Email: 487518 Autolearn: 0 AvgScore: 3.10 AvgScanTime: 1.52 sec Spam: 127576 Autolearn: 0 AvgScore: 13.86 AvgScanTime: 1.76 sec Ham: 359942 Autolearn: 0 AvgScore: -0.71 AvgScanTime: 1.43 sec Time Spent Running SA: 205.32 hours Time Spent Processing Spam: 62.35 hours Time Spent Processing Ham: 142.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 118485 86.76 92.87 84.59 2 DKIM_SIGNED 102593 71.97 80.42 68.97 3 XM_DK_Pass 99471 70.15 77.97 67.38 4 XM_B_Unicode 99257 70.31 77.80 67.66 5 RELAYCOUNTRY_US 96975 77.86 76.01 78.52 6 DKIM_VALID 96429 68.10 75.59 65.45 7 DCC_CHECK 95943 46.63 75.20 36.50 8 XM_B_SpammyWords 87312 48.91 68.44 41.99 9 XMListUnsubscribeExists 81676 49.25 64.02 44.01 10 DKIM_VALID_AU 70266 50.26 55.08 48.55 11 BAYES_50 57235 52.27 44.86 54.89 12 XM_B_Unicode3 55015 41.73 43.12 41.24 13 XM_B_SpammyWords2 49600 22.96 38.88 17.32 14 XM_DK_Undo_02 47922 14.82 37.56 6.75 15 HTML_FONT_LOW_CONTRAST 45135 28.17 35.38 25.62 16 LOC_TINY_FONT_1 43546 24.79 34.13 21.48 17 MIME_HTML_ONLY 42736 24.62 33.50 21.48 18 TR_XM_DKIM_Undo 39058 11.54 30.62 4.77 19 DKIM_VALID_EF 36737 26.25 28.80 25.35 20 BAYES_99 36021 12.42 28.23 6.81 21 T_KAM_HTML_FONT_INVALID 33883 19.08 26.56 16.43 22 FVGT_m_MULTI_ODD 33097 22.81 25.94 21.70 23 DCC_CHECK_NEGATIVE 31588 53.32 24.76 63.44 24 XMSubLong 30794 21.63 24.14 20.74 25 XM_Body_Dirty_Words 28873 13.80 22.63 10.67 26 T_TM2_M_HEADER_IN_MSG 28808 27.44 22.58 29.16 27 BAYES_999 27489 9.97 21.55 5.87 28 TR_DCC_Bayes_99 27395 7.53 21.47 2.59 29 RELAYCOUNTRY_META 26763 10.38 20.98 6.62 30 XM_Multi_Part_URI 23351 14.97 18.30 13.78 31 RCVD_IN_MSPIKE_H2 21794 15.90 17.08 15.48 32 FSL_BULK_SIG 21417 9.79 16.79 7.31 33 UNTRUSTED_Relay 20645 7.61 16.18 4.57 34 RCVD_IN_MSPIKE_WL 20323 22.69 15.93 25.09 35 BOTNET 20012 5.11 15.69 1.36 36 LOTS_OF_MONEY 19569 10.13 15.34 8.29 37 BOTNET_IPINHOSTNAME 18026 6.69 14.13 4.05 38 XM_B_Unsub 17400 11.63 13.64 10.92 39 TR_XM_SpammyWords4 16834 7.13 13.20 4.98 40 TR_XM_SpammyRelay 15749 4.21 12.34 1.32 41 XM_B_SpammyWords3 15742 5.87 12.34 3.58 42 UNPARSEABLE_RELAY 15539 8.77 12.18 7.56 43 TR_XM_UnparsRelay 15036 7.36 11.79 5.79 44 XM_UncommonTLD01 14433 5.37 11.31 3.26 45 TR_XM_SpammyWords2 14420 3.61 11.30 0.88 46 XMSexyCombo_05 14353 5.39 11.25 3.32 47 XM_Evil_Numbers_Gen 12287 8.12 9.63 7.58 48 HTML_IMAGE_RATIO_02 12024 7.31 9.42 6.56 49 XM_SendGrid 