Email: 607620 Autolearn: 0 AvgScore: 1.94 AvgScanTime: 1.28 sec Spam: 164526 Autolearn: 0 AvgScore: 13.70 AvgScanTime: 1.51 sec Ham: 443094 Autolearn: 0 AvgScore: -2.43 AvgScanTime: 1.20 sec Time Spent Running SA: 216.06 hours Time Spent Processing Spam: 68.85 hours Time Spent Processing Ham: 147.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159548 91.13 96.97 88.96 2 DKIM_SIGNED 149340 67.07 90.77 58.27 3 XM_DK_Pass 143800 65.34 87.40 57.14 4 DKIM_VALID 141850 64.43 86.22 56.34 5 XM_B_Unicode 139112 77.24 84.55 74.53 6 T_SCC_BODY_TEXT_LINE 134058 82.74 81.48 83.21 7 RELAYCOUNTRY_US 127167 77.39 77.29 77.43 8 XM_B_SpammyWords 120898 48.48 73.48 39.19 9 XMListUnsubscribeExists 118150 47.47 71.81 38.44 10 DCC_CHECK 113101 35.54 68.74 23.21 11 DKIM_VALID_AU 102831 49.68 62.50 44.92 12 XM_DK_Undo_02 77905 15.71 47.35 3.97 13 XM_B_Unicode3 74373 45.92 45.20 46.19 14 TR_MAX_INTL_RELAY 70414 15.02 42.80 4.70 15 XM_B_SpammyWords2 69811 22.60 42.43 15.24 16 LOC_TINY_FONT_1 62686 23.95 38.10 18.69 17 BAYES_50 62064 53.79 37.72 59.75 18 TR_XM_DKIM_Undo 60742 11.08 36.92 1.49 19 BAYES_99 60155 12.10 36.56 3.02 20 HTML_FONT_LOW_CONTRAST 58082 25.48 35.30 21.84 21 DKIM_VALID_EF 56764 25.88 34.50 22.67 22 MIME_HTML_ONLY 56485 30.35 34.33 28.87 23 FVGT_m_MULTI_ODD 52492 22.95 31.90 19.62 24 DCC_CHECK_NEGATIVE 51402 64.42 31.24 76.74 25 T_KAM_HTML_FONT_INVALID 47661 19.58 28.97 16.09 26 BAYES_999 46954 9.44 28.54 2.35 27 TR_XM_DK_Unsub 42187 14.68 25.64 10.61 28 RCVD_IN_MSPIKE_H2 40620 20.21 24.69 18.55 29 T_TM2_M_HEADER_IN_MSG 39360 23.27 23.92 23.03 30 TR_DCC_Bayes_99 38502 6.84 23.40 0.68 31 RELAYCOUNTRY_META 36748 8.60 22.34 3.51 32 XMSubLong 36413 20.45 22.13 19.83 33 XM_Multi_Part_URI 30615 12.98 18.61 10.90 34 TR_XM_SpammyRelay 29990 6.34 18.23 1.93 35 RCVD_IN_BL_SPAMCOP_NET 25341 4.60 15.40 0.58 36 XM_B_Unsub 24929 13.32 15.15 12.64 37 LOTS_OF_MONEY 24495 7.88 14.89 5.27 38 TR_XM_BayesUnsub 24293 11.44 14.77 10.21 39 UNPARSEABLE_RELAY 24273 9.90 14.75 8.10 40 TR_XM_SpammyWords2 24106 4.15 14.65 0.25 41 TR_XM_SpammyWords4 21945 6.22 13.34 3.58 42 XM_B_SpammyWords3 21633 6.62 13.15 4.19 43 BOTNET_IPINHOSTNAME 21124 5.99 12.84 3.45 44 RELAYCOUNTRY_CA 20902 4.07 12.70 0.86 45 TR_XM_SPAMCOP 20008 3.46 12.16 0.23 46 RCVD_IN_MSPIKE_H3 18152 6.48 11.03 4.78 47 RCVD_IN_MSPIKE_WL 18152 6.48 11.03 4.78 48 XM_Evil_Numbers_Gen 16095 8.26 9.78 