Email: 507797 Autolearn: 0 AvgScore: 2.85 AvgScanTime: 1.65 sec Spam: 133019 Autolearn: 0 AvgScore: 13.73 AvgScanTime: 1.81 sec Ham: 374778 Autolearn: 0 AvgScore: -1.01 AvgScanTime: 1.59 sec Time Spent Running SA: 232.45 hours Time Spent Processing Spam: 66.96 hours Time Spent Processing Ham: 165.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128037 88.82 96.25 86.19 2 DKIM_SIGNED 115109 75.90 86.54 72.12 3 XM_DK_Pass 110275 73.62 82.90 70.32 4 DKIM_VALID 106966 71.39 80.41 68.18 5 RELAYCOUNTRY_US 104245 79.35 78.37 79.69 6 DCC_CHECK 102517 49.63 77.07 39.89 7 XM_B_Unicode 100863 70.68 75.83 68.86 8 XMListUnsubscribeExists 95802 54.03 72.02 47.64 9 XM_B_SpammyWords 92768 50.63 69.74 43.84 10 DKIM_VALID_AU 82158 54.33 61.76 51.69 11 BAYES_50 61535 52.84 46.26 55.17 12 XM_B_Unicode3 55483 41.74 41.71 41.75 13 XM_DK_Undo_02 54496 15.48 40.97 6.43 14 XM_B_SpammyWords2 51285 23.89 38.55 18.68 15 LOC_TINY_FONT_1 49468 26.11 37.19 22.17 16 TR_XM_DKIM_Undo 44229 12.11 33.25 4.60 17 HTML_FONT_LOW_CONTRAST 42936 28.19 32.28 26.74 18 T_KAM_HTML_FONT_INVALID 42547 21.88 31.99 18.29 19 FVGT_m_MULTI_ODD 41910 25.39 31.51 23.22 20 DKIM_VALID_EF 39980 26.78 30.06 25.62 21 MIME_HTML_ONLY 39644 23.05 29.80 20.65 22 BAYES_99 38624 11.22 29.04 4.90 23 RCVD_IN_MSPIKE_H2 33597 21.72 25.26 20.47 24 XMSubLong 32400 22.59 24.36 21.97 25 DCC_CHECK_NEGATIVE 30449 50.33 22.89 60.06 26 TR_DCC_Bayes_99 30408 7.48 22.86 2.03 27 BAYES_999 29631 8.70 22.28 3.88 28 RELAYCOUNTRY_META 28012 8.26 21.06 3.72 29 T_TM2_M_HEADER_IN_MSG 27999 27.30 21.05 29.52 30 XM_Body_Dirty_Words 26623 13.39 20.01 11.03 31 RCVD_IN_MSPIKE_WL 26218 25.99 19.71 28.22 32 XM_Multi_Part_URI 20606 12.80 15.49 11.84 33 UNTRUSTED_Relay 19080 4.69 14.34 1.26 34 XM_UncommonTLD01 18860 6.16 14.18 3.31 35 LOTS_OF_MONEY 18525 9.51 13.93 7.94 36 TR_XM_SpammyRelay 18397 4.75 13.83 1.53 37 FSL_BULK_SIG 17694 9.11 13.30 7.63 38 XM_B_Unsub 17262 11.31 12.98 10.72 39 BOTNET_IPINHOSTNAME 17205 6.59 12.93 4.33 40 XM_B_SpammyWords3 17190 6.79 12.92 4.61 41 MPART_ALT_DIFF 16998 7.49 12.78 5.62 42 BOTNET 16799 4.47 12.63 1.57 43 RCVD_IN_MSPIKE_H3 16303 14.36 12.26 15.11 44 TR_XM_SpammyWords4 15638 6.59 11.76 4.76 45 TR_XM_SpammyWords2 15620 3.76 11.74 0.93 46 UNPARSEABLE_RELAY 15383 9.03 11.56 8.13 47 TR_XM_UnparsRelay 14804 7.64 11.13 6.41 48 XM_Evil_Numbers_Gen 13049 8.34 9.81 7.82 49 XMSexyCombo_05 