Email: 521352 Autolearn: 0 AvgScore: 2.73 AvgScanTime: 1.43 sec Spam: 154611 Autolearn: 0 AvgScore: 14.29 AvgScanTime: 1.61 sec Ham: 366741 Autolearn: 0 AvgScore: -2.14 AvgScanTime: 1.36 sec Time Spent Running SA: 207.71 hours Time Spent Processing Spam: 69.28 hours Time Spent Processing Ham: 138.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147474 90.95 95.38 89.08 2 DKIM_SIGNED 141717 74.04 91.66 66.61 3 XM_DK_Pass 132220 71.40 85.52 65.44 4 XM_B_Unicode 131473 77.11 85.03 73.77 5 DKIM_VALID 130898 70.42 84.66 64.42 6 RELAYCOUNTRY_US 130702 83.86 84.54 83.57 7 DCC_CHECK 119190 49.39 77.09 37.71 8 XMListUnsubscribeExists 108730 51.23 70.32 43.18 9 XM_B_SpammyWords 108551 51.96 70.21 44.26 10 DKIM_VALID_AU 101520 55.96 65.66 51.87 11 XM_B_Unicode3 78101 45.63 50.51 43.57 12 LOC_TINY_FONT_1 75995 31.20 49.15 23.64 13 BAYES_50 63857 52.03 41.30 56.55 14 XM_B_SpammyWords2 62341 23.98 40.32 17.10 15 RCVD_IN_MSPIKE_H2 61341 34.37 39.67 32.13 16 XM_DK_Undo_02 58871 14.23 38.08 4.17 17 HTML_FONT_LOW_CONTRAST 57329 28.29 37.08 24.58 18 FVGT_m_MULTI_ODD 52398 25.80 33.89 22.39 19 T_KAM_HTML_FONT_INVALID 50593 23.03 32.72 18.94 20 BAYES_99 45704 10.70 29.56 2.75 21 DKIM_VALID_EF 44394 26.63 28.71 25.76 22 TR_XM_DKIM_Undo 44020 9.91 28.47 2.08 23 MIME_HTML_ONLY 43582 25.23 28.19 23.98 24 XMSubLong 41273 24.11 26.69 23.01 25 BAYES_999 35410 8.25 22.90 2.07 26 T_TM2_M_HEADER_IN_MSG 33302 24.52 21.54 25.78 27 DCC_CHECK_NEGATIVE 33294 50.18 21.53 62.26 28 TR_DCC_Bayes_99 32857 6.96 21.25 0.93 29 XM_Multi_Part_URI 32019 14.66 20.71 12.10 30 TR_XM_DK_Unsub 31675 14.08 20.49 11.38 31 UNPARSEABLE_RELAY 30837 13.79 19.94 11.19 32 XM_B_Unsub 27884 11.20 18.03 8.32 33 TR_XM_BayesUnsub 26919 9.48 17.41 6.13 34 TR_MAX_INTL_RELAY 22838 7.73 14.77 4.76 35 RELAYCOUNTRY_META 22593 6.52 14.61 3.11 36 XM_B_SpammyWords3 22577 7.47 14.60 4.46 37 TR_XM_SpammyWords2 17306 3.57 11.19 0.35 38 LOTS_OF_MONEY 16963 7.05 10.97 5.40 39 TR_XM_SpammyRelay 16835 4.42 10.89 1.69 40 BOTNET_IPINHOSTNAME 16566 5.21 10.71 2.89 41 TR_XM_UnparsRelay 16069 4.00 10.39 1.31 42 BOTNET 15558 4.02 10.06 1.48 43 TR_XM_SpammyWords4 14978 5.43 9.69 3.64 44 BAYES_80 14402 4.83 9.31 2.94 45 FSL_BULK_SIG 14043 8.88 9.08 8.80 46 BAYES_60 13922 6.89 9.00 6.00 47 XM_Evil_Numbers_Gen 13707 9.50 8.87 9.76 48 XM_B_Phish_Phrases 12476 5.58 8.07 4.53 49 RCVD_IN_BL_SPAMCOP_NET 