Email: 525514 Autolearn: 0 AvgScore: 4.28 AvgScanTime: 1.34 sec Spam: 179429 Autolearn: 0 AvgScore: 12.94 AvgScanTime: 1.41 sec Ham: 346085 Autolearn: 0 AvgScore: -0.20 AvgScanTime: 1.31 sec Time Spent Running SA: 195.90 hours Time Spent Processing Spam: 70.04 hours Time Spent Processing Ham: 125.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 165725 77.53 92.36 69.84 2 XM_DK_Pass 161069 75.81 89.77 68.58 3 DKIM_VALID 158862 74.79 88.54 67.66 4 HTML_MESSAGE 147965 82.57 82.46 82.62 5 RELAYCOUNTRY_US 146685 77.59 81.75 75.43 6 XMListUnsubscribeExists 138571 57.97 77.23 47.98 7 XM_B_Unicode 134027 69.90 74.70 67.42 8 DKIM_VALID_AU 123507 59.10 68.83 54.06 9 DCC_CHECK 112784 41.78 62.86 30.86 10 XM_B_SpammyWords 112413 48.32 62.65 40.90 11 XM_B_Unicode3 72878 39.13 40.62 38.36 12 XM_DK_Undo_02 71936 17.59 40.09 5.92 13 DCC_CHECK_NEGATIVE 66627 58.20 37.13 69.12 14 XM_B_SpammyWords2 65705 23.73 36.62 17.04 15 BAYES_50 60573 49.20 33.76 57.20 16 LOC_TINY_FONT_1 60107 27.27 33.50 24.04 17 HTML_FONT_LOW_CONTRAST 55803 28.90 31.10 27.76 18 BAYES_99 55089 13.84 30.70 5.10 19 TR_XM_DKIM_Undo 54765 12.01 30.52 2.41 20 FVGT_m_MULTI_ODD 51920 25.87 28.94 24.28 21 DKIM_VALID_EF 50029 26.60 27.88 25.94 22 RCVD_IN_MSPIKE_H2 47512 25.79 26.48 25.43 23 MIME_HTML_ONLY 46395 20.82 25.86 18.20 24 T_KAM_HTML_FONT_INVALID 45523 21.90 25.37 20.10 25 XMSubLong 44937 22.33 25.04 20.92 26 BAYES_999 43198 10.90 24.08 4.07 27 TR_DCC_Bayes_99 39828 8.61 22.20 1.57 28 TR_XM_DK_Unsub 37504 15.47 20.90 12.66 29 T_TM2_M_HEADER_IN_MSG 36653 23.82 20.43 25.58 30 XM_UncommonTLD01 36333 11.76 20.25 7.36 31 XMNumbers 31655 7.77 17.64 2.64 32 XM_Multi_Part_URI 31450 15.61 17.53 14.61 33 RELAYCOUNTRY_META 31055 8.35 17.31 3.71 34 SpammyFromTLD_01 29850 6.28 16.64 0.91 35 TR_XM_PHPForged 28760 5.82 16.03 0.52 36 TR_XM_PHPDW 28666 5.80 15.98 0.52 37 TR_XM_FormFill2 28622 5.79 15.95 0.52 38 XM_H_PHPOS 28605 5.78 15.94 0.51 39 TM2_M_BODY_EMPTY 26118 5.38 14.56 0.62 40 XMEmptyBody_01 26067 5.08 14.53 0.19 41 TR_XM_SpammyRelay 24700 6.08 13.77 2.10 42 LOTS_OF_MONEY 24620 9.04 13.72 6.61 43 XM_B_Unsub 24429 9.47 13.61 7.31 44 TR_MAX_INTL_RELAY 23663 8.93 13.19 6.72 45 TR_XM_BayesUnsub 23573 8.25 13.14 5.71 46 TR_XM_SpammyWords4 22090 7.19 12.31 4.54 47 TR_XM_SpammyWords2 21899 4.52 12.20 0.53 48 RCVD_IN_BL_SPAMCOP_NET 21365 4.52 11.91 0.70 49 UNPARSEABLE_RELAY 21175 