Email: 464161 Autolearn: 0 AvgScore: 3.30 AvgScanTime: 1.41 sec Spam: 129666 Autolearn: 0 AvgScore: 12.63 AvgScanTime: 1.62 sec Ham: 334495 Autolearn: 0 AvgScore: -0.32 AvgScanTime: 1.33 sec Time Spent Running SA: 181.45 hours Time Spent Processing Spam: 58.28 hours Time Spent Processing Ham: 123.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124185 88.41 95.77 85.56 2 DKIM_SIGNED 117799 75.99 90.85 70.23 3 XM_DK_Pass 113213 74.10 87.31 68.98 4 DKIM_VALID 112255 73.22 86.57 68.05 5 RELAYCOUNTRY_US 110107 78.57 84.92 76.11 6 XM_B_Unicode 109367 74.47 84.35 70.65 7 T_SCC_BODY_TEXT_LINE 105135 82.68 81.08 83.30 8 DCC_CHECK 93043 43.43 71.76 32.46 9 XM_B_SpammyWords 91166 49.51 70.31 41.44 10 XMListUnsubscribeExists 90689 52.64 69.94 45.93 11 DKIM_VALID_AU 90416 58.97 69.73 54.79 12 XM_B_Unicode3 63298 41.68 48.82 38.92 13 LOC_TINY_FONT_1 56740 29.40 43.76 23.84 14 XM_DK_Undo_02 54615 16.13 42.12 6.06 15 XM_B_SpammyWords2 53567 23.65 41.31 16.81 16 BAYES_50 52062 53.81 40.15 59.10 17 HTML_FONT_LOW_CONTRAST 50312 30.15 38.80 26.79 18 FVGT_m_MULTI_ODD 44768 27.02 34.53 24.11 19 BAYES_99 44544 13.65 34.35 5.62 20 TR_XM_DKIM_Undo 39149 10.25 30.19 2.52 21 RCVD_IN_MSPIKE_H2 38853 25.82 29.96 24.21 22 DKIM_VALID_EF 37838 28.32 29.18 27.99 23 T_KAM_HTML_FONT_INVALID 37612 21.67 29.01 18.83 24 DCC_CHECK_NEGATIVE 36606 56.53 28.23 67.51 25 BAYES_999 35024 10.84 27.01 4.57 26 MIME_HTML_ONLY 34810 24.23 26.85 23.22 27 TR_DCC_Bayes_99 30975 8.01 23.89 1.85 28 T_TM2_M_HEADER_IN_MSG 30389 25.97 23.44 26.95 29 XMSubLong 30205 22.42 23.29 22.08 30 XM_Multi_Part_URI 26921 15.17 20.76 13.00 31 TR_XM_DK_Unsub 25216 14.65 19.45 12.80 32 XM_B_Unsub 22062 10.95 17.01 8.59 33 TR_XM_BayesUnsub 21203 9.61 16.35 6.99 34 UNPARSEABLE_RELAY 19864 11.22 15.32 9.63 35 BOTNET_IPINHOSTNAME 19380 7.54 14.95 4.66 36 TR_MAX_INTL_RELAY 18802 8.66 14.50 6.40 37 RELAYCOUNTRY_META 18268 6.67 14.09 3.79 38 LOTS_OF_MONEY 18060 8.13 13.93 5.88 39 XM_B_SpammyWords3 16959 6.65 13.08 4.16 40 TR_XM_SpammyWords2 16375 3.97 12.63 0.61 41 TR_XM_SpammyWords4 15676 6.26 12.09 4.00 42 XM_Body_Dirty_Words 12896 5.69 9.95 4.04 43 TR_XM_SpammyRelay 12525 4.23 9.66 2.13 44 XM_Evil_Numbers_Gen 12363 7.37 9.53 6.53 45 BOTNET 12175 3.62 9.39 1.39 46 BAYES_80 11668 5.36 9.00 3.94 47 FSL_BULK_SIG 11089 5.28 8.55 4.01 48 TR_XM_UnparsRelay 10808 3.46 8.34 1.57 49 MPART_ALT_DIFF 