Email: 498914 Autolearn: 0 AvgScore: 4.93 AvgScanTime: 1.47 sec Spam: 170239 Autolearn: 0 AvgScore: 14.01 AvgScanTime: 1.59 sec Ham: 328675 Autolearn: 0 AvgScore: 0.23 AvgScanTime: 1.40 sec Time Spent Running SA: 203.08 hours Time Spent Processing Spam: 75.02 hours Time Spent Processing Ham: 128.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163587 89.16 96.09 85.57 2 DKIM_SIGNED 157438 82.23 92.48 76.92 3 XM_DK_Pass 152087 80.31 89.34 75.64 4 DKIM_VALID 150335 79.25 88.31 74.56 5 XM_B_Unicode 147990 76.09 86.93 70.48 6 RELAYCOUNTRY_US 146939 83.00 86.31 81.28 7 DCC_CHECK 130188 52.54 76.47 40.15 8 XMListUnsubscribeExists 127020 59.24 74.61 51.28 9 XM_B_SpammyWords 124485 55.02 73.12 45.64 10 DKIM_VALID_AU 122061 64.06 71.70 60.10 11 XM_B_Unicode3 83545 44.50 49.08 42.12 12 LOC_TINY_FONT_1 79570 33.87 46.74 27.21 13 XM_DK_Undo_02 78212 19.79 45.94 6.24 14 XM_B_SpammyWords2 71714 27.82 42.13 20.40 15 HTML_FONT_LOW_CONTRAST 70049 33.00 41.15 28.78 16 RCVD_IN_MSPIKE_H2 68608 35.73 40.30 33.37 17 BAYES_50 64763 52.91 38.04 60.62 18 FVGT_m_MULTI_ODD 60603 28.61 35.60 24.98 19 BAYES_99 60374 15.16 35.46 4.64 20 TR_XM_DKIM_Undo 58335 13.61 34.27 2.90 21 T_KAM_HTML_FONT_INVALID 53127 24.52 31.21 21.06 22 BAYES_999 49140 12.22 28.87 3.60 23 DKIM_VALID_EF 46307 28.37 27.20 28.98 24 TR_DCC_Bayes_99 45830 10.40 26.92 1.84 25 MIME_HTML_ONLY 42953 21.66 25.23 19.81 26 DCC_CHECK_NEGATIVE 37924 46.99 22.28 59.79 27 XM_Multi_Part_URI 37811 18.63 22.21 16.77 28 XMSubLong 35857 22.02 21.06 22.52 29 T_TM2_M_HEADER_IN_MSG 35408 26.41 20.80 29.32 30 TR_XM_DK_Unsub 33220 15.15 19.51 12.90 31 UNPARSEABLE_RELAY 28834 13.24 16.94 11.33 32 XM_B_Unsub 26927 11.51 15.82 9.27 33 TR_XM_BayesUnsub 26053 10.22 15.30 7.59 34 XM_B_SpammyWords3 25173 9.01 14.79 6.02 35 TR_XM_SpammyWords2 24163 5.33 14.19 0.75 36 TR_MAX_INTL_RELAY 23494 9.06 13.80 6.61 37 RELAYCOUNTRY_META 23268 7.65 13.67 4.53 38 LOTS_OF_MONEY 22377 8.48 13.14 6.06 39 BOTNET_IPINHOSTNAME 21499 6.68 12.63 3.59 40 TR_XM_SpammyWords4 20106 6.67 11.81 4.00 41 TR_XM_SpammyRelay 17519 5.05 10.29 2.33 42 XM_Evil_Numbers_Gen 16981 9.27 9.97 8.90 43 TR_XM_UnparsRelay 16341 4.49 9.60 1.84 44 RCVD_IN_BL_SPAMCOP_NET 15245 3.54 8.96 0.74 45 BAYES_80 14766 5.59 8.67 3.99 46 BOTNET 13357 3.66 7.85 1.49 47 BAYES_60 13317 8.64 7.82 9.07 48 HTML_IMAGE_RATIO_02 13066 6.02 7.68 5.17 49 FSL_BULK_SIG 