Email: 424263 Autolearn: 0 AvgScore: 5.22 AvgScanTime: 1.36 sec Spam: 132064 Autolearn: 0 AvgScore: 14.82 AvgScanTime: 1.52 sec Ham: 292199 Autolearn: 0 AvgScore: 0.88 AvgScanTime: 1.29 sec Time Spent Running SA: 160.17 hours Time Spent Processing Spam: 55.76 hours Time Spent Processing Ham: 104.41 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124570 89.23 94.33 86.93 2 DKIM_SIGNED 116534 80.30 88.24 76.71 3 XM_B_Unicode 111994 74.55 84.80 69.92 4 XM_DK_Pass 111422 78.20 84.37 75.41 5 DKIM_VALID 110338 77.09 83.55 74.17 6 RELAYCOUNTRY_US 105476 80.92 79.87 81.39 7 DCC_CHECK 95346 46.49 72.20 34.87 8 XM_B_SpammyWords 91348 52.03 69.17 44.28 9 DKIM_VALID_AU 87864 62.92 66.53 61.29 10 XMListUnsubscribeExists 86550 53.40 65.54 47.91 11 XM_B_Unicode3 65469 43.28 49.57 40.44 12 LOC_TINY_FONT_1 64437 35.12 48.79 28.94 13 XM_DK_Undo_02 54844 16.23 41.53 4.80 14 XM_B_SpammyWords2 53606 25.53 40.59 18.72 15 BAYES_50 49955 53.60 37.83 60.72 16 HTML_FONT_LOW_CONTRAST 48415 30.10 36.66 27.14 17 FVGT_m_MULTI_ODD 43861 27.92 33.21 25.53 18 BAYES_99 43507 12.76 32.94 3.64 19 T_KAM_HTML_FONT_INVALID 40556 24.48 30.71 21.66 20 DKIM_VALID_EF 39953 31.71 30.25 32.36 21 TR_XM_DKIM_Undo 39161 10.49 29.65 1.82 22 MIME_HTML_ONLY 35966 22.21 27.23 19.94 23 DCC_CHECK_NEGATIVE 34423 52.92 26.07 65.05 24 BAYES_999 33324 9.71 25.23 2.69 25 XMSubLong 30383 23.85 23.01 24.23 26 TR_DCC_Bayes_99 29774 7.94 22.55 1.34 27 T_TM2_M_HEADER_IN_MSG 29114 28.88 22.05 31.96 28 TR_XM_DK_Unsub 28605 16.45 21.66 14.09 29 XM_B_Unsub 28593 12.75 21.65 8.72 30 XM_Multi_Part_URI 27996 16.36 21.20 14.18 31 TR_XM_BayesUnsub 27860 11.17 21.10 6.69 32 RCVD_IN_MSPIKE_H2 25796 17.47 19.53 16.54 33 RELAYCOUNTRY_META 23811 8.19 18.03 3.75 34 UNPARSEABLE_RELAY 22683 14.30 17.18 13.00 35 TR_MAX_INTL_RELAY 21445 9.35 16.24 6.23 36 XM_B_SpammyWords3 18645 8.00 14.12 5.23 37 LOTS_OF_MONEY 18130 8.12 13.73 5.59 38 TR_XM_SpammyRelay 17512 5.42 13.26 1.88 39 TR_XM_SpammyWords4 16170 6.22 12.24 3.50 40 TR_XM_SpammyWords2 15707 4.03 11.89 0.47 41 BOTNET_IPINHOSTNAME 15370 5.75 11.64 3.09 42 RCVD_IN_MSPIKE_WL 14912 17.20 11.29 19.87 43 XM_Evil_Numbers_Gen 14350 9.11 10.87 8.31 44 BOTNET 13397 3.88 10.14 1.06 45 BAYES_80 12686 5.64 9.61 3.84 46 RCVD_IN_BL_SPAMCOP_NET 12626 3.38 9.56 0.59 47 FSL_BULK_SIG 12308 5.84 9.32 4.26 48 XM_B_Phish_Phrases 11294 6.14 8.55 5.05 49 