Email: 519931 Autolearn: 0 AvgScore: 4.77 AvgScanTime: 1.42 sec Spam: 150030 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.49 sec Ham: 369901 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.39 sec Time Spent Running SA: 204.74 hours Time Spent Processing Spam: 62.19 hours Time Spent Processing Ham: 142.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143232 91.11 95.47 89.34 2 DKIM_SIGNED 135696 72.00 90.45 64.51 3 XM_DK_Pass 126504 69.35 84.32 63.28 4 RELAYCOUNTRY_US 126238 82.77 84.14 82.21 5 DKIM_VALID 125273 68.51 83.50 62.43 6 XM_B_Unicode 124028 77.41 82.67 75.27 7 DCC_CHECK 110901 45.04 73.92 33.32 8 XMListUnsubscribeExists 102567 49.71 68.36 42.15 9 XM_B_SpammyWords 100466 57.54 66.96 53.72 10 DKIM_VALID_AU 100312 55.11 66.86 50.34 11 XM_B_Unicode3 73582 39.06 49.04 35.01 12 LOC_TINY_FONT_1 72098 39.67 48.06 36.26 13 RCVD_IN_MSPIKE_H2 61083 32.76 40.71 29.53 14 BAYES_50 60795 57.93 40.52 64.99 15 XM_DK_Undo_02 58766 14.00 39.17 3.80 16 XM_B_SpammyWords2 57450 23.94 38.29 18.12 17 HTML_FONT_LOW_CONTRAST 56805 37.07 37.86 36.75 18 FVGT_m_MULTI_ODD 48829 23.96 32.55 20.47 19 BAYES_99 46785 10.81 31.18 2.54 20 T_KAM_HTML_FONT_INVALID 46423 22.77 30.94 19.45 21 MIME_HTML_ONLY 45404 21.00 30.26 17.24 22 DKIM_VALID_EF 42196 25.53 28.13 24.48 23 TR_XM_DKIM_Undo 41574 9.16 27.71 1.63 24 XMSubLong 37417 21.42 24.94 20.00 25 DCC_CHECK_NEGATIVE 36971 54.52 24.64 66.63 26 BAYES_999 36585 8.40 24.39 1.91 27 XM_Multi_Part_URI 31463 14.26 20.97 11.54 28 T_TM2_M_HEADER_IN_MSG 31165 34.82 20.77 40.52 29 TR_DCC_Bayes_99 30985 6.67 20.65 1.00 30 TR_XM_DK_Unsub 30376 13.39 20.25 10.61 31 UNPARSEABLE_RELAY 29218 12.72 19.47 9.98 32 XM_B_Unsub 25423 10.39 16.95 7.73 33 TR_XM_BayesUnsub 24405 8.74 16.27 5.69 34 RELAYCOUNTRY_META 22865 6.67 15.24 3.20 35 TR_MAX_INTL_RELAY 21600 7.51 14.40 4.72 36 XM_B_SpammyWords3 20555 6.58 13.70 3.69 37 LOTS_OF_MONEY 16719 7.97 11.14 6.68 38 BOTNET_IPINHOSTNAME 16562 5.02 11.04 2.58 39 TR_XM_UnparsRelay 16085 4.00 10.72 1.28 40 TR_XM_SpammyRelay 15887 4.23 10.59 1.65 41 TR_XM_SpammyWords2 15329 3.15 10.22 0.29 42 TR_XM_SpammyWords4 14925 6.20 9.95 4.68 43 XM_Evil_Numbers_Gen 14858 17.29 9.90 20.29 44 FSL_BULK_SIG 14279 6.78 9.52 5.67 45 RCVD_IN_BL_SPAMCOP_NET 13989 3.10 9.32 0.57 46 BOTNET 13524 3.40 9.01 1.12 47 BAYES_80 13441 4.63 8.96 2.87 48 BAYES_60 12597 6.38 8.40 5.56 49 