Email: 556535 Autolearn: 0 AvgScore: 3.92 AvgScanTime: 1.24 sec Spam: 168040 Autolearn: 0 AvgScore: 13.18 AvgScanTime: 1.37 sec Ham: 388495 Autolearn: 0 AvgScore: -0.09 AvgScanTime: 1.18 sec Time Spent Running SA: 191.28 hours Time Spent Processing Spam: 64.16 hours Time Spent Processing Ham: 127.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 154754 75.27 92.09 67.99 2 HTML_MESSAGE 153721 87.86 91.48 86.29 3 XM_DK_Pass 146643 72.92 87.27 66.72 4 DKIM_VALID 144562 71.94 86.03 65.84 5 XM_B_Unicode 134847 69.78 80.25 65.26 6 RELAYCOUNTRY_US 133953 75.96 79.71 74.34 7 T_SCC_BODY_TEXT_LINE 128687 81.27 76.58 83.29 8 XMListUnsubscribeExists 124602 53.67 74.15 44.82 9 XM_B_SpammyWords 116280 54.11 69.20 47.59 10 DCC_CHECK 114501 41.36 68.14 29.78 11 DKIM_VALID_AU 108671 56.05 64.67 52.32 12 XM_B_Unicode3 76618 39.17 45.60 36.39 13 XM_DK_Undo_02 68988 16.19 41.05 5.43 14 XM_B_SpammyWords2 67953 24.86 40.44 18.12 15 LOC_TINY_FONT_1 63819 26.81 37.98 21.97 16 BAYES_50 61099 51.86 36.36 58.57 17 HTML_FONT_LOW_CONTRAST 57269 27.46 34.08 24.60 18 BAYES_99 54929 13.29 32.69 4.91 19 DCC_CHECK_NEGATIVE 53517 58.61 31.85 70.18 20 TR_XM_DKIM_Undo 52429 10.99 31.20 2.25 21 FVGT_m_MULTI_ODD 51554 25.86 30.68 23.78 22 MIME_HTML_ONLY 50417 24.83 30.00 22.59 23 DKIM_VALID_EF 48813 26.98 29.05 26.09 24 T_KAM_HTML_FONT_INVALID 45251 22.07 26.93 19.97 25 RCVD_IN_MSPIKE_H2 44778 24.54 26.65 23.63 26 BAYES_999 42313 10.20 25.18 3.72 27 XMSubLong 41755 22.35 24.85 21.27 28 TR_DCC_Bayes_99 37677 7.87 22.42 1.57 29 TR_XM_DK_Unsub 37056 15.25 22.05 12.31 30 T_TM2_M_HEADER_IN_MSG 36962 26.99 22.00 29.15 31 RELAYCOUNTRY_META 34724 9.05 20.66 4.03 32 XM_Multi_Part_URI 31789 18.81 18.92 18.77 33 TR_XM_SpammyRelay 28108 6.48 16.73 2.05 34 TR_MAX_INTL_RELAY 26056 9.71 15.51 7.21 35 XM_B_Unsub 25101 9.81 14.94 7.60 36 TR_XM_BayesUnsub 24079 8.51 14.33 5.99 37 LOTS_OF_MONEY 22835 9.08 13.59 7.13 38 XM_B_SpammyWords3 22754 7.00 13.54 4.16 39 UNPARSEABLE_RELAY 22199 10.42 13.21 9.21 40 BOTNET_IPINHOSTNAME 22017 6.72 13.10 3.97 41 TR_XM_SpammyWords2 21494 4.25 12.79 0.56 42 TR_XM_SpammyWords4 20458 7.31 12.17 5.21 43 XM_UncommonTLD01 20170 6.08 12.00 3.52 44 RCVD_IN_BL_SPAMCOP_NET 18657 3.76 11.10 0.59 45 RELAYCOUNTRY_CA 18016 4.02 10.72 1.12 46 XMNumbers 16662 4.65 9.92 2.37 47 XM_Body_Dirty_Words 16204 5.41 9.64 3.58 48 TR_XM_SPAMCOP 15334 2.94 9.13 0.27 