Email: 738677 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 1.99 sec Spam: 184842 Autolearn: 0 AvgScore: 13.45 AvgScanTime: 2.20 sec Ham: 553835 Autolearn: 0 AvgScore: -0.80 AvgScanTime: 1.92 sec Time Spent Running SA: 408.24 hours Time Spent Processing Spam: 112.75 hours Time Spent Processing Ham: 295.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 174781 89.76 94.56 88.16 2 DKIM_SIGNED 149447 76.83 80.85 75.48 3 XM_B_Unicode 146449 72.69 79.23 70.50 4 XM_DK_Pass 145882 75.41 78.92 74.24 5 RELAYCOUNTRY_US 142794 81.20 77.25 82.52 6 DKIM_VALID 141978 73.35 76.81 72.19 7 DCC_CHECK 140789 47.63 76.17 38.11 8 XMListUnsubscribeExists 127603 54.83 69.03 50.08 9 XM_B_SpammyWords 125650 54.76 67.98 50.35 10 DKIM_VALID_AU 109690 54.40 59.34 52.75 11 XM_DK_Undo_02 82331 16.39 44.54 6.99 12 XM_B_SpammyWords2 75832 27.88 41.03 23.49 13 XM_B_Unicode3 73712 40.23 39.88 40.35 14 TR_XM_DKIM_Undo 67808 13.03 36.68 5.14 15 HTML_FONT_LOW_CONTRAST 66924 30.09 36.21 28.04 16 BAYES_99 66893 12.23 36.19 4.23 17 BAYES_50 64489 50.58 34.89 55.82 18 LOC_TINY_FONT_1 63958 25.81 34.60 22.88 19 MIME_HTML_ONLY 56733 23.96 30.69 21.71 20 BAYES_999 52535 9.66 28.42 3.39 21 FVGT_m_MULTI_ODD 50336 24.10 27.23 23.05 22 TR_DCC_Bayes_99 49263 8.12 26.65 1.94 23 RCVD_IN_MSPIKE_H2 48973 26.72 26.49 26.80 24 DKIM_VALID_EF 48250 28.80 26.10 29.70 25 XMSubLong 43394 20.77 23.48 19.86 26 T_KAM_HTML_FONT_INVALID 42892 19.93 23.20 18.84 27 DCC_CHECK_NEGATIVE 40449 50.43 21.88 59.95 28 T_TM2_M_HEADER_IN_MSG 39654 27.43 21.45 29.42 29 RELAYCOUNTRY_META 39274 9.19 21.25 5.17 30 XM_Multi_Part_URI 38310 13.31 20.73 10.84 31 XM_Body_Dirty_Words 33102 13.64 17.91 12.21 32 RCVD_IN_MSPIKE_WL 31935 24.41 17.28 26.79 33 BOTNET 28937 5.29 15.65 1.83 34 UNTRUSTED_Relay 28585 5.28 15.46 1.88 35 TR_XM_SpammyWords2 28286 4.38 15.30 0.74 36 FSL_BULK_SIG 27886 8.11 15.09 5.78 37 BOTNET_IPINHOSTNAME 27397 7.57 14.82 5.15 38 XM_B_SpammyWords3 25729 8.70 13.92 6.96 39 LOTS_OF_MONEY 21219 9.21 11.48 8.46 40 XM_Evil_Numbers_Gen 21207 9.67 11.47 9.07 41 LotsOfNums_01 20999 9.00 11.36 8.21 42 XM_B_Unsub 20355 12.00 11.01 12.33 43 XM_B_Phish_Phrases 18304 8.58 9.90 8.14 44 XMSexyCombo_05 17811 5.04 9.64 3.51 45 RCVD_IN_BL_SPAMCOP_NET 17805 3.28 9.63 1.16 46 RCVD_IN_MSPIKE_BL 17751 2.85 9.60 0.60 47 RCVD_IN_MSPIKE_H3 16271 13.53 8.80 15.11 48 XM_UncommonTLD01 16205 4.92 8.77 3.64 