Email: 511944 Autolearn: 0 AvgScore: 2.99 AvgScanTime: 1.46 sec Spam: 153929 Autolearn: 0 AvgScore: 14.72 AvgScanTime: 1.64 sec Ham: 358015 Autolearn: 0 AvgScore: -2.05 AvgScanTime: 1.38 sec Time Spent Running SA: 207.67 hours Time Spent Processing Spam: 70.25 hours Time Spent Processing Ham: 137.42 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146370 90.61 95.09 88.68 2 DKIM_SIGNED 132533 72.54 86.10 66.72 3 XM_DK_Pass 126185 70.21 81.98 65.15 4 RELAYCOUNTRY_US 125295 82.35 81.40 82.77 5 DKIM_VALID 124582 69.19 80.93 64.15 6 XM_B_Unicode 124234 75.40 80.71 73.11 7 DCC_CHECK 113736 46.30 73.89 34.44 8 XMListUnsubscribeExists 103986 50.23 67.55 42.79 9 XM_B_SpammyWords 103239 50.05 67.07 42.73 10 DKIM_VALID_AU 96364 54.60 62.60 51.15 11 XM_B_Unicode3 73341 44.48 47.65 43.12 12 LOC_TINY_FONT_1 71311 30.09 46.33 23.10 13 BAYES_50 65593 52.73 42.61 57.09 14 RCVD_IN_MSPIKE_H2 61251 33.71 39.79 31.10 15 XM_B_SpammyWords2 60260 23.05 39.15 16.12 16 XM_DK_Undo_02 57484 14.39 37.34 4.52 17 HTML_FONT_LOW_CONTRAST 55011 27.98 35.74 24.65 18 FVGT_m_MULTI_ODD 49007 24.71 31.84 21.64 19 T_KAM_HTML_FONT_INVALID 48229 22.48 31.33 18.67 20 MIME_HTML_ONLY 46355 25.15 30.11 23.01 21 BAYES_99 43959 10.82 28.56 3.19 22 DKIM_VALID_EF 43383 26.48 28.18 25.75 23 TR_XM_DKIM_Undo 38813 8.99 25.21 2.01 24 XMSubLong 38760 23.59 25.18 22.90 25 DCC_CHECK_NEGATIVE 37603 53.17 24.43 65.52 26 BAYES_999 33746 8.28 21.92 2.41 27 T_TM2_M_HEADER_IN_MSG 32848 24.82 21.34 26.32 28 XM_Multi_Part_URI 32636 14.43 21.20 11.52 29 TR_DCC_Bayes_99 30838 6.75 20.03 1.04 30 TR_XM_DK_Unsub 30808 13.66 20.01 10.93 31 XM_B_Unsub 25912 10.50 16.83 7.78 32 UNPARSEABLE_RELAY 25071 11.83 16.29 9.91 33 TR_XM_BayesUnsub 24945 9.00 16.21 5.90 34 RELAYCOUNTRY_META 24561 7.37 15.96 3.68 35 TR_MAX_INTL_RELAY 22912 8.13 14.88 5.23 36 XM_B_SpammyWords3 22147 7.05 14.39 3.89 37 XMSubMetaSx_00 17730 7.36 11.52 5.57 38 LOTS_OF_MONEY 16941 7.03 11.01 5.33 39 RCVD_IN_BL_SPAMCOP_NET 16831 3.70 10.93 0.59 40 TR_XM_SpammyRelay 16692 4.50 10.84 1.78 41 FSL_BULK_SIG 16187 7.72 10.52 6.52 42 XM_Evil_Numbers_Gen 16172 9.63 10.51 9.25 43 TR_XM_SpammyWords2 15808 3.36 10.27 0.39 44 BOTNET 15310 4.02 9.95 1.47 45 TR_XM_SpammyWords4 15257 5.46 9.91 3.55 46 BOTNET_IPINHOSTNAME 14702 4.88 9.55 2.87 47 BAYES_80 14146 5.05 9.19 3.27 48 LotsOfNums_01 13370 7.90 8.69 7.57 49 XM_UncommonTLD01 