Email: 618526 Autolearn: 0 AvgScore: 0.61 AvgScanTime: 1.32 sec Spam: 169681 Autolearn: 0 AvgScore: 13.90 AvgScanTime: 1.51 sec Ham: 448845 Autolearn: 0 AvgScore: -4.41 AvgScanTime: 1.25 sec Time Spent Running SA: 226.33 hours Time Spent Processing Spam: 70.96 hours Time Spent Processing Ham: 155.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 162133 91.59 95.55 90.09 2 XM_B_Unicode 140063 73.16 82.54 69.61 3 DKIM_SIGNED 139043 62.80 81.94 55.56 4 RELAYCOUNTRY_US 133411 81.96 78.62 83.22 5 XM_DK_Pass 133175 61.00 78.49 54.39 6 DKIM_VALID 131887 60.14 77.73 53.49 7 DCC_CHECK 111663 34.97 65.81 23.31 8 XM_B_SpammyWords 110121 51.48 64.90 46.41 9 XMListUnsubscribeExists 107704 43.80 63.47 36.37 10 DKIM_VALID_AU 99290 46.19 58.52 41.53 11 RCVD_IN_MSPIKE_H2 80339 34.47 47.35 29.61 12 BAYES_50 75369 47.92 44.42 49.25 13 XM_B_Unicode3 72986 42.29 43.01 42.01 14 XM_DK_Undo_02 69561 14.70 41.00 4.76 15 XM_B_SpammyWords2 62059 21.84 36.57 16.28 16 MIME_HTML_ONLY 61058 26.65 35.98 23.12 17 DCC_CHECK_NEGATIVE 57953 64.99 34.15 76.64 18 LOC_TINY_FONT_1 56949 21.77 33.56 17.31 19 HTML_FONT_LOW_CONTRAST 54378 24.02 32.05 20.99 20 BAYES_99 53309 11.65 31.42 4.18 21 TR_XM_DKIM_Undo 52956 11.04 31.21 3.41 22 DKIM_VALID_EF 52152 23.75 30.74 21.11 23 FVGT_m_MULTI_ODD 51396 22.23 30.29 19.18 24 T_KAM_HTML_FONT_INVALID 48791 18.47 28.75 14.58 25 BAYES_999 41945 9.26 24.72 3.41 26 XMSubLong 40804 20.67 24.05 19.40 27 T_TM2_M_HEADER_IN_MSG 38093 28.46 22.45 30.73 28 XM_Body_Dirty_Words 37495 12.39 22.10 8.72 29 TR_DCC_Bayes_99 36717 6.69 21.64 1.04 30 XM_Multi_Part_URI 29503 11.96 17.39 9.91 31 RELAYCOUNTRY_META 29113 6.68 17.16 2.71 32 XM_B_Unsub 27114 10.31 15.98 8.17 33 TR_XM_BayesUnsub 26479 8.19 15.61 5.39 34 LOTS_OF_MONEY 22867 13.14 13.48 13.01 35 BOTNET_IPINHOSTNAME 22222 6.29 13.10 3.72 36 BOTNET 20062 4.12 11.82 1.21 37 UNPARSEABLE_RELAY 19694 7.16 11.61 5.48 38 XM_B_SpammyWords3 19577 6.42 11.54 4.48 39 TR_XM_UnparsRelay 19249 6.19 11.34 4.24 40 FSL_BULK_SIG 19155 4.85 11.29 2.42 41 TR_XM_SpammyWords4 19004 10.60 11.20 10.37 42 RCVD_IN_MSPIKE_WL 17847 12.29 10.52 12.96 43 TR_XM_SpammyRelay 17734 3.71 10.45 1.16 44 TR_XM_SpammyWords2 17477 3.23 10.30 0.55 45 RCVD_IN_BL_SPAMCOP_NET 17275 3.12 10.18 0.45 46 XMSexyCombo_05 16931 4.77 9.98 2.80 47 XM_Evil_Numbers_Gen 15040 8.86 8.86 8.86 48 XMNumbers 14973 4.88 8.82 3.39 49 HTML_MIME_NO_HTML_TAG 14929 4.19 