Email: 508711 Autolearn: 0 AvgScore: 4.63 AvgScanTime: 1.18 sec Spam: 174133 Autolearn: 0 AvgScore: 13.47 AvgScanTime: 1.27 sec Ham: 334578 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 1.14 sec Time Spent Running SA: 167.09 hours Time Spent Processing Spam: 61.37 hours Time Spent Processing Ham: 105.73 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168681 90.99 96.87 87.93 2 DKIM_SIGNED 159851 82.93 91.80 78.32 3 XM_DK_Pass 154642 81.05 88.81 77.01 4 DKIM_VALID 152197 79.90 87.40 76.00 5 XM_B_Unicode 150944 77.24 86.68 72.33 6 RELAYCOUNTRY_US 143238 83.25 82.26 83.77 7 DCC_CHECK 133021 52.42 76.39 39.94 8 XMListUnsubscribeExists 132213 61.78 75.93 54.42 9 XM_B_SpammyWords 129115 56.51 74.15 47.32 10 DKIM_VALID_AU 112150 62.64 64.40 61.71 11 XM_DK_Undo_02 81977 20.33 47.08 6.41 12 XM_B_Unicode3 75587 42.30 43.41 41.73 13 XM_B_SpammyWords2 74754 28.04 42.93 20.29 14 LOC_TINY_FONT_1 71276 31.96 40.93 27.28 15 HTML_FONT_LOW_CONTRAST 64463 32.80 37.02 30.61 16 BAYES_50 64349 52.25 36.95 60.22 17 FVGT_m_MULTI_ODD 63885 30.41 36.69 27.14 18 RCVD_IN_MSPIKE_H2 63646 32.25 36.55 30.01 19 BAYES_99 63564 15.50 36.50 4.57 20 TR_XM_DKIM_Undo 62490 14.16 35.89 2.85 21 T_KAM_HTML_FONT_INVALID 54844 24.92 31.50 21.50 22 DKIM_VALID_EF 53571 29.63 30.76 29.03 23 BAYES_999 50563 12.26 29.04 3.52 24 TR_DCC_Bayes_99 48554 10.91 27.88 2.08 25 MIME_HTML_ONLY 47367 22.12 27.20 19.48 26 TR_XM_DK_Unsub 41108 17.81 23.61 14.79 27 DCC_CHECK_NEGATIVE 41090 47.55 23.60 60.01 28 T_TM2_M_HEADER_IN_MSG 37920 25.19 21.78 26.97 29 XMSubLong 33324 21.91 19.14 23.36 30 LOTS_OF_MONEY 33220 11.84 19.08 8.07 31 XM_Multi_Part_URI 32402 15.44 18.61 13.78 32 RELAYCOUNTRY_META 32288 9.23 18.54 4.38 33 TR_XM_SpammyWords4 30386 9.76 17.45 5.75 34 TR_MAX_INTL_RELAY 26052 9.85 14.96 7.19 35 UNPARSEABLE_RELAY 25216 12.29 14.48 11.15 36 XM_B_Unsub 25091 10.16 14.41 7.95 37 TR_XM_SpammyRelay 24994 6.54 14.35 2.47 38 TR_XM_SpammyWords2 24810 5.42 14.25 0.82 39 TR_XM_BayesUnsub 23965 8.91 13.76 6.39 40 XM_B_SpammyWords3 23844 7.92 13.69 4.92 41 BOTNET_IPINHOSTNAME 23258 7.58 13.36 4.58 42 RCVD_IN_BL_SPAMCOP_NET 22540 5.16 12.94 1.11 43 TR_XM_SPAMCOP 19471 4.24 11.18 0.63 44 BAYES_80 16125 6.07 9.26 4.40 45 RELAYCOUNTRY_CA 16092 4.04 9.24 1.33 46 XM_Evil_Numbers_Gen 14739 8.22 8.46 8.09 47 BOTNET 14621 3.82 8.40 1.44 48 BAYES_60 13771 9.19 7.91 9.86 49 LotsOfNums_01 