Email: 542976 Autolearn: 0 AvgScore: 4.55 AvgScanTime: 1.21 sec Spam: 185691 Autolearn: 0 AvgScore: 13.28 AvgScanTime: 1.36 sec Ham: 357285 Autolearn: 0 AvgScore: 0.02 AvgScanTime: 1.14 sec Time Spent Running SA: 183.21 hours Time Spent Processing Spam: 70.30 hours Time Spent Processing Ham: 112.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 180512 90.01 97.21 86.26 2 DKIM_SIGNED 174233 82.19 93.83 76.14 3 XM_DK_Pass 168114 80.02 90.53 74.56 4 DKIM_VALID 165561 78.86 89.16 73.51 5 XM_B_Unicode 164712 76.23 88.70 69.75 6 RELAYCOUNTRY_US 162704 83.61 87.62 81.52 7 DCC_CHECK 143213 51.92 77.12 38.82 8 XMListUnsubscribeExists 142953 59.41 76.98 50.28 9 XM_B_SpammyWords 137997 55.27 74.32 45.38 10 DKIM_VALID_AU 135654 63.93 73.05 59.19 11 XM_DK_Undo_02 89087 20.15 47.98 5.69 12 XM_B_Unicode3 86439 42.80 46.55 40.84 13 LOC_TINY_FONT_1 83194 32.57 44.80 26.22 14 XM_B_SpammyWords2 83039 26.92 44.72 17.67 15 HTML_FONT_LOW_CONTRAST 79596 32.95 42.86 27.80 16 RCVD_IN_MSPIKE_H2 74604 33.94 40.18 30.69 17 BAYES_99 70262 15.56 37.84 3.98 18 FVGT_m_MULTI_ODD 70084 29.16 37.74 24.70 19 BAYES_50 68156 52.48 36.70 60.67 20 TR_XM_DKIM_Undo 67452 13.99 36.32 2.38 21 T_KAM_HTML_FONT_INVALID 57346 24.75 30.88 21.57 22 BAYES_999 56987 12.44 30.69 2.95 23 DKIM_VALID_EF 54622 29.26 29.42 29.19 24 TR_DCC_Bayes_99 52945 10.78 28.51 1.57 25 T_TM2_M_HEADER_IN_MSG 43895 28.37 23.64 30.83 26 MIME_HTML_ONLY 43129 20.85 23.23 19.62 27 DCC_CHECK_NEGATIVE 42459 48.04 22.87 61.13 28 TR_XM_DK_Unsub 41573 16.07 22.39 12.78 29 XMSubLong 40494 23.12 21.81 23.80 30 XM_Multi_Part_URI 37476 17.07 20.18 15.45 31 LOTS_OF_MONEY 35528 11.39 19.13 7.37 32 TR_XM_SpammyWords4 32849 9.42 17.69 5.13 33 TR_XM_SpammyWords2 30486 5.97 16.42 0.55 34 UNPARSEABLE_RELAY 28648 12.27 15.43 10.63 35 XM_B_SpammyWords3 28157 8.03 15.16 4.32 36 XM_B_Unsub 26622 10.16 14.34 7.99 37 TR_MAX_INTL_RELAY 26116 9.09 14.06 6.51 38 TR_XM_BayesUnsub 25663 8.88 13.82 6.31 39 BOTNET_IPINHOSTNAME 24749 6.80 13.33 3.41 40 RELAYCOUNTRY_META 23838 7.15 12.84 4.20 41 RCVD_IN_BL_SPAMCOP_NET 17496 3.74 9.42 0.79 42 TR_XM_SpammyRelay 17288 4.64 9.31 2.21 43 XM_Evil_Numbers_Gen 16511 8.97 8.89 9.01 44 BAYES_80 15675 5.49 8.44 3.95 45 TR_XM_UnparsRelay 15675 3.90 8.44 1.53 46 LotsOfNums_01 15236 8.19 8.21 8.18 47 BOTNET 15004 3.73 8.08 1.47 48 TR_XM_SPAMCOP 14044 2.86 7.56 0.42 49 BAYES_60 13819 