Email: 556612 Autolearn: 0 AvgScore: 2.05 AvgScanTime: 1.54 sec Spam: 159226 Autolearn: 0 AvgScore: 13.25 AvgScanTime: 1.70 sec Ham: 397386 Autolearn: 0 AvgScore: -2.43 AvgScanTime: 1.47 sec Time Spent Running SA: 237.95 hours Time Spent Processing Spam: 75.31 hours Time Spent Processing Ham: 162.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 156573 99.02 98.33 99.29 2 HTML_MESSAGE 151703 90.12 95.28 88.06 3 DKIM_SIGNED 143559 72.52 90.16 65.45 4 XM_DK_Pass 138182 70.74 86.78 64.32 5 DKIM_VALID 136204 69.66 85.54 63.29 6 XM_B_Unicode 130690 75.61 82.08 73.02 7 RELAYCOUNTRY_US 127082 81.39 79.81 82.02 8 XM_B_SpammyWords 114743 50.95 72.06 42.50 9 DCC_CHECK 114016 42.10 71.61 30.27 10 XMListUnsubscribeExists 111826 51.14 70.23 43.49 11 DKIM_VALID_AU 102492 54.74 64.37 50.88 12 XM_DK_Undo_02 71179 16.36 44.70 5.01 13 XM_B_Unicode3 69881 43.44 43.89 43.26 14 XM_B_SpammyWords2 67113 23.91 42.15 16.60 15 LOC_TINY_FONT_1 62057 26.70 38.97 21.79 16 BAYES_50 61465 51.98 38.60 57.34 17 BAYES_99 57204 12.89 35.93 3.66 18 HTML_FONT_LOW_CONTRAST 56919 28.40 35.75 25.46 19 TR_XM_DKIM_Undo 54213 11.20 34.05 2.04 20 DKIM_VALID_EF 53495 27.43 33.60 24.96 21 RCVD_IN_MSPIKE_H2 53357 27.93 33.51 25.69 22 FVGT_m_MULTI_ODD 50260 25.13 31.57 22.55 23 MIME_HTML_ONLY 48234 24.17 30.29 21.72 24 DCC_CHECK_NEGATIVE 45197 57.86 28.39 69.67 25 BAYES_999 44340 9.94 27.85 2.77 26 T_KAM_HTML_FONT_INVALID 43529 20.70 27.34 18.04 27 TR_DCC_Bayes_99 39007 8.00 24.50 1.39 28 TR_XM_DK_Unsub 37060 14.99 23.28 11.67 29 XMSubLong 36305 21.49 22.80 20.97 30 T_TM2_M_HEADER_IN_MSG 36225 24.49 22.75 25.19 31 XM_Multi_Part_URI 32184 14.76 20.21 12.57 32 RELAYCOUNTRY_META 30081 8.04 18.89 3.70 33 LOTS_OF_MONEY 28198 9.22 17.71 5.81 34 TR_XM_SpammyWords4 25256 7.34 15.86 3.92 35 XM_B_Unsub 24839 9.25 15.60 6.71 36 TR_XM_BayesUnsub 23983 8.06 15.06 5.25 37 TR_XM_SpammyRelay 23678 5.69 14.87 2.02 38 TR_MAX_INTL_RELAY 22926 8.27 14.40 5.81 39 XM_B_SpammyWords3 22543 7.22 14.16 4.44 40 UNPARSEABLE_RELAY 21929 10.47 13.77 9.14 41 TR_XM_SpammyWords2 21691 4.13 13.62 0.33 42 BOTNET_IPINHOSTNAME 20700 6.16 13.00 3.42 43 RCVD_IN_BL_SPAMCOP_NET 19831 4.07 12.45 0.71 44 TR_XM_SPAMCOP 16790 3.35 10.54 0.47 45 RELAYCOUNTRY_CA 15201 3.60 9.55 1.21 46 BOTNET 14422 3.34 9.06 1.04 47 BAYES_80 13764 4.99 8.64 3.53 48 RCVD_IN_MSPIKE_WL 13201 6.14 8.29 5.28 49 RCVD_IN_MSPIKE_H3 