Email: 507336 Autolearn: 0 AvgScore: 3.82 AvgScanTime: 1.42 sec Spam: 165385 Autolearn: 0 AvgScore: 13.97 AvgScanTime: 1.56 sec Ham: 341951 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.34 sec Time Spent Running SA: 199.50 hours Time Spent Processing Spam: 71.81 hours Time Spent Processing Ham: 127.69 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 158834 89.20 96.04 85.90 2 DKIM_SIGNED 146161 76.79 88.38 71.19 3 XM_DK_Pass 142995 74.83 86.46 69.21 4 DKIM_VALID 142361 74.03 86.08 68.21 5 RELAYCOUNTRY_US 136711 80.66 82.66 79.69 6 XM_B_Unicode 131742 72.86 79.66 69.57 7 DCC_CHECK 121318 44.86 73.35 31.07 8 XMListUnsubscribeExists 115309 53.81 69.72 46.12 9 DKIM_VALID_AU 109270 57.11 66.07 52.78 10 XM_B_SpammyWords 109130 49.60 65.99 41.67 11 RCVD_IN_MSPIKE_H2 74997 39.13 45.35 36.13 12 BAYES_50 72095 50.58 43.59 53.96 13 XM_B_Unicode3 71821 42.24 43.43 41.66 14 XM_DK_Undo_02 68759 17.66 41.58 6.09 15 XM_B_SpammyWords2 61132 23.55 36.96 17.06 16 LOC_TINY_FONT_1 61128 26.42 36.96 21.32 17 FVGT_m_MULTI_ODD 59420 28.17 35.93 24.42 18 MIME_HTML_ONLY 56441 23.60 34.13 18.50 19 HTML_FONT_LOW_CONTRAST 55514 28.28 33.57 25.72 20 BAYES_99 53451 14.91 32.32 6.49 21 TR_XM_DKIM_Undo 53352 13.64 32.26 4.63 22 DKIM_VALID_EF 50697 28.34 30.65 27.23 23 T_KAM_HTML_FONT_INVALID 48806 22.80 29.51 19.56 24 DCC_CHECK_NEGATIVE 44037 55.10 26.63 68.87 25 BAYES_999 41831 11.91 25.29 5.44 26 TR_DCC_Bayes_99 38439 8.73 23.24 1.70 27 XMSubLong 36580 22.31 22.12 22.41 28 XM_Body_Dirty_Words 35034 14.40 21.18 11.12 29 T_TM2_M_HEADER_IN_MSG 34234 27.26 20.70 30.44 30 RELAYCOUNTRY_META 32833 8.89 19.85 3.59 31 XM_Multi_Part_URI 27314 13.41 16.52 11.90 32 XM_B_Unsub 25560 10.57 15.45 8.20 33 TR_XM_BayesUnsub 24678 9.08 14.92 6.25 34 UNPARSEABLE_RELAY 23260 9.73 14.06 7.64 35 LOTS_OF_MONEY 23228 8.88 14.04 6.38 36 TR_XM_UnparsRelay 22692 8.50 13.72 5.97 37 BOTNET_IPINHOSTNAME 22212 7.51 13.43 4.64 38 RCVD_IN_MSPIKE_WL 21788 14.67 13.17 15.40 39 TR_XM_SpammyWords4 20286 6.57 12.27 3.81 40 FSL_BULK_SIG 20161 5.77 12.19 2.66 41 XM_B_SpammyWords3 19342 6.41 11.70 3.86 42 RCVD_IN_MSPIKE_H3 19045 11.07 11.52 10.86 43 TR_XM_SpammyWords2 18843 4.41 11.39 1.04 44 BOTNET 18225 4.56 11.02 1.43 45 TR_XM_SpammyRelay 17466 4.45 10.56 1.50 46 XMSexyCombo_05 16922 5.33 10.23 2.95 47 RCVD_IN_BL_SPAMCOP_NET 16612 3.59 10.04 0.47 48 MPART_ALT_DIFF 16508 6.71 9.98 5.13 