Email: 595502 Autolearn: 0 AvgScore: 0.76 AvgScanTime: 1.43 sec Spam: 167499 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.64 sec Ham: 428003 Autolearn: 0 AvgScore: -4.41 AvgScanTime: 1.35 sec Time Spent Running SA: 237.29 hours Time Spent Processing Spam: 76.23 hours Time Spent Processing Ham: 161.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 154968 89.83 92.52 88.78 2 DKIM_SIGNED 147610 66.79 88.13 58.44 3 XM_DK_Pass 144409 65.59 86.21 57.51 4 DKIM_VALID 139347 64.16 83.19 56.71 5 XM_B_Unicode 137498 76.67 82.09 74.55 6 RELAYCOUNTRY_US 134829 81.79 80.50 82.30 7 DCC_CHECK 115452 37.46 68.93 25.15 8 XMListUnsubscribeExists 114524 47.21 68.37 38.93 9 XM_B_SpammyWords 112144 48.43 66.95 41.18 10 DKIM_VALID_AU 103598 49.52 61.85 44.70 11 RCVD_IN_MSPIKE_H2 77725 34.53 46.40 29.89 12 XM_B_Unicode3 77214 46.36 46.10 46.46 13 BAYES_50 71128 48.54 42.46 50.92 14 XM_DK_Undo_02 69563 15.33 41.53 5.07 15 XM_B_SpammyWords2 64517 21.18 38.52 14.39 16 LOC_TINY_FONT_1 58380 23.01 34.85 18.38 17 DKIM_VALID_EF 57985 25.62 34.62 22.10 18 TR_XM_DKIM_Undo 56969 12.09 34.01 3.51 19 HTML_FONT_LOW_CONTRAST 54059 24.68 32.27 21.71 20 MIME_HTML_ONLY 52474 25.59 31.33 23.35 21 FVGT_m_MULTI_ODD 52445 23.17 31.31 19.99 22 BAYES_99 52358 12.64 31.26 5.35 23 DCC_CHECK_NEGATIVE 52011 62.49 31.05 74.80 24 T_KAM_HTML_FONT_INVALID 48654 19.19 29.05 15.34 25 BAYES_999 41147 10.18 24.57 4.55 26 XMSubLong 38618 21.79 23.06 21.29 27 XM_Body_Dirty_Words 38344 12.80 22.89 8.85 28 T_TM2_M_HEADER_IN_MSG 36871 24.09 22.01 24.90 29 TR_DCC_Bayes_99 36834 7.05 21.99 1.20 30 RELAYCOUNTRY_META 32995 7.69 19.70 2.98 31 XM_Multi_Part_URI 30177 11.99 18.02 9.63 32 XM_B_Unsub 24600 8.81 14.69 6.51 33 LOTS_OF_MONEY 24446 8.37 14.59 5.93 34 TR_XM_BayesUnsub 23878 7.62 14.26 5.02 35 RCVD_IN_MSPIKE_WL 23638 13.86 14.11 13.77 36 TR_XM_SpammyRelay 22128 4.73 13.21 1.40 37 BOTNET_IPINHOSTNAME 21546 6.41 12.86 3.89 38 TR_XM_SpammyWords4 20199 6.06 12.06 3.72 39 XM_B_SpammyWords3 19989 5.52 11.93 3.02 40 TR_XM_SpammyWords2 19594 3.76 11.70 0.65 41 UNPARSEABLE_RELAY 19193 7.39 11.46 5.80 42 FSL_BULK_SIG 19155 4.73 11.44 2.10 43 RCVD_IN_BL_SPAMCOP_NET 18831 3.44 11.24 0.39 44 TR_XM_UnparsRelay 18745 6.38 11.19 4.50 45 BOTNET 18268 4.02 10.91 1.33 46 XM_UncommonTLD01 16181 5.58 9.66 3.99 47 XMSexyCombo_05 16002 4.40 9.55 2.39 48 RCVD_IN_MSPIKE_H3 15575 9.01 9.30 8.90 49 