Email: 279619 Autolearn: 0 AvgScore: 2.51 AvgScanTime: 1.34 sec Spam: 72749 Autolearn: 0 AvgScore: 13.68 AvgScanTime: 1.57 sec Ham: 206870 Autolearn: 0 AvgScore: -1.43 AvgScanTime: 1.26 sec Time Spent Running SA: 104.08 hours Time Spent Processing Spam: 31.64 hours Time Spent Processing Ham: 72.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 68647 77.84 94.36 72.03 2 DKIM_SIGNED 63929 70.57 87.88 64.48 3 XM_DK_Pass 61494 68.73 84.53 63.17 4 DKIM_VALID 60082 67.17 82.59 61.75 5 XM_B_Unicode 58653 70.23 80.62 66.58 6 RELAYCOUNTRY_US 58245 71.24 80.06 68.14 7 DCC_CHECK 52970 44.12 72.81 34.03 8 XMListUnsubscribeExists 52114 50.63 71.64 43.24 9 XM_B_SpammyWords 50955 49.23 70.04 41.92 10 DKIM_VALID_AU 45918 54.09 63.12 50.92 11 XM_DK_Undo_02 37682 19.24 51.80 7.79 12 XM_B_Unicode3 32594 39.73 44.80 37.94 13 BAYES_99 31250 16.02 42.96 6.54 14 TR_XM_DKIM_Undo 30250 15.40 41.58 6.19 15 LOC_TINY_FONT_1 27880 28.44 38.32 24.96 16 HTML_FONT_LOW_CONTRAST 26733 29.10 36.75 26.42 17 XM_B_SpammyWords2 26525 22.28 36.46 17.29 18 BAYES_999 25608 13.14 35.20 5.38 19 BAYES_50 24077 46.01 33.10 50.55 20 DKIM_VALID_EF 23045 26.41 31.68 24.56 21 TR_DCC_Bayes_99 22459 10.00 30.87 2.66 22 MIME_HTML_ONLY 21155 22.46 29.08 20.13 23 FVGT_m_MULTI_ODD 20115 22.39 27.65 20.55 24 DCC_CHECK_NEGATIVE 19752 55.85 27.15 65.94 25 XM_Body_Dirty_Words 19474 21.36 26.77 19.45 26 T_KAM_HTML_FONT_INVALID 19267 17.15 26.48 13.86 27 RCVD_IN_MSPIKE_WL 17684 26.99 24.31 27.94 28 XMSubLong 15759 21.24 21.66 21.10 29 T_TM2_M_HEADER_IN_MSG 15616 20.31 21.47 19.91 30 RCVD_IN_MSPIKE_H2 15167 17.22 20.85 15.94 31 RELAYCOUNTRY_META 13562 6.95 18.64 2.84 32 XM_Multi_Part_URI 13406 13.81 18.43 12.18 33 TR_XM_SpammyWords2 11449 5.52 15.74 1.93 34 UNPARSEABLE_RELAY 10717 9.68 14.73 7.91 35 XM_B_Unsub 10702 12.42 14.71 11.62 36 TR_XM_UnparsRelay 10525 8.56 14.47 6.49 37 BOTNET_IPINHOSTNAME 9322 7.22 12.81 5.25 38 RCVD_IN_MSPIKE_H4 9320 11.96 12.81 11.66 39 TR_XM_SpammyRelay 9274 4.24 12.75 1.24 40 XM_B_SpammyWords3 8800 6.66 12.10 4.75 41 LOTS_OF_MONEY 8751 8.32 12.03 7.02 42 BOTNET 8502 4.23 11.69 1.60 43 RCVD_IN_MSPIKE_H3 7949 13.28 10.93 14.11 44 XM_UncommonTLD01 7939 5.85 10.91 4.08 45 UNTRUSTED_Relay 7870 3.69 10.82 1.18 46 HTML_IMAGE_RATIO_02 7710 7.85 10.60 6.89 47 TR_XM_SpammyWords4 7340 6.13 10.09 4.73 48 XM_SendGrid 7335 7.22 10.08 6.22 49 XMSexyCombo_05 