Email: 494401 Autolearn: 0 AvgScore: 3.83 AvgScanTime: 1.38 sec Spam: 143205 Autolearn: 0 AvgScore: 13.63 AvgScanTime: 1.60 sec Ham: 351196 Autolearn: 0 AvgScore: -0.17 AvgScanTime: 1.30 sec Time Spent Running SA: 190.08 hours Time Spent Processing Spam: 63.49 hours Time Spent Processing Ham: 126.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137028 88.92 95.69 86.16 2 DKIM_SIGNED 129616 74.79 90.51 68.38 3 XM_DK_Pass 124193 72.65 86.72 66.92 4 XM_B_Unicode 122761 75.38 85.72 71.16 5 DKIM_VALID 122486 71.62 85.53 65.95 6 T_SCC_BODY_TEXT_LINE 116959 82.69 81.67 83.11 7 RELAYCOUNTRY_US 116869 76.56 81.61 74.50 8 DCC_CHECK 104513 42.09 72.98 29.50 9 XM_B_SpammyWords 104305 50.22 72.84 41.00 10 XMListUnsubscribeExists 99590 52.58 69.54 45.66 11 DKIM_VALID_AU 91226 55.72 63.70 52.46 12 XM_B_Unicode3 69731 46.02 48.69 44.93 13 XM_DK_Undo_02 66592 17.54 46.50 5.74 14 XM_B_SpammyWords2 58822 23.43 41.08 16.24 15 BAYES_50 54976 54.67 38.39 61.31 16 BAYES_99 53119 14.60 37.09 5.43 17 LOC_TINY_FONT_1 53008 26.64 37.02 22.41 18 HTML_FONT_LOW_CONTRAST 51773 27.91 36.15 24.55 19 TR_XM_DKIM_Undo 50914 12.01 35.55 2.41 20 FVGT_m_MULTI_ODD 47087 26.10 32.88 23.34 21 MIME_HTML_ONLY 46968 26.98 32.80 24.60 22 DKIM_VALID_EF 45667 27.67 31.89 25.95 23 BAYES_999 42713 11.80 29.83 4.45 24 T_KAM_HTML_FONT_INVALID 41654 21.94 29.09 19.02 25 DCC_CHECK_NEGATIVE 38668 57.87 27.00 70.46 26 TR_DCC_Bayes_99 38105 8.72 26.61 1.43 27 T_TM2_M_HEADER_IN_MSG 33730 25.40 23.55 26.15 28 TR_XM_DK_Unsub 32035 15.08 22.37 12.11 29 XMSubLong 31368 27.02 21.90 29.10 30 RCVD_IN_MSPIKE_H2 30422 19.15 21.24 18.30 31 XM_Multi_Part_URI 29004 14.44 20.25 12.06 32 RELAYCOUNTRY_META 26792 8.01 18.71 3.64 33 XM_B_Unsub 25383 15.30 17.72 14.31 34 TR_XM_BayesUnsub 24628 14.11 17.20 12.85 35 BOTNET_IPINHOSTNAME 22436 7.57 15.67 4.27 36 TR_XM_SpammyRelay 21216 5.64 14.82 1.89 37 UNPARSEABLE_RELAY 20802 10.43 14.53 8.77 38 TR_XM_SpammyWords2 20438 4.58 14.27 0.62 39 LOTS_OF_MONEY 18761 7.70 13.10 5.50 40 XM_B_SpammyWords3 18050 6.31 12.60 3.74 41 RCVD_IN_BL_SPAMCOP_NET 17489 3.97 12.21 0.62 42 XM_Body_Dirty_Words 17466 7.32 12.20 5.34 43 BOTNET 16044 4.04 11.20 1.12 44 TR_XM_SpammyWords4 15609 5.70 10.90 3.58 45 FSL_BULK_SIG 15147 5.38 10.58 3.26 46 RELAYCOUNTRY_CA 13739 3.48 9.59 0.99 47 XM_Evil_Numbers_Gen 13705 7.70 9.57 6.93 48 TR_XM_SPAMCOP 13533 2.92 9.45 0.26 49 