Email: 624715 Autolearn: 0 AvgScore: 2.56 AvgScanTime: 1.20 sec Spam: 181176 Autolearn: 0 AvgScore: 12.82 AvgScanTime: 1.29 sec Ham: 443539 Autolearn: 0 AvgScore: -1.63 AvgScanTime: 1.16 sec Time Spent Running SA: 207.59 hours Time Spent Processing Spam: 64.97 hours Time Spent Processing Ham: 142.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 167017 67.53 92.18 57.46 2 XM_DK_Pass 160470 65.69 88.57 56.34 3 DKIM_VALID 158664 64.80 87.57 55.50 4 RELAYCOUNTRY_US 148189 75.64 81.79 73.13 5 HTML_MESSAGE 147657 86.23 81.50 88.16 6 XMListUnsubscribeExists 138559 49.10 76.48 37.91 7 XM_B_Unicode 132002 74.30 72.86 74.90 8 DKIM_VALID_AU 125349 51.86 69.19 44.79 9 XM_B_SpammyWords 111408 44.37 61.49 37.37 10 DCC_CHECK 110045 35.30 60.74 24.91 11 DCC_CHECK_NEGATIVE 71116 64.67 39.25 75.06 12 XM_B_Unicode3 68958 43.41 38.06 45.60 13 XM_DK_Undo_02 68091 14.03 37.58 4.41 14 XM_B_SpammyWords2 65653 20.54 36.24 14.13 15 BAYES_50 62045 51.93 34.25 59.15 16 LOC_TINY_FONT_1 60426 23.64 33.35 19.67 17 HTML_FONT_LOW_CONTRAST 54212 23.86 29.92 21.39 18 BAYES_99 52629 10.96 29.05 3.57 19 TR_XM_DKIM_Undo 52297 9.53 28.87 1.64 20 FVGT_m_MULTI_ODD 51484 22.15 28.42 19.59 21 DKIM_VALID_EF 51399 23.77 28.37 21.90 22 MIME_HTML_ONLY 48086 29.69 26.54 30.98 23 XMSubLong 47026 27.09 25.96 27.55 24 RCVD_IN_MSPIKE_H2 45415 22.08 25.07 20.86 25 T_KAM_HTML_FONT_INVALID 43846 18.31 24.20 15.91 26 BAYES_999 40982 8.57 22.62 2.82 27 XM_UncommonTLD01 39563 11.00 21.84 6.57 28 TR_XM_DK_Unsub 37800 13.40 20.86 10.36 29 TR_DCC_Bayes_99 36446 6.53 20.12 0.98 30 XMNumbers 35680 7.30 19.69 2.24 31 T_TM2_M_HEADER_IN_MSG 34327 22.07 18.95 23.34 32 SpammyFromTLD_01 31884 5.63 17.60 0.74 33 TR_XM_PHPForged 30876 5.29 17.04 0.49 34 TR_XM_PHPDW 30802 5.28 17.00 0.49 35 TR_XM_FormFill2 30740 5.27 16.97 0.49 36 XM_H_PHPOS 30726 5.26 16.96 0.48 37 RELAYCOUNTRY_META 30584 7.24 16.88 3.31 38 XM_Multi_Part_URI 29050 12.19 16.03 10.63 39 TM2_M_BODY_EMPTY 28508 4.95 15.73 0.55 40 XMEmptyBody_01 28427 4.67 15.69 0.17 41 TR_XM_SpammyRelay 24766 5.17 13.67 1.70 42 XM_SPF_SoftFail 23293 8.24 12.86 6.35 43 XM_B_Unsub 23148 13.19 12.78 13.35 44 LOTS_OF_MONEY 22750 7.54 12.56 5.50 45 XM_B_SpammyWords3 22439 6.14 12.39 3.59 46 TR_MAX_INTL_RELAY 22353 7.12 12.34 4.99 47 TR_XM_BayesUnsub 22011 12.03 12.15 11.98 48 TR_XM_SpammyWords2 21247 3.62 11.73 0.31 49 BOTNET_IPINHOSTNAME 20937 