Email: 594636 Autolearn: 0 AvgScore: -0.23 AvgScanTime: 1.35 sec Spam: 112516 Autolearn: 0 AvgScore: 13.87 AvgScanTime: 1.43 sec Ham: 482120 Autolearn: 0 AvgScore: -3.52 AvgScanTime: 1.33 sec Time Spent Running SA: 223.33 hours Time Spent Processing Spam: 44.85 hours Time Spent Processing Ham: 178.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 107163 90.19 95.24 89.02 2 DCC_CHECK_NEGATIVE 87335 90.76 77.62 93.83 3 DKIM_SIGNED 86655 64.18 77.02 61.19 4 XM_DK_Pass 82323 62.14 73.17 59.57 5 DKIM_VALID 79329 60.34 70.50 57.96 6 RELAYCOUNTRY_US 75662 78.43 67.25 81.04 7 XM_B_Unicode 72696 71.17 64.61 72.70 8 XM_B_SpammyWords 71644 49.16 63.67 45.77 9 XMListUnsubscribeExists 71154 43.88 63.24 39.36 10 DKIM_VALID_AU 60725 45.89 53.97 44.00 11 BAYES_50 53585 49.71 47.62 50.20 12 XM_DK_Undo_02 45938 12.92 40.83 6.41 13 MIME_HTML_ONLY 39726 24.90 35.31 22.47 14 TR_XM_DKIM_Undo 37593 9.90 33.41 4.42 15 XM_B_Unicode3 36770 42.64 32.68 44.97 16 XM_B_SpammyWords2 36056 20.10 32.05 17.31 17 RELAYCOUNTRY_META 34577 8.56 30.73 3.38 18 LOC_TINY_FONT_1 33776 21.78 30.02 19.86 19 BAYES_99 32702 9.43 29.06 4.85 20 FVGT_m_MULTI_ODD 31353 21.43 27.87 19.93 21 T_KAM_HTML_FONT_INVALID 30969 17.70 27.52 15.41 22 DKIM_VALID_EF 29751 22.45 26.44 21.52 23 HTML_FONT_LOW_CONTRAST 29277 24.01 26.02 23.54 24 RCVD_IN_MSPIKE_H2 28459 18.89 25.29 17.40 25 XM_UncommonTLD01 26379 6.73 23.44 2.83 26 XMSubLong 26073 21.38 23.17 20.97 27 UNTRUSTED_Relay 26070 5.42 23.17 1.28 28 BAYES_999 25987 7.56 23.10 3.94 29 DCC_CHECK 25120 9.20 22.33 6.13 30 T_TM2_M_HEADER_IN_MSG 25048 28.03 22.26 29.37 31 XM_Multi_Part_URI 23729 12.23 21.09 10.16 32 XM_Body_Dirty_Words 23613 13.31 20.99 11.52 33 BOTNET 21775 4.92 19.35 1.56 34 RCVD_IN_MSPIKE_WL 18043 22.45 16.04 23.95 35 TR_XM_SpammyRelay 17528 4.15 15.58 1.49 36 XM_UB50 16804 3.50 14.93 0.83 37 HTML_MIME_NO_HTML_TAG 16144 4.23 14.35 1.87 38 MPART_ALT_DIFF 14650 10.36 13.02 9.74 39 XM_B_Unsub 13469 10.77 11.97 10.49 40 LOTS_OF_MONEY 13406 10.32 11.91 9.95 41 BOTNET_IPINHOSTNAME 13210 5.39 11.74 3.91 42 XM_B_SpammyWords3 11963 5.30 10.63 4.05 43 RCVD_IN_MSPIKE_H3 11856 12.22 10.54 12.61 44 TM2_M_URI_OPT_OUT 11542 5.52 10.26 4.42 45 TR_XM_SpammyWords4 11402 7.08 10.13 6.37 46 RCVD_IN_BL_SPAMCOP_NET 11259 2.54 10.01 0.79 47 UNPARSEABLE_RELAY 10889 7.50 9.68 6.99 48 TR_XM_SpammyWords2 10734 2.47 9.54 0.81 49 TR_XM_UnparsRelay 10573 