Email: 473875 Autolearn: 0 AvgScore: 2.66 AvgScanTime: 1.21 sec Spam: 151297 Autolearn: 0 AvgScore: 13.96 AvgScanTime: 1.40 sec Ham: 322578 Autolearn: 0 AvgScore: -2.64 AvgScanTime: 1.12 sec Time Spent Running SA: 159.48 hours Time Spent Processing Spam: 59.02 hours Time Spent Processing Ham: 100.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 146137 79.51 96.59 71.50 2 DKIM_SIGNED 128399 83.76 84.87 83.24 3 XM_DK_Pass 125274 82.60 82.80 82.51 4 DKIM_VALID 123581 81.38 81.68 81.24 5 XM_B_Unicode 121198 66.69 80.11 60.40 6 DCC_CHECK 119059 64.06 78.69 57.19 7 XMListUnsubscribeExists 110147 54.66 72.80 46.15 8 RELAYCOUNTRY_US 110079 81.68 72.76 85.87 9 XM_B_SpammyWords 107690 62.72 71.18 58.75 10 DKIM_VALID_AU 97989 68.58 64.77 70.37 11 XM_DK_Undo_02 80673 23.95 53.32 10.18 12 XM_B_Unicode3 69694 39.98 46.06 37.13 13 TR_XM_DKIM_Undo 65404 18.97 43.23 7.59 14 XM_B_SpammyWords2 65290 26.41 43.15 18.56 15 BAYES_99 65111 19.39 43.04 8.30 16 LOC_TINY_FONT_1 56584 29.68 37.40 26.06 17 BAYES_999 53419 15.63 35.31 6.40 18 MIME_HTML_ONLY 53165 24.40 35.14 19.37 19 TR_DCC_Bayes_99 52824 14.88 34.91 5.48 20 HTML_FONT_LOW_CONTRAST 49951 28.71 33.02 26.69 21 RCVD_IN_MSPIKE_H2 48201 26.25 31.86 23.62 22 BAYES_50 44204 45.35 29.22 52.92 23 DKIM_VALID_EF 42786 38.61 28.28 43.45 24 T_KAM_HTML_FONT_INVALID 40228 17.79 26.59 13.67 25 FVGT_m_MULTI_ODD 37365 21.45 24.70 19.92 26 RCVD_IN_MSPIKE_WL 36445 38.16 24.09 44.77 27 RELAYCOUNTRY_META 34552 9.57 22.84 3.35 28 T_TM2_M_HEADER_IN_MSG 33686 19.47 22.26 18.16 29 XMSubLong 33040 19.13 21.84 17.86 30 XM_Body_Dirty_Words 32252 14.58 21.32 11.42 31 DCC_CHECK_NEGATIVE 30439 34.90 20.12 41.83 32 TR_XM_SpammyWords2 25066 6.19 16.57 1.33 33 XM_UncommonTLD01 22355 6.85 14.78 3.14 34 BOTNET 21857 5.61 14.45 1.47 35 UNTRUSTED_Relay 21578 5.58 14.26 1.50 36 XM_Multi_Part_URI 20917 12.96 13.83 12.55 37 XM_B_SpammyWords3 20753 6.66 13.72 3.35 38 LOTS_OF_MONEY 19618 7.27 12.97 4.60 39 XMSexyCombo_05 19368 7.19 12.80 4.57 40 XM_B_Unsub 19190 9.81 12.68 8.46 41 XM_Evil_Numbers_Gen 19088 9.85 12.62 8.56 42 RCVD_IN_MSPIKE_H3 19021 14.60 12.57 15.55 43 RCVD_IN_BL_SPAMCOP_NET 18745 4.67 12.39 1.04 44 TR_XM_SpammyWords4 16708 5.57 11.04 3.00 45 BAYES_80 16549 10.00 10.94 9.55 46 BOTNET_IPINHOSTNAME 16514 6.83 10.91 4.91 47 RCVD_IN_MSPIKE_H4 16054 14.14 10.61 15.80 48 HTML_IMAGE_RATIO_02 15500 8.67 10.24 