Email: 589967 Autolearn: 0 AvgScore: 4.16 AvgScanTime: 1.37 sec Spam: 176170 Autolearn: 0 AvgScore: 13.39 AvgScanTime: 1.54 sec Ham: 413797 Autolearn: 0 AvgScore: 0.23 AvgScanTime: 1.30 sec Time Spent Running SA: 225.04 hours Time Spent Processing Spam: 75.56 hours Time Spent Processing Ham: 149.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 175738 99.60 99.75 99.53 2 HTML_MESSAGE 170275 90.85 96.65 88.37 3 DKIM_SIGNED 159731 74.57 90.67 67.72 4 XM_DK_Pass 153146 72.60 86.93 66.50 5 XM_B_Unicode 152517 78.22 86.57 74.66 6 DKIM_VALID 151005 71.58 85.72 65.57 7 RELAYCOUNTRY_US 140357 75.21 79.67 73.31 8 XM_B_SpammyWords 129967 58.31 73.77 51.73 9 DCC_CHECK 127881 48.08 72.59 37.65 10 XMListUnsubscribeExists 127500 53.30 72.37 45.18 11 DKIM_VALID_AU 114351 56.45 64.91 52.85 12 XM_DK_Undo_02 79156 16.88 44.93 4.93 13 XM_B_SpammyWords2 79031 25.94 44.86 17.88 14 XM_B_Unicode3 78955 39.26 44.82 36.89 15 LOC_TINY_FONT_1 71566 28.98 40.62 24.03 16 BAYES_50 68716 54.95 39.01 61.74 17 BAYES_99 62562 13.16 35.51 3.65 18 HTML_FONT_LOW_CONTRAST 62443 27.75 35.44 24.48 19 TR_XM_DKIM_Undo 60645 11.86 34.42 2.25 20 RCVD_IN_MSPIKE_H2 54945 27.61 31.19 26.08 21 FVGT_m_MULTI_ODD 54757 25.32 31.08 22.87 22 DKIM_VALID_EF 54049 27.18 30.68 25.69 23 MIME_HTML_ONLY 52255 20.06 29.66 15.97 24 T_KAM_HTML_FONT_INVALID 51285 22.14 29.11 19.17 25 BAYES_999 49653 10.35 28.18 2.76 26 DCC_CHECK_NEGATIVE 48271 51.88 27.40 62.30 27 TR_DCC_Bayes_99 44029 8.53 24.99 1.53 28 T_TM2_M_HEADER_IN_MSG 43021 33.65 24.42 37.58 29 XMSubLong 40768 26.76 23.14 28.30 30 TR_XM_DK_Unsub 39240 15.10 22.27 12.04 31 RELAYCOUNTRY_META 34440 8.49 19.55 3.78 32 XM_Multi_Part_URI 33664 14.77 19.11 12.92 33 LOTS_OF_MONEY 27844 9.12 15.81 6.27 34 TR_XM_SpammyRelay 27721 6.15 15.74 2.07 35 XM_B_SpammyWords3 27349 7.89 15.52 4.63 36 TR_XM_SpammyWords2 27081 4.98 15.37 0.55 37 XM_B_Unsub 26684 9.47 15.15 7.05 38 TR_XM_BayesUnsub 25786 8.36 14.64 5.69 39 TR_XM_SpammyWords4 25608 7.44 14.54 4.41 40 TR_MAX_INTL_RELAY 25165 9.23 14.28 7.07 41 UNPARSEABLE_RELAY 24511 10.61 13.91 9.21 42 BOTNET_IPINHOSTNAME 23517 6.50 13.35 3.59 43 RCVD_IN_BL_SPAMCOP_NET 21234 4.04 12.05 0.63 44 RELAYCOUNTRY_CA 18645 3.98 10.58 1.17 45 TR_XM_SPAMCOP 17871 3.30 10.14 0.39 46 BOTNET 16025 3.53 9.10 1.15 47 BAYES_80 15296 5.91 8.68 4.74 48 XM_Evil_Numbers_Gen 14509 7.92 8.24 7.79 49 RCVD_IN_MSPIKE_WL 