Email: 482999 Autolearn: 0 AvgScore: 4.97 AvgScanTime: 1.34 sec Spam: 167637 Autolearn: 0 AvgScore: 13.99 AvgScanTime: 1.44 sec Ham: 315362 Autolearn: 0 AvgScore: 0.17 AvgScanTime: 1.29 sec Time Spent Running SA: 179.98 hours Time Spent Processing Spam: 66.96 hours Time Spent Processing Ham: 113.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161061 88.96 96.08 85.18 2 DKIM_SIGNED 142379 79.26 84.93 76.25 3 RELAYCOUNTRY_US 141830 81.61 84.61 80.01 4 XM_DK_Pass 137574 77.49 82.07 75.05 5 DKIM_VALID 135389 76.44 80.76 74.14 6 XM_B_Unicode 132826 73.97 79.23 71.17 7 DCC_CHECK 120684 52.82 71.99 42.63 8 XM_B_SpammyWords 108739 52.22 64.87 45.50 9 XMListUnsubscribeExists 108357 56.35 64.64 51.95 10 DKIM_VALID_AU 106224 60.92 63.37 59.62 11 XM_B_Unicode3 75896 43.89 45.27 43.15 12 LOC_TINY_FONT_1 75895 33.47 45.27 27.19 13 BAYES_50 67142 53.45 40.05 60.57 14 XM_DK_Undo_02 63965 17.09 38.16 5.89 15 XM_B_SpammyWords2 62097 24.74 37.04 18.20 16 HTML_FONT_LOW_CONTRAST 60582 31.90 36.14 29.65 17 RCVD_IN_MSPIKE_H2 59137 33.93 35.28 33.21 18 BAYES_99 57332 14.58 34.20 4.15 19 FVGT_m_MULTI_ODD 55680 27.66 33.21 24.71 20 MIME_HTML_ONLY 55374 23.73 33.03 18.78 21 T_KAM_HTML_FONT_INVALID 52607 24.92 31.38 21.48 22 BAYES_999 46169 11.58 27.54 3.09 23 DCC_CHECK_NEGATIVE 45459 46.84 27.12 57.33 24 DKIM_VALID_EF 43499 26.82 25.95 27.28 25 TR_XM_DKIM_Undo 42598 10.43 25.41 2.47 26 XM_B_Unsub 41974 14.50 25.04 8.89 27 TR_XM_BayesUnsub 40588 13.02 24.21 7.07 28 T_TM2_M_HEADER_IN_MSG 36085 24.78 21.53 26.52 29 XMSubLong 35802 22.00 21.36 22.33 30 TR_DCC_Bayes_99 35059 8.29 20.91 1.58 31 XM_Multi_Part_URI 34595 18.15 20.64 16.83 32 TR_XM_DK_Unsub 29679 14.05 17.70 12.11 33 UNPARSEABLE_RELAY 28423 13.05 16.96 10.97 34 RELAYCOUNTRY_META 26880 8.13 16.03 3.93 35 TR_MAX_INTL_RELAY 22678 8.81 13.53 6.30 36 BOTNET_IPINHOSTNAME 21085 6.62 12.58 3.46 37 XM_B_SpammyWords3 20867 7.08 12.45 4.22 38 TooManyTo_001 19847 9.55 11.84 8.33 39 LOTS_OF_MONEY 19103 7.54 11.40 5.50 40 XM_B_PhoneNumber 19057 9.45 11.37 8.42 41 TR_XM_SpammyRelay 18836 5.25 11.24 2.07 42 FSL_BULK_SIG 18327 8.55 10.93 7.29 43 TR_XM_SpammyWords4 16785 5.91 10.01 3.73 44 XMSubMetaSx_00 16509 5.95 9.85 3.88 45 RCVD_IN_BL_SPAMCOP_NET 16215 3.82 9.67 0.72 46 XM_Evil_Numbers_Gen 15576 9.10 9.29 9.00 47 BOTNET 15155 4.13 9.04 1.51 48 TR_XM_SpammyWords2 15096 3.41 9.01 0.44 49 