Email: 568207 Autolearn: 0 AvgScore: 0.83 AvgScanTime: 1.26 sec Spam: 143882 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.45 sec Ham: 424325 Autolearn: 0 AvgScore: -3.58 AvgScanTime: 1.20 sec Time Spent Running SA: 199.41 hours Time Spent Processing Spam: 57.95 hours Time Spent Processing Ham: 141.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137395 90.64 95.49 89.00 2 DKIM_SIGNED 123789 67.41 86.04 61.09 3 XM_DK_Pass 120102 65.85 83.47 59.88 4 RELAYCOUNTRY_US 119259 81.95 82.89 81.64 5 DKIM_VALID 119113 65.08 82.79 59.08 6 XM_B_Unicode 112148 73.50 77.94 72.00 7 DCC_CHECK 101789 38.73 70.74 27.87 8 XMListUnsubscribeExists 99009 47.16 68.81 39.82 9 XM_B_SpammyWords 93095 47.93 64.70 42.24 10 DKIM_VALID_AU 92111 50.27 64.02 45.60 11 XM_DK_Undo_02 62928 15.43 43.74 5.83 12 XM_B_Unicode3 60546 44.34 42.08 45.10 13 BAYES_50 58209 48.30 40.46 50.96 14 LOC_TINY_FONT_1 53265 23.29 37.02 18.63 15 BAYES_99 52198 12.83 36.28 4.88 16 XM_B_SpammyWords2 51009 21.19 35.45 16.35 17 MIME_HTML_ONLY 49660 26.92 34.51 24.34 18 FVGT_m_MULTI_ODD 48320 23.58 33.58 20.19 19 TR_XM_DKIM_Undo 48256 11.31 33.54 3.77 20 HTML_FONT_LOW_CONTRAST 45872 25.37 31.88 23.16 21 DKIM_VALID_EF 43162 24.83 30.00 23.08 22 DCC_CHECK_NEGATIVE 42057 61.24 29.23 72.09 23 T_KAM_HTML_FONT_INVALID 41653 18.88 28.95 15.46 24 BAYES_999 41358 10.28 28.74 4.01 25 RCVD_IN_MSPIKE_H2 40110 20.89 27.88 18.51 26 TR_DCC_Bayes_99 38102 7.89 26.48 1.59 27 XMSubLong 33293 20.87 23.14 20.11 28 T_TM2_M_HEADER_IN_MSG 32247 24.53 22.41 25.25 29 RCVD_IN_MSPIKE_WL 32134 24.36 22.33 25.05 30 XM_Body_Dirty_Words 31304 12.77 21.76 9.72 31 RELAYCOUNTRY_META 30671 7.79 21.32 3.21 32 XM_Multi_Part_URI 24059 11.72 16.72 10.02 33 LOTS_OF_MONEY 22773 9.13 15.83 6.86 34 RCVD_IN_MSPIKE_H3 21720 14.45 15.10 14.23 35 XM_B_Unsub 20028 10.89 13.92 9.87 36 TR_XM_SpammyWords4 18867 6.33 13.11 4.03 37 UNPARSEABLE_RELAY 18681 8.28 12.98 6.68 38 TR_XM_UnparsRelay 18359 7.10 12.76 5.18 39 FSL_BULK_SIG 17666 5.65 12.28 3.40 40 BOTNET_IPINHOSTNAME 17308 5.82 12.03 3.71 41 XM_B_SpammyWords3 17029 5.50 11.84 3.36 42 BOTNET 16063 3.81 11.16 1.32 43 TR_XM_SpammyWords2 15847 3.32 11.01 0.71 44 TR_XM_SpammyRelay 15800 3.71 10.98 1.24 45 XMSexyCombo_05 15294 5.05 10.63 3.16 46 XM_Evil_Numbers_Gen 13933 8.73 9.68 8.41 47 UNTRUSTED_Relay 13727 3.19 9.54 1.03 48 MPART_ALT_DIFF 13672 10.95 9.50 11.44 49 RCVD_IN_BL_SPAMCOP_NET 