Email: 479647 Autolearn: 0 AvgScore: 4.64 AvgScanTime: 1.36 sec Spam: 155322 Autolearn: 0 AvgScore: 14.54 AvgScanTime: 1.49 sec Ham: 324325 Autolearn: 0 AvgScore: -0.10 AvgScanTime: 1.30 sec Time Spent Running SA: 181.34 hours Time Spent Processing Spam: 64.10 hours Time Spent Processing Ham: 117.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 148903 90.21 95.87 87.51 2 DKIM_SIGNED 140902 79.96 90.72 74.80 3 XM_DK_Pass 133017 77.21 85.64 73.17 4 DKIM_VALID 131209 76.05 84.48 72.01 5 RELAYCOUNTRY_US 130713 81.32 84.16 79.96 6 XM_B_Unicode 130710 74.02 84.15 69.16 7 DCC_CHECK 118778 50.32 76.47 37.80 8 XM_B_SpammyWords 108796 53.43 70.05 45.47 9 XMListUnsubscribeExists 108552 54.65 69.89 47.35 10 DKIM_VALID_AU 102917 60.18 66.26 57.27 11 LOC_TINY_FONT_1 78193 33.87 50.34 25.98 12 XM_B_Unicode3 76153 42.63 49.03 39.56 13 RCVD_IN_MSPIKE_H2 63528 36.92 40.90 35.01 14 XM_B_SpammyWords2 63168 25.76 40.67 18.62 15 XM_DK_Undo_02 62846 16.34 40.46 4.79 16 BAYES_50 62511 53.44 40.25 59.77 17 HTML_FONT_LOW_CONTRAST 60380 30.05 38.87 25.83 18 FVGT_m_MULTI_ODD 51785 27.33 33.34 24.45 19 T_KAM_HTML_FONT_INVALID 50541 25.20 32.54 21.68 20 BAYES_99 48213 12.54 31.04 3.68 21 DKIM_VALID_EF 46019 29.53 29.63 29.48 22 TR_XM_DKIM_Undo 44585 10.59 28.70 1.92 23 MIME_HTML_ONLY 43761 23.32 28.17 20.99 24 BAYES_999 37679 9.77 24.26 2.84 25 TR_DCC_Bayes_99 36308 8.47 23.38 1.33 26 T_TM2_M_HEADER_IN_MSG 36216 27.64 23.32 29.71 27 XMSubLong 36070 23.02 23.22 22.92 28 XM_Multi_Part_URI 34975 16.34 22.52 13.38 29 DCC_CHECK_NEGATIVE 34222 49.16 22.03 62.15 30 TR_XM_DK_Unsub 31384 15.26 20.21 12.89 31 UNPARSEABLE_RELAY 28059 13.26 18.07 10.97 32 XM_B_Unsub 28004 11.78 18.03 8.79 33 TR_XM_BayesUnsub 26980 10.18 17.37 6.73 34 XM_B_SpammyWords3 24665 8.47 15.88 4.92 35 RELAYCOUNTRY_META 22748 7.34 14.65 3.84 36 TR_MAX_INTL_RELAY 22012 8.35 14.17 5.56 37 LOTS_OF_MONEY 19882 7.76 12.80 5.35 38 TR_XM_SpammyWords4 18021 6.06 11.60 3.41 39 TR_XM_SpammyWords2 17963 4.00 11.57 0.37 40 FSL_BULK_SIG 16326 8.15 10.51 7.02 41 TR_XM_SpammyRelay 16162 4.73 10.41 2.01 42 RCVD_IN_BL_SPAMCOP_NET 15595 3.64 10.04 0.58 43 BOTNET_IPINHOSTNAME 15446 5.11 9.94 2.79 44 XM_Evil_Numbers_Gen 14364 8.77 9.25 8.54 45 TR_XM_UnparsRelay 13855 3.91 8.92 1.51 46 BAYES_80 13712 5.18 8.83 3.44 47 BOTNET 13070 3.48 8.41 1.12 48 BAYES_60 12929 7.26 8.32 6.75 49 XM_Body_Dirty_Words 