Email: 549977 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 1.41 sec Spam: 147036 Autolearn: 0 AvgScore: 14.79 AvgScanTime: 1.68 sec Ham: 402941 Autolearn: 0 AvgScore: -1.59 AvgScanTime: 1.32 sec Time Spent Running SA: 216.12 hours Time Spent Processing Spam: 68.42 hours Time Spent Processing Ham: 147.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138882 91.04 94.45 89.79 2 DKIM_SIGNED 127489 67.23 86.71 60.13 3 XM_DK_Pass 121652 65.30 82.74 58.93 4 RELAYCOUNTRY_US 120526 77.01 81.97 75.19 5 DKIM_VALID 119716 64.27 81.42 58.02 6 XM_B_Unicode 119039 71.74 80.96 68.38 7 DCC_CHECK 108988 42.91 74.12 31.51 8 XM_B_SpammyWords 100599 54.35 68.42 49.22 9 XMListUnsubscribeExists 98295 45.84 66.85 38.17 10 DKIM_VALID_AU 93061 50.90 63.29 46.37 11 LOC_TINY_FONT_1 70778 27.95 48.14 20.58 12 XM_B_Unicode3 70138 41.00 47.70 38.56 13 BAYES_50 61540 50.12 41.85 53.14 14 XM_DK_Undo_02 58448 13.25 39.75 3.58 15 XM_B_SpammyWords2 57463 23.66 39.08 18.04 16 RCVD_IN_MSPIKE_H2 55935 30.10 38.04 27.20 17 HTML_FONT_LOW_CONTRAST 52464 25.57 35.68 21.88 18 FVGT_m_MULTI_ODD 46887 22.89 31.89 19.60 19 T_KAM_HTML_FONT_INVALID 46870 20.97 31.88 16.99 20 DKIM_VALID_EF 44142 25.26 30.02 23.53 21 MIME_HTML_ONLY 44006 28.24 29.93 27.63 22 BAYES_99 42736 9.96 29.06 2.99 23 TR_XM_DKIM_Undo 41993 8.73 28.56 1.50 24 XMSubLong 37919 22.71 25.79 21.58 25 DCC_CHECK_NEGATIVE 35575 56.62 24.19 68.45 26 BAYES_999 32437 7.24 22.06 1.83 27 XM_Multi_Part_URI 32058 18.18 21.80 16.86 28 T_TM2_M_HEADER_IN_MSG 30633 25.90 20.83 27.75 29 TR_DCC_Bayes_99 30309 6.09 20.61 0.79 30 TR_XM_DK_Unsub 29268 12.62 19.91 9.96 31 UNPARSEABLE_RELAY 26419 11.47 17.97 9.10 32 XM_B_Unsub 26107 10.56 17.76 7.94 33 TR_XM_BayesUnsub 24918 8.82 16.95 5.86 34 RELAYCOUNTRY_META 24540 6.69 16.69 3.04 35 TR_MAX_INTL_RELAY 23337 11.17 15.87 9.45 36 XM_B_SpammyWords3 20400 6.03 13.87 3.17 37 LOTS_OF_MONEY 17755 8.48 12.08 7.17 38 TR_XM_SpammyWords2 16186 3.15 11.01 0.28 39 BOTNET_IPINHOSTNAME 16103 4.68 10.95 2.39 40 FSL_BULK_SIG 15840 7.52 10.77 6.34 41 TR_XM_SpammyRelay 15562 3.90 10.58 1.46 42 TR_XM_SpammyWords4 15481 6.93 10.53 5.62 43 RCVD_IN_BL_SPAMCOP_NET 15267 3.28 10.38 0.69 44 BOTNET 14997 3.46 10.20 0.99 45 BAYES_80 14094 6.81 9.59 5.80 46 XM_Evil_Numbers_Gen 13264 8.27 9.02 8.00 47 TR_XM_SPAMCOP 13116 2.64 8.92 0.35 48 TR_XM_UnparsRelay 12838 3.19 8.73 1.16 49 XMSubMetaSx_00 