Email: 471946 Autolearn: 0 AvgScore: 3.29 AvgScanTime: 1.28 sec Spam: 148813 Autolearn: 0 AvgScore: 14.44 AvgScanTime: 1.44 sec Ham: 323133 Autolearn: 0 AvgScore: -1.84 AvgScanTime: 1.21 sec Time Spent Running SA: 167.89 hours Time Spent Processing Spam: 59.59 hours Time Spent Processing Ham: 108.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140855 88.29 94.65 85.36 2 DKIM_SIGNED 128060 74.73 86.05 69.51 3 XM_DK_Pass 124389 72.42 83.59 67.28 4 DKIM_VALID 123402 71.28 82.92 65.92 5 RELAYCOUNTRY_US 121567 80.23 81.69 79.56 6 XM_B_Unicode 117396 71.17 78.89 67.62 7 DCC_CHECK 107610 42.26 72.31 28.43 8 XMListUnsubscribeExists 99899 50.69 67.13 43.12 9 XM_B_SpammyWords 97525 48.29 65.54 40.35 10 DKIM_VALID_AU 91264 54.44 61.33 51.27 11 RCVD_IN_MSPIKE_H2 65170 37.71 43.79 34.91 12 XM_B_Unicode3 65122 41.14 43.76 39.94 13 BAYES_50 63557 50.60 42.71 54.24 14 XM_DK_Undo_02 59433 16.55 39.94 5.78 15 XM_B_SpammyWords2 55531 23.11 37.32 16.57 16 FVGT_m_MULTI_ODD 51436 27.80 34.56 24.68 17 LOC_TINY_FONT_1 50997 24.67 34.27 20.25 18 MIME_HTML_ONLY 50275 23.21 33.78 18.33 19 HTML_FONT_LOW_CONTRAST 48964 27.62 32.90 25.18 20 BAYES_99 47567 14.21 31.96 6.03 21 TR_XM_DKIM_Undo 46924 12.81 31.53 4.19 22 DKIM_VALID_EF 46367 28.92 31.16 27.89 23 T_KAM_HTML_FONT_INVALID 42301 21.06 28.43 17.68 24 DCC_CHECK_NEGATIVE 41158 57.69 27.66 71.53 25 BAYES_999 37113 11.32 24.94 5.04 26 T_TM2_M_HEADER_IN_MSG 34473 29.21 23.17 32.00 27 XMSubLong 33753 21.91 22.68 21.55 28 XM_Body_Dirty_Words 33606 14.42 22.58 10.66 29 TR_DCC_Bayes_99 32887 7.90 22.10 1.37 30 RELAYCOUNTRY_META 30344 8.77 20.39 3.42 31 XM_Multi_Part_URI 26573 13.12 17.86 10.93 32 XM_B_Unsub 22149 10.48 14.88 8.45 33 TR_XM_BayesUnsub 21415 9.07 14.39 6.63 34 LOTS_OF_MONEY 21259 9.48 14.29 7.27 35 BOTNET_IPINHOSTNAME 20662 7.39 13.88 4.40 36 FSL_BULK_SIG 19958 6.42 13.41 3.20 37 UNPARSEABLE_RELAY 19548 9.19 13.14 7.37 38 TR_XM_UnparsRelay 19141 7.89 12.86 5.61 39 RCVD_IN_MSPIKE_WL 18643 14.31 12.53 15.13 40 TR_XM_SpammyWords4 18593 7.25 12.49 4.83 41 BOTNET 18146 4.76 12.19 1.33 42 XM_B_SpammyWords3 17426 5.92 11.71 3.26 43 RCVD_IN_MSPIKE_H3 16357 10.82 10.99 10.74 44 TR_XM_SpammyWords2 16341 3.93 10.98 0.69 45 TR_XM_SpammyRelay 16185 4.38 10.88 1.39 46 XMSexyCombo_05 16034 5.30 10.77 2.78 47 UNTRUSTED_Relay 14736 3.95 9.90 1.20 48 RCVD_IN_BL_SPAMCOP_NET 14291 3.40 9.60 0.55 49 MPART_ALT_DIFF 