Email: 467469 Autolearn: 0 AvgScore: 4.78 AvgScanTime: 1.35 sec Spam: 152943 Autolearn: 0 AvgScore: 14.43 AvgScanTime: 1.47 sec Ham: 314526 Autolearn: 0 AvgScore: 0.09 AvgScanTime: 1.29 sec Time Spent Running SA: 175.16 hours Time Spent Processing Spam: 62.53 hours Time Spent Processing Ham: 112.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146259 90.01 95.63 87.27 2 DKIM_SIGNED 140095 81.87 91.60 77.15 3 XM_DK_Pass 132708 79.25 86.77 75.60 4 DKIM_VALID 131250 78.23 85.82 74.54 5 XM_B_Unicode 130073 75.61 85.05 71.02 6 RELAYCOUNTRY_US 128908 82.54 84.28 81.68 7 DCC_CHECK 118227 51.93 77.30 39.60 8 XMListUnsubscribeExists 111379 57.30 72.82 49.75 9 XM_B_SpammyWords 106726 53.10 69.78 44.99 10 DKIM_VALID_AU 102641 61.81 67.11 59.23 11 LOC_TINY_FONT_1 77827 34.97 50.89 27.23 12 XM_B_Unicode3 76702 44.39 50.15 41.59 13 BAYES_50 65416 55.57 42.77 61.80 14 XM_DK_Undo_02 62772 16.57 41.04 4.67 15 RCVD_IN_MSPIKE_H2 62637 37.47 40.95 35.78 16 XM_B_SpammyWords2 61543 25.70 40.24 18.63 17 HTML_FONT_LOW_CONTRAST 58058 31.07 37.96 27.72 18 FVGT_m_MULTI_ODD 53727 28.82 35.13 25.75 19 T_KAM_HTML_FONT_INVALID 49955 25.77 32.66 22.41 20 DKIM_VALID_EF 44832 29.36 29.31 29.38 21 TR_XM_DKIM_Undo 44382 10.88 29.02 2.06 22 BAYES_99 43859 11.47 28.68 3.10 23 MIME_HTML_ONLY 41438 22.48 27.09 20.23 24 XMSubLong 37215 23.83 24.33 23.58 25 XM_Multi_Part_URI 35905 16.08 23.48 12.48 26 BAYES_999 33551 8.77 21.94 2.36 27 TR_DCC_Bayes_99 33140 7.81 21.67 1.08 28 T_TM2_M_HEADER_IN_MSG 32821 26.85 21.46 29.48 29 TR_XM_DK_Unsub 32561 15.62 21.29 12.86 30 DCC_CHECK_NEGATIVE 32364 47.52 21.16 60.34 31 UNPARSEABLE_RELAY 26119 13.76 17.08 12.15 32 XM_B_Unsub 25454 11.53 16.64 9.05 33 TR_XM_BayesUnsub 24646 10.06 16.11 7.11 34 XM_B_SpammyWords3 23277 8.21 15.22 4.80 35 RELAYCOUNTRY_META 22065 7.43 14.43 4.03 36 TR_MAX_INTL_RELAY 21604 8.37 14.13 5.57 37 RCVD_IN_BL_SPAMCOP_NET 19172 4.67 12.54 0.84 38 LOTS_OF_MONEY 18224 8.08 11.92 6.21 39 TR_XM_SpammyRelay 16750 4.91 10.95 1.97 40 XM_Evil_Numbers_Gen 16662 9.72 10.89 9.15 41 TR_XM_SpammyWords4 16492 6.28 10.78 4.09 42 TR_XM_SpammyWords2 16347 3.81 10.69 0.46 43 TR_XM_SPAMCOP 16029 3.79 10.48 0.53 44 BOTNET_IPINHOSTNAME 15419 5.44 10.08 3.18 45 BAYES_80 13433 5.16 8.78 3.40 46 BAYES_60 13423 7.30 8.78 6.59 47 BOTNET 13369 3.76 8.74 1.34 48 LotsOfNums_01 13110 8.38 8.57 8.29 49 XM_B_Phish_Phrases 