Email: 297020 Autolearn: 0 AvgScore: 4.49 AvgScanTime: 1.21 sec Spam: 96687 Autolearn: 0 AvgScore: 16.04 AvgScanTime: 1.23 sec Ham: 200333 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.21 sec Time Spent Running SA: 100.04 hours Time Spent Processing Spam: 32.93 hours Time Spent Processing Ham: 67.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91573 86.88 94.71 83.10 2 DKIM_SIGNED 59619 69.56 61.66 73.37 3 XM_B_Unicode 59350 65.92 61.38 68.11 4 XM_DK_Pass 57626 68.21 59.60 72.37 5 RELAYCOUNTRY_US 56673 70.72 58.61 76.56 6 DKIM_VALID 55732 66.59 57.64 70.91 7 DCC_CHECK 54839 48.75 56.72 44.91 8 XMListUnsubscribeExists 50447 51.46 52.18 51.12 9 XM_B_SpammyWords 48417 47.12 50.08 45.70 10 MIME_HTML_ONLY 48020 30.77 49.67 21.64 11 DKIM_VALID_AU 43058 53.46 44.53 57.77 12 DCC_CHECK_NEGATIVE 41803 51.22 43.24 55.07 13 BAYES_50 41307 49.96 42.72 53.45 14 RELAYCOUNTRY_META 36818 14.45 38.08 3.05 15 UNTRUSTED_Relay 32472 11.83 33.58 1.33 16 XM_DK_Undo_02 30829 15.99 31.89 8.32 17 XM_B_Unicode3 30418 39.22 31.46 42.96 18 HTML_MIME_NO_HTML_TAG 29365 11.08 30.37 1.77 19 BOTNET 28928 10.92 29.92 1.75 20 HTML_SHORT_LINK_IMG_1 27616 9.33 28.56 0.05 21 LOC_TINY_FONT_1 25501 27.90 26.37 28.64 22 BODY_URI_ONLY 24322 8.19 25.16 0.01 23 TR_XM_DKIM_Undo 24284 12.17 25.12 5.93 24 BAYES_99 23676 12.00 24.49 5.98 25 XMSubLong 23266 22.92 24.06 22.36 26 XM_B_SpammyWords2 22883 20.50 23.67 18.97 27 XM_Multi_Part_URI 22769 17.22 23.55 14.17 28 HTML_FONT_LOW_CONTRAST 22552 30.37 23.32 33.77 29 FVGT_m_MULTI_ODD 20419 22.65 21.12 23.39 30 DKIM_VALID_EF 20093 24.83 20.78 26.78 31 XM_UncommonTLD01 19647 9.49 20.32 4.26 32 T_KAM_HTML_FONT_INVALID 18453 17.46 19.09 16.68 33 BAYES_999 18420 9.50 19.05 4.89 34 TR_DCC_Bayes_99 18061 8.07 18.68 2.95 35 RCVD_IN_MSPIKE_H2 17674 18.41 18.28 18.48 36 XM_Body_Dirty_Words 15759 15.09 16.30 14.51 37 XM_UB50 15595 5.78 16.13 0.79 38 RCVD_IN_MSPIKE_WL 15571 27.38 16.10 32.82 39 HTML_IMAGE_ONLY_08 15461 5.29 15.99 0.13 40 GOOG_STO_IMG_HTML 14656 4.94 15.16 0.00 41 XMSexyCombo_05 14170 7.32 14.66 3.78 42 HTML_TAG_BALANCE_CENTER 14096 4.91 14.58 0.24 43 TR_XM_PHPDW 13754 4.83 14.23 0.30 44 TR_XM_PHPForged 13574 4.73 14.04 0.23 45 T_TM2_M_HEADER_IN_MSG 13568 18.07 14.03 20.02 46 TR_XM_FormFill2 13555 4.72 14.02 0.24 47 XM_H_PHPOS 13544 4.71 14.01 0.22 48 XM_H_PHPMailer 12986 4.74 13.43 0.54 49 XMSubMetaSx_00 12638 