Email: 442680 Autolearn: 0 AvgScore: 4.48 AvgScanTime: 1.32 sec Spam: 138225 Autolearn: 0 AvgScore: 14.59 AvgScanTime: 1.43 sec Ham: 304455 Autolearn: 0 AvgScore: -0.12 AvgScanTime: 1.26 sec Time Spent Running SA: 161.90 hours Time Spent Processing Spam: 55.00 hours Time Spent Processing Ham: 106.90 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131227 89.12 94.94 86.47 2 DKIM_SIGNED 122267 78.44 88.46 73.89 3 XM_DK_Pass 116579 76.13 84.34 72.41 4 XM_B_Unicode 115772 72.71 83.76 67.70 5 RELAYCOUNTRY_US 115322 82.68 83.43 82.33 6 DKIM_VALID 115098 75.05 83.27 71.32 7 DCC_CHECK 103003 49.61 74.52 38.30 8 XM_B_SpammyWords 98304 51.84 71.12 43.09 9 XMListUnsubscribeExists 97656 53.83 70.65 46.19 10 DKIM_VALID_AU 91635 59.75 66.29 56.78 11 LOC_TINY_FONT_1 71067 33.33 51.41 25.13 12 XM_B_Unicode3 69424 42.75 50.23 39.36 13 XM_B_SpammyWords2 57818 25.54 41.83 18.14 14 BAYES_50 56633 53.29 40.97 58.89 15 RCVD_IN_MSPIKE_H2 54258 35.87 39.25 34.33 16 XM_DK_Undo_02 53536 15.31 38.73 4.68 17 HTML_FONT_LOW_CONTRAST 51524 30.20 37.28 26.99 18 FVGT_m_MULTI_ODD 46632 26.96 33.74 23.88 19 T_KAM_HTML_FONT_INVALID 45010 23.59 32.56 19.51 20 BAYES_99 42452 11.91 30.71 3.37 21 DKIM_VALID_EF 39835 29.41 28.82 29.68 22 TR_XM_DKIM_Undo 38060 9.87 27.53 1.85 23 MIME_HTML_ONLY 37132 24.19 26.86 22.98 24 XMSubLong 35869 24.08 25.95 23.23 25 DCC_CHECK_NEGATIVE 32887 49.83 23.79 61.66 26 BAYES_999 32474 9.05 23.49 2.50 27 XM_Multi_Part_URI 31922 16.81 23.09 13.96 28 TR_DCC_Bayes_99 29943 7.49 21.66 1.06 29 T_TM2_M_HEADER_IN_MSG 28905 27.32 20.91 30.23 30 TR_XM_DK_Unsub 28479 14.81 20.60 12.18 31 UNPARSEABLE_RELAY 24217 13.32 17.52 11.42 32 XM_B_Unsub 23864 13.60 17.26 11.93 33 TR_XM_BayesUnsub 23042 10.21 16.67 7.28 34 TR_MAX_INTL_RELAY 20523 8.33 14.85 5.38 35 XM_B_SpammyWords3 20499 7.37 14.83 3.99 36 RELAYCOUNTRY_META 19231 6.95 13.91 3.79 37 TR_XM_SpammyWords2 16976 4.13 12.28 0.43 38 LOTS_OF_MONEY 16577 7.89 11.99 6.03 39 TR_XM_SpammyWords4 14786 6.14 10.70 4.07 40 BOTNET_IPINHOSTNAME 14492 5.37 10.48 3.04 41 RCVD_IN_BL_SPAMCOP_NET 14362 3.78 10.39 0.78 42 TR_XM_SpammyRelay 13909 4.39 10.06 1.81 43 XM_Body_Dirty_Words 12781 4.82 9.25 2.81 44 BOTNET 12569 3.74 9.09 1.31 45 BAYES_80 12418 5.04 8.98 3.25 46 TR_XM_SPAMCOP 12252 3.12 8.86 0.51 47 TR_XM_UnparsRelay 12027 3.68 8.70 1.40 48 FSL_BULK_SIG 12019 8.29 8.70 8.11 49 XMSubMetaSx_00 