Email: 438314 Autolearn: 0 AvgScore: 4.78 AvgScanTime: 1.33 sec Spam: 137056 Autolearn: 0 AvgScore: 14.71 AvgScanTime: 1.44 sec Ham: 301258 Autolearn: 0 AvgScore: 0.27 AvgScanTime: 1.28 sec Time Spent Running SA: 161.69 hours Time Spent Processing Spam: 54.85 hours Time Spent Processing Ham: 106.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130786 89.43 95.43 86.70 2 DKIM_SIGNED 122881 79.80 89.66 75.32 3 XM_DK_Pass 117961 77.61 86.07 73.77 4 DKIM_VALID 116084 76.44 84.70 72.68 5 RELAYCOUNTRY_US 115714 82.87 84.43 82.16 6 XM_B_Unicode 114503 74.72 83.54 70.70 7 DCC_CHECK 103816 50.61 75.75 39.18 8 XMListUnsubscribeExists 97003 55.86 70.78 49.07 9 XM_B_SpammyWords 96125 53.04 70.14 45.26 10 DKIM_VALID_AU 90337 59.99 65.91 57.30 11 XM_B_Unicode3 68855 43.68 50.24 40.69 12 LOC_TINY_FONT_1 68755 35.37 50.17 28.63 13 XM_B_SpammyWords2 56536 26.43 41.25 19.68 14 BAYES_50 56325 54.60 41.10 60.74 15 XM_DK_Undo_02 53809 15.86 39.26 5.22 16 RCVD_IN_MSPIKE_H2 52078 35.45 38.00 34.29 17 HTML_FONT_LOW_CONTRAST 50628 30.76 36.94 27.95 18 FVGT_m_MULTI_ODD 47946 28.26 34.98 25.21 19 T_KAM_HTML_FONT_INVALID 43237 24.05 31.55 20.64 20 BAYES_99 41107 11.75 29.99 3.45 21 DKIM_VALID_EF 40757 28.66 29.74 28.17 22 MIME_HTML_ONLY 38412 22.82 28.03 20.46 23 TR_XM_DKIM_Undo 37696 9.90 27.50 1.89 24 XMSubLong 34706 25.10 25.32 25.00 25 BAYES_999 31305 8.89 22.84 2.54 26 DCC_CHECK_NEGATIVE 31146 48.88 22.73 60.78 27 XM_Multi_Part_URI 30501 16.09 22.25 13.28 28 TR_DCC_Bayes_99 29699 7.66 21.67 1.28 29 T_TM2_M_HEADER_IN_MSG 29209 27.62 21.31 30.48 30 TR_XM_DK_Unsub 29059 15.00 21.20 12.19 31 UNPARSEABLE_RELAY 26147 13.67 19.08 11.21 32 XM_B_Unsub 23305 11.62 17.00 9.17 33 TR_XM_BayesUnsub 22146 9.85 16.16 6.99 34 XM_B_SpammyWords3 20962 7.90 15.29 4.54 35 TR_MAX_INTL_RELAY 20868 8.55 15.23 5.51 36 RELAYCOUNTRY_META 19454 7.05 14.19 3.81 37 LOTS_OF_MONEY 16357 7.80 11.93 5.92 38 TR_XM_SpammyWords4 15048 6.16 10.98 3.97 39 TR_XM_SpammyWords2 14753 3.61 10.76 0.35 40 BOTNET_IPINHOSTNAME 14306 5.51 10.44 3.26 41 RCVD_IN_BL_SPAMCOP_NET 13909 3.60 10.15 0.62 42 TR_XM_SpammyRelay 13745 4.41 10.03 1.86 43 BAYES_80 12654 5.18 9.23 3.33 44 FSL_BULK_SIG 12458 7.88 9.09 7.32 45 XM_Evil_Numbers_Gen 12045 9.81 8.79 10.28 46 XM_Body_Dirty_Words 11836 4.48 8.64 2.59 47 TR_XM_UnparsRelay 11436 3.60 8.34 1.44 48 XMSubMetaSx_00 11375 6.09 8.30 5.09 49 