Email: 582340 Autolearn: 0 AvgScore: 1.78 AvgScanTime: 1.55 sec Spam: 160710 Autolearn: 0 AvgScore: 13.65 AvgScanTime: 1.77 sec Ham: 421630 Autolearn: 0 AvgScore: -2.75 AvgScanTime: 1.46 sec Time Spent Running SA: 250.58 hours Time Spent Processing Spam: 79.13 hours Time Spent Processing Ham: 171.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 154905 89.23 96.39 86.50 2 DKIM_SIGNED 144877 70.71 90.15 63.30 3 XM_DK_Pass 139409 68.90 86.75 62.10 4 DKIM_VALID 137417 67.92 85.51 61.22 5 XM_B_Unicode 135933 74.81 84.58 71.09 6 T_SCC_BODY_TEXT_LINE 130744 82.75 81.35 83.28 7 RELAYCOUNTRY_US 126264 81.15 78.57 82.13 8 XM_B_SpammyWords 117820 50.24 73.31 41.44 9 DCC_CHECK 115733 39.81 72.01 27.53 10 XMListUnsubscribeExists 114854 49.63 71.47 41.31 11 DKIM_VALID_AU 99748 52.85 62.07 49.33 12 XM_B_Unicode3 73505 43.67 45.74 42.88 13 XM_DK_Undo_02 72816 15.78 45.31 4.52 14 XM_B_SpammyWords2 68925 23.82 42.89 16.55 15 LOC_TINY_FONT_1 64021 26.22 39.84 21.03 16 BAYES_50 62302 51.89 38.77 56.90 17 TR_XM_DKIM_Undo 57591 11.18 35.84 1.78 18 HTML_FONT_LOW_CONTRAST 56768 27.45 35.32 24.45 19 MIME_HTML_ONLY 56092 25.90 34.90 22.47 20 BAYES_99 55903 12.12 34.79 3.47 21 DKIM_VALID_EF 54735 27.27 34.06 24.68 22 FVGT_m_MULTI_ODD 50844 24.19 31.64 21.35 23 T_KAM_HTML_FONT_INVALID 45468 19.72 28.29 16.46 24 DCC_CHECK_NEGATIVE 44955 60.17 27.97 72.44 25 BAYES_999 44182 9.54 27.49 2.70 26 TR_XM_DK_Unsub 40523 15.03 25.21 11.14 27 TR_DCC_Bayes_99 39557 7.62 24.61 1.14 28 RCVD_IN_MSPIKE_H2 39306 21.64 24.46 20.56 29 XMSubLong 37986 22.20 23.64 21.65 30 T_TM2_M_HEADER_IN_MSG 37791 24.63 23.52 25.06 31 RELAYCOUNTRY_META 34544 8.45 21.49 3.48 32 XM_Multi_Part_URI 30684 14.49 19.09 12.74 33 TR_XM_SpammyRelay 28307 6.25 17.61 1.92 34 XM_B_Unsub 25000 9.36 15.56 7.01 35 TR_XM_BayesUnsub 24198 8.16 15.06 5.53 36 BOTNET_IPINHOSTNAME 23151 6.95 14.41 4.11 37 UNPARSEABLE_RELAY 22442 10.25 13.96 8.83 38 TR_XM_SpammyWords2 22278 4.06 13.86 0.33 39 LOTS_OF_MONEY 22263 7.97 13.85 5.72 40 XM_B_SpammyWords3 21571 6.52 13.42 3.88 41 RCVD_IN_BL_SPAMCOP_NET 21534 4.11 13.40 0.57 42 TR_XM_SpammyWords4 19961 6.34 12.42 4.02 43 RELAYCOUNTRY_CA 19338 3.97 12.03 0.90 44 BOTNET 19314 4.13 12.02 1.12 45 TR_XM_SPAMCOP 17542 3.18 10.92 0.23 46 RCVD_IN_MSPIKE_H3 16470 6.72 10.25 5.38 47 RCVD_IN_MSPIKE_WL 16470 6.72 10.25 5.38 48 XM_Evil_Numbers_Gen 15941 9.58 9.92 9.45 49 