98 XM_OfRef6 3782 1.27 2.48 0.73 99 T_TooManySym_01 3570 4.53 2.34 5.52 100 XM_B_SpammyWords4 3526 1.11 2.31 0.57 101 RCVD_IN_VALIDITY_CERTIFIED 3485 3.86 2.29 4.57 102 XMBody_17 3377 0.95 2.22 0.37 103 T_XMHurry_00 3374 1.14 2.21 0.66 104 MAILING_LIST_MULTI 3323 2.54 2.18 2.71 105 T_REMOTE_IMAGE 3281 2.96 2.15 3.33 106 XMStockSpam_06 3259 1.75 2.14 1.57 107 HTML_MIME_NO_HTML_TAG 3157 2.09 2.07 2.10 108 USER_IN_DEF_DKIM_WL 3070 11.17 2.02 15.32 109 ALL_TRUSTED 3060 11.14 2.01 15.28 110 XM_DK_Undo_01 2959 1.84 1.94 1.80 111 XMBrknScrpt_02 2867 1.25 1.88 0.96 112 XM_B_REG_HTML 2823 0.71 1.85 0.19 113 SpammyFromTLD_01 2725 1.05 1.79 0.72 114 SpammyFromTLD_02 2664 0.91 1.75 0.54 115 TR_XM_NoHeaderRelay 2635 0.64 1.73 0.15 116 KHOP_HELO_FCRDNS 2517 1.49 1.65 1.42 117 URI_HEX 2485 1.25 1.63 1.08 118 XMPhish30 2461 0.82 1.62 0.46 119 TooManyTo_002 2446 2.02 1.61 2.21 120 SHOPIFY_IMG_NOT_RCVD_SFY 2405 0.67 1.58 0.26 121 RCVD_IN_IADB_LISTED 2383 3.27 1.56 4.05 122 XMGenDplmaNmb 2373 0.97 1.56 0.71 123 XM_ProductURIs 2353 0.88 1.54 0.59 124 T_FILL_THIS_FORM_SHORT 2349 0.99 1.54 0.73 125 BAYES_40 2331 3.68 1.53 4.65 126 XM_SendGrid 2318 1.45 1.52 1.42 127 TR_LOTS_OF_MONEY3 2294 0.69 1.51 0.31 128 T_XMDrugObfuBody_00 2209 1.03 1.45 0.84 129 RCVD_IN_ZEN_LASTEXTERNAL 2209 0.45 1.45 0.00 130 SHORTCIRCUIT 2209 0.45 1.45 0.00 131 TR_XM_FormFill 2198 0.45 1.44 0.01 132 RCVD_IN_IADB_SPF 2074 2.89 1.36 3.58 133 RDNS_DYNAMIC 2061 0.61 1.35 0.28 134 XMBdyGiftCard01 2048 1.20 1.34 1.14 135 XM_B_COVIDMETA 2043 0.55 1.34 0.20 136 PDS_RDNS_DYNAMIC_FP 2033 0.50 1.33 0.12 137 XM_PDF 2031 3.22 1.33 4.07 138 XMSubMetaI_00 2019 1.15 1.33 1.08 139 TR_XM_Base64_M1 1984 0.82 1.30 0.60 140 RCVD_IN_IADB_DK 1934 2.56 1.27 3.14 141 HTTPS_HTTP_MISMATCH 1933 0.88 1.27 0.70 142 RCVD_IN_IADB_SENDERID 1930 2.61 1.27 3.22 143 DIET_1 1925 0.57 1.26 0.25 144 XM_H_Long_From02 1825 1.07 1.20 1.01 145 LongTLD 1791 0.62 1.18 0.37 146 THIS_AD 1779 0.58 1.17 0.31 147 TR_XM_PHPForged 1778 0.58 1.17 0.31 148 XMReplyNow 1770 0.52 1.16 0.23 149 DKIM_ADSP_CUSTOM_MED 1768 0.84 1.16 0.70 150 TR_XM_PHPDW 1739 0.57 1.14 0.31 151 BOUNCE_MESSAGE 1724 2.66 1.13 3.35 152 ANY_BOUNCE_MESSAGE 1724 2.66 1.13 3.35 153 TR_XM_FormFill2 1724 0.57 1.13 0.31 154 XM_B_Phish66 1702 0.55 1.12 0.29 155 XM_H_PHPOS 1698 0.55 1.11 0.30 156 XM_B_DNDMA 1676 0.75 1.10 0.60 157 TR_LOTS_OF_MONEY2 1672 0.55 1.10 0.30 158 T_MONEY_PERCENT 1672 0.55 1.10 0.30 159 BAYES_20 1667 2.61 1.09 3.30 160 