49 BAYES_60 15788 7.36 8.54 6.97 50 BAYES_80 15428 5.16 8.35 4.09 51 T_REMOTE_IMAGE 14901 4.85 8.06 3.78 52 HTML_IMAGE_RATIO_02 14823 6.47 8.02 5.95 53 RCVD_IN_MSPIKE_H4 14025 9.10 7.59 9.60 54 TR_XM_PhishingBody 12504 3.87 6.76 2.91 55 XMSubMetaSx_00 12025 4.90 6.51 4.37 56 MPART_ALT_DIFF 11967 5.99 6.47 5.83 57 KHOP_HELO_FCRDNS 11479 2.73 6.21 1.57 58 XMBrknScrpt_02 11261 2.05 6.09 0.70 59 HTML_IMAGE_RATIO_04 11210 5.79 6.06 5.70 60 TooManyTo_001 10967 7.72 5.93 8.31 61 XM_UB50 10662 2.20 5.77 1.00 62 XM_H_Long_From01 10622 5.48 5.75 5.39 63 UNPARSEABLE_RELAY 10466 7.67 5.66 8.34 64 HTML_SHORT_LINK_IMG_1 9509 1.30 5.14 0.02 65 RELAYCOUNTRY_CA 9460 2.31 5.12 1.38 66 BODY_URI_ONLY 9428 1.31 5.10 0.04 67 HTML_IMAGE_ONLY_12 9415 1.44 5.09 0.22 68 XMNumbers 9315 3.81 5.04 3.40 69 RCVD_IN_RP_RNBL 9156 1.32 4.95 0.11 70 XM_SendGrid 8846 7.00 4.79 7.74 71 TR_XM_SpammyWords3 8803 1.49 4.76 0.40 72 RCVD_IN_MSPIKE_L3 8468 1.43 4.58 0.38 73 BAYES_95 8384 2.97 4.54 2.44 74 RCVD_IN_MSPIKE_L5 8008 1.21 4.33 0.17 75 RCVD_IN_PSBL 7992 1.09 4.32 0.01 76 MIME_HTML_MOSTLY 7938 2.61 4.29 2.05 77 XMStrtUSub 7709 6.01 4.17 6.62 78 XM_B_Phish66 7635 2.41 4.13 1.83 79 DKIM_INVALID 7469 3.48 4.04 3.29 80 XM_OfRef6 7308 2.63 3.95 2.19 81 T_XMDrugObfuBody_08 7242 2.26 3.92 1.71 82 XM_SPF_SoftFail 7121 2.21 3.85 1.66 83 XM_B_SpammyTLD 7011 2.34 3.79 1.86 84 URI_TRY_3LD 6908 2.01 3.74 1.44 85 RCVD_IN_RP_SAFE 6871 5.83 3.72 6.54 86 XMBody_17 6724 1.34 3.64 0.57 87 TM2_M_URI_OPT_OUT 6549 4.92 3.54 5.38 88 HTML_MIME_NO_HTML_TAG 6482 2.72 3.51 2.45 89 URI_HEX 6480 1.91 3.51 1.37 90 HTML_IMAGE_RATIO_06 6348 3.65 3.43 3.72 91 XM_UB60 6270 0.91 3.39 0.08 92 XM_B_COVIDMETA 6203 2.09 3.36 1.67 93 SUBJ_ALL_CAPS 6138 2.01 3.32 1.57 94 SpammyFromTLD_01 6125 1.68 3.31 1.13 95 T_FONT_INVIS_NAKED_TO 5990 2.19 3.24 1.85 96 HTML_IMAGE_RATIO_08 5909 2.67 3.20 2.50 97 XMDiploma_00 5860 2.45 3.17 2.21 98 FROM_EXCESS_BASE64 5727 2.85 3.10 2.76 99 RCVD_IN_RP_CERTIFIED 5723 5.21 3.10 5.92 100 URIBL_SBL_A 5483 0.86 2.97 0.15 101 BOTNET_NORDNS 5472 0.75 2.96 0.02 102 MIME_QP_LONG_LINE 5460 5.00 2.95 5.68 103 SpammyFromTLD_02 5420 0.94 2.93 0.28 104 XM_UB99 5390 0.73 2.92 0.00 105 T_TooManySym_01 5378 3.76 2.91 4.05 106 XM_DIRTYINTL 5150 1.06 2.79 0.49 107 TR_XM_SB_Phish 4939 2.94 2.67 3.03 108 HTML_FONT_SIZE_LARGE 4866 0.74 2.63 0.10 109 LH_URI_DOM_IN_PATH 4862 2.11 2.63 1.94 