XM_Body_Dirty_Words 15128 5.09 9.41 3.45 50 BAYES_80 14384 4.82 8.95 3.25 51 BAYES_60 12429 7.40 7.73 7.27 52 TR_MAX_INTL_RELAY 12364 2.92 7.69 1.09 53 XM_UncommonTLD01 11853 4.36 7.38 3.22 54 TR_XM_UnparsRelay 11684 2.85 7.27 1.17 55 FSL_BULK_SIG 11567 3.94 7.20 2.70 56 LotsOfNums_01 10821 7.40 6.73 7.65 57 HTML_IMAGE_RATIO_02 10356 4.51 6.44 3.78 58 UNTRUSTED_Relay 10237 2.69 6.37 1.29 59 MPART_ALT_DIFF 10046 8.48 6.25 9.33 60 XMBody_17 9542 2.00 5.94 0.50 61 XMSubMetaSx_00 9502 3.95 5.91 3.20 62 XM_B_Phish_Phrases 9457 3.98 5.88 3.25 63 HTML_IMAGE_RATIO_04 9295 12.49 5.78 15.04 64 TooManyTo_001 8817 7.03 5.49 7.62 65 XMNumbers 8778 3.01 5.46 2.07 66 BAYES_95 8721 2.92 5.43 1.97 67 T_FILL_THIS_FORM_SHORT 8650 2.08 5.38 0.82 68 XMSexyCombo_05 8213 2.48 5.11 1.47 69 XM_B_Investor 7857 2.39 4.89 1.44 70 XM_H_Long_From01 7822 4.59 4.87 4.48 71 DKIM_INVALID 7460 2.79 4.64 2.08 72 TR_XM_SpammyWords5 7097 1.91 4.42 0.95 73 XM_SPF_SoftFail 7046 3.32 4.38 2.92 74 TR_XM_PhishingBody 6979 2.35 4.34 1.60 75 TR_XM_BayesRelay 6979 1.20 4.34 0.00 76 HTML_IMAGE_RATIO_06 6907 5.35 4.30 5.76 77 TM2_M_URI_OPT_OUT 6852 2.40 4.26 1.69 78 XM_H_GMP 6566 5.19 4.09 5.61 79 MIME_HTML_MOSTLY 6565 2.74 4.08 2.23 80 XM_OfRef6 6450 2.02 4.01 1.26 81 XM_B_SpammyTLD 6058 2.61 3.77 2.17 82 T_XMDrugObfuBody_14 5750 2.31 3.58 1.83 83 T_REMOTE_IMAGE 5642 3.26 3.51 3.16 84 T_XMDrugObfuBody_08 5626 1.97 3.50 1.39 85 TR_XM_FormFill 5615 0.97 3.49 0.01 86 TM2_M_VERY_LONG_WORD 5515 1.74 3.43 1.09 87 MIME_HTML_ONLY_MULTI 5485 6.40 3.41 7.53 88 XMStrtUSub 5434 8.54 3.38 10.51 89 FONT_INVIS_LONG_LINE 5321 0.94 3.31 0.03 90 FROM_EXCESS_BASE64 5307 2.48 3.30 2.16 91 HTML_IMAGE_RATIO_08 5213 2.09 3.24 1.66 92 MIME_QP_LONG_LINE 5135 4.14 3.20 4.50 93 RCVD_IN_VALIDITY_SAFE 4895 3.66 3.05 3.90 94 XM_UB50 4818 1.41 3.00 0.80 95 TR_LOTS_OF_MONEY3 4813 1.04 2.99 0.30 96 HK_RANDOM_REPLYTO 4649 0.85 2.89 0.08 97 XM_B_Unsub2 4561 1.99 2.84 1.67 98 SpammyFromTLD_01 4463 1.28 2.78 0.71 99 USER_IN_DEF_DKIM_WL 4373 8.51 2.72 10.72 100 XMDiploma_00 4271 1.72 2.66 1.36 101 XM_CamelCaseFrm001 4190 1.97 2.61 1.73 102 XM_URI_RBL 4110 0.80 2.56 0.13 103 RCVD_IN_VALIDITY_CERTIFIED 4056 3.19 2.52 3.45 104 TR_XM_NoHeaderRelay 3919 0.75 2.44 0.11 105 RELAYCOUNTRY_AU 3807 1.11 2.37 0.63 106 SUBJ_ALL_CAPS 3654 1.53 2.27 1.25 107 T_TooManySym_01 3524 3.91 2.19 4.57 108 XM_B_SpammyWords4 3414 