LotsOfNums_01 11977 14.41 7.98 17.02 50 XM_B_Phish_Phrases 11177 5.33 7.45 4.47 51 TR_XM_SPAMCOP 11177 2.37 7.45 0.32 52 HTML_IMAGE_RATIO_02 11054 4.97 7.37 3.99 53 DKIM_INVALID 10423 3.49 6.95 2.09 54 XM_Body_Dirty_Words 10352 3.52 6.90 2.15 55 XM_B_PhoneNumber 9413 8.15 6.27 8.92 56 XM_UncommonTLD01 9010 4.39 6.01 3.74 57 MPART_ALT_DIFF 8940 4.31 5.96 3.64 58 XMSubMetaSx_00 8781 3.86 5.85 3.05 59 RELAYCOUNTRY_CA 8430 2.20 5.62 0.81 60 XM_H_Long_From01 8331 5.16 5.55 5.00 61 UNTRUSTED_Relay 8133 2.52 5.42 1.34 62 BAYES_95 7584 2.77 5.05 1.84 63 HTML_IMAGE_RATIO_04 6996 3.68 4.66 3.28 64 XM_H_GMP 6928 4.70 4.62 4.73 65 XM_B_Investor 6811 2.41 4.54 1.54 66 HTML_IMAGE_RATIO_06 6452 12.66 4.30 16.05 67 TR_XM_PhishingBody 6284 2.36 4.19 1.61 68 T_XMDrugObfuBody_14 6211 2.34 4.14 1.61 69 XMStrtUSub 6081 4.07 4.05 4.08 70 TR_XM_INV_DKIM 5980 1.25 3.99 0.14 71 MIME_HTML_MOSTLY 5567 2.43 3.71 1.91 72 XMSexyCombo_05 5467 1.75 3.64 0.98 73 XM_B_SpammyTLD 5451 2.59 3.63 2.17 74 TR_XM_SpammyWords5 5393 1.89 3.59 1.20 75 TooManyTo_001 5380 6.36 3.59 7.49 76 TM2_M_VERY_LONG_WORD 5356 11.43 3.57 14.62 77 RCVD_IN_MSPIKE_H3 5246 4.45 3.50 4.84 78 RCVD_IN_MSPIKE_WL 5246 4.45 3.50 4.84 79 TM2_M_URI_OPT_OUT 5153 2.21 3.43 1.71 80 MIME_HTML_ONLY_MULTI 4911 2.46 3.27 2.12 81 XMNumbers 4810 2.74 3.21 2.55 82 XM_CamelCaseFrm001 4526 2.31 3.02 2.02 83 MIME_QP_LONG_LINE 4521 4.00 3.01 4.40 84 HTML_IMAGE_ONLY_20 4519 1.19 3.01 0.44 85 HTML_IMAGE_RATIO_08 4462 2.38 2.97 2.14 86 XM_SPF_SoftFail 4382 1.70 2.92 1.20 87 XM_B_URI_Unicode 4370 2.17 2.91 1.87 88 XM_URI_RBL 4278 1.04 2.85 0.30 89 RCVD_IN_VALIDITY_SAFE 4257 3.43 2.84 3.67 90 XM_OfRef6 4246 1.39 2.83 0.81 91 RCVD_IN_VALIDITY_RPBL 4208 0.89 2.80 0.12 92 XMDiploma_00 4078 1.80 2.72 1.43 93 XM_B_Unsub2 4013 1.73 2.67 1.35 94 XM_UB50 3974 1.37 2.65 0.86 95 T_XMDrugObfuBody_08 3870 1.78 2.58 1.46 96 T_TooManySym_01 3787 4.46 2.52 5.24 97 RELAYCOUNTRY_AU 3676 1.03 2.45 0.46 98 RCVD_IN_VALIDITY_CERTIFIED 3618 2.80 2.41 2.95 99 FROM_EXCESS_BASE64 3403 1.81 2.27 1.62 100 SH_BODYURI_REVERSE_CSS 3396 0.92 2.26 0.38 101 T_XMHurry_00 3378 0.98 2.25 0.47 102 T_REMOTE_IMAGE 3358 2.81 2.24 3.05 103 URIBL_CSS_A 3333 0.90 2.22 0.36 104 URIBL_CSS 3333 0.90 2.22 0.36 105 USER_IN_DEF_DKIM_WL 3266 8.88 2.18 11.60 106 DIET_1 3218 0.95 2.14 0.47 107 TR_XM_NoHeaderRelay 3206 0.75 2.14 0.18 108 MAILING_LIST_MULTI 3107 