Email: 460509 Autolearn: 0 AvgScore: 4.51 AvgScanTime: 1.35 sec Spam: 136036 Autolearn: 0 AvgScore: 14.69 AvgScanTime: 1.48 sec Ham: 324473 Autolearn: 0 AvgScore: 0.25 AvgScanTime: 1.29 sec Time Spent Running SA: 172.41 hours Time Spent Processing Spam: 55.82 hours Time Spent Processing Ham: 116.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129178 89.39 94.96 87.05 2 DKIM_SIGNED 120879 76.95 88.86 71.96 3 XM_B_Unicode 114410 73.15 84.10 68.56 4 XM_DK_Pass 114289 74.45 84.01 70.45 5 DKIM_VALID 112665 73.20 82.82 69.17 6 RELAYCOUNTRY_US 111897 81.85 82.26 81.69 7 DCC_CHECK 102723 47.06 75.51 35.14 8 XM_B_SpammyWords 94759 51.44 69.66 43.80 9 XMListUnsubscribeExists 92089 50.81 67.69 43.73 10 DKIM_VALID_AU 89429 58.27 65.74 55.13 11 XM_B_Unicode3 67906 43.11 49.92 40.25 12 LOC_TINY_FONT_1 65586 31.36 48.21 24.29 13 BAYES_50 57412 55.45 42.20 61.00 14 XM_B_SpammyWords2 54943 24.38 40.39 17.67 15 RCVD_IN_MSPIKE_H2 53555 36.28 39.37 34.98 16 XM_DK_Undo_02 50242 13.99 36.93 4.36 17 HTML_FONT_LOW_CONTRAST 49574 30.22 36.44 27.61 18 T_KAM_HTML_FONT_INVALID 43375 23.29 31.88 19.69 19 FVGT_m_MULTI_ODD 41748 25.90 30.69 23.89 20 MIME_HTML_ONLY 40845 23.00 30.03 20.05 21 DKIM_VALID_EF 38838 29.13 28.55 29.37 22 BAYES_99 37804 10.23 27.79 2.87 23 TR_XM_DKIM_Undo 36984 9.39 27.19 1.93 24 XMSubLong 32847 22.81 24.15 22.25 25 T_TM2_M_HEADER_IN_MSG 31457 30.27 23.12 33.26 26 DCC_CHECK_NEGATIVE 30727 52.35 22.59 64.82 27 XM_Multi_Part_URI 30566 15.32 22.47 12.32 28 BAYES_999 28604 7.69 21.03 2.10 29 TR_DCC_Bayes_99 27019 6.48 19.86 0.86 30 TR_XM_DK_Unsub 26296 14.20 19.33 12.05 31 XM_B_Unsub 25193 12.20 18.52 9.55 32 TR_XM_BayesUnsub 24290 10.10 17.86 6.84 33 RELAYCOUNTRY_META 22143 7.54 16.28 3.87 34 UNPARSEABLE_RELAY 22008 13.21 16.18 11.96 35 XM_B_SpammyWords3 21059 7.47 15.48 4.11 36 TR_MAX_INTL_RELAY 20150 7.98 14.81 5.12 37 TR_XM_SpammyRelay 15980 4.85 11.75 1.95 38 BOTNET_IPINHOSTNAME 15750 5.55 11.58 3.03 39 LOTS_OF_MONEY 14944 7.08 10.99 5.44 40 BOTNET 14425 4.23 10.60 1.55 41 FSL_BULK_SIG 14059 7.91 10.33 6.89 42 TR_XM_SpammyWords2 13141 3.07 9.66 0.31 43 TR_XM_SpammyWords4 12942 5.19 9.51 3.38 44 BAYES_80 12570 4.93 9.24 3.13 45 XM_Evil_Numbers_Gen 11953 9.31 8.79 9.53 46 BAYES_60 11890 7.09 8.74 6.40 47 TR_XM_UnparsRelay 11167 3.48 8.21 1.50 48 XM_B_Phish_Phrases 11133 5.98 8.18 5.05 49 LotsOfNums_01 10858 9.36 7.98 