Email: 425849 Autolearn: 0 AvgScore: 4.58 AvgScanTime: 1.30 sec Spam: 131707 Autolearn: 0 AvgScore: 15.15 AvgScanTime: 1.39 sec Ham: 294142 Autolearn: 0 AvgScore: -0.15 AvgScanTime: 1.26 sec Time Spent Running SA: 153.69 hours Time Spent Processing Spam: 50.70 hours Time Spent Processing Ham: 102.99 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 123209 88.63 93.55 86.43 2 DKIM_SIGNED 115382 79.60 87.61 76.01 3 XM_DK_Pass 109824 77.29 83.39 74.56 4 DKIM_VALID 108743 76.12 82.56 73.24 5 XM_B_Unicode 108539 73.39 82.41 69.35 6 RELAYCOUNTRY_US 103980 80.61 78.95 81.36 7 DCC_CHECK 99267 49.80 75.37 38.35 8 XM_B_SpammyWords 91204 52.17 69.25 44.52 9 XMListUnsubscribeExists 86901 52.69 65.98 46.74 10 DKIM_VALID_AU 86901 61.41 65.98 59.36 11 XM_B_Unicode3 64019 42.64 48.61 39.96 12 LOC_TINY_FONT_1 61843 33.14 46.95 26.96 13 RCVD_IN_MSPIKE_H2 58573 38.92 44.47 36.44 14 BAYES_50 54084 54.72 41.06 60.83 15 T_SCC_BODY_TEXT_LINE 53102 41.43 40.32 41.93 16 XM_B_SpammyWords2 52676 25.03 39.99 18.33 17 XM_DK_Undo_02 49463 15.07 37.56 5.01 18 HTML_FONT_LOW_CONTRAST 46214 29.69 35.09 27.28 19 T_KAM_HTML_FONT_INVALID 41653 24.54 31.63 21.36 20 FVGT_m_MULTI_ODD 40578 27.84 30.81 26.51 21 DKIM_VALID_EF 39892 30.65 30.29 30.82 22 MIME_HTML_ONLY 39118 23.53 29.70 20.77 23 BAYES_99 37920 11.39 28.79 3.60 24 TR_XM_DKIM_Undo 36758 10.28 27.91 2.38 25 XMSubLong 33431 24.19 25.38 23.65 26 T_TM2_M_HEADER_IN_MSG 30608 29.47 23.24 32.26 27 DCC_CHECK_NEGATIVE 30166 49.62 22.90 61.59 28 BAYES_999 29080 8.73 22.08 2.76 29 TR_DCC_Bayes_99 26984 7.32 20.49 1.42 30 XM_Multi_Part_URI 26618 14.98 20.21 12.63 31 TR_XM_DK_Unsub 26605 15.27 20.20 13.06 32 XM_B_Unsub 25376 12.39 19.27 9.32 33 RELAYCOUNTRY_META 24969 8.78 18.96 4.22 34 TR_XM_BayesUnsub 24530 10.58 18.62 6.98 35 UNPARSEABLE_RELAY 23204 14.26 17.62 12.76 36 XM_B_SpammyWords3 20454 7.71 15.53 4.22 37 TR_MAX_INTL_RELAY 19969 8.35 15.16 5.30 38 LOTS_OF_MONEY 17955 8.55 13.63 6.28 39 BOTNET_IPINHOSTNAME 17480 6.22 13.27 3.06 40 FSL_BULK_SIG 17051 9.32 12.95 7.69 41 TR_XM_SpammyRelay 16265 5.32 12.35 2.17 42 TR_XM_SpammyWords4 16222 6.77 12.32 4.29 43 BOTNET 15423 4.61 11.71 1.43 44 TR_XM_SpammyWords2 13852 3.62 10.52 0.54 45 BAYES_80 12659 5.19 9.61 3.21 46 BAYES_60 12189 7.22 9.25 6.31 47 TR_XM_UnparsRelay 12008 3.85 9.12 1.50 48 XM_Evil_Numbers_Gen 11202 9.03 8.51 9.27 49 UNTRUSTED_Relay 10932 