2.40 2.07 2.54 109 T_FILL_THIS_FORM_SHORT 3065 1.13 2.04 0.76 110 ALL_TRUSTED 3037 11.37 2.02 15.16 111 SUBJ_ALL_CAPS 2995 1.53 2.00 1.34 112 SpammyFromTLD_01 2991 1.24 1.99 0.93 113 URI_HEX 2871 1.42 1.91 1.22 114 XMStockSpam_06 2721 1.01 1.81 0.68 115 BAYES_40 2628 5.42 1.75 6.91 116 XMBody_17 2627 0.77 1.75 0.37 117 XM_B_SpammyWords4 2603 0.95 1.73 0.63 118 XM_DK_Undo_01 2561 1.58 1.71 1.53 119 T_XMDrugObfuBody_00 2530 1.08 1.69 0.83 120 HTML_MIME_NO_HTML_TAG 2500 2.15 1.67 2.35 121 XM_H_Long_From02 2429 0.98 1.62 0.73 122 XMPhish30 2369 0.81 1.58 0.50 123 SpammyFromTLD_02 2232 0.61 1.49 0.26 124 SHORTCIRCUIT 2148 0.41 1.43 0.00 125 RCVD_IN_ZEN_LASTEXTERNAL 2148 0.41 1.43 0.00 126 KHOP_HELO_FCRDNS 2141 5.97 1.43 7.81 127 XMBrknScrpt_02 2072 0.87 1.38 0.66 128 RCVD_IN_PSBL 2065 0.51 1.38 0.16 129 XMGenDplmaNmb 2051 0.99 1.37 0.83 130 BAYES_20 2048 3.04 1.37 3.72 131 XM_SendGrid 2034 1.17 1.36 1.10 132 MPART_ALT_DIFF_COUNT 2003 0.82 1.34 0.62 133 TR_Symld_Words 1981 1.36 1.32 1.38 134 URI_TRY_3LD 1950 0.77 1.30 0.55 135 XM_B_COPY_HTML 1940 0.85 1.29 0.67 136 RCVD_IN_PBL 1881 0.82 1.25 0.64 137 THIS_AD 1859 0.64 1.24 0.40 138 XMMoneyMeta_00 1796 0.74 1.20 0.56 139 XM_B_SEO 1795 0.49 1.20 0.20 140 DKIM_ADSP_CUSTOM_MED 1714 0.91 1.14 0.81 141 XM_HighProb1 1697 0.33 1.13 0.01 142 XMBdyGiftCard01 1672 0.70 1.11 0.53 143 TR_MetaPhish_Combo_01 1646 0.81 1.10 0.70 144 HTML_FONT_TINY_NORDNS 1635 0.38 1.09 0.09 145 TR_XM_SEO4 1627 0.38 1.08 0.09 146 XM_B_DNDMA 1591 0.73 1.06 0.59 147 HTTPS_HTTP_MISMATCH 1587 0.77 1.06 0.66 148 TR_LOTS_OF_MONEY3 1584 0.48 1.06 0.24 149 SHOPIFY_IMG_NOT_RCVD_SFY 1584 0.44 1.06 0.20 150 URI_NOVOWEL 1565 1.53 1.04 1.72 151 BOTNET_NORDNS 1545 0.31 1.03 0.02 152 XM_B_Phish66 1539 0.52 1.03 0.31 153 XMSubMetaI_00 1481 0.60 0.99 0.44 154 HTML_TAG_BALANCE_BODY 1465 0.66 0.98 0.53 155 NML_ADSP_CUSTOM_MED 1412 0.67 0.94 0.55 156 ANY_BOUNCE_MESSAGE 1405 11.69 0.94 16.05 157 LongTLD 1402 0.51 0.93 0.34 158 BOUNCE_MESSAGE 1400 11.69 0.93 16.05 159 RELAYCOUNTRY_GB 1385 0.60 0.92 0.47 160 XMBody_78 1380 0.43 0.92 0.23 161 MultiRelay_CC 1378 0.38 0.92 0.16 162 TM2_M_OBFU_COMMENT 1371 0.48 0.91 0.30 163 XM_UB99 1360 0.26 0.91 0.00 164 T_STY_INVIS_DIRECT 1356 0.54 0.90 0.39 165 XMNoVowels 1352 0.81 0.90 0.78 166 RELAYCOUNTRY_RU 1346 0.27 0.90 0.01 167 XM_DIRTYINTL 1344 0.31 0.90 0.07 168 HK_RANDOM_REPLYTO 1342 0.34 