Email: 477107 Autolearn: 0 AvgScore: 4.71 AvgScanTime: 1.35 sec Spam: 150700 Autolearn: 0 AvgScore: 14.93 AvgScanTime: 1.47 sec Ham: 326407 Autolearn: 0 AvgScore: -0.01 AvgScanTime: 1.29 sec Time Spent Running SA: 178.36 hours Time Spent Processing Spam: 61.54 hours Time Spent Processing Ham: 116.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140391 88.92 93.16 86.96 2 DKIM_SIGNED 132697 78.80 88.05 74.52 3 RELAYCOUNTRY_US 126522 82.91 83.96 82.43 4 XM_DK_Pass 126126 76.32 83.69 72.91 5 DKIM_VALID 123515 75.00 81.96 71.78 6 XM_B_Unicode 122938 71.90 81.58 67.44 7 DCC_CHECK 112228 50.63 74.47 39.62 8 XMListUnsubscribeExists 103639 53.51 68.77 46.46 9 XM_B_SpammyWords 103171 51.77 68.46 44.06 10 DKIM_VALID_AU 95306 59.25 63.24 57.41 11 XM_B_Unicode3 73599 42.01 48.84 38.85 12 LOC_TINY_FONT_1 73245 32.87 48.60 25.60 13 XM_B_SpammyWords2 60861 24.72 40.39 17.48 14 BAYES_50 60607 53.13 40.22 59.09 15 XM_DK_Undo_02 59986 16.00 39.80 5.02 16 RCVD_IN_MSPIKE_H2 58297 35.17 38.68 33.54 17 HTML_FONT_LOW_CONTRAST 55981 29.94 37.15 26.61 18 FVGT_m_MULTI_ODD 50103 26.23 33.25 23.00 19 BAYES_99 47610 12.14 31.59 3.16 20 T_KAM_HTML_FONT_INVALID 46976 24.35 31.17 21.20 21 DKIM_VALID_EF 43132 28.77 28.62 28.84 22 TR_XM_DKIM_Undo 40599 9.91 26.94 2.05 23 MIME_HTML_ONLY 40253 23.87 26.71 22.56 24 XMSubLong 37568 23.98 24.93 23.54 25 BAYES_999 37565 9.51 24.93 2.39 26 DCC_CHECK_NEGATIVE 35885 48.79 23.81 60.32 27 XM_Multi_Part_URI 34440 16.05 22.85 12.90 28 T_TM2_M_HEADER_IN_MSG 34383 27.04 22.82 28.99 29 TR_DCC_Bayes_99 34269 8.04 22.74 1.25 30 TR_XM_DK_Unsub 30025 14.20 19.92 11.55 31 UNPARSEABLE_RELAY 27807 13.54 18.45 11.27 32 XM_B_Unsub 25138 13.19 16.68 11.57 33 TR_XM_BayesUnsub 24127 9.95 16.01 7.16 34 TR_MAX_INTL_RELAY 22135 8.20 14.69 5.20 35 XM_B_SpammyWords3 21724 7.46 14.42 4.25 36 RELAYCOUNTRY_META 21162 6.93 14.04 3.64 37 LOTS_OF_MONEY 19164 8.35 12.72 6.33 38 BOTNET_IPINHOSTNAME 17439 5.85 11.57 3.21 39 TR_XM_SpammyWords4 16802 6.37 11.15 4.17 40 TR_XM_SpammyWords2 16611 3.69 11.02 0.31 41 TR_XM_SpammyRelay 15611 4.46 10.36 1.74 42 RCVD_IN_BL_SPAMCOP_NET 15073 3.74 10.00 0.84 43 FSL_BULK_SIG 14061 8.78 9.33 8.53 44 TR_XM_UnparsRelay 13923 3.93 9.24 1.48 45 BOTNET 13853 4.04 9.19 1.66 46 XM_Evil_Numbers_Gen 13635 8.67 9.05 8.49 47 BAYES_80 13425 5.04 8.91 3.26 48 XM_Body_Dirty_Words 13279 4.94 8.81 3.15 49 TR_XM_SPAMCOP 