Email: 285507 Autolearn: 0 AvgScore: 3.26 AvgScanTime: 1.26 sec Spam: 101551 Autolearn: 0 AvgScore: 14.03 AvgScanTime: 1.41 sec Ham: 183956 Autolearn: 0 AvgScore: -2.68 AvgScanTime: 1.19 sec Time Spent Running SA: 100.23 hours Time Spent Processing Spam: 39.64 hours Time Spent Processing Ham: 60.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 95294 85.58 93.84 81.03 2 DKIM_SIGNED 89582 79.01 88.21 73.93 3 XM_DK_Pass 87861 76.76 86.52 71.37 4 DKIM_VALID 87330 76.24 86.00 70.85 5 XM_B_Unicode 83732 73.19 82.45 68.08 6 RELAYCOUNTRY_US 82789 79.98 81.52 79.12 7 DCC_CHECK 74743 47.87 73.60 33.67 8 XMListUnsubscribeExists 70797 56.96 69.72 49.92 9 DKIM_VALID_AU 67950 61.20 66.91 58.05 10 XM_B_SpammyWords 67894 49.79 66.86 40.37 11 XM_DK_Undo_02 47813 22.68 47.08 9.21 12 RCVD_IN_MSPIKE_H2 46986 39.78 46.27 36.20 13 XM_B_Unicode3 44791 42.96 44.11 42.33 14 BAYES_99 39739 19.49 39.13 8.65 15 LOC_TINY_FONT_1 37907 29.00 37.33 24.41 16 XM_B_SpammyWords2 37891 24.17 37.31 16.92 17 TR_XM_DKIM_Undo 37274 16.48 36.70 5.32 18 BAYES_50 36683 46.62 36.12 52.41 19 MIME_HTML_ONLY 34376 25.05 33.85 20.19 20 FVGT_m_MULTI_ODD 33365 28.67 32.86 26.36 21 HTML_FONT_LOW_CONTRAST 33275 29.48 32.77 27.67 22 BAYES_999 32257 16.02 31.76 7.33 23 DKIM_VALID_EF 30911 29.67 30.44 29.25 24 TR_DCC_Bayes_99 28541 11.75 28.11 2.73 25 T_KAM_HTML_FONT_INVALID 28307 21.96 27.87 18.69 26 DCC_CHECK_NEGATIVE 26790 52.11 26.38 66.31 27 XM_Body_Dirty_Words 24122 16.31 23.75 12.21 28 RELAYCOUNTRY_META 22326 9.88 21.99 3.19 29 T_TM2_M_HEADER_IN_MSG 19354 21.43 19.06 22.74 30 XMSubLong 18568 21.64 18.28 23.49 31 XM_Multi_Part_URI 17321 14.87 17.06 13.66 32 UNPARSEABLE_RELAY 17124 11.46 16.86 8.47 33 TR_XM_UnparsRelay 16778 10.18 16.52 6.68 34 XM_B_Unsub 15652 12.12 15.41 10.30 35 TR_XM_BayesUnsub 15399 10.85 15.16 8.47 36 RCVD_IN_MSPIKE_WL 14039 14.78 13.82 15.30 37 TR_XM_SpammyRelay 13769 5.77 13.56 1.47 38 LOTS_OF_MONEY 13449 8.89 13.24 6.48 39 XM_B_SpammyWords3 13374 7.42 13.17 4.25 40 RCVD_IN_BL_SPAMCOP_NET 13268 5.39 13.07 1.16 41 TR_XM_SpammyWords2 13254 5.45 13.05 1.25 42 RCVD_IN_MSPIKE_H3 12800 11.24 12.60 10.49 43 XMSexyCombo_05 11655 6.02 11.48 3.01 44 BOTNET_IPINHOSTNAME 11247 8.01 11.08 6.32 45 BOTNET 11063 4.77 10.89 1.39 46 FSL_BULK_SIG 10802 5.75 10.64 3.06 47 TR_XM_SpammyWords4 10593 5.87 10.43 3.35 48 RELAYCOUNTRY_CA 9679 4.12 9.53 1.13 49 MPART_ALT_DIFF 