BAYES_80 11736 5.02 8.20 3.73 50 RCVD_IN_MSPIKE_WL 11665 6.65 8.15 6.03 51 RCVD_IN_MSPIKE_H3 11664 6.63 8.14 6.01 52 HTML_IMAGE_RATIO_02 11455 5.49 8.00 4.47 53 TR_XM_UnparsRelay 11205 3.21 7.82 1.33 54 BAYES_60 10142 7.85 7.08 8.16 55 LotsOfNums_01 10064 7.34 7.03 7.46 56 XMSubMetaSx_00 9337 5.34 6.52 4.86 57 HTML_IMAGE_RATIO_04 9259 4.77 6.47 4.08 58 MPART_ALT_DIFF 9127 4.51 6.37 3.75 59 UNTRUSTED_Relay 8848 2.74 6.18 1.33 60 XM_UncommonTLD01 8838 4.30 6.17 3.54 61 XMSexyCombo_05 8577 3.14 5.99 1.98 62 TooManyTo_001 8527 12.15 5.95 14.68 63 XM_H_Long_From01 8386 5.01 5.86 4.66 64 XMBody_17 7801 1.84 5.45 0.37 65 XMStrtUSub 7320 4.52 5.11 4.27 66 XM_B_Phish_Phrases 7143 3.37 4.99 2.72 67 DKIM_INVALID 7130 3.17 4.98 2.43 68 BAYES_95 6863 3.10 4.79 2.40 69 HTML_IMAGE_RATIO_06 6682 2.90 4.67 2.18 70 XM_B_Investor 6430 2.51 4.49 1.70 71 T_XMDrugObfuBody_14 5985 2.25 4.18 1.46 72 TR_XM_SpammyWords5 5856 2.13 4.09 1.33 73 MIME_HTML_ONLY_MULTI 5842 2.72 4.08 2.16 74 MIME_HTML_MOSTLY 5585 2.78 3.90 2.32 75 TR_XM_PhishingBody 5585 2.61 3.90 2.08 76 XM_B_SpammyTLD 5572 2.80 3.89 2.36 77 T_XMDrugObfuBody_08 5400 2.26 3.77 1.65 78 HTML_IMAGE_RATIO_08 5335 2.83 3.73 2.47 79 T_FILL_THIS_FORM_SHORT 5219 1.57 3.64 0.73 80 XM_SPF_SoftFail 5096 3.05 3.56 2.84 81 RCVD_IN_VALIDITY_SAFE 4838 4.24 3.38 4.58 82 TR_XM_BayesRelay 4801 0.97 3.35 0.00 83 XM_OfRef6 4792 1.74 3.35 1.09 84 MIME_QP_LONG_LINE 4686 4.32 3.27 4.74 85 XMNumbers 4470 2.57 3.12 2.34 86 XM_UB50 4410 1.45 3.08 0.79 87 FROM_EXCESS_BASE64 4396 2.10 3.07 1.71 88 XMDiploma_00 4296 6.72 3.00 8.24 89 USER_IN_DEF_DKIM_WL 4294 8.93 3.00 11.34 90 XM_URI_RBL 4283 0.99 2.99 0.17 91 SpammyFromTLD_01 4272 1.39 2.98 0.74 92 TM2_M_URI_OPT_OUT 3980 2.21 2.78 1.97 93 XM_CamelCaseFrm001 3964 2.27 2.77 2.06 94 T_TooManySym_01 3961 5.00 2.77 5.92 95 HTML_MIME_NO_HTML_TAG 3915 2.34 2.73 2.18 96 TM2_M_VERY_LONG_WORD 3846 1.55 2.69 1.09 97 RCVD_IN_VALIDITY_CERTIFIED 3725 3.50 2.60 3.87 98 XM_B_Unsub2 3677 1.71 2.57 1.37 99 RELAYCOUNTRY_AU 3657 1.19 2.55 0.64 100 SUBJ_ALL_CAPS 3558 1.76 2.48 1.46 101 TR_LOTS_OF_MONEY3 3367 0.90 2.35 0.31 102 T_XMHurry_00 3300 0.93 2.30 0.37 103 TR_XM_FormFill 3266 0.67 2.28 0.01 104 TR_XM_NoHeaderRelay 3178 0.73 2.22 0.13 105 XM_B_SpammyWords4 3142 0.95 2.19 0.45 106 XMStockSpam_06 2971 1.43 2.07 1.17 107 T_REMOTE_IMAGE 2918 2.89 2.04 3.24 108 AC_BR_BONANZA 2903 0.65 2.03 