Email: 298339 Autolearn: 0 AvgScore: 4.48 AvgScanTime: 1.11 sec Spam: 109111 Autolearn: 0 AvgScore: 13.85 AvgScanTime: 1.16 sec Ham: 189228 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.08 sec Time Spent Running SA: 92.24 hours Time Spent Processing Spam: 35.25 hours Time Spent Processing Ham: 56.99 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 101642 85.97 93.15 81.83 2 DKIM_SIGNED 100638 82.68 92.23 77.17 3 XM_DK_Pass 97872 80.99 89.70 75.97 4 DKIM_VALID 96695 80.25 88.62 75.42 5 XM_B_Unicode 93303 75.68 85.51 70.02 6 T_SCC_BODY_TEXT_LINE 85772 81.66 78.61 83.42 7 RELAYCOUNTRY_US 83540 78.53 76.56 79.66 8 XMListUnsubscribeExists 81242 62.06 74.46 54.92 9 DCC_CHECK 77997 50.63 71.48 38.61 10 XM_B_SpammyWords 77810 54.72 71.31 45.15 11 DKIM_VALID_AU 72852 65.52 66.77 64.80 12 XM_DK_Undo_02 54216 23.13 49.69 7.81 13 XM_B_SpammyWords2 47643 28.04 43.66 19.04 14 XM_B_Unicode3 45592 42.84 41.78 43.45 15 LOC_TINY_FONT_1 42223 31.94 38.70 28.04 16 TR_XM_DKIM_Undo 41836 15.99 38.34 3.11 17 BAYES_99 41595 17.95 38.12 6.32 18 HTML_FONT_LOW_CONTRAST 38975 33.66 35.72 32.47 19 BAYES_50 36884 48.68 33.80 57.26 20 DKIM_VALID_EF 35875 31.11 32.88 30.09 21 MIME_HTML_ONLY 35487 25.34 32.52 21.19 22 FVGT_m_MULTI_ODD 35198 28.75 32.26 26.73 23 BAYES_999 33153 14.22 30.38 4.90 24 DCC_CHECK_NEGATIVE 31098 49.35 28.50 61.37 25 TR_DCC_Bayes_99 30091 11.66 27.58 2.48 26 T_KAM_HTML_FONT_INVALID 29753 22.56 27.27 19.85 27 RCVD_IN_MSPIKE_H2 27397 24.67 25.11 24.42 28 TR_XM_DK_Unsub 27377 19.26 25.09 15.89 29 T_TM2_M_HEADER_IN_MSG 25317 22.54 23.20 22.15 30 RELAYCOUNTRY_META 24932 11.05 22.85 4.24 31 XMSubLong 21199 20.79 19.43 21.57 32 TR_XM_SpammyRelay 20720 8.61 18.99 2.63 33 RCVD_IN_BL_SPAMCOP_NET 19157 7.14 17.56 1.14 34 XM_Multi_Part_URI 18682 16.34 17.12 15.89 35 TR_XM_SpammyWords2 17583 6.37 16.11 0.76 36 TR_MAX_INTL_RELAY 16461 10.37 15.09 7.65 37 XM_B_Unsub 16355 11.00 14.99 8.70 38 UNPARSEABLE_RELAY 16201 12.03 14.85 10.40 39 RELAYCOUNTRY_CA 16006 6.59 14.67 1.94 40 TR_XM_BayesUnsub 15680 9.86 14.37 7.27 41 TR_XM_SPAMCOP 15273 5.38 14.00 0.42 42 XM_B_SpammyWords3 15051 7.97 13.79 4.62 43 BOTNET_IPINHOSTNAME 13406 8.42 12.29 6.19 44 LOTS_OF_MONEY 13398 8.53 12.28 6.37 45 RCVD_IN_MSPIKE_WL 12336 7.99 11.31 6.07 46 RCVD_IN_MSPIKE_H3 12336 7.99 11.31 6.07 47 TR_XM_SpammyWords4 11977 6.95 10.98 4.63 48 XMBody_17 