Email: 471087 Autolearn: 0 AvgScore: 1.75 AvgScanTime: 1.35 sec Spam: 111598 Autolearn: 0 AvgScore: 12.98 AvgScanTime: 1.56 sec Ham: 359489 Autolearn: 0 AvgScore: -1.73 AvgScanTime: 1.28 sec Time Spent Running SA: 176.10 hours Time Spent Processing Spam: 48.25 hours Time Spent Processing Ham: 127.85 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 107760 89.51 96.56 87.31 2 DKIM_SIGNED 99570 74.59 89.22 70.04 3 XM_DK_Pass 96037 72.48 86.06 68.27 4 DKIM_VALID 92934 70.25 83.28 66.20 5 RELAYCOUNTRY_US 92830 81.57 83.18 81.07 6 XM_B_Unicode 90034 71.95 80.68 69.24 7 XMListUnsubscribeExists 83487 52.89 74.81 46.08 8 XM_B_SpammyWords 81057 51.98 72.63 45.57 9 DCC_CHECK 76690 40.79 68.72 32.12 10 DKIM_VALID_AU 66571 51.97 59.65 49.58 11 XM_B_Unicode3 50975 43.45 45.68 42.76 12 XM_DK_Undo_02 50620 16.20 45.36 7.14 13 BAYES_50 47604 50.55 42.66 53.00 14 XM_B_SpammyWords2 44426 22.36 39.81 16.95 15 LOC_TINY_FONT_1 42324 26.45 37.93 22.88 16 TR_XM_DKIM_Undo 41808 12.98 37.46 5.37 17 HTML_FONT_LOW_CONTRAST 38628 27.67 34.61 25.51 18 BAYES_99 35936 12.16 32.20 5.94 19 DKIM_VALID_EF 35739 26.37 32.02 24.62 20 FVGT_m_MULTI_ODD 35583 24.41 31.88 22.10 21 DCC_CHECK_NEGATIVE 34873 59.17 31.25 67.84 22 T_KAM_HTML_FONT_INVALID 32947 20.67 29.52 17.93 23 MIME_HTML_ONLY 31530 23.14 28.25 21.55 24 XM_Body_Dirty_Words 29150 15.85 26.12 12.66 25 RCVD_IN_MSPIKE_H2 28501 21.09 25.54 19.70 26 BAYES_999 28196 9.75 25.27 4.93 27 RCVD_IN_MSPIKE_WL 27129 26.53 24.31 27.22 28 T_TM2_M_HEADER_IN_MSG 26158 29.21 23.44 30.99 29 XMSubLong 25546 21.24 22.89 20.73 30 TR_DCC_Bayes_99 25078 6.58 22.47 1.64 31 XM_Multi_Part_URI 19731 12.75 17.68 11.21 32 RELAYCOUNTRY_META 19543 6.67 17.51 3.30 33 LOTS_OF_MONEY 17965 12.14 16.10 10.91 34 BOTNET_IPINHOSTNAME 16288 6.84 14.60 4.43 35 TR_XM_SpammyWords4 15615 8.69 13.99 7.04 36 XM_B_Unsub 14976 11.82 13.42 11.33 37 XM_B_SpammyWords3 14845 6.04 13.30 3.79 38 UNPARSEABLE_RELAY 13613 8.45 12.20 7.29 39 RCVD_IN_MSPIKE_H3 13521 13.93 12.12 14.50 40 TR_XM_SpammyRelay 13380 3.85 11.99 1.32 41 TR_XM_UnparsRelay 13231 7.15 11.86 5.69 42 RCVD_IN_MSPIKE_H4 13180 10.99 11.81 10.74 43 TR_XM_SpammyWords2 13102 3.46 11.74 0.89 44 BOTNET 12870 3.89 11.53 1.52 45 MPART_ALT_DIFF 12406 7.69 11.12 6.63 46 XM_UncommonTLD01 11017 4.82 9.87 3.25 47 XM_Evil_Numbers_Gen 10816 8.12 9.69 7.63 48 XMSexyCombo_05 10745 4.87 9.63 3.40 49 