6.23 9.40 5.49 50 BODY_URI_ONLY 10376 1.75 9.22 0.01 51 SpammyFromTLD_01 10033 2.23 8.92 0.68 52 RCVD_IN_MSPIKE_BL 9826 2.37 8.73 0.89 53 TR_XM_MSPIKECOMBO 9819 2.37 8.73 0.89 54 MIME_HTML_MOSTLY 9703 3.48 8.62 2.27 55 HTML_SHORT_LINK_IMG_1 9400 1.59 8.35 0.01 56 XMSexyCombo_05 9175 4.30 8.15 3.40 57 HTML_IMAGE_ONLY_04 9093 1.56 8.08 0.04 58 XMNumbers 8786 3.77 7.81 2.83 59 URI_NOVOWEL 8762 3.37 7.79 2.34 60 XM_Evil_Numbers_Gen 8662 7.99 7.70 8.06 61 SpammyFromTLD_02 8096 1.65 7.20 0.36 62 XM_SPF_SoftFail 8048 5.48 7.15 5.10 63 TR_XM_PhishingBody 7950 3.80 7.07 3.04 64 HDRS_MISSP 7876 1.34 7.00 0.02 65 TO_NO_BRKTS_FROM_MSSP 7569 1.29 6.73 0.02 66 XMSubMetaSx_00 7422 4.62 6.60 4.16 67 XM_SendGrid 7341 5.84 6.52 5.68 68 DKIM_INVALID 7326 3.85 6.51 3.22 69 RELAYCOUNTRY_RU 7256 1.23 6.45 0.01 70 TR_DCC_Bayes_99 7205 1.36 6.40 0.18 71 TooManyTo_001 7089 8.13 6.30 8.56 72 XM_BadFromFormat 6810 1.23 6.05 0.11 73 BAYES_80 6687 3.89 5.94 3.42 74 HTML_IMAGE_RATIO_02 6630 5.33 5.89 5.20 75 JH_SPAMMY_HEADERS 6273 1.06 5.58 0.00 76 BAYES_60 6045 6.73 5.37 7.05 77 RCVD_IN_MSPIKE_H4 5859 8.85 5.21 9.70 78 LotsOfNums_01 5741 7.04 5.10 7.50 79 TR_XM_SPAMCOP 5690 1.25 5.06 0.36 80 XM_H_Long_From01 5654 4.23 5.03 4.04 81 XM_B_Phish_Phrases 5592 3.37 4.97 2.99 82 TR_XM_SpammyWords3 5572 1.28 4.95 0.42 83 MIME_HTML_ONLY_MULTI 5523 7.43 4.91 8.02 84 RELAYCOUNTRY_CA 5498 1.56 4.89 0.78 85 TM2_M_VERY_LONG_WORD 5430 1.98 4.83 1.32 86 KHOP_HELO_FCRDNS 5265 3.34 4.68 3.03 87 XMStrtUSub 5165 8.92 4.59 9.94 88 XM_B_Investor 5050 2.12 4.49 1.57 89 MIME_QP_LONG_LINE 4685 5.90 4.16 6.30 90 RELAYCOUNTRY_FR 4585 0.98 4.07 0.26 91 XM_OfRef6 4567 1.45 4.06 0.84 92 TR_XM_SpammyWords5 4415 1.72 3.92 1.21 93 XM_B_Phish66 4384 2.23 3.90 1.84 94 RCVD_IN_MSPIKE_L3 4369 1.04 3.88 0.38 95 BAYES_40 4272 5.23 3.80 5.56 96 T_REMOTE_IMAGE 4254 3.01 3.78 2.83 97 HTML_IMAGE_RATIO_04 4232 13.11 3.76 15.29 98 XMSexyCombo_01 4092 1.94 3.64 1.55 99 TR_XM_DK_SendGrid 4054 3.70 3.60 3.73 100 TR_XM_MaxUnsub 4044 1.24 3.59 0.69 101 URIBL_DBL_SPAM 4002 0.68 3.56 0.01 102 ALL_TRUSTED 3955 14.14 3.52 16.62 103 T_XMDrugObfuBody_08 3883 2.03 3.45 1.69 104 DIET_1 3765 0.83 3.35 0.24 105 FSL_BULK_SIG 3756 1.58 3.34 1.17 106 T_FILL_THIS_FORM_SHORT 3740 1.18 3.32 0.68 107 HTML_TAG_BALANCE_CENTER 3664 0.69 3.26 0.09 108 SUBJ_ALL_CAPS 3577 2.11 3.18 1.86 109 BAYES_95 3566 2.23 3.17 2.01 110 