Email: 606108 Autolearn: 0 AvgScore: 2.19 AvgScanTime: 1.33 sec Spam: 170747 Autolearn: 0 AvgScore: 14.83 AvgScanTime: 1.51 sec Ham: 435361 Autolearn: 0 AvgScore: -2.77 AvgScanTime: 1.26 sec Time Spent Running SA: 224.17 hours Time Spent Processing Spam: 71.53 hours Time Spent Processing Ham: 152.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163324 91.73 95.65 90.19 2 DKIM_SIGNED 143516 64.11 84.05 56.28 3 XM_DK_Pass 140527 62.86 82.30 55.23 4 DKIM_VALID 139220 62.07 81.54 54.44 5 RELAYCOUNTRY_US 131356 75.78 76.93 75.33 6 DCC_CHECK 127065 39.69 74.42 26.06 7 XM_B_Unicode 123299 74.78 72.21 75.78 8 XMListUnsubscribeExists 109174 44.98 63.94 37.55 9 DKIM_VALID_AU 107332 48.26 62.86 42.54 10 XM_B_SpammyWords 102155 50.22 59.83 46.45 11 BAYES_50 73406 52.05 42.99 55.60 12 XM_DK_Undo_02 69681 15.64 40.81 5.77 13 XM_B_Unicode3 67809 46.61 39.71 49.31 14 MIME_HTML_ONLY 62919 31.10 36.85 28.84 15 LOC_TINY_FONT_1 59821 22.20 35.03 17.16 16 XM_B_SpammyWords2 58151 19.63 34.06 13.98 17 FVGT_m_MULTI_ODD 58041 22.97 33.99 18.65 18 BAYES_99 55731 12.70 32.64 4.88 19 TR_XM_DKIM_Undo 53687 11.85 31.44 4.17 20 HTML_FONT_LOW_CONTRAST 49230 22.89 28.83 20.56 21 DKIM_VALID_EF 47609 23.09 27.88 21.22 22 T_KAM_HTML_FONT_INVALID 44804 18.17 26.24 15.00 23 DCC_CHECK_NEGATIVE 43614 60.28 25.54 73.90 24 BAYES_999 43338 9.97 25.38 3.93 25 RELAYCOUNTRY_META 41767 9.02 24.46 2.96 26 RCVD_IN_MSPIKE_WL 41693 23.79 24.42 23.54 27 XMSubLong 41227 26.48 24.15 27.40 28 T_TM2_M_HEADER_IN_MSG 41086 23.80 24.06 23.69 29 RCVD_IN_MSPIKE_H2 40956 18.32 23.99 16.10 30 TR_DCC_Bayes_99 39232 7.66 22.98 1.65 31 XM_Body_Dirty_Words 35486 11.84 20.78 8.34 32 RCVD_IN_MSPIKE_H3 29920 14.51 17.52 13.33 33 FSL_BULK_SIG 28968 6.50 16.97 2.40 34 XM_B_Unsub 28818 14.94 16.88 14.18 35 TR_XM_BayesUnsub 28197 13.77 16.51 12.69 36 XM_Multi_Part_URI 27232 11.53 15.95 9.80 37 UNTRUSTED_Relay 25352 4.92 14.85 1.03 38 LOTS_OF_MONEY 25225 8.59 14.77 6.17 39 MPART_ALT_DIFF 24648 11.26 14.44 10.02 40 BOTNET 23034 4.70 13.49 1.25 41 UNPARSEABLE_RELAY 22585 7.98 13.23 5.92 42 TR_XM_UnparsRelay 22195 7.10 13.00 