Email: 453094 Autolearn: 0 AvgScore: 2.58 AvgScanTime: 1.20 sec Spam: 124049 Autolearn: 0 AvgScore: 13.50 AvgScanTime: 1.31 sec Ham: 329045 Autolearn: 0 AvgScore: -1.53 AvgScanTime: 1.16 sec Time Spent Running SA: 150.76 hours Time Spent Processing Spam: 45.04 hours Time Spent Processing Ham: 105.73 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 119947 89.98 96.69 87.45 2 DKIM_SIGNED 109249 77.10 88.07 72.97 3 RELAYCOUNTRY_US 104526 82.75 84.26 82.18 4 XM_DK_Pass 103534 74.90 83.46 71.67 5 DKIM_VALID 102365 73.92 82.52 70.68 6 XM_B_Unicode 97796 72.57 78.84 70.21 7 XMListUnsubscribeExists 83967 53.24 67.69 47.79 8 DCC_CHECK 83661 42.10 67.44 32.55 9 XM_B_SpammyWords 80158 49.69 64.62 44.07 10 DKIM_VALID_AU 77425 55.73 62.41 53.22 11 XM_B_Unicode3 56614 43.72 45.64 42.99 12 XM_DK_Undo_02 53599 17.32 43.21 7.57 13 BAYES_50 50181 50.99 40.45 54.96 14 XM_B_SpammyWords2 45386 23.93 36.59 19.16 15 LOC_TINY_FONT_1 45082 26.87 36.34 23.30 16 MIME_HTML_ONLY 42273 25.75 34.08 22.61 17 TR_XM_DKIM_Undo 42201 13.11 34.02 5.23 18 BAYES_99 41932 13.85 33.80 6.33 19 HTML_FONT_LOW_CONTRAST 41885 27.92 33.76 25.71 20 DCC_CHECK_NEGATIVE 40360 57.87 32.54 67.41 21 FVGT_m_MULTI_ODD 39922 25.57 32.18 23.08 22 DKIM_VALID_EF 36101 27.68 29.10 27.15 23 RCVD_IN_MSPIKE_H2 33216 22.12 26.78 20.36 24 BAYES_999 32489 10.98 26.19 5.24 25 T_KAM_HTML_FONT_INVALID 32220 21.12 25.97 19.28 26 TR_DCC_Bayes_99 29525 7.87 23.80 1.87 27 XM_Body_Dirty_Words 28087 14.74 22.64 11.77 28 XMSubLong 27847 22.18 22.45 22.08 29 RCVD_IN_MSPIKE_WL 27668 28.66 22.30 31.06 30 T_TM2_M_HEADER_IN_MSG 27009 27.80 21.77 30.08 31 RELAYCOUNTRY_META 26346 8.65 21.24 3.90 32 XM_Multi_Part_URI 20673 13.40 16.67 12.17 33 XM_B_Unsub 19012 12.42 15.33 11.33 34 UNPARSEABLE_RELAY 18970 9.68 15.29 7.56 35 TR_XM_UnparsRelay 18353 8.42 14.79 6.02 36 RCVD_IN_MSPIKE_H3 17475 16.11 14.09 16.87 37 LOTS_OF_MONEY 17098 10.54 13.78 9.32 38 BOTNET_IPINHOSTNAME 15972 6.89 12.88 4.63 39 XM_UncommonTLD01 15887 6.22 12.81 3.74 40 XM_B_SpammyWords3 15359 6.00 12.38 3.59 41 BOTNET 15014 4.52 12.10 1.66 42 MPART_ALT_DIFF 14905 8.35 12.02 6.96 43 TR_XM_SpammyWords2 14641 3.96 11.80 1.00 44 TR_XM_SpammyWords4 14566 7.66 11.74 6.12 45 FSL_BULK_SIG 14036 5.88 11.31 3.83 46 XMSexyCombo_05 13616 5.99 10.98 4.11 47 XM_SendGrid 12402 6.76 10.00 5.53 48 TR_XM_SpammyRelay 11929 3.75 9.62 1.53 49 XM_Evil_Numbers_Gen 