Email: 542767 Autolearn: 0 AvgScore: 4.82 AvgScanTime: 1.21 sec Spam: 182214 Autolearn: 0 AvgScore: 13.25 AvgScanTime: 1.34 sec Ham: 360553 Autolearn: 0 AvgScore: 0.56 AvgScanTime: 1.15 sec Time Spent Running SA: 183.00 hours Time Spent Processing Spam: 67.76 hours Time Spent Processing Ham: 115.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 176902 89.78 97.08 86.08 2 DKIM_SIGNED 170008 78.47 93.30 70.97 3 XM_DK_Pass 164570 76.61 90.32 69.68 4 DKIM_VALID 162602 75.47 89.24 68.51 5 XM_B_Unicode 160613 76.90 88.15 71.21 6 RELAYCOUNTRY_US 160091 79.36 87.86 75.07 7 XMListUnsubscribeExists 140284 57.75 76.99 48.02 8 DCC_CHECK 139130 49.80 76.36 36.38 9 XM_B_SpammyWords 134846 57.12 74.00 48.58 10 DKIM_VALID_AU 133143 61.07 73.07 55.01 11 XM_DK_Undo_02 92794 20.94 50.93 5.79 12 XM_B_Unicode3 81288 44.27 44.61 44.10 13 XM_B_SpammyWords2 80704 31.39 44.29 24.87 14 LOC_TINY_FONT_1 78936 30.83 43.32 24.52 15 HTML_FONT_LOW_CONTRAST 76842 31.68 42.17 26.38 16 BAYES_99 75123 16.95 41.23 4.69 17 RCVD_IN_MSPIKE_H2 73761 32.57 40.48 28.57 18 TR_XM_DKIM_Undo 69843 14.72 38.33 2.79 19 FVGT_m_MULTI_ODD 68850 28.54 37.79 23.87 20 BAYES_50 63158 52.54 34.66 61.57 21 BAYES_999 61687 13.55 33.85 3.28 22 T_KAM_HTML_FONT_INVALID 56606 23.30 31.07 19.37 23 TR_DCC_Bayes_99 56518 11.52 31.02 1.67 24 DKIM_VALID_EF 51559 26.67 28.30 25.85 25 DCC_CHECK_NEGATIVE 43064 50.17 23.63 63.59 26 MIME_HTML_ONLY 41562 24.24 22.81 24.96 27 T_TM2_M_HEADER_IN_MSG 40937 25.98 22.47 27.75 28 TR_XM_DK_Unsub 38946 14.98 21.37 11.76 29 XMSubLong 37474 25.62 20.57 28.17 30 XM_Multi_Part_URI 35912 16.03 19.71 14.17 31 LOTS_OF_MONEY 34512 10.95 18.94 6.91 32 TR_XM_SpammyWords2 33762 6.73 18.53 0.76 33 TR_XM_SpammyWords4 32255 9.11 17.70 4.77 34 XM_B_SpammyWords3 27620 8.10 15.16 4.53 35 UNPARSEABLE_RELAY 26892 11.64 14.76 10.06 36 XM_B_Unsub 25307 13.64 13.89 13.51 37 TR_MAX_INTL_RELAY 24861 8.87 13.64 6.45 38 TR_XM_BayesUnsub 24523 12.51 13.46 12.04 39 BOTNET_IPINHOSTNAME 22698 6.40 12.46 3.35 40 RELAYCOUNTRY_META 22597 6.88 12.40 4.10 41 RCVD_IN_BL_SPAMCOP_NET 17106 3.66 9.39 0.77 42 TR_XM_SpammyRelay 16265 4.58 8.93 2.38 43 TR_XM_UnparsRelay 15731 3.92 8.63 1.53 44 BAYES_80 15257 5.42 8.37 3.92 45 LotsOfNums_01 14538 7.95 7.98 7.94 46 TR_LOTS_OF_MONEY3 14458 3.43 7.93 1.15 47 BOTNET 14066 3.59 7.72 1.50 48 TR_XM_SPAMCOP 13710 2.82 7.52 0.45 49 XM_Evil_Numbers_Gen 