8.48 7.44 9.02 50 TR_LOTS_OF_MONEY3 13568 3.00 7.31 0.76 51 FSL_BULK_SIG 12966 6.21 6.98 5.80 52 XM_Body_Dirty_Words 12027 4.10 6.48 2.87 53 XM_B_Investor 11886 3.29 6.40 1.67 54 HTML_IMAGE_RATIO_02 11316 5.20 6.09 4.73 55 XMBody_17 11196 2.43 6.03 0.55 56 XM_B_PhoneNumber 10632 8.48 5.73 9.91 57 UNTRUSTED_Relay 10100 2.86 5.44 1.51 58 XM_H_Long_From01 9911 5.37 5.34 5.39 59 BAYES_95 9723 3.47 5.24 2.56 60 MPART_ALT_DIFF 9608 4.10 5.17 3.54 61 XM_B_Phish_Phrases 9564 3.86 5.15 3.19 62 XMSubMetaSx_00 9491 3.82 5.11 3.14 63 XM_UncommonTLD01 9245 4.26 4.98 3.88 64 HTML_IMAGE_RATIO_04 9090 4.35 4.90 4.06 65 XM_SPF_SoftFail 8860 3.23 4.77 2.42 66 DKIM_INVALID 8672 3.33 4.67 2.63 67 XM_B_SEO 8517 2.33 4.59 1.16 68 HTML_IMAGE_RATIO_06 8440 3.67 4.55 3.22 69 RELAYCOUNTRY_CA 8346 2.35 4.49 1.23 70 TooManyTo_001 8314 7.14 4.48 8.53 71 XM_OfRef6 8108 2.25 4.37 1.14 72 XM_H_GMP 7724 4.86 4.16 5.22 73 XMStrtUSub 7712 4.60 4.15 4.83 74 TR_XM_SEO4 7624 1.83 4.11 0.65 75 TR_XM_SpammyWords5 7329 2.35 3.95 1.52 76 XMSexyCombo_05 7178 2.33 3.87 1.53 77 T_XMDrugObfuBody_08 6895 2.45 3.71 1.79 78 T_XMDrugObfuBody_14 6871 2.25 3.70 1.49 79 TR_XM_PhishingBody 6733 2.24 3.63 1.53 80 HTML_IMAGE_RATIO_08 6578 2.75 3.54 2.34 81 XM_B_SpammyTLD 6505 4.18 3.50 4.53 82 MIME_HTML_MOSTLY 6478 2.61 3.49 2.15 83 RCVD_IN_VALIDITY_RPBL 6436 1.30 3.47 0.18 84 XMNumbers 6278 3.05 3.38 2.87 85 XM_URI_RBL 6119 1.36 3.30 0.35 86 RCVD_IN_VALIDITY_SAFE 5983 4.12 3.22 4.59 87 XMBrknScrpt_02 5871 1.70 3.16 0.94 88 MIME_QP_LONG_LINE 5851 4.51 3.15 5.22 89 RCVD_IN_MSPIKE_H3 5707 4.81 3.07 5.72 90 RCVD_IN_MSPIKE_WL 5707 4.81 3.07 5.72 91 XMDiploma_00 5671 2.27 3.05 1.87 92 TM2_M_VERY_LONG_WORD 5523 1.78 2.97 1.16 93 XM_B_SpammyWords4 5373 1.34 2.89 0.53 94 MIME_HTML_ONLY_MULTI 5314 2.24 2.86 1.91 95 XM_UB50 5039 1.55 2.71 0.95 96 USER_IN_DEF_DKIM_WL 5033 9.70 2.71 13.34 97 URI_TRY_3LD 5007 1.41 2.70 0.74 98 TM2_M_URI_OPT_OUT 4913 2.04 2.65 1.73 99 SUBJ_ALL_CAPS 4897 1.83 2.64 1.40 100 XM_CamelCaseFrm001 4865 2.35 2.62 2.20 101 RCVD_IN_VALIDITY_CERTIFIED 4441 3.27 2.39 3.72 102 XM_B_Unsub2 4226 1.90 2.28 1.71 103 LONGLN_LOW_CONTRAST 3933 0.91 2.12 0.28 104 T_XMHurry_00 3927 1.09 2.11 0.55 105 T_REMOTE_IMAGE 3839 3.12 2.07 3.67 106 T_TooManySym_01 3794 4.20 2.04 5.33 107 RELAYCOUNTRY_AU 3712 1.27 2.00 0.90 108 FROM_EXCESS_BASE64 3478 2.00 1.87 2.07 109 MAILING_LIST_MULTI 