Email: 492710 Autolearn: 0 AvgScore: 4.50 AvgScanTime: 1.42 sec Spam: 153878 Autolearn: 0 AvgScore: 14.99 AvgScanTime: 1.59 sec Ham: 338832 Autolearn: 0 AvgScore: -0.26 AvgScanTime: 1.35 sec Time Spent Running SA: 194.97 hours Time Spent Processing Spam: 67.78 hours Time Spent Processing Ham: 127.19 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146821 89.98 95.41 87.52 2 DKIM_SIGNED 138626 80.56 90.09 76.24 3 XM_DK_Pass 132357 78.24 86.01 74.70 4 DKIM_VALID 130456 77.07 84.78 73.57 5 XM_B_Unicode 129004 74.66 83.84 70.50 6 RELAYCOUNTRY_US 128500 82.31 83.51 81.77 7 DCC_CHECK 115326 50.38 74.95 39.22 8 XM_B_SpammyWords 109717 53.43 71.30 45.31 9 XMListUnsubscribeExists 107217 54.56 69.68 47.69 10 DKIM_VALID_AU 101488 60.98 65.95 58.72 11 XM_B_Unicode3 76918 43.34 49.99 40.32 12 LOC_TINY_FONT_1 73318 33.65 47.65 27.30 13 XM_B_SpammyWords2 66059 26.30 42.93 18.75 14 BAYES_50 62918 54.09 40.89 60.08 15 XM_DK_Undo_02 60984 15.46 39.63 4.48 16 RCVD_IN_MSPIKE_H2 59673 36.40 38.78 35.32 17 HTML_FONT_LOW_CONTRAST 57428 29.44 37.32 25.87 18 FVGT_m_MULTI_ODD 51123 27.22 33.22 24.50 19 T_KAM_HTML_FONT_INVALID 47779 24.55 31.05 21.60 20 BAYES_99 45903 11.36 29.83 2.97 21 DKIM_VALID_EF 45633 29.75 29.66 29.80 22 MIME_HTML_ONLY 43778 23.02 28.45 20.55 23 TR_XM_DKIM_Undo 43775 10.28 28.45 2.03 24 XMSubLong 37759 23.08 24.54 22.41 25 DCC_CHECK_NEGATIVE 35636 48.99 23.16 60.73 26 T_TM2_M_HEADER_IN_MSG 35317 27.25 22.95 29.20 27 BAYES_999 35218 8.64 22.89 2.17 28 TR_DCC_Bayes_99 33455 7.51 21.74 1.05 29 XM_Multi_Part_URI 31998 15.02 20.79 12.40 30 TR_XM_DK_Unsub 31872 14.96 20.71 12.35 31 XM_B_Unsub 26923 12.34 17.50 9.99 32 UNPARSEABLE_RELAY 26256 13.59 17.06 12.01 33 TR_XM_BayesUnsub 25925 10.15 16.85 7.11 34 XM_B_SpammyWords3 24363 7.96 15.83 4.38 35 RELAYCOUNTRY_META 23561 7.56 15.31 4.05 36 TR_MAX_INTL_RELAY 23115 8.43 15.02 5.44 37 LOTS_OF_MONEY 22171 8.72 14.41 6.14 38 TR_XM_SpammyWords4 19863 6.88 12.91 4.14 39 TR_XM_SpammyWords2 18649 4.05 12.12 0.39 40 TR_XM_SpammyRelay 17929 5.13 11.65 2.17 41 RCVD_IN_BL_SPAMCOP_NET 16828 3.87 10.94 0.66 42 BOTNET_IPINHOSTNAME 16232 5.51 10.55 3.23 43 XM_Evil_Numbers_Gen 14671 9.06 9.53 8.84 44 BAYES_80 14335 5.20 9.32 3.34 45 FSL_BULK_SIG 13805 8.07 8.97 7.66 46 BOTNET 13367 3.75 8.69 1.51 47 BAYES_60 13050 7.18 8.48 6.59 48 TR_XM_SPAMCOP 12925 2.94 8.40 0.46 49 LotsOfNums_01 12640 8.23 8.21 