Email: 552796 Autolearn: 0 AvgScore: 5.13 AvgScanTime: 1.48 sec Spam: 191344 Autolearn: 0 AvgScore: 14.33 AvgScanTime: 1.60 sec Ham: 361452 Autolearn: 0 AvgScore: 0.26 AvgScanTime: 1.41 sec Time Spent Running SA: 226.73 hours Time Spent Processing Spam: 84.86 hours Time Spent Processing Ham: 141.87 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 182584 90.03 95.42 87.18 2 DKIM_SIGNED 171097 80.67 89.42 76.04 3 XM_DK_Pass 164857 78.63 86.16 74.65 4 DKIM_VALID 162902 77.48 85.14 73.42 5 XM_B_Unicode 161693 75.30 84.50 70.44 6 RELAYCOUNTRY_US 160443 82.24 83.85 81.39 7 DCC_CHECK 145243 53.29 75.91 41.31 8 XM_B_SpammyWords 138350 54.90 72.30 45.69 9 XMListUnsubscribeExists 137127 58.04 71.67 50.82 10 DKIM_VALID_AU 130857 62.43 68.39 59.27 11 XM_B_Unicode3 89485 44.06 46.77 42.62 12 LOC_TINY_FONT_1 87224 33.24 45.58 26.71 13 XM_DK_Undo_02 85513 18.97 44.69 5.36 14 XM_B_SpammyWords2 84823 27.94 44.33 19.26 15 RCVD_IN_MSPIKE_H2 76005 34.40 39.72 31.58 16 HTML_FONT_LOW_CONTRAST 75803 32.91 39.62 29.36 17 BAYES_50 72190 52.90 37.73 60.93 18 BAYES_99 66049 14.39 34.52 3.73 19 FVGT_m_MULTI_ODD 65779 27.72 34.38 24.20 20 TR_XM_DKIM_Undo 63049 12.85 32.95 2.21 21 BAYES_999 53198 11.47 27.80 2.82 22 T_KAM_HTML_FONT_INVALID 53079 23.61 27.74 21.43 23 TR_DCC_Bayes_99 50862 10.17 26.58 1.48 24 DKIM_VALID_EF 50834 27.23 26.57 27.59 25 MIME_HTML_ONLY 49376 22.83 25.80 21.26 26 T_TM2_M_HEADER_IN_MSG 44629 26.46 23.32 28.11 27 DCC_CHECK_NEGATIVE 43457 46.21 22.71 58.64 28 XMSubLong 39983 22.45 20.90 23.27 29 XM_Multi_Part_URI 38093 16.84 19.91 15.21 30 TR_XM_DK_Unsub 36550 14.54 19.10 12.13 31 XM_B_Unsub 33695 12.91 17.61 10.42 32 TR_XM_BayesUnsub 32750 11.36 17.12 8.31 33 UNPARSEABLE_RELAY 29979 12.43 15.67 10.72 34 TR_MAX_INTL_RELAY 29424 9.41 15.38 6.25 35 LOTS_OF_MONEY 28860 9.40 15.08 6.40 36 TR_XM_SpammyWords2 27794 5.45 14.53 0.65 37 XM_B_SpammyWords3 26974 7.87 14.10 4.57 38 TR_XM_SpammyWords4 26000 7.49 13.59 4.27 39 RELAYCOUNTRY_META 25132 7.10 13.13 3.91 40 BOTNET_IPINHOSTNAME 23886 6.44 12.48 3.25 41 BAYES_80 19340 6.02 10.11 3.85 42 RCVD_IN_BL_SPAMCOP_NET 19279 3.98 10.08 0.76 43 TR_XM_SpammyRelay 18663 4.80 9.75 2.18 44 TR_XM_UnparsRelay 17124 4.38 8.95 1.96 45 XM_Evil_Numbers_Gen 16533 8.64 8.64 8.63 46 FSL_BULK_SIG 16152 7.23 8.44 6.58 47 BOTNET 14821 3.58 7.75 1.37 48 BAYES_60 14190 8.87 7.42 9.64 49 TR_XM_SPAMCOP 