Email: 470893 Autolearn: 0 AvgScore: 4.46 AvgScanTime: 1.43 sec Spam: 145138 Autolearn: 0 AvgScore: 14.65 AvgScanTime: 1.56 sec Ham: 325755 Autolearn: 0 AvgScore: -0.08 AvgScanTime: 1.37 sec Time Spent Running SA: 186.90 hours Time Spent Processing Spam: 63.07 hours Time Spent Processing Ham: 123.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137711 90.12 94.88 88.00 2 DKIM_SIGNED 131969 80.91 90.93 76.45 3 XM_DK_Pass 126507 78.74 87.16 74.99 4 DKIM_VALID 125157 77.65 86.23 73.83 5 XM_B_Unicode 122290 75.11 84.26 71.03 6 RELAYCOUNTRY_US 121091 82.35 83.43 81.86 7 DCC_CHECK 110032 51.28 75.81 40.34 8 XMListUnsubscribeExists 101933 55.10 70.23 48.37 9 XM_B_SpammyWords 99555 52.03 68.59 44.65 10 DKIM_VALID_AU 98432 61.83 67.82 59.17 11 XM_B_Unicode3 71381 43.49 49.18 40.96 12 LOC_TINY_FONT_1 69485 33.88 47.88 27.64 13 XM_DK_Undo_02 58958 15.64 40.62 4.51 14 BAYES_50 57750 54.38 39.79 60.88 15 RCVD_IN_MSPIKE_H2 57660 37.14 39.73 35.99 16 XM_B_SpammyWords2 54593 24.57 37.61 18.77 17 HTML_FONT_LOW_CONTRAST 54399 29.79 37.48 26.37 18 FVGT_m_MULTI_ODD 46901 26.57 32.31 24.01 19 T_KAM_HTML_FONT_INVALID 46006 25.27 31.70 22.40 20 BAYES_99 44079 11.48 30.37 3.06 21 DKIM_VALID_EF 42913 29.33 29.57 29.22 22 MIME_HTML_ONLY 42849 23.60 29.52 20.96 23 TR_XM_DKIM_Undo 41099 10.10 28.32 1.98 24 XMSubLong 35172 23.02 24.23 22.48 25 BAYES_999 34029 8.80 23.45 2.27 26 T_TM2_M_HEADER_IN_MSG 33153 27.73 22.84 29.90 27 DCC_CHECK_NEGATIVE 32540 48.15 22.42 59.61 28 TR_DCC_Bayes_99 31884 7.65 21.97 1.27 29 XM_Multi_Part_URI 31210 15.86 21.50 13.34 30 TR_XM_DK_Unsub 30058 14.99 20.71 12.44 31 XM_B_Unsub 24985 11.79 17.21 9.38 32 UNPARSEABLE_RELAY 24286 13.34 16.73 11.83 33 TR_XM_BayesUnsub 24011 9.80 16.54 6.80 34 RELAYCOUNTRY_META 22794 7.35 15.71 3.63 35 TR_MAX_INTL_RELAY 22006 8.32 15.16 5.27 36 XM_B_SpammyWords3 19855 7.28 13.68 4.43 37 LOTS_OF_MONEY 17738 7.94 12.22 6.03 38 TR_XM_SpammyRelay 16187 4.80 11.15 1.97 39 BOTNET_IPINHOSTNAME 15698 5.56 10.82 3.22 40 TR_XM_SpammyWords4 14987 5.93 10.33 3.97 41 TR_XM_SpammyWords2 14340 3.31 9.88 0.38 42 BOTNET 14297 4.13 9.85 1.58 43 XM_Evil_Numbers_Gen 13714 9.36 9.45 9.32 44 BAYES_80 13707 5.14 9.44 3.22 45 FSL_BULK_SIG 13332 8.01 9.19 7.49 46 RCVD_IN_BL_SPAMCOP_NET 12840 3.09 8.85 0.53 47 TR_XM_UnparsRelay 12187 3.58 8.40 1.44 48 BAYES_60 11961 7.06 8.24 6.53 49 XM_B_Phish_Phrases 