9.94 50 RCVD_IN_BL_SPAMCOP_NET 10680 2.76 7.85 0.63 51 XM_Body_Dirty_Words 9512 4.05 6.99 2.82 52 HTML_IMAGE_RATIO_02 9341 4.93 6.87 4.12 53 RELAYCOUNTRY_CA 8899 2.59 6.54 0.93 54 DKIM_INVALID 8214 3.75 6.04 2.80 55 XMSubMetaSx_00 8105 4.35 5.96 3.68 56 UNTRUSTED_Relay 7971 2.80 5.86 1.52 57 XM_B_PhoneNumber 7959 9.08 5.85 10.43 58 MPART_ALT_DIFF 7678 4.53 5.64 4.06 59 XM_UncommonTLD01 7676 4.73 5.64 4.35 60 TR_XM_SPAMCOP 7598 1.95 5.59 0.43 61 BAYES_95 7121 2.95 5.23 1.99 62 XM_B_Investor 7080 2.68 5.20 1.62 63 HTML_IMAGE_RATIO_04 6866 4.32 5.05 4.02 64 XM_H_Long_From01 6747 5.19 4.96 5.29 65 XMStrtUSub 6479 4.99 4.76 5.09 66 TooManyTo_001 6205 7.88 4.56 9.27 67 XM_H_GMP 6183 5.78 4.55 6.29 68 TM2_M_VERY_LONG_WORD 6147 4.92 4.52 5.09 69 TR_XM_PhishingBody 5902 2.25 4.34 1.38 70 XMSexyCombo_05 5542 2.39 4.07 1.68 71 TR_XM_SpammyWords5 5380 2.06 3.95 1.27 72 XM_B_SpammyTLD 5252 2.83 3.86 2.40 73 RCVD_IN_VALIDITY_RPBL 5023 1.21 3.69 0.16 74 RCVD_IN_MSPIKE_H3 4997 4.61 3.67 5.00 75 RCVD_IN_MSPIKE_WL 4997 4.61 3.67 5.00 76 T_XMDrugObfuBody_14 4984 2.39 3.66 1.86 77 HTML_IMAGE_RATIO_06 4878 2.79 3.59 2.45 78 MIME_HTML_ONLY_MULTI 4819 2.78 3.54 2.46 79 XM_OfRef6 4737 1.82 3.48 1.13 80 HTML_IMAGE_RATIO_08 4614 2.57 3.39 2.23 81 XM_CamelCaseFrm001 4565 2.32 3.36 1.89 82 MIME_QP_LONG_LINE 4475 4.28 3.29 4.69 83 XMNumbers 4402 2.95 3.24 2.84 84 MIME_HTML_MOSTLY 4263 2.38 3.13 2.06 85 T_XMDrugObfuBody_08 4175 1.96 3.07 1.50 86 XM_UB50 4045 1.55 2.97 0.96 87 XM_SPF_SoftFail 3910 1.80 2.87 1.34 88 TR_XM_NoHeaderRelay 3898 1.00 2.87 0.22 89 XMDiploma_00 3892 1.97 2.86 1.59 90 RELAYCOUNTRY_AU 3775 1.29 2.78 0.67 91 TM2_M_URI_OPT_OUT 3657 1.97 2.69 1.67 92 XM_B_URI_Unicode 3433 2.08 2.52 1.90 93 MAILING_LIST_MULTI 3409 2.96 2.51 3.15 94 XM_B_Unsub2 3372 1.81 2.48 1.53 95 T_TooManySym_01 3345 5.15 2.46 6.28 96 T_XMHurry_00 3209 1.37 2.36 0.96 97 TR_XM_INV_DKIM 3189 0.83 2.34 0.20 98 XM_B_SpammyWords4 3121 1.12 2.29 0.62 99 XM_URI_RBL 3107 0.95 2.28 0.40 100 ANY_BOUNCE_MESSAGE 3099 5.85 2.28 7.35 101 BOUNCE_MESSAGE 3098 5.85 2.28 7.35 102 XMBody_17 3003 0.95 2.21 0.42 103 DIET_1 2955 1.07 2.17 0.61 104 T_XMDrugObfuBody_00 2903 1.17 2.13 0.77 105 HTML_MIME_NO_HTML_TAG 2766 2.67 2.03 2.93 106 BAYES_40 2737 4.85 2.01 6.03 107 T_FILL_THIS_FORM_SHORT 2708 1.21 1.99 0.88 108 SUBJ_ALL_CAPS 2634 1.62 1.94 1.49 109 ALL_TRUSTED 2615 11.48 1.92 