Email: 279681 Autolearn: 0 AvgScore: 2.47 AvgScanTime: 1.14 sec Spam: 88259 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.26 sec Ham: 191422 Autolearn: 0 AvgScore: -2.93 AvgScanTime: 1.09 sec Time Spent Running SA: 88.92 hours Time Spent Processing Spam: 30.88 hours Time Spent Processing Ham: 58.04 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 82287 85.40 93.23 81.79 2 DKIM_SIGNED 75055 74.79 85.04 70.07 3 XM_DK_Pass 73540 73.60 83.32 69.11 4 DKIM_VALID 73144 73.15 82.87 68.67 5 RELAYCOUNTRY_US 66895 76.98 75.79 77.52 6 XM_B_Unicode 65809 68.93 74.56 66.33 7 DCC_CHECK 61144 46.20 69.28 35.55 8 XMListUnsubscribeExists 60272 55.01 68.29 48.88 9 DKIM_VALID_AU 58683 60.07 66.49 57.10 10 XM_B_SpammyWords 54202 50.12 61.41 44.91 11 XM_DK_Undo_02 40988 20.41 46.44 8.41 12 XM_B_Unicode3 37490 42.81 42.48 42.96 13 BAYES_99 33032 16.56 37.43 6.94 14 BAYES_50 32016 47.95 36.28 53.34 15 TR_XM_DKIM_Undo 31585 15.34 35.79 5.91 16 LOC_TINY_FONT_1 31509 28.85 35.70 25.70 17 XM_B_SpammyWords2 30834 25.89 34.94 21.71 18 MIME_HTML_ONLY 28808 26.18 32.64 23.20 19 HTML_FONT_LOW_CONTRAST 27996 29.90 31.72 29.06 20 DCC_CHECK_NEGATIVE 27081 53.78 30.68 64.42 21 FVGT_m_MULTI_ODD 26612 25.73 30.15 23.69 22 BAYES_999 26347 13.41 29.85 5.83 23 DKIM_VALID_EF 24642 27.36 27.92 27.11 24 RELAYCOUNTRY_META 24497 11.04 27.76 3.33 25 TR_DCC_Bayes_99 23364 10.28 26.47 2.82 26 T_KAM_HTML_FONT_INVALID 22686 19.70 25.70 16.94 27 RCVD_IN_MSPIKE_H2 21828 19.80 24.73 17.52 28 XM_Body_Dirty_Words 20909 15.53 23.69 11.76 29 RCVD_IN_MSPIKE_WL 18828 28.01 21.33 31.09 30 XMSubLong 17791 21.28 20.16 21.80 31 T_TM2_M_HEADER_IN_MSG 16174 20.31 18.33 21.23 32 XM_Multi_Part_URI 13880 14.35 15.73 13.71 33 UNTRUSTED_Relay 13367 5.58 15.15 1.17 34 RCVD_IN_MSPIKE_H3 13336 16.09 15.11 16.54 35 UNPARSEABLE_RELAY 12337 10.18 13.98 8.44 36 FSL_BULK_SIG 12196 6.56 13.82 3.21 37 TR_XM_UnparsRelay 12180 8.95 13.80 6.72 38 XMSexyCombo_05 11670 6.95 13.22 4.06 39 XM_B_Unsub 11536 13.28 13.07 13.37 40 TR_XM_SpammyWords2 11507 5.44 13.04 1.94 41 MPART_ALT_DIFF 11324 9.25 12.83 7.60 42 RCVD_IN_BL_SPAMCOP_NET 11229 4.61 12.72 0.86 43 TR_XM_SpammyRelay 10472 4.58 11.87 1.22 44 LOTS_OF_MONEY 10177 8.35 11.53 6.88 45 XM_UncommonTLD01 10156 6.63 11.51 4.39 46 XM_B_SpammyWords3 9571 7.68 10.84 6.21 47 RCVD_IN_MSPIKE_BL 9512 4.02 10.78 0.91 48 TR_XM_MSPIKECOMBO 9476 4.01 10.74 0.91 49 