Email: 415012 Autolearn: 0 AvgScore: 5.13 AvgScanTime: 1.41 sec Spam: 128757 Autolearn: 0 AvgScore: 14.27 AvgScanTime: 1.58 sec Ham: 286255 Autolearn: 0 AvgScore: 1.02 AvgScanTime: 1.34 sec Time Spent Running SA: 162.70 hours Time Spent Processing Spam: 56.44 hours Time Spent Processing Ham: 106.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122966 89.40 95.50 86.65 2 DKIM_SIGNED 118686 80.62 92.18 75.42 3 XM_DK_Pass 113738 78.81 88.34 74.53 4 DKIM_VALID 112906 77.98 87.69 73.61 5 XM_B_Unicode 110375 74.83 85.72 69.93 6 RELAYCOUNTRY_US 105560 81.27 81.98 80.95 7 DCC_CHECK 96293 51.96 74.79 41.69 8 XMListUnsubscribeExists 89984 55.59 69.89 49.16 9 XM_B_SpammyWords 89945 52.99 69.86 45.41 10 DKIM_VALID_AU 88598 63.11 68.81 60.54 11 XM_B_Unicode3 65232 43.98 50.66 40.97 12 LOC_TINY_FONT_1 63749 35.73 49.51 29.54 13 XM_DK_Undo_02 55356 17.03 42.99 5.36 14 XM_B_SpammyWords2 52366 25.65 40.67 18.89 15 BAYES_50 51591 53.72 40.07 59.86 16 FVGT_m_MULTI_ODD 47621 28.65 36.99 24.91 17 HTML_FONT_LOW_CONTRAST 47151 30.10 36.62 27.17 18 DKIM_VALID_EF 43666 31.43 33.91 30.31 19 TR_XM_DKIM_Undo 40076 11.19 31.13 2.22 20 BAYES_99 39825 12.24 30.93 3.83 21 T_KAM_HTML_FONT_INVALID 38698 25.25 30.06 23.09 22 MIME_HTML_ONLY 34827 22.75 27.05 20.81 23 TR_XM_DK_Unsub 32243 17.07 25.04 13.48 24 XMSubLong 32017 23.44 24.87 22.80 25 BAYES_999 30861 9.43 23.97 2.89 26 DCC_CHECK_NEGATIVE 30761 47.61 23.89 58.27 27 XM_Multi_Part_URI 28628 16.39 22.23 13.75 28 T_TM2_M_HEADER_IN_MSG 28537 27.30 22.16 29.61 29 TR_DCC_Bayes_99 27573 7.64 21.41 1.45 30 RCVD_IN_MSPIKE_H2 25349 17.19 19.69 16.06 31 UNPARSEABLE_RELAY 25314 14.29 19.66 11.88 32 XM_B_Unsub 23489 11.62 18.24 8.64 33 TR_XM_BayesUnsub 22580 9.87 17.54 6.43 34 RELAYCOUNTRY_META 21935 7.64 17.04 3.41 35 TR_MAX_INTL_RELAY 20548 9.03 15.96 5.92 36 XM_B_SpammyWords3 18654 8.30 14.49 5.52 37 LOTS_OF_MONEY 17017 8.73 13.22 6.71 38 RCVD_IN_BL_SPAMCOP_NET 16451 4.46 12.78 0.72 39 TR_XM_SpammyRelay 16328 5.20 12.68 1.83 40 TR_XM_SpammyWords4 14999 6.76 11.65 4.56 41 XM_Evil_Numbers_Gen 13956 9.73 10.84 9.23 42 BOTNET_IPINHOSTNAME 13954 5.79 10.84 3.51 43 TR_XM_UnparsRelay 13917 4.37 10.81 1.48 44 TR_XM_SpammyWords2 12940 3.45 10.05 0.48 45 BAYES_80 12817 5.58 9.95 3.61 46 RCVD_IN_MSPIKE_WL 11546 14.58 8.97 17.11 47 BOTNET 11062 3.56 8.59 1.30 48 FSL_BULK_SIG 11012 9.16 8.55 9.43 49 XM_B_Phish_Phrases 