7206 5.96 9.91 4.57 50 FSL_BULK_SIG 7114 6.11 9.78 4.82 51 MPART_ALT_DIFF 6800 5.80 9.35 4.55 52 RCVD_IN_BL_SPAMCOP_NET 6491 3.01 8.92 0.92 53 TR_XM_MaxUnsub 6131 2.80 8.43 0.83 54 XM_Evil_Numbers_Gen 6026 8.15 8.28 8.11 55 MIME_HTML_MOSTLY 5903 3.44 8.11 1.80 56 BAYES_80 5653 7.08 7.77 6.83 57 TooManyTo_001 5332 7.67 7.33 7.79 58 XMSubMetaSx_00 5300 5.06 7.29 4.28 59 BAYES_60 4977 13.12 6.84 15.32 60 RCVD_IN_VALIDITY_SAFE 4805 6.18 6.60 6.03 61 RCVD_IN_MSPIKE_BL 4705 2.23 6.47 0.74 62 TR_XM_MSPIKECOMBO 4704 2.23 6.47 0.74 63 XMStrtUSub 4402 5.09 6.05 4.75 64 TR_XM_DK_SendGrid 4261 4.46 5.86 3.97 65 TR_XM_PhishingBody 4180 3.29 5.75 2.43 66 LotsOfNums_01 4103 6.81 5.64 7.22 67 URI_NOVOWEL 4083 2.76 5.61 1.75 68 HTML_IMAGE_RATIO_04 4078 5.76 5.61 5.81 69 RELAYCOUNTRY_CA 4012 2.03 5.51 0.81 70 SpammyFromTLD_01 3978 1.68 5.47 0.35 71 DKIM_INVALID 3847 3.40 5.29 2.73 72 RCVD_IN_VALIDITY_CERTIFIED 3825 5.41 5.26 5.46 73 XM_B_Phish_Phrases 3750 3.82 5.15 3.35 74 TR_XM_SpammyWords5 3681 2.17 5.06 1.16 75 TR_XM_SPAMCOP 3633 1.43 4.99 0.18 76 XM_UB50 3396 1.67 4.67 0.62 77 TM2_M_URI_OPT_OUT 3358 5.04 4.62 5.19 78 XM_H_Long_From01 3250 4.61 4.47 4.66 79 BAYES_95 2970 3.56 4.08 3.37 80 TR_XM_SpammyWords3 2965 1.35 4.08 0.39 81 T_FILL_THIS_FORM_SHORT 2899 1.40 3.98 0.48 82 XMBody_17 2736 1.35 3.76 0.50 83 T_XMDrugObfuBody_14 2726 2.57 3.75 2.15 84 MIME_QP_LONG_LINE 2722 4.29 3.74 4.49 85 SUBJ_ALL_CAPS 2673 1.69 3.67 1.00 86 XM_SPF_SoftFail 2614 1.78 3.59 1.14 87 XMNumbers 2596 4.23 3.57 4.46 88 RELAYCOUNTRY_FR 2565 1.02 3.53 0.14 89 JH_SPAMMY_HEADERS 2500 0.89 3.44 0.00 90 RCVD_IN_MSPIKE_L3 2456 1.19 3.38 0.43 91 USER_IN_DEF_DKIM_WL 2451 12.30 3.37 15.44 92 HTML_IMAGE_RATIO_06 2445 4.27 3.36 4.59 93 XMSexyCombo_01 2423 1.94 3.33 1.45 94 XM_B_SpammyTLD 2395 2.28 3.29 1.93 95 TR_XM_FormFill 2358 0.88 3.24 0.06 96 ALL_TRUSTED 2353 22.78 3.23 29.65 97 SpammyFromTLD_02 2333 0.95 3.21 0.16 98 XM_B_Investor 2298 1.77 3.16 1.28 99 XM_DIRTYINTL 2255 0.99 3.10 0.25 100 XM_OfRef6 2177 1.32 2.99 0.73 101 T_REMOTE_IMAGE 2144 2.76 2.95 2.70 102 KHOP_HELO_FCRDNS 2140 1.43 2.94 0.90 103 TR_XM_PHPDW 2106 1.38 2.89 0.84 104 TR_XM_PHPForged 2032 1.29 2.79 0.76 105 T_XMDrugObfuBody_08 2024 1.92 2.78 1.62 106 TR_XM_FormFill2 2009 1.27 2.76 0.75 107 XM_H_PHPOS 1994 1.26 2.74 0.73 108 MIME_HTML_ONLY_MULTI 1929 2.97 2.65 3.09 109 XM_CamelCaseFrm001 