13037 2.67 9.06 0.51 50 XM_UncommonTLD01 12951 4.47 9.00 2.94 51 BAYES_80 11306 4.82 7.86 3.79 52 XM_SendGrid 11105 5.71 7.72 5.03 53 HTML_IMAGE_RATIO_02 10893 5.83 7.57 5.23 54 LotsOfNums_01 10528 8.10 7.32 8.36 55 MIME_HTML_ONLY_MULTI 10157 9.19 7.06 9.92 56 HTML_MIME_NO_HTML_TAG 10017 3.71 6.96 2.61 57 RCVD_IN_MSPIKE_H4 9828 8.71 6.83 9.35 58 BAYES_60 9764 7.44 6.79 7.66 59 TM2_M_VERY_LONG_WORD 9344 2.95 6.49 1.74 60 XM_H_Long_From01 9247 5.06 6.43 4.60 61 XMSubMetaSx_00 9142 4.21 6.35 3.49 62 TR_XM_PhishingBody 8657 3.60 6.02 2.79 63 TR_XM_MaxUnsub 8438 2.09 5.86 0.82 64 XM_B_Phish_Phrases 8366 3.58 5.81 2.82 65 RELAYCOUNTRY_CA 8149 2.01 5.66 0.78 66 TooManyTo_001 7852 7.72 5.46 8.49 67 T_REMOTE_IMAGE 7670 3.48 5.33 2.85 68 TR_XM_SPAMCOP 7420 1.48 5.16 0.23 69 XM_SPF_SoftFail 7224 2.68 5.02 1.88 70 TR_XM_DK_SendGrid 6999 3.68 4.86 3.27 71 RCVD_IN_MSPIKE_BL 6749 1.89 4.69 0.94 72 XMNumbers 6644 3.46 4.62 3.07 73 TR_XM_MSPIKECOMBO 6617 1.87 4.60 0.94 74 BAYES_95 6608 3.03 4.59 2.50 75 XM_GoogleGroups 6454 2.68 4.49 2.07 76 HTML_IMAGE_RATIO_04 6294 14.01 4.37 17.28 77 XM_B_Investor 6072 1.96 4.22 1.19 78 MIME_QP_LONG_LINE 6036 6.26 4.20 6.96 79 XM_UB50 5987 1.54 4.16 0.66 80 XM_B_SpammyTLD 5973 2.35 4.15 1.74 81 TR_XM_SpammyWords5 5760 1.95 4.00 1.25 82 T_XMDrugObfuBody_14 5736 2.09 3.99 1.44 83 XMLngstWrd_00 5683 1.93 3.95 1.24 84 XMLngstWrd_01 5602 1.87 3.89 1.19 85 TM2_M_URI_OPT_OUT 5517 3.81 3.83 3.80 86 HTML_IMAGE_RATIO_06 5509 5.33 3.83 5.84 87 XMLngstWrd_02 5507 1.79 3.83 1.10 88 XMLngstWrd_03 5443 1.71 3.78 1.01 89 HTML_TITLE_SUBJ_DIFF 5411 1.52 3.76 0.76 90 XMLngstWrd_04 5345 1.64 3.71 0.94 91 UPPERCASE_75_100 5201 1.42 3.61 0.67 92 KHOP_HELO_FCRDNS 5111 1.96 3.55 1.42 93 XM_DIRTYINTL 5101 1.10 3.55 0.28 94 TR_LOTS_OF_MONEY3 4736 1.33 3.29 0.67 95 RCVD_IN_IADB_LISTED 4686 4.24 3.26 4.57 96 DKIM_INVALID 4676 2.32 3.25 2.01 97 SpammyFromTLD_01 4572 1.23 3.18 0.57 98 XMStrtUSub 4544 9.50 3.16 11.65 99 RCVD_IN_VALIDITY_RPBL 4523 0.81 3.14 0.02 100 XMDiploma_00 4409 1.52 3.06 1.00 101 XM_B_Phish66 4403 2.05 3.06 1.71 102 RCVD_IN_VALIDITY_SAFE 4272 3.64 2.97 3.87 103 XM_OfRef6 4268 1.35 2.97 0.80 104 HTML_IMAGE_RATIO_08 4226 2.13 2.94 1.85 105 XM_DK_Undo_01 4190 1.77 2.91 1.39 106 MIME_HTML_MOSTLY 4105 2.22 2.85 2.00 107 RCVD_IN_IADB_SPF 4074 3.80 2.83 4.13 108 T_XMDrugObfuBody_08 4044 1.51 2.81 1.07 109 PDS_OTHER_BAD_TLD 