11613 7.27 9.10 6.61 50 XM_UB50 11125 5.29 8.72 4.08 51 MPART_ALT_DIFF 10893 7.13 8.54 6.64 52 RCVD_IN_MSPIKE_H3 10818 10.39 8.48 11.06 53 T_REMOTE_IMAGE 10220 4.70 8.01 3.52 54 XM_B_Phish_Phrases 9479 4.29 7.43 3.18 55 BAYES_80 9330 4.85 7.31 3.98 56 BAYES_60 8969 8.02 7.03 8.38 57 SpammyFromTLD_02 8936 2.21 7.00 0.51 58 TR_XM_PhishingBody 8933 3.82 7.00 2.69 59 RCVD_IN_MSPIKE_H4 8929 11.44 7.00 13.01 60 XMSubMetaSx_00 8544 4.04 6.70 3.09 61 LotsOfNums_01 8521 8.09 6.68 8.59 62 RCVD_IN_BL_SPAMCOP_NET 8512 2.30 6.67 0.75 63 TM2_M_URI_OPT_OUT 8010 6.76 6.28 6.93 64 HTML_MIME_NO_HTML_TAG 7839 3.55 6.14 2.64 65 XM_H_Long_From01 7403 5.03 5.80 4.76 66 TooManyTo_001 7235 7.35 5.67 7.95 67 KHOP_HELO_FCRDNS 7127 2.59 5.59 1.53 68 T_XMDrugObfuBody_00 6953 4.30 5.45 3.89 69 MIME_HTML_MOSTLY 6779 3.32 5.31 2.62 70 TR_XM_DK_SendGrid 6346 4.20 4.97 3.92 71 DKIM_INVALID 6164 3.87 4.83 3.52 72 XM_OfRef6 6098 1.90 4.78 0.89 73 T_HTML_TAG_BALANCE_CENTER 6002 1.28 4.70 0.06 74 HTML_IMAGE_RATIO_04 5996 6.02 4.70 6.49 75 RELAYCOUNTRY_CA 5807 1.79 4.55 0.81 76 HTML_IMAGE_ONLY_08 5782 1.25 4.53 0.09 77 RCVD_IN_RP_SAFE 5641 5.98 4.42 6.54 78 BAYES_95 5622 2.94 4.41 2.42 79 XMNumbers 5516 3.52 4.32 3.24 80 XM_B_SpammyTLD 5405 2.56 4.24 1.96 81 XM_B_Phish66 5333 2.22 4.18 1.53 82 URI_NOVOWEL 5132 3.26 4.02 2.98 83 XM_SPF_SoftFail 5034 2.27 3.95 1.68 84 XM_B_Investor 4982 1.90 3.91 1.19 85 MIXED_FONT_CASE 4804 0.99 3.77 0.00 86 MIXED_CENTER_CASE 4769 0.98 3.74 0.00 87 MIXED_HREF_CASE 4758 0.98 3.73 0.00 88 MIXED_IMG_CASE 4738 0.97 3.71 0.00 89 MIXED_AREA_CASE 4738 0.97 3.71 0.00 90 MIME_HTML_ONLY_MULTI 4646 4.43 3.64 4.71 91 T_XMDrugObfuBody_08 4591 2.04 3.60 1.49 92 RELAYCOUNTRY_FR 4551 3.44 3.57 3.40 93 TR_XM_SpammyWords5 4526 1.94 3.55 1.37 94 T_XMDrugObfuBody_14 4478 2.79 3.51 2.54 95 RCVD_IN_RP_CERTIFIED 4459 5.09 3.50 5.66 96 BOUNCE_MESSAGE 4376 5.50 3.43 6.23 97 ANY_BOUNCE_MESSAGE 4376 5.50 3.43 6.23 98 XMStrtUSub 4354 3.67 3.41 3.76 99 XM_B_COVIDMETA 4347 1.54 3.41 0.88 100 HTML_FONT_SIZE_LARGE 4294 0.94 3.37 0.08 101 TR_XM_SPAMCOP 4221 1.03 3.31 0.22 102 XM_B_Unsub2 4198 1.83 3.29 1.31 103 MIME_QP_LONG_LINE 4170 4.83 3.27 5.39 104 BODY_URI_ONLY 4137 0.86 3.24 0.01 105 URIBL_DBL_SPAM 4057 0.83 3.18 0.00 106 HTML_IMAGE_RATIO_06 4009 3.86 3.14 4.11 107 SpammyFromTLD_01 3933 1.29 3.08 0.65 108 XMDiploma_00 3732 1.72 2.93 1.30 109 