Email: 482601 Autolearn: 0 AvgScore: 4.19 AvgScanTime: 1.25 sec Spam: 163286 Autolearn: 0 AvgScore: 15.11 AvgScanTime: 1.51 sec Ham: 319315 Autolearn: 0 AvgScore: -1.39 AvgScanTime: 1.11 sec Time Spent Running SA: 167.05 hours Time Spent Processing Spam: 68.53 hours Time Spent Processing Ham: 98.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 154859 87.28 94.84 83.41 2 DKIM_SIGNED 137235 74.19 84.05 69.16 3 RELAYCOUNTRY_US 130090 78.56 79.67 77.99 4 XM_B_Unicode 127143 69.27 77.87 64.87 5 XM_DK_Pass 113576 67.41 69.56 66.31 6 DCC_CHECK 111013 41.20 67.99 27.50 7 DKIM_VALID 110407 65.75 67.62 64.80 8 XMListUnsubscribeExists 106529 49.41 65.24 41.32 9 XM_B_SpammyWords 98284 46.63 60.19 39.70 10 DKIM_VALID_AU 80947 49.80 49.57 49.92 11 BAYES_50 80013 53.59 49.00 55.94 12 XM_B_Unicode3 72610 39.38 44.47 36.78 13 XM_DK_Undo_02 56942 15.90 34.87 6.20 14 MIME_HTML_ONLY 56005 23.94 34.30 18.64 15 XM_B_SpammyWords2 54779 22.06 33.55 16.19 16 FVGT_m_MULTI_ODD 53555 26.47 32.80 23.24 17 LOC_TINY_FONT_1 53111 24.06 32.53 19.74 18 DCC_CHECK_NEGATIVE 52216 58.75 31.98 72.45 19 HTML_FONT_LOW_CONTRAST 46393 24.98 28.41 23.23 20 TR_XM_DKIM_Undo 45764 12.44 28.03 4.47 21 BAYES_99 44649 12.94 27.34 5.57 22 T_KAM_HTML_FONT_INVALID 41938 20.17 25.68 17.36 23 T_TM2_M_HEADER_IN_MSG 39131 28.64 23.96 31.03 24 DKIM_VALID_EF 38869 26.63 23.80 28.07 25 BOTNET 37997 9.44 23.27 2.36 26 RELAYCOUNTRY_META 36706 9.78 22.48 3.29 27 XMSubLong 35702 21.00 21.86 20.55 28 BAYES_999 35000 10.15 21.43 4.39 29 XM_Body_Dirty_Words 30800 13.50 18.86 10.76 30 TR_DCC_Bayes_99 30561 7.34 18.72 1.52 31 XM_Multi_Part_URI 29518 13.34 18.08 10.92 32 RCVD_IN_MSPIKE_H2 29385 19.69 18.00 20.56 33 DKIM_INVALID 26828 8.44 16.43 4.36 34 RCVD_IN_MSPIKE_WL 26689 21.65 16.34 24.37 35 NO_DNS_FOR_FROM 23534 6.10 14.41 1.85 36 TR_XM_MaxWHORU 21713 5.28 13.30 1.18 37 XM_B_Unsub 21620 10.00 13.24 8.35 38 TR_XM_BayesUnsub 20893 8.58 12.80 6.43 39 FSL_BULK_SIG 20854 6.34 12.77 3.05 40 LOTS_OF_MONEY 19926 9.20 12.20 7.66 41 UNTRUSTED_Relay 19878 4.91 12.17 1.20 42 RCVD_IN_MSPIKE_H3 19171 13.21 11.74 13.96 43 UNPARSEABLE_RELAY 19121 9.04 11.71 7.67 44 BOTNET_IPINHOSTNAME 18907 6.90 11.58 4.51 45 TR_XM_UnparsRelay 18647 7.68 11.42 5.77 46 XM_B_SpammyWords3 18267 5.92 11.19 3.22 47 MPART_ALT_DIFF 17508 6.77 10.72 4.75 48 TR_XM_SpammyWords4 16430 6.62 10.06 4.87 49 HTML_IMAGE_RATIO_02 15968 