Email: 438541 Autolearn: 0 AvgScore: 4.70 AvgScanTime: 1.37 sec Spam: 138293 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.52 sec Ham: 300248 Autolearn: 0 AvgScore: 0.32 AvgScanTime: 1.30 sec Time Spent Running SA: 167.12 hours Time Spent Processing Spam: 58.40 hours Time Spent Processing Ham: 108.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132007 89.74 95.45 87.11 2 DKIM_SIGNED 122959 79.50 88.91 75.17 3 XM_DK_Pass 118720 77.65 85.85 73.88 4 XM_B_Unicode 118192 75.32 85.46 70.65 5 DKIM_VALID 117499 76.66 84.96 72.83 6 RELAYCOUNTRY_US 116791 83.10 84.45 82.48 7 DCC_CHECK 102287 49.77 73.96 38.63 8 XM_B_SpammyWords 98434 54.60 71.18 46.97 9 XMListUnsubscribeExists 95448 55.10 69.02 48.69 10 DKIM_VALID_AU 93554 61.55 67.65 58.74 11 XM_B_Unicode3 71149 44.22 51.45 40.89 12 LOC_TINY_FONT_1 69904 34.75 50.55 27.48 13 BAYES_50 58827 55.69 42.54 61.75 14 XM_B_SpammyWords2 57993 28.16 41.93 21.82 15 RCVD_IN_MSPIKE_H2 55523 37.14 40.15 35.75 16 XM_DK_Undo_02 54205 15.72 39.20 4.90 17 HTML_FONT_LOW_CONTRAST 52505 30.23 37.97 26.66 18 FVGT_m_MULTI_ODD 47316 27.78 34.21 24.82 19 T_KAM_HTML_FONT_INVALID 43556 24.95 31.50 21.94 20 DKIM_VALID_EF 40326 29.18 29.16 29.18 21 TR_XM_DKIM_Undo 40274 10.73 29.12 2.26 22 BAYES_99 39602 11.39 28.64 3.45 23 MIME_HTML_ONLY 38521 22.57 27.85 20.14 24 DCC_CHECK_NEGATIVE 33989 49.74 24.58 61.33 25 XMSubLong 32639 23.06 23.60 22.81 26 T_TM2_M_HEADER_IN_MSG 30924 28.04 22.36 30.66 27 BAYES_999 30424 8.73 22.00 2.62 28 XM_Multi_Part_URI 29760 16.14 21.52 13.66 29 TR_XM_DK_Unsub 28502 15.30 20.61 12.86 30 TR_DCC_Bayes_99 27846 7.19 20.14 1.23 31 XM_B_Unsub 24044 11.78 17.39 9.20 32 UNPARSEABLE_RELAY 23603 13.49 17.07 11.85 33 TR_XM_BayesUnsub 23092 9.97 16.70 6.88 34 XM_B_SpammyWords3 20613 9.78 14.91 7.42 35 RELAYCOUNTRY_META 20090 6.96 14.53 3.47 36 TR_MAX_INTL_RELAY 19825 8.41 14.34 5.68 37 LOTS_OF_MONEY 16272 7.76 11.77 5.92 38 XM_Evil_Numbers_Gen 16157 10.18 11.68 9.48 39 TR_XM_SpammyWords4 14723 5.94 10.65 3.77 40 TR_XM_SpammyRelay 14715 4.59 10.64 1.80 41 XM_B_Phish_Phrases 14421 8.41 10.43 7.48 42 TR_XM_SpammyWords2 14398 3.55 10.41 0.39 43 BOTNET_IPINHOSTNAME 13583 5.37 9.82 3.32 44 FSL_BULK_SIG 12742 7.82 9.21 7.18 45 RCVD_IN_BL_SPAMCOP_NET 12558 3.24 9.08 0.55 46 BAYES_80 12229 5.21 8.84 3.53 47 BOTNET 12008 3.69 8.68 1.40 48 LotsOfNums_01 11796 8.35 8.53 8.27 49 BAYES_60 