Email: 501578 Autolearn: 0 AvgScore: 2.82 AvgScanTime: 1.08 sec Spam: 148213 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.20 sec Ham: 353365 Autolearn: 0 AvgScore: -1.80 AvgScanTime: 1.03 sec Time Spent Running SA: 150.99 hours Time Spent Processing Spam: 49.50 hours Time Spent Processing Ham: 101.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140711 88.18 94.94 85.35 2 DKIM_SIGNED 116883 72.18 78.86 69.38 3 XM_DK_Pass 113192 70.49 76.37 68.02 4 DKIM_VALID 112247 69.59 75.73 67.01 5 XM_B_Unicode 110177 67.33 74.34 64.40 6 RELAYCOUNTRY_US 109091 76.97 73.60 78.39 7 XM_B_SpammyWords 93927 50.36 63.37 44.90 8 DCC_CHECK 93164 39.86 62.86 30.22 9 XMListUnsubscribeExists 93087 48.75 62.81 42.85 10 DKIM_VALID_AU 84566 54.13 57.06 52.91 11 XM_B_Unicode3 62323 39.29 42.05 38.13 12 BAYES_50 61910 50.44 41.77 54.08 13 MIME_HTML_ONLY 58403 25.48 39.40 19.64 14 XM_DK_Undo_02 56660 16.32 38.23 7.13 15 DCC_CHECK_NEGATIVE 54989 60.09 37.10 69.74 16 XM_B_SpammyWords2 49911 23.47 33.68 19.19 17 LOC_TINY_FONT_1 47009 24.29 31.72 21.18 18 FVGT_m_MULTI_ODD 46619 25.60 31.45 23.14 19 BAYES_99 45047 13.34 30.39 6.19 20 TR_XM_DKIM_Undo 44467 12.80 30.00 5.59 21 HTML_FONT_LOW_CONTRAST 43542 26.42 29.38 25.18 22 XMSubLong 39851 23.11 26.89 21.52 23 DKIM_VALID_EF 38900 27.18 26.25 27.58 24 T_TM2_M_HEADER_IN_MSG 37564 29.28 25.34 30.92 25 T_KAM_HTML_FONT_INVALID 37163 19.07 25.07 16.55 26 XM_Body_Dirty_Words 36674 14.79 24.74 10.61 27 RELAYCOUNTRY_META 36348 9.89 24.52 3.75 28 BAYES_999 35265 10.66 23.79 5.15 29 RCVD_IN_MSPIKE_H2 33623 20.44 22.69 19.50 30 TR_DCC_Bayes_99 31083 8.05 20.97 2.63 31 RCVD_IN_MSPIKE_WL 30390 26.45 20.50 28.94 32 XM_Multi_Part_URI 29337 14.25 19.79 11.92 33 XMSexyCombo_05 23257 6.97 15.69 3.31 34 RCVD_IN_MSPIKE_H3 20947 15.76 14.13 16.45 35 XM_B_Unsub 20062 12.76 13.54 12.44 36 UNTRUSTED_Relay 19881 4.76 13.41 1.13 37 LOTS_OF_MONEY 18698 8.72 12.62 7.08 38 BOTNET 18679 4.65 12.60 1.31 39 FSL_BULK_SIG 18653 6.05 12.59 3.31 40 BOTNET_IPINHOSTNAME 17824 6.48 12.03 4.15 41 MPART_ALT_DIFF 17597 7.62 11.87 5.84 42 UNPARSEABLE_RELAY 17401 8.74 11.74 7.48 43 TR_XM_UnparsRelay 17013 7.45 11.48 5.76 44 BAYES_60 16340 9.33 11.02 8.62 45 TR_XM_SpammyWords4 15931 6.32 10.75 4.46 46 XM_B_SpammyWords3 15847 5.97 10.69 3.99 47 XMSubMetaSx_00 15632 5.34 10.55 3.15 48 TR_XM_SpammyWords2 15178 3.64 10.24 0.87 49 TR_XM_SpammyRelay 14770 