Email: 273739 Autolearn: 0 AvgScore: 2.70 AvgScanTime: 1.23 sec Spam: 81039 Autolearn: 0 AvgScore: 13.85 AvgScanTime: 1.29 sec Ham: 192700 Autolearn: 0 AvgScore: -1.98 AvgScanTime: 1.21 sec Time Spent Running SA: 93.67 hours Time Spent Processing Spam: 29.06 hours Time Spent Processing Ham: 64.61 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 77144 86.98 95.19 83.52 2 DKIM_SIGNED 71155 80.88 87.80 77.97 3 XM_DK_Pass 69962 79.49 86.33 76.61 4 DKIM_VALID 69465 78.91 85.72 76.05 5 RELAYCOUNTRY_US 66830 82.07 82.47 81.90 6 XM_B_Unicode 62826 72.05 77.53 69.75 7 XMListUnsubscribeExists 56305 58.14 69.48 53.37 8 DCC_CHECK 55536 47.52 68.53 38.68 9 DKIM_VALID_AU 52735 62.24 65.07 61.05 10 XM_B_SpammyWords 52034 50.86 64.21 45.25 11 XM_DK_Undo_02 38010 21.17 46.90 10.35 12 XM_B_Unicode3 35997 44.46 44.42 44.47 13 BAYES_99 31164 17.71 38.46 8.98 14 BAYES_50 30213 48.46 37.28 53.16 15 XM_B_SpammyWords2 29912 25.06 36.91 20.07 16 TR_XM_DKIM_Undo 29747 15.69 36.71 6.84 17 MIME_HTML_ONLY 29715 27.74 36.67 23.98 18 LOC_TINY_FONT_1 29624 30.60 36.56 28.10 19 HTML_FONT_LOW_CONTRAST 28470 31.42 35.13 29.87 20 FVGT_m_MULTI_ODD 25536 26.19 31.51 23.96 21 DCC_CHECK_NEGATIVE 25489 52.46 31.45 61.29 22 BAYES_999 24657 14.30 30.43 7.52 23 DKIM_VALID_EF 24538 29.54 30.28 29.22 24 TR_DCC_Bayes_99 21683 10.30 26.76 3.38 25 RCVD_IN_MSPIKE_H2 20167 21.32 24.89 19.83 26 T_KAM_HTML_FONT_INVALID 19966 20.00 24.64 18.05 27 XM_Body_Dirty_Words 19523 16.01 24.09 12.61 28 RCVD_IN_MSPIKE_WL 18850 30.48 23.26 33.51 29 RELAYCOUNTRY_META 17365 8.60 21.43 3.21 30 T_TM2_M_HEADER_IN_MSG 17241 22.39 21.27 22.86 31 XMSubLong 16826 21.86 20.76 22.32 32 XM_Multi_Part_URI 13128 14.90 16.20 14.35 33 XM_B_Unsub 12920 13.41 15.94 12.34 34 UNPARSEABLE_RELAY 12385 11.13 15.28 9.39 35 RCVD_IN_MSPIKE_H3 12062 16.67 14.88 17.42 36 TR_XM_UnparsRelay 12051 9.73 14.87 7.56 37 TR_XM_SpammyWords2 11056 5.27 13.64 1.75 38 LOTS_OF_MONEY 10842 10.80 13.38 9.71 39 BOTNET_IPINHOSTNAME 10368 7.78 12.79 5.66 40 XM_B_SpammyWords3 10173 6.99 12.55 4.65 41 BOTNET 9943 4.75 12.27 1.58 42 XMSexyCombo_05 9800 6.90 12.09 4.72 43 FSL_BULK_SIG 9741 6.82 12.02 4.64 44 XM_UncommonTLD01 9156 6.49 11.30 4.46 45 TR_XM_SpammyWords4 9099 7.53 11.23 5.98 46 MPART_ALT_DIFF 8788 7.52 10.84 6.12 47 TR_XM_SpammyRelay 8492 4.01 10.48 1.29 48 HTML_IMAGE_RATIO_02 8063 8.24 9.95 7.52 49 UNTRUSTED_Relay 