Email: 481916 Autolearn: 0 AvgScore: 4.16 AvgScanTime: 1.37 sec Spam: 152621 Autolearn: 0 AvgScore: 13.47 AvgScanTime: 1.45 sec Ham: 329295 Autolearn: 0 AvgScore: -0.15 AvgScanTime: 1.33 sec Time Spent Running SA: 183.03 hours Time Spent Processing Spam: 61.58 hours Time Spent Processing Ham: 121.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 152220 99.54 99.74 99.44 2 HTML_MESSAGE 147699 88.54 96.78 84.72 3 DKIM_SIGNED 139578 80.63 91.45 75.61 4 XM_DK_Pass 134659 78.76 88.23 74.38 5 DKIM_VALID 132699 77.76 86.95 73.50 6 XM_B_Unicode 129383 74.44 84.77 69.66 7 RELAYCOUNTRY_US 118882 79.38 77.89 80.07 8 DCC_CHECK 114540 48.74 75.05 36.55 9 XM_B_SpammyWords 111963 53.89 73.36 44.86 10 XMListUnsubscribeExists 110852 58.13 72.63 51.41 11 DKIM_VALID_AU 98733 60.94 64.69 59.20 12 XM_DK_Undo_02 68720 18.76 45.03 6.59 13 XM_B_Unicode3 67704 42.12 44.36 41.08 14 XM_B_SpammyWords2 67380 26.90 44.15 18.91 15 BAYES_50 59452 52.23 38.95 58.38 16 LOC_TINY_FONT_1 59140 30.33 38.75 26.43 17 HTML_FONT_LOW_CONTRAST 52967 30.53 34.70 28.59 18 TR_XM_DKIM_Undo 52837 13.20 34.62 3.27 19 BAYES_99 51847 14.00 33.97 4.75 20 DKIM_VALID_EF 51556 30.11 33.78 28.40 21 RCVD_IN_MSPIKE_H2 49129 30.40 32.19 29.57 22 MIME_HTML_ONLY 48088 23.14 31.51 19.27 23 FVGT_m_MULTI_ODD 47110 27.48 30.87 25.91 24 T_KAM_HTML_FONT_INVALID 43859 23.06 28.74 20.44 25 BAYES_999 40390 10.98 26.46 3.80 26 DCC_CHECK_NEGATIVE 38066 51.22 24.94 63.40 27 TR_DCC_Bayes_99 37830 9.10 24.79 1.83 28 TR_XM_DK_Unsub 37309 17.14 24.45 13.75 29 RELAYCOUNTRY_META 33883 9.99 22.20 4.33 30 XMSubLong 33468 22.96 21.93 23.44 31 T_TM2_M_HEADER_IN_MSG 33423 27.11 21.90 29.53 32 XM_Multi_Part_URI 29672 16.16 19.44 14.64 33 TR_XM_SpammyRelay 27286 7.33 17.88 2.44 34 LOTS_OF_MONEY 25649 10.25 16.81 7.22 35 XM_B_Unsub 24763 10.86 16.23 8.38 36 TR_XM_BayesUnsub 23936 9.26 15.68 6.29 37 TR_MAX_INTL_RELAY 23385 10.35 15.32 8.04 38 TR_XM_SpammyWords2 23083 5.25 15.12 0.68 39 TR_XM_SpammyWords4 22547 8.04 14.77 4.92 40 RCVD_IN_BL_SPAMCOP_NET 22037 5.03 14.44 0.67 41 UNPARSEABLE_RELAY 21182 11.63 13.88 10.58 42 XM_B_SpammyWords3 20824 7.51 13.64 4.66 43 BOTNET_IPINHOSTNAME 19503 7.60 12.78 5.20 44 RELAYCOUNTRY_CA 19036 4.85 12.47 1.32 45 TR_XM_SPAMCOP 17650 3.97 11.56 0.45 46 BAYES_80 14987 6.88 9.82 5.52 47 RCVD_IN_MSPIKE_WL 14971 7.40 9.81 6.28 48 RCVD_IN_MSPIKE_H3 14971 7.40 9.81 6.28 49 BOTNET 