49 BAYES_80 15237 5.77 9.07 4.34 50 XM_Evil_Numbers_Gen 15016 7.60 8.94 7.03 51 BOTNET 14947 3.54 8.89 1.22 52 RCVD_IN_MSPIKE_WL 13685 6.34 8.14 5.56 53 RCVD_IN_MSPIKE_H3 13685 6.34 8.14 5.56 54 SpammyFromTLD_01 13580 3.02 8.08 0.83 55 FSL_BULK_SIG 12608 4.32 7.50 2.94 56 TR_XM_UnparsRelay 12606 3.23 7.50 1.38 57 BAYES_60 12596 9.18 7.50 9.91 58 LotsOfNums_01 12448 7.50 7.41 7.53 59 TR_XM_PHPForged 12076 2.61 7.19 0.64 60 TR_XM_PHPDW 11957 2.59 7.12 0.64 61 TR_XM_FormFill2 11905 2.59 7.08 0.64 62 XM_H_PHPOS 11893 2.57 7.08 0.62 63 XM_SPF_SoftFail 11737 4.29 6.98 3.13 64 XMSubMetaSx_00 11597 4.60 6.90 3.61 65 HTML_IMAGE_RATIO_02 11326 5.11 6.74 4.40 66 DKIM_INVALID 10192 3.33 6.07 2.14 67 TM2_M_BODY_EMPTY 9756 2.03 5.81 0.40 68 XMEmptyBody_01 9662 1.81 5.75 0.10 69 MPART_ALT_DIFF 9435 4.41 5.61 3.89 70 UNTRUSTED_Relay 9430 2.65 5.61 1.37 71 BAYES_95 9375 3.68 5.58 2.86 72 SCC_BODY_URI_ONLY 9164 3.36 5.45 2.45 73 TooManyTo_001 8868 7.36 5.28 8.26 74 XM_B_Phish_Phrases 8842 4.00 5.26 3.45 75 XMSexyCombo_05 8828 2.55 5.25 1.38 76 HTML_IMAGE_RATIO_04 8632 4.23 5.14 3.84 77 XMBody_17 8221 1.87 4.89 0.56 78 XM_H_Long_From01 7996 4.89 4.76 4.95 79 XM_B_Investor 7589 2.51 4.52 1.64 80 TR_XM_SpammyWords5 7562 2.18 4.50 1.18 81 MIME_HTML_MOSTLY 6973 2.83 4.15 2.26 82 XM_H_GMP 6930 5.48 4.12 6.07 83 HTML_IMAGE_RATIO_06 6859 3.21 4.08 2.83 84 TR_XM_PhishingBody 6389 2.16 3.80 1.45 85 T_XMDrugObfuBody_14 6285 2.29 3.74 1.66 86 XM_B_SpammyTLD 5968 3.13 3.55 2.95 87 TM2_M_URI_OPT_OUT 5951 2.42 3.54 1.94 88 T_FILL_THIS_FORM_SHORT 5948 1.83 3.54 1.09 89 MIME_QP_LONG_LINE 5874 4.31 3.50 4.66 90 XM_OfRef6 5707 1.82 3.40 1.14 91 BAYES_40 5702 4.29 3.39 4.68 92 BAYES_20 5598 3.21 3.33 3.15 93 TM2_M_VERY_LONG_WORD 5386 1.76 3.21 1.14 94 MIME_HTML_ONLY_MULTI 5356 2.51 3.19 2.21 95 XMStrtUSub 5216 3.74 3.10 4.01 96 HTML_IMAGE_RATIO_08 5145 2.60 3.06 2.41 97 T_XMDrugObfuBody_08 4725 1.79 2.81 1.35 98 XM_CamelCaseFrm001 4579 2.24 2.72 2.04 99 HK_RANDOM_REPLYTO 4276 0.83 2.54 0.09 100 XMDiploma_00 4230 1.80 2.52 1.49 101 TR_LOTS_OF_MONEY3 4198 1.00 2.50 0.35 102 TR_XM_NoHeaderRelay 4184 0.84 2.49 0.13 103 T_TooManySym_01 4142 4.52 2.46 5.41 104 XM_URI_RBL 4123 0.86 2.45 0.17 105 XM_B_SpammyWords4 4077 1.27 2.43 0.77 106 XM_UB50 4062 1.29 2.42 0.81 107 ANY_BOUNCE_MESSAGE 3961 4.10 2.36 4.86 108 TR_XM_BayesRelay 3961 0.71 2.36 0.00 109 BOUNCE_MESSAGE 