Email: 466905 Autolearn: 0 AvgScore: 3.42 AvgScanTime: 1.14 sec Spam: 139226 Autolearn: 0 AvgScore: 14.47 AvgScanTime: 1.29 sec Ham: 327679 Autolearn: 0 AvgScore: -1.28 AvgScanTime: 1.07 sec Time Spent Running SA: 147.68 hours Time Spent Processing Spam: 50.03 hours Time Spent Processing Ham: 97.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132465 88.84 95.14 86.16 2 DKIM_SIGNED 121766 76.72 87.46 72.16 3 XM_DK_Pass 117999 75.03 84.75 70.90 4 DKIM_VALID 116840 74.06 83.92 69.86 5 RELAYCOUNTRY_US 109643 79.91 78.75 80.40 6 XM_B_Unicode 109604 71.44 78.72 68.34 7 DCC_CHECK 96940 42.87 69.63 31.50 8 XMListUnsubscribeExists 94974 52.38 68.22 45.66 9 XM_B_SpammyWords 91586 49.42 65.78 42.47 10 DKIM_VALID_AU 87527 56.87 62.87 54.32 11 XM_DK_Undo_02 60467 17.58 43.43 6.59 12 BAYES_50 58463 51.98 41.99 56.22 13 XM_B_Unicode3 57966 40.22 41.63 39.62 14 XM_B_SpammyWords2 52486 23.87 37.70 18.00 15 LOC_TINY_FONT_1 50691 25.88 36.41 21.40 16 BAYES_99 47184 13.72 33.89 5.15 17 FVGT_m_MULTI_ODD 46796 26.77 33.61 23.87 18 TR_XM_DKIM_Undo 46088 13.16 33.10 4.68 19 HTML_FONT_LOW_CONTRAST 45939 27.84 33.00 25.65 20 DCC_CHECK_NEGATIVE 42221 57.07 30.33 68.44 21 MIME_HTML_ONLY 41230 22.73 29.61 19.80 22 DKIM_VALID_EF 40396 28.39 29.01 28.12 23 T_KAM_HTML_FONT_INVALID 39810 21.36 28.59 18.29 24 BAYES_999 37355 10.92 26.83 4.16 25 XMSubLong 34691 22.81 24.92 21.91 26 TR_DCC_Bayes_99 33631 8.46 24.16 1.80 27 RELAYCOUNTRY_META 32714 9.82 23.50 4.01 28 RCVD_IN_MSPIKE_H2 32417 21.51 23.28 20.76 29 RCVD_IN_MSPIKE_WL 31147 27.39 22.37 29.52 30 XM_Body_Dirty_Words 29701 14.13 21.33 11.07 31 T_TM2_M_HEADER_IN_MSG 29679 28.84 21.32 32.03 32 XM_B_Unsub 21481 10.90 15.43 8.98 33 XM_Multi_Part_URI 21202 12.64 15.23 11.55 34 RCVD_IN_MSPIKE_H3 20002 15.94 14.37 16.60 35 BOTNET_IPINHOSTNAME 19673 7.39 14.13 4.53 36 UNPARSEABLE_RELAY 18774 9.85 13.48 8.31 37 UNTRUSTED_Relay 18532 4.94 13.31 1.39 38 TR_XM_UnparsRelay 18291 8.44 13.14 6.45 39 XM_B_SpammyWords3 18096 6.60 13.00 3.88 40 FSL_BULK_SIG 17778 5.91 12.77 2.99 41 MPART_ALT_DIFF 17288 7.38 12.42 5.24 42 LOTS_OF_MONEY 16905 8.30 12.14 6.67 43 TR_XM_SpammyRelay 15550 4.51 11.17 1.68 44 RCVD_IN_BL_SPAMCOP_NET 15124 3.71 10.86 0.68 45 BOTNET 14879 4.35 10.69 1.66 46 XM_UncommonTLD01 14840 5.96 10.66 3.96 47 TR_XM_SpammyWords2 14750 3.82 10.59 0.94 48 XMSexyCombo_05 14740 5.52 10.59 3.37 49 TR_XM_SpammyWords4 