Email: 532525 Autolearn: 0 AvgScore: 4.56 AvgScanTime: 1.20 sec Spam: 177747 Autolearn: 0 AvgScore: 13.25 AvgScanTime: 1.34 sec Ham: 354778 Autolearn: 0 AvgScore: 0.20 AvgScanTime: 1.13 sec Time Spent Running SA: 177.98 hours Time Spent Processing Spam: 66.33 hours Time Spent Processing Ham: 111.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 171127 89.77 96.28 86.51 2 DKIM_SIGNED 164842 81.56 92.74 75.96 3 XM_DK_Pass 158622 79.47 89.24 74.57 4 DKIM_VALID 156694 78.45 88.16 73.59 5 XM_B_Unicode 153984 75.50 86.63 69.92 6 RELAYCOUNTRY_US 153576 82.57 86.40 80.65 7 DCC_CHECK 137333 52.34 77.26 39.85 8 XMListUnsubscribeExists 130984 58.65 73.69 51.11 9 XM_B_SpammyWords 127270 54.59 71.60 46.07 10 DKIM_VALID_AU 127215 63.51 71.57 59.47 11 LOC_TINY_FONT_1 84500 34.05 47.54 27.29 12 XM_DK_Undo_02 84114 19.70 47.32 5.86 13 XM_B_Unicode3 80267 42.78 45.16 41.60 14 XM_B_SpammyWords2 71594 26.41 40.28 19.46 15 HTML_FONT_LOW_CONTRAST 69899 31.99 39.32 28.32 16 BAYES_50 67470 53.32 37.96 61.02 17 RCVD_IN_MSPIKE_H2 66131 33.00 37.21 30.89 18 BAYES_99 65745 14.98 36.99 3.96 19 FVGT_m_MULTI_ODD 64145 29.18 36.09 25.72 20 TR_XM_DKIM_Undo 61216 13.35 34.44 2.79 21 T_KAM_HTML_FONT_INVALID 57469 25.07 32.33 21.42 22 BAYES_999 53704 12.06 30.21 2.97 23 TR_DCC_Bayes_99 49519 10.40 27.86 1.66 24 DKIM_VALID_EF 47489 27.34 26.72 27.65 25 MIME_HTML_ONLY 45572 21.98 25.64 20.15 26 DCC_CHECK_NEGATIVE 40389 47.63 22.72 60.10 27 XMSubLong 38890 22.46 21.88 22.74 28 T_TM2_M_HEADER_IN_MSG 38395 26.64 21.60 29.16 29 XM_Multi_Part_URI 35209 16.96 19.81 15.53 30 TR_XM_DK_Unsub 33969 14.65 19.11 12.42 31 LOTS_OF_MONEY 32370 10.87 18.21 7.19 32 XM_B_Unsub 29007 11.17 16.32 8.59 33 UNPARSEABLE_RELAY 27728 12.18 15.60 10.46 34 TR_XM_BayesUnsub 27721 9.89 15.60 7.03 35 TR_XM_SpammyWords4 26554 8.32 14.94 5.00 36 RELAYCOUNTRY_META 25842 7.69 14.54 4.26 37 TR_MAX_INTL_RELAY 24813 9.14 13.96 6.72 38 BOTNET_IPINHOSTNAME 24665 7.11 13.88 3.72 39 TR_XM_SpammyWords2 24254 4.96 13.65 0.60 40 XM_B_SpammyWords3 24178 7.84 13.60 4.96 41 TR_XM_SpammyRelay 17853 5.02 10.04 2.50 42 XM_Evil_Numbers_Gen 17401 9.17 9.79 8.87 43 FSL_BULK_SIG 16850 7.29 9.48 6.19 44 BOTNET 16086 4.21 9.05 1.78 45 BAYES_80 15623 5.69 8.79 4.14 46 RCVD_IN_BL_SPAMCOP_NET 15284 3.37 8.60 0.76 47 TR_XM_UnparsRelay 15165 3.89 8.53 1.56 48 LotsOfNums_01 13903 8.38 7.82 8.66 49 BAYES_60 13358 