Email: 503135 Autolearn: 0 AvgScore: 4.28 AvgScanTime: 1.28 sec Spam: 161810 Autolearn: 0 AvgScore: 13.70 AvgScanTime: 1.36 sec Ham: 341325 Autolearn: 0 AvgScore: -0.18 AvgScanTime: 1.25 sec Time Spent Running SA: 179.22 hours Time Spent Processing Spam: 61.09 hours Time Spent Processing Ham: 118.13 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 161403 99.50 99.75 99.39 2 HTML_MESSAGE 154969 89.53 95.77 86.57 3 DKIM_SIGNED 146983 79.92 90.84 74.74 4 XM_DK_Pass 140609 77.68 86.90 73.31 5 DKIM_VALID 138304 76.45 85.47 72.17 6 XM_B_Unicode 137529 74.31 84.99 69.24 7 RELAYCOUNTRY_US 128231 80.17 79.25 80.61 8 DCC_CHECK 119227 46.03 73.68 32.92 9 XM_B_SpammyWords 118917 53.84 73.49 44.52 10 XMListUnsubscribeExists 116064 55.89 71.73 48.39 11 DKIM_VALID_AU 103952 59.78 64.24 57.66 12 XM_DK_Undo_02 73525 18.49 45.44 5.71 13 XM_B_SpammyWords2 73293 26.98 45.30 18.30 14 XM_B_Unicode3 70895 40.27 43.81 38.58 15 LOC_TINY_FONT_1 63690 29.04 39.36 24.15 16 BAYES_50 59691 52.73 36.89 60.24 17 BAYES_99 58498 14.61 36.15 4.39 18 HTML_FONT_LOW_CONTRAST 56724 29.66 35.06 27.11 19 TR_XM_DKIM_Undo 56316 12.56 34.80 2.02 20 FVGT_m_MULTI_ODD 52202 26.94 32.26 24.42 21 RCVD_IN_MSPIKE_H2 51161 30.27 31.62 29.64 22 DKIM_VALID_EF 49861 29.98 30.81 29.59 23 MIME_HTML_ONLY 48035 22.11 29.69 18.53 24 T_KAM_HTML_FONT_INVALID 47719 23.48 29.49 20.63 25 BAYES_999 45884 11.40 28.36 3.36 26 DCC_CHECK_NEGATIVE 42565 53.93 26.31 67.02 27 TR_DCC_Bayes_99 42332 9.40 26.16 1.46 28 T_TM2_M_HEADER_IN_MSG 37406 28.73 23.12 31.38 29 TR_XM_DK_Unsub 36793 16.32 22.74 13.28 30 XMSubLong 35835 23.33 22.15 23.89 31 RELAYCOUNTRY_META 34092 9.79 21.07 4.44 32 XM_Multi_Part_URI 28735 13.99 17.76 12.21 33 TR_XM_SpammyRelay 27158 7.02 16.78 2.40 34 XM_B_Unsub 26436 10.46 16.34 7.67 35 LOTS_OF_MONEY 25774 9.37 15.93 6.26 36 TR_XM_SpammyWords2 25739 5.39 15.91 0.41 37 TR_XM_BayesUnsub 25337 9.19 15.66 6.13 38 TR_MAX_INTL_RELAY 24629 9.49 15.22 6.77 39 XM_B_SpammyWords3 23814 8.17 14.72 5.06 40 TR_XM_SpammyWords4 23726 7.66 14.66 4.34 41 UNPARSEABLE_RELAY 21542 11.53 13.31 10.69 42 BOTNET_IPINHOSTNAME 20684 6.94 12.78 4.17 43 RCVD_IN_BL_SPAMCOP_NET 19800 4.29 12.24 0.53 44 RELAYCOUNTRY_CA 18531 4.68 11.45 1.46 45 TR_XM_SPAMCOP 16682 3.58 10.31 0.39 46 BAYES_80 15285 5.82 9.45 4.11 47 BOTNET 15183 3.99 9.38 1.43 48 XM_Evil_Numbers_Gen 14751 7.83 9.12 7.21 49 FSL_BULK_SIG 