Email: 557985 Autolearn: 0 AvgScore: 3.51 AvgScanTime: 1.52 sec Spam: 163721 Autolearn: 0 AvgScore: 13.19 AvgScanTime: 1.67 sec Ham: 394264 Autolearn: 0 AvgScore: -0.51 AvgScanTime: 1.45 sec Time Spent Running SA: 235.03 hours Time Spent Processing Spam: 75.87 hours Time Spent Processing Ham: 159.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 163224 99.42 99.70 99.31 2 HTML_MESSAGE 159287 89.43 97.29 86.17 3 DKIM_SIGNED 149104 78.19 91.07 72.83 4 XM_DK_Pass 142956 76.15 87.32 71.52 5 XM_B_Unicode 140678 73.70 85.93 68.63 6 DKIM_VALID 140556 75.03 85.85 70.53 7 RELAYCOUNTRY_US 132945 81.30 81.20 81.34 8 XM_B_SpammyWords 119222 53.66 72.82 45.70 9 XMListUnsubscribeExists 118325 55.09 72.27 47.96 10 DCC_CHECK 116560 43.68 71.19 32.25 11 DKIM_VALID_AU 104022 58.31 63.54 56.13 12 XM_B_Unicode3 76179 42.09 46.53 40.24 13 XM_DK_Undo_02 73286 16.68 44.76 5.02 14 LOC_TINY_FONT_1 70244 29.86 42.90 24.44 15 XM_B_SpammyWords2 69124 25.69 42.22 18.82 16 BAYES_50 64655 53.95 39.49 59.96 17 HTML_FONT_LOW_CONTRAST 60935 31.07 37.22 28.52 18 BAYES_99 56433 12.72 34.47 3.68 19 TR_XM_DKIM_Undo 54856 11.37 33.51 2.17 20 FVGT_m_MULTI_ODD 52701 25.91 32.19 23.30 21 RCVD_IN_MSPIKE_H2 52662 29.27 32.17 28.07 22 DKIM_VALID_EF 51187 28.59 31.26 27.48 23 MIME_HTML_ONLY 48951 23.52 29.90 20.87 24 T_KAM_HTML_FONT_INVALID 47677 23.12 29.12 20.63 25 DCC_CHECK_NEGATIVE 47141 56.28 28.79 67.70 26 BAYES_999 43932 9.82 26.83 2.76 27 TR_DCC_Bayes_99 38884 7.88 23.75 1.29 28 T_TM2_M_HEADER_IN_MSG 38606 26.86 23.58 28.22 29 XMSubLong 38465 22.90 23.49 22.65 30 TR_XM_DK_Unsub 36578 15.62 22.34 12.83 31 XM_Multi_Part_URI 33274 15.07 20.32 12.89 32 RELAYCOUNTRY_META 30532 8.33 18.65 4.05 33 LOTS_OF_MONEY 27270 9.37 16.66 6.35 34 XM_B_Unsub 26827 11.29 16.39 9.18 35 TR_XM_BayesUnsub 25768 9.01 15.74 6.21 36 UNPARSEABLE_RELAY 25082 12.28 15.32 11.02 37 TR_XM_SpammyWords4 25048 7.67 15.30 4.51 38 TR_MAX_INTL_RELAY 24381 8.73 14.89 6.17 39 XM_B_SpammyWords3 24260 7.96 14.82 5.12 40 TR_XM_SpammyRelay 23886 5.89 14.59 2.28 41 BOTNET_IPINHOSTNAME 22634 6.61 13.82 3.62 42 TR_XM_SpammyWords2 21590 4.29 13.19 0.60 43 RCVD_IN_BL_SPAMCOP_NET 19821 4.00 12.11 0.63 44 TR_XM_SPAMCOP 16374 3.22 10.00 0.40 45 RELAYCOUNTRY_CA 15971 3.79 9.76 1.31 46 BOTNET 15428 3.56 9.42 1.13 47 BAYES_80 15049 5.36 9.19 3.76 48 XM_Evil_Numbers_Gen 14690 8.99 8.97 9.00 49 RCVD_IN_MSPIKE_WL 