9.05 13.07 7.10 50 XM_H_PHPOS_M 12574 4.28 13.00 0.07 51 HTML_IMAGE_ONLY_04 12135 4.13 12.55 0.06 52 HTML_FONT_SIZE_LARGE 12074 4.11 12.49 0.06 53 RELAYCOUNTRY_RU 11882 4.02 12.29 0.02 54 TR_XM_SpammyRelay 11273 4.68 11.66 1.31 55 FROM_SUSPICIOUS_NTLD 11247 3.82 11.63 0.06 56 FROM_SUSPICIOUS_NTLD_FP 11203 3.81 11.59 0.05 57 FSL_BULK_SIG 10519 9.19 10.88 8.37 58 BOTNET_IPINHOSTNAME 10329 7.44 10.68 5.88 59 UNPARSEABLE_RELAY 10024 9.81 10.37 9.55 60 SHORT_IMG_SUSP_NTLD 9876 3.33 10.21 0.00 61 SpammyFromTLD_02 9684 3.38 10.02 0.18 62 TR_XM_UnparsRelay 9655 8.43 9.99 7.68 63 T_TooManySym_01 9424 9.15 9.75 8.86 64 RCVD_IN_MSPIKE_H3 9253 13.70 9.57 15.69 65 BAYES_60 8899 10.57 9.20 11.23 66 MPART_ALT_DIFF 8382 7.29 8.67 6.63 67 XM_SPF_SoftFail 8271 3.48 8.55 1.02 68 XM_B_SpammyWords3 7992 5.36 8.27 3.95 69 XMNumbers 7963 6.15 8.24 5.14 70 RCVD_IN_BL_SPAMCOP_NET 7752 3.50 8.02 1.32 71 HTML_IMAGE_RATIO_02 7631 7.52 7.89 7.34 72 XM_B_Unsub 7520 12.33 7.78 14.52 73 XMStrtUSub 7493 5.85 7.75 4.93 74 TR_XM_SpammyWords2 7010 3.50 7.25 1.69 75 LOTS_OF_MONEY 7001 6.42 7.24 6.02 76 RELAYCOUNTRY_PL 6822 2.31 7.06 0.02 77 BAYES_80 6754 5.50 6.99 4.78 78 XM_SendGrid 6626 7.36 6.85 7.60 79 RCVD_IN_MSPIKE_H4 6013 11.81 6.22 14.51 80 XM_H_Long_From01 5865 5.34 6.07 4.99 81 FROM_NTLD_LINKBAIT 5759 1.94 5.96 0.00 82 XM_Evil_Numbers_Gen 5597 7.51 5.79 8.34 83 T_TooManySym_02 5522 5.90 5.71 5.99 84 TR_XM_SpammyWords4 5522 4.45 5.71 3.84 85 SpammyFromTLD_01 5021 1.92 5.19 0.35 86 TooManyTo_001 5001 8.79 5.17 10.53 87 RELAYCOUNTRY_CA 4863 2.19 5.03 0.82 88 MIME_HTML_MOSTLY 4750 4.01 4.91 3.58 89 LotsOfNums_01 4719 7.25 4.88 8.40 90 NO_DNS_FOR_FROM 4607 1.88 4.76 0.49 91 XM_UB60 4580 1.60 4.74 0.09 92 RCVD_IN_MSPIKE_BL 4219 2.01 4.36 0.87 93 TR_XM_MSPIKECOMBO 4216 2.00 4.36 0.87 94 BAYES_00 4149 9.14 4.29 11.49 95 RCVD_IN_VALIDITY_SAFE 4087 6.66 4.23 7.83 96 TR_XM_PhishingBody 4018 3.04 4.16 2.50 97 XM_BadFromFormat 3990 1.46 4.13 0.17 98 BAYES_40 3937 4.65 4.07 4.93 99 DKIM_INVALID 3887 2.97 4.02 2.46 100 MIME_HTML_ONLY_MULTI 3858 3.65 3.99 3.49 101 TR_XM_SPAMCOP 3821 1.78 3.95 0.73 102 TR_XM_SpammyWords5 3724 2.28 3.85 1.52 103 HTML_IMAGE_RATIO_04 3716 5.50 3.84 6.31 104 URI_NOVOWEL 3563 2.54 3.69 1.99 105 XM_B_Phish_Phrases 3557 3.24 3.68 3.03 106 TM2_M_URI_OPT_OUT 3531 6.31 3.65 7.59 107 TR_XM_DK_SendGrid 3510 4.52 3.63 4.95 108 RELAYCOUNTRY_CZ 3383 