12057 2.62 7.80 0.44 50 XMSubMetaSx_00 11277 4.07 7.29 2.72 51 LotsOfNums_01 10918 7.23 7.06 7.30 52 DKIM_INVALID 10819 3.62 7.00 2.19 53 RELAYCOUNTRY_CA 9645 2.46 6.24 0.86 54 XM_B_PhoneNumber 9554 7.91 6.18 8.64 55 XM_Body_Dirty_Words 9443 3.32 6.11 2.14 56 TR_XM_SPAMCOP 9151 1.91 5.92 0.22 57 HTML_IMAGE_RATIO_02 9128 4.47 5.90 3.87 58 XM_UncommonTLD01 8571 4.21 5.54 3.65 59 TR_XM_PhishingBody 8552 2.80 5.53 1.65 60 MPART_ALT_DIFF 8402 8.34 5.43 9.56 61 XM_H_Long_From01 8285 5.17 5.36 5.08 62 BAYES_95 7869 2.79 5.09 1.82 63 UNTRUSTED_Relay 7567 2.34 4.89 1.26 64 XM_H_GMP 7493 4.91 4.85 4.94 65 HTML_IMAGE_RATIO_04 6963 11.58 4.50 14.57 66 XMSexyCombo_05 6586 1.92 4.26 0.93 67 XM_B_Investor 6415 2.16 4.15 1.32 68 T_XMDrugObfuBody_14 6387 2.42 4.13 1.70 69 XMStrtUSub 6289 8.94 4.07 10.99 70 HTML_IMAGE_RATIO_06 6020 4.29 3.89 4.45 71 TooManyTo_001 5674 6.71 3.67 8.00 72 MIME_HTML_MOSTLY 5421 2.44 3.51 1.99 73 RCVD_IN_MSPIKE_WL 5367 4.25 3.47 4.58 74 RCVD_IN_MSPIKE_H3 5367 4.25 3.47 4.58 75 TR_XM_SpammyWords5 5355 2.12 3.46 1.55 76 MIME_QP_LONG_LINE 5304 4.09 3.43 4.36 77 HTML_IMAGE_RATIO_08 5191 2.74 3.36 2.48 78 XMDiploma_00 5089 1.92 3.29 1.34 79 XMNumbers 5021 2.88 3.25 2.73 80 XM_B_SpammyTLD 5020 2.54 3.25 2.25 81 XM_CamelCaseFrm001 4948 2.27 3.20 1.87 82 TM2_M_VERY_LONG_WORD 4940 1.71 3.20 1.08 83 MIME_HTML_ONLY_MULTI 4818 6.52 3.12 7.96 84 XM_B_Unsub2 4791 1.76 3.10 1.19 85 XM_OfRef6 4749 1.56 3.07 0.93 86 XM_B_URI_Unicode 4701 2.14 3.04 1.76 87 T_XMHurry_00 4555 1.28 2.95 0.58 88 TR_XM_INV_DKIM 4504 0.97 2.91 0.15 89 XM_URI_RBL 4458 1.08 2.88 0.31 90 XM_B_SpammyWords4 4416 1.34 2.86 0.69 91 XM_SPF_SoftFail 4397 1.72 2.84 1.24 92 RCVD_IN_VALIDITY_RPBL 4275 0.86 2.77 0.06 93 DIET_1 4224 1.11 2.73 0.42 94 T_XMDrugObfuBody_08 4198 1.68 2.72 1.25 95 XMBody_17 3857 1.08 2.49 0.48 96 T_XMDrugObfuBody_00 3852 1.36 2.49 0.88 97 XM_UB50 3845 1.32 2.49 0.83 98 RELAYCOUNTRY_AU 3752 1.13 2.43 0.58 99 T_TooManySym_01 3745 4.29 2.42 5.07 100 MAILING_LIST_MULTI 3587 2.40 2.32 2.44 101 FROM_EXCESS_BASE64 3276 1.81 2.12 1.67 102 TR_XM_NoHeaderRelay 3270 0.75 2.11 0.18 103 TM2_M_URI_OPT_OUT 3263 1.69 2.11 1.51 104 HTML_MIME_NO_HTML_TAG 3173 2.23 2.05 2.31 105 XMPhish30 3091 0.95 2.00 0.51 106 RCVD_IN_VALIDITY_SAFE 3088 3.51 2.00 4.14 107 ALL_TRUSTED 2997 10.43 1.94 14.01 108 KHOP_HELO_FCRDNS 2828 1.46 1.83 1.31 109 SUBJ_ALL_CAPS 