13858 2.79 7.24 0.44 50 XMSubMetaSx_00 13391 5.32 7.00 4.43 51 XM_Body_Dirty_Words 13323 4.34 6.96 2.95 52 LotsOfNums_01 12673 7.86 6.62 8.51 53 XM_UncommonTLD01 12662 4.88 6.62 3.97 54 HTML_IMAGE_RATIO_02 12012 5.76 6.28 5.48 55 XM_B_PhoneNumber 11576 9.10 6.05 10.71 56 MPART_ALT_DIFF 11417 4.78 5.97 4.16 57 XM_B_Phish_Phrases 10897 5.01 5.69 4.65 58 XM_H_Long_From01 10799 5.55 5.64 5.51 59 T_XMDrugObfuBody_14 10744 3.36 5.62 2.17 60 XM_SPF_SoftFail 10173 3.07 5.32 1.88 61 HTML_IMAGE_RATIO_04 10074 4.73 5.26 4.45 62 UNTRUSTED_Relay 10056 2.78 5.26 1.46 63 BAYES_95 9562 3.29 5.00 2.39 64 RELAYCOUNTRY_CA 9288 2.38 4.85 1.07 65 XM_B_SEO 9166 2.53 4.79 1.34 66 XM_B_Investor 9084 2.61 4.75 1.47 67 TM2_M_URI_OPT_OUT 8848 3.14 4.62 2.35 68 XMBody_17 8791 2.06 4.59 0.71 69 XMSexyCombo_05 8779 2.89 4.59 1.98 70 XM_H_GMP 8754 4.88 4.58 5.05 71 TR_XM_SEO4 8213 2.08 4.29 0.91 72 DKIM_INVALID 8195 3.19 4.28 2.61 73 TooManyTo_001 8025 7.41 4.19 9.11 74 HTML_IMAGE_RATIO_06 7780 3.44 4.07 3.10 75 TR_LOTS_OF_MONEY3 7776 1.77 4.06 0.55 76 XMDiploma_00 7722 2.88 4.04 2.27 77 RCVD_IN_VALIDITY_RPBL 7519 1.52 3.93 0.25 78 TR_XM_PhishingBody 7142 2.51 3.73 1.87 79 XM_OfRef6 7052 1.93 3.69 1.00 80 RCVD_IN_VALIDITY_SAFE 7032 4.51 3.68 4.95 81 ALL_TRUSTED 6682 11.35 3.49 15.51 82 MIME_HTML_ONLY_MULTI 6565 2.72 3.43 2.34 83 HTML_IMAGE_RATIO_08 6499 2.45 3.40 1.95 84 TM2_M_VERY_LONG_WORD 6420 2.01 3.36 1.30 85 XM_B_SpammyTLD 6359 3.66 3.32 3.84 86 XMBrknScrpt_02 6331 1.69 3.31 0.83 87 TR_XM_SpammyWords5 6275 2.13 3.28 1.52 88 XM_URI_RBL 6177 1.34 3.23 0.34 89 MIME_HTML_MOSTLY 6139 2.68 3.21 2.40 90 XMStrtUSub 5964 4.26 3.12 4.86 91 MIME_QP_LONG_LINE 5951 4.43 3.11 5.13 92 RCVD_IN_MSPIKE_H3 5928 4.71 3.10 5.56 93 RCVD_IN_MSPIKE_WL 5928 4.71 3.10 5.56 94 XMGenDplmaNmb 5879 2.07 3.07 1.54 95 XM_CamelCaseFrm001 5877 2.72 3.07 2.53 96 XM_B_URI_Unicode 5837 2.23 3.05 1.79 97 RCVD_IN_VALIDITY_CERTIFIED 5785 3.75 3.02 4.14 98 XMNumbers 5654 2.75 2.95 2.65 99 USER_IN_DEF_DKIM_WL 5637 9.90 2.95 13.58 100 XM_UB50 5419 1.56 2.83 0.89 101 T_XMDrugObfuBody_08 5061 1.95 2.64 1.58 102 XM_B_SpammyWords4 4467 1.21 2.33 0.61 103 RELAYCOUNTRY_AU 4232 1.30 2.21 0.82 104 SpammyFromTLD_02 4157 1.03 2.17 0.42 105 SUBJ_ALL_CAPS 4072 1.71 2.13 1.48 106 XM_B_Unsub2 4036 1.80 2.11 1.64 107 XM_SendGrid 3977 1.55 2.08 1.28 108 T_TooManySym_01 3962 4.00 2.07 5.03 109 SpammyFromTLD_01 