Email: 298452 Autolearn: 0 AvgScore: 3.42 AvgScanTime: 1.28 sec Spam: 97507 Autolearn: 0 AvgScore: 14.38 AvgScanTime: 1.42 sec Ham: 200945 Autolearn: 0 AvgScore: -1.90 AvgScanTime: 1.21 sec Time Spent Running SA: 105.87 hours Time Spent Processing Spam: 38.54 hours Time Spent Processing Ham: 67.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 90902 86.80 93.23 83.68 2 DKIM_SIGNED 85408 74.03 87.59 67.45 3 XM_DK_Pass 83173 71.47 85.30 64.76 4 DKIM_VALID 82687 71.00 84.80 64.30 5 RELAYCOUNTRY_US 78749 77.72 80.76 76.25 6 XM_B_Unicode 76379 73.63 78.33 71.35 7 DCC_CHECK 68864 44.02 70.62 31.11 8 DKIM_VALID_AU 66792 59.16 68.50 54.62 9 XMListUnsubscribeExists 66537 53.44 68.24 46.26 10 XM_B_SpammyWords 64510 52.99 66.16 46.60 11 RCVD_IN_MSPIKE_H2 45514 37.32 46.68 32.78 12 XM_DK_Undo_02 44896 20.16 46.04 7.60 13 XM_B_Unicode3 41027 42.66 42.08 42.94 14 BAYES_99 37635 17.12 38.60 6.70 15 BAYES_50 37587 49.26 38.55 54.46 16 XM_B_SpammyWords2 36221 25.46 37.15 19.79 17 TR_XM_DKIM_Undo 35323 15.52 36.23 5.48 18 LOC_TINY_FONT_1 34585 27.31 35.47 23.35 19 FVGT_m_MULTI_ODD 32816 26.01 33.66 22.31 20 MIME_HTML_ONLY 32379 27.59 33.21 24.87 21 HTML_FONT_LOW_CONTRAST 31107 29.15 31.90 27.81 22 BAYES_999 30573 13.97 31.35 5.54 23 DCC_CHECK_NEGATIVE 28613 55.95 29.34 68.86 24 DKIM_VALID_EF 28393 26.94 29.12 25.89 25 TR_DCC_Bayes_99 25863 10.05 26.52 2.06 26 T_KAM_HTML_FONT_INVALID 24711 18.95 25.34 15.85 27 RELAYCOUNTRY_META 22451 9.78 23.03 3.36 28 XM_Body_Dirty_Words 21927 17.16 22.49 14.58 29 T_TM2_M_HEADER_IN_MSG 19941 19.99 20.45 19.77 30 XMSubLong 19654 23.59 20.16 25.25 31 UNPARSEABLE_RELAY 17075 10.94 17.51 7.75 32 XM_Multi_Part_URI 16754 14.23 17.18 12.80 33 TR_XM_UnparsRelay 16748 9.73 17.18 6.12 34 XM_B_Unsub 15158 15.71 15.55 15.79 35 TR_XM_BayesUnsub 14905 12.06 15.29 10.49 36 TR_XM_SpammyWords2 14674 6.12 15.05 1.78 37 RCVD_IN_MSPIKE_WL 13518 13.82 13.86 13.80 38 XM_B_SpammyWords3 12253 8.04 12.57 5.85 39 BOTNET_IPINHOSTNAME 11988 8.40 12.29 6.51 40 RCVD_IN_BL_SPAMCOP_NET 11931 4.57 12.24 0.85 41 TR_XM_SpammyRelay 11888 4.96 12.19 1.45 42 BOTNET 11745 5.01 12.05 1.60 43 LOTS_OF_MONEY 11656 8.05 11.95 6.16 44 FSL_BULK_SIG 11638 5.70 11.94 2.67 45 RCVD_IN_MSPIKE_H3 11010 9.94 11.29 9.29 46 MPART_ALT_DIFF 10209 10.31 10.47 10.24 47 TR_XM_SpammyWords4 10065 6.30 10.32 4.35 48 XM_UncommonTLD01 9748 6.22 10.00 4.39 49 XMSexyCombo_05 