9246 6.50 9.10 5.07 50 BAYES_80 8935 6.52 8.80 5.26 51 TR_XM_SPAMCOP 8682 3.33 8.55 0.45 52 XM_UncommonTLD01 8226 5.86 8.10 4.63 53 UNTRUSTED_Relay 8060 3.51 7.94 1.07 54 XM_SendGrid 7825 6.20 7.71 5.37 55 XM_Evil_Numbers_Gen 7641 7.69 7.52 7.78 56 HTML_IMAGE_RATIO_02 7338 6.96 7.23 6.81 57 BAYES_60 7114 10.13 7.01 11.86 58 XM_H_Long_From01 6806 5.58 6.70 4.96 59 MIME_HTML_ONLY_MULTI 6798 4.39 6.69 3.12 60 LotsOfNums_01 6547 7.72 6.45 8.42 61 TM2_M_VERY_LONG_WORD 6472 3.08 6.37 1.26 62 TR_XM_PhishingBody 5626 3.69 5.54 2.68 63 BAYES_95 5561 3.89 5.48 3.02 64 XMSubMetaSx_00 5315 4.24 5.23 3.68 65 TR_XM_DK_SendGrid 5120 4.21 5.04 3.76 66 T_REMOTE_IMAGE 4975 4.16 4.90 3.75 67 T_XMDrugObfuBody_14 4927 3.04 4.85 2.04 68 HTML_MIME_NO_HTML_TAG 4776 2.94 4.70 1.96 69 XM_DIRTYINTL 4771 1.82 4.70 0.23 70 TR_XM_SpammyWords5 4730 2.92 4.66 1.96 71 HTML_IMAGE_RATIO_04 4550 4.88 4.48 5.10 72 XM_CamelCaseFrm001 4489 2.87 4.42 2.01 73 XM_B_Phish_Phrases 4407 3.28 4.34 2.69 74 RCVD_IN_VALIDITY_SAFE 4375 5.48 4.31 6.12 75 T_FILL_THIS_FORM_SHORT 4365 1.86 4.30 0.52 76 XMLngstWrd_00 4334 1.85 4.27 0.51 77 XMLngstWrd_01 4273 1.75 4.21 0.40 78 XM_OfRef6 4240 2.17 4.18 1.06 79 XMLngstWrd_02 4205 1.64 4.14 0.26 80 RCVD_IN_VALIDITY_RPBL 4137 1.47 4.07 0.03 81 XM_GoogleGroups 4106 2.16 4.04 1.13 82 TooManyTo_001 3910 5.93 3.85 7.08 83 XM_SPF_SoftFail 3898 2.97 3.84 2.48 84 XM_B_Investor 3858 2.11 3.80 1.18 85 XMLngstWrd_03 3797 1.44 3.74 0.17 86 HTML_TITLE_SUBJ_DIFF 3796 1.35 3.74 0.03 87 XMLngstWrd_04 3760 1.40 3.70 0.13 88 UPPERCASE_75_100 3735 1.32 3.68 0.01 89 XMStrtUSub 3731 4.52 3.67 4.99 90 XM_UB50 3690 1.74 3.63 0.70 91 RCVD_IN_VALIDITY_CERTIFIED 3650 4.72 3.59 5.34 92 MIME_HTML_MOSTLY 3521 2.71 3.47 2.30 93 XMBody_17 3485 1.57 3.43 0.55 94 XM_B_Phish66 3484 2.15 3.43 1.44 95 XMNumbers 3408 5.71 3.36 7.00 96 BOTNET_NORDNS 3380 1.19 3.33 0.01 97 RCVD_IN_MSPIKE_BL 3185 1.90 3.14 1.22 98 SpammyFromTLD_01 3048 1.36 3.00 0.45 99 SUBJ_ALL_CAPS 3004 2.14 2.96 1.68 100 TR_XM_MSPIKECOMBO 2915 1.81 2.87 1.22 101 T_XMDrugObfuBody_08 2853 1.84 2.81 1.31 102 XM_B_Unsub2 2806 1.68 2.76 1.08 103 TM2_M_URI_OPT_OUT 2766 2.69 2.72 2.68 104 USER_IN_DEF_DKIM_WL 2751 11.72 2.71 16.70 105 XM_B_SpammyWords4 2733 1.52 2.69 0.87 106 XMDiploma_00 2718 1.68 2.68 1.13 107 XM_B_SpammyTLD 2712 2.17 2.67 1.90 108 HTML_IMAGE_RATIO_06 2687 3.01 2.65 3.21 109 