14156 4.25 9.28 1.91 50 BAYES_60 12877 9.19 8.44 9.54 51 FSL_BULK_SIG 12813 5.37 8.40 3.97 52 XM_Evil_Numbers_Gen 11835 7.84 7.75 7.88 53 XM_Body_Dirty_Words 11829 4.80 7.75 3.43 54 TR_XM_UnparsRelay 10661 3.23 6.99 1.49 55 XMBody_17 10632 2.66 6.97 0.67 56 LotsOfNums_01 10414 7.66 6.82 8.05 57 XM_UncommonTLD01 10357 4.70 6.79 3.74 58 UNTRUSTED_Relay 10199 3.21 6.68 1.60 59 XMSubMetaSx_00 8985 4.18 5.89 3.39 60 XM_B_Investor 8973 3.18 5.88 1.92 61 MPART_ALT_DIFF 8547 4.42 5.60 3.87 62 HTML_IMAGE_RATIO_02 8422 5.18 5.52 5.03 63 BAYES_95 7835 3.34 5.13 2.52 64 XM_SPF_SoftFail 7782 3.58 5.10 2.87 65 XM_H_GMP 7692 5.91 5.04 6.31 66 TR_LOTS_OF_MONEY3 7529 2.00 4.93 0.64 67 TooManyTo_001 7467 7.02 4.89 8.00 68 XM_H_Long_From01 7211 5.14 4.72 5.33 69 HTML_IMAGE_RATIO_04 7143 4.92 4.68 5.03 70 DKIM_INVALID 6879 2.87 4.51 2.11 71 XM_OfRef6 6681 2.27 4.38 1.29 72 XM_B_Phish_Phrases 6442 3.54 4.22 3.22 73 XMSexyCombo_05 6241 2.63 4.09 1.95 74 HTML_IMAGE_RATIO_06 6127 2.96 4.01 2.47 75 TM2_M_URI_OPT_OUT 6121 2.52 4.01 1.83 76 XMStrtUSub 6019 4.74 3.94 5.11 77 T_FILL_THIS_FORM_SHORT 6017 1.91 3.94 0.97 78 T_XMDrugObfuBody_14 5937 2.52 3.89 1.88 79 MIME_HTML_MOSTLY 5863 2.96 3.84 2.56 80 TR_XM_SpammyWords5 5586 1.98 3.66 1.20 81 T_XMDrugObfuBody_08 5583 2.39 3.66 1.81 82 TR_XM_PhishingBody 5394 2.18 3.53 1.55 83 XMNumbers 5356 2.96 3.51 2.70 84 XM_UB50 5139 1.69 3.37 0.91 85 XMDiploma_00 4886 2.22 3.20 1.76 86 XM_B_SpammyTLD 4860 2.82 3.18 2.65 87 HTML_IMAGE_RATIO_08 4709 2.94 3.09 2.87 88 MIME_HTML_ONLY_MULTI 4676 2.38 3.06 2.06 89 TM2_M_VERY_LONG_WORD 4571 1.86 3.00 1.33 90 SpammyFromTLD_01 4568 1.45 2.99 0.73 91 MIME_QP_LONG_LINE 4496 4.36 2.95 5.01 92 TR_XM_BayesRelay 4428 0.92 2.90 0.00 93 TR_XM_NoHeaderRelay 4421 1.00 2.90 0.11 94 XM_CamelCaseFrm001 4370 3.48 2.86 3.77 95 USER_IN_DEF_DKIM_WL 3869 10.94 2.54 14.84 96 T_TooManySym_01 3741 4.65 2.45 5.67 97 XM_URI_RBL 3625 0.87 2.38 0.17 98 RCVD_IN_VALIDITY_SAFE 3602 4.35 2.36 5.28 99 T_XMHurry_00 3564 1.09 2.34 0.51 100 XM_B_SpammyWords4 3476 1.23 2.28 0.75 101 FROM_EXCESS_BASE64 3431 2.12 2.25 2.06 102 RELAYCOUNTRY_AU 3408 1.33 2.23 0.92 103 FONT_INVIS_LONG_LINE 3318 0.72 2.17 0.04 104 SUBJ_ALL_CAPS 3267 1.69 2.14 1.48 105 TR_XM_FormFill 3163 0.67 2.07 0.02 106 T_REMOTE_IMAGE 3163 3.02 2.07 3.46 107 XM_B_Unsub2 3154 1.90 2.07 1.82 108 HTML_MIME_NO_HTML_TAG 3089 1.93 2.02 1.88 109 