Email: 553529 Autolearn: 0 AvgScore: 4.27 AvgScanTime: 1.23 sec Spam: 190224 Autolearn: 0 AvgScore: 12.80 AvgScanTime: 1.26 sec Ham: 363305 Autolearn: 0 AvgScore: -0.20 AvgScanTime: 1.21 sec Time Spent Running SA: 188.80 hours Time Spent Processing Spam: 66.51 hours Time Spent Processing Ham: 122.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 176028 78.84 92.54 71.67 2 XM_DK_Pass 170358 76.99 89.56 70.41 3 DKIM_VALID 168467 76.01 88.56 69.43 4 RELAYCOUNTRY_US 156666 78.98 82.36 77.21 5 HTML_MESSAGE 155784 81.73 81.90 81.64 6 XMListUnsubscribeExists 145710 57.94 76.60 48.18 7 XM_B_Unicode 138705 68.88 72.92 66.76 8 DKIM_VALID_AU 132784 60.47 69.80 55.58 9 DCC_CHECK 119125 42.86 62.62 32.51 10 XM_B_SpammyWords 117562 48.75 61.80 41.92 11 XM_B_Unicode3 77441 39.71 40.71 39.18 12 XM_DK_Undo_02 73272 16.85 38.52 5.51 13 DCC_CHECK_NEGATIVE 71083 57.11 37.37 67.45 14 XM_B_SpammyWords2 69981 24.45 36.79 17.99 15 BAYES_50 66074 49.79 34.73 57.67 16 LOC_TINY_FONT_1 65795 28.06 34.59 24.64 17 HTML_FONT_LOW_CONTRAST 59102 28.56 31.07 27.24 18 TR_XM_DKIM_Undo 56422 11.71 29.66 2.31 19 BAYES_99 56421 13.27 29.66 4.69 20 FVGT_m_MULTI_ODD 54246 26.36 28.52 25.24 21 DKIM_VALID_EF 52676 27.51 27.69 27.42 22 MIME_HTML_ONLY 50145 20.92 26.36 18.07 23 T_KAM_HTML_FONT_INVALID 47566 21.75 25.01 20.04 24 RCVD_IN_MSPIKE_H2 47401 25.35 24.92 25.58 25 XMSubLong 46953 22.58 24.68 21.47 26 BAYES_999 43580 10.25 22.91 3.62 27 TR_DCC_Bayes_99 40575 8.38 21.33 1.61 28 T_TM2_M_HEADER_IN_MSG 39636 25.31 20.84 27.65 29 TR_XM_DK_Unsub 38818 15.65 20.41 13.15 30 XM_UncommonTLD01 38707 9.72 20.35 4.16 31 XMNumbers 34903 8.10 18.35 2.73 32 RELAYCOUNTRY_META 33693 8.64 17.71 3.89 33 SpammyFromTLD_01 32402 6.53 17.03 1.04 34 TR_XM_PHPForged 31048 5.94 16.32 0.50 35 TR_XM_PHPDW 30970 5.92 16.28 0.49 36 TR_XM_FormFill2 30920 5.92 16.25 0.51 37 XM_H_PHPOS 30907 5.90 16.25 0.49 38 XM_Multi_Part_URI 30061 15.57 15.80 15.45 39 TM2_M_BODY_EMPTY 28452 5.51 14.96 0.57 40 XMEmptyBody_01 28382 5.25 14.92 0.18 41 TR_XM_SpammyRelay 26607 6.18 13.99 2.10 42 XM_B_Unsub 25391 9.57 13.35 7.59 43 TR_XM_BayesUnsub 24529 8.30 12.89 5.90 44 TR_MAX_INTL_RELAY 24514 8.95 12.89 6.89 45 LOTS_OF_MONEY 24169 8.75 12.71 6.67 46 TR_XM_SpammyWords2 23017 4.49 12.10 0.51 47 BOTNET_IPINHOSTNAME 22942 7.00 12.06 4.35 48 UNPARSEABLE_RELAY 22747 10.55 11.96 9.82 49 XM_SPF_SoftFail 22263 