Email: 586590 Autolearn: 0 AvgScore: 1.27 AvgScanTime: 1.27 sec Spam: 135451 Autolearn: 0 AvgScore: 14.49 AvgScanTime: 1.50 sec Ham: 451139 Autolearn: 0 AvgScore: -2.70 AvgScanTime: 1.20 sec Time Spent Running SA: 206.24 hours Time Spent Processing Spam: 56.34 hours Time Spent Processing Ham: 149.90 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127956 89.48 94.47 87.99 2 DCC_CHECK 104356 42.22 77.04 31.76 3 DKIM_SIGNED 103568 61.79 76.46 57.38 4 XM_DK_Pass 99925 60.23 73.77 56.16 5 RELAYCOUNTRY_US 98284 75.76 72.56 76.73 6 XM_B_Unicode 97150 72.86 71.72 73.21 7 DKIM_VALID 96550 58.32 71.28 54.43 8 XM_B_SpammyWords 87992 45.81 64.96 40.06 9 XMListUnsubscribeExists 86247 42.80 63.67 36.53 10 DKIM_VALID_AU 72265 43.60 53.35 40.67 11 BAYES_50 63199 52.08 46.66 53.71 12 XM_B_Unicode3 54152 44.71 39.98 46.13 13 MIME_HTML_ONLY 48221 27.95 35.60 25.66 14 XM_DK_Undo_02 48039 11.75 35.47 4.63 15 XM_B_SpammyWords2 46381 19.90 34.24 15.59 16 LOC_TINY_FONT_1 44161 21.41 32.60 18.05 17 T_KAM_HTML_FONT_INVALID 42142 18.17 31.11 14.28 18 HTML_FONT_LOW_CONTRAST 42113 24.15 31.09 22.07 19 TR_XM_DKIM_Undo 39297 9.39 29.01 3.50 20 DKIM_VALID_EF 37145 22.64 27.42 21.20 21 FVGT_m_MULTI_ODD 34549 20.67 25.51 19.22 22 BAYES_99 33995 8.61 25.10 3.66 23 XMSubLong 32681 23.72 24.13 23.60 24 T_TM2_M_HEADER_IN_MSG 32102 25.53 23.70 26.08 25 DCC_CHECK_NEGATIVE 31035 57.74 22.91 68.20 26 RELAYCOUNTRY_META 29989 8.95 22.14 4.99 27 XM_Body_Dirty_Words 27328 11.15 20.18 8.45 28 UNTRUSTED_Relay 26671 6.77 19.69 2.90 29 TR_DCC_Bayes_99 26517 5.61 19.58 1.42 30 FSL_BULK_SIG 26273 10.03 19.40 7.21 31 BAYES_999 26107 6.76 19.27 3.00 32 BOTNET 24779 5.04 18.29 1.06 33 XM_Multi_Part_URI 21363 12.08 15.77 10.97 34 RCVD_IN_MSPIKE_H2 20800 13.28 15.36 12.66 35 XM_UncommonTLD01 19722 5.47 14.56 2.74 36 LOTS_OF_MONEY 19720 11.29 14.56 10.31 37 RCVD_IN_MSPIKE_WL 19635 19.36 14.50 20.82 38 BOTNET_IPINHOSTNAME 19309 5.62 14.26 3.03 39 TR_XM_SpammyWords4 15715 5.94 11.60 4.25 40 TR_XM_SpammyRelay 15307 3.60 11.30 1.29 41 XM_B_SpammyWords3 15034 5.16 11.10 3.38 42 UNPARSEABLE_RELAY 14452 7.37 10.67 6.38 43 HTML_IMAGE_RATIO_02 14313 5.98 10.57 4.61 44 XM_UB50 14284 4.37 10.55 2.52 45 XMSexyCombo_05 14066 4.48 10.38 2.70 46 TR_XM_UnparsRelay 13653 5.91 10.08 4.66 47 XM_B_Unsub 13518 11.19 9.98 11.55 48 SpammyFromTLD_02 13369 2.52 9.87 0.32 49 HTML_MIME_NO_HTML_TAG 13277 