Email: 598042 Autolearn: 0 AvgScore: 1.41 AvgScanTime: 1.58 sec Spam: 152515 Autolearn: 0 AvgScore: 13.07 AvgScanTime: 1.83 sec Ham: 445527 Autolearn: 0 AvgScore: -2.59 AvgScanTime: 1.49 sec Time Spent Running SA: 262.03 hours Time Spent Processing Spam: 77.40 hours Time Spent Processing Ham: 184.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143960 89.12 94.39 87.31 2 DKIM_SIGNED 136662 69.28 89.61 62.33 3 XM_DK_Pass 131335 67.51 86.11 61.14 4 DKIM_VALID 130145 66.61 85.33 60.19 5 XM_B_Unicode 127389 73.63 83.53 70.24 6 RELAYCOUNTRY_US 126218 81.78 82.76 81.44 7 T_SCC_BODY_TEXT_LINE 121917 82.17 79.94 82.94 8 DCC_CHECK 108132 38.55 70.90 27.47 9 XMListUnsubscribeExists 105984 47.61 69.49 40.12 10 XM_B_SpammyWords 105440 48.87 69.13 41.93 11 DKIM_VALID_AU 98200 51.66 64.39 47.30 12 XM_B_Unicode3 71826 43.03 47.09 41.64 13 XM_DK_Undo_02 64632 14.37 42.38 4.79 14 BAYES_50 62871 51.74 41.22 55.34 15 LOC_TINY_FONT_1 61199 24.77 40.13 19.52 16 XM_B_SpammyWords2 59696 21.93 39.14 16.04 17 HTML_FONT_LOW_CONTRAST 54484 25.80 35.72 22.41 18 BAYES_99 50044 11.05 32.81 3.60 19 FVGT_m_MULTI_ODD 49585 23.93 32.51 21.00 20 TR_XM_DKIM_Undo 48366 9.57 31.71 1.99 21 MIME_HTML_ONLY 47557 25.78 31.18 23.93 22 DKIM_VALID_EF 45656 25.73 29.94 24.29 23 DCC_CHECK_NEGATIVE 44359 61.42 29.09 72.49 24 T_KAM_HTML_FONT_INVALID 40526 19.61 26.57 17.22 25 BAYES_999 39837 8.74 26.12 2.80 26 XMSubLong 38017 22.28 24.93 21.37 27 RCVD_IN_MSPIKE_H2 37573 20.42 24.64 18.98 28 T_TM2_M_HEADER_IN_MSG 35544 24.38 23.31 24.74 29 TR_DCC_Bayes_99 35250 6.82 23.11 1.24 30 TR_XM_DK_Unsub 31642 13.34 20.75 10.81 31 XM_Multi_Part_URI 29968 13.11 19.65 10.87 32 RELAYCOUNTRY_META 26627 6.92 17.46 3.31 33 XM_B_Unsub 25864 9.97 16.96 7.58 34 TR_XM_BayesUnsub 24698 7.83 16.19 4.97 35 UNPARSEABLE_RELAY 22990 9.93 15.07 8.17 36 BOTNET_IPINHOSTNAME 22122 6.34 14.50 3.54 37 XM_B_SpammyWords3 20425 6.69 13.39 4.40 38 LOTS_OF_MONEY 19767 7.37 12.96 5.45 39 TR_XM_SpammyRelay 19500 4.51 12.79 1.67 40 XM_Body_Dirty_Words 18076 6.41 11.85 4.55 41 TR_XM_SpammyWords2 17970 3.29 11.78 0.39 42 TR_XM_SpammyWords4 17187 5.66 11.27 3.74 43 BOTNET 17155 3.66 11.25 1.06 44 RCVD_IN_BL_SPAMCOP_NET 16169 3.25 10.60 0.73 45 XM_Evil_Numbers_Gen 15958 8.89 10.46 8.35 46 FSL_BULK_SIG 14733 4.94 9.66 3.32 47 BAYES_80 12679 4.48 8.31 3.17 48 TR_XM_SPAMCOP 12623 2.38 8.28 0.36 49 RELAYCOUNTRY_CA 