BOTNET_NORDNS 3027 0.64 1.98 0.01 110 TR_Mismatch_TLD_02 3024 0.67 1.98 0.07 111 RCVD_IN_VALIDITY_CERTIFIED 2905 3.74 1.90 4.59 112 HK_RANDOM_REPLYTO 2747 0.62 1.80 0.08 113 HOSTED_IMG_MULTI_PUB_01 2733 0.58 1.79 0.02 114 XMStockSpam_06 2517 1.39 1.65 1.26 115 MAILING_LIST_MULTI 2505 2.37 1.64 2.71 116 XMBrknScrpt_02 2481 1.03 1.63 0.76 117 T_XMDrugObfuBody_00 2458 1.01 1.61 0.73 118 XMGenDplmaNmb 2435 1.11 1.60 0.88 119 SpammyFromTLD_02 2407 0.90 1.58 0.58 120 TR_XM_PHPForged 2379 0.77 1.56 0.41 121 TR_XM_PHPDW 2356 0.77 1.54 0.42 122 LongTLD 2329 0.69 1.53 0.31 123 URI_TRY_3LD 2284 0.92 1.50 0.65 124 BAYES_40 2284 3.39 1.50 4.26 125 TR_XM_FormFill2 2284 0.76 1.50 0.42 126 XM_H_PHPOS 2275 0.74 1.49 0.40 127 XM_DK_Undo_01 2261 1.68 1.48 1.78 128 TR_XM_INV_DKIM 2246 0.50 1.47 0.05 129 URI_HEX 2175 1.30 1.43 1.24 130 ANY_BOUNCE_MESSAGE 2173 3.22 1.42 4.05 131 BOUNCE_MESSAGE 2164 3.22 1.42 4.05 132 URI_NOVOWEL 2133 1.24 1.40 1.16 133 XM_DIRTYINTL 2101 0.54 1.38 0.15 134 RCVD_IN_IADB_LISTED 2075 3.05 1.36 3.83 135 KHOP_HELO_FCRDNS 2045 1.12 1.34 1.02 136 DIET_1 1966 0.71 1.29 0.45 137 XM_SendGrid 1956 1.37 1.28 1.41 138 RCVD_IN_VALIDITY_RPBL 1951 0.46 1.28 0.08 139 ALL_TRUSTED 1913 11.68 1.25 16.52 140 AC_BR_BONANZA 1902 0.47 1.25 0.11 141 XMPhish30 1882 0.76 1.23 0.54 142 RELAYCOUNTRY_RU 1878 0.41 1.23 0.03 143 TR_XM_Base64_M1 1870 0.94 1.23 0.81 144 RCVD_IN_IADB_SPF 1855 2.67 1.22 3.35 145 XM_HighProb1 1842 0.38 1.21 0.00 146 XM_B_SEO 1828 0.53 1.20 0.22 147 XMSexyCombo_01 1802 0.48 1.18 0.15 148 THIS_AD 1796 0.65 1.18 0.40 149 XMHTML_After_End 1783 0.65 1.17 0.42 150 SCC_BODY_URI_ONLY 1782 2.43 1.17 3.01 151 RCVD_IN_IADB_DK 1761 2.34 1.15 2.89 152 XMBdyGiftCard01 1752 0.85 1.15 0.71 153 RCVD_IN_IADB_SENDERID 1751 2.39 1.15 2.97 154 XM_H_Undi_Recip 1739 0.46 1.14 0.14 155 XMMoneyMeta_00 1730 0.74 1.13 0.55 156 TR_Symld_Words 1729 1.35 1.13 1.45 157 DKIM_ADSP_CUSTOM_MED 1729 0.95 1.13 0.86 158 HTML_TAG_BALANCE_BODY 1726 0.73 1.13 0.54 159 TM2_M_OBFU_COMMENT 1701 0.62 1.11 0.39 160 RELAYCOUNTRY_IN 1692 0.39 1.11 0.05 161 XM_UB60 1681 0.41 1.10 0.08 162 TR_LOTS_OF_MONEY2 1625 0.50 1.06 0.23 163 T_MONEY_PERCENT 1625 0.50 1.06 0.23 164 GOOG_STO_NOIMG_HTML 1613 0.33 1.06 0.00 165 XMSubMetaI_00 1595 0.93 1.05 0.88 166 HTTPS_HTTP_MISMATCH 1575 0.81 1.03 0.71 167 RCVD_IN_PSBL 1574 0.64 1.03 0.46 168 NML_ADSP_CUSTOM_MED 1569 0.72 1.03 