Email: 561469 Autolearn: 0 AvgScore: 4.14 AvgScanTime: 1.28 sec Spam: 170621 Autolearn: 0 AvgScore: 14.00 AvgScanTime: 1.44 sec Ham: 390848 Autolearn: 0 AvgScore: -0.16 AvgScanTime: 1.21 sec Time Spent Running SA: 200.18 hours Time Spent Processing Spam: 68.37 hours Time Spent Processing Ham: 131.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165030 89.93 96.72 86.97 2 DKIM_SIGNED 153517 75.52 89.98 69.21 3 XM_B_Unicode 147034 76.27 86.18 71.95 4 XM_DK_Pass 146494 73.41 85.86 67.97 5 DKIM_VALID 144617 72.46 84.76 67.08 6 T_SCC_BODY_TEXT_LINE 139053 82.74 81.50 83.29 7 RELAYCOUNTRY_US 131018 75.43 76.79 74.84 8 DCC_CHECK 127770 44.15 74.89 30.73 9 XM_B_SpammyWords 125474 50.48 73.54 40.42 10 XMListUnsubscribeExists 121969 53.39 71.49 45.49 11 DKIM_VALID_AU 105354 55.98 61.75 53.47 12 XM_DK_Undo_02 78992 17.47 46.30 4.88 13 XM_B_Unicode3 78057 44.64 45.75 44.16 14 TR_MAX_INTL_RELAY 73672 17.11 43.18 5.74 15 XM_B_SpammyWords2 70051 23.36 41.06 15.64 16 LOC_TINY_FONT_1 68069 27.55 39.89 22.16 17 BAYES_50 63751 54.93 37.36 62.59 18 BAYES_99 62707 13.76 36.75 3.72 19 TR_XM_DKIM_Undo 61336 12.29 35.95 1.96 20 HTML_FONT_LOW_CONTRAST 59883 28.09 35.10 25.03 21 MIME_HTML_ONLY 59047 28.21 34.61 25.42 22 DKIM_VALID_EF 56595 29.20 33.17 27.47 23 FVGT_m_MULTI_ODD 52840 25.54 30.97 23.17 24 T_KAM_HTML_FONT_INVALID 50728 22.58 29.73 19.46 25 BAYES_999 49138 10.74 28.80 2.86 26 TR_DCC_Bayes_99 46338 9.23 27.16 1.40 27 TR_XM_DK_Unsub 43210 16.76 25.33 13.02 28 DCC_CHECK_NEGATIVE 42822 55.82 25.10 69.23 29 RELAYCOUNTRY_META 41158 10.11 24.12 3.99 30 RCVD_IN_MSPIKE_H2 39655 22.46 23.24 22.12 31 XMSubLong 38672 20.38 22.67 19.38 32 T_TM2_M_HEADER_IN_MSG 38584 25.25 22.61 26.40 33 TR_XM_SpammyRelay 33620 7.57 19.70 2.28 34 XM_Multi_Part_URI 31234 14.85 18.31 13.34 35 XM_B_Unsub 27960 16.29 16.39 16.24 36 TR_XM_BayesUnsub 27032 14.92 15.84 14.52 37 RCVD_IN_BL_SPAMCOP_NET 25378 4.98 14.87 0.66 38 TR_XM_SpammyWords2 24169 4.51 14.17 0.30 39 UNPARSEABLE_RELAY 24078 11.04 14.11 9.70 40 XM_B_SpammyWords3 23471 6.84 13.76 3.82 41 LOTS_OF_MONEY 22052 7.52 12.92 5.16 42 RELAYCOUNTRY_CA 21949 4.86 12.86 1.36 43 BOTNET_IPINHOSTNAME 21527 6.85 12.62 4.33 44 TR_XM_SPAMCOP 20373 3.82 11.94 0.28 45 TR_XM_SpammyWords4 19916 5.94 11.67 3.43 46 RCVD_IN_MSPIKE_WL 18436 7.30 10.81 5.77 47 RCVD_IN_MSPIKE_H3 18436 7.30 10.81 5.77 48 XM_Evil_Numbers_Gen 16835 8.03 