8.51 7.52 9.01 50 TR_XM_SPAMCOP 12093 2.55 6.80 0.42 51 HTML_IMAGE_RATIO_02 11435 5.63 6.43 5.23 52 UNTRUSTED_Relay 11021 3.02 6.20 1.42 53 XM_B_PhoneNumber 11000 8.45 6.19 9.58 54 XM_Body_Dirty_Words 10875 3.62 6.12 2.37 55 MPART_ALT_DIFF 10791 4.75 6.07 4.08 56 XMSubMetaSx_00 10689 4.53 6.01 3.79 57 XM_H_Long_From01 10273 5.66 5.78 5.59 58 HTML_IMAGE_RATIO_06 10263 3.85 5.77 2.88 59 XM_UncommonTLD01 10223 4.50 5.75 3.87 60 XMBody_17 9708 2.19 5.46 0.54 61 XM_B_SEO 9448 2.54 5.32 1.15 62 RELAYCOUNTRY_CA 9044 2.49 5.09 1.19 63 XM_B_Phish_Phrases 9029 4.18 5.08 3.74 64 HTML_IMAGE_RATIO_04 8952 4.70 5.04 4.53 65 XM_SPF_SoftFail 8949 2.91 5.03 1.85 66 BAYES_95 8594 3.33 4.83 2.57 67 XM_B_Investor 8555 2.59 4.81 1.48 68 TR_XM_SEO4 8505 2.04 4.78 0.67 69 DKIM_INVALID 8148 3.11 4.58 2.37 70 HTML_IMAGE_RATIO_08 7816 2.80 4.40 2.00 71 TR_XM_SpammyWords5 7725 2.41 4.35 1.44 72 RCVD_IN_VALIDITY_SAFE 7643 4.48 4.30 4.57 73 XM_H_GMP 7635 4.62 4.30 4.78 74 TooManyTo_001 7469 6.81 4.20 8.12 75 TR_LOTS_OF_MONEY3 7328 1.76 4.12 0.58 76 T_XMDrugObfuBody_14 7245 2.54 4.08 1.77 77 T_MONEY_PERCENT 7144 1.55 4.02 0.31 78 TR_LOTS_OF_MONEY2 7144 1.55 4.02 0.31 79 XMSexyCombo_05 7029 2.40 3.95 1.61 80 TR_XM_PhishingBody 6989 2.42 3.93 1.66 81 MIME_HTML_ONLY_MULTI 6882 2.84 3.87 2.33 82 TM2_M_VERY_LONG_WORD 6670 2.07 3.75 1.22 83 XM_B_SpammyTLD 6528 4.25 3.67 4.54 84 XMStrtUSub 6459 4.26 3.63 4.58 85 MIME_HTML_MOSTLY 6224 2.85 3.50 2.52 86 T_XMDrugObfuBody_08 6119 2.13 3.44 1.48 87 RCVD_IN_VALIDITY_CERTIFIED 6038 3.65 3.40 3.78 88 USER_IN_DEF_DKIM_WL 5974 11.04 3.36 14.89 89 XMNumbers 5956 2.81 3.35 2.53 90 MIME_QP_LONG_LINE 5935 4.58 3.34 5.21 91 TM2_M_URI_OPT_OUT 5698 2.27 3.21 1.80 92 XM_URI_RBL 5587 1.23 3.14 0.27 93 XM_CamelCaseFrm001 5546 2.64 3.12 2.40 94 XMBrknScrpt_02 5211 1.57 2.93 0.89 95 RCVD_IN_MSPIKE_WL 5168 4.87 2.91 5.85 96 RCVD_IN_MSPIKE_H3 5168 4.87 2.91 5.85 97 XM_UB50 4979 1.52 2.80 0.88 98 SUBJ_ALL_CAPS 4977 2.05 2.80 1.67 99 XM_OfRef6 4925 1.59 2.77 1.00 100 RELAYCOUNTRY_AU 4353 1.48 2.45 1.00 101 XM_B_SpammyWords4 4353 1.31 2.45 0.73 102 T_TooManySym_01 4125 4.33 2.32 5.33 103 XM_B_Unsub2 4045 1.86 2.28 1.66 104 RCVD_IN_VALIDITY_RPBL 4003 0.89 2.25 0.20 105 XMDiploma_00 3821 1.79 2.15 1.61 106 FROM_EXCESS_BASE64 3756 1.92 2.11 1.82 107 SpammyFromTLD_02 3536 0.92 1.99 0.39 108 T_XMDrugObfuBody_00 3506 1.26 1.97 0.90 