Email: 474347 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.34 sec Spam: 147925 Autolearn: 0 AvgScore: 15.08 AvgScanTime: 1.48 sec Ham: 326422 Autolearn: 0 AvgScore: 0.08 AvgScanTime: 1.28 sec Time Spent Running SA: 176.93 hours Time Spent Processing Spam: 60.92 hours Time Spent Processing Ham: 116.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139847 89.59 94.54 87.34 2 DKIM_SIGNED 130363 78.74 88.13 74.48 3 RELAYCOUNTRY_US 124905 81.54 84.44 80.23 4 XM_DK_Pass 124020 76.48 83.84 73.14 5 DKIM_VALID 122195 75.27 82.61 71.94 6 XM_B_Unicode 122146 74.04 82.57 70.17 7 DCC_CHECK 113144 50.46 76.49 38.66 8 XMListUnsubscribeExists 104485 54.45 70.63 47.11 9 XM_B_SpammyWords 104280 54.14 70.50 46.72 10 DKIM_VALID_AU 96134 59.69 64.99 57.29 11 LOC_TINY_FONT_1 73847 32.80 49.92 25.04 12 XM_B_Unicode3 72336 42.63 48.90 39.78 13 XM_B_SpammyWords2 64184 27.46 43.39 20.24 14 BAYES_50 60302 54.77 40.77 61.11 15 XM_DK_Undo_02 58981 15.76 39.87 4.83 16 HTML_FONT_LOW_CONTRAST 54595 30.04 36.91 26.93 17 RCVD_IN_MSPIKE_H2 54109 34.42 36.58 33.44 18 FVGT_m_MULTI_ODD 49343 27.09 33.36 24.25 19 T_KAM_HTML_FONT_INVALID 45244 23.35 30.59 20.07 20 BAYES_99 44012 11.34 29.75 2.99 21 TR_XM_DKIM_Undo 40945 9.86 27.68 1.78 22 MIME_HTML_ONLY 39068 21.56 26.41 19.37 23 DKIM_VALID_EF 39058 27.98 26.40 28.69 24 XMSubLong 37658 23.92 25.46 23.22 25 T_TM2_M_HEADER_IN_MSG 33908 29.01 22.92 31.77 26 XM_Multi_Part_URI 33870 15.87 22.90 12.68 27 BAYES_999 33452 8.58 22.61 2.22 28 TR_DCC_Bayes_99 33379 7.74 22.56 1.02 29 DCC_CHECK_NEGATIVE 31865 48.89 21.54 61.28 30 TR_XM_DK_Unsub 27760 14.11 18.77 11.99 31 XM_B_Unsub 25534 11.81 17.26 9.33 32 UNPARSEABLE_RELAY 25355 12.82 17.14 10.87 33 TR_XM_BayesUnsub 24686 9.98 16.69 6.94 34 TR_MAX_INTL_RELAY 21882 8.43 14.79 5.55 35 XM_B_SpammyWords3 21584 7.33 14.59 4.04 36 RELAYCOUNTRY_META 20965 6.99 14.17 3.74 37 LOTS_OF_MONEY 19029 9.54 12.86 8.04 38 TR_XM_SpammyWords4 17226 7.74 11.65 5.97 39 TR_XM_SpammyWords2 16823 3.78 11.37 0.33 40 BOTNET_IPINHOSTNAME 16522 5.72 11.17 3.25 41 TR_XM_SpammyRelay 15491 4.68 10.47 2.06 42 XM_Body_Dirty_Words 15305 4.92 10.35 2.46 43 RCVD_IN_BL_SPAMCOP_NET 15089 3.79 10.20 0.88 44 XM_Evil_Numbers_Gen 13871 8.91 9.38 8.69 45 FSL_BULK_SIG 13516 7.60 9.14 6.91 46 BAYES_60 13237 8.66 8.95 8.53 47 BAYES_80 13227 5.17 8.94 3.46 48 BOTNET 13217 3.85 8.93 1.54 49 