Email: 500936 Autolearn: 0 AvgScore: 2.75 AvgScanTime: 1.46 sec Spam: 144909 Autolearn: 0 AvgScore: 14.98 AvgScanTime: 1.64 sec Ham: 356027 Autolearn: 0 AvgScore: -2.22 AvgScanTime: 1.39 sec Time Spent Running SA: 203.56 hours Time Spent Processing Spam: 66.19 hours Time Spent Processing Ham: 137.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137235 90.38 94.70 88.61 2 DKIM_SIGNED 126829 73.18 87.52 67.34 3 RELAYCOUNTRY_US 122088 83.96 84.25 83.85 4 XM_DK_Pass 120667 71.11 83.27 66.16 5 DKIM_VALID 119182 70.12 82.25 65.18 6 XM_B_Unicode 117409 75.23 81.02 72.87 7 DCC_CHECK 110282 47.01 76.10 35.16 8 XM_B_SpammyWords 101665 51.44 70.16 43.82 9 XMListUnsubscribeExists 100487 49.93 69.34 42.03 10 DKIM_VALID_AU 95778 56.28 66.10 52.28 11 XM_B_Unicode3 72650 45.80 50.13 44.03 12 LOC_TINY_FONT_1 71379 30.54 49.26 22.92 13 XM_B_SpammyWords2 60907 23.74 42.03 16.30 14 BAYES_50 60022 52.08 41.42 56.42 15 XM_DK_Undo_02 55754 14.07 38.48 4.14 16 RCVD_IN_MSPIKE_H2 55698 32.39 38.44 29.93 17 HTML_FONT_LOW_CONTRAST 53620 28.92 37.00 25.63 18 T_KAM_HTML_FONT_INVALID 47890 22.53 33.05 18.25 19 FVGT_m_MULTI_ODD 46607 24.91 32.16 21.96 20 DKIM_VALID_EF 42040 27.19 29.01 26.44 21 BAYES_99 40825 10.12 28.17 2.78 22 TR_XM_DKIM_Undo 40354 9.19 27.85 1.59 23 MIME_HTML_ONLY 39778 24.60 27.45 23.43 24 XMSubLong 38896 24.99 26.84 24.24 25 XM_Multi_Part_URI 32482 14.77 22.42 11.66 26 DCC_CHECK_NEGATIVE 31956 52.42 22.05 64.79 27 BAYES_999 31332 7.72 21.62 2.06 28 T_TM2_M_HEADER_IN_MSG 31066 25.42 21.44 27.04 29 TR_DCC_Bayes_99 29791 6.57 20.56 0.87 30 TR_XM_DK_Unsub 28550 13.34 19.70 10.76 31 UNPARSEABLE_RELAY 23647 11.85 16.32 10.03 32 XM_B_Unsub 23142 10.48 15.97 8.24 33 TR_MAX_INTL_RELAY 22302 7.87 15.39 4.81 34 TR_XM_BayesUnsub 21894 8.77 15.11 6.19 35 XM_B_SpammyWords3 21535 7.01 14.86 3.81 36 RELAYCOUNTRY_META 21277 6.49 14.68 3.15 37 LOTS_OF_MONEY 20126 8.80 13.89 6.73 38 TR_XM_SpammyWords4 17881 6.97 12.34 4.78 39 TR_XM_SpammyWords2 15701 3.36 10.84 0.32 40 RCVD_IN_BL_SPAMCOP_NET 15560 3.58 10.74 0.67 41 BOTNET_IPINHOSTNAME 15377 5.03 10.61 2.75 42 TR_XM_SpammyRelay 14743 4.08 10.17 1.60 43 FSL_BULK_SIG 14332 8.22 9.89 7.54 44 XM_Body_Dirty_Words 14049 4.41 9.70 2.26 45 BAYES_80 13971 4.92 9.64 2.99 46 BAYES_60 13249 7.99 9.14 7.52 47 TR_XM_SPAMCOP 12707 2.83 8.77 0.41 48 BOTNET 12507 3.36 8.63 1.21 49 XM_Evil_Numbers_Gen 12432 