10.22 11.80 9.40 50 XM_B_SpammyWords3 20845 6.52 11.62 3.87 51 XM_SPF_SoftFail 20486 8.10 11.42 6.38 52 BOTNET_IPINHOSTNAME 19970 6.88 11.13 4.67 53 TR_XM_SPAMCOP 17711 3.62 9.87 0.38 54 RELAYCOUNTRY_CA 17396 4.06 9.70 1.14 55 BAYES_80 14491 5.46 8.08 4.10 56 RCVD_IN_MSPIKE_WL 14144 6.42 7.88 5.66 57 RCVD_IN_MSPIKE_H3 14144 6.42 7.88 5.66 58 BOTNET 13643 3.50 7.60 1.37 59 FSL_BULK_SIG 12750 4.41 7.11 3.01 60 XM_Evil_Numbers_Gen 12277 6.92 6.84 6.96 61 BAYES_60 11899 8.21 6.63 9.02 62 TR_XM_UnparsRelay 11618 3.14 6.47 1.42 63 XMBody_17 11613 2.73 6.47 0.79 64 BAYES_20 11607 4.56 6.47 3.57 65 BAYES_40 11122 5.28 6.20 4.80 66 XM_Body_Dirty_Words 10915 4.25 6.08 3.30 67 LotsOfNums_01 10843 7.31 6.04 7.97 68 MPART_ALT_DIFF 10667 4.93 5.94 4.41 69 HTML_IMAGE_RATIO_02 10082 5.15 5.62 4.91 70 XMSubMetaSx_00 9894 4.17 5.51 3.48 71 UNTRUSTED_Relay 9176 2.60 5.11 1.30 72 HTML_IMAGE_RATIO_04 8941 4.54 4.98 4.31 73 BAYES_95 8612 3.36 4.80 2.62 74 TooManyTo_001 8455 6.77 4.71 7.84 75 XM_B_Phish_Phrases 8322 3.44 4.64 2.82 76 XM_H_Long_From01 7605 5.00 4.24 5.39 77 XMSexyCombo_05 7561 2.56 4.21 1.70 78 TR_LOTS_OF_MONEY3 7479 1.95 4.17 0.79 79 XM_H_GMP 7102 5.26 3.96 5.93 80 XM_B_Investor 7079 2.41 3.95 1.62 81 MIME_HTML_MOSTLY 7061 2.85 3.94 2.29 82 TR_XM_SpammyWords5 6928 2.08 3.86 1.16 83 DKIM_INVALID 6863 2.74 3.82 2.18 84 T_XMDrugObfuBody_08 6622 2.44 3.69 1.79 85 T_FILL_THIS_FORM_SHORT 6600 1.91 3.68 0.99 86 XM_OfRef6 6550 2.01 3.65 1.15 87 HTML_IMAGE_RATIO_06 6329 2.73 3.53 2.31 88 XMStrtUSub 6173 5.11 3.44 5.97 89 RCVD_IN_VALIDITY_SAFE 5871 4.23 3.27 4.73 90 T_XMDrugObfuBody_14 5772 2.16 3.22 1.61 91 TM2_M_VERY_LONG_WORD 5355 2.01 2.98 1.50 92 RCVD_IN_VALIDITY_CERTIFIED 5126 3.57 2.86 3.95 93 MIME_HTML_ONLY_MULTI 5112 2.51 2.85 2.33 94 TR_XM_PhishingBody 5110 1.91 2.85 1.42 95 TM2_M_URI_OPT_OUT 4984 2.28 2.78 2.03 96 XM_UB50 4960 1.45 2.76 0.77 97 XM_B_SpammyTLD 4917 2.67 2.74 2.64 98 MIME_QP_LONG_LINE 4779 4.15 2.66 4.92 99 BAYES_05 4710 3.78 2.62 4.37 100 USER_IN_DEF_DKIM_WL 4690 9.64 2.61 13.28 101 HTML_IMAGE_RATIO_08 4524 2.14 2.52 1.94 102 TR_XM_FormFill 4471 0.88 2.49 0.04 103 XM_CamelCaseFrm001 4386 2.31 2.44 2.24 104 TR_XM_BayesRelay 4120 0.79 2.30 0.00 105 XMBrknScrpt_02 3798 1.18 2.12 0.70 106 SUBJ_ALL_CAPS 3757 1.60 2.09 1.34 107 XMDiploma_00 3680 1.62 2.05 1.39 108 XM_URI_RBL 3612 0.79 2.01 0.15 109 XM_B_SpammyWords4 