Email: 583671 Autolearn: 0 AvgScore: 0.98 AvgScanTime: 1.26 sec Spam: 144379 Autolearn: 0 AvgScore: 14.26 AvgScanTime: 1.41 sec Ham: 439292 Autolearn: 0 AvgScore: -3.39 AvgScanTime: 1.21 sec Time Spent Running SA: 204.11 hours Time Spent Processing Spam: 56.38 hours Time Spent Processing Ham: 147.73 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138398 91.09 95.86 89.52 2 DKIM_SIGNED 119793 64.47 82.97 58.39 3 DKIM_VALID 115268 62.18 79.84 56.38 4 XM_DK_Pass 115220 62.78 79.80 57.19 5 RELAYCOUNTRY_US 114050 78.14 78.99 77.85 6 XM_B_Unicode 104485 74.15 72.37 74.74 7 DCC_CHECK 99620 37.84 69.00 27.60 8 XMListUnsubscribeExists 94597 44.85 65.52 38.05 9 XM_B_SpammyWords 87277 49.25 60.45 45.57 10 DKIM_VALID_AU 86802 47.73 60.12 43.66 11 BAYES_50 64309 51.65 44.54 53.98 12 XM_DK_Undo_02 57285 14.18 39.68 5.80 13 XM_B_Unicode3 56787 46.49 39.33 48.85 14 MIME_HTML_ONLY 52828 30.72 36.59 28.79 15 LOC_TINY_FONT_1 49576 22.35 34.34 18.41 16 XM_B_SpammyWords2 47039 19.35 32.58 15.00 17 FVGT_m_MULTI_ODD 46881 22.73 32.47 19.53 18 DCC_CHECK_NEGATIVE 44717 62.12 30.97 72.36 19 HTML_FONT_LOW_CONTRAST 44560 23.84 30.86 21.54 20 BAYES_99 43607 10.99 30.20 4.67 21 TR_XM_DKIM_Undo 43555 10.44 30.17 3.95 22 DKIM_VALID_EF 40963 23.47 28.37 21.86 23 T_KAM_HTML_FONT_INVALID 38556 17.37 26.70 14.30 24 RCVD_IN_MSPIKE_H2 37104 19.33 25.70 17.23 25 BAYES_999 33671 8.67 23.32 3.85 26 RELAYCOUNTRY_META 32714 8.04 22.66 3.24 27 XMSubLong 32316 24.99 22.38 25.84 28 TR_DCC_Bayes_99 31410 6.61 21.76 1.64 29 RCVD_IN_MSPIKE_WL 31105 24.08 21.54 24.92 30 XM_Body_Dirty_Words 30449 12.33 21.09 9.45 31 T_TM2_M_HEADER_IN_MSG 28858 23.28 19.99 24.37 32 BOTNET 24131 5.26 16.71 1.50 33 XM_Multi_Part_URI 22137 11.00 15.33 9.57 34 XM_B_Unsub 21231 14.23 14.71 14.07 35 FSL_BULK_SIG 20469 6.02 14.18 3.34 36 BOTNET_IPINHOSTNAME 20366 6.37 14.11 3.83 37 RCVD_IN_MSPIKE_H3 19863 13.35 13.76 13.21 38 UNTRUSTED_Relay 19711 4.13 13.65 1.00 39 LOTS_OF_MONEY 18422 8.36 12.76 6.91 40 UNPARSEABLE_RELAY 17731 7.72 12.28 6.22 41 TR_XM_UnparsRelay 17399 6.64 12.05 4.86 42 MPART_ALT_DIFF 16836 11.11 11.66 10.93 43 XM_B_SpammyWords3 16739 5.66 11.59 3.71 44 HTML_MIME_NO_HTML_TAG 16047 4.36 11.11 2.14 45 TR_XM_SpammyWords4 15113 5.86 10.47 4.35 46 XM_UncommonTLD01 15082 4.67 10.45 2.78 47 XMSexyCombo_05 14987 4.80 10.38 2.96 48 RCVD_IN_BL_SPAMCOP_NET 14871 3.05 10.30 0.67 49 TR_XM_SpammyRelay 