1.15 3.50 0.01 109 BAYES_95 3381 3.04 3.50 2.82 110 BOTNET_NORDNS 3247 1.10 3.36 0.02 111 RCVD_IN_VALIDITY_CERTIFIED 3149 5.83 3.26 7.07 112 SUBJ_DOLLARS 3099 1.29 3.21 0.36 113 PLING_QUERY 2933 1.29 3.03 0.45 114 XMSlimDrugH 2925 1.56 3.03 0.85 115 TM2_M_VERY_LONG_WORD 2903 1.91 3.00 1.38 116 T_HTML_TAG_BALANCE_CENTER 2894 0.98 2.99 0.01 117 XM_B_Investor 2872 1.66 2.97 1.03 118 TVD_SPACE_RATIO 2853 2.28 2.95 1.95 119 T_FILL_THIS_FORM_SHORT 2844 1.40 2.94 0.65 120 BAYES_20 2817 3.22 2.91 3.36 121 XM_B_SpammyTLD 2761 2.35 2.86 2.11 122 TR_XM_MaxUnsub 2753 1.27 2.85 0.51 123 XMSubMetaSSx_00 2726 1.00 2.82 0.13 124 KHOP_HELO_FCRDNS 2636 1.36 2.73 0.70 125 T_REMOTE_IMAGE 2602 2.86 2.69 2.94 126 T_XMDrugObfuBody_14 2560 2.91 2.65 3.03 127 XMSlimDrugs 2548 0.87 2.64 0.02 128 HTML_SHORT_CENTER 2488 0.84 2.57 0.01 129 HDRS_MISSP 2466 0.84 2.55 0.02 130 SHORT_SHORTNER 2465 0.86 2.55 0.04 131 HTML_IMAGE_RATIO_06 2462 3.83 2.55 4.45 132 SHORTENER_SHORT_IMG 2441 0.82 2.52 0.00 133 XM_GoogleGroups 2418 2.08 2.50 1.87 134 XMSexyCombo_01 2409 3.01 2.49 3.26 135 BODY_EMPTY 2408 0.82 2.49 0.01 136 HK_RANDOM_FROM 2376 0.86 2.46 0.09 137 XM_DIRTYINTL 2317 0.95 2.40 0.25 138 URIBL_DBL_SPAM 2305 0.78 2.38 0.01 139 TR_XM_SpammyWords3 2290 1.01 2.37 0.35 140 SUBJ_ALL_CAPS 2176 1.54 2.25 1.20 141 XMDiploma_00 2173 1.56 2.25 1.22 142 T_XMDrugObfuBody_08 2167 1.46 2.24 1.08 143 JH_SPAMMY_HEADERS 2135 0.72 2.21 0.00 144 XM_OfRef6 2005 1.11 2.07 0.65 145 XMLngstWrd_00 1847 1.31 1.91 1.02 146 XM_UB80 1844 0.63 1.91 0.01 147 XMBody_17 1839 0.88 1.90 0.38 148 RCVD_IN_MSPIKE_L3 1831 0.98 1.89 0.53 149 MIME_QP_LONG_LINE 1817 5.60 1.88 7.40 150 ALL_TRUSTED 1801 14.78 1.86 21.02 151 XMLngstWrd_01 1799 1.24 1.86 0.94 152 RCVD_IN_MSPIKE_L5 1778 0.69 1.84 0.14 153 UPPERCASE_75_100 1772 0.75 1.83 0.23 154 TR_XM_MaxWHORU 1758 0.83 1.82 0.35 155 XMLngstWrd_02 1750 1.16 1.81 0.84 156 XM_B_Phish66 1748 1.29 1.81 1.04 157 BAYES_05 1741 1.91 1.80 1.97 158 HTML_TITLE_SUBJ_DIFF 1738 0.76 1.80 0.26 159 XM_CamelCaseFrm001 1730 1.72 1.79 1.68 160 XMLngstWrd_03 1720 1.06 1.78 0.71 161 XMLngstWrd_04 1676 1.00 1.73 0.64 162 HTML_IMAGE_RATIO_08 1654 2.00 1.71 2.15 163 TR_Mismatch_TLD_02 1606 0.58 1.66 0.06 164 XM_UB99 1600 0.54 1.65 0.00 165 USER_IN_DEF_DKIM_WL 1589 11.36 1.64 16.06 166 TR_XM_NoHeaderRelay 1573 0.66 1.63 0.19 167 MAILING_LIST_MULTI 1522 2.16 1.57 2.44 168 