Email: 537797 Autolearn: 0 AvgScore: 3.96 AvgScanTime: 1.40 sec Spam: 170470 Autolearn: 0 AvgScore: 12.94 AvgScanTime: 1.52 sec Ham: 367327 Autolearn: 0 AvgScore: -0.21 AvgScanTime: 1.35 sec Time Spent Running SA: 209.45 hours Time Spent Processing Spam: 72.15 hours Time Spent Processing Ham: 137.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165600 91.46 97.14 88.82 2 DKIM_SIGNED 157365 82.89 92.31 78.52 3 XM_DK_Pass 151693 80.99 88.99 77.28 4 DKIM_VALID 149831 79.97 87.89 76.29 5 RELAYCOUNTRY_US 148401 84.98 87.05 84.01 6 XM_B_Unicode 147467 77.13 86.51 72.78 7 DCC_CHECK 132057 53.29 77.47 42.07 8 XMListUnsubscribeExists 126917 60.57 74.45 54.12 9 XM_B_SpammyWords 125141 55.52 73.41 47.21 10 DKIM_VALID_AU 120258 64.66 70.54 61.92 11 XM_B_Unicode3 79195 43.40 46.46 41.98 12 LOC_TINY_FONT_1 74189 33.33 43.52 28.61 13 XM_DK_Undo_02 73503 17.58 43.12 5.73 14 XM_B_SpammyWords2 72574 27.27 42.57 20.17 15 HTML_FONT_LOW_CONTRAST 68464 32.72 40.16 29.26 16 BAYES_50 67626 53.81 39.67 60.37 17 RCVD_IN_MSPIKE_H2 67008 33.97 39.31 31.49 18 FVGT_m_MULTI_ODD 62896 30.53 36.90 27.57 19 BAYES_99 58107 13.77 34.09 4.34 20 TR_XM_DKIM_Undo 54565 12.02 32.01 2.74 21 T_KAM_HTML_FONT_INVALID 51965 24.90 30.48 22.31 22 DKIM_VALID_EF 47745 29.18 28.01 29.72 23 BAYES_999 45580 10.67 26.74 3.21 24 TR_DCC_Bayes_99 44469 9.76 26.09 2.19 25 T_TM2_M_HEADER_IN_MSG 41328 26.43 24.24 27.44 26 MIME_HTML_ONLY 40848 20.43 23.96 18.79 27 DCC_CHECK_NEGATIVE 38396 46.67 22.52 57.88 28 XMSubLong 38314 22.43 22.48 22.41 29 XM_Multi_Part_URI 35044 16.84 20.56 15.11 30 TR_XM_DK_Unsub 34349 16.27 20.15 14.48 31 LOTS_OF_MONEY 28498 9.50 16.72 6.15 32 XM_B_Unsub 26042 10.47 15.28 8.24 33 TR_XM_SpammyWords4 25997 7.79 15.25 4.33 34 UNPARSEABLE_RELAY 25438 12.16 14.92 10.88 35 TR_MAX_INTL_RELAY 24954 9.55 14.64 7.19 36 TR_XM_BayesUnsub 24945 9.33 14.63 6.86 37 BOTNET_IPINHOSTNAME 24875 7.32 14.59 3.94 38 XM_B_SpammyWords3 24436 8.24 14.33 5.41 39 RELAYCOUNTRY_META 23278 7.11 13.66 4.07 40 TR_XM_SpammyWords2 23207 4.85 13.61 0.78 41 TR_XM_SpammyRelay 16893 4.61 9.91 2.15 42 XM_Evil_Numbers_Gen 15774 8.84 9.25 8.64 43 BAYES_80 15401 5.90 9.03 4.45 44 BOTNET 15381 3.61 9.02 1.09 45 FSL_BULK_SIG 14667 6.33 8.60 5.28 46 BAYES_60 13619 8.97 7.99 9.42 47 TR_XM_UnparsRelay 13010 3.51 7.63 1.60 48 LotsOfNums_01 12809 8.51 7.51 8.97 49 RCVD_IN_BL_SPAMCOP_NET 12642 2.91 