Email: 273271 Autolearn: 0 AvgScore: 2.77 AvgScanTime: 1.20 sec Spam: 82492 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.26 sec Ham: 190779 Autolearn: 0 AvgScore: -2.01 AvgScanTime: 1.18 sec Time Spent Running SA: 91.27 hours Time Spent Processing Spam: 28.78 hours Time Spent Processing Ham: 62.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76931 86.57 93.26 83.68 2 DKIM_SIGNED 70722 76.38 85.73 72.34 3 XM_DK_Pass 69238 75.09 83.93 71.27 4 DKIM_VALID 68920 74.78 83.55 70.99 5 RELAYCOUNTRY_US 68260 78.79 82.75 77.08 6 XM_B_Unicode 64027 70.56 77.62 67.51 7 DCC_CHECK 55484 46.17 67.26 37.05 8 DKIM_VALID_AU 54911 61.48 66.57 59.28 9 XMListUnsubscribeExists 54679 55.62 66.28 51.02 10 XM_B_SpammyWords 50358 50.11 61.05 45.38 11 XM_DK_Undo_02 38353 19.66 46.49 8.06 12 XM_B_Unicode3 37899 43.99 45.94 43.15 13 BAYES_99 32705 16.69 39.65 6.77 14 BAYES_50 30690 48.21 37.20 52.97 15 LOC_TINY_FONT_1 29303 29.15 35.52 26.39 16 MIME_HTML_ONLY 29293 27.30 35.51 23.76 17 TR_XM_DKIM_Undo 28615 14.26 34.69 5.43 18 XM_B_SpammyWords2 27673 25.78 33.55 22.42 19 DCC_CHECK_NEGATIVE 26982 53.81 32.71 62.93 20 FVGT_m_MULTI_ODD 26685 27.21 32.35 24.98 21 HTML_FONT_LOW_CONTRAST 26152 31.09 31.70 30.83 22 BAYES_999 26000 13.40 31.52 5.56 23 DKIM_VALID_EF 23541 27.18 28.54 26.60 24 RCVD_IN_MSPIKE_H2 23256 21.54 28.19 18.67 25 TR_DCC_Bayes_99 22713 10.11 27.53 2.58 26 T_KAM_HTML_FONT_INVALID 19524 18.92 23.67 16.86 27 XM_Body_Dirty_Words 19327 15.48 23.43 12.04 28 RCVD_IN_MSPIKE_WL 19054 28.92 23.10 31.43 29 RELAYCOUNTRY_META 18871 9.18 22.88 3.25 30 T_TM2_M_HEADER_IN_MSG 16426 21.33 19.91 21.94 31 XMSubLong 15460 20.67 18.74 21.50 32 XM_Multi_Part_URI 13501 13.95 16.37 12.91 33 RCVD_IN_MSPIKE_H3 13362 16.90 16.20 17.21 34 XM_B_Unsub 12997 14.86 15.76 14.47 35 UNPARSEABLE_RELAY 12787 10.53 15.50 8.38 36 TR_XM_UnparsRelay 12626 9.24 15.31 6.62 37 FSL_BULK_SIG 10766 6.38 13.05 3.50 38 LOTS_OF_MONEY 10715 8.80 12.99 7.00 39 TR_XM_SpammyWords2 10668 4.85 12.93 1.35 40 XMSexyCombo_05 10133 6.97 12.28 4.67 41 XM_UncommonTLD01 9625 6.61 11.67 4.42 42 RCVD_IN_BL_SPAMCOP_NET 9583 3.99 11.62 0.70 43 BOTNET_IPINHOSTNAME 9317 7.64 11.29 6.06 44 MPART_ALT_DIFF 9304 7.90 11.28 6.44 45 XM_B_SpammyWords3 8785 7.63 10.65 6.33 46 TR_XM_SpammyWords4 8696 6.13 10.54 4.22 47 TR_XM_SpammyRelay 8612 4.07 10.44 1.32 48 BOTNET 8537 4.16 10.35 1.49 49 