13471 8.56 7.74 8.98 50 FSL_BULK_SIG 13351 6.43 7.67 5.78 51 XMBody_17 13093 3.12 7.52 0.82 52 TR_XM_UnparsRelay 12867 3.66 7.39 1.73 53 RCVD_IN_MSPIKE_H3 12345 6.31 7.09 5.91 54 RCVD_IN_MSPIKE_WL 12345 6.31 7.09 5.91 55 TR_LOTS_OF_MONEY3 11888 3.33 6.83 1.51 56 XM_Body_Dirty_Words 11284 4.52 6.48 3.51 57 HTML_IMAGE_RATIO_02 9824 5.06 5.64 4.76 58 UNTRUSTED_Relay 9823 2.90 5.64 1.47 59 XM_B_PhoneNumber 9429 7.96 5.41 9.29 60 BAYES_95 9384 3.68 5.39 2.79 61 MPART_ALT_DIFF 9324 4.34 5.35 3.82 62 XM_UncommonTLD01 9205 4.45 5.29 4.02 63 HTML_IMAGE_RATIO_04 8779 4.68 5.04 4.49 64 XMSubMetaSx_00 8384 4.14 4.81 3.78 65 XM_B_Investor 8179 2.67 4.70 1.62 66 XM_SPF_SoftFail 8024 3.68 4.61 3.19 67 TR_XM_SpammyWords5 7848 2.42 4.51 1.33 68 XM_OfRef6 7825 2.14 4.49 0.92 69 XMStrtUSub 7767 4.52 4.46 4.54 70 TooManyTo_001 7688 7.01 4.42 8.36 71 DKIM_INVALID 7654 3.03 4.40 2.32 72 XM_H_GMP 7633 5.41 4.38 5.94 73 XM_B_SEO 7549 2.42 4.34 1.42 74 XM_H_Long_From01 7036 4.67 4.04 4.99 75 TR_XM_SEO4 6873 1.97 3.95 0.94 76 TR_XM_PhishingBody 6871 2.35 3.95 1.52 77 T_FILL_THIS_FORM_SHORT 6695 1.85 3.84 0.82 78 XM_B_Phish_Phrases 6643 3.31 3.81 3.04 79 HTML_IMAGE_RATIO_08 6624 2.94 3.80 2.50 80 HTML_IMAGE_RATIO_06 6611 3.05 3.80 2.67 81 XMSexyCombo_05 6405 2.41 3.68 1.76 82 TM2_M_VERY_LONG_WORD 6348 2.24 3.65 1.51 83 T_XMDrugObfuBody_08 6197 2.26 3.56 1.59 84 T_XMDrugObfuBody_14 6181 2.51 3.55 1.97 85 MIME_HTML_MOSTLY 6143 2.69 3.53 2.26 86 XMDiploma_00 6105 2.27 3.51 1.62 87 XM_B_SpammyTLD 5969 2.88 3.43 2.60 88 XMNumbers 5698 2.85 3.27 2.64 89 MIME_QP_LONG_LINE 5658 4.76 3.25 5.54 90 SUBJ_ALL_CAPS 5389 2.00 3.09 1.43 91 USER_IN_DEF_DKIM_WL 5336 10.95 3.06 15.06 92 TM2_M_URI_OPT_OUT 5266 2.24 3.02 1.83 93 MIME_HTML_ONLY_MULTI 5047 2.39 2.90 2.12 94 XM_UB50 5027 1.56 2.89 0.87 95 XM_B_SpammyWords4 4937 1.42 2.84 0.69 96 XMBrknScrpt_02 4563 1.60 2.62 1.07 97 URI_TRY_3LD 4459 1.51 2.56 0.97 98 T_XMHurry_00 4211 1.25 2.42 0.65 99 RCVD_IN_VALIDITY_RPBL 4195 0.89 2.41 0.10 100 XM_CamelCaseFrm001 4146 2.51 2.38 2.58 101 XM_URI_RBL 4104 0.91 2.36 0.16 102 HOSTED_IMG_MULTI_PUB_01 3954 0.79 2.27 0.02 103 XM_B_Unsub2 3846 1.64 2.21 1.34 104 FONT_INVIS_LONG_LINE 3828 0.78 2.20 0.05 105 HTML_MIME_NO_HTML_TAG 3824 2.11 2.20 2.06 106 RELAYCOUNTRY_AU 3819 1.40 2.19 0.99 107 TR_XM_FormFill 3735 0.74 2.14 0.01 108 RCVD_IN_VALIDITY_SAFE 3676 4.34 2.11 5.50 