7.42 0.82 50 XM_Body_Dirty_Words 11514 4.42 6.75 3.34 51 HTML_IMAGE_RATIO_02 10760 6.23 6.31 6.19 52 XM_B_PhoneNumber 10586 8.98 6.21 10.27 53 TR_LOTS_OF_MONEY3 9784 2.31 5.74 0.73 54 MPART_ALT_DIFF 9622 4.49 5.64 3.96 55 TR_XM_SPAMCOP 9609 2.11 5.64 0.48 56 XM_B_SEO 9427 2.61 5.53 1.26 57 XMSubMetaSx_00 9249 4.10 5.43 3.49 58 TooManyTo_001 9243 7.32 5.42 8.20 59 UNTRUSTED_Relay 9235 2.69 5.42 1.42 60 HTML_IMAGE_RATIO_04 8941 4.95 5.24 4.81 61 BAYES_95 8846 3.52 5.19 2.74 62 XM_H_Long_From01 8752 5.43 5.13 5.56 63 XM_SPF_SoftFail 8577 3.78 5.03 3.19 64 XM_B_Investor 8563 2.71 5.02 1.63 65 XM_B_Phish_Phrases 8454 4.28 4.96 3.97 66 HTML_IMAGE_RATIO_06 8402 4.03 4.93 3.62 67 TR_XM_SEO4 8240 2.05 4.83 0.75 68 XMBody_17 8213 1.91 4.82 0.56 69 XM_UncommonTLD01 8029 3.97 4.71 3.63 70 XM_OfRef6 7877 2.18 4.62 1.04 71 RELAYCOUNTRY_CA 7778 2.30 4.56 1.25 72 TR_XM_SpammyWords5 7553 2.64 4.43 1.81 73 DKIM_INVALID 7534 2.92 4.42 2.23 74 XM_H_GMP 7212 5.57 4.23 6.20 75 TR_XM_PhishingBody 7193 2.42 4.22 1.58 76 HTML_IMAGE_RATIO_08 6836 3.07 4.01 2.63 77 XMNumbers 6684 3.24 3.92 2.92 78 MIME_HTML_MOSTLY 6320 2.71 3.71 2.24 79 XMSexyCombo_05 6214 1.91 3.65 1.11 80 XMStrtUSub 6117 4.35 3.59 4.70 81 T_XMDrugObfuBody_14 6072 2.70 3.56 2.29 82 MIME_QP_LONG_LINE 5894 4.69 3.46 5.26 83 MIME_HTML_ONLY_MULTI 5757 2.73 3.38 2.43 84 TM2_M_URI_OPT_OUT 5600 2.12 3.29 1.58 85 RCVD_IN_VALIDITY_RPBL 5486 1.12 3.22 0.15 86 XM_B_SpammyTLD 5475 2.59 3.21 2.30 87 USER_IN_DEF_DKIM_WL 5441 11.32 3.19 15.10 88 T_XMDrugObfuBody_08 5339 2.35 3.13 1.98 89 TM2_M_VERY_LONG_WORD 5321 2.07 3.12 1.58 90 XM_CamelCaseFrm001 5136 2.63 3.01 2.46 91 XM_URI_RBL 4834 1.00 2.84 0.15 92 RCVD_IN_VALIDITY_SAFE 4798 4.82 2.81 5.75 93 T_TooManySym_01 4693 4.34 2.75 5.07 94 XM_UB50 4569 1.44 2.68 0.86 95 T_XMHurry_00 4557 1.41 2.67 0.82 96 XMDiploma_00 4476 2.01 2.63 1.73 97 RCVD_IN_MSPIKE_H3 4367 5.09 2.56 6.26 98 RCVD_IN_MSPIKE_WL 4367 5.09 2.56 6.26 99 XM_B_SpammyWords4 4283 1.52 2.51 1.06 100 XM_B_Unsub2 4203 1.74 2.47 1.41 101 RELAYCOUNTRY_AU 4115 1.31 2.41 0.79 102 XMBrknScrpt_02 3967 1.40 2.33 0.97 103 URI_TRY_3LD 3685 1.39 2.16 1.03 104 SUBJ_ALL_CAPS 3683 1.80 2.16 1.63 105 RCVD_IN_VALIDITY_CERTIFIED 3657 3.85 2.15 4.64 106 TR_XM_NoHeaderRelay 3471 0.80 2.04 0.22 107 MAILING_LIST_MULTI 3444 2.48 2.02 2.70 108 T_FILL_THIS_FORM_SHORT 3159 1.24 1.85 0.96 109 XM_DK_Undo_01 