0.09 109 URI_TRY_3LD 2876 1.02 2.01 0.62 110 RCVD_IN_PSBL 2789 0.69 1.95 0.17 111 MAILING_LIST_MULTI 2771 2.35 1.93 2.53 112 URI_HEX 2712 1.24 1.89 0.97 113 TR_XM_INV_DKIM 2690 0.59 1.88 0.06 114 XMBdyGiftCard01 2619 0.94 1.83 0.58 115 ANY_BOUNCE_MESSAGE 2601 3.58 1.82 4.30 116 BOUNCE_MESSAGE 2598 3.58 1.81 4.30 117 TR_Mismatch_TLD_02 2558 0.61 1.79 0.13 118 XM_DIRTYINTL 2529 0.70 1.77 0.26 119 RCVD_IN_IADB_LISTED 2524 3.75 1.76 4.56 120 XMSubMetaI_00 2522 0.79 1.76 0.39 121 TR_XM_PHPDW 2488 0.81 1.74 0.44 122 BAYES_40 2431 3.62 1.70 4.40 123 TR_XM_PHPForged 2412 0.80 1.68 0.43 124 XM_DK_Undo_01 2374 1.72 1.66 1.74 125 TR_XM_FormFill2 2318 0.77 1.62 0.43 126 KHOP_HELO_FCRDNS 2304 1.28 1.61 1.14 127 XMPhish30 2295 1.34 1.60 1.23 128 XM_H_PHPOS 2294 0.76 1.60 0.41 129 XM_HighProb1 2247 0.46 1.57 0.00 130 RCVD_IN_IADB_SPF 2227 3.29 1.56 4.00 131 HTML_TAG_BALANCE_BODY 2224 0.72 1.55 0.38 132 RCVD_IN_VALIDITY_RPBL 2217 0.48 1.55 0.04 133 XMSexyCombo_01 2194 0.73 1.53 0.41 134 SpammyFromTLD_02 2181 0.81 1.52 0.52 135 NO_DNS_FOR_FROM 2158 0.62 1.51 0.25 136 RCVD_IN_IADB_DK 2148 2.89 1.50 3.46 137 XM_SendGrid 2137 1.30 1.49 1.21 138 RCVD_IN_IADB_SENDERID 2135 2.97 1.49 3.57 139 XMGenDplmaNmb 2126 0.84 1.48 0.58 140 BOTNET_NORDNS 2098 0.43 1.47 0.01 141 FONT_INVIS_LONG_LINE 1973 0.43 1.38 0.04 142 TR_XM_Base64_M1 1963 0.78 1.37 0.53 143 XM_H_Undi_Recip 1885 0.51 1.32 0.19 144 BAYES_20 1874 2.68 1.31 3.24 145 T_XMDrugObfuBody_00 1874 0.74 1.31 0.50 146 TR_XM_MaxWHORU 1846 0.51 1.29 0.19 147 HTTPS_HTTP_MISMATCH 1819 0.87 1.27 0.71 148 ALL_TRUSTED 1783 16.49 1.25 22.70 149 DKIM_ADSP_NXDOMAIN 1742 0.52 1.22 0.24 150 XM_B_COPY_HTML 1666 0.74 1.16 0.56 151 T_MONEY_PERCENT 1654 0.43 1.15 0.13 152 TR_LOTS_OF_MONEY2 1654 0.43 1.15 0.13 153 SCC_BODY_URI_ONLY 1653 1.93 1.15 2.25 154 TR_XM_InvalidRelay 1634 0.34 1.14 0.02 155 PDS_OTHER_BAD_TLD 1585 0.42 1.11 0.14 156 XM_B_COVIDMETA 1585 0.52 1.11 0.28 157 HK_RANDOM_REPLYTO 1572 0.38 1.10 0.08 158 URIBL_DBL_SPAM 1569 0.32 1.10 0.00 159 URI_NOVOWEL 1523 1.54 1.06 1.73 160 XM_ProductURIs 1512 0.69 1.06 0.54 161 XMSlimDrugH 1446 0.44 1.01 0.21 162 TR_Caps_n_Bayes_99 1437 0.30 1.00 0.01 163 XM_Nigeria_01 1403 0.33 0.98 0.06 164 XMReplyNow 1395 0.47 0.97 0.27 165 XM_H_PHPMailer 1383 0.77 0.97 0.68 166 XM_B_Phish66 1344 0.47 0.94 0.27 167 PLING_QUERY 1338 0.48 0.93 0.29 168 HTML_FONT_FACE_BAD 1313 