12795 3.02 8.49 0.49 50 LotsOfNums_01 12679 8.15 8.41 8.03 51 BAYES_60 12635 8.20 8.38 8.11 52 XMSubMetaSx_00 12598 5.82 8.36 4.64 53 XM_H_Long_From01 11221 6.40 7.45 5.92 54 XM_B_Phish_Phrases 10977 6.09 7.28 5.53 55 HTML_IMAGE_RATIO_02 10111 5.46 6.71 4.88 56 XM_H_GMP 9453 5.67 6.27 5.39 57 MPART_ALT_DIFF 9402 4.84 6.24 4.20 58 DKIM_INVALID 9182 3.80 6.09 2.74 59 XM_B_PhoneNumber 8986 10.13 5.96 12.05 60 XM_UncommonTLD01 8475 4.64 5.62 4.18 61 BAYES_95 8203 3.05 5.44 1.94 62 RCVD_IN_VALIDITY_RPBL 8010 1.78 5.32 0.15 63 UNTRUSTED_Relay 7588 2.58 5.04 1.45 64 TR_XM_SpammyWords5 7262 2.49 4.82 1.42 65 XMSexyCombo_05 7223 2.92 4.79 2.06 66 RELAYCOUNTRY_CA 6880 2.11 4.57 0.97 67 T_XMDrugObfuBody_14 6739 2.45 4.47 1.52 68 HTML_IMAGE_RATIO_04 6456 4.25 4.28 4.23 69 XM_B_Investor 6320 2.34 4.19 1.48 70 TM2_M_VERY_LONG_WORD 6243 2.37 4.14 1.54 71 XM_OfRef6 6167 2.14 4.09 1.24 72 TR_XM_PhishingBody 6116 2.33 4.06 1.53 73 TooManyTo_001 5740 8.54 3.81 10.72 74 XM_SPF_SoftFail 5732 2.41 3.80 1.77 75 RCVD_IN_MSPIKE_WL 5629 5.17 3.74 5.83 76 RCVD_IN_MSPIKE_H3 5629 5.17 3.74 5.83 77 XMStrtUSub 5534 4.76 3.67 5.27 78 XMDiploma_00 5509 2.31 3.66 1.68 79 MIME_HTML_ONLY_MULTI 5244 2.64 3.48 2.26 80 XM_B_SpammyTLD 5221 2.71 3.46 2.36 81 XMNumbers 5098 3.11 3.38 2.99 82 SUBJ_ALL_CAPS 4857 1.97 3.22 1.38 83 HTML_IMAGE_RATIO_06 4839 3.00 3.21 2.91 84 TM2_M_URI_OPT_OUT 4703 2.13 3.12 1.68 85 HTML_IMAGE_RATIO_08 4685 2.64 3.11 2.42 86 XM_CamelCaseFrm001 4657 2.65 3.09 2.44 87 MIME_HTML_MOSTLY 4612 2.43 3.06 2.14 88 XMBody_17 4413 1.19 2.93 0.39 89 RELAYCOUNTRY_AU 4294 1.37 2.85 0.69 90 T_XMDrugObfuBody_08 4262 1.86 2.83 1.42 91 MIME_QP_LONG_LINE 4013 4.31 2.66 5.07 92 ALL_TRUSTED 3980 10.82 2.64 14.59 93 T_TooManySym_01 3907 5.28 2.59 6.52 94 XM_B_URI_Unicode 3888 2.39 2.58 2.30 95 XM_B_SpammyWords4 3762 1.26 2.50 0.68 96 XM_UB50 3749 1.42 2.49 0.92 97 TR_XM_INV_DKIM 3418 0.80 2.27 0.13 98 XM_URI_RBL 3411 1.01 2.26 0.43 99 XM_B_Unsub2 3290 1.81 2.18 1.64 100 MAILING_LIST_MULTI 3273 2.64 2.17 2.86 101 RCVD_IN_VALIDITY_SAFE 3264 3.38 2.17 3.94 102 DKIM_ADSP_NXDOMAIN 3171 0.85 2.10 0.27 103 DKIM_ADSP_CUSTOM_MED 3159 1.24 2.10 0.85 104 XM_H_Long_From02 3146 1.34 2.09 1.00 105 SpammyFromTLD_01 3118 1.32 2.07 0.97 106 TR_XM_NoHeaderRelay 3089 0.81 2.05 0.23 107 NO_DNS_FOR_FROM 3057 0.81 2.03 0.25 108 FROM_EXCESS_BASE64 3056 1.87 2.03 1.80 109 