8.24 50 XM_B_Phish_Phrases 12477 6.66 8.11 6.00 51 TR_XM_UnparsRelay 12389 3.60 8.05 1.59 52 XM_Body_Dirty_Words 11708 4.33 7.61 2.83 53 HTML_IMAGE_RATIO_02 10766 5.18 7.00 4.35 54 XM_UncommonTLD01 10555 4.89 6.86 3.99 55 XM_B_PhoneNumber 10196 9.17 6.63 10.33 56 XMSubMetaSx_00 9344 5.03 6.07 4.56 57 MPART_ALT_DIFF 9330 5.08 6.06 4.63 58 RELAYCOUNTRY_CA 9164 2.70 5.96 1.22 59 XM_H_GMP 8712 5.79 5.66 5.85 60 XM_B_Investor 8491 2.86 5.52 1.65 61 BAYES_95 8356 3.14 5.43 2.10 62 XMStrtUSub 8242 5.30 5.36 5.27 63 DKIM_INVALID 8170 3.49 5.31 2.66 64 UNTRUSTED_Relay 8123 2.69 5.28 1.51 65 XM_H_Long_From01 7922 5.69 5.15 5.93 66 XM_OfRef6 7845 2.37 5.10 1.13 67 HTML_IMAGE_RATIO_04 7344 4.40 4.77 4.23 68 RCVD_IN_MSPIKE_H3 6793 5.18 4.41 5.52 69 RCVD_IN_MSPIKE_WL 6793 5.18 4.41 5.52 70 TR_XM_SpammyWords5 6593 2.28 4.28 1.38 71 TR_XM_PhishingBody 6507 2.49 4.23 1.69 72 T_XMDrugObfuBody_14 6255 2.42 4.06 1.68 73 XMNumbers 5949 3.24 3.87 2.95 74 XM_B_SpammyTLD 5887 3.03 3.83 2.67 75 MIME_HTML_MOSTLY 5829 2.59 3.79 2.05 76 XMSexyCombo_05 5651 2.41 3.67 1.84 77 TM2_M_VERY_LONG_WORD 5528 1.98 3.59 1.25 78 RCVD_IN_VALIDITY_RPBL 5514 1.24 3.58 0.18 79 TM2_M_URI_OPT_OUT 5405 2.25 3.51 1.68 80 MIME_HTML_ONLY_MULTI 5327 3.02 3.46 2.83 81 TooManyTo_001 5327 7.26 3.46 8.99 82 MIME_QP_LONG_LINE 5312 4.78 3.45 5.38 83 HTML_IMAGE_RATIO_06 5214 3.56 3.39 3.63 84 HTML_IMAGE_RATIO_08 5160 2.69 3.35 2.40 85 XM_SPF_SoftFail 5053 2.14 3.28 1.62 86 XMDiploma_00 4700 2.29 3.05 1.94 87 SpammyFromTLD_02 4693 1.27 3.05 0.47 88 XM_B_Unsub2 4450 2.23 2.89 1.94 89 XM_CamelCaseFrm001 4333 2.63 2.82 2.54 90 XM_B_URI_Unicode 4262 2.22 2.77 1.98 91 XM_UB50 4209 1.51 2.74 0.95 92 XM_URI_RBL 4184 1.12 2.72 0.39 93 T_XMDrugObfuBody_08 4097 1.84 2.66 1.47 94 RELAYCOUNTRY_AU 3950 1.28 2.57 0.69 95 T_XMHurry_00 3862 1.20 2.51 0.61 96 XM_H_Long_From02 3690 1.46 2.40 1.04 97 XMBody_17 3682 1.07 2.39 0.47 98 SUBJ_ALL_CAPS 3633 1.77 2.36 1.51 99 MAILING_LIST_MULTI 3546 2.61 2.30 2.75 100 RCVD_IN_PSBL 3467 0.99 2.25 0.42 101 FROM_EXCESS_BASE64 3450 2.01 2.24 1.91 102 XM_B_SpammyWords4 3398 1.31 2.21 0.90 103 T_REMOTE_IMAGE 3344 3.28 2.17 3.78 104 XMGenDplmaNmb 3317 1.36 2.16 1.00 105 TR_XM_NoHeaderRelay 3294 0.88 2.14 0.31 106 USER_IN_DEF_DKIM_WL 3253 9.17 2.11 12.38 107 T_TooManySym_01 3208 4.72 2.08 5.91 108 T_FILL_THIS_FORM_SHORT 3094 1.51 2.01 1.28 109 XMNoVowels 3014 1.93 