7.70 49 BOTNET 15045 3.20 9.14 0.99 50 XM_Body_Dirty_Words 14428 4.71 8.77 3.21 51 BAYES_80 14303 4.69 8.69 3.21 52 FSL_BULK_SIG 13573 3.81 8.25 2.16 53 TR_XM_UnparsRelay 12885 3.02 7.83 1.23 54 BAYES_60 12225 7.32 7.43 7.28 55 UNTRUSTED_Relay 11671 3.03 7.09 1.53 56 LotsOfNums_01 11528 6.81 7.01 6.74 57 XMBody_17 11503 2.33 6.99 0.60 58 HTML_IMAGE_RATIO_02 11257 4.75 6.84 3.97 59 XM_UncommonTLD01 11116 3.97 6.76 2.93 60 XMSubMetaSx_00 10181 3.95 6.19 3.12 61 HTML_IMAGE_RATIO_04 10006 11.49 6.08 13.49 62 BAYES_95 9934 2.86 6.04 1.68 63 MPART_ALT_DIFF 9413 9.27 5.72 10.59 64 TooManyTo_001 9260 10.31 5.63 12.05 65 XM_H_Long_From01 8539 4.51 5.19 4.25 66 TR_XM_BayesRelay 8079 1.33 4.91 0.00 67 XM_B_Phish_Phrases 8062 3.18 4.90 2.54 68 T_FILL_THIS_FORM_SHORT 7911 1.89 4.81 0.80 69 XM_OfRef6 7763 2.06 4.72 1.07 70 XMSexyCombo_05 7657 2.28 4.65 1.39 71 DKIM_INVALID 7490 2.64 4.55 1.92 72 XM_B_Investor 7233 2.05 4.40 1.18 73 XM_H_GMP 6884 4.91 4.18 5.18 74 XM_SPF_SoftFail 6707 3.65 4.08 3.49 75 MIME_HTML_MOSTLY 6523 2.72 3.96 2.26 76 TR_XM_SpammyWords5 6500 1.92 3.95 1.17 77 TR_XM_PhishingBody 6480 2.09 3.94 1.40 78 HTML_IMAGE_RATIO_06 6317 4.03 3.84 4.10 79 TM2_M_URI_OPT_OUT 6295 3.64 3.83 3.57 80 XM_B_SpammyTLD 6052 2.44 3.68 1.99 81 XMNumbers 5992 3.04 3.64 2.81 82 XMStrtUSub 5833 8.08 3.55 9.76 83 TR_LOTS_OF_MONEY3 5714 1.15 3.47 0.29 84 SpammyFromTLD_01 5628 1.38 3.42 0.62 85 MIME_QP_LONG_LINE 5593 3.94 3.40 4.13 86 XM_UB50 5576 1.59 3.39 0.92 87 T_XMDrugObfuBody_14 5440 2.15 3.31 1.71 88 HTML_IMAGE_RATIO_08 5408 2.03 3.29 1.56 89 MIME_HTML_ONLY_MULTI 5337 7.28 3.24 8.78 90 TR_XM_FormFill 5300 0.88 3.22 0.01 91 T_XMDrugObfuBody_08 5281 1.76 3.21 1.22 92 TM2_M_VERY_LONG_WORD 5097 1.60 3.10 1.04 93 RCVD_IN_VALIDITY_SAFE 4886 3.23 2.97 3.32 94 FONT_INVIS_LONG_LINE 4781 0.83 2.91 0.06 95 XMDiploma_00 4776 5.61 2.90 6.62 96 USER_IN_DEF_DKIM_WL 4696 7.29 2.85 8.94 97 XM_URI_RBL 4324 0.80 2.63 0.12 98 XM_CamelCaseFrm001 4250 1.91 2.58 1.66 99 XM_B_Unsub2 4172 1.52 2.54 1.15 100 TR_Mismatch_TLD_02 3910 0.69 2.38 0.06 101 RCVD_IN_VALIDITY_CERTIFIED 3876 2.73 2.36 2.87 102 RELAYCOUNTRY_AU 3607 1.04 2.19 0.61 103 T_TooManySym_01 3530 3.59 2.15 4.13 104 XM_B_SpammyWords4 3492 0.94 2.12 0.50 105 TR_XM_NoHeaderRelay 3446 0.64 2.09 0.09 106 SUBJ_ALL_CAPS 3345 1.41 2.03 1.18 107 HK_RANDOM_REPLYTO 3266 0.60 1.99 0.08 108 XMGenDplmaNmb 3202 1.08 