Email: 706073 Autolearn: 0 AvgScore: 5.39 AvgScanTime: 2.11 sec Spam: 254039 Autolearn: 0 AvgScore: 13.91 AvgScanTime: 2.32 sec Ham: 452034 Autolearn: 0 AvgScore: 0.60 AvgScanTime: 2.00 sec Time Spent Running SA: 414.57 hours Time Spent Processing Spam: 163.50 hours Time Spent Processing Ham: 251.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 240486 90.45 94.66 88.08 2 DKIM_SIGNED 232342 83.80 91.46 79.50 3 XM_DK_Pass 225037 81.93 88.58 78.20 4 DKIM_VALID 222524 81.03 87.59 77.35 5 XM_B_Unicode 220136 78.67 86.65 74.19 6 RELAYCOUNTRY_US 218203 84.13 85.89 83.14 7 DCC_CHECK 196371 57.21 77.30 45.92 8 XMListUnsubscribeExists 189142 63.30 74.45 57.03 9 DKIM_VALID_AU 176969 64.60 69.66 61.75 10 XM_B_SpammyWords 175771 55.47 69.19 47.76 11 LOC_TINY_FONT_1 132083 38.90 51.99 31.54 12 XM_B_Unicode3 126465 47.57 49.78 46.33 13 HTML_FONT_LOW_CONTRAST 115130 37.13 45.32 32.53 14 XM_DK_Undo_02 112843 19.85 44.42 6.04 15 RCVD_IN_MSPIKE_H2 104615 36.07 41.18 33.20 16 BAYES_50 99148 53.35 39.03 61.39 17 XM_B_SpammyWords2 97976 26.58 38.57 19.85 18 FVGT_m_MULTI_ODD 95467 30.41 37.58 26.37 19 BAYES_99 85783 14.88 33.77 4.26 20 TR_XM_DKIM_Undo 77879 12.68 30.66 2.57 21 DKIM_VALID_EF 70741 27.96 27.85 28.03 22 T_KAM_HTML_FONT_INVALID 68702 24.26 27.04 22.69 23 BAYES_999 67828 11.66 26.70 3.21 24 TR_DCC_Bayes_99 63847 10.30 25.13 1.97 25 MIME_HTML_ONLY 63011 20.95 24.80 18.78 26 XM_Multi_Part_URI 61026 19.84 24.02 17.49 27 UNPARSEABLE_RELAY 57550 16.82 22.65 13.54 28 DCC_CHECK_NEGATIVE 54903 42.38 21.61 54.04 29 TR_XM_DK_Unsub 52291 16.20 20.58 13.74 30 XMSubLong 52088 20.14 20.50 19.93 31 T_TM2_M_HEADER_IN_MSG 48531 22.49 19.10 24.39 32 XM_B_Unsub 38342 11.12 15.09 8.89 33 TR_MAX_INTL_RELAY 37984 9.87 14.95 7.01 34 TR_XM_BayesUnsub 37347 10.13 14.70 7.56 35 XM_B_SpammyWords3 35086 8.06 13.81 4.83 36 TR_XM_UnparsRelay 32103 6.07 12.64 2.38 37 TR_XM_SpammyWords2 32003 4.89 12.60 0.55 38 XM_Evil_Numbers_Gen 30961 11.69 12.19 11.42 39 LOTS_OF_MONEY 30698 8.28 12.08 6.14 40 BOTNET_IPINHOSTNAME 30575 6.31 12.04 3.10 41 RELAYCOUNTRY_META 29102 6.65 11.46 3.95 42 RCVD_IN_BL_SPAMCOP_NET 27566 4.49 10.85 0.91 43 TR_XM_SpammyWords4 25911 6.39 10.20 4.25 44 BAYES_80 23817 6.13 9.38 4.31 45 TR_XM_SPAMCOP 22898 3.55 9.01 0.48 46 HTML_IMAGE_RATIO_02 21414 7.01 8.43 6.22 47 BAYES_60 21247 9.30 8.36 9.83 48 TR_XM_SpammyRelay 20864 4.29 8.21 2.08 49 