0.58 169 PLING_QUERY 1567 0.57 1.03 0.36 170 TR_XM_SEO4 1560 0.42 1.02 0.13 171 BAYES_20 1540 2.43 1.01 3.09 172 MPART_ALT_DIFF_COUNT 1540 0.77 1.01 0.65 173 TR_XM_InvalidRelay 1483 0.33 0.97 0.03 174 TooManyTo_002 1478 1.95 0.97 2.40 175 TR_Mismatch_TLD_01 1462 0.44 0.96 0.21 176 XMReplyNow 1457 0.49 0.95 0.27 177 XM_B_COPY_HTML 1456 0.87 0.95 0.83 178 XMNoVowels 1450 0.73 0.95 0.62 179 TR_XM_Undi_Recip19 1423 0.34 0.93 0.06 180 XMHTMLBadTable_001 1400 0.47 0.92 0.27 181 XM_B_Phish66 1398 0.49 0.92 0.29 182 FORGED_GMAIL_RCVD 1377 0.64 0.90 0.52 183 RDNS_DYNAMIC 1370 0.51 0.90 0.32 184 XMSubMetaSxObfu_03 1352 0.54 0.89 0.38 185 XM_H_Long_From02 1339 1.00 0.88 1.06 186 TR_XM_Base64_L1 1336 0.43 0.88 0.23 187 TR_MetaPhish_Combo_01 1335 0.79 0.87 0.76 188 TM2_M_A_HREF_HREF 1334 0.56 0.87 0.41 189 XM_OfRef7 1324 0.41 0.87 0.20 190 XM_UB99 1316 0.28 0.86 0.01 191 TR_XM_Undi_RecipCombo2 1312 0.28 0.86 0.01 192 T_Symld_Words_02 1282 0.71 0.84 0.65 193 TooManyTo_003 1279 1.21 0.84 1.38 194 TR_XM_DK_SendGrid 1273 0.93 0.83 0.97 195 T_STY_INVIS_DIRECT 1264 0.45 0.83 0.27 196 XM_B_COVIDMETA 1244 0.41 0.82 0.23 197 URIBL_DBL_SPAM 1241 0.26 0.81 0.01 198 TooManyTo_004 1213 0.93 0.79 0.99 199 XMPhish14 1200 0.50 0.79 0.36 200 DKIM_ADSP_NXDOMAIN 1187 0.44 0.78 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 327457 99.54 99.74 99.44 2 HTML_MESSAGE 278985 88.54 96.78 84.72 3 RELAYCOUNTRY_US 263675 79.38 77.89 80.07 4 DKIM_SIGNED 248976 80.63 91.45 75.61 5 XM_DK_Pass 244915 78.76 88.23 74.38 6 DKIM_VALID 242022 77.76 86.95 73.50 7 XM_B_Unicode 229375 74.44 84.77 69.66 8 DCC_CHECK_NEGATIVE 208780 51.22 24.94 63.40 9 DKIM_VALID_AU 194956 60.94 64.69 59.20 10 BAYES_50 192246 52.23 38.95 58.38 11 XMListUnsubscribeExists 169288 58.13 72.63 51.41 12 XM_B_SpammyWords 147723 53.89 73.36 44.86 13 XM_B_Unicode3 135272 42.12 44.36 41.08 14 DCC_CHECK 120352 48.74 75.05 36.55 15 RCVD_IN_MSPIKE_H2 97369 30.40 32.19 29.57 16 T_TM2_M_HEADER_IN_MSG 97234 27.11 21.90 29.53 17 HTML_FONT_LOW_CONTRAST 94141 30.53 34.70 28.59 18 DKIM_VALID_EF 93525 30.11 33.78 28.40 19 LOC_TINY_FONT_1 87049 30.33 38.75 26.43 20 FVGT_m_MULTI_ODD 85319 27.48 30.87 25.91 21 XMSubLong 77199 22.96 21.93 23.44 22 T_KAM_HTML_FONT_INVALID 67293 23.06 28.74 20.44 23 MIME_HTML_ONLY 63450 23.14 31.51 19.27 24 XM_B_SpammyWords2 62266 26.90 44.15 18.91 25 ALL_TRUSTED 54396 11.68 1.25 