Email: 476572 Autolearn: 0 AvgScore: 4.77 AvgScanTime: 1.34 sec Spam: 152429 Autolearn: 0 AvgScore: 14.57 AvgScanTime: 1.47 sec Ham: 324143 Autolearn: 0 AvgScore: 0.16 AvgScanTime: 1.28 sec Time Spent Running SA: 177.83 hours Time Spent Processing Spam: 62.26 hours Time Spent Processing Ham: 115.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144403 90.04 94.73 87.84 2 DKIM_SIGNED 134952 80.01 88.53 76.01 3 XM_DK_Pass 129124 77.76 84.71 74.49 4 RELAYCOUNTRY_US 128814 82.90 84.51 82.14 5 DKIM_VALID 127615 76.69 83.72 73.38 6 XM_B_Unicode 126793 74.59 83.18 70.54 7 DCC_CHECK 115789 51.25 75.96 39.63 8 XMListUnsubscribeExists 106406 55.90 69.81 49.35 9 XM_B_SpammyWords 104306 52.31 68.43 44.73 10 DKIM_VALID_AU 100963 60.90 66.24 58.40 11 XM_B_Unicode3 78956 45.50 51.80 42.54 12 LOC_TINY_FONT_1 76346 35.21 50.09 28.21 13 BAYES_50 62189 54.15 40.80 60.42 14 XM_B_SpammyWords2 61442 25.97 40.31 19.23 15 RCVD_IN_MSPIKE_H2 59226 35.91 38.85 34.53 16 HTML_FONT_LOW_CONTRAST 58129 30.79 38.14 27.33 17 XM_DK_Undo_02 58022 15.17 38.06 4.40 18 FVGT_m_MULTI_ODD 52453 27.96 34.41 24.92 19 T_KAM_HTML_FONT_INVALID 50619 25.24 33.21 21.49 20 BAYES_99 45095 11.51 29.58 3.02 21 DKIM_VALID_EF 44554 28.89 29.23 28.74 22 MIME_HTML_ONLY 41956 22.54 27.52 20.19 23 TR_XM_DKIM_Undo 40411 9.80 26.51 1.94 24 XMSubLong 38070 23.72 24.98 23.13 25 BAYES_999 34372 8.73 22.55 2.23 26 T_TM2_M_HEADER_IN_MSG 34108 28.31 22.38 31.10 27 DCC_CHECK_NEGATIVE 34036 48.16 22.33 60.31 28 XM_Multi_Part_URI 33576 15.74 22.03 12.79 29 TR_DCC_Bayes_99 33364 7.81 21.89 1.20 30 TR_XM_DK_Unsub 31113 14.96 20.41 12.39 31 UNPARSEABLE_RELAY 27885 13.59 18.29 11.38 32 XM_B_Unsub 25568 11.54 16.77 9.09 33 TR_XM_BayesUnsub 24852 9.78 16.30 6.71 34 TR_MAX_INTL_RELAY 22956 8.52 15.06 5.45 35 XM_B_SpammyWords3 22206 7.75 14.57 4.54 36 RELAYCOUNTRY_META 21516 7.41 14.12 4.26 37 LOTS_OF_MONEY 17967 7.87 11.79 6.03 38 TR_XM_SpammyWords2 17095 3.88 11.22 0.43 39 BOTNET_IPINHOSTNAME 16120 5.52 10.58 3.14 40 TR_XM_SpammyWords4 15944 6.12 10.46 4.09 41 FSL_BULK_SIG 15674 8.20 10.28 7.22 42 XM_Body_Dirty_Words 15169 5.13 9.95 2.87 43 TR_XM_SpammyRelay 14826 4.68 9.73 2.30 44 BAYES_80 14403 5.27 9.45 3.31 45 BAYES_60 13578 8.53 8.91 8.36 46 BOTNET 13546 3.84 8.89 1.47 47 TR_XM_UnparsRelay 13229 3.89 8.68 1.63 48 RCVD_IN_BL_SPAMCOP_NET 13121 3.11 8.61 0.53 49 XM_Evil_Numbers_Gen 12624 