4.79 43 TR_XM_SpammyWords4 21090 5.86 12.35 3.31 44 XM_B_SpammyWords3 20539 5.72 12.03 3.25 45 TR_XM_SpammyWords2 20368 3.99 11.93 0.88 46 TR_XM_SpammyRelay 19874 4.22 11.64 1.31 47 XMSexyCombo_05 19777 4.92 11.58 2.31 48 BOTNET_IPINHOSTNAME 18235 5.62 10.68 3.63 49 XM_UncommonTLD01 18096 5.07 10.60 2.90 50 HTML_IMAGE_RATIO_02 17621 6.30 10.32 4.73 51 RCVD_IN_BL_SPAMCOP_NET 16616 3.20 9.73 0.63 52 HTML_MIME_NO_HTML_TAG 15699 3.86 9.19 1.76 53 TM2_M_VERY_LONG_WORD 14789 3.10 8.66 0.92 54 RCVD_IN_MSPIKE_BL 14707 3.15 8.61 1.00 55 MIME_HTML_ONLY_MULTI 14677 8.55 8.60 8.54 56 TR_XM_MSPIKECOMBO 14593 3.12 8.55 0.99 57 XM_Evil_Numbers_Gen 14270 7.80 8.36 7.58 58 TR_XM_PhishingBody 13892 4.33 8.14 2.84 59 XM_UB50 13414 2.66 7.86 0.63 60 BAYES_60 13332 7.60 7.81 7.52 61 BAYES_80 13293 4.76 7.79 3.57 62 XM_SendGrid 12148 4.87 7.11 3.99 63 XMSubMetaSx_00 12054 3.91 7.06 2.67 64 LotsOfNums_01 11823 7.12 6.92 7.20 65 XM_B_Phish_Phrases 11255 3.60 6.59 2.43 66 RCVD_IN_MSPIKE_H4 11207 8.28 6.56 8.95 67 MIME_HTML_MOSTLY 11026 3.17 6.46 1.88 68 RELAYCOUNTRY_CA 10773 2.40 6.31 0.86 69 XMLngstWrd_00 10724 2.16 6.28 0.54 70 XM_GoogleGroups 10708 2.50 6.27 1.02 71 XMLngstWrd_01 10631 2.11 6.23 0.49 72 XMLngstWrd_02 10376 2.02 6.08 0.43 73 XMLngstWrd_03 10188 1.93 5.97 0.34 74 XM_B_Phish66 10100 2.84 5.92 1.64 75 XMLngstWrd_04 9995 1.85 5.85 0.28 76 HTML_TITLE_SUBJ_DIFF 9906 1.65 5.80 0.03 77 UPPERCASE_75_100 9861 1.64 5.78 0.02 78 SpammyFromTLD_01 9821 2.06 5.75 0.61 79 XM_H_Long_From01 9564 4.80 5.60 4.48 80 RELAYCOUNTRY_FR 9397 1.70 5.50 0.21 81 URI_NOVOWEL 9315 2.96 5.46 1.99 82 XM_B_SpammyTLD 9044 3.61 5.30 2.95 83 T_XMDrugObfuBody_14 8978 2.54 5.26 1.47 84 RCVD_IN_PSBL 8675 1.50 5.08 0.10 85 TR_XM_SPAMCOP 8437 1.55 4.94 0.22 86 BAYES_95 8087 2.98 4.74 2.29 87 TR_XM_DK_SendGrid 7956 3.20 4.66 2.63 88 XM_SPF_SoftFail 7888 2.42 4.62 1.56 89 RCVD_IN_MSPIKE_L5 7843 1.31 4.59 0.03 90 TR_Mismatch_TLD_01 7558 1.40 4.43 0.21 91 RCVD_IN_VALIDITY_RPBL 7510 1.27 4.40 0.04 92 T_REMOTE_IMAGE 7410 3.46 4.34 3.11 93 XM_OfRef6 6965 1.71 4.08 0.78 94 TooManyTo_001 6938 11.37 4.06 