49 XM_Evil_Numbers_Gen 14130 7.93 8.54 7.63 50 UNTRUSTED_Relay 14000 3.62 8.47 1.28 51 TM2_M_VERY_LONG_WORD 12901 3.34 7.80 1.18 52 BAYES_80 12657 5.51 7.65 4.48 53 XM_UncommonTLD01 12451 4.86 7.53 3.58 54 BAYES_60 11914 8.58 7.20 9.25 55 RELAYCOUNTRY_CA 11905 2.94 7.20 0.88 56 LotsOfNums_01 11866 8.26 7.17 8.78 57 MIME_HTML_ONLY_MULTI 11763 4.44 7.11 3.15 58 HTML_MIME_NO_HTML_TAG 11722 3.62 7.09 1.95 59 HTML_IMAGE_RATIO_02 11275 5.84 6.82 5.36 60 XM_SendGrid 11096 5.30 6.71 4.63 61 XM_B_Investor 10297 3.18 6.23 1.71 62 TR_XM_SPAMCOP 10056 2.17 6.08 0.28 63 XM_B_Phish_Phrases 9711 3.85 5.87 2.87 64 XM_H_Long_From01 9633 5.22 5.82 4.92 65 TR_XM_PhishingBody 9081 4.04 5.49 3.33 66 RCVD_IN_MSPIKE_BL 8518 2.51 5.15 1.23 67 XMSubMetaSx_00 8496 3.89 5.14 3.29 68 XMLngstWrd_00 8337 2.12 5.04 0.71 69 XM_GoogleGroups 8337 2.56 5.04 1.36 70 TR_XM_MSPIKECOMBO 8323 2.47 5.03 1.23 71 XMLngstWrd_01 8248 2.01 4.99 0.58 72 XMLngstWrd_02 8102 1.89 4.90 0.43 73 BAYES_95 8096 3.41 4.90 2.70 74 XM_B_SpammyTLD 7959 3.07 4.81 2.23 75 XMLngstWrd_03 7664 1.72 4.63 0.30 76 XMLngstWrd_04 7539 1.62 4.56 0.20 77 HTML_TITLE_SUBJ_DIFF 7524 1.53 4.55 0.07 78 TooManyTo_001 7505 7.59 4.54 9.06 79 HTML_IMAGE_RATIO_04 7494 4.75 4.53 4.86 80 UPPERCASE_75_100 7480 1.50 4.52 0.03 81 TR_XM_DK_SendGrid 7220 3.39 4.37 2.93 82 T_XMDrugObfuBody_14 7124 2.49 4.31 1.61 83 XMStrtUSub 6827 4.15 4.13 4.16 84 XM_SPF_SoftFail 6784 2.83 4.10 2.21 85 MIME_HTML_MOSTLY 6555 3.01 3.96 2.55 86 T_REMOTE_IMAGE 6235 3.91 3.77 3.98 87 XMNumbers 6169 4.30 3.73 4.58 88 XM_UB50 5964 1.71 3.61 0.79 89 TR_XM_SpammyWords3 5564 1.44 3.36 0.50 90 XM_DIRTYINTL 5562 1.36 3.36 0.40 91 XM_OfRef6 5545 1.71 3.35 0.91 92 XMDiploma_00 5485 1.95 3.32 1.28 93 XM_CamelCaseFrm001 5367 2.37 3.25 1.94 94 XM_B_Phish66 5245 2.34 3.17 1.95 95 TR_XM_SpammyWords5 5212 1.92 3.15 1.33 96 RCVD_IN_VALIDITY_SAFE 5164 4.21 3.12 4.74 97 T_XMDrugObfuBody_08 5078 1.88 3.07 1.30 98 MIME_QP_LONG_LINE 5062 4.69 3.06 5.48 99 URI_NOVOWEL 5044 2.50 3.05 2.23 100 URIBL_DBL_SPAM 4959 0.99 3.00 0.02 101 HTML_IMAGE_RATIO_06 4851 3.79 2.93 4.21 102 T_FILL_THIS_FORM_SHORT 4768 1.51 2.88 0.84 103 SpammyFromTLD_01 4685 1.45 2.83 0.78 104 RCVD_IN_MSPIKE_L4 4661 1.50 2.82 0.86 105 BOTNET_NORDNS 4653 0.93 2.81 0.01 106 TM2_M_URI_OPT_OUT 4643 2.39 2.81 2.18 107 RCVD_IN_VALIDITY_RPBL 4594 0.92 2.78 0.03 108 SpammyFromTLD_02 4516 1.23 2.73 0.50 