Email: 509532 Autolearn: 0 AvgScore: 3.58 AvgScanTime: 1.28 sec Spam: 169572 Autolearn: 0 AvgScore: 14.08 AvgScanTime: 1.40 sec Ham: 339960 Autolearn: 0 AvgScore: -1.66 AvgScanTime: 1.22 sec Time Spent Running SA: 181.52 hours Time Spent Processing Spam: 65.99 hours Time Spent Processing Ham: 115.53 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161265 89.20 95.10 86.26 2 DKIM_SIGNED 149177 77.46 87.97 72.22 3 XM_DK_Pass 146412 76.00 86.34 70.84 4 DKIM_VALID 145095 75.06 85.57 69.82 5 RELAYCOUNTRY_US 139866 80.81 82.48 79.97 6 XM_B_Unicode 134388 72.41 79.25 69.00 7 DCC_CHECK 124074 45.57 73.17 31.80 8 XMListUnsubscribeExists 116223 54.53 68.54 47.55 9 XM_B_SpammyWords 113012 51.03 66.65 43.24 10 DKIM_VALID_AU 110405 57.57 65.11 53.81 11 RCVD_IN_MSPIKE_H2 82407 41.16 48.60 37.45 12 XM_DK_Undo_02 71961 18.38 42.44 6.38 13 XM_B_Unicode3 71374 40.54 42.09 39.77 14 BAYES_50 71078 51.05 41.92 55.61 15 XM_B_SpammyWords2 64012 24.16 37.75 17.39 16 LOC_TINY_FONT_1 60285 26.59 35.55 22.12 17 FVGT_m_MULTI_ODD 57614 28.07 33.98 25.13 18 BAYES_99 57416 14.85 33.86 5.37 19 MIME_HTML_ONLY 56831 22.94 33.51 17.67 20 TR_XM_DKIM_Undo 56364 14.18 33.24 4.67 21 DKIM_VALID_EF 53280 28.87 31.42 27.59 22 HTML_FONT_LOW_CONTRAST 53083 27.81 31.30 26.06 23 T_KAM_HTML_FONT_INVALID 50416 23.02 29.73 19.67 24 DCC_CHECK_NEGATIVE 45445 54.38 26.80 68.14 25 BAYES_999 44916 11.64 26.49 4.24 26 TR_DCC_Bayes_99 41242 9.38 24.32 1.92 27 XMSubLong 36164 21.22 21.33 21.17 28 T_TM2_M_HEADER_IN_MSG 35823 26.96 21.13 29.86 29 XM_Body_Dirty_Words 35451 14.47 20.91 11.26 30 RELAYCOUNTRY_META 34214 9.03 20.18 3.47 31 XM_Multi_Part_URI 28525 13.18 16.82 11.36 32 XM_B_Unsub 27088 10.94 15.97 8.43 33 TR_XM_BayesUnsub 26577 9.64 15.67 6.63 34 RCVD_IN_MSPIKE_WL 23814 15.87 14.04 16.78 35 BOTNET_IPINHOSTNAME 22457 7.54 13.24 4.69 36 FSL_BULK_SIG 21621 6.15 12.75 2.86 37 LOTS_OF_MONEY 21074 8.75 12.43 6.91 38 UNPARSEABLE_RELAY 20812 9.07 12.27 7.48 39 XM_B_SpammyWords3 20665 6.83 12.19 4.15 40 TR_XM_UnparsRelay 20288 7.95 11.96 5.94 41 TR_XM_SpammyRelay 19844 4.95 11.70 1.58 42 RCVD_IN_MSPIKE_H3 19212 11.21 11.33 11.14 43 TR_XM_SpammyWords2 18206 4.07 10.74 0.75 44 TR_XM_SpammyWords4 18143 6.32 10.70 4.13 45 BOTNET 17887 4.45 10.55 1.41 46 MPART_ALT_DIFF 17881 6.58 10.54 4.60 47 RCVD_IN_BL_SPAMCOP_NET 17043 3.82 10.05 0.71 48 XMSexyCombo_05 16609 4.99 9.79 2.59 49 XM_Evil_Numbers_Gen 