3985 0.87 2.77 0.22 110 XM_CamelCaseFrm001 3966 1.75 2.76 1.41 111 SpammyFromTLD_02 3904 1.00 2.71 0.42 112 RCVD_IN_IADB_DK 3849 3.41 2.68 3.65 113 BOTNET_NORDNS 3822 0.69 2.66 0.03 114 RCVD_IN_IADB_SENDERID 3742 3.48 2.60 3.78 115 RCVD_IN_VALIDITY_CERTIFIED 3694 3.24 2.57 3.47 116 T_XMHurry_00 3659 1.00 2.54 0.47 117 XM_B_Unsub2 3631 1.64 2.52 1.34 118 TR_XM_SpammyWords3 3625 0.92 2.52 0.38 119 URI_NOVOWEL 3575 2.18 2.48 2.08 120 TR_XM_NoHeaderRelay 3494 0.74 2.43 0.17 121 T_FILL_THIS_FORM_SHORT 3489 1.19 2.42 0.77 122 XM_B_SpammyWords4 3459 0.97 2.40 0.48 123 T_TooManySym_01 3316 4.11 2.30 4.72 124 MAILING_LIST_MULTI 3302 2.50 2.29 2.56 125 XMSexyCombo_01 3284 1.31 2.28 0.98 126 XMStockSpam_06 3080 1.35 2.14 1.09 127 XMBody_17 3070 0.82 2.13 0.38 128 RCVD_IN_PSBL 3036 0.64 2.11 0.14 129 URI_HEX 3005 1.50 2.09 1.31 130 T_HTML_TAG_BALANCE_CENTER 2918 0.59 2.03 0.10 131 SUBJ_ALL_CAPS 2881 1.61 2.00 1.48 132 TR_XM_SB_Phish 2857 1.72 1.99 1.63 133 RCVD_IN_MSPIKE_L3 2837 0.81 1.97 0.42 134 XM_UB99 2823 0.50 1.96 0.00 135 T_XMDrugObfuBody_00 2808 1.00 1.95 0.67 136 XMSubPhish11 2708 1.68 1.88 1.61 137 XM_B_COVIDMETA 2646 0.78 1.84 0.43 138 HTML_IMAGE_ONLY_08 2596 0.54 1.80 0.10 139 RCVD_IN_MSPIKE_L5 2581 0.53 1.79 0.11 140 URI_TRY_3LD 2580 0.89 1.79 0.58 141 BODY_URI_ONLY 2523 0.45 1.75 0.01 142 MPART_ALT_DIFF_COUNT 2522 0.78 1.75 0.45 143 TR_XM_MSPIKECOMBO2 2488 0.54 1.73 0.14 144 USER_IN_DEF_DKIM_WL 2454 7.63 1.71 9.64 145 FROM_EXCESS_BASE64 2415 2.00 1.68 2.11 146 ALL_TRUSTED 2364 12.63 1.64 16.36 147 RELAYCOUNTRY_AU 2348 0.62 1.63 0.28 148 TR_XM_PHPDW 2340 0.64 1.63 0.31 149 RCVD_IN_IADB_VOUCHED 2313 2.38 1.61 2.64 150 TR_XM_BayesRelay 2312 0.41 1.61 0.01 151 XM_URI_RBL 2307 0.47 1.60 0.09 152 XMBrknScrpt_02 2286 0.79 1.59 0.52 153 TR_XM_PHPForged 2264 0.59 1.57 0.25 154 BAYES_40 2256 4.66 1.57 5.71 155 TR_Symld_Words 2244 1.38 1.56 1.31 156 TR_XM_FormFill2 2213 0.58 1.54 0.26 157 XM_H_PHPOS 2208 0.58 1.53 0.25 158 HTTPS_HTTP_MISMATCH 2177 0.87 1.51 0.65 159 RELAYCOUNTRY_GB 2124 0.85 1.48 0.64 160 XMHTML_After_End 2066 0.89 1.44 0.70 161 XM_UB999 2064 0.37 1.43 0.00 162 URIBL_BLACK 2052 0.39 1.43 0.04 163 T_Symld_Words_02 2032 0.71 1.41 0.47 164 TR_XM_FormFill 2024 0.36 1.41 0.01 165 MIXED_HREF_CASE 2000 0.35 1.39 0.00 166 MIXED_IMG_CASE 1988 0.35 1.38 0.00 167 MIXED_AREA_CASE 1987 0.35 1.38 0.00 168 MIXED_FONT_CASE 1979 0.35 1.38 