7.20 9.78 5.88 50 RCVD_IN_BL_SPAMCOP_NET 15088 3.46 9.24 0.51 51 TR_XM_SpammyRelay 14931 3.98 9.14 1.33 52 XM_Evil_Numbers_Gen 14828 8.47 9.08 8.16 53 TR_XM_SpammyWords2 14772 3.54 9.05 0.73 54 XMSexyCombo_05 14484 5.02 8.87 3.04 55 XM_UncommonTLD01 14431 6.17 8.84 4.80 56 BOTNET_NORDNS 13751 3.08 8.42 0.35 57 XM_UB50 12486 3.09 7.65 0.77 58 MIME_HTML_ONLY_MULTI 12380 4.65 7.58 3.15 59 BAYES_60 12203 8.61 7.47 9.19 60 BAYES_80 12091 5.49 7.40 4.52 61 LotsOfNums_01 12009 8.33 7.35 8.82 62 TM2_M_VERY_LONG_WORD 11966 3.22 7.33 1.13 63 TR_XM_PhishingBody 11790 4.54 7.22 3.18 64 HTML_MIME_NO_HTML_TAG 11681 3.97 7.15 2.35 65 RCVD_IN_MSPIKE_BL 11059 3.00 6.77 1.07 66 TR_XM_MSPIKECOMBO 11011 2.99 6.74 1.07 67 RELAYCOUNTRY_CA 10177 2.71 6.23 0.91 68 XM_H_Long_From01 10081 5.25 6.17 4.78 69 XM_B_SpammyTLD 9778 4.06 5.99 3.08 70 XM_SendGrid 9415 5.21 5.77 4.92 71 XM_B_Phish_Phrases 8551 4.01 5.24 3.38 72 XM_GoogleGroups 8512 2.63 5.21 1.31 73 XMLngstWrd_00 8347 2.19 5.11 0.70 74 XMLngstWrd_01 8250 2.12 5.05 0.62 75 XMLngstWrd_02 8114 2.03 4.97 0.53 76 XMSubMetaSx_00 7885 3.48 4.83 2.80 77 XM_B_Phish66 7869 2.96 4.82 2.01 78 TooManyTo_001 7617 7.49 4.66 8.93 79 XM_B_Investor 7597 2.49 4.65 1.39 80 XMLngstWrd_03 7563 1.81 4.63 0.36 81 SpammyFromTLD_01 7559 2.04 4.63 0.72 82 URI_HEX 7488 2.43 4.59 1.32 83 HTML_TITLE_SUBJ_DIFF 7456 1.57 4.57 0.03 84 XMLngstWrd_04 7444 1.73 4.56 0.28 85 UPPERCASE_75_100 7262 1.52 4.45 0.03 86 RCVD_IN_PSBL 7202 1.59 4.41 0.15 87 RCVD_IN_MSPIKE_H4 7178 7.53 4.40 9.14 88 RCVD_IN_VALIDITY_RPBL 7163 1.51 4.39 0.04 89 T_REMOTE_IMAGE 7109 4.56 4.35 4.66 90 RCVD_IN_MSPIKE_L5 7089 1.49 4.34 0.03 91 BAYES_95 7024 3.30 4.30 2.79 92 TR_Mismatch_TLD_01 6906 1.57 4.23 0.20 93 MIME_QP_LONG_LINE 6655 4.78 4.08 5.14 94 MIME_HTML_MOSTLY 6416 2.65 3.93 2.00 95 XMStrtUSub 6343 4.78 3.88 5.24 96 HTML_IMAGE_RATIO_04 6242 4.32 3.82 4.57 97 KHOP_HELO_FCRDNS 6213 2.42 3.80 1.72 98 T_XMDrugObfuBody_08 6020 2.18 3.69 1.40 99 T_XMDrugObfuBody_14 6008 2.24 3.68 1.51 100 URIBL_DBL_SPAM 5795 1.21 3.55 0.01 101 XM_DIRTYINTL 5669 1.40 3.47 0.34 102 HTML_IMAGE_RATIO_06 5628 3.25 3.45 3.15 103 XMNumbers 5601 3.62 3.43 3.72 104 TR_XM_SpammyWords3 5468 1.47 3.35 0.50 105 PDS_OTHER_BAD_TLD 5468 1.23 3.35 0.15 106 TR_XM_SPAMCOP 5431 1.22 3.33 0.14 107 XMDiploma_00 5281 2.09 3.23 1.51 108 XM_SPF_SoftFail 5262 2.73 3.22 2.48 109 URI_NOVOWEL 5203 