Email: 566496 Autolearn: 0 AvgScore: 2.64 AvgScanTime: 1.27 sec Spam: 169135 Autolearn: 0 AvgScore: 13.46 AvgScanTime: 1.44 sec Ham: 397361 Autolearn: 0 AvgScore: -1.97 AvgScanTime: 1.19 sec Time Spent Running SA: 199.38 hours Time Spent Processing Spam: 67.55 hours Time Spent Processing Ham: 131.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163370 91.87 96.59 89.86 2 DKIM_SIGNED 153918 72.98 91.00 65.30 3 XM_DK_Pass 147850 71.07 87.42 64.11 4 DKIM_VALID 146016 70.10 86.33 63.19 5 RELAYCOUNTRY_US 143567 81.94 84.88 80.69 6 XM_B_Unicode 140851 77.09 83.28 74.46 7 DCC_CHECK 127142 45.71 75.17 33.16 8 XM_B_SpammyWords 122520 54.24 72.44 46.49 9 XMListUnsubscribeExists 120632 51.47 71.32 43.02 10 DKIM_VALID_AU 119213 56.83 70.48 51.02 11 LOC_TINY_FONT_1 78402 29.58 46.35 22.43 12 XM_B_Unicode3 78179 43.83 46.22 42.81 13 XM_DK_Undo_02 78095 17.12 46.17 4.75 14 XM_B_SpammyWords2 69674 25.62 41.19 18.99 15 HTML_FONT_LOW_CONTRAST 64390 28.73 38.07 24.75 16 BAYES_50 63725 52.31 37.68 58.54 17 BAYES_99 62204 13.34 36.78 3.37 18 RCVD_IN_MSPIKE_H2 60646 29.29 35.86 26.50 19 TR_XM_DKIM_Undo 58449 11.85 34.56 2.18 20 FVGT_m_MULTI_ODD 57627 25.21 34.07 21.44 21 T_KAM_HTML_FONT_INVALID 55508 22.74 32.82 18.45 22 BAYES_999 50272 10.65 29.72 2.53 23 DKIM_VALID_EF 47798 25.95 28.26 24.97 24 MIME_HTML_ONLY 47745 24.19 28.23 22.47 25 TR_DCC_Bayes_99 44533 8.73 26.33 1.23 26 DCC_CHECK_NEGATIVE 41970 54.26 24.81 66.79 27 XMSubLong 38073 22.11 22.51 21.94 28 T_TM2_M_HEADER_IN_MSG 37057 26.88 21.91 28.99 29 XM_Multi_Part_URI 33415 14.06 19.76 11.64 30 TR_XM_DK_Unsub 33053 13.59 19.54 11.06 31 LOTS_OF_MONEY 27720 10.61 16.39 8.16 32 XM_B_Unsub 27574 9.90 16.30 7.17 33 TR_XM_BayesUnsub 26834 8.83 15.87 5.83 34 UNPARSEABLE_RELAY 26006 10.84 15.38 8.91 35 TR_MAX_INTL_RELAY 24590 8.33 14.54 5.69 36 RELAYCOUNTRY_META 24476 7.10 14.47 3.97 37 TR_XM_SpammyWords4 24058 8.71 14.22 6.36 38 TR_XM_SpammyWords2 23451 4.50 13.87 0.52 39 XM_B_SpammyWords3 23145 6.81 13.68 3.89 40 BOTNET_IPINHOSTNAME 20802 5.69 12.30 2.88 41 TR_XM_SpammyRelay 17452 4.59 10.32 2.15 42 XM_Evil_Numbers_Gen 16626 9.19 9.83 8.92 43 BOTNET 16614 3.76 9.82 1.18 44 FSL_BULK_SIG 16392 6.77 9.69 5.53 45 BAYES_80 15634 5.22 9.24 3.51 46 TR_XM_UnparsRelay 14839 3.52 8.77 1.28 47 RCVD_IN_BL_SPAMCOP_NET 14341 3.04 8.48 0.72 48 BAYES_60 13408 8.11 7.93 8.19 49 LotsOfNums_01 12709 