Email: 260978 Autolearn: 0 AvgScore: 2.95 AvgScanTime: 1.28 sec Spam: 81583 Autolearn: 0 AvgScore: 14.25 AvgScanTime: 1.34 sec Ham: 179395 Autolearn: 0 AvgScore: -2.19 AvgScanTime: 1.25 sec Time Spent Running SA: 92.52 hours Time Spent Processing Spam: 30.26 hours Time Spent Processing Ham: 62.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 75108 85.46 92.06 82.46 2 DKIM_SIGNED 70713 79.47 86.68 76.19 3 XM_DK_Pass 69498 78.16 85.19 74.96 4 DKIM_VALID 69101 77.74 84.70 74.58 5 RELAYCOUNTRY_US 68290 81.62 83.71 80.67 6 XM_B_Unicode 61154 71.79 74.96 70.35 7 XMListUnsubscribeExists 58582 60.30 71.81 55.07 8 DCC_CHECK 54532 48.49 66.84 40.14 9 DKIM_VALID_AU 54198 63.29 66.43 61.86 10 XM_B_SpammyWords 48146 48.32 59.01 43.45 11 XM_DK_Undo_02 36559 20.91 44.81 10.04 12 XM_B_Unicode3 35387 45.42 43.38 46.35 13 BAYES_50 33244 50.19 40.75 54.48 14 BAYES_99 30851 17.87 37.82 8.80 15 MIME_HTML_ONLY 29841 27.29 36.58 23.06 16 LOC_TINY_FONT_1 28885 29.37 35.41 26.63 17 TR_XM_DKIM_Undo 28622 15.81 35.08 7.04 18 FVGT_m_MULTI_ODD 28441 28.12 34.86 25.05 19 DCC_CHECK_NEGATIVE 27024 51.49 33.12 59.84 20 XM_B_SpammyWords2 26605 22.92 32.61 18.52 21 HTML_FONT_LOW_CONTRAST 25234 30.44 30.93 30.22 22 BAYES_999 24694 14.50 30.27 7.33 23 RCVD_IN_MSPIKE_H2 23650 21.98 28.99 18.79 24 DKIM_VALID_EF 22198 27.46 27.21 27.57 25 TR_DCC_Bayes_99 21861 11.46 26.80 4.48 26 XM_Body_Dirty_Words 20067 16.67 24.60 13.07 27 RELAYCOUNTRY_META 19153 9.79 23.48 3.57 28 RCVD_IN_MSPIKE_WL 18899 30.00 23.17 33.11 29 T_KAM_HTML_FONT_INVALID 18582 18.82 22.78 17.03 30 XMSubLong 15690 20.79 19.23 21.50 31 XM_Multi_Part_URI 14680 15.39 17.99 14.21 32 T_TM2_M_HEADER_IN_MSG 14592 20.63 17.89 21.88 33 UNPARSEABLE_RELAY 13571 11.44 16.63 9.08 34 RCVD_IN_MSPIKE_H3 13485 17.77 16.53 18.34 35 TR_XM_UnparsRelay 13330 10.19 16.34 7.39 36 MPART_ALT_DIFF 11142 9.19 13.66 7.16 37 XMSexyCombo_05 10975 7.40 13.45 4.65 38 XM_B_Unsub 10793 10.95 13.23 9.92 39 TR_XM_SpammyWords2 10656 5.98 13.06 2.76 40 BOTNET 9894 4.87 12.13 1.56 41 TM2_M_VERY_LONG_WORD 9592 5.90 11.76 3.24 42 BOTNET_IPINHOSTNAME 9490 8.25 11.63 6.72 43 MIME_HTML_ONLY_MULTI 9203 7.31 11.28 5.50 44 XM_UncommonTLD01 8958 6.73 10.98 4.80 45 XM_B_SpammyWords3 8883 6.03 10.89 3.82 46 RCVD_IN_BL_SPAMCOP_NET 8754 4.00 10.73 0.94 47 TR_XM_SpammyRelay 8741 4.33 10.71 1.43 48 FSL_BULK_SIG 8641 5.78 10.59 3.59 49 