BOTNET_IPINHOSTNAME 9184 7.40 10.41 6.01 50 BOTNET 9126 4.35 10.34 1.58 51 BAYES_60 8366 10.69 9.48 11.25 52 TR_XM_SpammyWords4 8124 5.96 9.20 4.46 53 BAYES_80 7733 5.82 8.76 4.46 54 XM_SendGrid 7153 6.62 8.10 5.93 55 XMSubMetaSx_00 6801 5.89 7.71 5.05 56 RELAYCOUNTRY_CA 6660 3.11 7.55 1.07 57 XM_Evil_Numbers_Gen 6569 8.10 7.44 8.40 58 HTML_IMAGE_RATIO_02 6211 7.18 7.04 7.24 59 TM2_M_VERY_LONG_WORD 6141 3.78 6.96 2.32 60 TR_XM_MaxUnsub 6111 2.78 6.92 0.87 61 MIME_HTML_MOSTLY 5927 4.05 6.72 2.82 62 MIME_HTML_ONLY_MULTI 5768 5.75 6.54 5.38 63 XM_SPF_SoftFail 5685 3.31 6.44 1.87 64 TR_XM_SPAMCOP 5680 2.22 6.44 0.27 65 RCVD_IN_MSPIKE_L3 5552 2.32 6.29 0.48 66 TR_XM_PhishingBody 5382 3.56 6.10 2.39 67 XMStrtUSub 5332 5.93 6.04 5.88 68 RCVD_IN_MSPIKE_H4 5250 10.39 5.95 12.44 69 XM_UB50 5107 2.31 5.79 0.70 70 RCVD_IN_VALIDITY_RPBL 4836 1.75 5.48 0.04 71 HTML_MIME_NO_HTML_TAG 4833 3.26 5.48 2.23 72 XM_H_Long_From01 4766 5.00 5.40 4.81 73 URI_NOVOWEL 4685 3.03 5.31 1.99 74 TR_XM_DK_SendGrid 4635 4.30 5.25 3.86 75 XM_GoogleGroups 4614 3.26 5.23 2.36 76 RCVD_IN_VALIDITY_SAFE 4544 6.31 5.15 6.84 77 XMLngstWrd_00 4471 2.82 5.07 1.79 78 SpammyFromTLD_02 4463 1.72 5.06 0.18 79 LotsOfNums_01 4432 6.78 5.02 7.59 80 XMLngstWrd_01 4366 2.75 4.95 1.74 81 TooManyTo_001 4336 7.73 4.91 9.02 82 XMLngstWrd_02 4313 2.67 4.89 1.65 83 HTML_IMAGE_RATIO_04 4210 6.73 4.77 7.63 84 BAYES_95 4113 3.47 4.66 2.92 85 T_REMOTE_IMAGE 4103 3.71 4.65 3.28 86 RCVD_IN_VALIDITY_CERTIFIED 3972 5.68 4.50 6.23 87 XM_DIRTYINTL 3928 1.55 4.45 0.21 88 XM_OfRef6 3900 2.11 4.42 1.05 89 T_XMDrugObfuBody_14 3886 2.91 4.40 2.22 90 XMLngstWrd_03 3882 2.46 4.40 1.56 91 XMLngstWrd_04 3805 2.38 4.31 1.50 92 XM_B_SpammyTLD 3761 2.57 4.26 1.80 93 HTML_TITLE_SUBJ_DIFF 3752 2.15 4.25 1.18 94 XM_B_Investor 3741 2.11 4.24 1.13 95 SpammyFromTLD_01 3628 1.52 4.11 0.32 96 UPPERCASE_75_100 3627 2.09 4.11 1.16 97 RCVD_IN_PSBL 3596 1.31 4.07 0.04 98 XM_B_Phish_Phrases 3503 3.47 3.97 3.24 99 TR_XM_SpammyWords5 3465 2.23 3.93 1.45 100 XM_UB60 3462 1.27 3.92 0.05 101 RCVD_IN_MSPIKE_L5 3443 1.25 3.90 0.03 102 T_FILL_THIS_FORM_SHORT 3085 1.37 3.50 0.39 103 TR_XM_NoHeaderRelay 3074 1.20 3.48 0.15 104 XM_B_Phish66 3025 1.70 3.43 0.90 105 SUBJ_ALL_CAPS 2789 1.71 3.16 1.04 106 RELAYCOUNTRY_FR 2650 1.05 3.00 0.16 107 RELAYCOUNTRY_IN 2639 0.97 2.99 0.04 108 USER_IN_DEF_DKIM_WL 2616 11.78 2.96 15.84 109 