Email: 476864 Autolearn: 0 AvgScore: 4.51 AvgScanTime: 1.38 sec Spam: 146020 Autolearn: 0 AvgScore: 14.79 AvgScanTime: 1.49 sec Ham: 330844 Autolearn: 0 AvgScore: -0.03 AvgScanTime: 1.34 sec Time Spent Running SA: 183.29 hours Time Spent Processing Spam: 60.43 hours Time Spent Processing Ham: 122.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 143578 99.18 98.33 99.55 2 HTML_MESSAGE 139135 88.58 95.28 85.63 3 DKIM_SIGNED 126373 79.02 86.54 75.71 4 XM_B_Unicode 121254 74.22 83.04 70.32 5 XM_DK_Pass 117773 76.33 80.66 74.43 6 RELAYCOUNTRY_US 117203 80.10 80.27 80.03 7 DKIM_VALID 116947 75.44 80.09 73.39 8 DCC_CHECK 111636 53.43 76.45 43.27 9 XM_B_SpammyWords 97565 52.34 66.82 45.96 10 XMListUnsubscribeExists 94574 54.64 64.77 50.17 11 DKIM_VALID_AU 91885 60.19 62.93 58.98 12 XM_B_Unicode3 69291 42.66 47.45 40.54 13 LOC_TINY_FONT_1 66530 33.83 45.56 28.66 14 BAYES_50 59348 54.31 40.64 60.34 15 XM_B_SpammyWords2 56362 25.30 38.60 19.42 16 XM_DK_Undo_02 55979 15.68 38.34 5.69 17 HTML_FONT_LOW_CONTRAST 53602 31.06 36.71 28.57 18 MIME_HTML_ONLY 47522 23.79 32.54 19.92 19 FVGT_m_MULTI_ODD 47215 28.11 32.33 26.25 20 BAYES_99 46362 12.42 31.75 3.88 21 T_KAM_HTML_FONT_INVALID 43536 24.58 29.82 22.27 22 DKIM_VALID_EF 42211 29.21 28.91 29.34 23 TR_XM_DKIM_Undo 39689 10.28 27.18 2.82 24 BAYES_999 36056 9.63 24.69 2.98 25 XMSubLong 35603 23.30 24.38 22.82 26 TR_DCC_Bayes_99 33309 8.04 22.81 1.53 27 T_TM2_M_HEADER_IN_MSG 32417 27.01 22.20 29.14 28 DCC_CHECK_NEGATIVE 32227 46.08 22.07 56.68 29 XM_B_Unsub 31773 13.56 21.76 9.94 30 TR_XM_BayesUnsub 30587 11.85 20.95 7.84 31 XM_Multi_Part_URI 30497 16.80 20.89 15.00 32 TR_XM_DK_Unsub 29903 15.83 20.48 13.77 33 RELAYCOUNTRY_META 27358 8.48 18.74 3.95 34 UNPARSEABLE_RELAY 26172 14.01 17.92 12.28 35 TR_MAX_INTL_RELAY 20899 8.61 14.31 6.10 36 BOTNET_IPINHOSTNAME 20755 6.58 14.21 3.22 37 FSL_BULK_SIG 20191 11.54 13.83 10.53 38 RCVD_IN_MSPIKE_H2 20025 14.37 13.71 14.66 39 XM_B_SpammyWords3 19474 7.20 13.34 4.49 40 TR_XM_SpammyRelay 17716 5.23 12.13 2.18 41 BOTNET 17027 4.59 11.66 1.46 42 LOTS_OF_MONEY 16636 7.36 11.39 5.58 43 TR_XM_SpammyWords2 15494 3.65 10.61 0.58 44 TR_XM_SpammyWords4 14736 5.73 10.09 3.80 45 XM_B_Phish_Phrases 14590 6.82 9.99 5.41 46 TR_XM_UnparsRelay 14122 4.24 9.67 1.84 47 XM_Evil_Numbers_Gen 13747 8.66 9.41 8.33 48 RCVD_IN_BL_SPAMCOP_NET 13175 3.36 9.02 0.86 49 BAYES_80 