Email: 435056 Autolearn: 0 AvgScore: 4.58 AvgScanTime: 1.32 sec Spam: 133127 Autolearn: 0 AvgScore: 14.15 AvgScanTime: 1.47 sec Ham: 301929 Autolearn: 0 AvgScore: 0.36 AvgScanTime: 1.26 sec Time Spent Running SA: 159.97 hours Time Spent Processing Spam: 54.20 hours Time Spent Processing Ham: 105.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127629 90.06 95.87 87.49 2 DKIM_SIGNED 120305 78.94 90.37 73.90 3 XM_DK_Pass 115137 76.75 86.49 72.46 4 DKIM_VALID 114079 75.87 85.69 71.54 5 XM_B_Unicode 113917 75.39 85.57 70.91 6 RELAYCOUNTRY_US 110017 80.11 82.64 78.99 7 DCC_CHECK 99315 50.19 74.60 39.43 8 XM_B_SpammyWords 91207 52.70 68.51 45.72 9 XMListUnsubscribeExists 90376 54.22 67.89 48.19 10 DKIM_VALID_AU 89113 60.37 66.94 57.47 11 XM_B_Unicode3 64709 43.41 48.61 41.12 12 LOC_TINY_FONT_1 63135 35.08 47.42 29.64 13 BAYES_50 56853 55.58 42.71 61.25 14 T_SCC_BODY_TEXT_LINE 53141 41.47 39.92 42.16 15 XM_B_SpammyWords2 53031 26.34 39.83 20.39 16 RCVD_IN_MSPIKE_H2 52988 35.63 39.80 33.79 17 XM_DK_Undo_02 51279 15.20 38.52 4.91 18 HTML_FONT_LOW_CONTRAST 49126 31.69 36.90 29.39 19 T_KAM_HTML_FONT_INVALID 44070 24.66 33.10 20.94 20 FVGT_m_MULTI_ODD 43899 27.58 32.98 25.19 21 DKIM_VALID_EF 40628 28.61 30.52 27.76 22 BAYES_99 38985 11.44 29.28 3.57 23 MIME_HTML_ONLY 38539 25.78 28.95 24.39 24 TR_XM_DKIM_Undo 36638 10.13 27.52 2.47 25 XMSubLong 33749 25.93 25.35 26.19 26 DCC_CHECK_NEGATIVE 32072 49.37 24.09 60.51 27 BAYES_999 30381 8.89 22.82 2.75 28 TR_XM_DK_Unsub 29630 15.51 22.26 12.54 29 XM_Multi_Part_URI 28739 15.72 21.59 13.13 30 T_TM2_M_HEADER_IN_MSG 28335 26.99 21.28 29.51 31 TR_DCC_Bayes_99 27726 7.34 20.83 1.40 32 UNPARSEABLE_RELAY 25087 13.84 18.84 11.63 33 XM_B_Unsub 24389 13.12 18.32 10.83 34 TR_XM_BayesUnsub 23573 11.22 17.71 8.36 35 RELAYCOUNTRY_META 23363 8.10 17.55 3.94 36 XM_B_SpammyWords3 21450 8.45 16.11 5.08 37 TR_MAX_INTL_RELAY 19540 8.21 14.68 5.36 38 LOTS_OF_MONEY 16863 8.44 12.67 6.57 39 TR_XM_SpammyRelay 16075 5.22 12.07 2.20 40 BOTNET_IPINHOSTNAME 15442 5.84 11.60 3.30 41 TR_XM_SpammyWords4 15424 6.65 11.59 4.48 42 FSL_BULK_SIG 14243 8.48 10.70 7.50 43 TR_XM_SpammyWords2 13755 3.58 10.33 0.61 44 XM_Evil_Numbers_Gen 13352 9.45 10.03 9.20 45 TR_XM_UnparsRelay 12504 3.81 9.39 1.35 46 BOTNET 12401 3.84 9.32 1.42 47 BAYES_80 12126 5.02 9.11 3.22 48 XM_B_Phish_Phrases 11795 6.60 8.86 5.60 49 LotsOfNums_01 