XM_CamelCaseFrm001 2610 2.00 2.96 1.56 110 T_XMDrugObfuBody_08 2607 1.63 2.95 1.02 111 XMReplyNow 2578 1.07 2.92 0.22 112 TR_XM_SpammyWords3 2534 1.18 2.87 0.40 113 HTML_IMAGE_RATIO_06 2512 3.72 2.85 4.13 114 TR_XM_MSPIKECOMBO2 2495 1.04 2.83 0.22 115 XMDiploma_00 2389 1.75 2.71 1.31 116 HTML_IMAGE_RATIO_08 2320 2.46 2.63 2.39 117 XM_ShortIntro_01 2292 1.07 2.60 0.37 118 XMNumbers 2274 4.07 2.58 4.76 119 T_TooManySym_01 2219 6.02 2.51 7.64 120 URI_LONG_REPEAT 2110 0.76 2.39 0.01 121 XMStockSpam_06 2085 1.86 2.36 1.63 122 TM2_M_URI_OPT_OUT 2060 5.06 2.33 6.32 123 BOTNET_NORDNS 2054 0.75 2.33 0.02 124 XM_UB99 1999 0.72 2.26 0.00 125 KHOP_HELO_FCRDNS 1967 1.79 2.23 1.59 126 TR_Mismatch_TLD_02 1915 0.74 2.17 0.08 127 DKIM_INVALID 1911 1.64 2.17 1.40 128 MONEY_NOHTML 1858 0.71 2.11 0.07 129 XM_DK_Undo_01 1852 1.52 2.10 1.25 130 PDS_OTHER_BAD_TLD 1846 0.86 2.09 0.29 131 XM_B_SpammyWords4 1779 1.48 2.02 1.23 132 HTML_FONT_TINY_NORDNS 1772 0.68 2.01 0.07 133 HTML_TAG_BALANCE_BODY 1730 0.95 1.96 0.48 134 ALL_TRUSTED 1708 14.46 1.94 20.23 135 RELAYCOUNTRY_AR 1691 0.60 1.92 0.00 136 XMEmptySub 1688 0.63 1.91 0.04 137 T_XMHurry_00 1681 0.97 1.90 0.53 138 XMSexyCombo_01 1654 1.56 1.87 1.42 139 XM_UB999 1642 0.59 1.86 0.00 140 TR_XM_FormFill 1617 0.58 1.83 0.01 141 XMBdyGiftCard01 1616 1.66 1.83 1.57 142 MIME_QP_LONG_LINE 1615 4.67 1.83 5.98 143 URIBL_DBL_SPAM 1566 0.57 1.77 0.02 144 XM_H_Undi_Recip 1552 0.64 1.76 0.13 145 TR_XM_PHPDW 1535 0.87 1.74 0.47 146 DKIM_ADSP_CUSTOM_MED 1535 1.17 1.74 0.91 147 FROM_EXCESS_BASE64 1533 2.75 1.74 3.21 148 XMBody_17 1515 0.82 1.72 0.41 149 TR_XM_PHPForged 1475 0.79 1.67 0.39 150 XM_UB80 1472 0.54 1.67 0.01 151 URI_HEX 1471 1.42 1.67 1.31 152 XM_B_Unsub2 1462 1.22 1.66 1.02 153 TR_XM_SB_Phish 1454 1.41 1.65 1.30 154 TR_XM_FormFill2 1442 0.78 1.63 0.39 155 RELAYCOUNTRY_RU 1441 0.53 1.63 0.02 156 XM_H_PHPOS 1433 0.77 1.62 0.38 157 XMSubNoVowel 1429 1.49 1.62 1.44 158 TR_XM_BayesRelay 1425 0.52 1.61 0.01 159 TR_XM_Undi_Recip11 1419 0.52 1.61 0.02 160 XMGenDplmaNmb 1417 0.82 1.61 0.46 161 TR_XM_MaxSPIKE 1404 0.56 1.59 0.08 162 MAILING_LIST_MULTI 1394 1.81 1.58 1.92 163 XMHTML_After_End 1377 0.82 1.56 0.48 164 RELAYCOUNTRY_IR 1358 0.49 1.54 0.00 165 TR_XM_Undi_Recip5 1348 0.48 1.53 0.00 166 HTTPS_HTTP_MISMATCH 1274 0.74 1.44 0.41 167 TR_XM_Undi_RecipCombo2 1271 0.45 1.44 0.00 168 BAYES_40 1249 3.32 1.42 4.20 169 