Email: 527571 Autolearn: 0 AvgScore: 4.42 AvgScanTime: 1.47 sec Spam: 174248 Autolearn: 0 AvgScore: 13.34 AvgScanTime: 1.59 sec Ham: 353323 Autolearn: 0 AvgScore: 0.02 AvgScanTime: 1.41 sec Time Spent Running SA: 215.50 hours Time Spent Processing Spam: 76.81 hours Time Spent Processing Ham: 138.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 170325 90.50 97.75 86.92 2 DKIM_SIGNED 162510 82.34 93.26 76.95 3 XM_DK_Pass 155845 80.18 89.44 75.62 4 DKIM_VALID 153654 79.11 88.18 74.63 5 XM_B_Unicode 151248 76.21 86.80 70.99 6 RELAYCOUNTRY_US 140155 81.59 80.43 82.16 7 XMListUnsubscribeExists 132612 60.40 76.11 52.66 8 XM_B_SpammyWords 129082 54.45 74.08 44.76 9 DCC_CHECK 128941 49.66 74.00 37.66 10 DKIM_VALID_AU 113828 61.97 65.33 60.31 11 XM_DK_Undo_02 82573 20.04 47.39 6.55 12 XM_B_Unicode3 81880 42.86 46.99 40.82 13 XM_B_SpammyWords2 80725 28.42 46.33 19.58 14 LOC_TINY_FONT_1 73159 32.05 41.99 27.15 15 BAYES_50 66949 52.77 38.42 59.85 16 HTML_FONT_LOW_CONTRAST 65317 32.44 37.49 29.95 17 TR_XM_DKIM_Undo 63343 13.94 36.35 2.89 18 BAYES_99 61336 14.66 35.20 4.53 19 FVGT_m_MULTI_ODD 57523 28.64 33.01 26.48 20 DKIM_VALID_EF 56926 30.26 32.67 29.07 21 RCVD_IN_MSPIKE_H2 55928 30.79 32.10 30.14 22 MIME_HTML_ONLY 54279 22.55 31.15 18.30 23 T_KAM_HTML_FONT_INVALID 54161 25.07 31.08 22.11 24 BAYES_999 47912 11.28 27.50 3.28 25 DCC_CHECK_NEGATIVE 45287 50.30 25.99 62.29 26 TR_DCC_Bayes_99 44694 9.74 25.65 1.89 27 TR_XM_DK_Unsub 42958 17.65 24.65 14.20 28 T_TM2_M_HEADER_IN_MSG 40552 27.37 23.27 29.39 29 XMSubLong 37338 22.94 21.43 23.69 30 RELAYCOUNTRY_META 34359 9.29 19.72 4.15 31 XM_Multi_Part_URI 33601 15.38 19.28 13.45 32 LOTS_OF_MONEY 28851 10.35 16.56 7.29 33 TR_XM_SpammyRelay 27941 6.94 16.04 2.46 34 TR_XM_SpammyWords2 27071 5.51 15.54 0.56 35 XM_B_SpammyWords3 26865 8.26 15.42 4.72 36 TR_XM_SpammyWords4 26481 8.42 15.20 5.08 37 XM_B_Unsub 26463 10.61 15.19 8.35 38 TR_MAX_INTL_RELAY 25832 9.67 14.82 7.12 39 TR_XM_BayesUnsub 25633 9.38 14.71 6.76 40 RCVD_IN_BL_SPAMCOP_NET 25114 5.43 14.41 1.00 41 UNPARSEABLE_RELAY 24645 12.16 14.14 11.18 42 BOTNET_IPINHOSTNAME 23263 7.59 13.35 4.75 43 TR_XM_SPAMCOP 22313 4.62 12.81 0.58 44 RELAYCOUNTRY_CA 19997 4.64 11.48 1.26 45 RCVD_IN_MSPIKE_WL 16892 7.33 9.69 6.16 46 RCVD_IN_MSPIKE_H3 16892 7.33 9.69 6.16 47 BAYES_80 15948 5.88 9.15 4.26 48 BOTNET 15513 4.09 8.90 1.72 49 XM_Evil_Numbers_Gen 