Email: 300548 Autolearn: 0 AvgScore: 3.20 AvgScanTime: 1.16 sec Spam: 100099 Autolearn: 0 AvgScore: 13.71 AvgScanTime: 1.15 sec Ham: 200449 Autolearn: 0 AvgScore: -2.04 AvgScanTime: 1.16 sec Time Spent Running SA: 96.86 hours Time Spent Processing Spam: 32.03 hours Time Spent Processing Ham: 64.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 94282 87.47 94.19 84.12 2 DKIM_SIGNED 74703 74.12 74.63 73.87 3 XM_DK_Pass 73209 72.65 73.14 72.41 4 DKIM_VALID 72729 72.21 72.66 71.99 5 RELAYCOUNTRY_US 70854 75.72 70.78 78.18 6 XM_B_Unicode 68675 67.75 68.61 67.32 7 DCC_CHECK 63719 46.67 63.66 38.18 8 XMListUnsubscribeExists 57215 52.85 57.16 50.70 9 XM_B_SpammyWords 56521 47.02 56.47 42.31 10 DKIM_VALID_AU 56070 57.53 56.01 58.29 11 XM_DK_Undo_02 43280 20.93 43.24 9.79 12 BAYES_50 42467 49.82 42.42 53.52 13 XM_B_Unicode3 39318 41.26 39.28 42.25 14 BAYES_99 36996 17.93 36.96 8.42 15 DCC_CHECK_NEGATIVE 36361 53.32 36.33 61.80 16 TR_XM_DKIM_Undo 32465 14.70 32.43 5.85 17 MIME_HTML_ONLY 31821 28.21 31.79 26.42 18 LOC_TINY_FONT_1 31156 27.35 31.13 25.46 19 XM_B_SpammyWords2 30244 22.93 30.21 19.29 20 RELAYCOUNTRY_META 29869 11.93 29.84 2.98 21 BAYES_999 29436 14.56 29.41 7.14 22 HTML_FONT_LOW_CONTRAST 28382 28.63 28.35 28.77 23 FVGT_m_MULTI_ODD 27037 25.04 27.01 24.06 24 TR_DCC_Bayes_99 26361 10.93 26.33 3.23 25 DKIM_VALID_EF 25283 27.78 25.26 29.03 26 RCVD_IN_MSPIKE_H2 24742 21.33 24.72 19.64 27 XM_Multi_Part_URI 23721 16.70 23.70 13.21 28 T_KAM_HTML_FONT_INVALID 21959 18.62 21.94 16.97 29 XM_UncommonTLD01 20837 9.79 20.82 4.29 30 XM_Body_Dirty_Words 19982 14.29 19.96 11.46 31 UNTRUSTED_Relay 19404 7.18 19.38 1.08 32 T_TM2_M_HEADER_IN_MSG 17963 21.00 17.95 22.52 33 RCVD_IN_MSPIKE_WL 17877 25.81 17.86 29.79 34 XMSubLong 17728 19.56 17.71 20.49 35 FSL_BULK_SIG 16422 9.91 16.41 6.67 36 XM_B_SpammyTLD 15593 6.42 15.58 1.85 37 XM_B_Unsub 14331 12.73 14.32 11.94 38 UNPARSEABLE_RELAY 14316 10.75 14.30 8.98 39 SpammyFromTLD_02 14310 4.88 14.30 0.18 40 TR_XM_UnparsRelay 14026 9.39 14.01 7.08 41 XM_UB50 13804 5.03 13.79 0.66 42 LOTS_OF_MONEY 12346 10.22 12.33 9.17 43 RCVD_IN_MSPIKE_H3 12270 14.99 12.26 16.35 44 TR_XM_SpammyWords2 12189 5.19 12.18 1.70 45 RELAYCOUNTRY_FR 12088 4.12 12.08 0.15 46 ANY_BOUNCE_MESSAGE 11609 5.85 11.60 2.98 47 BOUNCE_MESSAGE 11608 5.85 11.60 2.98 48 DKIM_ADSP_NXDOMAIN 11529 4.09 11.52 0.39 49 XMBounce_01 11145 3.72 