Email: 447045 Autolearn: 0 AvgScore: 4.53 AvgScanTime: 1.32 sec Spam: 138042 Autolearn: 0 AvgScore: 14.74 AvgScanTime: 1.44 sec Ham: 309003 Autolearn: 0 AvgScore: -0.04 AvgScanTime: 1.27 sec Time Spent Running SA: 163.92 hours Time Spent Processing Spam: 55.30 hours Time Spent Processing Ham: 108.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130908 89.44 94.83 87.02 2 DKIM_SIGNED 123729 80.25 89.63 76.06 3 XM_DK_Pass 118016 77.82 85.49 74.39 4 DKIM_VALID 116471 76.63 84.37 73.17 5 RELAYCOUNTRY_US 115974 82.55 84.01 81.90 6 XM_B_Unicode 115911 73.82 83.97 69.29 7 DCC_CHECK 104812 50.03 75.93 38.46 8 XMListUnsubscribeExists 96681 54.62 70.04 47.74 9 XM_B_SpammyWords 96172 50.93 69.67 42.56 10 DKIM_VALID_AU 91745 60.88 66.46 58.39 11 XM_B_Unicode3 69536 43.10 50.37 39.86 12 LOC_TINY_FONT_1 67460 32.92 48.87 25.79 13 BAYES_50 55609 53.28 40.28 59.09 14 XM_DK_Undo_02 54185 15.59 39.25 5.02 15 XM_B_SpammyWords2 54080 23.84 39.18 16.98 16 RCVD_IN_MSPIKE_H2 52951 36.12 38.36 35.12 17 HTML_FONT_LOW_CONTRAST 51128 29.25 37.04 25.77 18 FVGT_m_MULTI_ODD 45755 28.08 33.15 25.82 19 T_KAM_HTML_FONT_INVALID 44010 24.45 31.88 21.13 20 BAYES_99 42561 11.77 30.83 3.25 21 DKIM_VALID_EF 40861 30.45 29.60 30.83 22 MIME_HTML_ONLY 39438 22.59 28.57 19.92 23 TR_XM_DKIM_Undo 37953 9.73 27.49 1.80 24 XMSubLong 33613 24.13 24.35 24.03 25 BAYES_999 32559 8.93 23.59 2.38 26 TR_DCC_Bayes_99 31642 7.88 22.92 1.16 27 DCC_CHECK_NEGATIVE 30820 49.40 22.33 61.49 28 XM_Multi_Part_URI 29619 15.70 21.46 13.13 29 T_TM2_M_HEADER_IN_MSG 29501 28.47 21.37 31.64 30 TR_XM_DK_Unsub 28856 15.57 20.90 13.19 31 UNPARSEABLE_RELAY 26026 14.17 18.85 12.08 32 XM_B_Unsub 24357 11.77 17.64 9.15 33 TR_XM_BayesUnsub 23588 9.86 17.09 6.64 34 TR_MAX_INTL_RELAY 21566 8.55 15.62 5.39 35 RELAYCOUNTRY_META 20895 7.34 15.14 3.86 36 XM_B_SpammyWords3 20430 7.43 14.80 4.13 37 LOTS_OF_MONEY 17105 8.03 12.39 6.08 38 TR_XM_SpammyWords4 15525 6.26 11.25 4.03 39 TR_XM_SpammyWords2 14803 3.58 10.72 0.39 40 TR_XM_SpammyRelay 14600 4.42 10.58 1.67 41 BOTNET_IPINHOSTNAME 14294 5.37 10.35 3.14 42 FSL_BULK_SIG 13842 7.90 10.03 6.95 43 XM_Evil_Numbers_Gen 13171 8.65 9.54 8.24 44 RCVD_IN_BL_SPAMCOP_NET 12885 3.48 9.33 0.86 45 BAYES_80 12877 5.15 9.33 3.29 46 TR_XM_UnparsRelay 12410 3.87 8.99 1.58 47 XM_Body_Dirty_Words 12243 4.34 8.87 2.32 48 BOTNET 11821 3.70 8.56 1.52 49 BAYES_60 