RELAYCOUNTRY_CA 15521 3.34 9.27 1.01 50 XM_Evil_Numbers_Gen 14652 8.40 8.75 8.27 51 BAYES_80 13857 4.77 8.27 3.41 52 UNTRUSTED_Relay 13230 2.94 7.90 1.01 53 BAYES_60 13229 7.35 7.90 7.14 54 LotsOfNums_01 12221 6.90 7.30 6.75 55 TR_XM_SPAMCOP 12087 2.17 7.22 0.19 56 XM_SPF_SoftFail 11644 3.55 6.95 2.22 57 XM_H_Long_From01 11364 4.96 6.78 4.24 58 TR_XM_PhishingBody 11085 3.54 6.62 2.34 59 HTML_IMAGE_RATIO_02 10749 4.96 6.42 4.39 60 XMNumbers 10561 4.18 6.31 3.35 61 MPART_ALT_DIFF 10098 10.60 6.03 12.40 62 SUBJ_ALL_CAPS 9926 3.27 5.93 2.23 63 XM_B_Phish_Phrases 9879 3.77 5.90 2.93 64 XM_SendGrid 9586 4.27 5.72 3.70 65 TooManyTo_001 9504 6.47 5.67 6.78 66 SpammyFromTLD_01 9309 2.70 5.56 1.58 67 XM_B_SpammyTLD 9059 2.85 5.41 1.85 68 XMSubMetaSx_00 8933 3.31 5.33 2.52 69 DKIM_INVALID 8263 2.63 4.93 1.73 70 HTML_IMAGE_RATIO_04 7877 16.20 4.70 20.70 71 XMBody_17 7730 1.58 4.61 0.39 72 BAYES_95 7715 2.81 4.61 2.10 73 T_XMDrugObfuBody_08 7692 2.17 4.59 1.22 74 RCVD_IN_MSPIKE_H4 7674 4.19 4.58 4.04 75 TR_XM_SpammyWords5 7640 2.02 4.56 1.03 76 RCVD_IN_MSPIKE_BL 7543 1.74 4.50 0.65 77 T_FILL_THIS_FORM_SHORT 7410 1.78 4.42 0.75 78 TR_XM_MSPIKECOMBO 7401 1.71 4.42 0.65 79 XM_B_Investor 7385 2.05 4.41 1.13 80 T_REMOTE_IMAGE 7095 3.61 4.24 3.37 81 XM_OfRef6 6848 1.80 4.09 0.90 82 TR_XM_PHPDW 6827 2.00 4.08 1.19 83 XMStrtUSub 6826 10.81 4.08 13.44 84 TR_XM_PHPForged 6717 1.96 4.01 1.16 85 TR_XM_FormFill2 6660 1.95 3.98 1.16 86 XM_H_PHPOS 6649 1.95 3.97 1.15 87 RCVD_IN_VALIDITY_RPBL 6640 1.13 3.96 0.02 88 HTML_IMAGE_RATIO_06 6558 5.10 3.92 5.57 89 XM_B_Phish66 6127 1.98 3.66 1.32 90 TR_XM_DK_SendGrid 6107 2.78 3.65 2.44 91 XM_UB50 6062 1.49 3.62 0.65 92 MIME_HTML_MOSTLY 6000 2.86 3.58 2.57 93 RCVD_IN_VALIDITY_SAFE 5707 3.67 3.41 3.78 94 MIME_QP_LONG_LINE 5650 3.99 3.37 4.24 95 XM_DIRTYINTL 5556 1.11 3.32 0.25 96 MIME_HTML_ONLY_MULTI 5422 8.44 3.24 10.48 97 XM_DK_Undo_01 5395 1.80 3.22 1.24 98 T_XMDrugObfuBody_14 5388 2.17 3.22 1.76 99 TM2_M_URI_OPT_OUT 5177 2.27 3.09 1.95 100 XM_H_Undi_Recip 4965 0.96 2.96 0.18 101 PDS_OTHER_BAD_TLD 4829 0.90 2.88 0.13 102 HTML_IMAGE_RATIO_08 4797 2.16 2.86 1.89 103 TM2_M_VERY_LONG_WORD 4735 1.45 2.83 0.91 104 XM_CamelCaseFrm001 4621 1.93 2.76 1.61 105 RCVD_IN_VALIDITY_CERTIFIED 4620 3.19 2.76 3.36 106 XM_B_SpammyWords4 4555 1.11 2.72 0.47 107 XM_B_Unsub2 4541 1.50 2.71 1.03 108 URIBL_DBL_SPAM 4503 0.76 2.69 0.01 109 RCVD_IN_PSBL 