12923 5.29 8.85 3.72 50 RCVD_IN_MSPIKE_WL 11473 12.21 7.86 14.13 51 BAYES_60 11401 7.05 7.81 6.72 52 UNTRUSTED_Relay 11326 3.34 7.76 1.39 53 XM_Body_Dirty_Words 10710 4.15 7.33 2.74 54 HTML_IMAGE_RATIO_02 10348 5.30 7.09 4.51 55 XMSubMetaSx_00 9961 4.68 6.82 3.73 56 LotsOfNums_01 9724 7.72 6.66 8.19 57 XM_B_PhoneNumber 9623 8.75 6.59 9.70 58 DKIM_INVALID 9426 3.58 6.46 2.31 59 MPART_ALT_DIFF 8633 5.09 5.91 4.73 60 XM_UncommonTLD01 8526 4.59 5.84 4.04 61 RCVD_IN_MSPIKE_BL 8349 2.15 5.72 0.58 62 TR_XM_MSPIKECOMBO 8330 2.15 5.70 0.58 63 RELAYCOUNTRY_CA 8273 2.40 5.67 0.96 64 XMStrtUSub 8155 4.72 5.58 4.33 65 XM_H_Long_From01 7829 5.62 5.36 5.74 66 TooManyTo_001 7482 7.25 5.12 8.19 67 BAYES_95 7456 3.21 5.11 2.37 68 HTML_IMAGE_RATIO_04 7004 4.08 4.80 3.77 69 TR_XM_PhishingBody 6692 2.57 4.58 1.68 70 RCVD_IN_MSPIKE_H3 6669 5.84 4.57 6.40 71 TR_XM_NoHeaderRelay 6574 1.56 4.50 0.26 72 XM_UB50 6441 1.96 4.41 0.87 73 XM_H_GMP 6400 5.17 4.38 5.52 74 XMNumbers 6244 3.49 4.28 3.15 75 XM_B_SpammyTLD 6213 3.15 4.25 2.66 76 RCVD_IN_VALIDITY_RPBL 5920 1.31 4.05 0.10 77 XM_B_Investor 5904 2.35 4.04 1.61 78 XMSexyCombo_05 5892 2.12 4.04 1.27 79 MIME_QP_LONG_LINE 5793 4.96 3.97 5.40 80 XM_CamelCaseFrm001 5651 2.62 3.87 2.06 81 HTML_IMAGE_RATIO_06 5540 3.39 3.79 3.21 82 T_XMDrugObfuBody_14 5355 2.44 3.67 1.90 83 MIME_HTML_MOSTLY 5251 2.72 3.60 2.33 84 TM2_M_VERY_LONG_WORD 5194 2.02 3.56 1.34 85 TR_XM_SpammyWords5 5179 1.97 3.55 1.28 86 TR_XM_SpammyWords3 5152 1.28 3.53 0.29 87 ALL_TRUSTED 4679 12.73 3.20 16.93 88 XM_OfRef6 4591 1.72 3.14 1.09 89 DKIM_ADSP_NXDOMAIN 4573 1.16 3.13 0.29 90 T_XMDrugObfuBody_08 4569 2.08 3.13 1.62 91 XM_SPF_SoftFail 4554 1.86 3.12 1.30 92 MIME_HTML_ONLY_MULTI 4492 2.93 3.08 2.87 93 XM_B_Unsub2 4419 1.85 3.03 1.33 94 T_TooManySym_01 4340 4.66 2.97 5.40 95 XM_URI_RBL 4286 1.13 2.94 0.33 96 TM2_M_URI_OPT_OUT 4247 2.14 2.91 1.79 97 XM_B_URI_Unicode 4200 2.33 2.88 2.09 98 RCVD_IN_MSPIKE_L5 4130 0.93 2.83 0.10 99 RCVD_IN_MSPIKE_L3 3717 1.11 2.55 0.48 100 RELAYCOUNTRY_AU 3708 1.42 2.54 0.92 101 ANY_BOUNCE_MESSAGE 3695 4.77 2.53 5.76 102 BOUNCE_MESSAGE 3695 4.77 2.53 5.76 103 TR_XM_SPAMCOP 3673 0.90 2.52 0.19 104 TR_XM_INV_DKIM 3518 0.85 2.41 0.16 105 HTML_IMAGE_RATIO_08 3493 2.32 2.39 2.29 106 RCVD_IN_MSPIKE_H5 3367 4.86 2.31 5.98 107 T_FILL_THIS_FORM_SHORT 3350 1.37 2.29 0.97 108 HTML_MIME_NO_HTML_TAG 3345 2.54 2.29 