9.60 8.58 10.02 50 XM_B_Phish_Phrases 12305 5.87 8.49 4.80 51 TR_XM_UnparsRelay 11491 3.11 7.93 1.15 52 LotsOfNums_01 11466 7.44 7.91 7.25 53 HTML_IMAGE_RATIO_02 9365 4.83 6.46 4.16 54 XM_UncommonTLD01 9329 4.45 6.44 3.65 55 XM_H_Long_From01 8988 5.46 6.20 5.16 56 XMSubMetaSx_00 8620 4.15 5.95 3.42 57 UNTRUSTED_Relay 8600 2.59 5.93 1.23 58 XM_B_PhoneNumber 8545 7.92 5.90 8.74 59 MPART_ALT_DIFF 8349 8.42 5.76 9.50 60 XM_B_Investor 7943 2.73 5.48 1.60 61 BAYES_95 7925 2.88 5.47 1.82 62 DKIM_INVALID 7647 3.06 5.28 2.15 63 XM_H_GMP 7315 5.22 5.05 5.28 64 RCVD_IN_VALIDITY_RPBL 6806 1.41 4.70 0.07 65 HTML_IMAGE_RATIO_04 6681 11.91 4.61 14.89 66 RELAYCOUNTRY_CA 6596 2.02 4.55 0.99 67 TR_XM_PhishingBody 6387 2.48 4.41 1.69 68 XM_B_SpammyTLD 6278 2.90 4.33 2.31 69 XMStrtUSub 6054 8.99 4.18 10.95 70 T_XMDrugObfuBody_14 5840 2.34 4.03 1.66 71 TooManyTo_001 5752 6.46 3.97 7.48 72 XM_SPF_SoftFail 5722 2.20 3.95 1.48 73 TM2_M_VERY_LONG_WORD 5558 2.20 3.84 1.53 74 XMSexyCombo_05 5420 1.71 3.74 0.89 75 RCVD_IN_MSPIKE_H3 5146 4.78 3.55 5.27 76 RCVD_IN_MSPIKE_WL 5146 4.78 3.55 5.27 77 XM_OfRef6 5087 1.85 3.51 1.18 78 MIME_HTML_MOSTLY 4964 2.39 3.43 1.97 79 HTML_IMAGE_RATIO_06 4909 4.27 3.39 4.63 80 TR_XM_SpammyWords5 4763 1.87 3.29 1.30 81 MIME_HTML_ONLY_MULTI 4669 6.57 3.22 7.94 82 HTML_IMAGE_RATIO_08 4580 2.17 3.16 1.77 83 XM_CamelCaseFrm001 4563 2.19 3.15 1.81 84 T_XMDrugObfuBody_00 4382 1.37 3.02 0.70 85 XMNumbers 4307 2.84 2.97 2.79 86 XMDiploma_00 4284 1.98 2.96 1.59 87 XM_B_URI_Unicode 4029 2.17 2.78 1.92 88 RELAYCOUNTRY_AU 3973 1.21 2.74 0.59 89 TR_XM_NoHeaderRelay 3907 0.98 2.70 0.29 90 XM_UB50 3823 1.30 2.64 0.76 91 DKIM_ADSP_NXDOMAIN 3778 0.94 2.61 0.26 92 MIME_QP_LONG_LINE 3754 3.95 2.59 4.50 93 XM_B_Unsub2 3603 1.69 2.49 1.36 94 XM_URI_RBL 3562 0.92 2.46 0.29 95 XMBody_17 3515 0.98 2.43 0.40 96 T_XMDrugObfuBody_08 3498 1.56 2.41 1.21 97 SUBJ_ALL_CAPS 3490 1.51 2.41 1.15 98 NO_DNS_FOR_FROM 3345 0.83 2.31 0.23 99 TR_XM_MaxWHORU 3338 0.80 2.30 0.18 100 T_TooManySym_01 3320 4.72 2.29 5.71 101 MAILING_LIST_MULTI 3231 2.50 2.23 2.61 102 TM2_M_URI_OPT_OUT 3117 1.72 2.15 1.54 103 SUSP_UTF8_WORD_SUBJ 3098 0.62 2.14 0.01 104 FROM_EXCESS_BASE64 3063 1.82 2.11 1.70 105 XMStockSpam_06 3014 1.76 2.08 1.63 106 SUSP_UTF8_WORD_COMBO 3012 0.62 2.08 0.02 107 XM_B_SpammyWords4 2973 0.98 2.05 0.54 108 SpammyFromTLD_01 2901 1.07 2.00 0.69 