11707 7.27 8.47 6.72 50 TR_XM_UnparsRelay 11187 3.45 8.09 1.31 51 XM_Body_Dirty_Words 10512 4.19 7.60 2.61 52 TR_XM_SPAMCOP 10069 2.49 7.28 0.28 53 XMSubMetaSx_00 9470 4.34 6.85 3.19 54 HTML_IMAGE_RATIO_04 9285 5.57 6.71 5.04 55 HTML_IMAGE_RATIO_02 9251 5.03 6.69 4.27 56 MPART_ALT_DIFF 8695 5.04 6.29 4.47 57 TM2_M_VERY_LONG_WORD 8230 4.58 5.95 3.95 58 RELAYCOUNTRY_CA 7783 2.37 5.63 0.87 59 XM_UncommonTLD01 7620 4.62 5.51 4.21 60 XM_B_PhoneNumber 7573 7.81 5.48 8.89 61 UNTRUSTED_Relay 7522 2.72 5.44 1.47 62 BAYES_95 7063 3.08 5.11 2.15 63 T_XMDrugObfuBody_14 6843 2.93 4.95 2.00 64 XM_H_Long_From01 6582 5.60 4.76 5.99 65 XM_H_GMP 6499 5.39 4.70 5.71 66 XMSexyCombo_05 6159 2.21 4.45 1.17 67 TR_XM_PhishingBody 6131 2.27 4.43 1.27 68 XM_B_Investor 6011 2.43 4.35 1.54 69 XM_B_SpammyTLD 5628 3.26 4.07 2.89 70 DKIM_INVALID 5460 2.84 3.95 2.33 71 HTML_IMAGE_RATIO_06 5408 3.04 3.91 2.63 72 XMStrtUSub 5362 4.50 3.88 4.79 73 MIME_HTML_MOSTLY 5267 2.90 3.81 2.48 74 RCVD_IN_MSPIKE_WL 4864 4.61 3.52 5.12 75 RCVD_IN_MSPIKE_H3 4864 4.61 3.52 5.12 76 XM_OfRef6 4786 1.91 3.46 1.20 77 MIME_HTML_ONLY_MULTI 4626 2.83 3.35 2.59 78 TooManyTo_001 4398 6.69 3.18 8.31 79 XM_URI_RBL 4321 1.33 3.12 0.51 80 MIME_QP_LONG_LINE 4307 4.43 3.11 5.04 81 HTML_IMAGE_RATIO_08 4207 2.75 3.04 2.61 82 TR_XM_SpammyWords5 4192 1.86 3.03 1.32 83 TM2_M_URI_OPT_OUT 4164 2.23 3.01 1.87 84 XM_CamelCaseFrm001 4134 3.07 2.99 3.11 85 XM_SPF_SoftFail 4050 1.83 2.93 1.32 86 RCVD_IN_VALIDITY_SAFE 3905 3.61 2.82 3.97 87 T_XMDrugObfuBody_08 3900 1.94 2.82 1.54 88 KHOP_HELO_FCRDNS 3896 2.59 2.82 2.49 89 ANY_BOUNCE_MESSAGE 3871 4.78 2.80 5.69 90 BOUNCE_MESSAGE 3871 4.78 2.80 5.69 91 XMNumbers 3846 2.80 2.78 2.81 92 XM_B_Unsub2 3842 1.85 2.78 1.42 93 XM_UB50 3835 1.50 2.77 0.91 94 XM_B_SpammyWords4 3799 1.36 2.75 0.72 95 XMDiploma_00 3675 2.09 2.66 1.83 96 RELAYCOUNTRY_AU 3555 1.22 2.57 0.60 97 XM_B_URI_Unicode 3495 2.09 2.53 1.89 98 FROM_EXCESS_BASE64 3465 2.04 2.51 1.83 99 MAILING_LIST_MULTI 3427 2.82 2.48 2.98 100 RCVD_IN_VALIDITY_CERTIFIED 3375 2.84 2.44 3.02 101 DIET_1 3254 1.08 2.35 0.49 102 RCVD_IN_VALIDITY_RPBL 3044 0.74 2.20 0.07 103 MAY_BE_FORGED 3021 2.58 2.18 2.77 104 TR_XM_NoHeaderRelay 2910 0.77 2.10 0.16 105 XMBody_17 2900 1.00 2.10 0.50 106 T_XMDrugObfuBody_00 2887 1.27 2.09 0.89 107 T_TooManySym_01 2861 4.55 2.07 5.69 108 SpammyFromTLD_02 2825 1.08 2.04 0.63 