FSL_BULK_SIG 20513 6.27 8.07 5.26 50 LotsOfNums_01 20273 9.52 7.98 10.38 51 BOTNET 19153 3.54 7.54 1.30 52 XM_B_PhoneNumber 17491 8.21 6.89 8.96 53 XM_H_Long_From01 15085 5.44 5.94 5.15 54 MPART_ALT_DIFF 14743 4.51 5.80 3.79 55 XM_Body_Dirty_Words 14376 3.26 5.66 1.91 56 UNTRUSTED_Relay 14339 3.20 5.64 1.83 57 XMSubMetaSx_00 13673 3.59 5.38 2.58 58 HTML_IMAGE_RATIO_04 13597 6.30 5.35 6.83 59 TR_XM_SpammyWords5 13530 3.82 5.33 2.97 60 BAYES_95 13519 3.64 5.32 2.70 61 XM_B_Phish_Phrases 12400 4.70 4.88 4.60 62 XM_SPF_SoftFail 12228 2.89 4.81 1.81 63 SUBJ_ALL_CAPS 12188 3.86 4.80 3.34 64 XM_B_SEO 12153 2.57 4.78 1.32 65 XM_UncommonTLD01 11611 3.71 4.57 3.23 66 XMStrtUSub 10921 4.74 4.30 4.98 67 XMSexyCombo_05 10822 2.31 4.26 1.21 68 TooManyTo_001 10656 6.13 4.19 7.22 69 TM2_M_VERY_LONG_WORD 10444 2.96 4.11 2.31 70 TR_XM_SEO4 10339 2.01 4.07 0.85 71 USER_IN_DEF_DKIM_WL 10196 11.52 4.01 15.74 72 XM_B_SpammyTLD 9821 3.84 3.87 3.83 73 DKIM_INVALID 9818 2.77 3.86 2.16 74 HTML_IMAGE_RATIO_06 9723 3.16 3.83 2.79 75 XM_H_GMP 9719 4.16 3.83 4.34 76 RCVD_IN_VALIDITY_SAFE 9330 4.88 3.67 5.56 77 XM_B_Investor 9047 1.98 3.56 1.10 78 XMNumbers 9020 3.06 3.55 2.79 79 MIME_HTML_MOSTLY 8497 2.72 3.34 2.37 80 TR_XM_PhishingBody 8469 2.29 3.33 1.71 81 MIME_HTML_ONLY_MULTI 8380 2.56 3.30 2.14 82 RELAYCOUNTRY_CA 8324 1.79 3.28 0.95 83 XM_UB50 8262 1.86 3.25 1.08 84 XM_CamelCaseFrm001 8261 2.63 3.25 2.27 85 TM2_M_URI_OPT_OUT 8115 2.33 3.19 1.85 86 XM_B_URI_Unicode 8040 2.23 3.16 1.70 87 XMBody_17 7992 1.78 3.15 1.02 88 XMSubMetaI_00 7847 2.05 3.09 1.47 89 HTML_IMAGE_RATIO_08 7669 2.44 3.02 2.11 90 TR_LOTS_OF_MONEY3 7544 1.51 2.97 0.70 91 MIME_QP_LONG_LINE 7458 4.80 2.94 5.84 92 XM_B_SpammyWords4 7273 1.51 2.86 0.76 93 RCVD_IN_VALIDITY_CERTIFIED 7143 3.75 2.81 4.27 94 XMBrknScrpt_02 7083 1.70 2.79 1.09 95 RCVD_IN_MSPIKE_WL 7038 4.51 2.77 5.48 96 RCVD_IN_MSPIKE_H3 7038 4.51 2.77 5.48 97 T_XMDrugObfuBody_14 6991 1.95 2.75 1.50 98 T_XMHurry_00 6928 1.79 2.73 1.27 99 XM_URI_RBL 6887 1.25 2.71 0.43 100 ALL_TRUSTED 6422 9.50 2.53 13.42 101 RELAYCOUNTRY_AU 6107 1.35 2.40 0.75 102 FROM_EXCESS_BASE64 5826 2.31 2.29 2.32 103 T_XMDrugObfuBody_08 5759 2.12 2.27 2.03 104 XM_OfRef6 5733 1.28 2.26 0.73 105 T_TooManySym_01 5684 4.30 2.24 5.46 106 XMStockSpam_06 5447 1.95 2.14 1.85 107 RCVD_IN_VALIDITY_RPBL 5441 0.85 2.14 0.13 108 SHOPIFY_IMG_NOT_RCVD_SFY 5251 1.08 2.07 