1.95 0.75 109 URI_HEX 3183 1.11 1.93 0.81 110 FROM_EXCESS_BASE64 3151 1.72 1.92 1.65 111 XMStockSpam_06 3028 1.18 1.84 0.93 112 XM_DIRTYINTL 3012 0.68 1.83 0.26 113 T_XMHurry_00 2996 0.73 1.82 0.33 114 URI_TRY_3LD 2986 0.97 1.81 0.65 115 ANY_BOUNCE_MESSAGE 2985 3.89 1.81 4.67 116 BOUNCE_MESSAGE 2980 3.89 1.81 4.66 117 SpammyFromTLD_02 2967 0.73 1.80 0.33 118 MAILING_LIST_MULTI 2953 2.08 1.79 2.18 119 TR_XM_PHPDW 2912 0.71 1.77 0.32 120 TR_XM_PHPForged 2881 0.72 1.75 0.34 121 HTML_MIME_NO_HTML_TAG 2829 1.64 1.72 1.61 122 TR_XM_FormFill2 2818 0.70 1.71 0.32 123 XM_H_PHPOS 2795 0.69 1.70 0.31 124 T_REMOTE_IMAGE 2783 2.47 1.69 2.76 125 RCVD_IN_IADB_LISTED 2731 3.01 1.66 3.50 126 TR_XM_INV_DKIM 2566 0.45 1.56 0.04 127 KHOP_HELO_FCRDNS 2452 1.13 1.49 0.99 128 RCVD_IN_IADB_SPF 2450 2.69 1.49 3.14 129 HTML_TAG_BALANCE_BODY 2424 0.81 1.47 0.57 130 XMPhish30 2419 0.73 1.47 0.46 131 RCVD_IN_PSBL 2413 0.56 1.47 0.23 132 XM_DK_Undo_01 2412 1.43 1.47 1.42 133 AC_BR_BONANZA 2368 0.45 1.44 0.08 134 BAYES_40 2339 4.00 1.42 4.96 135 RCVD_IN_IADB_DK 2329 2.42 1.42 2.80 136 XMBdyGiftCard01 2318 0.66 1.41 0.39 137 HTTPS_HTTP_MISMATCH 2308 0.93 1.40 0.75 138 XMBrknScrpt_02 2306 0.67 1.40 0.40 139 RCVD_IN_IADB_SENDERID 2303 2.45 1.40 2.85 140 XM_SendGrid 2283 1.23 1.39 1.17 141 T_XMDrugObfuBody_00 2251 0.75 1.37 0.53 142 BOTNET_NORDNS 2173 0.36 1.32 0.01 143 XM_HighProb1 2098 0.35 1.28 0.00 144 ALL_TRUSTED 2081 14.78 1.26 19.80 145 TR_XM_Base64_M1 2081 0.71 1.26 0.51 146 XMHTML_After_End 2080 0.78 1.26 0.60 147 XMReplyNow 2053 0.49 1.25 0.21 148 XM_H_Undi_Recip 2002 0.46 1.22 0.18 149 RCVD_IN_VALIDITY_RPBL 1936 0.35 1.18 0.05 150 XM_B_DNDMA 1904 0.54 1.16 0.31 151 XM_OfRef7 1875 0.40 1.14 0.12 152 DKIM_ADSP_CUSTOM_MED 1844 0.78 1.12 0.65 153 HTML_FONT_FACE_BAD 1759 9.49 1.07 12.62 154 TM2_M_A_HREF_HREF 1750 0.42 1.06 0.17 155 XM_UB60 1748 0.36 1.06 0.10 156 BAYES_20 1737 2.82 1.06 3.48 157 TR_XM_InvalidRelay 1716 0.30 1.04 0.02 158 HOSTED_IMG_MULTI_PUB_01 1715 0.29 1.04 0.01 159 T_XMDrugObfuBody_10 1705 0.31 1.04 0.04 160 XM_B_Phish66 1689 0.48 1.03 0.28 161 URI_NOVOWEL 1668 1.29 1.01 1.40 162 XM_UB99 1666 0.28 1.01 0.00 163 XM_H_Long_From02 1618 0.89 0.98 0.86 164 FORGED_GMAIL_RCVD 1612 0.54 0.98 0.37 165 XM_B_COPY_HTML 1604 0.62 0.97 0.49 166 TooManyTo_002 1584 1.81 0.96 2.13 167 XMBody_78 1571 0.47 0.95 0.29 168 RDNS_DYNAMIC 1543 0.47 0.94 0.30 169 