Email: 473868 Autolearn: 0 AvgScore: 4.61 AvgScanTime: 1.38 sec Spam: 148681 Autolearn: 0 AvgScore: 14.58 AvgScanTime: 1.51 sec Ham: 325187 Autolearn: 0 AvgScore: 0.05 AvgScanTime: 1.32 sec Time Spent Running SA: 181.72 hours Time Spent Processing Spam: 62.35 hours Time Spent Processing Ham: 119.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140824 89.03 94.72 86.43 2 DKIM_SIGNED 132142 79.74 88.88 75.56 3 XM_DK_Pass 126722 77.63 85.23 74.16 4 DKIM_VALID 125197 76.51 84.21 72.99 5 XM_B_Unicode 125115 74.27 84.15 69.76 6 RELAYCOUNTRY_US 122240 81.90 82.22 81.76 7 DCC_CHECK 112049 50.24 75.36 38.75 8 XM_B_SpammyWords 101373 52.08 68.18 44.72 9 XMListUnsubscribeExists 101359 54.25 68.17 47.89 10 DKIM_VALID_AU 99031 61.10 66.61 58.58 11 LOC_TINY_FONT_1 72707 33.75 48.90 26.82 12 XM_B_Unicode3 72296 42.62 48.62 39.87 13 BAYES_50 61404 54.51 41.30 60.55 14 XM_DK_Undo_02 59744 15.48 40.18 4.19 15 RCVD_IN_MSPIKE_H2 59276 35.88 39.87 34.05 16 XM_B_SpammyWords2 58880 25.08 39.60 18.44 17 HTML_FONT_LOW_CONTRAST 51864 29.07 34.88 26.41 18 FVGT_m_MULTI_ODD 48765 27.16 32.80 24.58 19 T_KAM_HTML_FONT_INVALID 45368 24.74 30.51 22.10 20 BAYES_99 43689 11.25 29.38 2.96 21 DKIM_VALID_EF 43057 28.79 28.96 28.71 22 MIME_HTML_ONLY 42788 22.51 28.78 19.64 23 TR_XM_DKIM_Undo 41843 10.03 28.14 1.74 24 XMSubLong 37798 23.92 25.42 23.24 25 DCC_CHECK_NEGATIVE 34331 49.23 23.09 61.19 26 T_TM2_M_HEADER_IN_MSG 33239 28.15 22.36 30.80 27 BAYES_999 33034 8.50 22.22 2.23 28 TR_DCC_Bayes_99 31276 7.38 21.04 1.14 29 XM_Multi_Part_URI 30775 15.96 20.70 13.79 30 TR_XM_DK_Unsub 30620 14.94 20.59 12.36 31 XM_B_Unsub 27241 11.81 18.32 8.83 32 TR_XM_BayesUnsub 26149 10.06 17.59 6.61 33 UNPARSEABLE_RELAY 26120 13.20 17.57 11.21 34 RELAYCOUNTRY_META 25341 7.91 17.04 3.74 35 XM_B_SpammyWords3 22539 8.08 15.16 4.85 36 TR_MAX_INTL_RELAY 22324 8.91 15.01 6.12 37 TR_XM_SpammyRelay 17313 5.01 11.64 1.98 38 BOTNET_IPINHOSTNAME 16415 5.43 11.04 2.87 39 LOTS_OF_MONEY 16413 7.50 11.04 5.88 40 FSL_BULK_SIG 16351 8.13 11.00 6.82 41 TR_XM_SpammyWords2 15752 3.56 10.59 0.34 42 RCVD_IN_BL_SPAMCOP_NET 15499 3.68 10.42 0.60 43 XM_Evil_Numbers_Gen 15448 9.40 10.39 8.94 44 BOTNET 15053 4.09 10.12 1.33 45 TR_XM_SpammyWords4 14687 5.77 9.88 3.89 46 XM_B_Phish_Phrases 14365 6.88 9.66 5.61 47 BAYES_80 13919 5.56 9.36 3.83 48 TR_XM_UnparsRelay 12815 3.77 8.62 1.55 49 BAYES_60 