Email: 484320 Autolearn: 0 AvgScore: 4.51 AvgScanTime: 1.38 sec Spam: 152827 Autolearn: 0 AvgScore: 14.29 AvgScanTime: 1.51 sec Ham: 331493 Autolearn: 0 AvgScore: 0.00 AvgScanTime: 1.33 sec Time Spent Running SA: 186.31 hours Time Spent Processing Spam: 64.25 hours Time Spent Processing Ham: 122.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144666 89.08 94.66 86.50 2 DKIM_SIGNED 136598 80.27 89.38 76.07 3 XM_DK_Pass 132040 78.40 86.40 74.71 4 DKIM_VALID 130390 77.27 85.32 73.56 5 RELAYCOUNTRY_US 128839 81.46 84.30 80.16 6 XM_B_Unicode 127426 74.91 83.38 71.01 7 DCC_CHECK 114982 51.64 75.24 40.76 8 XMListUnsubscribeExists 107101 56.09 70.08 49.64 9 XM_B_SpammyWords 104271 52.30 68.23 44.96 10 DKIM_VALID_AU 102522 62.03 67.08 59.69 11 XM_B_Unicode3 74628 44.05 48.83 41.85 12 LOC_TINY_FONT_1 71576 33.08 46.83 26.74 13 BAYES_50 62405 54.62 40.83 60.97 14 XM_B_SpammyWords2 59969 24.64 39.24 17.90 15 HTML_FONT_LOW_CONTRAST 58866 31.44 38.52 28.18 16 XM_DK_Undo_02 58384 15.32 38.20 4.77 17 RCVD_IN_MSPIKE_H2 57446 35.42 37.59 34.42 18 FVGT_m_MULTI_ODD 52877 27.74 34.60 24.58 19 T_KAM_HTML_FONT_INVALID 47078 23.46 30.80 20.07 20 BAYES_99 46505 12.01 30.43 3.51 21 MIME_HTML_ONLY 43330 21.78 28.35 18.75 22 DKIM_VALID_EF 41641 28.91 27.25 29.68 23 TR_XM_DKIM_Undo 39551 9.40 25.88 1.80 24 BAYES_999 36389 9.34 23.81 2.67 25 XMSubLong 35795 23.19 23.42 23.09 26 DCC_CHECK_NEGATIVE 35553 47.85 23.26 59.18 27 XM_Multi_Part_URI 33974 18.63 22.23 16.97 28 TR_DCC_Bayes_99 33722 7.78 22.07 1.19 29 T_TM2_M_HEADER_IN_MSG 33100 26.51 21.66 28.75 30 TR_XM_DK_Unsub 28598 14.64 18.71 12.76 31 XM_B_Unsub 27235 11.32 17.82 8.33 32 UNPARSEABLE_RELAY 26760 13.54 17.51 11.71 33 TR_XM_BayesUnsub 26457 10.12 17.31 6.81 34 RELAYCOUNTRY_META 22944 7.31 15.01 3.75 35 TR_MAX_INTL_RELAY 22496 8.67 14.72 5.89 36 XM_B_SpammyWords3 20006 7.27 13.09 4.58 37 BOTNET_IPINHOSTNAME 18934 6.00 12.39 3.06 38 LOTS_OF_MONEY 18125 7.81 11.86 5.94 39 TR_XM_SpammyRelay 16598 4.73 10.86 1.90 40 TR_XM_SpammyWords4 15970 5.98 10.45 3.93 41 XM_Evil_Numbers_Gen 15950 9.34 10.44 8.83 42 TR_XM_SpammyWords2 15600 3.47 10.21 0.36 43 FSL_BULK_SIG 15033 7.79 9.84 6.85 44 BAYES_80 14241 5.44 9.32 3.65 45 TR_XM_UnparsRelay 13986 3.97 9.15 1.59 46 HTML_IMAGE_RATIO_02 13927 6.51 9.11 5.31 47 BAYES_60 12962 8.78 8.48 8.91 48 XM_B_Phish_Phrases 12858 6.16 8.41 5.12 49 BOTNET 12204 