Email: 470015 Autolearn: 0 AvgScore: 4.01 AvgScanTime: 1.25 sec Spam: 148263 Autolearn: 0 AvgScore: 13.12 AvgScanTime: 1.38 sec Ham: 321752 Autolearn: 0 AvgScore: -0.18 AvgScanTime: 1.19 sec Time Spent Running SA: 162.70 hours Time Spent Processing Spam: 56.65 hours Time Spent Processing Ham: 106.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 146436 99.08 98.77 99.23 2 HTML_MESSAGE 141947 88.43 95.74 85.06 3 DKIM_SIGNED 134003 80.61 90.38 76.11 4 XM_DK_Pass 129254 78.75 87.18 74.86 5 DKIM_VALID 127456 77.73 85.97 73.94 6 XM_B_Unicode 126029 74.74 85.00 70.01 7 RELAYCOUNTRY_US 118632 80.67 80.01 80.98 8 XM_B_SpammyWords 107210 53.65 72.31 45.05 9 DCC_CHECK 107111 46.74 72.24 34.99 10 XMListUnsubscribeExists 106022 57.81 71.51 51.50 11 DKIM_VALID_AU 95203 61.02 64.21 59.56 12 XM_B_Unicode3 69151 43.01 46.64 41.34 13 XM_DK_Undo_02 67679 19.10 45.65 6.87 14 XM_B_SpammyWords2 63453 26.99 42.80 19.71 15 LOC_TINY_FONT_1 59085 31.01 39.85 26.94 16 BAYES_50 55717 52.29 37.58 59.07 17 BAYES_99 54291 15.18 36.62 5.30 18 HTML_FONT_LOW_CONTRAST 52511 30.62 35.42 28.41 19 TR_XM_DKIM_Undo 51041 13.03 34.43 3.17 20 DKIM_VALID_EF 47850 29.52 32.27 28.26 21 FVGT_m_MULTI_ODD 47675 27.99 32.16 26.07 22 RCVD_IN_MSPIKE_H2 46180 29.43 31.15 28.64 23 MIME_HTML_ONLY 44809 22.89 30.22 19.51 24 BAYES_999 42889 11.97 28.93 4.16 25 DCC_CHECK_NEGATIVE 41134 53.22 27.74 64.96 26 T_KAM_HTML_FONT_INVALID 40913 23.35 27.59 21.39 27 TR_DCC_Bayes_99 37602 9.36 25.36 1.98 28 T_TM2_M_HEADER_IN_MSG 34683 26.94 23.39 28.57 29 TR_XM_DK_Unsub 34474 16.55 23.25 13.47 30 XMSubLong 31775 22.47 21.43 22.95 31 XM_Multi_Part_URI 29450 16.07 19.86 14.32 32 RELAYCOUNTRY_META 28491 9.08 19.22 4.41 33 XM_B_Unsub 23848 10.52 16.08 7.95 34 TR_XM_SpammyRelay 23490 6.66 15.84 2.43 35 TR_XM_BayesUnsub 22955 9.26 15.48 6.39 36 LOTS_OF_MONEY 22637 9.73 15.27 7.18 37 TR_MAX_INTL_RELAY 21009 9.36 14.17 7.15 38 TR_XM_SpammyWords2 20937 5.08 14.12 0.92 39 UNPARSEABLE_RELAY 20717 11.85 13.97 10.87 40 TR_XM_SpammyWords4 20505 7.73 13.83 4.93 41 RCVD_IN_BL_SPAMCOP_NET 19597 4.81 13.22 0.93 42 XM_B_SpammyWords3 19492 7.90 13.15 5.48 43 BOTNET_IPINHOSTNAME 18967 7.33 12.79 4.81 44 TR_XM_SPAMCOP 16030 3.76 10.81 0.51 45 RELAYCOUNTRY_CA 15963 4.36 10.77 1.40 46 BAYES_80 13097 5.77 8.83 4.36 47 BOTNET 12912 3.78 8.71 1.51 48 XM_Evil_Numbers_Gen 12683 8.40 8.55 8.33 49 RCVD_IN_MSPIKE_WL 