12191 4.65 8.29 3.32 50 BAYES_60 11993 7.96 8.16 7.89 51 XM_B_Phish_Phrases 11871 5.40 8.07 4.43 52 LotsOfNums_01 11514 6.82 7.83 6.45 53 XM_Body_Dirty_Words 11172 3.46 7.60 1.95 54 UNTRUSTED_Relay 11107 2.99 7.55 1.33 55 XM_UncommonTLD01 10656 4.36 7.25 3.31 56 MPART_ALT_DIFF 9103 7.73 6.19 8.30 57 HTML_IMAGE_RATIO_02 8948 4.39 6.09 3.77 58 RCVD_IN_VALIDITY_RPBL 8696 1.64 5.91 0.08 59 XM_B_PhoneNumber 8462 7.56 5.76 8.22 60 BAYES_95 8459 4.21 5.75 3.65 61 HTML_IMAGE_RATIO_04 8347 11.33 5.68 13.39 62 XM_H_Long_From01 7866 4.88 5.35 4.71 63 DKIM_INVALID 7773 2.96 5.29 2.11 64 XMSexyCombo_05 7543 2.21 5.13 1.15 65 XM_B_Investor 7119 2.21 4.84 1.24 66 XM_H_GMP 7106 4.70 4.83 4.65 67 RELAYCOUNTRY_CA 6856 1.86 4.66 0.83 68 XMStrtUSub 6719 8.19 4.57 9.51 69 XM_OfRef6 6406 1.79 4.36 0.85 70 T_XMDrugObfuBody_14 6259 2.23 4.26 1.50 71 TR_XM_PhishingBody 5853 2.26 3.98 1.64 72 RCVD_IN_MSPIKE_H3 5735 4.37 3.90 4.55 73 RCVD_IN_MSPIKE_WL 5735 4.37 3.90 4.55 74 XM_B_SpammyTLD 5635 3.08 3.83 2.81 75 MIME_HTML_ONLY_MULTI 5365 5.87 3.65 6.68 76 TM2_M_VERY_LONG_WORD 5234 1.96 3.56 1.38 77 TooManyTo_001 5230 6.18 3.56 7.13 78 XM_UB50 5092 1.55 3.46 0.85 79 XM_SPF_SoftFail 4992 1.83 3.40 1.26 80 MIME_HTML_MOSTLY 4713 2.29 3.21 1.96 81 RELAYCOUNTRY_AU 4713 1.21 3.21 0.48 82 HTML_IMAGE_RATIO_06 4701 3.62 3.20 3.78 83 MIME_QP_LONG_LINE 4632 3.97 3.15 4.26 84 T_REMOTE_IMAGE 4561 2.99 3.10 2.95 85 XM_CamelCaseFrm001 4485 2.10 3.05 1.76 86 XMNumbers 4449 2.62 3.03 2.47 87 HTML_IMAGE_RATIO_08 4435 1.90 3.02 1.49 88 TR_XM_SpammyWords5 4322 1.63 2.94 1.16 89 SpammyFromTLD_02 4296 1.04 2.92 0.35 90 DKIM_ADSP_NXDOMAIN 4224 0.94 2.87 0.24 91 XM_URI_RBL 4216 0.99 2.87 0.31 92 NO_DNS_FOR_FROM 4044 0.90 2.75 0.22 93 XMDiploma_00 4031 1.68 2.74 1.29 94 TR_XM_MaxWHORU 4030 0.87 2.74 0.18 95 XM_B_Unsub2 4027 1.70 2.74 1.32 96 T_XMDrugObfuBody_08 3853 1.57 2.62 1.19 97 XM_B_URI_Unicode 3639 1.71 2.47 1.44 98 XM_B_SpammyWords4 3543 0.95 2.41 0.42 99 T_TooManySym_01 3528 4.17 2.40 4.82 100 TM2_M_URI_OPT_OUT 3467 1.58 2.36 1.29 101 RCVD_IN_VALIDITY_SAFE 3445 3.16 2.34 3.46 102 MAILING_LIST_MULTI 3381 2.42 2.30 2.46 103 TR_XM_NoHeaderRelay 3331 0.76 2.27 0.22 104 XMBody_17 3315 0.81 2.25 0.28 105 ALL_TRUSTED 3307 16.90 2.25 22.24 106 XM_DK_Undo_01 3063 1.58 2.08 1.40 107 T_XMHurry_00 2983 0.91 2.03 0.50 108 LongTLD 2888 0.75 1.96 0.31 109 FROM_EXCESS_BASE64 2756 1.69 