Email: 532240 Autolearn: 0 AvgScore: 2.88 AvgScanTime: 1.38 sec Spam: 158790 Autolearn: 0 AvgScore: 14.39 AvgScanTime: 1.50 sec Ham: 373450 Autolearn: 0 AvgScore: -2.01 AvgScanTime: 1.33 sec Time Spent Running SA: 203.65 hours Time Spent Processing Spam: 66.19 hours Time Spent Processing Ham: 137.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 151833 90.05 95.62 87.68 2 DKIM_SIGNED 132605 68.96 83.51 62.78 3 XM_B_Unicode 131339 74.85 82.71 71.51 4 RELAYCOUNTRY_US 125071 80.79 78.77 81.65 5 XM_DK_Pass 124128 66.46 78.17 61.48 6 DCC_CHECK 123050 45.96 77.49 32.55 7 DKIM_VALID 122840 65.54 77.36 60.52 8 XMListUnsubscribeExists 103633 47.18 65.26 39.49 9 XM_B_SpammyWords 101895 49.79 64.17 43.68 10 DKIM_VALID_AU 97842 52.41 61.62 48.50 11 XM_B_Unicode3 82945 45.41 52.24 42.51 12 LOC_TINY_FONT_1 82043 30.62 51.67 21.67 13 RCVD_IN_MSPIKE_H2 62218 32.39 39.18 29.50 14 BAYES_50 61422 52.26 38.68 58.03 15 XM_B_SpammyWords2 57997 21.18 36.52 14.65 16 XM_DK_Undo_02 57232 13.56 36.04 4.00 17 HTML_FONT_LOW_CONTRAST 55947 28.34 35.23 25.41 18 MIME_HTML_ONLY 52215 25.43 32.88 22.27 19 FVGT_m_MULTI_ODD 48216 23.36 30.36 20.38 20 T_KAM_HTML_FONT_INVALID 47353 21.19 29.82 17.53 21 XM_Multi_Part_URI 44074 16.07 27.76 11.10 22 BAYES_99 43295 10.56 27.27 3.46 23 DKIM_VALID_EF 42698 24.81 26.89 23.93 24 TR_XM_DKIM_Undo 41170 8.95 25.93 1.72 25 XMSubLong 36839 23.24 23.20 23.26 26 T_TM2_M_HEADER_IN_MSG 33931 26.67 21.37 28.92 27 BAYES_999 33857 8.25 21.32 2.69 28 DCC_CHECK_NEGATIVE 33459 53.59 21.07 67.41 29 TR_DCC_Bayes_99 31293 6.44 19.71 0.80 30 TR_XM_DK_Unsub 30164 12.71 19.00 10.04 31 XM_B_Unsub 25787 10.04 16.24 7.40 32 FSL_BULK_SIG 25684 9.55 16.17 6.74 33 UNPARSEABLE_RELAY 25398 11.47 15.99 9.55 34 TR_XM_BayesUnsub 24833 8.51 15.64 5.48 35 TR_MAX_INTL_RELAY 22131 7.06 13.94 4.14 36 RELAYCOUNTRY_META 22001 6.31 13.86 3.10 37 XM_B_SpammyWords3 21288 6.51 13.41 3.58 38 LOTS_OF_MONEY 19766 7.38 12.45 5.22 39 TR_XM_SpammyWords4 18198 5.83 11.46 3.43 40 TR_XM_SpammyWords2 16165 3.23 10.18 0.28 41 TR_XM_SpammyRelay 15879 4.06 10.00 1.54 42 RCVD_IN_BL_SPAMCOP_NET 15669 3.53 9.87 0.83 43 XM_Evil_Numbers_Gen 15446 9.81 9.73 9.85 44 BOTNET_IPINHOSTNAME 15292 4.60 9.63 2.46 45 BOTNET 14160 3.46 8.92 1.14 46 BAYES_80 13859 4.37 8.73 2.52 47 ALL_TRUSTED 13196 13.64 8.31 15.90 48 TR_XM_UnparsRelay 13086 3.35 8.24 1.28 49 XM_Body_Dirty_Words 12789 