3.97 9.97 1.45 50 HTML_MIME_NO_HTML_TAG 14401 4.94 9.72 2.94 51 XM_UncommonTLD01 13942 5.29 9.41 3.57 52 TooManyTo_001 13797 11.40 9.31 12.28 53 RCVD_IN_BL_SPAMCOP_NET 13719 3.13 9.26 0.56 54 XM_Evil_Numbers_Gen 12543 7.83 8.46 7.56 55 T_XMDrugObfuBody_08 11711 3.39 7.90 1.50 56 TR_XM_PhishingBody 11512 4.32 7.77 2.88 57 BAYES_80 10633 4.90 7.17 3.95 58 TM2_M_VERY_LONG_WORD 10573 3.68 7.13 2.23 59 RCVD_IN_MSPIKE_BL 10511 2.88 7.09 1.12 60 TR_XM_MSPIKECOMBO 10440 2.87 7.04 1.11 61 HTML_IMAGE_RATIO_02 10389 6.35 7.01 6.07 62 ALL_TRUSTED 10382 15.62 7.00 19.24 63 MIME_HTML_ONLY_MULTI 10215 5.01 6.89 4.22 64 XM_SendGrid 9597 5.59 6.48 5.22 65 XMSexyCombo_01 9234 2.18 6.23 0.49 66 RELAYCOUNTRY_CA 8973 2.50 6.05 1.01 67 RCVD_IN_MSPIKE_H4 8967 8.91 6.05 10.10 68 XM_UB50 8946 2.26 6.04 0.68 69 TR_XM_MaxUnsub 8797 2.27 5.94 0.73 70 XM_B_Phish_Phrases 8625 4.29 5.82 3.64 71 LotsOfNums_01 8612 7.40 5.81 8.06 72 XM_GoogleGroups 8006 3.16 5.40 2.23 73 XM_B_SpammyTLD 7911 2.83 5.34 1.78 74 XMSlimDrugH 7871 2.25 5.31 0.96 75 MIME_HTML_MOSTLY 7631 2.94 5.15 2.02 76 XMLngstWrd_00 7628 2.67 5.15 1.63 77 XMSexyCombo_04 7595 1.61 5.12 0.14 78 XM_H_Long_From01 7556 4.70 5.10 4.53 79 XMLngstWrd_01 7484 2.60 5.05 1.57 80 XM_B_Investor 7441 2.47 5.02 1.40 81 XM_B_Phish66 7431 2.82 5.01 1.90 82 XMLngstWrd_02 7376 2.51 4.98 1.48 83 T_REMOTE_IMAGE 7059 3.99 4.76 3.67 84 XM_SPF_SoftFail 7038 3.06 4.75 2.35 85 XMLngstWrd_03 6880 2.35 4.64 1.39 86 XMNumbers 6817 3.89 4.60 3.60 87 XMLngstWrd_04 6755 2.26 4.56 1.29 88 TR_XM_SPAMCOP 6686 1.44 4.51 0.16 89 HTML_TITLE_SUBJ_DIFF 6620 2.10 4.47 1.11 90 KHOP_HELO_FCRDNS 6534 2.82 4.41 2.15 91 UPPERCASE_75_100 6523 2.08 4.40 1.11 92 T_FILL_THIS_FORM_SHORT 6366 1.86 4.30 0.84 93 BAYES_95 6006 3.15 4.05 2.77 94 HTML_IMAGE_RATIO_04 5849 4.85 3.95 5.22 95 TR_XM_DK_SendGrid 5807 3.52 3.92 3.36 96 URI_NOVOWEL 5768 2.68 3.89 2.17 97 XMStrtUSub 5696 4.94 3.84 5.40 98 XM_DIRTYINTL 5613 1.35 3.79 0.33 99 T_XMDrugObfuBody_14 5589 2.36 3.77 1.76 100 SpammyFromTLD_02 5576 1.28 3.76 0.24 101 SpammyFromTLD_01 5385 1.56 3.63 0.69 102 RCVD_IN_VALIDITY_SAFE 5380 3.94 3.63 4.07 103 RCVD_IN_MSPIKE_L3 5241 1.40 3.54 0.51 104 TR_XM_SpammyWords5 5159 2.04 3.48 1.43 105 URIBL_DBL_SPAM 4985 1.00 3.36 0.01 106 HTML_IMAGE_RATIO_06 4917 2.86 3.32 2.67 107 XM_OfRef6 4885 1.61 3.30 0.91 108 DIET_1 4840 1.18 3.27 0.31 109 PDS_OTHER_BAD_TLD 4757 1.08 