14350 6.35 8.15 5.59 50 RCVD_IN_MSPIKE_H3 14350 6.35 8.15 5.59 51 FSL_BULK_SIG 13801 4.83 7.83 3.54 52 BAYES_60 13408 8.83 7.61 9.35 53 TR_XM_UnparsRelay 13361 3.32 7.58 1.50 54 XMBody_17 13087 2.59 7.43 0.53 55 XM_Body_Dirty_Words 11365 3.47 6.45 2.21 56 LotsOfNums_01 11298 7.24 6.41 7.60 57 HTML_IMAGE_RATIO_02 11186 4.74 6.35 4.05 58 XM_B_Phish_Phrases 10797 11.79 6.13 14.21 59 XM_UncommonTLD01 10704 4.13 6.08 3.30 60 UNTRUSTED_Relay 10258 2.67 5.82 1.33 61 XMSubMetaSx_00 10072 4.27 5.72 3.65 62 BAYES_95 9111 3.18 5.17 2.33 63 HTML_IMAGE_RATIO_06 9021 3.78 5.12 3.20 64 MPART_ALT_DIFF 8863 3.77 5.03 3.23 65 XM_SPF_SoftFail 8830 3.58 5.01 2.98 66 XM_B_Investor 8743 2.79 4.96 1.87 67 DKIM_INVALID 8726 2.99 4.95 2.16 68 XM_H_Long_From01 8593 5.12 4.88 5.22 69 TooManyTo_001 8519 6.78 4.84 7.60 70 HTML_IMAGE_RATIO_04 8476 4.30 4.81 4.09 71 TR_XM_SpammyWords5 7821 2.15 4.44 1.17 72 XM_B_SpammyTLD 7808 10.62 4.43 13.26 73 XM_H_GMP 7792 5.17 4.42 5.49 74 XM_B_SEO 7739 2.14 4.39 1.19 75 TM2_M_URI_OPT_OUT 7415 9.98 4.21 12.44 76 XMSexyCombo_05 7164 2.15 4.07 1.34 77 TR_XM_PhishingBody 7141 2.24 4.05 1.47 78 XMNumbers 7085 3.15 4.02 2.77 79 HTML_IMAGE_RATIO_08 7063 3.08 4.01 2.69 80 TR_LOTS_OF_MONEY3 6891 1.55 3.91 0.55 81 XMStrtUSub 6784 3.84 3.85 3.83 82 TR_XM_SEO4 6624 1.61 3.76 0.70 83 MIME_QP_LONG_LINE 6546 12.06 3.72 15.62 84 T_XMDrugObfuBody_14 6519 2.21 3.70 1.58 85 MIME_HTML_MOSTLY 6143 2.47 3.49 2.04 86 XM_OfRef6 6019 1.72 3.42 1.00 87 TM2_M_VERY_LONG_WORD 5978 1.99 3.39 1.39 88 HK_RANDOM_REPLYTO 5920 1.08 3.36 0.10 89 T_FILL_THIS_FORM_SHORT 5746 1.56 3.26 0.84 90 T_XMDrugObfuBody_08 5380 1.89 3.05 1.40 91 MIME_HTML_ONLY_MULTI 5283 2.15 3.00 1.79 92 T_XMHurry_00 5179 1.30 2.94 0.61 93 RCVD_IN_VALIDITY_SAFE 5149 3.64 2.92 3.94 94 XM_UB50 5100 1.43 2.89 0.81 95 XMDiploma_00 4934 2.04 2.80 1.72 96 FONT_INVIS_LONG_LINE 4840 0.86 2.75 0.06 97 XM_URI_RBL 4672 0.89 2.65 0.14 98 T_TooManySym_01 4530 4.10 2.57 4.75 99 XM_CamelCaseFrm001 4518 2.41 2.56 2.35 100 RCVD_IN_VALIDITY_RPBL 4472 0.82 2.54 0.08 101 TR_XM_BayesRelay 4332 0.73 2.46 0.00 102 XM_B_SpammyWords4 4244 1.44 2.41 1.03 103 RCVD_IN_VALIDITY_CERTIFIED 4234 3.02 2.40 3.28 104 ANY_BOUNCE_MESSAGE 4139 5.43 2.35 6.74 105 BOUNCE_MESSAGE 4137 5.43 2.35 6.74 106 SUBJ_ALL_CAPS 4057 1.60 2.30 1.30 107 XM_B_Unsub2 4057 1.71 2.30 1.45 108 USER_IN_DEF_DKIM_WL 3969 9.66 2.25 12.81 