Email: 556704 Autolearn: 0 AvgScore: 1.88 AvgScanTime: 1.54 sec Spam: 151198 Autolearn: 0 AvgScore: 13.58 AvgScanTime: 1.78 sec Ham: 405506 Autolearn: 0 AvgScore: -2.49 AvgScanTime: 1.45 sec Time Spent Running SA: 238.31 hours Time Spent Processing Spam: 74.73 hours Time Spent Processing Ham: 163.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143533 89.55 94.93 87.54 2 DKIM_SIGNED 133632 68.94 88.38 61.70 3 XM_B_Unicode 128577 75.80 85.04 72.36 4 XM_DK_Pass 128214 67.13 84.80 60.54 5 DKIM_VALID 126571 66.17 83.71 59.63 6 RELAYCOUNTRY_US 123756 80.48 81.85 79.97 7 T_SCC_BODY_TEXT_LINE 123329 82.78 81.57 83.24 8 DCC_CHECK 111071 40.81 73.46 28.64 9 XM_B_SpammyWords 109001 51.23 72.09 43.45 10 XMListUnsubscribeExists 105821 48.23 69.99 40.12 11 DKIM_VALID_AU 95105 51.70 62.90 47.53 12 XM_B_Unicode3 70225 42.86 46.45 41.53 13 XM_DK_Undo_02 67653 15.69 44.74 4.86 14 LOC_TINY_FONT_1 61018 25.42 40.36 19.85 15 XM_B_SpammyWords2 60940 22.47 40.30 15.82 16 BAYES_50 59106 52.42 39.09 57.39 17 HTML_FONT_LOW_CONTRAST 54285 26.75 35.90 23.33 18 BAYES_99 53604 12.38 35.45 3.78 19 TR_XM_DKIM_Undo 52733 10.95 34.88 2.03 20 FVGT_m_MULTI_ODD 50030 24.37 33.09 21.12 21 DKIM_VALID_EF 47867 26.28 31.66 24.28 22 MIME_HTML_ONLY 47766 24.83 31.59 22.31 23 T_KAM_HTML_FONT_INVALID 43994 19.92 29.10 16.50 24 BAYES_999 42291 9.75 27.97 2.96 25 DCC_CHECK_NEGATIVE 40107 59.15 26.53 71.32 26 TR_DCC_Bayes_99 38709 7.94 25.60 1.36 27 XMSubLong 37162 24.14 24.58 23.98 28 RCVD_IN_MSPIKE_H2 36693 20.18 24.27 18.65 29 T_TM2_M_HEADER_IN_MSG 35066 24.72 23.19 25.30 30 TR_XM_DK_Unsub 32788 14.11 21.69 11.29 31 XM_Multi_Part_URI 30212 13.73 19.98 11.39 32 RELAYCOUNTRY_META 27633 7.47 18.28 3.44 33 XM_B_Unsub 25562 9.81 16.91 7.17 34 TR_XM_BayesUnsub 24603 8.46 16.27 5.55 35 BOTNET_IPINHOSTNAME 23768 6.93 15.72 3.66 36 TR_XM_SpammyRelay 21998 5.29 14.55 1.83 37 UNPARSEABLE_RELAY 21094 10.13 13.95 8.70 38 XM_B_SpammyWords3 20457 6.19 13.53 3.45 39 XM_Body_Dirty_Words 20218 7.36 13.37 5.11 40 LOTS_OF_MONEY 20191 7.46 13.35 5.26 41 TR_XM_SpammyWords2 19055 3.68 12.60 0.35 42 RCVD_IN_BL_SPAMCOP_NET 18294 3.72 12.10 0.60 43 BOTNET 18149 4.09 12.00 1.14 44 TR_XM_SpammyWords4 18075 5.90 11.95 3.65 45 FSL_BULK_SIG 14877 5.66 9.84 4.11 46 RELAYCOUNTRY_CA 14508 3.21 9.60 0.83 47 XM_Evil_Numbers_Gen 14010 8.66 9.27 8.44 48 TR_XM_SPAMCOP 14007 2.70 9.26 0.25 49 BAYES_80 