14431 5.63 8.92 4.08 50 RCVD_IN_MSPIKE_WL 14336 7.02 8.86 6.15 51 RCVD_IN_MSPIKE_H3 14336 7.02 8.86 6.15 52 BAYES_60 12871 8.78 7.95 9.17 53 TR_XM_UnparsRelay 12077 3.46 7.46 1.56 54 XMBody_17 11971 2.98 7.40 0.89 55 MPART_ALT_DIFF 10327 4.46 6.38 3.55 56 UNTRUSTED_Relay 10014 2.93 6.19 1.38 57 LotsOfNums_01 9993 7.24 6.18 7.75 58 XM_Body_Dirty_Words 9875 4.12 6.10 3.18 59 XM_UncommonTLD01 9625 4.55 5.95 3.89 60 HTML_IMAGE_RATIO_02 9286 4.79 5.74 4.35 61 XMSubMetaSx_00 9267 4.96 5.73 4.60 62 XM_SPF_SoftFail 9175 4.11 5.67 3.37 63 BAYES_95 8754 3.55 5.41 2.66 64 DKIM_INVALID 8679 3.47 5.36 2.58 65 XM_B_Investor 8290 2.98 5.12 1.97 66 XM_OfRef6 8215 2.55 5.08 1.35 67 XM_H_GMP 8180 6.16 5.06 6.68 68 TooManyTo_001 8141 7.82 5.03 9.14 69 XM_B_SEO 7929 2.58 4.90 1.48 70 HTML_IMAGE_RATIO_04 7925 4.30 4.90 4.02 71 XM_H_Long_From01 7530 4.90 4.65 5.02 72 XM_B_Phish_Phrases 7316 4.09 4.52 3.88 73 TR_XM_SEO4 7309 2.10 4.52 0.96 74 TR_XM_SpammyWords5 7255 2.31 4.48 1.28 75 XMNumbers 7134 3.29 4.41 2.76 76 HTML_IMAGE_RATIO_08 7024 2.77 4.34 2.02 77 TR_XM_PhishingBody 6927 2.38 4.28 1.48 78 HTML_IMAGE_RATIO_06 6867 3.08 4.24 2.53 79 XMSexyCombo_05 6748 2.57 4.17 1.81 80 MIME_HTML_MOSTLY 6485 2.84 4.01 2.28 81 HK_RANDOM_REPLYTO 6450 1.34 3.99 0.09 82 T_XMDrugObfuBody_14 6312 2.51 3.90 1.85 83 XMStrtUSub 6180 4.23 3.82 4.42 84 T_FILL_THIS_FORM_SHORT 6035 1.82 3.73 0.91 85 TR_LOTS_OF_MONEY3 6012 1.66 3.72 0.68 86 MIME_QP_LONG_LINE 6003 5.09 3.71 5.74 87 MIME_HTML_ONLY_MULTI 5831 2.49 3.60 1.96 88 T_XMDrugObfuBody_08 5298 2.20 3.27 1.70 89 XM_B_SpammyTLD 5265 3.14 3.25 3.09 90 FONT_INVIS_LONG_LINE 4908 1.01 3.03 0.04 91 XM_UB50 4746 1.50 2.93 0.82 92 TR_XM_BayesRelay 4695 0.93 2.90 0.00 93 TM2_M_URI_OPT_OUT 4682 2.59 2.89 2.45 94 TM2_M_VERY_LONG_WORD 4654 1.79 2.88 1.27 95 XMDiploma_00 4562 2.33 2.82 2.10 96 TR_XM_NoHeaderRelay 4504 1.02 2.78 0.18 97 RCVD_IN_VALIDITY_RPBL 4476 0.98 2.77 0.13 98 RCVD_IN_VALIDITY_SAFE 4464 4.12 2.76 4.77 99 T_TooManySym_01 4415 4.52 2.73 5.36 100 XM_CamelCaseFrm001 4343 2.31 2.68 2.13 101 USER_IN_DEF_DKIM_WL 4298 9.68 2.66 13.01 102 SpammyFromTLD_01 4239 1.39 2.62 0.81 103 TR_XM_FormFill 3954 0.81 2.44 0.04 104 XM_URI_RBL 3935 0.87 2.43 0.13 105 XM_B_SpammyWords4 3875 1.38 2.39 0.91 106 RELAYCOUNTRY_AU 3779 1.43 2.34 0.99 107 URI_TRY_3LD 3710 1.35 2.29 0.90 108 XM_B_Unsub2 3517 1.66 2.17 1.42 109 