13201 6.14 8.29 5.28 50 XM_Evil_Numbers_Gen 12991 8.24 8.16 8.27 51 BAYES_60 12346 7.83 7.75 7.86 52 FSL_BULK_SIG 12091 4.69 7.59 3.53 53 TR_XM_UnparsRelay 11897 3.03 7.47 1.25 54 XM_Body_Dirty_Words 10813 3.59 6.79 2.30 55 LotsOfNums_01 10429 7.15 6.55 7.38 56 XMSubMetaSx_00 9871 3.95 6.20 3.04 57 MPART_ALT_DIFF 9503 8.15 5.97 9.03 58 UNTRUSTED_Relay 9495 2.63 5.96 1.30 59 XM_UncommonTLD01 9468 4.39 5.95 3.76 60 XM_H_GMP 9400 5.78 5.90 5.73 61 XMBody_17 9185 2.11 5.77 0.64 62 HTML_IMAGE_RATIO_02 8882 4.70 5.58 4.35 63 XM_SPF_SoftFail 8473 3.98 5.32 3.44 64 BAYES_95 8364 3.13 5.25 2.28 65 XM_H_Long_From01 8023 4.97 5.04 4.94 66 HTML_IMAGE_RATIO_04 7656 11.84 4.81 14.66 67 XM_B_Investor 7517 2.46 4.72 1.56 68 TooManyTo_001 7495 6.63 4.71 7.40 69 XM_B_Phish_Phrases 7487 3.25 4.70 2.67 70 DKIM_INVALID 7355 2.86 4.62 2.16 71 TR_LOTS_OF_MONEY3 6886 1.63 4.32 0.56 72 HTML_IMAGE_RATIO_06 6847 4.54 4.30 4.64 73 XMSexyCombo_05 6648 2.06 4.18 1.21 74 XM_OfRef6 6494 1.98 4.08 1.14 75 TR_XM_PhishingBody 6442 2.33 4.05 1.64 76 T_XMDrugObfuBody_14 6402 2.32 4.02 1.63 77 TR_XM_SpammyWords5 6230 1.90 3.91 1.10 78 MIME_HTML_MOSTLY 6046 2.66 3.80 2.21 79 XMStrtUSub 5727 8.88 3.60 11.00 80 TM2_M_URI_OPT_OUT 5462 2.00 3.43 1.43 81 XMNumbers 5347 2.87 3.36 2.68 82 MIME_HTML_ONLY_MULTI 5275 6.11 3.31 7.23 83 XM_B_SpammyTLD 5207 2.50 3.27 2.20 84 T_XMDrugObfuBody_08 5193 1.92 3.26 1.38 85 MIME_QP_LONG_LINE 5074 4.06 3.19 4.41 86 TM2_M_VERY_LONG_WORD 4861 1.64 3.05 1.07 87 T_FILL_THIS_FORM_SHORT 4845 1.41 3.04 0.76 88 XM_URI_RBL 4721 0.95 2.96 0.14 89 XMDiploma_00 4623 2.17 2.90 1.87 90 ALL_TRUSTED 4524 11.59 2.84 15.09 91 XM_CamelCaseFrm001 4386 2.07 2.75 1.79 92 XM_UB50 4331 1.31 2.72 0.75 93 HTML_IMAGE_RATIO_08 4089 2.24 2.57 2.10 94 TR_XM_BayesRelay 4065 0.73 2.55 0.00 95 XM_B_Unsub2 4000 1.61 2.51 1.25 96 SUBJ_ALL_CAPS 3970 1.75 2.49 1.45 97 RCVD_IN_VALIDITY_SAFE 3963 4.27 2.49 4.99 98 FROM_EXCESS_BASE64 3697 1.85 2.32 1.66 99 T_TooManySym_01 3621 3.78 2.27 4.38 100 SpammyFromTLD_01 3600 1.23 2.26 0.82 101 USER_IN_DEF_DKIM_WL 3570 9.25 2.24 12.06 102 RELAYCOUNTRY_AU 3476 1.06 2.18 0.61 103 T_REMOTE_IMAGE 3396 2.84 2.13 3.13 104 RCVD_IN_VALIDITY_RPBL 3328 0.66 2.09 0.09 105 RCVD_IN_VALIDITY_CERTIFIED 3281 3.79 2.06 4.48 106 T_XMDrugObfuBody_00 3184 1.14 2.00 0.80 107 XM_B_SpammyWords4 3138 1.00 1.97 0.61 108 TR_XM_NoHeaderRelay 3065 0.62 1.92 