Email: 449047 Autolearn: 0 AvgScore: 2.19 AvgScanTime: 1.34 sec Spam: 120684 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.48 sec Ham: 328363 Autolearn: 0 AvgScore: -2.21 AvgScanTime: 1.29 sec Time Spent Running SA: 166.79 hours Time Spent Processing Spam: 49.53 hours Time Spent Processing Ham: 117.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 114495 89.27 94.87 87.22 2 DKIM_SIGNED 100470 74.60 83.25 71.41 3 XM_DK_Pass 98016 73.03 81.22 70.01 4 RELAYCOUNTRY_US 97415 81.82 80.72 82.22 5 DKIM_VALID 96973 72.12 80.35 69.10 6 XM_B_Unicode 96041 72.22 79.58 69.51 7 DCC_CHECK 87845 43.61 72.79 32.89 8 XMListUnsubscribeExists 81509 51.70 67.54 45.88 9 XM_B_SpammyWords 79275 49.57 65.69 43.64 10 DKIM_VALID_AU 71938 54.64 59.61 52.82 11 XM_B_Unicode3 55115 43.90 45.67 43.26 12 XM_DK_Undo_02 52929 17.34 43.86 7.60 13 BAYES_50 48381 50.07 40.09 53.73 14 XM_B_SpammyWords2 45549 23.08 37.74 17.69 15 LOC_TINY_FONT_1 44219 26.47 36.64 22.73 16 BAYES_99 42687 14.71 35.37 7.12 17 MIME_HTML_ONLY 42165 26.62 34.94 23.56 18 TR_XM_DKIM_Undo 41268 12.79 34.20 4.93 19 HTML_FONT_LOW_CONTRAST 40604 27.39 33.64 25.09 20 FVGT_m_MULTI_ODD 36053 24.23 29.87 22.16 21 BAYES_999 33504 11.92 27.76 6.10 22 RCVD_IN_MSPIKE_H2 33368 22.35 27.65 20.40 23 DKIM_VALID_EF 33328 26.93 27.62 26.68 24 DCC_CHECK_NEGATIVE 32790 56.34 27.17 67.07 25 T_KAM_HTML_FONT_INVALID 31621 20.16 26.20 17.93 26 TR_DCC_Bayes_99 30071 8.50 24.92 2.47 27 T_TM2_M_HEADER_IN_MSG 29212 28.03 24.21 29.43 28 XM_Body_Dirty_Words 28734 14.50 23.81 11.07 29 XMSubLong 27546 21.87 22.82 21.52 30 RELAYCOUNTRY_META 25984 8.10 21.53 3.17 31 RCVD_IN_MSPIKE_WL 24421 26.28 20.24 28.51 32 XM_Multi_Part_URI 21401 13.81 17.73 12.37 33 FSL_BULK_SIG 17622 7.33 14.60 4.65 34 UNPARSEABLE_RELAY 17425 10.14 14.44 8.56 35 BOTNET 17411 4.93 14.43 1.44 36 TR_XM_UnparsRelay 17086 8.79 14.16 6.82 37 BOTNET_IPINHOSTNAME 16455 7.09 13.63 4.68 38 LOTS_OF_MONEY 16354 9.38 13.55 7.84 39 XM_B_Unsub 16349 11.68 13.55 11.00 40 RCVD_IN_MSPIKE_H3 15682 14.85 12.99 15.54 41 TR_XM_SpammyWords2 15037 4.07 12.46 0.98 42 XMSexyCombo_05 14779 6.10 12.25 3.84 43 XM_B_SpammyWords3 14119 6.01 11.70 3.92 44 TR_XM_SpammyRelay 14103 4.13 11.69 1.36 45 UNTRUSTED_Relay 13815 3.87 11.45 1.09 46 TR_XM_SpammyWords4 13529 6.56 11.21 4.86 47 RCVD_IN_BL_SPAMCOP_NET 12585 3.29 10.43 0.66 48 XM_Evil_Numbers_Gen 11559 8.87 9.58 8.61 49 