13096 4.80 8.66 3.35 50 RCVD_IN_MSPIKE_H3 12928 6.14 8.55 5.25 51 RCVD_IN_MSPIKE_WL 12928 6.14 8.55 5.25 52 TR_XM_UnparsRelay 11565 3.15 7.65 1.47 53 BAYES_60 11426 7.44 7.56 7.39 54 LotsOfNums_01 10828 7.14 7.16 7.13 55 HTML_IMAGE_RATIO_02 10393 4.89 6.87 4.15 56 XM_UncommonTLD01 9936 4.07 6.57 3.14 57 XMSubMetaSx_00 9564 5.39 6.33 5.04 58 HTML_IMAGE_RATIO_04 9553 12.59 6.32 14.93 59 XMSexyCombo_05 9145 2.77 6.05 1.55 60 UNTRUSTED_Relay 8776 2.48 5.80 1.24 61 MPART_ALT_DIFF 8530 8.33 5.64 9.34 62 XM_H_Long_From01 8409 4.86 5.56 4.60 63 BAYES_95 7778 2.88 5.14 2.04 64 XM_H_GMP 7636 5.30 5.05 5.40 65 TooManyTo_001 7585 7.08 5.02 7.84 66 XM_B_Investor 7495 2.38 4.96 1.43 67 XM_B_Phish_Phrases 7222 3.27 4.78 2.71 68 XMBody_17 7075 1.53 4.68 0.36 69 DKIM_INVALID 7061 2.77 4.67 2.06 70 TR_XM_SpammyWords5 6968 2.16 4.61 1.24 71 XM_SPF_SoftFail 6859 3.27 4.54 2.80 72 HTML_IMAGE_RATIO_06 6772 4.61 4.48 4.66 73 XM_OfRef6 6620 1.92 4.38 1.00 74 XM_B_SpammyTLD 6206 2.63 4.10 2.08 75 TR_XM_PhishingBody 6106 2.48 4.04 1.89 76 T_FILL_THIS_FORM_SHORT 5905 1.63 3.91 0.78 77 XMStrtUSub 5858 8.69 3.87 10.48 78 MIME_HTML_MOSTLY 5783 2.64 3.82 2.19 79 XMNumbers 5719 2.72 3.78 2.32 80 MIME_QP_LONG_LINE 5305 4.13 3.51 4.36 81 T_XMDrugObfuBody_14 5200 2.08 3.44 1.58 82 MIME_HTML_ONLY_MULTI 5195 6.56 3.44 7.72 83 TM2_M_VERY_LONG_WORD 5013 1.58 3.32 0.94 84 HTML_IMAGE_RATIO_08 4939 2.20 3.27 1.80 85 TR_XM_BayesRelay 4849 0.87 3.21 0.00 86 SpammyFromTLD_01 4647 1.35 3.07 0.71 87 XM_CamelCaseFrm001 4461 2.02 2.95 1.67 88 RCVD_IN_VALIDITY_SAFE 4399 3.55 2.91 3.79 89 XM_UB50 4306 1.28 2.85 0.70 90 TR_XM_FormFill 4254 0.78 2.81 0.02 91 XM_B_Unsub2 4203 1.61 2.78 1.18 92 XM_B_SpammyWords4 4193 1.11 2.77 0.50 93 XMDiploma_00 4171 1.74 2.76 1.36 94 T_XMDrugObfuBody_08 4087 1.68 2.70 1.30 95 XM_URI_RBL 4047 0.81 2.68 0.11 96 USER_IN_DEF_DKIM_WL 3781 8.02 2.50 10.08 97 SUBJ_ALL_CAPS 3746 1.57 2.48 1.24 98 HK_RANDOM_REPLYTO 3690 0.73 2.44 0.09 99 RCVD_IN_VALIDITY_CERTIFIED 3659 3.07 2.42 3.31 100 ANY_BOUNCE_MESSAGE 3653 4.10 2.42 4.73 101 BOUNCE_MESSAGE 3652 4.10 2.42 4.73 102 TM2_M_URI_OPT_OUT 3632 2.01 2.40 1.86 103 FROM_EXCESS_BASE64 3510 2.17 2.32 2.12 104 T_TooManySym_01 3483 4.16 2.30 4.86 105 RELAYCOUNTRY_AU 3307 1.14 2.19 0.74 106 TR_XM_NoHeaderRelay 3291 0.66 2.18 0.09 107 MAILING_LIST_MULTI 3157 2.24 2.09 2.29 108 XM_DIRTYINTL 3111 0.84 2.06 0.38 109 