Email: 363643 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.68 sec Spam: 138496 Autolearn: 0 AvgScore: 13.46 AvgScanTime: 1.74 sec Ham: 225147 Autolearn: 0 AvgScore: -0.60 AvgScanTime: 1.64 sec Time Spent Running SA: 169.47 hours Time Spent Processing Spam: 66.85 hours Time Spent Processing Ham: 102.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133885 90.36 96.67 86.48 2 DKIM_SIGNED 130728 87.18 94.39 82.74 3 XM_DK_Pass 128895 85.34 93.07 80.58 4 DKIM_VALID 128076 84.91 92.48 80.26 5 RELAYCOUNTRY_US 114114 83.13 82.40 83.58 6 XM_B_Unicode 113819 78.49 82.18 76.21 7 XMListUnsubscribeExists 110797 67.80 80.00 60.29 8 DCC_CHECK 110287 60.51 79.63 48.75 9 DKIM_VALID_AU 101671 70.36 73.41 68.49 10 XM_B_SpammyWords 93225 56.40 67.31 49.69 11 RCVD_IN_MSPIKE_H2 69107 45.32 49.90 42.50 12 XM_DK_Undo_02 68943 25.19 49.78 10.06 13 LOC_TINY_FONT_1 63122 37.70 45.58 32.86 14 XM_B_Unicode3 62564 47.53 45.17 48.99 15 HTML_FONT_LOW_CONTRAST 54845 36.99 39.60 35.39 16 TR_XM_DKIM_Undo 53998 18.66 38.99 6.15 17 BAYES_50 53176 49.55 38.40 56.42 18 XM_B_SpammyWords2 52429 28.93 37.86 23.45 19 FVGT_m_MULTI_ODD 51823 32.85 37.42 30.04 20 DKIM_VALID_EF 49548 31.52 35.78 28.90 21 BAYES_99 48621 18.25 35.11 7.88 22 MIME_HTML_ONLY 43286 25.20 31.25 21.47 23 BAYES_999 37669 14.39 27.20 6.51 24 TR_DCC_Bayes_99 37510 12.55 27.08 3.61 25 T_KAM_HTML_FONT_INVALID 37498 22.64 27.08 19.91 26 XM_Multi_Part_URI 30114 19.85 21.74 18.69 27 XMSubLong 29713 21.69 21.45 21.84 28 XM_Body_Dirty_Words 29637 15.55 21.40 11.96 29 DCC_CHECK_NEGATIVE 28182 39.46 20.35 51.22 30 RELAYCOUNTRY_META 26215 9.23 18.93 3.26 31 RCVD_IN_MSPIKE_WL 23493 19.46 16.96 20.99 32 T_TM2_M_HEADER_IN_MSG 22404 19.37 16.18 21.33 33 UNPARSEABLE_RELAY 22198 13.73 16.03 12.31 34 BOTNET_IPINHOSTNAME 19807 9.69 14.30 6.85 35 TR_XM_SpammyRelay 19008 6.32 13.72 1.77 36 RCVD_IN_MSPIKE_H3 18481 12.30 13.34 11.65 37 XM_B_Unsub 18045 10.95 13.03 9.67 38 RCVD_IN_BL_SPAMCOP_NET 17625 5.45 12.73 0.97 39 TR_XM_SpammyWords2 17488 5.78 12.63 1.58 40 TR_XM_BayesUnsub 17332 9.95 12.51 8.37 41 XM_B_SpammyWords3 16022 8.01 11.57 5.83 42 XM_UncommonTLD01 15599 6.79 11.26 4.04 43 TR_XM_SPAMCOP 14817 4.36 10.70 0.46 44 RELAYCOUNTRY_CA 14382 4.64 10.38 1.11 45 LOTS_OF_MONEY 13902 7.28 10.04 5.59 46 TooManyTo_001 13891 7.69 10.03 6.25 47 XMSexyCombo_05 13775 6.36 9.95 4.16 48 BOTNET 13431 4.83 9.70 1.84 