11822 5.54 8.55 4.18 50 LotsOfNums_01 11302 7.90 8.18 7.77 51 XM_Evil_Numbers_Gen 11290 8.47 8.17 8.60 52 BAYES_60 11167 8.22 8.08 8.29 53 XM_H_Long_From01 9882 6.07 7.15 5.59 54 XM_B_Phish_Phrases 9814 6.15 7.10 5.72 55 HTML_IMAGE_RATIO_02 9163 5.20 6.63 4.55 56 MPART_ALT_DIFF 8505 4.94 6.15 4.38 57 XM_UncommonTLD01 8072 4.64 5.84 4.10 58 BAYES_95 7622 3.19 5.51 2.13 59 XM_H_GMP 7577 5.59 5.48 5.63 60 XM_B_PhoneNumber 7443 9.64 5.38 11.57 61 DKIM_INVALID 7169 3.39 5.19 2.57 62 T_XMDrugObfuBody_14 7088 2.93 5.13 1.93 63 RELAYCOUNTRY_CA 7081 2.29 5.12 1.00 64 TR_XM_PhishingBody 6928 2.49 5.01 1.34 65 UNTRUSTED_Relay 6878 2.55 4.98 1.45 66 XM_B_Investor 6598 2.67 4.77 1.71 67 RCVD_IN_VALIDITY_RPBL 6558 1.58 4.74 0.14 68 XMSexyCombo_05 6522 2.60 4.72 1.64 69 HTML_IMAGE_RATIO_04 6010 4.42 4.35 4.46 70 XMStrtUSub 5750 4.60 4.16 4.80 71 XM_B_SpammyTLD 5573 2.90 4.03 2.39 72 TM2_M_VERY_LONG_WORD 5441 2.52 3.94 1.88 73 MIME_HTML_ONLY_MULTI 5315 2.88 3.85 2.44 74 XM_OfRef6 5209 2.08 3.77 1.31 75 HTML_IMAGE_RATIO_06 5140 2.73 3.72 2.28 76 XMDiploma_00 4962 2.32 3.59 1.74 77 RCVD_IN_MSPIKE_WL 4815 4.81 3.48 5.42 78 RCVD_IN_MSPIKE_H3 4815 4.81 3.48 5.42 79 TooManyTo_001 4595 8.53 3.32 10.90 80 XM_SPF_SoftFail 4561 2.09 3.30 1.55 81 MIME_HTML_MOSTLY 4436 2.66 3.21 2.42 82 MIME_QP_LONG_LINE 4319 4.55 3.12 5.20 83 XM_CamelCaseFrm001 4299 2.53 3.11 2.26 84 ALL_TRUSTED 4219 11.06 3.05 14.69 85 HTML_IMAGE_RATIO_08 4130 2.36 2.99 2.07 86 T_XMDrugObfuBody_08 3983 2.15 2.88 1.82 87 XMNumbers 3897 2.81 2.82 2.81 88 TR_XM_SpammyWords5 3869 1.70 2.80 1.20 89 RELAYCOUNTRY_AU 3791 1.36 2.74 0.73 90 TM2_M_URI_OPT_OUT 3710 2.06 2.68 1.78 91 XMPhish30 3663 1.09 2.65 0.39 92 XM_URI_RBL 3470 1.01 2.51 0.33 93 XM_UB50 3288 1.33 2.38 0.86 94 XM_B_Unsub2 3280 1.66 2.37 1.34 95 FROM_EXCESS_BASE64 3272 2.09 2.37 1.97 96 T_TooManySym_01 3254 5.00 2.35 6.21 97 XM_B_URI_Unicode 3242 2.02 2.35 1.87 98 XM_B_SpammyWords4 3157 1.22 2.28 0.74 99 RCVD_IN_VALIDITY_SAFE 3140 3.21 2.27 3.63 100 XMBody_17 3076 1.04 2.23 0.50 101 DKIM_ADSP_NXDOMAIN 3004 0.87 2.17 0.28 102 T_XMHurry_00 3002 0.97 2.17 0.42 103 MAILING_LIST_MULTI 2918 2.69 2.11 2.95 104 XM_DK_Undo_01 2915 1.82 2.11 1.69 105 NO_DNS_FOR_FROM 2913 0.84 2.11 0.27 106 TR_XM_MaxWHORU 2908 0.80 2.10 0.22 107 T_XMDrugObfuBody_00 2858 1.15 2.07 0.74 108 XMStockSpam_06 2777 1.72 2.01 1.59 109 SUSP_UTF8_WORD_SUBJ 2758 