3.83 9.80 2.04 50 XM_Evil_Numbers_Gen 12329 8.44 9.10 8.24 51 T_REMOTE_IMAGE 12160 4.58 8.98 3.26 52 TR_XM_SpammyWords2 11769 2.48 8.69 0.61 53 XM_SendGrid 11612 6.42 8.57 5.78 54 MPART_ALT_DIFF 11357 9.62 8.38 10.00 55 KHOP_HELO_FCRDNS 11122 3.09 8.21 1.56 56 T_HTML_TAG_BALANCE_CENTER 10372 1.85 7.66 0.10 57 BAYES_80 10335 4.07 7.63 3.00 58 BAYES_60 10278 7.01 7.59 6.83 59 HTML_IMAGE_ONLY_08 9997 1.76 7.38 0.07 60 RCVD_IN_MSPIKE_H3 9798 8.52 7.23 8.91 61 XMSubMetaSx_00 9786 3.94 7.22 2.95 62 LotsOfNums_01 9625 7.77 7.11 7.97 63 RCVD_IN_MSPIKE_H4 9509 10.26 7.02 11.23 64 MIME_HTML_MOSTLY 9124 3.24 6.74 2.20 65 RCVD_IN_BL_SPAMCOP_NET 8842 2.02 6.53 0.67 66 XM_B_Phish_Phrases 8824 3.68 6.51 2.83 67 TR_XM_PhishingBody 8324 3.58 6.15 2.81 68 XM_H_Long_From01 8181 4.78 6.04 4.40 69 MIXED_CENTER_CASE 8172 1.39 6.03 0.00 70 MIXED_HREF_CASE 8171 1.39 6.03 0.00 71 BODY_URI_ONLY 8163 1.40 6.03 0.01 72 MIXED_IMG_CASE 8155 1.39 6.02 0.00 73 MIXED_AREA_CASE 8154 1.39 6.02 0.00 74 MIXED_FONT_CASE 7707 1.31 5.69 0.00 75 TooManyTo_001 7686 9.33 5.67 10.42 76 MIXED_CTYPE_CASE 7413 1.27 5.47 0.00 77 DKIM_INVALID 7018 3.46 5.18 2.95 78 URI_NOVOWEL 6261 2.63 4.62 2.03 79 TM2_M_URI_OPT_OUT 6230 4.36 4.60 4.29 80 TR_XM_DK_SendGrid 6177 3.80 4.56 3.57 81 HTML_IMAGE_RATIO_04 6001 13.81 4.43 16.63 82 HTML_FONT_SIZE_LARGE 6001 1.07 4.43 0.06 83 RELAYCOUNTRY_CA 5650 1.56 4.17 0.77 84 XMNumbers 5502 2.92 4.06 2.58 85 RCVD_IN_PSBL 5486 0.99 4.05 0.07 86 HTML_IMAGE_ONLY_32 5456 1.19 4.03 0.34 87 XM_B_Investor 5282 1.80 3.90 1.18 88 BAYES_95 5209 2.30 3.85 1.84 89 XM_SPF_SoftFail 5088 2.17 3.76 1.69 90 EBAY_IMG_NOT_RCVD_EBAY 5013 0.86 3.70 0.00 91 URIBL_DBL_SPAM 5002 0.86 3.69 0.01 92 HOSTED_IMG_DIRECT_MX 4993 0.85 3.69 0.00 93 GOOG_STO_IMG_HTML 4937 0.84 3.64 0.00 94 XMStrtUSub 4934 11.69 3.64 14.10 95 TR_XM_SpammyWords5 4907 1.77 3.62 1.21 96 HTML_IMAGE_RATIO_06 4882 4.67 3.60 5.00 97 URI_GOOG_STO_SPAMMY 4858 0.83 3.59 0.00 98 TR_XM_SPAMCOP 4825 0.96 3.56 0.18 99 MIME_QP_LONG_LINE 4787 4.41 3.53 4.68 100 XM_B_Phish66 4694 2.13 3.47 1.73 101 RCVD_IN_RP_SAFE 4668 5.12 3.45 5.62 102 XM_B_SpammyTLD 4548 1.99 3.36 1.58 103 BAYES_40 4512 5.17 3.33 5.72 104 SpammyFromTLD_01 4496 1.21 3.32 0.57 105 T_XMDrugObfuBody_00 4333 2.66 3.20 2.50 106 MIME_HTML_ONLY_MULTI 4223 7.16 3.12 8.38 107 XM_OfRef6 4200 1.29 3.10 0.75 108 T_XMDrugObfuBody_08 4098 1.61 3.03 1.19 