109 T_FILL_THIS_FORM_SHORT 2770 1.33 2.00 1.02 110 T_XMHurry_00 2707 1.08 1.96 0.67 111 HTML_MIME_NO_HTML_TAG 2694 2.49 1.95 2.74 112 BAYES_40 2686 4.22 1.94 5.27 113 USER_IN_DEF_DKIM_WL 2595 10.19 1.88 14.02 114 ALL_TRUSTED 2504 10.65 1.81 14.73 115 XM_DK_Undo_01 2496 1.82 1.80 1.82 116 XMStockSpam_06 2377 1.44 1.72 1.31 117 T_REMOTE_IMAGE 2352 3.06 1.70 3.68 118 XMGenDplmaNmb 2317 1.25 1.68 1.05 119 XM_SendGrid 2274 1.43 1.64 1.32 120 SUBJ_ALL_CAPS 2216 1.63 1.60 1.64 121 XMBrknScrpt_02 2205 1.24 1.59 1.07 122 SpammyFromTLD_01 2193 1.10 1.59 0.88 123 XMPhish30 2184 0.80 1.58 0.44 124 TR_XM_INV_DKIM 2102 0.58 1.52 0.14 125 BAYES_20 2067 3.03 1.49 3.74 126 RCVD_IN_PSBL 2035 0.57 1.47 0.15 127 TR_LOTS_OF_MONEY3 2013 0.69 1.46 0.34 128 SHORTCIRCUIT 2003 0.46 1.45 0.00 129 RCVD_IN_ZEN_LASTEXTERNAL 2003 0.46 1.45 0.00 130 XM_B_COPY_HTML 1924 0.90 1.39 0.67 131 XM_ProductURIs 1910 0.73 1.38 0.44 132 XM_B_DNDMA 1883 0.71 1.36 0.42 133 URI_NOVOWEL 1779 1.59 1.29 1.72 134 TR_XM_Base64_M1 1776 1.00 1.28 0.87 135 TR_MetaPhish_Combo_01 1765 1.36 1.28 1.40 136 URI_TRY_3LD 1755 0.84 1.27 0.64 137 XM_B_Phish66 1747 0.60 1.26 0.29 138 SHOPIFY_IMG_NOT_RCVD_SFY 1732 0.57 1.25 0.26 139 XMSexyCombo_01 1716 0.54 1.24 0.22 140 XMSubMetaI_00 1712 0.86 1.24 0.69 141 XM_DIRTYINTL 1708 0.44 1.24 0.08 142 XM_RXBody 1671 0.60 1.21 0.32 143 TR_XM_PHPDW 1648 0.60 1.19 0.33 144 TR_XM_PHPForged 1636 0.60 1.18 0.33 145 TR_XM_FormFill2 1632 0.60 1.18 0.33 146 XM_B_COVIDMETA 1632 0.56 1.18 0.27 147 DKIM_ADSP_CUSTOM_MED 1627 0.91 1.18 0.79 148 LongTLD 1621 0.68 1.17 0.46 149 XMBdyGiftCard01 1611 0.85 1.16 0.71 150 TM2_M_OBFU_COMMENT 1607 0.72 1.16 0.52 151 HTML_FONT_TINY_NORDNS 1605 0.40 1.16 0.05 152 URI_HEX 1605 1.27 1.16 1.32 153 XM_H_PHPOS 1600 0.58 1.16 0.32 154 MPART_ALT_DIFF_COUNT 1595 0.73 1.15 0.53 155 BOTNET_NORDNS 1540 0.36 1.11 0.01 156 RELAYCOUNTRY_FR 1530 0.49 1.11 0.20 157 XM_HighProb1 1529 0.36 1.11 0.01 158 XMBody_78 1511 0.62 1.09 0.40 159 XM_B_SEO 1507 0.47 1.09 0.19 160 RCVD_IN_PBL 1489 0.79 1.08 0.65 161 RCVD_IN_IADB_LISTED 1482 2.89 1.07 3.73 162 HTML_FONT_FACE_BAD 1469 0.62 1.06 0.42 163 XM_H_Long_From02 1468 0.89 1.06 0.81 164 MIME_CHARSET_FARAWAY 1428 0.68 1.03 0.51 165 XM_B_REG_HTML 1420 0.44 1.03 0.18 166 TR_XM_DK_SendGrid 1396 0.90 1.01 0.85 167 TR_Mismatch_TLD_02 1386 0.36 1.00 0.06 168 HTML_TAG_BALANCE_BODY 1384 0.76 