Email: 488888 Autolearn: 0 AvgScore: 4.67 AvgScanTime: 1.40 sec Spam: 153709 Autolearn: 0 AvgScore: 14.70 AvgScanTime: 1.50 sec Ham: 335179 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.36 sec Time Spent Running SA: 190.22 hours Time Spent Processing Spam: 63.89 hours Time Spent Processing Ham: 126.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145419 88.46 94.61 85.64 2 DKIM_SIGNED 136892 77.58 89.06 72.32 3 XM_DK_Pass 128903 74.97 83.86 70.89 4 XM_B_Unicode 127167 73.07 82.73 68.64 5 DKIM_VALID 127062 73.80 82.66 69.74 6 RELAYCOUNTRY_US 126842 80.16 82.52 79.07 7 DCC_CHECK 115936 49.11 75.43 37.05 8 XMListUnsubscribeExists 109046 53.74 70.94 45.85 9 XM_B_SpammyWords 106632 51.75 69.37 43.67 10 DKIM_VALID_AU 99132 58.36 64.49 55.55 11 LOC_TINY_FONT_1 75296 33.11 48.99 25.83 12 XM_B_Unicode3 75100 42.35 48.86 39.37 13 BAYES_50 64271 55.27 41.81 61.44 14 XM_B_SpammyWords2 63863 25.48 41.55 18.11 15 RCVD_IN_MSPIKE_H2 59780 35.67 38.89 34.19 16 XM_DK_Undo_02 59502 15.08 38.71 4.25 17 HTML_FONT_LOW_CONTRAST 59138 30.47 38.47 26.80 18 FVGT_m_MULTI_ODD 48540 26.17 31.58 23.69 19 T_KAM_HTML_FONT_INVALID 48332 23.98 31.44 20.55 20 BAYES_99 45654 11.21 29.70 2.73 21 MIME_HTML_ONLY 45278 23.12 29.46 20.21 22 TR_XM_DKIM_Undo 43701 10.26 28.43 1.93 23 DKIM_VALID_EF 42048 27.52 27.36 27.60 24 XMSubLong 38800 23.98 25.24 23.40 25 XM_Multi_Part_URI 35605 15.90 23.16 12.56 26 BAYES_999 35246 8.64 22.93 2.09 27 DCC_CHECK_NEGATIVE 35138 50.31 22.86 62.90 28 TR_DCC_Bayes_99 32910 7.42 21.41 1.01 29 T_TM2_M_HEADER_IN_MSG 31457 28.31 20.47 31.91 30 TR_XM_DK_Unsub 30372 14.25 19.76 11.72 31 UNPARSEABLE_RELAY 26142 13.04 17.01 11.22 32 XM_B_Unsub 25588 11.14 16.65 8.61 33 TR_XM_BayesUnsub 24586 9.60 16.00 6.67 34 RELAYCOUNTRY_META 23889 7.38 15.54 3.63 35 XM_B_SpammyWords3 23009 8.04 14.97 4.86 36 TR_MAX_INTL_RELAY 22478 8.54 14.62 5.75 37 LOTS_OF_MONEY 20028 8.02 13.03 5.72 38 TR_XM_SpammyWords4 17904 6.36 11.65 3.93 39 TR_XM_SpammyRelay 17432 4.78 11.34 1.77 40 TR_XM_SpammyWords2 16913 3.68 11.00 0.33 41 RCVD_IN_BL_SPAMCOP_NET 16835 3.96 10.95 0.75 42 XM_Evil_Numbers_Gen 16400 9.71 10.67 9.27 43 BOTNET_IPINHOSTNAME 16063 5.31 10.45 2.96 44 BAYES_80 13877 5.27 9.03 3.54 45 FSL_BULK_SIG 13724 7.76 8.93 7.22 46 BOTNET 13225 3.58 8.60 1.27 47 XM_B_Phish_Phrases 12931 6.12 8.41 5.06 48 TR_XM_SPAMCOP 12559 2.84 8.17 0.39 49 BAYES_60 