12857 6.01 8.41 4.85 50 FSL_BULK_SIG 12779 7.50 8.36 7.08 51 TR_XM_UnparsRelay 12160 3.65 7.95 1.56 52 XM_Body_Dirty_Words 10992 3.88 7.19 2.28 53 HTML_IMAGE_RATIO_02 9817 5.41 6.42 4.91 54 XMSubMetaSx_00 9673 4.33 6.32 3.36 55 XM_UncommonTLD01 9270 4.91 6.06 4.36 56 XM_B_PhoneNumber 9216 8.93 6.03 10.34 57 DKIM_INVALID 8845 3.64 5.78 2.60 58 MPART_ALT_DIFF 8672 4.97 5.67 4.63 59 RELAYCOUNTRY_CA 8428 2.55 5.51 1.11 60 UNTRUSTED_Relay 8240 2.79 5.39 1.52 61 XM_H_GMP 8152 5.61 5.33 5.75 62 BAYES_95 7797 3.13 5.10 2.17 63 XM_H_Long_From01 7385 5.45 4.83 5.75 64 XM_B_Investor 7231 2.53 4.73 1.47 65 HTML_IMAGE_RATIO_06 7126 3.60 4.66 3.08 66 TR_XM_PhishingBody 7038 2.59 4.60 1.61 67 HTML_IMAGE_RATIO_04 7010 4.40 4.58 4.31 68 T_XMDrugObfuBody_14 6925 2.65 4.53 1.74 69 XMStrtUSub 6418 4.51 4.20 4.66 70 RCVD_IN_MSPIKE_H3 6334 5.06 4.14 5.51 71 RCVD_IN_MSPIKE_WL 6334 5.06 4.14 5.51 72 XMSexyCombo_05 5921 1.97 3.87 1.04 73 XM_B_SpammyTLD 5872 2.88 3.84 2.42 74 XM_OfRef6 5785 1.84 3.78 0.90 75 TM2_M_VERY_LONG_WORD 5428 1.99 3.55 1.23 76 TR_XM_SpammyWords5 5424 2.11 3.55 1.41 77 TooManyTo_001 5267 7.00 3.44 8.73 78 XMDiploma_00 5206 2.22 3.40 1.64 79 XMNoVowels 5110 2.72 3.34 2.42 80 TM2_M_URI_OPT_OUT 5075 2.36 3.32 1.89 81 MIME_QP_LONG_LINE 5031 4.60 3.29 5.23 82 XMNumbers 4888 3.24 3.20 3.26 83 MIME_HTML_ONLY_MULTI 4884 3.01 3.19 2.93 84 MIME_HTML_MOSTLY 4770 2.42 3.12 2.09 85 T_XMDrugObfuBody_08 4684 2.09 3.06 1.62 86 HTML_IMAGE_RATIO_08 4621 2.65 3.02 2.46 87 XM_SPF_SoftFail 4610 2.03 3.01 1.55 88 XM_B_URI_Unicode 4567 2.49 2.99 2.25 89 XM_CamelCaseFrm001 4326 2.59 2.83 2.47 90 T_TooManySym_01 4259 5.10 2.78 6.22 91 XM_UB50 4184 1.53 2.74 0.95 92 RCVD_IN_VALIDITY_RPBL 4123 0.92 2.70 0.05 93 XMBody_17 4001 1.16 2.62 0.45 94 XM_B_Unsub2 3952 1.84 2.58 1.48 95 RELAYCOUNTRY_AU 3924 1.32 2.57 0.72 96 MAILING_LIST_MULTI 3885 2.94 2.54 3.13 97 XM_B_SpammyWords4 3845 1.21 2.51 0.57 98 XM_URI_RBL 3734 1.11 2.44 0.47 99 NO_DNS_FOR_FROM 3702 1.02 2.42 0.34 100 TR_XM_MaxWHORU 3679 0.98 2.41 0.29 101 SpammyFromTLD_02 3506 1.07 2.29 0.48 102 USER_IN_DEF_DKIM_WL 3484 9.43 2.28 12.90 103 RCVD_IN_VALIDITY_SAFE 3417 3.71 2.23 4.42 104 DKIM_ADSP_NXDOMAIN 3383 0.94 2.21 0.33 105 T_XMDrugObfuBody_00 3286 1.19 2.15 0.73 106 T_XMHurry_00 3204 1.12 2.09 0.64 107 XMPhish30 3196 1.08 2.09 0.59 108 TR_XM_INV_DKIM 3083 0.78 2.02 0.18 109 TR_XM_NoHeaderRelay 