Email: 537421 Autolearn: 0 AvgScore: 2.23 AvgScanTime: 2.61 sec Spam: 125337 Autolearn: 0 AvgScore: 14.05 AvgScanTime: 3.00 sec Ham: 412084 Autolearn: 0 AvgScore: -1.36 AvgScanTime: 2.49 sec Time Spent Running SA: 389.59 hours Time Spent Processing Spam: 104.58 hours Time Spent Processing Ham: 285.01 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120056 86.50 95.79 83.68 2 DKIM_SIGNED 103799 70.65 82.82 66.95 3 XM_DK_Pass 99250 68.54 79.19 65.30 4 RELAYCOUNTRY_US 97392 76.78 77.70 76.50 5 DCC_CHECK 96570 45.98 77.05 36.53 6 XM_B_Unicode 96025 69.90 76.61 67.86 7 DKIM_VALID 95894 66.47 76.51 63.42 8 XMListUnsubscribeExists 86107 49.80 68.70 44.05 9 XM_B_SpammyWords 82216 46.62 65.60 40.85 10 DKIM_VALID_AU 71355 49.61 56.93 47.38 11 BAYES_50 60989 53.74 48.66 55.29 12 XM_B_Unicode3 55808 41.41 44.53 40.46 13 XM_DK_Undo_02 47282 13.38 37.72 5.97 14 XM_B_SpammyWords2 46288 21.47 36.93 16.77 15 LOC_TINY_FONT_1 43860 24.36 34.99 21.13 16 MIME_HTML_ONLY 40953 22.08 32.67 18.86 17 HTML_FONT_LOW_CONTRAST 39922 25.93 31.85 24.13 18 TR_XM_DKIM_Undo 37733 10.50 30.11 4.54 19 T_KAM_HTML_FONT_INVALID 37718 20.55 30.09 17.64 20 FVGT_m_MULTI_ODD 37485 23.87 29.91 22.03 21 DKIM_VALID_EF 35566 25.36 28.38 24.45 22 XMSubLong 31414 21.58 25.06 20.52 23 BAYES_99 31370 12.03 25.03 8.08 24 DCC_CHECK_NEGATIVE 28721 53.97 22.92 63.41 25 RCVD_IN_MSPIKE_H2 28146 19.79 22.46 18.98 26 RELAYCOUNTRY_META 27211 7.76 21.71 3.52 27 T_TM2_M_HEADER_IN_MSG 26661 26.41 21.27 27.97 28 RCVD_IN_MSPIKE_WL 26128 24.41 20.85 25.50 29 XM_Body_Dirty_Words 24622 12.54 19.64 10.37 30 TR_DCC_Bayes_99 23956 6.02 19.11 2.04 31 BAYES_999 23944 9.93 19.10 7.14 32 FSL_BULK_SIG 21072 9.01 16.81 6.64 33 BOTNET 20826 4.97 16.62 1.43 34 XM_Multi_Part_URI 20614 11.98 16.45 10.63 35 UNTRUSTED_Relay 18740 4.42 14.95 1.21 36 BOTNET_IPINHOSTNAME 18222 6.40 14.54 3.93 37 XM_UncommonTLD01 17418 5.57 13.90 3.04 38 RCVD_IN_MSPIKE_H3 16855 13.69 13.45 13.76 39 XM_B_SpammyWords3 16163 5.76 12.90 3.59 40 XM_B_Unsub 15894 10.65 12.68 10.04 41 LOTS_OF_MONEY 15222 7.79 12.14 6.47 42 TR_XM_SpammyRelay 14869 3.84 11.86 1.40 43 UNPARSEABLE_RELAY 14691 8.47 11.72 7.48 44 TR_XM_UnparsRelay 14200 7.03 11.33 5.73 45 MPART_ALT_DIFF 13234 6.73 10.56 5.56 46 HTML_IMAGE_RATIO_02 12791 6.43 10.21 5.28 47 TR_XM_SpammyWords4 12780 5.31 10.20 3.83 48 XMSexyCombo_05 12687 4.45 10.12 2.72 49 XM_Evil_Numbers_Gen 