Email: 542685 Autolearn: 0 AvgScore: 2.44 AvgScanTime: 1.41 sec Spam: 146522 Autolearn: 0 AvgScore: 15.06 AvgScanTime: 1.64 sec Ham: 396163 Autolearn: 0 AvgScore: -2.22 AvgScanTime: 1.33 sec Time Spent Running SA: 213.04 hours Time Spent Processing Spam: 66.68 hours Time Spent Processing Ham: 146.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138992 90.15 94.86 88.41 2 DKIM_SIGNED 126854 71.52 86.58 65.96 3 RELAYCOUNTRY_US 121736 82.89 83.08 82.81 4 XM_DK_Pass 120573 69.39 82.29 64.61 5 DKIM_VALID 118979 68.41 81.20 63.68 6 XM_B_Unicode 117444 74.00 80.15 71.73 7 DCC_CHECK 108761 44.93 74.23 34.10 8 XM_B_SpammyWords 101533 50.47 69.30 43.50 9 XMListUnsubscribeExists 97504 47.78 66.55 40.84 10 DKIM_VALID_AU 91814 53.93 62.66 50.70 11 XM_B_Unicode3 70336 44.44 48.00 43.13 12 LOC_TINY_FONT_1 68029 28.84 46.43 22.34 13 BAYES_50 62431 53.18 42.61 57.09 14 XM_B_SpammyWords2 57803 22.29 39.45 15.94 15 RCVD_IN_MSPIKE_H2 56829 33.27 38.79 31.23 16 XM_DK_Undo_02 53029 12.53 36.19 3.78 17 HTML_FONT_LOW_CONTRAST 52281 26.76 35.68 23.46 18 MIME_HTML_ONLY 46099 26.08 31.46 24.09 19 T_KAM_HTML_FONT_INVALID 45506 22.33 31.06 19.11 20 FVGT_m_MULTI_ODD 45348 24.12 30.95 21.60 21 DKIM_VALID_EF 41561 26.42 28.37 25.70 22 BAYES_99 40749 9.27 27.81 2.42 23 TR_XM_DKIM_Undo 37416 8.09 25.54 1.64 24 XMSubLong 37221 22.63 25.40 21.61 25 DCC_CHECK_NEGATIVE 34980 54.52 23.87 65.85 26 T_TM2_M_HEADER_IN_MSG 31668 24.20 21.61 25.16 27 BAYES_999 31142 7.05 21.25 1.80 28 TR_DCC_Bayes_99 29017 5.84 19.80 0.67 29 XM_Multi_Part_URI 28882 13.37 19.71 11.03 30 TR_XM_DK_Unsub 28295 12.67 19.31 10.21 31 XM_B_Unsub 27135 10.83 18.52 7.98 32 TR_XM_BayesUnsub 26202 9.08 17.88 5.82 33 UNPARSEABLE_RELAY 24457 12.13 16.69 10.44 34 RELAYCOUNTRY_META 23324 6.77 15.92 3.38 35 TR_MAX_INTL_RELAY 22314 7.23 15.23 4.27 36 XM_B_SpammyWords3 21188 6.89 14.46 4.09 37 LOTS_OF_MONEY 17974 7.23 12.27 5.37 38 TR_XM_SpammyRelay 16932 4.44 11.56 1.81 39 FSL_BULK_SIG 16413 8.39 11.20 7.36 40 TR_XM_SpammyWords4 15945 5.60 10.88 3.65 41 BOTNET_IPINHOSTNAME 15843 4.94 10.81 2.77 42 BOTNET 15597 3.92 10.64 1.43 43 RCVD_IN_BL_SPAMCOP_NET 15416 3.24 10.52 0.55 44 XM_Evil_Numbers_Gen 15078 10.05 10.29 9.96 45 TR_XM_SpammyWords2 15037 2.95 10.26 0.24 46 BAYES_80 13706 4.46 9.35 2.65 47 XM_B_Phish_Phrases 13023 5.94 8.89 4.84 48 BAYES_60 12149 6.17 8.29 5.39 49 LotsOfNums_01 11168 