0.96 2.12 0.52 109 HTTPS_HTTP_MISMATCH 3163 1.13 1.97 0.81 110 SCC_BODY_URI_ONLY 3157 2.28 1.96 2.40 111 URI_HEX 3095 1.13 1.93 0.82 112 ANY_BOUNCE_MESSAGE 3020 4.36 1.88 5.30 113 BOUNCE_MESSAGE 3019 4.36 1.88 5.30 114 XM_H_Long_From02 2931 1.14 1.82 0.89 115 LongTLD 2930 0.72 1.82 0.30 116 MAILING_LIST_MULTI 2905 2.24 1.81 2.41 117 HOSTED_IMG_MULTI_PUB_01 2895 0.50 1.80 0.00 118 TR_XM_PHPForged 2862 0.77 1.78 0.39 119 HTML_TAG_BALANCE_BODY 2779 0.77 1.73 0.40 120 URI_NOVOWEL 2768 1.51 1.72 1.44 121 TR_XM_PHPDW 2760 0.75 1.72 0.38 122 BAYES_40 2749 4.49 1.71 5.55 123 XM_DIRTYINTL 2747 0.67 1.71 0.27 124 SpammyFromTLD_02 2705 0.73 1.68 0.37 125 XMStockSpam_06 2702 1.52 1.68 1.46 126 TR_Mismatch_TLD_02 2692 0.51 1.68 0.07 127 XM_DK_Undo_01 2676 1.64 1.67 1.64 128 TR_XM_FormFill2 2657 0.73 1.65 0.38 129 XM_H_PHPOS 2644 0.72 1.65 0.37 130 HTML_MIME_NO_HTML_TAG 2626 2.07 1.63 2.23 131 T_XMHurry_00 2606 0.68 1.62 0.32 132 RCVD_IN_IADB_LISTED 2604 3.11 1.62 3.67 133 HDRS_MISSP 2595 0.47 1.61 0.03 134 URIBL_DBL_ABUSE_SPAM 2543 0.46 1.58 0.03 135 AC_BR_BONANZA 2541 0.50 1.58 0.09 136 URI_TRY_3LD 2505 0.87 1.56 0.61 137 BOTNET_NORDNS 2502 0.44 1.56 0.01 138 TR_Symld_Words 2500 1.37 1.56 1.30 139 TR_XM_INV_DKIM 2456 0.46 1.53 0.05 140 KHOP_HELO_FCRDNS 2440 1.52 1.52 1.52 141 XMReplyNow 2439 0.55 1.52 0.18 142 RCVD_IN_IADB_SPF 2367 2.78 1.47 3.28 143 XMGenDplmaNmb 2326 0.93 1.45 0.73 144 BODY_URI_ONLY 2317 0.41 1.44 0.01 145 XMPhish14 2294 0.69 1.43 0.41 146 RCVD_IN_IADB_DK 2260 2.49 1.41 2.91 147 RCVD_IN_IADB_SENDERID 2257 2.54 1.40 2.98 148 XMLngstWrd_00 2192 1.08 1.36 0.97 149 XMPhish30 2191 0.82 1.36 0.61 150 XMBrknScrpt_02 2190 0.72 1.36 0.47 151 XM_HighProb1 2162 0.37 1.35 0.00 152 XM_SendGrid 2067 1.43 1.29 1.48 153 T_XMDrugObfuBody_00 2066 0.77 1.29 0.57 154 RCVD_IN_VALIDITY_RPBL 2055 0.38 1.28 0.04 155 ALL_TRUSTED 2020 11.36 1.26 15.21 156 BAYES_20 1991 3.06 1.24 3.75 157 RCVD_IN_PSBL 1966 0.49 1.22 0.21 158 XMHTML_After_End 1943 0.86 1.21 0.73 159 XM_B_COVIDMETA 1919 0.78 1.19 0.63 160 T_Symld_Words_02 1914 0.61 1.19 0.39 161 TR_MetaPhish_Combo_01 1890 0.73 1.18 0.56 162 LOW_PRICE 1889 0.54 1.18 0.29 163 XMBdyGiftCard01 1880 0.86 1.17 0.74 164 TR_XM_InvalidRelay 1876 0.34 1.17 0.03 165 XM_B_DNDMA 1828 0.54 1.14 0.31 166 XMSexyCombo_01 1820 0.43 1.13 0.17 167 T_XMDrugObfuBody_10 1796 0.32 1.12 0.02 168 XM_UB99 1782 0.31 1.11 