12473 6.73 7.33 6.42 50 XM_Body_Dirty_Words 12454 4.30 7.32 2.74 51 TR_XM_SPAMCOP 11725 2.62 6.89 0.40 52 LotsOfNums_01 11725 7.81 6.89 8.28 53 MPART_ALT_DIFF 11454 5.10 6.73 4.26 54 XMSubMetaSx_00 11037 4.54 6.48 3.53 55 XM_B_PhoneNumber 10288 8.18 6.04 9.28 56 XM_H_Long_From01 9652 5.60 5.67 5.57 57 HTML_IMAGE_RATIO_04 9010 4.78 5.29 4.51 58 UNTRUSTED_Relay 8959 3.06 5.26 1.92 59 XM_B_SEO 8592 2.65 5.05 1.40 60 XM_UncommonTLD01 8550 4.23 5.02 3.83 61 RELAYCOUNTRY_CA 8525 2.51 5.01 1.22 62 RCVD_IN_VALIDITY_SAFE 8252 5.07 4.85 5.19 63 BAYES_95 8170 3.36 4.80 2.62 64 TooManyTo_001 8124 7.31 4.77 8.63 65 XM_B_Phish_Phrases 8062 4.76 4.74 4.77 66 XM_SPF_SoftFail 8028 2.91 4.72 1.97 67 TR_XM_SEO4 7900 2.23 4.64 0.98 68 XMSexyCombo_05 7766 2.46 4.56 1.38 69 XM_B_Investor 7509 2.58 4.41 1.64 70 XM_H_GMP 7462 4.79 4.38 5.00 71 HTML_IMAGE_RATIO_06 7353 3.45 4.32 3.01 72 XMBody_17 7189 1.89 4.22 0.68 73 DKIM_INVALID 7103 2.97 4.17 2.35 74 RCVD_IN_VALIDITY_CERTIFIED 6858 4.25 4.03 4.36 75 TR_XM_PhishingBody 6782 2.47 3.98 1.68 76 MIME_HTML_ONLY_MULTI 6571 2.91 3.86 2.42 77 T_XMDrugObfuBody_14 6505 2.69 3.82 2.11 78 MIME_HTML_MOSTLY 6502 2.98 3.82 2.54 79 USER_IN_DEF_DKIM_WL 6489 10.72 3.81 14.29 80 RCVD_IN_MSPIKE_H3 6221 4.65 3.65 5.17 81 RCVD_IN_MSPIKE_WL 6221 4.65 3.65 5.17 82 XM_CamelCaseFrm001 6113 2.86 3.59 2.48 83 XM_B_SpammyTLD 5881 4.31 3.45 4.76 84 TR_LOTS_OF_MONEY3 5838 1.40 3.43 0.35 85 XMStrtUSub 5543 4.28 3.26 4.81 86 TR_XM_SpammyWords5 5497 1.95 3.23 1.29 87 TM2_M_VERY_LONG_WORD 5385 2.53 3.16 2.20 88 HTML_IMAGE_RATIO_08 5354 2.47 3.14 2.12 89 XM_URI_RBL 5338 1.36 3.14 0.44 90 XM_OfRef6 5320 1.69 3.13 0.95 91 MIME_QP_LONG_LINE 5234 4.42 3.07 5.12 92 TM2_M_URI_OPT_OUT 5094 2.21 2.99 1.80 93 XMNumbers 4994 2.76 2.93 2.68 94 XM_UB50 4896 1.82 2.88 1.28 95 XMBrknScrpt_02 4851 1.62 2.85 0.98 96 XM_B_URI_Unicode 4660 2.22 2.74 1.95 97 FROM_EXCESS_BASE64 4644 2.19 2.73 1.90 98 T_XMDrugObfuBody_08 4520 1.79 2.66 1.34 99 XM_B_SpammyWords4 4466 1.37 2.62 0.72 100 RELAYCOUNTRY_AU 3908 1.36 2.30 0.88 101 T_TooManySym_01 3794 4.48 2.23 5.64 102 T_XMHurry_00 3769 1.18 2.21 0.65 103 XMDiploma_00 3754 1.64 2.21 1.35 104 XM_B_Unsub2 3753 1.68 2.20 1.41 105 URI_TRY_3LD 3733 1.22 2.19 0.71 106 T_XMDrugObfuBody_00 3687 1.37 2.17 0.96 107 MAILING_LIST_MULTI 3621 2.91 2.13 3.32 108 TR_XM_NoHeaderRelay 3373 0.75 1.98 0.11 109 