Email: 581311 Autolearn: 0 AvgScore: 3.34 AvgScanTime: 1.75 sec Spam: 186937 Autolearn: 0 AvgScore: 13.88 AvgScanTime: 1.99 sec Ham: 394374 Autolearn: 0 AvgScore: -1.66 AvgScanTime: 1.64 sec Time Spent Running SA: 282.74 hours Time Spent Processing Spam: 103.45 hours Time Spent Processing Ham: 179.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 176017 89.22 94.16 86.88 2 DKIM_SIGNED 169868 75.76 90.87 68.60 3 XM_DK_Pass 164569 74.14 88.03 67.55 4 XM_B_Unicode 163046 77.16 87.22 72.39 5 DKIM_VALID 162393 73.23 86.87 66.77 6 RELAYCOUNTRY_US 161952 84.03 86.63 82.79 7 DCC_CHECK 144557 50.25 77.33 37.41 8 XM_B_SpammyWords 135963 52.83 72.73 43.39 9 XMListUnsubscribeExists 135267 56.00 72.36 48.24 10 DKIM_VALID_AU 131376 58.78 70.28 53.34 11 XM_B_Unicode3 90681 46.38 48.51 45.37 12 LOC_TINY_FONT_1 90670 32.54 48.50 24.97 13 XM_DK_Undo_02 80597 17.55 43.11 5.43 14 XM_B_SpammyWords2 80140 25.11 42.87 16.70 15 HTML_FONT_LOW_CONTRAST 77863 31.69 41.65 26.97 16 BAYES_50 76861 52.85 41.12 58.41 17 RCVD_IN_MSPIKE_H2 76343 32.26 40.84 28.19 18 FVGT_m_MULTI_ODD 64427 26.01 34.46 22.00 19 BAYES_99 61691 13.41 33.00 4.13 20 TR_XM_DKIM_Undo 57428 11.52 30.72 2.42 21 T_KAM_HTML_FONT_INVALID 56250 23.34 30.09 20.15 22 DKIM_VALID_EF 49309 24.67 26.38 23.87 23 BAYES_999 49219 10.58 26.33 3.11 24 MIME_HTML_ONLY 48117 23.53 25.74 22.49 25 TR_DCC_Bayes_99 46078 8.98 24.65 1.55 26 DCC_CHECK_NEGATIVE 40703 49.44 21.77 62.55 27 XMSubLong 39640 21.46 21.21 21.58 28 XM_Multi_Part_URI 39455 16.35 21.11 14.10 29 T_TM2_M_HEADER_IN_MSG 36996 22.30 19.79 23.50 30 TR_XM_DK_Unsub 33834 13.84 18.10 11.82 31 UNPARSEABLE_RELAY 31903 11.98 17.07 9.57 32 XM_B_Unsub 29444 10.32 15.75 7.74 33 TR_XM_BayesUnsub 28678 9.15 15.34 6.22 34 RELAYCOUNTRY_META 27881 7.61 14.91 4.15 35 XM_B_SpammyWords3 26777 8.08 14.32 5.12 36 TR_MAX_INTL_RELAY 26371 9.01 14.11 6.59 37 LOTS_OF_MONEY 25756 7.73 13.78 4.86 38 TR_XM_SpammyWords4 23672 6.35 12.66 3.35 39 TR_XM_SpammyWords2 23365 4.36 12.50 0.50 40 BOTNET_IPINHOSTNAME 23362 6.07 12.50 3.02 41 TR_XM_SpammyRelay 20441 5.07 10.93 2.28 42 XM_Evil_Numbers_Gen 18989 9.74 10.16 9.55 43 FSL_BULK_SIG 18433 7.16 9.86 5.88 44 TR_XM_UnparsRelay 18334 4.27 9.81 1.64 45 BAYES_80 16592 5.61 8.88 4.07 46 RCVD_IN_BL_SPAMCOP_NET 14923 2.96 7.98 0.58 47 BOTNET 14838 3.44 7.94 1.32 48 BAYES_60 14587 8.46 7.80 8.78 49 LotsOfNums_01 