XM_B_SpammyTLD 3496 1.95 3.11 1.68 111 XM_GoogleGroups 3459 1.50 3.07 1.13 112 T_XMDrugObfuBody_14 3370 2.22 3.00 2.04 113 RCVD_IN_MSPIKE_L5 3343 0.71 2.97 0.18 114 XMLngstWrd_00 3328 1.13 2.96 0.71 115 XMLngstWrd_01 3270 1.08 2.91 0.65 116 FROM_SUSPICIOUS_NTLD 3213 0.58 2.86 0.05 117 XM_DIRTYINTL 3192 0.81 2.84 0.34 118 FROM_SUSPICIOUS_NTLD_FP 3155 0.57 2.80 0.05 119 XMLngstWrd_02 3147 0.98 2.80 0.56 120 XMDiploma_00 3089 1.43 2.75 1.12 121 XMLngstWrd_03 3088 0.89 2.74 0.46 122 HTML_TITLE_SUBJ_DIFF 3043 0.66 2.70 0.19 123 XMLngstWrd_04 3033 0.82 2.70 0.38 124 XMBody_17 3005 0.86 2.67 0.44 125 HTML_IMAGE_RATIO_06 3004 4.51 2.67 4.94 126 BOTNET_NORDNS 2901 0.50 2.58 0.01 127 UPPERCASE_75_100 2881 0.62 2.56 0.17 128 TR_XM_PHPDW 2848 0.69 2.53 0.26 129 BAYES_20 2816 4.71 2.50 5.22 130 RCVD_IN_VALIDITY_RPBL 2753 0.51 2.45 0.06 131 URI_LONG_REPEAT 2734 0.46 2.43 0.00 132 TR_XM_PHPForged 2708 0.64 2.41 0.22 133 TR_XM_FormFill2 2689 0.63 2.39 0.22 134 XM_H_PHPOS 2671 0.62 2.37 0.22 135 SUBJECT_DIET 2586 0.44 2.30 0.00 136 RCVD_IN_VALIDITY_SAFE 2498 3.81 2.22 4.18 137 GOOG_STO_IMG_HTML 2491 0.42 2.21 0.00 138 RELAYCOUNTRY_AU 2480 0.69 2.20 0.33 139 XM_B_COVIDMETA 2469 0.96 2.19 0.68 140 XM_URI_RBL 2462 0.53 2.19 0.15 141 XM_B_Unsub2 2450 1.46 2.18 1.29 142 T_TooManySym_01 2429 4.82 2.16 5.44 143 HTML_IMAGE_RATIO_08 2424 3.84 2.15 4.23 144 TR_XM_FormFill 2387 0.42 2.12 0.02 145 TVD_SPACE_RATIO 2350 1.03 2.09 0.79 146 XM_UB99 2290 0.39 2.04 0.00 147 TR_XM_COVIDMETA4 2243 0.64 1.99 0.33 148 TR_XM_NoHeaderRelay 2197 0.52 1.95 0.18 149 HTML_IMAGE_ONLY_08 2188 0.44 1.94 0.09 150 RCVD_IN_IADB_LISTED 2154 3.79 1.91 4.23 151 XM_DK_Undo_01 2123 1.56 1.89 1.49 152 RCVD_IN_MSPIKE_L4 2107 0.61 1.87 0.32 153 MAILING_LIST_MULTI 2097 2.86 1.86 3.09 154 URIBL_BLACK 2088 0.38 1.86 0.04 155 RELAYCOUNTRY_PL 2041 0.37 1.81 0.03 156 TR_XM_SB_Phish 2036 1.79 1.81 1.78 157 XM_B_SpammyWords4 2022 0.71 1.80 0.46 158 RCVD_IN_VALIDITY_CERTIFIED 2008 3.24 1.78 3.58 159 XM_CamelCaseFrm001 2004 1.39 1.78 1.30 160 XMSubPhish11 1981 1.74 1.76 1.74 161 SHORT_URI_2 1965 1.74 1.75 1.74 162 URI_NO_WWW_BIZ_CGI 1958 0.35 1.74 0.02 163 TR_LOTS_OF_MONEY3 1940 0.57 1.72 0.31 164 TR_Caps_n_Bayes_99 1903 0.46 1.69 0.17 165 HTML_SHORT_CENTER 1895 0.32 1.68 0.00 166 TR_XM_INV_DKIM 1861 0.49 1.65 0.22 167 XM_UB999 1833 0.31 1.63 0.00 168 XMGenDplmaNmb 1818 0.74 1.62 0.53 169 BAYES_00 1770 