11435 8.39 8.28 8.44 50 XMSubMetaSx_00 11051 5.95 8.01 5.02 51 LotsOfNums_01 10996 7.85 7.97 7.79 52 XM_B_Phish_Phrases 10363 5.60 7.51 4.75 53 TR_XM_SPAMCOP 10203 2.53 7.39 0.36 54 HTML_IMAGE_RATIO_02 9082 5.07 6.58 4.39 55 MPART_ALT_DIFF 8827 4.79 6.39 4.07 56 UNTRUSTED_Relay 8379 2.95 6.07 1.56 57 XM_B_PhoneNumber 8064 9.06 5.84 10.50 58 XM_UncommonTLD01 8044 4.92 5.83 4.51 59 BAYES_95 7729 3.18 5.60 2.10 60 XM_B_Investor 7723 2.86 5.59 1.63 61 XM_H_Long_From01 7571 5.35 5.48 5.29 62 XMSexyCombo_05 7518 2.73 5.45 1.52 63 RCVD_IN_VALIDITY_RPBL 7335 1.72 5.31 0.12 64 DKIM_INVALID 7258 3.62 5.26 2.89 65 HTML_IMAGE_RATIO_04 7167 4.49 5.19 4.18 66 RELAYCOUNTRY_CA 7037 2.25 5.10 0.98 67 XM_H_GMP 6887 5.79 4.99 6.15 68 XMStrtUSub 6496 5.05 4.71 5.21 69 T_XMDrugObfuBody_14 6223 2.96 4.51 2.28 70 HTML_IMAGE_RATIO_06 5892 3.21 4.27 2.74 71 TR_XM_PhishingBody 5724 2.36 4.15 1.56 72 TR_XM_SpammyWords5 5608 2.18 4.06 1.34 73 XM_B_SpammyTLD 5359 2.89 3.88 2.45 74 TM2_M_VERY_LONG_WORD 5321 2.24 3.85 1.52 75 T_XMDrugObfuBody_08 5109 2.23 3.70 1.58 76 XM_SPF_SoftFail 5091 2.24 3.69 1.60 77 RCVD_IN_MSPIKE_H3 5079 5.01 3.68 5.61 78 RCVD_IN_MSPIKE_WL 5079 5.01 3.68 5.61 79 TooManyTo_001 4917 7.67 3.56 9.51 80 MIME_HTML_MOSTLY 4909 2.59 3.56 2.16 81 MIME_HTML_ONLY_MULTI 4762 2.73 3.45 2.41 82 XM_OfRef6 4761 1.85 3.45 1.13 83 XMNumbers 4748 3.17 3.44 3.04 84 XM_URI_RBL 4336 1.21 3.14 0.35 85 XM_CamelCaseFrm001 4200 2.31 3.04 1.99 86 XMDiploma_00 4142 1.94 3.00 1.46 87 XM_B_SpammyWords4 4004 1.29 2.90 0.57 88 MIME_QP_LONG_LINE 4003 4.10 2.90 4.64 89 TM2_M_URI_OPT_OUT 3935 1.99 2.85 1.61 90 XM_UB50 3820 1.51 2.77 0.95 91 RELAYCOUNTRY_AU 3571 1.30 2.59 0.73 92 XM_SendGrid 3528 2.26 2.56 2.13 93 XM_B_Unsub2 3376 1.74 2.45 1.42 94 T_XMHurry_00 3365 1.11 2.44 0.51 95 MAILING_LIST_MULTI 3294 2.90 2.39 3.13 96 T_TooManySym_01 3108 5.33 2.25 6.71 97 DKIM_ADSP_NXDOMAIN 3089 0.93 2.24 0.34 98 RCVD_IN_VALIDITY_SAFE 3049 3.43 2.21 3.97 99 DIET_1 3043 0.90 2.20 0.31 100 NO_DNS_FOR_FROM 3035 0.87 2.20 0.28 101 TR_XM_MaxWHORU 3023 0.83 2.19 0.22 102 FROM_EXCESS_BASE64 3022 1.90 2.19 1.78 103 HTML_IMAGE_RATIO_08 2986 2.45 2.16 2.58 104 XMBody_17 2965 0.94 2.15 0.40 105 XM_B_URI_Unicode 2956 2.07 2.14 2.03 106 HTML_MIME_NO_HTML_TAG 2892 2.52 2.10 2.71 107 SpammyFromTLD_02 2881 0.86 2.09 0.32 108 SUBJ_ALL_CAPS 2851 1.61 2.07 1.40 109 TR_XM_NoHeaderRelay 