10616 5.70 8.19 4.73 50 BAYES_60 10100 8.39 7.79 8.62 51 HTML_IMAGE_RATIO_02 9946 5.62 7.67 4.82 52 LotsOfNums_01 9867 7.93 7.61 8.06 53 XMSubMetaSx_00 9090 5.00 7.01 4.22 54 HTML_IMAGE_RATIO_04 8830 5.20 6.81 4.58 55 RCVD_IN_BL_SPAMCOP_NET 8620 2.36 6.65 0.69 56 TooManyTo_001 8532 7.66 6.58 8.08 57 XM_UncommonTLD01 7739 4.49 5.97 3.91 58 MIME_HTML_MOSTLY 7606 3.44 5.87 2.50 59 RELAYCOUNTRY_CA 7266 2.34 5.60 1.07 60 XM_H_Long_From01 7147 5.15 5.51 5.01 61 UNTRUSTED_Relay 7139 2.49 5.51 1.32 62 XMSexyCombo_05 7014 2.93 5.41 1.97 63 XM_B_Phish_Phrases 6918 3.73 5.34 3.10 64 XM_H_GMP 6838 6.07 5.27 6.38 65 BAYES_95 6558 3.18 5.06 2.45 66 TR_XM_PhishingBody 6251 2.48 4.82 1.58 67 XM_B_Investor 6195 2.48 4.78 1.59 68 XM_SPF_SoftFail 6047 5.04 4.66 5.19 69 DKIM_INVALID 5544 2.77 4.28 2.18 70 HTML_IMAGE_RATIO_06 5489 2.76 4.23 2.19 71 XM_OfRef6 5404 2.06 4.17 1.24 72 T_XMDrugObfuBody_14 5269 2.25 4.06 1.55 73 XMBody_17 5266 1.51 4.06 0.53 74 T_XMDrugObfuBody_08 5189 2.13 4.00 1.41 75 TM2_M_URI_OPT_OUT 5064 3.08 3.91 2.77 76 TR_XM_SpammyWords5 4992 1.80 3.85 1.01 77 MIME_HTML_ONLY_MULTI 4951 3.20 3.82 2.96 78 TR_XM_SPAMCOP 4918 1.30 3.79 0.33 79 XM_B_SpammyTLD 4882 3.06 3.77 2.79 80 XMStrtUSub 4767 4.03 3.68 4.16 81 XMNumbers 4195 2.57 3.24 2.31 82 RCVD_IN_VALIDITY_SAFE 4147 3.70 3.20 3.89 83 XM_CamelCaseFrm001 4069 2.39 3.14 2.10 84 TM2_M_VERY_LONG_WORD 4062 1.87 3.13 1.37 85 HTML_IMAGE_RATIO_08 4027 2.30 3.11 1.99 86 MIME_QP_LONG_LINE 3852 4.46 2.97 5.04 87 FROM_EXCESS_BASE64 3747 1.94 2.89 1.57 88 XM_B_SpammyWords4 3632 1.30 2.80 0.72 89 USER_IN_DEF_DKIM_WL 3560 8.77 2.75 11.11 90 XM_URI_RBL 3425 0.86 2.64 0.17 91 SUBJ_ALL_CAPS 3413 1.77 2.63 1.44 92 XM_UB50 3344 1.29 2.58 0.79 93 RELAYCOUNTRY_AU 3337 1.25 2.57 0.74 94 XMDiploma_00 3323 1.61 2.56 1.24 95 RCVD_IN_MSPIKE_WL 3322 4.85 2.56 5.74 96 RCVD_IN_MSPIKE_H3 3322 4.85 2.56 5.74 97 TR_LOTS_OF_MONEY3 3293 0.91 2.54 0.28 98 XM_B_Unsub2 3285 1.66 2.53 1.32 99 RCVD_IN_VALIDITY_CERTIFIED 3284 3.22 2.53 3.49 100 SpammyFromTLD_02 3276 1.30 2.53 0.83 101 T_TooManySym_01 3207 4.39 2.47 5.13 102 TR_XM_PHPForged 2981 0.95 2.30 0.43 103 TR_XM_PHPDW 2893 0.92 2.23 0.41 104 TR_XM_FormFill2 2835 0.91 2.19 0.42 105 XM_H_PHPOS 2810 0.89 2.17 0.40 106 MAILING_LIST_MULTI 2455 2.40 1.89 2.60 107 TR_XM_NoHeaderRelay 2447 0.60 1.89 0.10 108 XMStockSpam_06 2418 1.33 1.86 1.13 109 SpammyFromTLD_01 