15.07 1.57 18.22 170 T_XMHurry_00 1769 1.93 1.57 2.01 171 XMSpecificSbj 1768 0.30 1.57 0.00 172 HTML_FONT_SIZE_LARGE 1738 0.35 1.54 0.07 173 T_XMDrugObfuBody_00 1712 0.84 1.52 0.69 174 MIXED_CENTER_CASE 1712 0.29 1.52 0.00 175 RCVD_IN_IADB_SPF 1710 3.26 1.52 3.67 176 MIXED_HREF_CASE 1705 0.29 1.52 0.00 177 BODY_EMPTY 1704 0.29 1.51 0.00 178 MIXED_IMG_CASE 1693 0.29 1.50 0.00 179 MIXED_AREA_CASE 1691 0.28 1.50 0.00 180 MIXED_FONT_CASE 1690 0.29 1.50 0.00 181 NO_DNS_FOR_FROM 1667 0.47 1.48 0.23 182 XM_H_Undi_Recip 1666 0.45 1.48 0.20 183 TR_XM_COVIDMETA1 1655 0.50 1.47 0.27 184 FROM_MISSP_REPLYTO 1644 0.29 1.46 0.02 185 SHORT_IMG_SUSP_NTLD 1643 0.28 1.46 0.00 186 FROM_NTLD_LINKBAIT 1643 0.28 1.46 0.00 187 FROM_EXCESS_BASE64 1642 2.12 1.46 2.27 188 HTTPS_HTTP_MISMATCH 1636 0.72 1.45 0.55 189 XM_Body_Dirty_Words_01 1632 0.37 1.45 0.12 190 HK_RANDOM_FROM 1616 0.34 1.44 0.09 191 TM2_M_A_HREF_HREF 1595 0.62 1.42 0.43 192 XMHTML_After_End 1534 0.73 1.36 0.58 193 TR_Mismatch_TLD_02 1533 0.37 1.36 0.13 194 XM_UB60 1516 0.32 1.35 0.08 195 RCVD_IN_PSBL 1507 0.34 1.34 0.11 196 XMBrknScrpt_02 1507 0.84 1.34 0.72 197 DKIM_ADSP_NXDOMAIN 1478 0.49 1.31 0.29 198 RCVD_IN_IADB_DK 1458 2.80 1.30 3.16 199 URI_GOOG_STO_SPAMMY 1436 0.24 1.28 0.00 200 RCVD_IN_IADB_SENDERID 1435 2.91 1.28 3.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 452364 90.76 77.62 93.83 2 HTML_MESSAGE 429163 90.19 95.24 89.02 3 RELAYCOUNTRY_US 390695 78.43 67.25 81.04 4 XM_B_Unicode 350524 71.17 64.61 72.70 5 DKIM_SIGNED 294989 64.18 77.02 61.19 6 XM_DK_Pass 287187 62.14 73.17 59.57 7 DKIM_VALID 279445 60.34 70.50 57.96 8 BAYES_50 242004 49.71 47.62 50.20 9 XM_B_SpammyWords 220672 49.16 63.67 45.77 10 XM_B_Unicode3 216811 42.64 32.68 44.97 11 DKIM_VALID_AU 212133 45.89 53.97 44.00 12 XMListUnsubscribeExists 189743 43.88 63.24 39.36 13 T_TM2_M_HEADER_IN_MSG 141606 28.03 22.26 29.37 14 RCVD_IN_MSPIKE_WL 115468 22.45 16.04 23.95 15 HTML_FONT_LOW_CONTRAST 113514 24.01 26.02 23.54 16 MIME_HTML_ONLY 108341 24.90 35.31 22.47 17 DKIM_VALID_EF 103754 22.45 26.44 21.52 18 XMSubLong 101084 21.38 23.17 20.97 19 FVGT_m_MULTI_ODD 96066 21.43 27.87 19.93 20 LOC_TINY_FONT_1 95764 21.78 30.02 19.86 21 BAYES_00 87845 15.07 1.57 18.22 22 RCVD_IN_MSPIKE_H2 83887 18.89 25.29 17.40 23 XM_B_SpammyWords2 83468 20.10 32.05 17.31 24 HTML_FONT_FACE_BAD 82182 13.94 0.61 17.05 25 ALL_TRUSTED 80105 14.14 3.52 