12983 6.72 7.93 6.22 50 RCVD_IN_MSPIKE_H3 12983 6.72 7.93 6.22 51 BAYES_60 12804 8.45 7.82 8.71 52 TR_XM_UnparsRelay 12657 3.50 7.73 1.74 53 FSL_BULK_SIG 12127 5.32 7.41 4.45 54 HTML_IMAGE_RATIO_02 11422 4.92 6.98 4.06 55 XM_Body_Dirty_Words 11368 4.21 6.94 3.07 56 LotsOfNums_01 11267 8.15 6.88 8.68 57 MPART_ALT_DIFF 10757 6.06 6.57 5.84 58 XM_UncommonTLD01 10365 4.71 6.33 4.04 59 XMSubMetaSx_00 9875 4.17 6.03 3.40 60 UNTRUSTED_Relay 9505 2.79 5.81 1.54 61 XM_B_Phish_Phrases 9132 3.85 5.58 3.13 62 XM_H_Long_From01 8790 5.27 5.37 5.23 63 BAYES_95 8774 3.27 5.36 2.40 64 DKIM_INVALID 8548 3.16 5.22 2.30 65 HTML_IMAGE_RATIO_04 8514 4.39 5.20 4.05 66 XM_SPF_SoftFail 8345 3.66 5.10 3.06 67 HTML_IMAGE_RATIO_06 8054 3.58 4.92 3.03 68 XMBody_17 7966 1.85 4.87 0.60 69 TooManyTo_001 7751 6.90 4.73 7.80 70 XM_B_Investor 7235 2.43 4.42 1.61 71 XM_H_GMP 7100 5.40 4.34 5.84 72 TR_XM_PhishingBody 6984 2.36 4.27 1.58 73 MIME_HTML_MOSTLY 6765 2.86 4.13 2.34 74 XM_OfRef6 6758 1.95 4.13 1.04 75 TM2_M_URI_OPT_OUT 6690 3.85 4.09 3.75 76 TR_XM_SpammyWords5 6231 2.00 3.81 1.26 77 XMNumbers 6215 3.09 3.80 2.79 78 TR_LOTS_OF_MONEY3 6154 1.42 3.76 0.45 79 XMSexyCombo_05 6069 2.00 3.71 1.29 80 MIME_QP_LONG_LINE 6050 4.94 3.70 5.46 81 T_XMDrugObfuBody_14 6033 2.51 3.68 2.02 82 XM_B_SpammyTLD 5714 2.71 3.49 2.38 83 TM2_M_VERY_LONG_WORD 5637 3.09 3.44 2.94 84 XMStrtUSub 5541 4.44 3.38 4.88 85 XMDiploma_00 5459 2.34 3.33 1.93 86 MIME_HTML_ONLY_MULTI 5379 3.88 3.29 4.13 87 T_FILL_THIS_FORM_SHORT 5204 1.57 3.18 0.90 88 T_XMDrugObfuBody_08 5190 2.05 3.17 1.58 89 RCVD_IN_VALIDITY_SAFE 5126 4.11 3.13 4.52 90 HTML_IMAGE_RATIO_08 4584 2.28 2.80 2.07 91 XM_B_SpammyWords4 4431 1.33 2.71 0.76 92 T_TooManySym_01 4397 4.19 2.69 4.82 93 XM_UB50 4352 1.45 2.66 0.95 94 XM_CamelCaseFrm001 4304 2.21 2.63 2.04 95 XM_URI_RBL 4259 0.87 2.60 0.15 96 RCVD_IN_VALIDITY_CERTIFIED 4165 3.53 2.54 3.94 97 SpammyFromTLD_01 4153 1.25 2.54 0.71 98 USER_IN_DEF_DKIM_WL 3959 10.04 2.42 13.20 99 TR_XM_NoHeaderRelay 3813 0.78 2.33 0.13 100 XMBrknScrpt_02 3710 1.28 2.27 0.87 101 RELAYCOUNTRY_AU 3701 1.18 2.26 0.72 102 XMStockSpam_06 3674 1.50 2.24 1.20 103 XM_B_Unsub2 3636 1.70 2.22 1.48 104 TR_XM_BayesRelay 3635 0.65 2.22 0.00 105 SUBJ_ALL_CAPS 3465 1.63 2.12 1.43 106 TR_XM_INV_DKIM 3406 0.64 2.08 0.05 107 FROM_EXCESS_BASE64 3189 1.82 1.95 1.77 108 TR_XM_FormFill 3159 0.58 1.93 0.03 109 