2825 1.69 1.83 1.63 110 XMStockSpam_06 2823 1.35 1.83 1.15 111 NO_DNS_FOR_FROM 2794 0.70 1.81 0.24 112 XMGenDplmaNmb 2792 0.98 1.81 0.63 113 TR_XM_MaxWHORU 2768 0.66 1.79 0.18 114 DKIM_ADSP_NXDOMAIN 2766 0.74 1.79 0.30 115 SpammyFromTLD_02 2759 0.83 1.78 0.42 116 T_FILL_THIS_FORM_SHORT 2752 1.13 1.78 0.86 117 SpammyFromTLD_01 2733 0.97 1.77 0.64 118 BAYES_40 2643 4.46 1.71 5.61 119 USER_IN_DEF_DKIM_WL 2580 9.39 1.67 12.64 120 TR_MetaPhish_Combo_01 2505 1.02 1.62 0.76 121 XM_DK_Undo_01 2451 1.63 1.59 1.65 122 RCVD_IN_VALIDITY_CERTIFIED 2436 2.69 1.58 3.17 123 XMBrknScrpt_02 2346 1.00 1.52 0.78 124 XM_B_Phish66 2319 0.65 1.50 0.30 125 T_REMOTE_IMAGE 2249 2.80 1.45 3.37 126 BAYES_20 2200 3.83 1.42 4.84 127 URI_NOVOWEL 2171 1.47 1.40 1.50 128 URI_HEX 2144 1.11 1.39 0.99 129 DKIM_ADSP_CUSTOM_MED 2118 0.91 1.37 0.71 130 RCVD_IN_ZEN_LASTEXTERNAL 2103 0.40 1.36 0.00 131 SHORTCIRCUIT 2103 0.40 1.36 0.00 132 XM_SendGrid 2076 1.35 1.34 1.35 133 HTTPS_HTTP_MISMATCH 2009 0.84 1.30 0.64 134 RELAYCOUNTRY_FR 2000 0.54 1.29 0.22 135 XMBody_78 1952 0.60 1.26 0.32 136 TR_Symld_Words 1910 1.37 1.24 1.43 137 HTML_IMAGE_ONLY_20 1897 0.72 1.23 0.51 138 XM_B_COPY_HTML 1895 0.78 1.23 0.59 139 XM_H_Long_From02 1845 0.87 1.19 0.74 140 LongTLD 1806 0.71 1.17 0.51 141 TR_XM_PHPForged 1803 0.56 1.17 0.30 142 TR_XM_PHPDW 1800 0.56 1.16 0.30 143 TR_XM_FormFill2 1784 0.55 1.15 0.30 144 XM_ProductURIs 1781 0.84 1.15 0.70 145 URI_TRY_3LD 1757 0.70 1.14 0.52 146 XM_H_PHPOS 1747 0.54 1.13 0.29 147 XMSlimDrugH 1737 0.67 1.12 0.48 148 XM_HighProb1 1717 0.34 1.11 0.01 149 RCVD_IN_PBL 1709 0.75 1.11 0.60 150 HTML_FONT_TINY_NORDNS 1687 0.37 1.09 0.07 151 FORGED_GMAIL_RCVD 1676 0.61 1.08 0.41 152 RCVD_IN_PSBL 1636 0.43 1.06 0.17 153 XM_B_SEO 1622 0.46 1.05 0.21 154 MPART_ALT_DIFF_COUNT 1618 0.68 1.05 0.52 155 TM2_M_OBFU_COMMENT 1586 0.61 1.03 0.43 156 SHOPIFY_IMG_NOT_RCVD_SFY 1583 0.46 1.02 0.22 157 SUSP_UTF8_WORD_SUBJ 1582 0.41 1.02 0.15 158 TR_XM_Base64_M1 1579 0.81 1.02 0.72 159 NML_ADSP_CUSTOM_MED 1535 0.63 0.99 0.48 160 XMMoneyMeta_00 1530 0.60 0.99 0.43 161 NORDNS_LOW_CONTRAST 1527 0.34 0.99 0.06 162 XMSubMetaI_00 1516 0.57 0.98 0.39 163 HTML_TAG_BALANCE_BODY 1507 0.78 0.97 0.70 164 XMReplyNow 1481 0.46 0.96 0.25 165 T_MONEY_PERCENT 1476 0.40 0.95 0.17 166 TR_LOTS_OF_MONEY2 1476 0.40 0.95 0.17 167 T_SCC_BODY_TEXT_LINE 1430 0.96 0.92 0.97 168 TR_XM_SEO4 