14427 7.94 7.72 8.04 50 HTML_IMAGE_RATIO_02 13910 5.72 7.44 4.91 51 XM_Body_Dirty_Words 13690 4.13 7.32 2.62 52 MPART_ALT_DIFF 12506 8.08 6.69 8.74 53 XM_SPF_SoftFail 12412 3.16 6.64 1.51 54 XM_H_GMP 11770 4.90 6.30 4.24 55 TR_XM_SPAMCOP 11238 2.12 6.01 0.28 56 XM_H_Long_From01 10835 4.93 5.80 4.52 57 UNTRUSTED_Relay 10819 2.89 5.79 1.52 58 XMBody_17 10585 2.13 5.66 0.45 59 XM_B_PhoneNumber 10323 7.05 5.52 7.77 60 XMSubMetaSx_00 10320 3.35 5.52 2.32 61 XM_B_SEO 10208 2.51 5.46 1.10 62 HTML_IMAGE_RATIO_04 10089 11.57 5.40 14.50 63 XM_UncommonTLD01 9844 3.97 5.27 3.35 64 TR_XM_SEO4 9285 2.09 4.97 0.73 65 BAYES_95 9071 3.27 4.85 2.52 66 XM_B_Phish_Phrases 8811 3.70 4.71 3.22 67 XMSexyCombo_05 8399 2.29 4.49 1.25 68 TooManyTo_001 7980 5.96 4.27 6.76 69 T_XMDrugObfuBody_14 7790 2.31 4.17 1.43 70 DKIM_INVALID 7475 2.53 4.00 1.83 71 RELAYCOUNTRY_CA 7470 2.06 4.00 1.14 72 MIME_HTML_ONLY_MULTI 7210 6.09 3.86 7.15 73 HTML_IMAGE_RATIO_06 7204 4.10 3.85 4.22 74 MIME_HTML_MOSTLY 6948 2.70 3.72 2.22 75 XM_B_Investor 6921 2.02 3.70 1.23 76 XM_B_SpammyTLD 6870 3.58 3.68 3.54 77 TR_XM_SpammyWords5 6739 2.09 3.60 1.37 78 TR_XM_PhishingBody 6738 2.32 3.60 1.72 79 HTML_IMAGE_RATIO_08 6597 2.34 3.53 1.78 80 USER_IN_DEF_DKIM_WL 6511 9.70 3.48 12.65 81 T_XMDrugObfuBody_08 6470 1.87 3.46 1.11 82 TM2_M_VERY_LONG_WORD 6398 1.94 3.42 1.23 83 XMStrtUSub 6366 7.93 3.41 10.07 84 MIME_QP_LONG_LINE 6327 4.34 3.38 4.79 85 RCVD_IN_VALIDITY_SAFE 6327 4.14 3.38 4.49 86 XM_CamelCaseFrm001 6094 2.35 3.26 1.91 87 XM_UB50 5988 1.70 3.20 0.99 88 XM_URI_RBL 5933 1.21 3.17 0.28 89 XMReplyNow 5802 1.15 3.10 0.23 90 KHOP_HELO_FCRDNS 5756 1.64 3.08 0.95 91 XMNumbers 5651 2.62 3.02 2.43 92 DKIM_ADSP_CUSTOM_MED 5640 1.56 3.02 0.87 93 T_XMHurry_00 5630 1.41 3.01 0.65 94 XM_OfRef6 5612 1.46 3.00 0.73 95 TR_LOTS_OF_MONEY3 5510 1.18 2.95 0.35 96 XM_B_URI_Unicode 5467 1.99 2.92 1.55 97 NML_ADSP_CUSTOM_MED 5366 1.26 2.87 0.50 98 XM_B_SpammyWords4 5219 1.25 2.79 0.52 99 RCVD_IN_MSPIKE_H3 5218 4.36 2.79 5.10 100 RCVD_IN_MSPIKE_WL 5218 4.36 2.79 5.10 101 XMBrknScrpt_02 5195 1.47 2.78 0.85 102 T_XMDrugObfuBody_00 5046 1.58 2.70 1.05 103 SUBJ_ALL_CAPS 4968 2.06 2.66 1.77 104 FORGED_GMAIL_RCVD 4946 1.26 2.65 0.60 105 RCVD_IN_VALIDITY_CERTIFIED 4803 3.37 2.57 3.75 106 RELAYCOUNTRY_AU 4694 1.46 2.51 0.96 107 ADVANCE_FEE_3_NEW_MONEY 4525 0.78 2.42 0.00 108 MONEY_FRAUD_5 4510 0.78 