6.18 11.70 3.29 50 RCVD_IN_BL_SPAMCOP_NET 21692 4.36 11.40 0.67 51 XM_B_SpammyWords3 21540 6.79 11.32 4.42 52 TR_XM_SpammyWords4 21433 6.89 11.27 4.60 53 RELAYCOUNTRY_CA 18145 4.05 9.54 1.18 54 TR_XM_SPAMCOP 17593 3.44 9.25 0.40 55 BAYES_80 15175 5.47 7.98 4.16 56 RCVD_IN_MSPIKE_WL 14742 6.65 7.75 6.07 57 RCVD_IN_MSPIKE_H3 14742 6.65 7.75 6.07 58 XM_Evil_Numbers_Gen 14243 7.43 7.49 7.40 59 BOTNET 14227 3.36 7.48 1.21 60 FSL_BULK_SIG 13312 4.56 7.00 3.28 61 BAYES_20 12768 4.61 6.71 3.51 62 BAYES_60 12761 8.05 6.71 8.75 63 TR_XM_UnparsRelay 12571 3.30 6.61 1.57 64 LotsOfNums_01 12262 7.66 6.45 8.30 65 BAYES_40 12198 5.16 6.41 4.50 66 XM_Body_Dirty_Words 11660 3.85 6.13 2.66 67 HTML_IMAGE_RATIO_02 10397 5.12 5.47 4.94 68 XMSubMetaSx_00 10204 4.03 5.36 3.34 69 XMBody_17 10061 2.35 5.29 0.82 70 UNTRUSTED_Relay 9442 2.72 4.96 1.55 71 MPART_ALT_DIFF 9385 4.24 4.93 3.88 72 BAYES_95 8897 3.39 4.68 2.72 73 TooManyTo_001 8648 6.98 4.55 8.26 74 HTML_IMAGE_RATIO_04 8556 4.21 4.50 4.06 75 XM_H_Long_From01 8384 4.92 4.41 5.19 76 XM_B_Phish_Phrases 8197 3.65 4.31 3.31 77 XM_H_GMP 8027 5.51 4.22 6.18 78 HTML_IMAGE_RATIO_06 7781 3.02 4.09 2.46 79 DKIM_INVALID 7561 2.84 3.97 2.24 80 TR_XM_PhishingBody 7089 2.62 3.73 2.04 81 TR_XM_SpammyWords5 6998 2.06 3.68 1.21 82 XM_B_Investor 6798 2.34 3.57 1.69 83 TM2_M_URI_OPT_OUT 6660 2.59 3.50 2.11 84 XMSexyCombo_05 6653 2.01 3.50 1.23 85 T_FILL_THIS_FORM_SHORT 6536 1.82 3.44 0.97 86 TR_LOTS_OF_MONEY3 6242 1.50 3.28 0.57 87 MIME_HTML_MOSTLY 6185 2.75 3.25 2.49 88 XM_OfRef6 6105 1.86 3.21 1.15 89 T_XMDrugObfuBody_14 6038 2.37 3.17 1.95 90 RCVD_IN_VALIDITY_SAFE 5785 4.41 3.04 5.12 91 MIME_QP_LONG_LINE 5657 4.46 2.97 5.24 92 TM2_M_VERY_LONG_WORD 5571 1.85 2.93 1.28 93 XMStrtUSub 5351 3.73 2.81 4.22 94 MIME_HTML_ONLY_MULTI 5350 2.47 2.81 2.30 95 XM_B_SpammyTLD 5164 2.66 2.71 2.63 96 RCVD_IN_VALIDITY_CERTIFIED 5083 3.82 2.67 4.42 97 XMBrknScrpt_02 5067 1.45 2.66 0.82 98 BAYES_05 4990 4.06 2.62 4.82 99 HK_RANDOM_REPLYTO 4897 0.94 2.57 0.08 100 SUBJ_ALL_CAPS 4889 1.89 2.57 1.53 101 XM_UB50 4859 1.49 2.55 0.94 102 T_XMDrugObfuBody_08 4774 1.85 2.51 1.51 103 USER_IN_DEF_DKIM_WL 4730 9.04 2.49 12.47 104 TR_XM_BayesRelay 4641 0.84 2.44 0.00 105 T_TooManySym_01 4562 4.08 2.40 4.96 106 XM_URI_RBL 4446 0.91 2.34 0.16 107 TR_XM_FormFill 4420 0.81 2.32 0.02 108 XM_CamelCaseFrm001 4408 2.13 2.32 2.03 109 HTML_IMAGE_RATIO_08 