12463 7.24 8.11 6.84 50 TR_XM_UnparsRelay 12137 3.43 7.90 1.39 51 XM_Body_Dirty_Words 11756 4.02 7.65 2.35 52 HTML_IMAGE_RATIO_02 11563 5.19 7.52 4.13 53 LotsOfNums_01 11332 8.70 7.37 9.31 54 MPART_ALT_DIFF 10155 5.16 6.61 4.49 55 XM_B_PhoneNumber 9853 8.85 6.41 9.96 56 DKIM_INVALID 9830 3.78 6.40 2.58 57 RELAYCOUNTRY_CA 9751 2.70 6.34 1.03 58 XMStrtUSub 9006 5.86 5.86 5.86 59 XM_UncommonTLD01 8978 4.63 5.84 4.07 60 XMSubMetaSx_00 8572 4.21 5.58 3.58 61 UNTRUSTED_Relay 8459 2.75 5.50 1.48 62 BAYES_95 8084 3.17 5.26 2.21 63 HTML_IMAGE_RATIO_04 7813 4.20 5.08 3.80 64 XM_B_Investor 7727 2.85 5.03 1.85 65 XM_H_Long_From01 7463 5.30 4.86 5.51 66 XM_H_GMP 7380 5.42 4.80 5.70 67 TR_XM_PhishingBody 6974 2.52 4.54 1.60 68 HTML_IMAGE_RATIO_06 6453 3.42 4.20 3.06 69 T_XMDrugObfuBody_14 5997 2.25 3.90 1.49 70 RCVD_IN_MSPIKE_WL 5993 4.85 3.90 5.28 71 RCVD_IN_MSPIKE_H3 5992 4.85 3.90 5.28 72 XM_B_SpammyTLD 5962 2.95 3.88 2.53 73 MIME_HTML_ONLY_MULTI 5779 3.05 3.76 2.73 74 TM2_M_VERY_LONG_WORD 5577 3.14 3.63 2.92 75 XMSexyCombo_05 5569 1.82 3.62 1.00 76 TooManyTo_001 5473 6.71 3.56 8.16 77 TR_XM_SpammyWords5 5325 2.06 3.46 1.41 78 MIME_QP_LONG_LINE 5152 4.54 3.35 5.09 79 HTML_IMAGE_RATIO_08 5114 2.77 3.33 2.51 80 RCVD_IN_VALIDITY_RPBL 4996 1.06 3.25 0.06 81 XMNumbers 4846 3.01 3.15 2.95 82 MIME_HTML_MOSTLY 4805 2.38 3.13 2.04 83 TM2_M_URI_OPT_OUT 4743 2.09 3.09 1.64 84 XM_OfRef6 4699 1.63 3.06 0.98 85 T_XMDrugObfuBody_08 4530 1.85 2.95 1.35 86 XM_SPF_SoftFail 4526 1.91 2.94 1.44 87 XMNoVowels 4492 2.30 2.92 2.01 88 XM_UB50 4387 1.54 2.85 0.93 89 DKIM_ADSP_NXDOMAIN 4316 1.09 2.81 0.30 90 XMDiploma_00 4027 2.20 2.62 2.01 91 XM_B_SpammyWords4 4024 1.45 2.62 0.91 92 XM_B_URI_Unicode 4014 2.19 2.61 1.99 93 XM_B_Unsub2 3915 2.00 2.55 1.75 94 XM_CamelCaseFrm001 3907 3.93 2.54 4.57 95 XM_URI_RBL 3843 1.10 2.50 0.46 96 TR_XM_NoHeaderRelay 3812 0.94 2.48 0.24 97 RELAYCOUNTRY_AU 3804 1.17 2.47 0.57 98 ALL_TRUSTED 3781 13.07 2.46 17.94 99 T_TooManySym_01 3768 4.71 2.45 5.75 100 NO_DNS_FOR_FROM 3650 0.92 2.37 0.25 101 TR_XM_MaxWHORU 3642 0.88 2.37 0.20 102 XMBody_17 3545 0.96 2.31 0.35 103 SpammyFromTLD_02 3537 0.98 2.30 0.38 104 MAILING_LIST_MULTI 3395 2.88 2.21 3.18 105 FROM_EXCESS_BASE64 3306 1.94 2.15 1.84 106 TR_XM_INV_DKIM 3269 0.78 2.13 0.16 107 RCVD_IN_VALIDITY_SAFE 3209 3.05 2.09 3.49 108 T_FILL_THIS_FORM_SHORT 3202 1.66 2.08 1.46 