12768 7.50 8.59 7.00 50 LotsOfNums_01 12366 8.17 8.32 8.11 51 TR_XM_SPAMCOP 12268 2.80 8.25 0.31 52 UNTRUSTED_Relay 9762 3.04 6.57 1.43 53 XM_Body_Dirty_Words 9554 4.14 6.43 3.09 54 XMSubMetaSx_00 9386 4.35 6.31 3.45 55 XM_UncommonTLD01 9353 4.88 6.29 4.24 56 HTML_IMAGE_RATIO_02 9296 4.92 6.25 4.30 57 RELAYCOUNTRY_CA 9262 2.70 6.23 1.09 58 XM_B_PhoneNumber 9163 9.10 6.16 10.44 59 MPART_ALT_DIFF 9126 5.31 6.14 4.93 60 HTML_IMAGE_RATIO_04 8868 4.78 5.96 4.25 61 XM_H_Long_From01 7870 5.61 5.29 5.76 62 BAYES_95 7621 3.18 5.13 2.29 63 XM_H_GMP 7535 6.18 5.07 6.69 64 DKIM_INVALID 6945 3.23 4.67 2.57 65 XM_B_Investor 6735 2.61 4.53 1.74 66 TR_XM_PhishingBody 6732 3.05 4.53 2.37 67 TooManyTo_001 6276 7.40 4.22 8.85 68 XMStrtUSub 6254 4.62 4.21 4.81 69 TM2_M_VERY_LONG_WORD 6226 2.64 4.19 1.93 70 T_XMDrugObfuBody_14 6197 2.63 4.17 1.93 71 XMSexyCombo_05 6120 2.46 4.12 1.70 72 HTML_IMAGE_RATIO_08 5625 3.06 3.78 2.73 73 RCVD_IN_MSPIKE_H3 5618 5.17 3.78 5.81 74 RCVD_IN_MSPIKE_WL 5618 5.17 3.78 5.81 75 HTML_IMAGE_RATIO_06 5495 3.48 3.70 3.39 76 MIME_QP_LONG_LINE 5280 4.49 3.55 4.92 77 XM_B_SpammyTLD 5217 2.86 3.51 2.56 78 TR_XM_SpammyWords5 5137 1.98 3.46 1.31 79 MIME_HTML_MOSTLY 5113 2.81 3.44 2.52 80 T_XMDrugObfuBody_08 4965 2.50 3.34 2.12 81 MIME_HTML_ONLY_MULTI 4962 3.02 3.34 2.87 82 XMNumbers 4936 3.02 3.32 2.89 83 XM_UB50 4912 1.65 3.30 0.90 84 XM_SPF_SoftFail 4813 2.07 3.24 1.54 85 XM_CamelCaseFrm001 4411 2.46 2.97 2.24 86 XM_URI_RBL 4374 1.16 2.94 0.35 87 TR_XM_NoHeaderRelay 4326 1.06 2.91 0.21 88 XMDiploma_00 4284 2.04 2.88 1.65 89 XM_B_URI_Unicode 4204 2.28 2.83 2.03 90 RCVD_IN_VALIDITY_RPBL 3947 0.88 2.65 0.07 91 XM_B_SpammyWords4 3932 1.48 2.64 0.95 92 XM_B_Unsub2 3901 1.81 2.62 1.44 93 XM_OfRef6 3893 1.46 2.62 0.93 94 RELAYCOUNTRY_AU 3684 1.14 2.48 0.52 95 TM2_M_URI_OPT_OUT 3575 1.87 2.40 1.62 96 FROM_EXCESS_BASE64 3348 1.86 2.25 1.68 97 MAILING_LIST_MULTI 3312 2.87 2.23 3.16 98 T_TooManySym_01 3302 4.99 2.22 6.25 99 RCVD_IN_VALIDITY_SAFE 3265 3.23 2.20 3.71 100 T_XMDrugObfuBody_00 3244 1.18 2.18 0.73 101 ANY_BOUNCE_MESSAGE 3191 3.21 2.15 3.70 102 BOUNCE_MESSAGE 3166 3.20 2.13 3.69 103 SpammyFromTLD_02 3128 0.96 2.10 0.43 104 KHOP_HELO_FCRDNS 3107 1.75 2.09 1.60 105 USER_IN_DEF_DKIM_WL 3078 9.14 2.07 12.37 106 ALL_TRUSTED 2900 11.10 1.95 15.28 107 T_REMOTE_IMAGE 2888 3.01 1.94 3.50 108 BAYES_40 2859 4.32 1.92 