Email: 543522 Autolearn: 0 AvgScore: 2.91 AvgScanTime: 1.48 sec Spam: 158510 Autolearn: 0 AvgScore: 13.81 AvgScanTime: 1.68 sec Ham: 385012 Autolearn: 0 AvgScore: -1.58 AvgScanTime: 1.39 sec Time Spent Running SA: 223.06 hours Time Spent Processing Spam: 74.14 hours Time Spent Processing Ham: 148.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150458 89.91 94.92 87.85 2 DKIM_SIGNED 140375 70.23 88.56 62.69 3 XM_DK_Pass 135218 67.63 85.31 60.35 4 DKIM_VALID 134161 66.78 84.64 59.43 5 RELAYCOUNTRY_US 131417 77.76 82.91 75.64 6 XM_B_Unicode 128384 76.00 80.99 73.94 7 DCC_CHECK 114194 40.08 72.04 26.93 8 XM_B_SpammyWords 105773 49.58 66.73 42.52 9 XMListUnsubscribeExists 105530 48.65 66.58 41.27 10 DKIM_VALID_AU 103350 51.65 65.20 46.07 11 RCVD_IN_MSPIKE_H2 74597 35.89 47.06 31.29 12 XM_B_Unicode3 71321 46.87 44.99 47.64 13 XM_DK_Undo_02 68240 16.53 43.05 5.62 14 BAYES_50 65515 50.77 41.33 54.65 15 XM_B_SpammyWords2 58986 21.92 37.21 15.63 16 LOC_TINY_FONT_1 57408 23.67 36.22 18.50 17 HTML_FONT_LOW_CONTRAST 54384 25.55 34.31 21.94 18 TR_XM_DKIM_Undo 53768 12.71 33.92 3.98 19 BAYES_99 53471 13.71 33.73 5.47 20 FVGT_m_MULTI_ODD 52691 28.56 33.24 26.64 21 MIME_HTML_ONLY 51765 25.75 32.66 22.90 22 DKIM_VALID_EF 50074 25.53 31.59 23.04 23 T_KAM_HTML_FONT_INVALID 47137 20.45 29.74 16.63 24 DCC_CHECK_NEGATIVE 44281 59.88 27.94 73.03 25 BAYES_999 42396 10.93 26.75 4.42 26 TR_DCC_Bayes_99 37001 7.84 23.34 1.45 27 XMSubLong 36910 25.14 23.29 25.91 28 XM_Body_Dirty_Words 36318 12.87 22.91 8.73 29 T_TM2_M_HEADER_IN_MSG 34966 30.08 22.06 33.38 30 RELAYCOUNTRY_META 30841 7.92 19.46 3.17 31 XM_Multi_Part_URI 28929 12.25 18.25 9.78 32 XM_B_Unsub 27390 14.47 17.28 13.32 33 TR_XM_BayesUnsub 26681 13.18 16.83 11.67 34 UNPARSEABLE_RELAY 23809 8.80 15.02 6.24 35 TR_XM_UnparsRelay 23291 7.66 14.69 4.77 36 LOTS_OF_MONEY 21747 12.92 13.72 12.58 37 FSL_BULK_SIG 19063 5.26 12.03 2.47 38 BOTNET_IPINHOSTNAME 19000 6.39 11.99 4.09 39 TR_XM_SpammyWords4 18715 10.54 11.81 10.02 40 RCVD_IN_MSPIKE_WL 18707 12.55 11.80 12.86 41 XM_B_SpammyWords3 18206 5.57 11.49 3.14 42 TR_XM_SpammyRelay 18018 4.25 11.37 1.32 43 TR_XM_SpammyWords2 17846 3.90 11.26 0.86 44 BOTNET 16880 3.95 10.65 1.19 45 RCVD_IN_BL_SPAMCOP_NET 16590 3.47 10.47 0.58 46 XMSexyCombo_05 16343 4.65 10.31 2.32 47 RCVD_IN_MSPIKE_H3 14960 9.26 9.44 9.18 48 XM_Evil_Numbers_Gen 13776 7.56 8.69 7.09 49 MPART_ALT_DIFF 