Email: 434810 Autolearn: 0 AvgScore: 3.95 AvgScanTime: 1.08 sec Spam: 138220 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.21 sec Ham: 296590 Autolearn: 0 AvgScore: -0.59 AvgScanTime: 1.02 sec Time Spent Running SA: 130.67 hours Time Spent Processing Spam: 46.43 hours Time Spent Processing Ham: 84.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128668 86.17 93.09 82.94 2 DKIM_SIGNED 124310 78.06 89.94 72.52 3 XM_DK_Pass 119151 75.89 86.20 71.09 4 DKIM_VALID 117702 74.90 85.16 70.12 5 XM_B_Unicode 113519 71.11 82.13 65.97 6 RELAYCOUNTRY_US 111622 79.87 80.76 79.45 7 T_SCC_BODY_TEXT_LINE 110328 82.04 79.82 83.07 8 XMListUnsubscribeExists 99054 54.81 71.66 46.95 9 XM_B_SpammyWords 97570 50.45 70.59 41.07 10 DCC_CHECK 96511 42.73 69.82 30.10 11 DKIM_VALID_AU 90416 59.47 65.41 56.69 12 XM_DK_Undo_02 62433 17.74 45.17 4.95 13 XM_B_Unicode3 60001 40.26 43.41 38.79 14 TR_MAX_INTL_RELAY 58850 17.95 42.58 6.48 15 LOC_TINY_FONT_1 53931 28.40 39.02 23.45 16 XM_B_SpammyWords2 53250 23.24 38.53 16.11 17 BAYES_50 51389 52.32 37.18 59.38 18 BAYES_99 50827 14.55 36.77 4.19 19 HTML_FONT_LOW_CONTRAST 47896 28.41 34.65 25.50 20 TR_XM_DKIM_Undo 46788 11.98 33.85 1.79 21 FVGT_m_MULTI_ODD 44952 27.20 32.52 24.71 22 MIME_HTML_ONLY 42620 23.01 30.83 19.37 23 DKIM_VALID_EF 42230 29.66 30.55 29.24 24 DCC_CHECK_NEGATIVE 41688 57.24 30.16 69.86 25 T_KAM_HTML_FONT_INVALID 40410 22.23 29.24 18.96 26 BAYES_999 40390 11.52 29.22 3.26 27 TR_DCC_Bayes_99 34888 8.79 25.24 1.12 28 RCVD_IN_MSPIKE_H2 33757 24.31 24.42 24.25 29 T_TM2_M_HEADER_IN_MSG 31250 28.13 22.61 30.70 30 TR_XM_DK_Unsub 30865 16.45 22.33 13.71 31 XMSubLong 30274 22.23 21.90 22.38 32 RELAYCOUNTRY_META 26279 8.96 19.01 4.28 33 XM_Multi_Part_URI 24105 14.35 17.44 12.92 34 TR_XM_SpammyRelay 21406 6.38 15.49 2.14 35 XM_B_Unsub 21060 9.86 15.24 7.36 36 TR_XM_BayesUnsub 20562 8.87 14.88 6.08 37 UNPARSEABLE_RELAY 18665 10.95 13.50 9.76 38 BOTNET_IPINHOSTNAME 18339 7.06 13.27 4.17 39 TR_XM_SpammyWords2 17896 4.32 12.95 0.30 40 XM_B_SpammyWords3 17404 6.47 12.59 3.62 41 LOTS_OF_MONEY 16102 7.96 11.65 6.23 42 RCVD_IN_BL_SPAMCOP_NET 15198 3.93 11.00 0.64 43 RELAYCOUNTRY_CA 14405 4.08 10.42 1.13 44 TR_XM_SpammyWords4 13770 6.04 9.96 4.21 45 BOTNET 13372 3.81 9.67 1.08 46 XM_Body_Dirty_Words 12792 5.62 9.25 3.92 47 XM_Evil_Numbers_Gen 12703 8.07 9.19 7.55 48 FSL_BULK_SIG 12611 4.94 9.12 2.99 