11518 8.44 8.65 8.34 50 BAYES_60 11135 8.28 8.36 8.24 51 RCVD_IN_BL_SPAMCOP_NET 10741 2.80 8.07 0.48 52 XMSubMetaSx_00 9710 5.02 7.29 4.01 53 XM_Body_Dirty_Words 9652 3.87 7.25 2.37 54 HTML_IMAGE_RATIO_02 9204 5.01 6.91 4.17 55 XM_UncommonTLD01 9173 4.90 6.89 4.02 56 RELAYCOUNTRY_CA 8958 2.81 6.73 1.08 57 MPART_ALT_DIFF 8247 4.99 6.19 4.46 58 UNTRUSTED_Relay 7701 2.77 5.78 1.45 59 TR_XM_SPAMCOP 7619 1.93 5.72 0.26 60 XM_H_Long_From01 7492 5.61 5.63 5.60 61 XM_B_PhoneNumber 7462 7.98 5.61 9.03 62 XM_B_SpammyTLD 7096 3.66 5.33 2.92 63 BAYES_95 6979 3.08 5.24 2.13 64 XM_H_GMP 6790 5.53 5.10 5.71 65 HTML_IMAGE_RATIO_04 6632 4.61 4.98 4.45 66 XM_B_Investor 6282 2.63 4.72 1.72 67 DKIM_INVALID 6226 3.07 4.68 2.36 68 TR_XM_PhishingBody 6170 2.43 4.63 1.46 69 XMSexyCombo_05 5900 2.20 4.43 1.22 70 TM2_M_VERY_LONG_WORD 5832 2.84 4.38 2.16 71 TooManyTo_001 5798 6.98 4.36 8.14 72 T_XMDrugObfuBody_14 5776 2.98 4.34 2.39 73 MIME_QP_LONG_LINE 5743 4.68 4.31 4.84 74 HTML_IMAGE_RATIO_06 5418 3.13 4.07 2.71 75 XMStrtUSub 5353 4.60 4.02 4.85 76 MIME_HTML_MOSTLY 5196 2.89 3.90 2.44 77 XM_CamelCaseFrm001 5046 2.84 3.79 2.42 78 XM_OfRef6 4868 1.88 3.66 1.09 79 XMNumbers 4471 4.35 3.36 4.79 80 MIME_HTML_ONLY_MULTI 4405 2.79 3.31 2.56 81 XM_UB50 4383 1.68 3.29 0.96 82 RCVD_IN_MSPIKE_WL 4258 4.61 3.20 5.23 83 RCVD_IN_MSPIKE_H3 4258 4.60 3.20 5.22 84 XM_B_SpammyWords4 4247 1.68 3.19 1.02 85 TR_XM_NoHeaderRelay 4202 1.21 3.16 0.35 86 XMDiploma_00 4148 2.00 3.12 1.51 87 TR_XM_SpammyWords5 4082 1.77 3.07 1.19 88 XM_SPF_SoftFail 4072 1.84 3.06 1.30 89 T_XMDrugObfuBody_08 4011 1.98 3.01 1.53 90 HTML_IMAGE_RATIO_08 3997 2.23 3.00 1.89 91 RELAYCOUNTRY_AU 3922 1.49 2.95 0.85 92 XM_B_Unsub2 3882 1.89 2.92 1.44 93 XM_URI_RBL 3801 1.14 2.86 0.39 94 RCVD_IN_VALIDITY_SAFE 3742 3.56 2.81 3.89 95 XMBody_17 3632 1.12 2.73 0.41 96 TM2_M_URI_OPT_OUT 3406 3.15 2.56 3.42 97 T_XMDrugObfuBody_00 3397 1.41 2.55 0.91 98 XM_B_URI_Unicode 3393 2.03 2.55 1.79 99 T_TooManySym_01 3222 5.87 2.42 7.38 100 USER_IN_DEF_DKIM_WL 3182 10.64 2.39 14.28 101 MAILING_LIST_MULTI 3163 2.74 2.38 2.90 102 TR_Symld_Words 3061 1.91 2.30 1.74 103 RCVD_IN_VALIDITY_RPBL 2953 0.72 2.22 0.06 104 RCVD_IN_VALIDITY_CERTIFIED 2937 2.72 2.21 2.95 105 XM_DK_Undo_01 2796 1.90 2.10 1.81 106 SpammyFromTLD_02 2771 1.05 2.08 0.60 107 KHOP_HELO_FCRDNS 2697 1.72 2.03 1.59 108 FROM_EXCESS_BASE64 2691 