SUBJ_ALL_CAPS 3311 1.69 1.94 1.56 110 URI_NOVOWEL 2991 2.86 1.76 3.43 111 XM_DK_Undo_01 2929 1.76 1.72 1.78 112 SpammyFromTLD_01 2895 1.02 1.70 0.67 113 XMStockSpam_06 2644 1.33 1.55 1.22 114 XM_ProductURIs 2609 0.90 1.53 0.57 115 XMSubMetaI_00 2594 0.93 1.52 0.62 116 RCVD_IN_VALIDITY_RPBL 2581 0.58 1.52 0.10 117 SpammyFromTLD_02 2545 0.85 1.49 0.52 118 T_REMOTE_IMAGE 2510 2.89 1.47 3.62 119 BAYES_40 2478 3.82 1.46 5.05 120 XMPhish30 2427 0.84 1.43 0.53 121 URI_HEX 2422 1.22 1.42 1.12 122 RCVD_IN_IADB_LISTED 2361 2.96 1.39 3.77 123 XM_B_COPY_HTML 2343 0.82 1.38 0.53 124 HTML_TAG_BALANCE_BODY 2335 0.82 1.37 0.53 125 TR_XM_PHPForged 2328 0.68 1.37 0.33 126 TR_XM_Base64_M1 2315 0.90 1.36 0.67 127 HTML_MIME_NO_HTML_TAG 2296 1.77 1.35 1.99 128 TM2_M_OBFU_COMMENT 2275 0.84 1.34 0.58 129 TR_XM_PHPDW 2270 0.67 1.33 0.32 130 TR_XM_FormFill2 2257 0.67 1.33 0.34 131 XM_SendGrid 2224 1.47 1.31 1.56 132 XM_H_PHPOS 2222 0.65 1.31 0.32 133 XMBdyGiftCard01 2209 1.39 1.30 1.44 134 XMHTML_After_End 2190 0.62 1.29 0.27 135 THIS_AD 2149 0.81 1.26 0.58 136 TR_XM_INV_DKIM 2109 0.46 1.24 0.06 137 SHORTCIRCUIT 2107 0.42 1.24 0.00 138 RCVD_IN_ZEN_LASTEXTERNAL 2107 0.42 1.24 0.00 139 RCVD_IN_PBL 2107 0.85 1.24 0.65 140 T_FILL_THIS_FORM_SHORT 2074 1.02 1.22 0.92 141 TR_Symld_Words 2070 1.37 1.22 1.45 142 XM_HighProb1 2061 0.42 1.21 0.01 143 XMGenDplmaNmb 2035 0.88 1.20 0.72 144 RCVD_IN_IADB_SPF 2034 2.60 1.19 3.32 145 MIME_CHARSET_FARAWAY 1943 0.62 1.14 0.35 146 XMSexyCombo_01 1900 0.53 1.12 0.23 147 RCVD_IN_IADB_SENDERID 1899 2.34 1.12 2.98 148 MPART_ALT_DIFF_COUNT 1876 0.80 1.10 0.65 149 RCVD_IN_IADB_DK 1851 2.27 1.09 2.88 150 BAYES_20 1842 2.56 1.08 3.32 151 HTTPS_HTTP_MISMATCH 1822 0.85 1.07 0.73 152 XMSubMetaSxObfu_03 1790 0.66 1.05 0.45 153 XM_B_Phish66 1772 0.62 1.04 0.40 154 XM_B_DNDMA 1767 0.85 1.04 0.75 155 DKIM_ADSP_CUSTOM_MED 1765 0.88 1.04 0.80 156 KHOP_HELO_FCRDNS 1757 1.36 1.03 1.53 157 SHOPIFY_IMG_NOT_RCVD_SFY 1740 0.62 1.02 0.41 158 AC_BR_BONANZA 1717 0.41 1.01 0.10 159 XMReplyNow 1690 0.48 0.99 0.22 160 TooManyTo_002 1684 2.35 0.99 3.06 161 LongTLD 1661 0.56 0.98 0.34 162 TR_XM_InvalidRelay 1642 0.35 0.96 0.03 163 ALL_TRUSTED 1622 10.22 0.95 15.03 164 RELAYCOUNTRY_FR 1615 0.52 0.95 0.30 165 TR_MetaPhish_Combo_01 1574 0.72 0.92 0.62 166 XM_S_SpammyWords 1538 0.46 0.90 0.22 167 TR_XM_Spammywords 1538 0.46 0.90 0.22 168 TR_XM_DK_SendGrid 