109 T_XMHurry_00 3474 1.02 1.95 0.56 110 MAILING_LIST_MULTI 3456 2.69 1.94 3.06 111 XM_DK_Undo_01 3312 1.89 1.86 1.91 112 XMStockSpam_06 3085 1.71 1.74 1.70 113 SpammyFromTLD_01 3081 1.19 1.73 0.92 114 T_REMOTE_IMAGE 3068 2.77 1.73 3.29 115 TR_XM_NoHeaderRelay 2938 0.66 1.65 0.16 116 URI_HEX 2888 1.37 1.62 1.25 117 BAYES_40 2775 3.93 1.56 5.11 118 XM_SendGrid 2747 1.35 1.55 1.25 119 HTML_TAG_BALANCE_BODY 2660 0.83 1.50 0.49 120 RCVD_IN_IADB_LISTED 2643 3.29 1.49 4.19 121 URI_TRY_3LD 2643 1.06 1.49 0.85 122 T_FILL_THIS_FORM_SHORT 2486 1.11 1.40 0.97 123 TR_XM_INV_DKIM 2444 0.50 1.37 0.07 124 HTML_MIME_NO_HTML_TAG 2403 2.01 1.35 2.34 125 TR_Symld_Words 2315 1.50 1.30 1.60 126 THIS_AD 2303 0.76 1.30 0.49 127 RCVD_IN_IADB_SPF 2265 2.88 1.27 3.69 128 URI_NOVOWEL 2198 2.79 1.24 3.56 129 XM_H_Long_From02 2175 1.21 1.22 1.21 130 XMGenDplmaNmb 2130 0.89 1.20 0.74 131 RCVD_IN_IADB_SENDERID 2100 2.59 1.18 3.29 132 RCVD_IN_IADB_DK 2097 2.51 1.18 3.18 133 TR_XM_PHPDW 2097 0.59 1.18 0.29 134 XM_B_COPY_HTML 2097 0.77 1.18 0.57 135 TR_XM_PHPForged 2044 0.57 1.15 0.28 136 XM_HighProb1 2032 0.39 1.14 0.01 137 XMPhish30 2026 0.72 1.14 0.52 138 XMMoneyMeta_00 2008 0.76 1.13 0.58 139 TR_XM_FormFill2 2006 0.57 1.13 0.28 140 XM_H_PHPOS 1997 0.56 1.12 0.27 141 XM_ProductURIs 1980 1.18 1.11 1.21 142 KHOP_HELO_FCRDNS 1948 1.22 1.10 1.29 143 LongTLD 1942 0.63 1.09 0.40 144 BAYES_20 1926 2.55 1.08 3.29 145 DKIM_ADSP_CUSTOM_MED 1883 0.88 1.06 0.80 146 HTTPS_HTTP_MISMATCH 1867 0.95 1.05 0.90 147 URIBL_DBL_SPAM 1856 0.35 1.04 0.01 148 XM_B_DNDMA 1843 0.86 1.04 0.77 149 ALL_TRUSTED 1835 11.10 1.03 16.14 150 XMReplyNow 1828 0.51 1.03 0.25 151 MPART_ALT_DIFF_COUNT 1811 0.71 1.02 0.55 152 TR_MetaPhish_Combo_01 1794 0.78 1.01 0.66 153 XM_UB99 1774 0.34 1.00 0.01 154 TR_XM_InvalidRelay 1761 0.35 0.99 0.02 155 BOTNET_NORDNS 1756 0.33 0.99 0.01 156 XMBdyGiftCard01 1737 1.03 0.98 1.05 157 XM_ShortIntro_01 1725 0.79 0.97 0.70 158 XMHTML_After_End 1718 0.52 0.97 0.30 159 T_STY_INVIS_DIRECT 1713 0.48 0.96 0.24 160 TR_XM_Base64_M1 1702 0.82 0.96 0.75 161 XMSubMetaI_00 1692 0.92 0.95 0.90 162 FROM_GOV_DKIM_AU 1692 0.98 0.95 1.00 163 XM_UB80 1680 0.33 0.95 0.02 164 XMPhish14 1671 0.62 0.94 0.45 165 TR_XM_Spammywords 1650 0.48 0.93 0.25 166 XM_S_SpammyWords 1650 0.48 0.93 0.25 167 XMHTMLBadTable_001 1644 0.52 0.92 0.32 168 RELAYCOUNTRY_FR 1640 0.45 0.92 0.22 169 