Email: 464975 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.37 sec Spam: 149765 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.47 sec Ham: 315210 Autolearn: 0 AvgScore: 0.34 AvgScanTime: 1.32 sec Time Spent Running SA: 177.27 hours Time Spent Processing Spam: 61.27 hours Time Spent Processing Ham: 116.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144134 90.18 96.24 87.29 2 DKIM_SIGNED 131664 78.61 87.91 74.19 3 RELAYCOUNTRY_US 127058 82.88 84.84 81.95 4 XM_DK_Pass 126235 76.58 84.29 72.92 5 XM_B_Unicode 125934 74.91 84.09 70.56 6 DKIM_VALID 124685 75.57 83.25 71.92 7 DCC_CHECK 110688 50.01 73.91 38.65 8 XM_B_SpammyWords 105601 53.81 70.51 45.87 9 XMListUnsubscribeExists 104274 55.35 69.63 48.57 10 DKIM_VALID_AU 98774 60.52 65.95 57.94 11 LOC_TINY_FONT_1 73936 34.05 49.37 26.76 12 XM_B_Unicode3 72225 43.44 48.23 41.17 13 BAYES_50 63508 55.39 42.41 61.56 14 XM_DK_Undo_02 60202 16.43 40.20 5.14 15 HTML_FONT_LOW_CONTRAST 60163 32.86 40.17 29.39 16 XM_B_SpammyWords2 59890 25.40 39.99 18.47 17 RCVD_IN_MSPIKE_H2 59541 36.55 39.76 35.03 18 FVGT_m_MULTI_ODD 49501 27.18 33.05 24.38 19 T_KAM_HTML_FONT_INVALID 45366 24.41 30.29 21.62 20 DKIM_VALID_EF 44136 28.60 29.47 28.19 21 BAYES_99 43653 11.73 29.15 3.45 22 TR_XM_DKIM_Undo 43249 10.87 28.88 2.31 23 MIME_HTML_ONLY 40286 23.07 26.90 21.26 24 DCC_CHECK_NEGATIVE 36893 49.50 24.63 61.31 25 T_TM2_M_HEADER_IN_MSG 35648 28.26 23.80 30.38 26 XMSubLong 35618 24.19 23.78 24.38 27 BAYES_999 33287 8.94 22.23 2.62 28 TR_XM_DK_Unsub 31798 15.18 21.23 12.31 29 TR_DCC_Bayes_99 31147 7.56 20.80 1.28 30 XM_Multi_Part_URI 30622 15.45 20.45 13.07 31 UNPARSEABLE_RELAY 24708 13.12 16.50 11.51 32 XM_B_SpammyWords3 22989 8.32 15.35 4.98 33 XM_B_Unsub 22638 10.91 15.12 8.92 34 TR_XM_BayesUnsub 21842 9.07 14.58 6.45 35 TR_MAX_INTL_RELAY 21700 8.36 14.49 5.45 36 LOTS_OF_MONEY 21682 9.42 14.48 7.02 37 RELAYCOUNTRY_META 20066 6.78 13.40 3.64 38 TR_XM_SpammyWords4 18902 7.31 12.62 4.78 39 XM_Evil_Numbers_Gen 18125 10.89 12.10 10.32 40 LotsOfNums_01 15843 10.30 10.58 10.16 41 RCVD_IN_BL_SPAMCOP_NET 15227 3.73 10.17 0.67 42 TR_XM_SpammyWords2 15127 3.59 10.10 0.50 43 TR_XM_SpammyRelay 14974 4.49 10.00 1.87 44 BOTNET_IPINHOSTNAME 14872 5.63 9.93 3.58 45 XM_B_Phish_Phrases 14140 6.51 9.44 5.12 46 FSL_BULK_SIG 13856 7.60 9.25 6.81 47 BAYES_80 13522 5.12 9.03 3.27 48 TR_XM_SPAMCOP 12581 3.01 8.40 