3.64 8.30 1.56 50 XM_B_Phish_Phrases 10467 6.16 7.95 5.36 51 XM_Body_Dirty_Words 10372 4.25 7.88 2.62 52 RCVD_IN_BL_SPAMCOP_NET 10009 2.73 7.60 0.55 53 RELAYCOUNTRY_CA 9349 2.85 7.10 0.94 54 HTML_IMAGE_RATIO_02 9092 4.82 6.90 3.89 55 LotsOfNums_01 8227 7.05 6.25 7.41 56 XM_B_PhoneNumber 8211 9.36 6.23 10.76 57 MPART_ALT_DIFF 8135 4.88 6.18 4.30 58 XM_UncommonTLD01 8098 4.95 6.15 4.41 59 XMSubMetaSx_00 7869 4.15 5.97 3.33 60 TR_XM_SPAMCOP 7780 2.00 5.91 0.25 61 XM_H_GMP 7312 6.22 5.55 6.52 62 TooManyTo_001 7261 8.34 5.51 9.60 63 XM_H_Long_From01 7238 5.70 5.50 5.80 64 XMStrtUSub 6807 4.93 5.17 4.82 65 BAYES_95 6748 3.03 5.12 2.09 66 DKIM_INVALID 6639 3.47 5.04 2.77 67 HTML_IMAGE_RATIO_04 6362 4.14 4.83 3.83 68 XMNumbers 6068 4.07 4.61 3.83 69 XM_UB50 5852 2.06 4.44 1.00 70 T_XMDrugObfuBody_14 5705 2.65 4.33 1.90 71 XM_B_SpammyTLD 5705 3.32 4.33 2.87 72 TR_XM_PhishingBody 5625 2.42 4.27 1.60 73 MIME_HTML_MOSTLY 5513 2.86 4.19 2.26 74 TR_XM_SpammyWords5 5413 2.18 4.11 1.32 75 XM_B_Investor 5296 2.37 4.02 1.63 76 MIME_QP_LONG_LINE 5053 4.22 3.84 4.39 77 XMSexyCombo_05 4958 2.12 3.76 1.38 78 TR_XM_NoHeaderRelay 4941 1.40 3.75 0.35 79 TM2_M_VERY_LONG_WORD 4718 2.05 3.58 1.36 80 XM_CamelCaseFrm001 4644 2.44 3.53 1.96 81 HTML_IMAGE_RATIO_06 4609 2.84 3.50 2.54 82 MIME_HTML_ONLY_MULTI 4591 2.80 3.49 2.49 83 RCVD_IN_VALIDITY_RPBL 4566 1.12 3.47 0.07 84 T_XMDrugObfuBody_08 4525 2.04 3.44 1.41 85 XM_SPF_SoftFail 4520 2.07 3.43 1.46 86 XM_OfRef6 4194 1.80 3.18 1.17 87 HTML_IMAGE_RATIO_08 4010 2.31 3.04 1.98 88 RCVD_IN_MSPIKE_H3 3830 4.63 2.91 5.40 89 RCVD_IN_MSPIKE_WL 3830 4.63 2.91 5.40 90 XM_B_SpammyWords4 3808 1.37 2.89 0.69 91 XM_B_Unsub2 3780 1.81 2.87 1.33 92 XMDiploma_00 3718 2.01 2.82 1.65 93 RELAYCOUNTRY_AU 3541 1.39 2.69 0.81 94 XM_URI_RBL 3530 1.08 2.68 0.37 95 XM_B_URI_Unicode 3507 2.16 2.66 1.94 96 T_TooManySym_01 3396 5.68 2.58 7.07 97 MAILING_LIST_MULTI 3294 3.10 2.50 3.37 98 TM2_M_URI_OPT_OUT 3261 1.96 2.48 1.72 99 BOUNCE_MESSAGE 3223 3.18 2.45 3.51 100 ANY_BOUNCE_MESSAGE 3223 3.18 2.45 3.51 101 RCVD_IN_VALIDITY_SAFE 3172 3.59 2.41 4.12 102 DKIM_ADSP_NXDOMAIN 3138 0.99 2.38 0.37 103 XMBody_17 3135 1.00 2.38 0.38 104 FROM_EXCESS_BASE64 3066 1.93 2.33 1.76 105 ALL_TRUSTED 3060 11.51 2.32 15.62 106 XM_DIRTYINTL 2946 0.76 2.24 0.09 107 SUBJ_ALL_CAPS 2922 1.86 2.22 1.70 108 SpammyFromTLD_02 2882 0.87 2.19 0.27 109 XMStockSpam_06 