49 TR_XM_UnparsRelay 13125 5.37 9.48 2.84 50 XM_Evil_Numbers_Gen 12878 10.14 9.30 10.67 51 BAYES_80 12423 6.71 8.97 5.33 52 MPART_ALT_DIFF 12210 6.25 8.82 4.67 53 TR_XM_SpammyWords4 12154 5.66 8.78 3.75 54 XM_SendGrid 11809 7.90 8.53 7.52 55 XM_B_SpammyTLD 11766 4.58 8.50 2.18 56 HTML_IMAGE_RATIO_02 11682 9.51 8.43 10.17 57 FSL_BULK_SIG 11196 6.12 8.08 4.91 58 BAYES_60 10653 10.00 7.69 11.42 59 SpammyFromTLD_02 9407 2.72 6.79 0.21 60 TM2_M_VERY_LONG_WORD 9039 3.66 6.53 1.89 61 MIME_HTML_ONLY_MULTI 8602 4.01 6.21 2.66 62 PDS_OTHER_BAD_TLD 8368 2.53 6.04 0.37 63 XMSubMetaSx_00 8254 4.52 5.96 3.64 64 XMBody_17 7949 2.65 5.74 0.74 65 TR_XM_DK_SendGrid 7830 5.45 5.65 5.32 66 LotsOfNums_01 7760 7.84 5.60 9.22 67 UNTRUSTED_Relay 7758 3.10 5.60 1.55 68 BAYES_95 7694 4.31 5.56 3.54 69 TR_XM_PhishingBody 7335 3.70 5.30 2.71 70 RCVD_IN_VALIDITY_SAFE 7307 7.09 5.28 8.21 71 FROM_SUSPICIOUS_NTLD 6829 1.91 4.93 0.05 72 LongTLD 6745 1.99 4.87 0.21 73 FROM_SUSPICIOUS_NTLD_FP 6641 1.86 4.80 0.05 74 XM_H_Long_From01 6639 5.53 4.79 5.98 75 HTML_MIME_NO_HTML_TAG 5987 2.45 4.32 1.29 76 XM_B_Phish_Phrases 5922 4.51 4.28 4.65 77 NORDNS_LOW_CONTRAST 5883 1.70 4.25 0.13 78 XM_GoogleGroups 5836 2.26 4.21 1.07 79 RCVD_IN_VALIDITY_CERTIFIED 5760 5.91 4.16 6.99 80 XMLngstWrd_00 5684 2.10 4.10 0.87 81 XMLngstWrd_01 5640 2.04 4.07 0.78 82 XMLngstWrd_02 5580 1.94 4.03 0.65 83 T_XMDrugObfuBody_08 5557 2.29 4.01 1.23 84 XM_DIRTYINTL 5507 1.66 3.98 0.23 85 TR_XM_SpammyWords5 5480 3.05 3.96 2.49 86 T_FILL_THIS_FORM_SHORT 5465 1.84 3.95 0.55 87 T_XMDrugObfuBody_14 5461 2.46 3.94 1.54 88 HTML_IMAGE_RATIO_04 5293 4.90 3.82 5.56 89 USER_IN_DEF_DKIM_WL 5158 13.52 3.72 19.55 90 XMLngstWrd_03 5091 1.65 3.68 0.41 91 XMLngstWrd_04 5037 1.58 3.64 0.32 92 HTML_TITLE_SUBJ_DIFF 5033 1.40 3.63 0.02 93 UPPERCASE_75_100 4954 1.37 3.58 0.01 94 HTML_IMAGE_RATIO_06 4827 3.34 3.49 3.26 95 MIME_HTML_MOSTLY 4607 3.04 3.33 2.86 96 FROM_EXCESS_BASE64 4541 3.56 3.28 3.74 97 HTML_IMAGE_RATIO_08 4442 2.45 3.21 1.99 98 RCVD_IN_MSPIKE_H4 4414 5.71 3.19 7.26 99 XMStrtUSub 4274 5.00 3.09 6.18 100 XMNumbers 4261 4.27 3.08 5.00 101 T_XMHurry_00 4032 1.78 2.91 1.09 102 TM2_M_URI_OPT_OUT 3966 2.23 2.86 1.85 103 XM_B_Investor 3919 1.80 2.83 1.17 104 DATE_IN_PAST_24_48 3894 1.08 2.81 0.01 105 SpammyFromTLD_01 3757 1.35 2.71 0.51 106 XM_UB50 3703 1.61 2.67 0.96 107 HK_RANDOM_REPLYTO 3697 1.08 