Email: 466407 Autolearn: 0 AvgScore: 2.42 AvgScanTime: 1.45 sec Spam: 139431 Autolearn: 0 AvgScore: 14.11 AvgScanTime: 1.66 sec Ham: 326976 Autolearn: 0 AvgScore: -2.57 AvgScanTime: 1.36 sec Time Spent Running SA: 187.81 hours Time Spent Processing Spam: 64.41 hours Time Spent Processing Ham: 123.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134539 88.74 96.49 85.43 2 DKIM_SIGNED 127880 72.80 91.72 64.73 3 XM_DK_Pass 123412 71.12 88.51 63.71 4 DKIM_VALID 122172 70.31 87.62 62.93 5 RELAYCOUNTRY_US 119018 83.34 85.36 82.48 6 XM_B_Unicode 118067 75.49 84.68 71.58 7 DCC_CHECK 106798 47.81 76.60 35.54 8 XMListUnsubscribeExists 103505 51.83 74.23 42.27 9 XM_B_SpammyWords 99641 51.05 71.46 42.35 10 DKIM_VALID_AU 96171 56.92 68.97 51.78 11 LOC_TINY_FONT_1 69835 31.11 50.09 23.02 12 XM_B_Unicode3 68348 45.94 49.02 44.62 13 XM_B_SpammyWords2 59427 23.87 42.62 15.87 14 XM_DK_Undo_02 57784 15.48 41.44 4.41 15 BAYES_50 57732 50.52 41.41 54.41 16 HTML_FONT_LOW_CONTRAST 56250 29.97 40.34 25.55 17 RCVD_IN_MSPIKE_H2 52675 30.78 37.78 27.80 18 FVGT_m_MULTI_ODD 48465 24.91 34.76 20.71 19 T_KAM_HTML_FONT_INVALID 46031 21.81 33.01 17.03 20 BAYES_99 43099 11.30 30.91 2.93 21 TR_XM_DKIM_Undo 41071 10.11 29.46 1.86 22 DKIM_VALID_EF 39327 25.37 28.21 24.16 23 MIME_HTML_ONLY 37142 24.20 26.64 23.16 24 BAYES_999 33450 8.72 23.99 2.21 25 XM_Multi_Part_URI 32810 16.89 23.53 14.05 26 XMSubLong 32525 22.63 23.33 22.34 27 TR_DCC_Bayes_99 31424 7.44 22.54 1.00 28 DCC_CHECK_NEGATIVE 31150 51.84 22.34 64.42 29 TR_XM_DK_Unsub 28732 13.90 20.61 11.04 30 T_TM2_M_HEADER_IN_MSG 28726 23.36 20.60 24.54 31 UNPARSEABLE_RELAY 24515 11.80 17.58 9.33 32 XM_B_Unsub 22232 10.16 15.94 7.70 33 RELAYCOUNTRY_META 21638 7.05 15.52 3.44 34 XM_B_SpammyWords3 21284 7.38 15.26 4.01 35 TR_XM_BayesUnsub 20883 8.35 14.98 5.52 36 TR_MAX_INTL_RELAY 20167 7.62 14.46 4.70 37 LOTS_OF_MONEY 18894 7.89 13.55 5.47 38 BOTNET_IPINHOSTNAME 17462 5.83 12.52 2.98 39 TR_XM_SpammyWords4 16847 6.25 12.08 3.76 40 TR_XM_SpammyRelay 16514 4.68 11.84 1.62 41 XM_Evil_Numbers_Gen 15613 9.79 11.20 9.20 42 TR_XM_SpammyWords2 15493 3.58 11.11 0.36 43 XM_Body_Dirty_Words 13802 4.76 9.90 2.57 44 TR_XM_UnparsRelay 12773 3.59 9.16 1.22 45 RCVD_IN_BL_SPAMCOP_NET 12624 3.08 9.05 0.54 46 BAYES_80 12324 4.66 8.84 2.87 47 BOTNET 12287 3.56 8.81 1.32 48 BAYES_60 11067 7.53 7.94 7.36 49 XM_B_Phish_Phrases 