Email: 284018 Autolearn: 0 AvgScore: 3.48 AvgScanTime: 1.33 sec Spam: 94537 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.44 sec Ham: 189481 Autolearn: 0 AvgScore: -1.86 AvgScanTime: 1.27 sec Time Spent Running SA: 104.56 hours Time Spent Processing Spam: 37.77 hours Time Spent Processing Ham: 66.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88738 85.89 93.87 81.91 2 DKIM_SIGNED 84314 81.14 89.19 77.13 3 XM_DK_Pass 82813 79.79 87.60 75.89 4 DKIM_VALID 81713 79.03 86.43 75.34 5 XM_B_Unicode 80161 74.99 84.79 70.11 6 RELAYCOUNTRY_US 77587 81.74 82.07 81.58 7 DCC_CHECK 65846 47.54 69.65 36.51 8 XM_B_SpammyWords 64362 52.76 68.08 45.12 9 DKIM_VALID_AU 63288 63.80 66.95 62.23 10 XMListUnsubscribeExists 62899 57.92 66.53 53.63 11 XM_DK_Undo_02 47934 22.96 50.70 9.11 12 XM_B_Unicode3 44312 44.53 46.87 43.36 13 BAYES_99 39776 19.06 42.07 7.58 14 TR_XM_DKIM_Undo 39003 17.80 41.26 6.10 15 XM_B_SpammyWords2 36448 26.24 38.55 20.10 16 LOC_TINY_FONT_1 35246 30.28 37.28 26.78 17 BAYES_999 32473 15.54 34.35 6.16 18 HTML_FONT_LOW_CONTRAST 32214 30.20 34.08 28.26 19 BAYES_50 31556 47.12 33.38 53.97 20 DKIM_VALID_EF 30617 31.25 32.39 30.68 21 MIME_HTML_ONLY 30389 24.85 32.15 21.21 22 FVGT_m_MULTI_ODD 30136 27.32 31.88 25.04 23 DCC_CHECK_NEGATIVE 28668 52.44 30.32 63.47 24 TR_DCC_Bayes_99 27748 11.52 29.35 2.62 25 T_KAM_HTML_FONT_INVALID 27525 22.13 29.12 18.65 26 RCVD_IN_MSPIKE_H2 23928 22.33 25.31 20.84 27 RCVD_IN_MSPIKE_WL 22896 29.38 24.22 31.95 28 XM_Body_Dirty_Words 21244 15.26 22.47 11.66 29 RELAYCOUNTRY_META 19482 9.24 20.61 3.57 30 T_TM2_M_HEADER_IN_MSG 18249 21.77 19.30 23.00 31 XMSubLong 17546 20.92 18.56 22.10 32 XM_B_Unsub 16992 12.16 17.97 9.27 33 UNPARSEABLE_RELAY 16844 11.96 17.82 9.03 34 TR_XM_BayesUnsub 16658 10.90 17.62 7.55 35 TR_XM_UnparsRelay 16499 10.66 17.45 7.27 36 XM_Multi_Part_URI 15946 15.15 16.87 14.29 37 RCVD_IN_MSPIKE_H3 14373 16.32 15.20 16.88 38 TR_XM_SpammyWords2 14336 6.24 15.16 1.78 39 LOTS_OF_MONEY 13411 9.63 14.19 7.36 40 XM_B_SpammyWords3 12076 7.53 12.77 4.91 41 TR_XM_SpammyRelay 11723 5.35 12.40 1.84 42 FSL_BULK_SIG 11675 6.04 12.35 2.90 43 BOTNET_IPINHOSTNAME 11578 8.72 12.25 6.96 44 RCVD_IN_BL_SPAMCOP_NET 11479 4.66 12.14 0.93 45 TR_XM_SpammyWords4 10941 6.80 11.57 4.42 46 BOTNET 10115 4.74 10.70 1.77 47 XMSexyCombo_05 10112 6.09 10.70 3.79 48 XM_SendGrid 9178 7.47 9.71 6.36 49 