Email: 560819 Autolearn: 0 AvgScore: 1.31 AvgScanTime: 1.31 sec Spam: 163424 Autolearn: 0 AvgScore: 13.92 AvgScanTime: 1.51 sec Ham: 397395 Autolearn: 0 AvgScore: -3.88 AvgScanTime: 1.23 sec Time Spent Running SA: 203.97 hours Time Spent Processing Spam: 68.65 hours Time Spent Processing Ham: 135.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 155218 89.18 94.98 86.80 2 DKIM_SIGNED 143957 69.21 88.09 61.45 3 XM_DK_Pass 139284 67.56 85.23 60.29 4 DKIM_VALID 138255 66.77 84.60 59.43 5 RELAYCOUNTRY_US 134395 81.98 82.24 81.88 6 XM_B_Unicode 128679 73.37 78.74 71.16 7 DCC_CHECK 116776 39.51 71.46 26.37 8 XMListUnsubscribeExists 112030 47.71 68.55 39.14 9 XM_B_SpammyWords 110355 48.34 67.53 40.45 10 DKIM_VALID_AU 103998 50.72 63.64 45.41 11 RCVD_IN_MSPIKE_H2 78272 36.59 47.90 31.94 12 BAYES_50 70508 48.88 43.14 51.23 13 XM_B_Unicode3 69089 42.75 42.28 42.95 14 XM_DK_Undo_02 67320 15.97 41.19 5.59 15 XM_B_SpammyWords2 60346 20.54 36.93 13.80 16 LOC_TINY_FONT_1 59754 24.18 36.56 19.09 17 MIME_HTML_ONLY 57023 26.24 34.89 22.68 18 DKIM_VALID_EF 54006 26.20 33.05 23.38 19 FVGT_m_MULTI_ODD 53240 23.83 32.58 20.23 20 TR_XM_DKIM_Undo 53166 12.23 32.53 3.88 21 HTML_FONT_LOW_CONTRAST 52793 25.33 32.30 22.46 22 BAYES_99 52193 12.62 31.94 4.68 23 T_KAM_HTML_FONT_INVALID 47075 19.26 28.81 15.33 24 DCC_CHECK_NEGATIVE 46598 60.45 28.51 73.59 25 BAYES_999 41121 10.02 25.16 3.80 26 XMSubLong 38883 21.11 23.79 20.01 27 T_TM2_M_HEADER_IN_MSG 37812 25.42 23.14 26.36 28 XM_Body_Dirty_Words 35776 13.10 21.89 9.48 29 TR_DCC_Bayes_99 35337 7.47 21.62 1.65 30 RELAYCOUNTRY_META 34368 8.17 21.03 2.88 31 XM_Multi_Part_URI 27324 11.98 16.72 10.03 32 XM_B_Unsub 25892 9.82 15.84 7.34 33 TR_XM_BayesUnsub 25262 8.37 15.46 5.46 34 RCVD_IN_MSPIKE_WL 22166 14.22 13.56 14.50 35 BOTNET_IPINHOSTNAME 21629 6.74 13.23 4.07 36 TR_XM_SpammyRelay 21173 4.70 12.96 1.30 37 LOTS_OF_MONEY 21090 8.41 12.91 6.57 38 BOTNET 19183 4.42 11.74 1.42 39 XM_B_SpammyWords3 18919 5.68 11.58 3.25 40 FSL_BULK_SIG 18850 5.27 11.53 2.69 41 UNPARSEABLE_RELAY 18204 7.32 11.14 5.76 42 TR_XM_SpammyWords4 18165 6.11 11.12 4.06 43 XMSexyCombo_05 17877 5.19 10.94 2.83 44 RCVD_IN_BL_SPAMCOP_NET 17697 3.45 10.83 0.41 45 TR_XM_UnparsRelay 17662 6.25 10.81 4.37 46 RCVD_IN_MSPIKE_H3 17581 10.05 10.76 9.76 47 TR_XM_SpammyWords2 16368 3.42 10.02 0.71 48 MPART_ALT_DIFF 15487 10.37 9.48 10.74 49 XM_Evil_Numbers_Gen 