TR_Mismatch_TLD_02 3104 0.63 2.05 0.11 110 TR_XM_INV_DKIM 2965 0.57 1.96 0.05 111 HTML_MIME_NO_HTML_TAG 2785 1.78 1.84 1.76 112 SpammyFromTLD_02 2766 0.77 1.83 0.37 113 TR_XM_PHPDW 2719 0.74 1.80 0.35 114 BOTNET_NORDNS 2715 0.49 1.80 0.01 115 T_REMOTE_IMAGE 2707 2.77 1.79 3.14 116 RCVD_IN_IADB_LISTED 2706 3.24 1.79 3.78 117 XM_H_Undi_Recip 2681 0.62 1.77 0.18 118 TR_XM_PHPForged 2677 0.72 1.77 0.33 119 XMStockSpam_06 2676 1.05 1.77 0.79 120 DIET_1 2624 0.65 1.74 0.25 121 TR_XM_FormFill2 2559 0.70 1.69 0.33 122 FONT_INVIS_LONG_LINE 2551 0.50 1.69 0.05 123 XMSexyCombo_01 2549 0.71 1.69 0.34 124 XM_H_PHPOS 2537 0.68 1.68 0.31 125 AC_BR_BONANZA 2468 0.50 1.63 0.07 126 T_XMDrugObfuBody_00 2464 0.77 1.63 0.45 127 RCVD_IN_IADB_SPF 2438 2.91 1.61 3.40 128 URI_TRY_3LD 2407 0.77 1.59 0.46 129 URI_HEX 2336 1.00 1.54 0.79 130 RCVD_IN_IADB_DK 2334 2.62 1.54 3.02 131 RCVD_IN_IADB_SENDERID 2334 2.68 1.54 3.10 132 XM_DK_Undo_01 2322 1.58 1.54 1.60 133 HTML_TAG_BALANCE_BODY 2280 0.67 1.51 0.35 134 XM_SendGrid 2228 1.20 1.47 1.10 135 BAYES_40 2185 4.33 1.45 5.41 136 TR_LOTS_OF_MONEY3 2183 0.63 1.44 0.32 137 URI_NOVOWEL 2161 1.52 1.43 1.56 138 TR_XM_Undi_Recip11 2125 0.41 1.41 0.04 139 HTTPS_HTTP_MISMATCH 2101 0.89 1.39 0.71 140 TR_XM_Undi_Recip5 2098 0.38 1.39 0.01 141 ALL_TRUSTED 2088 13.20 1.38 17.61 142 XMPhish30 2075 0.70 1.37 0.44 143 RCVD_IN_PSBL 2029 0.51 1.34 0.21 144 XM_HighProb1 2028 0.37 1.34 0.00 145 KHOP_HELO_FCRDNS 2022 1.12 1.34 1.04 146 T_XMHurry_00 1984 0.72 1.31 0.49 147 DKIM_ADSP_CUSTOM_MED 1916 0.90 1.27 0.76 148 TR_XM_Undi_RecipCombo2 1879 0.34 1.24 0.00 149 XMSubMetaSxObfu_03 1845 0.74 1.22 0.55 150 BAYES_20 1785 3.11 1.18 3.83 151 UNDISC_MONEY 1782 0.33 1.18 0.01 152 XMBdyGiftCard01 1767 0.82 1.17 0.69 153 XM_B_COPY_HTML 1765 0.75 1.17 0.60 154 NML_ADSP_CUSTOM_MED 1756 0.69 1.16 0.51 155 XMGenDplmaNmb 1740 0.83 1.15 0.71 156 XM_B_DNDMA 1732 0.63 1.15 0.43 157 TR_XM_InvalidRelay 1728 0.33 1.14 0.03 158 XM_H_Long_From02 1722 0.95 1.14 0.88 159 XM_H_PHPMailer 1690 0.82 1.12 0.71 160 PDS_OTHER_BAD_TLD 1687 0.41 1.12 0.14 161 XM_B_COVIDMETA 1669 0.45 1.10 0.20 162 FORGED_GMAIL_RCVD 1646 0.60 1.09 0.42 163 TR_LOTS_OF_MONEY2 1606 0.40 1.06 0.15 164 T_MONEY_PERCENT 1606 0.40 1.06 0.15 165 XM_UB99 1584 0.29 1.05 0.00 166 XMLngstWrd_00 1582 0.89 1.05 0.84 167 TR_Caps_n_Bayes_99 1569 0.29 1.04 0.01 168 XMHTML_After_End 1567 0.72 1.04 