2.67 0.11 108 BOTNET_NORDNS 3674 1.04 2.65 0.05 109 XM_DK_Undo_01 3660 1.89 2.64 1.43 110 XMBrknScrpt_02 3545 1.73 2.56 1.21 111 XM_B_SpammyWords4 3539 1.39 2.56 0.67 112 SUBJ_ALL_CAPS 3480 2.51 2.51 2.51 113 XM_B_Phish66 3460 1.50 2.50 0.89 114 XM_SPF_SoftFail 3406 1.60 2.46 1.07 115 TR_XM_FormFill 3257 0.90 2.35 0.01 116 URIBL_DBL_SPAM 3243 0.90 2.34 0.02 117 XM_CamelCaseFrm001 3063 2.28 2.21 2.32 118 FONT_INVIS_LONG_LINE 3038 0.88 2.19 0.07 119 T_TooManySym_01 2966 5.71 2.14 7.90 120 XM_OfRef6 2928 1.15 2.11 0.56 121 XM_B_Unsub2 2737 1.50 1.98 1.21 122 XMBdyGiftCard01 2664 1.80 1.92 1.73 123 DKIM_INVALID 2652 2.27 1.91 2.48 124 MIME_QP_LONG_LINE 2648 3.24 1.91 4.05 125 XMSexyCombo_01 2635 1.29 1.90 0.91 126 RCVD_IN_MSPIKE_BL 2572 0.97 1.86 0.43 127 TR_XM_MSPIKECOMBO 2536 0.96 1.83 0.43 128 XMDiploma_00 2518 1.61 1.82 1.48 129 TR_LOTS_OF_MONEY3 2512 0.93 1.81 0.39 130 URI_NOVOWEL 2385 1.75 1.72 1.77 131 XMSubMetaI_00 2354 1.55 1.70 1.46 132 XMStockSpam_06 2310 1.73 1.67 1.77 133 TR_XM_BayesRelay 2275 0.63 1.64 0.00 134 XMPhish30 2188 1.11 1.58 0.83 135 TR_XM_PHPDW 2153 0.81 1.55 0.36 136 ALL_TRUSTED 2149 8.83 1.55 13.30 137 MPART_ALT_DIFF_COUNT 2139 1.13 1.54 0.87 138 TR_XM_Base64_M1 2111 1.57 1.52 1.59 139 XM_ProductURIs 2083 1.55 1.50 1.57 140 XMClaimOffer 2042 0.63 1.47 0.11 141 RCVD_IN_MSPIKE_L3 2007 0.76 1.45 0.33 142 DATE_IN_PAST_06_12 1971 0.60 1.42 0.10 143 TR_XM_PHPForged 1970 0.73 1.42 0.30 144 TR_XM_NoHeaderRelay 1961 0.59 1.42 0.08 145 BAYES_40 1940 2.69 1.40 3.49 146 TR_XM_FormFill2 1928 0.71 1.39 0.29 147 XM_H_PHPOS 1926 0.71 1.39 0.29 148 MAILING_LIST_MULTI 1868 1.68 1.35 1.88 149 RCVD_IN_IADB_LISTED 1856 2.93 1.34 3.91 150 XM_B_DNDMA 1844 0.77 1.33 0.43 151 URI_PHP_REDIR 1818 0.50 1.31 0.01 152 TR_XM_SB_Phish 1797 1.54 1.30 1.69 153 T_REMOTE_IMAGE 1789 2.96 1.29 3.98 154 HTML_TAG_BALANCE_BODY 1781 0.91 1.29 0.67 155 SHOPIFY_IMG_NOT_RCVD_SFY 1732 0.74 1.25 0.42 156 XM_URI_RBL 1727 0.57 1.25 0.15 157 URI_HEX 1716 1.34 1.24 1.39 158 XMSubPhish11 1695 1.51 1.22 1.68 159 RCVD_IN_IADB_SPF 1660 2.65 1.20 3.54 160 RCVD_IN_VALIDITY_RPBL 1620 0.51 1.17 0.11 161 BAYES_20 1597 1.89 1.15 2.35 162 RCVD_IN_IADB_DK 1588 2.41 1.15 3.18 163 RCVD_IN_RP_SAFE 1577 1.42 1.14 1.60 164 RCVD_IN_IADB_SENDERID 1577 2.45 1.14 3.25 165 THIS_AD 1573 0.72 1.14 0.47 166 RELAYCOUNTRY_AU 1547 0.55 1.12 0.20 167 XMSubMetaSxObfu_03 1497 0.91 