Email: 490414 Autolearn: 0 AvgScore: 4.12 AvgScanTime: 1.22 sec Spam: 155572 Autolearn: 0 AvgScore: 12.91 AvgScanTime: 1.36 sec Ham: 334842 Autolearn: 0 AvgScore: 0.03 AvgScanTime: 1.16 sec Time Spent Running SA: 166.79 hours Time Spent Processing Spam: 58.59 hours Time Spent Processing Ham: 108.20 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150268 90.92 96.59 88.28 2 DKIM_SIGNED 141522 81.48 90.97 77.08 3 XM_DK_Pass 136101 79.56 87.48 75.87 4 DKIM_VALID 134653 78.63 86.55 74.95 5 RELAYCOUNTRY_US 132878 83.57 85.41 82.71 6 XM_B_Unicode 132702 75.11 85.30 70.37 7 DCC_CHECK 117535 51.85 75.55 40.83 8 XMListUnsubscribeExists 113745 59.56 73.11 53.27 9 XM_B_SpammyWords 113100 54.80 72.70 46.48 10 DKIM_VALID_AU 108619 64.04 69.82 61.35 11 XM_B_Unicode3 69312 41.79 44.55 40.51 12 LOC_TINY_FONT_1 66770 32.39 42.92 27.49 13 XM_DK_Undo_02 65430 17.55 42.06 6.16 14 XM_B_SpammyWords2 64542 27.35 41.49 20.78 15 BAYES_50 64415 53.54 41.41 59.18 16 HTML_FONT_LOW_CONTRAST 62474 33.87 40.16 30.95 17 RCVD_IN_MSPIKE_H2 61160 33.98 39.31 31.51 18 FVGT_m_MULTI_ODD 58613 30.44 37.68 27.07 19 BAYES_99 50345 13.37 32.36 4.55 20 TR_XM_DKIM_Undo 48228 11.75 31.00 2.80 21 T_KAM_HTML_FONT_INVALID 46856 23.80 30.12 20.86 22 DKIM_VALID_EF 44720 28.93 28.75 29.02 23 BAYES_999 39350 10.32 25.29 3.36 24 DCC_CHECK_NEGATIVE 38012 48.12 24.43 59.12 25 TR_DCC_Bayes_99 37898 9.12 24.36 2.03 26 T_TM2_M_HEADER_IN_MSG 37497 25.92 24.10 26.77 27 MIME_HTML_ONLY 36933 21.01 23.74 19.74 28 XMSubLong 36508 23.25 23.47 23.15 29 XM_Multi_Part_URI 32291 16.45 20.76 14.46 30 TR_XM_DK_Unsub 32284 16.60 20.75 14.67 31 XM_B_Unsub 26494 10.73 17.03 7.81 32 LOTS_OF_MONEY 25370 10.15 16.31 7.29 33 TR_XM_BayesUnsub 25334 9.54 16.28 6.40 34 RELAYCOUNTRY_META 23315 7.84 14.99 4.53 35 TR_XM_SpammyWords4 23245 8.31 14.94 5.24 36 UNPARSEABLE_RELAY 22736 11.77 14.61 10.45 37 BOTNET_IPINHOSTNAME 22010 7.66 14.15 4.64 38 TR_MAX_INTL_RELAY 21791 9.31 14.01 7.13 39 XM_B_SpammyWords3 21636 8.12 13.91 5.43 40 TR_XM_SpammyWords2 18731 4.57 12.04 1.10 41 TR_XM_SpammyRelay 16819 4.97 10.81 2.26 42 BOTNET 14356 3.98 9.23 1.54 43 RCVD_IN_BL_SPAMCOP_NET 13979 3.36 8.99 0.75 44 BAYES_80 13800 5.75 8.87 4.30 45 FSL_BULK_SIG 13298 7.07 8.55 6.38 46 LotsOfNums_01 13061 8.69 8.40 8.83 47 XM_Evil_Numbers_Gen 12555 8.39 8.07 8.54 48 BAYES_60 12211 8.97 7.85 9.49 49 TR_XM_SPAMCOP 11183 2.60 7.19 