XMSubMetaSxObfu_03 1598 1.02 0.90 1.07 170 TR_XM_DK_SendGrid 1580 0.85 0.89 0.84 171 XM_B_REG_HTML 1576 0.48 0.89 0.28 172 SHOPIFY_IMG_NOT_RCVD_SFY 1571 0.52 0.88 0.34 173 NML_ADSP_CUSTOM_MED 1559 0.64 0.88 0.51 174 TR_Mismatch_TLD_02 1526 0.33 0.86 0.06 175 TR_Caps_n_Bayes_99 1520 0.32 0.86 0.06 176 XM_B_Phish66 1510 0.48 0.85 0.29 177 RDNS_DYNAMIC 1509 0.51 0.85 0.35 178 FORGED_GMAIL_RCVD 1492 0.60 0.84 0.48 179 XM_DIRTYINTL 1491 0.38 0.84 0.15 180 XM_UB60 1472 0.31 0.83 0.05 181 PDS_RDNS_DYNAMIC_FP 1462 0.41 0.82 0.20 182 LOADSA_MONEY_COMBO 1457 0.34 0.82 0.09 183 AC_BR_BONANZA 1451 0.32 0.82 0.08 184 TR_Mismatch_TLD_01 1429 0.42 0.80 0.23 185 PLING_QUERY 1397 0.51 0.79 0.38 186 TR_XM_RelayPhish 1376 0.29 0.77 0.05 187 RCVD_IN_IADB_VOUCHED 1372 2.08 0.77 2.73 188 BAYES_00 1356 6.20 0.76 8.93 189 DKIM_ADSP_NXDOMAIN 1341 0.45 0.75 0.30 190 T_Symld_Words_02 1339 0.67 0.75 0.62 191 T_TooManySym_02 1310 2.19 0.74 2.92 192 TVD_RCVD_IP 1304 0.59 0.73 0.52 193 XM_UB999 1295 0.25 0.73 0.01 194 XMSexyCombo_01 1274 0.33 0.72 0.13 195 ANY_BOUNCE_MESSAGE 1268 2.24 0.71 3.00 196 BOUNCE_MESSAGE 1264 2.24 0.71 3.00 197 RELAYCOUNTRY_GB 1254 0.56 0.71 0.49 198 DIET_1 1244 0.38 0.70 0.21 199 XFER_LOTSA_MONEY 1241 0.26 0.70 0.04 200 RCVD_IN_PSBL 1229 0.29 0.69 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 306924 89.77 96.28 86.51 2 RELAYCOUNTRY_US 286140 82.57 86.40 80.65 3 DKIM_SIGNED 269491 81.56 92.74 75.96 4 XM_DK_Pass 264568 79.47 89.24 74.57 5 DKIM_VALID 261080 78.45 88.16 73.59 6 XM_B_Unicode 248052 75.50 86.63 69.92 7 BAYES_50 216473 53.32 37.96 61.02 8 DCC_CHECK_NEGATIVE 213230 47.63 22.72 60.10 9 DKIM_VALID_AU 210982 63.51 71.57 59.47 10 XMListUnsubscribeExists 181344 58.65 73.69 51.11 11 XM_B_SpammyWords 163441 54.59 71.60 46.07 12 XM_B_Unicode3 147573 42.78 45.16 41.60 13 DCC_CHECK 141389 52.34 77.26 39.85 14 RCVD_IN_MSPIKE_H2 109599 33.00 37.21 30.89 15 T_TM2_M_HEADER_IN_MSG 103468 26.64 21.60 29.16 16 HTML_FONT_LOW_CONTRAST 100464 31.99 39.32 28.32 17 DKIM_VALID_EF 98112 27.34 26.72 27.65 18 LOC_TINY_FONT_1 96817 34.05 47.54 27.29 19 FVGT_m_MULTI_ODD 91260 29.18 36.09 25.72 20 XMSubLong 80689 22.46 21.88 22.74 21 T_KAM_HTML_FONT_INVALID 76011 25.07 32.33 21.42 22 MIME_HTML_ONLY 71481 21.98 25.64 20.15 23 XM_B_SpammyWords2 69051 26.41 40.28 19.46 24 ALL_TRUSTED 57276 11.10 1.03 16.14 25 XM_Multi_Part_URI 55111 