2.66 109 USER_IN_DEF_DKIM_WL 3334 9.88 2.28 13.23 110 XMDiploma_00 3322 1.90 2.28 1.73 111 XM_B_SpammyWords4 3304 0.98 2.26 0.41 112 SpammyFromTLD_02 3236 0.99 2.22 0.45 113 RCVD_IN_VALIDITY_SAFE 3172 3.31 2.17 3.81 114 KHOP_HELO_FCRDNS 3170 1.51 2.17 1.21 115 RELAYCOUNTRY_FR 3166 0.86 2.17 0.28 116 XM_H_Long_From02 3163 1.26 2.17 0.86 117 XM_DK_Undo_01 3066 1.85 2.10 1.74 118 MAILING_LIST_MULTI 2981 2.64 2.04 2.90 119 SpammyFromTLD_01 2935 1.22 2.01 0.87 120 XMBounce_01 2899 0.62 1.99 0.02 121 RELAYCOUNTRY_TH 2889 0.61 1.98 0.01 122 FROM_EXCESS_BASE64 2875 1.76 1.97 1.66 123 BAYES_40 2769 4.01 1.90 4.94 124 SCC_BODY_URI_ONLY 2759 3.91 1.89 4.81 125 XMBody_17 2731 0.91 1.87 0.48 126 TR_XM_PHPDW 2651 0.87 1.82 0.45 127 TR_XM_PHPForged 2648 0.86 1.81 0.44 128 XMStockSpam_06 2621 1.10 1.79 0.79 129 TR_XM_FormFill2 2613 0.86 1.79 0.44 130 T_XMHurry_00 2579 0.91 1.77 0.53 131 XM_H_PHPOS 2576 0.84 1.76 0.44 132 URI_TRY_3LD 2479 0.95 1.70 0.63 133 T_XMDrugObfuBody_00 2425 1.14 1.66 0.92 134 SUBJ_ALL_CAPS 2378 1.52 1.63 1.48 135 RCVD_IN_VALIDITY_CERTIFIED 2317 2.64 1.59 3.11 136 XMBrknScrpt_02 2287 1.14 1.57 0.95 137 MultiRelay_CC 2225 0.58 1.52 0.16 138 URI_HEX 2223 1.33 1.52 1.25 139 T_REMOTE_IMAGE 2187 2.86 1.50 3.46 140 XM_H_PHPMailer 2158 0.96 1.48 0.73 141 XMPhish30 2118 0.79 1.45 0.51 142 SHORTCIRCUIT 2111 0.44 1.45 0.00 143 RCVD_IN_ZEN_LASTEXTERNAL 2111 0.44 1.45 0.00 144 RCVD_IN_PSBL 2025 0.61 1.39 0.26 145 XM_SendGrid 2023 1.43 1.39 1.45 146 XM_HighProb1 2015 0.43 1.38 0.02 147 HTML_FONT_TINY_NORDNS 2000 0.48 1.37 0.09 148 XM_B_COPY_HTML 1980 0.86 1.36 0.65 149 HTTPS_HTTP_MISMATCH 1911 0.90 1.31 0.71 150 TR_MetaPhish_Combo_01 1885 1.59 1.29 1.73 151 XMGenDplmaNmb 1853 1.00 1.27 0.88 152 TR_LOTS_OF_MONEY3 1850 0.55 1.27 0.23 153 URI_NOVOWEL 1840 1.54 1.26 1.67 154 XM_B_SEO 1834 0.57 1.26 0.27 155 BAYES_20 1767 4.60 1.21 6.10 156 XM_H_DKIM_GOOG 1743 0.38 1.19 0.02 157 BOTNET_NORDNS 1740 0.37 1.19 0.01 158 XMBody_78 1729 0.59 1.18 0.33 159 XM_B_Phish66 1716 0.64 1.18 0.41 160 RCVD_IN_XBL 1704 0.37 1.17 0.03 161 XM_ProductURIs 1701 0.82 1.16 0.66 162 SH_BODYURI_REVERSE_CSS 1697 0.40 1.16 0.06 163 XMBdyGiftCard01 1696 0.79 1.16 0.62 164 URIBL_CSS 1696 0.41 1.16 0.08 165 SHOPIFY_IMG_NOT_RCVD_SFY 1696 0.55 1.16 0.28 166 URIBL_CSS_A 1696 0.41 1.16 0.08 167 TR_XM_RelayPhish 1669 0.42 1.14 0.09 168 RDNS_DYNAMIC 1643 0.48 1.13 