Email: 513179 Autolearn: 0 AvgScore: 3.31 AvgScanTime: 1.09 sec Spam: 140968 Autolearn: 0 AvgScore: 13.43 AvgScanTime: 1.30 sec Ham: 372211 Autolearn: 0 AvgScore: -0.53 AvgScanTime: 1.01 sec Time Spent Running SA: 155.30 hours Time Spent Processing Spam: 50.82 hours Time Spent Processing Ham: 104.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130619 80.93 92.66 76.49 2 DKIM_SIGNED 124554 71.43 88.36 65.01 3 XM_DK_Pass 119678 69.44 84.90 63.59 4 DKIM_VALID 118203 68.40 83.85 62.55 5 XM_B_Unicode 115732 66.00 82.10 59.90 6 RELAYCOUNTRY_US 112076 73.66 79.50 71.45 7 XM_B_SpammyWords 100739 47.45 71.46 38.36 8 DCC_CHECK 100069 38.62 70.99 26.37 9 XMListUnsubscribeExists 96854 48.52 68.71 40.88 10 DKIM_VALID_AU 89836 53.51 63.73 49.64 11 XM_B_Unicode3 63682 36.78 45.17 33.60 12 XM_DK_Undo_02 60328 15.42 42.80 5.05 13 XM_B_SpammyWords2 55931 22.20 39.68 15.58 14 BAYES_50 55764 55.88 39.56 62.06 15 HTML_FONT_LOW_CONTRAST 51814 27.09 36.76 23.42 16 LOC_TINY_FONT_1 50636 23.90 35.92 19.35 17 BAYES_99 48500 12.43 34.40 4.11 18 TR_XM_DKIM_Undo 47952 10.80 34.02 2.01 19 T_SCC_BODY_TEXT_LINE 44869 31.21 31.83 30.98 20 MIME_HTML_ONLY 44546 21.38 31.60 17.51 21 DKIM_VALID_EF 43768 27.82 31.05 26.60 22 FVGT_m_MULTI_ODD 43426 24.88 30.81 22.64 23 DCC_CHECK_NEGATIVE 40879 61.34 29.00 73.58 24 T_KAM_HTML_FONT_INVALID 38714 19.90 27.46 17.03 25 BAYES_999 38472 9.84 27.29 3.24 26 T_TM2_M_HEADER_IN_MSG 36076 27.95 25.59 28.85 27 XMSubLong 32968 21.18 23.39 20.34 28 TR_DCC_Bayes_99 32875 7.32 23.32 1.25 29 TR_XM_DK_Unsub 30607 14.54 21.71 11.83 30 XM_Multi_Part_URI 27680 13.83 19.64 11.64 31 RELAYCOUNTRY_META 26422 7.79 18.74 3.64 32 RCVD_IN_MSPIKE_H2 25609 16.90 18.17 16.42 33 XM_B_Unsub 22535 9.36 15.99 6.86 34 TR_XM_BayesUnsub 21748 8.11 15.43 5.34 35 LOTS_OF_MONEY 19961 8.26 14.16 6.03 36 TR_XM_SpammyRelay 19881 5.12 14.10 1.72 37 BOTNET_IPINHOSTNAME 19327 6.46 13.71 3.71 38 XM_Body_Dirty_Words 18587 7.66 13.19 5.57 39 UNPARSEABLE_RELAY 18377 9.81 13.04 8.59 40 TR_XM_SpammyWords2 18331 3.81 13.00 0.32 41 XM_B_SpammyWords3 17555 5.94 12.45 3.48 42 TR_XM_SpammyWords4 17288 6.21 12.26 3.91 43 XM_Evil_Numbers_Gen 15524 7.93 11.01 6.76 44 FSL_BULK_SIG 14979 4.66 10.63 2.41 45 BOTNET 14589 3.63 10.35 1.08 46 RELAYCOUNTRY_CA 13527 3.32 9.60 0.95 47 RCVD_IN_BL_SPAMCOP_NET 13474 3.03 9.56 0.56 48 BAYES_80 11921 4.95 8.46 3.63 49 BAYES_60 11673 