Email: 473768 Autolearn: 0 AvgScore: 2.63 AvgScanTime: 1.37 sec Spam: 130026 Autolearn: 0 AvgScore: 13.80 AvgScanTime: 1.56 sec Ham: 343742 Autolearn: 0 AvgScore: -1.59 AvgScanTime: 1.30 sec Time Spent Running SA: 180.37 hours Time Spent Processing Spam: 56.22 hours Time Spent Processing Ham: 124.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125875 89.75 96.81 87.07 2 DKIM_SIGNED 112496 74.69 86.52 70.22 3 XM_DK_Pass 109434 72.68 84.16 68.33 4 DKIM_VALID 105810 70.37 81.38 66.21 5 RELAYCOUNTRY_US 104734 79.79 80.55 79.51 6 XM_B_Unicode 97362 70.03 74.88 68.19 7 DCC_CHECK 96672 45.51 74.35 34.60 8 XMListUnsubscribeExists 93298 53.61 71.75 46.75 9 XM_B_SpammyWords 89077 51.33 68.51 44.83 10 DKIM_VALID_AU 77078 52.17 59.28 49.48 11 XM_DK_Undo_02 59376 17.73 45.66 7.16 12 XM_B_Unicode3 55581 41.92 42.75 41.60 13 BAYES_50 53459 49.79 41.11 53.07 14 LOC_TINY_FONT_1 51358 27.47 39.50 22.92 15 TR_XM_DKIM_Undo 48034 13.87 36.94 5.14 16 XM_B_SpammyWords2 46050 23.09 35.42 18.43 17 DKIM_VALID_EF 44924 27.90 34.55 25.38 18 HTML_FONT_LOW_CONTRAST 44734 27.81 34.40 25.31 19 BAYES_99 43115 13.62 33.16 6.23 20 T_KAM_HTML_FONT_INVALID 38664 21.37 29.74 18.21 21 MIME_HTML_ONLY 38454 23.31 29.57 20.95 22 FVGT_m_MULTI_ODD 35857 24.57 27.58 23.43 23 BAYES_999 34339 11.02 26.41 5.20 24 DCC_CHECK_NEGATIVE 33300 54.45 25.61 65.36 25 RCVD_IN_MSPIKE_H2 31650 20.58 24.34 19.16 26 TR_DCC_Bayes_99 31282 8.10 24.06 2.06 27 XM_Body_Dirty_Words 30749 16.14 23.65 13.30 28 XMSubLong 29768 21.54 22.89 21.02 29 RCVD_IN_MSPIKE_WL 27482 25.60 21.14 27.29 30 T_TM2_M_HEADER_IN_MSG 26608 27.23 20.46 29.79 31 RELAYCOUNTRY_META 24317 7.50 18.70 3.26 32 XM_UncommonTLD01 21701 7.07 16.69 3.43 33 XM_Multi_Part_URI 20600 12.35 15.84 11.03 34 XM_B_Unsub 19698 12.91 15.15 12.07 35 LOTS_OF_MONEY 17865 9.69 13.74 8.16 36 RCVD_IN_MSPIKE_H3 17399 14.45 13.38 14.85 37 BOTNET 17382 4.80 13.37 1.56 38 TR_XM_SpammyRelay 16564 4.52 12.74 1.41 39 TR_XM_SpammyWords2 15583 4.00 11.98 0.99 40 BOTNET_IPINHOSTNAME 15577 6.46 11.98 4.37 41 UNPARSEABLE_RELAY 15333 8.59 11.79 7.38 42 TR_XM_SpammyWords4 15257 6.66 11.73 4.75 43 TR_XM_UnparsRelay 15050 7.38 11.57 5.80 44 XM_B_SpammyWords3 14750 6.82 11.34 5.11 45 FSL_BULK_SIG 14547 5.95 11.19 3.97 46 MPART_ALT_DIFF 14533 8.05 11.18 6.87 47 UNTRUSTED_Relay 14408 3.89 11.08 1.17 48 TooManyTo_001 13235 10.33 10.18 10.38 49 XMSexyCombo_05 11869 