13449 5.36 8.48 4.07 50 BAYES_80 13398 5.22 8.45 3.89 51 UNTRUSTED_Relay 12809 3.12 8.08 1.07 52 XM_SendGrid 11601 4.91 7.32 3.92 53 LotsOfNums_01 11555 8.06 7.29 8.37 54 BAYES_60 11385 7.80 7.18 8.05 55 RELAYCOUNTRY_CA 11323 2.68 7.14 0.84 56 TR_XM_PhishingBody 11276 4.19 7.11 2.99 57 XM_UncommonTLD01 11077 4.35 6.99 3.27 58 TR_XM_SPAMCOP 10973 2.20 6.92 0.26 59 HTML_IMAGE_RATIO_02 10732 5.47 6.77 4.94 60 XMSubMetaSx_00 10720 4.30 6.76 3.29 61 XM_H_Long_From01 10693 5.69 6.75 5.25 62 TM2_M_VERY_LONG_WORD 9692 2.62 6.11 1.18 63 XM_B_Phish_Phrases 9578 3.40 6.04 2.31 64 MIME_HTML_ONLY_MULTI 8760 3.49 5.53 2.66 65 BAYES_95 8213 3.18 5.18 2.35 66 HTML_MIME_NO_HTML_TAG 8156 2.89 5.15 1.96 67 HTML_IMAGE_RATIO_04 8010 4.54 5.05 4.34 68 XM_SPF_SoftFail 7427 7.14 4.69 8.15 69 TooManyTo_001 7271 10.89 4.59 13.49 70 XM_B_Investor 7197 2.48 4.54 1.63 71 XM_B_Phish66 7084 2.58 4.47 1.80 72 XM_OfRef6 7055 1.93 4.45 0.90 73 TR_XM_DK_SendGrid 6837 2.98 4.31 2.43 74 T_XMDrugObfuBody_14 6629 2.39 4.18 1.65 75 XM_DIRTYINTL 6554 1.39 4.13 0.26 76 XMStrtUSub 6258 4.01 3.95 4.03 77 DKIM_INVALID 6214 3.45 3.92 3.26 78 MIME_QP_LONG_LINE 6092 4.73 3.84 5.09 79 HTML_IMAGE_RATIO_06 5956 6.55 3.76 7.70 80 XM_UB50 5874 1.56 3.71 0.68 81 XM_B_SpammyTLD 5855 2.37 3.69 1.82 82 XM_CamelCaseFrm001 5825 2.16 3.67 1.54 83 T_REMOTE_IMAGE 5734 3.56 3.62 3.54 84 XMNumbers 5662 3.78 3.57 3.87 85 TR_XM_SpammyWords5 5626 1.85 3.55 1.15 86 XMLngstWrd_00 5315 1.32 3.35 0.49 87 MIME_HTML_MOSTLY 5211 2.28 3.29 1.87 88 T_FILL_THIS_FORM_SHORT 5174 1.42 3.26 0.66 89 XM_GoogleGroups 5173 1.74 3.26 1.11 90 XMLngstWrd_01 5107 1.23 3.22 0.41 91 XMBody_17 5085 1.21 3.21 0.39 92 XMLngstWrd_02 5009 1.13 3.16 0.30 93 TM2_M_URI_OPT_OUT 4983 2.51 3.14 2.25 94 XMDiploma_00 4955 6.35 3.13 7.67 95 RCVD_IN_MSPIKE_BL 4919 1.75 3.10 1.19 96 RCVD_IN_VALIDITY_SAFE 4887 3.84 3.08 4.15 97 T_XMDrugObfuBody_08 4859 1.88 3.07 1.39 98 TR_XM_MSPIKECOMBO 4727 1.71 2.98 1.19 99 RCVD_IN_IADB_LISTED 4667 4.59 2.94 5.27 100 SpammyFromTLD_01 4619 1.33 2.91 0.68 101 XM_B_Unsub2 4608 1.65 2.91 1.13 102 XMLngstWrd_03 4593 0.99 2.90 0.21 103 HTML_TITLE_SUBJ_DIFF 4560 0.86 2.88 0.04 104 T_TooManySym_01 4555 5.27 2.87 6.25 105 UPPERCASE_75_100 4530 0.85 2.86 0.02 106 XMLngstWrd_04 4520 0.94 2.85 0.15 107 RCVD_IN_VALIDITY_RPBL 4519 0.85 2.85 0.03 108 URI_NOVOWEL 4401 2.65 2.78 2.59 109 HTML_IMAGE_RATIO_08 4212 2.61 