7764 3.65 9.58 1.16 50 RCVD_IN_BL_SPAMCOP_NET 7433 3.47 9.17 1.07 51 XM_SendGrid 7368 7.64 9.09 7.03 52 MIME_HTML_ONLY_MULTI 7016 5.54 8.66 4.23 53 BAYES_80 6941 6.28 8.57 5.32 54 RCVD_IN_MSPIKE_H4 6479 12.09 7.99 13.81 55 XM_Evil_Numbers_Gen 6239 8.94 7.70 9.46 56 HTML_MIME_NO_HTML_TAG 6185 3.74 7.63 2.11 57 TR_XM_MaxUnsub 5840 3.28 7.21 1.62 58 TM2_M_VERY_LONG_WORD 5693 3.65 7.03 2.24 59 BAYES_60 5472 10.39 6.75 11.92 60 RELAYCOUNTRY_CA 5134 2.58 6.34 1.00 61 XMSubMetaSx_00 4681 4.94 5.78 4.59 62 TR_XM_PhishingBody 4608 3.38 5.69 2.41 63 XM_B_Phish_Phrases 4592 5.16 5.67 4.95 64 RCVD_IN_MSPIKE_BL 4582 2.63 5.65 1.35 65 TR_XM_MSPIKECOMBO 4564 2.62 5.63 1.35 66 TR_XM_DK_SendGrid 4522 5.06 5.58 4.85 67 LotsOfNums_01 4479 8.30 5.53 9.47 68 XM_GoogleGroups 4414 3.21 5.45 2.27 69 XM_H_Long_From01 4192 5.17 5.17 5.17 70 XMLngstWrd_00 4153 2.79 5.12 1.81 71 XM_SPF_SoftFail 4099 2.61 5.06 1.57 72 XMLngstWrd_01 4089 2.70 5.05 1.71 73 XMLngstWrd_02 4046 2.59 4.99 1.58 74 BAYES_95 3899 3.69 4.81 3.22 75 XMLngstWrd_03 3833 2.42 4.73 1.44 76 RCVD_IN_VALIDITY_SAFE 3802 5.99 4.69 6.53 77 XMLngstWrd_04 3794 2.33 4.68 1.33 78 TooManyTo_001 3780 5.85 4.66 6.35 79 HTML_TITLE_SUBJ_DIFF 3765 2.10 4.65 1.02 80 UPPERCASE_75_100 3764 2.10 4.64 1.03 81 T_REMOTE_IMAGE 3699 3.75 4.56 3.41 82 XM_UB50 3483 1.80 4.30 0.75 83 XM_B_SpammyTLD 3450 3.10 4.26 2.62 84 SpammyFromTLD_01 3376 1.55 4.17 0.46 85 HTML_IMAGE_RATIO_04 3346 5.64 4.13 6.28 86 TR_XM_SpammyWords5 3318 2.30 4.09 1.55 87 TR_XM_SPAMCOP 3308 1.42 4.08 0.31 88 SpammyFromTLD_02 3253 1.49 4.01 0.42 89 RCVD_IN_VALIDITY_CERTIFIED 3020 5.27 3.73 5.91 90 XMNumbers 2987 4.48 3.69 4.81 91 T_XMDrugObfuBody_14 2926 3.06 3.61 2.83 92 USER_IN_DEF_DKIM_WL 2903 13.53 3.58 17.72 93 XM_DIRTYINTL 2901 1.26 3.58 0.28 94 BOTNET_NORDNS 2719 1.01 3.36 0.02 95 XMStrtUSub 2633 4.65 3.25 5.24 96 HTML_IMAGE_RATIO_06 2631 3.65 3.25 3.83 97 TM2_M_URI_OPT_OUT 2574 2.74 3.18 2.56 98 XM_B_SpammyWords4 2483 1.34 3.06 0.62 99 RCVD_IN_VALIDITY_RPBL 2462 0.92 3.04 0.02 100 MIME_HTML_MOSTLY 2452 2.61 3.03 2.43 101 XM_B_Investor 2447 1.79 3.02 1.27 102 T_FILL_THIS_FORM_SHORT 2446 1.27 3.02 0.54 103 TR_XM_SpammyWords3 2358 1.31 2.91 0.63 104 XM_OfRef6 2329 1.46 2.87 0.86 105 XM_B_Unsub2 2307 2.19 2.85 1.91 106 XM_CamelCaseFrm001 2298 2.31 2.84 2.09 107 SUBJ_ALL_CAPS 2222 2.08 2.74 1.80 108 T_TooManySym_01 2185 6.39 2.70 7.94 