XM_Evil_Numbers_Gen 8641 8.85 9.14 8.70 50 RELAYCOUNTRY_CA 8529 3.97 9.02 1.45 51 HTML_IMAGE_RATIO_02 8260 7.59 8.74 7.02 52 RCVD_IN_MSPIKE_H4 8182 11.49 8.65 12.91 53 BAYES_80 8153 6.41 8.62 5.30 54 BAYES_60 7524 10.78 7.96 12.19 55 XM_UncommonTLD01 7383 5.73 7.81 4.69 56 UNTRUSTED_Relay 7350 3.46 7.77 1.30 57 XMSubMetaSx_00 6647 4.84 7.03 3.74 58 TR_XM_SPAMCOP 6549 2.51 6.93 0.30 59 TR_XM_DK_SendGrid 6330 5.16 6.70 4.39 60 TR_XM_PhishingBody 6300 4.12 6.66 2.86 61 RCVD_IN_MSPIKE_BL 5917 2.87 6.26 1.19 62 TR_XM_MSPIKECOMBO 5816 2.84 6.15 1.18 63 XM_H_Long_From01 5607 5.27 5.93 4.94 64 RCVD_IN_VALIDITY_SAFE 5244 6.12 5.55 6.41 65 XM_B_Phish_Phrases 5127 4.86 5.42 4.58 66 MPART_ALT_DIFF 5126 5.00 5.42 4.80 67 LotsOfNums_01 5081 7.98 5.37 9.28 68 BAYES_95 4783 3.95 5.06 3.39 69 RCVD_IN_VALIDITY_CERTIFIED 4638 5.32 4.91 5.53 70 HTML_IMAGE_RATIO_04 4602 4.85 4.87 4.84 71 T_XMDrugObfuBody_14 4338 2.77 4.59 1.86 72 TooManyTo_001 4291 5.86 4.54 6.53 73 SpammyFromTLD_01 4164 1.79 4.40 0.48 74 XM_B_SpammyTLD 4106 3.05 4.34 2.41 75 XM_DIRTYINTL 4029 1.72 4.26 0.46 76 XM_SPF_SoftFail 4025 2.38 4.26 1.45 77 TM2_M_VERY_LONG_WORD 3727 2.28 3.94 1.45 78 XMStrtUSub 3718 5.25 3.93 5.91 79 XM_B_Phish66 3660 2.31 3.87 1.52 80 T_FILL_THIS_FORM_SHORT 3619 1.69 3.83 0.62 81 T_REMOTE_IMAGE 3579 4.08 3.79 4.23 82 XMBody_17 3521 1.72 3.72 0.72 83 TR_XM_SpammyWords5 3377 1.98 3.57 1.18 84 HTML_MIME_NO_HTML_TAG 3346 2.25 3.54 1.61 85 T_XMHurry_00 3335 1.58 3.53 0.60 86 XM_B_Investor 3220 2.18 3.41 1.57 87 RCVD_IN_MSPIKE_L3 3179 1.86 3.36 1.11 88 MIME_HTML_MOSTLY 3152 2.77 3.33 2.49 89 HTML_IMAGE_RATIO_06 3135 3.37 3.32 3.39 90 XM_OfRef6 3128 1.66 3.31 0.84 91 XM_UB50 3090 1.57 3.27 0.72 92 MIME_HTML_ONLY_MULTI 3078 3.13 3.26 3.07 93 XMNumbers 3000 4.20 3.17 4.71 94 USER_IN_DEF_DKIM_WL 2959 12.38 3.13 16.99 95 T_XMDrugObfuBody_08 2913 1.75 3.08 1.09 96 RCVD_IN_VALIDITY_RPBL 2903 1.07 3.07 0.07 97 T_TooManySym_01 2855 6.21 3.02 7.80 98 DKIM_INVALID 2601 2.11 2.75 1.79 99 TM2_M_URI_OPT_OUT 2596 2.59 2.75 2.51 100 XM_B_SpammyWords4 2540 1.48 2.69 0.88 101 XM_CamelCaseFrm001 2532 2.27 2.68 2.06 102 XM_DK_Undo_01 2450 1.82 2.59 1.44 103 RCVD_IN_MSPIKE_L5 2450 0.88 2.59 0.02 104 TR_LOTS_OF_MONEY3 2429 1.14 2.57 0.42 105 TR_XM_MSPIKECOMBO2 2409 1.00 2.55 0.23 106 TR_XM_BayesRelay 2365 0.84 2.50 0.01 107 BOTNET_NORDNS 2353 0.84 2.49 0.02 108 TR_XM_FormFill 2346 0.83 2.48 