7.23 7.51 7.11 50 MPART_ALT_DIFF 11508 8.12 6.80 8.68 51 UNTRUSTED_Relay 11387 3.04 6.73 1.47 52 XM_H_Long_From01 11291 5.48 6.68 4.97 53 HTML_IMAGE_RATIO_02 11276 4.81 6.67 4.02 54 TR_XM_SPAMCOP 11024 2.21 6.52 0.38 55 XM_Body_Dirty_Words 10922 3.82 6.46 2.70 56 XM_B_PhoneNumber 10844 7.75 6.41 8.31 57 HTML_IMAGE_RATIO_06 10448 4.78 6.18 4.18 58 XMBody_17 10395 2.10 6.15 0.38 59 HTML_IMAGE_RATIO_04 9778 11.57 5.78 14.03 60 XM_B_Phish_Phrases 9715 4.09 5.74 3.39 61 XMSubMetaSx_00 9620 3.48 5.69 2.54 62 XM_UncommonTLD01 8906 3.87 5.27 3.28 63 XM_SPF_SoftFail 8804 3.10 5.21 2.20 64 XM_B_SEO 8618 2.22 5.10 0.99 65 XM_H_GMP 8463 4.71 5.00 4.59 66 BAYES_95 8254 2.98 4.88 2.18 67 TooManyTo_001 8168 6.74 4.83 7.55 68 XMStrtUSub 7978 8.66 4.72 10.34 69 DKIM_INVALID 7902 2.88 4.67 2.11 70 XM_B_Investor 7876 2.44 4.66 1.49 71 TR_XM_SpammyWords5 7803 2.29 4.61 1.30 72 RCVD_IN_VALIDITY_SAFE 7651 4.28 4.52 4.17 73 RELAYCOUNTRY_CA 7611 2.13 4.50 1.13 74 TR_XM_SEO4 7591 1.76 4.49 0.60 75 MIME_HTML_MOSTLY 7401 2.94 4.38 2.32 76 XMSexyCombo_05 6863 2.10 4.06 1.27 77 T_MONEY_PERCENT 6773 1.34 4.00 0.21 78 TR_LOTS_OF_MONEY2 6773 1.34 4.00 0.21 79 TR_XM_PhishingBody 6691 2.44 3.96 1.79 80 MIME_HTML_ONLY_MULTI 6631 6.15 3.92 7.11 81 T_XMDrugObfuBody_08 6491 2.11 3.84 1.37 82 T_XMDrugObfuBody_14 6456 2.12 3.82 1.39 83 XMNumbers 6372 2.82 3.77 2.42 84 RCVD_IN_VALIDITY_CERTIFIED 6059 3.53 3.58 3.51 85 RCVD_IN_VALIDITY_RPBL 6025 1.17 3.56 0.16 86 USER_IN_DEF_DKIM_WL 5977 9.17 3.53 11.56 87 TM2_M_VERY_LONG_WORD 5915 1.78 3.50 1.05 88 MIME_QP_LONG_LINE 5883 4.24 3.48 4.56 89 XM_B_SpammyTLD 5842 2.54 3.45 2.16 90 XM_OfRef6 5801 1.59 3.43 0.81 91 RCVD_IN_MSPIKE_WL 5778 4.25 3.42 4.61 92 RCVD_IN_MSPIKE_H3 5778 4.25 3.42 4.61 93 HTML_IMAGE_RATIO_08 5644 2.35 3.34 1.93 94 XM_CamelCaseFrm001 5502 2.40 3.25 2.03 95 XM_UB50 5379 1.55 3.18 0.86 96 FROM_EXCESS_BASE64 5370 2.26 3.17 1.87 97 XM_URI_RBL 5218 1.12 3.09 0.29 98 TR_LOTS_OF_MONEY3 4721 1.13 2.79 0.43 99 TM2_M_URI_OPT_OUT 4450 1.80 2.63 1.45 100 T_TooManySym_01 4423 3.99 2.62 4.58 101 XMBrknScrpt_02 4394 1.44 2.60 0.95 102 SUBJ_ALL_CAPS 4336 1.62 2.56 1.22 103 XM_B_Unsub2 4034 1.87 2.39 1.66 104 XM_B_SpammyWords4 3860 1.04 2.28 0.51 105 RELAYCOUNTRY_AU 3766 1.27 2.23 0.86 106 ALL_TRUSTED 3750 12.06 2.22 16.25 107 XMDiploma_00 3495 1.76 2.07 1.62 108 TR_XM_NoHeaderRelay 3485 0.70 2.06 0.12 