2869 1.65 2.18 1.41 110 DIET_1 2752 0.92 2.09 0.39 111 XMBrknScrpt_02 2717 1.39 2.06 1.09 112 TR_XM_INV_DKIM 2709 0.75 2.06 0.16 113 BOTNET_NORDNS 2686 0.64 2.04 0.01 114 HTML_MIME_NO_HTML_TAG 2569 2.63 1.95 2.93 115 USER_IN_DEF_DKIM_WL 2530 9.78 1.92 13.31 116 XM_DK_Undo_01 2456 1.94 1.86 1.98 117 SpammyFromTLD_01 2434 1.14 1.85 0.82 118 URI_HEX 2416 1.41 1.83 1.22 119 BAYES_40 2411 4.62 1.83 5.86 120 RCVD_IN_VALIDITY_CERTIFIED 2384 2.76 1.81 3.18 121 T_XMHurry_00 2384 0.89 1.81 0.48 122 XM_SendGrid 2326 1.64 1.77 1.58 123 XMBounce_01 2310 0.55 1.75 0.01 124 TR_LOTS_OF_MONEY3 2281 0.77 1.73 0.34 125 RCVD_IN_PSBL 2259 0.78 1.72 0.36 126 T_FILL_THIS_FORM_SHORT 2245 1.23 1.70 1.02 127 SHORTCIRCUIT 2244 0.53 1.70 0.00 128 RCVD_IN_ZEN_LASTEXTERNAL 2244 0.53 1.70 0.00 129 XM_H_Undi_Recip 2092 0.69 1.59 0.29 130 XMGenDplmaNmb 2071 1.11 1.57 0.91 131 T_REMOTE_IMAGE 2049 3.12 1.56 3.81 132 TR_Symld_Words 2036 1.67 1.55 1.73 133 KHOP_HELO_FCRDNS 2032 1.55 1.54 1.56 134 T_XMDrugObfuBody_00 2029 1.00 1.54 0.75 135 TR_XM_PHPForged 1930 0.73 1.47 0.39 136 TR_XM_PHPDW 1928 0.72 1.46 0.39 137 BAYES_20 1926 3.36 1.46 4.21 138 RCVD_IN_PBL 1908 1.05 1.45 0.88 139 TR_XM_FormFill2 1898 0.72 1.44 0.40 140 XMPhish30 1882 0.89 1.43 0.64 141 TR_XM_Undi_Recip19 1871 0.51 1.42 0.10 142 XM_H_PHPOS 1866 0.70 1.42 0.38 143 RELAYCOUNTRY_CN 1862 0.50 1.41 0.09 144 URI_TRY_3LD 1821 0.80 1.38 0.54 145 TR_Mismatch_TLD_02 1817 0.51 1.38 0.11 146 DKIM_ADSP_CUSTOM_MED 1751 1.06 1.33 0.94 147 TR_XM_InvalidRelay 1723 0.41 1.31 0.01 148 RCVD_IN_MSPIKE_BL 1718 0.40 1.30 0.00 149 TR_XM_Undi_RecipCombo2 1700 0.41 1.29 0.02 150 XM_B_COPY_HTML 1691 0.79 1.28 0.56 151 XM_B_Phish66 1639 0.61 1.24 0.33 152 RCVD_IN_MSPIKE_ZBI 1602 0.38 1.22 0.00 153 HTTPS_HTTP_MISMATCH 1601 0.91 1.22 0.77 154 TR_XM_Undi_Recip11 1574 0.40 1.20 0.05 155 XM_H_Long_From02 1565 0.97 1.19 0.87 156 URI_NOVOWEL 1550 1.58 1.18 1.77 157 XM_UB60 1538 0.40 1.17 0.05 158 XM_S_SpammyWords 1523 0.58 1.16 0.32 159 TR_XM_Spammywords 1522 0.58 1.16 0.32 160 PLING_QUERY 1484 0.63 1.13 0.41 161 MultiRelay_CC 1471 0.49 1.12 0.21 162 XM_UB99 1465 0.35 1.11 0.00 163 XM_B_DNDMA 1461 0.64 1.11 0.42 164 UNDISC_MONEY 1457 0.34 1.11 0.00 165 XM_B_SEO 1455 0.51 1.10 0.25 166 MISSING_HEADERS 1453 0.68 1.10 0.49 167 TR_XM_Undi_Recip5 1400 0.33 1.06 0.00 168 HTML_TAG_BALANCE_BODY 1399 0.72 1.06 0.57 169 