Email: 675324 Autolearn: 0 AvgScore: -0.55 AvgScanTime: 1.42 sec Spam: 137927 Autolearn: 0 AvgScore: 13.46 AvgScanTime: 1.74 sec Ham: 537397 Autolearn: 0 AvgScore: -4.14 AvgScanTime: 1.33 sec Time Spent Running SA: 265.52 hours Time Spent Processing Spam: 66.49 hours Time Spent Processing Ham: 199.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129840 90.70 94.14 89.82 2 DKIM_SIGNED 115553 55.80 83.78 48.62 3 XM_DK_Pass 110949 54.03 80.44 47.25 4 RELAYCOUNTRY_US 107143 77.58 77.68 77.56 5 DKIM_VALID 106977 52.14 77.56 45.61 6 XM_B_Unicode 101100 76.35 73.30 77.13 7 XMListUnsubscribeExists 92502 38.70 67.07 31.43 8 XM_B_SpammyWords 90023 49.33 65.27 45.24 9 DCC_CHECK 87861 28.97 63.70 20.05 10 DKIM_VALID_AU 79073 39.43 57.33 34.83 11 XM_DK_Undo_02 61399 13.17 44.52 5.12 12 XM_B_Unicode3 57477 49.71 41.67 51.77 13 BAYES_50 56713 47.41 41.12 49.02 14 DCC_CHECK_NEGATIVE 50011 71.00 36.26 79.92 15 LOC_TINY_FONT_1 49711 19.54 36.04 15.30 16 TR_XM_DKIM_Undo 48960 10.29 35.50 3.82 17 BAYES_99 48898 10.56 35.45 4.17 18 XM_B_SpammyWords2 48171 18.46 34.92 14.23 19 MIME_HTML_ONLY 42992 24.94 31.17 23.34 20 FVGT_m_MULTI_ODD 41375 19.00 30.00 16.18 21 DKIM_VALID_EF 40997 20.39 29.72 17.99 22 HTML_FONT_LOW_CONTRAST 40870 21.22 29.63 19.06 23 BAYES_999 39740 8.65 28.81 3.47 24 T_KAM_HTML_FONT_INVALID 39171 15.56 28.40 12.27 25 XMSubLong 34245 22.31 24.83 21.66 26 RCVD_IN_MSPIKE_H2 33726 16.50 24.45 14.46 27 XM_Body_Dirty_Words 30778 11.14 22.31 8.27 28 T_TM2_M_HEADER_IN_MSG 29848 32.05 21.64 34.73 29 RCVD_IN_MSPIKE_WL 29368 19.42 21.29 18.94 30 TR_DCC_Bayes_99 28453 5.21 20.63 1.25 31 RELAYCOUNTRY_META 28319 6.27 20.53 2.61 32 BOTNET 20433 3.98 14.81 1.20 33 XM_B_Unsub 20303 12.45 14.72 11.87 34 XM_Multi_Part_URI 20061 9.15 14.54 7.77 35 LOTS_OF_MONEY 17012 12.58 12.33 12.64 36 BOTNET_IPINHOSTNAME 16848 4.98 12.22 3.13 37 MPART_ALT_DIFF 16834 9.30 12.21 8.55 38 XM_B_SpammyWords3 16510 4.74 11.97 2.88 39 TR_XM_SpammyWords2 16359 3.01 11.86 0.73 40 TR_XM_SpammyRelay 16312 3.21 11.83 1.00 41 UNTRUSTED_Relay 16081 3.18 11.66 1.01 42 XM_UncommonTLD01 15819 4.20 11.47 2.34 43 FSL_BULK_SIG 15559 4.20 11.28 2.38 44 RCVD_IN_MSPIKE_H3 15546 10.48 11.27 10.27 45 UNPARSEABLE_RELAY 15114 6.46 10.96 5.30 46 TR_XM_UnparsRelay 14721 5.59 10.67 4.28 47 TR_XM_SpammyWords4 14593 7.96 10.58 7.29 48 XMSexyCombo_05 13504 7.76 9.79 7.24 49 XM_Evil_Numbers_Gen 13338 