0.00 169 MIXED_CENTER_CASE 1957 0.35 1.36 0.00 170 RELAYCOUNTRY_FR 1929 0.47 1.34 0.17 171 XMGenDplmaNmb 1926 0.77 1.34 0.57 172 HTML_FONT_SIZE_LARGE 1872 0.39 1.30 0.08 173 XMBdyGiftCard01 1869 0.76 1.30 0.58 174 TM2_M_A_HREF_HREF 1844 0.72 1.28 0.52 175 DIET_1 1801 0.56 1.25 0.33 176 RELAYCOUNTRY_RU 1772 0.33 1.23 0.03 177 RELAYCOUNTRY_DE 1746 0.45 1.21 0.20 178 XMMoneyMeta_00 1745 0.62 1.21 0.42 179 XM_H_Undi_Recip 1720 0.43 1.20 0.17 180 XMPhish30 1703 0.70 1.18 0.53 181 XM_H_Long_From02 1664 0.89 1.16 0.81 182 TR_Mismatch_TLD_02 1644 0.37 1.14 0.10 183 BAYES_20 1628 4.45 1.13 5.58 184 XM_UB60 1565 0.32 1.09 0.06 185 DKIM_ADSP_CUSTOM_MED 1532 0.86 1.06 0.79 186 FROM_SUSPICIOUS_NTLD 1520 0.29 1.06 0.04 187 ANY_BOUNCE_MESSAGE 1487 2.75 1.03 3.33 188 BOUNCE_MESSAGE 1485 2.74 1.03 3.33 189 HTML_FONT_FACE_BAD 1484 12.67 1.03 16.62 190 TR_BOTNET_NEGATE 1463 0.48 1.02 0.30 191 FROM_SUSPICIOUS_NTLD_FP 1461 0.28 1.02 0.03 192 XM_BadFromFormat 1442 0.34 1.00 0.11 193 XMSubMetaI_00 1413 0.63 0.98 0.51 194 RELAYCOUNTRY_BR 1412 0.25 0.98 0.01 195 XM_Body_Dirty_Words_01 1389 0.33 0.97 0.12 196 TR_XM_COVIDMETA1 1339 0.36 0.93 0.16 197 FORGED_GMAIL_RCVD 1338 0.54 0.93 0.41 198 TooManyTo_002 1333 1.59 0.93 1.82 199 XM_UB80 1321 0.24 0.92 0.01 200 TR_MetaPhish_Combo_01 1316 0.72 0.91 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 377650 90.64 95.49 89.00 2 RELAYCOUNTRY_US 346415 81.95 82.89 81.64 3 DCC_CHECK_NEGATIVE 305907 61.24 29.23 72.09 4 XM_B_Unicode 305509 73.50 77.94 72.00 5 DKIM_SIGNED 259216 67.41 86.04 61.09 6 XM_DK_Pass 254082 65.85 83.47 59.88 7 DKIM_VALID 250686 65.08 82.79 59.08 8 BAYES_50 216257 48.30 40.46 50.96 9 DKIM_VALID_AU 193500 50.27 64.02 45.60 10 XM_B_Unicode3 191378 44.34 42.08 45.10 11 XM_B_SpammyWords 179255 47.93 64.70 42.24 12 XMListUnsubscribeExists 168972 47.16 68.81 39.82 13 DCC_CHECK 118274 38.73 70.74 27.87 14 T_TM2_M_HEADER_IN_MSG 107142 24.53 22.41 25.25 15 RCVD_IN_MSPIKE_WL 106301 24.36 22.33 25.05 16 MIME_HTML_ONLY 103300 26.92 34.51 24.34 17 HTML_FONT_LOW_CONTRAST 98256 25.37 31.88 23.16 18 DKIM_VALID_EF 97915 24.83 30.00 23.08 19 FVGT_m_MULTI_ODD 85681 23.58 33.58 20.19 20 XMSubLong 85317 20.87 23.14 20.11 21 LOC_TINY_FONT_1 79055 23.29 37.02 18.63 22 RCVD_IN_MSPIKE_H2 78562 20.89 27.88 18.51 23 HTML_IMAGE_RATIO_04 73324 14.01 4.37 17.28 24 XM_H_Trusted_IP 71632 12.61 0.00 16.88 25 HTML_FONT_FACE_BAD 