3477 2.49 1.87 2.82 110 XMStockSpam_06 3359 1.69 1.81 1.63 111 T_XMDrugObfuBody_00 3232 1.07 1.74 0.72 112 HTML_TAG_BALANCE_BODY 3218 1.03 1.73 0.66 113 XMGenDplmaNmb 3009 1.18 1.62 0.96 114 T_FILL_THIS_FORM_SHORT 2961 1.17 1.59 0.95 115 SpammyFromTLD_01 2942 1.08 1.58 0.82 116 RCVD_IN_IADB_LISTED 2937 3.16 1.58 3.98 117 XM_DK_Undo_01 2932 1.76 1.58 1.86 118 BAYES_40 2837 3.92 1.53 5.17 119 HTML_MIME_NO_HTML_TAG 2730 1.97 1.47 2.23 120 URI_HEX 2689 1.27 1.45 1.18 121 URI_NOVOWEL 2663 2.79 1.43 3.49 122 AC_BR_BONANZA 2608 0.54 1.40 0.09 123 XM_H_Long_From02 2571 1.26 1.38 1.20 124 RCVD_IN_IADB_SPF 2562 2.76 1.38 3.48 125 URIBL_DBL_SPAM 2499 0.46 1.35 0.01 126 TR_Caps_n_Bayes_99 2453 0.47 1.32 0.03 127 SpammyFromTLD_02 2385 0.69 1.28 0.38 128 TR_XM_NoHeaderRelay 2378 0.54 1.28 0.16 129 XM_HighProb1 2365 0.44 1.27 0.01 130 RCVD_IN_IADB_SENDERID 2350 2.44 1.27 3.05 131 RCVD_IN_IADB_DK 2326 2.40 1.25 2.99 132 BAYES_20 2295 2.64 1.24 3.37 133 XM_SendGrid 2266 1.30 1.22 1.34 134 XMPhish30 2254 0.78 1.21 0.55 135 HTTPS_HTTP_MISMATCH 2251 0.98 1.21 0.86 136 XM_B_DNDMA 2194 0.79 1.18 0.58 137 XMBdyGiftCard01 2189 0.79 1.18 0.59 138 XMClaimOffer 2178 0.59 1.17 0.28 139 XM_B_COPY_HTML 2144 0.77 1.15 0.56 140 KHOP_HELO_FCRDNS 2124 1.34 1.14 1.44 141 XMSlimDrugH 2057 0.73 1.11 0.53 142 TR_LOTS_OF_MONEY2 2044 0.61 1.10 0.36 143 T_MONEY_PERCENT 2044 0.61 1.10 0.36 144 ALL_TRUSTED 2037 10.34 1.10 15.15 145 TR_XM_INV_DKIM 2018 0.40 1.09 0.04 146 TR_XM_PHPForged 2008 0.60 1.08 0.35 147 XMHTML_After_End 2000 0.61 1.08 0.37 148 TR_XM_PHPDW 1988 0.59 1.07 0.35 149 XM_ProductURIs 1955 0.63 1.05 0.41 150 TR_XM_FormFill2 1952 0.59 1.05 0.35 151 XM_H_PHPOS 1933 0.58 1.04 0.34 152 DKIM_ADSP_CUSTOM_MED 1905 0.97 1.03 0.95 153 XMReplyNow 1884 0.49 1.01 0.22 154 HOSTED_IMG_MULTI_PUB_01 1862 0.36 1.00 0.02 155 TR_Symld_Words 1843 1.28 0.99 1.42 156 HTML_FONT_TINY_NORDNS 1818 0.41 0.98 0.11 157 XM_B_Phish66 1777 0.52 0.96 0.29 158 SUBJ_DOLLARS 1718 0.51 0.93 0.30 159 THIS_AD 1704 0.60 0.92 0.43 160 BAYES_00 1702 6.42 0.92 9.28 161 T_STY_INVIS_DIRECT 1698 0.51 0.91 0.30 162 XMSubMetaI_00 1686 0.65 0.91 0.51 163 TR_XM_InvalidRelay 1648 0.33 0.89 0.03 164 NML_ADSP_CUSTOM_MED 1647 0.68 0.89 0.58 165 RELAYCOUNTRY_FR 1634 0.47 0.88 0.26 166 XM_B_COVIDMETA 1634 0.39 0.88 0.14 167 RELAYCOUNTRY_IN 1592 0.34 0.86 0.06 168 TR_MetaPhish_Combo_01 1591 0.94 