13247 6.22 8.90 4.98 50 XM_UncommonTLD01 12840 5.32 8.63 3.79 51 BAYES_80 12711 5.63 8.54 4.29 52 LotsOfNums_01 12105 8.25 8.13 8.31 53 XM_Evil_Numbers_Gen 11934 7.74 8.02 7.61 54 BAYES_60 11086 8.64 7.45 9.19 55 HTML_IMAGE_RATIO_02 10506 6.28 7.06 5.92 56 RELAYCOUNTRY_CA 10221 2.79 6.87 0.91 57 TM2_M_VERY_LONG_WORD 10107 2.95 6.79 1.18 58 TR_XM_PhishingBody 9645 4.26 6.48 3.23 59 XM_SendGrid 9637 5.22 6.48 4.64 60 XMSubMetaSx_00 9324 4.40 6.27 3.54 61 XM_H_Long_From01 9278 5.30 6.23 4.88 62 HTML_MIME_NO_HTML_TAG 9203 3.43 6.18 2.16 63 MIME_HTML_ONLY_MULTI 8931 4.00 6.00 3.07 64 TR_XM_SPAMCOP 8770 2.03 5.89 0.26 65 XM_B_Investor 8548 2.76 5.74 1.38 66 XM_B_Phish_Phrases 8428 3.78 5.66 2.91 67 RCVD_IN_MSPIKE_BL 8260 2.41 5.55 0.97 68 TR_XM_MSPIKECOMBO 8095 2.38 5.44 0.97 69 BAYES_95 7966 3.42 5.35 2.53 70 XM_B_SpammyTLD 7481 2.99 5.03 2.05 71 XM_SPF_SoftFail 7257 3.99 4.88 3.58 72 XMLngstWrd_00 6955 1.84 4.67 0.54 73 TooManyTo_001 6796 7.99 4.57 9.57 74 XM_DIRTYINTL 6756 1.62 4.54 0.28 75 HTML_IMAGE_RATIO_04 6479 4.83 4.35 5.05 76 T_REMOTE_IMAGE 6434 4.03 4.32 3.89 77 XMNumbers 6345 4.55 4.26 4.68 78 XM_B_Phish66 6288 2.69 4.23 1.99 79 XMStrtUSub 5958 4.22 4.00 4.32 80 TR_XM_DK_SendGrid 5930 3.36 3.98 3.07 81 XM_OfRef6 5865 2.01 3.94 1.12 82 XM_GoogleGroups 5846 2.09 3.93 1.25 83 T_XMDrugObfuBody_14 5717 2.35 3.84 1.66 84 URIBL_DBL_SPAM 5656 1.20 3.80 0.01 85 MIME_QP_LONG_LINE 5643 4.55 3.79 4.90 86 XM_UB50 5623 1.73 3.78 0.79 87 XMLngstWrd_01 5592 1.49 3.76 0.44 88 TR_XM_SpammyWords5 5532 2.06 3.72 1.29 89 XMLngstWrd_02 5423 1.37 3.64 0.32 90 TR_XM_SpammyWords3 5312 1.44 3.57 0.46 91 UPPERCASE_75_100 5310 1.13 3.57 0.01 92 XMLngstWrd_03 5292 1.26 3.56 0.21 93 HTML_TITLE_SUBJ_DIFF 5230 1.31 3.51 0.29 94 XMLngstWrd_04 5186 1.20 3.48 0.15 95 MIME_HTML_MOSTLY 5185 2.46 3.48 1.99 96 RCVD_IN_VALIDITY_SAFE 5103 4.23 3.43 4.60 97 SpammyFromTLD_01 4855 1.53 3.26 0.73 98 RCVD_IN_VALIDITY_RPBL 4663 1.01 3.13 0.03 99 DKIM_INVALID 4658 3.45 3.13 3.59 100 T_XMDrugObfuBody_08 4631 1.92 3.11 1.37 101 PDS_OTHER_BAD_TLD 4479 1.08 3.01 0.19 102 TM2_M_URI_OPT_OUT 4467 2.47 3.00 2.23 103 HTML_IMAGE_RATIO_06 4460 3.35 3.00 3.51 104 XM_CamelCaseFrm001 4363 2.13 2.93 1.76 105 RCVD_IN_MSPIKE_L4 4362 1.28 2.93 0.52 106 KHOP_HELO_FCRDNS 4344 2.61 2.92 2.46 107 URI_NOVOWEL 4289 2.49 2.88 2.31 108 RCVD_IN_VALIDITY_CERTIFIED 4273 3.67 2.87 4.03 109 BOTNET_NORDNS 