12291 2.66 8.06 0.81 50 XM_UncommonTLD01 11991 4.81 7.86 3.76 51 LotsOfNums_01 11724 7.41 7.69 7.32 52 TR_XM_UnparsRelay 11341 2.69 7.44 1.07 53 BAYES_60 10775 7.39 7.06 7.50 54 HTML_IMAGE_RATIO_02 10551 4.78 6.92 4.05 55 XMSubMetaSx_00 9990 4.08 6.55 3.23 56 RCVD_IN_MSPIKE_H3 9803 5.93 6.43 5.77 57 RCVD_IN_MSPIKE_WL 9803 5.93 6.43 5.77 58 UNTRUSTED_Relay 9358 2.51 6.14 1.27 59 MPART_ALT_DIFF 9327 9.86 6.12 11.14 60 XMSexyCombo_05 9269 2.88 6.08 1.79 61 HTML_IMAGE_RATIO_04 9121 12.05 5.98 14.12 62 XM_H_Long_From01 8756 4.97 5.74 4.71 63 XM_B_Phish_Phrases 8463 3.47 5.55 2.75 64 XMNumbers 8406 3.13 5.51 2.32 65 XM_SPF_SoftFail 8152 3.48 5.35 2.84 66 TooManyTo_001 8022 6.91 5.26 7.48 67 HTML_IMAGE_RATIO_06 7096 4.58 4.65 4.56 68 TR_XM_PhishingBody 7005 2.32 4.59 1.54 69 BAYES_95 6844 2.61 4.49 1.96 70 SpammyFromTLD_01 6792 1.74 4.45 0.81 71 MIME_QP_LONG_LINE 6708 4.62 4.40 4.70 72 XM_H_GMP 6554 5.24 4.30 5.56 73 DKIM_INVALID 6517 2.68 4.27 2.13 74 XMStrtUSub 6504 8.88 4.26 10.46 75 XM_B_Investor 6343 2.14 4.16 1.45 76 MIME_HTML_MOSTLY 6164 3.00 4.04 2.65 77 XM_OfRef6 6151 1.84 4.03 1.09 78 TR_XM_SpammyWords5 6091 1.90 3.99 1.18 79 XMBody_17 5742 1.18 3.76 0.29 80 T_XMDrugObfuBody_08 5644 1.98 3.70 1.39 81 MIME_HTML_ONLY_MULTI 5485 7.68 3.60 9.08 82 XM_B_SpammyTLD 5364 2.42 3.52 2.04 83 TR_XM_PHPForged 5323 1.23 3.49 0.46 84 TR_XM_PHPDW 5291 1.22 3.47 0.45 85 TR_XM_FormFill2 5219 1.21 3.42 0.45 86 XM_H_PHPOS 5199 1.19 3.41 0.43 87 HTML_IMAGE_RATIO_08 5172 2.12 3.39 1.69 88 T_XMDrugObfuBody_14 5151 1.97 3.38 1.49 89 RCVD_IN_VALIDITY_SAFE 5073 3.53 3.33 3.60 90 TM2_M_VERY_LONG_WORD 4863 1.50 3.19 0.92 91 XM_UB50 4715 1.35 3.09 0.75 92 T_FILL_THIS_FORM_SHORT 4453 1.50 2.92 1.01 93 XM_B_Unsub2 4285 1.62 2.81 1.22 94 T_TooManySym_01 4241 3.81 2.78 4.16 95 RCVD_IN_VALIDITY_CERTIFIED 4143 3.08 2.72 3.20 96 XMDiploma_00 4085 1.71 2.68 1.38 97 XM_URI_RBL 4063 0.76 2.66 0.11 98 TM2_M_URI_OPT_OUT 3982 3.35 2.61 3.60 99 XM_CamelCaseFrm001 3943 1.98 2.59 1.77 100 USER_IN_DEF_DKIM_WL 3864 7.78 2.53 9.57 101 SCC_BODY_URI_ONLY 3514 2.41 2.30 2.44 102 T_REMOTE_IMAGE 3488 3.20 2.29 3.51 103 HK_RANDOM_REPLYTO 3462 0.64 2.27 0.08 104 RELAYCOUNTRY_AU 3322 1.00 2.18 0.60 105 BAYES_40 3273 4.82 2.15 5.74 106 TR_XM_BayesRelay 3254 0.54 2.13 0.00 107 MAILING_LIST_MULTI 3254 2.27 2.13 2.31 108 XM_B_SpammyWords4 3179 0.85 2.08 0.42 109 TR_XM_NoHeaderRelay 