11023 5.29 7.91 4.18 50 LotsOfNums_01 10532 6.84 7.55 6.53 51 TR_XM_SPAMCOP 10450 2.45 7.49 0.30 52 FSL_BULK_SIG 10038 7.03 7.20 6.96 53 HTML_IMAGE_RATIO_02 9608 4.96 6.89 4.13 54 RELAYCOUNTRY_CA 9390 2.71 6.73 0.99 55 XM_B_SEO 8527 2.61 6.12 1.12 56 MPART_ALT_DIFF 8355 8.76 5.99 9.94 57 XM_UncommonTLD01 8319 4.18 5.97 3.41 58 XM_B_PhoneNumber 8111 6.94 5.82 7.41 59 XMSubMetaSx_00 7920 3.66 5.68 2.79 60 BAYES_95 7458 2.88 5.35 1.82 61 TR_XM_SEO4 7300 2.07 5.24 0.72 62 XM_H_Long_From01 7109 4.77 5.10 4.63 63 HTML_IMAGE_RATIO_04 6793 12.55 4.87 15.82 64 UNTRUSTED_Relay 6663 2.27 4.78 1.21 65 T_XMDrugObfuBody_14 6562 2.36 4.71 1.36 66 TooManyTo_001 6430 6.51 4.61 7.32 67 XM_B_SpammyTLD 6404 4.36 4.59 4.26 68 XM_B_Investor 6292 2.21 4.51 1.23 69 TR_XM_PhishingBody 6233 2.58 4.47 1.77 70 TM2_M_VERY_LONG_WORD 6223 2.24 4.46 1.29 71 XMStrtUSub 6012 9.87 4.31 12.24 72 XMSexyCombo_05 5979 2.35 4.29 1.52 73 DKIM_INVALID 5708 2.48 4.09 1.79 74 XM_H_GMP 5707 4.36 4.09 4.48 75 TR_XM_SpammyWords5 5647 2.03 4.05 1.17 76 RCVD_IN_MSPIKE_H3 5578 4.39 4.00 4.56 77 RCVD_IN_MSPIKE_WL 5578 4.39 4.00 4.56 78 MIME_HTML_ONLY_MULTI 5271 7.02 3.78 8.41 79 XMNumbers 5235 2.79 3.75 2.39 80 HTML_IMAGE_RATIO_06 5093 4.28 3.65 4.55 81 MIME_HTML_MOSTLY 5082 2.52 3.64 2.04 82 XM_SPF_SoftFail 5081 2.08 3.64 1.41 83 XMBody_17 5051 1.41 3.62 0.47 84 TR_LOTS_OF_MONEY3 4917 1.60 3.53 0.78 85 T_XMHurry_00 4897 1.52 3.51 0.67 86 XM_CamelCaseFrm001 4795 2.51 3.44 2.12 87 RELAYCOUNTRY_AU 4349 1.29 3.12 0.51 88 MIME_QP_LONG_LINE 4226 4.06 3.03 4.50 89 XM_OfRef6 4121 1.55 2.96 0.96 90 HTML_IMAGE_RATIO_08 3971 2.21 2.85 1.93 91 RCVD_IN_VALIDITY_RPBL 3855 0.85 2.76 0.03 92 XM_B_URI_Unicode 3854 1.99 2.76 1.66 93 XM_URI_RBL 3575 1.03 2.56 0.37 94 XMDiploma_00 3514 1.60 2.52 1.21 95 TM2_M_URI_OPT_OUT 3478 2.19 2.49 2.06 96 XMBrknScrpt_02 3467 1.26 2.49 0.73 97 XM_UB50 3445 1.24 2.47 0.71 98 FROM_EXCESS_BASE64 3440 1.69 2.47 1.36 99 TR_XM_NoHeaderRelay 3430 0.91 2.46 0.24 100 USER_IN_DEF_DKIM_WL 3405 9.44 2.44 12.42 101 SpammyFromTLD_01 3326 1.14 2.39 0.61 102 T_XMDrugObfuBody_08 3291 1.47 2.36 1.09 103 T_TooManySym_01 3193 4.62 2.29 5.61 104 RCVD_IN_VALIDITY_SAFE 3109 3.97 2.23 4.71 105 XM_B_Unsub2 3084 1.44 2.21 1.11 106 XM_B_SpammyWords4 3020 1.09 2.17 0.63 107 URI_HEX 2920 1.38 2.09 1.07 108 SUBJ_ALL_CAPS 2820 1.49 2.02 1.26 109 MAILING_LIST_MULTI 2781 