109 RCVD_IN_VALIDITY_SAFE 2823 3.40 1.95 3.99 110 SpammyFromTLD_02 2626 0.83 1.81 0.44 111 RCVD_IN_ZEN_LASTEXTERNAL 2617 0.52 1.81 0.00 112 SHORTCIRCUIT 2617 0.52 1.81 0.00 113 T_XMHurry_00 2600 0.82 1.79 0.42 114 T_REMOTE_IMAGE 2599 2.94 1.79 3.41 115 TR_XM_INV_DKIM 2595 0.56 1.79 0.06 116 USER_IN_DEF_DKIM_WL 2591 8.90 1.79 11.80 117 XMBrknScrpt_02 2573 1.08 1.78 0.80 118 XM_B_COPY_HTML 2519 1.06 1.74 0.79 119 DIET_1 2485 0.79 1.71 0.42 120 HTML_TAG_BALANCE_BODY 2411 0.87 1.66 0.55 121 RCVD_IN_VALIDITY_CERTIFIED 2383 2.71 1.64 3.14 122 RCVD_IN_PSBL 2346 0.61 1.62 0.19 123 URI_NOVOWEL 2345 1.41 1.62 1.32 124 XM_DK_Undo_01 2318 1.57 1.60 1.55 125 BAYES_40 2305 4.01 1.59 5.00 126 XMBody_78 2293 0.66 1.58 0.29 127 ALL_TRUSTED 2285 10.06 1.58 13.51 128 HTML_MIME_NO_HTML_TAG 2272 2.11 1.57 2.33 129 RELAYCOUNTRY_FR 2248 0.59 1.55 0.19 130 URI_HEX 2197 1.20 1.52 1.07 131 RCVD_IN_XBL 2173 0.45 1.50 0.02 132 XMGenDplmaNmb 2127 1.13 1.47 0.99 133 XMPhish30 2101 0.80 1.45 0.53 134 XM_B_SEO 2092 0.60 1.44 0.26 135 T_FILL_THIS_FORM_SHORT 2065 1.02 1.43 0.86 136 XMReplyNow 2057 0.62 1.42 0.29 137 TR_Symld_Words 1984 1.42 1.37 1.44 138 XM_H_Undi_Recip 1917 0.49 1.32 0.15 139 RELAYCOUNTRY_GB 1902 0.63 1.31 0.35 140 TR_XM_PHPDW 1901 0.58 1.31 0.28 141 TR_XM_PHPForged 1894 0.58 1.31 0.28 142 TR_LOTS_OF_MONEY3 1886 0.61 1.30 0.33 143 TR_XM_SEO4 1878 0.46 1.30 0.12 144 TR_XM_FormFill2 1860 0.57 1.28 0.28 145 RCVD_IN_IADB_LISTED 1838 2.65 1.27 3.21 146 XM_H_PHPOS 1828 0.56 1.26 0.27 147 XM_B_Phish66 1793 0.62 1.24 0.37 148 DKIM_ADSP_CUSTOM_MED 1771 1.04 1.22 0.96 149 XMSexyCombo_01 1743 0.44 1.20 0.12 150 XM_UB60 1740 0.38 1.20 0.05 151 XM_B_COVIDMETA 1713 0.58 1.18 0.33 152 TR_Mismatch_TLD_02 1684 0.39 1.16 0.08 153 RCVD_IN_SBL 1671 0.33 1.15 0.00 154 TM2_M_OBFU_COMMENT 1633 0.67 1.13 0.49 155 BAYES_20 1632 3.05 1.13 3.83 156 T_MONEY_PERCENT 1632 0.58 1.13 0.35 157 TR_LOTS_OF_MONEY2 1632 0.58 1.13 0.35 158 RCVD_IN_SBL_DROP 1625 0.32 1.12 0.00 159 MISSING_HEADERS 1622 0.63 1.12 0.43 160 HTTPS_HTTP_MISMATCH 1604 0.85 1.11 0.74 161 XM_H_Long_From02 1603 0.96 1.11 0.90 162 KHOP_HELO_FCRDNS 1601 1.26 1.10 1.32 163 URI_TRY_3LD 1573 0.77 1.09 0.64 164 XM_ProductURIs 1572 0.68 1.08 0.52 165 TR_XM_Base64_M1 1554 0.74 1.07 0.61 166 XM_OfRef7 1548 0.42 1.07 0.15 167 T_Symld_Words_02 1535 0.76 1.06 0.64 168 XM_SendGrid 1527 1.19 1.05 1.24 169 