3.85 8.05 2.07 50 T_REMOTE_IMAGE 12361 4.50 7.78 3.11 51 TR_XM_SPAMCOP 12316 2.69 7.76 0.54 52 BAYES_60 12241 5.95 7.71 5.20 53 LotsOfNums_01 11256 8.40 7.09 8.95 54 XM_B_Phish_Phrases 11179 4.96 7.04 4.07 55 XMSubMetaSx_00 10639 4.43 6.70 3.46 56 TR_XM_NOT_AMZN 10415 1.97 6.56 0.01 57 AMAZON_IMG_NOT_RCVD_AMZN 10415 1.97 6.56 0.01 58 XM_H_NotFromAmazon 10286 1.94 6.48 0.00 59 XM_UncommonTLD01 10177 4.55 6.41 3.75 60 DKIM_INVALID 9765 3.42 6.15 2.26 61 XM_B_PhoneNumber 9089 7.98 5.72 8.93 62 MPART_ALT_DIFF 8692 8.53 5.47 9.83 63 BAYES_20 8434 4.85 5.31 4.65 64 HTML_IMAGE_RATIO_02 8288 4.44 5.22 4.10 65 UNTRUSTED_Relay 8175 2.40 5.15 1.23 66 RELAYCOUNTRY_CA 8159 2.16 5.14 0.90 67 HTML_IMAGE_RATIO_04 7953 11.55 5.01 14.33 68 BAYES_95 7802 2.60 4.91 1.61 69 XM_H_Long_From01 7684 4.88 4.84 4.90 70 XM_B_Investor 7120 2.23 4.48 1.27 71 TR_XM_PhishingBody 6909 2.38 4.35 1.54 72 XM_H_GMP 6854 4.86 4.32 5.09 73 T_XMDrugObfuBody_14 6526 2.18 4.11 1.36 74 XMStrtUSub 6424 8.75 4.05 10.76 75 XMSexyCombo_05 6379 2.19 4.02 1.42 76 TooManyTo_001 6292 6.49 3.96 7.56 77 RCVD_IN_VALIDITY_RPBL 6014 1.15 3.79 0.03 78 HTML_IMAGE_RATIO_06 5646 3.97 3.56 4.15 79 MIME_QP_LONG_LINE 5381 4.14 3.39 4.46 80 XM_B_SpammyTLD 5104 2.51 3.21 2.21 81 XM_OfRef6 5069 1.61 3.19 0.93 82 RCVD_IN_MSPIKE_WL 4968 4.18 3.13 4.63 83 RCVD_IN_MSPIKE_H3 4968 4.18 3.13 4.63 84 BAYES_40 4937 5.01 3.11 5.82 85 MIME_HTML_ONLY_MULTI 4912 6.56 3.09 8.03 86 TM2_M_VERY_LONG_WORD 4745 3.73 2.99 4.04 87 MIME_HTML_MOSTLY 4743 2.27 2.99 1.96 88 XM_B_URI_Unicode 4735 2.11 2.98 1.74 89 TR_XM_SpammyWords5 4683 1.78 2.95 1.28 90 XM_SPF_SoftFail 4610 1.66 2.90 1.13 91 XM_B_SpammyWords4 4493 1.29 2.83 0.64 92 XMDiploma_00 4445 1.84 2.80 1.44 93 XMNumbers 4326 2.73 2.72 2.73 94 XM_B_Unsub2 4191 1.66 2.64 1.24 95 TR_XM_INV_DKIM 4169 0.88 2.63 0.14 96 HTML_IMAGE_RATIO_08 4042 2.08 2.55 1.88 97 XM_UB50 4035 1.30 2.54 0.78 98 T_XMDrugObfuBody_08 3981 1.70 2.51 1.36 99 MAILING_LIST_MULTI 3934 2.71 2.48 2.80 100 DKIM_ADSP_NXDOMAIN 3914 0.93 2.46 0.28 101 T_XMHurry_00 3830 1.09 2.41 0.53 102 XM_URI_RBL 3733 0.91 2.35 0.29 103 TR_LOTS_OF_MONEY3 3717 0.95 2.34 0.36 104 RELAYCOUNTRY_AU 3694 0.98 2.33 0.41 105 XMNoVowels 3681 1.92 2.32 1.75 106 XM_CamelCaseFrm001 3624 2.61 2.28 2.75 107 TM2_M_URI_OPT_OUT 3540 1.74 2.23 1.53 108 T_TooManySym_01 3452 4.35 2.17 5.27 109 TR_XM_NoHeaderRelay 3450 0.78 