0.01 109 TR_XM_SpammyWords3 2339 1.18 2.47 0.53 110 RELAYCOUNTRY_RU 2321 0.84 2.46 0.03 111 RCVD_IN_PSBL 2315 0.90 2.45 0.12 112 XMSexyCombo_01 2230 1.16 2.36 0.56 113 HK_RANDOM_REPLYTO 2218 1.01 2.35 0.35 114 XM_B_Unsub2 2218 1.46 2.35 1.02 115 SUBJ_ALL_CAPS 2185 1.47 2.31 1.05 116 XM_H_PHPMailer 2097 1.18 2.22 0.66 117 HTML_IMAGE_RATIO_08 2094 1.93 2.22 1.78 118 PDS_OTHER_BAD_TLD 2070 1.07 2.19 0.52 119 FROM_EXCESS_BASE64 2000 2.98 2.12 3.41 120 XMBdyGiftCard01 1932 1.53 2.04 1.28 121 KHOP_HELO_FCRDNS 1886 1.49 1.99 1.24 122 XMBrknScrpt_02 1860 1.13 1.97 0.72 123 URI_NOVOWEL 1790 2.26 1.89 2.44 124 TR_Symld_Words 1720 1.99 1.82 2.08 125 XMHTML_After_End 1710 1.04 1.81 0.65 126 TR_XM_PHPDW 1691 0.95 1.79 0.54 127 URI_TRY_3LD 1688 1.09 1.79 0.74 128 TR_XM_MaxSPIKE 1683 0.73 1.78 0.21 129 XMSubMetaI_00 1670 1.24 1.77 0.97 130 MIME_QP_LONG_LINE 1662 3.46 1.76 4.30 131 TR_XM_PHPForged 1633 0.87 1.73 0.44 132 RCVD_IN_IADB_LISTED 1626 3.38 1.72 4.21 133 XMDiploma_00 1609 1.40 1.70 1.25 134 TR_XM_FormFill2 1605 0.86 1.70 0.44 135 HTML_TAG_BALANCE_BODY 1597 1.20 1.69 0.95 136 ALL_TRUSTED 1595 11.11 1.69 15.82 137 XM_H_PHPOS 1590 0.84 1.68 0.43 138 TR_XM_SB_Phish 1579 1.67 1.67 1.67 139 XM_UB99 1574 0.56 1.66 0.00 140 XM_H_Long_From02 1570 1.19 1.66 0.96 141 XMStockSpam_06 1541 1.10 1.63 0.83 142 XMSubPhish11 1514 1.64 1.60 1.66 143 URIBL_DBL_SPAM 1510 0.55 1.60 0.03 144 MPART_ALT_DIFF_COUNT 1463 1.11 1.55 0.89 145 SpammyFromTLD_02 1456 0.82 1.54 0.45 146 MAILING_LIST_MULTI 1430 2.44 1.51 2.91 147 TR_XM_COVIDMETA1 1338 0.61 1.42 0.20 148 XM_H_Undi_Recip 1329 0.57 1.41 0.15 149 DIET_1 1323 0.72 1.40 0.38 150 XM_URI_RBL 1317 0.55 1.39 0.14 151 URI_PHISH 1307 0.47 1.38 0.01 152 RCVD_IN_IADB_SPF 1305 2.96 1.38 3.75 153 URI_HEX 1277 1.14 1.35 1.03 154 XM_ProductURIs 1275 1.06 1.35 0.91 155 DRUGS_ERECTILE 1219 0.44 1.29 0.01 156 XMSubMetaD_00 1202 0.47 1.27 0.07 157 TVD_SPACE_RATIO 1195 1.50 1.26 1.61 158 TR_BOTNET_NEGATE 1194 0.70 1.26 0.42 159 RELAYCOUNTRY_AU 1186 0.60 1.25 0.28 160 RCVD_IN_IADB_DK 1180 2.61 1.25 3.30 161 BODY_URI_ONLY 1176 0.42 1.24 0.01 162 XMSubNoVowel 1156 1.12 1.22 1.07 163 RCVD_IN_RP_SAFE 1154 1.25 1.22 1.26 164 HTML_FONT_FACE_BAD 1151 1.07 1.22 1.00 165 XM_UB999 1147 0.41 1.21 0.00 166 XMSubMetaD_03 1143 0.56 1.21 0.24 167 XM_B_DNDMA 1143 0.62 1.21 0.32 168 NAME_EMAIL_DIFF 1142 0.48 1.21 0.12 169 RCVD_IN_IADB_SENDERID 