1.87 1.63 110 XMStockSpam_06 2731 1.19 1.86 0.95 111 HTML_SHORT_LINK_IMG_1 2660 0.52 1.81 0.05 112 HDRS_LCASE_IMGONLY 2647 0.51 1.80 0.04 113 T_XMDrugObfuBody_00 2621 0.84 1.78 0.49 114 URI_HEX 2541 1.12 1.73 0.90 115 SpammyFromTLD_01 2490 1.02 1.69 0.77 116 TR_XM_INV_DKIM 2476 0.51 1.68 0.09 117 RCVD_IN_VALIDITY_CERTIFIED 2452 2.35 1.67 2.60 118 SHORTCIRCUIT 2424 0.44 1.65 0.00 119 RCVD_IN_ZEN_LASTEXTERNAL 2424 0.44 1.65 0.00 120 HTML_MIME_NO_HTML_TAG 2398 1.92 1.63 2.03 121 XM_B_COPY_HTML 2332 0.98 1.59 0.76 122 USER_IN_DEF_DKIM_WL 2270 7.69 1.54 9.93 123 BAYES_40 2242 4.37 1.52 5.40 124 XMBrknScrpt_02 2217 0.87 1.51 0.64 125 T_FILL_THIS_FORM_SHORT 2211 0.91 1.50 0.69 126 FROM_SUSPICIOUS_NTLD 2171 0.42 1.48 0.04 127 XM_B_SEO 2163 0.56 1.47 0.23 128 XMPhish30 2157 0.76 1.47 0.51 129 DIET_1 2155 0.55 1.47 0.22 130 HTTPS_HTTP_MISMATCH 2150 0.89 1.46 0.68 131 XMGenDplmaNmb 2117 0.84 1.44 0.62 132 TR_Symld_Words 2091 1.36 1.42 1.33 133 TR_XM_PHPForged 2089 0.58 1.42 0.28 134 URIBL_CSS_A 2066 0.48 1.41 0.14 135 URIBL_CSS 2066 0.48 1.41 0.14 136 TR_XM_PHPDW 2057 0.58 1.40 0.28 137 SUSP_UTF8_WORD_SUBJ 2030 0.38 1.38 0.02 138 TR_XM_FormFill2 2021 0.57 1.37 0.28 139 SH_BODYURI_REVERSE_CSS 2019 0.47 1.37 0.14 140 XM_H_PHPOS 1992 0.56 1.35 0.27 141 XM_SendGrid 1975 1.32 1.34 1.31 142 RELAYCOUNTRY_RU 1945 0.36 1.32 0.01 143 FROM_SUSPICIOUS_NTLD_FP 1856 0.35 1.26 0.02 144 TR_XM_SEO4 1794 0.40 1.22 0.10 145 T_MONEY_PERCENT 1791 0.47 1.22 0.20 146 TR_LOTS_OF_MONEY2 1791 0.47 1.22 0.20 147 RCVD_IN_XBL 1777 0.34 1.21 0.02 148 XM_UB99 1776 0.33 1.21 0.00 149 XM_Lotto 1771 0.36 1.20 0.05 150 XM_B_COVIDMETA 1740 0.48 1.18 0.22 151 KHOP_HELO_FCRDNS 1732 1.21 1.18 1.22 152 XMSubMetaI_00 1731 0.51 1.18 0.27 153 SUBJ_ALL_CAPS 1724 1.16 1.17 1.16 154 RCVD_IN_IADB_LISTED 1708 2.50 1.16 2.99 155 XMHTML_After_End 1704 0.49 1.16 0.24 156 BAYES_20 1684 3.24 1.15 4.01 157 HTML_IMAGE_ONLY_20 1673 0.53 1.14 0.31 158 XM_H_Long_From02 1670 0.93 1.14 0.86 159 FILL_THIS_FORM 1622 0.51 1.10 0.30 160 TR_XM_InvalidRelay 1605 0.30 1.09 0.01 161 XM_UB60 1598 0.34 1.09 0.06 162 URI_TRY_3LD 1575 0.60 1.07 0.42 163 XM_H_Undi_Recip 1572 0.40 1.07 0.15 164 SHOPIFY_IMG_NOT_RCVD_SFY 1557 0.41 1.06 0.17 165 HK_RANDOM_REPLYTO 1544 0.33 1.05 0.07 166 RELAYCOUNTRY_FR 1541 0.42 1.05 0.19 167 SUSP_UTF8_WORD_COMBO 1539 0.31 1.05 0.04 168 RCVD_IN_IADB_SPF 1531 2.21 1.04 2.63 169 