15155 8.82 9.27 8.63 50 UNTRUSTED_Relay 14419 3.38 8.82 1.13 51 BAYES_80 13364 4.81 8.18 3.42 52 BAYES_60 12732 7.52 7.79 7.41 53 LotsOfNums_01 12352 7.66 7.56 7.70 54 RELAYCOUNTRY_CA 12033 2.66 7.36 0.72 55 XM_UncommonTLD01 11827 4.34 7.24 3.14 56 TR_XM_SPAMCOP 11827 2.23 7.24 0.17 57 HTML_IMAGE_RATIO_02 10911 5.10 6.68 4.45 58 XM_H_Long_From01 10401 4.84 6.36 4.21 59 MIME_HTML_ONLY_MULTI 10252 8.20 6.27 8.99 60 XM_SendGrid 10054 4.42 6.15 3.71 61 TR_XM_PhishingBody 9989 3.66 6.11 2.66 62 HTML_MIME_NO_HTML_TAG 9338 2.84 5.71 1.66 63 XMSubMetaSx_00 9275 3.58 5.68 2.72 64 XM_B_Phish_Phrases 9217 3.32 5.64 2.37 65 TM2_M_VERY_LONG_WORD 9016 2.29 5.52 0.96 66 XMStrtUSub 8994 10.03 5.50 11.90 67 HTML_IMAGE_RATIO_04 8614 13.50 5.27 16.89 68 BAYES_95 8034 2.97 4.92 2.17 69 TooManyTo_001 7941 6.56 4.86 7.26 70 XM_SPF_SoftFail 7806 3.09 4.78 2.40 71 XM_B_Investor 7800 2.44 4.77 1.49 72 RCVD_IN_MSPIKE_BL 6814 1.95 4.17 1.04 73 TR_XM_MSPIKECOMBO 6673 1.92 4.08 1.04 74 MIME_HTML_MOSTLY 6492 2.81 3.97 2.34 75 XMDiploma_00 6451 2.24 3.95 1.54 76 XM_UB50 6399 1.64 3.92 0.70 77 XM_B_SpammyTLD 6396 2.48 3.91 1.89 78 XMNumbers 6332 3.44 3.87 3.27 79 XM_GoogleGroups 6259 1.91 3.83 1.12 80 T_REMOTE_IMAGE 6195 3.58 3.79 3.50 81 XM_OfRef6 6190 1.70 3.79 0.84 82 XMLngstWrd_00 6103 1.49 3.73 0.56 83 TR_XM_DK_SendGrid 6061 2.81 3.71 2.44 84 T_XMDrugObfuBody_14 6046 2.07 3.70 1.40 85 XMLngstWrd_01 5995 1.39 3.67 0.45 86 HTML_TITLE_SUBJ_DIFF 5881 1.07 3.60 0.03 87 XMLngstWrd_02 5864 1.31 3.59 0.37 88 XM_CamelCaseFrm001 5760 2.18 3.52 1.63 89 XMLngstWrd_03 5745 1.23 3.52 0.30 90 MIME_QP_LONG_LINE 5704 4.33 3.49 4.67 91 DKIM_INVALID 5702 2.45 3.49 2.02 92 HTML_IMAGE_RATIO_06 5682 4.73 3.48 5.25 93 XM_DIRTYINTL 5667 1.22 3.47 0.30 94 TR_XM_SpammyWords5 5605 2.06 3.43 1.50 95 XMLngstWrd_04 5601 1.17 3.43 0.24 96 XM_B_Phish66 5443 2.11 3.33 1.61 97 UPPERCASE_75_100 5341 0.97 3.27 0.02 98 RCVD_IN_VALIDITY_SAFE 5248 3.91 3.21 4.20 99 T_XMDrugObfuBody_08 5010 1.77 3.07 1.24 100 XM_B_Unsub2 4999 1.80 3.06 1.28 101 XM_DK_Undo_01 4923 1.87 3.01 1.40 102 SpammyFromTLD_01 4894 1.33 2.99 0.65 103 HTML_IMAGE_RATIO_08 4828 2.38 2.95 2.15 104 RCVD_IN_VALIDITY_RPBL 4703 0.86 2.88 0.04 105 URI_NOVOWEL 4583 2.38 2.80 2.20 106 T_TooManySym_01 4566 4.39 2.79 5.05 107 TM2_M_URI_OPT_OUT 4310 2.30 2.64 2.16 108 KHOP_HELO_FCRDNS 4235 1.99 2.59 1.74 109 T_FILL_THIS_FORM_SHORT 4218 