109 SpammyFromTLD_01 3788 1.14 2.15 0.71 110 ALL_TRUSTED 3719 17.26 2.11 23.71 111 TR_XM_INV_DKIM 3610 0.65 2.05 0.06 112 RELAYCOUNTRY_AU 3606 1.08 2.05 0.66 113 TR_XM_FormFill 3492 0.61 1.98 0.03 114 URI_TRY_3LD 3473 1.09 1.97 0.72 115 TR_XM_NoHeaderRelay 3231 0.64 1.83 0.13 116 MAILING_LIST_MULTI 3097 2.40 1.76 2.68 117 T_REMOTE_IMAGE 3092 2.68 1.76 3.08 118 FROM_EXCESS_BASE64 2969 1.66 1.69 1.65 119 HOSTED_IMG_MULTI_PUB_01 2954 0.51 1.68 0.01 120 SpammyFromTLD_02 2943 0.79 1.67 0.41 121 XM_DK_Undo_01 2926 1.64 1.66 1.64 122 XM_H_Long_From02 2845 1.16 1.61 0.96 123 HTML_MIME_NO_HTML_TAG 2780 1.62 1.58 1.63 124 TR_XM_PHPForged 2760 0.68 1.57 0.30 125 BAYES_40 2699 3.70 1.53 4.63 126 TR_XM_PHPDW 2697 0.66 1.53 0.29 127 TR_XM_FormFill2 2658 0.66 1.51 0.30 128 XM_H_PHPOS 2631 0.65 1.49 0.29 129 URI_HEX 2588 1.05 1.47 0.88 130 TR_LOTS_OF_MONEY2 2494 0.58 1.42 0.22 131 T_MONEY_PERCENT 2494 0.58 1.42 0.22 132 XMBrknScrpt_02 2490 0.94 1.41 0.74 133 KHOP_HELO_FCRDNS 2458 1.37 1.40 1.36 134 RCVD_IN_IADB_LISTED 2446 2.81 1.39 3.42 135 XM_SendGrid 2429 1.24 1.38 1.19 136 XMPhish30 2406 0.71 1.37 0.43 137 XMStockSpam_06 2404 1.10 1.36 0.98 138 XMGenDplmaNmb 2397 1.02 1.36 0.88 139 TR_XM_InvalidRelay 2288 0.40 1.30 0.02 140 HTTPS_HTTP_MISMATCH 2283 0.96 1.30 0.81 141 TM2_M_A_HREF_HREF 2250 0.56 1.28 0.25 142 TR_Mismatch_TLD_02 2193 0.41 1.24 0.05 143 DKIM_ADSP_CUSTOM_MED 2152 0.90 1.22 0.76 144 TR_Symld_Words 2130 1.30 1.21 1.33 145 RCVD_IN_IADB_SPF 2108 2.46 1.20 3.00 146 XM_HighProb1 2071 0.35 1.18 0.00 147 T_XMDrugObfuBody_00 2060 0.88 1.17 0.76 148 BOTNET_NORDNS 2044 0.35 1.16 0.01 149 HTML_TAG_BALANCE_BODY 2009 0.67 1.14 0.47 150 RCVD_IN_IADB_SENDERID 1996 2.20 1.13 2.66 151 XMHTML_After_End 1988 0.67 1.13 0.47 152 URI_NOVOWEL 1968 1.10 1.12 1.10 153 XM_DIRTYINTL 1966 0.39 1.12 0.09 154 XM_B_COPY_HTML 1964 0.77 1.11 0.62 155 LongTLD 1958 0.53 1.11 0.28 156 PDS_OTHER_BAD_TLD 1939 0.48 1.10 0.22 157 MIME_CHARSET_FARAWAY 1934 0.53 1.10 0.28 158 DKIM_ADSP_NXDOMAIN 1932 0.51 1.10 0.26 159 RCVD_IN_IADB_DK 1903 2.14 1.08 2.60 160 BAYES_20 1866 2.53 1.06 3.15 161 XMSubMetaI_00 1837 0.70 1.04 0.55 162 XMLngstWrd_00 1831 0.81 1.04 0.72 163 NML_ADSP_CUSTOM_MED 1787 0.67 1.01 0.52 164 THIS_AD 1759 0.55 1.00 0.35 165 AC_BR_BONANZA 1733 0.34 0.98 0.07 166 XM_B_DNDMA 1714 0.59 0.97 0.43 167 XMBdyGiftCard01 1700 0.82 0.96 0.76 168 XM_B_Phish66 