Email: 439969 Autolearn: 0 AvgScore: 4.97 AvgScanTime: 1.32 sec Spam: 140083 Autolearn: 0 AvgScore: 14.56 AvgScanTime: 1.43 sec Ham: 299886 Autolearn: 0 AvgScore: 0.49 AvgScanTime: 1.27 sec Time Spent Running SA: 161.18 hours Time Spent Processing Spam: 55.70 hours Time Spent Processing Ham: 105.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134024 89.30 95.67 86.32 2 DKIM_SIGNED 123316 78.80 88.03 74.49 3 RELAYCOUNTRY_US 119216 83.06 85.10 82.10 4 XM_DK_Pass 118487 76.77 84.58 73.13 5 XM_B_Unicode 117415 73.38 83.82 68.51 6 DKIM_VALID 116599 75.58 83.24 72.00 7 DCC_CHECK 104994 49.98 74.95 38.32 8 XMListUnsubscribeExists 98948 54.87 70.64 47.51 9 XM_B_SpammyWords 97988 54.42 69.95 47.16 10 DKIM_VALID_AU 93300 60.89 66.60 58.23 11 LOC_TINY_FONT_1 71160 33.68 50.80 25.68 12 XM_B_Unicode3 70986 43.27 50.67 39.81 13 BAYES_50 59456 55.78 42.44 62.01 14 XM_B_SpammyWords2 58076 28.10 41.46 21.86 15 XM_DK_Undo_02 55801 16.26 39.83 5.25 16 RCVD_IN_MSPIKE_H2 52627 34.52 37.57 33.10 17 HTML_FONT_LOW_CONTRAST 51417 30.05 36.70 26.94 18 FVGT_m_MULTI_ODD 48120 27.43 34.35 24.19 19 T_KAM_HTML_FONT_INVALID 46043 24.24 32.87 20.20 20 BAYES_99 41060 11.50 29.31 3.19 21 DKIM_VALID_EF 38184 27.88 27.26 28.17 22 TR_XM_DKIM_Undo 37999 10.09 27.13 2.14 23 XMSubLong 35749 24.76 25.52 24.41 24 MIME_HTML_ONLY 35315 21.45 25.21 19.69 25 XM_Multi_Part_URI 34217 16.89 24.43 13.38 26 DCC_CHECK_NEGATIVE 32746 49.45 23.38 61.63 27 T_TM2_M_HEADER_IN_MSG 32491 29.44 23.19 32.35 28 BAYES_999 31512 8.80 22.50 2.40 29 TR_DCC_Bayes_99 30388 7.59 21.69 1.00 30 TR_XM_DK_Unsub 26919 14.31 19.22 12.01 31 UNPARSEABLE_RELAY 23884 12.66 17.05 10.62 32 XM_B_Unsub 22663 11.38 16.18 9.13 33 TR_XM_BayesUnsub 21854 9.47 15.60 6.61 34 XM_B_SpammyWords3 20942 9.41 14.95 6.82 35 TR_MAX_INTL_RELAY 19887 8.07 14.20 5.21 36 RELAYCOUNTRY_META 19324 7.26 13.79 4.21 37 LOTS_OF_MONEY 16843 8.52 12.02 6.88 38 RCVD_IN_BL_SPAMCOP_NET 15811 4.46 11.29 1.26 39 TR_XM_SpammyWords2 14993 3.65 10.70 0.35 40 TR_XM_SpammyWords4 14835 6.71 10.59 4.89 41 BOTNET_IPINHOSTNAME 14528 5.60 10.37 3.37 42 LotsOfNums_01 14202 10.12 10.14 10.11 43 XM_Body_Dirty_Words 13911 5.25 9.93 3.06 44 TR_XM_SpammyRelay 13867 4.72 9.90 2.30 45 TR_XM_SPAMCOP 13702 3.70 9.78 0.85 46 BOTNET 12713 3.88 9.08 1.45 47 BAYES_80 12219 4.93 8.72 3.16 48 FSL_BULK_SIG 12177 8.16 8.69 7.91 49 BAYES_60 11926 8.37 8.51 