Email: 527910 Autolearn: 0 AvgScore: 2.72 AvgScanTime: 1.53 sec Spam: 154538 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.75 sec Ham: 373372 Autolearn: 0 AvgScore: -1.95 AvgScanTime: 1.43 sec Time Spent Running SA: 223.68 hours Time Spent Processing Spam: 75.13 hours Time Spent Processing Ham: 148.55 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147431 90.13 95.40 87.95 2 DKIM_SIGNED 140267 74.45 90.77 67.69 3 XM_DK_Pass 134891 72.70 87.29 66.66 4 DKIM_VALID 132504 71.64 85.74 65.81 5 RELAYCOUNTRY_US 132347 83.19 85.64 82.18 6 XM_B_Unicode 129885 76.94 84.05 73.99 7 DCC_CHECK 113251 47.64 73.28 37.03 8 XMListUnsubscribeExists 108934 53.00 70.49 45.76 9 XM_B_SpammyWords 107685 51.88 69.68 44.51 10 DKIM_VALID_AU 102972 56.81 66.63 52.75 11 XM_B_Unicode3 75733 45.90 49.01 44.61 12 LOC_TINY_FONT_1 73334 30.87 47.45 24.00 13 BAYES_50 65620 54.35 42.46 59.28 14 XM_DK_Undo_02 63377 15.29 41.01 4.64 15 XM_B_SpammyWords2 61570 23.37 39.84 16.55 16 HTML_FONT_LOW_CONTRAST 59221 29.20 38.32 25.42 17 RCVD_IN_MSPIKE_H2 58716 32.25 37.99 29.88 18 FVGT_m_MULTI_ODD 52839 25.12 34.19 21.36 19 T_KAM_HTML_FONT_INVALID 48201 22.44 31.19 18.82 20 BAYES_99 46974 11.20 30.40 3.25 21 MIME_HTML_ONLY 45253 24.19 29.28 22.08 22 TR_XM_DKIM_Undo 44319 9.66 28.68 1.79 23 DKIM_VALID_EF 44122 26.05 28.55 25.02 24 DCC_CHECK_NEGATIVE 39384 51.97 25.48 62.93 25 XMSubLong 36734 22.82 23.77 22.43 26 BAYES_999 36656 8.65 23.72 2.41 27 XM_Multi_Part_URI 36557 17.15 23.66 14.45 28 T_TM2_M_HEADER_IN_MSG 33768 24.27 21.85 25.26 29 TR_DCC_Bayes_99 32008 6.85 20.71 1.11 30 TR_XM_DK_Unsub 31078 13.97 20.11 11.43 31 XM_B_Unsub 28068 10.71 18.16 7.63 32 UNPARSEABLE_RELAY 27930 11.87 18.07 9.30 33 TR_XM_BayesUnsub 26712 9.33 17.29 6.04 34 RELAYCOUNTRY_META 21894 6.51 14.17 3.35 35 XM_B_SpammyWords3 21813 6.97 14.11 4.01 36 TR_MAX_INTL_RELAY 21183 7.88 13.71 5.46 37 LOTS_OF_MONEY 19698 7.59 12.75 5.46 38 BOTNET_IPINHOSTNAME 18601 5.61 12.04 2.94 39 TR_XM_SpammyWords4 17547 5.95 11.35 3.71 40 TR_XM_SpammyRelay 16510 4.48 10.68 1.91 41 XM_Evil_Numbers_Gen 15696 9.89 10.16 9.78 42 TR_XM_SpammyWords2 15017 3.08 9.72 0.33 43 RCVD_IN_BL_SPAMCOP_NET 14889 3.24 9.63 0.60 44 TR_XM_UnparsRelay 14108 3.66 9.13 1.39 45 XM_B_Phish_Phrases 14013 5.59 9.07 4.15 46 BAYES_80 12838 4.71 8.31 3.22 47 FSL_BULK_SIG 12727 7.28 8.24 6.88 48 BOTNET 12578 3.27 8.14 1.26 49 