3.31 7.99 1.15 50 LotsOfNums_01 11628 7.84 7.61 7.95 51 XM_B_PhoneNumber 10543 8.38 6.90 9.06 52 RCVD_IN_BL_SPAMCOP_NET 10257 2.52 6.71 0.59 53 XM_Body_Dirty_Words 9980 4.41 6.53 3.43 54 XMSubMetaSx_00 9254 4.60 6.06 3.93 55 TooManyTo_001 9231 8.06 6.04 9.00 56 MPART_ALT_DIFF 9165 4.87 6.00 4.35 57 XM_H_Long_From01 9107 5.56 5.96 5.38 58 RELAYCOUNTRY_CA 9066 2.63 5.93 1.10 59 XM_UncommonTLD01 8567 4.50 5.61 3.99 60 XM_B_SEO 8535 2.62 5.58 1.25 61 UNTRUSTED_Relay 8345 2.74 5.46 1.49 62 TR_XM_SPAMCOP 8267 1.91 5.41 0.29 63 XM_H_GMP 8225 5.25 5.38 5.20 64 BAYES_95 7889 3.16 5.16 2.23 65 TR_XM_SEO4 7514 2.05 4.92 0.73 66 HTML_IMAGE_RATIO_04 7408 4.88 4.85 4.90 67 RCVD_IN_MSPIKE_WL 7268 5.14 4.76 5.32 68 RCVD_IN_MSPIKE_H3 7268 5.14 4.76 5.32 69 XMSexyCombo_05 7193 2.51 4.71 1.49 70 XM_B_Investor 6980 2.34 4.57 1.31 71 XM_SPF_SoftFail 6784 2.61 4.44 1.77 72 T_XMDrugObfuBody_14 6516 2.61 4.26 1.85 73 TR_XM_SpammyWords5 6397 2.19 4.19 1.26 74 DKIM_INVALID 6208 3.00 4.06 2.51 75 TR_XM_PhishingBody 6088 2.31 3.98 1.54 76 XM_CamelCaseFrm001 6072 3.08 3.97 2.67 77 XMStrtUSub 6039 4.44 3.95 4.67 78 MIME_HTML_ONLY_MULTI 6016 2.66 3.94 2.08 79 TM2_M_VERY_LONG_WORD 5771 2.21 3.78 1.48 80 XM_B_SpammyTLD 5649 4.07 3.70 4.24 81 XMNumbers 5578 2.87 3.65 2.51 82 MIME_HTML_MOSTLY 5470 3.23 3.58 3.07 83 HTML_IMAGE_RATIO_06 5160 2.50 3.38 2.09 84 T_XMDrugObfuBody_08 4887 1.96 3.20 1.38 85 MIME_QP_LONG_LINE 4793 5.19 3.14 6.13 86 XM_OfRef6 4741 1.48 3.10 0.73 87 RELAYCOUNTRY_AU 4595 1.39 3.01 0.65 88 XM_URI_RBL 4545 1.20 2.97 0.38 89 HTML_IMAGE_RATIO_08 4469 2.29 2.92 1.99 90 XM_UB50 4445 1.56 2.91 0.94 91 TM2_M_URI_OPT_OUT 4259 2.72 2.79 2.69 92 XM_B_URI_Unicode 4183 2.18 2.74 1.92 93 XMDiploma_00 4182 1.93 2.74 1.56 94 T_TooManySym_01 3990 4.61 2.61 5.53 95 T_XMHurry_00 3813 1.28 2.49 0.72 96 RCVD_IN_VALIDITY_RPBL 3800 0.90 2.49 0.17 97 SUBJ_ALL_CAPS 3759 1.79 2.46 1.49 98 RCVD_IN_VALIDITY_SAFE 3625 4.29 2.37 5.17 99 XMBody_17 3555 1.07 2.33 0.49 100 XM_B_Unsub2 3518 1.49 2.30 1.12 101 XM_B_SpammyWords4 3309 1.07 2.17 0.57 102 FROM_EXCESS_BASE64 3232 2.15 2.11 2.17 103 MAILING_LIST_MULTI 3201 2.37 2.09 2.50 104 USER_IN_DEF_DKIM_WL 3149 9.98 2.06 13.63 105 XMStockSpam_06 2988 1.43 1.96 1.19 106 TR_XM_NoHeaderRelay 2928 0.71 1.92 0.16 107 XMBrknScrpt_02 2770 1.32 1.81 1.09 108 BAYES_40 2742 3.85 1.79 4.80 109 RCVD_IN_VALIDITY_CERTIFIED 2702 