0.64 2.00 0.02 110 TR_XM_NoHeaderRelay 2754 0.79 1.99 0.25 111 T_FILL_THIS_FORM_SHORT 2628 1.32 1.90 1.05 112 XMGenDplmaNmb 2487 1.23 1.80 0.97 113 SpammyFromTLD_01 2467 1.16 1.78 0.88 114 RCVD_IN_VALIDITY_CERTIFIED 2455 2.17 1.78 2.35 115 SpammyFromTLD_02 2419 0.84 1.75 0.43 116 SUSP_UTF8_WORD_COMBO 2379 0.57 1.72 0.04 117 USER_IN_DEF_DKIM_WL 2328 9.23 1.68 12.65 118 DIET_1 2325 0.88 1.68 0.52 119 SHORTCIRCUIT 2285 0.52 1.65 0.00 120 RCVD_IN_ZEN_LASTEXTERNAL 2285 0.52 1.65 0.00 121 BAYES_40 2200 3.78 1.59 4.77 122 T_REMOTE_IMAGE 2124 3.15 1.54 3.88 123 HTML_MIME_NO_HTML_TAG 2106 2.29 1.52 2.64 124 TR_XM_INV_DKIM 2105 0.56 1.52 0.12 125 XMBrknScrpt_02 2098 1.07 1.52 0.87 126 XM_B_COPY_HTML 2050 1.03 1.48 0.83 127 SUBJ_ALL_CAPS 1997 1.43 1.44 1.42 128 URI_NOVOWEL 1986 1.34 1.44 1.29 129 MY_SERVERS_FOUND 1977 0.60 1.43 0.22 130 URI_HEX 1918 1.15 1.39 1.04 131 DKIM_ADSP_CUSTOM_MED 1876 1.04 1.36 0.90 132 TR_XM_Base64_M1 1869 0.93 1.35 0.74 133 FONT_INVIS_MSGID 1801 0.49 1.30 0.12 134 XMSubMetaI_00 1796 0.74 1.30 0.49 135 BOTNET_NORDNS 1785 0.41 1.29 0.01 136 RCVD_IN_IADB_LISTED 1778 3.02 1.29 3.81 137 TR_Symld_Words 1769 1.47 1.28 1.55 138 BAYES_20 1765 2.94 1.28 3.70 139 XM_SendGrid 1764 1.42 1.28 1.49 140 XM_DIRTYINTL 1750 0.44 1.27 0.07 141 HOSTED_IMG_MULTI_PUB_01 1749 0.41 1.27 0.02 142 LongTLD 1742 0.61 1.26 0.31 143 XM_ProductURIs 1736 0.70 1.26 0.45 144 HTTPS_HTTP_MISMATCH 1714 1.14 1.24 1.09 145 XM_B_SEO 1700 0.57 1.23 0.27 146 SHOPIFY_IMG_NOT_RCVD_SFY 1680 0.54 1.22 0.23 147 TR_XM_PHPForged 1678 0.59 1.21 0.31 148 TR_LOTS_OF_MONEY3 1669 0.51 1.21 0.19 149 RCVD_IN_PSBL 1662 0.57 1.20 0.28 150 XMSexyCombo_01 1630 0.51 1.18 0.20 151 TR_XM_PHPDW 1630 0.58 1.18 0.30 152 XMBody_78 1618 0.51 1.17 0.21 153 TR_XM_FormFill2 1617 0.58 1.17 0.31 154 XM_B_DNDMA 1595 0.72 1.15 0.52 155 XM_H_PHPOS 1591 0.56 1.15 0.30 156 RCVD_IN_IADB_SPF 1572 2.65 1.14 3.34 157 XMHTML_After_End 1562 0.55 1.13 0.29 158 T_STY_INVIS_DIRECT 1562 0.57 1.13 0.32 159 TR_MetaPhish_Combo_01 1561 0.96 1.13 0.88 160 PLING_QUERY 1560 0.59 1.13 0.34 161 RELAYCOUNTRY_GB 1543 0.69 1.12 0.49 162 T_Symld_Words_02 1538 0.66 1.11 0.45 163 TR_LOTS_OF_MONEY2 1536 0.47 1.11 0.18 164 T_MONEY_PERCENT 1536 0.47 1.11 0.18 165 XM_B_COVIDMETA 1534 0.48 1.11 0.20 166 NML_ADSP_CUSTOM_MED 1530 0.70 1.11 0.52 167 KHOP_HELO_FCRDNS 1527 1.58 1.10 1.80 168 TM2_M_OBFU_COMMENT 1499 