Email: 488158 Autolearn: 0 AvgScore: 2.64 AvgScanTime: 1.29 sec Spam: 136623 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.44 sec Ham: 351535 Autolearn: 0 AvgScore: -1.71 AvgScanTime: 1.23 sec Time Spent Running SA: 174.78 hours Time Spent Processing Spam: 54.78 hours Time Spent Processing Ham: 120.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130544 88.80 95.55 86.18 2 DKIM_SIGNED 114811 73.35 84.03 69.20 3 XM_DK_Pass 110653 71.49 80.99 67.80 4 DKIM_VALID 110431 70.79 80.83 66.88 5 RELAYCOUNTRY_US 109810 79.25 80.37 78.81 6 XM_B_Unicode 104204 69.50 76.27 66.87 7 DCC_CHECK 94296 41.61 69.02 30.96 8 XMListUnsubscribeExists 91147 51.31 66.71 45.32 9 XM_B_SpammyWords 85984 49.58 62.94 44.38 10 DKIM_VALID_AU 83707 54.41 61.27 51.75 11 BAYES_50 57725 52.10 42.25 55.93 12 XM_B_Unicode3 56632 40.18 41.45 39.69 13 XM_DK_Undo_02 55239 15.92 40.43 6.40 14 MIME_HTML_ONLY 47010 24.42 34.41 20.54 15 XM_B_SpammyWords2 47002 22.84 34.40 18.34 16 LOC_TINY_FONT_1 46158 24.60 33.78 21.03 17 BAYES_99 45704 13.16 33.45 5.28 18 FVGT_m_MULTI_ODD 43817 25.49 32.07 22.93 19 HTML_FONT_LOW_CONTRAST 43786 27.75 32.05 26.08 20 DCC_CHECK_NEGATIVE 42265 58.34 30.94 68.99 21 TR_XM_DKIM_Undo 42159 11.99 30.86 4.66 22 DKIM_VALID_EF 38041 26.77 27.84 26.35 23 T_KAM_HTML_FONT_INVALID 36312 20.47 26.58 18.10 24 BAYES_999 35947 10.50 26.31 4.36 25 RCVD_IN_MSPIKE_H2 33878 20.93 24.80 19.43 26 TR_DCC_Bayes_99 33012 8.09 24.16 1.85 27 RELAYCOUNTRY_META 30908 8.95 22.62 3.63 28 XMSubLong 30165 21.78 22.08 21.66 29 XM_Body_Dirty_Words 29610 13.85 21.67 10.81 30 T_TM2_M_HEADER_IN_MSG 28656 27.97 20.97 30.69 31 RCVD_IN_MSPIKE_WL 28015 25.34 20.51 27.22 32 XM_Multi_Part_URI 22253 12.55 16.29 11.10 33 FSL_BULK_SIG 20267 6.00 14.83 2.57 34 XM_B_Unsub 19890 11.41 14.56 10.19 35 RCVD_IN_MSPIKE_H3 19327 15.14 14.15 15.53 36 BOTNET_IPINHOSTNAME 18206 6.85 13.33 4.34 37 UNPARSEABLE_RELAY 17807 9.00 13.03 7.43 38 BOTNET 17708 4.75 12.96 1.56 39 TR_XM_UnparsRelay 17292 7.69 12.66 5.76 40 LOTS_OF_MONEY 17250 8.75 12.63 7.24 41 UNTRUSTED_Relay 16760 4.40 12.27 1.34 42 XM_B_SpammyWords3 16430 6.41 12.03 4.23 43 TR_XM_SpammyRelay 15444 4.18 11.30 1.41 44 XM_UncommonTLD01 14843 5.66 10.86 3.63 45 TR_XM_SpammyWords4 14626 6.15 10.71 4.38 46 MPART_ALT_DIFF 14144 7.20 10.35 5.98 47 XMSexyCombo_05 14122 4.92 10.34 2.81 48 XM_Evil_Numbers_Gen 13808 8.31 10.11 7.61 49 TR_XM_SpammyWords2 