Email: 511220 Autolearn: 0 AvgScore: 2.92 AvgScanTime: 1.36 sec Spam: 159548 Autolearn: 0 AvgScore: 14.21 AvgScanTime: 1.50 sec Ham: 351672 Autolearn: 0 AvgScore: -2.19 AvgScanTime: 1.30 sec Time Spent Running SA: 193.40 hours Time Spent Processing Spam: 66.46 hours Time Spent Processing Ham: 126.94 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152761 89.72 95.75 86.99 2 DKIM_SIGNED 141471 71.10 88.67 63.13 3 XM_DK_Pass 137034 68.84 85.89 61.11 4 DKIM_VALID 135528 67.96 84.94 60.26 5 RELAYCOUNTRY_US 134463 80.14 84.28 78.27 6 XM_B_Unicode 123068 73.89 77.14 72.42 7 DCC_CHECK 111996 40.47 70.20 26.99 8 XMListUnsubscribeExists 109486 51.84 68.62 44.22 9 XM_B_SpammyWords 104736 50.37 65.65 43.45 10 DKIM_VALID_AU 101293 52.15 63.49 47.00 11 RCVD_IN_MSPIKE_H2 74100 35.78 46.44 30.94 12 BAYES_50 71596 49.67 44.87 51.85 13 XM_B_Unicode3 67688 44.34 42.42 45.20 14 XM_DK_Undo_02 66565 17.28 41.72 6.19 15 FVGT_m_MULTI_ODD 59083 26.88 37.03 22.28 16 MIME_HTML_ONLY 58425 24.40 36.62 18.85 17 XM_B_SpammyWords2 56670 21.75 35.52 15.50 18 TR_XM_DKIM_Undo 55174 13.74 34.58 4.28 19 LOC_TINY_FONT_1 51728 23.69 32.42 19.73 20 BAYES_99 49552 15.02 31.06 7.75 21 HTML_FONT_LOW_CONTRAST 48558 27.20 30.43 25.73 22 DKIM_VALID_EF 47856 25.80 29.99 23.90 23 DCC_CHECK_NEGATIVE 47504 59.49 29.77 72.97 24 T_KAM_HTML_FONT_INVALID 42279 20.23 26.50 17.39 25 BAYES_999 39156 12.36 24.54 6.83 26 XM_Body_Dirty_Words 36254 14.21 22.72 10.35 27 TR_DCC_Bayes_99 33016 7.57 20.69 1.61 28 XMSubLong 32839 20.30 20.58 20.17 29 RELAYCOUNTRY_META 31589 8.34 19.80 3.15 30 T_TM2_M_HEADER_IN_MSG 30494 27.66 19.11 31.54 31 XM_Multi_Part_URI 27789 12.44 17.42 10.18 32 XM_B_Unsub 25143 10.70 15.76 8.41 33 LOTS_OF_MONEY 25084 14.11 15.72 13.37 34 TR_XM_BayesUnsub 24334 9.33 15.25 6.64 35 RCVD_IN_MSPIKE_WL 23220 14.11 14.55 13.91 36 BOTNET_IPINHOSTNAME 22445 7.29 14.07 4.22 37 MPART_ALT_DIFF 21399 7.70 13.41 5.10 38 UNPARSEABLE_RELAY 21339 8.65 13.37 6.51 39 TR_XM_SpammyWords4 21112 11.14 13.23 10.19 40 TR_XM_UnparsRelay 20862 7.56 13.08 5.05 41 RCVD_IN_MSPIKE_H3 20850 10.79 13.07 9.76 42 RCVD_IN_BL_SPAMCOP_NET 18946 4.08 11.87 0.54 43 XM_B_SpammyWords3 17673 5.77 11.08 3.36 44 XMSexyCombo_05 17300 5.66 10.84 3.31 45 FSL_BULK_SIG 17104 5.27 10.72 2.79 46 TR_XM_SpammyWords2 16857 3.91 10.57 0.89 47 BOTNET 16553 4.07 10.37 1.20 48 TR_XM_SpammyRelay 16344 4.09 10.24 1.30 49 MIME_HTML_ONLY_MULTI 