Email: 495317 Autolearn: 0 AvgScore: 4.41 AvgScanTime: 1.33 sec Spam: 141845 Autolearn: 0 AvgScore: 14.90 AvgScanTime: 1.45 sec Ham: 353472 Autolearn: 0 AvgScore: 0.20 AvgScanTime: 1.28 sec Time Spent Running SA: 183.33 hours Time Spent Processing Spam: 57.22 hours Time Spent Processing Ham: 126.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134093 89.64 94.53 87.68 2 DKIM_SIGNED 122762 74.37 86.55 69.49 3 XM_B_Unicode 117081 72.51 82.54 68.49 4 XM_DK_Pass 115475 72.01 81.41 68.24 5 RELAYCOUNTRY_US 115055 81.27 81.11 81.33 6 DKIM_VALID 113161 70.70 79.78 67.06 7 DCC_CHECK 106241 46.10 74.90 34.54 8 XM_B_SpammyWords 94496 50.13 66.62 43.51 9 XMListUnsubscribeExists 94001 49.46 66.27 42.71 10 DKIM_VALID_AU 89032 56.12 62.77 53.46 11 XM_B_Unicode3 70802 43.89 49.92 41.47 12 LOC_TINY_FONT_1 66006 30.65 46.53 24.27 13 BAYES_50 60517 55.77 42.66 61.03 14 RCVD_IN_MSPIKE_H2 59873 36.47 42.21 34.17 15 XM_B_SpammyWords2 53835 23.35 37.95 17.49 16 HTML_FONT_LOW_CONTRAST 51842 31.92 36.55 30.07 17 XM_DK_Undo_02 50486 13.06 35.59 4.01 18 T_KAM_HTML_FONT_INVALID 44209 22.75 31.17 19.37 19 FVGT_m_MULTI_ODD 43522 25.48 30.68 23.40 20 MIME_HTML_ONLY 43002 22.99 30.32 20.05 21 DKIM_VALID_EF 41631 28.11 29.35 27.62 22 BAYES_99 37988 9.66 26.78 2.79 23 TR_XM_DKIM_Undo 36142 8.51 25.48 1.70 24 XMSubLong 35308 24.09 24.89 23.77 25 T_TM2_M_HEADER_IN_MSG 33836 31.24 23.85 34.21 26 DCC_CHECK_NEGATIVE 33206 53.37 23.41 65.40 27 XM_Multi_Part_URI 29570 14.47 20.85 11.91 28 TR_XM_DK_Unsub 28947 13.79 20.41 11.13 29 BAYES_999 28862 7.34 20.35 2.12 30 TR_DCC_Bayes_99 26533 6.04 18.71 0.96 31 UNPARSEABLE_RELAY 25403 13.47 17.91 11.69 32 XM_B_Unsub 24751 10.93 17.45 8.31 33 TR_XM_BayesUnsub 23835 9.30 16.80 6.28 34 RELAYCOUNTRY_META 23192 6.87 16.35 3.07 35 TR_MAX_INTL_RELAY 20963 7.64 14.78 4.77 36 XM_B_SpammyWords3 20061 6.96 14.14 4.07 37 BOTNET 17673 4.45 12.46 1.24 38 LOTS_OF_MONEY 16648 7.14 11.74 5.30 39 TR_XM_SpammyRelay 15891 4.31 11.20 1.54 40 BOTNET_IPINHOSTNAME 15815 5.10 11.15 2.67 41 TR_XM_SpammyWords4 15031 5.53 10.60 3.50 42 XM_Evil_Numbers_Gen 14181 10.50 10.00 10.70 43 FSL_BULK_SIG 13946 7.85 9.83 7.06 44 BAYES_80 13265 4.78 9.35 2.94 45 TR_XM_UnparsRelay 13211 3.71 9.31 1.47 46 BAYES_60 12977 7.07 9.15 6.23 47 RCVD_IN_BL_SPAMCOP_NET 12867 2.94 9.07 0.48 48 TR_XM_SpammyWords2 12541 2.75 8.84 0.31 49 XM_B_Phish_Phrases 11649 