13919 3.33 9.64 1.25 50 XM_Evil_Numbers_Gen 13421 8.25 9.30 7.91 51 TR_XM_SpammyWords2 12773 2.62 8.85 0.58 52 MIME_HTML_ONLY_MULTI 12034 9.14 8.34 9.40 53 BAYES_60 11777 7.54 8.16 7.34 54 XM_SendGrid 11328 5.40 7.85 4.60 55 BAYES_80 11067 4.53 7.67 3.50 56 RCVD_IN_MSPIKE_H4 10508 9.43 7.28 10.13 57 LotsOfNums_01 10487 7.53 7.26 7.61 58 RCVD_IN_MSPIKE_BL 10373 2.45 7.18 0.90 59 HTML_IMAGE_RATIO_02 10124 5.30 7.01 4.73 60 XM_SPF_SoftFail 10017 2.98 6.94 1.68 61 TR_XM_MSPIKECOMBO 9859 2.36 6.83 0.89 62 XM_UB50 9668 2.15 6.70 0.65 63 XM_H_Long_From01 9468 4.92 6.56 4.39 64 XM_B_Phish_Phrases 9264 3.66 6.42 2.76 65 TM2_M_VERY_LONG_WORD 9256 2.69 6.41 1.47 66 XMSubMetaSx_00 8558 3.44 5.93 2.63 67 TR_XM_PhishingBody 8326 3.46 5.77 2.70 68 XM_GoogleGroups 8128 2.65 5.63 1.67 69 TR_XM_MaxUnsub 8080 1.96 5.60 0.76 70 TooManyTo_001 7592 10.81 5.26 12.63 71 HTML_IMAGE_RATIO_04 7298 14.15 5.05 17.14 72 T_REMOTE_IMAGE 7117 3.47 4.93 2.99 73 TR_XM_SPAMCOP 6843 1.38 4.74 0.27 74 XMLngstWrd_00 6828 1.98 4.73 1.08 75 GOOG_STO_IMG_HTML 6796 1.17 4.71 0.00 76 XMLngstWrd_01 6741 1.92 4.67 1.02 77 XMLngstWrd_02 6672 1.84 4.62 0.93 78 XMLngstWrd_03 6603 1.77 4.57 0.85 79 TR_XM_DK_SendGrid 6599 3.42 4.57 3.04 80 XMLngstWrd_04 6507 1.70 4.51 0.78 81 BAYES_95 6392 2.78 4.43 2.25 82 XM_B_SpammyTLD 6306 2.53 4.37 1.92 83 HTML_TITLE_SUBJ_DIFF 6305 1.53 4.37 0.59 84 UPPERCASE_75_100 6278 1.51 4.35 0.58 85 XMNumbers 6166 3.27 4.27 2.94 86 RELAYCOUNTRY_CA 6039 1.57 4.18 0.72 87 HTML_TAG_BALANCE_CENTER 6010 1.07 4.16 0.05 88 SpammyFromTLD_02 5818 1.33 4.03 0.45 89 TR_XM_SpammyWords3 5677 1.29 3.93 0.42 90 MIME_HTML_MOSTLY 5648 2.50 3.91 2.04 91 XM_B_Investor 5506 1.93 3.81 1.31 92 RCVD_IN_MSPIKE_L5 5481 1.05 3.80 0.15 93 SpammyFromTLD_01 5281 1.33 3.66 0.56 94 XMStrtUSub 5266 9.14 3.65 10.94 95 KHOP_HELO_FCRDNS 5176 1.78 3.59 1.19 96 XM_BadFromFormat 5112 0.94 3.54 0.09 97 TR_XM_SpammyWords5 5058 1.76 3.50 1.19 98 HTML_SHORT_LINK_IMG_1 5045 0.87 3.49 0.01 99 MIME_QP_LONG_LINE 4842 4.37 3.35 4.70 100 T_XMDrugObfuBody_14 4711 1.94 3.26 1.50 101 TM2_M_URI_OPT_OUT 4695 2.45 3.25 2.19 102 RCVD_IN_VALIDITY_SAFE 4684 3.79 3.24 3.97 103 BOTNET_NORDNS 4526 0.79 3.13 0.02 104 DKIM_INVALID 4525 2.29 3.13 2.01 105 HDRS_MISSP 4480 0.79 3.10 0.03 106 XM_B_Phish66 4377 2.02 3.03 1.69 107 RCVD_IN_VALIDITY_RPBL 4363 0.75 3.02 0.01 108 HTML_IMAGE_RATIO_06 4341 4.48 3.01 