11462 4.44 10.50 0.94 49 XM_Body_Dirty_Words 11344 6.90 10.40 4.88 50 BAYES_80 10012 6.26 9.18 4.58 51 XM_UncommonTLD01 9692 6.19 8.88 4.63 52 BOTNET 9031 3.84 8.28 1.29 53 TR_XM_UnparsRelay 8779 4.26 8.05 2.08 54 BAYES_60 8333 9.62 7.64 10.76 55 FSL_BULK_SIG 8281 5.71 7.59 4.62 56 XM_Evil_Numbers_Gen 8232 8.54 7.54 9.12 57 HTML_IMAGE_RATIO_02 8028 6.94 7.36 6.71 58 T_FILL_THIS_FORM_SHORT 6941 2.67 6.36 0.55 59 SpammyFromTLD_01 6611 2.55 6.06 0.53 60 XMSexyCombo_05 6367 3.53 5.84 2.20 61 HTML_IMAGE_RATIO_06 6360 3.55 5.83 2.23 62 UNTRUSTED_Relay 6083 3.07 5.58 1.63 63 XMNumbers 6043 3.99 5.54 3.10 64 BAYES_95 6022 3.97 5.52 3.07 65 HTML_IMAGE_RATIO_04 5982 5.67 5.48 5.78 66 LotsOfNums_01 5915 6.97 5.42 7.87 67 MPART_ALT_DIFF 5867 4.82 5.38 4.50 68 XM_OfRef6 5587 2.68 5.12 1.27 69 XMSubMetaSx_00 5492 4.71 5.03 4.52 70 T_XMDrugObfuBody_08 5481 2.99 5.02 1.81 71 TooManyTo_001 5424 6.41 4.97 7.25 72 TR_XM_PHPForged 5249 1.93 4.81 0.27 73 TR_XM_PHPDW 5219 1.92 4.78 0.28 74 TR_XM_FormFill2 5180 1.91 4.75 0.27 75 XM_H_PHPOS 5157 1.89 4.73 0.26 76 XM_SPF_SoftFail 5149 3.23 4.72 2.37 77 XMStrtUSub 4955 5.54 4.54 6.11 78 TR_XM_FormFill 4758 1.63 4.36 0.05 79 TR_XM_BayesRelay 4659 1.56 4.27 0.00 80 FONT_INVIS_LONG_LINE 4644 1.61 4.26 0.09 81 XM_B_Investor 4502 2.35 4.13 1.33 82 XM_H_Long_From01 4485 4.89 4.11 5.33 83 XM_H_GMP 4468 6.41 4.09 7.75 84 TR_LOTS_OF_MONEY3 4326 1.68 3.96 0.37 85 T_XMDrugObfuBody_14 4212 2.48 3.86 1.69 86 XMBrknScrpt_02 4180 1.93 3.83 0.84 87 TR_XM_SpammyWords5 4176 2.06 3.83 1.04 88 XM_B_Phish_Phrases 4143 2.99 3.80 2.53 89 MIME_HTML_MOSTLY 4119 3.11 3.78 2.73 90 DKIM_INVALID 3943 2.43 3.61 1.75 91 TM2_M_BODY_EMPTY 3639 1.38 3.34 0.25 92 RCVD_IN_VALIDITY_SAFE 3599 5.16 3.30 6.24 93 XM_B_SpammyTLD 3591 2.95 3.29 2.76 94 SUBJ_ALL_CAPS 3522 1.74 3.23 0.88 95 MIME_HTML_ONLY_MULTI 3393 2.66 3.11 2.40 96 TR_XM_PhishingBody 3314 2.42 3.04 2.06 97 SCC_BODY_URI_ONLY 3268 3.47 3.00 3.75 98 XM_URI_RBL 3102 1.18 2.84 0.22 99 XM_UB50 3098 1.65 2.84 0.96 100 XMEmptyBody_01 2951 1.02 2.70 0.05 101 TM2_M_VERY_LONG_WORD 2916 1.76 2.67 1.23 102 HTML_IMAGE_RATIO_08 2849 2.13 2.61 1.86 103 RCVD_IN_VALIDITY_CERTIFIED 2801 4.26 2.57 5.24 104 TM2_M_URI_OPT_OUT 2690 2.15 2.47 1.97 105 RELAYCOUNTRY_AU 2688 1.24 2.46 0.54 106 USER_IN_DEF_DKIM_WL 2673 11.27 2.45 16.36 107 AC_BR_BONANZA 2665 0.99 2.44 0.15 108 