2.17 0.19 110 NO_DNS_FOR_FROM 3444 0.81 2.17 0.24 111 TR_XM_MaxWHORU 3422 0.78 2.16 0.19 112 TVD_RCVD_IP 3390 1.02 2.13 0.54 113 XMPhish30 3282 0.98 2.07 0.52 114 BAYES_05 3229 3.26 2.03 3.78 115 XMBody_17 3213 0.86 2.02 0.37 116 T_XMDrugObfuBody_00 2814 0.93 1.77 0.58 117 NORDNS_LOW_CONTRAST 2807 0.55 1.77 0.03 118 HTML_IMAGE_ONLY_20 2785 0.77 1.75 0.35 119 SpammyFromTLD_02 2774 0.77 1.75 0.36 120 XMGenDplmaNmb 2756 1.01 1.74 0.70 121 RCVD_IN_VALIDITY_SAFE 2724 2.80 1.72 3.26 122 SpammyFromTLD_01 2724 1.10 1.72 0.84 123 XMStockSpam_06 2713 1.22 1.71 1.01 124 FROM_EXCESS_BASE64 2607 1.72 1.64 1.75 125 URI_HEX 2546 1.31 1.60 1.18 126 HTML_MIME_NO_HTML_TAG 2522 1.97 1.59 2.13 127 USER_IN_DEF_DKIM_WL 2369 8.14 1.49 10.97 128 RCVD_IN_PBL 2357 0.94 1.48 0.71 129 RCVD_IN_PSBL 2333 0.61 1.47 0.24 130 T_FILL_THIS_FORM_SHORT 2273 1.33 1.43 1.28 131 SHORTCIRCUIT 2264 0.43 1.43 0.00 132 RCVD_IN_ZEN_LASTEXTERNAL 2264 0.43 1.43 0.00 133 T_Symld_Words_02 2251 0.83 1.42 0.58 134 SUBJ_ALL_CAPS 2235 1.31 1.41 1.27 135 XMBrknScrpt_02 2216 0.94 1.40 0.75 136 XM_DK_Undo_01 2174 1.32 1.37 1.30 137 XM_SendGrid 2163 1.24 1.36 1.19 138 RCVD_IN_VALIDITY_CERTIFIED 2101 2.30 1.32 2.72 139 XM_B_COPY_HTML 2077 0.99 1.31 0.86 140 MultiRelay_CC 1993 0.49 1.26 0.16 141 KHOP_HELO_FCRDNS 1979 2.19 1.25 2.59 142 TR_Symld_Words 1947 1.38 1.23 1.44 143 DIET_1 1940 0.57 1.22 0.29 144 URI_NOVOWEL 1938 1.25 1.22 1.26 145 TR_Mismatch_TLD_02 1819 0.39 1.15 0.07 146 URI_TRY_3LD 1753 0.59 1.10 0.37 147 LongTLD 1753 0.61 1.10 0.41 148 XM_H_Long_From02 1698 0.90 1.07 0.83 149 XMBdyGiftCard01 1673 0.68 1.05 0.52 150 XM_B_REG_HTML 1636 0.45 1.03 0.20 151 SHOPIFY_IMG_NOT_RCVD_SFY 1631 0.46 1.03 0.22 152 HTTPS_HTTP_MISMATCH 1623 0.78 1.02 0.68 153 RCVD_IN_IADB_LISTED 1604 2.43 1.01 3.03 154 XM_B_SEO 1594 0.44 1.00 0.20 155 XMHTML_After_End 1593 0.58 1.00 0.39 156 HTML_IMAGE_ONLY_28 1579 0.55 0.99 0.36 157 HK_RANDOM_REPLYTO 1542 0.35 0.97 0.08 158 RELAYCOUNTRY_FR 1532 0.45 0.96 0.23 159 MPART_ALT_DIFF_COUNT 1531 0.65 0.96 0.51 160 XM_ProductURIs 1491 0.54 0.94 0.37 161 HTML_TAG_BALANCE_BODY 1490 0.59 0.94 0.44 162 XM_B_Phish66 1474 0.44 0.93 0.23 163 XMSubMetaI_00 1469 0.56 0.93 0.41 164 TM2_M_OBFU_COMMENT 1465 0.48 0.92 0.29 165 HTML_FONT_TINY_NORDNS 1446 0.32 0.91 0.06 166 TR_LOTS_OF_MONEY2 1441 0.38 0.91 0.15 167 T_MONEY_PERCENT 1441 0.38 0.91 0.15 168 RCVD_IN_IADB_SPF 