2384 1.10 1.84 0.81 110 ANY_BOUNCE_MESSAGE 2328 4.05 1.80 4.92 111 BOUNCE_MESSAGE 2326 4.05 1.79 4.92 112 T_REMOTE_IMAGE 2308 2.97 1.78 3.43 113 XM_H_Long_From02 2254 1.27 1.74 1.09 114 XM_SendGrid 2195 1.47 1.69 1.38 115 HTTPS_HTTP_MISMATCH 2176 0.98 1.68 0.71 116 XM_DK_Undo_01 2129 1.76 1.64 1.80 117 XM_H_Undi_Recip 2113 0.54 1.63 0.12 118 URI_HEX 2102 1.22 1.62 1.07 119 ALL_TRUSTED 2090 15.46 1.61 20.83 120 XMPhish30 2024 0.90 1.56 0.65 121 HTML_MIME_NO_HTML_TAG 1964 1.95 1.51 2.12 122 XM_HighProb1 1963 0.42 1.51 0.00 123 T_FILL_THIS_FORM_SHORT 1952 1.08 1.51 0.92 124 RCVD_IN_IADB_LISTED 1949 3.46 1.50 4.22 125 TR_XM_INV_DKIM 1942 0.45 1.50 0.05 126 AC_BR_BONANZA 1941 0.46 1.50 0.05 127 HTML_TAG_BALANCE_BODY 1939 0.66 1.50 0.34 128 TR_XM_Undi_Recip19 1913 0.46 1.48 0.06 129 BAYES_40 1900 3.97 1.47 4.94 130 T_XMDrugObfuBody_00 1875 0.77 1.45 0.51 131 KHOP_HELO_FCRDNS 1863 1.14 1.44 1.02 132 XM_DIRTYINTL 1820 0.53 1.40 0.20 133 XMBrknScrpt_02 1760 0.77 1.36 0.55 134 XMBdyGiftCard01 1750 0.80 1.35 0.58 135 RCVD_IN_IADB_SPF 1736 3.09 1.34 3.77 136 T_XMHurry_00 1697 0.62 1.31 0.35 137 XMGenDplmaNmb 1684 0.79 1.30 0.60 138 XM_B_Phish66 1663 0.58 1.28 0.31 139 URI_TRY_3LD 1658 0.82 1.28 0.65 140 XMSexyCombo_01 1647 0.51 1.27 0.21 141 RCVD_IN_IADB_DK 1646 2.78 1.27 3.37 142 RCVD_IN_IADB_SENDERID 1631 2.83 1.26 3.44 143 TR_XM_Undi_RecipCombo2 1627 0.35 1.25 0.00 144 RELAYCOUNTRY_GB 1618 0.75 1.25 0.55 145 RDNS_DYNAMIC 1615 0.64 1.25 0.41 146 URI_NOVOWEL 1608 1.50 1.24 1.61 147 RELAYCOUNTRY_DE 1585 0.58 1.22 0.33 148 MPART_ALT_DIFF_COUNT 1579 0.73 1.22 0.55 149 SCC_BODY_URI_ONLY 1568 2.31 1.21 2.73 150 TR_Caps_n_Bayes_99 1518 0.34 1.17 0.02 151 TM2_M_OBFU_COMMENT 1510 0.51 1.16 0.25 152 BOTNET_NORDNS 1504 0.33 1.16 0.01 153 XM_UB99 1459 0.32 1.13 0.00 154 XMReplyNow 1457 0.48 1.12 0.23 155 TR_XM_Base64_M1 1448 0.74 1.12 0.60 156 DKIM_ADSP_CUSTOM_MED 1439 1.07 1.11 1.06 157 TR_MetaPhish_Combo_01 1421 0.75 1.10 0.61 158 RCVD_IN_PSBL 1403 0.50 1.08 0.27 159 TR_Symld_Words 1393 1.38 1.07 1.50 160 TR_XM_DK_SendGrid 1383 0.97 1.07 0.94 161 TooManyTo_002 1378 1.98 1.06 2.33 162 XM_H_PHPMailer 1374 0.79 1.06 0.69 163 BAYES_20 1371 3.05 1.06 3.82 164 TR_XM_Spammywords 1313 0.56 1.01 0.38 165 XM_S_SpammyWords 1313 0.56 1.01 0.38 166 XM_B_COPY_HTML 1301 0.70 1.00 0.59 167 XM_B_DNDMA 1282 0.54 0.99 0.36 168 XMPhish14 1255 0.52 0.97 