11907 8.48 9.60 8.06 50 RCVD_IN_BL_SPAMCOP_NET 11893 3.26 9.59 0.87 51 UNTRUSTED_Relay 11073 3.31 8.93 1.19 52 BAYES_80 9779 5.51 7.88 4.62 53 RCVD_IN_MSPIKE_H4 9709 10.87 7.83 12.01 54 HTML_IMAGE_RATIO_02 9670 6.67 7.80 6.24 55 LotsOfNums_01 8751 9.14 7.05 9.93 56 MIME_HTML_ONLY_MULTI 8702 5.63 7.01 5.10 57 BAYES_60 8586 8.82 6.92 9.53 58 TR_XM_MaxUnsub 8471 2.66 6.83 1.09 59 TR_XM_PhishingBody 8466 4.17 6.82 3.17 60 TM2_M_VERY_LONG_WORD 7990 3.26 6.44 2.06 61 XMStrtUSub 7739 4.60 6.24 3.98 62 HTML_MIME_NO_HTML_TAG 7611 3.69 6.14 2.76 63 SpammyFromTLD_01 7554 2.23 6.09 0.78 64 BAYES_95 7529 3.66 6.07 2.76 65 XM_H_Long_From01 7520 5.45 6.06 5.21 66 XM_B_Phish_Phrases 7357 4.88 5.93 4.48 67 XMSubMetaSx_00 7172 4.86 5.78 4.51 68 TR_XM_DK_SendGrid 7041 3.98 5.68 3.34 69 DKIM_INVALID 6884 3.19 5.55 2.30 70 TooManyTo_001 6274 7.21 5.06 8.02 71 RCVD_IN_MSPIKE_BL 6196 2.41 4.99 1.43 72 TR_XM_MSPIKECOMBO 6161 2.39 4.97 1.42 73 HTML_IMAGE_RATIO_04 6107 6.72 4.92 7.39 74 TR_XM_SPAMCOP 5876 1.49 4.74 0.27 75 XM_GoogleGroups 5666 2.69 4.57 1.99 76 XM_SPF_SoftFail 5560 2.61 4.48 1.90 77 RELAYCOUNTRY_CA 5549 1.94 4.47 0.99 78 XM_UB50 4991 1.67 4.02 0.78 79 XMLngstWrd_00 4970 1.92 4.01 1.14 80 XMLngstWrd_01 4910 1.86 3.96 1.07 81 RCVD_IN_VALIDITY_SAFE 4891 4.38 3.94 4.54 82 XMLngstWrd_02 4850 1.79 3.91 0.99 83 SpammyFromTLD_02 4838 1.36 3.90 0.41 84 T_REMOTE_IMAGE 4740 3.59 3.82 3.50 85 TR_XM_NoHeaderRelay 4666 1.20 3.76 0.23 86 XMLngstWrd_03 4590 1.66 3.70 0.89 87 HTML_TITLE_SUBJ_DIFF 4546 1.50 3.66 0.68 88 XMLngstWrd_04 4526 1.60 3.65 0.82 89 UPPERCASE_75_100 4477 1.48 3.61 0.68 90 XM_B_Investor 4359 1.96 3.51 1.38 91 T_XMDrugObfuBody_14 4334 2.56 3.49 2.21 92 XM_B_Unsub2 4296 2.21 3.46 1.73 93 XM_B_SpammyTLD 4263 2.43 3.44 2.05 94 MIME_QP_LONG_LINE 4219 5.37 3.40 6.11 95 XM_H_Long_From02 4166 1.72 3.36 1.11 96 XMNumbers 4150 3.67 3.35 3.79 97 T_TooManySym_01 4118 5.65 3.32 6.53 98 XM_B_Phish66 4116 2.29 3.32 1.90 99 MIME_HTML_MOSTLY 4049 2.66 3.26 2.43 100 TM2_M_URI_OPT_OUT 4029 3.06 3.25 2.99 101 TR_XM_SpammyWords5 4022 1.91 3.24 1.41 102 HTML_FONT_SIZE_LARGE 4016 1.00 3.24 0.15 103 XM_DIRTYINTL 3995 1.12 3.22 0.33 104 HTML_IMAGE_RATIO_06 3952 3.75 3.19 3.96 105 RELAYCOUNTRY_DE 3917 1.08 3.16 0.30 106 RCVD_IN_VALIDITY_CERTIFIED 3917 3.86 3.16 4.13 107 XM_OfRef6 3745 1.49 3.02 0.92 108 KHOP_HELO_FCRDNS 3730 1.65 3.01 1.14 109 XM_CamelCaseFrm001 