12652 4.26 8.15 2.40 50 LotsOfNums_01 12517 8.23 8.06 8.31 51 TR_XM_SPAMCOP 12484 2.84 8.04 0.35 52 XM_B_Phish_Phrases 12049 5.85 7.76 4.94 53 HTML_IMAGE_RATIO_02 10223 5.13 6.58 4.43 54 XMSubMetaSx_00 10158 4.62 6.54 3.69 55 XM_UncommonTLD01 9954 5.01 6.41 4.33 56 DKIM_INVALID 9693 3.91 6.24 2.79 57 XM_B_PhoneNumber 9527 9.19 6.13 10.65 58 UNTRUSTED_Relay 9100 2.90 5.86 1.49 59 MPART_ALT_DIFF 8807 5.10 5.67 4.82 60 XM_H_GMP 8445 5.82 5.44 6.01 61 XM_H_Long_From01 8070 5.66 5.20 5.88 62 RELAYCOUNTRY_CA 8015 2.47 5.16 1.19 63 HTML_IMAGE_RATIO_04 7987 4.15 5.14 3.67 64 BAYES_95 7847 3.07 5.05 2.12 65 TR_XM_PhishingBody 7478 2.75 4.81 1.77 66 XM_B_Investor 7437 2.91 4.79 2.00 67 XMStrtUSub 7424 5.09 4.78 5.23 68 HTML_IMAGE_RATIO_06 6608 3.66 4.25 3.37 69 TR_XM_SpammyWords5 6521 2.10 4.20 1.10 70 TooManyTo_001 6402 7.26 4.12 8.76 71 RCVD_IN_MSPIKE_H3 6026 4.82 3.88 5.27 72 XMSexyCombo_05 6026 2.11 3.88 1.26 73 RCVD_IN_MSPIKE_WL 6026 4.82 3.88 5.27 74 T_XMDrugObfuBody_14 5994 2.40 3.86 1.70 75 XM_B_SpammyTLD 5865 3.08 3.78 2.75 76 HTML_IMAGE_RATIO_08 5626 3.17 3.62 2.96 77 XMNumbers 5477 3.04 3.53 2.81 78 TM2_M_VERY_LONG_WORD 5331 1.93 3.43 1.21 79 XMNoVowels 5242 2.58 3.37 2.20 80 MIME_HTML_MOSTLY 5220 2.42 3.36 1.97 81 TM2_M_URI_OPT_OUT 5103 2.29 3.29 1.81 82 RCVD_IN_VALIDITY_RPBL 5009 1.08 3.22 0.05 83 MIME_HTML_ONLY_MULTI 4832 2.87 3.11 2.76 84 XMDiploma_00 4806 2.19 3.09 1.76 85 XM_OfRef6 4788 1.64 3.08 0.95 86 MIME_QP_LONG_LINE 4715 4.43 3.04 5.09 87 XM_UB50 4712 1.62 3.03 0.95 88 T_TooManySym_01 4642 5.08 2.99 6.08 89 XM_SPF_SoftFail 4522 1.99 2.91 1.55 90 XM_CamelCaseFrm001 4441 2.47 2.86 2.28 91 XM_B_SpammyWords4 4270 1.50 2.75 0.90 92 XM_B_Unsub2 4156 1.91 2.68 1.55 93 XM_B_URI_Unicode 4124 2.18 2.66 1.95 94 T_XMHurry_00 3939 1.14 2.54 0.48 95 NO_DNS_FOR_FROM 3923 1.00 2.53 0.27 96 TR_XM_MaxWHORU 3899 0.96 2.51 0.21 97 T_XMDrugObfuBody_08 3862 1.76 2.49 1.42 98 SUBJ_ALL_CAPS 3706 1.73 2.39 1.42 99 RELAYCOUNTRY_AU 3694 1.16 2.38 0.58 100 DKIM_ADSP_NXDOMAIN 3597 0.95 2.32 0.29 101 MAILING_LIST_MULTI 3519 2.85 2.27 3.13 102 XM_URI_RBL 3501 1.01 2.25 0.42 103 SpammyFromTLD_02 3477 1.07 2.24 0.51 104 FROM_EXCESS_BASE64 3449 1.85 2.22 1.67 105 XMBody_17 3422 1.01 2.20 0.44 106 XM_SendGrid 3222 1.57 2.07 1.33 107 XM_H_Long_From02 3192 1.32 2.06 0.97 108 SpammyFromTLD_01 3060 1.37 1.97 1.08 109 BAYES_40 2998 4.59 1.93 