UNTRUSTED_Relay 8249 3.92 10.00 1.30 50 XM_SendGrid 8038 7.61 9.74 6.69 51 TM2_M_VERY_LONG_WORD 7830 4.76 9.49 2.71 52 MIME_HTML_ONLY_MULTI 7499 6.00 9.09 4.66 53 HTML_IMAGE_RATIO_02 7282 7.51 8.83 6.95 54 TR_XM_MaxUnsub 7212 3.21 8.74 0.82 55 BAYES_80 6650 6.10 8.06 5.26 56 XM_Evil_Numbers_Gen 6609 8.50 8.01 8.71 57 XMSubMetaSx_00 6436 5.09 7.80 3.92 58 XM_GoogleGroups 6026 4.06 7.30 2.66 59 XM_H_Long_From01 6018 6.03 7.30 5.48 60 XMLngstWrd_00 5957 3.60 7.22 2.04 61 HTML_MIME_NO_HTML_TAG 5956 4.42 7.22 3.21 62 XMLngstWrd_01 5858 3.52 7.10 1.97 63 XMLngstWrd_02 5794 3.43 7.02 1.88 64 UPPERCASE_75_100 5718 3.01 6.93 1.32 65 BAYES_60 5704 10.10 6.91 11.47 66 RCVD_IN_MSPIKE_BL 5662 2.80 6.86 1.05 67 TR_XM_MSPIKECOMBO 5621 2.79 6.81 1.05 68 RCVD_IN_MSPIKE_H4 5455 10.75 6.61 12.54 69 XMLngstWrd_03 5376 3.22 6.52 1.80 70 TR_XM_DK_SendGrid 5334 4.97 6.47 4.33 71 XMLngstWrd_04 5299 3.15 6.42 1.73 72 HTML_TITLE_SUBJ_DIFF 5078 2.98 6.16 1.60 73 TooManyTo_001 4927 9.04 5.97 10.37 74 XM_B_SpammyTLD 4867 3.17 5.90 1.99 75 RCVD_IN_VALIDITY_SAFE 4755 6.53 5.76 6.86 76 LotsOfNums_01 4708 7.23 5.71 7.89 77 RELAYCOUNTRY_CA 4566 2.29 5.54 0.88 78 TR_XM_PhishingBody 4561 3.95 5.53 3.27 79 TR_XM_SPAMCOP 4523 1.84 5.48 0.26 80 XM_SPF_SoftFail 4045 2.68 4.90 1.72 81 HTML_IMAGE_RATIO_04 4045 6.31 4.90 6.91 82 T_REMOTE_IMAGE 3910 3.49 4.74 2.95 83 RCVD_IN_VALIDITY_CERTIFIED 3897 5.79 4.72 6.26 84 XMStrtUSub 3837 5.90 4.65 6.44 85 BAYES_95 3740 3.58 4.53 3.16 86 XM_B_Phish_Phrases 3671 3.94 4.45 3.72 87 RCVD_IN_VALIDITY_RPBL 3636 1.35 4.41 0.03 88 XM_UB50 3623 1.86 4.39 0.76 89 SpammyFromTLD_01 3589 1.56 4.35 0.35 90 RCVD_IN_MSPIKE_L5 3182 1.24 3.86 0.11 91 T_XMDrugObfuBody_14 3142 2.91 3.81 2.52 92 PDS_OTHER_BAD_TLD 3074 1.37 3.73 0.35 93 XM_DIRTYINTL 2898 1.21 3.51 0.21 94 T_FILL_THIS_FORM_SHORT 2812 1.39 3.41 0.51 95 XM_B_Investor 2690 1.86 3.26 1.26 96 MIME_HTML_MOSTLY 2605 2.58 3.16 2.33 97 KHOP_HELO_FCRDNS 2560 1.75 3.10 1.17 98 XM_H_Undi_Recip 2541 1.04 3.08 0.16 99 XMBody_17 2515 1.21 3.05 0.42 100 BOTNET_NORDNS 2502 0.93 3.03 0.02 101 XMSexyCombo_01 2446 1.35 2.97 0.65 102 TR_XM_SpammyWords5 2423 1.92 2.94 1.48 103 SpammyFromTLD_02 2379 0.99 2.88 0.17 104 TR_LOTS_OF_MONEY3 2364 1.18 2.87 0.45 105 USER_IN_DEF_DKIM_WL 2351 12.67 2.85 16.92 106 TR_XM_MSPIKECOMBO2 2345 1.02 2.84 0.23 107 TM2_M_URI_OPT_OUT 2343 5.65 2.84 6.87 108 XM_OfRef6 2325 1.57 