Email: 279869 Autolearn: 0 AvgScore: 2.74 AvgScanTime: 1.14 sec Spam: 87313 Autolearn: 0 AvgScore: 14.86 AvgScanTime: 1.24 sec Ham: 192556 Autolearn: 0 AvgScore: -2.76 AvgScanTime: 1.10 sec Time Spent Running SA: 88.82 hours Time Spent Processing Spam: 30.16 hours Time Spent Processing Ham: 58.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 81139 85.02 92.93 81.43 2 DKIM_SIGNED 71284 72.05 81.64 67.70 3 XM_DK_Pass 69974 70.91 80.14 66.73 4 DKIM_VALID 69586 70.54 79.70 66.39 5 RELAYCOUNTRY_US 65342 73.69 74.84 73.17 6 XM_B_Unicode 64852 67.38 74.28 64.26 7 DCC_CHECK 64147 46.41 73.47 34.14 8 XMListUnsubscribeExists 56566 51.77 64.79 45.87 9 DKIM_VALID_AU 54122 56.94 61.99 54.65 10 XM_B_SpammyWords 54070 51.83 61.93 47.24 11 XM_DK_Undo_02 39641 19.62 45.40 7.94 12 XM_B_Unicode3 36344 41.33 41.62 41.20 13 BAYES_99 34149 16.78 39.11 6.66 14 TR_XM_DKIM_Undo 30440 14.90 34.86 5.85 15 LOC_TINY_FONT_1 30204 27.18 34.59 23.81 16 BAYES_50 30187 45.98 34.57 51.15 17 MIME_HTML_ONLY 29282 24.31 33.54 20.13 18 XM_B_SpammyWords2 29069 27.58 33.29 24.99 19 HTML_FONT_LOW_CONTRAST 27978 31.24 32.04 30.88 20 BAYES_999 27356 13.61 31.33 5.58 21 DKIM_VALID_EF 24144 26.87 27.65 26.52 22 TR_DCC_Bayes_99 24059 10.68 27.55 3.03 23 RELAYCOUNTRY_META 23345 10.94 26.74 3.77 24 DCC_CHECK_NEGATIVE 23134 53.56 26.50 65.83 25 FVGT_m_MULTI_ODD 22199 23.17 25.42 22.15 26 XMSubLong 22173 22.89 25.39 21.75 27 RCVD_IN_MSPIKE_H2 21957 20.28 25.15 18.08 28 XM_Body_Dirty_Words 21287 15.95 24.38 12.12 29 T_KAM_HTML_FONT_INVALID 20925 17.65 23.97 14.79 30 T_TM2_M_HEADER_IN_MSG 16004 20.94 18.33 22.13 31 RCVD_IN_MSPIKE_WL 15656 25.50 17.93 28.94 32 XM_Multi_Part_URI 14508 14.90 16.62 14.12 33 FSL_BULK_SIG 14267 7.37 16.34 3.31 34 UNTRUSTED_Relay 13650 5.77 15.63 1.30 35 UNPARSEABLE_RELAY 12874 10.27 14.74 8.25 36 TR_XM_UnparsRelay 12481 8.96 14.29 6.54 37 TR_XM_SpammyRelay 12391 5.43 14.19 1.45 38 XM_B_Unsub 12348 15.85 14.14 16.62 39 HTML_IMAGE_RATIO_02 11490 8.63 13.16 6.57 40 LOTS_OF_MONEY 11216 8.49 12.85 6.52 41 XMSexyCombo_05 10878 6.93 12.46 4.43 42 TR_XM_SpammyWords2 10737 5.11 12.30 1.86 43 RCVD_IN_MSPIKE_H3 10169 14.06 11.65 15.16 44 RCVD_IN_BL_SPAMCOP_NET 10051 4.14 11.51 0.79 45 XM_B_SpammyWords3 9827 6.97 11.25 5.03 46 TR_XM_SpammyWords4 9299 6.38 10.65 4.44 47 BOTNET_IPINHOSTNAME 9177 7.44 10.51 6.05 48 BOTNET 9132 4.37 10.46 1.61 49 XM_UncommonTLD01 