70516 12.67 1.03 16.62 26 ALL_TRUSTED 69399 12.63 1.64 16.36 27 XM_B_SpammyWords2 69388 21.19 35.45 16.35 28 T_KAM_HTML_FONT_INVALID 65606 18.88 28.95 15.46 29 BAYES_00 63247 11.32 0.76 14.91 30 RCVD_IN_MSPIKE_H3 60397 14.45 15.10 14.23 31 XMStrtUSub 49419 9.50 3.16 11.65 32 MPART_ALT_DIFF 48535 10.95 9.50 11.44 33 XM_Multi_Part_URI 42518 11.72 16.72 10.02 34 MIME_HTML_ONLY_MULTI 42079 9.19 7.06 9.92 35 XM_B_Unsub 41877 10.89 13.92 9.87 36 XM_Body_Dirty_Words 41259 12.77 21.76 9.72 37 USER_IN_DEF_DKIM_WL 40887 7.63 1.71 9.64 38 RCVD_IN_MSPIKE_H4 39688 8.71 6.83 9.35 39 TooManyTo_001 36034 7.72 5.46 8.49 40 XM_Evil_Numbers_Gen 35685 8.73 9.68 8.41 41 LotsOfNums_01 35489 8.10 7.32 8.36 42 BAYES_60 32503 7.44 6.79 7.66 43 MIME_QP_LONG_LINE 29515 6.26 4.20 6.96 44 LOTS_OF_MONEY 29108 9.13 15.83 6.86 45 UNPARSEABLE_RELAY 28346 8.28 12.98 6.68 46 XM_DKIMWhitelistDomains 27033 4.78 0.08 6.37 47 IN_ZIMBRA_NJ_WHITELIST 26387 4.67 0.11 6.22 48 HTML_IMAGE_RATIO_06 24788 5.33 3.83 5.84 49 XM_DK_Undo_02 24758 15.43 43.74 5.83 50 BAYES_40 24229 4.66 1.57 5.71 51 BAYES_20 23678 4.45 1.13 5.58 52 TR_XM_DK_Bayes 22327 4.06 0.51 5.26 53 HTML_IMAGE_RATIO_02 22207 5.83 7.57 5.23 54 XMSubNoVowel 22200 4.09 0.74 5.23 55 TR_XM_UnparsRelay 21975 7.10 12.76 5.18 56 TR_XM_DK_Bayes1 21942 3.99 0.51 5.17 57 XM_SendGrid 21323 5.71 7.72 5.03 58 XM_PDF 20919 3.91 0.89 4.93 59 BAYES_99 20696 12.83 36.28 4.88 60 T_TooManySym_01 20035 4.11 2.30 4.72 61 XM_H_Long_From01 19529 5.06 6.43 4.60 62 RCVD_IN_IADB_LISTED 19397 4.24 3.26 4.57 63 TR_XM_DK_Bayes2 19386 3.51 0.40 4.57 64 RCVD_IN_IADB_SPF 17545 3.80 2.83 4.13 65 TR_XM_SpammyWords4 17103 6.33 13.11 4.03 66 BAYES_05 17050 3.14 0.54 4.02 67 BAYES_999 17028 10.28 28.74 4.01 68 RCVD_IN_VALIDITY_SAFE 16403 3.64 2.97 3.87 69 TM2_M_URI_OPT_OUT 16115 3.81 3.83 3.80 70 BAYES_80 16070 4.82 7.86 3.79 71 RCVD_IN_IADB_SENDERID 16049 3.48 2.60 3.78 72 TR_XM_DKIM_Undo 15991 11.31 33.54 3.77 73 BOTNET_IPINHOSTNAME 15753 5.82 12.03 3.71 74 RCVD_IN_IADB_DK 15505 3.41 2.68 3.65 75 XMSubMetaSx_00 14791 4.21 6.35 3.49 76 RCVD_IN_VALIDITY_CERTIFIED 14721 3.24 2.57 3.47 77 FSL_BULK_SIG 14434 5.65 12.28 3.40 78 XM_B_SpammyWords3 14241 5.50 11.84 3.36 79 ANY_BOUNCE_MESSAGE 14116 2.75 1.03 3.33 80 BOUNCE_MESSAGE 14110 2.74 1.03 3.33 81 TR_XM_DK_SendGrid 13893 3.68 4.86 3.27 82 RELAYCOUNTRY_META 13616 7.79 21.32 3.21 83 XMSexyCombo_05 13391 