11009 6.47 8.55 5.54 50 BAYES_60 10896 7.34 8.46 6.83 51 XM_Body_Dirty_Words 10695 4.58 8.31 2.90 52 XMSubMetaSx_00 10096 4.90 7.84 3.57 53 RELAYCOUNTRY_CA 9834 2.90 7.64 0.77 54 LotsOfNums_01 9217 8.24 7.16 8.72 55 MPART_ALT_DIFF 9106 5.41 7.07 4.66 56 HTML_IMAGE_RATIO_04 8455 5.55 6.57 5.10 57 XM_UncommonTLD01 8340 4.91 6.48 4.20 58 HTML_IMAGE_RATIO_02 8008 4.71 6.22 4.04 59 XM_B_PhoneNumber 7847 8.06 6.09 8.94 60 XM_H_GMP 7679 5.74 5.96 5.64 61 BAYES_95 7300 3.35 5.67 2.31 62 XM_H_Long_From01 7250 5.62 5.63 5.62 63 UNTRUSTED_Relay 7091 2.81 5.51 1.59 64 TR_XM_SPAMCOP 7062 1.84 5.48 0.20 65 XM_B_Investor 6241 2.39 4.85 1.29 66 MIME_HTML_MOSTLY 6150 3.18 4.78 2.46 67 XM_OfRef6 6081 2.35 4.72 1.28 68 RCVD_IN_MSPIKE_H3 5978 6.96 4.64 8.01 69 DKIM_INVALID 5780 2.64 4.49 1.81 70 TR_XM_PhishingBody 5535 2.41 4.30 1.56 71 XM_B_SpammyTLD 5520 3.28 4.29 2.83 72 TM2_M_VERY_LONG_WORD 5516 3.00 4.28 2.42 73 RCVD_IN_MSPIKE_BL 5514 1.86 4.28 0.77 74 TR_XM_MSPIKECOMBO 5514 1.86 4.28 0.77 75 T_XMDrugObfuBody_14 5425 2.58 4.21 1.84 76 XMSexyCombo_05 5156 2.20 4.00 1.39 77 T_TooManySym_01 4874 5.42 3.79 6.16 78 TooManyTo_001 4852 7.01 3.77 8.46 79 USER_IN_DEF_DKIM_WL 4807 10.14 3.73 13.02 80 XMStrtUSub 4798 4.62 3.73 5.03 81 XMNumbers 4538 3.78 3.52 3.89 82 XMDiploma_00 4422 2.15 3.43 1.58 83 XM_CamelCaseFrm001 4402 2.53 3.42 2.13 84 XM_URI_RBL 4345 1.28 3.37 0.34 85 TR_XM_SpammyWords3 4184 1.23 3.25 0.33 86 MIME_HTML_ONLY_MULTI 4088 2.82 3.17 2.66 87 TR_XM_SpammyWords5 4053 1.98 3.15 1.45 88 XMStockSpam_06 3901 1.79 3.03 1.23 89 XM_B_Unsub2 3865 1.80 3.00 1.26 90 XM_SPF_SoftFail 3815 1.80 2.96 1.28 91 T_XMDrugObfuBody_08 3809 2.16 2.96 1.81 92 HTML_IMAGE_RATIO_06 3727 2.85 2.89 2.82 93 RELAYCOUNTRY_AU 3585 1.33 2.78 0.68 94 XM_B_URI_Unicode 3571 2.25 2.77 2.02 95 TR_XM_NoHeaderRelay 3458 1.00 2.69 0.24 96 RCVD_IN_MSPIKE_L3 3418 1.29 2.65 0.68 97 T_FILL_THIS_FORM_SHORT 3401 1.33 2.64 0.74 98 TM2_M_URI_OPT_OUT 3347 2.22 2.60 2.05 99 XM_UB50 3310 1.49 2.57 1.00 100 XMBrknScrpt_02 3298 1.39 2.56 0.87 101 MIME_QP_LONG_LINE 3289 4.29 2.55 5.07 102 SpammyFromTLD_02 3274 1.13 2.54 0.50 103 XMSexyCombo_01 3076 0.88 2.39 0.21 104 XM_B_SpammyWords4 3020 1.29 2.35 0.81 105 HK_RANDOM_REPLYTO 2981 0.82 2.32 0.14 106 RCVD_IN_VALIDITY_SAFE 2948 3.47 2.29 3.99 107 RCVD_IN_MSPIKE_H4 2862 3.09 2.22 3.48 108 FROM_EXCESS_BASE64 2834 1.75 2.20 1.54 109 