3732 1.28 1.95 0.93 110 FROM_EXCESS_BASE64 3727 2.20 1.95 2.34 111 URI_NOVOWEL 3577 2.55 1.87 2.90 112 XM_DK_Undo_01 3485 1.82 1.82 1.82 113 MIME_HEADER_CTYPE_ONLY 3473 1.11 1.82 0.74 114 BAYES_40 3317 4.09 1.73 5.34 115 URI_HEX 3294 1.39 1.72 1.21 116 MAILING_LIST_MULTI 3232 2.54 1.69 2.99 117 TR_XM_NoHeaderRelay 2998 0.66 1.57 0.17 118 KHOP_HELO_FCRDNS 2981 1.28 1.56 1.13 119 RCVD_IN_IADB_LISTED 2967 3.23 1.55 4.12 120 T_XMDrugObfuBody_00 2935 1.17 1.53 0.98 121 XMStockSpam_06 2883 1.36 1.51 1.28 122 HTML_MIME_NO_HTML_TAG 2783 2.08 1.45 2.42 123 TR_Mismatch_TLD_01 2705 0.63 1.41 0.21 124 TR_XM_INV_DKIM 2666 0.53 1.39 0.07 125 T_XMHurry_00 2640 0.87 1.38 0.60 126 SHORTCIRCUIT 2621 0.47 1.37 0.00 127 RCVD_IN_ZEN_LASTEXTERNAL 2621 0.47 1.37 0.00 128 URI_TRY_3LD 2602 0.92 1.36 0.69 129 RCVD_IN_IADB_SPF 2567 2.82 1.34 3.60 130 HTML_TAG_BALANCE_BODY 2513 0.85 1.31 0.60 131 T_FILL_THIS_FORM_SHORT 2499 0.98 1.31 0.81 132 TR_XM_PHPDW 2433 0.66 1.27 0.34 133 TR_XM_PHPForged 2433 0.66 1.27 0.34 134 RCVD_IN_IADB_SENDERID 2398 2.53 1.25 3.20 135 XM_H_Long_From02 2397 1.19 1.25 1.16 136 TR_XM_FormFill2 2387 0.66 1.25 0.35 137 RCVD_IN_IADB_DK 2374 2.47 1.24 3.13 138 T_REMOTE_IMAGE 2366 2.77 1.24 3.59 139 XM_B_COPY_HTML 2365 0.97 1.24 0.83 140 XM_H_PHPOS 2361 0.64 1.23 0.33 141 XM_B_Phish66 2342 0.62 1.22 0.30 142 THIS_AD 2337 0.82 1.22 0.61 143 XMSubMetaI_00 2315 0.86 1.21 0.67 144 XM_HighProb1 2264 0.42 1.18 0.01 145 XM_B_DNDMA 2193 0.85 1.15 0.70 146 XMLngstWrd_00 2186 0.67 1.14 0.43 147 XMPhish30 2185 0.77 1.14 0.57 148 XMSexyCombo_01 2167 0.64 1.13 0.38 149 XMBdyGiftCard01 2118 0.95 1.11 0.87 150 HTTPS_HTTP_MISMATCH 2107 0.88 1.10 0.76 151 TR_Caps_n_Bayes_99 2102 0.40 1.10 0.02 152 XMLngstWrd_01 2082 0.62 1.09 0.37 153 XM_ProductURIs 2060 0.76 1.08 0.59 154 BAYES_20 2032 2.54 1.06 3.32 155 AC_BR_BONANZA 2028 0.42 1.06 0.09 156 T_STY_INVIS_DIRECT 1952 0.51 1.02 0.24 157 DKIM_ADSP_CUSTOM_MED 1897 0.88 0.99 0.82 158 T_MONEY_PERCENT 1885 0.51 0.99 0.26 159 TR_LOTS_OF_MONEY2 1885 0.51 0.99 0.26 160 DIET_1 1847 0.47 0.97 0.20 161 XMLngstWrd_02 1807 0.51 0.94 0.27 162 DKIM_ADSP_NXDOMAIN 1805 0.58 0.94 0.39 163 XM_DIRTYINTL 1742 0.42 0.91 0.15 164 XM_H_Undi_Recip 1723 0.45 0.90 0.21 165 FIN_FREE 1689 0.36 0.88 0.08 166 XMSubMetaSxObfu_03 1670 0.67 0.87 0.56 167 RCVD_IN_PSBL 1660 0.35 0.87 0.08 168 TR_XM_InvalidRelay 1633 0.32 