HTML_IMAGE_RATIO_02 7895 8.78 9.68 8.36 50 XM_SendGrid 7844 7.77 9.61 6.93 51 HTML_MIME_NO_HTML_TAG 7678 5.18 9.41 3.25 52 LOTS_OF_MONEY 7549 6.80 9.25 5.69 53 UNTRUSTED_Relay 7384 3.79 9.05 1.40 54 XM_GoogleGroups 7372 4.98 9.04 3.14 55 XMLngstWrd_00 7227 4.68 8.86 2.78 56 XMLngstWrd_01 7123 4.59 8.73 2.70 57 XMLngstWrd_02 7098 4.51 8.70 2.61 58 XMLngstWrd_03 7061 4.42 8.65 2.50 59 XM_Evil_Numbers_Gen 7051 9.41 8.64 9.76 60 XMLngstWrd_04 7020 4.35 8.60 2.42 61 HTML_TITLE_SUBJ_DIFF 6868 4.07 8.42 2.09 62 UPPERCASE_75_100 6849 3.99 8.40 1.98 63 TR_XM_SpammyWords4 6318 4.95 7.74 3.68 64 BAYES_80 5919 5.57 7.26 4.80 65 RELAYCOUNTRY_CA 5680 2.78 6.96 0.88 66 XM_H_Long_From01 5532 5.86 6.78 5.45 67 BAYES_60 5188 10.17 6.36 11.91 68 TR_XM_MaxUnsub 5160 2.50 6.32 0.77 69 RCVD_IN_MSPIKE_H4 5124 10.58 6.28 12.53 70 TR_XM_PhishingBody 4981 4.09 6.11 3.18 71 RCVD_IN_VALIDITY_SAFE 4863 7.55 5.96 8.28 72 LotsOfNums_01 4688 8.71 5.75 10.05 73 XM_DIRTYINTL 4654 2.03 5.70 0.36 74 TR_XM_SPAMCOP 4632 1.99 5.68 0.31 75 RCVD_IN_MSPIKE_BL 4587 2.35 5.62 0.86 76 XMSubMetaSx_00 4583 5.07 5.62 4.82 77 TR_XM_MSPIKECOMBO 4472 2.30 5.48 0.86 78 XM_B_Phish_Phrases 4439 3.75 5.44 2.97 79 TR_XM_DK_SendGrid 4397 4.66 5.39 4.32 80 HTML_IMAGE_RATIO_04 4049 6.61 4.96 7.36 81 TooManyTo_001 4007 5.77 4.91 6.17 82 RCVD_IN_VALIDITY_CERTIFIED 3956 6.53 4.85 7.30 83 XMNumbers 3936 5.73 4.82 6.14 84 XMStrtUSub 3757 5.31 4.61 5.63 85 T_XMDrugObfuBody_08 3742 2.30 4.59 1.26 86 XM_B_Investor 3738 2.33 4.58 1.31 87 T_XMDrugObfuBody_14 3701 3.25 4.54 2.66 88 BAYES_95 3692 3.67 4.53 3.28 89 T_REMOTE_IMAGE 3690 3.35 4.52 2.81 90 XM_B_SpammyTLD 3620 2.80 4.44 2.06 91 XM_SPF_SoftFail 3476 2.53 4.26 1.75 92 XM_OfRef6 3475 1.92 4.26 0.85 93 SpammyFromTLD_01 3299 1.53 4.04 0.38 94 RCVD_IN_VALIDITY_RPBL 3237 1.26 3.97 0.02 95 TR_XM_SpammyWords5 3122 2.58 3.83 2.01 96 SpammyFromTLD_02 3112 1.36 3.81 0.24 97 BOTNET_NORDNS 2981 1.17 3.65 0.04 98 MIME_HTML_MOSTLY 2929 2.59 3.59 2.13 99 HTML_IMAGE_RATIO_06 2801 4.50 3.43 4.99 100 XM_UB50 2570 1.56 3.15 0.84 101 XM_DK_Undo_01 2530 1.76 3.10 1.15 102 USER_IN_DEF_DKIM_WL 2445 12.68 3.00 17.08 103 PDS_OTHER_BAD_TLD 2358 1.10 2.89 0.29 104 XMBdyGiftCard01 2331 2.79 2.86 2.75 105 XMDiploma_00 2318 1.77 2.84 1.28 106 RCVD_IN_MSPIKE_L3 2228 1.15 2.73 0.43 107 XM_CamelCaseFrm001 2197 1.94 2.69 1.60 108 XM_B_Phish66 2120 1.62 2.60 1.18 