MAILING_LIST_MULTI 2806 2.75 2.18 3.00 110 T_XMDrugObfuBody_00 2775 1.24 2.16 0.83 111 XMBody_17 2735 1.05 2.12 0.57 112 RCVD_IN_MSPIKE_H5 2706 4.53 2.10 5.62 113 HTML_IMAGE_RATIO_08 2679 2.26 2.08 2.34 114 TR_XM_INV_DKIM 2662 0.65 2.07 0.02 115 XM_SendGrid 2589 1.78 2.01 1.68 116 T_XMHurry_00 2566 0.97 1.99 0.51 117 RCVD_IN_VALIDITY_CERTIFIED 2494 2.96 1.94 3.42 118 SUBJ_ALL_CAPS 2340 1.67 1.82 1.60 119 SpammyFromTLD_01 2283 1.02 1.77 0.68 120 XMGenDplmaNmb 2275 1.05 1.77 0.72 121 XMSubMetaSxObfu_03 2185 0.77 1.70 0.35 122 XMBdyGiftCard01 2097 0.76 1.63 0.37 123 XM_B_Phish66 1982 0.74 1.54 0.38 124 ALL_TRUSTED 1976 11.44 1.53 15.90 125 HTML_MIME_NO_HTML_TAG 1956 3.14 1.52 3.86 126 BAYES_40 1948 4.95 1.51 6.50 127 T_REMOTE_IMAGE 1932 3.32 1.50 4.13 128 URI_TRY_3LD 1905 0.92 1.48 0.67 129 LongTLD 1902 0.81 1.48 0.51 130 XM_HighProb1 1878 0.46 1.46 0.00 131 TR_XM_INTL_Spamhaus 1857 0.55 1.44 0.14 132 XMPhish30 1839 0.82 1.43 0.54 133 XM_B_SEO 1785 0.56 1.39 0.19 134 DIET_1 1769 0.74 1.37 0.46 135 XMSubMetaSx_01 1750 0.50 1.36 0.11 136 URI_NOVOWEL 1750 1.48 1.36 1.54 137 XMSubMetaI_00 1744 0.74 1.35 0.47 138 TR_XM_MSPIKECOMBO2 1744 0.48 1.35 0.09 139 XM_DK_Undo_01 1736 1.78 1.35 1.98 140 RCVD_IN_IADB_LISTED 1720 3.13 1.34 3.93 141 KHOP_HELO_FCRDNS 1711 1.76 1.33 1.95 142 MPART_ALT_DIFF_COUNT 1692 0.73 1.31 0.47 143 RCVD_IN_ZEN_LASTEXTERNAL 1678 0.40 1.30 0.00 144 SHORTCIRCUIT 1678 0.40 1.30 0.00 145 RCVD_IN_VALIDITY_RPBL 1653 0.43 1.28 0.04 146 XM_ProductURIs 1649 0.80 1.28 0.58 147 TR_XM_GMP_BULK_SIG 1646 0.51 1.28 0.16 148 TR_XM_PHPForged 1643 0.73 1.28 0.48 149 XMSexyCombo_02 1641 0.41 1.27 0.02 150 TR_XM_PHPDW 1632 0.73 1.27 0.48 151 XM_H_Long_From02 1622 0.89 1.26 0.72 152 TR_XM_FormFill2 1619 0.72 1.26 0.48 153 DKIM_ADSP_CUSTOM_MED 1613 0.94 1.25 0.80 154 XM_H_PHPOS 1601 0.71 1.24 0.47 155 TR_LOTS_OF_MONEY3 1600 0.58 1.24 0.28 156 TR_MetaPhish_Combo_01 1590 0.87 1.23 0.71 157 T_MONEY_PERCENT 1583 0.58 1.23 0.29 158 TR_LOTS_OF_MONEY2 1583 0.58 1.23 0.29 159 SHOPIFY_IMG_NOT_RCVD_SFY 1571 0.56 1.22 0.26 160 RDNS_DYNAMIC 1560 0.48 1.21 0.15 161 RCVD_IN_MSPIKE_L4 1545 0.42 1.20 0.06 162 PDS_RDNS_DYNAMIC_FP 1539 0.39 1.20 0.03 163 THIS_AD 1536 0.67 1.19 0.44 164 RELAYCOUNTRY_FR 1535 0.56 1.19 0.28 165 XM_B_COPY_HTML 1507 1.12 1.17 1.10 166 TR_XM_SEO4 1498 0.43 1.16 0.10 167 URI_HEX 1490 1.17 1.16 1.18 168 RCVD_IN_IADB_SPF 