TR_XM_MaxWHORU 3050 0.78 2.02 0.20 110 T_XMDrugObfuBody_00 3044 1.21 2.02 0.84 111 XM_DK_Undo_01 2918 1.74 1.94 1.65 112 XMGenDplmaNmb 2902 1.20 1.93 0.87 113 T_XMHurry_00 2900 1.01 1.92 0.59 114 NML_ADSP_CUSTOM_MED 2812 1.00 1.87 0.61 115 XMStockSpam_06 2737 1.55 1.82 1.42 116 SpammyFromTLD_02 2686 0.83 1.78 0.39 117 RCVD_IN_VALIDITY_CERTIFIED 2648 2.51 1.76 2.86 118 URI_HEX 2567 1.55 1.70 1.48 119 T_REMOTE_IMAGE 2549 3.30 1.69 4.04 120 RCVD_IN_XBL 2534 0.54 1.68 0.02 121 RCVD_IN_ZEN_LASTEXTERNAL 2533 0.53 1.68 0.00 122 SHORTCIRCUIT 2533 0.53 1.68 0.00 123 T_FILL_THIS_FORM_SHORT 2526 1.18 1.68 0.95 124 HTML_MIME_NO_HTML_TAG 2486 2.31 1.65 2.62 125 XM_B_COPY_HTML 2478 1.14 1.64 0.91 126 XM_SendGrid 2472 1.47 1.64 1.39 127 FORGED_GMAIL_RCVD 2463 0.87 1.63 0.52 128 BOTNET_NORDNS 2364 0.50 1.57 0.01 129 RCVD_IN_SBL_CSS 2297 0.51 1.52 0.05 130 HTTPS_HTTP_MISMATCH 2286 1.22 1.52 1.08 131 RCVD_IN_PSBL 2285 0.69 1.52 0.31 132 USER_IN_DEF_DKIM_WL 2283 8.99 1.51 12.45 133 KHOP_HELO_FCRDNS 2240 1.61 1.49 1.67 134 BAYES_40 2204 3.76 1.46 4.83 135 SUSP_UTF8_WORD_COMBO 2127 0.47 1.41 0.04 136 MIME_CHARSET_FARAWAY 2099 0.74 1.39 0.44 137 XMPhish30 2065 0.76 1.37 0.48 138 SUSP_UTF8_WORD_SUBJ 2021 0.44 1.34 0.02 139 TR_XM_PHPDW 2010 0.62 1.33 0.29 140 TR_XM_PHPForged 1981 0.61 1.31 0.28 141 RELAYCOUNTRY_GB 1979 0.71 1.31 0.43 142 TM2_M_BODY_EMPTY 1952 0.70 1.30 0.42 143 XM_B_SEO 1952 0.57 1.30 0.23 144 TR_XM_FormFill2 1944 0.61 1.29 0.29 145 XMBrknScrpt_02 1928 1.00 1.28 0.86 146 URI_NOVOWEL 1919 1.38 1.27 1.43 147 XM_H_PHPOS 1910 0.59 1.27 0.28 148 XMSexyCombo_01 1897 0.56 1.26 0.23 149 XMEmptyBody_01 1877 0.46 1.25 0.10 150 DIET_1 1864 0.57 1.24 0.27 151 URI_TRY_3LD 1854 0.76 1.23 0.54 152 RDNS_DYNAMIC 1797 0.63 1.19 0.37 153 XM_H_Undi_Recip 1754 0.50 1.16 0.19 154 PDS_RDNS_DYNAMIC_FP 1749 0.52 1.16 0.22 155 RCVD_IN_SBL 1748 0.37 1.16 0.00 156 TR_XM_SEO4 1728 0.43 1.15 0.10 157 XMHTML_After_End 1705 0.57 1.13 0.32 158 XM_B_Phish66 1692 0.54 1.12 0.27 159 RCVD_IN_SBL_DROP 1676 0.35 1.11 0.00 160 TVD_RCVD_IP 1651 0.79 1.10 0.65 161 RCVD_IN_IADB_LISTED 1649 2.94 1.09 3.79 162 BAYES_20 1648 2.75 1.09 3.51 163 TR_Symld_Words 1626 1.33 1.08 1.44 164 XM_PDF 1605 3.70 1.07 4.92 165 XMReplyNow 1579 0.52 1.05 0.27 166 XMBody_78 1571 0.53 1.04 0.30 167 SHOPIFY_IMG_NOT_RCVD_SFY 1562 0.46 1.04 0.19 168 THIS_AD 1554 0.52 1.03 0.28 169 XM_OfRef7 