1683 0.45 0.96 0.23 169 XMReplyNow 1681 0.42 0.95 0.19 170 TR_XM_Base64_M1 1651 0.65 0.94 0.52 171 TR_Caps_n_Bayes_99 1649 0.30 0.94 0.02 172 XM_H_Undi_Recip 1646 0.39 0.93 0.16 173 SCC_BODY_URI_ONLY 1644 1.69 0.93 2.02 174 XM_UB99 1619 0.28 0.92 0.00 175 RELAYCOUNTRY_GB 1615 0.56 0.92 0.41 176 MPART_ALT_DIFF_COUNT 1597 0.72 0.91 0.65 177 TR_XM_DK_SendGrid 1585 0.81 0.90 0.77 178 TooManyTo_002 1545 1.84 0.88 2.25 179 XMSexyCombo_01 1540 0.36 0.87 0.14 180 RELAYCOUNTRY_FR 1521 0.42 0.86 0.23 181 TR_MetaPhish_Combo_01 1506 0.92 0.85 0.95 182 TR_XM_RelayPhish 1476 0.28 0.84 0.04 183 XMPhish14 1451 0.63 0.82 0.55 184 FORGED_GMAIL_RCVD 1439 0.56 0.82 0.44 185 RDNS_DYNAMIC 1438 0.43 0.82 0.27 186 T_STY_INVIS_DIRECT 1424 0.43 0.81 0.27 187 T_TooManySym_02 1423 1.91 0.81 2.37 188 BAYES_00 1421 6.23 0.81 8.54 189 XM_H_PHPMailer 1416 0.62 0.80 0.55 190 XMPhish08 1415 0.39 0.80 0.22 191 XM_Combo_Sbj 1410 0.46 0.80 0.32 192 AC_HTML_NONSENSE_TAGS 1404 0.25 0.80 0.02 193 TooManyTo_003 1390 1.14 0.79 1.29 194 XMBody_78 1366 0.40 0.78 0.24 195 XM_B_COVIDMETA 1361 0.37 0.77 0.21 196 XM_UB60 1352 0.27 0.77 0.06 197 TR_XM_Undi_Recip19 1325 0.27 0.75 0.07 198 URIBL_DBL_SPAM 1324 0.23 0.75 0.00 199 XMClaimOffer 1306 0.37 0.74 0.22 200 TooManyTo_004 1277 0.87 0.72 0.94 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 411846 99.60 99.75 99.53 2 HTML_MESSAGE 365689 90.85 96.65 88.37 3 XM_B_Unicode 308929 78.22 86.57 74.66 4 RELAYCOUNTRY_US 303373 75.21 79.67 73.31 5 DKIM_SIGNED 280236 74.57 90.67 67.72 6 XM_DK_Pass 275185 72.60 86.93 66.50 7 DKIM_VALID 271314 71.58 85.72 65.57 8 DCC_CHECK_NEGATIVE 257800 51.88 27.40 62.30 9 BAYES_50 255493 54.95 39.01 61.74 10 DKIM_VALID_AU 218675 56.45 64.91 52.85 11 XM_B_SpammyWords 214047 58.31 73.77 51.73 12 XMListUnsubscribeExists 186967 53.30 72.37 45.18 13 DCC_CHECK 155784 48.08 72.59 37.65 14 T_TM2_M_HEADER_IN_MSG 155488 33.65 24.42 37.58 15 XM_B_Unicode3 152646 39.26 44.82 36.89 16 XMSubLong 117107 26.76 23.14 28.30 17 RCVD_IN_MSPIKE_H2 107929 27.61 31.19 26.08 18 DKIM_VALID_EF 106300 27.18 30.68 25.69 19 HTML_FONT_LOW_CONTRAST 101284 27.75 35.44 24.48 20 LOC_TINY_FONT_1 99419 28.98 40.62 24.03 21 ALL_TRUSTED 98127 17.26 2.11 23.71 22 FVGT_m_MULTI_ODD 94619 25.32 31.08 22.87 23 T_KAM_HTML_FONT_INVALID 79335 22.14 29.11 19.17 24 XM_B_SpammyWords2 73993 25.94 44.86 17.88 25 MIME_HTML_ONLY 66099 