Email: 449361 Autolearn: 0 AvgScore: 4.66 AvgScanTime: 1.29 sec Spam: 140700 Autolearn: 0 AvgScore: 15.06 AvgScanTime: 1.38 sec Ham: 308661 Autolearn: 0 AvgScore: -0.08 AvgScanTime: 1.25 sec Time Spent Running SA: 160.84 hours Time Spent Processing Spam: 53.85 hours Time Spent Processing Ham: 106.99 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133006 89.23 94.53 86.81 2 DKIM_SIGNED 121748 78.38 86.53 74.67 3 XM_B_Unicode 116505 72.91 82.80 68.40 4 XM_DK_Pass 116203 75.99 82.59 72.98 5 RELAYCOUNTRY_US 115346 81.12 81.98 80.73 6 DKIM_VALID 114885 74.79 81.65 71.66 7 DCC_CHECK 103185 48.05 73.34 36.53 8 XM_B_SpammyWords 98303 51.47 69.87 43.08 9 XMListUnsubscribeExists 95928 52.87 68.18 45.89 10 DKIM_VALID_AU 89516 59.34 63.62 57.38 11 XM_B_Unicode3 67052 41.67 47.66 38.94 12 LOC_TINY_FONT_1 66374 32.20 47.17 25.38 13 XM_B_SpammyWords2 56697 24.71 40.30 17.61 14 BAYES_50 56058 54.06 39.84 60.54 15 RCVD_IN_MSPIKE_H2 53150 36.10 37.78 35.34 16 XM_DK_Undo_02 52259 14.59 37.14 4.30 17 HTML_FONT_LOW_CONTRAST 51605 29.14 36.68 25.71 18 MIME_HTML_ONLY 43962 23.90 31.25 20.55 19 FVGT_m_MULTI_ODD 43411 26.79 30.85 24.94 20 T_KAM_HTML_FONT_INVALID 43072 23.62 30.61 20.44 21 BAYES_99 42120 11.46 29.94 3.04 22 DKIM_VALID_EF 40911 30.18 29.08 30.68 23 TR_XM_DKIM_Undo 37202 9.40 26.44 1.63 24 DCC_CHECK_NEGATIVE 34729 51.29 24.68 63.41 25 XMSubLong 32460 23.52 23.07 23.73 26 BAYES_999 32226 8.71 22.90 2.24 27 T_TM2_M_HEADER_IN_MSG 31597 28.91 22.46 31.84 28 TR_DCC_Bayes_99 29853 7.25 21.22 0.88 29 TR_XM_DK_Unsub 28545 15.17 20.29 12.84 30 XM_Multi_Part_URI 27460 14.40 19.52 12.07 31 XM_B_Unsub 24049 11.58 17.09 9.07 32 UNPARSEABLE_RELAY 23364 13.41 16.61 11.96 33 TR_XM_BayesUnsub 22981 9.59 16.33 6.51 34 RELAYCOUNTRY_META 22299 7.60 15.85 3.85 35 TR_MAX_INTL_RELAY 21728 8.71 15.44 5.65 36 XM_B_SpammyWords3 20435 7.82 14.52 4.76 37 LOTS_OF_MONEY 18496 8.59 13.15 6.51 38 TR_XM_SpammyRelay 16614 5.00 11.81 1.89 39 TR_XM_SpammyWords4 16486 6.66 11.72 4.35 40 RCVD_IN_BL_SPAMCOP_NET 16084 3.94 11.43 0.53 41 TR_XM_SpammyWords2 14619 3.50 10.39 0.35 42 BOTNET_IPINHOSTNAME 13837 5.12 9.83 2.96 43 BOTNET 13809 4.01 9.81 1.36 44 BAYES_80 13565 5.35 9.64 3.40 45 XM_Evil_Numbers_Gen 12974 8.82 9.22 8.64 46 XM_UncommonTLD01 12435 5.84 8.84 4.48 47 FSL_BULK_SIG 12077 7.52 8.58 7.03 48 BAYES_60 12059 6.98 8.57 6.26 49 TR_XM_UnparsRelay 