9.49 8.28 10.06 50 LotsOfNums_01 12184 8.45 7.99 8.66 51 XMSubMetaSx_00 11917 5.49 7.82 4.40 52 TR_XM_SPAMCOP 11599 2.66 7.61 0.33 53 XM_B_Phish_Phrases 10922 6.10 7.17 5.61 54 HTML_IMAGE_RATIO_02 9835 5.43 6.45 4.95 55 MPART_ALT_DIFF 9643 5.13 6.33 4.57 56 XM_UncommonTLD01 9601 4.95 6.30 4.31 57 UNTRUSTED_Relay 9547 3.13 6.26 1.66 58 XM_B_PhoneNumber 8904 8.90 5.84 10.34 59 XM_H_Long_From01 8711 5.64 5.71 5.60 60 BAYES_95 8128 3.16 5.33 2.14 61 HTML_IMAGE_RATIO_04 7702 5.06 5.05 5.06 62 XM_H_GMP 7659 5.40 5.02 5.57 63 TR_XM_PhishingBody 7576 2.87 4.97 1.88 64 DKIM_INVALID 7337 3.33 4.81 2.63 65 XM_B_Investor 7321 2.63 4.80 1.61 66 XMSexyCombo_05 6955 2.74 4.56 1.88 67 RELAYCOUNTRY_CA 6935 2.35 4.55 1.31 68 XM_B_SpammyTLD 6542 3.32 4.29 2.86 69 RCVD_IN_VALIDITY_RPBL 6379 1.41 4.18 0.11 70 XMStrtUSub 6223 4.37 4.08 4.50 71 XM_OfRef6 5979 2.01 3.92 1.11 72 XM_SPF_SoftFail 5977 2.22 3.92 1.43 73 TM2_M_VERY_LONG_WORD 5968 3.20 3.92 2.86 74 T_XMDrugObfuBody_14 5925 2.33 3.89 1.60 75 RCVD_IN_MSPIKE_WL 5903 4.87 3.87 5.34 76 RCVD_IN_MSPIKE_H3 5903 4.87 3.87 5.34 77 T_XMDrugObfuBody_08 5719 2.33 3.75 1.66 78 TooManyTo_001 5589 6.99 3.67 8.56 79 HTML_IMAGE_RATIO_06 5477 3.74 3.59 3.81 80 TR_XM_SpammyWords5 5224 2.02 3.43 1.35 81 XMDiploma_00 5180 2.19 3.40 1.63 82 TM2_M_URI_OPT_OUT 4972 2.15 3.26 1.62 83 MIME_HTML_ONLY_MULTI 4965 2.93 3.26 2.78 84 XMNumbers 4889 3.08 3.21 3.02 85 MIME_HTML_MOSTLY 4804 2.47 3.15 2.15 86 XM_CamelCaseFrm001 4710 2.73 3.09 2.56 87 XM_UB50 4460 1.61 2.93 0.99 88 HTML_IMAGE_RATIO_08 4289 2.26 2.81 2.00 89 RELAYCOUNTRY_AU 4218 1.43 2.77 0.80 90 MIME_QP_LONG_LINE 4186 4.64 2.75 5.54 91 T_XMHurry_00 4079 1.28 2.68 0.62 92 XM_URI_RBL 3872 1.09 2.54 0.41 93 DKIM_ADSP_NXDOMAIN 3869 1.02 2.54 0.31 94 XM_B_SpammyWords4 3708 1.18 2.43 0.59 95 NO_DNS_FOR_FROM 3579 0.94 2.35 0.27 96 TR_XM_MaxWHORU 3563 0.89 2.34 0.20 97 XMPhish30 3479 1.12 2.28 0.57 98 FROM_EXCESS_BASE64 3452 1.95 2.26 1.80 99 XM_B_URI_Unicode 3439 1.98 2.26 1.85 100 MAILING_LIST_MULTI 3333 2.78 2.19 3.06 101 SpammyFromTLD_02 3266 1.03 2.14 0.50 102 T_TooManySym_01 3265 4.65 2.14 5.83 103 XM_SendGrid 3263 1.67 2.14 1.45 104 XM_B_Unsub2 3259 1.62 2.14 1.37 105 TR_XM_NoHeaderRelay 3176 0.80 2.08 0.20 106 XM_DK_Undo_01 3033 1.82 1.99 1.74 107 XMBody_17 3009 0.87 1.97 0.34 108 XMStockSpam_06 2998 1.50 1.97 1.28 109 HTML_MIME_NO_HTML_TAG 2994 