0.35 169 XM_B_SEO 1237 0.35 0.95 0.12 170 TooManyTo_003 1230 1.26 0.95 1.38 171 TR_XM_Undi_Recip5 1216 0.26 0.94 0.00 172 DIET_1 1203 0.85 0.93 0.82 173 UNDISC_MONEY 1201 0.26 0.93 0.00 174 TR_Mismatch_TLD_01 1200 0.46 0.93 0.28 175 TR_Sbj_FN_Bdy 1199 0.38 0.92 0.17 176 XMBody_78 1193 0.46 0.92 0.29 177 XM_ProductURIs 1192 1.13 0.92 1.22 178 NML_ADSP_CUSTOM_MED 1173 0.82 0.90 0.78 179 TooManyTo_004 1171 0.99 0.90 1.02 180 RCVD_IN_VALIDITY_RPBL 1165 0.29 0.90 0.05 181 TR_XM_Base64_L1 1158 0.34 0.89 0.13 182 XMSubMetaSxObfu_03 1157 0.55 0.89 0.42 183 TR_XM_Undi_Recip11 1151 0.26 0.89 0.02 184 XM_Nigeria_01 1146 0.29 0.88 0.06 185 SHOPIFY_IMG_NOT_RCVD_SFY 1146 0.47 0.88 0.31 186 T_HTML_ATTACH 1121 0.32 0.86 0.10 187 TVD_RCVD_IP 1114 1.35 0.86 1.54 188 FORGED_GMAIL_RCVD 1092 0.68 0.84 0.62 189 TM2_M_A_HREF_HREF 1090 0.40 0.84 0.23 190 TooManyTo_005 1086 0.83 0.84 0.82 191 XM_UB999 1068 0.23 0.82 0.00 192 TR_Mismatch_TLD_02 1063 0.27 0.82 0.06 193 T_MONEY_PERCENT 1059 0.35 0.82 0.17 194 TR_LOTS_OF_MONEY2 1059 0.35 0.82 0.17 195 XM_B_COVIDMETA 1049 0.36 0.81 0.19 196 XMHTML_After_End 1046 0.65 0.81 0.59 197 THIS_AD 1046 0.38 0.81 0.21 198 XM_OfRef7 1040 0.37 0.80 0.20 199 MultiRelay_CC 1037 0.25 0.80 0.04 200 XMSubMetaI_00 1030 0.61 0.79 0.54 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286199 88.41 95.77 85.56 2 T_SCC_BODY_TEXT_LINE 278646 82.68 81.08 83.30 3 RELAYCOUNTRY_US 254597 78.57 84.92 76.11 4 XM_B_Unicode 236316 74.47 84.35 70.65 5 DKIM_SIGNED 234927 75.99 90.85 70.23 6 XM_DK_Pass 230744 74.10 87.31 68.98 7 DKIM_VALID 227621 73.22 86.57 68.05 8 DCC_CHECK_NEGATIVE 225803 56.53 28.23 67.51 9 BAYES_50 197696 53.81 40.15 59.10 10 DKIM_VALID_AU 183286 58.97 69.73 54.79 11 XMListUnsubscribeExists 153628 52.64 69.94 45.93 12 XM_B_SpammyWords 138617 49.51 70.31 41.44 13 XM_B_Unicode3 130172 41.68 48.82 38.92 14 DCC_CHECK 108563 43.43 71.76 32.46 15 DKIM_VALID_EF 93632 28.32 29.18 27.99 16 T_TM2_M_HEADER_IN_MSG 90134 25.97 23.44 26.95 17 HTML_FONT_LOW_CONTRAST 89626 30.15 38.80 26.79 18 RCVD_IN_MSPIKE_H2 80995 25.82 29.96 24.21 19 FVGT_m_MULTI_ODD 80647 27.02 34.53 24.11 20 LOC_TINY_FONT_1 79730 29.40 43.76 23.84 21 MIME_HTML_ONLY 77660 24.23 26.85 23.22 22 XMSubLong 73860 22.42 23.29 22.08 23 ALL_TRUSTED 69665 15.46 1.61 20.83 24 T_KAM_HTML_FONT_INVALID 62987 21.67 29.01 18.83 25 XM_B_SpammyWords2 56216 23.65 41.31 