Email: 597411 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.31 sec Spam: 170079 Autolearn: 0 AvgScore: 13.76 AvgScanTime: 1.54 sec Ham: 427332 Autolearn: 0 AvgScore: -3.88 AvgScanTime: 1.22 sec Time Spent Running SA: 217.68 hours Time Spent Processing Spam: 72.87 hours Time Spent Processing Ham: 144.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163353 90.28 96.05 87.99 2 DKIM_SIGNED 149494 68.46 87.90 60.72 3 XM_DK_Pass 146551 67.25 86.17 59.71 4 DKIM_VALID 145117 66.35 85.32 58.80 5 RELAYCOUNTRY_US 142590 82.70 83.84 82.24 6 XM_B_Unicode 135472 73.50 79.65 71.05 7 DCC_CHECK 113402 36.16 66.68 24.01 8 XM_B_SpammyWords 112542 48.05 66.17 40.83 9 XMListUnsubscribeExists 112188 46.67 65.96 38.99 10 DKIM_VALID_AU 109961 50.87 64.65 45.39 11 RCVD_IN_MSPIKE_H2 83066 35.67 48.84 30.43 12 BAYES_50 74894 49.38 44.03 51.51 13 XM_B_Unicode3 74451 42.93 43.77 42.59 14 XM_DK_Undo_02 71641 15.74 42.12 5.24 15 LOC_TINY_FONT_1 64380 23.57 37.85 17.88 16 XM_B_SpammyWords2 62857 21.51 36.96 15.36 17 FVGT_m_MULTI_ODD 59615 24.74 35.05 20.64 18 HTML_FONT_LOW_CONTRAST 58279 25.35 34.27 21.79 19 MIME_HTML_ONLY 57412 27.98 33.76 25.69 20 TR_XM_DKIM_Undo 56694 12.04 33.33 3.57 21 DCC_CHECK_NEGATIVE 56633 63.80 33.30 75.94 22 BAYES_99 56011 12.45 32.93 4.29 23 DKIM_VALID_EF 53789 25.82 31.63 23.52 24 T_KAM_HTML_FONT_INVALID 50655 20.16 29.78 16.33 25 BAYES_999 44642 9.93 26.25 3.44 26 XMSubLong 40551 20.79 23.84 19.58 27 XM_Body_Dirty_Words 39443 13.08 23.19 9.06 28 T_TM2_M_HEADER_IN_MSG 38610 24.00 22.70 24.52 29 TR_DCC_Bayes_99 37613 7.24 22.12 1.32 30 XM_B_Unsub 32303 11.51 18.99 8.53 31 RELAYCOUNTRY_META 31845 7.68 18.72 3.29 32 TR_XM_BayesUnsub 31347 9.10 18.43 5.38 33 XM_Multi_Part_URI 30253 12.14 17.79 9.90 34 TR_XM_Base64_M1 27650 10.02 16.26 7.54 35 LOTS_OF_MONEY 25555 8.34 15.03 5.67 36 RCVD_IN_MSPIKE_WL 22723 14.26 13.36 14.62 37 FSL_BULK_SIG 22435 5.58 13.19 2.56 38 UNPARSEABLE_RELAY 22111 8.28 13.00 6.40 39 TR_XM_SpammyWords4 21923 6.07 12.89 3.36 40 TR_XM_UnparsRelay 21584 7.08 12.69 4.84 41 TR_XM_Base64_L1 21332 5.30 12.54 2.41 42 XM_B_SpammyWords3 19835 6.27 11.66 4.12 43 BOTNET_IPINHOSTNAME 19617 6.20 11.53 4.08 44 XMSexyCombo_05 18933 5.04 11.13 2.61 45 TR_XM_SpammyWords2 18923 3.71 11.13 0.76 46 XM_Evil_Numbers_Gen 18387 8.75 10.81 7.92 47 RCVD_IN_MSPIKE_H3 17804 10.12 10.47 9.98 48 RCVD_IN_BL_SPAMCOP_NET 17743 3.26 10.43 0.40 49 