TR_XM_SPAMCOP 13090 3.19 8.85 0.62 50 LotsOfNums_01 12877 8.33 8.71 8.16 51 TR_XM_UnparsRelay 12557 3.62 8.49 1.41 52 XM_B_Phish_Phrases 11412 6.01 7.71 5.23 53 XM_UncommonTLD01 10527 5.02 7.12 4.07 54 XM_B_PhoneNumber 10116 9.38 6.84 10.54 55 HTML_IMAGE_RATIO_02 9811 5.26 6.63 4.64 56 XMSubMetaSx_00 9032 4.71 6.11 4.08 57 UNTRUSTED_Relay 8566 2.80 5.79 1.44 58 BAYES_95 8254 3.18 5.58 2.09 59 XM_H_Long_From01 8242 5.39 5.57 5.31 60 DKIM_INVALID 8168 3.47 5.52 2.54 61 MPART_ALT_DIFF 7813 4.62 5.28 4.32 62 XM_H_GMP 7340 5.38 4.96 5.57 63 RELAYCOUNTRY_CA 7157 2.34 4.84 1.20 64 TR_XM_PhishingBody 7129 2.63 4.82 1.64 65 XM_B_Investor 6905 2.62 4.67 1.70 66 XM_B_SpammyTLD 6422 3.06 4.34 2.48 67 TR_XM_SpammyWords5 6099 2.19 4.12 1.31 68 XMSexyCombo_05 6052 2.24 4.09 1.40 69 TM2_M_VERY_LONG_WORD 6022 2.34 4.07 1.56 70 HTML_IMAGE_RATIO_06 5873 3.32 3.97 3.02 71 HTML_IMAGE_RATIO_04 5834 4.00 3.94 4.02 72 T_XMDrugObfuBody_14 5821 2.54 3.94 1.90 73 RCVD_IN_MSPIKE_H3 5773 5.23 3.90 5.83 74 RCVD_IN_MSPIKE_WL 5773 5.23 3.90 5.83 75 TooManyTo_001 5742 7.44 3.88 9.05 76 RCVD_IN_VALIDITY_RPBL 5386 1.19 3.64 0.07 77 XMNumbers 5304 3.04 3.59 2.79 78 XM_OfRef6 5240 1.89 3.54 1.15 79 XMStrtUSub 5238 4.18 3.54 4.46 80 XM_CamelCaseFrm001 5188 2.54 3.51 2.10 81 XM_SPF_SoftFail 4993 2.16 3.38 1.60 82 HTML_IMAGE_RATIO_08 4845 3.01 3.28 2.89 83 MIME_HTML_ONLY_MULTI 4621 2.75 3.12 2.59 84 MIME_QP_LONG_LINE 4425 4.64 2.99 5.39 85 T_XMDrugObfuBody_00 4303 1.77 2.91 1.26 86 T_XMDrugObfuBody_08 4188 1.89 2.83 1.47 87 XM_UB50 4085 1.46 2.76 0.87 88 XMDiploma_00 4058 2.02 2.74 1.69 89 TM2_M_URI_OPT_OUT 3912 1.89 2.64 1.55 90 MIME_HTML_MOSTLY 3877 2.28 2.62 2.13 91 RELAYCOUNTRY_AU 3763 1.23 2.54 0.63 92 DKIM_ADSP_NXDOMAIN 3737 0.97 2.53 0.27 93 MAILING_LIST_MULTI 3547 3.02 2.40 3.30 94 SpammyFromTLD_01 3544 1.29 2.40 0.78 95 XMBody_17 3429 0.98 2.32 0.37 96 XM_B_URI_Unicode 3422 2.00 2.31 1.86 97 XM_B_SpammyWords4 3349 1.23 2.26 0.77 98 SUBJ_ALL_CAPS 3318 1.72 2.24 1.48 99 XM_B_Unsub2 3278 1.68 2.22 1.44 100 XM_URI_RBL 3266 0.89 2.21 0.30 101 FROM_EXCESS_BASE64 3265 2.03 2.21 1.95 102 NO_DNS_FOR_FROM 3213 0.85 2.17 0.25 103 TR_XM_MaxWHORU 3203 0.82 2.17 0.20 104 T_TooManySym_01 3144 4.64 2.13 5.78 105 SUSP_UTF8_WORD_SUBJ 3130 0.67 2.12 0.01 106 XM_DK_Undo_01 3111 1.89 2.10 1.79 107 XMStockSpam_06 3076 1.92 2.08 1.84 108 T_XMHurry_00 3038 0.89 2.05 0.36 