4254 0.91 2.86 0.01 110 SpammyFromTLD_02 4235 1.06 2.85 0.24 111 URI_PHP_REDIR 4176 0.89 2.81 0.00 112 XMDiploma_00 4149 1.88 2.79 1.46 113 T_FILL_THIS_FORM_SHORT 3910 1.38 2.63 0.81 114 RCVD_IN_IADB_LISTED 3837 4.00 2.58 4.65 115 XM_UB99 3828 0.81 2.57 0.00 116 XM_B_Unsub2 3737 1.56 2.51 1.12 117 XM_DK_Undo_01 3683 1.84 2.47 1.55 118 XMBody_17 3664 1.11 2.46 0.49 119 T_TooManySym_01 3602 5.46 2.42 6.86 120 HTML_IMAGE_RATIO_08 3467 2.05 2.33 1.92 121 TR_XM_SB_Phish 3436 2.20 2.31 2.15 122 RCVD_IN_IADB_SPF 3400 3.54 2.28 4.12 123 XM_Body_Dirty_Words_01 3299 0.85 2.22 0.21 124 HTTPS_HTTP_MISMATCH 3175 1.18 2.13 0.74 125 RCVD_IN_IADB_DK 3168 3.11 2.13 3.57 126 XMSubPhish11 3140 2.12 2.11 2.12 127 RCVD_IN_IADB_SENDERID 3134 3.18 2.11 3.68 128 SUBJ_ALL_CAPS 3114 1.70 2.09 1.51 129 USER_IN_DEF_DKIM_WL 3107 8.35 2.09 11.24 130 XMSexyCombo_01 3092 1.00 2.08 0.51 131 XM_URI_RBL 3070 0.72 2.06 0.10 132 RCVD_IN_PSBL 3053 0.72 2.05 0.10 133 ALL_TRUSTED 3005 12.99 2.02 18.04 134 XMStockSpam_06 3004 1.52 2.02 1.29 135 RELAYCOUNTRY_FR 2978 0.80 2.00 0.24 136 XM_UB999 2906 0.62 1.95 0.00 137 T_XMDrugObfuBody_00 2876 1.07 1.93 0.67 138 XM_B_SpammyWords4 2863 0.86 1.92 0.37 139 TR_XM_NoHeaderRelay 2722 0.65 1.83 0.11 140 URI_HEX 2710 1.29 1.82 1.05 141 XM_H_Undi_Recip 2703 0.79 1.82 0.31 142 TR_XM_MSPIKECOMBO2 2636 0.64 1.77 0.12 143 XM_B_COVIDMETA 2520 0.97 1.69 0.63 144 TR_XM_PHPDW 2424 0.78 1.63 0.38 145 XM_PDF 2419 4.24 1.63 5.45 146 TR_XM_PHPForged 2417 0.73 1.62 0.32 147 BAYES_40 2396 4.08 1.61 5.21 148 MAILING_LIST_MULTI 2392 2.29 1.61 2.60 149 TR_XM_COVIDMETA4 2378 0.67 1.60 0.25 150 TR_LOTS_OF_MONEY3 2361 0.67 1.59 0.25 151 TR_XM_FormFill2 2327 0.70 1.56 0.31 152 XM_H_PHPOS 2305 0.69 1.55 0.30 153 FROM_EXCESS_BASE64 2246 1.99 1.51 2.21 154 XM_H_Long_From02 2201 1.19 1.48 1.05 155 RCVD_IN_MSPIKE_H4 2183 3.30 1.47 4.14 156 HTML_TAG_BALANCE_BODY 2133 0.82 1.43 0.54 157 RCVD_IN_MSPIKE_L3 2114 0.75 1.42 0.45 158 XMHTML_After_End 2104 0.92 1.41 0.70 159 XMGenDplmaNmb 2104 0.97 1.41 0.77 160 HK_RANDOM_REPLYTO 2054 0.48 1.38 0.07 161 HTML_FONT_TINY_NORDNS 1965 0.47 1.32 0.08 162 TR_XM_COVIDMETA1 1928 0.55 1.30 0.21 163 XMSubMetaI_00 1926 0.72 1.29 0.45 164 T_XMHurry_00 1924 0.68 1.29 0.40 165 URIBL_BLACK 1896 0.43 1.27 0.04 166 RCVD_IN_IADB_VOUCHED 1891 2.48 1.27 3.03 167 TR_XM_FormFill 1890 0.41 1.27 0.01 168 RELAYCOUNTRY_DE 1879 0.62 1.26 