12193 6.83 8.22 6.19 50 RCVD_IN_MSPIKE_H3 12193 6.83 8.22 6.19 51 BAYES_60 11936 9.12 8.05 9.61 52 FSL_BULK_SIG 11415 5.32 7.70 4.22 53 TR_XM_UnparsRelay 11357 3.81 7.66 2.04 54 XM_Body_Dirty_Words 11242 4.99 7.58 3.80 55 HTML_IMAGE_RATIO_02 10420 5.79 7.03 5.23 56 MPART_ALT_DIFF 10192 4.61 6.87 3.57 57 XMBody_17 9945 2.58 6.71 0.68 58 XMSubMetaSx_00 9865 5.14 6.65 4.44 59 LotsOfNums_01 9523 7.85 6.42 8.51 60 XM_UncommonTLD01 8806 4.74 5.94 4.19 61 XM_B_Investor 8105 2.89 5.47 1.70 62 XM_H_GMP 8082 6.23 5.45 6.58 63 UNTRUSTED_Relay 7975 2.77 5.38 1.57 64 HTML_IMAGE_RATIO_04 7959 5.10 5.37 4.98 65 TooManyTo_001 7750 7.21 5.23 8.12 66 BAYES_95 7506 3.50 5.06 2.78 67 XM_H_Long_From01 7401 5.52 4.99 5.77 68 XM_SPF_SoftFail 7384 3.86 4.98 3.34 69 XM_B_Phish_Phrases 7072 3.99 4.77 3.63 70 MIME_HTML_MOSTLY 6643 3.03 4.48 2.35 71 DKIM_INVALID 6547 2.88 4.42 2.17 72 XMSexyCombo_05 6404 2.67 4.32 1.90 73 XMStrtUSub 6392 4.67 4.31 4.83 74 TM2_M_URI_OPT_OUT 6133 2.41 4.14 1.62 75 MIME_HTML_ONLY_MULTI 6122 2.69 4.13 2.03 76 XM_OfRef6 5877 2.27 3.96 1.49 77 T_XMDrugObfuBody_14 5877 2.76 3.96 2.20 78 XMNumbers 5825 3.22 3.93 2.89 79 HTML_IMAGE_RATIO_06 5825 3.08 3.93 2.68 80 TR_XM_PhishingBody 5796 2.25 3.91 1.48 81 USER_IN_DEF_DKIM_WL 5342 11.76 3.60 15.51 82 TR_LOTS_OF_MONEY3 5267 1.47 3.55 0.52 83 TR_XM_SpammyWords5 5107 1.88 3.44 1.16 84 XM_B_SpammyTLD 5033 3.01 3.39 2.83 85 T_XMDrugObfuBody_08 5006 2.17 3.38 1.61 86 T_FILL_THIS_FORM_SHORT 4863 1.66 3.28 0.92 87 RCVD_IN_VALIDITY_SAFE 4690 4.54 3.16 5.18 88 TM2_M_VERY_LONG_WORD 4655 1.90 3.14 1.33 89 XM_UB50 4350 1.55 2.93 0.91 90 MIME_QP_LONG_LINE 4109 4.49 2.77 5.29 91 RCVD_IN_VALIDITY_CERTIFIED 4035 3.97 2.72 4.55 92 HTML_IMAGE_RATIO_08 4011 2.21 2.71 1.98 93 XM_CamelCaseFrm001 3995 2.15 2.69 1.90 94 XMDiploma_00 3789 1.90 2.56 1.60 95 XM_URI_RBL 3772 0.90 2.54 0.15 96 TR_XM_BayesRelay 3649 0.78 2.46 0.00 97 SUBJ_ALL_CAPS 3642 1.76 2.46 1.44 98 XM_B_SpammyWords4 3591 1.27 2.42 0.74 99 RELAYCOUNTRY_AU 3372 1.27 2.27 0.81 100 T_TooManySym_01 3319 5.04 2.24 6.33 101 FROM_EXCESS_BASE64 3311 1.98 2.23 1.87 102 T_REMOTE_IMAGE 3224 3.31 2.17 3.83 103 ALL_TRUSTED 3207 11.36 2.16 15.60 104 SpammyFromTLD_02 3174 1.19 2.14 0.76 105 HTML_MIME_NO_HTML_TAG 3056 2.05 2.06 2.04 106 TR_XM_FormFill 2965 0.64 2.00 0.02 107 XM_B_Unsub2 2952 1.56 1.99 1.35 108 URI_TRY_3LD 2906 1.12 1.96 0.74 109 SpammyFromTLD_01 