8.31 50 XM_Evil_Numbers_Gen 11858 8.81 8.46 8.97 51 TR_XM_UnparsRelay 11155 3.38 7.96 1.24 52 XM_B_Phish_Phrases 11024 7.52 7.87 7.35 53 XMSubMetaSx_00 9631 5.40 6.88 4.71 54 HTML_IMAGE_RATIO_02 9562 5.37 6.83 4.68 55 XM_UncommonTLD01 8947 4.77 6.39 4.02 56 XM_H_Long_From01 8739 5.72 6.24 5.48 57 UNTRUSTED_Relay 7821 2.83 5.58 1.54 58 MPART_ALT_DIFF 7723 4.74 5.51 4.38 59 XM_B_PhoneNumber 7649 8.02 5.46 9.22 60 TM2_M_VERY_LONG_WORD 7564 4.78 5.40 4.49 61 BAYES_95 7128 3.01 5.09 2.04 62 XM_H_GMP 6958 5.17 4.97 5.27 63 XM_B_Investor 6929 2.62 4.95 1.53 64 RELAYCOUNTRY_CA 6767 2.41 4.83 1.27 65 DKIM_INVALID 6717 3.22 4.80 2.49 66 XM_B_SpammyTLD 6656 3.21 4.75 2.49 67 HTML_IMAGE_RATIO_04 6404 4.58 4.57 4.58 68 T_XMDrugObfuBody_14 6218 2.53 4.44 1.64 69 XMSexyCombo_05 5940 2.96 4.24 2.37 70 TooManyTo_001 5308 7.08 3.79 8.61 71 TR_XM_PhishingBody 5276 2.25 3.77 1.54 72 RCVD_IN_MSPIKE_WL 5248 5.08 3.75 5.70 73 RCVD_IN_MSPIKE_H3 5247 5.08 3.75 5.70 74 XM_OfRef6 5235 2.03 3.74 1.23 75 TR_XM_SpammyWords5 5164 2.05 3.69 1.28 76 XMStrtUSub 5012 4.34 3.58 4.70 77 T_XMDrugObfuBody_08 4966 2.57 3.55 2.12 78 MIME_HTML_MOSTLY 4936 2.83 3.52 2.50 79 MIME_HTML_ONLY_MULTI 4755 2.80 3.39 2.52 80 XMNumbers 4670 2.96 3.33 2.79 81 RCVD_IN_VALIDITY_RPBL 4549 1.08 3.25 0.06 82 XM_CamelCaseFrm001 4252 2.72 3.04 2.57 83 HTML_IMAGE_RATIO_06 4122 2.66 2.94 2.53 84 XM_UB50 4032 1.57 2.88 0.96 85 XMDiploma_00 3932 1.89 2.81 1.46 86 XM_SPF_SoftFail 3924 1.89 2.80 1.46 87 T_XMHurry_00 3805 1.26 2.72 0.59 88 TR_XM_NoHeaderRelay 3667 1.04 2.62 0.30 89 MIME_QP_LONG_LINE 3646 4.36 2.60 5.18 90 RELAYCOUNTRY_AU 3640 1.40 2.60 0.84 91 TM2_M_URI_OPT_OUT 3627 1.88 2.59 1.55 92 XM_B_SpammyWords4 3627 1.24 2.59 0.62 93 SUSP_UTF8_WORD_SUBJ 3617 0.83 2.58 0.02 94 FROM_EXCESS_BASE64 3534 1.92 2.52 1.64 95 XM_URI_RBL 3510 1.10 2.51 0.45 96 T_XMDrugObfuBody_00 3480 1.14 2.48 0.50 97 XMBody_17 3435 1.09 2.45 0.45 98 SUSP_UTF8_WORD_COMBO 3378 0.79 2.41 0.04 99 T_TooManySym_01 3188 5.45 2.28 6.93 100 RCVD_IN_VALIDITY_SAFE 3185 3.51 2.27 4.09 101 MAILING_LIST_MULTI 3184 2.78 2.27 3.02 102 XM_B_Unsub2 3156 1.65 2.25 1.37 103 XM_B_URI_Unicode 3115 1.99 2.22 1.88 104 T_REMOTE_IMAGE 3055 3.07 2.18 3.48 105 ANY_BOUNCE_MESSAGE 2964 4.62 2.12 5.79 106 BOUNCE_MESSAGE 2964 4.62 2.12 5.79 107 DKIM_ADSP_NXDOMAIN 2940 0.87 2.10 0.29 108 USER_IN_DEF_DKIM_WL 2893 9.62 2.07 13.15 109 