3959 4.10 2.36 4.86 110 XM_B_Unsub2 3894 1.73 2.32 1.48 111 USER_IN_DEF_DKIM_WL 3868 8.12 2.30 10.64 112 RCVD_IN_VALIDITY_SAFE 3838 3.25 2.28 3.66 113 RELAYCOUNTRY_AU 3674 1.10 2.19 0.64 114 FONT_INVIS_LONG_LINE 3653 0.68 2.17 0.03 115 XM_DIRTYINTL 3525 0.78 2.10 0.21 116 TR_XM_FormFill 3492 0.64 2.08 0.02 117 HTML_MIME_NO_HTML_TAG 3381 1.96 2.01 1.94 118 TR_XM_INV_DKIM 3317 0.63 1.97 0.05 119 SUBJ_ALL_CAPS 3300 1.55 1.96 1.37 120 FROM_EXCESS_BASE64 3228 1.78 1.92 1.72 121 RCVD_IN_VALIDITY_CERTIFIED 3205 2.84 1.91 3.24 122 XMBrknScrpt_02 3171 0.95 1.89 0.54 123 URI_HEX 3036 1.24 1.81 0.99 124 T_REMOTE_IMAGE 2985 2.90 1.78 3.39 125 MAILING_LIST_MULTI 2908 2.62 1.73 3.00 126 XM_H_Long_From02 2819 1.28 1.68 1.11 127 RELAYCOUNTRY_RU 2803 0.54 1.67 0.05 128 RCVD_IN_IADB_LISTED 2770 3.46 1.65 4.25 129 ALL_TRUSTED 2754 16.38 1.64 22.76 130 XM_SendGrid 2693 1.44 1.60 1.37 131 XMStockSpam_06 2564 0.96 1.53 0.71 132 RCVD_IN_VALIDITY_RPBL 2559 0.49 1.52 0.05 133 T_XMHurry_00 2559 0.74 1.52 0.40 134 SpammyFromTLD_02 2548 0.76 1.52 0.43 135 XM_DK_Undo_01 2539 1.71 1.51 1.79 136 RCVD_IN_IADB_SPF 2477 3.07 1.47 3.76 137 BAYES_05 2452 2.18 1.46 2.49 138 XMReplyNow 2445 0.60 1.46 0.23 139 URI_NOVOWEL 2418 1.56 1.44 1.61 140 RCVD_IN_IADB_SENDERID 2359 2.79 1.40 3.38 141 RCVD_IN_IADB_DK 2354 2.72 1.40 3.29 142 XM_HighProb1 2256 0.41 1.34 0.00 143 URI_TRY_3LD 2197 0.85 1.31 0.65 144 HTTPS_HTTP_MISMATCH 2185 1.04 1.30 0.92 145 XMPhish30 2169 0.62 1.29 0.34 146 XMBdyGiftCard01 2159 0.77 1.28 0.55 147 XMGenDplmaNmb 2156 0.99 1.28 0.86 148 XMHTML_After_End 2128 0.72 1.27 0.48 149 T_XMDrugObfuBody_00 2088 0.88 1.24 0.73 150 HTML_TAG_BALANCE_BODY 2073 0.67 1.23 0.43 151 XMSexyCombo_01 2048 0.54 1.22 0.25 152 DIET_1 1992 0.57 1.19 0.30 153 XM_UB99 1974 0.36 1.17 0.00 154 KHOP_HELO_FCRDNS 1903 1.11 1.13 1.10 155 TR_Mismatch_TLD_02 1903 0.39 1.13 0.07 156 BOTNET_NORDNS 1897 0.35 1.13 0.02 157 LongTLD 1827 0.52 1.09 0.28 158 XMPhish14 1804 0.68 1.07 0.50 159 THIS_AD 1781 0.56 1.06 0.35 160 XM_B_Phish66 1728 0.49 1.03 0.25 161 XMBody_78 1718 0.50 1.02 0.28 162 TR_Symld_Words 1710 1.29 1.02 1.40 163 TR_XM_RelayPhish 1698 0.36 1.01 0.07 164 TR_XM_InvalidRelay 1693 0.32 1.01 0.02 165 DKIM_ADSP_CUSTOM_MED 1646 0.90 0.98 0.86 166 BODY_EMPTY 1640 0.30 0.98 0.01 167 RDNS_DYNAMIC 1637 0.55 0.97 0.37 168 XMSubMetaSxObfu_03 1606 0.50 0.96 0.30 169 PLING_QUERY 