109 KHOP_HELO_FCRDNS 2126 1.56 2.62 1.11 110 XMBody_17 2094 1.22 2.58 0.65 111 XMSexyCombo_01 2042 1.82 2.52 1.53 112 TR_XM_PHPDW 2017 1.00 2.49 0.37 113 T_XMDrugObfuBody_00 1982 1.37 2.45 0.92 114 TR_XM_MSPIKECOMBO2 1976 0.98 2.44 0.37 115 RCVD_IN_MSPIKE_L3 1966 1.17 2.43 0.65 116 XM_B_Phish66 1964 1.53 2.42 1.15 117 T_XMDrugObfuBody_08 1917 1.78 2.37 1.54 118 TR_XM_PHPForged 1891 0.91 2.33 0.31 119 XM_DK_Undo_01 1890 1.80 2.33 1.57 120 URI_NOVOWEL 1887 2.79 2.33 2.99 121 TR_XM_FormFill2 1875 0.90 2.31 0.31 122 HTML_IMAGE_RATIO_08 1872 1.89 2.31 1.71 123 XM_H_PHPOS 1871 0.89 2.31 0.30 124 TR_Symld_Words 1863 2.41 2.30 2.46 125 TR_XM_SB_Phish 1820 2.11 2.25 2.05 126 XMSubPhish11 1775 2.08 2.19 2.04 127 RCVD_IN_MSPIKE_L5 1748 0.76 2.16 0.17 128 PDS_OTHER_BAD_TLD 1731 0.88 2.14 0.35 129 TR_XM_FormFill 1727 0.63 2.13 0.00 130 URIBL_DBL_SPAM 1715 0.63 2.12 0.01 131 DKIM_INVALID 1690 1.97 2.09 1.92 132 RCVD_IN_IADB_LISTED 1683 4.44 2.08 5.44 133 XM_UB99 1629 0.60 2.01 0.00 134 RCVD_IN_PSBL 1584 0.73 1.95 0.22 135 XMDiploma_00 1530 1.21 1.89 0.93 136 MIME_QP_LONG_LINE 1506 3.65 1.86 4.41 137 XM_B_COVIDMETA 1485 1.32 1.83 1.11 138 XMStockSpam_06 1466 1.87 1.81 1.89 139 URI_HEX 1456 1.58 1.80 1.49 140 FROM_EXCESS_BASE64 1452 3.22 1.79 3.83 141 RELAYCOUNTRY_AU 1447 0.68 1.79 0.21 142 TR_XM_NoHeaderRelay 1441 0.64 1.78 0.16 143 TR_XM_BayesRelay 1388 0.51 1.71 0.01 144 T_XMHurry_00 1376 0.83 1.70 0.47 145 XMBdyGiftCard01 1328 1.25 1.64 1.09 146 RCVD_IN_IADB_SPF 1319 3.82 1.63 4.75 147 TR_LOTS_OF_MONEY2 1294 0.59 1.60 0.17 148 T_MONEY_PERCENT 1294 0.59 1.60 0.17 149 BAYES_40 1256 3.31 1.55 4.05 150 XMPhish30 1250 0.90 1.54 0.63 151 MAILING_LIST_MULTI 1241 1.87 1.53 2.01 152 RELAYCOUNTRY_FR 1238 0.58 1.53 0.18 153 HTML_FONT_TINY_NORDNS 1226 0.50 1.51 0.08 154 DIET_1 1225 0.79 1.51 0.49 155 RCVD_IN_IADB_DK 1196 3.29 1.48 4.05 156 RCVD_IN_IADB_VOUCHED 1190 3.04 1.47 3.71 157 DKIM_ADSP_CUSTOM_MED 1183 1.06 1.46 0.89 158 PLING_QUERY 1181 0.78 1.46 0.50 159 RCVD_IN_IADB_SENDERID 1179 3.40 1.45 4.22 160 XMReplyNow 1152 0.63 1.42 0.30 161 XM_UB999 1078 0.39 1.33 0.00 162 XM_H_Long_From02 1025 1.15 1.26 1.09 163 XMHTMLBadTable_001 1023 0.76 1.26 0.55 164 TR_MetaPhish_Combo_01 1021 1.16 1.26 1.11 165 XM_Body_Dirty_Words_01 1002 0.46 1.24 0.14 166 TR_Mismatch_TLD_01 986 0.55 1.22 0.27 167 RCVD_IN_RP_SAFE 965 1.15 1.19 1.13 168 TR_XM_MaxSPIKE 