2847 0.82 2.06 0.26 110 XMStockSpam_06 2517 1.41 1.82 1.23 111 RCVD_IN_VALIDITY_CERTIFIED 2487 2.48 1.80 2.78 112 TR_Symld_Words 2471 1.60 1.79 1.52 113 USER_IN_DEF_DKIM_WL 2464 9.07 1.78 12.32 114 T_XMDrugObfuBody_00 2402 1.11 1.74 0.83 115 TR_XM_INV_DKIM 2399 0.66 1.74 0.17 116 RCVD_IN_ZEN_LASTEXTERNAL 2361 0.53 1.71 0.00 117 SHORTCIRCUIT 2361 0.53 1.71 0.00 118 BAYES_40 2337 4.17 1.69 5.27 119 XM_DK_Undo_01 2273 1.71 1.65 1.73 120 XMPhish30 2219 0.92 1.61 0.61 121 SpammyFromTLD_01 2217 1.20 1.61 1.02 122 ALL_TRUSTED 2193 10.92 1.59 15.09 123 XMGenDplmaNmb 2141 1.08 1.55 0.87 124 URI_HEX 2115 1.30 1.53 1.19 125 LongTLD 2082 0.81 1.51 0.50 126 T_FILL_THIS_FORM_SHORT 2014 1.15 1.46 1.01 127 XMBrknScrpt_02 2010 1.08 1.46 0.92 128 XM_B_COPY_HTML 1992 1.25 1.44 1.17 129 XMHTML_After_End 1979 0.68 1.43 0.34 130 T_REMOTE_IMAGE 1969 2.97 1.43 3.67 131 KHOP_HELO_FCRDNS 1944 1.57 1.41 1.64 132 HTTPS_HTTP_MISMATCH 1914 0.98 1.39 0.79 133 XM_B_SEO 1909 0.62 1.38 0.28 134 URI_NOVOWEL 1830 1.60 1.33 1.72 135 XM_UB99 1811 0.41 1.31 0.01 136 UNICODE_OBFU_ASC 1763 0.40 1.28 0.01 137 RCVD_IN_IADB_LISTED 1732 2.77 1.25 3.45 138 SUSP_UTF8_WORD_SUBJ 1693 0.39 1.23 0.01 139 XMBody_78 1688 0.58 1.22 0.29 140 MIXED_ES 1640 0.38 1.19 0.02 141 TR_XM_SEO4 1626 0.45 1.18 0.13 142 XMReplyNow 1621 0.55 1.17 0.27 143 TR_LOTS_OF_MONEY2 1605 0.51 1.16 0.22 144 T_MONEY_PERCENT 1605 0.51 1.16 0.22 145 TR_XM_PHPDW 1583 0.73 1.15 0.55 146 BAYES_20 1581 3.06 1.15 3.91 147 FUZZY_CREDIT 1575 0.35 1.14 0.00 148 TR_XM_PHPForged 1574 0.73 1.14 0.55 149 FUZZY_APPLE 1572 0.35 1.14 0.00 150 FUZZY_PAYPAL 1571 0.35 1.14 0.00 151 FUZZY_PRIVACY 1571 0.35 1.14 0.00 152 RELAYCOUNTRY_FR 1562 0.52 1.13 0.25 153 TR_XM_FormFill2 1552 0.73 1.12 0.55 154 XMBdyGiftCard01 1548 0.81 1.12 0.67 155 XM_H_Long_From02 1535 0.99 1.11 0.94 156 RCVD_IN_PBL 1515 0.88 1.10 0.78 157 RCVD_IN_IADB_SPF 1507 2.41 1.09 3.00 158 XM_H_PHPOS 1507 0.71 1.09 0.53 159 RCVD_IN_PSBL 1495 0.53 1.08 0.28 160 HTML_TAG_BALANCE_BODY 1493 0.74 1.08 0.59 161 TR_XM_Base64_M1 1480 0.87 1.07 0.79 162 XMSlimDrugH 1471 0.73 1.07 0.58 163 TR_XM_InvalidRelay 1470 0.34 1.06 0.01 164 XM_H_Undi_Recip 1431 0.50 1.04 0.25 165 DKIM_ADSP_CUSTOM_MED 1430 1.01 1.04 1.00 166 RCVD_IN_IADB_DK 1424 2.08 1.03 2.55 167 XM_B_DNDMA 1414 0.60 1.02 0.41 168 RCVD_IN_IADB_SENDERID 1409 2.16 1.02 2.67 169 XM_ProductURIs 1389 