109 MAILING_LIST_MULTI 3332 2.42 1.97 2.61 110 URI_TRY_3LD 3003 1.11 1.78 0.82 111 XM_B_COPY_HTML 2913 1.02 1.72 0.72 112 SpammyFromTLD_02 2883 0.78 1.70 0.38 113 URI_HEX 2873 1.13 1.70 0.89 114 HTML_MIME_NO_HTML_TAG 2812 1.90 1.66 2.01 115 SpammyFromTLD_01 2748 0.93 1.62 0.63 116 T_XMHurry_00 2743 0.74 1.62 0.36 117 BOTNET_NORDNS 2723 0.49 1.61 0.02 118 URIBL_DBL_SPAM 2718 0.49 1.61 0.01 119 XM_DK_Undo_01 2602 1.57 1.54 1.59 120 XMStockSpam_06 2581 1.15 1.53 0.98 121 HTML_TAG_BALANCE_BODY 2571 0.85 1.52 0.56 122 T_XMDrugObfuBody_00 2569 0.83 1.52 0.54 123 TR_Symld_Words 2565 1.53 1.52 1.53 124 URI_NOVOWEL 2523 1.14 1.49 1.00 125 DKIM_ADSP_NXDOMAIN 2487 0.63 1.47 0.28 126 KHOP_HELO_FCRDNS 2485 1.20 1.47 1.08 127 T_REMOTE_IMAGE 2416 2.62 1.43 3.13 128 BAYES_40 2379 4.24 1.41 5.45 129 XMPhish30 2361 0.85 1.40 0.62 130 RCVD_IN_IADB_LISTED 2265 2.63 1.34 3.17 131 XMBdyGiftCard01 2116 0.94 1.25 0.81 132 TR_XM_INV_DKIM 2112 0.41 1.25 0.05 133 XM_SendGrid 2112 1.19 1.25 1.16 134 XM_H_Undi_Recip 2112 0.48 1.25 0.16 135 TR_Caps_n_Bayes_99 2097 0.40 1.24 0.04 136 TR_XM_PHPForged 2093 0.88 1.24 0.73 137 TR_XM_InvalidRelay 2089 0.39 1.24 0.02 138 TR_XM_PHPDW 2070 0.88 1.22 0.73 139 TR_XM_FormFill2 2034 0.87 1.20 0.73 140 XM_H_PHPOS 2024 0.86 1.20 0.72 141 XM_ProductURIs 2014 0.62 1.19 0.38 142 XM_HighProb1 1980 0.36 1.17 0.01 143 RCVD_IN_IADB_SPF 1976 2.32 1.17 2.81 144 HTTPS_HTTP_MISMATCH 1947 0.99 1.15 0.92 145 XM_H_Long_From02 1942 1.07 1.15 1.04 146 XMHTML_After_End 1894 0.53 1.12 0.28 147 DKIM_ADSP_CUSTOM_MED 1892 0.85 1.12 0.74 148 XM_UB99 1887 0.34 1.12 0.00 149 BOUNCE_MESSAGE 1885 2.39 1.11 2.94 150 ANY_BOUNCE_MESSAGE 1885 2.39 1.11 2.94 151 XMSubMetaI_00 1884 0.60 1.11 0.39 152 RCVD_IN_IADB_SENDERID 1844 2.09 1.09 2.52 153 RCVD_IN_IADB_DK 1843 2.04 1.09 2.45 154 XM_B_Phish66 1806 0.51 1.07 0.27 155 T_HTML_ATTACH 1769 0.35 1.05 0.05 156 XMMoneyMeta_00 1767 0.64 1.04 0.47 157 BAYES_20 1763 2.88 1.04 3.67 158 XM_B_DNDMA 1761 0.80 1.04 0.69 159 XMGenDplmaNmb 1754 0.87 1.04 0.80 160 T_OBFU_HTML_ATTACH 1750 0.32 1.03 0.01 161 TR_XM_Base64_M1 1747 0.70 1.03 0.55 162 DIET_1 1729 0.55 1.02 0.35 163 TM2_M_OBFU_COMMENT 1704 0.54 1.01 0.34 164 RCVD_IN_PSBL 1661 0.34 0.98 0.07 165 TR_XM_HtmlAttach 1658 0.30 0.98 0.01 166 TR_XM_Undi_Recip19 1650 0.33 0.98 0.06 167 XMSubMetaSxObfu_03 1635 0.50 0.97 0.30 168 NML_ADSP_CUSTOM_MED 1617 