TR_XM_Undi_Recip19 1525 0.35 1.05 0.06 170 RCVD_IN_IADB_SPF 1457 2.31 1.01 2.84 171 TR_MetaPhish_Combo_01 1457 0.78 1.01 0.69 172 XMHTML_After_End 1442 0.50 1.00 0.30 173 TooManyTo_002 1439 2.15 0.99 2.62 174 TR_XM_Undi_RecipCombo2 1381 0.28 0.95 0.01 175 LongTLD 1376 0.53 0.95 0.35 176 RCVD_IN_IADB_DK 1374 2.04 0.95 2.48 177 RCVD_IN_IADB_SENDERID 1371 2.08 0.95 2.55 178 NML_ADSP_CUSTOM_MED 1355 0.75 0.94 0.67 179 RDNS_DYNAMIC 1333 0.47 0.92 0.29 180 XM_B_REG_HTML 1326 0.43 0.92 0.24 181 PDS_RDNS_DYNAMIC_FP 1322 0.38 0.91 0.17 182 TR_XM_RelayPhish 1310 0.32 0.90 0.08 183 TooManyTo_003 1309 1.35 0.90 1.53 184 SHOPIFY_IMG_NOT_RCVD_SFY 1303 0.39 0.90 0.18 185 MPART_ALT_DIFF_COUNT 1294 0.66 0.89 0.57 186 BAYES_00 1278 11.61 0.88 15.97 187 HTML_IMAGE_ONLY_20 1275 0.51 0.88 0.36 188 URIBL_BLACK 1262 0.29 0.87 0.05 189 XMMoneyMeta_00 1242 0.64 0.86 0.55 190 BOUNCE_MESSAGE 1240 2.53 0.86 3.21 191 ANY_BOUNCE_MESSAGE 1240 2.53 0.86 3.21 192 TooManyTo_004 1239 1.04 0.86 1.11 193 XM_UB99 1233 0.25 0.85 0.00 194 T_STY_INVIS_DIRECT 1232 0.46 0.85 0.30 195 RCVD_IN_SBL_CSS 1226 0.27 0.85 0.03 196 XMSubMetaI_00 1226 0.49 0.85 0.34 197 XMPhish14 1217 0.59 0.84 0.49 198 TooManyTo_005 1199 0.89 0.83 0.91 199 REPLYTO_WITHOUT_TO_CC 1196 0.26 0.83 0.03 200 XM_PDF 1196 3.28 0.83 4.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 315488 90.38 94.70 88.61 2 RELAYCOUNTRY_US 298516 83.96 84.25 83.85 3 XM_B_Unicode 259452 75.23 81.02 72.87 4 DKIM_SIGNED 239739 73.18 87.52 67.34 5 XM_DK_Pass 235533 71.11 83.27 66.16 6 DKIM_VALID 232075 70.12 82.25 65.18 7 DCC_CHECK_NEGATIVE 230657 52.42 22.05 64.79 8 BAYES_50 200865 52.08 41.42 56.42 9 DKIM_VALID_AU 186129 56.28 66.10 52.28 10 XM_B_Unicode3 156765 45.80 50.13 44.03 11 XM_B_SpammyWords 156015 51.44 70.16 43.82 12 XMListUnsubscribeExists 149626 49.93 69.34 42.03 13 DCC_CHECK 125187 47.01 76.10 35.16 14 RCVD_IN_MSPIKE_H2 106543 32.39 38.44 29.93 15 T_TM2_M_HEADER_IN_MSG 96252 25.42 21.44 27.04 16 DKIM_VALID_EF 94144 27.19 29.01 26.44 17 HTML_FONT_LOW_CONTRAST 91241 28.92 37.00 25.63 18 XMSubLong 86302 24.99 26.84 24.24 19 MIME_HTML_ONLY 83429 24.60 27.45 23.43 20 LOC_TINY_FONT_1 81585 30.54 49.26 22.92 21 FVGT_m_MULTI_ODD 78187 24.91 32.16 21.96 22 T_KAM_HTML_FONT_INVALID 64978 22.53 33.05 18.25 23 XM_B_SpammyWords2 58015 23.74 42.03 16.30 24 BAYES_00 56867 11.61 0.88 15.97 25 HTML_IMAGE_RATIO_04 