2.82 1.03 109 MIME_QP_LONG_LINE 2285 6.21 2.77 7.70 110 TR_XM_NoHeaderRelay 2277 0.94 2.76 0.16 111 XM_UB99 2260 0.83 2.74 0.01 112 XMNumbers 2253 4.29 2.73 4.97 113 SUBJ_ALL_CAPS 2200 1.63 2.67 1.18 114 XMSubNoVowel 2163 1.69 2.62 1.29 115 XM_CamelCaseFrm001 2040 1.94 2.47 1.71 116 HTML_IMAGE_RATIO_06 2040 3.68 2.47 4.20 117 XM_DK_Undo_01 2012 1.72 2.44 1.41 118 RCVD_IN_PSBL 1951 0.85 2.37 0.19 119 TR_XM_SpammyWords3 1935 0.99 2.35 0.40 120 MPART_ALT_DIFF_COUNT 1914 1.22 2.32 0.74 121 FROM_EXCESS_BASE64 1899 3.16 2.30 3.53 122 TR_XM_FormFill 1889 0.70 2.29 0.01 123 XM_UB999 1872 0.69 2.27 0.01 124 TR_XM_PHPDW 1864 0.99 2.26 0.43 125 RELAYCOUNTRY_RU 1860 0.71 2.25 0.04 126 T_XMDrugObfuBody_08 1847 1.54 2.24 1.24 127 RCVD_IN_MSPIKE_L3 1807 1.06 2.19 0.57 128 DKIM_INVALID 1802 1.60 2.18 1.35 129 XM_B_Phish66 1791 1.51 2.17 1.22 130 TR_XM_PHPForged 1767 0.90 2.14 0.37 131 TR_XM_FormFill2 1755 0.90 2.13 0.37 132 XM_H_PHPOS 1754 0.89 2.13 0.36 133 RCVD_IN_IADB_LISTED 1742 3.17 2.11 3.63 134 XM_B_Unsub2 1699 1.32 2.06 0.99 135 URI_NOVOWEL 1682 2.03 2.04 2.02 136 XMDiploma_00 1625 1.39 1.97 1.14 137 T_TooManySym_01 1566 5.91 1.90 7.64 138 T_XMDrugObfuBody_00 1550 1.10 1.88 0.76 139 TR_Mismatch_TLD_02 1549 0.62 1.88 0.08 140 TR_XM_Undi_Recip6 1523 0.56 1.85 0.01 141 RCVD_IN_IADB_SPF 1510 2.81 1.83 3.24 142 XMPhish30 1483 1.55 1.80 1.44 143 MAILING_LIST_MULTI 1476 1.90 1.79 1.95 144 XM_URI_RBL 1458 0.60 1.77 0.10 145 FROM_SUSPICIOUS_NTLD 1431 0.58 1.73 0.08 146 HTML_IMAGE_RATIO_08 1430 2.22 1.73 2.43 147 RCVD_IN_IADB_DK 1407 2.50 1.71 2.84 148 RCVD_IN_IADB_SENDERID 1392 2.55 1.69 2.92 149 XM_B_SpammyWords4 1347 0.86 1.63 0.53 150 MONEY_NOHTML 1328 0.53 1.61 0.06 151 ALL_TRUSTED 1322 14.88 1.60 20.63 152 XMBdyGiftCard01 1319 1.50 1.60 1.46 153 FROM_SUSPICIOUS_NTLD_FP 1313 0.54 1.59 0.08 154 URIBL_DBL_SPAM 1299 0.48 1.57 0.01 155 TR_XM_BayesRelay 1271 0.47 1.54 0.01 156 URI_HEX 1265 1.51 1.53 1.50 157 RELAYCOUNTRY_AU 1217 0.58 1.48 0.20 158 TR_XM_SB_Phish 1199 1.52 1.45 1.54 159 XMReplyNow 1188 0.61 1.44 0.25 160 T_XMHurry_00 1177 0.83 1.43 0.58 161 XMStockSpam_06 1169 1.60 1.42 1.67 162 BAYES_40 1167 3.59 1.41 4.53 163 XMSubPhish11 1165 1.50 1.41 1.53 164 RELAYCOUNTRY_GB 1140 0.78 1.38 0.52 165 XM_H_Long_From02 1119 1.08 1.36 0.96 166 RCVD_IN_RP_SAFE 1109 1.37 1.34 1.38 167 XM_ProductURIs 1105 0.90 1.34 0.71 168 TR_Symld_Words 