0.10 109 TR_XM_FormFill 2966 0.54 1.86 0.01 110 HK_RANDOM_REPLYTO 2860 0.56 1.80 0.07 111 ANY_BOUNCE_MESSAGE 2796 3.91 1.76 4.77 112 HTML_MIME_NO_HTML_TAG 2788 1.74 1.75 1.74 113 BOUNCE_MESSAGE 2786 3.90 1.75 4.77 114 XM_H_Undi_Recip 2737 0.63 1.72 0.19 115 XMGenDplmaNmb 2698 1.20 1.69 1.00 116 XM_DK_Undo_01 2679 1.64 1.68 1.62 117 TR_XM_INV_DKIM 2604 0.50 1.64 0.05 118 URI_TRY_3LD 2603 0.90 1.63 0.61 119 MAILING_LIST_MULTI 2570 2.28 1.61 2.55 120 XMStockSpam_06 2564 0.96 1.61 0.71 121 XM_H_Long_From02 2524 1.16 1.59 0.99 122 XMMoneyMeta_00 2505 0.91 1.57 0.64 123 URI_HEX 2485 1.12 1.56 0.95 124 TR_XM_PHPForged 2468 0.69 1.55 0.34 125 TR_XM_PHPDW 2457 0.68 1.54 0.34 126 SpammyFromTLD_02 2426 0.98 1.52 0.76 127 XM_HighProb1 2392 0.43 1.50 0.00 128 TR_XM_FormFill2 2379 0.67 1.49 0.34 129 BAYES_40 2378 4.02 1.49 5.03 130 SCC_BODY_URI_ONLY 2377 2.57 1.49 3.00 131 XM_H_PHPOS 2367 0.66 1.49 0.33 132 HOSTED_IMG_MULTI_PUB_01 2319 0.43 1.46 0.02 133 TR_XM_Undi_Recip19 2275 0.46 1.43 0.07 134 T_MONEY_PERCENT 2227 0.55 1.40 0.21 135 TR_LOTS_OF_MONEY2 2227 0.55 1.40 0.21 136 HTTPS_HTTP_MISMATCH 2221 0.91 1.39 0.71 137 TR_XM_Undi_RecipCombo2 2178 0.39 1.37 0.00 138 DKIM_ADSP_CUSTOM_MED 2148 0.93 1.35 0.77 139 XMPhish30 2123 0.78 1.33 0.56 140 XMBrknScrpt_02 2122 0.83 1.33 0.63 141 KHOP_HELO_FCRDNS 2065 1.01 1.30 0.90 142 AC_BR_BONANZA 2043 0.42 1.28 0.07 143 FONT_INVIS_LONG_LINE 2005 0.39 1.26 0.04 144 XM_DIRTYINTL 1923 0.44 1.21 0.14 145 T_XMHurry_00 1904 0.64 1.20 0.41 146 FILL_THIS_FORM 1899 0.70 1.19 0.50 147 RCVD_IN_IADB_LISTED 1881 2.66 1.18 3.25 148 TR_Mismatch_TLD_02 1872 0.38 1.18 0.06 149 UNDISC_MONEY 1864 0.34 1.17 0.01 150 NML_ADSP_CUSTOM_MED 1830 0.69 1.15 0.50 151 XMPhish14 1815 0.67 1.14 0.48 152 TR_XM_Undi_Recip11 1811 0.37 1.14 0.06 153 XMReplyNow 1799 0.50 1.13 0.25 154 XM_SendGrid 1774 1.10 1.11 1.09 155 HTML_TAG_BALANCE_BODY 1770 0.69 1.11 0.53 156 TR_Symld_Words 1766 1.17 1.11 1.20 157 T_Symld_Words_02 1741 0.71 1.09 0.56 158 TR_XM_InvalidRelay 1737 0.33 1.09 0.02 159 URIBL_DBL_SPAM 1726 0.32 1.08 0.02 160 TR_Sbj_FN_Bdy 1718 0.40 1.08 0.13 161 RCVD_IN_PSBL 1696 0.54 1.07 0.32 162 BAYES_20 1694 2.96 1.06 3.72 163 TR_XM_Undi_Recip5 1674 0.30 1.05 0.01 164 RCVD_IN_IADB_SPF 1667 2.33 1.05 2.85 165 XM_Combo_Sbj 1666 0.42 1.05 0.17 166 TR_XM_Undi_RecipCombo3 1661 0.30 1.04 0.00 167 URI_NOVOWEL 1645 1.03 1.03 1.03 