11.13 0.01 50 T_TVD_MIME_NO_HEADERS 11042 3.68 11.03 0.01 51 XMMailDelErr 11016 3.67 11.01 0.00 52 RCVD_IN_BL_SPAMCOP_NET 10896 4.43 10.89 1.20 53 TR_XM_SpammyWords4 10486 7.06 10.48 5.35 54 TR_XM_SpammyRelay 10351 4.28 10.34 1.25 55 XMSexyCombo_05 10247 6.21 10.24 4.19 56 BOTNET_IPINHOSTNAME 9523 7.17 9.51 6.00 57 XM_B_SpammyWords3 9403 6.21 9.39 4.62 58 XM_SendGrid 9249 7.85 9.24 7.16 59 BOTNET 9094 4.10 9.09 1.61 60 TR_XM_MaxUnsub 8137 3.82 8.13 1.67 61 MPART_ALT_DIFF 7943 6.58 7.94 5.91 62 BAYES_80 7478 6.38 7.47 5.84 63 HTML_IMAGE_RATIO_02 7310 7.72 7.30 7.93 64 XM_Evil_Numbers_Gen 6467 8.31 6.46 9.24 65 TR_XM_DK_SendGrid 6267 5.35 6.26 4.90 66 BAYES_60 6000 9.64 5.99 11.46 67 RCVD_IN_MSPIKE_BL 5997 2.79 5.99 1.19 68 TR_XM_MSPIKECOMBO 5957 2.77 5.95 1.19 69 RELAYCOUNTRY_CA 5917 2.57 5.91 0.91 70 HTML_OBFUSCATE_05_10 5877 2.21 5.87 0.38 71 MIME_HTML_ONLY_MULTI 5755 4.63 5.75 4.07 72 TR_XM_SPAMCOP 5410 2.09 5.40 0.44 73 RCVD_IN_MSPIKE_H4 5274 9.38 5.27 11.43 74 TM2_M_VERY_LONG_WORD 5268 3.13 5.26 2.06 75 XM_H_Long_From01 5164 5.05 5.16 5.00 76 XMSubMetaSx_00 5077 3.89 5.07 3.30 77 HTML_MIME_NO_HTML_TAG 4858 2.85 4.85 1.85 78 TooManyTo_001 4762 5.59 4.76 6.01 79 T_XMDrugObfuBody_14 4736 3.57 4.73 2.99 80 T_REMOTE_IMAGE 4524 3.95 4.52 3.66 81 LotsOfNums_01 4511 7.41 4.51 8.86 82 TR_XM_PhishingBody 4505 3.36 4.50 2.80 83 BAYES_95 4363 3.80 4.36 3.52 84 XM_GoogleGroups 4072 2.62 4.07 1.90 85 RCVD_IN_VALIDITY_SAFE 4046 5.36 4.04 6.01 86 XM_SPF_SoftFail 4041 2.55 4.04 1.81 87 XM_B_Phish_Phrases 3942 3.43 3.94 3.18 88 HTML_IMAGE_RATIO_04 3928 4.78 3.92 5.21 89 RCVD_IN_VALIDITY_RPBL 3861 1.30 3.86 0.02 90 ALL_TRUSTED 3682 14.34 3.68 19.67 91 XMLngstWrd_00 3571 2.27 3.57 1.62 92 RCVD_IN_MSPIKE_L5 3564 1.27 3.56 0.12 93 XMLngstWrd_01 3506 2.18 3.50 1.52 94 XMLngstWrd_02 3467 2.08 3.46 1.39 95 RCVD_IN_VALIDITY_CERTIFIED 3340 4.67 3.34 5.34 96 XM_DIRTYINTL 3314 1.24 3.31 0.21 97 SpammyFromTLD_01 3210 1.33 3.21 0.40 98 XMLngstWrd_03 3070 1.86 3.07 1.26 99 XM_OfRef6 3010 1.55 3.01 0.83 100 XMStrtUSub 3010 4.21 3.01 4.81 101 XMLngstWrd_04 3007 1.77 3.00 1.15 102 HTML_TITLE_SUBJ_DIFF 2964 1.53 2.96 0.82 103 BOTNET_NORDNS 2911 0.99 2.91 0.03 104 UPPERCASE_75_100 2910 1.49 2.91 0.78 105 TR_XM_SpammyWords5 2846 1.87 2.84 1.39 106 XMNumbers 2843 4.08 2.84 4.70 107 TR_Mismatch_TLD_02 2826 0.98 2.82 0.06 108 T_FILL_THIS_FORM_SHORT 2817 1.33 2.81 