Email: 469571 Autolearn: 0 AvgScore: 3.61 AvgScanTime: 1.43 sec Spam: 140841 Autolearn: 0 AvgScore: 13.38 AvgScanTime: 1.60 sec Ham: 328730 Autolearn: 0 AvgScore: -0.58 AvgScanTime: 1.36 sec Time Spent Running SA: 186.30 hours Time Spent Processing Spam: 62.41 hours Time Spent Processing Ham: 123.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134166 88.48 95.26 85.57 2 DKIM_SIGNED 128461 80.29 91.21 75.61 3 XM_DK_Pass 123544 78.22 87.72 74.14 4 DKIM_VALID 121468 77.09 86.24 73.16 5 XM_B_Unicode 120986 74.39 85.90 69.46 6 RELAYCOUNTRY_US 114718 81.45 81.45 81.45 7 T_SCC_BODY_TEXT_LINE 113854 82.48 80.84 83.18 8 DCC_CHECK 102369 45.55 72.68 33.92 9 XM_B_SpammyWords 101769 51.69 72.26 42.88 10 XMListUnsubscribeExists 101734 56.63 72.23 49.94 11 DKIM_VALID_AU 90658 60.53 64.37 58.88 12 XM_B_Unicode3 66310 43.00 47.08 41.25 13 XM_DK_Undo_02 65446 18.72 46.47 6.84 14 XM_B_SpammyWords2 60574 24.85 43.01 17.08 15 LOC_TINY_FONT_1 56367 30.01 40.02 25.72 16 BAYES_50 54286 51.72 38.54 57.36 17 HTML_FONT_LOW_CONTRAST 51135 30.61 36.31 28.16 18 BAYES_99 50942 14.37 36.17 5.03 19 TR_XM_DKIM_Undo 50283 12.74 35.70 2.90 20 MIME_HTML_ONLY 47552 24.20 33.76 20.10 21 DKIM_VALID_EF 45407 30.26 32.24 29.41 22 FVGT_m_MULTI_ODD 45119 27.47 32.04 25.51 23 BAYES_999 40513 11.45 28.77 4.03 24 T_KAM_HTML_FONT_INVALID 40168 22.16 28.52 19.43 25 DCC_CHECK_NEGATIVE 38456 54.41 27.30 66.03 26 TR_DCC_Bayes_99 37035 9.08 26.30 1.71 27 RCVD_IN_MSPIKE_H2 34842 23.53 24.74 23.01 28 TR_XM_DK_Unsub 33468 16.75 23.76 13.75 29 T_TM2_M_HEADER_IN_MSG 31629 26.34 22.46 28.01 30 XMSubLong 31470 22.11 22.34 22.01 31 RELAYCOUNTRY_META 27609 8.57 19.60 3.85 32 XM_Multi_Part_URI 27479 15.28 19.51 13.47 33 TR_XM_SpammyRelay 23104 6.35 16.40 2.04 34 XM_B_Unsub 22599 10.71 16.05 8.43 35 TR_XM_BayesUnsub 21746 9.26 15.44 6.61 36 UNPARSEABLE_RELAY 21037 11.62 14.94 10.20 37 TR_XM_SpammyWords2 20864 4.79 14.81 0.50 38 BOTNET_IPINHOSTNAME 19993 7.90 14.20 5.21 39 RCVD_IN_BL_SPAMCOP_NET 19257 4.76 13.67 0.94 40 XM_B_SpammyWords3 19154 6.78 13.60 3.86 41 LOTS_OF_MONEY 18916 8.45 13.43 6.32 42 TR_XM_SpammyWords4 16750 6.43 11.89 4.09 43 TR_XM_SPAMCOP 15669 3.65 11.13 0.45 44 RELAYCOUNTRY_CA 15575 4.04 11.06 1.03 45 XM_Body_Dirty_Words 13972 6.02 9.92 4.35 46 BOTNET 13853 4.17 9.84 1.74 47 XM_Evil_Numbers_Gen 13483 8.44 9.57 7.95 48 RCVD_IN_MSPIKE_H3 13160 7.26 9.34 6.37 49 