1.00 0.65 169 RCVD_IN_IADB_SPF 1381 2.56 1.00 3.28 170 XMLngstWrd_00 1354 0.72 0.98 0.60 171 XMPhish14 1346 0.52 0.97 0.31 172 RCVD_IN_IADB_DK 1338 2.25 0.97 2.84 173 RCVD_IN_IADB_SENDERID 1326 2.29 0.96 2.91 174 NML_ADSP_CUSTOM_MED 1319 0.66 0.95 0.53 175 TR_Symld_Words 1317 1.41 0.95 1.62 176 XMMoneyMeta_00 1307 0.56 0.95 0.39 177 TR_XM_SEO4 1279 0.36 0.92 0.10 178 HTTPS_HTTP_MISMATCH 1271 0.72 0.92 0.62 179 XMHTML_After_End 1247 0.53 0.90 0.36 180 XM_UB99 1236 0.28 0.89 0.00 181 XM_OfRef7 1235 0.48 0.89 0.30 182 XMSubMetaSSx_00 1201 0.36 0.87 0.12 183 TM2_M_A_HREF_HREF 1198 0.47 0.87 0.29 184 XMReplyNow 1170 0.43 0.85 0.24 185 T_STY_INVIS_DIRECT 1163 0.52 0.84 0.38 186 HOSTED_IMG_MULTI_PUB_01 1160 0.29 0.84 0.04 187 XM_S_SpammyWords 1157 0.38 0.84 0.17 188 TR_XM_Spammywords 1157 0.38 0.84 0.17 189 FORGED_GMAIL_RCVD 1156 0.59 0.84 0.47 190 CHARSET_FARAWAY_HEADER 1135 0.50 0.82 0.35 191 XMSlimDrugH 1130 0.57 0.82 0.46 192 RDNS_DYNAMIC 1128 0.47 0.82 0.31 193 TR_XM_RelayPhish 1121 0.31 0.81 0.07 194 MultiRelay_CC 1120 0.36 0.81 0.16 195 J_POPCORN_WO_D 1096 0.45 0.79 0.30 196 XM_H_PHPMailer 1092 0.82 0.79 0.83 197 BAYES_00 1084 7.89 0.78 11.16 198 RCVD_IN_XBL 1061 0.25 0.77 0.02 199 AC_HTML_NONSENSE_TAGS 1060 0.29 0.77 0.07 200 PDS_RDNS_DYNAMIC_FP 1057 0.37 0.76 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 261546 89.74 95.45 87.11 2 RELAYCOUNTRY_US 247651 83.10 84.45 82.48 3 DKIM_SIGNED 225682 79.50 88.91 75.17 4 XM_DK_Pass 221825 77.65 85.85 73.88 5 DKIM_VALID 218676 76.66 84.96 72.83 6 XM_B_Unicode 212128 75.32 85.46 70.65 7 BAYES_50 185408 55.69 42.54 61.75 8 DCC_CHECK_NEGATIVE 184128 49.74 24.58 61.33 9 DKIM_VALID_AU 176358 61.55 67.65 58.74 10 XMListUnsubscribeExists 146193 55.10 69.02 48.69 11 XM_B_SpammyWords 141018 54.60 71.18 46.97 12 XM_B_Unicode3 122761 44.22 51.45 40.89 13 DCC_CHECK 115991 49.77 73.96 38.63 14 RCVD_IN_MSPIKE_H2 107345 37.14 40.15 35.75 15 T_TM2_M_HEADER_IN_MSG 92045 28.04 22.36 30.66 16 DKIM_VALID_EF 87625 29.18 29.16 29.18 17 LOC_TINY_FONT_1 82499 34.75 50.55 27.48 18 HTML_FONT_LOW_CONTRAST 80045 30.23 37.97 26.66 19 FVGT_m_MULTI_ODD 74515 27.78 34.21 24.82 20 XMSubLong 68487 23.06 23.60 22.81 21 T_KAM_HTML_FONT_INVALID 65860 24.95 31.50 21.94 22 XM_B_SpammyWords2 65503 28.16 41.93 21.82 23 MIME_HTML_ONLY 60455 22.57 27.85 20.14 24 ALL_TRUSTED 44219 10.65 1.81 14.73 25 USER_IN_DEF_DKIM_WL 