3051 1.84 1.79 1.87 110 XMStockSpam_06 3050 1.36 1.79 1.17 111 BAYES_40 2870 3.62 1.68 4.52 112 HTML_MIME_NO_HTML_TAG 2850 1.92 1.67 2.03 113 XM_H_Long_From02 2827 1.24 1.66 1.05 114 T_REMOTE_IMAGE 2822 2.84 1.66 3.39 115 FROM_EXCESS_BASE64 2812 1.93 1.65 2.06 116 T_XMDrugObfuBody_00 2792 1.10 1.64 0.84 117 AC_BR_BONANZA 2762 0.60 1.62 0.13 118 SpammyFromTLD_01 2759 1.08 1.62 0.83 119 HTML_TAG_BALANCE_BODY 2749 0.96 1.61 0.66 120 SpammyFromTLD_02 2722 0.79 1.60 0.42 121 XM_HighProb1 2653 0.50 1.56 0.00 122 LONGLN_LOW_CONTRAST 2623 0.64 1.54 0.22 123 XM_SendGrid 2621 1.49 1.54 1.47 124 TR_XM_INV_DKIM 2569 0.52 1.51 0.07 125 THIS_AD 2543 0.87 1.49 0.58 126 URI_HEX 2543 1.26 1.49 1.16 127 HTTPS_HTTP_MISMATCH 2515 1.11 1.48 0.94 128 RCVD_IN_IADB_LISTED 2512 3.23 1.47 4.04 129 ANY_BOUNCE_MESSAGE 2411 2.72 1.41 3.33 130 BOUNCE_MESSAGE 2410 2.72 1.41 3.33 131 XMPhish30 2356 0.73 1.38 0.43 132 XMBdyGiftCard01 2315 0.98 1.36 0.81 133 XMGenDplmaNmb 2254 1.09 1.32 0.99 134 HOSTED_IMG_MULTI_PUB_01 2242 0.44 1.32 0.03 135 RCVD_IN_IADB_SPF 2229 2.85 1.31 3.57 136 ALL_TRUSTED 2209 9.09 1.30 12.70 137 KHOP_HELO_FCRDNS 2107 1.26 1.24 1.28 138 RCVD_IN_IADB_SENDERID 2095 2.58 1.23 3.20 139 RCVD_IN_IADB_DK 2083 2.51 1.22 3.11 140 TR_XM_PHPForged 2019 0.59 1.18 0.32 141 TR_XM_PHPDW 1988 0.59 1.17 0.33 142 TR_XM_Spammywords 1945 0.67 1.14 0.45 143 XM_S_SpammyWords 1945 0.67 1.14 0.45 144 TR_LOTS_OF_MONEY2 1942 0.51 1.14 0.21 145 T_MONEY_PERCENT 1942 0.51 1.14 0.21 146 TR_XM_FormFill2 1940 0.58 1.14 0.32 147 XM_H_PHPOS 1928 0.57 1.13 0.31 148 BAYES_20 1905 2.56 1.12 3.23 149 XMHTML_After_End 1835 0.55 1.08 0.30 150 XMReplyNow 1788 0.50 1.05 0.24 151 TR_XM_InvalidRelay 1783 0.36 1.05 0.04 152 URI_NOVOWEL 1771 1.19 1.04 1.26 153 TR_Caps_n_Bayes_99 1762 0.35 1.03 0.03 154 TR_XM_FormFill 1732 0.33 1.02 0.02 155 XM_DIRTYINTL 1713 0.44 1.00 0.18 156 DATE_IN_PAST_03_06 1712 0.38 1.00 0.09 157 TR_Symld_Words 1690 1.34 0.99 1.50 158 XMLngstWrd_00 1684 0.81 0.99 0.73 159 TooManyTo_002 1668 1.94 0.98 2.39 160 DKIM_ADSP_CUSTOM_MED 1659 0.85 0.97 0.79 161 XM_B_Phish66 1630 0.53 0.96 0.33 162 XMMoneyMeta_00 1610 0.70 0.94 0.58 163 XMPhish14 1601 0.59 0.94 0.43 164 XM_B_DNDMA 1599 0.78 0.94 0.71 165 XMSexyCombo_01 1588 0.45 0.93 0.22 166 MPART_ALT_DIFF_COUNT 1581 0.68 0.93 0.57 167 T_STY_INVIS_DIRECT 1574 0.50 0.92 0.31 168 XMSubMetaI_00 1549 0.73 0.91 