8954 6.17 10.26 4.31 50 T_REMOTE_IMAGE 8755 5.12 10.03 2.90 51 XMSubMetaSx_00 8362 5.94 9.58 4.29 52 BAYES_80 7608 5.90 8.71 4.63 53 RCVD_IN_MSPIKE_BL 7344 3.13 8.41 0.73 54 TR_XM_MSPIKECOMBO 7282 3.10 8.34 0.73 55 XM_SendGrid 7155 7.02 8.19 6.49 56 BAYES_60 7066 10.25 8.09 11.23 57 RELAYCOUNTRY_CA 6886 3.17 7.89 1.02 58 MPART_ALT_DIFF 6521 5.64 7.47 4.81 59 XM_UB50 6300 2.79 7.22 0.78 60 XM_Evil_Numbers_Gen 6154 7.88 7.05 8.26 61 HTML_MIME_NO_HTML_TAG 6032 2.94 6.91 1.15 62 TR_XM_MaxUnsub 5836 2.61 6.68 0.76 63 RCVD_IN_MSPIKE_H4 5150 9.93 5.90 11.76 64 MIME_HTML_MOSTLY 5091 3.29 5.83 2.14 65 XM_H_Long_From01 5083 5.29 5.82 5.05 66 TR_XM_DK_SendGrid 4876 4.61 5.58 4.17 67 TooManyTo_001 4737 10.34 5.43 12.56 68 RCVD_IN_VALIDITY_SAFE 4722 5.78 5.41 5.95 69 TR_XM_SPAMCOP 4653 1.79 5.33 0.18 70 LotsOfNums_01 4597 6.82 5.26 7.53 71 TR_XM_PhishingBody 4572 3.24 5.24 2.33 72 XM_B_SpammyTLD 4551 3.04 5.21 2.05 73 XMSubject_48 4527 1.64 5.18 0.03 74 BAYES_95 4498 3.78 5.15 3.16 75 XM_DIRTYINTL 4497 1.79 5.15 0.27 76 GOOG_STO_IMG_HTML 4442 1.59 5.09 0.01 77 LOCALPART_IN_SUBJECT 4223 1.53 4.84 0.03 78 RCVD_IN_VALIDITY_CERTIFIED 4138 5.12 4.74 5.29 79 XM_SPF_SoftFail 4136 2.98 4.74 2.19 80 XM_B_Phish_Phrases 4093 3.74 4.69 3.31 81 RCVD_IN_PSBL 4068 1.53 4.66 0.11 82 XMSexyCombo_01 4043 1.82 4.63 0.54 83 URI_NOVOWEL 3956 2.57 4.53 1.68 84 HTML_IMAGE_RATIO_04 3876 5.98 4.44 6.68 85 TO_NO_BRKTS_HTML_ONLY 3832 1.46 4.39 0.14 86 XMStrtUSub 3637 5.07 4.17 5.47 87 RELAYCOUNTRY_FR 3591 1.39 4.11 0.16 88 TO_NAME_SUBJ_NO_RDNS 3459 1.24 3.96 0.00 89 RCVD_IN_MSPIKE_L3 3438 1.47 3.94 0.35 90 TR_XM_SpammyWords3 3345 1.47 3.83 0.40 91 TR_XM_MSPIKECOMBO2 3298 1.25 3.78 0.10 92 T_XMDrugObfuBody_14 3271 2.64 3.75 2.14 93 BOTNET_NORDNS 3096 1.23 3.55 0.17 94 TR_XM_SpammyWords5 3083 1.95 3.53 1.23 95 RCVD_IN_VALIDITY_RPBL 2928 1.06 3.35 0.02 96 SpammyFromTLD_01 2911 1.27 3.33 0.33 97 TM2_M_VERY_LONG_WORD 2852 1.99 3.27 1.41 98 RELAYCOUNTRY_RU 2792 1.03 3.20 0.04 99 RCVD_IN_MSPIKE_L5 2788 1.02 3.19 0.03 100 XMNumbers 2771 4.09 3.17 4.51 101 TM2_M_URI_OPT_OUT 2767 7.15 3.17 8.96 102 XM_UB99 2677 0.96 3.07 0.01 103 T_XMDrugObfuBody_08 2666 1.81 3.05 1.24 104 XM_B_Investor 2647 1.77 3.03 1.20 105 PDS_OTHER_BAD_TLD 2546 1.19 2.92 0.40 106 XM_CamelCaseFrm001 2540 2.02 2.91 1.61 107 XMSubMetaSxObfu_03 2536 1.34 2.90 0.64 108 USER_IN_DEF_DKIM_WL 2535 11.98 