Email: 525483 Autolearn: 0 AvgScore: 2.69 AvgScanTime: 1.56 sec Spam: 141736 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.69 sec Ham: 383747 Autolearn: 0 AvgScore: -1.56 AvgScanTime: 1.52 sec Time Spent Running SA: 228.31 hours Time Spent Processing Spam: 66.54 hours Time Spent Processing Ham: 161.78 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136780 89.81 96.50 87.34 2 DKIM_SIGNED 107236 71.31 75.66 69.70 3 XM_DK_Pass 103351 69.44 72.92 68.15 4 XM_B_Unicode 100911 70.23 71.20 69.87 5 RELAYCOUNTRY_US 100215 77.74 70.71 80.33 6 DKIM_VALID 100096 67.35 70.62 66.14 7 XM_B_SpammyWords 99293 51.74 70.05 44.98 8 DCC_CHECK 90686 43.53 63.98 35.97 9 XMListUnsubscribeExists 89443 49.58 63.11 44.58 10 DKIM_VALID_AU 73770 50.02 52.05 49.28 11 BAYES_50 62720 50.71 44.25 53.09 12 MIME_HTML_ONLY 56024 24.48 39.53 18.93 13 XM_B_Unicode3 53805 40.52 37.96 41.47 14 XM_DK_Undo_02 52189 14.29 36.82 5.97 15 XM_B_SpammyWords2 51465 22.40 36.31 17.26 16 DCC_CHECK_NEGATIVE 50999 56.43 35.98 63.98 17 LOC_TINY_FONT_1 44902 24.02 31.68 21.19 18 TR_XM_DKIM_Undo 43426 11.56 30.64 4.52 19 HTML_FONT_LOW_CONTRAST 41443 26.92 29.24 26.06 20 FVGT_m_MULTI_ODD 38436 23.85 27.12 22.64 21 BAYES_99 37560 10.40 26.50 4.46 22 DKIM_VALID_EF 36741 25.91 25.92 25.90 23 T_KAM_HTML_FONT_INVALID 35476 20.13 25.03 18.32 24 RELAYCOUNTRY_META 33545 8.97 23.67 3.55 25 RCVD_IN_MSPIKE_H2 33385 21.21 23.55 20.34 26 XMSubLong 32842 21.70 23.17 21.16 27 XM_Body_Dirty_Words 31677 15.11 22.35 12.43 28 BAYES_999 28495 8.02 20.10 3.56 29 TR_DCC_Bayes_99 27110 6.46 19.13 1.78 30 T_TM2_M_HEADER_IN_MSG 26647 28.74 18.80 32.41 31 UNTRUSTED_Relay 26396 5.93 18.62 1.24 32 RCVD_IN_MSPIKE_WL 26374 25.70 18.61 28.32 33 XM_UncommonTLD01 26115 7.37 18.43 3.28 34 BOTNET 24687 5.77 17.42 1.47 35 HTML_MIME_NO_HTML_TAG 24454 6.10 17.25 1.98 36 TR_XM_SpammyRelay 23690 5.59 16.71 1.49 37 XM_Multi_Part_URI 20355 12.03 14.36 11.17 38 LOTS_OF_MONEY 16929 9.13 11.94 8.09 39 BOTNET_IPINHOSTNAME 16348 6.13 11.53 4.13 40 RCVD_IN_MSPIKE_H3 15771 13.78 11.13 14.76 41 HTML_FONT_SIZE_LARGE 15653 3.05 11.04 0.10 42 UNPARSEABLE_RELAY 15199 8.76 10.72 8.04 43 XM_B_SpammyWords3 15109 5.72 10.66 3.90 44 XM_B_Unsub 14967 11.30 10.56 11.57 45 HTML_SHORT_LINK_IMG_1 14554 2.79 10.27 0.02 46 TR_XM_UnparsRelay 14511 7.21 10.24 6.09 47 TR_XM_SpammyWords4 14176 5.93 10.00 4.43 48 TR_XM_SpammyWords2 13305 3.10 9.39 