TR_XM_UnparsRelay 11105 3.70 8.41 1.57 50 BAYES_60 10424 7.36 7.89 7.12 51 UNTRUSTED_Relay 10167 3.57 7.70 1.71 52 RCVD_IN_MSPIKE_BL 9945 3.00 7.53 0.96 53 TR_XM_MSPIKECOMBO 9928 3.00 7.52 0.96 54 XMSubMetaSx_00 9275 4.63 7.02 3.55 55 MPART_ALT_DIFF 8989 4.95 6.81 4.11 56 XM_B_PhoneNumber 8843 9.05 6.70 10.12 57 BAYES_95 8269 3.59 6.26 2.39 58 XM_Body_Dirty_Words 8240 3.59 6.24 2.39 59 HTML_IMAGE_RATIO_02 8002 5.27 6.06 4.91 60 RELAYCOUNTRY_CA 7825 2.33 5.93 0.70 61 TR_XM_SpammyWords3 7690 2.13 5.82 0.46 62 HTML_IMAGE_RATIO_04 7668 4.51 5.81 3.92 63 LotsOfNums_01 7567 7.12 5.73 7.75 64 XM_UncommonTLD01 7528 4.73 5.70 4.29 65 XM_H_Long_From01 7331 5.43 5.55 5.38 66 RCVD_IN_MSPIKE_H3 7220 7.89 5.47 8.99 67 TR_XM_SPAMCOP 7111 1.80 5.38 0.18 68 T_XMDrugObfuBody_14 7051 2.84 5.34 1.71 69 TooManyTo_001 7012 7.46 5.31 8.43 70 XM_H_GMP 6798 5.73 5.15 5.99 71 XM_B_Investor 6690 2.59 5.07 1.48 72 TR_XM_SpammyWords5 6545 2.58 4.96 1.51 73 RCVD_IN_MSPIKE_L3 6544 2.09 4.96 0.79 74 XMNumbers 6331 3.94 4.79 3.55 75 MIME_HTML_MOSTLY 6270 2.86 4.75 2.01 76 DKIM_INVALID 6196 3.20 4.69 2.53 77 XMStrtUSub 6009 4.91 4.55 5.08 78 TR_XM_PhishingBody 5938 2.43 4.50 1.50 79 XM_B_SpammyTLD 5834 3.26 4.42 2.74 80 TR_XM_NoHeaderRelay 5602 1.47 4.24 0.22 81 MIME_QP_LONG_LINE 5339 4.82 4.04 5.17 82 XM_B_Unsub2 5022 2.17 3.80 1.43 83 TM2_M_VERY_LONG_WORD 4874 2.04 3.69 1.30 84 T_XMDrugObfuBody_08 4870 2.27 3.69 1.63 85 XMSexyCombo_05 4828 1.86 3.66 1.05 86 XMStockSpam_06 4448 1.59 3.37 0.78 87 USER_IN_DEF_DKIM_WL 4207 9.66 3.19 12.59 88 RCVD_IN_MSPIKE_H5 4185 5.60 3.17 6.70 89 XM_OfRef6 4058 1.53 3.07 0.83 90 XM_SPF_SoftFail 3891 1.85 2.95 1.35 91 XM_CamelCaseFrm001 3840 2.14 2.91 1.79 92 XM_UB50 3761 1.69 2.85 1.16 93 RELAYCOUNTRY_AU 3709 1.23 2.81 0.52 94 T_TooManySym_01 3664 5.56 2.77 6.82 95 XM_URI_RBL 3662 1.12 2.77 0.38 96 MIME_HTML_ONLY_MULTI 3630 2.53 2.75 2.43 97 HTML_IMAGE_RATIO_06 3590 3.01 2.72 3.14 98 TR_XM_MSPIKECOMBO2 3545 0.91 2.68 0.11 99 T_XMHurry_00 3536 1.30 2.68 0.68 100 RCVD_IN_MSPIKE_H4 3507 3.71 2.66 4.18 101 HTML_IMAGE_RATIO_08 3413 2.59 2.58 2.59 102 XMDiploma_00 3408 2.08 2.58 1.85 103 ALL_TRUSTED 3359 11.40 2.54 15.41 104 TR_XM_INV_DKIM 3164 0.76 2.40 0.02 105 XM_B_URI_Unicode 3132 2.04 2.37 1.89 106 TM2_M_URI_OPT_OUT 3088 1.93 2.34 1.74 107 XMBody_17 3049 0.95 2.31 0.34 108 T_FILL_THIS_FORM_SHORT 2985 1.33 2.26 0.90 109 