15.49 110 T_REMOTE_IMAGE 2605 3.12 1.91 3.62 111 SHORTCIRCUIT 2576 0.56 1.89 0.00 112 RCVD_IN_ZEN_LASTEXTERNAL 2576 0.56 1.89 0.00 113 XM_B_COPY_HTML 2442 0.94 1.80 0.58 114 SpammyFromTLD_01 2425 1.24 1.78 1.01 115 KHOP_HELO_FCRDNS 2425 2.80 1.78 3.23 116 FROM_EXCESS_BASE64 2410 1.65 1.77 1.60 117 RCVD_IN_VALIDITY_SAFE 2409 2.77 1.77 3.18 118 SpammyFromTLD_02 2335 0.67 1.72 0.23 119 XM_DK_Undo_01 2324 1.92 1.71 2.01 120 XMStockSpam_06 2252 1.38 1.66 1.26 121 USER_IN_DEF_DKIM_WL 2235 8.43 1.64 11.27 122 URI_HEX 2182 1.43 1.60 1.36 123 XMBrknScrpt_02 2165 1.06 1.59 0.83 124 SH_BODYURI_REVERSE_CSS 2108 0.65 1.55 0.27 125 URIBL_CSS 2060 0.63 1.51 0.27 126 URIBL_CSS_A 2060 0.63 1.51 0.27 127 DKIM_ADSP_NXDOMAIN 2041 0.85 1.50 0.58 128 XMGenDplmaNmb 2041 0.98 1.50 0.76 129 BAYES_20 1999 3.36 1.47 4.16 130 XMPhish30 1980 0.81 1.46 0.54 131 RCVD_IN_VALIDITY_CERTIFIED 1865 2.23 1.37 2.59 132 MIME_CHARSET_FARAWAY 1768 2.07 1.30 2.39 133 HTML_FONT_TINY_NORDNS 1765 0.42 1.30 0.06 134 BOTNET_NORDNS 1744 0.39 1.28 0.02 135 XM_H_Long_From02 1701 0.97 1.25 0.86 136 TR_XM_PHPForged 1698 0.74 1.25 0.53 137 URI_TRY_3LD 1658 0.80 1.22 0.63 138 TR_XM_FormFill2 1652 0.73 1.21 0.53 139 TR_XM_PHPDW 1651 0.74 1.21 0.54 140 XM_SendGrid 1627 1.30 1.20 1.34 141 XM_H_PHPOS 1617 0.71 1.19 0.51 142 XM_DIRTYINTL 1612 0.41 1.18 0.08 143 XM_B_SEO 1540 0.51 1.13 0.25 144 HTML_TAG_BALANCE_BODY 1527 0.75 1.12 0.60 145 XMHTML_After_End 1493 0.56 1.10 0.33 146 XMSlimDrugH 1458 0.72 1.07 0.57 147 RELAYCOUNTRY_FR 1456 0.51 1.07 0.28 148 XMSubMetaI_00 1439 0.68 1.06 0.52 149 XM_B_Phish66 1438 0.53 1.06 0.31 150 TR_XM_SEO4 1432 0.39 1.05 0.11 151 RDNS_DYNAMIC 1426 0.46 1.05 0.21 152 URI_NOVOWEL 1425 1.64 1.05 1.88 153 XMBdyGiftCard01 1412 0.87 1.04 0.80 154 XM_B_DNDMA 1405 0.67 1.03 0.52 155 TR_MetaPhish_Combo_01 1386 0.89 1.02 0.83 156 LongTLD 1359 0.63 1.00 0.47 157 TM2_M_OBFU_COMMENT 1352 0.52 0.99 0.32 158 XM_PDF 1339 3.96 0.98 5.20 159 TR_LOTS_OF_MONEY3 1333 0.46 0.98 0.24 160 T_MONEY_PERCENT 1333 0.47 0.98 0.26 161 TR_LOTS_OF_MONEY2 1333 0.47 0.98 0.26 162 PDS_RDNS_DYNAMIC_FP 1328 0.35 0.98 0.09 163 HTTPS_HTTP_MISMATCH 1324 0.82 0.97 0.76 164 HK_RANDOM_REPLYTO 1324 0.38 0.97 0.13 165 DKIM_ADSP_CUSTOM_MED 1319 1.00 0.97 1.01 166 MPART_ALT_DIFF_COUNT 1318 0.72 0.97 0.62 167 XMMoneyMeta_00 1317 0.67 0.97 0.55 168 SHOPIFY_IMG_NOT_RCVD_SFY 1294 0.45 0.95 0.25 