53003 11.91 4.61 14.89 26 ALL_TRUSTED 48106 10.06 1.58 13.51 27 HTML_FONT_FACE_BAD 46045 9.33 0.48 12.93 28 XM_H_Trusted_IP 43370 8.66 0.00 12.18 29 USER_IN_DEF_DKIM_WL 42017 8.90 1.79 11.80 30 XM_Multi_Part_URI 41528 14.77 22.42 11.66 31 XMStrtUSub 38970 8.99 4.18 10.95 32 TR_XM_DK_Unsub 38292 13.34 19.70 10.76 33 UNPARSEABLE_RELAY 35693 11.85 16.32 10.03 34 XM_Evil_Numbers_Gen 35665 9.60 8.58 10.02 35 MPART_ALT_DIFF 33830 8.42 5.76 9.50 36 XM_B_PhoneNumber 31114 7.92 5.90 8.74 37 XM_B_Unsub 29338 10.48 15.97 8.24 38 MIME_HTML_ONLY_MULTI 28253 6.57 3.22 7.94 39 FSL_BULK_SIG 26861 8.22 9.89 7.54 40 BAYES_60 26778 7.99 9.14 7.52 41 TooManyTo_001 26626 6.46 3.97 7.48 42 LotsOfNums_01 25828 7.44 7.91 7.25 43 TR_XM_DK_Bayes 25277 5.27 0.77 7.10 44 TR_XM_DK_Bayes1 25007 5.21 0.76 7.02 45 XM_DKIMWhitelistDomains 24995 5.00 0.03 7.02 46 LOTS_OF_MONEY 23978 8.80 13.89 6.73 47 TR_XM_BayesUnsub 22030 8.77 15.11 6.19 48 IN_ZIMBRA_NJ_WHITELIST 21894 4.39 0.08 6.15 49 TR_XM_DK_Bayes2 21681 4.50 0.60 6.09 50 T_TooManySym_01 20335 4.72 2.29 5.71 51 XM_H_GMP 18814 5.22 5.05 5.28 52 RCVD_IN_MSPIKE_H3 18776 4.78 3.55 5.27 53 RCVD_IN_MSPIKE_WL 18776 4.78 3.55 5.27 54 XM_H_Long_From01 18355 5.46 6.20 5.16 55 BAYES_40 17803 4.01 1.59 5.00 56 TR_MAX_INTL_RELAY 17140 7.87 15.39 4.81 57 XM_B_Phish_Phrases 17085 5.87 8.49 4.80 58 TR_XM_SpammyWords4 17030 6.97 12.34 4.78 59 HTML_IMAGE_RATIO_06 16496 4.27 3.39 4.63 60 MIME_QP_LONG_LINE 16013 3.95 2.59 4.50 61 XM_PDF 15240 3.28 0.83 4.28 62 HTML_IMAGE_RATIO_02 14819 4.83 6.46 4.16 63 XM_DK_Undo_02 14750 14.07 38.48 4.14 64 XMSubNoVowel 14598 3.05 0.46 4.10 65 RCVD_IN_VALIDITY_SAFE 14216 3.40 1.95 3.99 66 BAYES_20 13629 3.05 1.13 3.83 67 XM_B_SpammyWords3 13572 7.01 14.86 3.81 68 XM_UncommonTLD01 12978 4.45 6.44 3.65 69 BAYES_05 12547 2.70 0.67 3.52 70 XMSubMetaSx_00 12185 4.15 5.95 3.42 71 T_REMOTE_IMAGE 12150 2.94 1.79 3.41 72 RCVD_IN_IADB_LISTED 11433 2.65 1.27 3.21 73 BOUNCE_MESSAGE 11413 2.53 0.86 3.21 74 ANY_BOUNCE_MESSAGE 11413 2.53 0.86 3.21 75 RELAYCOUNTRY_META 11223 6.49 14.68 3.15 76 RCVD_IN_VALIDITY_CERTIFIED 11195 2.71 1.64 3.14 77 BAYES_80 10654 4.92 9.64 2.99 78 RCVD_IN_IADB_SPF 10123 2.31 1.01 2.84 79 XMNumbers 9922 2.84 2.97 2.79 80 BAYES_99 9883 10.12 28.17 2.78 81 BOTNET_IPINHOSTNAME 9796 5.03 10.61 2.75 82 T_TooManySym_02 9403 2.07 0.67 2.64 83 TooManyTo_002 9334 2.15 0.99 