0.85 0.03 169 RCVD_IN_PBL 1623 0.71 0.85 0.64 170 TR_MetaPhish_Combo_01 1618 0.71 0.85 0.64 171 XMReplyNow 1618 0.46 0.85 0.25 172 NML_ADSP_CUSTOM_MED 1604 0.62 0.84 0.50 173 RELAYCOUNTRY_IN 1591 0.32 0.83 0.04 174 XMHTML_After_End 1583 0.46 0.83 0.26 175 TR_XM_RelayPhish 1578 0.33 0.82 0.06 176 XM_UB99 1572 0.29 0.82 0.01 177 SHOPIFY_IMG_NOT_RCVD_SFY 1562 0.47 0.82 0.29 178 TR_XM_DK_SendGrid 1536 0.78 0.80 0.77 179 RELAYCOUNTRY_FR 1534 0.44 0.80 0.25 180 TR_XM_Base64_M1 1524 0.67 0.80 0.60 181 XMLngstWrd_03 1520 0.41 0.79 0.21 182 RCVD_IN_XBL 1518 0.30 0.79 0.03 183 RDNS_DYNAMIC 1516 0.50 0.79 0.35 184 LongTLD 1497 0.50 0.78 0.35 185 TooManyTo_002 1488 2.53 0.78 3.46 186 TM2_M_OBFU_COMMENT 1488 0.43 0.78 0.24 187 RCVD_IN_IADB_VOUCHED 1483 2.08 0.78 2.78 188 PDS_RDNS_DYNAMIC_FP 1466 0.40 0.77 0.20 189 HTML_FONT_FACE_BAD 1447 0.53 0.76 0.41 190 T_Symld_Words_02 1435 0.63 0.75 0.57 191 TR_Symld_Words 1428 1.21 0.75 1.45 192 MPART_ALT_DIFF_COUNT 1391 0.64 0.73 0.60 193 FORGED_GMAIL_RCVD 1385 0.56 0.72 0.47 194 TR_XM_Undi_Recip19 1383 0.29 0.72 0.06 195 XM_B_REG_HTML 1365 0.67 0.71 0.65 196 XMPhish14 1354 0.65 0.71 0.63 197 RELAYCOUNTRY_GB 1346 0.56 0.70 0.48 198 URIBL_BLACK 1289 0.27 0.67 0.06 199 TVD_RCVD_IP 1286 0.55 0.67 0.48 200 TR_XM_FormFill 1285 0.24 0.67 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 315122 90.03 95.42 87.18 2 RELAYCOUNTRY_US 294186 82.24 83.85 81.39 3 DKIM_SIGNED 274843 80.67 89.42 76.04 4 XM_DK_Pass 269824 78.63 86.16 74.65 5 DKIM_VALID 265392 77.48 85.14 73.42 6 XM_B_Unicode 254590 75.30 84.50 70.44 7 BAYES_50 220243 52.90 37.73 60.93 8 DKIM_VALID_AU 214240 62.43 68.39 59.27 9 DCC_CHECK_NEGATIVE 211970 46.21 22.71 58.64 10 XMListUnsubscribeExists 183692 58.04 71.67 50.82 11 XM_B_SpammyWords 165158 54.90 72.30 45.69 12 XM_B_Unicode3 154055 44.06 46.77 42.62 13 DCC_CHECK 149330 53.29 75.91 41.31 14 RCVD_IN_MSPIKE_H2 114143 34.40 39.72 31.58 15 HTML_FONT_LOW_CONTRAST 106128 32.91 39.62 29.36 16 T_TM2_M_HEADER_IN_MSG 101619 26.46 23.32 28.11 17 DKIM_VALID_EF 99707 27.23 26.57 27.59 18 LOC_TINY_FONT_1 96535 33.24 45.58 26.71 19 FVGT_m_MULTI_ODD 87479 27.72 34.38 24.20 20 XMSubLong 84094 22.45 20.90 23.27 21 T_KAM_HTML_FONT_INVALID 77447 23.61 27.74 21.43 22 MIME_HTML_ONLY 76835 22.83 25.80 21.26 23 XM_B_SpammyWords2 69617 27.94 44.33 19.26 24 ALL_TRUSTED 56068 11.35 3.49 15.51 25 XM_Multi_Part_URI 