169 XM_UB99 1261 0.28 0.93 0.00 170 XM_ProductURIs 1255 0.61 0.92 0.49 171 RCVD_IN_PBL 1251 0.83 0.92 0.79 172 TR_Mismatch_TLD_02 1251 0.34 0.92 0.09 173 TR_XM_RelayPhish 1249 0.34 0.92 0.09 174 XMClaimOffer 1233 0.37 0.91 0.14 175 RCVD_IN_IADB_LISTED 1222 2.58 0.90 3.29 176 RELAYCOUNTRY_GB 1211 0.61 0.89 0.49 177 MAY_BE_FORGED 1198 3.00 0.88 3.89 178 FONT_INVIS_LONG_LINE 1191 0.34 0.88 0.11 179 TVD_RCVD_IP 1190 0.71 0.87 0.64 180 XM_H_Undi_Recip 1175 0.45 0.86 0.27 181 TR_XM_Base64_M1 1175 0.83 0.86 0.82 182 XM_H_PHPMailer 1169 0.86 0.86 0.85 183 XM_B_REG_HTML 1167 0.42 0.86 0.24 184 RCVD_IN_SORBS_DUL 1159 0.29 0.85 0.05 185 TM2_M_A_HREF_HREF 1152 0.40 0.85 0.21 186 CHARSET_FARAWAY_HEADER 1150 1.80 0.85 2.19 187 NO_DNS_FOR_FROM 1149 0.44 0.84 0.27 188 TR_Symld_Words 1149 1.43 0.84 1.68 189 RCVD_IN_PSBL 1137 0.30 0.84 0.07 190 XMSexyCombo_01 1130 0.67 0.83 0.60 191 TR_XM_MaxWHORU 1129 0.39 0.83 0.21 192 XMBody_78 1118 0.43 0.82 0.26 193 URIBL_BLACK 1107 0.27 0.81 0.04 194 XMEqualsVooDoo_00 1105 0.34 0.81 0.14 195 HTML_IMAGE_ONLY_20 1086 0.64 0.80 0.57 196 XM_HighProb1 1065 0.24 0.78 0.01 197 TR_XM_InvalidRelay 1051 0.23 0.77 0.01 198 TR_Mismatch_TLD_01 1047 0.38 0.77 0.22 199 T_STY_INVIS_DIRECT 1042 0.56 0.77 0.48 200 XM_UB60 1033 0.29 0.76 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 282452 89.39 94.96 87.05 2 RELAYCOUNTRY_US 265048 81.85 82.26 81.69 3 DKIM_SIGNED 233494 76.95 88.86 71.96 4 XM_DK_Pass 228576 74.45 84.01 70.45 5 DKIM_VALID 224423 73.20 82.82 69.17 6 XM_B_Unicode 222450 73.15 84.10 68.56 7 DCC_CHECK_NEGATIVE 210333 52.35 22.59 64.82 8 BAYES_50 197920 55.45 42.20 61.00 9 DKIM_VALID_AU 178897 58.27 65.74 55.13 10 XM_B_SpammyWords 142107 51.44 69.66 43.80 11 XMListUnsubscribeExists 141889 50.81 67.69 43.73 12 XM_B_Unicode3 130613 43.11 49.92 40.25 13 DCC_CHECK 114011 47.06 75.51 35.14 14 RCVD_IN_MSPIKE_H2 113508 36.28 39.37 34.98 15 T_TM2_M_HEADER_IN_MSG 107934 30.27 23.12 33.26 16 DKIM_VALID_EF 95302 29.13 28.55 29.37 17 HTML_FONT_LOW_CONTRAST 89599 30.22 36.44 27.61 18 LOC_TINY_FONT_1 78820 31.36 48.21 24.29 19 FVGT_m_MULTI_ODD 77524 25.90 30.69 23.89 20 XMSubLong 72180 22.81 24.15 22.25 21 MIME_HTML_ONLY 65060 23.00 30.03 20.05 22 T_KAM_HTML_FONT_INVALID 63878 23.29 31.88 19.69 23 XM_B_SpammyWords2 57323 24.38 40.39 17.67 24 ALL_TRUSTED 50258 11.48 1.92 15.49 25 XM_Multi_Part_URI 39964 15.32 