Email: 525016 Autolearn: 0 AvgScore: 1.67 AvgScanTime: 1.34 sec Spam: 120163 Autolearn: 0 AvgScore: 13.37 AvgScanTime: 1.55 sec Ham: 404853 Autolearn: 0 AvgScore: -1.80 AvgScanTime: 1.28 sec Time Spent Running SA: 196.02 hours Time Spent Processing Spam: 51.63 hours Time Spent Processing Ham: 144.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 113788 89.92 94.69 88.50 2 DKIM_SIGNED 103170 72.56 85.86 68.61 3 XM_DK_Pass 99286 70.71 82.63 67.18 4 DKIM_VALID 96152 68.60 80.02 65.21 5 RELAYCOUNTRY_US 94472 80.08 78.62 80.52 6 XM_B_Unicode 94418 73.07 78.57 71.43 7 DCC_CHECK 91884 46.86 76.47 38.07 8 XM_B_SpammyWords 84178 49.79 70.05 43.78 9 XMListUnsubscribeExists 83470 50.51 69.46 44.89 10 DKIM_VALID_AU 69444 50.70 57.79 48.59 11 BAYES_50 57851 51.43 48.14 52.40 12 XM_B_Unicode3 55000 43.97 45.77 43.44 13 XM_DK_Undo_02 49324 14.39 41.05 6.48 14 XM_B_SpammyWords2 46539 23.30 38.73 18.72 15 LOC_TINY_FONT_1 42639 24.67 35.48 21.46 16 TR_XM_DKIM_Undo 38828 11.13 32.31 4.84 17 HTML_FONT_LOW_CONTRAST 38732 27.05 32.23 25.51 18 DKIM_VALID_EF 37534 25.79 31.24 24.18 19 T_KAM_HTML_FONT_INVALID 36679 21.10 30.52 18.31 20 FVGT_m_MULTI_ODD 35077 23.29 29.19 21.54 21 RCVD_IN_MSPIKE_H2 33482 21.71 27.86 19.88 22 MIME_HTML_ONLY 33051 23.14 27.51 21.84 23 BAYES_99 32921 12.92 27.40 8.63 24 XMSubLong 30673 21.85 25.53 20.76 25 T_TM2_M_HEADER_IN_MSG 29373 27.33 24.44 28.18 26 DCC_CHECK_NEGATIVE 28238 53.10 23.50 61.88 27 RCVD_IN_MSPIKE_WL 25622 25.53 21.32 26.78 28 XM_Body_Dirty_Words 25358 13.30 21.10 10.99 29 RELAYCOUNTRY_META 25295 7.65 21.05 3.67 30 BAYES_999 25268 10.72 21.03 7.67 31 TR_DCC_Bayes_99 24576 6.55 20.45 2.43 32 XM_Multi_Part_URI 19892 12.17 16.55 10.87 33 BOTNET 18044 4.63 15.02 1.55 34 BOTNET_IPINHOSTNAME 17110 6.33 14.24 3.98 35 TR_XM_SpammyRelay 16955 4.47 14.11 1.61 36 XM_B_Unsub 16611 12.56 13.82 12.19 37 LOTS_OF_MONEY 16440 8.08 13.68 6.42 38 FSL_BULK_SIG 16199 9.24 13.48 7.99 39 RCVD_IN_MSPIKE_H3 15618 13.73 13.00 13.95 40 XM_B_SpammyWords3 15606 6.90 12.99 5.09 41 UNTRUSTED_Relay 15190 3.84 12.64 1.23 42 UNPARSEABLE_RELAY 14727 8.52 12.26 7.41 43 TR_XM_UnparsRelay 14311 7.20 11.91 5.80 44 TR_XM_SpammyWords4 13958 5.61 11.62 3.83 45 RCVD_IN_BL_SPAMCOP_NET 13089 3.11 10.89 0.80 46 XM_UncommonTLD01 12798 4.86 10.65 3.14 47 XM_SendGrid 12334 7.54 10.26 6.73 48 XMSexyCombo_05 12225 4.73 10.17 3.11 49 MPART_ALT_DIFF 12108 