RELAYCOUNTRY_TH 1524 0.28 1.04 0.00 170 DEAR_BENEFICIARY 1511 0.28 1.03 0.01 171 MIME_CHARSET_FARAWAY 1504 0.57 1.02 0.40 172 XMBdyGiftCard01 1500 0.55 1.02 0.38 173 TM2_M_OBFU_COMMENT 1494 0.52 1.02 0.35 174 MONEY_FORM 1490 0.28 1.01 0.01 175 XMSexyCombo_01 1484 0.35 1.01 0.11 176 RCVD_IN_IADB_DK 1479 1.93 1.01 2.27 177 HTML_IMAGE_ONLY_12 1479 0.42 1.01 0.21 178 HTML_IMAGE_ONLY_08 1476 0.36 1.00 0.13 179 TM2_M_A_HREF_HREF 1471 0.41 1.00 0.19 180 HOSTED_IMG_MULTI_PUB_01 1464 0.28 1.00 0.02 181 RCVD_IN_PBL 1448 0.71 0.98 0.60 182 XM_HighProb1 1447 0.27 0.98 0.00 183 RCVD_IN_IADB_SENDERID 1436 1.98 0.98 2.35 184 XM_UB80 1436 0.27 0.98 0.01 185 XMReplyNow 1427 0.44 0.97 0.25 186 URI_NOVOWEL 1424 1.24 0.97 1.34 187 DKIM_ADSP_CUSTOM_MED 1423 0.78 0.97 0.71 188 TR_XM_RelayPhish 1422 0.31 0.97 0.07 189 BODY_URI_ONLY 1421 0.26 0.97 0.00 190 XM_B_Phish66 1421 0.44 0.97 0.24 191 ANY_BOUNCE_MESSAGE 1386 2.82 0.94 3.50 192 BOUNCE_MESSAGE 1386 2.82 0.94 3.50 193 XMBody_78 1377 0.44 0.94 0.25 194 XM_UB999 1319 0.24 0.90 0.00 195 XM_DIRTYINTL 1281 0.28 0.87 0.07 196 TR_XM_Undi_Recip19 1280 0.28 0.87 0.06 197 SHORT_IMG_SUSP_NTLD 1278 0.23 0.87 0.00 198 HTML_TAG_BALANCE_BODY 1259 0.59 0.86 0.49 199 T_STY_INVIS_DIRECT 1232 0.41 0.84 0.25 200 XM_ProductURIs 1222 0.60 0.83 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 361819 91.04 94.45 89.79 2 RELAYCOUNTRY_US 302988 77.01 81.97 75.19 3 DCC_CHECK_NEGATIVE 275798 56.62 24.19 68.45 4 XM_B_Unicode 275533 71.74 80.96 68.38 5 DKIM_SIGNED 242272 67.23 86.71 60.13 6 XM_DK_Pass 237464 65.30 82.74 58.93 7 DKIM_VALID 233767 64.27 81.42 58.02 8 BAYES_50 214110 50.12 41.85 53.14 9 XM_B_SpammyWords 198338 54.35 68.42 49.22 10 DKIM_VALID_AU 186859 50.90 63.29 46.37 11 XM_B_Unicode3 155356 41.00 47.70 38.56 12 XMListUnsubscribeExists 153806 45.84 66.85 38.17 13 DCC_CHECK 126981 42.91 74.12 31.51 14 T_TM2_M_HEADER_IN_MSG 111821 25.90 20.83 27.75 15 MIME_HTML_ONLY 111318 28.24 29.93 27.63 16 RCVD_IN_MSPIKE_H2 109593 30.10 38.04 27.20 17 DKIM_VALID_EF 94794 25.26 30.02 23.53 18 ALL_TRUSTED 89621 16.90 2.25 22.24 19 HTML_FONT_LOW_CONTRAST 88181 25.57 35.68 21.88 20 XMSubLong 86974 22.71 25.79 21.58 21 LOC_TINY_FONT_1 82932 27.95 48.14 20.58 22 FVGT_m_MULTI_ODD 78987 22.89 31.89 19.60 23 XM_B_SpammyWords2 72681 23.66 39.08 18.04 24 T_KAM_HTML_FONT_INVALID 68468 20.97 31.88 16.99 25 XM_Multi_Part_URI 67937 