TR_XM_UnparsRelay 14984 4.22 8.94 1.71 50 BAYES_80 14083 5.40 8.40 3.80 51 XMSexyCombo_05 13899 3.79 8.29 1.39 52 XM_B_Phish_Phrases 13775 6.70 8.22 5.89 53 TR_XM_SPAMCOP 13017 2.93 7.76 0.36 54 BAYES_60 12615 8.58 7.53 9.14 55 LotsOfNums_01 12450 8.13 7.43 8.51 56 HTML_IMAGE_RATIO_02 12347 6.01 7.37 5.30 57 TooManyTo_002 11708 3.67 6.98 1.91 58 TR_XM_FormFill 11634 2.44 6.94 0.05 59 XM_Body_Dirty_Words 11617 4.02 6.93 2.47 60 MPART_ALT_DIFF 11059 4.79 6.60 3.83 61 UNTRUSTED_Relay 10838 3.28 6.47 1.58 62 XM_B_FormFill 10796 2.36 6.44 0.19 63 XM_Appointment_Request 10610 2.22 6.33 0.04 64 XM_H_GMP 9659 5.25 5.76 4.98 65 RELAYCOUNTRY_CA 9575 2.83 5.71 1.30 66 XM_H_Long_From01 8530 5.18 5.09 5.22 67 XM_B_SEO 8290 2.57 4.95 1.31 68 T_XMDrugObfuBody_14 8188 2.76 4.88 1.63 69 BAYES_95 8172 3.33 4.87 2.50 70 XM_UncommonTLD01 8141 4.27 4.86 3.96 71 TR_XM_PhishingBody 7840 2.73 4.68 1.69 72 TR_XM_SEO4 7366 2.05 4.39 0.81 73 XMStrtUSub 7244 4.91 4.32 5.22 74 MIME_HTML_MOSTLY 7063 2.91 4.21 2.21 75 HTML_IMAGE_RATIO_04 7034 4.33 4.20 4.41 76 XM_SPF_SoftFail 6996 2.53 4.17 1.65 77 DKIM_INVALID 6990 2.82 4.17 2.11 78 XM_B_Investor 6802 2.42 4.06 1.54 79 XM_UB50 6682 1.98 3.99 0.92 80 RCVD_IN_VALIDITY_RPBL 6628 1.41 3.95 0.07 81 XM_CamelCaseFrm001 6550 3.16 3.91 2.76 82 RCVD_IN_MSPIKE_WL 6455 5.12 3.85 5.80 83 RCVD_IN_MSPIKE_H3 6455 5.12 3.85 5.80 84 TM2_M_VERY_LONG_WORD 6403 2.21 3.82 1.35 85 TR_XM_NoHeaderRelay 6343 1.39 3.78 0.12 86 MIME_HTML_ONLY_MULTI 6203 2.71 3.70 2.19 87 HTML_IMAGE_RATIO_06 6037 3.37 3.60 3.24 88 XM_OfRef6 5898 1.70 3.52 0.73 89 XMNumbers 5869 2.75 3.50 2.36 90 TR_XM_SpammyWords5 5562 1.84 3.32 1.06 91 XM_B_SpammyTLD 5534 4.13 3.30 4.57 92 MIME_QP_LONG_LINE 5092 5.13 3.04 6.25 93 T_XMDrugObfuBody_08 5080 2.41 3.03 2.08 94 TM2_M_URI_OPT_OUT 4823 2.86 2.88 2.85 95 HTML_IMAGE_RATIO_08 4674 2.29 2.79 2.02 96 USER_IN_DEF_DKIM_WL 4579 10.45 2.73 14.55 97 RELAYCOUNTRY_AU 4554 1.37 2.72 0.66 98 XM_URI_RBL 4494 1.16 2.68 0.35 99 RCVD_IN_VALIDITY_SAFE 4174 4.53 2.49 5.61 100 XM_B_Unsub2 4104 1.81 2.45 1.48 101 XMDiploma_00 3985 1.58 2.38 1.16 102 XM_B_URI_Unicode 3962 1.98 2.36 1.78 103 XM_DK_Undo_01 3735 1.96 2.23 1.81 104 XM_B_SpammyWords4 3713 1.22 2.21 0.70 105 FROM_EXCESS_BASE64 3608 2.18 2.15 2.19 106 DKIM_ADSP_NXDOMAIN 3606 0.93 2.15 0.28 107 XMStockSpam_06 3580 1.74 2.14 1.52 108 BOUNCE_MESSAGE 3551 2.76 2.12 3.10 