2.48 1.96 2.72 110 XMSexyCombo_01 2926 0.74 1.92 0.19 111 USER_IN_DEF_DKIM_WL 2923 9.39 1.92 12.90 112 T_REMOTE_IMAGE 2890 3.13 1.90 3.71 113 RCVD_IN_VALIDITY_SAFE 2827 3.41 1.85 4.14 114 XM_H_Long_From02 2600 1.22 1.71 0.99 115 URI_HEX 2590 1.46 1.70 1.34 116 XM_B_SEO 2584 0.74 1.70 0.29 117 RCVD_IN_ZEN_LASTEXTERNAL 2559 0.54 1.68 0.00 118 SHORTCIRCUIT 2559 0.54 1.68 0.00 119 TR_XM_INV_DKIM 2547 0.65 1.67 0.17 120 SpammyFromTLD_01 2489 1.19 1.63 0.98 121 SUBJ_ALL_CAPS 2483 1.51 1.63 1.46 122 BAYES_40 2461 4.00 1.61 5.13 123 XMGenDplmaNmb 2456 1.13 1.61 0.90 124 ALL_TRUSTED 2384 10.27 1.56 14.36 125 T_XMDrugObfuBody_00 2370 0.97 1.55 0.69 126 NORDNS_LOW_CONTRAST 2346 0.53 1.54 0.05 127 LongTLD 2233 0.78 1.46 0.46 128 T_FILL_THIS_FORM_SHORT 2228 1.11 1.46 0.95 129 XM_B_COPY_HTML 2216 1.15 1.45 1.01 130 SUSP_UTF8_WORD_SUBJ 2199 0.47 1.44 0.02 131 KHOP_HELO_FCRDNS 2168 1.92 1.42 2.15 132 XMBody_78 2143 0.70 1.41 0.36 133 XMSubMetaI_00 2107 0.87 1.38 0.63 134 RCVD_IN_IADB_LISTED 2102 3.10 1.38 3.91 135 RCVD_IN_VALIDITY_CERTIFIED 2093 2.55 1.37 3.11 136 XMBrknScrpt_02 2087 1.09 1.37 0.95 137 TR_XM_SEO4 2071 0.51 1.36 0.12 138 URI_NOVOWEL 2006 1.52 1.32 1.61 139 XM_OfRef7 1989 0.58 1.30 0.24 140 TR_XM_PHPDW 1948 0.62 1.28 0.31 141 TR_XM_PHPForged 1923 0.62 1.26 0.31 142 BAYES_20 1907 2.95 1.25 3.75 143 BOTNET_NORDNS 1904 0.41 1.25 0.01 144 TR_XM_FormFill2 1891 0.61 1.24 0.31 145 XMBdyGiftCard01 1880 0.79 1.23 0.59 146 XM_H_PHPOS 1847 0.59 1.21 0.30 147 RCVD_IN_IADB_SPF 1824 2.74 1.20 3.47 148 UNICODE_OBFU_ASC 1821 0.40 1.19 0.03 149 TR_LOTS_OF_MONEY3 1791 0.54 1.17 0.24 150 XM_DIRTYINTL 1758 0.43 1.15 0.10 151 HTTPS_HTTP_MISMATCH 1749 0.93 1.15 0.82 152 TR_XM_Base64_M1 1736 0.93 1.14 0.84 153 DIET_1 1734 0.58 1.14 0.32 154 RCVD_IN_IADB_DK 1730 2.43 1.13 3.03 155 RCVD_IN_IADB_SENDERID 1726 2.47 1.13 3.11 156 DKIM_ADSP_CUSTOM_MED 1684 0.98 1.10 0.92 157 XM_PDF 1683 3.65 1.10 4.85 158 TR_XM_InvalidRelay 1655 0.36 1.09 0.01 159 RCVD_IN_PSBL 1634 0.51 1.07 0.24 160 XMHTML_After_End 1631 0.57 1.07 0.34 161 RELAYCOUNTRY_FR 1602 0.54 1.05 0.30 162 XMReplyNow 1594 0.52 1.05 0.28 163 SHOPIFY_IMG_NOT_RCVD_SFY 1593 0.50 1.05 0.25 164 RCVD_IN_PBL 1586 0.83 1.04 0.74 165 HK_RANDOM_REPLYTO 1578 0.43 1.04 0.15 166 MPART_ALT_DIFF_COUNT 1570 0.76 1.03 0.64 167 STY_INVIS_DIRECT 1546 0.50 1.01 0.26 168 RDNS_DYNAMIC 1532 0.55 1.01 0.34 169 