0.46 50 XM_Body_Dirty_Words 10562 4.17 6.79 2.95 51 TR_XM_UnparsRelay 10363 3.02 6.66 1.32 52 HTML_IMAGE_RATIO_02 10001 5.49 6.43 5.05 53 UNTRUSTED_Relay 9828 2.97 6.32 1.42 54 XMBody_17 9580 2.49 6.16 0.79 55 TR_LOTS_OF_MONEY3 9160 2.78 5.89 1.34 56 MPART_ALT_DIFF 9030 4.41 5.80 3.76 57 XM_B_PhoneNumber 8717 8.01 5.60 9.12 58 RELAYCOUNTRY_CA 8523 2.92 5.48 1.73 59 XMSubMetaSx_00 8384 4.52 5.39 4.12 60 XM_UncommonTLD01 8360 4.50 5.37 4.09 61 XM_SPF_SoftFail 8018 3.79 5.15 3.16 62 TooManyTo_001 7980 7.15 5.13 8.08 63 XM_B_SEO 7854 2.58 5.05 1.44 64 BAYES_95 7569 3.48 4.87 2.83 65 XM_H_GMP 7439 5.69 4.78 6.12 66 XM_H_Long_From01 7394 5.34 4.75 5.61 67 XM_B_Phish_Phrases 7350 3.53 4.72 2.98 68 TR_XM_PhishingBody 7245 2.30 4.66 1.21 69 HTML_IMAGE_RATIO_04 7140 4.45 4.59 4.39 70 TR_XM_SEO4 6975 2.08 4.48 0.96 71 DKIM_INVALID 6869 2.85 4.42 2.13 72 T_XMDrugObfuBody_14 6753 2.93 4.34 2.27 73 MIME_HTML_MOSTLY 6558 2.98 4.22 2.40 74 XM_B_Investor 6463 2.47 4.15 1.68 75 XM_OfRef6 6304 2.17 4.05 1.29 76 HTML_IMAGE_RATIO_06 6225 3.23 4.00 2.88 77 TR_XM_SpammyWords5 6196 2.07 3.98 1.18 78 XMNumbers 5851 2.97 3.76 2.60 79 MIME_QP_LONG_LINE 5792 4.76 3.72 5.24 80 XM_UB50 5640 1.71 3.63 0.82 81 XMStrtUSub 5549 4.33 3.57 4.68 82 XMSexyCombo_05 5544 2.12 3.56 1.46 83 T_TooManySym_01 5441 5.09 3.50 5.83 84 HTML_IMAGE_RATIO_08 5437 2.45 3.49 1.96 85 TM2_M_VERY_LONG_WORD 5307 2.13 3.41 1.53 86 XM_B_SpammyTLD 5243 2.81 3.37 2.54 87 T_XMDrugObfuBody_08 5168 2.08 3.32 1.51 88 XM_URI_RBL 4987 1.12 3.21 0.15 89 MIME_HTML_ONLY_MULTI 4891 2.50 3.14 2.20 90 ANY_BOUNCE_MESSAGE 4867 4.67 3.13 5.39 91 BOUNCE_MESSAGE 4867 4.67 3.13 5.39 92 TR_XM_NoHeaderRelay 4849 1.10 3.12 0.17 93 RCVD_IN_VALIDITY_SAFE 4770 4.41 3.07 5.04 94 XM_CamelCaseFrm001 4433 2.82 2.85 2.81 95 T_XMHurry_00 4241 1.27 2.73 0.59 96 XMDiploma_00 4212 1.88 2.71 1.50 97 RCVD_IN_MSPIKE_WL 4194 5.12 2.70 6.24 98 RCVD_IN_MSPIKE_H3 4194 5.12 2.70 6.24 99 TM2_M_URI_OPT_OUT 4036 1.92 2.59 1.61 100 USER_IN_DEF_DKIM_WL 3979 11.45 2.56 15.58 101 SUBJ_ALL_CAPS 3926 1.82 2.52 1.50 102 RELAYCOUNTRY_AU 3805 1.37 2.45 0.87 103 RCVD_IN_VALIDITY_CERTIFIED 3743 3.62 2.41 4.18 104 FROM_EXCESS_BASE64 3562 2.01 2.29 1.88 105 XMStockSpam_06 3513 1.53 2.26 1.19 106 XM_B_Unsub2 3468 1.57 2.23 1.26 107 URI_TRY_3LD 3321 1.41 2.13 1.07 108 XM_B_SpammyWords4 3312 1.41 2.13 1.08 109 AC_BR_BONANZA 3278 0.77 2.11 0.15 