0.89 0.12 169 TR_XM_DK_SendGrid 1340 0.79 0.89 0.75 170 RCVD_IN_IADB_LISTED 1321 2.43 0.88 3.06 171 TR_Mismatch_TLD_02 1320 0.30 0.88 0.06 172 TR_XM_RelayPhish 1319 0.30 0.88 0.07 173 T_TooManySym_02 1319 2.18 0.88 2.71 174 FORGED_GMAIL_RCVD 1316 0.65 0.88 0.56 175 XMReplyNow 1314 0.39 0.88 0.19 176 NO_DNS_FOR_FROM 1304 0.43 0.87 0.25 177 XM_ProductURIs 1295 0.51 0.86 0.37 178 XMPhish14 1288 0.61 0.86 0.51 179 XM_PDF 1279 3.07 0.85 3.96 180 TR_XM_PHPDW 1277 0.46 0.85 0.30 181 TR_XM_PHPForged 1276 0.46 0.85 0.30 182 TR_XM_MaxWHORU 1270 0.38 0.85 0.20 183 TR_XM_FormFill2 1268 0.45 0.85 0.30 184 XMSlimDrugH 1265 0.60 0.84 0.50 185 T_MONEY_PERCENT 1257 0.47 0.84 0.32 186 TR_LOTS_OF_MONEY2 1257 0.47 0.84 0.32 187 XM_H_PHPOS 1227 0.44 0.82 0.29 188 RCVD_IN_IADB_SPF 1226 2.13 0.82 2.66 189 RCVD_IN_IADB_DK 1206 1.87 0.80 2.30 190 RCVD_IN_IADB_SENDERID 1196 1.90 0.80 2.35 191 TM2_M_A_HREF_HREF 1187 0.39 0.79 0.22 192 TR_XM_InvalidRelay 1186 0.23 0.79 0.01 193 TR_XM_Base64_M1 1175 0.72 0.78 0.70 194 RDNS_DYNAMIC 1166 0.38 0.78 0.23 195 XM_H_Undi_Recip 1166 0.33 0.78 0.14 196 TR_XM_Spammywords 1158 0.57 0.77 0.49 197 XM_S_SpammyWords 1158 0.57 0.77 0.49 198 XMHTML_After_End 1157 0.38 0.77 0.22 199 RELAYCOUNTRY_FR 1148 0.38 0.77 0.22 200 TR_XM_FormFill 1135 0.22 0.76 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 330481 91.11 95.47 89.34 2 RELAYCOUNTRY_US 304109 82.77 84.14 82.21 3 XM_B_Unicode 278433 77.41 82.67 75.27 4 DCC_CHECK_NEGATIVE 246476 54.52 24.64 66.63 5 BAYES_50 240387 57.93 40.52 64.99 6 DKIM_SIGNED 238636 72.00 90.45 64.51 7 XM_DK_Pass 234057 69.35 84.32 63.28 8 DKIM_VALID 230913 68.51 83.50 62.43 9 XM_B_SpammyWords 198717 57.54 66.96 53.72 10 DKIM_VALID_AU 186212 55.11 66.86 50.34 11 XMListUnsubscribeExists 155896 49.71 68.36 42.15 12 T_TM2_M_HEADER_IN_MSG 149874 34.82 20.77 40.52 13 HTML_FONT_LOW_CONTRAST 135937 37.07 37.86 36.75 14 LOC_TINY_FONT_1 134136 39.67 48.06 36.26 15 XM_B_Unicode3 129508 39.06 49.04 35.01 16 DCC_CHECK 123259 45.04 73.92 33.32 17 RCVD_IN_MSPIKE_H2 109244 32.76 40.71 29.53 18 DKIM_VALID_EF 90559 25.53 28.13 24.48 19 FVGT_m_MULTI_ODD 75735 23.96 32.55 20.47 20 XM_Evil_Numbers_Gen 75064 17.29 9.90 20.29 21 XMSubLong 73963 21.42 24.94 20.00 22 T_KAM_HTML_FONT_INVALID 71947 22.77 30.94 19.45 23 XM_B_SpammyWords2 67024 23.94 38.29 18.12 24 MIME_HTML_ONLY 63788 21.00 30.26 17.24 25 LotsOfNums_01 