14.24 95 HTML_IMAGE_RATIO_04 6709 12.70 3.93 16.14 96 XM_DIRTYINTL 6681 1.27 3.91 0.24 97 KHOP_HELO_FCRDNS 6580 1.85 3.85 1.06 98 TR_XM_SpammyWords3 6550 1.39 3.84 0.43 99 HTML_IMAGE_RATIO_06 6483 4.90 3.80 5.34 100 XMNumbers 6442 3.12 3.77 2.86 101 XM_B_Investor 6298 1.94 3.69 1.26 102 RCVD_IN_MSPIKE_L3 6145 1.65 3.60 0.88 103 TR_XM_SpammyWords5 5907 1.80 3.46 1.14 104 SpammyFromTLD_02 5565 1.21 3.26 0.40 105 RCVD_IN_VALIDITY_SAFE 5351 3.85 3.13 4.13 106 XMDiploma_00 5130 6.97 3.00 8.53 107 URIBL_DBL_SPAM 5027 0.84 2.94 0.01 108 MIME_QP_LONG_LINE 5017 3.91 2.94 4.29 109 XMStrtUSub 4922 9.29 2.88 11.80 110 RCVD_IN_VALIDITY_CERTIFIED 4803 3.50 2.81 3.77 111 XM_DK_Undo_01 4702 1.71 2.75 1.31 112 T_XMDrugObfuBody_08 4643 1.45 2.72 0.95 113 XM_B_Unsub2 4581 1.51 2.68 1.05 114 HTML_IMAGE_RATIO_08 4572 1.94 2.68 1.65 115 HOSTED_IMG_DIRECT_MX 4368 0.72 2.56 0.00 116 TARINGANET_IMG_NOT_RCVD_TN 4362 0.72 2.55 0.00 117 BEBEE_IMG_NOT_RCVD_BB 4362 0.72 2.55 0.00 118 HOSTED_IMG_MULTI 4354 0.72 2.55 0.00 119 DKIM_INVALID 4296 2.03 2.52 1.84 120 TR_XM_MSPIKECOMBO2 4218 0.80 2.47 0.15 121 XM_CamelCaseFrm001 4164 1.64 2.44 1.33 122 RCVD_IN_IADB_LISTED 3940 3.61 2.31 4.13 123 USER_IN_DEF_DKIM_WL 3899 7.38 2.28 9.37 124 XM_UB99 3878 0.64 2.27 0.00 125 TM2_M_URI_OPT_OUT 3854 2.07 2.26 2.00 126 XMStockSpam_06 3848 1.17 2.25 0.74 127 T_TooManySym_01 3834 3.87 2.25 4.51 128 SUBJ_ALL_CAPS 3806 1.57 2.23 1.32 129 XM_UB60 3792 0.67 2.22 0.06 130 XM_B_COVIDMETA 3759 0.98 2.20 0.50 131 XMBody_17 3727 0.85 2.18 0.32 132 TR_XM_SB_Phish 3700 2.01 2.17 1.95 133 PDS_OTHER_BAD_TLD 3689 0.70 2.16 0.13 134 URI_HEX 3669 1.43 2.15 1.15 135 XM_B_SpammyWords4 3631 0.97 2.13 0.52 136 XMSubPhish11 3514 1.96 2.06 1.92 137 XMSexyCombo_01 3445 0.98 2.02 0.58 138 RCVD_IN_IADB_SPF 3296 3.19 1.93 3.68 139 XMHTML_After_End 3292 0.95 1.93 0.57 140 ANY_BOUNCE_MESSAGE 3260 3.19 1.91 3.69 141 BOUNCE_MESSAGE 3259 3.19 1.91 3.69 142 BOTNET_NORDNS 3247 0.54 1.90 0.01 143 MAILING_LIST_MULTI 3147 2.11 1.84 2.22 144 ALL_TRUSTED 3116 16.69 1.82 22.52 145 BAYES_40 3053 3.94 1.79 4.78 146 XMGenDplmaNmb 3045 6.38 