11971 4.53 9.00 2.94 50 MIME_HTML_MOSTLY 11369 4.11 8.55 2.54 51 XM_SendGrid 11331 7.14 8.52 6.65 52 XM_UB50 11166 2.77 8.39 0.77 53 RCVD_IN_BL_SPAMCOP_NET 10563 2.75 7.94 0.91 54 LotsOfNums_01 9574 9.03 7.20 9.68 55 HTML_IMAGE_RATIO_02 9477 5.90 7.12 5.46 56 URI_NOVOWEL 9473 3.99 7.12 2.88 57 BAYES_80 9444 4.99 7.10 4.24 58 BAYES_60 9371 8.67 7.04 9.24 59 RCVD_IN_MSPIKE_H4 9280 9.85 6.98 10.87 60 SpammyFromTLD_02 9109 2.09 6.85 0.40 61 TR_XM_PhishingBody 9027 4.16 6.79 3.23 62 HTML_MIME_NO_HTML_TAG 8589 3.46 6.46 2.40 63 DKIM_INVALID 8143 4.51 6.12 3.93 64 MIME_HTML_ONLY_MULTI 7705 4.29 5.79 3.76 65 SpammyFromTLD_01 7683 2.06 5.78 0.74 66 XMSubMetaSx_00 7539 4.49 5.67 4.08 67 XM_H_Long_From01 7423 5.21 5.58 5.07 68 TooManyTo_001 7353 8.03 5.53 8.92 69 XM_B_Phish_Phrases 7082 3.75 5.32 3.19 70 XM_B_Investor 7043 2.61 5.29 1.66 71 TR_XM_DK_SendGrid 6996 4.31 5.26 3.97 72 RCVD_IN_MSPIKE_BL 6732 2.00 5.06 0.91 73 T_REMOTE_IMAGE 6728 3.85 5.06 3.42 74 TR_XM_MSPIKECOMBO 6704 1.99 5.04 0.90 75 RELAYCOUNTRY_CA 6288 1.94 4.73 0.95 76 TM2_M_VERY_LONG_WORD 6206 2.32 4.67 1.48 77 HTML_IMAGE_RATIO_04 6203 5.95 4.66 6.41 78 TR_XM_SPAMCOP 6196 1.46 4.66 0.32 79 TR_XM_MaxUnsub 5740 1.75 4.32 0.84 80 XMNumbers 5698 3.97 4.28 3.86 81 JH_SPAMMY_HEADERS 5528 1.09 4.16 0.00 82 T_XMDrugObfuBody_08 5504 2.35 4.14 1.72 83 XMStrtUSub 5386 3.95 4.05 3.92 84 XM_OfRef6 5356 1.83 4.03 1.05 85 XM_SPF_SoftFail 5324 2.52 4.00 1.99 86 TR_XM_SpammyWords5 5286 2.28 3.97 1.68 87 BAYES_95 5278 2.96 3.97 2.60 88 RCVD_IN_VALIDITY_SAFE 5275 5.41 3.97 5.92 89 KHOP_HELO_FCRDNS 5271 2.19 3.96 1.56 90 MIME_QP_LONG_LINE 5224 6.01 3.93 6.74 91 XM_B_Phish66 5133 2.35 3.86 1.81 92 TM2_M_URI_OPT_OUT 4986 3.96 3.75 4.03 93 XMDiploma_00 4881 2.18 3.67 1.65 94 RELAYCOUNTRY_FR 4746 1.08 3.57 0.20 95 T_XMDrugObfuBody_14 4681 2.51 3.52 2.16 96 TR_XM_SpammyWords3 4655 1.22 3.50 0.41 97 RCVD_IN_VALIDITY_CERTIFIED 4322 4.73 3.25 5.26 98 XM_B_SpammyTLD 4319 2.38 3.25 2.08 99 URIBL_DBL_SPAM 4246 0.84 3.19 0.00 100 HTML_IMAGE_ONLY_08 4242 0.94 3.19 0.14 101 T_TooManySym_01 4225 5.12 3.18 5.81 102 HTML_IMAGE_RATIO_06 4181 3.42 3.14 3.51 103 HTML_IMAGE_RATIO_08 3878 2.82 2.92 2.79 104 XM_GoogleGroups 3598 1.77 2.70 1.44 105 HTML_TAG_BALANCE_CENTER 3496 0.75 2.63 0.09 106 RCVD_IN_MSPIKE_L3 3473 0.94 2.61 0.35 107 BAYES_40 3458 4.53 2.60 5.21 108 RCVD_IN_IADB_LISTED 3441 4.68 2.59 5.43 