XMPhish14 1531 0.80 1.00 0.70 170 PDS_RDNS_DYNAMIC_FP 1507 0.45 0.99 0.20 171 XMMoneyMeta_00 1507 0.68 0.99 0.54 172 XM_UB99 1505 0.32 0.99 0.00 173 TR_XM_Spammywords 1496 0.55 0.98 0.34 174 XM_S_SpammyWords 1496 0.55 0.98 0.34 175 XM_UB60 1464 0.34 0.96 0.05 176 TR_Symld_Words 1463 1.41 0.96 1.62 177 HTML_SHORT_LINK_IMG_1 1457 0.32 0.96 0.02 178 URI_TRY_3LD 1454 0.68 0.95 0.55 179 XM_H_Undi_Recip 1445 0.46 0.95 0.24 180 XMSubMetaSxObfu_03 1435 0.68 0.94 0.56 181 XM_B_REG_HTML 1430 0.41 0.94 0.15 182 TM2_M_A_HREF_HREF 1412 0.53 0.93 0.34 183 TR_XM_DK_SendGrid 1399 0.93 0.92 0.93 184 HTML_TAG_BALANCE_BODY 1336 0.62 0.88 0.50 185 MIXED_ES 1336 0.29 0.88 0.01 186 XM_B_DNDMA 1308 0.75 0.86 0.70 187 XM_ProductURIs 1307 0.66 0.86 0.57 188 FUZZY_CREDIT 1297 0.28 0.85 0.01 189 XM_B_Phish66 1294 0.47 0.85 0.30 190 FUZZY_PAYPAL 1293 0.28 0.85 0.01 191 TR_Mismatch_TLD_02 1288 0.33 0.84 0.09 192 XM_B_COVIDMETA 1271 0.40 0.83 0.19 193 HTML_FONT_TINY_NORDNS 1263 0.32 0.83 0.08 194 XMSlimDrugH 1262 0.59 0.83 0.48 195 T_Symld_Words_02 1259 0.73 0.83 0.69 196 XMSubMetaSSx_00 1251 0.49 0.82 0.33 197 RCVD_IN_SORBS_DUL 1244 0.29 0.82 0.04 198 NML_ADSP_CUSTOM_MED 1241 0.66 0.81 0.59 199 TooManyTo_002 1230 2.37 0.81 3.10 200 TM2_M_OBFU_COMMENT 1224 0.47 0.80 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 284713 90.04 94.73 87.84 2 RELAYCOUNTRY_US 266259 82.90 84.51 82.14 3 DKIM_SIGNED 246367 80.01 88.53 76.01 4 XM_DK_Pass 241460 77.76 84.71 74.49 5 DKIM_VALID 237849 76.69 83.72 73.38 6 XM_B_Unicode 228661 74.59 83.18 70.54 7 BAYES_50 195855 54.15 40.80 60.42 8 DCC_CHECK_NEGATIVE 195499 48.16 22.33 60.31 9 DKIM_VALID_AU 189290 60.90 66.24 58.40 10 XMListUnsubscribeExists 159975 55.90 69.81 49.35 11 XM_B_SpammyWords 144989 52.31 68.43 44.73 12 XM_B_Unicode3 137880 45.50 51.80 42.54 13 DCC_CHECK 128473 51.25 75.96 39.63 14 RCVD_IN_MSPIKE_H2 111930 35.91 38.85 34.53 15 T_TM2_M_HEADER_IN_MSG 100812 28.31 22.38 31.10 16 DKIM_VALID_EF 93143 28.89 29.23 28.74 17 LOC_TINY_FONT_1 91450 35.21 50.09 28.21 18 HTML_FONT_LOW_CONTRAST 88593 30.79 38.14 27.33 19 FVGT_m_MULTI_ODD 80774 27.96 34.41 24.92 20 XMSubLong 74987 23.72 24.98 23.13 21 T_KAM_HTML_FONT_INVALID 69668 25.24 33.21 21.49 22 MIME_HTML_ONLY 65457 22.54 27.52 20.19 23 XM_B_SpammyWords2 62337 25.97 40.31 19.23 24 ALL_TRUSTED 46559 10.27 1.56 14.36 25 USER_IN_DEF_DKIM_WL 41826 9.39 1.92 