109 XMDiploma_00 3949 4.37 2.92 4.81 110 T_TooManySym_01 3660 4.01 2.70 4.40 111 RCVD_IN_RP_CERTIFIED 3656 4.46 2.70 4.98 112 XM_B_COVIDMETA 3636 1.11 2.68 0.63 113 T_XMDrugObfuBody_14 3600 1.97 2.66 1.77 114 XM_B_Unsub2 3540 1.48 2.61 1.14 115 HTML_FONT_SIZE_HUGE 3487 0.64 2.57 0.06 116 RELAYCOUNTRY_FR 3459 2.15 2.55 2.03 117 TR_XM_PHPDW 3400 0.78 2.51 0.27 118 JH_SPAMMY_HEADERS 3366 0.57 2.49 0.00 119 XM_DIRTYINTL 3348 0.73 2.47 0.21 120 BAYES_20 3318 4.57 2.45 5.20 121 HTML_IMAGE_RATIO_08 3309 1.91 2.44 1.75 122 ANY_BOUNCE_MESSAGE 3298 4.51 2.43 5.13 123 BOUNCE_MESSAGE 3298 4.51 2.43 5.13 124 TR_XM_PHPForged 3287 0.73 2.43 0.22 125 TR_XM_SB_Phish 3278 2.09 2.42 1.99 126 XM_CamelCaseFrm001 3273 1.61 2.42 1.37 127 TM2_M_VERY_LONG_WORD 3218 1.18 2.38 0.82 128 RCVD_IN_IADB_LISTED 3137 3.58 2.32 3.96 129 XMSubPhish11 3129 2.04 2.31 1.96 130 SUBJ_ALL_CAPS 3110 1.51 2.30 1.27 131 BOTNET_NORDNS 3099 0.54 2.29 0.01 132 BAYES_00 3076 13.36 2.27 16.70 133 ALL_TRUSTED 3036 15.45 2.24 19.41 134 XM_UB60 2929 0.54 2.16 0.05 135 XMNoVowels 2917 1.72 2.15 1.59 136 XM_DK_Undo_01 2861 1.57 2.11 1.41 137 RCVD_IN_IADB_SPF 2813 3.15 2.08 3.48 138 MAILING_LIST_MULTI 2774 2.25 2.05 2.31 139 XM_B_SpammyWords4 2706 0.79 2.00 0.43 140 XMBrknScrpt_02 2684 1.01 1.98 0.72 141 RCVD_IN_IADB_DK 2617 2.79 1.93 3.04 142 RCVD_IN_IADB_SENDERID 2558 2.85 1.89 3.14 143 XM_URI_RBL 2546 0.50 1.88 0.08 144 TR_XM_NoHeaderRelay 2539 0.56 1.87 0.16 145 XM_DrugUnitList 2536 0.43 1.87 0.00 146 RELAYCOUNTRY_AZ 2497 0.43 1.84 0.00 147 XMSexyCombo_01 2468 0.79 1.82 0.48 148 TR_XM_COVIDMETA1 2333 0.54 1.72 0.19 149 RCVD_IN_RP_RNBL 2314 0.45 1.71 0.07 150 TR_XM_FormFill2 2306 0.56 1.70 0.22 151 DATE_IN_PAST_03_06 2297 0.52 1.70 0.17 152 FROM_EXCESS_BASE64 2294 2.26 1.69 2.42 153 XMStockSpam_06 2291 1.17 1.69 1.01 154 XM_H_PHPOS 2289 0.55 1.69 0.21 155 XMBody_17 2281 0.60 1.68 0.27 156 XM_UB80 2238 0.40 1.65 0.02 157 T_XMHurry_00 2212 1.35 1.63 1.26 158 XMHTML_After_End 2187 0.96 1.61 0.77 159 XM_H_PHPMailer 2170 0.72 1.60 0.45 160 XMGenDplmaNmb 2129 0.95 1.57 0.76 161 DKIM_ADSP_CUSTOM_MED 2120 0.99 1.57 0.82 162 TR_LOTS_OF_MONEY3 2110 0.61 1.56 0.33 163 URIBL_BLACK 2097 0.37 1.55 0.01 164 URI_HEX 2088 1.16 1.54 1.05 165 XM_UB99 2078 0.35 1.53 0.00 166 WANT_TO_ORDER 2073 0.36 1.53 0.00 167 YOUR_DELIVERY_ADDRESS 2073 0.35 1.53 0.00 168 RELAYCOUNTRY_IN 2035 0.41 1.50 0.08 169 