0.70 1.08 0.52 169 RCVD_IN_IADB_DK 1497 2.34 1.08 2.91 170 RCVD_IN_IADB_SENDERID 1494 2.40 1.08 2.99 171 XMMoneyMeta_00 1461 0.71 1.06 0.55 172 XMSlimDrugH 1461 0.65 1.06 0.46 173 HTML_TAG_BALANCE_BODY 1458 0.76 1.05 0.62 174 TR_XM_SEO4 1437 0.40 1.04 0.11 175 MPART_ALT_DIFF_COUNT 1420 0.64 1.03 0.47 176 MIME_CHARSET_FARAWAY 1416 0.56 1.02 0.35 177 XM_B_Phish66 1409 0.53 1.02 0.30 178 RCVD_IN_XBL 1386 0.33 1.00 0.02 179 XM_H_Long_From02 1385 1.00 1.00 1.00 180 HK_RANDOM_REPLYTO 1371 0.40 0.99 0.13 181 XMReplyNow 1363 0.52 0.99 0.31 182 URI_TRY_3LD 1363 0.71 0.99 0.58 183 RCVD_IN_PBL 1319 0.80 0.95 0.74 184 XMHTMLBadTable_001 1309 0.50 0.95 0.29 185 XMSubMetaSSx_00 1306 0.41 0.94 0.17 186 FORGED_GMAIL_RCVD 1275 0.67 0.92 0.55 187 THIS_AD 1221 0.49 0.88 0.31 188 XM_UB99 1220 0.28 0.88 0.00 189 RDNS_DYNAMIC 1199 0.49 0.87 0.32 190 PDS_RDNS_DYNAMIC_FP 1174 0.39 0.85 0.18 191 RCVD_IN_SBL_CSS 1171 0.30 0.85 0.05 192 XM_OfRef7 1163 0.42 0.84 0.23 193 XMBdyGiftCard01 1138 0.56 0.82 0.44 194 RELAYCOUNTRY_FR 1118 0.40 0.81 0.22 195 XM_TLDProd2 1107 0.44 0.80 0.27 196 TooManyTo_002 1080 4.04 0.78 5.52 197 TVD_RCVD_IP 1080 0.72 0.78 0.70 198 TR_XM_RelayPhish 1064 0.29 0.77 0.07 199 TM2_M_A_HREF_HREF 1045 0.41 0.76 0.26 200 FROM_SUSPICIOUS_NTLD 1044 0.25 0.76 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 263277 89.12 94.94 86.47 2 RELAYCOUNTRY_US 250671 82.68 83.43 82.33 3 DKIM_SIGNED 224970 78.44 88.46 73.89 4 XM_DK_Pass 220452 76.13 84.34 72.41 5 DKIM_VALID 217142 75.05 83.27 71.32 6 XM_B_Unicode 206120 72.71 83.76 67.70 7 DCC_CHECK_NEGATIVE 187716 49.83 23.79 61.66 8 BAYES_50 179292 53.29 40.97 58.89 9 DKIM_VALID_AU 172873 59.75 66.29 56.78 10 XMListUnsubscribeExists 140626 53.83 70.65 46.19 11 XM_B_SpammyWords 131184 51.84 71.12 43.09 12 XM_B_Unicode3 119843 42.75 50.23 39.36 13 DCC_CHECK 116601 49.61 74.52 38.30 14 RCVD_IN_MSPIKE_H2 104533 35.87 39.25 34.33 15 T_TM2_M_HEADER_IN_MSG 92039 27.32 20.91 30.23 16 DKIM_VALID_EF 90350 29.41 28.82 29.68 17 HTML_FONT_LOW_CONTRAST 82184 30.20 37.28 26.99 18 LOC_TINY_FONT_1 76500 33.33 51.41 25.13 19 FVGT_m_MULTI_ODD 72704 26.96 33.74 23.88 20 XMSubLong 70738 24.08 25.95 23.23 21 MIME_HTML_ONLY 69965 24.19 26.86 22.98 22 T_KAM_HTML_FONT_INVALID 59400 23.59 32.56 19.51 23 XM_B_SpammyWords2 55234 25.54 41.83 18.14 24 ALL_TRUSTED 44735 11.06 3.05 14.69 25 XM_Multi_Part_URI 42513 