4.96 109 HTML_IMAGE_ONLY_04 4337 0.76 3.00 0.03 110 T_XMDrugObfuBody_08 4318 1.57 2.99 1.10 111 XM_DIRTYINTL 4312 0.94 2.99 0.27 112 HTML_SHORT_CENTER 4308 0.74 2.98 0.00 113 HTML_IMAGE_RATIO_08 4247 2.29 2.94 2.08 114 XMDiploma_00 4170 6.01 2.89 7.04 115 XM_OfRef6 4059 1.24 2.81 0.72 116 RCVD_IN_PSBL 4028 0.70 2.79 0.02 117 XM_B_Unsub2 3936 1.62 2.73 1.26 118 URI_NOVOWEL 3902 2.19 2.70 2.02 119 XM_B_SpammyWords4 3846 0.96 2.66 0.41 120 XM_DK_Undo_01 3769 1.74 2.61 1.46 121 MAILING_LIST_MULTI 3736 2.47 2.59 2.43 122 RCVD_IN_VALIDITY_CERTIFIED 3660 3.34 2.53 3.61 123 PDS_OTHER_BAD_TLD 3516 0.76 2.44 0.21 124 T_TooManySym_01 3474 4.16 2.41 4.74 125 XM_CamelCaseFrm001 3465 1.62 2.40 1.37 126 RCVD_IN_IADB_LISTED 3463 4.02 2.40 4.56 127 XM_B_COVIDMETA 3449 1.04 2.39 0.59 128 RELAYCOUNTRY_AU 3166 0.77 2.19 0.30 129 RCVD_IN_MSPIKE_L3 3148 0.84 2.18 0.39 130 TR_XM_SB_Phish 3005 1.86 2.08 1.78 131 RCVD_IN_IADB_SPF 2973 3.60 2.06 4.10 132 XMBody_17 2964 0.77 2.05 0.35 133 SUBJ_ALL_CAPS 2950 1.55 2.04 1.39 134 XMSubPhish11 2897 1.82 2.01 1.76 135 XM_UB60 2803 0.52 1.94 0.05 136 XM_UB99 2764 0.48 1.91 0.00 137 RCVD_IN_IADB_DK 2757 3.21 1.91 3.64 138 HTML_FONT_SIZE_LARGE 2715 0.52 1.88 0.07 139 RCVD_IN_IADB_SENDERID 2712 3.29 1.88 3.75 140 XMSexyCombo_01 2674 0.76 1.85 0.41 141 USER_IN_DEF_DKIM_WL 2636 7.55 1.83 9.43 142 HTML_IMAGE_ONLY_08 2579 0.50 1.79 0.08 143 XM_URI_RBL 2575 0.53 1.78 0.12 144 RELAYCOUNTRY_FR 2553 0.57 1.77 0.18 145 BAYES_40 2550 4.13 1.77 4.90 146 T_XMHurry_00 2494 0.80 1.73 0.49 147 URI_HEX 2467 1.31 1.71 1.18 148 TR_XM_MSPIKECOMBO2 2448 0.52 1.70 0.13 149 ALL_TRUSTED 2429 15.59 1.68 20.16 150 DKIM_ADSP_CUSTOM_MED 2396 0.96 1.66 0.73 151 BODY_URI_ONLY 2374 0.41 1.64 0.01 152 T_FILL_THIS_FORM_SHORT 2308 0.93 1.60 0.71 153 TR_XM_NoHeaderRelay 2282 0.51 1.58 0.16 154 BAYES_20 2271 3.87 1.57 4.63 155 T_XMDrugObfuBody_00 2243 0.75 1.55 0.48 156 TR_XM_PHPDW 2240 0.57 1.55 0.25 157 XM_B_DNDMA 2221 0.71 1.54 0.43 158 TR_Symld_Words 2203 1.39 1.53 1.35 159 URIBL_BLACK 2191 0.41 1.52 0.04 160 FROM_EXCESS_BASE64 2142 1.88 1.48 2.01 161 URI_PHP_REDIR 2142 0.37 1.48 0.00 162 TR_XM_PHPForged 2111 0.53 1.46 0.22 163 HTML_FONT_TINY_NORDNS 2100 0.40 1.45 0.05 164 MIXED_CENTER_CASE 2098 0.36 1.45 0.00 165 MIXED_HREF_CASE 2091 0.36 1.45 0.00 166 MIXED_IMG_CASE 2086 0.36 1.44 0.00 167 RELAYCOUNTRY_RU 2086 0.38 1.44 0.02 168 XMStockSpam_06 2080 