110 XMBrknScrpt_02 2968 1.28 1.91 0.99 111 HTML_TAG_BALANCE_BODY 2729 0.96 1.75 0.59 112 T_FILL_THIS_FORM_SHORT 2700 1.23 1.74 0.99 113 BAYES_40 2650 4.11 1.70 5.23 114 XM_HighProb1 2639 0.54 1.70 0.00 115 T_REMOTE_IMAGE 2606 2.98 1.68 3.59 116 XM_DK_Undo_01 2602 1.92 1.67 2.03 117 MAILING_LIST_MULTI 2581 2.25 1.66 2.53 118 SpammyFromTLD_01 2496 0.98 1.60 0.69 119 LONGLN_LOW_CONTRAST 2492 0.72 1.60 0.32 120 RCVD_IN_VALIDITY_RPBL 2435 0.55 1.57 0.08 121 XMSubMetaI_00 2425 0.81 1.56 0.46 122 XMPhish30 2417 0.73 1.55 0.35 123 URI_HEX 2406 1.55 1.55 1.54 124 HTML_MIME_NO_HTML_TAG 2384 1.97 1.53 2.18 125 URI_NOVOWEL 2305 1.31 1.48 1.23 126 TR_XM_INV_DKIM 2284 0.51 1.47 0.07 127 TR_XM_Base64_M1 2223 0.90 1.43 0.65 128 TR_XM_PHPForged 2197 0.68 1.41 0.34 129 T_XMDrugObfuBody_00 2185 1.00 1.40 0.82 130 DKIM_ADSP_NXDOMAIN 2185 0.65 1.40 0.30 131 KHOP_HELO_FCRDNS 2165 1.31 1.39 1.28 132 TR_XM_PHPDW 2161 0.67 1.39 0.34 133 XMReplyNow 2157 0.64 1.39 0.30 134 TR_XM_FormFill2 2139 0.67 1.37 0.35 135 ALL_TRUSTED 2138 9.77 1.37 13.67 136 XM_H_PHPOS 2120 0.66 1.36 0.33 137 HTML_FONT_TINY_NORDNS 2109 0.48 1.36 0.08 138 TR_XM_InvalidRelay 2017 0.43 1.30 0.02 139 RCVD_IN_IADB_LISTED 2000 3.01 1.29 3.81 140 XMGenDplmaNmb 1979 0.93 1.27 0.77 141 SpammyFromTLD_02 1967 0.78 1.26 0.56 142 BAYES_20 1960 2.65 1.26 3.30 143 DKIM_ADSP_CUSTOM_MED 1953 0.97 1.26 0.84 144 XM_B_Phish66 1886 0.58 1.21 0.29 145 URI_OPTOUT_3LD 1869 0.62 1.20 0.35 146 XM_SendGrid 1754 1.24 1.13 1.29 147 RCVD_IN_IADB_SPF 1718 2.64 1.10 3.36 148 TR_Symld_Words 1716 1.45 1.10 1.61 149 HTTPS_HTTP_MISMATCH 1716 0.90 1.10 0.80 150 TR_Caps_n_Bayes_99 1664 0.35 1.07 0.02 151 XM_H_Long_From02 1663 0.98 1.07 0.94 152 FORGED_GMAIL_RCVD 1653 0.67 1.06 0.49 153 XMHTML_After_End 1648 0.55 1.06 0.31 154 RCVD_IN_IADB_DK 1601 2.33 1.03 2.93 155 XM_B_COPY_HTML 1597 0.89 1.03 0.82 156 RCVD_IN_IADB_SENDERID 1592 2.39 1.02 3.03 157 XM_B_DNDMA 1580 0.70 1.02 0.55 158 XMPhish14 1560 0.56 1.00 0.36 159 NML_ADSP_CUSTOM_MED 1520 0.69 0.98 0.56 160 DIET_1 1510 0.52 0.97 0.31 161 BOTNET_NORDNS 1501 0.32 0.96 0.02 162 MPART_ALT_DIFF_COUNT 1487 0.66 0.96 0.52 163 AC_HTML_NONSENSE_TAGS 1483 0.33 0.95 0.04 164 T_MONEY_PERCENT 1482 0.49 0.95 0.27 165 TR_LOTS_OF_MONEY2 1482 0.49 0.95 0.27 166 XM_DIRTYINTL 1468 0.39 0.94 0.13 167 HTML_FONT_FACE_BAD 1466 0.62 0.94 0.47 168 TR_MetaPhish_Combo_01 1453 1.18 0.93 1.29 