XM_CamelCaseFrm001 2574 2.26 2.36 2.20 109 XM_B_Unsub2 2539 1.81 2.33 1.51 110 FROM_EXCESS_BASE64 2515 2.63 2.30 2.82 111 T_REMOTE_IMAGE 2457 3.15 2.25 3.67 112 HK_RANDOM_REPLYTO 2446 0.89 2.24 0.10 113 BOTNET_NORDNS 2433 0.82 2.23 0.01 114 BAYES_40 2281 3.25 2.09 3.92 115 URI_TRY_3LD 2279 1.27 2.09 0.80 116 TR_XM_NoHeaderRelay 2260 0.82 2.07 0.11 117 XM_B_SpammyWords4 2248 1.11 2.06 0.56 118 BAYES_20 2229 2.50 2.04 2.77 119 HTML_TAG_BALANCE_BODY 2229 1.00 2.04 0.40 120 T_TooManySym_01 2165 4.79 1.98 6.42 121 XM_HighProb1 2148 0.72 1.97 0.00 122 T_XMHurry_00 2108 1.15 1.93 0.70 123 TR_Caps_n_Bayes_99 2085 0.71 1.91 0.01 124 XMReplyNow 2020 0.81 1.85 0.21 125 MIME_QP_LONG_LINE 1945 3.12 1.78 3.90 126 XM_DIRTYINTL 1842 0.77 1.69 0.24 127 XMBdyGiftCard01 1807 1.21 1.66 0.95 128 TR_Mismatch_TLD_02 1743 0.61 1.60 0.04 129 XMDiploma_00 1734 1.20 1.59 0.98 130 XM_DK_Undo_01 1721 1.82 1.58 1.96 131 RDNS_DYNAMIC 1694 0.82 1.55 0.39 132 XMStockSpam_06 1640 1.57 1.50 1.61 133 XMClaimOffer 1569 0.59 1.44 0.10 134 URI_HEX 1520 1.22 1.39 1.11 135 XM_H_PHPMailer 1496 0.99 1.37 0.78 136 SpammyFromTLD_02 1427 0.63 1.31 0.24 137 MAILING_LIST_MULTI 1418 1.97 1.30 2.35 138 HTML_MIME_NO_HTML_TAG 1367 1.34 1.25 1.39 139 KHOP_HELO_FCRDNS 1341 0.81 1.23 0.57 140 TVD_RCVD_IP 1322 2.05 1.21 2.53 141 T_XMDrugObfuBody_10 1304 0.45 1.20 0.02 142 RCVD_IN_PSBL 1288 0.76 1.18 0.52 143 XMPhish30 1278 0.92 1.17 0.78 144 HELO_DYNAMIC_SPLIT_IP 1265 0.44 1.16 0.02 145 TR_XM_INV_DKIM 1263 0.46 1.16 0.07 146 ANY_BOUNCE_MESSAGE 1249 3.97 1.14 5.60 147 BOUNCE_MESSAGE 1247 3.97 1.14 5.60 148 ALL_TRUSTED 1243 10.80 1.14 16.37 149 DIET_1 1232 0.67 1.13 0.40 150 T_XMDrugObfuBody_00 1194 0.62 1.09 0.35 151 MPART_ALT_DIFF_COUNT 1189 0.91 1.09 0.80 152 XM_SendGrid 1185 1.19 1.09 1.25 153 XMSexyCombo_01 1167 0.53 1.07 0.21 154 XM_PDF 1152 1.79 1.06 2.21 155 RCVD_IN_VALIDITY_RPBL 1141 0.44 1.05 0.09 156 TM2_M_A_HREF_HREF 1131 0.73 1.04 0.55 157 SHOPIFY_IMG_NOT_RCVD_SFY 1107 0.55 1.01 0.27 158 THIS_AD 1104 0.69 1.01 0.51 159 XMSubMetaI_00 1081 0.84 0.99 0.75 160 TR_LOTS_OF_MONEY2 1035 0.60 0.95 0.40 161 T_MONEY_PERCENT 1035 0.60 0.95 0.40 162 XMBody_78 1026 0.49 0.94 0.22 163 XM_UB99 1009 0.34 0.92 0.00 164 GOOG_STO_IMG_NOHTML 995 0.44 0.91 0.17 165 XM_B_Phish66 978 0.49 0.90 0.26 166 TR_XM_Base64_M1 952 0.87 0.87 0.87 167 BAYES_05 948 2.04 0.87 2.71 168 