1429 2.12 0.90 2.64 169 RCVD_IN_IADB_DK 1406 1.88 0.89 2.30 170 XMSolicitRefs_0 1403 0.54 0.88 0.39 171 XM_B_COVIDMETA 1400 0.36 0.88 0.14 172 RCVD_IN_IADB_SENDERID 1397 1.91 0.88 2.35 173 XM_UB99 1391 0.26 0.88 0.00 174 T_STY_INVIS_DIRECT 1377 0.47 0.87 0.31 175 TR_XM_SEO4 1370 0.32 0.86 0.09 176 TM2_M_A_HREF_HREF 1353 0.40 0.85 0.20 177 DKIM_ADSP_CUSTOM_MED 1345 0.80 0.85 0.78 178 XMReplyNow 1332 0.45 0.84 0.29 179 XM_DIRTYINTL 1328 0.30 0.84 0.07 180 BAYES_00 1305 10.72 0.82 14.92 181 TR_XM_DK_SendGrid 1303 0.75 0.82 0.72 182 TR_MetaPhish_Combo_01 1281 0.76 0.81 0.74 183 RCVD_IN_XBL 1273 0.26 0.80 0.03 184 XMSexyCombo_01 1262 0.34 0.79 0.15 185 SUBJ_DOLLARS 1258 0.49 0.79 0.36 186 XM_HighProb1 1247 0.24 0.79 0.01 187 XMSubMetaSxObfu_03 1236 0.48 0.78 0.35 188 TR_XM_PHPDW 1233 0.45 0.78 0.32 189 TR_XM_Base64_M1 1231 0.75 0.78 0.74 190 XMBody_78 1225 0.46 0.77 0.32 191 XMPhish14 1223 0.58 0.77 0.49 192 MIME_CHARSET_FARAWAY 1221 1.61 0.77 1.97 193 ANY_BOUNCE_MESSAGE 1217 4.62 0.77 6.26 194 BOUNCE_MESSAGE 1215 4.62 0.77 6.25 195 TR_XM_PHPForged 1207 0.45 0.76 0.32 196 XM_Body_Dirty_Words_01 1199 0.28 0.76 0.07 197 TR_XM_FormFill2 1186 0.45 0.75 0.32 198 XM_PDF 1178 3.03 0.74 4.01 199 XM_GoogleGroups 1175 0.95 0.74 1.04 200 XMSubGiftCard1 1172 0.27 0.74 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 327457 90.05 95.62 87.68 2 RELAYCOUNTRY_US 304918 80.79 78.77 81.65 3 XM_B_Unicode 267048 74.85 82.71 71.51 4 DCC_CHECK_NEGATIVE 251742 53.59 21.07 67.41 5 DKIM_SIGNED 234441 68.96 83.51 62.78 6 XM_DK_Pass 229605 66.46 78.17 61.48 7 DKIM_VALID 226008 65.54 77.36 60.52 8 BAYES_50 216701 52.26 38.68 58.03 9 DKIM_VALID_AU 181123 52.41 61.62 48.50 10 XM_B_SpammyWords 163127 49.79 64.17 43.68 11 XM_B_Unicode3 158756 45.41 52.24 42.51 12 XMListUnsubscribeExists 147458 47.18 65.26 39.49 13 DCC_CHECK 121563 45.96 77.49 32.55 14 RCVD_IN_MSPIKE_H2 110165 32.39 39.18 29.50 15 T_TM2_M_HEADER_IN_MSG 108002 26.67 21.37 28.92 16 HTML_FONT_LOW_CONTRAST 94877 28.34 35.23 25.41 17 DKIM_VALID_EF 89354 24.81 26.89 23.93 18 XMSubLong 86850 23.24 23.20 23.26 19 MIME_HTML_ONLY 83152 25.43 32.88 22.27 20 LOC_TINY_FONT_1 80936 30.62 51.67 21.67 21 FVGT_m_MULTI_ODD 76091 23.36 30.36 20.38 22 T_KAM_HTML_FONT_INVALID 65455 21.19 29.82 17.53 23 ALL_TRUSTED 59379 13.64 8.31 15.90 24 BAYES_00 55729 10.72 0.82 14.92 25 XM_B_SpammyWords2 54707 21.18 