1605 0.60 0.96 0.45 170 TR_MetaPhish_Combo_01 1601 0.84 0.95 0.79 171 TR_XM_Base64_M1 1593 0.78 0.95 0.71 172 TR_XM_DK_SendGrid 1571 0.92 0.93 0.91 173 XMLngstWrd_00 1571 0.73 0.93 0.64 174 TR_Caps_n_Bayes_99 1514 0.30 0.90 0.04 175 RELAYCOUNTRY_FR 1495 0.42 0.89 0.22 176 XM_UB999 1469 0.27 0.87 0.00 177 XM_B_COVIDMETA 1460 0.38 0.87 0.17 178 AC_BR_BONANZA 1453 0.31 0.86 0.07 179 XM_ProductURIs 1425 0.76 0.85 0.72 180 PDS_OTHER_BAD_TLD 1422 0.36 0.85 0.14 181 RELAYCOUNTRY_IN 1399 0.29 0.83 0.06 182 TM2_M_A_HREF_HREF 1383 0.40 0.82 0.22 183 XMMoneyMeta_00 1382 0.59 0.82 0.49 184 NML_ADSP_CUSTOM_MED 1371 0.65 0.82 0.58 185 XM_OfRef7 1349 0.35 0.80 0.15 186 MPART_ALT_DIFF_COUNT 1341 0.62 0.80 0.54 187 TR_LOTS_OF_MONEY2 1324 0.36 0.79 0.18 188 T_MONEY_PERCENT 1324 0.36 0.79 0.18 189 SHOPIFY_IMG_NOT_RCVD_SFY 1298 0.44 0.77 0.30 190 XM_H_PHPMailer 1298 0.69 0.77 0.66 191 FORGED_GMAIL_RCVD 1290 0.57 0.77 0.49 192 XM_Combo_Sbj 1260 0.40 0.75 0.24 193 RCVD_IN_PSBL 1257 0.50 0.75 0.39 194 XM_H_Undi_Recip 1250 0.32 0.74 0.13 195 TooManyTo_002 1249 1.97 0.74 2.50 196 TVD_RCVD_IP 1224 1.12 0.73 1.30 197 TR_XM_SEO4 1223 0.26 0.73 0.06 198 XMSubMetaI_00 1215 0.57 0.72 0.51 199 XM_UB80 1214 0.23 0.72 0.02 200 XMClaimOffer 1214 0.36 0.72 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 335241 87.86 91.48 86.29 2 T_SCC_BODY_TEXT_LINE 323583 81.27 76.58 83.29 3 RELAYCOUNTRY_US 288803 75.96 79.71 74.34 4 DCC_CHECK_NEGATIVE 272656 58.61 31.85 70.18 5 DKIM_SIGNED 264123 75.27 92.09 67.99 6 XM_DK_Pass 259202 72.92 87.27 66.72 7 DKIM_VALID 255798 71.94 86.03 65.84 8 XM_B_Unicode 253516 69.78 80.25 65.26 9 BAYES_50 227526 51.86 36.36 58.57 10 DKIM_VALID_AU 203242 56.05 64.67 52.32 11 XM_B_SpammyWords 184881 54.11 69.20 47.59 12 XMListUnsubscribeExists 174109 53.67 74.15 44.82 13 XM_B_Unicode3 141361 39.17 45.60 36.39 14 DCC_CHECK 115681 41.36 68.14 29.78 15 T_TM2_M_HEADER_IN_MSG 113242 26.99 22.00 29.15 16 DKIM_VALID_EF 101365 26.98 29.05 26.09 17 HTML_FONT_LOW_CONTRAST 95563 27.46 34.08 24.60 18 FVGT_m_MULTI_ODD 92371 25.86 30.68 23.78 19 RCVD_IN_MSPIKE_H2 91802 24.54 26.65 23.63 20 ALL_TRUSTED 88420 16.38 1.64 22.76 21 MIME_HTML_ONLY 87765 24.83 30.00 22.59 22 LOC_TINY_FONT_1 85366 26.81 37.98 21.97 23 XMSubLong 82636 22.35 24.85 21.27 24 T_KAM_HTML_FONT_INVALID 77586 22.07 26.93 19.97 25 XM_Multi_Part_URI 72908 18.81 18.92 18.77 26 