Email: 464460 Autolearn: 0 AvgScore: 4.61 AvgScanTime: 1.30 sec Spam: 141170 Autolearn: 0 AvgScore: 14.67 AvgScanTime: 1.38 sec Ham: 323290 Autolearn: 0 AvgScore: 0.22 AvgScanTime: 1.26 sec Time Spent Running SA: 167.18 hours Time Spent Processing Spam: 54.10 hours Time Spent Processing Ham: 113.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132456 88.99 93.83 86.88 2 DKIM_SIGNED 123800 76.09 87.70 71.03 3 XM_DK_Pass 116894 73.61 82.80 69.59 4 RELAYCOUNTRY_US 116133 80.52 82.26 79.76 5 DKIM_VALID 115618 72.47 81.90 68.35 6 XM_B_Unicode 115538 72.39 81.84 68.26 7 DCC_CHECK 105358 47.11 74.63 35.09 8 XMListUnsubscribeExists 99211 51.92 70.28 43.90 9 XM_B_SpammyWords 97779 51.29 69.26 43.44 10 DKIM_VALID_AU 90036 57.34 63.78 54.53 11 XM_B_Unicode3 68276 41.77 48.36 38.88 12 LOC_TINY_FONT_1 67545 31.09 47.85 23.77 13 XM_B_SpammyWords2 57814 24.21 40.95 16.90 14 BAYES_50 56319 54.77 39.89 61.26 15 XM_DK_Undo_02 55576 14.69 39.37 3.92 16 RCVD_IN_MSPIKE_H2 55322 35.32 39.19 33.63 17 HTML_FONT_LOW_CONTRAST 51767 30.63 36.67 27.99 18 T_KAM_HTML_FONT_INVALID 45268 23.36 32.07 19.55 19 BAYES_99 44608 11.51 31.60 2.74 20 FVGT_m_MULTI_ODD 44088 26.57 31.23 24.53 21 TR_XM_DKIM_Undo 40729 9.82 28.85 1.51 22 DKIM_VALID_EF 39549 28.85 28.02 29.22 23 MIME_HTML_ONLY 38934 22.57 27.58 20.38 24 XMSubLong 36434 23.90 25.81 23.06 25 BAYES_999 34633 8.94 24.53 2.12 26 DCC_CHECK_NEGATIVE 33252 52.30 23.55 64.85 27 TR_DCC_Bayes_99 32052 7.49 22.70 0.85 28 XM_Multi_Part_URI 31147 15.37 22.06 12.44 29 T_TM2_M_HEADER_IN_MSG 30737 30.08 21.77 33.71 30 TR_XM_DK_Unsub 28237 14.82 20.00 12.55 31 XM_B_Unsub 21792 10.38 15.44 8.18 32 UNPARSEABLE_RELAY 21595 12.77 15.30 11.66 33 XM_B_SpammyWords3 21216 7.54 15.03 4.28 34 RELAYCOUNTRY_META 21086 7.03 14.94 3.57 35 TR_XM_BayesUnsub 20619 8.63 14.61 6.02 36 TR_MAX_INTL_RELAY 20504 7.85 14.52 4.94 37 LOTS_OF_MONEY 16644 8.08 11.79 6.46 38 TR_XM_SpammyWords2 16011 3.62 11.34 0.25 39 TR_XM_SpammyRelay 15075 4.31 10.68 1.53 40 TR_XM_SpammyWords4 14649 5.75 10.38 3.73 41 BOTNET_IPINHOSTNAME 14035 4.94 9.94 2.75 42 XM_Evil_Numbers_Gen 13946 9.30 9.88 9.05 43 BOTNET 12935 3.61 9.16 1.18 44 BAYES_80 12697 4.87 8.99 3.06 45 RCVD_IN_BL_SPAMCOP_NET 12592 3.08 8.92 0.53 46 XM_Body_Dirty_Words 11504 4.38 8.15 2.73 47 BAYES_60 11317 6.66 8.02 6.07 48 FSL_BULK_SIG 11203 6.92 7.94 6.48 49 LotsOfNums_01 11118 9.15 7.88 9.70 