Email: 503928 Autolearn: 0 AvgScore: 4.68 AvgScanTime: 1.16 sec Spam: 176491 Autolearn: 0 AvgScore: 13.26 AvgScanTime: 1.28 sec Ham: 327437 Autolearn: 0 AvgScore: 0.06 AvgScanTime: 1.10 sec Time Spent Running SA: 162.28 hours Time Spent Processing Spam: 62.53 hours Time Spent Processing Ham: 99.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 170876 90.79 96.82 87.54 2 DKIM_SIGNED 162949 82.38 92.33 77.02 3 XM_DK_Pass 157647 80.34 89.32 75.49 4 DKIM_VALID 155994 79.26 88.39 74.34 5 XM_B_Unicode 154234 76.74 87.39 71.00 6 RELAYCOUNTRY_US 151746 83.55 85.98 82.24 7 DCC_CHECK 136045 51.67 77.08 37.97 8 XMListUnsubscribeExists 134719 59.83 76.33 50.94 9 XM_B_SpammyWords 130657 55.43 74.03 45.40 10 DKIM_VALID_AU 127487 63.81 72.23 59.27 11 XM_DK_Undo_02 82803 20.07 46.92 5.60 12 XM_B_Unicode3 79205 41.55 44.88 39.76 13 LOC_TINY_FONT_1 76592 32.08 43.40 25.99 14 XM_B_SpammyWords2 75670 27.09 42.87 18.58 15 HTML_FONT_LOW_CONTRAST 72773 34.04 41.23 30.17 16 RCVD_IN_MSPIKE_H2 71722 36.28 40.64 33.92 17 BAYES_99 69188 16.61 39.20 4.44 18 FVGT_m_MULTI_ODD 65838 30.24 37.30 26.43 19 TR_XM_DKIM_Undo 63881 14.28 36.20 2.47 20 BAYES_50 63851 51.48 36.18 59.72 21 BAYES_999 56507 13.41 32.02 3.37 22 T_KAM_HTML_FONT_INVALID 54433 24.74 30.84 21.45 23 TR_DCC_Bayes_99 52093 11.38 29.52 1.60 24 DKIM_VALID_EF 50694 30.23 28.72 31.04 25 MIME_HTML_ONLY 42671 21.21 24.18 19.61 26 T_TM2_M_HEADER_IN_MSG 42444 27.85 24.05 29.90 27 DCC_CHECK_NEGATIVE 40425 48.30 22.90 61.98 28 TR_XM_DK_Unsub 38259 17.04 21.68 14.54 29 XMSubLong 36891 22.67 20.90 23.63 30 XM_Multi_Part_URI 35377 16.02 20.04 13.86 31 LOTS_OF_MONEY 32824 11.03 18.60 6.95 32 TR_XM_SpammyWords4 30252 9.15 17.14 4.85 33 TR_XM_SpammyWords2 28617 6.16 16.21 0.74 34 UNPARSEABLE_RELAY 25831 13.08 14.64 12.24 35 RELAYCOUNTRY_META 25740 7.83 14.58 4.20 36 TR_MAX_INTL_RELAY 24246 9.48 13.74 7.18 37 XM_B_Unsub 24237 9.88 13.73 7.80 38 XM_B_SpammyWords3 23879 7.21 13.53 3.81 39 TR_XM_BayesUnsub 23242 8.75 13.17 6.37 40 BOTNET_IPINHOSTNAME 22815 6.50 12.93 3.03 41 TR_XM_SpammyRelay 17783 4.97 10.08 2.22 42 XM_Evil_Numbers_Gen 15902 8.70 9.01 8.54 43 RCVD_IN_BL_SPAMCOP_NET 15192 3.45 8.61 0.67 44 BAYES_80 14827 5.79 8.40 4.38 45 BOTNET 13894 3.52 7.87 1.17 46 FSL_BULK_SIG 13508 6.23 7.65 5.46 47 TR_XM_UnparsRelay 13257 3.81 7.51 1.81 48 TR_LOTS_OF_MONEY3 13098 3.24 7.42 0.98 49 BAYES_60 