1.96 1.92 110 RCVD_IN_VALIDITY_SAFE 2970 3.20 1.93 3.77 111 XM_OfRef7 2864 0.77 1.86 0.28 112 SHORTCIRCUIT 2863 0.58 1.86 0.00 113 RCVD_IN_ZEN_LASTEXTERNAL 2863 0.58 1.86 0.00 114 TR_LOTS_OF_MONEY2 2835 0.74 1.84 0.23 115 T_MONEY_PERCENT 2835 0.74 1.84 0.23 116 DKIM_ADSP_NXDOMAIN 2758 0.76 1.79 0.29 117 XM_H_Undi_Recip 2754 0.70 1.79 0.20 118 XM_SendGrid 2687 1.57 1.75 1.50 119 NO_DNS_FOR_FROM 2685 0.73 1.74 0.28 120 XMStockSpam_06 2666 1.34 1.73 1.17 121 TR_XM_MaxWHORU 2664 0.69 1.73 0.22 122 TR_XM_INV_DKIM 2661 0.69 1.73 0.22 123 HOSTED_IMG_MULTI_PUB_01 2607 0.55 1.69 0.03 124 HTML_MIME_NO_HTML_TAG 2504 2.11 1.63 2.33 125 BAYES_40 2494 4.28 1.62 5.49 126 TR_LOTS_OF_MONEY3 2425 0.77 1.58 0.41 127 SpammyFromTLD_01 2407 1.10 1.56 0.89 128 XMBrknScrpt_02 2391 1.08 1.55 0.87 129 XM_DK_Undo_01 2385 1.67 1.55 1.72 130 T_XMDrugObfuBody_00 2363 0.89 1.54 0.59 131 XM_B_SEO 2333 0.68 1.52 0.30 132 DIET_1 2308 0.65 1.50 0.27 133 RCVD_IN_IADB_LISTED 2264 3.08 1.47 3.81 134 KHOP_HELO_FCRDNS 2168 1.57 1.41 1.64 135 XM_B_COVIDMETA 2168 0.60 1.41 0.24 136 RELAYCOUNTRY_GB 2159 0.82 1.40 0.56 137 NORDNS_LOW_CONTRAST 2145 0.48 1.39 0.06 138 XMPhish30 2138 0.80 1.39 0.54 139 TR_XM_Undi_Recip19 2127 0.49 1.38 0.08 140 URI_HEX 2123 1.29 1.38 1.26 141 TR_XM_Undi_Recip11 2105 0.46 1.37 0.05 142 XMMoneyMeta_00 2102 0.89 1.37 0.68 143 TR_XM_SEO4 2101 0.51 1.37 0.12 144 XM_B_COPY_HTML 2098 1.00 1.36 0.84 145 RCVD_IN_IADB_SPF 2057 2.70 1.34 3.31 146 LongTLD 2048 0.76 1.33 0.50 147 TR_XM_Undi_RecipCombo2 2038 0.42 1.32 0.01 148 MPART_ALT_DIFF_COUNT 1987 0.80 1.29 0.58 149 UNDISC_MONEY 1966 0.40 1.28 0.00 150 RCVD_IN_IADB_SENDERID 1965 2.42 1.28 2.94 151 RCVD_IN_IADB_DK 1950 2.35 1.27 2.84 152 TR_XM_Undi_Recip5 1946 0.40 1.26 0.00 153 ALL_TRUSTED 1924 10.62 1.25 14.88 154 HTML_TAG_BALANCE_BODY 1900 0.83 1.23 0.64 155 STY_INVIS_DIRECT 1879 0.59 1.22 0.31 156 RCVD_IN_VALIDITY_CERTIFIED 1875 2.31 1.22 2.81 157 BAYES_20 1871 3.21 1.22 4.11 158 XM_B_Phish66 1864 0.60 1.21 0.33 159 TR_Symld_Words 1849 1.43 1.20 1.54 160 TR_XM_DK_SendGrid 1811 1.05 1.18 0.99 161 HTTPS_HTTP_MISMATCH 1793 1.03 1.17 0.96 162 URI_TRY_3LD 1791 0.67 1.16 0.45 163 XMBdyGiftCard01 1771 0.65 1.15 0.42 164 TR_XM_Base64_M1 1727 0.86 1.12 0.74 165 DKIM_ADSP_CUSTOM_MED 1713 0.94 1.11 0.86 166 XMSubMetaI_00 1687 0.65 1.10 0.45 167 SHOPIFY_IMG_NOT_RCVD_SFY 1619 0.49 1.05 0.23 168 