Email: 470782 Autolearn: 0 AvgScore: 4.89 AvgScanTime: 1.45 sec Spam: 148707 Autolearn: 0 AvgScore: 15.13 AvgScanTime: 1.60 sec Ham: 322075 Autolearn: 0 AvgScore: 0.16 AvgScanTime: 1.37 sec Time Spent Running SA: 188.99 hours Time Spent Processing Spam: 66.16 hours Time Spent Processing Ham: 122.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140969 89.59 94.80 87.18 2 DKIM_SIGNED 133510 80.11 89.78 75.64 3 XM_DK_Pass 127807 77.88 85.95 74.15 4 DKIM_VALID 125856 76.69 84.63 73.03 5 RELAYCOUNTRY_US 124630 82.40 83.81 81.75 6 XM_B_Unicode 123387 74.29 82.97 70.28 7 DCC_CHECK 112025 50.44 75.33 38.95 8 XM_B_SpammyWords 105056 52.73 70.65 44.45 9 XMListUnsubscribeExists 103991 55.49 69.93 48.82 10 DKIM_VALID_AU 99473 60.95 66.89 58.21 11 XM_B_Unicode3 76551 44.26 51.48 40.93 12 LOC_TINY_FONT_1 71092 33.48 47.81 26.86 13 XM_B_SpammyWords2 63351 25.99 42.60 18.32 14 BAYES_50 60417 54.09 40.63 60.31 15 HTML_FONT_LOW_CONTRAST 57194 31.23 38.46 27.89 16 XM_DK_Undo_02 56970 15.42 38.31 4.85 17 RCVD_IN_MSPIKE_H2 55868 35.45 37.57 34.47 18 FVGT_m_MULTI_ODD 49939 27.20 33.58 24.25 19 T_KAM_HTML_FONT_INVALID 48014 24.67 32.29 21.15 20 BAYES_99 44730 11.60 30.08 3.07 21 MIME_HTML_ONLY 42261 22.68 28.42 20.03 22 DKIM_VALID_EF 41735 28.68 28.07 28.96 23 TR_XM_DKIM_Undo 40194 9.79 27.03 1.83 24 XMSubLong 35795 23.63 24.07 23.43 25 T_TM2_M_HEADER_IN_MSG 34923 28.15 23.48 30.30 26 DCC_CHECK_NEGATIVE 33929 48.94 22.82 61.00 27 BAYES_999 33919 8.79 22.81 2.31 28 XM_Multi_Part_URI 33217 16.12 22.34 13.24 29 TR_DCC_Bayes_99 32819 7.68 22.07 1.04 30 TR_XM_DK_Unsub 29385 14.74 19.76 12.43 31 XM_B_Unsub 26456 11.76 17.79 8.98 32 TR_XM_BayesUnsub 25547 10.16 17.18 6.92 33 UNPARSEABLE_RELAY 24377 13.32 16.39 11.90 34 TR_MAX_INTL_RELAY 23504 8.87 15.81 5.67 35 XM_B_SpammyWords3 21784 7.49 14.65 4.18 36 RELAYCOUNTRY_META 21684 7.17 14.58 3.74 37 LOTS_OF_MONEY 19815 8.26 13.32 5.91 38 TR_XM_SpammyWords4 18082 6.42 12.16 3.78 39 TR_XM_SpammyWords2 17394 3.95 11.70 0.37 40 BOTNET_IPINHOSTNAME 16840 6.09 11.32 3.67 41 XM_Evil_Numbers_Gen 16256 10.04 10.93 9.63 42 TR_XM_SpammyRelay 16162 4.71 10.87 1.86 43 BAYES_80 14089 5.37 9.47 3.47 44 FSL_BULK_SIG 13795 7.80 9.28 7.11 45 BOTNET 13543 4.20 9.11 1.93 46 XM_B_Phish_Phrases 12449 6.00 8.37 4.90 47 RCVD_IN_BL_SPAMCOP_NET 12391 3.03 8.33 0.57 48 TR_XM_UnparsRelay 12278 3.72 8.26 1.62 49 BAYES_60 12256 