14415 6.09 10.35 4.28 50 XM_Evil_Numbers_Gen 12966 8.38 9.31 7.99 51 XM_B_SpammyTLD 11665 4.23 8.38 2.46 52 MIME_HTML_MOSTLY 11107 3.90 7.98 2.17 53 BAYES_60 10524 8.89 7.56 9.46 54 BAYES_80 10479 5.36 7.53 4.44 55 RCVD_IN_MSPIKE_H4 10436 10.20 7.50 11.34 56 XMSubMetaSx_00 10064 4.86 7.23 3.85 57 RCVD_IN_MSPIKE_BL 9921 3.05 7.13 1.32 58 TR_XM_MSPIKECOMBO 9872 3.04 7.09 1.32 59 XM_SendGrid 9784 6.10 7.03 5.70 60 URI_NOVOWEL 9488 3.78 6.81 2.49 61 LotsOfNums_01 9262 8.10 6.65 8.72 62 HTML_IMAGE_RATIO_02 9050 6.31 6.50 6.23 63 TR_XM_PhishingBody 8953 4.08 6.43 3.09 64 XM_B_Phish_Phrases 8782 4.29 6.31 3.43 65 XM_UB50 8334 2.40 5.99 0.87 66 XM_H_Long_From01 8280 5.30 5.95 5.03 67 RELAYCOUNTRY_CA 8068 2.50 5.79 1.11 68 URIBL_DBL_SPAM 7957 1.72 5.72 0.02 69 SpammyFromTLD_01 7885 2.38 5.66 0.99 70 TR_XM_SPAMCOP 7457 1.71 5.36 0.17 71 TooManyTo_001 6867 7.93 4.93 9.20 72 HTML_MIME_NO_HTML_TAG 6816 3.35 4.90 2.69 73 T_REMOTE_IMAGE 6659 4.22 4.78 3.98 74 XM_B_Investor 6653 2.39 4.78 1.38 75 TM2_M_VERY_LONG_WORD 6648 2.58 4.77 1.64 76 PDS_OTHER_BAD_TLD 6621 1.55 4.76 0.19 77 XM_SPF_SoftFail 6511 3.27 4.68 2.67 78 TR_XM_MaxUnsub 6458 1.86 4.64 0.69 79 RCVD_IN_VALIDITY_RPBL 6305 1.40 4.53 0.07 80 TR_XM_DK_SendGrid 6217 4.00 4.47 3.81 81 BAYES_95 6174 3.17 4.43 2.63 82 MIME_HTML_ONLY_MULTI 6109 3.74 4.39 3.47 83 TR_XM_BayesUnsub 5806 2.24 4.17 1.42 84 XMNumbers 5472 3.82 3.93 3.78 85 HTML_IMAGE_RATIO_06 5465 3.39 3.93 3.16 86 T_XMDrugObfuBody_14 5423 2.40 3.90 1.76 87 RELAYCOUNTRY_FR 5336 1.34 3.83 0.28 88 RCVD_IN_MSPIKE_L3 5262 1.64 3.78 0.73 89 HTML_IMAGE_RATIO_04 5232 4.43 3.76 4.71 90 XM_DIRTYINTL 5060 1.32 3.63 0.34 91 XM_B_Phish66 5012 2.42 3.60 1.92 92 XMStrtUSub 4958 4.48 3.56 4.87 93 RCVD_IN_VALIDITY_SAFE 4929 4.13 3.54 4.38 94 DKIM_INVALID 4926 2.66 3.54 2.29 95 URI_PHP_REDIR 4910 1.05 3.53 0.00 96 TR_XM_SpammyWords3 4868 1.48 3.50 0.62 97 SpammyFromTLD_02 4751 1.19 3.41 0.25 98 TR_XM_SpammyWords5 4643 1.91 3.33 1.31 99 T_XMDrugObfuBody_08 4546 1.87 3.27 1.28 100 MIME_QP_LONG_LINE 4451 4.63 3.20 5.25 101 XM_DK_Undo_01 4331 2.12 3.11 1.69 102 RCVD_IN_VALIDITY_CERTIFIED 4281 3.72 3.07 3.99 103 XM_OfRef6 4218 1.55 3.03 0.92 104 KHOP_HELO_FCRDNS 4189 2.04 3.01 1.63 105 XMDiploma_00 3966 1.91 2.85 1.51 106 TM2_M_URI_OPT_OUT 3723 2.64 2.67 2.62 107 XM_UB99 3618 0.78 2.60 0.01 108 HTML_IMAGE_RATIO_08 3587 2.17 2.58 2.00 109 T_FILL_THIS_FORM_SHORT 