1929 1.77 2.65 1.46 110 XMBdyGiftCard01 1775 1.34 2.44 0.95 111 FROM_EXCESS_BASE64 1761 2.82 2.42 2.96 112 TR_Caps_n_Bayes_99 1733 0.72 2.38 0.14 113 URIBL_DBL_SPAM 1697 0.62 2.33 0.01 114 HTML_IMAGE_RATIO_08 1670 2.04 2.30 1.95 115 TM2_M_VERY_LONG_WORD 1647 1.47 2.26 1.20 116 RCVD_IN_MSPIKE_L5 1621 0.64 2.23 0.08 117 T_XMHurry_00 1610 1.89 2.21 1.78 118 RCVD_IN_VALIDITY_RPBL 1594 0.60 2.19 0.05 119 XM_B_Phish66 1582 1.45 2.17 1.19 120 XM_DK_Undo_01 1573 1.53 2.16 1.31 121 T_TooManySym_01 1555 6.62 2.14 8.20 122 HTML_MIME_NO_HTML_TAG 1513 1.47 2.08 1.26 123 TR_XM_SB_Phish 1476 2.33 2.03 2.43 124 XMSubPhish11 1415 2.29 1.95 2.42 125 BAYES_20 1411 2.60 1.94 2.83 126 TR_XM_BayesRelay 1411 0.51 1.94 0.00 127 TM2_M_A_HREF_HREF 1400 0.92 1.92 0.57 128 URI_HEX 1390 1.37 1.91 1.18 129 TR_XM_INV_DKIM 1376 0.80 1.89 0.42 130 TR_Symld_Words 1370 1.50 1.88 1.37 131 XM_UB99 1355 0.49 1.86 0.00 132 BOTNET_NORDNS 1318 0.49 1.81 0.02 133 XM_Body_Dirty_Words_01 1291 0.93 1.77 0.63 134 XMBrknScrpt_02 1280 1.14 1.76 0.92 135 XM_UB60 1274 0.51 1.75 0.07 136 FROM_SUSPICIOUS_NTLD 1257 0.50 1.73 0.07 137 XMDiploma_00 1253 1.07 1.72 0.84 138 FROM_SUSPICIOUS_NTLD_FP 1178 0.47 1.62 0.06 139 T_XMDrugObfuBody_00 1172 0.83 1.61 0.55 140 XMStockSpam_06 1166 2.24 1.60 2.47 141 BAYES_40 1159 2.97 1.59 3.45 142 HTML_TAG_BALANCE_BODY 1146 0.78 1.58 0.50 143 RCVD_IN_IADB_LISTED 1135 2.51 1.56 2.85 144 XMPhish30 1100 0.81 1.51 0.57 145 PLING_QUERY 1090 0.62 1.50 0.30 146 XM_H_PHPMailer 1082 0.80 1.49 0.56 147 PDS_OTHER_BAD_TLD 1078 0.74 1.48 0.48 148 XM_B_COPY_HTML 1076 0.97 1.48 0.79 149 XMPhish08 1076 0.52 1.48 0.19 150 RCVD_IN_RP_SAFE 1075 1.23 1.48 1.14 151 XM_URI_RBL 1073 0.46 1.47 0.11 152 TR_XM_NoHeaderRelay 1052 0.49 1.45 0.15 153 XM_B_Unsub2 1046 0.98 1.44 0.82 154 HTML_TAG_BALANCE_CENTER 1046 0.48 1.44 0.14 155 XM_UB999 1043 0.37 1.43 0.00 156 TR_Mismatch_TLD_02 1027 0.41 1.41 0.06 157 XM_B_COVIDMETA 1011 0.59 1.39 0.31 158 XM_B_REG_HTML 965 0.73 1.33 0.52 159 XMSubNoVowel 959 1.19 1.32 1.15 160 XMSubMetaI_00 956 0.85 1.31 0.69 161 MAILING_LIST_MULTI 953 1.69 1.31 1.83 162 NUMERIC_HTTP_ADDR 941 0.58 1.29 0.33 163 RCVD_IN_IADB_SPF 937 2.18 1.29 2.50 164 XM_UB80 928 0.34 1.28 0.01 165 XM_Lotto 907 0.43 1.25 0.15 166 XM_ProductURIs 902 0.83 1.24 0.69 167 RCVD_IN_PSBL 900 0.50 1.24 0.24 168 SUBJ_DOLLARS 886 0.54 1.22 0.31 169 XM_B_SpammyWords4 