8.40 8.24 8.47 50 XMSubMetaSx_00 11876 5.32 7.99 4.09 51 LotsOfNums_01 11391 8.46 7.66 8.83 52 XM_Body_Dirty_Words 11284 4.24 7.59 2.69 53 HTML_IMAGE_RATIO_02 10186 5.44 6.85 4.79 54 TR_XM_SPAMCOP 10046 2.37 6.76 0.34 55 XM_B_PhoneNumber 9708 8.99 6.53 10.12 56 MPART_ALT_DIFF 9551 4.86 6.42 4.13 57 UNTRUSTED_Relay 9066 2.99 6.10 1.56 58 XM_H_GMP 8694 5.78 5.85 5.74 59 HTML_IMAGE_RATIO_04 8601 4.82 5.78 4.37 60 XM_UncommonTLD01 8353 4.62 5.62 4.16 61 XM_H_Long_From01 8327 5.75 5.60 5.82 62 BAYES_95 8185 3.24 5.50 2.19 63 RELAYCOUNTRY_CA 7688 2.39 5.17 1.10 64 DKIM_INVALID 7654 3.41 5.15 2.61 65 XMSexyCombo_05 7043 2.31 4.74 1.19 66 XM_B_Investor 6759 2.58 4.55 1.68 67 TR_XM_SpammyWords5 6627 2.35 4.46 1.38 68 TR_XM_PhishingBody 6579 2.54 4.42 1.67 69 T_XMDrugObfuBody_14 6502 2.52 4.37 1.66 70 XM_OfRef6 6495 2.15 4.37 1.13 71 XM_B_SpammyTLD 6271 3.07 4.22 2.54 72 RCVD_IN_MSPIKE_H3 6030 5.06 4.05 5.52 73 RCVD_IN_MSPIKE_WL 6030 5.06 4.05 5.52 74 HTML_IMAGE_RATIO_06 5893 3.80 3.96 3.73 75 XMStrtUSub 5732 4.43 3.85 4.70 76 TM2_M_VERY_LONG_WORD 5717 2.89 3.84 2.45 77 TooManyTo_001 5695 6.90 3.83 8.32 78 TM2_M_URI_OPT_OUT 5595 2.36 3.76 1.72 79 MIME_HTML_ONLY_MULTI 5511 2.80 3.71 2.38 80 XMNumbers 5444 3.21 3.66 3.01 81 RCVD_IN_VALIDITY_RPBL 5275 1.19 3.55 0.10 82 MIME_HTML_MOSTLY 4658 2.30 3.13 1.92 83 XM_SPF_SoftFail 4557 2.02 3.06 1.53 84 XM_B_SpammyWords4 4511 1.32 3.03 0.53 85 MIME_QP_LONG_LINE 4376 4.57 2.94 5.33 86 XMDiploma_00 4368 2.06 2.94 1.65 87 HTML_IMAGE_RATIO_08 4356 2.23 2.93 1.91 88 XM_CamelCaseFrm001 4340 2.58 2.92 2.42 89 T_XMDrugObfuBody_08 4230 1.98 2.84 1.58 90 RELAYCOUNTRY_AU 4103 1.23 2.76 0.52 91 XM_UB50 3939 1.55 2.65 1.04 92 SUBJ_ALL_CAPS 3741 1.86 2.52 1.56 93 TR_XM_NoHeaderRelay 3706 0.91 2.49 0.17 94 XM_URI_RBL 3606 0.97 2.42 0.30 95 MAILING_LIST_MULTI 3590 2.74 2.41 2.90 96 XM_B_URI_Unicode 3587 2.20 2.41 2.10 97 T_TooManySym_01 3513 4.85 2.36 5.99 98 HTML_MIME_NO_HTML_TAG 3450 2.48 2.32 2.56 99 XMBody_17 3422 1.02 2.30 0.42 100 XM_B_Unsub2 3390 1.76 2.28 1.52 101 T_XMHurry_00 3325 1.07 2.24 0.53 102 FROM_EXCESS_BASE64 3136 1.91 2.11 1.81 103 XM_H_Long_From02 2993 1.27 2.01 0.92 104 SpammyFromTLD_02 2939 0.92 1.98 0.44 105 DKIM_ADSP_NXDOMAIN 2937 0.83 1.98 0.31 106 NO_DNS_FOR_FROM 2908 0.81 1.96 0.28 107 TR_XM_MaxWHORU 2897 0.78 1.95 0.23 108 RCVD_IN_VALIDITY_SAFE 2894 3.27 1.95 3.88 109 RCVD_IN_PSBL 