109 RCVD_IN_VALIDITY_SAFE 3036 3.31 2.05 3.88 110 DIET_1 3020 1.10 2.04 0.67 111 TR_XM_NoHeaderRelay 2948 0.81 1.99 0.27 112 RCVD_IN_ZEN_LASTEXTERNAL 2870 0.61 1.94 0.00 113 SHORTCIRCUIT 2870 0.61 1.94 0.00 114 XM_H_Long_From02 2842 1.28 1.92 0.99 115 SUSP_UTF8_WORD_COMBO 2770 0.61 1.87 0.04 116 TR_XM_INV_DKIM 2716 0.62 1.84 0.07 117 SpammyFromTLD_02 2563 0.87 1.73 0.48 118 T_REMOTE_IMAGE 2511 2.94 1.70 3.50 119 XMBody_78 2422 0.72 1.64 0.31 120 URI_HEX 2395 1.39 1.62 1.29 121 USER_IN_DEF_DKIM_WL 2344 9.46 1.58 13.02 122 ALL_TRUSTED 2315 11.98 1.56 16.70 123 TR_XM_PHPForged 2294 0.69 1.55 0.30 124 XMPhish30 2265 0.84 1.53 0.52 125 TR_XM_PHPDW 2264 0.68 1.53 0.30 126 TR_XM_FormFill2 2252 0.69 1.52 0.31 127 HTML_MIME_NO_HTML_TAG 2221 1.99 1.50 2.21 128 XM_H_PHPOS 2209 0.67 1.49 0.29 129 XMMoneyMeta_00 2174 0.89 1.47 0.63 130 BAYES_40 2146 3.92 1.45 5.04 131 XM_B_COPY_HTML 2134 0.91 1.44 0.67 132 XMGenDplmaNmb 2085 1.14 1.41 1.02 133 RCVD_IN_IADB_LISTED 2084 3.13 1.41 3.91 134 DKIM_ADSP_CUSTOM_MED 2064 1.07 1.40 0.92 135 RCVD_IN_VALIDITY_CERTIFIED 2043 2.54 1.38 3.06 136 T_FILL_THIS_FORM_SHORT 2010 1.12 1.36 1.00 137 XMBrknScrpt_02 2007 1.04 1.36 0.90 138 RCVD_IN_XBL 1999 0.44 1.35 0.02 139 XM_SendGrid 1970 1.52 1.33 1.60 140 HTTPS_HTTP_MISMATCH 1926 0.93 1.30 0.77 141 TR_Mismatch_TLD_02 1923 0.45 1.30 0.07 142 URI_NOVOWEL 1916 1.52 1.30 1.62 143 KHOP_HELO_FCRDNS 1832 1.33 1.24 1.37 144 XM_UB60 1823 0.42 1.23 0.05 145 XM_OfRef7 1804 0.49 1.22 0.16 146 RELAYCOUNTRY_FR 1790 0.54 1.21 0.24 147 XM_ProductURIs 1773 0.68 1.20 0.44 148 XM_B_SEO 1760 0.54 1.19 0.25 149 XM_S_SpammyWords 1750 0.60 1.18 0.34 150 TR_XM_Spammywords 1750 0.60 1.18 0.34 151 RCVD_IN_IADB_SPF 1726 2.70 1.17 3.39 152 HTML_TAG_BALANCE_BODY 1699 0.74 1.15 0.56 153 XM_B_COVIDMETA 1696 0.52 1.15 0.24 154 NML_ADSP_CUSTOM_MED 1665 0.83 1.13 0.70 155 URI_TRY_3LD 1654 0.67 1.12 0.46 156 XM_B_Phish66 1654 0.57 1.12 0.32 157 XMReplyNow 1647 0.58 1.11 0.33 158 XMPhish14 1641 0.65 1.11 0.44 159 TooManyTo_002 1626 2.57 1.10 3.24 160 RCVD_IN_SBL_CSS 1601 0.37 1.08 0.05 161 RCVD_IN_IADB_SENDERID 1573 2.41 1.06 3.02 162 XM_B_DNDMA 1563 0.66 1.06 0.48 163 XMBdyGiftCard01 1554 0.65 1.05 0.47 164 BAYES_20 1549 2.69 1.05 3.44 165 LongTLD 1544 0.66 1.04 0.48 166 RCVD_IN_IADB_DK 1538 2.34 1.04 2.93 167 BOTNET_NORDNS 1529 0.33 1.03 0.01 168 TooManyTo_003 1529 1.46 1.03 