2.62 84 MAILING_LIST_MULTI 9279 2.50 2.23 2.61 85 RCVD_IN_IADB_SENDERID 9072 2.08 0.95 2.55 86 RCVD_IN_IADB_DK 8826 2.04 0.95 2.48 87 HTML_MIME_NO_HTML_TAG 8287 2.11 1.57 2.33 88 XM_B_SpammyTLD 8233 2.90 4.33 2.31 89 XM_Body_Dirty_Words 8055 4.41 9.70 2.26 90 DKIM_INVALID 7664 3.06 5.28 2.15 91 INVALID_MSGID 7349 1.56 0.31 2.06 92 BAYES_999 7340 7.72 21.62 2.06 93 RCVD_IN_IADB_VOUCHED 7286 1.66 0.72 2.05 94 MIME_HTML_MOSTLY 7011 2.39 3.43 1.97 95 XM_B_URI_Unicode 6845 2.17 2.78 1.92 96 XMSubLongNoVowel 6769 1.42 0.23 1.90 97 XMSubGarbage 6564 1.32 0.02 1.84 98 BAYES_95 6479 2.88 5.47 1.82 99 XM_CamelCaseFrm001 6431 2.19 3.15 1.81 100 HTML_IMAGE_RATIO_08 6301 2.17 3.16 1.77 101 TO_MALFORMED 6223 1.26 0.06 1.75 102 FROM_EXCESS_BASE64 6056 1.82 2.11 1.70 103 TR_XM_PhishingBody 6024 2.48 4.41 1.69 104 T_XMDrugObfuBody_14 5898 2.34 4.03 1.66 105 XMStockSpam_06 5802 1.76 2.08 1.63 106 XM_B_Investor 5708 2.73 5.48 1.60 107 TR_XM_SpammyRelay 5706 4.08 10.17 1.60 108 TR_XM_DKIM_Undo 5660 9.19 27.85 1.59 109 XMDiploma_00 5650 1.98 2.96 1.59 110 XM_DK_Undo_01 5534 1.57 1.60 1.55 111 TM2_M_URI_OPT_OUT 5478 1.72 2.15 1.54 112 TM2_M_VERY_LONG_WORD 5457 2.20 3.84 1.53 113 TooManyTo_003 5435 1.35 0.90 1.53 114 XM_SPF_SoftFail 5287 2.20 3.95 1.48 115 RCVD_IN_IADB_OPTIN 5237 1.16 0.39 1.47 116 TR_Symld_Words 5112 1.42 1.37 1.44 117 IN_HORDE_ADDRESS_BOOK 4882 1.00 0.09 1.37 118 XM_B_Unsub2 4854 1.69 2.49 1.36 119 KHOP_HELO_FCRDNS 4714 1.26 1.10 1.32 120 URI_NOVOWEL 4702 1.41 1.62 1.32 121 TR_XM_SpammyWords5 4615 1.87 3.29 1.30 122 XM_SendGrid 4432 1.19 1.05 1.24 123 UNTRUSTED_Relay 4384 2.59 5.93 1.23 124 BOTNET 4320 3.36 8.63 1.21 125 T_XMDrugObfuBody_08 4318 1.56 2.41 1.21 126 XM_OfRef6 4205 1.85 3.51 1.18 127 TR_XM_UnparsRelay 4103 3.11 7.93 1.15 128 SUBJ_ALL_CAPS 4092 1.51 2.41 1.15 129 HELO_NODOT 4088 0.87 0.18 1.15 130 HELO_NO_DOMAIN 4082 0.87 0.18 1.15 131 XMCapTrack 3988 0.96 0.57 1.12 132 TooManyTo_004 3968 1.04 0.86 1.11 133 XMGappySubj_01 3893 0.82 0.16 1.09 134 XM_GoogleGroups 3855 0.97 0.68 1.08 135 URI_HEX 3804 1.20 1.52 1.07 136 TVD_SPACE_RATIO 3748 0.79 0.14 1.05 137 FROM_GOV_DKIM_AU 3623 0.83 0.38 1.02 138 XMGenDplmaNmb 3532 1.13 1.47 0.99 139 RELAYCOUNTRY_CA 3529 2.02 4.55 0.99 140 T_TooManySym_03 3508 0.77 0.23 0.99 141 XM_E_Blogspot 3474 0.76 0.22 0.98 142 DKIM_ADSP_CUSTOM_MED 3431 1.04 1.22 0.96 143 TooManyTo_005 