2781 0.85 1.87 0.38 110 T_FILL_THIS_FORM_SHORT 2765 1.22 1.86 0.92 111 URI_TRY_3LD 2764 1.06 1.86 0.69 112 DIET_1 2743 0.81 1.84 0.33 113 USER_IN_DEF_DKIM_WL 2732 9.02 1.84 12.34 114 RCVD_IN_ZEN_LASTEXTERNAL 2704 0.57 1.82 0.00 115 SHORTCIRCUIT 2704 0.57 1.82 0.00 116 XMStockSpam_06 2677 1.07 1.80 0.73 117 BOTNET_NORDNS 2578 0.56 1.73 0.01 118 XMGenDplmaNmb 2504 1.22 1.68 1.00 119 XM_SendGrid 2502 1.55 1.68 1.49 120 BAYES_40 2464 4.17 1.66 5.33 121 XM_UB99 2429 0.52 1.63 0.01 122 XM_DK_Undo_01 2406 1.57 1.62 1.55 123 XMPhish30 2380 0.86 1.60 0.52 124 T_XMDrugObfuBody_00 2370 1.04 1.59 0.78 125 SpammyFromTLD_01 2316 1.15 1.56 0.96 126 URI_HEX 2282 1.34 1.53 1.25 127 TR_XM_INV_DKIM 2250 0.62 1.51 0.20 128 HK_RANDOM_REPLYTO 2211 0.60 1.49 0.19 129 XM_H_Undi_Recip 2190 0.62 1.47 0.22 130 XM_OfRef7 2182 0.61 1.47 0.22 131 XMSubMetaSxObfu_03 2172 0.79 1.46 0.48 132 T_REMOTE_IMAGE 2094 2.88 1.41 3.56 133 XM_B_SEO 2080 0.60 1.40 0.23 134 RCVD_IN_VALIDITY_CERTIFIED 2076 2.52 1.40 3.04 135 XM_B_COPY_HTML 2056 0.91 1.38 0.69 136 LongTLD 2045 0.75 1.38 0.46 137 XM_UB999 2005 0.43 1.35 0.00 138 XMBrknScrpt_02 1981 0.94 1.33 0.76 139 ALL_TRUSTED 1929 10.76 1.30 15.13 140 DKIM_ADSP_CUSTOM_MED 1916 1.02 1.29 0.89 141 XM_B_COVIDMETA 1911 0.57 1.29 0.24 142 XMSubMetaI_00 1871 0.79 1.26 0.58 143 BAYES_20 1866 2.93 1.25 3.70 144 LOADSA_MONEY_COMBO 1850 0.41 1.24 0.03 145 KHOP_HELO_FCRDNS 1836 1.86 1.23 2.15 146 TR_XM_SEO4 1808 0.46 1.22 0.11 147 TR_XM_Undi_Recip19 1803 0.45 1.21 0.09 148 XMSexyCombo_01 1796 0.71 1.21 0.49 149 TR_LOTS_OF_MONEY3 1789 0.64 1.20 0.37 150 HTTPS_HTTP_MISMATCH 1785 0.98 1.20 0.88 151 TR_XM_DK_SendGrid 1772 1.08 1.19 1.02 152 XMSlimDrugH 1761 0.75 1.18 0.54 153 TR_Symld_Words 1760 1.50 1.18 1.65 154 NORDNS_LOW_CONTRAST 1759 0.40 1.18 0.04 155 XFER_LOTSA_MONEY 1742 0.38 1.17 0.02 156 RCVD_IN_XBL 1722 0.38 1.16 0.02 157 XMBdyGiftCard01 1714 0.77 1.15 0.60 158 RCVD_IN_IADB_LISTED 1707 3.08 1.15 3.97 159 URI_NOVOWEL 1670 1.55 1.12 1.75 160 TR_XM_Undi_RecipCombo2 1660 0.37 1.12 0.02 161 STY_INVIS_DIRECT 1653 0.51 1.11 0.24 162 TR_XM_Base64_M1 1650 0.94 1.11 0.87 163 NML_ADSP_CUSTOM_MED 1642 0.74 1.10 0.57 164 XM_B_Phish66 1631 0.55 1.10 0.29 165 MISSING_HEADERS 1613 0.72 1.08 0.55 166 TR_Caps_n_Bayes_99 1591 0.36 1.07 0.03 167 XM_B_DNDMA 1569 0.70 1.06 0.53 168 XMPhish14 1562 0.65 1.05 0.46 169 XMBody_78 1553 0.56 