11627 7.62 9.28 7.12 50 TR_XM_SpammyWords2 11127 2.77 8.88 0.91 51 XM_SendGrid 11100 7.25 8.86 6.76 52 TR_XM_PhishingBody 10711 4.49 8.55 3.25 53 XM_UB50 10579 2.58 8.44 0.79 54 RCVD_IN_BL_SPAMCOP_NET 10447 2.44 8.34 0.65 55 LotsOfNums_01 9807 8.13 7.82 8.22 56 XMSubMetaSx_00 9579 4.59 7.64 3.67 57 BAYES_80 9376 4.71 7.48 3.87 58 BAYES_60 8872 7.56 7.08 7.70 59 HTML_MIME_NO_HTML_TAG 8855 3.34 7.06 2.20 60 RCVD_IN_MSPIKE_H4 8698 9.27 6.94 9.98 61 SpammyFromTLD_02 8079 1.81 6.45 0.40 62 XM_B_Phish_Phrases 7908 3.99 6.31 3.28 63 DKIM_INVALID 7905 4.18 6.31 3.53 64 RCVD_IN_MSPIKE_BL 7850 2.04 6.26 0.75 65 TR_XM_MSPIKECOMBO 7843 2.03 6.26 0.75 66 XM_H_Long_From01 7745 4.96 6.18 4.59 67 MIME_HTML_ONLY_MULTI 7485 4.10 5.97 3.52 68 TooManyTo_001 7408 7.87 5.91 8.46 69 MIME_HTML_MOSTLY 6963 3.15 5.56 2.42 70 T_REMOTE_IMAGE 6912 3.91 5.51 3.43 71 XM_B_Phish66 6742 2.58 5.38 1.73 72 XMStrtUSub 6318 4.17 5.04 3.91 73 TR_XM_SPAMCOP 6309 1.38 5.03 0.27 74 TM2_M_VERY_LONG_WORD 6222 2.12 4.96 1.26 75 TR_XM_DK_SendGrid 6104 4.37 4.87 4.22 76 HTML_IMAGE_RATIO_04 5857 5.04 4.67 5.15 77 XM_SPF_SoftFail 5717 2.57 4.56 1.96 78 RELAYCOUNTRY_CA 5511 1.63 4.40 0.79 79 MIME_QP_LONG_LINE 5489 5.52 4.38 5.87 80 KHOP_HELO_FCRDNS 5466 2.23 4.36 1.58 81 XMNumbers 5433 3.58 4.33 3.35 82 SpammyFromTLD_01 5432 1.54 4.33 0.69 83 XM_B_Investor 5364 2.15 4.28 1.51 84 BAYES_95 5362 2.73 4.28 2.26 85 URI_NOVOWEL 5233 3.15 4.18 2.84 86 TM2_M_URI_OPT_OUT 5005 3.58 3.99 3.45 87 XM_B_SpammyTLD 4890 2.37 3.90 1.90 88 HTML_IMAGE_RATIO_06 4623 4.10 3.69 4.22 89 URIBL_DBL_SPAM 4580 0.86 3.65 0.01 90 TR_XM_SpammyWords5 4428 2.03 3.53 1.57 91 RCVD_IN_MSPIKE_L5 4316 0.95 3.44 0.19 92 TR_XM_MaxUnsub 4308 1.34 3.44 0.70 93 XM_OfRef6 4300 1.52 3.43 0.93 94 HTML_IMAGE_ONLY_08 4226 0.88 3.37 0.12 95 T_XMDrugObfuBody_08 3946 2.08 3.15 1.76 96 XM_GoogleGroups 3735 1.81 2.98 1.45 97 RCVD_IN_IADB_LISTED 3595 4.55 2.87 5.06 98 XM_CamelCaseFrm001 3536 1.93 2.82 1.66 99 GOOG_STO_IMG_HTML 3530 0.66 2.82 0.00 100 XMDiploma_00 3526 1.91 2.81 1.64 101 XM_DIRTYINTL 3455 0.87 2.76 0.30 102 T_FILL_THIS_FORM_SHORT 3338 1.28 2.66 0.85 103 XMLngstWrd_00 3317 1.36 2.65 0.97 104 HTML_TITLE_SUBJ_DIFF 3270 0.79 2.61 0.24 105 XMLngstWrd_01 3228 1.22 2.58 0.81 106 XM_B_Unsub2 3201 1.89 2.55 1.69 107 BODY_URI_ONLY 3197 0.61 2.55 0.01 108 HTML_IMAGE_RATIO_08 3195 2.33 2.55 2.26 109 XM_DK_Undo_01 3183 1.83 2.54 