110 TM2_M_VERY_LONG_WORD 4862 1.59 2.63 1.25 111 MIME_HTML_ONLY_MULTI 4813 3.77 2.60 4.17 112 XMSubPhish11 4789 2.90 2.59 3.00 113 T_XMHurry_00 4536 1.17 2.45 0.74 114 RELAYCOUNTRY_FR 4528 0.80 2.45 0.25 115 TR_XM_DK_SendGrid 4475 4.13 2.42 4.70 116 BAYES_40 4447 4.21 2.41 4.82 117 T_XMDrugObfuBody_14 4444 2.07 2.40 1.95 118 RCVD_IN_IADB_LISTED 4427 4.95 2.40 5.80 119 XM_BadFromFormat 4373 0.74 2.37 0.20 120 TR_XM_MaxSPIKE 4331 0.60 2.34 0.01 121 XM_CamelCaseFrm001 4312 1.86 2.33 1.70 122 TR_LOTS_OF_MONEY3 4274 1.48 2.31 1.21 123 XM_UB999 4229 0.57 2.29 0.00 124 XM_B_SpammyWords4 4120 1.08 2.23 0.69 125 TR_XM_MaxBayes 3926 0.54 2.12 0.01 126 XM_B_Unsub2 3922 2.74 2.12 2.95 127 BAYES_20 3875 3.29 2.10 3.69 128 RCVD_IN_IADB_SPF 3755 4.25 2.03 4.99 129 DIET_1 3568 0.75 1.93 0.35 130 XMStockSpam_06 3474 1.32 1.88 1.13 131 XMGenDplmaNmb 3467 1.52 1.88 1.41 132 XM_DK_Undo_01 3407 1.67 1.84 1.61 133 RELAYCOUNTRY_UA 3397 0.47 1.84 0.01 134 RCVD_IN_IADB_SENDERID 3392 3.76 1.84 4.40 135 RELAYCOUNTRY_IN 3379 0.53 1.83 0.10 136 T_XMDrugObfuBody_00 3378 1.04 1.83 0.77 137 RCVD_IN_IADB_DK 3349 3.63 1.81 4.23 138 XM_URI_RBL 3332 0.59 1.80 0.19 139 XMSexyCombo_01 3324 1.02 1.80 0.76 140 BAYES_00 3261 12.12 1.76 15.58 141 T_FILL_THIS_FORM_SHORT 3227 1.17 1.75 0.97 142 TR_XM_COVIDMETA4 3116 0.68 1.69 0.34 143 XM_UB80 3062 0.44 1.66 0.03 144 TR_XM_PHPDW 2988 0.65 1.62 0.32 145 TR_XM_UnparsRelay 2984 0.70 1.61 0.40 146 XMSlimDrugH 2984 0.66 1.61 0.34 147 TR_XM_PHPForged 2941 0.63 1.59 0.30 148 TR_XM_FormFill2 2926 0.63 1.58 0.31 149 XM_H_PHPOS 2925 0.62 1.58 0.30 150 TR_XM_COVIDMETA1 2879 0.62 1.56 0.30 151 MAILING_LIST_MULTI 2834 2.52 1.53 2.85 152 XMSubNoVowel 2771 1.12 1.50 0.99 153 MIME_CHARSET_FARAWAY 2758 0.44 1.49 0.09 154 TR_MetaPhish_Combo_01 2723 0.90 1.47 0.70 155 XM_SPF_Unknown 2655 1.11 1.44 0.99 156 SUBJ_BUY 2646 0.43 1.43 0.10 157 URI_NOVOWEL 2637 2.44 1.43 2.78 158 XMSubMetaD_03 2598 0.69 1.41 0.45 159 TR_Symld_Words 2506 1.64 1.36 1.74 160 CHARSET_FARAWAY_HEADER 2478 0.35 1.34 0.02 161 MIMEOLE_DIRECT_TO_MX 2406 0.33 1.30 0.00 162 XMSubMetaI_00 2395 0.74 1.30 0.55 163 RCVD_IN_IADB_VOUCHED 2361 3.17 1.28 3.80 164 XMMoneyMeta_00 2344 0.70 1.27 0.51 165 XMBdyGiftCard01 2323 0.80 1.26 0.65 166 XMSubMetaD_00 2298 0.36 1.24 0.07 167 DRUGS_ERECTILE 2283 0.31 1.24 0.00 168 BAYES_05 2277 2.07 1.23 2.35 169 PDS_OTHER_BAD_TLD 2252 0.62 1.22 