3579 0.99 1.99 0.47 110 T_TooManySym_01 3525 3.98 1.96 5.02 111 FONT_INVIS_LONG_LINE 3522 0.69 1.96 0.03 112 RELAYCOUNTRY_AU 3482 1.22 1.94 0.84 113 T_XMHurry_00 3248 1.05 1.81 0.66 114 FROM_EXCESS_BASE64 3091 1.75 1.72 1.76 115 URI_NOVOWEL 3047 1.66 1.70 1.64 116 SpammyFromTLD_02 2968 3.22 1.65 4.04 117 XM_B_Unsub2 2883 1.47 1.61 1.41 118 XMSubMetaI_00 2811 1.06 1.57 0.79 119 TR_XM_NoHeaderRelay 2752 0.60 1.53 0.12 120 T_REMOTE_IMAGE 2694 2.66 1.50 3.27 121 ALL_TRUSTED 2562 14.67 1.43 21.54 122 TR_MetaPhish_Combo_01 2558 1.06 1.43 0.87 123 XMStockSpam_06 2540 1.20 1.42 1.09 124 AC_BR_BONANZA 2476 0.52 1.38 0.07 125 URI_TRY_3LD 2409 0.88 1.34 0.63 126 MAILING_LIST_MULTI 2392 2.08 1.33 2.47 127 RCVD_IN_VALIDITY_RPBL 2371 0.55 1.32 0.16 128 XM_DK_Undo_01 2367 1.61 1.32 1.76 129 TR_Mismatch_TLD_02 2363 0.49 1.32 0.07 130 RCVD_IN_IADB_LISTED 2328 3.47 1.30 4.59 131 ANY_BOUNCE_MESSAGE 2303 5.49 1.28 7.67 132 BOUNCE_MESSAGE 2301 5.49 1.28 7.67 133 XM_SendGrid 2270 1.35 1.27 1.40 134 HTML_MIME_NO_HTML_TAG 2252 1.86 1.26 2.17 135 TR_XM_INV_DKIM 2244 0.46 1.25 0.05 136 LongTLD 2240 0.65 1.25 0.34 137 HK_RANDOM_REPLYTO 2221 0.50 1.24 0.12 138 XMHTML_After_End 2211 0.64 1.23 0.34 139 URI_HEX 2181 1.13 1.22 1.09 140 RCVD_IN_IADB_SPF 2138 3.11 1.19 4.11 141 RCVD_IN_IADB_DK 2053 2.79 1.14 3.64 142 RCVD_IN_IADB_SENDERID 2034 2.85 1.13 3.74 143 THIS_AD 2021 0.70 1.13 0.48 144 XM_H_Undi_Recip 1976 0.49 1.10 0.17 145 XM_B_COVIDMETA 1952 0.60 1.09 0.34 146 XMPhish30 1927 0.65 1.07 0.43 147 XM_HighProb1 1926 0.37 1.07 0.00 148 XMBdyGiftCard01 1896 0.73 1.06 0.56 149 XMGenDplmaNmb 1872 0.75 1.04 0.60 150 BOTNET_NORDNS 1853 0.36 1.03 0.01 151 KHOP_HELO_FCRDNS 1846 0.99 1.03 0.97 152 XM_B_COPY_HTML 1841 0.81 1.03 0.70 153 HTML_TAG_BALANCE_BODY 1839 0.57 1.02 0.33 154 XMClaimOffer 1822 0.51 1.02 0.25 155 XMReplyNow 1791 0.50 1.00 0.24 156 TR_XM_Undi_Recip19 1769 0.37 0.99 0.06 157 T_XMDrugObfuBody_00 1752 0.69 0.98 0.54 158 TM2_M_A_HREF_HREF 1750 0.51 0.98 0.27 159 DKIM_ADSP_CUSTOM_MED 1748 0.96 0.97 0.96 160 HTTPS_HTTP_MISMATCH 1747 0.87 0.97 0.82 161 RCVD_IN_PSBL 1732 0.51 0.97 0.28 162 JH_SPAMMY_HEADERS 1698 0.32 0.95 0.00 163 TR_XM_Base64_M1 1656 0.64 0.92 0.49 164 T_Symld_Words_02 1643 0.56 0.92 0.38 165 XMBody_78 1637 0.46 0.91 0.22 166 XM_H_Long_From02 1600 0.98 0.89 1.03 167 TR_XM_Undi_RecipCombo2 1590 0.31 0.89 0.00 168 AC_HTML_NONSENSE_TAGS 