XM_B_SpammyWords2 70400 24.86 40.44 18.12 27 TR_XM_DK_Unsub 47840 15.25 22.05 12.31 28 USER_IN_DEF_DKIM_WL 41345 8.12 2.30 10.64 29 BAYES_60 38506 9.18 7.50 9.91 30 UNPARSEABLE_RELAY 35777 10.42 13.21 9.21 31 BAYES_00 35288 6.53 0.63 9.08 32 TooManyTo_001 32086 7.36 5.28 8.26 33 XM_B_Unsub 29513 9.81 14.94 7.60 34 LotsOfNums_01 29272 7.50 7.41 7.53 35 TR_MAX_INTL_RELAY 28011 9.71 15.51 7.21 36 LOTS_OF_MONEY 27685 9.08 13.59 7.13 37 XM_DKIMWhitelistDomains 27631 4.97 0.02 7.11 38 XM_Evil_Numbers_Gen 27301 7.60 8.94 7.03 39 TR_XM_DK_Bayes 23856 4.43 0.48 6.14 40 XM_H_GMP 23591 5.48 4.12 6.07 41 TR_XM_DK_Bayes1 23539 4.37 0.47 6.06 42 TR_XM_BayesUnsub 23288 8.51 14.33 5.99 43 IN_ZIMBRA_NJ_WHITELIST 23140 4.18 0.06 5.96 44 RCVD_IN_MSPIKE_WL 21614 6.34 8.14 5.56 45 RCVD_IN_MSPIKE_H3 21614 6.34 8.14 5.56 46 XM_DK_Undo_02 21093 16.19 41.05 5.43 47 T_TooManySym_01 21037 4.52 2.46 5.41 48 TR_XM_DK_Bayes2 20513 3.81 0.42 5.28 49 TR_XM_SpammyWords4 20223 7.31 12.17 5.21 50 XM_H_Long_From01 19227 4.89 4.76 4.95 51 BAYES_99 19060 13.29 32.69 4.91 52 ANY_BOUNCE_MESSAGE 18877 4.10 2.36 4.86 53 BOUNCE_MESSAGE 18868 4.10 2.36 4.86 54 BAYES_40 18191 4.29 3.39 4.68 55 MIME_QP_LONG_LINE 18111 4.31 3.50 4.66 56 HTML_IMAGE_RATIO_02 17088 5.11 6.74 4.40 57 BAYES_80 16866 5.77 9.07 4.34 58 RCVD_IN_IADB_LISTED 16492 3.46 1.65 4.25 59 XM_B_SpammyWords3 16178 7.00 13.54 4.16 60 RELAYCOUNTRY_META 15639 9.05 20.66 4.03 61 XMStrtUSub 15574 3.74 3.10 4.01 62 BOTNET_IPINHOSTNAME 15405 6.72 13.10 3.97 63 MPART_ALT_DIFF 15104 4.41 5.61 3.89 64 XM_PDF 14993 2.85 0.51 3.86 65 HTML_IMAGE_RATIO_04 14928 4.23 5.14 3.84 66 RCVD_IN_IADB_SPF 14598 3.07 1.47 3.76 67 BAYES_999 14465 10.20 25.18 3.72 68 RCVD_IN_VALIDITY_SAFE 14223 3.25 2.28 3.66 69 XMSubMetaSx_00 14010 4.60 6.90 3.61 70 XM_Body_Dirty_Words 13894 5.41 9.64 3.58 71 XM_UncommonTLD01 13662 6.08 12.00 3.52 72 XM_B_Phish_Phrases 13422 4.00 5.26 3.45 73 T_REMOTE_IMAGE 13178 2.90 1.78 3.39 74 RCVD_IN_IADB_SENDERID 13147 2.79 1.40 3.38 75 RCVD_IN_IADB_DK 12793 2.72 1.40 3.29 76 RCVD_IN_VALIDITY_CERTIFIED 12576 2.84 1.91 3.24 77 BAYES_20 12249 3.21 3.33 3.15 78 XM_SPF_SoftFail 12166 4.29 6.98 3.13 79 MAILING_LIST_MULTI 11666 2.62 1.73 3.00 80 XM_B_SpammyTLD 11470 3.13 3.55 2.95 81 FSL_BULK_SIG 11438 4.32 7.50 2.94 82 BAYES_95 11127 3.68 5.58 2.86 83 HTML_IMAGE_RATIO_06 11012 3.21 4.08 2.83 84 T_TooManySym_02 