1.05 1.44 0.93 169 XMPhish30 2080 0.71 1.44 0.47 170 TR_XM_FormFill2 2079 0.52 1.44 0.22 171 MIXED_AREA_CASE 2075 0.36 1.44 0.00 172 MIXED_FONT_CASE 2071 0.36 1.43 0.00 173 XM_H_PHPOS 2062 0.52 1.43 0.21 174 RELAYCOUNTRY_PL 2052 0.38 1.42 0.04 175 XMGenDplmaNmb 2021 0.78 1.40 0.58 176 RCVD_IN_IADB_VOUCHED 2018 2.29 1.40 2.58 177 XM_UB999 1963 0.34 1.36 0.00 178 URIBL_DBL_SPAM 1934 0.34 1.34 0.01 179 XMHTML_After_End 1811 0.76 1.25 0.59 180 XMSubMetaSxObfu_03 1793 0.52 1.24 0.29 181 TM2_M_A_HREF_HREF 1791 0.68 1.24 0.50 182 RELAYCOUNTRY_GB 1788 0.80 1.24 0.66 183 HTTPS_HTTP_MISMATCH 1784 0.74 1.24 0.58 184 XM_H_Long_From02 1737 0.93 1.20 0.85 185 RELAYCOUNTRY_DE 1694 0.46 1.17 0.23 186 TR_BOTNET_NEGATE 1690 0.54 1.17 0.33 187 URI_TRY_3LD 1679 0.64 1.16 0.47 188 T_Symld_Words_02 1673 0.65 1.16 0.49 189 XM_PDF 1637 3.21 1.13 3.89 190 DIET_1 1620 0.47 1.12 0.25 191 TR_XM_COVIDMETA1 1596 0.41 1.11 0.18 192 TR_LOTS_OF_MONEY3 1585 0.48 1.10 0.28 193 TR_XM_COVIDMETA4 1561 0.37 1.08 0.14 194 XMReplyNow 1560 0.42 1.08 0.20 195 XM_UB80 1558 0.28 1.08 0.01 196 FORGED_GMAIL_RCVD 1527 0.54 1.06 0.37 197 NML_ADSP_CUSTOM_MED 1525 0.62 1.06 0.48 198 XM_B_SEO 1520 0.35 1.05 0.12 199 XMCapTrack 1519 1.05 1.05 1.06 200 XMBdyGiftCard01 1511 0.70 1.05 0.59 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 393247 91.09 95.86 89.52 2 RELAYCOUNTRY_US 342010 78.14 78.99 77.85 3 XM_B_Unicode 328322 74.15 72.37 74.74 4 DCC_CHECK_NEGATIVE 317875 62.12 30.97 72.36 5 DKIM_SIGNED 256492 64.47 82.97 58.39 6 XM_DK_Pass 251220 62.78 79.80 57.19 7 DKIM_VALID 247655 62.18 79.84 56.38 8 BAYES_50 237148 51.65 44.54 53.98 9 XM_B_Unicode3 214585 46.49 39.33 48.85 10 XM_B_SpammyWords 200189 49.25 60.45 45.57 11 DKIM_VALID_AU 191795 47.73 60.12 43.66 12 XMListUnsubscribeExists 167156 44.85 65.52 38.05 13 MIME_HTML_ONLY 126486 30.72 36.59 28.79 14 DCC_CHECK 121237 37.84 69.00 27.60 15 XMSubLong 113521 24.99 22.38 25.84 16 RCVD_IN_MSPIKE_WL 109457 24.08 21.54 24.92 17 T_TM2_M_HEADER_IN_MSG 107042 23.28 19.99 24.37 18 DKIM_VALID_EF 96025 23.47 28.37 21.86 19 HTML_FONT_LOW_CONTRAST 94605 23.84 30.86 21.54 20 ALL_TRUSTED 88556 15.59 1.68 20.16 21 FVGT_m_MULTI_ODD 85773 22.73 32.47 19.53 22 LOC_TINY_FONT_1 80878 22.35 34.34 18.41 23 RCVD_IN_MSPIKE_H2 75705 19.33 25.70 17.23 24 HTML_IMAGE_RATIO_04 75315 14.15 5.05 17.14 25 XM_H_Trusted_IP 70504 12.08 0.00 16.05 26 