3.21 0.18 110 RELAYCOUNTRY_FR 4728 1.07 3.19 0.18 111 MIME_QP_LONG_LINE 4717 7.22 3.18 8.92 112 RCVD_IN_VALIDITY_CERTIFIED 4691 3.44 3.17 3.55 113 DKIM_INVALID 4636 2.59 3.13 2.37 114 TM2_M_URI_OPT_OUT 4622 5.34 3.12 6.27 115 RCVD_IN_VALIDITY_RPBL 4543 0.93 3.07 0.03 116 XMDiploma_00 4190 1.86 2.83 1.45 117 T_TooManySym_01 4110 5.64 2.77 6.85 118 RCVD_IN_PSBL 4074 0.82 2.75 0.02 119 RCVD_IN_MSPIKE_L5 4042 0.83 2.73 0.03 120 TR_XM_SpammyWords3 3956 1.20 2.67 0.59 121 BOTNET_NORDNS 3884 0.83 2.62 0.07 122 XM_DK_Undo_01 3790 1.90 2.56 1.63 123 BAYES_40 3633 4.45 2.45 5.29 124 URI_PHP_REDIR 3613 0.72 2.44 0.00 125 XM_B_SpammyWords4 3595 1.08 2.43 0.51 126 XM_B_Unsub2 3382 1.53 2.28 1.22 127 XM_B_COVIDMETA 3362 1.28 2.27 0.86 128 XM_CamelCaseFrm001 3329 1.79 2.25 1.60 129 GOOG_STO_IMG_HTML 3325 0.66 2.24 0.00 130 XM_UB60 3242 0.69 2.19 0.07 131 HTML_SHORT_LINK_IMG_1 3236 0.66 2.18 0.02 132 TR_XM_NoHeaderRelay 3166 0.75 2.14 0.17 133 HTML_IMAGE_RATIO_08 3091 2.03 2.09 2.00 134 TR_XM_SB_Phish 3045 1.96 2.05 1.92 135 TR_XM_MSPIKECOMBO2 2998 0.69 2.02 0.13 136 RCVD_IN_IADB_LISTED 2997 3.77 2.02 4.50 137 XMBody_17 2992 0.90 2.02 0.44 138 HDRS_MISSP 2869 0.61 1.94 0.06 139 FROM_EXCESS_BASE64 2865 2.11 1.93 2.18 140 TR_Mismatch_TLD_01 2832 0.70 1.91 0.20 141 HTML_IMAGE_ONLY_04 2761 0.62 1.86 0.09 142 HTML_SHORT_CENTER 2743 0.55 1.85 0.00 143 USER_IN_DEF_DKIM_WL 2729 8.24 1.84 10.92 144 HTML_IMAGE_ONLY_08 2679 0.63 1.81 0.14 145 URI_HEX 2665 1.33 1.80 1.13 146 XMSubPhish11 2613 1.84 1.76 1.87 147 MAILING_LIST_MULTI 2602 3.07 1.76 3.62 148 RCVD_IN_IADB_SPF 2589 3.36 1.75 4.03 149 HTML_TAG_BALANCE_CENTER 2571 0.56 1.73 0.07 150 TR_XM_PHPDW 2538 0.81 1.71 0.43 151 TR_XM_PHPForged 2522 0.78 1.70 0.39 152 XM_UB99 2507 0.50 1.69 0.00 153 TR_XM_FormFill2 2466 0.77 1.66 0.39 154 XM_H_PHPOS 2453 0.76 1.66 0.38 155 RCVD_IN_IADB_DK 2359 2.97 1.59 3.55 156 SUBJ_ALL_CAPS 2315 1.62 1.56 1.65 157 XMStockSpam_06 2312 1.30 1.56 1.18 158 RCVD_IN_IADB_SENDERID 2304 3.04 1.55 3.66 159 RELAYCOUNTRY_UA 2272 0.46 1.53 0.02 160 URI_LONG_REPEAT 2213 0.44 1.49 0.00 161 BAYES_20 2194 3.51 1.48 4.36 162 HTTPS_HTTP_MISMATCH 2183 0.93 1.47 0.70 163 XMBdyGiftCard01 2178 0.94 1.47 0.72 164 MIXED_CENTER_CASE 2162 0.43 1.46 0.00 165 MIXED_HREF_CASE 2133 0.43 1.44 0.00 166 MIXED_IMG_CASE 2114 0.42 1.43 0.00 167 MIXED_AREA_CASE 2111 0.42 1.42 0.00 168 MIXED_FONT_CASE 2085 0.42 