7.43 9.67 6.86 50 RCVD_IN_MSPIKE_H4 12917 7.85 9.37 7.46 51 RCVD_IN_BL_SPAMCOP_NET 11183 2.11 8.11 0.58 52 HTML_IMAGE_RATIO_02 10835 4.77 7.86 3.97 53 TR_XM_PhishingBody 10162 3.25 7.37 2.20 54 LotsOfNums_01 10119 6.23 7.34 5.95 55 MIME_HTML_MOSTLY 10093 2.77 7.32 1.61 56 XM_SendGrid 10017 4.78 7.26 4.15 57 BAYES_60 9948 6.23 7.21 5.98 58 TR_XM_MaxUnsub 9879 2.01 7.16 0.69 59 BAYES_80 9737 3.75 7.06 2.90 60 XMSubMetaSx_00 9273 7.15 6.72 7.26 61 DKIM_INVALID 8576 3.67 6.22 3.01 62 TooManyTo_001 8510 9.96 6.17 10.93 63 URI_NOVOWEL 8501 2.83 6.16 1.98 64 T_REMOTE_IMAGE 8491 3.16 6.16 2.39 65 XM_B_Phish_Phrases 8343 3.44 6.05 2.77 66 RCVD_IN_MSPIKE_BL 7985 1.67 5.79 0.61 67 TR_XM_MSPIKECOMBO 7964 1.66 5.77 0.61 68 HTML_MIME_NO_HTML_TAG 7645 2.53 5.54 1.75 69 SpammyFromTLD_02 7503 1.35 5.44 0.29 70 XM_H_Long_From01 7434 3.92 5.39 3.54 71 MIME_HTML_ONLY_MULTI 7296 6.84 5.29 7.23 72 XM_UB50 7288 1.63 5.28 0.70 73 HTML_IMAGE_RATIO_04 6911 11.97 5.01 13.76 74 SpammyFromTLD_01 6501 1.37 4.71 0.52 75 RELAYCOUNTRY_CA 6494 1.40 4.71 0.55 76 TR_XM_SPAMCOP 6477 1.18 4.70 0.28 77 TM2_M_VERY_LONG_WORD 6256 1.76 4.54 1.04 78 ALL_TRUSTED 6126 17.34 4.44 20.65 79 HTML_IMAGE_RATIO_06 6091 4.83 4.42 4.94 80 XM_B_Investor 6019 1.75 4.36 1.08 81 XMStrtUSub 6009 12.05 4.36 14.02 82 XM_SPF_SoftFail 5904 12.57 4.28 14.69 83 MIME_QP_LONG_LINE 5790 4.06 4.20 4.02 84 TR_XM_DK_SendGrid 5681 2.91 4.12 2.60 85 XM_B_Phish66 5580 1.86 4.05 1.30 86 T_XMDrugObfuBody_08 5482 2.16 3.97 1.69 87 BAYES_95 5388 3.25 3.91 3.08 88 RELAYCOUNTRY_FR 5335 0.92 3.87 0.16 89 KHOP_HELO_FCRDNS 5253 7.12 3.81 7.98 90 TR_XM_SpammyWords3 5052 1.00 3.66 0.32 91 JH_SPAMMY_HEADERS 4888 0.72 3.54 0.00 92 TM2_M_URI_OPT_OUT 4832 2.65 3.50 2.44 93 XMNumbers 4820 2.75 3.49 2.55 94 TR_XM_SpammyWords5 4707 1.46 3.41 0.96 95 T_XMDrugObfuBody_14 4655 1.84 3.37 1.45 96 RCVD_IN_VALIDITY_SAFE 4440 3.43 3.22 3.48 97 XM_GoogleGroups 4299 1.45 3.12 1.02 98 XM_DIRTYINTL 4162 0.78 3.02 0.21 99 BOTNET_NORDNS 4115 0.62 2.98 0.01 100 RCVD_IN_IADB_LISTED 4016 3.36 2.91 3.47 101 XM_B_SpammyTLD 3980 1.81 2.89 1.53 102 RCVD_IN_MSPIKE_L3 3920 0.79 2.84 0.26 103 HTML_IMAGE_ONLY_08 3896 0.63 2.82 0.07 104 XMDiploma_00 3781 5.14 2.74 5.75 105 HTML_TITLE_SUBJ_DIFF 3781 0.72 2.74 0.20 106 TR_XM_SB_Phish 3682 1.83 2.67 1.62 107 TM2_M_BODY_EMPTY 3677 1.82 2.67 1.60 108 XMEmptyBody_01 3652 1.65 2.65 1.39 109 XM_B_Unsub2 3552 