RCVD_IN_MSPIKE_WL 13160 7.26 9.34 6.37 50 FSL_BULK_SIG 11889 5.45 8.44 4.17 51 BAYES_80 11682 5.35 8.29 4.08 52 TR_XM_UnparsRelay 11142 3.53 7.91 1.65 53 BAYES_60 10850 8.62 7.70 9.01 54 LotsOfNums_01 9772 8.10 6.94 8.59 55 HTML_IMAGE_RATIO_02 9711 5.63 6.90 5.09 56 XMSubMetaSx_00 9643 4.42 6.85 3.38 57 XM_UncommonTLD01 9559 4.71 6.79 3.82 58 XMBody_17 9503 2.38 6.75 0.50 59 MPART_ALT_DIFF 9256 5.20 6.57 4.61 60 HTML_IMAGE_RATIO_04 8745 5.15 6.21 4.70 61 XM_H_Long_From01 8238 5.48 5.85 5.32 62 XMSexyCombo_05 8206 3.12 5.83 1.97 63 TooManyTo_001 7814 7.59 5.55 8.47 64 XMStrtUSub 7390 4.81 5.25 4.62 65 DKIM_INVALID 6993 3.21 4.97 2.45 66 BAYES_95 6759 3.20 4.80 2.52 67 XM_B_Investor 6532 2.48 4.64 1.56 68 UNTRUSTED_Relay 6521 2.48 4.63 1.55 69 XM_B_Phish_Phrases 6015 3.57 4.27 3.27 70 MIME_HTML_MOSTLY 5962 3.15 4.23 2.69 71 MIME_HTML_ONLY_MULTI 5924 3.07 4.21 2.59 72 XM_SPF_SoftFail 5886 3.42 4.18 3.10 73 TR_XM_PhishingBody 5863 2.86 4.16 2.30 74 XM_H_GMP 5784 5.82 4.11 6.55 75 T_FILL_THIS_FORM_SHORT 5778 1.86 4.10 0.90 76 XMNumbers 5445 2.96 3.87 2.58 77 SpammyFromTLD_01 5270 1.71 3.74 0.84 78 XM_OfRef6 5192 1.99 3.69 1.27 79 T_XMDrugObfuBody_14 5162 2.26 3.67 1.65 80 TR_XM_BayesRelay 5091 1.09 3.61 0.00 81 TR_XM_SpammyWords5 5070 1.96 3.60 1.26 82 T_XMDrugObfuBody_08 5050 2.15 3.59 1.54 83 HTML_IMAGE_RATIO_06 4930 2.78 3.50 2.47 84 XM_B_SpammyTLD 4915 2.87 3.49 2.61 85 HTML_IMAGE_RATIO_08 4769 2.40 3.39 1.98 86 TM2_M_URI_OPT_OUT 4715 2.64 3.35 2.34 87 RCVD_IN_VALIDITY_SAFE 4537 4.60 3.22 5.18 88 TM2_M_VERY_LONG_WORD 4501 1.93 3.20 1.38 89 MIME_QP_LONG_LINE 4342 4.85 3.08 5.61 90 TR_XM_PHPDW 4158 1.20 2.95 0.45 91 TR_XM_PHPForged 4133 1.19 2.93 0.44 92 TR_XM_FormFill2 4088 1.18 2.90 0.45 93 XM_CamelCaseFrm001 4074 2.36 2.89 2.13 94 XM_H_PHPOS 4073 1.17 2.89 0.43 95 FROM_EXCESS_BASE64 4073 2.16 2.89 1.85 96 USER_IN_DEF_DKIM_WL 4012 9.50 2.85 12.35 97 RELAYCOUNTRY_AU 3941 1.30 2.80 0.66 98 XMDiploma_00 3801 1.91 2.70 1.58 99 FONT_INVIS_LONG_LINE 3657 0.81 2.60 0.05 100 XM_URI_RBL 3536 0.87 2.51 0.17 101 RCVD_IN_VALIDITY_CERTIFIED 3535 3.91 2.51 4.51 102 TR_XM_FormFill 3509 0.75 2.49 0.01 103 T_TooManySym_01 3357 4.43 2.38 5.31 104 SUBJ_ALL_CAPS 3355 1.81 2.38 1.56 105 T_REMOTE_IMAGE 3200 3.42 2.27 3.91 106 XM_UB50 3128 1.30 2.22 0.90 107 TR_LOTS_OF_MONEY3 3086 0.87 2.19 0.30 108 XM_B_Unsub2 3057 1.61 2.17 1.38 109 T_XMHurry_00 