0.56 0.92 0.42 169 XM_Body_Dirty_Words_01 1299 0.44 0.91 0.25 170 TR_Symld_Words 1293 1.24 0.90 1.38 171 THIS_AD 1281 0.48 0.89 0.31 172 TR_XM_Undi_Recip5 1276 0.27 0.89 0.02 173 XM_UB99 1273 0.26 0.89 0.00 174 TM2_M_OBFU_COMMENT 1260 0.43 0.88 0.25 175 TooManyTo_002 1256 1.90 0.88 2.32 176 XMBody_78 1248 0.45 0.87 0.28 177 RELAYCOUNTRY_FR 1235 0.39 0.86 0.20 178 RDNS_DYNAMIC 1235 0.45 0.86 0.28 179 T_TooManySym_02 1234 2.01 0.86 2.48 180 RELAYCOUNTRY_CN 1234 0.29 0.86 0.05 181 DKIM_ADSP_CUSTOM_MED 1234 0.86 0.86 0.87 182 XMBrknScrpt_02 1228 0.58 0.86 0.47 183 TR_XM_Base64_L1 1223 0.34 0.85 0.13 184 TR_XM_DK_SendGrid 1212 0.75 0.85 0.72 185 XM_UB60 1196 0.27 0.84 0.04 186 HTML_FONT_TINY_NORDNS 1192 0.32 0.83 0.11 187 XMHTMLBadTable_001 1191 0.43 0.83 0.27 188 MPART_ALT_DIFF_COUNT 1185 0.52 0.83 0.39 189 TR_Sbj_FN_Bdy 1179 0.33 0.82 0.13 190 TR_XM_Undi_Recip2 1175 0.25 0.82 0.01 191 XM_B_SEO 1171 0.34 0.82 0.15 192 TR_Mismatch_TLD_01 1163 0.44 0.81 0.29 193 DIET_1 1147 0.48 0.80 0.35 194 UNDISC_MONEY 1136 0.24 0.79 0.01 195 XM_H_Long_From02 1129 0.93 0.79 0.99 196 XMPhish14 1116 0.44 0.78 0.31 197 TR_XM_SEO4 1110 0.29 0.78 0.09 198 TooManyTo_003 1087 1.18 0.76 1.35 199 REMOVE_BEFORE_LINK 1083 0.29 0.76 0.10 200 XM_Combo_Sbj 1064 0.36 0.74 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 302593 88.92 95.69 86.16 2 T_SCC_BODY_TEXT_LINE 291882 82.69 81.67 83.11 3 RELAYCOUNTRY_US 261628 76.56 81.61 74.50 4 XM_B_Unicode 249901 75.38 85.72 71.16 5 DCC_CHECK_NEGATIVE 247455 57.87 27.00 70.46 6 DKIM_SIGNED 240136 74.79 90.51 68.38 7 XM_DK_Pass 235013 72.65 86.72 66.92 8 DKIM_VALID 231608 71.62 85.53 65.95 9 BAYES_50 215321 54.67 38.39 61.31 10 DKIM_VALID_AU 184234 55.72 63.70 52.46 11 XMListUnsubscribeExists 160343 52.58 69.54 45.66 12 XM_B_Unicode3 157788 46.02 48.69 44.93 13 XM_B_SpammyWords 143984 50.22 72.84 41.00 14 DCC_CHECK 103598 42.09 72.98 29.50 15 XMSubLong 102206 27.02 21.90 29.10 16 T_TM2_M_HEADER_IN_MSG 91832 25.40 23.55 26.15 17 DKIM_VALID_EF 91147 27.67 31.89 25.95 18 MIME_HTML_ONLY 86408 26.98 32.80 24.60 19 HTML_FONT_LOW_CONTRAST 86212 27.91 36.15 24.55 20 FVGT_m_MULTI_ODD 81974 26.10 32.88 23.34 21 ALL_TRUSTED 79721 16.49 1.25 22.70 22 LOC_TINY_FONT_1 78696 26.64 37.02 22.41 23 T_KAM_HTML_FONT_INVALID 66795 21.94 29.09 19.02 24 RCVD_IN_MSPIKE_H2 64255 19.15 21.24 18.30 25 XM_B_SpammyWords2 57019 23.43 41.08 