XM_B_SpammyWords4 2975 1.20 2.25 0.73 110 SUBJ_ALL_CAPS 2808 1.73 2.13 1.55 111 XMSexyCombo_01 2753 0.75 2.08 0.15 112 SpammyFromTLD_02 2745 0.85 2.08 0.30 113 DIET_1 2743 0.99 2.08 0.50 114 MAILING_LIST_MULTI 2700 3.12 2.04 3.60 115 DKIM_ADSP_NXDOMAIN 2680 0.85 2.03 0.32 116 BOUNCE_MESSAGE 2615 3.73 1.98 4.53 117 ANY_BOUNCE_MESSAGE 2615 3.73 1.98 4.53 118 TR_XM_MaxSPIKE 2606 0.65 1.97 0.05 119 TR_XM_INTL_Spamhaus 2547 0.75 1.93 0.22 120 XM_B_Phish66 2457 0.82 1.86 0.35 121 XMBrknScrpt_02 2452 1.36 1.86 1.13 122 RCVD_IN_MSPIKE_L4 2404 0.67 1.82 0.15 123 RCVD_IN_IADB_LISTED 2395 2.57 1.81 2.92 124 XM_B_SEO 2375 0.83 1.80 0.39 125 TR_LOTS_OF_MONEY3 2353 0.79 1.78 0.34 126 FROM_EXCESS_BASE64 2308 1.79 1.75 1.81 127 XMPhish30 2307 0.87 1.75 0.48 128 XMSubMetaSxObfu_03 2249 0.78 1.70 0.37 129 RCVD_IN_ZEN_LASTEXTERNAL 2242 0.53 1.70 0.00 130 SHORTCIRCUIT 2242 0.53 1.70 0.00 131 URI_TRY_3LD 2238 0.93 1.69 0.59 132 URI_HEX 2214 1.38 1.68 1.25 133 XMGenDplmaNmb 2212 1.33 1.67 1.17 134 TR_XM_SEO4 2181 0.72 1.65 0.29 135 BAYES_40 2147 4.24 1.63 5.42 136 SpammyFromTLD_01 2146 1.00 1.62 0.71 137 HTML_MIME_NO_HTML_TAG 2122 2.44 1.61 2.82 138 RELAYCOUNTRY_FR 2111 0.77 1.60 0.39 139 URI_NOVOWEL 2100 1.49 1.59 1.44 140 T_REMOTE_IMAGE 2042 3.09 1.55 3.79 141 XM_UB99 2033 0.48 1.54 0.00 142 HTML_FONT_TINY_NORDNS 2028 0.54 1.54 0.09 143 RCVD_IN_VALIDITY_SAFE 2020 3.34 1.53 4.15 144 RCVD_IN_IADB_SPF 1986 2.27 1.50 2.62 145 RCVD_IN_PSBL 1958 0.48 1.48 0.03 146 RCVD_IN_PBL 1902 0.99 1.44 0.79 147 XM_SendGrid 1879 1.59 1.42 1.66 148 RCVD_IN_VALIDITY_RPBL 1877 0.47 1.42 0.05 149 XM_H_Long_From02 1863 0.92 1.41 0.70 150 RELAYCOUNTRY_ID 1837 0.43 1.39 0.00 151 XMBounce_01 1830 0.45 1.39 0.02 152 RCVD_IN_XBL 1825 0.45 1.38 0.03 153 KHOP_HELO_FCRDNS 1807 1.71 1.37 1.86 154 MY_SERVERS_FOUND 1803 0.56 1.37 0.19 155 RCVD_IN_IADB_DK 1790 1.97 1.36 2.24 156 T_XMDrugObfuBody_00 1776 0.99 1.34 0.82 157 XM_DK_Undo_01 1749 1.63 1.32 1.77 158 RCVD_IN_IADB_SENDERID 1745 2.03 1.32 2.35 159 HTTPS_HTTP_MISMATCH 1639 0.86 1.24 0.69 160 XMBody_78 1601 0.59 1.21 0.31 161 RCVD_IN_SBL_CSS 1566 0.40 1.19 0.04 162 BOTNET_NORDNS 1547 0.37 1.17 0.01 163 RCVD_IN_IADB_VOUCHED 1545 1.67 1.17 1.90 164 XM_UB80 1537 0.38 1.16 0.03 165 XMSlimDrugH 1535 0.79 1.16 0.62 166 BAYES_20 1510 3.11 1.14 3.99 167 XM_UB60 1494 0.44 1.13 0.13 168 T_Symld_Words_02 1487 0.80 1.13 0.65 169 