36.52 14.65 26 HTML_IMAGE_RATIO_04 53515 11.55 5.01 14.33 27 HTML_FONT_FACE_BAD 48499 9.27 0.53 12.99 28 XM_H_Trusted_IP 46046 8.65 0.00 12.33 29 XM_Multi_Part_URI 41455 16.07 27.76 11.10 30 USER_IN_DEF_DKIM_WL 40951 8.14 1.49 10.97 31 XMStrtUSub 40173 8.75 4.05 10.76 32 TR_XM_DK_Unsub 37486 12.71 19.00 10.04 33 XM_Evil_Numbers_Gen 36778 9.81 9.73 9.85 34 MPART_ALT_DIFF 36712 8.53 5.47 9.83 35 UNPARSEABLE_RELAY 35655 11.47 15.99 9.55 36 LotsOfNums_01 33438 8.40 7.09 8.95 37 XM_B_PhoneNumber 33361 7.98 5.72 8.93 38 MIME_HTML_ONLY_MULTI 30002 6.56 3.09 8.03 39 TooManyTo_001 28226 6.49 3.96 7.56 40 XM_B_Unsub 27649 10.04 16.24 7.40 41 FSL_BULK_SIG 25160 9.55 16.17 6.74 42 TR_XM_DK_Bayes 23790 4.67 0.67 6.37 43 ANY_BOUNCE_MESSAGE 23367 4.62 0.77 6.26 44 BOUNCE_MESSAGE 23358 4.62 0.77 6.25 45 TR_XM_DK_Bayes1 23217 4.56 0.66 6.22 46 BAYES_40 21744 5.01 3.11 5.82 47 IN_ZIMBRA_NJ_WHITELIST 20840 3.95 0.10 5.58 48 XM_DKIMWhitelistDomains 20616 4.00 0.43 5.52 49 TR_XM_BayesUnsub 20463 8.51 15.64 5.48 50 T_TooManySym_01 19675 4.35 2.17 5.27 51 LOTS_OF_MONEY 19504 7.38 12.45 5.22 52 TR_XM_DK_Bayes2 19489 3.80 0.45 5.22 53 BAYES_60 19414 5.95 7.71 5.20 54 XM_H_GMP 19025 4.86 4.32 5.09 55 XM_H_Long_From01 18288 4.88 4.84 4.90 56 BAYES_20 17376 4.85 5.31 4.65 57 RCVD_IN_MSPIKE_H3 17297 4.18 3.13 4.63 58 RCVD_IN_MSPIKE_WL 17297 4.18 3.13 4.63 59 MIME_QP_LONG_LINE 16668 4.14 3.39 4.46 60 XMSubNoVowel 16096 3.15 0.43 4.31 61 HTML_IMAGE_RATIO_06 15480 3.97 3.56 4.15 62 TR_MAX_INTL_RELAY 15445 7.06 13.94 4.14 63 HTML_IMAGE_RATIO_02 15323 4.44 5.22 4.10 64 XM_B_Phish_Phrases 15211 4.96 7.04 4.07 65 TM2_M_VERY_LONG_WORD 15082 3.73 2.99 4.04 66 XM_PDF 14970 3.03 0.74 4.01 67 XM_DK_Undo_02 14953 13.56 36.04 4.00 68 BAYES_05 14108 3.26 2.03 3.78 69 XM_UncommonTLD01 14023 4.55 6.41 3.75 70 XM_B_SpammyWords3 13353 6.51 13.41 3.58 71 BAYES_99 12933 10.56 27.27 3.46 72 XMSubMetaSx_00 12914 4.43 6.70 3.46 73 TR_XM_SpammyWords4 12818 5.83 11.46 3.43 74 HTML_IMAGE_ONLY_32 12698 2.47 0.28 3.40 75 RCVD_IN_VALIDITY_SAFE 12166 2.80 1.72 3.26 76 T_REMOTE_IMAGE 11608 4.50 7.78 3.11 77 RELAYCOUNTRY_META 11595 6.31 13.86 3.10 78 RCVD_IN_IADB_LISTED 11325 2.43 1.01 3.03 79 MAY_BE_FORGED 11286 2.13 0.02 3.02 80 MAILING_LIST_MULTI 10475 2.71 2.48 2.80 81 T_TooManySym_02 10285 2.11 0.59 2.75 82 XM_CamelCaseFrm001 10252 2.61 2.28 2.75 83 XMNumbers 10200 2.73 2.72 