0.42 170 TR_XM_INV_DKIM 2246 0.44 1.22 0.18 171 ALL_TRUSTED 2240 10.65 1.21 13.80 172 XMBody_78 2146 0.62 1.16 0.44 173 RDNS_DYNAMIC 2128 0.63 1.15 0.45 174 XMSubMetaD_01 2126 0.29 1.15 0.01 175 PDS_FROM_2_EMAILS 2120 0.32 1.15 0.04 176 SERGIO_SUBJECT_VIAGRA01 2112 0.29 1.14 0.00 177 TR_XM_DK_Bayes 2107 7.55 1.14 9.70 178 SUBJECT_DRUG_GAP_C 2104 0.29 1.14 0.00 179 XMSubMetaD_02 2102 0.29 1.14 0.00 180 SUBJECT_DRUG_GAP_L 2100 0.29 1.14 0.00 181 FROM_SUSPICIOUS_NTLD 2096 0.33 1.13 0.07 182 FROM_2_EMAILS_SHORT 2094 0.29 1.13 0.00 183 TR_Caps_n_Bayes_99 2073 0.34 1.12 0.08 184 RELAYCOUNTRY_NL 2072 0.46 1.12 0.24 185 DOS_OE_TO_MX 2069 0.28 1.12 0.00 186 RELAYCOUNTRY_GB 2046 1.36 1.11 1.45 187 TR_XM_DK_Bayes1 2046 7.36 1.11 9.45 188 TR_XM_RelayPhish 2044 0.36 1.11 0.11 189 XMClaimOffer 2036 0.49 1.10 0.28 190 HTML_TAG_BALANCE_BODY 2035 0.81 1.10 0.71 191 PDS_TO_EQ_FROM_NAME 2032 0.28 1.10 0.01 192 XMPhish08 1985 0.54 1.07 0.36 193 DKIM_ADSP_CUSTOM_MED 1981 1.08 1.07 1.08 194 FROM_SUSPICIOUS_NTLD_FP 1976 0.31 1.07 0.06 195 DRUG_ED_CAPS 1976 0.27 1.07 0.00 196 XM_PDF 1960 5.07 1.06 6.40 197 XMSubMetaD_04 1956 0.27 1.06 0.00 198 XM_H_Long_From02 1952 1.28 1.06 1.35 199 LONG_JUNK_URI 1925 0.28 1.04 0.03 200 XMHTML_After_End 1911 0.81 1.03 0.73 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 488278 89.76 94.56 88.16 2 RELAYCOUNTRY_US 457026 81.20 77.25 82.52 3 DKIM_SIGNED 418056 76.83 80.85 75.48 4 XM_DK_Pass 411164 75.41 78.92 74.24 5 DKIM_VALID 399836 73.35 76.81 72.19 6 XM_B_Unicode 390459 72.69 79.23 70.50 7 DCC_CHECK_NEGATIVE 332051 50.43 21.88 59.95 8 BAYES_50 309132 50.58 34.89 55.82 9 DKIM_VALID_AU 292149 54.40 59.34 52.75 10 XM_B_SpammyWords 278852 54.76 67.98 50.35 11 XMListUnsubscribeExists 277383 54.83 69.03 50.08 12 XM_B_Unicode3 223494 40.23 39.88 40.35 13 DCC_CHECK 211056 47.63 76.17 38.11 14 DKIM_VALID_EF 164501 28.80 26.10 29.70 15 T_TM2_M_HEADER_IN_MSG 162965 27.43 21.45 29.42 16 HTML_FONT_LOW_CONTRAST 155316 30.09 36.21 28.04 17 RCVD_IN_MSPIKE_H2 148402 26.72 26.49 26.80 18 RCVD_IN_MSPIKE_WL 148348 24.41 17.28 26.79 19 XM_B_SpammyWords2 130104 27.88 41.03 23.49 20 FVGT_m_MULTI_ODD 127652 24.10 27.23 23.05 21 LOC_TINY_FONT_1 126714 25.81 34.60 22.88 22 MIME_HTML_ONLY 120254 23.96 30.69 21.71 23 XMSubLong 110004 20.77 23.48 19.86 24 T_KAM_HTML_FONT_INVALID 104356 19.93 23.20 18.84 25 BAYES_00 86294 12.12 1.76 15.58 