T_TooManySym_01 3649 4.58 2.86 5.20 110 MIXED_CTYPE_CASE 3644 0.75 2.86 0.00 111 BAYES_40 3615 4.37 2.83 4.92 112 XMBounce_01 3599 3.11 2.82 3.21 113 GOOG_STO_IMG_HTML 3579 0.73 2.81 0.00 114 XM_CamelCaseFrm001 3455 1.99 2.71 1.74 115 HTML_IMAGE_RATIO_08 3431 2.37 2.69 2.25 116 TR_XM_SB_Phish 3382 2.69 2.65 2.71 117 XMNoVowels 3348 2.23 2.62 2.09 118 XMSubPhish11 3334 2.66 2.61 2.68 119 XM_Body_Dirty_Words_01 3253 1.11 2.55 0.60 120 XMSexyCombo_01 3188 1.01 2.50 0.49 121 RCVD_IN_IADB_LISTED 3117 4.78 2.44 5.61 122 RCVD_IN_PSBL 2904 0.70 2.28 0.13 123 TR_XM_COVIDMETA1 2848 0.78 2.23 0.26 124 BAYES_00 2814 9.67 2.21 12.31 125 HTML_IMAGE_ONLY_24 2810 0.85 2.20 0.37 126 ALL_TRUSTED 2783 12.25 2.18 15.83 127 TM2_M_VERY_LONG_WORD 2717 1.48 2.13 1.25 128 FROM_EXCESS_BASE64 2674 2.57 2.10 2.74 129 XM_DK_Undo_01 2671 1.69 2.09 1.55 130 RCVD_IN_IADB_SPF 2630 4.13 2.06 4.87 131 XM_DIRTYINTL 2594 0.73 2.03 0.26 132 BAYES_20 2550 3.40 2.00 3.89 133 XM_UB99 2539 0.53 1.99 0.01 134 T_FILL_THIS_FORM_SHORT 2517 1.10 1.97 0.80 135 TR_XM_PHPDW 2493 0.75 1.95 0.32 136 XM_URI_RBL 2470 0.58 1.94 0.10 137 URI_HEX 2468 1.67 1.93 1.58 138 XMStockSpam_06 2438 1.28 1.91 1.06 139 T_XMHurry_00 2436 0.84 1.91 0.46 140 RCVD_IN_IADB_DK 2410 3.60 1.89 4.20 141 RCVD_IN_IADB_SENDERID 2391 3.69 1.87 4.33 142 XMBody_17 2384 0.85 1.87 0.49 143 JH_SPAMMY_HEADERS 2369 0.49 1.86 0.00 144 BOTNET_NORDNS 2368 0.49 1.86 0.01 145 XM_B_SpammyWords4 2359 0.75 1.85 0.36 146 XM_H_Undi_Recip 2327 0.60 1.82 0.17 147 TR_XM_PHPForged 2272 0.68 1.78 0.29 148 SUBJ_ALL_CAPS 2259 1.89 1.77 1.93 149 DIET_1 2254 1.14 1.77 0.92 150 DATE_IN_PAST_03_06 2237 0.89 1.75 0.59 151 TR_XM_FormFill2 2198 0.66 1.72 0.29 152 XM_H_PHPOS 2189 0.65 1.72 0.28 153 XMGenDplmaNmb 2159 1.00 1.69 0.75 154 URI_GOOG_STO_SPAMMY 2112 0.43 1.66 0.00 155 XMBrknScrpt_02 2098 1.09 1.64 0.89 156 HTML_FONT_SIZE_HUGE 2038 0.45 1.60 0.05 157 XM_UB60 2021 0.46 1.58 0.06 158 TR_XM_NoHeaderRelay 2008 0.55 1.57 0.18 159 URIBL_BLACK 1988 0.43 1.56 0.03 160 ALIBABA_IMG_NOT_RCVD_ALI 1967 0.40 1.54 0.00 161 XM_DrugUnitList 1965 0.40 1.54 0.00 162 HOSTED_IMG_DIRECT_MX 1958 0.40 1.53 0.00 163 PDS_OTHER_BAD_TLD 1944 0.51 1.52 0.16 164 MAILING_LIST_MULTI 1944 2.60 1.52 2.98 165 URI_TRY_3LD 1942 1.11 1.52 0.97 166 USER_IN_DEF_DKIM_WL 1904 8.89 1.49 11.51 167 TR_LOTS_OF_MONEY3 1823 0.61 1.43 0.32 168 FILL_THIS_FORM 1805 0.66 