11734 3.65 8.34 1.52 50 TR_XM_SPAMCOP 11427 2.80 8.12 0.38 51 XM_B_Phish_Phrases 10862 5.73 7.72 4.82 52 XM_Body_Dirty_Words 10410 3.82 7.40 2.19 53 LotsOfNums_01 9862 7.62 7.01 7.90 54 XMSubMetaSx_00 9800 4.84 6.97 3.87 55 HTML_IMAGE_RATIO_02 9696 5.36 6.89 4.67 56 MPART_ALT_DIFF 9104 4.72 6.47 3.93 57 RELAYCOUNTRY_CA 8375 2.69 5.95 1.21 58 UNTRUSTED_Relay 8200 2.86 5.83 1.50 59 BAYES_95 7777 3.27 5.53 2.25 60 XM_B_PhoneNumber 7736 9.06 5.50 10.68 61 TR_XM_PhishingBody 7691 2.83 5.47 1.64 62 XMSexyCombo_05 7610 2.96 5.41 1.84 63 XM_H_Long_From01 7586 5.43 5.39 5.45 64 DKIM_INVALID 6863 3.59 4.88 3.01 65 XM_B_Investor 6787 2.67 4.82 1.69 66 XM_H_GMP 6714 5.72 4.77 6.15 67 SpammyFromTLD_02 6450 1.61 4.58 0.25 68 XMStrtUSub 6221 4.78 4.42 4.94 69 XM_OfRef6 6090 2.19 4.33 1.21 70 RCVD_IN_MSPIKE_H3 6016 4.90 4.28 5.18 71 RCVD_IN_MSPIKE_WL 6016 4.90 4.28 5.18 72 HTML_IMAGE_RATIO_04 6013 3.74 4.27 3.49 73 TooManyTo_001 5824 7.89 4.14 9.60 74 XM_B_SpammyTLD 5761 3.01 4.09 2.52 75 T_XMDrugObfuBody_14 5724 2.67 4.07 2.04 76 RCVD_IN_PSBL 5655 1.60 4.02 0.50 77 RCVD_IN_VALIDITY_RPBL 5637 1.40 4.01 0.21 78 HTML_IMAGE_RATIO_08 5404 2.65 3.84 2.11 79 HTML_IMAGE_RATIO_06 5166 2.93 3.67 2.60 80 TM2_M_VERY_LONG_WORD 5072 2.15 3.60 1.48 81 MIME_HTML_MOSTLY 4997 2.48 3.55 2.00 82 T_REMOTE_IMAGE 4981 3.67 3.54 3.73 83 MIME_HTML_ONLY_MULTI 4897 2.70 3.48 2.35 84 XMNumbers 4758 3.34 3.38 3.33 85 TR_XM_SpammyWords5 4698 2.05 3.34 1.46 86 T_XMHurry_00 4603 1.40 3.27 0.54 87 T_XMDrugObfuBody_08 4550 2.10 3.23 1.59 88 XMDiploma_00 4440 2.30 3.16 1.92 89 XM_SPF_SoftFail 4434 2.19 3.15 1.76 90 TM2_M_URI_OPT_OUT 4292 2.00 3.05 1.52 91 XM_B_URI_Unicode 4095 2.31 2.91 2.04 92 MIME_QP_LONG_LINE 4075 4.30 2.90 4.94 93 DIET_1 4046 1.12 2.88 0.32 94 XM_CamelCaseFrm001 3821 2.16 2.72 1.90 95 XM_UB50 3780 1.51 2.69 0.97 96 XM_B_Unsub2 3773 1.78 2.68 1.37 97 XMBody_17 3724 1.23 2.65 0.58 98 XM_URI_RBL 3704 1.05 2.63 0.33 99 RELAYCOUNTRY_AU 3606 1.14 2.56 0.48 100 T_TooManySym_01 3470 5.29 2.47 6.57 101 ALL_TRUSTED 3376 11.89 2.40 16.21 102 FROM_EXCESS_BASE64 3239 1.72 2.30 1.46 103 TR_XM_NoHeaderRelay 3208 0.87 2.28 0.22 104 XM_B_SpammyWords4 3206 1.06 2.28 0.50 105 DKIM_ADSP_NXDOMAIN 3152 0.96 2.24 0.38 106 HTML_MIME_NO_HTML_TAG 3131 2.78 2.23 3.04 107 MAILING_LIST_MULTI 3118 2.91 2.22 3.23 108 HTML_IMAGE_ONLY_24 3065 0.95 2.18 0.39 109 T_FILL_THIS_FORM_SHORT 