109 TR_XM_SpammyWords3 2114 1.10 2.59 0.42 110 TR_XM_MSPIKECOMBO2 2111 0.90 2.59 0.13 111 TM2_M_URI_OPT_OUT 2058 2.60 2.52 2.63 112 T_FILL_THIS_FORM_SHORT 2048 1.11 2.51 0.47 113 XM_B_SpammyWords4 2033 1.11 2.49 0.48 114 XM_UB99 1999 0.77 2.45 0.00 115 XMBrknScrpt_02 1945 1.49 2.38 1.08 116 FROM_EXCESS_BASE64 1925 3.01 2.36 3.31 117 RCVD_IN_PSBL 1907 0.92 2.34 0.28 118 MIME_QP_LONG_LINE 1878 3.31 2.30 3.77 119 TR_XM_PHPDW 1873 1.00 2.30 0.42 120 T_XMDrugObfuBody_00 1868 1.16 2.29 0.64 121 T_TooManySym_01 1838 6.37 2.25 8.24 122 TR_XM_PHPForged 1770 0.90 2.17 0.33 123 TR_XM_FormFill2 1759 0.90 2.16 0.32 124 XM_H_PHPOS 1745 0.89 2.14 0.31 125 XMGppyBdWords 1742 0.77 2.14 0.14 126 XMBody_17 1689 1.01 2.07 0.53 127 RCVD_IN_IADB_LISTED 1628 3.37 2.00 3.99 128 DKIM_INVALID 1612 1.73 1.98 1.61 129 KHOP_HELO_FCRDNS 1589 1.47 1.95 1.25 130 RCVD_IN_MSPIKE_L5 1555 0.61 1.91 0.02 131 XM_Body_Dirty_Words_01 1543 0.70 1.89 0.16 132 HTML_IMAGE_RATIO_08 1529 1.90 1.87 1.91 133 XM_H_Undi_Recip 1482 0.68 1.82 0.16 134 TR_XM_FormFill 1471 0.57 1.80 0.01 135 XM_UB999 1467 0.56 1.80 0.00 136 XM_B_Unsub2 1447 1.35 1.77 1.16 137 TR_XM_NoHeaderRelay 1436 0.66 1.76 0.16 138 URI_NOVOWEL 1400 1.79 1.72 1.82 139 SUBJ_ALL_CAPS 1372 1.21 1.68 1.00 140 XMSubMetaD_00 1345 0.56 1.65 0.06 141 RELAYCOUNTRY_AU 1326 0.63 1.63 0.18 142 RELAYCOUNTRY_RU 1320 0.53 1.62 0.04 143 XM_OfRef7 1316 0.66 1.61 0.23 144 RCVD_IN_IADB_SPF 1312 3.02 1.61 3.67 145 TR_XM_BayesRelay 1310 0.51 1.61 0.01 146 T_XMHurry_00 1308 1.20 1.60 1.02 147 TR_Mismatch_TLD_02 1295 0.55 1.59 0.08 148 MAILING_LIST_MULTI 1293 2.10 1.58 2.34 149 XMSexyCombo_01 1287 1.71 1.58 1.77 150 TR_Symld_Words 1287 1.64 1.58 1.66 151 XMObfuSubjects 1257 0.49 1.54 0.01 152 RCVD_IN_RP_SAFE 1256 1.51 1.54 1.49 153 URIBL_SBL_A 1245 0.49 1.53 0.02 154 XMPhish30 1241 1.35 1.52 1.27 155 TM2_M_A_HREF_HREF 1239 0.76 1.52 0.41 156 XMSubMetaI_00 1229 1.18 1.51 1.04 157 RCVD_IN_IADB_DK 1224 2.71 1.50 3.26 158 XMStockSpam_06 1216 1.70 1.49 1.80 159 SHOPIFY_IMG_NOT_RCVD_SFY 1212 0.69 1.49 0.33 160 FROM_2_EMAILS_SHORT 1210 0.47 1.48 0.00 161 RCVD_IN_IADB_SENDERID 1196 2.78 1.47 3.38 162 XMSubMetaD_01 1188 0.46 1.46 0.01 163 T_Symld_Words_02 1185 0.58 1.45 0.19 164 FROM_SUSPICIOUS_NTLD 1179 0.50 1.45 0.07 165 HTML_TAG_BALANCE_BODY 1170 0.79 1.43 0.49 166 BODY_URI_ONLY 1162 0.45 1.42 0.01 167 XM_ProductURIs 1161 0.93 