1.78 8.18 147 TR_Symld_Words 3026 1.34 1.77 1.17 148 RCVD_IN_IADB_DK 3005 2.79 1.76 3.20 149 XM_UB999 2916 0.48 1.71 0.00 150 TR_XM_COVIDMETA1 2877 0.73 1.68 0.36 151 RCVD_IN_IADB_SENDERID 2876 2.86 1.68 3.32 152 XMSubMetaSxObfu_03 2841 0.71 1.66 0.33 153 T_FILL_THIS_FORM_SHORT 2781 0.97 1.63 0.71 154 XM_B_Crypto 2778 0.84 1.63 0.54 155 HTML_FONT_FACE_BAD 2777 11.89 1.63 15.91 156 HTML_IMAGE_ONLY_08 2743 0.52 1.61 0.09 157 T_XMDrugObfuBody_00 2739 0.84 1.60 0.54 158 XM_ProductURIs 2636 0.87 1.54 0.60 159 TR_XM_MaxSPIKE 2615 0.52 1.53 0.13 160 URI_NO_WWW_BIZ_CGI 2537 0.44 1.49 0.03 161 HTTPS_HTTP_MISMATCH 2520 0.79 1.48 0.52 162 XMBrknScrpt_02 2498 0.86 1.46 0.62 163 TR_XM_BayesRelay 2498 0.41 1.46 0.00 164 HTML_IMAGE_ONLY_32 2488 0.66 1.46 0.35 165 WANT_TO_ORDER 2462 0.41 1.44 0.00 166 TR_LOTS_OF_MONEY3 2453 0.53 1.44 0.18 167 BODY_URI_ONLY 2450 0.41 1.43 0.01 168 RCVD_IN_IADB_VOUCHED 2435 2.21 1.43 2.51 169 XM_H_Undi_Recip 2401 0.49 1.41 0.13 170 FROM_EXCESS_BASE64 2336 2.01 1.37 2.27 171 RELAYCOUNTRY_GB 2335 0.76 1.37 0.53 172 TR_XM_NoHeaderRelay 2333 0.46 1.37 0.11 173 URIBL_BLACK 2292 0.40 1.34 0.04 174 TR_XM_PHPDW 2289 0.62 1.34 0.34 175 XMBdyGiftCard01 2268 0.90 1.33 0.74 176 TR_XM_PHPForged 2253 0.59 1.32 0.30 177 RELAYCOUNTRY_DE 2244 0.52 1.31 0.21 178 RELAYCOUNTRY_RU 2232 0.38 1.31 0.01 179 XM_URI_RBL 2228 0.44 1.30 0.10 180 TR_XM_FormFill2 2196 0.58 1.29 0.31 181 URI_OPTOUT_3LD 2196 0.45 1.29 0.12 182 HK_RANDOM_REPLYTO 2194 0.42 1.28 0.08 183 XM_H_PHPOS 2172 0.57 1.27 0.30 184 RELAYCOUNTRY_AU 2134 0.52 1.25 0.24 185 URI_LONG_REPEAT 2114 0.36 1.24 0.01 186 HTML_TAG_BALANCE_BODY 2075 0.77 1.22 0.59 187 XM_H_Long_From02 2071 0.82 1.21 0.67 188 MIXED_CENTER_CASE 2070 0.34 1.21 0.00 189 T_XMDrugObfuBody_13 2067 0.35 1.21 0.01 190 MIXED_HREF_CASE 2042 0.34 1.20 0.00 191 T_HTML_TAG_BALANCE_CENTER 2034 0.35 1.19 0.02 192 MIXED_IMG_CASE 2019 0.34 1.18 0.00 193 MIXED_AREA_CASE 2017 0.33 1.18 0.00 194 JH_SPAMMY_HEADERS 1997 0.34 1.17 0.01 195 MIXED_FONT_CASE 1994 0.33 1.17 0.00 196 T_XMHurry_00 1994 0.67 1.17 0.47 197 XMMoneyMeta_00 1924 0.66 1.13 0.48 