168 FORGED_GMAIL_RCVD 1639 0.60 1.03 0.43 169 XM_UB99 1634 0.30 1.03 0.00 170 XMHTML_After_End 1628 0.60 1.02 0.42 171 TR_XM_Undi_Recip2 1617 0.29 1.02 0.01 172 XMLngstWrd_00 1600 0.85 1.00 0.79 173 DIET_1 1598 0.62 1.00 0.46 174 T_STY_INVIS_DIRECT 1594 0.44 1.00 0.22 175 RCVD_IN_IADB_DK 1572 2.06 0.99 2.49 176 RCVD_IN_IADB_SENDERID 1561 2.11 0.98 2.56 177 LongTLD 1559 0.46 0.98 0.25 178 TR_XM_Base64_M1 1558 0.69 0.98 0.57 179 TM2_M_OBFU_COMMENT 1520 0.50 0.95 0.32 180 BOTNET_NORDNS 1516 0.28 0.95 0.01 181 FILL_THIS_FORM_LONG 1512 0.44 0.95 0.24 182 HTML_TAG_BALANCE_HEAD 1502 0.42 0.94 0.21 183 XM_ProductURIs 1490 0.70 0.94 0.61 184 PLING_QUERY 1478 0.69 0.93 0.59 185 MONEY_FORM 1456 0.26 0.91 0.00 186 TR_XM_Base64_L1 1447 0.35 0.91 0.12 187 RELAYCOUNTRY_GB 1442 0.58 0.91 0.44 188 RELAYCOUNTRY_IN 1421 0.29 0.89 0.05 189 DKIM_ADSP_NXDOMAIN 1412 0.42 0.89 0.23 190 THIS_AD 1411 0.49 0.89 0.33 191 XM_UB60 1406 0.30 0.88 0.07 192 XM_B_SEO 1400 0.34 0.88 0.13 193 HTML_IMAGE_ONLY_20 1391 0.51 0.87 0.36 194 TR_Caps_n_Bayes_99 1377 0.25 0.86 0.01 195 TooManyTo_002 1364 1.82 0.86 2.20 196 XM_B_COVIDMETA 1359 0.36 0.85 0.17 197 XMSexyCombo_01 1357 0.32 0.85 0.11 198 RELAYCOUNTRY_FR 1355 0.37 0.85 0.18 199 TM2_M_BODY_EMPTY 1340 0.50 0.84 0.36 200 XM_OfRef7 1333 0.36 0.84 0.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 394565 99.02 98.33 99.29 2 HTML_MESSAGE 349938 90.12 95.28 88.06 3 RELAYCOUNTRY_US 325954 81.39 79.81 82.02 4 XM_B_Unicode 290178 75.61 82.08 73.02 5 DCC_CHECK_NEGATIVE 276877 57.86 28.39 69.67 6 DKIM_SIGNED 260075 72.52 90.16 65.45 7 XM_DK_Pass 255580 70.74 86.78 64.32 8 DKIM_VALID 251508 69.66 85.54 63.29 9 BAYES_50 227861 51.98 38.60 57.34 10 DKIM_VALID_AU 202202 54.74 64.37 50.88 11 XMListUnsubscribeExists 172832 51.14 70.23 43.49 12 XM_B_Unicode3 171904 43.44 43.89 43.26 13 XM_B_SpammyWords 168875 50.95 72.06 42.50 14 DCC_CHECK 120296 42.10 71.61 30.27 15 RCVD_IN_MSPIKE_H2 102092 27.93 33.51 25.69 16 HTML_FONT_LOW_CONTRAST 101170 28.40 35.75 25.46 17 T_TM2_M_HEADER_IN_MSG 100111 24.49 22.75 25.19 18 DKIM_VALID_EF 99182 27.43 33.60 24.96 19 FVGT_m_MULTI_ODD 89601 25.13 31.57 22.55 20 LOC_TINY_FONT_1 86573 26.70 38.97 21.79 21 MIME_HTML_ONLY 86301 24.17 30.29 21.72 22 XMSubLong 83331 21.49 22.80 20.97 23 T_KAM_HTML_FONT_INVALID 71677 20.70 27.34 18.04 24 XM_B_SpammyWords2 65954 23.91 42.15 16.60 25 ALL_TRUSTED 