109 RCVD_IN_VALIDITY_CERTIFIED 4331 3.68 2.62 4.19 110 XM_B_Unsub2 4294 1.90 2.60 1.56 111 HTML_IMAGE_RATIO_08 4282 2.51 2.59 2.47 112 T_TooManySym_01 4139 5.81 2.50 7.41 113 RCVD_IN_IADB_LISTED 3968 4.24 2.40 5.13 114 KHOP_HELO_FCRDNS 3922 1.80 2.37 1.52 115 PDS_OTHER_BAD_TLD 3902 0.91 2.36 0.22 116 XM_DK_Undo_01 3892 1.82 2.35 1.56 117 DKIM_INVALID 3800 2.76 2.30 2.98 118 XM_B_SpammyWords4 3766 1.17 2.28 0.63 119 XMBody_17 3646 1.07 2.20 0.52 120 USER_IN_DEF_DKIM_WL 3534 8.79 2.14 12.01 121 URI_PHP_REDIR 3487 0.69 2.11 0.00 122 RCVD_IN_IADB_SPF 3364 3.75 2.03 4.58 123 XM_UB99 3278 0.65 1.98 0.00 124 TR_XM_SB_Phish 3204 2.15 1.94 2.25 125 XMSubPhish11 3113 2.11 1.88 2.22 126 RCVD_IN_IADB_DK 3073 3.30 1.86 4.00 127 RCVD_IN_IADB_SENDERID 3062 3.39 1.85 4.13 128 T_XMHurry_00 3041 1.00 1.84 0.59 129 URI_HEX 3030 1.37 1.83 1.15 130 MAILING_LIST_MULTI 2990 2.59 1.81 2.97 131 HTTPS_HTTP_MISMATCH 2975 1.05 1.80 0.69 132 TR_LOTS_OF_MONEY3 2929 0.69 1.77 0.17 133 ALL_TRUSTED 2920 12.49 1.77 17.67 134 FROM_EXCESS_BASE64 2758 2.24 1.67 2.52 135 BAYES_40 2731 4.17 1.65 5.39 136 XM_B_COVIDMETA 2731 0.81 1.65 0.41 137 RCVD_IN_PSBL 2687 0.61 1.62 0.11 138 RCVD_IN_MSPIKE_H4 2625 3.31 1.59 4.15 139 SUBJ_ALL_CAPS 2623 1.64 1.59 1.67 140 HK_RANDOM_REPLYTO 2592 0.61 1.57 0.14 141 XMStockSpam_06 2571 0.99 1.55 0.72 142 TR_XM_PHPDW 2543 0.76 1.54 0.38 143 XMGenDplmaNmb 2534 0.95 1.53 0.67 144 XMSexyCombo_01 2534 0.82 1.53 0.48 145 TR_XM_FormFill 2521 0.51 1.52 0.02 146 TR_XM_PHPForged 2498 0.87 1.51 0.56 147 TR_XM_MSPIKECOMBO2 2477 0.59 1.50 0.15 148 XM_UB999 2443 0.48 1.48 0.00 149 URIBL_BLACK 2440 0.54 1.48 0.09 150 RCVD_IN_IADB_VOUCHED 2438 2.70 1.47 3.29 151 TR_XM_FormFill2 2435 0.70 1.47 0.32 152 TR_XM_NoHeaderRelay 2425 0.56 1.47 0.13 153 XM_H_PHPOS 2415 0.69 1.46 0.31 154 TR_XM_COVIDMETA4 2405 0.62 1.45 0.22 155 XM_URI_RBL 2405 0.54 1.45 0.10 156 T_XMDrugObfuBody_00 2331 0.88 1.41 0.63 157 RELAYCOUNTRY_FR 2250 0.60 1.36 0.23 158 XM_H_Undi_Recip 2230 0.63 1.35 0.28 159 XMHTML_After_End 2195 0.88 1.33 0.66 160 HTML_TAG_BALANCE_BODY 2179 0.83 1.32 0.60 161 RELAYCOUNTRY_RU 2163 0.44 1.31 0.03 162 RELAYCOUNTRY_AU 2153 0.64 1.30 0.32 163 XM_H_Long_From02 2094 1.28 1.27 1.29 164 RCVD_IN_MSPIKE_L5 2048 0.45 1.24 0.07 165 XMBdyGiftCard01 2030 0.84 1.23 0.65 166 MPART_ALT_DIFF_COUNT 1996 0.78 1.21 0.57 167 XMMoneyMeta_00 1966 0.81 1.19 0.63 168 TR_XM_BayesRelay 