960 0.42 1.18 0.10 169 TM2_M_A_HREF_HREF 956 0.78 1.18 0.62 170 XM_URI_RBL 953 0.45 1.18 0.14 171 SHOPIFY_IMG_NOT_RCVD_SFY 941 0.51 1.16 0.24 172 ALL_TRUSTED 939 11.48 1.16 15.82 173 HTML_TAG_BALANCE_BODY 929 0.75 1.15 0.58 174 URIBL_BLACK 927 0.36 1.14 0.03 175 TVD_PH_BODY_ACCOUNTS_PRE 905 0.49 1.12 0.23 176 TR_Caps_n_Bayes_99 903 0.64 1.11 0.44 177 XMBrknScrpt_02 903 0.69 1.11 0.52 178 XM_H_PHPMailer 902 0.72 1.11 0.55 179 FORGED_GMAIL_RCVD 902 0.69 1.11 0.51 180 XMHTML_After_End 884 0.62 1.09 0.43 181 RCVD_IN_MSPIKE_L4 850 0.69 1.05 0.54 182 FROM_SUSPICIOUS_NTLD 844 0.36 1.04 0.07 183 URI_TRY_3LD 834 0.82 1.03 0.73 184 XMSexyCombo_04 833 1.09 1.03 1.12 185 XM_UB60 822 0.34 1.01 0.05 186 XM_Combo_Sbj 810 0.44 1.00 0.20 187 RELAYCOUNTRY_LT 804 0.36 0.99 0.09 188 TR_LOTS_OF_MONEY3 796 0.40 0.98 0.16 189 NML_ADSP_CUSTOM_MED 794 0.64 0.98 0.49 190 MIME_CHARSET_FARAWAY 792 0.45 0.98 0.23 191 BAYES_00 783 6.51 0.97 8.84 192 RCVD_IN_RP_CERTIFIED 783 1.01 0.97 1.03 193 LongTLD 782 0.36 0.96 0.11 194 BAYES_20 776 2.31 0.96 2.88 195 HTML_FONT_FACE_BAD 773 1.21 0.95 1.31 196 XMBody_78 773 0.57 0.95 0.41 197 XMSubNoVowel 773 0.99 0.95 1.01 198 HTML_TAG_BALANCE_CENTER 773 0.36 0.95 0.11 199 TR_BOTNET_NEGATE 753 0.50 0.93 0.32 200 RELAYCOUNTRY_RU 741 0.29 0.91 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160952 86.98 95.19 83.52 2 RELAYCOUNTRY_US 157829 82.07 82.47 81.90 3 DKIM_SIGNED 150252 80.88 87.80 77.97 4 XM_DK_Pass 147626 79.49 86.33 76.61 5 DKIM_VALID 146550 78.91 85.72 76.05 6 XM_B_Unicode 134416 72.05 77.53 69.75 7 DCC_CHECK_NEGATIVE 118112 52.46 31.45 61.29 8 DKIM_VALID_AU 117652 62.24 65.07 61.05 9 XMListUnsubscribeExists 102852 58.14 69.48 53.37 10 BAYES_50 102435 48.46 37.28 53.16 11 XM_B_SpammyWords 87200 50.86 64.21 45.25 12 XM_B_Unicode3 85697 44.46 44.42 44.47 13 DCC_CHECK 74542 47.52 68.53 38.68 14 RCVD_IN_MSPIKE_WL 64579 30.48 23.26 33.51 15 HTML_FONT_LOW_CONTRAST 57552 31.42 35.13 29.87 16 DKIM_VALID_EF 56313 29.54 30.28 29.22 17 LOC_TINY_FONT_1 54152 30.60 36.56 28.10 18 MIME_HTML_ONLY 46218 27.74 36.67 23.98 19 FVGT_m_MULTI_ODD 46164 26.19 31.51 23.96 20 T_TM2_M_HEADER_IN_MSG 44052 22.39 21.27 22.86 21 XMSubLong 43006 21.86 20.76 22.32 22 XM_B_SpammyWords2 38681 25.06 36.91 20.07 23 RCVD_IN_MSPIKE_H2 38206 21.32 24.89 19.83 24 T_KAM_HTML_FONT_INVALID 34778 20.00 24.64 18.05 25 USER_IN_DEF_DKIM_WL 34141 