16241 5.66 10.18 3.60 50 HTML_MIME_NO_HTML_TAG 15835 4.61 9.92 2.20 51 TM2_M_VERY_LONG_WORD 15439 3.79 9.68 1.12 52 XM_UncommonTLD01 13836 4.94 8.67 3.25 53 BAYES_80 12909 5.26 8.09 3.97 54 LotsOfNums_01 12125 7.72 7.60 7.78 55 XMLngstWrd_00 11966 2.77 7.50 0.62 56 XM_GoogleGroups 11941 3.03 7.48 1.02 57 UNTRUSTED_Relay 11923 3.12 7.47 1.15 58 XMLngstWrd_01 11895 2.67 7.46 0.49 59 XMLngstWrd_02 11799 2.55 7.40 0.35 60 XM_Evil_Numbers_Gen 11794 7.63 7.39 7.73 61 UPPERCASE_75_100 11591 2.29 7.26 0.03 62 HTML_TITLE_SUBJ_DIFF 11399 2.26 7.14 0.05 63 BAYES_60 11361 7.91 7.12 8.26 64 XMLngstWrd_03 11361 2.38 7.12 0.23 65 XMLngstWrd_04 11275 2.33 7.07 0.18 66 XM_SendGrid 10764 4.97 6.75 4.17 67 XMSubMetaSx_00 10478 4.17 6.57 3.08 68 RELAYCOUNTRY_CA 10410 2.61 6.52 0.83 69 TR_XM_SPAMCOP 10336 2.16 6.48 0.21 70 HTML_IMAGE_RATIO_02 9852 5.78 6.17 5.59 71 XM_B_SpammyTLD 9725 3.23 6.10 1.93 72 XM_H_Long_From01 9690 5.25 6.07 4.87 73 RCVD_IN_MSPIKE_BL 9277 2.67 5.81 1.25 74 TR_XM_PhishingBody 9155 3.71 5.74 2.79 75 TR_XM_MSPIKECOMBO 9065 2.63 5.68 1.24 76 XM_B_Phish_Phrases 8958 3.73 5.61 2.88 77 XM_B_Investor 8759 2.56 5.49 1.23 78 BAYES_95 7715 3.07 4.84 2.27 79 T_REMOTE_IMAGE 7294 3.71 4.57 3.31 80 TR_XM_SpammyWords5 6984 2.08 4.38 1.04 81 MIME_HTML_MOSTLY 6876 2.61 4.31 1.83 82 TooManyTo_001 6874 6.68 4.31 7.75 83 T_XMDrugObfuBody_14 6868 2.55 4.30 1.75 84 HTML_IMAGE_RATIO_04 6801 5.10 4.26 5.47 85 TR_XM_SpammyWords3 6645 1.63 4.16 0.49 86 URIBL_DBL_SPAM 6630 1.30 4.16 0.01 87 TR_XM_DK_SendGrid 6487 3.07 4.07 2.62 88 XMNumbers 6371 4.01 3.99 4.02 89 MIME_QP_LONG_LINE 6192 4.33 3.88 4.53 90 XM_SPF_SoftFail 6059 6.89 3.80 8.29 91 DKIM_INVALID 5943 3.14 3.72 2.87 92 SUBJ_ALL_CAPS 5888 2.30 3.69 1.67 93 XM_DIRTYINTL 5809 1.34 3.64 0.30 94 XM_OfRef6 5802 1.65 3.64 0.75 95 XM_B_Phish66 5742 2.24 3.60 1.63 96 SpammyFromTLD_01 5626 1.49 3.53 0.57 97 URI_PHP_REDIR 5500 1.08 3.45 0.00 98 RCVD_IN_MSPIKE_L4 5486 1.38 3.44 0.45 99 XM_UB50 5358 1.55 3.36 0.73 100 XMStrtUSub 5338 3.83 3.35 4.05 101 RCVD_IN_VALIDITY_SAFE 5190 3.80 3.25 4.05 102 PDS_OTHER_BAD_TLD 5107 1.12 3.20 0.17 103 XM_CamelCaseFrm001 5009 2.18 3.14 1.75 104 T_FILL_THIS_FORM_SHORT 4935 1.49 3.09 0.76 105 T_XMDrugObfuBody_08 4926 1.80 3.09 1.21 106 RCVD_IN_IADB_LISTED 4920 4.23 3.08 4.75 107 XM_DK_Undo_01 4875 1.88 3.06 1.35 108 KHOP_HELO_FCRDNS 4741 4.15 2.97 4.68 109 HTML_IMAGE_RATIO_06 