16.81 23.09 13.96 26 BAYES_00 40899 9.42 0.58 13.43 27 USER_IN_DEF_DKIM_WL 38524 9.23 1.68 12.65 28 TR_XM_DK_Unsub 37081 14.81 20.60 12.18 29 XM_B_Unsub 36321 13.60 17.26 11.93 30 XM_B_PhoneNumber 35231 9.64 5.38 11.57 31 UNPARSEABLE_RELAY 34754 13.32 17.52 11.42 32 TooManyTo_001 33182 8.53 3.32 10.90 33 XM_Evil_Numbers_Gen 26194 8.47 8.17 8.60 34 BAYES_60 25226 8.22 8.08 8.29 35 FSL_BULK_SIG 24685 8.29 8.70 8.11 36 LotsOfNums_01 23652 7.90 8.18 7.77 37 TR_XM_BayesUnsub 22165 10.21 16.67 7.28 38 XM_DKIMWhitelistDomains 22100 5.17 0.56 7.26 39 TR_XM_DK_Bayes 21495 5.00 0.46 7.06 40 TR_XM_DK_Bayes1 21073 4.90 0.45 6.92 41 IN_ZIMBRA_NJ_WHITELIST 20777 4.72 0.08 6.82 42 T_TooManySym_01 18900 5.00 2.35 6.21 43 LOTS_OF_MONEY 18351 7.89 11.99 6.03 44 TR_XM_DK_Bayes2 18023 4.18 0.36 5.92 45 XM_B_Phish_Phrases 17429 6.15 7.10 5.72 46 XM_H_GMP 17150 5.59 5.48 5.63 47 XM_H_Long_From01 17005 6.07 7.15 5.59 48 TooManyTo_002 16792 4.04 0.78 5.52 49 RCVD_IN_MSPIKE_WL 16499 4.81 3.48 5.42 50 RCVD_IN_MSPIKE_H3 16499 4.81 3.48 5.42 51 TR_MAX_INTL_RELAY 16372 8.33 14.85 5.38 52 MIME_QP_LONG_LINE 15824 4.55 3.12 5.20 53 XM_PDF 14755 3.51 0.57 4.85 54 XMStrtUSub 14624 4.60 4.16 4.80 55 BAYES_40 14519 3.78 1.59 4.77 56 XM_DK_Undo_02 14243 15.31 38.73 4.68 57 HTML_IMAGE_RATIO_02 13842 5.20 6.63 4.55 58 HTML_IMAGE_RATIO_04 13574 4.42 4.35 4.46 59 MPART_ALT_DIFF 13345 4.94 6.15 4.38 60 XMSubMetaSx_00 12720 5.54 8.55 4.18 61 XM_UncommonTLD01 12477 4.64 5.84 4.10 62 TR_XM_SpammyWords4 12387 6.14 10.70 4.07 63 XM_B_SpammyWords3 12137 7.37 14.83 3.99 64 T_REMOTE_IMAGE 11809 3.15 1.54 3.88 65 RCVD_IN_IADB_LISTED 11612 3.02 1.29 3.81 66 RELAYCOUNTRY_META 11544 6.95 13.91 3.79 67 BAYES_20 11251 2.94 1.28 3.70 68 RCVD_IN_VALIDITY_SAFE 11051 3.21 2.27 3.63 69 ANY_BOUNCE_MESSAGE 10389 2.54 0.62 3.41 70 BOUNCE_MESSAGE 10388 2.54 0.62 3.41 71 BAYES_99 10259 11.91 30.71 3.37 72 RCVD_IN_IADB_SPF 10177 2.65 1.14 3.34 73 T_TooManySym_02 9956 2.42 0.56 3.27 74 BAYES_80 9888 5.04 8.98 3.25 75 XM_B_FormFill 9846 2.24 0.05 3.23 76 BOTNET_IPINHOSTNAME 9259 5.37 10.48 3.04 77 RCVD_IN_IADB_SENDERID 9112 2.40 1.08 2.99 78 MAILING_LIST_MULTI 8984 2.69 2.11 2.95 79 RCVD_IN_IADB_DK 8873 2.34 1.08 2.91 80 XMNumbers 8559 2.81 2.82 2.81 81 XM_Body_Dirty_Words 8548 4.82 9.25 2.81 82 HTML_MIME_NO_HTML_TAG 8036 2.29 1.52 2.64 83 DKIM_INVALID 7828 3.39 5.19 2.57 84 BAYES_999 7597 