BOTNET 11355 3.80 8.28 1.76 50 LotsOfNums_01 11089 8.13 8.09 8.14 51 BAYES_60 11059 8.22 8.07 8.28 52 TR_XM_SPAMCOP 10730 2.69 7.83 0.35 53 XM_B_Phish_Phrases 10509 6.35 7.67 5.75 54 MPART_ALT_DIFF 9110 5.26 6.65 4.63 55 HTML_IMAGE_RATIO_02 8962 5.40 6.54 4.88 56 XM_H_Long_From01 8645 5.84 6.31 5.63 57 XM_UncommonTLD01 7845 4.63 5.72 4.13 58 UNTRUSTED_Relay 7628 2.84 5.57 1.60 59 BAYES_95 7550 3.21 5.51 2.17 60 RELAYCOUNTRY_CA 7108 2.29 5.19 0.97 61 XM_B_PhoneNumber 7014 7.79 5.12 9.01 62 XMSexyCombo_05 6859 3.01 5.00 2.11 63 DKIM_INVALID 6797 3.36 4.96 2.64 64 XM_B_Investor 6783 2.55 4.95 1.46 65 RCVD_IN_VALIDITY_RPBL 6370 1.54 4.65 0.12 66 XM_H_GMP 6277 5.28 4.58 5.60 67 HTML_IMAGE_RATIO_04 6051 4.83 4.41 5.02 68 T_XMDrugObfuBody_14 5867 2.97 4.28 2.37 69 TR_XM_PhishingBody 5682 2.35 4.15 1.54 70 TM2_M_VERY_LONG_WORD 5521 3.52 4.03 3.30 71 RCVD_IN_MSPIKE_H3 5479 5.15 4.00 5.68 72 RCVD_IN_MSPIKE_WL 5479 5.15 4.00 5.68 73 XMStrtUSub 5409 4.19 3.95 4.30 74 MIME_HTML_ONLY_MULTI 5288 2.97 3.86 2.57 75 HTML_IMAGE_RATIO_06 5214 3.49 3.80 3.35 76 T_TooManySym_01 5210 5.73 3.80 6.61 77 XM_OfRef6 5034 2.16 3.67 1.47 78 MIME_HTML_MOSTLY 4849 2.74 3.54 2.37 79 XM_B_SpammyTLD 4656 2.92 3.40 2.70 80 XM_CamelCaseFrm001 4491 2.73 3.28 2.48 81 TooManyTo_001 4345 6.50 3.17 8.02 82 TM2_M_URI_OPT_OUT 4320 2.29 3.15 1.89 83 MIME_QP_LONG_LINE 4155 4.63 3.03 5.35 84 XM_SPF_SoftFail 4102 1.97 2.99 1.51 85 XMNumbers 4092 3.06 2.99 3.10 86 XM_URI_RBL 4079 1.22 2.98 0.42 87 TR_XM_SpammyWords5 3953 1.88 2.88 1.42 88 RELAYCOUNTRY_AU 3893 1.40 2.84 0.74 89 XMDiploma_00 3840 1.75 2.80 1.27 90 T_XMDrugObfuBody_08 3812 1.88 2.78 1.47 91 HTML_IMAGE_RATIO_08 3717 2.45 2.71 2.33 92 XM_UB50 3587 1.47 2.62 0.95 93 XM_B_Unsub2 3376 1.75 2.46 1.43 94 XM_SendGrid 3371 1.78 2.46 1.47 95 XM_B_SpammyWords4 3352 1.12 2.45 0.52 96 HTML_MIME_NO_HTML_TAG 3270 2.43 2.39 2.45 97 MAILING_LIST_MULTI 3263 2.84 2.38 3.05 98 XM_DK_Undo_01 3198 2.01 2.33 1.86 99 FROM_EXCESS_BASE64 3177 2.38 2.32 2.41 100 XM_B_URI_Unicode 3170 2.09 2.31 1.98 101 T_XMHurry_00 3135 1.05 2.29 0.49 102 DKIM_ADSP_NXDOMAIN 3125 0.94 2.28 0.33 103 XMBody_17 3099 1.02 2.26 0.45 104 T_XMDrugObfuBody_00 3090 1.28 2.25 0.84 105 NO_DNS_FOR_FROM 2999 0.88 2.19 0.29 106 RCVD_IN_VALIDITY_SAFE 2992 3.71 2.18 4.40 107 TR_XM_MaxWHORU 2861 0.82 2.09 0.24 108 TR_XM_NoHeaderRelay 2820 0.80 2.06 0.23 109 