109 ANY_BOUNCE_MESSAGE 3551 2.76 2.12 3.10 110 T_FILL_THIS_FORM_SHORT 3397 1.30 2.03 0.91 111 T_TooManySym_01 3371 4.40 2.01 5.67 112 XMBody_17 3244 0.98 1.94 0.48 113 RCVD_IN_VALIDITY_CERTIFIED 3195 3.78 1.91 4.77 114 MAILING_LIST_MULTI 3172 2.36 1.89 2.60 115 SpammyFromTLD_01 3063 1.13 1.83 0.76 116 FILL_THIS_FORM 3051 0.78 1.82 0.23 117 T_XMHurry_00 2981 1.02 1.78 0.62 118 URIBL_CSS_A 2956 0.63 1.76 0.03 119 URIBL_CSS 2956 0.63 1.76 0.03 120 SH_BODYURI_REVERSE_CSS 2951 0.63 1.76 0.02 121 BAYES_40 2865 3.79 1.71 4.90 122 FILL_THIS_FORM_LONG 2792 0.61 1.67 0.05 123 XMBrknScrpt_02 2609 1.01 1.56 0.73 124 XMBounce_01 2554 0.54 1.52 0.02 125 XM_B_COPY_HTML 2551 1.17 1.52 0.99 126 TR_Symld_Words 2487 1.55 1.48 1.58 127 XM_SendGrid 2419 1.41 1.44 1.39 128 SUBJ_ALL_CAPS 2389 1.33 1.43 1.28 129 TR_LOTS_OF_MONEY3 2357 0.75 1.41 0.41 130 KHOP_HELO_FCRDNS 2330 1.26 1.39 1.19 131 HTML_MIME_NO_HTML_TAG 2311 1.80 1.38 2.03 132 XMBdyGiftCard01 2257 1.46 1.35 1.51 133 RCVD_IN_XBL 2251 0.48 1.34 0.03 134 XM_B_Phish66 2233 0.66 1.33 0.30 135 T_REMOTE_IMAGE 2154 2.69 1.28 3.44 136 T_XMDrugObfuBody_00 2140 0.87 1.28 0.66 137 XM_H_Long_From02 2130 1.13 1.27 1.05 138 XM_H_Undi_Recip 2093 0.58 1.25 0.22 139 URI_HEX 2093 1.19 1.25 1.16 140 BOTNET_NORDNS 2080 0.44 1.24 0.01 141 DKIM_ADSP_CUSTOM_MED 2051 0.99 1.22 0.86 142 XMGenDplmaNmb 2043 0.78 1.22 0.55 143 XMPhish30 2033 0.76 1.21 0.53 144 TR_Mismatch_TLD_01 2022 0.55 1.21 0.20 145 SpammyFromTLD_02 2016 0.68 1.20 0.40 146 RCVD_IN_IADB_LISTED 2000 3.46 1.19 4.67 147 RELAYCOUNTRY_CN 1991 0.44 1.19 0.05 148 BAYES_20 1875 2.47 1.12 3.18 149 TR_XM_Undi_Recip19 1861 0.46 1.11 0.11 150 XM_OfRef7 1856 0.45 1.11 0.11 151 RELAYCOUNTRY_FR 1844 0.55 1.10 0.25 152 MPART_ALT_DIFF_COUNT 1815 0.68 1.08 0.46 153 XMReplyNow 1793 0.52 1.07 0.22 154 XMSubMetaI_00 1788 0.77 1.07 0.61 155 XM_B_COVIDMETA 1773 0.54 1.06 0.26 156 ALL_TRUSTED 1772 11.14 1.06 16.49 157 THIS_AD 1766 0.58 1.05 0.33 158 T_STY_INVIS_DIRECT 1758 0.56 1.05 0.31 159 RCVD_IN_SBL_CSS 1758 0.40 1.05 0.05 160 SHOPIFY_IMG_NOT_RCVD_SFY 1754 0.49 1.05 0.19 161 XM_B_REG_HTML 1750 0.53 1.04 0.25 162 HTTPS_HTTP_MISMATCH 1723 0.86 1.03 0.77 163 XMPhish14 1710 0.64 1.02 0.43 164 NML_ADSP_CUSTOM_MED 1687 0.70 1.01 0.54 165 HOSTED_IMG_MULTI_PUB_01 1687 0.37 1.01 0.04 166 RDNS_DYNAMIC 1678 0.57 1.00 0.34 167 TR_XM_PHPDW 1672 0.54 1.00 0.30 168 