RDNS_DYNAMIC 1485 0.46 1.12 0.15 170 MPART_ALT_DIFF_COUNT 1472 0.72 1.11 0.55 171 XM_B_COPY_HTML 1472 0.74 1.11 0.58 172 TR_Mismatch_TLD_02 1459 0.42 1.10 0.12 173 MultiRelay_CC 1420 0.45 1.08 0.17 174 DKIM_ADSP_CUSTOM_MED 1392 0.95 1.05 0.91 175 TR_XM_RelayPhish 1368 0.40 1.04 0.11 176 STY_INVIS_DIRECT 1350 0.52 1.02 0.29 177 TM2_M_A_HREF_HREF 1332 0.52 1.01 0.30 178 RCVD_IN_VALIDITY_CERTIFIED 1309 2.73 0.99 3.52 179 XM_PDF 1309 3.73 0.99 4.97 180 XM_HighProb1 1291 0.31 0.98 0.00 181 TR_Symld_Words 1291 1.53 0.98 1.77 182 TVD_RCVD_IP 1285 0.99 0.97 0.99 183 XM_ProductURIs 1237 0.63 0.94 0.50 184 XM_UB999 1235 0.29 0.94 0.00 185 XM_DIRTYINTL 1231 0.34 0.93 0.08 186 XMReplyNow 1231 0.49 0.93 0.29 187 TR_XM_PHPForged 1217 0.49 0.92 0.30 188 THIS_AD 1209 0.43 0.92 0.21 189 TR_XM_DK_SendGrid 1205 1.10 0.91 1.18 190 TR_Mismatch_TLD_01 1180 0.47 0.89 0.28 191 TR_XM_FormFill2 1166 0.46 0.88 0.27 192 RELAYCOUNTRY_GB 1165 0.81 0.88 0.78 193 TR_XM_PHPDW 1157 0.46 0.88 0.28 194 NO_DNS_FOR_FROM 1156 0.44 0.88 0.24 195 TR_XM_InvalidRelay 1152 0.28 0.87 0.01 196 XM_H_PHPOS 1150 0.45 0.87 0.27 197 XM_B_DynamicLink 1146 0.29 0.87 0.03 198 SHOPIFY_IMG_NOT_RCVD_SFY 1145 0.43 0.87 0.23 199 XM_B_COVIDMETA 1144 0.34 0.87 0.10 200 NML_ADSP_CUSTOM_MED 1143 0.66 0.87 0.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 253998 89.23 94.33 86.93 2 RELAYCOUNTRY_US 237833 80.92 79.87 81.39 3 DKIM_SIGNED 224136 80.30 88.24 76.71 4 XM_DK_Pass 220355 78.20 84.37 75.41 5 DKIM_VALID 216736 77.09 83.55 74.17 6 XM_B_Unicode 204306 74.55 84.80 69.92 7 DCC_CHECK_NEGATIVE 190080 52.92 26.07 65.05 8 DKIM_VALID_AU 179097 62.92 66.53 61.29 9 BAYES_50 177433 53.60 37.83 60.72 10 XMListUnsubscribeExists 139991 53.40 65.54 47.91 11 XM_B_SpammyWords 129398 52.03 69.17 44.28 12 XM_B_Unicode3 118161 43.28 49.57 40.44 13 DCC_CHECK 101883 46.49 72.20 34.87 14 DKIM_VALID_EF 94570 31.71 30.25 32.36 15 T_TM2_M_HEADER_IN_MSG 93398 28.88 22.05 31.96 16 LOC_TINY_FONT_1 84563 35.12 48.79 28.94 17 HTML_FONT_LOW_CONTRAST 79291 30.10 36.66 27.14 18 FVGT_m_MULTI_ODD 74596 27.92 33.21 25.53 19 XMSubLong 70808 23.85 23.01 24.23 20 T_KAM_HTML_FONT_INVALID 63290 24.48 30.71 21.66 21 MIME_HTML_ONLY 58255 22.21 27.23 19.94 22 RCVD_IN_MSPIKE_WL 58074 17.20 11.29 19.87 23 XM_B_SpammyWords2 54701 25.53 40.59 18.72 24 RCVD_IN_MSPIKE_H2 48325 17.47 19.53 16.54 25 ALL_TRUSTED 45026 11.40 2.54 