7.94 49 MPART_ALT_DIFF 14365 5.97 9.49 4.32 50 FSL_BULK_SIG 13865 6.17 9.16 4.76 51 UNPARSEABLE_RELAY 13567 7.79 8.97 7.24 52 TR_XM_UnparsRelay 13401 7.15 8.86 6.34 53 MIME_HTML_MOSTLY 12894 4.47 8.52 2.57 54 RELAYCOUNTRY_CA 12405 3.42 8.20 1.17 55 LotsOfNums_01 12224 7.32 8.08 6.97 56 XM_B_Phish_Phrases 11269 18.12 7.45 23.12 57 BAYES_60 11144 9.81 7.37 10.95 58 HTML_IMAGE_RATIO_04 10726 6.27 7.09 5.88 59 SpammyFromTLD_02 9967 2.19 6.59 0.13 60 XM_SendGrid 9921 6.53 6.56 6.52 61 RCVD_IN_RP_SAFE 9755 9.14 6.45 10.41 62 TM2_M_URI_OPT_OUT 9745 3.52 6.44 2.16 63 XM_H_Long_From01 9360 4.93 6.19 4.34 64 TR_XM_PhishingBody 8773 3.06 5.80 1.77 65 SpammyFromTLD_01 8693 2.06 5.75 0.34 66 T_REMOTE_IMAGE 8544 3.47 5.65 2.45 67 XMSubMetaSx_00 8511 4.01 5.63 3.26 68 URIBL_SBL_A 8470 2.54 5.60 1.10 69 TooManyTo_001 8052 5.22 5.32 5.17 70 RELAYCOUNTRY_FR 7592 1.73 5.02 0.19 71 MIME_HEADER_CTYPE_ONLY 7473 1.65 4.94 0.10 72 BAYES_95 7229 5.26 4.78 5.49 73 XM_OfRef6 7140 1.97 4.72 0.69 74 RCVD_IN_RP_CERTIFIED 7076 8.06 4.68 9.64 75 BODY_URI_ONLY 7065 1.49 4.67 0.00 76 ALL_TRUSTED 6922 9.21 4.58 11.38 77 XMBdyGiftCard01 6727 2.32 4.45 1.32 78 HTML_SHORT_LINK_IMG_1 6711 1.42 4.44 0.01 79 XM_UB99 6707 1.42 4.43 0.01 80 XMStrtUSub 6663 17.58 4.40 23.75 81 XM_UB50 6631 2.05 4.38 0.95 82 KHOP_HELO_FCRDNS 6279 2.04 4.15 1.06 83 TR_XM_DK_SendGrid 6006 4.16 3.97 4.26 84 HTML_IMAGE_RATIO_06 5899 3.48 3.90 3.28 85 TR_XM_SpammyWords5 5807 1.99 3.84 1.12 86 TR_XM_MaxBayes 5742 1.23 3.80 0.02 87 XMNumbers 5606 3.03 3.71 2.71 88 TR_LOTS_OF_MONEY3 5416 1.38 3.58 0.35 89 XM_UB999 5294 1.12 3.50 0.00 90 XMBody_17 5191 1.53 3.43 0.64 91 XM_B_SpammyTLD 5134 2.68 3.39 2.34 92 HTML_MIME_NO_HTML_TAG 5093 2.17 3.37 1.61 93 XM_DK_Undo_01 5032 1.82 3.33 1.12 94 T_TooManySym_01 5026 4.36 3.32 4.84 95 XM_CamelCaseFrm001 4969 2.17 3.28 1.65 96 DKIM_INVALID 4818 2.38 3.18 2.00 97 RCVD_IN_MSPIKE_BL 4621 1.04 3.05 0.09 98 FROM_EXCESS_BASE64 4620 3.40 3.05 3.56 99 TR_XM_MSPIKECOMBO 4589 1.03 3.03 0.09 100 SUBJ_ALL_CAPS 4530 1.52 2.99 0.83 101 HTML_IMAGE_ONLY_12 4522 1.02 2.99 0.10 102 MIME_HTML_ONLY_MULTI 4501 2.84 2.97 2.77 103 HTML_FONT_SIZE_LARGE 4457 1.06 2.95 0.17 104 XMBrknScrpt_02 4226 1.35 2.79 0.67 105 HK_RANDOM_REPLYTO 4184 0.99 2.77 0.15 106 XM_B_Phish66 4099 1.49 2.71 0.92 107 T_FILL_THIS_FORM_SHORT 4094 1.18 2.71 0.47 108 HTML_IMAGE_RATIO_08 4064 2.26 