3714 2.00 2.99 1.63 110 XM_DK_Undo_01 3534 2.03 2.85 1.73 111 T_XMDrugObfuBody_00 3422 1.35 2.76 0.81 112 MISSING_HEADERS 3377 1.07 2.72 0.45 113 URIBL_DBL_SPAM 3329 0.74 2.68 0.01 114 RCVD_IN_IADB_LISTED 3247 5.39 2.62 6.44 115 TR_XM_SpammyWords3 3221 1.17 2.60 0.64 116 RCVD_IN_VALIDITY_RPBL 3184 0.71 2.57 0.01 117 T_XMDrugObfuBody_08 3126 1.92 2.52 1.70 118 URI_NOVOWEL 3113 2.80 2.51 2.91 119 XM_B_COVIDMETA 3111 1.33 2.51 0.88 120 BOTNET_NORDNS 3073 0.70 2.48 0.02 121 XM_B_SpammyWords4 2960 1.03 2.39 0.52 122 FROM_EXCESS_BASE64 2924 2.61 2.36 2.70 123 TR_XM_SB_Phish 2916 2.15 2.35 2.07 124 RCVD_IN_MSPIKE_L3 2859 1.10 2.30 0.65 125 XMDiploma_00 2855 1.44 2.30 1.12 126 XMStockSpam_06 2851 2.03 2.30 1.93 127 T_TVD_MIME_EPI 2842 0.67 2.29 0.06 128 HDRS_MISSP 2800 0.64 2.26 0.03 129 RCVD_IN_IADB_SPF 2797 4.75 2.25 5.69 130 XMSubPhish11 2778 2.10 2.24 2.05 131 USER_IN_DEF_DKIM_WL 2773 9.53 2.24 12.28 132 URI_HEX 2754 1.74 2.22 1.56 133 HTML_IMAGE_RATIO_08 2698 2.19 2.17 2.20 134 T_FILL_THIS_FORM_SHORT 2645 1.21 2.13 0.86 135 RCVD_IN_IADB_DK 2601 4.16 2.10 4.94 136 RCVD_IN_IADB_SENDERID 2557 4.27 2.06 5.10 137 RELAYCOUNTRY_AU 2442 0.79 1.97 0.34 138 TR_XM_PHPDW 2417 0.77 1.95 0.33 139 SUBJ_ALL_CAPS 2384 2.00 1.92 2.02 140 TR_XM_PHPForged 2381 0.73 1.92 0.28 141 MAILING_LIST_MULTI 2368 2.51 1.91 2.74 142 TR_XM_FormFill2 2321 0.71 1.87 0.28 143 XM_H_PHPOS 2304 0.70 1.86 0.27 144 RCVD_IN_PSBL 2282 0.73 1.84 0.32 145 TR_LOTS_OF_MONEY3 2248 0.80 1.81 0.41 146 BAYES_40 2238 4.14 1.80 5.03 147 XM_UB99 2233 0.49 1.80 0.00 148 RCVD_IN_MSPIKE_L5 2180 0.60 1.76 0.17 149 TR_Symld_Words 2149 1.70 1.73 1.69 150 XM_URI_RBL 2115 0.58 1.70 0.16 151 XMSexyCombo_01 2102 1.56 1.69 1.51 152 TM2_M_A_HREF_HREF 2073 0.88 1.67 0.58 153 XMBdyGiftCard01 2011 0.99 1.62 0.75 154 XMBody_17 1951 0.67 1.57 0.33 155 XMPhish30 1874 0.86 1.51 0.62 156 RCVD_IN_IADB_VOUCHED 1841 3.31 1.48 4.00 157 HTML_FONT_TINY_NORDNS 1805 0.44 1.46 0.06 158 ALL_TRUSTED 1788 11.62 1.44 15.46 159 PDS_OTHER_BAD_TLD 1782 0.52 1.44 0.17 160 URIBL_BLACK 1764 0.42 1.42 0.04 161 TR_XM_COVIDMETA1 1704 0.56 1.37 0.26 162 URI_TRY_3LD 1680 0.77 1.35 0.55 163 TR_BOTNET_NEGATE 1657 0.62 1.34 0.35 164 BAYES_20 1635 2.89 1.32 3.48 165 XM_Body_Dirty_Words_01 1620 0.82 1.31 0.64 166 TR_XM_FormFill 1614 0.37 1.30 0.01 167 DKIM_ADSP_CUSTOM_MED 1549 1.00 1.25 0.91 168 XM_UB999 1522 0.34 1.23 0.00 169 