13553 3.44 9.92 0.93 50 RCVD_IN_BL_SPAMCOP_NET 11687 2.79 8.55 0.55 51 XM_SendGrid 11292 6.32 8.27 5.56 52 HTML_MIME_NO_HTML_TAG 10520 5.09 7.70 4.08 53 BAYES_80 10410 4.98 7.62 3.96 54 HTML_IMAGE_RATIO_02 10302 6.02 7.54 5.43 55 MIME_HTML_ONLY_MULTI 10105 5.10 7.40 4.21 56 BAYES_60 9782 8.34 7.16 8.80 57 LotsOfNums_01 9647 8.02 7.06 8.39 58 TM2_M_VERY_LONG_WORD 9495 3.28 6.95 1.85 59 RCVD_IN_MSPIKE_BL 9224 2.71 6.75 1.14 60 TR_XM_PhishingBody 9135 4.37 6.69 3.47 61 TR_XM_MSPIKECOMBO 9128 2.69 6.68 1.13 62 XM_H_Long_From01 8651 5.22 6.33 4.78 63 TR_XM_MaxUnsub 8477 2.30 6.20 0.78 64 T_REMOTE_IMAGE 8341 4.47 6.11 3.84 65 TooManyTo_001 8235 8.99 6.03 10.14 66 RCVD_IN_MSPIKE_H4 8208 8.93 6.01 10.07 67 XM_B_Phish_Phrases 8128 4.21 5.95 3.53 68 XMSubMetaSx_00 7922 3.89 5.80 3.15 69 TR_XM_DK_SendGrid 7617 4.07 5.58 3.49 70 RELAYCOUNTRY_CA 7506 2.07 5.49 0.74 71 XM_UB50 7109 2.14 5.20 0.95 72 XM_SPF_SoftFail 6902 3.93 5.05 3.50 73 T_XMDrugObfuBody_14 6633 2.60 4.85 1.72 74 XM_B_Investor 6510 2.49 4.76 1.61 75 XMStrtUSub 6494 4.75 4.75 4.75 76 XM_GoogleGroups 6485 2.75 4.75 1.97 77 XMLngstWrd_00 6419 2.32 4.70 1.39 78 XMLngstWrd_01 6318 2.25 4.62 1.33 79 XMLngstWrd_02 6224 2.16 4.56 1.23 80 BAYES_95 6158 3.03 4.51 2.46 81 XM_B_SpammyTLD 6141 2.60 4.49 1.87 82 HTML_IMAGE_RATIO_04 5970 4.74 4.37 4.89 83 XMLngstWrd_03 5799 2.00 4.24 1.13 84 SpammyFromTLD_01 5795 1.73 4.24 0.76 85 HTML_TITLE_SUBJ_DIFF 5775 1.78 4.23 0.83 86 XMLngstWrd_04 5708 1.92 4.18 1.05 87 KHOP_HELO_FCRDNS 5639 2.84 4.13 2.34 88 UPPERCASE_75_100 5588 1.74 4.09 0.83 89 XMNumbers 5550 3.72 4.06 3.59 90 TR_XM_SPAMCOP 5414 1.23 3.96 0.16 91 XM_DIRTYINTL 5383 1.32 3.94 0.30 92 MIME_QP_LONG_LINE 5263 6.02 3.85 6.86 93 RCVD_IN_VALIDITY_SAFE 5017 4.33 3.67 4.58 94 TR_XM_SpammyWords3 4938 1.37 3.61 0.50 95 MIME_HTML_MOSTLY 4847 2.90 3.55 2.65 96 RCVD_IN_IADB_LISTED 4655 4.52 3.41 4.95 97 XM_OfRef6 4605 1.63 3.37 0.96 98 XMDiploma_00 4535 2.12 3.32 1.65 99 TR_XM_SpammyWords5 4528 2.01 3.31 1.51 100 DKIM_INVALID 4380 2.57 3.21 2.32 101 XM_B_Phish66 4340 2.43 3.18 2.13 102 BOTNET_NORDNS 4250 0.89 3.11 0.02 103 HTML_IMAGE_RATIO_06 4222 3.73 3.09 3.98 104 RCVD_IN_MSPIKE_L5 4181 0.92 3.06 0.09 105 RCVD_IN_VALIDITY_CERTIFIED 4170 3.77 3.05 4.05 106 RCVD_IN_VALIDITY_RPBL 4107 0.85 3.01 0.01 107 T_TooManySym_01 4059 5.08 2.97 5.91 108 PDS_OTHER_BAD_TLD 4045 0.99 2.96 0.22 109 