50 XM_B_Phish_Phrases 11000 5.46 7.79 4.44 51 TR_XM_UnparsRelay 10841 3.29 7.68 1.37 52 TR_XM_SPAMCOP 10067 2.40 7.13 0.34 53 XMSubMetaSx_00 9300 4.67 6.59 3.83 54 HTML_IMAGE_RATIO_02 9006 4.96 6.38 4.34 55 MPART_ALT_DIFF 8799 4.66 6.23 3.98 56 RELAYCOUNTRY_CA 8581 2.56 6.08 1.03 57 DKIM_INVALID 8182 3.63 5.80 2.68 58 XM_UncommonTLD01 8146 4.61 5.77 4.11 59 XM_B_PhoneNumber 7830 8.68 5.55 10.05 60 UNTRUSTED_Relay 7532 2.61 5.34 1.41 61 XM_H_Long_From01 7485 5.33 5.30 5.35 62 BAYES_95 7405 2.90 5.25 1.87 63 XM_H_GMP 7264 5.83 5.15 6.13 64 HTML_IMAGE_RATIO_04 6948 3.97 4.92 3.56 65 XM_B_Investor 6829 2.44 4.84 1.39 66 TR_XM_SpammyWords5 6173 2.33 4.37 1.44 67 TR_XM_PhishingBody 6109 2.32 4.33 1.45 68 XMSexyCombo_05 6006 2.48 4.25 1.70 69 TM2_M_VERY_LONG_WORD 5941 4.57 4.21 4.73 70 XMStrtUSub 5803 4.34 4.11 4.44 71 RCVD_IN_MSPIKE_WL 5762 4.76 4.08 5.05 72 RCVD_IN_MSPIKE_H3 5762 4.76 4.08 5.05 73 HTML_IMAGE_RATIO_06 5622 2.83 3.98 2.32 74 T_XMDrugObfuBody_14 5562 2.44 3.94 1.78 75 MIME_HTML_MOSTLY 5408 2.51 3.83 1.93 76 XM_OfRef6 5358 1.87 3.80 1.03 77 TooManyTo_001 5093 7.28 3.61 8.88 78 MIME_HTML_ONLY_MULTI 4999 2.73 3.54 2.37 79 T_TooManySym_01 4937 5.42 3.50 6.25 80 XM_B_SpammyTLD 4886 2.70 3.46 2.37 81 ALL_TRUSTED 4630 13.20 3.28 17.53 82 RCVD_IN_VALIDITY_RPBL 4586 1.03 3.25 0.06 83 XMNumbers 4585 3.16 3.25 3.13 84 XM_CamelCaseFrm001 4394 2.28 3.11 1.91 85 MIME_QP_LONG_LINE 4382 3.99 3.10 4.37 86 T_XMDrugObfuBody_08 4265 1.99 3.02 1.53 87 TM2_M_URI_OPT_OUT 4222 2.06 2.99 1.65 88 SUBJ_ALL_CAPS 4158 1.99 2.95 1.57 89 XM_UB50 4098 1.49 2.90 0.88 90 XMNoVowels 4006 2.59 2.84 2.49 91 HTML_IMAGE_RATIO_08 3972 2.15 2.81 1.87 92 XM_SPF_SoftFail 3961 2.23 2.81 1.97 93 DKIM_ADSP_NXDOMAIN 3824 1.05 2.71 0.33 94 NO_DNS_FOR_FROM 3768 1.00 2.67 0.27 95 TR_XM_MaxWHORU 3748 0.96 2.65 0.22 96 T_FILL_THIS_FORM_SHORT 3611 1.46 2.56 0.98 97 XM_B_Unsub2 3561 1.68 2.52 1.32 98 FROM_EXCESS_BASE64 3535 2.04 2.50 1.84 99 RELAYCOUNTRY_AU 3501 1.02 2.48 0.38 100 T_XMHurry_00 3464 1.18 2.45 0.63 101 XM_URI_RBL 3410 1.02 2.42 0.40 102 XMDiploma_00 3320 1.69 2.35 1.40 103 MAILING_LIST_MULTI 3301 2.87 2.34 3.11 104 XM_B_URI_Unicode 3218 2.12 2.28 2.05 105 TR_XM_INV_DKIM 3088 0.77 2.19 0.15 106 XM_B_SpammyWords4 3080 0.96 2.18 0.43 107 USER_IN_DEF_DKIM_WL 3014 8.39 2.14 11.12 108 RCVD_IN_VALIDITY_SAFE 2903 3.02 2.06 3.44 109 NORDNS_LOW_CONTRAST 2865 