HTML_FONT_FACE_BAD 68785 11.99 0.84 15.66 27 BAYES_00 68628 11.99 0.94 15.62 28 XM_B_SpammyWords2 65904 19.35 32.58 15.00 29 T_KAM_HTML_FONT_INVALID 62840 17.37 26.70 14.30 30 XM_B_Unsub 61828 14.23 14.71 14.07 31 RCVD_IN_MSPIKE_H3 58032 13.35 13.76 13.21 32 TooManyTo_001 55476 10.81 5.26 12.63 33 XMStrtUSub 48072 9.14 3.65 10.94 34 MPART_ALT_DIFF 48017 11.11 11.66 10.93 35 RCVD_IN_MSPIKE_H4 44511 9.43 7.28 10.13 36 XM_Multi_Part_URI 42058 11.00 15.33 9.57 37 XM_Body_Dirty_Words 41500 12.33 21.09 9.45 38 USER_IN_DEF_DKIM_WL 41430 7.55 1.83 9.43 39 MIME_HTML_ONLY_MULTI 41302 9.14 8.34 9.40 40 XM_Evil_Numbers_Gen 34738 8.25 9.30 7.91 41 LotsOfNums_01 33448 7.53 7.26 7.61 42 BAYES_60 32229 7.54 8.16 7.34 43 XMDiploma_00 30906 6.01 2.89 7.04 44 LOTS_OF_MONEY 30373 8.36 12.76 6.91 45 XM_DKIMWhitelistDomains 28546 4.93 0.17 6.50 46 UNPARSEABLE_RELAY 27343 7.72 12.28 6.22 47 TR_XM_DK_Bayes 26159 4.60 0.46 5.95 48 TR_XM_DK_Bayes1 25550 4.49 0.45 5.82 49 XM_DK_Undo_02 25469 14.18 39.68 5.80 50 IN_ZIMBRA_NJ_WHITELIST 24696 4.26 0.13 5.62 51 XMSubNoVowel 22579 4.02 0.63 5.14 52 TR_XM_DK_Bayes2 22335 3.92 0.39 5.08 53 HTML_IMAGE_RATIO_06 21782 4.48 3.01 4.96 54 BAYES_40 21543 4.13 1.77 4.90 55 TR_XM_UnparsRelay 21336 6.64 12.05 4.86 56 T_TooManySym_01 20825 4.16 2.41 4.74 57 HTML_IMAGE_RATIO_02 20792 5.30 7.01 4.73 58 MIME_QP_LONG_LINE 20667 4.37 3.35 4.70 59 BAYES_99 20536 10.99 30.20 4.67 60 BAYES_20 20342 3.87 1.57 4.63 61 XM_SendGrid 20212 5.40 7.85 4.60 62 RCVD_IN_IADB_LISTED 20028 4.02 2.40 4.56 63 XM_H_Long_From01 19273 4.92 6.56 4.39 64 TR_XM_SpammyWords4 19105 5.86 10.47 4.35 65 RCVD_IN_IADB_SPF 18028 3.60 2.06 4.10 66 RCVD_IN_VALIDITY_SAFE 17427 3.79 3.24 3.97 67 TR_XM_DKIM_Undo 17361 10.44 30.17 3.95 68 XM_PDF 17105 3.21 1.13 3.89 69 BAYES_999 16930 8.67 23.32 3.85 70 BOTNET_IPINHOSTNAME 16838 6.37 14.11 3.83 71 RCVD_IN_IADB_SENDERID 16475 3.29 1.88 3.75 72 XM_B_SpammyWords3 16316 5.66 11.59 3.71 73 RCVD_IN_IADB_DK 15999 3.21 1.91 3.64 74 RCVD_IN_VALIDITY_CERTIFIED 15842 3.34 2.53 3.61 75 BAYES_80 15391 4.53 7.67 3.50 76 FSL_BULK_SIG 14651 6.02 14.18 3.34 77 ANY_BOUNCE_MESSAGE 14434 2.67 0.79 3.29 78 BOUNCE_MESSAGE 14432 2.67 0.79 3.29 79 RELAYCOUNTRY_META 14237 8.04 22.66 3.24 80 BAYES_05 13605 2.50 0.70 3.10 81 TR_XM_DK_SendGrid 13341 3.42 4.57 3.04 82 T_REMOTE_IMAGE 13153 3.47 4.93 2.99 83 XMSexyCombo_05 13018 4.80 10.38 2.96 84 XMNumbers 