14598 7.91 8.38 7.68 50 BAYES_60 13615 8.89 7.81 9.42 51 XMBody_17 12994 3.04 7.46 0.86 52 TR_XM_UnparsRelay 12499 3.61 7.17 1.86 53 LotsOfNums_01 11335 7.82 6.51 8.47 54 XM_Body_Dirty_Words 11028 4.18 6.33 3.11 55 FSL_BULK_SIG 10901 5.33 6.26 4.88 56 HTML_IMAGE_RATIO_02 10769 5.84 6.18 5.67 57 MPART_ALT_DIFF 9839 4.27 5.65 3.59 58 XM_UncommonTLD01 9686 4.36 5.56 3.76 59 UNTRUSTED_Relay 9454 2.88 5.43 1.62 60 BAYES_95 9397 3.70 5.39 2.86 61 XM_B_PhoneNumber 9378 8.67 5.38 10.30 62 XMSubMetaSx_00 8883 3.94 5.10 3.36 63 DKIM_INVALID 8856 3.23 5.08 2.32 64 XM_B_SEO 8406 2.38 4.82 1.17 65 HTML_IMAGE_RATIO_04 8362 4.48 4.80 4.33 66 XM_OfRef6 8298 2.36 4.76 1.17 67 XM_H_Long_From01 8079 5.18 4.64 5.45 68 XM_B_Phish_Phrases 7980 4.42 4.58 4.34 69 TR_XM_SEO4 7726 1.92 4.43 0.69 70 XM_SPF_SoftFail 7490 3.66 4.30 3.35 71 TooManyTo_001 7431 7.10 4.26 8.49 72 HTML_IMAGE_RATIO_06 7386 3.32 4.24 2.87 73 TR_XM_SpammyWords5 7136 2.38 4.10 1.53 74 TR_XM_PhishingBody 7005 2.48 4.02 1.72 75 TR_LOTS_OF_MONEY3 6962 1.71 4.00 0.59 76 XM_B_Investor 6851 2.39 3.93 1.63 77 XM_H_GMP 6725 5.44 3.86 6.22 78 XMSexyCombo_05 6638 2.42 3.81 1.73 79 RCVD_IN_VALIDITY_RPBL 6516 1.38 3.74 0.22 80 T_XMDrugObfuBody_14 6424 2.35 3.69 1.69 81 XMNumbers 6210 3.27 3.56 3.12 82 TM2_M_URI_OPT_OUT 5988 2.47 3.44 1.99 83 T_XMDrugObfuBody_08 5804 2.09 3.33 1.48 84 T_FILL_THIS_FORM_SHORT 5770 1.74 3.31 0.96 85 TR_XM_BayesRelay 5722 1.09 3.28 0.00 86 XM_B_SpammyTLD 5688 2.70 3.26 2.42 87 MIME_HTML_ONLY_MULTI 5634 2.37 3.23 1.95 88 XMStrtUSub 5599 3.78 3.21 4.06 89 HTML_IMAGE_RATIO_08 5541 2.46 3.18 2.10 90 TM2_M_VERY_LONG_WORD 5521 2.02 3.17 1.46 91 MIME_HTML_MOSTLY 5509 2.56 3.16 2.27 92 XM_UB50 5357 1.68 3.07 0.99 93 FONT_INVIS_LONG_LINE 5169 1.04 2.97 0.09 94 MIME_QP_LONG_LINE 5056 4.57 2.90 5.39 95 XM_B_SpammyWords4 4906 1.29 2.82 0.53 96 XM_CamelCaseFrm001 4730 2.40 2.71 2.24 97 RCVD_IN_VALIDITY_SAFE 4655 4.23 2.67 5.00 98 XMDiploma_00 4508 2.05 2.59 1.78 99 SpammyFromTLD_01 4402 1.37 2.53 0.80 100 USER_IN_DEF_DKIM_WL 4178 10.16 2.40 13.99 101 XM_URI_RBL 4143 0.89 2.38 0.15 102 HOSTED_IMG_MULTI_PUB_01 3911 0.76 2.24 0.02 103 XM_B_Unsub2 3830 1.71 2.20 1.47 104 RCVD_IN_VALIDITY_CERTIFIED 3764 3.63 2.16 4.35 105 T_XMHurry_00 3713 1.20 2.13 0.74 106 TR_XM_FormFill 3684 0.71 2.11 0.01 107 HTML_MIME_NO_HTML_TAG 3675 2.11 2.11 2.10 108 T_TooManySym_01 3625 4.80 