MIME_CHARSET_FARAWAY 2877 0.96 2.05 0.44 110 HTML_IMAGE_RATIO_08 2845 2.11 2.03 2.14 111 HTML_MIME_NO_HTML_TAG 2678 2.32 1.91 2.51 112 SUBJ_ALL_CAPS 2654 1.56 1.89 1.40 113 XMBrknScrpt_02 2633 1.21 1.88 0.90 114 XMBody_78 2623 0.86 1.87 0.38 115 SpammyFromTLD_02 2576 0.96 1.84 0.54 116 XM_DK_Undo_01 2561 1.78 1.83 1.76 117 KHOP_HELO_FCRDNS 2533 2.57 1.81 2.93 118 XM_B_COPY_HTML 2524 1.15 1.80 0.85 119 XMStockSpam_06 2514 1.85 1.79 1.88 120 RCVD_IN_IADB_LISTED 2401 3.22 1.71 3.93 121 SpammyFromTLD_01 2345 1.07 1.67 0.78 122 NO_DNS_FOR_FROM 2322 0.75 1.66 0.33 123 TR_XM_MaxWHORU 2297 0.71 1.64 0.27 124 SHORTCIRCUIT 2296 0.52 1.64 0.00 125 RCVD_IN_ZEN_LASTEXTERNAL 2296 0.52 1.64 0.00 126 T_FILL_THIS_FORM_SHORT 2260 1.13 1.61 0.90 127 BAYES_40 2221 3.74 1.59 4.75 128 TR_Symld_Words 2174 1.60 1.55 1.62 129 XMGenDplmaNmb 2164 1.06 1.54 0.83 130 TR_XM_INV_DKIM 2136 0.52 1.52 0.05 131 RCVD_IN_VALIDITY_CERTIFIED 2049 2.53 1.46 3.03 132 CHARSET_FARAWAY_HEADER 1978 0.46 1.41 0.02 133 XMEqualsVooDoo_00 1973 0.49 1.41 0.06 134 XMPhish30 1967 0.84 1.40 0.58 135 TR_XM_Base64_M1 1957 0.88 1.40 0.63 136 TR_XM_PHPDW 1948 0.67 1.39 0.33 137 XMBdyGiftCard01 1947 0.77 1.39 0.48 138 TR_XM_PHPForged 1925 0.66 1.37 0.33 139 TR_XM_FormFill2 1917 0.67 1.37 0.34 140 URI_HEX 1913 1.22 1.37 1.15 141 XMEqualsVooDoo_01 1895 0.43 1.35 0.00 142 XMEqualsVooDoo_02 1891 0.43 1.35 0.00 143 XMEqualsVooDoo_03 1886 0.43 1.35 0.00 144 XM_H_PHPOS 1874 0.64 1.34 0.32 145 RCVD_IN_IADB_SPF 1807 2.81 1.29 3.52 146 XM_ProductURIs 1806 0.80 1.29 0.57 147 BAYES_20 1774 2.84 1.27 3.58 148 RELAYCOUNTRY_FR 1750 0.63 1.25 0.34 149 SHOPIFY_IMG_NOT_RCVD_SFY 1690 0.55 1.21 0.24 150 MISSING_HEADERS 1685 0.74 1.20 0.52 151 ALL_TRUSTED 1665 10.26 1.19 14.50 152 XM_B_SEO 1645 0.57 1.17 0.28 153 RELAYCOUNTRY_GB 1628 0.72 1.16 0.52 154 TM2_M_OBFU_COMMENT 1623 0.71 1.16 0.50 155 RCVD_IN_IADB_SENDERID 1614 2.51 1.15 3.15 156 RCVD_IN_IADB_DK 1606 2.46 1.15 3.07 157 RCVD_IN_IADB_VOUCHED 1601 2.08 1.14 2.52 158 XM_H_Long_From02 1590 1.06 1.14 1.02 159 XM_SendGrid 1574 1.33 1.12 1.42 160 URI_NOVOWEL 1554 1.19 1.11 1.23 161 BOTNET_NORDNS 1534 0.35 1.10 0.01 162 XM_B_REG_HTML 1519 0.47 1.08 0.18 163 HTML_TAG_BALANCE_BODY 1475 0.73 1.05 0.57 164 HTTPS_HTTP_MISMATCH 1459 0.86 1.04 0.77 165 THIS_AD 1433 0.60 1.02 0.41 166 XMSexyCombo_01 1428 0.41 1.02 0.12 167 TR_XM_SEO4 1413 0.41 1.01 0.12 168 