5.87 110 TR_XM_INV_DKIM 2917 0.74 1.88 0.19 111 TR_LOTS_OF_MONEY3 2877 0.83 1.85 0.34 112 USER_IN_DEF_DKIM_WL 2868 8.75 1.85 12.05 113 T_FILL_THIS_FORM_SHORT 2850 1.21 1.83 0.90 114 T_XMDrugObfuBody_00 2841 1.00 1.83 0.60 115 TR_XM_NoHeaderRelay 2828 0.73 1.82 0.21 116 HTML_MIME_NO_HTML_TAG 2803 3.22 1.80 3.89 117 DIET_1 2737 0.87 1.76 0.44 118 RCVD_IN_VALIDITY_SAFE 2699 2.94 1.74 3.51 119 XMPhish30 2683 0.94 1.73 0.56 120 URI_HEX 2668 1.49 1.72 1.38 121 XMStockSpam_06 2659 1.08 1.71 0.77 122 NORDNS_LOW_CONTRAST 2601 0.57 1.67 0.03 123 TR_Symld_Words 2491 1.65 1.60 1.67 124 ALL_TRUSTED 2489 11.90 1.60 16.83 125 URI_TRY_3LD 2483 0.92 1.60 0.60 126 T_REMOTE_IMAGE 2465 3.09 1.59 3.82 127 BAYES_20 2326 3.52 1.50 4.49 128 XM_DK_Undo_01 2318 1.60 1.49 1.66 129 RCVD_IN_ZEN_LASTEXTERNAL 2309 0.48 1.49 0.00 130 SHORTCIRCUIT 2309 0.48 1.49 0.00 131 RCVD_IN_VALIDITY_CERTIFIED 2297 2.36 1.48 2.78 132 TR_MetaPhish_Combo_01 2287 1.11 1.47 0.94 133 XMGenDplmaNmb 2256 1.01 1.45 0.80 134 XM_B_COPY_HTML 2238 0.88 1.44 0.62 135 URI_NOVOWEL 1985 1.64 1.28 1.81 136 RCVD_IN_IADB_LISTED 1977 3.18 1.27 4.09 137 XMBrknScrpt_02 1935 0.98 1.25 0.85 138 XM_B_Phish66 1891 0.64 1.22 0.36 139 XM_H_Undi_Recip 1882 0.52 1.21 0.19 140 T_Symld_Words_02 1874 0.95 1.21 0.83 141 KHOP_HELO_FCRDNS 1871 1.28 1.20 1.32 142 TR_XM_DK_SendGrid 1866 0.94 1.20 0.81 143 RCVD_IN_PSBL 1841 0.72 1.19 0.50 144 XM_B_DNDMA 1832 0.63 1.18 0.36 145 RCVD_IN_IADB_SPF 1769 2.76 1.14 3.53 146 XMHTML_After_End 1758 0.57 1.13 0.31 147 XM_ProductURIs 1746 0.86 1.12 0.74 148 HTML_TAG_BALANCE_BODY 1740 0.78 1.12 0.62 149 RCVD_IN_PBL 1714 0.88 1.10 0.77 150 LongTLD 1706 0.67 1.10 0.46 151 DKIM_ADSP_CUSTOM_MED 1700 0.97 1.09 0.91 152 RCVD_IN_IADB_DK 1688 2.39 1.09 3.01 153 RCVD_IN_IADB_SENDERID 1671 2.45 1.08 3.10 154 XM_ShortIntro_01 1640 0.90 1.06 0.83 155 XM_B_SEO 1605 0.49 1.03 0.24 156 TR_XM_Base64_M1 1602 0.78 1.03 0.66 157 HTTPS_HTTP_MISMATCH 1562 0.94 1.01 0.90 158 SHOPIFY_IMG_NOT_RCVD_SFY 1547 0.47 1.00 0.22 159 RELAYCOUNTRY_FR 1538 0.46 0.99 0.20 160 TR_XM_Undi_Recip19 1523 0.37 0.98 0.08 161 TM2_M_OBFU_COMMENT 1514 0.47 0.97 0.23 162 XMReplyNow 1501 0.51 0.97 0.29 163 XM_UB99 1478 0.31 0.95 0.00 164 TR_XM_Undi_Recip11 1459 0.34 0.94 0.05 165 XMBdyGiftCard01 1449 0.70 0.93 0.59 166 TR_LOTS_OF_MONEY2 1428 0.39 0.92 0.13 167 T_MONEY_PERCENT 1428 0.39 0.92 0.13 168 