0.60 169 XMReplyNow 1556 0.41 1.03 0.18 170 TR_XM_Undi_Recip2 1541 0.29 1.02 0.02 171 XMPhish14 1540 0.87 1.02 0.82 172 XM_B_Phish66 1538 0.46 1.02 0.25 173 RCVD_IN_VALIDITY_RPBL 1529 0.30 1.01 0.04 174 XMBody_78 1503 0.48 0.99 0.28 175 RDNS_DYNAMIC 1479 0.50 0.98 0.32 176 TR_XM_Base64_M1 1475 0.64 0.98 0.51 177 SHOPIFY_IMG_NOT_RCVD_SFY 1462 0.40 0.97 0.19 178 MPART_ALT_DIFF_COUNT 1461 0.60 0.97 0.47 179 XMClaimOffer 1456 0.33 0.96 0.09 180 TR_Symld_Words 1433 1.23 0.95 1.34 181 XM_Body_Dirty_Words_01 1432 0.38 0.95 0.17 182 RELAYCOUNTRY_FR 1428 0.42 0.94 0.23 183 TR_MetaPhish_Combo_01 1416 0.68 0.94 0.59 184 XMBrknScrpt_02 1379 0.60 0.91 0.49 185 XM_ProductURIs 1357 0.59 0.90 0.47 186 TR_XM_Undi_RecipCombo3 1342 0.24 0.89 0.00 187 XMNoVowels 1333 0.70 0.88 0.63 188 TR_XM_DK_SendGrid 1318 0.76 0.87 0.72 189 XM_S_SpammyWords 1306 0.47 0.86 0.32 190 TR_XM_Spammywords 1306 0.47 0.86 0.32 191 XMSlimDrugH 1301 0.42 0.86 0.25 192 T_Symld_Words_02 1287 0.48 0.85 0.34 193 SCC_BODY_URI_ONLY 1284 1.73 0.85 2.05 194 TM2_M_OBFU_COMMENT 1274 0.43 0.84 0.28 195 T_XMDrugObfuBody_10 1272 0.24 0.84 0.01 196 XM_B_SEO 1254 0.30 0.83 0.11 197 TVD_RCVD_IP 1231 1.20 0.81 1.34 198 TR_XM_Undi_Recip6 1226 0.22 0.81 0.00 199 TR_XM_SEO4 1225 0.26 0.81 0.06 200 BAYES_00 1215 9.91 0.80 13.30 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 354989 89.55 94.93 87.54 2 T_SCC_BODY_TEXT_LINE 337537 82.78 81.57 83.24 3 RELAYCOUNTRY_US 324278 80.48 81.85 79.97 4 XM_B_Unicode 293410 75.80 85.04 72.36 5 DCC_CHECK_NEGATIVE 289193 59.15 26.53 71.32 6 DKIM_SIGNED 250181 68.94 88.38 61.70 7 XM_DK_Pass 245484 67.13 84.80 60.54 8 DKIM_VALID 241810 66.17 83.71 59.63 9 BAYES_50 232715 52.42 39.09 57.39 10 DKIM_VALID_AU 192730 51.70 62.90 47.53 11 XM_B_SpammyWords 176202 51.23 72.09 43.45 12 XM_B_Unicode3 168396 42.86 46.45 41.53 13 XMListUnsubscribeExists 162686 48.23 69.99 40.12 14 DCC_CHECK 116127 40.81 73.46 28.64 15 T_TM2_M_HEADER_IN_MSG 102574 24.72 23.19 25.30 16 DKIM_VALID_EF 98450 26.28 31.66 24.28 17 XMSubLong 97230 24.14 24.58 23.98 18 HTML_FONT_LOW_CONTRAST 94613 26.75 35.90 23.33 19 MIME_HTML_ONLY 90458 24.83 31.59 22.31 20 FVGT_m_MULTI_ODD 85656 24.37 33.09 21.12 21 LOC_TINY_FONT_1 80506 25.42 40.36 19.85 22 RCVD_IN_MSPIKE_H2 75632 20.18 24.27 18.65 23 ALL_TRUSTED 71406 13.20 1.38 17.61 24 T_KAM_HTML_FONT_INVALID 66917 19.92 29.10 16.50 25 XM_B_SpammyWords2 