12859 8.83 7.29 9.67 50 LotsOfNums_01 12281 7.99 6.96 8.54 51 TR_XM_SPAMCOP 11764 2.59 6.67 0.39 52 HTML_IMAGE_RATIO_02 11686 5.20 6.62 4.44 53 UNTRUSTED_Relay 11468 3.39 6.50 1.72 54 HTML_IMAGE_RATIO_04 10786 4.79 6.11 4.07 55 XM_Body_Dirty_Words 10757 3.85 6.09 2.64 56 XMBody_17 10749 2.62 6.09 0.75 57 XM_SPF_SoftFail 9429 4.08 5.34 3.40 58 XM_B_PhoneNumber 9271 7.80 5.25 9.18 59 XMSubMetaSx_00 9215 3.98 5.22 3.30 60 XM_B_SEO 9005 2.62 5.10 1.29 61 BAYES_95 8839 3.57 5.01 2.80 62 MPART_ALT_DIFF 8730 3.93 4.95 3.39 63 RELAYCOUNTRY_CA 8450 2.45 4.79 1.19 64 XM_B_Investor 8377 2.69 4.75 1.58 65 XM_UncommonTLD01 8201 4.26 4.65 4.05 66 TR_XM_SEO4 8161 2.14 4.62 0.81 67 XM_H_Long_From01 8091 4.65 4.58 4.69 68 XMStrtUSub 7689 4.52 4.36 4.61 69 XM_B_Phish_Phrases 7688 3.98 4.36 3.78 70 TR_XM_SpammyWords5 7641 2.33 4.33 1.26 71 XMBrknScrpt_02 7630 2.40 4.32 1.36 72 TooManyTo_001 7471 7.17 4.23 8.75 73 XM_H_GMP 7452 5.13 4.22 5.61 74 HTML_IMAGE_RATIO_06 7299 3.48 4.14 3.13 75 TR_XM_PhishingBody 7288 2.41 4.13 1.48 76 XM_OfRef6 7033 2.21 3.98 1.26 77 DKIM_INVALID 6955 3.13 3.94 2.69 78 T_XMDrugObfuBody_08 6939 2.49 3.93 1.72 79 XMNumbers 6645 3.04 3.77 2.65 80 XMSexyCombo_05 6258 2.24 3.55 1.53 81 MIME_HTML_MOSTLY 6228 2.64 3.53 2.16 82 RCVD_IN_VALIDITY_SAFE 6036 4.24 3.42 4.69 83 T_XMDrugObfuBody_14 5981 2.29 3.39 1.71 84 URI_TRY_3LD 5775 1.74 3.27 0.91 85 MIME_QP_LONG_LINE 5766 4.45 3.27 5.09 86 T_XMHurry_00 5761 1.60 3.26 0.71 87 TM2_M_VERY_LONG_WORD 5730 1.98 3.25 1.30 88 XM_B_SpammyTLD 5450 2.66 3.09 2.42 89 HTML_IMAGE_RATIO_08 5401 2.36 3.06 1.99 90 XM_URI_RBL 5376 1.21 3.05 0.23 91 XM_UB50 5135 1.71 2.91 1.07 92 MIME_HTML_ONLY_MULTI 5098 2.22 2.89 1.86 93 RCVD_IN_MSPIKE_H3 5043 4.59 2.86 5.52 94 RCVD_IN_MSPIKE_WL 5043 4.59 2.86 5.52 95 TM2_M_URI_OPT_OUT 5011 2.03 2.84 1.59 96 XMDiploma_00 5001 2.31 2.83 2.03 97 USER_IN_DEF_DKIM_WL 4995 9.14 2.83 12.54 98 SUBJ_ALL_CAPS 4665 1.97 2.64 1.60 99 RCVD_IN_VALIDITY_CERTIFIED 4464 3.35 2.53 3.80 100 XM_CamelCaseFrm001 4319 2.06 2.45 1.85 101 RCVD_IN_VALIDITY_RPBL 4293 0.93 2.43 0.13 102 T_TooManySym_01 4098 4.33 2.32 5.41 103 XM_B_SpammyWords4 3770 0.95 2.14 0.31 104 XMStockSpam_06 3765 1.57 2.13 1.26 105 RELAYCOUNTRY_AU 3758 1.26 2.13 0.78 106 T_REMOTE_IMAGE 3466 3.28 1.96 3.99 107 URI_NOVOWEL 3323 1.72 1.88 1.63 108 LONGLN_LOW_CONTRAST 3277 0.91 1.86 0.40 109 XM_B_Unsub2 3260 