7.89 10.08 7.24 50 TR_XM_SpammyWords2 11727 2.89 9.76 0.85 51 XM_Evil_Numbers_Gen 11110 7.64 9.25 7.17 52 HTML_IMAGE_RATIO_02 10564 6.10 8.79 5.30 53 TR_XM_PhishingBody 10023 4.53 8.34 3.40 54 MIME_HTML_MOSTLY 10017 3.67 8.34 2.28 55 RCVD_IN_MSPIKE_H4 9477 10.39 7.89 11.13 56 XM_UB50 9292 2.35 7.73 0.75 57 LotsOfNums_01 9034 9.11 7.52 9.58 58 BAYES_80 8747 4.60 7.28 3.80 59 XMSubMetaSx_00 8596 4.36 7.15 3.53 60 BAYES_60 8269 7.66 6.88 7.89 61 TooManyTo_001 7604 8.31 6.33 8.90 62 XM_B_Phish_Phrases 7602 4.10 6.33 3.44 63 URI_NOVOWEL 7168 3.32 5.97 2.54 64 TR_XM_SPAMCOP 7160 1.66 5.96 0.39 65 DKIM_INVALID 7018 3.96 5.84 3.40 66 XM_B_Phish66 7010 2.86 5.83 1.98 67 XM_H_Long_From01 6832 5.17 5.69 5.02 68 TR_XM_DK_SendGrid 6462 4.36 5.38 4.06 69 RELAYCOUNTRY_CA 6169 1.79 5.13 0.79 70 MIME_QP_LONG_LINE 6149 6.79 5.12 7.29 71 HTML_IMAGE_RATIO_04 5955 5.96 4.96 6.25 72 XM_SPF_SoftFail 5888 2.53 4.90 1.83 73 TM2_M_URI_OPT_OUT 5756 5.81 4.79 6.12 74 SpammyFromTLD_01 5674 1.61 4.72 0.69 75 XM_B_Investor 5365 2.43 4.46 1.83 76 SpammyFromTLD_02 4948 1.21 4.12 0.35 77 TR_XM_MaxUnsub 4938 1.61 4.11 0.86 78 XM_OfRef6 4779 1.81 3.98 1.16 79 XM_B_SpammyTLD 4702 2.40 3.91 1.95 80 BAYES_95 4627 2.68 3.85 2.34 81 T_XMDrugObfuBody_08 4476 2.10 3.72 1.61 82 HTML_IMAGE_RATIO_06 4458 3.59 3.71 3.56 83 HTML_IMAGE_RATIO_08 4251 2.52 3.54 2.22 84 XMNumbers 4226 3.12 3.52 3.00 85 XMStrtUSub 4188 3.72 3.49 3.79 86 MIME_HTML_ONLY_MULTI 4112 5.05 3.42 5.54 87 RCVD_IN_MSPIKE_BL 4081 1.10 3.40 0.42 88 T_TooManySym_01 4076 4.83 3.39 5.25 89 TR_XM_MSPIKECOMBO 4047 1.09 3.37 0.41 90 URIBL_DBL_SPAM 4019 0.77 3.34 0.01 91 TR_XM_SpammyWords5 4015 1.78 3.34 1.31 92 T_XMDrugObfuBody_14 3973 2.68 3.31 2.50 93 JH_SPAMMY_HEADERS 3936 0.75 3.28 0.00 94 HTML_MIME_NO_HTML_TAG 3729 2.62 3.10 2.48 95 RCVD_IN_IADB_LISTED 3585 4.95 2.98 5.53 96 TR_XM_NoHeaderRelay 3411 0.79 2.84 0.18 97 XM_DIRTYINTL 3293 0.88 2.74 0.33 98 TM2_M_VERY_LONG_WORD 3129 1.43 2.60 1.08 99 RCVD_IN_IADB_SPF 3121 4.43 2.60 4.98 100 ALL_TRUSTED 3101 13.72 2.58 17.03 101 XMDiploma_00 3044 1.59 2.53 1.31 102 XMBody_17 3022 0.93 2.51 0.45 103 XM_B_COVIDMETA 3007 1.01 2.50 0.57 104 T_XMHurry_00 2991 0.92 2.49 0.45 105 BAYES_40 2980 4.60 2.48 5.23 106 XM_GoogleGroups 2976 1.73 2.48 1.50 107 RCVD_IN_RP_RNBL 2910 0.57 2.42 0.02 108 RCVD_IN_IADB_DK 2897 4.02 2.41 4.49 109 XM_CamelCaseFrm001 2866 1.84 2.39 1.67 