RCVD_IN_BL_SPAMCOP_NET 10314 3.00 9.24 1.06 50 UNTRUSTED_Relay 9516 2.90 8.53 1.15 51 XM_SendGrid 9436 6.27 8.46 5.59 52 HTML_IMAGE_RATIO_02 9313 6.55 8.35 5.99 53 LotsOfNums_01 8852 8.69 7.93 8.93 54 XMSubMetaSx_00 8052 5.55 7.22 5.03 55 FSL_BULK_SIG 7953 4.37 7.13 3.51 56 BAYES_80 7894 4.81 7.07 4.10 57 TooManyTo_001 7750 8.73 6.94 9.28 58 TR_XM_PhishingBody 7728 4.45 6.92 3.68 59 BAYES_60 7419 8.27 6.65 8.78 60 MIME_HTML_MOSTLY 7198 3.63 6.45 2.75 61 XM_H_Long_From01 6668 5.08 5.98 4.80 62 DKIM_INVALID 6636 4.34 5.95 3.84 63 XM_B_Phish_Phrases 6513 3.67 5.84 2.99 64 MIME_QP_LONG_LINE 6441 6.52 5.77 6.75 65 RCVD_IN_MSPIKE_BL 6235 2.26 5.59 1.22 66 TR_XM_MSPIKECOMBO 6192 2.23 5.55 1.21 67 TM2_M_URI_OPT_OUT 6156 4.84 5.52 4.64 68 MIME_HTML_ONLY_MULTI 6063 4.75 5.43 4.54 69 RELAYCOUNTRY_CA 5977 1.80 5.36 0.70 70 TR_XM_SPAMCOP 5804 1.52 5.20 0.38 71 URI_NOVOWEL 5700 3.61 5.11 3.15 72 TR_XM_MaxUnsub 5537 1.79 4.96 0.80 73 TM2_M_VERY_LONG_WORD 5451 2.24 4.88 1.42 74 SpammyFromTLD_01 5370 1.59 4.81 0.59 75 HTML_IMAGE_RATIO_04 5293 6.21 4.74 6.66 76 TR_XM_DK_SendGrid 5166 3.73 4.63 3.45 77 XM_B_Investor 4977 2.05 4.46 1.31 78 XM_UB50 4921 1.62 4.41 0.76 79 HTML_MIME_NO_HTML_TAG 4473 2.73 4.01 2.33 80 BAYES_95 4353 2.83 3.90 2.50 81 XM_B_Phish66 4318 2.46 3.87 2.02 82 XM_SPF_SoftFail 4242 4.03 3.80 4.10 83 TR_XM_SpammyWords3 4150 1.35 3.72 0.61 84 TR_XM_SpammyWords5 4118 1.96 3.69 1.42 85 HTML_IMAGE_RATIO_06 4050 4.17 3.63 4.34 86 T_FILL_THIS_FORM_SHORT 3951 1.59 3.54 0.99 87 XMSexyCombo_01 3899 2.30 3.49 1.93 88 TR_XM_SB_Phish 3855 2.52 3.45 2.24 89 RCVD_IN_VALIDITY_SAFE 3833 4.62 3.43 4.99 90 T_XMDrugObfuBody_08 3821 2.10 3.42 1.69 91 XMSubPhish11 3808 2.49 3.41 2.21 92 RCVD_IN_IADB_LISTED 3757 5.24 3.37 5.83 93 XM_OfRef6 3748 1.53 3.36 0.96 94 XM_DIRTYINTL 3720 1.01 3.33 0.29 95 XMStrtUSub 3708 4.39 3.32 4.73 96 T_XMDrugObfuBody_14 3492 2.43 3.13 2.21 97 XMNumbers 3258 3.47 2.92 3.65 98 XM_B_SpammyTLD 3235 2.23 2.90 2.02 99 RCVD_IN_VALIDITY_CERTIFIED 3216 3.96 2.88 4.29 100 SpammyFromTLD_02 3192 1.07 2.86 0.51 101 XMBody_17 3125 0.98 2.80 0.41 102 RCVD_IN_IADB_SPF 3090 4.55 2.77 5.10 103 ALL_TRUSTED 3062 13.43 2.74 16.74 104 XM_DK_Undo_01 3008 1.98 2.70 1.76 105 XM_B_COVIDMETA 2997 1.12 2.69 0.63 106 XMDiploma_00 2975 1.56 2.67 1.22 107 KHOP_HELO_FCRDNS 2962 2.71 2.65 2.72 108 T_REMOTE_IMAGE 2957 3.11 2.65 3.26 109 RCVD_IN_IADB_DK 