Email: 256315 Autolearn: 0 AvgScore: 4.53 AvgScanTime: 1.30 sec Spam: 83080 Autolearn: 0 AvgScore: 14.12 AvgScanTime: 1.43 sec Ham: 173235 Autolearn: 0 AvgScore: -0.07 AvgScanTime: 1.24 sec Time Spent Running SA: 92.69 hours Time Spent Processing Spam: 33.01 hours Time Spent Processing Ham: 59.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 78262 85.11 94.20 80.75 2 DKIM_SIGNED 72897 79.41 87.74 75.41 3 XM_DK_Pass 69697 77.38 83.89 74.26 4 DKIM_VALID 69384 76.88 83.51 73.71 5 XM_B_Unicode 69367 73.54 83.49 68.77 6 RELAYCOUNTRY_US 66851 79.54 80.47 79.10 7 DCC_CHECK 65800 58.13 79.20 48.02 8 XM_B_SpammyWords 57171 54.98 68.81 48.35 9 XMListUnsubscribeExists 56525 57.26 68.04 52.09 10 DKIM_VALID_AU 56405 64.53 67.89 62.91 11 XM_B_Unicode3 41025 45.49 49.38 43.63 12 LOC_TINY_FONT_1 39393 37.37 47.42 32.56 13 XM_DK_Undo_02 35509 17.92 42.74 6.01 14 T_SCC_BODY_TEXT_LINE 33590 41.60 40.43 42.16 15 XM_B_SpammyWords2 32300 28.21 38.88 23.09 16 BAYES_50 32164 54.36 38.71 61.87 17 HTML_FONT_LOW_CONTRAST 29130 30.91 35.06 28.91 18 BAYES_99 27891 14.07 33.57 4.72 19 FVGT_m_MULTI_ODD 26690 29.31 32.13 27.97 20 T_KAM_HTML_FONT_INVALID 26453 24.09 31.84 20.38 21 TR_XM_DKIM_Undo 26120 11.92 31.44 2.55 22 MIME_HTML_ONLY 24084 24.68 28.99 22.61 23 DKIM_VALID_EF 23048 29.92 27.74 30.96 24 BAYES_999 21387 10.86 25.74 3.73 25 TR_DCC_Bayes_99 20549 9.14 24.73 1.67 26 XMSubLong 17850 22.62 21.49 23.17 27 TR_XM_DK_Unsub 17671 17.95 21.27 16.36 28 T_TM2_M_HEADER_IN_MSG 17646 23.56 21.24 24.67 29 XM_Multi_Part_URI 16919 17.19 20.36 15.66 30 DCC_CHECK_NEGATIVE 16869 41.70 20.30 51.96 31 XM_B_Unsub 16697 13.00 20.10 9.60 32 RELAYCOUNTRY_META 16360 10.65 19.69 6.31 33 TR_XM_BayesUnsub 16191 10.93 19.49 6.83 34 UNPARSEABLE_RELAY 14503 14.65 17.46 13.30 35 TR_MAX_INTL_RELAY 13106 9.35 15.78 6.26 36 XM_B_SpammyWords3 11657 8.60 14.03 5.99 37 BOTNET_IPINHOSTNAME 11459 7.04 13.79 3.80 38 TR_XM_SpammyRelay 11199 7.54 13.48 4.69 39 RCVD_IN_MSPIKE_H2 10882 13.13 13.10 13.14 40 FSL_BULK_SIG 10702 11.70 12.88 11.14 41 TR_XM_SpammyWords2 9868 4.30 11.88 0.67 42 LOTS_OF_MONEY 9761 7.53 11.75 5.51 43 BOTNET 9593 4.61 11.55 1.29 44 RCVD_IN_BL_SPAMCOP_NET 9356 4.16 11.26 0.75 45 TR_XM_SpammyWords4 8347 5.93 10.05 3.96 46 XM_Body_Dirty_Words 8103 5.04 9.75 2.78 47 BAYES_80 7975 5.64 9.60 3.75 48 RELAYCOUNTRY_CA 7327 5.68 8.82 4.17 49 TR_XM_UnparsRelay 