3007 0.79 1.97 0.21 110 RCVD_IN_VALIDITY_CERTIFIED 2948 3.10 1.93 3.67 111 FROM_EXCESS_BASE64 2883 1.86 1.89 1.85 112 SUBJ_ALL_CAPS 2828 1.67 1.85 1.58 113 XMGenDplmaNmb 2771 1.18 1.81 0.87 114 XMStockSpam_06 2685 1.46 1.76 1.32 115 XM_SendGrid 2667 1.49 1.74 1.37 116 BAYES_40 2637 4.20 1.72 5.40 117 XM_H_Long_From02 2618 1.30 1.71 1.10 118 XM_DK_Undo_01 2614 1.63 1.71 1.59 119 HTML_MIME_NO_HTML_TAG 2570 2.39 1.68 2.73 120 SpammyFromTLD_01 2554 1.21 1.67 0.98 121 DIET_1 2552 0.82 1.67 0.41 122 NORDNS_LOW_CONTRAST 2349 0.55 1.54 0.07 123 XMSubMetaI_00 2317 0.88 1.51 0.57 124 SHORTCIRCUIT 2302 0.49 1.51 0.00 125 URI_HEX 2302 1.34 1.51 1.26 126 RCVD_IN_ZEN_LASTEXTERNAL 2302 0.49 1.51 0.00 127 ALL_TRUSTED 2292 10.67 1.50 15.13 128 T_REMOTE_IMAGE 2233 2.99 1.46 3.74 129 LongTLD 2203 0.77 1.44 0.45 130 HK_RANDOM_REPLYTO 2130 0.54 1.39 0.12 131 XMBrknScrpt_02 2108 0.91 1.38 0.68 132 XM_B_COPY_HTML 2080 0.95 1.36 0.75 133 RCVD_IN_PSBL 2023 0.75 1.32 0.47 134 URI_TRY_3LD 2018 0.80 1.32 0.55 135 T_FILL_THIS_FORM_SHORT 1985 1.09 1.30 0.98 136 RELAYCOUNTRY_FR 1967 0.62 1.29 0.29 137 BAYES_20 1934 3.05 1.26 3.91 138 DKIM_ADSP_CUSTOM_MED 1918 1.02 1.25 0.91 139 TR_LOTS_OF_MONEY3 1876 0.54 1.23 0.20 140 XMMoneyMeta_00 1820 0.74 1.19 0.52 141 THIS_AD 1800 0.76 1.18 0.56 142 RCVD_IN_IADB_LISTED 1797 3.04 1.17 3.95 143 XM_B_SEO 1789 0.55 1.17 0.24 144 TR_XM_RelayPhish 1779 0.43 1.16 0.07 145 SHOPIFY_IMG_NOT_RCVD_SFY 1725 0.54 1.13 0.26 146 RCVD_IN_IADB_SPF 1710 2.65 1.12 3.40 147 KHOP_HELO_FCRDNS 1693 1.26 1.11 1.34 148 T_MONEY_PERCENT 1678 0.49 1.10 0.19 149 TR_LOTS_OF_MONEY2 1678 0.49 1.10 0.19 150 HTTPS_HTTP_MISMATCH 1675 0.89 1.10 0.80 151 RCVD_IN_IADB_DK 1673 2.33 1.09 2.93 152 RCVD_IN_IADB_SENDERID 1659 2.38 1.08 3.00 153 XM_B_COVIDMETA 1648 0.49 1.08 0.20 154 XM_RXBody 1603 0.96 1.05 0.91 155 XMBdyGiftCard01 1588 0.82 1.04 0.71 156 NML_ADSP_CUSTOM_MED 1568 0.76 1.03 0.62 157 T_STY_INVIS_DIRECT 1546 0.53 1.01 0.29 158 TR_XM_PHPForged 1518 0.59 0.99 0.40 159 MPART_ALT_DIFF_COUNT 1511 0.73 0.99 0.60 160 URI_NOVOWEL 1511 1.59 0.99 1.89 161 XMSlimDrugH 1509 0.72 0.99 0.59 162 TM2_M_OBFU_COMMENT 1507 0.57 0.99 0.37 163 FORGED_GMAIL_RCVD 1500 0.70 0.98 0.57 164 TR_XM_PHPDW 1480 0.58 0.97 0.39 165 XM_B_REG_HTML 1477 0.47 0.97 0.22 166 TR_XM_SEO4 1476 0.38 0.97 0.10 167 T_Symld_Words_02 1472 0.68 0.96 0.54 168 TR_XM_FormFill2 