0.60 109 RCVD_IN_PSBL 2806 1.07 2.80 0.20 110 TO_NO_BRKTS_HTML_ONLY 2758 3.75 2.76 4.24 111 XM_B_Investor 2687 1.88 2.68 1.48 112 TVD_SPACE_RATIO 2679 4.04 2.68 4.72 113 KHOP_HELO_FCRDNS 2657 1.80 2.65 1.37 114 USER_IN_DEF_DKIM_WL 2627 11.54 2.62 15.99 115 PDS_OTHER_BAD_TLD 2608 1.19 2.61 0.48 116 TR_XM_SpammyWords3 2584 1.16 2.58 0.45 117 HTML_IMAGE_RATIO_06 2576 2.89 2.57 3.05 118 MIME_HTML_MOSTLY 2572 2.41 2.57 2.33 119 XM_UB99 2564 0.86 2.56 0.00 120 TR_XM_MSPIKECOMBO2 2450 1.02 2.45 0.31 121 TM2_M_URI_OPT_OUT 2439 2.50 2.44 2.53 122 XM_CamelCaseFrm001 2410 1.97 2.41 1.75 123 T_XMDrugObfuBody_08 2355 1.80 2.35 1.52 124 RELAYCOUNTRY_RU 2306 0.79 2.30 0.03 125 MAILING_LIST_MULTI 2195 2.00 2.19 1.90 126 FROM_EXCESS_BASE64 2084 3.20 2.08 3.75 127 TR_XM_PHPDW 2063 0.95 2.06 0.39 128 XM_B_Phish66 2025 1.76 2.02 1.62 129 XM_UB999 2002 0.67 2.00 0.00 130 TR_XM_PHPForged 1988 0.88 1.99 0.33 131 DKIM_INVALID 1974 1.91 1.97 1.88 132 TR_XM_FormFill2 1968 0.88 1.97 0.34 133 XM_H_PHPOS 1955 0.87 1.95 0.32 134 SUBJ_ALL_CAPS 1917 2.26 1.92 2.43 135 TR_LOTS_OF_MONEY3 1915 0.87 1.91 0.35 136 TR_XM_FormFill 1856 0.62 1.85 0.01 137 MIME_QP_LONG_LINE 1838 3.26 1.84 3.96 138 RCVD_IN_MSPIKE_L3 1811 0.98 1.81 0.57 139 XM_DK_Undo_01 1804 1.42 1.80 1.23 140 XM_B_Unsub2 1802 1.47 1.80 1.31 141 T_TooManySym_01 1791 5.55 1.79 7.43 142 URI_NOVOWEL 1779 2.21 1.78 2.42 143 XMSexyCombo_01 1775 0.93 1.77 0.51 144 XMDiploma_00 1730 1.29 1.73 1.07 145 RCVD_IN_IADB_LISTED 1710 3.62 1.71 4.58 146 XMBody_17 1709 0.89 1.71 0.48 147 XM_B_SpammyWords4 1661 0.94 1.66 0.58 148 FROM_SUSPICIOUS_NTLD 1656 0.62 1.65 0.10 149 TR_XM_NoHeaderRelay 1647 0.63 1.65 0.12 150 HTML_IMAGE_RATIO_08 1634 1.78 1.63 1.86 151 FROM_SUSPICIOUS_NTLD_FP 1619 0.60 1.62 0.10 152 TR_XM_BayesRelay 1575 0.53 1.57 0.01 153 T_XMDrugObfuBody_00 1565 1.05 1.56 0.79 154 XMSubNoVowel 1521 1.15 1.52 0.97 155 TM2_M_A_HREF_HREF 1499 1.14 1.50 0.97 156 TR_Symld_Words 1478 1.51 1.48 1.52 157 XM_H_Undi_Recip 1437 0.57 1.44 0.14 158 XMBdyGiftCard01 1423 1.20 1.42 1.09 159 RCVD_IN_IADB_SPF 1421 3.20 1.42 4.08 160 XMStockSpam_06 1360 1.49 1.36 1.56 161 URIBL_DBL_SPAM 1353 0.46 1.35 0.01 162 XM_URI_RBL 1301 0.54 1.30 0.15 163 TR_XM_SB_Phish 1297 1.61 1.30 1.76 164 RCVD_IN_IADB_DK 1292 2.81 1.29 3.57 165 DIET_1 1289 0.70 1.29 0.41 166 MONEY_NOHTML 1285 0.48 1.28 0.07 167 XM_ProductURIs 1268 0.81 1.27 0.57 168 