7111 3.88 8.56 1.64 50 BAYES_60 7072 7.32 8.51 6.75 51 XM_B_Phish_Phrases 6761 5.97 8.14 4.93 52 XM_Evil_Numbers_Gen 6663 8.92 8.02 9.36 53 RCVD_IN_MSPIKE_WL 6661 11.10 8.02 12.58 54 HTML_IMAGE_RATIO_02 6384 6.09 7.68 5.33 55 XMSubMetaSx_00 5988 5.12 7.21 4.12 56 UNTRUSTED_Relay 5866 3.34 7.06 1.56 57 MPART_ALT_DIFF 5540 5.59 6.67 5.07 58 XM_UncommonTLD01 5515 5.49 6.64 4.93 59 BAYES_95 4790 3.57 5.77 2.51 60 LotsOfNums_01 4788 7.53 5.76 8.38 61 XM_H_Long_From01 4684 5.74 5.64 5.80 62 XM_H_GMP 4628 6.17 5.57 6.46 63 HTML_IMAGE_RATIO_04 4485 4.47 5.40 4.03 64 RCVD_IN_MSPIKE_H3 4240 5.32 5.10 5.43 65 MIME_HTML_MOSTLY 3998 3.47 4.81 2.82 66 XMSexyCombo_05 3977 2.60 4.79 1.54 67 XMStrtUSub 3960 6.02 4.77 6.63 68 T_XMDrugObfuBody_14 3951 2.89 4.76 1.99 69 XM_OfRef6 3921 2.30 4.72 1.13 70 XM_B_Investor 3670 2.37 4.42 1.39 71 TR_XM_NoHeaderRelay 3578 1.56 4.31 0.24 72 XM_CamelCaseFrm001 3560 3.08 4.29 2.50 73 DKIM_INVALID 3513 2.52 4.23 1.71 74 TooManyTo_001 3497 5.59 4.21 6.25 75 RCVD_IN_VALIDITY_RPBL 3483 1.43 4.19 0.11 76 TR_XM_PhishingBody 3337 2.42 4.02 1.65 77 XM_B_PhoneNumber 3237 5.69 3.90 6.55 78 RCVD_IN_MSPIKE_BL 3163 1.67 3.81 0.65 79 TR_XM_MSPIKECOMBO 3163 1.67 3.81 0.65 80 XMBody_17 3126 1.63 3.76 0.61 81 TM2_M_VERY_LONG_WORD 3122 2.11 3.76 1.32 82 TR_XM_SPAMCOP 3013 1.31 3.63 0.20 83 USER_IN_DEF_DKIM_WL 3012 12.73 3.63 17.10 84 XM_B_SpammyTLD 2992 3.21 3.60 3.02 85 TR_XM_SpammyWords5 2947 2.08 3.55 1.38 86 MIME_QP_LONG_LINE 2923 3.29 3.52 3.18 87 XMNumbers 2899 4.46 3.49 4.92 88 MIME_HTML_ONLY_MULTI 2867 3.15 3.45 3.00 89 XM_UB50 2780 1.71 3.35 0.92 90 RCVD_IN_VALIDITY_SAFE 2705 4.58 3.26 5.21 91 XM_B_Unsub2 2599 1.92 3.13 1.34 92 T_FILL_THIS_FORM_SHORT 2456 1.37 2.96 0.62 93 XM_SPF_SoftFail 2428 1.94 2.92 1.47 94 XMDiploma_00 2418 1.81 2.91 1.29 95 DKIM_ADSP_NXDOMAIN 2402 1.26 2.89 0.48 96 XM_URI_RBL 2310 1.29 2.78 0.57 97 T_XMDrugObfuBody_08 2267 1.78 2.73 1.32 98 RELAYCOUNTRY_AU 2142 1.26 2.58 0.63 99 ANY_BOUNCE_MESSAGE 2090 5.14 2.52 6.39 100 BOUNCE_MESSAGE 2090 5.13 2.52 6.39 101 RCVD_IN_MSPIKE_H5 2068 4.84 2.49 5.96 102 RCVD_IN_VALIDITY_CERTIFIED 1946 3.52 2.34 4.09 103 XM_B_SpammyWords4 1895 1.34 2.28 0.89 104 XM_B_URI_Unicode 1888 1.65 2.27 1.35 105 KHOP_HELO_FCRDNS 1868 1.53 2.25 1.19 106 XMStockSpam_06 1857 1.87 2.24 1.69 107 TR_XM_SpammyWords3 1845 0.92 2.22 0.30 108 RCVD_IN_PSBL 1832 1.02 