1.30 2.58 0.78 110 RCVD_IN_IADB_LISTED 4188 3.98 2.56 4.56 111 BOTNET_NORDNS 4181 0.75 2.56 0.01 112 RCVD_IN_MSPIKE_H4 4162 3.53 2.55 3.94 113 RCVD_IN_VALIDITY_CERTIFIED 4039 3.35 2.47 3.71 114 XMBody_17 3962 0.91 2.42 0.29 115 SpammyFromTLD_02 3897 1.00 2.38 0.43 116 TR_XM_MSPIKECOMBO2 3702 0.77 2.27 0.15 117 TR_XM_SpammyWords3 3645 0.95 2.23 0.42 118 RCVD_IN_IADB_SPF 3586 3.50 2.19 4.04 119 FROM_EXCESS_BASE64 3375 2.15 2.07 2.19 120 XM_B_SpammyWords4 3319 0.93 2.03 0.48 121 RCVD_IN_IADB_DK 3255 3.08 1.99 3.53 122 RCVD_IN_IADB_SENDERID 3223 3.16 1.97 3.64 123 URI_HEX 3201 1.41 1.96 1.19 124 TR_XM_SB_Phish 3175 1.96 1.94 1.97 125 XM_B_COVIDMETA 3165 0.84 1.94 0.39 126 XM_UB99 3100 0.56 1.90 0.00 127 XMSubPhish11 3016 1.92 1.85 1.95 128 XMBrknScrpt_02 2951 0.96 1.81 0.61 129 MAILING_LIST_MULTI 2949 2.09 1.80 2.20 130 XMGenDplmaNmb 2947 1.15 1.80 0.89 131 RCVD_IN_MSPIKE_L3 2946 0.88 1.80 0.50 132 URIBL_DBL_SPAM 2941 0.53 1.80 0.01 133 T_XMDrugObfuBody_00 2852 0.86 1.75 0.50 134 T_XMHurry_00 2835 1.20 1.73 0.98 135 XM_H_Undi_Recip 2829 0.67 1.73 0.23 136 TR_XM_NoHeaderRelay 2781 0.57 1.70 0.10 137 RCVD_IN_PSBL 2773 0.71 1.70 0.31 138 PDS_OTHER_BAD_TLD 2736 0.57 1.67 0.11 139 BAYES_40 2676 4.34 1.64 5.44 140 XMStockSpam_06 2676 1.34 1.64 1.22 141 XM_H_Long_From02 2675 1.03 1.64 0.78 142 ALL_TRUSTED 2656 11.77 1.63 15.94 143 USER_IN_DEF_DKIM_WL 2615 8.00 1.60 10.63 144 XMHTML_After_End 2583 0.86 1.58 0.56 145 XMSexyCombo_01 2575 0.65 1.58 0.26 146 XM_URI_RBL 2524 0.53 1.54 0.11 147 TR_XM_PHPDW 2498 0.66 1.53 0.30 148 TR_XM_PHPForged 2475 0.61 1.51 0.24 149 RCVD_IN_MSPIKE_L5 2466 0.45 1.51 0.01 150 HK_RANDOM_REPLYTO 2441 0.49 1.49 0.07 151 RCVD_IN_IADB_VOUCHED 2415 2.34 1.48 2.70 152 RELAYCOUNTRY_AU 2413 0.60 1.48 0.24 153 TR_XM_FormFill2 2408 0.60 1.47 0.24 154 XM_H_PHPOS 2392 0.59 1.46 0.23 155 XM_UB999 2372 0.43 1.45 0.00 156 TR_LOTS_OF_MONEY3 2359 0.50 1.44 0.11 157 HTTPS_HTTP_MISMATCH 2333 0.89 1.43 0.67 158 HTML_TAG_BALANCE_BODY 2289 0.83 1.40 0.59 159 XM_B_Crypto 2266 0.47 1.39 0.09 160 XM_B_DynamicLink 2138 0.40 1.31 0.03 161 XMBdyGiftCard01 2133 0.99 1.31 0.85 162 SUBJ_ALL_CAPS 2098 1.47 1.28 1.55 163 MONEY_NOHTML 2079 0.42 1.27 0.07 164 XM_OfRef7 2031 0.44 1.24 0.10 165 TR_Symld_Words 2025 1.36 1.24 1.42 166 XMPhish30 2017 0.75 1.23 0.55 167 RELAYCOUNTRY_RU 2005 0.38 1.23 0.03 168 RELAYCOUNTRY_FR 1985 0.50 1.21 0.20 169 XM_UB60 