7.15 7.62 6.98 50 TR_XM_UnparsRelay 11073 2.82 7.56 1.07 51 TR_XM_SPAMCOP 10732 2.23 7.32 0.34 52 XMSubMetaSx_00 10719 4.89 7.32 3.99 53 XM_Body_Dirty_Words 10565 3.44 7.21 2.05 54 UNTRUSTED_Relay 10062 2.76 6.87 1.23 55 XM_UncommonTLD01 9869 4.89 6.74 4.21 56 XM_B_PhoneNumber 9291 8.39 6.34 9.15 57 HTML_IMAGE_RATIO_02 9143 4.69 6.24 4.11 58 MPART_ALT_DIFF 8854 8.17 6.04 8.95 59 XM_H_Long_From01 8432 5.33 5.75 5.18 60 RCVD_IN_VALIDITY_RPBL 8308 1.61 5.67 0.12 61 BAYES_95 7902 2.64 5.39 1.62 62 DKIM_INVALID 7875 3.12 5.37 2.28 63 XM_SPF_SoftFail 7537 2.37 5.14 1.34 64 XM_H_GMP 7445 4.85 5.08 4.76 65 RELAYCOUNTRY_CA 7096 2.12 4.84 1.11 66 XM_B_Investor 7041 2.30 4.81 1.38 67 HTML_IMAGE_RATIO_06 6920 4.36 4.72 4.23 68 TR_XM_PhishingBody 6828 2.51 4.66 1.71 69 T_XMDrugObfuBody_14 6466 2.66 4.41 2.02 70 HTML_IMAGE_RATIO_04 6462 10.97 4.41 13.39 71 XMSexyCombo_05 6146 2.23 4.19 1.50 72 HTML_IMAGE_RATIO_08 6025 2.91 4.11 2.46 73 TM2_M_VERY_LONG_WORD 5999 1.99 4.09 1.21 74 XM_B_SpammyTLD 5599 2.68 3.82 2.25 75 T_REMOTE_IMAGE 5442 3.76 3.71 3.77 76 XM_UB50 5404 1.55 3.69 0.76 77 XMStrtUSub 5399 9.28 3.68 11.35 78 RCVD_IN_MSPIKE_WL 5352 4.62 3.65 4.97 79 RCVD_IN_MSPIKE_H3 5352 4.62 3.65 4.97 80 XMNumbers 5300 2.87 3.62 2.59 81 TooManyTo_001 5206 6.76 3.55 7.95 82 MIME_HTML_ONLY_MULTI 4981 6.34 3.40 7.42 83 XM_OfRef6 4906 1.61 3.35 0.96 84 TR_XM_SpammyWords5 4851 1.70 3.31 1.10 85 XMNoVowels 4814 2.55 3.29 2.28 86 MIME_HTML_MOSTLY 4706 2.27 3.21 1.93 87 RCVD_IN_PSBL 4684 1.12 3.20 0.35 88 MIME_QP_LONG_LINE 4679 4.38 3.19 4.82 89 TR_XM_NoHeaderRelay 4645 0.99 3.17 0.18 90 T_XMDrugObfuBody_08 4579 2.10 3.13 1.72 91 XM_B_Unsub2 4421 1.78 3.02 1.32 92 XM_CamelCaseFrm001 4393 2.14 3.00 1.82 93 XM_B_URI_Unicode 4317 2.02 2.95 1.68 94 XM_URI_RBL 4297 1.06 2.93 0.37 95 XMStockSpam_06 4287 1.99 2.93 1.65 96 T_TooManySym_01 4270 4.40 2.91 4.95 97 RELAYCOUNTRY_AU 4153 1.18 2.83 0.56 98 XMDiploma_00 3927 1.80 2.68 1.48 99 XM_B_SpammyWords4 3817 1.31 2.61 0.82 100 TM2_M_URI_OPT_OUT 3788 1.80 2.59 1.51 101 DKIM_ADSP_NXDOMAIN 3455 0.83 2.36 0.26 102 MAILING_LIST_MULTI 3406 2.44 2.32 2.48 103 T_XMHurry_00 3376 0.86 2.30 0.33 104 XMBody_17 3234 0.84 2.21 0.33 105 NO_DNS_FOR_FROM 3211 0.76 2.19 0.23 106 TR_XM_MaxWHORU 3193 0.73 2.18 0.19 107 FROM_EXCESS_BASE64 2860 1.55 1.95 1.41 108 T_XMDrugObfuBody_00 2858 1.26 1.95 1.01 109 SpammyFromTLD_02 2830 