5.80 11.56 3.45 50 TR_XM_SpammyWords4 20802 6.06 11.48 3.85 51 RCVD_IN_BL_SPAMCOP_NET 20175 3.60 11.14 0.52 52 UNPARSEABLE_RELAY 20095 8.51 11.09 7.45 53 RELAYCOUNTRY_CA 17162 3.42 9.47 0.95 54 TR_XM_SPAMCOP 16692 2.90 9.21 0.33 55 XM_Evil_Numbers_Gen 14291 7.60 7.89 7.48 56 BOTNET 14055 3.05 7.76 1.12 57 BAYES_80 13873 4.39 7.66 3.06 58 RCVD_IN_MSPIKE_WL 13491 5.52 7.45 4.73 59 RCVD_IN_MSPIKE_H3 13490 5.52 7.45 4.73 60 BAYES_20 13450 4.95 7.42 3.94 61 FSL_BULK_SIG 12506 3.86 6.90 2.61 62 BAYES_40 12389 6.30 6.84 6.07 63 BAYES_60 11998 6.85 6.62 6.95 64 XMBody_17 11006 2.17 6.07 0.57 65 TR_XM_UnparsRelay 10719 2.44 5.92 1.02 66 LotsOfNums_01 10195 6.10 5.63 6.30 67 XM_Body_Dirty_Words 9892 2.97 5.46 1.96 68 XMSubMetaSx_00 9858 3.80 5.44 3.13 69 MPART_ALT_DIFF 9492 7.30 5.24 8.14 70 HTML_IMAGE_RATIO_02 9124 4.16 5.04 3.81 71 HTML_IMAGE_RATIO_04 8381 10.60 4.63 13.03 72 DKIM_INVALID 8353 2.72 4.61 1.95 73 XM_B_Phish_Phrases 8235 3.23 4.55 2.70 74 XM_H_Long_From01 8187 4.18 4.52 4.04 75 TooManyTo_001 8020 11.53 4.43 14.44 76 UNTRUSTED_Relay 7973 2.10 4.40 1.16 77 BAYES_95 7852 2.62 4.33 1.93 78 XM_H_GMP 7440 4.82 4.11 5.12 79 XM_B_Investor 7420 2.09 4.10 1.27 80 T_FILL_THIS_FORM_SHORT 7288 1.73 4.02 0.79 81 TR_XM_SpammyWords5 7288 1.89 4.02 1.02 82 XM_OfRef6 6686 1.83 3.69 1.07 83 XMSexyCombo_05 6518 1.83 3.60 1.11 84 TR_XM_PhishingBody 6315 2.10 3.49 1.53 85 XM_B_SpammyTLD 6301 2.40 3.48 1.96 86 MIME_HTML_MOSTLY 6196 2.43 3.42 2.02 87 HTML_IMAGE_RATIO_06 6151 4.04 3.40 4.30 88 T_XMDrugObfuBody_14 5923 1.92 3.27 1.36 89 BAYES_05 5708 3.27 3.15 3.32 90 XMStrtUSub 5559 7.58 3.07 9.42 91 MIME_HTML_ONLY_MULTI 5241 5.57 2.89 6.67 92 MIME_QP_LONG_LINE 5217 3.59 2.88 3.89 93 HK_RANDOM_REPLYTO 5164 0.88 2.85 0.07 94 TR_LOTS_OF_MONEY3 4885 1.10 2.70 0.45 95 T_XMDrugObfuBody_08 4777 1.71 2.64 1.34 96 RCVD_IN_VALIDITY_SAFE 4733 3.65 2.61 4.07 97 HTML_IMAGE_RATIO_08 4614 1.86 2.55 1.58 98 USER_IN_DEF_DKIM_WL 4581 8.23 2.53 10.56 99 TR_XM_FormFill 4507 0.73 2.49 0.02 100 TM2_M_VERY_LONG_WORD 4450 1.37 2.46 0.92 101 T_TooManySym_01 4255 3.95 2.35 4.61 102 SpammyFromTLD_02 4250 3.41 2.35 3.84 103 TR_XM_BayesRelay 4207 0.67 2.32 0.00 104 XMDiploma_00 4151 6.86 2.29 8.72 105 TM2_M_URI_OPT_OUT 4150 1.68 2.29 1.43 106 ALL_TRUSTED 3956 17.99 2.18 24.45 107 XM_UB50 3921 1.09 2.16 0.65 108 XM_B_SpammyWords4 3897 0.97 2.15 0.49 109 XM_URI_RBL 3873 