4114 1.93 2.16 1.80 110 FONT_INVIS_LONG_LINE 4011 0.84 2.11 0.17 111 XMDiploma_00 3921 1.74 2.06 1.57 112 RELAYCOUNTRY_AU 3557 1.08 1.87 0.67 113 TR_XM_NoHeaderRelay 3332 0.67 1.75 0.10 114 XM_B_Unsub2 3330 1.48 1.75 1.34 115 FROM_EXCESS_BASE64 3307 1.75 1.74 1.75 116 SpammyFromTLD_02 3301 0.98 1.74 0.58 117 MAILING_LIST_MULTI 3183 2.33 1.67 2.67 118 T_XMHurry_00 3182 1.03 1.67 0.69 119 XM_H_Long_From02 3086 1.30 1.62 1.13 120 T_REMOTE_IMAGE 3080 2.91 1.62 3.59 121 HTML_MIME_NO_HTML_TAG 3065 1.91 1.61 2.06 122 XMStockSpam_06 3022 1.38 1.59 1.28 123 XM_B_SpammyWords4 3021 0.87 1.59 0.49 124 TR_Mismatch_TLD_02 2911 0.59 1.53 0.09 125 XM_SendGrid 2821 1.52 1.48 1.55 126 ANY_BOUNCE_MESSAGE 2755 6.22 1.45 8.71 127 BOUNCE_MESSAGE 2754 6.22 1.45 8.71 128 TR_XM_INV_DKIM 2713 0.52 1.43 0.05 129 XM_DK_Undo_01 2677 1.71 1.41 1.87 130 URI_TRY_3LD 2667 0.92 1.40 0.67 131 RCVD_IN_IADB_LISTED 2657 3.34 1.40 4.35 132 URI_HEX 2640 1.18 1.39 1.07 133 XMBdyGiftCard01 2619 0.97 1.38 0.76 134 URI_NOVOWEL 2616 1.52 1.38 1.60 135 RCVD_IN_IADB_SPF 2456 3.02 1.29 3.92 136 XMPhish30 2443 1.02 1.28 0.89 137 AC_BR_BONANZA 2430 0.48 1.28 0.06 138 RCVD_IN_IADB_DK 2354 2.72 1.24 3.49 139 RCVD_IN_IADB_SENDERID 2345 2.77 1.23 3.57 140 HTTPS_HTTP_MISMATCH 2275 0.94 1.20 0.81 141 XM_HighProb1 2217 0.40 1.17 0.00 142 XM_DIRTYINTL 2155 0.45 1.13 0.10 143 ALL_TRUSTED 2137 13.27 1.12 19.63 144 XMGenDplmaNmb 2132 0.92 1.12 0.82 145 TR_XM_InvalidRelay 2132 0.40 1.12 0.02 146 XM_H_Undi_Recip 2076 0.47 1.09 0.14 147 KHOP_HELO_FCRDNS 2068 1.09 1.09 1.09 148 XMHTML_After_End 2037 0.65 1.07 0.43 149 RCVD_IN_VALIDITY_RPBL 2024 0.44 1.06 0.11 150 T_XMDrugObfuBody_00 1970 0.72 1.04 0.55 151 XMSubMetaI_00 1959 0.71 1.03 0.55 152 DKIM_ADSP_CUSTOM_MED 1950 0.97 1.03 0.94 153 T_MONEY_PERCENT 1880 0.47 0.99 0.21 154 TR_LOTS_OF_MONEY2 1880 0.47 0.99 0.21 155 TR_XM_Undi_Recip19 1879 0.37 0.99 0.05 156 XMPhish14 1875 0.60 0.99 0.39 157 BOTNET_NORDNS 1867 0.34 0.98 0.01 158 HTML_TAG_BALANCE_BODY 1862 0.58 0.98 0.38 159 RELAYCOUNTRY_FR 1842 0.48 0.97 0.22 160 TR_Symld_Words 1781 1.22 0.94 1.37 161 TR_MetaPhish_Combo_01 1735 0.75 0.91 0.66 162 TR_XM_Base64_M1 1732 0.82 0.91 0.78 163 XMSexyCombo_01 1722 0.39 0.91 0.12 164 LongTLD 1719 0.54 0.90 0.35 165 MPART_ALT_DIFF_COUNT 1670 0.71 0.88 0.62 166 FORGED_GMAIL_RCVD 1667 0.67 0.88 0.56 167 XM_H_PHPMailer 1634 0.70 0.86 0.62 