RCVD_IN_IADB_LISTED 946 2.28 0.87 3.10 169 XM_B_COPY_HTML 942 0.92 0.86 0.95 170 XM_H_Undi_Recip 929 0.40 0.85 0.15 171 TR_XM_InvalidRelay 916 0.32 0.84 0.02 172 FORGED_RELAY_MUA_TO_MX 916 0.32 0.84 0.02 173 XM_H_PHPOS_M 904 0.33 0.83 0.04 174 URI_NOVOWEL 899 1.03 0.82 1.15 175 HTTPS_HTTP_MISMATCH 894 0.59 0.82 0.46 176 LongTLD 882 0.38 0.81 0.13 177 TR_Mismatch_TLD_01 876 0.47 0.80 0.29 178 TR_XM_DK_SendGrid 863 0.85 0.79 0.88 179 FROM_ADDR_WS 860 0.29 0.79 0.00 180 TooManyTo_002 858 1.52 0.79 1.94 181 RCVD_IN_IADB_SPF 850 2.08 0.78 2.83 182 FROM_WSP_TRAIL 844 0.28 0.77 0.00 183 XM_RXBody 830 0.45 0.76 0.28 184 DKIM_ADSP_NXDOMAIN 827 0.53 0.76 0.39 185 T_STY_INVIS_DIRECT 827 0.44 0.76 0.26 186 XM_ProductURIs 820 0.67 0.75 0.63 187 HTML_IMAGE_ONLY_20 819 0.55 0.75 0.44 188 XM_H_Long_From02 813 1.02 0.75 1.17 189 NO_DNS_FOR_FROM 813 0.52 0.75 0.38 190 RCVD_IN_IADB_DK 810 1.92 0.74 2.60 191 TR_XM_Spammywords 807 0.33 0.74 0.09 192 XM_S_SpammyWords 807 0.33 0.74 0.09 193 BAYES_00 799 5.72 0.73 8.60 194 RCVD_IN_IADB_SENDERID 798 1.93 0.73 2.62 195 HELO_NO_DOMAIN 797 0.53 0.73 0.42 196 HELO_NODOT 797 0.53 0.73 0.42 197 XM_UB60 790 0.29 0.72 0.04 198 RCVD_IN_RP_SAFE 785 1.02 0.72 1.19 199 PDS_OTHER_BAD_TLD 781 0.33 0.72 0.12 200 XMHTML_After_End 778 0.59 0.71 0.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 157863 81.66 78.61 83.42 2 HTML_MESSAGE 154843 85.97 93.15 81.83 3 RELAYCOUNTRY_US 150739 78.53 76.56 79.66 4 DKIM_SIGNED 146021 82.68 92.23 77.17 5 XM_DK_Pass 143755 80.99 89.70 75.97 6 DKIM_VALID 142716 80.25 88.62 75.42 7 XM_B_Unicode 132489 75.68 85.51 70.02 8 DKIM_VALID_AU 122622 65.52 66.77 64.80 9 DCC_CHECK_NEGATIVE 116127 49.35 28.50 61.37 10 BAYES_50 108361 48.68 33.80 57.26 11 XMListUnsubscribeExists 103922 62.06 74.46 54.92 12 XM_B_SpammyWords 85427 54.72 71.31 45.15 13 XM_B_Unicode3 82225 42.84 41.78 43.45 14 DCC_CHECK 73063 50.63 71.48 38.61 15 HTML_FONT_LOW_CONTRAST 61434 33.66 35.72 32.47 16 DKIM_VALID_EF 56943 31.11 32.88 30.09 17 LOC_TINY_FONT_1 53068 31.94 38.70 28.04 18 FVGT_m_MULTI_ODD 50579 28.75 32.26 26.73 19 RCVD_IN_MSPIKE_H2 46201 24.67 25.11 24.42 20 T_TM2_M_HEADER_IN_MSG 41921 22.54 23.20 22.15 21 XMSubLong 40816 20.79 19.43 21.57 22 MIME_HTML_ONLY 40106 25.34 32.52 21.19 23 T_KAM_HTML_FONT_INVALID 37555 22.56 27.27 19.85 24 XM_B_SpammyWords2 36025 28.04 43.66 19.04 25 ALL_TRUSTED 