2.73 84 RCVD_IN_VALIDITY_CERTIFIED 10143 2.30 1.32 2.72 85 BAYES_999 10052 8.25 21.32 2.69 86 RCVD_IN_IADB_SPF 9854 2.12 0.90 2.64 87 KHOP_HELO_FCRDNS 9659 2.19 1.25 2.59 88 BAYES_80 9409 4.37 8.73 2.52 89 BOTNET_IPINHOSTNAME 9196 4.60 9.63 2.46 90 TooManyTo_002 9150 1.89 0.57 2.45 91 RCVD_IN_IADB_SENDERID 8794 1.91 0.88 2.35 92 RCVD_IN_IADB_DK 8580 1.88 0.89 2.30 93 DKIM_INVALID 8433 3.42 6.15 2.26 94 XM_B_SpammyTLD 8261 2.51 3.21 2.21 95 HTML_MIME_NO_HTML_TAG 7968 1.97 1.59 2.13 96 XM_Body_Dirty_Words 7716 3.85 8.05 2.07 97 RCVD_IN_IADB_VOUCHED 7671 1.54 0.35 2.05 98 MIME_CHARSET_FARAWAY 7350 1.61 0.77 1.97 99 MIME_HTML_MOSTLY 7326 2.27 2.99 1.96 100 INVALID_MSGID 7264 1.46 0.32 1.95 101 XMSubLongNoVowel 7019 1.36 0.12 1.88 102 HTML_IMAGE_RATIO_08 7008 2.08 2.55 1.88 103 XMSubGarbage 6834 1.29 0.02 1.83 104 XMNoVowels 6550 1.92 2.32 1.75 105 FROM_EXCESS_BASE64 6533 1.72 1.64 1.75 106 XM_B_URI_Unicode 6488 2.11 2.98 1.74 107 TR_XM_DKIM_Undo 6440 8.95 25.93 1.72 108 TO_MALFORMED 6277 1.30 0.41 1.68 109 CHARSET_FARAWAY_HEADER 6260 1.21 0.12 1.68 110 BAYES_95 6031 2.60 4.91 1.61 111 TR_XM_PhishingBody 5759 2.38 4.35 1.54 112 TR_XM_SpammyRelay 5748 4.06 10.00 1.54 113 TM2_M_URI_OPT_OUT 5722 1.74 2.23 1.53 114 TooManyTo_003 5516 1.17 0.45 1.48 115 TR_Symld_Words 5377 1.38 1.23 1.44 116 XMDiploma_00 5367 1.84 2.80 1.44 117 XMSexyCombo_05 5303 2.19 4.02 1.42 118 RCVD_IN_IADB_OPTIN 5173 1.03 0.18 1.39 119 T_XMDrugObfuBody_08 5085 1.70 2.51 1.36 120 T_XMDrugObfuBody_14 5084 2.18 4.11 1.36 121 XM_DK_Undo_01 4865 1.32 1.37 1.30 122 HELO_NODOT 4843 0.96 0.18 1.30 123 HELO_NO_DOMAIN 4840 0.96 0.17 1.30 124 T_FILL_THIS_FORM_SHORT 4796 1.33 1.43 1.28 125 TR_XM_UnparsRelay 4770 3.35 8.24 1.28 126 TR_XM_SpammyWords5 4765 1.78 2.95 1.28 127 SUBJ_ALL_CAPS 4756 1.31 1.41 1.27 128 XM_B_Investor 4736 2.23 4.48 1.27 129 URI_NOVOWEL 4714 1.25 1.22 1.26 130 XM_B_Unsub2 4640 1.66 2.64 1.24 131 UNTRUSTED_Relay 4597 2.40 5.15 1.23 132 XMCapTrack 4541 1.04 0.63 1.22 133 XM_SendGrid 4458 1.24 1.36 1.19 134 URI_HEX 4417 1.31 1.60 1.18 135 IN_HORDE_ADDRESS_BOOK 4331 0.85 0.11 1.16 136 BOTNET 4276 3.46 8.92 1.14 137 XM_SPF_SoftFail 4227 1.66 2.90 1.13 138 T_TooManySym_03 4163 0.84 0.21 1.11 139 TooManyTo_004 3966 0.86 0.38 1.06 140 XM_GoogleGroups 3886 0.95 0.74 1.04 141 XMStockSpam_06 3760 1.22 1.71 1.01 142 XMGappySubj_01 3695 0.73 0.13 0.99 143 