TR_XM_FormFill 2576 0.91 2.54 0.01 110 T_TooManySym_01 2520 6.85 2.48 9.26 111 MIME_QP_LONG_LINE 2483 3.47 2.45 4.03 112 TR_XM_PHPDW 2419 1.11 2.38 0.41 113 URI_NOVOWEL 2375 2.35 2.34 2.36 114 TR_XM_PHPForged 2372 1.04 2.34 0.33 115 TR_XM_FormFill2 2355 1.04 2.32 0.33 116 XM_H_PHPOS 2322 1.01 2.29 0.31 117 DKIM_INVALID 2252 2.77 2.22 3.08 118 XM_B_DynamicLink 2249 0.81 2.21 0.03 119 HK_RANDOM_REPLYTO 2237 0.89 2.20 0.16 120 HTML_IMAGE_RATIO_08 2232 1.98 2.20 1.86 121 XM_UB99 2169 0.76 2.14 0.00 122 FROM_EXCESS_BASE64 2043 2.96 2.01 3.49 123 SpammyFromTLD_02 2020 0.84 1.99 0.21 124 XM_Body_Dirty_Words_01 2016 0.80 1.99 0.15 125 XMClaimOffer 1956 0.77 1.93 0.14 126 RCVD_IN_IADB_LISTED 1873 3.60 1.84 4.57 127 XM_H_Undi_Recip 1850 0.75 1.82 0.16 128 XM_DK_Undo_01 1841 1.42 1.81 1.21 129 XM_UB999 1840 0.65 1.81 0.00 130 RELAYCOUNTRY_CN 1819 0.66 1.79 0.04 131 T_XMHurry_00 1801 0.90 1.77 0.42 132 XMStockSpam_06 1799 1.04 1.77 0.64 133 MONEY_NOHTML 1793 0.67 1.77 0.07 134 KHOP_HELO_FCRDNS 1792 1.93 1.76 2.02 135 TR_LOTS_OF_MONEY3 1788 0.74 1.76 0.18 136 MPART_ALT_DIFF_COUNT 1702 1.08 1.68 0.75 137 XMReplyNow 1695 0.78 1.67 0.29 138 HTML_TAG_BALANCE_BODY 1672 0.97 1.65 0.60 139 TR_XM_MSPIKECOMBO2 1662 0.90 1.64 0.50 140 HTML_IMAGE_ONLY_20 1635 1.05 1.61 0.74 141 RCVD_IN_IADB_SPF 1578 3.16 1.55 4.04 142 ALL_TRUSTED 1577 12.37 1.55 18.33 143 XMSexyCombo_01 1554 0.93 1.53 0.60 144 XMBrknScrpt_02 1508 0.91 1.48 0.60 145 XM_H_Long_From02 1475 1.18 1.45 1.03 146 RCVD_IN_IADB_SENDERID 1470 2.84 1.45 3.61 147 RCVD_IN_IADB_DK 1454 2.78 1.43 3.52 148 URI_HEX 1453 1.10 1.43 0.91 149 TR_XM_BayesRelay 1437 0.51 1.42 0.00 150 RCVD_IN_PSBL 1426 0.72 1.40 0.34 151 XMBdyGiftCard01 1425 1.22 1.40 1.12 152 HTTPS_HTTP_MISMATCH 1413 0.83 1.39 0.52 153 TR_XM_Undi_Recip5 1411 0.50 1.39 0.01 154 TR_XM_NoHeaderRelay 1396 0.54 1.37 0.09 155 TR_XM_SB_Phish 1353 1.59 1.33 1.73 156 HTML_SHORT_LINK_IMG_3 1350 0.50 1.33 0.04 157 RCVD_IN_MSPIKE_L3 1342 0.88 1.32 0.64 158 URIBL_DBL_SPAM 1336 0.48 1.32 0.02 159 RELAYCOUNTRY_IN 1329 0.49 1.31 0.04 160 TR_XM_Undi_Recip11 1328 0.48 1.31 0.03 161 XM_URI_RBL 1301 0.55 1.28 0.14 162 T_XMDrugObfuBody_00 1297 0.89 1.28 0.68 163 TR_Symld_Words 1272 1.68 1.25 1.92 164 RELAYCOUNTRY_DE 1236 0.60 1.22 0.26 165 TR_XM_SpammyWords3 1219 0.64 1.20 0.33 166 UNDISC_MONEY 1210 0.43 1.19 0.00 167 XM_H_PHPOS_M 1205 0.48 1.19 0.10 168 XMSubPhish11 