SpammyFromTLD_02 2568 1.00 1.87 0.60 110 T_REMOTE_IMAGE 2415 2.92 1.76 3.44 111 XMStockSpam_06 2413 1.36 1.76 1.18 112 BAYES_40 2375 3.89 1.73 4.87 113 RCVD_IN_PBL 2356 0.98 1.72 0.64 114 SUSP_UTF8_WORD_SUBJ 2326 0.56 1.70 0.04 115 LongTLD 2312 0.82 1.69 0.42 116 XMBrknScrpt_02 2284 1.12 1.67 0.88 117 USER_IN_DEF_DKIM_WL 2249 9.42 1.64 12.95 118 T_FILL_THIS_FORM_SHORT 2184 1.09 1.59 0.86 119 SpammyFromTLD_01 2146 1.03 1.57 0.79 120 XM_B_SEO 2140 0.66 1.56 0.25 121 RCVD_IN_VALIDITY_CERTIFIED 2128 2.65 1.55 3.15 122 XMPhish30 2093 0.89 1.53 0.60 123 RCVD_IN_ZEN_LASTEXTERNAL 2046 0.47 1.49 0.00 124 SHORTCIRCUIT 2046 0.47 1.49 0.00 125 XM_B_COPY_HTML 2022 1.04 1.48 0.84 126 XMGenDplmaNmb 2011 0.97 1.47 0.75 127 ALL_TRUSTED 1990 10.55 1.45 14.69 128 URI_HEX 1982 1.21 1.45 1.11 129 URI_NOVOWEL 1861 1.62 1.36 1.75 130 T_TooManySym_02 1845 2.63 1.35 3.21 131 TR_Symld_Words 1838 1.45 1.34 1.50 132 BAYES_20 1811 2.90 1.32 3.61 133 UNICODE_OBFU_ASC 1811 0.41 1.32 0.00 134 TR_XM_INV_DKIM 1808 0.53 1.32 0.17 135 SUSP_UTF8_WORD_COMBO 1807 0.45 1.32 0.06 136 SHOPIFY_IMG_NOT_RCVD_SFY 1737 0.56 1.27 0.24 137 TR_XM_SEO4 1734 0.47 1.27 0.10 138 XM_B_DNDMA 1703 0.76 1.24 0.55 139 TR_XM_Base64_M1 1687 1.00 1.23 0.90 140 RCVD_IN_XBL 1681 0.40 1.23 0.03 141 HTTPS_HTTP_MISMATCH 1679 0.92 1.23 0.78 142 SUBJ_ALL_CAPS 1662 1.24 1.21 1.25 143 DIET_1 1649 0.60 1.20 0.32 144 RCVD_IN_IADB_LISTED 1631 3.22 1.19 4.15 145 TM2_M_OBFU_COMMENT 1590 0.66 1.16 0.43 146 XM_H_Long_From02 1575 1.03 1.15 0.98 147 XM_S_SpammyWords 1565 0.56 1.14 0.29 148 TR_XM_Spammywords 1564 0.56 1.14 0.29 149 KHOP_HELO_FCRDNS 1531 1.93 1.12 2.30 150 TR_XM_PHPForged 1526 0.57 1.11 0.32 151 TR_XM_PHPDW 1518 0.56 1.11 0.32 152 XMHTML_After_End 1514 0.57 1.10 0.33 153 TR_LOTS_OF_MONEY3 1511 0.50 1.10 0.23 154 MIXED_ES 1501 0.34 1.10 0.00 155 XM_ProductURIs 1488 0.62 1.09 0.41 156 XMMoneyMeta_00 1488 0.64 1.09 0.44 157 TR_XM_FormFill2 1475 0.56 1.08 0.32 158 T_STY_INVIS_DIRECT 1475 0.59 1.08 0.37 159 XMBdyGiftCard01 1459 0.78 1.06 0.65 160 FUZZY_CREDIT 1458 0.33 1.06 0.00 161 FUZZY_PRIVACY 1456 0.33 1.06 0.00 162 XMSexyCombo_01 1456 0.45 1.06 0.18 163 FUZZY_APPLE 1456 0.33 1.06 0.00 164 FUZZY_PAYPAL 1456 0.33 1.06 0.00 165 XM_DIRTYINTL 1450 0.40 1.06 0.10 166 RELAYCOUNTRY_FR 1448 0.51 1.06 0.26 167 XM_H_PHPOS 1443 0.54 1.05 0.31 168 RCVD_IN_IADB_SPF 1418 2.79 1.03 3.59 169 