0.45 49 BOTNET 12417 3.71 8.29 1.53 50 BAYES_60 12176 6.86 8.13 6.25 51 TR_XM_UnparsRelay 12105 3.51 8.08 1.34 52 TM2_M_VERY_LONG_WORD 10954 4.97 7.31 3.85 53 HTML_IMAGE_RATIO_02 10622 5.07 7.09 4.10 54 XM_Body_Dirty_Words 10083 4.22 6.73 3.02 55 HTML_IMAGE_RATIO_04 9793 5.43 6.54 4.90 56 XM_UncommonTLD01 8990 4.78 6.00 4.20 57 RELAYCOUNTRY_CA 8819 2.54 5.89 0.95 58 MPART_ALT_DIFF 8381 4.65 5.60 4.19 59 XM_B_PhoneNumber 7967 7.76 5.32 8.92 60 BAYES_95 7841 3.17 5.24 2.19 61 XMSubMetaSx_00 7420 4.01 4.95 3.57 62 XMStrtUSub 7089 4.56 4.73 4.48 63 XM_H_Long_From01 7078 5.29 4.73 5.56 64 DKIM_INVALID 6979 3.04 4.66 2.26 65 XM_B_Investor 6597 2.65 4.40 1.82 66 UNTRUSTED_Relay 6576 2.39 4.39 1.43 67 TR_XM_PhishingBody 6437 2.23 4.30 1.25 68 XM_H_GMP 6359 5.07 4.25 5.46 69 TR_XM_SpammyWords5 6304 2.32 4.21 1.43 70 T_XMDrugObfuBody_14 6212 2.63 4.15 1.92 71 ANY_BOUNCE_MESSAGE 6086 5.60 4.06 6.33 72 BOUNCE_MESSAGE 6083 5.60 4.06 6.33 73 XMSexyCombo_05 5502 2.32 3.67 1.68 74 XM_B_SpammyTLD 5476 2.94 3.66 2.60 75 RCVD_IN_MSPIKE_H3 5365 4.58 3.58 5.06 76 RCVD_IN_MSPIKE_WL 5365 4.58 3.58 5.06 77 HTML_IMAGE_RATIO_06 5201 2.81 3.47 2.49 78 MAY_BE_FORGED 5114 2.85 3.41 2.58 79 MIME_HTML_ONLY_MULTI 5054 2.87 3.37 2.63 80 MIME_HTML_MOSTLY 4936 2.47 3.30 2.07 81 RCVD_IN_VALIDITY_RPBL 4751 1.18 3.17 0.23 82 MIME_QP_LONG_LINE 4722 4.48 3.15 5.11 83 KHOP_HELO_FCRDNS 4691 2.99 3.13 2.93 84 TooManyTo_001 4451 6.31 2.97 7.90 85 FROM_EXCESS_BASE64 4313 2.25 2.88 1.95 86 XM_OfRef6 4303 1.80 2.87 1.29 87 TR_LOTS_OF_MONEY3 4284 1.31 2.86 0.58 88 T_XMDrugObfuBody_08 4234 1.95 2.83 1.53 89 XMNumbers 4229 2.89 2.82 2.92 90 USER_IN_DEF_DKIM_WL 4180 9.73 2.79 13.02 91 TM2_M_URI_OPT_OUT 3994 2.12 2.67 1.86 92 T_XMHurry_00 3932 1.31 2.63 0.68 93 XM_CamelCaseFrm001 3893 2.39 2.60 2.29 94 XM_SPF_SoftFail 3864 1.73 2.58 1.33 95 RCVD_IN_VALIDITY_SAFE 3830 3.37 2.56 3.75 96 HTML_MIME_NO_HTML_TAG 3821 2.95 2.55 3.14 97 SUBJ_ALL_CAPS 3813 1.97 2.55 1.70 98 XMDiploma_00 3717 1.90 2.48 1.63 99 HTML_IMAGE_RATIO_08 3702 2.30 2.47 2.22 100 XM_B_URI_Unicode 3600 2.06 2.40 1.90 101 MAILING_LIST_MULTI 3454 2.63 2.31 2.78 102 DIET_1 3449 1.02 2.30 0.41 103 XM_B_Unsub2 3448 1.65 2.30 1.33 104 ALL_TRUSTED 3425 11.02 2.29 15.17 105 RELAYCOUNTRY_AU 3421 1.18 2.28 0.65 106 XMBody_17 3407 1.03 2.27 0.44 107 XM_UB50 3246 1.28 2.17 0.86 108 T_TooManySym_01 3161 4.89 2.11 6.21 109 