Email: 503034 Autolearn: 0 AvgScore: 2.64 AvgScanTime: 1.42 sec Spam: 142882 Autolearn: 0 AvgScore: 14.68 AvgScanTime: 1.58 sec Ham: 360152 Autolearn: 0 AvgScore: -2.13 AvgScanTime: 1.35 sec Time Spent Running SA: 198.16 hours Time Spent Processing Spam: 62.79 hours Time Spent Processing Ham: 135.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135218 90.50 94.64 88.86 2 DKIM_SIGNED 129950 73.37 90.95 66.40 3 XM_DK_Pass 123060 71.10 86.13 65.14 4 DKIM_VALID 121978 70.18 85.37 64.15 5 RELAYCOUNTRY_US 119324 82.93 83.51 82.69 6 XM_B_Unicode 118437 75.94 82.89 73.18 7 DCC_CHECK 107343 46.08 75.13 34.56 8 XMListUnsubscribeExists 99107 50.28 69.36 42.71 9 XM_B_SpammyWords 98034 50.50 68.61 43.31 10 DKIM_VALID_AU 94575 55.55 66.19 51.33 11 XM_B_Unicode3 67376 43.95 47.15 42.68 12 LOC_TINY_FONT_1 65681 29.45 45.97 22.89 13 XM_DK_Undo_02 57315 14.31 40.11 4.07 14 RCVD_IN_MSPIKE_H2 56591 33.16 39.61 30.61 15 BAYES_50 56374 52.53 39.45 57.72 16 XM_B_SpammyWords2 56043 22.52 39.22 15.90 17 HTML_FONT_LOW_CONTRAST 49845 26.71 34.89 23.47 18 T_KAM_HTML_FONT_INVALID 46181 22.89 32.32 19.15 19 FVGT_m_MULTI_ODD 45582 24.39 31.90 21.40 20 DKIM_VALID_EF 43879 27.59 30.71 26.35 21 BAYES_99 43230 10.52 30.26 2.69 22 MIME_HTML_ONLY 41703 25.16 29.19 23.57 23 TR_XM_DKIM_Undo 41117 9.45 28.78 1.78 24 XMSubLong 35378 23.72 24.76 23.31 25 DCC_CHECK_NEGATIVE 33063 53.39 23.14 65.39 26 BAYES_999 33022 8.00 23.11 2.01 27 T_TM2_M_HEADER_IN_MSG 31000 25.23 21.70 26.63 28 TR_DCC_Bayes_99 30755 6.71 21.52 0.83 29 TR_XM_DK_Unsub 30612 14.46 21.42 11.69 30 XM_Multi_Part_URI 30443 14.43 21.31 11.71 31 XM_B_Unsub 23836 10.14 16.68 7.54 32 UNPARSEABLE_RELAY 23741 12.15 16.62 10.38 33 TR_XM_BayesUnsub 23042 8.70 16.13 5.76 34 TR_MAX_INTL_RELAY 22407 7.81 15.68 4.68 35 RELAYCOUNTRY_META 21912 6.73 15.34 3.31 36 XM_B_SpammyWords3 21177 6.97 14.82 3.86 37 LOTS_OF_MONEY 20496 8.09 14.34 5.60 38 TR_XM_SpammyWords4 18077 6.17 12.65 3.59 39 TR_XM_SpammyRelay 16454 4.40 11.52 1.58 40 BOTNET_IPINHOSTNAME 15820 5.19 11.07 2.86 41 TR_XM_SpammyWords2 14560 3.11 10.19 0.30 42 BAYES_80 14046 4.82 9.83 2.84 43 XM_Evil_Numbers_Gen 13701 9.08 9.59 8.88 44 FSL_BULK_SIG 13460 7.51 9.42 6.75 45 BOTNET 12919 3.54 9.04 1.35 46 RCVD_IN_BL_SPAMCOP_NET 12911 2.94 9.04 0.52 47 TR_XM_UnparsRelay 12865 3.54 9.00 1.37 48 BAYES_60 11858 6.42 8.30 5.67 49 LotsOfNums_01 11090 7.31 