2.66 2.59 110 XM_H_Undi_Recip 4188 0.92 2.64 0.21 111 XM_DK_Undo_01 4072 1.69 2.57 1.32 112 USER_IN_DEF_DKIM_WL 4040 8.16 2.55 10.47 113 RCVD_IN_VALIDITY_CERTIFIED 3996 3.35 2.52 3.69 114 KHOP_HELO_FCRDNS 3971 3.95 2.51 4.54 115 XMSexyCombo_01 3898 1.05 2.46 0.47 116 RCVD_IN_IADB_SPF 3866 4.03 2.44 4.68 117 XM_B_COVIDMETA 3763 0.96 2.37 0.38 118 BOTNET_NORDNS 3668 0.68 2.31 0.01 119 RCVD_IN_MSPIKE_H4 3658 3.14 2.31 3.48 120 RCVD_IN_IADB_DK 3561 3.54 2.25 4.07 121 RCVD_IN_IADB_SENDERID 3512 3.63 2.22 4.22 122 TR_XM_SB_Phish 3447 2.08 2.17 2.04 123 SUBJ_ALL_CAPS 3440 1.68 2.17 1.48 124 XM_UB99 3265 0.60 2.06 0.00 125 XM_B_SpammyWords4 3241 1.02 2.04 0.59 126 XMSubPhish11 3147 2.00 1.99 2.01 127 RCVD_IN_MSPIKE_L3 3072 1.38 1.94 1.16 128 SpammyFromTLD_02 2995 0.82 1.89 0.38 129 MAILING_LIST_MULTI 2948 2.23 1.86 2.39 130 XM_H_Long_From02 2937 1.44 1.85 1.27 131 TR_XM_MSPIKECOMBO2 2900 0.69 1.83 0.23 132 XMStockSpam_06 2812 1.05 1.77 0.76 133 FROM_EXCESS_BASE64 2781 2.16 1.75 2.33 134 MONEY_NOHTML 2769 0.56 1.75 0.08 135 RCVD_IN_IADB_VOUCHED 2767 2.92 1.75 3.41 136 URI_HEX 2763 1.16 1.74 0.92 137 TR_XM_NoHeaderRelay 2695 0.57 1.70 0.10 138 ALL_TRUSTED 2657 16.12 1.68 22.07 139 XMGenDplmaNmb 2642 0.95 1.67 0.65 140 XM_UB999 2641 0.49 1.67 0.00 141 XM_URI_RBL 2635 0.55 1.66 0.09 142 BAYES_40 2611 3.83 1.65 4.73 143 TR_XM_PHPDW 2608 0.69 1.65 0.30 144 TR_XM_PHPForged 2569 0.64 1.62 0.24 145 XMHTML_After_End 2544 0.86 1.60 0.56 146 TR_XM_Undi_Recip5 2544 0.47 1.60 0.01 147 TR_XM_FormFill2 2525 0.63 1.59 0.24 148 XM_H_PHPOS 2467 0.61 1.56 0.22 149 MPART_ALT_DIFF_COUNT 2433 0.83 1.53 0.54 150 TR_LOTS_OF_MONEY3 2415 0.59 1.52 0.20 151 T_XMHurry_00 2413 1.61 1.52 1.64 152 PDS_OTHER_BAD_TLD 2393 0.54 1.51 0.14 153 TR_XM_Undi_Recip11 2357 0.46 1.49 0.04 154 URIBL_DBL_SPAM 2319 0.43 1.46 0.01 155 T_XMDrugObfuBody_00 2313 0.79 1.46 0.51 156 UNDISC_MONEY 2229 0.41 1.41 0.01 157 TR_Symld_Words 2186 1.45 1.38 1.48 158 XM_Body_Dirty_Words_01 2170 0.49 1.37 0.13 159 XMBdyGiftCard01 2148 0.79 1.36 0.56 160 XMBrknScrpt_02 2141 0.86 1.35 0.66 161 XM_B_DynamicLink 2136 0.41 1.35 0.02 162 TR_XM_SpammyWords3 2122 0.74 1.34 0.49 163 RELAYCOUNTRY_AU 2063 0.57 1.30 0.27 164 URIBL_BLACK 2060 0.41 1.30 0.04 165 TR_XM_FormFill 2053 0.38 1.30 0.00 166 LOADSA_MONEY_COMBO 2035 0.40 1.28 0.04 167 TR_XM_MaxSPIKE 2001 0.53 1.26 0.22 168 HTML_TAG_BALANCE_BODY 1982 0.80 1.25 