5.42 109 XM_DK_Undo_01 2855 1.80 1.92 1.75 110 T_XMHurry_00 2767 1.00 1.86 0.61 111 SpammyFromTLD_01 2755 1.17 1.85 0.86 112 XMBody_17 2712 0.89 1.82 0.47 113 URI_HEX 2649 1.52 1.78 1.40 114 RCVD_IN_VALIDITY_CERTIFIED 2592 2.62 1.74 3.02 115 SUBJ_ALL_CAPS 2477 1.46 1.67 1.36 116 TR_XM_INV_DKIM 2406 0.62 1.62 0.17 117 HTML_MIME_NO_HTML_TAG 2375 2.31 1.60 2.64 118 HK_RANDOM_REPLYTO 2344 0.58 1.58 0.13 119 DKIM_ADSP_NXDOMAIN 2314 0.71 1.56 0.33 120 XMStockSpam_06 2281 1.31 1.53 1.21 121 XMPhish30 2275 0.82 1.53 0.49 122 RCVD_IN_ZEN_LASTEXTERNAL 2274 0.48 1.53 0.00 123 SHORTCIRCUIT 2274 0.48 1.53 0.00 124 URI_TRY_3LD 2267 0.88 1.52 0.58 125 XM_SendGrid 2179 1.40 1.47 1.38 126 XMBrknScrpt_02 2175 0.98 1.46 0.75 127 DIET_1 2096 0.67 1.41 0.33 128 BAYES_20 2079 3.16 1.40 3.97 129 RELAYCOUNTRY_RU 2057 0.44 1.38 0.01 130 XMGenDplmaNmb 2031 0.99 1.37 0.82 131 T_FILL_THIS_FORM_SHORT 2004 1.02 1.35 0.87 132 HTML_FONT_TINY_NORDNS 1995 0.49 1.34 0.11 133 HTTPS_HTTP_MISMATCH 1919 0.98 1.29 0.83 134 RCVD_IN_PBL 1888 0.91 1.27 0.75 135 MultiRelay_CC 1885 0.49 1.27 0.14 136 XM_HighProb1 1880 0.40 1.26 0.01 137 RCVD_IN_PSBL 1824 0.45 1.23 0.10 138 LongTLD 1809 0.69 1.22 0.45 139 XM_B_DNDMA 1809 0.66 1.22 0.40 140 SHOPIFY_IMG_NOT_RCVD_SFY 1766 0.52 1.19 0.21 141 XM_B_COPY_HTML 1765 0.81 1.19 0.64 142 XMPhish14 1764 1.22 1.19 1.24 143 BOTNET_NORDNS 1746 0.39 1.17 0.03 144 TR_Mismatch_TLD_02 1737 0.42 1.17 0.08 145 MIME_CHARSET_FARAWAY 1715 0.57 1.15 0.30 146 DKIM_ADSP_CUSTOM_MED 1710 1.01 1.15 0.95 147 XMReplyNow 1700 0.56 1.14 0.30 148 MPART_ALT_DIFF_COUNT 1648 0.69 1.11 0.50 149 TR_XM_PHPDW 1645 0.72 1.11 0.54 150 XM_B_SEO 1645 0.53 1.11 0.26 151 TR_XM_Base64_M1 1644 0.82 1.11 0.70 152 XMBdyGiftCard01 1639 0.72 1.10 0.54 153 TR_XM_PHPForged 1638 0.71 1.10 0.54 154 RELAYCOUNTRY_FR 1612 0.48 1.08 0.21 155 XM_H_Long_From02 1607 0.90 1.08 0.81 156 TR_XM_FormFill2 1606 0.71 1.08 0.55 157 XMSubMetaI_00 1597 0.70 1.07 0.52 158 XM_H_Undi_Recip 1587 0.47 1.07 0.20 159 TR_Symld_Words 1582 1.46 1.06 1.64 160 RCVD_IN_IADB_LISTED 1581 3.06 1.06 3.98 161 XM_H_PHPOS 1577 0.70 1.06 0.53 162 HTML_TAG_BALANCE_BODY 1526 0.75 1.03 0.62 163 XMBody_78 1518 0.55 1.02 0.34 164 URI_NOVOWEL 1514 1.63 1.02 1.91 165 RELAYCOUNTRY_GB 1504 0.68 1.01 0.53 166 TR_XM_RelayPhish 1493 0.37 1.00 0.08 167 XM_B_Phish66 1473 0.54 0.99 0.33 168 XM_UB99 1464 0.31 0.98 0.01 