RCVD_IN_IADB_SENDERID 1266 2.89 1.26 3.71 169 LongTLD 1241 0.49 1.24 0.11 170 RELAYCOUNTRY_AU 1223 0.56 1.22 0.24 171 XMSubPhish11 1210 1.57 1.21 1.75 172 XMPhish30 1200 0.86 1.20 0.68 173 URI_HEX 1156 1.09 1.15 1.05 174 SHOPIFY_IMG_NOT_RCVD_SFY 1153 0.55 1.15 0.25 175 HTML_IMAGE_ONLY_08 1127 0.47 1.13 0.14 176 XM_Body_Dirty_Words_01 1120 0.50 1.12 0.19 177 XMHTMLBadTable_001 1116 0.72 1.11 0.52 178 RCVD_IN_IADB_VOUCHED 1107 2.36 1.11 2.99 179 XMBrknScrpt_02 1090 0.84 1.09 0.72 180 XM_ShortIntro_01 1087 0.62 1.09 0.38 181 XM_UB60 1056 0.39 1.05 0.05 182 HTTPS_HTTP_MISMATCH 1025 0.64 1.02 0.45 183 T_XMHurry_00 1003 0.59 1.00 0.38 184 BAYES_40 988 2.90 0.99 3.85 185 RCVD_IN_RP_SAFE 974 1.06 0.97 1.11 186 XMReplyNow 945 0.51 0.94 0.29 187 TR_Mismatch_TLD_01 938 0.49 0.94 0.27 188 URIBL_BLACK 935 0.33 0.93 0.03 189 TR_XM_Undi_Recip6 924 0.31 0.92 0.00 190 DKIM_ADSP_CUSTOM_MED 913 0.75 0.91 0.68 191 XMCapTrack 906 0.59 0.91 0.44 192 HTML_FONT_SIZE_LARGE 903 0.34 0.90 0.07 193 TR_BOTNET_NEGATE 879 0.50 0.88 0.31 194 URI_TRY_3LD 874 0.67 0.87 0.57 195 XM_UB80 872 0.30 0.87 0.02 196 RELAYCOUNTRY_CN 870 0.31 0.87 0.04 197 XM_H_PHPMailer 866 0.67 0.87 0.58 198 BODY_URI_ONLY 850 0.29 0.85 0.01 199 HTML_TAG_BALANCE_BODY 849 0.67 0.85 0.58 200 HTML_TAG_BALANCE_CENTER 835 0.35 0.83 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168621 87.47 94.19 84.12 2 RELAYCOUNTRY_US 156717 75.72 70.78 78.18 3 DKIM_SIGNED 148075 74.12 74.63 73.87 4 XM_DK_Pass 145138 72.65 73.14 72.41 5 DKIM_VALID 144306 72.21 72.66 71.99 6 XM_B_Unicode 134942 67.75 68.61 67.32 7 DCC_CHECK_NEGATIVE 123878 53.32 36.33 61.80 8 DKIM_VALID_AU 116835 57.53 56.01 58.29 9 BAYES_50 107272 49.82 42.42 53.52 10 XMListUnsubscribeExists 101630 52.85 57.16 50.70 11 XM_B_SpammyWords 84808 47.02 56.47 42.31 12 XM_B_Unicode3 84698 41.26 39.28 42.25 13 DCC_CHECK 76535 46.67 63.66 38.18 14 RCVD_IN_MSPIKE_WL 59708 25.81 17.86 29.79 15 DKIM_VALID_EF 58199 27.78 25.26 29.03 16 HTML_FONT_LOW_CONTRAST 57662 28.63 28.35 28.77 17 MIME_HTML_ONLY 52961 28.21 31.79 26.42 18 LOC_TINY_FONT_1 51038 27.35 31.13 25.46 19 FVGT_m_MULTI_ODD 48227 25.04 27.01 24.06 20 T_TM2_M_HEADER_IN_MSG 45149 21.00 17.95 22.52 21 XMSubLong 41065 19.56 17.71 20.49 22 ALL_TRUSTED 39422 14.34 3.68 19.67 23 RCVD_IN_MSPIKE_H2 39372 21.33 24.72 19.64 24 XM_B_SpammyWords2 38668 22.93 30.21 19.29 25 T_KAM_HTML_FONT_INVALID 