2.69 2.06 109 XM_DIRTYINTL 3856 0.98 2.55 0.25 110 URI_HEX 3798 1.47 2.51 0.98 111 RELAYCOUNTRY_IN 3695 0.81 2.44 0.05 112 RCVD_IN_MSPIKE_L5 3558 0.80 2.35 0.07 113 XM_SPF_SoftFail 3492 1.47 2.31 1.08 114 TR_XM_BayesRelay 3448 0.74 2.28 0.03 115 HDRS_MISSP 3410 0.84 2.25 0.18 116 T_XMDrugObfuBody_14 3401 2.16 2.25 2.11 117 XM_UB60 3383 0.80 2.24 0.13 118 URIBL_DBL_SPAM 3252 0.69 2.15 0.01 119 XM_B_SpammyWords4 3245 1.01 2.14 0.48 120 DKIM_ADSP_NXDOMAIN 3110 0.85 2.06 0.28 121 RCVD_IN_PSBL 3031 0.74 2.00 0.15 122 TM2_M_VERY_LONG_WORD 3027 1.40 2.00 1.12 123 T_XMDrugObfuBody_08 3018 1.37 1.99 1.07 124 XMDiploma_00 3012 1.41 1.99 1.14 125 RCVD_IN_RP_RNBL 2865 0.62 1.89 0.02 126 TR_XM_FormFill 2785 0.59 1.84 0.01 127 T_XMHurry_00 2744 1.04 1.81 0.68 128 PDS_OTHER_BAD_TLD 2739 1.34 1.81 1.12 129 MIME_QP_LONG_LINE 2714 2.87 1.79 3.37 130 TR_XM_SpammyWords3 2684 0.60 1.77 0.05 131 DIET_1 2658 0.87 1.76 0.45 132 BOTNET_NORDNS 2595 0.56 1.72 0.01 133 XMStockSpam_06 2517 1.42 1.66 1.30 134 FORGED_GMAIL_RCVD 2494 0.88 1.65 0.52 135 HDRS_LCASE_IMGONLY 2485 0.53 1.64 0.01 136 XMSubMetaI_00 2440 0.82 1.61 0.44 137 TR_XM_PHPDW 2352 0.67 1.55 0.25 138 URI_TRY_3LD 2336 1.08 1.54 0.86 139 BAYES_40 2300 2.24 1.52 2.58 140 XMPhish08 2233 0.57 1.48 0.15 141 XMSexyCombo_01 2193 0.70 1.45 0.34 142 TR_XM_PHPForged 2193 0.59 1.45 0.18 143 XM_UB80 2156 0.48 1.43 0.03 144 TR_XM_FormFill2 2150 0.58 1.42 0.18 145 XM_H_PHPOS 2143 0.57 1.42 0.18 146 RCVD_IN_IADB_LISTED 2114 2.52 1.40 3.04 147 URI_PHP_REDIR 2102 0.45 1.39 0.00 148 URI_NO_WWW_BIZ_CGI 2101 0.45 1.39 0.00 149 NUMERIC_HTTP_ADDR 2022 0.67 1.34 0.36 150 HTTPS_HTTP_MISMATCH 2020 0.76 1.34 0.49 151 XM_B_Unsub2 2004 0.92 1.32 0.73 152 URI_NOVOWEL 1995 1.54 1.32 1.65 153 BAYES_20 1991 1.77 1.32 1.98 154 TR_Caps_n_Bayes_99 1964 0.45 1.30 0.05 155 XM_H_Long_From02 1950 1.06 1.29 0.95 156 SHORT_URI_2 1932 0.42 1.28 0.02 157 BAYES_00 1877 5.09 1.24 6.90 158 XM_B_COVIDMETA 1876 1.18 1.24 1.16 159 RCVD_IN_IADB_SPF 1836 2.21 1.21 2.68 160 XM_URI_RBL 1827 0.50 1.21 0.17 161 MAILING_LIST_MULTI 1812 1.44 1.20 1.56 162 TR_XM_INV_DKIM 1792 0.43 1.18 0.07 163 HTML_FONT_SIZE_HUGE 1789 0.53 1.18 0.23 164 FROM_SUSPICIOUS_NTLD 1776 0.43 1.17 0.08 165 RELAYCOUNTRY_NL 1740 0.47 1.15 0.15 166 RCVD_IN_IADB_DK 1705 1.96 1.13 2.35 167 FROM_SUSPICIOUS_NTLD_FP 1698 0.41 1.12 0.08 168 HTML_IMAGE_ONLY_04 1697 0.38 