0.32 169 RELAYCOUNTRY_RU 1858 0.41 1.25 0.02 170 MONEY_NOHTML 1857 0.45 1.25 0.08 171 HTML_TAG_BALANCE_CENTER 1855 0.44 1.25 0.07 172 XM_UB60 1835 0.43 1.23 0.05 173 XM_B_DynamicLink 1835 0.41 1.23 0.03 174 DKIM_ADSP_CUSTOM_MED 1819 1.15 1.22 1.11 175 XM_ProductURIs 1785 0.73 1.20 0.52 176 TR_XM_Undi_Recip5 1741 0.38 1.17 0.01 177 XMBdyGiftCard01 1736 0.79 1.17 0.62 178 XM_B_SEO 1643 1.05 1.10 1.02 179 XM_UB80 1638 0.36 1.10 0.02 180 XMBrknScrpt_02 1637 0.73 1.10 0.56 181 TR_Symld_Words 1634 1.57 1.10 1.79 182 BAYES_20 1628 3.06 1.09 3.96 183 RCVD_IN_MSPIKE_L5 1619 0.35 1.09 0.01 184 XMSubNoVowel 1613 1.75 1.08 2.05 185 TR_MetaPhish_Combo_01 1607 0.90 1.08 0.82 186 HOSTED_IMG_DIRECT_MX 1603 0.34 1.08 0.00 187 MIXED_CENTER_CASE 1602 0.34 1.08 0.00 188 MPART_ALT_DIFF_COUNT 1599 0.68 1.07 0.50 189 URI_TRY_3LD 1590 0.74 1.07 0.59 190 FORGED_GMAIL_RCVD 1589 0.77 1.07 0.63 191 MIXED_HREF_CASE 1586 0.34 1.07 0.00 192 RELAYCOUNTRY_AU 1582 0.51 1.06 0.26 193 MIXED_IMG_CASE 1573 0.34 1.06 0.00 194 UNDISC_MONEY 1571 0.34 1.06 0.01 195 XMReplyNow 1565 0.50 1.05 0.25 196 MIXED_AREA_CASE 1564 0.33 1.05 0.00 197 NML_ADSP_CUSTOM_MED 1518 0.87 1.02 0.80 198 DIET_1 1512 0.51 1.02 0.28 199 TR_XM_SEO4 1507 0.36 1.01 0.06 200 TR_XM_MaxSPIKE 1501 0.35 1.01 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 275841 88.29 94.65 85.36 2 RELAYCOUNTRY_US 257075 80.23 81.69 79.56 3 DCC_CHECK_NEGATIVE 231126 57.69 27.66 71.53 4 DKIM_SIGNED 224623 74.73 86.05 69.51 5 XM_B_Unicode 218488 71.17 78.89 67.62 6 XM_DK_Pass 217388 72.42 83.59 67.28 7 DKIM_VALID 213008 71.28 82.92 65.92 8 BAYES_50 175261 50.60 42.71 54.24 9 DKIM_VALID_AU 165664 54.44 61.33 51.27 10 XMListUnsubscribeExists 139337 50.69 67.13 43.12 11 XM_B_SpammyWords 130385 48.29 65.54 40.35 12 XM_B_Unicode3 129054 41.14 43.76 39.94 13 RCVD_IN_MSPIKE_H2 112801 37.71 43.79 34.91 14 T_TM2_M_HEADER_IN_MSG 103388 29.21 23.17 32.00 15 DCC_CHECK 91851 42.26 72.31 28.43 16 DKIM_VALID_EF 90122 28.92 31.16 27.89 17 HTML_FONT_LOW_CONTRAST 81364 27.62 32.90 25.18 18 FVGT_m_MULTI_ODD 79747 27.80 34.56 24.68 19 XMSubLong 69642 21.91 22.68 21.55 20 LOC_TINY_FONT_1 65431 24.67 34.27 20.25 21 MIME_HTML_ONLY 59243 23.21 33.78 18.33 22 ALL_TRUSTED 58291 12.99 2.02 18.04 23 T_KAM_HTML_FONT_INVALID 57114 21.06 28.43 17.68 24 XM_B_SpammyWords2 53536 23.11 37.32 16.57 25 RCVD_IN_MSPIKE_WL 48902 14.31 12.53 15.13 26 