8.80 2.45 50 UNTRUSTED_Relay 13864 2.98 8.17 1.01 51 BAYES_80 13557 4.48 7.99 3.15 52 RCVD_IN_MSPIKE_H3 12851 8.26 7.57 8.51 53 BAYES_60 12306 6.76 7.25 6.57 54 LotsOfNums_01 12296 7.02 7.25 6.94 55 XM_UncommonTLD01 12282 4.02 7.24 2.81 56 TR_XM_SPAMCOP 11818 2.05 6.96 0.20 57 XM_SendGrid 11301 4.43 6.66 3.58 58 XM_B_Phish_Phrases 10945 3.67 6.45 2.61 59 RELAYCOUNTRY_CA 10876 2.29 6.41 0.73 60 XMSubMetaSx_00 10684 3.88 6.30 2.96 61 TR_XM_PhishingBody 10558 3.48 6.22 2.45 62 ALL_TRUSTED 10182 12.30 6.00 14.68 63 RCVD_IN_MSPIKE_BL 10096 2.38 5.95 1.04 64 HTML_IMAGE_RATIO_02 10015 4.59 5.90 4.09 65 TR_XM_MSPIKECOMBO 9938 2.36 5.86 1.03 66 MPART_ALT_DIFF 9904 10.52 5.84 12.29 67 HTML_SHORT_LINK_IMG_1 9652 2.10 5.69 0.75 68 HTML_IMAGE_ONLY_04 9582 2.11 5.65 0.77 69 XM_B_Investor 9343 2.33 5.51 1.12 70 XM_H_Long_From01 9198 4.41 5.42 4.03 71 XM_SPF_SoftFail 8938 7.86 5.27 8.83 72 XM_BadFromFormat 8791 1.73 5.18 0.42 73 XMStrtUSub 8552 9.08 5.04 10.60 74 TO_NO_BRKTS_FROM_MSSP 8164 1.59 4.81 0.37 75 BAYES_95 7976 2.69 4.70 1.92 76 TooManyTo_001 7518 6.25 4.43 6.94 77 HTML_IMAGE_RATIO_04 7191 12.76 4.24 15.98 78 DKIM_INVALID 7156 2.66 4.22 2.07 79 XM_B_SpammyTLD 7146 2.47 4.21 1.81 80 TR_XM_SpammyWords5 6897 2.07 4.06 1.31 81 XM_OfRef6 6806 1.72 4.01 0.85 82 T_XMDrugObfuBody_14 6805 2.11 4.01 1.39 83 TR_XM_DK_SendGrid 6799 2.74 4.01 2.25 84 TR_XM_SpammyWords3 6239 1.32 3.68 0.43 85 XM_DIRTYINTL 6193 1.20 3.65 0.27 86 MIME_HTML_ONLY_MULTI 6025 8.59 3.55 10.49 87 XM_B_Phish66 6000 1.95 3.54 1.35 88 T_XMDrugObfuBody_08 5971 1.81 3.52 1.16 89 XM_UB50 5956 1.42 3.51 0.63 90 KHOP_HELO_FCRDNS 5645 4.45 3.33 4.87 91 MIME_QP_LONG_LINE 5624 4.31 3.31 4.68 92 XMDiploma_00 5508 1.77 3.25 1.22 93 RCVD_IN_VALIDITY_SAFE 5409 3.48 3.19 3.59 94 TM2_M_VERY_LONG_WORD 5358 1.64 3.16 1.07 95 RCVD_IN_MSPIKE_L5 5316 0.88 3.13 0.02 96 SpammyFromTLD_02 5081 1.15 2.99 0.46 97 HTML_IMAGE_RATIO_06 5081 8.44 2.99 10.50 98 MIME_HTML_MOSTLY 5040 2.45 2.97 2.25 99 XM_B_Unsub2 4972 1.73 2.93 1.28 100 T_REMOTE_IMAGE 4934 2.95 2.91 2.96 101 RCVD_IN_IADB_LISTED 4898 3.87 2.89 4.24 102 XMBody_17 4754 1.00 2.80 0.31 103 RCVD_IN_VALIDITY_RPBL 4613 0.76 2.72 0.02 104 RCVD_IN_MSPIKE_H4 4584 3.47 2.70 3.76 105 SpammyFromTLD_01 4501 1.15 2.65 0.58 106 TR_Mismatch_TLD_01 4348 0.91 2.56 0.29 107 PDS_OTHER_BAD_TLD 4278 0.79 2.52 0.14 108 RCVD_IN_IADB_SPF 4084 3.39 2.41 3.77 109 RCVD_IN_VALIDITY_CERTIFIED 