5.86 8.21 4.91 50 T_SCC_BODY_TEXT_LINE 11184 8.27 7.88 8.42 51 XMSubMetaSx_00 10591 4.62 7.47 3.48 52 XM_Body_Dirty_Words 10515 4.06 7.41 2.72 53 UNTRUSTED_Relay 10401 2.96 7.33 1.20 54 LotsOfNums_01 10370 8.07 7.31 8.38 55 TR_XM_SPAMCOP 10138 2.28 7.15 0.32 56 XM_B_PhoneNumber 10044 8.53 7.08 9.11 57 DKIM_INVALID 9601 3.67 6.77 2.43 58 MPART_ALT_DIFF 9070 4.72 6.39 4.05 59 HTML_IMAGE_RATIO_02 8904 4.56 6.28 3.87 60 XM_UncommonTLD01 8687 4.81 6.12 4.28 61 RELAYCOUNTRY_CA 8191 2.34 5.77 0.96 62 XM_B_Investor 7678 2.58 5.41 1.45 63 BAYES_95 7142 2.74 5.04 1.83 64 XM_H_GMP 7120 5.49 5.02 5.68 65 HTML_IMAGE_RATIO_04 7023 4.01 4.95 3.64 66 XMStrtUSub 6820 5.24 4.81 5.42 67 RCVD_IN_VALIDITY_RPBL 6802 1.40 4.80 0.04 68 XM_H_Long_From01 6699 5.23 4.72 5.44 69 TooManyTo_001 6208 7.02 4.38 8.07 70 TR_XM_PhishingBody 6206 2.30 4.38 1.47 71 XMSexyCombo_05 6038 2.40 4.26 1.66 72 T_XMDrugObfuBody_14 5960 2.76 4.20 2.18 73 XM_B_SpammyTLD 5931 2.81 4.18 2.26 74 XM_UB50 5673 1.63 4.00 0.69 75 TM2_M_VERY_LONG_WORD 5671 6.57 4.00 7.61 76 T_REMOTE_IMAGE 5542 3.99 3.91 4.02 77 XM_SPF_SoftFail 5480 1.99 3.86 1.24 78 TR_XM_SpammyWords5 5069 1.86 3.57 1.17 79 XMNumbers 5049 3.00 3.56 2.78 80 XMDiploma_00 4948 2.10 3.49 1.55 81 HTML_IMAGE_RATIO_06 4761 2.75 3.36 2.51 82 MIME_HTML_ONLY_MULTI 4694 2.56 3.31 2.26 83 MIME_HTML_MOSTLY 4671 2.42 3.29 2.07 84 T_XMDrugObfuBody_08 4469 2.07 3.15 1.64 85 XM_B_Unsub2 4395 1.80 3.10 1.29 86 DKIM_ADSP_NXDOMAIN 4325 1.08 3.05 0.29 87 MIME_QP_LONG_LINE 4306 4.22 3.04 4.69 88 RCVD_IN_PSBL 4179 0.98 2.95 0.19 89 HTML_MIME_NO_HTML_TAG 4094 3.09 2.89 3.18 90 XM_OfRef6 4009 1.58 2.83 1.08 91 T_XMHurry_00 4002 1.17 2.82 0.51 92 RCVD_IN_MSPIKE_WL 3986 4.30 2.81 4.89 93 RCVD_IN_MSPIKE_H3 3986 4.30 2.81 4.89 94 XM_CamelCaseFrm001 3897 2.25 2.75 2.06 95 XM_B_SpammyWords4 3775 1.24 2.66 0.67 96 DIET_1 3742 0.95 2.64 0.28 97 XM_URI_RBL 3724 1.00 2.63 0.35 98 TM2_M_URI_OPT_OUT 3702 1.82 2.61 1.50 99 RELAYCOUNTRY_AU 3689 1.08 2.60 0.47 100 HTML_IMAGE_RATIO_08 3626 2.16 2.56 2.00 101 T_TooManySym_01 3626 4.40 2.56 5.14 102 XM_B_URI_Unicode 3547 2.10 2.50 1.94 103 ALL_TRUSTED 3509 12.24 2.47 16.16 104 XMBody_17 3306 1.00 2.33 0.46 105 MAILING_LIST_MULTI 3291 2.26 2.32 2.24 106 NO_DNS_FOR_FROM 3273 0.85 2.31 0.27 107 TR_XM_MaxWHORU 3238 0.80 2.28 0.21 108 XMStockSpam_06 3229 1.69 2.28 1.45 109 TR_XM_NoHeaderRelay 3144 0.76 2.22 