7.76 7.14 50 XM_B_Phish_Phrases 10920 5.06 7.64 4.03 51 TR_XM_SPAMCOP 9891 2.17 6.92 0.28 52 HTML_IMAGE_RATIO_02 9161 4.76 6.41 4.10 53 XM_UncommonTLD01 9009 4.60 6.31 3.93 54 XM_B_PhoneNumber 8966 8.28 6.28 9.07 55 XM_Body_Dirty_Words 8801 3.59 6.16 2.58 56 MPART_ALT_DIFF 8781 8.53 6.15 9.48 57 UNTRUSTED_Relay 8572 2.66 6.00 1.33 58 XM_H_Long_From01 8549 5.22 5.98 4.92 59 XMSubMetaSx_00 8423 3.62 5.90 2.72 60 RELAYCOUNTRY_CA 8152 2.41 5.71 1.10 61 DKIM_INVALID 7972 3.19 5.58 2.24 62 BAYES_95 7939 2.89 5.56 1.84 63 XM_H_GMP 7772 5.23 5.44 5.14 64 XMStrtUSub 6851 9.49 4.79 11.35 65 HTML_IMAGE_RATIO_04 6613 11.65 4.63 14.43 66 XM_B_Investor 6400 2.42 4.48 1.61 67 XM_B_SpammyTLD 6307 3.08 4.41 2.54 68 TR_XM_PhishingBody 6275 2.25 4.39 1.40 69 XM_OfRef6 6135 1.97 4.29 1.05 70 T_XMDrugObfuBody_14 5865 2.40 4.10 1.72 71 XMSexyCombo_05 5845 2.21 4.09 1.46 72 TR_XM_SpammyWords5 5495 1.97 3.85 1.23 73 MIME_HTML_MOSTLY 5491 2.45 3.84 1.90 74 TooManyTo_001 5441 6.82 3.81 8.01 75 MIME_HTML_ONLY_MULTI 5252 6.77 3.68 8.00 76 HTML_IMAGE_RATIO_06 5154 4.21 3.61 4.45 77 MIME_QP_LONG_LINE 4864 4.12 3.40 4.40 78 RCVD_IN_MSPIKE_WL 4808 4.22 3.37 4.56 79 RCVD_IN_MSPIKE_H3 4808 4.22 3.37 4.56 80 TM2_M_VERY_LONG_WORD 4782 1.74 3.35 1.10 81 XMNumbers 4682 2.97 3.28 2.85 82 XM_SPF_SoftFail 4468 1.74 3.13 1.20 83 XMDiploma_00 4381 2.13 3.07 1.76 84 XM_UB50 4317 1.45 3.02 0.83 85 HTML_IMAGE_RATIO_08 4266 2.73 2.99 2.63 86 T_XMDrugObfuBody_08 4143 1.73 2.90 1.27 87 XM_B_Unsub2 4087 1.79 2.86 1.36 88 XM_B_URI_Unicode 3910 1.89 2.74 1.56 89 RCVD_IN_VALIDITY_RPBL 3872 0.85 2.71 0.11 90 XM_CamelCaseFrm001 3787 2.17 2.65 1.98 91 XM_B_SpammyWords4 3718 1.20 2.60 0.64 92 TR_XM_INV_DKIM 3677 0.84 2.57 0.15 93 MAILING_LIST_MULTI 3639 2.67 2.55 2.72 94 TM2_M_URI_OPT_OUT 3605 1.79 2.52 1.50 95 RELAYCOUNTRY_AU 3561 0.98 2.49 0.37 96 T_TooManySym_01 3532 4.70 2.47 5.58 97 XM_URI_RBL 3464 0.90 2.42 0.30 98 SpammyFromTLD_02 3347 0.97 2.34 0.43 99 T_XMHurry_00 3264 1.00 2.28 0.49 100 XMNoVowels 3182 1.72 2.23 1.52 101 T_FILL_THIS_FORM_SHORT 3113 1.20 2.18 0.81 102 USER_IN_DEF_DKIM_WL 3103 8.65 2.17 11.22 103 XMBody_17 3036 0.84 2.12 0.33 104 SUBJ_ALL_CAPS 2972 1.55 2.08 1.35 105 TR_XM_NoHeaderRelay 2970 0.71 2.08 0.17 106 RCVD_IN_IADB_LISTED 2863 3.02 2.00 3.42 107 XMStockSpam_06 2856 1.34 2.00 1.07 108 RCVD_IN_IADB_SPF 2775 2.72 1.94 3.03 109 T_REMOTE_IMAGE 2762 