Email: 456178 Autolearn: 0 AvgScore: 2.58 AvgScanTime: 1.32 sec Spam: 123935 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.43 sec Ham: 332243 Autolearn: 0 AvgScore: -1.75 AvgScanTime: 1.28 sec Time Spent Running SA: 167.77 hours Time Spent Processing Spam: 49.34 hours Time Spent Processing Ham: 118.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 118122 89.01 95.31 86.66 2 DKIM_SIGNED 102694 74.08 82.86 70.81 3 XM_DK_Pass 99841 72.48 80.56 69.47 4 XM_B_Unicode 98653 71.84 79.60 68.94 5 DKIM_VALID 98516 71.55 79.49 68.59 6 RELAYCOUNTRY_US 97907 80.12 79.00 80.54 7 DCC_CHECK 91043 43.95 73.46 32.94 8 XM_B_SpammyWords 82740 50.10 66.76 43.89 9 XMListUnsubscribeExists 78515 51.12 63.35 46.56 10 DKIM_VALID_AU 73878 54.86 59.61 53.09 11 XM_B_Unicode3 56667 43.32 45.72 42.42 12 XM_DK_Undo_02 53478 17.26 43.15 7.60 13 BAYES_50 50447 50.30 40.70 53.88 14 XM_B_SpammyWords2 48398 24.72 39.05 19.37 15 LOC_TINY_FONT_1 44666 25.97 36.04 22.22 16 BAYES_99 42103 13.96 33.97 6.49 17 MIME_HTML_ONLY 42054 24.86 33.93 21.47 18 HTML_FONT_LOW_CONTRAST 40997 28.76 33.08 27.15 19 TR_XM_DKIM_Undo 40451 12.37 32.64 4.81 20 DKIM_VALID_EF 34936 26.78 28.19 26.25 21 FVGT_m_MULTI_ODD 34916 24.08 28.17 22.55 22 RCVD_IN_MSPIKE_H2 33106 21.83 26.71 20.02 23 DCC_CHECK_NEGATIVE 32849 56.01 26.51 67.01 24 T_KAM_HTML_FONT_INVALID 32727 20.14 26.41 17.80 25 BAYES_999 32618 11.11 26.32 5.44 26 TR_DCC_Bayes_99 29953 8.01 24.17 1.98 27 XMSubLong 28759 22.32 23.20 21.99 28 XM_Body_Dirty_Words 27307 14.15 22.03 11.21 29 RELAYCOUNTRY_META 26281 8.13 21.21 3.25 30 T_TM2_M_HEADER_IN_MSG 26190 26.85 21.13 28.98 31 RCVD_IN_MSPIKE_WL 22708 25.53 18.32 28.22 32 XM_Multi_Part_URI 20585 13.36 16.61 12.15 33 FSL_BULK_SIG 20403 7.08 16.46 3.58 34 XM_B_Unsub 19674 13.35 15.87 12.41 35 UNPARSEABLE_RELAY 17172 9.16 13.86 7.40 36 TR_XM_UnparsRelay 16840 7.86 13.59 5.72 37 BOTNET_IPINHOSTNAME 16695 7.05 13.47 4.65 38 BOTNET 16448 4.75 13.27 1.58 39 UNTRUSTED_Relay 15796 4.34 12.75 1.21 40 LOTS_OF_MONEY 15503 9.21 12.51 7.98 41 TR_XM_SpammyRelay 14850 4.28 11.98 1.41 42 RCVD_IN_MSPIKE_H3 14417 14.48 11.63 15.54 43 TR_XM_SpammyWords2 14117 3.76 11.39 0.92 44 XM_B_SpammyWords3 13545 6.04 10.93 4.22 45 TR_XM_SpammyWords4 13219 6.39 10.67 4.79 46 RCVD_IN_BL_SPAMCOP_NET 12981 3.66 10.47 1.12 47 XMSexyCombo_05 12977 5.42 10.47 3.53 48 HTML_IMAGE_RATIO_02 11950 6.66 9.64 5.54 49 