110 RCVD_IN_IADB_SENDERID 2859 4.09 2.38 4.59 111 XM_DK_Undo_01 2851 1.73 2.37 1.54 112 KHOP_HELO_FCRDNS 2845 1.78 2.37 1.61 113 TR_XM_SB_Phish 2831 3.16 2.36 3.40 114 HTML_IMAGE_ONLY_20 2814 1.48 2.34 1.22 115 XM_B_SpammyWords4 2800 1.04 2.33 0.65 116 MAILING_LIST_MULTI 2792 2.68 2.32 2.78 117 XMSubPhish11 2770 3.10 2.31 3.33 118 T_REMOTE_IMAGE 2746 3.17 2.29 3.43 119 T_FILL_THIS_FORM_SHORT 2653 1.20 2.21 0.91 120 XM_B_Unsub2 2632 1.67 2.19 1.52 121 RCVD_IN_PSBL 2566 0.56 2.14 0.09 122 TR_XM_SpammyWords3 2549 0.65 2.12 0.22 123 XM_URI_RBL 2549 0.58 2.12 0.12 124 XMSexyCombo_01 2548 1.32 2.12 1.09 125 TR_LOTS_OF_MONEY3 2495 0.74 2.08 0.34 126 RELAYCOUNTRY_IN 2462 0.54 2.05 0.10 127 RCVD_IN_VALIDITY_RPBL 2460 0.48 2.05 0.02 128 SUBJ_ALL_CAPS 2454 1.66 2.04 1.55 129 RCVD_IN_MSPIKE_L3 2316 0.67 1.93 0.30 130 FROM_EXCESS_BASE64 2288 2.33 1.90 2.46 131 TR_XM_PHPDW 2286 0.67 1.90 0.31 132 TR_XM_COVIDMETA4 2280 0.68 1.90 0.32 133 TR_XM_PHPForged 2226 0.64 1.85 0.28 134 URI_HEX 2199 1.33 1.83 1.18 135 HTML_TITLE_SUBJ_DIFF 2197 0.71 1.83 0.37 136 TR_XM_FormFill2 2181 0.63 1.82 0.27 137 XM_H_PHPOS 2172 0.62 1.81 0.27 138 HTML_SHORT_LINK_IMG_3 2137 0.72 1.78 0.41 139 URIBL_BLACK 2115 0.44 1.76 0.05 140 ALIBABA_IMG_NOT_RCVD_ALI 2102 0.40 1.75 0.00 141 RCVD_IN_RP_SAFE 2082 5.20 1.73 6.22 142 HOSTED_IMG_DIRECT_MX 2080 0.40 1.73 0.00 143 BAYES_20 2062 3.35 1.72 3.83 144 TR_XM_COVIDMETA1 2006 0.61 1.67 0.29 145 RCVD_IN_IADB_VOUCHED 1992 2.60 1.66 2.87 146 T_XMDrugObfuBody_00 1979 0.81 1.65 0.56 147 BOTNET_NORDNS 1974 0.39 1.64 0.02 148 RELAYCOUNTRY_AU 1924 0.69 1.60 0.42 149 TR_XM_INV_DKIM 1864 0.50 1.55 0.19 150 RELAYCOUNTRY_FR 1816 0.49 1.51 0.19 151 XMStockSpam_06 1780 1.04 1.48 0.91 152 PDS_OTHER_BAD_TLD 1776 0.55 1.48 0.28 153 DATE_IN_PAST_03_06 1750 0.55 1.46 0.28 154 YOUR_DELIVERY_ADDRESS 1745 0.33 1.45 0.00 155 WANT_TO_ORDER 1745 0.33 1.45 0.00 156 XM_UB99 1679 0.32 1.40 0.00 157 XM_Body_Dirty_Words_01 1598 0.42 1.33 0.15 158 BAYES_00 1596 10.67 1.33 13.44 159 URI_TRY_3LD 1586 0.79 1.32 0.63 160 XMHTML_After_End 1569 0.86 1.31 0.72 161 TR_Symld_Words 1546 1.48 1.29 1.54 162 URI_LONG_REPEAT 1544 0.29 1.28 0.00 163 XMBrknScrpt_02 1513 0.84 1.26 0.72 164 XMSubMetaI_00 1509 0.72 1.26 0.56 165 TM2_M_A_HREF_HREF 1505 0.51 1.25 0.29 166 XM_OfRef7 1499 0.36 1.25 0.09 167 XMGenDplmaNmb 1485 0.81 1.24 0.69 168 DATE_IN_PAST_06_12 1481 0.34 1.23 0.07 