SpammyFromTLD_02 3964 0.97 2.90 0.22 110 TM2_M_URI_OPT_OUT 3943 3.69 2.89 4.00 111 T_FILL_THIS_FORM_SHORT 3917 1.38 2.87 0.80 112 RCVD_IN_IADB_SPF 3834 3.96 2.81 4.41 113 T_XMDrugObfuBody_08 3812 1.68 2.79 1.25 114 XM_DK_Undo_01 3797 1.87 2.78 1.52 115 URI_NOVOWEL 3625 2.44 2.65 2.36 116 TR_XM_MSPIKECOMBO2 3531 0.83 2.58 0.14 117 XM_UB99 3449 0.71 2.52 0.00 118 RCVD_IN_IADB_DK 3434 3.45 2.51 3.81 119 XM_B_SpammyWords4 3420 1.05 2.50 0.49 120 RCVD_IN_PSBL 3400 0.81 2.49 0.15 121 XM_CamelCaseFrm001 3389 1.91 2.48 1.68 122 RCVD_IN_IADB_SENDERID 3366 3.54 2.46 3.96 123 T_HTML_TAG_BALANCE_CENTER 3329 0.75 2.44 0.09 124 HTML_IMAGE_RATIO_08 3227 3.08 2.36 3.36 125 RCVD_IN_IADB_VOUCHED 3162 2.85 2.31 3.06 126 USER_IN_DEF_DKIM_WL 3081 8.57 2.26 11.02 127 HTML_IMAGE_ONLY_08 3067 0.72 2.24 0.12 128 TR_XM_SB_Phish 2951 1.92 2.16 1.83 129 XMSubPhish11 2853 1.89 2.09 1.81 130 SUBJ_ALL_CAPS 2820 2.11 2.06 2.13 131 MAILING_LIST_MULTI 2752 2.62 2.01 2.85 132 XMSexyCombo_01 2739 0.93 2.00 0.52 133 XM_URI_RBL 2710 0.63 1.98 0.11 134 BAYES_40 2676 4.18 1.96 5.04 135 XM_B_Unsub2 2660 1.88 1.95 1.85 136 XM_B_COVIDMETA 2642 1.00 1.93 0.63 137 XM_UB999 2625 0.54 1.92 0.00 138 XMHTML_After_End 2581 1.05 1.89 0.72 139 RCVD_IN_MSPIKE_L3 2571 0.78 1.88 0.35 140 ALL_TRUSTED 2524 14.05 1.85 18.79 141 TR_XM_PHPDW 2513 0.82 1.84 0.42 142 BODY_URI_ONLY 2503 0.52 1.83 0.02 143 XMBody_17 2486 0.74 1.82 0.32 144 URI_HEX 2436 1.26 1.78 1.05 145 TR_XM_PHPForged 2405 0.77 1.76 0.38 146 MIXED_CENTER_CASE 2391 0.49 1.75 0.00 147 FROM_EXCESS_BASE64 2379 2.53 1.74 2.83 148 RCVD_IN_MSPIKE_L4 2376 0.99 1.74 0.69 149 MIXED_HREF_CASE 2372 0.49 1.74 0.00 150 TR_XM_FormFill2 2362 0.76 1.73 0.38 151 MIXED_AREA_CASE 2356 0.48 1.72 0.00 152 MIXED_IMG_CASE 2356 0.48 1.72 0.00 153 RELAYCOUNTRY_AU 2354 0.71 1.72 0.31 154 XM_H_PHPOS 2346 0.75 1.72 0.37 155 MIXED_FONT_CASE 2344 0.48 1.72 0.00 156 URI_PHP_REDIR 2330 0.48 1.71 0.00 157 T_XMHurry_00 2324 0.88 1.70 0.56 158 XMStockSpam_06 2322 1.08 1.70 0.84 159 XM_B_DNDMA 2288 0.74 1.67 0.38 160 XMPhish14 2260 0.80 1.65 0.46 161 XMGenDplmaNmb 2232 1.03 1.63 0.79 162 RELAYCOUNTRY_FR 2189 0.63 1.60 0.25 163 URI_GOOG_STO_SPAMMY 2168 0.44 1.59 0.00 164 TR_Symld_Words 2097 1.49 1.53 1.48 165 T_XMDrugObfuBody_00 2074 0.88 1.52 0.63 166 BAYES_20 2050 3.30 1.50 3.99 167 RELAYCOUNTRY_DE 2021 0.61 1.48 0.27 168 RCVD_IN_IADB_OPTIN 1963 1.90 1.44 2.09 169 