15272 7.98 9.01 7.47 50 UNTRUSTED_Relay 14801 3.83 8.73 1.38 51 XM_UncommonTLD01 14202 5.18 8.38 3.59 52 BAYES_80 13115 5.47 7.73 4.34 53 MIME_HTML_ONLY_MULTI 12803 4.47 7.55 2.93 54 TM2_M_VERY_LONG_WORD 12602 3.33 7.43 1.29 55 HTML_MIME_NO_HTML_TAG 12080 3.60 7.12 1.84 56 BAYES_60 12058 8.44 7.11 9.10 57 LotsOfNums_01 12003 8.25 7.08 8.84 58 RELAYCOUNTRY_CA 11905 3.01 7.02 1.02 59 TR_XM_SPAMCOP 11707 2.47 6.90 0.26 60 HTML_IMAGE_RATIO_02 11676 6.29 6.89 5.99 61 XM_SendGrid 11309 5.40 6.67 4.77 62 XM_H_Long_From01 10996 5.63 6.48 5.21 63 TR_XM_PhishingBody 10961 4.36 6.46 3.31 64 XM_B_Phish_Phrases 10708 4.34 6.31 3.35 65 XMLngstWrd_00 8720 2.03 5.14 0.47 66 XMLngstWrd_01 8665 1.97 5.11 0.40 67 XM_GoogleGroups 8665 2.57 5.11 1.31 68 XMLngstWrd_02 8528 1.87 5.03 0.30 69 XMSubMetaSx_00 8524 4.00 5.03 3.49 70 BAYES_95 8374 3.53 4.94 2.83 71 TooManyTo_001 8321 7.37 4.91 8.60 72 XM_B_Investor 8282 2.76 4.88 1.70 73 HTML_TITLE_SUBJ_DIFF 8209 1.64 4.84 0.05 74 XMLngstWrd_03 8074 1.72 4.76 0.21 75 XMLngstWrd_04 7975 1.66 4.70 0.14 76 XM_SPF_SoftFail 7857 3.43 4.63 2.83 77 UPPERCASE_75_100 7855 1.56 4.63 0.02 78 HTML_IMAGE_RATIO_04 7576 4.87 4.47 5.07 79 RCVD_IN_MSPIKE_BL 7287 2.41 4.30 1.47 80 TR_XM_DK_SendGrid 7172 3.39 4.23 2.98 81 TR_XM_MSPIKECOMBO 7022 2.35 4.14 1.45 82 XMStrtUSub 6795 4.33 4.01 4.49 83 XMNumbers 6560 3.68 3.87 3.59 84 XM_B_SpammyTLD 6466 2.68 3.81 2.12 85 XM_B_Phish66 6455 2.49 3.81 1.83 86 XM_UB50 6338 1.84 3.74 0.89 87 MIME_HTML_MOSTLY 6276 2.65 3.70 2.12 88 T_XMDrugObfuBody_08 5988 2.13 3.53 1.44 89 T_XMDrugObfuBody_14 5772 2.19 3.40 1.59 90 XM_OfRef6 5750 1.74 3.39 0.92 91 TR_XM_SpammyWords5 5745 2.21 3.39 1.62 92 MIME_QP_LONG_LINE 5642 4.80 3.33 5.54 93 RCVD_IN_VALIDITY_SAFE 5581 4.19 3.29 4.63 94 SpammyFromTLD_02 5489 1.24 3.24 0.25 95 HTML_IMAGE_RATIO_08 5421 2.73 3.20 2.49 96 SpammyFromTLD_01 5396 1.58 3.18 0.78 97 XM_DIRTYINTL 5352 1.24 3.16 0.28 98 XM_CamelCaseFrm001 5261 2.20 3.10 1.75 99 XMDiploma_00 4969 2.24 2.93 1.90 100 T_REMOTE_IMAGE 4903 3.36 2.89 3.60 101 HTML_IMAGE_RATIO_06 4809 3.45 2.84 3.76 102 TM2_M_URI_OPT_OUT 4695 2.44 2.77 2.28 103 URI_NOVOWEL 4531 2.83 2.67 2.90 104 RCVD_IN_VALIDITY_RPBL 4524 0.92 2.67 0.05 105 RCVD_IN_IADB_LISTED 4469 4.61 2.64 5.59 106 XM_B_Unsub2 4376 1.95 2.58 1.64 107 T_TooManySym_01 4346 4.74 2.56 5.82 108 RCVD_IN_VALIDITY_CERTIFIED 4294 3.53 2.53 4.02 109 TR_XM_SB_Phish 