FROM_SUSPICIOUS_NTLD 1205 0.48 1.37 0.08 170 XMPhish30 1201 0.98 1.36 0.81 171 XM_Attn_01 1192 0.44 1.35 0.02 172 FILL_THIS_FORM 1175 0.64 1.33 0.32 173 UNDISC_MONEY 1162 0.42 1.32 0.00 174 XM_B_REG_HTML 1156 0.75 1.31 0.49 175 FILL_THIS_FORM_LONG 1127 0.55 1.28 0.22 176 RELAYCOUNTRY_AU 1120 0.55 1.27 0.22 177 FROM_SUSPICIOUS_NTLD_FP 1117 0.45 1.27 0.07 178 TR_XM_COVIDMETA4 1109 0.47 1.26 0.11 179 RCVD_IN_IADB_LISTED 1100 2.68 1.25 3.34 180 XM_Body_Dirty_Words_01 1090 0.55 1.24 0.24 181 T_XMDrugObfuBody_00 1090 0.80 1.24 0.60 182 HK_RANDOM_REPLYTO 1081 0.61 1.22 0.33 183 XMSubPhish11 1079 1.27 1.22 1.29 184 XM_ProductURIs 1078 0.84 1.22 0.67 185 ADVANCE_FEE_2_NEW_MONEY 1061 0.38 1.20 0.00 186 NML_ADSP_CUSTOM_MED 1026 0.76 1.16 0.57 187 FORGED_GMAIL_RCVD 1026 0.67 1.16 0.45 188 RCVD_IN_RP_RNBL 1008 0.37 1.14 0.01 189 XM_URI_RBL 1007 0.43 1.14 0.10 190 TR_XM_COVIDMETA1 999 0.43 1.13 0.11 191 LOADSA_MONEY_COMBO 994 0.37 1.13 0.02 192 TR_LOTS_OF_MONEY3 993 0.47 1.13 0.16 193 RELAYCOUNTRY_DE 987 0.53 1.12 0.25 194 XM_BadFromFormat 966 0.43 1.09 0.12 195 TR_Caps_n_Bayes_99 957 0.39 1.08 0.07 196 XM_OfRef7 934 0.37 1.06 0.05 197 RCVD_IN_IADB_SPF 931 2.38 1.05 2.99 198 XM_Nigeria_01 922 0.34 1.04 0.01 199 SHOPIFY_IMG_NOT_RCVD_SFY 915 0.47 1.04 0.21 200 RCVD_IN_RP_SAFE 911 1.26 1.03 1.37 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156562 85.40 93.23 81.79 2 RELAYCOUNTRY_US 148394 76.98 75.79 77.52 3 DKIM_SIGNED 134121 74.79 85.04 70.07 4 XM_DK_Pass 132293 73.60 83.32 69.11 5 DKIM_VALID 131443 73.15 82.87 68.67 6 XM_B_Unicode 126963 68.93 74.56 66.33 7 DCC_CHECK_NEGATIVE 123318 53.78 30.68 64.42 8 DKIM_VALID_AU 109310 60.07 66.49 57.10 9 BAYES_50 102104 47.95 36.28 53.34 10 XMListUnsubscribeExists 93574 55.01 68.29 48.88 11 XM_B_SpammyWords 85967 50.12 61.41 44.91 12 XM_B_Unicode3 82228 42.81 42.48 42.96 13 DCC_CHECK 68056 46.20 69.28 35.55 14 RCVD_IN_MSPIKE_WL 59519 28.01 21.33 31.09 15 HTML_FONT_LOW_CONTRAST 55633 29.90 31.72 29.06 16 DKIM_VALID_EF 51892 27.36 27.92 27.11 17 LOC_TINY_FONT_1 49189 28.85 35.70 25.70 18 FVGT_m_MULTI_ODD 45352 25.73 30.15 23.69 19 MIME_HTML_ONLY 44413 26.18 32.64 23.20 20 XMSubLong 41729 21.28 20.16 21.80 21 XM_B_SpammyWords2 41563 25.89 34.94 21.71 22 T_TM2_M_HEADER_IN_MSG 40643 20.31 18.33 21.23 23 ALL_TRUSTED 38731 14.46 1.94 20.23 24 RCVD_IN_MSPIKE_H2 33535 19.80 24.73 17.52 25 T_KAM_HTML_FONT_INVALID 