XMMoneyMeta_00 1379 0.70 0.98 0.57 169 DIET_1 1374 0.53 0.98 0.33 170 T_STY_INVIS_DIRECT 1372 0.48 0.98 0.25 171 XMSubMetaI_00 1365 0.76 0.97 0.67 172 XMReplyNow 1350 0.52 0.96 0.31 173 DKIM_ADSP_CUSTOM_MED 1338 0.97 0.96 0.98 174 RCVD_IN_PSBL 1322 0.35 0.94 0.08 175 URI_TRY_3LD 1309 0.70 0.93 0.59 176 XM_OfRef7 1303 0.41 0.93 0.17 177 MPART_ALT_DIFF_COUNT 1298 0.63 0.93 0.49 178 TR_LOTS_OF_MONEY3 1289 0.41 0.92 0.17 179 RELAYCOUNTRY_RU 1267 0.30 0.90 0.01 180 XM_H_Undi_Recip 1250 0.42 0.89 0.19 181 XM_B_Phish66 1249 0.52 0.89 0.34 182 XM_B_COVIDMETA 1235 0.39 0.88 0.16 183 RDNS_DYNAMIC 1220 0.53 0.87 0.37 184 PDS_RDNS_DYNAMIC_FP 1201 0.42 0.86 0.22 185 REPLYTO_WITHOUT_TO_CC 1198 0.29 0.86 0.02 186 URIBL_BLACK 1190 0.30 0.85 0.04 187 FSL_NEW_HELO_USER 1183 0.27 0.84 0.00 188 XM_DIRTYINTL 1165 0.32 0.83 0.08 189 FROM_MISSP_MSFT 1164 0.27 0.83 0.00 190 FSL_CTYPE_WIN1251 1158 0.26 0.83 0.00 191 FORGED_MUA_OUTLOOK 1153 0.28 0.82 0.02 192 TooManyTo_002 1152 2.34 0.82 3.05 193 FROM_MISSPACED 1145 0.26 0.82 0.00 194 AXB_XMAILER_MIMEOLE_OL_024C2 1142 0.26 0.82 0.00 195 XMPhish14 1140 0.51 0.81 0.37 196 BAYES_00 1132 7.66 0.81 10.86 197 LongTLD 1119 0.51 0.80 0.38 198 XM_UB99 1108 0.25 0.79 0.00 199 HOSTED_IMG_MULTI_PUB_01 1108 0.27 0.79 0.03 200 XM_PDF 1101 3.57 0.79 4.87 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 258854 89.30 95.67 86.32 2 RELAYCOUNTRY_US 246208 83.06 85.10 82.10 3 DKIM_SIGNED 223385 78.80 88.03 74.49 4 XM_DK_Pass 219293 76.77 84.58 73.13 5 DKIM_VALID 215915 75.58 83.24 72.00 6 XM_B_Unicode 205455 73.38 83.82 68.51 7 BAYES_50 185963 55.78 42.44 62.01 8 DCC_CHECK_NEGATIVE 184816 49.45 23.38 61.63 9 DKIM_VALID_AU 174617 60.89 66.60 58.23 10 XMListUnsubscribeExists 142474 54.87 70.64 47.51 11 XM_B_SpammyWords 141425 54.42 69.95 47.16 12 XM_B_Unicode3 119375 43.27 50.67 39.81 13 DCC_CHECK 114906 49.98 74.95 38.32 14 RCVD_IN_MSPIKE_H2 99252 34.52 37.57 33.10 15 T_TM2_M_HEADER_IN_MSG 97016 29.44 23.19 32.35 16 DKIM_VALID_EF 84465 27.88 27.26 28.17 17 HTML_FONT_LOW_CONTRAST 80798 30.05 36.70 26.94 18 LOC_TINY_FONT_1 77022 33.68 50.80 25.68 19 XMSubLong 73199 24.76 25.52 24.41 20 FVGT_m_MULTI_ODD 72556 27.43 34.35 24.19 21 XM_B_SpammyWords2 65550 28.10 41.46 21.86 22 T_KAM_HTML_FONT_INVALID 60584 24.24 32.87 20.20 23 MIME_HTML_ONLY 59054 21.45 25.21 19.69 24 ALL_TRUSTED 43489 10.26 1.19 14.50 25 XM_Multi_Part_URI 