T_Symld_Words_02 1614 0.81 1.05 0.71 169 RELAYCOUNTRY_FR 1612 0.52 1.05 0.27 170 URI_NOVOWEL 1588 1.45 1.03 1.64 171 RCVD_IN_PBL 1581 0.85 1.03 0.77 172 TR_XM_Undi_RecipCombo3 1570 0.32 1.02 0.00 173 XM_ProductURIs 1559 0.74 1.01 0.62 174 XM_B_DNDMA 1545 0.57 1.00 0.38 175 XMBody_78 1544 0.56 1.00 0.35 176 XM_DIRTYINTL 1524 0.40 0.99 0.13 177 HTML_IMAGE_ONLY_16 1513 0.51 0.98 0.29 178 RCVD_IN_SORBS_DUL 1507 0.34 0.98 0.05 179 FONT_INVIS_LONG_LINE 1498 0.35 0.97 0.07 180 TR_Mismatch_TLD_02 1482 0.36 0.96 0.09 181 XM_HighProb1 1453 0.30 0.94 0.01 182 TR_XM_PHPForged 1442 0.52 0.94 0.34 183 TR_XM_PHPDW 1436 0.52 0.93 0.33 184 XMHTML_After_End 1433 0.52 0.93 0.33 185 TR_Caps_n_Bayes_99 1403 0.31 0.91 0.03 186 TR_XM_FormFill2 1399 0.52 0.91 0.34 187 BOTNET_NORDNS 1392 0.29 0.90 0.01 188 XMReplyNow 1385 0.44 0.90 0.23 189 TR_MetaPhish_Combo_01 1381 0.87 0.90 0.85 190 XM_H_PHPOS 1359 0.50 0.88 0.33 191 XM_UB99 1351 0.28 0.88 0.00 192 TM2_M_OBFU_COMMENT 1345 0.44 0.87 0.25 193 NML_ADSP_CUSTOM_MED 1340 0.66 0.87 0.57 194 XM_GoogleGroups 1326 1.09 0.86 1.20 195 TR_XM_RelayPhish 1284 0.33 0.83 0.10 196 XMSexyCombo_01 1256 0.39 0.82 0.19 197 TR_XM_Undi_Recip6 1247 0.25 0.81 0.00 198 URIBL_BLACK 1246 0.29 0.81 0.06 199 TR_XM_InvalidRelay 1244 0.26 0.81 0.01 200 HTML_FONT_FACE_BAD 1233 0.57 0.80 0.47 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 296533 89.98 95.41 87.52 2 RELAYCOUNTRY_US 277047 82.31 83.51 81.77 3 DKIM_SIGNED 258310 80.56 90.09 76.24 4 XM_DK_Pass 253123 78.24 86.01 74.70 5 DKIM_VALID 249290 77.07 84.78 73.57 6 XM_B_Unicode 238875 74.66 83.84 70.50 7 DCC_CHECK_NEGATIVE 205765 48.99 23.16 60.73 8 BAYES_50 203583 54.09 40.89 60.08 9 DKIM_VALID_AU 198976 60.98 65.95 58.72 10 XMListUnsubscribeExists 161603 54.56 69.68 47.69 11 XM_B_SpammyWords 153526 53.43 71.30 45.31 12 XM_B_Unicode3 136634 43.34 49.99 40.32 13 DCC_CHECK 132884 50.38 74.95 39.22 14 RCVD_IN_MSPIKE_H2 119670 36.40 38.78 35.32 15 DKIM_VALID_EF 100961 29.75 29.66 29.80 16 T_TM2_M_HEADER_IN_MSG 98948 27.25 22.95 29.20 17 LOC_TINY_FONT_1 92494 33.65 47.65 27.30 18 HTML_FONT_LOW_CONTRAST 87641 29.44 37.32 25.87 19 FVGT_m_MULTI_ODD 83012 27.22 33.22 24.50 20 XMSubLong 75942 23.08 24.54 22.41 21 T_KAM_HTML_FONT_INVALID 73171 24.55 31.05 21.60 22 MIME_HTML_ONLY 69621 23.02 28.45 20.55 23 XM_B_SpammyWords2 63545 26.30 42.93 18.75 24 ALL_TRUSTED 50422 10.62 1.25 14.88 