26 RCVD_IN_MSPIKE_H3 83683 13.53 8.80 15.11 27 ALL_TRUSTED 76433 10.65 1.21 13.80 28 XM_B_Unsub 68302 12.00 11.01 12.33 29 XM_Body_Dirty_Words 67630 13.64 17.91 12.21 30 XM_Multi_Part_URI 60036 13.31 20.73 10.84 31 TR_XM_DK_Bayes 53700 7.55 1.14 9.70 32 RCVD_IN_MSPIKE_H4 53162 9.10 7.59 9.60 33 TR_XM_DK_Bayes1 52353 7.36 1.11 9.45 34 XM_Evil_Numbers_Gen 50229 9.67 11.47 9.07 35 LOTS_OF_MONEY 46841 9.21 11.48 8.46 36 UNPARSEABLE_RELAY 46201 7.67 5.66 8.34 37 TR_XM_DK_Bayes2 46111 6.50 1.03 8.33 38 TooManyTo_001 46033 7.72 5.93 8.31 39 LotsOfNums_01 45457 9.00 11.36 8.21 40 XM_B_Phish_Phrases 45077 8.58 9.90 8.14 41 XM_SendGrid 42885 7.00 4.79 7.74 42 XM_DKIMWhitelistDomains 42463 5.76 0.03 7.67 43 XM_DK_Undo_02 38722 16.39 44.54 6.99 44 BAYES_60 38596 7.36 8.54 6.97 45 XM_B_SpammyWords3 38568 8.70 13.92 6.96 46 IN_ZIMBRA_NJ_WHITELIST 37531 5.10 0.09 6.78 47 XMStrtUSub 36686 6.01 4.17 6.62 48 RCVD_IN_RP_SAFE 36196 5.83 3.72 6.54 49 XM_PDF 35469 5.07 1.06 6.40 50 HTML_IMAGE_RATIO_02 32979 6.47 8.02 5.95 51 RCVD_IN_RP_CERTIFIED 32774 5.21 3.10 5.92 52 MPART_ALT_DIFF 32315 5.99 6.47 5.83 53 RCVD_IN_IADB_LISTED 32120 4.95 2.40 5.80 54 FSL_BULK_SIG 32012 8.11 15.09 5.78 55 HTML_IMAGE_RATIO_04 31566 5.79 6.06 5.70 56 MIME_QP_LONG_LINE 31448 5.00 2.95 5.68 57 XM_H_Long_From01 29836 5.48 5.75 5.39 58 TM2_M_URI_OPT_OUT 29818 4.92 3.54 5.38 59 RELAYCOUNTRY_META 28611 9.19 21.25 5.17 60 BOTNET_IPINHOSTNAME 28497 7.57 14.82 5.15 61 TR_XM_DKIM_Undo 28462 13.03 36.68 5.14 62 RCVD_IN_IADB_SPF 27630 4.25 2.03 4.99 63 BAYES_40 26684 4.21 2.41 4.82 64 TR_XM_DK_SendGrid 26003 4.13 2.42 4.70 65 RCVD_IN_IADB_SENDERID 24356 3.76 1.84 4.40 66 XMSubMetaSx_00 24204 4.90 6.51 4.37 67 BAYES_99 23444 12.23 36.19 4.23 68 RCVD_IN_IADB_DK 23440 3.63 1.81 4.23 69 MIME_HTML_ONLY_MULTI 23070 3.77 2.60 4.17 70 BAYES_80 22657 5.16 8.35 4.09 71 T_TooManySym_01 22433 3.76 2.91 4.05 72 RCVD_IN_IADB_VOUCHED 21020 3.17 1.28 3.80 73 T_REMOTE_IMAGE 20939 4.85 8.06 3.78 74 HTML_IMAGE_RATIO_06 20588 3.65 3.43 3.72 75 BAYES_20 20459 3.29 2.10 3.69 76 XM_UncommonTLD01 20154 4.92 8.77 3.64 77 XM_H_Trusted_IP 19839 2.69 0.00 3.58 78 XMSexyCombo_05 19451 5.04 9.64 3.51 79 XMNumbers 18826 3.81 5.04 3.40 80 BAYES_999 18801 9.66 28.42 3.39 81 DKIM_INVALID 18220 3.48 4.04 3.29 82 TR_XM_SB_Phish 16787 2.94 2.67 3.03 83 XMSubPhish11 16601 2.90 2.59 3.00 84 XM_B_Unsub2 16338 2.74 