0.96 1.01 0.93 170 TR_MetaPhish_Combo_01 1346 0.95 0.98 0.94 171 XMPhish14 1344 0.57 0.97 0.39 172 SUSP_UTF8_WORD_COMBO 1337 0.33 0.97 0.04 173 XMSubMetaI_00 1331 0.74 0.96 0.64 174 XM_OfRef7 1330 0.45 0.96 0.22 175 XMGppyBdWords 1324 0.39 0.96 0.14 176 TR_XM_RelayPhish 1315 0.35 0.95 0.09 177 URI_TRY_3LD 1311 0.61 0.95 0.46 178 HK_RANDOM_REPLYTO 1297 0.35 0.94 0.09 179 BOTNET_NORDNS 1295 0.30 0.94 0.01 180 SHOPIFY_IMG_NOT_RCVD_SFY 1292 0.44 0.94 0.21 181 XM_DIRTYINTL 1276 0.34 0.92 0.08 182 RCVD_IN_SORBS_DUL 1274 0.32 0.92 0.05 183 DATE_IN_PAST_03_06 1267 0.45 0.92 0.23 184 RELAYCOUNTRY_GB 1264 0.63 0.92 0.50 185 XM_HighProb1 1259 0.28 0.91 0.00 186 T_STY_INVIS_DIRECT 1255 0.54 0.91 0.37 187 TR_XM_DK_SendGrid 1253 1.00 0.91 1.05 188 MPART_ALT_DIFF_COUNT 1252 0.64 0.91 0.51 189 T_Symld_Words_02 1242 0.64 0.90 0.52 190 MIME_CHARSET_FARAWAY 1226 0.52 0.89 0.36 191 XM_UB999 1223 0.28 0.89 0.00 192 TM2_M_OBFU_COMMENT 1206 0.45 0.87 0.25 193 TR_Caps_n_Bayes_99 1179 0.28 0.85 0.02 194 RDNS_DYNAMIC 1177 0.52 0.85 0.37 195 PLING_QUERY 1172 0.60 0.85 0.49 196 XM_B_REG_HTML 1168 0.40 0.85 0.20 197 XM_B_Phish66 1142 0.49 0.83 0.34 198 PDS_RDNS_DYNAMIC_FP 1138 0.40 0.82 0.22 199 NML_ADSP_CUSTOM_MED 1129 0.72 0.82 0.68 200 XMSexyCombo_01 1124 0.38 0.81 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 268909 89.44 94.83 87.02 2 RELAYCOUNTRY_US 253074 82.55 84.01 81.90 3 DKIM_SIGNED 235030 80.25 89.63 76.06 4 XM_DK_Pass 229865 77.82 85.49 74.39 5 DKIM_VALID 226096 76.63 84.37 73.17 6 XM_B_Unicode 214097 73.82 83.97 69.29 7 DCC_CHECK_NEGATIVE 190014 49.40 22.33 61.49 8 BAYES_50 182586 53.28 40.28 59.09 9 DKIM_VALID_AU 180424 60.88 66.46 58.39 10 XMListUnsubscribeExists 147512 54.62 70.04 47.74 11 XM_B_SpammyWords 131513 50.93 69.67 42.56 12 XM_B_Unicode3 123158 43.10 50.37 39.86 13 DCC_CHECK 118829 50.03 75.93 38.46 14 RCVD_IN_MSPIKE_H2 108523 36.12 38.36 35.12 15 T_TM2_M_HEADER_IN_MSG 97771 28.47 21.37 31.64 16 DKIM_VALID_EF 95270 30.45 29.60 30.83 17 FVGT_m_MULTI_ODD 79792 28.08 33.15 25.82 18 LOC_TINY_FONT_1 79707 32.92 48.87 25.79 19 HTML_FONT_LOW_CONTRAST 79626 29.25 37.04 25.77 20 XMSubLong 74241 24.13 24.35 24.03 21 T_KAM_HTML_FONT_INVALID 65295 24.45 31.88 21.13 22 MIME_HTML_ONLY 61556 22.59 28.57 19.92 23 XM_B_SpammyWords2 52482 23.84 39.18 16.98 24 ALL_TRUSTED 46622 10.92 1.59 15.09 25 TR_XM_DK_Unsub 40768 15.57 