4464 1.08 2.67 0.45 110 XMDiploma_00 4424 1.48 2.64 1.03 111 BAYES_40 4319 4.58 2.58 5.37 112 RCVD_IN_MSPIKE_L5 4299 0.75 2.57 0.03 113 T_TooManySym_01 4217 4.12 2.52 4.75 114 RCVD_IN_IADB_LISTED 3985 3.71 2.38 4.23 115 TR_XM_FormFill 3910 0.68 2.33 0.03 116 USER_IN_DEF_DKIM_WL 3847 7.52 2.30 9.56 117 BOTNET_NORDNS 3660 0.62 2.19 0.01 118 FROM_EXCESS_BASE64 3619 2.05 2.16 2.01 119 DOS_RCVD_IP_TWICE_B 3485 0.89 2.08 0.42 120 RCVD_IN_IADB_SPF 3402 3.26 2.03 3.75 121 XM_UB99 3312 0.56 1.98 0.00 122 SpammyFromTLD_02 3297 0.86 1.97 0.43 123 RCVD_IN_IADB_DK 3253 2.88 1.94 3.24 124 RCVD_IN_IADB_SENDERID 3201 2.93 1.91 3.34 125 MAILING_LIST_MULTI 3143 2.14 1.88 2.24 126 TR_XM_SB_Phish 3132 1.71 1.87 1.65 127 XMSubPhish11 3088 1.70 1.84 1.64 128 URI_NOVOWEL 3003 1.90 1.79 1.94 129 XMSexyCombo_01 2982 0.83 1.78 0.45 130 HTML_MIME_NO_HTML_TAG 2981 1.69 1.78 1.65 131 FONT_INVIS_LONG_LINE 2979 0.56 1.78 0.08 132 XM_B_COVIDMETA 2875 0.77 1.72 0.40 133 HK_RANDOM_REPLYTO 2864 0.54 1.71 0.09 134 T_XMHurry_00 2864 0.76 1.71 0.38 135 TR_XM_MSPIKECOMBO2 2852 0.55 1.70 0.10 136 RCVD_IN_MSPIKE_L3 2841 0.92 1.70 0.62 137 XM_UB999 2826 0.48 1.69 0.00 138 TR_Symld_Words 2793 1.58 1.67 1.54 139 XMStockSpam_06 2757 1.15 1.65 0.95 140 HTTPS_HTTP_MISMATCH 2735 0.94 1.63 0.67 141 T_XMDrugObfuBody_00 2730 0.86 1.63 0.56 142 TR_XM_Undi_Recip5 2725 0.47 1.63 0.01 143 ALL_TRUSTED 2654 11.49 1.58 15.37 144 URI_HEX 2648 1.23 1.58 1.09 145 UNDISC_MONEY 2604 0.44 1.55 0.01 146 BAYES_20 2603 4.72 1.55 5.95 147 KHOP_HELO_FCRDNS 2459 1.51 1.47 1.53 148 HELO_NODOT 2457 1.39 1.47 1.36 149 TR_Sbj_FN_Bdy 2418 0.50 1.44 0.13 150 TR_XM_InvalidRelay 2365 0.41 1.41 0.01 151 TR_XM_BayesRelay 2355 0.40 1.41 0.00 152 XM_URI_RBL 2344 0.46 1.40 0.09 153 XMGenDplmaNmb 2325 0.78 1.39 0.54 154 TR_XM_NoHeaderRelay 2324 0.46 1.39 0.10 155 TR_XM_Undi_RecipCombo2 2324 0.39 1.39 0.00 156 XMBdyGiftCard01 2300 0.91 1.37 0.73 157 TR_XM_SpammyWords3 2287 0.63 1.37 0.35 158 XMHTML_After_End 2275 0.90 1.36 0.72 159 TR_LOTS_OF_MONEY3 2249 0.52 1.34 0.20 160 XM_H_Long_From02 2227 0.95 1.33 0.81 161 URIBL_BLACK 2217 0.42 1.32 0.06 162 TR_XM_Undi_Recip2 2211 0.39 1.32 0.03 163 TR_XM_Base64_M1 2038 0.90 1.22 0.77 164 XMPhish30 2008 0.72 1.20 0.53 165 URI_PHP_REDIR 2001 0.34 1.19 0.00 166 TR_XM_Undi_Recip11 1978 0.35 1.18 0.03 167 XMReplyNow 1949 0.51 1.16 0.26 168 NO_DNS_FOR_FROM 1930 0.49 1.15 