2.65 3.19 2.37 110 TR_XM_SpammyWords5 4875 1.87 2.99 1.31 111 XMCapTrack2 4828 1.02 2.96 0.03 112 TR_XM_COVIDMETA4 4825 1.23 2.95 0.34 113 TR_XM_DK_SendGrid 4497 3.02 2.75 3.15 114 XM_DK_Undo_01 4496 2.01 2.75 1.63 115 TR_XM_PHPDW 4465 1.23 2.73 0.46 116 T_TooManySym_01 4408 5.26 2.70 6.57 117 TR_XM_INV_DKIM 4389 1.07 2.69 0.24 118 TR_XM_PHPForged 4387 1.19 2.69 0.43 119 TR_XM_FormFill2 4340 1.18 2.66 0.43 120 XM_H_PHPOS 4322 1.17 2.65 0.41 121 XM_OfRef6 4226 1.56 2.59 1.03 122 RCVD_IN_VALIDITY_SAFE 4192 3.63 2.57 4.18 123 XM_B_Unsub2 3878 1.62 2.37 1.23 124 HTML_IMAGE_RATIO_08 3810 1.96 2.33 1.77 125 T_FILL_THIS_FORM_SHORT 3799 1.36 2.33 0.87 126 XM_CamelCaseFrm001 3731 1.85 2.28 1.63 127 URI_PHP_REDIR 3701 0.77 2.27 0.00 128 FROM_EXCESS_BASE64 3665 2.00 2.24 1.87 129 XM_B_SpammyWords4 3602 1.01 2.21 0.40 130 RCVD_IN_MSPIKE_L3 3591 1.40 2.20 1.00 131 XMBody_17 3559 1.04 2.18 0.46 132 RCVD_IN_VALIDITY_CERTIFIED 3550 3.13 2.17 3.62 133 TM2_M_URI_OPT_OUT 3530 2.27 2.16 2.32 134 XMHTML_After_End 3392 1.32 2.08 0.94 135 SpammyFromTLD_02 3354 0.84 2.05 0.22 136 RELAYCOUNTRY_RU 3329 0.71 2.04 0.03 137 MAILING_LIST_MULTI 3186 2.46 1.95 2.72 138 ALL_TRUSTED 3037 13.70 1.86 19.76 139 TR_XM_SB_Phish 3028 1.94 1.85 1.98 140 XMSexyCombo_01 2999 0.90 1.84 0.42 141 RELAYCOUNTRY_FR 2992 0.75 1.83 0.20 142 RCVD_IN_IADB_LISTED 2978 3.46 1.82 4.29 143 RELAYCOUNTRY_IN 2962 0.66 1.81 0.06 144 TVD_PH_BODY_ACCOUNTS_PRE 2943 0.70 1.80 0.14 145 XMSubPhish11 2934 1.90 1.80 1.95 146 RELAYCOUNTRY_NG 2917 0.60 1.79 0.00 147 URI_PHISH 2902 0.61 1.78 0.02 148 USER_IN_DEF_DKIM_WL 2874 7.86 1.76 10.99 149 XM_B_COVIDMETA 2861 1.14 1.75 0.83 150 TR_XM_MSPIKECOMBO2 2858 0.66 1.75 0.10 151 HTML_TEXT_INVISIBLE_STYLE 2710 0.67 1.66 0.16 152 XMStockSpam_06 2662 1.35 1.63 1.21 153 BAYES_40 2549 3.76 1.56 4.89 154 XM_H_Undi_Recip 2521 0.67 1.54 0.22 155 T_XMDrugObfuBody_00 2505 0.90 1.53 0.57 156 SUBJ_ALL_CAPS 2494 1.56 1.53 1.57 157 RCVD_IN_IADB_SPF 2464 3.03 1.51 3.81 158 XM_UB99 2456 0.51 1.50 0.00 159 DATE_IN_PAST_03_06 2444 0.60 1.50 0.14 160 XM_ShortIntro_01 2437 0.99 1.49 0.74 161 XMSubMetaI_00 2426 0.96 1.49 0.70 162 XM_B_SEO 2408 0.62 1.47 0.18 163 TR_XM_SEO4 2271 0.54 1.39 0.11 164 RELAYCOUNTRY_DE 2268 0.65 1.39 0.26 165 RCVD_IN_IADB_DK 2240 2.66 1.37 3.31 166 TR_XM_COVIDMETA1 2214 0.63 1.36 0.26 167 RCVD_IN_IADB_SENDERID 2190 2.73 1.34 3.44 168 HTML_FONT_FACE_BAD 