XM_Evil_Numbers_Gen 11629 7.87 9.38 7.30 50 XM_SendGrid 11102 6.56 8.96 5.66 51 TR_XM_PhishingBody 10982 4.78 8.86 3.26 52 BAYES_80 10737 5.57 8.66 4.41 53 XM_UncommonTLD01 10714 5.24 8.64 3.97 54 T_REMOTE_IMAGE 9511 4.61 7.67 3.46 55 LotsOfNums_01 9157 8.59 7.39 9.03 56 BAYES_60 9011 8.67 7.27 9.19 57 XMSubMetaSx_00 8329 4.33 6.72 3.44 58 MPART_ALT_DIFF 8279 6.62 6.68 6.60 59 RCVD_IN_MSPIKE_H4 7986 9.56 6.44 10.72 60 TR_XM_MaxUnsub 7893 2.56 6.37 1.13 61 RCVD_IN_MSPIKE_BL 7509 2.59 6.06 1.29 62 XM_H_Long_From01 7500 5.57 6.05 5.38 63 TR_XM_MSPIKECOMBO 7430 2.55 6.00 1.27 64 TooManyTo_001 7311 8.53 5.90 9.51 65 XM_UB50 7222 2.17 5.83 0.81 66 XM_B_Phish_Phrases 6997 4.17 5.65 3.62 67 TR_XM_DK_SendGrid 6951 4.12 5.61 3.57 68 XM_B_Phish66 6685 2.87 5.39 1.93 69 TR_XM_SPAMCOP 6120 1.56 4.94 0.29 70 XM_SPF_SoftFail 6009 3.01 4.85 2.32 71 BAYES_95 5861 3.26 4.73 2.71 72 HTML_IMAGE_RATIO_04 5725 6.47 4.62 7.16 73 RELAYCOUNTRY_CA 5616 1.75 4.53 0.71 74 XM_B_Investor 5403 2.36 4.36 1.62 75 XM_B_SpammyTLD 5336 2.73 4.31 2.15 76 KHOP_HELO_FCRDNS 5193 2.24 4.19 1.52 77 HTML_MIME_NO_HTML_TAG 5186 2.64 4.18 2.07 78 MIME_QP_LONG_LINE 5045 6.52 4.07 7.43 79 HTML_IMAGE_RATIO_06 5045 4.16 4.07 4.19 80 XMNumbers 4597 3.69 3.71 3.68 81 MIME_HTML_ONLY_MULTI 4593 4.28 3.71 4.50 82 RCVD_IN_VALIDITY_SAFE 4549 4.22 3.67 4.42 83 T_XMDrugObfuBody_14 4515 2.61 3.64 2.23 84 XMStrtUSub 4419 4.10 3.57 4.30 85 XM_OfRef6 4385 1.62 3.54 0.91 86 RCVD_IN_VALIDITY_RPBL 4356 0.97 3.51 0.02 87 SpammyFromTLD_01 4232 1.82 3.41 1.23 88 DKIM_INVALID 4178 2.53 3.37 2.22 89 RCVD_IN_IADB_LISTED 4123 5.09 3.33 5.75 90 XM_DIRTYINTL 4002 1.10 3.23 0.31 91 RCVD_IN_PSBL 3900 0.94 3.15 0.12 92 MIME_HTML_MOSTLY 3877 2.69 3.13 2.52 93 TM2_M_URI_OPT_OUT 3846 4.52 3.10 5.04 94 RCVD_IN_VALIDITY_CERTIFIED 3753 3.75 3.03 4.02 95 TR_XM_SpammyWords5 3744 1.80 3.02 1.34 96 RCVD_IN_MSPIKE_L5 3675 0.93 2.97 0.17 97 TM2_M_VERY_LONG_WORD 3559 1.74 2.87 1.31 98 RCVD_IN_IADB_SPF 3500 4.49 2.82 5.11 99 T_XMDrugObfuBody_08 3487 1.79 2.81 1.41 100 XM_CamelCaseFrm001 3467 2.07 2.80 1.80 101 URI_NOVOWEL 3467 2.72 2.80 2.69 102 XM_UB99 3292 0.72 2.66 0.00 103 XM_B_Unsub2 3285 1.74 2.65 1.40 104 HTML_IMAGE_ONLY_08 3283 0.81 2.65 0.13 105 XM_DK_Undo_01 3269 1.72 2.64 1.38 106 RCVD_IN_IADB_DK 3265 3.95 2.63 4.44 107 T_FILL_THIS_FORM_SHORT 3219 1.21 2.60 0.69 108 ALL_TRUSTED 3196 13.21 2.58 17.18 109 RCVD_IN_IADB_SENDERID 