TR_XM_NoHeaderRelay 1958 0.53 1.43 0.18 170 XM_UB60 1947 0.45 1.43 0.07 171 TR_XM_FormFill 1943 0.40 1.42 0.01 172 HTTPS_HTTP_MISMATCH 1932 0.93 1.41 0.75 173 URIBL_BLACK 1916 0.43 1.40 0.06 174 XMSubNoVowel 1903 1.33 1.39 1.31 175 XMBrknScrpt_02 1895 0.77 1.39 0.53 176 RELAYCOUNTRY_RU 1877 0.40 1.37 0.02 177 HTML_FONT_SIZE_HUGE 1808 0.41 1.32 0.06 178 XM_H_Long_From02 1773 1.29 1.30 1.28 179 TooManyTo_002 1708 1.87 1.25 2.11 180 XMPhish30 1694 0.69 1.24 0.48 181 XM_UB80 1674 0.35 1.23 0.01 182 RELAYCOUNTRY_NL 1673 0.45 1.22 0.16 183 XM_ProductURIs 1641 0.75 1.20 0.57 184 TR_Mismatch_TLD_02 1609 0.39 1.18 0.08 185 TR_Mismatch_TLD_01 1603 0.49 1.17 0.23 186 DIET_1 1601 0.59 1.17 0.36 187 RELAYCOUNTRY_GB 1581 0.84 1.16 0.72 188 HTML_FONT_SIZE_LARGE 1569 0.38 1.15 0.08 189 TooManyTo_003 1541 1.32 1.13 1.40 190 TR_BOTNET_NEGATE 1534 0.55 1.12 0.32 191 TR_XM_BayesRelay 1527 0.32 1.12 0.01 192 TR_XM_COVIDMETA4 1486 0.43 1.09 0.17 193 FROM_SUSPICIOUS_NTLD 1473 0.34 1.08 0.05 194 DKIM_ADSP_CUSTOM_MED 1459 0.94 1.07 0.89 195 RELAYCOUNTRY_CN 1415 0.34 1.04 0.07 196 XMSubMetaI_00 1387 0.63 1.02 0.48 197 TooManyTo_004 1386 0.99 1.01 0.99 198 FROM_SUSPICIOUS_NTLD_FP 1376 0.31 1.01 0.04 199 XMBdyGiftCard01 1360 0.81 1.00 0.74 200 XM_PDF 1351 3.82 0.99 4.93 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 302936 88.80 95.55 86.18 2 RELAYCOUNTRY_US 277061 79.25 80.37 78.81 3 DKIM_SIGNED 243273 73.35 84.03 69.20 4 DCC_CHECK_NEGATIVE 242540 58.34 30.94 68.99 5 XM_DK_Pass 238331 71.49 80.99 67.80 6 DKIM_VALID 235124 70.79 80.83 66.88 7 XM_B_Unicode 235089 69.50 76.27 66.87 8 BAYES_50 196600 52.10 42.25 55.93 9 DKIM_VALID_AU 181904 54.41 61.27 51.75 10 XMListUnsubscribeExists 159333 51.31 66.71 45.32 11 XM_B_SpammyWords 156027 49.58 62.94 44.38 12 XM_B_Unicode3 139523 40.18 41.45 39.69 13 DCC_CHECK 108849 41.61 69.02 30.96 14 T_TM2_M_HEADER_IN_MSG 107877 27.97 20.97 30.69 15 RCVD_IN_MSPIKE_WL 95680 25.34 20.51 27.22 16 DKIM_VALID_EF 92620 26.77 27.84 26.35 17 HTML_FONT_LOW_CONTRAST 91681 27.75 32.05 26.08 18 FVGT_m_MULTI_ODD 80595 25.49 32.07 22.93 19 XMSubLong 76149 21.78 22.08 21.66 20 LOC_TINY_FONT_1 73926 24.60 33.78 21.03 21 MIME_HTML_ONLY 72205 24.42 34.41 20.54 22 RCVD_IN_MSPIKE_H2 68307 20.93 24.80 19.43 23 ALL_TRUSTED 66065 14.05 1.85 18.79 24 XM_B_SpammyWords2 64471 22.84 34.40 18.34 25 T_KAM_HTML_FONT_INVALID 63626 20.47 26.58 18.10 26 