3482 1.38 2.50 0.91 110 RCVD_IN_IADB_LISTED 3417 4.34 2.45 5.14 111 T_TooManySym_01 3401 5.31 2.44 6.54 112 BOTNET_NORDNS 3273 0.74 2.35 0.06 113 JH_SPAMMY_HEADERS 3262 0.70 2.34 0.00 114 XM_GoogleGroups 3218 1.94 2.31 1.78 115 RCVD_IN_MSPIKE_L5 3201 0.71 2.30 0.03 116 XM_B_Unsub2 3188 1.70 2.29 1.45 117 XMLngstWrd_00 3119 1.34 2.24 0.95 118 XM_UB999 3062 0.66 2.20 0.00 119 XMLngstWrd_01 3052 1.28 2.19 0.89 120 XM_CamelCaseFrm001 3030 1.77 2.18 1.60 121 TR_XM_SB_Phish 2996 2.05 2.15 2.01 122 XMLngstWrd_02 2946 1.20 2.12 0.82 123 TR_XM_MSPIKECOMBO2 2894 0.70 2.08 0.12 124 RCVD_IN_IADB_SPF 2856 3.82 2.05 4.57 125 URI_LONG_REPEAT 2841 0.62 2.04 0.02 126 T_XMHurry_00 2783 1.03 2.00 0.62 127 XM_B_SpammyWords4 2774 0.96 1.99 0.52 128 XM_UB60 2722 0.63 1.96 0.07 129 MAILING_LIST_MULTI 2689 2.81 1.93 3.19 130 RELAYCOUNTRY_IN 2682 0.65 1.93 0.11 131 XMSubPhish11 2670 1.97 1.92 1.99 132 XMSexyCombo_01 2648 1.01 1.90 0.64 133 RCVD_IN_IADB_DK 2628 3.35 1.89 3.98 134 HTTPS_HTTP_MISMATCH 2616 1.17 1.88 0.87 135 HTML_IMAGE_ONLY_08 2608 0.67 1.87 0.15 136 XM_B_COVIDMETA 2607 1.09 1.87 0.75 137 USER_IN_DEF_DKIM_WL 2604 8.32 1.87 11.06 138 XM_H_Undi_Recip 2594 0.74 1.86 0.26 139 BAYES_40 2576 4.04 1.85 4.97 140 URI_HEX 2527 1.53 1.82 1.40 141 RCVD_IN_IADB_SENDERID 2519 3.45 1.81 4.15 142 XMLngstWrd_03 2516 1.03 1.81 0.70 143 ALL_TRUSTED 2504 12.42 1.80 16.93 144 XMBody_17 2497 0.88 1.79 0.49 145 XMHTML_After_End 2457 1.18 1.76 0.93 146 HTML_TITLE_SUBJ_DIFF 2422 0.85 1.74 0.47 147 HTML_FONT_FACE_BAD 2397 1.56 1.72 1.49 148 TR_LOTS_OF_MONEY3 2394 0.71 1.72 0.28 149 XMLngstWrd_04 2382 0.96 1.71 0.64 150 T_XMDrugObfuBody_00 2298 0.96 1.65 0.67 151 TR_XM_PHPDW 2275 0.86 1.63 0.53 152 UPPERCASE_75_100 2267 0.80 1.63 0.45 153 SUBJ_ALL_CAPS 2253 1.64 1.62 1.65 154 XMStockSpam_06 2248 1.37 1.61 1.26 155 RCVD_IN_PSBL 2209 0.49 1.59 0.02 156 RCVD_IN_IADB_VOUCHED 2208 2.73 1.59 3.22 157 TR_XM_BayesRelay 2198 0.47 1.58 0.00 158 TR_XM_PHPForged 2191 0.79 1.57 0.46 159 TR_XM_FormFill2 2135 0.78 1.53 0.46 160 XM_H_PHPOS 2118 0.77 1.52 0.44 161 FROM_EXCESS_BASE64 2099 2.27 1.51 2.59 162 XM_B_SEO 2096 0.52 1.51 0.11 163 TR_XM_Undi_Recip11 2073 0.48 1.49 0.06 164 XMBdyGiftCard01 2048 0.95 1.47 0.73 165 XMSubMetaI_00 2040 0.89 1.47 0.64 166 XM_H_Long_From02 2036 1.02 1.46 0.83 167 TR_XM_NoHeaderRelay 2034 0.55 1.46 0.16 168 RELAYCOUNTRY_DE 2017 0.65 1.45 