1.04 0.34 170 MPART_ALT_DIFF_COUNT 1549 0.75 1.04 0.62 171 XMHTML_After_End 1520 0.56 1.02 0.34 172 RCVD_IN_IADB_SPF 1496 2.68 1.01 3.45 173 TR_XM_PHPDW 1480 0.58 1.00 0.39 174 XMNoVowels 1450 1.10 0.98 1.15 175 XM_DIRTYINTL 1449 0.38 0.97 0.10 176 TR_XM_PHPForged 1446 0.57 0.97 0.39 177 T_MONEY_PERCENT 1431 0.44 0.96 0.19 178 TR_LOTS_OF_MONEY2 1431 0.44 0.96 0.19 179 TR_XM_FormFill2 1419 0.57 0.95 0.39 180 TM2_M_OBFU_COMMENT 1409 0.49 0.95 0.28 181 RCVD_IN_IADB_SENDERID 1402 2.39 0.94 3.06 182 HTML_TAG_BALANCE_BODY 1401 0.84 0.94 0.80 183 XM_GoogleGroups 1400 1.17 0.94 1.27 184 MIME_CHARSET_FARAWAY 1395 0.85 0.94 0.81 185 RCVD_IN_IADB_DK 1393 2.33 0.94 2.98 186 XM_H_PHPOS 1388 0.55 0.93 0.38 187 T_Symld_Words_02 1375 0.76 0.92 0.69 188 SHOPIFY_IMG_NOT_RCVD_SFY 1369 0.46 0.92 0.24 189 RELAYCOUNTRY_FR 1357 0.51 0.91 0.32 190 TR_Mismatch_TLD_02 1331 0.36 0.90 0.11 191 RCVD_IN_SORBS_DUL 1304 0.31 0.88 0.05 192 XM_HighProb1 1285 0.28 0.86 0.01 193 XM_Lotto 1271 0.30 0.85 0.04 194 RELAYCOUNTRY_CN 1256 0.31 0.84 0.07 195 RELAYCOUNTRY_GB 1246 0.62 0.84 0.52 196 HOSTED_IMG_MULTI_PUB_01 1240 0.27 0.83 0.02 197 RDNS_DYNAMIC 1236 0.52 0.83 0.37 198 TM2_M_A_HREF_HREF 1233 0.50 0.83 0.35 199 XM_RXBody 1225 0.35 0.82 0.13 200 PDS_RDNS_DYNAMIC_FP 1220 0.41 0.82 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 280792 89.59 94.80 87.18 2 RELAYCOUNTRY_US 263306 82.40 83.81 81.75 3 DKIM_SIGNED 243610 80.11 89.78 75.64 4 XM_DK_Pass 238825 77.88 85.95 74.15 5 DKIM_VALID 235206 76.69 84.63 73.03 6 XM_B_Unicode 226363 74.29 82.97 70.28 7 DCC_CHECK_NEGATIVE 196453 48.94 22.82 61.00 8 BAYES_50 194234 54.09 40.63 60.31 9 DKIM_VALID_AU 187489 60.95 66.89 58.21 10 XMListUnsubscribeExists 157251 55.49 69.93 48.82 11 XM_B_SpammyWords 143168 52.73 70.65 44.45 12 XM_B_Unicode3 131834 44.26 51.48 40.93 13 DCC_CHECK 125457 50.44 75.33 38.95 14 RCVD_IN_MSPIKE_H2 111007 35.45 37.57 34.47 15 T_TM2_M_HEADER_IN_MSG 97602 28.15 23.48 30.30 16 DKIM_VALID_EF 93272 28.68 28.07 28.96 17 HTML_FONT_LOW_CONTRAST 89815 31.23 38.46 27.89 18 LOC_TINY_FONT_1 86509 33.48 47.81 26.86 19 FVGT_m_MULTI_ODD 78103 27.20 33.58 24.25 20 XMSubLong 75472 23.63 24.07 23.43 21 T_KAM_HTML_FONT_INVALID 68130 24.67 32.29 21.15 22 MIME_HTML_ONLY 64497 22.68 28.42 20.03 23 XM_B_SpammyWords2 58992 25.99 42.60 18.32 24 ALL_TRUSTED 48732 10.76 1.30 15.13 25 XM_Multi_Part_URI 42656 