13366 5.42 8.68 4.02 50 XM_B_Phish_Phrases 13154 5.30 8.55 3.91 51 BAYES_60 13080 6.86 8.50 6.16 52 TR_XM_SPAMCOP 12597 2.72 8.18 0.37 53 TR_XM_UnparsRelay 12260 3.30 7.96 1.29 54 XM_Body_Dirty_Words 11976 4.40 7.78 2.94 55 UNTRUSTED_Relay 9872 2.99 6.41 1.52 56 XM_B_PhoneNumber 9630 8.00 6.26 8.75 57 RELAYCOUNTRY_CA 9407 2.66 6.11 1.17 58 MPART_ALT_DIFF 8796 8.34 5.71 9.47 59 HTML_IMAGE_RATIO_02 8759 4.47 5.69 3.95 60 XMSexyCombo_05 8665 3.20 5.63 2.16 61 XM_H_Long_From01 8222 5.12 5.34 5.03 62 HTML_IMAGE_RATIO_04 8191 11.60 5.32 14.30 63 BAYES_95 8158 2.96 5.30 1.96 64 DKIM_INVALID 7951 3.35 5.17 2.57 65 HTML_IMAGE_RATIO_06 7920 4.86 5.15 4.73 66 XM_H_GMP 7578 5.01 4.92 5.05 67 XMStrtUSub 7521 9.00 4.89 10.77 68 XM_B_SpammyTLD 7129 3.10 4.63 2.43 69 TR_XM_PhishingBody 6953 2.41 4.52 1.50 70 RCVD_IN_VALIDITY_RPBL 6946 1.41 4.51 0.08 71 T_XMDrugObfuBody_14 6539 2.38 4.25 1.58 72 XM_B_Investor 6497 2.20 4.22 1.33 73 XM_OfRef6 5925 1.94 3.85 1.12 74 TM2_M_VERY_LONG_WORD 5809 1.89 3.77 1.08 75 SpammyFromTLD_02 5789 1.46 3.76 0.47 76 TR_XM_SpammyWords5 5489 1.93 3.57 1.23 77 XMStockSpam_06 5362 1.82 3.48 1.11 78 XMNoVowels 5319 2.46 3.46 2.03 79 RCVD_IN_PSBL 5186 1.30 3.37 0.40 80 TooManyTo_001 5169 6.60 3.36 8.00 81 RCVD_IN_MSPIKE_WL 4981 4.28 3.24 4.73 82 RCVD_IN_MSPIKE_H3 4981 4.28 3.24 4.73 83 XM_B_Unsub2 4976 1.89 3.23 1.31 84 XMNumbers 4952 2.86 3.22 2.71 85 XM_UB50 4908 1.66 3.19 1.01 86 MIME_HTML_ONLY_MULTI 4883 6.26 3.17 7.58 87 T_REMOTE_IMAGE 4720 3.30 3.07 3.41 88 T_XMDrugObfuBody_08 4701 1.98 3.05 1.51 89 HTML_IMAGE_RATIO_08 4650 2.11 3.02 1.71 90 MIME_HTML_MOSTLY 4627 2.48 3.01 2.25 91 XM_B_URI_Unicode 4594 2.12 2.98 1.75 92 ALL_TRUSTED 4497 10.84 2.92 14.25 93 MIME_QP_LONG_LINE 4409 4.05 2.86 4.56 94 XM_SPF_SoftFail 4340 1.83 2.82 1.41 95 XM_CamelCaseFrm001 4196 2.16 2.73 1.92 96 XM_URI_RBL 3964 1.04 2.58 0.38 97 MAILING_LIST_MULTI 3954 2.95 2.57 3.12 98 TR_XM_NoHeaderRelay 3752 0.83 2.44 0.14 99 RELAYCOUNTRY_AU 3722 1.01 2.42 0.40 100 T_TooManySym_01 3661 4.35 2.38 5.20 101 XMDiploma_00 3615 1.68 2.35 1.39 102 XM_B_SpammyWords4 3500 1.05 2.27 0.53 103 FROM_EXCESS_BASE64 3495 1.80 2.27 1.60 104 T_XMHurry_00 3471 0.99 2.25 0.44 105 TM2_M_URI_OPT_OUT 3386 1.72 2.20 1.51 106 HTML_MIME_NO_HTML_TAG 3170 2.18 2.06 2.24 107 RCVD_IN_VALIDITY_SAFE 3160 3.15 2.05 3.61 108 SpammyFromTLD_01 2988 1.20 1.94 0.89 109 DIET_1 