109 TR_XM_NoHeaderRelay 3363 0.79 2.53 0.17 110 XM_DIRTYINTL 3290 0.87 2.47 0.31 111 SUBJ_ALL_CAPS 3219 2.14 2.42 2.03 112 XMLngstWrd_00 3216 1.24 2.42 0.82 113 XMBody_17 3192 0.91 2.40 0.39 114 HTML_TITLE_SUBJ_DIFF 3173 0.84 2.39 0.28 115 HTML_FONT_TINY_NORDNS 3164 0.74 2.38 0.16 116 XMLngstWrd_01 3151 1.18 2.37 0.76 117 MIXED_FONT_CASE 3116 0.62 2.34 0.00 118 MIXED_CENTER_CASE 3101 0.61 2.33 0.00 119 MIXED_HREF_CASE 3101 0.61 2.33 0.00 120 MIXED_AREA_CASE 3098 0.61 2.33 0.00 121 MIXED_IMG_CASE 3098 0.61 2.33 0.00 122 XMLngstWrd_02 3072 1.11 2.31 0.68 123 XMLngstWrd_03 3028 1.04 2.28 0.60 124 BOTNET_NORDNS 3008 0.60 2.26 0.01 125 TM2_M_A_HREF_HREF 2989 0.90 2.25 0.42 126 XMLngstWrd_04 2982 0.98 2.24 0.53 127 T_FILL_THIS_FORM_SHORT 2981 1.23 2.24 0.87 128 XM_CamelCaseFrm001 2973 1.81 2.24 1.66 129 XM_DK_Undo_01 2942 1.76 2.21 1.60 130 UPPERCASE_75_100 2911 0.78 2.19 0.28 131 RCVD_IN_IADB_SPF 2905 4.11 2.18 4.79 132 XM_B_Unsub2 2894 1.62 2.18 1.43 133 BODY_URI_ONLY 2820 0.57 2.12 0.02 134 TR_XM_SB_Phish 2808 2.16 2.11 2.18 135 ALL_TRUSTED 2712 13.56 2.04 17.65 136 RCVD_IN_IADB_DK 2703 3.60 2.03 4.16 137 XMSubPhish11 2689 2.12 2.02 2.16 138 HTML_FONT_SIZE_LARGE 2668 0.59 2.01 0.09 139 RCVD_IN_IADB_SENDERID 2659 3.70 2.00 4.30 140 XM_B_SpammyWords4 2635 0.96 1.98 0.59 141 MAILING_LIST_MULTI 2632 2.39 1.98 2.54 142 BAYES_20 2631 3.36 1.98 3.85 143 GOOG_STO_IMG_HTML 2516 0.50 1.89 0.00 144 XMSexyCombo_01 2482 0.94 1.87 0.62 145 XMStockSpam_06 2476 1.11 1.86 0.85 146 TR_LOTS_OF_MONEY3 2435 0.93 1.83 0.60 147 T_XMDrugObfuBody_00 2429 1.04 1.83 0.76 148 USER_IN_DEF_DKIM_WL 2417 8.99 1.82 11.54 149 URI_HEX 2396 1.40 1.80 1.25 150 XM_URI_RBL 2356 0.55 1.77 0.12 151 XM_UB60 2350 0.51 1.77 0.06 152 XM_B_COVIDMETA 2349 0.77 1.77 0.41 153 XMBdyGiftCard01 2343 1.19 1.76 0.98 154 FROM_EXCESS_BASE64 2284 2.39 1.72 2.62 155 XMGenDplmaNmb 2258 0.99 1.70 0.74 156 TR_XM_INV_DKIM 2240 0.65 1.68 0.28 157 DIET_1 2142 0.74 1.61 0.43 158 TR_XM_PHPDW 2113 0.94 1.59 0.70 159 URIBL_BLACK 2099 0.46 1.58 0.07 160 T_XMHurry_00 2096 0.76 1.58 0.47 161 TR_XM_FormFill2 2037 0.89 1.53 0.66 162 TR_XM_PHPForged 2034 0.89 1.53 0.66 163 XM_H_PHPOS 1998 0.88 1.50 0.65 164 XM_Body_Dirty_Words_01 1982 0.62 1.49 0.31 165 XMNoVowels 1952 0.97 1.47 0.79 166 TR_XM_COVIDMETA4 1930 0.63 1.45 0.34 167 RCVD_IN_IADB_VOUCHED 1892 2.73 1.42 3.19 168 RELAYCOUNTRY_IN 1815 0.42 