64146 22.47 40.30 15.82 26 HTML_IMAGE_RATIO_04 60539 12.59 6.32 14.93 27 HTML_FONT_FACE_BAD 57541 10.54 0.77 14.19 28 BAYES_00 53937 9.91 0.80 13.30 29 XM_H_Trusted_IP 53898 9.68 0.00 13.29 30 XM_Multi_Part_URI 46199 13.73 19.98 11.39 31 TR_XM_DK_Unsub 45765 14.11 21.69 11.29 32 XMStrtUSub 42506 8.69 3.87 10.48 33 USER_IN_DEF_DKIM_WL 40871 8.02 2.50 10.08 34 MPART_ALT_DIFF 37859 8.33 5.64 9.34 35 UNPARSEABLE_RELAY 35286 10.13 13.95 8.70 36 XM_Evil_Numbers_Gen 34220 8.66 9.27 8.44 37 TooManyTo_001 31808 7.08 5.02 7.84 38 MIME_HTML_ONLY_MULTI 31311 6.56 3.44 7.72 39 BAYES_60 29977 7.44 7.56 7.39 40 XM_B_Unsub 29069 9.81 16.91 7.17 41 LotsOfNums_01 28920 7.14 7.16 7.13 42 XM_DKIMWhitelistDomains 27426 5.00 0.26 6.76 43 IN_ZIMBRA_NJ_WHITELIST 24241 4.38 0.10 5.98 44 TR_XM_DK_Bayes 23065 4.30 0.57 5.69 45 TR_XM_DK_Bayes1 22627 4.22 0.56 5.58 46 TR_XM_BayesUnsub 22499 8.46 16.27 5.55 47 BAYES_40 21919 4.33 1.45 5.41 48 XM_H_GMP 21888 5.30 5.05 5.40 49 LOTS_OF_MONEY 21332 7.46 13.35 5.26 50 RCVD_IN_MSPIKE_WL 21274 6.14 8.55 5.25 51 RCVD_IN_MSPIKE_H3 21273 6.14 8.55 5.25 52 XM_Body_Dirty_Words 20733 7.36 13.37 5.11 53 XMSubMetaSx_00 20448 5.39 6.33 5.04 54 XM_DK_Undo_02 19706 15.69 44.74 4.86 55 T_TooManySym_01 19695 4.16 2.30 4.86 56 TR_XM_DK_Bayes2 19344 3.57 0.37 4.77 57 XMSubNoVowel 19319 3.63 0.58 4.76 58 ANY_BOUNCE_MESSAGE 19171 4.10 2.42 4.73 59 BOUNCE_MESSAGE 19170 4.10 2.42 4.73 60 HTML_IMAGE_RATIO_06 18887 4.61 4.48 4.66 61 XM_H_Long_From01 18640 4.86 5.56 4.60 62 MIME_QP_LONG_LINE 17677 4.13 3.51 4.36 63 HTML_IMAGE_RATIO_02 16840 4.89 6.87 4.15 64 FSL_BULK_SIG 16649 5.66 9.84 4.11 65 XM_PDF 16084 3.04 0.55 3.97 66 BAYES_20 15537 3.11 1.18 3.83 67 RCVD_IN_VALIDITY_SAFE 15388 3.55 2.91 3.79 68 BAYES_99 15320 12.38 35.45 3.78 69 RCVD_IN_IADB_LISTED 15316 3.24 1.79 3.78 70 BOTNET_IPINHOSTNAME 14832 6.93 15.72 3.66 71 TR_XM_SpammyWords4 14786 5.90 11.95 3.65 72 BAYES_05 14214 2.73 0.66 3.51 73 XM_B_SpammyWords3 13980 6.19 13.53 3.45 74 RELAYCOUNTRY_META 13931 7.47 18.28 3.44 75 RCVD_IN_IADB_SPF 13776 2.91 1.61 3.40 76 BAYES_80 13603 4.80 8.66 3.35 77 RCVD_IN_VALIDITY_CERTIFIED 13422 3.07 2.42 3.31 78 T_REMOTE_IMAGE 12741 2.77 1.79 3.14 79 XM_UncommonTLD01 12738 4.07 6.57 3.14 80 RCVD_IN_IADB_SENDERID 12569 2.68 1.54 3.10 81 RCVD_IN_IADB_DK 12244 2.62 1.54 3.02 82 BAYES_999 12006 9.75 27.97 2.96 83 XM_SPF_SoftFail 11362 3.27 