198 URI_GOOG_STO_SPAMMY 1924 0.32 1.13 0.00 199 XM_B_DNDMA 1908 0.65 1.12 0.46 200 URI_PHP_REDIR 1898 0.31 1.11 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 392633 91.73 95.65 90.19 2 XM_B_Unicode 329919 74.78 72.21 75.78 3 RELAYCOUNTRY_US 327951 75.78 76.93 75.33 4 DCC_CHECK_NEGATIVE 321728 60.28 25.54 73.90 5 DKIM_SIGNED 245031 64.11 84.05 56.28 6 BAYES_50 242072 52.05 42.99 55.60 7 XM_DK_Pass 240456 62.86 82.30 55.23 8 DKIM_VALID 237008 62.07 81.54 54.44 9 XM_B_Unicode3 214695 46.61 39.71 49.31 10 XM_B_SpammyWords 202223 50.22 59.83 46.45 11 DKIM_VALID_AU 185196 48.26 62.86 42.54 12 XMListUnsubscribeExists 163460 44.98 63.94 37.55 13 MIME_HTML_ONLY 125576 31.10 36.85 28.84 14 XMSubLong 119268 26.48 24.15 27.40 15 DCC_CHECK 113475 39.69 74.42 26.06 16 T_TM2_M_HEADER_IN_MSG 103158 23.80 24.06 23.69 17 RCVD_IN_MSPIKE_WL 102501 23.79 24.42 23.54 18 ALL_TRUSTED 98032 16.69 1.82 22.52 19 DKIM_VALID_EF 92362 23.09 27.88 21.22 20 HTML_FONT_LOW_CONTRAST 89499 22.89 28.83 20.56 21 FVGT_m_MULTI_ODD 81205 22.97 33.99 18.65 22 LOC_TINY_FONT_1 74705 22.20 35.03 17.16 23 HTML_IMAGE_RATIO_04 70278 12.70 3.93 16.14 24 RCVD_IN_MSPIKE_H2 70089 18.32 23.99 16.10 25 HTML_FONT_FACE_BAD 69278 11.89 1.63 15.91 26 XM_H_Trusted_IP 68524 11.31 0.00 15.74 27 T_KAM_HTML_FONT_INVALID 65297 18.17 26.24 15.00 28 TooManyTo_001 62002 11.37 4.06 14.24 29 XM_B_Unsub 61739 14.94 16.88 14.18 30 XM_B_SpammyWords2 60856 19.63 34.06 13.98 31 RCVD_IN_MSPIKE_H3 58047 14.51 17.52 13.33 32 BAYES_00 57911 9.73 0.62 13.30 33 TR_XM_BayesUnsub 55242 13.77 16.51 12.69 34 XMStrtUSub 51358 9.29 2.88 11.80 35 MPART_ALT_DIFF 43624 11.26 14.44 10.02 36 XM_Multi_Part_URI 42645 11.53 15.95 9.80 37 USER_IN_DEF_DKIM_WL 40803 7.38 2.28 9.37 38 RCVD_IN_MSPIKE_H4 38980 8.28 6.56 8.95 39 MIME_HTML_ONLY_MULTI 37171 8.55 8.60 8.54 40 XMDiploma_00 37125 6.97 3.00 8.53 41 XM_Body_Dirty_Words 36300 11.84 20.78 8.34 42 XMGenDplmaNmb 35605 6.38 1.78 8.18 43 XM_Evil_Numbers_Gen 33007 7.80 8.36 7.58 44 BAYES_60 32734 7.60 7.81 7.52 45 LotsOfNums_01 31360 7.12 6.92 7.20 46 LOTS_OF_MONEY 26868 8.59 14.77 6.17 47 