169 TR_MetaPhish_Combo_01 1481 0.96 1.23 0.88 170 HTTPS_HTTP_MISMATCH 1472 0.85 1.23 0.74 171 TR_XM_FormFill 1451 0.28 1.21 0.01 172 XM_UB60 1399 0.33 1.16 0.08 173 MONEY_NOHTML 1384 0.33 1.15 0.08 174 USER_IN_DEF_DKIM_WL 1371 8.48 1.14 10.65 175 XMPhish30 1368 0.74 1.14 0.62 176 RELAYCOUNTRY_GB 1361 0.89 1.13 0.82 177 XM_UB999 1346 0.26 1.12 0.00 178 RCVD_IN_RP_CERTIFIED 1344 4.46 1.12 5.45 179 XM_B_SEO 1336 0.39 1.11 0.17 180 XM_PDF 1282 3.94 1.07 4.79 181 T_Symld_Words_02 1268 0.52 1.06 0.36 182 TR_BOTNET_NEGATE 1254 0.42 1.04 0.24 183 RELAYCOUNTRY_PL 1250 0.26 1.04 0.03 184 XMWhlSbjSex 1239 0.33 1.03 0.13 185 TR_XM_SEO4 1236 0.31 1.03 0.10 186 DKIM_ADSP_CUSTOM_MED 1235 0.98 1.03 0.97 187 XM_H_Long_From02 1229 1.11 1.02 1.13 188 RCVD_IN_MSPIKE_L5 1189 0.24 0.99 0.02 189 RELAYCOUNTRY_NL 1167 0.38 0.97 0.21 190 XM_H_PHPMailer 1151 0.60 0.96 0.49 191 RELAYCOUNTRY_CN 1145 0.28 0.95 0.09 192 XM_H_Undi_Recip 1135 0.32 0.94 0.13 193 RDNS_DYNAMIC 1133 0.56 0.94 0.44 194 BAYES_05 1107 2.08 0.92 2.43 195 TR_XM_BayesRelay 1106 0.22 0.92 0.01 196 RCVD_IN_IADB_OPTIN 1099 1.57 0.91 1.76 197 RCVD_IN_VALIDITY_SAFE 1088 4.32 0.91 5.33 198 FORGED_GMAIL_RCVD 1067 0.62 0.89 0.53 199 XMMoneyMeta_00 1035 0.57 0.86 0.48 200 NML_ADSP_CUSTOM_MED 1019 0.69 0.85 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 358298 89.92 94.69 88.50 2 RELAYCOUNTRY_US 325975 80.08 78.62 80.52 3 XM_B_Unicode 289188 73.07 78.57 71.43 4 DKIM_SIGNED 277769 72.56 85.86 68.61 5 XM_DK_Pass 271977 70.71 82.63 67.18 6 DKIM_VALID 263997 68.60 80.02 65.21 7 DCC_CHECK_NEGATIVE 250529 53.10 23.50 61.88 8 BAYES_50 212163 51.43 48.14 52.40 9 DKIM_VALID_AU 196713 50.70 57.79 48.59 10 XMListUnsubscribeExists 181728 50.51 69.46 44.89 11 XM_B_SpammyWords 177234 49.79 70.05 43.78 12 XM_B_Unicode3 175853 43.97 45.77 43.44 13 DCC_CHECK 154131 46.86 76.47 38.07 14 T_TM2_M_HEADER_IN_MSG 114100 27.33 24.44 28.18 15 RCVD_IN_MSPIKE_WL 108438 25.53 21.32 26.78 16 HTML_FONT_LOW_CONTRAST 103276 27.05 32.23 25.51 17 DKIM_VALID_EF 97883 25.79 31.24 24.18 18 MIME_HTML_ONLY 88438 23.14 27.51 21.84 19 FVGT_m_MULTI_ODD 87224 23.29 29.19 21.54 20 LOC_TINY_FONT_1 86876 24.67 35.48 21.46 21 XMSubLong 84055 21.85 25.53 20.76 22 RCVD_IN_MSPIKE_H2 80490 21.71 27.86 19.88 23 XM_B_SpammyWords2 75779 23.30 38.73 18.72 24 T_KAM_HTML_FONT_INVALID 74110 21.10 30.52 18.31 25 ALL_TRUSTED 68936 13.72 2.58 17.03 