12895 3.27 4.27 2.94 85 XM_UncommonTLD01 12202 4.67 10.45 2.78 86 XM_B_Phish_Phrases 12123 3.66 6.42 2.76 87 TR_XM_PhishingBody 11867 3.46 5.77 2.70 88 T_TooManySym_02 11759 2.19 0.73 2.68 89 XMSubMetaSx_00 11541 3.44 5.93 2.63 90 RCVD_IN_IADB_VOUCHED 11336 2.29 1.40 2.58 91 MAILING_LIST_MULTI 10663 2.47 2.59 2.43 92 BAYES_95 9863 2.78 4.43 2.25 93 TM2_M_URI_OPT_OUT 9616 2.45 3.25 2.19 94 XMSubGarbage 9521 1.68 0.18 2.17 95 HTML_MIME_NO_HTML_TAG 9420 4.36 11.11 2.14 96 XMSubLongNoVowel 9413 1.68 0.25 2.14 97 HTML_IMAGE_RATIO_08 9144 2.29 2.94 2.08 98 MIME_HTML_MOSTLY 8943 2.50 3.91 2.04 99 URI_NOVOWEL 8888 2.19 2.70 2.02 100 DKIM_INVALID 8837 2.29 3.13 2.01 101 FROM_EXCESS_BASE64 8831 1.88 1.48 2.01 102 XM_B_SpammyTLD 8451 2.53 4.37 1.92 103 TooManyTo_002 8221 1.63 0.90 1.87 104 TR_XM_SB_Phish 7838 1.86 2.08 1.78 105 XMSubPhish11 7736 1.82 2.01 1.76 106 XM_B_Phish66 7431 2.02 3.03 1.69 107 XM_SPF_SoftFail 7375 2.98 6.94 1.68 108 XM_GoogleGroups 7345 2.65 5.63 1.67 109 RCVD_IN_IADB_OPTIN 7266 1.45 0.84 1.65 110 TR_DCC_Bayes_99 7193 6.61 21.76 1.64 111 RCVD_IN_MSPIKE_H5 6914 1.31 0.51 1.57 112 TVD_RCVD_IP 6759 1.26 0.40 1.54 113 INVALID_MSGID 6668 1.22 0.32 1.52 114 HELO_NODOT 6661 1.24 0.39 1.52 115 HELO_NO_DOMAIN 6659 1.24 0.39 1.52 116 T_XMDrugObfuBody_14 6586 1.94 3.26 1.50 117 BOTNET 6582 5.26 16.71 1.50 118 TM2_M_VERY_LONG_WORD 6473 2.69 6.41 1.47 119 IN_HORDE_ADDRESS_BOOK 6471 1.16 0.19 1.47 120 XM_DK_Undo_01 6393 1.74 2.61 1.46 121 MSGID_NOFQDN1 6112 1.09 0.19 1.39 122 SUBJ_ALL_CAPS 6107 1.55 2.04 1.39 123 TO_MALFORMED 6048 1.08 0.17 1.38 124 XM_CamelCaseFrm001 6006 1.62 2.40 1.37 125 TR_Symld_Words 5920 1.39 1.53 1.35 126 XM_B_Investor 5736 1.93 3.81 1.31 127 XM_B_Unsub2 5536 1.62 2.73 1.26 128 TooManyTo_003 5521 1.15 0.81 1.26 129 TR_XM_SpammyRelay 5495 3.33 9.64 1.25 130 XM_E_Blogspot 5325 0.96 0.18 1.21 131 KHOP_HELO_FCRDNS 5217 1.78 3.59 1.19 132 TR_XM_SpammyWords5 5212 1.76 3.50 1.19 133 URI_HEX 5168 1.31 1.71 1.18 134 XMGappySubj_01 5155 0.91 0.12 1.17 135 T_XMDrugObfuBody_08 4818 1.57 2.99 1.10 136 XMLngstWrd_00 4739 1.98 4.73 1.08 137 XMCapTrack 4635 1.05 1.05 1.06 138 XMLngstWrd_01 4484 1.92 4.67 1.02 139 SHORTENED_URL_HREF 4481 0.79 0.09 1.02 140 UNTRUSTED_Relay 4396 4.13 13.65 1.00 141 XMLngstWrd_02 4091 1.84 4.62 0.93 142 XMStockSpam_06 4066 1.05 1.44 0.93 143 RCVD_IN_MSPIKE_BL 3938 2.45 7.18 0.90 144 