1.62 110 XM_B_COVIDMETA 3182 1.10 2.54 0.66 111 XMLngstWrd_02 3135 1.10 2.50 0.67 112 TR_XM_SpammyWords3 3132 0.84 2.50 0.33 113 BAYES_40 3117 4.28 2.49 4.83 114 T_HTML_TAG_BALANCE_CENTER 3109 0.66 2.48 0.10 115 XMLngstWrd_03 3067 0.96 2.45 0.50 116 MIXED_HREF_CASE 3048 0.57 2.43 0.00 117 MIXED_IMG_CASE 3046 0.57 2.43 0.00 118 XM_URI_RBL 3033 0.65 2.42 0.11 119 RCVD_IN_IADB_SPF 3031 3.93 2.42 4.39 120 BOTNET_NORDNS 3016 0.57 2.41 0.02 121 T_XMDrugObfuBody_14 3000 1.95 2.39 1.82 122 XMLngstWrd_04 2976 0.89 2.37 0.43 123 MIXED_FONT_CASE 2972 0.55 2.37 0.00 124 MIXED_CENTER_CASE 2966 0.55 2.37 0.00 125 MIXED_AREA_CASE 2961 0.55 2.36 0.00 126 UPPERCASE_75_100 2921 0.73 2.33 0.24 127 T_TooManySym_01 2913 4.52 2.32 5.19 128 XM_B_SpammyWords4 2896 0.84 2.31 0.40 129 ALL_TRUSTED 2874 16.75 2.29 21.15 130 RCVD_IN_PSBL 2861 0.57 2.28 0.05 131 RCVD_IN_IADB_DK 2814 3.40 2.25 3.75 132 RCVD_IN_IADB_SENDERID 2778 3.50 2.22 3.88 133 JH_SPAMMY_HEADERS 2771 0.52 2.21 0.00 134 TR_XM_SB_Phish 2760 2.00 2.20 1.93 135 TR_XM_NoHeaderRelay 2739 0.65 2.19 0.18 136 XMSubPhish11 2683 1.96 2.14 1.90 137 BAYES_20 2639 3.22 2.11 3.56 138 MAILING_LIST_MULTI 2632 2.42 2.10 2.52 139 SUBJ_ALL_CAPS 2606 1.70 2.08 1.59 140 ALIBABA_IMG_NOT_RCVD_ALI 2592 0.48 2.07 0.00 141 HOSTED_IMG_DIRECT_MX 2576 0.48 2.06 0.00 142 HTML_FONT_SIZE_HUGE 2540 0.51 2.03 0.04 143 T_XMDrugObfuBody_00 2514 1.02 2.01 0.72 144 XMSexyCombo_01 2504 0.94 2.00 0.62 145 URI_HEX 2472 1.41 1.97 1.24 146 RELAYCOUNTRY_FR 2421 0.60 1.93 0.19 147 RCVD_IN_MSPIKE_L3 2377 0.64 1.90 0.26 148 BAYES_00 2268 9.75 1.81 12.16 149 XMStockSpam_06 2252 1.08 1.80 0.86 150 DIET_1 2222 0.68 1.77 0.35 151 URIBL_BLACK 2212 0.45 1.76 0.05 152 RELAYCOUNTRY_IN 2202 0.47 1.76 0.08 153 WANT_TO_ORDER 2176 0.41 1.74 0.00 154 XMBody_17 2175 0.63 1.74 0.29 155 READY_TO_SHIP 2172 0.41 1.73 0.00 156 PDS_OTHER_BAD_TLD 2118 0.59 1.69 0.25 157 RCVD_IN_VALIDITY_SAFE 2110 4.47 1.68 5.32 158 TR_XM_PhishingBody3 2109 0.40 1.68 0.01 159 HTML_FONT_SIZE_LARGE 2087 0.46 1.67 0.10 160 RCVD_IN_IADB_VOUCHED 2086 2.85 1.66 3.21 161 XMHTML_After_End 2080 0.90 1.66 0.67 162 RELAYCOUNTRY_CH 2075 0.41 1.66 0.03 163 T_XMHurry_00 2036 0.69 1.62 0.40 164 RELAYCOUNTRY_AU 1995 0.63 1.59 0.34 165 TR_XM_PHPDW 1980 0.65 1.58 0.37 166 TR_XM_COVIDMETA4 1951 0.61 1.56 0.33 167 TR_Mismatch_TLD_02 1943 0.43 1.55 0.09 168 TR_XM_PHPForged 1919 0.61 1.53 0.33 