2885 1.21 1.95 0.86 110 XMStockSpam_06 2884 1.77 1.95 1.69 111 TR_XM_NoHeaderRelay 2535 0.61 1.71 0.11 112 FONT_INVIS_LONG_LINE 2488 0.56 1.68 0.04 113 TR_XM_PHPForged 2418 0.76 1.63 0.36 114 ANY_BOUNCE_MESSAGE 2417 3.49 1.63 4.34 115 BOUNCE_MESSAGE 2399 3.48 1.62 4.34 116 T_XMHurry_00 2379 0.83 1.60 0.47 117 RCVD_IN_PSBL 2347 0.98 1.58 0.70 118 TR_XM_PHPDW 2331 0.73 1.57 0.35 119 TR_XM_INV_DKIM 2278 0.52 1.54 0.05 120 TR_XM_FormFill2 2276 0.73 1.54 0.36 121 XM_H_PHPOS 2271 0.72 1.53 0.34 122 XMBrknScrpt_02 2256 1.06 1.52 0.85 123 TR_XM_Base64_M1 2248 0.96 1.52 0.70 124 BAYES_40 2235 3.41 1.51 4.29 125 XM_SendGrid 2229 1.38 1.50 1.33 126 MAILING_LIST_MULTI 2211 2.53 1.49 3.02 127 AC_BR_BONANZA 2211 0.53 1.49 0.09 128 XM_DK_Undo_01 2163 1.68 1.46 1.78 129 HTML_TAG_BALANCE_BODY 2115 0.87 1.43 0.61 130 DKIM_ADSP_CUSTOM_MED 2109 1.06 1.42 0.89 131 XM_HighProb1 2108 0.45 1.42 0.00 132 T_XMDrugObfuBody_00 2103 0.86 1.42 0.61 133 KHOP_HELO_FCRDNS 2074 1.16 1.40 1.06 134 URI_HEX 2040 1.21 1.38 1.13 135 XM_H_Undi_Recip 2000 0.54 1.35 0.16 136 XMPhish30 1996 0.75 1.35 0.47 137 HK_RANDOM_REPLYTO 1992 0.47 1.34 0.07 138 TR_XM_InvalidRelay 1943 0.44 1.31 0.04 139 TM2_M_A_HREF_HREF 1898 0.54 1.28 0.20 140 NML_ADSP_CUSTOM_MED 1833 0.78 1.24 0.58 141 XMGenDplmaNmb 1822 1.03 1.23 0.94 142 RCVD_IN_VALIDITY_RPBL 1816 0.43 1.22 0.07 143 BOTNET_NORDNS 1806 0.39 1.22 0.01 144 XMReplyNow 1791 0.59 1.21 0.30 145 XM_B_COPY_HTML 1774 0.84 1.20 0.67 146 TR_Mismatch_TLD_02 1758 0.43 1.19 0.08 147 TR_XM_Undi_Recip19 1670 0.40 1.13 0.07 148 TR_Symld_Words 1669 1.32 1.13 1.42 149 FORGED_GMAIL_RCVD 1663 0.70 1.12 0.51 150 XMPhish14 1661 0.67 1.12 0.47 151 XMBdyGiftCard01 1661 0.86 1.12 0.74 152 SCC_BODY_URI_ONLY 1619 2.51 1.09 3.16 153 HTTPS_HTTP_MISMATCH 1611 0.83 1.09 0.71 154 XM_DIRTYINTL 1603 0.42 1.08 0.11 155 TR_MetaPhish_Combo_01 1575 0.82 1.06 0.70 156 BAYES_20 1554 2.54 1.05 3.23 157 XMSexyCombo_01 1545 0.96 1.04 0.92 158 XM_ProductURIs 1532 0.77 1.03 0.65 159 PLING_QUERY 1519 0.73 1.02 0.59 160 TR_Caps_n_Bayes_99 1512 0.33 1.02 0.01 161 THIS_AD 1508 0.58 1.02 0.39 162 HOSTED_IMG_MULTI_PUB_01 1498 0.33 1.01 0.02 163 T_STY_INVIS_DIRECT 1497 0.48 1.01 0.23 164 RCVD_IN_IADB_LISTED 1466 2.93 0.99 3.82 165 XM_B_SEO 1462 0.43 0.99 0.17 166 FROM_SUSPICIOUS_NTLD 1427 0.32 0.96 0.03 167 TM2_M_OBFU_COMMENT 1399 0.55 0.94 0.37 168 TR_XM_Undi_RecipCombo2 