0.80 1.93 0.38 110 HTML_MIME_NO_HTML_TAG 2824 2.48 1.93 2.68 111 XM_SendGrid 2760 1.54 1.88 1.42 112 RCVD_IN_ZEN_LASTEXTERNAL 2724 0.50 1.86 0.00 113 SHORTCIRCUIT 2724 0.50 1.86 0.00 114 RCVD_IN_VALIDITY_SAFE 2670 2.99 1.82 3.42 115 BAYES_40 2668 4.97 1.82 6.13 116 TR_XM_InvalidRelay 2659 0.50 1.81 0.01 117 TR_XM_INV_DKIM 2592 0.61 1.77 0.19 118 XMBrknScrpt_02 2430 0.97 1.66 0.72 119 SpammyFromTLD_01 2419 1.03 1.65 0.81 120 USER_IN_DEF_DKIM_WL 2308 8.96 1.58 11.69 121 RCVD_IN_PBL 2284 0.91 1.56 0.67 122 STY_INVIS_DIRECT 2279 0.65 1.56 0.31 123 T_FILL_THIS_FORM_SHORT 2277 1.10 1.55 0.93 124 BOTNET_NORDNS 2275 0.43 1.55 0.01 125 XMPhish30 2256 0.78 1.54 0.50 126 XM_B_SEO 2237 0.57 1.53 0.21 127 ALL_TRUSTED 2224 10.99 1.52 14.49 128 XMGenDplmaNmb 2212 0.97 1.51 0.77 129 RCVD_IN_VALIDITY_CERTIFIED 2203 2.31 1.50 2.61 130 XM_DK_Undo_01 2187 1.54 1.49 1.56 131 KHOP_HELO_FCRDNS 2167 1.74 1.48 1.84 132 SUBJ_ALL_CAPS 2128 1.36 1.45 1.32 133 URI_HEX 2117 1.13 1.44 1.01 134 NORDNS_LOW_CONTRAST 2085 0.42 1.42 0.05 135 MPART_ALT_DIFF_COUNT 2034 0.77 1.39 0.54 136 XM_B_COPY_HTML 2034 1.22 1.39 1.15 137 XMSexyCombo_01 2006 0.47 1.37 0.13 138 RCVD_IN_IADB_LISTED 2004 3.05 1.37 3.68 139 BAYES_20 2001 3.92 1.37 4.87 140 XM_B_COVIDMETA 1936 0.54 1.32 0.26 141 TR_XM_SEO4 1899 0.42 1.30 0.10 142 DKIM_ADSP_CUSTOM_MED 1859 0.88 1.27 0.73 143 XMMoneyMeta_00 1855 0.69 1.27 0.48 144 URI_NOVOWEL 1850 1.44 1.26 1.50 145 XM_UB99 1844 0.34 1.26 0.00 146 XM_B_Phish66 1837 0.55 1.25 0.29 147 TR_XM_RelayPhish 1824 0.38 1.24 0.06 148 RCVD_IN_IADB_SPF 1762 2.66 1.20 3.20 149 TR_XM_DK_SendGrid 1739 0.99 1.19 0.92 150 T_MONEY_PERCENT 1730 0.48 1.18 0.22 151 TR_LOTS_OF_MONEY2 1730 0.48 1.18 0.22 152 HOSTED_IMG_MULTI_PUB_01 1700 0.33 1.16 0.02 153 TR_LOTS_OF_MONEY3 1691 0.43 1.15 0.17 154 XM_H_Long_From02 1689 0.95 1.15 0.87 155 HTML_IMAGE_ONLY_12 1678 0.48 1.15 0.23 156 XM_B_DNDMA 1674 0.57 1.14 0.35 157 RCVD_IN_IADB_DK 1661 2.30 1.13 2.73 158 RCVD_IN_IADB_SENDERID 1642 2.37 1.12 2.84 159 XMHTML_After_End 1626 0.54 1.11 0.32 160 XM_DIRTYINTL 1626 0.35 1.11 0.07 161 RCVD_IN_XBL 1606 0.31 1.10 0.02 162 TM2_M_OBFU_COMMENT 1598 0.54 1.09 0.34 163 HTTPS_HTTP_MISMATCH 1578 0.84 1.08 0.76 164 HTML_TAG_BALANCE_BODY 1572 0.63 1.07 0.46 165 LongTLD 1558 0.64 1.06 0.49 166 HTML_IMAGE_ONLY_20 1557 0.69 1.06 0.56 167 XMReplyNow 1555 0.43 1.06 0.20 168 TR_Symld_Words 1548 