1142 2.67 1.21 3.39 170 RCVD_IN_IADB_VOUCHED 1117 2.16 1.18 2.65 171 VFY_ACCT_NORDNS 1091 0.39 1.15 0.01 172 XMSubMetaD_01 1076 0.38 1.14 0.00 173 T_XMDrugObfuBody_00 1073 0.82 1.14 0.67 174 BAYES_40 1068 3.05 1.13 4.01 175 XMSubMetaD_02 1061 0.37 1.12 0.00 176 TR_Mismatch_TLD_02 1058 0.43 1.12 0.09 177 XM_B_DynamicLink 1058 0.40 1.12 0.05 178 SUBJ_BUY 1056 0.40 1.12 0.05 179 XM_UB60 1044 0.41 1.10 0.06 180 SUBJECT_DRUG_GAP_C 1043 0.37 1.10 0.00 181 XMHTMLBadTable_001 1041 0.89 1.10 0.78 182 SERGIO_SUBJECT_VIAGRA01 1032 0.36 1.09 0.00 183 SUBJECT_DRUG_GAP_L 1032 0.36 1.09 0.00 184 LONG_JUNK_URI 1031 0.38 1.09 0.03 185 HTTPS_HTTP_MISMATCH 1029 0.89 1.09 0.79 186 PDS_FROM_2_EMAILS 1022 0.36 1.08 0.00 187 TR_Caps_n_Bayes_99 1012 0.43 1.07 0.11 188 FROM_2_EMAILS_SHORT 1008 0.35 1.07 0.00 189 XMPhish30 999 0.82 1.06 0.70 190 RCVD_IN_RP_CERTIFIED 998 1.09 1.06 1.11 191 XMClaimOffer 997 0.53 1.05 0.27 192 TR_XM_NoHeaderRelay 996 0.42 1.05 0.11 193 XMSexyCombo_04 994 0.43 1.05 0.12 194 XM_B_COVIDMETA 989 0.98 1.05 0.95 195 DKIM_ADSP_CUSTOM_MED 966 0.95 1.02 0.92 196 TR_MetaPhish_Combo_01 966 0.95 1.02 0.91 197 XM_Nigeria_01 955 0.37 1.01 0.05 198 PDS_TO_EQ_FROM_NAME 948 0.33 1.00 0.00 199 XM_B_REG_HTML 935 0.59 0.99 0.39 200 THIS_AD 928 0.60 0.98 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 155195 85.89 93.87 81.91 2 RELAYCOUNTRY_US 154577 81.74 82.07 81.58 3 DKIM_SIGNED 146143 81.14 89.19 77.13 4 XM_DK_Pass 143794 79.79 87.60 75.89 5 DKIM_VALID 142746 79.03 86.43 75.34 6 XM_B_Unicode 132838 74.99 84.79 70.11 7 DCC_CHECK_NEGATIVE 120263 52.44 30.32 63.47 8 DKIM_VALID_AU 117905 63.80 66.95 62.23 9 BAYES_50 102269 47.12 33.38 53.97 10 XMListUnsubscribeExists 101616 57.92 66.53 53.63 11 XM_B_SpammyWords 85500 52.76 68.08 45.12 12 XM_B_Unicode3 82156 44.53 46.87 43.36 13 DCC_CHECK 69180 47.54 69.65 36.51 14 RCVD_IN_MSPIKE_WL 60546 29.38 24.22 31.95 15 DKIM_VALID_EF 58135 31.25 32.39 30.68 16 HTML_FONT_LOW_CONTRAST 53555 30.20 34.08 28.26 17 LOC_TINY_FONT_1 50744 30.28 37.28 26.78 18 FVGT_m_MULTI_ODD 47449 27.32 31.88 25.04 19 T_TM2_M_HEADER_IN_MSG 43582 21.77 19.30 23.00 20 XMSubLong 41875 20.92 18.56 22.10 21 MIME_HTML_ONLY 40185 24.85 32.15 21.21 22 RCVD_IN_MSPIKE_H2 39485 22.33 25.31 20.84 23 XM_B_SpammyWords2 38090 26.24 38.55 20.10 24 T_KAM_HTML_FONT_INVALID 35339 22.13 29.12 18.65 25 USER_IN_DEF_DKIM_WL 32199 12.38 