TR_XM_Undi_RecipCombo2 1404 0.30 0.90 0.01 169 XMPhish14 1399 0.66 0.90 0.54 170 BAYES_00 1397 8.06 0.90 11.48 171 UNDISC_MONEY 1396 0.29 0.90 0.00 172 TR_XM_FormFill 1389 0.30 0.89 0.01 173 TR_XM_SEO4 1388 0.35 0.89 0.09 174 XMMoneyMeta_00 1361 0.64 0.88 0.53 175 XMSubMetaI_00 1356 0.64 0.87 0.53 176 TR_XM_PHPDW 1337 0.49 0.86 0.31 177 URIBL_BLACK 1336 0.32 0.86 0.06 178 TR_Sbj_FN_Bdy 1331 0.36 0.86 0.12 179 TR_XM_RelayPhish 1322 0.32 0.85 0.07 180 MPART_ALT_DIFF_COUNT 1321 0.65 0.85 0.55 181 TR_XM_InvalidRelay 1315 0.29 0.85 0.02 182 TR_XM_PHPForged 1308 0.48 0.84 0.31 183 HTML_FONT_TINY_NORDNS 1304 0.31 0.84 0.06 184 XM_GoogleGroups 1284 1.08 0.83 1.20 185 NML_ADSP_CUSTOM_MED 1283 0.67 0.83 0.59 186 XM_DIRTYINTL 1265 0.33 0.81 0.10 187 T_STY_INVIS_DIRECT 1261 0.49 0.81 0.34 188 TR_XM_FormFill2 1259 0.47 0.81 0.31 189 TR_XM_Undi_Recip5 1245 0.26 0.80 0.00 190 XMSubMetaSSx_00 1244 0.40 0.80 0.21 191 RDNS_DYNAMIC 1243 0.39 0.80 0.19 192 FORGED_GMAIL_RCVD 1242 0.62 0.80 0.54 193 DEAR_FRIEND 1242 0.29 0.80 0.04 194 XM_B_REG_HTML 1238 0.37 0.80 0.16 195 RELAYCOUNTRY_GB 1235 0.60 0.80 0.51 196 TR_Mismatch_TLD_02 1232 0.30 0.79 0.06 197 THIS_AD 1230 0.52 0.79 0.39 198 XM_H_PHPOS 1230 0.46 0.79 0.30 199 PLING_QUERY 1229 0.52 0.79 0.39 200 MIME_CHARSET_FARAWAY 1228 0.55 0.79 0.44 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 283810 90.21 95.87 87.51 2 RELAYCOUNTRY_US 259331 81.32 84.16 79.96 3 DKIM_SIGNED 242611 79.96 90.72 74.80 4 XM_DK_Pass 237300 77.21 85.64 73.17 5 DKIM_VALID 233551 76.05 84.48 72.01 6 XM_B_Unicode 224304 74.02 84.15 69.16 7 DCC_CHECK_NEGATIVE 201556 49.16 22.03 62.15 8 BAYES_50 193836 53.44 40.25 59.77 9 DKIM_VALID_AU 185729 60.18 66.26 57.27 10 XMListUnsubscribeExists 153558 54.65 69.89 47.35 11 XM_B_SpammyWords 147461 53.43 70.05 45.47 12 XM_B_Unicode3 128315 42.63 49.03 39.56 13 DCC_CHECK 122597 50.32 76.47 37.80 14 RCVD_IN_MSPIKE_H2 113561 36.92 40.90 35.01 15 T_TM2_M_HEADER_IN_MSG 96351 27.64 23.32 29.71 16 DKIM_VALID_EF 95613 29.53 29.63 29.48 17 LOC_TINY_FONT_1 84266 33.87 50.34 25.98 18 HTML_FONT_LOW_CONTRAST 83766 30.05 38.87 25.83 19 FVGT_m_MULTI_ODD 79284 27.33 33.34 24.45 20 XMSubLong 74349 23.02 23.22 22.92 21 T_KAM_HTML_FONT_INVALID 70322 25.20 32.54 21.68 22 MIME_HTML_ONLY 68082 23.32 28.17 20.99 23 XM_B_SpammyWords2 60395 25.76 40.67 18.62 24 ALL_TRUSTED 54572 11.90 1.60 16.83 25 