9.05 23.49 2.50 85 RCVD_IN_IADB_VOUCHED 7462 1.87 0.59 2.45 86 MIME_HTML_ONLY_MULTI 7422 2.88 3.85 2.44 87 INVALID_MSGID 7359 1.73 0.21 2.42 88 MIME_HTML_MOSTLY 7359 2.66 3.21 2.42 89 XM_B_SpammyTLD 7278 2.90 4.03 2.39 90 RCVD_IN_VALIDITY_CERTIFIED 7165 2.17 1.78 2.35 91 HTML_IMAGE_RATIO_06 6946 2.73 3.72 2.28 92 XM_CamelCaseFrm001 6892 2.53 3.11 2.26 93 BAYES_05 6637 1.70 0.63 2.18 94 BAYES_95 6478 3.19 5.51 2.13 95 HTML_IMAGE_RATIO_08 6313 2.36 2.99 2.07 96 TO_MALFORMED 6162 1.40 0.01 2.02 97 FROM_EXCESS_BASE64 5992 2.09 2.37 1.97 98 T_XMDrugObfuBody_14 5871 2.93 5.13 1.93 99 TM2_M_VERY_LONG_WORD 5711 2.52 3.94 1.88 100 XM_B_URI_Unicode 5691 2.02 2.35 1.87 101 TR_XM_DKIM_Undo 5630 9.87 27.53 1.85 102 T_XMDrugObfuBody_08 5533 2.15 2.88 1.82 103 TR_XM_SpammyRelay 5522 4.39 10.06 1.81 104 KHOP_HELO_FCRDNS 5483 1.58 1.10 1.80 105 TM2_M_URI_OPT_OUT 5423 2.06 2.68 1.78 106 RCVD_IN_IADB_OPTIN 5336 1.31 0.33 1.75 107 XMDiploma_00 5312 2.32 3.59 1.74 108 XM_B_Investor 5218 2.67 4.77 1.71 109 XM_DK_Undo_01 5150 1.82 2.11 1.69 110 XMSexyCombo_05 4988 2.60 4.72 1.64 111 XMGappySubj_01 4909 1.17 0.20 1.61 112 XMStockSpam_06 4855 1.72 2.01 1.59 113 TooManyTo_003 4819 1.29 0.65 1.58 114 IN_HORDE_ADDRESS_BOOK 4772 1.11 0.10 1.57 115 TR_Symld_Words 4731 1.47 1.28 1.55 116 XM_SPF_SoftFail 4713 2.09 3.30 1.55 117 XM_SendGrid 4544 1.42 1.28 1.49 118 UNTRUSTED_Relay 4406 2.55 4.98 1.45 119 SUBJ_ALL_CAPS 4320 1.43 1.44 1.42 120 TR_XM_UnparsRelay 4262 3.68 8.70 1.40 121 TR_XM_PhishingBody 4085 2.49 5.01 1.34 122 XM_B_Unsub2 4068 1.66 2.37 1.34 123 T_TooManySym_03 3998 0.96 0.17 1.31 124 XM_OfRef6 3981 2.08 3.77 1.31 125 BOTNET 3980 3.74 9.09 1.31 126 URI_NOVOWEL 3938 1.34 1.44 1.29 127 XM_GoogleGroups 3791 1.07 0.67 1.25 128 TR_XM_SpammyWords5 3643 1.70 2.80 1.20 129 TooManyTo_004 3634 1.01 0.60 1.19 130 XMCapTrack 3439 0.93 0.50 1.13 131 HELO_NODOT 3331 0.89 0.44 1.09 132 HELO_NO_DOMAIN 3327 0.89 0.44 1.09 133 HTTPS_HTTP_MISMATCH 3311 1.14 1.24 1.09 134 TVD_SPACE_RATIO 3266 0.80 0.20 1.07 135 TR_DCC_Bayes_99 3216 7.49 21.66 1.06 136 T_FILL_THIS_FORM_SHORT 3210 1.32 1.90 1.05 137 URI_HEX 3158 1.15 1.39 1.04 138 TR_XM_DK_SendGrid 3118 0.93 0.73 1.02 139 XMNoVowels 3097 0.92 0.72 1.02 140 XM_H_Long_From02 3057 1.00 1.00 1.00 141 RELAYCOUNTRY_CA 3038 2.29 5.12 1.00 142 TooManyTo_005 2978 0.85 0.57 0.98 143 XMGenDplmaNmb 2949 1.23 1.80 0.97 144 