SHORT_URI_2 3139 2.22 2.10 2.28 110 RCVD_IN_VALIDITY_CERTIFIED 3068 2.52 2.05 2.75 111 SpammyFromTLD_02 3048 1.02 2.04 0.54 112 BAYES_40 3046 4.68 2.03 5.93 113 XMNoVowels 2996 1.76 2.00 1.64 114 XM_URI_RBL 2960 0.92 1.98 0.41 115 XMStockSpam_06 2958 1.83 1.98 1.76 116 T_XMDrugObfuBody_00 2947 1.17 1.97 0.78 117 XM_B_SpammyWords4 2917 1.00 1.95 0.54 118 TR_XM_NoHeaderRelay 2744 0.76 1.83 0.25 119 T_FILL_THIS_FORM_SHORT 2684 1.28 1.79 1.03 120 HTML_IMAGE_ONLY_32 2682 2.16 1.79 2.34 121 TR_XM_INV_DKIM 2657 0.68 1.77 0.15 122 T_REMOTE_IMAGE 2626 3.00 1.75 3.60 123 XM_DK_Undo_01 2586 1.66 1.73 1.62 124 XMPhish30 2483 0.83 1.66 0.43 125 SpammyFromTLD_01 2383 1.05 1.59 0.80 126 XM_PDF 2304 3.95 1.54 5.09 127 RCVD_IN_PSBL 2237 0.57 1.49 0.13 128 XMGenDplmaNmb 2197 1.16 1.47 1.02 129 XM_B_COPY_HTML 2190 0.96 1.46 0.72 130 SHORTCIRCUIT 2163 0.47 1.44 0.00 131 RCVD_IN_ZEN_LASTEXTERNAL 2163 0.47 1.44 0.00 132 URI_TRY_3LD 2150 0.94 1.44 0.71 133 XMBrknScrpt_02 2112 1.07 1.41 0.91 134 HK_RANDOM_REPLYTO 2062 0.55 1.38 0.15 135 URI_HEX 2021 1.24 1.35 1.19 136 LongTLD 1968 0.72 1.31 0.44 137 XM_SendGrid 1944 1.22 1.30 1.18 138 HTML_TAG_BALANCE_BODY 1928 0.86 1.29 0.66 139 MIME_CHARSET_FARAWAY 1904 1.33 1.27 1.35 140 BAYES_20 1884 3.06 1.26 3.91 141 RCVD_IN_IADB_LISTED 1806 3.08 1.21 3.97 142 TR_XM_PHPDW 1777 0.65 1.19 0.40 143 RCVD_IN_PBL 1769 0.81 1.18 0.63 144 TR_XM_PHPForged 1751 0.64 1.17 0.39 145 TR_XM_FormFill2 1729 0.64 1.15 0.39 146 SHOPIFY_IMG_NOT_RCVD_SFY 1724 0.54 1.15 0.24 147 TM2_M_OBFU_COMMENT 1718 0.61 1.15 0.36 148 TR_MetaPhish_Combo_01 1718 0.82 1.15 0.66 149 XM_H_PHPOS 1709 0.63 1.14 0.38 150 RCVD_IN_IADB_SPF 1708 2.71 1.14 3.46 151 TR_Mismatch_TLD_02 1682 0.41 1.12 0.07 152 RCVD_IN_IADB_DK 1680 2.39 1.12 3.00 153 RCVD_IN_IADB_SENDERID 1665 2.45 1.11 3.08 154 HTTPS_HTTP_MISMATCH 1643 0.90 1.10 0.81 155 TR_Symld_Words 1641 1.60 1.10 1.83 156 RDNS_DYNAMIC 1629 0.57 1.09 0.32 157 XM_DIRTYINTL 1616 0.41 1.08 0.10 158 PDS_RDNS_DYNAMIC_FP 1603 0.48 1.07 0.20 159 XMSubMetaI_00 1592 0.61 1.06 0.39 160 XMBody_78 1582 0.60 1.06 0.39 161 NO_DNS_FOR_FROM 1578 0.59 1.05 0.37 162 XM_B_Phish66 1561 0.53 1.04 0.29 163 TR_XM_MaxWHORU 1550 0.54 1.03 0.30 164 MPART_ALT_DIFF_COUNT 1549 0.86 1.03 0.77 165 BASE64_LENGTH_79_INF 1545 0.63 1.03 0.44 166 TR_XM_Base64_M1 1532 0.82 1.02 0.73 167 XMBdyGiftCard01 1492 0.70 1.00 0.56 168 T_OBFU_PDF_ATTACH 