4641 6.54 2.91 8.18 110 RCVD_IN_VALIDITY_CERTIFIED 4391 3.31 2.75 3.57 111 RCVD_IN_IADB_SPF 4351 3.74 2.73 4.20 112 URI_NOVOWEL 4223 2.51 2.65 2.45 113 XM_H_Undi_Recip 4222 0.96 2.65 0.19 114 RCVD_IN_VALIDITY_RPBL 4191 0.85 2.63 0.04 115 XMDiploma_00 4184 1.65 2.62 1.22 116 TM2_M_URI_OPT_OUT 4123 2.60 2.58 2.60 117 RCVD_IN_IADB_SENDERID 4058 3.38 2.54 3.76 118 SpammyFromTLD_02 4056 1.16 2.54 0.53 119 RCVD_IN_IADB_DK 4040 3.28 2.53 3.62 120 T_TooManySym_01 4020 5.11 2.52 6.28 121 XMBody_17 3915 1.02 2.45 0.36 122 XM_B_Unsub2 3910 1.70 2.45 1.37 123 BOTNET_NORDNS 3864 0.76 2.42 0.01 124 XM_B_SpammyWords4 3806 1.07 2.39 0.47 125 HTML_IMAGE_RATIO_08 3587 2.56 2.25 2.70 126 XMSexyCombo_01 3370 1.04 2.11 0.55 127 TR_XM_SB_Phish 3354 2.06 2.10 2.05 128 ALL_TRUSTED 3342 13.99 2.09 19.39 129 TR_XM_Undi_Recip5 3325 0.66 2.08 0.01 130 USER_IN_DEF_DKIM_WL 3307 8.23 2.07 11.03 131 XM_B_COVIDMETA 3248 1.07 2.04 0.63 132 XMSubPhish11 3134 2.01 1.96 2.02 133 T_XMDrugObfuBody_00 3069 1.20 1.92 0.88 134 TR_XM_PHPDW 2985 0.79 1.87 0.30 135 TR_XM_PHPForged 2956 0.83 1.85 0.37 136 UNDISC_MONEY 2940 0.58 1.84 0.01 137 TR_XM_FormFill2 2913 0.74 1.83 0.25 138 XM_H_PHPOS 2895 0.73 1.81 0.24 139 RELAYCOUNTRY_AU 2870 0.74 1.80 0.26 140 FROM_EXCESS_BASE64 2828 2.22 1.77 2.42 141 TR_Sbj_FN_Bdy 2803 0.64 1.76 0.13 142 TR_XM_COVIDMETA4 2755 0.68 1.73 0.20 143 XM_OfRef7 2702 0.58 1.69 0.07 144 XM_UB99 2590 0.51 1.62 0.00 145 MONEY_NOHTML 2579 0.56 1.62 0.08 146 URI_HEX 2572 1.33 1.61 1.20 147 TR_LOTS_OF_MONEY3 2501 0.70 1.57 0.31 148 BAYES_40 2466 3.53 1.55 4.43 149 TR_XM_Undi_RecipCombo2 2455 0.48 1.54 0.00 150 RCVD_IN_IADB_VOUCHED 2449 2.59 1.53 3.07 151 TR_XM_MSPIKECOMBO2 2448 0.72 1.53 0.35 152 T_XMHurry_00 2425 0.74 1.52 0.39 153 HK_RANDOM_REPLYTO 2394 0.52 1.50 0.07 154 HTTPS_HTTP_MISMATCH 2371 0.92 1.49 0.67 155 XMGenDplmaNmb 2367 0.97 1.48 0.73 156 LOADSA_MONEY_COMBO 2366 0.54 1.48 0.11 157 XMStockSpam_06 2360 1.32 1.48 1.24 158 TR_XM_FormFill 2309 0.46 1.45 0.01 159 TR_XM_Undi_Recip11 2271 0.47 1.42 0.04 160 FILL_THIS_FORM 2246 0.65 1.41 0.30 161 RCVD_IN_MSPIKE_H4 2180 3.07 1.37 3.84 162 HTML_IMAGE_ONLY_20 2178 1.13 1.37 1.02 163 XM_Body_Dirty_Words_01 2157 0.53 1.35 0.16 164 XM_B_DynamicLink 2133 0.44 1.34 0.03 165 MAILING_LIST_MULTI 2132 2.06 1.34 2.39 166 XMBrknScrpt_02 2132 0.80 1.34 0.56 167 XMBdyGiftCard01 2120 0.82 1.33 0.59 168 HTML_TAG_BALANCE_BODY 