9183 6.11 9.42 4.51 50 RELAYCOUNTRY_CA 8791 3.74 9.02 1.18 51 UNTRUSTED_Relay 8721 3.70 8.94 1.16 52 TM2_M_VERY_LONG_WORD 8490 3.66 8.71 1.21 53 BAYES_80 7996 5.96 8.20 4.88 54 XM_SendGrid 7686 6.21 7.88 5.40 55 HTML_IMAGE_RATIO_02 7469 6.95 7.66 6.61 56 MIME_HTML_ONLY_MULTI 7394 7.56 7.58 7.55 57 XM_H_Long_From01 7155 5.48 7.34 4.58 58 TR_XM_SPAMCOP 7059 2.70 7.24 0.49 59 HTML_MIME_NO_HTML_TAG 6958 3.75 7.14 2.10 60 BAYES_60 6766 9.27 6.94 10.40 61 XM_Evil_Numbers_Gen 6743 7.83 6.92 8.28 62 XMLngstWrd_00 5934 2.42 6.09 0.64 63 XMLngstWrd_01 5847 2.34 6.00 0.56 64 XMLngstWrd_02 5750 2.22 5.90 0.44 65 XM_GoogleGroups 5712 2.68 5.86 1.14 66 XMSubMetaSx_00 5682 4.66 5.83 4.10 67 LotsOfNums_01 5335 6.78 5.47 7.41 68 XMLngstWrd_03 5323 2.01 5.46 0.33 69 HTML_TITLE_SUBJ_DIFF 5300 1.80 5.44 0.03 70 XMLngstWrd_04 5263 1.93 5.40 0.25 71 UPPERCASE_75_100 5219 1.76 5.35 0.01 72 XM_B_SpammyTLD 5216 2.92 5.35 1.74 73 TR_XM_PhishingBody 5198 3.44 5.33 2.52 74 T_XMDrugObfuBody_14 5022 2.93 5.15 1.85 75 RCVD_IN_VALIDITY_SAFE 4912 6.02 5.04 6.50 76 TooManyTo_001 4874 8.82 5.00 10.67 77 BAYES_95 4758 3.49 4.88 2.82 78 TR_XM_DK_SendGrid 4732 3.95 4.85 3.52 79 XMStrtUSub 4627 5.29 4.75 5.55 80 XM_B_Phish_Phrases 4597 3.41 4.71 2.77 81 XM_SPF_SoftFail 4425 2.21 4.54 1.08 82 RCVD_IN_VALIDITY_RPBL 4370 1.51 4.48 0.08 83 XM_UB50 4184 1.88 4.29 0.70 84 HTML_IMAGE_RATIO_04 4142 5.33 4.25 5.85 85 XMDiploma_00 4098 2.10 4.20 1.08 86 T_REMOTE_IMAGE 4057 3.54 4.16 3.24 87 RCVD_IN_VALIDITY_CERTIFIED 4055 5.23 4.16 5.75 88 MIME_HTML_MOSTLY 3998 3.92 4.10 3.83 89 SpammyFromTLD_01 3970 1.62 4.07 0.44 90 BOTNET_NORDNS 3689 1.24 3.78 0.01 91 XM_CamelCaseFrm001 3688 2.45 3.78 1.80 92 XM_OfRef6 3682 1.87 3.78 0.95 93 T_FILL_THIS_FORM_SHORT 3676 1.66 3.77 0.64 94 XM_DIRTYINTL 3588 1.38 3.68 0.26 95 RCVD_IN_MSPIKE_BL 3556 1.60 3.65 0.61 96 XM_B_Investor 3511 1.85 3.60 1.00 97 TR_XM_MSPIKECOMBO 3337 1.53 3.42 0.61 98 T_TooManySym_01 3311 8.43 3.40 10.87 99 TR_XM_SpammyWords5 3246 2.10 3.33 1.50 100 PDS_OTHER_BAD_TLD 3096 1.19 3.18 0.23 101 XM_DK_Undo_01 3061 1.77 3.14 1.11 102 XM_H_Undi_Recip 3048 1.15 3.13 0.19 103 USER_IN_DEF_DKIM_WL 3033 11.82 3.11 16.04 104 XMNumbers 2960 5.81 3.04 7.16 105 KHOP_HELO_FCRDNS 2803 1.42 2.87 0.71 106 T_XMDrugObfuBody_08 2787 1.68 2.86 1.10 107 DKIM_INVALID 2721 3.03 2.79 3.15 108 XM_B_Phish66 2635 1.58 2.70 1.03 109 HTML_IMAGE_RATIO_06 