TR_MetaPhish_Combo_01 1394 0.85 1.06 0.76 170 TR_XM_Undi_Recip2 1352 0.33 1.03 0.01 171 TR_XM_Undi_RecipCombo3 1347 0.32 1.02 0.00 172 NML_ADSP_CUSTOM_MED 1341 0.72 1.02 0.58 173 MPART_ALT_DIFF_COUNT 1332 0.67 1.01 0.52 174 TR_XM_SEO4 1332 0.39 1.01 0.12 175 XM_PDF 1328 3.82 1.01 5.08 176 RDNS_DYNAMIC 1327 0.47 1.01 0.23 177 RELAYCOUNTRY_FR 1318 0.50 1.00 0.28 178 T_MONEY_PERCENT 1296 0.47 0.98 0.24 179 TR_LOTS_OF_MONEY2 1296 0.47 0.98 0.24 180 XMReplyNow 1292 0.50 0.98 0.28 181 LongTLD 1288 0.63 0.98 0.48 182 MILLION_USD 1282 0.33 0.97 0.04 183 URG_BIZ 1282 0.35 0.97 0.07 184 XM_HighProb1 1273 0.30 0.97 0.01 185 TR_XM_RelayPhish 1256 0.36 0.95 0.09 186 RELAYCOUNTRY_TH 1251 0.29 0.95 0.00 187 XMSubMetaI_00 1248 0.57 0.95 0.40 188 XM_GoogleGroups 1241 1.25 0.94 1.39 189 XMSubMetaSxObfu_03 1237 0.53 0.94 0.34 190 TM2_M_OBFU_COMMENT 1229 0.55 0.93 0.37 191 RCVD_IN_SORBS_DUL 1201 0.31 0.91 0.04 192 XMSexyCombo_01 1186 0.37 0.90 0.13 193 XMNoVowels 1176 0.91 0.89 0.92 194 TR_XM_Undi_RecipCombo4 1176 0.28 0.89 0.00 195 RCVD_IN_IADB_LISTED 1170 2.63 0.89 3.42 196 XMHTML_After_End 1166 0.56 0.89 0.41 197 ADVANCE_FEE_4_NEW_MONEY 1164 0.29 0.88 0.02 198 SHOPIFY_IMG_NOT_RCVD_SFY 1162 0.43 0.88 0.23 199 TVD_RCVD_IP 1151 0.85 0.87 0.85 200 FORGED_GMAIL_RCVD 1141 0.64 0.87 0.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 254216 88.63 93.55 86.43 2 RELAYCOUNTRY_US 239307 80.61 78.95 81.36 3 DKIM_SIGNED 223581 79.60 87.61 76.01 4 XM_DK_Pass 219320 77.29 83.39 74.56 5 DKIM_VALID 215424 76.12 82.56 73.24 6 XM_B_Unicode 203985 73.39 82.41 69.35 7 DCC_CHECK_NEGATIVE 181155 49.62 22.90 61.59 8 BAYES_50 178936 54.72 41.06 60.83 9 DKIM_VALID_AU 174598 61.41 65.98 59.36 10 XMListUnsubscribeExists 137488 52.69 65.98 46.74 11 XM_B_SpammyWords 130950 52.17 69.25 44.52 12 T_SCC_BODY_TEXT_LINE 123332 41.43 40.32 41.93 13 XM_B_Unicode3 117546 42.64 48.61 39.96 14 DCC_CHECK 112801 49.80 75.37 38.35 15 RCVD_IN_MSPIKE_H2 107177 38.92 44.47 36.44 16 T_TM2_M_HEADER_IN_MSG 94882 29.47 23.24 32.26 17 DKIM_VALID_EF 90652 30.65 30.29 30.82 18 HTML_FONT_LOW_CONTRAST 80236 29.69 35.09 27.28 19 LOC_TINY_FONT_1 79300 33.14 46.95 26.96 20 FVGT_m_MULTI_ODD 77988 27.84 30.81 26.51 21 XMSubLong 69561 24.19 25.38 23.65 22 T_KAM_HTML_FONT_INVALID 62835 24.54 31.63 21.36 23 MIME_HTML_ONLY 61103 23.53 29.70 20.77 24 XM_B_SpammyWords2 53910 25.03 39.99 18.33 25 ALL_TRUSTED 