2.41 0.00 109 MILLION_HUNDRED 4502 0.78 2.41 0.00 110 MONEY_ATM_CARD 4484 0.77 2.40 0.00 111 T_TooManySym_01 4478 4.20 2.40 5.05 112 TM2_M_URI_OPT_OUT 4437 1.96 2.37 1.76 113 TR_XM_NoHeaderRelay 4072 0.76 2.18 0.09 114 FROM_EXCESS_BASE64 4041 1.91 2.16 1.79 115 XM_B_Unsub2 3988 1.54 2.13 1.26 116 XMDiploma_00 3919 1.50 2.10 1.22 117 RELAYCOUNTRY_ID 3872 0.67 2.07 0.00 118 MAILING_LIST_MULTI 3803 2.84 2.03 3.22 119 XMStockSpam_06 3726 1.71 1.99 1.58 120 THIS_AD 3640 1.01 1.95 0.56 121 URI_NOVOWEL 3575 2.52 1.91 2.81 122 RCVD_IN_VALIDITY_RPBL 3520 0.69 1.88 0.12 123 SpammyFromTLD_01 3431 1.01 1.84 0.62 124 XM_DK_Undo_01 3182 1.49 1.70 1.39 125 XMBdyGiftCard01 3019 1.05 1.61 0.78 126 SpammyFromTLD_02 2883 0.77 1.54 0.40 127 RCVD_IN_IADB_LISTED 2859 3.31 1.53 4.15 128 XMPhish30 2848 0.90 1.52 0.61 129 XM_ProductURIs 2760 1.13 1.48 0.97 130 URI_HEX 2647 1.22 1.42 1.12 131 RCVD_IN_IADB_SPF 2562 2.93 1.37 3.66 132 BAYES_40 2504 3.68 1.34 4.79 133 HTML_MIME_NO_HTML_TAG 2490 1.60 1.33 1.73 134 XM_B_REG_HTML 2467 0.57 1.32 0.21 135 RCVD_IN_IADB_DK 2460 2.58 1.32 3.18 136 XM_SendGrid 2455 1.26 1.31 1.23 137 RCVD_IN_IADB_SENDERID 2435 2.63 1.30 3.26 138 XM_HighProb1 2424 0.43 1.30 0.01 139 XMGenDplmaNmb 2395 0.82 1.28 0.60 140 TR_XM_PHPForged 2351 0.63 1.26 0.33 141 TR_XM_PHPDW 2343 0.62 1.25 0.32 142 XMSubMetaSxObfu_03 2323 0.63 1.24 0.34 143 TR_XM_FormFill2 2313 0.62 1.24 0.33 144 URI_TRY_3LD 2308 0.74 1.23 0.51 145 ALL_TRUSTED 2302 9.97 1.23 14.12 146 XM_H_PHPOS 2288 0.61 1.22 0.32 147 TR_XM_INV_DKIM 2260 0.43 1.21 0.06 148 TR_Symld_Words 2245 1.96 1.20 2.32 149 T_FILL_THIS_FORM_SHORT 2239 0.78 1.20 0.58 150 T_REMOTE_IMAGE 2229 2.21 1.19 2.69 151 XM_B_COPY_HTML 2177 0.70 1.16 0.48 152 TR_Caps_n_Bayes_99 2100 0.42 1.12 0.08 153 HTML_TAG_BALANCE_BODY 2093 0.72 1.12 0.53 154 XMSubMetaI_00 2050 0.95 1.10 0.88 155 TM2_M_OBFU_COMMENT 1967 0.59 1.05 0.38 156 HTTPS_HTTP_MISMATCH 1944 0.78 1.04 0.65 157 TR_XM_Base64_M1 1925 0.72 1.03 0.57 158 MPART_ALT_DIFF_COUNT 1868 0.64 1.00 0.47 159 BAYES_20 1853 2.43 0.99 3.11 160 TR_MetaPhish_Combo_01 1844 1.03 0.99 1.05 161 RDNS_DYNAMIC 1826 0.49 0.98 0.25 162 RELAYCOUNTRY_IN 1825 0.35 0.98 0.06 163 SHOPIFY_IMG_NOT_RCVD_SFY 1823 0.57 0.98 0.38 164 XM_B_DNDMA 1813 0.71 0.97 0.59 165 XM_H_Undi_Recip 1804 0.40 0.97 0.14 166 ANY_BOUNCE_MESSAGE 1792 2.93 0.96 3.87 167 BOUNCE_MESSAGE 1790 2.93 0.96 