0.65 169 RELAYCOUNTRY_FR 1539 0.43 0.90 0.21 170 XM_B_COPY_HTML 1529 0.80 0.90 0.75 171 RELAYCOUNTRY_GB 1501 0.59 0.88 0.46 172 TooManyTo_003 1494 1.20 0.88 1.35 173 AC_HTML_NONSENSE_TAGS 1489 0.29 0.87 0.02 174 RDNS_DYNAMIC 1480 0.49 0.87 0.32 175 BOTNET_NORDNS 1474 0.28 0.86 0.00 176 XM_UB99 1462 0.27 0.86 0.00 177 PDS_RDNS_DYNAMIC_FP 1460 0.38 0.86 0.16 178 TR_XM_DK_SendGrid 1454 0.88 0.85 0.89 179 XM_ProductURIs 1412 0.70 0.83 0.64 180 T_TooManySym_02 1410 1.98 0.83 2.52 181 XMHTMLBadTable_001 1385 0.43 0.81 0.26 182 TooManyTo_004 1380 0.94 0.81 1.00 183 DKIM_ADSP_NXDOMAIN 1379 0.45 0.81 0.29 184 XMBody_78 1373 0.43 0.81 0.25 185 XM_PDF 1359 3.15 0.80 4.24 186 TooManyTo_005 1333 0.81 0.78 0.83 187 NML_ADSP_CUSTOM_MED 1318 0.59 0.77 0.51 188 T_Symld_Words_02 1308 0.59 0.77 0.50 189 TR_XM_Base64_M1 1292 0.65 0.76 0.60 190 XMPhish08 1285 0.46 0.75 0.33 191 URIBL_BLACK 1284 0.27 0.75 0.04 192 TR_Mismatch_TLD_02 1278 0.28 0.75 0.06 193 RCVD_IN_IADB_VOUCHED 1277 2.05 0.75 2.65 194 HTML_FONT_TINY_NORDNS 1277 0.32 0.75 0.12 195 TR_MetaPhish_Combo_01 1264 0.82 0.74 0.86 196 TVD_RCVD_IP 1263 1.23 0.74 1.45 197 FORGED_GMAIL_RCVD 1260 0.54 0.74 0.45 198 TM2_M_A_HREF_HREF 1248 0.40 0.73 0.24 199 XM_UB60 1240 0.27 0.73 0.06 200 TR_Mismatch_TLD_01 1230 0.36 0.72 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 326256 91.46 97.14 88.82 2 RELAYCOUNTRY_US 308594 84.98 87.05 84.01 3 DKIM_SIGNED 288433 82.89 92.31 78.52 4 XM_DK_Pass 283879 80.99 88.99 77.28 5 DKIM_VALID 280247 79.97 87.89 76.29 6 XM_B_Unicode 267354 77.13 86.51 72.78 7 DKIM_VALID_AU 227465 64.66 70.54 61.92 8 BAYES_50 221737 53.81 39.67 60.37 9 DCC_CHECK_NEGATIVE 212612 46.67 22.52 57.88 10 XMListUnsubscribeExists 198814 60.57 74.45 54.12 11 XM_B_SpammyWords 173426 55.52 73.41 47.21 12 DCC_CHECK 154533 53.29 77.47 42.07 13 XM_B_Unicode3 154215 43.40 46.46 41.98 14 RCVD_IN_MSPIKE_H2 115689 33.97 39.31 31.49 15 DKIM_VALID_EF 109177 29.18 28.01 29.72 16 HTML_FONT_LOW_CONTRAST 107484 32.72 40.16 29.26 17 LOC_TINY_FONT_1 105076 33.33 43.52 28.61 18 FVGT_m_MULTI_ODD 101275 30.53 36.90 27.57 19 T_TM2_M_HEADER_IN_MSG 100790 26.43 24.24 27.44 20 XMSubLong 82319 22.43 22.48 22.41 21 T_KAM_HTML_FONT_INVALID 81946 24.90 30.48 22.31 22 XM_B_SpammyWords2 74077 27.27 42.57 20.17 23 MIME_HTML_ONLY 69008 20.43 23.96 18.79 24 XM_Multi_Part_URI 55509 16.84 20.56 15.11 25 USER_IN_DEF_DKIM_WL 