4239 2.27 2.50 2.16 110 KHOP_HELO_FCRDNS 4139 2.18 2.44 2.05 111 RCVD_IN_MSPIKE_H4 4104 3.97 2.42 4.75 112 DKIM_INVALID 4082 2.40 2.41 2.40 113 T_XMDrugObfuBody_00 4055 1.41 2.39 0.92 114 XMSubPhish11 4017 2.21 2.37 2.13 115 XM_DK_Undo_01 3944 1.87 2.33 1.64 116 BOTNET_NORDNS 3895 0.77 2.30 0.01 117 TR_XM_SpammyWords3 3868 1.19 2.28 0.64 118 XM_B_COVIDMETA 3816 1.27 2.25 0.78 119 RCVD_IN_IADB_SPF 3807 4.03 2.25 4.92 120 FROM_EXCESS_BASE64 3748 2.33 2.21 2.39 121 TR_XM_MSPIKECOMBO2 3742 0.88 2.21 0.22 122 PDS_OTHER_BAD_TLD 3560 0.82 2.10 0.19 123 URIBL_DBL_SPAM 3535 0.70 2.08 0.01 124 RCVD_IN_IADB_DK 3510 3.53 2.07 4.25 125 MAILING_LIST_MULTI 3496 2.45 2.06 2.64 126 XM_B_SpammyWords4 3489 1.02 2.06 0.50 127 RCVD_IN_IADB_SENDERID 3470 3.61 2.05 4.39 128 USER_IN_DEF_DKIM_WL 3437 8.44 2.03 11.63 129 SUBJ_ALL_CAPS 3434 1.89 2.03 1.82 130 XMHTML_After_End 3417 1.14 2.02 0.70 131 XM_UB99 3377 0.67 1.99 0.00 132 T_FILL_THIS_FORM_SHORT 3307 1.21 1.95 0.84 133 XM_H_Undi_Recip 3125 0.76 1.84 0.23 134 XMBody_17 3116 0.83 1.84 0.33 135 XMBrknScrpt_02 3105 1.01 1.83 0.59 136 ALL_TRUSTED 3102 12.15 1.83 17.30 137 RCVD_IN_MSPIKE_L3 3087 1.08 1.82 0.71 138 XMSexyCombo_01 3018 0.96 1.78 0.55 139 BAYES_40 2930 3.86 1.73 4.92 140 T_XMHurry_00 2861 0.86 1.69 0.45 141 RCVD_IN_PSBL 2857 0.81 1.68 0.37 142 XMStockSpam_06 2794 1.09 1.65 0.82 143 TR_LOTS_OF_MONEY3 2785 0.65 1.64 0.15 144 XMGenDplmaNmb 2691 1.37 1.59 1.26 145 XM_UB999 2690 0.53 1.59 0.00 146 TR_XM_PHPDW 2674 0.77 1.58 0.37 147 HK_RANDOM_REPLYTO 2669 0.58 1.57 0.08 148 TR_XM_PHPForged 2645 0.73 1.56 0.32 149 XM_H_Long_From02 2599 1.17 1.53 0.99 150 TR_XM_FormFill2 2584 0.72 1.52 0.32 151 RCVD_IN_MSPIKE_L5 2566 0.51 1.51 0.01 152 XM_H_PHPOS 2562 0.71 1.51 0.31 153 RCVD_IN_IADB_VOUCHED 2510 2.86 1.48 3.55 154 TM2_M_A_HREF_HREF 2483 0.83 1.46 0.51 155 URI_HEX 2451 1.38 1.45 1.35 156 HTML_TAG_BALANCE_BODY 2395 0.92 1.41 0.67 157 TR_XM_NoHeaderRelay 2392 0.56 1.41 0.13 158 XM_URI_RBL 2342 0.53 1.38 0.10 159 RELAYCOUNTRY_RU 2311 0.48 1.36 0.03 160 TR_MetaPhish_Combo_01 2310 1.15 1.36 1.05 161 XMSubMetaI_00 2303 0.93 1.36 0.72 162 XMBdyGiftCard01 2270 1.00 1.34 0.83 163 RELAYCOUNTRY_AU 2250 0.64 1.33 0.29 164 URI_TRY_3LD 2208 0.85 1.30 0.62 165 BAYES_20 2182 2.98 1.29 3.82 166 XM_UB60 2166 0.48 1.28 0.08 167 HTTPS_HTTP_MISMATCH 2123 0.92 1.25 0.75 168 TR_XM_Base64_M1 2095 0.92 1.24 0.77 169 