3.87 168 PDS_RDNS_DYNAMIC_FP 1776 0.39 0.95 0.12 169 TR_XM_InvalidRelay 1693 0.30 0.91 0.02 170 RELAYCOUNTRY_FR 1687 0.49 0.90 0.30 171 T_MONEY_PERCENT 1676 0.40 0.90 0.17 172 TR_LOTS_OF_MONEY2 1676 0.40 0.90 0.17 173 RCVD_IN_PBL 1661 0.61 0.89 0.48 174 SHORTCIRCUIT 1655 0.28 0.89 0.00 175 RCVD_IN_ZEN_LASTEXTERNAL 1655 0.28 0.89 0.00 176 TVD_RCVD_IP 1611 0.63 0.86 0.53 177 LongTLD 1578 0.53 0.84 0.38 178 XMHTML_After_End 1575 0.44 0.84 0.25 179 XMHTMLBadTable_001 1563 0.43 0.84 0.24 180 XM_UB99 1542 0.27 0.82 0.01 181 XM_DIRTYINTL 1508 0.30 0.81 0.06 182 XM_B_Phish66 1498 0.43 0.80 0.26 183 TR_XM_Undi_Recip19 1497 0.30 0.80 0.06 184 XM_H_Long_From02 1488 0.99 0.80 1.09 185 XM_B_COVIDMETA 1483 0.36 0.79 0.15 186 T_STY_INVIS_DIRECT 1474 0.44 0.79 0.27 187 HELO_DYNAMIC_SPLIT_IP 1466 0.26 0.78 0.00 188 TooManyTo_002 1450 1.54 0.78 1.91 189 XMBody_78 1448 0.49 0.77 0.35 190 DIET_1 1434 0.39 0.77 0.20 191 TR_XM_DK_SendGrid 1378 0.77 0.74 0.78 192 XMMoneyMeta_00 1371 0.55 0.73 0.46 193 XMSolicitRefs_0 1361 0.44 0.73 0.31 194 AC_BR_BONANZA 1359 0.29 0.73 0.08 195 RCVD_IN_XBL 1354 0.25 0.72 0.02 196 XM_RXBody 1343 0.61 0.72 0.56 197 XM_UB60 1339 0.28 0.72 0.07 198 HTML_IMAGE_ONLY_20 1322 0.52 0.71 0.44 199 TooManyTo_003 1307 0.91 0.70 1.02 200 BOTNET_NORDNS 1304 0.23 0.70 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 342647 89.22 94.16 86.88 2 RELAYCOUNTRY_US 326495 84.03 86.63 82.79 3 XM_B_Unicode 285489 77.16 87.22 72.39 4 DKIM_SIGNED 270559 75.76 90.87 68.60 5 XM_DK_Pass 266387 74.14 88.03 67.55 6 DKIM_VALID 263323 73.23 86.87 66.77 7 DCC_CHECK_NEGATIVE 246694 49.44 21.77 62.55 8 BAYES_50 230338 52.85 41.12 58.41 9 DKIM_VALID_AU 210346 58.78 70.28 53.34 10 XMListUnsubscribeExists 190247 56.00 72.36 48.24 11 XM_B_Unicode3 178908 46.38 48.51 45.37 12 XM_B_SpammyWords 171130 52.83 72.73 43.39 13 DCC_CHECK 147550 50.25 77.33 37.41 14 RCVD_IN_MSPIKE_H2 111182 32.26 40.84 28.19 15 HTML_FONT_LOW_CONTRAST 106380 31.69 41.65 26.97 16 LOC_TINY_FONT_1 98486 32.54 48.50 24.97 17 DKIM_VALID_EF 94119 24.67 26.38 23.87 18 T_TM2_M_HEADER_IN_MSG 92660 22.30 19.79 23.50 19 MIME_HTML_ONLY 88676 23.53 25.74 22.49 20 FVGT_m_MULTI_ODD 86751 26.01 34.46 22.00 21 XMSubLong 85119 21.46 21.21 21.58 22 T_KAM_HTML_FONT_INVALID 79452 23.34 30.09 20.15 23 XM_B_SpammyWords2 65843 25.11 42.87 16.70 24 HTML_IMAGE_RATIO_04 57184 11.57 5.40 14.50 