RCVD_IN_IADB_SPF 1661 2.98 0.99 4.04 169 PDS_RDNS_DYNAMIC_FP 1648 0.46 0.98 0.18 170 XMHTML_After_End 1647 0.52 0.98 0.27 171 TR_XM_PHPForged 1635 0.54 0.98 0.31 172 TR_XM_FormFill2 1597 0.53 0.95 0.30 173 TR_XM_Undi_RecipCombo2 1588 0.33 0.95 0.01 174 TR_XM_INV_DKIM 1587 0.37 0.95 0.07 175 RCVD_IN_IADB_DK 1573 2.56 0.94 3.42 176 XM_H_PHPOS 1565 0.51 0.93 0.29 177 URI_NOVOWEL 1563 2.72 0.93 3.68 178 RCVD_IN_IADB_SENDERID 1552 2.65 0.93 3.56 179 XM_ProductURIs 1539 0.71 0.92 0.60 180 DEAR_FRIEND 1537 0.37 0.92 0.08 181 HTML_TAG_BALANCE_BODY 1513 0.75 0.90 0.67 182 LONGLN_LOW_CONTRAST 1487 0.48 0.89 0.26 183 FORGED_GMAIL_RCVD 1472 0.70 0.88 0.61 184 RCVD_IN_ZEN_LASTEXTERNAL 1462 0.30 0.87 0.00 185 SHORTCIRCUIT 1462 0.30 0.87 0.00 186 XMPhish08 1454 0.55 0.87 0.38 187 RCVD_IN_PSBL 1439 0.35 0.86 0.08 188 XM_B_DNDMA 1418 0.81 0.85 0.80 189 URI_TRY_3LD 1415 0.68 0.84 0.60 190 T_MONEY_PERCENT 1409 0.39 0.84 0.15 191 TR_LOTS_OF_MONEY2 1409 0.39 0.84 0.15 192 TR_XM_DK_SendGrid 1392 0.87 0.83 0.90 193 TVD_RCVD_IP 1377 0.67 0.82 0.60 194 RELAYCOUNTRY_RU 1367 0.30 0.82 0.03 195 RCVD_IN_PBL 1360 0.71 0.81 0.66 196 LongTLD 1359 0.51 0.81 0.36 197 XMHTMLBadTable_001 1359 0.54 0.81 0.39 198 XM_DIRTYINTL 1343 0.32 0.80 0.07 199 DIET_1 1330 0.41 0.79 0.21 200 URIBL_BLACK 1313 0.30 0.78 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 268619 88.96 96.08 85.18 2 RELAYCOUNTRY_US 252330 81.61 84.61 80.01 3 DKIM_SIGNED 240463 79.26 84.93 76.25 4 XM_DK_Pass 236688 77.49 82.07 75.05 5 DKIM_VALID 233820 76.44 80.76 74.14 6 XM_B_Unicode 224451 73.97 79.23 71.17 7 BAYES_50 191030 53.45 40.05 60.57 8 DKIM_VALID_AU 188011 60.92 63.37 59.62 9 DCC_CHECK_NEGATIVE 180799 46.84 27.12 57.33 10 XMListUnsubscribeExists 163827 56.35 64.64 51.95 11 XM_B_SpammyWords 143474 52.22 64.87 45.50 12 XM_B_Unicode3 136089 43.89 45.27 43.15 13 DCC_CHECK 134433 52.82 71.99 42.63 14 RCVD_IN_MSPIKE_H2 104724 33.93 35.28 33.21 15 HTML_FONT_LOW_CONTRAST 93517 31.90 36.14 29.65 16 DKIM_VALID_EF 86026 26.82 25.95 27.28 17 LOC_TINY_FONT_1 85743 33.47 45.27 27.19 18 T_TM2_M_HEADER_IN_MSG 83626 24.78 21.53 26.52 19 FVGT_m_MULTI_ODD 77914 27.66 33.21 24.71 20 XMSubLong 70434 22.00 21.36 22.33 21 T_KAM_HTML_FONT_INVALID 67754 24.92 31.38 21.48 22 MIME_HTML_ONLY 59226 23.73 33.03 18.78 23 XM_B_SpammyWords2 57394 24.74 37.04 18.20 24 XM_Multi_Part_URI 53064 18.15 20.64 16.83 