1.65 169 XM_TLDProd2 1507 0.46 1.02 0.21 170 TR_XM_Base64_M1 1506 0.87 1.02 0.81 171 SHOPIFY_IMG_NOT_RCVD_SFY 1493 0.45 1.01 0.20 172 BAYES_00 1482 8.11 1.00 11.33 173 T_Symld_Words_02 1466 0.70 0.99 0.58 174 FORGED_GMAIL_RCVD 1464 0.69 0.99 0.56 175 RDNS_DYNAMIC 1461 0.54 0.99 0.34 176 TM2_M_A_HREF_HREF 1459 0.48 0.99 0.25 177 TR_XM_SEO4 1450 0.38 0.98 0.10 178 PDS_RDNS_DYNAMIC_FP 1427 0.43 0.96 0.19 179 TooManyTo_004 1426 1.15 0.96 1.23 180 XMCmmnCold 1412 0.32 0.95 0.04 181 XMSexyCombo_01 1384 0.39 0.94 0.15 182 TooManyTo_005 1378 0.99 0.93 1.02 183 XMSubMetaI_00 1356 0.95 0.92 0.96 184 URIBL_BLACK 1356 0.32 0.92 0.06 185 XM_H_Undi_Recip 1340 0.43 0.91 0.22 186 TR_XM_DK_Bayes 1337 5.19 0.90 7.13 187 PLING_QUERY 1329 0.53 0.90 0.36 188 ANY_BOUNCE_MESSAGE 1326 2.34 0.90 2.99 189 BOUNCE_MESSAGE 1326 2.34 0.90 2.99 190 TR_Symld_Words 1325 1.29 0.90 1.47 191 XMHTML_After_End 1320 0.55 0.89 0.40 192 RCVD_IN_SORBS_DUL 1318 0.31 0.89 0.04 193 TR_XM_DK_Bayes1 1316 5.12 0.89 7.04 194 T_STY_INVIS_DIRECT 1306 0.50 0.88 0.32 195 TR_XM_RelayPhish 1297 0.32 0.88 0.07 196 TR_LOTS_OF_MONEY2 1266 0.40 0.86 0.19 197 T_MONEY_PERCENT 1266 0.40 0.86 0.19 198 FILL_THIS_FORM 1266 0.48 0.86 0.32 199 MIME_CHARSET_FARAWAY 1258 0.50 0.85 0.35 200 TR_XM_InvalidRelay 1256 0.27 0.85 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 285099 89.59 94.54 87.34 2 RELAYCOUNTRY_US 261890 81.54 84.44 80.23 3 DKIM_SIGNED 243116 78.74 88.13 74.48 4 XM_DK_Pass 238754 76.48 83.84 73.14 5 DKIM_VALID 234830 75.27 82.61 71.94 6 XM_B_Unicode 229041 74.04 82.57 70.17 7 DCC_CHECK_NEGATIVE 200042 48.89 21.54 61.28 8 BAYES_50 199486 54.77 40.77 61.11 9 DKIM_VALID_AU 186999 59.69 64.99 57.29 10 XMListUnsubscribeExists 153775 54.45 70.63 47.11 11 XM_B_SpammyWords 152512 54.14 70.50 46.72 12 XM_B_Unicode3 129866 42.63 48.90 39.78 13 DCC_CHECK 126206 50.46 76.49 38.66 14 RCVD_IN_MSPIKE_H2 109142 34.42 36.58 33.44 15 T_TM2_M_HEADER_IN_MSG 103694 29.01 22.92 31.77 16 DKIM_VALID_EF 93662 27.98 26.40 28.69 17 HTML_FONT_LOW_CONTRAST 87894 30.04 36.91 26.93 18 LOC_TINY_FONT_1 81724 32.80 49.92 25.04 19 FVGT_m_MULTI_ODD 79167 27.09 33.36 24.25 20 XMSubLong 75784 23.92 25.46 23.22 21 XM_B_SpammyWords2 66052 27.46 43.39 20.24 22 T_KAM_HTML_FONT_INVALID 65515 23.35 30.59 20.07 23 MIME_HTML_ONLY 63220 21.56 26.41 19.37 24 ALL_TRUSTED 54520 11.98 1.56 16.70 25 