0.17 110 TR_XM_INV_DKIM 3126 0.74 2.20 0.15 111 BAYES_40 2939 5.17 2.07 6.41 112 SpammyFromTLD_01 2878 1.06 2.03 0.68 113 MPART_ALT_DIFF_COUNT 2845 1.03 2.01 0.63 114 XM_SendGrid 2728 1.59 1.92 1.46 115 KHOP_HELO_FCRDNS 2664 3.75 1.88 4.51 116 XMGenDplmaNmb 2658 1.20 1.87 0.93 117 BOTNET_NORDNS 2555 0.54 1.80 0.03 118 BAYES_20 2475 3.79 1.74 4.61 119 XMBrknScrpt_02 2467 1.03 1.74 0.74 120 RCVD_IN_VALIDITY_SAFE 2402 3.12 1.69 3.69 121 SpammyFromTLD_02 2384 0.62 1.68 0.19 122 SHORTCIRCUIT 2369 0.48 1.67 0.00 123 RCVD_IN_ZEN_LASTEXTERNAL 2369 0.48 1.67 0.00 124 ANY_BOUNCE_MESSAGE 2357 7.47 1.66 9.80 125 BOUNCE_MESSAGE 2357 7.47 1.66 9.80 126 FROM_EXCESS_BASE64 2356 1.70 1.66 1.72 127 T_FILL_THIS_FORM_SHORT 2356 1.14 1.66 0.94 128 T_XMDrugObfuBody_00 2299 0.99 1.62 0.74 129 NORDNS_LOW_CONTRAST 2275 0.53 1.60 0.10 130 XM_H_Long_From02 2259 1.02 1.59 0.78 131 TR_XM_InvalidRelay 2249 0.46 1.59 0.00 132 SUBJ_ALL_CAPS 2220 1.55 1.57 1.55 133 HTML_FONT_TINY_NORDNS 2189 0.51 1.54 0.10 134 XM_PDF 2188 4.96 1.54 6.33 135 T_STY_INVIS_DIRECT 2172 0.82 1.53 0.53 136 DKIM_ADSP_CUSTOM_MED 2119 1.02 1.49 0.82 137 XMSubMetaI_00 2106 0.93 1.48 0.70 138 RCVD_IN_VALIDITY_CERTIFIED 2101 2.47 1.48 2.86 139 LongTLD 2086 0.77 1.47 0.49 140 LONG_INVISIBLE_TEXT 2063 0.48 1.45 0.09 141 RCVD_IN_PBL 2031 0.84 1.43 0.61 142 RELAYCOUNTRY_RU 1996 0.42 1.41 0.02 143 XM_DK_Undo_01 1980 1.62 1.40 1.71 144 USER_IN_DEF_DKIM_WL 1975 8.99 1.39 12.04 145 URI_TRY_3LD 1974 0.82 1.39 0.59 146 HTTPS_HTTP_MISMATCH 1935 0.87 1.36 0.68 147 XMPhish30 1906 0.75 1.34 0.52 148 RDNS_DYNAMIC 1883 0.54 1.33 0.23 149 XM_ProductURIs 1827 0.77 1.29 0.57 150 NML_ADSP_CUSTOM_MED 1826 0.74 1.29 0.53 151 T_Symld_Words_02 1804 0.81 1.27 0.62 152 URI_HEX 1798 1.12 1.27 1.07 153 XM_B_Phish66 1787 0.58 1.26 0.30 154 THIS_AD 1764 0.71 1.24 0.49 155 TR_LOTS_OF_MONEY3 1757 0.47 1.24 0.16 156 XM_B_COPY_HTML 1751 0.73 1.23 0.53 157 TR_MetaPhish_Combo_01 1746 0.83 1.23 0.67 158 XM_DIRTYINTL 1739 0.40 1.23 0.07 159 PDS_RDNS_DYNAMIC_FP 1704 0.43 1.20 0.12 160 FORGED_GMAIL_RCVD 1692 0.70 1.19 0.50 161 TVD_RCVD_IP 1625 0.76 1.15 0.60 162 URI_NOVOWEL 1624 1.59 1.14 1.77 163 XM_B_DNDMA 1618 0.69 1.14 0.52 164 XM_B_SEO 1607 0.47 1.13 0.20 165 TR_XM_PHPDW 1596 0.53 1.13 0.29 166 MultiRelay_CC 1594 0.38 1.12 0.08 167 XMHTML_After_End 1584 0.56 1.12 0.33 168 TR_XM_PHPForged 1583 0.52 1.12 0.29 169 