4076 3.00 2.40 3.22 110 T_TooManySym_01 4073 4.07 2.40 4.70 111 T_FILL_THIS_FORM_SHORT 3992 1.15 2.35 0.70 112 TR_XM_MSPIKECOMBO2 3937 0.76 2.32 0.17 113 HTML_IMAGE_RATIO_08 3893 2.68 2.29 2.82 114 TM2_M_URI_OPT_OUT 3793 3.98 2.24 4.64 115 RCVD_IN_IADB_DK 3778 2.99 2.23 3.27 116 BOTNET_NORDNS 3738 0.61 2.20 0.01 117 RCVD_IN_IADB_SENDERID 3725 3.05 2.20 3.37 118 RCVD_IN_PSBL 3676 0.68 2.17 0.11 119 TR_LOTS_OF_MONEY3 3639 0.74 2.14 0.20 120 URI_NOVOWEL 3585 2.04 2.11 2.01 121 USER_IN_DEF_DKIM_WL 3579 7.27 2.11 9.22 122 RCVD_IN_MSPIKE_L3 3577 1.11 2.11 0.73 123 TR_XM_SB_Phish 3567 2.67 2.10 2.88 124 XMSexyCombo_01 3514 0.80 2.07 0.31 125 SUBJ_ALL_CAPS 3484 1.83 2.05 1.74 126 XM_B_SpammyWords4 3451 0.90 2.03 0.48 127 XM_B_COVIDMETA 3446 0.85 2.03 0.40 128 XM_DK_Undo_01 3354 1.55 1.98 1.39 129 XM_UB99 3301 0.54 1.95 0.00 130 XMSubPhish11 3288 2.60 1.94 2.85 131 URI_HEX 3142 1.18 1.85 0.93 132 HTTPS_HTTP_MISMATCH 3091 0.91 1.82 0.56 133 XM_CamelCaseFrm001 3088 1.60 1.82 1.52 134 FROM_EXCESS_BASE64 3079 1.75 1.81 1.72 135 BAYES_40 3055 3.96 1.80 4.78 136 MAILING_LIST_MULTI 3048 1.99 1.80 2.07 137 XM_H_Long_From02 2920 1.06 1.72 0.81 138 T_XMDrugObfuBody_00 2873 0.98 1.69 0.71 139 RCVD_IN_IADB_VOUCHED 2863 2.46 1.69 2.75 140 XMHTML_After_End 2846 0.83 1.68 0.51 141 URIBL_DBL_SPAM 2817 0.46 1.66 0.01 142 XMGenDplmaNmb 2809 0.98 1.66 0.72 143 TR_XM_NoHeaderRelay 2732 0.50 1.61 0.08 144 BODY_URI_ONLY 2706 0.63 1.59 0.26 145 XM_UB999 2658 0.43 1.57 0.00 146 TR_XM_COVIDMETA4 2631 0.68 1.55 0.35 147 XM_URI_RBL 2630 0.50 1.55 0.11 148 XMStockSpam_06 2531 1.10 1.49 0.95 149 HTML_TAG_BALANCE_BODY 2520 0.79 1.49 0.52 150 URIBL_BLACK 2481 0.44 1.46 0.05 151 XMBrknScrpt_02 2335 0.72 1.38 0.47 152 FROM_SUSPICIOUS_NTLD 2321 0.39 1.37 0.02 153 RELAYCOUNTRY_AU 2310 0.55 1.36 0.25 154 TR_XM_FormFill 2246 0.38 1.32 0.03 155 TR_XM_MaxSPIKE 2243 0.44 1.32 0.11 156 TR_XM_PHPDW 2240 0.55 1.32 0.25 157 FROM_SUSPICIOUS_NTLD_FP 2224 0.37 1.31 0.01 158 TR_XM_PHPForged 2158 0.51 1.27 0.22 159 HTML_TAG_BALANCE_CENTER 2148 0.41 1.27 0.09 160 TR_XM_FormFill2 2125 0.50 1.25 0.22 161 XMSubNoVowel 2121 4.22 1.25 5.34 162 XM_H_PHPOS 2116 0.49 1.25 0.21 163 T_XMHurry_00 2080 0.55 1.23 0.29 164 URI_TRY_3LD 2053 0.69 1.21 0.50 165 XMBdyGiftCard01 1995 0.71 1.18 0.53 166 RDNS_DYNAMIC 1989 0.55 1.17 0.32 167 XM_GoogleGroups 1968 1.15 1.16 1.15 168 XMMoneyMeta_00 1966 0.63 1.16 0.43 