13.53 3.58 17.72 26 RCVD_IN_MSPIKE_H3 33568 16.67 14.88 17.42 27 ALL_TRUSTED 30483 11.48 1.16 15.82 28 XM_Multi_Part_URI 27658 14.90 16.20 14.35 29 RCVD_IN_MSPIKE_H4 26604 12.09 7.99 13.81 30 XM_Body_Dirty_Words 24300 16.01 24.09 12.61 31 XM_B_Unsub 23784 13.41 15.94 12.34 32 XM_DKIMWhitelistDomains 23292 8.60 0.30 12.09 33 BAYES_60 22965 10.39 6.75 11.92 34 XM_DK_Undo_02 19936 21.17 46.90 10.35 35 LOTS_OF_MONEY 18710 10.80 13.38 9.71 36 LotsOfNums_01 18241 8.30 5.53 9.47 37 XM_Evil_Numbers_Gen 18231 8.94 7.70 9.46 38 UNPARSEABLE_RELAY 18093 11.13 15.28 9.39 39 BAYES_99 17306 17.71 38.46 8.98 40 BAYES_00 17031 6.51 0.97 8.84 41 T_TooManySym_01 15294 6.39 2.70 7.94 42 TR_XM_UnparsRelay 14577 9.73 14.87 7.56 43 BAYES_999 14496 14.30 30.43 7.52 44 HTML_IMAGE_RATIO_02 14482 8.24 9.95 7.52 45 XM_SendGrid 13542 7.64 9.09 7.03 46 TR_XM_DKIM_Undo 13190 15.69 36.71 6.84 47 RCVD_IN_VALIDITY_SAFE 12592 5.99 4.69 6.53 48 TooManyTo_001 12241 5.85 4.66 6.35 49 TR_XM_DK_Bayes 12141 4.61 0.58 6.30 50 HTML_IMAGE_RATIO_04 12101 5.64 4.13 6.28 51 TR_XM_DK_Bayes1 11906 4.52 0.58 6.18 52 MPART_ALT_DIFF 11786 7.52 10.84 6.12 53 TR_XM_SpammyWords4 11515 7.53 11.23 5.98 54 RCVD_IN_VALIDITY_CERTIFIED 11397 5.27 3.73 5.91 55 IN_ZIMBRA_NJ_WHITELIST 11285 4.14 0.06 5.86 56 TR_XM_DK_Bayes2 10947 4.16 0.54 5.68 57 BOTNET_IPINHOSTNAME 10916 7.78 12.79 5.66 58 RCVD_IN_IADB_LISTED 10478 4.44 2.08 5.44 59 BAYES_80 10250 6.28 8.57 5.32 60 XMStrtUSub 10100 4.65 3.25 5.24 61 XM_H_Long_From01 9963 5.17 5.17 5.17 62 XM_B_Phish_Phrases 9541 5.16 5.67 4.95 63 T_TooManySym_02 9423 3.69 0.85 4.89 64 TR_XM_DK_SendGrid 9338 5.06 5.58 4.85 65 XMNumbers 9270 4.48 3.69 4.81 66 RCVD_IN_IADB_SPF 9151 3.82 1.63 4.75 67 XMSexyCombo_05 9093 6.90 12.09 4.72 68 XM_B_SpammyWords3 8962 6.99 12.55 4.65 69 FSL_BULK_SIG 8940 6.82 12.02 4.64 70 XMSubMetaSx_00 8844 4.94 5.78 4.59 71 XM_UncommonTLD01 8599 6.49 11.30 4.46 72 MIME_QP_LONG_LINE 8493 3.65 1.86 4.41 73 MIME_HTML_ONLY_MULTI 8148 5.54 8.66 4.23 74 RCVD_IN_IADB_SENDERID 8123 3.40 1.45 4.22 75 BAYES_40 7800 3.31 1.55 4.05 76 RCVD_IN_IADB_DK 7797 3.29 1.48 4.05 77 HTML_IMAGE_RATIO_06 7373 3.65 3.25 3.83 78 FROM_EXCESS_BASE64 7372 3.22 1.79 3.83 79 INVALID_MSGID 7235 2.71 0.24 3.75 80 RCVD_IN_IADB_VOUCHED 7144 3.04 1.47 3.71 81 MSGID_NOFQDN1 6917 2.56 0.11 3.59 82 T_REMOTE_IMAGE 6568 3.75 4.56 3.41 83 TR_DCC_Bayes_99 6506 10.30 