1.42 0.71 168 PDS_TO_EQ_FROM_NAME 1158 0.45 1.42 0.00 169 NAME_EMAIL_DIFF 1149 0.48 1.41 0.06 170 XM_URI_RBL 1145 0.52 1.40 0.11 171 TR_XM_MaxSPIKE 1138 0.45 1.39 0.02 172 FROM_SUSPICIOUS_NTLD_FP 1134 0.48 1.39 0.07 173 ALL_TRUSTED 1125 12.06 1.38 16.91 174 XMSubject_38 1124 0.43 1.38 0.00 175 DRUGS_ERECTILE 1111 0.43 1.36 0.01 176 FROM_MULTI_NORDNS 1091 0.42 1.34 0.00 177 XMClaimOffer 1088 0.47 1.33 0.08 178 TR_MetaPhish_Combo_01 1045 0.96 1.28 0.82 179 TR_XM_SpoofStaff 1036 0.52 1.27 0.18 180 LONG_JUNK_URI 1027 0.42 1.26 0.03 181 URI_HEX 1027 1.42 1.26 1.49 182 XMSpoofStaff2 1025 0.51 1.26 0.18 183 GOOGLE_DOC_SUSP 1019 0.39 1.25 0.00 184 RCVD_IN_RP_CERTIFIED 998 1.29 1.22 1.32 185 BAYES_40 991 2.94 1.21 3.72 186 THIS_AD 986 0.81 1.21 0.63 187 XMPhish08 974 0.49 1.19 0.18 188 TR_XM_SB_Phish 971 1.26 1.19 1.29 189 XM_H_Long_From02 971 1.57 1.19 1.74 190 TVD_SPACE_RATIO_MINFP 966 0.66 1.18 0.42 191 RELAYCOUNTRY_GB 960 0.74 1.18 0.54 192 TR_XM_RelayPhish 958 0.40 1.17 0.05 193 TR_Mismatch_TLD_01 950 0.55 1.16 0.27 194 RCVD_IN_IADB_VOUCHED 950 2.06 1.16 2.47 195 XMBody_29 949 0.42 1.16 0.08 196 XMSubMetaD_02 942 0.36 1.15 0.00 197 TVD_SPACE_RATIO 926 1.59 1.14 1.79 198 XM_RXBody 916 1.45 1.12 1.60 199 XM_B_REG_HTML 915 0.68 1.12 0.48 200 XMSubPhish11 904 1.23 1.11 1.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147935 85.46 92.06 82.46 2 RELAYCOUNTRY_US 144717 81.62 83.71 80.67 3 DKIM_SIGNED 136684 79.47 86.68 76.19 4 XM_DK_Pass 134474 78.16 85.19 74.96 5 DKIM_VALID 133791 77.74 84.70 74.58 6 XM_B_Unicode 126203 71.79 74.96 70.35 7 DKIM_VALID_AU 110967 63.29 66.43 61.86 8 DCC_CHECK_NEGATIVE 107344 51.49 33.12 59.84 9 XMListUnsubscribeExists 98798 60.30 71.81 55.07 10 BAYES_50 97733 50.19 40.75 54.48 11 XM_B_Unicode3 83144 45.42 43.38 46.35 12 XM_B_SpammyWords 77946 48.32 59.01 43.45 13 DCC_CHECK 72004 48.49 66.84 40.14 14 RCVD_IN_MSPIKE_WL 59403 30.00 23.17 33.11 15 HTML_FONT_LOW_CONTRAST 54218 30.44 30.93 30.22 16 DKIM_VALID_EF 49461 27.46 27.21 27.57 17 LOC_TINY_FONT_1 47773 29.37 35.41 26.63 18 FVGT_m_MULTI_ODD 44933 28.12 34.86 25.05 19 MIME_HTML_ONLY 41369 27.29 36.58 23.06 20 T_TM2_M_HEADER_IN_MSG 39248 20.63 17.89 21.88 21 XMSubLong 38565 20.79 19.23 21.50 22 RCVD_IN_MSPIKE_H2 33706 21.98 28.99 18.79 23 XM_B_SpammyWords2 33216 22.92 32.61 18.52 24 RCVD_IN_MSPIKE_H3 32899 17.77 16.53 18.34 25 USER_IN_DEF_DKIM_WL 