LotsOfNums_01 12395 7.98 8.02 7.97 50 TR_XM_SPAMCOP 11959 2.51 7.74 0.35 51 XM_Body_Dirty_Words 11830 3.59 7.66 1.91 52 XM_B_PhoneNumber 11808 7.78 7.64 7.84 53 BAYES_60 11709 7.69 7.58 7.74 54 HTML_IMAGE_RATIO_02 11371 5.32 7.36 4.48 55 XMSubMetaSx_00 10559 3.95 6.83 2.76 56 MPART_ALT_DIFF 9826 8.17 6.36 8.92 57 TooManyTo_001 9796 6.84 6.34 7.04 58 XM_H_Long_From01 9683 5.31 6.27 4.91 59 RELAYCOUNTRY_CA 9207 2.49 5.96 1.06 60 XM_UncommonTLD01 8506 4.09 5.50 3.50 61 XM_H_GMP 8218 4.70 5.32 4.45 62 XM_B_SEO 8128 2.35 5.26 1.14 63 HTML_IMAGE_RATIO_04 7978 11.47 5.16 14.08 64 BAYES_95 7967 3.09 5.16 2.24 65 XMSexyCombo_05 7780 1.99 5.03 0.74 66 DKIM_INVALID 7763 2.81 5.02 1.89 67 TR_XM_PhishingBody 7646 2.64 4.95 1.68 68 TR_XM_SEO4 7133 1.88 4.62 0.75 69 T_XMDrugObfuBody_14 6998 2.38 4.53 1.49 70 UNTRUSTED_Relay 6876 2.23 4.45 1.31 71 XM_SPF_SoftFail 6782 2.33 4.39 1.47 72 XM_B_Investor 6653 2.13 4.31 1.23 73 XMStrtUSub 6454 8.46 4.18 10.24 74 TM2_M_VERY_LONG_WORD 6271 2.09 4.06 1.27 75 RCVD_IN_MSPIKE_WL 6141 4.67 3.97 4.95 76 RCVD_IN_MSPIKE_H3 6141 4.67 3.97 4.95 77 MIME_HTML_ONLY_MULTI 5884 6.30 3.81 7.34 78 MIME_QP_LONG_LINE 5787 4.88 3.74 5.34 79 HTML_IMAGE_RATIO_06 5763 4.12 3.73 4.29 80 XM_B_SpammyTLD 5694 3.82 3.68 3.88 81 TR_XM_SpammyWords5 5596 1.80 3.62 1.05 82 XMNumbers 5461 2.66 3.53 2.29 83 XM_CamelCaseFrm001 5306 2.71 3.43 2.41 84 MIME_HTML_MOSTLY 5249 2.50 3.40 2.12 85 XM_OfRef6 4949 1.48 3.20 0.76 86 HTML_IMAGE_RATIO_08 4848 2.26 3.14 1.90 87 T_XMDrugObfuBody_08 4806 1.86 3.11 1.34 88 RELAYCOUNTRY_AU 4665 1.32 3.02 0.62 89 TM2_M_URI_OPT_OUT 4664 2.55 3.02 2.36 90 XM_B_Unsub2 4509 1.78 2.92 1.31 91 XM_B_URI_Unicode 4420 2.00 2.86 1.64 92 XM_URI_RBL 4227 1.02 2.74 0.31 93 XMBody_17 4089 1.05 2.65 0.39 94 RCVD_IN_VALIDITY_SAFE 4020 4.05 2.60 4.66 95 RCVD_IN_VALIDITY_RPBL 3996 0.86 2.59 0.15 96 T_TooManySym_01 3920 4.00 2.54 4.61 97 XMStockSpam_06 3447 1.41 2.23 1.07 98 TooManyTo_002 3431 1.83 2.22 1.67 99 XMDiploma_00 3427 1.38 2.22 1.04 100 USER_IN_DEF_DKIM_WL 3350 9.71 2.17 12.83 101 XM_UB50 3346 1.13 2.17 0.71 102 TR_XM_NoHeaderRelay 3307 0.71 2.14 0.11 103 TR_XM_FormFill 3286 0.63 2.13 0.01 104 FROM_EXCESS_BASE64 3215 2.00 2.08 1.96 105 XM_B_SpammyWords4 3184 0.90 2.06 0.42 106 T_XMHurry_00 3161 1.01 2.05 0.58 107 RCVD_IN_VALIDITY_CERTIFIED 3111 3.13 2.01 3.60 108 MAILING_LIST_MULTI 3074 2.31 1.99 2.45 109 