1586 0.32 0.88 0.03 169 RELAYCOUNTRY_IN 1582 0.34 0.88 0.05 170 RDNS_DYNAMIC 1484 0.50 0.83 0.32 171 XM_OfRef7 1480 0.41 0.82 0.19 172 TR_Caps_n_Bayes_99 1473 0.30 0.82 0.03 173 FORGED_GMAIL_RCVD 1469 0.64 0.82 0.55 174 XM_H_PHPMailer 1468 0.71 0.82 0.65 175 XMSexyCombo_01 1464 0.47 0.82 0.29 176 MPART_ALT_DIFF_COUNT 1454 0.65 0.81 0.56 177 XM_B_DNDMA 1443 0.51 0.80 0.35 178 NML_ADSP_CUSTOM_MED 1440 0.69 0.80 0.63 179 TR_XM_DK_SendGrid 1423 0.88 0.79 0.93 180 PLING_QUERY 1417 0.50 0.79 0.35 181 TR_LOTS_OF_MONEY2 1395 0.40 0.78 0.20 182 T_MONEY_PERCENT 1395 0.40 0.78 0.20 183 XM_B_SEO 1380 0.39 0.77 0.19 184 TR_Symld_Words 1342 1.19 0.75 1.42 185 XM_B_REG_HTML 1334 0.48 0.74 0.35 186 TR_XM_InvalidRelay 1321 0.26 0.74 0.02 187 TR_XM_Base64_L1 1316 0.37 0.73 0.18 188 TM2_M_OBFU_COMMENT 1299 0.42 0.72 0.27 189 XM_B_Phish66 1289 0.43 0.72 0.29 190 TR_XM_Undi_Recip11 1288 0.27 0.72 0.04 191 TVD_RCVD_IP 1285 1.18 0.72 1.42 192 XMSubMetaSxObfu_03 1275 0.57 0.71 0.50 193 XM_DIRTYINTL 1272 0.31 0.71 0.10 194 XMMoneyMeta_00 1270 0.60 0.71 0.54 195 TR_XM_COVIDMETA4 1269 0.30 0.71 0.10 196 RELAYCOUNTRY_RU 1266 0.25 0.71 0.02 197 T_STY_INVIS_DIRECT 1196 0.34 0.67 0.17 198 HTML_FONT_FACE_BAD 1185 0.52 0.66 0.45 199 BAYES_00 1181 6.18 0.66 9.05 200 XM_UB99 1168 0.22 0.65 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 285946 82.57 82.46 82.62 2 RELAYCOUNTRY_US 261036 77.59 81.75 75.43 3 DKIM_SIGNED 241714 77.53 92.36 69.84 4 DCC_CHECK_NEGATIVE 239200 58.20 37.13 69.12 5 XM_DK_Pass 237342 75.81 89.77 68.58 6 DKIM_VALID 234164 74.79 88.54 67.66 7 XM_B_Unicode 233315 69.90 74.70 67.42 8 BAYES_50 197970 49.20 33.76 57.20 9 DKIM_VALID_AU 187093 59.10 68.83 54.06 10 XMListUnsubscribeExists 166044 57.97 77.23 47.98 11 XM_B_SpammyWords 141538 48.32 62.65 40.90 12 XM_B_Unicode3 132753 39.13 40.62 38.36 13 DCC_CHECK 106788 41.78 62.86 30.86 14 HTML_FONT_LOW_CONTRAST 96088 28.90 31.10 27.76 15 DKIM_VALID_EF 89772 26.60 27.88 25.94 16 T_TM2_M_HEADER_IN_MSG 88527 23.82 20.43 25.58 17 RCVD_IN_MSPIKE_H2 87995 25.79 26.48 25.43 18 FVGT_m_MULTI_ODD 84038 25.87 28.94 24.28 19 LOC_TINY_FONT_1 83184 27.27 33.50 24.04 20 ALL_TRUSTED 74531 14.67 1.43 21.54 21 XMSubLong 72400 22.33 25.04 20.92 22 T_KAM_HTML_FONT_INVALID 69552 21.90 25.37 20.10 23 MIME_HTML_ONLY 62992 20.82 25.86 18.20 24 XM_B_SpammyWords2 58978 23.73 36.62 17.04 25 XM_Multi_Part_URI 