1.50 2.58 1.22 110 XMLngstWrd_00 3542 1.00 2.57 0.60 111 XM_DK_Undo_01 3480 1.54 2.52 1.28 112 XMLngstWrd_01 3462 0.96 2.51 0.56 113 XMSubPhish11 3450 1.78 2.50 1.60 114 RCVD_IN_IADB_SPF 3419 2.93 2.48 3.05 115 RCVD_IN_VALIDITY_CERTIFIED 3377 2.94 2.45 3.06 116 XMLngstWrd_02 3368 0.89 2.44 0.49 117 XM_OfRef6 3365 0.99 2.44 0.62 118 XMLngstWrd_03 3310 0.83 2.40 0.43 119 XMLngstWrd_04 3222 0.77 2.34 0.37 120 XMBody_17 3219 0.74 2.33 0.33 121 T_TooManySym_01 3190 3.42 2.31 3.71 122 SUBJ_ALL_CAPS 3131 3.06 2.27 3.27 123 RCVD_IN_IADB_SENDERID 3110 2.63 2.25 2.72 124 RCVD_IN_IADB_DK 3093 2.57 2.24 2.65 125 UPPERCASE_75_100 3054 0.58 2.21 0.16 126 XM_B_COVIDMETA 2985 0.90 2.16 0.57 127 USER_IN_DEF_DKIM_WL 2955 6.52 2.14 7.65 128 URI_HEX 2897 1.09 2.10 0.83 129 T_FILL_THIS_FORM_SHORT 2869 0.92 2.08 0.62 130 XM_UB60 2856 0.47 2.07 0.06 131 RELAYCOUNTRY_GB 2853 0.88 2.07 0.57 132 HTML_IMAGE_RATIO_08 2844 10.90 2.06 13.16 133 XM_CamelCaseFrm001 2839 1.31 2.06 1.12 134 XM_B_SpammyWords4 2762 0.73 2.00 0.40 135 MAILING_LIST_MULTI 2756 1.82 2.00 1.77 136 HTML_FONT_SIZE_HUGE 2743 0.43 1.99 0.03 137 DKIM_ADSP_NXDOMAIN 2650 0.59 1.92 0.25 138 XMSexyCombo_01 2648 0.80 1.92 0.52 139 FROM_EXCESS_BASE64 2622 1.82 1.90 1.80 140 TR_XM_PHPDW 2587 0.58 1.88 0.24 141 URIBL_DBL_SPAM 2520 0.38 1.83 0.01 142 HTML_SHORT_LINK_IMG_1 2508 0.38 1.82 0.01 143 TR_XM_PHPForged 2492 0.53 1.81 0.20 144 XM_UB99 2455 0.37 1.78 0.00 145 TR_XM_FormFill2 2429 0.52 1.76 0.20 146 XM_H_PHPOS 2411 0.51 1.75 0.20 147 XMGenDplmaNmb 2401 0.77 1.74 0.52 148 HDRS_MISSP 2392 0.37 1.73 0.03 149 BAYES_40 2372 4.01 1.72 4.60 150 URI_NO_WWW_BIZ_CGI 2358 0.36 1.71 0.01 151 BODY_URI_ONLY 2346 0.35 1.70 0.01 152 XM_URI_RBL 2341 0.42 1.70 0.09 153 RCVD_IN_IADB_VOUCHED 2321 2.00 1.68 2.08 154 RCVD_IN_MSPIKE_L5 2267 0.36 1.64 0.03 155 T_XMHurry_00 2226 2.25 1.61 2.41 156 XMStockSpam_06 2216 1.08 1.61 0.94 157 TR_XM_NoHeaderRelay 2206 0.43 1.60 0.13 158 DIET_1 2181 0.52 1.58 0.25 159 HTML_TAG_BALANCE_CENTER 2152 0.36 1.56 0.05 160 URIBL_BLACK 2142 0.34 1.55 0.03 161 BAYES_20 2077 4.08 1.51 4.74 162 TR_XM_COVIDMETA4 2072 0.48 1.50 0.21 163 T_XMDrugObfuBody_00 2065 0.71 1.50 0.50 164 XM_Body_Dirty_Words_01 2029 0.71 1.47 0.51 165 TR_XM_INV_DKIM 2019 0.55 1.46 0.31 166 RCVD_IN_PSBL 2001 0.37 1.45 0.10 167 XM_ProductURIs 1971 0.60 1.43 0.39 168 RELAYCOUNTRY_AU 1937 0.45 1.40 0.21 169 XM_UB999 1926 0.29 