1487 1.24 0.99 1.36 169 XMPhish14 1479 0.54 0.99 0.32 170 HTML_FONT_TINY_NORDNS 1473 0.35 0.98 0.05 171 XM_H_Long_From02 1473 0.85 0.98 0.78 172 XM_B_DNDMA 1443 0.74 0.96 0.64 173 XM_ProductURIs 1424 0.73 0.95 0.62 174 TVD_RCVD_IP 1414 0.74 0.94 0.64 175 XM_B_SEO 1400 0.45 0.93 0.22 176 T_STY_INVIS_DIRECT 1389 0.62 0.93 0.47 177 URIBL_BLACK 1379 0.33 0.92 0.05 178 TR_XM_Spammywords 1378 0.40 0.92 0.15 179 XM_S_SpammyWords 1378 0.40 0.92 0.15 180 DKIM_ADSP_CUSTOM_MED 1339 0.92 0.89 0.93 181 XMHTML_After_End 1320 0.44 0.88 0.23 182 XM_B_COVIDMETA 1268 0.37 0.85 0.14 183 TR_Caps_n_Bayes_99 1238 0.28 0.83 0.01 184 URI_NOVOWEL 1214 1.48 0.81 1.80 185 J_POPCORN_WO_D 1209 0.39 0.81 0.19 186 TR_XM_SEO4 1206 0.32 0.81 0.10 187 XMReplyNow 1205 0.43 0.80 0.26 188 T_MONEY_PERCENT 1179 0.55 0.79 0.43 189 TR_LOTS_OF_MONEY2 1179 0.55 0.79 0.43 190 XM_Body_Dirty_Words_01 1178 0.32 0.79 0.09 191 XM_UB99 1171 0.25 0.78 0.00 192 RCVD_IN_SORBS_DUL 1167 0.28 0.78 0.04 193 TR_XM_DK_SendGrid 1156 0.80 0.77 0.82 194 XMLngstWrd_00 1152 0.60 0.77 0.52 195 RELAYCOUNTRY_FR 1151 0.42 0.77 0.26 196 DKIM_ADSP_NXDOMAIN 1150 0.57 0.77 0.47 197 BOTNET_NORDNS 1095 0.24 0.73 0.01 198 BAYES_00 1067 7.74 0.71 11.08 199 THIS_AD 1065 0.37 0.71 0.22 200 TM2_M_A_HREF_HREF 1048 0.36 0.70 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 275159 90.18 96.24 87.29 2 RELAYCOUNTRY_US 258303 82.88 84.84 81.95 3 DKIM_SIGNED 233843 78.61 87.91 74.19 4 XM_DK_Pass 229842 76.58 84.29 72.92 5 DKIM_VALID 226709 75.57 83.25 71.92 6 XM_B_Unicode 222400 74.91 84.09 70.56 7 BAYES_50 194053 55.39 42.41 61.56 8 DCC_CHECK_NEGATIVE 193252 49.50 24.63 61.31 9 DKIM_VALID_AU 182640 60.52 65.95 57.94 10 XMListUnsubscribeExists 153086 55.35 69.63 48.57 11 XM_B_SpammyWords 144579 53.81 70.51 45.87 12 XM_B_Unicode3 129770 43.44 48.23 41.17 13 DCC_CHECK 121825 50.01 73.91 38.65 14 RCVD_IN_MSPIKE_H2 110410 36.55 39.76 35.03 15 T_TM2_M_HEADER_IN_MSG 95752 28.26 23.80 30.38 16 HTML_FONT_LOW_CONTRAST 92643 32.86 40.17 29.39 17 DKIM_VALID_EF 88846 28.60 29.47 28.19 18 LOC_TINY_FONT_1 84365 34.05 49.37 26.76 19 FVGT_m_MULTI_ODD 76858 27.18 33.05 24.38 20 XMSubLong 76847 24.19 23.78 24.38 21 T_KAM_HTML_FONT_INVALID 68151 24.41 30.29 21.62 22 MIME_HTML_ONLY 67002 23.07 26.90 21.26 23 XM_B_SpammyWords2 58222 25.40 39.99 18.47 24 ALL_TRUSTED 47829 11.02 2.29 15.17 25 XM_Multi_Part_URI 41213 15.45 20.45 