Email: 538506 Autolearn: 0 AvgScore: 3.43 AvgScanTime: 1.15 sec Spam: 148143 Autolearn: 0 AvgScore: 13.42 AvgScanTime: 1.34 sec Ham: 390363 Autolearn: 0 AvgScore: -0.36 AvgScanTime: 1.08 sec Time Spent Running SA: 171.84 hours Time Spent Processing Spam: 55.04 hours Time Spent Processing Ham: 116.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143908 80.53 97.14 74.23 2 DKIM_SIGNED 136313 70.70 92.01 62.61 3 XM_DK_Pass 131636 69.10 88.86 61.60 4 DKIM_VALID 129617 68.09 87.49 60.72 5 XM_B_Unicode 127459 67.05 86.04 59.84 6 RELAYCOUNTRY_US 115691 69.73 78.09 66.56 7 DCC_CHECK 108966 41.05 73.55 28.72 8 XMListUnsubscribeExists 107865 50.90 72.81 42.58 9 XM_B_SpammyWords 107450 46.01 72.53 35.95 10 DKIM_VALID_AU 95700 53.22 64.60 48.90 11 XM_DK_Undo_02 71116 17.09 48.00 5.36 12 XM_B_Unicode3 68815 37.20 46.45 33.69 13 XM_B_SpammyWords2 60725 22.08 40.99 14.90 14 LOC_TINY_FONT_1 59564 26.62 40.21 21.46 15 BAYES_50 55572 49.95 37.51 54.67 16 BAYES_99 54122 13.15 36.53 4.27 17 TR_XM_DKIM_Undo 53753 11.74 36.28 2.43 18 HTML_FONT_LOW_CONTRAST 53300 29.21 35.98 26.64 19 DKIM_VALID_EF 50138 26.50 33.84 23.71 20 MIME_HTML_ONLY 48616 20.83 32.82 16.28 21 FVGT_m_MULTI_ODD 47423 24.57 32.01 21.75 22 RCVD_IN_MSPIKE_H2 45505 25.50 30.72 23.52 23 T_KAM_HTML_FONT_INVALID 43866 21.09 29.61 17.85 24 BAYES_999 42718 10.35 28.84 3.34 25 DCC_CHECK_NEGATIVE 39159 58.92 26.43 71.25 26 TR_DCC_Bayes_99 38954 8.45 26.29 1.68 27 TR_XM_DK_Unsub 36158 14.88 24.41 11.26 28 T_TM2_M_HEADER_IN_MSG 33853 22.49 22.85 22.35 29 RELAYCOUNTRY_META 33264 8.78 22.45 3.60 30 XMSubLong 32564 20.46 21.98 19.88 31 XM_Multi_Part_URI 29192 14.52 19.71 12.55 32 TR_XM_SpammyRelay 27559 6.75 18.60 2.26 33 XM_B_Unsub 25262 9.67 17.05 6.87 34 TR_XM_BayesUnsub 24233 8.37 16.36 5.33 35 LOTS_OF_MONEY 22652 8.44 15.29 5.84 36 RCVD_IN_BL_SPAMCOP_NET 22648 4.64 15.29 0.60 37 TR_MAX_INTL_RELAY 21968 8.30 14.83 5.82 38 XM_B_SpammyWords3 20932 6.64 14.13 3.80 39 TR_XM_SpammyWords4 20525 6.57 13.85 3.81 40 TR_XM_SPAMCOP 19758 3.96 13.34 0.41 41 TR_XM_SpammyWords2 19571 3.97 13.21 0.47 42 BOTNET_IPINHOSTNAME 19392 6.56 13.09 4.09 43 RELAYCOUNTRY_CA 19289 4.47 13.02 1.22 44 UNPARSEABLE_RELAY 19176 9.90 12.94 8.75 45 RCVD_IN_MSPIKE_WL 15559 6.43 10.50 4.88 46 RCVD_IN_MSPIKE_H3 15559 6.43 10.50 4.88 47 BAYES_80 13706 5.10 9.25 3.52 48 XM_Evil_Numbers_Gen 12734 7.04 8.60 6.46 49 BOTNET 