59961 11.59 2.84 15.09 26 HTML_IMAGE_RATIO_04 58268 11.84 4.81 14.66 27 HTML_FONT_FACE_BAD 54586 10.05 0.84 13.74 28 BAYES_00 51179 9.37 0.60 12.88 29 XM_Multi_Part_URI 49946 14.76 20.21 12.57 30 XM_H_Trusted_IP 48591 8.73 0.00 12.23 31 USER_IN_DEF_DKIM_WL 47941 9.25 2.24 12.06 32 TR_XM_DK_Unsub 46374 14.99 23.28 11.67 33 XMStrtUSub 43724 8.88 3.60 11.00 34 UNPARSEABLE_RELAY 36337 10.47 13.77 9.14 35 MPART_ALT_DIFF 35872 8.15 5.97 9.03 36 XM_Evil_Numbers_Gen 32851 8.24 8.16 8.27 37 BAYES_60 31224 7.83 7.75 7.86 38 TooManyTo_001 29417 6.63 4.71 7.40 39 LotsOfNums_01 29341 7.15 6.55 7.38 40 MIME_HTML_ONLY_MULTI 28748 6.11 3.31 7.23 41 XM_DKIMWhitelistDomains 26712 4.95 0.54 6.72 42 XM_B_Unsub 26671 9.25 15.60 6.71 43 IN_ZIMBRA_NJ_WHITELIST 23637 4.27 0.09 5.95 44 TR_MAX_INTL_RELAY 23105 8.27 14.40 5.81 45 LOTS_OF_MONEY 23094 9.22 17.71 5.81 46 TR_XM_DK_Bayes 22866 4.22 0.41 5.75 47 XM_H_GMP 22756 5.78 5.90 5.73 48 TR_XM_DK_Bayes1 22138 4.09 0.40 5.57 49 RCVD_IN_MSPIKE_WL 20976 6.14 8.29 5.28 50 RCVD_IN_MSPIKE_H3 20975 6.14 8.29 5.28 51 TR_XM_BayesUnsub 20872 8.06 15.06 5.25 52 BAYES_40 19974 4.02 1.49 5.03 53 XM_DK_Undo_02 19894 16.36 44.70 5.01 54 RCVD_IN_VALIDITY_SAFE 19817 4.27 2.49 4.99 55 XM_H_Long_From01 19628 4.97 5.04 4.94 56 TR_XM_DK_Bayes2 19119 3.53 0.32 4.81 57 ANY_BOUNCE_MESSAGE 18958 3.91 1.76 4.77 58 BOUNCE_MESSAGE 18944 3.90 1.75 4.77 59 HTML_IMAGE_RATIO_06 18431 4.54 4.30 4.64 60 RCVD_IN_VALIDITY_CERTIFIED 17800 3.79 2.06 4.48 61 XM_B_SpammyWords3 17653 7.22 14.16 4.44 62 MIME_QP_LONG_LINE 17531 4.06 3.19 4.41 63 T_TooManySym_01 17398 3.78 2.27 4.38 64 HTML_IMAGE_RATIO_02 17290 4.70 5.58 4.35 65 XMSubNoVowel 16527 3.07 0.36 4.16 66 TR_XM_SpammyWords4 15583 7.34 15.86 3.92 67 XM_PDF 15397 2.94 0.62 3.87 68 XM_UncommonTLD01 14948 4.39 5.95 3.76 69 BAYES_20 14775 2.96 1.06 3.72 70 BAYES_05 14725 2.83 0.66 3.71 71 RELAYCOUNTRY_META 14698 8.04 18.89 3.70 72 BAYES_99 14552 12.89 35.93 3.66 73 BAYES_80 14027 4.99 8.64 3.53 74 FSL_BULK_SIG 14017 4.69 7.59 3.53 75 XM_SPF_SoftFail 13653 3.98 5.32 3.44 76 BOTNET_IPINHOSTNAME 13607 6.16 13.00 3.42 77 RCVD_IN_IADB_LISTED 12908 2.66 1.18 3.25 78 T_REMOTE_IMAGE 12423 2.84 2.13 3.13 79 XMSubMetaSx_00 12088 3.95 6.20 3.04 80 SCC_BODY_URI_ONLY 11920 2.57 1.49 3.00 81 RCVD_IN_IADB_SPF 11310 2.33 1.05 2.85 82 BAYES_999 11015 9.94 27.85 2.77 83 XMNumbers 10655 2.87 3.36 2.68 