XM_SendGrid 10453 6.95 8.66 6.32 50 XM_UncommonTLD01 10305 4.81 8.54 3.44 51 TR_XM_PhishingBody 9736 4.72 8.07 3.49 52 LotsOfNums_01 9727 8.99 8.06 9.34 53 BAYES_80 9708 5.31 8.04 4.31 54 HTML_IMAGE_RATIO_02 8807 6.09 7.30 5.65 55 BAYES_60 8704 8.98 7.21 9.63 56 MPART_ALT_DIFF 8536 7.79 7.07 8.06 57 RCVD_IN_MSPIKE_H4 8254 9.88 6.84 10.99 58 XM_H_Long_From01 7931 5.84 6.57 5.57 59 TR_XM_MaxUnsub 7699 2.63 6.38 1.25 60 RCVD_IN_MSPIKE_BL 7269 2.56 6.02 1.28 61 HTML_IMAGE_RATIO_04 7191 6.96 5.96 7.33 62 TR_XM_MSPIKECOMBO 7125 2.52 5.90 1.28 63 TooManyTo_001 7098 7.23 5.88 7.72 64 RELAYCOUNTRY_CA 7043 2.10 5.84 0.72 65 XMSubMetaSx_00 6883 4.60 5.70 4.19 66 T_REMOTE_IMAGE 6807 4.56 5.64 4.17 67 XM_B_Phish_Phrases 6559 4.10 5.43 3.61 68 TR_XM_DK_SendGrid 6364 4.51 5.27 4.22 69 TR_XM_SPAMCOP 6357 1.52 5.27 0.14 70 HTML_MIME_NO_HTML_TAG 6180 3.40 5.12 2.77 71 TM2_M_VERY_LONG_WORD 6166 2.48 5.11 1.51 72 XM_UB50 6162 1.91 5.11 0.74 73 XM_SPF_SoftFail 5907 2.79 4.89 2.02 74 XM_OfRef6 5845 1.96 4.84 0.90 75 MIME_HTML_ONLY_MULTI 5661 5.46 4.69 5.75 76 XMNumbers 5566 4.43 4.61 4.37 77 BAYES_95 5467 3.26 4.53 2.79 78 MIME_QP_LONG_LINE 5391 5.35 4.47 5.67 79 XM_B_Phish66 5387 2.62 4.46 1.94 80 RCVD_IN_PSBL 5199 1.35 4.31 0.26 81 RCVD_IN_VALIDITY_SAFE 5134 4.77 4.25 4.96 82 T_XMDrugObfuBody_08 4918 2.09 4.08 1.36 83 KHOP_HELO_FCRDNS 4896 2.21 4.06 1.52 84 XM_DIRTYINTL 4895 1.31 4.06 0.31 85 TR_XM_SpammyWords5 4858 2.48 4.03 1.91 86 HTML_IMAGE_RATIO_06 4827 4.15 4.00 4.20 87 XM_B_Investor 4827 2.31 4.00 1.68 88 RCVD_IN_VALIDITY_RPBL 4397 0.98 3.64 0.00 89 XMStrtUSub 4382 4.63 3.63 5.00 90 RCVD_IN_IADB_LISTED 4364 5.16 3.62 5.73 91 XM_CamelCaseFrm001 4361 2.27 3.61 1.77 92 RCVD_IN_VALIDITY_CERTIFIED 4221 4.20 3.50 4.46 93 T_XMDrugObfuBody_14 3910 2.19 3.24 1.80 94 TM2_M_URI_OPT_OUT 3858 3.44 3.20 3.53 95 MIME_HTML_MOSTLY 3828 2.97 3.17 2.90 96 T_FILL_THIS_FORM_SHORT 3811 1.45 3.16 0.83 97 TR_XM_SpammyWords3 3667 1.18 3.04 0.50 98 RCVD_IN_IADB_SPF 3658 4.55 3.03 5.10 99 XM_B_SpammyTLD 3648 2.35 3.02 2.11 100 XMDiploma_00 3580 1.63 2.97 1.13 101 BOTNET_NORDNS 3563 0.81 2.95 0.02 102 SUBJ_ALL_CAPS 3503 1.96 2.90 1.62 103 DKIM_INVALID 3497 2.47 2.90 2.31 104 RCVD_IN_IADB_DK 3464 4.01 2.87 4.43 105 RCVD_IN_IADB_SENDERID 3394 4.14 2.81 4.62 106 T_XMDrugObfuBody_00 3318 1.27 2.75 0.72 107 SpammyFromTLD_02 3223 1.11 2.67 0.53 108 FROM_EXCESS_BASE64 3195 2.75 2.65 