109 URI_TRY_3LD 3041 1.01 1.98 0.57 110 XMStockSpam_06 3038 1.38 1.98 1.11 111 T_XMHurry_00 3004 1.06 1.95 0.64 112 USER_IN_DEF_DKIM_WL 2993 9.06 1.95 12.32 113 HK_RANDOM_REPLYTO 2914 0.70 1.90 0.16 114 SUBJ_ALL_CAPS 2872 1.73 1.87 1.66 115 HTML_MIME_NO_HTML_TAG 2825 2.13 1.84 2.27 116 NORDNS_LOW_CONTRAST 2794 0.59 1.82 0.03 117 SpammyFromTLD_01 2651 1.14 1.72 0.88 118 DIET_1 2593 0.80 1.69 0.39 119 RCVD_IN_ZEN_LASTEXTERNAL 2581 0.53 1.68 0.00 120 SHORTCIRCUIT 2581 0.53 1.68 0.00 121 RCVD_IN_VALIDITY_CERTIFIED 2577 2.44 1.68 2.79 122 T_XMDrugObfuBody_00 2551 0.96 1.66 0.64 123 XM_H_Long_From02 2517 1.17 1.64 0.96 124 BAYES_40 2504 4.37 1.63 5.63 125 XM_SendGrid 2450 1.40 1.59 1.30 126 XM_DK_Undo_01 2377 1.85 1.55 2.00 127 XMGenDplmaNmb 2335 1.13 1.52 0.95 128 T_REMOTE_IMAGE 2301 3.06 1.50 3.78 129 T_Symld_Words_02 2300 1.04 1.50 0.84 130 XMPhish30 2190 0.78 1.42 0.48 131 XMBrknScrpt_02 2161 1.12 1.41 1.00 132 KHOP_HELO_FCRDNS 2121 1.92 1.38 2.16 133 XM_B_SEO 2091 0.62 1.36 0.29 134 LongTLD 2085 0.70 1.36 0.40 135 URI_HEX 2008 1.21 1.31 1.16 136 DKIM_ADSP_CUSTOM_MED 1949 0.98 1.27 0.85 137 BAYES_20 1946 3.06 1.27 3.89 138 TR_XM_SEO4 1927 0.49 1.25 0.13 139 XM_B_Phish66 1919 0.66 1.25 0.39 140 XMSlimDrugH 1872 0.69 1.22 0.45 141 XMMoneyMeta_00 1828 0.78 1.19 0.59 142 XMHTML_After_End 1802 0.57 1.17 0.30 143 SHOPIFY_IMG_NOT_RCVD_SFY 1723 0.53 1.12 0.26 144 TR_LOTS_OF_MONEY2 1703 0.48 1.11 0.19 145 T_MONEY_PERCENT 1703 0.48 1.11 0.19 146 HTTPS_HTTP_MISMATCH 1692 0.95 1.10 0.89 147 ANY_BOUNCE_MESSAGE 1690 3.67 1.10 4.85 148 BOUNCE_MESSAGE 1687 3.67 1.10 4.84 149 URI_NOVOWEL 1687 1.46 1.10 1.63 150 RCVD_IN_IADB_LISTED 1680 2.99 1.09 3.86 151 HTML_TEXT_INVISIBLE_STYLE 1675 0.45 1.09 0.16 152 RCVD_IN_PBL 1636 0.86 1.06 0.77 153 XM_B_COPY_HTML 1622 0.75 1.06 0.61 154 XMSubMetaI_00 1611 0.66 1.05 0.48 155 TR_XM_RelayPhish 1608 0.37 1.05 0.06 156 TR_Symld_Words 1603 1.45 1.04 1.64 157 RELAYCOUNTRY_FR 1581 0.50 1.03 0.25 158 XMBdyGiftCard01 1566 0.62 1.02 0.43 159 RCVD_IN_IADB_SPF 1558 2.62 1.01 3.36 160 TR_XM_PHPDW 1544 0.62 1.00 0.44 161 HTML_TAG_BALANCE_BODY 1541 0.73 1.00 0.61 162 NML_ADSP_CUSTOM_MED 1534 0.69 1.00 0.55 163 TR_XM_FormFill2 1527 0.62 0.99 0.45 164 RCVD_IN_IADB_DK 1525 2.30 0.99 2.90 165 TR_XM_PHPForged 1523 0.61 0.99 0.44 166 RCVD_IN_IADB_SENDERID 1507 2.35 0.98 2.98 167 XM_B_COVIDMETA 1499 0.42 0.98 0.17 168 