50564 15.61 17.53 14.61 26 USER_IN_DEF_DKIM_WL 45958 9.64 2.61 13.28 27 TR_XM_DK_Unsub 43808 15.47 20.90 12.66 28 UNPARSEABLE_RELAY 32548 10.22 11.80 9.40 29 BAYES_00 31319 6.18 0.66 9.05 30 BAYES_60 31229 8.21 6.63 9.02 31 LotsOfNums_01 27588 7.31 6.04 7.97 32 TooManyTo_001 27143 6.77 4.71 7.84 33 ANY_BOUNCE_MESSAGE 26543 5.49 1.28 7.67 34 BOUNCE_MESSAGE 26539 5.49 1.28 7.67 35 XM_DKIMWhitelistDomains 25636 4.88 0.01 7.41 36 XM_UncommonTLD01 25485 11.76 20.25 7.36 37 XM_B_Unsub 25314 9.47 13.61 7.31 38 XM_Evil_Numbers_Gen 24102 6.92 6.84 6.96 39 IN_ZIMBRA_NJ_WHITELIST 23523 4.50 0.08 6.80 40 TR_MAX_INTL_RELAY 23265 8.93 13.19 6.72 41 LOTS_OF_MONEY 22880 9.04 13.72 6.61 42 XM_SPF_SoftFail 22074 8.10 11.42 6.38 43 TR_XM_DK_Bayes 21381 4.23 0.49 6.18 44 TR_XM_DK_Bayes1 21072 4.17 0.48 6.09 45 XMStrtUSub 20657 5.11 3.44 5.97 46 XM_H_GMP 20521 5.26 3.96 5.93 47 XM_DK_Undo_02 20489 17.59 40.09 5.92 48 TR_XM_BayesUnsub 19777 8.25 13.14 5.71 49 RCVD_IN_MSPIKE_WL 19577 6.42 7.88 5.66 50 RCVD_IN_MSPIKE_H3 19577 6.42 7.88 5.66 51 XM_H_Long_From01 18661 5.00 4.24 5.39 52 TR_XM_DK_Bayes2 18114 3.56 0.34 5.23 53 BAYES_99 17650 13.84 30.70 5.10 54 T_TooManySym_01 17365 3.98 1.96 5.02 55 MIME_QP_LONG_LINE 17016 4.15 2.66 4.92 56 HTML_IMAGE_RATIO_02 17002 5.15 5.62 4.91 57 BAYES_40 16605 5.28 6.20 4.80 58 RCVD_IN_VALIDITY_SAFE 16372 4.23 3.27 4.73 59 BOTNET_IPINHOSTNAME 16162 6.88 11.13 4.67 60 RCVD_IN_IADB_LISTED 15888 3.47 1.30 4.59 61 TR_XM_SpammyWords4 15704 7.19 12.31 4.54 62 MPART_ALT_DIFF 15255 4.93 5.94 4.41 63 BAYES_05 15137 3.78 2.62 4.37 64 XM_PDF 14971 3.01 0.46 4.33 65 HTML_IMAGE_RATIO_04 14907 4.54 4.98 4.31 66 RCVD_IN_IADB_SPF 14217 3.11 1.19 4.11 67 BAYES_80 14183 5.46 8.08 4.10 68 BAYES_999 14093 10.90 24.08 4.07 69 SpammyFromTLD_02 13977 3.22 1.65 4.04 70 RCVD_IN_VALIDITY_CERTIFIED 13657 3.57 2.86 3.95 71 XM_B_SpammyWords3 13393 6.52 11.62 3.87 72 RCVD_IN_IADB_SENDERID 12936 2.85 1.13 3.74 73 RELAYCOUNTRY_META 12846 8.35 17.31 3.71 74 RCVD_IN_IADB_DK 12600 2.79 1.14 3.64 75 BAYES_20 12351 4.56 6.47 3.57 76 XMSubMetaSx_00 12040 4.17 5.51 3.48 77 XM_Body_Dirty_Words 11413 4.25 6.08 3.30 78 T_REMOTE_IMAGE 11309 2.66 1.50 3.27 79 FSL_BULK_SIG 10417 4.41 7.11 3.01 80 XM_B_Phish_Phrases 9751 3.44 4.64 2.82 81 RCVD_IN_IADB_VOUCHED 9305 1.93 0.47 2.69 82 XMNumbers 9153 7.77 17.64 2.64 83 XM_B_SpammyTLD 9122 2.67 2.74 2.64 84 BAYES_95 