25 ALL_TRUSTED 52014 11.14 1.06 16.49 26 USER_IN_DEF_DKIM_WL 45891 10.45 2.73 14.55 27 TR_XM_DK_Unsub 38200 14.05 17.70 12.11 28 UNPARSEABLE_RELAY 34586 13.05 16.96 10.97 29 BAYES_00 30808 6.64 0.74 9.77 30 BAYES_60 28827 8.58 7.53 9.14 31 XM_Evil_Numbers_Gen 28384 9.10 9.29 9.00 32 XM_B_Unsub 28045 14.50 25.04 8.89 33 LotsOfNums_01 26828 8.13 7.43 8.51 34 XM_B_PhoneNumber 26569 9.45 11.37 8.42 35 TooManyTo_001 26283 9.55 11.84 8.33 36 TR_XM_DK_Bayes 23265 5.04 0.66 7.38 37 XM_DKIMWhitelistDomains 23249 4.83 0.05 7.37 38 TR_XM_DK_Bayes1 23066 5.00 0.65 7.31 39 FSL_BULK_SIG 22986 8.55 10.93 7.29 40 TR_XM_BayesUnsub 22309 13.02 24.21 7.07 41 IN_ZIMBRA_NJ_WHITELIST 20499 4.27 0.08 6.50 42 TR_XM_DK_Bayes2 20485 4.41 0.50 6.50 43 TR_MAX_INTL_RELAY 19881 8.81 13.53 6.30 44 MIME_QP_LONG_LINE 19703 5.13 3.04 6.25 45 XM_DK_Undo_02 18590 17.09 38.16 5.89 46 XM_B_Phish_Phrases 18563 6.70 8.22 5.89 47 RCVD_IN_MSPIKE_H3 18290 5.12 3.85 5.80 48 RCVD_IN_MSPIKE_WL 18290 5.12 3.85 5.80 49 T_TooManySym_01 17870 4.40 2.01 5.67 50 RCVD_IN_VALIDITY_SAFE 17694 4.53 2.49 5.61 51 LOTS_OF_MONEY 17336 7.54 11.40 5.50 52 HTML_IMAGE_RATIO_02 16704 6.01 7.37 5.30 53 XM_H_Long_From01 16473 5.18 5.09 5.22 54 XMStrtUSub 16458 4.91 4.32 5.22 55 XM_H_GMP 15710 5.25 5.76 4.98 56 BAYES_40 15447 3.79 1.71 4.90 57 RCVD_IN_VALIDITY_CERTIFIED 15052 3.78 1.91 4.77 58 RCVD_IN_IADB_LISTED 14722 3.46 1.19 4.67 59 XM_B_SpammyTLD 14414 4.13 3.30 4.57 60 HTML_IMAGE_RATIO_04 13904 4.33 4.20 4.41 61 XM_B_SpammyWords3 13324 7.08 12.45 4.22 62 BAYES_99 13102 14.58 34.20 4.15 63 RCVD_IN_IADB_SPF 12730 2.98 0.99 4.04 64 XM_UncommonTLD01 12474 4.27 4.86 3.96 65 XM_PDF 12405 2.74 0.49 3.93 66 RELAYCOUNTRY_META 12401 8.13 16.03 3.93 67 XMSubMetaSx_00 12244 5.95 9.85 3.88 68 MPART_ALT_DIFF 12081 4.79 6.60 3.83 69 BAYES_80 11985 5.40 8.40 3.80 70 TR_XM_SpammyWords4 11766 5.91 10.01 3.73 71 URI_NOVOWEL 11591 2.72 0.93 3.68 72 RCVD_IN_IADB_SENDERID 11230 2.65 0.93 3.56 73 BOTNET_IPINHOSTNAME 10910 6.62 12.58 3.46 74 T_REMOTE_IMAGE 10851 2.69 1.28 3.44 75 RCVD_IN_IADB_DK 10774 2.56 0.94 3.42 76 RCVD_IN_IADB_VOUCHED 10298 2.35 0.62 3.27 77 HTML_IMAGE_RATIO_06 10232 3.37 3.60 3.24 78 BAYES_20 10032 2.47 1.12 3.18 79 ANY_BOUNCE_MESSAGE 9781 2.76 2.12 3.10 80 BOUNCE_MESSAGE 9781 2.76 2.12 3.10 81 BAYES_999 9740 11.58 27.54 3.09 82 TM2_M_URI_OPT_OUT 8996 2.86 2.88 2.85 83 