30636 12.68 3.00 17.08 26 T_KAM_HTML_FONT_INVALID 30543 18.82 22.78 17.03 27 ALL_TRUSTED 30337 12.06 1.38 16.91 28 XM_Multi_Part_URI 25488 15.39 17.99 14.21 29 XM_Body_Dirty_Words 23446 16.67 24.60 13.07 30 RCVD_IN_MSPIKE_H4 22487 10.58 6.28 12.53 31 XM_DKIMWhitelistDomains 21389 8.21 0.06 11.92 32 BAYES_60 21360 10.17 6.36 11.91 33 LotsOfNums_01 18035 8.71 5.75 10.05 34 XM_DK_Undo_02 18010 20.91 44.81 10.04 35 XM_B_Unsub 17797 10.95 13.23 9.92 36 XM_Evil_Numbers_Gen 17510 9.41 8.64 9.76 37 UNPARSEABLE_RELAY 16295 11.44 16.63 9.08 38 BAYES_99 15790 17.87 37.82 8.80 39 BAYES_00 15656 6.20 0.65 8.73 40 HTML_IMAGE_RATIO_02 15006 8.78 9.68 8.36 41 RCVD_IN_VALIDITY_SAFE 14849 7.55 5.96 8.28 42 T_TooManySym_01 14789 6.37 2.25 8.24 43 TR_XM_UnparsRelay 13254 10.19 16.34 7.39 44 HTML_IMAGE_RATIO_04 13206 6.61 4.96 7.36 45 BAYES_999 13149 14.50 30.27 7.33 46 RCVD_IN_VALIDITY_CERTIFIED 13087 6.53 4.85 7.30 47 MPART_ALT_DIFF 12843 9.19 13.66 7.16 48 TR_XM_DKIM_Undo 12627 15.81 35.08 7.04 49 XM_SendGrid 12428 7.77 9.61 6.93 50 BOTNET_IPINHOSTNAME 12051 8.25 11.63 6.72 51 TooManyTo_001 11061 5.77 4.91 6.17 52 XMNumbers 11021 5.73 4.82 6.14 53 TR_XM_DK_Bayes 10867 4.34 0.58 6.06 54 TR_XM_DK_Bayes1 10787 4.31 0.58 6.01 55 LOTS_OF_MONEY 10204 6.80 9.25 5.69 56 XMStrtUSub 10106 5.31 4.61 5.63 57 TR_XM_DK_Bayes2 9892 3.94 0.47 5.51 58 IN_ZIMBRA_NJ_WHITELIST 9876 3.81 0.09 5.51 59 MIME_HTML_ONLY_MULTI 9863 7.31 11.28 5.50 60 XM_H_Long_From01 9772 5.86 6.78 5.45 61 T_TooManySym_02 9385 3.78 0.60 5.23 62 HTML_IMAGE_RATIO_06 8949 4.50 3.43 4.99 63 XMSubMetaSx_00 8654 5.07 5.62 4.82 64 BAYES_80 8612 5.57 7.26 4.80 65 XM_UncommonTLD01 8606 6.73 10.98 4.80 66 XMSexyCombo_05 8338 7.40 13.45 4.65 67 TR_DCC_Bayes_99 8045 11.46 26.80 4.48 68 TR_XM_DK_SendGrid 7758 4.66 5.39 4.32 69 RCVD_IN_IADB_LISTED 7161 3.37 2.00 3.99 70 XM_B_SpammyWords3 6857 6.03 10.89 3.82 71 INVALID_MSGID 6783 2.64 0.14 3.78 72 MIME_QP_LONG_LINE 6763 3.31 2.30 3.77 73 XM_H_Trusted_IP 6743 2.58 0.00 3.76 74 BAYES_40 6673 2.94 1.21 3.72 75 TR_XM_SpammyWords4 6609 4.95 7.74 3.68 76 RCVD_IN_IADB_SPF 6579 3.02 1.61 3.67 77 MSGID_NOFQDN1 6536 2.51 0.03 3.64 78 FSL_BULK_SIG 6434 5.78 10.59 3.59 79 RELAYCOUNTRY_META 6405 9.79 23.48 3.57 80 BOUNCE_MESSAGE 6181 2.56 0.60 3.45 81 ANY_BOUNCE_MESSAGE 6181 2.56 0.61 3.45 82 RCVD_IN_IADB_SENDERID 6071 2.78 1.47 3.38 83 TO_MALFORMED 