1429 0.35 0.92 0.10 169 RCVD_IN_IADB_LISTED 1428 2.42 0.92 3.05 170 XMBdyGiftCard01 1415 1.06 0.92 1.12 171 XMGppyBdWords 1413 0.38 0.91 0.16 172 MultiRelay_CC 1389 0.34 0.90 0.11 173 XMHTML_After_End 1387 0.48 0.90 0.30 174 XMClaimOffer 1378 0.46 0.89 0.27 175 XM_PDF 1350 3.16 0.87 4.13 176 XM_UB99 1349 0.26 0.87 0.00 177 PLING_QUERY 1348 0.51 0.87 0.35 178 RCVD_IN_IADB_SPF 1334 2.15 0.86 2.70 179 XMPhish14 1319 0.63 0.85 0.53 180 RCVD_IN_IADB_SENDERID 1305 1.96 0.84 2.42 181 T_STY_INVIS_DIRECT 1300 0.54 0.84 0.41 182 UNICODE_OBFU_ASC 1297 0.25 0.84 0.00 183 RCVD_IN_IADB_DK 1295 1.93 0.84 2.39 184 TR_XM_DK_SendGrid 1276 0.84 0.83 0.84 185 XM_H_Undi_Recip 1269 0.37 0.82 0.18 186 RDNS_DYNAMIC 1268 0.44 0.82 0.27 187 XM_RXBody 1256 0.39 0.81 0.22 188 TR_LOTS_OF_MONEY3 1253 0.49 0.81 0.35 189 XM_B_DNDMA 1250 0.56 0.81 0.46 190 XM_OfRef7 1240 0.37 0.80 0.19 191 TR_XM_RelayPhish 1239 0.28 0.80 0.06 192 TR_XM_InvalidRelay 1235 0.25 0.80 0.01 193 XM_DIRTYINTL 1224 0.27 0.79 0.06 194 XMNoVowels 1224 0.69 0.79 0.64 195 XM_B_REG_HTML 1199 0.36 0.78 0.19 196 PDS_RDNS_DYNAMIC_FP 1197 0.34 0.77 0.16 197 TM2_M_A_HREF_HREF 1193 0.39 0.77 0.23 198 HTML_FONT_FACE_BAD 1189 9.55 0.77 13.25 199 XMSubMetaSxObfu_03 1162 0.39 0.75 0.24 200 RELAYCOUNTRY_GB 1157 0.47 0.75 0.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 326687 90.95 95.38 89.08 2 RELAYCOUNTRY_US 306485 83.86 84.54 83.57 3 XM_B_Unicode 270539 77.11 85.03 73.77 4 DKIM_SIGNED 244287 74.04 91.66 66.61 5 XM_DK_Pass 240009 71.40 85.52 65.44 6 DKIM_VALID 236251 70.42 84.66 64.42 7 DCC_CHECK_NEGATIVE 228315 50.18 21.53 62.26 8 BAYES_50 207402 52.03 41.30 56.55 9 DKIM_VALID_AU 190227 55.96 65.66 51.87 10 XM_B_SpammyWords 162331 51.96 70.21 44.26 11 XM_B_Unicode3 159788 45.63 50.51 43.57 12 XMListUnsubscribeExists 158352 51.23 70.32 43.18 13 DCC_CHECK 138288 49.39 77.09 37.71 14 RCVD_IN_MSPIKE_H2 117845 34.37 39.67 32.13 15 T_TM2_M_HEADER_IN_MSG 94549 24.52 21.54 25.78 16 DKIM_VALID_EF 94464 26.63 28.71 25.76 17 HTML_FONT_LOW_CONTRAST 90159 28.29 37.08 24.58 18 MIME_HTML_ONLY 87931 25.23 28.19 23.98 19 LOC_TINY_FONT_1 86689 31.20 49.15 23.64 20 XMSubLong 84401 24.11 26.69 23.01 21 FVGT_m_MULTI_ODD 82111 25.80 33.89 22.39 22 T_KAM_HTML_FONT_INVALID 69472 23.03 32.72 18.94 23 XM_B_SpammyWords2 62699 23.98 40.32 17.10 24 BAYES_00 57776 11.27 0.64 15.75 25 HTML_IMAGE_RATIO_04 