0.61 169 RELAYCOUNTRY_DE 1942 0.54 1.23 0.26 170 HTTPS_HTTP_MISMATCH 1914 0.86 1.21 0.72 171 TR_XM_COVIDMETA4 1822 0.50 1.15 0.23 172 RCVD_IN_PSBL 1818 0.45 1.15 0.17 173 TR_XM_COVIDMETA1 1817 0.60 1.15 0.38 174 BAYES_20 1808 2.93 1.14 3.66 175 MILLION_USD 1787 0.33 1.13 0.00 176 XMSubNoVowel 1783 1.38 1.12 1.49 177 RELAYCOUNTRY_FR 1780 0.48 1.12 0.21 178 URI_TRY_3LD 1776 0.66 1.12 0.47 179 RELAYCOUNTRY_RU 1738 0.34 1.10 0.03 180 XMPhish30 1733 0.75 1.09 0.62 181 XMMoneyMeta_00 1699 0.67 1.07 0.51 182 XFER_LOTSA_MONEY 1690 0.33 1.07 0.02 183 HTML_TAG_BALANCE_CENTER 1689 0.36 1.07 0.07 184 HTML_IMAGE_ONLY_20 1675 0.80 1.06 0.70 185 XMReplyNow 1655 0.45 1.04 0.21 186 RCVD_IN_IADB_OPTIN 1649 1.89 1.04 2.24 187 XM_Combo_Sbj 1645 0.43 1.04 0.18 188 T_Symld_Words_02 1615 0.77 1.02 0.67 189 XMClaimOffer 1579 0.40 1.00 0.15 190 TR_XM_Undi_Recip2 1551 0.30 0.98 0.02 191 XM_OfRef7 1544 0.36 0.97 0.10 192 PLING_QUERY 1512 0.59 0.95 0.44 193 MONEY_FORM_SHORT 1475 0.27 0.93 0.00 194 DKIM_ADSP_CUSTOM_MED 1453 0.83 0.92 0.79 195 HK_RANDOM_REPLYTO 1444 0.32 0.91 0.07 196 RELAYCOUNTRY_GB 1444 0.68 0.91 0.58 197 T_MONEY_PERCENT 1408 0.34 0.89 0.11 198 TR_LOTS_OF_MONEY2 1408 0.34 0.89 0.11 199 XM_B_COPY_HTML 1400 0.55 0.88 0.42 200 TR_XM_BayesRelay 1395 0.26 0.88 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 338240 89.91 94.92 87.85 2 RELAYCOUNTRY_US 291239 77.76 82.91 75.64 3 XM_B_Unicode 284686 76.00 80.99 73.94 4 DCC_CHECK_NEGATIVE 281183 59.88 27.94 73.03 5 DKIM_SIGNED 241349 70.23 88.56 62.69 6 XM_DK_Pass 232362 67.63 85.31 60.35 7 DKIM_VALID 228811 66.78 84.64 59.43 8 BAYES_50 210416 50.77 41.33 54.65 9 XM_B_Unicode3 183430 46.87 44.99 47.64 10 DKIM_VALID_AU 177361 51.65 65.20 46.07 11 XM_B_SpammyWords 163705 49.58 66.73 42.52 12 XMListUnsubscribeExists 158901 48.65 66.58 41.27 13 T_TM2_M_HEADER_IN_MSG 128513 30.08 22.06 33.38 14 RCVD_IN_MSPIKE_H2 120471 35.89 47.06 31.29 15 DCC_CHECK 103671 40.08 72.04 26.93 16 FVGT_m_MULTI_ODD 102561 28.56 33.24 26.64 17 XMSubLong 99742 25.14 23.29 25.91 18 DKIM_VALID_EF 88697 25.53 31.59 23.04 19 MIME_HTML_ONLY 88174 25.75 32.66 22.90 20 ALL_TRUSTED 84969 16.12 1.68 22.07 21 HTML_FONT_LOW_CONTRAST 84487 25.55 34.31 21.94 22 LOC_TINY_FONT_1 71234 23.67 36.22 18.50 23 T_KAM_HTML_FONT_INVALID 64016 20.45 29.74 16.63 24 XM_B_SpammyWords2 60175 21.92 37.21 15.63 25 BAYES_00 57221 10.74 0.74 14.86 26 TooManyTo_001 