1478 0.94 0.87 0.98 169 T_STY_INVIS_DIRECT 1457 0.49 0.86 0.30 170 T_MONEY_PERCENT 1441 0.48 0.85 0.28 171 TR_LOTS_OF_MONEY2 1441 0.48 0.85 0.28 172 RDNS_DYNAMIC 1432 0.50 0.84 0.33 173 XM_B_REG_HTML 1422 0.51 0.84 0.35 174 XM_Combo_Sbj 1405 0.42 0.83 0.21 175 PDS_RDNS_DYNAMIC_FP 1401 0.40 0.82 0.17 176 FORGED_GMAIL_RCVD 1382 0.58 0.81 0.46 177 XM_H_Undi_Recip 1373 0.38 0.81 0.15 178 XMSlimDrugH 1372 0.48 0.81 0.31 179 TM2_M_A_HREF_HREF 1349 0.43 0.79 0.25 180 XM_UB99 1330 0.27 0.78 0.01 181 RCVD_IN_IADB_VOUCHED 1309 1.87 0.77 2.44 182 T_Symld_Words_02 1302 0.55 0.76 0.44 183 XMClaimOffer 1288 0.54 0.76 0.43 184 XMPhish08 1282 0.48 0.75 0.34 185 XMMoneyMeta_00 1271 0.54 0.75 0.43 186 NML_ADSP_CUSTOM_MED 1236 0.59 0.73 0.52 187 XM_H_Long_From02 1235 0.96 0.73 1.08 188 BAYES_00 1217 6.04 0.71 8.79 189 RELAYCOUNTRY_GB 1215 0.58 0.71 0.51 190 TR_Caps_n_Bayes_99 1203 0.26 0.71 0.03 191 BAYES_05 1202 1.50 0.71 1.91 192 PLING_QUERY 1201 0.49 0.71 0.38 193 TooManyTo_003 1201 1.34 0.71 1.66 194 TR_XM_FormFill 1195 0.25 0.70 0.02 195 TR_XM_Undi_Recip19 1183 0.28 0.69 0.07 196 DIET_1 1167 0.41 0.69 0.26 197 XMPhish14 1152 0.46 0.68 0.34 198 TooManyTo_004 1139 1.04 0.67 1.23 199 URIBL_BLACK 1136 0.25 0.67 0.04 200 RCVD_IN_XBL 1127 0.24 0.66 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 281255 89.16 96.09 85.57 2 RELAYCOUNTRY_US 267156 83.00 86.31 81.28 3 DKIM_SIGNED 252809 82.23 92.48 76.92 4 XM_DK_Pass 248612 80.31 89.34 75.64 5 DKIM_VALID 245073 79.25 88.31 74.56 6 XM_B_Unicode 231635 76.09 86.93 70.48 7 BAYES_50 199231 52.91 38.04 60.62 8 DKIM_VALID_AU 197542 64.06 71.70 60.10 9 DCC_CHECK_NEGATIVE 196521 46.99 22.28 59.79 10 XMListUnsubscribeExists 168544 59.24 74.61 51.28 11 XM_B_SpammyWords 150004 55.02 73.12 45.64 12 XM_B_Unicode3 138451 44.50 49.08 42.12 13 DCC_CHECK 131951 52.54 76.47 40.15 14 RCVD_IN_MSPIKE_H2 109665 35.73 40.30 33.37 15 T_TM2_M_HEADER_IN_MSG 96361 26.41 20.80 29.32 16 DKIM_VALID_EF 95257 28.37 27.20 28.98 17 HTML_FONT_LOW_CONTRAST 94583 33.00 41.15 28.78 18 LOC_TINY_FONT_1 89423 33.87 46.74 27.21 19 FVGT_m_MULTI_ODD 82117 28.61 35.60 24.98 20 XMSubLong 74023 22.02 21.06 22.52 21 T_KAM_HTML_FONT_INVALID 69231 24.52 31.21 21.06 22 XM_B_SpammyWords2 67065 27.82 42.13 20.40 23 MIME_HTML_ONLY 65115 21.66 25.23 19.81 24 XM_Multi_Part_URI 55135 18.63 22.21 16.77 25 ALL_TRUSTED 49390 10.22 