13696 7.87 7.52 8.05 50 BAYES_60 13074 8.38 7.18 8.98 51 FSL_BULK_SIG 13073 6.27 7.17 5.81 52 XMBody_17 11881 2.72 6.52 0.80 53 HTML_IMAGE_RATIO_02 11448 5.09 6.28 4.48 54 XM_Body_Dirty_Words 10880 3.60 5.97 2.41 55 XMSubMetaSx_00 10403 3.62 5.71 2.56 56 MPART_ALT_DIFF 9501 4.26 5.21 3.78 57 BAYES_95 9093 3.35 4.99 2.52 58 HTML_IMAGE_RATIO_04 9059 4.17 4.97 3.76 59 UNTRUSTED_Relay 8990 2.61 4.93 1.43 60 XM_B_Phish_Phrases 8899 4.10 4.88 3.70 61 XM_B_Investor 8835 2.52 4.85 1.34 62 XM_H_Long_From01 8786 5.04 4.82 5.14 63 XM_B_PhoneNumber 8705 6.97 4.78 8.07 64 XM_UncommonTLD01 8438 3.98 4.63 3.65 65 XM_OfRef6 8203 2.12 4.50 0.92 66 RELAYCOUNTRY_CA 8159 2.27 4.48 1.15 67 XM_B_SEO 8105 2.34 4.45 1.27 68 XM_SPF_SoftFail 7782 2.83 4.27 2.10 69 RCVD_IN_VALIDITY_RPBL 7660 1.56 4.20 0.22 70 USER_IN_DEF_DKIM_WL 7410 10.02 4.07 13.02 71 DKIM_INVALID 7406 3.00 4.06 2.47 72 TooManyTo_001 7348 10.49 4.03 13.75 73 HTML_IMAGE_RATIO_08 7338 2.77 4.03 2.14 74 TR_XM_SEO4 7224 1.88 3.96 0.83 75 XM_H_GMP 6877 4.37 3.77 4.67 76 TR_XM_PhishingBody 6767 2.20 3.71 1.44 77 RCVD_IN_VALIDITY_SAFE 6760 4.20 3.71 4.45 78 XMSexyCombo_05 6727 1.85 3.69 0.92 79 TM2_M_VERY_LONG_WORD 6699 2.20 3.68 1.46 80 HTML_IMAGE_RATIO_06 6596 2.82 3.62 2.42 81 MIME_HTML_MOSTLY 6562 2.72 3.60 2.27 82 TR_XM_SpammyWords5 6310 1.91 3.46 1.13 83 T_XMDrugObfuBody_08 6286 2.18 3.45 1.54 84 T_XMDrugObfuBody_14 6195 2.18 3.40 1.56 85 XMBrknScrpt_02 6060 1.81 3.33 1.04 86 XMStrtUSub 5888 8.16 3.23 10.65 87 XM_B_SpammyTLD 5814 3.56 3.19 3.74 88 MIME_QP_LONG_LINE 5712 4.12 3.13 4.61 89 RCVD_IN_MSPIKE_WL 5666 4.34 3.11 4.96 90 RCVD_IN_MSPIKE_H3 5666 4.34 3.11 4.96 91 XMNumbers 5448 2.60 2.99 2.40 92 MIME_HTML_ONLY_MULTI 5393 2.32 2.96 2.00 93 XM_CamelCaseFrm001 5381 3.00 2.95 3.02 94 T_XMHurry_00 5349 1.43 2.94 0.66 95 RCVD_IN_VALIDITY_CERTIFIED 5340 3.38 2.93 3.61 96 XM_URI_RBL 5234 1.16 2.87 0.29 97 XMDiploma_00 4844 1.97 2.66 1.62 98 XM_UB50 4665 1.40 2.56 0.81 99 XM_B_SpammyWords4 4517 1.28 2.48 0.67 100 FROM_EXCESS_BASE64 4473 2.12 2.45 1.95 101 TM2_M_URI_OPT_OUT 4460 1.84 2.45 1.54 102 URI_TRY_3LD 4352 1.33 2.39 0.80 103 T_TooManySym_01 4036 4.13 2.21 5.10 104 RELAYCOUNTRY_AU 3938 1.44 2.16 1.08 105 SUBJ_ALL_CAPS 3931 1.65 2.16 1.39 106 XM_B_Unsub2 3807 1.61 2.09 1.37 107 MAILING_LIST_MULTI 3467 2.34 1.90 2.55 108 T_REMOTE_IMAGE 3181 2.82 1.75 3.36 109 T_FILL_THIS_FORM_SHORT 3057 