Email: 316685 Autolearn: 0 AvgScore: 4.88 AvgScanTime: 1.39 sec Spam: 121535 Autolearn: 0 AvgScore: 14.23 AvgScanTime: 1.44 sec Ham: 195150 Autolearn: 0 AvgScore: -0.95 AvgScanTime: 1.35 sec Time Spent Running SA: 121.95 hours Time Spent Processing Spam: 48.63 hours Time Spent Processing Ham: 73.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 113455 86.20 93.35 81.75 2 DKIM_SIGNED 108527 81.32 89.30 76.36 3 XM_B_Unicode 105959 77.23 87.18 71.03 4 XM_DK_Pass 105958 79.87 87.18 75.31 5 DKIM_VALID 104412 78.92 85.91 74.57 6 T_SCC_BODY_TEXT_LINE 99217 82.67 81.64 83.31 7 XM_B_SpammyWords 91280 55.61 75.11 43.47 8 RELAYCOUNTRY_US 89427 76.90 73.58 78.96 9 DCC_CHECK 87899 52.60 72.32 40.32 10 XMListUnsubscribeExists 85013 60.13 69.95 54.02 11 DKIM_VALID_AU 72531 61.93 59.68 63.34 12 XM_DK_Undo_02 60303 24.07 49.62 8.15 13 XM_B_SpammyWords2 53861 28.54 44.32 18.71 14 XM_B_Unicode3 49572 42.97 40.79 44.32 15 TR_XM_DKIM_Undo 47898 16.95 39.41 2.96 16 BAYES_99 46881 18.94 38.57 6.71 17 LOC_TINY_FONT_1 45708 31.85 37.61 28.27 18 BAYES_50 44689 49.14 36.77 56.85 19 DKIM_VALID_EF 43493 31.87 35.79 29.43 20 HTML_FONT_LOW_CONTRAST 42565 33.43 35.02 32.43 21 MIME_HTML_ONLY 42041 26.23 34.59 21.02 22 FVGT_m_MULTI_ODD 39696 29.00 32.66 26.72 23 BAYES_999 37916 15.27 31.20 5.36 24 TR_DCC_Bayes_99 34990 12.95 28.79 3.09 25 DCC_CHECK_NEGATIVE 33620 47.38 27.66 59.66 26 T_KAM_HTML_FONT_INVALID 31595 21.61 26.00 18.89 27 TR_XM_DK_Unsub 31307 19.61 25.76 15.78 28 RELAYCOUNTRY_META 30031 11.92 24.71 3.96 29 T_TM2_M_HEADER_IN_MSG 27178 22.12 22.36 21.97 30 RCVD_IN_MSPIKE_H2 26856 22.94 22.10 23.47 31 TR_XM_SpammyRelay 25866 9.53 21.28 2.21 32 XMSubLong 23656 20.33 19.46 20.87 33 RCVD_IN_BL_SPAMCOP_NET 22179 7.53 18.25 0.86 34 RELAYCOUNTRY_CA 20301 7.21 16.70 1.29 35 XM_Multi_Part_URI 19969 16.01 16.43 15.75 36 TR_XM_SPAMCOP 18859 6.21 15.52 0.41 37 XM_B_SpammyWords3 18653 8.49 15.35 4.21 38 TR_XM_SpammyWords2 18027 6.16 14.83 0.77 39 XM_B_Unsub 17962 11.52 14.78 9.49 40 LOTS_OF_MONEY 17569 9.28 14.46 6.06 41 TR_XM_BayesUnsub 17505 10.41 14.40 7.93 42 RCVD_IN_MSPIKE_H3 17242 9.54 14.19 6.65 43 RCVD_IN_MSPIKE_WL 17242 9.54 14.19 6.65 44 UNPARSEABLE_RELAY 17083 12.73 14.06 11.91 45 TR_XM_SpammyWords4 15512 7.43 12.76 4.11 46 BOTNET_IPINHOSTNAME 15509 8.59 12.76 5.99 47 XM_Body_Dirty_Words 14356 8.86 11.81 7.02 48 XMBody_17 13654 5.23 11.23 