XMPhish14 1417 0.58 1.03 0.37 170 XMReplyNow 1406 0.51 1.03 0.28 171 BOTNET_NORDNS 1405 0.33 1.03 0.01 172 XM_B_REG_HTML 1404 0.44 1.02 0.17 173 TR_XM_SpoofStaff 1371 0.43 1.00 0.17 174 RCVD_IN_IADB_DK 1359 2.38 0.99 3.01 175 RCVD_IN_IADB_SENDERID 1349 2.46 0.98 3.13 176 THIS_AD 1345 0.63 0.98 0.48 177 XMBody_78 1338 0.49 0.98 0.28 178 HTML_TAG_BALANCE_BODY 1334 0.62 0.97 0.46 179 MIME_CHARSET_FARAWAY 1334 1.04 0.97 1.07 180 XM_H_SpoofStaff4 1332 0.42 0.97 0.17 181 XMSpoofStaff2 1331 0.39 0.97 0.12 182 TR_XM_PSC1 1327 0.39 0.97 0.12 183 URI_TRY_3LD 1317 0.76 0.96 0.67 184 XMSubMetaSxObfu_03 1309 0.67 0.96 0.54 185 T_Symld_Words_02 1308 0.65 0.95 0.51 186 PLING_QUERY 1296 0.64 0.95 0.50 187 RDNS_DYNAMIC 1279 0.50 0.93 0.30 188 TR_XM_RelayPhish 1272 0.34 0.93 0.07 189 XM_UB99 1266 0.29 0.92 0.00 190 PDS_RDNS_DYNAMIC_FP 1257 0.39 0.92 0.15 191 HK_RANDOM_REPLYTO 1253 0.36 0.91 0.11 192 XM_B_Phish66 1251 0.51 0.91 0.32 193 DKIM_ADSP_CUSTOM_MED 1237 0.93 0.90 0.94 194 BAYES_00 1214 8.05 0.89 11.31 195 XMSlimDrugH 1199 0.63 0.87 0.53 196 RELAYCOUNTRY_GB 1192 0.62 0.87 0.51 197 TR_XM_DK_SendGrid 1182 0.91 0.86 0.93 198 XM_OfRef7 1180 0.40 0.86 0.19 199 XM_B_COVIDMETA 1178 0.41 0.86 0.21 200 HTML_SHORT_LINK_IMG_1 1175 0.37 0.86 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 261187 89.43 95.43 86.70 2 RELAYCOUNTRY_US 247501 82.87 84.43 82.16 3 DKIM_SIGNED 226907 79.80 89.66 75.32 4 XM_DK_Pass 222230 77.61 86.07 73.77 5 DKIM_VALID 218967 76.44 84.70 72.68 6 XM_B_Unicode 212987 74.72 83.54 70.70 7 DCC_CHECK_NEGATIVE 183103 48.88 22.73 60.78 8 BAYES_50 182992 54.60 41.10 60.74 9 DKIM_VALID_AU 172619 59.99 65.91 57.30 10 XMListUnsubscribeExists 147818 55.86 70.78 49.07 11 XM_B_SpammyWords 136341 53.04 70.14 45.26 12 XM_B_Unicode3 122582 43.68 50.24 40.69 13 DCC_CHECK 118030 50.61 75.75 39.18 14 RCVD_IN_MSPIKE_H2 103293 35.45 38.00 34.29 15 T_TM2_M_HEADER_IN_MSG 91837 27.62 21.31 30.48 16 LOC_TINY_FONT_1 86256 35.37 50.17 28.63 17 DKIM_VALID_EF 84865 28.66 29.74 28.17 18 HTML_FONT_LOW_CONTRAST 84195 30.76 36.94 27.95 19 FVGT_m_MULTI_ODD 75933 28.26 34.98 25.21 20 XMSubLong 75325 25.10 25.32 25.00 21 T_KAM_HTML_FONT_INVALID 62167 24.05 31.55 20.64 22 MIME_HTML_ONLY 61624 22.82 28.03 20.46 23 XM_B_SpammyWords2 59298 26.43 41.25 19.68 24 ALL_TRUSTED 44269 10.55 1.45 14.69 25 XM_Multi_Part_URI 40016 16.09 22.25 13.28 26 