2581 3.27 2.65 3.57 110 RCVD_IN_MSPIKE_H4 2468 3.72 2.53 4.30 111 TR_XM_Undi_Recip11 2432 0.84 2.49 0.04 112 URI_NOVOWEL 2382 1.85 2.44 1.56 113 SpammyFromTLD_02 2325 0.89 2.38 0.16 114 HK_RANDOM_REPLYTO 2315 0.94 2.37 0.24 115 URIBL_DBL_SPAM 2294 0.78 2.35 0.01 116 TM2_M_URI_OPT_OUT 2250 8.73 2.31 11.85 117 MONEY_NOHTML 2212 0.78 2.27 0.06 118 TR_XM_FormFill 2184 0.76 2.24 0.04 119 HTML_FONT_FACE_BAD 2157 1.68 2.21 1.42 120 XMBdyGiftCard01 2154 1.61 2.21 1.33 121 SUBJ_ALL_CAPS 2112 1.48 2.17 1.15 122 HTML_IMAGE_RATIO_08 2106 1.86 2.16 1.72 123 MIME_QP_LONG_LINE 2098 5.93 2.15 7.76 124 XMBody_17 2097 0.95 2.15 0.36 125 XMSexyCombo_01 2043 1.43 2.10 1.10 126 XM_B_Unsub2 2033 1.45 2.08 1.14 127 T_XMHurry_00 2000 1.19 2.05 0.76 128 XM_UB99 1971 0.66 2.02 0.00 129 XM_B_DynamicLink 1970 0.68 2.02 0.03 130 TR_LOTS_OF_MONEY3 1952 0.81 2.00 0.23 131 FROM_EXCESS_BASE64 1898 2.79 1.95 3.21 132 ALL_TRUSTED 1890 14.88 1.94 21.17 133 HTML_TAG_BALANCE_BODY 1815 0.99 1.86 0.57 134 TR_XM_PHPDW 1746 0.81 1.79 0.33 135 TR_XM_MSPIKECOMBO2 1728 0.64 1.77 0.09 136 TR_XM_PHPForged 1722 0.74 1.77 0.24 137 RCVD_IN_PSBL 1703 0.81 1.75 0.36 138 TR_XM_FormFill2 1691 0.73 1.73 0.25 139 XM_H_PHPOS 1680 0.71 1.72 0.22 140 TR_Mismatch_TLD_02 1670 0.61 1.71 0.07 141 XMReplyNow 1660 0.67 1.70 0.17 142 XMStockSpam_06 1650 1.78 1.69 1.83 143 XM_H_Long_From02 1605 1.90 1.65 2.02 144 T_XMDrugObfuBody_00 1599 1.00 1.64 0.68 145 HTML_IMAGE_ONLY_20 1573 1.04 1.61 0.76 146 XMBrknScrpt_02 1555 1.03 1.59 0.76 147 XMHTML_After_End 1550 0.84 1.59 0.48 148 RCVD_IN_MSPIKE_L3 1544 0.91 1.58 0.59 149 HTML_FONT_TINY_NORDNS 1537 0.56 1.58 0.07 150 XM_UB999 1534 0.52 1.57 0.00 151 RCVD_IN_IADB_LISTED 1534 2.44 1.57 2.86 152 URG_BIZ 1521 0.54 1.56 0.05 153 MPART_ALT_DIFF_COUNT 1510 1.03 1.55 0.78 154 TR_XM_Undi_Recip6 1488 0.50 1.53 0.00 155 TR_XM_SpammyWords3 1458 0.72 1.50 0.35 156 XM_B_SpammyWords4 1445 0.90 1.48 0.61 157 DKIM_ADSP_CUSTOM_MED 1420 1.04 1.46 0.83 158 MAILING_LIST_MULTI 1401 1.83 1.44 2.03 159 HTML_SHORT_LINK_IMG_3 1400 0.49 1.44 0.02 160 XM_URI_RBL 1376 0.53 1.41 0.10 161 RELAYCOUNTRY_FR 1365 0.56 1.40 0.16 162 XMClaimOffer 1364 0.51 1.40 0.08 163 TR_Symld_Words 1357 1.53 1.39 1.60 164 TR_MRelay_UG 1347 0.45 1.38 0.00 165 NML_ADSP_CUSTOM_MED 1341 0.79 1.38 0.51 166 XMGenDplmaNmb 1337 0.85 1.37 0.60 167 TR_XM_Undi_Recip5 1337 0.45 1.37 0.00 168 RCVD_IN_IADB_SPF 