169 RCVD_IN_IADB_SPF 1444 2.69 0.97 3.48 170 RCVD_IN_XBL 1444 0.32 0.97 0.02 171 RCVD_IN_SBL_CSS 1444 0.34 0.97 0.05 172 MAY_BE_FORGED 1439 0.82 0.97 0.75 173 XM_B_REG_HTML 1429 0.45 0.96 0.22 174 RCVD_IN_IADB_DK 1404 2.36 0.94 3.00 175 TR_MetaPhish_Combo_01 1392 0.83 0.94 0.78 176 RCVD_IN_IADB_SENDERID 1392 2.42 0.94 3.09 177 PLING_QUERY 1388 0.56 0.93 0.39 178 TR_XM_SEO4 1387 0.37 0.93 0.12 179 RCVD_IN_SORBS_DUL 1340 0.31 0.90 0.04 180 FORGED_GMAIL_RCVD 1332 0.70 0.90 0.60 181 XM_UB60 1326 0.32 0.89 0.05 182 NML_ADSP_CUSTOM_MED 1323 0.74 0.89 0.67 183 XM_ProductURIs 1319 0.59 0.89 0.46 184 URIBL_BLACK 1315 0.32 0.88 0.07 185 CHARSET_FARAWAY_HEADER 1313 0.39 0.88 0.17 186 XMHTML_After_End 1300 0.52 0.87 0.35 187 XM_OfRef7 1299 0.41 0.87 0.19 188 TR_LOTS_OF_MONEY3 1299 0.46 0.87 0.26 189 TR_LOTS_OF_MONEY2 1296 0.45 0.87 0.25 190 T_MONEY_PERCENT 1296 0.45 0.87 0.25 191 XMSlimDrugH 1287 0.71 0.87 0.63 192 TR_XM_DK_SendGrid 1259 0.84 0.85 0.84 193 XM_B_COVIDMETA 1258 0.39 0.85 0.18 194 XM_PDF 1243 3.39 0.84 4.56 195 TM2_M_OBFU_COMMENT 1222 0.47 0.82 0.31 196 T_Symld_Words_02 1204 0.61 0.81 0.53 197 TR_XM_InvalidRelay 1198 0.26 0.81 0.01 198 RDNS_DYNAMIC 1193 0.41 0.80 0.24 199 XM_DIRTYINTL 1191 0.29 0.80 0.06 200 XMSexyCombo_01 1179 0.33 0.79 0.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 281058 89.03 94.72 86.43 2 RELAYCOUNTRY_US 265881 81.90 82.22 81.76 3 DKIM_SIGNED 245704 79.74 88.88 75.56 4 XM_DK_Pass 241159 77.63 85.23 74.16 5 DKIM_VALID 237355 76.51 84.21 72.99 6 XM_B_Unicode 226837 74.27 84.15 69.76 7 DCC_CHECK_NEGATIVE 198969 49.23 23.09 61.19 8 BAYES_50 196893 54.51 41.30 60.55 9 DKIM_VALID_AU 190485 61.10 66.61 58.58 10 XMListUnsubscribeExists 155725 54.25 68.17 47.89 11 XM_B_SpammyWords 145420 52.08 68.18 44.72 12 XM_B_Unicode3 129648 42.62 48.62 39.87 13 DCC_CHECK 126024 50.24 75.36 38.75 14 RCVD_IN_MSPIKE_H2 110734 35.88 39.87 34.05 15 T_TM2_M_HEADER_IN_MSG 100162 28.15 22.36 30.80 16 DKIM_VALID_EF 93350 28.79 28.96 28.71 17 LOC_TINY_FONT_1 87205 33.75 48.90 26.82 18 HTML_FONT_LOW_CONTRAST 85889 29.07 34.88 26.41 19 FVGT_m_MULTI_ODD 79925 27.16 32.80 24.58 20 XMSubLong 75565 23.92 25.42 23.24 21 T_KAM_HTML_FONT_INVALID 71864 24.74 30.51 22.10 22 MIME_HTML_ONLY 63864 22.51 28.78 19.64 23 XM_B_SpammyWords2 59969 25.08 39.60 18.44 24 ALL_TRUSTED 49686 11.10 1.95 15.28 25 XM_Multi_Part_URI 44840 