USER_IN_DEF_DKIM_WL 39019 9.42 1.64 12.95 27 TR_XM_DK_Unsub 36710 15.00 21.20 12.19 28 BAYES_00 34073 8.05 0.89 11.31 29 UNPARSEABLE_RELAY 33768 13.67 19.08 11.21 30 XM_Evil_Numbers_Gen 30961 9.81 8.79 10.28 31 XM_B_Unsub 27626 11.62 17.00 9.17 32 XM_B_PhoneNumber 27133 7.79 5.12 9.01 33 BAYES_60 24957 8.22 8.07 8.28 34 LotsOfNums_01 24532 8.13 8.09 8.14 35 TooManyTo_001 24165 6.50 3.17 8.02 36 FSL_BULK_SIG 22064 7.88 9.09 7.32 37 TR_XM_BayesUnsub 21049 9.85 16.16 6.99 38 IN_ZIMBRA_NJ_WHITELIST 20962 4.81 0.08 6.96 39 TR_XM_DK_Bayes 20883 4.99 0.72 6.93 40 TR_XM_DK_Bayes1 20532 4.91 0.71 6.82 41 T_TooManySym_01 19899 5.73 3.80 6.61 42 XM_DKIMWhitelistDomains 19303 4.43 0.09 6.41 43 LOTS_OF_MONEY 17833 7.80 11.93 5.92 44 XM_B_Phish_Phrases 17312 6.35 7.67 5.75 45 TR_XM_DK_Bayes2 17187 4.08 0.52 5.71 46 RCVD_IN_MSPIKE_WL 17111 5.15 4.00 5.68 47 RCVD_IN_MSPIKE_H3 17110 5.15 4.00 5.68 48 XM_H_Long_From01 16946 5.84 6.31 5.63 49 XM_H_GMP 16857 5.28 4.58 5.60 50 TR_MAX_INTL_RELAY 16592 8.55 15.23 5.51 51 MIME_QP_LONG_LINE 16122 4.63 3.03 5.35 52 XM_DK_Undo_02 15714 15.86 39.26 5.22 53 XMSubMetaSx_00 15333 6.09 8.30 5.09 54 HTML_IMAGE_RATIO_04 15129 4.83 4.41 5.02 55 HTML_IMAGE_RATIO_02 14707 5.40 6.54 4.88 56 BAYES_40 14662 3.89 1.73 4.87 57 XM_PDF 14320 3.51 0.77 4.75 58 ANY_BOUNCE_MESSAGE 14298 3.44 0.57 4.75 59 BOUNCE_MESSAGE 14298 3.44 0.57 4.75 60 MPART_ALT_DIFF 13953 5.26 6.65 4.63 61 XM_B_SpammyWords3 13680 7.90 15.29 4.54 62 RCVD_IN_VALIDITY_SAFE 13264 3.71 2.18 4.40 63 XMStrtUSub 12966 4.19 3.95 4.30 64 RCVD_IN_IADB_LISTED 12503 3.22 1.19 4.15 65 XM_UncommonTLD01 12441 4.63 5.72 4.13 66 TR_XM_SpammyWords4 11947 6.16 10.98 3.97 67 RELAYCOUNTRY_META 11464 7.05 14.19 3.81 68 BAYES_20 10887 2.90 1.32 3.61 69 RCVD_IN_IADB_SPF 10813 2.79 1.03 3.59 70 BAYES_99 10387 11.75 29.99 3.45 71 T_REMOTE_IMAGE 10377 2.92 1.76 3.44 72 HTML_IMAGE_RATIO_06 10096 3.49 3.80 3.35 73 BAYES_80 10041 5.18 9.23 3.33 74 TM2_M_VERY_LONG_WORD 9929 3.52 4.03 3.30 75 BOTNET_IPINHOSTNAME 9831 5.51 10.44 3.26 76 T_TooManySym_02 9684 2.63 1.35 3.21 77 RCVD_IN_VALIDITY_CERTIFIED 9477 2.65 1.55 3.15 78 RCVD_IN_IADB_SENDERID 9440 2.46 0.98 3.13 79 XMNumbers 9336 3.06 2.99 3.10 80 MAILING_LIST_MULTI 9202 2.84 2.38 3.05 81 RCVD_IN_IADB_DK 9056 2.38 0.99 3.01 82 RCVD_IN_IADB_VOUCHED 8812 2.18 0.55 2.93 83 TooManyTo_002 8599 2.14 0.56 2.85 84 XM_B_SpammyTLD 