30979 10.80 1.14 16.37 26 USER_IN_DEF_DKIM_WL 30953 11.27 2.45 16.36 27 TR_XM_DK_Unsub 30071 19.26 25.09 15.89 28 XM_Multi_Part_URI 30064 16.34 17.12 15.89 29 XM_DKIMWhitelistDomains 22396 7.58 0.21 11.84 30 BAYES_60 20370 9.62 7.64 10.76 31 UNPARSEABLE_RELAY 19681 12.03 14.85 10.40 32 XM_Evil_Numbers_Gen 17251 8.54 7.54 9.12 33 XM_B_Unsub 16459 11.00 14.99 8.70 34 BAYES_00 16274 5.72 0.73 8.60 35 LotsOfNums_01 14884 6.97 5.42 7.87 36 XM_DK_Undo_02 14787 23.13 49.69 7.81 37 XM_H_GMP 14662 6.41 4.09 7.75 38 TR_MAX_INTL_RELAY 14478 10.37 15.09 7.65 39 TR_XM_BayesUnsub 13751 9.86 14.37 7.27 40 TooManyTo_001 13714 6.41 4.97 7.25 41 TR_XM_DK_Bayes 13444 4.69 0.50 7.10 42 TR_XM_DK_Bayes1 13379 4.67 0.50 7.07 43 HTML_IMAGE_RATIO_02 12689 6.94 7.36 6.71 44 T_TooManySym_01 12140 4.79 1.98 6.42 45 LOTS_OF_MONEY 12062 8.53 12.28 6.37 46 BAYES_99 11957 17.95 38.12 6.32 47 RCVD_IN_VALIDITY_SAFE 11808 5.16 3.30 6.24 48 TR_XM_DK_Bayes2 11772 4.05 0.30 6.22 49 BOTNET_IPINHOSTNAME 11711 8.42 12.29 6.19 50 XMStrtUSub 11564 5.54 4.54 6.11 51 RCVD_IN_MSPIKE_H3 11488 7.99 11.31 6.07 52 RCVD_IN_MSPIKE_WL 11488 7.99 11.31 6.07 53 HTML_IMAGE_RATIO_04 10937 5.67 5.48 5.78 54 ANY_BOUNCE_MESSAGE 10601 3.97 1.14 5.60 55 BOUNCE_MESSAGE 10599 3.97 1.14 5.60 56 IN_ZIMBRA_NJ_WHITELIST 10323 3.48 0.04 5.46 57 XM_H_Long_From01 10090 4.89 4.11 5.33 58 RCVD_IN_VALIDITY_CERTIFIED 9922 4.26 2.57 5.24 59 BAYES_999 9281 14.22 30.38 4.90 60 XM_Body_Dirty_Words 9227 6.90 10.40 4.88 61 XM_UncommonTLD01 8763 6.19 8.88 4.63 62 TR_XM_SpammyWords4 8760 6.95 10.98 4.63 63 FSL_BULK_SIG 8741 5.71 7.59 4.62 64 XM_B_SpammyWords3 8734 7.97 13.79 4.62 65 BAYES_80 8660 6.26 9.18 4.58 66 XMSubMetaSx_00 8556 4.71 5.03 4.52 67 MPART_ALT_DIFF 8524 4.82 5.38 4.50 68 RELAYCOUNTRY_META 8029 11.05 22.85 4.24 69 BAYES_40 7419 3.25 2.09 3.92 70 MIME_QP_LONG_LINE 7378 3.12 1.78 3.90 71 INVALID_MSGID 7124 2.47 0.23 3.76 72 SCC_BODY_URI_ONLY 7093 3.47 3.00 3.75 73 T_REMOTE_IMAGE 6949 3.15 2.25 3.67 74 T_TooManySym_02 6725 2.46 0.57 3.55 75 TO_MALFORMED 6346 2.14 0.02 3.35 76 TR_XM_DKIM_Undo 5883 15.99 38.34 3.11 77 RCVD_IN_IADB_LISTED 5866 2.28 0.87 3.10 78 XMNumbers 5866 3.99 5.54 3.10 79 BAYES_95 5817 3.97 5.52 3.07 80 RCVD_IN_IADB_SPF 5347 2.08 0.78 2.83 81 FROM_EXCESS_BASE64 5330 2.63 2.30 2.82 82 BAYES_20 5236 2.50 2.04 2.77 83 XM_B_SpammyTLD 5224 2.95 3.29 2.76 84 