XM_Multi_Part_URI 43385 16.34 22.52 13.38 26 TR_XM_DK_Unsub 41804 15.26 20.21 12.89 27 USER_IN_DEF_DKIM_WL 39082 8.75 1.85 12.05 28 BAYES_00 37242 8.06 0.90 11.48 29 UNPARSEABLE_RELAY 35563 13.26 18.07 10.97 30 XM_B_PhoneNumber 34553 9.19 6.13 10.65 31 XM_B_Unsub 28522 11.78 18.03 8.79 32 TooManyTo_001 28412 7.26 4.12 8.76 33 XM_Evil_Numbers_Gen 27709 8.77 9.25 8.54 34 LotsOfNums_01 26937 8.23 8.06 8.31 35 TR_XM_DK_Bayes 23568 5.16 0.76 7.27 36 TR_XM_DK_Bayes1 23026 5.05 0.76 7.10 37 FSL_BULK_SIG 22759 8.15 10.51 7.02 38 IN_ZIMBRA_NJ_WHITELIST 22225 4.70 0.19 6.85 39 BAYES_60 21896 7.26 8.32 6.75 40 TR_XM_BayesUnsub 21829 10.18 17.37 6.73 41 XM_DKIMWhitelistDomains 21510 4.65 0.51 6.63 42 T_TooManySym_01 19708 5.08 2.99 6.08 43 TR_XM_DK_Bayes2 19509 4.26 0.59 6.02 44 XM_H_GMP 19490 5.82 5.44 6.01 45 XM_H_Long_From01 19078 5.66 5.20 5.88 46 BAYES_40 19028 4.59 1.93 5.87 47 TR_MAX_INTL_RELAY 18027 8.35 14.17 5.56 48 LOTS_OF_MONEY 17357 7.76 12.80 5.35 49 RCVD_IN_MSPIKE_WL 17082 4.82 3.88 5.27 50 RCVD_IN_MSPIKE_H3 17082 4.82 3.88 5.27 51 XMStrtUSub 16971 5.09 4.78 5.23 52 MIME_QP_LONG_LINE 16517 4.43 3.04 5.09 53 XM_B_Phish_Phrases 16022 5.85 7.76 4.94 54 XM_B_SpammyWords3 15949 8.47 15.88 4.92 55 MPART_ALT_DIFF 15641 5.10 5.67 4.82 56 XM_PDF 15581 3.49 0.76 4.80 57 XM_DK_Undo_02 15526 16.34 40.46 4.79 58 BAYES_20 14546 3.52 1.50 4.49 59 HTML_IMAGE_RATIO_02 14368 5.13 6.58 4.43 60 XM_UncommonTLD01 14053 5.01 6.41 4.33 61 RCVD_IN_IADB_LISTED 13257 3.18 1.27 4.09 62 HTML_MIME_NO_HTML_TAG 12623 3.22 1.80 3.89 63 RELAYCOUNTRY_META 12461 7.34 14.65 3.84 64 T_REMOTE_IMAGE 12373 3.09 1.59 3.82 65 XMSubMetaSx_00 11978 4.62 6.54 3.69 66 BAYES_99 11942 12.54 31.04 3.68 67 HTML_IMAGE_RATIO_04 11901 4.15 5.14 3.67 68 RCVD_IN_IADB_SPF 11453 2.76 1.14 3.53 69 RCVD_IN_VALIDITY_SAFE 11390 2.94 1.74 3.51 70 BAYES_80 11154 5.18 8.83 3.44 71 TR_XM_SpammyWords4 11067 6.06 11.60 3.41 72 HTML_IMAGE_RATIO_06 10933 3.66 4.25 3.37 73 ANY_BOUNCE_MESSAGE 10730 2.45 0.64 3.31 74 BOUNCE_MESSAGE 10730 2.45 0.64 3.31 75 TooManyTo_002 10168 2.37 0.77 3.14 76 T_TooManySym_02 10154 2.35 0.71 3.13 77 MAILING_LIST_MULTI 10152 2.85 2.27 3.13 78 RCVD_IN_IADB_SENDERID 10058 2.45 1.08 3.10 79 RCVD_IN_IADB_DK 9767 2.39 1.09 3.01 80 HTML_IMAGE_RATIO_08 9585 3.17 3.62 2.96 81 RCVD_IN_IADB_VOUCHED 9234 2.10 0.55 2.85 82 BAYES_999 9203 9.77 24.26 2.84 83 XMNumbers 9108 