169 XMGenDplmaNmb 1913 1.05 1.53 0.91 170 TR_XM_FormFill2 1884 0.61 1.50 0.33 171 XM_H_PHPOS 1871 0.59 1.49 0.32 172 XM_UB99 1864 0.35 1.49 0.00 173 TR_XM_FormFill 1789 0.34 1.43 0.01 174 RCVD_IN_RP_SAFE 1783 4.01 1.42 4.80 175 TR_XM_INV_DKIM 1777 0.50 1.42 0.22 176 DATE_IN_PAST_12_24 1755 0.39 1.40 0.08 177 TR_XM_COVIDMETA1 1653 0.49 1.32 0.23 178 MIXED_CTYPE_CASE 1632 0.31 1.30 0.00 179 XM_Body_Dirty_Words_01 1612 0.39 1.29 0.11 180 FROM_EXCESS_BASE64 1598 2.23 1.27 2.52 181 XMSubMetaI_00 1596 0.70 1.27 0.53 182 XM_UB60 1582 0.35 1.26 0.07 183 XMPhish14 1553 0.65 1.24 0.47 184 RELAYCOUNTRY_GB 1543 0.88 1.23 0.77 185 XMBrknScrpt_02 1539 0.82 1.23 0.69 186 TR_BOTNET_NEGATE 1534 0.49 1.22 0.27 187 XMPhish30 1491 0.84 1.19 0.73 188 XM_H_Undi_Recip 1472 0.38 1.17 0.13 189 TR_Symld_Words 1449 1.34 1.16 1.39 190 HTML_TAG_BALANCE_BODY 1425 0.66 1.14 0.51 191 HTTPS_HTTP_MISMATCH 1421 0.97 1.13 0.92 192 XM_UB999 1419 0.27 1.13 0.00 193 RCVD_IN_VALIDITY_CERTIFIED 1407 3.93 1.12 4.78 194 RCVD_IN_IADB_OPTIN 1370 1.89 1.09 2.13 195 USER_IN_DEF_DKIM_WL 1364 8.00 1.09 10.11 196 FROM_SUSPICIOUS_NTLD 1356 0.28 1.08 0.04 197 RELAYCOUNTRY_DE 1354 0.49 1.08 0.30 198 BAYES_05 1342 1.98 1.07 2.25 199 XMSlimDrugH 1326 0.48 1.06 0.30 200 URI_TRY_3LD 1323 0.66 1.06 0.54 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 344838 86.50 95.79 83.68 2 RELAYCOUNTRY_US 315233 76.78 77.70 76.50 3 XM_B_Unicode 279658 69.90 76.61 67.86 4 DKIM_SIGNED 275884 70.65 82.82 66.95 5 XM_DK_Pass 269085 68.54 79.19 65.30 6 DKIM_VALID 261345 66.47 76.51 63.42 7 DCC_CHECK_NEGATIVE 261323 53.97 22.92 63.41 8 BAYES_50 227824 53.74 48.66 55.29 9 DKIM_VALID_AU 195257 49.61 56.93 47.38 10 XMListUnsubscribeExists 181517 49.80 68.70 44.05 11 XM_B_SpammyWords 168321 46.62 65.60 40.85 12 XM_B_Unicode3 166728 41.41 44.53 40.46 13 DCC_CHECK 150553 45.98 77.05 36.53 14 T_TM2_M_HEADER_IN_MSG 115262 26.41 21.27 27.97 15 RCVD_IN_MSPIKE_WL 105064 24.41 20.85 25.50 16 DKIM_VALID_EF 100747 25.36 28.38 24.45 17 HTML_FONT_LOW_CONTRAST 99444 25.93 31.85 24.13 18 FVGT_m_MULTI_ODD 90774 23.87 29.91 22.03 19 ALL_TRUSTED 87146 16.75 2.29 21.15 20 LOC_TINY_FONT_1 87076 24.36 34.99 21.13 21 XMSubLong 84551 21.58 25.06 20.52 22 RCVD_IN_MSPIKE_H2 78206 19.79 22.46 18.98 23 MIME_HTML_ONLY 77735 22.08 32.67 18.86 24 T_KAM_HTML_FONT_INVALID 72710 20.55 30.09 17.64 25 XM_B_SpammyWords2 69118 21.47 36.93 