1490 0.47 0.99 0.23 170 TR_XM_Undi_Recip19 1488 0.36 0.99 0.08 171 ANY_BOUNCE_MESSAGE 1476 2.45 0.98 3.13 172 BOUNCE_MESSAGE 1475 2.45 0.98 3.13 173 TR_LOTS_OF_MONEY3 1473 0.47 0.98 0.24 174 TR_Mismatch_TLD_02 1464 0.35 0.97 0.07 175 TR_XM_RelayPhish 1457 0.35 0.97 0.07 176 TR_LOTS_OF_MONEY2 1449 0.43 0.96 0.18 177 T_MONEY_PERCENT 1449 0.43 0.96 0.18 178 TR_XM_Base64_M1 1447 0.83 0.96 0.77 179 HTML_TAG_BALANCE_BODY 1443 0.70 0.96 0.58 180 RCVD_IN_IADB_SPF 1441 2.58 0.96 3.33 181 MPART_ALT_DIFF_COUNT 1436 0.70 0.95 0.59 182 T_STY_INVIS_DIRECT 1436 0.49 0.95 0.27 183 RELAYCOUNTRY_FR 1421 0.44 0.94 0.21 184 HOSTED_IMG_MULTI_PUB_01 1400 0.34 0.93 0.06 185 FILL_THIS_FORM 1355 0.68 0.90 0.58 186 RCVD_IN_IADB_SENDERID 1354 2.32 0.90 2.98 187 XMPhish14 1349 0.56 0.90 0.41 188 TooManyTo_002 1333 3.91 0.88 5.31 189 TM2_M_A_HREF_HREF 1320 0.41 0.88 0.20 190 TR_XM_Undi_RecipCombo2 1319 0.28 0.88 0.00 191 RCVD_IN_IADB_DK 1319 2.27 0.88 2.92 192 XM_DIRTYINTL 1317 0.33 0.87 0.08 193 XMSubMetaI_00 1313 0.66 0.87 0.57 194 PLING_QUERY 1304 0.52 0.87 0.35 195 TR_XM_DK_SendGrid 1300 0.90 0.86 0.92 196 XMMoneyMeta_00 1299 0.63 0.86 0.52 197 XM_B_COVIDMETA 1277 0.41 0.85 0.20 198 XM_UB99 1269 0.27 0.84 0.00 199 XMCapTrack 1262 1.09 0.84 1.21 200 MONEY_FORM 1247 0.28 0.83 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 283843 88.92 93.16 86.96 2 RELAYCOUNTRY_US 269046 82.91 83.96 82.43 3 DKIM_SIGNED 243245 78.80 88.05 74.52 4 XM_DK_Pass 237999 76.32 83.69 72.91 5 DKIM_VALID 234292 75.00 81.96 71.78 6 XM_B_Unicode 220125 71.90 81.58 67.44 7 DCC_CHECK_NEGATIVE 196878 48.79 23.81 60.32 8 BAYES_50 192888 53.13 40.22 59.09 9 DKIM_VALID_AU 187382 59.25 63.24 57.41 10 XMListUnsubscribeExists 151660 53.51 68.77 46.46 11 XM_B_SpammyWords 143824 51.77 68.46 44.06 12 DCC_CHECK 129330 50.63 74.47 39.62 13 XM_B_Unicode3 126814 42.01 48.84 38.85 14 RCVD_IN_MSPIKE_H2 109478 35.17 38.68 33.54 15 T_TM2_M_HEADER_IN_MSG 94623 27.04 22.82 28.99 16 DKIM_VALID_EF 94126 28.77 28.62 28.84 17 HTML_FONT_LOW_CONTRAST 86854 29.94 37.15 26.61 18 LOC_TINY_FONT_1 83566 32.87 48.60 25.60 19 XMSubLong 76823 23.98 24.93 23.54 20 FVGT_m_MULTI_ODD 75066 26.23 33.25 23.00 21 MIME_HTML_ONLY 73630 23.87 26.71 22.56 22 T_KAM_HTML_FONT_INVALID 69204 24.35 31.17 21.20 23 XM_B_SpammyWords2 57060 24.72 40.39 17.48 24 ALL_TRUSTED 47625 10.82 2.64 14.59 25 BAYES_00 45455 9.72 0.59 