1960 0.39 1.19 0.00 169 XM_B_DynamicLink 1931 0.40 1.17 0.03 170 BAYES_20 1923 3.00 1.16 3.89 171 XM_PDF 1917 3.72 1.16 4.95 172 URI_TRY_3LD 1841 0.76 1.11 0.59 173 HTML_TAG_BALANCE_CENTER 1833 0.43 1.11 0.10 174 RELAYCOUNTRY_DE 1828 0.55 1.11 0.29 175 XM_B_SEO 1802 1.05 1.09 1.03 176 MONEY_NOHTML 1772 0.41 1.07 0.08 177 HTML_FONT_SIZE_LARGE 1753 0.45 1.06 0.15 178 MIXED_CENTER_CASE 1698 0.34 1.03 0.00 179 XMReplyNow 1695 0.50 1.02 0.25 180 MIXED_HREF_CASE 1679 0.33 1.02 0.00 181 MIXED_IMG_CASE 1668 0.33 1.01 0.01 182 TR_XM_SEO4 1661 0.40 1.00 0.11 183 MIXED_AREA_CASE 1660 0.33 1.00 0.00 184 T_Symld_Words_02 1641 0.74 0.99 0.62 185 XM_ProductURIs 1640 0.67 0.99 0.52 186 TR_XM_COVIDMETA1 1621 0.47 0.98 0.22 187 RCVD_IN_MSPIKE_L3 1614 0.52 0.98 0.30 188 TR_XM_Undi_Recip5 1602 0.32 0.97 0.01 189 URI_GOOG_STO_SPAMMY 1589 0.31 0.96 0.00 190 MIXED_FONT_CASE 1588 0.31 0.96 0.00 191 XMSubNoVowel 1545 1.97 0.93 2.47 192 TR_Symld_Words 1518 1.31 0.92 1.50 193 XMPhish30 1514 0.76 0.92 0.68 194 RELAYCOUNTRY_IN 1495 0.35 0.90 0.08 195 REMOVE_BEFORE_LINK 1487 0.47 0.90 0.26 196 RCVD_IN_IADB_OPTIN 1475 1.73 0.89 2.13 197 HTML_FONT_FACE_BAD 1473 1.01 0.89 1.06 198 DIET_1 1470 0.51 0.89 0.32 199 HTML_IMAGE_ONLY_20 1467 0.76 0.89 0.71 200 XM_UB60 1465 0.34 0.89 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 293729 89.20 96.04 85.90 2 RELAYCOUNTRY_US 272506 80.66 82.66 79.69 3 DKIM_SIGNED 243423 76.79 88.38 71.19 4 XM_B_Unicode 237909 72.86 79.66 69.57 5 XM_DK_Pass 236654 74.83 86.46 69.21 6 DCC_CHECK_NEGATIVE 235517 55.10 26.63 68.87 7 DKIM_VALID 233231 74.03 86.08 68.21 8 BAYES_50 184521 50.58 43.59 53.96 9 DKIM_VALID_AU 180475 57.11 66.07 52.78 10 XMListUnsubscribeExists 157702 53.81 69.72 46.12 11 XM_B_SpammyWords 142489 49.60 65.99 41.67 12 XM_B_Unicode3 142459 42.24 43.43 41.66 13 RCVD_IN_MSPIKE_H2 123540 39.13 45.35 36.13 14 DCC_CHECK 106258 44.86 73.35 31.07 15 T_TM2_M_HEADER_IN_MSG 104074 27.26 20.70 30.44 16 DKIM_VALID_EF 93098 28.34 30.65 27.23 17 HTML_FONT_LOW_CONTRAST 87937 28.28 33.57 25.72 18 FVGT_m_MULTI_ODD 83501 28.17 35.93 24.42 19 XMSubLong 76627 22.31 22.12 22.41 20 LOC_TINY_FONT_1 72889 26.42 36.96 21.32 21 T_KAM_HTML_FONT_INVALID 66871 22.80 29.51 19.56 22 MIME_HTML_ONLY 63274 23.60 34.13 18.50 23 ALL_TRUSTED 60435 12.49 1.77 17.67 24 XM_B_SpammyWords2 58336 23.55 36.96 17.06 25 RCVD_IN_MSPIKE_WL 52655 14.67 13.17 