1.41 0.40 169 RELAYCOUNTRY_AU 1798 0.53 1.41 0.21 170 RELAYCOUNTRY_CH 1796 0.41 1.41 0.05 171 HELO_NODOT 1758 1.36 1.38 1.35 172 HELO_NO_DOMAIN 1757 1.36 1.38 1.35 173 TR_Symld_Words 1718 1.71 1.35 1.83 174 FILL_THIS_FORM_LONG 1711 0.41 1.34 0.08 175 TR_XM_INV_DKIM 1692 0.70 1.33 0.48 176 XMPhish30 1662 0.80 1.30 0.62 177 XM_OfRef7 1657 0.41 1.30 0.10 178 RCVD_IN_MSPIKE_BL 1625 0.42 1.27 0.12 179 RCVD_IN_IADB_VOUCHED 1617 2.99 1.27 3.61 180 TR_XM_MSPIKECOMBO 1591 0.41 1.25 0.11 181 T_Symld_Words_02 1582 0.64 1.24 0.42 182 XM_UB999 1537 0.32 1.20 0.01 183 TR_MetaPhish_Combo_01 1529 0.94 1.20 0.85 184 TR_XM_COVIDMETA4 1528 0.51 1.20 0.26 185 XMSubNoVowel 1453 1.79 1.14 2.02 186 XMBdyGiftCard01 1438 0.73 1.13 0.58 187 BAYES_05 1419 2.06 1.11 2.40 188 XM_PDF 1414 4.05 1.11 5.09 189 TR_XM_DK_Bayes 1374 5.51 1.08 7.09 190 RELAYCOUNTRY_CN 1362 0.32 1.07 0.05 191 TR_XM_DK_Bayes1 1345 5.34 1.05 6.86 192 XM_H_PHPMailer 1332 0.62 1.04 0.47 193 XM_H_FedEx_Spoof 1320 0.35 1.03 0.11 194 XM_B_SEO 1318 0.36 1.03 0.12 195 XM_UB80 1312 0.29 1.03 0.03 196 MIME_CHARSET_FARAWAY 1302 0.39 1.02 0.17 197 RELAYCOUNTRY_NL 1300 0.40 1.02 0.18 198 RELAYCOUNTRY_GB 1273 0.78 1.00 0.71 199 TR_XM_SEO4 1218 0.30 0.95 0.06 200 XMGppyBdWords 1217 0.66 0.95 0.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 304467 86.76 92.87 84.59 2 RELAYCOUNTRY_US 282622 77.86 76.01 78.52 3 DKIM_SIGNED 248258 71.97 80.42 68.97 4 XM_B_Unicode 243532 70.31 77.80 67.66 5 XM_DK_Pass 242546 70.15 77.97 67.38 6 DKIM_VALID 235578 68.10 75.59 65.45 7 DCC_CHECK_NEGATIVE 228336 53.32 24.76 63.44 8 BAYES_50 197584 52.27 44.86 54.89 9 DKIM_VALID_AU 174765 50.26 55.08 48.55 10 XMListUnsubscribeExists 158410 49.25 64.02 44.01 11 XM_B_SpammyWords 151141 48.91 68.44 41.99 12 XM_B_Unicode3 148424 41.73 43.12 41.24 13 DCC_CHECK 131396 46.63 75.20 36.50 14 T_TM2_M_HEADER_IN_MSG 104976 27.44 22.58 29.16 15 HTML_FONT_LOW_CONTRAST 92218 28.17 35.38 25.62 16 DKIM_VALID_EF 91242 26.25 28.80 25.35 17 RCVD_IN_MSPIKE_WL 90297 22.69 15.93 25.09 18 FVGT_m_MULTI_ODD 78101 22.81 25.94 21.70 19 LOC_TINY_FONT_1 77333 24.79 34.13 21.48 20 MIME_HTML_ONLY 77303 24.62 33.50 21.48 21 XMSubLong 74663 21.63 24.14 20.74 22 XM_B_SpammyWords2 62331 22.96 38.88 17.32 23 T_KAM_HTML_FONT_INVALID 59127 19.08 26.56 16.43 24 ALL_TRUSTED 56961 12.25 2.18 15.83 25 RCVD_IN_MSPIKE_H2 55728 15.90 17.08 15.48 26 