9.87 7.23 49 BOTNET 16750 3.80 9.82 1.18 50 FSL_BULK_SIG 15682 5.15 9.19 3.38 51 XM_Body_Dirty_Words 15639 5.27 9.17 3.57 52 BAYES_80 14557 5.28 8.53 3.86 53 HTML_IMAGE_RATIO_02 14498 5.87 8.50 4.73 54 UNTRUSTED_Relay 13222 3.33 7.75 1.40 55 LotsOfNums_01 13207 7.87 7.74 7.92 56 BAYES_60 12813 8.06 7.51 8.29 57 TR_XM_UnparsRelay 12789 3.33 7.50 1.52 58 BAYES_95 10614 3.29 6.22 2.01 59 XM_UncommonTLD01 10569 4.21 6.19 3.34 60 XMBody_17 10352 2.19 6.07 0.49 61 TooManyTo_001 10297 12.98 6.04 16.01 62 HTML_IMAGE_RATIO_04 10247 4.39 6.01 3.69 63 XMSubMetaSx_00 9776 4.11 5.73 3.41 64 MPART_ALT_DIFF 9761 4.41 5.72 3.83 65 XM_H_Long_From01 9723 5.44 5.70 5.32 66 DKIM_INVALID 8900 3.06 5.22 2.12 67 XMSexyCombo_05 8679 2.44 5.09 1.28 68 T_FILL_THIS_FORM_SHORT 8029 2.02 4.71 0.85 69 TR_XM_BayesRelay 7859 1.40 4.61 0.00 70 XM_B_Phish_Phrases 7683 3.48 4.50 3.04 71 XM_B_Investor 7315 2.35 4.29 1.51 72 TR_XM_PhishingBody 7153 2.51 4.19 1.78 73 XM_UB50 7126 1.87 4.18 0.86 74 TR_XM_SpammyWords5 6994 1.95 4.10 1.01 75 XM_SPF_SoftFail 6897 3.27 4.04 2.93 76 MIME_HTML_MOSTLY 6871 2.74 4.03 2.18 77 HTML_IMAGE_RATIO_06 6579 3.32 3.86 3.08 78 XM_OfRef6 6494 1.86 3.81 1.02 79 MIME_QP_LONG_LINE 6316 4.46 3.70 4.79 80 XMStrtUSub 6221 4.17 3.65 4.41 81 XMNumbers 6180 2.61 3.62 2.17 82 HK_RANDOM_REPLYTO 5968 1.13 3.50 0.10 83 XM_H_GMP 5834 5.08 3.42 5.81 84 T_XMDrugObfuBody_14 5798 2.10 3.40 1.54 85 RCVD_IN_VALIDITY_SAFE 5723 3.64 3.35 3.76 86 TM2_M_URI_OPT_OUT 5640 2.33 3.31 1.91 87 FONT_INVIS_LONG_LINE 5639 1.04 3.30 0.05 88 MIME_HTML_ONLY_MULTI 5573 2.57 3.27 2.27 89 T_XMDrugObfuBody_08 5536 1.89 3.24 1.30 90 XM_B_SpammyTLD 5440 2.55 3.19 2.26 91 TR_XM_NoHeaderRelay 5236 1.01 3.07 0.11 92 TR_XM_FormFill 5232 0.94 3.07 0.01 93 SpammyFromTLD_01 5140 1.37 3.01 0.66 94 TM2_M_VERY_LONG_WORD 4911 1.66 2.88 1.13 95 XM_CamelCaseFrm001 4817 2.33 2.82 2.11 96 RCVD_IN_VALIDITY_CERTIFIED 4808 3.21 2.82 3.38 97 USER_IN_DEF_DKIM_WL 4681 8.18 2.74 10.55 98 HTML_IMAGE_RATIO_08 4507 2.39 2.64 2.28 99 XMDiploma_00 4480 7.49 2.63 9.61 100 XM_B_SpammyWords4 4391 1.31 2.57 0.75 101 TR_LOTS_OF_MONEY3 4294 0.98 2.52 0.31 102 XM_B_Unsub2 4250 1.94 2.49 1.70 103 XM_URI_RBL 4247 0.87 2.49 0.16 104 T_TooManySym_01 4185 4.04 2.45 4.73 105 HTML_MIME_NO_HTML_TAG 3762 2.01 2.20 1.92 106 TR_Mismatch_TLD_02 3617 0.69 2.12 0.06 107 RELAYCOUNTRY_AU 3497 1.03 2.05 0.59 108 SUBJ_ALL_CAPS 3347 