1068 1.29 1.29 1.29 169 LongTLD 1061 0.44 1.29 0.08 170 XM_RXBody 1043 1.14 1.26 1.08 171 TR_Sbj_FN_Bdy 1030 0.44 1.25 0.09 172 XMBrknScrpt_02 1008 0.87 1.22 0.71 173 DKIM_ADSP_CUSTOM_MED 1007 0.93 1.22 0.80 174 TR_XM_Undi_Recip2 997 0.38 1.21 0.02 175 TR_XM_Undi_Recip5 989 0.37 1.20 0.01 176 HTTPS_HTTP_MISMATCH 987 0.68 1.20 0.46 177 TR_XM_Undi_RecipCombo2 978 0.36 1.19 0.00 178 XM_B_REG_HTML 962 0.65 1.17 0.43 179 LOADSA_MONEY_COMBO 951 0.37 1.15 0.03 180 MISSING_HEADERS 937 0.49 1.14 0.21 181 RELAYCOUNTRY_FR 928 0.44 1.12 0.14 182 RCVD_IN_IADB_VOUCHED 926 1.97 1.12 2.34 183 XMSubMetaI_00 892 1.07 1.08 1.07 184 URI_TRY_3LD 877 0.76 1.06 0.63 185 XM_Body_Dirty_Words_01 869 0.72 1.05 0.58 186 XMHTMLBadTable_001 866 0.64 1.05 0.46 187 UNDISC_MONEY 866 0.32 1.05 0.00 188 BAYES_20 864 2.97 1.05 3.81 189 RCVD_IN_RP_CERTIFIED 863 1.23 1.05 1.31 190 TooManyTo_002 863 1.13 1.05 1.16 191 XMSexyCombo_04 843 0.40 1.02 0.13 192 XM_H_PHPMailer 840 0.75 1.02 0.64 193 URG_BIZ 838 0.33 1.02 0.03 194 TR_Mismatch_TLD_01 830 0.50 1.01 0.29 195 TR_BOTNET_NEGATE 830 0.51 1.01 0.29 196 DIET_1 825 0.61 1.00 0.45 197 XFER_LOTSA_MONEY 820 0.30 0.99 0.00 198 URIBL_BLACK 810 0.31 0.98 0.02 199 TooManyTo_003 800 0.89 0.97 0.85 200 XMSubEmpty 783 0.38 0.95 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159640 86.57 93.26 83.68 2 RELAYCOUNTRY_US 147047 78.79 82.75 77.08 3 DKIM_SIGNED 138006 76.38 85.73 72.34 4 XM_DK_Pass 135972 75.09 83.93 71.27 5 DKIM_VALID 135432 74.78 83.55 70.99 6 XM_B_Unicode 128787 70.56 77.62 67.51 7 DCC_CHECK_NEGATIVE 120066 53.81 32.71 62.93 8 DKIM_VALID_AU 113097 61.48 66.57 59.28 9 BAYES_50 101064 48.21 37.20 52.97 10 XMListUnsubscribeExists 97326 55.62 66.28 51.02 11 XM_B_SpammyWords 86571 50.11 61.05 45.38 12 XM_B_Unicode3 82317 43.99 45.94 43.15 13 DCC_CHECK 70678 46.17 67.26 37.05 14 RCVD_IN_MSPIKE_WL 59963 28.92 23.10 31.43 15 HTML_FONT_LOW_CONTRAST 58819 31.09 31.70 30.83 16 DKIM_VALID_EF 50747 27.18 28.54 26.60 17 LOC_TINY_FONT_1 50349 29.15 35.52 26.39 18 FVGT_m_MULTI_ODD 47663 27.21 32.35 24.98 19 MIME_HTML_ONLY 45323 27.30 35.51 23.76 20 XM_B_SpammyWords2 42778 25.78 33.55 22.42 21 T_TM2_M_HEADER_IN_MSG 41855 21.33 19.91 21.94 22 XMSubLong 41014 20.67 18.74 21.50 23 ALL_TRUSTED 39352 14.88 1.60 20.63 24 RCVD_IN_MSPIKE_H2 35615 21.54 28.19 18.67 25 RCVD_IN_MSPIKE_H3 32831 16.90 16.20 17.21 26 USER_IN_DEF_DKIM_WL 