1.39 1.68 1.25 110 HTML_TAG_BALANCE_BODY 3048 0.90 1.67 0.51 111 KHOP_HELO_FCRDNS 2877 1.32 1.58 1.19 112 HTML_MIME_NO_HTML_TAG 2872 2.19 1.58 2.49 113 BAYES_40 2806 3.85 1.54 5.01 114 XMStockSpam_06 2786 1.20 1.53 1.04 115 RCVD_IN_IADB_LISTED 2725 2.90 1.50 3.62 116 HOSTED_IMG_MULTI_PUB_01 2675 0.54 1.47 0.07 117 AC_BR_BONANZA 2664 0.60 1.46 0.16 118 T_XMDrugObfuBody_00 2587 0.98 1.42 0.77 119 TR_XM_NoHeaderRelay 2454 0.57 1.35 0.18 120 XM_DK_Undo_01 2386 1.48 1.31 1.57 121 SpammyFromTLD_01 2380 0.99 1.31 0.83 122 RCVD_IN_IADB_SPF 2358 2.53 1.29 3.15 123 ALL_TRUSTED 2335 14.81 1.28 21.65 124 SpammyFromTLD_02 2301 0.70 1.26 0.41 125 XMGenDplmaNmb 2279 0.90 1.25 0.72 126 RCVD_IN_IADB_SENDERID 2204 2.25 1.21 2.78 127 RCVD_IN_IADB_DK 2197 2.19 1.21 2.69 128 URI_HEX 2193 1.08 1.20 1.01 129 TR_XM_PHPForged 2187 0.63 1.20 0.34 130 XM_B_COVIDMETA 2187 0.51 1.20 0.16 131 URI_NOVOWEL 2186 2.29 1.20 2.84 132 TR_XM_PHPDW 2185 0.63 1.20 0.34 133 XM_HighProb1 2157 0.40 1.18 0.01 134 XM_SendGrid 2143 1.17 1.18 1.17 135 TR_XM_FormFill2 2126 0.62 1.17 0.35 136 TR_Caps_n_Bayes_99 2118 0.41 1.16 0.03 137 XM_H_PHPOS 2117 0.61 1.16 0.33 138 XM_ProductURIs 2105 1.16 1.16 1.17 139 TR_Symld_Words 2072 1.75 1.14 2.07 140 T_Symld_Words_02 2019 0.68 1.11 0.46 141 XMBdyGiftCard01 2013 0.87 1.10 0.75 142 TR_MetaPhish_Combo_01 1978 0.86 1.09 0.75 143 THIS_AD 1938 0.61 1.06 0.38 144 HTTPS_HTTP_MISMATCH 1934 0.88 1.06 0.78 145 XM_B_Phish66 1876 0.57 1.03 0.34 146 XMPhish30 1850 0.68 1.02 0.51 147 TR_XM_FormFill 1841 0.50 1.01 0.24 148 MIME_CHARSET_FARAWAY 1839 0.53 1.01 0.28 149 XM_B_COPY_HTML 1838 0.71 1.01 0.56 150 TR_XM_Base64_M1 1826 0.79 1.00 0.69 151 TR_XM_INV_DKIM 1807 0.36 0.99 0.04 152 XMSubMetaSxObfu_02 1779 0.44 0.98 0.16 153 LONGLN_LOW_CONTRAST 1771 0.41 0.97 0.13 154 BOUNCE_MESSAGE 1730 2.19 0.95 2.82 155 ANY_BOUNCE_MESSAGE 1730 2.19 0.95 2.82 156 XM_H_Undi_Recip 1713 0.42 0.94 0.15 157 RDNS_DYNAMIC 1707 0.52 0.94 0.31 158 BAYES_20 1701 2.34 0.93 3.05 159 XMReplyNow 1681 0.49 0.92 0.27 160 PDS_RDNS_DYNAMIC_FP 1680 0.42 0.92 0.17 161 URIBL_DBL_SPAM 1676 0.31 0.92 0.00 162 TVD_RCVD_IP 1672 0.57 0.92 0.40 163 XMHTML_After_End 1646 0.48 0.90 0.26 164 XM_DIRTYINTL 1640 0.43 0.90 0.19 165 XM_PDF 1636 3.51 0.90 4.83 166 DKIM_ADSP_CUSTOM_MED 1620 0.82 0.89 0.79 167 PLING_QUERY 1566 0.61 0.86 0.48 168 HTML_FONT_FACE_BAD 1559 0.56 0.86 0.41 169 