2985 0.85 1.94 0.39 110 USER_IN_DEF_DKIM_WL 2958 8.51 1.92 11.35 111 XMBody_17 2912 0.85 1.89 0.40 112 DKIM_ADSP_NXDOMAIN 2891 0.78 1.88 0.30 113 NO_DNS_FOR_FROM 2883 0.73 1.87 0.24 114 T_FILL_THIS_FORM_SHORT 2871 1.11 1.87 0.79 115 TR_XM_MaxWHORU 2866 0.70 1.86 0.20 116 SUBJ_ALL_CAPS 2808 1.51 1.82 1.38 117 BAYES_40 2795 4.44 1.82 5.57 118 T_XMDrugObfuBody_00 2764 0.98 1.80 0.63 119 RCVD_IN_VALIDITY_CERTIFIED 2738 2.56 1.78 2.90 120 XMBrknScrpt_02 2602 0.98 1.69 0.67 121 XMPhish30 2599 0.80 1.69 0.41 122 KHOP_HELO_FCRDNS 2579 1.35 1.68 1.21 123 SHORTCIRCUIT 2574 0.50 1.67 0.00 124 RCVD_IN_ZEN_LASTEXTERNAL 2574 0.50 1.67 0.00 125 XMSexyCombo_01 2470 0.69 1.60 0.30 126 ANY_BOUNCE_MESSAGE 2388 2.82 1.55 3.37 127 RCVD_IN_IADB_LISTED 2378 2.68 1.54 3.17 128 BOUNCE_MESSAGE 2337 2.81 1.52 3.36 129 XMGenDplmaNmb 2314 0.94 1.50 0.69 130 NORDNS_LOW_CONTRAST 2227 0.46 1.45 0.03 131 RCVD_IN_IADB_SPF 2216 2.38 1.44 2.79 132 XM_DK_Undo_01 2200 1.39 1.43 1.37 133 RCVD_IN_IADB_DK 2169 2.13 1.41 2.44 134 RCVD_IN_IADB_SENDERID 2147 2.17 1.39 2.51 135 URI_TRUNCATED 2125 0.48 1.38 0.09 136 HTML_IMAGE_ONLY_20 2123 0.69 1.38 0.39 137 XMSubGiftCard1 2101 0.44 1.36 0.05 138 XMSlimDrugH 2078 0.65 1.35 0.35 139 HTML_TAG_BALANCE_BODY 2072 0.82 1.35 0.60 140 XMSubGiftCard2 2068 0.42 1.34 0.02 141 TR_XM_INV_DKIM 2066 0.50 1.34 0.14 142 BOTNET_NORDNS 2041 0.40 1.33 0.01 143 URI_HEX 2034 1.26 1.32 1.23 144 XM_SendGrid 1952 1.31 1.27 1.32 145 DKIM_ADSP_CUSTOM_MED 1942 0.88 1.26 0.71 146 HOSTED_IMG_MULTI_PUB_01 1913 0.39 1.24 0.03 147 URI_NOVOWEL 1898 1.31 1.23 1.34 148 MultiRelay_CC 1884 0.50 1.22 0.19 149 TR_Mismatch_TLD_02 1847 0.42 1.20 0.09 150 TR_XM_Base64_M1 1839 0.86 1.19 0.72 151 TR_XM_PHPDW 1829 0.59 1.19 0.33 152 TR_XM_PHPForged 1828 0.59 1.19 0.33 153 T_STY_INVIS_DIRECT 1827 0.57 1.19 0.30 154 XM_B_COPY_HTML 1824 0.90 1.18 0.77 155 LongTLD 1818 0.65 1.18 0.43 156 XM_UB99 1812 0.36 1.18 0.00 157 XM_B_Phish66 1806 0.55 1.17 0.28 158 MIME_CHARSET_FARAWAY 1800 0.60 1.17 0.36 159 TR_XM_FormFill2 1748 0.57 1.14 0.33 160 XM_H_PHPOS 1711 0.56 1.11 0.32 161 RELAYCOUNTRY_FR 1654 0.50 1.07 0.25 162 BAYES_20 1641 3.29 1.07 4.24 163 XM_B_SEO 1636 0.47 1.06 0.21 164 XM_H_Long_From02 1612 0.88 1.05 0.81 165 XMHTML_After_End 1607 0.55 1.04 0.34 166 RELAYCOUNTRY_DE 1597 0.57 1.04 0.37 167 SHOPIFY_IMG_NOT_RCVD_SFY 1592 0.47 1.03 0.22 168 RCVD_IN_PBL 