0.64 2.03 0.03 110 SpammyFromTLD_02 2788 0.77 1.97 0.24 111 HTML_MIME_NO_HTML_TAG 2755 3.40 1.95 4.04 112 XMBody_17 2705 0.85 1.92 0.38 113 SpammyFromTLD_01 2629 1.15 1.86 0.84 114 XMStockSpam_06 2549 1.43 1.81 1.26 115 T_XMDrugObfuBody_00 2547 1.09 1.80 0.78 116 RCVD_IN_VALIDITY_CERTIFIED 2544 2.54 1.80 2.86 117 TR_XM_NoHeaderRelay 2541 0.69 1.80 0.20 118 RCVD_IN_ZEN_LASTEXTERNAL 2506 0.54 1.78 0.00 119 SHORTCIRCUIT 2506 0.54 1.78 0.00 120 KHOP_HELO_FCRDNS 2352 2.57 1.67 2.97 121 XMBrknScrpt_02 2351 1.05 1.67 0.78 122 T_Symld_Words_02 2320 0.97 1.64 0.67 123 XM_DK_Undo_01 2285 1.65 1.62 1.66 124 TR_Symld_Words 2238 1.65 1.59 1.67 125 BAYES_40 2220 5.02 1.57 6.53 126 ANY_BOUNCE_MESSAGE 2215 5.47 1.57 7.17 127 BOUNCE_MESSAGE 2206 5.46 1.56 7.17 128 DIET_1 2183 0.73 1.55 0.37 129 XMPhish30 2098 0.83 1.49 0.54 130 MIME_CHARSET_FARAWAY 2040 2.06 1.45 2.33 131 TM2_M_BODY_EMPTY 1982 0.70 1.40 0.40 132 T_REMOTE_IMAGE 1968 3.13 1.39 3.88 133 XM_SendGrid 1961 1.42 1.39 1.44 134 URI_HEX 1959 1.27 1.39 1.22 135 LongTLD 1932 0.72 1.37 0.44 136 XMGenDplmaNmb 1932 0.94 1.37 0.76 137 XMEmptyBody_01 1920 0.47 1.36 0.07 138 BAYES_20 1919 3.80 1.36 4.86 139 XM_B_Phish66 1812 0.63 1.28 0.34 140 TR_XM_FormFill 1789 0.39 1.27 0.01 141 RCVD_IN_PBL 1772 0.96 1.26 0.83 142 RCVD_IN_PSBL 1739 0.66 1.23 0.41 143 XM_B_COPY_HTML 1717 0.78 1.22 0.59 144 XMSubMetaI_00 1650 0.72 1.17 0.53 145 SHOPIFY_IMG_NOT_RCVD_SFY 1623 0.53 1.15 0.25 146 DKIM_ADSP_CUSTOM_MED 1617 1.01 1.15 0.94 147 HTML_TAG_BALANCE_BODY 1574 0.79 1.11 0.64 148 XM_H_Long_From02 1574 0.96 1.11 0.89 149 TR_LOTS_OF_MONEY3 1533 0.52 1.09 0.28 150 TR_Caps_n_Bayes_99 1517 0.34 1.07 0.01 151 RCVD_IN_IADB_LISTED 1507 2.59 1.07 3.25 152 XMHTML_After_End 1504 0.99 1.07 0.95 153 TR_XM_Base64_M1 1498 0.80 1.06 0.69 154 MPART_ALT_DIFF_COUNT 1454 0.77 1.03 0.65 155 TR_MetaPhish_Combo_01 1447 0.89 1.03 0.83 156 RELAYCOUNTRY_FR 1437 0.46 1.02 0.21 157 T_TooManySym_02 1435 2.64 1.02 3.34 158 XM_B_SEO 1431 0.47 1.01 0.23 159 RCVD_IN_IADB_SPF 1416 2.26 1.00 2.81 160 XM_H_Undi_Recip 1406 0.47 1.00 0.24 161 TR_XM_PHPForged 1402 0.49 0.99 0.27 162 TR_XM_PHPDW 1393 0.49 0.99 0.27 163 XM_B_REG_HTML 1385 0.45 0.98 0.22 164 T_STY_INVIS_DIRECT 1382 0.55 0.98 0.36 165 HTML_FONT_TINY_NORDNS 1380 0.35 0.98 0.07 166 RCVD_IN_IADB_DK 1374 1.98 0.97 2.42 167 RCVD_IN_IADB_SENDERID 1370 2.02 0.97 2.47 168 HTTPS_HTTP_MISMATCH 