1.40 0.00 170 TR_LOTS_OF_MONEY3 1904 0.43 1.38 0.18 171 FROM_DOMAIN_NOVOWEL 1859 0.28 1.35 0.00 172 XMBrknScrpt_02 1840 0.84 1.33 0.71 173 TR_XM_FormFill 1818 0.33 1.32 0.08 174 TR_Symld_Words 1791 1.20 1.30 1.18 175 BAYES_00 1785 17.69 1.29 21.89 176 XM_BadFromFormat 1783 0.32 1.29 0.08 177 TM2_M_A_HREF_HREF 1777 0.60 1.29 0.42 178 RCVD_IN_MSPIKE_L4 1777 0.52 1.29 0.32 179 XM_UB80 1743 0.27 1.26 0.02 180 MIXED_CENTER_CASE 1734 0.26 1.26 0.00 181 MIXED_HREF_CASE 1727 0.26 1.25 0.00 182 MIXED_IMG_CASE 1719 0.26 1.25 0.00 183 MIXED_AREA_CASE 1716 0.25 1.24 0.00 184 MIXED_FONT_CASE 1712 0.25 1.24 0.00 185 PDS_OTHER_BAD_TLD 1664 0.40 1.21 0.20 186 GOOG_STO_IMG_HTML 1621 0.24 1.18 0.01 187 XMBdyGiftCard01 1614 0.47 1.17 0.29 188 HTML_FONT_SIZE_LARGE 1584 0.28 1.15 0.06 189 HTTPS_HTTP_MISMATCH 1517 0.68 1.10 0.57 190 HTML_IMAGE_ONLY_24 1511 0.42 1.10 0.25 191 XMHTML_After_End 1493 0.63 1.08 0.51 192 TR_XM_BayesRelay 1478 0.22 1.07 0.00 193 TR_MetaPhish_Combo_01 1478 0.62 1.07 0.51 194 XMPhish14 1471 0.44 1.07 0.28 195 URI_TRY_3LD 1470 0.53 1.07 0.40 196 FROM_SUSPICIOUS_NTLD 1467 0.25 1.06 0.04 197 XMPhish30 1441 0.59 1.04 0.47 198 HTML_EXTRA_CLOSE 1440 0.23 1.04 0.02 199 T_MONEY_PERCENT 1406 0.32 1.02 0.14 200 TR_LOTS_OF_MONEY2 1406 0.32 1.02 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 482674 90.70 94.14 89.82 2 DCC_CHECK_NEGATIVE 429482 71.00 36.26 79.92 3 RELAYCOUNTRY_US 416805 77.58 77.68 77.56 4 XM_B_Unicode 414512 76.35 73.30 77.13 5 XM_B_Unicode3 278204 49.71 41.67 51.77 6 BAYES_50 263444 47.41 41.12 49.02 7 DKIM_SIGNED 261285 55.80 83.78 48.62 8 XM_DK_Pass 253909 54.03 80.44 47.25 9 DKIM_VALID 245109 52.14 77.56 45.61 10 XM_B_SpammyWords 243122 49.33 65.27 45.24 11 DKIM_VALID_AU 187202 39.43 57.33 34.83 12 T_TM2_M_HEADER_IN_MSG 186612 32.05 21.64 34.73 13 XMListUnsubscribeExists 168880 38.70 67.07 31.43 14 HTML_FONT_FACE_BAD 139122 20.75 0.75 25.89 15 MIME_HTML_ONLY 125423 24.94 31.17 23.34 16 BAYES_00 117651 17.69 1.29 21.89 17 XMSubLong 116416 22.31 24.83 21.66 18 ALL_TRUSTED 110977 17.34 4.44 20.65 19 DCC_CHECK 107770 28.97 63.70 20.05 20 HTML_FONT_LOW_CONTRAST 102413 21.22 29.63 19.06 21 RCVD_IN_MSPIKE_WL 101776 19.42 21.29 18.94 22 DKIM_VALID_EF 96674 20.39 29.72 17.99 23 IN_ZIMBRA_NJ_WHITELIST 95606 14.17 0.08 17.79 24 FVGT_m_MULTI_ODD 86938 19.00 30.00 16.18 25 LOC_TINY_FONT_1 82228 19.54 36.04 15.30 26 XM_SPF_SoftFail 