1392 0.30 0.94 0.01 169 LongTLD 1378 0.52 0.93 0.34 170 XM_B_Phish66 1369 0.47 0.92 0.26 171 T_MONEY_PERCENT 1367 0.41 0.92 0.17 172 TR_LOTS_OF_MONEY2 1367 0.41 0.92 0.17 173 TM2_M_BODY_EMPTY 1355 0.70 0.91 0.60 174 FROM_SUSPICIOUS_NTLD_FP 1353 0.30 0.91 0.02 175 TR_Mismatch_TLD_01 1353 0.47 0.91 0.27 176 XM_B_DNDMA 1352 0.54 0.91 0.38 177 TooManyTo_002 1351 1.96 0.91 2.44 178 PDS_OTHER_BAD_TLD 1332 0.37 0.90 0.13 179 TR_XM_DK_SendGrid 1317 0.88 0.89 0.87 180 TR_XM_SEO4 1307 0.33 0.88 0.08 181 TR_XM_Base64_L1 1307 0.37 0.88 0.14 182 HTML_OBFUSCATE_05_10 1304 0.36 0.88 0.12 183 XM_RXBody 1294 0.50 0.87 0.32 184 XM_H_PHPMailer 1283 0.81 0.87 0.78 185 RDNS_DYNAMIC 1280 0.50 0.86 0.33 186 RCVD_IN_IADB_SPF 1277 2.56 0.86 3.35 187 XMEmptyBody_01 1276 0.43 0.86 0.23 188 XM_H_Long_From02 1260 1.04 0.85 1.13 189 XMSubMetaI_00 1260 0.74 0.85 0.69 190 RCVD_IN_IADB_DK 1210 2.25 0.82 2.91 191 RCVD_IN_IADB_SENDERID 1205 2.30 0.81 2.99 192 DKIM_ADSP_NXDOMAIN 1197 0.46 0.81 0.30 193 XMClaimOffer 1190 0.33 0.80 0.11 194 BAYES_00 1179 6.23 0.80 8.74 195 TooManyTo_003 1175 1.19 0.79 1.38 196 XM_UB99 1174 0.26 0.79 0.01 197 XMHTML_After_End 1169 0.52 0.79 0.39 198 UNDISC_MONEY 1164 0.25 0.79 0.00 199 TR_XM_Undi_Recip11 1162 0.27 0.78 0.03 200 XMSlimDrugH 1138 0.46 0.77 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 319267 99.08 98.77 99.23 2 HTML_MESSAGE 273697 88.43 95.74 85.06 3 RELAYCOUNTRY_US 260546 80.67 80.01 80.98 4 DKIM_SIGNED 244885 80.61 90.38 76.11 5 XM_DK_Pass 240862 78.75 87.18 74.86 6 DKIM_VALID 237899 77.73 85.97 73.94 7 XM_B_Unicode 225273 74.74 85.00 70.01 8 DCC_CHECK_NEGATIVE 209007 53.22 27.74 64.96 9 DKIM_VALID_AU 191622 61.02 64.21 59.56 10 BAYES_50 190050 52.29 37.58 59.07 11 XMListUnsubscribeExists 165710 57.81 71.51 51.50 12 XM_B_SpammyWords 144952 53.65 72.31 45.05 13 XM_B_Unicode3 132998 43.01 46.64 41.34 14 DCC_CHECK 112580 46.74 72.24 34.99 15 RCVD_IN_MSPIKE_H2 92158 29.43 31.15 28.64 16 T_TM2_M_HEADER_IN_MSG 91923 26.94 23.39 28.57 17 HTML_FONT_LOW_CONTRAST 91418 30.62 35.42 28.41 18 DKIM_VALID_EF 90920 29.52 32.27 28.26 19 LOC_TINY_FONT_1 86667 31.01 39.85 26.94 20 FVGT_m_MULTI_ODD 83885 27.99 32.16 26.07 21 XMSubLong 73848 22.47 21.43 22.95 22 T_KAM_HTML_FONT_INVALID 68822 23.35 27.59 21.39 23 XM_B_SpammyWords2 63423 26.99 42.80 19.71 24 MIME_HTML_ONLY 62788 22.89 30.22 19.51 25 ALL_TRUSTED 50190 11.36 