MAILING_LIST_MULTI 3120 2.52 1.91 2.78 110 T_XMHurry_00 3090 0.93 1.89 0.53 111 ANY_BOUNCE_MESSAGE 3073 4.66 1.88 5.81 112 BOUNCE_MESSAGE 3071 4.65 1.88 5.81 113 XM_DK_Undo_01 3030 1.79 1.85 1.76 114 XMGenDplmaNmb 2846 1.28 1.74 1.09 115 T_REMOTE_IMAGE 2832 3.36 1.73 4.03 116 HTML_MIME_NO_HTML_TAG 2658 2.23 1.62 2.48 117 URI_HEX 2651 1.26 1.62 1.11 118 SpammyFromTLD_02 2620 0.74 1.60 0.38 119 XM_H_Long_From02 2600 1.19 1.59 1.02 120 HTTPS_HTTP_MISMATCH 2554 1.02 1.56 0.79 121 URIBL_DBL_SPAM 2486 0.45 1.52 0.01 122 KHOP_HELO_FCRDNS 2445 2.05 1.49 2.28 123 BAYES_40 2445 3.89 1.49 4.88 124 XMSexyCombo_01 2422 0.71 1.48 0.39 125 ALL_TRUSTED 2402 11.24 1.47 15.30 126 HTML_TAG_BALANCE_BODY 2307 0.88 1.41 0.66 127 FONT_INVIS_LONG_LINE 2299 0.43 1.40 0.03 128 XM_SendGrid 2226 1.47 1.36 1.52 129 T_XMDrugObfuBody_00 2198 0.87 1.34 0.67 130 XM_B_Phish66 2197 0.66 1.34 0.38 131 HK_RANDOM_REPLYTO 2176 0.46 1.33 0.10 132 RCVD_IN_IADB_LISTED 2141 3.46 1.31 4.36 133 URI_NOVOWEL 2045 1.26 1.25 1.27 134 XMPhish30 2042 0.73 1.25 0.51 135 TR_XM_PHPForged 2037 0.60 1.24 0.33 136 TR_XM_PHPDW 2033 0.60 1.24 0.34 137 XM_HighProb1 2021 0.36 1.23 0.00 138 URI_TRY_3LD 2008 0.89 1.23 0.75 139 AC_BR_BONANZA 1982 0.42 1.21 0.09 140 XMBody_78 1978 0.56 1.21 0.30 141 BOTNET_NORDNS 1965 0.36 1.20 0.01 142 TR_XM_FormFill2 1961 0.59 1.20 0.34 143 XM_H_PHPOS 1951 0.58 1.19 0.33 144 XMHTML_After_End 1920 0.62 1.17 0.40 145 XMSubMetaI_00 1909 0.68 1.17 0.48 146 XMBdyGiftCard01 1878 0.87 1.15 0.75 147 PDS_OTHER_BAD_TLD 1872 0.41 1.14 0.10 148 XM_B_SEO 1808 0.48 1.10 0.22 149 BAYES_20 1804 2.85 1.10 3.57 150 TR_Symld_Words 1796 1.20 1.10 1.25 151 RCVD_IN_IADB_SPF 1795 3.01 1.10 3.80 152 HOSTED_IMG_MULTI_PUB_01 1787 0.33 1.09 0.01 153 XM_B_COVIDMETA 1781 0.47 1.09 0.22 154 T_MONEY_PERCENT 1774 0.53 1.08 0.30 155 TR_LOTS_OF_MONEY2 1774 0.53 1.08 0.30 156 TR_Mismatch_TLD_02 1764 0.38 1.08 0.09 157 DKIM_ADSP_CUSTOM_MED 1759 0.98 1.07 0.94 158 XM_H_Undi_Recip 1729 0.43 1.06 0.17 159 TR_XM_SEO4 1724 0.38 1.05 0.10 160 DKIM_ADSP_NXDOMAIN 1701 0.51 1.04 0.29 161 XM_DIRTYINTL 1694 0.44 1.03 0.19 162 XM_PDF 1689 4.72 1.03 6.26 163 TR_XM_Base64_M1 1677 0.77 1.02 0.67 164 THIS_AD 1659 0.51 1.01 0.31 165 RCVD_IN_IADB_DK 1655 2.59 1.01 3.25 166 RCVD_IN_IADB_SENDERID 1642 2.69 1.00 3.38 167 XMReplyNow 1636 0.47 1.00 0.25 168 XM_ProductURIs 1590 0.68 0.97 0.56 169 SCC_BODY_URI_ONLY 