13.07 26 USER_IN_DEF_DKIM_WL 41040 9.73 2.79 13.02 27 TR_XM_DK_Unsub 38791 15.18 21.23 12.31 28 UNPARSEABLE_RELAY 36291 13.12 16.50 11.51 29 BAYES_00 34924 7.74 0.71 11.08 30 XM_Evil_Numbers_Gen 32528 10.89 12.10 10.32 31 LotsOfNums_01 32030 10.30 10.58 10.16 32 XM_B_PhoneNumber 28120 7.76 5.32 8.92 33 XM_B_Unsub 28109 10.91 15.12 8.92 34 TooManyTo_001 24886 6.31 2.97 7.90 35 TR_XM_DK_Bayes 22921 5.11 0.57 7.27 36 XM_DKIMWhitelistDomains 22697 4.90 0.06 7.20 37 TR_XM_DK_Bayes1 22431 5.00 0.55 7.12 38 IN_ZIMBRA_NJ_WHITELIST 22179 4.80 0.10 7.04 39 LOTS_OF_MONEY 22135 9.42 14.48 7.02 40 FSL_BULK_SIG 21463 7.60 9.25 6.81 41 TR_XM_BayesUnsub 20325 9.07 14.58 6.45 42 ANY_BOUNCE_MESSAGE 19963 5.60 4.06 6.33 43 BOUNCE_MESSAGE 19961 5.60 4.06 6.33 44 BAYES_60 19716 6.86 8.13 6.25 45 T_TooManySym_01 19585 4.89 2.11 6.21 46 BAYES_40 18693 4.68 2.03 5.93 47 TR_XM_DK_Bayes2 18623 4.12 0.36 5.91 48 XM_H_Long_From01 17525 5.29 4.73 5.56 49 XM_H_GMP 17201 5.07 4.25 5.46 50 TR_MAX_INTL_RELAY 17189 8.36 14.49 5.45 51 XM_DK_Undo_02 16207 16.43 40.20 5.14 52 XM_B_Phish_Phrases 16133 6.51 9.44 5.12 53 MIME_QP_LONG_LINE 16105 4.48 3.15 5.11 54 XM_PDF 16041 3.95 1.54 5.09 55 RCVD_IN_MSPIKE_H3 15943 4.58 3.58 5.06 56 RCVD_IN_MSPIKE_WL 15943 4.58 3.58 5.06 57 XM_B_SpammyWords3 15706 8.32 15.35 4.98 58 HTML_IMAGE_RATIO_04 15433 5.43 6.54 4.90 59 TR_XM_SpammyWords4 15067 7.31 12.62 4.78 60 XMStrtUSub 14135 4.56 4.73 4.48 61 XM_UncommonTLD01 13246 4.78 6.00 4.20 62 MPART_ALT_DIFF 13221 4.65 5.60 4.19 63 HTML_IMAGE_RATIO_02 12934 5.07 7.09 4.10 64 RCVD_IN_IADB_LISTED 12529 3.08 1.21 3.97 65 BAYES_20 12322 3.06 1.26 3.91 66 TM2_M_VERY_LONG_WORD 12143 4.97 7.31 3.85 67 RCVD_IN_VALIDITY_SAFE 11829 3.37 2.56 3.75 68 RELAYCOUNTRY_META 11460 6.78 13.40 3.64 69 T_REMOTE_IMAGE 11337 3.00 1.75 3.60 70 BOTNET_IPINHOSTNAME 11288 5.63 9.93 3.58 71 XMSubMetaSx_00 11244 4.01 4.95 3.57 72 RCVD_IN_IADB_SPF 10909 2.71 1.14 3.46 73 BAYES_99 10869 11.73 29.15 3.45 74 BAYES_80 10294 5.12 9.03 3.27 75 HTML_MIME_NO_HTML_TAG 9890 2.95 2.55 3.14 76 T_TooManySym_02 9740 2.31 0.66 3.09 77 RCVD_IN_IADB_SENDERID 9716 2.45 1.11 3.08 78 XM_Body_Dirty_Words 9535 4.22 6.73 3.02 79 RCVD_IN_IADB_DK 9455 2.39 1.12 3.00 80 KHOP_HELO_FCRDNS 9229 2.99 3.13 2.93 81 XMNumbers 9195 2.89 2.82 2.92 82 TooManyTo_002 8781 2.04 0.48 2.79 83 MAILING_LIST_MULTI 8778 2.63 2.31 2.78 84 