62968 14.41 7.98 17.02 26 ANY_BOUNCE_MESSAGE 59387 11.69 0.94 16.05 27 BOUNCE_MESSAGE 59381 11.69 0.93 16.05 28 HTML_IMAGE_RATIO_06 59355 12.66 4.30 16.05 29 ALL_TRUSTED 56094 11.37 2.02 15.16 30 TM2_M_VERY_LONG_WORD 54092 11.43 3.57 14.62 31 MAY_BE_FORGED 50246 9.75 0.29 13.58 32 USER_IN_DEF_DKIM_WL 42898 8.88 2.18 11.60 33 XM_Multi_Part_URI 42696 14.26 20.97 11.54 34 TR_XM_DK_Unsub 39264 13.39 20.25 10.61 35 UNPARSEABLE_RELAY 36932 12.72 19.47 9.98 36 BAYES_00 35494 7.02 0.68 9.60 37 XM_B_PhoneNumber 32982 8.15 6.27 8.92 38 KHOP_HELO_FCRDNS 28885 5.97 1.43 7.81 39 XM_B_Unsub 28610 10.39 16.95 7.73 40 TooManyTo_001 27701 6.36 3.59 7.49 41 BAYES_40 25565 5.42 1.75 6.91 42 LOTS_OF_MONEY 24696 7.97 11.14 6.68 43 TR_XM_DK_Bayes 23056 4.59 0.52 6.23 44 TR_XM_DK_Bayes1 22606 4.50 0.51 6.11 45 IN_ZIMBRA_NJ_WHITELIST 21037 4.08 0.12 5.69 46 TR_XM_BayesUnsub 21032 8.74 16.27 5.69 47 FSL_BULK_SIG 20980 6.78 9.52 5.67 48 XM_DKIMWhitelistDomains 20615 3.98 0.05 5.57 49 BAYES_60 20582 6.38 8.40 5.56 50 T_TooManySym_01 19397 4.46 2.52 5.24 51 TR_XM_DK_Bayes2 19374 3.84 0.38 5.24 52 XM_H_Long_From01 18487 5.16 5.55 5.00 53 RCVD_IN_MSPIKE_WL 17897 4.45 3.50 4.84 54 RCVD_IN_MSPIKE_H3 17897 4.45 3.50 4.84 55 XM_H_GMP 17504 4.70 4.62 4.73 56 TR_MAX_INTL_RELAY 17454 7.51 14.40 4.72 57 TR_XM_SpammyWords4 17302 6.20 9.95 4.68 58 XM_B_Phish_Phrases 16553 5.33 7.45 4.47 59 MIME_QP_LONG_LINE 16275 4.00 3.01 4.40 60 XMStrtUSub 15105 4.07 4.05 4.08 61 HTML_IMAGE_RATIO_02 14775 4.97 7.37 3.99 62 XM_PDF 14666 3.07 0.85 3.96 63 XM_DK_Undo_02 14050 14.00 39.17 3.80 64 XM_UncommonTLD01 13819 4.39 6.01 3.74 65 BAYES_20 13770 3.04 1.37 3.72 66 XM_B_SpammyWords3 13657 6.58 13.70 3.69 67 RCVD_IN_VALIDITY_SAFE 13587 3.43 2.84 3.67 68 MPART_ALT_DIFF 13468 4.31 5.96 3.64 69 HTML_IMAGE_RATIO_04 12115 3.68 4.66 3.28 70 RELAYCOUNTRY_META 11840 6.67 15.24 3.20 71 RCVD_IN_IADB_LISTED 11305 2.43 0.88 3.06 72 XMSubMetaSx_00 11300 3.86 5.85 3.05 73 T_REMOTE_IMAGE 11269 2.81 2.24 3.05 74 RCVD_IN_VALIDITY_CERTIFIED 10929 2.80 2.41 2.95 75 BAYES_80 10622 4.63 8.96 2.87 76 TooManyTo_002 10410 2.19 0.64 2.81 77 T_TooManySym_02 10015 2.18 0.88 2.71 78 RCVD_IN_IADB_SPF 9856 2.13 0.82 2.66 79 BOTNET_IPINHOSTNAME 9533 5.02 11.04 2.58 80 XMNumbers 9421 2.74 3.21 2.55 81 BAYES_99 9397 10.81 31.18 2.54 82 MAILING_LIST_MULTI 9381 2.40 2.07 2.54 83 HTML_MIME_NO_HTML_TAG 8699 