1589 0.77 1.03 0.66 169 TM2_M_OBFU_COMMENT 1583 0.54 1.03 0.32 170 URI_TRY_3LD 1569 0.61 1.02 0.43 171 TR_LOTS_OF_MONEY3 1546 0.50 1.00 0.29 172 XMSubMetaSSx_00 1532 0.43 1.00 0.19 173 XM_HighProb1 1504 0.30 0.98 0.01 174 MPART_ALT_DIFF_COUNT 1494 0.60 0.97 0.45 175 XM_GoogleGroups 1474 1.11 0.96 1.17 176 XM_H_PHPMailer 1461 0.91 0.95 0.89 177 PLING_QUERY 1454 0.49 0.94 0.29 178 TR_XM_SEO4 1435 0.35 0.93 0.10 179 XM_OfRef7 1412 0.45 0.92 0.25 180 RCVD_IN_SORBS_DUL 1408 0.31 0.91 0.05 181 XMSubMetaI_00 1401 0.50 0.91 0.33 182 XMReplyNow 1391 0.46 0.90 0.27 183 HTTPS_HTTP_MISMATCH 1390 0.83 0.90 0.80 184 TO_NO_BRKTS_HTML_ONLY 1373 0.58 0.89 0.44 185 TR_XM_RelayPhish 1362 0.31 0.88 0.07 186 TR_Symld_Words 1355 1.29 0.88 1.46 187 TR_MetaPhish_Combo_01 1337 0.73 0.87 0.67 188 XMMoneyMeta_00 1332 0.57 0.87 0.44 189 XM_UB999 1330 0.26 0.86 0.00 190 XMPhish14 1317 0.61 0.86 0.50 191 XM_UB60 1310 0.32 0.85 0.10 192 XM_B_DNDMA 1295 0.60 0.84 0.50 193 RELAYCOUNTRY_GB 1289 0.56 0.84 0.45 194 XMBdyGiftCard01 1279 0.80 0.83 0.78 195 NML_ADSP_CUSTOM_MED 1272 0.58 0.83 0.47 196 RDNS_DYNAMIC 1270 0.42 0.83 0.24 197 MAY_BE_FORGED 1267 0.31 0.82 0.09 198 FONT_INVIS_LONG_LINE 1263 0.32 0.82 0.11 199 TR_XM_DK_SendGrid 1247 0.80 0.81 0.79 200 PDS_RDNS_DYNAMIC_FP 1232 0.34 0.80 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 317482 90.61 95.09 88.68 2 RELAYCOUNTRY_US 296315 82.35 81.40 82.77 3 XM_B_Unicode 261755 75.40 80.71 73.11 4 DKIM_SIGNED 238850 72.54 86.10 66.72 5 DCC_CHECK_NEGATIVE 234573 53.17 24.43 65.52 6 XM_DK_Pass 233244 70.21 81.98 65.15 7 DKIM_VALID 229653 69.19 80.93 64.15 8 BAYES_50 204373 52.73 42.61 57.09 9 DKIM_VALID_AU 183134 54.60 62.60 51.15 10 XM_B_Unicode3 154370 44.48 47.65 43.12 11 XMListUnsubscribeExists 153181 50.23 67.55 42.79 12 XM_B_SpammyWords 152973 50.05 67.07 42.73 13 DCC_CHECK 123293 46.30 73.89 34.44 14 RCVD_IN_MSPIKE_H2 111346 33.71 39.79 31.10 15 T_TM2_M_HEADER_IN_MSG 94216 24.82 21.34 26.32 16 DKIM_VALID_EF 92189 26.48 28.18 25.75 17 HTML_FONT_LOW_CONTRAST 88233 27.98 35.74 24.65 18 LOC_TINY_FONT_1 82717 30.09 46.33 23.10 19 MIME_HTML_ONLY 82397 25.15 30.11 23.01 20 XMSubLong 82000 23.59 25.18 22.90 21 FVGT_m_MULTI_ODD 77489 24.71 31.84 21.64 22 T_KAM_HTML_FONT_INVALID 66839 22.48 31.33 18.67 23 XM_B_SpammyWords2 57718 23.05 39.15 16.12 24 BAYES_00 54151 10.79 0.71 15.13 25 HTML_IMAGE_RATIO_04 