49 TR_XM_SPAMCOP 12060 2.96 8.73 0.27 50 XM_UncommonTLD01 11921 5.61 8.62 4.20 51 RCVD_IN_MSPIKE_H3 11834 6.73 8.56 5.88 52 RCVD_IN_MSPIKE_WL 11834 6.73 8.56 5.88 53 BAYES_80 11319 5.55 8.19 4.32 54 TR_XM_UnparsRelay 10733 3.45 7.77 1.45 55 XMBody_17 10641 2.87 7.70 0.61 56 BAYES_60 10314 8.79 7.46 9.40 57 HTML_IMAGE_RATIO_02 10157 5.94 7.35 5.29 58 XMSubMetaSx_00 8583 5.09 6.21 4.56 59 LotsOfNums_01 8544 7.40 6.18 7.97 60 TooManyTo_001 8476 8.54 6.13 9.66 61 XMNumbers 8165 3.94 5.91 3.03 62 UNTRUSTED_Relay 7945 2.97 5.75 1.67 63 HTML_IMAGE_RATIO_04 7938 4.78 5.74 4.33 64 XM_H_Long_From01 7791 5.50 5.64 5.43 65 BAYES_95 7729 3.33 5.59 2.28 66 MPART_ALT_DIFF 7645 4.05 5.53 3.36 67 XM_SPF_SoftFail 7352 4.02 5.32 3.42 68 SpammyFromTLD_01 7012 2.19 5.07 0.84 69 XM_B_Phish_Phrases 6755 3.62 4.89 3.03 70 DKIM_INVALID 6608 3.16 4.78 2.40 71 XMSexyCombo_05 6581 2.90 4.76 2.04 72 XM_H_GMP 6403 6.35 4.63 7.15 73 TR_XM_SpammyWords5 6157 2.38 4.45 1.41 74 TR_XM_PHPForged 5904 1.75 4.27 0.58 75 MIME_HTML_MOSTLY 5903 2.89 4.27 2.24 76 TR_XM_PHPDW 5897 1.75 4.27 0.57 77 TR_XM_FormFill2 5825 1.73 4.21 0.57 78 XM_H_PHPOS 5797 1.71 4.19 0.55 79 XM_B_SpammyTLD 5708 3.09 4.13 2.60 80 XM_OfRef6 5631 2.09 4.07 1.16 81 T_FILL_THIS_FORM_SHORT 5510 1.90 3.99 0.93 82 HTML_IMAGE_RATIO_06 5484 2.61 3.97 1.97 83 TR_XM_PhishingBody 5395 2.29 3.90 1.54 84 XMStrtUSub 5371 4.71 3.89 5.10 85 XM_B_Investor 5060 2.10 3.66 1.38 86 T_XMDrugObfuBody_14 4892 2.37 3.54 1.82 87 TM2_M_VERY_LONG_WORD 4850 1.94 3.51 1.21 88 RCVD_IN_VALIDITY_SAFE 4673 3.94 3.38 4.20 89 TR_XM_BayesRelay 4621 1.06 3.34 0.00 90 MIME_HTML_ONLY_MULTI 4352 2.26 3.15 1.85 91 T_XMDrugObfuBody_08 4218 1.96 3.05 1.45 92 FONT_INVIS_LONG_LINE 4166 1.00 3.01 0.05 93 TM2_M_URI_OPT_OUT 4109 2.10 2.97 1.70 94 RCVD_IN_VALIDITY_CERTIFIED 3926 3.37 2.84 3.62 95 HTML_IMAGE_RATIO_08 3899 2.18 2.82 1.88 96 XM_URI_RBL 3872 0.99 2.80 0.14 97 XM_UB50 3855 1.58 2.79 1.02 98 XM_CamelCaseFrm001 3830 2.64 2.77 2.58 99 TR_XM_FormFill 3815 0.88 2.76 0.01 100 SUBJ_ALL_CAPS 3651 1.94 2.64 1.62 101 T_TooManySym_01 3620 4.99 2.62 6.09 102 USER_IN_DEF_DKIM_WL 3599 8.72 2.60 11.57 103 XMDiploma_00 3597 1.88 2.60 1.54 104 XM_B_SpammyWords4 3584 1.11 2.59 0.42 105 MIME_QP_LONG_LINE 3553 4.18 2.57 4.93 106 SCC_BODY_URI_ONLY 3548 2.80 2.57 2.90 107 TR_Mismatch_TLD_02 3545 0.89 2.56 0.11 108 FROM_EXCESS_BASE64 3423 2.11 2.48 1.94 