T_XMHurry_00 1501 0.77 1.21 0.60 170 RELAYCOUNTRY_FR 1477 0.47 1.19 0.20 171 XMGenDplmaNmb 1460 0.77 1.18 0.62 172 T_MONEY_PERCENT 1448 0.46 1.17 0.20 173 TR_LOTS_OF_MONEY2 1448 0.46 1.17 0.20 174 TR_XM_BayesRelay 1416 0.32 1.14 0.00 175 XM_ProductURIs 1389 0.86 1.12 0.76 176 HTML_IMAGE_ONLY_08 1375 0.39 1.11 0.12 177 HTML_TAG_BALANCE_CENTER 1352 0.36 1.09 0.09 178 DIET_1 1316 0.72 1.06 0.59 179 XMHTML_After_End 1314 0.80 1.06 0.70 180 GOOG_STO_IMG_HTML 1294 0.29 1.04 0.00 181 TR_Mismatch_TLD_01 1294 0.47 1.04 0.25 182 HK_RANDOM_REPLYTO 1258 0.36 1.01 0.12 183 XMSubMetaI_00 1238 0.67 1.00 0.55 184 BAYES_00 1236 8.33 1.00 11.10 185 RELAYCOUNTRY_RU 1233 0.30 0.99 0.04 186 XMPhish08 1230 0.40 0.99 0.18 187 TR_XM_COVIDMETA4 1230 0.44 0.99 0.23 188 XM_UB60 1223 0.32 0.99 0.07 189 HTTPS_HTTP_MISMATCH 1218 0.73 0.98 0.63 190 TR_MetaPhish_Combo_01 1207 0.77 0.97 0.70 191 XM_B_DNDMA 1161 0.50 0.94 0.34 192 XM_B_COPY_HTML 1142 0.72 0.92 0.64 193 HTML_TAG_BALANCE_BODY 1137 0.71 0.92 0.64 194 RELAYCOUNTRY_GB 1131 0.81 0.91 0.77 195 RCVD_IN_MSPIKE_L4 1122 0.69 0.90 0.60 196 BODY_URI_ONLY 1110 0.25 0.89 0.01 197 MIXED_CENTER_CASE 1109 0.25 0.89 0.00 198 MIXED_HREF_CASE 1106 0.25 0.89 0.00 199 XM_PDF 1099 3.79 0.89 4.88 200 RCVD_IN_IADB_OPTIN 1095 2.14 0.88 2.61 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 287762 89.98 96.69 87.45 2 RELAYCOUNTRY_US 270422 82.75 84.26 82.18 3 DKIM_SIGNED 240109 77.10 88.07 72.97 4 XM_DK_Pass 235832 74.90 83.46 71.67 5 DKIM_VALID 232553 73.92 82.52 70.68 6 XM_B_Unicode 231021 72.57 78.84 70.21 7 DCC_CHECK_NEGATIVE 221825 57.87 32.54 67.41 8 BAYES_50 180843 50.99 40.45 54.96 9 DKIM_VALID_AU 175105 55.73 62.41 53.22 10 XMListUnsubscribeExists 157254 53.24 67.69 47.79 11 XM_B_SpammyWords 144996 49.69 64.62 44.07 12 XM_B_Unicode3 141461 43.72 45.64 42.99 13 DCC_CHECK 107095 42.10 67.44 32.55 14 RCVD_IN_MSPIKE_WL 102198 28.66 22.30 31.06 15 T_TM2_M_HEADER_IN_MSG 98966 27.80 21.77 30.08 16 DKIM_VALID_EF 89328 27.68 29.10 27.15 17 HTML_FONT_LOW_CONTRAST 84597 27.92 33.76 25.71 18 LOC_TINY_FONT_1 76676 26.87 36.34 23.30 19 FVGT_m_MULTI_ODD 75951 25.57 32.18 23.08 20 MIME_HTML_ONLY 74394 25.75 34.08 22.61 21 XMSubLong 72662 22.18 22.45 22.08 22 RCVD_IN_MSPIKE_H2 66988 22.12 26.78 20.36 23 T_KAM_HTML_FONT_INVALID 63455 21.12 25.97 19.28 24 XM_B_SpammyWords2 63051 23.93 36.59 19.16 25 RCVD_IN_MSPIKE_H3 55512 16.11 14.09 