32275 12.67 2.85 16.92 27 T_KAM_HTML_FONT_INVALID 32166 18.92 23.67 16.86 28 XM_B_Unsub 27608 14.86 15.76 14.47 29 XM_Multi_Part_URI 24632 13.95 16.37 12.91 30 RCVD_IN_MSPIKE_H4 23916 10.75 6.61 12.54 31 XM_Body_Dirty_Words 22970 15.48 23.43 12.04 32 BAYES_60 21886 10.10 6.91 11.47 33 XM_DKIMWhitelistDomains 20939 7.67 0.02 10.98 34 TooManyTo_001 19785 9.04 5.97 10.37 35 BAYES_00 19183 7.22 0.65 10.06 36 XM_Evil_Numbers_Gen 16622 8.50 8.01 8.71 37 UNPARSEABLE_RELAY 15983 10.53 15.50 8.38 38 XM_DK_Undo_02 15378 19.66 46.49 8.06 39 LotsOfNums_01 15046 7.23 5.71 7.89 40 MIME_QP_LONG_LINE 14696 6.21 2.77 7.70 41 T_TooManySym_01 14571 5.91 1.90 7.64 42 LOTS_OF_MONEY 13345 8.80 12.99 7.00 43 HTML_IMAGE_RATIO_02 13251 7.51 8.83 6.95 44 HTML_IMAGE_RATIO_04 13187 6.31 4.90 6.91 45 TM2_M_URI_OPT_OUT 13110 5.65 2.84 6.87 46 RCVD_IN_VALIDITY_SAFE 13082 6.53 5.76 6.86 47 BAYES_99 12917 16.69 39.65 6.77 48 XM_SendGrid 12758 7.61 9.74 6.69 49 TR_XM_UnparsRelay 12626 9.24 15.31 6.62 50 XMStrtUSub 12294 5.90 4.65 6.44 51 MPART_ALT_DIFF 12286 7.90 11.28 6.44 52 XM_B_SpammyWords3 12068 7.63 10.65 6.33 53 RCVD_IN_VALIDITY_CERTIFIED 11936 5.79 4.72 6.26 54 BOTNET_IPINHOSTNAME 11560 7.64 11.29 6.06 55 TR_XM_DK_Bayes 10867 4.14 0.55 5.70 56 TR_XM_DK_Bayes1 10774 4.11 0.55 5.65 57 IN_ZIMBRA_NJ_WHITELIST 10742 3.95 0.07 5.63 58 BAYES_999 10607 13.40 31.52 5.56 59 XM_H_Long_From01 10463 6.03 7.30 5.48 60 TR_XM_DKIM_Undo 10364 14.26 34.69 5.43 61 BAYES_80 10027 6.10 8.06 5.26 62 TR_XM_DK_Bayes2 9756 3.68 0.35 5.11 63 XMNumbers 9473 4.29 2.73 4.97 64 T_TooManySym_02 9113 3.50 0.55 4.78 65 XMSexyCombo_05 8912 6.97 12.28 4.67 66 MIME_HTML_ONLY_MULTI 8890 6.00 9.09 4.66 67 BAYES_40 8641 3.59 1.41 4.53 68 XM_UncommonTLD01 8427 6.61 11.67 4.42 69 TR_XM_DK_SendGrid 8253 4.97 6.47 4.33 70 TR_XM_SpammyWords4 8059 6.13 10.54 4.22 71 HTML_IMAGE_RATIO_06 8022 3.68 2.47 4.20 72 XMSubMetaSx_00 7475 5.09 7.80 3.92 73 BAYES_20 7261 2.97 1.05 3.81 74 SHORT_URI_2 7251 2.83 0.58 3.80 75 XM_B_Phish_Phrases 7095 3.94 4.45 3.72 76 INVALID_MSGID 6942 2.60 0.20 3.64 77 RCVD_IN_IADB_LISTED 6931 3.17 2.11 3.63 78 FROM_EXCESS_BASE64 6727 3.16 2.30 3.53 79 FSL_BULK_SIG 6673 6.38 13.05 3.50 80 MSGID_NOFQDN1 6626 2.45 0.09 3.47 81 XM_H_Trusted_IP 6593 2.41 0.00 3.46 82 TR_XM_PhishingBody 6231 3.95 5.53 3.27 83 RELAYCOUNTRY_META 6205 9.18 22.88 3.25 84 RCVD_IN_IADB_SPF 