3.13 16.99 26 RCVD_IN_MSPIKE_H3 31981 16.32 15.20 16.88 27 ALL_TRUSTED 29967 11.11 1.69 15.82 28 XM_Multi_Part_URI 27072 15.15 16.87 14.29 29 RCVD_IN_MSPIKE_H4 24461 11.49 8.65 12.91 30 BAYES_60 23094 10.78 7.96 12.19 31 XM_Body_Dirty_Words 22097 15.26 22.47 11.66 32 XM_DKIMWhitelistDomains 21689 7.67 0.10 11.45 33 LotsOfNums_01 17592 7.98 5.37 9.28 34 XM_B_Unsub 17557 12.16 17.97 9.27 35 XM_DK_Undo_02 17271 22.96 50.70 9.11 36 UNPARSEABLE_RELAY 17117 11.96 17.82 9.03 37 BAYES_00 16605 6.02 0.51 8.76 38 XM_Evil_Numbers_Gen 16488 8.85 9.14 8.70 39 T_TooManySym_01 14772 6.21 3.02 7.80 40 BAYES_99 14363 19.06 42.07 7.58 41 TR_XM_BayesUnsub 14308 10.90 17.62 7.55 42 LOTS_OF_MONEY 13944 9.63 14.19 7.36 43 TR_XM_UnparsRelay 13781 10.66 17.45 7.27 44 HTML_IMAGE_RATIO_02 13298 7.59 8.74 7.02 45 BOTNET_IPINHOSTNAME 13194 8.72 12.25 6.96 46 TooManyTo_001 12364 5.86 4.54 6.53 47 RCVD_IN_VALIDITY_SAFE 12151 6.12 5.55 6.41 48 XM_SendGrid 12048 7.47 9.71 6.36 49 TR_XM_DK_Bayes 11915 4.34 0.44 6.29 50 TR_XM_DK_Bayes1 11791 4.30 0.44 6.22 51 BAYES_999 11668 15.54 34.35 6.16 52 IN_ZIMBRA_NJ_WHITELIST 11645 4.14 0.12 6.15 53 TR_XM_DKIM_Undo 11554 17.80 41.26 6.10 54 XMStrtUSub 11199 5.25 3.93 5.91 55 TR_XM_DK_Bayes2 10684 3.86 0.31 5.64 56 RCVD_IN_VALIDITY_CERTIFIED 10477 5.32 4.91 5.53 57 BAYES_80 10047 6.41 8.62 5.30 58 XM_H_Long_From01 9364 5.27 5.93 4.94 59 XM_B_SpammyWords3 9310 7.53 12.77 4.91 60 HTML_IMAGE_RATIO_04 9170 4.85 4.87 4.84 61 MPART_ALT_DIFF 9086 5.00 5.42 4.80 62 T_TooManySym_02 8973 3.44 0.83 4.74 63 XMNumbers 8916 4.20 3.17 4.71 64 XM_UncommonTLD01 8894 5.73 7.81 4.69 65 XM_B_Phish_Phrases 8680 4.86 5.42 4.58 66 TR_XM_SpammyWords4 8379 6.80 11.57 4.42 67 TR_XM_DK_SendGrid 8319 5.16 6.70 4.39 68 MIME_QP_LONG_LINE 8154 3.46 1.76 4.30 69 T_REMOTE_IMAGE 8019 4.08 3.79 4.23 70 RCVD_IN_IADB_LISTED 7975 3.38 1.72 4.21 71 BAYES_40 7594 3.05 1.13 4.01 72 XMSexyCombo_05 7181 6.09 10.70 3.79 73 RCVD_IN_IADB_SPF 7115 2.96 1.38 3.75 74 XMSubMetaSx_00 7094 4.84 7.03 3.74 75 INVALID_MSGID 7024 2.53 0.17 3.71 76 XM_PDF 6776 2.54 0.46 3.58 77 RELAYCOUNTRY_META 6768 9.24 20.61 3.57 78 FROM_EXCESS_BASE64 6455 2.98 2.12 3.41 79 RCVD_IN_IADB_SENDERID 6428 2.67 1.21 3.39 80 HTML_IMAGE_RATIO_06 6428 3.37 3.32 3.39 81 BAYES_95 6425 3.95 5.06 3.39 82 RCVD_IN_IADB_DK 6247 2.61 1.25 3.30 83 MIME_HTML_ONLY_MULTI 5812 3.13 3.26 3.07 84 TO_MALFORMED 