0.86 0.98 169 XM_UB99 1578 0.29 0.85 0.00 170 BOTNET_NORDNS 1569 0.29 0.84 0.01 171 SHOPIFY_IMG_NOT_RCVD_SFY 1528 0.46 0.82 0.28 172 RDNS_DYNAMIC 1527 0.50 0.82 0.33 173 TR_XM_DK_Bayes 1524 4.71 0.82 6.73 174 TR_XM_DK_SendGrid 1514 0.84 0.82 0.85 175 RCVD_IN_IADB_VOUCHED 1507 2.07 0.81 2.72 176 PDS_RDNS_DYNAMIC_FP 1489 0.39 0.80 0.18 177 XM_H_Undi_Recip 1434 0.38 0.77 0.18 178 TR_XM_FormFill 1402 0.27 0.76 0.02 179 XMSexyCombo_01 1395 0.34 0.75 0.13 180 TVD_RCVD_IP 1383 0.57 0.74 0.47 181 TR_XM_COVIDMETA4 1371 0.31 0.74 0.09 182 XM_Dr_From 1365 0.34 0.74 0.14 183 MPART_ALT_DIFF_COUNT 1365 0.60 0.74 0.53 184 TooManyTo_002 1357 2.07 0.73 2.77 185 FORGED_GMAIL_RCVD 1320 0.64 0.71 0.60 186 XM_Combo_Sbj 1310 0.43 0.71 0.29 187 XM_B_REG_HTML 1291 0.36 0.70 0.18 188 XMPhish14 1289 0.47 0.69 0.36 189 HTML_OBFUSCATE_05_10 1289 0.34 0.69 0.16 190 LongTLD 1288 0.53 0.69 0.45 191 XM_OfRef7 1276 0.35 0.69 0.17 192 T_TooManySym_02 1271 1.95 0.68 2.61 193 ANY_BOUNCE_MESSAGE 1269 2.26 0.68 3.08 194 BOUNCE_MESSAGE 1269 2.26 0.68 3.08 195 TR_XM_Base64_M1 1264 0.62 0.68 0.59 196 RELAYCOUNTRY_GB 1253 0.54 0.67 0.47 197 XM_DIRTYINTL 1242 0.28 0.67 0.08 198 XMMoneyMeta_00 1235 0.51 0.67 0.43 199 XMHTMLBadTable_001 1232 0.40 0.66 0.26 200 TooManyTo_003 1225 1.26 0.66 1.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 308198 90.01 97.21 86.26 2 RELAYCOUNTRY_US 291260 83.61 87.62 81.52 3 DKIM_SIGNED 272037 82.19 93.83 76.14 4 XM_DK_Pass 266391 80.02 90.53 74.56 5 DKIM_VALID 262626 78.86 89.16 73.51 6 XM_B_Unicode 249201 76.23 88.70 69.75 7 DCC_CHECK_NEGATIVE 218399 48.04 22.87 61.13 8 BAYES_50 216771 52.48 36.70 60.67 9 DKIM_VALID_AU 211481 63.93 73.05 59.19 10 XMListUnsubscribeExists 179651 59.41 76.98 50.28 11 XM_B_SpammyWords 162121 55.27 74.32 45.38 12 XM_B_Unicode3 145928 42.80 46.55 40.84 13 DCC_CHECK 138700 51.92 77.12 38.82 14 T_TM2_M_HEADER_IN_MSG 110139 28.37 23.64 30.83 15 RCVD_IN_MSPIKE_H2 109664 33.94 40.18 30.69 16 DKIM_VALID_EF 104275 29.26 29.42 29.19 17 HTML_FONT_LOW_CONTRAST 99313 32.95 42.86 27.80 18 LOC_TINY_FONT_1 93674 32.57 44.80 26.22 19 FVGT_m_MULTI_ODD 88245 29.16 37.74 24.70 20 XMSubLong 85051 23.12 21.81 23.80 21 T_KAM_HTML_FONT_INVALID 77049 24.75 30.88 21.57 22 MIME_HTML_ONLY 70083 20.85 23.23 19.62 23 XM_B_SpammyWords2 63124 26.92 44.72 17.67 24 XM_Multi_Part_URI 55202 17.07 20.18 15.45 25 ALL_TRUSTED 