55462 11.32 3.19 15.10 26 TR_XM_DK_Unsub 53173 16.27 20.15 14.48 27 ALL_TRUSTED 46667 9.09 1.30 12.70 28 UNPARSEABLE_RELAY 39967 12.16 14.92 10.88 29 XM_B_PhoneNumber 37721 8.98 6.21 10.27 30 BAYES_60 34598 8.97 7.99 9.42 31 BAYES_00 33178 6.38 0.67 9.03 32 LotsOfNums_01 32966 8.51 7.51 8.97 33 XM_Evil_Numbers_Gen 31749 8.84 9.25 8.64 34 XM_DKIMWhitelistDomains 31597 5.89 0.06 8.60 35 XM_B_Unsub 30258 10.47 15.28 8.24 36 TooManyTo_001 30139 7.32 5.42 8.20 37 TR_MAX_INTL_RELAY 26407 9.55 14.64 7.19 38 IN_ZIMBRA_NJ_WHITELIST 25717 4.81 0.09 7.00 39 TR_XM_BayesUnsub 25214 9.33 14.63 6.86 40 RCVD_IN_MSPIKE_WL 22983 5.09 2.56 6.26 41 RCVD_IN_MSPIKE_H3 22983 5.09 2.56 6.26 42 XM_H_GMP 22763 5.57 4.23 6.20 43 HTML_IMAGE_RATIO_02 22751 6.23 6.31 6.19 44 LOTS_OF_MONEY 22608 9.50 16.72 6.15 45 TR_XM_DK_Bayes 22597 4.35 0.47 6.15 46 TR_XM_DK_Bayes1 22267 4.29 0.46 6.06 47 RCVD_IN_VALIDITY_SAFE 21113 4.82 2.81 5.75 48 XM_DK_Undo_02 21061 17.58 43.12 5.73 49 XM_H_Long_From01 20433 5.43 5.13 5.56 50 XM_B_SpammyWords3 19859 8.24 14.33 5.41 51 TR_XM_DK_Bayes2 19706 3.79 0.38 5.36 52 FSL_BULK_SIG 19387 6.33 8.60 5.28 53 MIME_QP_LONG_LINE 19310 4.69 3.46 5.26 54 T_TooManySym_01 18634 4.34 2.75 5.07 55 HTML_IMAGE_RATIO_04 17677 4.95 5.24 4.81 56 XMStrtUSub 17260 4.35 3.59 4.70 57 RCVD_IN_VALIDITY_CERTIFIED 17046 3.85 2.15 4.64 58 BAYES_40 16606 3.62 1.68 4.52 59 BAYES_80 16336 5.90 9.03 4.45 60 BAYES_99 15945 13.77 34.09 4.34 61 TR_XM_SpammyWords4 15909 7.79 15.25 4.33 62 XM_PDF 15575 3.15 0.80 4.24 63 RELAYCOUNTRY_META 14944 7.11 13.66 4.07 64 RCVD_IN_IADB_LISTED 14858 3.23 1.47 4.04 65 XM_B_Phish_Phrases 14580 4.28 4.96 3.97 66 MPART_ALT_DIFF 14548 4.49 5.64 3.96 67 BOTNET_IPINHOSTNAME 14472 7.32 14.59 3.94 68 XM_UncommonTLD01 13321 3.97 4.71 3.63 69 HTML_IMAGE_RATIO_06 13298 4.03 4.93 3.62 70 RCVD_IN_IADB_SPF 13107 2.85 1.31 3.57 71 XMSubMetaSx_00 12810 4.10 5.43 3.49 72 T_REMOTE_IMAGE 12465 2.84 1.66 3.39 73 XM_Body_Dirty_Words 12254 4.42 6.75 3.34 74 ANY_BOUNCE_MESSAGE 12225 2.72 1.41 3.33 75 BOUNCE_MESSAGE 12224 2.72 1.41 3.33 76 BAYES_20 11875 2.56 1.12 3.23 77 BAYES_999 11798 10.67 26.74 3.21 78 RCVD_IN_IADB_SENDERID 11759 2.58 1.23 3.20 79 XM_SPF_SoftFail 11727 3.78 5.03 3.19 80 RCVD_IN_IADB_DK 11427 2.51 1.22 3.11 81 XMNumbers 10720 3.24 3.92 2.92 82 BAYES_95 10067 3.52 5.19 2.74 83 TR_XM_DKIM_Undo 10059 12.02 32.01 