16.81 26 XM_Multi_Part_URI 43494 15.17 20.76 13.00 27 TR_XM_DK_Unsub 42802 14.65 19.45 12.80 28 USER_IN_DEF_DKIM_WL 37157 8.77 2.75 11.11 29 UNPARSEABLE_RELAY 32207 11.22 15.32 9.63 30 BAYES_00 29009 6.41 0.59 8.67 31 BAYES_60 28821 8.39 7.79 8.62 32 XM_B_Unsub 28746 10.95 17.01 8.59 33 XM_DKIMWhitelistDomains 28009 6.06 0.10 8.37 34 TooManyTo_001 27024 7.66 6.58 8.08 35 LotsOfNums_01 26963 7.93 7.61 8.06 36 TR_XM_BayesUnsub 23388 9.61 16.35 6.99 37 XM_Evil_Numbers_Gen 21848 7.37 9.53 6.53 38 IN_ZIMBRA_NJ_WHITELIST 21739 4.70 0.07 6.50 39 TR_MAX_INTL_RELAY 21397 8.66 14.50 6.40 40 XM_H_GMP 21356 6.07 5.27 6.38 41 XM_DK_Undo_02 20256 16.13 42.12 6.06 42 TR_XM_DK_Bayes 19931 4.39 0.35 5.96 43 TR_XM_DK_Bayes1 19708 4.34 0.35 5.89 44 LOTS_OF_MONEY 19659 8.13 13.93 5.88 45 RCVD_IN_MSPIKE_H3 19195 4.85 2.56 5.74 46 RCVD_IN_MSPIKE_WL 19195 4.85 2.56 5.74 47 BAYES_99 18814 13.65 34.35 5.62 48 XM_SPF_SoftFail 17358 5.04 4.66 5.19 49 T_TooManySym_01 17154 4.39 2.47 5.13 50 TR_XM_DK_Bayes2 16964 3.72 0.22 5.07 51 MIME_QP_LONG_LINE 16843 4.46 2.97 5.04 52 XM_H_Long_From01 16759 5.15 5.51 5.01 53 BAYES_40 16514 3.97 1.47 4.94 54 ANY_BOUNCE_MESSAGE 16461 4.05 1.80 4.92 55 BOUNCE_MESSAGE 16461 4.05 1.79 4.92 56 HTML_IMAGE_RATIO_02 16122 5.62 7.67 4.82 57 MPART_ALT_DIFF 15837 5.70 8.19 4.73 58 MIME_HEADER_CTYPE_ONLY 15615 3.38 0.06 4.67 59 BOTNET_IPINHOSTNAME 15596 7.54 14.95 4.66 60 HTML_IMAGE_RATIO_04 15308 5.20 6.81 4.58 61 BAYES_999 15287 10.84 27.01 4.57 62 XM_PDF 14712 3.34 0.61 4.40 63 RCVD_IN_IADB_LISTED 14126 3.46 1.50 4.22 64 XMSubMetaSx_00 14116 5.00 7.01 4.22 65 XMStrtUSub 13931 4.03 3.68 4.16 66 XM_B_SpammyWords3 13920 6.65 13.08 4.16 67 XM_Body_Dirty_Words 13507 5.69 9.95 4.04 68 FSL_BULK_SIG 13410 5.28 8.55 4.01 69 TR_XM_SpammyWords4 13365 6.26 12.09 4.00 70 BAYES_80 13190 5.36 9.00 3.94 71 XM_UncommonTLD01 13087 4.49 5.97 3.91 72 RCVD_IN_VALIDITY_SAFE 13016 3.70 3.20 3.89 73 BAYES_20 12766 3.05 1.06 3.82 74 RELAYCOUNTRY_META 12685 6.67 14.09 3.79 75 RCVD_IN_IADB_SPF 12627 3.09 1.34 3.77 76 RCVD_IN_VALIDITY_CERTIFIED 11668 3.22 2.53 3.49 77 RCVD_IN_IADB_SENDERID 11512 2.83 1.26 3.44 78 T_REMOTE_IMAGE 11471 2.97 1.78 3.43 79 RCVD_IN_IADB_DK 11260 2.78 1.27 3.37 80 XM_B_Phish_Phrases 10385 3.73 5.34 3.10 81 MIME_HTML_ONLY_MULTI 9896 3.20 3.82 2.96 82 BAYES_05 9480 2.19 0.54 2.83 83 XM_B_SpammyTLD 9335 3.06 3.77 2.79 84 