15.40 26 USER_IN_DEF_DKIM_WL 41062 8.79 2.14 12.01 27 XM_Multi_Part_URI 40695 13.41 16.52 11.90 28 BAYES_00 38536 7.88 0.88 11.27 29 XM_Body_Dirty_Words 38028 14.40 21.18 11.12 30 RCVD_IN_MSPIKE_H3 37131 11.07 11.52 10.86 31 BAYES_60 31639 8.58 7.20 9.25 32 TooManyTo_001 30992 7.59 4.54 9.06 33 LotsOfNums_01 30036 8.26 7.17 8.78 34 XM_B_Unsub 28042 10.57 15.45 8.20 35 XM_DKIMWhitelistDomains 27820 5.51 0.08 8.14 36 UNPARSEABLE_RELAY 26123 9.73 14.06 7.64 37 XM_Evil_Numbers_Gen 26091 7.93 8.54 7.63 38 T_TooManySym_01 25351 5.81 2.50 7.41 39 IN_ZIMBRA_NJ_WHITELIST 24032 4.77 0.11 7.03 40 BAYES_99 22201 14.91 32.32 6.49 41 TR_XM_DK_Bayes 21981 4.53 0.60 6.43 42 LOTS_OF_MONEY 21822 8.88 14.04 6.38 43 TR_XM_DK_Bayes1 21459 4.42 0.59 6.28 44 TR_XM_BayesUnsub 21367 9.08 14.92 6.25 45 XM_DK_Undo_02 20819 17.66 41.58 6.09 46 TR_XM_UnparsRelay 20420 8.50 13.72 5.97 47 MIME_QP_LONG_LINE 18723 4.69 3.06 5.48 48 BAYES_999 18596 11.91 25.29 5.44 49 BAYES_40 18447 4.17 1.65 5.39 50 TR_XM_DK_Bayes2 18371 3.78 0.49 5.37 51 HTML_IMAGE_RATIO_02 18344 5.84 6.82 5.36 52 MPART_ALT_DIFF 17547 6.71 9.98 5.13 53 RCVD_IN_IADB_LISTED 17528 4.24 2.40 5.13 54 XM_PDF 16938 3.72 1.16 4.95 55 XM_H_Long_From01 16833 5.22 5.82 4.92 56 HTML_IMAGE_RATIO_04 16609 4.75 4.53 4.86 57 RCVD_IN_VALIDITY_SAFE 16210 4.21 3.12 4.74 58 BOTNET_IPINHOSTNAME 15868 7.51 13.43 4.64 59 TR_XM_DKIM_Undo 15824 13.64 32.26 4.63 60 XM_SendGrid 15818 5.30 6.71 4.63 61 XMNumbers 15658 4.30 3.73 4.58 62 RCVD_IN_IADB_SPF 15650 3.75 2.03 4.58 63 BAYES_80 15319 5.51 7.65 4.48 64 T_TooManySym_02 14959 3.19 0.73 4.37 65 XM_H_Trusted_IP 14582 2.87 0.00 4.26 66 HTML_IMAGE_RATIO_06 14389 3.79 2.93 4.21 67 RCVD_IN_VALIDITY_CERTIFIED 14327 3.68 2.62 4.19 68 XMStrtUSub 14242 4.15 4.13 4.16 69 RCVD_IN_MSPIKE_H4 14176 3.31 1.59 4.15 70 RCVD_IN_IADB_SENDERID 14121 3.39 1.85 4.13 71 RCVD_IN_IADB_DK 13683 3.30 1.86 4.00 72 T_REMOTE_IMAGE 13612 3.91 3.77 3.98 73 BAYES_20 13287 3.00 1.16 3.89 74 XM_B_SpammyWords3 13192 6.41 11.70 3.86 75 TR_XM_SpammyWords4 13045 6.57 12.27 3.81 76 ANY_BOUNCE_MESSAGE 12280 2.65 0.69 3.59 77 BOUNCE_MESSAGE 12278 2.65 0.69 3.59 78 RELAYCOUNTRY_META 12277 8.89 19.85 3.59 79 XM_UncommonTLD01 12225 4.86 7.53 3.58 80 TR_XM_PhishingBody 11404 4.04 5.49 3.33 81 RCVD_IN_IADB_VOUCHED 11251 2.70 1.47 3.29 82 XMSubMetaSx_00 11237 3.89 5.14 3.29 83 MIME_HTML_ONLY_MULTI 10780 4.44 7.11 