TR_XM_SpammyRelay 17418 3.86 10.24 1.31 50 BOTNET 17297 3.79 10.17 1.26 51 MPART_ALT_DIFF 16609 12.61 9.77 13.75 52 LotsOfNums_01 13360 7.45 7.86 7.29 53 XM_UncommonTLD01 13304 4.41 7.82 3.05 54 UNTRUSTED_Relay 13275 3.02 7.81 1.11 55 XM_B_Phish_Phrases 13232 4.10 7.78 2.63 56 BAYES_80 12704 4.59 7.47 3.44 57 XM_SendGrid 12047 5.05 7.08 4.24 58 XMSubMetaSx_00 11758 3.87 6.91 2.66 59 HTML_IMAGE_RATIO_02 11615 5.33 6.83 4.74 60 BAYES_60 11585 7.17 6.81 7.32 61 TR_XM_SPAMCOP 11581 2.08 6.81 0.20 62 MIME_HTML_ONLY_MULTI 11351 10.31 6.67 11.76 63 TR_XM_PhishingBody 11072 3.79 6.51 2.70 64 RELAYCOUNTRY_CA 10916 2.46 6.42 0.89 65 XM_H_Long_From01 10905 4.89 6.41 4.29 66 TM2_M_VERY_LONG_WORD 10487 3.09 6.17 1.87 67 HTML_MIME_NO_HTML_TAG 10378 3.79 6.10 2.87 68 TR_XM_Base64_C 8565 1.76 5.04 0.46 69 TR_XM_Base64_L2 8437 1.79 4.96 0.53 70 TooManyTo_001 7798 6.37 4.58 7.08 71 BAYES_95 7669 2.82 4.51 2.14 72 HTML_IMAGE_RATIO_04 7549 12.52 4.44 15.74 73 TR_XM_DK_SendGrid 7499 3.26 4.41 2.80 74 XMLngstWrd_00 7379 2.20 4.34 1.34 75 XMLngstWrd_01 7291 2.14 4.29 1.29 76 XM_SPF_SoftFail 7277 3.02 4.28 2.52 77 T_REMOTE_IMAGE 7197 3.90 4.23 3.76 78 XM_B_SpammyTLD 7167 2.44 4.21 1.73 79 TR_XM_Base64_M2 7167 2.16 4.21 1.35 80 XMLngstWrd_02 7114 2.06 4.18 1.21 81 XM_GoogleGroups 6998 2.63 4.11 2.03 82 HTML_IMAGE_RATIO_06 6982 4.85 4.11 5.14 83 XMNumbers 6960 3.28 4.09 2.96 84 XMLngstWrd_03 6922 1.98 4.07 1.15 85 XM_B_Phish66 6771 2.21 3.98 1.51 86 XM_DIRTYINTL 6747 1.34 3.97 0.29 87 XMLngstWrd_04 6743 1.91 3.96 1.10 88 XMStrtUSub 6663 9.34 3.92 11.50 89 RCVD_IN_MSPIKE_BL 6652 1.91 3.91 1.11 90 MIME_QP_LONG_LINE 6570 4.44 3.86 4.67 91 HTML_TITLE_SUBJ_DIFF 6459 1.76 3.80 0.94 92 TR_XM_MSPIKECOMBO 6414 1.86 3.77 1.10 93 XM_OfRef6 6397 1.63 3.76 0.78 94 XM_B_Investor 6381 1.92 3.75 1.19 95 XM_UB50 6324 1.55 3.72 0.69 96 MIME_HTML_MOSTLY 6248 2.70 3.67 2.31 97 UPPERCASE_75_100 6159 1.70 3.62 0.94 98 XM_B_Unsub2 5961 1.89 3.50 1.25 99 RCVD_IN_VALIDITY_SAFE 5919 3.75 3.48 3.85 100 TR_XM_SpammyWords5 5811 1.91 3.42 1.31 101 T_XMDrugObfuBody_14 5777 2.03 3.40 1.49 102 T_XMDrugObfuBody_08 5516 1.75 3.24 1.16 103 SpammyFromTLD_01 5475 1.34 3.22 0.60 104 XM_CamelCaseFrm001 5364 2.17 3.15 1.79 105 XMDiploma_00 5230 1.76 3.08 1.24 106 RCVD_IN_IADB_LISTED 4997 4.27 2.94 4.80 107 USER_IN_DEF_DKIM_WL 4984 8.04 2.93 10.07 108 XM_DK_Undo_01 4918 1.77 2.89 1.32 109 TM2_M_URI_OPT_OUT 