40111 16.89 24.43 13.38 26 USER_IN_DEF_DKIM_WL 39431 9.62 2.07 13.15 27 TR_XM_DK_Unsub 36023 14.31 19.22 12.01 28 BAYES_00 32563 7.66 0.81 10.86 29 UNPARSEABLE_RELAY 31835 12.66 17.05 10.62 30 LotsOfNums_01 30313 10.12 10.14 10.11 31 XM_B_PhoneNumber 27641 8.02 5.46 9.22 32 XM_B_Unsub 27386 11.38 16.18 9.13 33 XM_Evil_Numbers_Gen 26907 8.81 8.46 8.97 34 TooManyTo_001 25834 7.08 3.79 8.61 35 BAYES_60 24921 8.37 8.51 8.31 36 FSL_BULK_SIG 23731 8.16 8.69 7.91 37 XM_B_Phish_Phrases 22045 7.52 7.87 7.35 38 TR_XM_DK_Bayes 21839 5.18 0.69 7.28 39 TR_XM_DK_Bayes1 21581 5.12 0.69 7.20 40 IN_ZIMBRA_NJ_WHITELIST 20919 4.78 0.08 6.98 41 XM_DKIMWhitelistDomains 20875 4.80 0.16 6.96 42 T_TooManySym_01 20780 5.45 2.28 6.93 43 LOTS_OF_MONEY 20626 8.52 12.02 6.88 44 XM_B_SpammyWords3 20439 9.41 14.95 6.82 45 TR_XM_BayesUnsub 19830 9.47 15.60 6.61 46 TR_XM_DK_Bayes2 18718 4.42 0.52 6.24 47 ANY_BOUNCE_MESSAGE 17375 4.62 2.12 5.79 48 BOUNCE_MESSAGE 17374 4.62 2.12 5.79 49 RCVD_IN_MSPIKE_H3 17107 5.08 3.75 5.70 50 RCVD_IN_MSPIKE_WL 17107 5.08 3.75 5.70 51 XM_H_Long_From01 16445 5.72 6.24 5.48 52 XM_H_GMP 15804 5.17 4.97 5.27 53 XM_DK_Undo_02 15755 16.26 39.83 5.25 54 TR_MAX_INTL_RELAY 15611 8.07 14.20 5.21 55 MIME_QP_LONG_LINE 15532 4.36 2.60 5.18 56 TR_XM_SpammyWords4 14677 6.71 10.59 4.89 57 XM_PDF 14610 3.57 0.79 4.87 58 BAYES_40 14230 3.74 1.59 4.75 59 XMSubMetaSx_00 14116 5.40 6.88 4.71 60 XMStrtUSub 14085 4.34 3.58 4.70 61 HTML_IMAGE_RATIO_02 14048 5.37 6.83 4.68 62 HTML_IMAGE_RATIO_04 13725 4.58 4.57 4.58 63 TM2_M_VERY_LONG_WORD 13471 4.78 5.40 4.49 64 MPART_ALT_DIFF 13125 4.74 5.51 4.38 65 RELAYCOUNTRY_META 12626 7.26 13.79 4.21 66 RCVD_IN_VALIDITY_SAFE 12277 3.51 2.27 4.09 67 XM_UncommonTLD01 12061 4.77 6.39 4.02 68 RCVD_IN_IADB_LISTED 11778 3.22 1.71 3.93 69 BAYES_20 10732 2.84 1.27 3.58 70 T_TooManySym_02 10674 2.64 0.66 3.56 71 RCVD_IN_IADB_SPF 10545 2.81 1.29 3.52 72 T_REMOTE_IMAGE 10446 3.07 2.18 3.48 73 BOTNET_IPINHOSTNAME 10096 5.60 10.37 3.37 74 BAYES_99 9556 11.50 29.31 3.19 75 BAYES_80 9478 4.93 8.72 3.16 76 RCVD_IN_IADB_SENDERID 9433 2.51 1.15 3.15 77 RCVD_IN_IADB_DK 9221 2.46 1.15 3.07 78 XM_Body_Dirty_Words 9176 5.25 9.93 3.06 79 TooManyTo_002 9155 2.34 0.82 3.05 80 RCVD_IN_VALIDITY_CERTIFIED 9084 2.53 1.46 3.03 81 MAILING_LIST_MULTI 9063 2.78 2.27 3.02 82 KHOP_HELO_FCRDNS 8772 2.57 1.81 2.93 83 XMNumbers 8366 2.96 