MIME_HTML_MOSTLY 5174 3.11 3.78 2.73 85 BAYES_05 5133 2.04 0.87 2.71 86 TR_XM_SpammyRelay 4968 8.61 18.99 2.63 87 RCVD_IN_IADB_SENDERID 4958 1.93 0.73 2.62 88 RCVD_IN_IADB_DK 4918 1.92 0.74 2.60 89 TVD_RCVD_IP 4790 2.05 1.21 2.53 90 XM_B_Phish_Phrases 4780 2.99 3.80 2.53 91 TR_DCC_Bayes_99 4701 11.66 27.58 2.48 92 MIME_HTML_ONLY_MULTI 4545 2.66 3.11 2.40 93 XM_SPF_SoftFail 4476 3.23 4.72 2.37 94 MAILING_LIST_MULTI 4447 1.97 1.30 2.35 95 HTML_IMAGE_RATIO_06 4229 3.55 5.83 2.23 96 XM_PDF 4179 1.79 1.06 2.21 97 XMSexyCombo_05 4167 3.53 5.84 2.20 98 XM_CamelCaseFrm001 4155 2.26 2.36 2.20 99 XMBSHREFv2 3996 1.40 0.17 2.11 100 TR_XM_UnparsRelay 3928 4.26 8.05 2.08 101 TR_XM_PhishingBody 3892 2.42 3.04 2.06 102 RCVD_IN_IADB_VOUCHED 3824 1.42 0.38 2.02 103 TM2_M_URI_OPT_OUT 3737 2.15 2.47 1.97 104 XM_DK_Undo_01 3703 1.82 1.58 1.96 105 TooManyTo_002 3676 1.52 0.79 1.94 106 RELAYCOUNTRY_CA 3669 6.59 14.67 1.94 107 HTML_IMAGE_RATIO_08 3512 2.13 2.61 1.86 108 IN_HORDE_ADDRESS_BOOK 3453 1.17 0.05 1.82 109 T_XMDrugObfuBody_08 3434 2.99 5.02 1.81 110 DKIM_INVALID 3305 2.43 3.61 1.75 111 TVD_SPACE_RATIO 3260 1.20 0.31 1.72 112 T_XMDrugObfuBody_14 3197 2.48 3.86 1.69 113 XMGappySubj_01 3157 1.10 0.11 1.67 114 UNTRUSTED_Relay 3087 3.07 5.58 1.63 115 XMStockSpam_06 3047 1.57 1.50 1.61 116 XM_B_Unsub2 2858 1.81 2.33 1.51 117 HTML_MIME_NO_HTML_TAG 2637 1.34 1.25 1.39 118 XMGappySubj_02 2636 0.89 0.03 1.39 119 XM_B_Investor 2513 2.35 4.13 1.33 120 XM_GoogleGroups 2513 1.01 0.45 1.33 121 BOTNET 2440 3.84 8.28 1.29 122 XM_OfRef6 2400 2.68 5.12 1.27 123 XM_SendGrid 2371 1.19 1.09 1.25 124 T_TooManySym_03 2330 0.88 0.28 1.23 125 TM2_M_VERY_LONG_WORD 2325 1.76 2.67 1.23 126 MSGID_NOFQDN1 2291 0.77 0.02 1.21 127 XMBody_95 2261 0.80 0.12 1.19 128 RCVD_IN_RP_SAFE 2245 1.02 0.72 1.19 129 XM_H_Long_From02 2222 1.02 0.75 1.17 130 TR_Symld_Words 2181 0.98 0.67 1.15 131 URI_NOVOWEL 2180 1.03 0.82 1.15 132 RCVD_IN_BL_SPAMCOP_NET 2153 7.14 17.56 1.14 133 URI_HEX 2107 1.22 1.39 1.11 134 RCVD_IN_IADB_OPTIN 2063 0.79 0.26 1.09 135 TR_XM_SpammyWords5 1962 2.06 3.83 1.04 136 RCVD_IN_RP_CERTIFIED 1928 0.84 0.52 1.02 137 USER_IN_WHITELIST 1870 0.63 0.00 0.99 138 USER_IN_WELCOMELIST 1870 0.63 0.00 0.99 139 XMDiploma_00 1856 1.20 1.59 0.98 140 XM_UB50 1813 1.65 2.84 0.96 141 DKIM_ADSP_CUSTOM_MED 1808 0.85 0.67 0.96 142 XM_B_COPY_HTML 1796 0.92 0.86 0.95 