873 0.83 1.20 0.70 170 RCVD_IN_IADB_DK 871 1.91 1.20 2.16 171 RCVD_IN_IADB_SENDERID 855 1.97 1.18 2.25 172 TR_Mismatch_TLD_01 854 0.50 1.17 0.27 173 DIET_1 846 0.57 1.16 0.36 174 URIBL_BLACK 835 0.32 1.15 0.03 175 RCVD_IN_RP_CERTIFIED 831 1.08 1.14 1.06 176 LongTLD 802 0.35 1.10 0.09 177 MIME_CHARSET_FARAWAY 800 0.43 1.10 0.20 178 XMSlimDrugH 791 0.44 1.09 0.21 179 XMHTMLBadTable_001 790 0.64 1.09 0.48 180 LOADSA_MONEY_COMBO 784 0.34 1.08 0.08 181 SHORT_URI_2 782 1.02 1.07 1.00 182 XMSpecificSbj 777 0.28 1.07 0.00 183 URI_NO_WWW_BIZ_CGI 776 0.28 1.07 0.00 184 RELAYCOUNTRY_CN 768 0.33 1.06 0.07 185 TR_BOTNET_NEGATE 765 0.43 1.05 0.22 186 RELAYCOUNTRY_AU 762 0.43 1.05 0.22 187 BAYES_00 761 7.23 1.05 9.40 188 TR_XM_COVIDMETA4 755 0.39 1.04 0.16 189 RELAYCOUNTRY_IN 747 0.30 1.03 0.04 190 TR_LOTS_OF_MONEY3 745 0.35 1.02 0.11 191 TR_MetaPhish_Combo_01 737 0.81 1.01 0.74 192 HTML_IMAGE_ONLY_08 731 0.33 1.00 0.09 193 XMSexyCombo_02 727 0.32 1.00 0.09 194 HTML_FONT_SIZE_LARGE 725 0.31 1.00 0.07 195 SHOPIFY_IMG_NOT_RCVD_SFY 725 0.41 1.00 0.20 196 TR_XM_MaxSPIKE 715 0.28 0.98 0.03 197 XMReplyNow 699 0.33 0.96 0.11 198 XM_H_PHPOS_M 686 0.31 0.94 0.09 199 DKIM_ADSP_CUSTOM_MED 669 0.89 0.92 0.87 200 CHARSET_FARAWAY_HEADER 668 0.27 0.92 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149005 77.84 94.36 72.03 2 RELAYCOUNTRY_US 140969 71.24 80.06 68.14 3 XM_B_Unicode 137736 70.23 80.62 66.58 4 DCC_CHECK_NEGATIVE 136419 55.85 27.15 65.94 5 DKIM_SIGNED 133396 70.57 87.88 64.48 6 XM_DK_Pass 130679 68.73 84.53 63.17 7 DKIM_VALID 127739 67.17 82.59 61.75 8 DKIM_VALID_AU 105331 54.09 63.12 50.92 9 BAYES_50 104582 46.01 33.10 50.55 10 XMListUnsubscribeExists 89453 50.63 71.64 43.24 11 XM_B_SpammyWords 86711 49.23 70.04 41.92 12 XM_B_Unicode3 78485 39.73 44.80 37.94 13 DCC_CHECK 70393 44.12 72.81 34.03 14 ALL_TRUSTED 61333 22.78 3.23 29.65 15 RCVD_IN_MSPIKE_WL 57794 26.99 24.31 27.94 16 HTML_FONT_LOW_CONTRAST 54650 29.10 36.75 26.42 17 LOC_TINY_FONT_1 51644 28.44 38.32 24.96 18 DKIM_VALID_EF 50799 26.41 31.68 24.56 19 XMSubLong 43643 21.24 21.66 21.10 20 FVGT_m_MULTI_ODD 42504 22.39 27.65 20.55 21 MIME_HTML_ONLY 41636 22.46 29.08 20.13 22 T_TM2_M_HEADER_IN_MSG 41185 20.31 21.47 19.91 23 XM_Body_Dirty_Words 40244 21.36 26.77 19.45 24 XM_B_SpammyWords2 35769 22.28 36.46 17.29 25 RCVD_IN_MSPIKE_H2 32974 17.22 20.85 15.94 26 