3.43 1.77 4.20 110 SpammyFromTLD_01 2656 1.18 1.74 0.92 111 XM_DK_Undo_01 2632 1.80 1.72 1.83 112 URI_HEX 2606 1.42 1.71 1.29 113 T_FILL_THIS_FORM_SHORT 2546 1.12 1.67 0.87 114 SpammyFromTLD_02 2545 0.69 1.67 0.24 115 XM_H_Undi_Recip 2524 0.69 1.65 0.24 116 TooManyTo_002 2484 2.07 1.63 2.27 117 TR_LOTS_OF_MONEY3 2450 0.75 1.60 0.36 118 T_XMDrugObfuBody_00 2415 0.97 1.58 0.68 119 XM_ProductURIs 2337 0.86 1.53 0.55 120 RCVD_IN_ZEN_LASTEXTERNAL 2277 0.47 1.49 0.00 121 SHORTCIRCUIT 2277 0.47 1.49 0.00 122 TR_Symld_Words 2273 1.63 1.49 1.69 123 T_REMOTE_IMAGE 2258 3.03 1.48 3.75 124 HTML_MIME_NO_HTML_TAG 2238 1.96 1.46 2.19 125 TR_XM_Undi_Recip19 2190 0.50 1.43 0.07 126 TR_XM_FormFill 2161 0.46 1.41 0.01 127 RCVD_IN_IADB_LISTED 2116 3.02 1.38 3.78 128 ALL_TRUSTED 2110 11.89 1.38 16.73 129 XM_SendGrid 2089 1.38 1.37 1.39 130 HTTPS_HTTP_MISMATCH 2083 1.03 1.36 0.88 131 XM_H_Long_From02 2019 1.09 1.32 0.99 132 XMPhish30 1995 0.77 1.31 0.52 133 THIS_AD 1985 0.66 1.30 0.37 134 TR_XM_PHPDW 1976 0.74 1.29 0.49 135 XM_B_COPY_HTML 1959 0.89 1.28 0.71 136 TR_XM_PHPForged 1957 0.74 1.28 0.49 137 SHOPIFY_IMG_NOT_RCVD_SFY 1947 0.58 1.27 0.26 138 TR_XM_Undi_RecipCombo2 1893 0.40 1.24 0.01 139 TR_XM_FormFill2 1892 0.73 1.24 0.49 140 XMSubMetaI_00 1888 0.81 1.24 0.62 141 XMBdyGiftCard01 1884 1.09 1.23 1.02 142 XMGenDplmaNmb 1882 0.88 1.23 0.72 143 XM_H_PHPOS 1869 0.71 1.22 0.48 144 XMReplyNow 1809 0.54 1.18 0.24 145 RCVD_IN_IADB_SPF 1784 2.65 1.17 3.34 146 XM_B_COVIDMETA 1765 0.52 1.15 0.23 147 URI_TRY_3LD 1751 0.85 1.15 0.72 148 BAYES_20 1745 2.74 1.14 3.48 149 XM_OfRef7 1716 0.41 1.12 0.09 150 DKIM_ADSP_CUSTOM_MED 1709 0.92 1.12 0.83 151 URI_NOVOWEL 1707 2.57 1.12 3.24 152 TR_XM_Undi_Recip11 1686 0.38 1.10 0.05 153 XM_B_REG_HTML 1677 0.52 1.10 0.25 154 MPART_ALT_DIFF_COUNT 1664 0.68 1.09 0.49 155 RCVD_IN_PBL 1663 0.82 1.09 0.69 156 LongTLD 1656 0.61 1.08 0.39 157 KHOP_HELO_FCRDNS 1655 1.30 1.08 1.40 158 RCVD_IN_IADB_DK 1622 2.32 1.06 2.89 159 RCVD_IN_IADB_SENDERID 1618 2.40 1.06 3.01 160 FILL_THIS_FORM 1612 0.53 1.05 0.29 161 RDNS_DYNAMIC 1564 0.56 1.02 0.34 162 TR_Mismatch_TLD_02 1562 0.36 1.02 0.06 163 XM_B_FormFill 1543 0.39 1.01 0.10 164 LONGLN_LOW_CONTRAST 1541 0.54 1.01 0.32 165 TR_XM_INV_DKIM 1540 0.35 1.01 0.04 166 PDS_RDNS_DYNAMIC_FP 1539 0.44 1.01 0.18 167 HTML_TAG_BALANCE_BODY 1524 0.72 1.00 0.60 168 TR_XM_RelayPhish 1520 