1.41 0.00 169 RELAYCOUNTRY_DE 2079 0.58 1.40 0.23 170 HTML_TAG_BALANCE_BODY 2079 0.81 1.40 0.57 171 XM_UB999 2040 0.41 1.38 0.00 172 XMSubMetaI_00 2029 0.80 1.37 0.57 173 XM_URI_RBL 2017 0.48 1.36 0.11 174 DATE_IN_PAST_06_12 2016 0.43 1.36 0.05 175 BODY_URI_ONLY 2014 0.42 1.36 0.02 176 RELAYCOUNTRY_AU 1939 0.58 1.31 0.27 177 XMHTML_After_End 1938 0.89 1.31 0.71 178 URI_GOOG_STO_SPAMMY 1903 0.38 1.28 0.00 179 HTML_FONT_TINY_NORDNS 1888 0.43 1.27 0.08 180 XM_OfRef7 1866 0.44 1.26 0.09 181 RELAYCOUNTRY_RU 1845 0.40 1.24 0.04 182 RCVD_IN_IADB_VOUCHED 1842 2.23 1.24 2.65 183 TR_Mismatch_TLD_02 1826 0.43 1.23 0.10 184 T_XMDrugObfuBody_00 1802 0.82 1.22 0.66 185 TR_XM_FormFill 1774 0.38 1.20 0.04 186 URIBL_BLACK 1756 0.38 1.18 0.05 187 XMGenDplmaNmb 1746 0.83 1.18 0.69 188 TR_Symld_Words 1742 1.57 1.18 1.73 189 TR_XM_BayesRelay 1737 0.35 1.17 0.00 190 TR_XM_COVIDMETA1 1735 0.48 1.17 0.19 191 XM_H_Long_From02 1732 0.96 1.17 0.87 192 RELAYCOUNTRY_GB 1702 0.85 1.15 0.72 193 URI_TRY_3LD 1661 0.89 1.12 0.79 194 HTML_FONT_SIZE_LARGE 1643 0.45 1.11 0.17 195 TR_BOTNET_NEGATE 1630 0.53 1.10 0.30 196 XMPhish30 1613 0.63 1.09 0.44 197 XM_B_DNDMA 1602 0.56 1.08 0.34 198 XMReplyNow 1592 0.51 1.07 0.27 199 XMBrknScrpt_02 1583 0.81 1.07 0.70 200 XM_B_SEO 1583 0.41 1.07 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 301581 88.18 94.94 85.35 2 RELAYCOUNTRY_US 276993 76.97 73.60 78.39 3 DCC_CHECK_NEGATIVE 246428 60.09 37.10 69.74 4 DKIM_SIGNED 245147 72.18 78.86 69.38 5 XM_DK_Pass 240370 70.49 76.37 68.02 6 DKIM_VALID 236783 69.59 75.73 67.01 7 XM_B_Unicode 227558 67.33 74.34 64.40 8 BAYES_50 191093 50.44 41.77 54.08 9 DKIM_VALID_AU 186961 54.13 57.06 52.91 10 XM_B_SpammyWords 158657 50.36 63.37 44.90 11 XMListUnsubscribeExists 151430 48.75 62.81 42.85 12 XM_B_Unicode3 134741 39.29 42.05 38.13 13 T_TM2_M_HEADER_IN_MSG 109274 29.28 25.34 30.92 14 DCC_CHECK 106780 39.86 62.86 30.22 15 RCVD_IN_MSPIKE_WL 102255 26.45 20.50 28.94 16 DKIM_VALID_EF 97445 27.18 26.25 27.58 17 HTML_FONT_LOW_CONTRAST 88991 26.42 29.38 25.18 18 FVGT_m_MULTI_ODD 81764 25.60 31.45 23.14 19 XMSubLong 76041 23.11 26.89 21.52 20 LOC_TINY_FONT_1 74842 24.29 31.72 21.18 21 MIME_HTML_ONLY 69407 25.48 39.40 19.64 22 RCVD_IN_MSPIKE_H2 68922 20.44 22.69 19.50 23 ALL_TRUSTED 67972 15.62 7.00 19.24 24 XM_B_SpammyWords2 67815 23.47 33.68 19.19 25 T_KAM_HTML_FONT_INVALID 58471 19.07 25.07 