2.18 2.02 2.25 109 HTML_MIME_NO_HTML_TAG 2684 2.41 2.02 2.58 110 T_XMHurry_00 2671 0.98 2.01 0.53 111 XMStockSpam_06 2660 1.55 2.00 1.36 112 ANY_BOUNCE_MESSAGE 2567 3.32 1.93 3.94 113 BOUNCE_MESSAGE 2562 3.32 1.92 3.93 114 T_FILL_THIS_FORM_SHORT 2546 1.21 1.91 0.90 115 TR_XM_INV_DKIM 2477 0.68 1.86 0.16 116 ALL_TRUSTED 2469 13.02 1.85 17.94 117 XMBrknScrpt_02 2447 1.20 1.84 0.92 118 TR_LOTS_OF_MONEY3 2424 0.77 1.82 0.30 119 XMGenDplmaNmb 2423 1.08 1.82 0.76 120 XMSubMetaI_00 2390 1.14 1.80 0.85 121 T_REMOTE_IMAGE 2339 2.97 1.76 3.50 122 BAYES_40 2326 4.28 1.75 5.40 123 SUBJ_ALL_CAPS 2253 1.58 1.69 1.53 124 XMPhish30 2225 0.80 1.67 0.42 125 URI_NOVOWEL 2154 1.64 1.62 1.65 126 URI_HEX 2072 1.29 1.56 1.18 127 SpammyFromTLD_01 2043 0.94 1.53 0.68 128 TR_XM_SpoofStaff 2030 0.61 1.52 0.21 129 URI_TRY_3LD 2024 0.86 1.52 0.57 130 XMSpoofStaff2 1983 0.54 1.49 0.11 131 XM_H_SpoofStaff4 1980 0.60 1.49 0.21 132 TR_XM_PSC1 1969 0.53 1.48 0.11 133 XM_SendGrid 1962 1.50 1.47 1.52 134 RCVD_IN_PBL 1873 0.87 1.41 0.63 135 RELAYCOUNTRY_FR 1815 0.58 1.36 0.23 136 DKIM_ADSP_NXDOMAIN 1792 0.65 1.35 0.34 137 TR_MetaPhish_Combo_01 1729 0.88 1.30 0.69 138 XM_ProductURIs 1713 0.74 1.29 0.51 139 XM_B_DNDMA 1710 1.08 1.28 0.99 140 SHORTCIRCUIT 1709 0.39 1.28 0.00 141 RCVD_IN_ZEN_LASTEXTERNAL 1709 0.39 1.28 0.00 142 TM2_M_OBFU_COMMENT 1708 0.79 1.28 0.57 143 XM_B_COPY_HTML 1702 0.87 1.28 0.69 144 SHOPIFY_IMG_NOT_RCVD_SFY 1670 0.57 1.25 0.27 145 HTTPS_HTTP_MISMATCH 1651 0.88 1.24 0.72 146 XMBdyGiftCard01 1630 0.76 1.22 0.56 147 XM_B_Phish66 1593 0.58 1.20 0.31 148 XM_H_Long_From02 1585 0.91 1.19 0.78 149 DKIM_ADSP_CUSTOM_MED 1576 0.89 1.18 0.76 150 TR_XM_PHPDW 1568 0.59 1.18 0.33 151 BAYES_20 1564 2.91 1.17 3.68 152 TR_XM_PHPForged 1532 0.58 1.15 0.33 153 TR_XM_FormFill2 1524 0.58 1.14 0.34 154 XM_DIRTYINTL 1496 0.40 1.12 0.09 155 MPART_ALT_DIFF_COUNT 1494 0.71 1.12 0.53 156 DIET_1 1492 0.48 1.12 0.20 157 XM_H_PHPOS 1490 0.57 1.12 0.33 158 XMReplyNow 1452 0.57 1.09 0.35 159 RCVD_IN_IADB_LISTED 1401 3.00 1.05 3.87 160 HTML_TAG_BALANCE_BODY 1379 0.67 1.04 0.51 161 LongTLD 1377 0.62 1.03 0.44 162 XM_B_SEO 1371 0.50 1.03 0.26 163 BOTNET_NORDNS 1354 0.32 1.02 0.01 164 TR_LOTS_OF_MONEY2 1352 0.45 1.02 0.20 165 T_MONEY_PERCENT 1352 0.45 1.02 0.20 166 TR_Mismatch_TLD_02 1329 0.34 1.00 0.06 167 XM_HighProb1 1322 0.31 0.99 0.01 168 RCVD_IN_IADB_SPF 