1367 0.86 0.97 0.82 169 TR_XM_FormFill2 1367 0.48 0.97 0.27 170 BAYES_00 1363 8.07 0.97 11.17 171 TM2_M_OBFU_COMMENT 1356 0.62 0.96 0.47 172 URI_TRY_3LD 1338 0.63 0.95 0.49 173 XM_H_PHPOS 1326 0.46 0.94 0.26 174 TR_Mismatch_TLD_02 1322 0.33 0.94 0.06 175 XM_UB99 1291 0.28 0.91 0.01 176 XMSubMetaSxObfu_03 1276 0.53 0.90 0.37 177 TR_XM_SEO4 1276 0.35 0.90 0.10 178 T_MONEY_PERCENT 1240 0.45 0.88 0.27 179 TR_LOTS_OF_MONEY2 1240 0.45 0.88 0.27 180 URI_NOVOWEL 1227 1.45 0.87 1.70 181 XM_ProductURIs 1213 0.55 0.86 0.42 182 TR_XM_DK_SendGrid 1211 0.85 0.86 0.84 183 HTML_FONT_FACE_BAD 1211 0.51 0.86 0.35 184 XMReplyNow 1204 0.45 0.85 0.27 185 XM_PDF 1189 3.61 0.84 4.81 186 TR_XM_DK_Bayes 1186 5.19 0.84 7.09 187 FONT_INVIS_LONG_LINE 1183 0.32 0.84 0.09 188 RCVD_IN_SORBS_DUL 1175 0.29 0.83 0.05 189 TR_XM_DK_Bayes1 1173 5.06 0.83 6.91 190 MAY_BE_FORGED 1162 2.70 0.82 3.51 191 XM_B_COVIDMETA 1162 0.35 0.82 0.14 192 TR_XM_RelayPhish 1148 0.30 0.81 0.07 193 XM_B_DNDMA 1146 0.51 0.81 0.37 194 FORGED_GMAIL_RCVD 1146 0.65 0.81 0.58 195 MultiRelay_CC 1135 0.38 0.80 0.19 196 PLING_QUERY 1125 0.47 0.80 0.33 197 XM_GoogleGroups 1105 1.11 0.78 1.25 198 TR_XM_Undi_Recip19 1095 0.30 0.78 0.10 199 CHARSET_FARAWAY_HEADER 1088 1.64 0.77 2.02 200 URIBL_BLACK 1086 0.26 0.77 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 280864 88.99 93.83 86.88 2 RELAYCOUNTRY_US 257852 80.52 82.26 79.76 3 DKIM_SIGNED 229623 76.09 87.70 71.03 4 XM_DK_Pass 224984 73.61 82.80 69.59 5 DKIM_VALID 220957 72.47 81.90 68.35 6 XM_B_Unicode 220677 72.39 81.84 68.26 7 DCC_CHECK_NEGATIVE 209655 52.30 23.55 64.85 8 BAYES_50 198055 54.77 39.89 61.26 9 DKIM_VALID_AU 176306 57.34 63.78 54.53 10 XMListUnsubscribeExists 141922 51.92 70.28 43.90 11 XM_B_SpammyWords 140443 51.29 69.26 43.44 12 XM_B_Unicode3 125709 41.77 48.36 38.88 13 DCC_CHECK 113447 47.11 74.63 35.09 14 T_TM2_M_HEADER_IN_MSG 108994 30.08 21.77 33.71 15 RCVD_IN_MSPIKE_H2 108735 35.32 39.19 33.63 16 DKIM_VALID_EF 94470 28.85 28.02 29.22 17 HTML_FONT_LOW_CONTRAST 90489 30.63 36.67 27.99 18 FVGT_m_MULTI_ODD 79317 26.57 31.23 24.53 19 LOC_TINY_FONT_1 76848 31.09 47.85 23.77 20 XMSubLong 74561 23.90 25.81 23.06 21 MIME_HTML_ONLY 65897 22.57 27.58 20.38 22 T_KAM_HTML_FONT_INVALID 63214 23.36 32.07 19.55 23 ALL_TRUSTED 56686 13.20 3.28 17.53 24 XM_B_SpammyWords2 54630 24.21 40.95 16.90 25 TR_XM_DK_Unsub 40580 14.82 