16.52 26 USER_IN_DEF_DKIM_WL 48857 10.94 2.54 14.84 27 XM_Multi_Part_URI 48195 16.16 19.44 14.64 28 TR_XM_DK_Unsub 45279 17.14 24.45 13.75 29 UNPARSEABLE_RELAY 34846 11.63 13.88 10.58 30 BAYES_60 31409 9.19 8.44 9.54 31 BAYES_00 30911 6.64 0.71 9.39 32 XM_B_Unsub 27584 10.86 16.23 8.38 33 XM_DKIMWhitelistDomains 26906 5.59 0.02 8.17 34 LotsOfNums_01 26506 7.66 6.82 8.05 35 TR_MAX_INTL_RELAY 26476 10.35 15.32 8.04 36 TooManyTo_001 26343 7.02 4.89 8.00 37 XM_Evil_Numbers_Gen 25954 7.84 7.75 7.88 38 LOTS_OF_MONEY 23761 10.25 16.81 7.22 39 TR_XM_DK_Bayes 22766 4.89 0.52 6.91 40 IN_ZIMBRA_NJ_WHITELIST 22631 4.72 0.09 6.87 41 TR_XM_DK_Bayes1 22541 4.84 0.51 6.85 42 XM_DK_Undo_02 21702 18.76 45.03 6.59 43 XM_H_GMP 20786 5.91 5.04 6.31 44 TR_XM_BayesUnsub 20713 9.26 15.68 6.29 45 RCVD_IN_MSPIKE_WL 20681 7.40 9.81 6.28 46 RCVD_IN_MSPIKE_H3 20677 7.40 9.81 6.28 47 TR_XM_DK_Bayes2 19816 4.22 0.36 6.02 48 T_TooManySym_01 18667 4.65 2.45 5.67 49 BAYES_80 18165 6.88 9.82 5.52 50 XM_H_Long_From01 17543 5.14 4.72 5.33 51 RCVD_IN_VALIDITY_SAFE 17385 4.35 2.36 5.28 52 BOTNET_IPINHOSTNAME 17113 7.60 12.78 5.20 53 XMStrtUSub 16833 4.74 3.94 5.11 54 HTML_IMAGE_RATIO_02 16563 5.18 5.52 5.03 55 HTML_IMAGE_RATIO_04 16552 4.92 4.68 5.03 56 MIME_QP_LONG_LINE 16502 4.36 2.95 5.01 57 TR_XM_SpammyWords4 16187 8.04 14.77 4.92 58 BAYES_99 15639 14.00 33.97 4.75 59 XM_B_SpammyWords3 15347 7.51 13.64 4.66 60 RCVD_IN_VALIDITY_CERTIFIED 15130 3.74 1.90 4.59 61 XM_PDF 14623 3.23 0.62 4.44 62 RELAYCOUNTRY_META 14257 9.99 22.20 4.33 63 BAYES_40 14031 3.39 1.50 4.26 64 ANY_BOUNCE_MESSAGE 13340 3.22 1.42 4.05 65 BOUNCE_MESSAGE 13336 3.22 1.42 4.05 66 FSL_BULK_SIG 13063 5.37 8.40 3.97 67 MPART_ALT_DIFF 12748 4.42 5.60 3.87 68 RCVD_IN_IADB_LISTED 12626 3.05 1.36 3.83 69 BAYES_999 12509 10.98 26.46 3.80 70 XM_CamelCaseFrm001 12412 3.48 2.86 3.77 71 XM_UncommonTLD01 12303 4.70 6.79 3.74 72 T_REMOTE_IMAGE 11379 3.02 2.07 3.46 73 XM_Body_Dirty_Words 11282 4.80 7.75 3.43 74 XMSubMetaSx_00 11155 4.18 5.89 3.39 75 RCVD_IN_IADB_SPF 11017 2.67 1.22 3.35 76 TR_XM_DKIM_Undo 10779 13.20 34.62 3.27 77 XM_B_Phish_Phrases 10594 3.54 4.22 3.22 78 BAYES_20 10174 2.43 1.01 3.09 79 SCC_BODY_URI_ONLY 9909 2.43 1.17 3.01 80 RCVD_IN_IADB_SENDERID 9776 2.39 1.15 2.97 81 RCVD_IN_IADB_DK 9528 2.34 1.15 2.89 82 HTML_IMAGE_RATIO_08 9464 2.94 3.09 2.87 83 XM_SPF_SoftFail 9460 3.58 5.10 2.87 