1.50 49 BOTNET 11089 4.35 9.12 1.38 50 FSL_BULK_SIG 10803 5.91 8.89 4.06 51 BAYES_80 10328 6.09 8.50 4.58 52 T_FILL_THIS_FORM_SHORT 9942 3.44 8.18 0.49 53 HTML_IMAGE_RATIO_02 9666 7.26 7.95 6.83 54 TR_XM_UnparsRelay 9585 4.69 7.89 2.70 55 BAYES_60 9244 9.52 7.61 10.71 56 XM_Evil_Numbers_Gen 8957 8.24 7.37 8.78 57 TR_XM_BayesRelay 8556 2.71 7.04 0.01 58 TR_XM_SpammyWords5 7303 2.98 6.01 1.10 59 XM_UncommonTLD01 7277 4.94 5.99 4.29 60 XMSexyCombo_05 6730 3.95 5.54 2.96 61 XM_OfRef6 6586 2.67 5.42 0.96 62 TR_XM_FormFill 6471 2.05 5.32 0.01 63 XMSubMetaSx_00 6396 4.52 5.26 4.06 64 BAYES_95 6329 3.89 5.21 3.08 65 TR_XM_PhishingBody 6321 3.29 5.20 2.11 66 LotsOfNums_01 6308 6.93 5.19 8.02 67 XM_H_GMP 6182 6.83 5.09 7.92 68 MPART_ALT_DIFF 6086 4.65 5.01 4.43 69 HTML_IMAGE_RATIO_04 6055 5.07 4.98 5.13 70 UNTRUSTED_Relay 6012 2.87 4.95 1.58 71 HTML_IMAGE_RATIO_06 5929 3.34 4.88 2.39 72 XM_H_Long_From01 5774 5.20 4.75 5.48 73 TooManyTo_001 5451 5.42 4.49 6.00 74 XMNumbers 5337 3.50 4.39 2.95 75 TR_Mismatch_TLD_01 5182 1.84 4.26 0.33 76 XM_B_SpammyTLD 5080 3.75 4.18 3.49 77 SUBJ_ALL_CAPS 5078 2.13 4.18 0.86 78 FONT_INVIS_LONG_LINE 5009 1.62 4.12 0.06 79 XM_B_Investor 4816 2.55 3.96 1.68 80 XM_B_Phish_Phrases 4670 3.42 3.84 3.16 81 TR_LOTS_OF_MONEY3 4487 1.90 3.69 0.79 82 MIME_HTML_MOSTLY 4152 2.83 3.42 2.47 83 DKIM_INVALID 4115 2.40 3.39 1.78 84 T_XMDrugObfuBody_14 3999 2.36 3.29 1.78 85 SpammyFromTLD_01 3961 1.53 3.26 0.46 86 MIME_HTML_ONLY_MULTI 3937 2.76 3.24 2.45 87 TM2_M_URI_OPT_OUT 3912 2.45 3.22 1.97 88 XM_SPF_SoftFail 3862 2.78 3.18 2.53 89 XMStrtUSub 3847 4.46 3.17 5.26 90 HTML_IMAGE_RATIO_08 3845 2.49 3.16 2.07 91 XM_SendGrid 3812 1.86 3.14 1.06 92 ALL_TRUSTED 3805 11.91 3.13 17.38 93 TM2_M_VERY_LONG_WORD 3743 1.90 3.08 1.17 94 RCVD_IN_VALIDITY_SAFE 3461 5.09 2.85 6.49 95 BASE64_LENGTH_79_INF 3381 2.23 2.78 1.88 96 T_XMDrugObfuBody_08 3294 1.96 2.71 1.50 97 AC_BR_BONANZA 3274 1.13 2.69 0.15 98 MISSING_HEADERS 3266 1.41 2.69 0.62 99 TR_XM_NoHeaderRelay 3255 1.15 2.68 0.20 100 XM_UB50 3194 1.54 2.63 0.86 101 REPLYTO_WITHOUT_TO_CC 3121 1.25 2.57 0.43 102 XM_B_Phish66 3093 1.15 2.54 0.28 103 XMLngstWrd_00 3011 1.26 2.48 0.49 104 XM_URI_RBL 3008 1.07 2.48 0.20 105 XMBrknScrpt_02 3007 1.26 2.47 0.50 106 XM_DIRTYINTL 2980 1.16 2.45 0.36 107 HK_RANDOM_REPLYTO 2938 1.00 2.42 0.11 108 RCVD_IN_VALIDITY_RPBL 2904 0.95 2.39 0.05 109 