0.71 2.14 0.13 110 RCVD_IN_VALIDITY_CERTIFIED 3843 3.18 2.12 3.61 111 XM_CamelCaseFrm001 3785 1.70 2.09 1.55 112 RELAYCOUNTRY_AU 3742 1.07 2.07 0.66 113 XM_B_Unsub2 3717 1.31 2.05 1.00 114 XMBrknScrpt_02 3660 0.90 2.02 0.44 115 TR_XM_INV_DKIM 3511 0.60 1.94 0.06 116 FONT_INVIS_LONG_LINE 3121 0.52 1.72 0.03 117 T_REMOTE_IMAGE 3032 2.61 1.67 2.99 118 SUBJ_ALL_CAPS 2972 1.29 1.64 1.14 119 XMStockSpam_06 2847 1.20 1.57 1.04 120 FROM_EXCESS_BASE64 2804 1.52 1.55 1.50 121 ANY_BOUNCE_MESSAGE 2747 3.55 1.52 4.38 122 BOUNCE_MESSAGE 2724 3.54 1.50 4.36 123 MAILING_LIST_MULTI 2706 2.11 1.49 2.37 124 XM_DK_Undo_01 2658 1.48 1.47 1.49 125 HTML_MIME_NO_HTML_TAG 2657 1.61 1.47 1.67 126 T_XMDrugObfuBody_00 2576 0.83 1.42 0.59 127 URI_TRY_3LD 2532 0.79 1.40 0.55 128 AC_BR_BONANZA 2481 0.44 1.37 0.06 129 XMGenDplmaNmb 2460 6.15 1.36 8.11 130 T_XMHurry_00 2424 0.69 1.34 0.42 131 TR_XM_NoHeaderRelay 2401 0.45 1.33 0.09 132 URI_NOVOWEL 2393 1.21 1.32 1.16 133 TR_Mismatch_TLD_02 2374 0.41 1.31 0.04 134 RCVD_IN_IADB_LISTED 2347 2.62 1.30 3.15 135 HTTPS_HTTP_MISMATCH 2315 0.86 1.28 0.69 136 URI_HEX 2267 1.00 1.25 0.90 137 XMPhish30 2262 0.74 1.25 0.53 138 XM_H_Undi_Recip 2227 0.45 1.23 0.13 139 HTML_TAG_BALANCE_BODY 2167 0.59 1.20 0.34 140 XM_SendGrid 2153 1.11 1.19 1.07 141 RCVD_IN_IADB_SPF 2103 2.34 1.16 2.83 142 KHOP_HELO_FCRDNS 2098 0.98 1.16 0.91 143 XM_HighProb1 2003 0.32 1.11 0.00 144 RCVD_IN_IADB_SENDERID 1997 2.14 1.10 2.57 145 RCVD_IN_IADB_DK 1994 2.10 1.10 2.51 146 MIME_HEADER_CTYPE_ONLY 1988 2.94 1.10 3.69 147 TR_XM_Undi_Recip19 1925 0.34 1.06 0.05 148 T_MONEY_PERCENT 1924 0.48 1.06 0.24 149 TR_LOTS_OF_MONEY2 1924 0.48 1.06 0.24 150 XMHTML_After_End 1913 0.61 1.06 0.42 151 HTML_FONT_FACE_BAD 1867 9.66 1.03 13.18 152 DIET_1 1834 0.53 1.01 0.33 153 TR_Symld_Words 1789 1.11 0.99 1.17 154 XM_B_COVIDMETA 1778 0.41 0.98 0.18 155 XMSexyCombo_01 1755 0.38 0.97 0.14 156 LongTLD 1707 0.46 0.94 0.27 157 BOTNET_NORDNS 1705 0.28 0.94 0.00 158 XM_B_COPY_HTML 1702 0.65 0.94 0.53 159 THIS_AD 1683 0.45 0.93 0.25 160 XMReplyNow 1678 0.42 0.93 0.21 161 XM_H_Long_From02 1673 0.92 0.92 0.91 162 TR_XM_Undi_RecipCombo2 1670 0.27 0.92 0.00 163 XM_OfRef7 1669 0.38 0.92 0.17 164 XMClaimOffer 1668 0.34 0.92 0.11 165 XMPhish14 1638 0.55 0.90 0.40 166 RCVD_IN_VALIDITY_RPBL 1631 0.28 0.90 0.03 167 T_Symld_Words_02 1630 0.60 0.90 0.48 168 XM_B_DNDMA 1628 0.62 0.90 0.50 