1325 2.18 1.36 2.58 169 RELAYCOUNTRY_RU 1322 0.46 1.36 0.02 170 TR_XM_BayesRelay 1322 0.44 1.36 0.00 171 DIET_1 1317 0.67 1.35 0.34 172 MONEY_FRAUD_8 1314 0.44 1.35 0.00 173 TR_XM_SB_Phish 1313 3.29 1.35 4.23 174 GOOGLE_DOC_SUSP 1295 0.43 1.33 0.00 175 FORGED_GMAIL_RCVD 1277 0.76 1.31 0.49 176 XMHTMLBadTable_001 1271 0.95 1.30 0.78 177 XMSubPhish11 1261 3.25 1.29 4.20 178 TR_XM_NoHeaderRelay 1250 0.50 1.28 0.12 179 RCVD_IN_MSPIKE_L5 1228 0.42 1.26 0.01 180 TR_MetaPhish_Combo_01 1223 0.98 1.25 0.85 181 RCVD_IN_IADB_SENDERID 1219 1.98 1.25 2.33 182 RCVD_IN_IADB_DK 1214 1.93 1.25 2.27 183 UNDISC_MONEY 1198 0.41 1.23 0.01 184 RELAYCOUNTRY_IN 1193 0.43 1.22 0.04 185 BAYES_40 1186 3.42 1.22 4.49 186 URI_TRY_3LD 1177 0.75 1.21 0.53 187 RDNS_DYNAMIC 1166 0.76 1.20 0.55 188 URI_HEX 1163 1.18 1.19 1.18 189 RELAYCOUNTRY_AU 1158 0.51 1.19 0.18 190 HTTPS_HTTP_MISMATCH 1150 0.78 1.18 0.58 191 TR_XM_Undi_RecipCombo2 1146 0.39 1.18 0.00 192 XMPhish08 1136 0.55 1.17 0.25 193 XM_ShortIntro_01 1091 0.62 1.12 0.37 194 XM_ProductURIs 1086 0.79 1.11 0.64 195 XMSubNoVowel 1083 2.41 1.11 3.05 196 TR_Caps_n_Bayes_99 1082 0.42 1.11 0.09 197 RCVD_IN_RP_SAFE 1062 1.19 1.09 1.24 198 FILL_THIS_FORM 1055 0.58 1.08 0.34 199 PDS_RDNS_DYNAMIC_FP 1030 0.36 1.06 0.02 200 MIME_BASE64_TEXT 1029 0.40 1.06 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 168152 86.80 93.23 83.68 2 RELAYCOUNTRY_US 153214 77.72 80.76 76.25 3 XM_B_Unicode 143380 73.63 78.33 71.35 4 DCC_CHECK_NEGATIVE 138367 55.95 29.34 68.86 5 DKIM_SIGNED 135547 74.03 87.59 67.45 6 XM_DK_Pass 130138 71.47 85.30 64.76 7 DKIM_VALID 129211 71.00 84.80 64.30 8 DKIM_VALID_AU 109759 59.16 68.50 54.62 9 BAYES_50 109426 49.26 38.55 54.46 10 XM_B_SpammyWords 93650 52.99 66.16 46.60 11 XMListUnsubscribeExists 92959 53.44 68.24 46.26 12 XM_B_Unicode3 86278 42.66 42.08 42.94 13 RCVD_IN_MSPIKE_H2 65862 37.32 46.68 32.78 14 DCC_CHECK 62521 44.02 70.62 31.11 15 HTML_FONT_LOW_CONTRAST 55883 29.15 31.90 27.81 16 DKIM_VALID_EF 52016 26.94 29.12 25.89 17 XMSubLong 50742 23.59 20.16 25.25 18 MIME_HTML_ONLY 49966 27.59 33.21 24.87 19 LOC_TINY_FONT_1 46915 27.31 35.47 23.35 20 FVGT_m_MULTI_ODD 44826 26.01 33.66 22.31 21 ALL_TRUSTED 42533 14.88 1.94 21.17 22 XM_B_SpammyWords2 39772 25.46 37.15 19.79 23 T_TM2_M_HEADER_IN_MSG 39718 19.99 20.45 19.77 24 USER_IN_DEF_DKIM_WL 32233 11.82 3.11 16.04 25 T_KAM_HTML_FONT_INVALID 