3025 1.39 2.15 1.05 110 SHORTCIRCUIT 2735 0.61 1.94 0.00 111 RCVD_IN_ZEN_LASTEXTERNAL 2735 0.61 1.94 0.00 112 USER_IN_DEF_DKIM_WL 2690 8.59 1.91 11.63 113 NO_DNS_FOR_FROM 2592 0.77 1.84 0.27 114 TR_XM_MaxWHORU 2578 0.73 1.83 0.23 115 XMGenDplmaNmb 2544 1.28 1.81 1.03 116 HK_RANDOM_REPLYTO 2530 0.63 1.80 0.10 117 XMBrknScrpt_02 2527 1.14 1.80 0.84 118 XMStockSpam_06 2488 1.40 1.77 1.24 119 XMPhish30 2475 0.92 1.76 0.54 120 BAYES_40 2451 4.43 1.74 5.66 121 KHOP_HELO_FCRDNS 2438 1.86 1.73 1.92 122 SpammyFromTLD_01 2393 1.21 1.70 0.98 123 RCVD_IN_VALIDITY_SAFE 2383 3.14 1.69 3.80 124 T_XMDrugObfuBody_00 2282 1.00 1.62 0.71 125 XM_SendGrid 2266 1.59 1.61 1.58 126 TR_XM_Base64_M1 2260 1.07 1.61 0.83 127 XM_B_COPY_HTML 2135 1.08 1.52 0.87 128 XMPhish14 2134 0.82 1.52 0.51 129 TR_XM_INV_DKIM 2111 0.61 1.50 0.20 130 BOTNET_NORDNS 2097 0.48 1.49 0.01 131 RCVD_IN_VALIDITY_CERTIFIED 2074 2.36 1.47 2.76 132 SUBJ_ALL_CAPS 2073 1.56 1.47 1.60 133 XM_B_COVIDMETA 2047 0.71 1.45 0.37 134 LongTLD 2015 0.75 1.43 0.44 135 XM_DK_Undo_01 1961 1.65 1.39 1.77 136 XM_B_SEO 1947 0.63 1.38 0.28 137 URI_HEX 1946 1.22 1.38 1.15 138 XM_OfRef7 1932 0.64 1.37 0.31 139 NORDNS_LOW_CONTRAST 1922 0.47 1.37 0.07 140 TR_LOTS_OF_MONEY3 1919 0.61 1.36 0.27 141 XMNoVowels 1883 1.49 1.34 1.56 142 XM_B_Phish66 1868 0.61 1.33 0.28 143 HTML_TAG_BALANCE_BODY 1829 0.87 1.30 0.67 144 BAYES_20 1822 3.25 1.29 4.15 145 T_MONEY_PERCENT 1763 0.59 1.25 0.29 146 TR_LOTS_OF_MONEY2 1763 0.59 1.25 0.29 147 MPART_ALT_DIFF_COUNT 1754 0.77 1.25 0.55 148 XM_B_REG_HTML 1705 0.56 1.21 0.26 149 RELAYCOUNTRY_GB 1663 0.73 1.18 0.52 150 TR_XM_SEO4 1650 0.44 1.17 0.11 151 RCVD_IN_PBL 1623 0.93 1.15 0.83 152 HOSTED_IMG_MULTI_PUB_01 1593 0.37 1.13 0.02 153 T_Symld_Words_02 1593 0.74 1.13 0.56 154 TR_XM_DK_SendGrid 1584 1.02 1.13 0.97 155 XM_UB99 1577 0.35 1.12 0.00 156 HTML_TITLE_SUBJ_DIFF 1571 0.38 1.12 0.04 157 TO_NO_BRKTS_HTML_ONLY 1558 0.93 1.11 0.85 158 TR_XM_PHPForged 1530 0.67 1.09 0.48 159 TR_XM_PHPDW 1529 0.67 1.09 0.48 160 RCVD_IN_IADB_LISTED 1529 2.75 1.09 3.51 161 RCVD_IN_SORBS_DUL 1523 0.39 1.08 0.07 162 XM_DIRTYINTL 1519 0.40 1.08 0.09 163 TR_XM_FormFill2 1489 0.66 1.06 0.48 164 HTTPS_HTTP_MISMATCH 1475 1.04 1.05 1.03 165 XM_H_PHPOS 1464 0.65 1.04 0.47 166 TR_XM_RelayPhish 1463 0.38 1.04 0.08 167 RELAYCOUNTRY_FR 1457 0.50 1.04 0.26 168 TM2_M_BODY_EMPTY 1450 0.69 