12515 3.18 8.45 1.18 50 XMBody_17 12066 2.66 8.14 0.57 51 BAYES_60 11807 7.77 7.97 7.70 52 XM_Body_Dirty_Words 10943 4.51 7.39 3.41 53 FSL_BULK_SIG 10863 4.26 7.33 3.09 54 MPART_ALT_DIFF 10718 5.48 7.23 4.82 55 HTML_IMAGE_RATIO_02 10460 5.32 7.06 4.66 56 LotsOfNums_01 10092 7.10 6.81 7.20 57 TR_XM_UnparsRelay 9974 2.86 6.73 1.39 58 XM_UncommonTLD01 9234 5.63 6.23 5.40 59 UNTRUSTED_Relay 9025 2.52 6.09 1.17 60 XMSubMetaSx_00 8745 3.86 5.90 3.09 61 TooManyTo_001 8463 6.62 5.71 6.96 62 MIME_HTML_MOSTLY 7787 4.19 5.26 3.79 63 T_FILL_THIS_FORM_SHORT 7772 2.01 5.25 0.78 64 BAYES_95 7686 3.10 5.19 2.30 65 HTML_IMAGE_RATIO_04 7322 4.13 4.94 3.82 66 T_XMDrugObfuBody_14 7312 2.35 4.94 1.37 67 XM_SPF_SoftFail 7168 4.92 4.84 4.96 68 XM_OfRef6 7089 2.12 4.79 1.11 69 XM_B_Investor 6987 2.16 4.72 1.19 70 XM_H_GMP 6969 5.02 4.70 5.14 71 XM_H_Long_From01 6941 4.64 4.69 4.62 72 XMSexyCombo_05 6926 2.44 4.68 1.59 73 DKIM_INVALID 6696 2.61 4.52 1.89 74 XM_B_Phish_Phrases 6662 3.20 4.50 2.71 75 HTML_IMAGE_RATIO_06 6627 2.63 4.47 1.94 76 TM2_M_URI_OPT_OUT 6305 2.27 4.26 1.52 77 TR_XM_SpammyWords5 6060 1.93 4.09 1.11 78 TR_XM_PhishingBody 5839 2.01 3.94 1.27 79 XMNumbers 5699 2.68 3.85 2.23 80 RCVD_IN_VALIDITY_SAFE 5659 4.39 3.82 4.60 81 T_XMDrugObfuBody_08 5599 2.10 3.78 1.47 82 TR_XM_BayesRelay 5472 1.02 3.69 0.00 83 TR_LOTS_OF_MONEY3 5134 1.21 3.47 0.36 84 XM_B_SpammyTLD 5123 2.61 3.46 2.29 85 MIME_HTML_ONLY_MULTI 5023 2.16 3.39 1.69 86 TM2_M_VERY_LONG_WORD 4861 1.70 3.28 1.10 87 RCVD_IN_VALIDITY_CERTIFIED 4840 3.85 3.27 4.07 88 SpammyFromTLD_01 4788 1.32 3.23 0.60 89 XMStrtUSub 4735 3.97 3.20 4.26 90 XM_UB50 4654 1.36 3.14 0.68 91 HK_RANDOM_REPLYTO 4587 0.92 3.10 0.09 92 USER_IN_DEF_DKIM_WL 4472 9.39 3.02 11.81 93 TR_XM_FormFill 4470 0.84 3.02 0.01 94 MIME_QP_LONG_LINE 4467 3.99 3.02 4.36 95 HTML_IMAGE_RATIO_08 4362 2.50 2.94 2.33 96 SUBJ_ALL_CAPS 4180 1.65 2.82 1.21 97 T_TooManySym_01 4087 4.17 2.76 4.70 98 XM_B_SpammyWords4 3934 1.15 2.66 0.58 99 FONT_INVIS_LONG_LINE 3842 0.74 2.59 0.03 100 XM_CamelCaseFrm001 3819 2.13 2.58 1.97 101 XM_URI_RBL 3793 0.81 2.56 0.14 102 TR_XM_NoHeaderRelay 3775 0.77 2.55 0.10 103 RELAYCOUNTRY_AU 3552 1.22 2.40 0.77 104 TR_Mismatch_TLD_02 3453 0.68 2.33 0.05 105 FROM_EXCESS_BASE64 3354 1.76 2.26 1.57 106 XMDiploma_00 3333 1.62 2.25 1.38 107 XM_B_Unsub2 3173 1.52 2.14 1.28 108 XMBrknScrpt_02 2927 0.97 1.98 0.59 