78965 12.57 4.28 14.69 27 RCVD_IN_MSPIKE_H2 77699 16.50 24.45 14.46 28 XM_B_SpammyWords2 76467 18.46 34.92 14.23 29 XMStrtUSub 75354 12.05 4.36 14.02 30 HTML_IMAGE_RATIO_04 73929 11.97 5.01 13.76 31 HTML_IMAGE_RATIO_08 70733 10.90 2.06 13.16 32 XM_H_Trusted_IP 68944 10.21 0.00 12.83 33 LOTS_OF_MONEY 67923 12.58 12.33 12.64 34 T_KAM_HTML_FONT_INVALID 65913 15.56 28.40 12.27 35 XM_B_Unsub 63801 12.45 14.72 11.87 36 TooManyTo_001 58723 9.96 6.17 10.93 37 RCVD_IN_MSPIKE_H3 55215 10.48 11.27 10.27 38 MPART_ALT_DIFF 45969 9.30 12.21 8.55 39 XM_Body_Dirty_Words 44453 11.14 22.31 8.27 40 FILL_THIS_FORM 43925 6.57 0.31 8.17 41 KHOP_HELO_FCRDNS 42863 7.12 3.81 7.98 42 XM_Multi_Part_URI 41737 9.15 14.54 7.77 43 USER_IN_DEF_DKIM_WL 41098 6.52 2.14 7.65 44 RCVD_IN_MSPIKE_H4 40094 7.85 9.37 7.46 45 TR_XM_SpammyWords4 39150 7.96 10.58 7.29 46 XMSubMetaSx_00 39035 7.15 6.72 7.26 47 XMSexyCombo_05 38884 7.76 9.79 7.24 48 MIME_HTML_ONLY_MULTI 38876 6.84 5.29 7.23 49 XM_Evil_Numbers_Gen 36863 7.43 9.67 6.86 50 BAYES_60 32157 6.23 7.21 5.98 51 LotsOfNums_01 31983 6.23 7.34 5.95 52 XMDiploma_00 30925 5.14 2.74 5.75 53 UNPARSEABLE_RELAY 28479 6.46 10.96 5.30 54 XM_DK_Undo_02 27531 13.17 44.52 5.12 55 XMSubMetaSxObfu_03 27427 4.16 0.50 5.10 56 XM_DKIMWhitelistDomains 27073 4.01 0.03 5.04 57 HTML_IMAGE_RATIO_06 26531 4.83 4.42 4.94 58 BAYES_20 25448 4.08 1.51 4.74 59 TR_XM_DK_Bayes 25192 3.88 0.71 4.69 60 BAYES_40 24707 4.01 1.72 4.60 61 TR_XM_DK_Bayes1 24243 3.73 0.67 4.51 62 TR_XM_UnparsRelay 23012 5.59 10.67 4.28 63 BAYES_99 22387 10.56 35.45 4.17 64 XM_SendGrid 22292 4.78 7.26 4.15 65 XMSubNoVowel 21673 3.40 0.93 4.03 66 MIME_QP_LONG_LINE 21623 4.06 4.20 4.02 67 HTML_IMAGE_RATIO_02 21359 4.77 7.86 3.97 68 TR_XM_DK_Bayes2 21245 3.27 0.62 3.95 69 TR_XM_DKIM_Undo 20529 10.29 35.50 3.82 70 T_TooManySym_01 19920 3.42 2.31 3.71 71 BAYES_05 19484 3.03 0.70 3.63 72 XM_H_Long_From01 19037 3.92 5.39 3.54 73 RCVD_IN_VALIDITY_SAFE 18706 3.43 3.22 3.48 74 BAYES_999 18665 8.65 28.81 3.47 75 RCVD_IN_IADB_LISTED 18651 3.36 2.91 3.47 76 SUBJ_ALL_CAPS 17560 3.06 2.27 3.27 77 BOTNET_IPINHOSTNAME 16813 4.98 12.22 3.13 78 XM_PDF 16750 2.65 0.84 3.12 79 BAYES_95 16545 3.25 3.91 3.08 80 BOUNCE_MESSAGE 16511 2.57 0.62 3.07 81 ANY_BOUNCE_MESSAGE 16511 2.57 0.62 3.07 82 RCVD_IN_VALIDITY_CERTIFIED 16453 2.94 2.45 3.06 83 RCVD_IN_IADB_SPF 16386 2.93 2.48 3.05 84 DKIM_INVALID 16176 