XM_B_SpammyWords4 1514 0.83 1.57 0.48 169 XM_URI_RBL 1503 0.61 1.55 0.15 170 FROM_EXCESS_BASE64 1485 2.47 1.54 2.93 171 XM_DK_Undo_01 1475 1.31 1.53 1.21 172 HK_RANDOM_REPLYTO 1455 0.53 1.50 0.06 173 XM_B_Unsub2 1412 1.07 1.46 0.88 174 XMBrknScrpt_02 1373 1.14 1.42 1.00 175 XMBdyGiftCard01 1350 1.35 1.40 1.32 176 RELAYCOUNTRY_FR 1343 0.54 1.39 0.13 177 RELAYCOUNTRY_AU 1295 0.61 1.34 0.26 178 TR_XM_FormFill 1273 0.43 1.32 0.00 179 MONEY_NOHTML 1247 0.45 1.29 0.05 180 XMSubNoVowel 1242 1.23 1.28 1.21 181 URI_HEX 1240 1.31 1.28 1.33 182 RCVD_IN_VALIDITY_RPBL 1238 0.45 1.28 0.04 183 T_XMHurry_00 1220 0.76 1.26 0.53 184 DKIM_ADSP_CUSTOM_MED 1195 1.07 1.24 0.99 185 TR_Mismatch_TLD_01 1186 0.58 1.23 0.27 186 XMLongAddy 1163 0.43 1.20 0.06 187 TM2_M_A_HREF_HREF 1144 0.51 1.18 0.18 188 FROM_LOCAL_HEX 1124 0.44 1.16 0.09 189 RCVD_IN_IADB_LISTED 1117 2.69 1.16 3.43 190 FORGED_GMAIL_RCVD 1115 0.77 1.15 0.59 191 NML_ADSP_CUSTOM_MED 1112 0.80 1.15 0.63 192 FROM_LOCAL_DIGITS 1111 0.40 1.15 0.04 193 XM_H_Long_From03 1108 0.41 1.15 0.05 194 HTML_TAG_BALANCE_BODY 1108 0.80 1.15 0.63 195 RELAYCOUNTRY_NL 1099 0.50 1.14 0.19 196 HDRS_LCASE_IMGONLY 1094 0.39 1.13 0.04 197 TR_XM_INV_DKIM 1084 0.42 1.12 0.07 198 DIET_1 1081 0.63 1.12 0.39 199 XMStockSpam_06 1061 1.82 1.10 2.17 200 XM_B_SEO 1057 0.50 1.09 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 166483 86.88 94.71 83.10 2 RELAYCOUNTRY_US 153377 70.72 58.61 76.56 3 DKIM_SIGNED 146985 69.56 61.66 73.37 4 XM_DK_Pass 144979 68.21 59.60 72.37 5 DKIM_VALID 142047 66.59 57.64 70.91 6 XM_B_Unicode 136439 65.92 61.38 68.11 7 DKIM_VALID_AU 115733 53.46 44.53 57.77 8 DCC_CHECK_NEGATIVE 110320 51.22 43.24 55.07 9 BAYES_50 107070 49.96 42.72 53.45 10 XMListUnsubscribeExists 102402 51.46 52.18 51.12 11 XM_B_SpammyWords 91547 47.12 50.08 45.70 12 DCC_CHECK 89966 48.75 56.72 44.91 13 XM_B_Unicode3 86070 39.22 31.46 42.96 14 HTML_FONT_LOW_CONTRAST 67661 30.37 23.32 33.77 15 RCVD_IN_MSPIKE_WL 65751 27.38 16.10 32.82 16 LOC_TINY_FONT_1 57376 27.90 26.37 28.64 17 DKIM_VALID_EF 53653 24.83 20.78 26.78 18 FVGT_m_MULTI_ODD 46857 22.65 21.12 23.39 19 XMSubLong 44800 22.92 24.06 22.36 20 MIME_HTML_ONLY 43359 30.77 49.67 21.64 21 ALL_TRUSTED 42113 14.78 1.86 21.02 22 T_TM2_M_HEADER_IN_MSG 40097 18.07 14.03 20.02 23 XM_B_SpammyWords2 37996 20.50 23.67 18.97 24 RCVD_IN_MSPIKE_H2 37021 18.41 18.28 18.48 25 T_KAM_HTML_FONT_INVALID 