1.41 1.96 1.17 109 XM_DIRTYINTL 3324 0.72 1.95 0.19 110 TR_XM_INV_DKIM 3289 0.61 1.93 0.03 111 BOTNET_NORDNS 3282 0.59 1.92 0.01 112 MAILING_LIST_MULTI 3246 2.46 1.90 2.71 113 T_XMHurry_00 3241 0.90 1.90 0.47 114 FROM_EXCESS_BASE64 3182 1.97 1.86 2.02 115 T_REMOTE_IMAGE 3160 3.00 1.85 3.51 116 RCVD_IN_IADB_LISTED 3141 3.50 1.84 4.23 117 TR_XM_PHPForged 3082 0.81 1.81 0.38 118 TR_XM_PHPDW 3058 0.80 1.79 0.37 119 TR_XM_FormFill2 3012 0.80 1.77 0.38 120 URI_HEX 3002 1.19 1.76 0.95 121 XM_H_PHPOS 2990 0.78 1.75 0.36 122 ANY_BOUNCE_MESSAGE 2926 3.31 1.71 4.01 123 BOUNCE_MESSAGE 2922 3.31 1.71 4.01 124 RCVD_IN_IADB_SPF 2809 3.10 1.65 3.73 125 XMBdyGiftCard01 2791 0.79 1.64 0.42 126 XMHTML_After_End 2730 0.99 1.60 0.73 127 SpammyFromTLD_02 2688 0.73 1.58 0.36 128 XMLngstWrd_00 2653 0.97 1.55 0.72 129 RCVD_IN_IADB_DK 2652 2.76 1.55 3.29 130 RCVD_IN_IADB_SENDERID 2639 2.83 1.55 3.39 131 XM_DK_Undo_01 2636 1.64 1.54 1.69 132 XM_SendGrid 2541 1.34 1.49 1.27 133 URI_TRY_3LD 2540 0.97 1.49 0.74 134 RCVD_IN_VALIDITY_RPBL 2526 0.49 1.48 0.05 135 T_XMDrugObfuBody_00 2458 0.97 1.44 0.77 136 XMPhish14 2451 0.85 1.44 0.60 137 HTML_TAG_BALANCE_BODY 2449 0.70 1.44 0.39 138 XMGenDplmaNmb 2443 0.99 1.43 0.80 139 XMStockSpam_06 2411 0.91 1.41 0.69 140 RCVD_IN_PSBL 2404 0.60 1.41 0.25 141 BAYES_40 2363 3.53 1.38 4.47 142 XM_HighProb1 2226 0.40 1.30 0.00 143 SUBJ_DOLLARS 2203 0.64 1.29 0.35 144 HTTPS_HTTP_MISMATCH 2147 0.91 1.26 0.75 145 RELAYCOUNTRY_FR 2111 0.53 1.24 0.22 146 AC_BR_BONANZA 2094 0.42 1.23 0.07 147 T_XMDrugObfuBody_10 2033 0.38 1.19 0.03 148 URIBL_DBL_SPAM 2024 0.36 1.19 0.00 149 XMPhish30 1993 0.73 1.17 0.54 150 HOSTED_IMG_MULTI_PUB_01 1992 0.36 1.17 0.01 151 KHOP_HELO_FCRDNS 1977 1.24 1.16 1.28 152 TR_XM_Spammywords 1954 0.61 1.15 0.38 153 XMSexyCombo_01 1954 0.51 1.15 0.23 154 XM_S_SpammyWords 1954 0.61 1.15 0.38 155 XMReplyNow 1898 0.48 1.11 0.20 156 TR_MetaPhish_Combo_01 1858 0.76 1.09 0.61 157 BAYES_20 1857 2.62 1.09 3.29 158 TR_XM_Base64_M1 1851 0.81 1.08 0.69 159 XM_UB60 1840 0.36 1.08 0.05 160 TR_XM_InvalidRelay 1837 0.34 1.08 0.03 161 ALL_TRUSTED 1827 15.59 1.07 21.93 162 XM_H_PHPMailer 1783 0.80 1.05 0.69 163 URI_NOVOWEL 1710 1.37 1.00 1.54 164 XMSubMetaI_00 1707 0.64 1.00 0.49 165 TR_Symld_Words 1704 1.30 1.00 1.44 166 XMBody_78 1688 0.49 0.99 0.28 167 RDNS_DYNAMIC 1648 0.63 0.97 0.48 168 XM_UB99 1646 0.29 0.96 0.00 169 