1.03 0.54 169 STY_INVIS_DIRECT 1446 0.56 1.03 0.35 170 URI_NOVOWEL 1434 1.42 1.02 1.61 171 XMSubGiftCard1 1422 0.33 1.01 0.02 172 XMSubMetaI_00 1411 0.60 1.00 0.42 173 XMEmptyBody_01 1395 0.44 0.99 0.19 174 FONT_INVIS_LONG_LINE 1394 0.44 0.99 0.19 175 XMBdyGiftCard01 1375 0.74 0.98 0.63 176 URI_TRY_3LD 1364 0.67 0.97 0.54 177 XM_H_Long_From02 1361 1.01 0.97 1.02 178 TR_Symld_Words 1360 1.53 0.97 1.78 179 RCVD_IN_IADB_SPF 1329 2.42 0.94 3.10 180 XMBody_78 1328 0.45 0.94 0.22 181 SHOPIFY_IMG_NOT_RCVD_SFY 1326 0.44 0.94 0.21 182 XMHTML_After_End 1322 0.55 0.94 0.38 183 TM2_M_OBFU_COMMENT 1322 0.54 0.94 0.36 184 XMMoneyMeta_00 1315 0.65 0.93 0.52 185 DKIM_ADSP_CUSTOM_MED 1313 0.96 0.93 0.97 186 XM_RXBody 1255 0.36 0.89 0.12 187 RCVD_IN_IADB_DK 1248 2.14 0.89 2.70 188 RCVD_IN_IADB_SENDERID 1242 2.18 0.88 2.78 189 SUBJ_DOLLARS 1240 0.39 0.88 0.17 190 HTML_FONT_FACE_BAD 1237 0.58 0.88 0.44 191 XMSexyCombo_01 1214 0.35 0.86 0.12 192 RDNS_DYNAMIC 1204 0.50 0.86 0.35 193 XM_HighProb1 1183 0.27 0.84 0.01 194 TR_MetaPhish_Combo_01 1180 0.72 0.84 0.66 195 XMSlimDrugH 1180 0.81 0.84 0.80 196 XM_UB999 1170 0.26 0.83 0.00 197 PDS_RDNS_DYNAMIC_FP 1157 0.40 0.82 0.21 198 BAYES_00 1149 8.62 0.82 12.18 199 XMReplyNow 1148 0.47 0.82 0.32 200 XM_PDF 1146 3.87 0.81 5.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 267946 89.23 94.53 86.81 2 RELAYCOUNTRY_US 249185 81.12 81.98 80.73 3 DKIM_SIGNED 230474 78.38 86.53 74.67 4 XM_DK_Pass 225251 75.99 82.59 72.98 5 DKIM_VALID 221188 74.79 81.65 71.66 6 XM_B_Unicode 211115 72.91 82.80 68.40 7 DCC_CHECK_NEGATIVE 195726 51.29 24.68 63.41 8 BAYES_50 186857 54.06 39.84 60.54 9 DKIM_VALID_AU 177113 59.34 63.62 57.38 10 XMListUnsubscribeExists 141658 52.87 68.18 45.89 11 XM_B_SpammyWords 132984 51.47 69.87 43.08 12 XM_B_Unicode3 120185 41.67 47.66 38.94 13 DCC_CHECK 112746 48.05 73.34 36.53 14 RCVD_IN_MSPIKE_H2 109085 36.10 37.78 35.34 15 T_TM2_M_HEADER_IN_MSG 98292 28.91 22.46 31.84 16 DKIM_VALID_EF 94695 30.18 29.08 30.68 17 HTML_FONT_LOW_CONTRAST 79350 29.14 36.68 25.71 18 LOC_TINY_FONT_1 78340 32.20 47.17 25.38 19 FVGT_m_MULTI_ODD 76988 26.79 30.85 24.94 20 XMSubLong 73242 23.52 23.07 23.73 21 MIME_HTML_ONLY 63433 23.90 31.25 20.55 22 T_KAM_HTML_FONT_INVALID 63080 23.62 30.61 20.44 23 XM_B_SpammyWords2 54358 24.71 40.30 17.61 24 ALL_TRUSTED 50042 11.89 2.40 16.21 25 TR_XM_DK_Unsub 39641 