2.74 84 MAILING_LIST_MULTI 9908 2.48 2.02 2.70 85 RCVD_IN_IADB_VOUCHED 9722 2.05 0.75 2.65 86 HTML_IMAGE_RATIO_08 9663 3.07 4.01 2.63 87 T_TooManySym_02 9263 1.98 0.83 2.52 88 XM_CamelCaseFrm001 9019 2.63 3.01 2.46 89 MIME_HTML_ONLY_MULTI 8912 2.73 3.38 2.43 90 TooManyTo_002 8783 1.94 0.98 2.39 91 XM_B_SpammyTLD 8446 2.59 3.21 2.30 92 T_XMDrugObfuBody_14 8422 2.70 3.56 2.29 93 MIME_HTML_MOSTLY 8241 2.71 3.71 2.24 94 DKIM_INVALID 8186 2.92 4.42 2.23 95 TR_DCC_Bayes_99 8046 9.76 26.09 2.19 96 TR_XM_SpammyRelay 7905 4.61 9.91 2.15 97 FROM_EXCESS_BASE64 7566 1.93 1.65 2.06 98 HTML_MIME_NO_HTML_TAG 7461 1.92 1.67 2.03 99 T_XMDrugObfuBody_08 7274 2.35 3.13 1.98 100 INVALID_MSGID 7144 1.37 0.14 1.94 101 HELO_NODOT 7074 1.40 0.28 1.93 102 HELO_NO_DOMAIN 7064 1.40 0.28 1.92 103 BAYES_05 6984 1.48 0.56 1.90 104 XM_DK_Undo_01 6867 1.84 1.79 1.87 105 TR_XM_SpammyWords5 6645 2.64 4.43 1.81 106 RCVD_IN_IADB_OPTIN 6640 1.37 0.44 1.81 107 TO_MALFORMED 6383 1.20 0.03 1.74 108 XMDiploma_00 6352 2.01 2.63 1.73 109 SUBJ_ALL_CAPS 5999 1.80 2.16 1.63 110 XM_B_Investor 5995 2.71 5.02 1.63 111 TR_XM_UnparsRelay 5883 3.51 7.63 1.60 112 TR_XM_PhishingBody 5799 2.42 4.22 1.58 113 TM2_M_VERY_LONG_WORD 5791 2.07 3.12 1.58 114 TM2_M_URI_OPT_OUT 5789 2.12 3.29 1.58 115 TR_Symld_Words 5511 1.34 0.99 1.50 116 XM_SendGrid 5418 1.49 1.54 1.47 117 TVD_RCVD_IP 5339 1.23 0.74 1.45 118 UNTRUSTED_Relay 5228 2.69 5.42 1.42 119 XM_B_Unsub2 5181 1.74 2.47 1.41 120 IN_HORDE_ADDRESS_BOOK 5045 0.96 0.08 1.37 121 TooManyTo_003 4944 1.20 0.88 1.35 122 KHOP_HELO_FCRDNS 4692 1.26 1.24 1.28 123 XM_B_SEO 4618 2.61 5.53 1.26 124 URI_NOVOWEL 4614 1.19 1.04 1.26 125 RELAYCOUNTRY_CA 4595 2.30 4.56 1.25 126 XM_GoogleGroups 4481 1.02 0.60 1.22 127 XMStockSpam_06 4282 1.36 1.79 1.17 128 URI_HEX 4259 1.26 1.49 1.16 129 XMGappySubj_01 4124 0.82 0.17 1.12 130 XMSexyCombo_05 4082 1.91 3.65 1.11 131 BOTNET 4020 3.61 9.02 1.09 132 XMCapTrack 3960 0.89 0.49 1.08 133 XM_B_SpammyWords4 3887 1.52 2.51 1.06 134 XMBSHREFv2 3865 0.84 0.39 1.05 135 XM_H_Long_From02 3847 1.24 1.66 1.05 136 TVD_SPACE_RATIO 3835 0.75 0.10 1.04 137 XM_OfRef6 3824 2.18 4.62 1.04 138 URI_TRY_3LD 3795 1.39 2.16 1.03 139 TooManyTo_004 3680 0.94 0.81 1.00 140 XMGenDplmaNmb 3628 1.09 1.32 0.99 141 XMBrknScrpt_02 3573 1.40 2.33 0.97 142 T_FILL_THIS_FORM_SHORT 3514 1.24 1.85 0.96 143 HTTPS_HTTP_MISMATCH 3440 1.11 1.48 