TR_XM_DK_SendGrid 1627 0.85 0.95 0.80 170 DATE_IN_PAST_03_06 1601 0.43 0.94 0.21 171 XM_B_Phish66 1566 0.51 0.92 0.33 172 PLING_QUERY 1560 0.48 0.91 0.29 173 RELAYCOUNTRY_NL 1552 0.37 0.91 0.14 174 REMOVE_BEFORE_LINK 1551 0.40 0.91 0.17 175 PDS_OTHER_BAD_TLD 1543 0.35 0.90 0.10 176 XM_Combo_Sbj 1540 0.38 0.90 0.15 177 DIET_1 1539 0.45 0.90 0.25 178 MPART_ALT_DIFF_COUNT 1534 0.63 0.90 0.52 179 T_Symld_Words_02 1509 0.63 0.88 0.51 180 XMMoneyMeta_00 1497 0.66 0.88 0.57 181 RELAYCOUNTRY_RO 1494 0.27 0.88 0.01 182 RELAYCOUNTRY_CY 1489 0.27 0.87 0.00 183 SCC_BODY_URI_ONLY 1486 1.78 0.87 2.18 184 RCVD_IN_IADB_VOUCHED 1479 2.05 0.87 2.57 185 T_MONEY_PERCENT 1466 0.39 0.86 0.18 186 TR_LOTS_OF_MONEY2 1466 0.39 0.86 0.18 187 XM_H_Long_From02 1450 0.89 0.85 0.91 188 TR_Caps_n_Bayes_99 1446 0.27 0.85 0.01 189 YOUR_DELIVERY_ADDRESS 1442 0.28 0.85 0.03 190 HTML_FONT_FACE_BAD 1428 0.51 0.84 0.37 191 XM_B_COVIDMETA 1423 0.37 0.83 0.17 192 XM_UB80 1402 0.26 0.82 0.01 193 SHOPIFY_IMG_NOT_RCVD_SFY 1398 0.42 0.82 0.24 194 XMLngstWrd_01 1385 0.46 0.81 0.31 195 DKIM_ADSP_CUSTOM_MED 1352 0.77 0.79 0.76 196 XMBrknScrpt_02 1346 0.55 0.79 0.44 197 TO_NO_BRKTS_PCNT 1343 0.24 0.79 0.00 198 XM_H_Undi_Recip 1335 0.37 0.78 0.18 199 XM_B_Crypto 1335 0.34 0.78 0.14 200 URIBL_BLACK 1327 0.27 0.78 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 339922 89.93 96.72 86.97 2 T_SCC_BODY_TEXT_LINE 325520 82.74 81.50 83.29 3 RELAYCOUNTRY_US 292512 75.43 76.79 74.84 4 XM_B_Unicode 281209 76.27 86.18 71.95 5 DCC_CHECK_NEGATIVE 270580 55.82 25.10 69.23 6 DKIM_SIGNED 270488 75.52 89.98 69.21 7 XM_DK_Pass 265665 73.41 85.86 67.97 8 DKIM_VALID 262198 72.46 84.76 67.08 9 BAYES_50 244638 54.93 37.36 62.59 10 DKIM_VALID_AU 208979 55.98 61.75 53.47 11 XMListUnsubscribeExists 177806 53.39 71.49 45.49 12 XM_B_Unicode3 172593 44.64 45.75 44.16 13 XM_B_SpammyWords 157979 50.48 73.54 40.42 14 DCC_CHECK 120113 44.15 74.89 30.73 15 DKIM_VALID_EF 107361 29.20 33.17 27.47 16 T_TM2_M_HEADER_IN_MSG 103180 25.25 22.61 26.40 17 MIME_HTML_ONLY 99335 28.21 34.61 25.42 18 HTML_FONT_LOW_CONTRAST 97824 28.09 35.10 25.03 19 FVGT_m_MULTI_ODD 90545 25.54 30.97 23.17 20 LOC_TINY_FONT_1 86604 27.55 39.89 22.16 21 RCVD_IN_MSPIKE_H2 86448 22.46 23.24 22.12 22 ALL_TRUSTED 85712 15.59 1.07 21.93 23 T_KAM_HTML_FONT_INVALID 76060 22.58 29.73 19.46 24 XMSubLong 75752 20.38 22.67 19.38 25 XM_B_Unsub 63488 