45939 11.51 2.32 15.62 26 USER_IN_DEF_DKIM_WL 39137 9.78 1.92 13.31 27 TR_XM_DK_Unsub 38427 15.27 20.20 13.06 28 UNPARSEABLE_RELAY 37543 14.26 17.62 12.76 29 XM_Multi_Part_URI 37163 14.98 20.21 12.63 30 BAYES_00 33457 8.04 0.58 11.37 31 XM_B_PhoneNumber 31647 9.36 6.23 10.76 32 TooManyTo_001 28251 8.34 5.51 9.60 33 XM_B_Unsub 27406 12.39 19.27 9.32 34 XM_Evil_Numbers_Gen 27255 9.03 8.51 9.27 35 FSL_BULK_SIG 22623 9.32 12.95 7.69 36 TR_XM_DK_Bayes 22027 5.32 0.47 7.49 37 LotsOfNums_01 21792 7.05 6.25 7.41 38 TR_XM_DK_Bayes1 21471 5.18 0.46 7.30 39 XM_DKIMWhitelistDomains 21418 5.04 0.02 7.28 40 IN_ZIMBRA_NJ_WHITELIST 21181 5.01 0.11 7.20 41 T_TooManySym_01 20782 5.68 2.58 7.07 42 TR_XM_BayesUnsub 20521 10.58 18.62 6.98 43 XM_H_GMP 19173 6.22 5.55 6.52 44 BAYES_60 18559 7.22 9.25 6.31 45 LOTS_OF_MONEY 18475 8.55 13.63 6.28 46 TR_XM_DK_Bayes2 18257 4.40 0.37 6.21 47 BAYES_40 17247 4.62 1.83 5.86 48 XM_H_Long_From01 17051 5.70 5.50 5.80 49 RCVD_IN_MSPIKE_WL 15886 4.63 2.91 5.40 50 RCVD_IN_MSPIKE_H3 15878 4.63 2.91 5.40 51 XM_B_Phish_Phrases 15773 6.16 7.95 5.36 52 TR_MAX_INTL_RELAY 15596 8.35 15.16 5.30 53 XM_PDF 14955 3.82 1.01 5.08 54 XM_DK_Undo_02 14726 15.07 37.56 5.01 55 XMStrtUSub 14167 4.93 5.17 4.82 56 XM_UncommonTLD01 12976 4.95 6.15 4.41 57 MIME_QP_LONG_LINE 12915 4.22 3.84 4.39 58 MPART_ALT_DIFF 12635 4.88 6.18 4.30 59 TR_XM_SpammyWords4 12627 6.77 12.32 4.29 60 RELAYCOUNTRY_META 12408 8.78 18.96 4.22 61 XM_B_SpammyWords3 12400 7.71 15.53 4.22 62 BAYES_20 12381 3.36 1.46 4.21 63 RCVD_IN_VALIDITY_SAFE 12119 3.59 2.41 4.12 64 HTML_IMAGE_RATIO_02 11452 4.82 6.90 3.89 65 XMNumbers 11273 4.07 4.61 3.83 66 HTML_IMAGE_RATIO_04 11262 4.14 4.83 3.83 67 T_REMOTE_IMAGE 11217 3.12 1.56 3.81 68 TooManyTo_002 11039 2.82 0.73 3.75 69 BAYES_99 10589 11.39 28.79 3.60 70 T_TooManySym_02 10447 2.67 0.69 3.55 71 ANY_BOUNCE_MESSAGE 10331 3.18 2.45 3.51 72 BOUNCE_MESSAGE 10330 3.18 2.45 3.51 73 RCVD_IN_IADB_LISTED 10048 2.63 0.89 3.42 74 MAILING_LIST_MULTI 9902 3.10 2.50 3.37 75 XMSubMetaSx_00 9807 4.15 5.97 3.33 76 BAYES_80 9437 5.19 9.61 3.21 77 RCVD_IN_VALIDITY_CERTIFIED 9362 2.76 1.81 3.18 78 BOTNET_IPINHOSTNAME 8996 6.22 13.27 3.06 79 RCVD_IN_IADB_SPF 8815 2.32 0.82 3.00 80 HTML_MIME_NO_HTML_TAG 8632 2.63 1.95 2.93 81 XM_B_SpammyTLD 8446 3.32 4.33 2.87 82 DKIM_INVALID 8157 3.47 5.04 2.77 83 BAYES_999 8115 8.73 22.08 2.76 84 