UNPARSEABLE_RELAY 25790 7.98 13.23 5.92 48 XM_DKIMWhitelistDomains 25594 4.43 0.75 5.88 49 XM_DK_Undo_02 25127 15.64 40.81 5.77 50 IN_ZIMBRA_NJ_WHITELIST 23976 3.99 0.13 5.51 51 HTML_IMAGE_RATIO_06 23234 4.90 3.80 5.34 52 XMSubNoVowel 21780 3.85 0.90 5.00 53 BAYES_99 21243 12.70 32.64 4.88 54 TR_XM_UnparsRelay 20847 7.10 13.00 4.79 55 BAYES_40 20815 3.94 1.79 4.78 56 TR_XM_DK_Bayes 20739 3.55 0.45 4.76 57 HTML_IMAGE_RATIO_02 20583 6.30 10.32 4.73 58 TR_XM_DK_Bayes1 20317 3.48 0.44 4.67 59 BAYES_20 20086 3.62 1.09 4.61 60 T_TooManySym_01 19631 3.87 2.25 4.51 61 XM_H_Long_From01 19516 4.80 5.60 4.48 62 MIME_QP_LONG_LINE 18685 3.91 2.94 4.29 63 TR_XM_DKIM_Undo 18139 11.85 31.44 4.17 64 RCVD_IN_IADB_LISTED 17964 3.61 2.31 4.13 65 RCVD_IN_VALIDITY_SAFE 17963 3.85 3.13 4.13 66 TR_XM_DK_Bayes2 17888 3.06 0.37 4.11 67 XM_SendGrid 17372 4.87 7.11 3.99 68 BAYES_999 17103 9.97 25.38 3.93 69 RCVD_IN_VALIDITY_CERTIFIED 16401 3.50 2.81 3.77 70 XM_PDF 16287 2.95 0.93 3.74 71 ANY_BOUNCE_MESSAGE 16050 3.19 1.91 3.69 72 BOUNCE_MESSAGE 16049 3.19 1.91 3.69 73 RCVD_IN_IADB_SPF 16020 3.19 1.93 3.68 74 BOTNET_IPINHOSTNAME 15801 5.62 10.68 3.63 75 BAYES_80 15530 4.76 7.79 3.57 76 BAYES_05 14990 2.63 0.54 3.44 77 RCVD_IN_IADB_SENDERID 14438 2.86 1.68 3.32 78 TR_XM_SpammyWords4 14419 5.86 12.35 3.31 79 XM_B_SpammyWords3 14148 5.72 12.03 3.25 80 RCVD_IN_IADB_DK 13920 2.79 1.76 3.20 81 T_REMOTE_IMAGE 13538 3.46 4.34 3.11 82 RELAYCOUNTRY_META 12875 9.02 24.46 2.96 83 XM_B_SpammyTLD 12843 3.61 5.30 2.95 84 XM_UncommonTLD01 12623 5.07 10.60 2.90 85 XMNumbers 12451 3.12 3.77 2.86 86 TR_XM_PhishingBody 12354 4.33 8.14 2.84 87 XMSubMetaSx_00 11636 3.91 7.06 2.67 88 T_TooManySym_02 11477 2.10 0.72 2.64 89 TR_XM_DK_SendGrid 11432 3.20 4.66 2.63 90 RCVD_IN_IADB_VOUCHED 10940 2.21 1.43 2.51 91 XM_B_Phish_Phrases 10581 3.60 6.59 2.43 92 FSL_BULK_SIG 10434 6.50 16.97 2.40 93 XMSexyCombo_05 10072 4.92 11.58 2.31 94 XMSubLongNoVowel 10058 1.73 0.24 2.31 95 BAYES_95 9977 2.98 4.74 2.29 96 XMSubGarbage 9930 1.69 0.18 2.28 97 FROM_EXCESS_BASE64 9874 2.01 1.37 2.27 98 MAILING_LIST_MULTI 9647 