54122 10.34 1.10 15.15 26 USER_IN_DEF_DKIM_WL 47644 9.70 2.71 13.34 27 TR_XM_DK_Unsub 45661 16.07 22.39 12.78 28 UNPARSEABLE_RELAY 37977 12.27 15.43 10.63 29 XM_B_PhoneNumber 35412 8.48 5.73 9.91 30 BAYES_00 33151 6.42 0.92 9.28 31 BAYES_60 32240 8.48 7.44 9.02 32 XM_Evil_Numbers_Gen 32180 8.97 8.89 9.01 33 TooManyTo_001 30460 7.14 4.48 8.53 34 LotsOfNums_01 29210 8.19 8.21 8.18 35 XM_B_Unsub 28547 10.16 14.34 7.99 36 LOTS_OF_MONEY 26321 11.39 19.13 7.37 37 XM_DKIMWhitelistDomains 26024 4.81 0.04 7.28 38 IN_ZIMBRA_NJ_WHITELIST 25515 4.73 0.09 7.14 39 TR_XM_DK_Bayes 24046 4.71 0.82 6.73 40 TR_XM_DK_Bayes1 23621 4.57 0.65 6.61 41 TR_MAX_INTL_RELAY 23265 9.09 14.06 6.51 42 TR_XM_BayesUnsub 22540 8.88 13.82 6.31 43 FSL_BULK_SIG 20733 6.21 6.98 5.80 44 RCVD_IN_MSPIKE_WL 20422 4.81 3.07 5.72 45 RCVD_IN_MSPIKE_H3 20422 4.81 3.07 5.72 46 XM_DK_Undo_02 20322 20.15 47.98 5.69 47 TR_XM_DK_Bayes2 19773 3.80 0.45 5.53 48 XM_H_Long_From01 19266 5.37 5.34 5.39 49 T_TooManySym_01 19033 4.20 2.04 5.33 50 XM_H_GMP 18655 4.86 4.16 5.22 51 MIME_QP_LONG_LINE 18647 4.51 3.15 5.22 52 BAYES_40 18465 3.92 1.53 5.17 53 TR_XM_SpammyWords4 18321 9.42 17.69 5.13 54 XMStrtUSub 17272 4.60 4.15 4.83 55 HTML_IMAGE_RATIO_02 16896 5.20 6.09 4.73 56 XM_PDF 16794 3.32 0.66 4.70 57 RCVD_IN_VALIDITY_SAFE 16405 4.12 3.22 4.59 58 XM_B_SpammyTLD 16182 4.18 3.50 4.53 59 XM_B_SpammyWords3 15447 8.03 15.16 4.32 60 RELAYCOUNTRY_META 15006 7.15 12.84 4.20 61 HTML_IMAGE_RATIO_04 14512 4.35 4.90 4.06 62 BAYES_99 14221 15.56 37.84 3.98 63 RCVD_IN_IADB_LISTED 14212 3.16 1.58 3.98 64 BAYES_80 14123 5.49 8.44 3.95 65 XM_UncommonTLD01 13866 4.26 4.98 3.88 66 RCVD_IN_VALIDITY_CERTIFIED 13290 3.27 2.39 3.72 67 T_REMOTE_IMAGE 13106 3.12 2.07 3.67 68 MPART_ALT_DIFF 12633 4.10 5.17 3.54 69 URI_NOVOWEL 12481 2.79 1.43 3.49 70 RCVD_IN_IADB_SPF 12418 2.76 1.38 3.48 71 BOTNET_IPINHOSTNAME 12181 6.80 13.33 3.41 72 BAYES_20 12043 2.64 1.24 3.37 73 HTML_IMAGE_RATIO_06 11493 3.67 4.55 3.22 74 XM_B_Phish_Phrases 11402 3.86 5.15 3.19 75 XMSubMetaSx_00 11236 3.82 5.11 3.14 76 BOUNCE_MESSAGE 10999 2.26 0.68 3.08 77 ANY_BOUNCE_MESSAGE 10999 2.26 0.68 3.08 78 RCVD_IN_IADB_SENDERID 10899 2.44 1.27 3.05 79 RCVD_IN_IADB_DK 10694 2.40 1.25 2.99 80 BAYES_999 10540 12.44 30.69 2.95 81 XMNumbers 10269 3.05 3.38 2.87 82 XM_Body_Dirty_Words 10244 4.10 6.48 2.87 83 MAILING_LIST_MULTI 10068 2.49 1.87 