109 FROM_EXCESS_BASE64 3478 1.79 2.00 1.67 110 T_TooManySym_01 3456 4.07 1.98 5.16 111 T_REMOTE_IMAGE 3432 3.19 1.97 3.82 112 SpammyFromTLD_01 3356 1.15 1.93 0.74 113 TR_XM_BayesRelay 3236 0.64 1.86 0.00 114 XMStockSpam_06 3068 1.40 1.76 1.21 115 TR_XM_NoHeaderRelay 3020 0.70 1.73 0.16 116 BAYES_40 3005 3.33 1.73 4.16 117 MAILING_LIST_MULTI 2934 2.41 1.68 2.79 118 RCVD_IN_VALIDITY_CERTIFIED 2927 3.79 1.68 4.88 119 HTTPS_HTTP_MISMATCH 2920 1.18 1.68 0.92 120 XM_DK_Undo_01 2852 1.73 1.64 1.79 121 T_XMDrugObfuBody_00 2761 1.01 1.59 0.71 122 XMGenDplmaNmb 2734 1.14 1.57 0.92 123 ANY_BOUNCE_MESSAGE 2648 2.82 1.52 3.49 124 BOUNCE_MESSAGE 2648 2.82 1.52 3.49 125 URI_NOVOWEL 2605 1.25 1.50 1.12 126 TR_XM_INV_DKIM 2589 0.59 1.49 0.12 127 RCVD_IN_IADB_LISTED 2574 3.11 1.48 3.96 128 URIBL_DBL_SPAM 2538 0.51 1.46 0.01 129 KHOP_HELO_FCRDNS 2460 1.48 1.41 1.52 130 ALL_TRUSTED 2414 8.95 1.39 12.88 131 XM_B_Phish66 2365 0.67 1.36 0.31 132 XM_DIRTYINTL 2342 0.67 1.34 0.31 133 XMSubMetaI_00 2322 0.92 1.33 0.71 134 XM_HighProb1 2289 0.45 1.31 0.01 135 SpammyFromTLD_02 2280 0.79 1.31 0.51 136 TR_Mismatch_TLD_02 2252 0.48 1.29 0.06 137 RCVD_IN_IADB_SPF 2228 2.74 1.28 3.50 138 XM_SendGrid 2222 1.44 1.28 1.52 139 HTML_TAG_BALANCE_BODY 2213 0.78 1.27 0.52 140 RCVD_IN_IADB_SENDERID 2106 2.48 1.21 3.14 141 HK_RANDOM_REPLYTO 2088 0.48 1.20 0.11 142 URI_HEX 2054 1.08 1.18 1.03 143 RCVD_IN_IADB_DK 2045 2.40 1.17 3.04 144 AC_BR_BONANZA 2035 0.47 1.17 0.11 145 XMHTMLBadTable_001 2033 0.62 1.17 0.33 146 XMBdyGiftCard01 1969 0.76 1.13 0.56 147 TR_XM_PHPForged 1968 0.61 1.13 0.34 148 DKIM_ADSP_NXDOMAIN 1931 0.59 1.11 0.32 149 RDNS_DYNAMIC 1925 0.56 1.11 0.28 150 THIS_AD 1905 0.60 1.09 0.34 151 TR_Caps_n_Bayes_99 1904 0.39 1.09 0.02 152 XMPhish30 1903 0.77 1.09 0.60 153 TR_XM_PHPDW 1901 0.60 1.09 0.34 154 TR_XM_FormFill2 1887 0.60 1.08 0.35 155 XM_H_PHPOS 1867 0.59 1.07 0.34 156 XMMoneyMeta_00 1846 0.66 1.06 0.46 157 DKIM_ADSP_CUSTOM_MED 1845 0.88 1.06 0.79 158 XMSexyCombo_01 1822 0.58 1.05 0.34 159 TR_LOTS_OF_MONEY2 1821 0.57 1.05 0.33 160 T_MONEY_PERCENT 1821 0.57 1.05 0.33 161 TR_XM_Base64_M1 1817 0.72 1.04 0.56 162 MPART_ALT_DIFF_COUNT 1815 0.78 1.04 0.65 163 BAYES_20 1768 2.38 1.02 3.10 164 RCVD_IN_PSBL 1730 0.65 0.99 0.47 165 RELAYCOUNTRY_GB 1681 0.63 0.97 0.45 166 XMReplyNow 1678 0.51 0.96 0.27 167 TR_Mismatch_TLD_01 1659 0.49 0.95 0.24 168 