169 XMLngstWrd_00 1616 0.76 0.89 0.71 170 XM_DIRTYINTL 1578 0.34 0.87 0.12 171 XMBdyGiftCard01 1564 0.68 0.86 0.60 172 RDNS_DYNAMIC 1548 0.47 0.85 0.31 173 URIBL_DBL_SPAM 1493 0.24 0.82 0.00 174 XM_B_Phish66 1491 0.43 0.82 0.27 175 XM_B_SEO 1475 0.34 0.81 0.14 176 XMBody_78 1432 0.40 0.79 0.25 177 TR_XM_Base64_M1 1410 0.54 0.78 0.44 178 UNDISC_MONEY 1408 0.23 0.78 0.00 179 TR_XM_Spammywords 1398 0.41 0.77 0.26 180 XM_S_SpammyWords 1398 0.41 0.77 0.26 181 TVD_RCVD_IP 1398 1.09 0.77 1.22 182 TR_XM_InvalidRelay 1397 0.23 0.77 0.02 183 TR_XM_SEO4 1358 0.27 0.75 0.08 184 MPART_ALT_DIFF_COUNT 1348 0.56 0.74 0.48 185 T_TooManySym_02 1346 1.88 0.74 2.34 186 XM_ProductURIs 1342 0.52 0.74 0.42 187 TR_XM_Undi_Recip5 1336 0.22 0.74 0.00 188 XM_UB99 1331 0.22 0.73 0.00 189 DKIM_ADSP_CUSTOM_MED 1330 0.71 0.73 0.69 190 XMSubMetaSxObfu_03 1326 0.51 0.73 0.41 191 TR_XM_Undi_Recip11 1318 0.23 0.73 0.03 192 T_STY_INVIS_DIRECT 1298 0.33 0.72 0.17 193 TR_XM_DK_SendGrid 1293 0.70 0.71 0.69 194 TM2_M_OBFU_COMMENT 1290 0.37 0.71 0.24 195 XM_H_PHPMailer 1282 0.58 0.71 0.53 196 TR_XM_Base64_L1 1268 0.31 0.70 0.15 197 TooManyTo_002 1250 1.66 0.69 2.05 198 TR_XM_Undi_Recip2 1239 0.20 0.68 0.01 199 BAYES_00 1232 8.73 0.68 12.01 200 HOSTED_IMG_MULTI_PUB_01 1229 0.21 0.68 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 391023 86.23 81.50 88.16 2 DCC_CHECK_NEGATIVE 332899 64.67 39.25 75.06 3 XM_B_Unicode 332191 74.30 72.86 74.90 4 RELAYCOUNTRY_US 324346 75.64 81.79 73.13 5 BAYES_50 262359 51.93 34.25 59.15 6 DKIM_SIGNED 254838 67.53 92.18 57.46 7 XM_DK_Pass 249906 65.69 88.57 56.34 8 DKIM_VALID 246182 64.80 87.57 55.50 9 XM_B_Unicode3 202262 43.41 38.06 45.60 10 DKIM_VALID_AU 198656 51.86 69.19 44.79 11 XMListUnsubscribeExists 168150 49.10 76.48 37.91 12 XM_B_SpammyWords 165757 44.37 61.49 37.37 13 MIME_HTML_ONLY 137397 29.69 26.54 30.98 14 XMSubLong 122196 27.09 25.96 27.55 15 DCC_CHECK 110504 35.30 60.74 24.91 16 ALL_TRUSTED 108426 17.99 2.18 24.45 17 T_TM2_M_HEADER_IN_MSG 103531 22.07 18.95 23.34 18 DKIM_VALID_EF 97115 23.77 28.37 21.90 19 HTML_FONT_LOW_CONTRAST 94876 23.86 29.92 21.39 20 RCVD_IN_MSPIKE_H2 92501 22.08 25.07 20.86 21 LOC_TINY_FONT_1 87226 23.64 33.35 19.67 22 FVGT_m_MULTI_ODD 86886 22.15 28.42 19.59 23 T_KAM_HTML_FONT_INVALID 70569 18.31 24.20 15.91 24 TooManyTo_001 64032 11.53 4.43 14.44 25 XM_B_SpammyWords2 62658 20.54 36.24 