USER_IN_DEF_DKIM_WL 42515 9.46 1.58 13.02 26 XM_Multi_Part_URI 41397 15.87 22.90 12.68 27 TR_XM_DK_Unsub 39152 14.11 18.77 11.99 28 BAYES_00 36987 8.11 1.00 11.33 29 UNPARSEABLE_RELAY 35469 12.82 17.14 10.87 30 XM_B_PhoneNumber 34390 9.38 6.84 10.54 31 XM_B_Unsub 30466 11.81 17.26 9.33 32 TooManyTo_001 29526 7.44 3.88 9.05 33 XM_Evil_Numbers_Gen 28380 8.91 9.38 8.69 34 BAYES_60 27834 8.66 8.95 8.53 35 LotsOfNums_01 26634 8.33 8.71 8.16 36 LOTS_OF_MONEY 26243 9.54 12.86 8.04 37 TR_XM_DK_Bayes 23263 5.19 0.90 7.13 38 TR_XM_DK_Bayes1 22972 5.12 0.89 7.04 39 TR_XM_BayesUnsub 22665 9.98 16.69 6.94 40 FSL_BULK_SIG 22543 7.60 9.14 6.91 41 IN_ZIMBRA_NJ_WHITELIST 21898 4.64 0.08 6.71 42 XM_DKIMWhitelistDomains 21344 4.65 0.48 6.54 43 TR_XM_DK_Bayes2 20255 4.47 0.64 6.21 44 TR_XM_SpammyWords4 19492 7.74 11.65 5.97 45 RCVD_IN_MSPIKE_H3 19021 5.23 3.90 5.83 46 RCVD_IN_MSPIKE_WL 19021 5.23 3.90 5.83 47 T_TooManySym_01 18862 4.64 2.13 5.78 48 XM_H_GMP 18184 5.38 4.96 5.57 49 TR_MAX_INTL_RELAY 18110 8.43 14.79 5.55 50 MIME_QP_LONG_LINE 17601 4.64 2.99 5.39 51 XM_H_Long_From01 17344 5.39 5.57 5.31 52 XM_B_Phish_Phrases 17079 6.01 7.71 5.23 53 BAYES_40 16463 3.92 1.45 5.04 54 XM_DK_Undo_02 15766 15.76 39.87 4.83 55 HTML_IMAGE_RATIO_02 15143 5.26 6.63 4.64 56 XM_PDF 14986 3.36 0.65 4.59 57 XMStrtUSub 14570 4.18 3.54 4.46 58 MPART_ALT_DIFF 14097 4.62 5.28 4.32 59 XMSubMetaSx_00 13318 4.71 6.11 4.08 60 XM_UncommonTLD01 13288 5.02 7.12 4.07 61 XM_B_SpammyWords3 13200 7.33 14.59 4.04 62 HTML_IMAGE_RATIO_04 13138 4.00 3.94 4.02 63 RCVD_IN_IADB_LISTED 12748 3.13 1.41 3.91 64 RCVD_IN_VALIDITY_SAFE 12680 3.31 2.05 3.88 65 RELAYCOUNTRY_META 12206 6.99 14.17 3.74 66 T_REMOTE_IMAGE 11416 2.94 1.70 3.50 67 BAYES_80 11278 5.17 8.94 3.46 68 BAYES_20 11223 2.69 1.05 3.44 69 RCVD_IN_IADB_SPF 11071 2.70 1.17 3.39 70 MAILING_LIST_MULTI 10779 3.02 2.40 3.30 71 BOTNET_IPINHOSTNAME 10620 5.72 11.17 3.25 72 TooManyTo_002 10577 2.57 1.10 3.24 73 RCVD_IN_VALIDITY_CERTIFIED 9991 2.54 1.38 3.06 74 RCVD_IN_IADB_SENDERID 9867 2.41 1.06 3.02 75 HTML_IMAGE_RATIO_06 9865 3.32 3.97 3.02 76 BAYES_99 9774 11.34 29.75 2.99 77 ANY_BOUNCE_MESSAGE 9753 2.34 0.90 2.99 78 BOUNCE_MESSAGE 9752 2.34 0.90 2.99 79 RCVD_IN_IADB_DK 9576 2.34 1.04 2.93 80 T_TooManySym_02 9483 2.23 0.75 2.91 81 HTML_IMAGE_RATIO_08 9426 3.01 3.28 2.89 82 XMNumbers 9116 3.04 3.59 2.79 83 RCVD_IN_IADB_VOUCHED 