12.90 26 XM_Multi_Part_URI 41442 15.74 22.03 12.79 27 TR_XM_DK_Unsub 40160 14.96 20.41 12.39 28 BAYES_00 37610 8.12 0.71 11.60 29 UNPARSEABLE_RELAY 36878 13.59 18.29 11.38 30 XM_B_PhoneNumber 33518 8.90 5.84 10.34 31 XM_Evil_Numbers_Gen 32603 9.49 8.28 10.06 32 XM_B_Unsub 29452 11.54 16.77 9.09 33 LotsOfNums_01 28069 8.45 7.99 8.66 34 TooManyTo_001 27738 6.99 3.67 8.56 35 BAYES_60 27094 8.53 8.91 8.36 36 TR_XM_DK_Bayes 24857 5.40 0.58 7.67 37 TR_XM_DK_Bayes1 24474 5.32 0.57 7.55 38 FSL_BULK_SIG 23402 8.20 10.28 7.22 39 IN_ZIMBRA_NJ_WHITELIST 22531 4.76 0.09 6.95 40 TR_XM_BayesUnsub 21750 9.78 16.30 6.71 41 XM_DKIMWhitelistDomains 21639 4.66 0.38 6.68 42 TR_XM_DK_Bayes2 20797 4.50 0.43 6.42 43 LOTS_OF_MONEY 19560 7.87 11.79 6.03 44 T_TooManySym_01 18910 4.65 2.14 5.83 45 XM_B_Phish_Phrases 18170 6.10 7.17 5.61 46 XM_H_Long_From01 18166 5.64 5.71 5.60 47 XM_H_GMP 18062 5.40 5.02 5.57 48 MIME_QP_LONG_LINE 17946 4.64 2.75 5.54 49 TR_MAX_INTL_RELAY 17668 8.52 15.06 5.45 50 RCVD_IN_MSPIKE_WL 17321 4.87 3.87 5.34 51 RCVD_IN_MSPIKE_H3 17321 4.87 3.87 5.34 52 BAYES_40 16624 4.00 1.61 5.13 53 HTML_IMAGE_RATIO_04 16415 5.06 5.05 5.06 54 HTML_IMAGE_RATIO_02 16058 5.43 6.45 4.95 55 XM_PDF 15708 3.65 1.10 4.85 56 MPART_ALT_DIFF 14827 5.13 6.33 4.57 57 XM_B_SpammyWords3 14718 7.75 14.57 4.54 58 XMStrtUSub 14597 4.37 4.08 4.50 59 ANY_BOUNCE_MESSAGE 14582 3.24 0.57 4.50 60 BOUNCE_MESSAGE 14580 3.24 0.57 4.50 61 XM_DK_Undo_02 14253 15.17 38.06 4.40 62 XMSubMetaSx_00 14248 5.49 7.82 4.40 63 XM_UncommonTLD01 13981 4.95 6.30 4.31 64 RELAYCOUNTRY_META 13818 7.41 14.12 4.26 65 RCVD_IN_VALIDITY_SAFE 13417 3.41 1.85 4.14 66 TR_XM_SpammyWords4 13246 6.12 10.46 4.09 67 RCVD_IN_IADB_LISTED 12688 3.10 1.38 3.91 68 HTML_IMAGE_RATIO_06 12343 3.74 3.59 3.81 69 BAYES_20 12165 2.95 1.25 3.75 70 T_REMOTE_IMAGE 12029 3.13 1.90 3.71 71 RCVD_IN_IADB_SPF 11244 2.74 1.20 3.47 72 BAYES_80 10714 5.27 9.45 3.31 73 BOTNET_IPINHOSTNAME 10192 5.52 10.58 3.14 74 RCVD_IN_VALIDITY_CERTIFIED 10082 2.55 1.37 3.11 75 RCVD_IN_IADB_SENDERID 10066 2.47 1.13 3.11 76 TooManyTo_002 10053 2.37 0.81 3.10 77 MAILING_LIST_MULTI 9929 2.78 2.19 3.06 78 RCVD_IN_IADB_DK 9836 2.43 1.13 3.03 79 XMNumbers 9793 3.08 3.21 3.02 80 BAYES_99 9780 11.51 29.58 3.02 81 T_TooManySym_02 9711 2.25 0.68 3.00 82 XM_Body_Dirty_Words 9297 5.13 9.95 2.87 83 TM2_M_VERY_LONG_WORD 9284 3.20 3.92 2.86 84 