20.00 12.55 26 XM_Multi_Part_URI 40219 15.37 22.06 12.44 27 UNPARSEABLE_RELAY 37696 12.77 15.30 11.66 28 BAYES_00 36120 8.07 0.97 11.17 29 USER_IN_DEF_DKIM_WL 35959 8.39 2.14 11.12 30 XM_B_PhoneNumber 32493 8.68 5.55 10.05 31 LotsOfNums_01 31359 9.15 7.88 9.70 32 XM_Evil_Numbers_Gen 29261 9.30 9.88 9.05 33 TooManyTo_001 28720 7.28 3.61 8.88 34 XM_B_Unsub 26432 10.38 15.44 8.18 35 ANY_BOUNCE_MESSAGE 23188 5.47 1.57 7.17 36 BOUNCE_MESSAGE 23173 5.46 1.56 7.17 37 TR_XM_DK_Bayes 22929 5.19 0.84 7.09 38 TR_XM_DK_Bayes1 22347 5.06 0.83 6.91 39 BAYES_40 21105 5.02 1.57 6.53 40 IN_ZIMBRA_NJ_WHITELIST 21066 4.57 0.10 6.52 41 FSL_BULK_SIG 20939 6.92 7.94 6.48 42 LOTS_OF_MONEY 20869 8.08 11.79 6.46 43 T_TooManySym_01 20217 5.42 3.50 6.25 44 XM_DKIMWhitelistDomains 19909 4.31 0.09 6.16 45 XM_H_GMP 19833 5.83 5.15 6.13 46 BAYES_60 19611 6.66 8.02 6.07 47 TR_XM_BayesUnsub 19473 8.63 14.61 6.02 48 TR_XM_DK_Bayes2 18872 4.26 0.63 5.84 49 XM_H_Long_From01 17284 5.33 5.30 5.35 50 RCVD_IN_MSPIKE_WL 16328 4.76 4.08 5.05 51 RCVD_IN_MSPIKE_H3 16326 4.76 4.08 5.05 52 TR_MAX_INTL_RELAY 15957 7.85 14.52 4.94 53 BAYES_20 15717 3.80 1.36 4.86 54 XM_PDF 15561 3.61 0.84 4.81 55 TM2_M_VERY_LONG_WORD 15307 4.57 4.21 4.73 56 XM_B_Phish_Phrases 14344 5.46 7.79 4.44 57 XMStrtUSub 14343 4.34 4.11 4.44 58 MIME_QP_LONG_LINE 14140 3.99 3.10 4.37 59 HTML_IMAGE_RATIO_02 14028 4.96 6.38 4.34 60 XM_B_SpammyWords3 13826 7.54 15.03 4.28 61 XM_UncommonTLD01 13277 4.61 5.77 4.11 62 HTML_IMAGE_ONLY_32 13115 2.91 0.29 4.06 63 HTML_MIME_NO_HTML_TAG 13045 3.40 1.95 4.04 64 MPART_ALT_DIFF 12862 4.66 6.23 3.98 65 XM_DK_Undo_02 12659 14.69 39.37 3.92 66 T_REMOTE_IMAGE 12555 3.13 1.39 3.88 67 XMSubMetaSx_00 12375 4.67 6.59 3.83 68 TR_XM_SpammyWords4 12044 5.75 10.38 3.73 69 RELAYCOUNTRY_META 11557 7.03 14.94 3.57 70 HTML_IMAGE_RATIO_04 11510 3.97 4.92 3.56 71 MAY_BE_FORGED 11356 2.70 0.82 3.51 72 RCVD_IN_VALIDITY_SAFE 11110 3.02 2.06 3.44 73 T_TooManySym_02 10810 2.64 1.02 3.34 74 TooManyTo_002 10599 2.48 0.66 3.28 75 RCVD_IN_IADB_LISTED 10500 2.59 1.07 3.25 76 XMNumbers 10113 3.16 3.25 3.13 77 MAILING_LIST_MULTI 10051 2.87 2.34 3.11 78 BAYES_80 9906 4.87 8.99 3.06 79 KHOP_HELO_FCRDNS 9588 2.57 1.67 2.97 80 RCVD_IN_VALIDITY_CERTIFIED 9261 2.54 1.80 2.86 81 RCVD_IN_IADB_SPF 9088 2.26 1.00 2.81 82 BOTNET_IPINHOSTNAME 8905 4.94 9.94 2.75 83 BAYES_99 8854 11.51 31.60 2.74 84 