20.90 13.19 26 XM_Multi_Part_URI 40557 15.70 21.46 13.13 27 USER_IN_DEF_DKIM_WL 38078 9.07 1.78 12.32 28 BAYES_00 37726 8.60 0.52 12.21 29 UNPARSEABLE_RELAY 37321 14.17 18.85 12.08 30 XM_B_PhoneNumber 32456 9.06 5.84 10.50 31 TooManyTo_001 29379 7.67 3.56 9.51 32 XM_B_Unsub 28270 11.77 17.64 9.15 33 BAYES_60 26085 8.39 8.28 8.44 34 XM_Evil_Numbers_Gen 25477 8.65 9.54 8.24 35 LotsOfNums_01 24085 7.85 7.97 7.79 36 TR_XM_DK_Bayes 23471 5.38 0.41 7.60 37 TR_XM_DK_Bayes1 23071 5.28 0.40 7.47 38 IN_ZIMBRA_NJ_WHITELIST 21514 4.84 0.10 6.96 39 FSL_BULK_SIG 21487 7.90 10.03 6.95 40 XM_DKIMWhitelistDomains 21078 4.89 0.57 6.82 41 T_TooManySym_01 20725 5.33 2.25 6.71 42 TR_XM_BayesUnsub 20509 9.86 17.09 6.64 43 TR_XM_DK_Bayes2 19678 4.50 0.31 6.37 44 XM_H_GMP 19007 5.79 4.99 6.15 45 LOTS_OF_MONEY 18782 8.03 12.39 6.08 46 RCVD_IN_MSPIKE_H3 17320 5.01 3.68 5.61 47 RCVD_IN_MSPIKE_WL 17320 5.01 3.68 5.61 48 TR_MAX_INTL_RELAY 16661 8.55 15.62 5.39 49 XM_H_Long_From01 16359 5.35 5.48 5.29 50 BAYES_40 16291 4.17 1.69 5.27 51 XMStrtUSub 16088 5.05 4.71 5.21 52 XMSubMetaSx_00 15527 5.95 8.01 5.02 53 XM_DK_Undo_02 15517 15.59 39.25 5.02 54 XM_PDF 14910 3.55 0.70 4.83 55 XM_B_Phish_Phrases 14676 5.60 7.51 4.75 56 MIME_QP_LONG_LINE 14338 4.10 2.90 4.64 57 XM_UncommonTLD01 13949 4.92 5.83 4.51 58 HTML_IMAGE_RATIO_02 13566 5.07 6.58 4.39 59 HTML_IMAGE_RATIO_04 12921 4.49 5.19 4.18 60 XM_B_SpammyWords3 12772 7.43 14.80 4.13 61 MPART_ALT_DIFF 12568 4.79 6.39 4.07 62 TR_XM_SpammyWords4 12463 6.26 11.25 4.03 63 RCVD_IN_VALIDITY_SAFE 12280 3.43 2.21 3.97 64 BAYES_20 12095 3.06 1.15 3.91 65 RELAYCOUNTRY_META 11931 7.34 15.14 3.86 66 T_REMOTE_IMAGE 11327 2.97 1.43 3.67 67 TooManyTo_002 10910 2.65 0.69 3.53 68 T_TooManySym_02 10663 2.57 0.61 3.45 69 RCVD_IN_IADB_LISTED 10646 2.77 1.25 3.45 70 BAYES_80 10157 5.15 9.33 3.29 71 BAYES_99 10048 11.77 30.83 3.25 72 ANY_BOUNCE_MESSAGE 9896 2.44 0.74 3.20 73 BOUNCE_MESSAGE 9895 2.44 0.74 3.20 74 BOTNET_IPINHOSTNAME 9694 5.37 10.35 3.14 75 MAILING_LIST_MULTI 9685 2.90 2.39 3.13 76 XMNumbers 9401 3.17 3.44 3.04 77 RCVD_IN_IADB_SPF 9278 2.41 1.09 3.00 78 DKIM_INVALID 8934 3.62 5.26 2.89 79 RCVD_IN_VALIDITY_CERTIFIED 8584 2.48 1.80 2.78 80 HTML_IMAGE_RATIO_06 8452 3.21 4.27 2.74 81 HTML_MIME_NO_HTML_TAG 8388 2.52 2.10 2.71 82 RCVD_IN_IADB_SENDERID 8248 2.16 1.02 2.67 83 HTML_IMAGE_RATIO_08 7975 2.45 2.16 2.58 