2.79 109 TR_XM_SB_Phish 3190 2.19 2.64 2.02 110 XMSubPhish11 3066 2.15 2.54 2.00 111 SpammyFromTLD_01 3064 1.12 2.54 0.60 112 TR_XM_MSPIKECOMBO2 3029 0.85 2.51 0.24 113 BODY_URI_ONLY 2943 0.66 2.44 0.01 114 RCVD_IN_MSPIKE_L5 2919 0.67 2.42 0.03 115 USER_IN_DEF_DKIM_WL 2909 9.97 2.41 12.75 116 T_HTML_TAG_BALANCE_CENTER 2881 0.71 2.39 0.09 117 XM_B_COVIDMETA 2845 1.12 2.36 0.67 118 RCVD_IN_MSPIKE_L3 2783 1.03 2.31 0.56 119 XM_B_SpammyWords4 2651 0.93 2.20 0.46 120 XM_UB99 2650 0.59 2.20 0.00 121 XM_DK_Undo_01 2638 1.58 2.19 1.35 122 XM_GoogleGroups 2599 1.64 2.15 1.45 123 HTML_IMAGE_ONLY_08 2495 0.66 2.07 0.14 124 XM_B_Unsub2 2488 1.51 2.06 1.31 125 XMLngstWrd_00 2478 1.09 2.05 0.73 126 T_TooManySym_01 2450 4.65 2.03 5.61 127 HTML_IMAGE_RATIO_08 2436 2.55 2.02 2.74 128 XMLngstWrd_01 2426 1.03 2.01 0.67 129 XM_Body_Dirty_Words_01 2409 0.81 2.00 0.38 130 XMLngstWrd_02 2349 0.95 1.95 0.59 131 MAILING_LIST_MULTI 2287 2.22 1.90 2.34 132 RCVD_IN_IADB_VOUCHED 2272 3.05 1.88 3.49 133 URI_NOVOWEL 2261 2.33 1.87 2.50 134 XMSexyCombo_01 2237 1.16 1.85 0.91 135 URI_HEX 2196 1.44 1.82 1.30 136 XMPhish30 2149 1.15 1.78 0.92 137 TR_Mismatch_TLD_01 2143 0.64 1.78 0.23 138 BAYES_40 2143 4.00 1.78 4.82 139 XMStockSpam_06 2133 1.37 1.77 1.23 140 PDS_OTHER_BAD_TLD 2114 0.57 1.75 0.14 141 MIXED_CENTER_CASE 2113 0.47 1.75 0.00 142 MIXED_HREF_CASE 2090 0.47 1.73 0.00 143 MIXED_IMG_CASE 2080 0.47 1.72 0.00 144 MIXED_AREA_CASE 2078 0.46 1.72 0.00 145 MIXED_FONT_CASE 2075 0.46 1.72 0.00 146 TR_XM_FormFill 2065 0.47 1.71 0.02 147 TR_Symld_Words 2025 1.64 1.68 1.62 148 RELAYCOUNTRY_AU 2013 0.66 1.67 0.29 149 XM_URI_RBL 1982 0.53 1.64 0.12 150 XMBrknScrpt_02 1982 0.98 1.64 0.73 151 XMBody_17 1972 0.68 1.63 0.33 152 XMLngstWrd_03 1962 0.80 1.63 0.50 153 XMGenDplmaNmb 1954 0.94 1.62 0.69 154 XM_UB999 1936 0.43 1.60 0.00 155 HTML_TITLE_SUBJ_DIFF 1896 0.65 1.57 0.31 156 DIET_1 1879 1.09 1.56 0.92 157 XMLngstWrd_04 1875 0.74 1.55 0.44 158 HTML_FONT_SIZE_LARGE 1868 0.49 1.55 0.10 159 XMSubMetaI_00 1829 0.98 1.52 0.78 160 RELAYCOUNTRY_DE 1815 0.59 1.50 0.26 161 UPPERCASE_75_100 1792 0.64 1.48 0.32 162 TR_XM_PHPDW 1776 0.67 1.47 0.38 163 TR_XM_NoHeaderRelay 1769 0.50 1.47 0.15 164 TR_BOTNET_NEGATE 1712 0.64 1.42 0.35 165 ALL_TRUSTED 1701 11.82 1.41 15.64 166 TR_XM_COVIDMETA1 1686 0.50 1.40 0.17 167 XMGppyBdWords 1685 0.52 1.40 0.20 168 TR_XM_PHPForged 1672 0.62 1.39 