0.53 109 THIS_AD 4656 1.13 1.83 0.73 110 XMBdyGiftCard01 4604 1.43 1.81 1.21 111 URI_HEX 4542 1.35 1.79 1.10 112 T_XMDrugObfuBody_00 4531 1.20 1.78 0.88 113 T_MONEY_PERCENT 4429 0.96 1.74 0.52 114 TR_LOTS_OF_MONEY2 4429 0.96 1.74 0.52 115 TR_XM_NoHeaderRelay 4369 0.72 1.72 0.16 116 XMDiploma_00 4199 1.44 1.65 1.31 117 XM_SendGrid 4155 1.56 1.64 1.51 118 TM2_M_BODY_EMPTY 4135 0.79 1.63 0.32 119 XM_B_Unsub2 4084 1.49 1.61 1.42 120 XMEmptyBody_01 4052 0.60 1.60 0.04 121 SpammyFromTLD_02 4047 0.72 1.59 0.22 122 XM_DK_Undo_01 3984 1.72 1.57 1.81 123 MAILING_LIST_MULTI 3973 2.41 1.56 2.89 124 MPART_ALT_DIFF_COUNT 3911 0.93 1.54 0.59 125 SpammyFromTLD_01 3810 1.01 1.50 0.73 126 RCVD_IN_IADB_LISTED 3756 3.65 1.48 4.87 127 TR_Caps_n_Bayes_99 3738 0.56 1.47 0.05 128 URI_NOVOWEL 3482 2.44 1.37 3.04 129 XM_B_COPY_HTML 3257 0.81 1.28 0.54 130 BAYES_40 3219 3.41 1.27 4.61 131 XM_ProductURIs 3208 0.97 1.26 0.80 132 RCVD_IN_IADB_SPF 3196 3.23 1.26 4.34 133 TR_XM_Base64_M1 3090 1.02 1.22 0.90 134 BOUNCE_MESSAGE 3021 2.80 1.19 3.70 135 ANY_BOUNCE_MESSAGE 3021 2.80 1.19 3.70 136 TR_XM_PHPForged 3019 1.13 1.19 1.10 137 XM_H_Undi_Recip 3019 0.55 1.19 0.19 138 TR_XM_PHPDW 3011 1.13 1.19 1.10 139 T_REMOTE_IMAGE 2974 2.30 1.17 2.93 140 RCVD_IN_IADB_SENDERID 2973 2.93 1.17 3.92 141 RCVD_IN_IADB_DK 2954 2.85 1.16 3.80 142 TR_XM_FormFill2 2952 1.12 1.16 1.10 143 XM_H_PHPOS 2927 1.11 1.15 1.09 144 XM_B_REG_HTML 2866 0.55 1.13 0.22 145 MIME_CHARSET_FARAWAY 2861 0.62 1.13 0.33 146 LOW_PRICE 2861 0.68 1.13 0.43 147 TM2_M_OBFU_COMMENT 2814 0.54 1.11 0.22 148 XMPhish30 2811 0.72 1.11 0.50 149 SHORTCIRCUIT 2739 0.39 1.08 0.00 150 RCVD_IN_ZEN_LASTEXTERNAL 2739 0.39 1.08 0.00 151 RDNS_DYNAMIC 2728 0.54 1.07 0.25 152 T_FILL_THIS_FORM_SHORT 2704 0.85 1.06 0.73 153 URI_TRY_3LD 2686 0.84 1.06 0.72 154 PDS_RDNS_DYNAMIC_FP 2685 0.47 1.06 0.13 155 KHOP_HELO_FCRDNS 2678 1.34 1.05 1.50 156 TR_XM_Undi_Recip19 2655 0.42 1.05 0.07 157 XM_B_DNDMA 2640 0.78 1.04 0.63 158 SUBJ_DOLLARS 2622 0.70 1.03 0.52 159 HTML_TAG_BALANCE_BODY 2583 0.75 1.02 0.59 160 TR_Symld_Words 2575 1.35 1.01 1.54 161 HTTPS_HTTP_MISMATCH 2567 0.85 1.01 0.76 162 XMSubMetaSxObfu_03 2550 0.83 1.00 0.73 163 XMGenDplmaNmb 2489 0.80 0.98 0.70 164 XM_H_Long_From02 2486 1.00 0.98 1.01 165 XM_HighProb1 2475 0.36 0.97 0.01 166 TR_XM_INV_DKIM 2463 0.39 0.97 0.07 167 TR_XM_InvalidRelay 2457 0.37 0.97 0.03 168 