URI_TRY_3LD 1651 0.76 1.08 0.62 161 HK_RANDOM_REPLYTO 1649 0.47 1.08 0.19 162 TM2_M_OBFU_COMMENT 1599 0.64 1.05 0.45 163 TR_XM_DK_SendGrid 1581 0.96 1.04 0.92 164 XM_B_COPY_HTML 1570 1.02 1.03 1.02 165 MPART_ALT_DIFF_COUNT 1550 0.76 1.02 0.64 166 XM_B_FormFill 1514 0.38 0.99 0.10 167 TR_XM_INV_DKIM 1498 0.36 0.98 0.07 168 TR_Mismatch_TLD_02 1484 0.35 0.97 0.07 169 TR_Symld_Words 1472 1.36 0.97 1.54 170 XM_Appointment_Request 1452 0.30 0.95 0.00 171 HTML_TAG_BALANCE_BODY 1438 0.72 0.94 0.62 172 MIME_CHARSET_FARAWAY 1437 0.61 0.94 0.46 173 BASE64_LENGTH_79_INF 1411 0.53 0.93 0.35 174 XM_DIRTYINTL 1402 0.34 0.92 0.08 175 T_OBFU_PDF_ATTACH 1401 0.70 0.92 0.60 176 RCVD_IN_PSBL 1394 0.35 0.91 0.09 177 T_Symld_Words_02 1370 0.62 0.90 0.50 178 BAYES_00 1356 6.81 0.89 9.49 179 NML_ADSP_CUSTOM_MED 1342 0.59 0.88 0.45 180 URI_NOVOWEL 1338 2.56 0.88 3.33 181 RELAYCOUNTRY_FR 1326 0.45 0.87 0.26 182 T_STY_INVIS_DIRECT 1324 0.48 0.87 0.30 183 RCVD_IN_PBL 1302 0.66 0.85 0.58 184 XMPhish08 1296 0.42 0.85 0.22 185 XM_H_Undi_Recip 1293 0.36 0.85 0.13 186 TR_XM_Spammywords 1266 0.41 0.83 0.22 187 XM_S_SpammyWords 1266 0.41 0.83 0.22 188 BOTNET_NORDNS 1243 0.26 0.82 0.00 189 PLING_QUERY 1232 0.52 0.81 0.39 190 XMSubMetaSxObfu_03 1230 0.56 0.81 0.45 191 XMSexyCombo_01 1229 0.69 0.81 0.63 192 LONGLN_LOW_CONTRAST 1226 0.45 0.80 0.29 193 TVD_RCVD_IP 1225 0.61 0.80 0.53 194 XMHTML_After_End 1217 0.41 0.80 0.24 195 TR_XM_DK_Bayes 1199 5.34 0.79 7.40 196 XM_HighProb1 1189 0.25 0.78 0.01 197 XM_OfRef7 1185 0.31 0.78 0.10 198 TR_XM_DK_Bayes1 1183 5.28 0.78 7.31 199 FORGED_GMAIL_RCVD 1166 0.53 0.77 0.43 200 TR_XM_InvalidRelay 1162 0.25 0.76 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 290387 89.14 95.66 86.19 2 RELAYCOUNTRY_US 273778 82.22 84.35 81.26 3 DKIM_SIGNED 262577 81.50 89.38 77.94 4 XM_DK_Pass 258180 79.52 85.89 76.63 5 DKIM_VALID 254980 78.46 84.61 75.68 6 XM_B_Unicode 243340 76.00 84.35 72.23 7 BAYES_50 207980 55.80 42.69 61.73 8 DKIM_VALID_AU 207368 62.95 66.03 61.55 9 DCC_CHECK_NEGATIVE 191648 46.79 24.47 56.88 10 XMListUnsubscribeExists 174601 57.62 70.43 51.82 11 XM_B_SpammyWords 157219 54.04 70.36 46.66 12 XM_B_Unicode3 146617 45.75 50.70 43.52 13 DCC_CHECK 145121 52.72 74.06 43.07 14 RCVD_IN_MSPIKE_H2 116823 35.60 37.65 34.67 15 LOC_TINY_FONT_1 99104 34.88 46.97 29.42 16 HTML_FONT_LOW_CONTRAST 98848 32.05 38.06 29.34 17 DKIM_VALID_EF 98400 28.99 28.53 29.21 18 T_TM2_M_HEADER_IN_MSG 92381 25.57 21.48 27.42 19 FVGT_m_MULTI_ODD 