109 T_XMHurry_00 2725 0.88 1.84 0.51 110 T_REMOTE_IMAGE 2694 2.60 1.82 2.90 111 AC_BR_BONANZA 2682 0.55 1.81 0.08 112 MAILING_LIST_MULTI 2592 1.85 1.75 1.89 113 BOUNCE_MESSAGE 2555 13.11 1.72 17.43 114 ANY_BOUNCE_MESSAGE 2555 13.11 1.72 17.43 115 T_XMDrugObfuBody_00 2506 0.81 1.69 0.48 116 XMStockSpam_06 2417 1.16 1.63 0.98 117 HTML_MIME_NO_HTML_TAG 2367 1.93 1.60 2.06 118 TR_XM_INV_DKIM 2246 0.45 1.52 0.04 119 RCVD_IN_IADB_LISTED 2222 3.01 1.50 3.58 120 XM_SendGrid 2215 1.23 1.50 1.12 121 KHOP_HELO_FCRDNS 2200 1.09 1.49 0.94 122 TR_XM_PHPForged 2147 0.66 1.45 0.36 123 XMReplyNow 2142 0.54 1.45 0.20 124 SpammyFromTLD_02 2128 2.33 1.44 2.67 125 TR_XM_PHPDW 2125 0.65 1.43 0.35 126 BAYES_40 2116 4.80 1.43 6.09 127 URI_TRY_3LD 2064 0.84 1.39 0.63 128 TR_XM_FormFill2 2057 0.65 1.39 0.37 129 RCVD_IN_IADB_SPF 2056 2.70 1.39 3.19 130 URI_NOVOWEL 2056 1.29 1.39 1.25 131 XM_H_PHPOS 2044 0.63 1.38 0.34 132 TM2_M_A_HREF_HREF 2029 0.72 1.37 0.47 133 URI_HEX 1992 1.27 1.34 1.24 134 RCVD_IN_IADB_DK 1973 2.43 1.33 2.84 135 RCVD_IN_IADB_SENDERID 1971 2.47 1.33 2.91 136 XM_B_COPY_HTML 1968 0.92 1.33 0.77 137 XMSubMetaI_00 1951 0.73 1.32 0.51 138 XM_HighProb1 1944 0.36 1.31 0.00 139 XMPhish30 1943 0.64 1.31 0.38 140 XM_DK_Undo_01 1925 1.40 1.30 1.44 141 DIET_1 1897 0.52 1.28 0.24 142 HTML_TAG_BALANCE_BODY 1848 0.57 1.25 0.32 143 XMBdyGiftCard01 1833 0.89 1.24 0.75 144 HTTPS_HTTP_MISMATCH 1825 0.75 1.23 0.56 145 DKIM_ADSP_CUSTOM_MED 1815 0.90 1.23 0.78 146 TR_Caps_n_Bayes_99 1795 0.35 1.21 0.03 147 XMGenDplmaNmb 1752 0.84 1.18 0.71 148 URIBL_DBL_SPAM 1719 0.32 1.16 0.00 149 TR_XM_Base64_M1 1710 0.70 1.15 0.53 150 T_STY_INVIS_DIRECT 1697 0.49 1.15 0.24 151 XM_B_Phish66 1648 0.49 1.11 0.25 152 ALL_TRUSTED 1641 22.56 1.11 30.70 153 RELAYCOUNTRY_IN 1595 0.33 1.08 0.04 154 TR_XM_Base64_L1 1594 0.42 1.08 0.17 155 RDNS_DYNAMIC 1585 0.54 1.07 0.34 156 XM_UB99 1575 0.30 1.06 0.01 157 TR_XM_DK_SendGrid 1555 0.83 1.05 0.75 158 BAYES_20 1536 2.60 1.04 3.19 159 XM_H_Long_From02 1513 0.89 1.02 0.85 160 NML_ADSP_CUSTOM_MED 1484 0.67 1.00 0.54 161 FORGED_GMAIL_RCVD 1465 0.60 0.99 0.45 162 MPART_ALT_DIFF_COUNT 1442 0.74 0.97 0.65 163 XMPhish14 1416 0.50 0.96 0.33 164 TM2_M_OBFU_COMMENT 1396 0.45 0.94 0.27 165 XMSexyCombo_01 1393 0.39 0.94 0.18 166 XMHTML_After_End 1377 0.57 0.93 0.44 167 T_Symld_Words_02 1335 0.56 0.90 0.43 168 RCVD_IN_VALIDITY_RPBL 1295 0.26 