RELAYCOUNTRY_IN 2091 0.46 1.23 0.08 170 TR_XM_COVIDMETA1 2077 0.54 1.22 0.20 171 TR_XM_MaxSPIKE 2064 0.47 1.22 0.09 172 URIBL_BLACK 2013 0.43 1.19 0.05 173 TR_LOTS_OF_MONEY2 2009 0.52 1.18 0.18 174 XM_B_DynamicLink 2009 0.42 1.18 0.03 175 T_MONEY_PERCENT 2009 0.52 1.18 0.18 176 RELAYCOUNTRY_FR 1961 0.55 1.16 0.24 177 TR_Symld_Words 1920 1.43 1.13 1.58 178 PLING_QUERY 1915 0.67 1.13 0.44 179 TR_XM_BayesRelay 1874 0.37 1.11 0.00 180 MONEY_NOHTML 1858 0.41 1.10 0.07 181 THIS_AD 1806 0.62 1.07 0.40 182 TR_XM_FormFill 1801 0.36 1.06 0.01 183 XM_B_DNDMA 1772 0.58 1.04 0.35 184 TR_XM_Undi_Recip5 1768 0.35 1.04 0.01 185 XMSubNoVowel 1741 1.14 1.03 1.20 186 T_Symld_Words_02 1733 0.69 1.02 0.53 187 FROM_SUSPICIOUS_NTLD 1715 0.36 1.01 0.03 188 TR_XM_COVIDMETA4 1697 0.48 1.00 0.23 189 HTML_TAG_BALANCE_CENTER 1694 0.42 1.00 0.13 190 XM_B_Crypto 1685 0.47 0.99 0.21 191 HTML_FONT_TINY_NORDNS 1656 0.38 0.98 0.08 192 XM_PDF 1638 3.74 0.97 5.12 193 MPART_ALT_DIFF_COUNT 1629 0.68 0.96 0.54 194 UNDISC_MONEY 1628 0.32 0.96 0.00 195 XM_B_SEO 1604 0.43 0.95 0.17 196 MIXED_CENTER_CASE 1567 0.31 0.92 0.00 197 FROM_SUSPICIOUS_NTLD_FP 1561 0.32 0.92 0.03 198 TR_Mismatch_TLD_02 1556 0.36 0.92 0.08 199 XM_Body_Dirty_Words_01 1552 0.38 0.92 0.11 200 RCVD_IN_IADB_OPTIN 1525 1.87 0.90 2.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 293256 89.20 95.10 86.26 2 RELAYCOUNTRY_US 271867 80.81 82.48 79.97 3 DKIM_SIGNED 245513 77.46 87.97 72.22 4 XM_DK_Pass 240816 76.00 86.34 70.84 5 DKIM_VALID 237362 75.06 85.57 69.82 6 XM_B_Unicode 234572 72.41 79.25 69.00 7 DCC_CHECK_NEGATIVE 231654 54.38 26.80 68.14 8 BAYES_50 189060 51.05 41.92 55.61 9 DKIM_VALID_AU 182938 57.57 65.11 53.81 10 XMListUnsubscribeExists 161644 54.53 68.54 47.55 11 XM_B_SpammyWords 146998 51.03 66.65 43.24 12 XM_B_Unicode3 135187 40.54 42.09 39.77 13 RCVD_IN_MSPIKE_H2 127306 41.16 48.60 37.45 14 DCC_CHECK 108116 45.57 73.17 31.80 15 T_TM2_M_HEADER_IN_MSG 101522 26.96 21.13 29.86 16 DKIM_VALID_EF 93807 28.87 31.42 27.59 17 HTML_FONT_LOW_CONTRAST 88596 27.81 31.30 26.06 18 FVGT_m_MULTI_ODD 85428 28.07 33.98 25.13 19 LOC_TINY_FONT_1 75204 26.59 35.55 22.12 20 XMSubLong 71972 21.22 21.33 21.17 21 T_KAM_HTML_FONT_INVALID 66872 23.02 29.73 19.67 22 MIME_HTML_ONLY 60081 22.94 33.51 17.67 23 XM_B_SpammyWords2 59104 24.16 37.75 17.39 24 ALL_TRUSTED 58799 12.15 1.83 17.30 25 RCVD_IN_MSPIKE_WL 57058 15.87 14.04 