0.38 0.99 0.09 169 TR_XM_Base64_M1 1502 0.87 0.98 0.81 170 UNDISC_MONEY 1502 0.31 0.98 0.00 171 FILL_THIS_FORM_LONG 1501 0.33 0.98 0.04 172 DIET_1 1484 0.47 0.97 0.24 173 XM_B_Phish66 1476 0.51 0.97 0.31 174 TR_Sbj_FN_Bdy 1474 0.38 0.96 0.12 175 TR_XM_Undi_Recip5 1459 0.30 0.95 0.00 176 XM_Appointment_Request 1457 0.30 0.95 0.00 177 XMHTMLBadTable_001 1454 0.49 0.95 0.27 178 RELAYCOUNTRY_FR 1449 0.44 0.95 0.21 179 TR_XM_Undi_RecipCombo3 1425 0.29 0.93 0.00 180 LOADSA_MONEY_COMBO 1401 0.31 0.92 0.03 181 T_STY_INVIS_DIRECT 1392 0.49 0.91 0.30 182 XMHTML_After_End 1389 0.49 0.91 0.30 183 XM_B_DNDMA 1387 0.78 0.91 0.72 184 NML_ADSP_CUSTOM_MED 1385 0.67 0.91 0.56 185 TM2_M_OBFU_COMMENT 1360 0.61 0.89 0.48 186 XMNoVowels 1343 0.74 0.88 0.68 187 XM_Lotto 1340 0.31 0.88 0.04 188 XM_DIRTYINTL 1340 0.33 0.88 0.08 189 XFER_LOTSA_MONEY 1335 0.29 0.87 0.02 190 T_MONEY_PERCENT 1334 0.46 0.87 0.27 191 TR_LOTS_OF_MONEY2 1334 0.46 0.87 0.27 192 TR_XM_DK_SendGrid 1328 0.93 0.87 0.95 193 TR_XM_Undi_Recip2 1328 0.28 0.87 0.01 194 TR_MetaPhish_Combo_01 1323 0.90 0.87 0.91 195 XMClaimOffer 1320 0.45 0.86 0.27 196 TR_XM_InvalidRelay 1318 0.28 0.86 0.02 197 XMPhish14 1312 0.58 0.86 0.45 198 HK_SCAM 1311 0.28 0.86 0.01 199 MONEY_FRAUD_8 1259 0.26 0.82 0.00 200 DKIM_ADSP_NXDOMAIN 1254 0.47 0.82 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286749 89.08 94.66 86.50 2 RELAYCOUNTRY_US 265712 81.46 84.30 80.16 3 DKIM_SIGNED 252178 80.27 89.38 76.07 4 XM_DK_Pass 247652 78.40 86.40 74.71 5 DKIM_VALID 243851 77.27 85.32 73.56 6 XM_B_Unicode 235384 74.91 83.38 71.01 7 BAYES_50 202108 54.62 40.83 60.97 8 DKIM_VALID_AU 197882 62.03 67.08 59.69 9 DCC_CHECK_NEGATIVE 196180 47.85 23.26 59.18 10 XMListUnsubscribeExists 164566 56.09 70.08 49.64 11 XM_B_SpammyWords 149035 52.30 68.23 44.96 12 XM_B_Unicode3 138714 44.05 48.83 41.85 13 DCC_CHECK 135120 51.64 75.24 40.76 14 RCVD_IN_MSPIKE_H2 114084 35.42 37.59 34.42 15 DKIM_VALID_EF 98396 28.91 27.25 29.68 16 T_TM2_M_HEADER_IN_MSG 95299 26.51 21.66 28.75 17 HTML_FONT_LOW_CONTRAST 93399 31.44 38.52 28.18 18 LOC_TINY_FONT_1 88637 33.08 46.83 26.74 19 FVGT_m_MULTI_ODD 81481 27.74 34.60 24.58 20 XMSubLong 76528 23.19 23.42 23.09 21 T_KAM_HTML_FONT_INVALID 66543 23.46 30.80 20.07 22 MIME_HTML_ONLY 62160 21.78 28.35 18.75 23 XM_B_SpammyWords2 59348 24.64 39.24 17.90 24 XM_Multi_Part_URI 56241 18.63 22.23 