1490 2.74 1.16 3.45 169 LONGLN_LOW_CONTRAST 1456 0.53 1.13 0.26 170 TR_Mismatch_TLD_02 1438 0.39 1.12 0.06 171 TR_XM_Base64_M1 1433 0.79 1.11 0.64 172 TR_Symld_Words 1408 1.31 1.09 1.40 173 RCVD_IN_PBL 1401 0.84 1.09 0.72 174 RCVD_IN_XBL 1394 0.35 1.08 0.02 175 BOTNET_NORDNS 1393 0.34 1.08 0.01 176 XM_B_DNDMA 1382 0.78 1.07 0.65 177 NML_ADSP_CUSTOM_MED 1380 0.68 1.07 0.50 178 RCVD_IN_IADB_DK 1378 2.37 1.07 2.95 179 TR_XM_DK_SendGrid 1363 1.11 1.06 1.14 180 RCVD_IN_SBL_CSS 1351 0.36 1.05 0.05 181 TM2_M_OBFU_COMMENT 1345 0.51 1.04 0.27 182 RCVD_IN_IADB_SENDERID 1323 2.43 1.03 3.06 183 STY_INVIS_DIRECT 1316 0.54 1.02 0.32 184 BAYES_20 1309 3.22 1.02 4.22 185 XMBody_78 1303 0.58 1.01 0.39 186 XMSubMetaSxObfu_02 1300 0.52 1.01 0.30 187 URIBL_SBL_A 1285 0.31 1.00 0.00 188 URIBL_SBL 1285 0.31 1.00 0.00 189 SH_BODYURI_REVERSE_SBL 1282 0.31 1.00 0.00 190 TVD_RCVD_IP 1270 1.02 0.99 1.04 191 XM_GoogleGroups 1260 1.21 0.98 1.31 192 HTML_IMAGE_ONLY_20 1234 0.95 0.96 0.95 193 TR_XM_FormFill 1234 0.30 0.96 0.00 194 XM_B_COVIDMETA 1228 0.37 0.95 0.11 195 TR_XM_MaxSPIKE 1224 0.36 0.95 0.09 196 XMReplyNow 1214 0.46 0.94 0.24 197 TR_XM_InvalidRelay 1213 0.30 0.94 0.01 198 URIBL_BLACK 1186 0.29 0.92 0.01 199 HTML_FONT_TINY_NORDNS 1186 0.33 0.92 0.06 200 FORGED_GMAIL_RCVD 1173 0.65 0.91 0.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 248040 89.40 95.50 86.65 2 RELAYCOUNTRY_US 231729 81.27 81.98 80.95 3 DKIM_SIGNED 215905 80.62 92.18 75.42 4 XM_DK_Pass 213338 78.81 88.34 74.53 5 DKIM_VALID 210721 77.98 87.69 73.61 6 XM_B_Unicode 200169 74.83 85.72 69.93 7 DKIM_VALID_AU 173308 63.11 68.81 60.54 8 BAYES_50 171341 53.72 40.07 59.86 9 DCC_CHECK_NEGATIVE 166806 47.61 23.89 58.27 10 XMListUnsubscribeExists 140737 55.59 69.89 49.16 11 XM_B_SpammyWords 129980 52.99 69.86 45.41 12 DCC_CHECK 119327 51.96 74.79 41.69 13 XM_B_Unicode3 117283 43.98 50.66 40.97 14 DKIM_VALID_EF 86778 31.43 33.91 30.31 15 T_TM2_M_HEADER_IN_MSG 84766 27.30 22.16 29.61 16 LOC_TINY_FONT_1 84550 35.73 49.51 29.54 17 HTML_FONT_LOW_CONTRAST 77773 30.10 36.62 27.17 18 FVGT_m_MULTI_ODD 71299 28.65 36.99 24.91 19 T_KAM_HTML_FONT_INVALID 66094 25.25 30.06 23.09 20 XMSubLong 65267 23.44 24.87 22.80 21 MIME_HTML_ONLY 59571 22.75 27.05 20.81 22 XM_B_SpammyWords2 54080 25.65 40.67 18.89 23 RCVD_IN_MSPIKE_WL 48981 14.58 8.97 17.11 24 RCVD_IN_MSPIKE_H2 45978 17.19 19.69 16.06 25 