2855 3.87 2.56 4.28 110 JH_SPAMMY_HEADERS 2822 0.60 2.53 0.00 111 RCVD_IN_IADB_SENDERID 2778 4.02 2.49 4.50 112 RCVD_IN_MSPIKE_L5 2715 1.00 2.43 0.55 113 XM_GoogleGroups 2701 1.57 2.42 1.31 114 T_TooManySym_01 2693 5.06 2.41 5.89 115 BAYES_40 2667 4.54 2.39 5.20 116 RCVD_IN_MSPIKE_L3 2642 0.85 2.37 0.38 117 URIBL_DBL_SPAM 2638 0.57 2.36 0.01 118 BAYES_20 2614 3.61 2.34 4.00 119 RELAYCOUNTRY_FR 2576 0.69 2.31 0.19 120 XM_CamelCaseFrm001 2497 1.75 2.24 1.60 121 SUBJ_ALL_CAPS 2494 2.23 2.23 2.23 122 HTML_IMAGE_RATIO_08 2484 3.85 2.23 4.36 123 RCVD_IN_VALIDITY_RPBL 2437 0.57 2.18 0.07 124 T_XMDrugObfuBody_00 2435 1.08 2.18 0.74 125 TR_XM_PHPDW 2239 0.71 2.01 0.31 126 XM_B_Unsub2 2236 1.48 2.00 1.31 127 XM_B_SpammyWords4 2235 0.76 2.00 0.37 128 URI_HEX 2217 1.61 1.99 1.50 129 XMLngstWrd_00 2209 1.08 1.98 0.80 130 RCVD_IN_IADB_VOUCHED 2193 3.33 1.97 3.75 131 TR_XM_FormFill 2184 0.63 1.96 0.22 132 XMLngstWrd_01 2177 1.01 1.95 0.72 133 TR_XM_PHPForged 2142 0.65 1.92 0.26 134 XMLngstWrd_02 2139 0.94 1.92 0.63 135 XMLngstWrd_03 2111 0.84 1.89 0.52 136 TR_XM_FormFill2 2100 0.65 1.88 0.26 137 XM_H_PHPOS 2083 0.64 1.87 0.25 138 MAILING_LIST_MULTI 2046 2.39 1.83 2.56 139 XMLngstWrd_04 2044 0.76 1.83 0.42 140 HTML_TITLE_SUBJ_DIFF 2036 0.58 1.82 0.19 141 XM_URI_RBL 2031 0.51 1.82 0.10 142 TR_LOTS_OF_MONEY3 2020 0.75 1.81 0.42 143 BAYES_00 1978 11.22 1.77 14.16 144 XM_Body_Dirty_Words_01 1973 0.95 1.77 0.70 145 T_XMHurry_00 1972 0.76 1.77 0.45 146 UPPERCASE_75_100 1962 0.56 1.76 0.19 147 USER_IN_DEF_DKIM_WL 1960 9.22 1.76 11.53 148 FROM_EXCESS_BASE64 1922 2.45 1.72 2.67 149 URIBL_BLACK 1857 0.43 1.66 0.05 150 TR_XM_COVIDMETA4 1815 0.63 1.63 0.32 151 XMGenDplmaNmb 1733 0.81 1.55 0.57 152 TR_Symld_Words 1715 1.75 1.54 1.81 153 XMStockSpam_06 1676 1.34 1.50 1.29 154 TR_MetaPhish_Combo_01 1653 0.97 1.48 0.82 155 XMBrknScrpt_02 1624 0.93 1.46 0.76 156 PLING_QUERY 1608 0.66 1.44 0.42 157 TR_XM_INV_DKIM 1602 0.65 1.44 0.41 158 URI_TRY_3LD 1539 0.81 1.38 0.63 159 RELAYCOUNTRY_AU 1531 0.55 1.37 0.29 160 TM2_M_A_HREF_HREF 1524 0.85 1.37 0.69 161 RELAYCOUNTRY_IN 1523 0.38 1.36 0.07 162 XMPhish30 1519 1.07 1.36 0.98 163 TR_XM_NoHeaderRelay 1480 0.44 1.33 0.17 164 RCVD_IN_PSBL 1476 0.51 1.32 0.26 165 TR_XM_COVIDMETA1 1471 0.43 1.32 0.15 166 URI_NO_WWW_BIZ_CGI 1439 0.31 1.29 0.01 167 XM_UB99 1370 0.29 1.23 0.00 168 XMBdyGiftCard01 1323 0.75 1.19 0.62 169 