109 RELAYCOUNTRY_AU 3100 1.22 2.24 0.74 110 TM2_M_BODY_EMPTY 2953 1.01 2.14 0.48 111 XMEmptyBody_01 2853 0.74 2.06 0.12 112 URI_HEX 2800 1.34 2.03 1.02 113 XM_B_Unsub2 2732 1.44 1.98 1.19 114 SpammyFromTLD_02 2552 0.74 1.85 0.22 115 TR_LOTS_OF_MONEY3 2528 0.78 1.83 0.29 116 T_REMOTE_IMAGE 2525 3.06 1.83 3.64 117 XM_DIRTYINTL 2503 0.70 1.81 0.18 118 MAILING_LIST_MULTI 2481 2.78 1.79 3.23 119 TR_XM_INV_DKIM 2478 0.62 1.79 0.07 120 HTML_MIME_NO_HTML_TAG 2472 2.19 1.79 2.38 121 BAYES_40 2416 3.95 1.75 4.98 122 TR_XM_NoHeaderRelay 2329 0.63 1.68 0.15 123 XM_HighProb1 2241 0.52 1.62 0.00 124 HK_RANDOM_REPLYTO 2228 0.58 1.61 0.10 125 XMStockSpam_06 2186 1.40 1.58 1.31 126 ANY_BOUNCE_MESSAGE 2157 3.92 1.56 5.02 127 BOUNCE_MESSAGE 2157 3.92 1.56 5.02 128 KHOP_HELO_FCRDNS 2140 1.46 1.55 1.41 129 HTML_TAG_BALANCE_BODY 2121 0.78 1.53 0.43 130 BOTNET_NORDNS 2120 0.49 1.53 0.01 131 BAYES_20 2119 2.88 1.53 3.51 132 AC_BR_BONANZA 2100 0.54 1.52 0.09 133 XM_SendGrid 2086 1.44 1.51 1.41 134 ALL_TRUSTED 2064 12.37 1.49 17.44 135 XM_B_DNDMA 2043 0.77 1.48 0.43 136 RCVD_IN_IADB_LISTED 2020 3.17 1.46 3.97 137 XMReplyNow 2005 0.65 1.45 0.28 138 URI_TRY_3LD 1954 1.09 1.41 0.94 139 XM_DK_Undo_01 1950 1.73 1.41 1.88 140 T_XMHurry_00 1926 0.78 1.39 0.49 141 TR_Symld_Words 1923 1.65 1.39 1.77 142 PDS_OTHER_BAD_TLD 1906 0.52 1.38 0.13 143 RDNS_DYNAMIC 1887 0.67 1.37 0.35 144 RCVD_IN_PSBL 1781 0.70 1.29 0.43 145 TR_XM_Base64_M1 1766 0.90 1.28 0.73 146 XMPhish14 1763 0.69 1.28 0.41 147 HTTPS_HTTP_MISMATCH 1757 0.95 1.27 0.80 148 XM_H_Undi_Recip 1727 0.55 1.25 0.22 149 XMPhish30 1723 0.74 1.25 0.51 150 XMSexyCombo_01 1708 0.93 1.24 0.79 151 RCVD_IN_IADB_SPF 1691 2.82 1.22 3.57 152 XM_H_PHPMailer 1683 0.95 1.22 0.83 153 XMSubMetaSxObfu_03 1647 0.69 1.19 0.46 154 XMLngstWrd_00 1634 0.92 1.18 0.80 155 TR_Caps_n_Bayes_99 1623 0.39 1.17 0.02 156 TVD_RCVD_IP 1618 1.61 1.17 1.82 157 XMBdyGiftCard01 1617 0.81 1.17 0.64 158 DKIM_ADSP_CUSTOM_MED 1563 1.03 1.13 0.98 159 RCVD_IN_IADB_DK 1562 2.54 1.13 3.20 160 URI_NOVOWEL 1555 1.40 1.13 1.52 161 XM_OfRef7 1554 0.48 1.12 0.19 162 RCVD_IN_IADB_SENDERID 1549 2.57 1.12 3.24 163 TooManyTo_002 1532 2.41 1.11 3.01 164 XMGenDplmaNmb 1529 0.82 1.11 0.68 165 T_XMDrugObfuBody_00 1527 0.71 1.10 0.52 166 TR_LOTS_OF_MONEY2 1526 0.53 1.10 0.26 167 T_MONEY_PERCENT 1526 0.53 1.10 0.26 168 URIBL_DBL_SPAM 1499 0.35 1.08 0.01 169 