1462 0.58 0.96 0.40 169 XM_B_Phish66 1455 0.50 0.95 0.28 170 RDNS_DYNAMIC 1441 0.49 0.94 0.27 171 TR_XM_InvalidRelay 1436 0.32 0.94 0.02 172 XM_H_PHPOS 1432 0.57 0.94 0.39 173 PDS_RDNS_DYNAMIC_FP 1425 0.43 0.93 0.18 174 HTML_TAG_BALANCE_BODY 1423 0.74 0.93 0.65 175 XM_OfRef7 1415 0.41 0.93 0.16 176 HTML_FONT_TINY_NORDNS 1414 0.35 0.92 0.07 177 TR_Mismatch_TLD_02 1414 0.35 0.92 0.07 178 TR_XM_DK_SendGrid 1406 0.85 0.92 0.81 179 XMHTML_After_End 1380 0.53 0.90 0.35 180 TR_XM_Spammywords 1366 0.44 0.89 0.22 181 XM_S_SpammyWords 1366 0.44 0.89 0.22 182 XM_H_Undi_Recip 1358 0.42 0.89 0.19 183 XMReplyNow 1321 0.44 0.86 0.24 184 TR_MetaPhish_Combo_01 1285 0.89 0.84 0.91 185 TM2_M_A_HREF_HREF 1285 0.56 0.84 0.42 186 TVD_RCVD_IP 1282 0.70 0.84 0.64 187 FONT_INVIS_LONG_LINE 1277 0.33 0.83 0.08 188 RELAYCOUNTRY_GB 1257 0.62 0.82 0.53 189 RCVD_IN_PBL 1255 0.78 0.82 0.76 190 XM_B_DNDMA 1242 0.61 0.81 0.51 191 XMSexyCombo_01 1236 0.36 0.81 0.14 192 BAYES_00 1234 7.84 0.81 11.26 193 TR_XM_Base64_M1 1232 0.73 0.81 0.69 194 XM_HighProb1 1224 0.27 0.80 0.02 195 XM_UB99 1220 0.26 0.80 0.00 196 FROM_SUSPICIOUS_NTLD 1205 0.29 0.79 0.04 197 XM_ProductURIs 1183 0.55 0.77 0.43 198 URIBL_BLACK 1180 0.28 0.77 0.04 199 XM_UB60 1179 0.29 0.77 0.05 200 HELO_DYNAMIC_SPLIT_IP 1169 0.25 0.76 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 274487 90.01 95.63 87.27 2 RELAYCOUNTRY_US 256919 82.54 84.28 81.68 3 DKIM_SIGNED 242642 81.87 91.60 77.15 4 XM_DK_Pass 237784 79.25 86.77 75.60 5 DKIM_VALID 234452 78.23 85.82 74.54 6 XM_B_Unicode 223361 75.61 85.05 71.02 7 BAYES_50 194362 55.57 42.77 61.80 8 DCC_CHECK_NEGATIVE 189786 47.52 21.16 60.34 9 DKIM_VALID_AU 186308 61.81 67.11 59.23 10 XMListUnsubscribeExists 156488 57.30 72.82 49.75 11 XM_B_SpammyWords 141511 53.10 69.78 44.99 12 XM_B_Unicode3 130818 44.39 50.15 41.59 13 DCC_CHECK 124550 51.93 77.30 39.60 14 RCVD_IN_MSPIKE_H2 112531 37.47 40.95 35.78 15 T_TM2_M_HEADER_IN_MSG 92716 26.85 21.46 29.48 16 DKIM_VALID_EF 92409 29.36 29.31 29.38 17 HTML_FONT_LOW_CONTRAST 87200 31.07 37.96 27.72 18 LOC_TINY_FONT_1 85660 34.97 50.89 27.23 19 FVGT_m_MULTI_ODD 81001 28.82 35.13 25.75 20 XMSubLong 74171 23.83 24.33 23.58 21 T_KAM_HTML_FONT_INVALID 70501 25.77 32.66 22.41 22 MIME_HTML_ONLY 63642 22.48 27.09 20.23 23 XM_B_SpammyWords2 58592 25.70 40.24 18.63 24 ALL_TRUSTED 47588 10.67 1.50 15.13 25 USER_IN_DEF_DKIM_WL 