2.90 16.09 109 MIME_QP_LONG_LINE 2521 7.48 2.89 9.57 110 KHOP_HELO_FCRDNS 2512 2.11 2.88 1.76 111 T_TooManySym_01 2494 6.18 2.86 7.68 112 T_FILL_THIS_FORM_SHORT 2478 1.23 2.84 0.49 113 HTML_IMAGE_RATIO_06 2463 3.61 2.82 3.97 114 SpammyFromTLD_02 2452 1.03 2.81 0.22 115 XMSexyCombo_04 2444 0.95 2.80 0.11 116 MIME_HTML_ONLY_MULTI 2406 3.05 2.76 3.19 117 XM_OfRef6 2394 1.50 2.74 0.94 118 XM_DK_Undo_01 2343 1.69 2.68 1.24 119 DKIM_ADSP_CUSTOM_MED 2260 1.43 2.59 0.91 120 MAILING_LIST_MULTI 2245 2.35 2.57 2.25 121 XMDiploma_00 2156 1.58 2.47 1.17 122 XM_UB999 2099 0.75 2.40 0.00 123 SUBJ_ALL_CAPS 2073 1.43 2.37 1.00 124 XM_B_SpammyWords4 2019 1.30 2.31 0.85 125 TR_XM_BayesRelay 1918 0.69 2.20 0.00 126 ALL_TRUSTED 1893 16.99 2.17 23.72 127 XM_B_Phish66 1844 1.23 2.11 0.83 128 TR_XM_FormFill 1825 0.66 2.09 0.01 129 FROM_EXCESS_BASE64 1784 2.89 2.04 3.28 130 FROM_SUSPICIOUS_NTLD 1784 0.70 2.04 0.08 131 XM_UB60 1774 0.67 2.03 0.06 132 TR_XM_PHPDW 1761 0.96 2.02 0.48 133 FROM_SUSPICIOUS_NTLD_FP 1732 0.67 1.98 0.08 134 DKIM_INVALID 1698 1.50 1.94 1.30 135 XM_GoogleGroups 1678 1.57 1.92 1.41 136 TR_XM_PHPForged 1668 0.89 1.91 0.42 137 DIET_1 1638 0.89 1.88 0.45 138 TR_XM_FormFill2 1626 0.88 1.86 0.43 139 XM_H_PHPOS 1616 0.86 1.85 0.41 140 HTML_IMAGE_RATIO_08 1590 2.02 1.82 2.10 141 URI_HEX 1566 1.43 1.79 1.27 142 TR_Mismatch_TLD_02 1562 0.60 1.79 0.07 143 XM_H_Long_From02 1541 1.19 1.76 0.93 144 MONEY_NOHTML 1525 0.58 1.75 0.06 145 RCVD_IN_IADB_LISTED 1453 2.69 1.66 3.16 146 XM_ProductURIs 1439 0.97 1.65 0.67 147 TR_LOTS_OF_MONEY3 1429 0.65 1.64 0.20 148 XM_H_Undi_Recip 1417 0.60 1.62 0.14 149 T_XMHurry_00 1402 0.84 1.61 0.49 150 BAYES_40 1401 3.79 1.60 4.79 151 TR_XM_NoHeaderRelay 1397 0.61 1.60 0.16 152 XMBdyGiftCard01 1390 1.55 1.59 1.53 153 TR_XM_SB_Phish 1365 1.46 1.56 1.41 154 LongTLD 1350 0.55 1.55 0.10 155 XMSubPhish11 1350 1.44 1.55 1.40 156 XMCapTrack 1343 0.79 1.54 0.44 157 TM2_M_A_HREF_HREF 1339 0.72 1.53 0.35 158 XM_UB80 1319 0.49 1.51 0.02 159 RELAYCOUNTRY_PL 1304 0.48 1.49 0.03 160 HTTPS_HTTP_MISMATCH 1294 0.87 1.48 0.60 161 URI_LONG_REPEAT 1289 0.46 1.48 0.00 162 HK_RANDOM_FROM 1287 0.53 1.47 0.10 163 XMPhish30 1274 0.98 1.46 0.77 164 LOADSA_MONEY_COMBO 1272 0.50 1.46 0.07 165 BAYES_20 1271 3.56 1.46 4.51 166 XMStockSpam_06 1250 1.65 1.43 1.76 167 NML_ADSP_CUSTOM_MED 1247 0.77 1.43 0.48 168 TR_XM_MaxSPIKE 1243 0.46 1.42 