51181 11.60 5.32 14.30 26 ALL_TRUSTED 51000 10.84 2.92 14.25 27 HTML_FONT_FACE_BAD 45836 9.14 0.62 12.80 28 XM_H_Trusted_IP 43452 8.49 0.00 12.14 29 XM_Multi_Part_URI 41242 14.43 21.20 11.52 30 USER_IN_DEF_DKIM_WL 40625 8.51 1.92 11.35 31 TR_XM_DK_Unsub 39130 13.66 20.01 10.93 32 XMStrtUSub 38547 9.00 4.89 10.77 33 UNPARSEABLE_RELAY 35485 11.83 16.29 9.91 34 MPART_ALT_DIFF 33901 8.34 5.71 9.47 35 XM_Evil_Numbers_Gen 33120 9.63 10.51 9.25 36 XM_B_PhoneNumber 31330 8.00 6.26 8.75 37 TooManyTo_001 28629 6.60 3.36 8.00 38 XM_B_Unsub 27845 10.50 16.83 7.78 39 MIME_HTML_ONLY_MULTI 27142 6.26 3.17 7.58 40 LotsOfNums_01 27095 7.90 8.69 7.57 41 FSL_BULK_SIG 23349 7.72 10.52 6.52 42 TR_XM_DK_Bayes 23116 4.67 0.53 6.46 43 TR_XM_DK_Bayes1 22529 4.55 0.51 6.29 44 BAYES_60 22064 6.86 8.50 6.16 45 IN_ZIMBRA_NJ_WHITELIST 21380 4.22 0.15 5.97 46 XM_DKIMWhitelistDomains 21204 4.16 0.05 5.92 47 TR_XM_BayesUnsub 21118 9.00 16.21 5.90 48 BAYES_40 19959 4.44 1.82 5.57 49 XMSubMetaSx_00 19936 7.36 11.52 5.57 50 LOTS_OF_MONEY 19072 7.03 11.01 5.33 51 TR_XM_DK_Bayes2 19005 3.83 0.38 5.31 52 TR_MAX_INTL_RELAY 18720 8.13 14.88 5.23 53 T_TooManySym_01 18634 4.35 2.38 5.20 54 XM_H_GMP 18095 5.01 4.92 5.05 55 XM_H_Long_From01 18011 5.12 5.34 5.03 56 RCVD_IN_MSPIKE_WL 16942 4.28 3.24 4.73 57 RCVD_IN_MSPIKE_H3 16942 4.28 3.24 4.73 58 HTML_IMAGE_RATIO_06 16936 4.86 5.15 4.73 59 MIME_QP_LONG_LINE 16333 4.05 2.86 4.56 60 XM_DK_Undo_02 16171 14.39 37.34 4.52 61 XMSubNoVowel 16136 3.35 0.66 4.51 62 BAYES_20 15183 3.29 1.07 4.24 63 XM_PDF 15104 3.15 0.66 4.22 64 XM_UncommonTLD01 14380 5.42 8.68 4.02 65 HTML_IMAGE_RATIO_02 14144 4.47 5.69 3.95 66 XM_B_Phish_Phrases 13987 5.30 8.55 3.91 67 XM_B_SpammyWords3 13929 7.05 14.39 3.89 68 RELAYCOUNTRY_META 13162 7.37 15.96 3.68 69 RCVD_IN_VALIDITY_SAFE 12941 3.15 2.05 3.61 70 TR_XM_SpammyWords4 12717 5.46 9.91 3.55 71 T_REMOTE_IMAGE 12194 3.30 3.07 3.41 72 BAYES_05 12151 2.55 0.58 3.39 73 ANY_BOUNCE_MESSAGE 12051 2.82 1.55 3.37 74 BOUNCE_MESSAGE 12032 2.81 1.52 3.36 75 BAYES_80 11690 5.05 9.19 3.27 76 BAYES_99 11413 10.82 28.56 3.19 77 RCVD_IN_IADB_LISTED 11341 2.68 1.54 3.17 78 MAILING_LIST_MULTI 11167 2.95 2.57 3.12 79 XM_Body_Dirty_Words 10543 4.40 7.78 2.94 80 RCVD_IN_VALIDITY_CERTIFIED 10386 2.56 1.78 2.90 81 BOTNET_IPINHOSTNAME 10288 4.88 9.55 2.87 82 TooManyTo_002 10100 2.17 0.64 2.82 83 RCVD_IN_IADB_SPF 9991 