0.62 0.96 0.48 169 T_FILL_THIS_FORM_SHORT 1612 0.88 0.95 0.84 170 XM_B_COVIDMETA 1609 0.38 0.95 0.14 171 TR_MetaPhish_Combo_01 1605 0.73 0.95 0.64 172 T_STY_INVIS_DIRECT 1600 0.43 0.95 0.21 173 XM_DIRTYINTL 1597 0.34 0.94 0.08 174 HTML_IMAGE_ONLY_20 1579 0.54 0.93 0.37 175 TR_XM_Spammywords 1570 0.41 0.93 0.18 176 XM_S_SpammyWords 1570 0.41 0.93 0.18 177 NO_DNS_FOR_FROM 1545 0.43 0.91 0.22 178 XM_UB60 1531 0.32 0.91 0.07 179 XMReplyNow 1528 0.43 0.90 0.23 180 TR_XM_Undi_RecipCombo2 1519 0.27 0.90 0.01 181 RELAYCOUNTRY_IN 1515 0.34 0.90 0.10 182 XMBody_78 1513 0.47 0.89 0.29 183 XM_B_REG_HTML 1505 0.45 0.89 0.27 184 TR_XM_MaxWHORU 1502 0.40 0.89 0.19 185 XMPhish08 1501 0.48 0.89 0.30 186 RELAYCOUNTRY_GB 1501 0.58 0.89 0.45 187 XM_OfRef7 1487 0.34 0.88 0.11 188 THIS_AD 1472 0.50 0.87 0.34 189 MPART_ALT_DIFF_COUNT 1436 0.60 0.85 0.50 190 RELAYCOUNTRY_FR 1434 0.42 0.85 0.24 191 PLING_QUERY 1431 0.60 0.85 0.50 192 AC_BR_BONANZA 1423 0.28 0.84 0.05 193 FORGED_GMAIL_RCVD 1411 0.55 0.83 0.43 194 XM_UB80 1405 0.27 0.83 0.03 195 XM_BadFromFormat 1402 0.31 0.83 0.10 196 HTML_FONT_FACE_BAD 1400 8.94 0.83 12.39 197 T_TooManySym_02 1368 1.87 0.81 2.32 198 LongTLD 1364 0.50 0.81 0.38 199 RDNS_DYNAMIC 1362 0.42 0.81 0.26 200 XM_UB999 1343 0.24 0.79 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 357060 91.87 96.59 89.86 2 RELAYCOUNTRY_US 320644 81.94 84.88 80.69 3 XM_B_Unicode 295856 77.09 83.28 74.46 4 DCC_CHECK_NEGATIVE 265414 54.26 24.81 66.79 5 DKIM_SIGNED 259488 72.98 91.00 65.30 6 XM_DK_Pass 254757 71.07 87.42 64.11 7 DKIM_VALID 251087 70.10 86.33 63.19 8 BAYES_50 232599 52.31 37.68 58.54 9 DKIM_VALID_AU 202739 56.83 70.48 51.02 10 XM_B_SpammyWords 184729 54.24 72.44 46.49 11 XMListUnsubscribeExists 170937 51.47 71.32 43.02 12 XM_B_Unicode3 170123 43.83 46.22 42.81 13 DCC_CHECK 131779 45.71 75.17 33.16 14 T_TM2_M_HEADER_IN_MSG 115213 26.88 21.91 28.99 15 RCVD_IN_MSPIKE_H2 105292 29.29 35.86 26.50 16 DKIM_VALID_EF 99212 25.95 28.26 24.97 17 HTML_FONT_LOW_CONTRAST 98336 28.73 38.07 24.75 18 MIME_HTML_ONLY 89277 24.19 28.23 22.47 19 LOC_TINY_FONT_1 89147 29.58 46.35 22.43 20 XMSubLong 87183 22.11 22.51 21.94 21 FVGT_m_MULTI_ODD 85176 25.21 34.07 21.44 22 XM_B_SpammyWords2 75462 25.62 41.19 18.99 23 T_KAM_HTML_FONT_INVALID 73319 22.74 32.82 18.45 24 ALL_TRUSTED 64556 12.06 2.22 16.25 25 HTML_IMAGE_RATIO_04 55756 11.57 5.78 