0.19 169 RCVD_IN_PBL 1628 0.84 1.11 0.71 170 TR_Symld_Words 1626 1.42 1.11 1.55 171 TR_XM_SEO4 1621 0.43 1.11 0.13 172 PDS_RDNS_DYNAMIC_FP 1606 0.39 1.10 0.08 173 SH_BODYURI_REVERSE_XBL 1594 0.35 1.09 0.02 174 T_TooManySym_02 1593 2.26 1.09 2.77 175 HTML_IMAGE_ONLY_20 1584 0.58 1.08 0.35 176 TR_XM_InvalidRelay 1561 0.33 1.07 0.01 177 RCVD_IN_SBL_CSS 1553 0.35 1.06 0.03 178 XM_H_PHPOS_M 1538 0.35 1.05 0.04 179 TR_Mismatch_TLD_02 1521 0.37 1.04 0.07 180 XM_S_SpammyWords 1503 0.46 1.03 0.21 181 XM_B_COVIDMETA 1502 0.44 1.03 0.19 182 TR_XM_Spammywords 1502 0.46 1.03 0.21 183 MPART_ALT_DIFF_COUNT 1483 0.81 1.02 0.71 184 XM_B_DNDMA 1471 0.78 1.01 0.68 185 TR_XM_MSPIKECOMBO2 1455 0.32 1.00 0.02 186 RCVD_IN_MSPIKE_H4 1437 1.52 0.98 1.75 187 DIET_1 1424 0.49 0.98 0.28 188 RCVD_IN_IADB_LISTED 1419 2.94 0.97 3.81 189 T_MONEY_PERCENT 1415 0.42 0.97 0.17 190 TR_LOTS_OF_MONEY2 1415 0.42 0.97 0.17 191 TVD_RCVD_IP 1400 0.77 0.96 0.68 192 XM_DIRTYINTL 1400 0.39 0.96 0.13 193 HTML_TAG_BALANCE_BODY 1388 0.77 0.95 0.69 194 XMHTML_After_End 1373 0.59 0.94 0.44 195 DKIM_ADSP_CUSTOM_MED 1367 0.84 0.94 0.80 196 XM_UB99 1358 0.29 0.93 0.01 197 RELAYCOUNTRY_GB 1355 0.65 0.93 0.53 198 XM_UB60 1354 0.33 0.93 0.07 199 HTML_FONT_SIZE_LARGE 1335 0.33 0.91 0.08 200 XMSexyCombo_01 1324 0.41 0.91 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 329371 99.18 98.33 99.55 2 HTML_MESSAGE 283292 88.58 95.28 85.63 3 RELAYCOUNTRY_US 264776 80.10 80.27 80.03 4 DKIM_SIGNED 250467 79.02 86.54 75.71 5 XM_DK_Pass 246236 76.33 80.66 74.43 6 DKIM_VALID 242820 75.44 80.09 73.39 7 XM_B_Unicode 232664 74.22 83.04 70.32 8 BAYES_50 199631 54.31 40.64 60.34 9 DKIM_VALID_AU 195145 60.19 62.93 58.98 10 DCC_CHECK_NEGATIVE 187526 46.08 22.07 56.68 11 XMListUnsubscribeExists 165993 54.64 64.77 50.17 12 XM_B_SpammyWords 152045 52.34 66.82 45.96 13 DCC_CHECK 143156 53.43 76.45 43.27 14 XM_B_Unicode3 134139 42.66 47.45 40.54 15 DKIM_VALID_EF 97061 29.21 28.91 29.34 16 T_TM2_M_HEADER_IN_MSG 96403 27.01 22.20 29.14 17 LOC_TINY_FONT_1 94808 33.83 45.56 28.66 18 HTML_FONT_LOW_CONTRAST 94531 31.06 36.71 28.57 19 FVGT_m_MULTI_ODD 86841 28.11 32.33 26.25 20 XMSubLong 75504 23.30 24.38 22.82 21 T_KAM_HTML_FONT_INVALID 73694 24.58 29.82 22.27 22 MIME_HTML_ONLY 65910 23.79 32.54 19.92 23 XM_B_SpammyWords2 64261 25.30 38.60 19.42 24 ALL_TRUSTED 56009 12.73 3.20 16.93 25 XM_Multi_Part_URI 