0.23 169 XMSubNoVowel 1911 6.16 1.14 8.12 170 XMLngstWrd_00 1859 0.72 1.11 0.56 171 MPART_ALT_DIFF_COUNT 1857 0.63 1.11 0.45 172 RCVD_IN_IADB_VOUCHED 1854 2.19 1.11 2.61 173 DIET_1 1853 0.48 1.11 0.24 174 XM_Body_Dirty_Words_01 1835 0.37 1.10 0.09 175 XMLngstWrd_01 1814 0.65 1.08 0.48 176 TR_XM_MaxWHORU 1812 0.42 1.08 0.16 177 HELO_NO_DOMAIN 1804 1.28 1.08 1.36 178 NORDNS_LOW_CONTRAST 1801 0.32 1.08 0.02 179 RELAYCOUNTRY_AU 1790 0.47 1.07 0.24 180 XMBrknScrpt_02 1772 0.64 1.06 0.47 181 HTML_TAG_BALANCE_BODY 1768 0.79 1.06 0.69 182 RELAYCOUNTRY_RU 1763 0.31 1.05 0.02 183 TR_XM_COVIDMETA1 1723 0.37 1.03 0.11 184 TR_XM_MaxSPIKE 1681 0.35 1.00 0.09 185 RELAYCOUNTRY_FR 1655 0.41 0.99 0.19 186 XM_PDF 1652 2.77 0.99 3.47 187 XM_B_DNDMA 1639 0.49 0.98 0.30 188 XM_Combo_Sbj 1631 0.44 0.97 0.23 189 XMLngstWrd_02 1600 0.53 0.96 0.36 190 HTML_IMAGE_ONLY_24 1589 0.48 0.95 0.29 191 T_Symld_Words_02 1571 0.58 0.94 0.44 192 REMOVE_BEFORE_LINK 1570 0.47 0.94 0.29 193 DKIM_ADSP_CUSTOM_MED 1566 0.81 0.93 0.76 194 URI_TRY_3LD 1547 0.54 0.92 0.39 195 XM_GoogleGroups 1531 1.08 0.91 1.15 196 URG_BIZ 1521 0.30 0.91 0.06 197 TR_Mismatch_TLD_02 1516 0.30 0.91 0.07 198 XM_OfRef7 1501 0.35 0.90 0.14 199 XM_B_COPY_HTML 1500 0.64 0.90 0.54 200 RELAYCOUNTRY_CN 1499 0.30 0.89 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 379994 89.83 92.52 88.78 2 RELAYCOUNTRY_US 352247 81.79 80.50 82.30 3 DCC_CHECK_NEGATIVE 320141 62.49 31.05 74.80 4 XM_B_Unicode 319084 76.67 82.09 74.55 5 DKIM_SIGNED 250107 66.79 88.13 58.44 6 XM_DK_Pass 246161 65.59 86.21 57.51 7 DKIM_VALID 242721 64.16 83.19 56.71 8 BAYES_50 217936 48.54 42.46 50.92 9 XM_B_Unicode3 198836 46.36 46.10 46.46 10 DKIM_VALID_AU 191312 49.52 61.85 44.70 11 XM_B_SpammyWords 176243 48.43 66.95 41.18 12 XMListUnsubscribeExists 166629 47.21 68.37 38.93 13 RCVD_IN_MSPIKE_H2 127918 34.53 46.40 29.89 14 DCC_CHECK 107647 37.46 68.93 25.15 15 T_TM2_M_HEADER_IN_MSG 106585 24.09 22.01 24.90 16 MIME_HTML_ONLY 99933 25.59 31.33 23.35 17 DKIM_VALID_EF 94587 25.62 34.62 22.10 18 HTML_FONT_LOW_CONTRAST 92901 24.68 32.27 21.71 19 XMSubLong 91119 21.79 23.06 21.29 20 XM_H_Trusted_IP 88938 14.93 0.00 20.78 21 HTML_IMAGE_RATIO_04 88618 16.20 4.70 20.70 22 HTML_FONT_FACE_BAD 88302 15.00 0.63 20.63 23 FVGT_m_MULTI_ODD 85546 23.17 31.31 19.99 24 LOC_TINY_FONT_1 78670 23.01 34.85 18.38 25 ALL_TRUSTED 65777 11.49 1.58 15.37 26 