RCVD_IN_VALIDITY_CERTIFIED 8666 2.52 2.05 2.75 85 RCVD_IN_IADB_VOUCHED 8392 1.92 0.36 2.66 86 MIME_HTML_ONLY_MULTI 8292 2.87 3.37 2.63 87 BAYES_999 8261 8.94 22.23 2.62 88 XM_B_SpammyTLD 8180 2.94 3.66 2.60 89 MAY_BE_FORGED 8139 2.85 3.41 2.58 90 HTML_IMAGE_RATIO_06 7850 2.81 3.47 2.49 91 BAYES_05 7444 1.80 0.60 2.36 92 INVALID_MSGID 7434 1.66 0.18 2.36 93 HTML_IMAGE_ONLY_32 7362 2.16 1.79 2.34 94 TR_XM_DKIM_Undo 7280 10.87 28.88 2.31 95 XM_CamelCaseFrm001 7207 2.39 2.60 2.29 96 SHORT_URI_2 7186 2.22 2.10 2.28 97 DKIM_INVALID 7134 3.04 4.66 2.26 98 HTML_IMAGE_RATIO_08 6990 2.30 2.47 2.22 99 BAYES_95 6889 3.17 5.24 2.19 100 MIME_HTML_MOSTLY 6529 2.47 3.30 2.07 101 TO_MALFORMED 6279 1.46 0.33 1.99 102 FROM_EXCESS_BASE64 6143 2.25 2.88 1.95 103 T_XMDrugObfuBody_14 6038 2.63 4.15 1.92 104 XM_B_URI_Unicode 5981 2.06 2.40 1.90 105 RCVD_IN_IADB_OPTIN 5934 1.35 0.23 1.88 106 TR_XM_SpammyRelay 5891 4.49 10.00 1.87 107 TM2_M_URI_OPT_OUT 5870 2.12 2.67 1.86 108 TR_Symld_Words 5781 1.60 1.10 1.83 109 XM_B_Investor 5727 2.65 4.40 1.82 110 URI_NOVOWEL 5669 1.48 0.81 1.80 111 XMStockSpam_06 5555 1.83 1.98 1.76 112 SUBJ_ALL_CAPS 5361 1.97 2.55 1.70 113 XMSexyCombo_05 5283 2.32 3.67 1.68 114 XMNoVowels 5167 1.76 2.00 1.64 115 XMDiploma_00 5140 1.90 2.48 1.63 116 XM_DK_Undo_01 5113 1.66 1.73 1.62 117 TooManyTo_003 4986 1.20 0.39 1.58 118 T_XMDrugObfuBody_08 4823 1.95 2.83 1.53 119 BOTNET 4815 3.71 8.29 1.53 120 IN_HORDE_ADDRESS_BOOK 4699 1.04 0.11 1.49 121 UNTRUSTED_Relay 4514 2.39 4.39 1.43 122 TR_XM_SpammyWords5 4501 2.32 4.21 1.43 123 T_OBFU_PDF_ATTACH 4281 1.24 0.99 1.36 124 MIME_CHARSET_FARAWAY 4264 1.33 1.27 1.35 125 TR_XM_UnparsRelay 4230 3.51 8.08 1.34 126 XM_B_Unsub2 4207 1.65 2.30 1.33 127 XM_SPF_SoftFail 4189 1.73 2.58 1.33 128 SHORT_URI_3 4101 0.93 0.14 1.30 129 XM_OfRef6 4070 1.80 2.87 1.29 130 T_TooManySym_03 4045 0.94 0.21 1.28 131 TR_DCC_Bayes_99 4028 7.56 20.80 1.28 132 TR_XM_PhishingBody 3942 2.23 4.30 1.25 133 XMGappySubj_01 3868 0.87 0.11 1.23 134 FROM_GOV_DKIM_AU 3807 0.87 0.17 1.21 135 URI_HEX 3764 1.24 1.35 1.19 136 XM_SendGrid 3730 1.22 1.30 1.18 137 TooManyTo_004 3725 0.91 0.34 1.18 138 TVD_SPACE_RATIO 3677 0.83 0.13 1.17 139 T_TVD_MIME_NO_HEADERS 3666 0.80 0.04 1.16 140 XM_GoogleGroups 3443 0.96 0.68 1.09 141 T_FILL_THIS_FORM_SHORT 3245 1.28 1.79 1.03 142 XMGenDplmaNmb 3216 1.16 1.47 1.02 143 HELO_NODOT 3184 0.71 0.09 1.01 144 