4.54 2.80 84 XM_B_Phish_Phrases 10980 3.27 4.78 2.71 85 TooManyTo_002 9487 1.89 0.70 2.34 86 XMNumbers 9400 2.72 3.78 2.32 87 MAILING_LIST_MULTI 9305 2.24 2.09 2.29 88 T_TooManySym_02 9171 1.85 0.76 2.26 89 RCVD_IN_IADB_VOUCHED 8909 1.79 0.71 2.20 90 MIME_HTML_MOSTLY 8896 2.64 3.82 2.19 91 XMSubLongNoVowel 8756 1.62 0.17 2.16 92 XMSubGarbage 8676 1.57 0.03 2.14 93 FROM_EXCESS_BASE64 8586 2.17 2.32 2.12 94 XM_B_SpammyTLD 8441 2.63 4.10 2.08 95 DKIM_INVALID 8371 2.77 4.67 2.06 96 SCC_BODY_URI_ONLY 8331 1.73 0.85 2.05 97 BAYES_95 8281 2.88 5.14 2.04 98 TR_XM_DKIM_Undo 8216 10.95 34.88 2.03 99 TR_XM_PhishingBody 7684 2.48 4.04 1.89 100 TM2_M_URI_OPT_OUT 7557 2.01 2.40 1.86 101 TR_XM_SpammyRelay 7424 5.29 14.55 1.83 102 HTML_IMAGE_RATIO_08 7307 2.20 3.27 1.80 103 INVALID_MSGID 7135 1.34 0.21 1.76 104 HTML_MIME_NO_HTML_TAG 7129 1.78 1.84 1.76 105 XM_CamelCaseFrm001 6761 2.02 2.95 1.67 106 RCVD_IN_IADB_OPTIN 6492 1.30 0.49 1.60 107 XM_DK_Undo_01 6472 1.58 1.54 1.60 108 HELO_NODOT 6450 1.31 0.56 1.59 109 HELO_NO_DOMAIN 6447 1.31 0.56 1.59 110 T_XMDrugObfuBody_14 6398 2.08 3.44 1.58 111 URI_NOVOWEL 6313 1.52 1.43 1.56 112 TO_MALFORMED 6287 1.14 0.04 1.55 113 XMSexyCombo_05 6276 2.77 6.05 1.55 114 TR_XM_UnparsRelay 5965 3.15 7.65 1.47 115 XM_B_Investor 5782 2.38 4.96 1.43 116 XMDiploma_00 5513 1.74 2.76 1.36 117 TR_DCC_Bayes_99 5496 7.94 25.60 1.36 118 TooManyTo_003 5487 1.14 0.58 1.35 119 TVD_RCVD_IP 5451 1.20 0.81 1.34 120 TR_Symld_Words 5423 1.23 0.95 1.34 121 T_XMDrugObfuBody_08 5282 1.68 2.70 1.30 122 IN_HORDE_ADDRESS_BOOK 5256 0.97 0.11 1.30 123 XMGappySubj_01 5214 1.00 0.24 1.29 124 TR_XM_SpammyWords5 5036 2.16 4.61 1.24 125 UNTRUSTED_Relay 5025 2.48 5.80 1.24 126 SUBJ_ALL_CAPS 5021 1.57 2.48 1.24 127 XM_B_Unsub2 4771 1.61 2.78 1.18 128 XM_GoogleGroups 4670 0.97 0.49 1.15 129 BOTNET 4640 4.09 12.00 1.14 130 XMCapTrack 4543 0.95 0.49 1.12 131 XM_SendGrid 4462 1.20 1.47 1.10 132 XM_E_Blogspot 4223 0.77 0.05 1.04 133 KHOP_HELO_FCRDNS 4222 1.12 1.34 1.04 134 TVD_SPACE_RATIO 4068 0.79 0.20 1.00 135 XM_OfRef6 4052 1.92 4.38 1.00 136 TooManyTo_004 4038 0.87 0.54 1.00 137 XMBody_95 3904 0.78 0.29 0.96 138 TM2_M_VERY_LONG_WORD 3801 1.58 3.32 0.94 139 XMBSHREFv2 3794 0.80 0.43 0.94 140 XM_H_Long_From02 3582 0.95 1.14 0.88 141 XMLngstWrd_00 3393 0.89 1.05 0.84 142 RELAYCOUNTRY_CA 3355 3.21 9.60 0.83 143 XMPhish14 3326 0.87 1.02 0.82 144 