1941 0.39 1.19 0.06 170 TR_XM_MaxSPIKE 1930 0.38 1.18 0.05 171 URIBL_BLACK 1920 0.37 1.17 0.04 172 BAYES_20 1911 4.23 1.17 5.49 173 HTML_IMAGE_ONLY_20 1884 0.76 1.15 0.59 174 URI_TRY_3LD 1858 0.71 1.14 0.54 175 TR_XM_BayesRelay 1792 0.32 1.10 0.00 176 TR_XM_COVIDMETA4 1715 0.48 1.05 0.24 177 TR_XM_COVIDMETA1 1713 0.47 1.05 0.23 178 XMReplyNow 1698 0.49 1.04 0.26 179 RELAYCOUNTRY_IN 1679 0.34 1.03 0.06 180 TR_XM_Base64_M1 1645 0.79 1.01 0.71 181 DIET_1 1634 0.51 1.00 0.31 182 HTML_TAG_BALANCE_CENTER 1617 0.37 0.99 0.11 183 FONT_INVIS_LONG_LINE 1608 0.33 0.98 0.06 184 MPART_ALT_DIFF_COUNT 1590 0.61 0.97 0.47 185 XMMoneyMeta_00 1588 0.56 0.97 0.39 186 DKIM_ADSP_CUSTOM_MED 1583 0.85 0.97 0.81 187 XMSlimDrugH 1580 0.58 0.97 0.42 188 XMSubMetaI_00 1569 0.51 0.96 0.33 189 TR_XM_FormFill 1556 0.29 0.95 0.02 190 RCVD_IN_IADB_OPTIN 1549 1.56 0.95 1.81 191 MIXED_CENTER_CASE 1539 0.28 0.94 0.00 192 RELAYCOUNTRY_GB 1538 0.65 0.94 0.52 193 XM_Body_Dirty_Words_01 1513 0.32 0.93 0.08 194 TR_MetaPhish_Combo_01 1505 0.74 0.92 0.66 195 T_Symld_Words_02 1500 0.67 0.92 0.57 196 MIXED_HREF_CASE 1499 0.27 0.92 0.00 197 RELAYCOUNTRY_DE 1498 0.43 0.92 0.23 198 XM_PDF 1493 3.29 0.91 4.27 199 XM_ProductURIs 1492 0.58 0.91 0.45 200 RDNS_DYNAMIC 1485 0.53 0.91 0.38 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 344926 89.18 94.98 86.80 2 RELAYCOUNTRY_US 325368 81.98 82.24 81.88 3 DCC_CHECK_NEGATIVE 292435 60.45 28.51 73.59 4 XM_B_Unicode 282778 73.37 78.74 71.16 5 DKIM_SIGNED 244202 69.21 88.09 61.45 6 XM_DK_Pass 239582 67.56 85.23 60.29 7 DKIM_VALID 236191 66.77 84.60 59.43 8 BAYES_50 203597 48.88 43.14 51.23 9 DKIM_VALID_AU 180451 50.72 63.64 45.41 10 XM_B_Unicode3 170688 42.75 42.28 42.95 11 XM_B_SpammyWords 160761 48.34 67.53 40.45 12 XMListUnsubscribeExists 155543 47.71 68.55 39.14 13 RCVD_IN_MSPIKE_H2 126929 36.59 47.90 31.94 14 DCC_CHECK 104782 39.51 71.46 26.37 15 T_TM2_M_HEADER_IN_MSG 104773 25.42 23.14 26.36 16 DKIM_VALID_EF 92914 26.20 33.05 23.38 17 MIME_HTML_ONLY 90117 26.24 34.89 22.68 18 HTML_FONT_LOW_CONTRAST 89268 25.33 32.30 22.46 19 FVGT_m_MULTI_ODD 80389 23.83 32.58 20.23 20 XMSubLong 79507 21.11 23.79 20.01 21 LOC_TINY_FONT_1 75879 24.18 36.56 19.09 22 HTML_IMAGE_RATIO_04 67105 13.50 5.27 16.89 23 HTML_FONT_FACE_BAD 64557 11.73 0.74 16.25 24 XM_H_Trusted_IP 64052 11.42 0.00 16.12 25 ALL_TRUSTED 63333 11.77 1.63 15.94 26 BAYES_00 63004 