3188 4.07 2.57 4.63 110 XMSexyCombo_01 3182 1.11 2.57 0.57 111 BOTNET_NORDNS 3114 0.70 2.51 0.03 112 TR_XM_NoHeaderRelay 2966 0.77 2.39 0.17 113 TR_XM_SB_Phish 2945 2.13 2.38 2.04 114 XM_B_COVIDMETA 2906 1.06 2.34 0.57 115 XMDiploma_00 2894 1.59 2.34 1.32 116 TR_XM_SpammyWords3 2893 1.03 2.33 0.54 117 HTML_IMAGE_ONLY_28 2880 0.88 2.32 0.33 118 URI_HEX 2865 1.74 2.31 1.53 119 XMSubPhish11 2861 2.10 2.31 2.02 120 HTML_FONT_SIZE_LARGE 2807 0.69 2.26 0.10 121 MAILING_LIST_MULTI 2776 2.38 2.24 2.43 122 T_TooManySym_01 2687 4.58 2.17 5.48 123 RCVD_IN_MSPIKE_L3 2676 0.98 2.16 0.54 124 USER_IN_DEF_DKIM_WL 2666 9.29 2.15 11.95 125 HOSTED_IMG_DIRECT_MX 2663 0.58 2.15 0.00 126 XM_DrugUnitList 2658 0.58 2.14 0.00 127 TR_XM_MSPIKECOMBO2 2654 0.76 2.14 0.25 128 XMBody_17 2644 0.85 2.13 0.37 129 TR_XM_PHPDW 2642 1.31 2.13 1.01 130 EBAY_IMG_NOT_RCVD_EBAY 2634 0.58 2.13 0.00 131 INVALID_MSGID 2612 2.10 2.11 2.09 132 PDS_OTHER_BAD_TLD 2601 0.68 2.10 0.14 133 SpammyFromTLD_02 2584 1.06 2.08 0.67 134 URIBL_DBL_SPAM 2579 0.57 2.08 0.01 135 BODY_URI_ONLY 2540 0.57 2.05 0.02 136 HTML_IMAGE_RATIO_08 2530 2.46 2.04 2.62 137 HTML_TAG_BALANCE_CENTER 2527 0.61 2.04 0.08 138 TR_XM_PHPForged 2515 1.25 2.03 0.96 139 TR_XM_FormFill2 2482 1.26 2.00 0.98 140 XM_H_PHPOS 2466 1.24 1.99 0.96 141 XMStockSpam_06 2443 1.45 1.97 1.26 142 GOOG_STO_IMG_HTML 2385 0.52 1.92 0.00 143 XM_UB999 2338 0.51 1.89 0.00 144 RCVD_IN_IADB_VOUCHED 2334 3.06 1.88 3.50 145 BAYES_40 2273 4.27 1.83 5.18 146 XM_B_SpammyWords4 2261 1.21 1.82 0.98 147 XMPhish30 2257 0.98 1.82 0.67 148 RELAYCOUNTRY_AU 2246 0.70 1.81 0.29 149 FROM_EXCESS_BASE64 2225 2.63 1.80 2.94 150 MIXED_CENTER_CASE 2184 0.48 1.76 0.00 151 MIXED_HREF_CASE 2178 0.48 1.76 0.00 152 MIXED_IMG_CASE 2168 0.48 1.75 0.01 153 MIXED_AREA_CASE 2166 0.48 1.75 0.00 154 MIXED_FONT_CASE 2161 0.48 1.74 0.00 155 SUBJ_ALL_CAPS 2129 1.75 1.72 1.76 156 XMSubNoVowel 2115 1.72 1.71 1.73 157 RELAYCOUNTRY_NL 2110 0.57 1.70 0.15 158 XMBdyGiftCard01 2089 0.93 1.69 0.65 159 XM_URI_RBL 2068 0.54 1.67 0.12 160 T_XMHurry_00 2055 0.73 1.66 0.38 161 RELAYCOUNTRY_FR 2019 0.60 1.63 0.22 162 TR_Symld_Words 1973 1.71 1.59 1.75 163 DATE_IN_PAST_12_24 1944 0.44 1.57 0.02 164 TR_XM_FormFill 1935 0.43 1.56 0.01 165 XM_Body_Dirty_Words_01 1934 0.91 1.56 0.66 166 TR_LOTS_OF_MONEY3 1922 0.73 1.55 0.42 167 T_XMDrugObfuBody_00 1886 0.94 1.52 0.72 168 URIBL_BLACK 1875 