2.92 1.93 3.31 110 RCVD_IN_IADB_DK 2753 2.44 1.93 2.64 111 RCVD_IN_IADB_SENDERID 2739 2.49 1.92 2.72 112 SpammyFromTLD_01 2694 1.11 1.89 0.80 113 RCVD_IN_VALIDITY_SAFE 2652 2.93 1.86 3.35 114 FROM_EXCESS_BASE64 2623 1.63 1.84 1.55 115 TR_LOTS_OF_MONEY3 2608 0.84 1.83 0.44 116 T_XMDrugObfuBody_00 2595 1.14 1.82 0.87 117 HTML_MIME_NO_HTML_TAG 2567 2.17 1.80 2.31 118 BAYES_40 2565 4.55 1.80 5.64 119 TR_LOTS_OF_MONEY2 2546 0.70 1.78 0.27 120 T_MONEY_PERCENT 2546 0.70 1.78 0.27 121 URI_HEX 2517 1.32 1.76 1.15 122 XM_H_Undi_Recip 2488 0.60 1.74 0.15 123 SHORTCIRCUIT 2464 0.49 1.72 0.00 124 RCVD_IN_ZEN_LASTEXTERNAL 2464 0.49 1.72 0.00 125 ALL_TRUSTED 2440 10.92 1.71 14.57 126 URI_TRY_3LD 2408 0.84 1.69 0.50 127 XMGenDplmaNmb 2344 1.09 1.64 0.87 128 DIET_1 2313 0.76 1.62 0.42 129 XM_B_Phish66 2105 0.63 1.47 0.30 130 HTML_IMAGE_ONLY_20 2090 0.76 1.46 0.49 131 BAYES_20 2076 3.84 1.45 4.79 132 RCVD_IN_VALIDITY_CERTIFIED 2072 2.41 1.45 2.79 133 XMPhish30 2059 0.71 1.44 0.41 134 KHOP_HELO_FCRDNS 2056 1.25 1.44 1.17 135 HK_RANDOM_REPLYTO 2055 0.51 1.44 0.14 136 TR_XM_Undi_Recip11 2017 0.43 1.41 0.03 137 XM_SendGrid 1996 1.22 1.40 1.15 138 XMBrknScrpt_02 1987 0.90 1.39 0.71 139 XM_DK_Undo_01 1981 1.38 1.39 1.38 140 TR_Symld_Words 1975 1.41 1.38 1.43 141 TR_Mismatch_TLD_02 1854 0.44 1.30 0.10 142 TR_XM_Undi_RecipCombo2 1811 0.36 1.27 0.01 143 RELAYCOUNTRY_FR 1783 0.49 1.25 0.19 144 XMSubMetaI_00 1769 0.69 1.24 0.47 145 XM_B_DNDMA 1757 0.67 1.23 0.44 146 MultiRelay_CC 1729 0.43 1.21 0.12 147 XM_B_COPY_HTML 1672 0.75 1.17 0.59 148 TR_XM_Undi_Recip19 1662 0.37 1.16 0.06 149 HTML_TAG_BALANCE_BODY 1656 0.74 1.16 0.57 150 XMSlimDrugH 1636 0.75 1.15 0.59 151 URI_NOVOWEL 1634 1.36 1.14 1.45 152 HTTPS_HTTP_MISMATCH 1599 0.78 1.12 0.65 153 SHOPIFY_IMG_NOT_RCVD_SFY 1593 0.46 1.11 0.21 154 T_Symld_Words_02 1591 0.71 1.11 0.55 155 RCVD_IN_PBL 1589 0.82 1.11 0.70 156 DKIM_ADSP_CUSTOM_MED 1586 0.91 1.11 0.84 157 LongTLD 1558 0.61 1.09 0.43 158 TR_XM_Base64_M1 1558 0.63 1.09 0.44 159 HTML_FONT_TINY_NORDNS 1554 0.34 1.09 0.05 160 TR_MetaPhish_Combo_01 1531 0.81 1.07 0.71 161 TR_XM_PHPForged 1519 0.55 1.06 0.35 162 TR_XM_FormFill2 1500 0.55 1.05 0.35 163 XM_B_SEO 1498 0.44 1.05 0.20 164 TR_XM_PHPDW 1494 0.55 1.05 0.35 165 MPART_ALT_DIFF_COUNT 1471 0.81 1.03 0.73 166 XM_H_PHPOS 1466 0.53 1.03 0.34 167 DKIM_ADSP_NXDOMAIN 1466 0.50 1.03 0.29 168 