1318 2.64 0.99 3.37 169 RCVD_IN_IADB_DK 1296 2.33 0.97 2.92 170 RCVD_IN_IADB_SENDERID 1287 2.39 0.97 3.01 171 TR_XM_RelayPhish 1287 0.36 0.97 0.09 172 NML_ADSP_CUSTOM_MED 1276 0.61 0.96 0.46 173 FORGED_GMAIL_RCVD 1238 0.62 0.93 0.48 174 RCVD_IN_PSBL 1229 0.57 0.92 0.42 175 XM_OfRef7 1206 0.43 0.91 0.22 176 J_POPCORN_WO_D 1203 0.47 0.90 0.27 177 RDNS_DYNAMIC 1202 0.43 0.90 0.22 178 TR_XM_SEO4 1193 0.37 0.90 0.14 179 XMClaimOffer 1144 0.33 0.86 0.10 180 XMSexyCombo_01 1135 0.36 0.85 0.14 181 RELAYCOUNTRY_GB 1113 0.60 0.84 0.49 182 XMHTML_After_End 1112 0.53 0.84 0.40 183 THIS_AD 1108 0.70 0.83 0.65 184 XMSubMetaSxObfu_03 1099 0.64 0.83 0.56 185 XMBody_78 1092 0.56 0.82 0.44 186 TR_XM_DK_SendGrid 1091 0.91 0.82 0.94 187 XMPhish14 1080 0.51 0.81 0.37 188 TR_XM_Base64_M1 1062 0.71 0.80 0.67 189 XMBounce_01 1057 0.25 0.79 0.01 190 TVD_RCVD_IP 1049 0.77 0.79 0.77 191 T_TooManySym_02 1046 2.38 0.79 3.08 192 HTML_IMAGE_ONLY_20 1041 0.59 0.78 0.51 193 XM_UB99 1026 0.24 0.77 0.00 194 XM_GoogleGroups 988 1.08 0.74 1.23 195 XM_PDF 967 3.15 0.73 4.22 196 XPRIO 967 0.23 0.73 0.01 197 TR_XM_InvalidRelay 962 0.23 0.72 0.01 198 XM_UB60 959 0.25 0.72 0.04 199 MultiRelay_CC 955 0.32 0.72 0.14 200 XM_S_SpammyWords 954 0.36 0.72 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 264165 90.06 95.87 87.49 2 RELAYCOUNTRY_US 238488 80.11 82.64 78.99 3 DKIM_SIGNED 223126 78.94 90.37 73.90 4 XM_DK_Pass 218769 76.75 86.49 72.46 5 DKIM_VALID 215994 75.87 85.69 71.54 6 XM_B_Unicode 214086 75.39 85.57 70.91 7 BAYES_50 184945 55.58 42.71 61.25 8 DCC_CHECK_NEGATIVE 182703 49.37 24.09 60.51 9 DKIM_VALID_AU 173531 60.37 66.94 57.47 10 XMListUnsubscribeExists 145507 54.22 67.89 48.19 11 XM_B_SpammyWords 138050 52.70 68.51 45.72 12 T_SCC_BODY_TEXT_LINE 127296 41.47 39.92 42.16 13 XM_B_Unicode3 124162 43.41 48.61 41.12 14 DCC_CHECK 119058 50.19 74.60 39.43 15 RCVD_IN_MSPIKE_H2 102017 35.63 39.80 33.79 16 LOC_TINY_FONT_1 89493 35.08 47.42 29.64 17 T_TM2_M_HEADER_IN_MSG 89088 26.99 21.28 29.51 18 HTML_FONT_LOW_CONTRAST 88732 31.69 36.90 29.39 19 DKIM_VALID_EF 83822 28.61 30.52 27.76 20 XMSubLong 79070 25.93 25.35 26.19 21 FVGT_m_MULTI_ODD 76070 27.58 32.98 25.19 22 MIME_HTML_ONLY 73630 25.78 28.95 24.39 23 T_KAM_HTML_FONT_INVALID 63221 24.66 33.10 20.94 24 XM_B_SpammyWords2 61560 26.34 39.83 20.39 25 ALL_TRUSTED 54170 13.02 1.85 17.94 26 USER_IN_DEF_DKIM_WL 