6179 2.81 1.83 3.24 85 HTML_MIME_NO_HTML_TAG 6125 4.42 7.22 3.21 86 BAYES_95 6030 3.58 4.53 3.16 87 TO_MALFORMED 6009 2.21 0.04 3.15 88 TVD_RCVD_IP 5931 2.28 0.36 3.11 89 BOUNCE_MESSAGE 5837 2.36 0.75 3.06 90 ANY_BOUNCE_MESSAGE 5837 2.37 0.76 3.06 91 T_REMOTE_IMAGE 5622 3.49 4.74 2.95 92 RCVD_IN_IADB_SENDERID 5565 2.55 1.69 2.92 93 RCVD_IN_IADB_DK 5418 2.50 1.71 2.84 94 TM2_M_VERY_LONG_WORD 5178 4.76 9.49 2.71 95 XM_GoogleGroups 5069 4.06 7.30 2.66 96 TR_DCC_Bayes_99 4915 10.11 27.53 2.58 97 T_XMDrugObfuBody_14 4804 2.91 3.81 2.52 98 HTML_IMAGE_RATIO_08 4637 2.22 1.73 2.43 99 XM_PDF 4632 1.83 0.44 2.43 100 RCVD_IN_IADB_VOUCHED 4456 1.97 1.12 2.34 101 MIME_HTML_MOSTLY 4444 2.58 3.16 2.33 102 IN_HORDE_ADDRESS_BOOK 4124 1.53 0.07 2.16 103 XMLngstWrd_00 3892 3.60 7.22 2.04 104 URI_NOVOWEL 3852 2.03 2.04 2.02 105 XM_B_SpammyTLD 3799 3.17 5.90 1.99 106 BAYES_05 3768 1.54 0.52 1.98 107 XMLngstWrd_01 3764 3.52 7.10 1.97 108 MAILING_LIST_MULTI 3728 1.90 1.79 1.95 109 XMBSHREFv2 3621 1.37 0.16 1.90 110 XMLngstWrd_02 3586 3.43 7.02 1.88 111 XMLngstWrd_03 3432 3.22 6.52 1.80 112 XMGappySubj_01 3419 1.29 0.12 1.79 113 XMLngstWrd_04 3310 3.15 6.42 1.73 114 XM_SPF_SoftFail 3277 2.68 4.90 1.72 115 XM_CamelCaseFrm001 3270 1.94 2.47 1.71 116 RCVD_IN_MSPIKE_H5 3216 1.26 0.29 1.69 117 XMStockSpam_06 3191 1.60 1.42 1.67 118 TVD_SPACE_RATIO 3097 1.17 0.11 1.62 119 RCVD_IN_IADB_OPTIN 3093 1.35 0.72 1.62 120 HTML_TITLE_SUBJ_DIFF 3058 2.98 6.16 1.60 121 TR_XM_SB_Phish 2946 1.52 1.45 1.54 122 XMSubPhish11 2923 1.50 1.41 1.53 123 URI_HEX 2856 1.51 1.53 1.50 124 BOTNET 2835 4.16 10.35 1.49 125 TR_XM_SpammyWords5 2831 1.92 2.94 1.48 126 XMBdyGiftCard01 2793 1.50 1.60 1.46 127 XMPhish30 2747 1.55 1.80 1.44 128 XM_DK_Undo_01 2688 1.72 2.44 1.41 129 RCVD_IN_RP_SAFE 2639 1.37 1.34 1.38 130 TR_XM_SpammyWords2 2580 4.85 12.93 1.35 131 DKIM_INVALID 2574 1.60 2.18 1.35 132 UPPERCASE_75_100 2517 3.01 6.93 1.32 133 TR_XM_SpammyRelay 2509 4.07 10.44 1.32 134 RCVD_IN_RP_CERTIFIED 2500 1.23 1.05 1.31 135 UNTRUSTED_Relay 2475 3.92 10.00 1.30 136 XMSubNoVowel 2466 1.69 2.62 1.29 137 TR_Symld_Words 2461 1.29 1.29 1.29 138 XM_B_Investor 2400 1.86 3.26 1.26 139 T_XMDrugObfuBody_08 2375 1.54 2.24 1.24 140 XM_B_Phish66 2335 1.51 2.17 1.22 141 HTML_FONT_FACE_BAD 2273 1.05 0.72 1.19 142 SUBJ_ALL_CAPS 2255 1.63 2.67 1.18 143 KHOP_HELO_FCRDNS 2235 1.75 3.10 1.17 144 