2.08 6.14 109 SUBJ_ALL_CAPS 3549 1.77 2.04 1.64 110 RELAYCOUNTRY_AU 3498 1.19 2.01 0.79 111 XMStockSpam_06 3489 1.59 2.00 1.39 112 URI_TRY_3LD 3363 1.19 1.93 0.82 113 MAILING_LIST_MULTI 3237 2.45 1.86 2.74 114 XMBrknScrpt_02 3156 1.15 1.81 0.83 115 FROM_EXCESS_BASE64 3152 1.77 1.81 1.75 116 TR_XM_INV_DKIM 3088 0.63 1.77 0.06 117 XM_DK_Undo_01 3053 1.94 1.75 2.03 118 BAYES_40 2927 3.60 1.68 4.54 119 URI_HEX 2921 1.37 1.68 1.22 120 HK_RANDOM_REPLYTO 2833 0.60 1.63 0.09 121 XM_H_Long_From02 2781 1.32 1.60 1.19 122 T_REMOTE_IMAGE 2750 2.88 1.58 3.52 123 TR_Mismatch_TLD_02 2655 0.56 1.52 0.09 124 XM_SendGrid 2578 1.46 1.48 1.44 125 SpammyFromTLD_02 2550 0.77 1.46 0.43 126 BOUNCE_MESSAGE 2473 2.56 1.42 3.12 127 ANY_BOUNCE_MESSAGE 2473 2.56 1.42 3.12 128 TR_XM_NoHeaderRelay 2442 0.54 1.40 0.12 129 HTTPS_HTTP_MISMATCH 2429 1.01 1.39 0.82 130 AC_BR_BONANZA 2343 0.53 1.34 0.13 131 XMHTML_After_End 2299 0.74 1.32 0.46 132 XMGenDplmaNmb 2220 1.04 1.27 0.93 133 XMPhish30 2128 0.74 1.22 0.50 134 ALL_TRUSTED 2076 10.05 1.19 14.42 135 T_XMDrugObfuBody_00 2068 0.85 1.19 0.68 136 RCVD_IN_IADB_LISTED 2067 3.08 1.19 4.02 137 URIBL_DBL_SPAM 2061 0.39 1.18 0.00 138 HTML_TAG_BALANCE_BODY 2057 0.77 1.18 0.57 139 XM_ProductURIs 1991 0.80 1.14 0.63 140 XMReplyNow 1962 0.54 1.13 0.24 141 BAYES_20 1960 2.54 1.12 3.24 142 XM_HighProb1 1951 0.37 1.12 0.01 143 XM_B_DNDMA 1933 0.64 1.11 0.40 144 XM_B_Phish66 1919 0.57 1.10 0.31 145 TR_XM_PHPDW 1915 0.59 1.10 0.34 146 TR_XM_PHPForged 1909 0.60 1.10 0.35 147 URI_NOVOWEL 1891 1.31 1.09 1.42 148 THIS_AD 1862 0.67 1.07 0.47 149 TR_XM_FormFill2 1834 0.58 1.05 0.35 150 XMSubMetaI_00 1829 0.67 1.05 0.48 151 XM_H_PHPOS 1829 0.57 1.05 0.33 152 XM_DIRTYINTL 1814 0.39 1.04 0.08 153 RCVD_IN_IADB_SPF 1784 2.69 1.02 3.51 154 T_Symld_Words_02 1744 0.81 1.00 0.71 155 TR_Symld_Words 1737 1.31 1.00 1.47 156 RCVD_IN_IADB_DK 1666 2.36 0.96 3.05 157 RCVD_IN_IADB_SENDERID 1661 2.41 0.95 3.13 158 TR_MetaPhish_Combo_01 1658 0.84 0.95 0.78 159 TR_Caps_n_Bayes_99 1656 0.33 0.95 0.02 160 XM_B_COPY_HTML 1612 0.70 0.93 0.60 161 MPART_ALT_DIFF_COUNT 1570 0.74 0.90 0.66 162 TR_XM_DK_SendGrid 1555 0.97 0.89 1.01 163 KHOP_HELO_FCRDNS 1550 1.14 0.89 1.26 164 XM_B_COVIDMETA 1516 0.70 0.87 0.62 165 XMHTMLBadTable_001 1514 0.46 0.87 0.26 166 DKIM_ADSP_NXDOMAIN 1506 0.51 0.86 0.33 167 XMPhish14 1490 0.66 0.86 0.56 168 T_STY_INVIS_DIRECT 1456 