XM_B_REG_HTML 1465 0.41 1.03 0.17 169 RCVD_IN_PSBL 1449 0.38 1.01 0.13 170 UNDISC_MONEY 1435 0.29 1.00 0.00 171 XM_H_Long_From02 1380 0.88 0.97 0.84 172 RDNS_DYNAMIC 1374 0.44 0.96 0.23 173 TR_Sbj_FN_Bdy 1371 0.35 0.96 0.10 174 TR_XM_Undi_Recip5 1371 0.27 0.96 0.00 175 TR_XM_SEO4 1359 0.33 0.95 0.09 176 TM2_M_OBFU_COMMENT 1346 0.57 0.94 0.42 177 PDS_RDNS_DYNAMIC_FP 1342 0.36 0.94 0.13 178 TR_XM_RelayPhish 1331 0.33 0.93 0.09 179 TR_XM_InvalidRelay 1327 0.27 0.93 0.01 180 BAYES_00 1312 11.01 0.92 15.01 181 T_TooManySym_02 1300 2.34 0.91 2.91 182 NML_ADSP_CUSTOM_MED 1297 0.67 0.91 0.57 183 XMSolicitRefs_0 1282 0.47 0.90 0.29 184 XM_PDF 1273 3.10 0.89 3.98 185 TR_XM_FormFill 1270 0.26 0.89 0.01 186 MONEY_FRAUD_8 1268 0.25 0.89 0.00 187 XMReplyNow 1257 0.42 0.88 0.24 188 T_STY_INVIS_DIRECT 1250 0.49 0.87 0.34 189 XMMoneyMeta_00 1236 0.55 0.87 0.42 190 XMHTML_After_End 1218 0.45 0.85 0.28 191 ADVANCE_FEE_5_NEW_MONEY 1215 0.24 0.85 0.00 192 FORGED_GMAIL_RCVD 1210 0.63 0.85 0.55 193 RELAYCOUNTRY_RU 1206 0.25 0.84 0.02 194 NA_DOLLARS 1201 0.24 0.84 0.00 195 XMBody_78 1188 0.41 0.83 0.25 196 XM_B_COVIDMETA 1174 0.34 0.82 0.14 197 TR_XM_DK_SendGrid 1168 0.74 0.82 0.71 198 XM_UB99 1163 0.23 0.81 0.00 199 ANY_BOUNCE_MESSAGE 1143 2.46 0.80 3.12 200 BOUNCE_MESSAGE 1142 2.46 0.80 3.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 320033 90.50 94.64 88.86 2 RELAYCOUNTRY_US 297818 82.93 83.51 82.69 3 XM_B_Unicode 263559 75.94 82.89 73.18 4 DKIM_SIGNED 239136 73.37 90.95 66.40 5 DCC_CHECK_NEGATIVE 235507 53.39 23.14 65.39 6 XM_DK_Pass 234598 71.10 86.13 65.14 7 DKIM_VALID 231053 70.18 85.37 64.15 8 BAYES_50 207862 52.53 39.45 57.72 9 DKIM_VALID_AU 184880 55.55 66.19 51.33 10 XM_B_SpammyWords 155980 50.50 68.61 43.31 11 XMListUnsubscribeExists 153837 50.28 69.36 42.71 12 XM_B_Unicode3 153716 43.95 47.15 42.68 13 DCC_CHECK 124453 46.08 75.13 34.56 14 RCVD_IN_MSPIKE_H2 110232 33.16 39.61 30.61 15 T_TM2_M_HEADER_IN_MSG 95900 25.23 21.70 26.63 16 DKIM_VALID_EF 94893 27.59 30.71 26.35 17 MIME_HTML_ONLY 84881 25.16 29.19 23.57 18 HTML_FONT_LOW_CONTRAST 84539 26.71 34.89 23.47 19 XMSubLong 83946 23.72 24.76 23.31 20 LOC_TINY_FONT_1 82443 29.45 45.97 22.89 21 FVGT_m_MULTI_ODD 77089 24.39 31.90 21.40 22 T_KAM_HTML_FONT_INVALID 68961 22.89 32.32 19.15 23 XM_B_SpammyWords2 57251 22.52 39.22 15.90 24 BAYES_00 54071 11.01 0.92 15.01 25 ALL_TRUSTED 