RCVD_IN_IADB_SENDERID 7848 2.09 0.78 2.67 85 XM_Body_Dirty_Words 7717 4.25 7.88 2.62 86 RCVD_IN_IADB_DK 7647 2.04 0.80 2.60 87 HTML_IMAGE_RATIO_06 7483 2.84 3.50 2.54 88 BAYES_05 7375 1.91 0.58 2.51 89 MIME_HTML_ONLY_MULTI 7314 2.80 3.49 2.49 90 INVALID_MSGID 7302 1.80 0.28 2.48 91 TR_XM_DKIM_Undo 7007 10.28 27.91 2.38 92 RCVD_IN_IADB_VOUCHED 6946 1.73 0.32 2.36 93 MIME_HTML_MOSTLY 6662 2.86 4.19 2.26 94 TR_XM_SpammyRelay 6380 5.32 12.35 2.17 95 TooManyTo_003 6366 1.69 0.63 2.16 96 TO_MALFORMED 6294 1.48 0.01 2.14 97 BAYES_95 6146 3.03 5.12 2.09 98 HTML_IMAGE_RATIO_08 5825 2.31 3.04 1.98 99 XM_DK_Undo_01 5815 1.94 1.86 1.98 100 XM_CamelCaseFrm001 5764 2.44 3.53 1.96 101 XM_B_URI_Unicode 5707 2.16 2.66 1.94 102 T_XMDrugObfuBody_14 5586 2.65 4.33 1.90 103 URI_NOVOWEL 5197 1.58 1.18 1.77 104 FROM_EXCESS_BASE64 5167 1.93 2.33 1.76 105 TR_Symld_Words 5086 1.67 1.55 1.73 106 TM2_M_URI_OPT_OUT 5069 1.96 2.48 1.72 107 SUBJ_ALL_CAPS 4991 1.86 2.22 1.70 108 RCVD_IN_IADB_OPTIN 4948 1.22 0.18 1.68 109 XMDiploma_00 4856 2.01 2.82 1.65 110 XM_B_Investor 4800 2.37 4.02 1.63 111 TR_XM_PhishingBody 4698 2.42 4.27 1.60 112 TooManyTo_004 4680 1.27 0.55 1.59 113 XM_SendGrid 4650 1.64 1.77 1.58 114 UNTRUSTED_Relay 4583 3.64 8.30 1.56 115 KHOP_HELO_FCRDNS 4583 1.55 1.54 1.56 116 HELO_NODOT 4471 1.22 0.55 1.52 117 HELO_NO_DOMAIN 4466 1.22 0.54 1.52 118 TR_XM_UnparsRelay 4405 3.85 9.12 1.50 119 XMCapTrack 4380 1.20 0.57 1.49 120 T_TooManySym_03 4323 1.08 0.20 1.47 121 XM_SPF_SoftFail 4302 2.07 3.43 1.46 122 BOTNET 4203 4.61 11.71 1.43 123 TR_DCC_Bayes_99 4170 7.32 20.49 1.42 124 T_XMDrugObfuBody_08 4151 2.04 3.44 1.41 125 XMStockSpam_06 4146 1.65 2.18 1.41 126 XM_GoogleGroups 4103 1.25 0.94 1.39 127 XMSexyCombo_05 4060 2.12 3.76 1.38 128 IN_HORDE_ADDRESS_BOOK 4028 0.97 0.08 1.37 129 TM2_M_VERY_LONG_WORD 4011 2.05 3.58 1.36 130 XM_B_Unsub2 3920 1.81 2.87 1.33 131 TooManyTo_005 3918 1.08 0.50 1.33 132 TR_XM_SpammyWords5 3881 2.18 4.11 1.32 133 URI_HEX 3592 1.41 1.83 1.22 134 XM_OfRef6 3455 1.80 3.18 1.17 135 XMGappySubj_01 3315 0.99 0.69 1.13 136 TVD_SPACE_RATIO 3270 0.83 0.19 1.11 137 XMBrknScrpt_02 3213 1.39 2.06 1.09 138 TR_XM_DK_SendGrid 3074 0.98 0.84 1.05 139 T_FILL_THIS_FORM_SHORT 3010 1.23 1.70 1.02 140 XM_ShortIntro_01 2954 0.85 0.50 1.00 141 XM_UB50 2927 2.06 4.44 1.00 142 HTML_IMAGE_ONLY_32 2804 0.89 0.74 0.95 143 RELAYCOUNTRY_CA 2773 2.85 7.10 