2.12 2.95 85 TR_XM_PhishingBody 16097 3.87 6.76 2.91 86 MAILING_LIST_MULTI 15785 2.52 1.53 2.85 87 URI_NOVOWEL 15393 2.44 1.43 2.78 88 FROM_EXCESS_BASE64 15311 2.85 3.10 2.76 89 RCVD_IN_IADB_OPTIN 13830 2.09 0.86 2.50 90 HTML_IMAGE_RATIO_08 13828 2.67 3.20 2.50 91 HTML_MIME_NO_HTML_TAG 13585 2.72 3.51 2.45 92 BAYES_95 13539 2.97 4.54 2.44 93 BAYES_05 13028 2.07 1.23 2.35 94 ANY_BOUNCE_MESSAGE 12369 1.84 0.66 2.23 95 BOUNCE_MESSAGE 12367 1.84 0.66 2.23 96 XMDiploma_00 12234 2.45 3.17 2.21 97 XM_OfRef6 12149 2.63 3.95 2.19 98 T_TooManySym_02 11703 1.70 0.47 2.11 99 RCVD_IN_MSPIKE_H5 11503 1.78 0.89 2.08 100 MIME_HTML_MOSTLY 11361 2.61 4.29 2.05 101 TooManyTo_002 10845 1.63 0.66 1.96 102 T_XMDrugObfuBody_14 10814 2.07 2.40 1.95 103 LH_URI_DOM_IN_PATH 10741 2.11 2.63 1.94 104 TR_DCC_Bayes_99 10729 8.12 26.65 1.94 105 UNTRUSTED_Relay 10396 5.28 15.46 1.88 106 XM_B_SpammyTLD 10309 2.34 3.79 1.86 107 T_FONT_INVIS_NAKED_TO 10222 2.19 3.24 1.85 108 XM_B_Phish66 10139 2.41 4.13 1.83 109 BOTNET 10116 5.29 15.65 1.83 110 TR_Symld_Words 9620 1.64 1.36 1.74 111 T_XMDrugObfuBody_08 9443 2.26 3.92 1.71 112 XM_CamelCaseFrm001 9403 1.86 2.33 1.70 113 XM_B_COVIDMETA 9223 2.09 3.36 1.67 114 XM_SPF_SoftFail 9178 2.21 3.85 1.66 115 XM_DK_Undo_01 8914 1.67 1.84 1.61 116 SUBJ_ALL_CAPS 8677 2.01 3.32 1.57 117 KHOP_HELO_FCRDNS 8670 2.73 6.21 1.57 118 T_OBFU_PDF_ATTACH 8532 1.22 0.24 1.54 119 HELO_NODOT 8347 1.39 1.02 1.51 120 HELO_NO_DOMAIN 8346 1.39 1.02 1.51 121 RELAYCOUNTRY_GB 8003 1.36 1.11 1.45 122 IN_HORDE_ADDRESS_BOOK 7970 1.14 0.25 1.44 123 URI_TRY_3LD 7963 2.01 3.74 1.44 124 TVD_RCVD_IP 7799 1.14 0.32 1.41 125 XMGenDplmaNmb 7784 1.52 1.88 1.41 126 RELAYCOUNTRY_CA 7629 2.31 5.12 1.38 127 URI_HEX 7595 1.91 3.51 1.37 128 XM_H_Long_From02 7478 1.28 1.06 1.35 129 USER_IN_DEF_DKIM_WL 7313 1.00 0.04 1.32 130 TooManyTo_003 7250 1.10 0.47 1.31 131 INVALID_MSGID 7223 1.11 0.55 1.30 132 XMSubMetaSxObfu_03 7055 1.16 0.83 1.27 133 TM2_M_VERY_LONG_WORD 6902 1.59 2.63 1.25 134 TR_LOTS_OF_MONEY3 6695 1.48 2.31 1.21 135 XMCapTrack 6640 0.99 0.37 1.20 136 TO_MALFORMED 6482 0.88 0.00 1.17 137 RCVD_IN_BL_SPAMCOP_NET 6445 3.28 9.63 1.16 138 SpammyFromTLD_01 6266 1.68 3.31 1.13 139 XMStockSpam_06 6247 1.32 1.88 1.13 140 HELO_MISC_IP 6146 0.94 0.42 1.11 141 CK_HELO_DYNAMIC_SPLIT_IP 6117 0.98 0.59 1.10 142 XMGappySubj_01 6077 0.89 0.27 1.10 143 XM_GoogleGroups 6042 