9070 3.36 4.80 2.62 85 T_TooManySym_02 9062 1.89 0.49 2.62 86 MAILING_LIST_MULTI 8557 2.08 1.33 2.47 87 TR_XM_DKIM_Undo 8342 12.01 30.52 2.41 88 MIME_HTML_ONLY_MULTI 8067 2.51 2.85 2.33 89 HTML_IMAGE_RATIO_06 7994 2.73 3.53 2.31 90 MIME_HTML_MOSTLY 7938 2.85 3.94 2.29 91 TooManyTo_002 7862 1.70 0.59 2.27 92 XM_CamelCaseFrm001 7751 2.31 2.44 2.24 93 DKIM_INVALID 7550 2.74 3.82 2.18 94 HTML_MIME_NO_HTML_TAG 7504 1.86 1.26 2.17 95 TR_XM_SpammyRelay 7252 6.08 13.77 2.10 96 TM2_M_URI_OPT_OUT 7018 2.28 2.78 2.03 97 INVALID_MSGID 6963 1.39 0.20 2.01 98 HTML_IMAGE_RATIO_08 6705 2.14 2.52 1.94 99 TO_MALFORMED 6694 1.28 0.01 1.93 100 MSGID_NOFQDN1 6490 1.27 0.11 1.88 101 RCVD_IN_IADB_OPTIN 6294 1.31 0.32 1.82 102 T_XMDrugObfuBody_08 6204 2.44 3.69 1.79 103 XM_DK_Undo_01 6095 1.61 1.32 1.76 104 FROM_EXCESS_BASE64 6083 1.75 1.72 1.76 105 XMSexyCombo_05 5884 2.56 4.21 1.70 106 URI_NOVOWEL 5686 1.66 1.70 1.64 107 XM_B_Investor 5598 2.41 3.95 1.62 108 T_XMDrugObfuBody_14 5563 2.16 3.22 1.61 109 TR_DCC_Bayes_99 5436 8.61 22.20 1.57 110 HELO_NODOT 5216 1.19 0.57 1.51 111 HELO_NO_DOMAIN 5214 1.19 0.57 1.51 112 TM2_M_VERY_LONG_WORD 5187 2.01 2.98 1.50 113 IN_HORDE_ADDRESS_BOOK 5179 1.00 0.05 1.50 114 XMGappySubj_01 5074 1.01 0.14 1.47 115 TR_Symld_Words 4912 1.19 0.75 1.42 116 TVD_RCVD_IP 4910 1.18 0.72 1.42 117 TR_XM_UnparsRelay 4909 3.14 6.47 1.42 118 TR_XM_PhishingBody 4906 1.91 2.85 1.42 119 XM_B_Unsub2 4866 1.47 1.61 1.41 120 XM_SendGrid 4843 1.35 1.27 1.40 121 XMDiploma_00 4818 1.62 2.05 1.39 122 BOTNET 4744 3.50 7.60 1.37 123 SUBJ_ALL_CAPS 4645 1.60 2.09 1.34 124 UNTRUSTED_Relay 4493 2.60 5.11 1.30 125 TooManyTo_003 4401 1.02 0.52 1.27 126 TVD_SPACE_RATIO 4295 0.84 0.08 1.24 127 XM_H_Trusted_IP 4272 0.81 0.00 1.23 128 XMBSHREFv2 4129 0.88 0.27 1.19 129 XMBody_95 4059 0.80 0.09 1.17 130 TR_XM_SpammyWords5 4011 2.08 3.86 1.16 131 XM_OfRef6 3991 2.01 3.65 1.15 132 RELAYCOUNTRY_CA 3946 4.06 9.70 1.14 133 XMStockSpam_06 3773 1.20 1.42 1.09 134 URI_HEX 3769 1.13 1.22 1.09 135 XM_GoogleGroups 3627 0.84 0.43 1.05 136 XM_H_Long_From02 3568 0.98 0.89 1.03 137 T_FILL_THIS_FORM_SHORT 3416 1.91 3.68 0.99 138 KHOP_HELO_FCRDNS 3352 0.99 1.03 0.97 139 DKIM_ADSP_CUSTOM_MED 3311 0.96 0.97 0.96 140 TooManyTo_004 3256 0.78 0.47 0.94 141 TR_XM_DK_SendGrid 3221 0.88 0.79 0.93 142 XMCapTrack 3187 0.70 0.27 0.92 143 SpammyFromTLD_01 3151 6.28 16.64 0.91 