0.31 169 BODY_URI_ONLY 1963 0.43 1.41 0.02 170 HTML_FONT_SIZE_LARGE 1961 0.51 1.41 0.13 171 XM_URI_RBL 1919 0.48 1.38 0.10 172 HTML_TAG_BALANCE_CENTER 1911 0.48 1.37 0.10 173 MPART_ALT_DIFF_COUNT 1901 0.86 1.37 0.65 174 TR_XM_COVIDMETA1 1888 0.55 1.36 0.20 175 MIXED_CENTER_CASE 1881 0.40 1.35 0.00 176 TR_XM_SEO4 1869 0.45 1.34 0.07 177 MIXED_HREF_CASE 1853 0.40 1.33 0.00 178 MIXED_IMG_CASE 1837 0.40 1.32 0.00 179 URI_NO_WWW_BIZ_CGI 1836 0.41 1.32 0.02 180 MIXED_AREA_CASE 1835 0.39 1.32 0.00 181 MIXED_FONT_CASE 1810 0.39 1.30 0.00 182 TR_Symld_Words 1798 1.58 1.29 1.71 183 TR_XM_FormFill 1792 0.39 1.29 0.01 184 BAYES_20 1784 2.98 1.28 3.71 185 XMSubMetaSxObfu_03 1777 0.63 1.28 0.36 186 TooManyTo_002 1775 2.24 1.27 2.65 187 URIBL_BLACK 1755 0.41 1.26 0.05 188 RELAYCOUNTRY_RU 1700 0.41 1.22 0.07 189 TR_Mismatch_TLD_02 1686 0.50 1.21 0.20 190 DIET_1 1681 0.61 1.21 0.36 191 TR_BOTNET_NEGATE 1674 0.61 1.20 0.35 192 XMBrknScrpt_02 1669 0.84 1.20 0.68 193 RELAYCOUNTRY_AU 1664 0.56 1.20 0.29 194 XMSubNoVowel 1660 1.35 1.19 1.41 195 XMMoneyMeta_00 1648 0.76 1.18 0.58 196 XMPhish30 1611 0.71 1.16 0.51 197 URI_GOOG_STO_SPAMMY 1603 0.34 1.15 0.00 198 DKIM_ADSP_CUSTOM_MED 1591 1.01 1.14 0.95 199 TooManyTo_003 1586 1.58 1.14 1.77 200 T_Symld_Words_02 1561 0.68 1.12 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 282338 88.84 95.14 86.16 2 RELAYCOUNTRY_US 263448 79.91 78.75 80.40 3 DKIM_SIGNED 236437 76.72 87.46 72.16 4 XM_DK_Pass 232320 75.03 84.75 70.90 5 DKIM_VALID 228932 74.06 83.92 69.86 6 DCC_CHECK_NEGATIVE 224261 57.07 30.33 68.44 7 XM_B_Unicode 223944 71.44 78.72 68.34 8 BAYES_50 184232 51.98 41.99 56.22 9 DKIM_VALID_AU 178009 56.87 62.87 54.32 10 XMListUnsubscribeExists 149611 52.38 68.22 45.66 11 XM_B_SpammyWords 139154 49.42 65.78 42.47 12 XM_B_Unicode3 129834 40.22 41.63 39.62 13 T_TM2_M_HEADER_IN_MSG 104954 28.84 21.32 32.03 14 DCC_CHECK 103214 42.87 69.63 31.50 15 RCVD_IN_MSPIKE_WL 96740 27.39 22.37 29.52 16 DKIM_VALID_EF 92141 28.39 29.01 28.12 17 HTML_FONT_LOW_CONTRAST 84041 27.84 33.00 25.65 18 FVGT_m_MULTI_ODD 78217 26.77 33.61 23.87 19 XMSubLong 71800 22.81 24.92 21.91 20 LOC_TINY_FONT_1 70134 25.88 36.41 21.40 21 RCVD_IN_MSPIKE_H2 68035 21.51 23.28 20.76 22 MIME_HTML_ONLY 64877 22.73 29.61 19.80 23 T_KAM_HTML_FONT_INVALID 59924 21.36 28.59 18.29 24 XM_B_SpammyWords2 58969 23.87 37.70 18.00 25 ALL_TRUSTED 55488 12.42 1.80 