HTML_MIME_NO_HTML_TAG 2456 1.49 0.97 1.78 169 DIET_1 2431 0.49 0.96 0.22 170 XMSolicitRefs_0 2422 0.53 0.95 0.30 171 TR_XM_Undi_RecipCombo2 2412 0.35 0.95 0.01 172 TVD_RCVD_IP 2410 0.57 0.95 0.36 173 TR_XM_DK_SendGrid 2374 0.98 0.93 1.00 174 DKIM_ADSP_CUSTOM_MED 2371 0.91 0.93 0.90 175 TooManyTo_002 2317 1.65 0.91 2.07 176 HELO_DYNAMIC_SPLIT_IP 2265 0.32 0.89 0.01 177 XM_UB99 2243 0.32 0.88 0.01 178 BAYES_20 2238 2.25 0.88 3.02 179 RELAYCOUNTRY_FR 2148 0.46 0.85 0.25 180 XM_B_Phish66 2087 0.47 0.82 0.27 181 XM_RXBody 2049 0.73 0.81 0.69 182 TM2_M_A_HREF_HREF 2043 0.44 0.80 0.23 183 AC_BR_BONANZA 2042 0.34 0.80 0.08 184 TR_XM_FormFill 2031 0.29 0.80 0.01 185 XMPhish14 2030 0.68 0.80 0.61 186 XMHTML_After_End 2023 0.48 0.80 0.31 187 XM_B_COVIDMETA 2000 0.37 0.79 0.13 188 RCVD_IN_IADB_VOUCHED 1988 2.17 0.78 2.95 189 T_TooManySym_02 1955 1.72 0.77 2.26 190 MONEY_BACK 1953 0.37 0.77 0.14 191 XMHTMLBadTable_001 1891 0.46 0.74 0.30 192 NML_ADSP_CUSTOM_MED 1876 0.63 0.74 0.57 193 TR_Sbj_FN_Bdy 1822 0.35 0.72 0.15 194 T_Symld_Words_02 1772 0.53 0.70 0.43 195 PLING_QUERY 1735 0.51 0.68 0.42 196 RELAYCOUNTRY_IN 1732 0.28 0.68 0.05 197 TR_MetaPhish_Combo_01 1722 0.61 0.68 0.57 198 UNDISC_MONEY 1713 0.24 0.67 0.00 199 T_STY_INVIS_DIRECT 1705 0.40 0.67 0.24 200 LongTLD 1701 0.46 0.67 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 398153 90.45 94.66 88.08 2 RELAYCOUNTRY_US 375803 84.13 85.89 83.14 3 DKIM_SIGNED 359379 83.80 91.46 79.50 4 XM_DK_Pass 353468 81.93 88.58 78.20 5 DKIM_VALID 349631 81.03 87.59 77.35 6 XM_B_Unicode 335362 78.67 86.65 74.19 7 DKIM_VALID_AU 279153 64.60 69.66 61.75 8 BAYES_50 277509 53.35 39.03 61.39 9 XMListUnsubscribeExists 257786 63.30 74.45 57.03 10 DCC_CHECK_NEGATIVE 244297 42.38 21.61 54.04 11 XM_B_SpammyWords 215896 55.47 69.19 47.76 12 XM_B_Unicode3 209429 47.57 49.78 46.33 13 DCC_CHECK 207565 57.21 77.30 45.92 14 RCVD_IN_MSPIKE_H2 150086 36.07 41.18 33.20 15 HTML_FONT_LOW_CONTRAST 147056 37.13 45.32 32.53 16 LOC_TINY_FONT_1 142589 38.90 51.99 31.54 17 DKIM_VALID_EF 126707 27.96 27.85 28.03 18 FVGT_m_MULTI_ODD 119219 30.41 37.58 26.37 19 T_TM2_M_HEADER_IN_MSG 110237 22.49 19.10 24.39 20 T_KAM_HTML_FONT_INVALID 102576 24.26 27.04 22.69 21 XMSubLong 90096 20.14 20.50 19.93 22 XM_B_SpammyWords2 89710 26.58 38.57 19.85 23 MIME_HTML_ONLY 84905 20.95 24.80 18.78 24 XM_Multi_Part_URI 79058 19.84 24.02 17.49 