2959 1.02 2.10 0.56 110 XM_B_SpammyWords4 2895 1.01 2.06 0.57 111 TR_XM_Base64_M1 2840 1.09 2.02 0.69 112 TR_XM_INV_DKIM 2837 0.64 2.01 0.05 113 TR_XM_NoHeaderRelay 2594 0.62 1.84 0.09 114 URI_HEX 2506 1.61 1.78 1.54 115 MAILING_LIST_MULTI 2493 2.50 1.77 2.82 116 XMStockSpam_06 2467 1.35 1.75 1.17 117 TR_Mismatch_TLD_02 2453 0.59 1.74 0.10 118 HTML_MIME_NO_HTML_TAG 2377 2.09 1.69 2.26 119 XM_DK_Undo_01 2358 1.86 1.67 1.94 120 BOTNET_NORDNS 2336 0.51 1.66 0.02 121 BAYES_40 2328 3.77 1.65 4.67 122 ANY_BOUNCE_MESSAGE 2295 3.56 1.63 4.38 123 BOUNCE_MESSAGE 2293 3.55 1.63 4.38 124 XM_SendGrid 2286 1.52 1.62 1.47 125 HK_RANDOM_REPLYTO 2196 0.53 1.56 0.09 126 RCVD_IN_IADB_LISTED 2172 3.69 1.54 4.61 127 AC_BR_BONANZA 2161 0.52 1.53 0.09 128 XMPhish30 2108 1.34 1.50 1.27 129 T_XMDrugObfuBody_00 2104 0.94 1.49 0.70 130 SpammyFromTLD_02 2049 0.77 1.45 0.48 131 RCVD_IN_PSBL 2027 0.66 1.44 0.33 132 XMGenDplmaNmb 2024 1.00 1.44 0.81 133 SCC_BODY_URI_ONLY 2005 2.52 1.42 2.99 134 RCVD_IN_IADB_SPF 1998 3.33 1.42 4.15 135 KHOP_HELO_FCRDNS 1998 1.29 1.42 1.23 136 URI_TRY_3LD 1926 1.04 1.37 0.89 137 BAYES_20 1916 2.81 1.36 3.43 138 HTML_TAG_BALANCE_BODY 1911 0.72 1.36 0.44 139 RCVD_IN_IADB_DK 1898 2.99 1.35 3.70 140 T_XMDrugObfuBody_10 1891 0.43 1.34 0.04 141 RCVD_IN_IADB_SENDERID 1878 3.05 1.33 3.79 142 XMBdyGiftCard01 1806 0.83 1.28 0.63 143 XMBody_29 1788 0.45 1.27 0.10 144 XMSexyCombo_01 1767 0.52 1.25 0.21 145 XM_HighProb1 1740 0.37 1.24 0.00 146 ALL_TRUSTED 1712 11.26 1.22 15.56 147 XM_DIRTYINTL 1645 0.47 1.17 0.17 148 XMHTML_After_End 1612 0.72 1.14 0.54 149 XMBrknScrpt_02 1581 0.63 1.12 0.42 150 HTTPS_HTTP_MISMATCH 1577 0.84 1.12 0.71 151 XM_H_Undi_Recip 1559 0.48 1.11 0.21 152 XM_H_PHPMailer 1547 0.80 1.10 0.67 153 TR_XM_DK_SendGrid 1534 1.03 1.09 1.00 154 RDNS_DYNAMIC 1512 0.57 1.07 0.36 155 TR_LOTS_OF_MONEY2 1475 0.42 1.05 0.15 156 T_MONEY_PERCENT 1475 0.42 1.05 0.15 157 TM2_M_OBFU_COMMENT 1461 0.48 1.04 0.23 158 PLING_QUERY 1457 0.56 1.03 0.36 159 TooManyTo_002 1452 1.83 1.03 2.17 160 TR_XM_Spammywords 1436 0.48 1.02 0.25 161 XM_S_SpammyWords 1436 0.48 1.02 0.25 162 XMBody_78 1433 0.48 1.02 0.26 163 MPART_ALT_DIFF_COUNT 1429 0.77 1.01 0.67 164 XM_B_Phish66 1402 0.57 1.00 0.39 165 SHOPIFY_IMG_NOT_RCVD_SFY 1399 0.47 0.99 0.25 166 XMPhish14 1391 0.57 0.99 0.39 167 DKIM_ADSP_CUSTOM_MED 1389 0.92 0.99 0.89 168 XM_B_COVIDMETA 1383 