25 ALL_TRUSTED 55671 9.97 1.23 14.12 26 XM_Multi_Part_URI 55608 16.35 21.11 14.10 27 USER_IN_DEF_DKIM_WL 49890 9.70 3.48 12.65 28 HTML_FONT_FACE_BAD 46740 8.23 0.59 11.85 29 TR_XM_DK_Unsub 46613 13.84 18.10 11.82 30 BAYES_00 45788 8.05 0.54 11.61 31 XM_H_Trusted_IP 44377 7.63 0.00 11.25 32 XMStrtUSub 39716 7.93 3.41 10.07 33 UNPARSEABLE_RELAY 37761 11.98 17.07 9.57 34 XM_Evil_Numbers_Gen 37653 9.74 10.16 9.55 35 BAYES_60 34618 8.46 7.80 8.78 36 MPART_ALT_DIFF 34461 8.08 6.69 8.74 37 LotsOfNums_01 31710 7.94 7.72 8.04 38 XM_B_PhoneNumber 30661 7.05 5.52 7.77 39 XM_B_Unsub 30524 10.32 15.75 7.74 40 MIME_HTML_ONLY_MULTI 28197 6.09 3.86 7.15 41 TooManyTo_001 26655 5.96 4.27 6.76 42 XM_DKIMWhitelistDomains 26050 4.50 0.06 6.61 43 TR_MAX_INTL_RELAY 25985 9.01 14.11 6.59 44 TR_XM_BayesUnsub 24521 9.15 15.34 6.22 45 FSL_BULK_SIG 23189 7.16 9.86 5.88 46 IN_ZIMBRA_NJ_WHITELIST 22465 3.90 0.10 5.70 47 TR_XM_DK_Bayes 21607 3.86 0.46 5.48 48 XM_DK_Undo_02 21427 17.55 43.11 5.43 49 TR_XM_DK_Bayes1 21286 3.81 0.45 5.40 50 XM_B_SpammyWords3 20210 8.08 14.32 5.12 51 RCVD_IN_MSPIKE_WL 20122 4.36 2.79 5.10 52 RCVD_IN_MSPIKE_H3 20122 4.36 2.79 5.10 53 T_TooManySym_01 19923 4.20 2.40 5.05 54 HTML_IMAGE_RATIO_02 19365 5.72 7.44 4.91 55 LOTS_OF_MONEY 19186 7.73 13.78 4.86 56 MIME_QP_LONG_LINE 18903 4.34 3.38 4.79 57 BAYES_40 18894 3.68 1.34 4.79 58 TR_XM_DK_Bayes2 18109 3.23 0.35 4.59 59 XM_H_Long_From01 17828 4.93 5.80 4.52 60 RCVD_IN_VALIDITY_SAFE 17720 4.14 3.38 4.49 61 XM_H_GMP 16721 4.90 6.30 4.24 62 HTML_IMAGE_RATIO_06 16654 4.10 3.85 4.22 63 RCVD_IN_IADB_LISTED 16383 3.31 1.53 4.15 64 RELAYCOUNTRY_META 16364 7.61 14.91 4.15 65 BAYES_99 16290 13.41 33.00 4.13 66 BAYES_80 16036 5.61 8.88 4.07 67 XMSubNoVowel 15966 2.83 0.25 4.05 68 XM_PDF 15502 2.82 0.46 3.93 69 BOUNCE_MESSAGE 15254 2.93 0.96 3.87 70 ANY_BOUNCE_MESSAGE 15254 2.93 0.96 3.87 71 RCVD_IN_VALIDITY_CERTIFIED 14791 3.37 2.57 3.75 72 RCVD_IN_IADB_SPF 14442 2.93 1.37 3.66 73 XM_B_SpammyTLD 13954 3.58 3.68 3.54 74 TR_XM_SpammyWords4 13217 6.35 12.66 3.35 75 XM_UncommonTLD01 13208 3.97 5.27 3.35 76 RCVD_IN_IADB_SENDERID 12876 2.63 1.30 3.26 77 MAILING_LIST_MULTI 12694 2.84 2.03 3.22 78 XM_B_Phish_Phrases 12690 3.70 4.71 3.22 79 RCVD_IN_IADB_DK 12522 2.58 1.32 3.18 80 BAYES_20 12279 2.43 0.99 3.11 81 BAYES_999 12262 10.58 26.33 3.11 82 BOTNET_IPINHOSTNAME 11905 6.07 12.50 