1.50 1.85 1.32 110 MAILING_LIST_MULTI 3204 2.44 1.82 2.78 111 HTML_TAG_BALANCE_BODY 3169 1.03 1.80 0.62 112 SpammyFromTLD_01 3043 1.17 1.72 0.87 113 FROM_EXCESS_BASE64 3041 1.93 1.72 2.04 114 BAYES_40 2963 3.76 1.68 4.88 115 TR_XM_NoHeaderRelay 2927 0.68 1.66 0.15 116 XM_DK_Undo_01 2840 1.84 1.61 1.96 117 XMGenDplmaNmb 2664 1.13 1.51 0.93 118 AC_BR_BONANZA 2638 0.60 1.49 0.12 119 RCVD_IN_IADB_LISTED 2571 3.00 1.46 3.84 120 XM_H_Long_From02 2527 1.23 1.43 1.12 121 HTML_FONT_FACE_BAD 2428 0.79 1.38 0.47 122 XM_UB99 2428 0.48 1.38 0.00 123 DKIM_ADSP_CUSTOM_MED 2380 1.06 1.35 0.90 124 T_FILL_THIS_FORM_SHORT 2337 1.05 1.32 0.90 125 XM_HighProb1 2332 0.47 1.32 0.01 126 T_XMDrugObfuBody_00 2331 0.93 1.32 0.72 127 URI_HEX 2310 1.13 1.31 1.03 128 TR_XM_InvalidRelay 2274 0.47 1.29 0.03 129 ALL_TRUSTED 2272 9.80 1.29 14.39 130 HTML_MIME_NO_HTML_TAG 2259 2.19 1.28 2.68 131 SpammyFromTLD_02 2247 0.61 1.27 0.25 132 KHOP_HELO_FCRDNS 2245 1.46 1.27 1.57 133 HTTPS_HTTP_MISMATCH 2242 1.06 1.27 0.94 134 RCVD_IN_IADB_SPF 2203 2.61 1.25 3.35 135 XMPhish14 2173 0.69 1.23 0.40 136 XMHTML_After_End 2156 0.64 1.22 0.32 137 HOSTED_IMG_MULTI_PUB_01 2133 0.44 1.21 0.02 138 XMSubMetaI_00 2131 1.10 1.21 1.04 139 DIET_1 2090 0.59 1.18 0.28 140 FORGED_GMAIL_RCVD 2066 0.74 1.17 0.50 141 TR_XM_INV_DKIM 2062 0.47 1.17 0.09 142 TR_XM_PHPForged 2038 0.72 1.15 0.49 143 RCVD_IN_IADB_DK 2033 2.28 1.15 2.88 144 TR_XM_PHPDW 2032 0.72 1.15 0.49 145 RCVD_IN_IADB_SENDERID 2032 2.33 1.15 2.97 146 NML_ADSP_CUSTOM_MED 2022 0.78 1.15 0.59 147 TR_Symld_Words 1999 1.42 1.13 1.57 148 TR_XM_FormFill2 1969 0.72 1.12 0.50 149 XM_ProductURIs 1966 0.74 1.11 0.54 150 XM_H_PHPOS 1948 0.70 1.10 0.48 151 THIS_AD 1946 0.76 1.10 0.57 152 BAYES_20 1943 2.62 1.10 3.44 153 XM_SendGrid 1939 1.30 1.10 1.40 154 TR_Caps_n_Bayes_99 1919 0.40 1.09 0.03 155 XMMoneyMeta_00 1919 0.69 1.09 0.47 156 URIBL_DBL_SPAM 1890 0.38 1.07 0.01 157 XM_UB999 1886 0.38 1.07 0.00 158 XMPhish30 1856 0.70 1.05 0.51 159 XM_B_COPY_HTML 1850 0.75 1.05 0.59 160 XM_B_Phish66 1835 0.58 1.04 0.33 161 RCVD_IN_PSBL 1720 0.37 0.97 0.04 162 TM2_M_A_HREF_HREF 1616 0.48 0.92 0.24 163 RDNS_DYNAMIC 1613 0.51 0.91 0.29 164 PDS_RDNS_DYNAMIC_FP 1590 0.41 0.90 0.15 165 RELAYCOUNTRY_FR 1540 0.48 0.87 0.27 166 XMBdyGiftCard01 1536 0.82 0.87 0.79 167 RELAYCOUNTRY_JP 1499 0.32 0.85 0.03 168 TR_MetaPhish_Combo_01 1460 0.79 0.83 0.77 