15.41 26 XM_Multi_Part_URI 41434 16.36 21.20 14.18 27 TR_XM_DK_Unsub 41176 16.45 21.66 14.09 28 UNPARSEABLE_RELAY 37989 14.30 17.18 13.00 29 USER_IN_DEF_DKIM_WL 36793 9.66 3.19 12.59 30 BAYES_00 30722 7.40 0.51 10.51 31 XM_B_PhoneNumber 29566 9.05 6.70 10.12 32 RCVD_IN_MSPIKE_H3 26270 7.89 5.47 8.99 33 XM_B_Unsub 25485 12.75 21.65 8.72 34 TooManyTo_001 24621 7.46 5.31 8.43 35 XM_Evil_Numbers_Gen 24293 9.11 10.87 8.31 36 LotsOfNums_01 22635 7.12 5.73 7.75 37 TR_XM_DK_Bayes 22115 5.32 0.36 7.57 38 TR_XM_DK_Bayes1 21777 5.24 0.35 7.45 39 BAYES_60 20796 7.36 7.89 7.12 40 T_TooManySym_01 19938 5.56 2.77 6.82 41 RCVD_IN_MSPIKE_H5 19591 5.60 3.17 6.70 42 TR_XM_BayesUnsub 19550 11.17 21.10 6.69 43 TR_XM_DK_Bayes2 18752 4.51 0.29 6.42 44 TR_MAX_INTL_RELAY 18212 9.35 16.24 6.23 45 XM_DKIMWhitelistDomains 18118 4.29 0.06 6.20 46 XM_H_GMP 17499 5.73 5.15 5.99 47 LOTS_OF_MONEY 16330 8.12 13.73 5.59 48 BAYES_40 15840 4.24 1.63 5.42 49 XM_H_Long_From01 15717 5.43 5.55 5.38 50 XM_B_SpammyWords3 15284 8.00 14.12 5.23 51 MIME_QP_LONG_LINE 15110 4.82 4.04 5.17 52 XMStrtUSub 14831 4.91 4.55 5.08 53 XM_B_Phish_Phrases 14767 6.14 8.55 5.05 54 XM_PDF 14525 3.73 0.99 4.97 55 HTML_IMAGE_RATIO_02 14349 5.27 6.06 4.91 56 XM_DK_Undo_02 14030 16.23 41.53 4.80 57 ANY_BOUNCE_MESSAGE 13224 3.73 1.98 4.53 58 BOUNCE_MESSAGE 13223 3.73 1.98 4.53 59 XM_UncommonTLD01 12547 4.73 5.70 4.29 60 FSL_BULK_SIG 12461 5.84 9.32 4.26 61 RCVD_IN_MSPIKE_H4 12213 3.71 2.66 4.18 62 RCVD_IN_VALIDITY_SAFE 12139 3.34 1.53 4.15 63 MPART_ALT_DIFF 12011 4.95 6.81 4.11 64 BAYES_20 11664 3.11 1.14 3.99 65 HTML_IMAGE_RATIO_04 11451 4.51 5.81 3.92 66 BAYES_80 11232 5.64 9.61 3.84 67 T_REMOTE_IMAGE 11070 3.09 1.55 3.79 68 RELAYCOUNTRY_META 10947 8.19 18.03 3.75 69 BAYES_99 10630 12.76 32.94 3.64 70 MAILING_LIST_MULTI 10524 3.12 2.04 3.60 71 T_TooManySym_02 10387 2.69 0.78 3.55 72 XMNumbers 10386 3.94 4.79 3.55 73 XMSubMetaSx_00 10382 4.63 7.02 3.55 74 RCVD_IN_VALIDITY_CERTIFIED 10284 2.73 0.99 3.52 75 TR_XM_SpammyWords4 10222 6.22 12.24 3.50 76 HTML_IMAGE_RATIO_06 9177 3.01 2.72 3.14 77 BOTNET_IPINHOSTNAME 9041 5.75 11.64 3.09 78 RCVD_IN_IADB_LISTED 8528 2.57 1.81 2.92 79 HTML_MIME_NO_HTML_TAG 8237 2.44 1.61 2.82 80 TooManyTo_002 8044 2.14 0.78 2.75 81 XM_B_SpammyTLD 7997 3.26 4.42 2.74 82 BAYES_999 7870 9.71 25.23 2.69 83 RCVD_IN_IADB_SPF 7651 2.27 1.50 2.62 84 HTML_IMAGE_RATIO_08 