169 HOSTED_IMG_MULTI_PUB_01 1445 0.31 0.93 0.02 170 T_HTML_ATTACH 1436 2.10 0.92 2.65 171 T_STY_INVIS_DIRECT 1434 0.48 0.92 0.28 172 TR_Mismatch_TLD_01 1434 0.44 0.92 0.21 173 XMSexyCombo_01 1429 0.41 0.92 0.17 174 XM_PDF 1421 3.24 0.91 4.33 175 PLING_QUERY 1419 0.50 0.91 0.31 176 TR_XM_Base64_L1 1400 0.38 0.90 0.14 177 BAYES_00 1377 6.45 0.89 9.04 178 RELAYCOUNTRY_FR 1371 0.42 0.88 0.21 179 XMBdyGiftCard01 1347 0.77 0.87 0.72 180 RDNS_DYNAMIC 1342 0.48 0.86 0.30 181 TooManyTo_002 1317 1.91 0.85 2.40 182 RELAYCOUNTRY_CN 1302 0.30 0.84 0.06 183 PDS_RDNS_DYNAMIC_FP 1301 0.36 0.84 0.14 184 T_Symld_Words_02 1290 0.54 0.83 0.40 185 TM2_M_A_HREF_HREF 1287 0.41 0.83 0.21 186 XMLngstWrd_00 1267 0.53 0.81 0.39 187 SHOPIFY_IMG_NOT_RCVD_SFY 1264 0.50 0.81 0.36 188 XMSlimDrugH 1262 0.49 0.81 0.34 189 XM_Combo_Sbj 1254 0.37 0.81 0.17 190 XMHTMLBadTable_001 1253 0.49 0.81 0.34 191 BAYES_05 1243 1.68 0.80 2.08 192 TR_XM_FormFill 1219 0.26 0.78 0.01 193 XMBounce_01 1212 0.27 0.78 0.04 194 XMPhish08 1189 0.35 0.76 0.16 195 TVD_RCVD_IP 1187 1.34 0.76 1.61 196 TooManyTo_003 1187 1.11 0.76 1.28 197 XMSubMetaSxObfu_03 1186 0.80 0.76 0.82 198 XMLngstWrd_01 1169 0.46 0.75 0.32 199 XM_H_Undi_Recip 1158 0.34 0.74 0.15 200 TR_XM_DK_SendGrid 1148 0.83 0.74 0.87 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 295609 90.92 96.59 88.28 2 RELAYCOUNTRY_US 276961 83.57 85.41 82.71 3 DKIM_SIGNED 258082 81.48 90.97 77.08 4 XM_DK_Pass 254050 79.56 87.48 75.87 5 DKIM_VALID 250961 78.63 86.55 74.95 6 XM_B_Unicode 235634 75.11 85.30 70.37 7 DKIM_VALID_AU 205440 64.04 69.82 61.35 8 BAYES_50 198160 53.54 41.41 59.18 9 DCC_CHECK_NEGATIVE 197966 48.12 24.43 59.12 10 XMListUnsubscribeExists 178366 59.56 73.11 53.27 11 XM_B_SpammyWords 155640 54.80 72.70 46.48 12 DCC_CHECK 136731 51.85 75.55 40.83 13 XM_B_Unicode3 135641 41.79 44.55 40.51 14 RCVD_IN_MSPIKE_H2 105498 33.98 39.31 31.51 15 HTML_FONT_LOW_CONTRAST 103644 33.87 40.16 30.95 16 DKIM_VALID_EF 97156 28.93 28.75 29.02 17 LOC_TINY_FONT_1 92059 32.39 42.92 27.49 18 FVGT_m_MULTI_ODD 90653 30.44 37.68 27.07 19 T_TM2_M_HEADER_IN_MSG 89632 25.92 24.10 26.77 20 XMSubLong 77504 23.25 23.47 23.15 21 T_KAM_HTML_FONT_INVALID 69861 23.80 30.12 20.86 22 XM_B_SpammyWords2 69577 27.35 41.49 20.78 23 MIME_HTML_ONLY 66088 21.01 23.74 19.74 24 USER_IN_DEF_DKIM_WL 52162 11.45 2.56 15.58 25 TR_XM_DK_Unsub 49110 16.60 20.75 14.67 