16.87 26 ALL_TRUSTED 50867 11.62 1.44 15.46 27 USER_IN_DEF_DKIM_WL 40404 9.53 2.24 12.28 28 XM_Multi_Part_URI 40037 13.40 16.67 12.17 29 RCVD_IN_MSPIKE_H4 39524 10.87 7.83 12.01 30 XM_Body_Dirty_Words 38720 14.74 22.64 11.77 31 XM_B_Unsub 37278 12.42 15.33 11.33 32 BAYES_00 36528 8.33 1.00 11.10 33 LotsOfNums_01 32673 9.14 7.05 9.93 34 BAYES_60 31359 8.82 6.92 9.53 35 LOTS_OF_MONEY 30677 10.54 13.78 9.32 36 XM_DKIMWhitelistDomains 27101 6.01 0.09 8.24 37 XM_Evil_Numbers_Gen 26531 8.48 9.60 8.06 38 TooManyTo_001 26399 7.21 5.06 8.02 39 XM_DK_Undo_02 24893 17.32 43.21 7.57 40 UNPARSEABLE_RELAY 24878 9.68 15.29 7.56 41 HTML_IMAGE_RATIO_04 24324 6.72 4.92 7.39 42 MPART_ALT_DIFF 22909 8.35 12.02 6.96 43 IN_ZIMBRA_NJ_WHITELIST 22869 5.07 0.08 6.95 44 TR_XM_DK_Bayes 21901 5.00 0.62 6.66 45 T_TooManySym_01 21503 5.65 3.32 6.53 46 TR_XM_DK_Bayes1 21336 4.88 0.62 6.48 47 RCVD_IN_IADB_LISTED 21188 5.39 2.62 6.44 48 BAYES_99 20837 13.85 33.80 6.33 49 HTML_IMAGE_RATIO_02 20534 6.67 7.80 6.24 50 TR_XM_SpammyWords4 20140 7.66 11.74 6.12 51 MIME_QP_LONG_LINE 20105 5.37 3.40 6.11 52 TR_XM_UnparsRelay 19809 8.42 14.79 6.02 53 XM_H_Trusted_IP 19078 4.21 0.00 5.80 54 RCVD_IN_IADB_SPF 18725 4.75 2.25 5.69 55 TR_XM_DK_Bayes2 18530 4.21 0.44 5.63 56 XM_SendGrid 18207 6.76 10.00 5.53 57 BAYES_999 17249 10.98 26.19 5.24 58 TR_XM_DKIM_Undo 17195 13.11 34.02 5.23 59 XM_H_Long_From01 17159 5.45 6.06 5.21 60 MIME_HTML_ONLY_MULTI 16795 5.63 7.01 5.10 61 RCVD_IN_IADB_SENDERID 16787 4.27 2.06 5.10 62 BAYES_40 16542 4.14 1.80 5.03 63 RCVD_IN_IADB_DK 16260 4.16 2.10 4.94 64 XM_PDF 16056 3.79 0.89 4.88 65 BOTNET_IPINHOSTNAME 15249 6.89 12.88 4.63 66 BAYES_80 15201 5.51 7.88 4.62 67 RCVD_IN_VALIDITY_SAFE 14932 4.38 3.94 4.54 68 XMSubMetaSx_00 14852 4.86 5.78 4.51 69 XM_B_Phish_Phrases 14752 4.88 5.93 4.48 70 RCVD_IN_VALIDITY_CERTIFIED 13592 3.86 3.16 4.13 71 XMSexyCombo_05 13513 5.99 10.98 4.11 72 RCVD_IN_IADB_VOUCHED 13158 3.31 1.48 4.00 73 XMStrtUSub 13088 4.60 6.24 3.98 74 HTML_IMAGE_RATIO_06 13033 3.75 3.19 3.96 75 RELAYCOUNTRY_META 12834 8.65 21.24 3.90 76 FSL_BULK_SIG 12603 5.88 11.31 3.83 77 XMNumbers 12477 3.67 3.35 3.79 78 XM_UncommonTLD01 12300 6.22 12.81 3.74 79 XM_B_SpammyWords3 11806 6.00 12.38 3.59 80 T_REMOTE_IMAGE 11506 3.59 3.82 3.50 81 BAYES_20 11467 2.89 1.32 3.48 82 T_TooManySym_02 11026 2.67 0.85 3.35 83 TR_XM_DK_SendGrid 10992 3.98 5.68 3.34 