0.03 169 NO_DNS_FOR_FROM 1233 0.68 1.41 0.36 170 XM_B_Unsub2 1221 1.08 1.40 0.94 171 FORGED_GMAIL_RCVD 1191 0.82 1.36 0.57 172 XMHTMLBadTable_001 1183 0.73 1.35 0.45 173 TR_XM_MaxWHORU 1181 0.61 1.35 0.27 174 TR_Mismatch_TLD_01 1176 0.56 1.35 0.21 175 RCVD_IN_IADB_SPF 1173 2.38 1.34 2.84 176 TR_Symld_Words 1168 1.39 1.34 1.42 177 XMBody_17 1161 0.64 1.33 0.33 178 XM_URI_RBL 1143 0.48 1.31 0.11 179 XMSubNoVowel 1107 1.28 1.27 1.29 180 RCVD_IN_IADB_VOUCHED 1075 1.73 1.23 1.95 181 XM_GoogleGroups2 1075 0.47 1.23 0.13 182 DKIM_ADSP_NXDOMAIN 1069 1.27 1.22 1.29 183 HTML_IMAGE_ONLY_08 1067 0.47 1.22 0.13 184 PLING_QUERY 1056 0.70 1.21 0.47 185 RCVD_IN_MSPIKE_L4 1056 0.62 1.21 0.35 186 XMReplyNow 1052 0.87 1.20 0.72 187 T_HTML_TAG_BALANCE_CENTER 1023 0.50 1.17 0.20 188 RCVD_IN_IADB_DK 1020 2.08 1.17 2.49 189 XM_ShortIntro_01 1013 0.98 1.16 0.90 190 XM_B_COVIDMETA 993 0.83 1.14 0.69 191 RELAYCOUNTRY_CN 987 0.40 1.13 0.07 192 XM_GoogleGroups3 986 0.36 1.13 0.00 193 XM_GoogleGroups4 986 0.36 1.13 0.00 194 RCVD_IN_RP_SAFE 981 1.15 1.12 1.17 195 XFER_LOTSA_MONEY 978 0.36 1.12 0.01 196 RCVD_IN_IADB_SENDERID 969 2.13 1.11 2.59 197 SHOPIFY_IMG_NOT_RCVD_SFY 951 0.51 1.09 0.24 198 XMSubMetaI_00 944 0.70 1.08 0.53 199 XMPhish08 944 0.47 1.08 0.20 200 RELAYCOUNTRY_GB 934 1.18 1.07 1.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156794 85.02 92.93 81.43 2 RELAYCOUNTRY_US 140897 73.69 74.84 73.17 3 DKIM_SIGNED 130352 72.05 81.64 67.70 4 XM_DK_Pass 128493 70.91 80.14 66.73 5 DKIM_VALID 127845 70.54 79.70 66.39 6 DCC_CHECK_NEGATIVE 126768 53.56 26.50 65.83 7 XM_B_Unicode 123736 67.38 74.28 64.26 8 DKIM_VALID_AU 105227 56.94 61.99 54.65 9 BAYES_50 98499 45.98 34.57 51.15 10 XM_B_SpammyWords 90973 51.83 61.93 47.24 11 XMListUnsubscribeExists 88326 51.77 64.79 45.87 12 XM_B_Unicode3 79324 41.33 41.62 41.20 13 DCC_CHECK 65731 46.41 73.47 34.14 14 HTML_FONT_LOW_CONTRAST 59454 31.24 32.04 30.88 15 RCVD_IN_MSPIKE_WL 55717 25.50 17.93 28.94 16 DKIM_VALID_EF 51063 26.87 27.65 26.52 17 XM_B_SpammyWords2 48111 27.58 33.29 24.99 18 LOC_TINY_FONT_1 45857 27.18 34.59 23.81 19 ALL_TRUSTED 45665 16.99 2.17 23.72 20 FVGT_m_MULTI_ODD 42643 23.17 25.42 22.15 21 T_TM2_M_HEADER_IN_MSG 42610 20.94 18.33 22.13 22 XMSubLong 41878 22.89 25.39 21.75 23 MIME_HTML_ONLY 38756 24.31 33.54 20.13 24 RCVD_IN_MSPIKE_H2 34811 20.28 25.15 18.08 25 XM_B_Unsub 32007 15.85 14.14 