81345 27.22 34.04 24.14 20 XMSubLong 73685 21.97 22.17 21.87 21 T_KAM_HTML_FONT_INVALID 68690 23.40 30.06 20.39 22 XM_B_SpammyWords2 65869 26.20 40.91 19.55 23 MIME_HTML_ONLY 65199 22.70 30.09 19.35 24 XM_Multi_Part_URI 60716 19.45 22.60 18.02 25 USER_IN_DEF_DKIM_WL 51601 11.17 2.02 15.32 26 ALL_TRUSTED 51468 11.14 2.01 15.28 27 TR_XM_DK_Unsub 41788 14.82 20.16 12.40 28 UNPARSEABLE_RELAY 36971 13.09 17.76 10.97 29 XM_Evil_Numbers_Gen 32009 9.73 10.22 9.50 30 BAYES_00 31961 6.81 0.89 9.49 31 LotsOfNums_01 30782 9.16 9.20 9.14 32 BAYES_60 30380 8.63 7.78 9.02 33 XM_B_Unsub 29682 11.56 17.63 8.81 34 XM_B_PhoneNumber 29179 7.91 6.25 8.66 35 XM_DKIMWhitelistDomains 28091 5.77 0.08 8.34 36 TooManyTo_001 27476 7.33 5.50 8.16 37 TR_XM_DK_Bayes 24918 5.34 0.79 7.40 38 TR_XM_DK_Bayes1 24633 5.28 0.78 7.31 39 FSL_BULK_SIG 24451 7.90 9.32 7.26 40 TR_XM_BayesUnsub 24083 10.18 16.88 7.15 41 IN_ZIMBRA_NJ_WHITELIST 23267 4.79 0.10 6.91 42 TR_XM_DK_Bayes2 21596 4.59 0.57 6.41 43 MIME_QP_LONG_LINE 20236 5.26 3.59 6.01 44 TR_MAX_INTL_RELAY 20005 8.59 14.45 5.94 45 XM_H_Long_From01 19603 5.84 5.90 5.82 46 LOTS_OF_MONEY 19437 7.61 11.67 5.77 47 HTML_IMAGE_RATIO_02 19191 6.23 7.42 5.70 48 HTML_IMAGE_RATIO_04 18830 5.67 5.84 5.59 49 XM_B_Phish_Phrases 18670 6.46 8.50 5.54 50 T_TooManySym_01 18594 4.53 2.34 5.52 51 RCVD_IN_VALIDITY_SAFE 18473 4.69 2.93 5.48 52 XM_DK_Undo_02 18039 15.73 38.66 5.35 53 XM_B_SpammyWords3 17915 7.92 13.69 5.32 54 MPART_ALT_DIFF 17385 5.48 6.20 5.16 55 RCVD_IN_MSPIKE_WL 17289 4.84 4.20 5.13 56 RCVD_IN_MSPIKE_H3 17289 4.84 4.20 5.13 57 XMStrtUSub 17109 4.75 4.01 5.08 58 XM_H_GMP 15988 4.70 4.60 4.75 59 BAYES_40 15668 3.68 1.53 4.65 60 RCVD_IN_VALIDITY_CERTIFIED 15407 3.86 2.29 4.57 61 XM_B_SpammyTLD 14825 4.22 3.83 4.40 62 RELAYCOUNTRY_META 14148 7.34 14.27 4.20 63 XM_PDF 13728 3.22 1.33 4.07 64 RCVD_IN_IADB_LISTED 13632 3.27 1.56 4.05 65 BAYES_99 13067 11.94 29.78 3.88 66 TR_XM_SpammyWords4 12974 5.96 10.63 3.85 67 XM_UncommonTLD01 12807 4.47 5.95 3.80 68 XMSubMetaSx_00 12620 4.45 6.02 3.75 69 BAYES_80 12531 5.36 8.99 3.72 70 RCVD_IN_IADB_SPF 12064 2.89 1.36 3.58 71 BOTNET_IPINHOSTNAME 11588 6.33 12.73 3.44 72 ANY_BOUNCE_MESSAGE 11281 2.66 1.13 3.35 73 BOUNCE_MESSAGE 11281 2.66 1.13 3.35 74 T_REMOTE_IMAGE 11214 2.96 2.15 3.33 75 URI_NOVOWEL 11210 2.56 0.88 3.33 76 BAYES_20 11112 2.61 1.09 3.30 77 RCVD_IN_IADB_SENDERID 10832 2.61 1.27 3.22 78 MIME_HTML_MOSTLY 10804 3.36 3.71 3.21 79 XM_Body_Dirty_Words 