8140 2.92 3.40 2.70 85 DKIM_INVALID 7940 3.36 4.96 2.64 86 XM_Body_Dirty_Words 7816 4.48 8.64 2.59 87 MIME_HTML_ONLY_MULTI 7740 2.97 3.86 2.57 88 BAYES_999 7653 8.89 22.84 2.54 89 XM_CamelCaseFrm001 7461 2.73 3.28 2.48 90 INVALID_MSGID 7403 1.73 0.13 2.46 91 HTML_MIME_NO_HTML_TAG 7379 2.43 2.39 2.45 92 FROM_EXCESS_BASE64 7268 2.38 2.32 2.41 93 MIME_HTML_MOSTLY 7144 2.74 3.54 2.37 94 T_XMDrugObfuBody_14 7135 2.97 4.28 2.37 95 HTML_IMAGE_RATIO_08 7026 2.45 2.71 2.33 96 KHOP_HELO_FCRDNS 6920 1.93 1.12 2.30 97 BAYES_05 6686 1.73 0.64 2.22 98 BAYES_95 6540 3.21 5.51 2.17 99 XMSexyCombo_05 6350 3.01 5.00 2.11 100 RCVD_IN_IADB_OPTIN 6295 1.54 0.33 2.09 101 TO_MALFORMED 6229 1.42 0.00 2.07 102 XM_B_URI_Unicode 5970 2.09 2.31 1.98 103 TM2_M_URI_OPT_OUT 5703 2.29 3.15 1.89 104 TR_XM_DKIM_Undo 5698 9.90 27.50 1.89 105 XM_DK_Undo_01 5616 2.01 2.33 1.86 106 TR_XM_SpammyRelay 5592 4.41 10.03 1.86 107 BOTNET 5298 3.80 8.28 1.76 108 URI_NOVOWEL 5258 1.62 1.36 1.75 109 XMGappySubj_01 4919 1.18 0.18 1.63 110 UNTRUSTED_Relay 4808 2.84 5.57 1.60 111 IN_HORDE_ADDRESS_BOOK 4801 1.13 0.12 1.59 112 TooManyTo_003 4750 1.23 0.47 1.58 113 TR_XM_PhishingBody 4633 2.35 4.15 1.54 114 XM_SPF_SoftFail 4536 1.97 2.99 1.51 115 TR_Symld_Words 4530 1.45 1.34 1.50 116 T_XMDrugObfuBody_08 4436 1.88 2.78 1.47 117 XM_SendGrid 4421 1.78 2.46 1.47 118 XM_OfRef6 4415 2.16 3.67 1.47 119 XM_B_Investor 4413 2.55 4.95 1.46 120 TR_XM_UnparsRelay 4353 3.60 8.34 1.44 121 XM_B_Unsub2 4312 1.75 2.46 1.43 122 TR_XM_SpammyWords5 4273 1.88 2.88 1.42 123 T_TooManySym_03 4014 0.96 0.15 1.33 124 TR_DCC_Bayes_99 3854 7.66 21.67 1.28 125 XMDiploma_00 3835 1.75 2.80 1.27 126 SUBJ_ALL_CAPS 3778 1.24 1.21 1.25 127 XM_ShortIntro_01 3668 0.98 0.46 1.22 128 XM_GoogleGroups 3619 1.05 0.71 1.20 129 HELO_NODOT 3581 0.89 0.24 1.19 130 HELO_NO_DOMAIN 3573 0.89 0.24 1.19 131 XMStockSpam_06 3564 1.36 1.76 1.18 132 TooManyTo_004 3548 0.94 0.42 1.18 133 URI_HEX 3339 1.21 1.45 1.11 134 MIME_CHARSET_FARAWAY 3219 1.04 0.97 1.07 135 XMCapTrack 3176 0.89 0.53 1.05 136 XMNoVowels 3130 0.96 0.78 1.04 137 TVD_SPACE_RATIO 3044 0.74 0.13 1.01 138 XM_H_Long_From02 2951 1.03 1.15 0.98 139 TooManyTo_005 2945 0.80 0.40 0.98 140 RELAYCOUNTRY_CA 2926 2.29 5.19 0.97 141 XM_UB50 2859 1.47 2.62 0.95 142 DKIM_ADSP_CUSTOM_MED 2823 0.93 0.90 0.94 143 TR_XM_DK_SendGrid 2792 0.91 0.86 0.93 144 TR_XM_Base64_M1 