3255 0.89 0.83 0.91 144 XM_H_Long_From02 3191 0.96 1.11 0.90 145 XMSexyCombo_05 3153 1.71 3.74 0.89 146 TR_DCC_Bayes_99 3112 6.57 20.56 0.87 147 T_FILL_THIS_FORM_SHORT 3045 1.02 1.43 0.86 148 TR_XM_DK_SendGrid 2964 0.80 0.71 0.83 149 XMBrknScrpt_02 2833 1.08 1.78 0.80 150 XM_B_COPY_HTML 2798 1.06 1.74 0.79 151 XM_UB50 2690 1.30 2.64 0.76 152 HTTPS_HTTP_MISMATCH 2631 0.85 1.11 0.74 153 T_XMDrugObfuBody_00 2499 1.37 3.02 0.70 154 XM_ShortIntro_01 2470 0.66 0.59 0.69 155 TR_MetaPhish_Combo_01 2462 0.78 1.01 0.69 156 SpammyFromTLD_01 2453 1.07 2.00 0.69 157 NML_ADSP_CUSTOM_MED 2382 0.75 0.94 0.67 158 RCVD_IN_BL_SPAMCOP_NET 2373 3.58 10.74 0.67 159 FORGED_GMAIL_RCVD 2338 0.68 0.73 0.66 160 T_Symld_Words_02 2282 0.76 1.06 0.64 161 URI_TRY_3LD 2272 0.77 1.09 0.64 162 XMNoVowels 2241 0.58 0.46 0.63 163 XMGappySubj_02 2240 0.46 0.06 0.63 164 RCVD_IN_PBL 2238 0.67 0.79 0.63 165 T_OBFU_PDF_ATTACH 2201 0.51 0.25 0.62 166 TR_XM_Base64_M1 2168 0.74 1.07 0.61 167 XMBdyGiftCard01 2154 0.66 0.79 0.61 168 XMBody_95 2116 0.48 0.20 0.59 169 RELAYCOUNTRY_AU 2086 1.21 2.74 0.59 170 XMLngstWrd_00 2047 0.54 0.45 0.57 171 MPART_ALT_DIFF_COUNT 2035 0.66 0.89 0.57 172 XMMoneyMeta_00 1962 0.64 0.86 0.55 173 HTML_TAG_BALANCE_BODY 1953 0.87 1.66 0.55 174 XM_B_DNDMA 1941 0.57 0.62 0.55 175 XM_B_SpammyWords4 1928 0.98 2.05 0.54 176 XMPhish30 1889 0.80 1.45 0.53 177 XM_H_PHPMailer 1872 0.53 0.54 0.53 178 TVD_RCVD_IP 1859 0.59 0.75 0.52 179 XM_ProductURIs 1852 0.68 1.08 0.52 180 TM2_M_OBFU_COMMENT 1739 0.67 1.13 0.49 181 XMLngstWrd_01 1739 0.46 0.40 0.49 182 TR_XM_SpoofStaff 1735 0.46 0.39 0.49 183 XMPhish14 1727 0.59 0.84 0.49 184 XM_H_SpoofStaff4 1716 0.45 0.36 0.48 185 XMSolicitRefs_0 1622 0.42 0.35 0.46 186 T_TVD_MIME_NO_HEADERS 1612 0.33 0.04 0.45 187 XM_B_FormFill 1586 0.32 0.01 0.45 188 TO_NO_BRKTS_HTML_ONLY 1556 0.38 0.23 0.44 189 SpammyFromTLD_02 1553 0.83 1.81 0.44 190 HTML_IMAGE_ONLY_32 1546 0.38 0.25 0.43 191 HTML_IMAGE_ONLY_28 1541 0.40 0.31 0.43 192 MISSING_HEADERS 1521 0.63 1.12 0.43 193 XMSpoofStaff2 1503 0.40 0.36 0.42 194 DIET_1 1496 0.79 1.71 0.42 195 T_XMHurry_00 1494 0.82 1.79 0.42 196 TR_XM_PSC1 1489 0.40 0.35 0.42 197 XMSlimDrugH 1479 0.50 0.71 0.42 198 TR_XM_SPAMCOP 1463 2.83 8.77 0.41 199 XM_DKIMRevIO 1437 0.29 0.00 0.40 200 XMBody_17 1412 0.98 2.43 0.40 ----------------------------------------------------------------------