52487 10.92 1.71 14.57 26 HTML_IMAGE_RATIO_04 51987 11.65 4.63 14.43 27 HTML_FONT_FACE_BAD 47908 9.74 0.77 13.30 28 XM_H_Trusted_IP 45016 8.95 0.00 12.50 29 XM_Multi_Part_URI 42164 14.43 21.31 11.71 30 TR_XM_DK_Unsub 42102 14.46 21.42 11.69 31 XMStrtUSub 40863 9.49 4.79 11.35 32 USER_IN_DEF_DKIM_WL 40425 8.65 2.17 11.22 33 UNPARSEABLE_RELAY 37381 12.15 16.62 10.38 34 MPART_ALT_DIFF 34134 8.53 6.15 9.48 35 XM_B_PhoneNumber 32666 8.28 6.28 9.07 36 XM_Evil_Numbers_Gen 31995 9.08 9.59 8.88 37 TooManyTo_001 28861 6.82 3.81 8.01 38 MIME_HTML_ONLY_MULTI 28823 6.77 3.68 8.00 39 XM_B_Unsub 27161 10.14 16.68 7.54 40 LotsOfNums_01 25700 7.31 7.76 7.14 41 FSL_BULK_SIG 24315 7.51 9.42 6.75 42 TR_XM_DK_Bayes 23800 4.94 0.74 6.61 43 TR_XM_DK_Bayes1 23255 4.83 0.73 6.46 44 IN_ZIMBRA_NJ_WHITELIST 21603 4.33 0.14 6.00 45 XM_DKIMWhitelistDomains 21033 4.19 0.04 5.84 46 TR_XM_BayesUnsub 20745 8.70 16.13 5.76 47 BAYES_60 20426 6.42 8.30 5.67 48 BAYES_40 20314 4.55 1.80 5.64 49 LOTS_OF_MONEY 20181 8.09 14.34 5.60 50 T_TooManySym_01 20092 4.70 2.47 5.58 51 TR_XM_DK_Bayes2 19649 4.03 0.43 5.46 52 XM_H_GMP 18527 5.23 5.44 5.14 53 XM_H_Long_From01 17725 5.22 5.98 4.92 54 BAYES_20 17251 3.84 1.45 4.79 55 TR_MAX_INTL_RELAY 16859 7.81 15.68 4.68 56 RCVD_IN_MSPIKE_H3 16435 4.22 3.37 4.56 57 RCVD_IN_MSPIKE_WL 16435 4.22 3.37 4.56 58 XMSubNoVowel 16262 3.34 0.38 4.52 59 HTML_IMAGE_RATIO_06 16020 4.21 3.61 4.45 60 MIME_QP_LONG_LINE 15843 4.12 3.40 4.40 61 HTML_IMAGE_RATIO_02 14759 4.76 6.41 4.10 62 XM_DK_Undo_02 14659 14.31 40.11 4.07 63 XM_B_Phish_Phrases 14527 5.06 7.64 4.03 64 XM_PDF 14327 3.10 0.89 3.98 65 XM_UncommonTLD01 14140 4.60 6.31 3.93 66 XM_B_SpammyWords3 13908 6.97 14.82 3.86 67 BAYES_05 13679 2.92 0.71 3.80 68 TR_XM_SpammyWords4 12942 6.17 12.65 3.59 69 RCVD_IN_IADB_LISTED 12333 3.02 2.00 3.42 70 RCVD_IN_VALIDITY_SAFE 12073 2.93 1.86 3.35 71 RELAYCOUNTRY_META 11925 6.73 15.34 3.31 72 T_REMOTE_IMAGE 11915 2.92 1.93 3.31 73 ANY_BOUNCE_MESSAGE 11251 2.46 0.80 3.12 74 BOUNCE_MESSAGE 11251 2.46 0.80 3.12 75 RCVD_IN_IADB_SPF 10897 2.72 1.94 3.03 76 T_TooManySym_02 10471 2.34 0.91 2.91 77 BOTNET_IPINHOSTNAME 10291 5.19 11.07 2.86 78 XMNumbers 10275 2.97 3.28 2.85 79 BAYES_80 10225 4.82 9.83 2.84 80 RCVD_IN_VALIDITY_CERTIFIED 10044 2.41 1.45 2.79 81 MAILING_LIST_MULTI 9809 2.67 2.55 2.72 82 XMSubMetaSx_00 9800 3.62 5.90 2.72 83 RCVD_IN_IADB_SENDERID 