16.78 26 USER_IN_DEF_DKIM_WL 39554 8.44 2.03 11.63 27 BAYES_00 39478 8.01 0.80 11.61 28 XM_Multi_Part_URI 38610 13.18 16.82 11.36 29 XM_Body_Dirty_Words 38283 14.47 20.91 11.26 30 RCVD_IN_MSPIKE_H3 37883 11.21 11.33 11.14 31 BAYES_60 30938 8.44 7.11 9.10 32 XM_DKIMWhitelistDomains 30733 6.11 0.23 9.04 33 LotsOfNums_01 30045 8.25 7.08 8.84 34 TooManyTo_001 29245 7.37 4.91 8.60 35 XM_B_Unsub 28660 10.94 15.97 8.43 36 UNPARSEABLE_RELAY 25428 9.07 12.27 7.48 37 XM_Evil_Numbers_Gen 25397 7.98 9.01 7.47 38 IN_ZIMBRA_NJ_WHITELIST 23887 4.73 0.12 7.03 39 LOTS_OF_MONEY 23504 8.75 12.43 6.91 40 TR_XM_BayesUnsub 22530 9.64 15.67 6.63 41 TR_XM_DK_Bayes 22213 4.56 0.61 6.53 42 TR_XM_DK_Bayes1 21734 4.46 0.60 6.39 43 XM_DK_Undo_02 21678 18.38 42.44 6.38 44 HTML_IMAGE_RATIO_02 20366 6.29 6.89 5.99 45 TR_XM_UnparsRelay 20198 7.95 11.96 5.94 46 T_TooManySym_01 19790 4.74 2.56 5.82 47 TR_XM_DK_Bayes2 19099 3.93 0.55 5.62 48 RCVD_IN_IADB_LISTED 19004 4.61 2.64 5.59 49 MIME_QP_LONG_LINE 18824 4.80 3.33 5.54 50 BAYES_99 18270 14.85 33.86 5.37 51 XM_H_Long_From01 17703 5.63 6.48 5.21 52 XM_PDF 17394 3.74 0.97 5.12 53 HTML_IMAGE_RATIO_04 17225 4.87 4.47 5.07 54 RCVD_IN_IADB_SPF 16738 4.03 2.25 4.92 55 BAYES_40 16732 3.86 1.73 4.92 56 XM_SendGrid 16204 5.40 6.67 4.77 57 RCVD_IN_MSPIKE_H4 16133 3.97 2.42 4.75 58 BOTNET_IPINHOSTNAME 15938 7.54 13.24 4.69 59 TR_XM_DKIM_Undo 15890 14.18 33.24 4.67 60 RCVD_IN_VALIDITY_SAFE 15757 4.19 3.29 4.63 61 MPART_ALT_DIFF 15629 6.58 10.54 4.60 62 XMStrtUSub 15262 4.33 4.01 4.49 63 RCVD_IN_IADB_SENDERID 14928 3.61 2.05 4.39 64 BAYES_80 14761 5.47 7.73 4.34 65 RCVD_IN_IADB_DK 14458 3.53 2.07 4.25 66 BAYES_999 14406 11.64 26.49 4.24 67 XM_B_SpammyWords3 14116 6.83 12.19 4.15 68 TR_XM_SpammyWords4 14051 6.32 10.70 4.13 69 RCVD_IN_VALIDITY_CERTIFIED 13675 3.53 2.53 4.02 70 BAYES_20 12978 2.98 1.29 3.82 71 HTML_IMAGE_RATIO_06 12787 3.45 2.84 3.76 72 T_REMOTE_IMAGE 12229 3.36 2.89 3.60 73 XMNumbers 12208 3.68 3.87 3.59 74 XM_UncommonTLD01 12208 5.18 8.38 3.59 75 RCVD_IN_IADB_VOUCHED 12082 2.86 1.48 3.55 76 XMSubMetaSx_00 11875 4.00 5.03 3.49 77 RELAYCOUNTRY_META 11780 9.03 20.18 3.47 78 XM_B_Phish_Phrases 11387 4.34 6.31 3.35 79 XM_H_Trusted_IP 11358 2.23 0.00 3.34 80 T_TooManySym_02 11303 2.49 0.82 3.32 81 TR_XM_PhishingBody 11238 4.36 6.46 3.31 82 TR_XM_DK_SendGrid 10121 3.39 4.23 2.98 83 MIME_HTML_ONLY_MULTI 9962 4.47 7.55 2.93 84 