84 RCVD_IN_IADB_DK 7890 2.08 1.03 2.55 85 INVALID_MSGID 7755 1.78 0.15 2.51 86 XM_B_SpammyTLD 7569 2.89 3.88 2.45 87 RCVD_IN_IADB_VOUCHED 7553 1.90 0.67 2.44 88 BAYES_05 7512 1.87 0.60 2.43 89 MIME_HTML_ONLY_MULTI 7432 2.73 3.45 2.41 90 BAYES_999 7348 8.93 23.59 2.38 91 XM_Body_Dirty_Words 7157 4.34 8.87 2.32 92 T_XMDrugObfuBody_14 7031 2.96 4.51 2.28 93 MIME_HTML_MOSTLY 6689 2.59 3.56 2.16 94 XM_SendGrid 6581 2.26 2.56 2.13 95 BAYES_95 6498 3.18 5.60 2.10 96 XM_B_URI_Unicode 6276 2.07 2.14 2.03 97 TO_MALFORMED 6221 1.39 0.01 2.01 98 XM_CamelCaseFrm001 6138 2.31 3.04 1.99 99 TooManyTo_003 5729 1.47 0.63 1.85 100 TR_XM_DKIM_Undo 5549 9.73 27.49 1.80 101 FROM_EXCESS_BASE64 5494 1.90 2.19 1.78 102 XM_DK_Undo_01 5359 1.71 1.65 1.73 103 RCVD_IN_IADB_OPTIN 5314 1.31 0.40 1.72 104 URI_NOVOWEL 5305 1.60 1.33 1.72 105 TR_XM_SpammyRelay 5172 4.42 10.58 1.67 106 KHOP_HELO_FCRDNS 5055 1.57 1.41 1.64 107 XM_B_Investor 5052 2.86 5.59 1.63 108 TM2_M_URI_OPT_OUT 4961 1.99 2.85 1.61 109 XM_SPF_SoftFail 4930 2.24 3.69 1.60 110 TR_XM_UnparsRelay 4876 3.87 8.99 1.58 111 T_XMDrugObfuBody_08 4868 2.23 3.70 1.58 112 TR_XM_PhishingBody 4826 2.36 4.15 1.56 113 UNTRUSTED_Relay 4824 2.95 6.07 1.56 114 TM2_M_VERY_LONG_WORD 4707 2.24 3.85 1.52 115 BOTNET 4700 3.70 8.56 1.52 116 XMSexyCombo_05 4695 2.73 5.45 1.52 117 TR_Symld_Words 4687 1.60 1.79 1.52 118 IN_HORDE_ADDRESS_BOOK 4632 1.07 0.12 1.50 119 XMDiploma_00 4524 1.94 3.00 1.46 120 XM_B_Unsub2 4388 1.74 2.45 1.42 121 HELO_NODOT 4356 1.03 0.19 1.41 122 HELO_NO_DOMAIN 4352 1.03 0.19 1.41 123 SUBJ_ALL_CAPS 4331 1.61 2.07 1.40 124 TooManyTo_004 4276 1.14 0.59 1.38 125 TR_XM_SpammyWords5 4140 2.18 4.06 1.34 126 XMCapTrack 4043 1.08 0.56 1.31 127 T_TooManySym_03 3992 0.95 0.19 1.29 128 XM_GoogleGroups 3880 1.09 0.73 1.26 129 XMStockSpam_06 3788 1.41 1.82 1.23 130 URI_HEX 3688 1.30 1.53 1.19 131 XM_B_COPY_HTML 3617 1.25 1.44 1.17 132 TR_DCC_Bayes_99 3573 7.88 22.92 1.16 133 XMGappySubj_01 3571 0.86 0.18 1.16 134 TooManyTo_005 3564 0.97 0.55 1.15 135 XM_OfRef6 3498 1.85 3.45 1.13 136 TR_XM_DK_SendGrid 3234 1.00 0.91 1.05 137 TVD_SPACE_RATIO 3187 0.76 0.14 1.03 138 SpammyFromTLD_01 3151 1.20 1.61 1.02 139 T_FILL_THIS_FORM_SHORT 3107 1.15 1.46 1.01 140 XMNoVowels 3103 0.92 0.72 1.00 141 DKIM_ADSP_CUSTOM_MED 3075 1.01 1.04 1.00 142 XM_ShortIntro_01 3064 0.85 0.53 0.99 143 RELAYCOUNTRY_CA 3040 2.25 