TR_XM_MSPIKECOMBO 3927 2.36 6.83 0.89 145 TooManyTo_004 3844 0.84 0.71 0.88 146 XMLngstWrd_03 3719 1.77 4.57 0.85 147 TVD_SPACE_RATIO 3716 0.69 0.21 0.85 148 XM_H_Long_From02 3713 0.93 1.20 0.85 149 XMBSHREFv2 3576 0.68 0.27 0.81 150 XMLngstWrd_04 3427 1.70 4.51 0.78 151 RCVD_IN_RP_SAFE 3427 0.75 0.64 0.78 152 TR_XM_MaxUnsub 3351 1.96 5.60 0.76 153 FROM_GOV_DKIM_AU 3320 0.67 0.40 0.76 154 DKIM_ADSP_CUSTOM_MED 3197 0.96 1.66 0.73 155 T_TooManySym_03 3193 0.59 0.19 0.73 156 XM_OfRef6 3174 1.24 2.81 0.72 157 RELAYCOUNTRY_CA 3143 1.57 4.18 0.72 158 RCVD_IN_RP_CERTIFIED 3123 0.66 0.50 0.71 159 T_FILL_THIS_FORM_SHORT 3102 0.93 1.60 0.71 160 TooManyTo_005 3038 0.68 0.66 0.69 161 RCVD_IN_BL_SPAMCOP_NET 2954 3.05 10.30 0.67 162 RELAYCOUNTRY_GB 2906 0.80 1.24 0.66 163 XM_UB50 2875 2.15 6.70 0.65 164 XMBody_95 2867 0.54 0.18 0.65 165 TR_MetaPhish_Combo_01 2687 0.66 0.82 0.61 166 HTML_IMAGE_ONLY_20 2674 0.66 0.80 0.61 167 XMHTML_After_End 2609 0.76 1.25 0.59 168 HTML_TITLE_SUBJ_DIFF 2604 1.53 4.37 0.59 169 XM_B_COVIDMETA 2595 1.04 2.39 0.59 170 XMBdyGiftCard01 2591 0.70 1.05 0.59 171 HTTPS_HTTP_MISMATCH 2564 0.74 1.24 0.58 172 XMNoVowels 2559 0.54 0.39 0.58 173 XM_D_tchamptons_WL 2555 0.45 0.06 0.58 174 UPPERCASE_75_100 2555 1.51 4.35 0.58 175 XMGenDplmaNmb 2543 0.78 1.40 0.58 176 TR_XM_SpammyWords2 2527 2.62 8.85 0.58 177 SpammyFromTLD_01 2478 1.33 3.66 0.56 178 TR_MSPIKEBAYES00 2449 0.42 0.02 0.56 179 XM_B_COPY_HTML 2426 0.56 0.58 0.55 180 T_OBFU_PDF_ATTACH 2346 0.45 0.21 0.53 181 XMBrknScrpt_02 2316 0.65 1.01 0.53 182 HTML_TAG_BALANCE_BODY 2214 0.59 0.87 0.50 183 TM2_M_A_HREF_HREF 2202 0.68 1.24 0.50 184 T_XMHurry_00 2170 0.80 1.73 0.49 185 T_Symld_Words_02 2147 0.65 1.16 0.49 186 XM_ShortIntro_01 2146 0.49 0.49 0.49 187 T_XMDrugObfuBody_00 2126 0.75 1.55 0.48 188 NML_ADSP_CUSTOM_MED 2091 0.62 1.06 0.48 189 URI_TRY_3LD 2085 0.64 1.16 0.47 190 XMPhish30 2049 0.71 1.44 0.47 191 SpammyFromTLD_02 1959 1.33 4.03 0.45 192 SHORT_HELO_AND_INLINE_IMAGE 1959 0.36 0.09 0.45 193 XMMoneyMeta_00 1959 0.53 0.79 0.45 194 RCVD_IN_SORBS_DUL 1917 0.41 0.32 0.44 195 XM_H_PHPMailer 1895 0.50 0.71 0.43 196 XM_B_DNDMA 1894 0.71 1.54 0.43 197 TR_XM_SpammyWords3 1857 1.29 3.93 0.42 198 XMSexyCombo_01 1785 0.76 1.85 0.41 199 XM_B_SpammyWords4 1783 0.96 2.66 0.41 200 RCVD_IN_MSPIKE_L3 1731 0.84 2.18 0.39 ----------------------------------------------------------------------