0.94 0.48 1.09 144 DKIM_ADSP_CUSTOM_MED 5980 1.08 1.07 1.08 145 HTML_FONT_FACE_BAD 5883 0.94 0.58 1.06 146 XM_GRM 5687 0.77 0.00 1.03 147 XM_UB50 5554 2.20 5.77 1.00 148 XM_SPF_Unknown 5508 1.11 1.44 0.99 149 XMSubNoVowel 5477 1.12 1.50 0.99 150 T_FILL_THIS_FORM_SHORT 5387 1.17 1.75 0.97 151 TooManyTo_004 5151 0.80 0.40 0.93 152 FROM_GOV_DKIM_AU 5060 0.76 0.31 0.91 153 XMBSHREFv2 4943 0.76 0.37 0.89 154 T_TooManySym_03 4908 0.70 0.15 0.89 155 XM_ProductURIs 4907 0.87 0.83 0.89 156 XMNoVowels 4853 0.72 0.25 0.88 157 NML_ADSP_CUSTOM_MED 4375 0.83 0.96 0.79 158 T_XMDrugObfuBody_00 4276 1.04 1.83 0.77 159 XMSexyCombo_01 4231 1.02 1.80 0.76 160 XMBody_95 4185 0.60 0.14 0.76 161 T_XMHurry_00 4118 1.17 2.45 0.74 162 TR_XM_SpammyWords2 4080 4.38 15.30 0.74 163 HTTPS_HTTP_MISMATCH 4067 0.77 0.87 0.73 164 TooManyTo_005 4050 0.63 0.34 0.73 165 TR_MSPIKEBAYES00 4047 0.56 0.05 0.73 166 XMHTML_After_End 4043 0.81 1.03 0.73 167 HTML_TAG_BALANCE_BODY 3936 0.81 1.10 0.71 168 TR_MetaPhish_Combo_01 3903 0.90 1.47 0.70 169 XMBrknScrpt_02 3893 2.05 6.09 0.70 170 XM_B_SpammyWords4 3845 1.08 2.23 0.69 171 XM_ShortIntro_01 3769 0.64 0.51 0.68 172 XMBdyGiftCard01 3619 0.80 1.26 0.65 173 RCVD_IN_MSPIKE_BL 3332 2.85 9.60 0.60 174 XMBody_17 3161 1.34 3.64 0.57 175 TM2_M_BODY_EMPTY 3145 0.44 0.06 0.57 176 T_Symld_Words_02 3126 0.61 0.76 0.56 177 XMSubMetaI_00 3069 0.74 1.30 0.55 178 FORGED_GMAIL_RCVD 2994 0.60 0.78 0.54 179 XMSolicitRefs_0 2848 0.52 0.55 0.51 180 XMHTMLBadTable_001 2837 0.52 0.53 0.51 181 XMMoneyMeta_00 2808 0.70 1.27 0.51 182 SENDGRID_REDIR 2806 0.61 0.91 0.51 183 RELAYCOUNTRY_DE 2787 0.60 0.88 0.50 184 MISSING_HEADERS 2723 0.54 0.68 0.49 185 XM_DIRTYINTL 2709 1.06 2.79 0.49 186 T_TooManySym_04 2691 0.37 0.03 0.49 187 XM_H_PHPMailer 2679 0.50 0.56 0.48 188 RCVD_IN_SORBS_DUL 2660 0.40 0.14 0.48 189 DKIM_ADSP_NXDOMAIN 2644 0.59 0.92 0.48 190 XMLngstWrd_00 2582 0.42 0.30 0.47 191 FROM_GOV_SPOOF 2580 0.39 0.16 0.47 192 XMSubMetaD_03 2501 0.69 1.41 0.45 193 RDNS_DYNAMIC 2493 0.63 1.15 0.45 194 XMBody_78 2439 0.62 1.16 0.44 195 NO_DNS_FOR_FROM 2413 0.58 1.00 0.44 196 TVD_SPACE_RATIO 2337 0.36 0.15 0.42 197 PDS_OTHER_BAD_TLD 2327 0.62 1.22 0.42 198 HTML_IMAGE_ONLY_20 2307 0.39 0.31 0.42 199 SHORT_HELO_AND_INLINE_IMAGE 2288 0.32 0.06 0.41 200 XM_S_SubURI 2259 0.32 0.05 0.41 ----------------------------------------------------------------------