11.44 0.71 15.85 27 T_KAM_HTML_FONT_INVALID 60917 19.26 28.81 15.33 28 RCVD_IN_MSPIKE_WL 57610 14.22 13.56 14.50 29 XM_B_SpammyWords2 54826 20.54 36.93 13.80 30 XMStrtUSub 47279 10.03 5.50 11.90 31 MPART_ALT_DIFF 42664 10.37 9.48 10.74 32 USER_IN_DEF_DKIM_WL 42238 8.00 1.60 10.63 33 XM_Multi_Part_URI 39857 11.98 16.72 10.03 34 RCVD_IN_MSPIKE_H3 38774 10.05 10.76 9.76 35 XM_Body_Dirty_Words 37676 13.10 21.89 9.48 36 MIME_HTML_ONLY_MULTI 35741 8.20 6.27 8.99 37 XM_Evil_Numbers_Gen 34289 8.82 9.27 8.63 38 LotsOfNums_01 30602 7.66 7.56 7.70 39 BAYES_60 29440 7.52 7.79 7.41 40 XM_B_Unsub 29158 9.82 15.84 7.34 41 TooManyTo_001 28857 6.56 4.86 7.26 42 XM_DKIMWhitelistDomains 28724 5.13 0.04 7.23 43 LOTS_OF_MONEY 26100 8.41 12.91 6.57 44 IN_ZIMBRA_NJ_WHITELIST 24489 4.40 0.12 6.16 45 TR_XM_DK_Bayes 24349 4.49 0.52 6.13 46 TR_XM_DK_Bayes1 23865 4.40 0.51 6.01 47 UNPARSEABLE_RELAY 22875 7.32 11.14 5.76 48 XM_DK_Undo_02 22230 15.97 41.19 5.59 49 BAYES_20 21819 4.23 1.17 5.49 50 TR_XM_BayesUnsub 21703 8.37 15.46 5.46 51 BAYES_40 21636 4.34 1.64 5.44 52 HTML_IMAGE_RATIO_06 20849 4.73 3.48 5.25 53 XMSubNoVowel 20556 3.91 0.85 5.17 54 T_TooManySym_01 20070 4.39 2.79 5.05 55 TR_XM_DK_Bayes2 19426 3.58 0.39 4.89 56 BAYES_99 18595 12.62 31.94 4.68 57 MIME_QP_LONG_LINE 18570 4.33 3.49 4.67 58 RCVD_IN_IADB_LISTED 18125 3.98 2.56 4.56 59 HTML_IMAGE_RATIO_02 17693 5.10 6.68 4.45 60 TR_XM_UnparsRelay 17376 6.25 10.81 4.37 61 BAYES_05 17073 3.19 0.51 4.30 62 XM_PDF 16963 3.29 0.91 4.27 63 XM_H_Long_From01 16740 4.84 6.36 4.21 64 RCVD_IN_VALIDITY_SAFE 16691 3.91 3.21 4.20 65 BOTNET_IPINHOSTNAME 16156 6.74 13.23 4.07 66 TR_XM_SpammyWords4 16120 6.11 11.12 4.06 67 RCVD_IN_IADB_SPF 16037 3.50 2.19 4.04 68 RCVD_IN_MSPIKE_H4 15648 3.53 2.55 3.94 69 TR_XM_DKIM_Undo 15404 12.23 32.53 3.88 70 BAYES_999 15098 10.02 25.16 3.80 71 XM_SendGrid 14739 4.42 6.15 3.71 72 RCVD_IN_VALIDITY_CERTIFIED 14729 3.35 2.47 3.71 73 RCVD_IN_IADB_SENDERID 14484 3.16 1.97 3.64 74 RCVD_IN_IADB_DK 14018 3.08 1.99 3.53 75 T_REMOTE_IMAGE 13904 3.58 3.79 3.50 76 BAYES_80 13603 4.81 8.18 3.42 77 XMNumbers 12980 3.44 3.87 3.27 78 XM_B_SpammyWords3 12921 5.68 11.58 3.25 79 ANY_BOUNCE_MESSAGE 12615 2.50 0.86 3.17 80 BOUNCE_MESSAGE 12614 2.50 0.86 3.17 81 XM_UncommonTLD01 12493 4.34 7.24 3.14 82 T_TooManySym_02 11467 2.26 0.75 2.89 83 RELAYCOUNTRY_META 11432 8.17 21.03 2.88 84 XMSexyCombo_05 