22.47 12.32 26 TR_XM_DK_Unsub 39085 14.20 19.33 12.05 27 UNPARSEABLE_RELAY 38823 13.21 16.18 11.96 28 BAYES_00 38578 8.58 0.68 11.89 29 USER_IN_DEF_DKIM_WL 36580 8.43 1.64 11.27 30 XM_B_PhoneNumber 33844 9.08 5.85 10.43 31 LotsOfNums_01 32258 9.36 7.98 9.94 32 XM_B_Unsub 30998 12.20 18.52 9.55 33 XM_Evil_Numbers_Gen 30912 9.31 8.79 9.53 34 TooManyTo_001 30066 7.88 4.56 9.27 35 TR_XM_DK_Bayes 24449 5.46 0.52 7.53 36 ANY_BOUNCE_MESSAGE 23862 5.85 2.28 7.35 37 BOUNCE_MESSAGE 23850 5.85 2.28 7.35 38 TR_XM_DK_Bayes1 23817 5.32 0.52 7.34 39 FSL_BULK_SIG 22366 7.91 10.33 6.89 40 TR_XM_BayesUnsub 22200 10.10 17.86 6.84 41 IN_ZIMBRA_NJ_WHITELIST 21204 4.63 0.10 6.53 42 XM_DKIMWhitelistDomains 21152 4.73 0.48 6.52 43 BAYES_60 20761 7.09 8.74 6.40 44 XM_H_GMP 20421 5.78 4.55 6.29 45 T_TooManySym_01 20383 5.15 2.46 6.28 46 BAYES_40 19580 4.85 2.01 6.03 47 TR_XM_DK_Bayes2 19474 4.34 0.37 6.00 48 LOTS_OF_MONEY 17657 7.08 10.99 5.44 49 XM_H_Long_From01 17153 5.19 4.96 5.29 50 XM_PDF 16887 3.96 0.98 5.20 51 TR_MAX_INTL_RELAY 16601 7.98 14.81 5.12 52 TM2_M_VERY_LONG_WORD 16529 4.92 4.52 5.09 53 XMStrtUSub 16502 4.99 4.76 5.09 54 XM_B_Phish_Phrases 16386 5.98 8.18 5.05 55 RCVD_IN_MSPIKE_H3 16228 4.61 3.67 5.00 56 RCVD_IN_MSPIKE_WL 16228 4.61 3.67 5.00 57 MIME_QP_LONG_LINE 15220 4.28 3.29 4.69 58 HTML_IMAGE_ONLY_32 14427 3.19 0.19 4.45 59 XM_DK_Undo_02 14161 13.99 36.93 4.36 60 XM_UncommonTLD01 14102 4.73 5.64 4.35 61 BAYES_20 13485 3.36 1.47 4.16 62 HTML_IMAGE_RATIO_02 13357 4.93 6.87 4.12 63 XM_B_SpammyWords3 13330 7.47 15.48 4.11 64 MPART_ALT_DIFF 13165 4.53 5.64 4.06 65 HTML_IMAGE_RATIO_04 13032 4.32 5.05 4.02 66 MAY_BE_FORGED 12621 3.00 0.88 3.89 67 RELAYCOUNTRY_META 12570 7.54 16.28 3.87 68 XMSubMetaSx_00 11931 4.35 5.96 3.68 69 TooManyTo_002 11835 2.75 0.61 3.65 70 T_REMOTE_IMAGE 11746 3.12 1.91 3.62 71 TR_XM_SpammyWords4 10977 5.19 9.51 3.38 72 T_TooManySym_02 10742 2.55 0.74 3.31 73 RCVD_IN_IADB_LISTED 10665 2.58 0.90 3.29 74 KHOP_HELO_FCRDNS 10488 2.80 1.78 3.23 75 RCVD_IN_VALIDITY_SAFE 10330 2.77 1.77 3.18 76 MAILING_LIST_MULTI 10209 2.96 2.51 3.15 77 BAYES_80 10151 4.93 9.24 3.13 78 BOTNET_IPINHOSTNAME 9830 5.55 11.58 3.03 79 HTML_MIME_NO_HTML_TAG 9520 2.67 2.03 2.93 80 BAYES_99 9310 10.23 27.79 2.87 81 RCVD_IN_IADB_SPF 9237 2.23 0.76 2.85 82 XMNumbers 9200 2.95 3.24 2.84 83 XM_Body_Dirty_Words 9161 4.05 6.99 2.82 84 