10027 2.01 0.68 2.58 85 RCVD_IN_IADB_VOUCHED 9898 1.98 0.68 2.55 86 TooManyTo_002 9715 1.97 0.74 2.50 87 BAYES_05 9679 2.18 1.46 2.49 88 SCC_BODY_URI_ONLY 9534 3.36 5.45 2.45 89 HTML_IMAGE_RATIO_08 9351 2.60 3.06 2.41 90 XMNumbers 9201 4.65 9.92 2.37 91 MIME_HTML_MOSTLY 8791 2.83 4.15 2.26 92 TR_XM_DKIM_Undo 8752 10.99 31.20 2.25 93 MIME_HTML_ONLY_MULTI 8589 2.51 3.19 2.21 94 DKIM_INVALID 8325 3.33 6.07 2.14 95 TR_XM_SpammyRelay 7947 6.48 16.73 2.05 96 XM_CamelCaseFrm001 7908 2.24 2.72 2.04 97 HTML_MIME_NO_HTML_TAG 7545 1.96 2.01 1.94 98 TM2_M_URI_OPT_OUT 7526 2.42 3.54 1.94 99 INVALID_MSGID 7182 1.33 0.15 1.85 100 XM_DK_Undo_01 6956 1.71 1.51 1.79 101 RCVD_IN_IADB_OPTIN 6935 1.38 0.44 1.79 102 HELO_NODOT 6813 1.32 0.30 1.75 103 HELO_NO_DOMAIN 6809 1.32 0.30 1.75 104 FROM_EXCESS_BASE64 6681 1.78 1.92 1.72 105 T_XMDrugObfuBody_14 6462 2.29 3.74 1.66 106 XM_B_Investor 6354 2.51 4.52 1.64 107 TO_MALFORMED 6315 1.15 0.05 1.63 108 URI_NOVOWEL 6243 1.56 1.44 1.61 109 TR_DCC_Bayes_99 6100 7.87 22.42 1.57 110 XMDiploma_00 5796 1.80 2.52 1.49 111 XM_B_Unsub2 5747 1.73 2.32 1.48 112 TR_XM_PhishingBody 5641 2.16 3.80 1.45 113 XM_H_Trusted_IP 5583 1.00 0.00 1.44 114 TR_Symld_Words 5454 1.29 1.02 1.40 115 XMGappySubj_01 5397 1.01 0.14 1.39 116 XMSexyCombo_05 5374 2.55 5.25 1.38 117 TR_XM_UnparsRelay 5359 3.23 7.50 1.38 118 TooManyTo_003 5358 1.15 0.63 1.38 119 UNTRUSTED_Relay 5325 2.65 5.61 1.37 120 SUBJ_ALL_CAPS 5325 1.55 1.96 1.37 121 XM_SendGrid 5307 1.44 1.60 1.37 122 T_XMDrugObfuBody_08 5246 1.79 2.81 1.35 123 IN_HORDE_ADDRESS_BOOK 5153 0.97 0.14 1.33 124 TVD_RCVD_IP 5032 1.12 0.73 1.30 125 BOTNET 4758 3.54 8.89 1.22 126 TR_XM_SpammyWords5 4575 2.18 4.50 1.18 127 XM_OfRef6 4444 1.82 3.40 1.14 128 XM_GoogleGroups 4431 0.94 0.47 1.14 129 TM2_M_VERY_LONG_WORD 4420 1.76 3.21 1.14 130 RELAYCOUNTRY_CA 4332 4.02 10.72 1.12 131 XM_H_Long_From02 4309 1.28 1.68 1.11 132 KHOP_HELO_FCRDNS 4273 1.11 1.13 1.10 133 T_FILL_THIS_FORM_SHORT 4240 1.83 3.54 1.09 134 XMCapTrack 4183 0.86 0.35 1.08 135 XMBody_95 4070 0.78 0.17 1.05 136 XMBSHREFv2 4008 0.80 0.27 1.03 137 TooManyTo_004 3879 0.87 0.56 1.00 138 XMNoVowels 3868 0.87 0.58 1.00 139 URI_HEX 3854 1.24 1.81 0.99 140 TVD_SPACE_RATIO 3791 0.71 0.10 0.98 141 T_TooManySym_03 3638 0.75 0.32 0.94 142 HTTPS_HTTP_MISMATCH 3579 1.04 1.30 0.92 143 TR_XM_DK_SendGrid 3537 0.92 0.93 0.91 144 DKIM_ADSP_CUSTOM_MED 