6022 2.31 0.00 3.36 84 TVD_RCVD_IP 5947 2.37 0.29 3.32 85 FROM_EXCESS_BASE64 5933 3.01 2.36 3.31 86 BAYES_95 5879 3.67 4.53 3.28 87 RCVD_IN_IADB_DK 5848 2.71 1.50 3.26 88 HTML_MIME_NO_HTML_TAG 5830 5.18 9.41 3.25 89 TM2_M_VERY_LONG_WORD 5815 5.90 11.76 3.24 90 TR_XM_PhishingBody 5702 4.09 6.11 3.18 91 XM_GoogleGroups 5628 4.98 9.04 3.14 92 XM_B_Phish_Phrases 5335 3.75 5.44 2.97 93 T_REMOTE_IMAGE 5049 3.35 4.52 2.81 94 XMLngstWrd_00 4984 4.68 8.86 2.78 95 TR_XM_SpammyWords2 4953 5.98 13.06 2.76 96 XMBdyGiftCard01 4942 2.79 2.86 2.75 97 XMLngstWrd_01 4843 4.59 8.73 2.70 98 T_XMDrugObfuBody_14 4774 3.25 4.54 2.66 99 TM2_M_URI_OPT_OUT 4722 2.60 2.52 2.63 100 XMLngstWrd_02 4676 4.51 8.70 2.61 101 BAYES_20 4582 2.05 0.93 2.55 102 XMLngstWrd_03 4482 4.42 8.65 2.50 103 RCVD_IN_IADB_VOUCHED 4431 2.06 1.16 2.47 104 XMLngstWrd_04 4338 4.35 8.60 2.42 105 MAILING_LIST_MULTI 4191 2.10 1.58 2.34 106 RCVD_IN_MSPIKE_H5 4017 1.65 0.36 2.24 107 MIME_HTML_MOSTLY 3828 2.59 3.59 2.13 108 IN_HORDE_ADDRESS_BOOK 3824 1.58 0.37 2.13 109 HTML_TITLE_SUBJ_DIFF 3741 4.07 8.42 2.09 110 XM_B_SpammyTLD 3692 2.80 4.44 2.06 111 TR_XM_SpammyWords5 3600 2.58 3.83 2.01 112 UPPERCASE_75_100 3556 3.99 8.40 1.98 113 HTML_IMAGE_RATIO_08 3426 1.90 1.87 1.91 114 XMBSHREFv2 3343 1.33 0.15 1.86 115 URI_NOVOWEL 3265 1.79 1.72 1.82 116 XM_PDF 3236 1.34 0.31 1.80 117 XMStockSpam_06 3226 1.70 1.49 1.80 118 TVD_SPACE_RATIO 3217 1.59 1.14 1.79 119 XMSexyCombo_01 3169 1.71 1.58 1.77 120 XM_SPF_SoftFail 3136 2.53 4.26 1.75 121 XM_H_Long_From02 3130 1.57 1.19 1.74 122 BAYES_05 3107 1.34 0.49 1.73 123 XMGappySubj_01 3102 1.21 0.06 1.73 124 RCVD_IN_IADB_OPTIN 3033 1.36 0.63 1.69 125 TR_Symld_Words 2986 1.64 1.58 1.66 126 DKIM_INVALID 2893 1.73 1.98 1.61 127 XM_RXBody 2879 1.45 1.12 1.60 128 XM_CamelCaseFrm001 2863 1.94 2.69 1.60 129 BOTNET 2804 4.87 12.13 1.56 130 RCVD_IN_RP_SAFE 2674 1.51 1.54 1.49 131 URI_HEX 2667 1.42 1.26 1.49 132 XMSubMetaSxObfu_03 2634 1.22 0.66 1.47 133 TR_XM_SpammyRelay 2560 4.33 10.71 1.43 134 XMSubNoVowel 2553 1.25 0.86 1.42 135 UNTRUSTED_Relay 2507 3.79 9.05 1.40 136 RCVD_IN_RP_CERTIFIED 2369 1.29 1.22 1.32 137 XM_B_Investor 2345 2.33 4.58 1.31 138 TR_XM_SB_Phish 2311 1.26 1.19 1.29 139 XMSubPhish11 2296 1.23 1.11 1.28 140 XMDiploma_00 2296 1.77 2.84 1.28 141 XMPhish30 2285 1.35 1.52 1.27 142 T_TooManySym_03 2281 0.96 0.28 1.27 143 