4.78 9.13 3.14 50 XM_Evil_Numbers_Gen 11777 7.89 9.06 7.45 51 XMSubMetaSx_00 10974 5.63 8.44 4.56 52 SpammyFromTLD_02 10789 2.56 8.30 0.39 53 RCVD_IN_BL_SPAMCOP_NET 10434 2.80 8.02 0.82 54 MIME_HTML_MOSTLY 10401 4.14 8.00 2.67 55 HTML_IMAGE_RATIO_02 10056 6.42 7.73 5.93 56 BAYES_80 9930 5.10 7.64 4.14 57 XM_SendGrid 9583 6.02 7.37 5.50 58 LotsOfNums_01 9365 8.63 7.20 9.17 59 RCVD_IN_MSPIKE_H4 9210 9.59 7.08 10.54 60 URI_NOVOWEL 8860 4.13 6.81 3.11 61 BAYES_60 8826 8.56 6.79 9.24 62 TR_XM_MaxUnsub 8625 2.57 6.63 1.03 63 SpammyFromTLD_01 8261 2.26 6.35 0.70 64 TR_XM_PhishingBody 8183 4.19 6.29 3.39 65 XM_B_SpammyTLD 7883 3.19 6.06 2.10 66 XM_B_Phish_Phrases 7565 3.99 5.82 3.30 67 MIME_QP_LONG_LINE 7273 7.38 5.59 8.06 68 TM2_M_URI_OPT_OUT 7091 5.88 5.45 6.04 69 HTML_MIME_NO_HTML_TAG 7067 3.11 5.44 2.22 70 RCVD_IN_MSPIKE_BL 7055 2.31 5.43 1.13 71 TR_XM_MSPIKECOMBO 7045 2.31 5.42 1.13 72 DKIM_INVALID 6686 4.32 5.14 4.01 73 XM_UB50 6666 1.93 5.13 0.73 74 XM_H_Long_From01 6317 5.16 4.86 5.27 75 RELAYCOUNTRY_CA 6138 1.85 4.72 0.76 76 JH_SPAMMY_HEADERS 5602 1.18 4.31 0.00 77 HTML_IMAGE_RATIO_04 5590 6.06 4.30 6.73 78 TR_XM_SPAMCOP 5504 1.39 4.23 0.31 79 MIME_HTML_ONLY_MULTI 5372 4.42 4.13 4.53 80 TR_XM_DK_SendGrid 5341 3.63 4.11 3.45 81 RELAYCOUNTRY_FR 5340 1.27 4.11 0.20 82 FROM_SUSPICIOUS_NTLD 5080 1.10 3.91 0.04 83 XM_B_Investor 5071 2.43 3.90 1.88 84 PDS_OTHER_BAD_TLD 4983 1.17 3.83 0.16 85 FROM_SUSPICIOUS_NTLD_FP 4964 1.07 3.82 0.04 86 T_REMOTE_IMAGE 4934 3.44 3.79 3.31 87 XM_SPF_SoftFail 4847 2.54 3.73 2.09 88 XMSexyCombo_01 4826 2.44 3.71 1.96 89 BAYES_95 4810 2.86 3.70 2.55 90 KHOP_HELO_FCRDNS 4775 2.19 3.67 1.62 91 XM_OfRef6 4709 1.65 3.62 0.90 92 XM_B_Phish66 4586 2.44 3.53 2.02 93 T_XMDrugObfuBody_08 4452 2.01 3.42 1.47 94 TR_XM_SpammyWords5 4420 1.82 3.40 1.22 95 HTML_IMAGE_RATIO_06 4388 3.73 3.37 3.86 96 RCVD_IN_VALIDITY_SAFE 4322 4.40 3.32 4.81 97 ALL_TRUSTED 4225 14.15 3.25 18.27 98 T_XMDrugObfuBody_14 4219 2.24 3.24 1.85 99 XMStrtUSub 4131 3.70 3.18 3.90 100 TM2_M_VERY_LONG_WORD 4100 1.88 3.15 1.40 101 HTML_IMAGE_ONLY_08 4051 0.91 3.12 0.08 102 URIBL_DBL_SPAM 4002 0.85 3.08 0.01 103 XM_H_TOP 3888 0.82 2.99 0.00 104 TR_XM_SpammyWords3 3887 1.27 2.99 0.62 105 XMNumbers 3850 3.41 2.96 3.58 106 XM_DIRTYINTL 3750 1.00 2.88 0.29 107 RCVD_IN_VALIDITY_CERTIFIED 3599 3.79 2.77 4.17 108 RCVD_IN_IADB_LISTED 3558 4.92 2.74 5.75 109 