16.96 19.81 15.53 26 USER_IN_DEF_DKIM_WL 52837 11.04 3.36 14.89 27 TR_XM_DK_Unsub 44056 14.65 19.11 12.42 28 UNPARSEABLE_RELAY 37117 12.18 15.60 10.46 29 XM_B_PhoneNumber 33972 8.45 6.19 9.58 30 BAYES_60 31956 8.51 7.52 9.01 31 BAYES_00 31684 6.20 0.76 8.93 32 XM_Evil_Numbers_Gen 31455 9.17 9.79 8.87 33 LotsOfNums_01 30732 8.38 7.82 8.66 34 XM_B_Unsub 30463 11.17 16.32 8.59 35 TooManyTo_001 28794 6.81 4.20 8.12 36 LOTS_OF_MONEY 25505 10.87 18.21 7.19 37 XM_DKIMWhitelistDomains 25341 4.77 0.02 7.14 38 IN_ZIMBRA_NJ_WHITELIST 25011 4.73 0.09 7.05 39 TR_XM_BayesUnsub 24936 9.89 15.60 7.03 40 TR_MAX_INTL_RELAY 23838 9.14 13.96 6.72 41 TR_XM_DK_Bayes 22857 4.50 0.62 6.44 42 TR_XM_DK_Bayes1 22464 4.43 0.62 6.33 43 FSL_BULK_SIG 21978 7.29 9.48 6.19 44 XM_DK_Undo_02 20798 19.70 47.32 5.86 45 RCVD_IN_MSPIKE_WL 20746 4.87 2.91 5.85 46 RCVD_IN_MSPIKE_H3 20746 4.87 2.91 5.85 47 XM_H_Long_From01 19845 5.66 5.78 5.59 48 T_TooManySym_01 18919 4.33 2.32 5.33 49 TR_XM_DK_Bayes2 18910 3.70 0.46 5.33 50 HTML_IMAGE_RATIO_02 18569 5.63 6.43 5.23 51 MIME_QP_LONG_LINE 18473 4.58 3.34 5.21 52 BAYES_40 18133 3.93 1.56 5.11 53 TR_XM_SpammyWords4 17750 8.32 14.94 5.00 54 XM_B_SpammyWords3 17598 7.84 13.60 4.96 55 XM_H_GMP 16974 4.62 4.30 4.78 56 XMStrtUSub 16236 4.26 3.63 4.58 57 RCVD_IN_VALIDITY_SAFE 16218 4.48 4.30 4.57 58 XM_B_SpammyTLD 16093 4.25 3.67 4.54 59 HTML_IMAGE_RATIO_04 16062 4.70 5.04 4.53 60 XM_PDF 15910 3.17 0.56 4.48 61 RELAYCOUNTRY_META 15124 7.69 14.54 4.26 62 RCVD_IN_IADB_LISTED 14853 3.29 1.49 4.19 63 BAYES_80 14697 5.69 8.79 4.14 64 MPART_ALT_DIFF 14479 4.75 6.07 4.08 65 BAYES_99 14032 14.98 36.99 3.96 66 XM_UncommonTLD01 13729 4.50 5.75 3.87 67 XMSubMetaSx_00 13434 4.53 6.01 3.79 68 RCVD_IN_VALIDITY_CERTIFIED 13421 3.65 3.40 3.78 69 XM_B_Phish_Phrases 13253 4.18 5.08 3.74 70 BOTNET_IPINHOSTNAME 13196 7.11 13.88 3.72 71 RCVD_IN_IADB_SPF 13097 2.88 1.27 3.69 72 URI_NOVOWEL 12641 2.79 1.24 3.56 73 RCVD_IN_IADB_SENDERID 11683 2.59 1.18 3.29 74 BAYES_20 11679 2.55 1.08 3.29 75 T_REMOTE_IMAGE 11671 2.77 1.73 3.29 76 RCVD_IN_IADB_DK 11291 2.51 1.18 3.18 77 MAILING_LIST_MULTI 10856 2.69 1.94 3.06 78 ANY_BOUNCE_MESSAGE 10645 2.24 0.71 3.00 79 BOUNCE_MESSAGE 10645 2.24 0.71 3.00 80 BAYES_999 10524 12.06 30.21 2.97 81 T_TooManySym_02 10357 2.19 0.74 2.92 82 HTML_IMAGE_RATIO_06 10232 3.85 5.77 2.88 83 TR_XM_DKIM_Undo 9888 13.35 34.44 