16.24 26 TooManyTo_001 51550 12.15 5.95 14.68 27 XM_B_Unsub 50263 15.30 17.72 14.31 28 TR_XM_BayesUnsub 45120 14.11 17.20 12.85 29 TR_XM_DK_Unsub 42537 15.08 22.37 12.11 30 XM_Multi_Part_URI 42363 14.44 20.25 12.06 31 USER_IN_DEF_DKIM_WL 39835 8.93 3.00 11.34 32 BAYES_00 31127 6.51 0.74 8.86 33 UNPARSEABLE_RELAY 30788 10.43 14.53 8.77 34 XMDiploma_00 28945 6.72 3.00 8.24 35 BAYES_60 28659 7.85 7.08 8.16 36 LotsOfNums_01 26216 7.34 7.03 7.46 37 XM_DKIMWhitelistDomains 25843 5.24 0.04 7.36 38 XM_Evil_Numbers_Gen 24351 7.70 9.57 6.93 39 IN_ZIMBRA_NJ_WHITELIST 22751 4.63 0.10 6.48 40 TR_XM_DK_Bayes 21805 4.53 0.43 6.21 41 TR_XM_DK_Bayes1 21426 4.46 0.42 6.10 42 RCVD_IN_MSPIKE_WL 21192 6.65 8.15 6.03 43 RCVD_IN_MSPIKE_H3 21122 6.63 8.14 6.01 44 T_TooManySym_01 20781 5.00 2.77 5.92 45 XM_DK_Undo_02 20150 17.54 46.50 5.74 46 LOTS_OF_MONEY 19317 7.70 13.10 5.50 47 BAYES_99 19054 14.60 37.09 5.43 48 XM_Body_Dirty_Words 18748 7.32 12.20 5.34 49 TR_XM_DK_Bayes2 18610 3.85 0.30 5.30 50 XMSubMetaSx_00 17053 5.34 6.52 4.86 51 MIME_QP_LONG_LINE 16652 4.32 3.27 4.74 52 XM_H_Long_From01 16370 5.01 5.86 4.66 53 RCVD_IN_VALIDITY_SAFE 16101 4.24 3.38 4.58 54 RCVD_IN_IADB_LISTED 15999 3.75 1.76 4.56 55 XM_PDF 15806 3.35 0.52 4.50 56 HTML_IMAGE_RATIO_02 15696 5.49 8.00 4.47 57 BAYES_999 15627 11.80 29.83 4.45 58 BAYES_40 15443 3.62 1.70 4.40 59 ANY_BOUNCE_MESSAGE 15092 3.58 1.82 4.30 60 BOUNCE_MESSAGE 15088 3.58 1.81 4.30 61 XMStrtUSub 15010 4.52 5.11 4.27 62 BOTNET_IPINHOSTNAME 14997 7.57 15.67 4.27 63 HTML_IMAGE_RATIO_04 14330 4.77 6.47 4.08 64 RCVD_IN_IADB_SPF 14062 3.29 1.56 4.00 65 RCVD_IN_VALIDITY_CERTIFIED 13578 3.50 2.60 3.87 66 MPART_ALT_DIFF 13177 4.51 6.37 3.75 67 XM_B_SpammyWords3 13137 6.31 12.60 3.74 68 BAYES_80 13095 5.02 8.20 3.73 69 RELAYCOUNTRY_META 12791 8.01 18.71 3.64 70 TR_XM_SpammyWords4 12586 5.70 10.90 3.58 71 RCVD_IN_IADB_SENDERID 12536 2.97 1.49 3.57 72 XM_UncommonTLD01 12426 4.30 6.17 3.54 73 RCVD_IN_IADB_DK 12163 2.89 1.50 3.46 74 FSL_BULK_SIG 11442 5.38 10.58 3.26 75 BAYES_20 11396 2.68 1.31 3.24 76 T_REMOTE_IMAGE 11387 2.89 2.04 3.24 77 RCVD_IN_IADB_VOUCHED 10360 2.31 0.73 2.95 78 XM_SPF_SoftFail 9967 3.05 3.56 2.84 79 XM_B_Phish_Phrases 9541 3.37 4.99 2.72 80 MAILING_LIST_MULTI 8872 2.35 1.93 2.53 81 T_TooManySym_02 8725 2.01 0.86 2.48 82 HTML_IMAGE_RATIO_08 8661 2.83 3.73 2.47 83 BAYES_05 8659 1.95 0.70 2.47 84 