T_STY_INVIS_DIRECT 1546 0.54 0.85 0.39 170 RELAYCOUNTRY_FR 1542 0.41 0.85 0.19 171 FROM_GOV_DKIM_AU 1508 0.78 0.83 0.76 172 XMPhish14 1487 0.48 0.82 0.30 173 SHOPIFY_IMG_NOT_RCVD_SFY 1476 0.48 0.81 0.31 174 TM2_M_OBFU_COMMENT 1463 0.47 0.80 0.30 175 XM_B_DNDMA 1463 0.70 0.80 0.65 176 TR_LOTS_OF_MONEY2 1451 0.40 0.80 0.20 177 T_MONEY_PERCENT 1451 0.40 0.80 0.20 178 RCVD_IN_IADB_VOUCHED 1447 1.94 0.79 2.52 179 BOTNET_NORDNS 1438 0.27 0.79 0.01 180 SUBJ_DOLLARS 1431 0.56 0.79 0.44 181 HTML_FONT_TINY_NORDNS 1401 0.31 0.77 0.08 182 TooManyTo_002 1400 1.79 0.77 2.31 183 XMSubMetaI_00 1389 0.53 0.76 0.41 184 NML_ADSP_CUSTOM_MED 1384 0.58 0.76 0.49 185 XMSubMetaSxObfu_03 1383 0.48 0.76 0.35 186 HTML_OBFUSCATE_05_10 1379 0.34 0.76 0.12 187 XMSexyCombo_01 1377 0.35 0.76 0.14 188 LongTLD 1369 0.49 0.75 0.36 189 TR_XM_DK_SendGrid 1361 0.74 0.75 0.73 190 TR_XM_InvalidRelay 1347 0.26 0.74 0.02 191 XMHTMLBadTable_001 1328 0.43 0.73 0.28 192 DKIM_ADSP_NXDOMAIN 1327 0.44 0.73 0.30 193 RCVD_IN_PSBL 1327 0.29 0.73 0.06 194 TR_Mismatch_TLD_02 1308 0.27 0.72 0.04 195 XM_UB99 1294 0.24 0.71 0.00 196 TooManyTo_003 1258 1.13 0.69 1.35 197 XM_H_Long_From02 1229 0.91 0.67 1.04 198 TM2_M_A_HREF_HREF 1222 0.39 0.67 0.24 199 XM_OfRef7 1214 0.32 0.67 0.15 200 MPART_ALT_DIFF_COUNT 1190 0.50 0.65 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 310379 89.78 97.08 86.08 2 RELAYCOUNTRY_US 270669 79.36 87.86 75.07 3 XM_B_Unicode 256761 76.90 88.15 71.21 4 DKIM_SIGNED 255899 78.47 93.30 70.97 5 XM_DK_Pass 251232 76.61 90.32 69.68 6 DKIM_VALID 247011 75.47 89.24 68.51 7 DCC_CHECK_NEGATIVE 229261 50.17 23.63 63.59 8 BAYES_50 222006 52.54 34.66 61.57 9 DKIM_VALID_AU 198328 61.07 73.07 55.01 10 XM_B_SpammyWords 175170 57.12 74.00 48.58 11 XMListUnsubscribeExists 173144 57.75 76.99 48.02 12 XM_B_Unicode3 158993 44.27 44.61 44.10 13 DCC_CHECK 131165 49.80 76.36 36.38 14 RCVD_IN_MSPIKE_H2 103015 32.57 40.48 28.57 15 XMSubLong 101560 25.62 20.57 28.17 16 T_TM2_M_HEADER_IN_MSG 100050 25.98 22.47 27.75 17 HTML_FONT_LOW_CONTRAST 95112 31.68 42.17 26.38 18 DKIM_VALID_EF 93206 26.67 28.30 25.85 19 MIME_HTML_ONLY 89984 24.24 22.81 24.96 20 XM_B_SpammyWords2 89687 31.39 44.29 24.87 21 LOC_TINY_FONT_1 88405 30.83 43.32 24.52 22 FVGT_m_MULTI_ODD 86072 28.54 37.79 23.87 23 ALL_TRUSTED 78054 14.81 1.28 21.65 24 T_KAM_HTML_FONT_INVALID 69856 23.30 31.07 19.37 25 XM_Multi_Part_URI 51108 