BAYES_00 38677 8.42 0.70 11.97 27 USER_IN_DEF_DKIM_WL 36308 8.35 2.09 11.24 28 XM_Multi_Part_URI 35325 13.12 17.86 10.93 29 RCVD_IN_MSPIKE_H3 34691 10.82 10.99 10.74 30 XM_Body_Dirty_Words 34462 14.42 22.58 10.66 31 TooManyTo_001 30916 7.99 4.57 9.57 32 BAYES_60 29687 8.64 7.45 9.19 33 XM_DKIMWhitelistDomains 28693 6.12 0.13 8.88 34 XM_B_Unsub 27290 10.48 14.88 8.45 35 LotsOfNums_01 26838 8.25 8.13 8.31 36 IN_ZIMBRA_NJ_WHITELIST 25572 5.45 0.11 7.91 37 XM_Evil_Numbers_Gen 24577 7.74 8.02 7.61 38 UNPARSEABLE_RELAY 23804 9.19 13.14 7.37 39 LOTS_OF_MONEY 23477 9.48 14.29 7.27 40 T_TooManySym_01 22158 5.46 2.42 6.86 41 TR_XM_BayesUnsub 21414 9.07 14.39 6.63 42 TR_XM_DK_Bayes 20022 4.39 0.45 6.20 43 BAYES_99 19501 14.21 31.96 6.03 44 HTML_IMAGE_RATIO_02 19142 6.28 7.06 5.92 45 TR_XM_DK_Bayes1 18822 4.13 0.44 5.82 46 XM_DK_Undo_02 18678 16.55 39.94 5.78 47 TR_XM_UnparsRelay 18117 7.89 12.86 5.61 48 XM_PDF 17612 4.24 1.63 5.45 49 BAYES_40 16849 4.08 1.61 5.21 50 HTML_IMAGE_RATIO_04 16326 4.83 4.35 5.05 51 BAYES_999 16300 11.32 24.94 5.04 52 MPART_ALT_DIFF 16090 6.22 8.90 4.98 53 TR_XM_DK_Bayes2 15895 3.47 0.34 4.92 54 MIME_QP_LONG_LINE 15839 4.55 3.79 4.90 55 XM_H_Long_From01 15754 5.30 6.23 4.88 56 TR_XM_SpammyWords4 15608 7.25 12.49 4.83 57 XMNumbers 15120 4.55 4.26 4.68 58 RCVD_IN_IADB_LISTED 15028 4.00 2.58 4.65 59 XM_SendGrid 14996 5.22 6.48 4.64 60 RCVD_IN_VALIDITY_SAFE 14866 4.23 3.43 4.60 61 BOTNET_IPINHOSTNAME 14227 7.39 13.88 4.40 62 T_TooManySym_02 14076 3.18 0.64 4.36 63 XMStrtUSub 13970 4.22 4.00 4.32 64 BAYES_80 13867 5.63 8.54 4.29 65 TR_XM_DKIM_Undo 13546 12.81 31.53 4.19 66 XM_H_Trusted_IP 13393 2.84 0.00 4.14 67 RCVD_IN_MSPIKE_H4 13369 3.30 1.47 4.14 68 RCVD_IN_IADB_SPF 13300 3.54 2.28 4.12 69 RCVD_IN_VALIDITY_CERTIFIED 13025 3.67 2.87 4.03 70 BAYES_20 12805 3.06 1.09 3.96 71 T_REMOTE_IMAGE 12586 4.03 4.32 3.89 72 XM_UncommonTLD01 12257 5.32 8.63 3.79 73 RCVD_IN_IADB_SENDERID 11897 3.18 2.11 3.68 74 DKIM_INVALID 11615 3.45 3.13 3.59 75 XM_SPF_SoftFail 11579 3.99 4.88 3.58 76 RCVD_IN_IADB_DK 11530 3.11 2.13 3.57 77 XMSubMetaSx_00 11434 4.40 6.27 3.54 78 HTML_IMAGE_RATIO_06 11356 3.35 3.00 3.51 79 RELAYCOUNTRY_META 11067 8.77 20.39 3.42 80 ANY_BOUNCE_MESSAGE 10980 2.61 0.89 3.40 81 BOUNCE_MESSAGE 10979 2.61 0.89 3.40 82 XM_B_SpammyWords3 10528 5.92 11.71 3.26 83 TR_XM_PhishingBody 10448 4.26 6.48 3.23 84 FSL_BULK_SIG 10334 