XM_CamelCaseFrm001 2882 2.73 2.37 2.95 110 TR_Mismatch_TLD_02 2882 0.98 2.37 0.11 111 XM_B_Unsub2 2791 1.74 2.30 1.39 112 XMLngstWrd_01 2785 1.08 2.29 0.33 113 RCVD_IN_VALIDITY_CERTIFIED 2749 4.22 2.26 5.43 114 XMLngstWrd_02 2744 1.02 2.26 0.25 115 XMLngstWrd_03 2704 0.98 2.22 0.21 116 ANY_BOUNCE_MESSAGE 2676 5.05 2.20 6.83 117 BOUNCE_MESSAGE 2675 5.05 2.20 6.83 118 T_TooManySym_01 2640 4.42 2.17 5.82 119 XMLngstWrd_04 2595 0.89 2.14 0.11 120 FROM_EXCESS_BASE64 2554 2.38 2.10 2.55 121 USER_IN_DEF_DKIM_WL 2517 11.00 2.07 16.56 122 HTML_TAG_BALANCE_BODY 2486 1.05 2.05 0.42 123 RELAYCOUNTRY_AU 2430 1.09 2.00 0.52 124 BOTNET_NORDNS 2294 0.75 1.89 0.04 125 TR_XM_PHPForged 2270 0.91 1.87 0.31 126 XM_B_SpammyWords4 2255 1.16 1.86 0.73 127 TR_XM_PHPDW 2223 0.91 1.83 0.33 128 XMReplyNow 2184 0.87 1.80 0.30 129 TR_XM_FormFill2 2158 0.87 1.78 0.31 130 TR_MetaPhish_Combo_01 2141 1.06 1.76 0.63 131 XM_H_PHPOS 2136 0.85 1.76 0.28 132 T_XMHurry_00 2111 1.06 1.74 0.64 133 XM_H_Long_From02 2072 1.44 1.70 1.28 134 HTTPS_HTTP_MISMATCH 2012 0.98 1.66 0.56 135 TR_Caps_n_Bayes_99 1953 0.63 1.61 0.02 136 T_REMOTE_IMAGE 1953 2.64 1.61 3.29 137 XM_HighProb1 1922 0.61 1.58 0.00 138 URI_TRY_3LD 1917 1.01 1.58 0.66 139 MIME_QP_LONG_LINE 1858 2.96 1.53 3.85 140 XMStockSpam_06 1846 1.56 1.52 1.59 141 XMDiploma_00 1816 1.31 1.49 1.20 142 XM_H_WindowsLiveMail 1776 0.76 1.46 0.32 143 XMSexyCombo_01 1772 0.74 1.46 0.30 144 XM_H_Undi_Recip 1764 0.66 1.45 0.17 145 XM_OfRef7 1733 0.59 1.43 0.06 146 MAILING_LIST_MULTI 1692 1.72 1.39 1.92 147 SpammyFromTLD_02 1678 0.67 1.38 0.22 148 KHOP_HELO_FCRDNS 1667 1.05 1.37 0.84 149 MILLION_HUNDRED 1652 1.01 1.36 0.80 150 XMSubMetaI_00 1623 1.07 1.34 0.90 151 T_XMDrugObfuBody_10 1608 0.53 1.32 0.03 152 BAYES_40 1594 2.88 1.31 3.86 153 SHOPIFY_IMG_NOT_RCVD_SFY 1579 0.72 1.30 0.35 154 XM_DK_Undo_01 1566 1.54 1.29 1.70 155 TR_XM_Base64_M1 1559 1.10 1.28 0.99 156 TR_XM_INV_DKIM 1548 0.60 1.27 0.17 157 XMBdyGiftCard01 1535 1.08 1.26 0.96 158 URI_HEX 1528 1.06 1.26 0.94 159 XMClaimOffer 1509 0.62 1.24 0.24 160 XMPhish30 1479 0.96 1.22 0.80 161 RCVD_IN_PSBL 1415 0.65 1.16 0.33 162 TR_XM_Undi_Recip5 1410 0.45 1.16 0.01 163 THIS_AD 1408 0.79 1.16 0.55 164 TR_XM_Undi_Recip11 1400 0.46 1.15 0.03 165 TR_XM_Undi_Recip2 1398 0.46 1.15 0.03 166 HOSTED_IMG_MULTI_PUB_01 1393 0.46 1.15 0.02 167 XM_H_PHPMailer 1375 1.00 1.13 0.92 168 