0.34 169 TR_XM_FormFill2 1651 0.61 1.37 0.34 170 URIBL_BLACK 1647 0.40 1.36 0.04 171 XM_H_PHPOS 1642 0.61 1.36 0.33 172 DKIM_ADSP_CUSTOM_MED 1610 1.07 1.33 0.97 173 RELAYCOUNTRY_GB 1607 0.86 1.33 0.69 174 XM_H_Long_From02 1607 1.08 1.33 0.99 175 T_XMHurry_00 1602 0.71 1.33 0.48 176 TR_LOTS_OF_MONEY3 1591 0.46 1.32 0.15 177 T_Symld_Words_02 1591 0.67 1.32 0.43 178 TR_XM_BayesRelay 1589 0.36 1.32 0.00 179 XMBdyGiftCard01 1560 0.88 1.29 0.73 180 RELAYCOUNTRY_BR 1548 0.35 1.28 0.00 181 BAYES_20 1488 3.01 1.23 3.66 182 FROM_SUSPICIOUS_NTLD 1479 0.36 1.23 0.04 183 TR_MetaPhish_Combo_01 1479 0.86 1.23 0.72 184 FORGED_GMAIL_RCVD 1476 0.70 1.22 0.51 185 XM_UB80 1451 0.34 1.20 0.02 186 TM2_M_A_HREF_HREF 1442 0.83 1.19 0.70 187 RELAYCOUNTRY_NL 1437 0.42 1.19 0.13 188 URI_TRY_3LD 1436 0.70 1.19 0.52 189 HTTPS_HTTP_MISMATCH 1436 0.78 1.19 0.64 190 RCVD_IN_MSPIKE_L4 1423 0.82 1.18 0.68 191 NML_ADSP_CUSTOM_MED 1419 0.76 1.18 0.60 192 FROM_SUSPICIOUS_NTLD_FP 1411 0.35 1.17 0.04 193 GOOG_STO_IMG_HTML 1410 0.31 1.17 0.00 194 BAYES_00 1360 8.64 1.13 11.40 195 XM_UB60 1353 0.35 1.12 0.06 196 RCVD_IN_IADB_OPTIN 1353 1.99 1.12 2.31 197 TR_Mismatch_TLD_02 1341 0.37 1.11 0.09 198 XM_ProductURIs 1313 0.83 1.09 0.74 199 SHOPIFY_IMG_NOT_RCVD_SFY 1228 0.42 1.02 0.20 200 RELAYCOUNTRY_FR 1219 0.42 1.01 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286383 89.27 94.87 87.22 2 RELAYCOUNTRY_US 269989 81.82 80.72 82.22 3 DKIM_SIGNED 234497 74.60 83.25 71.41 4 XM_DK_Pass 229903 73.03 81.22 70.01 5 XM_B_Unicode 228261 72.22 79.58 69.51 6 DKIM_VALID 226901 72.12 80.35 69.10 7 DCC_CHECK_NEGATIVE 220223 56.34 27.17 67.07 8 BAYES_50 176438 50.07 40.09 53.73 9 DKIM_VALID_AU 173439 54.64 59.61 52.82 10 XMListUnsubscribeExists 150638 51.70 67.54 45.88 11 XM_B_SpammyWords 143304 49.57 65.69 43.64 12 XM_B_Unicode3 142038 43.90 45.67 43.26 13 DCC_CHECK 108004 43.61 72.79 32.89 14 T_TM2_M_HEADER_IN_MSG 96645 28.03 24.21 29.43 15 RCVD_IN_MSPIKE_WL 93606 26.28 20.24 28.51 16 DKIM_VALID_EF 87610 26.93 27.62 26.68 17 HTML_FONT_LOW_CONTRAST 82391 27.39 33.64 25.09 18 MIME_HTML_ONLY 77361 26.62 34.94 23.56 19 LOC_TINY_FONT_1 74632 26.47 36.64 22.73 20 FVGT_m_MULTI_ODD 72766 24.23 29.87 22.16 21 XMSubLong 70669 21.87 22.82 21.52 22 RCVD_IN_MSPIKE_H2 66995 22.35 27.65 20.40 23 T_KAM_HTML_FONT_INVALID 58890 20.16 26.20 17.93 24 XM_B_SpammyWords2 58082 23.08 37.74 17.69 25 ALL_TRUSTED 