14.13 26 XM_B_Unsub 59227 13.19 12.78 13.35 27 HTML_FONT_FACE_BAD 58458 9.66 1.03 13.18 28 HTML_IMAGE_RATIO_04 57812 10.60 4.63 13.03 29 BAYES_00 53278 8.73 0.68 12.01 30 TR_XM_BayesUnsub 53117 12.03 12.15 11.98 31 XM_H_Trusted_IP 50118 8.02 0.00 11.30 32 XM_Multi_Part_URI 47130 12.19 16.03 10.63 33 USER_IN_DEF_DKIM_WL 46825 8.23 2.53 10.56 34 TR_XM_DK_Unsub 45936 13.40 20.86 10.36 35 XMStrtUSub 41765 7.58 3.07 9.42 36 XMDiploma_00 38678 6.86 2.29 8.72 37 MPART_ALT_DIFF 36093 7.30 5.24 8.14 38 XMGenDplmaNmb 35980 6.15 1.36 8.11 39 XM_Evil_Numbers_Gen 33157 7.60 7.89 7.48 40 UNPARSEABLE_RELAY 33057 8.51 11.09 7.45 41 BAYES_60 30823 6.85 6.62 6.95 42 MIME_HTML_ONLY_MULTI 29568 5.57 2.89 6.67 43 XM_UncommonTLD01 29129 11.00 21.84 6.57 44 XM_SPF_SoftFail 28168 8.24 12.86 6.35 45 LotsOfNums_01 27931 6.10 5.63 6.30 46 BAYES_40 26938 6.30 6.84 6.07 47 XM_DKIMWhitelistDomains 26536 4.25 0.01 5.98 48 TR_XM_DK_Bayes 24445 4.07 0.53 5.51 49 IN_ZIMBRA_NJ_WHITELIST 24433 3.93 0.08 5.51 50 LOTS_OF_MONEY 24376 7.54 12.56 5.50 51 TR_XM_DK_Bayes1 24110 4.01 0.53 5.44 52 XM_H_GMP 22689 4.82 4.11 5.12 53 TR_MAX_INTL_RELAY 22132 7.12 12.34 4.99 54 RCVD_IN_MSPIKE_WL 20983 5.52 7.45 4.73 55 RCVD_IN_MSPIKE_H3 20981 5.52 7.45 4.73 56 TR_XM_DK_Bayes2 20470 3.41 0.45 4.62 57 T_TooManySym_01 20446 3.95 2.35 4.61 58 XM_DK_Undo_02 19577 14.03 37.58 4.41 59 ANY_BOUNCE_MESSAGE 19416 3.55 1.52 4.38 60 BOUNCE_MESSAGE 19360 3.54 1.50 4.36 61 HTML_IMAGE_RATIO_06 19065 4.04 3.40 4.30 62 RCVD_IN_VALIDITY_SAFE 18045 3.65 2.61 4.07 63 XMSubNoVowel 17956 3.06 0.65 4.05 64 XM_H_Long_From01 17940 4.18 4.52 4.04 65 BAYES_20 17465 4.95 7.42 3.94 66 MIME_QP_LONG_LINE 17239 3.59 2.88 3.89 67 TR_XM_SpammyWords4 17073 6.06 11.48 3.85 68 SpammyFromTLD_02 17033 3.41 2.35 3.84 69 HTML_IMAGE_RATIO_02 16893 4.16 5.04 3.81 70 MIME_HEADER_CTYPE_ONLY 16386 2.94 1.10 3.69 71 XM_PDF 16253 2.76 0.54 3.66 72 RCVD_IN_VALIDITY_CERTIFIED 16001 3.18 2.12 3.61 73 XM_B_SpammyWords3 15910 6.14 12.39 3.59 74 BAYES_99 15827 10.96 29.05 3.57 75 BOTNET_IPINHOSTNAME 15317 5.80 11.56 3.45 76 BAYES_05 14730 3.27 3.15 3.32 77 RELAYCOUNTRY_META 14671 7.24 16.88 3.31 78 RCVD_IN_IADB_LISTED 13990 2.62 1.30 3.15 79 XMSubMetaSx_00 13884 3.80 5.44 3.13 80 BAYES_80 13578 4.39 7.66 3.06 81 T_REMOTE_IMAGE 13278 2.61 1.67 2.99 82 RCVD_IN_IADB_SPF 12544 2.34 1.16 2.83 83 BAYES_999 12527 8.57 22.62 2.82 84 