9798 2.49 1.92 2.72 84 TooManyTo_002 9780 2.11 0.59 2.72 85 BAYES_99 9696 10.52 30.26 2.69 86 RCVD_IN_IADB_DK 9510 2.44 1.93 2.64 87 HTML_IMAGE_RATIO_08 9467 2.73 2.99 2.63 88 XM_Body_Dirty_Words 9279 3.59 6.16 2.58 89 XM_B_SpammyTLD 9163 3.08 4.41 2.54 90 HTML_MIME_NO_HTML_TAG 8328 2.17 1.80 2.31 91 DKIM_INVALID 8083 3.19 5.58 2.24 92 XMSubLongNoVowel 7942 1.60 0.08 2.21 93 XMSubGarbage 7768 1.55 0.03 2.16 94 RCVD_IN_IADB_VOUCHED 7631 1.63 0.39 2.12 95 BAYES_999 7233 8.00 23.11 2.01 96 INVALID_MSGID 7148 1.50 0.28 1.98 97 XM_CamelCaseFrm001 7124 2.17 2.65 1.98 98 MIME_HTML_MOSTLY 6847 2.45 3.84 1.90 99 BAYES_95 6618 2.89 5.56 1.84 100 TR_XM_DKIM_Undo 6422 9.45 28.78 1.78 101 XMDiploma_00 6325 2.13 3.07 1.76 102 TO_MALFORMED 6300 1.27 0.07 1.75 103 T_XMDrugObfuBody_14 6212 2.40 4.10 1.72 104 XM_B_Investor 5795 2.42 4.48 1.61 105 TR_XM_SpammyRelay 5699 4.40 11.52 1.58 106 TooManyTo_003 5642 1.27 0.51 1.57 107 XM_B_URI_Unicode 5616 1.89 2.74 1.56 108 FROM_EXCESS_BASE64 5568 1.63 1.84 1.55 109 XMNoVowels 5477 1.72 2.23 1.52 110 TM2_M_URI_OPT_OUT 5408 1.79 2.52 1.50 111 RCVD_IN_IADB_OPTIN 5348 1.14 0.26 1.48 112 XMSexyCombo_05 5255 2.21 4.09 1.46 113 URI_NOVOWEL 5227 1.36 1.14 1.45 114 TR_Symld_Words 5134 1.41 1.38 1.43 115 TR_XM_PhishingBody 5052 2.25 4.39 1.40 116 XM_DK_Undo_01 4974 1.38 1.39 1.38 117 TR_XM_UnparsRelay 4952 3.54 9.00 1.37 118 XM_B_Unsub2 4909 1.79 2.86 1.36 119 BOTNET 4870 3.54 9.04 1.35 120 SUBJ_ALL_CAPS 4847 1.55 2.08 1.35 121 UNTRUSTED_Relay 4784 2.66 6.00 1.33 122 T_XMDrugObfuBody_08 4581 1.73 2.90 1.27 123 IN_HORDE_ADDRESS_BOOK 4553 0.93 0.10 1.26 124 T_TooManySym_03 4473 0.97 0.27 1.24 125 TR_XM_SpammyWords5 4431 1.97 3.85 1.23 126 XMGappySubj_01 4388 0.91 0.14 1.22 127 XM_SPF_SoftFail 4304 1.74 3.13 1.20 128 KHOP_HELO_FCRDNS 4207 1.25 1.44 1.17 129 HELO_NODOT 4187 0.86 0.09 1.16 130 HELO_NO_DOMAIN 4182 0.86 0.09 1.16 131 XM_SendGrid 4131 1.22 1.40 1.15 132 URI_HEX 4128 1.32 1.76 1.15 133 TooManyTo_004 4058 0.93 0.44 1.13 134 RELAYCOUNTRY_CA 3960 2.41 5.71 1.10 135 TM2_M_VERY_LONG_WORD 3948 1.74 3.35 1.10 136 XMCapTrack 3924 0.98 0.71 1.09 137 XMStockSpam_06 3871 1.34 2.00 1.07 138 XM_GoogleGroups 3799 0.95 0.70 1.05 139 XM_OfRef6 3784 1.97 4.29 1.05 140 XM_E_Blogspot 3486 0.72 0.10 0.97 141 TVD_SPACE_RATIO 3312 0.71 0.17 0.92 142 TO_NO_BRKTS_HTML_ONLY 3280 0.78 0.44 0.91 143 FROM_GOV_DKIM_AU 