11232 5.19 10.94 2.83 85 XMSubMetaSx_00 10827 3.58 5.68 2.72 86 RCVD_IN_IADB_VOUCHED 10728 2.34 1.48 2.70 87 FSL_BULK_SIG 10700 5.27 11.53 2.69 88 TR_XM_PhishingBody 10552 3.66 6.11 2.66 89 TR_XM_DK_SendGrid 9687 2.81 3.71 2.44 90 XM_SPF_SoftFail 9527 3.09 4.78 2.40 91 XM_B_Phish_Phrases 9423 3.32 5.64 2.37 92 MIME_HTML_MOSTLY 9282 2.81 3.97 2.34 93 XMSubLongNoVowel 8918 1.69 0.33 2.24 94 XMSubGarbage 8809 1.59 0.08 2.22 95 MAILING_LIST_MULTI 8762 2.09 1.80 2.20 96 TVD_RCVD_IP 8760 1.74 0.59 2.20 97 URI_NOVOWEL 8743 2.38 2.80 2.20 98 FROM_EXCESS_BASE64 8703 2.15 2.07 2.19 99 BAYES_95 8623 2.97 4.92 2.17 100 TM2_M_URI_OPT_OUT 8580 2.30 2.64 2.16 101 HTML_IMAGE_RATIO_08 8531 2.38 2.95 2.15 102 DKIM_INVALID 8011 2.45 3.49 2.02 103 TooManyTo_002 7993 1.61 0.63 2.01 104 TR_XM_SB_Phish 7812 1.96 1.94 1.97 105 XMSubPhish11 7749 1.92 1.85 1.95 106 XM_B_SpammyTLD 7510 2.48 3.91 1.89 107 HELO_NODOT 7416 1.48 0.55 1.87 108 HELO_NO_DOMAIN 7412 1.48 0.53 1.87 109 RCVD_IN_IADB_OPTIN 7184 1.56 0.95 1.81 110 INVALID_MSGID 6942 1.28 0.15 1.75 111 KHOP_HELO_FCRDNS 6919 1.99 2.59 1.74 112 HTML_MIME_NO_HTML_TAG 6616 2.84 5.71 1.66 113 TR_DCC_Bayes_99 6541 7.47 21.62 1.65 114 XM_CamelCaseFrm001 6470 2.18 3.52 1.63 115 XM_B_Phish66 6392 2.11 3.33 1.61 116 SUBJ_ALL_CAPS 6165 1.47 1.28 1.55 117 XMDiploma_00 6116 2.24 3.95 1.54 118 IN_HORDE_ADDRESS_BOOK 6005 1.12 0.17 1.51 119 TR_XM_SpammyWords5 5961 2.06 3.43 1.50 120 TO_MALFORMED 5938 1.06 0.01 1.49 121 XM_B_Investor 5905 2.44 4.77 1.49 122 BOTNET 5627 4.42 11.74 1.42 123 TR_Symld_Words 5626 1.36 1.24 1.42 124 XM_DK_Undo_01 5570 1.87 3.01 1.40 125 T_XMDrugObfuBody_14 5545 2.07 3.70 1.40 126 TooManyTo_003 5404 1.12 0.52 1.36 127 TR_XM_SpammyRelay 5176 4.70 12.96 1.30 128 XM_B_Unsub2 5083 1.80 3.06 1.28 129 T_XMDrugObfuBody_08 4913 1.77 3.07 1.24 130 XMStockSpam_06 4836 1.34 1.64 1.22 131 XM_E_Blogspot 4763 0.90 0.18 1.20 132 URI_HEX 4710 1.41 1.96 1.19 133 XMGappySubj_01 4668 0.88 0.17 1.17 134 UNTRUSTED_Relay 4510 3.38 8.82 1.13 135 XMCapTrack 4498 0.93 0.43 1.13 136 XM_GoogleGroups 4446 1.91 3.83 1.12 137 XMBSHREFv2 4408 0.87 0.29 1.11 138 T_HTML_ATTACH 4154 0.82 0.28 1.05 139 RCVD_IN_MSPIKE_BL 4122 1.95 4.17 1.04 140 TR_XM_MSPIKECOMBO 4119 1.92 4.08 1.04 141 T_XMHurry_00 3893 1.20 1.73 0.98 142 TooManyTo_004 3889 0.82 0.44 0.98 143 TM2_M_VERY_LONG_WORD 3803 2.29 5.52 0.96 144 TVD_SPACE_RATIO 3531 0.65 0.09 