0.78 49 FSL_BULK_SIG 13153 7.05 9.28 6.23 50 XMSexyCombo_05 13089 4.58 9.23 2.86 51 XMNumbers 13082 4.95 9.23 3.38 52 XM_UB50 12730 3.01 8.98 0.80 53 XM_Evil_Numbers_Gen 12595 7.74 8.89 7.31 54 MPART_ALT_DIFF 12437 5.97 8.77 4.94 55 RCVD_IN_BL_SPAMCOP_NET 12350 2.91 8.71 0.76 56 HTML_IMAGE_ONLY_08 11754 2.32 8.29 0.11 57 BAYES_60 11375 8.47 8.03 8.64 58 BAYES_80 11202 5.07 7.90 4.02 59 SpammyFromTLD_02 10579 2.30 7.46 0.40 60 HTML_IMAGE_RATIO_02 10258 5.98 7.24 5.51 61 LotsOfNums_01 10155 8.47 7.16 8.95 62 XM_SendGrid 10148 6.62 7.16 6.41 63 GOOG_STO_IMG_HTML 10084 1.92 7.11 0.00 64 RCVD_IN_MSPIKE_H4 9947 10.28 7.02 11.49 65 TR_XM_SpammyWords5 9409 2.76 6.64 1.32 66 XMStrtUSub 9392 4.91 6.63 4.28 67 TR_XM_PhishingBody 9235 4.08 6.52 3.18 68 TooManyTo_001 9223 9.08 6.51 10.03 69 RCVD_IN_MSPIKE_BL 9221 2.43 6.51 0.92 70 TR_XM_MSPIKECOMBO 9197 2.42 6.49 0.91 71 XM_SPF_SoftFail 8455 5.48 5.97 5.30 72 XMSubMetaSx_00 8240 4.97 5.81 4.66 73 HTML_TAG_BALANCE_CENTER 7923 1.59 5.59 0.11 74 RELAYCOUNTRY_PL 7812 1.50 5.51 0.02 75 ALL_TRUSTED 7490 14.03 5.28 17.26 76 XM_H_Long_From01 7198 5.09 5.08 5.10 77 MIME_HTML_MOSTLY 7197 2.95 5.08 2.16 78 XM_B_Phish_Phrases 7140 4.02 5.04 3.64 79 DKIM_INVALID 7140 3.96 5.04 3.56 80 SpammyFromTLD_01 6540 1.80 4.61 0.76 81 RELAYCOUNTRY_CA 6498 1.83 4.58 0.81 82 MIME_QP_LONG_LINE 6448 6.37 4.55 7.04 83 TR_XM_SPAMCOP 6393 1.43 4.51 0.29 84 FROM_SUSPICIOUS_NTLD 6238 1.22 4.40 0.05 85 FROM_SUSPICIOUS_NTLD_FP 6179 1.21 4.36 0.05 86 HTML_IMAGE_RATIO_04 6005 4.62 4.24 4.77 87 MIME_HTML_ONLY_MULTI 5869 3.49 4.14 3.25 88 XM_B_Investor 5833 2.31 4.12 1.64 89 TM2_M_URI_OPT_OUT 5685 4.37 4.01 4.50 90 XMHTML_After_End 5641 1.70 3.98 0.86 91 BAYES_95 5578 2.77 3.94 2.35 92 TR_XM_DK_SendGrid 5520 3.99 3.89 4.02 93 XM_B_Phish66 5443 2.58 3.84 2.12 94 URI_NOVOWEL 5275 2.88 3.72 2.56 95 TM2_M_VERY_LONG_WORD 5069 1.87 3.58 1.24 96 GOOG_STO_IMG_NOHTML 5063 1.11 3.57 0.20 97 HTML_IMAGE_ONLY_12 5053 1.10 3.57 0.20 98 T_TooManySym_01 5020 5.00 3.54 5.54 99 KHOP_HELO_FCRDNS 4903 3.36 3.46 3.32 100 TR_XM_SpammyWords3 4895 1.24 3.45 0.42 101 T_REMOTE_IMAGE 4830 3.52 3.41 3.56 102 HDRS_MISSP 4760 0.93 3.36 0.03 103 RCVD_IN_VALIDITY_SAFE 4644 4.26 3.28 4.62 104 SHORT_IMG_SUSP_NTLD 4606 0.88 3.25 0.00 105 BOTNET_NORDNS 4495 0.87 3.17 0.02 106 HTML_IMAGE_RATIO_06 4450 4.18 3.14 4.57 107 XM_B_SpammyTLD 4396 2.42 3.10 2.16 108 DATE_IN_PAST_06_12 