43127 10.64 2.39 14.28 27 XM_Multi_Part_URI 39636 15.72 21.59 13.13 28 TR_XM_DK_Unsub 37849 15.51 22.26 12.54 29 UNPARSEABLE_RELAY 35127 13.84 18.84 11.63 30 XM_B_Unsub 32693 13.12 18.32 10.83 31 BAYES_00 31151 7.34 0.57 10.32 32 XM_Evil_Numbers_Gen 27770 9.45 10.03 9.20 33 XM_B_PhoneNumber 27266 7.98 5.61 9.03 34 TR_XM_BayesUnsub 25249 11.22 17.71 8.36 35 LotsOfNums_01 25195 8.44 8.65 8.34 36 BAYES_60 24878 8.28 8.36 8.24 37 TooManyTo_001 24580 6.98 4.36 8.14 38 FSL_BULK_SIG 22640 8.48 10.70 7.50 39 T_TooManySym_01 22296 5.87 2.42 7.38 40 IN_ZIMBRA_NJ_WHITELIST 21675 5.02 0.12 7.18 41 TR_XM_DK_Bayes 21005 4.96 0.44 6.96 42 TR_XM_DK_Bayes1 20564 4.86 0.44 6.81 43 XM_DKIMWhitelistDomains 20270 4.66 0.02 6.71 44 LOTS_OF_MONEY 19841 8.44 12.67 6.57 45 TR_XM_DK_Bayes2 17415 4.11 0.36 5.77 46 XM_H_GMP 17251 5.53 5.10 5.71 47 XM_B_Phish_Phrases 16904 6.60 8.86 5.60 48 XM_H_Long_From01 16897 5.61 5.63 5.60 49 BAYES_40 16294 4.28 1.75 5.40 50 TR_MAX_INTL_RELAY 16179 8.21 14.68 5.36 51 RCVD_IN_MSPIKE_WL 15780 4.61 3.20 5.23 52 RCVD_IN_MSPIKE_H3 15773 4.60 3.20 5.22 53 XM_B_SpammyWords3 15331 8.45 16.11 5.08 54 XM_DK_Undo_02 14832 15.20 38.52 4.91 55 XMStrtUSub 14642 4.60 4.02 4.85 56 MIME_QP_LONG_LINE 14604 4.68 4.31 4.84 57 XMNumbers 14464 4.35 3.36 4.79 58 TR_XM_SpammyWords4 13513 6.65 11.59 4.48 59 MPART_ALT_DIFF 13467 4.99 6.19 4.46 60 HTML_IMAGE_RATIO_04 13427 4.61 4.98 4.45 61 XM_PDF 12742 3.15 0.73 4.22 62 HTML_IMAGE_RATIO_02 12596 5.01 6.91 4.17 63 XM_UncommonTLD01 12143 4.90 6.89 4.02 64 XMSubMetaSx_00 12121 5.02 7.29 4.01 65 ANY_BOUNCE_MESSAGE 11889 3.32 1.93 3.94 66 RELAYCOUNTRY_META 11885 8.10 17.55 3.94 67 BOUNCE_MESSAGE 11877 3.32 1.92 3.93 68 RCVD_IN_VALIDITY_SAFE 11752 3.56 2.81 3.89 69 RCVD_IN_IADB_LISTED 11672 3.00 1.05 3.87 70 BAYES_20 11115 2.91 1.17 3.68 71 BAYES_99 10767 11.44 29.28 3.57 72 T_REMOTE_IMAGE 10572 2.97 1.76 3.50 73 TM2_M_URI_OPT_OUT 10313 3.15 2.56 3.42 74 RCVD_IN_IADB_SPF 10167 2.64 0.99 3.37 75 BOTNET_IPINHOSTNAME 9951 5.84 11.60 3.30 76 BAYES_80 9731 5.02 9.11 3.22 77 TooManyTo_002 9559 2.37 0.56 3.17 78 T_TooManySym_02 9310 2.38 0.79 3.08 79 RCVD_IN_IADB_SENDERID 9090 2.39 0.97 3.01 80 RCVD_IN_VALIDITY_CERTIFIED 8916 2.72 2.21 2.95 81 RCVD_IN_IADB_DK 8823 2.33 0.97 2.92 82 XM_B_SpammyTLD 8820 3.66 5.33 2.92 83 MAILING_LIST_MULTI 8741 2.74 2.38 2.90 84 BAYES_999 8310 8.89 22.82 