34014 18.62 21.94 16.97 26 RCVD_IN_MSPIKE_H3 32773 14.99 12.26 16.35 27 USER_IN_DEF_DKIM_WL 32058 11.54 2.62 15.99 28 XM_Multi_Part_URI 26470 16.70 23.70 13.21 29 XM_B_Unsub 23933 12.73 14.32 11.94 30 XM_DKIMWhitelistDomains 23782 7.99 0.24 11.86 31 XM_Body_Dirty_Words 22972 14.29 19.96 11.46 32 BAYES_60 22964 9.64 5.99 11.46 33 RCVD_IN_MSPIKE_H4 22921 9.38 5.27 11.43 34 XM_DK_Undo_02 19620 20.93 43.24 9.79 35 XM_Evil_Numbers_Gen 18523 8.31 6.46 9.24 36 LOTS_OF_MONEY 18384 10.22 12.33 9.17 37 BAYES_00 18111 6.21 0.57 9.04 38 UNPARSEABLE_RELAY 17994 10.75 14.30 8.98 39 LotsOfNums_01 17759 7.41 4.51 8.86 40 BAYES_99 16886 17.93 36.96 8.42 41 HTML_IMAGE_RATIO_02 15891 7.72 7.30 7.93 42 T_TooManySym_01 14886 5.55 1.79 7.43 43 XM_SendGrid 14349 7.85 9.24 7.16 44 BAYES_999 14316 14.56 29.41 7.14 45 TR_XM_UnparsRelay 14192 9.39 14.01 7.08 46 FSL_BULK_SIG 13367 9.91 16.41 6.67 47 TR_XM_DK_Bayes 12901 4.44 0.44 6.44 48 TR_XM_DK_Bayes1 12783 4.40 0.44 6.38 49 RCVD_IN_VALIDITY_SAFE 12053 5.36 4.04 6.01 50 TooManyTo_001 12052 5.59 4.76 6.01 51 BOTNET_IPINHOSTNAME 12021 7.17 9.51 6.00 52 MPART_ALT_DIFF 11845 6.58 7.94 5.91 53 IN_ZIMBRA_NJ_WHITELIST 11801 3.95 0.07 5.89 54 TR_XM_DKIM_Undo 11729 14.70 32.43 5.85 55 BAYES_80 11702 6.38 7.47 5.84 56 TR_XM_DK_Bayes2 11464 3.92 0.32 5.72 57 TR_XM_SpammyWords4 10725 7.06 10.48 5.35 58 RCVD_IN_VALIDITY_CERTIFIED 10695 4.67 3.34 5.34 59 HTML_IMAGE_RATIO_04 10447 4.78 3.92 5.21 60 XM_H_Long_From01 10022 5.05 5.16 5.00 61 TR_XM_DK_SendGrid 9827 5.35 6.26 4.90 62 XMStrtUSub 9633 4.21 3.01 4.81 63 T_TooManySym_02 9477 3.31 0.47 4.73 64 TVD_SPACE_RATIO 9454 4.04 2.68 4.72 65 XMNumbers 9413 4.08 2.84 4.70 66 XM_B_SpammyWords3 9254 6.21 9.39 4.62 67 RCVD_IN_IADB_LISTED 9179 3.62 1.71 4.58 68 XM_UncommonTLD01 8599 9.79 20.82 4.29 69 TO_NO_BRKTS_HTML_ONLY 8499 3.75 2.76 4.24 70 XMSexyCombo_05 8405 6.21 10.24 4.19 71 RCVD_IN_IADB_SPF 8184 3.20 1.42 4.08 72 MIME_HTML_ONLY_MULTI 8150 4.63 5.75 4.07 73 MIME_QP_LONG_LINE 7945 3.26 1.84 3.96 74 BAYES_40 7723 2.90 0.99 3.85 75 FROM_EXCESS_BASE64 7525 3.20 2.08 3.75 76 RCVD_IN_IADB_SENDERID 7427 2.89 1.26 3.71 77 T_REMOTE_IMAGE 7344 3.95 4.52 3.66 78 RCVD_IN_IADB_DK 7149 2.81 1.29 3.57 79 INVALID_MSGID 7115 2.41 0.14 3.55 80 BAYES_95 7048 3.80 4.36 3.52 81 MSGID_NOFQDN1 6839 2.30 0.06 3.41 82 XMSubMetaSx_00 6608 3.89 5.07 3.30 83 TR_DCC_Bayes_99 6482 10.93 26.33 