7572 2.59 2.58 2.59 85 DKIM_INVALID 7400 3.20 4.69 2.53 86 MIME_HTML_ONLY_MULTI 7111 2.53 2.75 2.43 87 INVALID_MSGID 7047 1.80 0.43 2.41 88 XM_Body_Dirty_Words 6998 3.59 6.24 2.39 89 BAYES_95 6977 3.59 6.26 2.39 90 BAYES_05 6904 1.78 0.49 2.36 91 RCVD_IN_IADB_SENDERID 6855 2.03 1.32 2.35 92 RCVD_IN_IADB_DK 6554 1.97 1.36 2.24 93 TO_MALFORMED 6443 1.53 0.03 2.21 94 MSGID_NOFQDN1 6312 1.57 0.26 2.16 95 MIME_HTML_MOSTLY 5880 2.86 4.75 2.01 96 RCVD_IN_IADB_VOUCHED 5546 1.67 1.17 1.90 97 XM_B_URI_Unicode 5526 2.04 2.37 1.89 98 TR_XM_SpammyRelay 5500 5.42 13.26 1.88 99 KHOP_HELO_FCRDNS 5448 1.71 1.37 1.86 100 XMDiploma_00 5418 2.08 2.58 1.85 101 TooManyTo_003 5350 1.44 0.57 1.83 102 TR_XM_DKIM_Undo 5325 10.49 29.65 1.82 103 FROM_EXCESS_BASE64 5277 1.79 1.75 1.81 104 XM_CamelCaseFrm001 5221 2.14 2.91 1.79 105 TR_Symld_Words 5184 1.53 0.98 1.77 106 XM_DK_Undo_01 5170 1.63 1.32 1.77 107 TM2_M_URI_OPT_OUT 5087 1.93 2.34 1.74 108 T_XMDrugObfuBody_14 5003 2.84 5.34 1.71 109 UNTRUSTED_Relay 5000 3.57 7.70 1.71 110 XM_SendGrid 4856 1.59 1.42 1.66 111 T_XMDrugObfuBody_08 4760 2.27 3.69 1.63 112 TR_XM_UnparsRelay 4592 3.70 8.41 1.57 113 SUBJ_ALL_CAPS 4543 1.73 2.13 1.55 114 TR_XM_SpammyWords5 4402 2.58 4.96 1.51 115 IN_HORDE_ADDRESS_BOOK 4393 1.06 0.07 1.50 116 TR_XM_PhishingBody 4381 2.43 4.50 1.50 117 XM_B_Investor 4318 2.59 5.07 1.48 118 URI_NOVOWEL 4219 1.49 1.59 1.44 119 XM_B_Unsub2 4193 2.17 3.80 1.43 120 RCVD_IN_IADB_OPTIN 4121 1.22 0.79 1.41 121 HELO_NODOT 4099 1.04 0.22 1.40 122 HELO_NO_DOMAIN 4092 1.03 0.21 1.40 123 XM_GoogleGroups 4074 1.20 0.78 1.39 124 TooManyTo_004 4042 1.11 0.51 1.38 125 T_TooManySym_03 4009 1.01 0.22 1.37 126 T_TVD_MIME_NO_HEADERS 3972 0.95 0.06 1.36 127 XM_SPF_SoftFail 3949 1.85 2.95 1.35 128 TR_DCC_Bayes_99 3912 7.94 22.55 1.34 129 TM2_M_VERY_LONG_WORD 3786 2.04 3.69 1.30 130 XMCapTrack 3708 1.02 0.46 1.27 131 URI_HEX 3653 1.38 1.68 1.25 132 TR_XM_DK_SendGrid 3442 1.10 0.91 1.18 133 XMGenDplmaNmb 3419 1.33 1.67 1.17 134 XM_UB50 3396 1.69 2.85 1.16 135 XMBrknScrpt_02 3303 1.36 1.86 1.13 136 TooManyTo_005 3245 0.91 0.46 1.11 137 XMGappySubj_01 3160 0.84 0.32 1.08 138 XMNoVowels 3138 0.90 0.51 1.07 139 XM_ShortIntro_01 3088 0.91 0.60 1.06 140 BOTNET 3085 3.88 10.14 1.06 141 XMSexyCombo_05 3057 1.86 3.66 1.05 142 TVD_SPACE_RATIO 3006 0.77 0.21 1.03 143 TVD_RCVD_IP 2894 0.99 0.97 0.99 144 