3163 0.60 2.07 0.09 110 BOTNET_NORDNS 3072 0.52 2.01 0.01 111 BAYES_20 3069 3.67 2.01 4.24 112 SUBJ_ALL_CAPS 2889 1.48 1.89 1.34 113 RCVD_IN_PSBL 2881 0.65 1.89 0.23 114 ANY_BOUNCE_MESSAGE 2855 3.81 1.87 4.48 115 BOUNCE_MESSAGE 2853 3.81 1.87 4.48 116 XM_DK_Undo_01 2832 1.70 1.86 1.65 117 HTML_MIME_NO_HTML_TAG 2818 2.24 1.85 2.38 118 TR_LOTS_OF_MONEY3 2776 0.65 1.82 0.25 119 TM2_M_BODY_EMPTY 2770 0.94 1.82 0.63 120 FROM_EXCESS_BASE64 2764 1.52 1.81 1.42 121 XM_DIRTYINTL 2757 0.58 1.81 0.16 122 RCVD_IN_IADB_LISTED 2713 3.73 1.78 4.40 123 XMEmptyBody_01 2659 0.58 1.74 0.18 124 AC_BR_BONANZA 2634 0.50 1.73 0.08 125 T_XMDrugObfuBody_00 2579 0.83 1.69 0.54 126 HTML_TAG_BALANCE_BODY 2579 0.89 1.69 0.61 127 XMStockSpam_06 2552 1.11 1.67 0.92 128 SpammyFromTLD_02 2506 0.67 1.64 0.34 129 TR_XM_FormFill 2502 0.46 1.64 0.05 130 RCVD_IN_IADB_SPF 2475 3.27 1.62 3.84 131 KHOP_HELO_FCRDNS 2420 1.51 1.59 1.49 132 RCVD_IN_IADB_SENDERID 2375 2.95 1.56 3.43 133 RCVD_IN_IADB_DK 2365 2.87 1.55 3.33 134 XM_SendGrid 2321 1.26 1.52 1.17 135 HTTPS_HTTP_MISMATCH 2319 0.94 1.52 0.74 136 URI_HEX 2317 0.95 1.52 0.75 137 TR_Mismatch_TLD_02 2306 0.48 1.51 0.13 138 XMPhish14 2222 0.67 1.46 0.41 139 TR_XM_INV_DKIM 2217 0.40 1.45 0.04 140 FONT_INVIS_LONG_LINE 2205 0.48 1.45 0.15 141 XM_B_COVIDMETA 2191 0.53 1.44 0.21 142 XMGenDplmaNmb 2171 0.93 1.42 0.76 143 RCVD_IN_VALIDITY_RPBL 2102 0.38 1.38 0.03 144 T_XMHurry_00 2099 0.57 1.38 0.29 145 XM_HighProb1 2081 0.35 1.36 0.00 146 ALL_TRUSTED 2074 12.34 1.36 16.10 147 XMPhish30 2068 0.72 1.36 0.50 148 XMSexyCombo_01 2055 0.47 1.35 0.17 149 TR_XM_InvalidRelay 1941 0.34 1.27 0.03 150 XMBrknScrpt_02 1918 0.60 1.26 0.37 151 DKIM_ADSP_CUSTOM_MED 1897 0.88 1.24 0.76 152 XMClaimOffer 1895 0.51 1.24 0.27 153 XM_H_Long_From02 1877 0.99 1.23 0.91 154 TR_LOTS_OF_MONEY2 1837 0.51 1.20 0.28 155 T_MONEY_PERCENT 1837 0.51 1.20 0.28 156 XM_B_COPY_HTML 1778 0.88 1.17 0.78 157 HTML_IMAGE_ONLY_20 1773 0.58 1.16 0.38 158 BAYES_05 1739 3.12 1.14 3.79 159 TR_MetaPhish_Combo_01 1709 0.88 1.12 0.80 160 FORGED_GMAIL_RCVD 1697 0.60 1.11 0.43 161 XM_H_PHPMailer 1686 0.78 1.11 0.66 162 URI_NOVOWEL 1680 1.58 1.10 1.74 163 XMHTML_After_End 1680 0.72 1.10 0.59 164 TR_Symld_Words 1669 1.25 1.09 1.31 165 T_Symld_Words_02 1653 0.65 1.08 0.50 166 URI_TRY_3LD 1640 0.70 1.08 0.57 167 XM_B_Phish66 1619 0.50 1.06 0.30 168 RDNS_DYNAMIC 