1.12 0.03 169 T_MONEY_PERCENT 1684 0.40 1.11 0.07 170 TR_LOTS_OF_MONEY2 1684 0.40 1.11 0.07 171 XM_OfRef7 1676 0.39 1.11 0.06 172 RCVD_IN_IADB_SENDERID 1674 2.01 1.11 2.43 173 XMGenDplmaNmb 1655 0.73 1.09 0.56 174 HTML_SHORT_CENTER 1648 0.35 1.09 0.00 175 XMHTML_After_End 1632 1.31 1.08 1.42 176 XM_Body_Obfu01 1631 0.44 1.08 0.14 177 TR_Mismatch_TLD_02 1592 0.36 1.05 0.04 178 XMPhish30 1591 0.57 1.05 0.35 179 URIBL_BLACK 1565 0.34 1.03 0.02 180 XM_UB95 1515 0.33 1.00 0.02 181 TR_Sbj_FN_Bdy 1485 0.39 0.98 0.11 182 TR_XM_COVIDMETA1 1477 0.49 0.98 0.26 183 XMSubNoVowel 1467 0.94 0.97 0.93 184 XMBody_78 1398 0.51 0.92 0.31 185 GOOGLE_DOC_SUSP 1389 0.30 0.92 0.01 186 PLING_QUERY 1384 0.63 0.91 0.49 187 T_TooManySym_02 1373 2.16 0.91 2.74 188 RCVD_IN_MSPIKE_H5 1370 9.42 0.91 13.42 189 TR_XM_SB_Phish 1364 1.10 0.90 1.19 190 T_XMDrugObfuBody_00 1310 0.64 0.87 0.53 191 XMSubPhish11 1288 1.08 0.85 1.19 192 TR_Symld_Words 1265 0.90 0.84 0.93 193 HTML_TAG_BALANCE_BODY 1260 0.46 0.83 0.28 194 RDNS_DYNAMIC 1235 0.69 0.82 0.63 195 TR_XM_RelayPhish 1234 0.30 0.82 0.06 196 DKIM_ADSP_CUSTOM_MED 1230 0.85 0.81 0.87 197 TR_XM_Spammywords 1215 0.48 0.80 0.33 198 XM_S_SpammyWords 1215 0.48 0.80 0.33 199 XM_LoanWordsFrm 1202 0.30 0.79 0.07 200 THIS_AD 1196 0.40 0.79 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 276995 81.68 72.76 85.87 2 DKIM_SIGNED 268521 83.76 84.87 83.24 3 XM_DK_Pass 266145 82.60 82.80 82.51 4 DKIM_VALID 262073 81.38 81.68 81.24 5 HTML_MESSAGE 230649 79.51 96.59 71.50 6 DKIM_VALID_AU 226995 68.58 64.77 70.37 7 XM_B_Unicode 194851 66.69 80.11 60.40 8 XM_B_SpammyWords 189528 62.72 71.18 58.75 9 DCC_CHECK 184495 64.06 78.69 57.19 10 BAYES_50 170707 45.35 29.22 52.92 11 XMListUnsubscribeExists 148862 54.66 72.80 46.15 12 RCVD_IN_MSPIKE_WL 144409 38.16 24.09 44.77 13 DKIM_VALID_EF 140172 38.61 28.28 43.45 14 DCC_CHECK_NEGATIVE 134926 34.90 20.12 41.83 15 XM_B_Unicode3 119758 39.98 46.06 37.13 16 XM_DKIMWhitelistDomains 94173 19.89 0.05 29.19 17 HTML_FONT_LOW_CONTRAST 86102 28.71 33.02 26.69 18 LOC_TINY_FONT_1 84070 29.68 37.40 26.06 19 XMStrtUSub 76628 17.58 4.40 23.75 20 RCVD_IN_MSPIKE_H2 76177 26.25 31.86 23.62 21 XM_B_Phish_Phrases 74585 18.12 7.45 23.12 22 FVGT_m_MULTI_ODD 64271 21.45 24.70 19.92 23 MIME_HTML_ONLY 62473 24.40 35.14 19.37 24 XM_B_SpammyWords2 59877 26.41 43.15 18.56 25 T_TM2_M_HEADER_IN_MSG 58585 