TR_XM_InvalidRelay 1615 0.34 0.93 0.03 169 T_STY_INVIS_DIRECT 1604 0.55 0.92 0.36 170 XM_H_Long_From02 1590 1.02 0.91 1.08 171 TR_MetaPhish_Combo_01 1558 0.74 0.89 0.66 172 TR_Symld_Words 1550 1.26 0.89 1.45 173 NML_ADSP_CUSTOM_MED 1519 0.61 0.87 0.48 174 XM_H_Undi_Recip 1512 0.40 0.87 0.16 175 HTML_FONT_FACE_BAD 1511 0.62 0.87 0.49 176 XMHTML_After_End 1502 0.50 0.86 0.31 177 XM_B_COPY_HTML 1475 0.70 0.85 0.63 178 XM_UB99 1473 0.29 0.85 0.00 179 TR_XM_DK_SendGrid 1449 0.95 0.83 1.01 180 XMPhish14 1429 0.54 0.82 0.39 181 LongTLD 1423 0.56 0.82 0.42 182 URIBL_CSS 1399 0.39 0.80 0.18 183 URIBL_CSS_A 1399 0.39 0.80 0.18 184 TVD_RCVD_IP 1397 1.29 0.80 1.55 185 HTML_FONT_SIZE_LARGE 1378 0.31 0.79 0.05 186 RCVD_IN_IADB_VOUCHED 1359 1.97 0.78 2.59 187 TM2_M_OBFU_COMMENT 1353 0.48 0.78 0.33 188 FORGED_GMAIL_RCVD 1343 0.56 0.77 0.45 189 XM_OfRef7 1338 0.34 0.77 0.12 190 TooManyTo_002 1328 1.96 0.76 2.58 191 AC_HTML_NONSENSE_TAGS 1322 0.28 0.76 0.03 192 HTML_IMAGE_ONLY_08 1316 0.34 0.76 0.12 193 XMSlimDrugH 1272 0.50 0.73 0.37 194 RELAYCOUNTRY_FR 1266 0.39 0.73 0.21 195 XMClaimOffer 1226 0.51 0.70 0.41 196 XMBody_78 1215 0.39 0.70 0.23 197 XM_Dr_From 1190 0.32 0.68 0.13 198 BOTNET_NORDNS 1188 0.24 0.68 0.01 199 XM_B_DNDMA 1186 0.63 0.68 0.61 200 XM_ProductURIs 1185 0.60 0.68 0.55 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 294193 90.99 96.87 87.93 2 RELAYCOUNTRY_US 280274 83.25 82.26 83.77 3 DKIM_SIGNED 262043 82.93 91.80 78.32 4 XM_DK_Pass 257658 81.05 88.81 77.01 5 DKIM_VALID 254284 79.90 87.40 76.00 6 XM_B_Unicode 241996 77.24 86.68 72.33 7 DKIM_VALID_AU 206482 62.64 64.40 61.71 8 BAYES_50 201470 52.25 36.95 60.22 9 DCC_CHECK_NEGATIVE 200785 47.55 23.60 60.01 10 XMListUnsubscribeExists 182077 61.78 75.93 54.42 11 XM_B_SpammyWords 158337 56.51 74.15 47.32 12 XM_B_Unicode3 139603 42.30 43.41 41.73 13 DCC_CHECK 133645 52.42 76.39 39.94 14 HTML_FONT_LOW_CONTRAST 102406 32.80 37.02 30.61 15 RCVD_IN_MSPIKE_H2 100402 32.25 36.55 30.01 16 DKIM_VALID_EF 97135 29.63 30.76 29.03 17 LOC_TINY_FONT_1 91287 31.96 40.93 27.28 18 FVGT_m_MULTI_ODD 90821 30.41 36.69 27.14 19 T_TM2_M_HEADER_IN_MSG 90229 25.19 21.78 26.97 20 XMSubLong 78154 21.91 19.14 23.36 21 T_KAM_HTML_FONT_INVALID 71932 24.92 31.50 21.50 22 XM_B_SpammyWords2 67884 28.04 42.93 20.29 23 MIME_HTML_ONLY 65166 22.12 27.20 19.48 24 USER_IN_DEF_DKIM_WL 50387 10.95 3.06 15.06 25 