1618 0.56 1.06 0.39 169 XMBdyGiftCard01 1566 0.74 1.03 0.64 170 XMMoneyMeta_00 1530 0.67 1.00 0.56 171 TR_XM_Base64_M1 1503 0.57 0.99 0.43 172 XMSubMetaI_00 1460 0.50 0.96 0.34 173 XM_B_SEO 1460 0.33 0.96 0.12 174 XMBody_78 1427 0.46 0.94 0.29 175 XM_H_Undi_Recip 1413 0.38 0.93 0.19 176 XM_UB99 1397 0.24 0.92 0.00 177 DIET_1 1367 0.47 0.90 0.32 178 TM2_M_OBFU_COMMENT 1362 0.41 0.89 0.25 179 XM_Combo_Sbj 1336 0.39 0.88 0.23 180 MISSING_HEADERS 1335 0.50 0.88 0.38 181 TR_XM_SEO4 1334 0.27 0.87 0.06 182 XM_PDF 1331 4.56 0.87 5.82 183 PDS_OTHER_BAD_TLD 1325 0.29 0.87 0.09 184 NML_ADSP_CUSTOM_MED 1320 0.60 0.87 0.52 185 TR_XM_DK_SendGrid 1283 0.82 0.84 0.81 186 TVD_RCVD_IP 1283 1.26 0.84 1.40 187 RELAYCOUNTRY_FR 1265 0.35 0.83 0.19 188 SHOPIFY_IMG_NOT_RCVD_SFY 1256 0.34 0.82 0.17 189 T_TooManySym_02 1256 1.75 0.82 2.06 190 TR_Caps_n_Bayes_99 1247 0.22 0.82 0.01 191 XMBody_29 1239 0.25 0.81 0.06 192 XM_ProductURIs 1229 0.55 0.81 0.46 193 BAYES_00 1220 11.12 0.80 14.66 194 XM_B_DNDMA 1212 0.41 0.79 0.28 195 XMSlimDrugH 1208 0.35 0.79 0.19 196 THIS_AD 1198 0.37 0.79 0.23 197 TR_Mismatch_TLD_01 1188 0.39 0.78 0.26 198 XMReplyNow 1170 0.38 0.77 0.24 199 HTML_FONT_FACE_BAD 1157 9.66 0.76 12.70 200 TooManyTo_002 1137 1.72 0.75 2.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 389010 89.12 94.39 87.31 2 T_SCC_BODY_TEXT_LINE 369507 82.17 79.94 82.94 3 RELAYCOUNTRY_US 362837 81.78 82.76 81.44 4 DCC_CHECK_NEGATIVE 322952 61.42 29.09 72.49 5 XM_B_Unicode 312948 73.63 83.53 70.24 6 DKIM_SIGNED 277688 69.28 89.61 62.33 7 XM_DK_Pass 272382 67.51 86.11 61.14 8 DKIM_VALID 268181 66.61 85.33 60.19 9 BAYES_50 246559 51.74 41.22 55.34 10 DKIM_VALID_AU 210745 51.66 64.39 47.30 11 XM_B_SpammyWords 186823 48.87 69.13 41.93 12 XM_B_Unicode3 185520 43.03 47.09 41.64 13 XMListUnsubscribeExists 178737 47.61 69.49 40.12 14 DCC_CHECK 122389 38.55 70.90 27.47 15 T_TM2_M_HEADER_IN_MSG 110232 24.38 23.31 24.74 16 DKIM_VALID_EF 108199 25.73 29.94 24.29 17 MIME_HTML_ONLY 106636 25.78 31.18 23.93 18 HTML_FONT_LOW_CONTRAST 99832 25.80 35.72 22.41 19 XMSubLong 95215 22.28 24.93 21.37 20 FVGT_m_MULTI_ODD 93555 23.93 32.51 21.00 21 LOC_TINY_FONT_1 86953 24.77 40.13 19.52 22 RCVD_IN_MSPIKE_H2 84551 20.42 24.64 18.98 23 T_KAM_HTML_FONT_INVALID 76733 19.61 26.57 17.22 24 ALL_TRUSTED 71719 12.34 1.36 16.10 25 XM_B_SpammyWords2 71473 21.93 39.14 16.04 26 BAYES_00 