TR_Sbj_FN_Bdy 1363 0.49 1.12 0.09 169 XMBody_29 1358 0.48 1.12 0.09 170 MPART_ALT_DIFF_COUNT 1353 0.91 1.11 0.78 171 TR_XM_Undi_RecipCombo2 1343 0.43 1.11 0.00 172 TR_XM_Undi_Recip15 1290 0.53 1.06 0.20 173 SHORT_URI_4 1275 0.53 1.05 0.20 174 NA_DOLLARS 1270 0.40 1.04 0.00 175 AC_HTML_NONSENSE_TAGS 1262 0.41 1.04 0.01 176 UNDISC_MONEY 1198 0.39 0.99 0.01 177 PDS_OTHER_BAD_TLD 1193 0.45 0.98 0.12 178 URI_NOVOWEL 1186 1.21 0.98 1.35 179 MONEY_FORM_SHORT 1180 0.38 0.97 0.01 180 BAYES_20 1163 1.97 0.96 2.60 181 SHORT_URI_3 1160 0.67 0.95 0.50 182 HTML_MIME_NO_HTML_TAG 1155 1.17 0.95 1.31 183 ADVANCE_FEE_2_NEW_MONEY 1127 0.36 0.93 0.01 184 PLING_QUERY 1107 0.55 0.91 0.33 185 TR_Symld_Words 1100 1.03 0.91 1.10 186 XMSubject_48 1092 0.36 0.90 0.02 187 TR_XM_Base64_L1 1086 0.48 0.89 0.22 188 T_XMDrugObfuBody_00 1053 0.75 0.87 0.68 189 TR_LOTS_OF_MONEY2 1038 0.42 0.85 0.15 190 T_MONEY_PERCENT 1038 0.42 0.85 0.15 191 TR_XM_DK_SendGrid 1021 0.76 0.84 0.72 192 TR_XM_RelayPhish 1020 0.37 0.84 0.07 193 DIET_1 1017 0.48 0.84 0.26 194 XM_UB99 1015 0.33 0.84 0.01 195 TooManyTo_002 1012 1.25 0.83 1.50 196 HTML_FONT_FACE_BAD 1012 0.58 0.83 0.42 197 XM_Combo_Sbj 1003 0.46 0.83 0.23 198 RCVD_IN_IADB_LISTED 991 2.39 0.82 3.37 199 GOOG_STO_IMG_NOHTML 984 0.42 0.81 0.18 200 RDNS_DYNAMIC 956 0.55 0.79 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 162584 82.67 81.64 83.31 2 HTML_MESSAGE 159539 86.20 93.35 81.75 3 RELAYCOUNTRY_US 154093 76.90 73.58 78.96 4 DKIM_SIGNED 149010 81.32 89.30 76.36 5 XM_DK_Pass 146969 79.87 87.18 75.31 6 DKIM_VALID 145528 78.92 85.91 74.57 7 XM_B_Unicode 138615 77.23 87.18 71.03 8 DKIM_VALID_AU 123604 61.93 59.68 63.34 9 DCC_CHECK_NEGATIVE 116427 47.38 27.66 59.66 10 BAYES_50 110944 49.14 36.77 56.85 11 XMListUnsubscribeExists 105423 60.13 69.95 54.02 12 XM_B_Unicode3 86495 42.97 40.79 44.32 13 XM_B_SpammyWords 84826 55.61 75.11 43.47 14 DCC_CHECK 78680 52.60 72.32 40.32 15 HTML_FONT_LOW_CONTRAST 63290 33.43 35.02 32.43 16 DKIM_VALID_EF 57426 31.87 35.79 29.43 17 LOC_TINY_FONT_1 55163 31.85 37.61 28.27 18 FVGT_m_MULTI_ODD 52150 29.00 32.66 26.72 19 RCVD_IN_MSPIKE_H2 45793 22.94 22.10 23.47 20 T_TM2_M_HEADER_IN_MSG 42865 22.12 22.36 21.97 21 MIME_HTML_ONLY 41028 26.23 34.59 21.02 22 XMSubLong 40733 20.33 19.46 20.87 23 T_KAM_HTML_FONT_INVALID 36855 21.61 26.00 18.89 24 XM_B_SpammyWords2 36509 28.54 44.32 18.71 25 