0.48 0.84 0.30 169 RELAYCOUNTRY_FR 1451 0.41 0.83 0.20 170 HTML_FONT_SIZE_LARGE 1432 0.35 0.82 0.11 171 TooManyTo_002 1432 1.99 0.82 2.57 172 XMBdyGiftCard01 1406 0.77 0.81 0.76 173 LongTLD 1397 0.53 0.80 0.40 174 XM_H_Undi_Recip 1394 0.40 0.80 0.21 175 RELAYCOUNTRY_GB 1370 0.55 0.79 0.43 176 DKIM_ADSP_CUSTOM_MED 1362 0.90 0.78 0.96 177 TR_XM_Base64_L1 1341 0.33 0.77 0.12 178 TR_XM_Base64_M1 1327 0.79 0.76 0.81 179 XMBody_78 1326 0.41 0.76 0.24 180 XMPhish08 1319 0.44 0.76 0.28 181 XMSexyCombo_01 1298 0.34 0.74 0.15 182 TooManyTo_003 1293 1.22 0.74 1.45 183 PLING_QUERY 1293 0.57 0.74 0.49 184 TR_XM_InvalidRelay 1291 0.26 0.74 0.03 185 XM_S_SpammyWords 1289 0.38 0.74 0.20 186 TR_XM_Spammywords 1289 0.38 0.74 0.20 187 URIBL_CSS_A 1256 0.28 0.72 0.07 188 URIBL_CSS 1256 0.28 0.72 0.07 189 XM_UB99 1235 0.24 0.71 0.00 190 TooManyTo_004 1232 0.92 0.71 1.03 191 TR_Mismatch_TLD_01 1220 0.37 0.70 0.20 192 T_MONEY_PERCENT 1204 0.40 0.69 0.26 193 TR_LOTS_OF_MONEY2 1204 0.40 0.69 0.26 194 SHOPIFY_IMG_NOT_RCVD_SFY 1177 0.48 0.68 0.38 195 HTML_IMAGE_ONLY_08 1177 0.30 0.68 0.11 196 TooManyTo_005 1176 0.78 0.67 0.83 197 HTML_FONT_FACE_BAD 1170 0.51 0.67 0.43 198 MIME_CHARSET_FARAWAY 1170 0.40 0.67 0.27 199 MIME_HEADER_CTYPE_ONLY 1169 0.32 0.67 0.14 200 XMSlimDrugH 1169 0.48 0.67 0.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 307126 90.50 97.75 86.92 2 RELAYCOUNTRY_US 290286 81.59 80.43 82.16 3 DKIM_SIGNED 271880 82.34 93.26 76.95 4 XM_DK_Pass 267184 80.18 89.44 75.62 5 DKIM_VALID 263698 79.11 88.18 74.63 6 XM_B_Unicode 250827 76.21 86.80 70.99 7 DCC_CHECK_NEGATIVE 220099 50.30 25.99 62.29 8 DKIM_VALID_AU 213087 61.97 65.33 60.31 9 BAYES_50 211475 52.77 38.42 59.85 10 XMListUnsubscribeExists 186043 60.40 76.11 52.66 11 XM_B_SpammyWords 158155 54.45 74.08 44.76 12 XM_B_Unicode3 144243 42.86 46.99 40.82 13 DCC_CHECK 133065 49.66 74.00 37.66 14 RCVD_IN_MSPIKE_H2 106497 30.79 32.10 30.14 15 HTML_FONT_LOW_CONTRAST 105831 32.44 37.49 29.95 16 T_TM2_M_HEADER_IN_MSG 103855 27.37 23.27 29.39 17 DKIM_VALID_EF 102725 30.26 32.67 29.07 18 LOC_TINY_FONT_1 95916 32.05 41.99 27.15 19 FVGT_m_MULTI_ODD 93555 28.64 33.01 26.48 20 XMSubLong 83687 22.94 21.43 23.69 21 T_KAM_HTML_FONT_INVALID 78103 25.07 31.08 22.11 22 XM_B_SpammyWords2 69192 28.42 46.33 19.58 23 MIME_HTML_ONLY 64673 22.55 31.15 18.30 24 ALL_TRUSTED 50944 10.05 1.19 14.42 25 