16.12 22.34 13.24 26 TR_XM_DK_Unsub 40027 14.74 19.76 12.43 27 USER_IN_DEF_DKIM_WL 39735 9.02 1.84 12.34 28 UNPARSEABLE_RELAY 38343 13.32 16.39 11.90 29 BAYES_00 36307 7.92 0.66 11.27 30 XM_B_PhoneNumber 32606 8.99 6.53 10.12 31 XM_Evil_Numbers_Gen 31028 10.04 10.93 9.63 32 XM_B_Unsub 28931 11.76 17.79 8.98 33 LotsOfNums_01 28428 8.46 7.66 8.83 34 BAYES_60 27272 8.40 8.24 8.47 35 TooManyTo_001 26787 6.90 3.83 8.32 36 TR_XM_DK_Bayes 23725 5.22 0.56 7.37 37 TR_XM_DK_Bayes1 23283 5.12 0.56 7.23 38 FSL_BULK_SIG 22913 7.80 9.28 7.11 39 IN_ZIMBRA_NJ_WHITELIST 22743 4.87 0.11 7.06 40 TR_XM_BayesUnsub 22302 10.16 17.18 6.92 41 XM_DKIMWhitelistDomains 20021 4.26 0.04 6.22 42 TR_XM_DK_Bayes2 19493 4.29 0.46 6.05 43 T_TooManySym_01 19304 4.85 2.36 5.99 44 LOTS_OF_MONEY 19049 8.26 13.32 5.91 45 XM_H_Long_From01 18738 5.75 5.60 5.82 46 XM_H_GMP 18496 5.78 5.85 5.74 47 TR_MAX_INTL_RELAY 18260 8.87 15.81 5.67 48 RCVD_IN_MSPIKE_WL 17793 5.06 4.05 5.52 49 RCVD_IN_MSPIKE_H3 17793 5.06 4.05 5.52 50 MIME_QP_LONG_LINE 17160 4.57 2.94 5.33 51 BAYES_40 17158 4.17 1.66 5.33 52 XM_B_Phish_Phrases 15783 6.00 8.37 4.90 53 XM_DK_Undo_02 15634 15.42 38.31 4.85 54 HTML_IMAGE_RATIO_02 15420 5.44 6.85 4.79 55 XMStrtUSub 15123 4.43 3.85 4.70 56 XM_PDF 14651 3.33 0.70 4.55 57 HTML_IMAGE_RATIO_04 14070 4.82 5.78 4.37 58 ANY_BOUNCE_MESSAGE 13968 3.18 0.69 4.34 59 BOUNCE_MESSAGE 13968 3.18 0.69 4.34 60 XM_B_SpammyWords3 13465 7.49 14.65 4.18 61 XM_UncommonTLD01 13405 4.62 5.62 4.16 62 MPART_ALT_DIFF 13315 4.86 6.42 4.13 63 XMSubMetaSx_00 13159 5.32 7.99 4.09 64 RCVD_IN_IADB_LISTED 12777 3.08 1.15 3.97 65 RCVD_IN_VALIDITY_SAFE 12491 3.27 1.95 3.88 66 TR_XM_SpammyWords4 12160 6.42 12.16 3.78 67 RELAYCOUNTRY_META 12058 7.17 14.58 3.74 68 HTML_IMAGE_RATIO_06 12000 3.80 3.96 3.73 69 BAYES_20 11919 2.93 1.25 3.70 70 BOTNET_IPINHOSTNAME 11828 6.09 11.32 3.67 71 T_REMOTE_IMAGE 11467 2.88 1.41 3.56 72 BAYES_80 11187 5.37 9.47 3.47 73 RCVD_IN_IADB_SPF 11127 2.68 1.01 3.45 74 BAYES_99 9874 11.60 30.08 3.07 75 RCVD_IN_IADB_SENDERID 9858 2.39 0.94 3.06 76 RCVD_IN_VALIDITY_CERTIFIED 9786 2.52 1.40 3.04 77 XMNumbers 9679 3.21 3.66 3.01 78 RCVD_IN_IADB_DK 9583 2.33 0.94 2.98 79 T_TooManySym_02 9553 2.23 0.62 2.97 80 MAILING_LIST_MULTI 9330 2.74 2.41 2.90 81 TooManyTo_002 9189 2.16 0.64 2.85 82 RCVD_IN_IADB_VOUCHED 8807 2.06 0.59 2.73 83 XM_Body_Dirty_Words 8673 4.24 7.59 