2.16 15.60 26 USER_IN_DEF_DKIM_WL 49911 11.76 3.60 15.51 27 XM_Multi_Part_URI 46080 16.07 19.86 14.32 28 TR_XM_DK_Unsub 43333 16.55 23.25 13.47 29 UNPARSEABLE_RELAY 34975 11.85 13.97 10.87 30 BAYES_60 30923 9.12 8.05 9.61 31 XM_DKIMWhitelistDomains 28114 6.05 0.22 8.74 32 BAYES_00 28111 6.23 0.80 8.74 33 LotsOfNums_01 27374 7.85 6.42 8.51 34 XM_Evil_Numbers_Gen 26795 8.40 8.55 8.33 35 TooManyTo_001 26135 7.21 5.23 8.12 36 XM_B_Unsub 25579 10.52 16.08 7.95 37 LOTS_OF_MONEY 23105 9.73 15.27 7.18 38 TR_MAX_INTL_RELAY 22991 9.36 14.17 7.15 39 XM_DK_Undo_02 22112 19.10 45.65 6.87 40 IN_ZIMBRA_NJ_WHITELIST 21920 4.69 0.09 6.81 41 XM_H_GMP 21187 6.23 5.45 6.58 42 TR_XM_BayesUnsub 20557 9.26 15.48 6.39 43 T_TooManySym_01 20372 5.04 2.24 6.33 44 RCVD_IN_MSPIKE_WL 19906 6.83 8.22 6.19 45 RCVD_IN_MSPIKE_H3 19905 6.83 8.22 6.19 46 TR_XM_DK_Bayes 19177 4.27 0.60 5.96 47 TR_XM_DK_Bayes1 18888 4.21 0.60 5.87 48 XM_H_Long_From01 18557 5.52 4.99 5.77 49 XM_B_SpammyWords3 17632 7.90 13.15 5.48 50 BAYES_99 17045 15.18 36.62 5.30 51 MIME_QP_LONG_LINE 17006 4.49 2.77 5.29 52 HTML_IMAGE_RATIO_02 16816 5.79 7.03 5.23 53 RCVD_IN_VALIDITY_SAFE 16669 4.54 3.16 5.18 54 TR_XM_DK_Bayes2 16249 3.61 0.47 5.05 55 HTML_IMAGE_RATIO_04 16028 5.10 5.37 4.98 56 TR_XM_SpammyWords4 15848 7.73 13.83 4.93 57 XMStrtUSub 15541 4.67 4.31 4.83 58 BOTNET_IPINHOSTNAME 15470 7.33 12.79 4.81 59 RCVD_IN_VALIDITY_CERTIFIED 14637 3.97 2.72 4.55 60 XMSubMetaSx_00 14296 5.14 6.65 4.44 61 XM_PDF 14269 3.24 0.64 4.43 62 RELAYCOUNTRY_META 14185 9.08 19.22 4.41 63 BAYES_80 14015 5.77 8.83 4.36 64 ANY_BOUNCE_MESSAGE 13972 3.49 1.63 4.34 65 BOUNCE_MESSAGE 13966 3.48 1.62 4.34 66 BAYES_40 13808 3.41 1.51 4.29 67 FSL_BULK_SIG 13572 5.32 7.70 4.22 68 XM_UncommonTLD01 13481 4.74 5.94 4.19 69 BAYES_999 13390 11.97 28.93 4.16 70 T_REMOTE_IMAGE 12321 3.31 2.17 3.83 71 RCVD_IN_IADB_LISTED 12306 2.93 0.99 3.82 72 XM_Body_Dirty_Words 12228 4.99 7.58 3.80 73 XM_B_Phish_Phrases 11667 3.99 4.77 3.63 74 MPART_ALT_DIFF 11476 4.61 6.87 3.57 75 RCVD_IN_IADB_SPF 10770 2.56 0.86 3.35 76 XM_SPF_SoftFail 10761 3.86 4.98 3.34 77 BAYES_20 10377 2.54 1.05 3.23 78 TR_XM_DKIM_Undo 10193 13.03 34.43 3.17 79 SCC_BODY_URI_ONLY 10158 2.51 1.09 3.16 80 MAILING_LIST_MULTI 9702 2.53 1.49 3.02 81 RCVD_IN_IADB_SENDERID 9606 2.30 0.81 2.99 82 RCVD_IN_IADB_DK 9358 2.25 0.82 2.91 83 T_TooManySym_02 9305 2.21 0.73 2.89 84 