HTML_IMAGE_ONLY_20 1524 0.49 0.93 0.33 170 URIBL_DBL_SPAM 1522 0.25 0.93 0.00 171 XMLngstWrd_00 1519 0.82 0.92 0.78 172 RELAYCOUNTRY_FR 1508 0.38 0.92 0.18 173 PLING_QUERY 1483 0.48 0.90 0.32 174 XMPhish14 1472 0.50 0.89 0.35 175 XMSexyCombo_01 1465 0.37 0.89 0.18 176 XM_H_PHPMailer 1460 0.66 0.89 0.58 177 TooManyTo_003 1435 1.14 0.87 1.24 178 PDS_OTHER_BAD_TLD 1430 0.30 0.87 0.09 179 TR_Symld_Words 1410 1.11 0.86 1.20 180 XMSubMetaI_00 1408 0.52 0.86 0.39 181 XM_B_SEO 1397 0.34 0.85 0.15 182 TR_XM_DK_SendGrid 1392 0.79 0.85 0.77 183 XM_UB80 1384 0.24 0.84 0.01 184 TM2_M_OBFU_COMMENT 1365 0.40 0.83 0.24 185 DIET_1 1358 0.70 0.83 0.65 186 TooManyTo_004 1346 0.87 0.82 0.89 187 TR_XM_Undi_Recip11 1329 0.26 0.81 0.06 188 T_MONEY_PERCENT 1324 0.33 0.80 0.15 189 TR_LOTS_OF_MONEY2 1324 0.33 0.80 0.15 190 REMOVE_BEFORE_LINK 1310 0.40 0.80 0.25 191 NML_ADSP_CUSTOM_MED 1308 0.54 0.80 0.45 192 TooManyTo_005 1282 0.75 0.78 0.74 193 XM_Combo_Sbj 1260 0.33 0.77 0.16 194 XM_B_COVIDMETA 1259 0.34 0.77 0.18 195 MPART_ALT_DIFF_COUNT 1255 0.52 0.76 0.44 196 SHOPIFY_IMG_NOT_RCVD_SFY 1250 0.35 0.76 0.20 197 RELAYCOUNTRY_EE 1244 0.27 0.76 0.09 198 TR_XM_Undi_Recip5 1234 0.21 0.75 0.01 199 SCC_BODY_URI_ONLY 1218 1.69 0.74 2.04 200 UNDISC_MONEY 1211 0.21 0.74 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 394195 91.13 96.97 88.96 2 T_SCC_BODY_TEXT_LINE 368715 82.74 81.48 83.21 3 RELAYCOUNTRY_US 343096 77.39 77.29 77.43 4 DCC_CHECK_NEGATIVE 340048 64.42 31.24 76.74 5 XM_B_Unicode 330239 77.24 84.55 74.53 6 BAYES_50 264760 53.79 37.72 59.75 7 DKIM_SIGNED 258177 67.07 90.77 58.27 8 XM_DK_Pass 253197 65.34 87.40 57.14 9 DKIM_VALID 249656 64.43 86.22 56.34 10 XM_B_Unicode3 204664 45.92 45.20 46.19 11 DKIM_VALID_AU 199036 49.68 62.50 44.92 12 XM_B_SpammyWords 173667 48.48 73.48 39.19 13 XMListUnsubscribeExists 170316 47.47 71.81 38.44 14 MIME_HTML_ONLY 127908 30.35 34.33 28.87 15 DCC_CHECK 102838 35.54 68.74 23.21 16 T_TM2_M_HEADER_IN_MSG 102038 23.27 23.92 23.03 17 DKIM_VALID_EF 100468 25.88 34.50 22.67 18 HTML_FONT_LOW_CONTRAST 96750 25.48 35.30 21.84 19 XMSubLong 87862 20.45 22.13 19.83 20 ALL_TRUSTED 87744 14.78 1.26 19.80 21 FVGT_m_MULTI_ODD 86929 22.95 31.90 19.62 22 LOC_TINY_FONT_1 82817 23.95 38.10 18.69 23 RCVD_IN_MSPIKE_H2 82184 20.21 24.69 18.55 24 T_KAM_HTML_FONT_INVALID 71283 19.58 28.97 16.09 25 XM_B_SpammyWords2 67528 22.60 42.43 15.24 