2.38 1.44 2.79 84 T_TooManySym_02 9730 2.14 0.80 2.72 85 XMNumbers 9701 2.86 3.22 2.71 86 DKIM_INVALID 9197 3.35 5.17 2.57 87 RCVD_IN_IADB_SENDERID 8973 2.17 1.39 2.51 88 RCVD_IN_IADB_DK 8726 2.13 1.41 2.44 89 XM_B_SpammyTLD 8716 3.10 4.63 2.43 90 BAYES_999 8626 8.28 21.92 2.41 91 MIME_HTML_MOSTLY 8053 2.48 3.01 2.25 92 HTML_MIME_NO_HTML_TAG 8013 2.18 2.06 2.24 93 XMSubLongNoVowel 7845 1.61 0.25 2.19 94 XMSexyCombo_05 7716 3.20 5.63 2.16 95 XMSubGarbage 7647 1.51 0.05 2.14 96 RCVD_IN_IADB_VOUCHED 7401 1.63 0.60 2.07 97 INVALID_MSGID 7311 1.47 0.16 2.04 98 XMNoVowels 7253 2.46 3.46 2.03 99 TR_XM_DKIM_Undo 7210 8.99 25.21 2.01 100 BAYES_95 7021 2.96 5.30 1.96 101 XM_CamelCaseFrm001 6885 2.16 2.73 1.92 102 TR_XM_SpammyRelay 6358 4.50 10.84 1.78 103 XM_B_URI_Unicode 6252 2.12 2.98 1.75 104 TO_MALFORMED 6199 1.33 0.39 1.73 105 HTML_IMAGE_RATIO_08 6137 2.11 3.02 1.71 106 FROM_EXCESS_BASE64 5716 1.80 2.27 1.60 107 T_XMDrugObfuBody_14 5647 2.38 4.25 1.58 108 TooManyTo_003 5556 1.25 0.54 1.55 109 UNTRUSTED_Relay 5458 2.99 6.41 1.52 110 T_XMDrugObfuBody_08 5417 1.98 3.05 1.51 111 TM2_M_URI_OPT_OUT 5416 1.72 2.20 1.51 112 TR_XM_PhishingBody 5386 2.41 4.52 1.50 113 BOTNET 5274 4.02 9.95 1.47 114 TR_Symld_Words 5242 1.29 0.88 1.46 115 XM_SPF_SoftFail 5047 1.83 2.82 1.41 116 RCVD_IN_IADB_OPTIN 5041 1.08 0.32 1.41 117 XMDiploma_00 4987 1.68 2.35 1.39 118 SUBJ_ALL_CAPS 4923 1.51 1.82 1.38 119 XM_DK_Undo_01 4908 1.39 1.43 1.37 120 URI_NOVOWEL 4791 1.31 1.23 1.34 121 XM_B_Investor 4775 2.20 4.22 1.33 122 XM_SendGrid 4731 1.31 1.27 1.32 123 XM_B_Unsub2 4704 1.89 3.23 1.31 124 TR_XM_UnparsRelay 4620 3.30 7.96 1.29 125 HELO_NODOT 4513 0.93 0.17 1.26 126 HELO_NO_DOMAIN 4507 0.93 0.17 1.26 127 IN_HORDE_ADDRESS_BOOK 4441 0.90 0.10 1.24 128 URI_HEX 4410 1.26 1.32 1.23 129 TR_XM_SpammyWords5 4386 1.93 3.57 1.23 130 KHOP_HELO_FCRDNS 4333 1.35 1.68 1.21 131 XM_GoogleGroups 4197 1.11 0.96 1.17 132 RELAYCOUNTRY_CA 4187 2.66 6.11 1.17 133 XMCapTrack 4049 0.92 0.43 1.13 134 T_TooManySym_03 4037 0.88 0.29 1.13 135 XM_OfRef6 4015 1.94 3.85 1.12 136 TooManyTo_004 3997 0.92 0.47 1.12 137 XMStockSpam_06 3971 1.82 3.48 1.11 138 FROM_GOV_DKIM_AU 3961 0.91 0.45 1.11 139 TM2_M_VERY_LONG_WORD 3870 1.89 3.77 1.08 140 TR_DCC_Bayes_99 3714 6.75 20.03 1.04 141 XM_UB50 3613 1.66 3.19 1.01 142 XM_E_Blogspot 3488 0.70 0.08 0.97 143 TooManyTo_005 3352 0.78 0.41 