25 BAYES_00 43520 9.04 0.68 12.84 26 XM_Multi_Part_URI 42002 15.02 20.79 12.40 27 USER_IN_DEF_DKIM_WL 41934 9.17 2.11 12.38 28 TR_XM_DK_Unsub 41850 14.96 20.71 12.35 29 UNPARSEABLE_RELAY 40698 13.59 17.06 12.01 30 XM_B_PhoneNumber 34999 9.17 6.63 10.33 31 XM_B_Unsub 33856 12.34 17.50 9.99 32 TooManyTo_001 30463 7.26 3.46 8.99 33 XM_Evil_Numbers_Gen 29948 9.06 9.53 8.84 34 LotsOfNums_01 27911 8.23 8.21 8.24 35 TR_XM_DK_Bayes 27644 5.78 0.56 8.16 36 TR_XM_DK_Bayes1 27147 5.68 0.55 8.01 37 FSL_BULK_SIG 25958 8.07 8.97 7.66 38 IN_ZIMBRA_NJ_WHITELIST 24420 4.99 0.12 7.21 39 TR_XM_BayesUnsub 24093 10.15 16.85 7.11 40 XM_DKIMWhitelistDomains 23356 4.75 0.04 6.89 41 TR_XM_DK_Bayes2 23168 4.84 0.43 6.84 42 BAYES_60 22313 7.18 8.48 6.59 43 LOTS_OF_MONEY 20803 8.72 14.41 6.14 44 XM_B_Phish_Phrases 20316 6.66 8.11 6.00 45 XM_H_Long_From01 20106 5.69 5.15 5.93 46 T_TooManySym_01 20041 4.72 2.08 5.91 47 XM_H_GMP 19814 5.79 5.66 5.85 48 RCVD_IN_MSPIKE_WL 18706 5.18 4.41 5.52 49 RCVD_IN_MSPIKE_H3 18706 5.18 4.41 5.52 50 BAYES_40 18590 4.28 1.62 5.49 51 TR_MAX_INTL_RELAY 18435 8.43 15.02 5.44 52 MIME_QP_LONG_LINE 18226 4.78 3.45 5.38 53 XMStrtUSub 17854 5.30 5.36 5.27 54 XM_PDF 16943 3.65 0.68 5.00 55 MPART_ALT_DIFF 15688 5.08 6.06 4.63 56 XMSubMetaSx_00 15459 5.03 6.07 4.56 57 XM_DK_Undo_02 15168 15.46 39.63 4.48 58 XM_B_SpammyWords3 14835 7.96 15.83 4.38 59 HTML_IMAGE_RATIO_02 14754 5.18 7.00 4.35 60 HTML_IMAGE_RATIO_04 14326 4.40 4.77 4.23 61 TR_XM_SpammyWords4 14015 6.88 12.91 4.14 62 BAYES_20 13937 3.21 1.22 4.11 63 RELAYCOUNTRY_META 13708 7.56 15.31 4.05 64 XM_UncommonTLD01 13525 4.89 6.86 3.99 65 RCVD_IN_IADB_LISTED 12917 3.08 1.47 3.81 66 T_REMOTE_IMAGE 12814 3.28 2.17 3.78 67 RCVD_IN_VALIDITY_SAFE 12784 3.20 1.93 3.77 68 HTML_IMAGE_RATIO_06 12306 3.56 3.39 3.63 69 BAYES_80 11309 5.20 9.32 3.34 70 RCVD_IN_IADB_SPF 11227 2.70 1.34 3.31 71 BOTNET_IPINHOSTNAME 10928 5.51 10.55 3.23 72 TooManyTo_002 10822 2.40 0.64 3.19 73 ANY_BOUNCE_MESSAGE 10642 2.33 0.54 3.14 74 BOUNCE_MESSAGE 10640 2.33 0.54 3.14 75 BAYES_99 10071 11.36 29.83 2.97 76 XMNumbers 9991 3.24 3.87 2.95 77 RCVD_IN_IADB_SENDERID 9978 2.42 1.28 2.94 78 RCVD_IN_IADB_DK 9623 2.35 1.27 2.84 79 XM_Body_Dirty_Words 9603 4.33 7.61 2.83 80 MIME_HTML_ONLY_MULTI 9573 3.02 3.46 2.83 81 T_TooManySym_02 9535 2.13 0.63 2.81 82 RCVD_IN_VALIDITY_CERTIFIED 9524 2.31 1.22 2.81 83 MAILING_LIST_MULTI 