51935 10.89 4.59 13.49 27 XM_B_Unsub 51278 14.47 17.28 13.32 28 RCVD_IN_MSPIKE_WL 49506 12.55 11.80 12.86 29 LOTS_OF_MONEY 48450 12.92 13.72 12.58 30 IN_ZIMBRA_NJ_WHITELIST 47132 8.70 0.10 12.24 31 TR_XM_BayesUnsub 44934 13.18 16.83 11.67 32 USER_IN_DEF_DKIM_WL 40298 8.16 2.55 10.47 33 TR_XM_SpammyWords4 38568 10.54 11.81 10.02 34 XM_Multi_Part_URI 37656 12.25 18.25 9.78 35 RCVD_IN_MSPIKE_H3 35347 9.26 9.44 9.18 36 XM_Body_Dirty_Words 33612 12.87 22.91 8.73 37 LotsOfNums_01 32231 8.06 7.29 8.37 38 XM_SPF_SoftFail 31379 7.14 4.69 8.15 39 BAYES_60 31012 7.80 7.18 8.05 40 HTML_IMAGE_RATIO_06 29639 6.55 3.76 7.70 41 XMDiploma_00 29533 6.35 3.13 7.67 42 XM_Evil_Numbers_Gen 27296 7.56 8.69 7.09 43 HTML_FONT_FACE_BAD 26454 5.07 0.68 6.87 44 XM_DKIMWhitelistDomains 26365 4.87 0.07 6.85 45 T_TooManySym_01 24068 5.27 2.87 6.25 46 UNPARSEABLE_RELAY 24022 8.80 15.02 6.24 47 XM_DK_Undo_02 21629 16.53 43.05 5.62 48 BAYES_99 21060 13.71 33.73 5.47 49 RCVD_IN_IADB_LISTED 20293 4.59 2.94 5.27 50 XM_H_Long_From01 20231 5.69 6.75 5.25 51 TR_XM_DK_Bayes 19878 3.83 0.60 5.16 52 MIME_QP_LONG_LINE 19613 4.73 3.84 5.09 53 TR_XM_DK_Bayes1 19321 3.73 0.59 5.02 54 HTML_IMAGE_RATIO_02 19005 5.47 6.77 4.94 55 TR_XM_UnparsRelay 18367 7.66 14.69 4.77 56 BAYES_40 18209 3.83 1.65 4.73 57 RCVD_IN_IADB_SPF 18031 4.03 2.44 4.68 58 KHOP_HELO_FCRDNS 17488 3.95 2.51 4.54 59 BAYES_999 17012 10.93 26.75 4.42 60 TR_XM_DK_Bayes2 16982 3.27 0.50 4.41 61 HTML_IMAGE_RATIO_04 16693 4.54 5.05 4.34 62 XM_PDF 16525 3.29 0.87 4.29 63 RCVD_IN_IADB_SENDERID 16243 3.63 2.22 4.22 64 RCVD_IN_VALIDITY_SAFE 15974 3.84 3.08 4.15 65 BOTNET_IPINHOSTNAME 15750 6.39 11.99 4.09 66 MPART_ALT_DIFF 15687 5.36 8.48 4.07 67 RCVD_IN_IADB_DK 15671 3.54 2.25 4.07 68 XMStrtUSub 15534 4.01 3.95 4.03 69 TR_XM_DKIM_Undo 15307 12.71 33.92 3.98 70 XM_SendGrid 15075 4.91 7.32 3.92 71 BAYES_80 14966 5.22 8.45 3.89 72 XMNumbers 14893 3.78 3.57 3.87 73 RCVD_IN_VALIDITY_CERTIFIED 14189 3.35 2.52 3.69 74 BAYES_20 14097 2.93 1.14 3.66 75 T_TooManySym_02 13826 2.79 0.84 3.59 76 T_REMOTE_IMAGE 13613 3.56 3.62 3.54 77 RCVD_IN_MSPIKE_H4 13390 3.14 2.31 3.48 78 RCVD_IN_IADB_VOUCHED 13120 2.92 1.75 3.41 79 XMSubMetaSx_00 12662 4.30 6.76 3.29 80 XM_UncommonTLD01 12588 4.35 6.99 3.27 81 DKIM_INVALID 12538 3.45 3.92 3.26 82 RELAYCOUNTRY_META 12219 7.92 19.46 3.17 83 XM_B_SpammyWords3 12089 5.57 11.49 3.14 84 XM_H_Trusted_IP 