0.89 145 XMGenDplmaNmb 3520 1.15 1.80 0.89 146 XMBdyGiftCard01 3395 0.99 1.31 0.85 147 XM_OfRef6 3328 1.70 3.79 0.84 148 RCVD_IN_RP_SAFE 3207 0.78 0.72 0.81 149 DKIM_ADSP_CUSTOM_MED 3203 0.85 0.97 0.81 150 RCVD_IN_MSPIKE_H5 3188 0.64 0.26 0.80 151 TooManyTo_005 3108 0.67 0.40 0.78 152 T_FILL_THIS_FORM_SHORT 3098 1.30 2.58 0.78 153 XM_H_Long_From02 3082 1.03 1.64 0.78 154 RELAYCOUNTRY_CA 2869 2.66 7.36 0.72 155 TR_XM_SpammyWords2 2831 3.42 10.02 0.71 156 TR_XM_Base64_M1 2805 0.79 1.01 0.71 157 RCVD_IN_RP_CERTIFIED 2799 0.66 0.56 0.70 158 XM_UB50 2784 1.64 3.92 0.70 159 FROM_GOV_DKIM_AU 2767 0.61 0.39 0.70 160 T_TooManySym_03 2675 0.57 0.30 0.67 161 HTTPS_HTTP_MISMATCH 2644 0.89 1.43 0.67 162 TR_MetaPhish_Combo_01 2625 0.74 0.92 0.66 163 SpammyFromTLD_01 2579 1.33 2.99 0.65 164 TM2_M_BODY_EMPTY 2453 0.49 0.19 0.62 165 XMBrknScrpt_02 2426 0.96 1.81 0.61 166 XM_B_COPY_HTML 2382 0.69 0.90 0.60 167 XM_ShortIntro_01 2380 0.56 0.47 0.60 168 T_OBFU_PDF_ATTACH 2371 0.49 0.22 0.60 169 HTML_IMAGE_ONLY_20 2357 0.76 1.15 0.59 170 HTML_TAG_BALANCE_BODY 2344 0.83 1.40 0.59 171 XMBody_95 2323 0.44 0.09 0.58 172 MSGID_NOFQDN1 2319 0.42 0.02 0.58 173 XM_shorewaves_Whitelist 2311 0.41 0.00 0.58 174 T_Symld_Words_02 2256 0.67 0.92 0.57 175 XMHTML_After_End 2236 0.86 1.58 0.56 176 XMLngstWrd_00 2233 1.49 3.73 0.56 177 XM_H_PHPMailer 2200 0.60 0.72 0.55 178 XMPhish30 2171 0.75 1.23 0.55 179 NML_ADSP_CUSTOM_MED 2146 0.63 0.84 0.54 180 SHORT_HELO_AND_INLINE_IMAGE 2137 0.41 0.10 0.54 181 URI_TRY_3LD 2127 0.71 1.14 0.54 182 XMHTMLBadTable_001 2120 0.60 0.77 0.53 183 RCVD_IN_MSPIKE_L4 2111 0.60 0.77 0.53 184 XMNoVowels 2085 0.49 0.42 0.52 185 RELAYCOUNTRY_GB 2085 0.65 0.94 0.52 186 RCVD_IN_SORBS_DUL 2004 0.39 0.13 0.50 187 T_XMDrugObfuBody_00 1976 0.86 1.75 0.50 188 RCVD_IN_MSPIKE_L3 1968 0.88 1.80 0.50 189 XM_B_SpammyWords4 1921 0.93 2.03 0.48 190 MPART_ALT_DIFF_COUNT 1853 0.61 0.97 0.47 191 XMLngstWrd_01 1787 1.39 3.67 0.45 192 XM_ProductURIs 1783 0.58 0.91 0.45 193 T_MANY_PILL_PRICE 1739 0.31 0.00 0.44 194 XM_B_DNDMA 1725 0.52 0.73 0.43 195 SpammyFromTLD_02 1698 1.00 2.38 0.43 196 BASE64_LENGTH_79_INF 1691 0.36 0.20 0.43 197 FORGED_GMAIL_RCVD 1688 0.54 0.83 0.42 198 TR_XM_SpammyWords3 1671 0.95 2.23 0.42 199 XMSlimDrugH 1658 0.58 0.97 0.42 200 RCVD_IN_BL_SPAMCOP_NET 1634 3.45 10.83 0.41 ----------------------------------------------------------------------