T_KAM_HTML_FONT_INVALID 65639 19.19 29.05 15.34 27 BAYES_00 64343 10.99 0.65 15.03 28 XM_B_SpammyWords2 61582 21.18 38.52 14.39 29 RCVD_IN_MSPIKE_WL 58927 13.86 14.11 13.77 30 XMStrtUSub 57519 10.81 4.08 13.44 31 MPART_ALT_DIFF 53053 10.60 6.03 12.40 32 MIME_HTML_ONLY_MULTI 44858 8.44 3.24 10.48 33 XM_Multi_Part_URI 41203 11.99 18.02 9.63 34 USER_IN_DEF_DKIM_WL 40908 7.52 2.30 9.56 35 RCVD_IN_MSPIKE_H3 38092 9.01 9.30 8.90 36 XM_Body_Dirty_Words 37870 12.80 22.89 8.85 37 XM_Evil_Numbers_Gen 35381 8.40 8.75 8.27 38 XMSubNoVowel 34773 6.16 1.14 8.12 39 BAYES_60 30568 7.35 7.90 7.14 40 TooManyTo_001 29001 6.47 5.67 6.78 41 LotsOfNums_01 28873 6.90 7.30 6.75 42 XM_B_Unsub 27866 8.81 14.69 6.51 43 XM_DKIMWhitelistDomains 26801 4.51 0.04 6.26 44 BAYES_20 25482 4.72 1.55 5.95 45 LOTS_OF_MONEY 25399 8.37 14.59 5.93 46 UNPARSEABLE_RELAY 24814 7.39 11.46 5.80 47 HTML_IMAGE_RATIO_06 23837 5.10 3.92 5.57 48 IN_ZIMBRA_NJ_WHITELIST 23684 4.01 0.10 5.53 49 BAYES_40 22963 4.58 2.58 5.37 50 BAYES_99 22910 12.64 31.26 5.35 51 XM_DK_Undo_02 21699 15.33 41.53 5.07 52 TR_XM_BayesUnsub 21500 7.62 14.26 5.02 53 TR_XM_DK_Bayes 21441 3.72 0.43 5.01 54 TR_XM_DK_Bayes1 21151 3.67 0.42 4.94 55 T_TooManySym_01 20337 4.12 2.52 4.75 56 BAYES_05 20218 3.60 0.72 4.72 57 BAYES_999 19478 10.18 24.57 4.55 58 TR_XM_UnparsRelay 19271 6.38 11.19 4.50 59 HTML_IMAGE_RATIO_02 18778 4.96 6.42 4.39 60 TR_XM_DK_Bayes2 18702 3.24 0.36 4.37 61 XM_H_Long_From01 18160 4.96 6.78 4.24 62 MIME_QP_LONG_LINE 18133 3.99 3.37 4.24 63 RCVD_IN_IADB_LISTED 18089 3.71 2.38 4.23 64 RCVD_IN_MSPIKE_H4 17276 4.19 4.58 4.04 65 XM_UncommonTLD01 17069 5.58 9.66 3.99 66 BOTNET_IPINHOSTNAME 16650 6.41 12.86 3.89 67 RCVD_IN_VALIDITY_SAFE 16166 3.67 3.41 3.78 68 RCVD_IN_IADB_SPF 16041 3.26 2.03 3.75 69 TR_XM_SpammyWords4 15902 6.06 12.06 3.72 70 XM_SendGrid 15843 4.27 5.72 3.70 71 ANY_BOUNCE_MESSAGE 15566 2.86 0.89 3.64 72 BOUNCE_MESSAGE 15565 2.86 0.89 3.64 73 TR_XM_DKIM_Undo 15025 12.09 34.01 3.51 74 XM_PDF 14863 2.77 0.99 3.47 75 XMSubLongNoVowel 14823 2.60 0.39 3.46 76 XMSubGarbage 14750 2.52 0.14 3.45 77 BAYES_80 14577 4.77 8.27 3.41 78 T_REMOTE_IMAGE 14415 3.61 4.24 3.37 79 RCVD_IN_VALIDITY_CERTIFIED 14367 3.19 2.76 3.36 80 XMNumbers 14342 4.18 6.31 3.35 81 RCVD_IN_IADB_SENDERID 14275 2.93 1.91 3.34 82 RCVD_IN_IADB_DK 13884 2.88 1.94 3.24 83 XM_B_SpammyWords3 12910 5.52 11.93 3.02 84 RELAYCOUNTRY_META 