4855 4.06 2.85 4.54 110 RCVD_IN_VALIDITY_CERTIFIED 4773 3.24 2.81 3.42 111 KHOP_HELO_FCRDNS 4735 1.97 2.78 1.65 112 URI_NOVOWEL 4659 2.28 2.74 2.10 113 RCVD_IN_MSPIKE_H4 4605 3.62 2.71 3.98 114 TR_LOTS_OF_MONEY3 4561 0.98 2.68 0.31 115 RCVD_IN_VALIDITY_RPBL 4559 0.81 2.68 0.07 116 HTML_IMAGE_RATIO_08 4497 2.08 2.64 1.86 117 XMStockSpam_06 4422 1.27 2.60 0.73 118 DKIM_INVALID 4377 2.11 2.57 1.92 119 SpammyFromTLD_02 4261 1.00 2.51 0.41 120 RCVD_IN_IADB_SPF 4252 3.77 2.50 4.28 121 TR_XM_SB_Phish 4152 3.38 2.44 3.75 122 XMBody_17 4148 0.91 2.44 0.30 123 T_TooManySym_01 4067 4.10 2.39 4.79 124 XMSubPhish11 4058 3.34 2.39 3.72 125 RCVD_IN_IADB_DK 3960 3.33 2.33 3.73 126 RCVD_IN_IADB_SENDERID 3918 3.41 2.30 3.85 127 BOTNET_NORDNS 3816 0.65 2.24 0.01 128 SUBJ_ALL_CAPS 3742 1.67 2.20 1.46 129 ALL_TRUSTED 3735 11.66 2.20 15.43 130 T_FILL_THIS_FORM_SHORT 3541 1.18 2.08 0.82 131 HTTPS_HTTP_MISMATCH 3481 1.01 2.05 0.60 132 FROM_EXCESS_BASE64 3460 1.88 2.03 1.81 133 TR_XM_MSPIKECOMBO2 3446 0.71 2.03 0.19 134 XM_B_COVIDMETA 3377 0.91 1.99 0.48 135 MAILING_LIST_MULTI 3293 2.26 1.94 2.39 136 TR_XM_SpammyWords3 3275 0.89 1.93 0.47 137 RCVD_IN_MSPIKE_L3 3236 0.97 1.90 0.60 138 TR_XM_PHPDW 3214 0.76 1.89 0.31 139 PDS_OTHER_BAD_TLD 3187 0.60 1.87 0.09 140 TR_XM_PHPForged 3174 0.73 1.87 0.28 141 XM_B_SpammyWords4 3132 0.81 1.84 0.41 142 TR_XM_FormFill2 3103 0.71 1.82 0.26 143 XM_H_PHPOS 3081 0.70 1.81 0.25 144 XM_H_Undi_Recip 2924 0.63 1.72 0.20 145 XMHTML_After_End 2924 0.93 1.72 0.62 146 XMBrknScrpt_02 2922 0.83 1.72 0.48 147 HK_RANDOM_REPLYTO 2905 0.53 1.71 0.06 148 XM_UB99 2811 0.47 1.65 0.00 149 URI_HEX 2798 1.06 1.65 0.83 150 TR_XM_NoHeaderRelay 2709 0.52 1.59 0.09 151 XM_Body_Dirty_Words_01 2685 0.61 1.58 0.22 152 XMGenDplmaNmb 2654 0.89 1.56 0.63 153 RCVD_IN_PSBL 2610 0.48 1.53 0.06 154 BAYES_40 2595 4.32 1.53 5.43 155 RCVD_IN_IADB_VOUCHED 2555 2.51 1.50 2.92 156 HTML_TAG_BALANCE_BODY 2408 0.79 1.42 0.54 157 XMSexyCombo_01 2372 0.61 1.39 0.30 158 XM_B_DynamicLink 2358 0.41 1.39 0.02 159 TM2_M_A_HREF_HREF 2354 0.57 1.38 0.24 160 XM_URI_RBL 2334 0.47 1.37 0.10 161 SHOPIFY_IMG_NOT_RCVD_SFY 2265 0.46 1.33 0.11 162 T_XMDrugObfuBody_00 2218 0.82 1.30 0.63 163 RELAYCOUNTRY_AU 2191 0.56 1.29 0.27 164 XM_OfRef7 2143 0.43 1.26 0.10 165 TR_XM_COVIDMETA1 2141 0.47 1.26 0.16 166 RELAYCOUNTRY_DE 2127 0.52 1.25 0.23 167 XM_UB999 2113 0.35 1.24 0.00 168 T_XMHurry_00 