TR_XM_FormFill2 1567 0.52 1.10 0.29 170 XM_HighProb1 1565 0.32 1.10 0.01 171 TR_LOTS_OF_MONEY2 1533 0.46 1.08 0.21 172 T_MONEY_PERCENT 1533 0.46 1.08 0.21 173 XM_H_PHPOS 1529 0.51 1.08 0.28 174 TR_XM_SEO4 1517 0.37 1.07 0.10 175 TM2_M_OBFU_COMMENT 1505 0.57 1.06 0.37 176 RELAYCOUNTRY_GB 1494 0.59 1.05 0.41 177 XMSexyCombo_01 1470 0.50 1.04 0.29 178 TR_XM_RelayPhish 1458 0.36 1.03 0.09 179 XM_UB60 1458 0.33 1.03 0.04 180 XM_UB99 1449 0.29 1.02 0.00 181 TR_XM_DK_SendGrid 1387 0.97 0.98 0.97 182 XMSlimDrugH 1369 0.63 0.97 0.49 183 RELAYCOUNTRY_FR 1358 0.40 0.96 0.18 184 SHOPIFY_IMG_NOT_RCVD_SFY 1343 0.42 0.95 0.21 185 XM_B_REG_HTML 1340 0.44 0.94 0.23 186 RCVD_IN_SORBS_DUL 1320 0.29 0.93 0.03 187 XMBody_78 1300 0.45 0.92 0.26 188 XMBdyGiftCard01 1283 0.70 0.90 0.61 189 TR_Symld_Words 1275 1.32 0.90 1.49 190 XMSubMetaSSx_00 1261 0.41 0.89 0.22 191 HTML_IMAGE_ONLY_20 1259 0.65 0.89 0.55 192 MIME_CHARSET_FARAWAY 1244 2.71 0.88 3.44 193 RCVD_IN_IADB_LISTED 1236 2.64 0.87 3.35 194 XMSubMetaSxObfu_02 1232 0.38 0.87 0.18 195 BAYES_05 1223 2.37 0.86 2.98 196 HELO_DYNAMIC_SPLIT_IP 1212 0.25 0.85 0.01 197 HTML_FONT_FACE_BAD 1187 0.44 0.84 0.29 198 XM_H_Undi_Recip 1168 0.43 0.82 0.27 199 TM2_M_A_HREF_HREF 1140 0.38 0.80 0.22 200 TR_XM_Base64_M1 1121 0.65 0.79 0.59 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 309928 89.64 94.53 87.68 2 RELAYCOUNTRY_US 287489 81.27 81.11 81.33 3 DKIM_SIGNED 245617 74.37 86.55 69.49 4 XM_B_Unicode 242088 72.51 82.54 68.49 5 XM_DK_Pass 241223 72.01 81.41 68.24 6 DKIM_VALID 237042 70.70 79.78 67.06 7 DCC_CHECK_NEGATIVE 231159 53.37 23.41 65.40 8 BAYES_50 215737 55.77 42.66 61.03 9 DKIM_VALID_AU 188952 56.12 62.77 53.46 10 XM_B_SpammyWords 153806 50.13 66.62 43.51 11 XMListUnsubscribeExists 150960 49.46 66.27 42.71 12 XM_B_Unicode3 146584 43.89 49.92 41.47 13 DCC_CHECK 122084 46.10 74.90 34.54 14 T_TM2_M_HEADER_IN_MSG 120910 31.24 23.85 34.21 15 RCVD_IN_MSPIKE_H2 120784 36.47 42.21 34.17 16 HTML_FONT_LOW_CONTRAST 106272 31.92 36.55 30.07 17 DKIM_VALID_EF 97619 28.11 29.35 27.62 18 LOC_TINY_FONT_1 85784 30.65 46.53 24.27 19 XMSubLong 84023 24.09 24.89 23.77 20 FVGT_m_MULTI_ODD 82700 25.48 30.68 23.40 21 MIME_HTML_ONLY 70886 22.99 30.32 20.05 22 T_KAM_HTML_FONT_INVALID 68484 22.75 31.17 19.37 23 XM_B_SpammyWords2 61814 23.35 37.95 17.49 24 ALL_TRUSTED 57116 12.24 2.47 16.16 25 USER_IN_DEF_DKIM_WL 42570 