53426 11.58 4.50 14.57 26 ALL_TRUSTED 51398 10.43 1.94 14.01 27 HTML_FONT_FACE_BAD 48591 9.55 0.77 13.25 28 USER_IN_DEF_DKIM_WL 46362 9.39 1.67 12.64 29 XM_H_Trusted_IP 45656 8.76 0.00 12.45 30 XM_Multi_Part_URI 44389 14.66 20.71 12.10 31 TR_XM_DK_Unsub 41743 14.08 20.49 11.38 32 UNPARSEABLE_RELAY 41044 13.79 19.94 11.19 33 XMStrtUSub 40314 8.94 4.07 10.99 34 XM_Evil_Numbers_Gen 35796 9.50 8.87 9.76 35 MPART_ALT_DIFF 35061 8.34 5.43 9.56 36 FSL_BULK_SIG 32272 8.88 9.08 8.80 37 XM_B_PhoneNumber 31686 7.91 6.18 8.64 38 XM_B_Unsub 30518 11.20 18.03 8.32 39 TooManyTo_001 29330 6.71 3.67 8.00 40 MIME_HTML_ONLY_MULTI 29180 6.52 3.12 7.96 41 LotsOfNums_01 26764 7.23 7.06 7.30 42 TR_XM_DK_Bayes 24734 4.90 0.51 6.74 43 TR_XM_DK_Bayes1 24216 4.79 0.50 6.60 44 TR_XM_BayesUnsub 22487 9.48 17.41 6.13 45 XM_DKIMWhitelistDomains 22451 4.33 0.08 6.12 46 BAYES_60 22020 6.89 9.00 6.00 47 IN_ZIMBRA_NJ_WHITELIST 22016 4.26 0.14 6.00 48 TR_XM_DK_Bayes2 20870 4.11 0.35 5.69 49 BAYES_40 20585 4.46 1.71 5.61 50 LOTS_OF_MONEY 19812 7.05 10.97 5.40 51 XM_H_Long_From01 18646 5.17 5.36 5.08 52 T_TooManySym_01 18610 4.29 2.42 5.07 53 XM_H_GMP 18114 4.91 4.85 4.94 54 BAYES_20 17752 3.83 1.42 4.84 55 TR_MAX_INTL_RELAY 17445 7.73 14.77 4.76 56 RCVD_IN_MSPIKE_H3 16798 4.25 3.47 4.58 57 RCVD_IN_MSPIKE_WL 16798 4.25 3.47 4.58 58 XMSubNoVowel 16678 3.42 0.73 4.55 59 XM_B_Phish_Phrases 16619 5.58 8.07 4.53 60 XM_B_SpammyWords3 16352 7.47 14.60 4.46 61 HTML_IMAGE_RATIO_06 16335 4.29 3.89 4.45 62 MIME_QP_LONG_LINE 16004 4.09 3.43 4.36 63 XM_DK_Undo_02 15311 14.23 38.08 4.17 64 RCVD_IN_VALIDITY_SAFE 15199 3.51 2.00 4.14 65 XM_PDF 15131 3.16 0.87 4.13 66 HTML_IMAGE_RATIO_02 14192 4.47 5.90 3.87 67 BAYES_05 13680 2.80 0.60 3.73 68 XM_UncommonTLD01 13382 4.21 5.54 3.65 69 TR_XM_SpammyWords4 13336 5.43 9.69 3.64 70 T_REMOTE_IMAGE 12354 2.80 1.45 3.37 71 BOUNCE_MESSAGE 11824 2.48 0.72 3.22 72 ANY_BOUNCE_MESSAGE 11824 2.48 0.72 3.22 73 RCVD_IN_VALIDITY_CERTIFIED 11609 2.69 1.58 3.17 74 RELAYCOUNTRY_META 11405 6.52 14.61 3.11 75 RCVD_IN_IADB_LISTED 11195 2.42 0.92 3.05 76 BAYES_80 10768 4.83 9.31 2.94 77 BOTNET_IPINHOSTNAME 10615 5.21 10.71 2.89 78 BAYES_99 10088 10.70 29.56 2.75 79 XMNumbers 9997 2.88 3.25 2.73 80 XMSubMetaSx_00 9964 4.07 7.29 2.72 81 RCVD_IN_IADB_SPF 9892 2.15 0.86 2.70 82 T_TooManySym_02 9736 2.06 0.66 2.65 83 TooManyTo_002 9506 2.02 0.67 