16.62 26 USER_IN_DEF_DKIM_WL 30989 11.98 2.90 16.09 27 RCVD_IN_MSPIKE_H3 29187 14.06 11.65 15.16 28 T_KAM_HTML_FONT_INVALID 28481 17.65 23.97 14.79 29 XM_Multi_Part_URI 27194 14.90 16.62 14.12 30 TooManyTo_001 24190 10.34 5.43 12.56 31 XM_Body_Dirty_Words 23343 15.95 24.38 12.12 32 RCVD_IN_MSPIKE_H4 22650 9.93 5.90 11.76 33 BAYES_00 22399 8.21 0.67 11.63 34 BAYES_60 21633 10.25 8.09 11.23 35 XM_DKIMWhitelistDomains 21369 7.64 0.02 11.10 36 MIME_QP_LONG_LINE 18421 7.48 2.89 9.57 37 TM2_M_URI_OPT_OUT 17253 7.15 3.17 8.96 38 XM_Evil_Numbers_Gen 15899 7.88 7.05 8.26 39 UNPARSEABLE_RELAY 15878 10.27 14.74 8.25 40 XM_DK_Undo_02 15283 19.62 45.40 7.94 41 T_TooManySym_01 14797 6.18 2.86 7.68 42 LotsOfNums_01 14498 6.82 5.26 7.53 43 HTML_IMAGE_RATIO_04 12867 5.98 4.44 6.68 44 BAYES_99 12823 16.78 39.11 6.66 45 HTML_IMAGE_RATIO_02 12655 8.63 13.16 6.57 46 TR_XM_UnparsRelay 12586 8.96 14.29 6.54 47 LOTS_OF_MONEY 12555 8.49 12.85 6.52 48 XM_SendGrid 12500 7.02 8.19 6.49 49 BOTNET_IPINHOSTNAME 11655 7.44 10.51 6.05 50 RCVD_IN_VALIDITY_SAFE 11453 5.78 5.41 5.95 51 TR_XM_DKIM_Undo 11257 14.90 34.86 5.85 52 TR_XM_DK_Bayes 10933 4.05 0.45 5.68 53 TR_XM_DK_Bayes1 10837 4.01 0.45 5.63 54 SHORT_URI_2 10818 4.08 0.69 5.62 55 BAYES_999 10736 13.61 31.33 5.58 56 XMStrtUSub 10541 5.07 4.17 5.47 57 IN_ZIMBRA_NJ_WHITELIST 10359 3.72 0.06 5.38 58 RCVD_IN_VALIDITY_CERTIFIED 10185 5.12 4.74 5.29 59 TR_XM_DK_Bayes2 9916 3.66 0.37 5.15 60 XM_H_Long_From01 9721 5.29 5.82 5.05 61 XM_B_SpammyWords3 9690 6.97 11.25 5.03 62 T_TooManySym_02 9573 3.60 0.57 4.97 63 MPART_ALT_DIFF 9271 5.64 7.47 4.81 64 BAYES_40 9219 3.79 1.60 4.79 65 BAYES_80 8913 5.90 8.71 4.63 66 BAYES_20 8687 3.56 1.46 4.51 67 XMNumbers 8685 4.09 3.17 4.51 68 TR_XM_SpammyWords4 8551 6.38 10.65 4.44 69 XMSexyCombo_05 8524 6.93 12.46 4.43 70 XM_UncommonTLD01 8301 6.17 10.26 4.31 71 XMSubMetaSx_00 8264 5.94 9.58 4.29 72 TR_XM_DK_SendGrid 8030 4.61 5.58 4.17 73 HTML_IMAGE_RATIO_06 7643 3.61 2.82 3.97 74 RELAYCOUNTRY_META 7261 10.94 26.74 3.77 75 TVD_RCVD_IP 7136 2.65 0.31 3.71 76 INVALID_MSGID 6946 2.58 0.31 3.61 77 XM_H_Trusted_IP 6883 2.46 0.00 3.57 78 MSGID_NOFQDN1 6618 2.37 0.03 3.44 79 XM_B_Phish_Phrases 6381 3.74 4.69 3.31 80 FSL_BULK_SIG 6373 7.37 16.34 3.31 81 FROM_EXCESS_BASE64 6312 2.89 2.04 3.28 82 BOUNCE_MESSAGE 6190 2.39 0.56 3.21 83 ANY_BOUNCE_MESSAGE 6190 2.39 0.56 3.21 84 