1.27 1.06 1.35 169 SHOPIFY_IMG_NOT_RCVD_SFY 1537 0.42 1.05 0.19 170 XMBdyGiftCard01 1530 0.76 1.04 0.65 171 RELAYCOUNTRY_GB 1528 0.59 1.04 0.42 172 RELAYCOUNTRY_NL 1523 0.36 1.04 0.11 173 XM_B_REG_HTML 1507 0.65 1.03 0.51 174 XM_ProductURIs 1504 0.60 1.03 0.45 175 NML_ADSP_CUSTOM_MED 1496 0.63 1.02 0.48 176 XM_PDF 1493 4.46 1.02 5.74 177 XMSubGiftCard1 1490 0.32 1.02 0.07 178 URI_TRUNCATED 1477 0.35 1.01 0.10 179 XMPhish14 1459 0.71 1.00 0.61 180 SUSP_UTF8_WORD_SUBJ 1450 0.28 0.99 0.02 181 XM_HighProb1 1444 0.27 0.99 0.01 182 XMSubMetaI_00 1444 0.59 0.99 0.45 183 TR_XM_PHPForged 1427 0.50 0.97 0.33 184 RELAYCOUNTRY_FR 1426 0.44 0.97 0.25 185 TR_XM_PHPDW 1422 0.50 0.97 0.33 186 TR_XM_Base64_M1 1415 0.62 0.97 0.50 187 DIET_1 1409 0.42 0.96 0.22 188 XMBody_78 1391 0.46 0.95 0.27 189 XM_OfRef7 1389 0.41 0.95 0.21 190 TR_XM_FormFill2 1367 0.49 0.93 0.33 191 XM_UB999 1366 0.25 0.93 0.00 192 RDNS_DYNAMIC 1363 0.46 0.93 0.29 193 TR_Mismatch_TLD_02 1352 0.30 0.92 0.08 194 XM_H_PHPOS 1351 0.48 0.92 0.32 195 TM2_M_A_HREF_HREF 1351 0.39 0.92 0.19 196 HK_RANDOM_FROM 1342 0.35 0.92 0.14 197 FORGED_GMAIL_RCVD 1339 0.58 0.91 0.45 198 T_Symld_Words_02 1324 0.69 0.90 0.61 199 RCVD_IN_SORBS_DUL 1313 0.27 0.90 0.03 200 TR_MetaPhish_Combo_01 1303 0.75 0.89 0.70 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 350259 90.15 94.86 88.41 2 RELAYCOUNTRY_US 328076 82.89 83.08 82.81 3 XM_B_Unicode 284155 74.00 80.15 71.73 4 DKIM_SIGNED 261290 71.52 86.58 65.96 5 DCC_CHECK_NEGATIVE 260869 54.52 23.87 65.85 6 XM_DK_Pass 255979 69.39 82.29 64.61 7 DKIM_VALID 252258 68.41 81.20 63.68 8 BAYES_50 226175 53.18 42.61 57.09 9 DKIM_VALID_AU 200857 53.93 62.66 50.70 10 XM_B_SpammyWords 172343 50.47 69.30 43.50 11 XM_B_Unicode3 170851 44.44 48.00 43.13 12 XMListUnsubscribeExists 161785 47.78 66.55 40.84 13 DCC_CHECK 135093 44.93 74.23 34.10 14 RCVD_IN_MSPIKE_H2 123730 33.27 38.79 31.23 15 DKIM_VALID_EF 101833 26.42 28.37 25.70 16 T_TM2_M_HEADER_IN_MSG 99670 24.20 21.61 25.16 17 MIME_HTML_ONLY 95422 26.08 31.46 24.09 18 HTML_FONT_LOW_CONTRAST 92955 26.76 35.68 23.46 19 LOC_TINY_FONT_1 88499 28.84 46.43 22.34 20 XMSubLong 85608 22.63 25.40 21.61 21 FVGT_m_MULTI_ODD 85556 24.12 30.95 21.60 22 T_KAM_HTML_FONT_INVALID 75699 22.33 31.06 19.11 23 XM_B_SpammyWords2 63159 22.29 39.45 15.94 24 BAYES_00 62114 11.66 0.81 15.68 25 ALL_TRUSTED 57407 10.99 1.52 14.49 