3.15 84 DKIM_INVALID 10192 2.76 2.30 2.98 85 MAILING_LIST_MULTI 10141 2.59 1.81 2.97 86 XMSexyCombo_05 10104 5.33 10.23 2.95 87 TR_XM_DK_SendGrid 10003 3.39 4.37 2.93 88 XM_B_Phish_Phrases 9803 3.85 5.87 2.87 89 BAYES_95 9225 3.41 4.90 2.70 90 FSL_BULK_SIG 9103 5.77 12.19 2.66 91 BAYES_05 8769 1.94 0.64 2.56 92 MIME_HTML_MOSTLY 8736 3.01 3.96 2.55 93 FROM_EXCESS_BASE64 8625 2.24 1.67 2.52 94 XMSubNoVowel 8462 1.97 0.93 2.47 95 HTML_IMAGE_RATIO_08 8457 2.51 2.59 2.47 96 TooManyTo_002 7940 1.75 0.56 2.32 97 TR_XM_SB_Phish 7681 2.15 1.94 2.25 98 URI_NOVOWEL 7634 2.50 3.05 2.23 99 XM_B_SpammyTLD 7610 3.07 4.81 2.23 100 XMSubPhish11 7585 2.11 1.88 2.22 101 XM_SPF_SoftFail 7549 2.83 4.10 2.21 102 TM2_M_URI_OPT_OUT 7460 2.39 2.81 2.18 103 RCVD_IN_IADB_OPTIN 7283 1.73 0.89 2.13 104 HELO_NODOT 7008 1.57 0.57 2.05 105 HELO_NO_DOMAIN 6958 1.55 0.56 2.03 106 INVALID_MSGID 6802 1.40 0.18 1.99 107 HTML_MIME_NO_HTML_TAG 6665 3.62 7.09 1.95 108 XM_B_Phish66 6652 2.34 3.17 1.95 109 XM_CamelCaseFrm001 6633 2.37 3.25 1.94 110 IN_HORDE_ADDRESS_BOOK 6379 1.29 0.10 1.87 111 TVD_RCVD_IP 6368 1.34 0.26 1.86 112 T_TooManySym_03 5947 1.27 0.31 1.74 113 TO_MALFORMED 5940 1.19 0.07 1.74 114 XM_B_Investor 5841 3.18 6.23 1.71 115 TR_DCC_Bayes_99 5828 8.73 23.24 1.70 116 SUBJ_ALL_CAPS 5713 1.64 1.59 1.67 117 T_XMDrugObfuBody_14 5491 2.49 4.31 1.61 118 XM_B_Unsub2 5345 1.90 2.60 1.56 119 XM_DK_Undo_01 5336 1.82 2.35 1.56 120 KHOP_HELO_FCRDNS 5209 1.80 2.37 1.52 121 TooManyTo_003 5140 1.16 0.45 1.50 122 TR_Symld_Words 5129 1.31 0.92 1.50 123 TR_XM_SpammyRelay 5127 4.45 10.56 1.50 124 BOTNET 4904 4.56 11.02 1.43 125 XMGappySubj_01 4863 0.99 0.10 1.42 126 XMBSHREFv2 4759 1.07 0.40 1.39 127 XM_GoogleGroups 4634 2.56 5.04 1.36 128 TR_XM_SpammyWords5 4547 1.92 3.15 1.33 129 T_XMDrugObfuBody_08 4444 1.88 3.07 1.30 130 XM_H_Long_From02 4407 1.28 1.27 1.29 131 XMCapTrack 4402 0.97 0.33 1.29 132 XMDiploma_00 4387 1.95 3.32 1.28 133 UNTRUSTED_Relay 4374 3.62 8.47 1.28 134 RCVD_IN_MSPIKE_BL 4213 2.51 5.15 1.23 135 TR_XM_MSPIKECOMBO 4208 2.47 5.03 1.23 136 DKIM_ADSP_CUSTOM_MED 4077 1.06 0.79 1.19 137 TM2_M_VERY_LONG_WORD 4031 3.34 7.80 1.18 138 URI_HEX 3921 1.37 1.83 1.15 139 TooManyTo_004 3677 0.82 0.30 1.08 140 HTML_FONT_FACE_BAD 3633 1.01 0.89 1.06 141 TR_XM_SpammyWords2 3547 4.41 11.39 1.04 142 XM_B_SEO 3535 1.05 1.09 1.03 143 TVD_SPACE_RATIO 3461 0.72 0.11 1.01 144 