16.62 26 T_KAM_HTML_FONT_INVALID 74297 17.70 27.52 15.41 27 HTML_IMAGE_RATIO_04 73737 13.11 3.76 15.29 28 XM_H_Trusted_IP 65759 11.06 0.00 13.64 29 RCVD_IN_MSPIKE_H3 60792 12.22 10.54 12.61 30 XM_Body_Dirty_Words 55548 13.31 20.99 11.52 31 XM_B_Unsub 50590 10.77 11.97 10.49 32 XM_Multi_Part_URI 48968 12.23 21.09 10.16 33 LOTS_OF_MONEY 47957 10.32 11.91 9.95 34 XMStrtUSub 47899 8.92 4.59 9.94 35 MPART_ALT_DIFF 46938 10.36 13.02 9.74 36 RCVD_IN_MSPIKE_H4 46785 8.85 5.21 9.70 37 USER_IN_DEF_DKIM_WL 42576 7.32 0.84 8.83 38 TooManyTo_001 41264 8.13 6.30 8.56 39 IN_ZIMBRA_NJ_WHITELIST 40954 6.90 0.07 8.49 40 XM_Evil_Numbers_Gen 38866 7.99 7.70 8.06 41 MIME_HTML_ONLY_MULTI 38661 7.43 4.91 8.02 42 LotsOfNums_01 36143 7.04 5.10 7.50 43 BAYES_60 33993 6.73 5.37 7.05 44 UNPARSEABLE_RELAY 33697 7.50 9.68 6.99 45 TR_XM_DK_Bayes 31218 5.34 0.45 6.48 46 XM_DK_Undo_02 30883 12.92 40.83 6.41 47 TR_XM_SpammyWords4 30717 7.08 10.13 6.37 48 MIME_QP_LONG_LINE 30376 5.90 4.16 6.30 49 TR_XM_DK_Bayes1 30255 5.17 0.42 6.28 50 DCC_CHECK 29566 9.20 22.33 6.13 51 XM_SendGrid 27402 5.84 6.52 5.68 52 XM_DKIMWhitelistDomains 27380 4.61 0.02 5.68 53 BAYES_40 26805 5.23 3.80 5.56 54 TR_XM_UnparsRelay 26447 6.23 9.40 5.49 55 T_TooManySym_01 26245 4.82 2.16 5.44 56 TR_XM_DK_Bayes2 26236 4.47 0.33 5.44 57 BAYES_20 25162 4.71 2.50 5.22 58 HTML_IMAGE_RATIO_02 25088 5.33 5.89 5.20 59 XM_SPF_SoftFail 24565 5.48 7.15 5.10 60 HTML_IMAGE_RATIO_06 23808 4.51 2.67 4.94 61 BAYES_99 23376 9.43 29.06 4.85 62 XMSubNoVowel 21319 3.83 1.27 4.42 63 TM2_M_URI_OPT_OUT 21298 5.52 10.26 4.42 64 TR_XM_DKIM_Undo 21290 9.90 33.41 4.42 65 HTML_IMAGE_RATIO_08 20417 3.84 2.15 4.23 66 RCVD_IN_IADB_LISTED 20398 3.79 1.91 4.23 67 RCVD_IN_VALIDITY_SAFE 20166 3.81 2.22 4.18 68 XMSubMetaSx_00 20044 4.62 6.60 4.16 69 XM_B_SpammyWords3 19547 5.30 10.63 4.05 70 XM_H_Long_From01 19495 4.23 5.03 4.04 71 BAYES_999 18985 7.56 23.10 3.94 72 BOTNET_IPINHOSTNAME 18870 5.39 11.74 3.91 73 XM_PDF 18017 3.20 0.92 3.74 74 TR_XM_DK_SendGrid 17962 3.70 3.60 3.73 75 ANY_BOUNCE_MESSAGE 17941 3.17 0.79 3.72 76 BOUNCE_MESSAGE 17938 3.17 0.79 3.72 77 RCVD_IN_IADB_SPF 17695 3.26 1.52 3.67 78 RCVD_IN_VALIDITY_CERTIFIED 17272 3.24 1.78 3.58 79 BAYES_05 16761 2.99 0.92 3.48 80 BAYES_80 16466 3.89 5.94 3.42 81 XMSexyCombo_05 16368 4.30 8.15 3.40 82 RELAYCOUNTRY_META 16310 8.56 30.73 3.38 83 RCVD_IN_IADB_SENDERID 15850 2.91 