51363 11.82 1.41 15.64 26 RCVD_IN_MSPIKE_H3 51015 14.85 12.99 15.54 27 USER_IN_DEF_DKIM_WL 41874 9.97 2.41 12.75 28 XM_Multi_Part_URI 40630 13.81 17.73 12.37 29 BAYES_00 37427 8.64 1.13 11.40 30 XM_Body_Dirty_Words 36356 14.50 23.81 11.07 31 XM_B_Unsub 36111 11.68 13.55 11.00 32 RCVD_IN_MSPIKE_H4 36095 9.88 6.84 10.99 33 BAYES_60 31609 8.98 7.21 9.63 34 LotsOfNums_01 30657 8.99 8.06 9.34 35 XM_Evil_Numbers_Gen 28269 8.87 9.58 8.61 36 UNPARSEABLE_RELAY 28101 10.14 14.44 8.56 37 MPART_ALT_DIFF 26451 7.79 7.07 8.06 38 LOTS_OF_MONEY 25759 9.38 13.55 7.84 39 XM_DKIMWhitelistDomains 25489 5.69 0.04 7.76 40 TooManyTo_001 25347 7.23 5.88 7.72 41 XM_DK_Undo_02 24940 17.34 43.86 7.60 42 HTML_IMAGE_RATIO_04 24076 6.96 5.96 7.33 43 XM_H_Trusted_IP 23813 5.30 0.00 7.25 44 BAYES_99 23389 14.71 35.37 7.12 45 IN_ZIMBRA_NJ_WHITELIST 22755 5.11 0.16 6.93 46 TR_XM_UnparsRelay 22388 8.79 14.16 6.82 47 TR_XM_DK_Bayes 21986 5.08 0.70 6.70 48 TR_XM_DK_Bayes1 21598 5.00 0.70 6.58 49 XM_SendGrid 20752 6.95 8.66 6.32 50 BAYES_999 20020 11.92 27.76 6.10 51 TR_XM_DK_Bayes2 19357 4.46 0.54 5.90 52 MIME_HTML_ONLY_MULTI 18867 5.46 4.69 5.75 53 RCVD_IN_IADB_LISTED 18806 5.16 3.62 5.73 54 MIME_QP_LONG_LINE 18619 5.35 4.47 5.67 55 HTML_IMAGE_RATIO_02 18560 6.09 7.30 5.65 56 T_TooManySym_01 18435 4.65 2.03 5.61 57 XM_H_Long_From01 18278 5.84 6.57 5.57 58 RCVD_IN_IADB_SPF 16758 4.55 3.03 5.10 59 XMStrtUSub 16429 4.63 3.63 5.00 60 RCVD_IN_VALIDITY_SAFE 16288 4.77 4.25 4.96 61 TR_XM_DKIM_Undo 16173 12.79 34.20 4.93 62 XM_PDF 16100 3.80 0.79 4.90 63 TR_XM_SpammyWords4 15945 6.56 11.21 4.86 64 BAYES_40 15831 4.00 1.78 4.82 65 BOTNET_IPINHOSTNAME 15376 7.09 13.63 4.68 66 FSL_BULK_SIG 15273 7.33 14.60 4.65 67 RCVD_IN_IADB_SENDERID 15181 4.14 2.81 4.62 68 RCVD_IN_VALIDITY_CERTIFIED 14642 4.20 3.50 4.46 69 RCVD_IN_IADB_DK 14531 4.01 2.87 4.43 70 XMNumbers 14340 4.43 4.61 4.37 71 BAYES_80 14141 5.31 8.04 4.31 72 TR_XM_DK_SendGrid 13866 4.51 5.27 4.22 73 HTML_IMAGE_RATIO_06 13804 4.15 4.00 4.20 74 XMSubMetaSx_00 13770 4.60 5.70 4.19 75 T_REMOTE_IMAGE 13682 4.56 5.64 4.17 76 XM_B_SpammyWords3 12856 6.01 11.70 3.92 77 XMSexyCombo_05 12599 6.10 12.25 3.84 78 BAYES_20 12023 3.01 1.23 3.66 79 XM_B_Phish_Phrases 11845 4.10 5.43 3.61 80 TM2_M_URI_OPT_OUT 11604 3.44 3.20 3.53 81 TR_XM_PhishingBody 11471 4.72 8.07 3.49 82 RCVD_IN_IADB_VOUCHED 11446 3.05 1.88 3.49 83 XM_UncommonTLD01 