RCVD_IN_VALIDITY_CERTIFIED 3490 3.44 2.16 4.04 110 TR_XM_INV_DKIM 3132 0.67 1.94 0.06 111 XMReplyNow 3104 0.85 1.92 0.34 112 ANY_BOUNCE_MESSAGE 2974 3.22 1.84 3.87 113 BOUNCE_MESSAGE 2970 3.22 1.84 3.87 114 SUBJ_ALL_CAPS 2910 1.75 1.80 1.73 115 FROM_EXCESS_BASE64 2799 1.56 1.73 1.48 116 T_REMOTE_IMAGE 2774 3.15 1.71 3.83 117 XMBrknScrpt_02 2748 1.11 1.70 0.84 118 DKIM_ADSP_NXDOMAIN 2699 0.75 1.67 0.32 119 BAYES_40 2665 3.77 1.65 4.77 120 TR_XM_InvalidRelay 2653 0.55 1.64 0.03 121 MAILING_LIST_MULTI 2624 2.30 1.62 2.62 122 T_XMDrugObfuBody_00 2606 1.02 1.61 0.74 123 HOSTED_IMG_MULTI_PUB_01 2604 0.52 1.61 0.01 124 SpammyFromTLD_02 2597 0.67 1.60 0.23 125 ALL_TRUSTED 2562 11.37 1.58 16.02 126 URI_HEX 2539 1.12 1.57 0.91 127 HTTPS_HTTP_MISMATCH 2494 1.11 1.54 0.91 128 XMStockSpam_06 2480 1.31 1.53 1.21 129 TR_XM_PHPForged 2475 0.90 1.53 0.60 130 T_XMHurry_00 2440 0.88 1.51 0.58 131 TR_XM_PHPDW 2417 0.88 1.49 0.60 132 TR_XM_FormFill2 2363 0.88 1.46 0.60 133 KHOP_HELO_FCRDNS 2346 1.46 1.45 1.46 134 XM_H_PHPOS 2342 0.86 1.45 0.58 135 HTML_MIME_NO_HTML_TAG 2341 1.87 1.45 2.07 136 TR_Mismatch_TLD_02 2319 0.51 1.43 0.07 137 XMGenDplmaNmb 2308 1.30 1.43 1.24 138 URIBL_DBL_SPAM 2207 0.45 1.36 0.01 139 XMPhish30 2206 0.70 1.36 0.39 140 AC_BR_BONANZA 2181 0.49 1.35 0.08 141 XM_DK_Undo_01 2133 1.60 1.32 1.74 142 DKIM_ADSP_CUSTOM_MED 2120 1.07 1.31 0.95 143 BOTNET_NORDNS 2096 0.42 1.30 0.01 144 RCVD_IN_PSBL 2089 0.56 1.29 0.21 145 HTML_TAG_BALANCE_BODY 2070 0.76 1.28 0.51 146 XM_HighProb1 2051 0.41 1.27 0.00 147 THIS_AD 1977 0.73 1.22 0.49 148 XM_SendGrid 1943 1.37 1.20 1.45 149 XM_H_Undi_Recip 1938 0.55 1.20 0.24 150 BAYES_20 1919 2.74 1.19 3.48 151 NML_ADSP_CUSTOM_MED 1866 0.80 1.15 0.63 152 XMHTML_After_End 1804 0.67 1.11 0.46 153 RCVD_IN_IADB_LISTED 1801 2.88 1.11 3.71 154 XM_B_Phish66 1682 0.61 1.04 0.41 155 XMSubMetaI_00 1679 0.74 1.04 0.60 156 RELAYCOUNTRY_RU 1662 0.35 1.03 0.02 157 TR_Symld_Words 1645 1.34 1.02 1.49 158 XMBdyGiftCard01 1622 0.75 1.00 0.63 159 XMNoVowels 1588 0.74 0.98 0.62 160 RCVD_IN_IADB_SPF 1577 2.51 0.97 3.24 161 XMPhish08 1528 0.44 0.94 0.21 162 XM_ProductURIs 1520 1.18 0.94 1.30 163 MISSING_HEADERS 1515 0.59 0.94 0.43 164 TR_XM_Undi_Recip19 1510 0.36 0.93 0.09 165 RCVD_IN_IADB_SENDERID 1486 2.25 0.92 2.88 166 TR_MetaPhish_Combo_01 1475 0.86 0.91 0.84 167 RCVD_IN_IADB_DK 1474 2.19 0.91 2.79 168 XM_UB99 1466 0.29 