26 XM_Multi_Part_URI 48405 16.45 20.76 14.46 27 ALL_TRUSTED 45786 9.77 1.37 13.67 28 UNPARSEABLE_RELAY 34993 11.77 14.61 10.45 29 BAYES_60 31774 8.97 7.85 9.49 30 XM_B_PhoneNumber 30542 8.01 5.60 9.12 31 BAYES_00 30264 6.45 0.89 9.04 32 LotsOfNums_01 29563 8.69 8.40 8.83 33 XM_Evil_Numbers_Gen 28581 8.39 8.07 8.54 34 TooManyTo_001 27061 7.15 5.13 8.08 35 XM_B_Unsub 26137 10.73 17.03 7.81 36 XM_DKIMWhitelistDomains 26083 5.32 0.02 7.79 37 IN_ZIMBRA_NJ_WHITELIST 26076 5.35 0.09 7.79 38 LOTS_OF_MONEY 24411 10.15 16.31 7.29 39 TR_MAX_INTL_RELAY 23876 9.31 14.01 7.13 40 TR_XM_DK_Bayes 22905 4.89 0.70 6.84 41 TR_XM_DK_Bayes1 22676 4.84 0.69 6.77 42 TR_XM_BayesUnsub 21427 9.54 16.28 6.40 43 FSL_BULK_SIG 21365 7.07 8.55 6.38 44 RCVD_IN_MSPIKE_H3 20894 5.12 2.70 6.24 45 RCVD_IN_MSPIKE_WL 20894 5.12 2.70 6.24 46 XM_DK_Undo_02 20632 17.55 42.06 6.16 47 XM_H_GMP 20490 5.69 4.78 6.12 48 TR_XM_DK_Bayes2 19870 4.22 0.54 5.93 49 T_TooManySym_01 19536 5.09 3.50 5.83 50 XM_H_Long_From01 18770 5.34 4.75 5.61 51 XM_B_SpammyWords3 18177 8.12 13.91 5.43 52 ANY_BOUNCE_MESSAGE 18042 4.67 3.13 5.39 53 BOUNCE_MESSAGE 18040 4.67 3.13 5.39 54 MIME_QP_LONG_LINE 17551 4.76 3.72 5.24 55 TR_XM_SpammyWords4 17529 8.31 14.94 5.24 56 BAYES_40 17523 4.11 1.70 5.23 57 HTML_IMAGE_RATIO_02 16921 5.49 6.43 5.05 58 RCVD_IN_VALIDITY_SAFE 16860 4.41 3.07 5.04 59 XMStrtUSub 15684 4.33 3.57 4.68 60 BOTNET_IPINHOSTNAME 15540 7.66 14.15 4.64 61 BAYES_99 15233 13.37 32.36 4.55 62 RELAYCOUNTRY_META 15154 7.84 14.99 4.53 63 HTML_IMAGE_RATIO_04 14701 4.45 4.59 4.39 64 XM_PDF 14491 3.24 0.91 4.33 65 BAYES_80 14390 5.75 8.87 4.30 66 RCVD_IN_VALIDITY_CERTIFIED 14005 3.62 2.41 4.18 67 XMSubMetaSx_00 13791 4.52 5.39 4.12 68 XM_UncommonTLD01 13700 4.50 5.37 4.09 69 RCVD_IN_IADB_LISTED 12770 3.01 1.29 3.81 70 MPART_ALT_DIFF 12598 4.41 5.80 3.76 71 T_REMOTE_IMAGE 12009 2.98 1.68 3.59 72 BAYES_999 11257 10.32 25.29 3.36 73 RCVD_IN_IADB_SPF 11240 2.64 1.10 3.36 74 BAYES_20 11039 2.65 1.26 3.30 75 XM_SPF_SoftFail 10569 3.79 5.15 3.16 76 RCVD_IN_IADB_SENDERID 10153 2.39 1.02 3.03 77 XM_B_Phish_Phrases 9968 3.53 4.72 2.98 78 XM_Body_Dirty_Words 9892 4.17 6.79 2.95 79 RCVD_IN_IADB_DK 9825 2.33 1.03 2.93 80 HTML_IMAGE_RATIO_06 9637 3.23 4.00 2.88 81 BAYES_95 9482 3.48 4.87 2.83 82 XM_CamelCaseFrm001 9411 2.82 2.85 2.81 83 TR_XM_DKIM_Undo 9386 11.75 31.00 2.80 84 T_HTML_ATTACH 8882 2.10 