31844 18.95 25.34 15.85 26 XM_B_Unsub 31738 15.71 15.55 15.79 27 XM_Body_Dirty_Words 29293 17.16 22.49 14.58 28 RCVD_IN_MSPIKE_WL 27735 13.82 13.86 13.80 29 XM_Multi_Part_URI 25714 14.23 17.18 12.80 30 TM2_M_URI_OPT_OUT 23816 8.73 2.31 11.85 31 XM_DKIMWhitelistDomains 22986 7.72 0.05 11.44 32 BAYES_00 22080 7.53 0.40 10.99 33 T_TooManySym_01 21842 8.43 3.40 10.87 34 TooManyTo_001 21450 8.82 5.00 10.67 35 TR_XM_BayesUnsub 21079 12.06 15.29 10.49 36 BAYES_60 20895 9.27 6.94 10.40 37 MPART_ALT_DIFF 20576 10.31 10.47 10.24 38 RCVD_IN_MSPIKE_H3 18662 9.94 11.29 9.29 39 XM_H_Trusted_IP 16893 5.66 0.00 8.41 40 XM_Evil_Numbers_Gen 16631 7.83 6.92 8.28 41 MIME_QP_LONG_LINE 15598 5.93 2.15 7.76 42 UNPARSEABLE_RELAY 15577 10.94 17.51 7.75 43 XM_DK_Undo_02 15263 20.16 46.04 7.60 44 MIME_HTML_ONLY_MULTI 15169 7.56 7.58 7.55 45 LotsOfNums_01 14892 6.78 5.47 7.41 46 XMNumbers 14392 5.81 3.04 7.16 47 BAYES_99 13460 17.12 38.60 6.70 48 HTML_IMAGE_RATIO_02 13282 6.95 7.66 6.61 49 BOTNET_IPINHOSTNAME 13085 8.40 12.29 6.51 50 RCVD_IN_VALIDITY_SAFE 13054 6.02 5.04 6.50 51 T_TooManySym_02 12487 4.35 0.51 6.21 52 LOTS_OF_MONEY 12381 8.05 11.95 6.16 53 TR_XM_UnparsRelay 12295 9.73 17.18 6.12 54 HTML_IMAGE_RATIO_04 11765 5.33 4.25 5.85 55 XM_B_SpammyWords3 11753 8.04 12.57 5.85 56 RCVD_IN_VALIDITY_CERTIFIED 11548 5.23 4.16 5.75 57 XMStrtUSub 11153 5.29 4.75 5.55 58 BAYES_999 11126 13.97 31.35 5.54 59 TR_XM_DK_Bayes 11124 3.83 0.32 5.54 60 TR_XM_DKIM_Undo 11007 15.52 36.23 5.48 61 TR_XM_DK_Bayes1 10998 3.79 0.31 5.47 62 XM_SendGrid 10845 6.21 7.88 5.40 63 TR_XM_DK_Bayes2 10178 3.51 0.30 5.07 64 IN_ZIMBRA_NJ_WHITELIST 9980 3.37 0.09 4.97 65 BAYES_80 9800 5.96 8.20 4.88 66 SHORT_URI_3 9525 3.35 0.49 4.74 67 XM_H_Long_From01 9200 5.48 7.34 4.58 68 XMSexyCombo_05 9065 6.11 9.42 4.51 69 BAYES_40 9017 3.42 1.22 4.49 70 XM_UncommonTLD01 8814 6.22 10.00 4.39 71 TR_XM_SpammyWords4 8742 6.30 10.32 4.35 72 RCVD_IN_MSPIKE_H4 8641 3.72 2.53 4.30 73 TR_XM_SB_Phish 8500 3.29 1.35 4.23 74 XMSubPhish11 8449 3.25 1.29 4.20 75 XMSubMetaSx_00 8240 4.66 5.83 4.10 76 MIME_HTML_MOSTLY 7689 3.92 4.10 3.83 77 HTML_IMAGE_RATIO_06 7178 3.27 2.65 3.57 78 TR_XM_DK_SendGrid 7067 3.95 4.85 3.52 79 INVALID_MSGID 6950 2.38 0.16 3.46 80 RELAYCOUNTRY_META 6749 9.78 23.03 3.36 81 T_REMOTE_IMAGE 6511 3.54 4.16 3.24 82 FROM_EXCESS_BASE64 6441 2.79 1.95 3.21 83 DKIM_INVALID 6336 3.03 2.79 3.15 