2.79 84 RCVD_IN_IADB_VOUCHED 9701 2.08 0.77 2.73 85 TooManyTo_002 9141 1.92 0.62 2.58 86 BAYES_95 9131 3.33 4.83 2.57 87 XMNumbers 8993 2.81 3.35 2.53 88 MIME_HTML_MOSTLY 8933 2.85 3.50 2.52 89 TR_XM_SpammyRelay 8884 5.02 10.04 2.50 90 XM_CamelCaseFrm001 8524 2.64 3.12 2.40 91 DKIM_INVALID 8411 3.11 4.58 2.37 92 XM_Body_Dirty_Words 8392 3.62 6.12 2.37 93 HTML_MIME_NO_HTML_TAG 8318 2.01 1.35 2.34 94 MIME_HTML_ONLY_MULTI 8264 2.84 3.87 2.33 95 INVALID_MSGID 7474 1.45 0.14 2.11 96 HTML_IMAGE_RATIO_08 7091 2.80 4.40 2.00 97 RCVD_IN_IADB_OPTIN 7088 1.49 0.48 2.00 98 BAYES_05 6993 1.48 0.51 1.97 99 XM_DK_Undo_01 6759 1.89 1.86 1.91 100 XM_SPF_SoftFail 6568 2.91 5.03 1.85 101 TO_MALFORMED 6467 1.22 0.00 1.82 102 FROM_EXCESS_BASE64 6464 1.92 2.11 1.82 103 TM2_M_URI_OPT_OUT 6401 2.27 3.21 1.80 104 BOTNET 6309 4.21 9.05 1.78 105 T_XMDrugObfuBody_14 6289 2.54 4.08 1.77 106 HELO_NODOT 6103 1.24 0.28 1.72 107 HELO_NO_DOMAIN 6097 1.24 0.28 1.72 108 XMStockSpam_06 6031 1.71 1.74 1.70 109 SUBJ_ALL_CAPS 5923 2.05 2.80 1.67 110 TR_DCC_Bayes_99 5885 10.40 27.86 1.66 111 TR_XM_PhishingBody 5874 2.42 3.93 1.66 112 XM_B_Unsub2 5873 1.86 2.28 1.66 113 XMSexyCombo_05 5728 2.40 3.95 1.61 114 XMDiploma_00 5698 1.79 2.15 1.61 115 TR_Symld_Words 5667 1.50 1.30 1.60 116 TR_XM_UnparsRelay 5539 3.89 8.53 1.56 117 TooManyTo_003 5265 1.17 0.54 1.48 118 XM_B_Investor 5256 2.59 4.81 1.48 119 T_XMDrugObfuBody_08 5238 2.13 3.44 1.48 120 TR_XM_SpammyWords5 5126 2.41 4.35 1.44 121 UNTRUSTED_Relay 5045 3.02 6.20 1.42 122 IN_HORDE_ADDRESS_BOOK 5007 0.97 0.08 1.41 123 KHOP_HELO_FCRDNS 4568 1.22 1.10 1.29 124 XM_SendGrid 4428 1.35 1.55 1.25 125 URI_HEX 4426 1.37 1.62 1.25 126 TM2_M_VERY_LONG_WORD 4330 2.07 3.75 1.22 127 XM_H_Long_From02 4282 1.21 1.22 1.21 128 XM_ProductURIs 4279 1.18 1.11 1.21 129 RELAYCOUNTRY_CA 4228 2.49 5.09 1.19 130 TO_NO_BRKTS_HTML_ONLY 4178 0.85 0.20 1.18 131 XM_GoogleGroups 4151 0.97 0.56 1.17 132 XM_B_SEO 4073 2.54 5.32 1.15 133 XMGappySubj_01 3962 0.79 0.14 1.12 134 XM_TLDProd2 3935 0.84 0.30 1.11 135 TVD_SPACE_RATIO 3865 0.76 0.12 1.09 136 XMCapTrack 3861 0.87 0.44 1.09 137 XMSubMetaSxObfu_03 3813 1.02 0.90 1.07 138 TooManyTo_004 3750 0.87 0.50 1.06 139 XMBdyGiftCard01 3737 1.03 0.98 1.05 140 FROM_GOV_DKIM_AU 3553 0.98 0.95 1.00 141 XM_OfRef6 3545 1.59 2.77 1.00 142 RELAYCOUNTRY_AU 3544 1.48 2.45 1.00 143 T_FILL_THIS_FORM_SHORT 