0.87 0.03 169 XM_B_DNDMA 1290 0.44 0.87 0.27 170 TR_XM_InvalidRelay 1286 0.25 0.87 0.01 171 XM_UB999 1245 0.23 0.84 0.00 172 TVD_RCVD_IP 1236 1.27 0.83 1.43 173 TR_Symld_Words 1232 1.04 0.83 1.12 174 THIS_AD 1213 0.45 0.82 0.31 175 XM_DIRTYINTL 1197 0.29 0.81 0.09 176 TR_MetaPhish_Combo_01 1191 0.69 0.80 0.65 177 XM_B_COVIDMETA 1175 0.40 0.79 0.25 178 XMGppyBdWords 1170 0.28 0.79 0.09 179 XM_UB60 1169 0.25 0.79 0.05 180 XM_H_Undi_Recip 1151 0.31 0.78 0.13 181 XM_ProductURIs 1137 0.63 0.77 0.58 182 XM_B_REG_HTML 1131 0.49 0.76 0.39 183 BOTNET_NORDNS 1117 0.21 0.75 0.01 184 FROM_MISSP_EH_MATCH 1115 0.21 0.75 0.00 185 RELAYCOUNTRY_FR 1098 0.35 0.74 0.20 186 TooManyTo_002 1097 1.65 0.74 1.99 187 XMBody_78 1088 0.35 0.73 0.20 188 PLING_QUERY 1086 0.43 0.73 0.31 189 HTML_FONT_FACE_BAD 1075 0.50 0.73 0.42 190 TR_Mismatch_TLD_01 1073 0.41 0.72 0.29 191 XMClaimOffer 1063 0.45 0.72 0.34 192 RCVD_IN_PSBL 1058 0.43 0.71 0.32 193 MIME_CHARSET_FARAWAY 1056 0.35 0.71 0.21 194 T_MONEY_PERCENT 1043 0.33 0.70 0.19 195 TR_LOTS_OF_MONEY2 1043 0.33 0.70 0.19 196 HELO_DYNAMIC_SPLIT_IP 1014 0.19 0.68 0.01 197 TR_XM_Base64_C 1013 0.21 0.68 0.03 198 MISSING_HEADERS 1009 0.40 0.68 0.30 199 SUBJ_DOLLARS 1006 0.52 0.68 0.45 200 T_TooManySym_02 1002 1.85 0.68 2.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 289762 80.53 97.14 74.23 2 DCC_CHECK_NEGATIVE 278137 58.92 26.43 71.25 3 RELAYCOUNTRY_US 259812 69.73 78.09 66.56 4 DKIM_SIGNED 244405 70.70 92.01 62.61 5 XM_DK_Pass 240462 69.10 88.86 61.60 6 DKIM_VALID 237038 68.09 87.49 60.72 7 XM_B_Unicode 233600 67.05 86.04 59.84 8 BAYES_50 213414 49.95 37.51 54.67 9 DKIM_VALID_AU 190897 53.22 64.60 48.90 10 XMListUnsubscribeExists 166216 50.90 72.81 42.58 11 XM_B_SpammyWords 140334 46.01 72.53 35.95 12 XM_B_Unicode3 131496 37.20 46.45 33.69 13 ALL_TRUSTED 119826 22.56 1.11 30.70 14 DCC_CHECK 112100 41.05 73.55 28.72 15 HTML_FONT_LOW_CONTRAST 104006 29.21 35.98 26.64 16 DKIM_VALID_EF 92570 26.50 33.84 23.71 17 RCVD_IN_MSPIKE_H2 91812 25.50 30.72 23.52 18 T_TM2_M_HEADER_IN_MSG 87243 22.49 22.85 22.35 19 FVGT_m_MULTI_ODD 84899 24.57 32.01 21.75 20 LOC_TINY_FONT_1 83762 26.62 40.21 21.46 21 XMSubLong 77610 20.46 21.98 19.88 22 T_KAM_HTML_FONT_INVALID 69688 21.09 29.61 17.85 23 ANY_BOUNCE_MESSAGE 68048 13.11 1.72 17.43 24 BOUNCE_MESSAGE 68047 13.11 1.72 17.43 25 MIME_HTML_ONLY 63564 20.83 32.82 16.28 26 