0.45 1.51 0.06 169 XM_ProductURIs 1870 1.06 1.51 0.90 170 TR_XM_COVIDMETA1 1832 0.52 1.48 0.16 171 TR_Mismatch_TLD_02 1770 0.43 1.43 0.06 172 TR_Mismatch_TLD_01 1769 0.56 1.43 0.24 173 RELAYCOUNTRY_RU 1734 0.40 1.40 0.02 174 RELAYCOUNTRY_DE 1724 0.56 1.39 0.26 175 BAYES_20 1723 3.42 1.39 4.17 176 MISSING_HEADERS 1709 0.66 1.38 0.39 177 XMGenDplmaNmb 1683 0.86 1.36 0.68 178 XM_UB60 1661 0.43 1.34 0.08 179 DKIM_ADSP_CUSTOM_MED 1625 0.96 1.31 0.83 180 TR_BOTNET_NEGATE 1587 0.57 1.28 0.31 181 XMSubMetaI_00 1579 0.63 1.27 0.39 182 URI_TRY_3LD 1575 0.80 1.27 0.62 183 TM2_M_A_HREF_HREF 1537 0.76 1.24 0.58 184 XM_H_Undi_Recip 1509 0.45 1.22 0.17 185 XM_UB80 1501 0.34 1.21 0.02 186 BASE64_LENGTH_79_INF 1490 0.52 1.20 0.26 187 XMBrknScrpt_02 1452 0.86 1.17 0.74 188 NML_ADSP_CUSTOM_MED 1431 0.71 1.15 0.54 189 TR_MetaPhish_Combo_01 1422 0.83 1.15 0.71 190 HTML_TAG_BALANCE_BODY 1416 0.70 1.14 0.54 191 FORGED_GMAIL_RCVD 1415 0.63 1.14 0.44 192 RCVD_IN_IADB_OPTIN 1398 1.96 1.13 2.27 193 HTTPS_HTTP_MISMATCH 1396 0.77 1.13 0.64 194 TR_XM_BayesRelay 1385 0.31 1.12 0.00 195 MPART_ALT_DIFF_COUNT 1376 0.71 1.11 0.56 196 FROM_SUSPICIOUS_NTLD 1364 0.33 1.10 0.04 197 RELAYCOUNTRY_GB 1364 0.85 1.10 0.75 198 REPLYTO_WITHOUT_TO_CC 1353 0.32 1.09 0.03 199 RELAYCOUNTRY_BR 1333 0.30 1.08 0.01 200 XMBody_78 1327 0.54 1.07 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 287911 89.01 95.31 86.66 2 RELAYCOUNTRY_US 267582 80.12 79.00 80.54 3 DKIM_SIGNED 235264 74.08 82.86 70.81 4 XM_DK_Pass 230803 72.48 80.56 69.47 5 XM_B_Unicode 229047 71.84 79.60 68.94 6 DKIM_VALID 227880 71.55 79.49 68.59 7 DCC_CHECK_NEGATIVE 222642 56.01 26.51 67.01 8 BAYES_50 179011 50.30 40.70 53.88 9 DKIM_VALID_AU 176404 54.86 59.61 53.09 10 XMListUnsubscribeExists 154697 51.12 63.35 46.56 11 XM_B_SpammyWords 145811 50.10 66.76 43.89 12 XM_B_Unicode3 140946 43.32 45.72 42.42 13 DCC_CHECK 109427 43.95 73.46 32.94 14 T_TM2_M_HEADER_IN_MSG 96287 26.85 21.13 28.98 15 RCVD_IN_MSPIKE_WL 93775 25.53 18.32 28.22 16 HTML_FONT_LOW_CONTRAST 90197 28.76 33.08 27.15 17 DKIM_VALID_EF 87220 26.78 28.19 26.25 18 FVGT_m_MULTI_ODD 74925 24.08 28.17 22.55 19 LOC_TINY_FONT_1 73825 25.97 36.04 22.22 20 XMSubLong 73068 22.32 23.20 21.99 21 MIME_HTML_ONLY 71333 24.86 33.93 21.47 22 RCVD_IN_MSPIKE_H2 66499 21.83 26.71 20.02 23 XM_B_SpammyWords2 64356 24.72 39.05 19.37 24 T_KAM_HTML_FONT_INVALID 59147 20.14 26.41 