USER_IN_DEF_DKIM_WL 2031 7.38 1.50 9.14 170 XMBounce_01 1984 1.79 1.46 1.88 171 TR_XM_Spammywords 1984 0.58 1.46 0.31 172 XM_S_SpammyWords 1984 0.58 1.46 0.31 173 DIET_1 1978 0.57 1.46 0.30 174 TR_Symld_Words 1951 1.40 1.44 1.39 175 XM_H_Undi_Recip 1949 0.45 1.44 0.15 176 DATE_IN_PAST_06_12 1945 0.35 1.44 0.03 177 NML_ADSP_CUSTOM_MED 1935 0.74 1.43 0.53 178 RELAYCOUNTRY_DE 1929 0.60 1.42 0.35 179 HTTPS_HTTP_MISMATCH 1880 0.80 1.39 0.62 180 FORGED_GMAIL_RCVD 1874 0.67 1.38 0.45 181 TR_XM_COVIDMETA4 1856 0.49 1.37 0.22 182 XM_Body_Dirty_Words_01 1837 0.42 1.36 0.13 183 XMMoneyMeta_00 1835 0.62 1.35 0.40 184 MONEY_NOHTML 1833 0.39 1.35 0.10 185 T_FILL_THIS_FORM_SHORT 1831 0.85 1.35 0.70 186 RELAYCOUNTRY_AU 1829 0.48 1.35 0.21 187 URI_TRY_3LD 1809 1.01 1.34 0.91 188 RELAYCOUNTRY_NL 1759 0.44 1.30 0.18 189 TR_XM_INV_DKIM 1738 0.37 1.28 0.10 190 RCVD_IN_MSPIKE_BL 1654 0.37 1.22 0.11 191 XMPhish30 1646 0.62 1.22 0.44 192 URI_LONG_REPEAT 1613 0.28 1.19 0.00 193 RELAYCOUNTRY_GB 1567 0.88 1.16 0.80 194 TR_XM_DK_Bayes 1562 5.10 1.15 6.29 195 TM2_M_A_HREF_HREF 1560 0.43 1.15 0.21 196 RCVD_IN_IADB_VOUCHED 1555 2.05 1.15 2.33 197 PDS_OTHER_BAD_TLD 1539 0.39 1.14 0.17 198 TR_XM_DK_Bayes1 1533 4.94 1.13 6.08 199 XM_PDF 1469 3.49 1.08 4.22 200 BAYES_05 1455 2.81 1.07 3.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 396938 89.48 94.47 87.99 2 RELAYCOUNTRY_US 346138 75.76 72.56 76.73 3 XM_B_Unicode 330264 72.86 71.72 73.21 4 DCC_CHECK_NEGATIVE 307684 57.74 22.91 68.20 5 DKIM_SIGNED 258878 61.79 76.46 57.38 6 XM_DK_Pass 253367 60.23 73.77 56.16 7 DKIM_VALID 245576 58.32 71.28 54.43 8 BAYES_50 242293 52.08 46.66 53.71 9 XM_B_Unicode3 208116 44.71 39.98 46.13 10 DKIM_VALID_AU 183493 43.60 53.35 40.67 11 XM_B_SpammyWords 180712 45.81 64.96 40.06 12 XMListUnsubscribeExists 164818 42.80 63.67 36.53 13 DCC_CHECK 143292 42.22 77.04 31.76 14 T_TM2_M_HEADER_IN_MSG 117648 25.53 23.70 26.08 15 MIME_HTML_ONLY 115749 27.95 35.60 25.66 16 XMSubLong 106452 23.72 24.13 23.60 17 HTML_FONT_LOW_CONTRAST 99547 24.15 31.09 22.07 18 DKIM_VALID_EF 95642 22.64 27.42 21.20 19 RCVD_IN_MSPIKE_WL 93907 19.36 14.50 20.82 20 ALL_TRUSTED 87573 15.45 2.24 19.41 21 FVGT_m_MULTI_ODD 86700 20.67 25.51 19.22 22 LOC_TINY_FONT_1 81417 21.41 32.60 18.05 23 BAYES_00 75321 13.36 2.27 16.70 24 HTML_IMAGE_RATIO_04 75017 13.81 4.43 16.63 25 XM_H_Trusted_IP 70750 12.06 0.00 15.68 26 