0.95 15.03 26 USER_IN_DEF_DKIM_WL 46970 10.72 3.81 14.29 27 TR_XM_DK_Unsub 42385 15.15 19.51 12.90 28 UNPARSEABLE_RELAY 37225 13.24 16.94 11.33 29 XM_B_PhoneNumber 30512 8.18 6.04 9.28 30 XM_B_Unsub 30479 11.51 15.82 9.27 31 BAYES_60 29812 8.64 7.82 9.07 32 XM_Evil_Numbers_Gen 29259 9.27 9.97 8.90 33 BAYES_00 28902 6.04 0.71 8.79 34 TooManyTo_001 28367 7.31 4.77 8.63 35 LotsOfNums_01 27224 7.81 6.89 8.28 36 TR_XM_BayesUnsub 24944 10.22 15.30 7.59 37 XM_DKIMWhitelistDomains 24381 4.91 0.06 7.42 38 IN_ZIMBRA_NJ_WHITELIST 23930 4.82 0.07 7.28 39 TR_MAX_INTL_RELAY 21725 9.06 13.80 6.61 40 TR_XM_DK_Bayes 21611 4.54 0.61 6.58 41 TR_XM_DK_Bayes1 21110 4.44 0.61 6.42 42 FSL_BULK_SIG 21085 6.73 7.33 6.42 43 XM_DK_Undo_02 20518 19.79 45.94 6.24 44 LOTS_OF_MONEY 19925 8.48 13.14 6.06 45 XM_B_SpammyWords3 19786 9.01 14.79 6.02 46 T_TooManySym_01 18533 4.48 2.23 5.64 47 XM_H_Long_From01 18300 5.60 5.67 5.57 48 TR_XM_DK_Bayes2 18066 3.75 0.38 5.50 49 RCVD_IN_VALIDITY_SAFE 17065 5.07 4.85 5.19 50 RCVD_IN_MSPIKE_H3 16995 4.65 3.65 5.17 51 RCVD_IN_MSPIKE_WL 16995 4.65 3.65 5.17 52 HTML_IMAGE_RATIO_02 16992 6.02 7.68 5.17 53 MIME_QP_LONG_LINE 16815 4.42 3.07 5.12 54 BAYES_40 16596 3.82 1.46 5.05 55 XM_H_GMP 16449 4.79 4.38 5.00 56 XMStrtUSub 15798 4.28 3.26 4.81 57 XM_B_Phish_Phrases 15664 4.76 4.74 4.77 58 XM_B_SpammyTLD 15630 4.31 3.45 4.76 59 BAYES_99 15247 15.16 35.46 4.64 60 RELAYCOUNTRY_META 14904 7.65 13.67 4.53 61 HTML_IMAGE_RATIO_04 14838 4.78 5.29 4.51 62 RCVD_IN_VALIDITY_CERTIFIED 14333 4.25 4.03 4.36 63 MPART_ALT_DIFF 13992 5.10 6.73 4.26 64 XM_PDF 13772 2.92 0.47 4.19 65 TR_XM_SpammyWords4 13160 6.67 11.81 4.00 66 BAYES_80 13112 5.59 8.67 3.99 67 XM_UncommonTLD01 12576 4.23 5.02 3.83 68 RCVD_IN_IADB_LISTED 12382 2.96 1.39 3.77 69 T_REMOTE_IMAGE 11910 2.89 1.47 3.62 70 BAYES_999 11826 12.22 28.87 3.60 71 BOTNET_IPINHOSTNAME 11808 6.68 12.63 3.59 72 XMSubMetaSx_00 11605 4.54 6.48 3.53 73 URI_NOVOWEL 11279 2.86 1.76 3.43 74 BOUNCE_MESSAGE 11177 2.43 0.56 3.40 75 ANY_BOUNCE_MESSAGE 11177 2.43 0.56 3.40 76 RCVD_IN_IADB_SPF 10920 2.60 1.19 3.32 77 BAYES_20 10913 2.56 1.08 3.32 78 MAILING_LIST_MULTI 10903 2.91 2.13 3.32 79 TooManyTo_002 10060 2.35 0.99 3.06 80 HTML_IMAGE_RATIO_06 9878 3.45 4.32 3.01 81 RCVD_IN_IADB_SENDERID 9796 2.34 1.12 2.98 82 T_TooManySym_02 9772 2.15 0.55 2.97 83 TR_XM_DKIM_Undo 9548 13.61 34.27 2.90 84 