17.80 25 ALL_TRUSTED 57066 13.21 2.58 17.18 26 RCVD_IN_MSPIKE_H3 51645 14.48 11.63 15.54 27 XM_B_Unsub 41239 13.35 15.87 12.41 28 XM_Multi_Part_URI 40364 13.36 16.61 12.15 29 USER_IN_DEF_DKIM_WL 39705 9.29 2.15 11.95 30 BAYES_00 37971 8.53 0.76 11.43 31 XM_Body_Dirty_Words 37252 14.15 22.03 11.21 32 RCVD_IN_MSPIKE_H4 35630 9.56 6.44 10.72 33 TooManyTo_001 31600 8.53 5.90 9.51 34 BAYES_60 30534 8.67 7.27 9.19 35 LotsOfNums_01 30017 8.59 7.39 9.03 36 LOTS_OF_MONEY 26525 9.21 12.51 7.98 37 XM_DKIMWhitelistDomains 26226 5.76 0.06 7.89 38 XM_DK_Undo_02 25247 17.26 43.15 7.60 39 MIME_QP_LONG_LINE 24685 6.52 4.07 7.43 40 UNPARSEABLE_RELAY 24595 9.16 13.86 7.40 41 XM_Evil_Numbers_Gen 24267 7.87 9.38 7.30 42 HTML_IMAGE_RATIO_04 23793 6.47 4.62 7.16 43 IN_ZIMBRA_NJ_WHITELIST 22843 5.04 0.11 6.88 44 MPART_ALT_DIFF 21923 6.62 6.68 6.60 45 BAYES_99 21562 13.96 33.97 6.49 46 TR_XM_DK_Bayes 20509 4.61 0.41 6.17 47 TR_XM_DK_Bayes1 20198 4.54 0.41 6.08 48 XM_H_Trusted_IP 19763 4.33 0.00 5.95 49 RCVD_IN_IADB_LISTED 19113 5.09 3.33 5.75 50 TR_XM_UnparsRelay 19014 7.86 13.59 5.72 51 XM_SendGrid 18808 6.56 8.96 5.66 52 HTML_IMAGE_RATIO_02 18412 6.66 9.64 5.54 53 T_TooManySym_01 18202 4.58 2.17 5.48 54 BAYES_999 18071 11.11 26.32 5.44 55 XM_H_Long_From01 17888 5.57 6.05 5.38 56 TR_XM_DK_Bayes2 17809 3.99 0.30 5.36 57 BAYES_40 17215 4.27 1.83 5.18 58 RCVD_IN_IADB_SPF 16969 4.49 2.82 5.11 59 TM2_M_URI_OPT_OUT 16753 4.52 3.10 5.04 60 TR_XM_DKIM_Undo 15965 12.37 32.64 4.81 61 TR_XM_SpammyWords4 15923 6.39 10.67 4.79 62 BOTNET_IPINHOSTNAME 15446 7.05 13.47 4.65 63 RCVD_IN_IADB_SENDERID 15395 4.07 2.57 4.63 64 XM_PDF 15194 3.60 1.01 4.57 65 MIME_HTML_ONLY_MULTI 14938 4.28 3.71 4.50 66 RCVD_IN_IADB_DK 14760 3.95 2.63 4.44 67 RCVD_IN_VALIDITY_SAFE 14684 4.22 3.67 4.42 68 BAYES_80 14664 5.57 8.66 4.41 69 XMStrtUSub 14285 4.10 3.57 4.30 70 XM_B_SpammyWords3 14021 6.04 10.93 4.22 71 HTML_IMAGE_RATIO_06 13934 4.16 4.07 4.19 72 BAYES_20 13856 3.42 1.39 4.17 73 RCVD_IN_VALIDITY_CERTIFIED 13351 3.75 3.03 4.02 74 XM_UncommonTLD01 13174 5.24 8.64 3.97 75 XMNumbers 12231 3.69 3.71 3.68 76 XM_B_Phish_Phrases 12026 4.17 5.65 3.62 77 FSL_BULK_SIG 11903 7.08 16.46 3.58 78 TR_XM_DK_SendGrid 11858 4.12 5.61 3.57 79 XMSexyCombo_05 11727 5.42 10.47 3.53 80 RCVD_IN_IADB_VOUCHED 11618 3.06 1.88 3.50 81 T_REMOTE_IMAGE 11512 4.61 7.67 3.46 82 XMSubMetaSx_00 11440 4.33 6.72 3.44 83 