2714 1.00 1.23 0.90 145 FROM_GOV_DKIM_AU 2694 0.70 0.26 0.89 146 XMGappySubj_02 2661 0.62 0.05 0.88 147 XMBrknScrpt_02 2643 1.12 1.67 0.88 148 T_FILL_THIS_FORM_SHORT 2590 1.09 1.59 0.86 149 XM_B_COPY_HTML 2544 1.04 1.48 0.84 150 T_XMDrugObfuBody_00 2536 1.28 2.25 0.84 151 HTML_IMAGE_ONLY_32 2436 0.62 0.19 0.81 152 SpammyFromTLD_01 2366 1.03 1.57 0.79 153 HTTPS_HTTP_MISMATCH 2344 0.92 1.23 0.78 154 XMSubMetaI_00 2264 0.76 0.79 0.75 155 XMGenDplmaNmb 2254 0.97 1.47 0.75 156 RELAYCOUNTRY_AU 2242 1.40 2.84 0.74 157 XMBody_95 2120 0.52 0.12 0.70 158 T_OBFU_PDF_ATTACH 2063 0.58 0.34 0.68 159 TR_MetaPhish_Combo_01 2032 0.70 0.77 0.67 160 CHARSET_FARAWAY_HEADER 2019 0.48 0.05 0.67 161 XMLngstWrd_00 2010 0.55 0.30 0.67 162 URI_TRY_3LD 2007 0.76 0.96 0.67 163 XMBdyGiftCard01 1959 0.78 1.06 0.65 164 TVD_RCVD_IP 1946 0.69 0.78 0.65 165 RCVD_IN_PBL 1936 0.98 1.72 0.64 166 XM_B_FormFill 1902 0.44 0.02 0.63 167 RCVD_IN_BL_SPAMCOP_NET 1875 3.60 10.15 0.62 168 XM_H_PHPMailer 1839 0.63 0.68 0.61 169 XMPhish30 1820 0.89 1.53 0.60 170 SpammyFromTLD_02 1811 1.00 1.87 0.60 171 FORGED_GMAIL_RCVD 1793 0.60 0.61 0.60 172 T_TVD_MIME_NO_HEADERS 1765 0.41 0.04 0.59 173 NML_ADSP_CUSTOM_MED 1749 0.62 0.72 0.58 174 XM_B_DNDMA 1643 0.76 1.24 0.55 175 XMSubMetaSxObfu_03 1633 0.67 0.96 0.54 176 T_MANY_PILL_PRICE 1604 0.37 0.00 0.53 177 MPART_ALT_DIFF_COUNT 1598 0.63 0.85 0.53 178 XMSlimDrugH 1582 0.63 0.87 0.53 179 MISSING_HEADERS 1573 0.51 0.49 0.52 180 XM_B_SpammyWords4 1568 1.12 2.45 0.52 181 T_Symld_Words_02 1547 0.65 0.95 0.51 182 RELAYCOUNTRY_GB 1525 0.62 0.87 0.51 183 PLING_QUERY 1495 0.64 0.95 0.50 184 T_XMHurry_00 1485 1.05 2.29 0.49 185 THIS_AD 1438 0.63 0.98 0.48 186 HTML_TAG_BALANCE_BODY 1393 0.62 0.97 0.46 187 HTML_FONT_FACE_BAD 1381 0.50 0.58 0.46 188 TM2_M_BODY_EMPTY 1373 0.33 0.05 0.46 189 XMBody_17 1359 1.02 2.26 0.45 190 XMMoneyMeta_00 1325 0.64 1.09 0.44 191 TM2_M_OBFU_COMMENT 1300 0.66 1.16 0.43 192 TO_NO_BRKTS_HTML_ONLY 1292 0.38 0.28 0.43 193 LongTLD 1279 0.82 1.69 0.42 194 XM_URI_RBL 1262 1.22 2.98 0.42 195 USER_IN_WELCOMELIST 1253 0.29 0.00 0.42 196 USER_IN_WHITELIST 1253 0.29 0.00 0.42 197 XM_ProductURIs 1232 0.62 1.09 0.41 198 HTML_IMAGE_ONLY_20 1211 0.41 0.42 0.40 199 MSGID_FROM_MTA_HEADER 1211 0.32 0.13 0.40 200 FROM_GOV_SPOOF 1203 0.32 0.15 0.40 ----------------------------------------------------------------------