3435 1.11 1.40 0.97 144 SpammyFromTLD_01 3251 1.19 1.73 0.92 145 T_TooManySym_03 3220 0.68 0.24 0.91 146 T_XMDrugObfuBody_00 3194 1.26 1.97 0.90 147 HTTPS_HTTP_MISMATCH 3190 0.95 1.05 0.90 148 XMSubMetaI_00 3182 0.92 0.95 0.90 149 XMBrknScrpt_02 3154 1.57 2.93 0.89 150 TooManyTo_005 3108 0.74 0.47 0.88 151 XM_UB50 3107 1.52 2.80 0.88 152 URI_TRY_3LD 3023 1.06 1.49 0.85 153 TR_XM_DK_SendGrid 2969 0.85 0.89 0.84 154 XMBody_95 2953 0.60 0.14 0.83 155 DKIM_ADSP_CUSTOM_MED 2828 0.88 1.06 0.80 156 XM_B_DNDMA 2736 0.86 1.04 0.77 157 RCVD_IN_BL_SPAMCOP_NET 2683 3.37 8.60 0.76 158 TR_XM_Base64_M1 2661 0.82 0.96 0.75 159 T_OBFU_PDF_ATTACH 2622 0.54 0.14 0.74 160 XMGenDplmaNmb 2612 0.89 1.20 0.74 161 XM_B_SpammyWords4 2604 1.31 2.45 0.73 162 HTML_IMAGE_ONLY_32 2563 0.59 0.32 0.72 163 XM_ShortIntro_01 2478 0.79 0.97 0.70 164 TR_XM_SEO4 2365 2.04 4.78 0.67 165 TR_MetaPhish_Combo_01 2343 0.78 1.01 0.66 166 XMNoVowels 2291 0.59 0.46 0.65 167 T_Symld_Words_02 2215 0.67 0.75 0.62 168 TR_XM_SpammyWords2 2136 4.96 13.65 0.60 169 XM_RXBody 2064 0.51 0.35 0.58 170 XM_H_PHPMailer 2056 0.57 0.54 0.58 171 TR_LOTS_OF_MONEY3 2045 1.76 4.12 0.58 172 XMMoneyMeta_00 2043 0.76 1.13 0.58 173 XMGappySubj_02 2030 0.39 0.04 0.57 174 XM_B_COPY_HTML 2025 0.77 1.18 0.57 175 T_XMHurry_00 1981 1.02 1.95 0.56 176 MPART_ALT_DIFF_COUNT 1960 0.71 1.02 0.55 177 XMBody_17 1930 2.19 5.46 0.54 178 SHORT_HELO_AND_INLINE_IMAGE 1870 0.37 0.05 0.53 179 TVD_RCVD_IP 1862 0.59 0.73 0.52 180 XMLngstWrd_00 1849 0.47 0.37 0.52 181 XMPhish30 1830 0.72 1.14 0.52 182 NML_ADSP_CUSTOM_MED 1824 0.64 0.88 0.51 183 XMSubMetaSx_01 1821 0.45 0.32 0.51 184 HTML_TAG_BALANCE_BODY 1745 0.83 1.50 0.49 185 RELAYCOUNTRY_GB 1729 0.56 0.71 0.49 186 THIS_AD 1722 0.76 1.30 0.49 187 XMOemUri 1702 0.42 0.29 0.48 188 FORGED_GMAIL_RCVD 1691 0.60 0.84 0.48 189 XM_B_FormFill 1649 0.32 0.03 0.46 190 USER_IN_WHITELIST 1632 0.31 0.00 0.46 191 USER_IN_WELCOMELIST 1632 0.31 0.00 0.46 192 XMPhish14 1610 0.62 0.94 0.45 193 HTML_IMAGE_ONLY_28 1551 0.47 0.55 0.44 194 FILL_THIS_FORM 1521 0.35 0.20 0.43 195 TR_XM_SPAMCOP 1501 2.55 6.80 0.42 196 MSGID_FROM_MTA_HEADER 1478 0.31 0.10 0.42 197 MISSING_HEADERS 1475 0.48 0.61 0.42 198 HTML_IMAGE_ONLY_20 1456 0.45 0.53 0.41 199 TM2_M_BODY_EMPTY 1414 0.29 0.07 0.40 200 LongTLD 1408 0.63 1.09 0.40 ----------------------------------------------------------------------