0.44 0.98 0.21 169 XMReplyNow 1332 0.47 0.95 0.27 170 XM_B_COPY_HTML 1330 0.69 0.94 0.57 171 TooManyTo_003 1325 1.27 0.94 1.41 172 DIET_1 1318 0.51 0.94 0.33 173 XMMoneyMeta_00 1310 0.52 0.93 0.35 174 URIBL_DBL_SPAM 1299 0.28 0.92 0.01 175 XMLngstWrd_00 1292 0.75 0.92 0.68 176 THIS_AD 1249 0.47 0.89 0.29 177 T_Symld_Words_02 1249 0.58 0.89 0.45 178 TooManyTo_004 1248 1.01 0.89 1.06 179 XM_B_DNDMA 1240 0.57 0.88 0.43 180 PDS_OTHER_BAD_TLD 1229 0.35 0.87 0.13 181 TR_XM_InvalidRelay 1216 0.28 0.86 0.03 182 URI_NOVOWEL 1203 1.25 0.85 1.42 183 TooManyTo_005 1202 0.88 0.85 0.89 184 TR_Symld_Words 1193 1.30 0.85 1.50 185 XM_B_SEO 1187 0.36 0.84 0.15 186 TR_XM_Base64_L1 1183 0.37 0.84 0.17 187 TR_MetaPhish_Combo_01 1170 0.79 0.83 0.78 188 XM_H_Long_From02 1166 0.99 0.83 1.06 189 XMSubMetaSxObfu_03 1154 0.53 0.82 0.40 190 TM2_M_BODY_EMPTY 1144 0.59 0.81 0.50 191 FORGED_GMAIL_RCVD 1136 0.62 0.81 0.54 192 TR_Caps_n_Bayes_99 1112 0.25 0.79 0.02 193 XM_Combo_Sbj 1100 0.34 0.78 0.16 194 XM_UB99 1096 0.24 0.78 0.00 195 NML_ADSP_CUSTOM_MED 1091 0.64 0.77 0.58 196 XM_ProductURIs 1089 0.78 0.77 0.78 197 TR_XM_Undi_Recip11 1073 0.27 0.76 0.06 198 XMEmptyBody_01 1071 0.30 0.76 0.10 199 XMSubMetaI_00 1069 0.58 0.76 0.50 200 BAYES_05 1068 2.19 0.76 2.81 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 281308 88.48 95.26 85.57 2 T_SCC_BODY_TEXT_LINE 273434 82.48 80.84 83.18 3 RELAYCOUNTRY_US 267767 81.45 81.45 81.45 4 DKIM_SIGNED 248562 80.29 91.21 75.61 5 XM_DK_Pass 243732 78.22 87.72 74.14 6 DKIM_VALID 240502 77.09 86.24 73.16 7 XM_B_Unicode 228333 74.39 85.90 69.46 8 DCC_CHECK_NEGATIVE 217056 54.41 27.30 66.03 9 DKIM_VALID_AU 193557 60.53 64.37 58.88 10 BAYES_50 188555 51.72 38.54 57.36 11 XMListUnsubscribeExists 164181 56.63 72.23 49.94 12 XM_B_SpammyWords 140973 51.69 72.26 42.88 13 XM_B_Unicode3 135606 43.00 47.08 41.25 14 DCC_CHECK 111519 45.55 72.68 33.92 15 DKIM_VALID_EF 96678 30.26 32.24 29.41 16 HTML_FONT_LOW_CONTRAST 92579 30.61 36.31 28.16 17 T_TM2_M_HEADER_IN_MSG 92063 26.34 22.46 28.01 18 LOC_TINY_FONT_1 84556 30.01 40.02 25.72 19 FVGT_m_MULTI_ODD 83852 27.47 32.04 25.51 20 RCVD_IN_MSPIKE_H2 75638 23.53 24.74 23.01 21 XMSubLong 72342 22.11 22.34 22.01 22 MIME_HTML_ONLY 66063 24.20 33.76 20.10 23 T_KAM_HTML_FONT_INVALID 63884 22.16 28.52 19.43 24 XM_B_SpammyWords2 56137 24.85 43.01 17.08 25 ALL_TRUSTED 51146 11.26 1.22 15.56 