BAYES_40 2880 4.23 1.86 5.21 110 SpammyFromTLD_01 2813 1.06 1.82 0.74 111 TR_XM_PHPDW 2803 0.72 1.81 0.27 112 TR_XM_PHPForged 2801 0.72 1.81 0.27 113 XMPhish30 2788 0.83 1.80 0.43 114 TR_XM_FormFill2 2778 0.72 1.80 0.27 115 XMBrknScrpt_02 2750 1.02 1.78 0.71 116 SUBJ_ALL_CAPS 2731 1.38 1.77 1.22 117 XM_H_PHPOS 2727 0.70 1.76 0.26 118 TR_LOTS_OF_MONEY3 2721 0.86 1.76 0.49 119 XM_B_COVIDMETA 2699 0.68 1.75 0.24 120 XM_DK_Undo_01 2552 1.39 1.65 1.28 121 T_FILL_THIS_FORM_SHORT 2538 0.94 1.64 0.65 122 XMSubMetaI_00 2537 0.93 1.64 0.64 123 SpammyFromTLD_02 2370 0.80 1.53 0.50 124 XM_B_FormFill 2356 0.52 1.52 0.10 125 XM_Appointment_Request 2283 0.44 1.48 0.01 126 XMBdyGiftCard01 2256 1.22 1.46 1.12 127 XM_SendGrid 2249 1.29 1.46 1.23 128 T_XMDrugObfuBody_00 2192 0.89 1.42 0.68 129 URI_HEX 2191 1.14 1.42 1.02 130 XM_ProductURIs 2135 0.78 1.38 0.53 131 T_REMOTE_IMAGE 2115 2.55 1.37 3.03 132 BAYES_20 2065 2.91 1.34 3.56 133 XM_B_COPY_HTML 2053 0.88 1.33 0.69 134 XMGenDplmaNmb 2028 0.79 1.31 0.57 135 RCVD_IN_IADB_LISTED 1989 3.06 1.29 3.79 136 ALL_TRUSTED 1965 10.97 1.27 14.99 137 HTML_MIME_NO_HTML_TAG 1944 1.69 1.26 1.87 138 SHORTCIRCUIT 1888 0.36 1.22 0.00 139 RCVD_IN_ZEN_LASTEXTERNAL 1888 0.36 1.22 0.00 140 HTML_TAG_BALANCE_BODY 1849 0.83 1.20 0.68 141 XM_B_DNDMA 1844 0.82 1.19 0.66 142 TR_XM_RelayPhish 1826 0.40 1.18 0.08 143 XM_B_Phish66 1818 0.57 1.18 0.32 144 TM2_M_OBFU_COMMENT 1811 0.72 1.17 0.53 145 HTTPS_HTTP_MISMATCH 1803 0.77 1.17 0.61 146 XM_H_Long_From02 1788 0.99 1.16 0.93 147 THIS_AD 1786 0.55 1.16 0.30 148 RCVD_IN_IADB_SPF 1762 2.70 1.14 3.34 149 KHOP_HELO_FCRDNS 1761 1.07 1.14 1.04 150 SHOPIFY_IMG_NOT_RCVD_SFY 1721 0.45 1.11 0.18 151 TR_XM_Base64_M1 1718 0.73 1.11 0.57 152 XMSexyCombo_01 1705 0.39 1.10 0.10 153 PLING_QUERY 1694 0.64 1.10 0.45 154 DKIM_ADSP_CUSTOM_MED 1691 0.82 1.09 0.70 155 RCVD_IN_IADB_DK 1686 2.36 1.09 2.89 156 TR_XM_INV_DKIM 1673 0.35 1.08 0.05 157 RCVD_IN_IADB_SENDERID 1665 2.43 1.08 2.99 158 MPART_ALT_DIFF_COUNT 1664 0.60 1.08 0.41 159 XM_DIRTYINTL 1659 0.37 1.07 0.08 160 XM_B_REG_HTML 1656 0.47 1.07 0.23 161 BAYES_00 1643 9.23 1.06 12.61 162 TR_Symld_Words 1611 1.33 1.04 1.45 163 URI_NOVOWEL 1604 2.23 1.04 2.73 164 XMReplyNow 1595 0.42 1.03 0.16 165 DIET_1 1588 0.46 1.03 0.23 166 T_Symld_Words_02 1561 0.54 1.01 0.35 167 XM_H_Undi_Recip 1547 0.39 1.00 0.14 168 XMMoneyMeta_00 1498 0.55 