16.29 16.39 16.24 26 TooManyTo_001 62592 12.98 6.04 16.01 27 XM_B_SpammyWords2 61134 23.36 41.06 15.64 28 TR_XM_BayesUnsub 56740 14.92 15.84 14.52 29 XM_Multi_Part_URI 52153 14.85 18.31 13.34 30 TR_XM_DK_Unsub 50886 16.76 25.33 13.02 31 USER_IN_DEF_DKIM_WL 41226 8.18 2.74 10.55 32 UNPARSEABLE_RELAY 37907 11.04 14.11 9.70 33 XMDiploma_00 37570 7.49 2.63 9.61 34 BAYES_00 36505 6.69 0.61 9.34 35 BAYES_60 32419 8.06 7.51 8.29 36 LotsOfNums_01 30972 7.87 7.74 7.92 37 XM_Evil_Numbers_Gen 28275 8.03 9.87 7.23 38 XM_DKIMWhitelistDomains 28071 5.04 0.15 7.18 39 TR_XM_DK_Bayes 24461 4.50 0.49 6.26 40 TR_XM_DK_Bayes1 24062 4.43 0.48 6.16 41 IN_ZIMBRA_NJ_WHITELIST 24024 4.31 0.10 6.15 42 XM_H_GMP 22700 5.08 3.42 5.81 43 RCVD_IN_MSPIKE_WL 22558 7.30 10.81 5.77 44 RCVD_IN_MSPIKE_H3 22557 7.30 10.81 5.77 45 TR_MAX_INTL_RELAY 22422 17.11 43.18 5.74 46 TR_XM_DK_Bayes2 21018 3.87 0.42 5.38 47 XM_H_Long_From01 20807 5.44 5.70 5.32 48 LOTS_OF_MONEY 20150 7.52 12.92 5.16 49 XM_DK_Undo_02 19073 17.47 46.30 4.88 50 MIME_QP_LONG_LINE 18726 4.46 3.70 4.79 51 T_TooManySym_01 18478 4.04 2.45 4.73 52 HTML_IMAGE_RATIO_02 18471 5.87 8.50 4.73 53 BAYES_40 17478 3.53 1.38 4.47 54 XMStrtUSub 17219 4.17 3.65 4.41 55 BOTNET_IPINHOSTNAME 16926 6.85 12.62 4.33 56 RCVD_IN_IADB_LISTED 16519 3.50 1.84 4.23 57 XM_PDF 15691 2.94 0.49 4.01 58 ANY_BOUNCE_MESSAGE 15668 3.31 1.71 4.01 59 BOUNCE_MESSAGE 15666 3.31 1.71 4.01 60 RELAYCOUNTRY_META 15612 10.11 24.12 3.99 61 BAYES_80 15070 5.28 8.53 3.86 62 MPART_ALT_DIFF 14980 4.41 5.72 3.83 63 XM_B_SpammyWords3 14913 6.84 13.76 3.82 64 RCVD_IN_VALIDITY_SAFE 14688 3.64 3.35 3.76 65 RCVD_IN_IADB_SPF 14580 3.10 1.65 3.73 66 BAYES_99 14529 13.76 36.75 3.72 67 HTML_IMAGE_RATIO_04 14420 4.39 6.01 3.69 68 XM_Body_Dirty_Words 13936 5.27 9.17 3.57 69 T_REMOTE_IMAGE 13705 3.00 1.85 3.51 70 TR_XM_SpammyWords4 13409 5.94 11.67 3.43 71 XMSubMetaSx_00 13313 4.11 5.73 3.41 72 RCVD_IN_IADB_SENDERID 13237 2.83 1.55 3.39 73 RCVD_IN_VALIDITY_CERTIFIED 13223 3.21 2.82 3.38 74 FSL_BULK_SIG 13214 5.15 9.19 3.38 75 XM_UncommonTLD01 13060 4.21 6.19 3.34 76 BAYES_20 12853 2.62 1.09 3.29 77 RCVD_IN_IADB_DK 12840 2.76 1.55 3.29 78 HTML_IMAGE_RATIO_06 12052 3.32 3.86 3.08 79 XM_B_Phish_Phrases 11875 3.48 4.50 3.04 80 XM_SPF_SoftFail 11462 3.27 4.04 2.93 81 BAYES_999 11161 10.74 28.80 2.86 82 MAILING_LIST_MULTI 10593 2.46 1.90 2.71 83 RCVD_IN_IADB_VOUCHED 10041 