169 DKIM_ADSP_CUSTOM_MED 1961 0.81 1.16 0.69 170 RELAYCOUNTRY_RU 1955 0.33 1.15 0.01 171 TR_Symld_Words 1950 1.24 1.15 1.27 172 LongTLD 1933 0.45 1.14 0.19 173 URI_PHP_REDIR 1905 0.31 1.12 0.00 174 TR_XM_BayesRelay 1866 0.30 1.10 0.00 175 MPART_ALT_DIFF_COUNT 1859 0.62 1.10 0.44 176 XMLngstWrd_00 1855 0.74 1.09 0.60 177 BAYES_20 1855 3.64 1.09 4.60 178 HTML_FONT_FACE_BAD 1829 16.33 1.08 22.09 179 XM_H_Undi_Recip 1818 0.42 1.07 0.18 180 ANY_BOUNCE_MESSAGE 1816 2.70 1.07 3.31 181 TR_MetaPhish_Combo_01 1816 0.75 1.07 0.63 182 BOUNCE_MESSAGE 1812 2.70 1.07 3.31 183 RELAYCOUNTRY_FR 1805 0.43 1.06 0.19 184 XMPhish30 1792 0.78 1.06 0.68 185 XMReplyNow 1786 0.44 1.05 0.20 186 TR_LOTS_OF_MONEY2 1779 0.37 1.05 0.11 187 T_MONEY_PERCENT 1779 0.37 1.05 0.11 188 XM_Body_Dirty_Words_01 1777 0.66 1.05 0.51 189 FORGED_GMAIL_RCVD 1751 0.55 1.03 0.36 190 XMLngstWrd_01 1741 0.67 1.03 0.54 191 FONT_INVIS_LONG_LINE 1734 0.31 1.02 0.04 192 HK_RANDOM_REPLYTO 1733 0.33 1.02 0.07 193 XM_ProductURIs 1722 0.72 1.01 0.60 194 REMOVE_BEFORE_LINK 1717 0.42 1.01 0.20 195 XM_B_DNDMA 1711 0.51 1.01 0.32 196 DIET_1 1708 0.45 1.01 0.24 197 NML_ADSP_CUSTOM_MED 1702 0.58 1.00 0.42 198 TR_XM_COVIDMETA1 1696 0.37 1.00 0.14 199 TR_XM_Spammywords 1666 0.77 0.98 0.69 200 XM_S_SpammyWords 1666 0.77 0.98 0.69 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 404351 91.59 95.55 90.09 2 RELAYCOUNTRY_US 373521 81.96 78.62 83.22 3 DCC_CHECK_NEGATIVE 344010 64.99 34.15 76.64 4 XM_B_Unicode 312439 73.16 82.54 69.61 5 DKIM_SIGNED 249393 62.80 81.94 55.56 6 XM_DK_Pass 244121 61.00 78.49 54.39 7 DKIM_VALID 240106 60.14 77.73 53.49 8 BAYES_50 221039 47.92 44.42 49.25 9 XM_B_SpammyWords 208321 51.48 64.90 46.41 10 XM_B_Unicode3 188578 42.29 43.01 42.01 11 DKIM_VALID_AU 186394 46.19 58.52 41.53 12 XMListUnsubscribeExists 163229 43.80 63.47 36.37 13 T_TM2_M_HEADER_IN_MSG 137927 28.46 22.45 30.73 14 RCVD_IN_MSPIKE_H2 132894 34.47 47.35 29.61 15 DCC_CHECK 104645 34.97 65.81 23.31 16 MIME_HTML_ONLY 103756 26.65 35.98 23.12 17 HTML_FONT_FACE_BAD 99157 16.33 1.08 22.09 18 BAYES_00 98265 16.09 0.73 21.89 19 DKIM_VALID_EF 94751 23.75 30.74 21.11 20 HTML_FONT_LOW_CONTRAST 94209 24.02 32.05 20.99 21 XMSubLong 87062 20.67 24.05 19.40 22 FVGT_m_MULTI_ODD 86074 22.23 30.29 19.18 23 LOC_TINY_FONT_1 77711 21.77 33.56 17.31 24 XM_H_Trusted_IP 76260 12.33 0.00 16.99 25 XM_B_SpammyWords2 73056 21.84 36.57 16.28 26 