3347 0.90 0.98 0.86 145 XMGenDplmaNmb 3336 0.99 1.28 0.86 146 XMSubNoVowel 3283 0.77 0.60 0.85 147 SpammyFromTLD_01 3229 3.02 8.08 0.83 148 XM_UB50 3136 1.29 2.42 0.81 149 XMGappySubj_02 3111 0.58 0.07 0.80 150 TR_MetaPhish_Combo_01 3050 0.84 0.95 0.79 151 TooManyTo_005 3040 0.70 0.51 0.78 152 XM_B_SpammyWords4 3010 1.27 2.43 0.77 153 T_XMDrugObfuBody_00 2835 0.88 1.24 0.73 154 XM_ProductURIs 2802 0.76 0.85 0.72 155 RCVD_IN_RP_SAFE 2802 0.65 0.49 0.72 156 FROM_GOV_DKIM_AU 2785 0.54 0.14 0.72 157 XMStockSpam_06 2756 0.96 1.53 0.71 158 TR_XM_Base64_M1 2741 0.78 0.95 0.71 159 XM_ShortIntro_01 2639 0.61 0.45 0.68 160 XM_H_PHPMailer 2559 0.69 0.77 0.66 161 URI_TRY_3LD 2538 0.85 1.31 0.65 162 XMLngstWrd_00 2496 0.73 0.93 0.64 163 TR_XM_FormFill2 2492 2.59 7.08 0.64 164 RCVD_IN_RP_CERTIFIED 2484 0.57 0.40 0.64 165 TR_Mismatch_TLD_01 2483 0.66 0.70 0.64 166 RELAYCOUNTRY_AU 2473 1.10 2.19 0.64 167 TR_XM_PHPDW 2468 2.59 7.12 0.64 168 TR_XM_PHPForged 2468 2.61 7.19 0.64 169 XM_H_PHPOS 2420 2.57 7.08 0.62 170 MSGID_NOFQDN1 2345 0.42 0.01 0.60 171 RCVD_IN_BL_SPAMCOP_NET 2284 3.76 11.10 0.59 172 NML_ADSP_CUSTOM_MED 2249 0.65 0.82 0.58 173 FILL_THIS_FORM 2201 0.51 0.37 0.57 174 XMBody_17 2173 1.87 4.89 0.56 175 T_OBFU_PDF_ATTACH 2170 0.41 0.07 0.56 176 TR_XM_SpammyWords2 2160 4.25 12.79 0.56 177 HTML_IMAGE_ONLY_16 2152 0.47 0.26 0.55 178 XMBdyGiftCard01 2146 0.77 1.28 0.55 179 XMBrknScrpt_02 2117 0.95 1.89 0.54 180 XM_B_FormFill 2114 0.40 0.06 0.54 181 MPART_ALT_DIFF_COUNT 2097 0.62 0.80 0.54 182 SHORT_HELO_AND_INLINE_IMAGE 2084 0.39 0.04 0.54 183 USER_IN_WELCOMELIST 1969 0.35 0.00 0.51 184 USER_IN_WHITELIST 1969 0.35 0.00 0.51 185 XMSubMetaI_00 1962 0.57 0.72 0.51 186 XMPhish14 1957 0.68 1.07 0.50 187 T_Symld_Words_02 1933 0.54 0.63 0.50 188 XMMoneyMeta_00 1911 0.59 0.82 0.49 189 FORGED_GMAIL_RCVD 1910 0.57 0.77 0.49 190 XMHTML_After_End 1880 0.72 1.27 0.48 191 XM_B_COPY_HTML 1838 0.55 0.72 0.47 192 RELAYCOUNTRY_GB 1772 0.54 0.72 0.46 193 PLING_QUERY 1748 0.60 0.96 0.45 194 SpammyFromTLD_02 1683 0.76 1.52 0.43 195 HTML_TAG_BALANCE_BODY 1683 0.67 1.23 0.43 196 HTML_IMAGE_ONLY_24 1644 0.44 0.50 0.42 197 HTML_IMAGE_ONLY_28 1600 0.40 0.38 0.41 198 XMDateMe_00 1577 0.37 0.30 0.41 199 TM2_M_BODY_EMPTY 1567 2.03 5.81 0.40 200 TO_NO_BRKTS_HTML_ONLY 1556 0.38 0.32 0.40 ----------------------------------------------------------------------