16.97 25 ALL_TRUSTED 55452 11.89 1.38 16.73 26 USER_IN_DEF_DKIM_WL 45176 9.98 2.06 13.63 27 TR_XM_DK_Unsub 42305 14.64 18.71 12.76 28 UNPARSEABLE_RELAY 38814 13.54 17.51 11.71 29 BAYES_00 34587 7.36 0.68 10.43 30 XM_B_PhoneNumber 30043 8.38 6.90 9.06 31 TooManyTo_001 29826 8.06 6.04 9.00 32 BAYES_60 29538 8.78 8.48 8.91 33 XM_Evil_Numbers_Gen 29276 9.34 10.44 8.83 34 XM_B_Unsub 27602 11.32 17.82 8.33 35 LotsOfNums_01 26356 7.84 7.61 7.95 36 TR_XM_DK_Bayes 26224 5.59 0.56 7.91 37 TR_XM_DK_Bayes1 25612 5.46 0.56 7.73 38 XM_DKIMWhitelistDomains 25463 5.29 0.11 7.68 39 FSL_BULK_SIG 22697 7.79 9.84 6.85 40 TR_XM_BayesUnsub 22560 10.12 17.31 6.81 41 TR_XM_DK_Bayes2 22391 4.74 0.38 6.75 42 IN_ZIMBRA_NJ_WHITELIST 21682 4.50 0.08 6.54 43 MIME_QP_LONG_LINE 20332 5.19 3.14 6.13 44 LOTS_OF_MONEY 19686 7.81 11.86 5.94 45 TR_MAX_INTL_RELAY 19516 8.67 14.72 5.89 46 T_TooManySym_01 18348 4.61 2.61 5.53 47 XM_H_Long_From01 17829 5.56 5.96 5.38 48 RCVD_IN_MSPIKE_H3 17640 5.14 4.76 5.32 49 RCVD_IN_MSPIKE_WL 17640 5.14 4.76 5.32 50 HTML_IMAGE_RATIO_02 17594 6.51 9.11 5.31 51 XM_H_GMP 17223 5.25 5.38 5.20 52 RCVD_IN_VALIDITY_SAFE 17146 4.29 2.37 5.17 53 XM_B_Phish_Phrases 16964 6.16 8.41 5.12 54 HTML_IMAGE_RATIO_04 16232 4.88 4.85 4.90 55 BAYES_40 15923 3.85 1.79 4.80 56 XM_DK_Undo_02 15813 15.32 38.20 4.77 57 XMStrtUSub 15476 4.44 3.95 4.67 58 XM_B_SpammyWords3 15195 7.27 13.09 4.58 59 MPART_ALT_DIFF 14428 4.87 6.00 4.35 60 XM_B_SpammyTLD 14041 4.07 3.70 4.24 61 XM_PDF 13943 3.09 0.66 4.21 62 RCVD_IN_VALIDITY_CERTIFIED 13924 3.43 1.77 4.20 63 XM_UncommonTLD01 13220 4.50 5.61 3.99 64 XMSubMetaSx_00 13039 4.60 6.06 3.93 65 TR_XM_SpammyWords4 13015 5.98 10.45 3.93 66 RCVD_IN_IADB_LISTED 12526 3.02 1.38 3.78 67 RELAYCOUNTRY_META 12441 7.31 15.01 3.75 68 T_REMOTE_IMAGE 12434 3.03 1.48 3.75 69 BAYES_80 12105 5.44 9.32 3.65 70 BAYES_99 11646 12.01 30.43 3.51 71 BAYES_20 11530 2.74 1.14 3.48 72 XM_Body_Dirty_Words 11362 4.41 6.53 3.43 73 RCVD_IN_IADB_SPF 11060 2.65 1.17 3.34 74 URI_NOVOWEL 10739 2.57 1.12 3.24 75 ANY_BOUNCE_MESSAGE 10511 2.40 0.72 3.17 76 BOUNCE_MESSAGE 10510 2.40 0.72 3.17 77 MIME_HTML_MOSTLY 10163 3.23 3.58 3.07 78 BOTNET_IPINHOSTNAME 10134 6.00 12.39 3.06 79 RCVD_IN_IADB_SENDERID 9988 2.40 1.06 3.01 80 RCVD_IN_IADB_DK 9595 2.32 1.06 2.89 81 T_TooManySym_02 9422 2.16 0.69 2.84 82 TM2_M_URI_OPT_OUT 8913 2.72 2.79 2.69 83 BAYES_999 