12773 7.69 19.70 2.98 85 XM_B_Phish_Phrases 12543 3.77 5.90 2.93 86 T_TooManySym_02 11506 2.15 0.76 2.69 87 RCVD_IN_IADB_VOUCHED 11191 2.19 1.11 2.61 88 MIME_HTML_MOSTLY 11013 2.86 3.58 2.57 89 XMSubMetaSx_00 10767 3.31 5.33 2.52 90 TR_XM_DK_SendGrid 10456 2.78 3.65 2.44 91 XMSexyCombo_05 10222 4.40 9.55 2.39 92 TR_XM_PhishingBody 10005 3.54 6.62 2.34 93 MAILING_LIST_MULTI 9598 2.14 1.88 2.24 94 SUBJ_ALL_CAPS 9539 3.27 5.93 2.23 95 XM_SPF_SoftFail 9483 3.55 6.95 2.22 96 BAYES_95 9006 2.81 4.61 2.10 97 FSL_BULK_SIG 8986 4.73 11.44 2.10 98 TVD_RCVD_IP 8972 1.61 0.36 2.10 99 FROM_EXCESS_BASE64 8610 2.05 2.16 2.01 100 TM2_M_URI_OPT_OUT 8341 2.27 3.09 1.95 101 URI_NOVOWEL 8321 1.90 1.79 1.94 102 TooManyTo_002 8280 1.61 0.79 1.93 103 HTML_IMAGE_RATIO_08 8086 2.16 2.86 1.89 104 XM_B_SpammyTLD 7914 2.85 5.41 1.85 105 RCVD_IN_IADB_OPTIN 7655 1.45 0.60 1.79 106 T_XMDrugObfuBody_14 7516 2.17 3.22 1.76 107 DKIM_INVALID 7386 2.63 4.93 1.73 108 TR_XM_SB_Phish 7079 1.71 1.87 1.65 109 HTML_MIME_NO_HTML_TAG 7071 1.69 1.78 1.65 110 XMSubPhish11 7025 1.70 1.84 1.64 111 XM_CamelCaseFrm001 6892 1.93 2.76 1.61 112 SpammyFromTLD_01 6757 2.70 5.56 1.58 113 INVALID_MSGID 6706 1.17 0.14 1.57 114 TR_Symld_Words 6601 1.58 1.67 1.54 115 KHOP_HELO_FCRDNS 6547 1.51 1.47 1.53 116 MSGID_NOFQDN1 6237 1.06 0.05 1.46 117 IN_HORDE_ADDRESS_BOOK 6204 1.07 0.10 1.45 118 TR_XM_SpammyRelay 6012 4.73 13.21 1.40 119 TO_MALFORMED 5926 1.00 0.02 1.38 120 HELO_NODOT 5805 1.39 1.47 1.36 121 HELO_NO_DOMAIN 5803 1.28 1.08 1.36 122 XM_E_Blogspot 5716 1.00 0.13 1.34 123 BOTNET 5696 4.02 10.91 1.33 124 XM_B_Phish66 5638 1.98 3.66 1.32 125 XM_DK_Undo_01 5322 1.80 3.22 1.24 126 T_XMDrugObfuBody_08 5224 2.17 4.59 1.22 127 TR_DCC_Bayes_99 5141 7.05 21.99 1.20 128 TR_XM_PHPDW 5099 2.00 4.08 1.19 129 TooManyTo_003 5088 1.03 0.64 1.19 130 XMGappySubj_01 5034 0.88 0.13 1.18 131 TR_XM_PHPForged 4969 1.96 4.01 1.16 132 TR_XM_FormFill2 4965 1.95 3.98 1.16 133 XM_H_PHPOS 4936 1.95 3.97 1.15 134 XM_GoogleGroups 4910 1.08 0.91 1.15 135 XM_B_Investor 4829 2.05 4.41 1.13 136 URI_HEX 4676 1.23 1.58 1.09 137 XMDiploma_00 4407 1.48 2.64 1.03 138 TR_XM_SpammyWords5 4396 2.02 4.56 1.03 139 XM_B_Unsub2 4392 1.50 2.71 1.03 140 RELAYCOUNTRY_CA 4341 3.34 9.27 1.01 141 UNTRUSTED_Relay 4306 2.94 7.90 1.01 142 XMCapTrack 4294 0.81 0.32 1.00 143 XMBSHREFv2 4089 0.80 0.40 0.96 144 XMStockSpam_06 4079 1.15 1.65 0.95 