XM_Multi_Part_URI 49607 14.97 18.30 13.78 27 RCVD_IN_MSPIKE_H4 46840 11.44 7.00 13.01 28 BAYES_00 44318 9.67 2.21 12.31 29 USER_IN_DEF_DKIM_WL 41430 8.89 1.49 11.51 30 RCVD_IN_MSPIKE_H3 39822 10.39 8.48 11.06 31 XM_B_Unsub 39305 11.63 13.64 10.92 32 XM_Body_Dirty_Words 38410 13.80 22.63 10.67 33 LotsOfNums_01 30907 8.09 6.68 8.59 34 BAYES_60 30154 8.02 7.03 8.38 35 LOTS_OF_MONEY 29834 10.13 15.34 8.29 36 TooManyTo_001 28598 7.35 5.67 7.95 37 XM_Evil_Numbers_Gen 27297 8.12 9.63 7.58 38 UNPARSEABLE_RELAY 27223 8.77 12.18 7.56 39 XM_DKIMWhitelistDomains 26367 5.47 0.25 7.33 40 FSL_BULK_SIG 26303 9.79 16.79 7.31 41 TR_XM_DK_Bayes 25509 5.51 1.08 7.09 42 TM2_M_URI_OPT_OUT 24931 6.76 6.28 6.93 43 TR_XM_DK_Bayes1 24684 5.34 1.05 6.86 44 BAYES_99 24508 12.42 28.23 6.81 45 XM_DK_Undo_02 24312 14.82 37.56 6.75 46 XM_H_Trusted_IP 24056 4.93 0.00 6.68 47 MPART_ALT_DIFF 23888 7.13 8.54 6.64 48 RELAYCOUNTRY_META 23825 10.38 20.98 6.62 49 XM_SendGrid 23806 7.27 9.10 6.61 50 HTML_IMAGE_RATIO_02 23609 7.31 9.42 6.56 51 RCVD_IN_RP_SAFE 23534 5.98 4.42 6.54 52 HTML_IMAGE_RATIO_04 23356 6.02 4.70 6.49 53 ANY_BOUNCE_MESSAGE 22424 5.50 3.43 6.23 54 BOUNCE_MESSAGE 22423 5.50 3.43 6.23 55 TR_XM_DK_Bayes2 21370 4.63 0.93 5.94 56 BAYES_999 21113 9.97 21.55 5.87 57 TR_XM_UnparsRelay 20828 7.36 11.79 5.79 58 RCVD_IN_RP_CERTIFIED 20362 5.09 3.50 5.66 59 RCVD_IN_IADB_LISTED 20191 4.78 2.44 5.61 60 MIME_QP_LONG_LINE 19386 4.83 3.27 5.39 61 T_TooManySym_01 18701 4.58 2.86 5.20 62 XM_PDF 18329 4.05 1.11 5.09 63 TR_XM_SpammyWords4 17911 7.13 13.20 4.98 64 BAYES_40 17710 4.37 2.83 4.92 65 RCVD_IN_IADB_SPF 17522 4.13 2.06 4.87 66 TR_XM_DKIM_Undo 17184 11.54 30.62 4.77 67 XM_H_Long_From01 17124 5.03 5.80 4.76 68 MIME_HTML_ONLY_MULTI 16965 4.43 3.64 4.71 69 UNTRUSTED_Relay 16460 7.61 16.18 4.57 70 RCVD_IN_IADB_SENDERID 15597 3.69 1.87 4.33 71 RCVD_IN_IADB_DK 15121 3.60 1.89 4.20 72 HTML_IMAGE_RATIO_06 14794 3.86 3.14 4.11 73 XM_UB50 14674 5.29 8.72 4.08 74 BOTNET_IPINHOSTNAME 14583 6.69 14.13 4.05 75 BAYES_80 14321 4.85 7.31 3.98 76 TR_XM_DK_SendGrid 14119 4.20 4.97 3.92 77 BAYES_20 14004 3.40 2.00 3.89 78 T_XMDrugObfuBody_00 13997 4.30 5.45 3.89 79 XMStrtUSub 13536 3.67 3.41 3.76 80 RCVD_IN_IADB_VOUCHED 12979 2.99 1.27 3.61 81 XM_B_SpammyWords3 12896 5.87 12.34 3.58 82 T_REMOTE_IMAGE 12684 4.70 8.01 3.52 83 DKIM_INVALID 12680 3.87 4.83 3.52 84 RELAYCOUNTRY_FR 