15.96 20.70 13.79 26 USER_IN_DEF_DKIM_WL 40211 9.14 2.07 12.37 27 TR_XM_DK_Unsub 40179 14.94 20.59 12.36 28 BAYES_00 37619 8.17 0.73 11.57 29 UNPARSEABLE_RELAY 36452 13.20 17.57 11.21 30 XM_B_PhoneNumber 33948 9.10 6.16 10.44 31 XM_Evil_Numbers_Gen 29073 9.40 10.39 8.94 32 TooManyTo_001 28795 7.40 4.22 8.85 33 XM_B_Unsub 28709 11.81 18.32 8.83 34 LotsOfNums_01 26367 8.17 8.32 8.11 35 TR_XM_DK_Bayes 23670 5.19 0.61 7.28 36 TR_XM_DK_Bayes1 23131 5.07 0.60 7.11 37 BAYES_60 22759 7.50 8.59 7.00 38 FSL_BULK_SIG 22188 8.13 11.00 6.82 39 XM_H_GMP 21746 6.18 5.07 6.69 40 XM_DKIMWhitelistDomains 21742 4.68 0.31 6.69 41 TR_XM_BayesUnsub 21499 10.06 17.59 6.61 42 IN_ZIMBRA_NJ_WHITELIST 21353 4.54 0.10 6.57 43 T_TooManySym_01 20336 4.99 2.22 6.25 44 TR_MAX_INTL_RELAY 19915 8.91 15.01 6.12 45 TR_XM_DK_Bayes2 19593 4.27 0.42 6.03 46 LOTS_OF_MONEY 19111 7.50 11.04 5.88 47 RCVD_IN_MSPIKE_H3 18896 5.17 3.78 5.81 48 RCVD_IN_MSPIKE_WL 18896 5.17 3.78 5.81 49 XM_H_Long_From01 18725 5.61 5.29 5.76 50 XM_B_Phish_Phrases 18238 6.88 9.66 5.61 51 BAYES_40 17631 4.32 1.92 5.42 52 MPART_ALT_DIFF 16026 5.31 6.14 4.93 53 MIME_QP_LONG_LINE 16000 4.49 3.55 4.92 54 XM_B_SpammyWords3 15764 8.08 15.16 4.85 55 XMStrtUSub 15633 4.62 4.21 4.81 56 XM_PDF 14827 3.39 0.84 4.56 57 HTML_IMAGE_RATIO_02 13995 4.92 6.25 4.30 58 HTML_IMAGE_RATIO_04 13805 4.78 5.96 4.25 59 XM_UncommonTLD01 13774 4.88 6.29 4.24 60 XM_DK_Undo_02 13613 15.48 40.18 4.19 61 RCVD_IN_IADB_LISTED 12931 3.06 1.06 3.98 62 BAYES_20 12911 3.16 1.40 3.97 63 TR_XM_SpammyWords4 12640 5.77 9.88 3.89 64 BAYES_80 12445 5.56 9.36 3.83 65 RELAYCOUNTRY_META 12165 7.91 17.04 3.74 66 RCVD_IN_VALIDITY_SAFE 12062 3.23 2.20 3.71 67 ANY_BOUNCE_MESSAGE 12028 3.21 2.15 3.70 68 BOUNCE_MESSAGE 12012 3.20 2.13 3.69 69 T_REMOTE_IMAGE 11385 3.01 1.94 3.50 70 RCVD_IN_IADB_SPF 11314 2.69 0.97 3.48 71 XMSubMetaSx_00 11232 4.35 6.31 3.45 72 HTML_IMAGE_RATIO_06 11015 3.48 3.70 3.39 73 TooManyTo_002 10941 2.47 0.50 3.36 74 MAILING_LIST_MULTI 10268 2.87 2.23 3.16 75 RCVD_IN_IADB_SENDERID 10062 2.42 0.94 3.09 76 XM_Body_Dirty_Words 10060 4.14 6.43 3.09 77 RCVD_IN_VALIDITY_CERTIFIED 9831 2.62 1.74 3.02 78 T_TooManySym_02 9804 2.23 0.51 3.01 79 RCVD_IN_IADB_DK 9760 2.36 0.94 3.00 80 BAYES_99 9616 11.25 29.38 2.96 81 XMNumbers 9394 3.02 3.32 2.89 82 MIME_HTML_ONLY_MULTI 9336 3.02 3.34 2.87 83 BOTNET_IPINHOSTNAME 9326 