0.91 0.01 169 URI_NOVOWEL 1461 1.11 0.90 1.21 170 TooManyTo_002 1455 2.26 0.90 2.91 171 T_STY_INVIS_DIRECT 1454 0.49 0.90 0.30 172 FORGED_GMAIL_RCVD 1437 0.65 0.89 0.54 173 XMPhish14 1432 0.57 0.88 0.42 174 XM_UB80 1422 0.30 0.88 0.02 175 MPART_ALT_DIFF_COUNT 1417 0.72 0.88 0.64 176 LongTLD 1403 0.53 0.87 0.37 177 XMSexyCombo_01 1396 0.81 0.86 0.78 178 RDNS_DYNAMIC 1393 0.53 0.86 0.38 179 DIET_1 1388 0.48 0.86 0.30 180 NO_DNS_FOR_FROM 1379 0.42 0.85 0.22 181 XM_B_COPY_HTML 1371 0.64 0.85 0.54 182 PLING_QUERY 1360 0.77 0.84 0.73 183 TR_Mismatch_TLD_01 1334 0.43 0.82 0.25 184 PDS_OTHER_BAD_TLD 1320 0.37 0.82 0.16 185 SCC_BODY_URI_ONLY 1316 1.90 0.81 2.41 186 XM_H_PHPMailer 1315 0.75 0.81 0.72 187 T_MONEY_PERCENT 1308 0.43 0.81 0.26 188 TR_LOTS_OF_MONEY2 1308 0.43 0.81 0.26 189 TooManyTo_003 1307 1.34 0.81 1.59 190 ADVANCE_FEE_5_NEW_MONEY 1296 0.26 0.80 0.00 191 XM_DIRTYINTL 1295 0.33 0.80 0.11 192 XM_B_DNDMA 1282 0.73 0.79 0.70 193 AC_HTML_NONSENSE_TAGS 1279 0.28 0.79 0.03 194 T_TooManySym_02 1272 2.06 0.79 2.66 195 TR_XM_DK_SendGrid 1268 0.91 0.78 0.98 196 XM_H_Long_From02 1260 0.95 0.78 1.03 197 TR_XM_Undi_RecipCombo2 1251 0.26 0.77 0.01 198 TM2_M_A_HREF_HREF 1231 0.44 0.76 0.29 199 XMHTMLBadTable_001 1223 0.42 0.76 0.26 200 TooManyTo_004 1218 1.05 0.75 1.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 339237 99.50 99.75 99.39 2 HTML_MESSAGE 295493 89.53 95.77 86.57 3 RELAYCOUNTRY_US 275130 80.17 79.25 80.61 4 DKIM_SIGNED 255123 79.92 90.84 74.74 5 XM_DK_Pass 250212 77.68 86.90 73.31 6 DKIM_VALID 246319 76.45 85.47 72.17 7 XM_B_Unicode 236346 74.31 84.99 69.24 8 DCC_CHECK_NEGATIVE 228756 53.93 26.31 67.02 9 BAYES_50 205612 52.73 36.89 60.24 10 DKIM_VALID_AU 196817 59.78 64.24 57.66 11 XMListUnsubscribeExists 165151 55.89 71.73 48.39 12 XM_B_SpammyWords 151950 53.84 73.49 44.52 13 XM_B_Unicode3 131695 40.27 43.81 38.58 14 DCC_CHECK 112360 46.03 73.68 32.92 15 T_TM2_M_HEADER_IN_MSG 107121 28.73 23.12 31.38 16 RCVD_IN_MSPIKE_H2 101158 30.27 31.62 29.64 17 DKIM_VALID_EF 100999 29.98 30.81 29.59 18 HTML_FONT_LOW_CONTRAST 92517 29.66 35.06 27.11 19 FVGT_m_MULTI_ODD 83346 26.94 32.26 24.42 20 LOC_TINY_FONT_1 82423 29.04 39.36 24.15 21 XMSubLong 81547 23.33 22.15 23.89 22 T_KAM_HTML_FONT_INVALID 70417 23.48 29.49 20.63 23 MIME_HTML_ONLY 63231 22.11 29.69 18.53 24 XM_B_SpammyWords2 62456 26.98 45.30 18.30 25 ALL_TRUSTED 