XM_B_Phish_Phrases 11962 3.23 4.55 2.70 85 FSL_BULK_SIG 11581 3.86 6.90 2.61 86 RCVD_IN_IADB_SENDERID 11382 2.14 1.10 2.57 87 RCVD_IN_IADB_DK 11145 2.10 1.10 2.51 88 MAILING_LIST_MULTI 10502 2.11 1.49 2.37 89 T_TooManySym_02 10392 1.88 0.74 2.34 90 XMNumbers 9954 7.30 19.69 2.24 91 TooManyTo_002 9091 1.66 0.69 2.05 92 MIME_HTML_MOSTLY 8954 2.43 3.42 2.02 93 XM_Body_Dirty_Words 8685 2.97 5.46 1.96 94 XM_B_SpammyTLD 8673 2.40 3.48 1.96 95 DKIM_INVALID 8656 2.72 4.61 1.95 96 BAYES_95 8541 2.62 4.33 1.93 97 RCVD_IN_IADB_VOUCHED 8252 1.47 0.52 1.86 98 XMSubLongNoVowel 8121 1.34 0.13 1.83 99 XMSubGarbage 8001 1.29 0.03 1.80 100 TR_XM_SpammyRelay 7549 5.17 13.67 1.70 101 HTML_MIME_NO_HTML_TAG 7419 1.61 1.47 1.67 102 TR_XM_DKIM_Undo 7266 9.53 28.87 1.64 103 INVALID_MSGID 7054 1.21 0.29 1.59 104 HTML_IMAGE_RATIO_08 6999 1.86 2.55 1.58 105 XM_CamelCaseFrm001 6857 1.70 2.09 1.55 106 TR_XM_PhishingBody 6797 2.10 3.49 1.53 107 FROM_EXCESS_BASE64 6666 1.52 1.55 1.50 108 HELO_NODOT 6639 1.17 0.38 1.50 109 HELO_NO_DOMAIN 6632 1.17 0.37 1.50 110 XM_DK_Undo_01 6602 1.48 1.47 1.49 111 MSGID_NOFQDN1 6552 1.10 0.18 1.48 112 TO_MALFORMED 6522 1.05 0.03 1.47 113 TM2_M_URI_OPT_OUT 6358 1.68 2.29 1.43 114 T_XMDrugObfuBody_14 6047 1.92 3.27 1.36 115 T_XMDrugObfuBody_08 5925 1.71 2.64 1.34 116 RCVD_IN_IADB_OPTIN 5687 1.00 0.31 1.28 117 XMGappySubj_01 5683 0.97 0.20 1.28 118 XM_B_Investor 5646 2.09 4.10 1.27 119 TVD_RCVD_IP 5426 1.09 0.77 1.22 120 TR_Symld_Words 5176 1.11 0.99 1.17 121 UNTRUSTED_Relay 5161 2.10 4.40 1.16 122 URI_NOVOWEL 5136 1.21 1.32 1.16 123 SUBJ_ALL_CAPS 5077 1.29 1.64 1.14 124 TooManyTo_003 5001 0.98 0.61 1.13 125 BOTNET 4986 3.05 7.76 1.12 126 XMSexyCombo_05 4921 1.83 3.60 1.11 127 IN_HORDE_ADDRESS_BOOK 4904 0.80 0.06 1.11 128 XM_OfRef6 4768 1.83 3.69 1.07 129 XM_SendGrid 4760 1.11 1.19 1.07 130 XMStockSpam_06 4625 1.20 1.57 1.04 131 TR_XM_UnparsRelay 4545 2.44 5.92 1.02 132 TR_XM_SpammyWords5 4542 1.89 4.02 1.02 133 XM_B_Unsub2 4442 1.31 2.05 1.00 134 TR_DCC_Bayes_99 4368 6.53 20.12 0.98 135 RELAYCOUNTRY_CA 4196 3.42 9.47 0.95 136 TM2_M_VERY_LONG_WORD 4086 1.37 2.46 0.92 137 XM_GoogleGroups 4081 0.77 0.41 0.92 138 XMCapTrack 4078 0.74 0.31 0.92 139 XMBSHREFv2 4061 0.76 0.36 0.92 140 KHOP_HELO_FCRDNS 4046 0.98 1.16 0.91 141 XM_H_Long_From02 4044 0.92 0.92 0.91 142 URI_HEX 3994 1.00 1.25 0.90 143 XMBody_95 3957 0.71 0.25 0.89 144 