RCVD_IN_IADB_DK 9474 2.27 1.09 2.88 85 XM_Body_Dirty_Words 8997 4.30 7.32 2.74 86 XMNumbers 8795 2.76 2.93 2.68 87 BAYES_95 8598 3.36 4.80 2.62 88 MIME_HTML_MOSTLY 8351 2.98 3.82 2.54 89 XM_CamelCaseFrm001 8162 2.86 3.59 2.48 90 RCVD_IN_IADB_VOUCHED 8006 1.87 0.77 2.44 91 MIME_HTML_ONLY_MULTI 7947 2.91 3.86 2.42 92 DKIM_INVALID 7736 2.97 4.17 2.35 93 TR_XM_SpammyRelay 7661 5.05 10.29 2.33 94 TM2_M_VERY_LONG_WORD 7224 2.53 3.16 2.20 95 INVALID_MSGID 7120 1.48 0.16 2.17 96 HTML_IMAGE_RATIO_08 6960 2.47 3.14 2.12 97 T_XMDrugObfuBody_14 6921 2.69 3.82 2.11 98 TO_MALFORMED 6907 1.39 0.00 2.10 99 HTML_MIME_NO_HTML_TAG 6541 1.77 1.35 1.99 100 XM_SPF_SoftFail 6471 2.91 4.72 1.97 101 XM_B_URI_Unicode 6401 2.22 2.74 1.95 102 UNTRUSTED_Relay 6316 3.06 5.26 1.92 103 BAYES_05 6264 1.50 0.71 1.91 104 FROM_EXCESS_BASE64 6258 2.19 2.73 1.90 105 TR_DCC_Bayes_99 6055 10.40 26.92 1.84 106 TR_XM_UnparsRelay 6055 4.49 9.60 1.84 107 TM2_M_URI_OPT_OUT 5932 2.21 2.99 1.80 108 XM_DK_Undo_01 5850 1.76 1.72 1.78 109 RCVD_IN_IADB_OPTIN 5579 1.28 0.48 1.70 110 TR_XM_PhishingBody 5534 2.47 3.98 1.68 111 TooManyTo_003 5470 1.34 0.71 1.66 112 XM_B_Investor 5376 2.58 4.41 1.64 113 SUBJ_ALL_CAPS 5111 1.69 1.94 1.56 114 XM_SendGrid 5111 1.47 1.31 1.56 115 KHOP_HELO_FCRDNS 5038 1.36 1.03 1.53 116 BOTNET 4901 3.66 7.85 1.49 117 IN_HORDE_ADDRESS_BOOK 4881 1.00 0.07 1.49 118 TR_Symld_Words 4766 1.37 1.22 1.45 119 XMBdyGiftCard01 4720 1.39 1.30 1.44 120 XMGappySubj_01 4665 1.03 0.28 1.42 121 XM_B_Unsub2 4631 1.68 2.20 1.41 122 XM_B_SEO 4614 2.65 5.05 1.40 123 XMSexyCombo_05 4527 2.46 4.56 1.38 124 XMDiploma_00 4445 1.64 2.21 1.35 125 T_XMDrugObfuBody_08 4397 1.79 2.66 1.34 126 TR_XM_SpammyWords5 4250 1.95 3.23 1.29 127 XM_UB50 4200 1.82 2.88 1.28 128 TooManyTo_004 4055 1.04 0.67 1.23 129 XM_GoogleGroups 4040 1.00 0.57 1.23 130 RELAYCOUNTRY_CA 4002 2.51 5.01 1.22 131 XMStockSpam_06 3994 1.33 1.55 1.22 132 T_TooManySym_03 3936 0.83 0.13 1.20 133 XM_TLDProd2 3856 0.86 0.26 1.17 134 TVD_SPACE_RATIO 3729 0.78 0.08 1.13 135 URI_HEX 3681 1.22 1.42 1.12 136 XM_H_Long_From02 3545 0.96 0.73 1.08 137 HELO_NODOT 3276 0.72 0.18 1.00 138 HELO_NO_DOMAIN 3274 0.72 0.18 1.00 139 TooManyTo_005 3246 0.87 0.65 0.99 140 TR_XM_DK_SendGrid 3221 0.94 0.87 0.98 141 XMBrknScrpt_02 3212 1.62 2.85 0.98 142 TR_XM_SEO4 3207 2.23 4.64 0.98 143 XMCapTrack 3171 0.83 0.57 0.96 144 