65308 11.12 0.80 14.66 27 HTML_IMAGE_RATIO_04 62929 12.05 5.98 14.12 28 XM_H_Trusted_IP 61622 10.30 0.00 13.83 29 HTML_FONT_FACE_BAD 56591 9.66 0.76 12.70 30 MPART_ALT_DIFF 49638 9.86 6.12 11.14 31 XM_Multi_Part_URI 48440 13.11 19.65 10.87 32 TR_XM_DK_Unsub 48140 13.34 20.75 10.81 33 XMStrtUSub 46598 8.88 4.26 10.46 34 USER_IN_DEF_DKIM_WL 42659 7.78 2.53 9.57 35 MIME_HTML_ONLY_MULTI 40452 7.68 3.60 9.08 36 XM_Evil_Numbers_Gen 37194 8.89 10.46 8.35 37 UNPARSEABLE_RELAY 36406 9.93 15.07 8.17 38 XM_B_Unsub 33788 9.97 16.96 7.58 39 BAYES_60 33420 7.39 7.06 7.50 40 TooManyTo_001 33305 6.91 5.26 7.48 41 LotsOfNums_01 32604 7.41 7.69 7.32 42 XM_DKIMWhitelistDomains 28026 4.70 0.04 6.29 43 TR_XM_DK_Bayes 26749 4.62 0.56 6.00 44 IN_ZIMBRA_NJ_WHITELIST 26666 4.48 0.07 5.99 45 TR_XM_DK_Bayes1 26217 4.52 0.55 5.88 46 XM_PDF 25930 4.56 0.87 5.82 47 RCVD_IN_MSPIKE_H3 25685 5.93 6.43 5.77 48 RCVD_IN_MSPIKE_WL 25685 5.93 6.43 5.77 49 BAYES_40 25553 4.82 2.15 5.74 50 XM_H_GMP 24754 5.24 4.30 5.56 51 LOTS_OF_MONEY 24282 7.37 12.96 5.45 52 TR_XM_DK_Bayes2 22313 3.83 0.40 5.01 53 TR_XM_BayesUnsub 22128 7.83 16.19 4.97 54 XMSubNoVowel 21798 3.75 0.42 4.89 55 XM_DK_Undo_02 21324 14.37 42.38 4.79 56 XM_H_Long_From01 20993 4.97 5.74 4.71 57 MIME_QP_LONG_LINE 20943 4.62 4.40 4.70 58 HTML_IMAGE_RATIO_06 20295 4.58 4.65 4.56 59 XM_Body_Dirty_Words 20282 6.41 11.85 4.55 60 ANY_BOUNCE_MESSAGE 19950 3.81 1.87 4.48 61 BOUNCE_MESSAGE 19947 3.81 1.87 4.48 62 XM_B_SpammyWords3 19609 6.69 13.39 4.40 63 RCVD_IN_IADB_LISTED 19583 3.73 1.78 4.40 64 BAYES_20 18889 3.67 2.01 4.24 65 T_TooManySym_01 18537 3.81 2.78 4.16 66 HTML_IMAGE_RATIO_02 18052 4.78 6.92 4.05 67 RCVD_IN_IADB_SPF 17107 3.27 1.62 3.84 68 BAYES_05 16893 3.12 1.14 3.79 69 XM_UncommonTLD01 16763 4.81 7.86 3.76 70 TR_XM_SpammyWords4 16648 5.66 11.27 3.74 71 TM2_M_URI_OPT_OUT 16059 3.35 2.61 3.60 72 BAYES_99 16033 11.05 32.81 3.60 73 RCVD_IN_VALIDITY_SAFE 16025 3.53 3.33 3.60 74 BOTNET_IPINHOSTNAME 15791 6.34 14.50 3.54 75 T_REMOTE_IMAGE 15656 3.20 2.29 3.51 76 RCVD_IN_IADB_SENDERID 15268 2.95 1.56 3.43 77 RCVD_IN_IADB_DK 14828 2.87 1.55 3.33 78 FSL_BULK_SIG 14803 4.94 9.66 3.32 79 RELAYCOUNTRY_META 14749 6.92 17.46 3.31 80 XMSubMetaSx_00 14389 4.08 6.55 3.23 81 RCVD_IN_VALIDITY_CERTIFIED 14257 3.08 2.72 3.20 82 BAYES_80 14137 4.48 8.31 3.17 83 XM_SPF_SoftFail 12634 3.48 5.35 2.84 84 RCVD_IN_IADB_VOUCHED 