TR_XM_PhishingBody 10816 4.78 8.86 3.26 84 RELAYCOUNTRY_META 10787 8.13 21.21 3.25 85 T_TooManySym_02 10495 2.51 0.79 3.16 86 ANY_BOUNCE_MESSAGE 10451 2.56 0.99 3.15 87 BOUNCE_MESSAGE 10446 2.56 0.99 3.14 88 FROM_EXCESS_BASE64 9774 2.63 1.80 2.94 89 BAYES_95 9011 3.26 4.73 2.71 90 URI_NOVOWEL 8944 2.72 2.80 2.69 91 HTML_IMAGE_RATIO_08 8710 2.46 2.04 2.62 92 BAYES_05 8415 2.02 0.64 2.53 93 MIME_HTML_MOSTLY 8379 2.69 3.13 2.52 94 MAILING_LIST_MULTI 8080 2.38 2.24 2.43 95 XM_SPF_SoftFail 7709 3.01 4.85 2.32 96 RCVD_IN_IADB_OPTIN 7540 1.96 1.13 2.27 97 T_XMDrugObfuBody_14 7401 2.61 3.64 2.23 98 DKIM_INVALID 7384 2.53 3.37 2.22 99 XM_B_SpammyTLD 7138 2.73 4.31 2.15 100 INVALID_MSGID 6956 2.10 2.11 2.09 101 HTML_MIME_NO_HTML_TAG 6868 2.64 4.18 2.07 102 TR_XM_SB_Phish 6770 2.13 2.38 2.04 103 XMSubPhish11 6714 2.10 2.31 2.02 104 TR_DCC_Bayes_99 6593 8.01 24.17 1.98 105 TooManyTo_002 6569 1.72 1.04 1.98 106 RCVD_IN_MSPIKE_H5 6500 1.49 0.25 1.96 107 XM_B_Phish66 6426 2.87 5.39 1.93 108 MSGID_NOFQDN1 6324 1.41 0.09 1.90 109 TVD_RCVD_IP 6137 1.39 0.16 1.85 110 HTML_FONT_FACE_BAD 6112 1.61 0.99 1.84 111 TO_MALFORMED 6077 1.34 0.03 1.83 112 IN_HORDE_ADDRESS_BOOK 6033 1.36 0.12 1.82 113 XM_CamelCaseFrm001 5964 2.07 2.80 1.80 114 SUBJ_ALL_CAPS 5846 1.75 1.72 1.76 115 TR_Symld_Words 5815 1.71 1.59 1.75 116 XMSubNoVowel 5748 1.72 1.71 1.73 117 SHORT_URI_2 5651 1.39 0.56 1.70 118 XM_B_Investor 5384 2.36 4.36 1.62 119 BOTNET 5237 4.75 13.27 1.58 120 XMGappySubj_01 5177 1.25 0.44 1.56 121 HELO_NODOT 5105 1.28 0.60 1.54 122 HELO_NO_DOMAIN 5103 1.28 0.60 1.54 123 URI_HEX 5084 1.74 2.31 1.53 124 KHOP_HELO_FCRDNS 5048 2.24 4.19 1.52 125 TR_XM_SpammyRelay 4689 4.28 11.98 1.41 126 T_XMDrugObfuBody_08 4681 1.79 2.81 1.41 127 XM_B_Unsub2 4642 1.74 2.65 1.40 128 XM_DK_Undo_01 4571 1.72 2.64 1.38 129 TR_XM_SpammyWords5 4452 1.80 3.02 1.34 130 XMDiploma_00 4378 1.59 2.34 1.32 131 TM2_M_VERY_LONG_WORD 4362 1.74 2.87 1.31 132 RCVD_IN_MSPIKE_BL 4289 2.59 6.06 1.29 133 TooManyTo_003 4253 1.19 0.94 1.28 134 TR_XM_MSPIKECOMBO 4214 2.55 6.00 1.27 135 XMStockSpam_06 4183 1.45 1.97 1.26 136 SpammyFromTLD_01 4070 1.82 3.41 1.23 137 UNTRUSTED_Relay 4024 4.34 12.75 1.21 138 XMBSHREFv2 3911 0.93 0.28 1.18 139 TR_XM_MaxUnsub 3764 2.56 6.37 1.13 140 XM_GoogleGroups 3751 1.05 0.84 1.13 141 RCVD_IN_BL_SPAMCOP_NET 3722 3.66 10.47 1.12 142 HTML_IMAGE_ONLY_20 3551 0.93 0.55 1.07 143 