URI_NOVOWEL 9873 2.83 2.67 2.90 85 FSL_BULK_SIG 9730 6.15 12.75 2.86 86 XM_SPF_SoftFail 9631 3.43 4.63 2.83 87 BAYES_95 9622 3.53 4.94 2.83 88 ANY_BOUNCE_MESSAGE 9561 2.14 0.81 2.81 89 BOUNCE_MESSAGE 9560 2.14 0.81 2.81 90 MAILING_LIST_MULTI 8988 2.45 2.06 2.64 91 XMSexyCombo_05 8810 4.99 9.79 2.59 92 HTML_IMAGE_RATIO_08 8472 2.73 3.20 2.49 93 TooManyTo_002 8175 1.81 0.63 2.40 94 TVD_RCVD_IP 8157 1.80 0.61 2.40 95 DKIM_INVALID 8151 2.40 2.41 2.40 96 FROM_EXCESS_BASE64 8130 2.33 2.21 2.39 97 BAYES_05 8118 1.80 0.63 2.39 98 RCVD_IN_IADB_OPTIN 8026 1.87 0.90 2.36 99 TM2_M_URI_OPT_OUT 7747 2.44 2.77 2.28 100 TR_XM_SB_Phish 7342 2.27 2.50 2.16 101 XMSubPhish11 7235 2.21 2.37 2.13 102 MIME_HTML_MOSTLY 7222 2.65 3.70 2.12 103 XM_B_SpammyTLD 7205 2.68 3.81 2.12 104 KHOP_HELO_FCRDNS 6969 2.18 2.44 2.05 105 HELO_NODOT 6944 1.57 0.63 2.04 106 HELO_NO_DOMAIN 6941 1.56 0.59 2.04 107 INVALID_MSGID 6899 1.39 0.12 2.03 108 TR_DCC_Bayes_99 6536 9.38 24.32 1.92 109 XMDiploma_00 6459 2.24 2.93 1.90 110 IN_HORDE_ADDRESS_BOOK 6355 1.30 0.15 1.87 111 HTML_MIME_NO_HTML_TAG 6249 3.60 7.12 1.84 112 XM_B_Phish66 6231 2.49 3.81 1.83 113 SUBJ_ALL_CAPS 6203 1.89 2.03 1.82 114 XM_CamelCaseFrm001 5965 2.20 3.10 1.75 115 TO_MALFORMED 5938 1.17 0.01 1.75 116 XM_B_Investor 5778 2.76 4.88 1.70 117 XM_DK_Undo_01 5591 1.87 2.33 1.64 118 XM_B_Unsub2 5566 1.95 2.58 1.64 119 TooManyTo_003 5522 1.26 0.53 1.62 120 TR_XM_SpammyWords5 5502 2.21 3.39 1.62 121 T_XMDrugObfuBody_14 5399 2.19 3.40 1.59 122 TR_XM_SpammyRelay 5382 4.95 11.70 1.58 123 TR_Symld_Words 5378 1.43 1.13 1.58 124 RCVD_IN_MSPIKE_BL 4993 2.41 4.30 1.47 125 TR_XM_MSPIKECOMBO 4929 2.35 4.14 1.45 126 T_XMDrugObfuBody_08 4882 2.13 3.53 1.44 127 BOTNET 4806 4.45 10.55 1.41 128 XMBSHREFv2 4692 1.01 0.27 1.38 129 UNTRUSTED_Relay 4689 3.83 8.73 1.38 130 URI_HEX 4587 1.38 1.45 1.35 131 XM_GoogleGroups 4450 2.57 5.11 1.31 132 XMCapTrack 4432 0.99 0.36 1.30 133 TM2_M_VERY_LONG_WORD 4383 3.33 7.43 1.29 134 XMGenDplmaNmb 4269 1.37 1.59 1.26 135 XMSubNoVowel 4075 1.14 1.03 1.20 136 TooManyTo_004 3988 0.92 0.43 1.17 137 XMGappySubj_01 3982 0.85 0.20 1.17 138 HTML_FONT_FACE_BAD 3811 0.98 0.70 1.12 139 TR_MetaPhish_Combo_01 3573 1.15 1.36 1.05 140 RELAYCOUNTRY_CA 3456 3.01 7.02 1.02 141 XM_H_Long_From02 3380 1.17 1.53 0.99 142 TVD_SPACE_RATIO 3372 0.72 0.17 0.99 143 TooManyTo_005 3242 0.76 0.38 0.95 144 RCVD_IN_RP_SAFE 3160 