11916 2.19 0.00 3.09 85 TR_XM_PhishingBody 11502 4.19 7.11 2.99 86 MIME_HTML_ONLY_MULTI 10232 3.49 5.53 2.66 87 URI_NOVOWEL 9989 2.65 2.78 2.59 88 HTML_IMAGE_RATIO_08 9977 2.61 2.66 2.59 89 FSL_BULK_SIG 9517 5.26 12.03 2.47 90 TR_XM_DK_SendGrid 9345 2.98 4.31 2.43 91 ANY_BOUNCE_MESSAGE 9261 1.90 0.66 2.41 92 BOUNCE_MESSAGE 9260 1.90 0.66 2.41 93 MAILING_LIST_MULTI 9195 2.23 1.86 2.39 94 BAYES_95 9046 3.18 5.18 2.35 95 BAYES_05 8981 1.82 0.59 2.33 96 FROM_EXCESS_BASE64 8961 2.16 1.75 2.33 97 XMSexyCombo_05 8950 4.65 10.31 2.32 98 XM_B_Phish_Phrases 8885 3.40 6.04 2.31 99 TM2_M_URI_OPT_OUT 8668 2.51 3.14 2.25 100 RCVD_IN_IADB_OPTIN 8614 1.89 1.04 2.24 101 TR_XM_SB_Phish 7853 2.08 2.17 2.04 102 XMSubPhish11 7729 2.00 1.99 2.01 103 TooManyTo_002 7619 1.59 0.64 1.98 104 HTML_MIME_NO_HTML_TAG 7539 2.89 5.15 1.96 105 MIME_HTML_MOSTLY 7198 2.28 3.29 1.87 106 XM_B_SpammyTLD 7005 2.37 3.69 1.82 107 TVD_RCVD_IP 6996 1.35 0.22 1.82 108 XM_B_Phish66 6923 2.58 4.47 1.80 109 INVALID_MSGID 6892 1.31 0.15 1.79 110 HELO_NODOT 6396 1.34 0.55 1.66 111 HELO_NO_DOMAIN 6389 1.33 0.54 1.66 112 T_XMDrugObfuBody_14 6352 2.39 4.18 1.65 113 T_XMHurry_00 6327 1.61 1.52 1.64 114 XM_B_Investor 6263 2.48 4.54 1.63 115 IN_HORDE_ADDRESS_BOOK 6257 1.19 0.12 1.63 116 XM_CamelCaseFrm001 5934 2.16 3.67 1.54 117 TO_MALFORMED 5919 1.09 0.01 1.54 118 XMSubNoVowel 5721 1.38 1.12 1.49 119 SUBJ_ALL_CAPS 5716 1.68 2.17 1.48 120 TR_Symld_Words 5711 1.45 1.38 1.48 121 TR_DCC_Bayes_99 5600 7.84 23.34 1.45 122 T_TooManySym_03 5431 1.11 0.37 1.41 123 T_XMDrugObfuBody_08 5350 1.88 3.07 1.39 124 XMGappySubj_01 5211 1.03 0.23 1.35 125 XM_DK_Undo_01 5092 1.69 2.57 1.32 126 TR_XM_SpammyRelay 5078 4.25 11.37 1.32 127 TooManyTo_003 4928 1.06 0.52 1.28 128 XM_H_Long_From02 4902 1.44 1.85 1.27 129 RCVD_IN_MSPIKE_BL 4595 1.75 3.10 1.19 130 BOTNET 4593 3.95 10.65 1.19 131 TR_XM_MSPIKECOMBO 4589 1.71 2.98 1.19 132 XMBSHREFv2 4582 0.95 0.37 1.19 133 TM2_M_VERY_LONG_WORD 4555 2.62 6.11 1.18 134 RCVD_IN_MSPIKE_L3 4450 1.38 1.94 1.16 135 TR_XM_SpammyWords5 4429 1.85 3.55 1.15 136 SHORTENED_URL_HREF 4371 0.83 0.09 1.14 137 XM_B_Unsub2 4357 1.65 2.91 1.13 138 XM_GoogleGroups 4277 1.74 3.26 1.11 139 UNTRUSTED_Relay 4132 3.12 8.08 1.07 140 XMCapTrack 4051 0.85 0.35 1.05 141 TooManyTo_004 3555 0.78 0.43 0.92 142 TVD_SPACE_RATIO 3535 0.68 0.11 0.92 143 URI_HEX 3529 1.16 1.74 0.92 144 XM_OfRef6 3459 1.93 