26 RCVD_IN_MSPIKE_H3 56458 13.73 13.00 13.95 27 BAYES_00 54413 10.67 1.33 13.44 28 XM_B_Unsub 49356 12.56 13.82 12.19 29 RCVD_IN_MSPIKE_H4 45078 10.39 7.89 11.13 30 XM_Body_Dirty_Words 44493 13.30 21.10 10.99 31 XM_Multi_Part_URI 44008 12.17 16.55 10.87 32 USER_IN_DEF_DKIM_WL 43129 8.48 1.14 10.65 33 LotsOfNums_01 38781 9.11 7.52 9.58 34 TooManyTo_001 36032 8.31 6.33 8.90 35 BAYES_99 34937 12.92 27.40 8.63 36 FSL_BULK_SIG 32338 9.24 13.48 7.99 37 BAYES_60 31954 7.66 6.88 7.89 38 XM_H_Trusted_IP 31587 6.02 0.00 7.80 39 BAYES_999 31038 10.72 21.03 7.67 40 UNPARSEABLE_RELAY 29997 8.52 12.26 7.41 41 MIME_QP_LONG_LINE 29499 6.79 5.12 7.29 42 MPART_ALT_DIFF 29301 7.89 10.08 7.24 43 XM_Evil_Numbers_Gen 29019 7.64 9.25 7.17 44 TR_XM_DK_Bayes 28686 5.64 0.75 7.09 45 TR_XM_DK_Bayes1 27653 5.43 0.73 6.83 46 XM_DKIMWhitelistDomains 27561 5.27 0.08 6.81 47 XM_SendGrid 27264 7.54 10.26 6.73 48 XM_DK_Undo_02 26242 14.39 41.05 6.48 49 LOTS_OF_MONEY 25976 8.08 13.68 6.42 50 IN_ZIMBRA_NJ_WHITELIST 25855 4.94 0.08 6.39 51 HTML_IMAGE_RATIO_04 25321 5.96 4.96 6.25 52 RCVD_IN_RP_SAFE 25194 5.20 1.73 6.22 53 TM2_M_URI_OPT_OUT 24762 5.81 4.79 6.12 54 TR_XM_DK_Bayes2 23491 4.60 0.56 5.80 55 TR_XM_UnparsRelay 23486 7.20 11.91 5.80 56 MIME_HTML_ONLY_MULTI 22420 5.05 3.42 5.54 57 RCVD_IN_IADB_LISTED 22388 4.95 2.98 5.53 58 RCVD_IN_RP_CERTIFIED 22062 4.46 1.12 5.45 59 RCVD_IN_VALIDITY_SAFE 21581 4.32 0.91 5.33 60 HTML_IMAGE_RATIO_02 21464 6.10 8.79 5.30 61 T_TooManySym_01 21260 4.83 3.39 5.25 62 BAYES_40 21181 4.60 2.48 5.23 63 XM_B_SpammyWords3 20595 6.90 12.99 5.09 64 XM_H_Long_From01 20306 5.17 5.69 5.02 65 RCVD_IN_IADB_SPF 20161 4.43 2.60 4.98 66 TR_XM_DKIM_Undo 19593 11.13 32.31 4.84 67 XM_PDF 19389 3.94 1.07 4.79 68 RCVD_IN_VALIDITY_CERTIFIED 18854 3.70 0.48 4.66 69 RCVD_IN_IADB_SENDERID 18597 4.09 2.38 4.59 70 RCVD_IN_IADB_DK 18192 4.02 2.41 4.49 71 ANY_BOUNCE_MESSAGE 17999 3.60 0.75 4.45 72 BOUNCE_MESSAGE 17996 3.60 0.74 4.45 73 TR_XM_DK_SendGrid 16453 4.36 5.38 4.06 74 BOTNET_IPINHOSTNAME 16109 6.33 14.24 3.98 75 XMSubNoVowel 15613 3.13 0.69 3.86 76 BAYES_20 15512 3.35 1.72 3.83 77 TR_XM_SpammyWords4 15509 5.61 11.62 3.83 78 BAYES_80 15380 4.60 7.28 3.80 79 XMStrtUSub 15328 3.72 3.49 3.79 80 RELAYCOUNTRY_META 14862 7.65 21.05 3.67 81 HTML_IMAGE_RATIO_06 14411 3.59 3.71 3.56 82 XMSubMetaSx_00 14305 4.36 7.15 3.53 83 XM_B_Phish_Phrases 13912 4.10 