3210 0.77 0.46 0.89 144 T_XMDrugObfuBody_00 3140 1.14 1.82 0.87 145 XMGenDplmaNmb 3133 1.09 1.64 0.87 146 TooManyTo_005 3117 0.73 0.38 0.87 147 XM_H_Long_From02 3032 0.88 0.97 0.84 148 DKIM_ADSP_CUSTOM_MED 3009 0.91 1.11 0.84 149 TR_DCC_Bayes_99 2987 6.71 21.52 0.83 150 XM_UB50 2984 1.45 3.02 0.83 151 T_FILL_THIS_FORM_SHORT 2914 1.20 2.18 0.81 152 SpammyFromTLD_01 2874 1.11 1.89 0.80 153 XM_ShortIntro_01 2696 0.65 0.42 0.75 154 TVD_RCVD_IP 2664 0.73 0.71 0.74 155 MPART_ALT_DIFF_COUNT 2620 0.81 1.03 0.73 156 TR_MetaPhish_Combo_01 2561 0.81 1.07 0.71 157 XMBrknScrpt_02 2560 0.90 1.39 0.71 158 TR_XM_DK_SendGrid 2544 0.74 0.82 0.71 159 RCVD_IN_PBL 2539 0.82 1.11 0.70 160 XM_H_PHPMailer 2508 0.68 0.62 0.70 161 HTTPS_HTTP_MISMATCH 2334 0.78 1.12 0.65 162 XMLngstWrd_00 2327 0.60 0.48 0.65 163 XM_B_SpammyWords4 2295 1.20 2.60 0.64 164 XMGappySubj_02 2274 0.47 0.06 0.63 165 XMSlimDrugH 2129 0.75 1.15 0.59 166 XM_B_COPY_HTML 2123 0.75 1.17 0.59 167 NML_ADSP_CUSTOM_MED 2057 0.67 0.91 0.57 168 HTML_TAG_BALANCE_BODY 2049 0.74 1.16 0.57 169 T_OBFU_PDF_ATTACH 2046 0.44 0.11 0.57 170 T_Symld_Words_02 1996 0.71 1.11 0.55 171 FORGED_GMAIL_RCVD 1978 0.63 0.85 0.55 172 XMBody_95 1901 0.46 0.29 0.53 173 XMBdyGiftCard01 1886 0.56 0.65 0.52 174 RCVD_IN_BL_SPAMCOP_NET 1882 2.94 9.04 0.52 175 URI_TRY_3LD 1806 0.84 1.69 0.50 176 T_XMHurry_00 1764 1.00 2.28 0.49 177 HTML_IMAGE_ONLY_20 1755 0.76 1.46 0.49 178 XM_B_FormFill 1746 0.35 0.01 0.48 179 HTML_OBFUSCATE_05_10 1709 0.37 0.12 0.47 180 XMSubMetaI_00 1705 0.69 1.24 0.47 181 SUBJ_DOLLARS 1691 0.51 0.60 0.47 182 XM_B_DNDMA 1602 0.67 1.23 0.44 183 TR_LOTS_OF_MONEY3 1597 0.84 1.83 0.44 184 TR_XM_Base64_M1 1588 0.63 1.09 0.44 185 RELAYCOUNTRY_GB 1538 0.51 0.71 0.43 186 LongTLD 1535 0.61 1.09 0.43 187 SpammyFromTLD_02 1534 0.97 2.34 0.43 188 DIET_1 1516 0.76 1.62 0.42 189 TM2_M_OBFU_COMMENT 1515 0.57 0.94 0.42 190 XMMoneyMeta_00 1507 0.55 0.87 0.42 191 XMPhish30 1489 0.71 1.44 0.41 192 XMPhish14 1475 0.51 0.76 0.41 193 XMLngstWrd_01 1467 0.40 0.40 0.41 194 XMBSHREFv2 1428 0.38 0.34 0.40 195 MIME_CHARSET_FARAWAY 1419 0.49 0.73 0.39 196 XMDateMe_00 1365 0.37 0.34 0.38 197 FILL_THIS_FORM 1351 0.32 0.17 0.38 198 MSGID_FROM_MTA_HEADER 1351 0.29 0.09 0.38 199 RELAYCOUNTRY_AU 1350 0.98 2.49 0.37 200 HELO_MISC_IP 1330 0.28 0.07 0.37 ----------------------------------------------------------------------