5.43 11.04 2.87 84 HTML_IMAGE_RATIO_08 8868 3.06 3.78 2.73 85 RCVD_IN_IADB_VOUCHED 8847 1.99 0.38 2.72 86 HTML_MIME_NO_HTML_TAG 8589 2.31 1.60 2.64 87 DKIM_INVALID 8349 3.23 4.67 2.57 88 XM_B_SpammyTLD 8323 2.86 3.51 2.56 89 MIME_HTML_MOSTLY 8208 2.81 3.44 2.52 90 BAYES_05 7845 1.86 0.66 2.41 91 TR_XM_PhishingBody 7708 3.05 4.53 2.37 92 BAYES_95 7457 3.18 5.13 2.29 93 INVALID_MSGID 7353 1.60 0.17 2.26 94 XM_CamelCaseFrm001 7268 2.46 2.97 2.24 95 BAYES_999 7245 8.50 22.22 2.23 96 T_XMDrugObfuBody_08 6882 2.50 3.34 2.12 97 XM_B_URI_Unicode 6616 2.28 2.83 2.03 98 TR_XM_SpammyRelay 6450 5.01 11.64 1.98 99 TO_MALFORMED 6289 1.35 0.06 1.93 100 T_XMDrugObfuBody_14 6283 2.63 4.17 1.93 101 TM2_M_VERY_LONG_WORD 6265 2.64 4.19 1.93 102 RCVD_IN_IADB_OPTIN 6236 1.39 0.25 1.92 103 URI_NOVOWEL 6222 1.63 1.02 1.91 104 TooManyTo_003 5972 1.39 0.42 1.84 105 XM_DK_Undo_01 5697 1.80 1.92 1.75 106 TR_XM_DKIM_Undo 5664 10.03 28.14 1.74 107 XM_B_Investor 5644 2.61 4.53 1.74 108 XMSexyCombo_05 5526 2.46 4.12 1.70 109 FROM_EXCESS_BASE64 5453 1.86 2.25 1.68 110 XMDiploma_00 5373 2.04 2.88 1.65 111 TR_Symld_Words 5343 1.46 1.06 1.64 112 TM2_M_URI_OPT_OUT 5274 1.87 2.40 1.62 113 KHOP_HELO_FCRDNS 5189 1.75 2.09 1.60 114 TR_XM_UnparsRelay 5036 3.77 8.62 1.55 115 XM_SPF_SoftFail 5005 2.07 3.24 1.54 116 XM_B_Unsub2 4674 1.81 2.62 1.44 117 UNTRUSTED_Relay 4665 3.04 6.57 1.43 118 URI_HEX 4560 1.52 1.78 1.40 119 IN_HORDE_ADDRESS_BOOK 4485 0.97 0.08 1.38 120 XM_SendGrid 4473 1.40 1.47 1.38 121 HELO_NODOT 4423 1.02 0.28 1.36 122 SUBJ_ALL_CAPS 4423 1.46 1.67 1.36 123 HELO_NO_DOMAIN 4420 1.02 0.28 1.36 124 BOTNET 4330 4.09 10.12 1.33 125 TooManyTo_004 4314 1.02 0.35 1.33 126 XMGappySubj_01 4276 0.94 0.12 1.31 127 TR_XM_SpammyWords5 4259 1.98 3.46 1.31 128 XMCapTrack 4171 1.01 0.42 1.28 129 XM_GoogleGroups 4129 1.07 0.65 1.27 130 XMPhish14 4025 1.22 1.19 1.24 131 T_TooManySym_03 4020 0.90 0.15 1.24 132 XMNoVowels 4001 0.98 0.44 1.23 133 XMStockSpam_06 3949 1.31 1.53 1.21 134 TR_DCC_Bayes_99 3704 7.38 21.04 1.14 135 TooManyTo_005 3545 0.84 0.29 1.09 136 RELAYCOUNTRY_CA 3540 2.70 6.23 1.09 137 TVD_SPACE_RATIO 3533 0.82 0.22 1.09 138 DKIM_ADSP_CUSTOM_MED 3099 1.01 1.15 0.95 139 XM_B_SpammyWords4 3093 1.48 2.64 0.95 140 XM_OfRef6 3012 1.46 2.62 0.93 141 XM_UB50 2917 1.65 3.30 0.90 142 T_FILL_THIS_FORM_SHORT 2845 1.02 1.35 0.87 143 XM_ShortIntro_01 2845 0.74 