HTML_IMAGE_RATIO_04 71735 12.76 4.24 15.98 27 ALL_TRUSTED 65906 12.30 6.00 14.68 28 T_KAM_HTML_FONT_INVALID 65452 18.47 28.75 14.58 29 LOTS_OF_MONEY 58391 13.14 13.48 13.01 30 RCVD_IN_MSPIKE_WL 58179 12.29 10.52 12.96 31 IN_ZIMBRA_NJ_WHITELIST 56156 9.12 0.14 12.51 32 MPART_ALT_DIFF 55146 10.52 5.84 12.29 33 XMStrtUSub 47584 9.08 5.04 10.60 34 HTML_IMAGE_RATIO_06 47116 8.44 2.99 10.50 35 MIME_HTML_ONLY_MULTI 47089 8.59 3.55 10.49 36 TR_XM_SpammyWords4 46546 10.60 11.20 10.37 37 XM_Multi_Part_URI 44465 11.96 17.39 9.91 38 USER_IN_DEF_DKIM_WL 41402 7.27 2.11 9.22 39 XM_Evil_Numbers_Gen 39786 8.86 8.86 8.86 40 XM_SPF_SoftFail 39654 7.86 5.27 8.83 41 XM_Body_Dirty_Words 39141 12.39 22.10 8.72 42 RCVD_IN_MSPIKE_H3 38209 8.26 7.57 8.51 43 XM_B_Unsub 36668 10.31 15.98 8.17 44 XM_DKIMWhitelistDomains 31398 5.09 0.04 7.00 45 LotsOfNums_01 31152 7.02 7.25 6.94 46 TooManyTo_001 31131 6.25 4.43 6.94 47 BAYES_60 29477 6.76 7.25 6.57 48 UNPARSEABLE_RELAY 24591 7.16 11.61 5.48 49 TR_XM_BayesUnsub 24202 8.19 15.61 5.39 50 XMSubNoVowel 23955 4.22 1.25 5.34 51 TR_XM_DK_Bayes 22437 3.78 0.55 5.00 52 KHOP_HELO_FCRDNS 21854 4.45 3.33 4.87 53 BAYES_40 21466 3.96 1.80 4.78 54 TR_XM_DK_Bayes1 21435 3.61 0.54 4.78 55 XM_DK_Undo_02 21368 14.70 41.00 4.76 56 T_TooManySym_01 21081 4.07 2.40 4.70 57 MIME_QP_LONG_LINE 21007 4.31 3.31 4.68 58 TM2_M_URI_OPT_OUT 20842 3.98 2.24 4.64 59 BAYES_20 20661 3.64 1.09 4.60 60 XM_B_SpammyWords3 20130 6.42 11.54 4.48 61 TR_XM_UnparsRelay 19023 6.19 11.34 4.24 62 RCVD_IN_IADB_LISTED 19010 3.87 2.89 4.24 63 BAYES_99 18743 11.65 31.42 4.18 64 TR_XM_DK_Bayes2 18554 3.12 0.45 4.13 65 HTML_IMAGE_RATIO_02 18367 4.59 5.90 4.09 66 XM_H_Long_From01 18094 4.41 5.42 4.03 67 RCVD_IN_IADB_SPF 16902 3.39 2.41 3.77 68 RCVD_IN_MSPIKE_H4 16865 3.47 2.70 3.76 69 XM_PDF 16747 2.97 0.94 3.73 70 BOTNET_IPINHOSTNAME 16705 6.29 13.10 3.72 71 BAYES_05 16425 2.82 0.60 3.66 72 RCVD_IN_VALIDITY_SAFE 16119 3.48 3.19 3.59 73 XM_SendGrid 16082 4.43 6.66 3.58 74 TR_XM_DKIM_Undo 15309 11.04 31.21 3.41 75 BAYES_999 15308 9.26 24.72 3.41 76 XMNumbers 15230 4.88 8.82 3.39 77 RCVD_IN_IADB_SENDERID 15136 3.05 2.20 3.37 78 BOUNCE_MESSAGE 14868 2.70 1.07 3.31 79 ANY_BOUNCE_MESSAGE 14868 2.70 1.07 3.31 80 RCVD_IN_IADB_DK 14687 2.99 2.23 3.27 81 RCVD_IN_VALIDITY_CERTIFIED 14467 3.00 2.40 3.22 82 BAYES_80 14133 4.48 7.99 3.15 83 XMSubMetaSx_00 13308 3.88 6.30 2.96 84 T_REMOTE_IMAGE 