8.99 1.39 12.04 26 XM_Multi_Part_URI 42107 14.47 20.85 11.91 27 UNPARSEABLE_RELAY 41314 13.47 17.91 11.69 28 BAYES_00 39481 8.16 0.67 11.17 29 TR_XM_DK_Unsub 39336 13.79 20.41 11.13 30 XM_Evil_Numbers_Gen 37833 10.50 10.00 10.70 31 BOUNCE_MESSAGE 34652 7.47 1.66 9.80 32 ANY_BOUNCE_MESSAGE 34652 7.47 1.66 9.80 33 XM_B_PhoneNumber 32191 8.53 7.08 9.11 34 T_SCC_BODY_TEXT_LINE 29760 8.27 7.88 8.42 35 LotsOfNums_01 29621 8.07 7.31 8.38 36 XM_B_Unsub 29369 10.93 17.45 8.31 37 TooManyTo_001 28539 7.02 4.38 8.07 38 TM2_M_VERY_LONG_WORD 26888 6.57 4.00 7.61 39 TR_XM_DK_Bayes 25432 5.28 0.52 7.19 40 FSL_BULK_SIG 24959 7.85 9.83 7.06 41 TR_XM_DK_Bayes1 24913 5.18 0.52 7.05 42 MAY_BE_FORGED 22785 4.80 0.68 6.45 43 BAYES_40 22674 5.17 2.07 6.41 44 XM_PDF 22361 4.96 1.54 6.33 45 TR_XM_BayesUnsub 22214 9.30 16.80 6.28 46 IN_ZIMBRA_NJ_WHITELIST 22052 4.50 0.15 6.24 47 BAYES_60 22020 7.07 9.15 6.23 48 XM_DKIMWhitelistDomains 21523 4.41 0.21 6.09 49 TR_XM_DK_Bayes2 21242 4.40 0.38 6.01 50 XM_H_GMP 20070 5.49 5.02 5.68 51 XM_H_Long_From01 19213 5.23 4.72 5.44 52 XMStrtUSub 19148 5.24 4.81 5.42 53 LOTS_OF_MONEY 18724 7.14 11.74 5.30 54 T_TooManySym_01 18167 4.40 2.56 5.14 55 XM_B_Phish_Phrases 17355 5.86 8.21 4.91 56 RCVD_IN_MSPIKE_H3 17295 4.30 2.81 4.89 57 RCVD_IN_MSPIKE_WL 17295 4.30 2.81 4.89 58 TR_MAX_INTL_RELAY 16865 7.64 14.78 4.77 59 MIME_QP_LONG_LINE 16572 4.22 3.04 4.69 60 BAYES_20 16303 3.79 1.74 4.61 61 KHOP_HELO_FCRDNS 15930 3.75 1.88 4.51 62 XM_UncommonTLD01 15146 4.81 6.12 4.28 63 XM_B_SpammyWords3 14403 6.96 14.14 4.07 64 MPART_ALT_DIFF 14321 4.72 6.39 4.05 65 T_REMOTE_IMAGE 14218 3.99 3.91 4.02 66 XM_DK_Undo_02 14179 13.06 35.59 4.01 67 HTML_IMAGE_RATIO_02 13695 4.56 6.28 3.87 68 HTML_IMAGE_ONLY_32 13559 2.79 0.20 3.84 69 RCVD_IN_VALIDITY_SAFE 13041 3.12 1.69 3.69 70 HTML_IMAGE_RATIO_04 12860 4.01 4.95 3.64 71 TR_XM_SpammyWords4 12362 5.53 10.60 3.50 72 XMSubMetaSx_00 12302 4.62 7.47 3.48 73 MIME_CHARSET_FARAWAY 12159 2.71 0.88 3.44 74 RCVD_IN_IADB_LISTED 11840 2.64 0.87 3.35 75 CHARSET_FARAWAY_HEADER 11727 2.57 0.71 3.32 76 HTML_MIME_NO_HTML_TAG 11228 3.09 2.89 3.18 77 RELAYCOUNTRY_META 10840 6.87 16.35 3.07 78 BAYES_05 10523 2.37 0.86 2.98 79 RCVD_IN_IADB_SPF 10453 2.34 0.79 2.96 80 BAYES_80 10403 4.78 9.35 2.94 81 RCVD_IN_VALIDITY_CERTIFIED 10126 2.47 1.48 2.86 82 BAYES_99 9879 9.66 26.78 2.79 83 XMNumbers 9824 3.00 