0.85 0.70 0.93 145 T_XMDrugObfuBody_00 3138 1.41 2.39 0.92 146 XM_OfRef6 3133 1.74 3.39 0.92 147 RCVD_IN_MSPIKE_H5 3042 0.69 0.29 0.89 148 XM_UB50 3023 1.84 3.74 0.89 149 DKIM_ADSP_CUSTOM_MED 2989 0.86 0.82 0.88 150 T_FILL_THIS_FORM_SHORT 2862 1.21 1.95 0.84 151 XMBdyGiftCard01 2831 1.00 1.34 0.83 152 XMStockSpam_06 2783 1.09 1.65 0.82 153 RCVD_IN_RP_CERTIFIED 2744 0.72 0.54 0.81 154 XMBody_95 2674 0.57 0.13 0.79 155 XM_B_COVIDMETA 2637 1.27 2.25 0.78 156 SpammyFromTLD_01 2636 1.58 3.18 0.78 157 TR_XM_Base64_M1 2615 0.92 1.24 0.77 158 T_TooManySym_03 2610 0.63 0.35 0.77 159 HTTPS_HTTP_MISMATCH 2541 0.92 1.25 0.75 160 TR_XM_SpammyWords2 2535 4.07 10.74 0.75 161 HTML_IMAGE_ONLY_20 2495 0.78 0.86 0.73 162 RCVD_IN_MSPIKE_L4 2471 0.75 0.81 0.73 163 XM_ShortIntro_01 2469 0.71 0.68 0.73 164 XMSubMetaI_00 2434 0.93 1.36 0.72 165 RCVD_IN_MSPIKE_L3 2424 1.08 1.82 0.71 166 RCVD_IN_BL_SPAMCOP_NET 2404 3.82 10.05 0.71 167 XMHTML_After_End 2369 1.14 2.02 0.70 168 XM_H_PHPMailer 2357 0.72 0.76 0.69 169 MSGID_NOFQDN1 2323 0.46 0.01 0.68 170 HTML_TAG_BALANCE_BODY 2282 0.92 1.41 0.67 171 T_OBFU_PDF_ATTACH 2243 0.52 0.25 0.66 172 XMSubMetaSxObfu_02 2240 0.58 0.41 0.66 173 XM_shorewaves_Whitelist 2215 0.43 0.00 0.65 174 TR_XM_SpammyWords3 2178 1.19 2.28 0.64 175 URI_TRY_3LD 2110 0.85 1.30 0.62 176 XMNoVowels 2056 0.53 0.39 0.60 177 XMPhish14 2056 0.66 0.78 0.60 178 SHORT_HELO_AND_INLINE_IMAGE 2044 0.43 0.09 0.60 179 XMBrknScrpt_02 2021 1.01 1.83 0.59 180 XM_B_COPY_HTML 2014 0.65 0.76 0.59 181 NML_ADSP_CUSTOM_MED 1992 0.61 0.67 0.59 182 RELAYCOUNTRY_GB 1958 0.64 0.78 0.58 183 RCVD_IN_SORBS_DUL 1939 0.42 0.11 0.57 184 XMMoneyMeta_00 1932 0.62 0.73 0.57 185 XMPhish30 1913 0.66 0.84 0.56 186 XMSexyCombo_01 1859 0.96 1.78 0.55 187 MPART_ALT_DIFF_COUNT 1819 0.68 0.96 0.54 188 XM_D_tchamptons_WL 1808 0.36 0.02 0.53 189 T_Symld_Words_02 1797 0.69 1.02 0.53 190 XMHTMLBadTable_001 1797 0.63 0.85 0.53 191 TM2_M_A_HREF_HREF 1721 0.83 1.46 0.51 192 XM_ProductURIs 1704 0.52 0.57 0.50 193 XM_B_SpammyWords4 1693 1.02 2.06 0.50 194 XMSlimDrugH 1677 0.58 0.77 0.49 195 HTML_IMAGE_ONLY_28 1649 0.42 0.28 0.49 196 BASE64_LENGTH_79_INF 1622 0.38 0.19 0.48 197 XMLngstWrd_00 1606 2.03 5.14 0.47 198 HTML_IMAGE_ONLY_32 1580 0.37 0.17 0.46 199 TM2_M_BODY_EMPTY 1549 0.36 0.18 0.46 200 XMDateMe_00 1536 0.41 0.32 0.45 ----------------------------------------------------------------------