42108 10.19 1.88 14.02 26 XM_Multi_Part_URI 41027 16.14 21.52 13.66 27 TR_XM_DK_Unsub 38611 15.30 20.61 12.86 28 UNPARSEABLE_RELAY 35567 13.49 17.07 11.85 29 BAYES_00 33504 7.89 0.78 11.16 30 XM_Evil_Numbers_Gen 28465 10.18 11.68 9.48 31 XM_B_Unsub 27609 11.78 17.39 9.20 32 XM_B_PhoneNumber 26684 7.81 5.48 8.89 33 TooManyTo_001 24949 6.69 3.18 8.31 34 LotsOfNums_01 24832 8.35 8.53 8.27 35 TR_XM_DK_Bayes 22905 5.43 0.65 7.63 36 TR_XM_DK_Bayes1 22507 5.33 0.63 7.50 37 XM_B_Phish_Phrases 22471 8.41 10.43 7.48 38 XM_B_SpammyWords3 22280 9.78 14.91 7.42 39 FSL_BULK_SIG 21557 7.82 9.21 7.18 40 TR_XM_BayesUnsub 20645 9.97 16.70 6.88 41 IN_ZIMBRA_NJ_WHITELIST 20231 4.65 0.11 6.74 42 BAYES_60 20162 7.27 8.47 6.72 43 XM_DKIMWhitelistDomains 19807 4.54 0.08 6.60 44 TR_XM_DK_Bayes2 18800 4.42 0.43 6.26 45 XM_H_Long_From01 17986 5.60 4.76 5.99 46 LOTS_OF_MONEY 17767 7.76 11.77 5.92 47 XM_H_GMP 17142 5.39 4.70 5.71 48 T_TooManySym_01 17097 4.55 2.07 5.69 49 ANY_BOUNCE_MESSAGE 17083 4.78 2.80 5.69 50 BOUNCE_MESSAGE 17082 4.78 2.80 5.69 51 TR_MAX_INTL_RELAY 17056 8.41 14.34 5.68 52 BAYES_40 15825 4.22 1.94 5.27 53 RCVD_IN_MSPIKE_WL 15374 4.61 3.52 5.12 54 RCVD_IN_MSPIKE_H3 15374 4.61 3.52 5.12 55 HTML_IMAGE_RATIO_04 15145 5.57 6.71 5.04 56 MIME_QP_LONG_LINE 15132 4.43 3.11 5.04 57 XM_DK_Undo_02 14713 15.72 39.20 4.90 58 XMStrtUSub 14393 4.50 3.88 4.79 59 XM_PDF 14059 3.43 0.72 4.68 60 MPART_ALT_DIFF 13412 5.04 6.29 4.47 61 HTML_IMAGE_RATIO_02 12807 5.03 6.69 4.27 62 XM_UncommonTLD01 12655 4.62 5.51 4.21 63 RCVD_IN_VALIDITY_SAFE 11931 3.61 2.82 3.97 64 TM2_M_VERY_LONG_WORD 11851 4.58 5.95 3.95 65 TR_XM_SpammyWords4 11329 5.94 10.65 3.77 66 BAYES_20 11242 3.03 1.49 3.74 67 RCVD_IN_IADB_LISTED 11187 2.89 1.07 3.73 68 T_REMOTE_IMAGE 11057 3.06 1.70 3.68 69 BAYES_80 10599 5.21 8.84 3.53 70 RELAYCOUNTRY_META 10415 6.96 14.53 3.47 71 BAYES_99 10348 11.39 28.64 3.45 72 BOTNET_IPINHOSTNAME 9981 5.37 9.82 3.32 73 RCVD_IN_IADB_SPF 9835 2.56 1.00 3.28 74 XMSubMetaSx_00 9570 4.34 6.85 3.19 75 XM_CamelCaseFrm001 9337 3.07 2.99 3.11 76 T_TooManySym_02 9195 2.28 0.58 3.06 77 RCVD_IN_VALIDITY_CERTIFIED 9082 2.84 2.44 3.02 78 MAILING_LIST_MULTI 8948 2.82 2.48 2.98 79 TooManyTo_002 8890 2.20 0.55 2.96 80 RCVD_IN_IADB_SENDERID 8724 2.29 0.96 2.91 81 XM_B_SpammyTLD 8676 3.26 4.07 2.89 82 RCVD_IN_IADB_DK 8526 2.25 0.97 2.84 83 XMNumbers 8425 2.80 