16.77 26 RCVD_IN_MSPIKE_H3 56723 13.69 13.45 13.76 27 BAYES_00 50105 9.75 1.81 12.16 28 XM_Multi_Part_URI 43791 11.98 16.45 10.63 29 XM_Body_Dirty_Words 42752 12.54 19.64 10.37 30 USER_IN_DEF_DKIM_WL 41656 8.00 1.09 10.11 31 XM_B_Unsub 41360 10.65 12.68 10.04 32 RCVD_IN_MSPIKE_H4 41132 9.27 6.94 9.98 33 TooManyTo_001 34877 7.87 5.91 8.46 34 LotsOfNums_01 33873 8.13 7.82 8.22 35 BAYES_99 33299 12.03 25.03 8.08 36 BAYES_60 31742 7.56 7.08 7.70 37 UNPARSEABLE_RELAY 30834 8.47 11.72 7.48 38 BAYES_999 29411 9.93 19.10 7.14 39 XM_Evil_Numbers_Gen 29325 7.62 9.28 7.12 40 TR_XM_DK_Bayes 28299 5.46 0.82 6.87 41 XM_SendGrid 27877 7.25 8.86 6.76 42 XM_DKIMWhitelistDomains 27819 5.18 0.03 6.75 43 TR_XM_DK_Bayes1 27490 5.30 0.79 6.67 44 FSL_BULK_SIG 27360 9.01 16.81 6.64 45 LOTS_OF_MONEY 26662 7.79 12.14 6.47 46 IN_ZIMBRA_NJ_WHITELIST 24882 4.65 0.10 6.04 47 XM_DK_Undo_02 24614 13.38 37.72 5.97 48 MIME_QP_LONG_LINE 24185 5.52 4.38 5.87 49 TR_XM_UnparsRelay 23595 7.03 11.33 5.73 50 TR_XM_DK_Bayes2 23372 4.49 0.61 5.67 51 XM_H_Trusted_IP 23051 4.29 0.00 5.59 52 MPART_ALT_DIFF 22914 6.73 10.56 5.56 53 RCVD_IN_VALIDITY_SAFE 21936 4.47 1.68 5.32 54 HTML_IMAGE_RATIO_02 21752 6.43 10.21 5.28 55 T_TooManySym_01 21368 4.52 2.32 5.19 56 HTML_IMAGE_RATIO_04 21221 5.04 4.67 5.15 57 RCVD_IN_IADB_LISTED 20858 4.55 2.87 5.06 58 BAYES_40 19904 4.28 2.49 4.83 59 RCVD_IN_RP_SAFE 19769 4.01 1.42 4.80 60 RCVD_IN_VALIDITY_CERTIFIED 19689 3.93 1.12 4.78 61 TM2_M_BODY_EMPTY 19382 3.64 0.15 4.70 62 XM_PDF 19094 3.78 0.99 4.63 63 XM_H_Long_From01 18917 4.96 6.18 4.59 64 TR_XM_DKIM_Undo 18690 10.50 30.11 4.54 65 XMEmptyBody_01 18116 3.39 0.10 4.40 66 RCVD_IN_IADB_SPF 18083 3.93 2.42 4.39 67 ANY_BOUNCE_MESSAGE 18072 3.51 0.64 4.39 68 BOUNCE_MESSAGE 18070 3.51 0.64 4.39 69 RCVD_IN_RP_CERTIFIED 17790 3.51 0.86 4.32 70 HTML_IMAGE_RATIO_06 17403 4.10 3.69 4.22 71 TR_XM_DK_SendGrid 17389 4.37 4.87 4.22 72 BOTNET_IPINHOSTNAME 16198 6.40 14.54 3.93 73 XMStrtUSub 16101 4.17 5.04 3.91 74 RCVD_IN_IADB_SENDERID 16007 3.50 2.22 3.88 75 BAYES_80 15959 4.71 7.48 3.87 76 TR_XM_SpammyWords4 15778 5.31 10.20 3.83 77 RCVD_IN_IADB_DK 15438 3.40 2.25 3.75 78 XMSubMetaSx_00 15104 4.59 7.64 3.67 79 XM_B_SpammyWords3 14776 5.76 12.90 3.59 80 BAYES_20 14658 3.22 2.11 3.56 81 DKIM_INVALID 14539 4.18 6.31 3.53 82 MIME_HTML_ONLY_MULTI 14523 4.10 5.97 3.52 83 RELAYCOUNTRY_META 14514 7.76 21.71 3.52 