3.67 6.22 3.01 85 BAYES_80 15570 3.75 7.06 2.90 86 XM_B_SpammyWords3 15472 4.74 11.97 2.88 87 XM_B_Phish_Phrases 14897 3.44 6.05 2.77 88 RCVD_IN_IADB_SENDERID 14632 2.63 2.25 2.72 89 RCVD_IN_IADB_DK 14252 2.57 2.24 2.65 90 XM_E_Blogspot 14082 2.12 0.16 2.62 91 RELAYCOUNTRY_META 14028 6.27 20.53 2.61 92 TR_XM_DK_SendGrid 13982 2.91 4.12 2.60 93 XMNumbers 13730 2.75 3.49 2.55 94 TM2_M_URI_OPT_OUT 13096 2.65 3.50 2.44 95 T_XMHurry_00 12959 2.25 1.61 2.41 96 T_REMOTE_IMAGE 12821 3.16 6.16 2.39 97 FSL_BULK_SIG 12787 4.20 11.28 2.38 98 XM_UncommonTLD01 12567 4.20 11.47 2.34 99 TR_XM_PhishingBody 11819 3.25 7.37 2.20 100 RCVD_IN_IADB_VOUCHED 11165 2.00 1.68 2.08 101 T_TooManySym_02 10984 1.77 0.69 2.04 102 URI_NOVOWEL 10622 2.83 6.16 1.98 103 FROM_EXCESS_BASE64 9660 1.82 1.90 1.80 104 MAILING_LIST_MULTI 9518 1.82 2.00 1.77 105 HTML_MIME_NO_HTML_TAG 9420 2.53 5.54 1.75 106 T_XMDrugObfuBody_08 9103 2.16 3.97 1.69 107 XMSubLongNoVowel 9084 1.37 0.12 1.69 108 XMSubGarbage 9063 1.35 0.03 1.69 109 TR_XM_SB_Phish 8682 1.83 2.67 1.62 110 MIME_HTML_MOSTLY 8626 2.77 7.32 1.61 111 TM2_M_BODY_EMPTY 8612 1.82 2.67 1.60 112 XMSubPhish11 8591 1.78 2.50 1.60 113 TooManyTo_002 8470 1.38 0.61 1.58 114 XM_B_SpammyTLD 8242 1.81 2.89 1.53 115 T_XMDrugObfuBody_14 7780 1.84 3.37 1.45 116 XMEmptyBody_01 7458 1.65 2.65 1.39 117 RCVD_IN_IADB_OPTIN 7135 1.26 1.02 1.33 118 HELO_NODOT 7106 1.18 0.63 1.32 119 HELO_NO_DOMAIN 7102 1.18 0.63 1.32 120 XM_B_Phish66 7010 1.86 4.05 1.30 121 XM_DK_Undo_01 6890 1.54 2.52 1.28 122 INVALID_MSGID 6864 1.04 0.14 1.28 123 IN_HORDE_ADDRESS_BOOK 6791 1.02 0.09 1.26 124 TR_DCC_Bayes_99 6718 5.21 20.63 1.25 125 XM_B_Unsub2 6575 1.50 2.58 1.22 126 TVD_RCVD_IP 6528 1.03 0.30 1.21 127 BOTNET 6471 3.98 14.81 1.20 128 RCVD_IN_MSPIKE_H5 6467 1.09 0.66 1.20 129 TR_Symld_Words 6320 1.20 1.30 1.18 130 MSGID_NOFQDN1 6283 0.94 0.05 1.17 131 TO_MALFORMED 6144 0.91 0.01 1.14 132 XM_CamelCaseFrm001 6012 1.31 2.06 1.12 133 XM_B_Investor 5798 1.75 4.36 1.08 134 TooManyTo_003 5664 0.94 0.50 1.05 135 TM2_M_VERY_LONG_WORD 5602 1.76 4.54 1.04 136 XM_GoogleGroups 5500 1.45 3.12 1.02 137 UNTRUSTED_Relay 5411 3.18 11.66 1.01 138 TR_XM_SpammyRelay 5367 3.21 11.83 1.00 139 TR_XM_SpammyWords5 5138 1.46 3.41 0.96 140 XMStockSpam_06 5046 1.08 1.61 0.94 141 SHORTENED_URL_HREF 4993 0.77 0.14 0.93 142 XMGappySubj_01 4770 0.73 0.11 0.89 143 XMCapTrack 4724 0.83 0.66 0.88 