2.15 1.67 2.35 84 RCVD_IN_IADB_SENDERID 8684 1.90 0.80 2.35 85 RCVD_IN_IADB_DK 8499 1.87 0.80 2.30 86 XM_B_SpammyTLD 8009 2.59 3.63 2.17 87 XM_Body_Dirty_Words 7948 3.52 6.90 2.15 88 HTML_IMAGE_RATIO_08 7903 2.38 2.97 2.14 89 MIME_HTML_ONLY_MULTI 7856 2.46 3.27 2.12 90 DKIM_INVALID 7723 3.49 6.95 2.09 91 RCVD_IN_IADB_VOUCHED 7715 1.56 0.28 2.09 92 XM_CamelCaseFrm001 7470 2.31 3.02 2.02 93 INVALID_MSGID 7288 1.46 0.19 1.97 94 BAYES_05 7253 1.59 0.66 1.96 95 BAYES_999 7070 8.40 24.39 1.91 96 MIME_HTML_MOSTLY 7057 2.43 3.71 1.91 97 XM_B_URI_Unicode 6912 2.17 2.91 1.87 98 BAYES_95 6823 2.77 5.05 1.84 99 URI_NOVOWEL 6364 1.53 1.04 1.72 100 TM2_M_URI_OPT_OUT 6317 2.21 3.43 1.71 101 TO_MALFORMED 6296 1.22 0.02 1.70 102 TR_XM_SpammyRelay 6109 4.23 10.59 1.65 103 TR_XM_DKIM_Undo 6045 9.16 27.71 1.63 104 FROM_EXCESS_BASE64 6010 1.81 2.27 1.62 105 TR_XM_PhishingBody 5967 2.36 4.19 1.61 106 T_XMDrugObfuBody_14 5964 2.34 4.14 1.61 107 XM_B_Investor 5696 2.41 4.54 1.54 108 XM_DK_Undo_01 5668 1.58 1.71 1.53 109 TooManyTo_003 5624 1.24 0.53 1.52 110 T_XMDrugObfuBody_08 5408 1.78 2.58 1.46 111 RCVD_IN_IADB_OPTIN 5366 1.08 0.18 1.45 112 XMDiploma_00 5292 1.80 2.72 1.43 113 TR_Symld_Words 5107 1.36 1.32 1.38 114 XM_B_Unsub2 4995 1.73 2.67 1.35 115 SUBJ_ALL_CAPS 4964 1.53 2.00 1.34 116 UNTRUSTED_Relay 4952 2.52 5.42 1.34 117 TR_XM_UnparsRelay 4732 4.00 10.72 1.28 118 URI_HEX 4523 1.42 1.91 1.22 119 IN_HORDE_ADDRESS_BOOK 4504 0.90 0.10 1.22 120 TR_XM_SpammyWords5 4456 1.89 3.59 1.20 121 XM_SPF_SoftFail 4443 1.70 2.92 1.20 122 HELO_NODOT 4272 0.85 0.09 1.15 123 HELO_NO_DOMAIN 4265 0.85 0.09 1.15 124 BOTNET 4159 3.40 9.01 1.12 125 XM_SendGrid 4055 1.17 1.36 1.10 126 T_TooManySym_03 3981 0.89 0.43 1.08 127 TooManyTo_004 3906 0.88 0.43 1.06 128 XM_GoogleGroups 3757 0.93 0.72 1.02 129 TR_DCC_Bayes_99 3691 6.67 20.65 1.00 130 XMGappySubj_01 3675 0.76 0.19 0.99 131 XMCapTrack 3664 0.82 0.39 0.99 132 XMSexyCombo_05 3626 1.75 3.64 0.98 133 SpammyFromTLD_01 3435 1.24 1.99 0.93 134 TVD_SPACE_RATIO 3306 0.71 0.25 0.89 135 TooManyTo_005 3204 0.73 0.39 0.87 136 XM_UB50 3172 1.37 2.65 0.86 137 T_XMDrugObfuBody_00 3087 1.08 1.69 0.83 138 XMGenDplmaNmb 3074 0.99 1.37 0.83 139 DKIM_ADSP_CUSTOM_MED 3011 0.91 1.14 0.81 140 RELAYCOUNTRY_CA 2993 2.20 5.62 0.81 141 XM_OfRef6 2991 1.39 2.83 0.81 142 XMNoVowels 2876 0.81 0.90 0.78 143 T_FILL_THIS_FORM_SHORT 2795 