2.82 84 TooManyTo_002 9879 2.07 0.73 2.77 85 RCVD_IN_IADB_VOUCHED 9708 2.07 0.81 2.72 86 DKIM_INVALID 9411 3.33 4.67 2.63 87 T_TooManySym_02 9320 1.95 0.68 2.61 88 BAYES_95 9140 3.47 5.24 2.56 89 XM_SPF_SoftFail 8654 3.23 4.77 2.42 90 TR_XM_DKIM_Undo 8513 13.99 36.32 2.38 91 HTML_IMAGE_RATIO_08 8361 2.75 3.54 2.34 92 HTML_MIME_NO_HTML_TAG 7955 1.97 1.47 2.23 93 TR_XM_SpammyRelay 7882 4.64 9.31 2.21 94 XM_CamelCaseFrm001 7869 2.35 2.62 2.20 95 INVALID_MSGID 7693 1.46 0.13 2.15 96 MIME_HTML_MOSTLY 7683 2.61 3.49 2.15 97 FROM_EXCESS_BASE64 7378 2.00 1.87 2.07 98 BAYES_05 7128 1.54 0.66 2.00 99 TO_MALFORMED 6854 1.30 0.10 1.92 100 MIME_HTML_ONLY_MULTI 6823 2.24 2.86 1.91 101 HELO_NODOT 6771 1.34 0.28 1.90 102 HELO_NO_DOMAIN 6762 1.34 0.27 1.89 103 RCVD_IN_IADB_OPTIN 6711 1.42 0.54 1.88 104 XMDiploma_00 6679 2.27 3.05 1.87 105 XM_DK_Undo_01 6649 1.76 1.58 1.86 106 T_XMDrugObfuBody_08 6410 2.45 3.71 1.79 107 TM2_M_URI_OPT_OUT 6169 2.04 2.65 1.73 108 XM_B_Unsub2 6092 1.90 2.28 1.71 109 XM_B_Investor 5958 3.29 6.40 1.67 110 XMStockSpam_06 5835 1.69 1.81 1.63 111 TooManyTo_003 5598 1.26 0.66 1.57 112 TR_DCC_Bayes_99 5594 10.78 28.51 1.57 113 TR_XM_UnparsRelay 5480 3.90 8.44 1.53 114 XMSexyCombo_05 5464 2.33 3.87 1.53 115 TR_XM_PhishingBody 5449 2.24 3.63 1.53 116 TR_XM_SpammyWords5 5434 2.35 3.95 1.52 117 UNTRUSTED_Relay 5402 2.86 5.44 1.51 118 T_XMDrugObfuBody_14 5330 2.25 3.70 1.49 119 BOTNET 5244 3.73 8.08 1.47 120 KHOP_HELO_FCRDNS 5149 1.34 1.14 1.44 121 IN_HORDE_ADDRESS_BOOK 5087 0.96 0.06 1.42 122 TR_Symld_Words 5084 1.28 0.99 1.42 123 SUBJ_ALL_CAPS 5016 1.83 2.64 1.40 124 XM_SendGrid 4792 1.30 1.22 1.34 125 XMBody_95 4471 0.89 0.19 1.25 126 RELAYCOUNTRY_CA 4405 2.35 4.49 1.23 127 XM_H_Long_From02 4281 1.26 1.38 1.20 128 XM_GoogleGroups 4267 0.99 0.61 1.19 129 XMCapTrack 4235 0.94 0.48 1.19 130 URI_HEX 4202 1.27 1.45 1.18 131 XM_B_SEO 4146 2.33 4.59 1.16 132 TM2_M_VERY_LONG_WORD 4128 1.78 2.97 1.16 133 XMGappySubj_01 4109 0.81 0.15 1.15 134 XM_OfRef6 4084 2.25 4.37 1.14 135 TooManyTo_004 4048 0.96 0.61 1.13 136 XM_TLDProd2 4014 0.86 0.35 1.12 137 TVD_SPACE_RATIO 3973 0.78 0.15 1.11 138 FROM_GOV_DKIM_AU 3628 0.82 0.45 1.02 139 T_TooManySym_03 3528 0.73 0.24 0.99 140 TR_MetaPhish_Combo_01 3510 0.94 0.86 0.98 141 XMGenDplmaNmb 3419 1.18 1.62 0.96 142 T_FILL_THIS_FORM_SHORT 3401 1.17 1.59 0.95 143 XM_UB50 3397 1.55 2.71 0.95 