3.33 2.79 84 XM_CamelCaseFrm001 7699 2.72 3.04 2.57 85 HTML_IMAGE_RATIO_06 7577 2.66 2.94 2.53 86 RCVD_IN_IADB_VOUCHED 7570 2.08 1.14 2.52 87 MIME_HTML_ONLY_MULTI 7548 2.80 3.39 2.52 88 HTML_MIME_NO_HTML_TAG 7529 2.32 1.91 2.51 89 MIME_HTML_MOSTLY 7505 2.83 3.52 2.50 90 XM_B_SpammyTLD 7472 3.21 4.75 2.49 91 DKIM_INVALID 7470 3.22 4.80 2.49 92 INVALID_MSGID 7317 1.72 0.19 2.44 93 BAYES_999 7207 8.80 22.50 2.40 94 XMSexyCombo_05 7097 2.96 4.24 2.37 95 TR_XM_SpammyRelay 6907 4.72 9.90 2.30 96 HTML_EXTRA_CLOSE 6747 1.55 0.06 2.25 97 HTML_IMAGE_RATIO_08 6420 2.11 2.03 2.14 98 TR_XM_DKIM_Undo 6408 10.09 27.13 2.14 99 T_XMDrugObfuBody_08 6351 2.57 3.55 2.12 100 BAYES_05 6320 1.63 0.62 2.11 101 TO_MALFORMED 6197 1.41 0.02 2.07 102 BAYES_95 6121 3.01 5.09 2.04 103 XMStockSpam_06 5638 1.85 1.79 1.88 104 XM_B_URI_Unicode 5628 1.99 2.22 1.88 105 XMGappySubj_01 5455 1.30 0.20 1.82 106 RCVD_IN_IADB_OPTIN 5353 1.42 0.63 1.79 107 XM_DK_Undo_01 5286 1.78 1.83 1.76 108 TooManyTo_003 5270 1.43 0.74 1.76 109 FROM_EXCESS_BASE64 4917 1.92 2.52 1.64 110 T_XMDrugObfuBody_14 4912 2.53 4.44 1.64 111 TR_Symld_Words 4862 1.60 1.55 1.62 112 IN_HORDE_ADDRESS_BOOK 4742 1.11 0.10 1.58 113 TM2_M_URI_OPT_OUT 4642 1.88 2.59 1.55 114 UNTRUSTED_Relay 4625 2.83 5.58 1.54 115 TR_XM_PhishingBody 4610 2.25 3.77 1.54 116 XM_B_Investor 4597 2.62 4.95 1.53 117 XM_SPF_SoftFail 4372 1.89 2.80 1.46 118 XMDiploma_00 4370 1.89 2.81 1.46 119 BOTNET 4350 3.88 9.08 1.45 120 XM_SendGrid 4256 1.33 1.12 1.42 121 SUBJ_ALL_CAPS 4206 1.56 1.89 1.40 122 XM_B_Unsub2 4105 1.65 2.25 1.37 123 TooManyTo_004 3856 1.10 0.70 1.29 124 TR_XM_SpammyWords5 3845 2.05 3.69 1.28 125 RELAYCOUNTRY_CA 3815 2.41 4.83 1.27 126 RCVD_IN_BL_SPAMCOP_NET 3793 4.46 11.29 1.26 127 TVD_SPACE_RATIO 3722 0.90 0.16 1.24 128 TR_XM_UnparsRelay 3714 3.38 7.96 1.24 129 HELO_NODOT 3707 0.93 0.26 1.24 130 HELO_NO_DOMAIN 3698 0.92 0.26 1.23 131 URI_NOVOWEL 3697 1.19 1.11 1.23 132 XM_OfRef6 3690 2.03 3.74 1.23 133 XMCapTrack 3592 0.98 0.52 1.20 134 XM_GoogleGroups 3461 0.99 0.65 1.15 135 URI_HEX 3459 1.22 1.37 1.15 136 T_TooManySym_03 3348 0.82 0.19 1.12 137 TooManyTo_005 3225 0.95 0.67 1.08 138 FROM_GOV_DKIM_AU 3081 0.75 0.17 1.03 139 XM_H_Long_From02 3062 1.06 1.14 1.02 140 TR_DCC_Bayes_99 2996 7.59 21.69 1.00 141 DKIM_ADSP_CUSTOM_MED 2927 0.97 0.96 0.98 142 XMGappySubj_02 2923 0.68 0.05 0.97 143 XM_UB50 2880 1.57 