5786 2.04 0.02 3.05 85 TVD_RCVD_IP 5774 2.18 0.44 3.05 86 BAYES_20 5544 2.21 0.77 2.93 87 MAILING_LIST_MULTI 5511 2.44 1.51 2.91 88 FSL_BULK_SIG 5491 6.04 12.35 2.90 89 BOUNCE_MESSAGE 5431 2.16 0.75 2.87 90 ANY_BOUNCE_MESSAGE 5431 2.16 0.75 2.87 91 TR_XM_PhishingBody 5410 4.12 6.66 2.86 92 XM_H_Trusted_IP 5108 1.80 0.00 2.70 93 RCVD_IN_IADB_VOUCHED 5013 2.16 1.18 2.65 94 TR_DCC_Bayes_99 4957 11.52 29.35 2.62 95 TM2_M_URI_OPT_OUT 4749 2.59 2.75 2.51 96 MIME_HTML_MOSTLY 4717 2.77 3.33 2.49 97 URI_NOVOWEL 4617 2.26 1.89 2.44 98 XM_B_SpammyTLD 4565 3.05 4.34 2.41 99 IN_HORDE_ADDRESS_BOOK 4117 1.54 0.28 2.17 100 RCVD_IN_MSPIKE_H5 4104 1.57 0.36 2.17 101 XM_GoogleGroups 3976 1.63 0.69 2.10 102 TR_Symld_Words 3933 1.99 1.82 2.08 103 XM_CamelCaseFrm001 3907 2.27 2.68 2.06 104 XMGappySubj_01 3777 1.39 0.17 1.99 105 XMBSHREFv2 3650 1.34 0.17 1.93 106 T_XMDrugObfuBody_14 3520 2.77 4.59 1.86 107 BAYES_05 3486 1.38 0.46 1.84 108 TR_XM_SpammyRelay 3480 5.35 12.40 1.84 109 DKIM_INVALID 3397 2.11 2.75 1.79 110 HTML_IMAGE_RATIO_08 3377 1.93 2.22 1.78 111 TR_XM_SpammyWords2 3376 6.24 15.16 1.78 112 RCVD_IN_IADB_OPTIN 3369 1.43 0.73 1.78 113 BOTNET 3353 4.74 10.70 1.77 114 TR_XM_SB_Phish 3166 1.67 1.67 1.67 115 XMSubPhish11 3140 1.64 1.60 1.66 116 TVD_SPACE_RATIO 3060 1.50 1.26 1.61 117 HTML_MIME_NO_HTML_TAG 3055 2.25 3.54 1.61 118 XM_B_Investor 2973 2.18 3.41 1.57 119 XM_B_Phish66 2888 2.31 3.87 1.52 120 RELAYCOUNTRY_CA 2753 3.97 9.02 1.45 121 TM2_M_VERY_LONG_WORD 2752 2.28 3.94 1.45 122 XM_SPF_SoftFail 2741 2.38 4.26 1.45 123 XM_DK_Undo_01 2733 1.82 2.59 1.44 124 UNTRUSTED_Relay 2469 3.46 7.77 1.30 125 TooManyTo_002 2440 1.06 0.59 1.29 126 XMBdyGiftCard01 2417 1.53 2.04 1.28 127 RCVD_IN_RP_SAFE 2391 1.25 1.22 1.26 128 XMDiploma_00 2374 1.40 1.70 1.25 129 MSGID_NOFQDN1 2361 0.84 0.01 1.25 130 KHOP_HELO_FCRDNS 2357 1.49 1.99 1.24 131 XMBody_95 2289 0.86 0.15 1.21 132 RCVD_IN_MSPIKE_BL 2246 2.87 6.26 1.19 133 TR_XM_MSPIKECOMBO 2245 2.84 6.15 1.18 134 TR_XM_SpammyWords5 2237 1.98 3.57 1.18 135 RCVD_IN_RP_CERTIFIED 2106 1.09 1.06 1.11 136 RCVD_IN_MSPIKE_L3 2101 1.86 3.36 1.11 137 T_XMDrugObfuBody_08 2071 1.75 3.08 1.09 138 XMSubNoVowel 2036 1.12 1.22 1.07 139 T_TooManySym_03 2000 0.82 0.34 1.06 140 SUBJ_ALL_CAPS 1992 1.47 2.31 1.05 141 TVD_PH_BODY_ACCOUNTS_PRE 1975 0.81 0.34 1.04 142 URI_HEX 1959 1.14 1.35 1.03 143 XM_B_Unsub2 1934 1.46 2.35 1.02 