1204 1.53 1.19 1.71 169 DIET_1 1196 0.65 1.18 0.36 170 HTML_FONT_TINY_NORDNS 1185 0.46 1.17 0.07 171 BAYES_40 1184 3.13 1.17 4.21 172 RCVD_IN_MSPIKE_H4 1173 3.35 1.16 4.56 173 XMSubNoVowel 1150 1.39 1.13 1.53 174 XMGenDplmaNmb 1140 0.75 1.12 0.54 175 XMHTMLBadTable_001 1118 0.90 1.10 0.80 176 MIME_BASE64_TEXT 1113 0.49 1.10 0.15 177 XM_B_COVIDMETA 1102 0.56 1.09 0.27 178 XM_ProductURIs 1093 0.90 1.08 0.81 179 BAYES_20 1092 2.32 1.08 3.00 180 MAILING_LIST_MULTI 1087 1.73 1.07 2.09 181 FONT_INVIS_LONG_LINE 1072 0.41 1.06 0.06 182 XMHTML_After_End 1071 0.71 1.05 0.52 183 RCVD_IN_MSPIKE_L5 1071 0.38 1.05 0.01 184 RELAYCOUNTRY_RU 1045 0.38 1.03 0.02 185 RCVD_IN_IADB_VOUCHED 1032 2.27 1.02 2.96 186 URI_TRY_3LD 1005 0.72 0.99 0.57 187 SHOPIFY_IMG_NOT_RCVD_SFY 997 0.49 0.98 0.22 188 RELAYCOUNTRY_AU 988 0.48 0.97 0.20 189 XM_OfRef7 986 0.40 0.97 0.09 190 XMSubMetaI_00 983 0.79 0.97 0.69 191 XMPhish30 974 0.84 0.96 0.78 192 TR_XM_COVIDMETA1 970 0.49 0.96 0.23 193 RCVD_IN_RP_SAFE 964 1.14 0.95 1.24 194 XM_H_PHPMailer 956 0.77 0.94 0.67 195 TR_Mismatch_TLD_01 944 0.53 0.93 0.31 196 TVD_RCVD_SPACE_BRACKET 914 0.32 0.90 0.00 197 TR_Caps_n_Bayes_99 902 0.59 0.89 0.42 198 XM_RXBody 889 0.45 0.88 0.21 199 URIBL_BLACK 873 0.32 0.86 0.03 200 LOADSA_MONEY_COMBO 868 0.32 0.85 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149053 85.58 93.84 81.03 2 RELAYCOUNTRY_US 145553 79.98 81.52 79.12 3 DKIM_SIGNED 135993 79.01 88.21 73.93 4 XM_DK_Pass 131296 76.76 86.52 71.37 5 DKIM_VALID 130333 76.24 86.00 70.85 6 XM_B_Unicode 125231 73.19 82.45 68.08 7 DCC_CHECK_NEGATIVE 121976 52.11 26.38 66.31 8 DKIM_VALID_AU 106793 61.20 66.91 58.05 9 BAYES_50 96411 46.62 36.12 52.41 10 XMListUnsubscribeExists 91830 56.96 69.72 49.92 11 XM_B_Unicode3 77862 42.96 44.11 42.33 12 XM_B_SpammyWords 74266 49.79 66.86 40.37 13 RCVD_IN_MSPIKE_H2 66589 39.78 46.27 36.20 14 DCC_CHECK 61935 47.87 73.60 33.67 15 DKIM_VALID_EF 53806 29.67 30.44 29.25 16 HTML_FONT_LOW_CONTRAST 50895 29.48 32.77 27.67 17 FVGT_m_MULTI_ODD 48482 28.67 32.86 26.36 18 LOC_TINY_FONT_1 44902 29.00 37.33 24.41 19 XMSubLong 43220 21.64 18.28 23.49 20 T_TM2_M_HEADER_IN_MSG 41827 21.43 19.06 22.74 21 MIME_HTML_ONLY 37145 25.05 33.85 20.19 22 T_KAM_HTML_FONT_INVALID 34387 21.96 27.87 18.69 23 ALL_TRUSTED 33726 12.37 1.55 18.33 24 XM_B_SpammyWords2 31125 24.17 37.31 16.92 25 USER_IN_DEF_DKIM_WL 30724 