XMHTML_After_End 1494 0.79 1.08 0.65 170 DIET_1 1489 0.53 1.08 0.28 171 RCVD_IN_VALIDITY_RPBL 1484 0.37 1.07 0.05 172 TR_XM_InvalidRelay 1464 0.35 1.06 0.03 173 HELO_DYNAMIC_SPLIT_IP 1396 0.33 1.01 0.01 174 THIS_AD 1389 0.61 1.00 0.43 175 XM_UB99 1376 0.32 1.00 0.00 176 TooManyTo_003 1347 1.47 0.97 1.71 177 TR_XM_DK_SendGrid 1341 0.94 0.97 0.93 178 FORGED_GMAIL_RCVD 1324 0.69 0.96 0.57 179 DATE_IN_PAST_03_06 1316 0.40 0.95 0.14 180 T_Symld_Words_02 1316 0.61 0.95 0.45 181 TR_XM_Base64_L1 1309 0.38 0.95 0.11 182 HTML_FONT_FACE_BAD 1303 0.59 0.94 0.43 183 TooManyTo_004 1291 1.16 0.93 1.27 184 BAYES_05 1271 2.25 0.92 2.87 185 MPART_ALT_DIFF_COUNT 1262 0.71 0.91 0.61 186 TooManyTo_005 1236 1.01 0.89 1.06 187 XMBrknScrpt_02 1227 0.58 0.89 0.44 188 XM_B_Phish66 1213 0.52 0.88 0.36 189 XMSubMetaI_00 1195 0.62 0.86 0.51 190 FILL_THIS_FORM 1176 0.81 0.85 0.80 191 XM_H_Long_From02 1164 0.93 0.84 0.97 192 XM_B_COPY_HTML 1148 0.62 0.83 0.52 193 REMOVE_BEFORE_LINK 1140 0.55 0.82 0.42 194 XM_DrugUnitList 1137 0.26 0.82 0.00 195 FILL_THIS_FORM_LONG 1092 0.57 0.79 0.47 196 XM_S_SpammyWords 1087 0.38 0.79 0.20 197 TR_XM_Spammywords 1086 0.38 0.79 0.20 198 LOADSA_MONEY_COMBO 1083 0.27 0.78 0.03 199 SHOPIFY_IMG_NOT_RCVD_SFY 1080 0.44 0.78 0.28 200 RCVD_IN_IADB_VOUCHED 1067 1.85 0.77 2.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 246374 82.04 79.82 83.07 2 HTML_MESSAGE 245987 86.17 93.09 82.94 3 RELAYCOUNTRY_US 235649 79.87 80.76 79.45 4 DKIM_SIGNED 215086 78.06 89.94 72.52 5 XM_DK_Pass 210833 75.89 86.20 71.09 6 DKIM_VALID 207956 74.90 85.16 70.12 7 DCC_CHECK_NEGATIVE 207196 57.24 30.16 69.86 8 XM_B_Unicode 195655 71.11 82.13 65.97 9 BAYES_50 176108 52.32 37.18 59.38 10 DKIM_VALID_AU 168149 59.47 65.41 56.69 11 XMListUnsubscribeExists 139248 54.81 71.66 46.95 12 XM_B_SpammyWords 121796 50.45 70.59 41.07 13 XM_B_Unicode3 115035 40.26 43.41 38.79 14 T_TM2_M_HEADER_IN_MSG 91044 28.13 22.61 30.70 15 DCC_CHECK 89287 42.73 69.82 30.10 16 DKIM_VALID_EF 86733 29.66 30.55 29.24 17 HTML_FONT_LOW_CONTRAST 75633 28.41 34.65 25.50 18 FVGT_m_MULTI_ODD 73301 27.20 32.52 24.71 19 RCVD_IN_MSPIKE_H2 71937 24.31 24.42 24.25 20 LOC_TINY_FONT_1 69557 28.40 39.02 23.45 21 XMSubLong 66368 22.23 21.90 22.38 22 MIME_HTML_ONLY 57435 23.01 30.83 19.37 23 T_KAM_HTML_FONT_INVALID 56234 22.23 29.24 18.96 24 ALL_TRUSTED 51724 12.37 1.49 17.44 25 XM_B_SpammyWords2 47787 