32423 19.70 25.70 16.94 26 RCVD_IN_MSPIKE_H3 31654 16.09 15.11 16.54 27 USER_IN_DEF_DKIM_WL 30323 11.78 2.96 15.84 28 XM_Multi_Part_URI 26242 14.35 15.73 13.71 29 XM_B_Unsub 25592 13.28 13.07 13.37 30 RCVD_IN_MSPIKE_H4 23809 10.39 5.95 12.44 31 XM_Body_Dirty_Words 22519 15.53 23.69 11.76 32 BAYES_60 21535 10.69 9.48 11.25 33 XM_DKIMWhitelistDomains 21359 7.66 0.07 11.16 34 BAYES_00 20804 7.58 0.44 10.87 35 TooManyTo_001 17270 7.73 4.91 9.02 36 UNPARSEABLE_RELAY 16147 10.18 13.98 8.44 37 XM_DK_Undo_02 16092 20.41 46.44 8.41 38 XM_Evil_Numbers_Gen 16076 8.10 7.44 8.40 39 T_TooManySym_01 14619 6.02 2.51 7.64 40 HTML_IMAGE_RATIO_04 14600 6.73 4.77 7.63 41 MPART_ALT_DIFF 14549 9.25 12.83 7.60 42 LotsOfNums_01 14527 6.78 5.02 7.59 43 HTML_IMAGE_RATIO_02 13867 7.18 7.04 7.24 44 BAYES_99 13286 16.56 37.43 6.94 45 LOTS_OF_MONEY 13174 8.35 11.53 6.88 46 RCVD_IN_VALIDITY_SAFE 13097 6.31 5.15 6.84 47 TR_XM_UnparsRelay 12864 8.95 13.80 6.72 48 TM2_M_URI_OPT_OUT 12094 5.06 2.33 6.32 49 RCVD_IN_VALIDITY_CERTIFIED 11920 5.68 4.50 6.23 50 XM_B_SpammyWords3 11896 7.68 10.84 6.21 51 BOTNET_IPINHOSTNAME 11512 7.40 10.41 6.01 52 MIME_QP_LONG_LINE 11442 4.67 1.83 5.98 53 XM_H_Trusted_IP 11420 4.08 0.00 5.97 54 XM_SendGrid 11349 6.62 8.10 5.93 55 TR_XM_DKIM_Undo 11318 15.34 35.79 5.91 56 XMStrtUSub 11251 5.93 6.04 5.88 57 BAYES_999 11156 13.41 29.85 5.83 58 TR_XM_DK_Bayes 10591 3.91 0.38 5.53 59 TR_XM_DK_Bayes1 10479 3.87 0.38 5.47 60 IN_ZIMBRA_NJ_WHITELIST 10326 3.71 0.06 5.39 61 MIME_HTML_ONLY_MULTI 10300 5.75 6.54 5.38 62 XMSubMetaSx_00 9659 5.89 7.71 5.05 63 TR_XM_DK_Bayes2 9511 3.51 0.35 4.97 64 XM_H_Long_From01 9208 5.00 5.40 4.81 65 XMNumbers 9106 4.07 2.58 4.76 66 T_TooManySym_02 9089 3.41 0.51 4.75 67 TR_XM_SpammyWords4 8544 5.96 9.20 4.46 68 BAYES_80 8544 5.82 8.76 4.46 69 XM_UncommonTLD01 8394 6.63 11.51 4.39 70 BAYES_40 8034 3.32 1.42 4.20 71 HTML_IMAGE_RATIO_06 7898 3.72 2.85 4.13 72 XMSexyCombo_05 7768 6.95 13.22 4.06 73 TR_XM_DK_SendGrid 7392 4.30 5.25 3.86 74 BAYES_20 7250 2.91 1.02 3.79 75 INVALID_MSGID 6860 2.51 0.18 3.58 76 TVD_RCVD_IP 6615 2.43 0.19 3.46 77 RCVD_IN_IADB_LISTED 6387 2.68 1.25 3.34 78 RELAYCOUNTRY_META 6382 11.04 27.76 3.33 79 T_REMOTE_IMAGE 6272 3.71 4.65 3.28 80 XM_B_Phish_Phrases 6195 3.47 3.97 3.24 81 FROM_EXCESS_BASE64 6154 2.75 1.74 3.21 82 FSL_BULK_SIG 6153 6.56 13.82 3.21 83 TO_MALFORMED 5777 2.07 