ALL_TRUSTED 33915 11.91 3.13 17.38 26 USER_IN_DEF_DKIM_WL 32326 11.00 2.07 16.56 27 TR_XM_DK_Unsub 30797 19.61 25.76 15.78 28 XM_Multi_Part_URI 30743 16.01 16.43 15.75 29 UNPARSEABLE_RELAY 23241 12.73 14.06 11.91 30 XM_DKIMWhitelistDomains 22725 7.28 0.26 11.64 31 BAYES_60 20902 9.52 7.61 10.71 32 XM_B_Unsub 18523 11.52 14.78 9.49 33 BAYES_00 17230 5.64 0.51 8.83 34 XM_Evil_Numbers_Gen 17141 8.24 7.37 8.78 35 XM_DK_Undo_02 15910 24.07 49.62 8.15 36 LotsOfNums_01 15643 6.93 5.19 8.02 37 TR_XM_BayesUnsub 15470 10.41 14.40 7.93 38 XM_H_GMP 15457 6.83 5.09 7.92 39 TR_XM_DK_Bayes 14066 4.59 0.40 7.21 40 TR_XM_DK_Bayes1 13993 4.57 0.39 7.17 41 XM_Body_Dirty_Words 13709 8.86 11.81 7.02 42 HTML_IMAGE_RATIO_02 13338 7.26 7.95 6.83 43 ANY_BOUNCE_MESSAGE 13325 5.05 2.20 6.83 44 BOUNCE_MESSAGE 13325 5.05 2.20 6.83 45 BAYES_99 13096 18.94 38.57 6.71 46 RCVD_IN_MSPIKE_H3 12971 9.54 14.19 6.65 47 RCVD_IN_MSPIKE_WL 12971 9.54 14.19 6.65 48 RCVD_IN_VALIDITY_SAFE 12661 5.09 2.85 6.49 49 TR_XM_DK_Bayes2 12467 4.05 0.30 6.39 50 LOTS_OF_MONEY 11819 9.28 14.46 6.06 51 TooManyTo_001 11701 5.42 4.49 6.00 52 BOTNET_IPINHOSTNAME 11694 8.59 12.76 5.99 53 T_TooManySym_01 11360 4.42 2.17 5.82 54 IN_ZIMBRA_NJ_WHITELIST 10803 3.44 0.07 5.54 55 XM_H_Long_From01 10687 5.20 4.75 5.48 56 RCVD_IN_VALIDITY_CERTIFIED 10600 4.22 2.26 5.43 57 BAYES_999 10451 15.27 31.20 5.36 58 XMStrtUSub 10273 4.46 3.17 5.26 59 HTML_IMAGE_RATIO_04 10014 5.07 4.98 5.13 60 BAYES_80 8943 6.09 8.50 4.58 61 MPART_ALT_DIFF 8643 4.65 5.01 4.43 62 XM_UncommonTLD01 8366 4.94 5.99 4.29 63 XM_B_SpammyWords3 8225 8.49 15.35 4.21 64 TR_XM_SpammyWords4 8016 7.43 12.76 4.11 65 XMSubMetaSx_00 7928 4.52 5.26 4.06 66 FSL_BULK_SIG 7919 5.91 8.89 4.06 67 RELAYCOUNTRY_META 7722 11.92 24.71 3.96 68 BAYES_40 7539 2.88 1.31 3.86 69 MIME_QP_LONG_LINE 7513 2.96 1.53 3.85 70 INVALID_MSGID 7012 2.27 0.14 3.59 71 XM_B_SpammyTLD 6802 3.75 4.18 3.49 72 T_TooManySym_02 6726 2.35 0.58 3.45 73 RCVD_IN_IADB_LISTED 6585 2.39 0.82 3.37 74 T_REMOTE_IMAGE 6411 2.64 1.61 3.29 75 SCC_BODY_URI_ONLY 6373 2.23 0.56 3.27 76 TO_MALFORMED 6365 2.02 0.01 3.26 77 XM_B_Phish_Phrases 6172 3.42 3.84 3.16 78 TR_DCC_Bayes_99 6025 12.95 28.79 3.09 79 BAYES_95 6003 3.89 5.21 3.08 80 RCVD_IN_IADB_SPF 5982 2.18 0.76 3.07 81 TR_XM_DKIM_Undo 5778 16.95 39.41 2.96 82 XMSexyCombo_05 5771 3.95 5.54 2.96 83 XM_CamelCaseFrm001 5757 2.73 