2.88 0.96 144 XMSubMetaSxObfu_03 2779 0.86 0.71 0.93 145 TR_MetaPhish_Combo_01 2700 0.84 0.70 0.90 146 T_FILL_THIS_FORM_SHORT 2695 1.13 1.61 0.90 147 XMBrknScrpt_02 2693 1.21 1.88 0.90 148 TR_XM_SPAMCOP 2561 3.70 9.78 0.85 149 XM_B_COPY_HTML 2556 1.15 1.80 0.85 150 RELAYCOUNTRY_AU 2527 1.40 2.60 0.84 151 XMGenDplmaNmb 2490 1.06 1.54 0.83 152 TR_XM_DK_SendGrid 2485 0.78 0.66 0.83 153 SpammyFromTLD_01 2346 1.07 1.67 0.78 154 XMLngstWrd_00 2329 0.74 0.68 0.78 155 HTTPS_HTTP_MISMATCH 2324 0.86 1.04 0.77 156 XMNoVowels 2297 0.68 0.50 0.77 157 XM_B_DNDMA 2234 0.76 0.78 0.74 158 XMBody_95 2230 0.56 0.16 0.74 159 XM_ShortIntro_01 2097 0.61 0.42 0.70 160 XM_H_PHPMailer 2035 0.65 0.60 0.68 161 RCVD_IN_PBL 2029 0.70 0.75 0.68 162 T_TVD_MIME_NO_HEADERS 2004 0.47 0.04 0.67 163 XM_RXBody 2003 0.70 0.76 0.67 164 XMSubMetaI_00 1998 0.76 0.97 0.67 165 T_OBFU_PDF_ATTACH 1959 0.48 0.12 0.65 166 FORGED_GMAIL_RCVD 1950 0.63 0.59 0.65 167 NML_ADSP_CUSTOM_MED 1930 0.68 0.76 0.64 168 TR_XM_Base64_M1 1903 0.88 1.40 0.63 169 XMSubMetaSx_01 1858 0.52 0.32 0.62 170 XM_B_SpammyWords4 1850 1.24 2.59 0.62 171 XM_B_FormFill 1846 0.44 0.06 0.62 172 URI_TRY_3LD 1766 0.70 0.93 0.59 173 T_XMHurry_00 1758 1.26 2.72 0.59 174 XMPhish30 1749 0.84 1.40 0.58 175 XMMoneyMeta_00 1722 0.70 0.98 0.57 176 HTML_TAG_BALANCE_BODY 1721 0.73 1.05 0.57 177 XM_ProductURIs 1715 0.80 1.29 0.57 178 SpammyFromTLD_02 1630 0.96 1.84 0.54 179 TVD_RCVD_IP 1573 0.59 0.74 0.52 180 RELAYCOUNTRY_GB 1559 0.72 1.16 0.52 181 MISSING_HEADERS 1552 0.74 1.20 0.52 182 T_Symld_Words_02 1548 0.58 0.71 0.52 183 T_XMDrugObfuBody_00 1514 1.14 2.48 0.50 184 HTML_IMAGE_ONLY_32 1499 0.38 0.13 0.50 185 TM2_M_OBFU_COMMENT 1495 0.71 1.16 0.50 186 MPART_ALT_DIFF_COUNT 1471 0.63 0.93 0.49 187 XMBdyGiftCard01 1436 0.77 1.39 0.48 188 FILL_THIS_FORM 1391 0.56 0.77 0.46 189 HTML_IMAGE_ONLY_28 1360 0.36 0.16 0.45 190 XMLngstWrd_01 1351 0.49 0.58 0.45 191 XMBody_17 1350 1.09 2.45 0.45 192 XM_URI_RBL 1348 1.10 2.51 0.45 193 MIME_CHARSET_FARAWAY 1334 0.96 2.05 0.44 194 TO_NO_BRKTS_HTML_ONLY 1330 0.35 0.16 0.44 195 MSGID_FROM_MTA_HEADER 1313 0.33 0.11 0.44 196 FROM_GOV_SPOOF 1301 0.35 0.17 0.43 197 HTML_FONT_FACE_BAD 1282 0.49 0.62 0.43 198 THIS_AD 1227 0.60 1.02 0.41 199 XMSolicitRefs_0 1201 0.47 0.63 0.40 200 XMDateMe_00 1198 0.41 0.44 0.40 ----------------------------------------------------------------------