26 XM_H_Trusted_IP 60206 9.91 0.00 13.59 27 HTML_IMAGE_RATIO_04 59794 11.49 6.08 13.49 28 BAYES_00 58870 9.83 0.51 13.29 29 XM_B_Unsub 55985 13.32 15.15 12.64 30 HTML_FONT_FACE_BAD 55921 9.49 1.07 12.62 31 TooManyTo_001 53393 10.31 5.63 12.05 32 XM_Multi_Part_URI 48276 12.98 18.61 10.90 33 TR_XM_DK_Unsub 47002 14.68 25.64 10.61 34 MPART_ALT_DIFF 46903 9.27 5.72 10.59 35 TR_XM_BayesUnsub 45224 11.44 14.77 10.21 36 XMStrtUSub 43267 8.08 3.55 9.76 37 USER_IN_DEF_DKIM_WL 39604 7.29 2.85 8.94 38 MIME_HTML_ONLY_MULTI 38921 7.28 3.24 8.78 39 UNPARSEABLE_RELAY 35873 9.90 14.75 8.10 40 XM_Evil_Numbers_Gen 34097 8.26 9.78 7.70 41 BAYES_60 32263 7.32 7.43 7.28 42 LotsOfNums_01 29860 6.81 7.01 6.74 43 XMDiploma_00 29315 5.61 2.90 6.62 44 XM_DKIMWhitelistDomains 28632 4.72 0.02 6.46 45 IN_ZIMBRA_NJ_WHITELIST 24348 4.03 0.09 5.49 46 LOTS_OF_MONEY 23366 7.88 14.89 5.27 47 XM_H_GMP 22958 4.91 4.18 5.18 48 TR_XM_DK_Bayes 22261 3.77 0.38 5.02 49 BAYES_40 21976 4.00 1.42 4.96 50 TR_XM_DK_Bayes1 21975 3.72 0.37 4.96 51 RCVD_IN_MSPIKE_WL 21193 6.48 11.03 4.78 52 RCVD_IN_MSPIKE_H3 21193 6.48 11.03 4.78 53 XMSubNoVowel 20973 3.56 0.39 4.73 54 TR_MAX_INTL_RELAY 20844 15.02 42.80 4.70 55 ANY_BOUNCE_MESSAGE 20672 3.89 1.81 4.67 56 BOUNCE_MESSAGE 20669 3.89 1.81 4.66 57 TR_XM_DK_Bayes2 19096 3.23 0.31 4.31 58 XM_H_Long_From01 18843 4.51 5.19 4.25 59 XM_B_SpammyWords3 18584 6.62 13.15 4.19 60 MIME_QP_LONG_LINE 18317 3.94 3.40 4.13 61 T_TooManySym_01 18278 3.59 2.15 4.13 62 HTML_IMAGE_RATIO_06 18155 4.03 3.84 4.10 63 HTML_IMAGE_RATIO_02 17582 4.75 6.84 3.97 64 XM_DK_Undo_02 17581 15.71 47.35 3.97 65 TR_XM_SpammyWords4 15849 6.22 13.34 3.58 66 TM2_M_URI_OPT_OUT 15830 3.64 3.83 3.57 67 RELAYCOUNTRY_META 15531 8.60 22.34 3.51 68 RCVD_IN_IADB_LISTED 15529 3.01 1.66 3.50 69 XM_SPF_SoftFail 15478 3.65 4.08 3.49 70 BAYES_20 15417 2.82 1.06 3.48 71 XM_PDF 15345 2.68 0.56 3.46 72 BOTNET_IPINHOSTNAME 15274 5.99 12.84 3.45 73 BAYES_05 14798 2.59 0.57 3.34 74 RCVD_IN_VALIDITY_SAFE 14720 3.23 2.97 3.32 75 XM_Body_Dirty_Words 14220 4.71 8.77 3.21 76 BAYES_80 14205 4.69 8.69 3.21 77 RCVD_IN_IADB_SPF 13892 2.69 1.49 3.14 78 XMSubMetaSx_00 13838 3.95 6.19 3.12 79 BAYES_99 13367 12.10 36.56 3.02 80 XM_UncommonTLD01 12990 3.97 6.76 2.93 81 RCVD_IN_VALIDITY_CERTIFIED 12702 2.73 2.36 2.87 82 RCVD_IN_IADB_SENDERID 12608 2.45 1.40 2.85 83 XMNumbers 12457 3.04 3.64 2.81 84 