13.93 26 XM_Multi_Part_URI 42117 16.05 22.85 12.90 27 USER_IN_DEF_DKIM_WL 40632 8.99 1.51 12.45 28 XM_B_PhoneNumber 39323 10.13 5.96 12.05 29 XM_B_Unsub 37773 13.19 16.68 11.57 30 TR_XM_DK_Unsub 37701 14.20 19.92 11.55 31 UNPARSEABLE_RELAY 36777 13.54 18.45 11.27 32 TooManyTo_001 35005 8.54 3.81 10.72 33 FSL_BULK_SIG 27845 8.78 9.33 8.53 34 XM_Evil_Numbers_Gen 27714 8.67 9.05 8.49 35 BAYES_60 26481 8.20 8.38 8.11 36 LotsOfNums_01 26200 8.15 8.41 8.03 37 TR_XM_DK_Bayes 25523 5.50 0.46 7.82 38 TR_XM_DK_Bayes1 25040 5.39 0.45 7.67 39 TR_XM_BayesUnsub 23367 9.95 16.01 7.16 40 IN_ZIMBRA_NJ_WHITELIST 22616 4.77 0.09 6.93 41 XM_DKIMWhitelistDomains 22390 4.72 0.08 6.86 42 TR_XM_DK_Bayes2 21576 4.62 0.30 6.61 43 T_TooManySym_01 21274 5.28 2.59 6.52 44 LOTS_OF_MONEY 20656 8.35 12.72 6.33 45 XM_H_Long_From01 19330 6.40 7.45 5.92 46 RCVD_IN_MSPIKE_WL 19037 5.17 3.74 5.83 47 RCVD_IN_MSPIKE_H3 19037 5.17 3.74 5.83 48 XM_B_Phish_Phrases 18055 6.09 7.28 5.53 49 XM_H_GMP 17590 5.67 6.27 5.39 50 TooManyTo_002 17340 3.91 0.88 5.31 51 XMStrtUSub 17188 4.76 3.67 5.27 52 TR_MAX_INTL_RELAY 16966 8.20 14.69 5.20 53 MIME_QP_LONG_LINE 16537 4.31 2.66 5.07 54 XM_DK_Undo_02 16371 16.00 39.80 5.02 55 XM_PDF 16055 3.70 1.07 4.92 56 HTML_IMAGE_RATIO_02 15917 5.46 6.71 4.88 57 BAYES_40 15754 3.76 1.46 4.83 58 XMSubMetaSx_00 15157 5.82 8.36 4.64 59 XM_B_SpammyWords3 13878 7.46 14.42 4.25 60 HTML_IMAGE_RATIO_04 13819 4.25 4.28 4.23 61 MPART_ALT_DIFF 13701 4.84 6.24 4.20 62 XM_UncommonTLD01 13649 4.64 5.62 4.18 63 TR_XM_SpammyWords4 13597 6.37 11.15 4.17 64 T_REMOTE_IMAGE 13176 3.30 1.69 4.04 65 RCVD_IN_VALIDITY_SAFE 12863 3.38 2.17 3.94 66 RCVD_IN_IADB_LISTED 12367 2.94 1.09 3.79 67 RELAYCOUNTRY_META 11889 6.93 14.04 3.64 68 BAYES_20 11466 2.75 1.09 3.51 69 RCVD_IN_IADB_SPF 10867 2.58 0.96 3.33 70 BAYES_80 10630 5.04 8.91 3.26 71 BOTNET_IPINHOSTNAME 10484 5.85 11.57 3.21 72 BAYES_99 10305 12.14 31.59 3.16 73 XM_Body_Dirty_Words 10283 4.94 8.81 3.15 74 BOUNCE_MESSAGE 10207 2.45 0.98 3.13 75 ANY_BOUNCE_MESSAGE 10207 2.45 0.98 3.13 76 T_TooManySym_02 10171 2.36 0.72 3.12 77 XMNumbers 9750 3.11 3.38 2.99 78 XM_B_FormFill 9734 2.05 0.03 2.98 79 RCVD_IN_IADB_SENDERID 9733 2.32 0.90 2.98 80 RCVD_IN_IADB_DK 9517 2.27 0.88 2.92 81 HTML_IMAGE_RATIO_06 9492 3.00 3.21 2.91 82 RCVD_IN_VALIDITY_CERTIFIED 9342 2.51 1.76 2.86 83 MAILING_LIST_MULTI 9321 2.64 2.17 2.86 