USER_IN_DEF_DKIM_WL 31938 12.30 3.37 15.44 27 BAYES_60 31698 13.12 6.84 15.32 28 RCVD_IN_MSPIKE_H3 29193 13.28 10.93 14.11 29 T_KAM_HTML_FONT_INVALID 28675 17.15 26.48 13.86 30 XM_Multi_Part_URI 25204 13.81 18.43 12.18 31 RCVD_IN_MSPIKE_H4 24127 11.96 12.81 11.66 32 XM_B_Unsub 24039 12.42 14.71 11.62 33 XM_DKIMWhitelistDomains 22615 8.10 0.03 10.93 34 BAYES_00 19451 7.23 1.05 9.40 35 T_TooManySym_01 16965 6.62 2.14 8.20 36 XM_Evil_Numbers_Gen 16775 8.15 8.28 8.11 37 UNPARSEABLE_RELAY 16356 9.68 14.73 7.91 38 TooManyTo_001 16115 7.67 7.33 7.79 39 XM_DK_Undo_02 16106 19.24 51.80 7.79 40 LotsOfNums_01 14926 6.81 5.64 7.22 41 LOTS_OF_MONEY 14512 8.32 12.03 7.02 42 HTML_IMAGE_RATIO_02 14254 7.85 10.60 6.89 43 BAYES_80 14133 7.08 7.77 6.83 44 CTE_8BIT_MISMATCH 13855 5.01 0.22 6.70 45 BAYES_99 13537 16.02 42.96 6.54 46 TR_XM_UnparsRelay 13420 8.56 14.47 6.49 47 XM_SendGrid 12857 7.22 10.08 6.22 48 TR_XM_DKIM_Undo 12800 15.40 41.58 6.19 49 RCVD_IN_VALIDITY_SAFE 12468 6.18 6.60 6.03 50 TR_XM_DK_Bayes 12048 4.42 0.44 5.82 51 HTML_IMAGE_RATIO_04 12018 5.76 5.61 5.81 52 TR_XM_DK_Bayes1 11717 4.30 0.41 5.66 53 RCVD_IN_VALIDITY_CERTIFIED 11305 5.41 5.26 5.46 54 BAYES_999 11136 13.14 35.20 5.38 55 BOTNET_IPINHOSTNAME 10863 7.22 12.81 5.25 56 TM2_M_URI_OPT_OUT 10746 5.04 4.62 5.19 57 TR_XM_DK_Bayes2 10637 3.90 0.37 5.14 58 IN_ZIMBRA_NJ_WHITELIST 10273 3.69 0.08 4.97 59 FSL_BULK_SIG 9971 6.11 9.78 4.82 60 XMStrtUSub 9835 5.09 6.05 4.75 61 XM_B_SpammyWords3 9831 6.66 12.10 4.75 62 TR_XM_SpammyWords4 9788 6.13 10.09 4.73 63 XM_H_Long_From01 9636 4.61 4.47 4.66 64 HTML_IMAGE_RATIO_06 9501 4.27 3.36 4.59 65 XMSexyCombo_05 9454 5.96 9.91 4.57 66 MPART_ALT_DIFF 9404 5.80 9.35 4.55 67 T_TooManySym_02 9373 3.54 0.71 4.53 68 MIME_QP_LONG_LINE 9285 4.29 3.74 4.49 69 XMNumbers 9235 4.23 3.57 4.46 70 XMSubMetaSx_00 8860 5.06 7.29 4.28 71 XM_UncommonTLD01 8432 5.85 10.91 4.08 72 TR_XM_DK_SendGrid 8223 4.46 5.86 3.97 73 ANY_BOUNCE_MESSAGE 8170 3.05 0.49 3.95 74 BOUNCE_MESSAGE 8169 3.05 0.49 3.95 75 BAYES_40 7134 2.97 1.59 3.45 76 INVALID_MSGID 7067 2.57 0.16 3.42 77 BAYES_95 6981 3.56 4.08 3.37 78 XM_B_Phish_Phrases 6929 3.82 5.15 3.35 79 PP_MIME_FAKE_ASCII_TEXT 6786 2.48 0.22 3.28 80 MSGID_NOFQDN1 6741 2.42 0.03 3.26 81 MIME_HTML_ONLY_MULTI 6388 2.97 2.65 3.09 82 XM_H_Trusted_IP 6315 2.26 0.00 3.05 83 FROM_EXCESS_BASE64 6127 2.82 2.42 2.96 84 TO_MALFORMED 