19.47 22.26 18.16 26 XMSubLong 57606 19.13 21.84 17.86 27 RCVD_IN_MSPIKE_H4 50962 14.14 10.61 15.80 28 RCVD_IN_MSPIKE_H3 50170 14.60 12.57 15.55 29 T_KAM_HTML_FONT_INVALID 44096 17.79 26.59 13.67 30 RCVD_IN_MSPIKE_H5 43277 9.42 0.91 13.42 31 XM_Multi_Part_URI 40485 12.96 13.83 12.55 32 XM_Body_Dirty_Words 36835 14.58 21.32 11.42 33 ALL_TRUSTED 36713 9.21 4.58 11.38 34 BAYES_60 35337 9.81 7.37 10.95 35 RCVD_IN_RP_SAFE 33578 9.14 6.45 10.41 36 XM_DK_Undo_02 32843 23.95 53.32 10.18 37 RCVD_IN_RP_CERTIFIED 31110 8.06 4.68 9.64 38 BAYES_80 30818 10.00 10.94 9.55 39 XM_Evil_Numbers_Gen 27612 9.85 12.62 8.56 40 XM_B_Unsub 27296 9.81 12.68 8.46 41 BAYES_99 26769 19.39 43.04 8.30 42 HTML_IMAGE_RATIO_02 25608 8.67 10.24 7.94 43 TR_XM_DKIM_Undo 24498 18.97 43.23 7.59 44 UNPARSEABLE_RELAY 23352 7.79 8.97 7.24 45 LotsOfNums_01 22468 7.32 8.08 6.97 46 BAYES_00 22250 5.09 1.24 6.90 47 XM_SendGrid 21036 6.53 6.56 6.52 48 BAYES_999 20642 15.63 35.31 6.40 49 TR_XM_UnparsRelay 20462 7.15 8.86 6.34 50 HTML_IMAGE_RATIO_04 18973 6.27 7.09 5.88 51 TR_XM_DK_Bayes 18673 4.07 0.40 5.79 52 TR_XM_DK_Bayes1 18409 4.01 0.39 5.71 53 BAYES_95 17697 5.26 4.78 5.49 54 TR_DCC_Bayes_99 17691 14.88 34.91 5.48 55 TR_XM_DK_Bayes2 17267 3.76 0.37 5.35 56 TooManyTo_001 16691 5.22 5.32 5.17 57 BOTNET_IPINHOSTNAME 15832 6.83 10.91 4.91 58 T_TooManySym_01 15624 4.36 3.32 4.84 59 FSL_BULK_SIG 15361 6.17 9.16 4.76 60 LOTS_OF_MONEY 14825 7.27 12.97 4.60 61 XMSexyCombo_05 14727 7.19 12.80 4.57 62 XM_H_Long_From01 14006 4.93 6.19 4.34 63 MPART_ALT_DIFF 13934 5.97 9.49 4.32 64 TR_XM_DK_SendGrid 13729 4.16 3.97 4.26 65 IN_ZIMBRA_NJ_WHITELIST 13040 2.77 0.05 4.04 66 FROM_EXCESS_BASE64 11486 3.40 3.05 3.56 67 MIME_QP_LONG_LINE 10871 2.87 1.79 3.37 68 XM_B_SpammyWords3 10816 6.66 13.72 3.35 69 RELAYCOUNTRY_META 10803 9.57 22.84 3.35 70 HTML_IMAGE_RATIO_06 10594 3.48 3.90 3.28 71 XMSubMetaSx_00 10503 4.01 5.63 3.26 72 XM_UncommonTLD01 10121 6.85 14.78 3.14 73 RCVD_IN_IADB_LISTED 9804 2.52 1.40 3.04 74 TR_XM_SpammyWords4 9689 5.57 11.04 3.00 75 MIME_HTML_ONLY_MULTI 8951 2.84 2.97 2.77 76 T_TooManySym_02 8852 2.16 0.91 2.74 77 XMNumbers 8733 3.03 3.71 2.71 78 RCVD_IN_IADB_SPF 8645 2.21 1.21 2.68 79 TVD_RCVD_IP 8353 1.80 0.11 2.59 80 BAYES_40 8313 2.24 1.52 2.58 81 MIME_HTML_MOSTLY 8284 4.47 8.52 2.57 82 T_REMOTE_IMAGE 7908 3.47 5.65 2.45 83 RCVD_IN_IADB_SENDERID 7845 