3.02 83 URI_NOVOWEL 11101 2.52 1.91 2.81 84 RCVD_IN_IADB_VOUCHED 10757 2.04 0.59 2.73 85 T_REMOTE_IMAGE 10627 2.21 1.19 2.69 86 T_TooManySym_02 10339 1.98 0.62 2.62 87 XM_Body_Dirty_Words 10318 4.13 7.32 2.62 88 BAYES_05 10195 1.94 0.59 2.59 89 BAYES_95 9928 3.27 4.85 2.52 90 XMNumbers 9575 2.62 3.02 2.43 91 TR_XM_DKIM_Undo 9556 11.52 30.72 2.42 92 XMSubMetaSx_00 9166 3.35 5.52 2.32 93 TR_Symld_Words 9161 1.96 1.20 2.32 94 TR_XM_SpammyRelay 9003 5.07 10.93 2.28 95 MIME_HTML_MOSTLY 8748 2.70 3.72 2.22 96 RCVD_IN_IADB_OPTIN 7668 1.43 0.36 1.94 97 XMSubLongNoVowel 7633 1.34 0.08 1.94 98 XM_CamelCaseFrm001 7549 2.35 3.26 1.91 99 TooManyTo_002 7518 1.54 0.78 1.91 100 XMSubGarbage 7446 1.29 0.03 1.89 101 INVALID_MSGID 7396 1.31 0.10 1.88 102 DKIM_INVALID 7236 2.53 4.00 1.83 103 FROM_EXCESS_BASE64 7052 1.91 2.16 1.79 104 HTML_IMAGE_RATIO_08 7008 2.34 3.53 1.78 105 SUBJ_ALL_CAPS 6990 2.06 2.66 1.77 106 TM2_M_URI_OPT_OUT 6943 1.96 2.37 1.76 107 HTML_MIME_NO_HTML_TAG 6831 1.60 1.33 1.73 108 TR_XM_PhishingBody 6773 2.32 3.60 1.72 109 TR_XM_UnparsRelay 6467 4.27 9.81 1.64 110 TO_MALFORMED 6298 1.09 0.02 1.60 111 XMStockSpam_06 6227 1.71 1.99 1.58 112 XM_B_URI_Unicode 6122 1.99 2.92 1.55 113 TR_DCC_Bayes_99 6121 8.98 24.65 1.55 114 UNTRUSTED_Relay 6006 2.89 5.79 1.52 115 XM_SPF_SoftFail 5949 3.16 6.64 1.51 116 T_XMDrugObfuBody_14 5650 2.31 4.17 1.43 117 XM_DK_Undo_01 5475 1.49 1.70 1.39 118 TR_XM_SpammyWords5 5410 2.09 3.60 1.37 119 T_OBFU_PDF_ATTACH 5337 0.96 0.12 1.35 120 BOTNET 5187 3.44 7.94 1.32 121 XM_B_Unsub2 4982 1.54 2.13 1.26 122 XMSexyCombo_05 4911 2.29 4.49 1.25 123 XM_SendGrid 4862 1.26 1.31 1.23 124 TM2_M_VERY_LONG_WORD 4855 1.94 3.42 1.23 125 XM_B_Investor 4841 2.02 3.70 1.23 126 XMDiploma_00 4815 1.50 2.10 1.22 127 IN_HORDE_ADDRESS_BOOK 4758 0.84 0.07 1.21 128 XMGappySubj_01 4641 0.83 0.11 1.18 129 RELAYCOUNTRY_CA 4483 2.06 4.00 1.14 130 URI_HEX 4436 1.22 1.42 1.12 131 T_XMDrugObfuBody_08 4378 1.87 3.46 1.11 132 XM_B_SEO 4355 2.51 5.46 1.10 133 XM_H_Long_From02 4295 0.99 0.80 1.09 134 T_XMDrugObfuBody_00 4143 1.58 2.70 1.05 135 T_TooManySym_03 4135 0.83 0.35 1.05 136 TR_MetaPhish_Combo_01 4131 1.03 0.99 1.05 137 TooManyTo_003 4004 0.91 0.70 1.02 138 XM_UB50 3921 1.70 3.20 0.99 139 XM_GoogleGroups 3873 0.88 0.66 0.98 140 XM_ProductURIs 3827 1.13 1.48 0.97 141 RELAYCOUNTRY_AU 3792 1.46 2.51 0.96 142 KHOP_HELO_FCRDNS 