2.71 1.99 3.01 110 DIET_1 2590 0.83 1.86 0.39 111 T_FILL_THIS_FORM_SHORT 2561 1.04 1.84 0.70 112 XMStockSpam_06 2513 1.31 1.80 1.10 113 RCVD_IN_VALIDITY_CERTIFIED 2496 3.41 1.79 4.10 114 T_XMDrugObfuBody_00 2486 0.98 1.78 0.64 115 XM_SendGrid 2459 1.54 1.76 1.45 116 BAYES_40 2377 4.67 1.70 5.93 117 XM_DK_Undo_01 2277 1.33 1.63 1.20 118 TR_XM_PHPForged 2165 0.63 1.55 0.23 119 TR_XM_PHPDW 2150 0.62 1.54 0.23 120 TR_XM_FormFill2 2125 0.62 1.52 0.24 121 XM_H_PHPOS 2105 0.61 1.51 0.22 122 XM_B_REG_HTML 2100 0.56 1.51 0.15 123 HTTPS_HTTP_MISMATCH 2096 0.86 1.50 0.59 124 URI_TRY_3LD 2077 0.85 1.49 0.57 125 KHOP_HELO_FCRDNS 2005 1.15 1.44 1.02 126 URI_NOVOWEL 1975 2.73 1.42 3.29 127 XMPhish30 1952 0.89 1.40 0.67 128 BAYES_20 1938 3.31 1.39 4.12 129 XMBdyGiftCard01 1902 0.80 1.36 0.55 130 SUSP_UTF8_WORD_SUBJ 1890 0.43 1.36 0.03 131 T_REMOTE_IMAGE 1869 2.79 1.34 3.41 132 SpammyFromTLD_02 1867 0.64 1.34 0.34 133 XM_B_Phish66 1860 0.62 1.33 0.32 134 HTML_TAG_BALANCE_BODY 1853 0.81 1.33 0.59 135 HTML_MIME_NO_HTML_TAG 1821 1.69 1.31 1.86 136 TR_XM_INV_DKIM 1798 0.43 1.29 0.06 137 XMGenDplmaNmb 1784 0.80 1.28 0.60 138 XMHTMLBadTable_001 1780 0.54 1.28 0.22 139 TR_Symld_Words 1773 1.40 1.27 1.46 140 SHOPIFY_IMG_NOT_RCVD_SFY 1767 0.51 1.27 0.19 141 XM_B_COPY_HTML 1721 0.89 1.23 0.75 142 XMSlimDrugH 1707 0.57 1.22 0.29 143 HOSTED_IMG_MULTI_PUB_01 1703 0.40 1.22 0.05 144 XM_ProductURIs 1689 1.03 1.21 0.95 145 T_STY_INVIS_DIRECT 1689 0.58 1.21 0.32 146 MPART_ALT_DIFF_COUNT 1673 0.75 1.20 0.56 147 XMSubMetaI_00 1667 0.85 1.20 0.71 148 RCVD_IN_IADB_LISTED 1629 2.45 1.17 3.00 149 NO_DNS_FOR_FROM 1628 0.57 1.17 0.31 150 RCVD_IN_PSBL 1619 0.38 1.16 0.05 151 DKIM_ADSP_NXDOMAIN 1610 0.53 1.15 0.27 152 TR_XM_MaxWHORU 1607 0.53 1.15 0.26 153 ALL_TRUSTED 1605 10.83 1.15 14.95 154 XMReplyNow 1572 0.44 1.13 0.15 155 BOTNET_NORDNS 1567 0.35 1.12 0.01 156 HTML_IMAGE_ONLY_20 1544 0.65 1.11 0.46 157 TR_XM_Base64_M1 1540 0.64 1.10 0.44 158 XMSexyCombo_01 1517 0.40 1.09 0.10 159 TooManyTo_002 1478 1.83 1.06 2.16 160 LONGLN_LOW_CONTRAST 1461 0.49 1.05 0.26 161 RCVD_IN_ZEN_LASTEXTERNAL 1457 0.31 1.04 0.00 162 SHORTCIRCUIT 1457 0.31 1.04 0.00 163 XMHTML_After_End 1452 0.52 1.04 0.30 164 RCVD_IN_IADB_SPF 1448 2.17 1.04 2.65 165 T_MONEY_PERCENT 1435 0.42 1.03 0.16 166 TR_LOTS_OF_MONEY2 1435 0.42 1.03 0.16 167 RCVD_IN_IADB_DK 1399 1.94 1.00 2.34 168 