DKIM_INVALID 9071 3.75 6.04 2.80 85 RCVD_IN_VALIDITY_CERTIFIED 8400 2.23 1.37 2.59 86 BAYES_05 8229 2.00 0.73 2.54 87 RCVD_IN_IADB_SENDERID 8126 1.98 0.74 2.50 88 MIME_HTML_ONLY_MULTI 7969 2.78 3.54 2.46 89 HTML_IMAGE_RATIO_06 7956 2.79 3.59 2.45 90 RCVD_IN_IADB_DK 7947 1.95 0.74 2.45 91 XM_B_SpammyTLD 7773 2.83 3.86 2.40 92 MIME_CHARSET_FARAWAY 7744 2.07 1.30 2.39 93 INVALID_MSGID 7688 1.74 0.23 2.37 94 RCVD_IN_IADB_VOUCHED 7511 1.74 0.36 2.31 95 HTML_IMAGE_RATIO_08 7238 2.57 3.39 2.23 96 CHARSET_FARAWAY_HEADER 7120 1.80 0.85 2.19 97 BAYES_999 6802 7.69 21.03 2.10 98 MIME_HTML_MOSTLY 6697 2.38 3.13 2.06 99 XM_DK_Undo_01 6515 1.92 1.71 2.01 100 BAYES_95 6446 2.95 5.23 1.99 101 TooManyTo_003 6379 1.54 0.51 1.97 102 TR_XM_SpammyRelay 6332 4.85 11.75 1.95 103 TR_XM_DKIM_Undo 6274 9.39 27.19 1.93 104 TO_MALFORMED 6271 1.37 0.01 1.93 105 XM_B_URI_Unicode 6163 2.08 2.52 1.90 106 XM_CamelCaseFrm001 6129 2.32 3.36 1.89 107 URI_NOVOWEL 6110 1.64 1.05 1.88 108 T_XMDrugObfuBody_14 6027 2.39 3.66 1.86 109 XMSexyCombo_05 5446 2.39 4.07 1.68 110 TR_Symld_Words 5439 1.43 0.84 1.68 111 TM2_M_URI_OPT_OUT 5429 1.97 2.69 1.67 112 RCVD_IN_IADB_OPTIN 5268 1.19 0.16 1.62 113 XM_B_Investor 5267 2.68 5.20 1.62 114 FROM_EXCESS_BASE64 5185 1.65 1.77 1.60 115 XMDiploma_00 5158 1.97 2.86 1.59 116 BOTNET 5040 4.23 10.60 1.55 117 XM_B_Unsub2 4976 1.81 2.48 1.53 118 UNTRUSTED_Relay 4926 2.80 5.86 1.52 119 T_XMDrugObfuBody_08 4868 1.96 3.07 1.50 120 TR_XM_UnparsRelay 4863 3.48 8.21 1.50 121 SUBJ_ALL_CAPS 4827 1.62 1.94 1.49 122 TooManyTo_004 4810 1.18 0.44 1.48 123 XMLngstWrd_00 4752 1.25 0.73 1.46 124 IN_HORDE_ADDRESS_BOOK 4491 1.01 0.10 1.38 125 XMCapTrack 4475 1.12 0.49 1.38 126 TR_XM_PhishingBody 4465 2.25 4.34 1.38 127 URI_HEX 4399 1.43 1.60 1.36 128 XM_SPF_SoftFail 4360 1.80 2.87 1.34 129 XM_SendGrid 4349 1.30 1.20 1.34 130 HELO_NODOT 4301 1.04 0.35 1.33 131 HELO_NO_DOMAIN 4297 1.04 0.35 1.32 132 T_TooManySym_03 4253 0.97 0.17 1.31 133 TooManyTo_005 4145 1.02 0.40 1.28 134 TR_XM_SpammyWords5 4118 2.06 3.95 1.27 135 XM_GoogleGroups 4112 1.11 0.75 1.27 136 XMStockSpam_06 4094 1.38 1.66 1.26 137 XMNoVowels 3771 1.03 0.73 1.16 138 XM_OfRef6 3662 1.82 3.48 1.13 139 TVD_SPACE_RATIO 3659 0.84 0.17 1.13 140 XM_ShortIntro_01 3400 0.85 0.38 1.05 141 DKIM_ADSP_CUSTOM_MED 3293 1.00 0.97 1.01 142 SpammyFromTLD_01 3272 1.24 1.78 1.01 143 XMGappySubj_01 3255 0.76 