TR_XM_DK_Unsub 49473 17.81 23.61 14.79 26 XM_Multi_Part_URI 46118 15.44 18.61 13.78 27 ALL_TRUSTED 43104 8.95 1.39 12.88 28 UNPARSEABLE_RELAY 37298 12.29 14.48 11.15 29 BAYES_60 32982 9.19 7.91 9.86 30 XM_B_PhoneNumber 31074 7.96 5.41 9.29 31 BAYES_00 30145 6.16 0.68 9.01 32 LotsOfNums_01 30050 8.56 7.74 8.98 33 TooManyTo_001 27963 7.01 4.42 8.36 34 XM_Evil_Numbers_Gen 27074 8.22 8.46 8.09 35 LOTS_OF_MONEY 27012 11.84 19.08 8.07 36 XM_B_Unsub 26592 10.16 14.41 7.95 37 XM_DKIMWhitelistDomains 24575 4.84 0.02 7.35 38 TR_MAX_INTL_RELAY 24067 9.85 14.96 7.19 39 IN_ZIMBRA_NJ_WHITELIST 24046 4.76 0.08 7.19 40 TR_XM_DK_Bayes 22340 4.57 0.52 6.68 41 TR_XM_DK_Bayes1 21982 4.50 0.52 6.57 42 XM_DK_Undo_02 21453 20.33 47.08 6.41 43 TR_XM_BayesUnsub 21367 8.91 13.76 6.39 44 XM_H_GMP 19869 5.41 4.38 5.94 45 RCVD_IN_MSPIKE_WL 19779 6.31 7.09 5.91 46 RCVD_IN_MSPIKE_H3 19778 6.31 7.09 5.91 47 FSL_BULK_SIG 19339 6.43 7.67 5.78 48 TR_XM_SpammyWords4 19248 9.76 17.45 5.75 49 TR_XM_DK_Bayes2 19116 3.86 0.29 5.71 50 MIME_QP_LONG_LINE 18544 4.76 3.25 5.54 51 RCVD_IN_VALIDITY_SAFE 18415 4.34 2.11 5.50 52 T_TooManySym_01 17261 4.07 1.98 5.16 53 XM_H_Long_From01 16710 4.67 4.04 4.99 54 XM_B_SpammyWords3 16452 7.92 13.69 4.92 55 RCVD_IN_VALIDITY_CERTIFIED 16335 3.79 1.68 4.88 56 HTML_IMAGE_RATIO_02 15941 5.06 5.64 4.76 57 XM_PDF 15496 3.27 0.66 4.63 58 BOTNET_IPINHOSTNAME 15316 7.58 13.36 4.58 59 BAYES_99 15302 15.50 36.50 4.57 60 XMStrtUSub 15204 4.52 4.46 4.54 61 HTML_IMAGE_RATIO_04 15011 4.68 5.04 4.49 62 BAYES_80 14732 6.07 9.26 4.40 63 RELAYCOUNTRY_META 14670 9.23 18.54 4.38 64 BAYES_40 13927 3.33 1.73 4.16 65 XM_UncommonTLD01 13434 4.45 5.29 4.02 66 RCVD_IN_IADB_LISTED 13257 3.11 1.48 3.96 67 T_REMOTE_IMAGE 12783 3.19 1.97 3.82 68 MPART_ALT_DIFF 12765 4.34 5.35 3.82 69 XMSubMetaSx_00 12663 4.14 4.81 3.78 70 BAYES_999 11780 12.26 29.04 3.52 71 XM_Body_Dirty_Words 11735 4.52 6.48 3.51 72 RCVD_IN_IADB_SPF 11717 2.74 1.28 3.50 73 ANY_BOUNCE_MESSAGE 11693 2.82 1.52 3.49 74 BOUNCE_MESSAGE 11692 2.82 1.52 3.49 75 XM_SPF_SoftFail 10687 3.68 4.61 3.19 76 RCVD_IN_IADB_SENDERID 10513 2.48 1.21 3.14 77 BAYES_20 10358 2.38 1.02 3.10 78 RCVD_IN_IADB_DK 10179 2.40 1.17 3.04 79 XM_B_Phish_Phrases 10170 3.31 3.81 3.04 80 TR_XM_DKIM_Undo 9532 14.16 35.89 2.85 81 BAYES_95 9328 3.68 5.39 2.79 82 MAILING_LIST_MULTI 9324 2.41 1.68 2.79 83 HTML_IMAGE_RATIO_06 8920 3.05 