16.55 26 RCVD_IN_MSPIKE_H3 58118 15.76 14.13 16.45 27 XM_B_Unsub 43942 12.76 13.54 12.44 28 TooManyTo_001 43398 11.40 9.31 12.28 29 BAYES_00 43193 8.90 0.96 12.22 30 XM_Multi_Part_URI 42136 14.25 19.79 11.92 31 USER_IN_DEF_DKIM_WL 38604 8.24 1.84 10.92 32 XM_Body_Dirty_Words 37499 14.79 24.74 10.61 33 RCVD_IN_MSPIKE_H4 35699 8.91 6.05 10.10 34 XM_DKIMWhitelistDomains 32702 6.54 0.08 9.25 35 MIME_QP_LONG_LINE 31505 7.22 3.18 8.92 36 BAYES_60 30462 9.33 11.02 8.62 37 LotsOfNums_01 28494 7.40 5.81 8.06 38 XM_Evil_Numbers_Gen 26713 7.83 8.46 7.56 39 UNPARSEABLE_RELAY 26442 8.74 11.74 7.48 40 XM_DK_Undo_02 25198 16.32 38.23 7.13 41 LOTS_OF_MONEY 25035 8.72 12.62 7.08 42 IN_ZIMBRA_NJ_WHITELIST 24581 4.93 0.11 6.96 43 T_TooManySym_01 24196 5.64 2.77 6.85 44 TM2_M_URI_OPT_OUT 22162 5.34 3.12 6.27 45 BAYES_99 21881 13.34 30.39 6.19 46 HTML_IMAGE_RATIO_02 21448 6.35 7.01 6.07 47 TR_XM_DK_Bayes 21007 4.33 0.49 5.94 48 MPART_ALT_DIFF 20623 7.62 11.87 5.84 49 TR_XM_DK_Bayes1 20510 4.23 0.49 5.80 50 TR_XM_UnparsRelay 20358 7.45 11.48 5.76 51 TR_XM_DKIM_Undo 19747 12.80 30.00 5.59 52 XMStrtUSub 19072 4.94 3.84 5.40 53 BAYES_40 18704 4.45 2.45 5.29 54 HTML_IMAGE_RATIO_04 18454 4.85 3.95 5.22 55 XM_SendGrid 18453 5.59 6.48 5.22 56 BAYES_999 18185 10.66 23.79 5.15 57 TR_XM_DK_Bayes2 17272 3.56 0.40 4.89 58 XM_PDF 16078 3.45 0.83 4.55 59 XM_H_Long_From01 16019 4.70 5.10 4.53 60 RCVD_IN_IADB_LISTED 15903 3.77 2.02 4.50 61 TR_XM_SpammyWords4 15777 6.32 10.75 4.46 62 BAYES_20 15399 3.51 1.48 4.36 63 MIME_HTML_ONLY_MULTI 14924 5.01 6.89 4.22 64 BOTNET_IPINHOSTNAME 14665 6.48 12.03 4.15 65 RCVD_IN_VALIDITY_SAFE 14397 3.94 3.63 4.07 66 RCVD_IN_IADB_SPF 14246 3.36 1.75 4.03 67 T_TooManySym_02 14192 3.05 0.75 4.02 68 XM_B_SpammyWords3 14112 5.97 10.69 3.99 69 BAYES_80 13969 4.90 7.17 3.95 70 XM_H_Trusted_IP 13493 2.69 0.00 3.82 71 RELAYCOUNTRY_META 13266 9.89 24.52 3.75 72 T_REMOTE_IMAGE 12954 3.99 4.76 3.67 73 RCVD_IN_IADB_SENDERID 12934 3.04 1.55 3.66 74 XM_B_Phish_Phrases 12880 4.29 5.82 3.64 75 MAILING_LIST_MULTI 12777 3.07 1.76 3.62 76 XMNumbers 12712 3.89 4.60 3.60 77 XM_UncommonTLD01 12616 5.29 9.41 3.57 78 RCVD_IN_VALIDITY_CERTIFIED 12554 3.44 3.17 3.55 79 RCVD_IN_IADB_DK 12550 2.97 1.59 3.55 80 SHORT_URI_2 12397 2.63 0.55 3.51 81 TR_XM_DK_SendGrid 11864 3.52 3.92 3.36 82 FSL_BULK_SIG 11684 6.05 12.59 3.31 83 XMSexyCombo_05 11681 6.97 15.69 3.31 84 