145 XMBody_95 3965 0.73 0.22 0.93 146 TM2_M_VERY_LONG_WORD 3879 1.45 2.83 0.91 147 XM_OfRef6 3873 1.80 4.09 0.90 148 RCVD_IN_MSPIKE_H5 3559 0.66 0.23 0.83 149 TooManyTo_004 3556 0.75 0.53 0.83 150 XM_H_Long_From02 3452 0.95 1.33 0.81 151 TR_XM_Base64_M1 3309 0.90 1.22 0.77 152 DKIM_ADSP_CUSTOM_MED 3249 0.81 0.93 0.76 153 RCVD_IN_RP_SAFE 3220 0.72 0.65 0.75 154 T_FILL_THIS_FORM_SHORT 3202 1.78 4.42 0.75 155 XMBdyGiftCard01 3120 0.91 1.37 0.73 156 XMHTML_After_End 3103 0.90 1.36 0.72 157 HTML_IMAGE_ONLY_20 2983 0.66 0.55 0.70 158 HTML_TAG_BALANCE_BODY 2944 0.79 1.06 0.69 159 RCVD_IN_RP_CERTIFIED 2924 0.63 0.51 0.68 160 TooManyTo_005 2890 0.62 0.47 0.68 161 T_TooManySym_03 2885 0.57 0.31 0.67 162 HTTPS_HTTP_MISMATCH 2874 0.94 1.63 0.67 163 RCVD_IN_MSPIKE_BL 2791 1.74 4.50 0.65 164 TR_XM_MSPIKECOMBO 2790 1.71 4.42 0.65 165 TVD_SPACE_RATIO 2788 0.50 0.10 0.65 166 XM_UB50 2786 1.49 3.62 0.65 167 TR_XM_SpammyWords2 2783 3.76 11.70 0.65 168 TR_MetaPhish_Combo_01 2772 0.71 0.87 0.65 169 XM_H_PHPMailer 2661 0.65 0.73 0.62 170 FROM_GOV_DKIM_AU 2651 0.57 0.43 0.62 171 RCVD_IN_MSPIKE_L3 2633 0.92 1.70 0.62 172 XM_shorewaves_Whitelist 2457 0.41 0.00 0.57 173 MY_SERVERS_FOUND 2438 0.43 0.06 0.57 174 XMLngstWrd_00 2406 0.72 1.11 0.56 175 T_XMDrugObfuBody_00 2381 0.86 1.63 0.56 176 XM_B_COPY_HTML 2301 0.64 0.90 0.54 177 XMGenDplmaNmb 2294 0.78 1.39 0.54 178 XMPhish30 2253 0.72 1.20 0.53 179 XMNoVowels 2239 0.49 0.41 0.52 180 XM_ShortIntro_01 2168 0.49 0.43 0.51 181 XMLngstWrd_01 2039 0.65 1.08 0.48 182 NML_ADSP_CUSTOM_MED 2033 0.55 0.73 0.47 183 XM_B_SpammyWords4 2031 1.11 2.72 0.47 184 T_OBFU_PDF_ATTACH 2016 0.39 0.20 0.47 185 XMBrknScrpt_02 2015 0.64 1.06 0.47 186 RELAYCOUNTRY_GB 2012 0.54 0.73 0.47 187 XM_ProductURIs 2011 0.51 0.60 0.47 188 XMSexyCombo_01 1946 0.83 1.78 0.45 189 RCVD_IN_PSBL 1941 1.08 2.67 0.45 190 MPART_ALT_DIFF_COUNT 1912 0.63 1.11 0.45 191 SHORT_HELO_AND_INLINE_IMAGE 1909 0.38 0.23 0.45 192 T_Symld_Words_02 1887 0.58 0.94 0.44 193 SpammyFromTLD_02 1853 0.86 1.97 0.43 194 FORGED_GMAIL_RCVD 1845 0.52 0.74 0.43 195 DOS_RCVD_IP_TWICE_B 1817 0.89 2.08 0.42 196 T_MANY_PILL_PRICE 1737 0.29 0.01 0.41 197 XMSubMetaI_00 1719 0.52 0.82 0.40 198 XM_B_COVIDMETA 1692 0.77 1.72 0.40 199 MISSING_HEADERS 1675 0.39 0.39 0.39 200 RCVD_IN_BL_SPAMCOP_NET 1672 3.44 11.24 0.39 ----------------------------------------------------------------------