TVD_SPACE_RATIO 3936 0.67 0.13 0.89 145 T_TooManySym_03 3853 0.67 0.19 0.87 146 XM_E_Blogspot 3683 0.63 0.12 0.83 147 TooManyTo_004 3667 0.75 0.57 0.83 148 XMNoVowels 3601 0.74 0.55 0.81 149 T_FILL_THIS_FORM_SHORT 3491 1.73 4.02 0.79 150 SpammyFromTLD_01 3278 5.63 17.60 0.74 151 XMGappySubj_02 3230 0.54 0.08 0.73 152 XMLngstWrd_00 3150 0.76 0.89 0.71 153 DKIM_ADSP_CUSTOM_MED 3082 0.71 0.73 0.69 154 TR_XM_DK_SendGrid 3078 0.70 0.71 0.69 155 HTTPS_HTTP_MISMATCH 3070 0.86 1.28 0.69 156 TooManyTo_005 2934 0.61 0.50 0.66 157 RELAYCOUNTRY_AU 2915 1.07 2.07 0.66 158 XM_UB50 2889 1.09 2.16 0.65 159 XMBdyGiftCard01 2683 0.68 0.86 0.60 160 T_XMDrugObfuBody_00 2637 0.83 1.42 0.59 161 XM_ShortIntro_01 2559 0.55 0.50 0.58 162 XMBody_17 2538 2.17 6.07 0.57 163 URI_TRY_3LD 2425 0.79 1.40 0.55 164 TM2_M_BODY_EMPTY 2422 4.95 15.73 0.55 165 TR_MetaPhish_Combo_01 2410 0.57 0.64 0.54 166 XM_H_PHPMailer 2372 0.58 0.71 0.53 167 XM_B_COPY_HTML 2368 0.65 0.94 0.53 168 XMPhish30 2365 0.74 1.25 0.53 169 FROM_GOV_DKIM_AU 2321 0.47 0.34 0.52 170 RCVD_IN_BL_SPAMCOP_NET 2303 3.60 11.14 0.52 171 T_OBFU_PDF_ATTACH 2287 0.41 0.13 0.52 172 XM_B_DNDMA 2222 0.62 0.90 0.50 173 TR_XM_FormFill2 2185 5.27 16.97 0.49 174 XM_B_SpammyWords4 2181 0.97 2.15 0.49 175 TR_XM_PHPDW 2159 5.28 17.00 0.49 176 TR_XM_PHPForged 2157 5.29 17.04 0.49 177 MPART_ALT_DIFF_COUNT 2149 0.56 0.74 0.48 178 T_Symld_Words_02 2120 0.60 0.90 0.48 179 XM_H_PHPOS 2116 5.26 16.96 0.48 180 SHORT_HELO_AND_INLINE_IMAGE 2093 0.34 0.03 0.47 181 FILL_THIS_FORM 2082 0.40 0.22 0.47 182 NML_ADSP_CUSTOM_MED 2068 0.50 0.58 0.47 183 XMMoneyMeta_00 2065 0.52 0.65 0.47 184 TR_LOTS_OF_MONEY3 2002 1.10 2.70 0.45 185 TR_XM_Base64_M1 1952 0.54 0.78 0.44 186 USER_IN_WHITELIST 1951 0.31 0.00 0.44 187 USER_IN_WELCOMELIST 1951 0.31 0.00 0.44 188 XMBrknScrpt_02 1939 0.90 2.02 0.44 189 XM_B_FormFill 1900 0.33 0.09 0.43 190 T_XMHurry_00 1884 0.69 1.34 0.42 191 XM_ProductURIs 1883 0.52 0.74 0.42 192 XMHTML_After_End 1867 0.61 1.06 0.42 193 XMSubMetaSxObfu_03 1835 0.51 0.73 0.41 194 XMPhish14 1772 0.55 0.90 0.40 195 XMSolicitRefs_0 1702 0.35 0.28 0.38 196 FORGED_GMAIL_RCVD 1670 0.43 0.56 0.38 197 TO_NO_BRKTS_HTML_ONLY 1633 0.33 0.24 0.37 198 MISSING_HEADERS 1495 0.38 0.49 0.34 199 HTML_TAG_BALANCE_BODY 1492 0.59 1.20 0.34 200 DIET_1 1461 0.53 1.01 0.33 ----------------------------------------------------------------------