DKIM_INVALID 8528 3.17 4.98 2.43 85 TR_XM_DKIM_Undo 8466 12.01 35.55 2.41 86 BAYES_95 8440 3.10 4.79 2.40 87 XM_B_SpammyTLD 8287 2.80 3.89 2.36 88 XMNumbers 8214 2.57 3.12 2.34 89 MIME_HTML_MOSTLY 8160 2.78 3.90 2.32 90 TooManyTo_002 8156 1.90 0.88 2.32 91 SCC_BODY_URI_ONLY 7913 1.93 1.15 2.25 92 HTML_MIME_NO_HTML_TAG 7665 2.34 2.73 2.18 93 HTML_IMAGE_RATIO_06 7652 2.90 4.67 2.18 94 MIME_HTML_ONLY_MULTI 7589 2.72 4.08 2.16 95 INVALID_MSGID 7351 1.55 0.22 2.09 96 TR_XM_PhishingBody 7298 2.61 3.90 2.08 97 XM_CamelCaseFrm001 7245 2.27 2.77 2.06 98 RCVD_IN_IADB_OPTIN 7126 1.56 0.40 2.03 99 XMSexyCombo_05 6938 3.14 5.99 1.98 100 TM2_M_URI_OPT_OUT 6933 2.21 2.78 1.97 101 TR_XM_SpammyRelay 6655 5.64 14.82 1.89 102 TO_MALFORMED 6144 1.26 0.06 1.75 103 XM_DK_Undo_01 6122 1.72 1.66 1.74 104 URI_NOVOWEL 6081 1.54 1.06 1.73 105 FROM_EXCESS_BASE64 6003 2.10 3.07 1.71 106 XM_B_Investor 5972 2.51 4.49 1.70 107 HELO_NODOT 5824 1.32 0.50 1.66 108 HELO_NO_DOMAIN 5817 1.32 0.50 1.66 109 T_XMDrugObfuBody_08 5783 2.26 3.77 1.65 110 TVD_RCVD_IP 5436 1.31 0.73 1.55 111 SUBJ_ALL_CAPS 5133 1.76 2.48 1.46 112 T_XMDrugObfuBody_14 5116 2.25 4.18 1.46 113 TR_DCC_Bayes_99 5007 8.72 26.61 1.43 114 IN_HORDE_ADDRESS_BOOK 4963 1.03 0.09 1.41 115 TR_Symld_Words 4855 1.24 0.90 1.38 116 XM_B_Unsub2 4799 1.71 2.57 1.37 117 XMGappySubj_01 4776 1.01 0.16 1.36 118 TooManyTo_003 4745 1.18 0.76 1.35 119 TR_XM_SpammyWords5 4686 2.13 4.09 1.33 120 UNTRUSTED_Relay 4680 2.74 6.18 1.33 121 TR_XM_UnparsRelay 4677 3.21 7.82 1.33 122 XM_H_Trusted_IP 4650 0.94 0.00 1.32 123 XMPhish30 4336 1.34 1.60 1.23 124 XM_SendGrid 4267 1.30 1.49 1.21 125 XM_GoogleGroups 4147 1.00 0.57 1.18 126 XMStockSpam_06 4105 1.43 2.07 1.17 127 KHOP_HELO_FCRDNS 4007 1.28 1.61 1.14 128 XMBSHREFv2 4000 0.94 0.44 1.14 129 BOTNET 3939 4.04 11.20 1.12 130 XM_OfRef6 3827 1.74 3.35 1.09 131 TM2_M_VERY_LONG_WORD 3818 1.55 2.69 1.09 132 XMCapTrack 3776 0.87 0.37 1.08 133 XMBody_95 3775 0.79 0.10 1.07 134 TVD_SPACE_RATIO 3719 0.78 0.09 1.06 135 RELAYCOUNTRY_CA 3465 3.48 9.59 0.99 136 XM_H_Long_From02 3462 0.93 0.79 0.99 137 TooManyTo_004 3458 0.90 0.70 0.98 138 URI_HEX 3419 1.24 1.89 0.97 139 XMSubNoVowel 3388 0.83 0.50 0.96 140 RCVD_IN_RP_SAFE 3252 0.86 0.68 0.93 141 DKIM_ADSP_CUSTOM_MED 3041 0.86 0.86 0.87 142 T_TooManySym_03 2951 0.67 0.27 0.84 143 TooManyTo_005 2846 0.76 0.65 0.81 144 XM_UB50 2783 1.45 3.08 