54665 11.37 1.58 16.02 26 TR_XM_DK_Unsub 45339 16.32 22.74 13.28 27 USER_IN_DEF_DKIM_WL 44419 9.68 2.66 13.01 28 XM_Multi_Part_URI 41661 13.99 17.76 12.21 29 UNPARSEABLE_RELAY 36475 11.53 13.31 10.69 30 BAYES_60 31295 8.78 7.95 9.17 31 TooManyTo_001 31209 7.82 5.03 9.14 32 BAYES_00 31074 6.40 0.71 9.10 33 LotsOfNums_01 26447 7.24 6.18 7.75 34 XM_DKIMWhitelistDomains 26256 5.24 0.07 7.69 35 XM_B_Unsub 26185 10.46 16.34 7.67 36 XM_Evil_Numbers_Gen 24624 7.83 9.12 7.21 37 IN_ZIMBRA_NJ_WHITELIST 24280 4.85 0.07 7.11 38 TR_MAX_INTL_RELAY 23112 9.49 15.22 6.77 39 XM_H_GMP 22816 6.16 5.06 6.68 40 LOTS_OF_MONEY 21354 9.37 15.93 6.26 41 RCVD_IN_MSPIKE_H3 20979 7.02 8.86 6.15 42 RCVD_IN_MSPIKE_WL 20979 7.02 8.86 6.15 43 TR_XM_BayesUnsub 20909 9.19 15.66 6.13 44 TR_XM_DK_Bayes 20674 4.28 0.52 6.06 45 TR_XM_DK_Bayes1 20336 4.21 0.51 5.96 46 MIME_QP_LONG_LINE 19588 5.09 3.71 5.74 47 XM_DK_Undo_02 19486 18.49 45.44 5.71 48 T_TooManySym_01 18304 4.52 2.73 5.36 49 TR_XM_DK_Bayes2 17281 3.58 0.44 5.06 50 XM_B_SpammyWords3 17269 8.17 14.72 5.06 51 XM_H_Long_From01 17129 4.90 4.65 5.02 52 XM_PDF 16440 3.49 0.68 4.82 53 BAYES_40 16290 3.77 1.65 4.77 54 RCVD_IN_VALIDITY_SAFE 16270 4.12 2.76 4.77 55 XMSubMetaSx_00 15700 4.96 5.73 4.60 56 RELAYCOUNTRY_META 15144 9.79 21.07 4.44 57 XMStrtUSub 15084 4.23 3.82 4.42 58 BAYES_99 14990 14.61 36.15 4.39 59 HTML_IMAGE_RATIO_02 14832 4.79 5.74 4.35 60 TR_XM_SpammyWords4 14812 7.66 14.66 4.34 61 BOTNET_IPINHOSTNAME 14240 6.94 12.78 4.17 62 BAYES_80 14016 5.82 9.45 4.11 63 FSL_BULK_SIG 13915 5.63 8.92 4.08 64 RCVD_IN_VALIDITY_CERTIFIED 13797 3.44 2.16 4.04 65 HTML_IMAGE_RATIO_04 13717 4.30 4.90 4.02 66 XM_UncommonTLD01 13291 4.55 5.95 3.89 67 XM_B_Phish_Phrases 13251 4.09 4.52 3.88 68 ANY_BOUNCE_MESSAGE 13212 3.22 1.84 3.87 69 BOUNCE_MESSAGE 13212 3.22 1.84 3.87 70 T_REMOTE_IMAGE 13085 3.15 1.71 3.83 71 RCVD_IN_IADB_LISTED 12676 2.88 1.11 3.71 72 MPART_ALT_DIFF 12106 4.46 6.38 3.55 73 BAYES_20 11867 2.74 1.19 3.48 74 XM_SPF_SoftFail 11516 4.11 5.67 3.37 75 BAYES_999 11465 11.40 28.36 3.36 76 RCVD_IN_IADB_SPF 11072 2.51 0.97 3.24 77 XM_Body_Dirty_Words 10865 4.12 6.10 3.18 78 XM_B_SpammyTLD 10534 3.14 3.25 3.09 79 TooManyTo_002 9925 2.26 0.90 2.91 80 RCVD_IN_IADB_SENDERID 9841 2.25 0.92 2.88 81 RCVD_IN_IADB_DK 9539 2.19 0.91 2.79 82 XMNumbers 9430 3.29 4.41 2.76 83 BAYES_95 9084 3.55 5.41 2.66 84 