2.75 85 HTML_IMAGE_RATIO_06 8193 3.13 4.07 2.71 86 HTML_MIME_NO_HTML_TAG 7782 2.41 2.02 2.58 87 RCVD_IN_IADB_VOUCHED 7731 1.86 0.28 2.56 88 MIME_HTML_ONLY_MULTI 7730 2.79 3.31 2.56 89 TR_XM_DKIM_Undo 7443 10.13 27.52 2.47 90 MIME_HTML_MOSTLY 7373 2.89 3.90 2.44 91 XM_CamelCaseFrm001 7320 2.84 3.79 2.42 92 T_XMDrugObfuBody_14 7204 2.98 4.34 2.39 93 XM_Body_Dirty_Words 7164 3.87 7.25 2.37 94 INVALID_MSGID 7164 1.71 0.21 2.37 95 DKIM_INVALID 7132 3.07 4.68 2.36 96 FROM_EXCESS_BASE64 6781 2.18 2.02 2.25 97 TR_XM_SpammyRelay 6639 5.22 12.07 2.20 98 BAYES_05 6597 1.67 0.52 2.18 99 TM2_M_VERY_LONG_WORD 6509 2.84 4.38 2.16 100 BAYES_95 6439 3.08 5.24 2.13 101 TO_MALFORMED 6279 1.46 0.07 2.08 102 MIME_HEADER_CTYPE_ONLY 5917 1.41 0.15 1.96 103 HTML_IMAGE_RATIO_08 5702 2.23 3.00 1.89 104 XM_DK_Undo_01 5476 1.90 2.10 1.81 105 RCVD_IN_IADB_OPTIN 5467 1.31 0.17 1.81 106 XM_B_URI_Unicode 5419 2.03 2.55 1.79 107 TR_Symld_Words 5262 1.91 2.30 1.74 108 TooManyTo_003 5254 1.36 0.49 1.74 109 XM_B_Investor 5179 2.63 4.72 1.72 110 URI_NOVOWEL 4978 1.64 1.62 1.65 111 KHOP_HELO_FCRDNS 4798 1.72 2.03 1.59 112 DC_PNG_UNO_LARGO 4679 1.11 0.11 1.55 113 SUBJ_ALL_CAPS 4612 1.58 1.69 1.53 114 T_XMDrugObfuBody_08 4611 1.98 3.01 1.53 115 XM_SendGrid 4579 1.50 1.47 1.52 116 XMDiploma_00 4563 2.00 3.12 1.51 117 TR_XM_PhishingBody 4406 2.43 4.63 1.46 118 UNTRUSTED_Relay 4367 2.77 5.78 1.45 119 XM_B_Unsub2 4339 1.89 2.92 1.44 120 XMHTML_ManyTags1 4292 1.03 0.16 1.42 121 BOTNET 4289 3.84 9.32 1.42 122 TR_DCC_Bayes_99 4216 7.34 20.83 1.40 123 IN_HORDE_ADDRESS_BOOK 4216 1.00 0.10 1.40 124 XMHTML_ManyTags2 4214 1.00 0.10 1.40 125 XMHTML_ManyTags3 4205 1.00 0.10 1.39 126 AC_BR_BONANZA 4205 1.00 0.10 1.39 127 XMGappySubj_01 4159 1.15 0.63 1.38 128 XMStockSpam_06 4097 1.55 2.00 1.36 129 TR_XM_UnparsRelay 4079 3.81 9.39 1.35 130 XM_SPF_SoftFail 3918 1.84 3.06 1.30 131 TooManyTo_004 3874 1.01 0.40 1.28 132 T_TooManySym_03 3841 0.95 0.23 1.27 133 XM_GoogleGroups 3708 1.08 0.74 1.23 134 XMSexyCombo_05 3669 2.20 4.43 1.22 135 TR_XM_SpammyWords5 3608 1.77 3.07 1.19 136 URI_HEX 3561 1.29 1.56 1.18 137 XM_OfRef6 3292 1.88 3.66 1.09 138 RELAYCOUNTRY_CA 3246 2.81 6.73 1.08 139 TooManyTo_005 3192 0.84 0.36 1.06 140 XM_B_SpammyWords4 3078 1.68 3.19 1.02 141 XMCapTrack 3057 0.85 0.50 1.01 142 TVD_SPACE_RATIO 3054 0.76 0.18 1.01 143 XM_B_DNDMA 2996 1.08 1.28 0.99 144 