XM_DK_Undo_01 3486 1.96 2.68 1.69 110 RCVD_IN_MSPIKE_L3 3457 1.14 2.66 0.57 111 BAYES_40 3236 4.42 2.49 5.16 112 XMDiploma_00 3206 1.84 2.47 1.60 113 XM_B_COVIDMETA 3187 1.04 2.45 0.50 114 XMBody_17 3183 1.02 2.45 0.47 115 SUBJ_ALL_CAPS 3143 2.01 2.42 1.86 116 BAYES_20 3119 3.76 2.40 4.27 117 DATE_IN_PAST_03_06 3014 0.78 2.32 0.19 118 T_TooManySym_01 2987 5.12 2.30 6.18 119 RCVD_IN_IADB_SPF 2969 4.30 2.28 5.06 120 XM_CamelCaseFrm001 2957 1.80 2.27 1.62 121 BOTNET_NORDNS 2886 0.62 2.22 0.02 122 T_FILL_THIS_FORM_SHORT 2875 1.13 2.21 0.72 123 T_XMDrugObfuBody_00 2844 1.21 2.19 0.85 124 TR_XM_SB_Phish 2800 1.99 2.15 1.93 125 XMSubPhish11 2729 1.96 2.10 1.90 126 RCVD_IN_IADB_DK 2724 3.76 2.09 4.39 127 RCVD_IN_IADB_SENDERID 2711 3.86 2.08 4.53 128 HTML_IMAGE_RATIO_08 2710 2.61 2.08 2.81 129 USER_IN_DEF_DKIM_WL 2547 8.90 1.96 11.52 130 XM_B_SpammyWords4 2540 0.83 1.95 0.40 131 XM_Body_Dirty_Words_01 2521 0.75 1.94 0.30 132 FROM_EXCESS_BASE64 2444 2.40 1.88 2.59 133 URI_HEX 2389 1.59 1.84 1.49 134 BAYES_00 2341 9.83 1.80 12.87 135 HTML_TAG_BALANCE_CENTER 2316 0.54 1.78 0.07 136 MAILING_LIST_MULTI 2269 2.39 1.75 2.64 137 XM_B_Unsub2 2255 1.43 1.73 1.32 138 XM_TLDProd2 2171 0.56 1.67 0.14 139 TR_XM_PHPDW 2151 0.65 1.65 0.27 140 XM_UB60 2145 0.51 1.65 0.08 141 TR_XM_INV_DKIM 2094 0.84 1.61 0.55 142 XM_URI_RBL 2071 0.52 1.59 0.12 143 RCVD_IN_MSPIKE_L5 2060 0.46 1.58 0.04 144 TR_Symld_Words 2051 1.67 1.58 1.70 145 DKIM_ADSP_NXDOMAIN 2037 0.69 1.57 0.36 146 URIBL_BLACK 2010 0.46 1.55 0.04 147 XMSpecificSbj 2009 0.42 1.55 0.00 148 TR_XM_PHPForged 1996 0.59 1.54 0.23 149 TR_XM_FormFill2 1961 0.58 1.51 0.23 150 XM_UB99 1951 0.41 1.50 0.00 151 XM_H_PHPOS 1948 0.57 1.50 0.22 152 SHORT_URI_2 1947 1.58 1.50 1.61 153 RCVD_IN_IADB_VOUCHED 1932 2.89 1.49 3.43 154 XMStockSpam_06 1919 1.28 1.48 1.21 155 MIXED_HREF_CASE 1917 0.41 1.47 0.00 156 MIXED_CENTER_CASE 1916 0.40 1.47 0.00 157 TR_XM_COVIDMETA1 1913 0.62 1.47 0.30 158 MIXED_IMG_CASE 1907 0.40 1.47 0.00 159 MIXED_AREA_CASE 1901 0.40 1.46 0.00 160 MIXED_FONT_CASE 1900 0.40 1.46 0.00 161 TR_XM_FormFill 1891 0.41 1.45 0.02 162 HTML_FONT_SIZE_LARGE 1878 0.47 1.44 0.10 163 URI_NO_WWW_BIZ_CGI 1854 0.40 1.43 0.01 164 XMSexyCombo_02 1822 0.51 1.40 0.17 165 RELAYCOUNTRY_AU 1820 0.59 1.40 0.28 166 TR_XM_COVIDMETA4 1799 0.57 1.38 0.26 167 HTML_SHORT_LINK_IMG_1 1788 0.39 1.38 0.02 168 BODY_URI_ONLY 1776 0.38 