TooManyTo_003 1398 1.12 1.00 1.17 169 AC_BR_BONANZA 1396 0.35 1.00 0.07 170 RCVD_IN_IADB_SENDERID 1385 1.98 0.99 2.41 171 NORDNS_LOW_CONTRAST 1372 0.33 0.98 0.05 172 HK_RANDOM_REPLYTO 1372 0.37 0.98 0.11 173 RDNS_DYNAMIC 1367 0.46 0.98 0.24 174 XM_H_Long_From02 1353 1.01 0.97 1.02 175 TooManyTo_004 1350 0.85 0.97 0.80 176 PDS_RDNS_DYNAMIC_FP 1349 0.36 0.97 0.10 177 TVD_RCVD_IP 1344 0.66 0.96 0.54 178 XM_DIRTYINTL 1305 0.34 0.94 0.09 179 TooManyTo_005 1304 0.71 0.94 0.62 180 TM2_M_OBFU_COMMENT 1279 0.61 0.92 0.48 181 RCVD_IN_PBL 1261 0.63 0.90 0.52 182 XM_B_DNDMA 1246 0.84 0.89 0.81 183 TR_XM_RelayPhish 1230 0.30 0.88 0.06 184 XM_HighProb1 1202 0.26 0.86 0.00 185 TR_XM_InvalidRelay 1192 0.27 0.85 0.02 186 LongTLD 1167 0.43 0.84 0.25 187 XM_UB99 1145 0.25 0.82 0.00 188 XMPhish08 1125 0.41 0.81 0.23 189 HELO_DYNAMIC_SPLIT_IP 1117 0.25 0.80 0.01 190 RELAYCOUNTRY_FR 1108 0.37 0.79 0.18 191 DKIM_ADSP_CUSTOM_MED 1103 0.72 0.79 0.69 192 URIBL_BLACK 1095 0.26 0.79 0.04 193 XMBody_78 1094 0.46 0.78 0.32 194 TR_XM_Base64_L1 1080 0.30 0.77 0.10 195 TR_XM_DK_SendGrid 1052 0.76 0.75 0.76 196 T_Symld_Words_02 1050 0.60 0.75 0.53 197 DEAR_FRIEND 1049 0.33 0.75 0.15 198 XMMoneyMeta_00 1041 0.48 0.75 0.36 199 T_PDS_OTHER_BAD_TLD 1038 0.34 0.74 0.17 200 XMSubMetaSSx_00 1035 0.32 0.74 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 279349 88.74 96.49 85.43 2 RELAYCOUNTRY_US 269681 83.34 85.36 82.48 3 XM_B_Unicode 234045 75.49 84.68 71.58 4 DKIM_SIGNED 211645 72.80 91.72 64.73 5 DCC_CHECK_NEGATIVE 210629 51.84 22.34 64.42 6 XM_DK_Pass 208314 71.12 88.51 63.71 7 DKIM_VALID 205779 70.31 87.62 62.93 8 BAYES_50 177908 50.52 41.41 54.41 9 DKIM_VALID_AU 169323 56.92 68.97 51.78 10 XM_B_Unicode3 145903 45.94 49.02 44.62 11 XM_B_SpammyWords 138459 51.05 71.46 42.35 12 XMListUnsubscribeExists 138221 51.83 74.23 42.27 13 DCC_CHECK 116203 47.81 76.60 35.54 14 RCVD_IN_MSPIKE_H2 90896 30.78 37.78 27.80 15 HTML_FONT_LOW_CONTRAST 83531 29.97 40.34 25.55 16 T_TM2_M_HEADER_IN_MSG 80247 23.36 20.60 24.54 17 DKIM_VALID_EF 79009 25.37 28.21 24.16 18 MIME_HTML_ONLY 75727 24.20 26.64 23.16 19 LOC_TINY_FONT_1 75265 31.11 50.09 23.02 20 XMSubLong 73032 22.63 23.33 22.34 21 FVGT_m_MULTI_ODD 67721 24.91 34.76 20.71 22 T_KAM_HTML_FONT_INVALID 55685 21.81 33.01 17.03 23 BAYES_00 55215 12.06 0.73 16.89 24 XM_B_SpammyWords2 51887 23.87 42.62 15.87 25 