25 USER_IN_DEF_DKIM_WL 71140 11.52 4.01 15.74 26 TR_XM_DK_Unsub 62096 16.20 20.58 13.74 27 UNPARSEABLE_RELAY 61199 16.82 22.65 13.54 28 ALL_TRUSTED 60678 9.50 2.53 13.42 29 XM_Evil_Numbers_Gen 51610 11.69 12.19 11.42 30 LotsOfNums_01 46910 9.52 7.98 10.38 31 BAYES_60 44419 9.30 8.36 9.83 32 XM_B_PhoneNumber 40502 8.21 6.89 8.96 33 XM_B_Unsub 40199 11.12 15.09 8.89 34 XM_DKIMWhitelistDomains 37693 5.40 0.16 8.34 35 BAYES_00 36473 5.33 0.46 8.07 36 TR_XM_BayesUnsub 34152 10.13 14.70 7.56 37 TooManyTo_001 32654 6.13 4.19 7.22 38 TR_MAX_INTL_RELAY 31705 9.87 14.95 7.01 39 HTML_IMAGE_RATIO_04 30862 6.30 5.35 6.83 40 HTML_IMAGE_RATIO_02 28114 7.01 8.43 6.22 41 LOTS_OF_MONEY 27745 8.28 12.08 6.14 42 IN_ZIMBRA_NJ_WHITELIST 27639 3.94 0.08 6.11 43 XM_DK_Undo_02 27293 19.85 44.42 6.04 44 TR_XM_DK_Bayes 26770 3.92 0.37 5.92 45 MIME_QP_LONG_LINE 26419 4.80 2.94 5.84 46 TR_XM_DK_Bayes1 26302 3.86 0.36 5.82 47 RCVD_IN_VALIDITY_SAFE 25114 4.88 3.67 5.56 48 RCVD_IN_MSPIKE_H3 24771 4.51 2.77 5.48 49 RCVD_IN_MSPIKE_WL 24771 4.51 2.77 5.48 50 T_TooManySym_01 24690 4.30 2.24 5.46 51 FSL_BULK_SIG 23781 6.27 8.07 5.26 52 XM_H_Long_From01 23295 5.44 5.94 5.15 53 TR_XM_DK_Bayes2 22746 3.32 0.26 5.03 54 XMStrtUSub 22516 4.74 4.30 4.98 55 RCVD_IN_IADB_LISTED 21994 3.65 1.48 4.87 56 XM_B_SpammyWords3 21855 8.06 13.81 4.83 57 BAYES_40 20831 3.41 1.27 4.61 58 XM_B_Phish_Phrases 20788 4.70 4.88 4.60 59 XM_H_GMP 19639 4.16 3.83 4.34 60 RCVD_IN_IADB_SPF 19622 3.23 1.26 4.34 61 BAYES_80 19487 6.13 9.38 4.31 62 RCVD_IN_VALIDITY_CERTIFIED 19301 3.75 2.81 4.27 63 BAYES_99 19259 14.88 33.77 4.26 64 TR_XM_SpammyWords4 19223 6.39 10.20 4.25 65 RELAYCOUNTRY_META 17838 6.65 11.46 3.95 66 RCVD_IN_IADB_SENDERID 17701 2.93 1.17 3.92 67 XM_B_SpammyTLD 17306 3.84 3.87 3.83 68 RCVD_IN_IADB_DK 17191 2.85 1.16 3.80 69 MPART_ALT_DIFF 17129 4.51 5.80 3.79 70 ANY_BOUNCE_MESSAGE 16719 2.80 1.19 3.70 71 BOUNCE_MESSAGE 16719 2.80 1.19 3.70 72 XM_PDF 16123 2.42 0.37 3.57 73 SUBJ_ALL_CAPS 15093 3.86 4.80 3.34 74 XM_UncommonTLD01 14605 3.71 4.57 3.23 75 BAYES_999 14498 11.66 26.70 3.21 76 BOTNET_IPINHOSTNAME 14008 6.31 12.04 3.10 77 URI_NOVOWEL 13742 2.44 1.37 3.04 78 BAYES_20 13668 2.25 0.88 3.02 79 TR_XM_SpammyWords5 13425 3.82 5.33 2.97 80 RCVD_IN_IADB_VOUCHED 13322 2.17 0.78 2.95 81 T_REMOTE_IMAGE 13232 2.30 1.17 2.93 82 MAILING_LIST_MULTI 13043 2.41 1.56 2.89 83 HTML_IMAGE_RATIO_06 