T_TooManySym_02 9074 2.06 0.79 2.66 85 MAILING_LIST_MULTI 8944 2.30 1.62 2.62 86 DKIM_INVALID 8804 3.47 5.36 2.58 87 RCVD_IN_IADB_VOUCHED 8716 1.91 0.54 2.55 88 HTML_IMAGE_RATIO_06 8649 3.08 4.24 2.53 89 TM2_M_URI_OPT_OUT 8357 2.59 2.89 2.45 90 SCC_BODY_URI_ONLY 8222 1.90 0.81 2.41 91 TR_XM_SpammyRelay 8176 7.02 16.78 2.40 92 MIME_HTML_MOSTLY 7786 2.84 4.01 2.28 93 XM_CamelCaseFrm001 7260 2.31 2.68 2.13 94 XMDiploma_00 7151 2.33 2.82 2.10 95 HELO_NODOT 7128 1.52 0.31 2.09 96 HELO_NO_DOMAIN 7125 1.52 0.31 2.09 97 BAYES_05 7095 1.60 0.61 2.08 98 HTML_MIME_NO_HTML_TAG 7067 1.87 1.45 2.07 99 INVALID_MSGID 6968 1.43 0.13 2.04 100 TO_MALFORMED 6949 1.38 0.01 2.04 101 HTML_IMAGE_RATIO_08 6904 2.77 4.34 2.02 102 TR_XM_DKIM_Undo 6890 12.56 34.80 2.02 103 XM_B_Investor 6722 2.98 5.12 1.97 104 MIME_HTML_ONLY_MULTI 6705 2.49 3.60 1.96 105 T_XMDrugObfuBody_14 6321 2.51 3.90 1.85 106 RCVD_IN_IADB_OPTIN 6183 1.34 0.34 1.81 107 XMSexyCombo_05 6182 2.57 4.17 1.81 108 XM_DK_Undo_01 5933 1.60 1.32 1.74 109 SUBJ_ALL_CAPS 5892 1.75 1.80 1.73 110 T_XMDrugObfuBody_08 5794 2.20 3.27 1.70 111 TooManyTo_003 5421 1.34 0.81 1.59 112 TR_XM_UnparsRelay 5334 3.46 7.46 1.56 113 TR_Symld_Words 5085 1.34 1.02 1.49 114 TR_XM_PhishingBody 5063 2.38 4.28 1.48 115 FROM_EXCESS_BASE64 5056 1.56 1.73 1.48 116 XM_B_SEO 5052 2.58 4.90 1.48 117 IN_HORDE_ADDRESS_BOOK 5032 1.02 0.05 1.47 118 RELAYCOUNTRY_CA 4994 4.68 11.45 1.46 119 TR_DCC_Bayes_99 4979 9.40 26.16 1.46 120 KHOP_HELO_FCRDNS 4976 1.46 1.45 1.46 121 TVD_RCVD_IP 4961 1.22 0.74 1.45 122 XM_SendGrid 4941 1.37 1.20 1.45 123 BOTNET 4873 3.99 9.38 1.43 124 XM_B_Unsub2 4841 1.66 2.17 1.42 125 UNTRUSTED_Relay 4722 2.93 6.19 1.38 126 XM_OfRef6 4599 2.55 5.08 1.35 127 XM_ProductURIs 4436 1.18 0.94 1.30 128 XMGappySubj_01 4380 0.92 0.14 1.28 129 TR_XM_SpammyWords5 4364 2.31 4.48 1.28 130 TM2_M_VERY_LONG_WORD 4342 1.79 2.88 1.27 131 XMGenDplmaNmb 4248 1.30 1.43 1.24 132 XMCapTrack 4163 0.99 0.51 1.22 133 XMStockSpam_06 4133 1.31 1.53 1.21 134 URI_NOVOWEL 4121 1.11 0.90 1.21 135 TooManyTo_004 4069 1.05 0.75 1.19 136 TVD_SPACE_RATIO 3978 0.84 0.15 1.17 137 XM_GoogleGroups 3901 1.00 0.69 1.14 138 XMBSHREFv2 3544 0.81 0.32 1.04 139 XM_H_Long_From02 3529 0.95 0.78 1.03 140 RELAYCOUNTRY_AU 3395 1.43 2.34 0.99 141 TooManyTo_005 3381 0.90 0.71 0.99 142 TR_XM_DK_SendGrid 3328 0.91 0.78 0.98 143 TR_XM_SEO4 3268 2.10 4.52 0.96 144 