HELO_NODOT 2938 0.76 0.27 0.97 145 HELO_NO_DOMAIN 2930 0.76 0.27 0.97 146 TO_NO_BRKTS_HTML_ONLY 2917 0.80 0.42 0.97 147 XM_UB50 2910 1.68 3.29 0.96 148 TR_XM_DK_SendGrid 2850 0.91 0.82 0.94 149 FROM_GOV_DKIM_AU 2770 0.68 0.13 0.92 150 XMBrknScrpt_02 2766 1.20 1.84 0.92 151 T_XMDrugObfuBody_00 2737 1.41 2.55 0.91 152 T_FILL_THIS_FORM_SHORT 2710 1.21 1.91 0.90 153 HTML_IMAGE_ONLY_32 2624 0.66 0.20 0.87 154 RELAYCOUNTRY_AU 2577 1.49 2.95 0.85 155 XMSubMetaI_00 2559 1.14 1.80 0.85 156 URI_WPADMIN 2557 0.61 0.08 0.85 157 XM_ShortIntro_01 2385 0.66 0.38 0.79 158 XM_H_Long_From02 2368 0.91 1.19 0.78 159 TVD_RCVD_IP 2313 0.77 0.79 0.77 160 DKIM_ADSP_CUSTOM_MED 2296 0.89 1.18 0.76 161 XMGenDplmaNmb 2292 1.08 1.82 0.76 162 XM_B_FormFill 2265 0.53 0.03 0.75 163 XM_H_PHPMailer 2219 0.70 0.63 0.73 164 HTTPS_HTTP_MISMATCH 2181 0.88 1.24 0.72 165 TR_MetaPhish_Combo_01 2093 0.88 1.30 0.69 166 XM_B_COPY_HTML 2086 0.87 1.28 0.69 167 SpammyFromTLD_01 2055 0.94 1.53 0.68 168 TR_XM_Base64_M1 2036 0.71 0.80 0.67 169 XM_RXBody 2015 0.68 0.70 0.67 170 XMNoVowels 2006 0.66 0.66 0.66 171 T_OBFU_PDF_ATTACH 2003 0.50 0.14 0.66 172 THIS_AD 1951 0.70 0.83 0.65 173 RCVD_IN_PBL 1894 0.87 1.41 0.63 174 TR_XM_SpammyWords2 1837 3.58 10.33 0.61 175 XMBSHREFv2 1803 0.55 0.44 0.60 176 SpammyFromTLD_02 1802 1.05 2.08 0.60 177 XMGappySubj_02 1801 0.45 0.12 0.60 178 T_Symld_Words_02 1796 0.56 0.50 0.59 179 TM2_M_OBFU_COMMENT 1725 0.79 1.28 0.57 180 T_TVD_MIME_NO_HEADERS 1710 0.40 0.03 0.57 181 URI_TRY_3LD 1708 0.86 1.52 0.57 182 XMBdyGiftCard01 1684 0.76 1.22 0.56 183 XMSubMetaSxObfu_03 1676 0.64 0.83 0.56 184 XMSlimDrugH 1658 0.57 0.60 0.55 185 XMLngstWrd_00 1600 0.55 0.58 0.53 186 MPART_ALT_DIFF_COUNT 1595 0.71 1.12 0.53 187 T_XMHurry_00 1590 0.98 2.01 0.53 188 XMBody_95 1569 0.44 0.26 0.52 189 MSGID_FROM_MTA_HEADER 1555 0.42 0.21 0.52 190 XMMoneyMeta_00 1549 0.52 0.55 0.51 191 HTML_IMAGE_ONLY_20 1541 0.59 0.78 0.51 192 HTML_TAG_BALANCE_BODY 1533 0.67 1.04 0.51 193 T_MANY_PILL_PRICE 1530 0.35 0.00 0.51 194 XM_ProductURIs 1525 0.74 1.29 0.51 195 RELAYCOUNTRY_GB 1481 0.60 0.84 0.49 196 FORGED_GMAIL_RCVD 1451 0.62 0.93 0.48 197 RCVD_IN_BL_SPAMCOP_NET 1448 2.80 8.07 0.48 198 FONT_INVIS_MSGID 1440 0.39 0.20 0.48 199 NML_ADSP_CUSTOM_MED 1399 0.61 0.96 0.46 200 XMLngstWrd_01 1392 0.48 0.53 0.46 ----------------------------------------------------------------------