TM2_M_URI_OPT_OUT 9254 3.08 3.91 2.77 85 SCC_BODY_URI_ONLY 9134 2.31 1.21 2.73 86 T_TooManySym_02 8794 2.09 0.70 2.63 87 MAILING_LIST_MULTI 8705 2.40 1.89 2.60 88 TR_XM_DKIM_Undo 8419 10.25 30.19 2.52 89 RCVD_IN_IADB_VOUCHED 8399 2.00 0.68 2.51 90 MIME_HTML_MOSTLY 8370 3.44 5.87 2.50 91 BAYES_95 8204 3.18 5.06 2.45 92 TooManyTo_002 7795 1.98 1.06 2.33 93 XMNumbers 7723 2.57 3.24 2.31 94 HTML_IMAGE_RATIO_06 7312 2.76 4.23 2.19 95 DKIM_INVALID 7306 2.77 4.28 2.18 96 INVALID_MSGID 7135 1.59 0.18 2.13 97 TR_XM_SpammyRelay 7117 4.23 9.66 2.13 98 HTML_MIME_NO_HTML_TAG 7083 1.95 1.51 2.12 99 XM_CamelCaseFrm001 7022 2.39 3.14 2.10 100 HTML_IMAGE_RATIO_08 6657 2.30 3.11 1.99 101 XMSexyCombo_05 6580 2.93 5.41 1.97 102 TO_MALFORMED 6270 1.35 0.01 1.87 103 TR_DCC_Bayes_99 6202 8.01 23.89 1.85 104 XM_DK_Undo_01 6018 1.76 1.64 1.80 105 XM_H_Trusted_IP 5732 1.23 0.00 1.71 106 HELO_NODOT 5471 1.34 0.59 1.64 107 HELO_NO_DOMAIN 5467 1.34 0.58 1.63 108 RCVD_IN_IADB_OPTIN 5378 1.27 0.40 1.61 109 URI_NOVOWEL 5376 1.50 1.24 1.61 110 XM_B_Investor 5321 2.48 4.78 1.59 111 TR_XM_PhishingBody 5280 2.48 4.82 1.58 112 TR_XM_UnparsRelay 5252 3.46 8.34 1.57 113 FROM_EXCESS_BASE64 5247 1.94 2.89 1.57 114 T_XMDrugObfuBody_14 5194 2.25 4.06 1.55 115 TVD_RCVD_IP 5151 1.35 0.86 1.54 116 TR_Symld_Words 5022 1.38 1.07 1.50 117 IN_HORDE_ADDRESS_BOOK 5003 1.10 0.07 1.50 118 SUBJ_ALL_CAPS 4809 1.77 2.63 1.44 119 XMGappySubj_01 4797 1.06 0.10 1.43 120 T_XMDrugObfuBody_08 4710 2.13 4.00 1.41 121 BOTNET 4647 3.62 9.39 1.39 122 XM_SendGrid 4621 1.47 1.69 1.38 123 TooManyTo_003 4612 1.26 0.95 1.38 124 TM2_M_VERY_LONG_WORD 4597 1.87 3.13 1.37 125 XM_B_Unsub2 4428 1.66 2.53 1.32 126 UNTRUSTED_Relay 4421 2.49 5.51 1.32 127 XM_OfRef6 4159 2.06 4.17 1.24 128 XMDiploma_00 4147 1.61 2.56 1.24 129 XM_GoogleGroups 4134 1.04 0.53 1.24 130 XM_ProductURIs 4068 1.13 0.92 1.22 131 XMBody_95 3966 0.90 0.15 1.19 132 XMStockSpam_06 3774 1.33 1.86 1.13 133 XMBSHREFv2 3772 0.89 0.29 1.13 134 XM_H_Long_From02 3646 1.27 1.74 1.09 135 XMSubNoVowel 3637 0.94 0.56 1.09 136 TVD_SPACE_RATIO 3599 0.81 0.13 1.08 137 RELAYCOUNTRY_CA 3588 2.34 5.60 1.07 138 URI_HEX 3565 1.22 1.62 1.07 139 DKIM_ADSP_CUSTOM_MED 3544 1.07 1.11 1.06 140 TooManyTo_004 3428 0.99 0.90 1.02 141 KHOP_HELO_FCRDNS 3407 1.14 1.44 1.02 142 XMCapTrack 3381 0.85 0.43 1.01 143 TR_XM_SpammyWords5 3368 1.80 3.85 1.01 144 