15.17 20.29 12.84 26 BAYES_00 37599 8.62 0.82 12.18 27 XM_Multi_Part_URI 37258 14.40 19.52 12.07 28 UNPARSEABLE_RELAY 36909 13.41 16.61 11.96 29 USER_IN_DEF_DKIM_WL 35909 8.59 1.91 11.63 30 XM_B_PhoneNumber 32965 9.06 5.50 10.68 31 TooManyTo_001 29638 7.89 4.14 9.60 32 XM_B_Unsub 28006 11.58 17.09 9.07 33 XM_Evil_Numbers_Gen 26656 8.82 9.22 8.64 34 LotsOfNums_01 24371 7.62 7.01 7.90 35 TR_XM_DK_Bayes 23634 5.47 0.69 7.66 36 TR_XM_DK_Bayes1 23111 5.35 0.68 7.49 37 IN_ZIMBRA_NJ_WHITELIST 22204 4.97 0.11 7.19 38 FSL_BULK_SIG 21694 7.52 8.58 7.03 39 T_TooManySym_01 20290 5.29 2.47 6.57 40 XM_DKIMWhitelistDomains 20123 4.66 0.59 6.52 41 TR_XM_BayesUnsub 20106 9.59 16.33 6.51 42 LOTS_OF_MONEY 20102 8.59 13.15 6.51 43 TR_XM_DK_Bayes2 19555 4.53 0.56 6.34 44 BAYES_60 19320 6.98 8.57 6.26 45 XM_H_GMP 18969 5.72 4.77 6.15 46 BAYES_40 17472 4.43 1.74 5.66 47 TR_MAX_INTL_RELAY 17432 8.71 15.44 5.65 48 XM_H_Long_From01 16807 5.43 5.39 5.45 49 XM_PDF 16235 3.87 0.81 5.26 50 RCVD_IN_MSPIKE_WL 15989 4.90 4.28 5.18 51 RCVD_IN_MSPIKE_H3 15988 4.90 4.28 5.18 52 MIME_QP_LONG_LINE 15249 4.30 2.90 4.94 53 XMStrtUSub 15246 4.78 4.42 4.94 54 XM_B_Phish_Phrases 14870 5.73 7.72 4.82 55 XM_B_SpammyWords3 14700 7.82 14.52 4.76 56 HTML_IMAGE_RATIO_02 14400 5.36 6.89 4.67 57 XM_UncommonTLD01 13822 5.84 8.84 4.48 58 TR_XM_SpammyWords4 13419 6.66 11.72 4.35 59 XM_DK_Undo_02 13285 14.59 37.14 4.30 60 BAYES_20 12798 3.25 1.29 4.15 61 MPART_ALT_DIFF 12125 4.72 6.47 3.93 62 XMSubMetaSx_00 11930 4.84 6.97 3.87 63 RELAYCOUNTRY_META 11874 7.60 15.85 3.85 64 RCVD_IN_VALIDITY_SAFE 11737 3.14 1.69 3.80 65 T_REMOTE_IMAGE 11511 3.67 3.54 3.73 66 TooManyTo_002 10887 2.65 0.71 3.53 67 RCVD_IN_IADB_LISTED 10842 2.75 1.09 3.51 68 HTML_IMAGE_RATIO_04 10771 3.74 4.27 3.49 69 BAYES_80 10487 5.35 9.64 3.40 70 ANY_BOUNCE_MESSAGE 10379 2.51 0.65 3.36 71 BOUNCE_MESSAGE 10376 2.51 0.65 3.36 72 XMNumbers 10270 3.34 3.38 3.33 73 MAILING_LIST_MULTI 9969 2.91 2.22 3.23 74 T_TooManySym_02 9603 2.33 0.63 3.11 75 RCVD_IN_IADB_SPF 9558 2.42 0.94 3.10 76 HTML_MIME_NO_HTML_TAG 9376 2.78 2.23 3.04 77 BAYES_99 9373 11.46 29.94 3.04 78 DKIM_INVALID 9286 3.59 4.88 3.01 79 BOTNET_IPINHOSTNAME 9149 5.12 9.83 2.96 80 RCVD_IN_IADB_SENDERID 8575 2.18 0.88 2.78 81 RCVD_IN_VALIDITY_CERTIFIED 8517 2.36 1.47 2.76 82 RCVD_IN_IADB_DK 8346 2.14 0.89 2.70 83 HTML_IMAGE_RATIO_06 8010 2.93 3.67 