MIME_HTML_ONLY_MULTI 6136 3.05 2.76 3.19 85 BAYES_95 6088 3.78 5.15 3.16 86 RCVD_IN_IADB_LISTED 6077 2.69 1.66 3.16 87 TR_DCC_Bayes_99 5832 10.68 27.55 3.03 88 TO_MALFORMED 5787 2.07 0.01 3.01 89 T_REMOTE_IMAGE 5578 5.12 10.03 2.90 90 RCVD_IN_IADB_SPF 5476 2.38 1.34 2.84 91 TVD_SPACE_RATIO 5088 1.88 0.19 2.64 92 RCVD_IN_IADB_SENDERID 4993 2.13 1.11 2.59 93 RCVD_IN_IADB_DK 4802 2.08 1.17 2.49 94 TR_XM_PhishingBody 4488 3.24 5.24 2.33 95 MAILING_LIST_MULTI 4335 2.35 2.57 2.25 96 BAYES_05 4291 1.73 0.62 2.23 97 XM_SPF_SoftFail 4208 2.98 4.74 2.19 98 T_XMDrugObfuBody_14 4118 2.64 3.75 2.14 99 MIME_HTML_MOSTLY 4112 3.29 5.83 2.14 100 HTML_IMAGE_RATIO_08 4050 2.02 1.82 2.10 101 XM_B_SpammyTLD 3957 3.04 5.21 2.05 102 IN_HORDE_ADDRESS_BOOK 3901 1.41 0.06 2.03 103 RCVD_IN_MSPIKE_H5 3880 1.51 0.39 2.01 104 RCVD_IN_IADB_VOUCHED 3760 1.73 1.23 1.95 105 XMBSHREFv2 3666 1.37 0.20 1.90 106 TR_XM_SpammyWords2 3572 5.11 12.30 1.86 107 KHOP_HELO_FCRDNS 3386 2.11 2.88 1.76 108 XMStockSpam_06 3381 1.65 1.43 1.76 109 URI_NOVOWEL 3239 2.57 4.53 1.68 110 XM_PDF 3149 1.25 0.41 1.64 111 XMGappySubj_01 3110 1.31 0.62 1.62 112 BOTNET 3104 4.37 10.46 1.61 113 XM_CamelCaseFrm001 3103 2.02 2.91 1.61 114 XM_RXBody 2988 1.38 1.00 1.55 115 XMBdyGiftCard01 2950 1.55 1.59 1.53 116 TR_XM_SpammyRelay 2794 5.43 14.19 1.45 117 TR_Symld_Words 2728 1.39 1.34 1.42 118 XM_GoogleGroups 2720 1.57 1.92 1.41 119 TM2_M_VERY_LONG_WORD 2716 1.99 3.27 1.41 120 TR_XM_SB_Phish 2712 1.46 1.56 1.41 121 XMSubPhish11 2690 1.44 1.55 1.40 122 RCVD_IN_IADB_OPTIN 2585 1.18 0.83 1.34 123 T_TooManySym_03 2577 1.01 0.28 1.34 124 DKIM_INVALID 2507 1.50 1.94 1.30 125 UNTRUSTED_Relay 2500 5.77 15.63 1.30 126 DKIM_ADSP_NXDOMAIN 2484 1.27 1.22 1.29 127 XMSubNoVowel 2484 1.28 1.27 1.29 128 URI_HEX 2439 1.43 1.79 1.27 129 XM_shorewaves_Whitelist 2439 0.87 0.00 1.27 130 TooManyTo_002 2429 1.12 0.79 1.26 131 T_XMDrugObfuBody_08 2396 1.81 3.05 1.24 132 XM_DK_Undo_01 2388 1.69 2.68 1.24 133 TR_XM_SpammyWords5 2368 1.95 3.53 1.23 134 RELAYCOUNTRY_GB 2366 1.18 1.07 1.23 135 XM_B_Investor 2304 1.77 3.03 1.20 136 XMDiploma_00 2258 1.58 2.47 1.17 137 RCVD_IN_RP_SAFE 2244 1.15 1.12 1.17 138 HTML_FONT_FACE_BAD 2230 0.97 0.54 1.16 139 HTML_MIME_NO_HTML_TAG 2206 2.94 6.91 1.15 140 SHORTENED_URL_HREF 2082 0.89 0.45 1.08 141 TVD_SPACE_RATIO_MINFP 2078 0.86 0.38 1.08 142 RCVD_IN_RP_CERTIFIED 2030 1.03 0.99 1.05 143 