12243 3.44 3.57 3.40 85 XMSexyCombo_05 11937 5.39 11.25 3.32 86 XM_UncommonTLD01 11731 5.37 11.31 3.26 87 XMNumbers 11651 3.52 4.32 3.24 88 XMBounce_01 11555 3.11 2.82 3.21 89 XM_B_Phish_Phrases 11456 4.29 7.43 3.18 90 XMSubMetaSx_00 11135 4.04 6.70 3.09 91 URI_NOVOWEL 10743 3.26 4.02 2.98 92 MAILING_LIST_MULTI 10725 2.60 1.52 2.98 93 FROM_EXCESS_BASE64 9847 2.57 2.10 2.74 94 TR_XM_SB_Phish 9742 2.69 2.65 2.71 95 TR_XM_PhishingBody 9683 3.82 7.00 2.69 96 XMSubPhish11 9647 2.66 2.61 2.68 97 T_TooManySym_02 9572 2.17 0.77 2.66 98 HTML_MIME_NO_HTML_TAG 9491 3.55 6.14 2.64 99 MIME_HTML_MOSTLY 9422 3.32 5.31 2.62 100 TR_DCC_Bayes_99 9317 7.53 21.47 2.59 101 T_XMDrugObfuBody_14 9127 2.79 3.51 2.54 102 BAYES_95 8705 2.94 4.41 2.42 103 BAYES_05 8627 2.06 1.11 2.40 104 HTML_IMAGE_RATIO_08 8102 2.37 2.69 2.25 105 RCVD_IN_IADB_OPTIN 7997 1.86 0.84 2.22 106 XMNoVowels 7531 2.23 2.62 2.09 107 TooManyTo_002 7513 1.77 0.87 2.09 108 XMSubNoVowel 7258 1.79 1.14 2.02 109 INVALID_MSGID 7200 1.52 0.16 2.00 110 HTML_FONT_FACE_BAD 7176 1.70 0.86 1.99 111 XM_B_SpammyTLD 7068 2.56 4.24 1.96 112 SUBJ_ALL_CAPS 6935 1.89 1.77 1.93 113 IN_HORDE_ADDRESS_BOOK 6776 1.43 0.14 1.88 114 MSGID_NOFQDN1 6674 1.38 0.04 1.85 115 TR_Symld_Words 6601 1.71 1.35 1.83 116 XM_CamelCaseFrm001 6248 1.99 2.71 1.74 117 XM_SPF_SoftFail 6040 2.27 3.95 1.68 118 TO_MALFORMED 6034 1.25 0.03 1.68 119 URI_HEX 5674 1.67 1.93 1.58 120 XM_DK_Undo_01 5568 1.69 2.09 1.55 121 KHOP_HELO_FCRDNS 5516 2.59 5.59 1.53 122 XM_B_Phish66 5496 2.22 4.18 1.53 123 T_XMDrugObfuBody_08 5361 2.04 3.60 1.49 124 TVD_RCVD_IP 5283 1.17 0.32 1.47 125 XMGappySubj_01 5260 1.12 0.14 1.46 126 TooManyTo_003 5018 1.21 0.69 1.39 127 TR_XM_SpammyWords5 4933 1.94 3.55 1.37 128 BOTNET 4905 5.11 15.69 1.36 129 HELO_NODOT 4855 1.36 1.38 1.35 130 HELO_NO_DOMAIN 4853 1.36 1.38 1.35 131 TR_XM_SpammyRelay 4766 4.21 12.34 1.32 132 XM_B_Unsub2 4731 1.83 3.29 1.31 133 XMDiploma_00 4671 1.72 2.93 1.30 134 TM2_M_VERY_LONG_WORD 4506 1.48 2.13 1.25 135 HTML_IMAGE_ONLY_20 4390 1.01 0.41 1.22 136 XM_GoogleGroups 4346 1.05 0.62 1.21 137 XM_B_Investor 4291 1.90 3.91 1.19 138 XMBSHREFv2 4062 0.89 0.23 1.13 139 XMCapTrack 3852 0.91 0.47 1.07 140 XMStockSpam_06 3816 1.28 1.91 1.06 141 RCVD_IN_MSPIKE_H5 3635 0.86 0.45 1.01 142 HELO_MISC_IP 3595 0.75 0.05 1.00 143 URI_TRY_3LD 3489 1.11 1.52 0.97 144 DKIM_ADSP_CUSTOM_MED 3488 