8861 9.34 23.81 2.67 84 XM_CamelCaseFrm001 8854 3.08 3.97 2.67 85 RCVD_IN_IADB_VOUCHED 8350 1.97 0.78 2.52 86 DKIM_INVALID 8327 3.00 4.06 2.51 87 XMNumbers 8310 2.87 3.65 2.51 88 MAILING_LIST_MULTI 8290 2.37 2.09 2.50 89 TooManyTo_002 7538 2.07 1.63 2.27 90 BAYES_95 7396 3.16 5.16 2.23 91 HTML_MIME_NO_HTML_TAG 7245 1.96 1.46 2.19 92 INVALID_MSGID 7195 1.53 0.14 2.17 93 FROM_EXCESS_BASE64 7191 2.15 2.11 2.17 94 HTML_IMAGE_RATIO_06 6934 2.50 3.38 2.09 95 MIME_HTML_ONLY_MULTI 6883 2.66 3.94 2.08 96 BAYES_05 6660 1.59 0.67 2.01 97 HTML_IMAGE_RATIO_08 6600 2.29 2.92 1.99 98 XM_B_URI_Unicode 6381 2.18 2.74 1.92 99 TR_XM_SpammyRelay 6295 4.73 10.86 1.90 100 TO_MALFORMED 6245 1.29 0.01 1.88 101 T_XMDrugObfuBody_14 6127 2.61 4.26 1.85 102 XM_DK_Undo_01 6074 1.80 1.72 1.83 103 TR_XM_DKIM_Undo 5956 9.40 25.88 1.80 104 XM_SPF_SoftFail 5871 2.61 4.44 1.77 105 RCVD_IN_IADB_OPTIN 5705 1.32 0.46 1.72 106 TR_Symld_Words 5609 1.63 1.49 1.69 107 TR_XM_UnparsRelay 5255 3.97 9.15 1.59 108 TooManyTo_003 5215 1.26 0.57 1.57 109 XMDiploma_00 5170 1.93 2.74 1.56 110 TR_XM_PhishingBody 5109 2.31 3.98 1.54 111 XMSexyCombo_05 4943 2.51 4.71 1.49 112 SUBJ_ALL_CAPS 4934 1.79 2.46 1.49 113 UNTRUSTED_Relay 4923 2.74 5.46 1.49 114 TM2_M_VERY_LONG_WORD 4920 2.21 3.78 1.48 115 KHOP_HELO_FCRDNS 4650 1.30 1.08 1.40 116 IN_HORDE_ADDRESS_BOOK 4645 0.99 0.11 1.40 117 XM_SendGrid 4617 1.38 1.37 1.39 118 T_XMDrugObfuBody_08 4588 1.96 3.20 1.38 119 XM_B_Investor 4339 2.34 4.57 1.31 120 URI_HEX 4275 1.42 1.71 1.29 121 TR_XM_SpammyWords5 4191 2.19 4.19 1.26 122 XM_B_SEO 4132 2.62 5.58 1.25 123 XMGappySubj_01 4044 0.89 0.17 1.22 124 TR_DCC_Bayes_99 3959 7.78 22.07 1.19 125 XMStockSpam_06 3945 1.43 1.96 1.19 126 TooManyTo_004 3824 0.96 0.53 1.15 127 BOTNET 3818 3.31 7.99 1.15 128 TVD_SPACE_RATIO 3816 0.84 0.15 1.15 129 XM_B_Unsub2 3702 1.49 2.30 1.12 130 RELAYCOUNTRY_CA 3649 2.63 5.93 1.10 131 XM_TLDProd2 3634 0.89 0.45 1.10 132 XM_GoogleGroups 3633 0.95 0.63 1.10 133 XMCapTrack 3615 0.91 0.53 1.09 134 SHORT_URI_3 3615 0.82 0.25 1.09 135 XMBrknScrpt_02 3609 1.32 1.81 1.09 136 XMBdyGiftCard01 3388 1.09 1.23 1.02 137 HELO_NODOT 3294 0.71 0.10 0.99 138 HELO_NO_DOMAIN 3293 0.71 0.10 0.99 139 T_TooManySym_03 3293 0.75 0.21 0.99 140 XM_H_Long_From02 3279 1.09 1.32 0.99 141 TR_XM_DK_SendGrid 3155 0.93 0.87 0.95 142 XM_UB50 3122 1.56 2.91 0.94 143 TooManyTo_005 3119 