1584 2.40 0.97 3.00 170 RCVD_IN_PSBL 1575 0.42 0.96 0.20 171 T_Symld_Words_02 1540 0.73 0.94 0.65 172 XMSlimDrugH 1536 0.57 0.94 0.41 173 RELAYCOUNTRY_FR 1519 0.48 0.93 0.29 174 FROM_SUSPICIOUS_NTLD 1495 0.28 0.91 0.02 175 XMNoVowels 1493 0.73 0.91 0.66 176 TR_XM_InvalidRelay 1477 0.28 0.90 0.02 177 NML_ADSP_CUSTOM_MED 1454 0.68 0.89 0.60 178 XM_UB99 1431 0.26 0.87 0.01 179 TR_XM_DK_SendGrid 1423 0.99 0.87 1.04 180 RDNS_DYNAMIC 1412 0.44 0.86 0.27 181 TR_XM_Base64_L1 1412 0.38 0.86 0.17 182 RELAYCOUNTRY_IN 1409 0.28 0.86 0.04 183 FROM_SUSPICIOUS_NTLD_FP 1404 0.27 0.86 0.02 184 XMPhish14 1392 0.52 0.85 0.39 185 HTML_FONT_FACE_BAD 1391 0.53 0.85 0.40 186 TM2_M_A_HREF_HREF 1391 0.42 0.85 0.24 187 MPART_ALT_DIFF_COUNT 1384 0.81 0.85 0.80 188 XM_B_COPY_HTML 1352 0.64 0.83 0.56 189 AC_HTML_NONSENSE_TAGS 1348 0.26 0.82 0.02 190 XMMoneyMeta_00 1345 0.57 0.82 0.47 191 LongTLD 1342 0.48 0.82 0.34 192 RCVD_IN_VALIDITY_RPBL 1326 0.26 0.81 0.03 193 XMPhish08 1319 0.41 0.81 0.25 194 FORGED_GMAIL_RCVD 1309 0.67 0.80 0.61 195 TR_MetaPhish_Combo_01 1296 0.82 0.79 0.83 196 XM_UB60 1293 0.29 0.79 0.08 197 XM_Combo_Sbj 1290 0.36 0.79 0.18 198 XM_B_DNDMA 1290 0.62 0.79 0.55 199 XMClaimOffer 1268 0.41 0.77 0.25 200 T_TooManySym_02 1260 1.86 0.77 2.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 391552 99.42 99.70 99.31 2 HTML_MESSAGE 339744 89.43 97.29 86.17 3 RELAYCOUNTRY_US 320681 81.30 81.20 81.34 4 DKIM_SIGNED 287158 78.19 91.07 72.83 5 XM_DK_Pass 281960 76.15 87.32 71.52 6 DKIM_VALID 278074 75.03 85.85 70.53 7 XM_B_Unicode 270572 73.70 85.93 68.63 8 DCC_CHECK_NEGATIVE 266901 56.28 28.79 67.70 9 BAYES_50 236391 53.95 39.49 59.96 10 DKIM_VALID_AU 221317 58.31 63.54 56.13 11 XMListUnsubscribeExists 189083 55.09 72.27 47.96 12 XM_B_SpammyWords 180179 53.66 72.82 45.70 13 XM_B_Unicode3 158671 42.09 46.53 40.24 14 DCC_CHECK 127167 43.68 71.19 32.25 15 HTML_FONT_LOW_CONTRAST 112437 31.07 37.22 28.52 16 T_TM2_M_HEADER_IN_MSG 111256 26.86 23.58 28.22 17 RCVD_IN_MSPIKE_H2 110680 29.27 32.17 28.07 18 DKIM_VALID_EF 108344 28.59 31.26 27.48 19 LOC_TINY_FONT_1 96347 29.86 42.90 24.44 20 FVGT_m_MULTI_ODD 91873 25.91 32.19 23.30 21 XMSubLong 89313 22.90 23.49 22.65 22 MIME_HTML_ONLY 82289 23.52 29.90 20.87 23 T_KAM_HTML_FONT_INVALID 81333 23.12 29.12 20.63 24 XM_B_SpammyWords2 74197 25.69 42.22 18.82 25 ALL_TRUSTED 60329 11.24 1.47 15.30 26 