1.37 0.01 169 HTML_TITLE_SUBJ_DIFF 1751 0.42 1.35 0.07 170 XM_UB80 1727 0.38 1.33 0.02 171 HDRS_LCASE_IMGONLY 1723 0.38 1.33 0.02 172 XMGenDplmaNmb 1713 1.13 1.32 1.05 173 XMPhish30 1708 0.96 1.31 0.83 174 TR_XM_BayesRelay 1674 0.36 1.29 0.00 175 TR_Mismatch_TLD_01 1657 0.54 1.27 0.26 176 GOOG_STO_IMG_HTML 1633 0.34 1.26 0.00 177 XM_UB999 1631 0.35 1.25 0.00 178 T_XMHurry_00 1580 0.84 1.22 0.69 179 HDRS_MISSP 1538 0.36 1.18 0.05 180 RELAYCOUNTRY_IN 1535 0.39 1.18 0.09 181 XM_GoogleGroups 1530 1.24 1.18 1.26 182 RCVD_IN_MSPIKE_L4 1528 0.70 1.18 0.52 183 TR_LOTS_OF_MONEY3 1524 0.85 1.17 0.72 184 TR_Caps_n_Bayes_99 1461 0.46 1.12 0.21 185 XMBdyGiftCard01 1426 0.76 1.10 0.63 186 XMMoneyMeta_00 1402 0.59 1.08 0.41 187 TR_XM_NoHeaderRelay 1370 0.39 1.05 0.15 188 HK_RANDOM_REPLYTO 1368 0.35 1.05 0.08 189 HTML_TAG_BALANCE_BODY 1345 0.71 1.03 0.59 190 T_Symld_Words_02 1324 0.69 1.02 0.56 191 RELAYCOUNTRY_DE 1319 0.46 1.01 0.25 192 XMBrknScrpt_02 1296 0.74 1.00 0.64 193 RCVD_IN_VALIDITY_RPBL 1288 0.28 0.99 0.01 194 LongTLD 1286 0.39 0.99 0.16 195 TR_MetaPhish_Combo_01 1267 0.75 0.97 0.66 196 XM_ProductURIs 1259 0.65 0.97 0.53 197 XM_OfRef7 1229 0.34 0.95 0.12 198 URI_TRY_3LD 1223 0.72 0.94 0.63 199 TR_Mismatch_TLD_02 1211 0.31 0.93 0.07 200 MIME_CHARSET_FARAWAY 1195 0.36 0.92 0.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 299311 89.75 96.81 87.07 2 RELAYCOUNTRY_US 273293 79.79 80.55 79.51 3 DKIM_SIGNED 241381 74.69 86.52 70.22 4 XM_DK_Pass 234887 72.68 84.16 68.33 5 XM_B_Unicode 234397 70.03 74.88 68.19 6 DKIM_VALID 227590 70.37 81.38 66.21 7 DCC_CHECK_NEGATIVE 224664 54.45 25.61 65.36 8 BAYES_50 182428 49.79 41.11 53.07 9 DKIM_VALID_AU 170073 52.17 59.28 49.48 10 XMListUnsubscribeExists 160701 53.61 71.75 46.75 11 XM_B_SpammyWords 154104 51.33 68.51 44.83 12 XM_B_Unicode3 143002 41.92 42.75 41.60 13 DCC_CHECK 118943 45.51 74.35 34.60 14 T_TM2_M_HEADER_IN_MSG 102409 27.23 20.46 29.79 15 RCVD_IN_MSPIKE_WL 93823 25.60 21.14 27.29 16 DKIM_VALID_EF 87238 27.90 34.55 25.38 17 HTML_FONT_LOW_CONTRAST 87008 27.81 34.40 25.31 18 FVGT_m_MULTI_ODD 80540 24.57 27.58 23.43 19 LOC_TINY_FONT_1 78770 27.47 39.50 22.92 20 XMSubLong 72270 21.54 22.89 21.02 21 MIME_HTML_ONLY 72005 23.31 29.57 20.95 22 RCVD_IN_MSPIKE_H2 65853 20.58 24.34 19.16 23 XM_B_SpammyWords2 63359 23.09 35.42 18.43 24 ALL_TRUSTED 62797 14.15 3.25 18.27 25 T_KAM_HTML_FONT_INVALID 