BAYES_00 61026 11.49 0.58 15.63 27 XM_B_SpammyWords2 58171 22.08 40.99 14.90 28 XM_Multi_Part_URI 49001 14.52 19.71 12.55 29 USER_IN_DEF_DKIM_WL 46099 9.39 3.02 11.81 30 TR_XM_DK_Unsub 43967 14.88 24.41 11.26 31 UNPARSEABLE_RELAY 34161 9.90 12.94 8.75 32 BAYES_60 30052 7.77 7.97 7.70 33 LotsOfNums_01 28120 7.10 6.81 7.20 34 XM_DKIMWhitelistDomains 27641 5.18 0.17 7.08 35 TooManyTo_001 27163 6.62 5.71 6.96 36 XM_B_Unsub 26804 9.67 17.05 6.87 37 XM_Evil_Numbers_Gen 25202 7.04 8.60 6.46 38 BAYES_40 23755 4.80 1.43 6.09 39 IN_ZIMBRA_NJ_WHITELIST 22962 4.28 0.07 5.88 40 LOTS_OF_MONEY 22797 8.44 15.29 5.84 41 TR_MAX_INTL_RELAY 22736 8.30 14.83 5.82 42 TR_XM_DK_Bayes 21287 4.05 0.35 5.45 43 XM_UncommonTLD01 21089 5.63 6.23 5.40 44 TR_XM_DK_Bayes1 21047 4.00 0.34 5.39 45 XM_DK_Undo_02 20928 17.09 48.00 5.36 46 TR_XM_BayesUnsub 20814 8.37 16.36 5.33 47 XM_H_GMP 20052 5.02 4.70 5.14 48 XM_SPF_SoftFail 19353 4.92 4.84 4.96 49 RCVD_IN_MSPIKE_WL 19054 6.43 10.50 4.88 50 RCVD_IN_MSPIKE_H3 19053 6.43 10.50 4.88 51 MPART_ALT_DIFF 18804 5.48 7.23 4.82 52 T_TooManySym_01 18349 4.17 2.76 4.70 53 TR_XM_DK_Bayes2 18259 3.46 0.24 4.68 54 HTML_IMAGE_RATIO_02 18194 5.32 7.06 4.66 55 XM_H_Long_From01 18041 4.64 4.69 4.62 56 RCVD_IN_VALIDITY_SAFE 17966 4.39 3.82 4.60 57 MIME_QP_LONG_LINE 17002 3.99 3.02 4.36 58 BAYES_99 16676 13.15 36.53 4.27 59 XMStrtUSub 16629 3.97 3.20 4.26 60 BOTNET_IPINHOSTNAME 15951 6.56 13.09 4.09 61 RCVD_IN_VALIDITY_CERTIFIED 15872 3.85 3.27 4.07 62 XM_PDF 15519 3.05 0.61 3.98 63 HTML_IMAGE_RATIO_04 14930 4.13 4.94 3.82 64 TR_XM_SpammyWords4 14865 6.57 13.85 3.81 65 XM_B_SpammyWords3 14846 6.64 14.13 3.80 66 MIME_HTML_MOSTLY 14800 4.19 5.26 3.79 67 RELAYCOUNTRY_META 14039 8.78 22.45 3.60 68 RCVD_IN_IADB_LISTED 13994 3.01 1.50 3.58 69 BAYES_80 13736 5.10 9.25 3.52 70 XM_Body_Dirty_Words 13330 4.51 7.39 3.41 71 BAYES_999 13030 10.35 28.84 3.34 72 RCVD_IN_IADB_SPF 12465 2.70 1.39 3.19 73 BAYES_20 12459 2.60 1.04 3.19 74 FSL_BULK_SIG 12064 4.26 7.33 3.09 75 XMSubMetaSx_00 12060 3.86 5.90 3.09 76 RCVD_IN_IADB_SENDERID 11352 2.47 1.33 2.91 77 T_REMOTE_IMAGE 11333 2.60 1.82 2.90 78 RCVD_IN_IADB_DK 11105 2.43 1.33 2.84 79 XM_B_Phish_Phrases 10576 3.20 4.50 2.71 80 SpammyFromTLD_02 10431 2.33 1.44 2.67 81 BAYES_05 10258 2.04 0.50 2.63 82 TR_XM_DKIM_Undo 9473 11.74 36.28 2.43 83 HTML_IMAGE_RATIO_08 9086 2.50 2.94 2.33 84 BAYES_95 8987 