0.97 0.38 169 XMHTML_After_End 1472 0.48 0.95 0.28 170 URI_TRY_3LD 1464 0.68 0.95 0.57 171 LongTLD 1456 0.51 0.94 0.33 172 XMHTMLBadTable_001 1408 0.81 0.91 0.77 173 TR_XM_DK_Bayes 1407 4.85 0.91 6.48 174 T_MONEY_PERCENT 1400 0.41 0.91 0.20 175 TR_LOTS_OF_MONEY2 1400 0.41 0.91 0.20 176 TR_XM_DK_Bayes1 1397 4.80 0.90 6.42 177 LONGLN_LOW_CONTRAST 1389 0.54 0.90 0.39 178 NML_ADSP_CUSTOM_MED 1377 0.60 0.89 0.47 179 XMPhish14 1350 0.64 0.87 0.55 180 XM_BadFromFormat 1346 0.32 0.87 0.09 181 T_STY_INVIS_DIRECT 1342 0.39 0.87 0.19 182 DKIM_ADSP_NXDOMAIN 1335 0.45 0.86 0.28 183 TR_XM_InvalidRelay 1307 0.26 0.85 0.02 184 TR_XM_Undi_Recip19 1292 0.28 0.84 0.05 185 RCVD_IN_PBL 1276 0.62 0.83 0.53 186 XMPhish08 1266 0.47 0.82 0.33 187 XMSubMetaSxObfu_03 1263 0.41 0.82 0.24 188 ANY_BOUNCE_MESSAGE 1262 2.43 0.82 3.09 189 BOUNCE_MESSAGE 1261 2.43 0.82 3.09 190 HOSTED_IMG_MULTI_PUB_01 1245 0.26 0.81 0.04 191 URIBL_BLACK 1218 0.25 0.79 0.03 192 RDNS_DYNAMIC 1217 0.43 0.79 0.28 193 XM_S_SpammyWords 1213 0.42 0.78 0.27 194 TR_XM_Spammywords 1213 0.42 0.78 0.27 195 XMBody_78 1212 0.39 0.78 0.22 196 XM_HighProb1 1204 0.23 0.78 0.01 197 T_TooManySym_02 1202 1.86 0.78 2.31 198 TR_XM_DK_SendGrid 1186 0.80 0.77 0.81 199 PDS_RDNS_DYNAMIC_FP 1184 0.32 0.77 0.14 200 RCVD_IN_XBL 1182 0.24 0.76 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 328381 90.13 95.40 87.95 2 RELAYCOUNTRY_US 306845 83.19 85.64 82.18 3 XM_B_Unicode 276264 76.94 84.05 73.99 4 DKIM_SIGNED 252752 74.45 90.77 67.69 5 XM_DK_Pass 248892 72.70 87.29 66.66 6 DKIM_VALID 245706 71.64 85.74 65.81 7 DCC_CHECK_NEGATIVE 234949 51.97 25.48 62.93 8 BAYES_50 221323 54.35 42.46 59.28 9 DKIM_VALID_AU 196948 56.81 66.63 52.75 10 XMListUnsubscribeExists 170841 53.00 70.49 45.76 11 XM_B_Unicode3 166564 45.90 49.01 44.61 12 XM_B_SpammyWords 166205 51.88 69.68 44.51 13 DCC_CHECK 138252 47.64 73.28 37.03 14 RCVD_IN_MSPIKE_H2 111549 32.25 37.99 29.88 15 HTML_FONT_LOW_CONTRAST 94914 29.20 38.32 25.42 16 T_TM2_M_HEADER_IN_MSG 94332 24.27 21.85 25.26 17 DKIM_VALID_EF 93412 26.05 28.55 25.02 18 LOC_TINY_FONT_1 89612 30.87 47.45 24.00 19 XMSubLong 83750 22.82 23.77 22.43 20 MIME_HTML_ONLY 82453 24.19 29.28 22.08 21 FVGT_m_MULTI_ODD 79751 25.12 34.19 21.36 22 T_KAM_HTML_FONT_INVALID 70260 22.44 31.19 18.82 23 XM_B_SpammyWords2 61785 23.37 39.84 16.55 24 ALL_TRUSTED 55959 10.97 1.27 14.99 25 XM_Multi_Part_URI 