84 TM2_M_URI_OPT_OUT 14227 3.58 3.99 3.45 85 T_REMOTE_IMAGE 14116 3.91 5.51 3.43 86 XMNumbers 13800 3.58 4.33 3.35 87 XMSubNoVowel 13678 2.79 1.05 3.32 88 XM_B_Phish_Phrases 13515 3.99 6.31 3.28 89 TR_XM_PhishingBody 13397 4.49 8.55 3.25 90 RCVD_IN_IADB_VOUCHED 13233 2.85 1.66 3.21 91 XM_UncommonTLD01 12513 5.57 13.90 3.04 92 URI_NOVOWEL 11692 3.15 4.18 2.84 93 T_TooManySym_02 11636 2.36 0.83 2.82 94 XMSexyCombo_05 11213 4.45 10.12 2.72 95 MAILING_LIST_MULTI 10388 2.42 2.10 2.52 96 FROM_EXCESS_BASE64 10386 2.23 1.27 2.52 97 MIME_HTML_MOSTLY 9961 3.15 5.56 2.42 98 TVD_SPACE_RATIO_MINFP 9348 1.77 0.13 2.27 99 HTML_IMAGE_RATIO_08 9331 2.33 2.55 2.26 100 BAYES_95 9312 2.73 4.28 2.26 101 BAYES_05 9274 1.98 1.07 2.25 102 HTML_MIME_NO_HTML_TAG 9079 3.34 7.06 2.20 103 RCVD_IN_IADB_OPTIN 8779 1.89 1.09 2.13 104 TR_DCC_Bayes_99 8388 6.02 19.11 2.04 105 TooManyTo_002 8227 1.70 0.73 2.00 106 XM_SPF_SoftFail 8078 2.57 4.56 1.96 107 TR_XM_SB_Phish 7969 2.00 2.20 1.93 108 XMSubPhish11 7842 1.96 2.14 1.90 109 XM_B_SpammyTLD 7841 2.37 3.90 1.90 110 T_XMDrugObfuBody_14 7488 1.95 2.39 1.82 111 HELO_NODOT 7434 1.46 0.32 1.80 112 HELO_NO_DOMAIN 7431 1.46 0.32 1.80 113 T_XMDrugObfuBody_08 7239 2.08 3.15 1.76 114 RCVD_IN_MSPIKE_H5 7209 1.45 0.46 1.75 115 IN_HORDE_ADDRESS_BOOK 7147 1.36 0.15 1.73 116 XM_B_Phish66 7136 2.58 5.38 1.73 117 XM_B_Unsub2 6960 1.89 2.55 1.69 118 XM_CamelCaseFrm001 6828 1.93 2.82 1.66 119 XMDiploma_00 6761 1.91 2.81 1.64 120 INVALID_MSGID 6672 1.29 0.19 1.62 121 XM_DK_Undo_01 6659 1.83 2.54 1.62 122 SUBJ_ALL_CAPS 6552 1.70 2.08 1.59 123 KHOP_HELO_FCRDNS 6526 2.23 4.36 1.58 124 TR_XM_SpammyWords5 6460 2.03 3.53 1.57 125 XM_B_Investor 6206 2.15 4.28 1.51 126 MSGID_NOFQDN1 6135 1.15 0.05 1.49 127 TO_MALFORMED 5984 1.17 0.23 1.45 128 XM_GoogleGroups 5974 1.81 2.98 1.45 129 TVD_RCVD_IP 5913 1.13 0.14 1.43 130 BOTNET 5897 4.97 16.62 1.43 131 TR_XM_SpammyRelay 5770 3.84 11.86 1.40 132 TR_Symld_Words 5740 1.34 1.16 1.39 133 TooManyTo_003 5398 1.15 0.61 1.31 134 TM2_M_VERY_LONG_WORD 5188 2.12 4.96 1.26 135 URI_HEX 5121 1.41 1.97 1.24 136 UNTRUSTED_Relay 4992 4.42 14.95 1.21 137 XM_H_Long_From02 4973 1.15 0.95 1.21 138 XMGappySubj_01 4944 0.95 0.13 1.20 139 XMCapTrack 4536 0.94 0.42 1.10 140 XM_ProductURIs 4103 0.93 0.72 1.00 141 HTML_FONT_FACE_BAD 4073 0.92 0.70 0.99 142 TVD_SPACE_RATIO 3998 0.77 0.10 0.97 143 XMLngstWrd_00 3977 1.36 