3.80 2.67 84 XMNumbers 8825 2.85 3.27 2.64 85 XM_B_SpammyTLD 8701 2.88 3.43 2.60 86 RCVD_IN_IADB_VOUCHED 8662 1.97 0.78 2.59 87 XM_CamelCaseFrm001 8640 2.51 2.38 2.58 88 TooManyTo_002 8640 1.96 0.76 2.58 89 T_TooManySym_02 8499 1.89 0.63 2.54 90 HTML_IMAGE_RATIO_08 8350 2.94 3.80 2.50 91 TR_XM_SpammyRelay 8267 6.54 14.35 2.47 92 DKIM_INVALID 7759 3.03 4.40 2.32 93 MIME_HTML_MOSTLY 7557 2.69 3.53 2.26 94 INVALID_MSGID 7349 1.51 0.19 2.20 95 TO_MALFORMED 7172 1.49 0.23 2.14 96 MIME_HTML_ONLY_MULTI 7099 2.39 2.90 2.12 97 TR_DCC_Bayes_99 6950 10.91 27.88 2.08 98 HTML_MIME_NO_HTML_TAG 6886 2.11 2.20 2.06 99 T_XMDrugObfuBody_14 6594 2.51 3.55 1.97 100 BAYES_05 6332 1.44 0.56 1.89 101 TM2_M_URI_OPT_OUT 6138 2.24 3.02 1.83 102 XM_DK_Undo_01 5973 1.73 1.64 1.79 103 XMSexyCombo_05 5880 2.41 3.68 1.76 104 RCVD_IN_IADB_OPTIN 5856 1.32 0.49 1.75 105 TR_XM_UnparsRelay 5772 3.66 7.39 1.73 106 FROM_EXCESS_BASE64 5603 1.79 2.00 1.67 107 XMDiploma_00 5418 2.27 3.51 1.62 108 XM_B_Investor 5415 2.67 4.70 1.62 109 T_XMDrugObfuBody_08 5312 2.26 3.56 1.59 110 HELO_NODOT 5269 1.10 0.18 1.57 111 HELO_NO_DOMAIN 5268 1.10 0.18 1.57 112 TVD_RCVD_IP 5187 1.29 0.80 1.55 113 IN_HORDE_ADDRESS_BOOK 5112 1.02 0.06 1.53 114 TR_XM_PhishingBody 5098 2.35 3.95 1.52 115 XM_SendGrid 5092 1.44 1.28 1.52 116 KHOP_HELO_FCRDNS 5079 1.48 1.41 1.52 117 TM2_M_VERY_LONG_WORD 5039 2.24 3.65 1.51 118 TR_LOTS_OF_MONEY3 5036 3.33 6.83 1.51 119 UNTRUSTED_Relay 4912 2.90 5.64 1.47 120 TR_Symld_Words 4837 1.26 0.89 1.45 121 XMGappySubj_01 4837 0.98 0.10 1.45 122 TooManyTo_003 4836 1.18 0.68 1.45 123 BOTNET 4825 3.82 8.40 1.44 124 SUBJ_ALL_CAPS 4776 2.00 3.09 1.43 125 XM_B_SEO 4752 2.42 4.34 1.42 126 XM_B_Unsub2 4494 1.64 2.21 1.34 127 TR_XM_SpammyWords5 4465 2.42 4.51 1.33 128 RELAYCOUNTRY_CA 4462 4.04 9.24 1.33 129 XM_GoogleGroups 4070 0.99 0.54 1.22 130 XMStockSpam_06 4058 1.40 1.76 1.21 131 TVD_SPACE_RATIO 3999 0.83 0.13 1.20 132 XMBSHREFv2 3835 0.86 0.32 1.15 133 URI_NOVOWEL 3756 1.25 1.50 1.12 134 RCVD_IN_BL_SPAMCOP_NET 3713 5.16 12.94 1.11 135 XM_H_Long_From02 3612 1.02 0.91 1.08 136 XMBrknScrpt_02 3596 1.60 2.62 1.07 137 TooManyTo_004 3546 0.91 0.63 1.06 138 URI_HEX 3441 1.08 1.18 1.03 139 TR_XM_DK_SendGrid 3365 0.95 0.83 1.01 140 RELAYCOUNTRY_AU 3316 1.40 2.19 0.99 141 URI_TRY_3LD 3235 1.51 2.56 0.97 142 TR_XM_SEO4 3145 1.97 3.95 0.94 143 FROM_GOV_DKIM_AU 3138 0.67 