4386 0.89 3.09 0.08 109 BAYES_40 4333 4.80 3.06 5.45 110 TR_XM_MaxUnsub 4292 1.26 3.03 0.60 111 T_HTML_ATTACH 4208 0.88 2.97 0.10 112 TO_NO_BRKTS_HTML_IMG 4206 0.82 2.97 0.03 113 BAYES_00 4072 11.89 2.87 15.22 114 XM_S_SpammyWords 3919 0.90 2.76 0.21 115 TR_XM_Spammywords 3919 0.90 2.76 0.21 116 XM_OfRef6 3884 1.58 2.74 1.15 117 XM_DIRTYINTL 3866 0.98 2.73 0.34 118 T_XMDrugObfuBody_08 3822 1.86 2.70 1.56 119 T_XMDrugObfuBody_14 3808 2.22 2.69 2.05 120 RCVD_IN_VALIDITY_CERTIFIED 3798 3.68 2.68 4.06 121 RCVD_IN_MSPIKE_L3 3712 0.97 2.62 0.36 122 T_FILL_THIS_FORM_SHORT 3701 1.26 2.61 0.76 123 XMSexyCombo_01 3581 1.77 2.53 1.49 124 XM_GoogleGroups 3552 1.62 2.51 1.29 125 RCVD_IN_IADB_LISTED 3526 4.51 2.49 5.26 126 RCVD_IN_MSPIKE_L5 3318 0.79 2.34 0.22 127 XMDiploma_00 3276 1.75 2.31 1.55 128 HTML_IMAGE_RATIO_08 3266 4.32 2.30 5.07 129 SUBJ_ALL_CAPS 3264 2.12 2.30 2.05 130 BAYES_20 3228 3.66 2.28 4.17 131 URIBL_DBL_SPAM 3179 0.61 2.24 0.01 132 RELAYCOUNTRY_RU 3112 0.61 2.20 0.03 133 NO_DNS_FOR_FROM 3088 0.78 2.18 0.27 134 XM_BadFromFormat 3009 0.67 2.12 0.14 135 DKIM_ADSP_NXDOMAIN 3003 0.82 2.12 0.34 136 XM_B_COVIDMETA 2936 1.08 2.07 0.71 137 XM_CamelCaseFrm001 2935 1.85 2.07 1.77 138 XM_UB99 2928 0.56 2.07 0.00 139 RCVD_IN_IADB_SPF 2924 3.92 2.06 4.60 140 XM_DK_Undo_01 2916 1.71 2.06 1.58 141 XM_B_SpammyWords4 2864 1.04 2.02 0.68 142 MAILING_LIST_MULTI 2848 2.45 2.01 2.62 143 XM_XX_Yahoo 2837 0.59 2.00 0.08 144 XMBody_17 2814 0.86 1.99 0.44 145 URI_HEX 2800 1.51 1.98 1.34 146 TR_XM_SB_Phish 2708 2.18 1.91 2.28 147 RCVD_IN_IADB_DK 2697 3.40 1.90 3.95 148 RCVD_IN_IADB_SENDERID 2670 3.50 1.88 4.10 149 RCVD_IN_VALIDITY_RPBL 2659 0.54 1.88 0.04 150 XM_UB60 2614 0.55 1.84 0.07 151 XMGappySubj_01 2577 1.40 1.82 1.25 152 T_XMDrugObfuBody_00 2576 0.90 1.82 0.56 153 XM_URI_RBL 2575 0.59 1.82 0.14 154 FROM_MISSP_REPLYTO 2560 0.50 1.81 0.02 155 HK_RANDOM_FROM 2543 0.56 1.79 0.10 156 XMSubPhish11 2536 2.13 1.79 2.25 157 TR_XM_COVIDMETA1 2510 0.68 1.77 0.28 158 XMSubject_48 2498 0.51 1.76 0.04 159 XMLngstWrd_00 2476 1.01 1.75 0.74 160 JH_SPAMMY_HEADERS 2460 0.47 1.74 0.00 161 XMLngstWrd_01 2434 0.94 1.72 0.66 162 XMGappySubj_02 2431 0.57 1.72 0.15 163 XM_B_Unsub2 2430 1.68 1.71 1.67 164 TR_XM_COVIDMETA4 2410 0.74 1.70 0.38 165 XM_Body_Dirty_Words_01 2377 0.56 1.68 0.15 166 XMLngstWrd_02 2328 0.84 1.64 0.55 167 HTML_TITLE_SUBJ_DIFF 2288 0.53 1.61 0.13 