USER_IN_DEF_DKIM_WL 52056 10.04 2.42 13.20 27 XM_Multi_Part_URI 50805 15.07 20.32 12.89 28 TR_XM_DK_Unsub 50565 15.62 22.34 12.83 29 UNPARSEABLE_RELAY 43431 12.28 15.32 11.02 30 BAYES_00 40252 7.37 0.52 10.21 31 XM_B_Unsub 36179 11.29 16.39 9.18 32 XM_Evil_Numbers_Gen 35486 8.99 8.97 9.00 33 BAYES_60 34325 8.45 7.82 8.71 34 LotsOfNums_01 34221 8.15 6.88 8.68 35 TooManyTo_001 30760 6.90 4.73 7.80 36 IN_ZIMBRA_NJ_WHITELIST 26645 4.80 0.09 6.76 37 XM_DKIMWhitelistDomains 25850 4.64 0.04 6.56 38 LOTS_OF_MONEY 25041 9.37 16.66 6.35 39 XM_PDF 24664 4.72 1.03 6.26 40 TR_XM_DK_Bayes 24538 4.50 0.37 6.22 41 RCVD_IN_MSPIKE_H3 24504 6.72 7.93 6.22 42 RCVD_IN_MSPIKE_WL 24504 6.72 7.93 6.22 43 TR_XM_BayesUnsub 24500 9.01 15.74 6.21 44 TR_MAX_INTL_RELAY 24332 8.73 14.89 6.17 45 TR_XM_DK_Bayes1 24215 4.44 0.36 6.14 46 MPART_ALT_DIFF 23036 6.06 6.57 5.84 47 XM_H_GMP 23010 5.40 4.34 5.84 48 ANY_BOUNCE_MESSAGE 22905 4.66 1.88 5.81 49 BOUNCE_MESSAGE 22900 4.65 1.88 5.81 50 MIME_QP_LONG_LINE 21522 4.94 3.70 5.46 51 TR_XM_DK_Bayes2 20697 3.79 0.26 5.25 52 XM_H_Long_From01 20629 5.27 5.37 5.23 53 XM_B_SpammyWords3 20180 7.96 14.82 5.12 54 XM_DK_Undo_02 19783 16.68 44.76 5.02 55 XMStrtUSub 19253 4.44 3.38 4.88 56 BAYES_40 19248 3.89 1.49 4.88 57 T_TooManySym_01 18985 4.19 2.69 4.82 58 RCVD_IN_VALIDITY_SAFE 17806 4.11 3.13 4.52 59 TR_XM_SpammyWords4 17770 7.67 15.30 4.51 60 FSL_BULK_SIG 17538 5.32 7.41 4.45 61 RCVD_IN_IADB_LISTED 17184 3.46 1.31 4.36 62 MIME_HTML_ONLY_MULTI 16275 3.88 3.29 4.13 63 HTML_IMAGE_RATIO_02 16023 4.92 6.98 4.06 64 RELAYCOUNTRY_META 15973 8.33 18.65 4.05 65 HTML_IMAGE_RATIO_04 15957 4.39 5.20 4.05 66 XM_UncommonTLD01 15924 4.71 6.33 4.04 67 T_REMOTE_IMAGE 15903 3.36 1.73 4.03 68 RCVD_IN_VALIDITY_CERTIFIED 15526 3.53 2.54 3.94 69 RCVD_IN_IADB_SPF 14998 3.01 1.10 3.80 70 BAYES_80 14844 5.36 9.19 3.76 71 TM2_M_URI_OPT_OUT 14778 3.85 4.09 3.75 72 BAYES_99 14524 12.72 34.47 3.68 73 BOTNET_IPINHOSTNAME 14268 6.61 13.82 3.62 74 BAYES_20 14077 2.85 1.10 3.57 75 XMSubMetaSx_00 13420 4.17 6.03 3.40 76 RCVD_IN_IADB_SENDERID 13340 2.69 1.00 3.38 77 RCVD_IN_IADB_DK 12814 2.59 1.01 3.25 78 XM_B_Phish_Phrases 12355 3.85 5.58 3.13 79 XM_Body_Dirty_Words 12101 4.21 6.94 3.07 80 XM_SPF_SoftFail 12050 3.66 5.10 3.06 81 HTML_IMAGE_RATIO_06 11927 3.58 4.92 3.03 82 SCC_BODY_URI_ONLY 11832 2.40 0.97 3.00 83 RCVD_IN_IADB_VOUCHED 11812 2.33 0.72 3.00 