26 HTML_IMAGE_RATIO_04 53061 10.97 4.41 13.39 27 HTML_FONT_FACE_BAD 49329 9.25 0.58 12.45 28 XM_H_Trusted_IP 46666 8.60 0.00 11.78 29 USER_IN_DEF_DKIM_WL 46322 8.96 1.58 11.69 30 XMStrtUSub 44964 9.28 3.68 11.35 31 XM_Multi_Part_URI 43679 13.37 19.71 11.03 32 UNPARSEABLE_RELAY 41367 12.13 16.69 10.44 33 TR_XM_DK_Unsub 40460 12.67 19.31 10.21 34 XM_Evil_Numbers_Gen 39461 10.05 10.29 9.96 35 XM_B_PhoneNumber 36241 8.39 6.34 9.15 36 MPART_ALT_DIFF 35471 8.17 6.04 8.95 37 XM_B_Unsub 31613 10.83 18.52 7.98 38 TooManyTo_001 31489 6.76 3.55 7.95 39 MIME_HTML_ONLY_MULTI 29404 6.34 3.40 7.42 40 FSL_BULK_SIG 29141 8.39 11.20 7.36 41 TR_XM_DK_Bayes 28327 5.40 0.67 7.15 42 TR_XM_DK_Bayes1 27836 5.31 0.66 7.03 43 LotsOfNums_01 27638 7.15 7.62 6.98 44 IN_ZIMBRA_NJ_WHITELIST 24671 4.57 0.10 6.23 45 XM_DKIMWhitelistDomains 24452 4.51 0.01 6.17 46 BAYES_40 24285 4.97 1.82 6.13 47 TR_XM_DK_Bayes2 23770 4.51 0.47 6.00 48 TR_XM_BayesUnsub 23068 9.08 17.88 5.82 49 XM_PDF 22720 4.46 1.02 5.74 50 BAYES_60 21343 6.17 8.29 5.39 51 LOTS_OF_MONEY 21276 7.23 12.27 5.37 52 XM_H_Long_From01 20508 5.33 5.75 5.18 53 RCVD_IN_MSPIKE_WL 19698 4.62 3.65 4.97 54 RCVD_IN_MSPIKE_H3 19698 4.62 3.65 4.97 55 T_TooManySym_01 19620 4.40 2.91 4.95 56 BAYES_20 19278 3.92 1.37 4.87 57 XM_B_Phish_Phrases 19192 5.94 8.89 4.84 58 MIME_QP_LONG_LINE 19092 4.38 3.19 4.82 59 XM_H_GMP 18865 4.85 5.08 4.76 60 XMSubNoVowel 17036 3.28 0.52 4.30 61 TR_MAX_INTL_RELAY 16932 7.23 15.23 4.27 62 HTML_IMAGE_RATIO_06 16741 4.36 4.72 4.23 63 XM_UncommonTLD01 16684 4.89 6.74 4.21 64 BAYES_05 16456 3.22 0.69 4.15 65 HTML_IMAGE_RATIO_02 16285 4.69 6.24 4.11 66 XM_B_SpammyWords3 16190 6.89 14.46 4.09 67 XMSubMetaSx_00 15820 4.89 7.32 3.99 68 XM_DK_Undo_02 14991 12.53 36.19 3.78 69 T_REMOTE_IMAGE 14944 3.76 3.71 3.77 70 RCVD_IN_IADB_LISTED 14561 3.05 1.37 3.68 71 ANY_BOUNCE_MESSAGE 14508 2.88 0.77 3.66 72 TR_XM_SpammyWords4 14472 5.60 10.88 3.65 73 BOUNCE_MESSAGE 14450 2.87 0.77 3.65 74 RCVD_IN_VALIDITY_SAFE 13567 2.99 1.82 3.42 75 RELAYCOUNTRY_META 13407 6.77 15.92 3.38 76 RCVD_IN_IADB_SPF 12681 2.66 1.20 3.20 77 RCVD_IN_IADB_SENDERID 11235 2.37 1.12 2.84 78 BOTNET_IPINHOSTNAME 10957 4.94 10.81 2.77 79 RCVD_IN_IADB_DK 10811 2.30 1.13 2.73 80 HTML_MIME_NO_HTML_TAG 10610 2.48 1.93 2.68 81 BAYES_80 10515 4.46 9.35 2.65 82 T_TooManySym_02 10342 2.11 0.74 2.61 83 RCVD_IN_VALIDITY_CERTIFIED 