0.01 3.02 84 RCVD_IN_IADB_SPF 5718 2.38 1.05 2.99 85 BAYES_95 5588 3.47 4.66 2.92 86 MIME_HTML_MOSTLY 5404 4.05 6.72 2.82 87 TR_DCC_Bayes_99 5398 10.28 26.47 2.82 88 BOUNCE_MESSAGE 5333 2.08 0.55 2.79 89 ANY_BOUNCE_MESSAGE 5333 2.08 0.55 2.79 90 RCVD_IN_IADB_SENDERID 5187 2.16 0.96 2.71 91 RCVD_IN_IADB_DK 5010 2.10 0.97 2.62 92 SHORT_URI_2 4732 1.82 0.42 2.47 93 TR_XM_PhishingBody 4568 3.56 6.10 2.39 94 HTML_IMAGE_RATIO_08 4566 2.46 2.63 2.39 95 XM_GoogleGroups 4512 3.26 5.23 2.36 96 TM2_M_VERY_LONG_WORD 4439 3.78 6.96 2.32 97 BAYES_05 4276 1.69 0.52 2.23 98 HTML_MIME_NO_HTML_TAG 4276 3.26 5.48 2.23 99 T_XMDrugObfuBody_14 4246 2.91 4.40 2.22 100 DKIM_ADSP_NXDOMAIN 4177 1.65 0.48 2.18 101 RCVD_IN_MSPIKE_H5 4056 1.54 0.27 2.12 102 RCVD_IN_IADB_VOUCHED 3969 1.65 0.73 2.07 103 IN_HORDE_ADDRESS_BOOK 3827 1.38 0.05 2.00 104 URI_NOVOWEL 3803 3.03 5.31 1.99 105 TR_XM_SpammyWords2 3717 5.44 13.04 1.94 106 XMBSHREFv2 3693 1.38 0.20 1.93 107 MAILING_LIST_MULTI 3670 1.81 1.58 1.92 108 XM_SPF_SoftFail 3586 3.31 6.44 1.87 109 XM_B_SpammyTLD 3438 2.57 4.26 1.80 110 XMLngstWrd_00 3429 2.82 5.07 1.79 111 XMLngstWrd_01 3332 2.75 4.95 1.74 112 XM_RXBody 3315 1.48 0.94 1.73 113 XMLngstWrd_02 3156 2.67 4.89 1.65 114 XM_PDF 3133 1.24 0.37 1.64 115 XMStockSpam_06 3114 1.86 2.36 1.63 116 TVD_SPACE_RATIO 3057 1.12 0.07 1.60 117 KHOP_HELO_FCRDNS 3039 1.79 2.23 1.59 118 BOTNET 3028 4.35 10.34 1.58 119 XMBdyGiftCard01 3014 1.66 1.83 1.57 120 XMLngstWrd_03 2991 2.46 4.40 1.56 121 XM_CamelCaseFrm001 2990 2.00 2.96 1.56 122 XMGappySubj_01 2926 1.08 0.10 1.53 123 XMLngstWrd_04 2865 2.38 4.31 1.50 124 RCVD_IN_IADB_OPTIN 2791 1.14 0.45 1.46 125 TR_XM_SpammyWords5 2785 2.23 3.93 1.45 126 XMSubNoVowel 2752 1.49 1.62 1.44 127 XMSexyCombo_01 2722 1.56 1.87 1.42 128 DKIM_INVALID 2678 1.64 2.17 1.40 129 RCVD_IN_RP_SAFE 2623 1.26 1.03 1.37 130 XMDiploma_00 2517 1.75 2.71 1.31 131 URI_HEX 2499 1.42 1.67 1.31 132 TR_Symld_Words 2491 1.12 0.73 1.30 133 TR_XM_SB_Phish 2491 1.41 1.65 1.30 134 XMSubPhish11 2472 1.27 1.22 1.29 135 RCVD_IN_RP_CERTIFIED 2402 1.12 0.82 1.25 136 XM_DK_Undo_01 2391 1.52 2.10 1.25 137 MSGID_NOFQDN1 2362 0.85 0.02 1.23 138 XM_B_SpammyWords4 2348 1.48 2.02 1.23 139 TR_XM_SpammyRelay 2327 4.58 11.87 1.22 140 TooManyTo_002 2277 1.04 0.72 1.19 141 HTML_TITLE_SUBJ_DIFF 2265 2.15 4.25 1.18 142 UNTRUSTED_Relay 2234 5.58 15.15 1.17 143 UPPERCASE_75_100 2228 