XM_ProductURIs 1322 1.11 1.18 1.08 170 TR_Mismatch_TLD_01 1320 0.46 1.18 0.23 171 XMHTML_After_End 1292 0.76 1.16 0.63 172 SHORT_URI_2 1284 1.05 1.15 1.02 173 XMSpecificSbj 1247 0.26 1.12 0.00 174 XM_UB60 1235 0.31 1.11 0.06 175 RELAYCOUNTRY_GB 1228 0.83 1.10 0.75 176 XM_B_SEO 1226 0.36 1.10 0.13 177 XM_B_Crypto 1218 0.48 1.09 0.29 178 RCVD_IN_IADB_OPTIN 1214 2.14 1.09 2.46 179 URI_PHP_REDIR 1207 0.26 1.08 0.00 180 HTML_TAG_BALANCE_BODY 1198 0.71 1.07 0.60 181 TR_XM_BayesRelay 1179 0.25 1.06 0.00 182 XM_H_PHPMailer 1172 0.65 1.05 0.53 183 TR_Mismatch_TLD_02 1152 0.31 1.03 0.09 184 XM_PDF 1132 3.82 1.01 4.70 185 TR_XM_SEO4 1128 0.30 1.01 0.09 186 HTML_TAG_BALANCE_CENTER 1123 0.31 1.01 0.10 187 XM_B_DNDMA 1111 0.54 1.00 0.40 188 BAYES_05 1111 2.00 1.00 2.32 189 BOTNET_NORDNS 1097 0.24 0.98 0.01 190 LongTLD 1095 0.33 0.98 0.13 191 TR_BOTNET_NEGATE 1088 0.45 0.97 0.29 192 XM_B_COPY_HTML 1078 0.74 0.97 0.67 193 T_Symld_Words_02 1075 0.59 0.96 0.47 194 HTTPS_HTTP_MISMATCH 1073 0.65 0.96 0.55 195 XMSexyCombo_02 1068 0.69 0.96 0.60 196 XM_UB999 1061 0.23 0.95 0.00 197 DKIM_ADSP_CUSTOM_MED 1051 0.90 0.94 0.89 198 TR_XM_DK_Bayes 1051 5.51 0.94 6.93 199 HTML_FONT_FACE_BAD 1046 3.38 0.94 4.13 200 XM_TLDProd2 1019 0.36 0.91 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 313887 89.51 96.56 87.31 2 RELAYCOUNTRY_US 291442 81.57 83.18 81.07 3 DKIM_SIGNED 251791 74.59 89.22 70.04 4 XM_B_Unicode 248917 71.95 80.68 69.24 5 XM_DK_Pass 245420 72.48 86.06 68.27 6 DCC_CHECK_NEGATIVE 243870 59.17 31.25 67.84 7 DKIM_VALID 237990 70.25 83.28 66.20 8 BAYES_50 190514 50.55 42.66 53.00 9 DKIM_VALID_AU 178245 51.97 59.65 49.58 10 XMListUnsubscribeExists 165660 52.89 74.81 46.08 11 XM_B_SpammyWords 163813 51.98 72.63 45.57 12 XM_B_Unicode3 153727 43.45 45.68 42.76 13 DCC_CHECK 115475 40.79 68.72 32.12 14 T_TM2_M_HEADER_IN_MSG 111423 29.21 23.44 30.99 15 RCVD_IN_MSPIKE_WL 97860 26.53 24.31 27.22 16 HTML_FONT_LOW_CONTRAST 91707 27.67 34.61 25.51 17 DKIM_VALID_EF 88502 26.37 32.02 24.62 18 LOC_TINY_FONT_1 82262 26.45 37.93 22.88 19 FVGT_m_MULTI_ODD 79432 24.41 31.88 22.10 20 MIME_HTML_ONLY 77466 23.14 28.25 21.55 21 XMSubLong 74509 21.24 22.89 20.73 22 RCVD_IN_MSPIKE_H2 70828 21.09 25.54 19.70 23 T_KAM_HTML_FONT_INVALID 64444 20.67 29.52 17.93 24 XM_B_SpammyWords2 60920 22.36 39.81 16.95 25 ALL_TRUSTED 60188 13.43 2.74 16.74 26 RCVD_IN_MSPIKE_H3 