XM_Body_Dirty_Words 8819 4.38 8.15 2.73 85 DKIM_INVALID 8666 3.63 5.80 2.68 86 XMNoVowels 8046 2.59 2.84 2.49 87 RCVD_IN_IADB_SENDERID 7990 2.02 0.97 2.47 88 BAYES_05 7871 1.87 0.57 2.43 89 RCVD_IN_IADB_DK 7817 1.98 0.97 2.42 90 XM_B_SpammyTLD 7672 2.70 3.46 2.37 91 MIME_HTML_ONLY_MULTI 7658 2.73 3.54 2.37 92 MIME_CHARSET_FARAWAY 7539 2.06 1.45 2.33 93 HTML_IMAGE_RATIO_06 7509 2.83 3.98 2.32 94 INVALID_MSGID 7367 1.62 0.12 2.28 95 RCVD_IN_IADB_VOUCHED 7313 1.71 0.45 2.26 96 BAYES_999 6867 8.94 24.53 2.12 97 XM_B_URI_Unicode 6622 2.12 2.28 2.05 98 CHARSET_FARAWAY_HEADER 6527 1.64 0.77 2.02 99 XM_SPF_SoftFail 6378 2.23 2.81 1.97 100 TO_MALFORMED 6265 1.36 0.05 1.94 101 TooManyTo_003 6249 1.52 0.58 1.93 102 MIME_HTML_MOSTLY 6233 2.51 3.83 1.93 103 XM_CamelCaseFrm001 6181 2.28 3.11 1.91 104 BAYES_95 6043 2.90 5.25 1.87 105 HTML_IMAGE_RATIO_08 6035 2.15 2.81 1.87 106 FROM_EXCESS_BASE64 5945 2.04 2.50 1.84 107 XMLngstWrd_00 5850 1.45 0.63 1.81 108 T_XMDrugObfuBody_14 5765 2.44 3.94 1.78 109 XMSexyCombo_05 5512 2.48 4.25 1.70 110 URI_NOVOWEL 5502 1.45 0.87 1.70 111 TR_Symld_Words 5415 1.65 1.59 1.67 112 XM_DK_Undo_01 5374 1.65 1.62 1.66 113 TM2_M_URI_OPT_OUT 5326 2.06 2.99 1.65 114 RCVD_IN_IADB_OPTIN 5083 1.16 0.21 1.57 115 SUBJ_ALL_CAPS 5068 1.99 2.95 1.57 116 T_XMDrugObfuBody_08 4959 1.99 3.02 1.53 117 TR_XM_SpammyRelay 4942 4.31 10.68 1.53 118 TR_XM_DKIM_Undo 4880 9.82 28.85 1.51 119 XMCapTrack 4687 1.15 0.47 1.45 120 TR_XM_PhishingBody 4684 2.32 4.33 1.45 121 HELO_NODOT 4657 1.10 0.32 1.44 122 HELO_NO_DOMAIN 4650 1.10 0.32 1.44 123 TR_XM_SpammyWords5 4649 2.33 4.37 1.44 124 XM_SendGrid 4645 1.42 1.39 1.44 125 UNTRUSTED_Relay 4568 2.61 5.34 1.41 126 XMDiploma_00 4530 1.69 2.35 1.40 127 XM_B_Investor 4496 2.44 4.84 1.39 128 TR_XM_UnparsRelay 4444 3.29 7.68 1.37 129 TooManyTo_004 4409 1.10 0.51 1.36 130 IN_HORDE_ADDRESS_BOOK 4389 0.98 0.12 1.36 131 XM_B_Unsub2 4260 1.68 2.52 1.32 132 T_TooManySym_03 4258 0.99 0.24 1.32 133 XMStockSpam_06 4089 1.43 1.81 1.26 134 XM_GoogleGroups 4044 1.11 0.78 1.25 135 URI_HEX 3933 1.27 1.39 1.22 136 BOTNET 3825 3.61 9.16 1.18 137 XMGappySubj_01 3663 0.85 0.19 1.13 138 TooManyTo_005 3635 0.92 0.46 1.12 139 TVD_SPACE_RATIO 3348 0.78 0.20 1.04 140 RELAYCOUNTRY_CA 3316 2.56 6.08 1.03 141 XM_OfRef6 3316 1.87 3.80 1.03 142 T_FILL_THIS_FORM_SHORT 3180 1.46 2.56 0.98 143 XMHTML_After_End 3086 0.99 1.07 0.95 144 