1.08 0.80 168 PLING_QUERY 1448 0.77 1.05 0.60 169 BAYES_00 1437 5.40 1.04 8.08 170 DIET_1 1402 0.64 1.01 0.40 171 TR_XM_SpammyWords3 1374 0.51 0.99 0.21 172 SUBJ_DOLLARS 1355 0.78 0.98 0.66 173 XM_B_REG_HTML 1333 0.85 0.96 0.78 174 KHOP_HELO_FCRDNS 1321 0.58 0.95 0.36 175 T_XMDrugObfuBody_00 1312 0.80 0.95 0.72 176 HTML_FONT_FACE_BAD 1287 1.10 0.93 1.20 177 URIBL_BLACK 1283 0.37 0.93 0.03 178 TR_XM_MSPIKECOMBO2 1245 0.37 0.90 0.04 179 XMHTMLBadTable_001 1241 0.73 0.90 0.63 180 XM_H_PHPMailer 1234 0.68 0.89 0.55 181 TR_Caps_n_Bayes_99 1233 0.67 0.89 0.54 182 XMGenDplmaNmb 1220 0.74 0.88 0.65 183 XMBody_29 1203 0.40 0.87 0.11 184 URIBL_CSS 1199 0.34 0.87 0.02 185 URIBL_CSS_A 1199 0.34 0.87 0.02 186 HTML_TEXT_INVISIBLE_STYLE 1189 0.53 0.86 0.33 187 RCVD_IN_RP_CERTIFIED 1180 1.19 0.85 1.40 188 TR_XM_DK_Bayes 1166 4.57 0.84 6.86 189 XM_Body_Dirty_Words_01 1159 0.38 0.84 0.10 190 TR_XM_Base64_L1 1147 0.59 0.83 0.44 191 XM_UB99 1121 0.31 0.81 0.00 192 HTTPS_HTTP_MISMATCH 1121 0.53 0.81 0.36 193 XM_S_SpammyWords 1113 0.43 0.80 0.20 194 TR_XM_Spammywords 1113 0.43 0.80 0.20 195 XMBody_78 1109 0.51 0.80 0.33 196 XM_B_COPY_HTML 1100 0.96 0.79 1.06 197 GOOG_STO_IMG_NOHTML 1072 0.48 0.77 0.30 198 RELAYCOUNTRY_AT 1058 0.40 0.76 0.18 199 XMSlimDrugH 1047 0.64 0.76 0.57 200 TR_XM_DK_Bayes1 1037 4.49 0.75 6.79 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 194718 90.36 96.67 86.48 2 RELAYCOUNTRY_US 188187 83.13 82.40 83.58 3 DKIM_SIGNED 186293 87.18 94.39 82.74 4 XM_DK_Pass 181433 85.34 93.07 80.58 5 DKIM_VALID 180704 84.91 92.48 80.26 6 XM_B_Unicode 171592 78.49 82.18 76.21 7 DKIM_VALID_AU 154198 70.36 73.41 68.49 8 XMListUnsubscribeExists 135743 67.80 80.00 60.29 9 BAYES_50 127026 49.55 38.40 56.42 10 DCC_CHECK_NEGATIVE 115327 39.46 20.35 51.22 11 XM_B_SpammyWords 111883 56.40 67.31 49.69 12 XM_B_Unicode3 110293 47.53 45.17 48.99 13 DCC_CHECK 109766 60.51 79.63 48.75 14 RCVD_IN_MSPIKE_H2 95678 45.32 49.90 42.50 15 HTML_FONT_LOW_CONTRAST 79673 36.99 39.60 35.39 16 LOC_TINY_FONT_1 73982 37.70 45.58 32.86 17 FVGT_m_MULTI_ODD 67643 32.85 37.42 30.04 18 DKIM_VALID_EF 65072 31.52 35.78 28.90 19 XM_B_SpammyWords2 52791 28.93 37.86 23.45 20 XMSubLong 49169 21.69 21.45 21.84 21 MIME_HTML_ONLY 48347 25.20 31.25 21.47 22 T_TM2_M_HEADER_IN_MSG 48024 19.37 16.18 21.33 23 RCVD_IN_MSPIKE_WL 47269 19.46 16.96 20.99 24 T_KAM_HTML_FONT_INVALID 