2067 0.80 1.30 0.57 169 RCVD_IN_MSPIKE_L3 2065 0.94 1.29 0.78 170 TR_Caps_n_Bayes_99 2047 0.49 1.28 0.13 171 XFER_LOTSA_MONEY 2046 0.42 1.28 0.02 172 XM_UB999 2025 0.40 1.27 0.00 173 TR_XM_NoHeaderRelay 2016 0.46 1.26 0.10 174 MONEY_FORM 2003 0.40 1.26 0.01 175 MILLION_USD 1998 0.40 1.25 0.01 176 XM_B_SEO 1995 1.03 1.25 0.93 177 XM_URI_RBL 1978 0.46 1.24 0.10 178 TR_Symld_Words 1961 1.46 1.23 1.57 179 XMHTML_After_End 1946 0.79 1.22 0.59 180 TR_XM_COVIDMETA1 1921 0.54 1.20 0.24 181 TR_XM_SEO4 1878 0.42 1.18 0.08 182 RELAYCOUNTRY_DE 1875 0.56 1.18 0.29 183 XM_H_Long_From02 1852 0.99 1.16 0.92 184 RELAYCOUNTRY_RU 1847 0.38 1.16 0.02 185 RELAYCOUNTRY_IN 1816 0.40 1.14 0.06 186 XMReplyNow 1797 0.50 1.13 0.21 187 URI_TRY_3LD 1777 0.74 1.11 0.56 188 HTML_FONT_TINY_NORDNS 1773 0.39 1.11 0.06 189 HTML_TAG_BALANCE_CENTER 1771 0.40 1.11 0.07 190 TR_XM_Undi_Recip9 1768 0.35 1.11 0.00 191 BAYES_20 1763 2.73 1.10 3.47 192 RCVD_IN_PSBL 1752 0.53 1.10 0.27 193 URIBL_BLACK 1749 0.37 1.10 0.04 194 T_Symld_Words_02 1687 0.61 1.06 0.41 195 REMOVE_BEFORE_LINK 1677 0.47 1.05 0.21 196 XM_ProductURIs 1641 0.77 1.03 0.66 197 ADVANCE_FEE_5_NEW_FRM_MNY 1631 0.32 1.02 0.00 198 DATE_IN_PAST_12_24 1604 0.33 1.01 0.03 199 TR_MetaPhish_Combo_01 1594 0.83 1.00 0.75 200 XMClaimOffer 1561 0.35 0.98 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 305922 89.72 95.75 86.99 2 RELAYCOUNTRY_US 275254 80.14 84.28 78.27 3 DCC_CHECK_NEGATIVE 256631 59.49 29.77 72.97 4 XM_B_Unicode 254680 73.89 77.14 72.42 5 DKIM_SIGNED 221997 71.10 88.67 63.13 6 XM_DK_Pass 214893 68.84 85.89 61.11 7 DKIM_VALID 211903 67.96 84.94 60.26 8 BAYES_50 182329 49.67 44.87 51.85 9 DKIM_VALID_AU 165297 52.15 63.49 47.00 10 XM_B_Unicode3 158964 44.34 42.42 45.20 11 XMListUnsubscribeExists 155525 51.84 68.62 44.22 12 XM_B_SpammyWords 152786 50.37 65.65 43.45 13 T_TM2_M_HEADER_IN_MSG 110911 27.66 19.11 31.54 14 RCVD_IN_MSPIKE_H2 108804 35.78 46.44 30.94 15 DCC_CHECK 94902 40.47 70.20 26.99 16 HTML_FONT_LOW_CONTRAST 90488 27.20 30.43 25.73 17 DKIM_VALID_EF 84050 25.80 29.99 23.90 18 FVGT_m_MULTI_ODD 78342 26.88 37.03 22.28 19 XMSubLong 70939 20.30 20.58 20.17 20 LOC_TINY_FONT_1 69377 23.69 32.42 19.73 21 ALL_TRUSTED 68185 13.99 2.09 19.39 22 MIME_HTML_ONLY 66289 24.40 36.62 18.85 23 T_KAM_HTML_FONT_INVALID 61139 20.23 26.50 17.39 24 BAYES_00 55380 11.04 0.67 15.75 25 XM_B_SpammyWords2 54508 21.75 35.52 15.50 