11911 6.31 8.21 5.46 50 LotsOfNums_01 11106 8.11 7.65 8.32 51 XM_Body_Dirty_Words 10659 3.78 7.34 2.20 52 HTML_IMAGE_RATIO_02 10381 5.33 7.15 4.52 53 XM_B_PhoneNumber 9395 9.02 6.47 10.15 54 TR_XM_SPAMCOP 9177 2.17 6.32 0.31 55 MPART_ALT_DIFF 8828 5.36 6.08 5.03 56 XM_UncommonTLD01 8791 4.84 6.06 4.29 57 RELAYCOUNTRY_CA 8764 2.44 6.04 0.83 58 XMSubMetaSx_00 7989 3.89 5.50 3.17 59 UNTRUSTED_Relay 7886 2.70 5.43 1.48 60 BAYES_95 7778 3.07 5.36 2.05 61 XM_H_Long_From01 7642 5.43 5.27 5.51 62 HTML_IMAGE_RATIO_04 7414 4.44 5.11 4.15 63 XM_H_GMP 6924 5.62 4.77 6.00 64 XM_B_Investor 6838 2.72 4.71 1.83 65 DKIM_INVALID 6812 3.26 4.69 2.62 66 TR_XM_PhishingBody 6795 2.54 4.68 1.59 67 XMStrtUSub 6457 4.80 4.45 4.96 68 TR_XM_SpammyWords5 6121 2.29 4.22 1.43 69 HTML_IMAGE_RATIO_06 5906 3.47 4.07 3.20 70 XMSexyCombo_05 5906 2.05 4.07 1.15 71 MIME_HTML_ONLY_MULTI 5439 3.37 3.75 3.20 72 XM_B_SpammyTLD 5435 3.08 3.74 2.78 73 TooManyTo_001 5402 7.07 3.72 8.56 74 MIME_HTML_MOSTLY 5387 2.78 3.71 2.37 75 TM2_M_VERY_LONG_WORD 5364 2.02 3.70 1.28 76 T_XMDrugObfuBody_14 5009 2.42 3.45 1.96 77 RCVD_IN_MSPIKE_WL 4918 4.83 3.39 5.47 78 RCVD_IN_MSPIKE_H3 4918 4.83 3.39 5.47 79 HTML_IMAGE_RATIO_08 4917 2.80 3.39 2.54 80 MIME_QP_LONG_LINE 4797 4.50 3.31 5.04 81 T_XMDrugObfuBody_08 4691 2.14 3.23 1.65 82 RCVD_IN_VALIDITY_RPBL 4569 1.11 3.15 0.20 83 XMNumbers 4563 2.96 3.14 2.88 84 XM_OfRef6 4329 1.57 2.98 0.93 85 XM_SPF_SoftFail 4256 1.93 2.93 1.48 86 TM2_M_URI_OPT_OUT 4168 1.99 2.87 1.60 87 XM_CamelCaseFrm001 4124 2.35 2.84 2.13 88 XMDiploma_00 4063 2.08 2.80 1.76 89 XM_B_URI_Unicode 4062 2.19 2.80 1.92 90 XM_URI_RBL 4049 1.15 2.79 0.42 91 RELAYCOUNTRY_AU 3953 1.37 2.72 0.76 92 XM_UB50 3920 1.46 2.70 0.90 93 SH_BODYURI_REVERSE_CSS 3850 1.14 2.65 0.47 94 SUBJ_ALL_CAPS 3829 1.96 2.64 1.66 95 URIBL_CSS_A 3735 1.10 2.57 0.44 96 URIBL_CSS 3735 1.10 2.57 0.44 97 XM_B_Unsub2 3720 1.96 2.56 1.69 98 DIET_1 3520 1.07 2.43 0.47 99 XMBody_17 3488 1.04 2.40 0.43 100 MAILING_LIST_MULTI 3458 2.80 2.38 2.99 101 SpammyFromTLD_02 3327 1.02 2.29 0.45 102 HTML_MIME_NO_HTML_TAG 3182 2.56 2.19 2.72 103 T_TooManySym_01 3150 4.50 2.17 5.54 104 TR_XM_NoHeaderRelay 3089 0.82 2.13 0.24 105 RCVD_IN_VALIDITY_SAFE 3039 3.40 2.09 3.98 106 FROM_EXCESS_BASE64 2956 1.99 2.04 1.97 107 T_FILL_THIS_FORM_SHORT 2877 1.26 1.98 0.94 108 URI_HEX 2853 1.56 1.97 1.37 109 T_REMOTE_IMAGE 