9318 2.61 2.30 2.75 84 XM_B_SpammyTLD 9054 3.03 3.83 2.67 85 DKIM_INVALID 9020 3.49 5.31 2.66 86 RCVD_IN_IADB_VOUCHED 8755 1.96 0.59 2.58 87 XM_CamelCaseFrm001 8607 2.63 2.82 2.54 88 BAYES_05 8392 1.91 0.68 2.48 89 HTML_IMAGE_RATIO_08 8116 2.69 3.35 2.40 90 HTML_MIME_NO_HTML_TAG 7908 2.11 1.63 2.33 91 INVALID_MSGID 7395 1.57 0.22 2.18 92 BAYES_999 7366 8.64 22.89 2.17 93 TR_XM_SpammyRelay 7338 5.13 11.65 2.17 94 BAYES_95 7117 3.14 5.43 2.10 95 MIME_HTML_MOSTLY 6956 2.59 3.79 2.05 96 TR_XM_DKIM_Undo 6868 10.28 28.45 2.03 97 XM_B_URI_Unicode 6692 2.22 2.77 1.98 98 XMDiploma_00 6576 2.29 3.05 1.94 99 XM_B_Unsub2 6559 2.23 2.89 1.94 100 XMNoVowels 6492 1.93 1.96 1.92 101 FROM_EXCESS_BASE64 6459 2.01 2.24 1.91 102 XMSexyCombo_05 6228 2.41 3.67 1.84 103 TO_MALFORMED 6208 1.26 0.02 1.83 104 RCVD_IN_IADB_OPTIN 6045 1.35 0.39 1.78 105 XM_DK_Undo_01 5843 1.67 1.55 1.72 106 TR_XM_PhishingBody 5737 2.49 4.23 1.69 107 T_XMDrugObfuBody_14 5683 2.42 4.06 1.68 108 TM2_M_URI_OPT_OUT 5682 2.25 3.51 1.68 109 XM_B_Investor 5604 2.86 5.52 1.65 110 KHOP_HELO_FCRDNS 5561 1.57 1.41 1.64 111 URI_NOVOWEL 5542 1.45 1.03 1.64 112 TooManyTo_003 5479 1.29 0.56 1.62 113 XM_SPF_SoftFail 5475 2.14 3.28 1.62 114 TR_XM_UnparsRelay 5372 3.60 8.05 1.59 115 TR_Symld_Words 5214 1.43 1.20 1.54 116 UNTRUSTED_Relay 5128 2.69 5.28 1.51 117 SUBJ_ALL_CAPS 5107 1.77 2.36 1.51 118 BOTNET 5105 3.75 8.69 1.51 119 XM_SendGrid 5069 1.57 1.75 1.50 120 T_XMDrugObfuBody_08 4980 1.84 2.66 1.47 121 IN_HORDE_ADDRESS_BOOK 4712 0.99 0.10 1.39 122 TR_XM_SpammyWords5 4665 2.28 4.28 1.38 123 HELO_NODOT 4508 0.98 0.19 1.33 124 HELO_NO_DOMAIN 4500 0.97 0.19 1.33 125 XMGappySubj_01 4419 0.93 0.11 1.30 126 T_FILL_THIS_FORM_SHORT 4337 1.51 2.01 1.28 127 URI_HEX 4254 1.29 1.38 1.26 128 TM2_M_VERY_LONG_WORD 4231 1.98 3.59 1.25 129 RELAYCOUNTRY_CA 4141 2.70 5.96 1.22 130 XMCapTrack 4126 1.02 0.57 1.22 131 XM_GoogleGroups 4066 1.09 0.86 1.20 132 TooManyTo_004 3993 0.97 0.53 1.18 133 XMStockSpam_06 3948 1.34 1.73 1.17 134 XM_OfRef6 3841 2.37 5.10 1.13 135 TVD_SPACE_RATIO 3805 0.86 0.27 1.12 136 T_TooManySym_03 3757 0.83 0.22 1.11 137 TR_DCC_Bayes_99 3555 7.51 21.74 1.05 138 XM_H_Long_From02 3525 1.46 2.40 1.04 139 XMGenDplmaNmb 3378 1.36 2.16 1.00 140 TR_XM_DK_SendGrid 3344 1.05 1.18 0.99 141 HTTPS_HTTP_MISMATCH 3269 1.03 1.17 0.96 142 TooManyTo_005 3257 0.81 0.49 0.96 143 FROM_GOV_DKIM_AU 