1.13 2.04 0.76 144 TR_XM_DK_SendGrid 2777 0.79 0.89 0.75 145 TO_NO_BRKTS_HTML_ONLY 2745 0.63 0.36 0.74 146 XM_H_Long_From02 2692 0.98 1.62 0.73 147 TR_XM_Base64_M1 2588 0.72 0.78 0.70 148 FROM_GOV_DKIM_AU 2584 0.55 0.18 0.70 149 TR_MetaPhish_Combo_01 2583 0.81 1.10 0.70 150 XMStockSpam_06 2515 1.01 1.81 0.68 151 XM_B_COPY_HTML 2494 0.85 1.29 0.67 152 XM_ShortIntro_01 2482 0.58 0.36 0.67 153 XM_B_FormFill 2478 0.49 0.04 0.67 154 XMBrknScrpt_02 2438 0.87 1.38 0.66 155 HTTPS_HTTP_MISMATCH 2427 0.77 1.06 0.66 156 XM_H_PHPMailer 2402 0.63 0.58 0.65 157 RCVD_IN_PBL 2372 0.82 1.25 0.64 158 XM_B_SpammyWords4 2318 0.95 1.73 0.63 159 T_OBFU_PDF_ATTACH 2295 0.47 0.09 0.62 160 MPART_ALT_DIFF_COUNT 2286 0.82 1.34 0.62 161 XM_B_DNDMA 2199 0.73 1.06 0.59 162 XMGappySubj_02 2148 0.43 0.06 0.58 163 TVD_RCVD_IP 2134 0.59 0.63 0.58 164 RCVD_IN_BL_SPAMCOP_NET 2124 3.10 9.32 0.57 165 FORGED_GMAIL_RCVD 2067 0.65 0.88 0.56 166 XMMoneyMeta_00 2059 0.74 1.20 0.56 167 URI_TRY_3LD 2052 0.77 1.30 0.55 168 NML_ADSP_CUSTOM_MED 2047 0.67 0.94 0.55 169 XMBdyGiftCard01 1973 0.70 1.11 0.53 170 HTML_TAG_BALANCE_BODY 1971 0.66 0.98 0.53 171 MSGID_FROM_MTA_HEADER 1919 0.41 0.15 0.52 172 T_Symld_Words_02 1914 0.54 0.59 0.52 173 XMBody_95 1903 0.40 0.11 0.51 174 XMPhish14 1901 0.61 0.86 0.51 175 XMPhish30 1866 0.81 1.58 0.50 176 XMSlimDrugH 1851 0.60 0.84 0.50 177 TR_XM_Spammywords 1810 0.57 0.77 0.49 178 XM_S_SpammyWords 1810 0.57 0.77 0.49 179 XMDateMe_00 1736 0.43 0.32 0.47 180 DIET_1 1736 0.95 2.14 0.47 181 T_XMHurry_00 1730 0.98 2.25 0.47 182 RELAYCOUNTRY_GB 1721 0.60 0.92 0.47 183 RELAYCOUNTRY_AU 1694 1.03 2.45 0.46 184 HTML_IMAGE_ONLY_20 1644 1.19 3.01 0.44 185 XMSubMetaI_00 1613 0.60 0.99 0.44 186 THIS_AD 1462 0.64 1.24 0.40 187 T_STY_INVIS_DIRECT 1427 0.54 0.90 0.39 188 SH_BODYURI_REVERSE_CSS 1405 0.92 2.26 0.38 189 XMBSHREFv2 1396 0.37 0.34 0.38 190 XMBody_17 1383 0.77 1.75 0.37 191 XM_ProductURIs 1380 0.51 0.86 0.37 192 HELO_MISC_IP 1367 0.29 0.10 0.37 193 URIBL_CSS_A 1341 0.90 2.22 0.36 194 URIBL_CSS 1341 0.90 2.22 0.36 195 HTML_IMAGE_ONLY_28 1340 0.33 0.25 0.36 196 SHORT_HELO_AND_INLINE_IMAGE 1317 0.26 0.02 0.36 197 MISSING_HEADERS 1312 0.40 0.51 0.35 198 TM2_M_BODY_EMPTY 1301 0.27 0.06 0.35 199 USER_IN_WELCOMELIST 1292 0.25 0.00 0.35 200 USER_IN_WHITELIST 1292 0.25 0.00 0.35 ----------------------------------------------------------------------