84 BAYES_20 6210 2.35 0.81 3.09 85 XMSubNoVowel 6120 2.41 1.11 3.05 86 BOUNCE_MESSAGE 5994 2.32 0.96 2.98 87 ANY_BOUNCE_MESSAGE 5994 2.32 0.96 2.98 88 TO_MALFORMED 5772 1.95 0.06 2.87 89 RCVD_IN_IADB_LISTED 5756 2.44 1.57 2.86 90 BAYES_95 5663 3.49 4.88 2.82 91 XM_B_Phish_Phrases 5567 3.41 4.71 2.77 92 TVD_RCVD_IP 5447 2.12 0.92 2.71 93 FSL_BULK_SIG 5374 5.70 11.94 2.67 94 RCVD_IN_IADB_SPF 5175 2.18 1.36 2.58 95 TR_XM_PhishingBody 5059 3.44 5.33 2.52 96 T_TooManySym_03 5005 1.75 0.23 2.49 97 RCVD_IN_IADB_SENDERID 4686 1.98 1.25 2.33 98 RCVD_IN_IADB_DK 4557 1.93 1.25 2.27 99 BAYES_05 4391 1.61 0.41 2.19 100 HTML_MIME_NO_HTML_TAG 4221 3.75 7.14 2.10 101 TR_DCC_Bayes_99 4137 10.05 26.52 2.06 102 MAILING_LIST_MULTI 4075 1.83 1.44 2.03 103 XM_H_Long_From02 4058 1.90 1.65 2.02 104 IN_HORDE_ADDRESS_BOOK 3996 1.36 0.08 1.99 105 XMBSHREFv2 3842 1.36 0.21 1.91 106 RCVD_IN_IADB_VOUCHED 3796 1.59 0.97 1.89 107 T_XMDrugObfuBody_14 3710 2.93 5.15 1.85 108 XMStockSpam_06 3670 1.78 1.69 1.83 109 XM_CamelCaseFrm001 3616 2.45 3.78 1.80 110 XM_PDF 3608 1.38 0.53 1.80 111 TR_XM_SpammyWords2 3578 6.12 15.05 1.78 112 XM_B_SpammyTLD 3504 2.92 5.35 1.74 113 HTML_IMAGE_RATIO_08 3453 1.86 2.16 1.72 114 BOTNET 3213 5.01 12.05 1.60 115 TR_Symld_Words 3207 1.53 1.39 1.60 116 URI_NOVOWEL 3132 1.85 2.44 1.56 117 TVD_SPACE_RATIO 3128 1.09 0.12 1.56 118 XM_B_SEO 3080 1.18 0.45 1.53 119 TR_XM_SpammyWords5 3021 2.10 3.33 1.50 120 FVGT_m_MULTI_ODD_EMAIL 2959 1.03 0.11 1.47 121 XMGappySubj_01 2951 1.03 0.12 1.47 122 TR_XM_SpammyRelay 2913 4.96 12.19 1.45 123 HTML_FONT_FACE_BAD 2852 1.68 2.21 1.42 124 RCVD_IN_IADB_OPTIN 2677 1.11 0.66 1.33 125 XMBdyGiftCard01 2663 1.61 2.21 1.33 126 RCVD_IN_RP_SAFE 2496 1.19 1.09 1.24 127 TM2_M_VERY_LONG_WORD 2424 3.66 8.71 1.21 128 RELAYCOUNTRY_CA 2369 3.74 9.02 1.18 129 URI_HEX 2367 1.18 1.19 1.18 130 MSGID_NOFQDN1 2362 0.80 0.02 1.18 131 UNTRUSTED_Relay 2332 3.70 8.94 1.16 132 TooManyTo_002 2326 0.89 0.33 1.16 133 SUBJ_ALL_CAPS 2315 1.48 2.17 1.15 134 XMSubject_78 2290 0.91 0.45 1.14 135 XM_B_Unsub2 2289 1.45 2.08 1.14 136 XM_GoogleGroups 2285 2.68 5.86 1.14 137 XM_DK_Undo_01 2232 1.77 3.14 1.11 138 T_XMDrugObfuBody_08 2215 1.68 2.86 1.10 139 XMSexyCombo_01 2212 1.43 2.10 1.10 140 T_HTML_ATTACH 2199 0.92 0.55 1.09 141 HTML_EXTRA_CLOSE 2186 0.88 0.45 1.09 142 RCVD_IN_RP_CERTIFIED 2181 1.03 0.92 1.09 143 XM_SPF_SoftFail 2170 2.21 