144 T_TooManySym_03 3146 0.66 0.17 0.91 145 XMSubNoVowel 3102 0.73 0.41 0.90 146 TR_MetaPhish_Combo_01 3012 1.06 1.43 0.87 147 FROM_GOV_DKIM_AU 2956 0.60 0.11 0.85 148 RELAYCOUNTRY_AU 2911 1.22 1.94 0.84 149 HTTPS_HTTP_MISMATCH 2822 0.87 0.97 0.82 150 TR_LOTS_OF_MONEY3 2744 1.95 4.17 0.79 151 XMSubMetaI_00 2735 1.06 1.57 0.79 152 XMBody_17 2724 2.73 6.47 0.79 153 TooManyTo_005 2709 0.67 0.45 0.78 154 XMGappySubj_02 2688 0.54 0.07 0.78 155 XM_UB50 2658 1.45 2.76 0.77 156 XMSolicitRefs_0 2624 0.60 0.29 0.76 157 T_OBFU_PDF_ATTACH 2432 0.49 0.09 0.70 158 XM_B_COPY_HTML 2423 0.81 1.03 0.70 159 XMBrknScrpt_02 2415 1.18 2.12 0.70 160 RCVD_IN_BL_SPAMCOP_NET 2411 4.52 11.91 0.70 161 XM_ProductURIs 2407 0.68 0.64 0.70 162 T_XMHurry_00 2280 1.05 1.81 0.66 163 XM_H_PHPMailer 2251 0.71 0.82 0.65 164 URI_TRY_3LD 2190 0.88 1.34 0.63 165 NML_ADSP_CUSTOM_MED 2182 0.69 0.80 0.63 166 XM_ShortIntro_01 2171 0.56 0.44 0.63 167 TM2_M_BODY_EMPTY 2163 5.38 14.56 0.62 168 XMGenDplmaNmb 2074 0.75 1.04 0.60 169 MPART_ALT_DIFF_COUNT 1953 0.65 0.81 0.56 170 XMBdyGiftCard01 1925 0.73 1.06 0.56 171 FORGED_GMAIL_RCVD 1908 0.64 0.82 0.55 172 T_XMDrugObfuBody_00 1886 0.69 0.98 0.54 173 XMMoneyMeta_00 1873 0.60 0.71 0.54 174 USER_IN_WELCOMELIST 1858 0.35 0.00 0.54 175 USER_IN_WHITELIST 1858 0.35 0.00 0.54 176 XMNoVowels 1846 0.47 0.35 0.53 177 TR_XM_SpammyWords2 1844 4.52 12.20 0.53 178 TR_XM_FormFill2 1813 5.79 15.95 0.52 179 TR_XM_PHPForged 1805 5.82 16.03 0.52 180 TR_XM_PHPDW 1789 5.80 15.98 0.52 181 FILL_THIS_FORM 1767 0.45 0.32 0.51 182 XM_H_PHPOS 1756 5.78 15.94 0.51 183 XMSubMetaSxObfu_03 1733 0.57 0.71 0.50 184 XM_B_FormFill 1704 0.36 0.10 0.49 185 TR_XM_Base64_M1 1694 0.64 0.92 0.49 186 THIS_AD 1660 0.70 1.13 0.48 187 XM_B_SpammyWords4 1640 0.99 1.99 0.47 188 HTML_IMAGE_ONLY_32 1578 0.36 0.18 0.46 189 SHORT_HELO_AND_INLINE_IMAGE 1559 0.31 0.04 0.45 190 HTML_FONT_FACE_BAD 1557 0.52 0.66 0.45 191 TO_NO_BRKTS_HTML_ONLY 1511 0.37 0.25 0.44 192 XMPhish30 1495 0.65 1.07 0.43 193 XMPhish14 1444 0.46 0.55 0.42 194 T_TooManySym_04 1414 0.28 0.02 0.41 195 HTML_IMAGE_ONLY_20 1385 0.33 0.19 0.40 196 XMHTMLBadTable_001 1362 0.46 0.58 0.39 197 GMD_PDF_EMPTY_BODY 1357 0.27 0.03 0.39 198 RELAYCOUNTRY_GB 1336 0.44 0.54 0.39 199 TR_XM_SPAMCOP 1329 3.62 9.87 0.38 200 XMLngstWrd_00 1318 0.43 0.54 0.38 ----------------------------------------------------------------------