RCVD_IN_MSPIKE_H3 54600 15.14 14.15 15.53 27 BAYES_00 42658 8.97 0.84 12.13 28 XM_Multi_Part_URI 39019 12.55 16.29 11.10 29 USER_IN_DEF_DKIM_WL 38752 8.57 2.26 11.02 30 XM_Body_Dirty_Words 37994 13.85 21.67 10.81 31 XM_B_Unsub 35808 11.41 14.56 10.19 32 TooManyTo_001 35663 8.99 6.03 10.14 33 RCVD_IN_MSPIKE_H4 35392 8.93 6.01 10.07 34 BAYES_60 30923 8.34 7.16 8.80 35 LotsOfNums_01 29482 8.02 7.06 8.39 36 IN_ZIMBRA_NJ_WHITELIST 27494 5.67 0.12 7.82 37 XM_Evil_Numbers_Gen 26750 8.31 10.11 7.61 38 XM_DKIMWhitelistDomains 26491 5.44 0.04 7.54 39 UNPARSEABLE_RELAY 26109 9.00 13.03 7.43 40 LOTS_OF_MONEY 25463 8.75 12.63 7.24 41 MIME_QP_LONG_LINE 24131 6.02 3.85 6.86 42 XM_DK_Undo_02 22500 15.92 40.43 6.40 43 TR_XM_DK_Bayes 22066 4.63 0.39 6.28 44 TR_XM_DK_Bayes1 21639 4.54 0.39 6.16 45 MPART_ALT_DIFF 21014 7.20 10.35 5.98 46 T_TooManySym_01 20763 5.08 2.97 5.91 47 TR_XM_UnparsRelay 20239 7.69 12.66 5.76 48 XM_SendGrid 19538 6.32 8.27 5.56 49 HTML_IMAGE_RATIO_02 19081 6.02 7.54 5.43 50 TR_XM_DK_Bayes2 18969 3.96 0.28 5.40 51 BAYES_99 18549 13.16 33.45 5.28 52 BAYES_40 17713 4.18 1.96 5.04 53 RCVD_IN_IADB_LISTED 17410 4.52 3.41 4.95 54 XM_PDF 17316 3.82 0.99 4.93 55 HTML_IMAGE_RATIO_04 17184 4.74 4.37 4.89 56 XM_H_Long_From01 16815 5.22 6.33 4.78 57 XMStrtUSub 16687 4.75 4.75 4.75 58 TR_XM_DKIM_Undo 16393 11.99 30.86 4.66 59 RCVD_IN_VALIDITY_SAFE 16106 4.33 3.67 4.58 60 RCVD_IN_IADB_SPF 15509 3.96 2.81 4.41 61 TR_XM_SpammyWords4 15412 6.15 10.71 4.38 62 BAYES_999 15331 10.50 26.31 4.36 63 BOTNET_IPINHOSTNAME 15253 6.85 13.33 4.34 64 XM_B_SpammyWords3 14854 6.41 12.03 4.23 65 MIME_HTML_ONLY_MULTI 14798 5.10 7.40 4.21 66 HTML_MIME_NO_HTML_TAG 14346 5.09 7.70 4.08 67 RCVD_IN_VALIDITY_CERTIFIED 14251 3.77 3.05 4.05 68 TM2_M_URI_OPT_OUT 14076 3.69 2.89 4.00 69 BAYES_20 14041 3.30 1.50 3.99 70 HTML_IMAGE_RATIO_06 14003 3.73 3.09 3.98 71 RCVD_IN_IADB_SENDERID 13934 3.54 2.46 3.96 72 BAYES_80 13907 4.98 7.62 3.96 73 T_REMOTE_IMAGE 13491 4.47 6.11 3.84 74 RCVD_IN_IADB_DK 13388 3.45 2.51 3.81 75 XM_UncommonTLD01 12778 5.66 10.86 3.63 76 RELAYCOUNTRY_META 12769 8.95 22.62 3.63 77 XM_H_Trusted_IP 12745 2.61 0.00 3.63 78 XMNumbers 12604 3.72 4.06 3.59 79 XM_B_Phish_Phrases 12408 4.21 5.95 3.53 80 XM_SPF_SoftFail 12303 3.93 5.05 3.50 81 TR_XM_DK_SendGrid 12274 4.07 5.58 3.49 82 TR_XM_PhishingBody 12182 4.37 6.69 3.47 83 T_TooManySym_02 11844 2.65 0.80 