16.03 19.71 14.17 26 TooManyTo_001 49566 10.49 4.03 13.75 27 XM_B_Unsub 48711 13.64 13.89 13.51 28 USER_IN_DEF_DKIM_WL 46950 10.02 4.07 13.02 29 TR_XM_BayesUnsub 43394 12.51 13.46 12.04 30 TR_XM_DK_Unsub 42384 14.98 21.37 11.76 31 XMStrtUSub 38386 8.16 3.23 10.65 32 UNPARSEABLE_RELAY 36262 11.64 14.76 10.06 33 BAYES_60 32387 8.38 7.18 8.98 34 BAYES_00 30351 5.79 0.60 8.42 35 XM_B_PhoneNumber 29113 6.97 4.78 8.07 36 XM_Evil_Numbers_Gen 29023 7.87 7.52 8.05 37 LotsOfNums_01 28636 7.95 7.98 7.94 38 LOTS_OF_MONEY 24898 10.95 18.94 6.91 39 XM_DKIMWhitelistDomains 23751 4.43 0.15 6.59 40 IN_ZIMBRA_NJ_WHITELIST 23604 4.38 0.09 6.55 41 TR_MAX_INTL_RELAY 23258 8.87 13.64 6.45 42 TR_XM_DK_Bayes 22691 4.35 0.51 6.29 43 TR_XM_DK_Bayes1 21765 4.18 0.50 6.04 44 FSL_BULK_SIG 20959 6.27 7.17 5.81 45 XM_DK_Undo_02 20864 20.94 50.93 5.79 46 XM_H_Long_From01 18548 5.04 4.82 5.14 47 TR_XM_DK_Bayes2 18445 3.51 0.34 5.12 48 T_TooManySym_01 18392 4.13 2.21 5.10 49 BAYES_40 18066 3.85 1.54 5.01 50 RCVD_IN_MSPIKE_WL 17877 4.34 3.11 4.96 51 RCVD_IN_MSPIKE_H3 17877 4.34 3.11 4.96 52 XM_PDF 17408 3.51 0.90 4.83 53 TR_XM_SpammyWords4 17211 9.11 17.70 4.77 54 BAYES_99 16900 16.95 41.23 4.69 55 XM_H_GMP 16852 4.37 3.77 4.67 56 MIME_QP_LONG_LINE 16623 4.12 3.13 4.61 57 XM_B_SpammyWords3 16337 8.10 15.16 4.53 58 HTML_IMAGE_RATIO_02 16158 5.09 6.28 4.48 59 RCVD_IN_VALIDITY_SAFE 16059 4.20 3.71 4.45 60 RELAYCOUNTRY_META 14768 6.88 12.40 4.10 61 BAYES_80 14149 5.42 8.37 3.92 62 MPART_ALT_DIFF 13623 4.26 5.21 3.78 63 HTML_IMAGE_RATIO_04 13567 4.17 4.97 3.76 64 XM_B_SpammyTLD 13501 3.56 3.19 3.74 65 XM_B_Phish_Phrases 13336 4.10 4.88 3.70 66 XM_UncommonTLD01 13157 3.98 4.63 3.65 67 RCVD_IN_IADB_LISTED 13042 2.90 1.50 3.62 68 RCVD_IN_VALIDITY_CERTIFIED 13032 3.38 2.93 3.61 69 T_REMOTE_IMAGE 12112 2.82 1.75 3.36 70 BOTNET_IPINHOSTNAME 12065 6.40 12.46 3.35 71 BAYES_999 11831 13.55 33.85 3.28 72 RCVD_IN_IADB_SPF 11353 2.53 1.29 3.15 73 BAYES_20 11005 2.34 0.93 3.05 74 XM_CamelCaseFrm001 10885 3.00 2.95 3.02 75 URI_NOVOWEL 10223 2.29 1.20 2.84 76 BOUNCE_MESSAGE 10155 2.19 0.95 2.82 77 ANY_BOUNCE_MESSAGE 10155 2.19 0.95 2.82 78 TR_XM_DKIM_Undo 10069 14.72 38.33 2.79 79 RCVD_IN_IADB_SENDERID 10027 2.25 1.21 2.78 80 RCVD_IN_IADB_DK 9692 2.19 1.21 2.69 81 T_TooManySym_02 9417 1.95 0.63 2.61 82 XMSubMetaSx_00 9244 3.62 5.71 2.56 83 MAILING_LIST_MULTI 9212 2.34 1.90 2.55 