5.05 10.63 3.16 84 XMNumbers 13028 3.46 4.62 3.07 85 XM_UncommonTLD01 12455 4.47 9.00 2.94 86 T_REMOTE_IMAGE 12113 3.48 5.33 2.85 87 XM_B_Phish_Phrases 11975 3.58 5.81 2.82 88 TR_XM_PhishingBody 11818 3.60 6.02 2.79 89 T_TooManySym_02 11286 2.19 0.80 2.66 90 RCVD_IN_IADB_VOUCHED 11217 2.38 1.61 2.64 91 HTML_MIME_NO_HTML_TAG 11063 3.71 6.96 2.61 92 MAILING_LIST_MULTI 10883 2.50 2.29 2.56 93 BAYES_95 10590 3.03 4.59 2.50 94 XMSubGarbage 10123 1.81 0.12 2.39 95 XMSubLongNoVowel 9845 1.78 0.19 2.32 96 FROM_EXCESS_BASE64 8935 2.00 1.68 2.11 97 URI_NOVOWEL 8826 2.18 2.48 2.08 98 XM_GoogleGroups 8773 2.68 4.49 2.07 99 DKIM_INVALID 8530 2.32 3.25 2.01 100 MIME_HTML_MOSTLY 8494 2.22 2.85 2.00 101 XM_SPF_SoftFail 7982 2.68 5.02 1.88 102 HTML_IMAGE_RATIO_08 7870 2.13 2.94 1.85 103 TooManyTo_002 7704 1.59 0.93 1.82 104 TM2_M_VERY_LONG_WORD 7391 2.95 6.49 1.74 105 XM_B_SpammyTLD 7365 2.35 4.15 1.74 106 RCVD_IN_IADB_OPTIN 7323 1.51 0.87 1.73 107 XM_B_Phish66 7264 2.05 3.06 1.71 108 TR_XM_SB_Phish 6909 1.72 1.99 1.63 109 XMSubPhish11 6847 1.68 1.88 1.61 110 TR_DCC_Bayes_99 6744 7.89 26.48 1.59 111 SHORT_URI_2 6698 1.34 0.64 1.58 112 TVD_RCVD_IP 6672 1.24 0.28 1.57 113 INVALID_MSGID 6626 1.24 0.28 1.56 114 IN_HORDE_ADDRESS_BOOK 6605 1.21 0.20 1.56 115 HELO_NODOT 6351 1.29 0.67 1.50 116 HELO_NO_DOMAIN 6345 1.28 0.66 1.50 117 SUBJ_ALL_CAPS 6273 1.61 2.00 1.48 118 RCVD_IN_MSPIKE_H5 6216 1.20 0.41 1.46 119 MSGID_NOFQDN1 6193 1.12 0.12 1.46 120 T_XMDrugObfuBody_14 6121 2.09 3.99 1.44 121 KHOP_HELO_FCRDNS 6019 1.96 3.55 1.42 122 TO_MALFORMED 6018 1.07 0.04 1.42 123 XM_CamelCaseFrm001 5999 1.75 2.76 1.41 124 XM_DK_Undo_01 5894 1.77 2.91 1.39 125 XM_B_Unsub2 5685 1.64 2.52 1.34 126 BOTNET 5605 3.81 11.16 1.32 127 TR_Symld_Words 5572 1.38 1.56 1.31 128 URI_HEX 5545 1.50 2.09 1.31 129 TR_XM_SpammyWords5 5323 1.95 4.00 1.25 130 XM_E_Blogspot 5286 0.97 0.17 1.25 131 XMLngstWrd_00 5281 1.93 3.95 1.24 132 TR_XM_SpammyRelay 5254 3.71 10.98 1.24 133 XMLngstWrd_01 5050 1.87 3.89 1.19 134 XM_B_Investor 5050 1.96 4.22 1.19 135 TooManyTo_003 5001 1.08 0.78 1.18 136 XMGappySubj_01 4837 0.91 0.21 1.14 137 XMLngstWrd_02 4658 1.79 3.83 1.10 138 XMStockSpam_06 4604 1.35 2.14 1.09 139 T_XMDrugObfuBody_08 4542 1.51 2.81 1.07 140 UNTRUSTED_Relay 4380 3.19 9.54 1.03 141 XMLngstWrd_03 4295 1.71 3.78 1.01 142 XMCapTrack 4285 0.92 0.65 1.01 143 XMDiploma_00 4244 1.52 3.06 1.00 