168 XMLngstWrd_03 2262 0.74 1.60 0.42 169 XMStockSpam_06 2220 0.97 1.57 0.75 170 XMLngstWrd_04 2208 0.66 1.56 0.32 171 FROM_EXCESS_BASE64 2206 2.32 1.56 2.60 172 RELAYCOUNTRY_FR 2200 0.58 1.55 0.22 173 USER_IN_DEF_DKIM_WL 2173 8.01 1.53 10.40 174 RCVD_IN_MSPIKE_L4 2167 0.66 1.53 0.33 175 TR_XM_PHPDW 2111 0.64 1.49 0.32 176 UPPERCASE_75_100 2094 0.50 1.48 0.13 177 XM_UB80 2070 0.41 1.46 0.02 178 URIBL_BLACK 2069 0.44 1.46 0.07 179 TR_XM_PHPForged 2049 0.60 1.45 0.29 180 RCVD_IN_IADB_VOUCHED 2035 2.78 1.44 3.28 181 TR_XM_FormFill2 2028 0.59 1.43 0.28 182 XM_H_PHPOS 2007 0.58 1.42 0.27 183 TR_XM_FormFill 1918 0.37 1.35 0.01 184 HTML_TAG_BALANCE_BODY 1880 0.79 1.33 0.60 185 TR_XM_INV_DKIM 1854 0.45 1.31 0.14 186 RELAYCOUNTRY_AU 1843 0.62 1.30 0.37 187 TR_XM_MaxWHORU 1841 0.49 1.30 0.19 188 XM_UB999 1835 0.35 1.29 0.00 189 TR_Mismatch_TLD_02 1823 0.40 1.29 0.07 190 XMBrknScrpt_02 1818 1.00 1.28 0.90 191 XM_ProductURIs 1807 0.76 1.27 0.57 192 XMGenDplmaNmb 1805 1.03 1.27 0.94 193 TM2_M_A_HREF_HREF 1797 0.53 1.27 0.25 194 MIXED_CENTER_CASE 1720 0.33 1.21 0.00 195 TR_LOTS_OF_MONEY3 1718 0.49 1.21 0.23 196 MIXED_HREF_CASE 1717 0.33 1.21 0.00 197 DIET_1 1710 0.55 1.21 0.31 198 MIXED_AREA_CASE 1701 0.32 1.20 0.00 199 MIXED_IMG_CASE 1701 0.33 1.20 0.00 200 MIXED_FONT_CASE 1696 0.32 1.20 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 335151 89.81 96.50 87.34 2 RELAYCOUNTRY_US 308280 77.74 70.71 80.33 3 XM_B_Unicode 268114 70.23 71.20 69.87 4 DKIM_SIGNED 267471 71.31 75.66 69.70 5 XM_DK_Pass 261533 69.44 72.92 68.15 6 DKIM_VALID 253799 67.35 70.62 66.14 7 DCC_CHECK_NEGATIVE 245527 56.43 35.98 63.98 8 BAYES_50 203734 50.71 44.25 53.09 9 DKIM_VALID_AU 189101 50.02 52.05 49.28 10 XM_B_SpammyWords 172594 51.74 70.05 44.98 11 XMListUnsubscribeExists 171082 49.58 63.11 44.58 12 XM_B_Unicode3 159138 40.52 37.96 41.47 13 DCC_CHECK 138043 43.53 63.98 35.97 14 T_TM2_M_HEADER_IN_MSG 124362 28.74 18.80 32.41 15 RCVD_IN_MSPIKE_WL 108688 25.70 18.61 28.32 16 HTML_FONT_LOW_CONTRAST 99996 26.92 29.24 26.06 17 DKIM_VALID_EF 99396 25.91 25.92 25.90 18 FVGT_m_MULTI_ODD 86882 23.85 27.12 22.64 19 LOC_TINY_FONT_1 81310 24.02 31.68 21.19 20 XMSubLong 81183 21.70 23.17 21.16 21 RCVD_IN_MSPIKE_H2 78070 21.21 23.55 20.34 22 MIME_HTML_ONLY 72627 24.48 39.53 18.93 23 T_KAM_HTML_FONT_INVALID 70299 20.13 25.03 18.32 24 ALL_TRUSTED 66241 14.03 5.28 17.26 25 XM_B_SpammyWords2 