12559 2.27 0.65 2.82 85 BAYES_999 12458 8.74 26.12 2.80 86 XM_B_Phish_Phrases 12260 3.47 5.55 2.75 87 MIME_HTML_MOSTLY 11797 3.00 4.04 2.65 88 SCC_BODY_URI_ONLY 10869 2.41 2.30 2.44 89 HTML_MIME_NO_HTML_TAG 10607 2.24 1.85 2.38 90 XMNumbers 10317 3.13 5.51 2.32 91 MAILING_LIST_MULTI 10302 2.27 2.13 2.31 92 DKIM_INVALID 9507 2.68 4.27 2.13 93 T_TooManySym_02 9183 1.75 0.82 2.06 94 TooManyTo_002 9140 1.72 0.75 2.05 95 XM_B_SpammyTLD 9081 2.42 3.52 2.04 96 TR_XM_DKIM_Undo 8857 9.57 31.71 1.99 97 RCVD_IN_IADB_OPTIN 8817 1.59 0.43 1.98 98 BAYES_95 8735 2.61 4.49 1.96 99 XMSubLongNoVowel 8670 1.50 0.18 1.95 100 XMSubGarbage 8512 1.43 0.03 1.91 101 XMSexyCombo_05 7963 2.88 6.08 1.79 102 XM_CamelCaseFrm001 7869 1.98 2.59 1.77 103 URI_NOVOWEL 7760 1.58 1.10 1.74 104 INVALID_MSGID 7531 1.31 0.18 1.69 105 HTML_IMAGE_RATIO_08 7510 2.12 3.39 1.69 106 TR_XM_SpammyRelay 7449 4.51 12.79 1.67 107 XM_DK_Undo_01 7351 1.70 1.86 1.65 108 HELO_NODOT 7209 1.37 0.66 1.62 109 HELO_NO_DOMAIN 7203 1.37 0.66 1.62 110 TR_XM_PhishingBody 6846 2.32 4.59 1.54 111 T_XMDrugObfuBody_14 6649 1.97 3.38 1.49 112 KHOP_HELO_FCRDNS 6637 1.51 1.59 1.49 113 TO_MALFORMED 6471 1.08 0.00 1.45 114 XM_B_Investor 6445 2.14 4.16 1.45 115 FROM_EXCESS_BASE64 6325 1.52 1.81 1.42 116 TVD_RCVD_IP 6253 1.26 0.84 1.40 117 T_XMDrugObfuBody_08 6173 1.98 3.70 1.39 118 XMDiploma_00 6147 1.71 2.68 1.38 119 T_OBFU_PDF_ATTACH 6081 1.06 0.15 1.36 120 SUBJ_ALL_CAPS 5978 1.48 1.89 1.34 121 TR_Symld_Words 5824 1.25 1.09 1.31 122 IN_HORDE_ADDRESS_BOOK 5660 0.97 0.09 1.27 123 UNTRUSTED_Relay 5656 2.51 6.14 1.27 124 TooManyTo_003 5567 1.10 0.66 1.25 125 TR_DCC_Bayes_99 5513 6.82 23.11 1.24 126 XM_B_Unsub2 5420 1.62 2.81 1.22 127 XMGappySubj_01 5372 0.99 0.35 1.21 128 TR_XM_SpammyWords5 5279 1.90 3.99 1.18 129 XM_SendGrid 5233 1.26 1.52 1.17 130 XM_E_Blogspot 5131 0.88 0.08 1.15 131 XMCapTrack 4958 0.93 0.41 1.11 132 XM_OfRef6 4877 1.84 4.03 1.09 133 TR_XM_UnparsRelay 4752 2.69 7.44 1.07 134 BOTNET 4719 3.66 11.25 1.06 135 XM_GoogleGroups 4669 0.91 0.52 1.05 136 T_FILL_THIS_FORM_SHORT 4496 1.50 2.92 1.01 137 XMBSHREFv2 4484 0.91 0.64 1.01 138 XMBody_95 4347 0.80 0.28 0.98 139 TVD_SPACE_RATIO 4196 0.73 0.12 0.94 140 TM2_M_VERY_LONG_WORD 4119 1.50 3.19 0.92 141 XMStockSpam_06 4096 1.11 1.67 0.92 142 TooManyTo_004 4094 0.84 0.61 0.92 143 XM_H_Long_From02 4055 0.99 1.23 0.91 144 