2839 3.21 1.96 3.77 110 XM_B_SpammyWords4 2837 1.10 1.95 0.71 111 ALL_TRUSTED 2815 11.20 1.94 15.33 112 BAYES_40 2713 4.44 1.87 5.58 113 T_XMHurry_00 2702 0.93 1.86 0.52 114 TR_XM_INV_DKIM 2696 0.69 1.86 0.17 115 XM_DK_Undo_01 2588 1.74 1.78 1.73 116 T_XMDrugObfuBody_00 2570 1.12 1.77 0.82 117 USER_IN_DEF_DKIM_WL 2567 9.80 1.77 13.38 118 RCVD_IN_ZEN_LASTEXTERNAL 2555 0.54 1.76 0.00 119 SHORTCIRCUIT 2555 0.54 1.76 0.00 120 SpammyFromTLD_01 2541 1.21 1.75 0.97 121 XMPhish30 2512 0.92 1.73 0.56 122 XMGenDplmaNmb 2492 1.13 1.72 0.88 123 XM_H_Long_From02 2479 1.14 1.71 0.88 124 XMStockSpam_06 2390 1.38 1.65 1.26 125 RCVD_IN_VALIDITY_CERTIFIED 2337 2.54 1.61 2.95 126 XMBrknScrpt_02 2323 0.98 1.60 0.70 127 RCVD_IN_PBL 2255 1.00 1.55 0.75 128 BAYES_20 2201 3.26 1.52 4.04 129 TR_LOTS_OF_MONEY3 2113 0.69 1.46 0.35 130 XM_SendGrid 2014 1.40 1.39 1.40 131 HTML_FONT_TINY_NORDNS 1963 0.47 1.35 0.07 132 KHOP_HELO_FCRDNS 1953 1.23 1.35 1.19 133 HK_RANDOM_REPLYTO 1836 0.47 1.27 0.12 134 XM_B_COPY_HTML 1831 0.78 1.26 0.56 135 LongTLD 1804 0.65 1.24 0.38 136 RCVD_IN_PSBL 1786 0.46 1.23 0.12 137 RCVD_IN_IADB_LISTED 1766 3.12 1.22 3.98 138 TR_Symld_Words 1764 1.57 1.22 1.73 139 TR_XM_PHPDW 1754 0.60 1.21 0.33 140 TR_XM_PHPForged 1752 0.60 1.21 0.33 141 DKIM_ADSP_CUSTOM_MED 1750 0.97 1.21 0.87 142 TR_XM_FormFill2 1742 0.61 1.20 0.34 143 XM_H_PHPOS 1713 0.59 1.18 0.32 144 URI_NOVOWEL 1708 1.60 1.18 1.79 145 XMSlimDrugH 1702 0.69 1.17 0.48 146 XM_B_DNDMA 1702 0.70 1.17 0.49 147 XMSubMetaI_00 1671 0.94 1.15 0.84 148 HTML_TAG_BALANCE_BODY 1661 0.73 1.14 0.54 149 XM_B_SEO 1647 0.51 1.13 0.23 150 BOTNET_NORDNS 1615 0.35 1.11 0.01 151 SHOPIFY_IMG_NOT_RCVD_SFY 1613 0.51 1.11 0.24 152 XM_HighProb1 1611 0.35 1.11 0.01 153 RCVD_IN_IADB_SPF 1593 2.73 1.10 3.45 154 MPART_ALT_DIFF_COUNT 1552 0.70 1.07 0.54 155 XMPhish14 1543 0.63 1.06 0.44 156 TR_XM_SEO4 1527 0.40 1.05 0.10 157 XMHTML_After_End 1523 0.52 1.05 0.29 158 RCVD_IN_IADB_DK 1521 2.37 1.05 2.95 159 RCVD_IN_IADB_SENDERID 1498 2.44 1.03 3.07 160 XM_B_Phish66 1484 0.52 1.02 0.30 161 URI_TRY_3LD 1483 0.68 1.02 0.52 162 TR_Mismatch_TLD_02 1435 0.35 0.99 0.07 163 NO_DNS_FOR_FROM 1399 0.49 0.96 0.28 164 XM_DIRTYINTL 1394 0.34 0.96 0.07 165 TM2_M_OBFU_COMMENT 1388 0.57 0.96 0.40 166 NML_ADSP_CUSTOM_MED 1387 0.71 0.96 0.60 167 HTTPS_HTTP_MISMATCH 1378 0.88 0.95 0.85 168 TR_XM_MaxWHORU 1378 0.44 