XMNumbers 9294 3.22 3.93 2.89 85 XM_B_SpammyTLD 9110 3.01 3.39 2.83 86 BAYES_95 8938 3.50 5.06 2.78 87 HTML_IMAGE_RATIO_06 8637 3.08 3.93 2.68 88 BAYES_05 8483 1.96 0.50 2.64 89 RCVD_IN_IADB_VOUCHED 7932 1.82 0.43 2.47 90 TooManyTo_002 7852 1.96 0.91 2.44 91 TR_XM_SpammyRelay 7811 6.66 15.84 2.43 92 MIME_HTML_MOSTLY 7577 3.03 4.48 2.35 93 INVALID_MSGID 7163 1.57 0.14 2.23 94 T_XMDrugObfuBody_14 7091 2.76 3.96 2.20 95 DKIM_INVALID 6986 2.88 4.42 2.17 96 TO_MALFORMED 6888 1.47 0.02 2.14 97 MSGID_NOFQDN1 6706 1.44 0.04 2.08 98 TR_XM_UnparsRelay 6570 3.81 7.66 2.04 99 HTML_MIME_NO_HTML_TAG 6565 2.05 2.06 2.04 100 MIME_HTML_ONLY_MULTI 6543 2.69 4.13 2.03 101 HTML_IMAGE_RATIO_08 6380 2.21 2.71 1.98 102 TR_DCC_Bayes_99 6370 9.36 25.36 1.98 103 XM_CamelCaseFrm001 6125 2.15 2.69 1.90 104 XMSexyCombo_05 6123 2.67 4.32 1.90 105 FROM_EXCESS_BASE64 6014 1.98 2.23 1.87 106 XM_DK_Undo_01 5732 1.68 1.46 1.78 107 RCVD_IN_IADB_OPTIN 5623 1.29 0.29 1.75 108 XM_B_Investor 5457 2.89 5.47 1.70 109 HELO_NODOT 5437 1.28 0.39 1.69 110 HELO_NO_DOMAIN 5435 1.28 0.39 1.69 111 XMStockSpam_06 5430 1.77 1.95 1.69 112 TM2_M_URI_OPT_OUT 5201 2.41 4.14 1.62 113 T_XMDrugObfuBody_08 5174 2.17 3.38 1.61 114 XMDiploma_00 5147 1.90 2.56 1.60 115 UNTRUSTED_Relay 5060 2.77 5.38 1.57 116 TVD_RCVD_IP 4927 1.28 0.74 1.53 117 BOTNET 4870 3.78 8.71 1.51 118 XM_OfRef6 4792 2.27 3.96 1.49 119 IN_HORDE_ADDRESS_BOOK 4790 1.04 0.07 1.49 120 TR_XM_PhishingBody 4777 2.25 3.91 1.48 121 SUBJ_ALL_CAPS 4649 1.76 2.46 1.44 122 XMGappySubj_01 4554 1.01 0.14 1.42 123 TR_Symld_Words 4553 1.32 1.13 1.42 124 RELAYCOUNTRY_CA 4514 4.36 10.77 1.40 125 TooManyTo_003 4431 1.19 0.79 1.38 126 XM_B_Unsub2 4359 1.56 1.99 1.35 127 TM2_M_VERY_LONG_WORD 4270 1.90 3.14 1.33 128 XM_SendGrid 4267 1.38 1.50 1.33 129 XMBSHREFv2 4197 1.03 0.42 1.30 130 XM_GoogleGroups 3862 0.99 0.54 1.20 131 TR_XM_SpammyWords5 3747 1.88 3.44 1.16 132 TVD_SPACE_RATIO 3670 0.85 0.22 1.14 133 URI_HEX 3649 1.21 1.38 1.13 134 XM_H_Long_From02 3641 1.04 0.85 1.13 135 URI_NOVOWEL 3619 0.99 0.70 1.12 136 KHOP_HELO_FCRDNS 3398 1.16 1.40 1.06 137 TooManyTo_004 3281 0.92 0.71 1.02 138 T_TooManySym_03 3211 0.77 0.29 1.00 139 XMCapTrack 3199 0.78 0.31 0.99 140 XMNoVowels 3194 0.85 0.55 0.99 141 XMGenDplmaNmb 3021 1.03 1.23 0.94 142 XMBody_95 2999 0.69 0.16 0.93 143 RCVD_IN_BL_SPAMCOP_NET 2988 4.81 13.22 0.93 144 XMSexyCombo_01 2956 