2.60 84 BAYES_05 7814 1.95 0.69 2.53 85 XM_B_SpammyTLD 7775 3.01 4.09 2.52 86 MIME_HTML_ONLY_MULTI 7255 2.70 3.48 2.35 87 INVALID_MSGID 7207 1.65 0.15 2.33 88 RCVD_IN_IADB_VOUCHED 7044 1.74 0.56 2.28 89 BAYES_95 6939 3.27 5.53 2.25 90 BAYES_999 6916 8.71 22.90 2.24 91 XM_Body_Dirty_Words 6754 3.82 7.40 2.19 92 HTML_IMAGE_RATIO_08 6512 2.65 3.84 2.11 93 T_XMDrugObfuBody_14 6290 2.67 4.07 2.04 94 XM_B_URI_Unicode 6283 2.31 2.91 2.04 95 TO_MALFORMED 6204 1.38 0.01 2.01 96 MIME_HTML_MOSTLY 6166 2.48 3.55 2.00 97 TooManyTo_003 6101 1.55 0.63 1.98 98 KHOP_HELO_FCRDNS 5932 1.86 1.73 1.92 99 XMDiploma_00 5917 2.30 3.16 1.92 100 XM_CamelCaseFrm001 5876 2.16 2.72 1.90 101 TR_XM_SpammyRelay 5840 5.00 11.81 1.89 102 XMSexyCombo_05 5675 2.96 5.41 1.84 103 TR_Symld_Words 5498 1.53 0.97 1.78 104 XM_DK_Undo_01 5454 1.65 1.39 1.77 105 XM_SPF_SoftFail 5425 2.19 3.15 1.76 106 XM_B_Investor 5209 2.67 4.82 1.69 107 TR_XM_PhishingBody 5047 2.83 5.47 1.64 108 TR_XM_DKIM_Undo 5030 9.40 26.44 1.63 109 URI_NOVOWEL 4968 1.42 1.02 1.61 110 SUBJ_ALL_CAPS 4951 1.56 1.47 1.60 111 RCVD_IN_IADB_OPTIN 4900 1.20 0.35 1.59 112 T_XMDrugObfuBody_08 4895 2.10 3.23 1.59 113 XM_SendGrid 4866 1.59 1.61 1.58 114 XMNoVowels 4810 1.49 1.34 1.56 115 TR_XM_UnparsRelay 4690 3.65 8.34 1.52 116 TM2_M_URI_OPT_OUT 4677 2.00 3.05 1.52 117 TooManyTo_004 4658 1.21 0.57 1.51 118 UNTRUSTED_Relay 4630 2.86 5.83 1.50 119 IN_HORDE_ADDRESS_BOOK 4628 1.06 0.11 1.50 120 TM2_M_VERY_LONG_WORD 4578 2.15 3.60 1.48 121 FROM_EXCESS_BASE64 4506 1.72 2.30 1.46 122 HELO_NODOT 4505 1.11 0.33 1.46 123 HELO_NO_DOMAIN 4501 1.11 0.33 1.46 124 TR_XM_SpammyWords5 4497 2.05 3.34 1.46 125 XM_B_Unsub2 4231 1.78 2.68 1.37 126 XMCapTrack 4229 1.10 0.52 1.37 127 BOTNET 4193 4.01 9.81 1.36 128 T_TooManySym_03 3938 0.92 0.14 1.28 129 TooManyTo_005 3933 1.03 0.49 1.27 130 XM_GoogleGroups 3898 1.12 0.81 1.26 131 XMStockSpam_06 3813 1.40 1.77 1.24 132 XM_OfRef6 3732 2.19 4.33 1.21 133 RELAYCOUNTRY_CA 3732 2.69 5.95 1.21 134 URI_HEX 3550 1.22 1.38 1.15 135 XMGappySubj_01 3422 0.82 0.18 1.11 136 TVD_SPACE_RATIO 3244 0.84 0.37 1.05 137 T_FILL_THIS_FORM_SHORT 3230 1.39 2.15 1.05 138 XMGenDplmaNmb 3186 1.28 1.81 1.03 139 HTTPS_HTTP_MISMATCH 3178 1.04 1.05 1.03 140 XM_H_Long_From02 3157 1.01 0.97 1.02 141 SpammyFromTLD_01 3033 1.21 1.70 0.98 142 HTML_IMAGE_ONLY_32 2994 0.84 0.56 0.97 143 TR_XM_DK_SendGrid 