TR_XM_DK_Unsub 50177 17.65 24.65 14.20 26 USER_IN_DEF_DKIM_WL 49416 10.16 2.40 13.99 27 XM_Multi_Part_URI 47522 15.38 19.28 13.45 28 UNPARSEABLE_RELAY 39503 12.16 14.14 11.18 29 XM_B_PhoneNumber 36387 8.67 5.38 10.30 30 BAYES_60 33273 8.89 7.81 9.42 31 BAYES_00 32972 6.47 0.65 9.33 32 TooManyTo_001 30013 7.10 4.26 8.49 33 LotsOfNums_01 29927 7.82 6.51 8.47 34 XM_B_Unsub 29498 10.61 15.19 8.35 35 XM_Evil_Numbers_Gen 27142 7.91 8.38 7.68 36 XM_DKIMWhitelistDomains 26396 5.04 0.10 7.47 37 LOTS_OF_MONEY 25766 10.35 16.56 7.29 38 IN_ZIMBRA_NJ_WHITELIST 25531 4.87 0.09 7.23 39 TR_MAX_INTL_RELAY 25164 9.67 14.82 7.12 40 TR_XM_BayesUnsub 23867 9.38 14.71 6.76 41 XM_DK_Undo_02 23128 20.04 47.39 6.55 42 TR_XM_DK_Bayes 23070 4.54 0.51 6.53 43 TR_XM_DK_Bayes1 22685 4.47 0.51 6.42 44 XM_H_GMP 21988 5.44 3.86 6.22 45 RCVD_IN_MSPIKE_H3 21760 7.33 9.69 6.16 46 RCVD_IN_MSPIKE_WL 21760 7.33 9.69 6.16 47 T_TooManySym_01 21697 4.80 2.08 6.14 48 HTML_IMAGE_RATIO_02 20042 5.84 6.18 5.67 49 TR_XM_DK_Bayes2 19877 3.91 0.43 5.63 50 XM_H_Long_From01 19272 5.18 4.64 5.45 51 MIME_QP_LONG_LINE 19055 4.57 2.90 5.39 52 TR_XM_SpammyWords4 17958 8.42 15.20 5.08 53 RCVD_IN_VALIDITY_SAFE 17664 4.23 2.67 5.00 54 FSL_BULK_SIG 17231 5.33 6.26 4.88 55 BOTNET_IPINHOSTNAME 16785 7.59 13.35 4.75 56 XM_B_SpammyWords3 16691 8.26 15.42 4.72 57 BAYES_40 16049 3.60 1.68 4.54 58 BAYES_99 15988 14.66 35.20 4.53 59 XM_PDF 15875 3.22 0.63 4.49 60 RCVD_IN_VALIDITY_CERTIFIED 15386 3.63 2.16 4.35 61 XM_B_Phish_Phrases 15329 4.42 4.58 4.34 62 HTML_IMAGE_RATIO_04 15293 4.48 4.80 4.33 63 BAYES_80 15052 5.88 9.15 4.26 64 RELAYCOUNTRY_META 14661 9.29 19.72 4.15 65 XMStrtUSub 14338 3.78 3.21 4.06 66 RCVD_IN_IADB_LISTED 14192 3.08 1.19 4.02 67 XM_UncommonTLD01 13290 4.36 5.56 3.76 68 MPART_ALT_DIFF 12674 4.27 5.65 3.59 69 T_REMOTE_IMAGE 12431 2.88 1.58 3.52 70 RCVD_IN_IADB_SPF 12393 2.69 1.02 3.51 71 XMSubMetaSx_00 11878 3.94 5.10 3.36 72 XM_SPF_SoftFail 11819 3.66 4.30 3.35 73 BAYES_999 11590 11.28 27.50 3.28 74 BAYES_20 11441 2.54 1.12 3.24 75 RCVD_IN_IADB_SENDERID 11059 2.41 0.95 3.13 76 XMNumbers 11037 3.27 3.56 3.12 77 ANY_BOUNCE_MESSAGE 11022 2.56 1.42 3.12 78 BOUNCE_MESSAGE 11019 2.56 1.42 3.12 79 XM_Body_Dirty_Words 11001 4.18 6.33 3.11 80 RCVD_IN_IADB_DK 10761 2.36 0.96 3.05 81 TR_XM_DKIM_Undo 10200 13.94 36.35 2.89 82 HTML_IMAGE_RATIO_06 10147 3.32 4.24 2.87 83 BAYES_95 10102 