4.54 1.08 144 XMDiploma_00 2165 2.10 4.20 1.08 145 TVD_SPACE_RATIO_MINFP 2162 0.78 0.17 1.08 146 XM_B_Phish66 2075 1.58 2.70 1.03 147 XM_B_Investor 2006 1.85 3.60 1.00 148 XM_OfRef6 1909 1.87 3.78 0.95 149 XMPhish30 1847 0.88 0.80 0.92 150 T_MANY_PILL_PRICE 1742 0.59 0.01 0.87 151 TooManyTo_003 1725 0.67 0.29 0.86 152 TR_MetaPhish_Combo_01 1716 0.98 1.25 0.85 153 RCVD_IN_BL_SPAMCOP_NET 1716 4.57 12.24 0.85 154 DKIM_ADSP_CUSTOM_MED 1675 1.04 1.46 0.83 155 SHORTENED_URL_HREF 1668 0.63 0.21 0.83 156 MPART_ALT_DIFF_COUNT 1576 1.03 1.55 0.78 157 XMHTMLBadTable_001 1570 0.95 1.30 0.78 158 XMBody_95 1555 0.56 0.13 0.77 159 XM_E_Blogspot 1542 0.59 0.24 0.77 160 T_XMHurry_00 1537 1.19 2.05 0.76 161 HTML_IMAGE_ONLY_20 1527 1.04 1.61 0.76 162 XMBrknScrpt_02 1521 1.03 1.59 0.76 163 XM_B_COPY_HTML 1508 0.81 0.93 0.75 164 XMSubMetaI_00 1477 0.79 0.90 0.74 165 KHOP_HELO_FCRDNS 1432 1.42 2.87 0.71 166 XM_UB50 1412 1.88 4.29 0.70 167 XMSubMetaSxObfu_02 1381 0.60 0.42 0.69 168 T_XMDrugObfuBody_00 1376 1.00 1.64 0.68 169 TooManyTo_004 1294 0.52 0.26 0.64 170 XMLngstWrd_00 1291 2.42 6.09 0.64 171 XM_ProductURIs 1286 0.79 1.11 0.64 172 T_FILL_THIS_FORM_SHORT 1284 1.66 3.77 0.64 173 PLING_QUERY 1277 0.66 0.72 0.64 174 USER_IN_WHITELIST 1262 0.42 0.00 0.63 175 USER_IN_WELCOMELIST 1262 0.42 0.00 0.63 176 XM_B_SpammyWords4 1235 0.90 1.48 0.61 177 RCVD_IN_MSPIKE_BL 1226 1.60 3.65 0.61 178 TR_XM_MSPIKECOMBO 1225 1.53 3.42 0.61 179 XMGenDplmaNmb 1212 0.85 1.37 0.60 180 RCVD_IN_MSPIKE_L3 1179 0.91 1.58 0.59 181 HTTPS_HTTP_MISMATCH 1167 0.78 1.18 0.58 182 XM_H_PHPMailer 1166 0.68 0.87 0.58 183 XM_B_COVIDMETA 1159 0.67 0.87 0.58 184 HTML_TAG_BALANCE_BODY 1145 0.99 1.86 0.57 185 XMLngstWrd_01 1128 2.34 6.00 0.56 186 RDNS_DYNAMIC 1111 0.76 1.20 0.55 187 TooManyTo_005 1088 0.44 0.24 0.54 188 TM2_M_A_HREF_HREF 1088 0.59 0.68 0.54 189 URI_TRY_3LD 1063 0.75 1.21 0.53 190 XM_S_SubURI 1057 0.36 0.03 0.53 191 BODY_ENHANCEMENT2 1049 0.35 0.01 0.52 192 DATE_IN_PAST_03_06 1042 0.53 0.56 0.52 193 NML_ADSP_CUSTOM_MED 1028 0.79 1.38 0.51 194 RELAYCOUNTRY_GB 1007 0.55 0.64 0.50 195 TR_XM_SPAMCOP 994 2.70 7.24 0.49 196 FORGED_GMAIL_RCVD 990 0.76 1.31 0.49 197 XMHTML_After_End 967 0.84 1.59 0.48 198 XM_D_tchamptons_WL 953 0.33 0.03 0.47 199 HELO_NODOT 921 0.49 0.54 0.46 200 PRESENTAMOS_ES 916 0.31 0.00 0.46 ----------------------------------------------------------------------