7.90 8.28 7.75 50 RCVD_IN_MSPIKE_H3 10740 6.19 7.62 5.64 51 RCVD_IN_MSPIKE_WL 10740 6.22 7.62 5.69 52 TR_XM_SPAMCOP 10629 2.20 7.54 0.17 53 TR_XM_UnparsRelay 10133 2.82 7.19 1.17 54 UNTRUSTED_Relay 10051 2.98 7.13 1.41 55 XM_UncommonTLD01 9680 4.37 6.87 3.42 56 HTML_IMAGE_RATIO_02 9392 4.66 6.66 3.90 57 LotsOfNums_01 9313 7.32 6.61 7.59 58 XMSubMetaSx_00 9173 4.82 6.51 4.18 59 XMSexyCombo_05 9062 3.44 6.43 2.31 60 MPART_ALT_DIFF 9021 4.03 6.40 3.13 61 HTML_IMAGE_RATIO_04 8198 4.00 5.82 3.32 62 TooManyTo_001 8089 8.30 5.74 9.27 63 XM_H_Long_From01 8066 4.94 5.72 4.65 64 XM_SPF_SoftFail 7344 3.71 5.21 3.14 65 XM_B_Phish_Phrases 7078 3.59 5.02 3.05 66 XMNumbers 7040 3.19 4.99 2.51 67 BAYES_95 6600 2.86 4.68 2.17 68 HTML_IMAGE_RATIO_06 6526 2.97 4.63 2.34 69 XMBody_17 6438 1.53 4.57 0.38 70 DKIM_INVALID 6351 3.02 4.51 2.46 71 MIME_HTML_MOSTLY 6228 2.62 4.42 1.93 72 XM_B_Investor 6204 2.24 4.40 1.43 73 XM_OfRef6 6142 2.07 4.36 1.20 74 TR_XM_SpammyWords5 6066 2.02 4.30 1.16 75 XM_B_SpammyTLD 5892 2.61 4.18 2.02 76 T_XMDrugObfuBody_14 5686 2.63 4.03 2.10 77 XMStrtUSub 5407 3.87 3.84 3.88 78 MIME_HTML_ONLY_MULTI 5393 2.36 3.83 1.80 79 T_XMDrugObfuBody_08 5270 2.03 3.74 1.39 80 RCVD_IN_VALIDITY_SAFE 5215 3.52 3.70 3.45 81 TR_XM_PhishingBody 5166 1.96 3.66 1.31 82 XM_UB50 4857 1.54 3.45 0.83 83 SpammyFromTLD_01 4842 1.46 3.43 0.71 84 TM2_M_URI_OPT_OUT 4811 2.11 3.41 1.61 85 TM2_M_VERY_LONG_WORD 4547 1.68 3.23 1.10 86 T_FILL_THIS_FORM_SHORT 4542 1.54 3.22 0.90 87 XM_URI_RBL 4402 0.96 3.12 0.14 88 TR_XM_BayesRelay 4364 0.85 3.10 0.00 89 TR_XM_PHPDW 4201 1.20 2.98 0.52 90 TR_XM_PHPForged 4185 1.19 2.97 0.51 91 RCVD_IN_VALIDITY_CERTIFIED 4130 2.94 2.93 2.94 92 T_TooManySym_01 4099 4.33 2.91 4.87 93 TR_XM_FormFill2 4087 1.16 2.90 0.50 94 XM_H_PHPOS 4054 1.14 2.88 0.49 95 XM_B_Unsub2 3979 1.67 2.82 1.24 96 MIME_QP_LONG_LINE 3889 3.93 2.76 4.38 97 XM_CamelCaseFrm001 3796 2.13 2.69 1.91 98 USER_IN_DEF_DKIM_WL 3743 8.06 2.66 10.11 99 XMDiploma_00 3571 1.80 2.53 1.52 100 HTML_IMAGE_RATIO_08 3569 1.94 2.53 1.71 101 BOTNET_NORDNS 3367 0.67 2.39 0.01 102 URI_TRY_3LD 3097 1.02 2.20 0.58 103 HTML_MIME_NO_HTML_TAG 3081 2.20 2.19 2.21 104 FROM_EXCESS_BASE64 3056 1.68 2.17 1.50 105 SUBJ_ALL_CAPS 3039 1.55 2.16 1.31 106 TR_XM_NoHeaderRelay 3036 0.66 2.15 0.09 107 XM_DIRTYINTL 2958 0.76 2.10 0.25 108 T_REMOTE_IMAGE 2947 3.14 2.09 3.53 109 HK_RANDOM_REPLYTO 