26 TR_XM_DK_Unsub 45185 16.75 23.76 13.75 27 XM_Multi_Part_URI 44284 15.28 19.51 13.47 28 USER_IN_DEF_DKIM_WL 40600 9.50 2.85 12.35 29 BAYES_00 36464 7.98 0.72 11.09 30 UNPARSEABLE_RELAY 33524 11.62 14.94 10.20 31 BAYES_60 29623 8.62 7.70 9.01 32 LotsOfNums_01 28251 8.10 6.94 8.59 33 TooManyTo_001 27841 7.59 5.55 8.47 34 XM_DKIMWhitelistDomains 27706 5.92 0.07 8.43 35 XM_B_Unsub 27703 10.71 16.05 8.43 36 TR_XM_DK_Bayes 26763 5.86 0.53 8.14 37 TR_XM_DK_Bayes1 26438 5.79 0.53 8.04 38 XM_Evil_Numbers_Gen 26147 8.44 9.57 7.95 39 IN_ZIMBRA_NJ_WHITELIST 23098 4.95 0.10 7.03 40 TR_XM_DK_Bayes2 23059 5.02 0.35 7.01 41 XM_DK_Undo_02 22477 18.72 46.47 6.84 42 TR_XM_BayesUnsub 21717 9.26 15.44 6.61 43 XM_H_GMP 21546 5.82 4.11 6.55 44 RCVD_IN_MSPIKE_WL 20938 7.26 9.34 6.37 45 RCVD_IN_MSPIKE_H3 20936 7.26 9.34 6.37 46 LOTS_OF_MONEY 20760 8.45 13.43 6.32 47 MIME_QP_LONG_LINE 18449 4.85 3.08 5.61 48 XM_H_Long_From01 17491 5.48 5.85 5.32 49 T_TooManySym_01 17442 4.43 2.38 5.31 50 BOTNET_IPINHOSTNAME 17117 7.90 14.20 5.21 51 RCVD_IN_VALIDITY_SAFE 17042 4.60 3.22 5.18 52 HTML_IMAGE_RATIO_02 16738 5.63 6.90 5.09 53 XM_PDF 16553 3.66 0.46 5.04 54 BAYES_99 16527 14.37 36.17 5.03 55 HTML_IMAGE_RATIO_04 15439 5.15 6.21 4.70 56 BAYES_40 15367 3.77 1.65 4.67 57 XMStrtUSub 15201 4.81 5.25 4.62 58 MPART_ALT_DIFF 15159 5.20 6.57 4.61 59 RCVD_IN_IADB_LISTED 15155 3.69 1.54 4.61 60 RCVD_IN_VALIDITY_CERTIFIED 14812 3.91 2.51 4.51 61 ANY_BOUNCE_MESSAGE 14400 3.56 1.63 4.38 62 BOUNCE_MESSAGE 14398 3.55 1.63 4.38 63 XM_Body_Dirty_Words 14306 6.02 9.92 4.35 64 FSL_BULK_SIG 13719 5.45 8.44 4.17 65 RCVD_IN_IADB_SPF 13649 3.33 1.42 4.15 66 TR_XM_SpammyWords4 13461 6.43 11.89 4.09 67 BAYES_80 13419 5.35 8.29 4.08 68 BAYES_999 13233 11.45 28.77 4.03 69 T_REMOTE_IMAGE 12854 3.42 2.27 3.91 70 XM_B_SpammyWords3 12684 6.78 13.60 3.86 71 RELAYCOUNTRY_META 12652 8.57 19.60 3.85 72 XM_UncommonTLD01 12551 4.71 6.79 3.82 73 RCVD_IN_IADB_SENDERID 12460 3.05 1.33 3.79 74 RCVD_IN_IADB_DK 12152 2.99 1.35 3.70 75 BAYES_20 11272 2.81 1.36 3.43 76 XMSubMetaSx_00 11104 4.42 6.85 3.38 77 XM_B_Phish_Phrases 10751 3.57 4.27 3.27 78 XM_SPF_SoftFail 10175 3.42 4.18 3.10 79 SCC_BODY_URI_ONLY 9823 2.52 1.42 2.99 80 TR_XM_DKIM_Undo 9533 12.74 35.70 2.90 81 MAILING_LIST_MULTI 9256 2.50 1.77 2.82 82 BAYES_05 9225 2.19 0.76 2.81 83 MIME_HTML_MOSTLY 8836 3.15 4.23 2.69 84 T_TooManySym_02 