0.00 169 XM_H_PHPMailer 1776 0.79 1.11 0.67 170 RDNS_DYNAMIC 1721 0.85 1.07 0.77 171 TR_XM_RelayPhish 1719 0.35 1.07 0.07 172 TR_XM_Base64_M1 1715 0.63 1.07 0.46 173 XMMoneyMeta_00 1706 0.63 1.06 0.46 174 DIET_1 1630 0.40 1.01 0.17 175 XMBody_78 1626 0.50 1.01 0.31 176 TR_Caps_n_Bayes_99 1604 0.28 1.00 0.01 177 XM_B_COPY_HTML 1587 0.66 0.99 0.54 178 XMSubMetaI_00 1575 0.56 0.98 0.40 179 TVD_RCVD_IP 1553 1.30 0.97 1.43 180 XM_H_Undi_Recip 1479 0.40 0.92 0.20 181 THIS_AD 1444 0.41 0.90 0.23 182 HTML_IMAGE_ONLY_20 1437 0.52 0.89 0.38 183 MPART_ALT_DIFF_COUNT 1429 0.57 0.89 0.45 184 TM2_M_A_HREF_HREF 1402 0.38 0.87 0.20 185 XMSlimDrugH 1398 0.46 0.87 0.30 186 TM2_M_OBFU_COMMENT 1374 0.42 0.85 0.25 187 XMClaimOffer 1371 0.33 0.85 0.13 188 HELO_DYNAMIC_SPLIT_IP 1356 0.24 0.84 0.01 189 DKIM_ADSP_CUSTOM_MED 1344 0.78 0.84 0.76 190 RELAYCOUNTRY_FR 1330 0.37 0.83 0.19 191 XM_UB60 1319 0.26 0.82 0.05 192 TooManyTo_002 1319 1.91 0.82 2.33 193 XM_Combo_Sbj 1295 0.47 0.81 0.34 194 XM_B_Phish66 1282 0.40 0.80 0.24 195 XM_ProductURIs 1249 0.55 0.78 0.47 196 PLING_QUERY 1240 0.44 0.77 0.31 197 XM_UB999 1236 0.21 0.77 0.00 198 XM_S_SpammyWords 1233 0.33 0.77 0.16 199 TR_XM_Spammywords 1233 0.33 0.77 0.16 200 SHOPIFY_IMG_NOT_RCVD_SFY 1231 0.36 0.77 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 364718 89.23 96.39 86.50 2 T_SCC_BODY_TEXT_LINE 351127 82.75 81.35 83.28 3 RELAYCOUNTRY_US 346291 81.15 78.57 82.13 4 DCC_CHECK_NEGATIVE 305416 60.17 27.97 72.44 5 XM_B_Unicode 299721 74.81 84.58 71.09 6 DKIM_SIGNED 266894 70.71 90.15 63.30 7 XM_DK_Pass 261832 68.90 86.75 62.10 8 DKIM_VALID 258113 67.92 85.51 61.22 9 BAYES_50 239900 51.89 38.77 56.90 10 DKIM_VALID_AU 208002 52.85 62.07 49.33 11 XM_B_Unicode3 180784 43.67 45.74 42.88 12 XM_B_SpammyWords 174720 50.24 73.31 41.44 13 XMListUnsubscribeExists 174186 49.63 71.47 41.31 14 DCC_CHECK 116070 39.81 72.01 27.53 15 T_TM2_M_HEADER_IN_MSG 105656 24.63 23.52 25.06 16 DKIM_VALID_EF 104047 27.27 34.06 24.68 17 HTML_FONT_LOW_CONTRAST 103080 27.45 35.32 24.45 18 MIME_HTML_ONLY 94757 25.90 34.90 22.47 19 XMSubLong 91296 22.20 23.64 21.65 20 FVGT_m_MULTI_ODD 89997 24.19 31.64 21.35 21 LOC_TINY_FONT_1 88659 26.22 39.84 21.03 22 RCVD_IN_MSPIKE_H2 86694 21.64 24.46 20.56 23 XM_B_SpammyWords2 69779 23.82 42.89 16.55 24 T_KAM_HTML_FONT_INVALID 69384 19.72 28.29 16.46 25 ALL_TRUSTED 64125 11.36 1.26 15.21 