169 XM_PDF 1433 3.79 0.81 5.40 170 T_STY_INVIS_DIRECT 1412 0.50 0.80 0.34 171 XMSexyCombo_01 1408 0.36 0.80 0.12 172 TR_XM_Base64_M1 1401 0.60 0.79 0.50 173 RCVD_IN_IADB_VOUCHED 1383 2.02 0.78 2.69 174 LongTLD 1374 0.54 0.78 0.41 175 TVD_RCVD_IP 1373 0.61 0.78 0.52 176 XMSlimDrugH 1372 0.50 0.78 0.36 177 XM_DIRTYINTL 1355 0.32 0.77 0.08 178 BOTNET_NORDNS 1331 0.27 0.75 0.01 179 XMReplyNow 1318 0.39 0.75 0.20 180 MPART_ALT_DIFF_COUNT 1307 0.58 0.74 0.50 181 XMPhish08 1302 0.38 0.74 0.19 182 HTML_FONT_TINY_NORDNS 1298 0.32 0.74 0.09 183 XM_UB60 1297 0.30 0.73 0.06 184 TR_XM_RelayPhish 1253 0.30 0.71 0.08 185 HELO_DYNAMIC_SPLIT_IP 1252 0.25 0.71 0.01 186 TR_XM_FormFill 1248 0.25 0.71 0.01 187 TR_XM_Spammywords 1221 0.39 0.69 0.23 188 XM_S_SpammyWords 1221 0.39 0.69 0.23 189 TR_LOTS_OF_MONEY2 1204 0.45 0.68 0.32 190 T_MONEY_PERCENT 1204 0.45 0.68 0.32 191 SHOPIFY_IMG_NOT_RCVD_SFY 1199 0.49 0.68 0.38 192 XM_B_COVIDMETA 1196 0.32 0.68 0.13 193 XM_B_DNDMA 1187 0.69 0.67 0.70 194 T_TooManySym_02 1180 2.05 0.67 2.80 195 RELAYCOUNTRY_IN 1169 0.27 0.66 0.06 196 T_Symld_Words_02 1169 0.46 0.66 0.35 197 XMClaimOffer 1166 0.29 0.66 0.09 198 XMHTMLBadTable_001 1164 0.40 0.66 0.26 199 RELAYCOUNTRY_GB 1132 0.52 0.64 0.46 200 ANY_BOUNCE_MESSAGE 1128 2.29 0.64 3.17 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286629 90.79 96.82 87.54 2 RELAYCOUNTRY_US 269276 83.55 85.98 82.24 3 DKIM_SIGNED 252200 82.38 92.33 77.02 4 XM_DK_Pass 247196 80.34 89.32 75.49 5 DKIM_VALID 243404 79.26 88.39 74.34 6 XM_B_Unicode 232491 76.74 87.39 71.00 7 DCC_CHECK_NEGATIVE 202956 48.30 22.90 61.98 8 BAYES_50 195555 51.48 36.18 59.72 9 DKIM_VALID_AU 194086 63.81 72.23 59.27 10 XMListUnsubscribeExists 166796 59.83 76.33 50.94 11 XM_B_SpammyWords 148651 55.43 74.03 45.40 12 XM_B_Unicode3 130174 41.55 44.88 39.76 13 DCC_CHECK 124341 51.67 77.08 37.97 14 RCVD_IN_MSPIKE_H2 111079 36.28 40.64 33.92 15 DKIM_VALID_EF 101648 30.23 28.72 31.04 16 HTML_FONT_LOW_CONTRAST 98772 34.04 41.23 30.17 17 T_TM2_M_HEADER_IN_MSG 97896 27.85 24.05 29.90 18 FVGT_m_MULTI_ODD 86539 30.24 37.30 26.43 19 LOC_TINY_FONT_1 85085 32.08 43.40 25.99 20 XMSubLong 77364 22.67 20.90 23.63 21 T_KAM_HTML_FONT_INVALID 70230 24.74 30.84 21.45 22 MIME_HTML_ONLY 64209 21.21 24.18 19.61 23 XM_B_SpammyWords2 60827 27.09 42.87 18.58 24 TR_XM_DK_Unsub 47613 17.04 21.68 14.54 25 ALL_TRUSTED 47115 