13287 2.95 2.91 2.96 85 TR_XM_SB_Phish 12935 2.67 2.10 2.88 86 XMSubPhish11 12813 2.60 1.94 2.85 87 HTML_IMAGE_RATIO_08 12665 2.68 2.29 2.82 88 XM_UncommonTLD01 12600 4.02 7.24 2.81 89 XMSexyCombo_05 12553 4.77 9.98 2.80 90 T_TooManySym_02 12435 2.24 0.85 2.77 91 RCVD_IN_IADB_VOUCHED 12354 2.46 1.69 2.75 92 RELAYCOUNTRY_META 12182 6.68 17.16 2.71 93 XM_B_Phish_Phrases 11724 3.67 6.45 2.61 94 TR_XM_PhishingBody 10997 3.48 6.22 2.45 95 HTML_MIME_NO_HTML_TAG 10989 4.19 8.80 2.45 96 FSL_BULK_SIG 10871 4.85 11.29 2.42 97 TR_XM_DK_SendGrid 10121 2.74 4.01 2.25 98 MIME_HTML_MOSTLY 10113 2.45 2.97 2.25 99 DKIM_INVALID 9287 2.66 4.22 2.07 100 MAILING_LIST_MULTI 9269 1.99 1.80 2.07 101 URI_NOVOWEL 9012 2.04 2.11 2.01 102 BAYES_95 8634 2.69 4.70 1.92 103 XMSubLongNoVowel 8603 1.53 0.51 1.92 104 TooManyTo_002 8585 1.52 0.46 1.91 105 XMSubGarbage 8461 1.44 0.26 1.89 106 RCVD_IN_IADB_OPTIN 8152 1.58 0.97 1.82 107 XM_B_SpammyTLD 8124 2.47 4.21 1.81 108 SUBJ_ALL_CAPS 7820 1.83 2.05 1.74 109 FROM_EXCESS_BASE64 7735 1.75 1.81 1.72 110 TVD_RCVD_IP 7521 1.38 0.59 1.68 111 HELO_NODOT 7143 1.31 0.56 1.59 112 HELO_NO_DOMAIN 7136 1.31 0.55 1.59 113 INVALID_MSGID 6877 1.17 0.20 1.53 114 XM_CamelCaseFrm001 6815 1.60 1.82 1.52 115 XM_E_Blogspot 6450 1.08 0.14 1.44 116 IN_HORDE_ADDRESS_BOOK 6367 1.06 0.11 1.42 117 XM_DK_Undo_01 6223 1.55 1.98 1.39 118 T_XMDrugObfuBody_14 6222 2.11 4.01 1.39 119 XM_B_Phish66 6043 1.95 3.54 1.35 120 TO_MALFORMED 5941 0.96 0.01 1.32 121 TR_XM_SpammyWords5 5894 2.07 4.06 1.31 122 XM_B_Unsub2 5753 1.73 2.93 1.28 123 TR_Symld_Words 5704 1.24 1.15 1.27 124 TooManyTo_003 5621 1.01 0.38 1.25 125 XMDiploma_00 5458 1.77 3.25 1.22 126 BOTNET 5442 4.12 11.82 1.21 127 T_XMDrugObfuBody_08 5225 1.81 3.52 1.16 128 TR_XM_SpammyRelay 5217 3.71 10.45 1.16 129 XM_GoogleGroups 5169 1.15 1.16 1.15 130 XMGappySubj_01 5105 0.87 0.17 1.14 131 XM_B_Investor 5047 2.33 5.51 1.12 132 TM2_M_VERY_LONG_WORD 4781 1.64 3.16 1.07 133 TR_DCC_Bayes_99 4655 6.69 21.64 1.04 134 RCVD_IN_MSPIKE_BL 4654 2.38 5.95 1.04 135 TR_XM_MSPIKECOMBO 4642 2.36 5.86 1.03 136 UNTRUSTED_Relay 4539 2.98 8.17 1.01 137 XMCapTrack 4424 0.83 0.40 0.99 138 XMStockSpam_06 4248 1.10 1.49 0.95 139 XMBSHREFv2 4210 0.77 0.31 0.94 140 URI_HEX 4154 1.18 1.85 0.93 141 TooManyTo_004 3988 0.73 0.29 0.89 142 XM_OfRef6 3814 1.72 4.01 0.85 143 MSGID_NOFQDN1 3660 0.61 0.07 0.82 144 XM_H_Long_From02 3650 1.06 