2.09 4.11 1.16 144 T_TooManySym_03 2173 0.87 0.29 1.14 145 XM_B_Investor 2161 2.11 4.24 1.13 146 RELAYCOUNTRY_CA 2041 3.11 7.55 1.07 147 XM_OfRef6 2014 2.11 4.42 1.05 148 SUBJ_ALL_CAPS 1993 1.71 3.16 1.04 149 HTML_IMAGE_ONLY_20 1964 0.80 0.30 1.03 150 T_XMDrugObfuBody_08 1962 1.63 2.95 1.02 151 XM_B_Unsub2 1952 1.22 1.66 1.02 152 XMSexyCombo_04 1923 0.92 0.73 1.00 153 XM_B_COPY_HTML 1916 0.95 0.83 1.00 154 TR_MetaPhish_Combo_01 1891 0.93 0.80 0.99 155 XMBody_95 1853 0.70 0.12 0.97 156 XMSubMetaSx_01 1848 0.74 0.24 0.97 157 XM_shorewaves_Whitelist 1839 0.66 0.00 0.96 158 XM_H_Long_From02 1796 0.91 0.85 0.94 159 XMSexyCombo_02 1751 0.73 0.34 0.91 160 TR_XM_MSPIKECOMBO 1743 4.01 10.74 0.91 161 RCVD_IN_MSPIKE_BL 1743 4.02 10.78 0.91 162 DKIM_ADSP_CUSTOM_MED 1743 1.17 1.74 0.91 163 XM_B_Phish66 1731 1.70 3.43 0.90 164 TooManyTo_003 1690 0.81 0.66 0.88 165 TR_XM_MaxUnsub 1674 2.78 6.92 0.87 166 RCVD_IN_BL_SPAMCOP_NET 1653 4.61 12.72 0.86 167 HTML_FONT_FACE_BAD 1591 0.81 0.77 0.83 168 XMPhish30 1549 0.98 1.36 0.81 169 MPART_ALT_DIFF_COUNT 1433 0.70 0.59 0.75 170 XM_UB50 1349 2.31 5.79 0.70 171 XM_H_PHPMailer 1330 0.76 0.89 0.69 172 TooManyTo_004 1319 0.67 0.62 0.69 173 XM_ProductURIs 1280 0.84 1.22 0.67 174 USER_IN_WHITELIST 1225 0.44 0.00 0.64 175 USER_IN_WELCOMELIST 1225 0.44 0.00 0.64 176 XM_B_COVIDMETA 1198 0.68 0.79 0.63 177 XMBrknScrpt_02 1194 0.70 0.86 0.62 178 T_XMDrugObfuBody_12 1193 0.47 0.13 0.62 179 XMSubMetaSxObfu_02 1190 0.58 0.49 0.62 180 XMSubMetaI_00 1174 0.70 0.87 0.61 181 T_XMDrugObfuBody_00 1146 0.80 1.24 0.60 182 TooManyTo_005 1137 0.60 0.61 0.59 183 RDNS_DYNAMIC 1104 0.57 0.56 0.58 184 NML_ADSP_CUSTOM_MED 1095 0.76 1.16 0.57 185 XMHTMLBadTable_001 1061 0.69 0.99 0.55 186 XM_S_SpammyWords 1043 0.70 1.03 0.54 187 TR_XM_Spammywords 1043 0.70 1.03 0.54 188 XM_E_Blogspot 1029 0.51 0.45 0.54 189 T_XMHurry_00 1019 0.97 1.90 0.53 190 TR_MSPIKEBAYES00 991 0.36 0.01 0.52 191 RELAYCOUNTRY_GB 980 0.66 0.97 0.51 192 URI_TRY_3LD 973 0.57 0.70 0.51 193 SHORTENED_URL_HREF 953 0.41 0.21 0.50 194 XM_B_REG_HTML 933 0.75 1.31 0.49 195 RCVD_IN_MSPIKE_L3 928 2.32 6.29 0.48 196 XMHTML_After_End 915 0.82 1.56 0.48 197 T_TooManySym_04 914 0.39 0.20 0.48 198 HTML_TAG_BALANCE_BODY 913 0.95 1.96 0.48 199 TR_XM_PHPDW 892 0.87 1.74 0.47 200 XMGenDplmaNmb 886 0.82 1.61 0.46 ----------------------------------------------------------------------