14.03 26 HTML_FONT_FACE_BAD 49219 8.94 0.83 12.39 27 BAYES_00 48808 8.78 0.56 12.28 28 XM_H_Trusted_IP 46599 8.23 0.00 11.73 29 XM_Multi_Part_URI 46241 14.06 19.76 11.64 30 USER_IN_DEF_DKIM_WL 45945 9.17 3.53 11.56 31 TR_XM_DK_Unsub 43949 13.59 19.54 11.06 32 XMStrtUSub 41078 8.66 4.72 10.34 33 XM_Evil_Numbers_Gen 35426 9.19 9.83 8.92 34 UNPARSEABLE_RELAY 35399 10.84 15.38 8.91 35 MPART_ALT_DIFF 34483 8.12 6.80 8.68 36 XM_B_PhoneNumber 33034 7.75 6.41 8.31 37 BAYES_60 32563 8.11 7.93 8.19 38 LOTS_OF_MONEY 32405 10.61 16.39 8.16 39 TooManyTo_001 30008 6.74 4.83 7.55 40 XM_B_Unsub 28486 9.90 16.30 7.17 41 LotsOfNums_01 28269 7.23 7.51 7.11 42 MIME_HTML_ONLY_MULTI 28234 6.15 3.92 7.11 43 XM_DKIMWhitelistDomains 25314 4.49 0.09 6.37 44 TR_XM_SpammyWords4 25279 8.71 14.22 6.36 45 IN_ZIMBRA_NJ_WHITELIST 24261 4.31 0.09 6.11 46 TR_XM_BayesUnsub 23181 8.83 15.87 5.83 47 TR_MAX_INTL_RELAY 22624 8.33 14.54 5.69 48 TR_XM_DK_Bayes 22020 4.00 0.39 5.54 49 FSL_BULK_SIG 21960 6.77 9.69 5.53 50 TR_XM_DK_Bayes1 21661 3.94 0.38 5.45 51 BAYES_40 21656 4.24 1.41 5.45 52 XM_H_Long_From01 19734 5.48 6.68 4.97 53 XM_DK_Undo_02 18866 17.12 46.17 4.75 54 RCVD_IN_MSPIKE_WL 18299 4.25 3.42 4.61 55 RCVD_IN_MSPIKE_H3 18299 4.25 3.42 4.61 56 XM_H_GMP 18242 4.71 5.00 4.59 57 T_TooManySym_01 18202 3.99 2.62 4.58 58 MIME_QP_LONG_LINE 18132 4.24 3.48 4.56 59 TR_XM_DK_Bayes2 17984 3.25 0.26 4.53 60 HTML_IMAGE_RATIO_06 16628 4.78 6.18 4.18 61 XMSubNoVowel 16621 3.04 0.36 4.18 62 RCVD_IN_VALIDITY_SAFE 16586 4.28 4.52 4.17 63 HTML_IMAGE_RATIO_02 15955 4.81 6.67 4.02 64 RELAYCOUNTRY_META 15762 7.10 14.47 3.97 65 XM_PDF 15719 2.97 0.65 3.96 66 XM_B_SpammyWords3 15460 6.81 13.68 3.89 67 BAYES_20 14566 2.88 1.04 3.67 68 BAYES_80 13962 5.22 9.24 3.51 69 RCVD_IN_VALIDITY_CERTIFIED 13955 3.53 3.58 3.51 70 XM_B_Phish_Phrases 13457 4.09 5.74 3.39 71 BAYES_99 13377 13.34 36.78 3.37 72 XM_UncommonTLD01 13034 3.87 5.27 3.28 73 RCVD_IN_IADB_LISTED 12615 2.63 1.34 3.17 74 T_REMOTE_IMAGE 12444 2.62 1.43 3.13 75 ANY_BOUNCE_MESSAGE 11668 2.39 1.11 2.94 76 BOUNCE_MESSAGE 11667 2.39 1.11 2.94 77 BOTNET_IPINHOSTNAME 11439 5.69 12.30 2.88 78 BAYES_05 11183 2.12 0.48 2.81 79 RCVD_IN_IADB_SPF 11163 2.32 1.17 2.81 80 XM_Body_Dirty_Words 10745 3.82 6.46 2.70 81 MAILING_LIST_MULTI 10369 2.42 1.97 2.61 82 XMSubMetaSx_00 10074 3.48 5.69 2.54 83 BAYES_999 10035 10.65 29.72 2.53 