2159 1.61 1.32 1.75 169 XMReplyNow 2146 0.68 1.31 0.35 170 T_XMHurry_00 2140 0.70 1.31 0.39 171 XMBrknScrpt_02 2138 0.84 1.31 0.60 172 HTTPS_HTTP_MISMATCH 2129 0.93 1.30 0.74 173 XM_H_Long_From02 2112 1.06 1.29 0.93 174 XM_UB60 2052 0.46 1.26 0.06 175 XMBdyGiftCard01 2034 0.87 1.25 0.68 176 XM_UB999 2010 0.42 1.23 0.00 177 BODY_URI_ONLY 2000 0.43 1.22 0.03 178 READY_TO_SHIP 1990 0.43 1.22 0.03 179 WANT_TO_ORDER 1970 0.41 1.21 0.01 180 XMGenDplmaNmb 1933 0.97 1.18 0.86 181 URIBL_BLACK 1923 0.43 1.18 0.05 182 HTML_TAG_BALANCE_BODY 1908 0.82 1.17 0.63 183 TR_XM_MaxSPIKE 1892 0.45 1.16 0.09 184 XM_URI_RBL 1890 0.47 1.16 0.12 185 URI_GOOGLE_PROXY 1879 0.41 1.15 0.04 186 T_HTML_ATTACH 1858 0.44 1.14 0.08 187 BAYES_20 1857 2.80 1.14 3.65 188 THIS_AD 1849 0.60 1.13 0.32 189 XM_PDF 1843 4.34 1.13 5.98 190 RCVD_IN_IADB_VOUCHED 1842 2.14 1.13 2.66 191 BAYES_00 1809 7.71 1.11 11.09 192 URI_TRY_3LD 1776 0.71 1.09 0.52 193 TR_XM_NoHeaderRelay 1768 0.46 1.08 0.14 194 HK_RANDOM_REPLYTO 1766 0.50 1.08 0.21 195 TR_Symld_Words 1764 1.51 1.08 1.73 196 BOUNCE_MESSAGE 1760 2.62 1.08 3.41 197 ANY_BOUNCE_MESSAGE 1760 2.62 1.08 3.41 198 TooManyTo_002 1754 2.07 1.07 2.59 199 XM_B_DNDMA 1738 0.60 1.06 0.36 200 RELAYCOUNTRY_GB 1733 0.78 1.06 0.64 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 266332 87.28 94.84 83.41 2 RELAYCOUNTRY_US 249041 78.56 79.67 77.99 3 DCC_CHECK_NEGATIVE 231329 58.75 31.98 72.45 4 DKIM_SIGNED 220825 74.19 84.05 69.16 5 XM_DK_Pass 211730 67.41 69.56 66.31 6 XM_B_Unicode 207134 69.27 77.87 64.87 7 DKIM_VALID 206905 65.75 67.62 64.80 8 BAYES_50 178618 53.59 49.00 55.94 9 DKIM_VALID_AU 159389 49.80 49.57 49.92 10 XMListUnsubscribeExists 131935 49.41 65.24 41.32 11 XM_B_SpammyWords 126773 46.63 60.19 39.70 12 XM_B_Unicode3 117442 39.38 44.47 36.78 13 T_TM2_M_HEADER_IN_MSG 99073 28.64 23.96 31.03 14 DKIM_VALID_EF 89639 26.63 23.80 28.07 15 DCC_CHECK 87824 41.20 67.99 27.50 16 RCVD_IN_MSPIKE_WL 77810 21.65 16.34 24.37 17 FVGT_m_MULTI_ODD 74208 26.47 32.80 23.24 18 HTML_FONT_LOW_CONTRAST 74172 24.98 28.41 23.23 19 RCVD_IN_MSPIKE_H2 65657 19.69 18.00 20.56 20 XMSubLong 65627 21.00 21.86 20.55 21 ALL_TRUSTED 63081 13.70 1.86 19.76 22 LOC_TINY_FONT_1 63023 24.06 32.53 19.74 23 MIME_HTML_ONLY 59517 23.94 34.30 18.64 24 T_KAM_HTML_FONT_INVALID 55423 20.17 25.68 17.36 25 XM_B_SpammyWords2 51694 22.06 33.55 16.19 26 RCVD_IN_MSPIKE_H3 