T_XMDrugObfuBody_08 2255 2.30 4.59 1.26 144 KHOP_HELO_FCRDNS 2240 1.47 1.95 1.25 145 XM_B_Phish66 2113 1.62 2.60 1.18 146 XM_B_Unsub2 2086 1.35 1.77 1.16 147 XM_DK_Undo_01 2066 1.76 3.10 1.15 148 TooManyTo_002 2065 1.00 0.65 1.15 149 HTML_FONT_FACE_BAD 2037 1.00 0.69 1.14 150 XMSexyCombo_04 1944 0.94 0.61 1.08 151 XMBrknScrpt_02 1941 1.49 2.38 1.08 152 XM_B_COPY_HTML 1928 1.06 1.03 1.07 153 HTML_IMAGE_ONLY_20 1922 0.87 0.43 1.07 154 XMSubMetaI_00 1858 1.18 1.51 1.04 155 T_XMHurry_00 1834 1.20 1.60 1.02 156 SUBJ_ALL_CAPS 1790 1.21 1.68 1.00 157 RCVD_IN_BL_SPAMCOP_NET 1683 4.00 10.73 0.94 158 DKIM_ADSP_CUSTOM_MED 1578 0.94 1.06 0.88 159 RELAYCOUNTRY_CA 1575 2.78 6.96 0.88 160 TooManyTo_003 1539 0.77 0.59 0.86 161 RCVD_IN_MSPIKE_BL 1536 2.35 5.62 0.86 162 TR_XM_MSPIKECOMBO 1535 2.30 5.48 0.86 163 XM_OfRef6 1527 1.92 4.26 0.85 164 LOW_PRICE 1509 0.72 0.46 0.84 165 XM_UB50 1503 1.56 3.15 0.84 166 TR_MetaPhish_Combo_01 1468 0.96 1.28 0.82 167 MPART_ALT_DIFF_COUNT 1460 0.85 0.92 0.81 168 XM_shorewaves_Whitelist 1452 0.56 0.00 0.81 169 XMBody_95 1380 0.56 0.12 0.77 170 TR_XM_MaxUnsub 1375 2.50 6.32 0.77 171 XM_ProductURIs 1268 0.93 1.42 0.71 172 TooManyTo_004 1203 0.64 0.57 0.67 173 BODY_ENHANCEMENT2 1162 0.45 0.01 0.65 174 T_XMDrugObfuBody_00 1147 1.16 2.29 0.64 175 HTTPS_HTTP_MISMATCH 1138 0.67 0.74 0.63 176 THIS_AD 1127 0.81 1.21 0.63 177 TR_MSPIKEBAYES00 1123 0.43 0.01 0.63 178 USER_IN_WHITELIST 1106 0.42 0.00 0.62 179 USER_IN_WELCOMELIST 1106 0.42 0.00 0.62 180 RDNS_DYNAMIC 1104 0.68 0.81 0.62 181 XM_B_COVIDMETA 1084 0.58 0.53 0.60 182 XM_H_PHPMailer 1080 0.71 0.95 0.60 183 T_TooManySym_04 1063 0.47 0.21 0.59 184 TooManyTo_005 1015 0.56 0.53 0.57 185 XMHTMLBadTable_001 1007 0.70 1.01 0.56 186 URI_TRY_3LD 990 0.63 0.80 0.55 187 XMSubMetaSxObfu_02 977 0.51 0.43 0.54 188 RELAYCOUNTRY_GB 974 0.74 1.18 0.54 189 XMPhish14 961 0.62 0.80 0.54 190 NML_ADSP_CUSTOM_MED 948 0.67 0.97 0.53 191 FORGED_GMAIL_RCVD 945 0.65 0.93 0.53 192 XMBody_17 943 1.01 2.07 0.53 193 XMHTML_After_End 903 0.64 0.93 0.50 194 HTML_TAG_BALANCE_BODY 884 0.79 1.43 0.49 195 XM_B_REG_HTML 870 0.68 1.12 0.48 196 XM_B_SpammyWords4 869 1.11 2.49 0.48 197 XMGenDplmaNmb 858 0.63 0.97 0.48 198 T_FILL_THIS_FORM_SHORT 841 1.11 2.51 0.47 199 PLING_QUERY 795 0.57 0.83 0.44 200 XM_B_DNDMA 784 0.60 0.97 0.44 ----------------------------------------------------------------------