DKIM_ADSP_CUSTOM_MED 3253 1.07 1.31 0.95 145 T_TooManySym_03 3111 0.71 0.30 0.91 146 T_FILL_THIS_FORM_SHORT 3107 1.82 3.73 0.91 147 URI_HEX 3103 1.12 1.57 0.91 148 HTTPS_HTTP_MISMATCH 3098 1.11 1.54 0.91 149 XM_B_SpammyWords4 3091 1.38 2.39 0.91 150 URI_TRY_3LD 3076 1.35 2.29 0.90 151 XMBody_17 3041 2.98 7.40 0.89 152 XMGappySubj_02 2969 0.61 0.05 0.87 153 TR_MetaPhish_Combo_01 2863 0.86 0.91 0.84 154 XMBrknScrpt_02 2854 1.11 1.70 0.84 155 XM_UB50 2787 1.50 2.93 0.82 156 SpammyFromTLD_01 2750 1.39 2.62 0.81 157 XMSexyCombo_01 2658 0.81 0.86 0.78 158 HTML_IMAGE_ONLY_32 2535 0.55 0.14 0.74 159 T_XMDrugObfuBody_00 2534 1.02 1.61 0.74 160 PLING_QUERY 2500 0.77 0.84 0.73 161 XM_ShortIntro_01 2482 0.64 0.46 0.73 162 XM_H_PHPMailer 2464 0.75 0.81 0.72 163 FILL_THIS_FORM 2396 0.58 0.31 0.70 164 XM_B_DNDMA 2389 0.73 0.79 0.70 165 T_OBFU_PDF_ATTACH 2380 0.50 0.09 0.70 166 TR_LOTS_OF_MONEY3 2318 1.66 3.72 0.68 167 XM_B_FormFill 2300 0.47 0.05 0.67 168 MPART_ALT_DIFF_COUNT 2187 0.72 0.88 0.64 169 SHORT_HELO_AND_INLINE_IMAGE 2153 0.44 0.05 0.63 170 NML_ADSP_CUSTOM_MED 2135 0.80 1.15 0.63 171 XMBdyGiftCard01 2134 0.75 1.00 0.63 172 XMNoVowels 2128 0.74 0.98 0.62 173 XMBody_95 2076 0.44 0.09 0.61 174 XMSubMetaI_00 2061 0.74 1.04 0.60 175 TR_XM_FormFill2 2051 0.88 1.46 0.60 176 TR_XM_PHPForged 2050 0.90 1.53 0.60 177 TR_XM_PHPDW 2033 0.88 1.49 0.60 178 XM_H_PHPOS 1995 0.86 1.45 0.58 179 T_XMHurry_00 1972 0.88 1.51 0.58 180 TO_NO_BRKTS_HTML_ONLY 1920 0.47 0.26 0.56 181 XM_B_COPY_HTML 1841 0.64 0.85 0.54 182 FORGED_GMAIL_RCVD 1835 0.65 0.89 0.54 183 T_Symld_Words_02 1814 0.60 0.75 0.53 184 XMLngstWrd_00 1807 0.57 0.67 0.53 185 RCVD_IN_BL_SPAMCOP_NET 1792 4.29 12.24 0.53 186 XMMoneyMeta_00 1783 0.59 0.75 0.52 187 FROM_GOV_DKIM_AU 1762 0.39 0.12 0.52 188 XMSexyCombo_04 1754 0.44 0.28 0.51 189 HTML_TAG_BALANCE_BODY 1731 0.76 1.28 0.51 190 THIS_AD 1675 0.73 1.22 0.49 191 XMDateMe_00 1671 0.52 0.57 0.49 192 HTML_FONT_FACE_BAD 1628 0.56 0.75 0.48 193 TR_XM_Base64_M1 1590 0.50 0.57 0.47 194 XMHTML_After_End 1580 0.67 1.11 0.46 195 RCVD_IN_SORBS_DUL 1561 0.33 0.05 0.46 196 RELAYCOUNTRY_GB 1538 0.49 0.58 0.45 197 HTML_IMAGE_ONLY_28 1522 0.42 0.37 0.45 198 USER_IN_WELCOMELIST 1486 0.30 0.00 0.44 199 USER_IN_WHITELIST 1486 0.30 0.00 0.44 200 TM2_M_BODY_EMPTY 1475 0.34 0.14 0.43 ----------------------------------------------------------------------