62595 21.37 29.74 18.21 26 RCVD_IN_MSPIKE_H3 51057 14.45 13.38 14.85 27 XM_Body_Dirty_Words 45712 16.14 23.65 13.30 28 BAYES_00 44229 9.83 1.80 12.87 29 XM_B_Unsub 41476 12.91 15.15 12.07 30 USER_IN_DEF_DKIM_WL 39600 8.90 1.96 11.52 31 XM_Multi_Part_URI 37904 12.35 15.84 11.03 32 RCVD_IN_MSPIKE_H4 36217 9.59 7.08 10.54 33 TooManyTo_001 35690 10.33 10.18 10.38 34 BAYES_60 31747 8.56 6.79 9.24 35 LotsOfNums_01 31516 8.63 7.20 9.17 36 LOTS_OF_MONEY 28059 9.69 13.74 8.16 37 MIME_QP_LONG_LINE 27692 7.38 5.59 8.06 38 XM_DKIMWhitelistDomains 26781 5.68 0.08 7.79 39 XM_Evil_Numbers_Gen 25610 7.89 9.06 7.45 40 UNPARSEABLE_RELAY 25356 8.59 11.79 7.38 41 XM_DK_Undo_02 24627 17.73 45.66 7.16 42 MPART_ALT_DIFF 23604 8.05 11.18 6.87 43 HTML_IMAGE_RATIO_04 23134 6.06 4.30 6.73 44 IN_ZIMBRA_NJ_WHITELIST 22557 4.78 0.08 6.56 45 TR_XM_DK_Bayes 22522 4.93 0.64 6.55 46 TR_XM_DK_Bayes1 21743 4.75 0.59 6.33 47 BAYES_99 21409 13.62 33.16 6.23 48 T_TooManySym_01 21248 5.12 2.30 6.18 49 TM2_M_URI_OPT_OUT 20750 5.88 5.45 6.04 50 HTML_IMAGE_RATIO_02 20376 6.42 7.73 5.93 51 TR_XM_UnparsRelay 19920 7.38 11.57 5.80 52 RCVD_IN_IADB_LISTED 19758 4.92 2.74 5.75 53 XM_H_Trusted_IP 19554 4.13 0.00 5.69 54 XM_SendGrid 18915 6.02 7.37 5.50 55 TR_XM_DK_Bayes2 18828 4.12 0.52 5.48 56 XM_H_Long_From01 18121 5.16 4.86 5.27 57 BAYES_999 17875 11.02 26.41 5.20 58 BAYES_40 17721 4.42 2.49 5.16 59 TR_XM_DKIM_Undo 17679 13.87 36.94 5.14 60 XM_B_SpammyWords3 17557 6.82 11.34 5.11 61 RCVD_IN_IADB_SPF 17398 4.30 2.28 5.06 62 XM_PDF 16596 3.75 0.90 4.83 63 RCVD_IN_VALIDITY_SAFE 16536 4.40 3.32 4.81 64 TR_XM_SpammyWords4 16314 6.66 11.73 4.75 65 XMSubMetaSx_00 15691 5.63 8.44 4.56 66 RCVD_IN_IADB_SENDERID 15567 3.86 2.08 4.53 67 MIME_HTML_ONLY_MULTI 15567 4.42 4.13 4.53 68 RCVD_IN_IADB_DK 15100 3.76 2.09 4.39 69 BOTNET_IPINHOSTNAME 15032 6.46 11.98 4.37 70 BAYES_20 14677 3.76 2.40 4.27 71 RCVD_IN_VALIDITY_CERTIFIED 14349 3.79 2.77 4.17 72 BAYES_80 14242 5.10 7.64 4.14 73 DKIM_INVALID 13791 4.32 5.14 4.01 74 FSL_BULK_SIG 13645 5.95 11.19 3.97 75 XMStrtUSub 13412 3.70 3.18 3.90 76 HTML_IMAGE_RATIO_06 13260 3.73 3.37 3.86 77 XMNumbers 12290 3.41 2.96 3.58 78 TR_XM_DK_SendGrid 11871 3.63 4.11 3.45 79 RCVD_IN_IADB_VOUCHED 11779 2.89 1.49 3.43 80 XM_UncommonTLD01 11775 7.07 16.69 3.43 81 TR_XM_PhishingBody 11668 4.19 6.29 3.39 82 T_REMOTE_IMAGE 11386 3.44 3.79 3.31 83 XM_B_Phish_Phrases 