2.01 1.11 2.43 84 INVALID_MSGID 7621 1.71 0.31 2.36 85 RCVD_IN_IADB_DK 7591 1.96 1.13 2.35 86 XM_B_SpammyTLD 7558 2.68 3.39 2.34 87 XM_H_Trusted_IP 7504 1.58 0.00 2.33 88 MSGID_NOFQDN1 7280 1.55 0.03 2.26 89 TM2_M_URI_OPT_OUT 6954 3.52 6.44 2.16 90 T_XMDrugObfuBody_14 6818 2.16 2.25 2.11 91 HTML_IMAGE_RATIO_08 6648 2.26 2.69 2.06 92 DKIM_INVALID 6448 2.38 3.18 2.00 93 BAYES_20 6397 1.77 1.32 1.98 94 TO_MALFORMED 6283 1.33 0.00 1.95 95 RCVD_IN_IADB_VOUCHED 5772 1.43 0.67 1.79 96 XM_PDF 5759 1.30 0.28 1.79 97 TR_XM_PhishingBody 5710 3.06 5.80 1.77 98 HELO_MISC_IP 5561 1.19 0.06 1.72 99 URI_NOVOWEL 5324 1.54 1.32 1.65 100 XM_CamelCaseFrm001 5315 2.17 3.28 1.65 101 HTML_MIME_NO_HTML_TAG 5190 2.17 3.37 1.61 102 ANY_BOUNCE_MESSAGE 5103 1.22 0.44 1.58 103 BOUNCE_MESSAGE 5099 1.22 0.44 1.58 104 MAILING_LIST_MULTI 5030 1.44 1.20 1.56 105 USER_IN_DEF_DKIM_WL 5008 1.09 0.11 1.55 106 IN_HORDE_ADDRESS_BOOK 4882 1.06 0.11 1.51 107 UNTRUSTED_Relay 4849 5.58 14.26 1.50 108 XMBSHREFv2 4745 1.05 0.16 1.47 109 BOTNET 4743 5.61 14.45 1.47 110 XMHTML_After_End 4585 1.31 1.08 1.42 111 BAYES_05 4288 1.09 0.59 1.33 112 TR_XM_SpammyWords2 4286 6.19 16.57 1.33 113 XMBdyGiftCard01 4245 2.32 4.45 1.32 114 XMStockSpam_06 4198 1.42 1.66 1.30 115 TR_XM_SB_Phish 3849 1.10 0.90 1.19 116 XMSubPhish11 3823 1.08 0.85 1.19 117 RELAYCOUNTRY_CA 3786 3.42 8.20 1.17 118 XM_B_COVIDMETA 3729 1.18 1.24 1.16 119 XMDiploma_00 3691 1.41 1.99 1.14 120 PDS_OTHER_BAD_TLD 3620 1.34 1.81 1.12 121 TR_XM_SpammyWords5 3618 1.99 3.84 1.12 122 XM_DK_Undo_01 3615 1.82 3.33 1.12 123 TM2_M_VERY_LONG_WORD 3597 1.40 2.00 1.12 124 RCVD_IN_IADB_OPTIN 3579 0.91 0.47 1.11 125 URIBL_SBL_A 3552 2.54 5.60 1.10 126 TooManyTo_002 3507 0.91 0.54 1.09 127 HTML_FONT_FACE_BAD 3481 0.95 0.68 1.08 128 XM_SPF_SoftFail 3476 1.47 2.31 1.08 129 T_XMDrugObfuBody_08 3463 1.37 1.99 1.07 130 KHOP_HELO_FCRDNS 3410 2.04 4.15 1.06 131 RCVD_IN_BL_SPAMCOP_NET 3362 4.67 12.39 1.04 132 TR_MSPIKEBAYES00 3216 0.68 0.02 1.00 133 URI_HEX 3175 1.47 2.51 0.98 134 XMGappySubj_01 3124 0.72 0.20 0.97 135 XM_UB50 3079 2.05 4.38 0.95 136 XM_H_Long_From02 3051 1.06 1.29 0.95 137 XMSubNoVowel 3000 0.94 0.97 0.93 138 TR_Symld_Words 2999 0.90 0.84 0.93 139 XM_B_Phish66 2973 1.49 2.71 0.92 140 XM_Body_Dirty_Words_01 2857 0.85 0.79 0.89 141 XM_GoogleGroups 2805 0.74 0.46 0.87 142 DKIM_ADSP_CUSTOM_MED 2804 0.85 0.81 0.87 