54976 16.84 19.91 15.21 26 USER_IN_DEF_DKIM_WL 49099 9.90 2.95 13.58 27 TR_XM_DK_Unsub 43849 14.54 19.10 12.13 28 UNPARSEABLE_RELAY 38739 12.43 15.67 10.72 29 XM_B_PhoneNumber 38705 9.10 6.05 10.71 30 XM_B_Unsub 37663 12.91 17.61 10.42 31 BAYES_60 34852 8.87 7.42 9.64 32 TooManyTo_001 32921 7.41 4.19 9.11 33 BAYES_00 32141 6.00 0.54 8.89 34 XM_Evil_Numbers_Gen 31203 8.64 8.64 8.63 35 LotsOfNums_01 30758 7.86 6.62 8.51 36 TR_XM_BayesUnsub 30042 11.36 17.12 8.31 37 XM_DKIMWhitelistDomains 25531 4.66 0.13 7.06 38 IN_ZIMBRA_NJ_WHITELIST 24683 4.50 0.09 6.83 39 FSL_BULK_SIG 23795 7.23 8.44 6.58 40 TR_XM_DK_Bayes 23756 4.44 0.42 6.57 41 LOTS_OF_MONEY 23120 9.40 15.08 6.40 42 TR_XM_DK_Bayes1 22741 4.26 0.41 6.29 43 TR_MAX_INTL_RELAY 22577 9.41 15.38 6.25 44 RCVD_IN_MSPIKE_WL 20099 4.71 3.10 5.56 45 RCVD_IN_MSPIKE_H3 20098 4.71 3.10 5.56 46 XM_H_Long_From01 19898 5.55 5.64 5.51 47 HTML_IMAGE_RATIO_02 19816 5.76 6.28 5.48 48 TR_XM_DK_Bayes2 19396 3.61 0.29 5.37 49 XM_DK_Undo_02 19376 18.97 44.69 5.36 50 BAYES_40 19318 4.09 1.73 5.34 51 MIME_QP_LONG_LINE 18555 4.43 3.11 5.13 52 XM_H_GMP 18244 4.88 4.58 5.05 53 T_TooManySym_01 18173 4.00 2.07 5.03 54 RCVD_IN_VALIDITY_SAFE 17901 4.51 3.68 4.95 55 XMStrtUSub 17578 4.26 3.12 4.86 56 XM_B_Phish_Phrases 16790 5.01 5.69 4.65 57 XM_B_SpammyWords3 16510 7.87 14.10 4.57 58 HTML_IMAGE_RATIO_04 16071 4.73 5.26 4.45 59 XMSubMetaSx_00 16008 5.32 7.00 4.43 60 TR_XM_SpammyWords4 15423 7.49 13.59 4.27 61 MPART_ALT_DIFF 15026 4.78 5.97 4.16 62 RCVD_IN_VALIDITY_CERTIFIED 14963 3.75 3.02 4.14 63 XM_PDF 14920 2.91 0.61 4.13 64 RCVD_IN_IADB_LISTED 14904 3.23 1.55 4.12 65 XM_UncommonTLD01 14340 4.88 6.62 3.97 66 RELAYCOUNTRY_META 14133 7.10 13.13 3.91 67 BAYES_80 13924 6.02 10.11 3.85 68 XM_B_SpammyTLD 13889 3.66 3.32 3.84 69 BAYES_99 13496 14.39 34.52 3.73 70 RCVD_IN_IADB_SPF 13020 2.82 1.34 3.60 71 T_REMOTE_IMAGE 12959 2.77 1.24 3.59 72 TooManyTo_002 12490 2.53 0.78 3.46 73 BAYES_20 12012 2.54 1.06 3.32 74 BOTNET_IPINHOSTNAME 11732 6.44 12.48 3.25 75 RCVD_IN_IADB_SENDERID 11567 2.53 1.25 3.20 76 RCVD_IN_IADB_DK 11301 2.47 1.24 3.13 77 HTML_IMAGE_RATIO_06 11215 3.44 4.07 3.10 78 MAILING_LIST_MULTI 10796 2.54 1.69 2.99 79 XM_Body_Dirty_Words 10645 4.34 6.96 2.95 80 URI_NOVOWEL 10492 2.55 1.87 2.90 81 BAYES_999 10211 11.47 27.80 2.82 82 RCVD_IN_IADB_VOUCHED 10041 2.08 0.78 2.78 83 XMNumbers 9564 