2.21 0.46 109 T_TooManySym_01 1789 5.87 2.15 7.65 110 TM2_M_URI_OPT_OUT 1786 1.88 2.15 1.75 111 ALL_TRUSTED 1785 10.62 2.15 14.68 112 SUBJ_ALL_CAPS 1724 1.29 2.08 0.91 113 HTML_IMAGE_RATIO_08 1703 1.87 2.05 1.78 114 URI_NOVOWEL 1703 1.62 2.05 1.42 115 MAILING_LIST_MULTI 1671 2.10 2.01 2.15 116 XMBrknScrpt_02 1670 1.42 2.01 1.14 117 FROM_EXCESS_BASE64 1653 2.30 1.99 2.45 118 HTML_IMAGE_RATIO_06 1626 2.83 1.96 3.24 119 RCVD_IN_MSPIKE_L3 1620 1.01 1.95 0.57 120 TR_XM_INV_DKIM 1586 0.76 1.91 0.21 121 TR_LOTS_OF_MONEY3 1572 0.86 1.89 0.37 122 T_XMHurry_00 1558 0.99 1.88 0.57 123 XM_DK_Undo_01 1524 1.82 1.83 1.82 124 SpammyFromTLD_01 1519 0.94 1.83 0.51 125 TR_Mismatch_TLD_02 1503 0.63 1.81 0.06 126 XM_H_Long_From02 1492 1.14 1.80 0.83 127 BOTNET_NORDNS 1364 0.54 1.64 0.02 128 SpammyFromTLD_02 1347 0.87 1.62 0.51 129 DIET_1 1330 0.78 1.60 0.38 130 TR_LOTS_OF_MONEY2 1320 0.61 1.59 0.15 131 T_MONEY_PERCENT 1320 0.61 1.59 0.15 132 T_XMDrugObfuBody_00 1293 0.85 1.56 0.52 133 XMBdyGiftCard01 1287 0.96 1.55 0.67 134 XMPhish30 1279 1.02 1.54 0.77 135 XMBounce_01 1256 0.51 1.51 0.04 136 BAYES_40 1253 4.02 1.51 5.22 137 XM_B_COPY_HTML 1252 1.09 1.51 0.90 138 RELAYCOUNTRY_TH 1226 0.48 1.48 0.00 139 HTML_TAG_BALANCE_BODY 1211 0.99 1.46 0.77 140 XM_UB99 1177 0.47 1.42 0.01 141 XMSexyCombo_01 1170 0.63 1.41 0.26 142 RDNS_DYNAMIC 1148 0.65 1.38 0.30 143 TR_XM_PHPDW 1143 0.66 1.38 0.31 144 MPART_ALT_DIFF_COUNT 1141 0.81 1.37 0.53 145 FORGED_MUA_OUTLOOK 1139 0.47 1.37 0.04 146 FSL_NEW_HELO_USER 1135 0.44 1.37 0.00 147 FSL_CTYPE_WIN1251 1131 0.44 1.36 0.00 148 XPRIO 1130 0.44 1.36 0.00 149 TR_XM_PHPForged 1099 0.64 1.32 0.31 150 AXB_XMAILER_MIMEOLE_OL_024C2 1096 0.43 1.32 0.00 151 TR_XM_FormFill2 1087 0.63 1.31 0.31 152 SHOPIFY_IMG_NOT_RCVD_SFY 1086 0.72 1.31 0.44 153 RCVD_IN_PBL 1083 0.80 1.30 0.56 154 T_REMOTE_IMAGE 1066 2.84 1.28 3.59 155 HTTPS_HTTP_MISMATCH 1063 0.68 1.28 0.40 156 XM_H_PHPOS 1062 0.61 1.28 0.29 157 TVD_RCVD_IP 1062 1.17 1.28 1.12 158 XM_OfRef7 1059 0.56 1.27 0.22 159 RCVD_IN_MSPIKE_L5 1048 0.46 1.26 0.08 160 XMReplyNow 1035 0.54 1.25 0.20 161 XM_ProductURIs 1013 1.43 1.22 1.54 162 HTML_MIME_NO_HTML_TAG 1000 1.71 1.20 1.95 163 RCVD_IN_XBL 999 0.40 1.20 0.01 164 XM_HighProb1 970 0.39 1.17 0.01 165 XM_DIRTYINTL 966 0.42 1.16 0.06 166 XMGenDplmaNmb 964 0.76 1.16 0.56 167 MultiRelay_CC 955 0.43 1.15 0.08 168 