0.95 0.21 169 TM2_M_A_HREF_HREF 1370 0.48 0.94 0.28 170 XMBody_78 1361 0.51 0.94 0.31 171 RDNS_DYNAMIC 1352 0.43 0.93 0.21 172 XM_H_Undi_Recip 1342 0.43 0.92 0.21 173 XMBdyGiftCard01 1339 0.64 0.92 0.51 174 RELAYCOUNTRY_FR 1331 0.49 0.92 0.31 175 FORGED_GMAIL_RCVD 1329 0.65 0.92 0.54 176 RELAYCOUNTRY_GB 1306 0.62 0.90 0.49 177 BAYES_00 1299 8.66 0.90 12.12 178 XM_UB99 1297 0.28 0.89 0.00 179 TR_XM_RelayPhish 1296 0.32 0.89 0.07 180 PDS_RDNS_DYNAMIC_FP 1278 0.34 0.88 0.10 181 T_MONEY_PERCENT 1255 0.39 0.86 0.18 182 TR_LOTS_OF_MONEY2 1255 0.39 0.86 0.18 183 T_STY_INVIS_DIRECT 1228 0.57 0.85 0.45 184 TR_MetaPhish_Combo_01 1223 0.81 0.84 0.80 185 XMMoneyMeta_00 1223 0.63 0.84 0.53 186 TR_XM_Base64_M1 1222 0.86 0.84 0.87 187 XM_ProductURIs 1208 0.53 0.83 0.40 188 XM_S_SpammyWords 1196 0.47 0.82 0.31 189 TR_XM_Spammywords 1196 0.47 0.82 0.31 190 TR_XM_DK_SendGrid 1194 0.83 0.82 0.84 191 XMNoVowels 1185 0.80 0.82 0.79 192 XMSexyCombo_01 1172 0.34 0.81 0.13 193 URIBL_BLACK 1163 0.28 0.80 0.05 194 MultiRelay_CC 1151 0.35 0.79 0.16 195 XM_GoogleGroups 1142 1.10 0.79 1.23 196 TVD_RCVD_IP 1127 0.68 0.78 0.64 197 RCVD_IN_SORBS_DUL 1126 0.27 0.78 0.05 198 TR_Caps_n_Bayes_99 1121 0.26 0.77 0.04 199 TR_XM_DK_Bayes 1115 5.73 0.77 7.95 200 TR_XM_FormFill 1106 0.25 0.76 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286676 90.12 94.88 88.00 2 RELAYCOUNTRY_US 266675 82.35 83.43 81.86 3 DKIM_SIGNED 249038 80.91 90.93 76.45 4 XM_DK_Pass 244269 78.74 87.16 74.99 5 DKIM_VALID 240498 77.65 86.23 73.83 6 XM_B_Unicode 231400 75.11 84.26 71.03 7 BAYES_50 198323 54.38 39.79 60.88 8 DCC_CHECK_NEGATIVE 194179 48.15 22.42 59.61 9 DKIM_VALID_AU 192743 61.83 67.82 59.17 10 XMListUnsubscribeExists 157552 55.10 70.23 48.37 11 XM_B_SpammyWords 145452 52.03 68.59 44.65 12 XM_B_Unicode3 133424 43.49 49.18 40.96 13 DCC_CHECK 131424 51.28 75.81 40.34 14 RCVD_IN_MSPIKE_H2 117227 37.14 39.73 35.99 15 T_TM2_M_HEADER_IN_MSG 97417 27.73 22.84 29.90 16 DKIM_VALID_EF 95192 29.33 29.57 29.22 17 LOC_TINY_FONT_1 90041 33.88 47.88 27.64 18 HTML_FONT_LOW_CONTRAST 85895 29.79 37.48 26.37 19 FVGT_m_MULTI_ODD 78215 26.57 32.31 24.01 20 XMSubLong 73242 23.02 24.23 22.48 21 T_KAM_HTML_FONT_INVALID 72979 25.27 31.70 22.40 22 MIME_HTML_ONLY 68272 23.60 29.52 20.96 23 XM_B_SpammyWords2 61128 24.57 37.61 18.77 24 ALL_TRUSTED 49942 11.20 1.94 15.33 25 USER_IN_DEF_DKIM_WL 