3.70 5.39 2.86 84 MAILING_LIST_MULTI 9669 2.45 1.86 2.74 85 RCVD_IN_IADB_VOUCHED 9414 1.98 0.59 2.66 86 TooManyTo_002 9065 1.99 0.82 2.57 87 T_TooManySym_02 9023 1.93 0.66 2.55 88 TR_XM_SpammyRelay 8677 6.94 16.04 2.46 89 XM_B_SpammyTLD 8559 2.70 3.26 2.42 90 DKIM_INVALID 8182 3.23 5.08 2.32 91 MIME_HTML_MOSTLY 8006 2.56 3.16 2.27 92 XM_CamelCaseFrm001 7914 2.40 2.71 2.24 93 HTML_MIME_NO_HTML_TAG 7436 2.11 2.11 2.10 94 HTML_IMAGE_RATIO_08 7431 2.46 3.18 2.10 95 INVALID_MSGID 7306 1.43 0.13 2.07 96 XM_DK_Undo_01 7178 1.94 1.75 2.03 97 TM2_M_URI_OPT_OUT 7039 2.47 3.44 1.99 98 BAYES_05 6968 1.51 0.56 1.97 99 TO_MALFORMED 6934 1.32 0.00 1.96 100 MIME_HTML_ONLY_MULTI 6877 2.37 3.23 1.95 101 TR_DCC_Bayes_99 6680 9.74 25.65 1.89 102 RCVD_IN_IADB_OPTIN 6575 1.37 0.39 1.86 103 TR_XM_UnparsRelay 6562 3.61 7.17 1.86 104 XMDiploma_00 6281 2.05 2.59 1.78 105 HELO_NODOT 6244 1.23 0.15 1.77 106 HELO_NO_DOMAIN 6240 1.23 0.15 1.77 107 FROM_EXCESS_BASE64 6182 1.77 1.81 1.75 108 XMSexyCombo_05 6126 2.42 3.81 1.73 109 BOTNET 6063 4.09 8.90 1.72 110 TR_XM_PhishingBody 6062 2.48 4.02 1.72 111 T_XMDrugObfuBody_14 5973 2.35 3.69 1.69 112 SUBJ_ALL_CAPS 5802 1.77 2.04 1.64 113 XM_B_Investor 5746 2.39 3.93 1.63 114 UNTRUSTED_Relay 5733 2.88 5.43 1.62 115 TR_XM_SpammyWords5 5401 2.38 4.10 1.53 116 T_XMDrugObfuBody_08 5227 2.09 3.33 1.48 117 XM_B_Unsub2 5196 1.71 2.20 1.47 118 TR_Symld_Words 5191 1.31 1.00 1.47 119 TM2_M_VERY_LONG_WORD 5141 2.02 3.17 1.46 120 TooManyTo_003 5140 1.22 0.74 1.45 121 TVD_RCVD_IP 5112 1.16 0.59 1.45 122 XM_SendGrid 5104 1.46 1.48 1.44 123 URI_NOVOWEL 5021 1.31 1.09 1.42 124 IN_HORDE_ADDRESS_BOOK 4949 0.96 0.08 1.40 125 XMStockSpam_06 4907 1.59 2.00 1.39 126 XMGappySubj_01 4580 0.92 0.15 1.30 127 RELAYCOUNTRY_CA 4456 4.64 11.48 1.26 128 KHOP_HELO_FCRDNS 4445 1.14 0.89 1.26 129 XM_GoogleGroups 4369 1.02 0.58 1.24 130 URI_HEX 4320 1.37 1.68 1.22 131 XM_H_Long_From02 4196 1.32 1.60 1.19 132 XM_OfRef6 4138 2.36 4.76 1.17 133 XM_B_SEO 4133 2.38 4.82 1.17 134 TVD_SPACE_RATIO 3828 0.75 0.07 1.08 135 XMBSHREFv2 3759 0.92 0.64 1.06 136 FROM_GOV_DKIM_AU 3698 0.76 0.18 1.05 137 XMCapTrack 3671 0.84 0.44 1.04 138 TooManyTo_004 3641 0.92 0.71 1.03 139 TR_XM_DK_SendGrid 3553 0.97 0.89 1.01 140 RCVD_IN_BL_SPAMCOP_NET 3516 5.43 14.41 1.00 141 XM_UB50 3501 1.68 3.07 0.99 142 T_TooManySym_03 3493 0.74 0.23 0.99 143 DKIM_ADSP_CUSTOM_MED 3403 