HTML_IMAGE_ONLY_20 942 0.69 1.13 0.48 169 T_STY_INVIS_DIRECT 932 0.77 1.12 0.61 170 TR_Symld_Words 931 1.14 1.12 1.15 171 DKIM_ADSP_CUSTOM_MED 920 0.87 1.11 0.76 172 URI_TRY_3LD 909 0.73 1.09 0.55 173 TR_MetaPhish_Combo_01 906 0.87 1.09 0.76 174 XM_B_Phish66 904 0.55 1.09 0.30 175 HELO_DYNAMIC_SPLIT_IP 900 0.36 1.08 0.01 176 FROM_MISSP_REPLYTO 882 0.34 1.06 0.00 177 XM_B_REG_HTML 881 0.53 1.06 0.27 178 LongTLD 880 0.51 1.06 0.25 179 RCVD_IN_SBL_CSS 860 0.36 1.04 0.03 180 XM_RXBody 853 0.51 1.03 0.26 181 TR_Mismatch_TLD_01 837 0.53 1.01 0.29 182 TO_NO_BRKTS_FROM_MSSP 831 0.33 1.00 0.01 183 FROM_MISSP_MSFT 828 0.32 1.00 0.00 184 URI_HEX 827 1.01 1.00 1.02 185 BAYES_20 819 2.64 0.99 3.43 186 MONEY_FROM_MISSP 819 0.32 0.99 0.00 187 XMBody_78 818 0.59 0.98 0.40 188 TO_NO_BRKTS_MSFT 818 0.32 0.98 0.00 189 TR_XM_InvalidRelay 813 0.33 0.98 0.02 190 NML_ADSP_CUSTOM_MED 811 0.61 0.98 0.43 191 XM_B_COVIDMETA 800 0.37 0.96 0.08 192 TM2_M_OBFU_COMMENT 785 0.93 0.94 0.93 193 XM_UB60 766 0.34 0.92 0.07 194 TR_XM_RelayPhish 761 0.36 0.92 0.10 195 XM_ShortIntro_01 755 0.55 0.91 0.39 196 XM_SendGrid 752 1.14 0.91 1.25 197 FORGED_GMAIL_RCVD 750 0.61 0.90 0.48 198 SHORT_URI 747 0.50 0.90 0.31 199 MISSING_HEADERS 739 0.47 0.89 0.27 200 HTML_FONT_FACE_BAD 734 0.65 0.88 0.54 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139887 85.11 94.20 80.75 2 RELAYCOUNTRY_US 137029 79.54 80.47 79.10 3 DKIM_SIGNED 130640 79.41 87.74 75.41 4 XM_DK_Pass 128639 77.38 83.89 74.26 5 DKIM_VALID 127683 76.88 83.51 73.71 6 XM_B_Unicode 119131 73.54 83.49 68.77 7 DKIM_VALID_AU 108983 64.53 67.89 62.91 8 BAYES_50 107180 54.36 38.71 61.87 9 XMListUnsubscribeExists 90237 57.26 68.04 52.09 10 DCC_CHECK_NEGATIVE 90007 41.70 20.30 51.96 11 XM_B_SpammyWords 83759 54.98 68.81 48.35 12 DCC_CHECK 83185 58.13 79.20 48.02 13 XM_B_Unicode3 75584 45.49 49.38 43.63 14 T_SCC_BODY_TEXT_LINE 73038 41.60 40.43 42.16 15 LOC_TINY_FONT_1 56401 37.37 47.42 32.56 16 DKIM_VALID_EF 53641 29.92 27.74 30.96 17 HTML_FONT_LOW_CONTRAST 50088 30.91 35.06 28.91 18 FVGT_m_MULTI_ODD 48447 29.31 32.13 27.97 19 T_TM2_M_HEADER_IN_MSG 42736 23.56 21.24 24.67 20 XMSubLong 40139 22.62 21.49 23.17 21 XM_B_SpammyWords2 39999 28.21 38.88 23.09 22 MIME_HTML_ONLY 39174 24.68 28.99 22.61 23 T_KAM_HTML_FONT_INVALID 35305 24.09 31.84 20.38 24 USER_IN_DEF_DKIM_WL 29624 12.73 3.63 17.10 25 TR_XM_DK_Unsub 