53956 17.15 23.66 14.45 26 HTML_IMAGE_RATIO_04 52582 11.47 5.16 14.08 27 USER_IN_DEF_DKIM_WL 47891 9.71 2.17 12.83 28 BAYES_00 47085 9.23 1.06 12.61 29 HTML_FONT_FACE_BAD 45857 8.89 0.70 12.28 30 XM_H_Trusted_IP 43102 8.16 0.00 11.54 31 TR_XM_DK_Unsub 42659 13.97 20.11 11.43 32 XMStrtUSub 38227 8.46 4.18 10.24 33 XM_Evil_Numbers_Gen 36517 9.89 10.16 9.78 34 UNPARSEABLE_RELAY 34708 11.87 18.07 9.30 35 MPART_ALT_DIFF 33295 8.17 6.36 8.92 36 LotsOfNums_01 29748 7.98 8.02 7.97 37 XM_B_PhoneNumber 29272 7.78 7.64 7.84 38 BAYES_60 28895 7.69 7.58 7.74 39 XM_B_Unsub 28494 10.71 18.16 7.63 40 MIME_HTML_ONLY_MULTI 27395 6.30 3.81 7.34 41 TooManyTo_001 26298 6.84 6.34 7.04 42 FSL_BULK_SIG 25686 7.28 8.24 6.88 43 XM_DKIMWhitelistDomains 24908 4.77 0.18 6.67 44 TR_XM_DK_Bayes 24197 4.85 0.91 6.48 45 TR_XM_DK_Bayes1 23953 4.80 0.90 6.42 46 TR_XM_BayesUnsub 22537 9.33 17.29 6.04 47 IN_ZIMBRA_NJ_WHITELIST 21788 4.16 0.11 5.84 48 TR_MAX_INTL_RELAY 20403 7.88 13.71 5.46 49 LOTS_OF_MONEY 20375 7.59 12.75 5.46 50 TR_XM_DK_Bayes2 20311 4.05 0.68 5.44 51 MIME_QP_LONG_LINE 19949 4.88 3.74 5.34 52 BAYES_40 19441 4.23 1.86 5.21 53 RCVD_IN_MSPIKE_WL 18490 4.67 3.97 4.95 54 RCVD_IN_MSPIKE_H3 18490 4.67 3.97 4.95 55 XM_H_Long_From01 18351 5.31 6.27 4.91 56 RCVD_IN_VALIDITY_SAFE 17383 4.05 2.60 4.66 57 XM_DK_Undo_02 17323 15.29 41.01 4.64 58 T_TooManySym_01 17208 4.00 2.54 4.61 59 HTML_IMAGE_RATIO_02 16736 5.32 7.36 4.48 60 XM_H_GMP 16604 4.70 5.32 4.45 61 HTML_IMAGE_RATIO_06 16010 4.12 3.73 4.29 62 XMSubNoVowel 15852 3.11 0.36 4.25 63 XM_B_Phish_Phrases 15483 5.59 9.07 4.15 64 XM_B_SpammyWords3 14980 6.97 14.11 4.01 65 XM_B_SpammyTLD 14471 3.82 3.68 3.88 66 RCVD_IN_IADB_LISTED 14144 3.06 1.29 3.79 67 TR_XM_SpammyWords4 13866 5.95 11.35 3.71 68 RCVD_IN_VALIDITY_CERTIFIED 13435 3.13 2.01 3.60 69 XM_PDF 13357 2.72 0.66 3.58 70 BAYES_20 13287 2.91 1.34 3.56 71 XM_UncommonTLD01 13064 4.09 5.50 3.50 72 RELAYCOUNTRY_META 12497 6.51 14.17 3.35 73 RCVD_IN_IADB_SPF 12489 2.70 1.14 3.34 74 BAYES_99 12150 11.20 30.40 3.25 75 BAYES_80 12040 4.71 8.31 3.22 76 ANY_BOUNCE_MESSAGE 11542 2.43 0.82 3.09 77 BOUNCE_MESSAGE 11541 2.43 0.82 3.09 78 T_REMOTE_IMAGE 11326 2.55 1.37 3.03 79 RCVD_IN_IADB_SENDERID 11161 2.43 1.08 2.99 80 BOTNET_IPINHOSTNAME 10994 5.61 12.04 2.94 81 RCVD_IN_IADB_DK 10794 2.36 1.09 2.89 82 BAYES_05 10782 2.22 0.62 2.89 83 XMSubMetaSx_00 