2.69 84 DKIM_INVALID 8404 3.41 5.15 2.61 85 HTML_MIME_NO_HTML_TAG 8232 2.48 2.32 2.56 86 XM_B_SpammyTLD 8166 3.07 4.22 2.54 87 TM2_M_VERY_LONG_WORD 7879 2.89 3.84 2.45 88 XM_CamelCaseFrm001 7784 2.58 2.92 2.42 89 MIME_HTML_ONLY_MULTI 7670 2.80 3.71 2.38 90 BAYES_999 7451 8.79 22.81 2.31 91 INVALID_MSGID 7366 1.64 0.23 2.29 92 BAYES_95 7063 3.24 5.50 2.19 93 BAYES_05 7058 1.72 0.68 2.19 94 KHOP_HELO_FCRDNS 6935 1.86 1.23 2.15 95 XM_B_URI_Unicode 6779 2.20 2.41 2.10 96 TO_MALFORMED 6256 1.33 0.00 1.94 97 BOTNET 6229 4.20 9.11 1.93 98 MIME_HTML_MOSTLY 6180 2.30 3.13 1.92 99 HTML_IMAGE_RATIO_08 6150 2.23 2.93 1.91 100 RCVD_IN_IADB_OPTIN 6108 1.42 0.37 1.90 101 TR_XM_SpammyRelay 5996 4.71 10.87 1.86 102 TR_XM_DKIM_Undo 5884 9.79 27.03 1.83 103 FROM_EXCESS_BASE64 5841 1.91 2.11 1.81 104 URI_NOVOWEL 5632 1.55 1.12 1.75 105 TM2_M_URI_OPT_OUT 5532 2.36 3.76 1.72 106 XM_B_Investor 5395 2.58 4.55 1.68 107 TR_XM_PhishingBody 5393 2.54 4.42 1.67 108 TooManyTo_003 5345 1.31 0.55 1.66 109 T_XMDrugObfuBody_14 5343 2.52 4.37 1.66 110 XMDiploma_00 5317 2.06 2.94 1.65 111 TR_Symld_Words 5310 1.50 1.18 1.65 112 TR_XM_UnparsRelay 5229 3.72 8.26 1.62 113 T_XMDrugObfuBody_08 5096 1.98 2.84 1.58 114 SUBJ_ALL_CAPS 5031 1.86 2.52 1.56 115 UNTRUSTED_Relay 5021 2.99 6.10 1.56 116 XM_DK_Undo_01 5004 1.57 1.62 1.55 117 XM_SPF_SoftFail 4933 2.02 3.06 1.53 118 XM_B_Unsub2 4880 1.76 2.28 1.52 119 IN_HORDE_ADDRESS_BOOK 4793 1.05 0.11 1.49 120 XM_SendGrid 4791 1.55 1.68 1.49 121 TR_XM_SpammyWords5 4436 2.35 4.46 1.38 122 HELO_NODOT 4364 1.00 0.23 1.35 123 HELO_NO_DOMAIN 4360 1.00 0.22 1.35 124 FROM_GOV_DKIM_AU 4324 0.97 0.16 1.34 125 XM_GoogleGroups 4101 1.17 0.94 1.27 126 URI_HEX 4036 1.34 1.53 1.25 127 XMGappySubj_01 3975 0.88 0.12 1.23 128 T_TooManySym_03 3884 0.90 0.24 1.21 129 XMSexyCombo_05 3845 2.31 4.74 1.19 130 XMCapTrack 3818 0.99 0.56 1.19 131 TooManyTo_004 3774 0.96 0.50 1.17 132 XMNoVowels 3708 1.10 0.98 1.15 133 XM_OfRef6 3648 2.15 4.37 1.13 134 RELAYCOUNTRY_CA 3543 2.39 5.17 1.10 135 TR_DCC_Bayes_99 3355 7.68 22.07 1.04 136 XM_UB50 3341 1.55 2.65 1.04 137 TR_XM_DK_SendGrid 3290 1.08 1.19 1.02 138 XMGenDplmaNmb 3219 1.22 1.68 1.00 139 TVD_SPACE_RATIO 3173 0.73 0.18 0.99 140 SpammyFromTLD_01 3089 1.15 1.56 0.96 141 T_FILL_THIS_FORM_SHORT 2978 1.22 1.86 0.92 142 XM_H_Long_From02 2978 1.27 2.01 0.92 143 TooManyTo_005 2962 0.77 0.46 0.92 144 