84 BAYES_95 9101 3.35 4.99 2.52 85 RCVD_IN_IADB_VOUCHED 9071 1.94 0.79 2.52 86 HTML_MIME_NO_HTML_TAG 8992 2.19 1.58 2.49 87 DKIM_INVALID 8888 3.00 4.06 2.47 88 HTML_IMAGE_RATIO_06 8727 2.82 3.62 2.42 89 XM_Body_Dirty_Words 8685 3.60 5.97 2.41 90 XMNumbers 8650 2.60 2.99 2.40 91 TR_XM_SpammyRelay 8570 4.58 8.93 2.38 92 TooManyTo_002 8315 1.79 0.77 2.31 93 MIME_HTML_MOSTLY 8198 2.72 3.60 2.27 94 HTML_IMAGE_RATIO_08 7722 2.77 4.03 2.14 95 XM_SPF_SoftFail 7589 2.83 4.27 2.10 96 INVALID_MSGID 7558 1.42 0.10 2.10 97 TR_Symld_Words 7451 1.75 1.14 2.07 98 MIME_HTML_ONLY_MULTI 7196 2.32 2.96 2.00 99 FROM_EXCESS_BASE64 7023 2.12 2.45 1.95 100 TO_MALFORMED 6814 1.26 0.01 1.89 101 BAYES_05 6587 1.38 0.50 1.83 102 RCVD_IN_IADB_OPTIN 6411 1.33 0.43 1.78 103 TR_DCC_Bayes_99 6013 11.52 31.02 1.67 104 XMDiploma_00 5854 1.97 2.66 1.62 105 XM_DK_Undo_01 5659 1.48 1.31 1.57 106 T_XMDrugObfuBody_14 5625 2.18 3.40 1.56 107 TM2_M_URI_OPT_OUT 5553 1.84 2.45 1.54 108 HELO_NODOT 5548 1.13 0.32 1.54 109 HELO_NO_DOMAIN 5544 1.12 0.29 1.54 110 T_XMDrugObfuBody_08 5543 2.18 3.45 1.54 111 TR_XM_UnparsRelay 5526 3.92 8.63 1.53 112 BOTNET 5407 3.59 7.72 1.50 113 TM2_M_VERY_LONG_WORD 5252 2.20 3.68 1.46 114 TR_XM_PhishingBody 5199 2.20 3.71 1.44 115 UNTRUSTED_Relay 5160 2.61 4.93 1.43 116 SUBJ_ALL_CAPS 5012 1.65 2.16 1.39 117 XM_B_Unsub2 4951 1.61 2.09 1.37 118 IN_HORDE_ADDRESS_BOOK 4904 0.93 0.06 1.36 119 TooManyTo_003 4880 1.13 0.69 1.35 120 XM_B_Investor 4834 2.52 4.85 1.34 121 XM_B_SEO 4589 2.34 4.45 1.27 122 T_FILL_THIS_FORM_SHORT 4513 1.39 1.68 1.25 123 KHOP_HELO_FCRDNS 4304 1.32 1.58 1.19 124 XM_SendGrid 4211 1.17 1.18 1.17 125 XM_ProductURIs 4203 1.16 1.16 1.17 126 RELAYCOUNTRY_CA 4160 2.27 4.48 1.15 127 TR_LOTS_OF_MONEY3 4139 3.43 7.93 1.15 128 XMGappySubj_01 4121 0.84 0.25 1.14 129 TR_XM_SpammyWords5 4069 1.91 3.46 1.13 130 XM_GoogleGroups 3897 0.89 0.51 1.08 131 TVD_SPACE_RATIO 3889 0.76 0.12 1.08 132 RELAYCOUNTRY_AU 3888 1.44 2.16 1.08 133 XMStockSpam_06 3754 1.20 1.53 1.04 134 XMBrknScrpt_02 3748 1.81 3.33 1.04 135 XM_H_Long_From02 3736 0.91 0.67 1.04 136 T_TooManySym_03 3669 0.77 0.29 1.02 137 URI_HEX 3658 1.08 1.20 1.01 138 TooManyTo_004 3633 0.89 0.65 1.01 139 T_OBFU_PDF_ATTACH 3506 0.80 0.47 0.97 140 XMCapTrack 3433 0.77 0.40 0.95 141 XM_OfRef6 3320 2.12 4.50 0.92 142 XMSexyCombo_05 3306 1.85 3.69 0.92 143 XM_TLDProd2 3160 0.67 0.26 0.88 144 