84 XM_B_Phish_Phrases 10610 3.25 4.70 2.67 85 RCVD_IN_IADB_SENDERID 10170 2.11 0.98 2.56 86 MAILING_LIST_MULTI 10134 2.28 1.61 2.55 87 RCVD_IN_IADB_DK 9888 2.06 0.99 2.49 88 XM_Body_Dirty_Words 9157 3.59 6.79 2.30 89 BAYES_95 9069 3.13 5.25 2.28 90 T_TooManySym_02 8823 1.82 0.82 2.22 91 RCVD_IN_IADB_VOUCHED 8823 1.74 0.56 2.22 92 MIME_HTML_MOSTLY 8770 2.66 3.80 2.21 93 TooManyTo_002 8756 1.82 0.86 2.20 94 XM_B_SpammyTLD 8727 2.50 3.27 2.20 95 DKIM_INVALID 8567 2.86 4.62 2.16 96 HTML_IMAGE_RATIO_08 8364 2.24 2.57 2.10 97 XMSubLongNoVowel 8174 1.50 0.12 2.06 98 TR_XM_DKIM_Undo 8101 11.20 34.05 2.04 99 TR_XM_SpammyRelay 8009 5.69 14.87 2.02 100 XMSubGarbage 7928 1.43 0.02 2.00 101 XMDiploma_00 7435 2.17 2.90 1.87 102 INVALID_MSGID 7288 1.35 0.15 1.83 103 XM_CamelCaseFrm001 7127 2.07 2.75 1.79 104 HELO_NODOT 7095 1.38 0.37 1.79 105 HELO_NO_DOMAIN 7088 1.37 0.35 1.78 106 HTML_MIME_NO_HTML_TAG 6901 1.74 1.75 1.74 107 MSGID_NOFQDN1 6755 1.23 0.05 1.70 108 FROM_EXCESS_BASE64 6590 1.85 2.32 1.66 109 TO_MALFORMED 6553 1.21 0.11 1.65 110 TR_XM_PhishingBody 6534 2.33 4.05 1.64 111 T_XMDrugObfuBody_14 6488 2.32 4.02 1.63 112 XM_DK_Undo_01 6430 1.64 1.68 1.62 113 XM_B_Investor 6182 2.46 4.72 1.56 114 RCVD_IN_IADB_OPTIN 6093 1.20 0.36 1.53 115 SUBJ_ALL_CAPS 5746 1.75 2.49 1.45 116 TM2_M_URI_OPT_OUT 5698 2.00 3.43 1.43 117 TVD_RCVD_IP 5538 1.20 0.70 1.39 118 TR_DCC_Bayes_99 5513 8.00 24.50 1.39 119 T_XMDrugObfuBody_08 5479 1.92 3.26 1.38 120 IN_HORDE_ADDRESS_BOOK 5282 0.97 0.06 1.33 121 UNTRUSTED_Relay 5170 2.63 5.96 1.30 122 XM_B_Unsub2 4967 1.61 2.51 1.25 123 TR_XM_UnparsRelay 4964 3.03 7.47 1.25 124 TooManyTo_003 4955 1.11 0.76 1.25 125 RELAYCOUNTRY_CA 4811 3.60 9.55 1.21 126 XMSexyCombo_05 4792 2.06 4.18 1.21 127 TR_Symld_Words 4751 1.17 1.11 1.20 128 XM_OfRef6 4542 1.98 4.08 1.14 129 XMBSHREFv2 4425 0.87 0.26 1.11 130 TR_XM_SpammyWords5 4365 1.90 3.91 1.10 131 XM_SendGrid 4348 1.10 1.11 1.09 132 XM_GoogleGroups 4270 0.94 0.60 1.07 133 TM2_M_VERY_LONG_WORD 4268 1.64 3.05 1.07 134 BOTNET 4142 3.34 9.06 1.04 135 URI_NOVOWEL 4105 1.03 1.03 1.03 136 XMCapTrack 3986 0.85 0.47 1.00 137 XMGenDplmaNmb 3969 1.20 1.69 1.00 138 XMGappySubj_01 3939 0.78 0.24 0.99 139 XM_H_Long_From02 3915 1.16 1.59 0.99 140 XM_E_Blogspot 3882 0.72 0.07 0.98 141 TVD_SPACE_RATIO 3869 0.76 0.21 0.97 142 XMBody_95 3786 0.75 0.26 0.95 143 URI_HEX 3771 1.12 1.56 