1.28 3.29 84 DKIM_INVALID 15544 3.85 6.51 3.22 85 RCVD_IN_IADB_DK 15214 2.80 1.30 3.16 86 MAILING_LIST_MULTI 14919 2.86 1.86 3.09 87 T_TooManySym_02 14765 2.60 0.60 3.06 88 TR_XM_PhishingBody 14646 3.80 7.07 3.04 89 KHOP_HELO_FCRDNS 14594 3.34 4.68 3.03 90 XM_B_Phish_Phrases 14421 3.37 4.97 2.99 91 T_REMOTE_IMAGE 13660 3.01 3.78 2.83 92 XM_UncommonTLD01 13647 6.73 23.44 2.83 93 XMNumbers 13637 3.77 7.81 2.83 94 RCVD_IN_IADB_VOUCHED 12713 2.37 1.24 2.64 95 URI_NOVOWEL 11270 3.37 7.79 2.34 96 MIME_HTML_MOSTLY 10967 3.48 8.62 2.27 97 FROM_EXCESS_BASE64 10948 2.12 1.46 2.27 98 FILL_THIS_FORM 9848 1.70 0.25 2.04 99 T_XMDrugObfuBody_14 9819 2.22 3.00 2.04 100 BAYES_95 9702 2.23 3.17 2.01 101 T_XMHurry_00 9684 1.93 1.57 2.01 102 HTML_MIME_NO_HTML_TAG 9019 4.23 14.35 1.87 103 SUBJ_ALL_CAPS 8954 2.11 3.18 1.86 104 XM_B_Phish66 8889 2.23 3.90 1.84 105 TooManyTo_002 8811 1.66 0.95 1.83 106 XMSubGarbage 8639 1.46 0.03 1.79 107 XMSubLongNoVowel 8618 1.48 0.14 1.79 108 TR_XM_SB_Phish 8585 1.79 1.81 1.78 109 XMSubPhish11 8384 1.74 1.76 1.74 110 SHORT_URI_2 8378 1.74 1.75 1.74 111 RCVD_IN_IADB_OPTIN 8270 1.52 0.69 1.72 112 T_XMDrugObfuBody_08 8165 2.03 3.45 1.69 113 XM_B_SpammyTLD 8077 1.95 3.11 1.68 114 RCVD_IN_MSPIKE_H5 7891 1.38 0.29 1.64 115 TR_Symld_Words 7684 1.50 1.10 1.59 116 XM_B_Investor 7573 2.12 4.49 1.57 117 BOTNET 7510 4.92 19.35 1.56 118 XM_E_Blogspot 7505 1.30 0.18 1.56 119 XMSexyCombo_01 7459 1.94 3.64 1.55 120 XM_DK_Undo_01 7183 1.56 1.89 1.49 121 TR_XM_SpammyRelay 7169 4.15 15.58 1.49 122 HELO_NODOT 6966 1.31 0.72 1.44 123 HELO_NO_DOMAIN 6965 1.31 0.72 1.44 124 IN_HORDE_ADDRESS_BOOK 6859 1.16 0.06 1.42 125 INVALID_MSGID 6824 1.20 0.26 1.42 126 XMNoVowels 6491 1.19 0.50 1.35 127 TM2_M_VERY_LONG_WORD 6344 1.98 4.83 1.32 128 URI_HEX 6322 1.30 1.25 1.31 129 XM_CamelCaseFrm001 6266 1.39 1.78 1.30 130 XM_B_Unsub2 6203 1.46 2.18 1.29 131 UNTRUSTED_Relay 6187 5.42 23.17 1.28 132 MSGID_NOFQDN1 6134 1.05 0.11 1.27 133 TO_MALFORMED 6041 1.02 0.03 1.25 134 TooManyTo_003 5851 1.14 0.82 1.21 135 TR_XM_SpammyWords5 5837 1.72 3.92 1.21 136 FSL_BULK_SIG 5660 1.58 3.34 1.17 137 XMGappySubj_01 5461 0.95 0.19 1.13 138 XM_GoogleGroups 5437 1.50 3.07 1.13 139 XMDiploma_00 5420 1.43 2.75 1.12 140 TVD_RCVD_IP 5253 0.92 0.21 1.09 141 XMStockSpam_06 4771 1.03 1.22 0.99 142 XMCapTrack 4591 0.85 0.39 0.95 143 RCVD_IN_MSPIKE_BL 4279 2.37 8.73 0.89 144 