1.36 0.09 169 XMBrknScrpt_02 1811 0.89 1.36 0.73 170 HTML_FONT_SIZE_HUGE 1769 0.39 1.33 0.05 171 XM_UB99 1761 0.35 1.32 0.00 172 RELAYCOUNTRY_AU 1749 0.62 1.31 0.37 173 RCVD_IN_MSPIKE_L5 1727 0.51 1.30 0.24 174 XM_ProductURIs 1718 1.19 1.29 1.15 175 XMHTML_After_End 1690 0.86 1.27 0.72 176 TR_XM_COVIDMETA1 1683 0.49 1.27 0.21 177 URI_TRY_3LD 1678 0.79 1.26 0.62 178 RCVD_IN_VALIDITY_RPBL 1656 0.38 1.24 0.08 179 XMSlimDrugH 1645 0.57 1.24 0.34 180 BAYES_00 1549 9.46 1.16 12.40 181 RCVD_IN_MSPIKE_L4 1504 0.53 1.13 0.32 182 HTTPS_HTTP_MISMATCH 1470 0.78 1.11 0.67 183 XMPhish30 1438 0.78 1.08 0.67 184 TR_Symld_Words 1435 1.46 1.08 1.59 185 XM_PDF 1413 4.34 1.06 5.51 186 XM_BadFromFormat 1404 0.38 1.06 0.14 187 RCVD_IN_PSBL 1384 0.31 1.04 0.05 188 DKIM_ADSP_CUSTOM_MED 1360 0.98 1.02 0.96 189 XM_UB80 1360 0.28 1.02 0.01 190 TR_XM_FormFill 1330 0.27 1.00 0.01 191 XM_UB999 1325 0.26 1.00 0.00 192 XMMoneyMeta_00 1325 0.61 1.00 0.47 193 TR_MetaPhish_Combo_01 1315 0.80 0.99 0.73 194 XMWhlSbjSex 1297 0.35 0.98 0.12 195 URI_GOOG_STO_SPAMMY 1283 0.25 0.96 0.00 196 RCVD_IN_RP_SAFE 1279 1.10 0.96 1.15 197 T_Symld_Words_02 1278 0.55 0.96 0.40 198 URI_NO_WWW_BIZ_CGI 1265 0.25 0.95 0.00 199 XM_H_Long_From02 1258 1.31 0.95 1.44 200 TR_BOTNET_NEGATE 1258 0.46 0.95 0.28 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 323009 88.82 96.25 86.19 2 RELAYCOUNTRY_US 298674 79.35 78.37 79.69 3 DKIM_SIGNED 270287 75.90 86.54 72.12 4 XM_DK_Pass 263543 73.62 82.90 70.32 5 XM_B_Unicode 258057 70.68 75.83 68.86 6 DKIM_VALID 255540 71.39 80.41 68.18 7 DCC_CHECK_NEGATIVE 225109 50.33 22.89 60.06 8 BAYES_50 206781 52.84 46.26 55.17 9 DKIM_VALID_AU 193730 54.33 61.76 51.69 10 XMListUnsubscribeExists 178554 54.03 72.02 47.64 11 XM_B_SpammyWords 164319 50.63 69.74 43.84 12 XM_B_Unicode3 156459 41.74 41.71 41.75 13 DCC_CHECK 149513 49.63 77.07 39.89 14 T_TM2_M_HEADER_IN_MSG 110631 27.30 21.05 29.52 15 RCVD_IN_MSPIKE_WL 105763 25.99 19.71 28.22 16 HTML_FONT_LOW_CONTRAST 100212 28.19 32.28 26.74 17 DKIM_VALID_EF 96016 26.78 30.06 25.62 18 FVGT_m_MULTI_ODD 87013 25.39 31.51 23.22 19 LOC_TINY_FONT_1 83100 26.11 37.19 22.17 20 XMSubLong 82332 22.59 24.36 21.97 21 MIME_HTML_ONLY 77399 23.05 29.80 20.65 22 RCVD_IN_MSPIKE_H2 76701 21.72 25.26 20.47 23 XM_B_SpammyWords2 70008 23.89 38.55 18.68 24 T_KAM_HTML_FONT_INVALID 68557 21.88 31.99 18.29 25 ALL_TRUSTED 66161 13.56 