43591 9.80 1.77 13.38 26 XM_Multi_Part_URI 43458 15.86 21.50 13.34 27 TR_XM_DK_Unsub 40540 14.99 20.71 12.44 28 BAYES_00 39479 8.66 0.90 12.12 29 UNPARSEABLE_RELAY 38552 13.34 16.73 11.83 30 XM_B_PhoneNumber 33076 9.02 6.47 10.15 31 XM_B_Unsub 30556 11.79 17.21 9.38 32 XM_Evil_Numbers_Gen 30370 9.36 9.45 9.32 33 TooManyTo_001 27895 7.07 3.72 8.56 34 LotsOfNums_01 27101 8.11 7.65 8.32 35 TR_XM_DK_Bayes 25885 5.73 0.77 7.95 36 TR_XM_DK_Bayes1 25372 5.62 0.76 7.79 37 FSL_BULK_SIG 24396 8.01 9.19 7.49 38 XM_DKIMWhitelistDomains 23047 4.92 0.07 7.07 39 TR_XM_BayesUnsub 22154 9.80 16.54 6.80 40 IN_ZIMBRA_NJ_WHITELIST 21989 4.70 0.09 6.75 41 TR_XM_DK_Bayes2 21509 4.74 0.56 6.60 42 BAYES_60 21282 7.06 8.24 6.53 43 LOTS_OF_MONEY 19630 7.94 12.22 6.03 44 XM_H_GMP 19546 5.62 4.77 6.00 45 BAYES_40 18179 4.44 1.87 5.58 46 T_TooManySym_01 18053 4.50 2.17 5.54 47 XM_H_Long_From01 17937 5.43 5.27 5.51 48 RCVD_IN_MSPIKE_WL 17831 4.83 3.39 5.47 49 RCVD_IN_MSPIKE_H3 17831 4.83 3.39 5.47 50 XM_B_Phish_Phrases 17791 6.31 8.21 5.46 51 TR_MAX_INTL_RELAY 17157 8.32 15.16 5.27 52 MIME_QP_LONG_LINE 16412 4.50 3.31 5.04 53 MPART_ALT_DIFF 16391 5.36 6.08 5.03 54 XMStrtUSub 16157 4.80 4.45 4.96 55 XM_PDF 16040 3.63 0.72 4.92 56 HTML_IMAGE_RATIO_02 14739 5.33 7.15 4.52 57 XM_DK_Undo_02 14681 15.64 40.62 4.51 58 XM_B_SpammyWords3 14440 7.28 13.68 4.43 59 XM_UncommonTLD01 13977 4.84 6.06 4.29 60 HTML_IMAGE_RATIO_04 13516 4.44 5.11 4.15 61 BAYES_20 13169 3.26 1.52 4.04 62 RCVD_IN_VALIDITY_SAFE 12960 3.40 2.09 3.98 63 RCVD_IN_IADB_LISTED 12949 3.12 1.22 3.98 64 TR_XM_SpammyWords4 12936 5.93 10.33 3.97 65 T_REMOTE_IMAGE 12285 3.21 1.96 3.77 66 RELAYCOUNTRY_META 11838 7.35 15.71 3.63 67 RCVD_IN_IADB_SPF 11247 2.73 1.10 3.45 68 TooManyTo_002 10806 2.44 0.48 3.32 69 BAYES_80 10482 5.14 9.44 3.22 70 BOTNET_IPINHOSTNAME 10481 5.56 10.82 3.22 71 MIME_HTML_ONLY_MULTI 10433 3.37 3.75 3.20 72 HTML_IMAGE_RATIO_06 10426 3.47 4.07 3.20 73 ANY_BOUNCE_MESSAGE 10358 2.42 0.72 3.18 74 BOUNCE_MESSAGE 10358 2.42 0.72 3.18 75 XMSubMetaSx_00 10331 3.89 5.50 3.17 76 RCVD_IN_IADB_SENDERID 9985 2.44 1.03 3.07 77 BAYES_99 9965 11.48 30.37 3.06 78 T_TooManySym_02 9773 2.29 0.71 3.00 79 MAILING_LIST_MULTI 9725 2.80 2.38 2.99 80 RCVD_IN_IADB_DK 9619 2.37 1.05 2.95 81 RCVD_IN_VALIDITY_CERTIFIED 9611 2.54 1.61 2.95 82 XMNumbers 9369 2.96 3.14 2.88 83 XM_B_SpammyTLD 9046 3.08 