144 URI_HEX 4473 1.09 2.10 0.83 145 TooManyTo_004 3959 0.67 0.41 0.74 146 TR_XM_SpammyWords2 3942 3.01 11.86 0.73 147 XMBrknScrpt_02 3823 0.84 1.33 0.71 148 XM_UB50 3747 1.63 5.28 0.70 149 TVD_SPACE_RATIO 3739 0.57 0.06 0.70 150 TR_XM_MaxUnsub 3723 2.01 7.16 0.69 151 XMBSHREFv2 3674 0.60 0.27 0.68 152 DKIM_ADSP_CUSTOM_MED 3642 0.70 0.78 0.68 153 RCVD_IN_RP_SAFE 3586 0.68 0.71 0.67 154 MY_SERVERS_FOUND 3509 0.55 0.14 0.65 155 XM_H_Long_From02 3378 0.70 0.97 0.63 156 HTML_IMAGE_ONLY_20 3340 0.65 0.78 0.62 157 XM_OfRef6 3334 0.99 2.44 0.62 158 T_FILL_THIS_FORM_SHORT 3314 0.92 2.08 0.62 159 RCVD_IN_MSPIKE_BL 3301 1.67 5.79 0.61 160 TR_XM_MSPIKECOMBO 3270 1.66 5.77 0.61 161 XMLngstWrd_00 3228 1.00 2.57 0.60 162 TooManyTo_005 3209 0.55 0.35 0.60 163 FROM_GOV_DKIM_AU 3177 0.59 0.58 0.59 164 RCVD_IN_RP_CERTIFIED 3170 0.57 0.51 0.59 165 RCVD_IN_BL_SPAMCOP_NET 3091 2.11 8.11 0.58 166 HTTPS_HTTP_MISMATCH 3086 0.68 1.10 0.57 167 RELAYCOUNTRY_GB 3082 0.88 2.07 0.57 168 XM_B_COVIDMETA 3064 0.90 2.16 0.57 169 XMLngstWrd_01 3023 0.96 2.51 0.56 170 RELAYCOUNTRY_CA 2948 1.40 4.71 0.55 171 XMGenDplmaNmb 2809 0.77 1.74 0.52 172 SpammyFromTLD_01 2784 1.37 4.71 0.52 173 XMSexyCombo_01 2768 0.80 1.92 0.52 174 XMHTML_After_End 2761 0.63 1.08 0.51 175 T_TooManySym_03 2758 0.48 0.33 0.51 176 XM_Body_Dirty_Words_01 2750 0.71 1.47 0.51 177 TR_MetaPhish_Combo_01 2731 0.62 1.07 0.51 178 T_XMDrugObfuBody_00 2697 0.71 1.50 0.50 179 XMLngstWrd_02 2660 0.89 2.44 0.49 180 XMBody_95 2619 0.42 0.16 0.49 181 XMPhish30 2524 0.59 1.04 0.47 182 NML_ADSP_CUSTOM_MED 2476 0.49 0.62 0.46 183 XM_B_COPY_HTML 2351 0.52 0.84 0.44 184 XMLngstWrd_03 2312 0.83 2.40 0.43 185 TM2_M_A_HREF_HREF 2283 0.60 1.29 0.42 186 T_OBFU_PDF_ATTACH 2271 0.36 0.10 0.42 187 XM_ShortIntro_01 2241 0.44 0.55 0.42 188 TR_MSPIKEBAYES00 2188 0.33 0.01 0.41 189 SHORT_HELO_AND_INLINE_IMAGE 2186 0.35 0.11 0.41 190 XMNoVowels 2184 0.51 0.93 0.41 191 HTML_TAG_BALANCE_BODY 2171 0.50 0.85 0.40 192 T_Symld_Words_02 2167 0.52 0.96 0.40 193 URI_TRY_3LD 2139 0.53 1.07 0.40 194 XM_B_SpammyWords4 2138 0.73 2.00 0.40 195 XM_ProductURIs 2075 0.60 1.43 0.39 196 RCVD_IN_SORBS_DUL 2036 0.36 0.30 0.38 197 XMLngstWrd_04 2008 0.77 2.34 0.37 198 XMMoneyMeta_00 1976 0.46 0.81 0.37 199 XM_H_PHPMailer 1921 0.48 0.97 0.36 200 XM_D_tchamptons_WL 1890 0.28 0.00 0.35 ----------------------------------------------------------------------