ALL_TRUSTED 45512 11.44 1.53 15.90 26 XM_Multi_Part_URI 39373 16.39 22.23 13.75 27 TR_XM_DK_Unsub 38582 17.07 25.04 13.48 28 USER_IN_DEF_DKIM_WL 37272 10.14 3.73 13.02 29 UNPARSEABLE_RELAY 34005 14.29 19.66 11.88 30 BAYES_00 30423 7.49 0.52 10.63 31 FSL_BULK_SIG 26986 9.16 8.55 9.43 32 XM_Evil_Numbers_Gen 26415 9.73 10.84 9.23 33 XM_B_PhoneNumber 25592 8.06 6.09 8.94 34 LotsOfNums_01 24975 8.24 7.16 8.72 35 XM_B_Unsub 24742 11.62 18.24 8.64 36 TooManyTo_001 24231 7.01 3.77 8.46 37 RCVD_IN_MSPIKE_H3 22927 6.96 4.64 8.01 38 TR_XM_DK_Bayes 20791 5.13 0.38 7.26 39 TR_XM_DK_Bayes1 20580 5.08 0.38 7.19 40 BAYES_60 19558 7.34 8.46 6.83 41 LOTS_OF_MONEY 19207 8.73 13.22 6.71 42 XM_DKIMWhitelistDomains 18869 4.55 0.02 6.59 43 BAYES_40 18598 4.95 1.51 6.50 44 TR_XM_BayesUnsub 18393 9.87 17.54 6.43 45 T_TooManySym_01 17638 5.42 3.79 6.16 46 TR_XM_DK_Bayes2 17629 4.32 0.23 6.16 47 TR_MAX_INTL_RELAY 16937 9.03 15.96 5.92 48 XM_H_GMP 16144 5.74 5.96 5.64 49 RCVD_IN_MSPIKE_H5 16100 4.53 2.10 5.62 50 XM_H_Long_From01 16077 5.62 5.63 5.62 51 XM_B_Phish_Phrases 15852 6.47 8.55 5.54 52 XM_B_SpammyWords3 15788 8.30 14.49 5.52 53 XM_DK_Undo_02 15332 17.03 42.99 5.36 54 HTML_IMAGE_RATIO_04 14594 5.55 6.57 5.10 55 MIME_QP_LONG_LINE 14499 4.29 2.55 5.07 56 XMStrtUSub 14393 4.62 3.73 5.03 57 MPART_ALT_DIFF 13345 5.41 7.07 4.66 58 XM_PDF 13210 3.47 0.91 4.61 59 TR_XM_SpammyWords4 13051 6.76 11.65 4.56 60 ANY_BOUNCE_MESSAGE 12397 3.18 0.61 4.33 61 BOUNCE_MESSAGE 12393 3.18 0.61 4.33 62 BAYES_20 12069 3.22 1.02 4.22 63 XM_UncommonTLD01 12034 4.91 6.48 4.20 64 T_REMOTE_IMAGE 11828 3.32 1.50 4.13 65 HTML_IMAGE_RATIO_02 11554 4.71 6.22 4.04 66 RCVD_IN_VALIDITY_SAFE 11434 3.47 2.29 3.99 67 RCVD_IN_IADB_LISTED 11255 3.13 1.34 3.93 68 XMNumbers 11131 3.78 3.52 3.89 69 HTML_MIME_NO_HTML_TAG 11059 3.14 1.52 3.86 70 BAYES_99 10956 12.24 30.93 3.83 71 BAYES_80 10328 5.58 9.95 3.61 72 XMSubMetaSx_00 10219 4.90 7.84 3.57 73 BOTNET_IPINHOSTNAME 10058 5.79 10.84 3.51 74 RCVD_IN_MSPIKE_H4 9954 3.09 2.22 3.48 75 RCVD_IN_IADB_SPF 9867 2.74 1.16 3.45 76 RCVD_IN_VALIDITY_CERTIFIED 9781 2.96 1.94 3.42 77 RELAYCOUNTRY_META 9767 7.64 17.04 3.41 78 T_TooManySym_02 9121 2.46 0.83 3.19 79 RCVD_IN_IADB_SENDERID 8773 2.43 1.03 3.06 80 MAILING_LIST_MULTI 8587 2.75 2.18 3.00 81 RCVD_IN_IADB_DK 8443 2.37 1.07 2.95 82 XM_Body_Dirty_Words 8299 4.58 8.31 2.90 83 BAYES_999 8282 9.43 