RELAYCOUNTRY_CA 1972 3.17 7.89 1.02 144 SUBJ_ALL_CAPS 1929 1.43 2.37 1.00 145 HTML_IMAGE_ONLY_20 1851 0.76 0.31 0.96 146 XM_OfRef6 1816 1.50 2.74 0.94 147 XM_B_Unsub2 1815 1.08 1.40 0.94 148 XM_H_Long_From02 1785 1.19 1.76 0.93 149 DKIM_ADSP_CUSTOM_MED 1750 1.43 2.59 0.91 150 T_MANY_PILL_PRICE 1742 0.62 0.00 0.90 151 XM_ShortIntro_01 1738 0.98 1.16 0.90 152 XM_B_COPY_HTML 1694 0.86 0.82 0.88 153 TooManyTo_003 1650 0.81 0.72 0.86 154 XM_B_SpammyWords4 1631 1.30 2.31 0.85 155 XM_B_Phish66 1599 1.23 2.11 0.83 156 SHORT_URI_3 1537 0.58 0.11 0.80 157 RCVD_IN_BL_SPAMCOP_NET 1528 4.14 11.51 0.79 158 XM_UB50 1495 2.79 7.22 0.78 159 TR_MetaPhish_Combo_01 1488 0.83 0.96 0.77 160 XMPhish30 1474 0.98 1.46 0.77 161 TR_XM_MaxUnsub 1461 2.61 6.68 0.76 162 RCVD_IN_MSPIKE_BL 1407 3.13 8.41 0.73 163 TR_XM_MSPIKECOMBO 1406 3.10 8.34 0.73 164 XMReplyNow 1377 0.87 1.20 0.72 165 XMLngstWrd_00 1375 0.74 0.81 0.71 166 MPART_ALT_DIFF_COUNT 1339 0.70 0.71 0.70 167 TooManyTo_004 1335 0.64 0.53 0.69 168 XM_B_COVIDMETA 1324 0.83 1.14 0.69 169 XMBody_95 1302 0.53 0.20 0.68 170 PRICES_ARE_AFFORDABLE 1296 0.51 0.15 0.67 171 XM_ProductURIs 1282 0.97 1.65 0.67 172 XM_H_PHPMailer 1259 0.74 0.92 0.65 173 XMLngstWrd_01 1234 0.66 0.72 0.64 174 XMSubMetaSxObfu_02 1226 0.57 0.42 0.64 175 XMSubMetaSxObfu_03 1223 1.34 2.90 0.64 176 USER_IN_WHITELIST 1182 0.42 0.00 0.61 177 USER_IN_WELCOMELIST 1182 0.42 0.00 0.61 178 HTTPS_HTTP_MISMATCH 1148 0.87 1.48 0.60 179 TR_XM_Spammywords 1146 0.52 0.37 0.60 180 XM_S_SpammyWords 1146 0.52 0.37 0.60 181 TooManyTo_005 1120 0.56 0.50 0.58 182 XMGenDplmaNmb 1119 0.66 0.82 0.58 183 FORGED_GMAIL_RCVD 1096 0.82 1.36 0.57 184 T_XMDrugObfuBody_00 1079 0.70 1.01 0.56 185 TVD_QUAL_MEDS 1071 0.41 0.10 0.56 186 URI_TRY_3LD 1058 0.66 0.90 0.55 187 XMSexyCombo_01 1048 1.82 4.63 0.54 188 XMSlimDrugH 1044 0.66 0.91 0.54 189 RDNS_DYNAMIC 1043 0.60 0.72 0.54 190 XMLngstWrd_02 1036 0.58 0.68 0.54 191 XMSubMetaI_00 1018 0.70 1.08 0.53 192 XMBrknScrpt_02 1017 0.68 1.01 0.53 193 TR_MSPIKEBAYES00 995 0.36 0.01 0.52 194 XMSubject_09 983 0.40 0.16 0.51 195 HTML_TAG_BALANCE_BODY 975 0.64 0.95 0.51 196 FROM_NO_USER 967 0.38 0.10 0.50 197 SUBJ_DOLLARS 959 0.63 0.91 0.50 198 T_FILL_THIS_FORM_SHORT 952 1.23 2.84 0.49 199 T_XMHurry_00 942 0.84 1.61 0.49 200 TR_XM_PHPDW 932 0.96 2.02 0.48 ----------------------------------------------------------------------