6.33 3.44 84 T_REMOTE_IMAGE 13905 3.17 2.29 3.43 85 TR_XM_SB_Phish 13773 3.16 2.36 3.40 86 DKIM_INVALID 13772 3.96 5.84 3.40 87 TR_XM_PhishingBody 13747 4.53 8.34 3.40 88 XMSubPhish11 13500 3.10 2.31 3.33 89 XM_UncommonTLD01 12698 4.86 10.65 3.14 90 XMSexyCombo_05 12596 4.73 10.17 3.11 91 XMNumbers 12145 3.12 3.52 3.00 92 T_TooManySym_02 11992 2.45 0.74 2.96 93 RCVD_IN_IADB_VOUCHED 11633 2.60 1.66 2.87 94 MAILING_LIST_MULTI 11267 2.68 2.32 2.78 95 URI_NOVOWEL 10273 3.32 5.97 2.54 96 TVD_SPACE_RATIO_MINFP 10221 1.98 0.13 2.52 97 T_XMDrugObfuBody_14 10117 2.68 3.31 2.50 98 HTML_MIME_NO_HTML_TAG 10050 2.62 3.10 2.48 99 FROM_EXCESS_BASE64 9945 2.33 1.90 2.46 100 BAYES_05 9839 2.08 0.92 2.43 101 TR_DCC_Bayes_99 9818 6.55 20.45 2.43 102 BAYES_95 9468 2.68 3.85 2.34 103 MIME_HTML_MOSTLY 9233 3.67 8.34 2.28 104 HTML_IMAGE_RATIO_08 8972 2.52 3.54 2.22 105 TooManyTo_002 8965 1.88 0.74 2.21 106 XM_B_Phish66 8029 2.86 5.83 1.98 107 XM_B_SpammyTLD 7889 2.40 3.91 1.95 108 XM_B_Investor 7410 2.43 4.46 1.83 109 XM_SPF_SoftFail 7410 2.53 4.90 1.83 110 RCVD_IN_IADB_OPTIN 7138 1.57 0.91 1.76 111 HELO_NODOT 7005 1.48 0.65 1.73 112 HELO_NO_DOMAIN 7004 1.48 0.65 1.73 113 RCVD_IN_MSPIKE_H5 6902 1.42 0.44 1.70 114 IN_HORDE_ADDRESS_BOOK 6831 1.32 0.10 1.69 115 INVALID_MSGID 6796 1.34 0.19 1.68 116 XM_CamelCaseFrm001 6778 1.84 2.39 1.67 117 T_XMDrugObfuBody_08 6534 2.10 3.72 1.61 118 TR_XM_SpammyRelay 6525 4.47 14.11 1.61 119 KHOP_HELO_FCRDNS 6517 1.78 2.37 1.61 120 SUBJ_ALL_CAPS 6273 1.66 2.04 1.55 121 BOTNET 6272 4.63 15.02 1.55 122 MSGID_NOFQDN1 6250 1.20 0.06 1.54 123 XM_DK_Undo_01 6248 1.73 2.37 1.54 124 TR_Symld_Words 6243 1.48 1.29 1.54 125 XM_B_Unsub2 6145 1.67 2.19 1.52 126 XM_GoogleGroups 6092 1.73 2.48 1.50 127 TO_MALFORMED 6034 1.15 0.01 1.49 128 TooManyTo_003 6030 1.28 0.56 1.49 129 TVD_RCVD_IP 5549 1.12 0.29 1.37 130 TR_XM_SpammyWords5 5311 1.78 3.34 1.31 131 XMDiploma_00 5292 1.59 2.53 1.31 132 XMCapTrack 5009 1.07 0.52 1.24 133 UNTRUSTED_Relay 4983 3.84 12.64 1.23 134 HTML_IMAGE_ONLY_20 4957 1.48 2.34 1.22 135 HTML_FONT_FACE_BAD 4948 1.12 0.77 1.22 136 XMGappySubj_01 4777 0.95 0.19 1.18 137 URI_HEX 4762 1.33 1.83 1.18 138 XM_OfRef6 4699 1.81 3.98 1.16 139 XM_H_Long_From02 4588 1.11 1.02 1.13 140 XMSexyCombo_01 4398 1.32 2.12 1.09 141 TM2_M_VERY_LONG_WORD 4391 1.43 2.60 1.08 142 TooManyTo_004 4360 0.93 0.44 1.08 143 DKIM_ADSP_CUSTOM_MED 