9.80 1.29 14.39 26 XM_Multi_Part_URI 45373 16.02 20.04 13.86 27 USER_IN_DEF_DKIM_WL 41063 9.14 2.83 12.54 28 UNPARSEABLE_RELAY 40090 13.08 14.64 12.24 29 BAYES_60 31651 8.83 7.29 9.67 30 XM_B_PhoneNumber 30048 7.80 5.25 9.18 31 TooManyTo_001 28665 7.17 4.23 8.75 32 BAYES_00 28286 5.82 0.60 8.64 33 LotsOfNums_01 27972 7.99 6.96 8.54 34 XM_Evil_Numbers_Gen 27960 8.70 9.01 8.54 35 XM_B_Unsub 25534 9.88 13.73 7.80 36 TR_MAX_INTL_RELAY 23526 9.48 13.74 7.18 37 IN_ZIMBRA_NJ_WHITELIST 23501 4.69 0.08 7.18 38 LOTS_OF_MONEY 22743 11.03 18.60 6.95 39 XM_DKIMWhitelistDomains 21897 4.45 0.30 6.69 40 TR_XM_BayesUnsub 20858 8.75 13.17 6.37 41 TR_XM_DK_Bayes 19943 4.11 0.45 6.09 42 TR_XM_DK_Bayes1 19538 4.03 0.43 5.97 43 XM_H_GMP 18375 5.13 4.22 5.61 44 XM_DK_Undo_02 18324 20.07 46.92 5.60 45 RCVD_IN_MSPIKE_H3 18084 4.59 2.86 5.52 46 RCVD_IN_MSPIKE_WL 18084 4.59 2.86 5.52 47 FSL_BULK_SIG 17892 6.23 7.65 5.46 48 T_TooManySym_01 17722 4.33 2.32 5.41 49 XM_PDF 17687 3.79 0.81 5.40 50 MIME_QP_LONG_LINE 16653 4.45 3.27 5.09 51 TR_XM_DK_Bayes2 16163 3.32 0.33 4.94 52 BAYES_40 15968 3.76 1.68 4.88 53 TR_XM_SpammyWords4 15879 9.15 17.14 4.85 54 RCVD_IN_VALIDITY_SAFE 15348 4.24 3.42 4.69 55 XM_H_Long_From01 15343 4.65 4.58 4.69 56 XMStrtUSub 15088 4.52 4.36 4.61 57 HTML_IMAGE_RATIO_02 14541 5.20 6.62 4.44 58 BAYES_99 14536 16.61 39.20 4.44 59 BAYES_80 14348 5.79 8.40 4.38 60 RELAYCOUNTRY_META 13740 7.83 14.58 4.20 61 HTML_IMAGE_RATIO_04 13341 4.79 6.11 4.07 62 XM_UncommonTLD01 13265 4.26 4.65 4.05 63 T_REMOTE_IMAGE 13049 3.28 1.96 3.99 64 RCVD_IN_IADB_LISTED 12572 3.00 1.46 3.84 65 XM_B_SpammyWords3 12476 7.21 13.53 3.81 66 RCVD_IN_VALIDITY_CERTIFIED 12428 3.35 2.53 3.80 67 XM_B_Phish_Phrases 12362 3.98 4.36 3.78 68 BAYES_20 11260 2.62 1.10 3.44 69 XM_SPF_SoftFail 11142 4.08 5.34 3.40 70 MPART_ALT_DIFF 11087 3.93 4.95 3.39 71 BAYES_999 11049 13.41 32.02 3.37 72 RCVD_IN_IADB_SPF 10954 2.61 1.25 3.35 73 XMSubMetaSx_00 10817 3.98 5.22 3.30 74 ANY_BOUNCE_MESSAGE 10396 2.29 0.64 3.17 75 BOUNCE_MESSAGE 10392 2.29 0.64 3.17 76 HTML_IMAGE_RATIO_06 10249 3.48 4.14 3.13 77 BOTNET_IPINHOSTNAME 9936 6.50 12.93 3.03 78 RCVD_IN_IADB_SENDERID 9719 2.33 1.15 2.97 79 RCVD_IN_IADB_DK 9435 2.28 1.15 2.88 80 BAYES_95 9175 3.57 5.01 2.80 81 T_TooManySym_02 9152 2.05 0.67 2.80 82 MAILING_LIST_MULTI 9104 2.44 1.82 2.78 83 TooManyTo_002 9062 2.01 0.60 2.77 84 