44823 22.64 27.08 19.91 25 USER_IN_DEF_DKIM_WL 44024 13.52 3.72 19.55 26 XM_Multi_Part_URI 42074 19.85 21.74 18.69 27 XM_DKIMWhitelistDomains 30807 8.49 0.04 13.68 28 ALL_TRUSTED 29949 8.83 1.55 13.30 29 UNPARSEABLE_RELAY 27719 13.73 16.03 12.31 30 XM_Body_Dirty_Words 26927 15.55 21.40 11.96 31 RCVD_IN_MSPIKE_H3 26238 12.30 13.34 11.65 32 BAYES_60 25718 10.00 7.69 11.42 33 XM_Evil_Numbers_Gen 24012 10.14 9.30 10.67 34 HTML_IMAGE_RATIO_02 22887 9.51 8.43 10.17 35 XM_DK_Undo_02 22658 25.19 49.78 10.06 36 XM_B_Unsub 21761 10.95 13.03 9.67 37 LotsOfNums_01 20764 7.84 5.60 9.22 38 TR_XM_BayesUnsub 18837 9.95 12.51 8.37 39 RCVD_IN_VALIDITY_SAFE 18474 7.09 5.28 8.21 40 BAYES_00 18193 5.40 1.04 8.08 41 T_TooManySym_01 17788 5.71 2.14 7.90 42 BAYES_99 17751 18.25 35.11 7.88 43 XM_SendGrid 16936 7.90 8.53 7.52 44 RCVD_IN_MSPIKE_H4 16342 5.71 3.19 7.26 45 RCVD_IN_VALIDITY_CERTIFIED 15731 5.91 4.16 6.99 46 TR_XM_DK_Bayes 15448 4.57 0.84 6.86 47 BOTNET_IPINHOSTNAME 15429 9.69 14.30 6.85 48 TR_XM_DK_Bayes1 15294 4.49 0.75 6.79 49 BAYES_999 14646 14.39 27.20 6.51 50 TR_XM_DK_Bayes2 14259 4.20 0.73 6.33 51 TooManyTo_001 14071 7.69 10.03 6.25 52 XMStrtUSub 13910 5.00 3.09 6.18 53 TR_XM_DKIM_Undo 13842 18.66 38.99 6.15 54 XM_H_Long_From01 13457 5.53 4.79 5.98 55 XM_B_SpammyWords3 13119 8.01 11.57 5.83 56 LOTS_OF_MONEY 12577 7.28 10.04 5.59 57 HTML_IMAGE_RATIO_04 12525 4.90 3.82 5.56 58 IN_ZIMBRA_NJ_WHITELIST 12276 3.39 0.04 5.45 59 T_TooManySym_02 12201 3.52 0.43 5.42 60 BAYES_80 11991 6.71 8.97 5.33 61 TR_XM_DK_SendGrid 11985 5.45 5.65 5.32 62 XMNumbers 11265 4.27 3.08 5.00 63 FSL_BULK_SIG 11064 6.12 8.08 4.91 64 MPART_ALT_DIFF 10520 6.25 8.82 4.67 65 XM_B_Phish_Phrases 10465 4.51 4.28 4.65 66 XMSexyCombo_05 9366 6.36 9.95 4.16 67 MIME_QP_LONG_LINE 9126 3.24 1.91 4.05 68 XM_UncommonTLD01 9090 6.79 11.26 4.04 69 T_REMOTE_IMAGE 8971 2.96 1.29 3.98 70 RCVD_IN_IADB_LISTED 8797 2.93 1.34 3.91 71 TR_XM_SpammyWords4 8441 5.66 8.78 3.75 72 FROM_EXCESS_BASE64 8417 3.56 3.28 3.74 73 XMSubMetaSx_00 8199 4.52 5.96 3.64 74 TR_DCC_Bayes_99 8131 12.55 27.08 3.61 75 BAYES_95 7977 4.31 5.56 3.54 76 RCVD_IN_IADB_SPF 7964 2.65 1.20 3.54 77 BAYES_40 7849 2.69 1.40 3.49 78 RELAYCOUNTRY_META 7339 9.23 18.93 3.26 79 HTML_IMAGE_RATIO_06 7333 3.34 3.49 3.26 80 RCVD_IN_IADB_SENDERID 7326 2.45 1.14 3.25 81 INVALID_MSGID 7290 2.05 0.11 3.24 82 RCVD_IN_IADB_DK 7169 2.41 