20.06 29.66 15.97 26 MIME_QP_LONG_LINE 64631 12.06 3.72 15.62 27 XM_B_Phish_Phrases 58787 11.79 6.13 14.21 28 XM_B_SpammyTLD 54856 10.62 4.43 13.26 29 XM_Multi_Part_URI 53445 14.77 19.11 12.92 30 USER_IN_DEF_DKIM_WL 53023 9.66 2.25 12.81 31 TM2_M_URI_OPT_OUT 51487 9.98 4.21 12.44 32 TR_XM_DK_Unsub 49822 15.10 22.27 12.04 33 BAYES_60 38702 8.83 7.61 9.35 34 UNPARSEABLE_RELAY 38098 10.61 13.91 9.21 35 BAYES_00 35319 6.23 0.81 8.54 36 XM_Evil_Numbers_Gen 32226 7.92 8.24 7.79 37 TooManyTo_001 31458 6.78 4.84 7.60 38 LotsOfNums_01 31429 7.24 6.41 7.60 39 TR_MAX_INTL_RELAY 29265 9.23 14.28 7.07 40 XM_B_Unsub 29158 9.47 15.15 7.05 41 XM_DKIMWhitelistDomains 28166 4.83 0.19 6.81 42 ANY_BOUNCE_MESSAGE 27872 5.43 2.35 6.74 43 BOUNCE_MESSAGE 27871 5.43 2.35 6.74 44 LOTS_OF_MONEY 25947 9.12 15.81 6.27 45 IN_ZIMBRA_NJ_WHITELIST 25578 4.36 0.08 6.18 46 TR_XM_BayesUnsub 23556 8.36 14.64 5.69 47 RCVD_IN_MSPIKE_WL 23120 6.35 8.15 5.59 48 RCVD_IN_MSPIKE_H3 23120 6.35 8.15 5.59 49 TR_XM_DK_Bayes 22849 4.05 0.60 5.52 50 XM_H_GMP 22729 5.17 4.42 5.49 51 TR_XM_DK_Bayes1 22474 3.99 0.60 5.43 52 XM_H_Long_From01 21608 5.12 4.88 5.22 53 XM_DK_Undo_02 20420 16.88 44.93 4.93 54 T_TooManySym_01 19653 4.10 2.57 4.75 55 BAYES_80 19594 5.91 8.68 4.74 56 TR_XM_DK_Bayes2 19530 3.47 0.53 4.72 57 XM_B_SpammyWords3 19171 7.89 15.52 4.63 58 BAYES_40 19145 3.70 1.53 4.63 59 TR_XM_SpammyWords4 18269 7.44 14.54 4.41 60 HTML_IMAGE_RATIO_04 16906 4.30 4.81 4.09 61 HTML_IMAGE_RATIO_02 16775 4.74 6.35 4.05 62 RCVD_IN_VALIDITY_SAFE 16304 3.64 2.92 3.94 63 XM_PDF 16090 2.93 0.66 3.89 64 XMStrtUSub 15865 3.84 3.85 3.83 65 RELAYCOUNTRY_META 15639 8.49 19.55 3.78 66 XMSubMetaSx_00 15117 4.27 5.72 3.65 67 BAYES_99 15090 13.16 35.51 3.65 68 BOTNET_IPINHOSTNAME 14850 6.50 13.35 3.59 69 FSL_BULK_SIG 14668 4.83 7.83 3.54 70 RCVD_IN_IADB_LISTED 14140 2.81 1.39 3.42 71 XM_UncommonTLD01 13663 4.13 6.08 3.30 72 RCVD_IN_VALIDITY_CERTIFIED 13563 3.02 2.40 3.28 73 MPART_ALT_DIFF 13372 3.77 5.03 3.23 74 HTML_IMAGE_RATIO_06 13255 3.78 5.12 3.20 75 BAYES_20 13055 2.53 1.06 3.15 76 T_REMOTE_IMAGE 12747 2.68 1.76 3.08 77 RCVD_IN_IADB_SPF 12430 2.46 1.20 3.00 78 XM_SPF_SoftFail 12314 3.58 5.01 2.98 79 XMNumbers 11476 3.15 4.02 2.77 80 BAYES_999 11426 10.35 28.18 2.76 81 HTML_IMAGE_RATIO_08 11123 3.08 4.01 2.69 82 MAILING_LIST_MULTI 11076 2.40 1.76 2.68 83 RCVD_IN_IADB_SENDERID 10989 2.20 