HELO_NO_DOMAIN 3180 0.71 0.09 1.01 145 CHARSET_FARAWAY_HEADER 3148 0.83 0.46 1.00 146 XMCapTrack 3148 0.81 0.40 1.00 147 RELAYCOUNTRY_CA 2982 2.54 5.89 0.95 148 XM_H_PHPMailer 2956 0.83 0.61 0.94 149 DKIM_ADSP_CUSTOM_MED 2918 0.92 0.89 0.93 150 TooManyTo_005 2913 0.73 0.31 0.92 151 XMBrknScrpt_02 2854 1.07 1.41 0.91 152 XM_UB50 2722 1.28 2.17 0.86 153 XMSubMetaSxObfu_03 2639 0.72 0.49 0.84 154 TR_XM_DK_SendGrid 2569 0.80 0.77 0.82 155 HTTPS_HTTP_MISMATCH 2550 0.90 1.10 0.81 156 SpammyFromTLD_01 2520 1.05 1.59 0.80 157 T_XMDrugObfuBody_00 2472 1.17 1.97 0.78 158 XM_H_Long_From02 2464 0.85 0.98 0.78 159 XM_ShortIntro_01 2444 0.64 0.34 0.78 160 MPART_ALT_DIFF_COUNT 2436 0.86 1.03 0.77 161 TR_XM_Base64_M1 2286 0.82 1.02 0.73 162 XM_B_COPY_HTML 2259 0.96 1.46 0.72 163 URI_TRY_3LD 2236 0.94 1.44 0.71 164 TO_NO_BRKTS_HTML_ONLY 2232 0.60 0.37 0.71 165 T_XMHurry_00 2140 1.31 2.63 0.68 166 RCVD_IN_BL_SPAMCOP_NET 2107 3.73 10.17 0.67 167 HTML_TAG_BALANCE_BODY 2086 0.86 1.29 0.66 168 XMGappySubj_02 2085 0.47 0.05 0.66 169 TR_MetaPhish_Combo_01 2082 0.82 1.15 0.66 170 RELAYCOUNTRY_AU 2052 1.18 2.28 0.65 171 XM_B_DNDMA 2016 0.74 0.96 0.64 172 TVD_RCVD_IP 2010 0.74 0.94 0.64 173 RCVD_IN_PBL 1998 0.81 1.18 0.63 174 FORGED_GMAIL_RCVD 1974 0.64 0.68 0.63 175 XMSexyCombo_01 1968 0.63 0.66 0.62 176 XM_ProductURIs 1965 0.73 0.95 0.62 177 NML_ADSP_CUSTOM_MED 1955 0.64 0.69 0.62 178 XMSubMetaSx_01 1838 0.45 0.18 0.58 179 TR_LOTS_OF_MONEY3 1821 1.31 2.86 0.58 180 XMBody_95 1775 0.48 0.31 0.56 181 XMBdyGiftCard01 1760 0.70 1.00 0.56 182 HTML_FONT_FACE_BAD 1758 0.57 0.60 0.56 183 XMClaimOffer 1740 0.56 0.58 0.55 184 XM_B_FormFill 1731 0.38 0.01 0.55 185 XM_B_SpammyWords4 1715 1.00 1.95 0.54 186 SpammyFromTLD_02 1692 1.02 2.04 0.54 187 XMBSHREFv2 1664 0.52 0.52 0.53 188 XMLngstWrd_00 1653 0.60 0.77 0.52 189 FILL_THIS_FORM 1630 0.41 0.18 0.52 190 TM2_M_BODY_EMPTY 1622 0.37 0.07 0.51 191 XMSexyCombo_04 1581 0.41 0.20 0.50 192 TR_XM_SpammyWords2 1565 3.59 10.10 0.50 193 XMSexyCombo_02 1549 0.38 0.14 0.49 194 T_MANY_PILL_PRICE 1541 0.33 0.00 0.49 195 T_STY_INVIS_DIRECT 1493 0.62 0.93 0.47 196 DKIM_ADSP_NXDOMAIN 1488 0.57 0.77 0.47 197 XMSlimDrugH 1441 0.51 0.63 0.46 198 RELAYCOUNTRY_GB 1422 0.53 0.68 0.45 199 TR_XM_SPAMCOP 1416 3.01 8.40 0.45 200 BASE64_LENGTH_79_INF 1391 0.63 1.03 0.44 ----------------------------------------------------------------------