TVD_SPACE_RATIO 3491 0.79 0.10 1.05 144 XM_H_Long_From02 3371 0.99 0.93 1.01 145 TR_XM_PHPDW 3355 1.31 2.13 1.01 146 XMCapTrack 3330 0.88 0.57 1.00 147 XM_B_SpammyWords4 3262 1.21 1.82 0.98 148 TR_XM_FormFill2 3252 1.26 2.00 0.98 149 TR_XM_PHPForged 3205 1.25 2.03 0.96 150 XM_H_PHPOS 3190 1.24 1.99 0.96 151 TR_XM_SpammyWords2 3047 3.76 11.39 0.92 152 XM_OfRef6 3011 1.62 3.54 0.91 153 XM_ProductURIs 2982 1.06 1.51 0.90 154 TooManyTo_004 2958 0.88 0.86 0.89 155 RCVD_IN_RP_SAFE 2930 0.84 0.74 0.88 156 DKIM_ADSP_CUSTOM_MED 2761 0.96 1.31 0.83 157 XM_UB50 2691 2.17 5.83 0.81 158 RCVD_IN_RP_CERTIFIED 2674 0.74 0.58 0.80 159 FROM_GOV_DKIM_AU 2656 0.62 0.12 0.80 160 XMBody_95 2602 0.60 0.12 0.78 161 XM_D_tchamptons_WL 2581 0.57 0.00 0.78 162 RELAYCOUNTRY_GB 2492 0.85 1.10 0.75 163 T_TooManySym_03 2473 0.62 0.30 0.74 164 XMBrknScrpt_02 2450 0.86 1.17 0.74 165 T_XMDrugObfuBody_00 2405 0.94 1.52 0.72 166 TR_MetaPhish_Combo_01 2359 0.83 1.15 0.71 167 RELAYCOUNTRY_CA 2357 1.75 4.53 0.71 168 TooManyTo_005 2330 0.73 0.79 0.70 169 T_FILL_THIS_FORM_SHORT 2304 1.21 2.60 0.69 170 XMHTML_After_End 2296 0.79 1.05 0.69 171 XMGenDplmaNmb 2252 0.86 1.36 0.68 172 SpammyFromTLD_02 2240 1.06 2.08 0.67 173 XMPhish30 2216 0.98 1.82 0.67 174 XM_Body_Dirty_Words_01 2197 0.91 1.56 0.66 175 XMBdyGiftCard01 2147 0.93 1.69 0.65 176 HTTPS_HTTP_MISMATCH 2124 0.77 1.13 0.64 177 URI_TRY_3LD 2071 0.80 1.27 0.62 178 XM_B_COPY_HTML 2055 0.68 0.86 0.62 179 TR_MSPIKEBAYES00 2055 0.46 0.03 0.62 180 T_OBFU_PDF_ATTACH 1986 0.50 0.24 0.60 181 TM2_M_A_HREF_HREF 1940 0.76 1.24 0.58 182 XM_B_COVIDMETA 1910 1.06 2.34 0.57 183 XMSexyCombo_01 1904 1.11 2.57 0.57 184 XM_ShortIntro_01 1900 0.58 0.61 0.57 185 MPART_ALT_DIFF_COUNT 1868 0.71 1.11 0.56 186 RCVD_IN_MSPIKE_L4 1865 0.65 0.87 0.56 187 XM_H_PHPMailer 1835 0.63 0.82 0.55 188 XMSubMetaSxObfu_03 1810 0.64 0.91 0.54 189 TR_XM_SpammyWords3 1807 1.03 2.33 0.54 190 NML_ADSP_CUSTOM_MED 1804 0.71 1.15 0.54 191 RCVD_IN_MSPIKE_L3 1799 0.98 2.16 0.54 192 HTML_TAG_BALANCE_BODY 1798 0.70 1.14 0.54 193 XMBody_106 1773 0.40 0.05 0.53 194 XMNoVowels 1770 0.50 0.40 0.53 195 XM_RXBody 1763 0.56 0.65 0.53 196 T_MANY_PILL_PRICE 1721 0.38 0.02 0.52 197 FROM_GOV_SPOOF 1713 0.40 0.11 0.52 198 T_Symld_Words_02 1661 0.61 0.90 0.50 199 DIET_1 1651 0.63 0.98 0.50 200 XM_B_DNDMA 1643 0.60 0.88 0.49 ----------------------------------------------------------------------