26 RCVD_IN_MSPIKE_WL 48903 14.11 14.55 13.91 27 LOTS_OF_MONEY 47034 14.11 15.72 13.37 28 IN_ZIMBRA_NJ_WHITELIST 44007 8.64 0.10 12.51 29 USER_IN_DEF_DKIM_WL 38776 8.23 2.07 11.03 30 XM_Body_Dirty_Words 36390 14.21 22.72 10.35 31 TR_XM_SpammyWords4 35837 11.14 13.23 10.19 32 XM_Multi_Part_URI 35799 12.44 17.42 10.18 33 RCVD_IN_MSPIKE_H3 34325 10.79 13.07 9.76 34 XM_B_Unsub 29566 10.70 15.76 8.41 35 XM_SPF_SoftFail 29167 6.89 3.80 8.29 36 BAYES_60 29058 7.91 7.12 8.26 37 HTML_IMAGE_RATIO_06 28777 6.54 2.91 8.18 38 HTML_FONT_FACE_BAD 27709 5.62 0.65 7.88 39 LotsOfNums_01 27353 7.72 7.60 7.78 40 TooManyTo_001 27256 6.68 4.31 7.75 41 BAYES_99 27241 15.02 31.06 7.75 42 XM_DKIMWhitelistDomains 27211 5.36 0.10 7.74 43 XM_Evil_Numbers_Gen 27201 7.63 7.39 7.73 44 BAYES_999 24031 12.36 24.54 6.83 45 TR_XM_BayesUnsub 23346 9.33 15.25 6.64 46 UNPARSEABLE_RELAY 22884 8.65 13.37 6.51 47 T_TooManySym_01 22100 5.11 2.52 6.28 48 XM_DK_Undo_02 21774 17.28 41.72 6.19 49 TR_XM_DK_Bayes 19819 4.03 0.49 5.64 50 HTML_IMAGE_RATIO_02 19674 5.78 6.17 5.59 51 XM_H_Trusted_IP 19669 3.85 0.00 5.59 52 TR_XM_DK_Bayes1 19426 3.95 0.48 5.52 53 HTML_IMAGE_RATIO_04 19252 5.10 4.26 5.47 54 MPART_ALT_DIFF 17950 7.70 13.41 5.10 55 TR_XM_UnparsRelay 17772 7.56 13.08 5.05 56 TR_XM_DK_Bayes2 17144 3.49 0.43 4.87 57 XM_H_Long_From01 17130 5.25 6.07 4.87 58 RCVD_IN_IADB_LISTED 16714 4.23 3.08 4.75 59 KHOP_HELO_FCRDNS 16461 4.15 2.97 4.68 60 MIME_QP_LONG_LINE 15933 4.33 3.88 4.53 61 XM_PDF 15849 3.34 0.77 4.51 62 BAYES_40 15580 3.53 1.55 4.43 63 TR_XM_DKIM_Undo 15044 13.74 34.58 4.28 64 BOTNET_IPINHOSTNAME 14846 7.29 14.07 4.22 65 RCVD_IN_IADB_SPF 14754 3.74 2.73 4.20 66 XM_SendGrid 14655 4.97 6.75 4.17 67 RCVD_IN_VALIDITY_SAFE 14244 3.80 3.25 4.05 68 XMStrtUSub 14228 3.83 3.35 4.05 69 XMNumbers 14121 4.01 3.99 4.02 70 BAYES_80 13959 5.26 8.09 3.97 71 T_TooManySym_02 13958 2.97 0.77 3.97 72 RCVD_IN_MSPIKE_H4 13496 3.07 1.37 3.84 73 RCVD_IN_IADB_SENDERID 13216 3.38 2.54 3.76 74 ANY_BOUNCE_MESSAGE 13212 2.87 0.92 3.76 75 BOUNCE_MESSAGE 13211 2.87 0.92 3.76 76 BASE64_LENGTH_79_INF 13073 2.60 0.15 3.72 77 RCVD_IN_IADB_DK 12741 3.28 2.53 3.62 78 MIME_HTML_ONLY_MULTI 12673 5.66 10.18 3.60 79 RCVD_IN_VALIDITY_CERTIFIED 12549 3.31 2.75 3.57 80 NUMERIC_HTTP_ADDR 12489 2.53 0.28 3.55 81 BAYES_20 12215 2.73 1.10 3.47 82 XM_B_SpammyWords3 11800 5.77 11.08 3.36 83 T_REMOTE_IMAGE 11647 3.71 4.57 