0.96 1.04 0.92 145 TR_XM_SpammyWords2 2954 5.08 14.12 0.92 146 T_FILL_THIS_FORM_SHORT 2949 1.66 3.28 0.92 147 XM_UB50 2930 1.55 2.93 0.91 148 DKIM_ADSP_CUSTOM_MED 2868 1.06 1.42 0.89 149 TR_XM_DK_SendGrid 2798 0.88 0.89 0.87 150 SpammyFromTLD_01 2779 1.21 1.95 0.86 151 XMBrknScrpt_02 2737 1.06 1.52 0.85 152 TooManyTo_005 2670 0.78 0.66 0.83 153 XMSubMetaSxObfu_03 2644 0.76 0.63 0.82 154 RELAYCOUNTRY_AU 2607 1.27 2.27 0.81 155 XM_H_PHPMailer 2518 0.81 0.87 0.78 156 SpammyFromTLD_02 2435 1.19 2.14 0.76 157 XM_B_SpammyWords4 2385 1.27 2.42 0.74 158 URI_TRY_3LD 2379 1.12 1.96 0.74 159 XMBdyGiftCard01 2374 0.86 1.12 0.74 160 XMGappySubj_02 2343 0.52 0.06 0.73 161 FROM_GOV_DKIM_AU 2331 0.53 0.10 0.72 162 XM_ShortIntro_01 2309 0.69 0.64 0.72 163 HTTPS_HTTP_MISMATCH 2276 0.83 1.09 0.71 164 TR_MetaPhish_Combo_01 2261 0.82 1.06 0.70 165 TR_XM_Base64_M1 2248 0.96 1.52 0.70 166 RCVD_IN_PSBL 2247 0.98 1.58 0.70 167 XMSubMetaI_00 2207 0.74 0.85 0.69 168 XMBody_17 2181 2.58 6.71 0.68 169 XM_B_COPY_HTML 2160 0.84 1.20 0.67 170 XM_ProductURIs 2080 0.77 1.03 0.65 171 T_OBFU_PDF_ATTACH 2004 0.45 0.07 0.62 172 TO_NO_BRKTS_HTML_ONLY 1985 0.53 0.34 0.62 173 T_XMDrugObfuBody_00 1959 0.86 1.42 0.61 174 HTML_TAG_BALANCE_BODY 1954 0.87 1.43 0.61 175 TM2_M_BODY_EMPTY 1946 0.70 0.91 0.60 176 PLING_QUERY 1898 0.73 1.02 0.59 177 USER_IN_WHITELIST 1863 0.40 0.00 0.58 178 USER_IN_WELCOMELIST 1863 0.40 0.00 0.58 179 NML_ADSP_CUSTOM_MED 1853 0.78 1.24 0.58 180 XMOemUri 1826 0.44 0.16 0.57 181 MPART_ALT_DIFF_COUNT 1812 0.61 0.71 0.56 182 XMSubMetaSx_01 1803 0.50 0.37 0.56 183 FILL_THIS_FORM 1734 0.51 0.45 0.54 184 HTML_FONT_FACE_BAD 1702 0.60 0.75 0.53 185 XMSexyCombo_04 1675 0.47 0.37 0.52 186 TR_LOTS_OF_MONEY3 1658 1.47 3.55 0.52 187 T_Symld_Words_02 1649 0.56 0.66 0.51 188 TR_XM_SPAMCOP 1644 3.76 10.81 0.51 189 FORGED_GMAIL_RCVD 1631 0.70 1.12 0.51 190 XMSexyCombo_02 1613 0.39 0.14 0.50 191 SHORT_HELO_AND_INLINE_IMAGE 1587 0.38 0.14 0.49 192 XMPhish30 1515 0.75 1.35 0.47 193 T_XMHurry_00 1514 0.83 1.60 0.47 194 XMPhish14 1510 0.67 1.12 0.47 195 XM_B_FormFill 1504 0.33 0.03 0.47 196 SHOPIFY_IMG_NOT_RCVD_SFY 1400 0.47 0.56 0.44 197 XMSubMetaSxObfu_02 1367 0.48 0.59 0.42 198 RELAYCOUNTRY_GB 1358 0.48 0.59 0.42 199 HTML_IMAGE_ONLY_20 1330 0.40 0.37 0.41 200 MISSING_HEADERS 1306 0.41 0.42 0.41 ----------------------------------------------------------------------