DKIM_ADSP_CUSTOM_MED 3053 1.01 1.15 0.94 145 XM_H_Long_From02 2886 0.96 1.11 0.89 146 XM_UB50 2836 1.49 2.90 0.88 147 XM_H_PHPMailer 2773 0.82 0.73 0.86 148 XM_ShortIntro_01 2748 0.72 0.43 0.85 149 TR_DCC_Bayes_99 2734 7.49 22.70 0.85 150 TR_XM_DK_SendGrid 2721 0.85 0.86 0.84 151 SpammyFromTLD_01 2719 1.15 1.86 0.84 152 TR_MetaPhish_Combo_01 2697 0.89 1.03 0.83 153 RCVD_IN_PBL 2683 0.96 1.26 0.83 154 HTTPS_HTTP_MISMATCH 2643 0.86 0.97 0.82 155 XMBrknScrpt_02 2536 1.05 1.67 0.78 156 T_XMDrugObfuBody_00 2523 1.09 1.80 0.78 157 XMGappySubj_02 2507 0.56 0.05 0.78 158 XMGenDplmaNmb 2447 0.94 1.37 0.76 159 T_OBFU_PDF_ATTACH 2396 0.57 0.18 0.74 160 XMLngstWrd_01 2328 0.63 0.42 0.72 161 TR_XM_Base64_M1 2217 0.80 1.06 0.69 162 T_Symld_Words_02 2166 0.97 1.64 0.67 163 MPART_ALT_DIFF_COUNT 2105 0.77 1.03 0.65 164 TVD_RCVD_IP 2093 0.64 0.63 0.65 165 HTML_TAG_BALANCE_BODY 2078 0.79 1.11 0.64 166 NML_ADSP_CUSTOM_MED 2068 0.67 0.74 0.64 167 XMBdyGiftCard01 2049 0.64 0.66 0.63 168 T_XMHurry_00 2029 1.18 2.45 0.63 169 XMSexyCombo_01 2021 0.64 0.69 0.63 170 FROM_GOV_DKIM_AU 1918 0.54 0.42 0.59 171 XM_B_FormFill 1911 0.43 0.04 0.59 172 XM_B_COPY_HTML 1901 0.78 1.22 0.59 173 XMLngstWrd_02 1899 0.52 0.37 0.59 174 HTML_IMAGE_ONLY_20 1898 0.63 0.73 0.59 175 FORGED_GMAIL_RCVD 1871 0.65 0.81 0.58 176 TO_NO_BRKTS_HTML_ONLY 1772 0.53 0.49 0.55 177 XMPhish30 1754 0.83 1.49 0.54 178 XMBody_95 1726 0.43 0.21 0.53 179 RCVD_IN_BL_SPAMCOP_NET 1707 3.08 8.92 0.53 180 XMSubMetaI_00 1706 0.72 1.17 0.53 181 MSGID_FROM_MTA_HEADER 1696 0.40 0.11 0.52 182 XMSexyCombo_04 1689 0.44 0.24 0.52 183 RELAYCOUNTRY_GB 1621 0.58 0.75 0.50 184 URI_TRY_3LD 1570 0.63 0.95 0.49 185 T_MANY_PILL_PRICE 1561 0.34 0.00 0.48 186 XMSlimDrugH 1533 0.52 0.63 0.47 187 T_TVD_MIME_NO_HEADERS 1532 0.34 0.04 0.47 188 TM2_M_OBFU_COMMENT 1529 0.62 0.96 0.47 189 BASE64_LENGTH_79_INF 1519 0.44 0.37 0.47 190 SHORT_HELO_AND_INLINE_IMAGE 1467 0.33 0.03 0.45 191 XMLngstWrd_03 1431 0.40 0.30 0.44 192 LongTLD 1409 0.72 1.37 0.44 193 XM_B_SpammyWords4 1402 0.96 2.18 0.43 194 MISSING_HEADERS 1360 0.44 0.49 0.42 195 T_TooManySym_04 1357 0.32 0.09 0.42 196 XM_ProductURIs 1350 0.55 0.86 0.42 197 RCVD_IN_PSBL 1331 0.66 1.23 0.41 198 XMMoneyMeta_00 1313 0.45 0.55 0.41 199 XMDateMe_00 1311 0.39 0.34 0.41 200 XM_URI_RBL 1308 1.02 2.42 0.40 ----------------------------------------------------------------------