3.56 2.78 84 T_TooManySym_02 9678 2.17 0.76 2.74 85 XM_Body_Dirty_Words 9616 4.06 7.41 2.72 86 TooManyTo_002 9544 2.12 0.69 2.70 87 BOTNET_IPINHOSTNAME 9441 5.10 11.15 2.67 88 RCVD_IN_IADB_SENDERID 9405 2.12 0.76 2.66 89 RCVD_IN_IADB_DK 9177 2.07 0.77 2.60 90 HTML_IMAGE_RATIO_06 8879 2.75 3.36 2.51 91 DKIM_INVALID 8575 3.67 6.77 2.43 92 MIME_HTML_ONLY_MULTI 8006 2.56 3.31 2.26 93 XM_B_SpammyTLD 7989 2.81 4.18 2.26 94 MAILING_LIST_MULTI 7909 2.26 2.32 2.24 95 RCVD_IN_IADB_VOUCHED 7728 1.67 0.38 2.19 96 T_XMDrugObfuBody_14 7714 2.76 4.20 2.18 97 INVALID_MSGID 7691 1.64 0.30 2.18 98 BAYES_999 7492 7.34 20.35 2.12 99 MIME_HTML_MOSTLY 7333 2.42 3.29 2.07 100 XM_CamelCaseFrm001 7264 2.25 2.75 2.06 101 HTML_IMAGE_RATIO_08 7052 2.16 2.56 2.00 102 XM_B_URI_Unicode 6864 2.10 2.50 1.94 103 BAYES_95 6452 2.74 5.04 1.83 104 TO_MALFORMED 6261 1.27 0.02 1.77 105 URI_NOVOWEL 6242 1.59 1.14 1.77 106 FROM_EXCESS_BASE64 6078 1.70 1.66 1.72 107 XM_DK_Undo_01 6039 1.62 1.40 1.71 108 TR_XM_DKIM_Undo 6011 8.51 25.48 1.70 109 XMSexyCombo_05 5865 2.40 4.26 1.66 110 T_XMDrugObfuBody_08 5792 2.07 3.15 1.64 111 SUBJ_ALL_CAPS 5474 1.55 1.57 1.55 112 XMDiploma_00 5467 2.10 3.49 1.55 113 TR_XM_SpammyRelay 5451 4.31 11.20 1.54 114 RCVD_IN_IADB_OPTIN 5434 1.16 0.22 1.54 115 TooManyTo_003 5368 1.26 0.60 1.52 116 TM2_M_URI_OPT_OUT 5293 1.82 2.61 1.50 117 TR_Symld_Words 5284 1.32 0.90 1.49 118 TR_XM_PhishingBody 5195 2.30 4.38 1.47 119 TR_XM_UnparsRelay 5184 3.71 9.31 1.47 120 XM_SendGrid 5156 1.59 1.92 1.46 121 XM_B_Investor 5121 2.58 5.41 1.45 122 XMStockSpam_06 5121 1.69 2.28 1.45 123 XMLngstWrd_00 5010 1.19 0.64 1.42 124 HELO_NODOT 4798 1.07 0.37 1.36 125 HELO_NO_DOMAIN 4788 1.07 0.36 1.35 126 IN_HORDE_ADDRESS_BOOK 4734 0.98 0.10 1.34 127 XM_B_Unsub2 4544 1.80 3.10 1.29 128 XMCapTrack 4472 1.04 0.50 1.27 129 XM_SPF_SoftFail 4386 1.99 3.86 1.24 130 BOTNET 4386 4.45 12.46 1.24 131 TVD_SPACE_RATIO 4317 0.97 0.34 1.22 132 UNTRUSTED_Relay 4246 2.96 7.33 1.20 133 TR_XM_SpammyWords5 4122 1.86 3.57 1.17 134 T_OBFU_PDF_ATTACH 4113 0.97 0.47 1.16 135 XM_GoogleGroups 4090 1.04 0.74 1.16 136 TooManyTo_004 4045 0.97 0.55 1.14 137 XM_OfRef6 3818 1.58 2.83 1.08 138 URI_HEX 3769 1.12 1.27 1.07 139 T_TooManySym_03 3763 0.82 0.20 1.06 140 XM_ShortIntro_01 3489 0.86 0.54 0.99 141 TooManyTo_005 3440 0.84 0.51 0.97 142 TR_XM_DK_SendGrid 3439 0.97 0.98 0.97 143 TR_DCC_Bayes_99 