84 DKIM_INVALID 8953 3.80 6.09 2.74 85 HTML_MIME_NO_HTML_TAG 8543 2.31 1.65 2.62 86 RCVD_IN_IADB_VOUCHED 8025 1.87 0.59 2.46 87 XM_CamelCaseFrm001 7963 2.65 3.09 2.44 88 HTML_IMAGE_RATIO_08 7908 2.64 3.11 2.42 89 BAYES_999 7788 9.51 24.93 2.39 90 XM_B_SpammyTLD 7708 2.71 3.46 2.36 91 XM_B_URI_Unicode 7501 2.39 2.58 2.30 92 INVALID_MSGID 7432 1.64 0.25 2.28 93 MIME_HTML_ONLY_MULTI 7363 2.64 3.48 2.26 94 BAYES_05 7094 1.68 0.62 2.17 95 MIME_HTML_MOSTLY 6986 2.43 3.06 2.14 96 XMSexyCombo_05 6708 2.92 4.79 2.06 97 TR_XM_DKIM_Undo 6686 9.91 26.94 2.05 98 BAYES_95 6330 3.05 5.44 1.94 99 TO_MALFORMED 6172 1.30 0.01 1.89 100 FROM_EXCESS_BASE64 5863 1.87 2.03 1.80 101 XM_SPF_SoftFail 5787 2.41 3.80 1.77 102 RCVD_IN_IADB_OPTIN 5751 1.32 0.36 1.76 103 TR_XM_SpammyRelay 5670 4.46 10.36 1.74 104 XMDiploma_00 5494 2.31 3.66 1.68 105 TM2_M_URI_OPT_OUT 5469 2.13 3.12 1.68 106 KHOP_HELO_FCRDNS 5444 1.61 1.49 1.67 107 BOTNET 5420 4.04 9.19 1.66 108 XM_DK_Undo_01 5377 1.74 1.94 1.65 109 XM_B_Unsub2 5346 1.81 2.18 1.64 110 TooManyTo_003 5311 1.36 0.78 1.63 111 TM2_M_VERY_LONG_WORD 5042 2.37 4.14 1.54 112 TR_XM_PhishingBody 4997 2.33 4.06 1.53 113 T_XMDrugObfuBody_14 4973 2.45 4.47 1.52 114 IN_HORDE_ADDRESS_BOOK 4862 1.05 0.09 1.49 115 TR_XM_UnparsRelay 4840 3.93 9.24 1.48 116 XM_B_Investor 4834 2.34 4.19 1.48 117 URI_HEX 4828 1.55 1.70 1.48 118 UNTRUSTED_Relay 4728 2.58 5.04 1.45 119 TR_Symld_Words 4707 1.33 1.08 1.44 120 URI_NOVOWEL 4660 1.38 1.27 1.43 121 XMStockSpam_06 4651 1.55 1.82 1.42 122 T_XMDrugObfuBody_08 4626 1.86 2.83 1.42 123 TR_XM_SpammyWords5 4619 2.49 4.82 1.42 124 XM_SendGrid 4537 1.47 1.64 1.39 125 SUBJ_ALL_CAPS 4519 1.97 3.22 1.38 126 T_TooManySym_03 4479 1.00 0.20 1.37 127 XMGappySubj_01 4418 0.97 0.13 1.35 128 HELO_NODOT 4254 0.97 0.25 1.30 129 HELO_NO_DOMAIN 4252 0.97 0.25 1.30 130 TR_DCC_Bayes_99 4089 8.04 22.74 1.25 131 XM_OfRef6 4057 2.14 4.09 1.24 132 TooManyTo_004 3990 1.07 0.73 1.22 133 XMCapTrack 3953 1.09 0.84 1.21 134 FROM_GOV_DKIM_AU 3851 0.87 0.21 1.18 135 XM_GoogleGroups 3847 1.04 0.73 1.18 136 HTTPS_HTTP_MISMATCH 3527 1.22 1.52 1.08 137 XM_H_Long_From02 3251 1.34 2.09 1.00 138 TooManyTo_005 3227 0.90 0.70 0.99 139 RELAYCOUNTRY_CA 3164 2.11 4.57 0.97 140 SpammyFromTLD_01 3163 1.32 2.07 0.97 141 TVD_SPACE_RATIO 3156 0.71 0.15 0.97 142 T_FILL_THIS_FORM_SHORT 3116 1.18 1.68 0.95 143 XMNoVowels 3094 0.81 