11.72 2.71 16.70 26 RCVD_IN_MSPIKE_WL 28148 14.78 13.82 15.30 27 XM_Multi_Part_URI 25123 14.87 17.06 13.66 28 XM_Body_Dirty_Words 22452 16.31 23.75 12.21 29 BAYES_60 21808 10.13 7.01 11.86 30 XM_DKIMWhitelistDomains 21516 7.69 0.44 11.70 31 RCVD_IN_MSPIKE_H3 19301 11.24 12.60 10.49 32 XM_B_Unsub 18948 12.12 15.41 10.30 33 BAYES_00 17440 6.32 0.60 9.48 34 T_TooManySym_01 17042 6.85 2.48 9.26 35 XM_DK_Undo_02 16948 22.68 47.08 9.21 36 BAYES_99 15908 19.49 39.13 8.65 37 UNPARSEABLE_RELAY 15587 11.46 16.86 8.47 38 TR_XM_BayesUnsub 15576 10.85 15.16 8.47 39 LotsOfNums_01 15498 7.72 6.45 8.42 40 XM_Evil_Numbers_Gen 14315 7.69 7.52 7.78 41 BAYES_999 13487 16.02 31.76 7.33 42 TooManyTo_001 13032 5.93 3.85 7.08 43 XMNumbers 12881 5.71 3.36 7.00 44 HTML_IMAGE_RATIO_02 12525 6.96 7.23 6.81 45 TR_XM_UnparsRelay 12290 10.18 16.52 6.68 46 T_TooManySym_02 12027 4.41 0.56 6.54 47 LOTS_OF_MONEY 11924 8.89 13.24 6.48 48 BOTNET_IPINHOSTNAME 11626 8.01 11.08 6.32 49 IN_ZIMBRA_NJ_WHITELIST 11287 3.98 0.07 6.14 50 TR_XM_DK_Bayes 11268 4.14 0.55 6.13 51 RCVD_IN_VALIDITY_SAFE 11258 5.48 4.31 6.12 52 TR_XM_DK_Bayes1 11104 4.08 0.55 6.04 53 TR_XM_DK_Bayes2 9978 3.65 0.43 5.42 54 XM_SendGrid 9878 6.20 7.71 5.37 55 RCVD_IN_VALIDITY_CERTIFIED 9815 4.72 3.59 5.34 56 TR_XM_DKIM_Undo 9786 16.48 36.70 5.32 57 BAYES_80 9678 6.52 8.80 5.26 58 HTML_IMAGE_RATIO_04 9390 4.88 4.48 5.10 59 MPART_ALT_DIFF 9322 6.50 9.10 5.07 60 XMStrtUSub 9178 4.52 3.67 4.99 61 XM_H_Long_From01 9132 5.58 6.70 4.96 62 XM_UncommonTLD01 8517 5.86 8.10 4.63 63 RCVD_IN_IADB_LISTED 8412 3.60 1.84 4.57 64 RCVD_IN_MSPIKE_H4 8387 3.35 1.16 4.56 65 XM_B_SpammyWords3 7814 7.42 13.17 4.25 66 BAYES_40 7749 3.13 1.17 4.21 67 TVD_RCVD_IP 7572 2.76 0.32 4.12 68 INVALID_MSGID 7463 2.69 0.20 4.06 69 RCVD_IN_IADB_SPF 7435 3.16 1.55 4.04 70 MIME_QP_LONG_LINE 7413 3.47 2.45 4.03 71 TR_XM_DK_SendGrid 6910 4.21 5.04 3.76 72 T_REMOTE_IMAGE 6895 4.16 4.90 3.75 73 XMSubMetaSx_00 6777 4.24 5.23 3.68 74 RCVD_IN_IADB_SENDERID 6650 2.84 1.45 3.61 75 RCVD_IN_IADB_DK 6482 2.78 1.43 3.52 76 FROM_EXCESS_BASE64 6414 2.96 2.01 3.49 77 ANY_BOUNCE_MESSAGE 6395 2.42 0.51 3.48 78 BOUNCE_MESSAGE 6395 2.42 0.51 3.48 79 TR_XM_SpammyWords4 6155 5.87 10.43 3.35 80 XM_H_Trusted_IP 5923 2.07 0.00 3.22 81 TO_MALFORMED 5913 2.07 0.01 3.21 82 HTML_IMAGE_RATIO_06 5911 3.01 2.65 3.21 83 RELAYCOUNTRY_META 5875 9.88 21.99 3.19 84 