RCVD_IN_IADB_DK 12388 2.42 1.42 2.80 85 T_REMOTE_IMAGE 12228 2.47 1.69 2.76 86 XM_B_Phish_Phrases 11235 3.18 4.90 2.54 87 BAYES_999 10417 9.44 28.54 2.35 88 MIME_HTML_MOSTLY 10019 2.72 3.96 2.26 89 MAILING_LIST_MULTI 9656 2.08 1.79 2.18 90 FSL_BULK_SIG 9550 3.81 8.25 2.16 91 TooManyTo_002 9441 1.81 0.96 2.13 92 RCVD_IN_IADB_VOUCHED 9289 1.71 0.65 2.10 93 SCC_BODY_URI_ONLY 9021 1.69 0.74 2.04 94 T_TooManySym_02 8860 1.63 0.62 2.00 95 XM_B_SpammyTLD 8801 2.44 3.68 1.99 96 TR_XM_SpammyRelay 8536 6.34 18.23 1.93 97 XMSubLongNoVowel 8536 1.45 0.18 1.93 98 DKIM_INVALID 8521 2.64 4.55 1.92 99 XMSubGarbage 8400 1.39 0.02 1.90 100 T_XMDrugObfuBody_14 7595 2.15 3.31 1.71 101 BAYES_95 7436 2.86 6.04 1.68 102 TR_XM_SB_Phish 7427 1.28 0.20 1.68 103 XM_CamelCaseFrm001 7352 1.91 2.58 1.66 104 FROM_EXCESS_BASE64 7315 1.72 1.92 1.65 105 INVALID_MSGID 7221 1.23 0.15 1.63 106 HTML_MIME_NO_HTML_TAG 7153 1.64 1.72 1.61 107 HTML_IMAGE_RATIO_08 6927 2.03 3.29 1.56 108 UNTRUSTED_Relay 6764 3.03 7.09 1.53 109 XMSubPhish18 6691 1.12 0.06 1.51 110 TR_XM_DKIM_Undo 6588 11.08 36.92 1.49 111 HELO_NODOT 6559 1.22 0.52 1.48 112 HELO_NO_DOMAIN 6551 1.22 0.52 1.48 113 TO_MALFORMED 6336 1.05 0.01 1.43 114 XM_DK_Undo_01 6297 1.43 1.47 1.42 115 TR_XM_PhishingBody 6205 2.09 3.94 1.40 116 URI_NOVOWEL 6187 1.29 1.01 1.40 117 XMSexyCombo_05 6173 2.28 4.65 1.39 118 RCVD_IN_IADB_OPTIN 6136 1.13 0.43 1.38 119 TO_NO_BRKTS_HTML_ONLY 6098 1.05 0.17 1.38 120 TVD_RCVD_IP 5751 1.14 0.73 1.30 121 TooManyTo_003 5485 1.14 0.87 1.24 122 TR_XM_UnparsRelay 5450 3.02 7.83 1.23 123 T_XMDrugObfuBody_08 5421 1.76 3.21 1.22 124 TR_Symld_Words 5338 1.11 0.86 1.20 125 XMGappySubj_01 5325 1.06 0.67 1.20 126 XM_B_Investor 5238 2.05 4.40 1.18 127 SUBJ_ALL_CAPS 5220 1.41 2.03 1.18 128 XM_SendGrid 5195 1.23 1.39 1.17 129 TR_XM_SpammyWords5 5192 1.92 3.95 1.17 130 IN_HORDE_ADDRESS_BOOK 5120 0.87 0.08 1.16 131 XM_E_Blogspot 5117 0.87 0.11 1.15 132 XM_B_Unsub2 5092 1.52 2.54 1.15 133 XM_OfRef6 4726 2.06 4.72 1.07 134 TM2_M_VERY_LONG_WORD 4621 1.60 3.10 1.04 135 XM_GoogleGroups 4404 0.86 0.50 0.99 136 BOTNET 4390 3.20 9.14 0.99 137 KHOP_HELO_FCRDNS 4385 1.13 1.49 0.99 138 XMBSHREFv2 4164 0.79 0.38 0.94 139 XMStockSpam_06 4114 1.18 1.84 0.93 140 TVD_PH_BODY_ACCOUNTS_PRE 4107 0.69 0.07 0.93 141 XM_UB50 4057 1.59 3.39 0.92 142 XMCapTrack 3982 0.76 0.39 0.90 143 TooManyTo_004 3958 0.87 0.82 0.89 144 