0.92 2.65 85 T_TooManySym_02 8746 2.01 0.71 2.61 86 XMNumbers 8710 2.97 3.76 2.60 87 XM_B_SpammyTLD 8521 2.81 3.37 2.54 88 MAILING_LIST_MULTI 8472 2.25 1.66 2.53 89 HELO_NODOT 8230 1.79 0.36 2.46 90 HELO_NO_DOMAIN 8227 1.79 0.36 2.46 91 MIME_HTML_MOSTLY 8049 2.98 4.22 2.40 92 TooManyTo_002 8030 1.91 0.85 2.40 93 RCVD_IN_IADB_VOUCHED 7999 1.84 0.65 2.39 94 T_XMDrugObfuBody_14 7595 2.93 4.34 2.27 95 TR_XM_SpammyRelay 7555 4.97 10.81 2.26 96 INVALID_MSGID 7465 1.58 0.17 2.23 97 MIME_HTML_ONLY_MULTI 7367 2.50 3.14 2.20 98 HTML_MIME_NO_HTML_TAG 7284 1.97 1.53 2.18 99 DKIM_INVALID 7121 2.85 4.42 2.13 100 BAYES_05 6975 1.68 0.80 2.08 101 XM_DK_Undo_01 6811 1.92 1.67 2.03 102 TR_DCC_Bayes_99 6810 9.12 24.36 2.03 103 HTML_IMAGE_RATIO_08 6557 2.45 3.49 1.96 104 FROM_EXCESS_BASE64 6298 2.01 2.29 1.88 105 TO_MALFORMED 6228 1.31 0.12 1.86 106 RELAYCOUNTRY_CA 5790 2.92 5.48 1.73 107 XM_B_Investor 5634 2.47 4.15 1.68 108 RCVD_IN_IADB_OPTIN 5578 1.26 0.38 1.67 109 TR_Symld_Words 5385 1.45 1.10 1.61 110 TM2_M_URI_OPT_OUT 5383 1.92 2.59 1.61 111 TVD_RCVD_IP 5378 1.34 0.76 1.61 112 URI_HEX 5171 1.55 1.55 1.54 113 BOTNET 5170 3.98 9.23 1.54 114 TM2_M_VERY_LONG_WORD 5135 2.13 3.41 1.53 115 XMGappySubj_01 5050 1.21 0.58 1.51 116 T_XMDrugObfuBody_08 5043 2.08 3.32 1.51 117 XMDiploma_00 5023 1.88 2.71 1.50 118 SUBJ_ALL_CAPS 5015 1.82 2.52 1.50 119 XMSexyCombo_05 4873 2.12 3.56 1.46 120 XM_B_SEO 4809 2.58 5.05 1.44 121 IN_HORDE_ADDRESS_BOOK 4802 1.00 0.07 1.43 122 UNTRUSTED_Relay 4739 2.97 6.32 1.42 123 MISSING_HEADERS 4602 1.09 0.47 1.37 124 TR_LOTS_OF_MONEY3 4484 2.78 5.89 1.34 125 TR_XM_UnparsRelay 4428 3.02 6.66 1.32 126 TR_MetaPhish_Combo_01 4332 1.18 0.93 1.29 127 XM_OfRef6 4331 2.17 4.05 1.29 128 XM_SendGrid 4326 1.24 1.13 1.29 129 TooManyTo_003 4272 1.11 0.76 1.28 130 KHOP_HELO_FCRDNS 4270 1.31 1.39 1.28 131 XM_B_Unsub2 4222 1.57 2.23 1.26 132 URI_NOVOWEL 4115 1.31 1.48 1.23 133 XMBSHREFv2 4059 0.96 0.42 1.21 134 TR_XM_PhishingBody 4048 2.30 4.66 1.21 135 XMStockSpam_06 3979 1.53 2.26 1.19 136 TR_XM_SpammyWords5 3956 2.07 3.98 1.18 137 XM_GoogleGroups 3934 0.99 0.59 1.17 138 TVD_SPACE_RATIO 3778 0.81 0.14 1.13 139 TR_XM_SpammyWords2 3688 4.57 12.04 1.10 140 XM_B_SpammyWords4 3619 1.41 2.13 1.08 141 URI_TRY_3LD 3576 1.41 2.13 1.07 142 TR_XM_NoHeadersAttach 3442 0.72 0.05 1.03 143 REPLYTO_WITHOUT_TO_CC 3433 0.76 0.19 1.03 144 XMBrknScrpt_02 3323 