6.42 13.41 3.20 85 TR_XM_DK_SendGrid 9931 3.36 3.98 3.07 86 MIME_HTML_ONLY_MULTI 9924 4.00 6.00 3.07 87 RCVD_IN_IADB_VOUCHED 9796 2.48 1.27 3.03 88 XM_B_Phish_Phrases 9414 3.78 5.66 2.91 89 XMSexyCombo_05 8991 5.30 10.77 2.78 90 TooManyTo_002 8511 2.00 0.62 2.63 91 MAILING_LIST_MULTI 8408 2.29 1.61 2.60 92 BAYES_05 8293 1.94 0.58 2.57 93 BAYES_95 8191 3.42 5.35 2.53 94 KHOP_HELO_FCRDNS 7961 2.61 2.92 2.46 95 URI_NOVOWEL 7469 2.49 2.88 2.31 96 TVD_RCVD_IP 7423 1.64 0.22 2.30 97 TM2_M_URI_OPT_OUT 7207 2.47 3.00 2.23 98 FROM_EXCESS_BASE64 7146 1.99 1.51 2.21 99 HELO_NODOT 7061 1.67 0.57 2.19 100 HELO_NO_DOMAIN 7055 1.67 0.56 2.18 101 HTML_MIME_NO_HTML_TAG 6987 3.43 6.18 2.16 102 TR_XM_SB_Phish 6952 2.20 2.31 2.15 103 INVALID_MSGID 6915 1.57 0.34 2.14 104 XMSubPhish11 6860 2.12 2.11 2.12 105 RCVD_IN_IADB_OPTIN 6807 1.70 0.80 2.11 106 XM_B_SpammyTLD 6636 2.99 5.03 2.05 107 XMSubNoVowel 6635 1.75 1.08 2.05 108 MIME_HTML_MOSTLY 6441 2.46 3.48 1.99 109 XM_B_Phish66 6419 2.69 4.23 1.99 110 HTML_FONT_FACE_BAD 6350 1.60 0.82 1.97 111 HTML_IMAGE_RATIO_08 6208 2.05 2.33 1.92 112 IN_HORDE_ADDRESS_BOOK 6063 1.31 0.09 1.88 113 TO_MALFORMED 5975 1.28 0.03 1.85 114 TR_Symld_Words 5791 1.57 1.10 1.79 115 TooManyTo_003 5685 1.36 0.49 1.76 116 XM_CamelCaseFrm001 5672 2.13 2.93 1.76 117 T_TooManySym_03 5599 1.29 0.34 1.73 118 T_XMDrugObfuBody_14 5363 2.35 3.84 1.66 119 XM_DK_Undo_01 4997 1.84 2.47 1.55 120 SUBJ_ALL_CAPS 4887 1.70 2.09 1.51 121 XMDiploma_00 4715 1.88 2.79 1.46 122 TR_XM_SpammyRelay 4497 4.38 10.88 1.39 123 XM_B_Investor 4460 2.76 5.74 1.38 124 T_XMDrugObfuBody_08 4418 1.92 3.11 1.37 125 TR_DCC_Bayes_99 4414 7.90 22.10 1.37 126 BOTNET 4307 4.76 12.19 1.33 127 XMCapTrack 4276 1.02 0.37 1.32 128 XMStockSpam_06 4181 1.52 2.02 1.29 129 TR_XM_SpammyWords5 4180 2.06 3.72 1.29 130 XMBSHREFv2 4176 0.96 0.23 1.29 131 TooManyTo_004 4131 0.99 0.38 1.28 132 XMGappySubj_01 4094 0.89 0.09 1.27 133 XM_GoogleGroups 4029 2.09 3.93 1.25 134 UNTRUSTED_Relay 3889 3.95 9.90 1.20 135 TM2_M_VERY_LONG_WORD 3809 2.95 6.79 1.18 136 TVD_SPACE_RATIO 3681 0.86 0.24 1.14 137 XM_OfRef6 3631 2.01 3.94 1.12 138 XM_B_Unsub2 3619 1.56 2.51 1.12 139 DKIM_ADSP_CUSTOM_MED 3591 1.15 1.22 1.11 140 TooManyTo_005 3409 0.83 0.33 1.05 141 XM_H_Long_From02 3402 1.19 1.48 1.05 142 URI_HEX 3400 1.29 1.82 1.05 143 XM_B_SEO 3302 1.05 1.10 1.02 144 RCVD_IN_MSPIKE_BL 3137 2.41 5.55 