49630 16.80 20.89 15.00 26 RCVD_IN_MSPIKE_H2 48516 14.37 13.71 14.66 27 RCVD_IN_MSPIKE_WL 46758 12.21 7.86 14.13 28 TR_XM_DK_Unsub 45563 15.83 20.48 13.77 29 USER_IN_DEF_DKIM_WL 43786 9.88 2.28 13.23 30 UNPARSEABLE_RELAY 40643 14.01 17.92 12.28 31 FSL_BULK_SIG 34828 11.54 13.83 10.53 32 XM_B_Unsub 32888 13.56 21.76 9.94 33 BAYES_00 32640 7.05 0.66 9.87 34 XM_B_PhoneNumber 32079 8.75 6.59 9.70 35 XM_Evil_Numbers_Gen 27561 8.66 9.41 8.33 36 TooManyTo_001 27094 7.25 5.12 8.19 37 LotsOfNums_01 27086 7.72 6.66 8.19 38 IN_ZIMBRA_NJ_WHITELIST 26363 5.56 0.11 7.97 39 TR_XM_BayesUnsub 25938 11.85 20.95 7.84 40 XM_DKIMWhitelistDomains 23032 4.83 0.01 6.96 41 BAYES_60 22220 7.05 7.81 6.72 42 TR_XM_DK_Bayes 21862 4.76 0.56 6.61 43 TR_XM_DK_Bayes1 21446 4.67 0.55 6.48 44 RCVD_IN_MSPIKE_H3 21182 5.84 4.57 6.40 45 BAYES_20 20186 4.60 1.21 6.10 46 TR_MAX_INTL_RELAY 20165 8.61 14.31 6.10 47 RCVD_IN_MSPIKE_H5 19787 4.86 2.31 5.98 48 ANY_BOUNCE_MESSAGE 19051 4.77 2.53 5.76 49 BOUNCE_MESSAGE 19045 4.77 2.53 5.76 50 XM_H_Long_From01 18983 5.62 5.36 5.74 51 XM_DK_Undo_02 18809 15.68 38.34 5.69 52 LOTS_OF_MONEY 18459 7.36 11.39 5.58 53 TR_XM_DK_Bayes2 18370 3.97 0.40 5.55 54 XM_H_GMP 18275 5.17 4.38 5.52 55 XM_B_Phish_Phrases 17909 6.82 9.99 5.41 56 MIME_QP_LONG_LINE 17877 4.96 3.97 5.40 57 T_TooManySym_01 17866 4.66 2.97 5.40 58 BAYES_40 16342 4.01 1.90 4.94 59 SCC_BODY_URI_ONLY 15899 3.91 1.89 4.81 60 MPART_ALT_DIFF 15645 5.09 5.91 4.73 61 HTML_IMAGE_RATIO_02 14932 5.30 7.09 4.51 62 XM_B_SpammyWords3 14852 7.20 13.34 4.49 63 XMStrtUSub 14340 4.72 5.58 4.33 64 XM_PDF 14081 3.15 0.63 4.26 65 XM_UncommonTLD01 13363 4.59 5.84 4.04 66 RELAYCOUNTRY_META 13080 8.48 18.74 3.95 67 BAYES_99 12842 12.42 31.75 3.88 68 RCVD_IN_VALIDITY_SAFE 12614 3.31 2.17 3.81 69 RCVD_IN_IADB_LISTED 12606 2.94 0.97 3.81 70 TR_XM_SpammyWords4 12584 5.73 10.09 3.80 71 HTML_IMAGE_RATIO_04 12464 4.08 4.80 3.77 72 XMSubMetaSx_00 12354 4.68 6.82 3.73 73 BAYES_80 12314 5.29 8.85 3.72 74 T_REMOTE_IMAGE 11460 2.86 1.50 3.46 75 RCVD_IN_IADB_SPF 11078 2.59 0.86 3.35 76 BOTNET_IPINHOSTNAME 10643 6.58 14.21 3.22 77 HTML_IMAGE_RATIO_06 10630 3.39 3.79 3.21 78 XMNumbers 10422 3.49 4.28 3.15 79 RCVD_IN_VALIDITY_CERTIFIED 10288 2.64 1.59 3.11 80 BAYES_999 9862 9.63 24.69 2.98 81 RCVD_IN_IADB_SENDERID 9844 2.31 0.81 2.98 82 MAILING_LIST_MULTI 9599 2.64 2.04 2.90 83 RCVD_IN_IADB_DK 9566 