84 RCVD_IN_IADB_SENDERID 10012 2.09 1.09 2.52 85 TooManyTo_002 10007 1.97 0.70 2.52 86 RCVD_IN_IADB_DK 9734 2.04 1.09 2.45 87 XMNumbers 9615 2.82 3.77 2.42 88 MIME_HTML_MOSTLY 9236 2.94 4.38 2.32 89 T_TooManySym_02 9205 1.87 0.81 2.32 90 XM_SPF_SoftFail 8750 3.10 5.21 2.20 91 TR_XM_DKIM_Undo 8661 11.85 34.56 2.18 92 BAYES_95 8644 2.98 4.88 2.18 93 XM_B_SpammyTLD 8572 2.54 3.45 2.16 94 TR_XM_SpammyRelay 8558 4.59 10.32 2.15 95 DKIM_INVALID 8401 2.88 4.67 2.11 96 XMSubLongNoVowel 8211 1.48 0.11 2.07 97 RCVD_IN_IADB_VOUCHED 8173 1.67 0.75 2.06 98 XM_CamelCaseFrm001 8083 2.40 3.25 2.03 99 XMSubGarbage 8019 1.43 0.03 2.02 100 HTML_MIME_NO_HTML_TAG 7974 1.90 1.66 2.01 101 HTML_IMAGE_RATIO_08 7672 2.35 3.34 1.93 102 FROM_EXCESS_BASE64 7435 2.26 3.17 1.87 103 INVALID_MSGID 7424 1.36 0.18 1.87 104 TR_XM_PhishingBody 7108 2.44 3.96 1.79 105 XM_B_Unsub2 6584 1.87 2.39 1.66 106 TO_MALFORMED 6510 1.15 0.01 1.64 107 XMDiploma_00 6448 1.76 2.07 1.62 108 XM_DK_Undo_01 6310 1.57 1.54 1.59 109 HELO_NODOT 6195 1.16 0.23 1.56 110 HELO_NO_DOMAIN 6193 1.16 0.22 1.56 111 TR_Symld_Words 6082 1.53 1.52 1.53 112 XM_B_Investor 5919 2.44 4.66 1.49 113 UNTRUSTED_Relay 5854 3.04 6.73 1.47 114 RCVD_IN_IADB_OPTIN 5793 1.16 0.45 1.46 115 TM2_M_URI_OPT_OUT 5775 1.80 2.63 1.45 116 TooManyTo_003 5650 1.18 0.62 1.42 117 T_XMDrugObfuBody_14 5536 2.12 3.82 1.39 118 T_XMDrugObfuBody_08 5458 2.11 3.84 1.37 119 TR_XM_SpammyWords5 5171 2.29 4.61 1.30 120 TR_XM_UnparsRelay 5078 3.52 8.77 1.28 121 XMSexyCombo_05 5037 2.10 4.06 1.27 122 TR_DCC_Bayes_99 4897 8.73 26.33 1.23 123 SUBJ_ALL_CAPS 4862 1.62 2.56 1.22 124 IN_HORDE_ADDRESS_BOOK 4851 0.88 0.08 1.22 125 TO_NO_BRKTS_HTML_ONLY 4785 0.94 0.32 1.20 126 BOTNET 4703 3.76 9.82 1.18 127 XM_SendGrid 4606 1.19 1.25 1.16 128 RELAYCOUNTRY_CA 4476 2.13 4.50 1.13 129 KHOP_HELO_FCRDNS 4306 1.20 1.47 1.08 130 XM_GoogleGroups 4282 0.94 0.63 1.08 131 TM2_M_VERY_LONG_WORD 4188 1.78 3.50 1.05 132 XM_H_Long_From02 4140 1.07 1.15 1.04 133 XMCapTrack 4125 0.90 0.59 1.04 134 XM_H_PHPMailer 4118 0.89 0.53 1.04 135 TooManyTo_004 4047 0.89 0.57 1.02 136 URI_NOVOWEL 3956 1.14 1.49 1.00 137 XM_B_SEO 3946 2.22 5.10 0.99 138 XMStockSpam_06 3906 1.15 1.53 0.98 139 TVD_SPACE_RATIO 3866 0.73 0.15 0.97 140 XMBrknScrpt_02 3770 1.44 2.60 0.95 141 HTTPS_HTTP_MISMATCH 3636 0.99 1.15 0.92 142 XM_E_Blogspot 3617 0.67 0.10 0.91 143 URI_HEX 3550 