2925 0.62 2.07 0.06 110 ALL_TRUSTED 2916 19.28 2.07 25.79 111 XM_B_SpammyWords4 2890 0.93 2.05 0.50 112 XM_H_Undi_Recip 2873 0.77 2.04 0.30 113 RELAYCOUNTRY_AU 2862 1.06 2.03 0.70 114 HTTPS_HTTP_MISMATCH 2802 1.11 1.99 0.78 115 MAILING_LIST_MULTI 2792 2.37 1.98 2.52 116 TR_XM_FormFill 2773 0.55 1.97 0.01 117 XMStockSpam_06 2766 1.37 1.96 1.15 118 RCVD_IN_PSBL 2704 0.60 1.92 0.10 119 HTML_TAG_BALANCE_BODY 2641 0.81 1.87 0.40 120 XM_DK_Undo_01 2546 1.73 1.81 1.70 121 PDS_OTHER_BAD_TLD 2494 0.60 1.77 0.16 122 TR_LOTS_OF_MONEY3 2491 0.69 1.77 0.28 123 SpammyFromTLD_02 2473 0.65 1.75 0.23 124 TR_Mismatch_TLD_02 2450 0.53 1.74 0.07 125 ANY_BOUNCE_MESSAGE 2400 10.90 1.70 14.38 126 BOUNCE_MESSAGE 2398 10.89 1.70 14.38 127 XMBdyGiftCard01 2391 0.89 1.70 0.58 128 URI_HEX 2326 1.16 1.65 0.98 129 XM_HighProb1 2311 0.45 1.64 0.00 130 XMSubMetaI_00 2227 0.89 1.58 0.63 131 BAYES_40 2195 3.70 1.56 4.52 132 AC_BR_BONANZA 2173 0.53 1.54 0.14 133 T_XMHurry_00 2146 0.78 1.52 0.50 134 XMSexyCombo_01 2138 0.90 1.52 0.67 135 KHOP_HELO_FCRDNS 2069 1.38 1.47 1.35 136 RCVD_IN_IADB_LISTED 2013 3.03 1.43 3.63 137 TR_XM_INV_DKIM 2011 0.43 1.43 0.05 138 TR_XM_InvalidRelay 1952 0.40 1.38 0.02 139 BAYES_20 1938 2.80 1.37 3.34 140 FONT_INVIS_LONG_LINE 1928 0.43 1.37 0.07 141 XMBrknScrpt_02 1920 0.78 1.36 0.56 142 XM_OfRef7 1919 0.53 1.36 0.21 143 T_XMDrugObfuBody_00 1919 0.76 1.36 0.53 144 RELAYCOUNTRY_FR 1906 0.53 1.35 0.21 145 RCVD_IN_VALIDITY_RPBL 1904 0.39 1.35 0.02 146 TR_XM_Undi_Recip11 1853 0.41 1.31 0.07 147 TR_XM_Undi_Recip5 1826 0.36 1.30 0.01 148 LOADSA_MONEY_COMBO 1817 0.39 1.29 0.05 149 XM_SendGrid 1810 1.20 1.28 1.17 150 RCVD_IN_IADB_SPF 1808 2.71 1.28 3.24 151 TR_MetaPhish_Combo_01 1790 0.83 1.27 0.66 152 TR_XM_SB_Phish 1772 1.32 1.26 1.35 153 XM_B_DNDMA 1771 0.64 1.26 0.41 154 XMPhish30 1766 0.65 1.25 0.43 155 FILL_THIS_FORM 1727 0.80 1.23 0.65 156 XMReplyNow 1726 0.53 1.22 0.26 157 TR_XM_Undi_RecipCombo2 1704 0.34 1.21 0.00 158 TM2_M_BODY_EMPTY 1695 0.66 1.20 0.45 159 RCVD_IN_IADB_DK 1683 2.42 1.19 2.88 160 RCVD_IN_IADB_SENDERID 1679 2.47 1.19 2.95 161 UNDISC_MONEY 1660 0.33 1.18 0.01 162 XM_H_PHPMailer 1640 0.86 1.16 0.74 163 XMGenDplmaNmb 1606 0.90 1.14 0.81 164 XMSubPhish11 1585 1.26 1.12 1.32 165 XMEmptyBody_01 1561 0.39 1.11 0.12 166 DIET_1 1551 0.50 1.10 0.28 167 XM_UB99 1539 0.30 1.09 0.00 168 MONEY_FORM 1526 0.30 1.08 