12610 3.16 3.83 2.79 84 XMNumbers 12600 3.06 3.55 2.79 85 BAYES_95 12202 3.64 5.32 2.70 86 XMSubMetaSx_00 11660 3.59 5.38 2.58 87 TR_XM_DKIM_Undo 11618 12.68 30.66 2.57 88 TR_XM_UnparsRelay 10758 6.07 12.64 2.38 89 MIME_HTML_MOSTLY 10700 2.72 3.34 2.37 90 FROM_EXCESS_BASE64 10475 2.31 2.29 2.32 91 TM2_M_VERY_LONG_WORD 10464 2.96 4.11 2.31 92 XM_CamelCaseFrm001 10274 2.63 3.25 2.27 93 T_TooManySym_02 10210 1.72 0.77 2.26 94 DKIM_INVALID 9748 2.77 3.86 2.16 95 MIME_HTML_ONLY_MULTI 9674 2.56 3.30 2.14 96 HTML_IMAGE_RATIO_08 9550 2.44 3.02 2.11 97 TR_XM_SpammyRelay 9398 4.29 8.21 2.08 98 TooManyTo_002 9357 1.65 0.91 2.07 99 RCVD_IN_IADB_OPTIN 9330 1.50 0.49 2.06 100 T_XMDrugObfuBody_08 9179 2.12 2.27 2.03 101 TR_DCC_Bayes_99 8897 10.30 25.13 1.97 102 XM_Body_Dirty_Words 8650 3.26 5.66 1.91 103 XMStockSpam_06 8355 1.95 2.14 1.85 104 TM2_M_URI_OPT_OUT 8346 2.33 3.19 1.85 105 UNTRUSTED_Relay 8251 3.20 5.64 1.83 106 XM_SPF_SoftFail 8190 2.89 4.81 1.81 107 BAYES_05 8175 1.32 0.46 1.81 108 XM_DK_Undo_01 8164 1.72 1.57 1.81 109 HTML_MIME_NO_HTML_TAG 8060 1.49 0.97 1.78 110 TR_XM_PhishingBody 7732 2.29 3.33 1.71 111 XM_B_URI_Unicode 7694 2.23 3.16 1.70 112 INVALID_MSGID 7513 1.11 0.13 1.66 113 TR_Symld_Words 6956 1.35 1.01 1.54 114 XM_SendGrid 6825 1.56 1.64 1.51 115 T_XMDrugObfuBody_14 6776 1.95 2.75 1.50 116 KHOP_HELO_FCRDNS 6774 1.34 1.05 1.50 117 XMSubMetaI_00 6651 2.05 3.09 1.47 118 TO_MALFORMED 6605 0.94 0.01 1.46 119 XM_B_Unsub2 6402 1.49 1.61 1.42 120 IN_HORDE_ADDRESS_BOOK 6026 0.88 0.09 1.33 121 XM_B_SEO 5960 2.57 4.78 1.32 122 XMDiploma_00 5942 1.44 1.65 1.31 123 TooManyTo_003 5888 1.04 0.56 1.30 124 BOTNET 5863 3.54 7.54 1.30 125 T_XMHurry_00 5729 1.79 2.73 1.27 126 XMBdyGiftCard01 5487 1.43 1.81 1.21 127 XMSexyCombo_05 5456 2.31 4.26 1.21 128 XMBody_95 5395 0.84 0.22 1.19 129 TR_XM_PHPForged 4980 1.13 1.19 1.10 130 TR_XM_FormFill2 4966 1.12 1.16 1.10 131 URI_HEX 4965 1.35 1.79 1.10 132 TR_XM_PHPDW 4963 1.13 1.19 1.10 133 XM_B_Investor 4955 1.98 3.56 1.10 134 XMBrknScrpt_02 4946 1.70 2.79 1.09 135 XM_H_PHPOS 4920 1.11 1.15 1.09 136 XM_UB50 4895 1.86 3.25 1.08 137 XM_GoogleGroups 4835 0.87 0.52 1.07 138 XMBody_17 4590 1.78 3.15 1.02 139 XM_H_Long_From02 4579 1.00 0.98 1.01 140 XM_TLDProd2 4542 0.78 0.37 1.00 141 TR_XM_DK_SendGrid 4517 0.98 0.93 1.00 142 HELO_NODOT 4516 0.70 0.16 1.00 143 HELO_NO_DOMAIN 4514 0.69 0.15 