40581 9.43 2.28 12.90 26 TR_XM_DK_Unsub 40447 15.62 21.29 12.86 27 XM_Multi_Part_URI 39256 16.08 23.48 12.48 28 UNPARSEABLE_RELAY 38222 13.76 17.08 12.15 29 BAYES_00 35414 7.84 0.81 11.26 30 XM_B_PhoneNumber 32513 8.93 6.03 10.34 31 XM_Evil_Numbers_Gen 28772 9.72 10.89 9.15 32 XM_B_Unsub 28468 11.53 16.64 9.05 33 TooManyTo_001 27466 7.00 3.44 8.73 34 LotsOfNums_01 26077 8.38 8.57 8.29 35 TR_XM_DK_Bayes 23743 5.30 0.67 7.55 36 TR_XM_DK_Bayes1 23224 5.18 0.66 7.38 37 IN_ZIMBRA_NJ_WHITELIST 23186 4.99 0.09 7.37 38 TR_XM_BayesUnsub 22364 10.06 16.11 7.11 39 FSL_BULK_SIG 22263 7.50 8.36 7.08 40 XM_DKIMWhitelistDomains 20905 4.51 0.11 6.65 41 BAYES_60 20724 7.30 8.78 6.59 42 T_TooManySym_01 19578 5.10 2.78 6.22 43 LOTS_OF_MONEY 19526 8.08 11.92 6.21 44 TR_XM_DK_Bayes2 19429 4.32 0.49 6.18 45 XM_H_Long_From01 18097 5.45 4.83 5.75 46 XM_H_GMP 18077 5.61 5.33 5.75 47 TR_MAX_INTL_RELAY 17524 8.37 14.13 5.57 48 RCVD_IN_MSPIKE_WL 17339 5.06 4.14 5.51 49 RCVD_IN_MSPIKE_H3 17339 5.06 4.14 5.51 50 BAYES_40 16982 4.20 1.72 5.40 51 MIME_QP_LONG_LINE 16453 4.60 3.29 5.23 52 HTML_IMAGE_RATIO_02 15452 5.41 6.42 4.91 53 XM_PDF 15446 3.52 0.67 4.91 54 XM_B_Phish_Phrases 15255 6.01 8.41 4.85 55 XM_B_SpammyWords3 15090 8.21 15.22 4.80 56 XM_DK_Undo_02 14691 16.57 41.04 4.67 57 XMStrtUSub 14649 4.51 4.20 4.66 58 MPART_ALT_DIFF 14574 4.97 5.67 4.63 59 RCVD_IN_VALIDITY_SAFE 13903 3.71 2.23 4.42 60 XM_UncommonTLD01 13698 4.91 6.06 4.36 61 HTML_IMAGE_RATIO_04 13568 4.40 4.58 4.31 62 TR_XM_SpammyWords4 12859 6.28 10.78 4.09 63 RELAYCOUNTRY_META 12687 7.43 14.43 4.03 64 RCVD_IN_IADB_LISTED 12409 3.04 1.17 3.95 65 BAYES_20 12313 3.05 1.26 3.91 66 T_REMOTE_IMAGE 11748 2.99 1.46 3.74 67 RCVD_IN_VALIDITY_CERTIFIED 11532 3.10 1.93 3.67 68 RCVD_IN_IADB_SPF 10695 2.65 1.12 3.40 69 BAYES_80 10691 5.16 8.78 3.40 70 XMSubMetaSx_00 10583 4.33 6.32 3.36 71 XMNumbers 10240 3.24 3.20 3.26 72 ANY_BOUNCE_MESSAGE 10216 2.40 0.65 3.25 73 BOUNCE_MESSAGE 10210 2.40 0.65 3.25 74 BOTNET_IPINHOSTNAME 10014 5.44 10.08 3.18 75 MAILING_LIST_MULTI 9852 2.94 2.54 3.13 76 T_TooManySym_02 9820 2.32 0.67 3.12 77 BAYES_99 9757 11.47 28.68 3.10 78 HTML_IMAGE_RATIO_06 9700 3.60 4.66 3.08 79 RCVD_IN_IADB_SENDERID 9450 2.38 1.08 3.00 80 RCVD_IN_IADB_DK 9225 2.33 1.09 2.93 81 MIME_HTML_ONLY_MULTI 9208 3.01 3.19 2.93 82 TooManyTo_002 9047 2.13 0.61 2.88 83 RCVD_IN_IADB_VOUCHED 