SpammyFromTLD_01 3621 1.74 4.45 0.81 145 TR_XM_DK_SendGrid 3620 0.82 0.84 0.81 146 RELAYCOUNTRY_CA 3601 2.66 8.06 0.81 147 TR_MetaPhish_Combo_01 3566 0.88 1.12 0.80 148 XM_B_COPY_HTML 3494 0.88 1.17 0.78 149 TooManyTo_005 3427 0.72 0.57 0.77 150 XMGenDplmaNmb 3384 0.93 1.42 0.76 151 XMGappySubj_02 3374 0.60 0.13 0.76 152 DKIM_ADSP_CUSTOM_MED 3364 0.88 1.24 0.76 153 URI_HEX 3347 0.95 1.52 0.75 154 XM_UB50 3337 1.35 3.09 0.75 155 HTTPS_HTTP_MISMATCH 3312 0.94 1.52 0.74 156 RCVD_IN_BL_SPAMCOP_NET 3263 3.25 10.60 0.73 157 T_TooManySym_03 3239 0.64 0.38 0.73 158 RCVD_IN_RP_SAFE 3176 0.71 0.68 0.71 159 XM_ShortIntro_01 3022 0.66 0.60 0.68 160 XM_H_PHPMailer 2956 0.78 1.11 0.66 161 XMBdyGiftCard01 2862 0.74 1.03 0.64 162 RCVD_IN_RP_CERTIFIED 2860 0.62 0.55 0.64 163 TM2_M_BODY_EMPTY 2828 0.94 1.82 0.63 164 HTML_TAG_BALANCE_BODY 2725 0.89 1.69 0.61 165 RELAYCOUNTRY_AU 2662 1.00 2.18 0.60 166 XMHTML_After_End 2612 0.72 1.10 0.59 167 FROM_GOV_DKIM_AU 2592 0.53 0.38 0.58 168 URI_TRY_3LD 2529 0.70 1.08 0.57 169 XMMoneyMeta_00 2495 0.67 1.00 0.56 170 MSGID_NOFQDN1 2408 0.41 0.03 0.54 171 T_XMDrugObfuBody_00 2392 0.83 1.69 0.54 172 MPART_ALT_DIFF_COUNT 2372 0.56 0.65 0.53 173 NML_ADSP_CUSTOM_MED 2295 0.60 0.87 0.52 174 SHORT_HELO_AND_INLINE_IMAGE 2279 0.39 0.04 0.51 175 XMPhish30 2245 0.72 1.36 0.50 176 T_Symld_Words_02 2206 0.65 1.08 0.50 177 FILL_THIS_FORM 2192 0.49 0.50 0.49 178 XMNoVowels 2186 0.48 0.46 0.49 179 BASE64_LENGTH_79_INF 2135 0.40 0.17 0.48 180 HTML_IMAGE_ONLY_28 2075 0.47 0.47 0.47 181 XM_ProductURIs 2059 0.55 0.81 0.46 182 PLING_QUERY 2053 0.49 0.57 0.46 183 XM_RXBody 2051 0.48 0.54 0.46 184 TR_XM_PHPForged 2029 1.23 3.49 0.46 185 TR_XM_FormFill2 2014 1.21 3.42 0.45 186 TR_XM_PHPDW 2005 1.22 3.47 0.45 187 RELAYCOUNTRY_GB 1970 0.51 0.73 0.44 188 XM_H_PHPOS 1934 1.19 3.41 0.43 189 TR_XM_Base64_M1 1922 0.57 0.99 0.43 190 FORGED_GMAIL_RCVD 1907 0.60 1.11 0.43 191 USER_IN_WELCOMELIST 1886 0.32 0.00 0.42 192 USER_IN_WHITELIST 1886 0.32 0.00 0.42 193 XM_B_SpammyWords4 1884 0.85 2.08 0.42 194 RCVD_IN_SORBS_DUL 1838 0.32 0.04 0.41 195 XMPhish14 1809 0.67 1.46 0.41 196 HTML_IMAGE_ONLY_32 1776 0.48 0.73 0.40 197 TR_XM_SpammyWords2 1729 3.29 11.78 0.39 198 RDNS_DYNAMIC 1716 0.56 1.06 0.39 199 XMLngstWrd_00 1684 0.40 0.47 0.38 200 MISSING_HEADERS 1683 0.50 0.88 0.38 ----------------------------------------------------------------------