XM_B_SpammyTLD 9260 3.32 4.29 2.86 85 MIME_HTML_ONLY_MULTI 9019 2.93 3.26 2.78 86 HTML_MIME_NO_HTML_TAG 8810 2.48 1.96 2.72 87 DKIM_INVALID 8518 3.33 4.81 2.63 88 RCVD_IN_IADB_VOUCHED 8346 1.96 0.66 2.57 89 XM_CamelCaseFrm001 8310 2.73 3.09 2.56 90 TR_XM_SpammyRelay 7466 4.68 9.73 2.30 91 BAYES_05 7345 1.76 0.67 2.27 92 BAYES_999 7228 8.73 22.55 2.23 93 INVALID_MSGID 7094 1.56 0.22 2.19 94 KHOP_HELO_FCRDNS 6982 1.92 1.42 2.15 95 MIME_HTML_MOSTLY 6954 2.47 3.15 2.15 96 BAYES_95 6948 3.16 5.33 2.14 97 HTML_IMAGE_RATIO_08 6467 2.26 2.81 2.00 98 TR_XM_DKIM_Undo 6287 9.80 26.51 1.94 99 TO_MALFORMED 6221 1.31 0.01 1.92 100 XMSexyCombo_05 6098 2.74 4.56 1.88 101 TR_XM_PhishingBody 6081 2.87 4.97 1.88 102 XM_B_URI_Unicode 5992 1.98 2.26 1.85 103 RCVD_IN_IADB_OPTIN 5987 1.38 0.40 1.85 104 FROM_EXCESS_BASE64 5846 1.95 2.26 1.80 105 XM_DK_Undo_01 5656 1.82 1.99 1.74 106 UNTRUSTED_Relay 5373 3.13 6.26 1.66 107 T_XMDrugObfuBody_08 5369 2.33 3.75 1.66 108 TooManyTo_003 5354 1.35 0.72 1.65 109 TR_XM_UnparsRelay 5292 3.89 8.68 1.63 110 XMDiploma_00 5278 2.19 3.40 1.63 111 TM2_M_URI_OPT_OUT 5265 2.15 3.26 1.62 112 TR_Symld_Words 5235 1.41 0.96 1.62 113 URI_NOVOWEL 5227 1.52 1.32 1.61 114 XM_B_Investor 5211 2.63 4.80 1.61 115 T_XMDrugObfuBody_14 5189 2.33 3.89 1.60 116 BOTNET 4754 3.84 8.89 1.47 117 SUBJ_ALL_CAPS 4724 1.51 1.63 1.46 118 XM_SendGrid 4699 1.67 2.14 1.45 119 IN_HORDE_ADDRESS_BOOK 4694 1.02 0.11 1.45 120 XM_SPF_SoftFail 4623 2.22 3.92 1.43 121 XM_B_Unsub2 4455 1.62 2.14 1.37 122 TR_XM_SpammyWords5 4388 2.02 3.43 1.35 123 URI_HEX 4356 1.46 1.70 1.34 124 HELO_NODOT 4278 0.98 0.24 1.32 125 HELO_NO_DOMAIN 4273 0.97 0.24 1.32 126 RELAYCOUNTRY_CA 4247 2.35 4.55 1.31 127 XMStockSpam_06 4136 1.50 1.97 1.28 128 XMCapTrack 4119 1.00 0.44 1.27 129 T_TooManySym_03 3977 0.90 0.20 1.23 130 XM_GoogleGroups 3910 1.07 0.78 1.21 131 TR_DCC_Bayes_99 3876 7.81 21.89 1.20 132 TooManyTo_004 3855 1.02 0.66 1.19 133 XMGappySubj_01 3690 0.81 0.10 1.14 134 XM_OfRef6 3603 2.01 3.92 1.11 135 XM_B_COPY_HTML 3259 1.15 1.45 1.01 136 TVD_SPACE_RATIO 3239 0.72 0.12 1.00 137 XM_UB50 3225 1.61 2.93 0.99 138 XM_H_Long_From02 3209 1.22 1.71 0.99 139 SpammyFromTLD_01 3176 1.19 1.63 0.98 140 XMNoVowels 3111 0.89 0.74 0.96 141 XMBrknScrpt_02 3088 1.09 1.37 0.95 142 T_FILL_THIS_FORM_SHORT 3080 1.11 1.46 0.95 143 TR_XM_DK_SendGrid 3023 0.93 0.92 0.93 144 TooManyTo_005 