8704 1.98 0.36 2.77 84 HTML_MIME_NO_HTML_TAG 8591 2.39 1.68 2.73 85 DKIM_INVALID 8190 3.64 5.78 2.60 86 XM_CamelCaseFrm001 7777 2.59 2.83 2.47 87 HTML_IMAGE_RATIO_08 7748 2.65 3.02 2.46 88 INVALID_MSGID 7648 1.68 0.15 2.43 89 XMNoVowels 7620 2.72 3.34 2.42 90 XM_B_SpammyTLD 7599 2.88 3.84 2.42 91 BAYES_05 7450 1.79 0.59 2.37 92 BAYES_999 7425 8.77 21.94 2.36 93 XM_Body_Dirty_Words 7156 3.88 7.19 2.28 94 XM_B_URI_Unicode 7071 2.49 2.99 2.25 95 BAYES_95 6826 3.13 5.10 2.17 96 MIME_HTML_MOSTLY 6564 2.42 3.12 2.09 97 TR_XM_DKIM_Undo 6473 10.88 29.02 2.06 98 TO_MALFORMED 6306 1.35 0.01 2.00 99 TR_XM_SpammyRelay 6198 4.91 10.95 1.97 100 URI_NOVOWEL 5936 1.59 0.99 1.89 101 TM2_M_URI_OPT_OUT 5936 2.36 3.32 1.89 102 RCVD_IN_IADB_OPTIN 5842 1.33 0.24 1.86 103 FROM_EXCESS_BASE64 5805 1.86 1.89 1.85 104 T_XMDrugObfuBody_14 5475 2.65 4.53 1.74 105 TooManyTo_003 5396 1.33 0.53 1.72 106 TR_Symld_Words 5385 1.40 0.74 1.71 107 XMDiploma_00 5161 2.22 3.40 1.64 108 T_XMDrugObfuBody_08 5088 2.09 3.06 1.62 109 TR_XM_PhishingBody 5055 2.59 4.60 1.61 110 XM_DK_Undo_01 4986 1.63 1.71 1.59 111 SUBJ_ALL_CAPS 4958 1.67 1.85 1.58 112 TR_XM_UnparsRelay 4910 3.65 7.95 1.56 113 XM_SPF_SoftFail 4879 2.03 3.01 1.55 114 UNTRUSTED_Relay 4785 2.79 5.39 1.52 115 IN_HORDE_ADDRESS_BOOK 4739 1.05 0.10 1.51 116 XM_B_Unsub2 4652 1.84 2.58 1.48 117 XM_B_Investor 4611 2.53 4.73 1.47 118 HELO_NODOT 4474 1.03 0.21 1.42 119 HELO_NO_DOMAIN 4470 1.03 0.21 1.42 120 TR_XM_SpammyWords5 4442 2.11 3.55 1.41 121 XM_SendGrid 4315 1.49 1.74 1.37 122 KHOP_HELO_FCRDNS 4216 1.26 1.11 1.34 123 BOTNET 4203 3.76 8.74 1.34 124 XMStockSpam_06 4163 1.46 1.76 1.32 125 T_TooManySym_03 4002 0.91 0.17 1.27 126 URI_HEX 3972 1.34 1.51 1.26 127 TooManyTo_004 3906 0.99 0.46 1.24 128 TM2_M_VERY_LONG_WORD 3872 1.99 3.55 1.23 129 XM_GoogleGroups 3860 1.07 0.75 1.23 130 XMCapTrack 3823 0.95 0.41 1.22 131 XMGappySubj_01 3715 0.85 0.17 1.18 132 RELAYCOUNTRY_CA 3489 2.55 5.51 1.11 133 XM_H_Long_From02 3455 1.30 1.71 1.10 134 TR_DCC_Bayes_99 3387 7.81 21.67 1.08 135 XMSexyCombo_05 3274 1.97 3.87 1.04 136 TVD_SPACE_RATIO 3109 0.72 0.17 0.99 137 SpammyFromTLD_01 3091 1.21 1.67 0.98 138 T_FILL_THIS_FORM_SHORT 3090 1.09 1.30 0.98 139 TooManyTo_005 3071 0.79 0.42 0.98 140 XM_UB50 2989 1.53 2.74 0.95 141 XM_RXBody 2873 0.96 1.05 0.91 142 XM_ShortIntro_01 2870 0.77 0.49 0.91 143 TR_MetaPhish_Combo_01 