RCVD_IN_MSPIKE_BL 2799 3.00 7.53 0.96 145 TR_XM_MSPIKECOMBO 2795 3.00 7.52 0.96 146 DKIM_ADSP_CUSTOM_MED 2650 0.95 1.05 0.91 147 T_FILL_THIS_FORM_SHORT 2641 1.33 2.26 0.90 148 XM_H_PHPMailer 2640 0.77 0.46 0.90 149 XMSubMetaI_00 2514 0.85 0.83 0.86 150 XM_OfRef6 2428 1.53 3.07 0.83 151 T_XMDrugObfuBody_00 2403 0.99 1.34 0.82 152 TR_MetaPhish_Combo_01 2362 0.79 0.76 0.81 153 RCVD_IN_PBL 2317 0.99 1.44 0.79 154 RCVD_IN_MSPIKE_L3 2304 2.09 4.96 0.79 155 XMStockSpam_06 2281 1.59 3.37 0.78 156 TR_XM_Base64_M1 2278 0.76 0.72 0.78 157 RELAYCOUNTRY_GB 2267 0.81 0.88 0.78 158 T_OBFU_PDF_ATTACH 2214 0.62 0.31 0.76 159 XM_B_SpammyWords4 2133 1.20 2.25 0.73 160 TO_NO_BRKTS_HTML_ONLY 2123 0.55 0.16 0.73 161 HTML_IMAGE_ONLY_20 2118 0.73 0.76 0.72 162 SpammyFromTLD_01 2089 1.00 1.62 0.71 163 XMBSHREFv2 2085 0.64 0.46 0.71 164 RELAYCOUNTRY_CA 2060 2.33 5.93 0.70 165 XMBdyGiftCard01 2044 0.73 0.81 0.70 166 XM_H_Long_From02 2032 0.92 1.41 0.70 167 HTTPS_HTTP_MISMATCH 2011 0.86 1.24 0.69 168 T_XMHurry_00 1997 1.30 2.68 0.68 169 T_Symld_Words_02 1911 0.80 1.13 0.65 170 FROM_GOV_DKIM_AU 1876 0.48 0.11 0.64 171 XMLngstWrd_00 1863 0.57 0.43 0.64 172 XMSlimDrugH 1804 0.79 1.16 0.62 173 MSGID_FROM_MTA_HEADER 1740 0.55 0.44 0.60 174 RCVD_IN_BL_SPAMCOP_NET 1722 3.38 9.56 0.59 175 URI_TRY_3LD 1721 0.93 1.69 0.59 176 XMSolicitRefs_0 1703 0.60 0.65 0.58 177 XMGappySubj_02 1691 0.43 0.10 0.58 178 XM_B_COPY_HTML 1686 0.74 1.11 0.58 179 NML_ADSP_CUSTOM_MED 1677 0.66 0.87 0.57 180 XMBody_95 1652 0.44 0.15 0.57 181 FORGED_GMAIL_RCVD 1617 0.62 0.77 0.55 182 HTML_TAG_BALANCE_BODY 1615 0.63 0.80 0.55 183 XMLngstWrd_01 1610 0.50 0.40 0.55 184 MPART_ALT_DIFF_COUNT 1594 0.72 1.11 0.55 185 HTML_IMAGE_ONLY_32 1536 0.43 0.22 0.53 186 XM_B_DNDMA 1515 0.59 0.74 0.52 187 RELAYCOUNTRY_AU 1515 1.23 2.81 0.52 188 DIET_1 1464 0.99 2.08 0.50 189 XM_ProductURIs 1451 0.63 0.94 0.50 190 LONGLN_LOW_CONTRAST 1446 0.49 0.48 0.49 191 LongTLD 1411 0.53 0.65 0.48 192 XMPhish30 1398 0.87 1.75 0.48 193 TR_XM_SpammyWords2 1379 4.03 11.89 0.47 194 XMDateMe_00 1362 0.48 0.52 0.47 195 TR_XM_SpammyWords3 1343 2.13 5.82 0.46 196 XMPhish14 1335 0.53 0.69 0.46 197 XMHTML_After_End 1303 0.57 0.86 0.45 198 XMClaimOffer 1301 0.44 0.42 0.45 199 TR_XM_GMP_MSPIKE_UNDO2 1282 0.36 0.20 0.44 200 XMSubMetaSxObfu_02 1262 0.39 0.31 0.43 ----------------------------------------------------------------------