XM_B_SpammyWords2 70348 19.90 34.24 15.59 27 HTML_FONT_FACE_BAD 67988 11.73 0.62 15.07 28 T_KAM_HTML_FONT_INVALID 64422 18.17 31.11 14.28 29 XMStrtUSub 63626 11.69 3.64 14.10 30 RCVD_IN_MSPIKE_H2 57113 13.28 15.36 12.66 31 XM_B_Unsub 52107 11.19 9.98 11.55 32 RCVD_IN_MSPIKE_H4 50683 10.26 7.02 11.23 33 XM_Multi_Part_URI 49490 12.08 15.77 10.97 34 TooManyTo_001 47023 9.33 5.67 10.42 35 LOTS_OF_MONEY 46505 11.29 14.56 10.31 36 MPART_ALT_DIFF 45092 9.62 8.38 10.00 37 USER_IN_DEF_DKIM_WL 41247 7.38 1.50 9.14 38 RCVD_IN_MSPIKE_H3 40202 8.52 7.23 8.91 39 XM_Body_Dirty_Words 38104 11.15 20.18 8.45 40 MIME_HTML_ONLY_MULTI 37790 7.16 3.12 8.38 41 XM_Evil_Numbers_Gen 37189 8.44 9.10 8.24 42 LotsOfNums_01 35936 7.77 7.11 7.97 43 FSL_BULK_SIG 32547 10.03 19.40 7.21 44 BAYES_60 30833 7.01 7.59 6.83 45 UNPARSEABLE_RELAY 28769 7.37 10.67 6.38 46 TR_XM_DK_Bayes 28383 5.10 1.15 6.29 47 TR_XM_DK_Bayes1 27435 4.94 1.13 6.08 48 XM_DKIMWhitelistDomains 26737 4.56 0.02 5.93 49 XM_SendGrid 26063 6.42 8.57 5.78 50 BAYES_40 25813 5.17 3.33 5.72 51 RCVD_IN_RP_SAFE 25356 5.12 3.45 5.62 52 BAYES_20 23475 4.57 2.45 5.20 53 ANY_BOUNCE_MESSAGE 23140 4.51 2.43 5.13 54 BOUNCE_MESSAGE 23139 4.51 2.43 5.13 55 TR_XM_DK_Bayes2 22924 4.13 0.95 5.08 56 XMSubNoVowel 22634 4.01 0.64 5.02 57 HTML_IMAGE_RATIO_06 22536 4.67 3.60 5.00 58 RELAYCOUNTRY_META 22522 8.95 22.14 4.99 59 RCVD_IN_RP_CERTIFIED 22481 4.46 2.70 4.98 60 XMDiploma_00 21686 4.37 2.92 4.81 61 MIME_QP_LONG_LINE 21093 4.41 3.53 4.68 62 TR_XM_UnparsRelay 21017 5.91 10.08 4.66 63 XM_DK_Undo_02 20895 11.75 35.47 4.63 64 HTML_IMAGE_RATIO_02 20794 5.98 10.57 4.61 65 T_TooManySym_01 19845 4.01 2.70 4.40 66 XM_H_Long_From01 19838 4.78 6.04 4.40 67 TM2_M_URI_OPT_OUT 19336 4.36 4.60 4.29 68 TR_XM_SpammyWords4 19157 5.94 11.60 4.25 69 XM_PDF 19019 3.49 1.08 4.22 70 RCVD_IN_IADB_LISTED 17873 3.58 2.32 3.96 71 BAYES_99 16508 8.61 25.10 3.66 72 TR_XM_DK_SendGrid 16109 3.80 4.56 3.57 73 TR_XM_DKIM_Undo 15771 9.39 29.01 3.50 74 RCVD_IN_IADB_SPF 15691 3.15 2.08 3.48 75 XM_B_SpammyWords3 15248 5.16 11.10 3.38 76 BAYES_05 15046 2.81 1.07 3.34 77 T_REMOTE_IMAGE 14690 4.58 8.98 3.26 78 RCVD_IN_IADB_SENDERID 14181 2.85 1.89 3.14 79 RCVD_IN_IADB_DK 13724 2.79 1.93 3.04 80 BOTNET_IPINHOSTNAME 13674 5.62 14.26 3.03 81 BAYES_80 13538 4.07 7.63 3.00 82 BAYES_999 13527 6.76 19.27 3.00 83 DKIM_INVALID 13302 3.46 5.18 2.95 84 