52119 13.93 12.12 14.50 27 BAYES_00 50889 11.22 1.77 14.16 28 XM_Body_Dirty_Words 45519 15.85 26.12 12.66 29 USER_IN_DEF_DKIM_WL 41453 9.22 1.76 11.53 30 XM_B_Unsub 40718 11.82 13.42 11.33 31 XM_Multi_Part_URI 40314 12.75 17.68 11.21 32 LOTS_OF_MONEY 39233 12.14 16.10 10.91 33 RCVD_IN_MSPIKE_H4 38592 10.99 11.81 10.74 34 TooManyTo_001 33364 8.73 6.94 9.28 35 LotsOfNums_01 32092 8.69 7.93 8.93 36 BAYES_60 31549 8.27 6.65 8.78 37 IN_ZIMBRA_NJ_WHITELIST 31242 6.65 0.08 8.69 38 XM_Evil_Numbers_Gen 27417 8.12 9.69 7.63 39 XM_DKIMWhitelistDomains 26843 5.70 0.01 7.47 40 UNPARSEABLE_RELAY 26190 8.45 12.20 7.29 41 XM_DK_Undo_02 25685 16.20 45.36 7.14 42 TR_XM_SpammyWords4 25315 8.69 13.99 7.04 43 TR_XM_DK_Bayes 24911 5.51 0.94 6.93 44 MIME_QP_LONG_LINE 24272 6.52 5.77 6.75 45 TR_XM_DK_Bayes1 24014 5.31 0.91 6.68 46 HTML_IMAGE_RATIO_04 23942 6.21 4.74 6.66 47 MPART_ALT_DIFF 23824 7.69 11.12 6.63 48 HTML_IMAGE_RATIO_02 21529 6.55 8.35 5.99 49 BAYES_99 21368 12.16 32.20 5.94 50 T_TooManySym_01 21159 5.06 2.41 5.89 51 RCVD_IN_IADB_LISTED 20945 5.24 3.37 5.83 52 TR_XM_DK_Bayes2 20539 4.53 0.71 5.71 53 TR_XM_UnparsRelay 20454 7.15 11.86 5.69 54 XM_SendGrid 20106 6.27 8.46 5.59 55 TR_XM_DKIM_Undo 19318 12.98 37.46 5.37 56 XM_H_Trusted_IP 18832 4.00 0.00 5.24 57 BAYES_40 18708 4.54 2.39 5.20 58 RCVD_IN_IADB_SPF 18337 4.55 2.77 5.10 59 XMSubMetaSx_00 18100 5.55 7.22 5.03 60 RCVD_IN_VALIDITY_SAFE 17922 4.62 3.43 4.99 61 BAYES_999 17718 9.75 25.27 4.93 62 XM_H_Long_From01 17253 5.08 5.98 4.80 63 XMStrtUSub 16996 4.39 3.32 4.73 64 XM_PDF 16884 3.82 1.01 4.70 65 TM2_M_URI_OPT_OUT 16665 4.84 5.52 4.64 66 MIME_HTML_ONLY_MULTI 16304 4.75 5.43 4.54 67 RCVD_IN_IADB_SENDERID 16168 4.02 2.49 4.50 68 BOTNET_IPINHOSTNAME 15911 6.84 14.60 4.43 69 HTML_IMAGE_RATIO_08 15668 3.85 2.23 4.36 70 HTML_IMAGE_RATIO_06 15592 4.17 3.63 4.34 71 RCVD_IN_VALIDITY_CERTIFIED 15426 3.96 2.88 4.29 72 RCVD_IN_IADB_DK 15399 3.87 2.56 4.28 73 HTML_FONT_FACE_BAD 14855 3.38 0.94 4.13 74 XM_SPF_SoftFail 14756 4.03 3.80 4.10 75 BAYES_80 14755 4.81 7.07 4.10 76 BAYES_20 14375 3.61 2.34 4.00 77 DKIM_INVALID 13801 4.34 5.95 3.84 78 XM_B_SpammyWords3 13619 6.04 13.30 3.79 79 RCVD_IN_IADB_VOUCHED 13474 3.33 1.97 3.75 80 TR_XM_PhishingBody 13244 4.45 6.92 3.68 81 XMNumbers 13105 3.47 2.92 3.65 82 ANY_BOUNCE_MESSAGE 13038 2.92 0.64 3.63 83 BOUNCE_MESSAGE 13034 2.92 0.64 3.63 84 T_TooManySym_02 