0.51 0.95 144 TR_XM_DK_SendGrid 3008 0.90 0.86 0.92 145 XM_UB50 3004 1.42 2.49 0.92 146 XMBody_95 2964 0.67 0.16 0.91 147 XM_B_COPY_HTML 2956 1.14 1.64 0.91 148 XMGenDplmaNmb 2832 1.20 1.93 0.87 149 XMBrknScrpt_02 2820 1.00 1.28 0.86 150 DKIM_ADSP_CUSTOM_MED 2779 1.24 2.10 0.85 151 T_XMDrugObfuBody_00 2750 1.21 2.02 0.84 152 RCVD_IN_BL_SPAMCOP_NET 2747 3.74 10.00 0.84 153 XM_ShortIntro_01 2549 0.71 0.56 0.78 154 TR_XM_Base64_M1 2509 0.83 0.96 0.77 155 XMGappySubj_02 2478 0.54 0.06 0.76 156 TR_MetaPhish_Combo_01 2468 0.71 0.61 0.76 157 RCVD_IN_PBL 2438 0.76 0.79 0.75 158 T_Symld_Words_02 2350 0.69 0.63 0.72 159 RELAYCOUNTRY_AU 2265 1.37 2.85 0.69 160 XM_B_SpammyWords4 2234 1.26 2.50 0.68 161 T_OBFU_PDF_ATTACH 2142 0.57 0.38 0.66 162 TVD_RCVD_IP 2117 0.79 1.10 0.65 163 XM_B_DNDMA 1989 0.65 0.75 0.61 164 XM_H_PHPMailer 1984 0.62 0.66 0.61 165 NML_ADSP_CUSTOM_MED 1976 1.00 1.87 0.61 166 T_XMHurry_00 1930 1.01 1.92 0.59 167 MPART_ALT_DIFF_COUNT 1913 0.70 0.95 0.59 168 FILL_THIS_FORM 1886 0.68 0.90 0.58 169 HTML_TAG_BALANCE_BODY 1877 0.70 0.96 0.58 170 XMSubMetaI_00 1855 0.66 0.87 0.57 171 HTML_IMAGE_ONLY_32 1831 0.50 0.36 0.56 172 MSGID_FROM_MTA_HEADER 1803 0.44 0.20 0.55 173 URI_TRY_3LD 1766 0.76 1.23 0.54 174 XMMoneyMeta_00 1700 0.63 0.86 0.52 175 FORGED_GMAIL_RCVD 1700 0.87 1.63 0.52 176 XMLngstWrd_00 1662 0.55 0.63 0.51 177 XMSlimDrugH 1638 0.54 0.63 0.50 178 XM_ProductURIs 1619 0.58 0.77 0.50 179 TR_XM_SPAMCOP 1612 3.02 8.49 0.49 180 XMOemUri 1611 0.45 0.35 0.49 181 XMPhish30 1567 0.76 1.37 0.48 182 TO_NO_BRKTS_HTML_ONLY 1512 0.40 0.27 0.46 183 LongTLD 1453 0.50 0.62 0.45 184 MISSING_HEADERS 1442 0.45 0.47 0.44 185 USER_IN_WELCOMELIST 1436 0.30 0.00 0.44 186 USER_IN_WHITELIST 1436 0.30 0.00 0.44 187 MIME_CHARSET_FARAWAY 1425 0.74 1.39 0.44 188 HTML_IMAGE_ONLY_28 1415 0.38 0.27 0.43 189 RELAYCOUNTRY_GB 1405 0.71 1.31 0.43 190 XM_URI_RBL 1395 1.01 2.26 0.43 191 TM2_M_BODY_EMPTY 1384 0.70 1.30 0.42 192 XMPhish14 1335 0.56 0.90 0.41 193 URI_OPTOUT_3LD 1323 0.34 0.20 0.41 194 XMDateMe_00 1322 0.44 0.52 0.41 195 HTML_IMAGE_ONLY_20 1317 0.51 0.73 0.40 196 HTML_FONT_FACE_BAD 1299 0.42 0.47 0.40 197 SpammyFromTLD_02 1278 0.83 1.78 0.39 198 FROM_GOV_SPOOF 1275 0.30 0.10 0.39 199 XMBody_17 1273 1.19 2.93 0.39 200 SHORT_HELO_AND_INLINE_IMAGE 1251 0.27 0.02 0.38 ----------------------------------------------------------------------