XMSubMetaSx_00 11129 5.34 10.55 3.15 85 HTML_MIME_NO_HTML_TAG 10390 4.94 9.72 2.94 86 TR_XM_PhishingBody 10169 4.32 7.77 2.88 87 BAYES_95 9786 3.15 4.05 2.77 88 HTML_IMAGE_RATIO_06 9439 2.86 3.32 2.67 89 RCVD_IN_IADB_VOUCHED 9366 2.23 1.24 2.65 90 TR_DCC_Bayes_99 9311 8.05 20.97 2.63 91 BAYES_05 8874 1.96 0.64 2.51 92 TooManyTo_002 8626 1.96 0.82 2.44 93 RCVD_IN_MSPIKE_H5 8438 1.78 0.32 2.39 94 DKIM_INVALID 8364 2.59 3.13 2.37 95 ANY_BOUNCE_MESSAGE 8303 1.90 0.81 2.35 96 BOUNCE_MESSAGE 8302 1.89 0.81 2.35 97 XM_SPF_SoftFail 8300 3.06 4.75 2.35 98 TM2_M_VERY_LONG_WORD 7889 3.68 7.13 2.23 99 XM_GoogleGroups 7868 3.16 5.40 2.23 100 FROM_EXCESS_BASE64 7718 2.11 1.93 2.18 101 URI_NOVOWEL 7678 2.68 3.89 2.17 102 XMBody_95 7610 1.56 0.14 2.15 103 KHOP_HELO_FCRDNS 7604 2.82 4.41 2.15 104 TVD_RCVD_IP 7207 1.48 0.14 2.04 105 MIME_HTML_MOSTLY 7139 2.94 5.15 2.02 106 HTML_IMAGE_RATIO_08 7074 2.03 2.09 2.00 107 HELO_NODOT 6858 1.53 0.54 1.94 108 HELO_NO_DOMAIN 6857 1.52 0.53 1.94 109 INVALID_MSGID 6833 1.46 0.33 1.93 110 TR_XM_SB_Phish 6777 1.96 2.05 1.92 111 XM_B_Phish66 6721 2.82 5.01 1.90 112 XMSubPhish11 6599 1.84 1.76 1.87 113 XMNoVowels 6497 1.45 0.51 1.84 114 RCVD_IN_IADB_OPTIN 6402 1.52 0.82 1.81 115 IN_HORDE_ADDRESS_BOOK 6322 1.29 0.09 1.79 116 XM_B_SpammyTLD 6274 2.83 5.34 1.78 117 T_XMDrugObfuBody_14 6233 2.36 3.77 1.76 118 TR_Symld_Words 6122 1.57 1.18 1.73 119 TooManyTo_003 5948 1.39 0.69 1.68 120 SUBJ_ALL_CAPS 5815 1.62 1.56 1.65 121 TO_MALFORMED 5784 1.17 0.06 1.64 122 XM_DK_Undo_01 5761 1.90 2.56 1.63 123 XMLngstWrd_00 5750 2.67 5.15 1.63 124 XM_CamelCaseFrm001 5660 1.79 2.25 1.60 125 XMLngstWrd_01 5558 2.60 5.05 1.57 126 T_XMDrugObfuBody_08 5291 3.39 7.90 1.50 127 XMLngstWrd_02 5228 2.51 4.98 1.48 128 XMDiploma_00 5139 1.86 2.83 1.45 129 TR_XM_SpammyRelay 5125 3.97 9.97 1.45 130 TR_XM_SpammyWords5 5056 2.04 3.48 1.43 131 XM_B_Investor 4941 2.47 5.02 1.40 132 XMLngstWrd_03 4895 2.35 4.64 1.39 133 XMSubNoVowel 4688 1.20 0.91 1.33 134 BOTNET 4643 4.65 12.60 1.31 135 XMLngstWrd_04 4575 2.26 4.56 1.29 136 XMGappySubj_01 4524 0.97 0.22 1.28 137 XMCapTrack 4399 1.07 0.64 1.24 138 T_TooManySym_03 4318 0.97 0.35 1.22 139 XM_B_Unsub2 4310 1.53 2.28 1.22 140 TooManyTo_004 4293 1.02 0.57 1.21 141 TVD_SPACE_RATIO 4292 0.91 0.20 1.21 142 XMStockSpam_06 4186 1.30 1.56 1.18 143 UNTRUSTED_Relay 3992 4.76 13.41 1.13 144 URI_HEX 3984 1.33 1.80 1.13 