23.24 38.53 16.11 26 TR_XM_DK_Unsub 40669 16.45 22.33 13.71 27 XM_Multi_Part_URI 38307 14.35 17.44 12.92 28 USER_IN_DEF_DKIM_WL 34327 8.72 2.60 11.57 29 UNPARSEABLE_RELAY 28945 10.95 13.50 9.76 30 TooManyTo_001 28637 8.54 6.13 9.66 31 BAYES_60 27891 8.79 7.46 9.40 32 BAYES_00 26885 6.38 0.60 9.06 33 XM_DKIMWhitelistDomains 25442 5.86 0.04 8.58 34 LotsOfNums_01 23633 7.40 6.18 7.97 35 XM_Evil_Numbers_Gen 22384 8.07 9.19 7.55 36 XM_B_Unsub 21829 9.86 15.24 7.36 37 XM_H_GMP 21194 6.35 4.63 7.15 38 IN_ZIMBRA_NJ_WHITELIST 19309 4.47 0.10 6.51 39 TR_MAX_INTL_RELAY 19213 17.95 42.58 6.48 40 TR_XM_DK_Bayes 18519 4.42 0.50 6.24 41 LOTS_OF_MONEY 18491 7.96 11.65 6.23 42 TR_XM_DK_Bayes1 18307 4.37 0.49 6.17 43 T_TooManySym_01 18072 4.99 2.62 6.09 44 TR_XM_BayesUnsub 18019 8.87 14.88 6.08 45 RCVD_IN_MSPIKE_WL 17447 6.73 8.56 5.88 46 RCVD_IN_MSPIKE_H3 17445 6.73 8.56 5.88 47 XM_H_Long_From01 16107 5.50 5.64 5.43 48 TR_XM_DK_Bayes2 15849 3.77 0.38 5.34 49 HTML_IMAGE_RATIO_02 15683 5.94 7.35 5.29 50 XMStrtUSub 15117 4.71 3.89 5.10 51 ANY_BOUNCE_MESSAGE 14899 3.92 1.56 5.02 52 BOUNCE_MESSAGE 14898 3.92 1.56 5.02 53 BAYES_40 14766 3.95 1.75 4.98 54 XM_DK_Undo_02 14681 17.74 45.17 4.95 55 MIME_QP_LONG_LINE 14610 4.18 2.57 4.93 56 XM_PDF 13609 3.28 0.49 4.59 57 XMSubMetaSx_00 13536 5.09 6.21 4.56 58 HTML_IMAGE_RATIO_04 12837 4.78 5.74 4.33 59 BAYES_80 12824 5.55 8.19 4.32 60 RELAYCOUNTRY_META 12701 8.96 19.01 4.28 61 TR_XM_SpammyWords4 12488 6.04 9.96 4.21 62 RCVD_IN_VALIDITY_SAFE 12468 3.94 3.38 4.20 63 XM_UncommonTLD01 12456 5.61 8.62 4.20 64 BAYES_99 12418 14.55 36.77 4.19 65 BOTNET_IPINHOSTNAME 12355 7.06 13.27 4.17 66 RCVD_IN_IADB_LISTED 11776 3.17 1.46 3.97 67 XM_Body_Dirty_Words 11630 5.62 9.25 3.92 68 T_REMOTE_IMAGE 10792 3.06 1.83 3.64 69 XM_B_SpammyWords3 10735 6.47 12.59 3.62 70 RCVD_IN_VALIDITY_CERTIFIED 10722 3.37 2.84 3.62 71 RCVD_IN_IADB_SPF 10584 2.82 1.22 3.57 72 BAYES_20 10425 2.88 1.53 3.51 73 XM_SPF_SoftFail 10137 4.02 5.32 3.42 74 MPART_ALT_DIFF 9967 4.05 5.53 3.36 75 BAYES_999 9680 11.52 29.22 3.26 76 RCVD_IN_IADB_SENDERID 9616 2.57 1.12 3.24 77 MAILING_LIST_MULTI 9587 2.78 1.79 3.23 78 RCVD_IN_IADB_DK 9479 2.54 1.13 3.20 79 T_TooManySym_02 9232 2.37 0.77 3.11 80 XMNumbers 8978 3.94 5.91 3.03 81 XM_B_Phish_Phrases 8977 3.62 4.89 3.03 82 TooManyTo_002 8932 2.41 1.11 3.01 83 FSL_BULK_SIG 8868 4.94 9.12 2.99 84 SCC_BODY_URI_ONLY 