2.75 2.95 2.65 84 ANY_BOUNCE_MESSAGE 9547 1.93 0.59 2.64 85 BOUNCE_MESSAGE 9547 1.93 0.59 2.64 86 DKIM_INVALID 9451 3.19 4.28 2.61 87 T_TooManySym_02 9176 1.86 0.58 2.54 88 XM_CamelCaseFrm001 9135 2.72 3.07 2.53 89 HTML_MIME_NO_HTML_TAG 8732 2.08 1.45 2.42 90 MIME_HTML_MOSTLY 8661 2.68 3.21 2.40 91 BAYES_95 8632 3.29 5.00 2.39 92 TM2_M_URI_OPT_OUT 8501 3.14 4.62 2.35 93 MIME_HTML_ONLY_MULTI 8474 2.72 3.43 2.34 94 FROM_EXCESS_BASE64 8461 2.20 1.95 2.34 95 XMDiploma_00 8210 2.88 4.04 2.27 96 TR_XM_DKIM_Undo 7994 12.85 32.95 2.21 97 TR_XM_SpammyRelay 7894 4.80 9.75 2.18 98 T_XMDrugObfuBody_14 7827 3.36 5.62 2.17 99 INVALID_MSGID 7350 1.37 0.11 2.03 100 XMSexyCombo_05 7170 2.89 4.59 1.98 101 TR_XM_UnparsRelay 7089 4.38 8.95 1.96 102 RCVD_IN_IADB_OPTIN 7072 1.45 0.49 1.96 103 HTML_IMAGE_RATIO_08 7040 2.45 3.40 1.95 104 BAYES_05 6832 1.42 0.53 1.89 105 XM_SPF_SoftFail 6807 3.07 5.32 1.88 106 TR_XM_PhishingBody 6748 2.51 3.73 1.87 107 XM_DK_Undo_01 6582 1.82 1.82 1.82 108 XM_B_URI_Unicode 6473 2.23 3.05 1.79 109 TO_MALFORMED 6439 1.17 0.02 1.78 110 XM_B_Unsub2 5929 1.80 2.11 1.64 111 T_XMDrugObfuBody_08 5698 1.95 2.64 1.58 112 XMGenDplmaNmb 5558 2.07 3.07 1.54 113 TR_XM_SpammyWords5 5490 2.13 3.28 1.52 114 SUBJ_ALL_CAPS 5365 1.71 2.13 1.48 115 TR_DCC_Bayes_99 5342 10.17 26.58 1.48 116 XM_B_Investor 5320 2.61 4.75 1.47 117 UNTRUSTED_Relay 5291 2.78 5.26 1.46 118 XM_B_FormFill 5273 1.03 0.22 1.46 119 TR_Symld_Words 5239 1.21 0.75 1.45 120 TooManyTo_003 4983 1.09 0.53 1.38 121 BOTNET 4947 3.58 7.75 1.37 122 IN_HORDE_ADDRESS_BOOK 4917 0.91 0.06 1.36 123 XM_GoogleGroups 4849 1.08 0.59 1.34 124 XM_B_SEO 4839 2.53 4.79 1.34 125 TM2_M_VERY_LONG_WORD 4716 2.01 3.36 1.30 126 XMStockSpam_06 4631 1.36 1.51 1.28 127 XM_SendGrid 4613 1.55 2.08 1.28 128 XMGappySubj_01 4400 0.84 0.13 1.22 129 URI_HEX 4388 1.39 1.72 1.21 130 XM_H_Long_From02 4198 1.19 1.25 1.16 131 KHOP_HELO_FCRDNS 4073 1.28 1.56 1.13 132 HELO_NODOT 3916 0.78 0.19 1.08 133 HELO_NO_DOMAIN 3910 0.77 0.19 1.08 134 RELAYCOUNTRY_CA 3857 2.38 4.85 1.07 135 XMCapTrack 3708 0.85 0.52 1.03 136 TVD_SPACE_RATIO 3670 0.70 0.10 1.02 137 XM_OfRef6 3619 1.93 3.69 1.00 138 TooManyTo_004 3617 0.83 0.50 1.00 139 T_XMDrugObfuBody_00 3560 1.17 1.53 0.98 140 SpammyFromTLD_01 3351 1.28 1.95 0.93 141 T_TooManySym_03 3310 0.66 0.17 0.92 142 TR_XM_SEO4 3278 2.08 4.29 0.91 143 XM_TLDProd2 3220 0.69 0.31 