3.37 84 HTML_IMAGE_RATIO_08 11796 3.08 2.36 3.36 85 XMSubMetaSx_00 11058 3.89 5.80 3.15 86 BOUNCE_MESSAGE 11042 2.48 0.77 3.14 87 ANY_BOUNCE_MESSAGE 11042 2.48 0.77 3.14 88 RCVD_IN_IADB_VOUCHED 10756 2.85 2.31 3.06 89 MAILING_LIST_MULTI 10025 2.62 2.01 2.85 90 FROM_EXCESS_BASE64 9966 2.53 1.74 2.83 91 XMSexyCombo_05 9876 4.92 10.34 2.81 92 MIME_HTML_MOSTLY 9326 2.90 3.55 2.65 93 FSL_BULK_SIG 9043 6.00 14.83 2.57 94 BAYES_95 8653 3.03 4.51 2.46 95 BAYES_05 8486 1.93 0.67 2.41 96 URI_NOVOWEL 8293 2.44 2.65 2.36 97 KHOP_HELO_FCRDNS 8224 2.84 4.13 2.34 98 DKIM_INVALID 8149 2.57 3.21 2.32 99 XM_B_Phish66 7499 2.43 3.18 2.13 100 SUBJ_ALL_CAPS 7489 2.11 2.06 2.13 101 TooManyTo_002 7425 1.87 1.25 2.11 102 RCVD_IN_IADB_OPTIN 7336 1.90 1.44 2.09 103 HTML_FONT_FACE_BAD 7097 1.67 0.76 2.02 104 XM_GoogleGroups 6937 2.75 4.75 1.97 105 HELO_NODOT 6818 1.54 0.50 1.94 106 HELO_NO_DOMAIN 6813 1.54 0.50 1.94 107 INVALID_MSGID 6613 1.43 0.27 1.88 108 XM_B_SpammyTLD 6565 2.60 4.49 1.87 109 XM_B_Unsub2 6513 1.88 1.95 1.85 110 TM2_M_VERY_LONG_WORD 6512 3.28 6.95 1.85 111 TR_DCC_Bayes_99 6502 8.09 24.16 1.85 112 TR_XM_SB_Phish 6437 1.92 2.16 1.83 113 XMSubPhish11 6366 1.89 2.09 1.81 114 TVD_RCVD_IP 6339 1.40 0.35 1.80 115 IN_HORDE_ADDRESS_BOOK 6247 1.31 0.11 1.78 116 MSGID_NOFQDN1 6179 1.31 0.16 1.76 117 T_XMDrugObfuBody_14 6038 2.60 4.85 1.72 118 TO_MALFORMED 5930 1.22 0.01 1.69 119 XM_CamelCaseFrm001 5921 1.91 2.48 1.68 120 XMDiploma_00 5809 2.12 3.32 1.65 121 RCVD_IN_MSPIKE_H5 5688 1.26 0.35 1.62 122 XM_B_Investor 5664 2.49 4.76 1.61 123 BOTNET 5472 4.75 12.96 1.56 124 XM_DK_Undo_01 5332 1.87 2.78 1.52 125 TR_XM_SpammyWords5 5295 2.01 3.31 1.51 126 TR_Symld_Words 5200 1.49 1.53 1.48 127 SHORT_URI_2 5149 1.14 0.31 1.46 128 TVD_SPACE_RATIO 5043 1.07 0.14 1.43 129 TR_XM_SpammyRelay 4947 4.18 11.30 1.41 130 TooManyTo_003 4926 1.32 1.13 1.40 131 XMLngstWrd_00 4886 2.32 4.70 1.39 132 UNTRUSTED_Relay 4725 4.40 12.27 1.34 133 XMLngstWrd_01 4659 2.25 4.62 1.33 134 XMSubNoVowel 4612 1.33 1.39 1.31 135 XM_H_Long_From02 4506 1.29 1.30 1.28 136 T_XMDrugObfuBody_08 4408 1.68 2.79 1.25 137 XMLngstWrd_02 4337 2.16 4.56 1.23 138 XMCapTrack 4287 0.98 0.36 1.22 139 XMGappySubj_01 4062 0.86 0.10 1.16 140 RCVD_IN_MSPIKE_BL 4008 2.71 6.75 1.14 141 TR_XM_MSPIKECOMBO 3982 2.69 6.68 1.13 142 XMLngstWrd_03 3957 2.00 4.24 1.13 143 XMBSHREFv2 3925 0.88 0.27 1.12 144 URI_HEX 3701 