84 T_TooManySym_02 9270 2.12 0.61 2.82 85 MAILING_LIST_MULTI 8939 2.37 1.64 2.71 86 XMNumbers 8892 2.96 3.51 2.70 87 XM_B_SpammyTLD 8710 2.82 3.18 2.65 88 RCVD_IN_IADB_VOUCHED 8657 1.97 0.55 2.63 89 BAYES_05 8438 1.90 0.47 2.56 90 MIME_HTML_MOSTLY 8419 2.96 3.84 2.56 91 BAYES_95 8282 3.34 5.13 2.52 92 HTML_IMAGE_RATIO_06 8148 2.96 4.01 2.47 93 TR_XM_SpammyRelay 8028 7.33 17.88 2.44 94 TooManyTo_002 7900 1.95 0.97 2.40 95 INVALID_MSGID 7227 1.55 0.16 2.19 96 DKIM_INVALID 6954 2.87 4.51 2.11 97 FROM_EXCESS_BASE64 6798 2.12 2.25 2.06 98 MIME_HTML_ONLY_MULTI 6778 2.38 3.06 2.06 99 TO_MALFORMED 6630 1.38 0.01 2.01 100 XMSexyCombo_05 6434 2.63 4.09 1.95 101 XM_B_Investor 6331 3.18 5.88 1.92 102 BOTNET 6302 4.25 9.28 1.91 103 HTML_MIME_NO_HTML_TAG 6205 1.93 2.02 1.88 104 T_XMDrugObfuBody_14 6202 2.52 3.89 1.88 105 TR_DCC_Bayes_99 6038 9.10 24.79 1.83 106 TM2_M_URI_OPT_OUT 6022 2.52 4.01 1.83 107 XM_B_Unsub2 5995 1.90 2.07 1.82 108 T_XMDrugObfuBody_08 5946 2.39 3.66 1.81 109 RCVD_IN_IADB_OPTIN 5893 1.34 0.37 1.79 110 XM_DK_Undo_01 5857 1.68 1.48 1.78 111 HELO_NODOT 5814 1.32 0.35 1.77 112 HELO_NO_DOMAIN 5808 1.32 0.35 1.76 113 XMDiploma_00 5795 2.22 3.20 1.76 114 UNTRUSTED_Relay 5263 3.21 6.68 1.60 115 TVD_RCVD_IP 5189 1.31 0.74 1.58 116 IN_HORDE_ADDRESS_BOOK 5120 1.09 0.07 1.55 117 TR_XM_PhishingBody 5101 2.18 3.53 1.55 118 TR_XM_UnparsRelay 4920 3.23 6.99 1.49 119 SUBJ_ALL_CAPS 4870 1.69 2.14 1.48 120 TR_Symld_Words 4775 1.35 1.13 1.45 121 XM_SendGrid 4635 1.37 1.28 1.41 122 TooManyTo_003 4544 1.21 0.84 1.38 123 TM2_M_VERY_LONG_WORD 4392 1.86 3.00 1.33 124 RELAYCOUNTRY_CA 4356 4.85 12.47 1.32 125 FROM_GOV_DKIM_AU 4343 0.95 0.15 1.32 126 XMGappySubj_01 4262 0.95 0.19 1.29 127 XM_OfRef6 4238 2.27 4.38 1.29 128 XMBSHREFv2 4206 0.99 0.38 1.28 129 XMStockSpam_06 4160 1.39 1.65 1.26 130 URI_HEX 4086 1.30 1.43 1.24 131 XM_GoogleGroups 3963 0.97 0.48 1.20 132 TR_XM_SpammyWords5 3962 1.98 3.66 1.20 133 URI_NOVOWEL 3833 1.24 1.40 1.16 134 TVD_SPACE_RATIO 3704 0.82 0.17 1.12 135 XM_H_Long_From02 3494 1.00 0.88 1.06 136 T_TooManySym_03 3387 0.79 0.29 1.03 137 KHOP_HELO_FCRDNS 3375 1.12 1.34 1.02 138 TooManyTo_004 3262 0.93 0.79 0.99 139 TR_XM_DK_SendGrid 3206 0.93 0.83 0.97 140 T_FILL_THIS_FORM_SHORT 3190 1.91 3.94 0.97 141 XMCapTrack 3170 0.76 0.31 0.96 142 XMBody_95 3083 0.70 0.20 0.94 143 RELAYCOUNTRY_AU 3021 1.33 2.23 0.92 144 XM_UB50 3007 