84 TR_XM_PhishingBody 10444 4.17 6.82 3.17 85 TM2_M_URI_OPT_OUT 9850 3.06 3.25 2.99 86 URI_NOVOWEL 9571 2.80 2.51 2.91 87 HTML_MIME_NO_HTML_TAG 9092 3.69 6.14 2.76 88 BAYES_95 9076 3.66 6.07 2.76 89 MAILING_LIST_MULTI 9018 2.51 1.91 2.74 90 FROM_EXCESS_BASE64 8894 2.61 2.36 2.70 91 ANY_BOUNCE_MESSAGE 8697 2.09 0.62 2.64 92 BOUNCE_MESSAGE 8697 2.09 0.62 2.64 93 RCVD_IN_IADB_OPTIN 8597 2.14 0.88 2.61 94 MIME_HTML_MOSTLY 8008 2.66 3.26 2.43 95 DKIM_INVALID 7556 3.19 5.55 2.30 96 T_XMDrugObfuBody_14 7266 2.56 3.49 2.21 97 HTML_IMAGE_RATIO_08 7227 2.19 2.17 2.20 98 BAYES_05 7185 1.79 0.74 2.18 99 RCVD_IN_MSPIKE_H5 7162 1.69 0.39 2.18 100 TooManyTo_002 7055 1.79 0.86 2.14 101 INVALID_MSGID 6954 1.58 0.17 2.11 102 HTML_FONT_FACE_BAD 6828 1.71 0.74 2.08 103 TR_XM_SB_Phish 6805 2.15 2.35 2.07 104 TM2_M_VERY_LONG_WORD 6777 3.26 6.44 2.06 105 XMSubPhish11 6751 2.10 2.24 2.05 106 XM_B_SpammyTLD 6744 2.43 3.44 2.05 107 SUBJ_ALL_CAPS 6658 2.00 1.92 2.02 108 XM_GoogleGroups 6542 2.69 4.57 1.99 109 TVD_RCVD_IP 6533 1.52 0.30 1.99 110 MSGID_NOFQDN1 6400 1.43 0.05 1.95 111 XMStockSpam_06 6341 2.03 2.30 1.93 112 XM_B_Phish66 6248 2.29 3.32 1.90 113 XM_SPF_SoftFail 6244 2.61 4.48 1.90 114 TR_DCC_Bayes_99 6144 7.87 23.80 1.87 115 TO_MALFORMED 6061 1.34 0.01 1.84 116 IN_HORDE_ADDRESS_BOOK 6006 1.36 0.13 1.83 117 XM_B_Unsub2 5696 2.21 3.46 1.73 118 XM_DK_Undo_01 5682 2.03 2.85 1.73 119 T_XMDrugObfuBody_08 5588 1.92 2.52 1.70 120 XMSubNoVowel 5577 1.44 0.78 1.69 121 TR_Symld_Words 5568 1.70 1.73 1.69 122 BOTNET 5457 4.52 12.10 1.66 123 XM_CamelCaseFrm001 5361 2.00 2.99 1.63 124 URI_HEX 5129 1.74 2.22 1.56 125 HELO_NODOT 5113 1.30 0.61 1.55 126 HELO_NO_DOMAIN 5111 1.29 0.61 1.55 127 TR_XM_SpammyRelay 5048 3.75 9.62 1.53 128 XMSexyCombo_01 4971 1.56 1.69 1.51 129 TooManyTo_003 4753 1.25 0.74 1.44 130 RCVD_IN_MSPIKE_BL 4715 2.41 4.99 1.43 131 TR_XM_MSPIKECOMBO 4669 2.39 4.97 1.42 132 TR_XM_SpammyWords5 4632 1.91 3.24 1.41 133 XMGappySubj_01 4627 1.13 0.40 1.41 134 XM_B_Investor 4531 1.96 3.51 1.38 135 UNTRUSTED_Relay 3929 3.31 8.93 1.19 136 KHOP_HELO_FCRDNS 3761 1.65 3.01 1.14 137 XMLngstWrd_00 3748 1.92 4.01 1.14 138 XMSexyCombo_04 3722 1.01 0.68 1.13 139 XMSubMetaSx_01 3707 0.88 0.22 1.13 140 XMDiploma_00 3684 1.44 2.30 1.12 141 XMCapTrack 3653 1.00 0.70 1.11 142 XM_H_Long_From02 3639 1.72 3.36 1.11 143 XMBSHREFv2 3635 0.88 0.30 1.10 144 TR_XM_MaxUnsub 