11360 3.99 5.82 3.30 84 BOUNCE_MESSAGE 11261 2.54 0.58 3.28 85 ANY_BOUNCE_MESSAGE 11261 2.54 0.58 3.28 86 RELAYCOUNTRY_META 11213 7.50 18.70 3.26 87 T_TooManySym_02 11173 2.56 0.72 3.25 88 XMSexyCombo_05 10789 4.78 9.13 3.14 89 URI_NOVOWEL 10691 4.13 6.81 3.11 90 HTML_IMAGE_RATIO_08 9674 2.61 2.08 2.81 91 MIME_HTML_MOSTLY 9191 4.14 8.00 2.67 92 MAILING_LIST_MULTI 9059 2.39 1.75 2.64 93 FROM_EXCESS_BASE64 8914 2.40 1.88 2.59 94 BAYES_95 8753 2.86 3.70 2.55 95 BAYES_05 8532 2.05 0.91 2.48 96 HTML_MIME_NO_HTML_TAG 7646 3.11 5.44 2.22 97 RCVD_IN_IADB_OPTIN 7595 1.84 0.85 2.21 98 TooManyTo_002 7566 1.80 0.72 2.20 99 XM_B_SpammyTLD 7223 3.19 6.06 2.10 100 XM_SPF_SoftFail 7187 2.54 3.73 2.09 101 TR_DCC_Bayes_99 7090 8.10 24.06 2.06 102 INVALID_MSGID 7015 1.51 0.10 2.04 103 XM_B_Phish66 6958 2.44 3.53 2.02 104 HTML_FONT_FACE_BAD 6837 1.66 0.78 1.99 105 XMSexyCombo_01 6747 2.44 3.71 1.96 106 TR_XM_SB_Phish 6618 1.99 2.15 1.93 107 RCVD_IN_MSPIKE_H5 6549 1.57 0.67 1.91 108 XMSubPhish11 6545 1.96 2.10 1.90 109 IN_HORDE_ADDRESS_BOOK 6530 1.41 0.11 1.90 110 MSGID_NOFQDN1 6472 1.37 0.02 1.88 111 XM_B_Investor 6459 2.43 3.90 1.88 112 SUBJ_ALL_CAPS 6395 2.01 2.42 1.86 113 T_XMDrugObfuBody_14 6371 2.24 3.24 1.85 114 TO_MALFORMED 6130 1.30 0.03 1.78 115 TVD_RCVD_IP 5999 1.30 0.11 1.75 116 TR_Symld_Words 5857 1.67 1.58 1.70 117 XM_DK_Undo_01 5793 1.96 2.68 1.69 118 KHOP_HELO_FCRDNS 5577 2.19 3.67 1.62 119 XM_CamelCaseFrm001 5568 1.80 2.27 1.62 120 SHORT_URI_2 5550 1.58 1.50 1.61 121 HELO_NODOT 5547 1.30 0.46 1.61 122 HELO_NO_DOMAIN 5545 1.30 0.46 1.61 123 XMDiploma_00 5496 1.84 2.47 1.60 124 BOTNET 5369 4.80 13.37 1.56 125 XMSubNoVowel 5365 1.38 0.90 1.56 126 URI_HEX 5134 1.59 1.84 1.49 127 TooManyTo_003 5078 1.24 0.63 1.48 128 T_XMDrugObfuBody_08 5049 2.01 3.42 1.47 129 TR_XM_SpammyRelay 4836 4.52 12.74 1.41 130 TM2_M_VERY_LONG_WORD 4803 1.88 3.15 1.40 131 XM_B_Unsub2 4540 1.43 1.73 1.32 132 XMGappySubj_01 4416 0.99 0.22 1.28 133 XM_GoogleGroups 4342 1.24 1.18 1.26 134 TR_XM_SpammyWords5 4182 1.82 3.40 1.22 135 XMStockSpam_06 4163 1.28 1.48 1.21 136 UNTRUSTED_Relay 4019 3.89 11.08 1.17 137 XMBSHREFv2 3959 0.91 0.28 1.15 138 RCVD_IN_MSPIKE_BL 3901 2.31 5.43 1.13 139 TR_XM_MSPIKECOMBO 3886 2.31 5.42 1.13 140 XMCapTrack 3881 0.90 0.30 1.13 141 TVD_SPACE_RATIO 3702 0.80 0.08 1.08 142 TooManyTo_004 3673 0.93 0.57 1.07 143 XMGenDplmaNmb 3621 1.13 