2993 1.02 1.13 0.97 144 XM_UB50 2989 1.51 2.69 0.97 145 DKIM_ADSP_CUSTOM_MED 2986 0.96 0.93 0.97 146 XM_ShortIntro_01 2886 0.80 0.50 0.94 147 XMSubMetaSxObfu_03 2774 0.79 0.54 0.90 148 TR_DCC_Bayes_99 2716 7.25 21.22 0.88 149 XM_B_COPY_HTML 2697 1.08 1.52 0.87 150 TO_NO_BRKTS_HTML_ONLY 2622 0.93 1.11 0.85 151 XMBrknScrpt_02 2595 1.14 1.80 0.84 152 RCVD_IN_PBL 2575 0.93 1.15 0.83 153 XM_H_PHPMailer 2572 0.79 0.70 0.83 154 TR_XM_Base64_M1 2552 1.07 1.61 0.83 155 XMSlimDrugH 2480 0.81 0.84 0.80 156 XM_B_FormFill 2383 0.54 0.03 0.77 157 HTML_IMAGE_ONLY_20 2371 0.68 0.49 0.77 158 T_OBFU_PDF_ATTACH 2266 0.58 0.23 0.73 159 TVD_RCVD_IP 2261 0.72 0.69 0.73 160 XMGappySubj_02 2194 0.52 0.09 0.71 161 T_XMDrugObfuBody_00 2191 1.00 1.62 0.71 162 HTML_TAG_BALANCE_BODY 2071 0.87 1.30 0.67 163 FROM_GOV_DKIM_AU 2067 0.53 0.22 0.67 164 TR_MetaPhish_Combo_01 2037 0.72 0.84 0.66 165 MISSING_HEADERS 2027 0.62 0.55 0.66 166 XMBody_95 2024 0.51 0.20 0.66 167 NML_ADSP_CUSTOM_MED 2007 0.68 0.73 0.65 168 XMSubMetaSx_01 1946 0.51 0.25 0.63 169 XMBdyGiftCard01 1940 0.74 0.98 0.63 170 T_TVD_MIME_NO_HEADERS 1904 0.43 0.03 0.62 171 FROM_GOV_SPOOF 1880 0.46 0.14 0.61 172 MSGID_FROM_MTA_HEADER 1859 0.43 0.06 0.60 173 XMBody_17 1802 1.23 2.65 0.58 174 XMLngstWrd_00 1788 0.51 0.37 0.58 175 FORGED_GMAIL_RCVD 1770 0.59 0.63 0.57 176 T_Symld_Words_02 1742 0.74 1.13 0.56 177 XM_S_SpammyWords 1714 0.64 0.81 0.56 178 TR_XM_Spammywords 1714 0.64 0.81 0.56 179 MPART_ALT_DIFF_COUNT 1706 0.77 1.25 0.55 180 T_XMHurry_00 1677 1.40 3.27 0.54 181 XMPhish30 1666 0.92 1.76 0.54 182 URI_TRY_3LD 1656 0.67 0.97 0.54 183 TM2_M_BODY_EMPTY 1655 0.69 1.03 0.54 184 RCVD_IN_BL_SPAMCOP_NET 1637 3.94 11.43 0.53 185 XMhairloss01 1613 0.38 0.07 0.52 186 RELAYCOUNTRY_GB 1606 0.73 1.18 0.52 187 XMMoneyMeta_00 1603 0.65 0.93 0.52 188 XMPhish14 1567 0.82 1.52 0.51 189 TRACKER_ID 1543 0.37 0.08 0.50 190 RCVD_IN_PSBL 1542 1.60 4.02 0.50 191 XM_B_SpammyWords4 1542 1.06 2.28 0.50 192 RELAYCOUNTRY_AU 1495 1.14 2.56 0.48 193 TR_XM_FormFill2 1488 0.66 1.06 0.48 194 TR_XM_PHPForged 1481 0.67 1.09 0.48 195 TR_XM_PHPDW 1479 0.67 1.09 0.48 196 XM_ProductURIs 1451 0.58 0.81 0.47 197 XM_H_PHPOS 1445 0.65 1.04 0.47 198 FILL_THIS_FORM 1444 0.38 0.20 0.47 199 XMLngstWrd_01 1413 0.42 0.32 0.46 200 XMDateMe_00 1378 0.41 0.34 0.45 ----------------------------------------------------------------------