1.15 3.18 83 MSGID_NOFQDN1 6957 1.92 0.03 3.09 84 MIME_HTML_MOSTLY 6438 3.04 3.33 2.86 85 TR_XM_UnparsRelay 6397 5.37 9.48 2.84 86 TR_XM_PhishingBody 6102 3.70 5.30 2.71 87 TO_MALFORMED 6004 1.66 0.01 2.67 88 MIME_HTML_ONLY_MULTI 5979 4.01 6.21 2.66 89 SUBJ_ALL_CAPS 5661 2.51 2.51 2.51 90 TR_XM_SpammyWords5 5610 3.05 3.96 2.49 91 DKIM_INVALID 5589 2.27 1.91 2.48 92 BAYES_20 5281 1.89 1.15 2.35 93 XM_CamelCaseFrm001 5231 2.28 2.21 2.32 94 TVD_RCVD_IP 5059 1.48 0.24 2.25 95 T_TooManySym_03 5037 1.46 0.19 2.24 96 RCVD_IN_IADB_VOUCHED 5024 1.62 0.62 2.23 97 XM_B_SpammyTLD 4901 4.58 8.50 2.18 98 RCVD_IN_MSPIKE_H5 4689 1.45 0.43 2.08 99 TVD_SPACE_RATIO 4591 1.29 0.07 2.04 100 HTML_IMAGE_RATIO_08 4471 2.45 3.21 1.99 101 IN_HORDE_ADDRESS_BOOK 4463 1.25 0.06 1.98 102 XM_PDF 4385 1.27 0.16 1.95 103 TM2_M_VERY_LONG_WORD 4256 3.66 6.53 1.89 104 MAILING_LIST_MULTI 4234 1.68 1.35 1.88 105 TM2_M_URI_OPT_OUT 4157 2.23 2.86 1.85 106 BOTNET 4147 4.83 9.70 1.84 107 XMBSHREFv2 4054 1.17 0.14 1.80 108 XMStockSpam_06 3991 1.73 1.67 1.77 109 TR_XM_SpammyRelay 3983 6.32 13.72 1.77 110 URI_NOVOWEL 3980 1.75 1.72 1.77 111 XMBdyGiftCard01 3896 1.80 1.92 1.73 112 TR_XM_SB_Phish 3803 1.54 1.30 1.69 113 XMSubPhish11 3782 1.51 1.22 1.68 114 XMBody_95 3606 1.05 0.15 1.60 115 RCVD_IN_RP_SAFE 3597 1.42 1.14 1.60 116 TR_XM_Base64_M1 3584 1.57 1.52 1.59 117 TR_XM_SpammyWords2 3548 5.78 12.63 1.58 118 XM_ProductURIs 3544 1.55 1.50 1.57 119 UNTRUSTED_Relay 3500 3.10 5.60 1.55 120 T_XMDrugObfuBody_14 3473 2.46 3.94 1.54 121 XM_H_Long_From02 3450 1.23 0.73 1.53 122 ANY_BOUNCE_MESSAGE 3376 1.11 0.47 1.50 123 BOUNCE_MESSAGE 3361 1.10 0.47 1.49 124 BAYES_05 3359 1.19 0.69 1.49 125 XMDiploma_00 3339 1.61 1.82 1.48 126 XMSubMetaI_00 3285 1.55 1.70 1.46 127 XM_DK_Undo_01 3224 1.89 2.64 1.43 128 XMGappySubj_01 3161 0.95 0.21 1.40 129 RCVD_IN_RP_CERTIFIED 3154 1.19 0.85 1.40 130 XM_H_Trusted_IP 3149 0.87 0.00 1.40 131 URI_HEX 3140 1.34 1.24 1.39 132 RCVD_IN_IADB_OPTIN 3126 1.01 0.39 1.39 133 FVGT_m_MULTI_ODD_EMAIL 2925 0.84 0.09 1.30 134 HTML_MIME_NO_HTML_TAG 2907 2.45 4.32 1.29 135 T_XMDrugObfuBody_08 2780 2.29 4.01 1.23 136 XMBrknScrpt_02 2732 1.73 2.56 1.21 137 XM_B_Unsub2 2729 1.50 1.98 1.21 138 HTML_FONT_FACE_BAD 2708 1.10 0.93 1.20 139 XM_B_Investor 2631 1.80 2.83 1.17 140 RELAYCOUNTRY_CA 2495 4.64 10.38 1.11 141 T_XMHurry_00 2456 1.78 2.91 1.09 142 XM_SPF_SoftFail 