144 HTML_FONT_FACE_BAD 1892 1.07 1.22 1.00 145 XMLngstWrd_00 1855 0.91 0.76 0.98 146 XMSubMetaI_00 1843 1.24 1.77 0.97 147 XM_H_Long_From02 1820 1.19 1.66 0.96 148 HTML_TAG_BALANCE_BODY 1808 1.20 1.69 0.95 149 XM_B_COVIDMETA 1798 0.98 1.05 0.95 150 RCVD_IN_BL_SPAMCOP_NET 1764 4.66 12.14 0.93 151 DKIM_ADSP_CUSTOM_MED 1742 0.95 1.02 0.92 152 TR_MetaPhish_Combo_01 1731 0.95 1.02 0.91 153 XM_ProductURIs 1724 1.06 1.35 0.91 154 XMLngstWrd_01 1700 0.82 0.67 0.90 155 XM_B_COPY_HTML 1692 0.85 0.76 0.89 156 MPART_ALT_DIFF_COUNT 1687 1.11 1.55 0.89 157 XM_B_SpammyWords4 1667 1.48 2.69 0.88 158 TooManyTo_003 1645 0.75 0.52 0.87 159 XM_OfRef6 1592 1.66 3.31 0.84 160 XMStockSpam_06 1569 1.10 1.63 0.83 161 XMSubGiftCard1 1537 0.57 0.10 0.81 162 HTML_IMAGE_ONLY_20 1507 0.62 0.27 0.80 163 HTTPS_HTTP_MISMATCH 1490 0.89 1.09 0.79 164 XMLngstWrd_02 1474 0.71 0.58 0.78 165 XMHTMLBadTable_001 1473 0.89 1.10 0.78 166 XMSubGiftCard2 1430 0.52 0.05 0.75 167 URI_TRY_3LD 1411 1.09 1.79 0.74 168 XMBody_17 1363 1.72 3.72 0.72 169 XM_UB50 1361 1.57 3.27 0.72 170 XMBrknScrpt_02 1355 1.13 1.97 0.72 171 XMPhish30 1331 0.82 1.06 0.70 172 XM_D_tchamptons_WL 1313 0.47 0.02 0.69 173 USER_IN_WELCOMELIST 1270 0.45 0.00 0.67 174 USER_IN_WHITELIST 1270 0.45 0.00 0.67 175 T_XMDrugObfuBody_00 1262 0.82 1.14 0.67 176 XM_H_PHPMailer 1243 1.18 2.22 0.66 177 XMHTML_After_End 1233 1.04 1.81 0.65 178 TooManyTo_004 1200 0.59 0.49 0.63 179 XMLngstWrd_03 1185 0.48 0.18 0.63 180 T_FILL_THIS_FORM_SHORT 1170 1.69 3.83 0.62 181 T_XMHurry_00 1146 1.58 3.53 0.60 182 RDNS_DYNAMIC 1128 0.64 0.72 0.60 183 TR_MSPIKEBAYES00 1067 0.39 0.03 0.56 184 NML_ADSP_CUSTOM_MED 1064 0.68 0.91 0.56 185 XMSexyCombo_01 1061 1.16 2.36 0.56 186 DATE_IN_PAST_03_06 1055 0.61 0.72 0.56 187 FORGED_GMAIL_RCVD 1052 0.67 0.89 0.56 188 XMSubMetaSxObfu_02 1051 0.53 0.47 0.55 189 TooManyTo_005 1046 0.48 0.34 0.55 190 TR_XM_PHPDW 1017 0.95 1.79 0.54 191 XM_Walgreens_Forge 1010 0.36 0.03 0.53 192 TR_XM_SpammyWords3 1008 1.18 2.47 0.53 193 PDS_OTHER_BAD_TLD 978 1.07 2.19 0.52 194 XMLngstWrd_04 961 0.37 0.10 0.51 195 XM_shorewaves_Whitelist 947 0.33 0.00 0.50 196 BODY_ENHANCEMENT2 917 0.54 0.65 0.48 197 SpammyFromTLD_01 907 1.79 4.40 0.48 198 XM_DIRTYINTL 866 1.72 4.26 0.46 199 XMNoVowels 865 0.36 0.17 0.46 200 T_OBFU_PDF_ATTACH 865 0.35 0.13 0.46 ----------------------------------------------------------------------