1.32 1.05 144 TR_XM_MaxUnsub 3539 2.57 6.63 1.03 145 DKIM_ADSP_CUSTOM_MED 3455 0.93 0.75 1.01 146 TR_XM_SpammyWords2 3391 4.00 11.98 0.99 147 XM_H_Long_From02 3362 0.93 0.80 0.98 148 RCVD_IN_RP_SAFE 3241 0.88 0.70 0.94 149 XM_D_tchamptons_WL 3214 0.68 0.00 0.94 150 XM_OfRef6 3109 1.65 3.62 0.90 151 HTML_IMAGE_ONLY_20 3077 0.71 0.21 0.90 152 T_XMDrugObfuBody_00 2905 1.21 2.19 0.85 153 TooManyTo_005 2872 0.75 0.53 0.84 154 RCVD_IN_RP_CERTIFIED 2867 0.74 0.50 0.83 155 TM2_M_A_HREF_HREF 2849 0.85 0.92 0.83 156 XMPhish30 2836 0.96 1.31 0.83 157 RCVD_IN_BL_SPAMCOP_NET 2827 2.80 8.02 0.82 158 SHORT_URI_3 2790 0.78 0.68 0.81 159 T_TooManySym_03 2683 0.64 0.26 0.78 160 RELAYCOUNTRY_CA 2626 1.85 4.72 0.76 161 RELAYCOUNTRY_GB 2504 0.75 0.82 0.73 162 XM_UB50 2500 1.93 5.13 0.73 163 TR_LOTS_OF_MONEY3 2482 0.85 1.17 0.72 164 T_FILL_THIS_FORM_SHORT 2460 1.13 2.21 0.72 165 XMHTML_After_End 2423 0.76 0.92 0.70 166 SpammyFromTLD_01 2423 2.26 6.35 0.70 167 T_XMHurry_00 2385 0.84 1.22 0.69 168 XM_B_COPY_HTML 2338 0.69 0.72 0.68 169 HTTPS_HTTP_MISMATCH 2300 0.73 0.88 0.67 170 TR_MetaPhish_Combo_01 2278 0.75 0.97 0.66 171 XMBody_95 2246 0.52 0.18 0.65 172 XM_ShortIntro_01 2235 0.63 0.57 0.65 173 XMBrknScrpt_02 2198 0.74 1.00 0.64 174 URI_TRY_3LD 2175 0.72 0.94 0.63 175 XMBdyGiftCard01 2171 0.76 1.10 0.63 176 TR_XM_SpammyWords3 2143 1.27 2.99 0.62 177 T_OBFU_PDF_ATTACH 2090 0.47 0.09 0.61 178 TR_MSPIKEBAYES00 2072 0.45 0.04 0.60 179 NML_ADSP_CUSTOM_MED 2030 0.58 0.57 0.59 180 HTML_TAG_BALANCE_BODY 2016 0.71 1.03 0.59 181 XMLngstWrd_00 1998 0.65 0.84 0.58 182 TVD_SPACE_RATIO_MINFP 1970 0.44 0.07 0.57 183 RCVD_IN_MSPIKE_L3 1958 1.14 2.66 0.57 184 FORGED_GMAIL_RCVD 1934 0.59 0.65 0.56 185 T_Symld_Words_02 1931 0.69 1.02 0.56 186 TR_XM_INV_DKIM 1888 0.84 1.61 0.55 187 DIET_1 1875 0.64 0.90 0.55 188 SUBJ_DOLLARS 1854 0.59 0.71 0.54 189 XM_ProductURIs 1834 0.65 0.97 0.53 190 XMLngstWrd_01 1831 0.61 0.81 0.53 191 RCVD_IN_MSPIKE_L4 1799 0.70 1.18 0.52 192 XM_B_COVIDMETA 1729 1.04 2.45 0.50 193 XMSubMetaI_00 1711 0.58 0.80 0.50 194 T_MANY_PILL_PRICE 1706 0.37 0.04 0.50 195 XMNoVowels 1693 0.45 0.34 0.49 196 XM_B_DNDMA 1662 0.57 0.81 0.48 197 FROM_GOV_DKIM_AU 1653 0.38 0.11 0.48 198 RCVD_IN_SORBS_DUL 1636 0.40 0.20 0.48 199 XMBody_17 1626 1.02 2.45 0.47 200 XM_H_PHPMailer 1622 0.59 0.89 0.47 ----------------------------------------------------------------------