3.31 84 XMSexyCombo_05 11630 5.66 10.84 3.31 85 NORMAL_HTTP_TO_IP 11614 2.31 0.12 3.30 86 TO_NO_BRKTS_HTML_IMG 11557 2.30 0.13 3.29 87 XM_UncommonTLD01 11438 4.94 8.67 3.25 88 RELAYCOUNTRY_META 11071 8.34 19.80 3.15 89 XMSubMetaSx_00 10840 4.17 6.57 3.08 90 RCVD_IN_IADB_VOUCHED 10800 2.59 1.53 3.07 91 XM_B_Phish_Phrases 10132 3.73 5.61 2.88 92 DKIM_INVALID 10094 3.14 3.72 2.87 93 FSL_BULK_SIG 9825 5.27 10.72 2.79 94 TR_XM_PhishingBody 9797 3.71 5.74 2.79 95 HTML_IMAGE_RATIO_08 9487 2.56 2.25 2.70 96 TR_XM_DK_SendGrid 9226 3.07 4.07 2.62 97 TM2_M_URI_OPT_OUT 9160 2.60 2.58 2.60 98 XMSubNoVowel 8619 1.94 0.80 2.45 99 URI_NOVOWEL 8605 2.51 2.65 2.45 100 FROM_EXCESS_BASE64 8522 2.22 1.77 2.42 101 MAILING_LIST_MULTI 8412 2.06 1.34 2.39 102 BAYES_95 7993 3.07 4.84 2.27 103 BAYES_05 7916 1.77 0.70 2.25 104 HTML_MIME_NO_HTML_TAG 7741 4.61 9.92 2.20 105 TooManyTo_002 7341 1.64 0.66 2.09 106 RCVD_IN_IADB_OPTIN 7207 1.71 0.97 2.05 107 TR_XM_SB_Phish 7196 2.06 2.10 2.05 108 XMSubPhish11 7116 2.01 1.96 2.02 109 INVALID_MSGID 7041 1.43 0.17 2.00 110 TVD_RCVD_IP 6806 1.40 0.21 1.94 111 XM_B_SpammyTLD 6793 3.23 6.10 1.93 112 MIME_HTML_MOSTLY 6448 2.61 4.31 1.83 113 T_XMDrugObfuBody_14 6169 2.55 4.30 1.75 114 XM_CamelCaseFrm001 6158 2.18 3.14 1.75 115 IN_HORDE_ADDRESS_BOOK 6011 1.21 0.12 1.71 116 TO_MALFORMED 5934 1.17 0.03 1.69 117 SUBJ_ALL_CAPS 5866 2.30 3.69 1.67 118 XM_B_Phish66 5725 2.24 3.60 1.63 119 URIBL_CSS_A 5690 1.19 0.23 1.62 120 URIBL_CSS 5690 1.19 0.23 1.62 121 TR_DCC_Bayes_99 5667 7.57 20.69 1.61 122 TR_Symld_Words 5515 1.46 1.23 1.57 123 T_TooManySym_03 5484 1.16 0.28 1.56 124 XMGappySubj_01 5290 1.09 0.17 1.50 125 HELO_NODOT 5012 1.12 0.45 1.43 126 HELO_NO_DOMAIN 5000 1.12 0.44 1.42 127 TooManyTo_003 4985 1.15 0.56 1.42 128 XM_B_Unsub2 4801 1.70 2.45 1.37 129 XM_DK_Undo_01 4742 1.88 3.06 1.35 130 TR_XM_SpammyRelay 4563 4.09 10.24 1.30 131 TVD_SPACE_RATIO_MINFP 4442 0.91 0.12 1.26 132 RCVD_IN_MSPIKE_BL 4387 2.67 5.81 1.25 133 XMStockSpam_06 4373 1.32 1.48 1.24 134 TR_XM_MSPIKECOMBO 4371 2.63 5.68 1.24 135 XM_B_Investor 4332 2.56 5.49 1.23 136 XMDiploma_00 4273 1.65 2.62 1.22 137 T_XMDrugObfuBody_08 4257 1.80 3.09 1.21 138 BOTNET 4229 4.07 10.37 1.20 139 URI_HEX 4228 1.33 1.61 1.20 140 UNTRUSTED_Relay 4039 3.12 7.47 1.15 141 XMBSHREFv2 3972 0.86 0.25 1.13 142 TM2_M_VERY_LONG_WORD 3928 3.79 9.68 1.12 143 TR_XM_SpammyWords5 3645 2.08 4.38 