3.04 3.53 2.81 84 BOTNET_IPINHOSTNAME 9061 5.11 9.94 2.79 85 DKIM_INVALID 9060 3.91 6.24 2.79 86 RCVD_IN_VALIDITY_CERTIFIED 9021 2.36 1.48 2.78 87 MIME_HTML_ONLY_MULTI 8948 2.87 3.11 2.76 88 XM_B_SpammyTLD 8924 3.08 3.78 2.75 89 BAYES_05 7813 1.85 0.70 2.41 90 XM_Body_Dirty_Words 7768 4.26 8.15 2.40 91 INVALID_MSGID 7443 1.61 0.18 2.29 92 XM_CamelCaseFrm001 7400 2.47 2.86 2.28 93 XMNoVowels 7122 2.58 3.37 2.20 94 BAYES_95 6862 3.07 5.05 2.12 95 TR_XM_SpammyRelay 6508 4.73 10.41 2.01 96 XM_B_Investor 6502 2.91 4.79 2.00 97 RCVD_IN_IADB_OPTIN 6429 1.45 0.35 1.98 98 MIME_HTML_MOSTLY 6393 2.42 3.36 1.97 99 XM_B_URI_Unicode 6340 2.18 2.66 1.95 100 TO_MALFORMED 6277 1.32 0.03 1.94 101 TR_XM_DKIM_Undo 6212 10.59 28.70 1.92 102 URI_NOVOWEL 5881 1.64 1.28 1.81 103 TM2_M_URI_OPT_OUT 5861 2.29 3.29 1.81 104 TR_XM_PhishingBody 5727 2.75 4.81 1.77 105 XMDiploma_00 5692 2.19 3.09 1.76 106 TooManyTo_003 5689 1.41 0.68 1.75 107 T_XMDrugObfuBody_14 5517 2.40 3.86 1.70 108 FROM_EXCESS_BASE64 5430 1.85 2.22 1.67 109 TR_Symld_Words 5416 1.65 1.60 1.67 110 XM_DK_Undo_01 5374 1.60 1.49 1.66 111 XM_SPF_SoftFail 5024 1.99 2.91 1.55 112 XM_B_Unsub2 5014 1.91 2.68 1.55 113 TR_XM_UnparsRelay 4898 3.91 8.92 1.51 114 XMGappySubj_01 4841 1.04 0.11 1.49 115 UNTRUSTED_Relay 4827 2.90 5.86 1.49 116 HELO_NODOT 4671 1.02 0.15 1.44 117 HELO_NO_DOMAIN 4664 1.02 0.15 1.44 118 SUBJ_ALL_CAPS 4604 1.73 2.39 1.42 119 T_XMDrugObfuBody_08 4596 1.76 2.49 1.42 120 IN_HORDE_ADDRESS_BOOK 4540 0.98 0.11 1.40 121 URI_HEX 4489 1.49 1.72 1.38 122 XM_SendGrid 4317 1.57 2.07 1.33 123 TR_DCC_Bayes_99 4308 8.47 23.38 1.33 124 KHOP_HELO_FCRDNS 4268 1.28 1.20 1.32 125 TooManyTo_004 4107 1.06 0.61 1.27 126 XMSexyCombo_05 4100 2.11 3.88 1.26 127 XMCapTrack 4041 0.99 0.45 1.25 128 T_TooManySym_03 3979 0.90 0.22 1.23 129 TM2_M_VERY_LONG_WORD 3915 1.93 3.43 1.21 130 XM_GoogleGroups 3883 1.08 0.83 1.20 131 RELAYCOUNTRY_CA 3856 2.47 5.16 1.19 132 TVD_SPACE_RATIO 3653 0.83 0.23 1.13 133 BOTNET 3633 3.48 8.41 1.12 134 TR_XM_SpammyWords5 3553 2.10 4.20 1.10 135 SpammyFromTLD_01 3500 1.37 1.97 1.08 136 TooManyTo_005 3304 0.86 0.54 1.02 137 FROM_GOV_DKIM_AU 3181 0.71 0.16 0.98 138 XM_H_Long_From02 3150 1.32 2.06 0.97 139 XM_OfRef6 3068 1.64 3.08 0.95 140 XM_UB50 3066 1.62 3.03 0.95 141 TR_MetaPhish_Combo_01 3057 1.11 1.47 0.94 142 XMSubNoVowel 2993 0.72 0.31 0.92 143 DKIM_ADSP_CUSTOM_MED 