0.46 0.87 144 SpammyFromTLD_01 2793 1.17 1.85 0.86 145 XM_H_Trusted_IP 2783 0.59 0.00 0.86 146 FROM_GOV_DKIM_AU 2755 0.64 0.18 0.85 147 XMSubNoVowel 2724 0.72 0.46 0.84 148 TR_XM_DK_SendGrid 2716 0.84 0.85 0.84 149 HTTPS_HTTP_MISMATCH 2705 0.98 1.29 0.83 150 XMGenDplmaNmb 2659 0.99 1.37 0.82 151 XM_H_Long_From02 2640 0.90 1.08 0.81 152 TR_MetaPhish_Combo_01 2548 0.83 0.94 0.78 153 MIME_HEADER_CTYPE_ONLY 2512 0.56 0.08 0.77 154 XM_H_PHPMailer 2496 0.76 0.74 0.77 155 XM_B_FormFill 2469 0.52 0.01 0.76 156 XMBrknScrpt_02 2453 0.98 1.46 0.75 157 RCVD_IN_PBL 2428 0.91 1.27 0.75 158 MAY_BE_FORGED 2428 0.82 0.97 0.75 159 MY_SERVERS_FOUND 2399 0.56 0.16 0.74 160 XMGappySubj_02 2371 0.51 0.04 0.73 161 T_XMDrugObfuBody_00 2358 1.18 2.18 0.73 162 TR_XM_Base64_M1 2263 0.82 1.11 0.70 163 T_OBFU_PDF_ATTACH 2217 0.50 0.09 0.68 164 NML_ADSP_CUSTOM_MED 2173 0.74 0.89 0.67 165 XM_B_COPY_HTML 2077 0.81 1.19 0.64 166 XMSlimDrugH 2056 0.71 0.87 0.63 167 TVD_RCVD_IP 2047 0.64 0.66 0.63 168 XM_RXBody 2043 0.65 0.70 0.63 169 HTML_TAG_BALANCE_BODY 2006 0.75 1.03 0.62 170 TO_NO_BRKTS_HTML_ONLY 1995 0.55 0.43 0.61 171 T_XMHurry_00 1976 1.00 1.86 0.61 172 FORGED_GMAIL_RCVD 1966 0.70 0.90 0.60 173 RCVD_IN_BL_SPAMCOP_NET 1951 3.68 10.42 0.60 174 XMMoneyMeta_00 1936 0.63 0.71 0.60 175 URI_TRY_3LD 1898 0.88 1.52 0.58 176 XMLngstWrd_00 1811 0.59 0.65 0.56 177 TR_XM_FormFill2 1774 0.71 1.08 0.55 178 TR_XM_PHPDW 1770 0.72 1.11 0.54 179 XMBdyGiftCard01 1769 0.72 1.10 0.54 180 TR_XM_PHPForged 1747 0.71 1.10 0.54 181 XM_H_PHPOS 1727 0.70 1.06 0.53 182 RELAYCOUNTRY_GB 1717 0.68 1.01 0.53 183 T_Symld_Words_02 1709 0.61 0.81 0.53 184 XMSubMetaI_00 1697 0.70 1.07 0.52 185 RELAYCOUNTRY_AU 1695 1.14 2.48 0.52 186 HTML_IMAGE_ONLY_20 1693 0.53 0.54 0.52 187 TM2_M_BODY_EMPTY 1677 0.47 0.37 0.52 188 MPART_ALT_DIFF_COUNT 1631 0.69 1.11 0.50 189 XMPhish30 1607 0.82 1.53 0.49 190 XMBody_95 1571 0.42 0.27 0.48 191 XMDateMe_00 1548 0.43 0.33 0.48 192 T_MANY_PILL_PRICE 1548 0.33 0.02 0.48 193 XMBody_17 1529 0.89 1.82 0.47 194 XMLngstWrd_01 1507 0.46 0.45 0.46 195 XM_ProductURIs 1493 0.59 0.89 0.46 196 FILL_THIS_FORM 1488 0.39 0.25 0.46 197 T_STY_INVIS_DIRECT 1475 0.56 0.79 0.45 198 LongTLD 1473 0.69 1.22 0.45 199 HTML_IMAGE_ONLY_32 1453 0.37 0.21 0.45 200 MSGID_FROM_MTA_HEADER 1408 0.33 0.09 0.43 ----------------------------------------------------------------------