MIME_HTML_ONLY_MULTI 5736 4.39 6.69 3.12 85 DKIM_INVALID 5660 2.77 2.22 3.08 86 FSL_BULK_SIG 5627 5.75 10.64 3.06 87 BAYES_95 5551 3.89 5.48 3.02 88 XMSexyCombo_05 5535 6.02 11.48 3.01 89 BAYES_20 5525 2.32 1.08 3.00 90 RCVD_IN_IADB_VOUCHED 5450 2.27 1.02 2.96 91 XM_PDF 5318 2.00 0.38 2.89 92 TR_DCC_Bayes_99 5014 11.75 28.11 2.73 93 XM_B_Phish_Phrases 4949 3.28 4.34 2.69 94 TM2_M_URI_OPT_OUT 4925 2.69 2.72 2.68 95 TR_XM_PhishingBody 4921 3.69 5.54 2.68 96 T_TooManySym_03 4761 1.75 0.23 2.59 97 XM_SPF_SoftFail 4568 2.97 3.84 2.48 98 URI_NOVOWEL 4335 2.35 2.34 2.36 99 MIME_HTML_MOSTLY 4228 2.71 3.47 2.30 100 IN_HORDE_ADDRESS_BOOK 4064 1.46 0.12 2.21 101 XMBSHREFv2 4005 1.50 0.28 2.18 102 BAYES_05 3883 1.58 0.62 2.11 103 MAILING_LIST_MULTI 3841 1.73 1.07 2.09 104 T_XMDrugObfuBody_14 3754 3.04 4.85 2.04 105 KHOP_HELO_FCRDNS 3712 1.93 1.76 2.02 106 XM_CamelCaseFrm001 3692 2.87 4.42 2.01 107 RCVD_IN_IADB_OPTIN 3648 1.50 0.64 1.98 108 TR_XM_SpammyWords5 3609 2.92 4.66 1.96 109 HTML_MIME_NO_HTML_TAG 3605 2.94 4.70 1.96 110 TR_Symld_Words 3533 1.68 1.25 1.92 111 XM_B_SpammyTLD 3494 2.17 2.67 1.90 112 HTML_IMAGE_RATIO_08 3429 1.98 2.20 1.86 113 TR_XM_SB_Phish 3177 1.59 1.33 1.73 114 XMSubPhish11 3153 1.53 1.19 1.71 115 SUBJ_ALL_CAPS 3092 2.14 2.96 1.68 116 XMGappySubj_01 3043 1.12 0.15 1.65 117 XM_B_SEO 3041 1.22 0.43 1.65 118 TVD_SPACE_RATIO 2993 1.09 0.12 1.63 119 FVGT_m_MULTI_ODD_EMAIL 2917 1.06 0.10 1.59 120 XMSubNoVowel 2809 1.39 1.13 1.53 121 TR_XM_SpammyRelay 2712 5.77 13.56 1.47 122 XM_B_Phish66 2655 2.15 3.43 1.44 123 BOTNET 2549 4.77 10.89 1.39 124 XM_shorewaves_Whitelist 2526 0.88 0.00 1.37 125 MSGID_NOFQDN1 2496 0.88 0.02 1.36 126 T_XMDrugObfuBody_08 2412 1.84 2.81 1.31 127 TooManyTo_002 2313 1.03 0.61 1.26 128 TM2_M_VERY_LONG_WORD 2310 3.08 6.37 1.26 129 TR_XM_SpammyWords2 2294 5.45 13.05 1.25 130 RCVD_IN_RP_SAFE 2277 1.14 0.95 1.24 131 RCVD_IN_MSPIKE_BL 2242 1.90 3.14 1.22 132 TR_XM_MSPIKECOMBO 2241 1.81 2.87 1.22 133 XMBody_95 2241 0.83 0.12 1.22 134 XM_DK_Undo_01 2226 1.42 1.81 1.21 135 XM_B_Investor 2175 2.11 3.80 1.18 136 RCVD_IN_BL_SPAMCOP_NET 2134 5.39 13.07 1.16 137 XMDiploma_00 2079 1.68 2.68 1.13 138 XM_GoogleGroups 2073 2.16 4.04 1.13 139 RELAYCOUNTRY_CA 2070 4.12 9.53 1.13 140 XMBdyGiftCard01 2056 1.22 1.40 1.12 141 RCVD_IN_RP_CERTIFIED 2016 0.97 0.75 1.10 142 XM_B_Unsub2 1989 1.68 2.76 1.08 143 UNTRUSTED_Relay 