10785 4.61 7.72 3.20 80 RCVD_IN_IADB_DK 10576 2.56 1.27 3.14 81 BAYES_999 10181 9.23 22.97 3.02 82 T_TooManySym_02 9529 2.15 0.65 2.83 83 XM_CamelCaseFrm001 9351 3.07 3.71 2.78 84 MAILING_LIST_MULTI 9114 2.54 2.18 2.71 85 MIME_HTML_ONLY_MULTI 9052 3.04 3.83 2.69 86 RCVD_IN_IADB_VOUCHED 8699 1.99 0.70 2.58 87 HTML_IMAGE_RATIO_06 8602 2.80 3.33 2.55 88 XMNumbers 8575 2.71 3.09 2.55 89 TR_XM_DKIM_Undo 8437 10.30 27.53 2.50 90 TR_XM_SpammyRelay 7892 5.05 11.03 2.34 91 TM2_M_URI_OPT_OUT 7792 2.60 3.23 2.31 92 DKIM_INVALID 7597 3.04 4.77 2.25 93 TooManyTo_002 7461 2.02 1.61 2.21 94 BAYES_95 7452 3.14 5.20 2.21 95 FROM_EXCESS_BASE64 7443 2.35 2.65 2.21 96 TM2_M_VERY_LONG_WORD 7249 2.86 4.42 2.15 97 HTML_MIME_NO_HTML_TAG 7082 2.09 2.07 2.10 98 INVALID_MSGID 7028 1.49 0.18 2.09 99 BAYES_05 6756 1.57 0.60 2.01 100 HTML_IMAGE_RATIO_08 6652 2.34 3.15 1.97 101 T_XMDrugObfuBody_14 6607 2.75 4.49 1.96 102 XM_B_URI_Unicode 6503 2.22 2.85 1.93 103 XM_B_SEO 6468 3.07 5.61 1.92 104 TO_MALFORMED 6186 1.26 0.00 1.84 105 XM_DK_Undo_01 6051 1.84 1.94 1.80 106 RCVD_IN_IADB_OPTIN 6025 1.35 0.37 1.79 107 XMGappySubj_01 5665 1.20 0.13 1.68 108 XM_SPF_SoftFail 5598 2.49 4.32 1.66 109 UNTRUSTED_Relay 5437 2.61 4.82 1.61 110 TR_XM_UnparsRelay 5367 3.78 8.62 1.59 111 XMStockSpam_06 5287 1.75 2.14 1.57 112 TR_Symld_Words 5198 1.36 0.97 1.54 113 TR_XM_SEO4 5148 2.65 5.12 1.53 114 IN_HORDE_ADDRESS_BOOK 5064 1.07 0.11 1.50 115 XM_B_Investor 5020 2.38 4.35 1.49 116 XMDiploma_00 5006 1.96 3.01 1.49 117 TR_XM_SpammyWords5 4972 2.20 3.80 1.48 118 TR_DCC_Bayes_99 4948 7.49 20.81 1.47 119 KHOP_HELO_FCRDNS 4796 1.49 1.65 1.42 120 XM_SendGrid 4779 1.45 1.52 1.42 121 XMSexyCombo_05 4711 2.56 5.11 1.40 122 SUBJ_ALL_CAPS 4656 1.76 2.61 1.38 123 BOTNET 4613 3.44 8.03 1.37 124 TR_XM_PhishingBody 4578 2.29 4.36 1.36 125 XM_B_Unsub2 4563 1.73 2.57 1.35 126 TooManyTo_003 4348 1.07 0.58 1.29 127 T_XMDrugObfuBody_08 4322 1.79 2.90 1.28 128 XMBody_95 4304 1.01 0.42 1.28 129 RELAYCOUNTRY_CA 4161 2.72 5.99 1.24 130 XM_TLDProd2 3933 0.88 0.26 1.17 131 XMBdyGiftCard01 3835 1.20 1.34 1.14 132 URI_HEX 3645 1.25 1.63 1.08 133 XMSubMetaI_00 3624 1.15 1.33 1.08 134 XM_GoogleGroups 3572 0.95 0.72 1.06 135 TVD_SPACE_RATIO 3565 0.77 0.12 1.06 136 XMGappySubj_02 3490 0.73 0.05 1.04 137 XM_B_COPY_HTML 3426 1.02 1.03 1.02 138 XM_H_Long_From02 3390 1.07 1.20 1.01 139 T_TooManySym_03 3352 0.77 0.27 0.99 140 XM_UB50 3319 1.46 2.51 0.99 141 XMBrknScrpt_02 3233 1.25 1.88 0.96 142 