2.26 0.82 2.89 84 MIME_HTML_ONLY_MULTI 9499 2.93 3.08 2.87 85 TooManyTo_002 9373 2.11 0.48 2.83 86 TR_XM_DKIM_Undo 9324 10.28 27.18 2.82 87 T_TooManySym_02 9171 2.26 1.09 2.77 88 XM_Body_Dirty_Words 9077 4.15 7.33 2.74 89 XM_B_SpammyTLD 8796 3.15 4.25 2.66 90 HTML_MIME_NO_HTML_TAG 8786 2.54 2.29 2.66 91 RCVD_IN_IADB_VOUCHED 8474 1.93 0.50 2.56 92 BAYES_95 7839 3.21 5.11 2.37 93 MIME_HTML_MOSTLY 7702 2.72 3.60 2.33 94 DKIM_INVALID 7647 3.58 6.46 2.31 95 HTML_IMAGE_RATIO_08 7585 2.32 2.39 2.29 96 INVALID_MSGID 7348 1.60 0.18 2.22 97 TR_XM_SpammyRelay 7207 5.23 12.13 2.18 98 XM_B_URI_Unicode 6923 2.33 2.88 2.09 99 XM_CamelCaseFrm001 6828 2.62 3.87 2.06 100 BAYES_05 6821 1.62 0.63 2.06 101 T_XMDrugObfuBody_14 6301 2.44 3.67 1.90 102 TO_MALFORMED 6277 1.32 0.02 1.90 103 TR_XM_UnparsRelay 6091 4.24 9.67 1.84 104 TM2_M_URI_OPT_OUT 5936 2.14 2.91 1.79 105 RCVD_IN_IADB_OPTIN 5796 1.31 0.32 1.75 106 RCVD_IN_MSPIKE_H4 5789 1.52 0.98 1.75 107 XM_DK_Undo_01 5759 1.85 2.10 1.74 108 XMDiploma_00 5727 1.90 2.28 1.73 109 TR_MetaPhish_Combo_01 5709 1.59 1.29 1.73 110 TR_XM_PhishingBody 5558 2.57 4.58 1.68 111 URI_NOVOWEL 5523 1.54 1.26 1.67 112 FROM_EXCESS_BASE64 5508 1.76 1.97 1.66 113 T_XMDrugObfuBody_08 5368 2.08 3.13 1.62 114 XM_B_Investor 5324 2.35 4.04 1.61 115 TR_Symld_Words 5137 1.42 1.11 1.55 116 TooManyTo_003 5066 1.18 0.38 1.53 117 TR_DCC_Bayes_99 5047 8.04 22.81 1.53 118 SUBJ_ALL_CAPS 4882 1.52 1.63 1.48 119 BOTNET 4843 4.59 11.66 1.46 120 XM_SendGrid 4808 1.43 1.39 1.45 121 UNTRUSTED_Relay 4594 3.34 7.76 1.39 122 TM2_M_VERY_LONG_WORD 4428 2.02 3.56 1.34 123 XM_B_Unsub2 4386 1.85 3.03 1.33 124 XM_SPF_SoftFail 4306 1.86 3.12 1.30 125 IN_HORDE_ADDRESS_BOOK 4235 0.93 0.13 1.28 126 HELO_NODOT 4234 0.99 0.35 1.28 127 HELO_NO_DOMAIN 4227 0.99 0.34 1.28 128 TR_XM_SpammyWords5 4223 1.97 3.55 1.28 129 XMSexyCombo_05 4199 2.12 4.04 1.27 130 XM_GoogleGroups 4158 1.11 0.76 1.26 131 URI_HEX 4125 1.33 1.52 1.25 132 XMGappySubj_01 4049 0.93 0.25 1.22 133 KHOP_HELO_FCRDNS 4017 1.51 2.17 1.21 134 XMCapTrack 3978 0.97 0.46 1.20 135 TooManyTo_004 3786 0.90 0.34 1.14 136 T_TooManySym_03 3641 0.93 0.54 1.10 137 XM_OfRef6 3617 1.72 3.14 1.09 138 TR_XM_DK_SendGrid 3217 0.91 0.76 0.97 139 T_FILL_THIS_FORM_SHORT 3206 1.37 2.29 0.97 140 RELAYCOUNTRY_CA 3167 2.40 5.67 0.96 141 XMBrknScrpt_02 3148 1.14 1.57 0.95 142 TVD_SPACE_RATIO 3083 0.71 0.22 0.93 143 