33412 17.46 19.09 16.68 26 USER_IN_DEF_DKIM_WL 32164 11.36 1.64 16.06 27 RCVD_IN_MSPIKE_H3 31439 13.70 9.57 15.69 28 XM_B_Unsub 29093 12.33 7.78 14.52 29 RCVD_IN_MSPIKE_H4 29059 11.81 6.22 14.51 30 XM_Body_Dirty_Words 29059 15.09 16.30 14.51 31 XM_Multi_Part_URI 28378 17.22 23.55 14.17 32 BAYES_00 23013 9.14 4.29 11.49 33 BAYES_60 22494 10.57 9.20 11.23 34 TooManyTo_001 21097 8.79 5.17 10.53 35 XM_DKIMWhitelistDomains 20711 7.01 0.10 10.34 36 UNPARSEABLE_RELAY 19122 9.81 10.37 9.55 37 T_TooManySym_01 17752 9.15 9.75 8.86 38 LotsOfNums_01 16827 7.25 4.88 8.40 39 FSL_BULK_SIG 16767 9.19 10.88 8.37 40 XM_Evil_Numbers_Gen 16709 7.51 5.79 8.34 41 XM_DK_Undo_02 16673 15.99 31.89 8.32 42 RCVD_IN_VALIDITY_SAFE 15687 6.66 4.23 7.83 43 TR_XM_UnparsRelay 15393 8.43 9.99 7.68 44 XM_SendGrid 15221 7.36 6.85 7.60 45 TM2_M_URI_OPT_OUT 15213 6.31 3.65 7.59 46 TR_XM_DK_Bayes 14903 5.14 0.38 7.44 47 MIME_QP_LONG_LINE 14821 5.60 1.88 7.40 48 HTML_IMAGE_RATIO_02 14695 7.52 7.89 7.34 49 TR_XM_DK_Bayes1 14541 5.02 0.38 7.26 50 XMSubMetaSx_00 14233 9.05 13.07 7.10 51 RCVD_IN_VALIDITY_CERTIFIED 14159 5.83 3.26 7.07 52 MPART_ALT_DIFF 13273 7.29 8.67 6.63 53 HTML_IMAGE_RATIO_04 12631 5.50 3.84 6.31 54 TR_XM_DK_Bayes2 12600 4.32 0.25 6.29 55 LOTS_OF_MONEY 12063 6.42 7.24 6.02 56 T_TooManySym_02 11998 5.90 5.71 5.99 57 BAYES_99 11980 12.00 24.49 5.98 58 TR_XM_DKIM_Undo 11870 12.17 25.12 5.93 59 BOTNET_IPINHOSTNAME 11775 7.44 10.68 5.88 60 XMNumbers 10290 6.15 8.24 5.14 61 IN_ZIMBRA_NJ_WHITELIST 10015 3.38 0.04 5.00 62 XM_H_Long_From01 9988 5.34 6.07 4.99 63 TR_XM_DK_SendGrid 9907 4.52 3.63 4.95 64 XMStrtUSub 9882 5.85 7.75 4.93 65 BAYES_40 9877 4.65 4.07 4.93 66 BAYES_999 9789 9.50 19.05 4.89 67 BAYES_80 9568 5.50 6.99 4.78 68 HTML_IMAGE_RATIO_06 8921 3.83 2.55 4.45 69 XM_UncommonTLD01 8538 9.49 20.32 4.26 70 ANY_BOUNCE_MESSAGE 8521 3.02 0.47 4.25 71 BOUNCE_MESSAGE 8521 3.02 0.46 4.25 72 XM_B_SpammyWords3 7917 5.36 8.27 3.95 73 SHORT_URI_3 7854 2.81 0.52 3.92 74 TR_XM_SpammyWords4 7688 4.45 5.71 3.84 75 XMSexyCombo_05 7572 7.32 14.66 3.78 76 MIME_HTML_MOSTLY 7164 4.01 4.91 3.58 77 MIME_HTML_ONLY_MULTI 6991 3.65 3.99 3.49 78 INVALID_MSGID 6912 2.40 0.21 3.45 79 RCVD_IN_IADB_LISTED 6869 2.69 1.16 3.43 80 BAYES_20 6741 3.22 2.91 3.36 81 MSGID_NOFQDN1 6615 2.27 0.13 3.30 82 XMSexyCombo_01 6522 3.01 2.49 3.26 83 TO_MALFORMED 6275 2.12 0.01 3.13 84 