TR_XM_MSPIKECOMBO 4269 2.37 8.73 0.89 145 XM_H_Long_From02 4211 0.85 0.73 0.87 146 T_TooManySym_03 4172 0.75 0.27 0.87 147 RCVD_IN_RP_SAFE 4114 0.77 0.39 0.85 148 TooManyTo_004 4104 0.83 0.72 0.85 149 XM_OfRef6 4069 1.45 4.06 0.84 150 XM_UB50 4005 3.50 14.93 0.83 151 TR_XM_SpammyWords2 3929 2.47 9.54 0.81 152 RCVD_IN_BL_SPAMCOP_NET 3819 2.54 10.01 0.79 153 XMBSHREFv2 3817 0.68 0.22 0.79 154 TVD_SPACE_RATIO 3796 1.03 2.09 0.79 155 RELAYCOUNTRY_CA 3776 1.56 4.89 0.78 156 DKIM_ADSP_CUSTOM_MED 3697 0.76 0.71 0.77 157 RCVD_IN_RP_CERTIFIED 3532 0.65 0.29 0.73 158 XMBrknScrpt_02 3471 0.84 1.34 0.72 159 XMLngstWrd_00 3399 1.13 2.96 0.71 160 TR_XM_MaxUnsub 3344 1.24 3.59 0.69 161 T_XMDrugObfuBody_00 3306 0.84 1.52 0.69 162 T_FILL_THIS_FORM_SHORT 3272 1.18 3.32 0.68 163 TR_MetaPhish_Combo_01 3270 0.73 0.95 0.68 164 TooManyTo_005 3267 0.67 0.64 0.68 165 XM_B_COVIDMETA 3264 0.96 2.19 0.68 166 SpammyFromTLD_01 3256 2.23 8.92 0.68 167 XMPhish30 3253 0.73 0.98 0.67 168 FROM_GOV_DKIM_AU 3166 0.64 0.57 0.66 169 RELAYCOUNTRY_GB 3163 0.71 0.96 0.66 170 XMLngstWrd_01 3146 1.08 2.91 0.65 171 URI_TRY_3LD 3054 0.68 0.85 0.63 172 XMHTML_After_End 2819 0.73 1.36 0.58 173 XMBdyGiftCard01 2814 0.69 1.14 0.58 174 XMMoneyMeta_00 2784 0.67 1.05 0.58 175 HTML_TAG_BALANCE_BODY 2773 0.62 0.81 0.58 176 XM_B_COPY_HTML 2764 0.58 0.62 0.57 177 XMLngstWrd_02 2682 0.98 2.80 0.56 178 HTML_IMAGE_ONLY_20 2676 0.59 0.72 0.56 179 HTTPS_HTTP_MISMATCH 2674 0.72 1.45 0.55 180 XM_ShortIntro_01 2652 0.66 1.14 0.55 181 TR_MSPIKEBAYES00 2634 0.45 0.03 0.55 182 MY_SERVERS_FOUND 2626 0.47 0.15 0.54 183 T_OBFU_PDF_ATTACH 2582 0.46 0.12 0.54 184 XMGenDplmaNmb 2561 0.74 1.62 0.53 185 NML_ADSP_CUSTOM_MED 2476 0.53 0.62 0.51 186 XM_ProductURIs 2335 0.50 0.55 0.48 187 XM_B_SpammyWords4 2224 0.71 1.80 0.46 188 XMBody_95 2216 0.40 0.14 0.46 189 XMLngstWrd_03 2209 0.89 2.74 0.46 190 XMHTMLBadTable_001 2161 0.47 0.59 0.45 191 XMSubMetaI_00 2112 0.50 0.79 0.44 192 RCVD_IN_SORBS_DUL 2110 0.41 0.29 0.44 193 XM_H_PHPMailer 2100 0.56 1.08 0.44 194 XMBody_17 2099 0.86 2.67 0.44 195 TM2_M_A_HREF_HREF 2067 0.62 1.42 0.43 196 SHORT_HELO_AND_INLINE_IMAGE 2049 0.36 0.10 0.42 197 TR_XM_SpammyWords3 2010 1.28 4.95 0.42 198 FORGED_GMAIL_RCVD 1959 0.44 0.58 0.41 199 MPART_ALT_DIFF_COUNT 1873 0.49 0.93 0.39 200 XMLngstWrd_04 1845 0.82 2.70 0.38 ----------------------------------------------------------------------