0.16 0.94 144 XM_OfRef6 3086 2.14 4.49 0.92 145 T_TooManySym_03 3084 0.68 0.20 0.92 146 XMGenDplmaNmb 3076 1.14 1.57 0.92 147 HTTPS_HTTP_MISMATCH 3069 1.18 1.68 0.92 148 XMCapTrack 2989 0.72 0.39 0.89 149 XM_UB50 2902 1.56 2.89 0.87 150 TooManyTo_005 2866 0.77 0.60 0.86 151 XMBody_95 2762 0.60 0.18 0.83 152 XMBody_17 2760 3.12 7.52 0.82 153 TR_XM_SpammyWords2 2753 5.42 14.25 0.82 154 T_FILL_THIS_FORM_SHORT 2734 1.85 3.84 0.82 155 XMGappySubj_02 2687 0.55 0.05 0.80 156 DKIM_ADSP_CUSTOM_MED 2648 0.88 1.06 0.79 157 SpammyFromTLD_01 2492 1.15 1.93 0.74 158 T_XMDrugObfuBody_00 2371 1.01 1.59 0.71 159 XMSubMetaI_00 2359 0.92 1.33 0.71 160 XM_ShortIntro_01 2329 0.60 0.41 0.70 161 XM_B_SpammyWords4 2312 1.42 2.84 0.69 162 T_OBFU_PDF_ATTACH 2299 0.51 0.18 0.69 163 XM_RXBody 2259 0.55 0.30 0.68 164 TR_MetaPhish_Combo_01 2222 0.74 0.89 0.66 165 T_XMHurry_00 2161 1.25 2.42 0.65 166 MPART_ALT_DIFF_COUNT 2159 0.78 1.04 0.65 167 XM_H_PHPMailer 2154 0.62 0.57 0.64 168 TR_XM_SPAMCOP 2123 4.24 11.18 0.63 169 XM_B_FormFill 2103 0.42 0.03 0.63 170 XM_B_COPY_HTML 2094 0.70 0.85 0.63 171 XM_B_DNDMA 2037 0.63 0.68 0.61 172 USER_IN_WELCOMELIST 2005 0.39 0.00 0.60 173 USER_IN_WHITELIST 2005 0.39 0.00 0.60 174 XMPhish30 2004 0.77 1.09 0.60 175 XMNoVowels 1955 0.53 0.42 0.58 176 XMBdyGiftCard01 1880 0.76 1.13 0.56 177 TR_XM_Base64_M1 1864 0.72 1.04 0.56 178 XM_ProductURIs 1848 0.60 0.68 0.55 179 HTML_TAG_BALANCE_BODY 1733 0.78 1.27 0.52 180 SpammyFromTLD_02 1714 0.79 1.31 0.51 181 SHORT_HELO_AND_INLINE_IMAGE 1688 0.34 0.04 0.50 182 HTML_FONT_FACE_BAD 1641 0.62 0.87 0.49 183 XM_B_REG_HTML 1622 0.51 0.54 0.48 184 HTML_IMAGE_ONLY_20 1592 0.50 0.53 0.48 185 NML_ADSP_CUSTOM_MED 1591 0.61 0.87 0.48 186 TM2_M_BODY_EMPTY 1587 0.35 0.11 0.47 187 TO_NO_BRKTS_HTML_ONLY 1581 0.38 0.21 0.47 188 RCVD_IN_PSBL 1561 0.65 0.99 0.47 189 XMMoneyMeta_00 1532 0.66 1.06 0.46 190 PLING_QUERY 1527 0.51 0.60 0.46 191 HTML_IMAGE_ONLY_28 1526 0.42 0.35 0.46 192 RELAYCOUNTRY_GB 1507 0.63 0.97 0.45 193 FORGED_GMAIL_RCVD 1502 0.56 0.77 0.45 194 HTML_IMAGE_ONLY_32 1495 0.37 0.21 0.45 195 XMLngstWrd_00 1425 0.42 0.40 0.43 196 XMSubMetaSxObfu_02 1423 0.40 0.35 0.43 197 LongTLD 1407 0.56 0.82 0.42 198 XMClaimOffer 1363 0.51 0.70 0.41 199 XMPhish14 1302 0.54 0.82 0.39 200 SHOPIFY_IMG_NOT_RCVD_SFY 1292 0.48 0.66 0.39 ----------------------------------------------------------------------