3925 0.98 1.03 0.97 144 TVD_SPACE_RATIO 3800 0.75 0.11 0.94 145 XMBSHREFv2 3702 0.77 0.30 0.91 146 XMStockSpam_06 3679 1.04 1.48 0.91 147 T_FILL_THIS_FORM_SHORT 3666 1.20 2.21 0.91 148 SHORT_URI_2 3663 0.85 0.68 0.90 149 TR_MetaPhish_Combo_01 3576 0.96 1.23 0.88 150 TooManyTo_005 3521 0.76 0.38 0.87 151 TR_XM_MaxUnsub 3501 1.61 4.11 0.86 152 TR_XM_SpammyWords2 3426 2.89 9.76 0.85 153 RELAYCOUNTRY_GB 3301 0.89 1.13 0.82 154 RCVD_IN_BL_SPAMCOP_NET 3250 3.11 10.89 0.80 155 RELAYCOUNTRY_CA 3212 1.79 5.13 0.79 156 XM_UB50 3053 2.35 7.73 0.75 157 HTTPS_HTTP_MISMATCH 3005 0.85 1.23 0.74 158 T_TooManySym_03 2986 0.64 0.31 0.74 159 XMHTML_After_End 2927 0.86 1.31 0.72 160 XMBrknScrpt_02 2915 0.84 1.26 0.72 161 XMNoVowels 2850 0.66 0.53 0.70 162 XMLngstWrd_00 2824 0.65 0.47 0.70 163 XMGenDplmaNmb 2781 0.81 1.24 0.69 164 SpammyFromTLD_01 2778 1.61 4.72 0.69 165 XMBody_95 2729 0.57 0.21 0.67 166 XM_ProductURIs 2668 0.68 0.75 0.66 167 XM_B_SpammyWords4 2645 1.04 2.33 0.65 168 NML_ADSP_CUSTOM_MED 2622 0.69 0.85 0.65 169 URI_TRY_3LD 2560 0.79 1.32 0.63 170 XMBdyGiftCard01 2534 0.62 0.58 0.63 171 XMPhish30 2499 0.74 1.14 0.62 172 T_OBFU_PDF_ATTACH 2480 0.51 0.17 0.61 173 XM_ShortIntro_01 2386 0.56 0.46 0.59 174 XM_B_COPY_HTML 2343 0.60 0.67 0.58 175 FROM_GOV_DKIM_AU 2334 0.52 0.33 0.58 176 HTML_TAG_BALANCE_BODY 2301 0.61 0.73 0.57 177 XM_B_COVIDMETA 2299 1.01 2.50 0.57 178 XMSubMetaI_00 2277 0.72 1.26 0.56 179 T_XMDrugObfuBody_00 2275 0.81 1.65 0.56 180 XMLngstWrd_01 2220 0.51 0.40 0.55 181 FORGED_GMAIL_RCVD 2165 0.62 0.89 0.53 182 TR_MSPIKEBAYES00 2140 0.41 0.01 0.53 183 SHORT_HELO_AND_INLINE_IMAGE 2117 0.43 0.11 0.52 184 XM_E_Blogspot 2090 0.44 0.20 0.52 185 RCVD_IN_SORBS_DUL 2039 0.45 0.27 0.50 186 XMHTMLBadTable_001 2028 0.50 0.48 0.50 187 XM_H_PHPMailer 1974 0.60 0.96 0.49 188 XMMoneyMeta_00 1940 0.57 0.86 0.48 189 FROM_GOV_SPOOF 1894 0.39 0.13 0.47 190 XM_B_DNDMA 1885 0.53 0.74 0.47 191 XMBody_17 1836 0.93 2.51 0.45 192 T_XMHurry_00 1829 0.92 2.49 0.45 193 XMLngstWrd_02 1788 0.41 0.30 0.44 194 RDNS_DYNAMIC 1782 0.56 0.94 0.44 195 TM2_M_BODY_EMPTY 1746 0.36 0.13 0.43 196 HTML_IMAGE_ONLY_28 1740 0.46 0.57 0.43 197 XM_B_REG_HTML 1739 0.38 0.22 0.43 198 HTML_IMAGE_ONLY_32 1720 0.40 0.33 0.42 199 RELAYCOUNTRY_AU 1692 0.69 1.60 0.42 200 RCVD_IN_MSPIKE_BL 1684 1.10 3.40 0.42 ----------------------------------------------------------------------