26.76 3.38 84 BAYES_95 6203 3.69 4.81 3.22 85 RELAYCOUNTRY_META 6178 8.60 21.43 3.21 86 TO_MALFORMED 6027 2.20 0.00 3.13 87 BOUNCE_MESSAGE 5936 2.36 0.64 3.08 88 ANY_BOUNCE_MESSAGE 5936 2.36 0.64 3.08 89 TVD_RCVD_IP 5799 2.25 0.46 3.01 90 URI_NOVOWEL 5754 2.79 2.33 2.99 91 BAYES_20 5549 2.31 0.96 2.88 92 XM_H_Trusted_IP 5504 2.01 0.00 2.86 93 T_XMDrugObfuBody_14 5448 3.06 3.61 2.83 94 XM_B_SpammyTLD 5045 3.10 4.26 2.62 95 TM2_M_URI_OPT_OUT 4926 2.74 3.18 2.56 96 RCVD_IN_IADB_OPTIN 4900 2.05 0.89 2.54 97 TR_Symld_Words 4746 2.41 2.30 2.46 98 MIME_HTML_MOSTLY 4686 2.61 3.03 2.43 99 TR_XM_PhishingBody 4636 3.38 5.69 2.41 100 RCVD_IN_MSPIKE_H5 4407 1.72 0.38 2.29 101 XM_GoogleGroups 4367 3.21 5.45 2.27 102 TM2_M_VERY_LONG_WORD 4312 3.65 7.03 2.24 103 IN_HORDE_ADDRESS_BOOK 4165 1.56 0.11 2.16 104 HTML_MIME_NO_HTML_TAG 4065 3.74 7.63 2.11 105 XM_CamelCaseFrm001 4025 2.31 2.84 2.09 106 TR_XM_SB_Phish 3949 2.11 2.25 2.05 107 XMSubPhish11 3929 2.08 2.19 2.04 108 MAILING_LIST_MULTI 3869 1.87 1.53 2.01 109 XM_PDF 3722 1.46 0.35 1.93 110 DKIM_INVALID 3702 1.97 2.09 1.92 111 XM_B_Unsub2 3680 2.19 2.85 1.91 112 XMStockSpam_06 3642 1.87 1.81 1.89 113 XMBSHREFv2 3626 1.40 0.24 1.88 114 XMGappySubj_01 3587 1.39 0.28 1.86 115 XMLngstWrd_00 3486 2.79 5.12 1.81 116 SUBJ_ALL_CAPS 3468 2.08 2.74 1.80 117 TR_XM_SpammyWords2 3375 5.27 13.64 1.75 118 XMLngstWrd_01 3296 2.70 5.05 1.71 119 HTML_IMAGE_RATIO_08 3289 1.89 2.31 1.71 120 TVD_SPACE_RATIO 3154 1.34 0.63 1.64 121 BAYES_05 3153 1.34 0.64 1.64 122 TR_XM_MaxUnsub 3131 3.28 7.21 1.62 123 BOTNET 3048 4.75 12.27 1.58 124 XMLngstWrd_02 3038 2.59 4.99 1.58 125 XM_SPF_SoftFail 3033 2.61 5.06 1.57 126 XM_DK_Undo_01 3025 1.80 2.33 1.57 127 TR_XM_SpammyWords5 2982 2.30 4.09 1.55 128 T_XMDrugObfuBody_08 2968 1.78 2.37 1.54 129 XMSexyCombo_01 2944 1.82 2.52 1.53 130 URI_HEX 2866 1.58 1.80 1.49 131 XMLngstWrd_03 2782 2.42 4.73 1.44 132 XMSubMetaSxObfu_03 2762 1.21 0.68 1.43 133 RCVD_IN_MSPIKE_BL 2611 2.63 5.65 1.35 134 TR_XM_MSPIKECOMBO 2604 2.62 5.63 1.35 135 XMLngstWrd_04 2571 2.33 4.68 1.33 136 HTML_FONT_FACE_BAD 2529 1.21 0.95 1.31 137 TR_XM_SpammyRelay 2495 4.01 10.48 1.29 138 XM_B_Investor 2454 1.79 3.02 1.27 139 TooManyTo_002 2298 1.09 0.85 1.19 140 XMSolicitRefs_0 2287 0.96 0.43 1.19 141 UNTRUSTED_Relay 2241 3.65 9.58 1.16 142 XM_B_Phish66 2212 1.53 2.42 1.15 143 RCVD_IN_RP_SAFE 2174 1.15 1.19 