28341 17.95 21.27 16.36 26 XM_Multi_Part_URI 27133 17.19 20.36 15.66 27 ALL_TRUSTED 25432 10.62 2.15 14.68 28 UNPARSEABLE_RELAY 23048 14.65 17.46 13.30 29 RCVD_IN_MSPIKE_H2 22771 13.13 13.10 13.14 30 RCVD_IN_MSPIKE_WL 21797 11.10 8.02 12.58 31 FSL_BULK_SIG 19290 11.70 12.88 11.14 32 BAYES_00 17064 6.78 0.37 9.85 33 XM_B_Unsub 16635 13.00 20.10 9.60 34 XM_Evil_Numbers_Gen 16213 8.92 8.02 9.36 35 XM_DKIMWhitelistDomains 15848 6.20 0.06 9.15 36 LotsOfNums_01 14523 7.53 5.76 8.38 37 T_TooManySym_01 13252 5.87 2.15 7.65 38 TR_XM_DK_Bayes 12867 5.10 0.25 7.43 39 TR_XM_DK_Bayes1 12728 5.05 0.25 7.35 40 TR_XM_BayesUnsub 11825 10.93 19.49 6.83 41 BAYES_60 11700 7.32 8.51 6.75 42 XMStrtUSub 11482 6.02 4.77 6.63 43 XM_B_PhoneNumber 11353 5.69 3.90 6.55 44 XM_H_GMP 11191 6.17 5.57 6.46 45 ANY_BOUNCE_MESSAGE 11074 5.14 2.52 6.39 46 BOUNCE_MESSAGE 11069 5.13 2.52 6.39 47 RELAYCOUNTRY_META 10934 10.65 19.69 6.31 48 TR_XM_DK_Bayes2 10923 4.33 0.20 6.31 49 TR_MAX_INTL_RELAY 10847 9.35 15.78 6.26 50 TooManyTo_001 10831 5.59 4.21 6.25 51 IN_ZIMBRA_NJ_WHITELIST 10453 4.11 0.09 6.03 52 XM_DK_Undo_02 10410 17.92 42.74 6.01 53 XM_B_SpammyWords3 10379 8.60 14.03 5.99 54 RCVD_IN_MSPIKE_H5 10326 4.84 2.49 5.96 55 XM_H_Long_From01 10041 5.74 5.64 5.80 56 LOTS_OF_MONEY 9549 7.53 11.75 5.51 57 RCVD_IN_MSPIKE_H3 9398 5.32 5.10 5.43 58 HTML_IMAGE_RATIO_02 9225 6.09 7.68 5.33 59 BAYES_40 9042 4.02 1.51 5.22 60 RCVD_IN_VALIDITY_SAFE 9025 4.58 3.26 5.21 61 MPART_ALT_DIFF 8789 5.59 6.67 5.07 62 XM_UncommonTLD01 8547 5.49 6.64 4.93 63 XM_B_Phish_Phrases 8533 5.97 8.14 4.93 64 XMNumbers 8524 4.46 3.49 4.92 65 BAYES_99 8174 14.07 33.57 4.72 66 TR_XM_SpammyRelay 8120 7.54 13.48 4.69 67 T_TooManySym_02 7456 3.12 0.64 4.30 68 RELAYCOUNTRY_CA 7222 5.68 8.82 4.17 69 XMSubMetaSx_00 7132 5.12 7.21 4.12 70 RCVD_IN_VALIDITY_CERTIFIED 7085 3.52 2.34 4.09 71 HTML_IMAGE_RATIO_04 6975 4.47 5.40 4.03 72 TR_XM_SpammyWords4 6855 5.93 10.05 3.96 73 INVALID_MSGID 6729 2.74 0.36 3.88 74 BOTNET_IPINHOSTNAME 6583 7.04 13.79 3.80 75 BAYES_80 6488 5.64 9.60 3.75 76 BAYES_999 6458 10.86 25.74 3.73 77 TO_MALFORMED 6257 2.51 0.20 3.61 78 T_REMOTE_IMAGE 6224 2.84 1.28 3.59 79 BAYES_20 5938 2.64 0.99 3.43 80 HTML_IMAGE_RATIO_06 5618 2.83 1.96 3.24 81 MIME_QP_LONG_LINE 5506 3.29 3.52 3.18 82 XM_B_SpammyTLD 5233 3.21 3.60 3.02 83 MIME_HTML_ONLY_MULTI 5195 3.15 3.45 3.00 84 