2.37 2.95 84 XMNumbers 5756 3.50 4.39 2.95 85 TVD_RCVD_IP 5595 2.05 0.75 2.87 86 RCVD_IN_IADB_SENDERID 5548 2.03 0.73 2.84 87 RCVD_IN_IADB_DK 5443 2.00 0.74 2.79 88 BAYES_05 5411 1.92 0.56 2.77 89 TR_XM_UnparsRelay 5272 4.69 7.89 2.70 90 BAYES_20 5082 1.97 0.96 2.60 91 FROM_EXCESS_BASE64 4978 2.38 2.10 2.55 92 XM_SPF_SoftFail 4944 2.78 3.18 2.53 93 MIME_HTML_MOSTLY 4813 2.83 3.42 2.47 94 MIME_HTML_ONLY_MULTI 4790 2.76 3.24 2.45 95 HTML_IMAGE_RATIO_06 4655 3.34 4.88 2.39 96 TR_XM_SpammyRelay 4310 9.53 21.28 2.21 97 XM_PDF 4285 1.44 0.23 2.20 98 XMBSHREFv2 4247 1.44 0.25 2.18 99 TR_XM_PhishingBody 4108 3.29 5.20 2.11 100 HTML_IMAGE_RATIO_08 4040 2.49 3.16 2.07 101 TM2_M_URI_OPT_OUT 3843 2.45 3.22 1.97 102 MAILING_LIST_MULTI 3756 1.72 1.39 1.92 103 BASE64_LENGTH_79_INF 3671 2.23 2.78 1.88 104 RCVD_IN_IADB_VOUCHED 3642 1.27 0.32 1.87 105 XMBody_95 3511 1.14 0.08 1.80 106 TVD_SPACE_RATIO 3494 1.14 0.10 1.79 107 T_XMDrugObfuBody_14 3483 2.36 3.29 1.78 108 DKIM_INVALID 3482 2.40 3.39 1.78 109 IN_HORDE_ADDRESS_BOOK 3468 1.12 0.07 1.78 110 XM_DK_Undo_01 3318 1.54 1.29 1.70 111 XM_B_Investor 3271 2.55 3.96 1.68 112 XMGappySubj_01 3166 1.03 0.08 1.62 113 XMStockSpam_06 3096 1.56 1.52 1.59 114 UNTRUSTED_Relay 3089 2.87 4.95 1.58 115 TooManyTo_002 2931 1.25 0.83 1.50 116 T_XMDrugObfuBody_08 2928 1.96 2.71 1.50 117 XMBody_17 2918 5.23 11.23 1.50 118 XMGappySubj_02 2774 0.89 0.03 1.42 119 XM_B_Unsub2 2706 1.74 2.30 1.39 120 BOTNET 2694 4.35 9.12 1.38 121 URI_NOVOWEL 2639 1.21 0.98 1.35 122 HTML_MIME_NO_HTML_TAG 2555 1.17 0.95 1.31 123 RCVD_IN_RP_SAFE 2529 1.04 0.63 1.30 124 RELAYCOUNTRY_CA 2518 7.21 16.70 1.29 125 XM_H_Long_From02 2503 1.44 1.70 1.28 126 RCVD_IN_IADB_OPTIN 2489 0.88 0.24 1.28 127 MSGID_NOFQDN1 2366 0.75 0.01 1.21 128 XMDiploma_00 2336 1.31 1.49 1.20 129 TM2_M_VERY_LONG_WORD 2288 1.90 3.08 1.17 130 T_TooManySym_03 2235 0.79 0.22 1.15 131 XM_GoogleGroups 2206 0.84 0.39 1.13 132 TR_Symld_Words 2150 1.03 0.91 1.10 133 RCVD_IN_RP_CERTIFIED 2141 0.87 0.50 1.10 134 TR_XM_SpammyWords5 2140 2.98 6.01 1.10 135 XM_B_COPY_HTML 2101 0.96 0.78 1.08 136 XM_SendGrid 2069 1.86 3.14 1.06 137 TR_XM_Base64_M1 1930 1.10 1.28 0.99 138 XMBdyGiftCard01 1872 1.08 1.26 0.96 139 XM_OfRef6 1864 2.67 5.42 0.96 140 URI_HEX 1842 1.06 1.26 0.94 141 XM_H_PHPMailer 1805 1.00 1.13 0.92 142 XMSubMetaI_00 1763 1.07 1.34 0.90 143 USER_IN_WHITELIST 1714 0.54 