23.97 2.89 84 TooManyTo_002 8164 2.18 0.68 2.85 85 XM_B_SpammyTLD 8108 3.28 4.29 2.83 86 HTML_IMAGE_RATIO_06 8085 2.85 2.89 2.82 87 MIME_HTML_ONLY_MULTI 7602 2.82 3.17 2.66 88 RCVD_IN_IADB_VOUCHED 7468 2.03 0.73 2.61 89 INVALID_MSGID 7384 1.85 0.22 2.58 90 MIME_HTML_MOSTLY 7038 3.18 4.78 2.46 91 TM2_M_VERY_LONG_WORD 6935 3.00 4.28 2.42 92 HTML_IMAGE_RATIO_08 6711 2.26 2.08 2.34 93 BAYES_95 6603 3.35 5.67 2.31 94 TO_MALFORMED 6575 1.58 0.00 2.30 95 MSGID_NOFQDN1 6503 1.57 0.02 2.27 96 BAYES_05 6379 1.71 0.56 2.23 97 TR_XM_DKIM_Undo 6360 11.19 31.13 2.22 98 XM_CamelCaseFrm001 6107 2.53 3.42 2.13 99 TM2_M_URI_OPT_OUT 5860 2.22 2.60 2.05 100 XM_B_URI_Unicode 5779 2.25 2.77 2.02 101 XM_DK_Undo_01 5655 1.78 1.35 1.98 102 KHOP_HELO_FCRDNS 5592 1.76 1.33 1.95 103 T_XMDrugObfuBody_14 5278 2.58 4.21 1.84 104 RCVD_IN_IADB_OPTIN 5255 1.42 0.49 1.84 105 TR_XM_SpammyRelay 5241 5.20 12.68 1.83 106 DKIM_INVALID 5184 2.64 4.49 1.81 107 T_XMDrugObfuBody_08 5175 2.16 2.96 1.81 108 XM_SendGrid 4808 1.78 2.01 1.68 109 SUBJ_ALL_CAPS 4577 1.67 1.82 1.60 110 UNTRUSTED_Relay 4553 2.81 5.51 1.59 111 XMDiploma_00 4511 2.15 3.43 1.58 112 TR_XM_PhishingBody 4454 2.41 4.30 1.56 113 FROM_EXCESS_BASE64 4411 1.75 2.20 1.54 114 URI_NOVOWEL 4398 1.48 1.36 1.54 115 TR_XM_SB_Phish 4371 1.14 0.29 1.53 116 TooManyTo_003 4359 1.23 0.57 1.52 117 XMSubPhish11 4332 1.12 0.24 1.51 118 TR_XM_UnparsRelay 4230 4.37 10.81 1.48 119 TR_DCC_Bayes_99 4151 7.64 21.41 1.45 120 TR_XM_SpammyWords5 4146 1.98 3.15 1.45 121 TR_Symld_Words 4019 1.31 1.09 1.40 122 XMGappySubj_01 3998 1.04 0.25 1.40 123 XMSexyCombo_05 3965 2.20 4.00 1.39 124 IN_HORDE_ADDRESS_BOOK 3810 0.95 0.09 1.33 125 XM_GoogleGroups 3753 1.21 0.98 1.31 126 BOTNET 3732 3.56 8.59 1.30 127 T_TooManySym_03 3716 0.99 0.32 1.30 128 XM_B_Investor 3681 2.39 4.85 1.29 129 XM_OfRef6 3675 2.35 4.72 1.28 130 XM_SPF_SoftFail 3663 1.80 2.96 1.28 131 XM_B_Unsub2 3605 1.80 3.00 1.26 132 XMStockSpam_06 3512 1.79 3.03 1.23 133 HTML_IMAGE_ONLY_32 3480 0.89 0.16 1.22 134 URI_HEX 3365 1.17 1.16 1.18 135 TR_XM_DK_SendGrid 3262 1.11 1.06 1.14 136 TooManyTo_004 3240 0.93 0.48 1.13 137 HELO_NODOT 3205 0.81 0.11 1.12 138 HELO_NO_DOMAIN 3198 0.80 0.11 1.12 139 XM_B_COPY_HTML 3140 1.12 1.17 1.10 140 TVD_RCVD_IP 2978 1.02 0.99 1.04 141 TVD_SPACE_RATIO 2947 0.75 0.12 1.03 142 XM_UB50 2864 1.49 2.57 1.00 143 XMCapTrack 2824 0.91 0.73 0.99 144 