18.18 21.80 16.86 26 BAYES_00 56080 10.37 0.65 13.92 27 HTML_IMAGE_RATIO_04 53965 11.33 5.68 13.39 28 HTML_FONT_FACE_BAD 45628 8.51 0.82 11.32 29 XM_H_Trusted_IP 43252 7.86 0.00 10.73 30 TR_XM_DK_Unsub 40136 12.62 19.91 9.96 31 USER_IN_DEF_DKIM_WL 40028 7.69 1.54 9.93 32 XMStrtUSub 38335 8.19 4.57 9.51 33 TR_MAX_INTL_RELAY 38068 11.17 15.87 9.45 34 UNPARSEABLE_RELAY 36678 11.47 17.97 9.10 35 MPART_ALT_DIFF 33431 7.73 6.19 8.30 36 XM_B_PhoneNumber 33127 7.56 5.76 8.22 37 XM_Evil_Numbers_Gen 32242 8.27 9.02 8.00 38 XM_B_Unsub 31986 10.56 17.76 7.94 39 BAYES_60 31785 7.96 8.16 7.89 40 LOTS_OF_MONEY 28874 8.48 12.08 7.17 41 TooManyTo_001 28747 6.18 3.56 7.13 42 MIME_HTML_ONLY_MULTI 26902 5.87 3.65 6.68 43 LotsOfNums_01 26000 6.82 7.83 6.45 44 FSL_BULK_SIG 25533 7.52 10.77 6.34 45 TR_XM_DK_Bayes 23986 4.51 0.54 5.95 46 TR_XM_BayesUnsub 23605 8.82 16.95 5.86 47 TR_XM_DK_Bayes1 23600 4.43 0.54 5.86 48 BAYES_80 23352 6.81 9.59 5.80 49 TR_XM_SpammyWords4 22658 6.93 10.53 5.62 50 IN_ZIMBRA_NJ_WHITELIST 22388 4.09 0.07 5.56 51 BAYES_40 21777 4.37 1.52 5.40 52 XM_DKIMWhitelistDomains 21601 3.95 0.07 5.36 53 TR_XM_DK_Bayes2 20034 3.74 0.36 4.97 54 T_TooManySym_01 19430 4.17 2.40 4.82 55 XM_H_Long_From01 18966 4.88 5.35 4.71 56 XM_H_GMP 18732 4.70 4.83 4.65 57 RCVD_IN_MSPIKE_WL 18315 4.37 3.90 4.55 58 RCVD_IN_MSPIKE_H3 18315 4.37 3.90 4.55 59 XM_B_Phish_Phrases 17855 5.40 8.07 4.43 60 MIME_QP_LONG_LINE 17179 3.97 3.15 4.26 61 BAYES_20 16145 3.24 1.15 4.01 62 XMSubNoVowel 15612 2.98 0.53 3.87 63 HTML_IMAGE_RATIO_06 15213 3.62 3.20 3.78 64 HTML_IMAGE_RATIO_02 15179 4.39 6.09 3.77 65 XM_PDF 14811 2.90 0.79 3.68 66 BAYES_95 14710 4.21 5.75 3.65 67 XM_DK_Undo_02 14444 13.25 39.75 3.58 68 ANY_BOUNCE_MESSAGE 14123 2.82 0.94 3.50 69 BOUNCE_MESSAGE 14122 2.82 0.94 3.50 70 RCVD_IN_VALIDITY_SAFE 13950 3.16 2.34 3.46 71 XMSubMetaSx_00 13391 4.65 8.29 3.32 72 XM_UncommonTLD01 13348 4.36 7.25 3.31 73 BAYES_05 12927 2.51 0.61 3.21 74 XM_B_SpammyWords3 12776 6.03 13.87 3.17 75 RELAYCOUNTRY_META 12262 6.69 16.69 3.04 76 RCVD_IN_IADB_LISTED 12060 2.50 1.16 2.99 77 BAYES_99 12044 9.96 29.06 2.99 78 T_REMOTE_IMAGE 11902 2.99 3.10 2.95 79 XM_B_SpammyTLD 11318 3.08 3.83 2.81 80 RCVD_IN_IADB_SPF 10611 2.21 1.04 2.63 81 RCVD_IN_VALIDITY_CERTIFIED 10488 2.35 1.67 2.60 82 TooManyTo_002 10385 2.08 0.73 2.58 83 XMNumbers 9968 2.62 3.03 2.47 84 T_TooManySym_02 9958 