2.78 2.81 84 MAY_BE_FORGED 8310 2.58 2.18 2.77 85 HTML_MIME_NO_HTML_TAG 8233 2.49 1.95 2.74 86 HTML_IMAGE_RATIO_06 7908 3.04 3.91 2.63 87 BAYES_999 7870 8.73 22.00 2.62 88 XM_Body_Dirty_Words 7851 4.19 7.60 2.61 89 HTML_IMAGE_RATIO_08 7840 2.75 3.04 2.61 90 MIME_HTML_ONLY_MULTI 7786 2.83 3.35 2.59 91 INVALID_MSGID 7624 1.83 0.30 2.54 92 RCVD_IN_IADB_VOUCHED 7601 1.86 0.41 2.53 93 KHOP_HELO_FCRDNS 7481 2.59 2.82 2.49 94 MIME_HTML_MOSTLY 7446 2.90 3.81 2.48 95 DKIM_INVALID 7006 2.84 3.95 2.33 96 TR_XM_DKIM_Undo 6791 10.73 29.12 2.26 97 BAYES_05 6709 1.76 0.74 2.23 98 BAYES_95 6445 3.08 5.11 2.15 99 TO_MALFORMED 6294 1.44 0.02 2.10 100 T_XMDrugObfuBody_14 5990 2.93 4.95 2.00 101 XM_B_URI_Unicode 5674 2.09 2.53 1.89 102 TM2_M_URI_OPT_OUT 5611 2.23 3.01 1.87 103 FROM_EXCESS_BASE64 5496 2.04 2.51 1.83 104 XMDiploma_00 5480 2.09 2.66 1.83 105 XM_DK_Undo_01 5469 1.82 1.80 1.82 106 TR_XM_SpammyRelay 5394 4.59 10.64 1.80 107 RCVD_IN_IADB_OPTIN 5303 1.30 0.29 1.77 108 TooManyTo_003 5186 1.33 0.46 1.73 109 URI_NOVOWEL 5179 1.59 1.29 1.72 110 HTML_EXTRA_CLOSE 5158 1.18 0.03 1.72 111 XMGappySubj_01 5153 1.24 0.22 1.72 112 SUBJ_ALL_CAPS 4922 1.63 1.60 1.64 113 TR_Symld_Words 4866 1.41 0.95 1.62 114 XM_B_Investor 4637 2.43 4.35 1.54 115 T_XMDrugObfuBody_08 4622 1.94 2.82 1.54 116 IN_HORDE_ADDRESS_BOOK 4462 1.05 0.11 1.49 117 UNTRUSTED_Relay 4413 2.72 5.44 1.47 118 XM_B_Unsub2 4274 1.85 2.78 1.42 119 TR_MetaPhish_Combo_01 4212 1.36 1.28 1.40 120 BOTNET 4194 3.69 8.68 1.40 121 XM_SendGrid 3978 1.43 1.64 1.32 122 XM_SPF_SoftFail 3962 1.83 2.93 1.32 123 URI_HEX 3958 1.27 1.16 1.32 124 TR_XM_SpammyWords5 3955 1.86 3.03 1.32 125 TR_XM_UnparsRelay 3939 3.45 8.09 1.31 126 XMStockSpam_06 3920 1.44 1.72 1.31 127 TooManyTo_004 3888 1.01 0.40 1.29 128 TR_XM_PhishingBody 3807 2.27 4.43 1.27 129 TR_DCC_Bayes_99 3705 7.19 20.14 1.23 130 T_TooManySym_03 3692 0.90 0.19 1.23 131 XM_OfRef6 3605 1.91 3.46 1.20 132 XM_GoogleGroups 3579 1.05 0.73 1.19 133 HELO_NODOT 3563 0.94 0.42 1.19 134 HELO_NO_DOMAIN 3554 0.94 0.42 1.18 135 XMSexyCombo_05 3523 2.21 4.45 1.17 136 FROM_GOV_DKIM_AU 3477 0.84 0.15 1.16 137 TooManyTo_005 3253 0.84 0.32 1.08 138 XMBrknScrpt_02 3220 1.24 1.59 1.07 139 TVD_SPACE_RATIO 3209 0.81 0.24 1.07 140 XMGenDplmaNmb 3151 1.25 1.68 1.05 141 T_FILL_THIS_FORM_SHORT 3055 1.33 2.00 1.02 142 XMCapTrack 3000 0.81 0.40 1.00 143 XMGappySubj_02 