HTML_IMAGE_RATIO_04 51726 12.55 4.87 15.82 26 ALL_TRUSTED 48885 10.83 1.15 14.95 27 HTML_FONT_FACE_BAD 48042 10.50 0.67 14.69 28 XM_Multi_Part_URI 45953 16.89 23.53 14.05 29 XM_H_Trusted_IP 45229 9.70 0.00 13.83 30 USER_IN_DEF_DKIM_WL 40619 9.44 2.44 12.42 31 XMStrtUSub 40025 9.87 4.31 12.24 32 TR_XM_DK_Unsub 36102 13.90 20.61 11.04 33 MPART_ALT_DIFF 32517 8.76 5.99 9.94 34 UNPARSEABLE_RELAY 30511 11.80 17.58 9.33 35 XM_Evil_Numbers_Gen 30071 9.79 11.20 9.20 36 MIME_HTML_ONLY_MULTI 27486 7.02 3.78 8.41 37 XM_B_Unsub 25170 10.16 15.94 7.70 38 TR_XM_DK_Bayes 24412 5.42 0.63 7.47 39 XM_B_PhoneNumber 24238 6.94 5.82 7.41 40 TR_XM_DK_Bayes1 24109 5.35 0.62 7.37 41 BAYES_60 24067 7.53 7.94 7.36 42 TooManyTo_001 23929 6.51 4.61 7.32 43 FSL_BULK_SIG 22748 7.03 7.20 6.96 44 LotsOfNums_01 21348 6.84 7.55 6.53 45 TR_XM_DK_Bayes2 20837 4.59 0.43 6.37 46 XM_DKIMWhitelistDomains 20195 4.34 0.03 6.18 47 BAYES_40 19384 4.67 1.70 5.93 48 IN_ZIMBRA_NJ_WHITELIST 18356 3.97 0.10 5.61 49 T_TooManySym_01 18341 4.62 2.29 5.61 50 TR_XM_BayesUnsub 18053 8.35 14.98 5.52 51 LOTS_OF_MONEY 17886 7.89 13.55 5.47 52 XMSubNoVowel 15943 3.52 0.34 4.88 53 RCVD_IN_VALIDITY_SAFE 15400 3.97 2.23 4.71 54 TR_MAX_INTL_RELAY 15360 7.62 14.46 4.70 55 XM_H_Long_From01 15143 4.77 5.10 4.63 56 RCVD_IN_MSPIKE_H3 14902 4.39 4.00 4.56 57 RCVD_IN_MSPIKE_WL 14902 4.39 4.00 4.56 58 HTML_IMAGE_RATIO_06 14873 4.28 3.65 4.55 59 MIME_QP_LONG_LINE 14722 4.06 3.03 4.50 60 XM_H_GMP 14644 4.36 4.09 4.48 61 XM_DK_Undo_02 14430 15.48 41.44 4.41 62 XM_B_SpammyTLD 13945 4.36 4.59 4.26 63 XM_B_Phish_Phrases 13660 5.29 7.91 4.18 64 HTML_IMAGE_RATIO_02 13506 4.96 6.89 4.13 65 BAYES_20 13482 3.31 1.39 4.12 66 RCVD_IN_VALIDITY_CERTIFIED 13416 3.41 1.79 4.10 67 XM_B_SpammyWords3 13121 7.38 15.26 4.01 68 TR_XM_SpammyWords4 12299 6.25 12.08 3.76 69 BAYES_05 11979 2.77 0.69 3.66 70 XM_PDF 11799 2.66 0.45 3.61 71 RELAYCOUNTRY_META 11236 7.05 15.52 3.44 72 XM_UncommonTLD01 11163 4.18 5.97 3.41 73 T_REMOTE_IMAGE 11148 2.79 1.34 3.41 74 BOUNCE_MESSAGE 11076 2.54 0.55 3.39 75 ANY_BOUNCE_MESSAGE 11076 2.54 0.55 3.39 76 URI_NOVOWEL 10771 2.73 1.42 3.29 77 T_TooManySym_02 10308 2.40 0.63 3.15 78 MAILING_LIST_MULTI 9848 2.71 1.99 3.01 79 RCVD_IN_IADB_LISTED 9815 2.45 1.17 3.00 80 BOTNET_IPINHOSTNAME 9751 5.83 12.52 2.98 81 BAYES_99 9587 11.30 30.91 2.93 82 BAYES_80 9389 4.66 8.84 2.87 83 XMSubMetaSx_00 