16.93 26 RCVD_IN_MSPIKE_H3 54400 15.94 14.37 16.60 27 XM_Multi_Part_URI 37837 12.64 15.23 11.55 28 RCVD_IN_MSPIKE_H4 37169 10.20 7.50 11.34 29 BAYES_00 36434 8.05 0.83 11.12 30 XM_Body_Dirty_Words 36264 14.13 21.33 11.07 31 USER_IN_DEF_DKIM_WL 36254 8.32 1.87 11.06 32 BAYES_60 31001 8.89 7.56 9.46 33 TooManyTo_001 30155 7.93 4.93 9.20 34 XM_B_Unsub 29420 10.90 15.43 8.98 35 LotsOfNums_01 28566 8.10 6.65 8.72 36 UNPARSEABLE_RELAY 27224 9.85 13.48 8.31 37 XM_DKIMWhitelistDomains 26414 5.66 0.02 8.06 38 XM_Evil_Numbers_Gen 26177 8.38 9.31 7.99 39 IN_ZIMBRA_NJ_WHITELIST 23843 5.14 0.10 7.28 40 LOTS_OF_MONEY 21851 8.30 12.14 6.67 41 XM_DK_Undo_02 21601 17.58 43.43 6.59 42 T_TooManySym_01 21414 5.31 2.44 6.54 43 TR_XM_UnparsRelay 21128 8.44 13.14 6.45 44 TR_XM_DK_Bayes 20875 4.60 0.42 6.37 45 TR_XM_DK_Bayes1 20453 4.50 0.41 6.24 46 HTML_IMAGE_RATIO_02 20414 6.31 6.50 6.23 47 XM_SendGrid 18691 6.10 7.03 5.70 48 TR_XM_DK_Bayes2 17701 3.89 0.33 5.40 49 MIME_QP_LONG_LINE 17188 4.63 3.20 5.25 50 XM_PDF 17187 4.00 1.07 5.25 51 MPART_ALT_DIFF 17182 7.38 12.42 5.24 52 BAYES_99 16890 13.72 33.89 5.15 53 RCVD_IN_IADB_LISTED 16849 4.34 2.45 5.14 54 XM_H_Long_From01 16477 5.30 5.95 5.03 55 BAYES_40 16279 4.04 1.85 4.97 56 XMStrtUSub 15956 4.48 3.56 4.87 57 HTML_IMAGE_RATIO_04 15447 4.43 3.76 4.71 58 TR_XM_DKIM_Undo 15350 13.16 33.10 4.68 59 RCVD_IN_IADB_SPF 14986 3.82 2.05 4.57 60 BOTNET_IPINHOSTNAME 14852 7.39 14.13 4.53 61 BAYES_80 14539 5.36 7.53 4.44 62 RCVD_IN_VALIDITY_SAFE 14352 4.13 3.54 4.38 63 TR_XM_SpammyWords4 14011 6.09 10.35 4.28 64 BAYES_999 13640 10.92 26.83 4.16 65 RCVD_IN_IADB_SENDERID 13584 3.45 1.81 4.15 66 RELAYCOUNTRY_META 13130 9.82 23.50 4.01 67 RCVD_IN_VALIDITY_CERTIFIED 13074 3.72 3.07 3.99 68 T_REMOTE_IMAGE 13043 4.22 4.78 3.98 69 RCVD_IN_IADB_DK 13028 3.35 1.89 3.98 70 XM_UncommonTLD01 12988 5.96 10.66 3.96 71 XM_B_SpammyWords3 12717 6.60 13.00 3.88 72 XMSubMetaSx_00 12626 4.86 7.23 3.85 73 TR_XM_DK_SendGrid 12476 4.00 4.47 3.81 74 XMNumbers 12372 3.82 3.93 3.78 75 BAYES_20 12146 2.98 1.28 3.71 76 T_TooManySym_02 12049 2.80 0.72 3.68 77 XM_H_Trusted_IP 11400 2.44 0.00 3.48 78 MIME_HTML_ONLY_MULTI 11375 3.74 4.39 3.47 79 XM_B_Phish_Phrases 11254 4.29 6.31 3.43 80 XMSexyCombo_05 11041 5.52 10.59 3.37 81 RCVD_IN_IADB_VOUCHED 10535 2.73 1.59 3.22 82 MAILING_LIST_MULTI 10454 2.81 1.93 3.19 83 HTML_IMAGE_RATIO_06 10355 3.39 