3758 1.64 3.08 0.95 143 TVD_SPACE_RATIO 3687 0.67 0.10 0.93 144 XM_E_Blogspot 3503 0.68 0.23 0.89 145 URI_TRUNCATED 3472 0.70 0.33 0.88 146 XMSubMetaI_00 3457 0.95 1.10 0.88 147 DKIM_ADSP_CUSTOM_MED 3429 1.56 3.02 0.87 148 XMNoVowels 3411 0.81 0.69 0.86 149 XMBrknScrpt_02 3335 1.47 2.78 0.85 150 XM_TLDProd2 3090 0.66 0.41 0.78 151 TR_XM_DK_SendGrid 3086 0.77 0.74 0.78 152 XMBdyGiftCard01 3060 1.05 1.61 0.78 153 TooManyTo_004 2873 0.71 0.67 0.73 154 XM_OfRef6 2861 1.46 3.00 0.73 155 TR_XM_SEO4 2860 2.09 4.97 0.73 156 HELO_NODOT 2790 0.53 0.17 0.71 157 HELO_NO_DOMAIN 2780 0.53 0.17 0.70 158 XMCapTrack 2745 0.66 0.58 0.70 159 FROM_GOV_DKIM_AU 2732 0.62 0.46 0.69 160 XMGappySubj_02 2659 0.48 0.06 0.67 161 XMLngstWrd_00 2625 0.57 0.37 0.67 162 HTTPS_HTTP_MISMATCH 2575 0.78 1.04 0.65 163 T_XMHurry_00 2561 1.41 3.01 0.65 164 SpammyFromTLD_01 2451 1.01 1.84 0.62 165 XMPhish30 2400 0.90 1.52 0.61 166 FORGED_GMAIL_RCVD 2371 1.26 2.65 0.60 167 XMGenDplmaNmb 2352 0.82 1.28 0.60 168 TooManyTo_005 2351 0.61 0.64 0.60 169 XM_B_DNDMA 2335 0.71 0.97 0.59 170 T_FILL_THIS_FORM_SHORT 2290 0.78 1.20 0.58 171 RCVD_IN_BL_SPAMCOP_NET 2280 2.96 7.98 0.58 172 XM_ShortIntro_01 2275 0.53 0.43 0.58 173 TR_XM_Base64_M1 2264 0.72 1.03 0.57 174 THIS_AD 2225 1.01 1.95 0.56 175 XM_RXBody 2207 0.61 0.72 0.56 176 XMBody_95 2145 0.43 0.19 0.54 177 HTML_TAG_BALANCE_BODY 2093 0.72 1.12 0.53 178 TVD_RCVD_IP 2079 0.63 0.86 0.53 179 T_Symld_Words_02 2070 0.56 0.64 0.52 180 XM_B_SpammyWords4 2065 1.25 2.79 0.52 181 URI_TRY_3LD 2003 0.74 1.23 0.51 182 XMPhish14 1995 0.52 0.55 0.51 183 TR_XM_SpammyWords2 1991 4.36 12.50 0.50 184 NML_ADSP_CUSTOM_MED 1979 1.26 2.87 0.50 185 XM_H_PHPMailer 1941 0.49 0.49 0.49 186 XM_B_COPY_HTML 1897 0.70 1.16 0.48 187 RCVD_IN_PBL 1885 0.61 0.89 0.48 188 XM_B_FormFill 1885 0.35 0.08 0.48 189 MPART_ALT_DIFF_COUNT 1858 0.64 1.00 0.47 190 XMMoneyMeta_00 1823 0.55 0.73 0.46 191 XMLngstWrd_01 1808 0.42 0.33 0.46 192 XMBody_17 1774 2.13 5.66 0.45 193 HTML_IMAGE_ONLY_20 1716 0.52 0.71 0.44 194 PLING_QUERY 1644 0.46 0.55 0.42 195 OOOBOUNCE_MESSAGE 1616 0.28 0.02 0.41 196 USER_IN_WHITELIST 1610 0.28 0.00 0.41 197 USER_IN_WELCOMELIST 1610 0.28 0.00 0.41 198 T_TooManySym_04 1606 0.34 0.21 0.41 199 SUBJ_DOLLARS 1590 0.49 0.66 0.40 200 SpammyFromTLD_02 1579 0.77 1.54 0.40 ----------------------------------------------------------------------