9129 3.66 5.68 2.79 84 RCVD_IN_IADB_SPF 8676 2.17 1.04 2.65 85 XM_Body_Dirty_Words 8400 4.76 9.90 2.57 86 XMSubLongNoVowel 7919 1.74 0.15 2.42 87 RCVD_IN_IADB_SENDERID 7865 1.98 0.99 2.41 88 XMNumbers 7800 2.79 3.75 2.39 89 XMSubGarbage 7712 1.67 0.05 2.36 90 RCVD_IN_IADB_DK 7651 1.94 1.00 2.34 91 BAYES_999 7229 8.72 23.99 2.21 92 TooManyTo_002 7059 1.83 1.06 2.16 93 INVALID_MSGID 7029 1.58 0.25 2.15 94 XM_CamelCaseFrm001 6925 2.51 3.44 2.12 95 TM2_M_URI_OPT_OUT 6720 2.19 2.49 2.06 96 MIME_HTML_MOSTLY 6677 2.52 3.64 2.04 97 HTML_IMAGE_RATIO_08 6323 2.21 2.85 1.93 98 TO_MALFORMED 6226 1.34 0.02 1.90 99 HTML_MIME_NO_HTML_TAG 6081 1.69 1.31 1.86 100 TR_XM_DKIM_Undo 6077 10.11 29.46 1.86 101 RCVD_IN_IADB_VOUCHED 6001 1.44 0.52 1.84 102 BAYES_95 5965 2.88 5.35 1.82 103 DKIM_INVALID 5866 2.48 4.09 1.79 104 TR_XM_PhishingBody 5795 2.58 4.47 1.77 105 XMGappySubj_01 5534 1.28 0.30 1.69 106 XM_B_URI_Unicode 5430 1.99 2.76 1.66 107 TR_XM_SpammyRelay 5309 4.68 11.84 1.62 108 XMSexyCombo_05 4970 2.35 4.29 1.52 109 TR_Symld_Words 4777 1.40 1.27 1.46 110 XM_SendGrid 4728 1.54 1.76 1.45 111 XM_SPF_SoftFail 4600 2.08 3.64 1.41 112 XMNoVowels 4544 1.05 0.26 1.39 113 T_XMDrugObfuBody_14 4431 2.36 4.71 1.36 114 FROM_EXCESS_BASE64 4431 1.69 2.47 1.36 115 BOTNET 4331 3.56 8.81 1.32 116 RCVD_IN_IADB_OPTIN 4306 1.02 0.32 1.32 117 TM2_M_VERY_LONG_WORD 4220 2.24 4.46 1.29 118 SUBJ_ALL_CAPS 4121 1.49 2.02 1.26 119 XM_B_Investor 4009 2.21 4.51 1.23 120 T_TooManySym_03 4006 0.91 0.18 1.23 121 TR_XM_UnparsRelay 3994 3.59 9.16 1.22 122 XMDiploma_00 3969 1.60 2.52 1.21 123 IN_HORDE_ADDRESS_BOOK 3960 0.90 0.16 1.21 124 UNTRUSTED_Relay 3943 2.27 4.78 1.21 125 XM_DK_Undo_01 3915 1.33 1.63 1.20 126 XM_TLDProd2 3912 0.92 0.28 1.20 127 TooManyTo_003 3821 1.12 1.00 1.17 128 XMGappySubj_02 3815 0.84 0.08 1.17 129 TR_XM_SpammyWords5 3815 2.03 4.05 1.17 130 XM_B_SEO 3663 2.61 6.12 1.12 131 XM_B_Unsub2 3640 1.44 2.21 1.11 132 XMStockSpam_06 3611 1.31 1.80 1.10 133 TVD_SPACE_RATIO 3602 0.81 0.13 1.10 134 T_XMDrugObfuBody_08 3577 1.47 2.36 1.09 135 URI_HEX 3504 1.38 2.09 1.07 136 XM_E_Blogspot 3399 0.77 0.15 1.04 137 XM_H_Long_From02 3348 1.01 0.97 1.02 138 KHOP_HELO_FCRDNS 3339 1.15 1.44 1.02 139 TR_DCC_Bayes_99 3284 7.44 22.54 1.00 140 RELAYCOUNTRY_CA 3244 2.71 6.73 0.99 141 XM_OfRef6 3131 1.55 2.96 0.96 142 XM_ProductURIs 3094 1.03 1.21 0.95 143 