2.05 0.87 2.57 84 BAYES_05 9496 1.85 0.53 2.43 85 T_TooManySym_02 9307 1.87 0.69 2.38 86 TooManyTo_002 9163 1.85 0.73 2.34 87 HTML_IMAGE_RATIO_08 8927 2.39 2.64 2.28 88 TR_XM_SpammyRelay 8909 7.57 19.70 2.28 89 MIME_HTML_ONLY_MULTI 8866 2.57 3.27 2.27 90 XM_B_SpammyTLD 8852 2.55 3.19 2.26 91 SCC_BODY_URI_ONLY 8508 1.78 0.87 2.18 92 MIME_HTML_MOSTLY 8504 2.74 4.03 2.18 93 XMNumbers 8464 2.61 3.62 2.17 94 DKIM_INVALID 8290 3.06 5.22 2.12 95 XM_CamelCaseFrm001 8239 2.33 2.82 2.11 96 FROM_EXCESS_BASE64 7898 1.97 1.86 2.02 97 BAYES_95 7860 3.29 6.22 2.01 98 TR_XM_DKIM_Undo 7655 12.29 35.95 1.96 99 HTML_MIME_NO_HTML_TAG 7521 2.01 2.20 1.92 100 TM2_M_URI_OPT_OUT 7457 2.33 3.31 1.91 101 INVALID_MSGID 7245 1.37 0.26 1.85 102 TR_XM_PhishingBody 6961 2.51 4.19 1.78 103 RCVD_IN_IADB_OPTIN 6888 1.40 0.57 1.76 104 HELO_NODOT 6641 1.39 0.69 1.70 105 HELO_NO_DOMAIN 6637 1.39 0.69 1.70 106 XM_B_Unsub2 6634 1.94 2.49 1.70 107 XM_DK_Undo_01 6586 1.64 1.54 1.69 108 TO_MALFORMED 6301 1.13 0.01 1.61 109 T_XMDrugObfuBody_14 6013 2.10 3.40 1.54 110 URI_NOVOWEL 6006 1.37 1.00 1.54 111 TR_XM_UnparsRelay 5928 3.33 7.50 1.52 112 XM_B_Investor 5901 2.35 4.29 1.51 113 TR_Symld_Words 5622 1.30 1.00 1.44 114 UNTRUSTED_Relay 5463 3.33 7.75 1.40 115 TooManyTo_003 5463 1.17 0.64 1.40 116 TR_DCC_Bayes_99 5462 9.23 27.16 1.40 117 IN_HORDE_ADDRESS_BOOK 5341 1.00 0.16 1.37 118 RELAYCOUNTRY_CA 5321 4.86 12.86 1.36 119 XM_H_Trusted_IP 5195 0.93 0.00 1.33 120 T_XMDrugObfuBody_08 5069 1.89 3.24 1.30 121 XMSexyCombo_05 5011 2.44 5.09 1.28 122 KHOP_HELO_FCRDNS 4985 1.24 1.16 1.28 123 XM_SendGrid 4956 1.34 1.49 1.27 124 TVD_RCVD_IP 4898 1.08 0.69 1.25 125 XM_GoogleGroups 4768 0.98 0.44 1.22 126 BOTNET 4593 3.80 9.82 1.18 127 SUBJ_ALL_CAPS 4582 1.41 1.96 1.17 128 TM2_M_VERY_LONG_WORD 4407 1.66 2.88 1.13 129 XMBody_95 4336 0.86 0.29 1.11 130 XMCapTrack 4324 0.88 0.37 1.11 131 XMGappySubj_01 4282 0.83 0.22 1.10 132 XM_OfRef6 3968 1.86 3.81 1.02 133 TooManyTo_004 3965 0.88 0.58 1.01 134 TVD_SPACE_RATIO 3931 0.75 0.15 1.01 135 TR_XM_SpammyWords5 3930 1.95 4.10 1.01 136 XMBSHREFv2 3815 0.77 0.30 0.98 137 URI_HEX 3705 1.19 1.76 0.95 138 XM_H_Long_From02 3540 0.89 0.85 0.91 139 T_TooManySym_03 3365 0.67 0.24 0.86 140 XM_UB50 3350 1.87 4.18 0.86 141 T_FILL_THIS_FORM_SHORT 3335 2.02 4.71 0.85 142 TooManyTo_005 3311 0.75 0.54 0.85 143 XMSubNoVowel 3141 0.67 0.38 0.80 144 TR_XM_DK_SendGrid 