0.89 144 XM_UB50 3217 1.56 2.83 0.89 145 FROM_GOV_DKIM_AU 3201 0.70 0.35 0.89 146 XMBdyGiftCard01 3152 0.95 1.11 0.87 147 XMBrknScrpt_02 3002 1.69 3.31 0.83 148 XM_B_COPY_HTML 2998 0.97 1.24 0.83 149 RELAYCOUNTRY_AU 2979 1.30 2.21 0.82 150 DKIM_ADSP_CUSTOM_MED 2947 0.88 0.99 0.82 151 T_FILL_THIS_FORM_SHORT 2939 0.98 1.31 0.81 152 TooManyTo_005 2900 0.69 0.48 0.80 153 XMNoVowels 2775 0.63 0.36 0.77 154 TR_XM_DK_SendGrid 2769 0.78 0.80 0.77 155 HTTPS_HTTP_MISMATCH 2758 0.88 1.10 0.76 156 RCVD_IN_BL_SPAMCOP_NET 2747 3.98 10.08 0.76 157 XM_H_PHPMailer 2677 0.70 0.64 0.74 158 MIME_HEADER_CTYPE_ONLY 2670 1.11 1.82 0.74 159 XMBody_17 2578 2.06 4.59 0.71 160 XM_ShortIntro_01 2575 0.60 0.38 0.71 161 XMBody_95 2539 0.53 0.21 0.70 162 XM_B_DNDMA 2525 0.85 1.15 0.70 163 URI_TRY_3LD 2479 0.92 1.36 0.69 164 XMSubMetaI_00 2438 0.86 1.21 0.67 165 XM_B_REG_HTML 2366 0.67 0.71 0.65 166 TR_XM_SpammyWords2 2359 5.45 14.53 0.65 167 XMGappySubj_02 2358 0.44 0.05 0.65 168 T_OBFU_PDF_ATTACH 2328 0.48 0.17 0.64 169 RCVD_IN_PBL 2318 0.71 0.85 0.64 170 TR_MetaPhish_Combo_01 2310 0.71 0.85 0.64 171 HTML_IMAGE_ONLY_20 2267 0.59 0.51 0.63 172 XMPhish14 2266 0.65 0.71 0.63 173 XMMoneyMeta_00 2247 0.62 0.62 0.62 174 THIS_AD 2210 0.82 1.22 0.61 175 XM_B_SpammyWords4 2197 1.21 2.33 0.61 176 HTML_TAG_BALANCE_BODY 2183 0.85 1.31 0.60 177 TR_XM_Base64_M1 2173 0.67 0.80 0.60 178 MPART_ALT_DIFF_COUNT 2160 0.64 0.73 0.60 179 T_XMHurry_00 2155 0.87 1.38 0.60 180 XM_ProductURIs 2134 0.76 1.08 0.59 181 T_Symld_Words_02 2072 0.63 0.75 0.57 182 XMPhish30 2053 0.77 1.14 0.57 183 XMSubMetaSxObfu_03 2014 0.67 0.87 0.56 184 TR_LOTS_OF_MONEY3 1992 1.77 4.06 0.55 185 XMOemUri 1863 0.42 0.23 0.52 186 HTML_FONT_SIZE_LARGE 1812 0.39 0.17 0.50 187 NML_ADSP_CUSTOM_MED 1809 0.62 0.84 0.50 188 TO_NO_BRKTS_HTML_ONLY 1759 0.39 0.22 0.49 189 RELAYCOUNTRY_GB 1736 0.56 0.70 0.48 190 TVD_RCVD_IP 1730 0.55 0.67 0.48 191 XMSubNoVowel 1711 0.41 0.29 0.47 192 FORGED_GMAIL_RCVD 1705 0.56 0.72 0.47 193 USER_IN_WHITELIST 1695 0.31 0.00 0.47 194 USER_IN_WELCOMELIST 1695 0.31 0.00 0.47 195 XMSlimDrugH 1688 0.49 0.53 0.47 196 HTML_IMAGE_ONLY_32 1587 0.34 0.16 0.44 197 TR_XM_SPAMCOP 1585 2.79 7.24 0.44 198 XMLngstWrd_00 1543 0.67 1.14 0.43 199 SpammyFromTLD_02 1531 1.03 2.17 0.42 200 HTML_IMAGE_ONLY_28 1526 0.38 0.31 0.42 ----------------------------------------------------------------------