8656 2.03 0.64 2.63 85 RCVD_IN_IADB_VOUCHED 8635 2.02 0.60 2.63 86 XM_B_SpammyTLD 8579 2.87 3.49 2.61 87 MIME_HTML_ONLY_MULTI 8501 3.07 4.21 2.59 88 XMNumbers 8474 2.96 3.87 2.58 89 BAYES_95 8277 3.20 4.80 2.52 90 HTML_IMAGE_RATIO_06 8128 2.78 3.50 2.47 91 DKIM_INVALID 8060 3.21 4.97 2.45 92 TM2_M_URI_OPT_OUT 7703 2.64 3.35 2.34 93 TR_XM_PhishingBody 7577 2.86 4.16 2.30 94 HTML_MIME_NO_HTML_TAG 7415 2.09 1.69 2.26 95 INVALID_MSGID 7332 1.60 0.13 2.23 96 TooManyTo_002 7132 1.83 1.03 2.17 97 XM_CamelCaseFrm001 7006 2.36 2.89 2.13 98 TR_XM_SpammyRelay 6700 6.35 16.40 2.04 99 HTML_IMAGE_RATIO_08 6520 2.40 3.39 1.98 100 XMSexyCombo_05 6468 3.12 5.83 1.97 101 TO_MALFORMED 6450 1.37 0.00 1.96 102 XM_DK_Undo_01 6371 1.86 1.67 1.94 103 FROM_EXCESS_BASE64 6070 2.16 2.89 1.85 104 RCVD_IN_IADB_OPTIN 5972 1.41 0.44 1.82 105 HELO_NODOT 5926 1.47 0.68 1.80 106 HELO_NO_DOMAIN 5920 1.47 0.68 1.80 107 BOTNET 5733 4.17 9.84 1.74 108 TR_DCC_Bayes_99 5617 9.08 26.30 1.71 109 IN_HORDE_ADDRESS_BOOK 5481 1.19 0.07 1.67 110 TR_XM_UnparsRelay 5440 3.53 7.91 1.65 111 T_XMDrugObfuBody_14 5436 2.26 3.67 1.65 112 XMDiploma_00 5180 1.91 2.70 1.58 113 SUBJ_ALL_CAPS 5127 1.81 2.38 1.56 114 XM_B_Investor 5121 2.48 4.64 1.56 115 UNTRUSTED_Relay 5101 2.48 4.63 1.55 116 URI_HEX 5076 1.61 1.78 1.54 117 TVD_RCVD_IP 5066 1.30 0.75 1.54 118 T_XMDrugObfuBody_08 5060 2.15 3.59 1.54 119 TR_Symld_Words 4926 1.30 0.85 1.50 120 XM_SendGrid 4841 1.52 1.62 1.47 121 URI_NOVOWEL 4668 1.25 0.85 1.42 122 TooManyTo_003 4647 1.27 0.94 1.41 123 TM2_M_VERY_LONG_WORD 4539 1.93 3.20 1.38 124 XM_B_Unsub2 4522 1.61 2.17 1.38 125 XMGappySubj_01 4440 1.00 0.19 1.35 126 XMBSHREFv2 4250 1.01 0.35 1.29 127 TVD_SPACE_RATIO 4243 0.93 0.10 1.29 128 XM_GoogleGroups 4182 1.04 0.50 1.27 129 XM_OfRef6 4163 1.99 3.69 1.27 130 XMPhish30 4162 1.34 1.50 1.27 131 TR_XM_SpammyWords5 4131 1.96 3.60 1.26 132 KHOP_HELO_FCRDNS 4058 1.29 1.42 1.23 133 XMBody_95 3903 0.87 0.12 1.19 134 XMStockSpam_06 3862 1.35 1.75 1.17 135 XM_H_Trusted_IP 3827 0.81 0.00 1.16 136 FROM_GOV_DKIM_AU 3693 0.84 0.17 1.12 137 XMCapTrack 3618 0.89 0.40 1.10 138 XM_H_Long_From02 3490 0.99 0.83 1.06 139 TooManyTo_004 3485 1.01 0.89 1.06 140 RELAYCOUNTRY_CA 3393 4.04 11.06 1.03 141 RCVD_IN_RP_SAFE 3293 0.89 0.64 1.00 142 TR_XM_DK_SendGrid 3291 1.03 1.09 1.00 143 RCVD_IN_BL_SPAMCOP_NET 3084 4.76 13.67 0.94 144 T_TooManySym_03 3018 