0.00 169 RDNS_DYNAMIC 1514 0.50 1.07 0.28 170 TR_XM_Base64_M1 1513 0.70 1.07 0.56 171 XM_B_COVIDMETA 1513 0.57 1.07 0.38 172 XFER_LOTSA_MONEY 1507 0.31 1.07 0.02 173 BODY_EMPTY 1495 0.32 1.06 0.04 174 FILL_THIS_FORM_LONG 1455 0.58 1.03 0.41 175 XMHTML_After_End 1439 0.76 1.02 0.66 176 XM_UB60 1435 0.33 1.02 0.07 177 TR_LOTS_OF_MONEY2 1428 0.48 1.01 0.28 178 T_MONEY_PERCENT 1428 0.48 1.01 0.28 179 TR_Symld_Words 1416 1.29 1.00 1.40 180 URI_NOVOWEL 1414 1.41 1.00 1.56 181 T_Symld_Words_02 1411 0.61 1.00 0.46 182 MONEY_FRAUD_8 1401 0.27 0.99 0.00 183 TR_XM_Undi_Recip6 1391 0.27 0.99 0.00 184 XM_Combo_Sbj 1356 0.42 0.96 0.21 185 XM_B_COPY_HTML 1340 0.65 0.95 0.53 186 HK_SCAM 1333 0.26 0.95 0.00 187 THIS_AD 1318 0.48 0.93 0.31 188 TVD_RCVD_IP 1302 1.36 0.92 1.52 189 DEAR_BENEFICIARY 1276 0.25 0.91 0.00 190 XMLngstWrd_00 1276 1.04 0.91 1.09 191 BAYES_00 1265 7.40 0.90 9.86 192 T_TooManySym_02 1263 1.99 0.90 2.40 193 TR_Mismatch_TLD_01 1253 0.43 0.89 0.26 194 XM_H_Long_From02 1250 0.92 0.89 0.93 195 HTML_IMAGE_ONLY_32 1248 0.65 0.89 0.56 196 TooManyTo_002 1237 2.62 0.88 3.28 197 XM_B_Phish66 1235 0.41 0.88 0.23 198 DKIM_ADSP_CUSTOM_MED 1226 0.91 0.87 0.93 199 ADVANCE_FEE_5_NEW_FRM_MNY 1225 0.24 0.87 0.00 200 TR_XM_Undi_RecipCombo3 1218 0.24 0.86 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 284695 80.93 92.66 76.49 2 DCC_CHECK_NEGATIVE 273888 61.34 29.00 73.58 3 RELAYCOUNTRY_US 265943 73.66 79.50 71.45 4 DKIM_SIGNED 241985 71.43 88.36 65.01 5 XM_DK_Pass 236682 69.44 84.90 63.59 6 DKIM_VALID 232822 68.40 83.85 62.55 7 BAYES_50 231011 55.88 39.56 62.06 8 XM_B_Unicode 222956 66.00 82.10 59.90 9 DKIM_VALID_AU 184756 53.51 63.73 49.64 10 XMListUnsubscribeExists 152150 48.52 68.71 40.88 11 XM_B_SpammyWords 142776 47.45 71.46 38.36 12 XM_B_Unicode3 125074 36.78 45.17 33.60 13 T_SCC_BODY_TEXT_LINE 115298 31.21 31.83 30.98 14 T_TM2_M_HEADER_IN_MSG 107380 27.95 25.59 28.85 15 DKIM_VALID_EF 99016 27.82 31.05 26.60 16 DCC_CHECK 98143 38.62 70.99 26.37 17 ALL_TRUSTED 96009 19.28 2.07 25.79 18 HTML_FONT_LOW_CONTRAST 87182 27.09 36.76 23.42 19 FVGT_m_MULTI_ODD 84266 24.88 30.81 22.64 20 XMSubLong 75710 21.18 23.39 20.34 21 LOC_TINY_FONT_1 72023 23.90 35.92 19.35 22 MIME_HTML_ONLY 65184 21.38 31.60 17.51 23 T_KAM_HTML_FONT_INVALID 63387 19.90 27.46 17.03 24 RCVD_IN_MSPIKE_H2 61133 16.90 18.17 16.42 25 XM_B_SpammyWords2 57985 22.20 39.68 