8704 2.08 0.78 2.67 84 MIME_HTML_ONLY_MULTI 8445 2.75 3.12 2.59 85 DKIM_INVALID 8286 3.47 5.52 2.54 86 XM_B_SpammyTLD 8088 3.06 4.34 2.48 87 XM_Body_Dirty_Words 8024 4.92 10.35 2.46 88 BAYES_999 7258 8.58 22.61 2.22 89 HTML_MIME_NO_HTML_TAG 7204 1.99 1.50 2.21 90 INVALID_MSGID 7191 1.56 0.14 2.20 91 MIME_HTML_MOSTLY 6959 2.28 2.62 2.13 92 XM_CamelCaseFrm001 6841 2.54 3.51 2.10 93 BAYES_95 6826 3.18 5.58 2.09 94 TR_XM_SpammyRelay 6724 4.68 10.47 2.06 95 BAYES_05 6547 1.56 0.57 2.01 96 FROM_EXCESS_BASE64 6367 2.03 2.21 1.95 97 T_XMDrugObfuBody_14 6205 2.54 3.94 1.90 98 TO_MALFORMED 6194 1.32 0.03 1.90 99 XM_B_URI_Unicode 6078 2.00 2.31 1.86 100 XMStockSpam_06 6013 1.92 2.08 1.84 101 RCVD_IN_IADB_OPTIN 5978 1.40 0.44 1.83 102 XM_DK_Undo_01 5855 1.89 2.10 1.79 103 TR_XM_DKIM_Undo 5820 9.86 27.68 1.78 104 XM_B_Investor 5538 2.62 4.67 1.70 105 XMDiploma_00 5514 2.02 2.74 1.69 106 TooManyTo_003 5378 1.46 1.03 1.65 107 TR_XM_PhishingBody 5357 2.63 4.82 1.64 108 URI_NOVOWEL 5273 1.52 1.30 1.62 109 XM_SPF_SoftFail 5239 2.16 3.38 1.60 110 XM_SendGrid 5225 1.52 1.33 1.60 111 TM2_M_VERY_LONG_WORD 5087 2.34 4.07 1.56 112 TM2_M_URI_OPT_OUT 5072 1.89 2.64 1.55 113 BOTNET 5034 3.85 8.93 1.54 114 XMGappySubj_01 4892 1.08 0.17 1.50 115 SUBJ_ALL_CAPS 4820 1.72 2.24 1.48 116 TR_Symld_Words 4796 1.29 0.90 1.47 117 T_XMDrugObfuBody_08 4794 1.89 2.83 1.47 118 XM_B_Unsub2 4706 1.68 2.22 1.44 119 UNTRUSTED_Relay 4701 2.80 5.79 1.44 120 TR_XM_UnparsRelay 4608 3.62 8.49 1.41 121 XMSexyCombo_05 4577 2.24 4.09 1.40 122 KHOP_HELO_FCRDNS 4485 1.33 1.24 1.37 123 IN_HORDE_ADDRESS_BOOK 4416 0.96 0.08 1.35 124 TR_XM_SpammyWords5 4291 2.19 4.12 1.31 125 HELO_NODOT 4243 0.99 0.31 1.30 126 HELO_NO_DOMAIN 4237 0.99 0.30 1.30 127 FROM_GOV_DKIM_AU 4215 0.96 0.23 1.29 128 URI_HEX 4207 1.39 1.62 1.29 129 XMCapTrack 4196 1.05 0.52 1.29 130 T_XMDrugObfuBody_00 4110 1.77 2.91 1.26 131 XM_GoogleGroups 4012 1.09 0.77 1.23 132 TooManyTo_004 4012 1.15 0.96 1.23 133 RELAYCOUNTRY_CA 3921 2.34 4.84 1.20 134 TVD_SPACE_RATIO 3771 0.84 0.14 1.16 135 XM_OfRef6 3748 1.89 3.54 1.15 136 TR_XM_DK_SendGrid 3552 0.97 0.72 1.09 137 T_TooManySym_03 3358 0.79 0.28 1.03 138 TR_DCC_Bayes_99 3344 7.74 22.56 1.02 139 TooManyTo_005 3339 0.99 0.93 1.02 140 XMGenDplmaNmb 3318 1.14 1.41 1.02 141 T_FILL_THIS_FORM_SHORT 3280 1.12 1.36 1.00 142 XM_H_Long_From02 3218 1.28 1.92 0.99 