XM_CamelCaseFrm001 8709 3.16 3.91 2.76 84 MAILING_LIST_MULTI 8205 2.36 1.89 2.60 85 T_TooManySym_02 8069 1.84 0.50 2.56 86 BAYES_95 7888 3.33 4.87 2.50 87 XM_Body_Dirty_Words 7799 4.02 6.93 2.47 88 TR_XM_DKIM_Undo 7781 10.43 25.41 2.47 89 XMNumbers 7428 2.75 3.50 2.36 90 RCVD_IN_IADB_OPTIN 7331 1.64 0.35 2.32 91 INVALID_MSGID 7044 1.50 0.13 2.23 92 MIME_HTML_MOSTLY 6984 2.91 4.21 2.21 93 FROM_EXCESS_BASE64 6904 2.18 2.15 2.19 94 MIME_HTML_ONLY_MULTI 6899 2.71 3.70 2.19 95 DKIM_INVALID 6643 2.82 4.17 2.11 96 T_XMDrugObfuBody_08 6574 2.41 3.03 2.08 97 TR_XM_SpammyRelay 6543 5.25 11.24 2.07 98 HTML_MIME_NO_HTML_TAG 6407 1.80 1.38 2.03 99 HTML_IMAGE_RATIO_08 6363 2.29 2.79 2.02 100 TO_MALFORMED 6330 1.31 0.01 2.01 101 BAYES_05 6241 1.47 0.51 1.98 102 TooManyTo_002 6022 3.67 6.98 1.91 103 XM_DK_Undo_01 5712 1.96 2.23 1.81 104 XM_B_URI_Unicode 5616 1.98 2.36 1.78 105 TR_XM_UnparsRelay 5390 4.22 8.94 1.71 106 TR_XM_PhishingBody 5322 2.73 4.68 1.69 107 XM_SPF_SoftFail 5212 2.53 4.17 1.65 108 XMGappySubj_01 5163 1.12 0.15 1.64 109 T_XMDrugObfuBody_14 5146 2.76 4.88 1.63 110 TR_DCC_Bayes_99 4995 8.29 20.91 1.58 111 UNTRUSTED_Relay 4986 3.28 6.47 1.58 112 TR_Symld_Words 4979 1.55 1.48 1.58 113 XM_B_Investor 4870 2.42 4.06 1.54 114 XMStockSpam_06 4807 1.74 2.14 1.52 115 XMBdyGiftCard01 4777 1.46 1.35 1.51 116 BOTNET 4777 4.13 9.04 1.51 117 XM_B_Unsub2 4662 1.81 2.45 1.48 118 IN_HORDE_ADDRESS_BOOK 4550 1.01 0.19 1.44 119 XMSexyCombo_05 4399 3.79 8.29 1.39 120 XM_SendGrid 4395 1.41 1.44 1.39 121 TM2_M_VERY_LONG_WORD 4270 2.21 3.82 1.35 122 XM_B_SEO 4119 2.57 4.95 1.31 123 RELAYCOUNTRY_CA 4100 2.83 5.71 1.30 124 SUBJ_ALL_CAPS 4028 1.33 1.43 1.28 125 TooManyTo_003 3993 1.00 0.49 1.27 126 KHOP_HELO_FCRDNS 3741 1.26 1.39 1.19 127 XM_TLDProd2 3677 0.85 0.26 1.17 128 URI_HEX 3671 1.19 1.25 1.16 129 XMDiploma_00 3647 1.58 2.38 1.16 130 TVD_SPACE_RATIO 3564 0.78 0.12 1.13 131 XM_GoogleGroups 3418 0.92 0.61 1.08 132 TR_XM_SpammyWords5 3348 1.84 3.32 1.06 133 XM_H_Long_From02 3325 1.13 1.27 1.05 134 XM_B_COPY_HTML 3111 1.17 1.52 0.99 135 SHORT_URI_3 3082 0.67 0.09 0.98 136 XMGappySubj_02 3070 0.66 0.08 0.97 137 T_TooManySym_03 2951 0.67 0.17 0.94 138 XM_UB50 2897 1.98 3.99 0.92 139 T_FILL_THIS_FORM_SHORT 2865 1.30 2.03 0.91 140 TR_XM_DK_SendGrid 2832 0.87 0.83 0.90 141 HELO_NODOT 2809 0.63 0.14 0.89 142 HELO_NO_DOMAIN 2805 0.63 0.13 0.89 143 