RELAYCOUNTRY_META 6115 14.45 38.08 3.05 85 XM_B_Phish_Phrases 6076 3.24 3.68 3.03 86 T_XMDrugObfuBody_14 6070 2.91 2.65 3.03 87 RCVD_IN_IADB_SPF 6036 2.34 0.95 3.01 88 XM_H_Trusted_IP 6013 2.02 0.00 3.00 89 TR_DCC_Bayes_99 5906 8.07 18.68 2.95 90 T_REMOTE_IMAGE 5887 2.86 2.69 2.94 91 FROM_EXCESS_BASE64 5862 2.47 1.54 2.93 92 BAYES_95 5645 3.04 3.50 2.82 93 RCVD_IN_IADB_SENDERID 5492 2.12 0.84 2.74 94 RCVD_IN_IADB_DK 5327 2.08 0.88 2.66 95 RCVD_IN_MSPIKE_H5 5253 1.87 0.32 2.62 96 TR_XM_PhishingBody 5006 3.04 4.16 2.50 97 DKIM_INVALID 4938 2.97 4.02 2.46 98 MAILING_LIST_MULTI 4880 2.16 1.57 2.44 99 TVD_RCVD_IP 4852 1.66 0.10 2.42 100 XMStockSpam_06 4339 1.82 1.10 2.17 101 HTML_IMAGE_RATIO_08 4299 2.00 1.71 2.15 102 XM_B_SpammyTLD 4220 2.35 2.86 2.11 103 IN_HORDE_ADDRESS_BOOK 4164 1.43 0.07 2.08 104 TR_XM_SB_Phish 4142 1.72 0.99 2.07 105 RCVD_IN_IADB_VOUCHED 4107 1.61 0.69 2.05 106 XMSubPhish11 4097 1.68 0.92 2.05 107 URI_NOVOWEL 3986 2.54 3.69 1.99 108 XM_PDF 3985 1.47 0.38 1.99 109 BAYES_05 3939 1.91 1.80 1.97 110 TVD_SPACE_RATIO 3912 2.28 2.95 1.95 111 XM_GoogleGroups 3746 2.08 2.50 1.87 112 XMBSHREFv2 3632 1.28 0.17 1.81 113 HTML_MIME_NO_HTML_TAG 3539 11.08 30.37 1.77 114 BOTNET 3503 10.92 29.92 1.75 115 TR_XM_SpammyWords2 3378 3.50 7.25 1.69 116 XM_CamelCaseFrm001 3368 1.72 1.79 1.68 117 XMGappySubj_01 3156 1.09 0.07 1.58 118 XMSubMetaSx_01 3100 1.20 0.47 1.55 119 RCVD_IN_RP_SAFE 3092 1.33 0.88 1.54 120 TR_XM_SpammyWords5 3044 2.28 3.85 1.52 121 RCVD_IN_RP_CERTIFIED 2834 1.17 0.66 1.41 122 T_TooManySym_03 2773 0.97 0.12 1.38 123 TM2_M_VERY_LONG_WORD 2769 1.91 3.00 1.38 124 TooManyTo_002 2734 1.06 0.44 1.36 125 UNTRUSTED_Relay 2664 11.83 33.58 1.33 126 URI_HEX 2660 1.31 1.28 1.33 127 XMBdyGiftCard01 2653 1.35 1.40 1.32 128 RCVD_IN_BL_SPAMCOP_NET 2649 3.50 8.02 1.32 129 TR_XM_SpammyRelay 2624 4.68 11.66 1.31 130 RCVD_IN_IADB_OPTIN 2484 0.96 0.38 1.24 131 XMSexyCombo_02 2476 0.97 0.41 1.24 132 HTML_FONT_FACE_BAD 2453 0.99 0.49 1.22 133 XMDiploma_00 2449 1.56 2.25 1.22 134 XM_DK_Undo_01 2428 1.31 1.53 1.21 135 XMSubNoVowel 2415 1.23 1.28 1.21 136 SUBJ_ALL_CAPS 2402 1.54 2.25 1.20 137 TR_Symld_Words 2342 1.02 0.71 1.17 138 T_XMDrugObfuBody_08 2172 1.46 2.24 1.08 139 TR_MetaPhish_Combo_01 2145 0.85 0.41 1.07 140 XM_H_Long_From02 2134 0.88 0.50 1.07 141 XM_B_Phish66 2085 1.29 1.81 1.04 142 XM_B_Investor 2062 1.66 2.97 1.03 143 