DKIM_INVALID 8796 3.13 3.94 2.69 85 RCVD_IN_IADB_VOUCHED 8795 2.02 0.78 2.69 86 HTML_MIME_NO_HTML_TAG 8771 2.19 1.28 2.68 87 XMNumbers 8680 3.04 3.77 2.65 88 XM_Body_Dirty_Words 8656 3.85 6.09 2.64 89 TR_XM_DKIM_Undo 8096 14.28 36.20 2.47 90 XM_B_SpammyTLD 7940 2.66 3.09 2.42 91 TR_XM_SpammyRelay 7278 4.97 10.08 2.22 92 INVALID_MSGID 7170 1.46 0.09 2.19 93 MIME_HTML_MOSTLY 7068 2.64 3.53 2.16 94 FROM_EXCESS_BASE64 6666 1.93 1.72 2.04 95 XMDiploma_00 6659 2.31 2.83 2.03 96 BAYES_05 6657 1.51 0.55 2.03 97 HTML_IMAGE_RATIO_08 6515 2.36 3.06 1.99 98 HELO_NODOT 6428 1.40 0.36 1.96 99 HELO_NO_DOMAIN 6422 1.40 0.36 1.96 100 XM_DK_Undo_01 6414 1.84 1.61 1.96 101 TO_MALFORMED 6250 1.25 0.04 1.91 102 RCVD_IN_IADB_OPTIN 6136 1.38 0.47 1.87 103 MIME_HTML_ONLY_MULTI 6094 2.22 2.89 1.86 104 XM_CamelCaseFrm001 6052 2.06 2.45 1.85 105 TR_XM_UnparsRelay 5929 3.81 7.51 1.81 106 UNTRUSTED_Relay 5625 3.39 6.50 1.72 107 T_XMDrugObfuBody_08 5619 2.49 3.93 1.72 108 T_XMDrugObfuBody_14 5584 2.29 3.39 1.71 109 TooManyTo_003 5570 1.29 0.52 1.70 110 URI_NOVOWEL 5326 1.72 1.88 1.63 111 TR_DCC_Bayes_99 5248 11.38 29.52 1.60 112 SUBJ_ALL_CAPS 5242 1.97 2.64 1.60 113 TM2_M_URI_OPT_OUT 5219 2.03 2.84 1.59 114 XM_B_Investor 5187 2.69 4.75 1.58 115 TR_Symld_Words 5144 1.42 1.13 1.57 116 KHOP_HELO_FCRDNS 5128 1.46 1.27 1.57 117 IN_HORDE_ADDRESS_BOOK 5039 1.03 0.08 1.54 118 XMSexyCombo_05 5025 2.24 3.55 1.53 119 TR_XM_PhishingBody 4833 2.41 4.13 1.48 120 XM_SendGrid 4592 1.30 1.10 1.40 121 XMBrknScrpt_02 4461 2.40 4.32 1.36 122 XM_B_Unsub2 4315 1.50 1.85 1.32 123 TM2_M_VERY_LONG_WORD 4265 1.98 3.25 1.30 124 TooManyTo_004 4245 1.01 0.47 1.30 125 TVD_SPACE_RATIO 4232 0.88 0.12 1.29 126 XM_B_SEO 4212 2.62 5.10 1.29 127 XM_OfRef6 4125 2.21 3.98 1.26 128 XMStockSpam_06 4124 1.57 2.13 1.26 129 TR_XM_SpammyWords5 4111 2.33 4.33 1.26 130 XMCapTrack 3937 0.96 0.50 1.20 131 RELAYCOUNTRY_CA 3886 2.45 4.79 1.19 132 BOTNET 3821 3.52 7.87 1.17 133 XMGappySubj_01 3818 0.82 0.19 1.17 134 XM_GoogleGroups 3787 0.97 0.63 1.16 135 XM_H_Long_From02 3654 1.23 1.43 1.12 136 TooManyTo_005 3560 0.86 0.45 1.09 137 XM_UB50 3490 1.71 2.91 1.07 138 XMSubMetaI_00 3393 1.10 1.21 1.04 139 URI_HEX 3373 1.13 1.31 1.03 140 T_TooManySym_03 3295 0.73 0.21 1.01 141 TR_LOTS_OF_MONEY3 3210 3.24 7.42 0.98 142 HTTPS_HTTP_MISMATCH 3082 1.06 1.27 0.94 143 XMGenDplmaNmb 3051 1.13 1.51 0.93 144 