8611 2.80 2.57 2.90 85 BAYES_05 8521 2.25 0.92 2.87 86 XM_B_SpammyTLD 7719 3.09 4.13 2.60 87 XM_CamelCaseFrm001 7654 2.64 2.77 2.58 88 DKIM_INVALID 7130 3.16 4.78 2.40 89 INVALID_MSGID 7076 1.70 0.23 2.39 90 HTML_MIME_NO_HTML_TAG 7065 2.19 1.79 2.38 91 RCVD_IN_IADB_VOUCHED 6994 1.85 0.77 2.36 92 BAYES_95 6752 3.33 5.59 2.28 93 MIME_HTML_MOSTLY 6658 2.89 4.27 2.24 94 TO_MALFORMED 6445 1.50 0.04 2.17 95 TR_XM_SpammyRelay 6347 6.38 15.49 2.14 96 XMSexyCombo_05 6039 2.90 4.76 2.04 97 HTML_IMAGE_RATIO_06 5843 2.61 3.97 1.97 98 FROM_EXCESS_BASE64 5766 2.11 2.48 1.94 99 XMGappySubj_01 5691 1.35 0.13 1.92 100 HTML_IMAGE_RATIO_08 5571 2.18 2.82 1.88 101 XM_DK_Undo_01 5562 1.73 1.41 1.88 102 HELO_NODOT 5521 1.47 0.62 1.86 103 HELO_NO_DOMAIN 5518 1.47 0.62 1.86 104 MIME_HTML_ONLY_MULTI 5481 2.26 3.15 1.85 105 T_XMDrugObfuBody_14 5409 2.37 3.54 1.82 106 TVD_RCVD_IP 5386 1.61 1.17 1.82 107 TR_XM_DKIM_Undo 5320 11.98 33.85 1.79 108 TR_Symld_Words 5244 1.65 1.39 1.77 109 TooManyTo_003 5063 1.47 0.97 1.71 110 TM2_M_URI_OPT_OUT 5031 2.10 2.97 1.70 111 UNTRUSTED_Relay 4961 2.97 5.75 1.67 112 SUBJ_ALL_CAPS 4790 1.94 2.64 1.62 113 XMDiploma_00 4568 1.88 2.60 1.54 114 TR_XM_PhishingBody 4554 2.29 3.90 1.54 115 URI_NOVOWEL 4518 1.40 1.13 1.52 116 IN_HORDE_ADDRESS_BOOK 4505 1.06 0.06 1.52 117 XMGappySubj_02 4478 1.05 0.05 1.51 118 RCVD_IN_IADB_OPTIN 4448 1.17 0.46 1.50 119 T_XMDrugObfuBody_08 4303 1.96 3.05 1.45 120 TR_XM_UnparsRelay 4287 3.45 7.77 1.45 121 XM_SendGrid 4193 1.44 1.51 1.41 122 KHOP_HELO_FCRDNS 4189 1.46 1.55 1.41 123 TR_XM_SpammyWords5 4179 2.38 4.45 1.41 124 XM_B_Investor 4085 2.10 3.66 1.38 125 XM_GoogleGroups 3984 1.07 0.47 1.34 126 XMStockSpam_06 3891 1.40 1.58 1.31 127 TVD_SPACE_RATIO 3859 0.95 0.20 1.30 128 XMBody_95 3841 0.93 0.13 1.30 129 XMBSHREFv2 3812 1.02 0.46 1.29 130 TooManyTo_004 3768 1.16 0.93 1.27 131 TM2_M_VERY_LONG_WORD 3602 1.94 3.51 1.21 132 XMCapTrack 3583 0.94 0.38 1.21 133 XM_B_Unsub2 3528 1.44 1.98 1.19 134 XM_OfRef6 3441 2.09 4.07 1.16 135 T_TooManySym_03 3369 0.85 0.25 1.14 136 RELAYCOUNTRY_CA 3348 4.08 10.42 1.13 137 TR_DCC_Bayes_99 3316 8.79 25.24 1.12 138 BOTNET 3198 3.81 9.67 1.08 139 TooManyTo_005 3154 1.01 0.89 1.06 140 XMNoVowels 3080 0.83 0.37 1.04 141 URI_HEX 3018 1.34 2.03 1.02 142 XM_UB50 3018 1.58 2.79 1.02 143 DKIM_ADSP_CUSTOM_MED 2918 1.03 1.13 0.98 144 XM_H_Long_From02 2889 0.93 0.84 