2.04 17.65 26 RCVD_IN_MSPIKE_H3 56616 14.36 12.26 15.11 27 BAYES_00 46467 9.46 1.16 12.40 28 XM_Multi_Part_URI 44379 12.80 15.49 11.84 29 USER_IN_DEF_DKIM_WL 43252 8.99 1.82 11.54 30 XM_Body_Dirty_Words 41347 13.39 20.01 11.03 31 RCVD_IN_MSPIKE_H4 40732 9.85 6.98 10.87 32 XM_B_Unsub 40163 11.31 12.98 10.72 33 LotsOfNums_01 36269 9.03 7.20 9.68 34 BAYES_60 34631 8.67 7.04 9.24 35 TooManyTo_001 33419 8.03 5.53 8.92 36 UNPARSEABLE_RELAY 30465 9.03 11.56 8.13 37 LOTS_OF_MONEY 29770 9.51 13.93 7.94 38 XM_Evil_Numbers_Gen 29306 8.34 9.81 7.82 39 FSL_BULK_SIG 28586 9.11 13.30 7.63 40 TR_XM_DK_Bayes 27950 5.65 0.57 7.46 41 XM_DKIMWhitelistDomains 27662 5.47 0.09 7.38 42 TR_XM_DK_Bayes1 27134 5.48 0.53 7.24 43 IN_ZIMBRA_NJ_WHITELIST 25461 5.04 0.08 6.79 44 MIME_QP_LONG_LINE 25274 6.01 3.93 6.74 45 XM_SendGrid 24922 7.14 8.52 6.65 46 XM_DK_Undo_02 24108 15.48 40.97 6.43 47 HTML_IMAGE_RATIO_04 24016 5.95 4.66 6.41 48 TR_XM_UnparsRelay 24015 7.64 11.13 6.41 49 TR_XM_DK_Bayes2 23488 4.74 0.45 6.27 50 RCVD_IN_VALIDITY_SAFE 22192 5.41 3.97 5.92 51 T_TooManySym_01 21756 5.12 3.18 5.81 52 MPART_ALT_DIFF 21059 7.49 12.78 5.62 53 XM_PDF 20640 4.34 1.06 5.51 54 HTML_IMAGE_RATIO_02 20459 5.90 7.12 5.46 55 RCVD_IN_IADB_LISTED 20340 4.68 2.59 5.43 56 RCVD_IN_VALIDITY_CERTIFIED 19701 4.73 3.25 5.26 57 BAYES_40 19524 4.53 2.60 5.21 58 XM_H_Long_From01 19016 5.21 5.58 5.07 59 BAYES_99 18374 11.22 29.04 4.90 60 RCVD_IN_IADB_SPF 17958 4.11 2.18 4.79 61 TR_XM_SpammyWords4 17841 6.59 11.76 4.76 62 XM_B_SpammyWords3 17289 6.79 12.92 4.61 63 TR_XM_DKIM_Undo 17255 12.11 33.25 4.60 64 BOTNET_IPINHOSTNAME 16246 6.59 12.93 4.33 65 RCVD_IN_IADB_SENDERID 16127 3.70 2.00 4.30 66 BAYES_80 15888 4.99 7.10 4.24 67 RCVD_IN_IADB_DK 15597 3.60 2.03 4.16 68 XMSubMetaSx_00 15276 4.49 5.67 4.08 69 TM2_M_URI_OPT_OUT 15111 3.96 3.75 4.03 70 TR_XM_DK_SendGrid 14892 4.31 5.26 3.97 71 DKIM_INVALID 14747 4.51 6.12 3.93 72 XMStrtUSub 14690 3.95 4.05 3.92 73 BAYES_999 14531 8.70 22.28 3.88 74 XMNumbers 14464 3.97 4.28 3.86 75 BAYES_20 14426 3.36 1.98 3.85 76 XM_H_Trusted_IP 14102 2.78 0.00 3.76 77 MIME_HTML_ONLY_MULTI 14084 4.29 5.79 3.76 78 RELAYCOUNTRY_META 13927 8.26 21.06 3.72 79 ANY_BOUNCE_MESSAGE 13787 2.84 0.46 3.68 80 BOUNCE_MESSAGE 13785 2.84 0.46 3.68 81 HTML_IMAGE_RATIO_06 13173 3.42 3.14 3.51 82 T_REMOTE_IMAGE 12835 3.85 5.06 3.42 83 XM_UncommonTLD01 12413 6.16 14.18 