TR_LOTS_OF_MONEY3 1497 0.48 0.97 0.25 169 TR_XM_Base64_M1 1491 0.81 0.97 0.74 170 XMReplyNow 1459 0.45 0.95 0.22 171 XM_UB99 1458 0.30 0.95 0.00 172 XM_H_PHPOS 1458 0.59 0.95 0.43 173 MultiRelay_CC 1455 0.42 0.95 0.18 174 T_STY_INVIS_DIRECT 1449 0.51 0.94 0.31 175 XMPhish14 1445 0.56 0.94 0.38 176 XM_S_SpammyWords 1437 0.44 0.93 0.21 177 TR_XM_Spammywords 1437 0.44 0.93 0.21 178 FORGED_GMAIL_RCVD 1430 0.64 0.93 0.50 179 MPART_ALT_DIFF_COUNT 1423 0.74 0.93 0.65 180 TR_MetaPhish_Combo_01 1411 0.91 0.92 0.90 181 XM_HighProb1 1374 0.29 0.89 0.01 182 TM2_M_OBFU_COMMENT 1366 0.47 0.89 0.28 183 BAYES_00 1361 8.03 0.89 11.30 184 HTML_FONT_TINY_NORDNS 1358 0.32 0.88 0.06 185 TR_XM_DK_SendGrid 1337 0.82 0.87 0.80 186 RCVD_IN_SORBS_DUL 1329 0.30 0.86 0.04 187 XM_ProductURIs 1290 0.64 0.84 0.55 188 XM_B_DNDMA 1286 0.56 0.84 0.43 189 RELAYCOUNTRY_GB 1268 0.58 0.82 0.47 190 XM_DIRTYINTL 1246 0.33 0.81 0.11 191 TR_XM_InvalidRelay 1246 0.26 0.81 0.01 192 TR_XM_FormFill 1230 0.26 0.80 0.01 193 TM2_M_A_HREF_HREF 1215 0.40 0.79 0.21 194 RCVD_IN_PSBL 1211 0.48 0.79 0.34 195 FONT_INVIS_LONG_LINE 1210 0.31 0.79 0.09 196 XM_OfRef7 1198 0.36 0.78 0.17 197 TR_Caps_n_Bayes_99 1191 0.25 0.77 0.01 198 BOTNET_NORDNS 1182 0.25 0.77 0.01 199 XMLngstWrd_00 1179 0.61 0.77 0.53 200 RDNS_DYNAMIC 1170 0.46 0.76 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 287060 88.46 94.61 85.64 2 RELAYCOUNTRY_US 265030 80.16 82.52 79.07 3 DKIM_SIGNED 242389 77.58 89.06 72.32 4 XM_DK_Pass 237596 74.97 83.86 70.89 5 DKIM_VALID 233757 73.80 82.66 69.74 6 XM_B_Unicode 230071 73.07 82.73 68.64 7 DCC_CHECK_NEGATIVE 210812 50.31 22.86 62.90 8 BAYES_50 205939 55.27 41.81 61.44 9 DKIM_VALID_AU 186184 58.36 64.49 55.55 10 XMListUnsubscribeExists 153664 53.74 70.94 45.85 11 XM_B_SpammyWords 146356 51.75 69.37 43.67 12 XM_B_Unicode3 131954 42.35 48.86 39.37 13 DCC_CHECK 124181 49.11 75.43 37.05 14 RCVD_IN_MSPIKE_H2 114609 35.67 38.89 34.19 15 T_TM2_M_HEADER_IN_MSG 106964 28.31 20.47 31.91 16 DKIM_VALID_EF 92502 27.52 27.36 27.60 17 HTML_FONT_LOW_CONTRAST 89816 30.47 38.47 26.80 18 LOC_TINY_FONT_1 86583 33.11 48.99 25.83 19 FVGT_m_MULTI_ODD 79401 26.17 31.58 23.69 20 XMSubLong 78429 23.98 25.24 23.40 21 T_KAM_HTML_FONT_INVALID 68892 23.98 31.44 20.55 22 MIME_HTML_ONLY 67733 23.12 29.46 20.21 23 XM_B_SpammyWords2 60716 25.48 41.55 18.11 24 ALL_TRUSTED 60136 13.07 2.46 17.94 