13013 2.95 0.80 3.62 85 FSL_BULK_SIG 12610 4.37 7.13 3.51 86 TR_XM_DK_SendGrid 12394 3.73 4.63 3.45 87 XMSexyCombo_05 12214 4.87 9.63 3.40 88 RELAYCOUNTRY_META 11861 6.67 17.51 3.30 89 T_REMOTE_IMAGE 11708 3.11 2.65 3.26 90 XM_UncommonTLD01 11668 4.82 9.87 3.25 91 URI_NOVOWEL 11308 3.61 5.11 3.15 92 XM_B_Phish_Phrases 10759 3.67 5.84 2.99 93 MIME_HTML_MOSTLY 9886 3.63 6.45 2.75 94 KHOP_HELO_FCRDNS 9796 2.71 2.65 2.72 95 FROM_EXCESS_BASE64 9597 2.45 1.72 2.67 96 MAILING_LIST_MULTI 9215 2.39 1.83 2.56 97 BAYES_95 8993 2.83 3.90 2.50 98 RCVD_IN_IADB_OPTIN 8859 2.14 1.09 2.46 99 HTML_MIME_NO_HTML_TAG 8366 2.73 4.01 2.33 100 BAYES_05 8332 2.00 1.00 2.32 101 TR_XM_SB_Phish 8037 2.52 3.45 2.24 102 SUBJ_ALL_CAPS 8019 2.23 2.23 2.23 103 XMSubPhish11 7940 2.49 3.41 2.21 104 T_XMDrugObfuBody_14 7937 2.43 3.13 2.21 105 TooManyTo_002 7448 1.75 0.70 2.07 106 XM_B_Phish66 7264 2.46 3.87 2.02 107 FILL_THIS_FORM 7263 1.62 0.34 2.02 108 XM_B_SpammyTLD 7254 2.23 2.90 2.02 109 RCVD_IN_MSPIKE_H5 7149 1.61 0.38 1.99 110 INVALID_MSGID 6969 1.50 0.11 1.94 111 XMSexyCombo_01 6936 2.30 3.49 1.93 112 IN_HORDE_ADDRESS_BOOK 6831 1.47 0.10 1.90 113 TR_Symld_Words 6507 1.75 1.54 1.81 114 MSGID_NOFQDN1 6422 1.37 0.03 1.79 115 XM_DK_Undo_01 6314 1.98 2.70 1.76 116 TO_MALFORMED 6129 1.30 0.01 1.70 117 T_XMDrugObfuBody_08 6072 2.10 3.42 1.69 118 TR_DCC_Bayes_99 5901 6.58 22.47 1.64 119 HELO_NODOT 5813 1.38 0.63 1.62 120 HELO_NO_DOMAIN 5812 1.38 0.63 1.62 121 XM_CamelCaseFrm001 5767 1.75 2.24 1.60 122 BOTNET 5471 3.89 11.53 1.52 123 TVD_RCVD_IP 5438 1.18 0.09 1.51 124 URI_HEX 5384 1.61 1.99 1.50 125 TM2_M_VERY_LONG_WORD 5113 2.24 4.88 1.42 126 TR_XM_SpammyWords5 5095 1.96 3.69 1.42 127 XMSubNoVowel 5044 1.24 0.71 1.40 128 TooManyTo_003 5011 1.20 0.57 1.39 129 XMGappySubj_01 4933 1.07 0.08 1.37 130 TR_XM_SpammyRelay 4762 3.85 11.99 1.32 131 XM_GoogleGroups 4716 1.57 2.42 1.31 132 XM_B_Unsub2 4713 1.48 2.00 1.31 133 XM_B_Investor 4698 2.05 4.46 1.31 134 XMStockSpam_06 4630 1.34 1.50 1.29 135 RCVD_IN_MSPIKE_BL 4392 2.26 5.59 1.22 136 XMDiploma_00 4373 1.56 2.67 1.22 137 TR_XM_MSPIKECOMBO 4333 2.23 5.55 1.21 138 UNTRUSTED_Relay 4142 2.90 8.53 1.15 139 XMCapTrack 4092 0.96 0.38 1.14 140 XM_ProductURIs 3894 1.11 1.18 1.08 141 TVD_SPACE_RATIO 3866 0.83 0.04 1.08 142 RCVD_IN_BL_SPAMCOP_NET 3825 3.00 9.24 1.06 143 HTML_IMAGE_ONLY_20 3794 0.89 0.37 1.06 144 