3.31 84 TR_XM_PhishingBody 12106 4.16 6.79 3.23 85 RCVD_IN_IADB_VOUCHED 11959 2.73 1.42 3.19 86 XM_B_Phish_Phrases 11952 3.75 5.32 3.19 87 T_TooManySym_02 11518 2.42 0.58 3.07 88 XMSexyCombo_05 11010 4.53 9.00 2.94 89 URI_NOVOWEL 10795 3.99 7.12 2.88 90 HTML_IMAGE_RATIO_08 10460 2.82 2.92 2.79 91 FROM_EXCESS_BASE64 9833 2.39 1.72 2.62 92 BAYES_95 9745 2.96 3.97 2.60 93 MIME_HTML_MOSTLY 9525 4.11 8.55 2.54 94 MAILING_LIST_MULTI 9501 2.39 1.98 2.54 95 HTML_MIME_NO_HTML_TAG 8994 3.46 6.46 2.40 96 BAYES_05 8937 1.98 0.84 2.38 97 RCVD_IN_MSPIKE_H5 8415 1.78 0.48 2.25 98 TooManyTo_002 8231 1.85 0.87 2.20 99 TR_XM_SB_Phish 8166 2.16 2.11 2.18 100 XMSubPhish11 8088 2.12 2.02 2.16 101 T_XMDrugObfuBody_14 8077 2.51 3.52 2.16 102 RCVD_IN_IADB_OPTIN 7794 1.78 0.93 2.08 103 XM_B_SpammyTLD 7791 2.38 3.25 2.08 104 SUBJ_ALL_CAPS 7625 2.14 2.42 2.03 105 TR_DCC_Bayes_99 7590 7.48 22.86 2.03 106 XM_SPF_SoftFail 7451 2.52 4.00 1.99 107 INVALID_MSGID 7064 1.43 0.14 1.88 108 IN_HORDE_ADDRESS_BOOK 6886 1.38 0.10 1.84 109 XM_B_Phish66 6783 2.35 3.86 1.81 110 HELO_NODOT 6645 1.45 0.55 1.77 111 HELO_NO_DOMAIN 6645 1.45 0.55 1.77 112 T_XMDrugObfuBody_08 6452 2.35 4.14 1.72 113 TR_XM_SpammyWords5 6313 2.28 3.97 1.68 114 XM_CamelCaseFrm001 6236 1.81 2.24 1.66 115 MSGID_NOFQDN1 6228 1.23 0.03 1.66 116 XM_B_Investor 6216 2.61 5.29 1.66 117 XMDiploma_00 6196 2.18 3.67 1.65 118 TO_MALFORMED 6043 1.19 0.01 1.61 119 XM_DK_Undo_01 5981 1.76 2.21 1.60 120 TR_Symld_Words 5957 1.46 1.08 1.59 121 BOTNET 5891 4.47 12.63 1.57 122 KHOP_HELO_FCRDNS 5844 2.19 3.96 1.56 123 TR_XM_SpammyRelay 5748 4.75 13.83 1.53 124 TVD_RCVD_IP 5653 1.18 0.26 1.51 125 TM2_M_VERY_LONG_WORD 5555 2.32 4.67 1.48 126 XM_GoogleGroups 5411 1.77 2.70 1.44 127 XM_H_Long_From02 5395 1.31 0.95 1.44 128 TooManyTo_003 5369 1.23 0.66 1.43 129 XM_B_Unsub2 5350 1.62 2.18 1.43 130 XMGappySubj_01 5205 1.07 0.18 1.39 131 HTML_FONT_FACE_BAD 5161 1.22 0.76 1.38 132 UNTRUSTED_Relay 4717 4.69 14.34 1.26 133 URI_HEX 4692 1.40 1.80 1.25 134 XMSubNoVowel 4431 0.99 0.43 1.18 135 XM_ProductURIs 4317 1.19 1.29 1.15 136 RCVD_IN_RP_SAFE 4292 1.10 0.96 1.15 137 XMCapTrack 4233 0.93 0.36 1.13 138 XMBSHREFv2 3986 0.86 0.28 1.06 139 TVD_SPACE_RATIO 3984 0.81 0.08 1.06 140 XM_OfRef6 3943 1.83 4.03 1.05 141 RCVD_IN_RP_CERTIFIED 3840 0.96 0.78 1.02 142 TooManyTo_004 3813 0.89 0.51 1.02 143 XMBdyGiftCard01 3677 1.19 1.76 0.98 