2.00 0.70 2.47 85 MAILING_LIST_MULTI 9904 2.42 2.30 2.46 86 BOTNET_IPINHOSTNAME 9614 4.68 10.95 2.39 87 RCVD_IN_IADB_SENDERID 9470 1.98 0.98 2.35 88 RCVD_IN_IADB_DK 9159 1.93 1.01 2.27 89 DKIM_INVALID 8505 2.96 5.29 2.11 90 HTML_MIME_NO_HTML_TAG 8189 1.92 1.63 2.03 91 RCVD_IN_IADB_VOUCHED 7961 1.59 0.52 1.98 92 MIME_HTML_MOSTLY 7881 2.29 3.21 1.96 93 XM_Body_Dirty_Words 7863 3.46 7.60 1.95 94 XMSubLongNoVowel 7661 1.42 0.12 1.90 95 XMSubGarbage 7440 1.38 0.09 1.85 96 BAYES_999 7373 7.24 22.06 1.83 97 INVALID_MSGID 7241 1.38 0.23 1.80 98 XM_CamelCaseFrm001 7073 2.10 3.05 1.76 99 TR_XM_PhishingBody 6596 2.26 3.98 1.64 100 FROM_EXCESS_BASE64 6562 1.69 1.87 1.63 101 TO_MALFORMED 6208 1.13 0.01 1.54 102 TR_XM_DKIM_Undo 6039 8.73 28.56 1.50 103 T_XMDrugObfuBody_14 6032 2.23 4.26 1.50 104 HTML_IMAGE_RATIO_08 5992 1.90 3.02 1.49 105 TR_XM_SpammyRelay 5863 3.90 10.58 1.46 106 XM_B_URI_Unicode 5791 1.71 2.47 1.44 107 XM_DK_Undo_01 5635 1.58 2.08 1.40 108 RCVD_IN_IADB_OPTIN 5619 1.11 0.31 1.39 109 TM2_M_VERY_LONG_WORD 5548 1.96 3.56 1.38 110 URI_NOVOWEL 5403 1.24 0.97 1.34 111 TR_Symld_Words 5365 1.36 1.42 1.33 112 UNTRUSTED_Relay 5353 2.99 7.55 1.33 113 XM_B_Unsub2 5329 1.70 2.74 1.32 114 XM_SendGrid 5275 1.32 1.34 1.31 115 TM2_M_URI_OPT_OUT 5199 1.58 2.36 1.29 116 XMDiploma_00 5190 1.68 2.74 1.29 117 TooManyTo_003 5162 1.11 0.65 1.28 118 XM_SPF_SoftFail 5065 1.83 3.40 1.26 119 XM_B_Investor 5013 2.21 4.84 1.24 120 KHOP_HELO_FCRDNS 4900 1.21 1.18 1.22 121 T_XMDrugObfuBody_08 4794 1.57 2.62 1.19 122 TR_XM_UnparsRelay 4686 3.19 8.73 1.16 123 IN_HORDE_ADDRESS_BOOK 4680 0.88 0.09 1.16 124 SUBJ_ALL_CAPS 4678 1.16 1.17 1.16 125 TR_XM_SpammyWords5 4668 1.63 2.94 1.16 126 XMSexyCombo_05 4626 2.21 5.13 1.15 127 XMGappySubj_01 4524 0.87 0.16 1.12 128 HELO_NODOT 4263 0.86 0.30 1.06 129 HELO_NO_DOMAIN 4260 0.85 0.30 1.06 130 T_TooManySym_03 4035 0.80 0.23 1.00 131 BOTNET 4008 3.46 10.20 0.99 132 XMCapTrack 3975 0.85 0.47 0.99 133 TooManyTo_004 3844 0.86 0.60 0.95 134 XMStockSpam_06 3816 1.19 1.86 0.95 135 XM_GoogleGroups 3808 0.86 0.62 0.95 136 URI_HEX 3639 1.12 1.73 0.90 137 XM_H_Long_From02 3457 0.93 1.14 0.86 138 XM_E_Blogspot 3442 0.65 0.11 0.85 139 XM_OfRef6 3431 1.79 4.36 0.85 140 XM_UB50 3418 1.55 3.46 0.85 141 RELAYCOUNTRY_CA 3361 1.86 4.66 0.83 142 TR_DCC_Bayes_99 3190 6.09 20.61 0.79 143 XM_B_FormFill 3184 0.59 0.02 0.79 144 SpammyFromTLD_01 