66233 22.40 36.31 17.26 26 BAYES_00 58414 11.89 2.87 15.22 27 RCVD_IN_MSPIKE_H3 56623 13.78 11.13 14.76 28 XM_Body_Dirty_Words 47713 15.11 22.35 12.43 29 XM_B_Unsub 44416 11.30 10.56 11.57 30 RCVD_IN_MSPIKE_H4 44095 10.28 7.02 11.49 31 XM_Multi_Part_URI 42876 12.03 14.36 11.17 32 USER_IN_DEF_DKIM_WL 39903 8.01 1.53 10.40 33 TooManyTo_001 38487 9.08 6.51 10.03 34 IN_ZIMBRA_NJ_WHITELIST 36875 7.04 0.08 9.61 35 LotsOfNums_01 34346 8.47 7.16 8.95 36 BAYES_60 33153 8.47 8.03 8.64 37 LOTS_OF_MONEY 31050 9.13 11.94 8.09 38 UNPARSEABLE_RELAY 30837 8.76 10.72 8.04 39 TR_XM_DK_Bayes 28923 5.67 0.62 7.54 40 XM_Evil_Numbers_Gen 28060 7.74 8.89 7.31 41 TR_XM_DK_Bayes1 27974 5.48 0.59 7.29 42 MIME_QP_LONG_LINE 27020 6.37 4.55 7.04 43 XM_DKIMWhitelistDomains 26374 5.03 0.03 6.87 44 XM_SendGrid 24614 6.62 7.16 6.41 45 FSL_BULK_SIG 23912 7.05 9.28 6.23 46 TR_XM_DK_Bayes2 23443 4.60 0.51 6.11 47 TR_XM_UnparsRelay 23376 7.21 10.24 6.09 48 XM_DK_Undo_02 22924 14.29 36.82 5.97 49 T_TooManySym_01 21243 5.00 3.54 5.54 50 HTML_IMAGE_RATIO_02 21163 5.98 7.24 5.51 51 BAYES_40 20915 4.80 3.06 5.45 52 XM_SPF_SoftFail 20357 5.48 5.97 5.30 53 RCVD_IN_IADB_LISTED 20185 4.51 2.49 5.26 54 XM_H_Long_From01 19564 5.09 5.08 5.10 55 HTML_IMAGE_RATIO_08 19461 4.32 2.30 5.07 56 MPART_ALT_DIFF 18951 5.97 8.77 4.94 57 HTML_IMAGE_RATIO_04 18294 4.62 4.24 4.77 58 XM_PDF 17922 3.64 0.85 4.67 59 XMSubMetaSx_00 17889 4.97 5.81 4.66 60 RCVD_IN_VALIDITY_SAFE 17738 4.26 3.28 4.62 61 RCVD_IN_IADB_SPF 17655 3.92 2.06 4.60 62 HTML_IMAGE_RATIO_06 17529 4.18 3.14 4.57 63 TR_XM_DKIM_Undo 17331 11.56 30.64 4.52 64 TM2_M_URI_OPT_OUT 17253 4.37 4.01 4.50 65 BAYES_99 17109 10.40 26.50 4.46 66 TR_XM_SpammyWords4 16999 5.93 10.00 4.43 67 XMStrtUSub 16409 4.91 6.63 4.28 68 BAYES_20 15986 3.66 2.28 4.17 69 BOTNET_IPINHOSTNAME 15844 6.13 11.53 4.13 70 RCVD_IN_IADB_SENDERID 15718 3.50 1.88 4.10 71 RCVD_IN_VALIDITY_CERTIFIED 15566 3.68 2.68 4.06 72 HTML_FONT_FACE_BAD 15548 3.12 0.59 4.05 73 BAYES_80 15426 5.07 7.90 4.02 74 TR_XM_DK_SendGrid 15422 3.99 3.89 4.02 75 RCVD_IN_IADB_DK 15175 3.40 1.90 3.95 76 XM_B_SpammyWords3 14970 5.72 10.66 3.90 77 XM_B_Phish_Phrases 13961 4.02 5.04 3.64 78 BOUNCE_MESSAGE 13916 2.85 0.73 3.63 79 ANY_BOUNCE_MESSAGE 13916 2.85 0.73 3.63 80 DKIM_INVALID 13672 3.96 5.04 3.56 81 T_REMOTE_IMAGE 13669 3.52 3.41 3.56 82 BAYES_999 13651 8.02 20.10 3.56 83 RELAYCOUNTRY_META 