168 THIS_AD 1622 0.49 0.85 0.30 169 XMReplyNow 1622 0.44 0.85 0.23 170 XM_B_Phish66 1586 0.44 0.83 0.24 171 TR_XM_Base64_L1 1576 0.40 0.83 0.18 172 RDNS_DYNAMIC 1565 0.53 0.82 0.38 173 DIET_1 1549 0.48 0.81 0.30 174 NML_ADSP_CUSTOM_MED 1520 0.69 0.80 0.64 175 TR_XM_DK_SendGrid 1509 0.87 0.79 0.90 176 TVD_RCVD_IP 1440 1.19 0.76 1.42 177 XM_ProductURIs 1435 0.66 0.75 0.62 178 RELAYCOUNTRY_IN 1412 0.30 0.74 0.06 179 TR_Caps_n_Bayes_99 1408 0.28 0.74 0.03 180 XM_B_COVIDMETA 1354 0.39 0.71 0.22 181 T_TooManySym_02 1342 1.83 0.71 2.41 182 XM_PDF 1303 3.23 0.68 4.57 183 XM_B_DNDMA 1300 0.53 0.68 0.45 184 XM_UB99 1291 0.24 0.68 0.01 185 NORDNS_LOW_CONTRAST 1271 0.30 0.67 0.11 186 HOSTED_IMG_MULTI_PUB_01 1265 0.24 0.67 0.02 187 TR_XM_Undi_Recip2 1237 0.23 0.65 0.00 188 XMBody_78 1221 0.47 0.64 0.38 189 XM_B_SEO 1217 0.32 0.64 0.15 190 RELAYCOUNTRY_GB 1212 0.49 0.64 0.42 191 TR_XM_Spammywords 1210 0.37 0.64 0.23 192 XM_S_SpammyWords 1210 0.37 0.64 0.23 193 TR_XM_Undi_RecipCombo2 1195 0.22 0.63 0.01 194 XM_B_REG_HTML 1191 0.41 0.63 0.29 195 URIBL_DBL_SPAM 1183 0.22 0.62 0.00 196 T_Symld_Words_02 1174 0.56 0.62 0.54 197 XMSubMetaSxObfu_03 1171 0.45 0.62 0.36 198 SHOPIFY_IMG_NOT_RCVD_SFY 1170 0.41 0.62 0.31 199 TR_Sbj_FN_Bdy 1166 0.29 0.61 0.12 200 TooManyTo_002 1163 1.86 0.61 2.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 296614 81.73 81.90 81.64 2 RELAYCOUNTRY_US 280509 78.98 82.36 77.21 3 DKIM_SIGNED 260391 78.84 92.54 71.67 4 XM_DK_Pass 255790 76.99 89.56 70.41 5 DKIM_VALID 252257 76.01 88.56 69.43 6 DCC_CHECK_NEGATIVE 245055 57.11 37.37 67.45 7 XM_B_Unicode 242541 68.88 72.92 66.76 8 BAYES_50 209535 49.79 34.73 57.67 9 DKIM_VALID_AU 201930 60.47 69.80 55.58 10 XMListUnsubscribeExists 175024 57.94 76.60 48.18 11 XM_B_SpammyWords 152280 48.75 61.80 41.92 12 XM_B_Unicode3 142353 39.71 40.71 39.18 13 DCC_CHECK 118116 42.86 62.62 32.51 14 T_TM2_M_HEADER_IN_MSG 100442 25.31 20.84 27.65 15 DKIM_VALID_EF 99604 27.51 27.69 27.42 16 HTML_FONT_LOW_CONTRAST 98979 28.56 31.07 27.24 17 RCVD_IN_MSPIKE_H2 92937 25.35 24.92 25.58 18 FVGT_m_MULTI_ODD 91687 26.36 28.52 25.24 19 LOC_TINY_FONT_1 89534 28.06 34.59 24.64 20 XMSubLong 78019 22.58 24.68 21.47 21 T_KAM_HTML_FONT_INVALID 72800 21.75 25.01 20.04 22 ALL_TRUSTED 71328 13.27 1.12 19.63 23 MIME_HTML_ONLY 65650 20.92 26.36 18.07 24 XM_B_SpammyWords2 65368 24.45 36.79 17.99 25 XM_Multi_Part_URI 