25 XM_Multi_Part_URI 42109 15.90 23.16 12.56 26 USER_IN_DEF_DKIM_WL 41309 9.06 1.95 12.32 27 TR_XM_DK_Unsub 39288 14.25 19.76 11.72 28 BAYES_00 37889 8.03 0.89 11.30 29 UNPARSEABLE_RELAY 37621 13.04 17.01 11.22 30 XM_B_PhoneNumber 33396 8.85 6.41 9.96 31 LotsOfNums_01 31204 8.70 7.37 9.31 32 XM_Evil_Numbers_Gen 31055 9.71 10.67 9.27 33 XM_B_Unsub 28863 11.14 16.65 8.61 34 TooManyTo_001 27347 6.71 3.56 8.16 35 TR_XM_DK_Bayes 24955 5.30 0.61 7.45 36 TR_XM_DK_Bayes1 24317 5.16 0.60 7.25 37 FSL_BULK_SIG 24206 7.76 8.93 7.22 38 BAYES_60 22915 7.24 8.11 6.84 39 TR_XM_BayesUnsub 22349 9.60 16.00 6.67 40 IN_ZIMBRA_NJ_WHITELIST 22220 4.57 0.09 6.63 41 XM_DKIMWhitelistDomains 21464 4.42 0.11 6.40 42 TR_XM_DK_Bayes2 20624 4.34 0.39 6.15 43 XMStrtUSub 19636 5.86 5.86 5.86 44 TR_MAX_INTL_RELAY 19286 8.54 14.62 5.75 45 T_TooManySym_01 19261 4.71 2.45 5.75 46 LOTS_OF_MONEY 19188 8.02 13.03 5.72 47 XM_H_GMP 19108 5.42 4.80 5.70 48 BAYES_40 18868 4.37 1.63 5.63 49 XM_H_Long_From01 18456 5.30 4.86 5.51 50 RCVD_IN_MSPIKE_H3 17712 4.85 3.90 5.28 51 RCVD_IN_MSPIKE_WL 17712 4.85 3.90 5.28 52 MIME_QP_LONG_LINE 17056 4.54 3.35 5.09 53 XM_B_Phish_Phrases 16975 6.12 8.41 5.06 54 XM_B_SpammyWords3 16293 8.04 14.97 4.86 55 ANY_BOUNCE_MESSAGE 16243 3.67 1.10 4.85 56 BOUNCE_MESSAGE 16237 3.67 1.10 4.84 57 XM_CamelCaseFrm001 15305 3.93 2.54 4.57 58 MPART_ALT_DIFF 15055 5.16 6.61 4.49 59 XM_PDF 15014 3.31 0.75 4.48 60 XM_DK_Undo_02 14232 15.08 38.71 4.25 61 HTML_IMAGE_RATIO_02 13828 5.19 7.52 4.13 62 XM_UncommonTLD01 13637 4.63 5.84 4.07 63 TR_XM_SpammyWords4 13172 6.36 11.65 3.93 64 BAYES_20 13025 3.06 1.27 3.89 65 RCVD_IN_IADB_LISTED 12922 2.99 1.09 3.86 66 HTML_IMAGE_RATIO_04 12743 4.20 5.08 3.80 67 T_REMOTE_IMAGE 12679 3.06 1.50 3.78 68 RELAYCOUNTRY_META 12168 7.38 15.54 3.63 69 XMSubMetaSx_00 11998 4.21 5.58 3.58 70 BAYES_80 11880 5.27 9.03 3.54 71 RCVD_IN_VALIDITY_SAFE 11710 3.05 2.09 3.49 72 RCVD_IN_IADB_SPF 11258 2.62 1.01 3.36 73 MAILING_LIST_MULTI 10668 2.88 2.21 3.18 74 HTML_IMAGE_RATIO_06 10258 3.42 4.20 3.06 75 T_TooManySym_02 10012 2.28 0.73 2.99 76 RCVD_IN_IADB_SENDERID 9983 2.35 0.98 2.98 77 BOTNET_IPINHOSTNAME 9909 5.31 10.45 2.96 78 XMNumbers 9885 3.01 3.15 2.95 79 TM2_M_VERY_LONG_WORD 9779 3.14 3.63 2.92 80 RCVD_IN_IADB_DK 9724 2.30 0.99 2.90 81 RCVD_IN_VALIDITY_CERTIFIED 9358 2.44 1.68 2.79 82 TooManyTo_002 9218 2.08 0.61 2.75 83 