1.04 144 TooManyTo_004 3631 0.86 0.47 1.03 145 HTML_IMAGE_ONLY_20 3597 1.13 1.37 1.02 146 XM_GoogleGroups 3573 3.03 7.48 1.02 147 TVD_SPACE_RATIO 3479 0.79 0.36 0.99 148 DKIM_ADSP_CUSTOM_MED 3319 0.88 0.74 0.94 149 XM_B_SEO 3267 1.03 1.25 0.93 150 XM_H_Long_From02 3221 0.99 1.16 0.92 151 TR_XM_SpammyWords2 3135 3.91 10.57 0.89 152 T_XMDrugObfuBody_00 3086 1.20 1.92 0.88 153 XMCapTrack 3066 0.70 0.31 0.87 154 TooManyTo_005 2971 0.71 0.42 0.84 155 FVGT_m_MULTI_ODD_EMAIL 2932 0.60 0.08 0.83 156 RELAYCOUNTRY_CA 2929 2.61 6.52 0.83 157 RCVD_IN_RP_SAFE 2839 0.74 0.61 0.81 158 XMBody_95 2789 0.59 0.13 0.79 159 RCVD_IN_MSPIKE_L3 2748 0.94 1.29 0.78 160 T_FILL_THIS_FORM_SHORT 2668 1.49 3.09 0.76 161 TR_MetaPhish_Combo_01 2649 0.83 1.00 0.75 162 XM_OfRef6 2633 1.65 3.64 0.75 163 XM_H_PHPMailer 2591 0.70 0.63 0.74 164 XMGenDplmaNmb 2581 0.97 1.48 0.73 165 XM_UB50 2581 1.55 3.36 0.73 166 RCVD_IN_RP_CERTIFIED 2544 0.65 0.49 0.72 167 XMPhish30 2385 0.75 0.90 0.68 168 MSGID_NOFQDN1 2348 0.46 0.01 0.67 169 HTTPS_HTTP_MISMATCH 2347 0.92 1.49 0.67 170 XM_ProductURIs 2306 0.77 1.03 0.66 171 FROM_GOV_DKIM_AU 2294 0.49 0.13 0.65 172 XM_D_tchamptons_WL 2255 0.44 0.01 0.64 173 XM_B_COVIDMETA 2227 1.07 2.04 0.63 174 NML_ADSP_CUSTOM_MED 2226 0.63 0.62 0.63 175 XMLngstWrd_00 2179 2.77 7.50 0.62 176 XM_B_COPY_HTML 2129 0.71 0.93 0.61 177 XMHTML_After_End 2088 0.79 1.22 0.59 178 XMBdyGiftCard01 2063 0.82 1.33 0.59 179 RELAYCOUNTRY_GB 2047 0.61 0.68 0.58 180 DIET_1 2039 0.66 0.84 0.58 181 T_OBFU_PDF_ATTACH 2024 0.42 0.09 0.58 182 FORGED_GMAIL_RCVD 2019 0.59 0.63 0.57 183 HTML_TAG_BALANCE_BODY 2016 0.80 1.30 0.57 184 SpammyFromTLD_01 2012 1.49 3.53 0.57 185 URI_TRY_3LD 1986 0.74 1.11 0.56 186 XMBrknScrpt_02 1983 0.80 1.34 0.56 187 XMSubMetaI_00 1971 0.63 0.79 0.56 188 XM_ShortIntro_01 1954 0.49 0.33 0.56 189 XMSexyCombo_01 1931 1.04 2.11 0.55 190 RCVD_IN_BL_SPAMCOP_NET 1898 4.08 11.87 0.54 191 SpammyFromTLD_02 1861 1.16 2.54 0.53 192 XM_B_DNDMA 1804 0.61 0.83 0.51 193 T_MANY_PILL_PRICE 1732 0.34 0.00 0.49 194 XMLngstWrd_01 1730 2.67 7.46 0.49 195 TR_XM_SpammyWords3 1706 1.63 4.16 0.49 196 XMHTMLBadTable_001 1687 0.58 0.81 0.48 197 XM_shorewaves_Whitelist 1655 0.32 0.00 0.47 198 XM_B_SpammyWords4 1639 1.07 2.39 0.47 199 MPART_ALT_DIFF_COUNT 1603 0.61 0.94 0.46 200 RCVD_IN_MSPIKE_L4 1589 1.38 3.44 0.45 ----------------------------------------------------------------------