3121 1.02 1.69 0.77 145 TVD_SPACE_RATIO 3120 0.61 0.15 0.77 146 TooManyTo_005 3073 0.70 0.54 0.76 147 XM_B_COPY_HTML 3069 0.98 1.59 0.76 148 TR_XM_DK_SendGrid 2951 0.72 0.70 0.73 149 DKIM_ADSP_CUSTOM_MED 2880 0.78 0.97 0.71 150 RCVD_IN_BL_SPAMCOP_NET 2796 3.28 10.38 0.69 151 T_FILL_THIS_FORM_SHORT 2777 0.91 1.50 0.69 152 HTTPS_HTTP_MISMATCH 2727 0.89 1.46 0.68 153 FROM_GOV_DKIM_AU 2669 0.58 0.37 0.66 154 XMNoVowels 2635 0.70 0.81 0.65 155 XMBrknScrpt_02 2561 0.87 1.51 0.64 156 XMGappySubj_02 2516 0.47 0.05 0.62 157 XMGenDplmaNmb 2483 0.84 1.44 0.62 158 RCVD_IN_PBL 2431 0.71 0.98 0.60 159 XM_ShortIntro_01 2388 0.56 0.48 0.59 160 XMPhish14 2381 0.63 0.74 0.59 161 TR_XM_Base64_M1 2368 0.61 0.69 0.59 162 XM_H_PHPMailer 2334 0.61 0.69 0.58 163 T_Symld_Words_02 2257 0.61 0.74 0.56 164 TR_MetaPhish_Combo_01 2212 0.59 0.70 0.55 165 XMBody_95 2110 0.45 0.25 0.52 166 XMLngstWrd_00 2095 0.51 0.48 0.52 167 XM_ProductURIs 2064 0.60 0.83 0.51 168 XMPhish30 2046 0.76 1.47 0.51 169 T_XMHurry_00 2029 0.91 2.03 0.50 170 T_XMDrugObfuBody_00 1973 0.84 1.78 0.49 171 HTML_TAG_BALANCE_BODY 1970 0.59 0.86 0.49 172 TVD_RCVD_IP 1948 0.53 0.65 0.48 173 RELAYCOUNTRY_AU 1915 1.21 3.21 0.48 174 MY_SERVERS_FOUND 1842 0.47 0.50 0.46 175 NML_ADSP_CUSTOM_MED 1829 0.55 0.80 0.45 176 T_OBFU_PDF_ATTACH 1766 0.36 0.16 0.44 177 FORGED_GMAIL_RCVD 1757 0.50 0.67 0.44 178 URI_TRY_3LD 1708 0.60 1.07 0.42 179 XM_B_SpammyWords4 1696 0.95 2.41 0.42 180 HTML_IMAGE_ONLY_32 1645 0.35 0.21 0.41 181 XMMoneyMeta_00 1625 0.46 0.63 0.40 182 MISSING_HEADERS 1610 0.44 0.55 0.40 183 MIME_CHARSET_FARAWAY 1606 0.57 1.02 0.40 184 TO_NO_BRKTS_HTML_ONLY 1584 0.38 0.34 0.39 185 MPART_ALT_DIFF_COUNT 1573 0.50 0.81 0.39 186 XMBdyGiftCard01 1538 0.55 1.02 0.38 187 HTML_IMAGE_ONLY_28 1508 0.33 0.21 0.37 188 RELAYCOUNTRY_GB 1475 0.48 0.78 0.37 189 XM_B_DNDMA 1459 0.48 0.79 0.36 190 TR_XM_SpoofStaff 1441 0.30 0.15 0.36 191 XM_H_SpoofStaff4 1425 0.29 0.10 0.35 192 SpammyFromTLD_02 1413 1.04 2.92 0.35 193 XMLngstWrd_01 1410 0.37 0.42 0.35 194 TR_XM_SPAMCOP 1407 2.64 8.92 0.35 195 MSGID_FROM_MTA_HEADER 1393 0.32 0.24 0.35 196 TM2_M_OBFU_COMMENT 1393 0.52 1.02 0.35 197 XMDateMe_00 1311 0.37 0.48 0.33 198 XMSolicitRefs_0 1306 0.36 0.47 0.32 199 TM2_M_BODY_EMPTY 1280 0.26 0.09 0.32 200 HTML_IMAGE_ONLY_20 1255 0.53 1.14 0.31 ----------------------------------------------------------------------