56138 15.57 15.80 15.45 26 TR_XM_DK_Unsub 47783 15.65 20.41 13.15 27 USER_IN_DEF_DKIM_WL 45288 9.04 2.49 12.47 28 UNPARSEABLE_RELAY 35663 10.55 11.96 9.82 29 BAYES_00 33375 6.20 0.49 9.19 30 BAYES_60 31772 8.05 6.71 8.75 31 ANY_BOUNCE_MESSAGE 31650 6.22 1.45 8.71 32 BOUNCE_MESSAGE 31649 6.22 1.45 8.71 33 LotsOfNums_01 30144 7.66 6.45 8.30 34 TooManyTo_001 29998 6.98 4.55 8.26 35 XM_DKIMWhitelistDomains 27691 5.03 0.07 7.62 36 XM_B_Unsub 27580 9.57 13.35 7.59 37 XM_Evil_Numbers_Gen 26876 7.43 7.49 7.40 38 TR_MAX_INTL_RELAY 25029 8.95 12.89 6.89 39 IN_ZIMBRA_NJ_WHITELIST 24622 4.47 0.06 6.78 40 LOTS_OF_MONEY 24246 8.75 12.71 6.67 41 TR_XM_DK_Bayes 23975 4.45 0.35 6.60 42 TR_XM_DK_Bayes1 23661 4.39 0.35 6.51 43 XM_H_GMP 22466 5.51 4.22 6.18 44 RCVD_IN_MSPIKE_H3 22063 6.65 7.75 6.07 45 RCVD_IN_MSPIKE_WL 22063 6.65 7.75 6.07 46 TR_XM_BayesUnsub 21430 8.30 12.89 5.90 47 TR_XM_DK_Bayes2 20544 3.81 0.29 5.65 48 XM_DK_Undo_02 20016 16.85 38.52 5.51 49 MIME_QP_LONG_LINE 19020 4.46 2.97 5.24 50 XM_H_Long_From01 18858 4.92 4.41 5.19 51 RCVD_IN_VALIDITY_SAFE 18598 4.41 3.04 5.12 52 T_TooManySym_01 18037 4.08 2.40 4.96 53 HTML_IMAGE_RATIO_02 17932 5.12 5.47 4.94 54 BAYES_05 17494 4.06 2.62 4.82 55 BAYES_99 17029 13.27 29.66 4.69 56 TR_XM_SpammyWords4 16715 6.89 11.27 4.60 57 XM_PDF 16586 3.23 0.68 4.57 58 BAYES_40 16339 5.16 6.41 4.50 59 RCVD_IN_VALIDITY_CERTIFIED 16076 3.82 2.67 4.42 60 XM_B_SpammyWords3 16067 6.79 11.32 4.42 61 RCVD_IN_IADB_LISTED 15811 3.34 1.40 4.35 62 BOTNET_IPINHOSTNAME 15796 7.00 12.06 4.35 63 XMStrtUSub 15316 3.73 2.81 4.22 64 BAYES_80 15122 5.47 7.98 4.16 65 XM_UncommonTLD01 15107 9.72 20.35 4.16 66 HTML_IMAGE_RATIO_04 14750 4.21 4.50 4.06 67 RCVD_IN_IADB_SPF 14242 3.02 1.29 3.92 68 RELAYCOUNTRY_META 14126 8.64 17.71 3.89 69 MPART_ALT_DIFF 14085 4.24 4.93 3.88 70 BAYES_999 13165 10.25 22.91 3.62 71 T_REMOTE_IMAGE 13043 2.91 1.62 3.59 72 RCVD_IN_IADB_SENDERID 12979 2.77 1.23 3.57 73 BAYES_20 12747 4.61 6.71 3.51 74 RCVD_IN_IADB_DK 12677 2.72 1.24 3.49 75 XMSubMetaSx_00 12128 4.03 5.36 3.34 76 XM_B_Phish_Phrases 12025 3.65 4.31 3.31 77 XM_SPF_SoftFail 11951 6.18 11.70 3.29 78 FSL_BULK_SIG 11907 4.56 7.00 3.28 79 XMNumbers 9918 8.10 18.35 2.73 80 BAYES_95 9891 3.39 4.68 2.72 81 MAILING_LIST_MULTI 9693 2.33 1.67 2.67 82 XM_Body_Dirty_Words 9666 3.85 6.13 2.66 83 XM_B_SpammyTLD 9541 2.66 2.71 2.63 84 