XMGappySubj_02 2837 0.67 0.10 0.93 145 DKIM_ADSP_CUSTOM_MED 2740 1.04 1.36 0.90 146 SpammyFromTLD_01 2690 1.16 1.78 0.88 147 TR_MetaPhish_Combo_01 2670 0.96 1.13 0.88 148 XMBrknScrpt_02 2649 1.07 1.52 0.87 149 XM_UB50 2618 1.33 2.38 0.86 150 XM_B_COPY_HTML 2527 1.03 1.48 0.83 151 FROM_GOV_DKIM_AU 2379 0.63 0.28 0.78 152 FILL_THIS_FORM 2371 0.62 0.25 0.78 153 RCVD_IN_BL_SPAMCOP_NET 2369 3.78 10.39 0.78 154 T_TVD_MIME_NO_HEADERS 2277 0.52 0.03 0.75 155 TR_XM_Base64_M1 2262 0.93 1.35 0.74 156 XM_B_SpammyWords4 2260 1.22 2.28 0.74 157 RCVD_IN_PBL 2241 0.80 0.95 0.74 158 T_XMDrugObfuBody_00 2240 1.15 2.07 0.74 159 RELAYCOUNTRY_AU 2210 1.36 2.74 0.73 160 XMBody_95 2189 0.53 0.12 0.72 161 XM_ShortIntro_01 2158 0.62 0.42 0.71 162 XM_H_PHPMailer 2151 0.66 0.55 0.71 163 TVD_RCVD_IP 2121 0.72 0.78 0.70 164 XM_RXBody 2068 0.59 0.40 0.68 165 T_OBFU_PDF_ATTACH 2003 0.49 0.13 0.66 166 HTML_TAG_BALANCE_BODY 1900 0.76 1.05 0.62 167 URI_TRY_3LD 1778 0.71 0.99 0.58 168 TM2_M_BODY_EMPTY 1735 0.58 0.59 0.57 169 FILL_THIS_FORM_LONG 1719 0.44 0.17 0.56 170 XMMoneyMeta_00 1678 0.71 1.06 0.55 171 FORGED_GMAIL_RCVD 1676 0.67 0.92 0.55 172 DIET_1 1592 0.88 1.68 0.52 173 TM2_M_OBFU_COMMENT 1591 0.70 1.08 0.52 174 XM_B_DNDMA 1580 0.72 1.15 0.52 175 NML_ADSP_CUSTOM_MED 1571 0.70 1.11 0.52 176 TR_XM_SPAMCOP 1566 3.12 8.86 0.51 177 XMBody_17 1536 1.04 2.23 0.50 178 XMSubMetaI_00 1497 0.74 1.30 0.49 179 RELAYCOUNTRY_GB 1494 0.69 1.12 0.49 180 MISSING_HEADERS 1491 0.51 0.57 0.49 181 XMLngstWrd_00 1435 0.47 0.46 0.47 182 MPART_ALT_DIFF_COUNT 1427 0.64 1.03 0.47 183 XMSlimDrugH 1400 0.65 1.06 0.46 184 HTML_IMAGE_ONLY_32 1397 0.36 0.14 0.46 185 T_Symld_Words_02 1382 0.66 1.11 0.45 186 USER_IN_WHITELIST 1364 0.31 0.00 0.45 187 USER_IN_WELCOMELIST 1364 0.31 0.00 0.45 188 HTML_IMAGE_ONLY_20 1364 0.50 0.61 0.45 189 XM_ProductURIs 1358 0.70 1.26 0.45 190 XMBdyGiftCard01 1340 0.56 0.82 0.44 191 URI_OPTOUT_3LD 1315 0.36 0.20 0.43 192 TO_NO_BRKTS_HTML_ONLY 1308 0.38 0.29 0.43 193 TR_XM_SpammyWords2 1306 4.13 12.28 0.43 194 SpammyFromTLD_02 1304 0.84 1.75 0.43 195 T_XMHurry_00 1286 0.97 2.17 0.42 196 MSGID_FROM_MTA_HEADER 1285 0.33 0.12 0.42 197 FROM_GOV_SPOOF 1280 0.32 0.09 0.42 198 XMPhish14 1265 0.50 0.68 0.42 199 HTML_FONT_FACE_BAD 1249 0.48 0.64 0.41 200 T_TooManySym_04 1205 0.29 0.05 0.40 ----------------------------------------------------------------------