3.93 3.16 84 TR_XM_PhishingBody 10114 4.08 6.43 3.09 85 FSL_BULK_SIG 9796 5.91 12.77 2.99 86 BOUNCE_MESSAGE 9713 2.34 0.86 2.96 87 ANY_BOUNCE_MESSAGE 9713 2.34 0.87 2.96 88 HTML_MIME_NO_HTML_TAG 8822 3.35 4.90 2.69 89 XM_SPF_SoftFail 8763 3.27 4.68 2.67 90 TooManyTo_002 8685 2.24 1.27 2.65 91 BAYES_95 8633 3.17 4.43 2.63 92 TM2_M_URI_OPT_OUT 8596 2.64 2.67 2.62 93 FROM_EXCESS_BASE64 8492 2.27 1.51 2.59 94 URI_NOVOWEL 8153 3.78 6.81 2.49 95 XM_B_SpammyTLD 8076 4.23 8.38 2.46 96 BAYES_05 7516 1.79 0.60 2.29 97 DKIM_INVALID 7505 2.66 3.54 2.29 98 RCVD_IN_IADB_OPTIN 7253 1.85 0.98 2.21 99 MIME_HTML_MOSTLY 7121 3.90 7.98 2.17 100 HELO_NODOT 6972 1.66 0.55 2.13 101 HELO_NO_DOMAIN 6970 1.66 0.55 2.13 102 TR_XM_SB_Phish 6587 2.05 2.15 2.01 103 HTML_IMAGE_RATIO_08 6552 2.17 2.58 2.00 104 XMSubPhish11 6518 1.97 1.92 1.99 105 INVALID_MSGID 6506 1.44 0.14 1.99 106 XM_B_Phish66 6297 2.42 3.60 1.92 107 IN_HORDE_ADDRESS_BOOK 6024 1.32 0.10 1.84 108 TVD_RCVD_IP 5959 1.34 0.22 1.82 109 TR_DCC_Bayes_99 5885 8.46 24.16 1.80 110 XM_GoogleGroups 5824 1.94 2.31 1.78 111 TooManyTo_003 5812 1.58 1.14 1.77 112 TO_MALFORMED 5781 1.24 0.01 1.76 113 T_XMDrugObfuBody_14 5779 2.40 3.90 1.76 114 TR_Symld_Words 5593 1.58 1.29 1.71 115 XM_DK_Undo_01 5553 2.12 3.11 1.69 116 TR_XM_SpammyRelay 5508 4.51 11.17 1.68 117 BOTNET 5436 4.35 10.69 1.66 118 SUBJ_ALL_CAPS 5404 1.64 1.62 1.65 119 TM2_M_VERY_LONG_WORD 5390 2.58 4.77 1.64 120 KHOP_HELO_FCRDNS 5338 2.04 3.01 1.63 121 XM_CamelCaseFrm001 5251 1.77 2.18 1.60 122 RCVD_IN_MSPIKE_H5 5171 1.26 0.51 1.58 123 XMDiploma_00 4948 1.91 2.85 1.51 124 HTML_FONT_FACE_BAD 4869 1.56 1.72 1.49 125 XM_B_Unsub2 4748 1.70 2.29 1.45 126 TR_XM_BayesUnsub 4661 2.24 4.17 1.42 127 XMSubNoVowel 4635 1.35 1.19 1.41 128 URI_HEX 4601 1.53 1.82 1.40 129 UNTRUSTED_Relay 4556 4.94 13.31 1.39 130 XM_B_Investor 4525 2.39 4.78 1.38 131 XMCapTrack 4398 1.05 0.38 1.34 132 TVD_SPACE_RATIO 4343 1.06 0.44 1.33 133 RCVD_IN_MSPIKE_BL 4340 3.05 7.13 1.32 134 TR_XM_MSPIKECOMBO 4331 3.04 7.09 1.32 135 TR_XM_SpammyWords5 4294 1.91 3.33 1.31 136 XMGappySubj_01 4275 0.95 0.12 1.30 137 T_XMDrugObfuBody_08 4208 1.87 3.27 1.28 138 TooManyTo_004 4147 1.20 1.05 1.27 139 XMStockSpam_06 4132 1.37 1.61 1.26 140 XMBSHREFv2 3722 0.90 0.36 1.14 141 RELAYCOUNTRY_CA 3621 2.50 5.79 1.11 142 XMNoVowels 3385 0.82 0.33 1.03 143 TooManyTo_005 3243 0.84 0.49 0.99 144 SpammyFromTLD_01 