0.96 0.94 0.97 145 TooManyTo_004 3448 0.85 0.54 0.96 146 DIET_1 3319 1.14 1.77 0.92 147 XM_H_Long_From02 3269 0.90 0.87 0.91 148 XMBrknScrpt_02 3196 1.09 1.64 0.89 149 XM_ProductURIs 3195 0.89 0.89 0.89 150 XM_OfRef6 3187 1.90 4.78 0.89 151 TR_XM_SpammyWords2 3181 3.61 11.30 0.88 152 XM_B_COVIDMETA 3169 1.54 3.41 0.88 153 IN_ZIMBRA_NJ_WHITELIST 3141 0.65 0.01 0.87 154 TVD_SPACE_RATIO_MINFP 3116 0.66 0.08 0.87 155 TR_MetaPhish_Combo_01 3047 0.94 1.20 0.85 156 RELAYCOUNTRY_CA 2920 1.79 4.55 0.81 157 T_FILL_THIS_FORM_SHORT 2868 1.10 1.97 0.80 158 XMHTML_After_End 2860 0.80 0.81 0.79 159 XM_D_tchamptons_WL 2825 0.58 0.00 0.78 160 TooManyTo_005 2789 0.68 0.41 0.77 161 T_TooManySym_03 2702 0.64 0.31 0.75 162 TM2_M_A_HREF_HREF 2700 0.78 0.85 0.75 163 XMGenDplmaNmb 2696 1.00 1.69 0.75 164 RCVD_IN_BL_SPAMCOP_NET 2690 2.30 6.67 0.75 165 XMBody_95 2678 0.60 0.20 0.74 166 XMSolicitRefs_0 2653 0.74 0.76 0.74 167 RELAYCOUNTRY_GB 2540 0.78 1.00 0.71 168 FROM_GOV_DKIM_AU 2390 0.54 0.20 0.66 169 XM_B_COPY_HTML 2382 0.69 0.77 0.66 170 SpammyFromTLD_01 2337 1.29 3.08 0.65 171 HTTPS_HTTP_MISMATCH 2306 0.67 0.77 0.64 172 XMPhish30 2245 0.80 1.30 0.62 173 HTML_TAG_BALANCE_BODY 2244 0.69 0.87 0.62 174 NML_ADSP_CUSTOM_MED 2218 0.64 0.71 0.62 175 T_OBFU_PDF_ATTACH 2175 0.49 0.15 0.60 176 XM_Body_Dirty_Words_01 2147 1.11 2.55 0.60 177 DATE_IN_PAST_03_06 2113 0.89 1.75 0.59 178 XMBdyGiftCard01 2105 0.73 1.13 0.58 179 XM_RXBody 2017 0.57 0.62 0.56 180 MY_SERVERS_FOUND 2015 0.55 0.51 0.56 181 XMGppyBdWords 2004 0.66 0.95 0.56 182 FORGED_GMAIL_RCVD 1963 0.61 0.79 0.55 183 TR_MSPIKEBAYES00 1864 0.38 0.00 0.52 184 XM_ShortIntro_01 1841 0.52 0.55 0.51 185 SpammyFromTLD_02 1837 2.21 7.00 0.51 186 TVD_SPACE_RATIO 1834 0.40 0.08 0.51 187 XMBody_17 1776 0.85 1.87 0.49 188 XMSubMetaSxObfu_03 1766 0.50 0.54 0.49 189 MPART_ALT_DIFF_COUNT 1764 0.57 0.78 0.49 190 XMSexyCombo_01 1753 1.01 2.50 0.49 191 TR_XM_INV_DKIM 1725 0.70 1.33 0.48 192 HTML_IMAGE_ONLY_32 1706 0.45 0.37 0.47 193 XM_H_PHPMailer 1695 0.62 1.04 0.47 194 HTML_IMAGE_ONLY_28 1652 0.42 0.31 0.46 195 T_XMHurry_00 1649 0.84 1.91 0.46 196 MISSING_HEADERS 1605 0.49 0.61 0.45 197 RCVD_IN_SORBS_DUL 1587 0.45 0.49 0.44 198 XMSubMetaI_00 1584 0.53 0.80 0.44 199 T_Symld_Words_02 1522 0.64 1.24 0.42 200 XMDateMe_00 1504 0.42 0.42 0.42 ----------------------------------------------------------------------