44581 13.21 11.74 13.96 27 BAYES_00 35418 7.71 1.11 11.09 28 USER_IN_DEF_DKIM_WL 35077 7.86 1.76 10.99 29 XM_Multi_Part_URI 34854 13.34 18.08 10.92 30 XM_Body_Dirty_Words 34369 13.50 18.86 10.76 31 BAYES_60 29357 8.61 7.47 9.19 32 RCVD_IN_MSPIKE_H4 29183 7.53 4.40 9.14 33 TooManyTo_001 28510 7.49 4.66 8.93 34 LotsOfNums_01 28174 8.33 7.35 8.82 35 XM_B_Unsub 26659 10.00 13.24 8.35 36 XM_Evil_Numbers_Gen 26042 8.47 9.08 8.16 37 XM_DKIMWhitelistDomains 25201 5.23 0.02 7.89 38 UNPARSEABLE_RELAY 24507 9.04 11.71 7.67 39 LOTS_OF_MONEY 24469 9.20 12.20 7.66 40 IN_ZIMBRA_NJ_WHITELIST 24119 5.07 0.22 7.55 41 T_TooManySym_01 20982 5.26 2.70 6.57 42 TR_XM_BayesUnsub 20533 8.58 12.80 6.43 43 TR_XM_DK_Bayes 20132 4.32 0.44 6.30 44 XM_DK_Undo_02 19795 15.90 34.87 6.20 45 TR_XM_DK_Bayes1 19523 4.18 0.41 6.11 46 XM_PDF 19094 4.34 1.13 5.98 47 HTML_IMAGE_RATIO_02 18776 7.20 9.78 5.88 48 TR_XM_UnparsRelay 18432 7.68 11.42 5.77 49 BAYES_99 17785 12.94 27.34 5.57 50 TR_XM_DK_Bayes2 16816 3.58 0.29 5.27 51 XMStrtUSub 16736 4.78 3.88 5.24 52 MIME_QP_LONG_LINE 16420 4.78 4.08 5.14 53 XM_SendGrid 15709 5.21 5.77 4.92 54 BAYES_40 15618 3.76 1.56 4.89 55 TR_XM_SpammyWords4 15540 6.62 10.06 4.87 56 XM_UncommonTLD01 15329 6.17 8.84 4.80 57 XM_H_Long_From01 15255 5.25 6.17 4.78 58 MPART_ALT_DIFF 15176 6.77 10.72 4.75 59 T_REMOTE_IMAGE 14890 4.56 4.35 4.66 60 HTML_IMAGE_RATIO_04 14586 4.32 3.82 4.57 61 BAYES_80 14422 5.49 7.40 4.52 62 BOTNET_IPINHOSTNAME 14387 6.90 11.58 4.51 63 TR_XM_DKIM_Undo 14288 12.44 28.03 4.47 64 BAYES_999 14004 10.15 21.43 4.39 65 DKIM_INVALID 13920 8.44 16.43 4.36 66 RCVD_IN_IADB_LISTED 13696 3.46 1.82 4.29 67 RCVD_IN_VALIDITY_SAFE 13342 3.63 2.57 4.18 68 RCVD_IN_IADB_SPF 12167 3.03 1.51 3.81 69 XM_H_Trusted_IP 12090 2.51 0.00 3.79 70 XMNumbers 11868 3.62 3.43 3.72 71 BAYES_20 11650 2.80 1.14 3.65 72 RCVD_IN_VALIDITY_CERTIFIED 11569 3.13 2.17 3.62 73 T_TooManySym_02 11256 2.54 0.60 3.53 74 RCVD_IN_IADB_SENDERID 10979 2.73 1.34 3.44 75 ANY_BOUNCE_MESSAGE 10900 2.62 1.08 3.41 76 BOUNCE_MESSAGE 10898 2.62 1.08 3.41 77 XM_B_Phish_Phrases 10798 4.01 5.24 3.38 78 RCVD_IN_IADB_DK 10583 2.66 1.37 3.31 79 RELAYCOUNTRY_META 10500 9.78 22.48 3.29 80 XM_B_SpammyWords3 10287 5.92 11.19 3.22 81 TR_XM_PhishingBody 10143 4.54 7.22 3.18 82 TR_XM_DK_SendGrid 10059 3.02 2.75 3.15 83 HTML_IMAGE_RATIO_06 10053 3.25 3.45 3.15 84 MIME_HTML_ONLY_MULTI 