3.23 84 XM_B_Phish_Phrases 6381 3.43 3.94 3.18 85 TVD_RCVD_IP 6294 2.19 0.28 3.14 86 HTML_IMAGE_RATIO_06 6110 2.89 2.57 3.05 87 TO_MALFORMED 6008 2.00 0.00 3.00 88 RCVD_IN_IADB_VOUCHED 5995 2.36 1.11 2.99 89 T_XMDrugObfuBody_14 5989 3.57 4.73 2.99 90 ANY_BOUNCE_MESSAGE 5978 5.85 11.60 2.98 91 BOUNCE_MESSAGE 5978 5.85 11.60 2.98 92 RELAYCOUNTRY_META 5973 11.93 29.84 2.98 93 TR_XM_PhishingBody 5606 3.36 4.50 2.80 94 BAYES_20 5275 2.02 0.81 2.63 95 XM_H_Trusted_IP 5228 1.74 0.00 2.61 96 TM2_M_URI_OPT_OUT 5070 2.50 2.44 2.53 97 SUBJ_ALL_CAPS 4876 2.26 1.92 2.43 98 URI_NOVOWEL 4849 2.21 1.78 2.42 99 MIME_HTML_MOSTLY 4662 2.41 2.57 2.33 100 IN_HORDE_ADDRESS_BOOK 4185 1.41 0.06 2.09 101 TM2_M_VERY_LONG_WORD 4139 3.13 5.26 2.06 102 RCVD_IN_MSPIKE_H5 4014 1.45 0.33 2.00 103 RCVD_IN_IADB_OPTIN 3949 1.55 0.70 1.97 104 XM_PDF 3863 1.40 0.33 1.93 105 XM_GoogleGroups 3815 2.62 4.07 1.90 106 MAILING_LIST_MULTI 3805 2.00 2.19 1.90 107 DKIM_INVALID 3769 1.91 1.97 1.88 108 HTML_IMAGE_RATIO_08 3720 1.78 1.63 1.86 109 XM_B_SpammyTLD 3709 6.42 15.58 1.85 110 HTML_MIME_NO_HTML_TAG 3703 2.85 4.85 1.85 111 XM_SPF_SoftFail 3626 2.55 4.04 1.81 112 TR_XM_SB_Phish 3528 1.61 1.30 1.76 113 XM_CamelCaseFrm001 3516 1.97 2.41 1.75 114 XMSubPhish11 3503 1.57 1.21 1.75 115 XMBSHREFv2 3467 1.23 0.22 1.73 116 BAYES_05 3461 1.29 0.41 1.73 117 TR_XM_SpammyWords2 3410 5.19 12.18 1.70 118 TR_XM_MaxUnsub 3347 3.82 8.13 1.67 119 XM_B_Phish66 3250 1.76 2.02 1.62 120 XMLngstWrd_00 3244 2.27 3.57 1.62 121 BOTNET 3225 4.10 9.09 1.61 122 XMStockSpam_06 3131 1.49 1.36 1.56 123 XMLngstWrd_01 3055 2.18 3.50 1.52 124 T_XMDrugObfuBody_08 3052 1.80 2.35 1.52 125 TR_Symld_Words 3047 1.51 1.48 1.52 126 XM_B_Investor 2968 1.88 2.68 1.48 127 XMGappySubj_01 2951 1.08 0.29 1.47 128 XMLngstWrd_02 2789 2.08 3.46 1.39 129 TR_XM_SpammyWords5 2785 1.87 2.84 1.39 130 KHOP_HELO_FCRDNS 2747 1.80 2.65 1.37 131 XM_B_Unsub2 2628 1.47 1.80 1.31 132 XM_D_tchamptons_WL 2570 0.86 0.01 1.28 133 XMLngstWrd_03 2518 1.86 3.07 1.26 134 TR_XM_SpammyRelay 2514 4.28 10.34 1.25 135 XM_DK_Undo_01 2470 1.42 1.80 1.23 136 RCVD_IN_BL_SPAMCOP_NET 2414 4.43 10.89 1.20 137 RCVD_IN_MSPIKE_BL 2393 2.79 5.99 1.19 138 TR_XM_MSPIKECOMBO 2376 2.77 5.95 1.19 139 TooManyTo_002 2368 1.03 0.71 1.18 140 XMLngstWrd_04 2315 1.77 3.00 1.15 141 XM_RXBody 2284 1.04 0.83 1.14 142 RCVD_IN_RP_SAFE 2226 1.06 0.97 1.11 143 XMBdyGiftCard01 