11293 4.81 8.54 3.44 84 BOUNCE_MESSAGE 10759 2.61 0.80 3.28 85 ANY_BOUNCE_MESSAGE 10759 2.61 0.80 3.28 86 RELAYCOUNTRY_META 10399 8.10 21.53 3.17 87 T_TooManySym_02 10059 2.40 0.60 3.06 88 MIME_HTML_MOSTLY 9507 2.97 3.17 2.90 89 BAYES_95 9170 3.26 4.53 2.79 90 FROM_EXCESS_BASE64 9166 2.75 2.65 2.79 91 HTML_MIME_NO_HTML_TAG 9109 3.40 5.12 2.77 92 HTML_IMAGE_RATIO_08 8998 2.55 2.02 2.74 93 BAYES_05 8333 2.01 0.56 2.54 94 URI_NOVOWEL 8206 2.33 1.87 2.50 95 TR_DCC_Bayes_99 8105 8.50 24.92 2.47 96 HTML_FONT_FACE_BAD 8052 2.00 0.75 2.45 97 MAILING_LIST_MULTI 7692 2.22 1.90 2.34 98 DKIM_INVALID 7596 2.47 2.90 2.31 99 RCVD_IN_IADB_OPTIN 7570 1.99 1.12 2.31 100 XM_B_SpammyTLD 6914 2.35 3.02 2.11 101 INVALID_MSGID 6686 1.55 0.21 2.04 102 XM_SPF_SoftFail 6639 2.79 4.89 2.02 103 TR_XM_SB_Phish 6636 2.19 2.64 2.02 104 XMSubPhish11 6567 2.15 2.54 2.00 105 TooManyTo_002 6537 1.64 0.67 1.99 106 RCVD_IN_MSPIKE_H5 6496 1.55 0.40 1.98 107 XM_B_Phish66 6372 2.62 4.46 1.94 108 TR_XM_SpammyWords5 6287 2.48 4.03 1.91 109 MSGID_NOFQDN1 6244 1.41 0.09 1.90 110 IN_HORDE_ADDRESS_BOOK 6068 1.42 0.27 1.85 111 TO_MALFORMED 6051 1.35 0.01 1.84 112 TVD_RCVD_IP 5975 1.43 0.36 1.82 113 T_XMDrugObfuBody_14 5923 2.19 3.24 1.80 114 XMSubNoVowel 5848 1.49 0.71 1.78 115 XM_CamelCaseFrm001 5811 2.27 3.61 1.77 116 XM_B_Investor 5527 2.31 4.00 1.68 117 TR_Symld_Words 5330 1.64 1.68 1.62 118 SUBJ_ALL_CAPS 5307 1.96 2.90 1.62 119 KHOP_HELO_FCRDNS 5006 2.21 4.06 1.52 120 TM2_M_VERY_LONG_WORD 4957 2.48 5.11 1.51 121 XMGappySubj_01 4899 1.13 0.14 1.49 122 XM_GoogleGroups 4769 1.64 2.15 1.45 123 BOTNET 4737 4.93 14.43 1.44 124 HELO_NODOT 4615 1.12 0.35 1.41 125 HELO_NO_DOMAIN 4611 1.11 0.29 1.40 126 T_XMDrugObfuBody_08 4475 2.09 4.08 1.36 127 TR_XM_SpammyRelay 4464 4.13 11.69 1.36 128 XM_DK_Undo_01 4442 1.58 2.19 1.35 129 TooManyTo_003 4397 1.13 0.55 1.34 130 XM_B_Unsub2 4310 1.51 2.06 1.31 131 URI_HEX 4270 1.44 1.82 1.30 132 RCVD_IN_MSPIKE_BL 4210 2.56 6.02 1.28 133 TR_XM_MSPIKECOMBO 4208 2.52 5.90 1.28 134 XMSubMetaSxObfu_03 4202 1.17 0.88 1.28 135 TR_XM_MaxUnsub 4114 2.63 6.38 1.25 136 XMStockSpam_06 4036 1.37 1.77 1.23 137 TVD_SPACE_RATIO 3833 1.02 0.62 1.17 138 HTML_IMAGE_ONLY_20 3727 0.94 0.43 1.14 139 XMDiploma_00 3726 1.63 2.97 1.13 140 XMBSHREFv2 3623 0.87 0.25 1.10 141 UNTRUSTED_Relay 3568 3.87 11.45 1.09 142 XM_H_Long_From02 3263 1.08 1.33 0.99 143 TR_XM_SpammyWords2 