3.74 2.78 84 RCVD_IN_IADB_VOUCHED 9005 2.08 0.54 2.76 85 HTML_MIME_NO_HTML_TAG 8876 2.56 2.19 2.72 86 DKIM_INVALID 8540 3.26 4.69 2.62 87 HTML_IMAGE_RATIO_08 8278 2.80 3.39 2.54 88 BAYES_05 8205 1.97 0.75 2.52 89 MIME_HTML_MOSTLY 7726 2.78 3.71 2.37 90 BAYES_999 7387 8.80 23.45 2.27 91 INVALID_MSGID 7207 1.60 0.24 2.21 92 XM_Body_Dirty_Words 7153 3.78 7.34 2.20 93 XM_CamelCaseFrm001 6948 2.35 2.84 2.13 94 BAYES_95 6668 3.07 5.36 2.05 95 RCVD_IN_IADB_OPTIN 6441 1.48 0.35 1.98 96 TR_XM_DKIM_Undo 6438 10.10 28.32 1.98 97 TR_XM_SpammyRelay 6429 4.80 11.15 1.97 98 FROM_EXCESS_BASE64 6419 1.99 2.04 1.97 99 T_XMDrugObfuBody_14 6397 2.42 3.45 1.96 100 TO_MALFORMED 6267 1.34 0.02 1.92 101 XM_B_URI_Unicode 6253 2.19 2.80 1.92 102 XM_B_Investor 5973 2.72 4.71 1.83 103 TooManyTo_003 5925 1.38 0.41 1.82 104 URI_NOVOWEL 5841 1.60 1.18 1.79 105 XMDiploma_00 5727 2.08 2.80 1.76 106 TR_Symld_Words 5633 1.57 1.22 1.73 107 XM_DK_Undo_01 5620 1.74 1.78 1.73 108 XM_B_Unsub2 5506 1.96 2.56 1.69 109 SUBJ_ALL_CAPS 5405 1.96 2.64 1.66 110 T_XMDrugObfuBody_08 5383 2.14 3.23 1.65 111 TM2_M_URI_OPT_OUT 5201 1.99 2.87 1.60 112 TR_XM_PhishingBody 5180 2.54 4.68 1.59 113 BOTNET 5136 4.13 9.85 1.58 114 IN_HORDE_ADDRESS_BOOK 4889 1.07 0.09 1.50 115 XM_SPF_SoftFail 4833 1.93 2.93 1.48 116 UNTRUSTED_Relay 4816 2.70 5.43 1.48 117 TR_XM_UnparsRelay 4691 3.58 8.40 1.44 118 TR_XM_SpammyWords5 4661 2.29 4.22 1.43 119 XM_SendGrid 4573 1.40 1.39 1.40 120 URI_HEX 4472 1.56 1.97 1.37 121 HELO_NODOT 4463 1.02 0.24 1.37 122 HELO_NO_DOMAIN 4456 1.02 0.24 1.37 123 TooManyTo_004 4351 1.03 0.33 1.34 124 TM2_M_VERY_LONG_WORD 4156 2.02 3.70 1.28 125 TR_DCC_Bayes_99 4146 7.65 21.97 1.27 126 XMStockSpam_06 4114 1.38 1.65 1.26 127 XM_GoogleGroups 4017 1.10 0.79 1.23 128 T_TooManySym_03 3975 0.90 0.17 1.22 129 KHOP_HELO_FCRDNS 3862 1.23 1.35 1.19 130 XMCapTrack 3835 0.96 0.48 1.18 131 XMSexyCombo_05 3754 2.05 4.07 1.15 132 TooManyTo_005 3669 0.87 0.30 1.13 133 XMGappySubj_01 3441 0.76 0.11 1.06 134 XMBody_95 3422 0.77 0.15 1.05 135 TVD_SPACE_RATIO 3335 0.77 0.18 1.02 136 XM_H_Trusted_IP 3283 0.70 0.00 1.01 137 SpammyFromTLD_01 3171 1.21 1.75 0.97 138 T_FILL_THIS_FORM_SHORT 3060 1.26 1.98 0.94 139 XM_OfRef6 3045 1.57 2.98 0.93 140 XM_UB50 2948 1.46 2.70 0.90 141 XM_H_Long_From02 2871 1.14 1.71 0.88 142 XMGenDplmaNmb 2851 1.13 1.72 0.88 143 XM_ShortIntro_01 2838 0.77 