URI_TRY_3LD 2975 1.74 3.27 0.91 145 DKIM_ADSP_CUSTOM_MED 2959 1.06 1.35 0.90 146 T_FILL_THIS_FORM_SHORT 2943 1.05 1.32 0.90 147 TR_XM_DK_SendGrid 2918 0.80 0.64 0.89 148 XMSubMetaSxObfu_03 2900 0.79 0.60 0.89 149 SpammyFromTLD_01 2835 1.17 1.72 0.87 150 T_OBFU_PDF_ATTACH 2695 0.61 0.20 0.82 151 HTML_IMAGE_ONLY_32 2694 0.57 0.10 0.82 152 TR_XM_SEO4 2637 2.14 4.62 0.81 153 XM_H_PHPMailer 2577 0.72 0.60 0.79 154 XMBdyGiftCard01 2575 0.82 0.87 0.79 155 RELAYCOUNTRY_AU 2567 1.26 2.13 0.78 156 XM_ShortIntro_01 2565 0.66 0.43 0.78 157 TR_MetaPhish_Combo_01 2510 0.79 0.83 0.77 158 XMBody_17 2454 2.62 6.09 0.75 159 TR_XM_SpammyWords2 2436 6.16 16.21 0.74 160 XMBody_95 2374 0.53 0.17 0.73 161 XMGappySubj_02 2350 0.50 0.08 0.72 162 T_XMDrugObfuBody_00 2349 0.93 1.32 0.72 163 T_XMHurry_00 2318 1.60 3.26 0.71 164 XM_B_DNDMA 2293 0.69 0.67 0.70 165 XMOemUri 2257 0.54 0.26 0.69 166 RCVD_IN_BL_SPAMCOP_NET 2184 3.45 8.61 0.67 167 XMNoVowels 2068 0.57 0.47 0.63 168 USER_IN_WHITELIST 2029 0.40 0.00 0.62 169 USER_IN_WELCOMELIST 2029 0.40 0.00 0.62 170 HTML_TAG_BALANCE_BODY 2023 1.03 1.80 0.62 171 LOW_PRICE 1991 0.47 0.22 0.61 172 TM2_M_BODY_EMPTY 1962 0.43 0.11 0.60 173 SHORT_HELO_AND_INLINE_IMAGE 1947 0.41 0.07 0.59 174 FROM_GOV_DKIM_AU 1943 0.43 0.14 0.59 175 XM_B_COPY_HTML 1940 0.75 1.05 0.59 176 NML_ADSP_CUSTOM_MED 1927 0.78 1.15 0.59 177 THIS_AD 1881 0.76 1.10 0.57 178 XM_ProductURIs 1768 0.74 1.11 0.54 179 T_TVD_MIME_NO_HEADERS 1734 0.35 0.03 0.53 180 TVD_RCVD_IP 1691 0.61 0.78 0.52 181 XMPhish30 1665 0.70 1.05 0.51 182 TR_XM_FormFill2 1645 0.72 1.12 0.50 183 MPART_ALT_DIFF_COUNT 1640 0.58 0.74 0.50 184 FORGED_GMAIL_RCVD 1639 0.74 1.17 0.50 185 TR_XM_Base64_M1 1627 0.60 0.79 0.50 186 XMLngstWrd_00 1622 0.44 0.33 0.50 187 HTML_IMAGE_ONLY_28 1620 0.46 0.40 0.49 188 TR_XM_PHPDW 1605 0.72 1.15 0.49 189 TR_XM_PHPForged 1601 0.72 1.15 0.49 190 XM_H_PHPOS 1570 0.70 1.10 0.48 191 HTML_FONT_FACE_BAD 1541 0.79 1.38 0.47 192 XMMoneyMeta_00 1537 0.69 1.09 0.47 193 MISSING_HEADERS 1508 0.52 0.62 0.46 194 RELAYCOUNTRY_GB 1493 0.52 0.64 0.46 195 HTML_IMAGE_ONLY_16 1487 0.33 0.10 0.45 196 HTML_IMAGE_ONLY_20 1475 0.40 0.31 0.45 197 PLING_QUERY 1414 0.46 0.53 0.43 198 MSGID_FROM_MTA_HEADER 1413 0.32 0.11 0.43 199 GMD_PDF_EMPTY_BODY 1373 0.31 0.10 0.42 200 LongTLD 1354 0.54 0.78 0.41 ----------------------------------------------------------------------