2.59 84 HTML_IMAGE_RATIO_08 9109 2.74 3.36 2.48 85 MAILING_LIST_MULTI 8933 2.40 2.32 2.44 86 RCVD_IN_IADB_SENDERID 8889 1.96 0.84 2.42 87 RCVD_IN_IADB_DK 8749 1.93 0.84 2.39 88 HTML_MIME_NO_HTML_TAG 8464 2.23 2.05 2.31 89 XMSubLongNoVowel 8420 1.69 0.25 2.30 90 XMSubGarbage 8277 1.60 0.05 2.26 91 XM_B_SpammyTLD 8244 2.54 3.25 2.25 92 DKIM_INVALID 8036 3.62 7.00 2.19 93 XM_Body_Dirty_Words 7840 3.32 6.11 2.14 94 INVALID_MSGID 7778 1.59 0.33 2.12 95 TR_XM_DKIM_Undo 7624 9.91 28.47 2.08 96 BAYES_999 7594 8.25 22.90 2.07 97 MIME_HTML_MOSTLY 7292 2.44 3.51 1.99 98 RCVD_IN_IADB_VOUCHED 7260 1.49 0.33 1.98 99 XM_CamelCaseFrm001 6870 2.27 3.20 1.87 100 BAYES_95 6667 2.79 5.09 1.82 101 XM_B_URI_Unicode 6440 2.14 3.04 1.76 102 TO_MALFORMED 6286 1.21 0.02 1.71 103 T_XMDrugObfuBody_14 6240 2.42 4.13 1.70 104 TR_XM_SpammyRelay 6190 4.42 10.89 1.69 105 FROM_EXCESS_BASE64 6141 1.81 2.12 1.67 106 XM_DK_Undo_01 6067 1.63 1.59 1.65 107 TR_XM_PhishingBody 6053 2.80 5.53 1.65 108 SUBJ_ALL_CAPS 5981 1.69 1.83 1.63 109 TR_XM_SpammyWords5 5672 2.12 3.46 1.55 110 TM2_M_URI_OPT_OUT 5535 1.69 2.11 1.51 111 TooManyTo_003 5489 1.23 0.58 1.50 112 URI_NOVOWEL 5488 1.47 1.40 1.50 113 BOTNET 5418 4.02 10.06 1.48 114 TR_Symld_Words 5241 1.37 1.24 1.43 115 RCVD_IN_IADB_OPTIN 5005 1.02 0.19 1.36 116 XM_SendGrid 4967 1.35 1.34 1.35 117 XMDiploma_00 4930 1.92 3.29 1.34 118 XM_B_Investor 4833 2.16 4.15 1.32 119 TR_XM_UnparsRelay 4793 4.00 10.39 1.31 120 KHOP_HELO_FCRDNS 4792 1.46 1.83 1.31 121 UNTRUSTED_Relay 4623 2.34 4.89 1.26 122 IN_HORDE_ADDRESS_BOOK 4582 0.91 0.12 1.25 123 T_XMDrugObfuBody_08 4576 1.68 2.72 1.25 124 XM_SPF_SoftFail 4555 1.72 2.84 1.24 125 HELO_NODOT 4400 0.91 0.22 1.20 126 T_TooManySym_03 4396 0.90 0.19 1.20 127 HELO_NO_DOMAIN 4392 0.91 0.22 1.20 128 XM_B_Unsub2 4380 1.76 3.10 1.19 129 XMStockSpam_06 4212 1.35 1.83 1.15 130 XMBdyGiftCard01 4109 1.06 0.92 1.12 131 TooManyTo_004 4021 0.93 0.53 1.10 132 TM2_M_VERY_LONG_WORD 3954 1.71 3.20 1.08 133 XMGappySubj_01 3875 0.83 0.30 1.06 134 XM_GoogleGroups 3859 0.95 0.72 1.05 135 XMCapTrack 3831 0.87 0.47 1.04 136 URI_HEX 3624 1.11 1.39 0.99 137 T_SCC_BODY_TEXT_LINE 3575 0.96 0.92 0.97 138 TR_DCC_Bayes_99 3429 6.96 21.25 0.93 139 XMSexyCombo_05 3428 1.92 4.26 0.93 140 XM_E_Blogspot 3411 0.68 0.08 0.93 141 XM_OfRef6 3397 1.56 3.07 0.93 142 XM_ShortIntro_01 3394 0.77 0.40 0.93 143 TVD_SPACE_RATIO 