143 XMBdyGiftCard01 1793 1.21 1.66 0.95 144 XMBody_17 1776 4.44 10.50 0.94 145 XM_B_FormFill 1685 0.59 0.07 0.89 146 SUBJ_ALL_CAPS 1671 1.74 3.23 0.88 147 TR_XM_DK_SendGrid 1666 0.85 0.79 0.88 148 TR_XM_Base64_M1 1643 0.87 0.87 0.87 149 TooManyTo_003 1604 0.79 0.70 0.85 150 XMBrknScrpt_02 1587 1.93 3.83 0.84 151 MPART_ALT_DIFF_COUNT 1521 0.91 1.09 0.80 152 URI_TRY_3LD 1505 1.27 2.09 0.80 153 XMPhish30 1473 0.92 1.17 0.78 154 XM_H_PHPMailer 1468 0.99 1.37 0.78 155 XMSubMetaSxObfu_02 1452 0.57 0.23 0.77 156 TR_XM_SpammyWords2 1432 6.37 16.11 0.76 157 XMSubMetaI_00 1427 0.84 0.99 0.75 158 XMPhish14 1359 0.61 0.42 0.72 159 T_XMHurry_00 1316 1.15 1.93 0.70 160 TR_MetaPhish_Combo_01 1246 0.65 0.64 0.66 161 NML_ADSP_CUSTOM_MED 1231 0.63 0.60 0.65 162 TooManyTo_004 1213 0.65 0.66 0.64 163 XM_ProductURIs 1186 0.67 0.75 0.63 164 XMSubNoVowel 1174 0.55 0.43 0.62 165 HTML_FONT_FACE_BAD 1163 0.64 0.69 0.61 166 FILL_THIS_FORM 1161 0.55 0.45 0.61 167 XM_H_Trusted_IP 1155 0.39 0.00 0.61 168 KHOP_HELO_FCRDNS 1088 0.81 1.23 0.57 169 FORGED_GMAIL_RCVD 1077 0.57 0.58 0.57 170 XM_B_SpammyWords4 1058 1.11 2.06 0.56 171 TooManyTo_005 1048 0.58 0.64 0.55 172 T_FILL_THIS_FORM_SHORT 1038 2.67 6.36 0.55 173 TM2_M_A_HREF_HREF 1036 0.73 1.04 0.55 174 RELAYCOUNTRY_AU 1020 1.24 2.46 0.54 175 XMNoVowels 1010 0.53 0.52 0.53 176 SpammyFromTLD_01 1007 2.55 6.06 0.53 177 XMHTML_After_End 992 0.59 0.71 0.52 178 RCVD_IN_PSBL 977 0.76 1.18 0.52 179 THIS_AD 968 0.69 1.01 0.51 180 XM_B_REG_HTML 919 0.56 0.70 0.49 181 T_TooManySym_04 912 0.37 0.18 0.48 182 HTTPS_HTTP_MISMATCH 876 0.59 0.82 0.46 183 FILL_THIS_FORM_LONG 854 0.42 0.36 0.45 184 HTML_IMAGE_ONLY_20 835 0.55 0.75 0.44 185 XMSubMetaSxObfu_03 828 0.46 0.50 0.44 186 XM_S_SubURI 801 0.29 0.05 0.42 187 FROM_GOV_DKIM_AU 799 0.28 0.02 0.42 188 TR_XM_SPAMCOP 791 5.38 14.00 0.42 189 HELO_NODOT 786 0.53 0.73 0.42 190 HELO_NO_DOMAIN 786 0.53 0.73 0.42 191 XMSlimDrugH 775 0.48 0.61 0.41 192 XM_B_DNDMA 774 0.51 0.68 0.41 193 TM2_M_OBFU_COMMENT 766 0.51 0.70 0.40 194 T_OBFU_PDF_ATTACH 765 0.27 0.04 0.40 195 HTML_TAG_BALANCE_BODY 759 1.00 2.04 0.40 196 DIET_1 752 0.67 1.13 0.40 197 T_MONEY_PERCENT 751 0.60 0.95 0.40 198 TR_LOTS_OF_MONEY2 751 0.60 0.95 0.40 199 RDNS_DYNAMIC 746 0.82 1.55 0.39 200 DKIM_ADSP_NXDOMAIN 741 0.53 0.76 0.39 ----------------------------------------------------------------------