1.13 1.70 0.89 144 XMGappySubj_01 3510 0.66 0.15 0.88 145 RELAYCOUNTRY_AU 3424 1.27 2.23 0.86 146 XM_UB50 3421 1.55 3.18 0.86 147 T_FILL_THIS_FORM_SHORT 3347 0.88 0.95 0.84 148 TooManyTo_005 3328 0.75 0.55 0.84 149 URI_TRY_3LD 3264 1.11 1.78 0.82 150 T_TooManySym_03 3243 0.64 0.24 0.82 151 XM_OfRef6 3228 1.59 3.43 0.81 152 XMBdyGiftCard01 3224 0.94 1.25 0.81 153 FROM_GOV_DKIM_AU 3209 0.69 0.40 0.81 154 XMGenDplmaNmb 3165 0.87 1.04 0.80 155 TR_XM_DK_SendGrid 3043 0.76 0.76 0.77 156 DKIM_ADSP_CUSTOM_MED 2928 0.85 1.12 0.74 157 TR_XM_PHPForged 2917 0.88 1.24 0.73 158 TR_XM_FormFill2 2909 0.87 1.20 0.73 159 TR_XM_PHPDW 2893 0.88 1.22 0.73 160 XM_H_PHPOS 2872 0.86 1.20 0.72 161 XM_B_COPY_HTML 2861 1.02 1.72 0.72 162 RCVD_IN_BL_SPAMCOP_NET 2858 3.04 8.48 0.72 163 XM_B_DNDMA 2754 0.80 1.04 0.69 164 XMNoVowels 2694 0.62 0.48 0.68 165 XM_ShortIntro_01 2564 0.62 0.54 0.65 166 TR_MetaPhish_Combo_01 2555 0.73 0.95 0.64 167 SpammyFromTLD_01 2499 0.93 1.62 0.63 168 XMPhish30 2480 0.85 1.40 0.62 169 T_Symld_Words_02 2444 0.63 0.67 0.62 170 XMLngstWrd_00 2394 0.60 0.59 0.60 171 TR_XM_SEO4 2378 1.76 4.49 0.60 172 XM_RXBody 2369 0.63 0.71 0.60 173 T_OBFU_PDF_ATTACH 2315 0.46 0.16 0.58 174 XMBody_95 2307 0.47 0.20 0.58 175 HTML_TAG_BALANCE_BODY 2217 0.85 1.52 0.56 176 TR_XM_Base64_M1 2195 0.70 1.03 0.55 177 XMPhish14 2172 0.56 0.59 0.55 178 T_XMDrugObfuBody_00 2148 0.83 1.52 0.54 179 TVD_RCVD_IP 2095 0.58 0.71 0.53 180 TR_XM_SpammyWords2 2062 4.50 13.87 0.52 181 XM_B_SpammyWords4 2027 1.04 2.28 0.51 182 PLING_QUERY 1981 0.60 0.85 0.50 183 MPART_ALT_DIFF_COUNT 1975 0.60 0.85 0.50 184 NML_ADSP_CUSTOM_MED 1903 0.62 0.96 0.48 185 SHORT_HELO_AND_INLINE_IMAGE 1898 0.35 0.04 0.48 186 XM_H_PHPOS_M 1891 0.40 0.21 0.48 187 XMMoneyMeta_00 1848 0.64 1.04 0.47 188 RELAYCOUNTRY_GB 1802 0.58 0.89 0.45 189 FORGED_GMAIL_RCVD 1724 0.55 0.83 0.43 190 T_MANY_PILL_PRICE 1703 0.30 0.00 0.43 191 TR_LOTS_OF_MONEY3 1690 1.13 2.79 0.43 192 XM_B_FormFill 1662 0.30 0.02 0.42 193 HTML_IMAGE_ONLY_32 1630 0.34 0.19 0.41 194 USER_IN_WELCOMELIST 1610 0.28 0.00 0.41 195 USER_IN_WHITELIST 1610 0.28 0.00 0.41 196 XMGappySubj_02 1609 0.30 0.07 0.40 197 HTML_IMAGE_ONLY_28 1601 0.41 0.43 0.40 198 XMSubMetaI_00 1531 0.60 1.11 0.39 199 XMBody_17 1527 2.10 6.15 0.38 200 TR_XM_SPAMCOP 1511 2.21 6.52 0.38 ----------------------------------------------------------------------