XM_E_Blogspot 3683 0.70 0.04 0.99 144 XM_OfRef6 3487 1.61 3.19 0.93 145 RELAYCOUNTRY_CA 3345 2.16 5.14 0.90 146 TVD_SPACE_RATIO 3297 0.69 0.24 0.88 147 XM_B_COPY_HTML 3217 0.99 1.31 0.86 148 XMLngstWrd_00 3176 0.80 0.69 0.85 149 TooManyTo_005 3168 0.70 0.35 0.85 150 SpammyFromTLD_01 3123 1.10 1.72 0.84 151 RCVD_IN_BL_SPAMCOP_NET 3106 3.53 9.87 0.83 152 XM_H_Long_From02 3083 0.90 1.07 0.83 153 TR_DCC_Bayes_99 2993 6.44 19.71 0.80 154 DKIM_ADSP_CUSTOM_MED 2911 0.80 0.85 0.78 155 XM_UB50 2908 1.30 2.54 0.78 156 XMBrknScrpt_02 2794 0.94 1.40 0.75 157 TR_XM_Base64_M1 2777 0.75 0.78 0.74 158 TM2_M_BODY_EMPTY 2766 0.54 0.07 0.74 159 TR_MetaPhish_Combo_01 2759 0.76 0.81 0.74 160 TR_XM_DK_SendGrid 2680 0.75 0.82 0.72 161 RCVD_IN_PBL 2662 0.94 1.48 0.71 162 FROM_GOV_DKIM_AU 2631 0.61 0.38 0.70 163 XMGenDplmaNmb 2597 1.01 1.74 0.70 164 XM_ShortIntro_01 2563 0.59 0.37 0.69 165 HTTPS_HTTP_MISMATCH 2548 0.78 1.02 0.68 166 XM_B_SpammyWords4 2379 1.29 2.83 0.64 167 T_XMDrugObfuBody_00 2160 0.93 1.77 0.58 168 T_Symld_Words_02 2159 0.83 1.42 0.58 169 XMGappySubj_02 2115 0.41 0.06 0.57 170 XMLngstWrd_01 2109 0.56 0.53 0.56 171 XM_H_PHPMailer 2071 0.54 0.52 0.55 172 T_OBFU_PDF_ATTACH 2061 0.44 0.18 0.55 173 NML_ADSP_CUSTOM_MED 2050 0.56 0.60 0.55 174 TVD_RCVD_IP 2016 1.02 2.13 0.54 175 TR_XM_SPAMCOP 2004 2.69 7.76 0.54 176 T_XMHurry_00 1962 1.09 2.41 0.53 177 XMEmptyBody_01 1931 0.37 0.02 0.52 178 XMBdyGiftCard01 1927 0.68 1.05 0.52 179 XMPhish30 1924 0.98 2.07 0.52 180 MPART_ALT_DIFF_COUNT 1919 0.65 0.96 0.51 181 XMPhish14 1841 0.58 0.77 0.49 182 FORGED_GMAIL_RCVD 1787 0.52 0.61 0.48 183 XMLngstWrd_02 1727 0.46 0.45 0.46 184 HTML_TAG_BALANCE_BODY 1640 0.59 0.94 0.44 185 XMMoneyMeta_00 1636 0.52 0.70 0.44 186 XMBody_95 1632 0.39 0.29 0.44 187 RELAYCOUNTRY_GB 1624 0.50 0.66 0.43 188 TR_XM_FormFill 1593 0.50 0.68 0.43 189 XMSubMetaI_00 1528 0.56 0.93 0.41 190 RELAYCOUNTRY_AU 1520 0.98 2.33 0.41 191 LongTLD 1513 0.61 1.10 0.41 192 SHORT_HELO_AND_INLINE_IMAGE 1503 0.29 0.03 0.40 193 XM_B_DNDMA 1494 0.50 0.73 0.40 194 XMHTML_After_End 1474 0.58 1.00 0.39 195 XMSolicitRefs_0 1455 0.54 0.88 0.39 196 TO_NO_BRKTS_HTML_ONLY 1435 0.46 0.63 0.38 197 XMSlimDrugH 1401 0.47 0.69 0.38 198 XM_ProductURIs 1398 0.54 0.94 0.37 199 XMDateMe_00 1390 0.38 0.39 0.37 200 XMBody_17 1389 0.86 2.02 0.37 ----------------------------------------------------------------------