1.28 1.91 0.99 145 T_FILL_THIS_FORM_SHORT 3308 1.23 1.74 0.99 146 TR_XM_SEO4 3210 2.08 4.48 0.96 147 TooManyTo_004 3200 0.88 0.71 0.96 148 XM_H_Long_From02 3161 0.98 1.07 0.94 149 XMCapTrack 3159 0.79 0.47 0.94 150 FROM_GOV_DKIM_AU 3085 0.69 0.21 0.92 151 T_TooManySym_03 3009 0.70 0.27 0.90 152 TR_XM_DK_SendGrid 2904 0.83 0.74 0.87 153 RELAYCOUNTRY_AU 2904 1.37 2.45 0.87 154 DKIM_ADSP_CUSTOM_MED 2802 0.97 1.26 0.84 155 XM_B_COPY_HTML 2760 0.89 1.03 0.82 156 XM_UB50 2752 1.71 3.63 0.82 157 TO_NO_BRKTS_HTML_ONLY 2748 0.62 0.18 0.82 158 T_XMDrugObfuBody_00 2739 1.00 1.40 0.82 159 XMSubMetaSxObfu_03 2737 0.80 0.76 0.82 160 HTTPS_HTTP_MISMATCH 2692 0.90 1.10 0.80 161 XMBody_17 2637 2.49 6.16 0.79 162 TooManyTo_005 2629 0.75 0.67 0.79 163 XMGenDplmaNmb 2587 0.93 1.27 0.77 164 XMGappySubj_02 2534 0.56 0.14 0.76 165 RCVD_IN_BL_SPAMCOP_NET 2517 3.36 8.99 0.75 166 XMBdyGiftCard01 2421 0.77 0.87 0.72 167 SpammyFromTLD_01 2300 0.98 1.60 0.69 168 HTML_IMAGE_ONLY_20 2290 0.59 0.39 0.68 169 XM_B_FormFill 2209 0.47 0.06 0.66 170 XMBody_95 2199 0.52 0.23 0.66 171 TR_XM_Base64_M1 2168 0.90 1.43 0.65 172 XM_ProductURIs 2139 0.67 0.73 0.64 173 XM_ShortIntro_01 2077 0.56 0.44 0.62 174 USER_IN_WELCOMELIST 2012 0.41 0.00 0.60 175 USER_IN_WHITELIST 2012 0.41 0.00 0.60 176 T_XMHurry_00 1991 1.27 2.73 0.59 177 T_OBFU_PDF_ATTACH 1968 0.53 0.39 0.59 178 HTML_TAG_BALANCE_BODY 1965 0.96 1.75 0.59 179 XMNoVowels 1914 0.54 0.48 0.57 180 XM_H_PHPMailer 1910 0.60 0.66 0.57 181 SpammyFromTLD_02 1864 0.78 1.26 0.56 182 NML_ADSP_CUSTOM_MED 1862 0.69 0.98 0.56 183 XM_B_DNDMA 1834 0.70 1.02 0.55 184 MPART_ALT_DIFF_COUNT 1733 0.66 0.96 0.52 185 MIME_HEADER_CTYPE_ONLY 1723 0.41 0.19 0.51 186 HTML_IMAGE_ONLY_32 1704 0.39 0.13 0.51 187 FORGED_GMAIL_RCVD 1628 0.67 1.06 0.49 188 HTML_FONT_FACE_BAD 1568 0.62 0.94 0.47 189 TR_XM_SPAMCOP 1549 2.60 7.19 0.46 190 SHORT_HELO_AND_INLINE_IMAGE 1546 0.33 0.06 0.46 191 XMSubMetaI_00 1526 0.81 1.56 0.46 192 TM2_M_OBFU_COMMENT 1492 0.53 0.72 0.45 193 RCVD_IN_PSBL 1471 0.47 0.54 0.44 194 HTML_IMAGE_ONLY_28 1411 0.39 0.31 0.42 195 RELAYCOUNTRY_GB 1406 0.47 0.58 0.42 196 T_TVD_MIME_NO_HEADERS 1361 0.32 0.13 0.41 197 T_Symld_Words_02 1346 0.54 0.83 0.40 198 XMLngstWrd_00 1316 0.53 0.81 0.39 199 XMDateMe_00 1299 0.38 0.35 0.39 200 XMMoneyMeta_00 1278 0.49 0.72 0.38 ----------------------------------------------------------------------