3.10 5.19 2.30 85 XM_B_SpammyTLD 8956 2.61 3.46 2.29 86 T_TooManySym_02 8939 1.85 0.68 2.29 87 TR_XM_SpammyRelay 8809 6.75 18.60 2.26 88 XMNumbers 8719 2.68 3.85 2.23 89 RCVD_IN_IADB_VOUCHED 8403 1.69 0.46 2.15 90 HTML_MIME_NO_HTML_TAG 8039 1.93 1.60 2.06 91 TooManyTo_002 7777 1.65 0.74 1.99 92 XM_CamelCaseFrm001 7677 2.13 2.58 1.97 93 HTML_IMAGE_RATIO_06 7559 2.63 4.47 1.94 94 MAILING_LIST_MULTI 7390 1.85 1.75 1.89 95 DKIM_INVALID 7367 2.61 4.52 1.89 96 INVALID_MSGID 7126 1.38 0.22 1.83 97 MIME_HTML_ONLY_MULTI 6598 2.16 3.39 1.69 98 TR_DCC_Bayes_99 6568 8.45 26.29 1.68 99 MSGID_NOFQDN1 6549 1.25 0.11 1.68 100 TO_MALFORMED 6494 1.22 0.04 1.66 101 HTML_EXTRA_CLOSE 6302 1.18 0.05 1.61 102 XMSexyCombo_05 6221 2.44 4.68 1.59 103 FROM_EXCESS_BASE64 6130 1.76 2.26 1.57 104 TM2_M_URI_OPT_OUT 5919 2.27 4.26 1.52 105 T_XMDrugObfuBody_08 5722 2.10 3.78 1.47 106 XM_DK_Undo_01 5639 1.40 1.30 1.44 107 TVD_RCVD_IP 5586 1.27 0.83 1.43 108 RCVD_IN_IADB_OPTIN 5447 1.10 0.32 1.40 109 TR_XM_UnparsRelay 5442 2.86 6.73 1.39 110 XMDiploma_00 5377 1.62 2.25 1.38 111 T_XMDrugObfuBody_14 5352 2.35 4.94 1.37 112 HELO_NODOT 5250 1.03 0.19 1.34 113 HELO_NO_DOMAIN 5247 1.02 0.18 1.34 114 XM_B_Unsub2 4992 1.52 2.14 1.28 115 TR_XM_PhishingBody 4970 2.01 3.94 1.27 116 URI_NOVOWEL 4899 1.29 1.39 1.25 117 IN_HORDE_ADDRESS_BOOK 4843 0.92 0.07 1.24 118 URI_HEX 4833 1.27 1.34 1.24 119 RELAYCOUNTRY_CA 4777 4.47 13.02 1.22 120 SUBJ_ALL_CAPS 4730 1.65 2.82 1.21 121 XM_B_Investor 4634 2.16 4.72 1.19 122 BOTNET 4615 3.18 8.45 1.18 123 UNTRUSTED_Relay 4549 2.52 6.09 1.17 124 TooManyTo_003 4432 1.00 0.64 1.14 125 XM_SendGrid 4391 1.23 1.50 1.12 126 TR_Symld_Words 4389 1.04 0.83 1.12 127 TR_XM_SpammyWords5 4345 1.93 4.09 1.11 128 XM_OfRef6 4316 2.12 4.79 1.11 129 TM2_M_VERY_LONG_WORD 4285 1.70 3.28 1.10 130 XMGappySubj_01 4059 0.79 0.12 1.04 131 TVD_SPACE_RATIO 3959 0.76 0.09 1.01 132 XMBSHREFv2 3949 0.88 0.53 1.01 133 XMStockSpam_06 3816 1.16 1.63 0.98 134 KHOP_HELO_FCRDNS 3669 1.09 1.49 0.94 135 T_TooManySym_03 3610 0.75 0.28 0.92 136 XM_GoogleGroups 3580 0.79 0.45 0.92 137 XM_H_Long_From02 3301 0.89 1.02 0.85 138 XMBody_95 3255 0.66 0.19 0.83 139 TooManyTo_004 3167 0.75 0.58 0.81 140 XMCapTrack 3125 0.68 0.36 0.80 141 DKIM_ADSP_CUSTOM_MED 3030 0.90 1.23 0.78 142 T_FILL_THIS_FORM_SHORT 3030 2.01 5.25 0.78 143 RELAYCOUNTRY_AU 3017 1.22 2.40 0.77 144 XM_B_COPY_HTML 