26 HTML_IMAGE_RATIO_04 63431 12.49 5.78 15.04 27 HTML_FONT_FACE_BAD 62764 10.97 0.71 14.89 28 BAYES_00 60061 10.52 0.74 14.24 29 XM_H_Trusted_IP 57409 9.86 0.00 13.62 30 XM_Multi_Part_URI 53726 14.49 19.09 12.74 31 TR_XM_DK_Unsub 46976 15.03 25.21 11.14 32 USER_IN_DEF_DKIM_WL 45209 8.51 2.72 10.72 33 XMStrtUSub 44303 8.54 3.38 10.51 34 XM_Evil_Numbers_Gen 39857 9.58 9.92 9.45 35 MPART_ALT_DIFF 39325 8.48 6.25 9.33 36 UNPARSEABLE_RELAY 37242 10.25 13.96 8.83 37 LotsOfNums_01 32251 7.40 6.73 7.65 38 TooManyTo_001 32118 7.03 5.49 7.62 39 MIME_HTML_ONLY_MULTI 31769 6.40 3.41 7.53 40 BAYES_60 30655 7.40 7.73 7.27 41 XM_DKIMWhitelistDomains 29663 5.10 0.01 7.04 42 XM_B_Unsub 29536 9.36 15.56 7.01 43 TR_XM_DK_Bayes 25881 4.57 0.47 6.14 44 TR_XM_DK_Bayes1 25470 4.50 0.46 6.04 45 IN_ZIMBRA_NJ_WHITELIST 24384 4.21 0.08 5.78 46 HTML_IMAGE_RATIO_06 24267 5.35 4.30 5.76 47 LOTS_OF_MONEY 24126 7.97 13.85 5.72 48 XM_H_GMP 23674 5.19 4.09 5.61 49 BAYES_40 23421 4.49 1.71 5.55 50 TR_XM_BayesUnsub 23301 8.16 15.06 5.53 51 RCVD_IN_MSPIKE_H3 22666 6.72 10.25 5.38 52 RCVD_IN_MSPIKE_WL 22666 6.72 10.25 5.38 53 ANY_BOUNCE_MESSAGE 22349 4.36 1.88 5.30 54 BOUNCE_MESSAGE 22348 4.36 1.88 5.30 55 TR_XM_DK_Bayes2 22310 3.93 0.36 5.29 56 XMSubNoVowel 21267 3.73 0.28 5.04 57 T_TooManySym_01 19264 3.91 2.19 4.57 58 XM_DK_Undo_02 19071 15.78 45.31 4.52 59 MIME_QP_LONG_LINE 18956 4.14 3.20 4.50 60 XM_H_Long_From01 18883 4.59 4.87 4.48 61 BOTNET_IPINHOSTNAME 17343 6.95 14.41 4.11 62 XM_PDF 17204 3.13 0.65 4.08 63 TR_XM_SpammyWords4 16967 6.34 12.42 4.02 64 RCVD_IN_VALIDITY_SAFE 16435 3.66 3.05 3.90 65 XM_B_SpammyWords3 16379 6.52 13.42 3.88 66 HTML_IMAGE_RATIO_02 15936 4.51 6.44 3.78 67 BAYES_20 15830 3.06 1.24 3.75 68 RCVD_IN_IADB_LISTED 15478 3.11 1.62 3.67 69 BAYES_05 15120 2.76 0.59 3.59 70 RELAYCOUNTRY_META 14665 8.45 21.49 3.48 71 BAYES_99 14649 12.12 34.79 3.47 72 XM_Body_Dirty_Words 14529 5.09 9.41 3.45 73 RCVD_IN_VALIDITY_CERTIFIED 14528 3.19 2.52 3.45 74 RCVD_IN_IADB_SPF 13835 2.78 1.47 3.28 75 XM_B_Phish_Phrases 13706 3.98 5.88 3.25 76 BAYES_80 13693 4.82 8.95 3.25 77 XM_UncommonTLD01 13557 4.36 7.38 3.22 78 XMSubMetaSx_00 13489 3.95 5.91 3.20 79 T_REMOTE_IMAGE 13339 3.26 3.51 3.16 80 RCVD_IN_IADB_SENDERID 12550 2.54 1.40 2.98 81 XM_SPF_SoftFail 12308 3.32 4.38 2.92 82 RCVD_IN_IADB_DK 12266 2.49 1.41 2.91 83 FSL_BULK_SIG 11403 3.94 7.20 2.70 