84 TM2_M_VERY_LONG_WORD 11592 3.09 3.44 2.94 85 XMNumbers 11004 3.09 3.80 2.79 86 BAYES_05 10955 2.12 0.52 2.78 87 MAILING_LIST_MULTI 10945 2.52 1.91 2.78 88 BAYES_999 10868 9.82 26.83 2.76 89 HTML_MIME_NO_HTML_TAG 9793 2.23 1.62 2.48 90 BAYES_95 9450 3.27 5.36 2.40 91 XM_B_SpammyTLD 9385 2.71 3.49 2.38 92 TooManyTo_002 9280 1.89 0.76 2.35 93 MIME_HTML_MOSTLY 9219 2.86 4.13 2.34 94 T_TooManySym_02 9091 1.86 0.77 2.31 95 DKIM_INVALID 9084 3.16 5.22 2.30 96 TR_XM_SpammyRelay 8981 5.89 14.59 2.28 97 KHOP_HELO_FCRDNS 8971 2.05 1.49 2.28 98 XM_H_Trusted_IP 8943 1.60 0.00 2.27 99 TR_XM_DKIM_Undo 8572 11.37 33.51 2.17 100 HTML_IMAGE_RATIO_08 8154 2.28 2.80 2.07 101 RCVD_IN_IADB_OPTIN 8075 1.59 0.49 2.05 102 XM_CamelCaseFrm001 8031 2.21 2.63 2.04 103 T_XMDrugObfuBody_14 7974 2.51 3.68 2.02 104 XMDiploma_00 7602 2.34 3.33 1.93 105 INVALID_MSGID 7395 1.39 0.22 1.88 106 TO_MALFORMED 7041 1.27 0.01 1.79 107 FROM_EXCESS_BASE64 6973 1.82 1.95 1.77 108 XM_DK_Undo_01 6958 1.79 1.85 1.76 109 TR_XM_UnparsRelay 6845 3.50 7.73 1.74 110 HELO_NODOT 6765 1.31 0.33 1.72 111 HELO_NO_DOMAIN 6759 1.31 0.33 1.71 112 T_OBFU_PDF_ATTACH 6656 1.26 0.23 1.69 113 XM_B_Investor 6350 2.43 4.42 1.61 114 T_XMDrugObfuBody_08 6234 2.05 3.17 1.58 115 TR_XM_PhishingBody 6211 2.36 4.27 1.58 116 UNTRUSTED_Relay 6090 2.79 5.81 1.54 117 XM_SendGrid 5983 1.47 1.36 1.52 118 XM_B_Unsub2 5848 1.70 2.22 1.48 119 IN_HORDE_ADDRESS_BOOK 5666 1.04 0.07 1.44 120 SUBJ_ALL_CAPS 5639 1.63 2.12 1.43 121 HTML_IMAGE_ONLY_32 5577 1.11 0.36 1.41 122 SHORT_URI_3 5272 1.01 0.21 1.34 123 RELAYCOUNTRY_CA 5171 3.79 9.76 1.31 124 TooManyTo_003 5130 1.11 0.66 1.30 125 TR_DCC_Bayes_99 5078 7.88 23.75 1.29 126 XMSexyCombo_05 5076 2.00 3.71 1.29 127 TVD_RCVD_IP 5017 1.12 0.75 1.27 128 URI_NOVOWEL 5004 1.26 1.25 1.27 129 TR_XM_SpammyWords5 4949 2.00 3.81 1.26 130 TR_Symld_Words 4912 1.20 1.10 1.25 131 XMStockSpam_06 4719 1.50 2.24 1.20 132 SHORT_URI_2 4566 0.89 0.24 1.16 133 BOTNET 4462 3.56 9.42 1.13 134 XM_GoogleGroups 4457 0.99 0.65 1.13 135 URI_HEX 4381 1.26 1.62 1.11 136 XMGenDplmaNmb 4313 1.28 1.74 1.09 137 XMGappySubj_01 4252 0.81 0.17 1.08 138 XMBSHREFv2 4166 0.89 0.48 1.06 139 XM_OfRef6 4116 1.95 4.13 1.04 140 TR_XM_DK_SendGrid 4099 0.99 0.87 1.04 141 XMCapTrack 4040 0.86 0.48 1.02 142 XM_H_Long_From02 4029 1.19 1.59 1.02 143 TVD_SPACE_RATIO 3975 0.76 0.16 1.01 144 XM_UB50 3741 1.45 2.66 