0.97 145 TR_XM_MSPIKECOMBO 3135 2.38 5.44 0.97 146 XM_E_Blogspot 2989 0.69 0.18 0.93 147 RCVD_IN_RP_SAFE 2958 0.83 0.65 0.92 148 RELAYCOUNTRY_CA 2950 2.79 6.87 0.91 149 FVGT_m_MULTI_ODD_EMAIL 2925 0.66 0.12 0.91 150 XMBody_95 2773 0.63 0.13 0.86 151 HTML_IMAGE_ONLY_20 2746 0.89 0.97 0.85 152 TR_MetaPhish_Combo_01 2657 0.90 1.08 0.82 153 T_FILL_THIS_FORM_SHORT 2603 1.38 2.63 0.81 154 RCVD_IN_RP_CERTIFIED 2600 0.72 0.55 0.80 155 NML_ADSP_CUSTOM_MED 2596 0.87 1.02 0.80 156 XM_ShortIntro_01 2578 0.73 0.59 0.80 157 XM_UB50 2546 1.73 3.78 0.79 158 XMGenDplmaNmb 2482 0.97 1.41 0.77 159 XM_H_PHPMailer 2403 0.77 0.82 0.74 160 HTTPS_HTTP_MISMATCH 2390 1.18 2.13 0.74 161 SpammyFromTLD_01 2351 1.53 3.26 0.73 162 XMHTML_After_End 2259 0.92 1.41 0.70 163 MSGID_NOFQDN1 2245 0.48 0.01 0.69 164 TR_XM_SpammyWords2 2219 3.93 10.98 0.69 165 XM_RXBody 2172 0.54 0.26 0.67 166 T_XMDrugObfuBody_00 2171 1.07 1.93 0.67 167 XMPhish30 2149 0.76 0.97 0.67 168 XM_B_COVIDMETA 2046 0.97 1.69 0.63 169 FORGED_GMAIL_RCVD 2044 0.77 1.07 0.63 170 T_OBFU_PDF_ATTACH 2030 0.66 0.73 0.63 171 XMBdyGiftCard01 2005 0.79 1.17 0.62 172 SHORT_HELO_AND_INLINE_IMAGE 1982 0.44 0.08 0.61 173 RCVD_IN_SORBS_DUL 1947 0.45 0.11 0.60 174 XM_shorewaves_Whitelist 1947 0.41 0.00 0.60 175 URI_TRY_3LD 1909 0.74 1.07 0.59 176 RELAYCOUNTRY_GB 1857 0.66 0.84 0.57 177 XMBrknScrpt_02 1817 0.73 1.10 0.56 178 TVD_SPACE_RATIO_MINFP 1814 0.43 0.14 0.56 179 XMNoVowels 1805 0.52 0.44 0.56 180 XM_B_COPY_HTML 1791 0.58 0.64 0.55 181 RCVD_IN_BL_SPAMCOP_NET 1771 3.40 9.60 0.55 182 XMMoneyMeta_00 1751 0.63 0.82 0.54 183 XMLngstWrd_00 1746 1.84 4.67 0.54 184 HTML_TAG_BALANCE_BODY 1729 0.82 1.43 0.54 185 T_MANY_PILL_PRICE 1719 0.37 0.02 0.53 186 RCVD_IN_MSPIKE_L4 1674 1.28 2.93 0.52 187 XM_ProductURIs 1668 0.73 1.20 0.52 188 XMSexyCombo_01 1642 1.00 2.08 0.51 189 MPART_ALT_DIFF_COUNT 1627 0.68 1.07 0.50 190 XMBody_17 1574 1.11 2.46 0.49 191 MISSING_HEADERS 1560 0.53 0.62 0.48 192 XMDateMe_00 1558 0.50 0.55 0.48 193 MSGID_FROM_MTA_HEADER 1521 0.39 0.20 0.47 194 FROM_GOV_SPOOF 1502 0.37 0.17 0.46 195 TM2_M_BODY_EMPTY 1501 0.40 0.26 0.46 196 T_Symld_Words_02 1486 0.57 0.80 0.46 197 HTML_IMAGE_ONLY_32 1477 0.39 0.25 0.46 198 TR_XM_SpammyWords3 1477 1.44 3.57 0.46 199 XMSubMetaI_00 1457 0.72 1.29 0.45 200 XMHTMLBadTable_001 1443 0.53 0.70 0.45 ----------------------------------------------------------------------