143 URI_TRY_3LD 2786 1.08 1.54 0.86 144 XMBody_95 2760 0.66 0.24 0.86 145 SUBJ_ALL_CAPS 2684 1.52 2.99 0.83 146 TVD_SPACE_RATIO 2651 0.58 0.08 0.82 147 TooManyTo_003 2490 0.67 0.45 0.77 148 XMSubMetaSxObfu_02 2475 0.60 0.25 0.77 149 T_TooManySym_03 2401 0.61 0.33 0.74 150 XM_B_Unsub2 2367 0.92 1.32 0.73 151 XMHTMLBadTable_001 2366 0.74 0.76 0.73 152 XM_RXBody 2323 0.63 0.45 0.72 153 XM_OfRef6 2218 1.97 4.72 0.69 154 T_XMHurry_00 2193 1.04 1.81 0.68 155 XMBrknScrpt_02 2153 1.35 2.79 0.67 156 XM_B_REG_HTML 2109 0.60 0.49 0.65 157 XMBody_17 2080 1.53 3.43 0.64 158 RDNS_DYNAMIC 2032 0.69 0.82 0.63 159 TooManyTo_004 1952 0.54 0.42 0.61 160 XM_ProductURIs 1923 0.65 0.76 0.60 161 XMGenDplmaNmb 1803 0.73 1.09 0.56 162 HTML_IMAGE_ONLY_20 1792 0.40 0.08 0.56 163 T_XMDrugObfuBody_00 1723 0.64 0.87 0.53 164 TooManyTo_005 1703 0.48 0.37 0.53 165 RELAYCOUNTRY_GB 1699 0.55 0.60 0.53 166 XM_B_COPY_HTML 1686 0.53 0.55 0.52 167 FORGED_GMAIL_RCVD 1679 0.88 1.65 0.52 168 NML_ADSP_CUSTOM_MED 1665 0.57 0.70 0.52 169 XM_H_PHPMailer 1651 0.56 0.66 0.51 170 TR_MetaPhish_Combo_01 1624 0.55 0.63 0.50 171 USER_IN_WHITELIST 1595 0.34 0.00 0.49 172 HTTPS_HTTP_MISMATCH 1595 0.76 1.34 0.49 173 USER_IN_WELCOMELIST 1595 0.34 0.00 0.49 174 PLING_QUERY 1579 0.63 0.91 0.49 175 XM_B_SpammyWords4 1551 1.01 2.14 0.48 176 T_FILL_THIS_FORM_SHORT 1504 1.18 2.71 0.47 177 DIET_1 1444 0.87 1.76 0.45 178 HELO_NO_DOMAIN 1434 0.41 0.34 0.44 179 HELO_NODOT 1434 0.41 0.35 0.44 180 XMSubMetaI_00 1430 0.82 1.61 0.44 181 MISSING_HEADERS 1388 0.37 0.24 0.43 182 SUBJ_DOLLARS 1367 0.46 0.55 0.42 183 XMSubMetaSxObfu_03 1225 0.46 0.63 0.38 184 RELAYCOUNTRY_DE 1168 0.46 0.66 0.36 185 NUMERIC_HTTP_ADDR 1160 0.67 1.34 0.36 186 XMPhish30 1125 0.57 1.05 0.35 187 TR_LOTS_OF_MONEY3 1123 1.38 3.58 0.35 188 XMSexyCombo_01 1108 0.70 1.45 0.34 189 SpammyFromTLD_01 1091 2.06 5.75 0.34 190 SHOPIFY_IMG_NOT_RCVD_SFY 1091 0.39 0.49 0.34 191 XM_S_SpammyWords 1066 0.48 0.80 0.33 192 TR_XM_Spammywords 1066 0.48 0.80 0.33 193 XM_ShortIntro_01 1035 0.44 0.69 0.32 194 XMLngstWrd_00 1025 0.45 0.75 0.32 195 T_TooManySym_04 1025 0.23 0.04 0.32 196 XMBody_78 1012 0.51 0.92 0.31 197 T_Symld_Words_02 1006 0.44 0.72 0.31 198 XMNoVowels 994 0.39 0.56 0.31 199 XM_shorewaves_Whitelist 986 0.21 0.00 0.31 200 XMCapTrack 972 0.26 0.18 0.30 ----------------------------------------------------------------------