10336 2.31 1.50 2.61 84 XMNumbers 10278 2.87 3.62 2.59 85 TooManyTo_002 10256 2.07 0.67 2.59 86 RCVD_IN_IADB_VOUCHED 10125 2.05 0.69 2.56 87 MAILING_LIST_MULTI 9837 2.44 2.32 2.48 88 HTML_IMAGE_RATIO_08 9757 2.91 4.11 2.46 89 BAYES_99 9582 9.27 27.81 2.42 90 DKIM_INVALID 9032 3.12 5.37 2.28 91 XMNoVowels 9024 2.55 3.29 2.28 92 XM_B_SpammyTLD 8925 2.68 3.82 2.25 93 XM_Body_Dirty_Words 8127 3.44 7.21 2.05 94 XMSubLongNoVowel 8055 1.54 0.19 2.03 95 T_XMDrugObfuBody_14 7993 2.66 4.41 2.02 96 XMSubGarbage 7899 1.46 0.02 1.99 97 MIME_HTML_MOSTLY 7639 2.27 3.21 1.93 98 INVALID_MSGID 7487 1.46 0.29 1.89 99 KHOP_HELO_FCRDNS 7297 1.74 1.48 1.84 100 RCVD_IN_IADB_OPTIN 7213 1.44 0.43 1.82 101 XM_CamelCaseFrm001 7204 2.14 3.00 1.82 102 TR_XM_SpammyRelay 7177 4.44 11.56 1.81 103 BAYES_999 7115 7.05 21.25 1.80 104 T_XMDrugObfuBody_08 6822 2.10 3.13 1.72 105 TR_XM_PhishingBody 6781 2.51 4.66 1.71 106 XM_B_URI_Unicode 6670 2.02 2.95 1.68 107 XMStockSpam_06 6532 1.99 2.93 1.65 108 TR_XM_DKIM_Undo 6493 8.09 25.54 1.64 109 BAYES_95 6409 2.64 5.39 1.62 110 TO_MALFORMED 6215 1.15 0.03 1.57 111 XM_DK_Undo_01 6196 1.54 1.49 1.56 112 TM2_M_URI_OPT_OUT 5995 1.80 2.59 1.51 113 URI_NOVOWEL 5959 1.44 1.26 1.50 114 XMSexyCombo_05 5936 2.23 4.19 1.50 115 XMDiploma_00 5862 1.80 2.68 1.48 116 BOTNET 5669 3.92 10.64 1.43 117 XM_SendGrid 5618 1.54 1.88 1.42 118 FROM_EXCESS_BASE64 5574 1.55 1.95 1.41 119 TooManyTo_003 5542 1.18 0.59 1.40 120 XM_B_Investor 5462 2.30 4.81 1.38 121 TR_Symld_Words 5360 1.27 1.06 1.35 122 XM_SPF_SoftFail 5298 2.37 5.14 1.34 123 SUBJ_ALL_CAPS 5229 1.36 1.45 1.32 124 XM_B_Unsub2 5225 1.78 3.02 1.32 125 IN_HORDE_ADDRESS_BOOK 5108 0.97 0.10 1.29 126 HELO_NODOT 4913 0.97 0.23 1.24 127 HELO_NO_DOMAIN 4905 0.97 0.23 1.24 128 UNTRUSTED_Relay 4890 2.76 6.87 1.23 129 TM2_M_VERY_LONG_WORD 4787 1.99 4.09 1.21 130 XM_B_COPY_HTML 4569 1.22 1.39 1.15 131 RELAYCOUNTRY_CA 4406 2.12 4.84 1.11 132 TR_XM_SpammyWords5 4377 1.70 3.31 1.10 133 T_OBFU_PDF_ATTACH 4304 0.87 0.29 1.09 134 XMCapTrack 4263 0.91 0.46 1.08 135 TR_XM_UnparsRelay 4229 2.82 7.56 1.07 136 T_TooManySym_03 4062 0.83 0.29 1.03 137 URI_HEX 4021 1.13 1.44 1.01 138 T_XMDrugObfuBody_00 3994 1.26 1.95 1.01 139 TooManyTo_004 3962 0.87 0.53 1.00 140 XMGappySubj_01 3950 0.84 0.42 1.00 141 XM_GoogleGroups 3835 0.92 0.77 0.97 142 XM_OfRef6 3807 1.61 3.35 0.96 143 XM_E_Blogspot 3737 0.71 0.07 