1.13 2.66 84 RCVD_IN_IADB_DK 10745 2.14 1.08 2.60 85 T_TooManySym_02 9821 1.91 0.81 2.37 86 XM_CamelCaseFrm001 9715 2.41 2.56 2.35 87 BAYES_95 9662 3.18 5.17 2.33 88 TR_XM_DKIM_Undo 9324 11.86 34.42 2.25 89 TooManyTo_002 9311 1.84 0.88 2.25 90 RCVD_IN_IADB_VOUCHED 9270 1.78 0.68 2.24 91 XM_Body_Dirty_Words 9132 3.47 6.45 2.21 92 DKIM_INVALID 8922 2.99 4.95 2.16 93 TR_XM_SpammyRelay 8548 6.15 15.74 2.07 94 MIME_HTML_MOSTLY 8439 2.47 3.49 2.04 95 SCC_BODY_URI_ONLY 8351 1.69 0.93 2.02 96 BAYES_05 7734 1.50 0.62 1.87 97 XM_B_Investor 7726 2.79 4.96 1.87 98 HELO_NODOT 7674 1.40 0.33 1.85 99 HELO_NO_DOMAIN 7666 1.40 0.33 1.85 100 MIME_HTML_ONLY_MULTI 7390 2.15 3.00 1.79 101 XMDiploma_00 7116 2.04 2.80 1.72 102 INVALID_MSGID 7095 1.25 0.15 1.71 103 TO_MALFORMED 6925 1.18 0.02 1.67 104 FROM_EXCESS_BASE64 6839 1.66 1.69 1.65 105 XM_DK_Undo_01 6778 1.64 1.66 1.64 106 HTML_MIME_NO_HTML_TAG 6749 1.62 1.58 1.63 107 T_XMDrugObfuBody_14 6524 2.21 3.70 1.58 108 RCVD_IN_IADB_OPTIN 6425 1.22 0.44 1.55 109 TR_DCC_Bayes_99 6324 8.53 24.99 1.53 110 TR_XM_UnparsRelay 6215 3.32 7.58 1.50 111 TR_XM_PhishingBody 6101 2.24 4.05 1.47 112 XM_B_Unsub2 6016 1.71 2.30 1.45 113 T_XMDrugObfuBody_08 5797 1.89 3.05 1.40 114 TM2_M_VERY_LONG_WORD 5768 1.99 3.39 1.39 115 KHOP_HELO_FCRDNS 5621 1.37 1.40 1.36 116 XMSexyCombo_05 5532 2.15 4.07 1.34 117 TR_Symld_Words 5518 1.30 1.21 1.33 118 UNTRUSTED_Relay 5508 2.67 5.82 1.33 119 SUBJ_ALL_CAPS 5376 1.60 2.30 1.30 120 TooManyTo_003 5326 1.14 0.79 1.29 121 XMGappySubj_01 5305 0.95 0.16 1.28 122 TVD_RCVD_IP 5220 1.08 0.66 1.26 123 IN_HORDE_ADDRESS_BOOK 5216 0.91 0.07 1.26 124 XM_SendGrid 4914 1.24 1.38 1.19 125 XM_B_SEO 4913 2.14 4.39 1.19 126 RELAYCOUNTRY_CA 4853 3.98 10.58 1.17 127 TR_XM_SpammyWords5 4836 2.15 4.44 1.17 128 BOTNET 4774 3.53 9.10 1.15 129 URI_NOVOWEL 4534 1.10 1.12 1.10 130 XM_B_SpammyWords4 4263 1.44 2.41 1.03 131 XMCapTrack 4160 0.85 0.47 1.01 132 XM_OfRef6 4149 1.72 3.42 1.00 133 XMNoVowels 4099 0.91 0.72 0.99 134 XMStockSpam_06 4062 1.10 1.36 0.98 135 XM_H_Long_From02 3975 1.16 1.61 0.96 136 TR_MetaPhish_Combo_01 3928 0.92 0.85 0.95 137 TVD_SPACE_RATIO 3901 0.70 0.14 0.94 138 TooManyTo_004 3872 0.87 0.72 0.94 139 XM_GoogleGroups 3862 0.82 0.56 0.93 140 T_TooManySym_03 3718 0.72 0.30 0.90 141 XMGenDplmaNmb 3626 1.02 1.36 0.88 142 URI_HEX 3623 1.05 1.47 0.88 143 XMBSHREFv2 3542 0.66 0.21 0.86 