0.90 0.78 0.96 144 T_FILL_THIS_FORM_SHORT 3392 1.74 3.31 0.96 145 XMGenDplmaNmb 3292 1.04 1.27 0.93 146 XMBody_17 3042 3.04 7.46 0.86 147 TooManyTo_005 2937 0.78 0.67 0.83 148 XMBrknScrpt_02 2918 1.15 1.81 0.83 149 URI_TRY_3LD 2909 1.19 1.93 0.82 150 HTTPS_HTTP_MISMATCH 2890 1.01 1.39 0.82 151 TR_XM_Base64_M1 2849 0.79 0.76 0.81 152 SpammyFromTLD_01 2812 1.37 2.53 0.80 153 RELAYCOUNTRY_AU 2776 1.19 2.01 0.79 154 TR_MetaPhish_Combo_01 2768 0.84 0.95 0.78 155 XMBdyGiftCard01 2673 0.77 0.81 0.76 156 T_XMHurry_00 2601 1.20 2.13 0.74 157 T_OBFU_PDF_ATTACH 2571 0.52 0.09 0.73 158 T_Symld_Words_02 2516 0.81 1.00 0.71 159 TR_XM_SEO4 2425 1.92 4.43 0.69 160 T_XMDrugObfuBody_00 2398 0.85 1.19 0.68 161 XM_H_PHPMailer 2337 0.59 0.43 0.66 162 MPART_ALT_DIFF_COUNT 2334 0.74 0.90 0.66 163 XMGappySubj_02 2294 0.47 0.10 0.65 164 XM_ShortIntro_01 2289 0.61 0.54 0.65 165 XM_ProductURIs 2230 0.80 1.14 0.63 166 NML_ADSP_CUSTOM_MED 2196 0.63 0.65 0.62 167 XM_B_FormFill 2186 0.43 0.06 0.62 168 XM_B_COVIDMETA 2179 0.70 0.87 0.62 169 XMBody_95 2164 0.45 0.13 0.61 170 XMNoVowels 2151 0.56 0.47 0.61 171 XM_B_COPY_HTML 2103 0.70 0.93 0.60 172 TR_LOTS_OF_MONEY3 2082 1.71 4.00 0.59 173 TR_XM_SPAMCOP 2065 4.62 12.81 0.58 174 XM_RXBody 2047 0.53 0.42 0.58 175 HTML_TAG_BALANCE_BODY 2025 0.77 1.18 0.57 176 SHORT_HELO_AND_INLINE_IMAGE 2007 0.40 0.06 0.57 177 XMPhish14 1978 0.66 0.86 0.56 178 TR_XM_SpammyWords2 1972 5.51 15.54 0.56 179 FORGED_GMAIL_RCVD 1879 0.54 0.55 0.53 180 XM_B_SpammyWords4 1875 1.29 2.82 0.53 181 USER_IN_WELCOMELIST 1843 0.35 0.00 0.52 182 USER_IN_WHITELIST 1843 0.35 0.00 0.52 183 XMPhish30 1777 0.74 1.22 0.50 184 TO_NO_BRKTS_HTML_ONLY 1748 0.43 0.29 0.49 185 HTML_IMAGE_ONLY_28 1739 0.41 0.24 0.49 186 PLING_QUERY 1714 0.57 0.74 0.49 187 XMSubMetaI_00 1712 0.67 1.05 0.48 188 THIS_AD 1664 0.67 1.07 0.47 189 FILL_THIS_FORM 1659 0.38 0.21 0.47 190 XMHTML_After_End 1611 0.74 1.32 0.46 191 RCVD_IN_PSBL 1584 0.48 0.55 0.45 192 XMMoneyMeta_00 1571 0.49 0.58 0.44 193 XMOemUri 1565 0.38 0.25 0.44 194 RELAYCOUNTRY_GB 1531 0.55 0.79 0.43 195 SpammyFromTLD_02 1514 0.77 1.46 0.43 196 HTML_FONT_FACE_BAD 1506 0.51 0.67 0.43 197 HTML_IMAGE_ONLY_32 1499 0.35 0.20 0.42 198 XMSubMetaSxObfu_02 1467 0.38 0.31 0.42 199 XMDateMe_00 1429 0.39 0.36 0.40 200 XM_B_DNDMA 1419 0.64 1.11 0.40 ----------------------------------------------------------------------