XMSubMetaSx_00 13298 3.94 7.22 2.95 85 UNTRUSTED_Relay 13065 6.77 19.69 2.90 86 XM_B_Phish_Phrases 12755 3.68 6.51 2.83 87 TR_XM_PhishingBody 12676 3.58 6.15 2.81 88 XM_UncommonTLD01 12339 5.47 14.56 2.74 89 XMSexyCombo_05 12198 4.48 10.38 2.70 90 XMNumbers 11617 2.92 4.06 2.58 91 XM_UB50 11361 4.37 10.55 2.52 92 T_XMDrugObfuBody_00 11281 2.66 3.20 2.50 93 FROM_EXCESS_BASE64 10936 2.26 1.69 2.42 94 RCVD_IN_IADB_VOUCHED 10491 2.05 1.15 2.33 95 MAILING_LIST_MULTI 10433 2.25 2.05 2.31 96 MIME_HTML_MOSTLY 9909 3.24 6.74 2.20 97 T_TooManySym_02 9591 1.79 0.67 2.13 98 XMSubGarbage 9535 1.63 0.02 2.11 99 XMSubLongNoVowel 9472 1.64 0.12 2.10 100 HTML_MIME_NO_HTML_TAG 9192 3.83 9.80 2.04 101 RELAYCOUNTRY_FR 9159 2.15 2.55 2.03 102 URI_NOVOWEL 9153 2.63 4.62 2.03 103 TR_XM_SB_Phish 8985 2.09 2.42 1.99 104 TooManyTo_002 8863 1.70 0.82 1.96 105 XMSubPhish11 8841 2.04 2.31 1.96 106 XMBounce_01 8487 1.79 1.46 1.88 107 BAYES_95 8297 2.30 3.85 1.84 108 T_XMDrugObfuBody_14 7963 1.97 2.66 1.77 109 HTML_IMAGE_RATIO_08 7904 1.91 2.44 1.75 110 XM_B_Phish66 7788 2.13 3.47 1.73 111 XM_SPF_SoftFail 7640 2.17 3.76 1.69 112 IN_HORDE_ADDRESS_BOOK 7411 1.28 0.09 1.64 113 INVALID_MSGID 7207 1.27 0.18 1.60 114 HELO_NODOT 7163 1.38 0.70 1.59 115 HELO_NO_DOMAIN 7162 1.38 0.70 1.59 116 XMNoVowels 7153 1.72 2.15 1.59 117 XM_B_SpammyTLD 7132 1.99 3.36 1.58 118 KHOP_HELO_FCRDNS 7019 3.09 8.21 1.56 119 RCVD_IN_IADB_OPTIN 6571 1.32 0.86 1.46 120 TR_DCC_Bayes_99 6384 5.61 19.58 1.42 121 XM_DK_Undo_01 6371 1.57 2.11 1.41 122 MSGID_NOFQDN1 6290 1.09 0.07 1.39 123 TR_Symld_Words 6288 1.40 1.44 1.39 124 TVD_RCVD_IP 6194 1.11 0.23 1.37 125 XM_CamelCaseFrm001 6186 1.61 2.42 1.37 126 TO_MALFORMED 6060 1.04 0.02 1.34 127 TooManyTo_003 5874 1.15 0.63 1.30 128 TR_XM_SpammyRelay 5818 3.60 11.30 1.29 129 SUBJ_ALL_CAPS 5733 1.51 2.30 1.27 130 T_XMHurry_00 5694 1.35 1.63 1.26 131 TR_XM_SpammyWords5 5471 1.77 3.62 1.21 132 T_XMDrugObfuBody_08 5350 1.61 3.03 1.19 133 XM_B_Investor 5305 1.80 3.90 1.18 134 XM_E_Blogspot 5145 0.90 0.08 1.14 135 XM_B_Unsub2 5133 1.48 2.61 1.14 136 TVD_SPACE_RATIO 4850 0.85 0.11 1.08 137 BOTNET 4791 5.04 18.29 1.06 138 URI_HEX 4725 1.16 1.54 1.05 139 XMCapTrack 4656 0.93 0.61 1.03 140 XM_GoogleGroups 4652 0.99 0.86 1.03 141 XMStockSpam_06 4560 1.17 1.69 1.01 142 XMGappySubj_01 4485 0.81 0.19 0.99 143 URI_TRY_3LD 4102 1.01 1.34 0.91 144 TooManyTo_004 4057 