RCVD_IN_RP_SAFE 3186 0.83 0.63 0.93 145 XM_OfRef6 3114 1.71 3.35 0.91 146 NML_ADSP_CUSTOM_MED 3066 0.81 0.64 0.90 147 TooManyTo_005 3033 0.68 0.26 0.89 148 TR_MetaPhish_Combo_01 3027 0.85 0.77 0.89 149 RELAYCOUNTRY_CA 3006 2.94 7.20 0.88 150 BASE64_LENGTH_79_INF 2974 0.66 0.22 0.87 151 FVGT_m_MULTI_ODD_EMAIL 2963 0.61 0.09 0.87 152 XM_H_PHPMailer 2948 0.81 0.71 0.86 153 RCVD_IN_MSPIKE_L4 2938 1.50 2.82 0.86 154 T_FILL_THIS_FORM_SHORT 2887 1.51 2.88 0.84 155 XMNoVowels 2861 0.67 0.33 0.84 156 RCVD_IN_RP_CERTIFIED 2831 0.72 0.50 0.83 157 XM_UB50 2708 1.71 3.61 0.79 158 SpammyFromTLD_01 2674 1.45 2.83 0.78 159 FORGED_GMAIL_RCVD 2644 0.74 0.68 0.77 160 XMBody_95 2616 0.56 0.12 0.77 161 XMStockSpam_06 2463 0.99 1.55 0.72 162 FROM_GOV_DKIM_AU 2439 0.56 0.24 0.71 163 XMLngstWrd_00 2413 2.12 5.04 0.71 164 HTML_IMAGE_ONLY_20 2411 0.76 0.89 0.71 165 XM_S_SpammyWords 2365 0.72 0.77 0.69 166 TR_XM_Spammywords 2365 0.72 0.77 0.69 167 HTTPS_HTTP_MISMATCH 2345 1.05 1.80 0.69 168 XMPhish30 2332 0.76 0.92 0.68 169 MSGID_NOFQDN1 2326 0.46 0.01 0.68 170 XMGenDplmaNmb 2299 0.95 1.53 0.67 171 XM_ShortIntro_01 2298 0.57 0.36 0.67 172 RELAYCOUNTRY_GB 2260 0.70 0.78 0.66 173 XMHTML_After_End 2256 0.88 1.33 0.66 174 XMBdyGiftCard01 2213 0.84 1.23 0.65 175 XM_B_SpammyWords4 2166 1.17 2.28 0.63 176 XMMoneyMeta_00 2146 0.81 1.19 0.63 177 T_XMDrugObfuBody_00 2144 0.88 1.41 0.63 178 T_Symld_Words_02 2112 0.74 0.99 0.62 179 HTML_TAG_BALANCE_BODY 2041 0.83 1.32 0.60 180 T_XMHurry_00 2033 1.00 1.84 0.59 181 URI_TRY_3LD 2003 0.76 1.11 0.59 182 T_OBFU_PDF_ATTACH 1974 0.54 0.46 0.58 183 XMLngstWrd_01 1968 2.01 4.99 0.58 184 SHORT_HELO_AND_INLINE_IMAGE 1963 0.41 0.07 0.57 185 MPART_ALT_DIFF_COUNT 1947 0.78 1.21 0.57 186 TR_XM_PHPForged 1927 0.87 1.51 0.56 187 XMSubEmpty 1921 0.44 0.17 0.56 188 XMHTMLBadTable_001 1911 0.63 0.79 0.56 189 XM_B_COPY_HTML 1809 0.57 0.67 0.53 190 RCVD_IN_SORBS_DUL 1801 0.39 0.10 0.53 191 XMBody_17 1778 1.07 2.20 0.52 192 XM_ProductURIs 1763 0.67 0.99 0.52 193 XMSubMetaI_00 1731 0.62 0.85 0.51 194 SpammyFromTLD_02 1722 1.23 2.73 0.50 195 TR_XM_SpammyWords3 1721 1.44 3.36 0.50 196 XMBrknScrpt_02 1715 0.62 0.86 0.50 197 RDNS_DYNAMIC 1682 0.53 0.62 0.49 198 XMSexyCombo_01 1626 0.82 1.53 0.48 199 RCVD_IN_BL_SPAMCOP_NET 1611 3.59 10.04 0.47 200 HTML_IMAGE_ONLY_28 1602 0.45 0.42 0.47 ----------------------------------------------------------------------