0.00 0.88 144 USER_IN_WELCOMELIST 1714 0.54 0.00 0.88 145 RCVD_IN_BL_SPAMCOP_NET 1683 7.53 18.25 0.86 146 XM_UB50 1674 1.54 2.63 0.86 147 SUBJ_ALL_CAPS 1670 2.13 4.18 0.86 148 DKIM_ADSP_CUSTOM_MED 1657 0.75 0.59 0.85 149 KHOP_HELO_FCRDNS 1648 1.05 1.37 0.84 150 TooManyTo_003 1592 0.78 0.72 0.82 151 XMPhish30 1559 0.96 1.22 0.80 152 MILLION_HUNDRED 1554 1.01 1.36 0.80 153 TR_LOTS_OF_MONEY3 1532 1.90 3.69 0.79 154 MPART_ALT_DIFF_COUNT 1528 0.91 1.11 0.78 155 TR_XM_SpammyWords2 1495 6.16 14.83 0.77 156 XM_ProductURIs 1491 0.77 0.78 0.76 157 RELAYCOUNTRY_GB 1435 0.73 0.71 0.74 158 XM_B_SpammyWords4 1430 1.16 1.86 0.73 159 XMSubNoVowel 1412 0.66 0.56 0.72 160 TR_XM_DK_SendGrid 1400 0.76 0.84 0.72 161 XMPhish14 1337 0.66 0.61 0.69 162 T_XMDrugObfuBody_00 1326 0.75 0.87 0.68 163 URI_TRY_3LD 1288 1.01 1.58 0.66 164 MIME_HEADER_CTYPE_ONLY 1281 0.69 0.74 0.66 165 T_XMHurry_00 1252 1.06 1.74 0.64 166 TR_MetaPhish_Combo_01 1228 1.06 1.76 0.63 167 TooManyTo_004 1214 0.65 0.69 0.62 168 MISSING_HEADERS 1204 1.41 2.69 0.62 169 XMSubMetaSxObfu_02 1174 0.51 0.37 0.60 170 XM_H_Trusted_IP 1126 0.36 0.00 0.58 171 XMNoVowels 1120 0.52 0.42 0.57 172 XMGenDplmaNmb 1107 0.53 0.46 0.57 173 HTTPS_HTTP_MISMATCH 1090 0.98 1.66 0.56 174 THIS_AD 1082 0.79 1.16 0.55 175 FORGED_GMAIL_RCVD 1065 0.52 0.48 0.55 176 TooManyTo_005 1025 0.58 0.67 0.53 177 NML_ADSP_CUSTOM_MED 1020 0.52 0.53 0.52 178 XM_B_REG_HTML 1020 0.55 0.60 0.52 179 RELAYCOUNTRY_AU 1016 1.09 2.00 0.52 180 XMBrknScrpt_02 973 1.26 2.47 0.50 181 SHORT_URI_3 972 0.67 0.95 0.50 182 XMLngstWrd_00 965 1.26 2.48 0.49 183 T_FILL_THIS_FORM_SHORT 963 3.44 8.18 0.49 184 SpammyFromTLD_01 896 1.53 3.26 0.46 185 DATE_IN_PAST_03_06 872 0.52 0.65 0.45 186 REPLYTO_WITHOUT_TO_CC 840 1.25 2.57 0.43 187 DKIM_ADSP_NXDOMAIN 836 0.42 0.40 0.43 188 HTML_FONT_FACE_BAD 829 0.58 0.83 0.42 189 HTML_TAG_BALANCE_BODY 826 1.05 2.05 0.42 190 T_TooManySym_04 822 0.31 0.12 0.42 191 XM_shorewaves_Whitelist 821 0.26 0.00 0.42 192 FROM_GOV_DKIM_AU 810 0.26 0.02 0.42 193 RDNS_DYNAMIC 798 0.55 0.79 0.41 194 XM_B_FormFill 796 0.28 0.07 0.41 195 TR_XM_SPAMCOP 794 6.21 15.52 0.41 196 XM_ShortIntro_01 785 0.43 0.48 0.40 197 SUBJ_DOLLARS 780 0.53 0.75 0.40 198 XMSubEmpty 777 0.36 0.30 0.40 199 XM_S_SubURI 763 0.26 0.05 0.39 200 FILL_THIS_FORM 756 0.38 0.38 0.39 ----------------------------------------------------------------------