BAYES_99 9162 11.21 29.70 2.73 84 MIME_HTML_ONLY_MULTI 9152 3.05 3.76 2.73 85 RCVD_IN_IADB_VOUCHED 8753 1.90 0.34 2.61 86 DKIM_INVALID 8632 3.78 6.40 2.58 87 XM_B_SpammyTLD 8467 2.95 3.88 2.53 88 HTML_IMAGE_RATIO_08 8426 2.77 3.33 2.51 89 BAYES_05 8061 1.85 0.63 2.40 90 XM_Body_Dirty_Words 7893 4.02 7.65 2.35 91 HTML_MIME_NO_HTML_TAG 7595 2.13 1.84 2.27 92 BAYES_95 7393 3.17 5.26 2.21 93 HTML_IMAGE_ONLY_32 7288 1.57 0.26 2.17 94 INVALID_MSGID 7287 1.57 0.24 2.17 95 KHOP_HELO_FCRDNS 7254 1.92 1.38 2.16 96 BAYES_999 7001 8.64 22.93 2.09 97 MIME_HTML_MOSTLY 6850 2.38 3.13 2.04 98 XMDiploma_00 6748 2.20 2.62 2.01 99 XMNoVowels 6739 2.30 2.92 2.01 100 XM_DK_Undo_01 6687 1.85 1.55 2.00 101 XM_B_URI_Unicode 6677 2.19 2.61 1.99 102 TR_XM_DKIM_Undo 6470 10.26 28.43 1.93 103 TO_MALFORMED 6283 1.29 0.03 1.87 104 XM_B_Investor 6198 2.85 5.03 1.85 105 FROM_EXCESS_BASE64 6174 1.94 2.15 1.84 106 RCVD_IN_IADB_OPTIN 6025 1.30 0.20 1.80 107 MAY_BE_FORGED 5942 1.22 0.01 1.77 108 TR_XM_SpammyRelay 5931 4.78 11.34 1.77 109 XM_B_Unsub2 5869 2.00 2.55 1.75 110 SUBJ_ALL_CAPS 5577 1.73 1.87 1.66 111 TO_NO_BRKTS_HTML_ONLY 5503 1.27 0.47 1.64 112 TM2_M_URI_OPT_OUT 5498 2.09 3.09 1.64 113 TR_Symld_Words 5494 1.45 1.04 1.64 114 URI_NOVOWEL 5474 1.46 1.10 1.63 115 TooManyTo_003 5416 1.26 0.48 1.62 116 TR_XM_PhishingBody 5352 2.52 4.54 1.60 117 T_XMDrugObfuBody_14 4981 2.25 3.90 1.49 118 UNTRUSTED_Relay 4964 2.75 5.50 1.48 119 T_FILL_THIS_FORM_SHORT 4890 1.66 2.08 1.46 120 XM_SPF_SoftFail 4818 1.91 2.94 1.44 121 TR_XM_SpammyWords5 4723 2.06 3.46 1.41 122 TR_XM_UnparsRelay 4654 3.43 7.90 1.39 123 IN_HORDE_ADDRESS_BOOK 4615 0.98 0.10 1.38 124 XM_GoogleGroups 4595 1.17 0.72 1.37 125 MIME_CHARSET_FARAWAY 4559 1.16 0.73 1.36 126 T_XMDrugObfuBody_08 4533 1.85 2.95 1.35 127 XM_SendGrid 4371 1.40 1.59 1.30 128 HELO_NODOT 4322 0.94 0.17 1.29 129 HELO_NO_DOMAIN 4313 0.93 0.15 1.29 130 BOTNET 4253 3.58 8.60 1.27 131 XMCapTrack 4223 1.02 0.51 1.26 132 TooManyTo_004 3964 0.94 0.41 1.18 133 T_TooManySym_03 3909 0.87 0.22 1.17 134 URI_HEX 3893 1.21 1.31 1.16 135 XMStockSpam_06 3717 1.38 1.98 1.11 136 TO_IN_SUBJ 3622 0.79 0.17 1.08 137 XMGappySubj_01 3584 0.78 0.14 1.07 138 TVD_SPACE_RATIO 3519 0.80 0.25 1.05 139 CHARSET_FARAWAY_HEADER 3454 0.74 0.11 1.03 140 RELAYCOUNTRY_CA 3445 2.70 6.34 1.03 141 TR_DCC_Bayes_99 3388 7.42 21.41 1.01 142 XMSexyCombo_05 3349 1.82 