0.79 145 RCVD_IN_RP_CERTIFIED 2732 0.71 0.53 0.78 146 XMGappySubj_02 2669 0.56 0.06 0.76 147 FROM_GOV_DKIM_AU 2611 0.57 0.15 0.74 148 SpammyFromTLD_01 2591 1.39 2.98 0.74 149 T_FILL_THIS_FORM_SHORT 2550 1.57 3.64 0.73 150 TR_XM_DK_SendGrid 2516 0.75 0.85 0.72 151 HTTPS_HTTP_MISMATCH 2482 0.87 1.27 0.71 152 T_OBFU_PDF_ATTACH 2460 0.52 0.08 0.70 153 XM_H_PHPMailer 2403 0.77 0.97 0.68 154 XMNoVowels 2332 0.62 0.51 0.66 155 MSGID_NOFQDN1 2328 0.47 0.01 0.66 156 XM_ShortIntro_01 2276 0.61 0.50 0.65 157 RELAYCOUNTRY_AU 2236 1.19 2.55 0.64 158 TR_XM_SpammyWords2 2194 4.58 14.27 0.62 159 URI_TRY_3LD 2190 1.02 2.01 0.62 160 RCVD_IN_BL_SPAMCOP_NET 2163 3.97 12.21 0.62 161 XMHTML_After_End 2095 0.63 0.70 0.60 162 NML_ADSP_CUSTOM_MED 2080 0.63 0.72 0.59 163 XMGenDplmaNmb 2034 0.84 1.48 0.58 164 XMBdyGiftCard01 2025 0.94 1.83 0.58 165 XM_B_COPY_HTML 1982 0.74 1.16 0.56 166 XM_ProductURIs 1905 0.69 1.06 0.54 167 TR_MetaPhish_Combo_01 1903 0.58 0.68 0.54 168 RELAYCOUNTRY_GB 1900 0.53 0.52 0.54 169 TR_XM_Base64_M1 1871 0.78 1.37 0.53 170 SHORT_HELO_AND_INLINE_IMAGE 1834 0.38 0.04 0.52 171 SpammyFromTLD_02 1833 0.81 1.52 0.52 172 FORGED_GMAIL_RCVD 1827 0.58 0.73 0.52 173 T_XMDrugObfuBody_00 1772 0.74 1.31 0.50 174 XMLngstWrd_00 1746 0.45 0.34 0.50 175 HTML_IMAGE_ONLY_20 1737 0.49 0.48 0.49 176 FILL_THIS_FORM 1726 0.42 0.26 0.49 177 HTML_IMAGE_ONLY_28 1707 0.55 0.69 0.49 178 USER_IN_WHITELIST 1685 0.34 0.00 0.48 179 USER_IN_WELCOMELIST 1685 0.34 0.00 0.48 180 XMBrknScrpt_02 1643 0.58 0.86 0.47 181 MISSING_HEADERS 1577 0.45 0.44 0.45 182 XM_B_SpammyWords4 1565 0.95 2.19 0.45 183 TR_XM_PHPDW 1531 0.81 1.74 0.44 184 TR_XM_PHPForged 1523 0.80 1.68 0.43 185 TR_XM_FormFill2 1502 0.77 1.62 0.43 186 HTML_FONT_FACE_BAD 1467 0.56 0.92 0.42 187 XMSubMetaSSx_00 1458 0.47 0.60 0.42 188 XM_H_PHPOS 1440 0.76 1.60 0.41 189 XMSexyCombo_01 1438 0.73 1.53 0.41 190 XMLngstWrd_01 1436 0.38 0.31 0.41 191 XMDateMe_00 1424 0.36 0.26 0.41 192 XM_B_FormFill 1408 0.30 0.05 0.40 193 XMSubMetaI_00 1380 0.79 1.76 0.39 194 XMMoneyMeta_00 1375 0.43 0.51 0.39 195 MPART_ALT_DIFF_COUNT 1370 0.52 0.83 0.39 196 HTML_TAG_BALANCE_BODY 1336 0.72 1.55 0.38 197 TO_NO_BRKTS_HTML_ONLY 1330 0.36 0.32 0.38 198 XM_B_DNDMA 1313 0.48 0.74 0.37 199 T_Symld_Words_02 1313 0.44 0.59 0.37 200 XMBody_17 1305 1.84 5.45 0.37 ----------------------------------------------------------------------