1964 3.51 7.94 1.07 144 XM_OfRef6 1951 2.17 4.18 1.06 145 HTML_FONT_FACE_BAD 1899 0.96 0.84 1.03 146 XM_H_Long_From02 1892 1.18 1.45 1.03 147 URI_HEX 1676 1.10 1.43 0.91 148 TooManyTo_003 1669 0.78 0.54 0.91 149 XM_B_COPY_HTML 1614 0.83 0.73 0.88 150 DKIM_ADSP_CUSTOM_MED 1603 0.83 0.76 0.87 151 XM_B_SpammyWords4 1596 1.52 2.69 0.87 152 TR_MetaPhish_Combo_01 1563 0.78 0.64 0.85 153 XM_D_tchamptons_WL 1524 0.54 0.03 0.83 154 XM_ProductURIs 1483 0.90 1.08 0.81 155 XMHTMLBadTable_001 1465 0.90 1.10 0.80 156 XMPhish30 1435 0.84 0.96 0.78 157 MPART_ALT_DIFF_COUNT 1372 1.08 1.68 0.75 158 HTML_IMAGE_ONLY_20 1369 1.05 1.61 0.74 159 TVD_SPACE_RATIO_MINFP 1326 0.53 0.18 0.72 160 USER_IN_WHITELIST 1323 0.46 0.00 0.72 161 USER_IN_WELCOMELIST 1323 0.46 0.00 0.72 162 XM_UB50 1284 1.74 3.63 0.70 163 TooManyTo_004 1271 0.62 0.50 0.69 164 XMSubMetaI_00 1271 0.79 0.97 0.69 165 T_XMDrugObfuBody_00 1257 0.89 1.28 0.68 166 XM_H_PHPMailer 1239 0.77 0.94 0.67 167 XMStockSpam_06 1175 1.04 1.77 0.64 168 RCVD_IN_MSPIKE_L3 1174 0.88 1.32 0.64 169 RDNS_DYNAMIC 1156 0.67 0.75 0.63 170 XMSexyCombo_01 1110 0.93 1.53 0.60 171 TooManyTo_005 1104 0.55 0.47 0.60 172 XMBrknScrpt_02 1103 0.91 1.48 0.60 173 HTML_TAG_BALANCE_BODY 1101 0.97 1.65 0.60 174 XMSubMetaSxObfu_02 1068 0.47 0.26 0.58 175 RCVD_IN_MSPIKE_L4 1056 0.55 0.49 0.57 176 XM_S_SubURI 1055 0.38 0.03 0.57 177 URI_TRY_3LD 1047 0.72 0.99 0.57 178 XMBody_17 1008 1.57 3.43 0.55 179 XMGenDplmaNmb 1001 0.75 1.12 0.54 180 NML_ADSP_CUSTOM_MED 985 0.56 0.59 0.54 181 XMHTML_After_End 958 0.71 1.05 0.52 182 T_FILL_THIS_FORM_SHORT 954 1.86 4.30 0.52 183 HTTPS_HTTP_MISMATCH 950 0.83 1.39 0.52 184 XM_B_REG_HTML 950 0.60 0.76 0.52 185 FORGED_GMAIL_RCVD 950 0.56 0.65 0.52 186 HELO_NODOT 946 0.53 0.56 0.51 187 HELO_NO_DOMAIN 945 0.53 0.55 0.51 188 XMSubMetaD_03 944 0.36 0.09 0.51 189 XMLngstWrd_00 942 1.85 4.27 0.51 190 TR_XM_MSPIKECOMBO2 911 0.90 1.64 0.50 191 TR_XM_SPAMCOP 836 3.33 8.55 0.45 192 RELAYCOUNTRY_GB 833 0.59 0.84 0.45 193 SpammyFromTLD_01 827 1.36 3.00 0.45 194 XM_ShortIntro_01 789 0.47 0.53 0.43 195 T_XMHurry_00 776 0.90 1.77 0.42 196 TR_Caps_n_Bayes_99 774 0.59 0.89 0.42 197 TR_XM_PHPDW 762 1.11 2.38 0.41 198 DKIM_ADSP_NXDOMAIN 759 0.43 0.46 0.41 199 CTE_8BIT_MISMATCH 749 0.27 0.03 0.41 200 T_TooManySym_04 737 0.32 0.17 0.40 ----------------------------------------------------------------------