84 BAYES_999 11372 9.54 27.49 2.70 85 XMSubLongNoVowel 10339 1.80 0.08 2.45 86 XMSubGarbage 10247 1.76 0.01 2.43 87 MAILING_LIST_MULTI 10154 2.24 1.81 2.41 88 SCC_BODY_URI_ONLY 10131 2.28 1.96 2.40 89 TooManyTo_002 9804 1.91 0.82 2.33 90 HTML_MIME_NO_HTML_TAG 9423 2.07 1.63 2.23 91 MIME_HTML_MOSTLY 9382 2.74 4.08 2.23 92 T_TooManySym_02 9208 1.76 0.66 2.18 93 RCVD_IN_IADB_VOUCHED 9178 1.75 0.62 2.18 94 XM_B_SpammyTLD 9138 2.61 3.77 2.17 95 FROM_EXCESS_BASE64 9114 2.48 3.30 2.16 96 DKIM_INVALID 8781 2.79 4.64 2.08 97 XMNumbers 8725 3.01 5.46 2.07 98 BAYES_95 8299 2.92 5.43 1.97 99 TR_XM_SpammyRelay 8088 6.25 17.61 1.92 100 T_XMDrugObfuBody_14 7722 2.31 3.58 1.83 101 TR_XM_DKIM_Undo 7503 11.18 35.84 1.78 102 INVALID_MSGID 7411 1.33 0.21 1.76 103 XM_CamelCaseFrm001 7281 1.97 2.61 1.73 104 TM2_M_URI_OPT_OUT 7132 2.40 4.26 1.69 105 XM_B_Unsub2 7032 1.99 2.84 1.67 106 HTML_IMAGE_RATIO_08 6986 2.09 3.24 1.66 107 XM_DK_Undo_01 6894 1.64 1.67 1.64 108 HELO_NODOT 6864 1.33 0.56 1.63 109 HELO_NO_DOMAIN 6859 1.33 0.56 1.63 110 TR_XM_PhishingBody 6730 2.35 4.34 1.60 111 KHOP_HELO_FCRDNS 6416 1.52 1.52 1.52 112 TO_MALFORMED 6386 1.10 0.02 1.51 113 RCVD_IN_IADB_OPTIN 6306 1.20 0.43 1.50 114 XM_SendGrid 6258 1.43 1.29 1.48 115 XMSexyCombo_05 6215 2.48 5.11 1.47 116 XMStockSpam_06 6152 1.52 1.68 1.46 117 XM_B_Investor 6065 2.39 4.89 1.44 118 URI_NOVOWEL 6053 1.51 1.72 1.44 119 TVD_RCVD_IP 6034 1.30 0.97 1.43 120 T_XMDrugObfuBody_08 5841 1.97 3.50 1.39 121 XMDiploma_00 5752 1.72 2.66 1.36 122 XMGappySubj_01 5751 1.04 0.20 1.36 123 TooManyTo_003 5723 1.19 0.76 1.36 124 IN_HORDE_ADDRESS_BOOK 5579 0.98 0.07 1.32 125 TR_Symld_Words 5487 1.37 1.56 1.30 126 UNTRUSTED_Relay 5419 2.69 6.37 1.29 127 XM_OfRef6 5326 2.02 4.01 1.26 128 SUBJ_ALL_CAPS 5264 1.53 2.27 1.25 129 TR_XM_UnparsRelay 4938 2.85 7.27 1.17 130 TR_DCC_Bayes_99 4811 7.62 24.61 1.14 131 BOTNET 4731 4.13 12.02 1.12 132 XM_GoogleGroups 4698 0.93 0.45 1.11 133 TR_MAX_INTL_RELAY 4612 2.92 7.69 1.09 134 TR_XM_DK_SendGrid 4602 0.98 0.70 1.09 135 TM2_M_VERY_LONG_WORD 4597 1.74 3.43 1.09 136 XMCapTrack 4337 0.84 0.36 1.03 137 TooManyTo_004 4258 0.93 0.72 1.01 138 XM_E_Blogspot 4229 0.79 0.23 1.00 139 XMBSHREFv2 4202 0.85 0.45 1.00 140 XMBody_95 4199 0.79 0.25 1.00 141 TVD_SPACE_RATIO 4076 0.74 0.14 0.97 142 XMLngstWrd_00 4075 1.08 1.36 0.97 143 TR_XM_SpammyWords5 4007 1.91 4.42 0.95 144 