10314 3.95 6.83 2.76 84 URI_NOVOWEL 10189 2.23 1.04 2.73 85 MAILING_LIST_MULTI 9132 2.31 1.99 2.45 86 RCVD_IN_IADB_VOUCHED 9033 1.87 0.54 2.42 87 BAYES_999 9012 8.65 23.72 2.41 88 XM_CamelCaseFrm001 9009 2.71 3.43 2.41 89 TM2_M_URI_OPT_OUT 8807 2.55 3.02 2.36 90 T_TooManySym_02 8615 1.86 0.78 2.31 91 XMNumbers 8558 2.66 3.53 2.29 92 BAYES_95 8356 3.09 5.16 2.24 93 MIME_HTML_MOSTLY 7928 2.50 3.40 2.12 94 XMSubLongNoVowel 7815 1.53 0.16 2.09 95 XMSubGarbage 7627 1.47 0.08 2.04 96 FROM_EXCESS_BASE64 7330 2.00 2.08 1.96 97 TR_XM_SpammyRelay 7141 4.48 10.68 1.91 98 INVALID_MSGID 7127 1.43 0.26 1.91 99 XM_Body_Dirty_Words 7120 3.59 7.66 1.91 100 HTML_IMAGE_RATIO_08 7087 2.26 3.14 1.90 101 DKIM_INVALID 7046 2.81 5.02 1.89 102 HTML_MIME_NO_HTML_TAG 6980 1.69 1.26 1.87 103 TR_XM_DKIM_Undo 6671 9.66 28.68 1.79 104 RCVD_IN_IADB_OPTIN 6661 1.37 0.36 1.78 105 TR_XM_PhishingBody 6283 2.64 4.95 1.68 106 TO_MALFORMED 6276 1.19 0.00 1.68 107 TooManyTo_002 6219 1.83 2.22 1.67 108 XM_B_URI_Unicode 6115 2.00 2.86 1.64 109 T_XMDrugObfuBody_14 5556 2.38 4.53 1.49 110 XM_SPF_SoftFail 5502 2.33 4.39 1.47 111 TR_Symld_Words 5430 1.33 1.04 1.45 112 TR_XM_UnparsRelay 5199 3.66 9.13 1.39 113 XMGappySubj_01 5104 1.02 0.17 1.37 114 T_XMDrugObfuBody_08 5018 1.86 3.11 1.34 115 XM_B_Unsub2 4892 1.78 2.92 1.31 116 UNTRUSTED_Relay 4878 2.23 4.45 1.31 117 XM_DK_Undo_01 4769 1.39 1.65 1.28 118 TM2_M_VERY_LONG_WORD 4752 2.09 4.06 1.27 119 BOTNET 4698 3.27 8.14 1.26 120 XM_B_Investor 4595 2.13 4.31 1.23 121 IN_HORDE_ADDRESS_BOOK 4578 0.90 0.10 1.23 122 XM_SendGrid 4575 1.29 1.46 1.23 123 SUBJ_ALL_CAPS 4560 1.38 1.77 1.22 124 XM_B_SEO 4273 2.35 5.26 1.14 125 TooManyTo_003 4194 0.98 0.63 1.12 126 XMBdyGiftCard01 4178 1.22 1.46 1.12 127 TR_DCC_Bayes_99 4140 6.85 20.71 1.11 128 XM_TLDProd2 4051 0.90 0.44 1.08 129 XMStockSpam_06 3986 1.41 2.23 1.07 130 RELAYCOUNTRY_CA 3940 2.49 5.96 1.06 131 TR_XM_SpammyWords5 3911 1.80 3.62 1.05 132 KHOP_HELO_FCRDNS 3894 1.07 1.14 1.04 133 XMDiploma_00 3879 1.38 2.22 1.04 134 URI_HEX 3823 1.14 1.42 1.02 135 TVD_SPACE_RATIO 3635 0.73 0.15 0.97 136 XM_GoogleGroups 3524 0.86 0.66 0.94 137 XM_H_Long_From02 3455 0.99 1.16 0.93 138 T_TooManySym_03 3298 0.68 0.18 0.88 139 XM_E_Blogspot 3207 0.66 0.18 0.86 140 FROM_GOV_DKIM_AU 3172 0.80 0.66 0.85 141 HELO_NODOT 3144 0.65 0.20 0.84 142 HELO_NO_DOMAIN 3142 0.65 0.20 0.84 143 XMGappySubj_02 