XM_PDF 5175 2.20 0.55 2.99 85 MIME_HTML_MOSTLY 4890 3.47 4.81 2.82 86 XM_Body_Dirty_Words 4818 5.04 9.75 2.78 87 TR_XM_DKIM_Undo 4426 11.92 31.44 2.55 88 BAYES_95 4348 3.57 5.77 2.51 89 XM_CamelCaseFrm001 4339 3.08 4.29 2.50 90 TooManyTo_002 4257 1.83 0.53 2.46 91 FROM_EXCESS_BASE64 4241 2.30 1.99 2.45 92 MAILING_LIST_MULTI 3719 2.10 2.01 2.15 93 RCVD_IN_IADB_LISTED 3550 1.55 0.52 2.05 94 T_XMDrugObfuBody_14 3454 2.89 4.76 1.99 95 HTML_MIME_NO_HTML_TAG 3384 1.71 1.20 1.95 96 XMGappySubj_01 3348 1.36 0.18 1.93 97 BAYES_05 3299 1.45 0.50 1.90 98 RCVD_IN_IADB_SPF 3194 1.40 0.47 1.84 99 T_TooManySym_03 3149 1.31 0.24 1.82 100 XM_DK_Undo_01 3146 1.82 1.83 1.82 101 HTML_IMAGE_RATIO_08 3085 1.87 2.05 1.78 102 TM2_M_URI_OPT_OUT 3035 1.88 2.15 1.75 103 DKIM_INVALID 2957 2.52 4.23 1.71 104 IN_HORDE_ADDRESS_BOOK 2946 1.18 0.10 1.70 105 XMStockSpam_06 2936 1.87 2.24 1.69 106 RCVD_IN_IADB_SENDERID 2928 1.29 0.45 1.69 107 TR_DCC_Bayes_99 2888 9.14 24.73 1.67 108 TVD_SPACE_RATIO 2888 1.19 0.21 1.67 109 TR_XM_PhishingBody 2863 2.42 4.02 1.65 110 RCVD_IN_IADB_DK 2850 1.26 0.46 1.65 111 TR_XM_UnparsRelay 2844 3.88 8.56 1.64 112 UNTRUSTED_Relay 2702 3.34 7.06 1.56 113 XMSexyCombo_05 2675 2.60 4.79 1.54 114 XM_ProductURIs 2661 1.43 1.22 1.54 115 RCVD_IN_IADB_VOUCHED 2547 1.06 0.21 1.47 116 XM_SPF_SoftFail 2546 1.94 2.92 1.47 117 URI_NOVOWEL 2456 1.62 2.05 1.42 118 XM_B_Investor 2410 2.37 4.42 1.39 119 TR_XM_SpammyWords5 2390 2.08 3.55 1.38 120 XM_B_URI_Unicode 2347 1.65 2.27 1.35 121 XM_B_Unsub2 2314 1.92 3.13 1.34 122 XMGappySubj_02 2312 0.92 0.04 1.33 123 TM2_M_VERY_LONG_WORD 2289 2.11 3.76 1.32 124 T_XMDrugObfuBody_08 2286 1.78 2.73 1.32 125 LOW_PRICE 2240 0.98 0.34 1.29 126 XMDiploma_00 2233 1.81 2.91 1.29 127 BOTNET 2228 4.61 11.55 1.29 128 T_TVD_MIME_NO_HEADERS 2189 0.86 0.02 1.26 129 XM_SendGrid 2158 1.14 0.91 1.25 130 RCVD_IN_MSPIKE_H4 2073 0.95 0.42 1.20 131 KHOP_HELO_FCRDNS 2057 1.53 2.25 1.19 132 XM_B_FormFill 2031 0.81 0.05 1.17 133 TR_Symld_Words 1984 1.14 1.12 1.15 134 XMBrknScrpt_02 1982 1.42 2.01 1.14 135 XM_GoogleGroups 1972 1.04 0.84 1.14 136 XM_OfRef6 1965 2.30 4.72 1.13 137 TVD_RCVD_IP 1939 1.17 1.28 1.12 138 LONG_JUNK_URI2 1911 0.81 0.19 1.10 139 TR_XM_Base64_M1 1880 1.00 0.82 1.09 140 URI_HEX 1766 1.01 1.00 1.02 141 RCVD_IN_IADB_OPTIN 1725 0.72 0.14 1.00 142 HTML_EXTRA_CLOSE 1693 0.69 0.10 0.98 143 TooManyTo_003 