3223 0.71 0.17 0.95 144 XM_UB50 3213 1.51 2.74 0.95 145 XM_B_SpammyWords4 3033 1.31 2.21 0.90 146 SpammyFromTLD_01 3006 1.10 1.56 0.89 147 XM_B_FormFill 2973 0.65 0.14 0.88 148 XMBrknScrpt_02 2943 1.08 1.55 0.87 149 DKIM_ADSP_CUSTOM_MED 2915 0.94 1.11 0.86 150 TR_MetaPhish_Combo_01 2892 0.87 0.90 0.85 151 XM_ShortIntro_01 2857 0.73 0.48 0.84 152 XM_B_COPY_HTML 2849 1.00 1.36 0.84 153 XM_H_Trusted_IP 2817 0.57 0.00 0.83 154 XM_H_PHPMailer 2750 0.74 0.59 0.81 155 RCVD_IN_PBL 2612 0.85 1.03 0.77 156 TO_NO_BRKTS_HTML_ONLY 2531 0.58 0.21 0.75 157 TR_XM_Base64_M1 2524 0.86 1.12 0.74 158 T_OBFU_PDF_ATTACH 2418 0.55 0.17 0.71 159 XMGappySubj_02 2409 0.50 0.05 0.71 160 T_Symld_Words_02 2399 0.81 1.05 0.71 161 RELAYCOUNTRY_AU 2340 1.28 2.57 0.69 162 TVD_RCVD_IP 2326 0.69 0.69 0.69 163 XMMoneyMeta_00 2296 0.89 1.37 0.68 164 HTML_IMAGE_ONLY_20 2278 0.59 0.39 0.67 165 RCVD_IN_BL_SPAMCOP_NET 2220 3.87 10.94 0.66 166 XMSubNoVowel 2181 0.57 0.40 0.64 167 HTML_TAG_BALANCE_BODY 2175 0.83 1.23 0.64 168 XM_ProductURIs 2093 0.74 1.01 0.62 169 T_XMHurry_00 2058 1.20 2.51 0.61 170 T_XMDrugObfuBody_00 2011 0.89 1.54 0.59 171 MISSING_HEADERS 2010 0.56 0.50 0.59 172 XMBody_95 1976 0.45 0.17 0.58 173 MPART_ALT_DIFF_COUNT 1974 0.80 1.29 0.58 174 NML_ADSP_CUSTOM_MED 1925 0.66 0.87 0.57 175 RELAYCOUNTRY_GB 1892 0.82 1.40 0.56 176 XMSubMetaSxObfu_03 1889 0.58 0.61 0.56 177 TM2_M_BODY_EMPTY 1844 0.41 0.10 0.54 178 XMLngstWrd_00 1838 0.47 0.31 0.54 179 XMPhish30 1826 0.80 1.39 0.54 180 FROM_GOV_SPOOF 1805 0.40 0.12 0.53 181 FORGED_GMAIL_RCVD 1779 0.60 0.76 0.53 182 URI_DOTEDU 1760 0.46 0.32 0.52 183 HTML_IMAGE_ONLY_32 1724 0.44 0.30 0.51 184 LongTLD 1689 0.76 1.33 0.50 185 MSGID_FROM_MTA_HEADER 1681 0.36 0.07 0.50 186 XMPhish14 1674 0.58 0.79 0.49 187 HTML_IMAGE_ONLY_28 1612 0.41 0.27 0.48 188 HTML_FONT_FACE_BAD 1594 0.57 0.80 0.47 189 XMBody_17 1591 1.07 2.39 0.47 190 SpammyFromTLD_02 1585 1.27 3.05 0.47 191 TR_XM_SPAMCOP 1561 2.94 8.40 0.46 192 FILL_THIS_FORM 1544 0.55 0.77 0.46 193 XMSubMetaI_00 1540 0.65 1.10 0.45 194 URI_TRY_3LD 1520 0.67 1.16 0.45 195 XMSlimDrugH 1517 0.51 0.65 0.45 196 XMDateMe_00 1443 0.38 0.27 0.43 197 XMBdyGiftCard01 1415 0.65 1.15 0.42 198 RCVD_IN_PSBL 1409 0.99 2.25 0.42 199 TR_LOTS_OF_MONEY3 1376 0.77 1.58 0.41 200 GMD_PDF_EMPTY_BODY 1375 0.30 0.05 0.41 ----------------------------------------------------------------------