XM_SPF_SoftFail 2052 3.48 8.55 1.02 144 XMLngstWrd_00 2041 1.31 1.91 1.02 145 XMBrknScrpt_02 2012 1.14 1.42 1.00 146 TooManyTo_003 1979 0.79 0.39 0.99 147 DKIM_ADSP_CUSTOM_MED 1977 1.07 1.24 0.99 148 XMLngstWrd_01 1883 1.24 1.86 0.94 149 XM_B_DNDMA 1866 0.79 0.50 0.93 150 HTML_IMAGE_ONLY_20 1840 0.79 0.51 0.92 151 XM_B_Unsub2 1756 1.07 1.46 0.88 152 T_MANY_PILL_PRICE 1754 0.59 0.00 0.88 153 RCVD_IN_MSPIKE_BL 1740 2.01 4.36 0.87 154 TR_XM_MSPIKECOMBO 1737 2.00 4.36 0.87 155 XMSlimDrugH 1704 1.56 3.03 0.85 156 XMLngstWrd_02 1691 1.16 1.81 0.84 157 XM_B_COVIDMETA 1656 0.91 1.08 0.83 158 RELAYCOUNTRY_CA 1640 2.19 5.03 0.82 159 XM_UB50 1577 5.78 16.13 0.79 160 XM_B_COPY_HTML 1565 0.81 0.88 0.78 161 TR_XM_SPAMCOP 1459 1.78 3.95 0.73 162 XMPhish30 1447 0.83 1.06 0.72 163 TR_MSPIKEBAYES00 1445 0.49 0.02 0.72 164 XM_ProductURIs 1437 0.72 0.72 0.72 165 XMLngstWrd_03 1425 1.06 1.78 0.71 166 TooManyTo_004 1418 0.60 0.37 0.71 167 KHOP_HELO_FCRDNS 1404 1.36 2.73 0.70 168 SHORTENED_URL_HREF 1393 0.66 0.58 0.70 169 XMBody_95 1342 0.46 0.04 0.67 170 TR_XM_Spammywords 1320 0.69 0.75 0.66 171 XM_S_SpammyWords 1320 0.69 0.75 0.66 172 T_FILL_THIS_FORM_SHORT 1301 1.40 2.94 0.65 173 XM_OfRef6 1299 1.11 2.07 0.65 174 USER_IN_WHITELIST 1287 0.43 0.00 0.64 175 USER_IN_WELCOMELIST 1287 0.43 0.00 0.64 176 XMLngstWrd_04 1280 1.00 1.73 0.64 177 RDNS_DYNAMIC 1266 0.58 0.49 0.63 178 HTML_TAG_BALANCE_BODY 1265 0.80 1.15 0.63 179 XMGenDplmaNmb 1261 0.77 1.06 0.63 180 NML_ADSP_CUSTOM_MED 1255 0.80 1.15 0.63 181 URI_TRY_3LD 1254 0.63 0.63 0.63 182 XMSubMetaSxObfu_02 1226 0.49 0.23 0.61 183 XMSubMetaI_00 1218 0.65 0.75 0.61 184 TooManyTo_005 1195 0.51 0.32 0.60 185 FORGED_GMAIL_RCVD 1185 0.77 1.15 0.59 186 XMHTMLBadTable_001 1162 0.65 0.79 0.58 187 DKIM_ADSP_NXDOMAIN 1129 0.48 0.29 0.56 188 XM_H_PHPMailer 1086 4.74 13.43 0.54 189 HTTPS_HTTP_MISMATCH 1081 0.54 0.53 0.54 190 T_TooManySym_04 1069 0.38 0.05 0.53 191 RCVD_IN_MSPIKE_L3 1065 0.98 1.89 0.53 192 T_XMHurry_00 1052 0.76 1.26 0.53 193 XMHTML_After_End 1051 0.50 0.46 0.52 194 XMPhish14 1032 0.48 0.40 0.52 195 RELAYCOUNTRY_GB 1026 0.65 0.94 0.51 196 TR_XM_MaxUnsub 1017 1.27 2.85 0.51 197 MPART_ALT_DIFF_COUNT 998 0.65 0.95 0.50 198 PDS_OTHER_BAD_TLD 992 0.60 0.83 0.50 199 T_Symld_Words_02 984 0.45 0.37 0.49 200 T_XMDrugObfuBody_00 980 0.61 0.86 0.49 ----------------------------------------------------------------------