XMBSHREFv2 3698 0.87 0.37 1.03 145 SHORT_URI_2 3672 1.05 1.15 1.02 146 T_FILL_THIS_FORM_SHORT 3562 1.59 3.54 0.99 147 TooManyTo_004 3547 0.86 0.46 0.99 148 XMPhish30 3529 1.07 1.36 0.98 149 RCVD_IN_RP_SAFE 3508 0.93 0.77 0.98 150 XM_OfRef6 3463 1.53 3.36 0.96 151 XM_H_Long_From02 3337 0.91 0.87 0.93 152 DKIM_ADSP_CUSTOM_MED 3206 0.90 0.94 0.89 153 TR_XM_SpammyWords2 3188 3.46 11.74 0.89 154 RCVD_IN_RP_CERTIFIED 3086 0.80 0.59 0.86 155 TR_MetaPhish_Combo_01 2935 0.97 1.48 0.82 156 TR_XM_MaxUnsub 2887 1.79 4.96 0.80 157 XMLngstWrd_00 2884 1.08 1.98 0.80 158 TooManyTo_005 2862 0.71 0.41 0.80 159 XM_D_tchamptons_WL 2804 0.60 0.00 0.78 160 T_TooManySym_03 2771 0.65 0.27 0.77 161 XMBrknScrpt_02 2736 0.93 1.46 0.76 162 XM_UB50 2727 1.62 4.41 0.76 163 RELAYCOUNTRY_GB 2697 0.83 1.10 0.75 164 T_XMDrugObfuBody_00 2675 1.08 2.18 0.74 165 XMLngstWrd_01 2602 1.01 1.95 0.72 166 XM_Body_Dirty_Words_01 2505 0.95 1.77 0.70 167 RELAYCOUNTRY_CA 2501 1.80 5.36 0.70 168 TM2_M_A_HREF_HREF 2468 0.85 1.37 0.69 169 FROM_GOV_DKIM_AU 2459 0.57 0.19 0.68 170 XM_B_COPY_HTML 2410 0.74 0.97 0.67 171 T_OBFU_PDF_ATTACH 2294 0.54 0.24 0.64 172 XM_B_COVIDMETA 2279 1.12 2.69 0.63 173 XMHTML_After_End 2276 0.76 1.16 0.63 174 XMLngstWrd_02 2271 0.94 1.92 0.63 175 URI_TRY_3LD 2264 0.81 1.38 0.63 176 XMBdyGiftCard01 2216 0.75 1.19 0.62 177 TR_XM_SpammyWords3 2206 1.35 3.72 0.61 178 NML_ADSP_CUSTOM_MED 2179 0.62 0.69 0.61 179 XMSexyCombo_02 2168 0.69 0.96 0.60 180 HTML_TAG_BALANCE_BODY 2140 0.71 1.07 0.60 181 SpammyFromTLD_01 2123 1.59 4.81 0.59 182 XMBody_95 2115 0.48 0.13 0.59 183 XMGenDplmaNmb 2067 0.81 1.55 0.57 184 TR_MSPIKEBAYES00 2041 0.44 0.02 0.57 185 XMSexyCombo_04 2014 0.57 0.61 0.56 186 XMSubMetaD_03 2014 0.44 0.06 0.56 187 HTTPS_HTTP_MISMATCH 1994 0.65 0.96 0.55 188 RCVD_IN_MSPIKE_L5 1991 1.00 2.43 0.55 189 XM_ShortIntro_01 1917 0.60 0.81 0.53 190 RCVD_IN_SORBS_DUL 1912 0.45 0.21 0.53 191 XM_H_PHPMailer 1907 0.65 1.05 0.53 192 DIET_1 1869 0.60 0.86 0.52 193 XMLngstWrd_03 1852 0.84 1.89 0.52 194 SpammyFromTLD_02 1846 1.07 2.86 0.51 195 T_MANY_PILL_PRICE 1748 0.37 0.01 0.49 196 SHORT_HELO_AND_INLINE_IMAGE 1721 0.39 0.09 0.48 197 TVD_SPACE_RATIO_MINFP 1704 0.40 0.15 0.47 198 T_Symld_Words_02 1689 0.59 0.96 0.47 199 SHORT_URI_3 1684 0.47 0.46 0.47 200 FORGED_GMAIL_RCVD 1683 0.55 0.80 0.47 ----------------------------------------------------------------------