2988 0.83 0.63 0.92 145 DKIM_ADSP_CUSTOM_MED 2979 0.98 1.10 0.92 146 XMGenDplmaNmb 2909 1.13 1.61 0.90 147 TR_MetaPhish_Combo_01 2857 0.82 0.70 0.88 148 FROM_GOV_DKIM_AU 2769 0.64 0.18 0.85 149 TR_XM_Base64_M1 2716 0.93 1.14 0.84 150 XM_B_FormFill 2712 0.58 0.03 0.84 151 HTTPS_HTTP_MISMATCH 2660 0.93 1.15 0.82 152 MIME_CHARSET_FARAWAY 2636 0.80 0.77 0.81 153 RELAYCOUNTRY_AU 2593 1.43 2.77 0.80 154 T_OBFU_PDF_ATTACH 2533 0.72 0.57 0.78 155 RCVD_IN_PBL 2386 0.83 1.04 0.74 156 XM_ShortIntro_01 2384 0.67 0.53 0.74 157 XM_B_DNDMA 2272 0.75 0.86 0.70 158 XMPhish14 2264 0.80 1.00 0.70 159 XMBody_95 2257 0.52 0.14 0.70 160 XMLngstWrd_00 2256 0.57 0.29 0.70 161 T_XMDrugObfuBody_00 2230 0.97 1.55 0.69 162 T_Symld_Words_02 2222 0.73 0.83 0.69 163 XMGappySubj_02 2066 0.44 0.03 0.64 164 MPART_ALT_DIFF_COUNT 2065 0.76 1.03 0.64 165 TO_NO_BRKTS_HTML_ONLY 2052 0.50 0.22 0.63 166 XMSubMetaI_00 2026 0.87 1.38 0.63 167 T_XMHurry_00 2013 1.28 2.68 0.62 168 NML_ADSP_CUSTOM_MED 1917 0.66 0.81 0.59 169 FORGED_GMAIL_RCVD 1909 0.63 0.73 0.59 170 XM_B_SpammyWords4 1908 1.18 2.43 0.59 171 XMBdyGiftCard01 1904 0.79 1.23 0.59 172 XM_H_PHPMailer 1895 0.61 0.66 0.58 173 TVD_RCVD_IP 1867 0.65 0.80 0.58 174 XMPhish30 1856 1.12 2.28 0.57 175 XM_ProductURIs 1842 0.66 0.86 0.57 176 FILL_THIS_FORM 1834 0.53 0.46 0.57 177 XMSubMetaSxObfu_03 1810 0.68 0.94 0.56 178 URI_TRY_3LD 1798 0.68 0.95 0.55 179 SUBJ_BUY 1751 0.40 0.10 0.54 180 XMMoneyMeta_00 1739 0.68 0.99 0.54 181 HTML_IMAGE_ONLY_20 1739 0.56 0.60 0.54 182 RCVD_IN_BL_SPAMCOP_NET 1724 3.11 8.61 0.53 183 SpammyFromTLD_02 1635 1.03 2.14 0.50 184 HTML_TAG_BALANCE_BODY 1628 0.62 0.88 0.50 185 MISSING_HEADERS 1622 0.50 0.51 0.50 186 MSGID_FROM_MTA_HEADER 1561 0.35 0.08 0.48 187 CHARSET_FARAWAY_HEADER 1559 0.34 0.05 0.48 188 XMSlimDrugH 1558 0.59 0.83 0.48 189 RELAYCOUNTRY_GB 1540 0.54 0.68 0.48 190 XMEqualsVooDoo_00 1525 0.34 0.05 0.47 191 LongTLD 1492 0.78 1.46 0.46 192 HTML_IMAGE_ONLY_32 1484 0.37 0.19 0.46 193 XMSubNoVowel 1482 0.46 0.48 0.46 194 XMDateMe_00 1481 0.44 0.39 0.46 195 BASE64_LENGTH_79_INF 1448 0.48 0.56 0.45 196 HTML_FONT_FACE_BAD 1434 0.49 0.59 0.44 197 TR_XM_SpammyWords2 1389 3.88 11.22 0.43 198 XM_URI_RBL 1323 1.09 2.54 0.41 199 HTML_IMAGE_ONLY_28 1323 0.36 0.27 0.41 200 USER_IN_WELCOMELIST 1313 0.28 0.00 0.41 ----------------------------------------------------------------------