TooManyTo_004 2744 0.70 0.39 0.87 144 XMCapTrack 2733 0.76 0.56 0.87 145 DKIM_ADSP_CUSTOM_MED 2708 0.99 1.22 0.86 146 FROM_GOV_DKIM_AU 2706 0.68 0.33 0.86 147 TR_MetaPhish_Combo_01 2688 0.83 0.77 0.85 148 TR_XM_SEO4 2559 2.05 4.39 0.81 149 XM_B_DNDMA 2514 0.81 0.85 0.80 150 XM_H_PHPMailer 2439 0.70 0.58 0.77 151 HTTPS_HTTP_MISMATCH 2424 0.86 1.03 0.77 152 SpammyFromTLD_01 2410 1.13 1.83 0.76 153 XMBody_95 2391 0.56 0.18 0.76 154 XM_OfRef6 2300 1.70 3.52 0.73 155 XMBrknScrpt_02 2293 1.01 1.56 0.73 156 TR_XM_Base64_M1 2278 0.73 0.75 0.72 157 RCVD_IN_BL_SPAMCOP_NET 2259 3.82 9.67 0.72 158 XM_B_SpammyWords4 2195 1.22 2.21 0.70 159 TooManyTo_005 2176 0.58 0.36 0.69 160 XM_ShortIntro_01 2148 0.55 0.30 0.68 161 XMSexyCombo_01 2120 0.68 0.68 0.67 162 HTML_TAG_BALANCE_BODY 2119 0.75 0.90 0.67 163 XMNoVowels 2089 0.63 0.56 0.66 164 T_XMDrugObfuBody_00 2080 0.87 1.28 0.66 165 RCVD_IN_PBL 2070 0.71 0.81 0.66 166 RELAYCOUNTRY_AU 2069 1.37 2.72 0.66 167 T_XMHurry_00 1966 1.02 1.78 0.62 168 FORGED_GMAIL_RCVD 1916 0.70 0.88 0.61 169 XMSubMetaI_00 1911 0.77 1.07 0.61 170 XM_ProductURIs 1889 0.71 0.92 0.60 171 URI_TRY_3LD 1888 0.68 0.84 0.60 172 TVD_RCVD_IP 1883 0.67 0.82 0.60 173 T_Symld_Words_02 1807 0.54 0.47 0.57 174 T_OBFU_PDF_ATTACH 1749 0.42 0.15 0.55 175 XMGenDplmaNmb 1746 0.78 1.22 0.55 176 XMSexyCombo_04 1698 0.41 0.18 0.54 177 NML_ADSP_CUSTOM_MED 1691 0.70 1.01 0.54 178 XMPhish30 1661 0.76 1.21 0.53 179 XMSubNoVowel 1607 0.49 0.46 0.51 180 SUBJ_DOLLARS 1556 0.49 0.50 0.49 181 TM2_M_OBFU_COMMENT 1518 0.57 0.73 0.48 182 XMBody_17 1509 0.98 1.94 0.48 183 USER_IN_WHITELIST 1505 0.31 0.00 0.48 184 USER_IN_WELCOMELIST 1505 0.31 0.00 0.48 185 MPART_ALT_DIFF_COUNT 1464 0.68 1.08 0.46 186 PLING_QUERY 1446 0.57 0.78 0.46 187 RELAYCOUNTRY_GB 1390 0.50 0.60 0.44 188 HTML_IMAGE_ONLY_20 1390 0.50 0.62 0.44 189 TR_XM_SpammyWords2 1383 3.41 9.01 0.44 190 XMPhish14 1363 0.64 1.02 0.43 191 XM_Ancestry_Forge 1353 0.28 0.00 0.43 192 XMOemUri 1337 0.37 0.27 0.42 193 HTML_IMAGE_ONLY_32 1335 0.33 0.17 0.42 194 XMClaimOffer 1308 0.42 0.44 0.41 195 TR_LOTS_OF_MONEY3 1284 0.75 1.41 0.41 196 SpammyFromTLD_02 1267 0.68 1.20 0.40 197 XMMoneyMeta_00 1250 0.50 0.70 0.40 198 XMLngstWrd_00 1233 0.46 0.59 0.39 199 XMBSHREFv2 1231 0.37 0.32 0.39 200 XMHTMLBadTable_001 1228 0.54 0.81 0.39 ----------------------------------------------------------------------