0.73 0.28 0.92 145 XM_UB50 2959 1.30 2.22 0.90 146 T_FILL_THIS_FORM_SHORT 2943 1.86 4.10 0.90 147 TooManyTo_005 2937 0.88 0.85 0.89 148 URI_TRY_3LD 2937 1.04 1.37 0.89 149 DKIM_ADSP_CUSTOM_MED 2934 0.92 0.99 0.89 150 RCVD_IN_RP_CERTIFIED 2879 0.75 0.47 0.88 151 SpammyFromTLD_01 2761 1.71 3.74 0.84 152 XMNoVowels 2711 0.70 0.42 0.82 153 XMGappySubj_02 2694 0.60 0.07 0.82 154 XMGenDplmaNmb 2655 1.00 1.44 0.81 155 XM_ProductURIs 2568 0.78 0.77 0.78 156 TR_MetaPhish_Combo_01 2549 0.79 0.83 0.78 157 T_OBFU_PDF_ATTACH 2445 0.54 0.07 0.74 158 XM_ShortIntro_01 2420 0.68 0.55 0.74 159 XMSubNoVowel 2360 0.60 0.33 0.72 160 HTTPS_HTTP_MISMATCH 2346 0.84 1.12 0.71 161 MSGID_NOFQDN1 2343 0.50 0.01 0.71 162 T_XMDrugObfuBody_00 2309 0.94 1.49 0.70 163 TR_XM_Base64_M1 2271 1.09 2.02 0.69 164 XMLngstWrd_00 2237 0.75 0.92 0.68 165 XM_H_PHPMailer 2214 0.80 1.10 0.67 166 MPART_ALT_DIFF_COUNT 2204 0.77 1.01 0.67 167 RELAYCOUNTRY_AU 2179 1.30 2.80 0.66 168 XMBdyGiftCard01 2073 0.83 1.28 0.63 169 USER_IN_WELCOMELIST 2043 0.44 0.00 0.62 170 USER_IN_WHITELIST 2043 0.44 0.00 0.62 171 NML_ADSP_CUSTOM_MED 1908 0.64 0.77 0.58 172 XM_B_COPY_HTML 1890 0.69 0.94 0.57 173 XM_B_SpammyWords4 1868 1.01 2.06 0.57 174 T_XMHurry_00 1848 1.02 2.10 0.56 175 XMHTML_After_End 1765 0.72 1.14 0.54 176 FORGED_GMAIL_RCVD 1760 0.62 0.81 0.54 177 FILL_THIS_FORM 1726 0.47 0.35 0.53 178 XMDateMe_00 1686 0.49 0.44 0.51 179 SHORT_HELO_AND_INLINE_IMAGE 1664 0.37 0.05 0.51 180 XMBody_17 1655 2.38 6.75 0.50 181 TR_XM_SpammyWords2 1644 4.79 14.81 0.50 182 XMSubMetaI_00 1639 0.58 0.76 0.50 183 TM2_M_BODY_EMPTY 1632 0.59 0.81 0.50 184 HTML_IMAGE_ONLY_28 1616 0.39 0.16 0.49 185 SpammyFromTLD_02 1581 0.77 1.45 0.48 186 RELAYCOUNTRY_GB 1544 0.50 0.57 0.47 187 HTML_IMAGE_ONLY_20 1530 0.42 0.32 0.47 188 TR_XM_SPAMCOP 1487 3.65 11.13 0.45 189 T_Symld_Words_02 1472 0.58 0.89 0.45 190 TR_XM_FormFill2 1472 1.18 2.90 0.45 191 TR_XM_PHPDW 1464 1.20 2.95 0.45 192 TR_XM_PHPForged 1462 1.19 2.93 0.44 193 HTML_TAG_BALANCE_BODY 1449 0.72 1.36 0.44 194 XM_B_DNDMA 1426 0.57 0.88 0.43 195 XM_H_PHPOS 1421 1.17 2.89 0.43 196 TVD_SPACE_RATIO_MINFP 1412 0.31 0.03 0.43 197 XMSubMetaSxObfu_02 1401 0.46 0.54 0.43 198 XMBrknScrpt_02 1369 0.63 1.12 0.42 199 TO_NO_BRKTS_HTML_ONLY 1326 0.33 0.17 0.40 200 XMSubMetaSxObfu_03 1323 0.53 0.82 0.40 ----------------------------------------------------------------------