2948 0.97 1.09 0.91 144 T_FILL_THIS_FORM_SHORT 2930 1.21 1.83 0.90 145 HTTPS_HTTP_MISMATCH 2925 0.94 1.01 0.90 146 XM_B_SpammyWords4 2903 1.50 2.75 0.90 147 XM_H_Trusted_IP 2902 0.61 0.00 0.89 148 XMBrknScrpt_02 2746 0.98 1.25 0.85 149 XM_ShortIntro_01 2693 0.90 1.06 0.83 150 T_Symld_Words_02 2689 0.95 1.21 0.83 151 TR_XM_DK_SendGrid 2642 0.94 1.20 0.81 152 XMGenDplmaNmb 2607 1.01 1.45 0.80 153 XM_H_PHPMailer 2582 0.72 0.55 0.80 154 XMStockSpam_06 2498 1.08 1.71 0.77 155 RCVD_IN_PBL 2497 0.88 1.10 0.77 156 XMGappySubj_02 2496 0.53 0.03 0.77 157 XM_ProductURIs 2393 0.86 1.12 0.74 158 TVD_RCVD_IP 2322 0.69 0.64 0.72 159 TO_NO_BRKTS_HTML_ONLY 2299 0.59 0.35 0.71 160 TR_XM_Base64_M1 2126 0.78 1.03 0.66 161 T_OBFU_PDF_ATTACH 2021 0.48 0.19 0.62 162 XM_B_COPY_HTML 1997 0.88 1.44 0.62 163 HTML_TAG_BALANCE_BODY 1995 0.78 1.12 0.62 164 URI_TRY_3LD 1947 0.92 1.60 0.60 165 T_XMDrugObfuBody_00 1941 1.00 1.83 0.60 166 XMBdyGiftCard01 1921 0.70 0.93 0.59 167 NML_ADSP_CUSTOM_MED 1917 0.67 0.83 0.59 168 RELAYCOUNTRY_AU 1886 1.16 2.38 0.58 169 RCVD_IN_BL_SPAMCOP_NET 1885 3.64 10.04 0.58 170 XM_B_FormFill 1872 0.40 0.02 0.58 171 XMBody_95 1856 0.43 0.14 0.57 172 XMPhish30 1811 0.94 1.73 0.56 173 HTML_IMAGE_ONLY_20 1797 0.60 0.70 0.55 174 MPART_ALT_DIFF_COUNT 1786 0.65 0.85 0.55 175 XMPhish14 1765 0.66 0.90 0.54 176 FORGED_GMAIL_RCVD 1750 0.62 0.80 0.54 177 XMSubMetaI_00 1718 0.64 0.87 0.53 178 XMMoneyMeta_00 1714 0.64 0.88 0.53 179 SpammyFromTLD_02 1657 1.07 2.24 0.51 180 RELAYCOUNTRY_GB 1643 0.60 0.80 0.51 181 RCVD_IN_PSBL 1615 0.72 1.19 0.50 182 T_XMHurry_00 1542 1.14 2.54 0.48 183 XMSlimDrugH 1534 0.53 0.65 0.47 184 HTML_IMAGE_ONLY_32 1522 0.37 0.17 0.47 185 XMDateMe_00 1518 0.50 0.57 0.47 186 HTML_IMAGE_ONLY_28 1512 0.39 0.23 0.47 187 LongTLD 1507 0.67 1.10 0.46 188 XMLngstWrd_00 1495 0.41 0.31 0.46 189 XMBSHREFv2 1492 0.41 0.32 0.46 190 DIET_1 1441 0.87 1.76 0.44 191 XMBody_17 1432 1.01 2.20 0.44 192 MIME_CHARSET_FARAWAY 1430 0.55 0.79 0.44 193 XMSubEmpty 1412 0.35 0.18 0.44 194 SHORT_HELO_AND_INLINE_IMAGE 1402 0.30 0.02 0.43 195 HTML_FONT_FACE_BAD 1400 0.52 0.72 0.43 196 MSGID_FROM_MTA_HEADER 1367 0.33 0.13 0.42 197 XM_URI_RBL 1360 1.01 2.25 0.42 198 MISSING_HEADERS 1357 0.46 0.53 0.42 199 HELO_MISC_IP 1335 0.29 0.05 0.41 200 PLING_QUERY 1280 0.52 0.79 0.39 ----------------------------------------------------------------------