HELO_NODOT 2839 0.69 0.27 0.87 144 HELO_NO_DOMAIN 2836 0.69 0.27 0.87 145 XM_GoogleGroups 2712 0.76 0.61 0.83 146 XM_B_DNDMA 2658 0.84 0.89 0.81 147 TooManyTo_004 2619 0.85 0.97 0.80 148 TR_LOTS_OF_MONEY3 2564 1.60 3.53 0.78 149 TR_XM_DK_SendGrid 2482 0.76 0.75 0.76 150 XMCapTrack 2472 0.66 0.44 0.76 151 XM_B_COPY_HTML 2444 0.89 1.23 0.75 152 FROM_GOV_DKIM_AU 2414 0.63 0.38 0.74 153 XMBrknScrpt_02 2401 1.26 2.49 0.73 154 TR_XM_SEO4 2341 2.07 5.24 0.72 155 XM_UB50 2337 1.24 2.47 0.71 156 XMSubMetaI_00 2311 0.85 1.20 0.71 157 T_FILL_THIS_FORM_SHORT 2299 1.04 1.84 0.70 158 DKIM_ADSP_CUSTOM_MED 2257 0.72 0.79 0.69 159 XMLngstWrd_00 2226 0.61 0.44 0.68 160 TR_MetaPhish_Combo_01 2206 0.68 0.70 0.67 161 T_XMHurry_00 2198 1.52 3.51 0.67 162 XMPhish30 2177 0.89 1.40 0.67 163 T_XMDrugObfuBody_00 2108 0.98 1.78 0.64 164 XM_B_SpammyWords4 2072 1.09 2.17 0.63 165 XM_H_PHPMailer 2065 0.62 0.60 0.63 166 T_TooManySym_04 2040 0.45 0.04 0.62 167 TooManyTo_005 2013 0.71 0.94 0.62 168 XMBody_95 2006 0.47 0.12 0.61 169 SpammyFromTLD_01 2004 1.14 2.39 0.61 170 XM_ShortIntro_01 2003 0.58 0.52 0.61 171 XMGenDplmaNmb 1961 0.80 1.28 0.60 172 HTML_TAG_BALANCE_BODY 1944 0.81 1.33 0.59 173 HTTPS_HTTP_MISMATCH 1930 0.86 1.50 0.59 174 URI_TRY_3LD 1868 0.85 1.49 0.57 175 MPART_ALT_DIFF_COUNT 1844 0.75 1.20 0.56 176 XMBdyGiftCard01 1807 0.80 1.36 0.55 177 RELAYCOUNTRY_NL 1786 0.46 0.26 0.55 178 XM_B_FormFill 1782 0.40 0.05 0.54 179 RCVD_IN_BL_SPAMCOP_NET 1759 3.08 9.05 0.54 180 TVD_RCVD_IP 1756 0.66 0.96 0.54 181 T_Symld_Words_02 1729 0.60 0.75 0.53 182 NML_ADSP_CUSTOM_MED 1725 0.56 0.63 0.53 183 TR_XM_Spammywords 1699 0.57 0.70 0.52 184 XM_S_SpammyWords 1699 0.57 0.70 0.52 185 RCVD_IN_PBL 1694 0.63 0.90 0.52 186 RELAYCOUNTRY_AU 1658 1.29 3.12 0.51 187 XMPhish14 1637 0.57 0.73 0.50 188 TM2_M_OBFU_COMMENT 1564 0.61 0.92 0.48 189 XMClaimOffer 1528 0.45 0.42 0.47 190 XMBody_17 1525 1.41 3.62 0.47 191 HTML_IMAGE_ONLY_20 1506 0.65 1.11 0.46 192 USER_IN_WELCOMELIST 1485 0.32 0.00 0.45 193 USER_IN_WHITELIST 1485 0.32 0.00 0.45 194 T_OBFU_PDF_ATTACH 1482 0.36 0.14 0.45 195 TR_XM_Base64_M1 1455 0.64 1.10 0.44 196 FORGED_GMAIL_RCVD 1433 0.48 0.59 0.44 197 XMLngstWrd_01 1362 0.40 0.38 0.42 198 XMBSHREFv2 1354 0.37 0.28 0.41 199 DIET_1 1290 0.83 1.86 0.39 200 PLING_QUERY 1267 0.47 0.67 0.39 ----------------------------------------------------------------------