10052 4.65 7.58 3.15 85 XM_B_SpammyTLD 9832 4.06 5.99 3.08 86 FSL_BULK_SIG 9737 6.34 12.77 3.05 87 XMSexyCombo_05 9722 5.02 8.87 3.04 88 XMSubMetaSx_00 8927 3.48 4.83 2.80 89 BAYES_95 8904 3.30 4.30 2.79 90 MAILING_LIST_MULTI 8689 2.46 1.95 2.72 91 RCVD_IN_IADB_VOUCHED 8492 2.14 1.13 2.66 92 TooManyTo_002 8256 2.07 1.07 2.59 93 XM_SPF_SoftFail 7911 2.73 3.22 2.48 94 URI_NOVOWEL 7572 2.65 3.19 2.37 95 BOTNET 7540 9.44 23.27 2.36 96 BAYES_05 7536 1.79 0.67 2.36 97 HTML_MIME_NO_HTML_TAG 7495 3.97 7.15 2.35 98 TM2_M_URI_OPT_OUT 7401 2.27 2.16 2.32 99 INVALID_MSGID 6806 1.48 0.20 2.13 100 HELO_NODOT 6668 1.53 0.45 2.09 101 HELO_NO_DOMAIN 6665 1.53 0.44 2.09 102 XM_B_Phish66 6411 2.96 4.82 2.01 103 MIME_HTML_MOSTLY 6396 2.65 3.93 2.00 104 TR_XM_SB_Phish 6319 1.94 1.85 1.98 105 IN_HORDE_ADDRESS_BOOK 6258 1.39 0.28 1.96 106 XMSubPhish11 6217 1.90 1.80 1.95 107 TVD_RCVD_IP 6090 1.35 0.25 1.91 108 FROM_EXCESS_BASE64 5971 2.00 2.24 1.87 109 NO_DNS_FOR_FROM 5908 6.10 14.41 1.85 110 TO_MALFORMED 5827 1.21 0.02 1.82 111 RCVD_IN_IADB_OPTIN 5802 1.44 0.72 1.82 112 TooManyTo_003 5717 1.50 0.93 1.79 113 HTML_IMAGE_RATIO_08 5650 1.96 2.33 1.77 114 HTML_FONT_FACE_BAD 5590 1.61 1.32 1.75 115 TR_Symld_Words 5534 1.51 1.08 1.73 116 KHOP_HELO_FCRDNS 5489 2.42 3.80 1.72 117 XM_CamelCaseFrm001 5213 1.85 2.28 1.63 118 XM_DK_Undo_01 5207 2.01 2.75 1.63 119 SUBJ_ALL_CAPS 5024 1.56 1.53 1.57 120 TR_DCC_Bayes_99 4858 7.34 18.72 1.52 121 XMDiploma_00 4818 2.09 3.23 1.51 122 T_XMDrugObfuBody_14 4809 2.24 3.68 1.51 123 T_XMDrugObfuBody_08 4486 2.18 3.69 1.40 124 XMCapTrack 4470 1.12 0.56 1.40 125 XM_B_Investor 4433 2.49 4.65 1.39 126 TR_XM_SpammyRelay 4254 3.98 9.14 1.33 127 TooManyTo_004 4252 1.13 0.74 1.33 128 URI_HEX 4217 2.43 4.59 1.32 129 XMSubNoVowel 4198 1.17 0.90 1.31 130 XM_GoogleGroups 4185 2.63 5.21 1.31 131 TR_XM_SpammyWords5 4173 1.87 2.99 1.31 132 RCVD_IN_MSPIKE_H5 4046 0.91 0.21 1.27 133 DKIM_ADSP_NXDOMAIN 4042 0.96 0.37 1.27 134 XMGappySubj_01 3964 0.89 0.19 1.24 135 XM_B_Unsub2 3933 1.62 2.37 1.23 136 XMStockSpam_06 3858 1.35 1.63 1.21 137 UNTRUSTED_Relay 3820 4.91 12.17 1.20 138 TR_XM_MaxWHORU 3753 5.28 13.30 1.18 139 TVD_SPACE_RATIO 3626 1.01 0.76 1.14 140 TM2_M_VERY_LONG_WORD 3597 3.22 7.33 1.13 141 XMBSHREFv2 3577 0.83 0.26 1.12 142 TooManyTo_005 3575 0.86 0.36 1.12 143 RCVD_IN_MSPIKE_BL 3427 3.00 6.77 1.07 144 TR_XM_MSPIKECOMBO 3425 