15.58 26 ANY_BOUNCE_MESSAGE 53513 10.90 1.70 14.38 27 BOUNCE_MESSAGE 53509 10.89 1.70 14.38 28 TR_XM_DK_Unsub 44020 14.54 21.71 11.83 29 XM_Multi_Part_URI 43312 13.83 19.64 11.64 30 USER_IN_DEF_DKIM_WL 37616 8.06 2.66 10.11 31 BAYES_00 36691 7.40 0.90 9.86 32 TooManyTo_001 34522 8.30 5.74 9.27 33 UNPARSEABLE_RELAY 31965 9.81 13.04 8.59 34 BAYES_60 28844 7.90 8.28 7.75 35 LotsOfNums_01 28253 7.32 6.61 7.59 36 XM_DKIMWhitelistDomains 26518 5.17 0.01 7.12 37 XM_B_Unsub 25518 9.36 15.99 6.86 38 XM_Evil_Numbers_Gen 25172 7.93 11.01 6.76 39 TR_XM_DK_Bayes 24640 4.97 0.60 6.62 40 TR_XM_DK_Bayes1 24209 4.88 0.60 6.50 41 IN_ZIMBRA_NJ_WHITELIST 23500 4.60 0.09 6.31 42 LOTS_OF_MONEY 22442 8.26 14.16 6.03 43 RCVD_IN_MSPIKE_WL 21188 6.22 7.62 5.69 44 RCVD_IN_MSPIKE_H3 21011 6.19 7.62 5.64 45 XM_Body_Dirty_Words 20722 7.66 13.19 5.57 46 TR_XM_DK_Bayes2 20613 4.13 0.43 5.54 47 TR_XM_BayesUnsub 19863 8.11 15.43 5.34 48 XM_DK_Undo_02 18800 15.42 42.80 5.05 49 XM_PDF 18177 3.75 0.76 4.88 50 T_TooManySym_01 18143 4.33 2.91 4.87 51 XM_H_Long_From01 17296 4.94 5.72 4.65 52 BAYES_40 16806 3.70 1.56 4.52 53 MIME_QP_LONG_LINE 16285 3.93 2.76 4.38 54 XMSubMetaSx_00 15568 4.82 6.51 4.18 55 BAYES_99 15299 12.43 34.40 4.11 56 TR_XM_SpammyWords4 14568 6.21 12.26 3.91 57 HTML_IMAGE_RATIO_02 14524 4.66 6.66 3.90 58 XMStrtUSub 14437 3.87 3.84 3.88 59 BOTNET_IPINHOSTNAME 13816 6.46 13.71 3.71 60 RELAYCOUNTRY_META 13531 7.79 18.74 3.64 61 RCVD_IN_IADB_LISTED 13521 3.03 1.43 3.63 62 BAYES_80 13505 4.95 8.46 3.63 63 T_REMOTE_IMAGE 13153 3.14 2.09 3.53 64 XM_B_SpammyWords3 12940 5.94 12.45 3.48 65 RCVD_IN_VALIDITY_SAFE 12846 3.52 3.70 3.45 66 XM_UncommonTLD01 12726 4.37 6.87 3.42 67 BAYES_20 12430 2.80 1.37 3.34 68 HTML_IMAGE_RATIO_04 12351 4.00 5.82 3.32 69 TooManyTo_002 12220 2.62 0.88 3.28 70 RCVD_IN_IADB_SPF 12078 2.71 1.28 3.24 71 BAYES_999 12050 9.84 27.29 3.24 72 XM_SPF_SoftFail 11674 3.71 5.21 3.14 73 MPART_ALT_DIFF 11664 4.03 6.40 3.13 74 XM_B_Phish_Phrases 11360 3.59 5.02 3.05 75 RCVD_IN_IADB_SENDERID 10989 2.47 1.19 2.95 76 RCVD_IN_VALIDITY_CERTIFIED 10943 2.94 2.93 2.94 77 RCVD_IN_IADB_DK 10724 2.42 1.19 2.88 78 BAYES_05 9561 2.08 0.79 2.57 79 MAILING_LIST_MULTI 9381 2.37 1.98 2.52 80 XMNumbers 9342 3.19 4.99 2.51 81 DKIM_INVALID 9163 3.02 4.51 2.46 82 FSL_BULK_SIG 8960 4.66 10.63 2.41 83 T_TooManySym_02 8950 1.99 0.90 2.40 84 HTML_IMAGE_RATIO_06 