TooManyTo_005 3034 0.77 0.63 0.84 145 SpammyFromTLD_01 3002 0.99 1.31 0.83 146 TR_XM_SEO4 2993 1.88 3.96 0.83 147 XM_UB50 2921 1.40 2.56 0.81 148 XMBody_17 2874 2.72 6.52 0.80 149 URI_TRY_3LD 2870 1.33 2.39 0.80 150 DKIM_ADSP_CUSTOM_MED 2838 0.82 0.89 0.79 151 HTTPS_HTTP_MISMATCH 2821 0.88 1.06 0.78 152 RCVD_IN_BL_SPAMCOP_NET 2772 3.66 9.39 0.77 153 T_XMDrugObfuBody_00 2759 0.98 1.42 0.77 154 FROM_GOV_DKIM_AU 2740 0.78 0.83 0.76 155 TR_XM_SpammyWords2 2740 6.73 18.53 0.76 156 XMBody_95 2725 0.56 0.17 0.76 157 XMBdyGiftCard01 2711 0.87 1.10 0.75 158 TR_MetaPhish_Combo_01 2704 0.86 1.09 0.75 159 TR_XM_DK_SendGrid 2642 0.74 0.75 0.73 160 XMGenDplmaNmb 2608 0.90 1.25 0.72 161 TR_XM_Base64_M1 2488 0.79 1.00 0.69 162 XM_B_SpammyWords4 2428 1.28 2.48 0.67 163 T_XMHurry_00 2391 1.43 2.94 0.66 164 XM_ShortIntro_01 2343 0.57 0.41 0.65 165 XM_B_DNDMA 2330 0.70 0.80 0.65 166 XMNoVowels 2259 0.53 0.35 0.63 167 BASE64_LENGTH_79_INF 2184 0.56 0.47 0.61 168 XMGappySubj_02 2080 0.40 0.05 0.58 169 XM_B_COPY_HTML 2037 0.71 1.01 0.56 170 USER_IN_WELCOMELIST 1905 0.35 0.00 0.53 171 USER_IN_WHITELIST 1905 0.35 0.00 0.53 172 XM_H_PHPMailer 1846 0.50 0.47 0.51 173 XMPhish30 1842 0.68 1.02 0.51 174 HTML_TAG_BALANCE_BODY 1836 0.90 1.67 0.51 175 SHORT_HELO_AND_INLINE_IMAGE 1775 0.34 0.05 0.49 176 NML_ADSP_CUSTOM_MED 1758 0.58 0.76 0.49 177 PLING_QUERY 1726 0.61 0.86 0.48 178 T_Symld_Words_02 1669 0.68 1.11 0.46 179 HTML_IMAGE_ONLY_28 1667 0.43 0.38 0.46 180 FORGED_GMAIL_RCVD 1650 0.50 0.58 0.46 181 XMOemUri 1637 0.40 0.28 0.45 182 TM2_M_BODY_EMPTY 1635 0.32 0.06 0.45 183 TR_XM_SPAMCOP 1614 2.82 7.52 0.45 184 SUBJ_DOLLARS 1596 0.56 0.79 0.44 185 XM_B_FormFill 1587 0.31 0.05 0.44 186 MPART_ALT_DIFF_COUNT 1544 0.50 0.65 0.43 187 RELAYCOUNTRY_GB 1537 0.47 0.57 0.43 188 TO_NO_BRKTS_HTML_ONLY 1504 0.33 0.15 0.42 189 XMClaimOffer 1499 0.43 0.46 0.42 190 XMSubMetaI_00 1488 0.53 0.76 0.41 191 SpammyFromTLD_02 1480 0.70 1.26 0.41 192 HTML_FONT_FACE_BAD 1477 0.56 0.86 0.41 193 MISSING_HEADERS 1471 0.43 0.47 0.41 194 T_TVD_MIME_NO_HEADERS 1463 0.27 0.01 0.41 195 XM_B_REG_HTML 1446 0.47 0.60 0.40 196 HTML_IMAGE_ONLY_32 1446 0.31 0.13 0.40 197 TVD_RCVD_IP 1438 0.57 0.92 0.40 198 HTML_IMAGE_ONLY_20 1435 0.47 0.60 0.40 199 FILL_THIS_FORM 1426 0.32 0.17 0.40 200 T_STY_INVIS_DIRECT 1398 0.54 0.85 0.39 ----------------------------------------------------------------------