2.99 6.74 1.07 145 XM_OfRef6 3295 1.56 2.59 1.03 146 DKIM_ADSP_CUSTOM_MED 3199 0.99 0.96 1.00 147 RCVD_IN_MSPIKE_L3 3188 1.40 2.20 1.00 148 XM_E_Blogspot 3041 0.69 0.17 0.95 149 XMHTML_After_End 3000 1.32 2.08 0.94 150 XM_H_Long_From02 2980 1.06 1.29 0.93 151 T_OBFU_PDF_ATTACH 2928 0.71 0.31 0.92 152 RELAYCOUNTRY_CA 2912 2.71 6.23 0.91 153 T_TooManySym_03 2799 0.67 0.26 0.88 154 T_FILL_THIS_FORM_SHORT 2785 1.36 2.33 0.87 155 XM_Body_Dirty_Words_01 2766 0.78 0.62 0.87 156 XMGenDplmaNmb 2759 0.97 1.18 0.86 157 RCVD_IN_RP_SAFE 2753 0.74 0.49 0.86 158 XM_B_COVIDMETA 2647 1.14 1.75 0.83 159 XMBody_95 2613 0.59 0.14 0.82 160 XM_UB50 2444 3.09 7.65 0.77 161 RCVD_IN_RP_CERTIFIED 2417 0.64 0.41 0.76 162 XMNoVowels 2394 0.62 0.36 0.75 163 HTTPS_HTTP_MISMATCH 2365 0.93 1.30 0.74 164 XM_ShortIntro_01 2348 0.99 1.49 0.74 165 MSGID_NOFQDN1 2345 0.49 0.01 0.73 166 XM_H_PHPMailer 2339 0.72 0.69 0.73 167 TR_XM_SpammyWords2 2329 3.54 9.05 0.73 168 SpammyFromTLD_01 2286 2.04 4.63 0.72 169 HTML_IMAGE_ONLY_20 2253 0.53 0.19 0.71 170 TR_MetaPhish_Combo_01 2252 0.71 0.73 0.71 171 XMLngstWrd_00 2246 2.19 5.11 0.70 172 XMSubMetaI_00 2220 0.96 1.49 0.70 173 XMBdyGiftCard01 2172 0.87 1.25 0.68 174 NML_ADSP_CUSTOM_MED 2113 0.67 0.69 0.66 175 RELAYCOUNTRY_GB 2030 0.78 1.06 0.64 176 HTML_TAG_BALANCE_BODY 2027 0.82 1.17 0.63 177 XMLngstWrd_01 1985 2.12 5.05 0.62 178 SHORT_HELO_AND_INLINE_IMAGE 1979 0.44 0.08 0.62 179 XMBrknScrpt_02 1931 0.84 1.31 0.60 180 RCVD_IN_SORBS_DUL 1901 0.45 0.15 0.60 181 XM_ProductURIs 1843 0.67 0.84 0.58 182 T_XMDrugObfuBody_00 1823 0.90 1.53 0.57 183 FILL_THIS_FORM 1816 0.61 0.70 0.57 184 MPART_ALT_DIFF_COUNT 1814 0.65 0.82 0.57 185 XM_H_MailChimp 1811 0.59 0.64 0.57 186 T_Symld_Words_02 1757 0.69 0.97 0.55 187 XMPhish30 1698 0.68 0.96 0.53 188 FROM_GOV_DKIM_AU 1688 0.37 0.07 0.53 189 XMLngstWrd_02 1686 2.03 4.97 0.53 190 FROM_GOV_SPOOF 1683 0.41 0.19 0.53 191 XMHTMLBadTable_001 1672 0.64 0.85 0.52 192 URI_TRY_3LD 1654 0.71 1.09 0.52 193 XM_B_COPY_HTML 1653 0.56 0.66 0.52 194 HTML_IMAGE_ONLY_28 1647 0.49 0.45 0.52 195 XMMoneyMeta_00 1631 0.67 0.97 0.51 196 RCVD_IN_BL_SPAMCOP_NET 1623 3.46 9.24 0.51 197 TR_XM_SpammyWords3 1603 1.47 3.35 0.50 198 FORGED_GMAIL_RCVD 1552 0.57 0.72 0.49 199 XMBody_17 1483 1.04 2.18 0.46 200 HTML_IMAGE_ONLY_32 1477 0.37 0.20 0.46 ----------------------------------------------------------------------