TR_XM_DK_SendGrid 3129 0.97 1.07 0.94 145 FROM_GOV_DKIM_AU 3104 0.71 0.14 0.93 146 T_TooManySym_03 3068 0.75 0.32 0.92 147 T_FILL_THIS_FORM_SHORT 3062 1.08 1.51 0.92 148 SpammyFromTLD_02 2762 1.30 2.53 0.83 149 DIET_1 2753 0.85 0.93 0.82 150 TooManyTo_005 2747 0.83 0.84 0.82 151 SpammyFromTLD_01 2723 1.10 1.84 0.81 152 RCVD_IN_RP_SAFE 2689 0.74 0.58 0.80 153 XM_UB50 2640 1.29 2.58 0.79 154 NML_ADSP_CUSTOM_MED 2613 0.82 0.90 0.78 155 XMGappySubj_02 2532 0.56 0.05 0.76 156 RELAYCOUNTRY_AU 2477 1.25 2.57 0.74 157 XM_B_SpammyWords4 2412 1.30 2.80 0.72 158 MSGID_NOFQDN1 2411 0.52 0.01 0.72 159 RCVD_IN_RP_CERTIFIED 2399 0.65 0.46 0.72 160 HTTPS_HTTP_MISMATCH 2377 0.98 1.68 0.71 161 RCVD_IN_BL_SPAMCOP_NET 2320 2.36 6.65 0.69 162 XM_H_PHPMailer 2308 0.79 1.06 0.69 163 T_OBFU_PDF_ATTACH 2189 0.50 0.11 0.65 164 XMPhish30 2176 0.90 1.56 0.65 165 TVD_SPACE_RATIO_MINFP 2164 0.50 0.11 0.65 166 URI_TRY_3LD 2161 0.82 1.28 0.65 167 XM_ShortIntro_01 2160 0.59 0.45 0.65 168 FORGED_GMAIL_RCVD 2081 0.68 0.84 0.62 169 TR_MetaPhish_Combo_01 2050 0.75 1.10 0.61 170 TR_XM_SpammyWords2 2038 3.97 12.63 0.61 171 XMGenDplmaNmb 2004 0.79 1.30 0.60 172 TR_XM_Base64_M1 1997 0.74 1.12 0.60 173 USER_IN_WELCOMELIST 1990 0.43 0.00 0.59 174 USER_IN_WHITELIST 1990 0.43 0.00 0.59 175 XMNoVowels 1968 0.57 0.52 0.59 176 XM_B_COPY_HTML 1968 0.70 1.00 0.59 177 XMHTML_After_End 1964 0.65 0.81 0.59 178 XMBdyGiftCard01 1945 0.80 1.35 0.58 179 XMLngstWrd_00 1909 0.63 0.77 0.57 180 XM_RXBody 1883 0.58 0.64 0.56 181 RELAYCOUNTRY_GB 1842 0.75 1.25 0.55 182 T_Symld_Words_02 1832 0.61 0.77 0.55 183 MPART_ALT_DIFF_COUNT 1831 0.73 1.22 0.55 184 XMBrknScrpt_02 1827 0.77 1.36 0.55 185 XMSubMetaI_00 1804 0.61 0.79 0.54 186 XMBody_17 1764 1.51 4.06 0.53 187 T_XMDrugObfuBody_00 1722 0.77 1.45 0.51 188 FILL_THIS_FORM 1696 0.46 0.34 0.51 189 XMSolicitRefs_0 1642 0.50 0.52 0.49 190 XMAntiAgingB 1629 0.36 0.03 0.49 191 SHORT_HELO_AND_INLINE_IMAGE 1622 0.36 0.03 0.48 192 XMSubMetaSxObfu_02 1439 0.42 0.40 0.43 193 TR_XM_PHPForged 1434 0.95 2.30 0.43 194 TR_XM_FormFill2 1409 0.91 2.19 0.42 195 XMSubMetaSxObfu_03 1397 0.55 0.89 0.42 196 TR_XM_PHPDW 1387 0.92 2.23 0.41 197 RDNS_DYNAMIC 1361 0.64 1.25 0.41 198 HTML_IMAGE_ONLY_28 1347 0.35 0.22 0.40 199 XM_H_PHPOS 1343 0.89 2.17 0.40 200 HTML_IMAGE_ONLY_20 1325 0.38 0.33 0.40 ----------------------------------------------------------------------