3135 0.85 0.95 0.80 145 XMGenDplmaNmb 3135 0.99 1.43 0.80 146 T_XMDrugObfuBody_00 2992 0.97 1.44 0.77 147 DKIM_ADSP_CUSTOM_MED 2982 0.77 0.79 0.76 148 XM_B_SpammyWords4 2943 1.31 2.57 0.75 149 HTTPS_HTTP_MISMATCH 2937 0.91 1.26 0.75 150 URI_TRY_3LD 2884 0.97 1.49 0.74 151 XMHTML_After_End 2850 0.99 1.60 0.73 152 RCVD_IN_RP_SAFE 2810 0.71 0.68 0.72 153 XMLngstWrd_00 2804 0.97 1.55 0.72 154 XM_ShortIntro_01 2697 0.60 0.39 0.69 155 TR_XM_Base64_M1 2696 0.81 1.08 0.69 156 XMStockSpam_06 2689 0.91 1.41 0.69 157 XM_H_PHPMailer 2684 0.80 1.05 0.69 158 RCVD_IN_BL_SPAMCOP_NET 2576 4.98 14.87 0.66 159 FROM_GOV_DKIM_AU 2574 0.53 0.22 0.66 160 SpammyFromTLD_01 2574 1.37 3.01 0.66 161 XMNoVowels 2567 0.57 0.38 0.66 162 RCVD_IN_RP_CERTIFIED 2507 0.62 0.57 0.64 163 XM_ProductURIs 2475 0.63 0.62 0.63 164 TR_MetaPhish_Combo_01 2403 0.76 1.09 0.61 165 XMPhish14 2344 0.85 1.44 0.60 166 MSGID_NOFQDN1 2342 0.43 0.03 0.60 167 XMGappySubj_02 2333 0.44 0.09 0.60 168 RELAYCOUNTRY_AU 2302 1.03 2.05 0.59 169 XMMoneyMeta_00 2234 0.66 0.88 0.57 170 USER_IN_WHITELIST 2215 0.39 0.00 0.57 171 USER_IN_WELCOMELIST 2215 0.39 0.00 0.57 172 XMPhish30 2123 0.73 1.17 0.54 173 FILL_THIS_FORM 2077 0.45 0.27 0.53 174 MPART_ALT_DIFF_COUNT 2030 0.63 0.90 0.52 175 SHORT_HELO_AND_INLINE_IMAGE 2008 0.37 0.06 0.51 176 T_Symld_Words_02 2004 0.63 0.88 0.51 177 XM_B_COPY_HTML 1989 0.56 0.68 0.51 178 RELAYCOUNTRY_GB 1960 0.56 0.70 0.50 179 XMBody_17 1921 2.19 6.07 0.49 180 T_OBFU_PDF_ATTACH 1904 0.36 0.06 0.49 181 XMSubMetaI_00 1900 0.64 1.00 0.49 182 HTML_IMAGE_ONLY_28 1900 0.46 0.40 0.49 183 RDNS_DYNAMIC 1892 0.63 0.97 0.48 184 T_XMHurry_00 1823 0.90 1.90 0.47 185 HTML_IMAGE_ONLY_32 1800 0.38 0.19 0.46 186 NML_ADSP_CUSTOM_MED 1795 0.50 0.59 0.46 187 FORGED_GMAIL_RCVD 1741 0.51 0.65 0.45 188 XMOemUri 1740 0.35 0.13 0.45 189 XMBrknScrpt_02 1732 0.55 0.79 0.44 190 TO_NO_BRKTS_HTML_ONLY 1726 0.36 0.18 0.44 191 XMBdyGiftCard01 1627 0.79 1.64 0.42 192 HTML_TAG_BALANCE_BODY 1509 0.70 1.44 0.39 193 XMDateMe_00 1499 0.36 0.30 0.38 194 TR_XM_PHPForged 1483 0.81 1.81 0.38 195 XM_S_SpammyWords 1474 0.61 1.15 0.38 196 TR_XM_Spammywords 1474 0.61 1.15 0.38 197 TR_XM_FormFill2 1470 0.80 1.77 0.38 198 XM_B_FormFill 1467 0.28 0.06 0.38 199 TM2_M_BODY_EMPTY 1448 0.30 0.13 0.37 200 HTML_FONT_FACE_BAD 1441 0.51 0.84 0.37 ----------------------------------------------------------------------