6111 2.19 0.00 2.95 85 RCVD_IN_IADB_LISTED 5893 2.51 1.56 2.85 86 RELAYCOUNTRY_META 5879 6.95 18.64 2.84 87 BAYES_20 5857 2.60 1.94 2.83 88 DKIM_INVALID 5657 3.40 5.29 2.73 89 T_REMOTE_IMAGE 5582 2.76 2.95 2.70 90 TR_DCC_Bayes_99 5496 10.00 30.87 2.66 91 RCVD_IN_IADB_SPF 5162 2.18 1.29 2.50 92 XMStockSpam_06 5101 2.24 1.60 2.47 93 TR_XM_SB_Phish 5032 2.33 2.03 2.43 94 TR_XM_PhishingBody 5021 3.29 5.75 2.43 95 XMSubPhish11 4998 2.29 1.95 2.42 96 TVD_RCVD_IP 4952 1.81 0.14 2.39 97 RCVD_IN_IADB_SENDERID 4656 1.97 1.18 2.25 98 RCVD_IN_MSPIKE_H5 4474 1.75 0.57 2.16 99 RCVD_IN_IADB_DK 4465 1.91 1.20 2.16 100 T_XMDrugObfuBody_14 4450 2.57 3.75 2.15 101 IN_HORDE_ADDRESS_BOOK 4346 1.58 0.11 2.10 102 XM_PDF 4189 1.58 0.30 2.02 103 HTML_IMAGE_RATIO_08 4030 2.04 2.30 1.95 104 XM_B_SpammyTLD 3993 2.28 3.29 1.93 105 TR_XM_SpammyWords2 3987 5.52 15.74 1.93 106 XMBSHREFv2 3825 1.51 0.53 1.85 107 LOW_PRICE 3822 1.43 0.24 1.85 108 MAILING_LIST_MULTI 3776 1.69 1.31 1.83 109 MIME_HTML_MOSTLY 3728 3.44 8.11 1.80 110 RCVD_IN_IADB_VOUCHED 3684 1.55 0.90 1.78 111 T_XMHurry_00 3672 1.89 2.21 1.78 112 URI_NOVOWEL 3626 2.76 5.61 1.75 113 BAYES_05 3495 1.42 0.67 1.69 114 T_XMDrugObfuBody_08 3348 1.92 2.78 1.62 115 BOTNET 3312 4.23 11.69 1.60 116 TVD_SPACE_RATIO 3141 1.16 0.13 1.52 117 XMGappySubj_01 3105 1.14 0.13 1.50 118 XM_CamelCaseFrm001 3025 1.77 2.65 1.46 119 XMSexyCombo_01 3006 1.94 3.33 1.45 120 TR_Symld_Words 2825 1.50 1.88 1.37 121 XM_DK_Undo_01 2701 1.53 2.16 1.31 122 TooManyTo_002 2671 1.14 0.69 1.29 123 XM_B_Investor 2645 1.77 3.16 1.28 124 HTML_MIME_NO_HTML_TAG 2609 1.47 2.08 1.26 125 TR_XM_SpammyRelay 2568 4.24 12.75 1.24 126 TM2_M_VERY_LONG_WORD 2473 1.47 2.26 1.20 127 XM_B_Phish66 2463 1.45 2.17 1.19 128 UNTRUSTED_Relay 2450 3.69 10.82 1.18 129 URI_HEX 2440 1.37 1.91 1.18 130 TR_XM_SpammyWords5 2399 2.17 5.06 1.16 131 XMSubNoVowel 2370 1.19 1.32 1.15 132 XM_GoogleGroups 2367 1.02 0.67 1.14 133 XM_SPF_SoftFail 2358 1.78 3.59 1.14 134 RCVD_IN_RP_SAFE 2352 1.23 1.48 1.14 135 XM_ShortIntro_01 2329 1.01 0.69 1.13 136 RCVD_IN_IADB_OPTIN 2291 0.94 0.48 1.11 137 XM_RXBody 2200 0.90 0.43 1.06 138 T_TooManySym_03 2193 0.83 0.18 1.06 139 RCVD_IN_RP_CERTIFIED 2188 1.08 1.14 1.06 140 HTML_FONT_FACE_BAD 2114 0.91 0.59 1.02 141 DKIM_ADSP_NXDOMAIN 2096 0.93 0.67 1.01 142 SHORT_URI_2 2061 1.02 1.07 1.00 143 SUBJ_ALL_CAPS 2060 1.69 3.67 