RELAYCOUNTRY_AU 3055 1.42 2.54 0.92 144 XM_ShortIntro_01 3032 0.79 0.50 0.92 145 T_XMDrugObfuBody_00 3029 1.14 1.66 0.92 146 TooManyTo_005 2991 0.72 0.32 0.90 147 XMGenDplmaNmb 2910 1.00 1.27 0.88 148 XM_UB50 2888 1.96 4.41 0.87 149 SpammyFromTLD_01 2878 1.22 2.01 0.87 150 RCVD_IN_BL_SPAMCOP_NET 2858 3.36 9.02 0.86 151 XM_H_Long_From02 2843 1.26 2.17 0.86 152 DKIM_ADSP_CUSTOM_MED 2657 0.84 0.94 0.80 153 URI_OPTOUT_3LD 2646 0.70 0.48 0.80 154 XMStockSpam_06 2622 1.10 1.79 0.79 155 FROM_GOV_DKIM_AU 2601 0.65 0.34 0.79 156 XM_H_PHPMailer 2400 0.96 1.48 0.73 157 HTTPS_HTTP_MISMATCH 2363 0.90 1.31 0.71 158 RCVD_IN_PBL 2359 0.84 1.11 0.71 159 MPART_ALT_DIFF_COUNT 2358 0.81 1.02 0.71 160 TR_XM_Base64_M1 2340 0.70 0.69 0.71 161 HTML_TAG_BALANCE_BODY 2298 0.77 0.95 0.69 162 XM_B_DNDMA 2261 0.78 1.01 0.68 163 TVD_RCVD_IP 2261 0.77 0.96 0.68 164 XMGappySubj_02 2247 0.48 0.04 0.68 165 XM_ProductURIs 2198 0.82 1.16 0.66 166 XM_B_FormFill 2195 0.47 0.04 0.66 167 XM_B_COPY_HTML 2137 0.86 1.36 0.65 168 TM2_M_OBFU_COMMENT 2114 0.67 0.73 0.64 169 URI_TRY_3LD 2074 0.95 1.70 0.63 170 XMBdyGiftCard01 2066 0.79 1.16 0.62 171 XMSlimDrugH 2008 0.59 0.54 0.61 172 XMNoVowels 2001 0.57 0.48 0.60 173 TR_XM_SpammyWords2 1927 3.65 10.61 0.58 174 RCVD_IN_MSPIKE_BL 1917 2.15 5.72 0.58 175 TR_XM_MSPIKECOMBO 1917 2.15 5.70 0.58 176 MSGID_FROM_MTA_HEADER 1824 0.42 0.12 0.55 177 XMLngstWrd_00 1824 0.49 0.36 0.55 178 T_OBFU_PDF_ATTACH 1816 0.43 0.16 0.55 179 T_Symld_Words_02 1774 0.64 0.88 0.54 180 RELAYCOUNTRY_GB 1755 0.65 0.93 0.53 181 T_XMHurry_00 1747 0.91 1.77 0.53 182 FORGED_GMAIL_RCVD 1685 0.57 0.72 0.51 183 XMLngstWrd_01 1680 0.45 0.33 0.51 184 XMPhish30 1673 0.79 1.45 0.51 185 XMBody_95 1673 0.40 0.17 0.51 186 XMMoneyMeta_00 1669 0.58 0.75 0.50 187 NML_ADSP_CUSTOM_MED 1611 0.56 0.72 0.49 188 XMBody_17 1594 0.91 1.87 0.48 189 XMBSHREFv2 1584 0.47 0.46 0.48 190 RCVD_IN_MSPIKE_L3 1583 1.11 2.55 0.48 191 SpammyFromTLD_02 1502 0.99 2.22 0.45 192 XMDateMe_00 1490 0.48 0.54 0.45 193 TO_NO_BRKTS_HTML_ONLY 1484 0.52 0.67 0.45 194 HTML_FONT_FACE_BAD 1482 0.51 0.64 0.45 195 TR_XM_PHPDW 1474 0.87 1.82 0.45 196 TR_XM_PHPForged 1471 0.86 1.81 0.44 197 TR_XM_FormFill2 1470 0.86 1.79 0.44 198 XMHTML_After_End 1446 0.59 0.94 0.44 199 XM_H_PHPOS 1444 0.84 1.76 0.44 200 LongTLD 1427 0.54 0.79 0.43 ----------------------------------------------------------------------