1.69 3.37 0.91 145 XMGenDplmaNmb 2907 1.11 1.60 0.88 146 XMSubMetaI_00 2884 0.93 1.05 0.88 147 TO_NO_BRKTS_HTML_ONLY 2851 0.70 0.35 0.87 148 DKIM_ADSP_CUSTOM_MED 2826 0.95 1.13 0.86 149 XM_B_COPY_HTML 2727 0.87 0.95 0.83 150 TR_XM_Base64_M1 2670 0.94 1.23 0.81 151 TooManyTo_005 2618 0.79 0.77 0.80 152 XMBrknScrpt_02 2494 1.03 1.63 0.76 153 TR_MetaPhish_Combo_01 2492 0.79 0.87 0.76 154 XM_B_SpammyWords4 2461 1.23 2.28 0.75 155 SpammyFromTLD_01 2416 1.45 2.99 0.73 156 T_XMDrugObfuBody_00 2398 1.01 1.61 0.73 157 XMBdyGiftCard01 2345 0.85 1.15 0.71 158 HTTPS_HTTP_MISMATCH 2326 0.81 1.03 0.71 159 TR_XM_SpammyWords2 2229 5.25 15.12 0.68 160 RCVD_IN_BL_SPAMCOP_NET 2213 5.03 14.44 0.67 161 XMBody_17 2200 2.66 6.97 0.67 162 XM_H_PHPMailer 2177 0.66 0.65 0.66 163 MPART_ALT_DIFF_COUNT 2156 0.77 1.01 0.65 164 URI_TRY_3LD 2147 0.92 1.50 0.65 165 T_Symld_Words_02 2135 0.71 0.84 0.65 166 TR_LOTS_OF_MONEY3 2116 2.00 4.93 0.64 167 T_OBFU_PDF_ATTACH 2052 0.45 0.08 0.62 168 XMNoVowels 2051 0.73 0.95 0.62 169 XM_ShortIntro_01 2009 0.61 0.61 0.61 170 SHORT_HELO_AND_INLINE_IMAGE 1994 0.43 0.05 0.61 171 XMGappySubj_02 1974 0.44 0.10 0.60 172 NML_ADSP_CUSTOM_MED 1917 0.72 1.03 0.58 173 SpammyFromTLD_02 1914 0.90 1.58 0.58 174 XMMoneyMeta_00 1813 0.74 1.13 0.55 175 HTML_TAG_BALANCE_BODY 1781 0.73 1.13 0.54 176 XMPhish30 1778 0.76 1.23 0.54 177 USER_IN_WHITELIST 1744 0.36 0.00 0.53 178 USER_IN_WELCOMELIST 1744 0.36 0.00 0.53 179 FORGED_GMAIL_RCVD 1700 0.64 0.90 0.52 180 T_XMHurry_00 1673 1.09 2.34 0.51 181 HTML_FONT_FACE_BAD 1579 0.57 0.75 0.48 182 RCVD_IN_PSBL 1501 0.64 1.03 0.46 183 FILL_THIS_FORM 1499 0.50 0.59 0.46 184 TR_XM_SPAMCOP 1489 3.97 11.56 0.45 185 SHOPIFY_IMG_NOT_RCVD_SFY 1481 0.50 0.59 0.45 186 DIET_1 1473 0.71 1.29 0.45 187 RELAYCOUNTRY_GB 1467 0.50 0.61 0.45 188 XMSubMetaSxObfu_02 1433 0.40 0.33 0.44 189 HTML_IMAGE_ONLY_20 1432 0.41 0.35 0.43 190 XM_B_FormFill 1415 0.33 0.10 0.43 191 TM2_M_BODY_EMPTY 1389 0.33 0.13 0.42 192 XMSolicitRefs_0 1372 0.39 0.32 0.42 193 TR_XM_FormFill2 1371 0.76 1.50 0.42 194 XMHTML_After_End 1370 0.65 1.17 0.42 195 TR_XM_PHPDW 1367 0.77 1.54 0.42 196 XM_ProductURIs 1357 0.50 0.70 0.41 197 TM2_M_A_HREF_HREF 1355 0.56 0.87 0.41 198 SUBJ_DOLLARS 1355 0.49 0.67 0.41 199 TR_XM_PHPForged 1353 0.77 1.56 0.41 200 THIS_AD 1317 0.65 1.18 0.40 ----------------------------------------------------------------------