2413 1.60 2.46 1.07 143 XM_GoogleGroups 2399 2.26 4.21 1.07 144 XM_B_COPY_HTML 2379 0.96 0.79 1.06 145 RCVD_IN_BL_SPAMCOP_NET 2181 5.45 12.73 0.97 146 URI_TRY_3LD 2164 0.86 0.70 0.96 147 XM_UB50 2153 1.61 2.67 0.96 148 XMSexyCombo_01 2049 1.29 1.90 0.91 149 TooManyTo_002 2047 0.76 0.52 0.91 150 XM_B_Phish66 2006 1.50 2.50 0.89 151 MPART_ALT_DIFF_COUNT 1955 1.13 1.54 0.87 152 XMLngstWrd_00 1951 2.10 4.10 0.87 153 DKIM_ADSP_CUSTOM_MED 1869 0.69 0.46 0.83 154 XMPhish30 1859 1.11 1.58 0.83 155 TR_Symld_Words 1806 0.69 0.51 0.80 156 XMSubMetaSxObfu_03 1801 0.91 1.08 0.80 157 XMLngstWrd_01 1765 2.04 4.07 0.78 158 XM_B_REG_HTML 1745 0.85 0.96 0.78 159 XMBody_17 1673 2.65 5.74 0.74 160 XMHTML_After_End 1657 0.72 0.69 0.74 161 T_XMDrugObfuBody_00 1614 0.80 0.95 0.72 162 XMOemUri 1596 0.52 0.22 0.71 163 RCVD_IN_PSBL 1585 0.70 0.71 0.70 164 HTML_TAG_BALANCE_BODY 1517 0.91 1.29 0.67 165 XM_B_SpammyWords4 1515 1.39 2.56 0.67 166 SUBJ_DOLLARS 1483 0.78 0.98 0.66 167 XMGenDplmaNmb 1470 0.74 0.88 0.65 168 XMLngstWrd_02 1461 1.94 4.03 0.65 169 TooManyTo_003 1448 0.57 0.45 0.64 170 XMPhish14 1418 0.59 0.52 0.63 171 XMHTMLBadTable_001 1417 0.73 0.90 0.63 172 DATE_IN_PAST_03_06 1413 0.47 0.22 0.63 173 TR_XM_Base64_M2 1401 0.50 0.30 0.62 174 PLING_QUERY 1345 0.77 1.05 0.60 175 XMSubNoVowel 1307 0.49 0.33 0.58 176 XMSlimDrugH 1294 0.64 0.76 0.57 177 TR_MetaPhish_Combo_01 1276 0.64 0.75 0.57 178 XMSubMetaSxObfu_02 1273 0.45 0.27 0.57 179 XM_OfRef6 1269 1.15 2.11 0.56 180 FORGED_GMAIL_RCVD 1266 0.50 0.39 0.56 181 T_FILL_THIS_FORM_SHORT 1234 1.84 3.95 0.55 182 USER_IN_WELCOMELIST 1231 0.34 0.00 0.55 183 USER_IN_WHITELIST 1231 0.34 0.00 0.55 184 XM_H_PHPMailer 1228 0.68 0.89 0.55 185 TR_Caps_n_Bayes_99 1218 0.67 0.89 0.54 186 NML_ADSP_CUSTOM_MED 1203 0.47 0.37 0.53 187 XM_B_COVIDMETA 1179 0.59 0.71 0.52 188 SpammyFromTLD_01 1144 1.35 2.71 0.51 189 LOW_PRICE 1114 0.57 0.69 0.49 190 TooManyTo_004 1103 0.47 0.43 0.49 191 HELO_NODOT 1055 0.45 0.42 0.47 192 HELO_NO_DOMAIN 1054 0.45 0.42 0.47 193 THIS_AD 1050 0.72 1.14 0.47 194 XM_S_SubURI 1039 0.29 0.01 0.46 195 TR_XM_SPAMCOP 1035 4.36 10.70 0.46 196 XMNoVowels 1003 0.47 0.51 0.45 197 TR_XM_Base64_L1 983 0.59 0.83 0.44 198 MISSING_HEADERS 977 0.36 0.23 0.43 199 HTML_IMAGE_ONLY_20 977 0.37 0.27 0.43 200 XM_B_DNDMA 965 0.77 1.33 0.43 ----------------------------------------------------------------------