1.72 0.81 145 TVD_SPACE_RATIO 3584 0.60 0.08 0.80 146 HTML_IMAGE_ONLY_04 3467 2.11 5.65 0.77 147 HTML_SHORT_LINK_IMG_1 3350 2.10 5.69 0.75 148 RELAYCOUNTRY_CA 3281 2.29 6.41 0.73 149 RCVD_IN_MSPIKE_L3 3277 1.11 2.11 0.73 150 XMGenDplmaNmb 3234 0.98 1.66 0.72 151 T_XMDrugObfuBody_00 3192 0.98 1.69 0.71 152 RCVD_IN_RP_SAFE 3169 0.69 0.65 0.71 153 T_FILL_THIS_FORM_SHORT 3144 1.15 2.35 0.70 154 RCVD_IN_MSPIKE_H5 3105 0.57 0.24 0.69 155 TR_XM_Spammywords 3093 0.77 0.98 0.69 156 XM_S_SpammyWords 3093 0.77 0.98 0.69 157 DKIM_ADSP_CUSTOM_MED 3078 0.81 1.16 0.69 158 TooManyTo_005 3065 0.56 0.25 0.68 159 XMPhish30 3052 0.78 1.06 0.68 160 XMBody_95 2982 0.56 0.29 0.66 161 RCVD_IN_RP_CERTIFIED 2859 0.60 0.49 0.64 162 XM_UB50 2836 1.42 3.51 0.63 163 TR_MetaPhish_Combo_01 2809 0.75 1.07 0.63 164 T_TooManySym_03 2746 0.54 0.34 0.61 165 XM_ProductURIs 2708 0.72 1.01 0.60 166 XMLngstWrd_00 2707 0.74 1.09 0.60 167 SpammyFromTLD_01 2583 1.15 2.65 0.58 168 HTML_IMAGE_ONLY_20 2573 0.61 0.70 0.57 169 HTTPS_HTTP_MISMATCH 2510 0.91 1.82 0.56 170 XM_ShortIntro_01 2507 0.48 0.27 0.56 171 TR_XM_SpammyWords2 2472 3.23 10.30 0.55 172 XMLngstWrd_01 2416 0.67 1.03 0.54 173 FROM_GOV_DKIM_AU 2390 0.51 0.44 0.53 174 XMBdyGiftCard01 2375 0.71 1.18 0.53 175 HTML_TAG_BALANCE_BODY 2339 0.79 1.49 0.52 176 XMHTMLBadTable_001 2320 0.57 0.73 0.52 177 XM_B_COPY_HTML 2312 0.59 0.80 0.52 178 TR_XM_Base64_M1 2297 0.63 0.95 0.51 179 XM_Body_Dirty_Words_01 2281 0.66 1.05 0.51 180 XMHTML_After_End 2273 0.83 1.68 0.51 181 URI_TRY_3LD 2233 0.69 1.21 0.50 182 XM_D_tchamptons_WL 2171 0.35 0.00 0.48 183 XM_B_SpammyWords4 2135 0.90 2.03 0.48 184 T_OBFU_PDF_ATTACH 2130 0.41 0.23 0.47 185 XMBrknScrpt_02 2095 0.72 1.38 0.47 186 XM_UCStrings02 2079 0.36 0.08 0.46 187 XM_H_PHPMailer 2059 0.51 0.66 0.46 188 T_Symld_Words_02 2052 0.57 0.85 0.46 189 SpammyFromTLD_02 2043 1.15 2.99 0.46 190 XMLngstWrd_02 2041 0.57 0.88 0.45 191 SHORT_HELO_AND_INLINE_IMAGE 2028 0.36 0.11 0.45 192 RELAYCOUNTRY_GB 2025 0.50 0.64 0.45 193 RCVD_IN_BL_SPAMCOP_NET 2008 3.12 10.18 0.45 194 XMNoVowels 1993 0.43 0.40 0.44 195 TM2_M_A_HREF_HREF 1979 0.56 0.88 0.44 196 MPART_ALT_DIFF_COUNT 1967 0.62 1.10 0.44 197 PLING_QUERY 1961 0.55 0.84 0.44 198 TR_XM_SpammyWords3 1937 1.32 3.68 0.43 199 XMMoneyMeta_00 1929 0.63 1.16 0.43 200 XM_BadFromFormat 1899 1.73 5.18 0.42 ----------------------------------------------------------------------