1.13 144 T_TooManySym_03 2163 0.89 0.32 1.12 145 XMSexyCombo_04 2155 1.09 1.03 1.12 146 TR_MetaPhish_Combo_01 2146 1.16 1.26 1.11 147 KHOP_HELO_FCRDNS 2133 1.56 2.62 1.11 148 XM_B_COVIDMETA 2132 1.32 1.83 1.11 149 XM_H_Long_From02 2110 1.15 1.26 1.09 150 XMBdyGiftCard01 2100 1.25 1.64 1.09 151 XMBody_95 2092 0.81 0.15 1.09 152 XM_D_tchamptons_WL 2056 0.75 0.00 1.07 153 RCVD_IN_BL_SPAMCOP_NET 2053 3.47 9.17 1.07 154 UPPERCASE_75_100 1982 2.10 4.64 1.03 155 RCVD_IN_RP_CERTIFIED 1976 1.01 0.97 1.03 156 HTML_TITLE_SUBJ_DIFF 1972 2.10 4.65 1.02 157 XMSubNoVowel 1949 0.99 0.95 1.01 158 RELAYCOUNTRY_CA 1931 2.58 6.34 1.00 159 XMSubMetaSx_01 1927 0.79 0.28 1.00 160 XMSexyCombo_02 1829 0.76 0.31 0.95 161 XMDiploma_00 1791 1.21 1.89 0.93 162 T_XMDrugObfuBody_00 1768 1.37 2.45 0.92 163 DKIM_ADSP_CUSTOM_MED 1707 1.06 1.46 0.89 164 TooManyTo_003 1697 0.85 0.76 0.88 165 XM_OfRef6 1662 1.46 2.87 0.86 166 XM_B_COPY_HTML 1631 0.81 0.71 0.85 167 XM_UB50 1446 1.80 4.30 0.75 168 USER_IN_WHITELIST 1438 0.53 0.00 0.75 169 USER_IN_WELCOMELIST 1438 0.53 0.00 0.75 170 URI_TRY_3LD 1412 0.82 1.03 0.73 171 HTML_IMAGE_ONLY_20 1298 0.64 0.55 0.67 172 XM_ProductURIs 1292 0.72 0.85 0.67 173 TooManyTo_004 1282 0.68 0.73 0.67 174 XMBody_17 1255 1.22 2.58 0.65 175 RCVD_IN_MSPIKE_L3 1244 1.17 2.43 0.65 176 MPART_ALT_DIFF_COUNT 1233 0.65 0.68 0.64 177 TR_XM_SpammyWords3 1220 1.31 2.91 0.63 178 XMPhish30 1209 0.90 1.54 0.63 179 XM_B_SpammyWords4 1194 1.34 3.06 0.62 180 TM2_M_A_HREF_HREF 1189 0.78 1.18 0.62 181 XM_shorewaves_Whitelist 1155 0.42 0.00 0.60 182 RDNS_DYNAMIC 1153 0.67 0.85 0.60 183 HTML_TAG_BALANCE_BODY 1125 0.75 1.15 0.58 184 TR_XM_INV_DKIM 1122 0.62 0.72 0.58 185 TooManyTo_005 1103 0.61 0.70 0.57 186 XMHTMLBadTable_001 1059 0.76 1.26 0.55 187 XM_H_PHPMailer 1058 0.72 1.11 0.55 188 XMSubMetaSxObfu_02 1045 0.51 0.42 0.54 189 TR_MSPIKEBAYES00 1043 0.39 0.01 0.54 190 RCVD_IN_MSPIKE_L4 1038 0.69 1.05 0.54 191 T_FILL_THIS_FORM_SHORT 1031 1.27 3.02 0.54 192 XMBrknScrpt_02 994 0.69 1.11 0.52 193 XMNoVowels 990 0.44 0.25 0.51 194 FORGED_GMAIL_RCVD 974 0.69 1.11 0.51 195 XM_B_REG_HTML 973 0.60 0.81 0.50 196 PLING_QUERY 959 0.78 1.46 0.50 197 NML_ADSP_CUSTOM_MED 953 0.64 0.98 0.49 198 DIET_1 950 0.79 1.51 0.49 199 RELAYCOUNTRY_GB 941 0.57 0.76 0.49 200 XMSubMetaI_00 936 0.59 0.83 0.49 ----------------------------------------------------------------------