3401 6.04 18.71 0.96 144 RELAYCOUNTRY_CA 3379 2.34 5.77 0.96 145 XMGappySubj_01 3340 0.75 0.27 0.94 146 T_FILL_THIS_FORM_SHORT 3312 1.14 1.66 0.94 147 XMGenDplmaNmb 3275 1.20 1.87 0.93 148 TM2_M_BODY_EMPTY 2984 0.63 0.11 0.84 149 DKIM_ADSP_CUSTOM_MED 2915 1.02 1.49 0.82 150 XM_H_Long_From02 2771 1.02 1.59 0.78 151 XMBrknScrpt_02 2622 1.03 1.74 0.74 152 T_XMDrugObfuBody_00 2602 0.99 1.62 0.74 153 GMD_PDF_EMPTY_BODY 2600 0.55 0.08 0.74 154 TO_NO_BRKTS_HTML_ONLY 2562 0.66 0.51 0.72 155 XMSubMetaI_00 2479 0.93 1.48 0.70 156 XM_H_PHPMailer 2475 0.71 0.73 0.70 157 XM_UB50 2424 1.63 4.00 0.69 158 HTTPS_HTTP_MISMATCH 2397 0.87 1.36 0.68 159 SpammyFromTLD_01 2387 1.06 2.03 0.68 160 XMGappySubj_02 2385 0.49 0.04 0.67 161 TR_MetaPhish_Combo_01 2370 0.83 1.23 0.67 162 XM_B_SpammyWords4 2363 1.24 2.66 0.67 163 T_TVD_MIME_NO_HEADERS 2281 0.47 0.03 0.65 164 MPART_ALT_DIFF_COUNT 2232 1.03 2.01 0.63 165 T_Symld_Words_02 2196 0.81 1.27 0.62 166 XMBdyGiftCard01 2162 0.70 0.90 0.61 167 HTML_TAG_BALANCE_BODY 2143 0.63 0.67 0.61 168 RCVD_IN_PBL 2143 0.84 1.43 0.61 169 TVD_RCVD_IP 2130 0.76 1.15 0.60 170 TR_XM_Base64_M1 2100 0.65 0.79 0.59 171 LOW_PRICE 2088 0.53 0.39 0.59 172 URI_TRY_3LD 2086 0.82 1.39 0.59 173 XMNoVowels 2081 0.60 0.63 0.59 174 MSGID_FROM_MTA_HEADER 2056 0.47 0.20 0.58 175 FROM_GOV_DKIM_AU 2056 0.46 0.14 0.58 176 XM_ProductURIs 1999 0.77 1.29 0.57 177 HTML_IMAGE_ONLY_20 1941 0.65 0.89 0.55 178 XM_B_FormFill 1904 0.39 0.02 0.54 179 XM_B_COPY_HTML 1870 0.73 1.23 0.53 180 T_STY_INVIS_DIRECT 1867 0.82 1.53 0.53 181 NML_ADSP_CUSTOM_MED 1864 0.74 1.29 0.53 182 XM_B_DNDMA 1824 0.69 1.14 0.52 183 XMPhish30 1821 0.75 1.34 0.52 184 T_XMHurry_00 1815 1.17 2.82 0.51 185 FORGED_GMAIL_RCVD 1754 0.70 1.19 0.50 186 XMSubMetaSxObfu_03 1746 0.53 0.62 0.49 187 XMSlimDrugH 1732 0.63 0.97 0.49 188 THIS_AD 1730 0.71 1.24 0.49 189 LongTLD 1729 0.77 1.47 0.49 190 RCVD_IN_BL_SPAMCOP_NET 1706 2.94 9.07 0.48 191 XMBody_95 1667 0.39 0.17 0.47 192 RELAYCOUNTRY_AU 1650 1.08 2.60 0.47 193 XMLngstWrd_01 1634 0.46 0.45 0.46 194 XMBody_17 1630 1.00 2.33 0.46 195 FILL_THIS_FORM 1624 0.38 0.18 0.46 196 TRACKER_ID 1556 0.36 0.16 0.44 197 T_MANY_PILL_PRICE 1553 0.31 0.00 0.44 198 XMDateMe_00 1539 0.41 0.36 0.44 199 XMSubEmpty 1528 0.37 0.20 0.43 200 MISSING_HEADERS 1456 0.51 0.74 0.41 ----------------------------------------------------------------------