0.80 0.48 0.94 144 HTML_IMAGE_ONLY_32 3105 0.71 0.22 0.94 145 SpammyFromTLD_01 3050 1.18 1.74 0.92 146 TR_MetaPhish_Combo_01 3033 0.90 0.87 0.91 147 XMGappySubj_02 2963 0.63 0.06 0.89 148 HTTPS_HTTP_MISMATCH 2916 1.03 1.36 0.88 149 T_FILL_THIS_FORM_SHORT 2890 1.12 1.67 0.87 150 DKIM_ADSP_CUSTOM_MED 2747 0.92 1.12 0.83 151 XMBody_95 2702 0.66 0.31 0.82 152 TR_XM_Base64_M1 2695 0.87 0.98 0.81 153 XM_ShortIntro_01 2500 0.68 0.51 0.75 154 XM_OfRef6 2418 1.48 3.10 0.73 155 TR_XM_SEO4 2407 2.05 4.92 0.73 156 XMGenDplmaNmb 2396 0.88 1.23 0.72 157 T_XMHurry_00 2395 1.28 2.49 0.72 158 XM_B_DNDMA 2393 0.78 0.91 0.72 159 URI_TRY_3LD 2382 0.85 1.15 0.72 160 XM_B_COPY_HTML 2369 0.89 1.28 0.71 161 RCVD_IN_PBL 2302 0.82 1.09 0.69 162 T_XMDrugObfuBody_00 2264 0.97 1.58 0.68 163 XMNoVowels 2262 0.74 0.88 0.68 164 RELAYCOUNTRY_AU 2142 1.39 3.01 0.65 165 XMSubMetaI_00 2057 0.81 1.24 0.62 166 XM_H_PHPMailer 2045 0.60 0.55 0.62 167 HTML_TAG_BALANCE_BODY 1982 0.72 1.00 0.60 168 RCVD_IN_BL_SPAMCOP_NET 1948 2.52 6.71 0.59 169 XM_B_SpammyWords4 1889 1.07 2.17 0.57 170 NML_ADSP_CUSTOM_MED 1841 0.67 0.91 0.56 171 XM_ProductURIs 1836 0.86 1.53 0.55 172 XMLngstWrd_00 1730 0.50 0.45 0.52 173 XMPhish30 1726 0.77 1.31 0.52 174 HTML_IMAGE_ONLY_20 1721 0.46 0.34 0.52 175 TR_XM_SpoofStaff 1709 0.39 0.13 0.52 176 T_TVD_MIME_NO_HEADERS 1705 0.36 0.04 0.51 177 XM_H_SpoofStaff4 1700 0.38 0.10 0.51 178 FORGED_GMAIL_RCVD 1699 0.59 0.74 0.51 179 TR_XM_PHPForged 1639 0.74 1.28 0.49 180 TVD_RCVD_IP 1639 0.60 0.81 0.49 181 TR_XM_PHPDW 1629 0.74 1.29 0.49 182 T_OBFU_PDF_ATTACH 1622 0.40 0.21 0.49 183 TR_XM_FormFill2 1621 0.73 1.24 0.49 184 MPART_ALT_DIFF_COUNT 1617 0.68 1.09 0.49 185 XMBody_17 1613 1.07 2.33 0.49 186 TM2_M_OBFU_COMMENT 1590 0.61 0.89 0.48 187 XM_H_PHPOS 1586 0.71 1.22 0.48 188 XMMoneyMeta_00 1568 0.52 0.63 0.47 189 RELAYCOUNTRY_GB 1561 0.53 0.66 0.47 190 XMOemUri 1559 0.44 0.37 0.47 191 FROM_GOV_DKIM_AU 1557 0.35 0.10 0.47 192 TO_NO_BRKTS_HTML_ONLY 1519 0.37 0.18 0.46 193 USER_IN_WELCOMELIST 1512 0.31 0.00 0.46 194 USER_IN_WHITELIST 1512 0.31 0.00 0.46 195 PLING_QUERY 1498 0.53 0.71 0.45 196 XMSpoofStaff2 1496 0.34 0.10 0.45 197 TR_XM_PSC1 1492 0.34 0.09 0.45 198 MSGID_FROM_MTA_HEADER 1491 0.35 0.12 0.45 199 XMPhish14 1479 0.58 0.86 0.45 200 XM_DKIMRevIO 1444 0.30 0.00 0.44 ----------------------------------------------------------------------