2079 0.58 1.22 0.32 169 RELAYCOUNTRY_RU 2069 0.36 1.22 0.02 170 XM_H_Long_From02 2055 0.94 1.21 0.83 171 URIBL_DBL_SPAM 2054 0.35 1.21 0.01 172 URI_TRY_3LD 2050 0.68 1.21 0.47 173 TR_XM_MaxSPIKE 2029 0.40 1.19 0.09 174 TR_Mismatch_TLD_01 1987 0.55 1.17 0.30 175 DIET_1 1977 0.51 1.16 0.25 176 URIBL_BLACK 1968 0.36 1.16 0.04 177 XMBdyGiftCard01 1921 0.79 1.13 0.66 178 XMSubMetaI_00 1895 0.68 1.11 0.50 179 BAYES_20 1882 4.09 1.11 5.28 180 HTML_IMAGE_ONLY_20 1866 0.74 1.10 0.59 181 RELAYCOUNTRY_FR 1856 0.45 1.09 0.20 182 HTML_TAG_BALANCE_CENTER 1814 0.36 1.07 0.08 183 XMPhish30 1784 0.72 1.05 0.58 184 XMSubMetaSxObfu_03 1730 0.48 1.02 0.27 185 BAYES_00 1727 12.09 1.02 16.50 186 XM_PDF 1718 4.13 1.01 5.37 187 THIS_AD 1689 0.41 0.99 0.18 188 BOUNCE_MESSAGE 1682 2.58 0.99 3.22 189 ANY_BOUNCE_MESSAGE 1682 2.58 0.99 3.22 190 MPART_ALT_DIFF_COUNT 1680 0.59 0.99 0.43 191 TR_XM_COVIDMETA4 1678 0.45 0.99 0.24 192 RCVD_IN_MSPIKE_L5 1672 0.29 0.98 0.01 193 MIXED_CENTER_CASE 1665 0.28 0.98 0.00 194 DKIM_ADSP_CUSTOM_MED 1643 0.84 0.97 0.79 195 TR_Symld_Words 1633 1.13 0.96 1.20 196 RELAYCOUNTRY_IN 1627 0.31 0.96 0.06 197 MIXED_HREF_CASE 1626 0.27 0.96 0.00 198 MIXED_IMG_CASE 1620 0.27 0.95 0.00 199 MIXED_AREA_CASE 1617 0.27 0.95 0.00 200 XMClaimOffer 1566 0.31 0.92 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 375989 90.28 96.05 87.99 2 RELAYCOUNTRY_US 351454 82.70 83.84 82.24 3 DCC_CHECK_NEGATIVE 324513 63.80 33.30 75.94 4 XM_B_Unicode 303621 73.50 79.65 71.05 5 DKIM_SIGNED 259488 68.46 87.90 60.72 6 XM_DK_Pass 255181 67.25 86.17 59.71 7 DKIM_VALID 251268 66.35 85.32 58.80 8 BAYES_50 220098 49.38 44.03 51.51 9 DKIM_VALID_AU 193964 50.87 64.65 45.39 10 XM_B_Unicode3 181988 42.93 43.77 42.59 11 XM_B_SpammyWords 174488 48.05 66.17 40.83 12 XMListUnsubscribeExists 166632 46.67 65.96 38.99 13 RCVD_IN_MSPIKE_H2 130030 35.67 48.84 30.43 14 MIME_HTML_ONLY 109764 27.98 33.76 25.69 15 T_TM2_M_HEADER_IN_MSG 104797 24.00 22.70 24.52 16 DCC_CHECK 102616 36.16 66.68 24.01 17 DKIM_VALID_EF 100488 25.82 31.63 23.52 18 HTML_FONT_LOW_CONTRAST 93136 25.35 34.27 21.79 19 FVGT_m_MULTI_ODD 88194 24.74 35.05 20.64 20 XMSubLong 83660 20.79 23.84 19.58 21 LOC_TINY_FONT_1 76428 23.57 37.85 17.88 22 XM_H_Trusted_IP 75015 12.56 0.00 17.55 23 BAYES_00 70491 12.09 1.02 16.50 24 T_KAM_HTML_FONT_INVALID 69778 20.16 29.78 16.33 25 HTML_IMAGE_RATIO_04 67243 12.52 4.44 15.74 