144 TVD_SPACE_RATIO 4174 0.88 0.57 0.98 145 XMSexyCombo_01 4168 1.31 2.28 0.98 146 RCVD_IN_MSPIKE_BL 3994 1.89 4.69 0.94 147 XMLngstWrd_04 3988 1.64 3.71 0.94 148 TR_XM_MSPIKECOMBO 3983 1.87 4.60 0.94 149 XMBSHREFv2 3657 0.71 0.24 0.86 150 TooManyTo_004 3506 0.79 0.70 0.83 151 TR_XM_MaxUnsub 3459 2.09 5.86 0.82 152 XM_H_Long_From02 3418 0.89 1.16 0.81 153 XM_OfRef6 3414 1.35 2.97 0.80 154 DKIM_ADSP_CUSTOM_MED 3334 0.86 1.06 0.79 155 RELAYCOUNTRY_CA 3296 2.01 5.66 0.78 156 T_FILL_THIS_FORM_SHORT 3286 1.19 2.42 0.77 157 RCVD_IN_RP_SAFE 3274 0.72 0.58 0.77 158 HTML_TITLE_SUBJ_DIFF 3240 1.52 3.76 0.76 159 TR_XM_SpammyWords2 3014 3.32 11.01 0.71 160 XMHTML_After_End 2989 0.89 1.44 0.70 161 RCVD_IN_RP_CERTIFIED 2978 0.65 0.48 0.70 162 T_TooManySym_03 2874 0.60 0.36 0.68 163 T_XMDrugObfuBody_00 2848 1.00 1.95 0.67 164 UPPERCASE_75_100 2848 1.42 3.61 0.67 165 TR_LOTS_OF_MONEY3 2832 1.33 3.29 0.67 166 TooManyTo_005 2824 0.66 0.64 0.67 167 XM_UB50 2791 1.54 4.16 0.66 168 TR_MetaPhish_Combo_01 2768 0.72 0.91 0.65 169 HTTPS_HTTP_MISMATCH 2747 0.87 1.51 0.65 170 RELAYCOUNTRY_GB 2725 0.85 1.48 0.64 171 XM_B_COPY_HTML 2705 0.67 0.76 0.64 172 T_OBFU_PDF_ATTACH 2608 0.51 0.20 0.61 173 XMBody_95 2539 0.49 0.18 0.60 174 FROM_GOV_DKIM_AU 2493 0.52 0.33 0.59 175 URI_TRY_3LD 2480 0.89 1.79 0.58 176 XMBdyGiftCard01 2461 0.76 1.30 0.58 177 XMGenDplmaNmb 2439 0.77 1.34 0.57 178 SpammyFromTLD_01 2414 1.23 3.18 0.57 179 HTML_IMAGE_ONLY_20 2385 0.56 0.55 0.56 180 HTML_TAG_BALANCE_BODY 2270 0.58 0.73 0.53 181 XM_ShortIntro_01 2260 0.55 0.58 0.53 182 XMPhish30 2259 0.70 1.18 0.53 183 TM2_M_A_HREF_HREF 2219 0.72 1.28 0.52 184 XMBrknScrpt_02 2191 0.79 1.59 0.52 185 XM_ProductURIs 2174 0.61 0.91 0.51 186 XMSubMetaI_00 2170 0.63 0.98 0.51 187 XMSexyCombo_04 2154 0.55 0.69 0.51 188 RCVD_IN_BL_SPAMCOP_NET 2149 2.67 9.06 0.51 189 TVD_PH_BODY_ACCOUNTS_PRE 2140 0.41 0.12 0.50 190 NML_ADSP_CUSTOM_MED 2127 0.60 0.89 0.50 191 TR_MSPIKEBAYES00 2060 0.37 0.02 0.49 192 XM_B_SpammyWords4 2045 0.97 2.40 0.48 193 T_XMHurry_00 2015 1.00 2.54 0.47 194 T_Symld_Words_02 2009 0.71 1.41 0.47 195 XM_H_PHPMailer 1978 0.57 0.88 0.47 196 XMNoVowels 1962 0.46 0.46 0.46 197 XM_RXBody 1958 0.47 0.51 0.46 198 TM2_M_BODY_EMPTY 1957 0.42 0.30 0.46 199 MPART_ALT_DIFF_COUNT 1897 0.78 1.75 0.45 200 XMSlimDrugH 1882 0.56 0.90 0.44 ----------------------------------------------------------------------