3132 0.62 0.08 0.84 144 TVD_RCVD_IP 3106 0.80 0.71 0.83 145 TR_XM_DK_SendGrid 3029 0.80 0.77 0.81 146 XMCapTrack 3020 0.72 0.49 0.81 147 TooManyTo_004 2953 0.72 0.56 0.79 148 XMHTMLBadTable_001 2871 0.81 0.91 0.77 149 XM_OfRef6 2856 1.48 3.20 0.76 150 TR_XM_SEO4 2785 1.88 4.62 0.75 151 SpammyFromTLD_01 2763 1.06 1.82 0.74 152 XMSexyCombo_05 2749 1.99 5.03 0.74 153 XMBrknScrpt_02 2650 1.02 1.78 0.71 154 XM_UB50 2636 1.13 2.17 0.71 155 DKIM_ADSP_CUSTOM_MED 2625 0.82 1.09 0.70 156 XM_B_COPY_HTML 2586 0.88 1.33 0.69 157 XMBody_95 2545 0.59 0.35 0.68 158 HTML_TAG_BALANCE_BODY 2544 0.83 1.20 0.68 159 T_XMDrugObfuBody_00 2529 0.89 1.42 0.68 160 XM_B_DNDMA 2469 0.82 1.19 0.66 161 T_FILL_THIS_FORM_SHORT 2419 0.94 1.64 0.65 162 XMSubMetaI_00 2378 0.93 1.64 0.64 163 XMLngstWrd_00 2366 0.63 0.61 0.63 164 TooManyTo_005 2356 0.60 0.53 0.63 165 RELAYCOUNTRY_AU 2324 1.32 3.02 0.62 166 HTTPS_HTTP_MISMATCH 2286 0.77 1.17 0.61 167 XM_ShortIntro_01 2253 0.59 0.57 0.60 168 XM_H_PHPMailer 2228 0.61 0.66 0.60 169 RCVD_IN_BL_SPAMCOP_NET 2222 3.24 9.63 0.60 170 T_XMHurry_00 2166 1.01 2.05 0.58 171 TR_XM_Base64_M1 2140 0.73 1.11 0.57 172 XMGenDplmaNmb 2137 0.79 1.31 0.57 173 URI_TRY_3LD 2128 0.68 0.95 0.57 174 XMNoVowels 2109 0.55 0.52 0.56 175 TR_MetaPhish_Combo_01 2094 0.60 0.69 0.56 176 XMPhish14 2039 0.64 0.87 0.55 177 RCVD_IN_PBL 1994 0.62 0.83 0.53 178 XM_ProductURIs 1991 0.78 1.38 0.53 179 TM2_M_OBFU_COMMENT 1964 0.72 1.17 0.53 180 MISSING_HEADERS 1877 0.51 0.53 0.50 181 SpammyFromTLD_02 1859 0.80 1.53 0.50 182 TR_LOTS_OF_MONEY3 1836 0.86 1.76 0.49 183 NML_ADSP_CUSTOM_MED 1766 0.60 0.89 0.47 184 FORGED_GMAIL_RCVD 1728 0.52 0.66 0.46 185 PLING_QUERY 1663 0.64 1.10 0.45 186 XM_H_OutlookMailer 1651 0.34 0.09 0.44 187 XMPhish30 1608 0.83 1.80 0.43 188 XMOemUri 1570 0.35 0.18 0.42 189 T_OBFU_PDF_ATTACH 1556 0.35 0.19 0.42 190 XM_B_SpammyWords4 1555 0.90 2.06 0.42 191 RELAYCOUNTRY_GB 1525 0.51 0.75 0.41 192 MPART_ALT_DIFF_COUNT 1513 0.60 1.08 0.41 193 HTML_TEXT_INVISIBLE_STYLE 1507 0.34 0.19 0.40 194 XMLngstWrd_01 1506 0.44 0.51 0.40 195 XMBody_17 1469 1.05 2.65 0.39 196 LONGLN_LOW_CONTRAST 1465 0.54 0.90 0.39 197 XM_RXBody 1463 0.40 0.41 0.39 198 USER_IN_WHITELIST 1460 0.28 0.00 0.39 199 USER_IN_WELCOMELIST 1460 0.28 0.00 0.39 200 XMMoneyMeta_00 1405 0.55 0.97 0.38 ----------------------------------------------------------------------