2.11 1.84 2.22 99 TM2_M_URI_OPT_OUT 8718 2.07 2.26 2.00 100 URI_NOVOWEL 8648 2.96 5.46 1.99 101 TR_XM_SB_Phish 8498 2.01 2.17 1.95 102 XMSubPhish11 8350 1.96 2.06 1.92 103 MIME_HTML_MOSTLY 8165 3.17 6.46 1.88 104 DKIM_INVALID 8023 2.03 2.52 1.84 105 TooManyTo_002 7950 1.50 0.67 1.83 106 HTML_MIME_NO_HTML_TAG 7683 3.86 9.19 1.76 107 RCVD_IN_IADB_OPTIN 7327 1.45 0.87 1.68 108 HTML_IMAGE_RATIO_08 7197 1.94 2.68 1.65 109 TR_DCC_Bayes_99 7172 7.66 22.98 1.65 110 XM_B_Phish66 7125 2.84 5.92 1.64 111 HELO_NODOT 6919 1.35 0.73 1.59 112 HELO_NO_DOMAIN 6917 1.34 0.72 1.59 113 XM_SPF_SoftFail 6779 2.42 4.62 1.56 114 INVALID_MSGID 6587 1.12 0.12 1.51 115 T_XMDrugObfuBody_14 6397 2.54 5.26 1.47 116 TVD_RCVD_IP 6304 1.10 0.22 1.45 117 IN_HORDE_ADDRESS_BOOK 6253 1.08 0.17 1.44 118 SHORTENED_URL_HREF 5809 0.97 0.04 1.33 119 XM_CamelCaseFrm001 5805 1.64 2.44 1.33 120 TO_MALFORMED 5792 0.96 0.02 1.33 121 SUBJ_ALL_CAPS 5730 1.57 2.23 1.32 122 TR_XM_SpammyRelay 5704 4.22 11.64 1.31 123 XM_DK_Undo_01 5692 1.71 2.75 1.31 124 XM_B_Investor 5483 1.94 3.69 1.26 125 RCVD_IN_MSPIKE_H5 5474 1.00 0.33 1.26 126 BOTNET 5454 4.70 13.49 1.25 127 TooManyTo_003 5245 1.02 0.55 1.20 128 TR_Symld_Words 5085 1.34 1.77 1.17 129 XM_E_Blogspot 5070 0.87 0.13 1.16 130 URI_HEX 5024 1.43 2.15 1.15 131 TR_XM_SpammyWords5 4975 1.80 3.46 1.14 132 XMGappySubj_01 4847 0.83 0.11 1.11 133 KHOP_HELO_FCRDNS 4603 1.85 3.85 1.06 134 XM_B_Unsub2 4575 1.51 2.68 1.05 135 UNTRUSTED_Relay 4468 4.92 14.85 1.03 136 XM_GoogleGroups 4422 2.50 6.27 1.02 137 RCVD_IN_MSPIKE_BL 4357 3.15 8.61 1.00 138 TR_XM_MSPIKECOMBO 4292 3.12 8.55 0.99 139 XMCapTrack 4236 0.82 0.45 0.97 140 T_XMDrugObfuBody_08 4157 1.45 2.72 0.95 141 XMBSHREFv2 4070 0.74 0.25 0.93 142 TM2_M_VERY_LONG_WORD 4013 3.10 8.66 0.92 143 RCVD_IN_MSPIKE_L3 3843 1.65 3.60 0.88 144 TR_XM_SpammyWords2 3819 3.99 11.93 0.88 145 RELAYCOUNTRY_CA 3755 2.40 6.31 0.86 146 TooManyTo_004 3621 0.72 0.44 0.83 147 RCVD_IN_RP_SAFE 3521 0.76 0.65 0.81 148 TVD_SPACE_RATIO 3459 0.69 0.43 0.79 149 XM_OfRef6 3406 1.71 4.08 0.78 150 XMStockSpam_06 3242 1.17 2.25 0.74 151 XMBdyGiftCard01 