TooManyTo_002 9112 1.86 0.61 2.51 85 MIME_HTML_MOSTLY 9048 2.75 3.25 2.49 86 HTML_IMAGE_RATIO_06 8929 3.02 4.09 2.46 87 RCVD_IN_IADB_VOUCHED 8841 1.78 0.54 2.43 88 T_TooManySym_02 8762 1.83 0.71 2.41 89 TR_XM_DKIM_Undo 8389 11.71 29.66 2.31 90 MIME_HTML_ONLY_MULTI 8342 2.47 2.81 2.30 91 DKIM_INVALID 8134 2.84 3.97 2.24 92 TM2_M_URI_OPT_OUT 7658 2.59 3.50 2.11 93 TR_XM_SpammyRelay 7622 6.18 13.99 2.10 94 HTML_MIME_NO_HTML_TAG 7483 1.91 1.61 2.06 95 TR_XM_PhishingBody 7422 2.62 3.73 2.04 96 XM_CamelCaseFrm001 7373 2.13 2.32 2.03 97 T_XMDrugObfuBody_14 7088 2.37 3.17 1.95 98 INVALID_MSGID 7009 1.32 0.16 1.93 99 XM_DK_Undo_01 6790 1.71 1.41 1.87 100 TO_MALFORMED 6689 1.21 0.01 1.84 101 HTML_IMAGE_RATIO_08 6549 1.93 2.16 1.80 102 HELO_NODOT 6543 1.34 0.47 1.80 103 HELO_NO_DOMAIN 6534 1.34 0.47 1.80 104 MSGID_NOFQDN1 6500 1.20 0.09 1.79 105 FROM_EXCESS_BASE64 6359 1.75 1.74 1.75 106 XM_B_Investor 6137 2.34 3.57 1.69 107 RCVD_IN_IADB_OPTIN 6020 1.21 0.36 1.66 108 TR_DCC_Bayes_99 5834 8.38 21.33 1.61 109 URI_NOVOWEL 5810 1.52 1.38 1.60 110 XMDiploma_00 5700 1.74 2.06 1.57 111 TR_XM_UnparsRelay 5689 3.30 6.61 1.57 112 UNTRUSTED_Relay 5620 2.72 4.96 1.55 113 XM_SendGrid 5619 1.52 1.48 1.55 114 SUBJ_ALL_CAPS 5559 1.89 2.57 1.53 115 T_XMDrugObfuBody_08 5475 1.85 2.51 1.51 116 TVD_RCVD_IP 5151 1.19 0.76 1.42 117 TooManyTo_003 5042 1.10 0.55 1.39 118 TR_Symld_Words 4962 1.22 0.94 1.37 119 IN_HORDE_ADDRESS_BOOK 4929 0.91 0.06 1.36 120 XMGappySubj_01 4881 0.93 0.15 1.34 121 XM_B_Unsub2 4867 1.48 1.75 1.34 122 TM2_M_VERY_LONG_WORD 4645 1.85 2.93 1.28 123 XMStockSpam_06 4644 1.38 1.59 1.28 124 XMSexyCombo_05 4476 2.01 3.50 1.23 125 TR_XM_SpammyWords5 4405 2.06 3.68 1.21 126 BOTNET 4396 3.36 7.48 1.21 127 XM_GoogleGroups 4384 0.97 0.51 1.21 128 XMBSHREFv2 4303 0.92 0.42 1.18 129 RELAYCOUNTRY_CA 4292 4.05 9.54 1.18 130 XM_OfRef6 4194 1.86 3.21 1.15 131 XMBody_95 4126 0.81 0.19 1.14 132 XM_H_Long_From02 4106 1.30 1.62 1.13 133 TVD_SPACE_RATIO 3981 0.76 0.12 1.10 134 KHOP_HELO_FCRDNS 3958 1.09 1.09 1.09 135 URI_HEX 3871 1.18 1.39 1.07 136 XMCapTrack 3786 0.79 0.30 1.04 137 SpammyFromTLD_01 3761 6.53 17.03 1.04 138 TooManyTo_004 3684 0.84 0.50 1.01 139 T_FILL_THIS_FORM_SHORT 3535 1.82 3.44 0.97 140 DKIM_ADSP_CUSTOM_MED 3417 0.97 1.03 0.94 141 XM_UB50 3398 1.49 2.55 0.94 142 TR_XM_DK_SendGrid 3282 0.87 0.79 0.90 143 XMPhish30 3219 1.02 1.28 0.89 144 