2185 1.20 1.42 1.09 144 UNTRUSTED_Relay 2165 7.18 19.38 1.08 145 XMDiploma_00 2140 1.29 1.73 1.07 146 URI_HEX 2105 1.09 1.15 1.05 147 XM_H_Long_From02 2102 0.96 0.79 1.05 148 RCVD_IN_RP_CERTIFIED 2004 0.92 0.77 1.00 149 XMBody_95 1988 0.70 0.12 0.99 150 HTML_FONT_FACE_BAD 1942 0.87 0.66 0.97 151 XMSubNoVowel 1938 1.15 1.52 0.97 152 TM2_M_A_HREF_HREF 1938 1.14 1.50 0.97 153 T_TooManySym_03 1914 0.72 0.26 0.95 154 TR_MetaPhish_Combo_01 1848 0.86 0.72 0.92 155 XM_B_COPY_HTML 1842 0.82 0.62 0.92 156 RELAYCOUNTRY_CA 1820 2.57 5.91 0.91 157 HTML_IMAGE_ONLY_20 1791 0.70 0.31 0.89 158 TooManyTo_003 1699 0.78 0.66 0.85 159 XM_shorewaves_Whitelist 1694 0.56 0.00 0.85 160 XM_OfRef6 1660 1.55 3.01 0.83 161 HTML_TITLE_SUBJ_DIFF 1643 1.53 2.96 0.82 162 T_XMDrugObfuBody_00 1588 1.05 1.56 0.79 163 UPPERCASE_75_100 1570 1.49 2.91 0.78 164 XMBrknScrpt_02 1435 0.84 1.09 0.72 165 XMPhish30 1371 0.86 1.20 0.68 166 USER_IN_WHITELIST 1367 0.45 0.00 0.68 167 USER_IN_WELCOMELIST 1367 0.45 0.00 0.68 168 DKIM_ADSP_CUSTOM_MED 1354 0.75 0.91 0.68 169 XM_B_COVIDMETA 1346 0.69 0.74 0.67 170 XM_UB50 1318 5.03 13.79 0.66 171 MPART_ALT_DIFF_COUNT 1283 0.69 0.80 0.64 172 TooManyTo_004 1254 0.63 0.63 0.63 173 RDNS_DYNAMIC 1246 0.68 0.79 0.62 174 T_FILL_THIS_FORM_SHORT 1195 1.33 2.81 0.60 175 HTML_TAG_BALANCE_BODY 1168 0.67 0.85 0.58 176 TR_XM_INV_DKIM 1161 0.59 0.60 0.58 177 XM_H_PHPMailer 1161 0.67 0.87 0.58 178 XM_B_SpammyWords4 1154 0.94 1.66 0.58 179 XM_ProductURIs 1152 0.81 1.27 0.57 180 URI_TRY_3LD 1145 0.67 0.87 0.57 181 RCVD_IN_MSPIKE_L3 1137 0.98 1.81 0.57 182 XMGenDplmaNmb 1134 0.59 0.64 0.57 183 XMHTML_After_End 1123 0.60 0.68 0.56 184 PLING_QUERY 1098 0.53 0.49 0.55 185 XMNoVowels 1067 0.41 0.17 0.53 186 TR_MSPIKEBAYES00 1054 0.36 0.01 0.53 187 XMHTMLBadTable_001 1041 0.72 1.11 0.52 188 HELO_NODOT 1030 0.51 0.50 0.51 189 XMSexyCombo_01 1027 0.93 1.77 0.51 190 HELO_NO_DOMAIN 1026 0.51 0.50 0.51 191 RCVD_IN_MSPIKE_L4 994 0.52 0.58 0.50 192 TooManyTo_005 989 0.53 0.62 0.49 193 TR_Caps_n_Bayes_99 981 0.56 0.71 0.49 194 PDS_OTHER_BAD_TLD 965 1.19 2.61 0.48 195 XMBody_17 961 0.89 1.71 0.48 196 XMSubMetaSxObfu_02 953 0.41 0.27 0.48 197 TR_XM_SpammyWords3 906 1.16 2.58 0.45 198 HTTPS_HTTP_MISMATCH 896 0.64 1.02 0.45 199 TR_XM_SPAMCOP 883 2.09 5.40 0.44 200 XMCapTrack 877 0.59 0.91 0.44 ----------------------------------------------------------------------