3336 0.71 0.23 0.91 144 TooManyTo_005 3249 0.77 0.48 0.89 145 T_XMDrugObfuBody_00 3234 1.36 2.49 0.88 146 XM_H_PHPMailer 3179 0.81 0.66 0.87 147 RELAYCOUNTRY_CA 3170 2.46 6.24 0.86 148 T_FILL_THIS_FORM_SHORT 3143 1.13 1.78 0.86 149 TR_XM_DK_SendGrid 3080 0.84 0.83 0.84 150 XM_UB50 3048 1.32 2.49 0.83 151 FROM_GOV_DKIM_AU 2871 0.68 0.45 0.78 152 XMBrknScrpt_02 2864 1.00 1.52 0.78 153 TR_MetaPhish_Combo_01 2800 1.02 1.62 0.76 154 XM_H_Long_From02 2701 0.87 1.19 0.74 155 TVD_RCVD_IP 2645 0.70 0.65 0.72 156 TR_XM_Base64_M1 2636 0.81 1.02 0.72 157 DKIM_ADSP_CUSTOM_MED 2613 0.91 1.37 0.71 158 HTML_TAG_BALANCE_BODY 2582 0.78 0.97 0.70 159 XM_ProductURIs 2577 0.84 1.15 0.70 160 XM_B_SpammyWords4 2548 1.34 2.86 0.69 161 XMLngstWrd_00 2489 0.63 0.53 0.68 162 XMNoVowels 2365 0.69 0.79 0.64 163 HTTPS_HTTP_MISMATCH 2346 0.84 1.30 0.64 164 SpammyFromTLD_01 2339 0.97 1.77 0.64 165 XMGenDplmaNmb 2314 0.98 1.81 0.63 166 T_OBFU_PDF_ATTACH 2274 0.49 0.17 0.62 167 T_Symld_Words_02 2216 0.63 0.68 0.60 168 RCVD_IN_PBL 2215 0.75 1.11 0.60 169 XM_B_COPY_HTML 2176 0.78 1.23 0.59 170 RELAYCOUNTRY_AU 2121 1.13 2.43 0.58 171 T_XMHurry_00 2116 1.28 2.95 0.58 172 XMGappySubj_02 2017 0.41 0.08 0.55 173 XMPhish14 1942 0.63 0.85 0.53 174 MPART_ALT_DIFF_COUNT 1924 0.68 1.05 0.52 175 URI_TRY_3LD 1915 0.70 1.14 0.52 176 TO_NO_BRKTS_HTML_ONLY 1915 0.48 0.39 0.52 177 LongTLD 1886 0.71 1.17 0.51 178 HTML_IMAGE_ONLY_20 1876 0.72 1.23 0.51 179 XMPhish30 1861 0.95 2.00 0.51 180 MSGID_FROM_MTA_HEADER 1849 0.40 0.15 0.50 181 XM_B_FormFill 1784 0.35 0.02 0.49 182 NML_ADSP_CUSTOM_MED 1772 0.63 0.99 0.48 183 XMBody_17 1767 1.08 2.49 0.48 184 XMSlimDrugH 1759 0.67 1.12 0.48 185 XM_B_DNDMA 1688 0.56 0.81 0.46 186 HTML_IMAGE_ONLY_32 1672 0.39 0.22 0.46 187 RCVD_IN_BL_SPAMCOP_NET 1596 2.62 7.80 0.44 188 XMMoneyMeta_00 1588 0.60 0.99 0.43 189 XMLngstWrd_01 1588 0.44 0.46 0.43 190 XMBody_95 1584 0.37 0.24 0.43 191 TM2_M_OBFU_COMMENT 1582 0.61 1.03 0.43 192 XMDateMe_00 1560 0.40 0.35 0.43 193 T_MANY_PILL_PRICE 1559 0.30 0.00 0.43 194 SpammyFromTLD_02 1546 0.83 1.78 0.42 195 DIET_1 1540 1.11 2.73 0.42 196 FORGED_GMAIL_RCVD 1511 0.61 1.08 0.41 197 T_STY_INVIS_DIRECT 1498 0.54 0.84 0.41 198 XMSubMetaI_00 1440 0.57 0.98 0.39 199 XMBSHREFv2 1413 0.37 0.33 0.39 200 HELO_MISC_IP 1331 0.28 0.08 0.36 ----------------------------------------------------------------------