26 ALL_TRUSTED 65922 11.66 2.20 15.43 27 XM_B_SpammyWords2 65648 21.51 36.96 15.36 28 HTML_FONT_FACE_BAD 64490 11.01 0.75 15.09 29 RCVD_IN_MSPIKE_WL 62482 14.26 13.36 14.62 30 MPART_ALT_DIFF 58741 12.61 9.77 13.75 31 MIME_HTML_ONLY_MULTI 50234 10.31 6.67 11.76 32 XMStrtUSub 49135 9.34 3.92 11.50 33 USER_IN_DEF_DKIM_WL 43040 8.04 2.93 10.07 34 RCVD_IN_MSPIKE_H3 42668 10.12 10.47 9.98 35 XM_Multi_Part_URI 42296 12.14 17.79 9.90 36 XM_Body_Dirty_Words 38698 13.08 23.19 9.06 37 XM_B_Unsub 36471 11.51 18.99 8.53 38 XM_Evil_Numbers_Gen 33866 8.75 10.81 7.92 39 TR_XM_Base64_M1 32231 10.02 16.26 7.54 40 BAYES_60 31275 7.17 6.81 7.32 41 LotsOfNums_01 31161 7.45 7.86 7.29 42 TooManyTo_001 30261 6.37 4.58 7.08 43 XM_DKIMWhitelistDomains 28954 5.09 0.85 6.78 44 UNPARSEABLE_RELAY 27344 8.28 13.00 6.40 45 IN_ZIMBRA_NJ_WHITELIST 26420 4.46 0.12 6.18 46 TR_XM_DK_Bayes 24946 4.41 0.82 5.84 47 LOTS_OF_MONEY 24242 8.34 15.03 5.67 48 TR_XM_DK_Bayes1 24233 4.26 0.70 5.67 49 BAYES_40 23212 4.32 1.53 5.43 50 TR_XM_BayesUnsub 22999 9.10 18.43 5.38 51 XM_PDF 22958 4.13 1.01 5.37 52 XMSubNoVowel 22871 4.01 0.65 5.35 53 BAYES_20 22544 4.09 1.11 5.28 54 XM_DK_Undo_02 22407 15.74 42.12 5.24 55 HTML_IMAGE_RATIO_06 21967 4.85 4.11 5.14 56 TR_XM_DK_Bayes2 21038 3.68 0.57 4.92 57 TR_XM_UnparsRelay 20686 7.08 12.69 4.84 58 RCVD_IN_IADB_LISTED 20528 4.27 2.94 4.80 59 T_TooManySym_01 20455 4.10 2.39 4.79 60 HTML_IMAGE_RATIO_02 20241 5.33 6.83 4.74 61 MIME_QP_LONG_LINE 19942 4.44 3.86 4.67 62 TM2_M_URI_OPT_OUT 19409 4.06 2.85 4.54 63 BAYES_99 18345 12.45 32.93 4.29 64 XM_H_Long_From01 18312 4.89 6.41 4.29 65 RCVD_IN_IADB_SPF 18295 3.77 2.50 4.28 66 XM_SendGrid 18125 5.05 7.08 4.24 67 XM_B_SpammyWords3 17600 6.27 11.66 4.12 68 BAYES_05 17484 3.10 0.59 4.09 69 BOTNET_IPINHOSTNAME 17451 6.20 11.53 4.08 70 RCVD_IN_MSPIKE_H4 16994 3.62 2.71 3.98 71 RCVD_IN_IADB_SENDERID 16472 3.41 2.30 3.85 72 RCVD_IN_VALIDITY_SAFE 16457 3.75 3.48 3.85 73 T_REMOTE_IMAGE 16082 3.90 4.23 3.76 74 TR_XM_SB_Phish 16014 3.38 2.44 3.75 75 RCVD_IN_IADB_DK 15925 3.33 2.33 3.73 76 XMSubPhish11 15906 3.34 2.39 3.72 77 TR_XM_DKIM_Undo 15256 12.04 33.33 3.57 78 BAYES_80 14716 4.59 7.47 3.44 79 BAYES_999 14684 9.93 26.25 3.44 80 RCVD_IN_VALIDITY_CERTIFIED 14612 3.24 2.81 3.42 81 TR_XM_SpammyWords4 14340 6.07 12.89 3.36 82 RELAYCOUNTRY_META 14059 7.68 18.72 3.29 83 ANY_BOUNCE_MESSAGE 13745 2.58 0.99 3.22 84 