5.10 0.98 144 XM_UB50 2935 1.51 2.77 0.95 145 TR_MetaPhish_Combo_01 2905 0.95 0.98 0.94 146 XM_H_Long_From02 2902 0.99 1.11 0.94 147 XM_ProductURIs 2885 0.96 1.01 0.93 148 HTML_IMAGE_ONLY_32 2848 0.70 0.20 0.92 149 XMBrknScrpt_02 2835 1.08 1.46 0.92 150 XMGenDplmaNmb 2683 1.08 1.55 0.87 151 RCVD_IN_BL_SPAMCOP_NET 2668 3.48 9.33 0.86 152 XM_B_FormFill 2605 0.59 0.01 0.84 153 T_XMDrugObfuBody_00 2575 1.11 1.74 0.83 154 HTTPS_HTTP_MISMATCH 2447 0.98 1.39 0.79 155 TR_XM_Base64_M1 2426 0.87 1.07 0.79 156 RCVD_IN_PBL 2408 0.88 1.10 0.78 157 XMGappySubj_02 2373 0.54 0.04 0.77 158 RELAYCOUNTRY_AU 2256 1.30 2.59 0.73 159 XM_B_Crypto 2238 0.65 0.47 0.72 160 XM_H_PHPMailer 2104 0.66 0.61 0.68 161 NML_ADSP_CUSTOM_MED 2087 0.72 0.82 0.68 162 XMBdyGiftCard01 2067 0.81 1.12 0.67 163 XMLngstWrd_00 2067 0.58 0.38 0.67 164 TVD_RCVD_IP 2017 0.66 0.67 0.65 165 XMBody_95 1991 0.49 0.15 0.64 166 XMSubMetaI_00 1975 0.74 0.96 0.64 167 FORGED_GMAIL_RCVD 1930 0.64 0.68 0.62 168 XMPhish30 1885 0.92 1.61 0.61 169 MISSING_HEADERS 1880 0.58 0.52 0.61 170 FROM_GOV_DKIM_AU 1863 0.45 0.12 0.60 171 HTML_TAG_BALANCE_BODY 1823 0.74 1.08 0.59 172 XMSlimDrugH 1797 0.73 1.07 0.58 173 TO_NO_BRKTS_HTML_ONLY 1785 0.46 0.20 0.58 174 XM_B_SpammyWords4 1771 1.29 2.90 0.57 175 TR_XM_FormFill2 1699 0.73 1.12 0.55 176 TR_XM_PHPDW 1697 0.73 1.15 0.55 177 TR_XM_PHPForged 1685 0.73 1.14 0.55 178 XM_H_PHPOS 1647 0.71 1.09 0.53 179 MSGID_FROM_MTA_HEADER 1644 0.40 0.11 0.53 180 FILL_THIS_FORM 1625 0.48 0.38 0.53 181 T_Symld_Words_02 1600 0.64 0.90 0.52 182 MPART_ALT_DIFF_COUNT 1587 0.64 0.91 0.51 183 T_XMHurry_00 1577 1.11 2.44 0.51 184 T_TVD_MIME_NO_HEADERS 1573 0.36 0.04 0.51 185 XMMoneyMeta_00 1558 0.60 0.81 0.50 186 FROM_GOV_SPOOF 1555 0.40 0.18 0.50 187 LongTLD 1549 0.81 1.51 0.50 188 RELAYCOUNTRY_GB 1544 0.63 0.92 0.50 189 T_OBFU_PDF_ATTACH 1504 0.40 0.21 0.49 190 PLING_QUERY 1503 0.60 0.85 0.49 191 XMLngstWrd_01 1439 0.42 0.31 0.47 192 XMDateMe_00 1439 0.41 0.29 0.47 193 URI_TRY_3LD 1430 0.61 0.95 0.46 194 TM2_M_BODY_EMPTY 1370 0.33 0.08 0.44 195 USER_IN_WHITELIST 1305 0.29 0.00 0.42 196 USER_IN_WELCOMELIST 1305 0.29 0.00 0.42 197 SHORT_HELO_AND_INLINE_IMAGE 1264 0.29 0.03 0.41 198 XM_B_DNDMA 1257 0.60 1.02 0.41 199 HTML_IMAGE_ONLY_20 1256 0.40 0.38 0.41 200 XMBody_17 1230 0.94 2.15 0.40 ----------------------------------------------------------------------