1.26 1.78 1.05 145 XMLngstWrd_04 3678 1.92 4.18 1.05 146 TooManyTo_004 3466 0.99 1.01 0.99 147 XM_OfRef6 3370 1.63 3.37 0.96 148 XM_UB50 3355 2.14 5.20 0.95 149 TR_XM_SpammyWords2 3255 3.44 9.92 0.93 150 FILL_THIS_FORM 3162 0.70 0.17 0.90 151 DKIM_ADSP_CUSTOM_MED 3114 0.94 1.07 0.89 152 RCVD_IN_RP_SAFE 3100 0.86 0.79 0.88 153 XMStockSpam_06 2950 1.08 1.70 0.84 154 HTML_TITLE_SUBJ_DIFF 2928 1.78 4.23 0.83 155 UPPERCASE_75_100 2924 1.74 4.09 0.83 156 T_TooManySym_03 2901 0.68 0.30 0.83 157 TR_MetaPhish_Combo_01 2889 0.86 0.97 0.82 158 T_FILL_THIS_FORM_SHORT 2821 1.38 2.87 0.80 159 TooManyTo_005 2818 0.84 0.94 0.80 160 XMGenDplmaNmb 2778 1.03 1.63 0.79 161 RCVD_IN_RP_CERTIFIED 2774 0.75 0.65 0.79 162 TR_XM_MaxUnsub 2744 2.30 6.20 0.78 163 SpammyFromTLD_01 2661 1.73 4.24 0.76 164 XMBody_95 2659 0.57 0.08 0.76 165 HTTPS_HTTP_MISMATCH 2623 0.93 1.41 0.75 166 RELAYCOUNTRY_CA 2613 2.07 5.49 0.74 167 XMBdyGiftCard01 2594 0.81 1.00 0.74 168 XM_ShortIntro_01 2563 0.75 0.81 0.73 169 XMHTML_After_End 2535 1.05 1.89 0.72 170 T_OBFU_PDF_ATTACH 2524 0.59 0.24 0.72 171 RELAYCOUNTRY_GB 2523 0.84 1.16 0.72 172 HTML_TAG_BALANCE_BODY 2517 0.77 0.90 0.72 173 XM_H_PHPMailer 2468 0.73 0.80 0.70 174 RCVD_IN_MSPIKE_L4 2442 0.99 1.74 0.69 175 XM_USANA_RCVD 2293 0.47 0.00 0.65 176 T_XMDrugObfuBody_00 2230 0.88 1.52 0.63 177 XM_B_COVIDMETA 2226 1.00 1.93 0.63 178 TVD_SPACE_RATIO_MINFP 2205 0.50 0.16 0.63 179 HTML_IMAGE_ONLY_20 2142 0.56 0.45 0.61 180 TR_MSPIKEBAYES00 2118 0.44 0.01 0.60 181 XMNoVowels 2066 0.53 0.39 0.59 182 FROM_GOV_DKIM_AU 2025 0.44 0.10 0.58 183 NML_ADSP_CUSTOM_MED 2020 0.67 0.91 0.57 184 XM_ProductURIs 1996 0.75 1.20 0.57 185 T_XMHurry_00 1984 0.88 1.70 0.56 186 FROM_GOV_SPOOF 1959 0.43 0.09 0.56 187 SHORT_HELO_AND_INLINE_IMAGE 1949 0.42 0.08 0.55 188 RCVD_IN_BL_SPAMCOP_NET 1943 2.79 8.55 0.55 189 URI_TRY_3LD 1888 0.65 0.95 0.54 190 XMHTMLBadTable_001 1879 0.61 0.80 0.53 191 T_Symld_Words_02 1873 0.60 0.79 0.53 192 XMBrknScrpt_02 1870 0.77 1.39 0.53 193 RCVD_IN_SORBS_DUL 1854 0.45 0.27 0.53 194 XMMoneyMeta_00 1843 0.64 0.95 0.52 195 XMSexyCombo_01 1825 0.93 2.00 0.52 196 SUBJ_DOLLARS 1811 0.52 0.52 0.52 197 XM_B_COPY_HTML 1808 0.59 0.79 0.51 198 TR_XM_SpammyWords3 1757 1.37 3.61 0.50 199 MPART_ALT_DIFF_COUNT 1722 0.58 0.80 0.49 200 XM_B_SpammyWords4 1712 1.05 2.50 0.49 ----------------------------------------------------------------------