0.94 144 TR_XM_DK_SendGrid 3264 0.88 0.85 0.89 145 XM_UB50 3161 1.44 2.68 0.86 146 TR_MetaPhish_Combo_01 3151 0.82 0.74 0.86 147 T_TooManySym_03 3137 0.65 0.20 0.85 148 T_XMDrugObfuBody_00 3099 1.10 1.64 0.84 149 TooManyTo_005 3036 0.81 0.78 0.83 150 SpammyFromTLD_01 3032 1.08 1.62 0.83 151 T_XMHurry_00 3001 1.41 2.67 0.82 152 RCVD_IN_BL_SPAMCOP_NET 3000 2.91 7.42 0.82 153 XM_H_Trusted_IP 2994 0.56 0.00 0.82 154 XMBdyGiftCard01 2980 0.98 1.36 0.81 155 RELAYCOUNTRY_AU 2919 1.31 2.41 0.79 156 DKIM_ADSP_CUSTOM_MED 2899 0.85 0.97 0.79 157 TR_XM_SpammyWords2 2857 4.85 13.61 0.78 158 TR_XM_SEO4 2773 2.05 4.83 0.75 159 XM_B_COPY_HTML 2770 0.80 0.90 0.75 160 XMLngstWrd_00 2690 0.81 0.99 0.73 161 TR_LOTS_OF_MONEY3 2664 2.31 5.74 0.73 162 XM_ShortIntro_01 2625 0.69 0.63 0.71 163 XM_B_DNDMA 2595 0.78 0.94 0.71 164 FROM_GOV_DKIM_AU 2563 0.54 0.18 0.70 165 T_OBFU_PDF_ATTACH 2480 0.50 0.12 0.68 166 HTML_TAG_BALANCE_BODY 2422 0.96 1.61 0.66 167 XMSubMetaI_00 2372 0.73 0.91 0.65 168 SHORT_HELO_AND_INLINE_IMAGE 2357 0.46 0.07 0.64 169 XM_ProductURIs 2352 0.70 0.83 0.64 170 XM_H_PHPMailer 2234 0.61 0.60 0.61 171 TR_XM_Base64_M1 2210 0.65 0.76 0.60 172 THIS_AD 2146 0.87 1.49 0.58 173 XMMoneyMeta_00 2141 0.70 0.94 0.58 174 USER_IN_WHITELIST 2121 0.39 0.00 0.58 175 USER_IN_WELCOMELIST 2121 0.39 0.00 0.58 176 HTML_IMAGE_ONLY_28 2112 0.54 0.47 0.57 177 MPART_ALT_DIFF_COUNT 2102 0.68 0.93 0.57 178 XMGappySubj_02 2101 0.43 0.11 0.57 179 XMSubNoVowel 2072 0.54 0.48 0.56 180 XMBody_17 2058 1.91 4.82 0.56 181 XMNoVowels 1968 0.52 0.47 0.54 182 HTML_IMAGE_ONLY_32 1940 0.42 0.18 0.53 183 XMOemUri 1925 0.46 0.31 0.52 184 TO_NO_BRKTS_HTML_ONLY 1904 0.43 0.25 0.52 185 NML_ADSP_CUSTOM_MED 1871 0.59 0.77 0.51 186 T_Symld_Words_02 1842 0.59 0.77 0.50 187 T_MANY_PILL_PRICE 1840 0.35 0.01 0.50 188 XM_B_FormFill 1808 0.37 0.09 0.49 189 TR_XM_SPAMCOP 1753 2.11 5.64 0.48 190 TM2_M_BODY_EMPTY 1716 0.35 0.09 0.47 191 RELAYCOUNTRY_GB 1678 0.59 0.88 0.46 192 XM_S_SpammyWords 1668 0.67 1.14 0.45 193 TR_XM_Spammywords 1667 0.67 1.14 0.45 194 FORGED_GMAIL_RCVD 1664 0.54 0.74 0.45 195 DIET_1 1646 0.51 0.65 0.45 196 XMPhish30 1591 0.73 1.38 0.43 197 XMPhish14 1567 0.59 0.94 0.43 198 SpammyFromTLD_02 1542 0.79 1.60 0.42 199 XMSubMetaSxObfu_02 1540 0.36 0.24 0.42 200 XMClaimOffer 1527 0.46 0.56 0.42 ----------------------------------------------------------------------