3223 4.07 12.46 0.98 144 DKIM_ADSP_CUSTOM_MED 3182 1.07 1.33 0.97 145 TooManyTo_004 3148 0.83 0.48 0.96 146 XMCapTrack 3139 0.78 0.30 0.96 147 RCVD_IN_RP_SAFE 3122 0.97 1.00 0.95 148 XMPhish30 3032 1.15 1.78 0.92 149 DIET_1 3012 1.09 1.56 0.92 150 XMSexyCombo_01 2992 1.16 1.85 0.91 151 XM_OfRef6 2959 1.96 4.84 0.90 152 RCVD_IN_RP_CERTIFIED 2812 0.85 0.84 0.86 153 XMHTML_After_End 2758 0.88 0.97 0.84 154 T_FILL_THIS_FORM_SHORT 2717 1.45 3.16 0.83 155 XMBody_95 2666 0.62 0.09 0.81 156 XMSubMetaI_00 2567 0.98 1.52 0.78 157 TooManyTo_005 2531 0.68 0.44 0.77 158 XM_B_COPY_HTML 2511 0.80 0.91 0.76 159 T_OBFU_PDF_ATTACH 2490 0.59 0.15 0.76 160 XM_ProductURIs 2426 0.83 1.09 0.74 161 XM_UB50 2423 1.91 5.11 0.74 162 XMBrknScrpt_02 2406 0.98 1.64 0.73 163 XMBdyGiftCard01 2403 0.88 1.29 0.73 164 XMLngstWrd_00 2401 1.09 2.05 0.73 165 RELAYCOUNTRY_CA 2373 2.10 5.84 0.72 166 TR_MetaPhish_Combo_01 2370 0.86 1.23 0.72 167 T_XMDrugObfuBody_00 2370 1.27 2.75 0.72 168 TM2_M_A_HREF_HREF 2298 0.83 1.19 0.70 169 FROM_GOV_DKIM_AU 2285 0.54 0.12 0.70 170 T_TooManySym_03 2282 0.59 0.31 0.69 171 XMGenDplmaNmb 2267 0.94 1.62 0.69 172 RELAYCOUNTRY_GB 2264 0.86 1.33 0.69 173 RCVD_IN_MSPIKE_L4 2244 0.82 1.18 0.68 174 LOW_PRICE 2241 0.58 0.30 0.68 175 XM_B_COVIDMETA 2206 1.12 2.36 0.67 176 XMLngstWrd_01 2190 1.03 2.01 0.67 177 XM_D_tchamptons_WL 2188 0.49 0.00 0.67 178 RCVD_IN_BL_SPAMCOP_NET 2175 3.29 10.43 0.66 179 TVD_SPACE_RATIO_MINFP 2165 0.66 0.65 0.66 180 XMSexyCombo_04 2110 0.69 0.81 0.64 181 HTTPS_HTTP_MISMATCH 2086 0.78 1.19 0.64 182 XM_ShortIntro_01 2027 0.64 0.71 0.62 183 MPART_ALT_DIFF_COUNT 1997 0.71 0.98 0.61 184 NML_ADSP_CUSTOM_MED 1984 0.76 1.18 0.60 185 SpammyFromTLD_01 1971 1.12 2.54 0.60 186 XM_RXBody 1933 0.65 0.81 0.59 187 XMLngstWrd_02 1921 0.95 1.95 0.59 188 RCVD_IN_MSPIKE_L3 1853 1.03 2.31 0.56 189 SpammyFromTLD_02 1741 1.11 2.67 0.53 190 HTML_TAG_BALANCE_BODY 1729 0.61 0.84 0.53 191 URI_TRY_3LD 1713 0.70 1.19 0.52 192 FORGED_GMAIL_RCVD 1689 0.70 1.22 0.51 193 XM_H_PHPMailer 1654 0.50 0.51 0.50 194 TR_XM_SpammyWords3 1652 1.18 3.04 0.50 195 TR_MSPIKEBAYES00 1642 0.37 0.02 0.50 196 XMLngstWrd_03 1631 0.80 1.63 0.50 197 XM_B_DNDMA 1599 0.59 0.86 0.49 198 XMHTMLBadTable_001 1585 0.61 0.95 0.48 199 T_XMHurry_00 1577 0.71 1.33 0.48 200 FROM_GOV_SPOOF 1543 0.39 0.16 0.47 ----------------------------------------------------------------------