1.00 144 TooManyTo_004 4501 0.83 0.53 1.00 145 RELAYCOUNTRY_CA 4288 1.79 3.28 0.95 146 XMGappySubj_01 4199 0.69 0.27 0.93 147 XMCapTrack 4169 0.75 0.44 0.92 148 RCVD_IN_BL_SPAMCOP_NET 4105 4.49 10.85 0.91 149 TR_XM_Base64_M1 4078 1.02 1.22 0.90 150 DKIM_ADSP_CUSTOM_MED 4060 0.91 0.93 0.90 151 T_XMDrugObfuBody_00 3958 1.20 1.78 0.88 152 TR_XM_SEO4 3862 2.01 4.07 0.85 153 TVD_SPACE_RATIO 3819 0.57 0.09 0.84 154 TooManyTo_005 3743 0.71 0.51 0.83 155 T_TooManySym_03 3726 0.62 0.27 0.82 156 XM_ProductURIs 3611 0.97 1.26 0.80 157 HTTPS_HTTP_MISMATCH 3418 0.85 1.01 0.76 158 XM_B_SpammyWords4 3413 1.51 2.86 0.76 159 RELAYCOUNTRY_AU 3402 1.35 2.40 0.75 160 XM_OfRef6 3312 1.28 2.26 0.73 161 XMSubMetaSxObfu_03 3301 0.83 1.00 0.73 162 SpammyFromTLD_01 3291 1.01 1.50 0.73 163 THIS_AD 3291 1.13 1.83 0.73 164 T_FILL_THIS_FORM_SHORT 3283 0.85 1.06 0.73 165 URI_TRY_3LD 3247 0.84 1.06 0.72 166 XMGenDplmaNmb 3145 0.80 0.98 0.70 167 TR_LOTS_OF_MONEY3 3144 1.51 2.97 0.70 168 XM_RXBody 3121 0.73 0.81 0.69 169 XMGappySubj_02 3011 0.48 0.14 0.67 170 XM_S_SpammyWords 2946 0.64 0.61 0.65 171 TR_XM_Spammywords 2946 0.64 0.61 0.65 172 HTML_IMAGE_ONLY_32 2915 0.46 0.14 0.64 173 XM_B_DNDMA 2841 0.78 1.04 0.63 174 XM_ShortIntro_01 2837 0.52 0.33 0.63 175 XMLngstWrd_00 2747 0.63 0.66 0.61 176 XMPhish14 2744 0.68 0.80 0.61 177 HTML_TAG_BALANCE_BODY 2682 0.75 1.02 0.59 178 FORGED_GMAIL_RCVD 2670 0.61 0.64 0.59 179 MPART_ALT_DIFF_COUNT 2646 0.93 1.54 0.59 180 TO_NO_BRKTS_HTML_ONLY 2594 0.43 0.18 0.57 181 TR_MetaPhish_Combo_01 2583 0.61 0.68 0.57 182 NML_ADSP_CUSTOM_MED 2582 0.63 0.74 0.57 183 TR_XM_SpammyWords2 2507 4.89 12.60 0.55 184 XM_B_COPY_HTML 2453 0.81 1.28 0.54 185 T_OBFU_PDF_ATTACH 2393 0.37 0.09 0.53 186 SHOPIFY_IMG_NOT_RCVD_SFY 2385 1.08 2.07 0.53 187 RCVD_IN_PBL 2382 0.55 0.60 0.53 188 TR_LOTS_OF_MONEY2 2358 0.96 1.74 0.52 189 T_MONEY_PERCENT 2358 0.96 1.74 0.52 190 RELAYCOUNTRY_GB 2345 0.57 0.67 0.52 191 FROM_GOV_DKIM_AU 2343 0.37 0.10 0.52 192 SUBJ_DOLLARS 2339 0.70 1.03 0.52 193 XMPhish30 2266 0.72 1.11 0.50 194 XMNoVowels 2195 0.44 0.36 0.49 195 TR_XM_SPAMCOP 2190 3.55 9.01 0.48 196 XM_H_PHPMailer 2098 0.47 0.48 0.46 197 XMClaimOffer 2064 0.53 0.66 0.46 198 HTML_IMAGE_ONLY_20 2046 0.38 0.26 0.45 199 XMLngstWrd_01 2015 0.45 0.47 0.45 200 T_Symld_Words_02 1961 0.53 0.70 0.43 ----------------------------------------------------------------------