HTML_IMAGE_ONLY_20 2706 0.95 0.96 0.95 145 XM_ShortIntro_01 2667 0.78 0.43 0.93 146 FROM_GOV_DKIM_AU 2548 0.65 0.13 0.89 147 XMBrknScrpt_02 2477 1.39 2.56 0.87 148 TooManyTo_005 2421 0.71 0.42 0.85 149 T_XMDrugObfuBody_00 2367 1.24 2.16 0.83 150 XM_B_SpammyWords4 2328 1.29 2.35 0.81 151 DKIM_ADSP_CUSTOM_MED 2289 0.94 1.25 0.80 152 XM_H_PHPMailer 2232 0.69 0.49 0.78 153 RELAYCOUNTRY_CA 2203 2.90 7.64 0.77 154 RCVD_IN_MSPIKE_BL 2203 1.86 4.28 0.77 155 TR_XM_MSPIKECOMBO 2203 1.86 4.28 0.77 156 XMGappySubj_02 2190 0.54 0.05 0.77 157 XM_B_FormFill 2113 0.51 0.02 0.74 158 T_FILL_THIS_FORM_SHORT 2111 1.33 2.64 0.74 159 RCVD_IN_BL_SPAMCOP_NET 2074 4.46 12.78 0.72 160 XM_H_Long_From02 2072 0.89 1.26 0.72 161 RCVD_IN_PBL 2070 0.84 1.09 0.72 162 XMGenDplmaNmb 2062 1.05 1.77 0.72 163 TR_MetaPhish_Combo_01 2020 0.87 1.23 0.71 164 T_OBFU_PDF_ATTACH 1980 0.53 0.18 0.69 165 RCVD_IN_MSPIKE_L3 1953 1.29 2.65 0.68 166 XMNoVowels 1943 0.70 0.76 0.68 167 SpammyFromTLD_01 1942 1.02 1.77 0.68 168 RELAYCOUNTRY_AU 1941 1.33 2.78 0.68 169 URI_TRY_3LD 1928 0.92 1.48 0.67 170 T_TVD_MIME_NO_HEADERS 1917 0.48 0.05 0.67 171 LOW_PRICE 1866 0.54 0.28 0.65 172 XM_B_DNDMA 1858 0.78 1.07 0.65 173 TR_XM_Base64_M1 1845 0.79 1.11 0.64 174 HTTPS_HTTP_MISMATCH 1715 0.68 0.85 0.60 175 XMSlimDrugH 1712 0.57 0.50 0.60 176 XM_ProductURIs 1653 0.80 1.28 0.58 177 XMBSHREFv2 1648 0.52 0.40 0.58 178 XMBody_17 1642 1.05 2.12 0.57 179 XMPhish30 1560 0.82 1.43 0.54 180 MSGID_FROM_MTA_HEADER 1526 0.46 0.31 0.53 181 FORGED_GMAIL_RCVD 1524 0.65 0.91 0.53 182 RELAYCOUNTRY_GB 1493 0.60 0.76 0.52 183 TO_NO_BRKTS_HTML_ONLY 1492 0.43 0.22 0.52 184 HTML_TAG_BALANCE_BODY 1485 0.60 0.78 0.52 185 T_Symld_Words_02 1471 0.58 0.73 0.51 186 T_XMHurry_00 1464 0.97 1.99 0.51 187 DKIM_ADSP_NXDOMAIN 1461 0.50 0.47 0.51 188 LongTLD 1461 0.81 1.48 0.51 189 NML_ADSP_CUSTOM_MED 1441 0.68 1.07 0.50 190 HTML_SHORT_LINK_IMG_3 1436 0.36 0.05 0.50 191 SpammyFromTLD_02 1425 1.13 2.54 0.50 192 TR_XM_PHPDW 1382 0.73 1.27 0.48 193 TR_XM_SpammyWords2 1379 3.45 10.05 0.48 194 TR_XM_PHPForged 1372 0.73 1.28 0.48 195 TR_XM_FormFill2 1371 0.72 1.26 0.48 196 XMSolicitRefs_0 1361 0.50 0.56 0.48 197 MPART_ALT_DIFF_COUNT 1355 0.73 1.31 0.47 198 XM_H_PHPOS 1353 0.71 1.24 0.47 199 XMSubMetaI_00 1333 0.74 1.35 0.47 200 DIET_1 1313 0.74 1.37 0.46 ----------------------------------------------------------------------