3005 0.92 1.33 0.77 145 XMBdyGiftCard01 2938 0.89 1.24 0.75 146 TR_XM_DK_SendGrid 2915 0.83 1.05 0.75 147 XMGenDplmaNmb 2763 0.84 1.18 0.71 148 TooManyTo_005 2659 0.64 0.54 0.68 149 XM_UB50 2646 1.36 3.14 0.68 150 FROM_GOV_DKIM_AU 2565 0.51 0.12 0.66 151 TR_MetaPhish_Combo_01 2535 0.69 0.80 0.65 152 MPART_ALT_DIFF_COUNT 2528 0.74 0.97 0.65 153 T_OBFU_PDF_ATTACH 2463 0.49 0.12 0.63 154 URI_TRY_3LD 2450 0.84 1.39 0.63 155 XM_H_PHPMailer 2363 0.60 0.59 0.61 156 RCVD_IN_BL_SPAMCOP_NET 2347 4.64 15.29 0.60 157 SpammyFromTLD_01 2337 1.32 3.23 0.60 158 XMBrknScrpt_02 2290 0.97 1.98 0.59 159 XM_ShortIntro_01 2289 0.55 0.44 0.59 160 XM_B_SpammyWords4 2279 1.15 2.66 0.58 161 XM_ProductURIs 2253 0.63 0.77 0.58 162 XMBody_17 2233 2.66 8.14 0.57 163 XMGappySubj_02 2227 0.43 0.05 0.57 164 HTTPS_HTTP_MISMATCH 2202 0.75 1.23 0.56 165 NML_ADSP_CUSTOM_MED 2098 0.67 1.00 0.54 166 TR_XM_Base64_M1 2084 0.70 1.15 0.53 167 T_XMHurry_00 1993 0.88 1.84 0.51 168 USER_IN_WHITELIST 1984 0.37 0.00 0.51 169 XMSubMetaI_00 1984 0.73 1.32 0.51 170 USER_IN_WELCOMELIST 1984 0.37 0.00 0.51 171 T_XMDrugObfuBody_00 1855 0.81 1.69 0.48 172 FILL_THIS_FORM 1834 0.40 0.21 0.47 173 TR_XM_SpammyWords2 1824 3.97 13.21 0.47 174 TM2_M_A_HREF_HREF 1823 0.72 1.37 0.47 175 T_TooManySym_04 1779 0.34 0.04 0.46 176 SUBJ_DOLLARS 1772 0.52 0.68 0.45 177 FORGED_GMAIL_RCVD 1755 0.60 0.99 0.45 178 XMHTML_After_End 1700 0.57 0.93 0.44 179 T_Symld_Words_02 1680 0.56 0.90 0.43 180 XMLngstWrd_00 1672 0.44 0.48 0.43 181 SHORT_HELO_AND_INLINE_IMAGE 1657 0.32 0.03 0.42 182 XMNoVowels 1635 0.42 0.42 0.42 183 HTML_FONT_FACE_BAD 1624 0.50 0.73 0.42 184 HTML_IMAGE_ONLY_28 1601 0.37 0.28 0.41 185 TR_XM_SPAMCOP 1593 3.96 13.34 0.41 186 XMSubMetaSxObfu_03 1532 0.47 0.67 0.39 187 XM_B_REG_HTML 1526 0.49 0.76 0.39 188 XMPhish30 1500 0.64 1.31 0.38 189 SHOPIFY_IMG_NOT_RCVD_SFY 1492 0.41 0.49 0.38 190 XM_B_FormFill 1483 0.28 0.02 0.38 191 TM2_M_BODY_EMPTY 1425 0.30 0.12 0.37 192 TR_XM_FormFill2 1425 0.65 1.39 0.37 193 TR_XM_PHPForged 1411 0.66 1.45 0.36 194 TR_LOTS_OF_MONEY3 1404 1.21 3.47 0.36 195 TR_XM_PHPDW 1374 0.65 1.43 0.35 196 GMD_PDF_EMPTY_BODY 1366 0.27 0.05 0.35 197 XMSolicitRefs_0 1345 0.38 0.48 0.34 198 XMClaimOffer 1341 0.45 0.72 0.34 199 TO_NO_BRKTS_HTML_ONLY 1335 0.33 0.30 0.34 200 XM_H_PHPOS 1331 0.63 1.38 0.34 ----------------------------------------------------------------------