TooManyTo_005 3295 0.73 0.51 0.81 145 URI_HEX 3213 1.00 1.54 0.79 146 XMStockSpam_06 3197 1.05 1.77 0.79 147 T_FILL_THIS_FORM_SHORT 3158 1.63 3.91 0.78 148 T_TooManySym_03 3116 0.64 0.29 0.77 149 XMGappySubj_02 3085 0.57 0.06 0.76 150 DKIM_ADSP_CUSTOM_MED 3072 0.90 1.27 0.76 151 RCVD_IN_RP_SAFE 3048 0.71 0.59 0.75 152 RELAYCOUNTRY_AU 3021 1.14 2.19 0.74 153 TR_XM_DK_SendGrid 2922 0.76 0.87 0.72 154 XMGenDplmaNmb 2891 0.83 1.15 0.71 155 HTTPS_HTTP_MISMATCH 2872 0.89 1.39 0.71 156 XM_H_PHPMailer 2872 0.82 1.12 0.71 157 SpammyFromTLD_01 2866 1.35 3.07 0.71 158 XM_UB50 2841 1.28 2.85 0.70 159 XMBdyGiftCard01 2800 0.82 1.17 0.69 160 RCVD_IN_RP_CERTIFIED 2635 0.60 0.48 0.65 161 XMMoneyMeta_00 2599 0.67 0.76 0.64 162 XMNoVowels 2551 0.70 0.88 0.63 163 XMHTML_After_End 2453 0.72 1.04 0.60 164 FILL_THIS_FORM 2449 0.61 0.63 0.60 165 XM_B_COPY_HTML 2433 0.75 1.17 0.60 166 RCVD_IN_BL_SPAMCOP_NET 2426 3.72 12.10 0.60 167 TR_MetaPhish_Combo_01 2386 0.68 0.94 0.59 168 T_OBFU_PDF_ATTACH 2379 0.45 0.08 0.59 169 MSGID_NOFQDN1 2371 0.43 0.03 0.58 170 FROM_GOV_DKIM_AU 2346 0.54 0.45 0.58 171 XMSubMetaSxObfu_03 2247 0.74 1.22 0.55 172 XM_ShortIntro_01 2223 0.54 0.50 0.55 173 NML_ADSP_CUSTOM_MED 2084 0.69 1.16 0.51 174 HTML_IMAGE_ONLY_28 2072 0.45 0.27 0.51 175 TR_XM_Base64_M1 2071 0.64 0.98 0.51 176 XM_B_SpammyWords4 2010 1.11 2.77 0.50 177 T_XMHurry_00 2005 0.72 1.31 0.49 178 XMBrknScrpt_02 1977 0.60 0.91 0.49 179 SHORT_HELO_AND_INLINE_IMAGE 1976 0.37 0.05 0.49 180 XM_ProductURIs 1900 0.59 0.90 0.47 181 MPART_ALT_DIFF_COUNT 1891 0.60 0.97 0.47 182 RELAYCOUNTRY_GB 1886 0.47 0.48 0.47 183 URI_TRY_3LD 1858 0.77 1.59 0.46 184 USER_IN_WHITELIST 1819 0.33 0.00 0.45 185 USER_IN_WELCOMELIST 1819 0.33 0.00 0.45 186 T_XMDrugObfuBody_00 1809 0.77 1.63 0.45 187 XMPhish30 1799 0.70 1.37 0.44 188 XM_B_DNDMA 1763 0.63 1.15 0.43 189 XM_TLDProd2 1759 0.51 0.71 0.43 190 XMSubMetaI_00 1751 0.50 0.67 0.43 191 FORGED_GMAIL_RCVD 1687 0.60 1.09 0.42 192 XM_B_FormFill 1647 0.32 0.08 0.41 193 TO_NO_BRKTS_HTML_ONLY 1646 0.36 0.25 0.41 194 HTML_IMAGE_ONLY_20 1582 0.49 0.74 0.39 195 XM_DIRTYINTL 1546 0.84 2.06 0.38 196 SpammyFromTLD_02 1501 0.77 1.83 0.37 197 RCVD_IN_SORBS_DUL 1473 0.29 0.08 0.36 198 XMBody_17 1456 1.53 4.68 0.36 199 TR_XM_SpammyWords2 1432 3.68 12.60 0.35 200 XMDateMe_00 1429 0.36 0.37 0.35 ----------------------------------------------------------------------