T_XMDrugObfuBody_00 3164 1.37 2.17 0.96 145 XM_OfRef6 3113 1.69 3.13 0.95 146 T_FILL_THIS_FORM_SHORT 3025 1.02 1.22 0.92 147 XMNoVowels 2956 0.76 0.49 0.90 148 XM_B_FormFill 2899 0.67 0.27 0.88 149 RELAYCOUNTRY_AU 2896 1.36 2.30 0.88 150 DKIM_ADSP_CUSTOM_MED 2641 0.88 1.04 0.80 151 FROM_GOV_DKIM_AU 2508 0.56 0.18 0.76 152 XM_B_DNDMA 2473 0.85 1.04 0.75 153 TR_XM_SpammyWords2 2452 5.33 14.19 0.75 154 RCVD_IN_BL_SPAMCOP_NET 2430 3.54 8.96 0.74 155 HTTPS_HTTP_MISMATCH 2400 0.85 1.07 0.73 156 XMGenDplmaNmb 2379 0.88 1.20 0.72 157 XM_B_SpammyWords4 2379 1.37 2.62 0.72 158 XMBody_95 2373 0.55 0.21 0.72 159 XMGappySubj_02 2372 0.50 0.08 0.72 160 URI_TRY_3LD 2329 1.22 2.19 0.71 161 XMBody_17 2248 1.89 4.22 0.68 162 SpammyFromTLD_01 2214 1.02 1.70 0.67 163 TR_XM_Base64_M1 2198 0.90 1.36 0.67 164 XM_RXBody 2184 0.62 0.55 0.66 165 RCVD_IN_PBL 2138 0.85 1.24 0.65 166 MPART_ALT_DIFF_COUNT 2137 0.80 1.10 0.65 167 T_XMHurry_00 2135 1.18 2.21 0.65 168 HTML_EXTRA_CLOSE 2120 0.43 0.01 0.65 169 T_OBFU_PDF_ATTACH 2060 0.45 0.10 0.63 170 XMSubMetaI_00 2037 0.93 1.52 0.62 171 TR_MetaPhish_Combo_01 2029 0.72 0.92 0.62 172 XM_ShortIntro_01 1968 0.53 0.39 0.60 173 THIS_AD 1916 0.81 1.26 0.58 174 TM2_M_OBFU_COMMENT 1911 0.84 1.34 0.58 175 XM_ProductURIs 1883 0.90 1.53 0.57 176 XM_H_PHPMailer 1880 0.55 0.50 0.57 177 T_TooManySym_04 1868 0.38 0.02 0.57 178 RELAYCOUNTRY_DE 1816 0.51 0.41 0.55 179 FILL_THIS_FORM 1791 0.45 0.26 0.54 180 XMPhish30 1752 0.84 1.43 0.53 181 TO_NO_BRKTS_HTML_ONLY 1744 0.41 0.17 0.53 182 HTML_TAG_BALANCE_BODY 1743 0.82 1.37 0.53 183 XM_B_COPY_HTML 1738 0.82 1.38 0.53 184 SpammyFromTLD_02 1709 0.85 1.49 0.52 185 NML_ADSP_CUSTOM_MED 1702 0.59 0.73 0.52 186 RELAYCOUNTRY_GB 1682 0.58 0.71 0.51 187 HTML_IMAGE_ONLY_20 1658 0.46 0.39 0.50 188 TVD_RCVD_IP 1576 0.54 0.65 0.48 189 USER_IN_WHITELIST 1555 0.31 0.00 0.47 190 USER_IN_WELCOMELIST 1555 0.31 0.00 0.47 191 HTML_IMAGE_ONLY_32 1551 0.35 0.12 0.47 192 FORGED_GMAIL_RCVD 1499 0.58 0.81 0.46 193 XMSubMetaSxObfu_03 1486 0.66 1.05 0.45 194 MISSING_HEADERS 1481 0.48 0.54 0.45 195 T_Symld_Words_02 1448 0.55 0.76 0.44 196 XM_URI_RBL 1437 1.36 3.14 0.44 197 XMClaimOffer 1427 0.54 0.76 0.43 198 XMMoneyMeta_00 1414 0.54 0.75 0.43 199 HTML_FONT_FACE_BAD 1405 0.49 0.60 0.43 200 SHOPIFY_IMG_NOT_RCVD_SFY 1355 0.62 1.02 0.41 ----------------------------------------------------------------------