0.81 0.50 0.90 145 TR_MetaPhish_Combo_01 4030 0.91 0.96 0.89 146 XM_H_Long_From02 3932 0.90 0.99 0.87 147 TM2_M_VERY_LONG_WORD 3702 1.18 2.38 0.82 148 DKIM_ADSP_CUSTOM_MED 3679 0.99 1.57 0.82 149 RELAYCOUNTRY_GB 3600 0.88 1.16 0.80 150 XMBSHREFv2 3526 0.67 0.29 0.78 151 RELAYCOUNTRY_CA 3492 1.56 4.17 0.77 152 XMHTML_After_End 3453 0.96 1.61 0.77 153 XMGenDplmaNmb 3436 0.95 1.57 0.76 154 XM_OfRef6 3373 1.29 3.10 0.75 155 HELO_MISC_IP 3280 0.56 0.02 0.73 156 IN_ZIMBRA_NJ_WHITELIST 3265 0.56 0.01 0.72 157 XMBrknScrpt_02 3242 1.01 1.98 0.72 158 TooManyTo_005 3195 0.64 0.41 0.71 159 T_FILL_THIS_FORM_SHORT 3164 0.85 1.35 0.70 160 RCVD_IN_BL_SPAMCOP_NET 3035 2.02 6.53 0.67 161 RCVD_IN_MSPIKE_H5 3022 0.57 0.24 0.67 162 SHORTENED_URL_HREF 2951 0.52 0.07 0.65 163 HTML_IMAGE_ONLY_20 2909 0.67 0.74 0.64 164 XM_B_COVIDMETA 2852 1.11 2.68 0.63 165 T_TooManySym_03 2792 0.53 0.24 0.62 166 HTTPS_HTTP_MISMATCH 2786 0.80 1.39 0.62 167 TR_XM_SpammyWords2 2770 2.48 8.69 0.61 168 XMBody_95 2697 0.50 0.16 0.60 169 SpammyFromTLD_01 2581 1.21 3.32 0.57 170 MPART_ALT_DIFF_COUNT 2406 0.56 0.63 0.53 171 NML_ADSP_CUSTOM_MED 2390 0.74 1.43 0.53 172 RCVD_IN_SORBS_DUL 2384 0.47 0.26 0.53 173 XMLngstWrd_00 2331 0.49 0.38 0.52 174 XM_ProductURIs 2320 0.54 0.61 0.51 175 FROM_GOV_SPOOF 2316 0.44 0.20 0.51 176 T_OBFU_PDF_ATTACH 2266 0.43 0.17 0.50 177 XM_B_COPY_HTML 2218 0.50 0.53 0.49 178 XM_ShortIntro_01 2172 0.48 0.48 0.48 179 XMBdyGiftCard01 2168 0.53 0.69 0.48 180 SHORT_HELO_AND_INLINE_IMAGE 2155 0.40 0.14 0.48 181 XMSexyCombo_01 2145 0.79 1.82 0.48 182 XMLngstWrd_01 2105 0.44 0.34 0.47 183 XM_USANA_RCVD 2076 0.35 0.00 0.46 184 FORGED_GMAIL_RCVD 2037 0.67 1.38 0.45 185 XM_H_PHPMailer 2036 0.72 1.60 0.45 186 FROM_GOV_DKIM_AU 2017 0.48 0.58 0.45 187 XMPhish30 1981 0.62 1.22 0.44 188 XM_B_SpammyWords4 1926 0.79 2.00 0.43 189 MSGID_FROM_MTA_HEADER 1852 0.38 0.29 0.41 190 XMMoneyMeta_00 1802 0.62 1.35 0.40 191 MISSING_HEADERS 1769 0.49 0.81 0.39 192 T_MANY_PILL_PRICE 1762 0.30 0.01 0.39 193 XMLngstWrd_02 1759 0.36 0.28 0.39 194 XMPhish14 1733 0.48 0.78 0.38 195 XMOemUri 1718 0.37 0.32 0.38 196 NUMERIC_HTTP_ADDR 1714 0.44 0.66 0.38 197 MY_SERVERS_FOUND 1711 0.31 0.09 0.38 198 HTML_TAG_BALANCE_BODY 1673 0.46 0.76 0.37 199 TR_MSPIKEBAYES00 1667 0.30 0.07 0.37 200 XMSlimDrugH 1603 0.49 0.94 0.36 ----------------------------------------------------------------------