145 RCVD_IN_MSPIKE_BL 3945 2.88 7.09 1.12 146 TR_XM_MSPIKECOMBO 3937 2.87 7.04 1.11 147 HTML_TITLE_SUBJ_DIFF 3926 2.10 4.47 1.11 148 UPPERCASE_75_100 3924 2.08 4.40 1.11 149 DKIM_ADSP_NXDOMAIN 3815 1.00 0.80 1.08 150 XMBSHREFv2 3694 0.81 0.26 1.05 151 HTML_FONT_FACE_BAD 3693 0.94 0.69 1.05 152 RELAYCOUNTRY_CA 3564 2.50 6.05 1.01 153 TooManyTo_005 3527 0.86 0.53 1.00 154 XM_RXBody 3522 0.92 0.72 1.00 155 XMSlimDrugH 3402 2.25 5.31 0.96 156 XM_OfRef6 3212 1.61 3.30 0.91 157 DKIM_ADSP_CUSTOM_MED 3136 0.89 0.90 0.89 158 XM_E_Blogspot 3111 0.68 0.22 0.88 159 TR_XM_SpammyWords2 3070 3.64 10.24 0.87 160 XM_H_Long_From02 3068 0.96 1.17 0.87 161 XM_B_COVIDMETA 3052 1.28 2.27 0.86 162 T_FILL_THIS_FORM_SHORT 2956 1.86 4.30 0.84 163 RCVD_IN_RP_SAFE 2892 0.79 0.73 0.82 164 TR_MetaPhish_Combo_01 2819 0.79 0.77 0.80 165 URI_TRY_3LD 2778 0.89 1.12 0.79 166 TR_XM_MaxUnsub 2574 2.27 5.94 0.73 167 SHORTENED_URL_HREF 2558 0.57 0.21 0.72 168 XMBdyGiftCard01 2553 0.94 1.47 0.72 169 RCVD_IN_RP_CERTIFIED 2547 0.69 0.62 0.72 170 RELAYCOUNTRY_GB 2544 0.85 1.15 0.72 171 XMHTML_After_End 2520 0.89 1.31 0.71 172 XMBrknScrpt_02 2474 0.81 1.07 0.70 173 HTTPS_HTTP_MISMATCH 2469 0.93 1.47 0.70 174 SpammyFromTLD_01 2445 1.56 3.63 0.69 175 XMGenDplmaNmb 2435 0.83 1.18 0.69 176 XM_UB50 2390 2.26 6.04 0.68 177 T_XMDrugObfuBody_00 2329 0.82 1.22 0.66 178 HTML_IMAGE_ONLY_20 2303 0.56 0.34 0.65 179 T_TooManySym_04 2293 0.51 0.19 0.65 180 MSGID_NOFQDN1 2253 0.45 0.02 0.64 181 XM_ShortIntro_01 2197 0.71 0.93 0.62 182 XM_H_PHPMailer 2125 0.64 0.73 0.60 183 TR_XM_SpammyWords3 2071 1.20 2.67 0.59 184 XM_ProductURIs 2056 0.71 1.00 0.58 185 SHORT_HELO_AND_INLINE_IMAGE 2020 0.42 0.06 0.57 186 RCVD_IN_MSPIKE_L4 2011 0.63 0.78 0.57 187 XMSubMetaI_00 2008 0.80 1.37 0.57 188 HTML_TAG_BALANCE_BODY 2005 0.81 1.40 0.57 189 NML_ADSP_CUSTOM_MED 1967 0.58 0.63 0.56 190 RCVD_IN_BL_SPAMCOP_NET 1966 3.13 9.26 0.56 191 XM_shorewaves_Whitelist 1942 0.39 0.00 0.55 192 SHORT_URI_3 1870 0.40 0.10 0.53 193 T_OBFU_PDF_ATTACH 1852 0.41 0.14 0.52 194 XM_B_SpammyWords4 1806 1.08 2.43 0.51 195 RCVD_IN_MSPIKE_L3 1803 1.40 3.54 0.51 196 RCVD_IN_SORBS_DUL 1802 0.39 0.11 0.51 197 XM_B_COPY_HTML 1762 0.57 0.75 0.50 198 T_MANY_PILL_PRICE 1745 0.35 0.00 0.49 199 XMSubMetaSxObfu_03 1725 0.62 0.92 0.49 200 XMSexyCombo_01 1723 2.18 6.23 0.49 ----------------------------------------------------------------------