144 T_FILL_THIS_FORM_SHORT 3461 1.56 3.26 0.84 145 HTTPS_HTTP_MISMATCH 3367 0.96 1.30 0.81 146 XM_UB50 3364 1.43 2.89 0.81 147 TR_XM_DK_SendGrid 3190 0.81 0.90 0.77 148 TooManyTo_005 3178 0.75 0.70 0.77 149 XMBdyGiftCard01 3151 0.82 0.96 0.76 150 DKIM_ADSP_CUSTOM_MED 3150 0.90 1.22 0.76 151 T_XMDrugObfuBody_00 3133 0.88 1.17 0.76 152 XMBrknScrpt_02 3080 0.94 1.41 0.74 153 FROM_GOV_DKIM_AU 3025 0.56 0.15 0.73 154 URI_TRY_3LD 2966 1.09 1.97 0.72 155 XMLngstWrd_00 2961 0.81 1.04 0.72 156 SpammyFromTLD_01 2936 1.14 2.15 0.71 157 TR_XM_SEO4 2897 1.61 3.76 0.70 158 XM_H_Trusted_IP 2865 0.49 0.00 0.69 159 XMGappySubj_02 2845 0.51 0.08 0.69 160 RELAYCOUNTRY_AU 2740 1.08 2.05 0.66 161 MPART_ALT_DIFF_COUNT 2679 0.72 0.91 0.65 162 XMBody_95 2623 0.50 0.18 0.63 163 RCVD_IN_BL_SPAMCOP_NET 2604 4.04 12.05 0.63 164 XM_B_COPY_HTML 2562 0.77 1.11 0.62 165 T_XMHurry_00 2509 1.30 2.94 0.61 166 SHORT_HELO_AND_INLINE_IMAGE 2497 0.44 0.04 0.60 167 XMMoneyMeta_00 2487 0.62 0.66 0.60 168 T_OBFU_PDF_ATTACH 2441 0.44 0.10 0.59 169 XM_ShortIntro_01 2337 0.55 0.52 0.56 170 TR_XM_SpammyWords2 2293 4.98 15.37 0.55 171 XMPhish14 2275 0.63 0.82 0.55 172 XMSubMetaI_00 2269 0.70 1.04 0.55 173 TR_LOTS_OF_MONEY3 2267 1.55 3.91 0.55 174 XM_H_PHPMailer 2256 0.62 0.80 0.55 175 T_Symld_Words_02 2225 0.59 0.71 0.54 176 XMBody_17 2212 2.59 7.43 0.53 177 XM_B_FormFill 2210 0.39 0.06 0.53 178 TO_NO_BRKTS_HTML_ONLY 2178 0.45 0.27 0.53 179 TR_XM_Base64_M1 2168 0.65 0.94 0.52 180 XM_ProductURIs 2146 0.57 0.69 0.52 181 NML_ADSP_CUSTOM_MED 2137 0.67 1.01 0.52 182 XMSubNoVowel 2037 0.46 0.38 0.49 183 HTML_TAG_BALANCE_BODY 1956 0.67 1.14 0.47 184 XMHTML_After_End 1939 0.67 1.13 0.47 185 XMOemUri 1868 0.37 0.17 0.45 186 FORGED_GMAIL_RCVD 1840 0.56 0.82 0.44 187 HTML_FONT_FACE_BAD 1818 0.47 0.54 0.44 188 XM_B_DNDMA 1792 0.59 0.97 0.43 189 FILL_THIS_FORM 1784 0.38 0.27 0.43 190 XMPhish30 1761 0.71 1.37 0.43 191 USER_IN_WELCOMELIST 1714 0.29 0.00 0.41 192 USER_IN_WHITELIST 1714 0.29 0.00 0.41 193 SpammyFromTLD_02 1698 0.79 1.67 0.41 194 RELAYCOUNTRY_GB 1692 0.56 0.92 0.41 195 XMDateMe_00 1676 0.41 0.41 0.41 196 HTML_IMAGE_ONLY_32 1609 0.33 0.20 0.39 197 TR_XM_SPAMCOP 1608 3.30 10.14 0.39 198 PLING_QUERY 1608 0.44 0.57 0.39 199 HTML_IMAGE_ONLY_28 1591 0.42 0.51 0.38 200 RCVD_IN_SORBS_DUL 1569 0.28 0.06 0.38 ----------------------------------------------------------------------