4.45 0.90 145 TR_XM_SpammyWords2 3329 3.90 11.26 0.86 146 XM_B_SEO 3312 0.81 0.67 0.86 147 RELAYCOUNTRY_CA 3230 2.68 7.14 0.84 148 RCVD_IN_RP_SAFE 3221 0.77 0.62 0.84 149 DKIM_ADSP_CUSTOM_MED 3042 0.83 0.92 0.79 150 FVGT_m_MULTI_ODD_EMAIL 2956 0.57 0.09 0.77 151 XMStockSpam_06 2908 1.05 1.77 0.76 152 TooManyTo_005 2906 0.65 0.39 0.75 153 RCVD_IN_RP_CERTIFIED 2850 0.67 0.50 0.74 154 TVD_SPACE_RATIO_MINFP 2793 0.57 0.18 0.73 155 HTTPS_HTTP_MISMATCH 2758 0.86 1.21 0.72 156 HTML_IMAGE_ONLY_20 2686 0.80 1.06 0.70 157 SpammyFromTLD_01 2625 1.33 2.91 0.68 158 XM_UB50 2600 1.56 3.71 0.68 159 T_Symld_Words_02 2587 0.77 1.02 0.67 160 TR_MetaPhish_Combo_01 2580 0.72 0.84 0.67 161 XMBody_95 2563 0.53 0.18 0.67 162 XMBrknScrpt_02 2532 0.86 1.35 0.66 163 T_FILL_THIS_FORM_SHORT 2530 1.42 3.26 0.66 164 XMGenDplmaNmb 2509 0.95 1.67 0.65 165 XMPhish30 2370 0.75 1.09 0.62 166 HTML_TAG_BALANCE_BODY 2341 0.80 1.25 0.61 167 MSGID_NOFQDN1 2329 0.43 0.01 0.60 168 XM_B_SpammyWords4 2276 1.02 2.04 0.59 169 RCVD_IN_BL_SPAMCOP_NET 2249 3.47 10.47 0.58 170 RELAYCOUNTRY_GB 2237 0.68 0.91 0.58 171 XM_ShortIntro_01 2232 0.51 0.32 0.58 172 XMSubMetaSxObfu_03 2212 0.56 0.54 0.57 173 XM_H_PHPMailer 2181 0.64 0.83 0.57 174 FROM_GOV_DKIM_AU 2173 0.48 0.29 0.56 175 XMBdyGiftCard01 2159 0.79 1.36 0.56 176 XMHTML_After_End 2143 0.86 1.60 0.56 177 MPART_ALT_DIFF_COUNT 2074 0.83 1.53 0.54 178 T_OBFU_PDF_ATTACH 1984 0.40 0.12 0.52 179 T_XMDrugObfuBody_00 1981 0.79 1.46 0.51 180 SHORT_HELO_AND_INLINE_IMAGE 1975 0.38 0.06 0.51 181 NML_ADSP_CUSTOM_MED 1974 0.60 0.80 0.51 182 XMMoneyMeta_00 1949 0.67 1.07 0.51 183 XM_ProductURIs 1930 0.58 0.76 0.50 184 XMSubMetaSxObfu_02 1906 0.52 0.57 0.50 185 TR_XM_SpammyWords3 1885 0.74 1.34 0.49 186 XMLngstWrd_00 1881 1.32 3.35 0.49 187 XMHTMLBadTable_001 1854 0.59 0.86 0.48 188 XMSexyCombo_01 1796 1.05 2.46 0.47 189 URI_TRY_3LD 1796 0.66 1.12 0.47 190 RCVD_IN_SORBS_DUL 1705 0.36 0.14 0.44 191 PLING_QUERY 1695 0.59 0.95 0.44 192 FORGED_GMAIL_RCVD 1688 0.55 0.81 0.44 193 XM_B_COPY_HTML 1612 0.55 0.88 0.42 194 XMLngstWrd_01 1568 1.23 3.22 0.41 195 BASE64_LENGTH_79_INF 1567 0.34 0.19 0.41 196 XM_shorewaves_Whitelist 1531 0.28 0.00 0.40 197 XMDateMe_00 1501 0.37 0.32 0.39 198 XMBody_17 1498 1.21 3.21 0.39 199 XMNoVowels 1489 0.35 0.25 0.39 200 XM_B_COVIDMETA 1469 0.96 2.37 0.38 ----------------------------------------------------------------------