0.16 1.00 144 XM_B_FormFill 3117 0.69 0.03 0.96 145 XM_UB50 3111 1.55 2.97 0.96 146 T_XMHurry_00 3110 1.37 2.36 0.96 147 RELAYCOUNTRY_CA 3020 2.59 6.54 0.93 148 TR_XM_DK_SendGrid 2917 0.85 0.74 0.90 149 T_FILL_THIS_FORM_SHORT 2859 1.21 1.99 0.88 150 TR_DCC_Bayes_99 2801 6.48 19.86 0.86 151 XM_H_Long_From02 2781 0.97 1.25 0.86 152 XM_H_PHPMailer 2774 0.86 0.86 0.85 153 T_OBFU_PDF_ATTACH 2752 0.67 0.25 0.85 154 XMSubMetaSxObfu_03 2721 0.75 0.55 0.84 155 TR_MetaPhish_Combo_01 2709 0.89 1.02 0.83 156 XMBrknScrpt_02 2697 1.06 1.59 0.83 157 TR_XM_Base64_M1 2652 0.83 0.86 0.82 158 XMBdyGiftCard01 2591 0.87 1.04 0.80 159 RCVD_IN_PBL 2565 0.83 0.92 0.79 160 T_XMDrugObfuBody_00 2495 1.17 2.13 0.77 161 XMGenDplmaNmb 2468 0.98 1.50 0.76 162 HTTPS_HTTP_MISMATCH 2453 0.82 0.97 0.76 163 FROM_GOV_DKIM_AU 2291 0.57 0.24 0.71 164 NML_ADSP_CUSTOM_MED 2210 0.70 0.75 0.68 165 TO_NO_BRKTS_HTML_ONLY 2203 0.62 0.47 0.68 166 RELAYCOUNTRY_AU 2160 1.29 2.78 0.67 167 FORGED_GMAIL_RCVD 2071 0.65 0.67 0.64 168 TVD_RCVD_IP 2063 0.71 0.87 0.64 169 URI_TRY_3LD 2043 0.80 1.22 0.63 170 RCVD_IN_BL_SPAMCOP_NET 2028 2.76 7.85 0.63 171 XM_B_SpammyWords4 2024 1.12 2.29 0.62 172 MPART_ALT_DIFF_COUNT 2014 0.72 0.97 0.62 173 DIET_1 1991 1.07 2.17 0.61 174 FILL_THIS_FORM 1980 0.50 0.23 0.61 175 XMSexyCombo_01 1958 0.67 0.83 0.60 176 XMGappySubj_02 1954 0.44 0.05 0.60 177 HTML_TAG_BALANCE_BODY 1931 0.75 1.12 0.60 178 XM_B_COPY_HTML 1884 0.94 1.80 0.58 179 DKIM_ADSP_NXDOMAIN 1870 0.85 1.50 0.58 180 XMSubMetaSx_01 1859 0.48 0.27 0.57 181 HTML_IMAGE_ONLY_20 1842 0.64 0.80 0.57 182 XMSlimDrugH 1837 0.72 1.07 0.57 183 TM2_M_BODY_EMPTY 1793 0.43 0.14 0.55 184 T_Symld_Words_02 1792 0.59 0.67 0.55 185 XMMoneyMeta_00 1770 0.67 0.97 0.55 186 XMBody_95 1766 0.45 0.22 0.54 187 TR_XM_PHPDW 1761 0.74 1.21 0.54 188 XMPhish30 1747 0.81 1.46 0.54 189 MSGID_FROM_MTA_HEADER 1740 0.42 0.13 0.54 190 XMLngstWrd_01 1713 0.54 0.56 0.53 191 TR_XM_PHPForged 1707 0.74 1.25 0.53 192 TR_XM_FormFill2 1706 0.73 1.21 0.53 193 XMSubMetaI_00 1700 0.68 1.06 0.52 194 XM_B_DNDMA 1680 0.67 1.03 0.52 195 XMDateMe_00 1679 0.46 0.33 0.52 196 XM_H_PHPOS 1666 0.71 1.19 0.51 197 XMSexyCombo_04 1666 0.44 0.25 0.51 198 XMSexyCombo_02 1638 0.41 0.17 0.50 199 T_TVD_MIME_NO_HEADERS 1628 0.38 0.09 0.50 200 XMSubMetaSx_02 1598 0.35 0.02 0.49 ----------------------------------------------------------------------