1669 0.81 0.48 0.96 144 TM2_M_OBFU_COMMENT 1607 0.93 0.94 0.93 145 XM_UB50 1601 1.71 3.35 0.92 146 SUBJ_ALL_CAPS 1578 1.29 2.08 0.91 147 XM_B_COPY_HTML 1552 1.09 1.51 0.90 148 XM_B_SpammyWords4 1546 1.34 2.28 0.89 149 XMBSHREFv2 1502 0.69 0.33 0.87 150 XM_B_DNDMA 1492 0.83 0.76 0.86 151 SHORT_URI_2 1466 0.59 0.06 0.85 152 XM_H_Long_From02 1433 1.14 1.80 0.83 153 TR_XM_DK_SendGrid 1414 0.76 0.64 0.82 154 XM_H_PHPMailer 1358 0.80 0.84 0.78 155 XMPhish30 1341 1.02 1.54 0.77 156 HTML_TAG_BALANCE_BODY 1332 0.99 1.46 0.77 157 TR_MetaPhish_Combo_01 1324 0.87 1.09 0.76 158 DKIM_ADSP_CUSTOM_MED 1314 0.87 1.11 0.76 159 TooManyTo_004 1310 0.66 0.46 0.76 160 RCVD_IN_BL_SPAMCOP_NET 1304 4.16 11.26 0.75 161 USER_IN_WHITELIST 1195 0.47 0.00 0.69 162 USER_IN_WELCOMELIST 1195 0.47 0.00 0.69 163 XMBdyGiftCard01 1165 0.96 1.55 0.67 164 TR_XM_SpammyWords2 1155 4.30 11.88 0.67 165 XMSubMetaI_00 1149 0.70 0.79 0.66 166 TooManyTo_005 1131 0.59 0.45 0.65 167 RCVD_IN_MSPIKE_BL 1127 1.67 3.81 0.65 168 TR_XM_MSPIKECOMBO 1127 1.67 3.81 0.65 169 RELAYCOUNTRY_AU 1084 1.26 2.58 0.63 170 T_FILL_THIS_FORM_SHORT 1068 1.37 2.96 0.62 171 XMBody_17 1059 1.63 3.76 0.61 172 T_STY_INVIS_DIRECT 1053 0.77 1.12 0.61 173 XMBody_95 1039 0.43 0.09 0.60 174 FROM_GOV_DKIM_AU 1027 0.43 0.08 0.59 175 XM_URI_RBL 992 1.29 2.78 0.57 176 XMSubMetaSxObfu_03 991 0.55 0.51 0.57 177 T_XMHurry_00 984 0.99 1.88 0.57 178 T_OBFU_PDF_ATTACH 984 0.40 0.06 0.57 179 RCVD_IN_MSPIKE_L3 980 1.01 1.95 0.57 180 XMGenDplmaNmb 974 0.76 1.16 0.56 181 RCVD_IN_PBL 970 0.80 1.30 0.56 182 URI_TRY_3LD 960 0.73 1.09 0.55 183 LONG_JUNK_URI 947 0.62 0.77 0.55 184 HELO_MISC_IP 940 0.38 0.04 0.54 185 HTML_FONT_FACE_BAD 930 0.65 0.88 0.54 186 MPART_ALT_DIFF_COUNT 925 0.81 1.37 0.53 187 T_TooManySym_04 923 0.37 0.03 0.53 188 T_XMDrugObfuBody_00 896 0.85 1.56 0.52 189 XMNoVowels 890 0.47 0.39 0.51 190 SpammyFromTLD_01 884 0.94 1.83 0.51 191 SpammyFromTLD_02 878 0.87 1.62 0.51 192 J_POPCORN_WO_D 860 0.54 0.62 0.50 193 XMSlimDrugH 848 0.51 0.55 0.49 194 XMHTML_After_End 840 0.52 0.59 0.48 195 XMLngstWrd_00 834 0.43 0.32 0.48 196 MSGID_FROM_MTA_HEADER 827 0.36 0.10 0.48 197 HTML_IMAGE_ONLY_20 826 0.69 1.13 0.48 198 DKIM_ADSP_NXDOMAIN 826 1.26 2.89 0.48 199 FORGED_GMAIL_RCVD 825 0.61 0.90 0.48 200 RCVD_IN_PSBL 792 1.02 2.21 0.46 ----------------------------------------------------------------------