0.95 145 TooManyTo_004 3720 0.84 0.60 0.94 146 DKIM_ADSP_CUSTOM_MED 3716 0.98 1.07 0.94 147 T_FILL_THIS_FORM_SHORT 3541 1.57 3.18 0.90 148 XMSubNoVowel 3490 0.70 0.25 0.89 149 XMBrknScrpt_02 3431 1.28 2.27 0.87 150 T_TooManySym_03 3267 0.68 0.33 0.83 151 TR_MetaPhish_Combo_01 3258 0.82 0.79 0.83 152 MIME_CHARSET_FARAWAY 3184 0.73 0.56 0.81 153 MPART_ALT_DIFF_COUNT 3160 0.81 0.85 0.80 154 HTTPS_HTTP_MISMATCH 3118 1.02 1.56 0.79 155 XM_B_SpammyWords4 3013 1.33 2.71 0.76 156 TooManyTo_005 3000 0.70 0.56 0.76 157 XMBdyGiftCard01 2960 0.87 1.15 0.75 158 URI_TRY_3LD 2957 0.89 1.23 0.75 159 RELAYCOUNTRY_AU 2856 1.18 2.26 0.72 160 SpammyFromTLD_01 2805 1.25 2.54 0.71 161 FROM_GOV_DKIM_AU 2787 0.56 0.21 0.71 162 XMBody_95 2786 0.56 0.20 0.71 163 XM_ShortIntro_01 2690 0.61 0.45 0.68 164 T_XMDrugObfuBody_00 2650 0.87 1.34 0.67 165 TR_XM_Base64_M1 2631 0.77 1.02 0.67 166 XMNoVowels 2592 0.73 0.91 0.66 167 HTML_TAG_BALANCE_BODY 2590 0.88 1.41 0.66 168 T_Symld_Words_02 2544 0.73 0.94 0.65 169 RCVD_IN_BL_SPAMCOP_NET 2490 4.00 12.11 0.63 170 FORGED_GMAIL_RCVD 2413 0.67 0.80 0.61 171 XMBody_17 2383 1.85 4.87 0.60 172 TR_XM_SpammyWords2 2370 4.29 13.19 0.60 173 NML_ADSP_CUSTOM_MED 2366 0.68 0.89 0.60 174 XM_B_FormFill 2326 0.43 0.04 0.59 175 FILL_THIS_FORM 2312 0.52 0.35 0.59 176 CHARSET_FARAWAY_HEADER 2311 0.43 0.06 0.59 177 XM_H_PHPMailer 2306 0.61 0.68 0.58 178 XMSubMetaSxObfu_02 2249 0.53 0.43 0.57 179 XM_B_COPY_HTML 2212 0.64 0.83 0.56 180 XMGappySubj_02 2197 0.42 0.08 0.56 181 XM_ProductURIs 2193 0.68 0.97 0.56 182 XM_B_DNDMA 2170 0.62 0.79 0.55 183 SHORT_HELO_AND_INLINE_IMAGE 2158 0.40 0.05 0.55 184 TM2_M_BODY_EMPTY 2136 0.42 0.13 0.54 185 HTML_IMAGE_ONLY_28 2118 0.55 0.57 0.54 186 T_XMHurry_00 2091 0.93 1.89 0.53 187 XMPhish30 2019 0.73 1.25 0.51 188 LOW_PRICE 2016 0.44 0.26 0.51 189 USER_IN_WHITELIST 1988 0.36 0.00 0.50 190 USER_IN_WELCOMELIST 1988 0.36 0.00 0.50 191 SHOPIFY_IMG_NOT_RCVD_SFY 1971 0.57 0.74 0.50 192 XMSubMetaI_00 1896 0.68 1.17 0.48 193 XMLngstWrd_00 1882 0.50 0.55 0.48 194 XMMoneyMeta_00 1855 0.57 0.82 0.47 195 TR_LOTS_OF_MONEY3 1761 1.42 3.76 0.45 196 BASE64_LENGTH_79_INF 1754 0.35 0.11 0.44 197 T_STY_INVIS_DIRECT 1731 0.51 0.68 0.44 198 PLING_QUERY 1718 0.49 0.63 0.44 199 RELAYCOUNTRY_GB 1676 0.51 0.70 0.43 200 XMSlimDrugH 1630 0.57 0.94 0.41 ----------------------------------------------------------------------