0.97 145 URI_TRY_3LD 2798 1.09 1.41 0.94 146 T_FILL_THIS_FORM_SHORT 2773 1.90 3.99 0.93 147 TR_XM_DK_SendGrid 2755 0.94 0.97 0.93 148 RCVD_IN_RP_SAFE 2514 0.80 0.71 0.85 149 SpammyFromTLD_01 2503 2.19 5.07 0.84 150 XM_H_PHPMailer 2450 0.95 1.22 0.83 151 MSGID_NOFQDN1 2429 0.56 0.01 0.82 152 XM_ShortIntro_01 2383 0.73 0.56 0.80 153 XMLngstWrd_00 2381 0.92 1.18 0.80 154 HTTPS_HTTP_MISMATCH 2367 0.95 1.27 0.80 155 FILL_THIS_FORM 2358 0.81 0.85 0.80 156 XMSexyCombo_01 2348 0.93 1.24 0.79 157 RELAYCOUNTRY_AU 2207 1.22 2.24 0.74 158 RCVD_IN_RP_CERTIFIED 2174 0.69 0.60 0.73 159 TR_XM_Base64_M1 2153 0.90 1.28 0.73 160 TR_MetaPhish_Combo_01 2053 0.71 0.74 0.69 161 USER_IN_WELCOMELIST 2045 0.47 0.00 0.69 162 USER_IN_WHITELIST 2045 0.47 0.00 0.69 163 XMGenDplmaNmb 2027 0.82 1.11 0.68 164 XM_B_FormFill 1998 0.48 0.06 0.67 165 XMHTML_After_End 1929 0.79 1.08 0.65 166 XMBdyGiftCard01 1904 0.81 1.17 0.64 167 RCVD_IN_BL_SPAMCOP_NET 1884 3.93 11.00 0.64 168 XM_H_Trusted_IP 1876 0.43 0.00 0.63 169 MPART_ALT_DIFF_COUNT 1819 0.71 0.91 0.61 170 XMBody_17 1819 2.87 7.70 0.61 171 NML_ADSP_CUSTOM_MED 1804 0.64 0.71 0.61 172 XMSubNoVowel 1782 0.54 0.41 0.60 173 XM_ProductURIs 1753 0.57 0.52 0.59 174 XMSubMetaSxObfu_02 1748 0.57 0.52 0.59 175 T_OBFU_PDF_ATTACH 1736 0.43 0.08 0.59 176 SHORT_HELO_AND_INLINE_IMAGE 1713 0.41 0.05 0.58 177 TR_XM_PHPForged 1713 1.75 4.27 0.58 178 XMSexyCombo_04 1709 0.52 0.39 0.58 179 TR_XM_PHPDW 1705 1.75 4.27 0.57 180 TR_XM_FormFill2 1696 1.73 4.21 0.57 181 FORGED_GMAIL_RCVD 1681 0.69 0.96 0.57 182 XM_H_PHPOS 1641 1.71 4.19 0.55 183 HTML_IMAGE_ONLY_20 1633 0.50 0.39 0.55 184 T_XMDrugObfuBody_00 1554 0.71 1.10 0.52 185 XM_B_COPY_HTML 1544 0.62 0.83 0.52 186 XMSubMetaI_00 1512 0.62 0.86 0.51 187 XMPhish30 1507 0.74 1.25 0.51 188 HTML_IMAGE_ONLY_32 1463 0.39 0.16 0.49 189 HTML_IMAGE_ONLY_28 1460 0.41 0.23 0.49 190 T_XMHurry_00 1458 0.78 1.39 0.49 191 TM2_M_BODY_EMPTY 1434 1.01 2.14 0.48 192 FILL_THIS_FORM_LONG 1383 0.57 0.79 0.47 193 RELAYCOUNTRY_GB 1371 0.48 0.52 0.46 194 XMSubMetaSxObfu_03 1359 0.69 1.19 0.46 195 T_Symld_Words_02 1331 0.61 0.95 0.45 196 HTML_IMAGE_ONLY_24 1319 0.38 0.23 0.44 197 XMBrknScrpt_02 1309 0.58 0.89 0.44 198 MISSING_HEADERS 1307 0.43 0.39 0.44 199 T_TooManySym_04 1304 0.34 0.13 0.44 200 RCVD_IN_SORBS_DUL 1296 0.31 0.03 0.44 ----------------------------------------------------------------------