BOUNCE_MESSAGE 13744 2.58 0.99 3.22 85 XM_UncommonTLD01 13043 4.41 7.82 3.05 86 XMNumbers 12651 3.28 4.09 2.96 87 RCVD_IN_IADB_VOUCHED 12462 2.51 1.50 2.92 88 HTML_MIME_NO_HTML_TAG 12246 3.79 6.10 2.87 89 TR_XM_DK_SendGrid 11976 3.26 4.41 2.80 90 T_TooManySym_02 11631 2.15 0.73 2.72 91 TR_XM_PhishingBody 11550 3.79 6.51 2.70 92 XMSubMetaSx_00 11359 3.87 6.91 2.66 93 XM_B_Phish_Phrases 11242 4.10 7.78 2.63 94 XMSexyCombo_05 11147 5.04 11.13 2.61 95 FSL_BULK_SIG 10919 5.58 13.19 2.56 96 XM_SPF_SoftFail 10780 3.02 4.28 2.52 97 TR_XM_Base64_L1 10310 5.30 12.54 2.41 98 MAILING_LIST_MULTI 10234 2.26 1.94 2.39 99 MIME_HTML_MOSTLY 9885 2.70 3.67 2.31 100 BAYES_95 9159 2.82 4.51 2.14 101 URI_NOVOWEL 8991 2.28 2.74 2.10 102 TVD_RCVD_IP 8726 1.61 0.52 2.04 103 XM_GoogleGroups 8691 2.63 4.11 2.03 104 RCVD_IN_IADB_OPTIN 8379 1.66 0.92 1.96 105 XMSubLongNoVowel 8288 1.46 0.27 1.94 106 DKIM_INVALID 8220 2.11 2.57 1.92 107 XMSubGarbage 8193 1.41 0.14 1.92 108 TooManyTo_002 8133 1.51 0.53 1.90 109 TM2_M_VERY_LONG_WORD 7978 3.09 6.17 1.87 110 HTML_IMAGE_RATIO_08 7928 2.08 2.64 1.86 111 FROM_EXCESS_BASE64 7752 1.88 2.03 1.81 112 XM_CamelCaseFrm001 7628 2.17 3.15 1.79 113 XM_B_SpammyTLD 7383 2.44 4.21 1.73 114 HELO_NODOT 7172 1.36 0.56 1.68 115 HELO_NO_DOMAIN 7163 1.36 0.55 1.68 116 KHOP_HELO_FCRDNS 7058 1.97 2.78 1.65 117 INVALID_MSGID 6877 1.22 0.23 1.61 118 XM_E_Blogspot 6662 1.16 0.17 1.56 119 IN_HORDE_ADDRESS_BOOK 6505 1.13 0.14 1.52 120 XM_B_Phish66 6460 2.21 3.98 1.51 121 T_XMDrugObfuBody_14 6353 2.03 3.40 1.49 122 SUBJ_ALL_CAPS 6254 1.67 2.20 1.46 123 TO_MALFORMED 5946 1.00 0.01 1.39 124 TR_XM_Base64_M2 5756 2.16 4.21 1.35 125 XMLngstWrd_00 5737 2.20 4.34 1.34 126 XM_DK_Undo_01 5656 1.77 2.89 1.32 127 TR_DCC_Bayes_99 5631 7.24 22.12 1.32 128 TR_XM_SpammyRelay 5617 3.86 10.24 1.31 129 TR_XM_SpammyWords5 5597 1.91 3.42 1.31 130 XMLngstWrd_01 5495 2.14 4.29 1.29 131 T_OBFU_PDF_ATTACH 5417 1.00 0.34 1.27 132 BOTNET 5370 3.79 10.17 1.26 133 XM_B_Unsub2 5356 1.89 3.50 1.25 134 XMDiploma_00 5310 1.76 3.08 1.24 135 TooManyTo_003 5279 1.01 0.44 1.24 136 XMLngstWrd_02 5171 2.06 4.18 1.21 137 TR_Symld_Words 5120 1.13 0.96 1.20 138 XM_B_Investor 5088 1.92 3.75 1.19 139 T_XMDrugObfuBody_08 4950 1.75 3.24 1.16 140 XMLngstWrd_03 4902 1.98 4.07 1.15 141 XMGappySubj_01 4846 0.84 0.12 1.13 142 UNTRUSTED_Relay 4757 3.02 7.81 1.11 143 XMBSHREFv2 4753 0.88 0.31 1.11 144 