0.95 144 TooManyTo_004 3597 0.85 0.71 0.91 145 KHOP_HELO_FCRDNS 3570 1.01 1.30 0.90 146 SpammyFromTLD_01 3252 1.23 2.26 0.82 147 T_XMDrugObfuBody_00 3183 1.14 2.00 0.80 148 XMLngstWrd_00 3151 0.85 1.00 0.79 149 TR_MetaPhish_Combo_01 3145 0.76 0.69 0.79 150 DKIM_ADSP_CUSTOM_MED 3041 0.93 1.35 0.77 151 SpammyFromTLD_02 3034 0.98 1.52 0.76 152 T_TooManySym_03 3022 0.64 0.34 0.76 153 T_FILL_THIS_FORM_SHORT 3001 1.41 3.04 0.76 154 XM_UB50 2977 1.31 2.72 0.75 155 TooManyTo_005 2972 0.73 0.69 0.75 156 TR_XM_DK_SendGrid 2971 0.73 0.69 0.75 157 HTTPS_HTTP_MISMATCH 2839 0.91 1.39 0.71 158 RCVD_IN_BL_SPAMCOP_NET 2821 4.07 12.45 0.71 159 XMStockSpam_06 2803 0.96 1.61 0.71 160 XM_ShortIntro_01 2666 0.65 0.60 0.67 161 XM_B_COPY_HTML 2666 0.72 0.83 0.67 162 XMBdyGiftCard01 2612 0.68 0.74 0.66 163 XMBody_17 2558 2.11 5.77 0.64 164 XMMoneyMeta_00 2543 0.91 1.57 0.64 165 XMBrknScrpt_02 2507 0.83 1.33 0.63 166 RELAYCOUNTRY_AU 2429 1.06 2.18 0.61 167 XM_B_SpammyWords4 2419 1.00 1.97 0.61 168 XM_ProductURIs 2418 0.70 0.94 0.61 169 URI_TRY_3LD 2416 0.90 1.63 0.61 170 PLING_QUERY 2355 0.69 0.93 0.59 171 TR_XM_Base64_M1 2272 0.69 0.98 0.57 172 FROM_GOV_DKIM_AU 2265 0.51 0.35 0.57 173 XMPhish30 2234 0.78 1.33 0.56 174 XM_H_PHPMailer 2233 0.63 0.79 0.56 175 SHORT_HELO_AND_INLINE_IMAGE 2232 0.42 0.06 0.56 176 T_Symld_Words_02 2220 0.71 1.09 0.56 177 TR_LOTS_OF_MONEY3 2207 1.63 4.32 0.56 178 XMNoVowels 2199 0.54 0.50 0.55 179 MPART_ALT_DIFF_COUNT 2198 0.62 0.78 0.55 180 XMGappySubj_02 2172 0.41 0.07 0.55 181 HTML_TAG_BALANCE_BODY 2090 0.69 1.11 0.53 182 FILL_THIS_FORM 1993 0.70 1.19 0.50 183 NML_ADSP_CUSTOM_MED 1985 0.69 1.15 0.50 184 T_OBFU_PDF_ATTACH 1922 0.38 0.12 0.48 185 XMPhish14 1921 0.67 1.14 0.48 186 TR_XM_SPAMCOP 1865 3.35 10.54 0.47 187 DIET_1 1826 0.62 1.00 0.46 188 USER_IN_WELCOMELIST 1785 0.32 0.00 0.45 189 USER_IN_WHITELIST 1785 0.32 0.00 0.45 190 RELAYCOUNTRY_GB 1768 0.58 0.91 0.44 191 XM_TLDProd2 1759 0.49 0.60 0.44 192 XMDateMe_00 1729 0.43 0.42 0.44 193 FORGED_GMAIL_RCVD 1702 0.60 1.03 0.43 194 XMHTML_After_End 1686 0.60 1.02 0.42 195 XM_B_FormFill 1682 0.33 0.11 0.42 196 XMSolicitRefs_0 1647 0.42 0.44 0.41 197 T_XMHurry_00 1637 0.64 1.20 0.41 198 TO_NO_BRKTS_HTML_ONLY 1614 0.36 0.25 0.41 199 XMSubMetaI_00 1613 0.52 0.79 0.41 200 XMSlimDrugH 1562 0.50 0.75 0.39 ----------------------------------------------------------------------