TVD_SPACE_RATIO 3941 0.69 0.14 0.89 145 HTML_TAG_BALANCE_HEAD 3853 0.70 0.24 0.87 146 RELAYCOUNTRY_CA 3825 4.07 12.70 0.86 147 XMBody_95 3820 0.67 0.16 0.86 148 XM_H_Long_From02 3800 0.89 0.98 0.86 149 URI_HEX 3577 1.11 1.93 0.81 150 T_FILL_THIS_FORM_SHORT 3544 1.89 4.81 0.80 151 XMLngstWrd_00 3439 0.82 0.92 0.78 152 TR_XM_DK_SendGrid 3427 0.79 0.85 0.77 153 XMGenDplmaNmb 3333 1.08 1.95 0.75 154 HTTPS_HTTP_MISMATCH 3325 0.93 1.40 0.75 155 TooManyTo_005 3294 0.75 0.78 0.74 156 T_TooManySym_03 3144 0.58 0.24 0.71 157 TR_DCC_Bayes_99 3030 6.84 23.40 0.68 158 XMGappySubj_02 3022 0.58 0.31 0.68 159 DKIM_ADSP_CUSTOM_MED 2881 0.78 1.12 0.65 160 DIET_1 2878 0.70 0.83 0.65 161 URI_TRY_3LD 2878 0.97 1.81 0.65 162 SpammyFromTLD_01 2761 1.38 3.42 0.62 163 RELAYCOUNTRY_AU 2724 1.04 2.19 0.61 164 RCVD_IN_RP_SAFE 2719 0.64 0.70 0.61 165 TR_MetaPhish_Combo_01 2714 0.64 0.71 0.61 166 XMBody_17 2656 2.33 6.99 0.60 167 XMHTML_After_End 2650 0.78 1.26 0.60 168 XM_ShortIntro_01 2592 0.61 0.68 0.58 169 RCVD_IN_BL_SPAMCOP_NET 2588 4.60 15.40 0.58 170 XM_H_PHPMailer 2570 0.66 0.89 0.58 171 FROM_GOV_DKIM_AU 2524 0.51 0.34 0.57 172 HTML_TAG_BALANCE_BODY 2522 0.81 1.47 0.57 173 XM_ProductURIs 2339 0.57 0.67 0.53 174 T_XMDrugObfuBody_00 2331 0.75 1.37 0.53 175 MSGID_NOFQDN1 2331 0.39 0.02 0.53 176 RCVD_IN_RP_CERTIFIED 2319 0.53 0.57 0.52 177 TR_XM_Base64_M1 2243 0.71 1.26 0.51 178 XMNoVowels 2237 0.47 0.39 0.50 179 XM_B_SpammyWords4 2231 0.94 2.12 0.50 180 HTML_IMAGE_ONLY_28 2197 0.46 0.37 0.50 181 USER_IN_WELCOMELIST 2181 0.36 0.00 0.49 182 USER_IN_WHITELIST 2181 0.36 0.00 0.49 183 T_OBFU_PDF_ATTACH 2170 0.40 0.16 0.49 184 XM_B_COPY_HTML 2164 0.62 0.97 0.49 185 FILL_THIS_FORM 2084 0.49 0.54 0.47 186 XMPhish30 2021 0.73 1.47 0.46 187 SHORT_HELO_AND_INLINE_IMAGE 2014 0.35 0.06 0.45 188 NML_ADSP_CUSTOM_MED 2000 0.54 0.80 0.45 189 MPART_ALT_DIFF_COUNT 1933 0.52 0.76 0.44 190 T_Symld_Words_02 1926 0.50 0.68 0.43 191 XMMoneyMeta_00 1876 0.47 0.60 0.42 192 RELAYCOUNTRY_GB 1819 0.47 0.63 0.41 193 XMBrknScrpt_02 1755 0.67 1.40 0.40 194 XM_B_FormFill 1750 0.30 0.05 0.39 195 XMSubMetaI_00 1736 0.52 0.86 0.39 196 XMBdyGiftCard01 1713 0.66 1.41 0.39 197 FORGED_GMAIL_RCVD 1658 0.54 0.98 0.37 198 XMSolicitRefs_0 1584 0.39 0.46 0.36 199 XMPhish14 1539 0.50 0.89 0.35 200 TM2_M_BODY_EMPTY 1531 0.28 0.11 0.35 ----------------------------------------------------------------------