2.65 0.97 144 XM_OfRef6 3852 1.52 3.43 0.93 145 TooManyTo_004 3829 0.83 0.50 0.93 146 HTTPS_HTTP_MISMATCH 3792 0.97 1.13 0.92 147 DKIM_ADSP_CUSTOM_MED 3758 0.93 1.00 0.91 148 XMGenDplmaNmb 3751 1.05 1.53 0.91 149 TR_XM_SpammyWords2 3735 2.77 8.88 0.91 150 XMBSHREFv2 3669 0.76 0.35 0.89 151 XMStockSpam_06 3564 1.08 1.80 0.86 152 T_FILL_THIS_FORM_SHORT 3515 1.28 2.66 0.85 153 HTML_IMAGE_ONLY_20 3346 0.76 0.61 0.81 154 XMLngstWrd_01 3344 1.22 2.58 0.81 155 XM_UB50 3274 2.58 8.44 0.79 156 RELAYCOUNTRY_CA 3271 1.63 4.40 0.79 157 RELAYCOUNTRY_GB 3165 0.88 1.23 0.77 158 RCVD_IN_MSPIKE_BL 3098 2.04 6.26 0.75 159 TR_XM_MSPIKECOMBO 3073 2.03 6.26 0.75 160 TooManyTo_005 3065 0.67 0.45 0.74 161 T_TooManySym_03 3026 0.63 0.28 0.73 162 XMPhish30 2998 0.84 1.19 0.73 163 T_XMDrugObfuBody_00 2959 1.02 2.01 0.72 164 SHORT_URI_2 2954 0.68 0.54 0.72 165 TR_MetaPhish_Combo_01 2932 0.75 0.89 0.71 166 TR_XM_MaxUnsub 2904 1.34 3.44 0.70 167 XMBrknScrpt_02 2852 0.82 1.23 0.69 168 SpammyFromTLD_01 2842 1.54 4.33 0.69 169 XMBdyGiftCard01 2771 0.73 0.93 0.67 170 XMHTML_After_End 2771 0.90 1.66 0.67 171 XMLngstWrd_02 2769 1.10 2.50 0.67 172 XMBody_95 2765 0.55 0.14 0.67 173 XM_B_COVIDMETA 2703 1.10 2.54 0.66 174 RCVD_IN_BL_SPAMCOP_NET 2692 2.44 8.34 0.65 175 XMSexyCombo_01 2548 0.94 2.00 0.62 176 NML_ADSP_CUSTOM_MED 2464 0.66 0.86 0.60 177 XM_ShortIntro_01 2405 0.57 0.54 0.58 178 T_OBFU_PDF_ATTACH 2389 0.49 0.22 0.58 179 TR_MSPIKEBAYES00 2335 0.44 0.04 0.57 180 T_Symld_Words_02 2319 0.68 1.05 0.56 181 RCVD_IN_SORBS_DUL 2307 0.49 0.24 0.56 182 FROM_GOV_DKIM_AU 2225 0.47 0.25 0.54 183 URI_TRY_3LD 2221 0.66 1.06 0.54 184 XMSubMetaI_00 2187 0.70 1.27 0.53 185 HTML_TAG_BALANCE_BODY 2120 0.66 1.14 0.51 186 XMNoVowels 2079 0.50 0.49 0.50 187 FORGED_GMAIL_RCVD 2072 0.58 0.85 0.50 188 XMLngstWrd_03 2068 0.96 2.45 0.50 189 XM_H_PHPMailer 1995 0.50 0.54 0.48 190 XMMoneyMeta_00 1991 0.61 1.01 0.48 191 XM_B_COPY_HTML 1989 0.54 0.72 0.48 192 SHORT_HELO_AND_INLINE_IMAGE 1956 0.38 0.07 0.47 193 XMPhish14 1938 0.65 1.24 0.47 194 XMLngstWrd_04 1782 0.89 2.37 0.43 195 HTML_IMAGE_ONLY_28 1777 0.42 0.40 0.43 196 MSGID_FROM_MTA_HEADER 1775 0.40 0.32 0.43 197 TM2_M_A_HREF_HREF 1769 0.53 0.88 0.43 198 T_XMHurry_00 1668 0.69 1.62 0.40 199 XMHTMLBadTable_001 1666 0.46 0.63 0.40 200 FROM_GOV_SPOOF 1663 0.35 0.19 0.40 ----------------------------------------------------------------------