3231 2.38 5.66 0.99 145 T_TooManySym_03 3171 0.78 0.34 0.97 146 XMLngstWrd_00 3121 1.34 2.24 0.95 147 DKIM_ADSP_CUSTOM_MED 3117 1.01 1.14 0.95 148 TR_XM_SpammyWords2 3088 3.82 10.59 0.94 149 XM_E_Blogspot 3077 0.71 0.19 0.94 150 XMHTML_After_End 3041 1.18 1.76 0.93 151 XM_OfRef6 3031 1.55 3.03 0.92 152 T_FILL_THIS_FORM_SHORT 2971 1.38 2.50 0.91 153 XMLngstWrd_01 2926 1.28 2.19 0.89 154 HTTPS_HTTP_MISMATCH 2858 1.17 1.88 0.87 155 XM_UB50 2853 2.40 5.99 0.87 156 RCVD_IN_RP_SAFE 2817 0.81 0.68 0.86 157 TR_MetaPhish_Combo_01 2784 0.86 0.88 0.85 158 XMBody_95 2738 0.62 0.12 0.84 159 XM_H_Long_From02 2726 1.02 1.46 0.83 160 XMLngstWrd_02 2680 1.20 2.12 0.82 161 RCVD_IN_RP_CERTIFIED 2607 0.73 0.58 0.80 162 XM_B_COVIDMETA 2462 1.09 1.87 0.75 163 XM_ShortIntro_01 2414 0.71 0.66 0.74 164 RCVD_IN_MSPIKE_L3 2384 1.64 3.78 0.73 165 XMBdyGiftCard01 2379 0.95 1.47 0.73 166 RELAYCOUNTRY_GB 2379 0.83 1.06 0.73 167 XMGenDplmaNmb 2291 0.79 1.00 0.70 168 HTML_TAG_BALANCE_BODY 2285 0.81 1.07 0.70 169 MSGID_NOFQDN1 2285 0.49 0.01 0.70 170 XMLngstWrd_03 2284 1.03 1.81 0.70 171 TR_XM_MaxUnsub 2249 1.86 4.64 0.69 172 XMBrknScrpt_02 2233 0.84 1.20 0.68 173 XM_H_PHPMailer 2233 0.70 0.74 0.68 174 RCVD_IN_BL_SPAMCOP_NET 2217 3.71 10.86 0.68 175 T_XMDrugObfuBody_00 2185 0.96 1.65 0.67 176 URI_TRY_3LD 2172 0.76 1.00 0.66 177 MPART_ALT_DIFF_COUNT 2120 0.86 1.37 0.65 178 XMLngstWrd_04 2107 0.96 1.71 0.64 179 XMSubMetaI_00 2101 0.89 1.47 0.64 180 T_OBFU_PDF_ATTACH 2096 0.48 0.11 0.64 181 XMSexyCombo_01 2091 1.01 1.90 0.64 182 HTML_IMAGE_ONLY_20 2055 0.51 0.23 0.63 183 SHORT_HELO_AND_INLINE_IMAGE 2031 0.46 0.08 0.62 184 T_XMHurry_00 2029 1.03 2.00 0.62 185 TR_XM_SpammyWords3 2027 1.48 3.50 0.62 186 NML_ADSP_CUSTOM_MED 1980 0.70 0.94 0.60 187 XM_ProductURIs 1918 0.67 0.87 0.59 188 XMMoneyMeta_00 1887 0.76 1.18 0.58 189 FROM_GOV_DKIM_AU 1877 0.43 0.08 0.57 190 RCVD_IN_MSPIKE_L4 1854 0.70 1.01 0.57 191 TR_MSPIKEBAYES00 1833 0.41 0.04 0.56 192 XM_B_COPY_HTML 1809 0.60 0.72 0.55 193 RCVD_IN_SORBS_DUL 1801 0.44 0.17 0.55 194 TR_XM_PHPDW 1749 0.86 1.63 0.53 195 XM_B_SpammyWords4 1718 0.96 1.99 0.52 196 HTML_IMAGE_ONLY_32 1687 0.43 0.22 0.51 197 XMPhish30 1685 0.71 1.16 0.51 198 XMHTMLBadTable_001 1632 0.62 0.92 0.50 199 T_Symld_Words_02 1626 0.68 1.12 0.50 200 XM_USANA_RCVD 1606 0.34 0.00 0.49 ----------------------------------------------------------------------