8720 2.97 4.63 2.34 85 XMSexyCombo_05 8601 3.44 6.43 2.31 86 HTML_MIME_NO_HTML_TAG 8208 2.20 2.19 2.21 87 RCVD_IN_IADB_VOUCHED 8155 1.77 0.65 2.19 88 BAYES_95 8063 2.86 4.68 2.17 89 T_XMDrugObfuBody_14 7805 2.63 4.03 2.10 90 XM_B_SpammyTLD 7527 2.61 4.18 2.02 91 TR_XM_DKIM_Undo 7480 10.80 34.02 2.01 92 HELO_NODOT 7304 1.58 0.55 1.96 93 HELO_NO_DOMAIN 7298 1.57 0.55 1.96 94 MIME_HTML_MOSTLY 7198 2.62 4.42 1.93 95 XM_CamelCaseFrm001 7112 2.13 2.69 1.91 96 INVALID_MSGID 7064 1.42 0.15 1.90 97 MIME_HTML_ONLY_MULTI 6705 2.36 3.83 1.80 98 TR_XM_SpammyRelay 6409 5.12 14.10 1.72 99 TooManyTo_003 6392 1.45 0.74 1.72 100 HTML_IMAGE_RATIO_08 6382 1.94 2.53 1.71 101 XM_DK_Undo_01 6337 1.73 1.81 1.70 102 TO_MALFORMED 6127 1.20 0.03 1.65 103 TM2_M_URI_OPT_OUT 6005 2.11 3.41 1.61 104 URI_NOVOWEL 5806 1.41 1.00 1.56 105 TVD_RCVD_IP 5670 1.36 0.92 1.52 106 XMDiploma_00 5650 1.80 2.53 1.52 107 FROM_EXCESS_BASE64 5582 1.68 2.17 1.50 108 RCVD_IN_IADB_OPTIN 5399 1.18 0.45 1.45 109 XM_B_Investor 5305 2.24 4.40 1.43 110 UNTRUSTED_Relay 5256 2.98 7.13 1.41 111 XMCapTrack 5235 1.15 0.48 1.41 112 TR_Symld_Words 5208 1.29 1.00 1.40 113 IN_HORDE_ADDRESS_BOOK 5206 1.03 0.06 1.40 114 T_XMDrugObfuBody_08 5170 2.03 3.74 1.39 115 TR_XM_SB_Phish 5022 1.32 1.26 1.35 116 KHOP_HELO_FCRDNS 5010 1.38 1.47 1.35 117 XMSubPhish11 4901 1.26 1.12 1.32 118 SUBJ_ALL_CAPS 4891 1.55 2.16 1.31 119 TR_XM_PhishingBody 4868 1.96 3.66 1.31 120 TooManyTo_004 4825 1.13 0.68 1.30 121 TR_DCC_Bayes_99 4670 7.32 23.32 1.25 122 XM_B_Unsub2 4603 1.67 2.82 1.24 123 XM_OfRef6 4465 2.07 4.36 1.20 124 XMGappySubj_01 4440 0.92 0.19 1.19 125 XM_SendGrid 4373 1.20 1.28 1.17 126 XM_GoogleGroups 4367 1.01 0.57 1.17 127 TR_XM_UnparsRelay 4352 2.82 7.19 1.17 128 TR_XM_SpammyWords5 4310 2.02 4.30 1.16 129 XMStockSpam_06 4284 1.37 1.96 1.15 130 XMBody_95 4243 0.87 0.17 1.14 131 XMBSHREFv2 4194 0.95 0.48 1.13 132 TM2_M_VERY_LONG_WORD 4088 1.68 3.23 1.10 133 XMLngstWrd_00 4075 1.04 0.91 1.09 134 TooManyTo_005 4054 0.97 0.65 1.09 135 BOTNET 4035 3.63 10.35 1.08 136 TVD_SPACE_RATIO 3944 0.80 0.13 1.06 137 SCC_BODY_URI_ONLY 3724 0.83 0.38 1.00 138 URI_HEX 3637 1.16 1.65 0.98 139 RELAYCOUNTRY_CA 3526 3.32 9.60 0.95 140 XM_H_Long_From02 3471 0.92 0.89 0.93 141 DKIM_ADSP_CUSTOM_MED 3466 0.91 0.87 0.93 142 T_FILL_THIS_FORM_SHORT 3346 1.54 3.22 0.90 143 XM_B_FormFill 3218 0.65 0.07 0.86 144 XMGappySubj_02 