RELAYCOUNTRY_AU 3202 1.51 2.75 0.95 143 TooManyTo_004 3143 0.80 0.52 0.93 144 TR_XM_DK_SendGrid 3103 0.96 1.04 0.92 145 XMCapTrack 3096 0.79 0.52 0.92 146 T_XMDrugObfuBody_00 2816 1.03 1.45 0.84 147 HELO_NODOT 2677 0.58 0.12 0.79 148 HELO_NO_DOMAIN 2672 0.58 0.12 0.79 149 FROM_GOV_DKIM_AU 2647 0.69 0.47 0.79 150 RCVD_IN_BL_SPAMCOP_NET 2560 3.05 8.10 0.76 151 TooManyTo_005 2514 0.66 0.48 0.75 152 T_FILL_THIS_FORM_SHORT 2472 0.99 1.54 0.73 153 XM_OfRef6 2451 1.27 2.48 0.73 154 SpammyFromTLD_01 2412 1.05 1.79 0.72 155 XMGenDplmaNmb 2387 0.97 1.56 0.71 156 HTTPS_HTTP_MISMATCH 2375 0.88 1.27 0.70 157 LOW_PRICE 2352 0.70 0.70 0.70 158 DKIM_ADSP_CUSTOM_MED 2345 0.84 1.16 0.70 159 T_XMHurry_00 2214 1.14 2.21 0.66 160 MPART_ALT_DIFF_COUNT 2166 0.76 1.02 0.64 161 XMSexyCombo_01 2123 0.69 0.81 0.63 162 HTML_TAG_BALANCE_BODY 2097 0.72 0.94 0.62 163 URI_TRY_3LD 2081 0.76 1.08 0.62 164 XMNoVowels 2058 0.57 0.49 0.61 165 TR_MetaPhish_Combo_01 2055 0.65 0.75 0.61 166 T_OBFU_PDF_ATTACH 2020 0.70 0.92 0.60 167 XM_B_DNDMA 2006 0.75 1.10 0.60 168 TR_XM_Base64_M1 2005 0.82 1.30 0.60 169 XM_H_PHPMailer 1999 0.56 0.49 0.59 170 XM_ProductURIs 1975 0.88 1.54 0.59 171 RCVD_IN_PBL 1940 0.66 0.85 0.58 172 XM_B_SpammyWords4 1905 1.11 2.31 0.57 173 TR_XM_SpammyWords2 1890 3.71 10.68 0.56 174 XM_ShortIntro_01 1888 0.55 0.52 0.56 175 XM_URI_RBL 1830 1.40 3.28 0.54 176 SpammyFromTLD_02 1810 0.91 1.75 0.54 177 TVD_RCVD_IP 1771 0.61 0.80 0.53 178 MAY_BE_FORGED 1720 0.52 0.54 0.51 179 TVD_PH_SEC 1702 0.37 0.06 0.51 180 T_Symld_Words_02 1668 0.62 0.90 0.50 181 XMSexyCombo_04 1646 0.45 0.35 0.49 182 T_TVD_MIME_NO_HEADERS 1589 0.34 0.05 0.47 183 HTML_FONT_FACE_BAD 1556 0.49 0.57 0.46 184 XMOemUri 1546 0.42 0.35 0.46 185 MIME_CHARSET_FARAWAY 1542 0.61 0.94 0.46 186 RELAYCOUNTRY_GB 1542 0.52 0.65 0.46 187 XMPhish30 1538 0.82 1.62 0.46 188 NML_ADSP_CUSTOM_MED 1528 0.59 0.88 0.45 189 XMSubMetaSxObfu_03 1514 0.56 0.81 0.45 190 TM2_M_OBFU_COMMENT 1511 0.64 1.05 0.45 191 USER_IN_WHITELIST 1506 0.31 0.00 0.45 192 USER_IN_WELCOMELIST 1506 0.31 0.00 0.45 193 FORGED_GMAIL_RCVD 1439 0.53 0.77 0.43 194 HTML_IMAGE_ONLY_32 1428 0.35 0.17 0.42 195 HTML_IMAGE_ONLY_28 1389 0.40 0.37 0.41 196 XMSolicitRefs_0 1378 0.45 0.56 0.41 197 XMLngstWrd_00 1371 0.45 0.54 0.41 198 TR_XM_SPAMCOP 1346 2.20 6.17 0.40 199 HTML_TEXT_INVISIBLE_STYLE 1330 0.32 0.16 0.39 200 MSGID_FROM_MTA_HEADER 1327 0.30 0.08 0.39 ----------------------------------------------------------------------