143 XM_H_Trusted_IP 3142 0.66 0.00 0.96 144 XMSubMetaI_00 3135 0.95 0.92 0.96 145 DKIM_ADSP_CUSTOM_MED 3001 1.07 1.40 0.92 146 XMBrknScrpt_02 2937 1.04 1.36 0.90 147 RCVD_IN_BL_SPAMCOP_NET 2872 3.79 10.20 0.88 148 XM_UB50 2846 1.46 2.76 0.87 149 XM_B_FormFill 2768 0.59 0.02 0.85 150 XMNoVowels 2682 0.73 0.53 0.82 151 XMGappySubj_02 2669 0.58 0.07 0.82 152 TR_XM_Base64_M1 2630 0.87 1.02 0.81 153 SpammyFromTLD_01 2561 1.29 2.40 0.78 154 XM_ShortIntro_01 2545 0.73 0.61 0.78 155 XM_B_SpammyWords4 2503 1.23 2.26 0.77 156 HTTPS_HTTP_MISMATCH 2498 0.93 1.30 0.77 157 TR_MetaPhish_Combo_01 2449 0.71 0.61 0.75 158 XMSubNoVowel 2334 0.59 0.32 0.72 159 NML_ADSP_CUSTOM_MED 2273 0.83 1.13 0.70 160 DIET_1 2203 1.10 2.04 0.67 161 RCVD_IN_PBL 2203 0.71 0.78 0.67 162 XM_B_COPY_HTML 2181 0.91 1.44 0.67 163 XMBody_95 2169 0.52 0.19 0.66 164 XM_H_PHPMailer 2130 0.65 0.63 0.65 165 RELAYCOUNTRY_AU 2062 1.23 2.54 0.63 166 XMMoneyMeta_00 2045 0.89 1.47 0.63 167 TO_NO_BRKTS_HTML_ONLY 2026 0.52 0.28 0.62 168 TR_XM_SPAMCOP 2022 3.19 8.85 0.62 169 MPART_ALT_DIFF_COUNT 1958 0.67 0.83 0.60 170 SUBJ_BUY 1879 0.44 0.14 0.58 171 T_Symld_Words_02 1878 0.70 0.99 0.58 172 T_OBFU_PDF_ATTACH 1869 0.42 0.10 0.57 173 TVD_RCVD_IP 1842 0.65 0.84 0.56 174 FORGED_GMAIL_RCVD 1821 0.69 0.99 0.56 175 HTML_TAG_BALANCE_BODY 1820 0.74 1.15 0.56 176 XMLngstWrd_00 1815 0.55 0.53 0.56 177 HTML_IMAGE_ONLY_32 1771 0.50 0.42 0.54 178 XMPhish30 1705 0.84 1.53 0.52 179 XM_Combo_Sbj 1622 0.49 0.48 0.50 180 XMSolicitRefs_0 1595 0.49 0.50 0.49 181 LongTLD 1574 0.66 1.04 0.48 182 XM_B_DNDMA 1569 0.66 1.06 0.48 183 XMLngstWrd_01 1562 0.47 0.46 0.48 184 SpammyFromTLD_02 1551 0.87 1.73 0.48 185 XMBdyGiftCard01 1538 0.65 1.05 0.47 186 HTML_FONT_FACE_BAD 1513 0.54 0.70 0.46 187 URI_TRY_3LD 1509 0.67 1.12 0.46 188 MISSING_HEADERS 1447 0.48 0.56 0.44 189 XM_ProductURIs 1444 0.68 1.20 0.44 190 XMPhish14 1442 0.65 1.11 0.44 191 RELAYCOUNTRY_GB 1402 0.54 0.79 0.43 192 XMDateMe_00 1396 0.42 0.42 0.43 193 HTML_IMAGE_ONLY_28 1387 0.40 0.33 0.42 194 THIS_AD 1332 0.53 0.81 0.41 195 TM2_M_OBFU_COMMENT 1319 0.52 0.79 0.40 196 XMHTML_After_End 1304 0.55 0.89 0.40 197 TM2_M_BODY_EMPTY 1283 0.29 0.08 0.39 198 T_TooManySym_04 1251 0.28 0.06 0.38 199 XMLngstWrd_02 1231 0.38 0.38 0.38 200 HTML_IMAGE_ONLY_20 1222 0.35 0.28 0.37 ----------------------------------------------------------------------