0.94 144 XMGappySubj_01 3280 0.68 0.12 0.92 145 TVD_SPACE_RATIO 3177 0.71 0.30 0.89 146 XM_H_PHPMailer 3173 0.91 0.95 0.89 147 SpammyFromTLD_01 3172 1.20 1.94 0.89 148 XMLngstWrd_00 2957 0.78 0.66 0.83 149 XM_H_Long_From02 2898 0.88 1.05 0.81 150 HTTPS_HTTP_MISMATCH 2858 0.83 0.90 0.80 151 TR_XM_DK_SendGrid 2833 0.80 0.81 0.79 152 T_FILL_THIS_FORM_SHORT 2830 1.11 1.87 0.79 153 XMBdyGiftCard01 2794 0.80 0.83 0.78 154 XM_B_COPY_HTML 2762 0.90 1.18 0.77 155 TR_XM_Base64_M1 2566 0.86 1.19 0.72 156 DKIM_ADSP_CUSTOM_MED 2540 0.88 1.26 0.71 157 XM_ShortIntro_01 2537 0.72 0.75 0.71 158 XMGenDplmaNmb 2487 0.94 1.50 0.69 159 XMBrknScrpt_02 2402 0.98 1.69 0.67 160 TR_MetaPhish_Combo_01 2397 0.73 0.87 0.67 161 RCVD_IN_PBL 2364 0.77 1.03 0.66 162 T_XMDrugObfuBody_00 2253 0.98 1.80 0.63 163 HTML_TAG_BALANCE_BODY 2147 0.82 1.35 0.60 164 RCVD_IN_BL_SPAMCOP_NET 2114 3.70 10.93 0.59 165 T_OBFU_PDF_ATTACH 2103 0.45 0.12 0.59 166 MY_SERVERS_FOUND 2084 0.55 0.49 0.58 167 T_Symld_Words_02 1985 0.59 0.66 0.55 168 TVD_RCVD_IP 1939 0.59 0.72 0.54 169 XM_B_SpammyWords4 1890 1.05 2.27 0.53 170 XM_B_FormFill 1882 0.37 0.01 0.53 171 XMLngstWrd_01 1865 0.50 0.45 0.52 172 XMPhish14 1790 0.61 0.86 0.50 173 XMBody_95 1783 0.45 0.35 0.50 174 XM_B_DNDMA 1775 0.60 0.84 0.50 175 XM_ProductURIs 1696 0.56 0.77 0.47 176 NML_ADSP_CUSTOM_MED 1688 0.58 0.83 0.47 177 SpammyFromTLD_02 1666 1.46 3.76 0.47 178 MPART_ALT_DIFF_COUNT 1599 0.60 0.97 0.45 179 RELAYCOUNTRY_GB 1594 0.56 0.84 0.45 180 T_XMHurry_00 1575 0.99 2.25 0.44 181 XMMoneyMeta_00 1575 0.57 0.87 0.44 182 TO_NO_BRKTS_HTML_ONLY 1574 0.58 0.89 0.44 183 HTML_IMAGE_ONLY_32 1556 0.36 0.19 0.43 184 XMLngstWrd_02 1549 0.40 0.32 0.43 185 URI_TRY_3LD 1531 0.61 1.02 0.43 186 XMDateMe_00 1528 0.43 0.45 0.43 187 LongTLD 1523 0.65 1.18 0.43 188 MSGID_FROM_MTA_HEADER 1498 0.32 0.09 0.42 189 XMGappySubj_02 1481 0.31 0.06 0.41 190 FORGED_GMAIL_RCVD 1481 0.51 0.75 0.41 191 XMPhish30 1473 0.80 1.69 0.41 192 RCVD_IN_PSBL 1448 1.30 3.37 0.40 193 RELAYCOUNTRY_AU 1445 1.01 2.42 0.40 194 XMBody_17 1417 0.85 1.89 0.40 195 TR_XM_SpammyWords2 1391 3.36 10.27 0.39 196 HTML_IMAGE_ONLY_20 1389 0.69 1.38 0.39 197 DIET_1 1380 0.85 1.94 0.39 198 SHORT_HELO_AND_INLINE_IMAGE 1361 0.27 0.03 0.38 199 XM_URI_RBL 1348 1.04 2.58 0.38 200 TR_XM_SPAMCOP 1330 2.72 8.18 0.37 ----------------------------------------------------------------------