RCVD_IN_MSPIKE_BL 4750 1.91 3.91 1.11 145 TR_XM_MSPIKECOMBO 4704 1.86 3.77 1.10 146 XMLngstWrd_04 4681 1.91 3.96 1.10 147 XMCapTrack 4386 0.83 0.34 1.03 148 HTML_TITLE_SUBJ_DIFF 4027 1.76 3.80 0.94 149 UPPERCASE_75_100 4015 1.70 3.62 0.94 150 RELAYCOUNTRY_CA 3796 2.46 6.42 0.89 151 TooManyTo_004 3731 0.72 0.35 0.87 152 TVD_SPACE_RATIO 3564 0.63 0.13 0.83 153 XM_H_Long_From02 3556 0.94 1.21 0.83 154 URI_HEX 3527 1.06 1.65 0.83 155 T_FILL_THIS_FORM_SHORT 3492 1.18 2.08 0.82 156 RCVD_IN_RP_SAFE 3404 0.76 0.66 0.80 157 DKIM_ADSP_CUSTOM_MED 3359 0.84 0.97 0.79 158 XM_OfRef6 3317 1.63 3.76 0.78 159 TR_XM_SpammyWords2 3258 3.71 11.13 0.76 160 XMStockSpam_06 3136 1.27 2.60 0.73 161 TooManyTo_005 3074 0.60 0.31 0.72 162 RCVD_IN_RP_CERTIFIED 3022 0.65 0.51 0.71 163 XM_UB50 2954 1.55 3.72 0.69 164 XMBdyGiftCard01 2825 0.79 1.13 0.66 165 RCVD_IN_MSPIKE_H5 2820 0.52 0.18 0.66 166 T_TooManySym_03 2817 0.54 0.24 0.66 167 TR_MetaPhish_Combo_01 2812 0.70 0.81 0.66 168 XMNoVowels 2723 0.60 0.51 0.64 169 T_XMDrugObfuBody_00 2674 0.82 1.30 0.63 170 XMGenDplmaNmb 2672 0.89 1.56 0.63 171 XMHTML_After_End 2646 0.93 1.72 0.62 172 RCVD_IN_MSPIKE_L3 2577 0.97 1.90 0.60 173 SpammyFromTLD_01 2558 1.34 3.22 0.60 174 HTTPS_HTTP_MISMATCH 2552 1.01 2.05 0.60 175 HTML_IMAGE_ONLY_20 2526 0.74 1.10 0.59 176 XMBody_95 2525 0.50 0.26 0.59 177 XMPhish30 2489 0.72 1.05 0.58 178 XM_B_COPY_HTML 2474 0.64 0.80 0.58 179 XM_ShortIntro_01 2456 0.52 0.40 0.57 180 RELAYCOUNTRY_GB 2369 0.61 0.75 0.55 181 FROM_GOV_DKIM_AU 2304 0.49 0.38 0.54 182 XM_H_PHPMailer 2298 0.60 0.74 0.54 183 HTML_TAG_BALANCE_BODY 2287 0.79 1.42 0.54 184 MSGID_NOFQDN1 2273 0.39 0.03 0.53 185 TM2_M_BODY_EMPTY 2269 0.44 0.22 0.53 186 TR_XM_Base64_L2 2256 1.79 4.96 0.53 187 XMSubMetaI_00 2150 0.68 1.11 0.50 188 SHORT_HELO_AND_INLINE_IMAGE 2144 0.38 0.07 0.50 189 RCVD_IN_MSPIKE_L4 2082 0.60 0.89 0.49 190 XM_shorewaves_Whitelist 2079 0.35 0.00 0.49 191 XMBrknScrpt_02 2062 0.83 1.72 0.48 192 XM_B_COVIDMETA 2034 0.91 1.99 0.48 193 TR_XM_SpammyWords3 2029 0.89 1.93 0.47 194 NML_ADSP_CUSTOM_MED 2015 0.57 0.82 0.47 195 URI_TRY_3LD 1988 0.68 1.21 0.47 196 RCVD_IN_SORBS_DUL 1959 0.36 0.13 0.46 197 TR_XM_Base64_C 1947 1.76 5.04 0.46 198 MPART_ALT_DIFF_COUNT 1846 0.59 0.99 0.43 199 XMMoneyMeta_00 1811 0.54 0.84 0.42 200 HTML_IMAGE_ONLY_28 1760 0.38 0.29 0.41 ----------------------------------------------------------------------