13610 8.97 23.67 3.55 84 XMNumbers 12952 4.95 9.23 3.38 85 KHOP_HELO_FCRDNS 12757 3.36 3.46 3.32 86 XM_UncommonTLD01 12594 7.37 18.43 3.28 87 RCVD_IN_IADB_VOUCHED 12586 2.78 1.44 3.28 88 MIME_HTML_ONLY_MULTI 12468 3.49 4.14 3.25 89 XM_H_Trusted_IP 12332 2.35 0.00 3.21 90 TR_XM_PhishingBody 12220 4.08 6.52 3.18 91 T_TooManySym_02 11628 2.41 0.72 3.03 92 XMSexyCombo_05 10962 4.58 9.23 2.86 93 MAILING_LIST_MULTI 10046 2.45 2.01 2.62 94 FROM_EXCESS_BASE64 9983 2.32 1.56 2.60 95 BAYES_05 9970 2.21 1.17 2.60 96 URI_NOVOWEL 9841 2.88 3.72 2.56 97 BAYES_95 9000 2.77 3.94 2.35 98 TR_XM_SB_Phish 8757 2.18 1.91 2.28 99 TooManyTo_002 8645 1.90 0.95 2.25 100 XMSubPhish11 8640 2.13 1.79 2.25 101 XM_B_SpammyTLD 8303 2.42 3.10 2.16 102 MIME_HTML_MOSTLY 8290 2.95 5.08 2.16 103 FILL_THIS_FORM 8249 1.66 0.32 2.15 104 RCVD_IN_IADB_OPTIN 8151 1.78 0.85 2.12 105 XM_B_Phish66 8118 2.58 3.84 2.12 106 RCVD_IN_MSPIKE_H5 7970 1.64 0.46 2.08 107 T_XMDrugObfuBody_14 7854 2.22 2.69 2.05 108 SUBJ_ALL_CAPS 7853 2.12 2.30 2.05 109 HTML_MIME_NO_HTML_TAG 7586 6.10 17.25 1.98 110 HELO_NODOT 7414 1.51 0.37 1.93 111 HELO_NO_DOMAIN 7411 1.51 0.37 1.93 112 INVALID_MSGID 7009 1.36 0.10 1.83 113 IN_HORDE_ADDRESS_BOOK 6852 1.33 0.10 1.79 114 TR_DCC_Bayes_99 6833 6.46 19.13 1.78 115 XM_CamelCaseFrm001 6811 1.85 2.07 1.77 116 XM_B_Unsub2 6397 1.68 1.71 1.67 117 XMSubNoVowel 6394 1.47 0.95 1.67 118 XM_B_Investor 6295 2.31 4.12 1.64 119 TVD_RCVD_IP 6271 1.24 0.19 1.63 120 MSGID_NOFQDN1 6124 1.17 0.02 1.60 121 XM_DK_Undo_01 6045 1.71 2.06 1.58 122 TO_MALFORMED 6036 1.16 0.05 1.57 123 SHORT_URI_2 6012 1.44 1.09 1.57 124 TR_Symld_Words 6001 1.45 1.13 1.56 125 T_XMDrugObfuBody_08 5978 1.86 2.70 1.56 126 XMDiploma_00 5945 1.75 2.31 1.55 127 TooManyTo_003 5736 1.32 0.85 1.49 128 XMSexyCombo_01 5708 1.77 2.53 1.49 129 TR_XM_SpammyRelay 5706 5.59 16.71 1.49 130 BOTNET 5659 5.77 17.42 1.47 131 XM_H_Long_From02 5498 1.35 1.14 1.43 132 URI_HEX 5157 1.51 1.98 1.34 133 TR_XM_SpammyWords5 5070 2.76 6.64 1.32 134 XM_GoogleGroups 4941 1.62 2.51 1.29 135 XMGappySubj_01 4789 1.40 1.82 1.25 136 UNTRUSTED_Relay 4755 5.93 18.62 1.24 137 TM2_M_VERY_LONG_WORD 4744 1.87 3.58 1.24 138 XMCapTrack 4732 1.14 0.88 1.23 139 XMBSHREFv2 4507 0.95 0.35 1.17 140 XM_OfRef6 4401 1.58 2.74 1.15 141 TVD_SPACE_RATIO 4290 0.88 0.25 1.12 142 TooManyTo_004 4013 0.97 0.76 1.05 143 DKIM_ADSP_CUSTOM_MED 3659 0.97 1.00 0.95 144 