DKIM_ADSP_CUSTOM_MED 2864 1.02 1.29 0.89 145 HTTPS_HTTP_MISMATCH 2834 0.98 1.20 0.88 146 TR_XM_Base64_M1 2786 0.94 1.11 0.87 147 XM_ShortIntro_01 2614 0.76 0.65 0.81 148 MIME_CHARSET_FARAWAY 2612 0.85 0.94 0.81 149 HTML_TAG_BALANCE_BODY 2563 0.84 0.94 0.80 150 XM_H_PHPMailer 2541 0.74 0.64 0.79 151 T_XMDrugObfuBody_00 2524 1.04 1.59 0.78 152 XMBrknScrpt_02 2460 0.94 1.33 0.76 153 HTML_IMAGE_ONLY_20 2428 0.67 0.49 0.75 154 TO_NO_BRKTS_HTML_ONLY 2360 0.56 0.19 0.73 155 XMStockSpam_06 2337 1.07 1.80 0.73 156 RCVD_IN_PBL 2282 0.73 0.77 0.71 157 URI_TRY_3LD 2233 1.06 1.86 0.69 158 T_Symld_Words_02 2221 0.76 0.92 0.69 159 XMGappySubj_02 2220 0.49 0.05 0.69 160 XMLngstWrd_00 2215 0.60 0.40 0.69 161 XM_B_COPY_HTML 2210 0.91 1.38 0.69 162 XMBody_95 2115 0.51 0.21 0.66 163 TVD_RCVD_IP 2071 0.68 0.76 0.64 164 TR_MetaPhish_Combo_01 2027 0.64 0.67 0.63 165 MPART_ALT_DIFF_COUNT 1988 0.75 1.04 0.62 166 T_OBFU_PDF_ATTACH 1963 0.47 0.17 0.61 167 XMBdyGiftCard01 1924 0.77 1.15 0.60 168 MSGID_FROM_MTA_HEADER 1858 0.42 0.09 0.58 169 XMSubMetaI_00 1855 0.79 1.26 0.58 170 RCVD_IN_BL_SPAMCOP_NET 1851 3.03 8.33 0.57 171 NML_ADSP_CUSTOM_MED 1833 0.74 1.10 0.57 172 FORGED_GMAIL_RCVD 1780 0.60 0.71 0.55 173 MISSING_HEADERS 1761 0.72 1.08 0.55 174 XMSlimDrugH 1749 0.75 1.18 0.54 175 T_XMHurry_00 1722 1.07 2.24 0.53 176 XM_B_DNDMA 1717 0.70 1.06 0.53 177 XM_B_SpammyWords4 1713 1.32 3.03 0.53 178 PLING_QUERY 1710 0.61 0.79 0.53 179 RELAYCOUNTRY_AU 1686 1.23 2.76 0.52 180 XMPhish30 1680 0.86 1.60 0.52 181 RELAYCOUNTRY_GB 1663 0.62 0.84 0.52 182 XMSexyCombo_01 1565 0.71 1.21 0.49 183 XMSubMetaSxObfu_03 1539 0.79 1.46 0.48 184 XM_ProductURIs 1513 0.57 0.79 0.47 185 FROM_GOV_SPOOF 1503 0.36 0.13 0.47 186 HTML_IMAGE_ONLY_32 1501 0.38 0.18 0.47 187 CHARSET_FARAWAY_HEADER 1500 0.36 0.13 0.47 188 LongTLD 1481 0.75 1.38 0.46 189 XMPhish14 1475 0.65 1.05 0.46 190 XMDateMe_00 1441 0.51 0.64 0.45 191 XMOemUri 1432 0.47 0.54 0.44 192 SpammyFromTLD_02 1415 0.92 1.98 0.44 193 T_TVD_MIME_NO_HEADERS 1405 0.31 0.03 0.44 194 XMBody_17 1361 1.02 2.30 0.42 195 XMMoneyMeta_00 1352 0.53 0.77 0.42 196 TM2_M_BODY_EMPTY 1334 0.31 0.09 0.41 197 SHORT_HELO_AND_INLINE_IMAGE 1324 0.29 0.02 0.41 198 HTML_IMAGE_ONLY_28 1321 0.41 0.42 0.41 199 XMBSHREFv2 1270 0.39 0.38 0.39 200 TR_XM_FormFill2 1269 0.57 0.95 0.39 ----------------------------------------------------------------------