0.94 144 DKIM_ADSP_CUSTOM_MED 2772 1.06 1.33 0.94 145 XMNoVowels 2718 0.91 0.89 0.92 146 XMGenDplmaNmb 2666 1.11 1.57 0.91 147 RCVD_IN_PBL 2579 1.05 1.45 0.88 148 XM_H_Long_From02 2570 0.97 1.19 0.87 149 XMBdyGiftCard01 2526 0.85 0.83 0.86 150 TVD_RCVD_IP 2490 0.85 0.87 0.85 151 SpammyFromTLD_01 2425 1.14 1.85 0.82 152 RELAYCOUNTRY_AU 2376 1.39 2.69 0.81 153 HTTPS_HTTP_MISMATCH 2276 0.91 1.22 0.77 154 XM_H_PHPMailer 2271 0.77 0.77 0.77 155 TR_MetaPhish_Combo_01 2230 0.85 1.06 0.76 156 T_XMDrugObfuBody_00 2212 1.00 1.54 0.75 157 T_OBFU_PDF_ATTACH 2153 0.59 0.27 0.73 158 XM_B_FormFill 2111 0.50 0.03 0.72 159 XMGappySubj_02 2061 0.51 0.10 0.70 160 XM_B_SpammyWords4 2019 1.37 2.89 0.69 161 T_Symld_Words_02 1990 0.72 0.83 0.68 162 HTML_IMAGE_ONLY_20 1963 0.73 0.86 0.67 163 FROM_GOV_DKIM_AU 1945 0.50 0.13 0.66 164 XMSlimDrugH 1897 0.69 0.80 0.64 165 XMPhish30 1890 0.89 1.43 0.64 166 TO_NO_BRKTS_HTML_ONLY 1889 0.61 0.54 0.64 167 MSGID_FROM_MTA_HEADER 1885 0.48 0.13 0.64 168 TR_XM_Base64_M1 1795 0.66 0.77 0.61 169 NML_ADSP_CUSTOM_MED 1707 0.72 1.02 0.58 170 HTML_TAG_BALANCE_BODY 1682 0.72 1.06 0.57 171 XM_B_COPY_HTML 1657 0.79 1.28 0.56 172 RELAYCOUNTRY_GB 1645 0.65 0.85 0.56 173 XMBSHREFv2 1633 0.51 0.42 0.56 174 RCVD_IN_BL_SPAMCOP_NET 1629 2.73 7.60 0.55 175 URI_TRY_3LD 1590 0.80 1.38 0.54 176 TR_XM_SpammyWords2 1578 3.62 10.52 0.54 177 XMLngstWrd_00 1571 0.51 0.47 0.53 178 FORGED_GMAIL_RCVD 1564 0.64 0.87 0.53 179 MPART_ALT_DIFF_COUNT 1527 0.67 1.01 0.52 180 T_TVD_MIME_NO_HEADERS 1496 0.36 0.04 0.51 181 MISSING_HEADERS 1449 0.68 1.10 0.49 182 XMDateMe_00 1443 0.48 0.45 0.49 183 TRACKER_ID 1434 0.39 0.17 0.49 184 T_TooManySym_04 1433 0.35 0.05 0.49 185 HTML_FONT_FACE_BAD 1415 0.56 0.74 0.48 186 LongTLD 1411 0.63 0.98 0.48 187 T_XMHurry_00 1399 0.89 1.81 0.48 188 XMLngstWrd_01 1386 0.45 0.41 0.47 189 T_STY_INVIS_DIRECT 1358 0.52 0.65 0.46 190 SHORT_HELO_AND_INLINE_IMAGE 1352 0.33 0.03 0.46 191 XMMoneyMeta_00 1344 0.48 0.52 0.46 192 TM2_M_BODY_EMPTY 1286 0.33 0.08 0.44 193 XM_ProductURIs 1285 0.56 0.82 0.44 194 XMBody_95 1277 0.34 0.14 0.43 195 XM_B_DNDMA 1249 0.64 1.11 0.42 196 FILL_THIS_FORM 1229 0.38 0.29 0.42 197 PLING_QUERY 1213 0.63 1.13 0.41 198 XMHTML_After_End 1213 0.56 0.89 0.41 199 SUBJ_DOLLARS 1189 0.40 0.39 0.40 200 XMSubMetaI_00 1186 0.57 0.95 0.40 ----------------------------------------------------------------------