144 DKIM_ADSP_CUSTOM_MED 3385 0.97 1.03 0.95 145 TooManyTo_005 3358 0.81 0.57 0.94 146 XMBrknScrpt_02 3344 1.70 3.16 0.94 147 RELAYCOUNTRY_AU 3201 1.27 2.00 0.90 148 HTTPS_HTTP_MISMATCH 3077 0.98 1.21 0.86 149 TR_XM_DK_SendGrid 3054 0.84 0.82 0.85 150 SpammyFromTLD_01 2925 1.08 1.58 0.82 151 RCVD_IN_BL_SPAMCOP_NET 2838 3.74 9.42 0.79 152 XM_ShortIntro_01 2738 0.65 0.42 0.77 153 T_OBFU_PDF_ATTACH 2718 0.56 0.17 0.76 154 TR_LOTS_OF_MONEY3 2705 3.00 7.31 0.76 155 URI_TRY_3LD 2654 1.41 2.70 0.74 156 T_XMDrugObfuBody_00 2556 1.07 1.74 0.72 157 XM_B_FormFill 2555 0.48 0.02 0.72 158 XM_H_PHPMailer 2405 0.63 0.56 0.67 159 XMNoVowels 2359 0.63 0.56 0.66 160 HTML_TAG_BALANCE_BODY 2349 1.03 1.73 0.66 161 TR_XM_SEO4 2332 1.83 4.11 0.65 162 XMGappySubj_02 2326 0.45 0.07 0.65 163 SUBJ_BUY 2190 0.48 0.22 0.61 164 FORGED_GMAIL_RCVD 2138 0.64 0.71 0.60 165 LOW_PRICE 2134 0.48 0.24 0.60 166 XMBdyGiftCard01 2108 0.79 1.18 0.59 167 TR_XM_Base64_M1 2091 0.62 0.68 0.59 168 XM_B_DNDMA 2079 0.79 1.18 0.58 169 NML_ADSP_CUSTOM_MED 2060 0.68 0.89 0.58 170 USER_IN_WHITELIST 2058 0.38 0.00 0.58 171 USER_IN_WELCOMELIST 2058 0.38 0.00 0.58 172 T_Symld_Words_02 2047 0.57 0.58 0.57 173 XM_B_COPY_HTML 2016 0.77 1.15 0.56 174 T_XMHurry_00 1974 1.09 2.11 0.55 175 XMBody_17 1973 2.43 6.03 0.55 176 XMPhish30 1957 0.78 1.21 0.55 177 TR_XM_SpammyWords2 1956 5.97 16.42 0.55 178 SHORT_HELO_AND_INLINE_IMAGE 1950 0.37 0.04 0.55 179 XMSlimDrugH 1909 0.73 1.11 0.53 180 MPART_ALT_DIFF_COUNT 1896 0.60 0.74 0.53 181 XM_B_SpammyWords4 1883 1.34 2.89 0.53 182 XMSubMetaI_00 1840 0.65 0.91 0.51 183 XMDateMe_00 1800 0.44 0.31 0.50 184 HTML_IMAGE_ONLY_32 1751 0.37 0.14 0.49 185 TO_NO_BRKTS_HTML_ONLY 1724 0.38 0.17 0.48 186 FILL_THIS_FORM 1712 0.38 0.18 0.48 187 RELAYCOUNTRY_GB 1692 0.54 0.67 0.47 188 TVD_RCVD_IP 1685 0.57 0.74 0.47 189 LongTLD 1590 0.53 0.69 0.45 190 THIS_AD 1550 0.60 0.92 0.43 191 XMMoneyMeta_00 1549 0.51 0.67 0.43 192 HTML_FONT_FACE_BAD 1538 0.49 0.61 0.43 193 HTML_IMAGE_ONLY_28 1524 0.39 0.32 0.43 194 MIME_CHARSET_FARAWAY 1523 0.49 0.61 0.43 195 TM2_M_BODY_EMPTY 1511 0.33 0.15 0.42 196 MSGID_FROM_MTA_HEADER 1508 0.31 0.09 0.42 197 HTML_IMAGE_ONLY_24 1490 0.34 0.20 0.42 198 TR_XM_SPAMCOP 1490 2.86 7.56 0.42 199 PLING_QUERY 1485 0.50 0.65 0.42 200 XM_ProductURIs 1480 0.63 1.05 0.41 ----------------------------------------------------------------------