TooManyTo_002 2221 1.13 1.05 1.16 145 XMDiploma_00 2168 1.39 1.97 1.14 146 XM_RXBody 2064 1.14 1.26 1.08 147 T_TooManySym_03 2036 0.83 0.27 1.07 148 XMSubMetaI_00 2034 1.07 1.08 1.07 149 RCVD_IN_MSPIKE_BL 2000 2.80 6.86 1.05 150 TR_XM_MSPIKECOMBO 2000 2.79 6.81 1.05 151 XM_OfRef6 1956 1.57 2.82 1.03 152 XM_B_Unsub2 1898 1.32 2.06 0.99 153 XM_H_Long_From02 1830 1.08 1.36 0.96 154 HTML_IMAGE_ONLY_20 1766 0.72 0.23 0.93 155 XMBody_106 1761 0.65 0.03 0.92 156 XM_B_COPY_HTML 1755 0.88 0.80 0.92 157 T_MANY_PILL_PRICE 1746 0.64 0.02 0.92 158 RELAYCOUNTRY_CA 1681 2.29 5.54 0.88 159 XMBody_95 1646 0.63 0.09 0.86 160 TooManyTo_003 1623 0.89 0.97 0.85 161 TR_XM_MaxUnsub 1569 3.21 8.74 0.82 162 DKIM_ADSP_CUSTOM_MED 1523 0.93 1.22 0.80 163 SHORTENED_URL_HREF 1491 0.62 0.25 0.78 164 TR_MetaPhish_Combo_01 1478 0.81 0.91 0.77 165 XM_UB50 1457 1.86 4.39 0.76 166 T_XMDrugObfuBody_00 1456 1.10 1.88 0.76 167 MPART_ALT_DIFF_COUNT 1408 1.22 2.32 0.74 168 XMBrknScrpt_02 1363 0.87 1.22 0.71 169 XM_shorewaves_Whitelist 1357 0.50 0.00 0.71 170 XM_ProductURIs 1353 0.90 1.34 0.71 171 TooManyTo_004 1334 0.77 0.92 0.70 172 RCVD_IN_BL_SPAMCOP_NET 1327 3.99 11.62 0.70 173 TR_MSPIKEBAYES00 1271 0.47 0.01 0.67 174 XMSexyCombo_01 1248 1.35 2.97 0.65 175 USER_IN_WHITELIST 1229 0.45 0.00 0.64 176 USER_IN_WELCOMELIST 1229 0.45 0.00 0.64 177 XM_H_PHPMailer 1218 0.75 1.02 0.64 178 URI_TRY_3LD 1210 0.76 1.06 0.63 179 XMSubMetaSxObfu_02 1159 0.51 0.28 0.61 180 TooManyTo_005 1143 0.68 0.86 0.60 181 RDNS_DYNAMIC 1131 0.65 0.77 0.59 182 T_XMHurry_00 1102 0.83 1.43 0.58 183 XM_Body_Dirty_Words_01 1101 0.72 1.05 0.58 184 RCVD_IN_MSPIKE_L3 1093 1.06 2.19 0.57 185 XMHTML_After_End 1088 0.65 0.83 0.57 186 HTML_TAG_BALANCE_BODY 1048 0.67 0.94 0.55 187 SHORT_URI_3 1048 0.42 0.11 0.55 188 XMGenDplmaNmb 1005 0.64 0.89 0.53 189 XM_B_SpammyWords4 1002 0.86 1.63 0.53 190 NUMERIC_HTTP_ADDR 998 0.60 0.79 0.52 191 RELAYCOUNTRY_GB 991 0.78 1.38 0.52 192 T_FILL_THIS_FORM_SHORT 981 1.39 3.41 0.51 193 XM_D_tchamptons_WL 957 0.35 0.00 0.50 194 T_TooManySym_04 905 0.39 0.20 0.47 195 NML_ADSP_CUSTOM_MED 893 0.59 0.86 0.47 196 XMHTMLBadTable_001 880 0.64 1.05 0.46 197 PRICES_ARE_AFFORDABLE 878 0.39 0.24 0.46 198 HTTPS_HTTP_MISMATCH 875 0.68 1.20 0.46 199 HELO_NODOT 866 0.51 0.63 0.45 200 HELO_NO_DOMAIN 864 0.50 0.62 0.45 ----------------------------------------------------------------------