T_TooManySym_03 3053 0.62 0.19 0.84 145 XMSubNoVowel 3034 0.70 0.43 0.84 146 TooManyTo_005 3006 0.70 0.46 0.83 147 XMBrknScrpt_02 2985 1.45 2.66 0.82 148 XMGenDplmaNmb 2965 0.92 1.12 0.82 149 XMBody_17 2964 2.35 5.29 0.82 150 XMGappySubj_02 2958 0.56 0.07 0.81 151 HTTPS_HTTP_MISMATCH 2935 0.94 1.20 0.81 152 TR_XM_Base64_M1 2832 0.82 0.91 0.78 153 XMBdyGiftCard01 2751 0.97 1.38 0.76 154 XM_H_Trusted_IP 2651 0.48 0.00 0.73 155 T_XMHurry_00 2497 1.03 1.67 0.69 156 URI_TRY_3LD 2449 0.92 1.40 0.67 157 RELAYCOUNTRY_AU 2447 1.08 1.87 0.67 158 XM_ShortIntro_01 2442 0.58 0.42 0.67 159 RCVD_IN_BL_SPAMCOP_NET 2439 4.36 11.40 0.67 160 TR_MetaPhish_Combo_01 2396 0.75 0.91 0.66 161 XMNoVowels 2350 0.56 0.39 0.65 162 NML_ADSP_CUSTOM_MED 2319 0.69 0.80 0.64 163 FROM_GOV_DKIM_AU 2280 0.45 0.12 0.63 164 MPART_ALT_DIFF_COUNT 2266 0.71 0.88 0.62 165 T_OBFU_PDF_ATTACH 2262 0.44 0.10 0.62 166 XM_H_PHPMailer 2246 0.70 0.86 0.62 167 XM_ProductURIs 2237 0.66 0.75 0.62 168 XM_B_COPY_HTML 2128 0.58 0.57 0.59 169 SHORT_HELO_AND_INLINE_IMAGE 2113 0.40 0.05 0.58 170 SpammyFromTLD_02 2108 0.98 1.74 0.58 171 TM2_M_BODY_EMPTY 2058 5.51 14.96 0.57 172 TR_LOTS_OF_MONEY3 2053 1.50 3.28 0.57 173 FORGED_GMAIL_RCVD 2041 0.67 0.88 0.56 174 T_XMDrugObfuBody_00 2004 0.72 1.04 0.55 175 XMSubMetaI_00 1994 0.71 1.03 0.55 176 XM_B_FormFill 1987 0.37 0.04 0.55 177 USER_IN_WHITELIST 1983 0.36 0.00 0.55 178 USER_IN_WELCOMELIST 1983 0.36 0.00 0.55 179 T_Symld_Words_02 1952 0.56 0.62 0.54 180 FILL_THIS_FORM 1942 0.42 0.19 0.53 181 TR_XM_SpammyWords2 1855 4.49 12.10 0.51 182 TR_XM_FormFill2 1846 5.92 16.25 0.51 183 TR_XM_PHPForged 1811 5.94 16.32 0.50 184 TR_XM_PHPDW 1796 5.92 16.28 0.49 185 XM_B_SpammyWords4 1788 0.87 1.59 0.49 186 XM_H_PHPOS 1771 5.90 16.25 0.49 187 PLING_QUERY 1730 0.52 0.61 0.48 188 TO_NO_BRKTS_HTML_ONLY 1650 0.39 0.28 0.45 189 XMPhish08 1643 0.49 0.57 0.45 190 XM_B_DNDMA 1633 0.53 0.68 0.45 191 XMMoneyMeta_00 1631 0.46 0.47 0.45 192 XMDateMe_00 1623 0.48 0.53 0.45 193 XMHTML_After_End 1561 0.65 1.07 0.43 194 RELAYCOUNTRY_GB 1519 0.49 0.64 0.42 195 HTML_IMAGE_ONLY_32 1467 0.33 0.18 0.40 196 HTML_IMAGE_ONLY_28 1454 0.36 0.27 0.40 197 HTML_FONT_FACE_BAD 1453 0.44 0.52 0.40 198 TR_XM_SPAMCOP 1438 3.44 9.25 0.40 199 XMPhish14 1423 0.60 0.99 0.39 200 MISSING_HEADERS 1409 0.41 0.45 0.39 ----------------------------------------------------------------------