3207 0.65 0.10 0.86 145 T_TooManySym_03 3090 0.71 0.38 0.83 146 XM_UB50 3071 1.54 3.45 0.83 147 XMGenDplmaNmb 3032 0.90 1.14 0.81 148 XMLngstWrd_01 2987 0.69 0.38 0.80 149 HTTPS_HTTP_MISMATCH 2896 1.11 1.99 0.78 150 TR_XM_DK_SendGrid 2810 0.73 0.68 0.75 151 XM_H_PHPMailer 2771 0.86 1.16 0.74 152 XM_ShortIntro_01 2717 0.69 0.57 0.73 153 SpammyFromTLD_01 2638 1.46 3.43 0.71 154 XMNoVowels 2600 0.65 0.52 0.70 155 RELAYCOUNTRY_AU 2589 1.06 2.03 0.70 156 RCVD_IN_RP_SAFE 2588 0.69 0.67 0.70 157 XMLngstWrd_02 2528 0.58 0.30 0.68 158 XMSexyCombo_01 2502 0.90 1.52 0.67 159 TR_MetaPhish_Combo_01 2474 0.83 1.27 0.66 160 XMHTML_After_End 2460 0.76 1.02 0.66 161 FILL_THIS_FORM 2401 0.80 1.23 0.65 162 XMSubMetaI_00 2363 0.89 1.58 0.63 163 MSGID_NOFQDN1 2357 0.46 0.01 0.63 164 TO_NO_BRKTS_HTML_ONLY 2352 0.50 0.16 0.63 165 NML_ADSP_CUSTOM_MED 2217 0.64 0.77 0.60 166 RCVD_IN_RP_CERTIFIED 2198 0.58 0.54 0.59 167 XMBdyGiftCard01 2162 0.89 1.70 0.58 168 T_OBFU_PDF_ATTACH 2147 0.45 0.12 0.58 169 URI_TRY_3LD 2141 1.02 2.20 0.58 170 RCVD_IN_BL_SPAMCOP_NET 2090 3.03 9.56 0.56 171 TR_XM_Base64_M1 2090 0.70 1.07 0.56 172 HTML_IMAGE_ONLY_32 2075 0.65 0.89 0.56 173 XMBrknScrpt_02 2073 0.78 1.36 0.56 174 XM_H_Trusted_IP 2067 0.40 0.00 0.56 175 SHORT_HELO_AND_INLINE_IMAGE 2032 0.41 0.06 0.55 176 XMSubNoVowel 2002 0.51 0.42 0.54 177 FORGED_GMAIL_RCVD 1997 0.58 0.70 0.54 178 XM_B_COPY_HTML 1986 0.65 0.95 0.53 179 T_XMDrugObfuBody_00 1964 0.76 1.36 0.53 180 TR_XM_PHPDW 1935 1.20 2.98 0.52 181 TR_XM_PHPForged 1903 1.19 2.97 0.51 182 FROM_GOV_DKIM_AU 1878 0.45 0.31 0.50 183 TR_XM_FormFill2 1872 1.16 2.90 0.50 184 XM_B_SpammyWords4 1871 0.93 2.05 0.50 185 T_XMHurry_00 1855 0.78 1.52 0.50 186 XM_ProductURIs 1844 0.59 0.83 0.50 187 XMLngstWrd_03 1815 0.42 0.24 0.49 188 HTML_IMAGE_ONLY_20 1815 0.45 0.35 0.49 189 XM_H_PHPOS 1813 1.14 2.88 0.49 190 RELAYCOUNTRY_GB 1799 0.57 0.78 0.48 191 XMSexyCombo_04 1787 0.48 0.48 0.48 192 USER_IN_WELCOMELIST 1748 0.34 0.00 0.47 193 USER_IN_WHITELIST 1748 0.34 0.00 0.47 194 XMDateMe_00 1735 0.43 0.33 0.47 195 XMMoneyMeta_00 1701 0.52 0.68 0.46 196 T_Symld_Words_02 1696 0.61 1.00 0.46 197 RCVD_IN_SORBS_DUL 1696 0.35 0.06 0.46 198 TM2_M_BODY_EMPTY 1690 0.66 1.20 0.45 199 HTML_IMAGE_ONLY_28 1665 0.38 0.21 0.45 200 MPART_ALT_DIFF_COUNT 1611 0.55 0.85 0.43 ----------------------------------------------------------------------