0.53 0.87 144 TR_XM_Base64_M1 2837 0.86 0.84 0.87 145 DKIM_ADSP_CUSTOM_MED 2823 0.97 1.21 0.87 146 FROM_GOV_DKIM_AU 2805 0.64 0.15 0.86 147 HTTPS_HTTP_MISMATCH 2784 0.88 0.95 0.85 148 XMSubMetaI_00 2741 0.94 1.15 0.84 149 TR_XM_DK_SendGrid 2721 0.83 0.82 0.84 150 RELAYCOUNTRY_CA 2705 2.44 6.04 0.83 151 T_XMDrugObfuBody_00 2681 1.12 1.77 0.82 152 XM_B_FormFill 2620 0.56 0.02 0.80 153 TR_MetaPhish_Combo_01 2599 0.81 0.84 0.80 154 XMNoVowels 2582 0.80 0.82 0.79 155 RELAYCOUNTRY_AU 2479 1.37 2.72 0.76 156 XMSubNoVowel 2470 0.65 0.40 0.76 157 RCVD_IN_PBL 2437 1.00 1.55 0.75 158 T_OBFU_PDF_ATTACH 2433 0.56 0.12 0.75 159 TO_NO_BRKTS_HTML_ONLY 2396 0.63 0.40 0.74 160 HTML_IMAGE_ONLY_32 2329 0.55 0.19 0.71 161 XM_B_SpammyWords4 2329 1.10 1.95 0.71 162 XMBrknScrpt_02 2274 0.98 1.60 0.70 163 XM_H_PHPMailer 2226 0.69 0.72 0.68 164 TVD_RCVD_IP 2092 0.68 0.78 0.64 165 NML_ADSP_CUSTOM_MED 1962 0.71 0.96 0.60 166 T_Symld_Words_02 1861 0.61 0.71 0.57 167 XMPhish30 1836 0.92 1.73 0.56 168 XM_B_COPY_HTML 1828 0.78 1.26 0.56 169 MPART_ALT_DIFF_COUNT 1763 0.70 1.07 0.54 170 HTML_TAG_BALANCE_BODY 1753 0.73 1.14 0.54 171 FORGED_GMAIL_RCVD 1747 0.65 0.92 0.54 172 RCVD_IN_BL_SPAMCOP_NET 1730 3.09 8.85 0.53 173 XMMoneyMeta_00 1730 0.63 0.84 0.53 174 URI_TRY_3LD 1704 0.68 1.02 0.52 175 XMLngstWrd_00 1690 0.52 0.52 0.52 176 T_XMHurry_00 1681 0.93 1.86 0.52 177 XMBdyGiftCard01 1667 0.64 0.92 0.51 178 HTML_IMAGE_ONLY_20 1629 0.53 0.61 0.50 179 RELAYCOUNTRY_GB 1607 0.62 0.90 0.49 180 XM_B_DNDMA 1593 0.70 1.17 0.49 181 XMSlimDrugH 1569 0.69 1.17 0.48 182 SH_BODYURI_REVERSE_CSS 1526 1.14 2.65 0.47 183 DIET_1 1519 1.07 2.43 0.47 184 SpammyFromTLD_02 1477 1.02 2.29 0.45 185 XMDateMe_00 1473 0.42 0.36 0.45 186 T_STY_INVIS_DIRECT 1471 0.57 0.85 0.45 187 MSGID_FROM_MTA_HEADER 1466 0.34 0.10 0.45 188 XMGappySubj_02 1432 0.32 0.04 0.44 189 URIBL_CSS 1427 1.10 2.57 0.44 190 URIBL_CSS_A 1427 1.10 2.57 0.44 191 XMPhish14 1422 0.63 1.06 0.44 192 XMBody_17 1412 1.04 2.40 0.43 193 TRACKER_ID 1389 0.32 0.08 0.43 194 XM_URI_RBL 1363 1.15 2.79 0.42 195 HELO_MISC_IP 1353 0.31 0.09 0.42 196 XMBSHREFv2 1340 0.41 0.40 0.41 197 SHORT_HELO_AND_INLINE_IMAGE 1338 0.29 0.02 0.41 198 XMSubMetaSxObfu_03 1337 0.52 0.76 0.41 199 XMLngstWrd_01 1327 0.41 0.40 0.41 200 HTML_IMAGE_ONLY_28 1322 0.36 0.26 0.41 ----------------------------------------------------------------------