144 DKIM_ADSP_CUSTOM_MED 3598 0.98 1.02 0.96 145 RELAYCOUNTRY_CA 3572 1.94 4.73 0.95 146 HTML_IMAGE_ONLY_20 3488 0.74 0.22 0.93 147 TR_XM_SpammyWords2 3480 3.76 11.74 0.93 148 RCVD_IN_BL_SPAMCOP_NET 3424 2.75 7.94 0.91 149 RCVD_IN_MSPIKE_BL 3422 2.00 5.06 0.91 150 TR_XM_MSPIKECOMBO 3389 1.99 5.04 0.90 151 T_FILL_THIS_FORM_SHORT 3248 1.23 2.24 0.87 152 XMStockSpam_06 3178 1.11 1.86 0.85 153 TR_XM_MaxUnsub 3145 1.75 4.32 0.84 154 XMLngstWrd_00 3090 1.24 2.42 0.82 155 TooManyTo_005 3082 0.73 0.45 0.82 156 XMBody_95 3071 0.66 0.21 0.82 157 XMNoVowels 2977 0.97 1.47 0.79 158 XM_UB50 2884 2.77 8.39 0.77 159 XMLngstWrd_01 2865 1.18 2.37 0.76 160 T_XMDrugObfuBody_00 2849 1.04 1.83 0.76 161 RELAYCOUNTRY_GB 2830 0.80 0.92 0.76 162 XMGenDplmaNmb 2770 0.99 1.70 0.74 163 T_TooManySym_03 2769 0.61 0.26 0.74 164 SpammyFromTLD_01 2757 2.06 5.78 0.74 165 DKIM_ADSP_NXDOMAIN 2752 0.64 0.39 0.73 166 TR_MetaPhish_Combo_01 2729 0.80 0.99 0.73 167 XMBrknScrpt_02 2718 0.89 1.36 0.73 168 XMHTML_After_End 2696 0.86 1.27 0.72 169 TR_XM_PHPDW 2640 0.94 1.59 0.70 170 NO_DNS_FOR_FROM 2637 0.66 0.55 0.70 171 XMSubMetaSxObfu_03 2627 0.69 0.65 0.70 172 XMLngstWrd_02 2553 1.11 2.31 0.68 173 XM_RXBody 2517 0.73 0.88 0.67 174 XMPhish30 2508 0.78 1.08 0.67 175 HTTPS_HTTP_MISMATCH 2506 0.78 1.11 0.67 176 SHORT_URI_2 2501 0.60 0.41 0.67 177 TR_XM_FormFill2 2490 0.89 1.53 0.66 178 TR_XM_PHPForged 2478 0.89 1.53 0.66 179 XM_H_PHPOS 2451 0.88 1.50 0.65 180 T_OBFU_PDF_ATTACH 2424 0.55 0.27 0.65 181 NML_ADSP_CUSTOM_MED 2405 0.71 0.91 0.64 182 FROM_GOV_DKIM_AU 2384 0.52 0.19 0.64 183 XM_ShortIntro_01 2358 0.57 0.40 0.63 184 URI_TRY_3LD 2334 0.79 1.26 0.62 185 XMSexyCombo_01 2311 0.94 1.87 0.62 186 TR_XM_MaxWHORU 2301 0.58 0.48 0.61 187 HTML_TAG_BALANCE_BODY 2275 0.66 0.79 0.61 188 TR_LOTS_OF_MONEY3 2267 0.93 1.83 0.60 189 XMLngstWrd_03 2235 1.04 2.28 0.60 190 XM_B_SpammyWords4 2217 0.96 1.98 0.59 191 TR_MSPIKEBAYES00 2214 0.45 0.04 0.59 192 XM_H_PHPMailer 2096 0.63 0.81 0.56 193 XM_B_COPY_HTML 2071 0.57 0.60 0.55 194 FORGED_GMAIL_RCVD 2001 0.63 0.90 0.53 195 XMLngstWrd_04 1984 0.98 2.24 0.53 196 SHORT_HELO_AND_INLINE_IMAGE 1908 0.40 0.11 0.51 197 XMSubMetaI_00 1877 0.59 0.84 0.50 198 XMHTMLBadTable_001 1864 0.56 0.75 0.50 199 RCVD_IN_SORBS_DUL 1863 0.42 0.19 0.50 200 FROM_GOV_SPOOF 1826 0.39 0.13 0.49 ----------------------------------------------------------------------