RCVD_IN_RP_SAFE 3636 0.88 0.68 0.95 145 XMGenDplmaNmb 3607 1.03 1.27 0.94 146 RCVD_IN_MSPIKE_BL 3545 2.43 6.51 0.92 147 TR_XM_MSPIKECOMBO 3510 2.42 6.49 0.91 148 XMBrknScrpt_02 3452 1.00 1.28 0.90 149 TooManyTo_005 3323 0.82 0.71 0.87 150 XMHTML_After_End 3312 1.70 3.98 0.86 151 RCVD_IN_RP_CERTIFIED 3246 0.76 0.52 0.85 152 T_TooManySym_03 3142 0.67 0.27 0.82 153 RELAYCOUNTRY_CA 3093 1.83 4.58 0.81 154 XM_UB50 3079 3.01 8.98 0.80 155 HTTPS_HTTP_MISMATCH 2997 0.85 1.03 0.78 156 TR_XM_SpammyWords2 2975 3.10 9.39 0.78 157 TR_MetaPhish_Combo_01 2957 0.82 0.97 0.77 158 RCVD_IN_BL_SPAMCOP_NET 2927 2.91 8.71 0.76 159 SpammyFromTLD_01 2917 1.80 4.61 0.76 160 T_FILL_THIS_FORM_SHORT 2908 1.26 2.61 0.76 161 RELAYCOUNTRY_GB 2889 0.85 1.13 0.75 162 XMStockSpam_06 2875 0.97 1.57 0.75 163 XMLngstWrd_00 2849 1.01 1.75 0.74 164 XM_B_COVIDMETA 2723 1.08 2.07 0.71 165 XMBody_95 2675 0.54 0.10 0.70 166 XM_B_SpammyWords4 2624 1.04 2.02 0.68 167 XM_E_Blogspot 2590 0.53 0.12 0.67 168 XMLngstWrd_01 2515 0.94 1.72 0.66 169 HTML_IMAGE_ONLY_20 2492 0.57 0.37 0.65 170 FROM_GOV_DKIM_AU 2457 0.49 0.08 0.64 171 NML_ADSP_CUSTOM_MED 2361 0.64 0.71 0.62 172 XM_ShortIntro_01 2331 0.63 0.68 0.61 173 TR_XM_MaxUnsub 2304 1.26 3.03 0.60 174 HTML_TAG_BALANCE_BODY 2294 0.79 1.33 0.60 175 XMNoVowels 2284 0.54 0.41 0.60 176 T_OBFU_PDF_ATTACH 2277 0.46 0.09 0.59 177 TR_MSPIKEBAYES00 2276 0.44 0.02 0.59 178 RCVD_IN_SORBS_DUL 2257 0.50 0.27 0.59 179 XM_ProductURIs 2192 0.76 1.27 0.57 180 XMBdyGiftCard01 2188 0.65 0.86 0.57 181 T_XMDrugObfuBody_00 2161 0.90 1.82 0.56 182 SHORT_HELO_AND_INLINE_IMAGE 2116 0.43 0.10 0.55 183 XMLngstWrd_02 2092 0.84 1.64 0.55 184 URI_TRY_3LD 2091 0.69 1.10 0.54 185 FORGED_GMAIL_RCVD 2058 0.63 0.90 0.54 186 XM_H_PHPMailer 2024 0.53 0.52 0.53 187 XM_B_COPY_HTML 1928 0.57 0.74 0.50 188 XMMoneyMeta_00 1909 0.66 1.10 0.50 189 HTML_IMAGE_ONLY_32 1846 0.41 0.21 0.48 190 XMHTMLBadTable_001 1727 0.56 0.85 0.45 191 T_XMHurry_00 1713 0.64 1.18 0.45 192 TM2_M_BODY_EMPTY 1704 0.41 0.31 0.44 193 XMBody_17 1695 0.86 1.99 0.44 194 RDNS_DYNAMIC 1673 0.49 0.65 0.44 195 T_Symld_Words_02 1658 0.50 0.67 0.43 196 TR_XM_SpammyWords3 1617 1.24 3.45 0.42 197 XMLngstWrd_03 1601 0.74 1.60 0.42 198 HTML_IMAGE_ONLY_28 1595 0.40 0.35 0.42 199 XMPhish30 1545 0.61 1.18 0.40 200 USER_IN_WHITELIST 1537 0.29 0.00 0.40 ----------------------------------------------------------------------