0.94 144 TVD_SPACE_RATIO 3734 0.75 0.22 0.94 145 T_FILL_THIS_FORM_SHORT 3681 1.10 1.55 0.93 146 T_TVD_MIME_NO_HEADERS 3664 0.69 0.07 0.92 147 TR_XM_DK_SendGrid 3629 0.99 1.19 0.92 148 XM_H_Long_From02 3450 0.95 1.15 0.87 149 XMLngstWrd_00 3317 0.72 0.41 0.84 150 FROM_GOV_DKIM_AU 3314 0.73 0.43 0.84 151 TooManyTo_005 3282 0.74 0.49 0.83 152 XM_B_SpammyWords4 3268 1.31 2.61 0.82 153 XMSubMetaSxObfu_03 3234 0.75 0.58 0.82 154 SpammyFromTLD_01 3196 1.03 1.65 0.81 155 XMGenDplmaNmb 3053 0.97 1.51 0.77 156 XM_UB50 3020 1.55 3.69 0.76 157 XM_ShortIntro_01 3003 0.71 0.58 0.76 158 HTTPS_HTTP_MISMATCH 3002 0.84 1.08 0.76 159 HTML_IMAGE_ONLY_32 2948 0.64 0.37 0.74 160 DKIM_ADSP_CUSTOM_MED 2901 0.88 1.27 0.73 161 XMBrknScrpt_02 2854 0.97 1.66 0.72 162 TVD_RCVD_IP 2798 0.73 0.79 0.71 163 TM2_M_BODY_EMPTY 2795 0.55 0.13 0.71 164 TR_MetaPhish_Combo_01 2764 0.75 0.89 0.70 165 RCVD_IN_PBL 2659 0.91 1.56 0.67 166 TR_DCC_Bayes_99 2659 5.84 19.80 0.67 167 XM_H_PHPMailer 2625 0.65 0.63 0.66 168 TO_NO_BRKTS_HTML_ONLY 2613 0.55 0.25 0.66 169 XMBdyGiftCard01 2575 0.76 1.04 0.65 170 T_Symld_Words_02 2424 0.69 0.90 0.61 171 XMPhish14 2401 0.71 1.00 0.61 172 GMD_PDF_EMPTY_BODY 2235 0.43 0.08 0.56 173 RELAYCOUNTRY_AU 2226 1.18 2.83 0.56 174 XM_B_FormFill 2220 0.41 0.02 0.56 175 HTML_IMAGE_ONLY_20 2206 0.69 1.06 0.56 176 RCVD_IN_BL_SPAMCOP_NET 2174 3.24 10.52 0.55 177 MPART_ALT_DIFF_COUNT 2147 0.77 1.39 0.54 178 XM_RXBody 2073 0.54 0.60 0.52 179 MISSING_HEADERS 2071 0.55 0.63 0.52 180 XMBody_95 2056 0.46 0.28 0.52 181 XM_B_REG_HTML 2013 0.65 1.03 0.51 182 XMPhish30 2000 0.78 1.54 0.50 183 TR_XM_Base64_M1 1969 0.62 0.97 0.50 184 LongTLD 1935 0.64 1.06 0.49 185 NML_ADSP_CUSTOM_MED 1916 0.63 1.02 0.48 186 XMMoneyMeta_00 1915 0.69 1.27 0.48 187 SHORT_URI_3 1913 0.39 0.15 0.48 188 FROM_GOV_SPOOF 1879 0.39 0.15 0.47 189 XMGappySubj_02 1876 0.36 0.05 0.47 190 HTML_TAG_BALANCE_BODY 1834 0.63 1.07 0.46 191 FORGED_GMAIL_RCVD 1794 0.58 0.91 0.45 192 XMSubMetaI_00 1782 0.59 0.99 0.45 193 XM_ProductURIs 1774 0.60 1.03 0.45 194 SUBJ_DOLLARS 1727 0.52 0.75 0.44 195 RELAYCOUNTRY_GB 1669 0.59 1.04 0.42 196 HTML_IMAGE_ONLY_28 1662 0.41 0.37 0.42 197 TRACKER_ID 1650 0.39 0.31 0.42 198 XMBSHREFv2 1619 0.39 0.35 0.41 199 MSGID_FROM_MTA_HEADER 1616 0.33 0.14 0.41 200 URI_TRY_3LD 1613 0.52 0.82 0.41 ----------------------------------------------------------------------