3582 2.66 6.83 1.09 145 XMLngstWrd_01 3530 1.86 3.96 1.07 146 TVD_SPACE_RATIO 3530 0.81 0.11 1.07 147 XMSexyCombo_02 3486 0.85 0.30 1.06 148 TR_XM_SpammyWords2 3287 3.96 11.80 1.00 149 TooManyTo_004 3269 0.90 0.66 0.99 150 RELAYCOUNTRY_CA 3256 1.94 4.47 0.99 151 XMLngstWrd_02 3245 1.79 3.91 0.99 152 XM_OfRef6 3026 1.49 3.02 0.92 153 RCVD_IN_RP_SAFE 3010 0.88 0.78 0.91 154 DKIM_ADSP_CUSTOM_MED 2994 1.00 1.25 0.91 155 XMSubMetaSxObfu_03 2962 0.81 0.56 0.90 156 HTML_IMAGE_ONLY_20 2950 0.73 0.30 0.90 157 XMLngstWrd_03 2940 1.66 3.70 0.89 158 XM_B_COVIDMETA 2893 1.33 2.51 0.88 159 RCVD_IN_BL_SPAMCOP_NET 2869 3.26 9.59 0.87 160 T_FILL_THIS_FORM_SHORT 2841 1.21 2.13 0.86 161 XMSolicitRefs_0 2788 0.73 0.43 0.85 162 RCVD_IN_RP_CERTIFIED 2777 0.78 0.60 0.84 163 T_TooManySym_03 2736 0.69 0.33 0.83 164 XMLngstWrd_04 2707 1.60 3.65 0.82 165 TooManyTo_005 2686 0.76 0.63 0.82 166 T_XMDrugObfuBody_00 2673 1.35 2.76 0.81 167 XM_UB50 2580 1.67 4.02 0.78 168 SpammyFromTLD_01 2558 2.23 6.09 0.78 169 RELAYCOUNTRY_GB 2532 0.81 0.91 0.77 170 XM_ProductURIs 2493 0.86 1.12 0.76 171 XMBdyGiftCard01 2482 0.99 1.62 0.75 172 XM_D_tchamptons_WL 2440 0.54 0.00 0.74 173 XMBody_95 2386 0.57 0.17 0.73 174 TVD_SPACE_RATIO_MINFP 2310 0.53 0.07 0.70 175 XMHTML_After_End 2305 0.80 1.06 0.70 176 TR_MetaPhish_Combo_01 2294 0.77 0.97 0.70 177 T_OBFU_PDF_ATTACH 2249 0.54 0.17 0.68 178 HTML_TITLE_SUBJ_DIFF 2231 1.50 3.66 0.68 179 UPPERCASE_75_100 2230 1.48 3.61 0.68 180 RCVD_IN_MSPIKE_L3 2125 1.10 2.30 0.65 181 XM_B_COPY_HTML 2109 0.72 0.92 0.64 182 XM_Body_Dirty_Words_01 2096 0.82 1.31 0.64 183 TR_XM_SpammyWords3 2093 1.17 2.60 0.64 184 XMBrknScrpt_02 2091 0.70 0.87 0.64 185 HTML_TAG_BALANCE_BODY 2090 0.71 0.92 0.64 186 HTTPS_HTTP_MISMATCH 2086 0.73 0.98 0.63 187 HTML_IMAGE_ONLY_32 2047 0.51 0.21 0.62 188 XMPhish30 2042 0.86 1.51 0.62 189 XMGenDplmaNmb 2028 0.77 1.18 0.62 190 T_Symld_Words_02 1992 0.67 0.84 0.61 191 RCVD_IN_MSPIKE_L4 1986 0.69 0.90 0.60 192 T_XMHurry_00 1986 0.77 1.21 0.60 193 DIET_1 1956 0.72 1.06 0.59 194 TR_MSPIKEBAYES00 1924 0.43 0.02 0.58 195 TM2_M_A_HREF_HREF 1919 0.88 1.67 0.58 196 XM_ShortIntro_01 1872 0.51 0.36 0.57 197 MIME_CHARSET_FARAWAY 1848 0.56 0.55 0.56 198 XM_H_PHPMailer 1843 0.63 0.82 0.56 199 XMSubMetaSxObfu_04 1841 0.44 0.13 0.56 200 URI_TRY_3LD 1821 0.77 1.35 0.55 ----------------------------------------------------------------------