1.00 144 XM_H_Long_From02 2010 0.91 0.74 0.97 145 NO_DNS_FOR_FROM 2006 0.93 0.83 0.97 146 XMBdyGiftCard01 1968 1.34 2.44 0.95 147 TooManyTo_003 1940 0.86 0.63 0.94 148 RCVD_IN_BL_SPAMCOP_NET 1913 3.01 8.92 0.92 149 XMBrknScrpt_02 1908 1.14 1.76 0.92 150 KHOP_HELO_FCRDNS 1862 1.43 2.94 0.90 151 DKIM_ADSP_CUSTOM_MED 1809 0.89 0.92 0.87 152 XMDiploma_00 1746 1.07 1.72 0.84 153 TR_XM_PHPDW 1746 1.38 2.89 0.84 154 TR_XM_MaxWHORU 1743 0.84 0.82 0.84 155 TR_XM_MaxUnsub 1712 2.80 8.43 0.83 156 XM_B_Unsub2 1691 0.98 1.44 0.82 157 XMBody_95 1685 0.65 0.19 0.81 158 RELAYCOUNTRY_CA 1668 2.03 5.51 0.81 159 HTML_IMAGE_ONLY_20 1630 0.66 0.28 0.79 160 XM_B_COPY_HTML 1628 0.97 1.48 0.79 161 TR_XM_PHPForged 1565 1.29 2.79 0.76 162 TR_XM_FormFill2 1551 1.27 2.76 0.75 163 TooManyTo_004 1528 0.70 0.61 0.74 164 RCVD_IN_MSPIKE_BL 1524 2.23 6.47 0.74 165 TR_XM_MSPIKECOMBO 1522 2.23 6.47 0.74 166 TR_MetaPhish_Combo_01 1521 0.81 1.01 0.74 167 XM_H_PHPOS 1519 1.26 2.74 0.73 168 XM_OfRef6 1503 1.32 2.99 0.73 169 XM_B_SpammyWords4 1438 0.83 1.20 0.70 170 XMSubMetaI_00 1433 0.85 1.31 0.69 171 XM_ProductURIs 1428 0.83 1.24 0.69 172 TooManyTo_005 1354 0.63 0.57 0.65 173 USER_IN_WHITELIST 1333 0.48 0.00 0.64 174 USER_IN_WELCOMELIST 1333 0.48 0.00 0.64 175 XM_Body_Dirty_Words_01 1304 0.93 1.77 0.63 176 TR_MSPIKEBAYES00 1296 0.47 0.02 0.63 177 XM_UB50 1286 1.67 4.67 0.62 178 RDNS_DYNAMIC 1271 0.61 0.61 0.61 179 TM2_M_A_HREF_HREF 1181 0.92 1.92 0.57 180 XMSubMetaSxObfu_02 1179 0.54 0.45 0.57 181 XMPhish30 1169 0.81 1.51 0.57 182 MPART_ALT_DIFF_COUNT 1161 0.55 0.52 0.56 183 XM_H_PHPMailer 1157 0.80 1.49 0.56 184 T_XMDrugObfuBody_00 1145 0.83 1.61 0.55 185 NML_ADSP_CUSTOM_MED 1113 0.61 0.80 0.54 186 DATE_IN_PAST_03_06 1083 0.52 0.50 0.52 187 RELAYCOUNTRY_GB 1082 0.54 0.57 0.52 188 XM_B_REG_HTML 1080 0.73 1.33 0.52 189 XMLngstWrd_00 1078 0.62 0.91 0.52 190 SHORT_URI_3 1071 0.50 0.43 0.52 191 XM_D_tchamptons_WL 1045 0.46 0.34 0.51 192 HTML_TAG_BALANCE_BODY 1038 0.78 1.58 0.50 193 T_TooManySym_04 1030 0.39 0.08 0.50 194 XMBody_17 1026 1.35 3.76 0.50 195 T_FILL_THIS_FORM_SHORT 1002 1.40 3.98 0.48 196 PDS_OTHER_BAD_TLD 998 0.74 1.48 0.48 197 XMHTMLBadTable_001 997 0.64 1.09 0.48 198 HELO_NODOT 988 0.57 0.83 0.48 199 HELO_NO_DOMAIN 988 0.52 0.64 0.48 200 XMLngstWrd_01 969 0.57 0.86 0.47 ----------------------------------------------------------------------