2999 0.70 0.05 1.00 144 XM_UB50 2739 1.50 2.77 0.91 145 T_XMDrugObfuBody_00 2662 1.27 2.09 0.89 146 SpammyFromTLD_01 2647 1.10 1.59 0.88 147 TR_XM_Base64_M1 2622 1.00 1.28 0.87 148 RELAYCOUNTRY_CA 2602 2.37 5.63 0.87 149 TR_XM_DK_SendGrid 2566 0.90 1.01 0.85 150 HTML_IMAGE_ONLY_32 2534 0.64 0.19 0.84 151 XM_ShortIntro_01 2519 0.68 0.34 0.84 152 XM_H_PHPMailer 2484 0.82 0.79 0.83 153 XM_H_Long_From02 2423 0.89 1.06 0.81 154 DKIM_ADSP_CUSTOM_MED 2363 0.91 1.18 0.79 155 XM_B_SpammyWords4 2163 1.36 2.75 0.72 156 XMBdyGiftCard01 2123 0.85 1.16 0.71 157 XMSubMetaI_00 2061 0.86 1.24 0.69 158 TVD_RCVD_IP 2053 0.69 0.69 0.68 159 XMNoVowels 2032 0.65 0.58 0.68 160 XM_B_COPY_HTML 2017 0.90 1.39 0.67 161 T_XMHurry_00 2014 1.08 1.96 0.67 162 T_OBFU_PDF_ATTACH 2006 0.49 0.10 0.67 163 XMBody_95 1994 0.51 0.17 0.66 164 RCVD_IN_PBL 1954 0.79 1.08 0.65 165 HTML_TAG_BALANCE_BODY 1952 0.76 1.00 0.65 166 URI_TRY_3LD 1935 0.84 1.27 0.64 167 SpammyFromTLD_02 1901 1.08 2.04 0.63 168 HTTPS_HTTP_MISMATCH 1872 0.72 0.92 0.62 169 XMBSHREFv2 1872 0.54 0.37 0.62 170 XM_B_FormFill 1821 0.42 0.02 0.61 171 RELAYCOUNTRY_AU 1809 1.22 2.57 0.60 172 XMLngstWrd_00 1791 0.72 0.98 0.60 173 RCVD_IN_BL_SPAMCOP_NET 1665 3.24 9.08 0.55 174 T_Symld_Words_02 1641 0.55 0.55 0.55 175 MPART_ALT_DIFF_COUNT 1592 0.73 1.15 0.53 176 NML_ADSP_CUSTOM_MED 1591 0.66 0.95 0.53 177 TO_NO_BRKTS_HTML_ONLY 1579 0.48 0.38 0.53 178 HTML_IMAGE_ONLY_20 1577 0.54 0.57 0.53 179 TM2_M_OBFU_COMMENT 1569 0.72 1.16 0.52 180 RELAYCOUNTRY_GB 1559 0.56 0.65 0.52 181 MIME_CHARSET_FARAWAY 1536 0.68 1.03 0.51 182 XM_URI_RBL 1518 1.33 3.12 0.51 183 T_TVD_MIME_NO_HEADERS 1500 0.35 0.04 0.50 184 XMBody_17 1487 1.00 2.10 0.50 185 DIET_1 1475 1.08 2.35 0.49 186 FILL_THIS_FORM 1458 0.39 0.20 0.49 187 FORGED_GMAIL_RCVD 1424 0.59 0.84 0.47 188 XMSlimDrugH 1388 0.57 0.82 0.46 189 LongTLD 1370 0.68 1.17 0.46 190 HELO_MISC_IP 1360 0.39 0.25 0.45 191 MSGID_FROM_MTA_HEADER 1354 0.35 0.13 0.45 192 XMLngstWrd_01 1313 0.53 0.75 0.44 193 XM_ProductURIs 1309 0.73 1.38 0.44 194 XMPhish30 1308 0.80 1.58 0.44 195 USER_IN_WELCOMELIST 1280 0.29 0.00 0.43 196 USER_IN_WHITELIST 1280 0.29 0.00 0.43 197 HTML_FONT_FACE_BAD 1257 0.62 1.06 0.42 198 XM_B_DNDMA 1252 0.71 1.36 0.42 199 MISSING_HEADERS 1252 0.51 0.70 0.42 200 XMBody_78 1216 0.62 1.09 0.40 ----------------------------------------------------------------------