3212 0.90 1.33 0.74 152 RCVD_IN_RP_CERTIFIED 3210 0.69 0.56 0.74 153 T_FILL_THIS_FORM_SHORT 3105 0.97 1.63 0.71 154 DKIM_ADSP_CUSTOM_MED 3073 0.76 0.90 0.71 155 TR_MetaPhish_Combo_01 2955 0.75 0.94 0.68 156 XM_H_Long_From02 2916 0.82 1.21 0.67 157 TooManyTo_005 2835 0.54 0.26 0.65 158 XMSubMetaI_00 2799 0.72 0.91 0.64 159 RCVD_IN_BL_SPAMCOP_NET 2751 3.20 9.73 0.63 160 XM_UB50 2722 2.66 7.86 0.63 161 XMBrknScrpt_02 2718 0.86 1.46 0.62 162 SpammyFromTLD_01 2668 2.06 5.75 0.61 163 XM_ProductURIs 2608 0.87 1.54 0.60 164 T_TooManySym_03 2604 0.52 0.33 0.60 165 HTML_TAG_BALANCE_BODY 2576 0.77 1.22 0.59 166 XMPhish30 2517 0.70 1.01 0.58 167 XMSexyCombo_01 2508 0.98 2.02 0.58 168 XMBody_95 2489 0.48 0.25 0.57 169 XMHTML_After_End 2482 0.95 1.93 0.57 170 XMLngstWrd_00 2350 2.16 6.28 0.54 171 FROM_GOV_DKIM_AU 2343 0.47 0.29 0.54 172 T_XMDrugObfuBody_00 2343 0.84 1.60 0.54 173 XM_B_Crypto 2332 0.84 1.63 0.54 174 XM_B_COPY_HTML 2331 0.55 0.58 0.54 175 RELAYCOUNTRY_GB 2289 0.76 1.37 0.53 176 HTTPS_HTTP_MISMATCH 2280 0.79 1.48 0.52 177 XM_B_SpammyWords4 2268 0.97 2.13 0.52 178 XM_ShortIntro_01 2267 0.51 0.48 0.52 179 MSGID_NOFQDN1 2264 0.37 0.00 0.52 180 MY_SERVERS_FOUND 2207 0.40 0.11 0.51 181 HTML_IMAGE_ONLY_20 2195 0.49 0.46 0.50 182 T_OBFU_PDF_ATTACH 2193 0.41 0.16 0.50 183 XM_H_PHPMailer 2190 0.52 0.58 0.50 184 XM_B_COVIDMETA 2175 0.98 2.20 0.50 185 XMLngstWrd_01 2154 2.11 6.23 0.49 186 XMMoneyMeta_00 2103 0.66 1.13 0.48 187 T_XMHurry_00 2049 0.67 1.17 0.47 188 XM_B_DNDMA 2022 0.65 1.12 0.46 189 SHORT_HELO_AND_INLINE_IMAGE 2018 0.35 0.07 0.46 190 RCVD_IN_SORBS_DUL 1972 0.37 0.15 0.45 191 URI_TRY_3LD 1971 0.60 0.96 0.45 192 XM_D_tchamptons_WL 1956 0.32 0.00 0.45 193 NML_ADSP_CUSTOM_MED 1927 0.53 0.76 0.44 194 TR_MSPIKEBAYES00 1906 0.32 0.01 0.44 195 XMNoVowels 1905 0.41 0.34 0.44 196 MPART_ALT_DIFF_COUNT 1902 0.57 0.92 0.44 197 TR_XM_SpammyWords3 1888 1.39 3.84 0.43 198 XMLngstWrd_02 1867 2.02 6.08 0.43 199 XMHTMLBadTable_001 1819 0.49 0.68 0.42 200 TM2_M_A_HREF_HREF 1780 0.51 0.75 0.41 ----------------------------------------------------------------------