2864 0.89 0.84 0.91 144 DKIM_ADSP_CUSTOM_MED 2851 1.02 1.25 0.91 145 XM_OfRef6 2838 1.84 3.78 0.90 146 XMGenDplmaNmb 2738 1.18 1.81 0.87 147 FROM_GOV_DKIM_AU 2669 0.62 0.15 0.85 148 RCVD_IN_BL_SPAMCOP_NET 2640 4.67 12.54 0.84 149 TR_XM_DK_SendGrid 2547 0.85 0.92 0.81 150 HTTPS_HTTP_MISMATCH 2502 0.89 1.10 0.80 151 LOW_PRICE 2449 0.59 0.19 0.78 152 RCVD_IN_PBL 2381 0.78 0.82 0.76 153 XM_B_COPY_HTML 2367 0.95 1.36 0.75 154 T_XMDrugObfuBody_00 2300 1.19 2.15 0.73 155 RELAYCOUNTRY_AU 2263 1.32 2.57 0.72 156 XMBdyGiftCard01 2235 0.82 1.04 0.71 157 T_OBFU_PDF_ATTACH 2201 0.51 0.10 0.70 158 TR_XM_Base64_M1 2183 0.73 0.81 0.69 159 XM_H_PHPMailer 2154 0.65 0.59 0.68 160 XMBrknScrpt_02 2153 0.91 1.38 0.68 161 XMGappySubj_02 2088 0.48 0.09 0.66 162 HTML_TAG_BALANCE_BODY 2031 0.74 0.93 0.65 163 T_XMHurry_00 2012 1.12 2.09 0.64 164 TVD_RCVD_IP 2004 0.70 0.84 0.64 165 NML_ADSP_CUSTOM_MED 1962 0.76 1.03 0.62 166 MPART_ALT_DIFF_COUNT 1885 0.73 0.99 0.60 167 XMBody_95 1864 0.46 0.18 0.59 168 XMPhish30 1858 1.08 2.09 0.59 169 XMSlimDrugH 1843 0.72 0.99 0.59 170 XM_B_SpammyWords4 1800 1.21 2.51 0.57 171 XMSubMetaI_00 1792 0.88 1.51 0.57 172 FORGED_GMAIL_RCVD 1786 0.70 0.98 0.57 173 MSGID_FROM_MTA_HEADER 1786 0.42 0.12 0.57 174 THIS_AD 1775 0.76 1.18 0.56 175 URI_TRY_3LD 1721 0.80 1.32 0.55 176 TO_NO_BRKTS_HTML_ONLY 1717 0.47 0.31 0.55 177 T_Symld_Words_02 1705 0.68 0.96 0.54 178 TR_XM_SPAMCOP 1679 3.79 10.48 0.53 179 RELAYCOUNTRY_GB 1664 0.62 0.82 0.53 180 XMMoneyMeta_00 1638 0.74 1.19 0.52 181 HTML_IMAGE_ONLY_20 1634 0.56 0.66 0.52 182 XMLngstWrd_00 1621 0.46 0.36 0.52 183 XM_B_DNDMA 1613 0.61 0.81 0.51 184 HTML_IMAGE_ONLY_28 1556 0.45 0.35 0.49 185 SpammyFromTLD_02 1495 1.07 2.29 0.48 186 RCVD_IN_PSBL 1479 0.75 1.32 0.47 187 XM_URI_RBL 1463 1.11 2.44 0.47 188 XMSubNoVowel 1451 0.41 0.31 0.46 189 TR_XM_SpammyWords2 1444 3.81 10.69 0.46 190 MIME_CHARSET_FARAWAY 1433 0.49 0.55 0.46 191 SHORT_HELO_AND_INLINE_IMAGE 1423 0.31 0.02 0.45 192 LongTLD 1416 0.77 1.44 0.45 193 XMBody_17 1414 1.16 2.62 0.45 194 XMBSHREFv2 1402 0.45 0.46 0.45 195 XMLngstWrd_01 1388 0.39 0.29 0.44 196 HTML_IMAGE_ONLY_32 1386 0.35 0.18 0.44 197 XM_ProductURIs 1367 0.55 0.77 0.43 198 TM2_M_A_HREF_HREF 1324 0.56 0.84 0.42 199 XMSubMetaSxObfu_03 1316 0.42 0.44 0.42 200 DIET_1 1300 0.82 1.67 0.41 ----------------------------------------------------------------------