RELAYCOUNTRY_CA 3794 3.97 12.03 0.90 145 XM_H_Long_From02 3735 1.14 1.82 0.89 146 XMGappySubj_02 3539 0.63 0.07 0.84 147 TooManyTo_005 3501 0.79 0.68 0.83 148 URI_HEX 3472 1.13 1.93 0.82 149 T_FILL_THIS_FORM_SHORT 3442 2.08 5.38 0.82 150 T_TooManySym_03 3422 0.66 0.27 0.81 151 HTTPS_HTTP_MISMATCH 3416 1.13 1.97 0.81 152 XM_UB50 3364 1.41 3.00 0.80 153 RCVD_IN_RP_SAFE 3247 0.74 0.67 0.77 154 RDNS_DYNAMIC 3227 0.85 1.07 0.77 155 DKIM_ADSP_CUSTOM_MED 3195 0.78 0.84 0.76 156 XMBdyGiftCard01 3126 0.86 1.17 0.74 157 XMGenDplmaNmb 3063 0.93 1.45 0.73 158 XMHTML_After_End 3060 0.86 1.21 0.73 159 SpammyFromTLD_01 2975 1.28 2.78 0.71 160 RCVD_IN_RP_CERTIFIED 2899 0.65 0.55 0.69 161 XM_ShortIntro_01 2848 0.64 0.56 0.68 162 XM_H_PHPMailer 2812 0.79 1.11 0.67 163 XMNoVowels 2795 0.63 0.53 0.66 164 RELAYCOUNTRY_AU 2655 1.11 2.37 0.63 165 XM_B_COVIDMETA 2642 0.78 1.19 0.63 166 URI_TRY_3LD 2588 0.87 1.56 0.61 167 XMPhish30 2567 0.82 1.36 0.61 168 T_XMDrugObfuBody_00 2418 0.77 1.29 0.57 169 RCVD_IN_BL_SPAMCOP_NET 2395 4.11 13.40 0.57 170 MSGID_NOFQDN1 2378 0.42 0.03 0.56 171 TR_MetaPhish_Combo_01 2357 0.73 1.18 0.56 172 FROM_GOV_DKIM_AU 2319 0.50 0.37 0.55 173 T_OBFU_PDF_ATTACH 2277 0.41 0.05 0.54 174 XM_B_COPY_HTML 2260 0.66 0.99 0.54 175 RELAYCOUNTRY_GB 2256 0.56 0.64 0.54 176 XM_B_SpammyWords4 2177 0.96 2.12 0.52 177 XMBody_17 2111 2.00 5.94 0.50 178 NML_ADSP_CUSTOM_MED 2107 0.56 0.73 0.50 179 FILL_THIS_FORM 2098 0.43 0.25 0.50 180 SHORT_HELO_AND_INLINE_IMAGE 2093 0.37 0.05 0.50 181 USER_IN_WELCOMELIST 2052 0.35 0.00 0.49 182 USER_IN_WHITELIST 2052 0.35 0.00 0.49 183 XM_ProductURIs 1977 0.55 0.78 0.47 184 XMBrknScrpt_02 1974 0.72 1.36 0.47 185 HTML_IMAGE_ONLY_28 1957 0.44 0.38 0.46 186 TR_XM_Base64_M1 1947 0.63 1.07 0.46 187 XMMoneyMeta_00 1939 0.63 1.06 0.46 188 MPART_ALT_DIFF_COUNT 1916 0.57 0.89 0.45 189 FORGED_GMAIL_RCVD 1853 0.52 0.73 0.44 190 XM_B_FormFill 1755 0.31 0.04 0.42 191 XMPhish14 1731 0.69 1.43 0.41 192 XMSubMetaI_00 1702 0.56 0.98 0.40 193 HTML_TAG_BALANCE_BODY 1689 0.77 1.73 0.40 194 T_Symld_Words_02 1665 0.61 1.19 0.39 195 TR_XM_PHPForged 1642 0.77 1.78 0.39 196 XMhairloss01 1620 0.32 0.14 0.38 197 HTML_IMAGE_ONLY_20 1616 0.52 0.89 0.38 198 TR_XM_FormFill2 1604 0.73 1.65 0.38 199 TR_XM_PHPDW 1598 0.75 1.72 0.38 200 T_MANY_PILL_PRICE 1575 0.27 0.00 0.37 ----------------------------------------------------------------------