3.62 1.00 143 XMBrknScrpt_02 3338 1.12 1.41 1.00 144 XM_OfRef6 3294 1.63 3.06 0.98 145 TooManyTo_005 3223 0.77 0.36 0.96 146 XM_H_Long_From02 3202 1.17 1.64 0.96 147 XMGenDplmaNmb 3197 1.13 1.52 0.95 148 XM_UB50 3127 1.54 2.85 0.93 149 XM_B_SpammyWords4 3044 1.45 2.62 0.91 150 TR_MetaPhish_Combo_01 3020 0.91 0.92 0.90 151 HTTPS_HTTP_MISMATCH 2973 0.95 1.10 0.89 152 SpammyFromTLD_01 2937 1.14 1.72 0.88 153 DKIM_ADSP_CUSTOM_MED 2856 0.98 1.27 0.85 154 XM_ShortIntro_01 2800 0.70 0.41 0.84 155 T_Symld_Words_02 2799 1.04 1.50 0.84 156 XM_H_Trusted_IP 2782 0.57 0.00 0.83 157 TR_XM_DK_SendGrid 2683 0.82 0.87 0.80 158 RCVD_IN_PBL 2576 0.86 1.06 0.77 159 FROM_GOV_DKIM_AU 2541 0.55 0.09 0.76 160 RCVD_IN_BL_SPAMCOP_NET 2514 3.96 10.95 0.75 161 TR_XM_Base64_M1 2482 0.81 0.97 0.74 162 XMSubNoVowel 2342 0.60 0.38 0.70 163 XM_H_PHPMailer 2265 0.64 0.58 0.68 164 MPART_ALT_DIFF_COUNT 2175 0.74 0.93 0.65 165 T_XMHurry_00 2154 1.06 1.95 0.64 166 T_XMDrugObfuBody_00 2133 0.96 1.66 0.64 167 HTML_TAG_BALANCE_BODY 2047 0.73 1.00 0.61 168 XM_B_COPY_HTML 2031 0.75 1.06 0.61 169 XMMoneyMeta_00 1991 0.78 1.19 0.59 170 TVD_RCVD_IP 1984 0.61 0.65 0.59 171 RELAYCOUNTRY_AU 1920 1.17 2.47 0.57 172 URI_TRY_3LD 1895 1.01 1.98 0.57 173 XMGappySubj_02 1888 0.41 0.07 0.56 174 T_OBFU_PDF_ATTACH 1868 0.42 0.13 0.56 175 XM_ProductURIs 1854 0.64 0.84 0.55 176 NML_ADSP_CUSTOM_MED 1849 0.69 1.00 0.55 177 HTML_IMAGE_ONLY_20 1790 0.59 0.71 0.53 178 XMLngstWrd_00 1786 0.61 0.77 0.53 179 SUBJ_BUY 1749 0.39 0.12 0.52 180 XMBody_95 1707 0.40 0.15 0.51 181 FORGED_GMAIL_RCVD 1686 0.64 0.93 0.50 182 XMDateMe_00 1682 0.45 0.34 0.50 183 XMPhish30 1611 0.78 1.42 0.48 184 XMSubMetaI_00 1594 0.66 1.05 0.48 185 RELAYCOUNTRY_GB 1571 0.58 0.82 0.47 186 T_MANY_PILL_PRICE 1560 0.32 0.01 0.47 187 XM_URI_RBL 1530 1.10 2.50 0.46 188 XMSlimDrugH 1513 0.69 1.22 0.45 189 TR_XM_FormFill2 1496 0.62 0.99 0.45 190 TR_XM_PHPForged 1471 0.61 0.99 0.44 191 TR_XM_PHPDW 1466 0.62 1.00 0.44 192 XM_B_DNDMA 1451 0.56 0.84 0.43 193 XMBdyGiftCard01 1443 0.62 1.02 0.43 194 XM_H_PHPOS 1434 0.59 0.95 0.43 195 MSGID_FROM_MTA_HEADER 1416 0.32 0.11 0.42 196 LongTLD 1339 0.70 1.36 0.40 197 HTML_IMAGE_ONLY_16 1325 0.42 0.47 0.40 198 TR_XM_SPAMCOP 1323 2.84 8.17 0.39 199 DIET_1 1318 0.80 1.69 0.39 200 MISSING_HEADERS 1308 0.49 0.70 0.39 ----------------------------------------------------------------------