Email: 564589 Autolearn: 0 AvgScore: 0.49 AvgScanTime: 1.34 sec Spam: 131474 Autolearn: 0 AvgScore: 14.10 AvgScanTime: 1.54 sec Ham: 433115 Autolearn: 0 AvgScore: -3.63 AvgScanTime: 1.28 sec Time Spent Running SA: 210.20 hours Time Spent Processing Spam: 56.29 hours Time Spent Processing Ham: 153.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 126705 90.59 96.37 88.84 2 DKIM_SIGNED 113022 64.84 85.97 58.42 3 DKIM_VALID 108165 62.42 82.27 56.39 4 XM_DK_Pass 108004 63.02 82.15 57.21 5 RELAYCOUNTRY_US 103203 77.82 78.50 77.61 6 XM_B_Unicode 100584 74.64 76.50 74.07 7 DCC_CHECK 92876 36.54 70.64 26.19 8 XMListUnsubscribeExists 88796 44.28 67.54 37.22 9 XM_B_SpammyWords 85843 45.40 65.29 39.36 10 DKIM_VALID_AU 81482 48.01 61.98 43.77 11 BAYES_50 55135 51.09 41.94 53.86 12 XM_B_Unicode3 55038 47.30 41.86 48.94 13 XM_DK_Undo_02 54851 14.25 41.72 5.91 14 LOC_TINY_FONT_1 46355 22.38 35.26 18.47 15 XM_B_SpammyWords2 45754 19.48 34.80 14.83 16 MIME_HTML_ONLY 45709 30.39 34.77 29.06 17 BAYES_99 44465 11.37 33.82 4.56 18 HTML_FONT_LOW_CONTRAST 43102 24.58 32.78 22.09 19 DKIM_VALID_EF 42557 24.84 32.37 22.56 20 TR_XM_DKIM_Undo 41654 10.61 31.68 4.22 21 FVGT_m_MULTI_ODD 40835 21.82 31.06 19.02 22 DCC_CHECK_NEGATIVE 38557 63.43 29.33 73.78 23 BAYES_999 35338 9.11 26.88 3.72 24 T_KAM_HTML_FONT_INVALID 35052 16.96 26.66 14.02 25 XMSubLong 34734 26.42 26.42 26.42 26 RCVD_IN_MSPIKE_H2 34089 19.00 25.93 16.90 27 T_TM2_M_HEADER_IN_MSG 31834 24.48 24.21 24.55 28 TR_DCC_Bayes_99 31235 6.74 23.76 1.57 29 XM_Body_Dirty_Words 30262 13.19 23.02 10.20 30 RELAYCOUNTRY_META 29571 7.65 22.49 3.14 31 RCVD_IN_MSPIKE_WL 29044 23.86 22.09 24.40 32 XM_Multi_Part_URI 21118 10.88 16.06 9.30 33 XM_B_Unsub 20616 14.74 15.68 14.46 34 BOTNET 19209 4.47 14.61 1.39 35 UNTRUSTED_Relay 18375 4.09 13.98 1.09 36 RCVD_IN_MSPIKE_H3 18348 13.44 13.96 13.29 37 LOTS_OF_MONEY 17648 7.83 13.42 6.13 38 FSL_BULK_SIG 16579 5.21 12.61 2.97 39 BOTNET_IPINHOSTNAME 16502 5.76 12.55 3.69 40 UNPARSEABLE_RELAY 16387 7.46 12.46 5.94 41 TR_XM_UnparsRelay 16059 6.41 12.21 4.65 42 XM_UncommonTLD01 15855 5.01 12.06 2.87 43 XMSexyCombo_05 15287 5.13 11.63 3.16 44 TR_XM_SpammyRelay 15275 3.58 11.62 1.14 45 XM_B_SpammyWords3 14759 5.37 11.23 3.60 46 TR_XM_SpammyWords4 14380 5.50 10.94 3.85 47 MPART_ALT_DIFF 13810 10.78 10.50 10.86 48 TR_XM_SpammyWords2 12621 2.80 9.60 0.73 49 XM_Evil_Numbers_Gen 12513 8.47 9.52 8.15 50 RCVD_IN_BL_SPAMCOP_NET 12141 2.74 9.23 0.76 51 XM_SendGrid 10832 5.39 8.24 4.53 52 HTML_IMAGE_RATIO_02 10781 5.53 8.20 4.72 53 BAYES_80 10282 4.48 7.82 3.46 54 RCVD_IN_MSPIKE_H4 9993 9.09 7.60 9.54 55 LotsOfNums_01 9829 7.31 7.48 7.26 56 TR_XM_MaxUnsub 9475 2.30 7.21 0.81 57 BAYES_60 9306 7.33 7.08 7.41 58 XM_H_Long_From01 9119 5.01 6.94 4.43 59 TR_XM_PhishingBody 8321 3.55 6.33 2.70 60 HTML_MIME_NO_HTML_TAG 8269 3.22 6.29 2.28 61 MIME_HTML_ONLY_MULTI 8243 8.41 6.27 9.07 62 XM_B_Phish_Phrases 8150 3.39 6.20 2.54 63 RCVD_IN_MSPIKE_BL 7961 2.09 6.06 0.89 64 XM_UB50 7829 1.91 5.95 0.69 65 TR_XM_MSPIKECOMBO 7733 2.04 5.88 0.88 66 XMSubMetaSx_00 7704 3.31 5.86 2.54 67 TM2_M_VERY_LONG_WORD 7070 2.27 5.38 1.32 68 SpammyFromTLD_02 6667 1.48 5.07 0.39 69 TooManyTo_001 6628 11.30 5.04 13.20 70 XM_SPF_SoftFail 6619 2.59 5.03 1.84 71 XMNumbers 6583 3.53 5.01 3.08 72 XMStrtUSub 6291 9.96 4.78 11.53 73 HTML_IMAGE_RATIO_04 6188 13.88 4.71 16.66 74 TR_XM_DK_SendGrid 6129 3.30 4.66 2.88 75 TR_XM_SpammyWords5 5953 1.95 4.53 1.17 76 TR_XM_SPAMCOP 5946 1.32 4.52 0.35 77 MIME_HTML_MOSTLY 5912 2.75 4.50 2.21 78 BAYES_95 5831 2.62 4.44 2.06 79 RELAYCOUNTRY_CA 5824 1.52 4.43 0.64 80 T_XMDrugObfuBody_14 5807 2.32 4.42 1.69 81 HTML_IMAGE_RATIO_06 5711 5.49 4.34 5.84 82 XM_B_Investor 5701 1.96 4.34 1.23 83 SpammyFromTLD_01 5305 1.43 4.04 0.64 84 XM_B_SpammyTLD 5179 2.21 3.94 1.69 85 XM_GoogleGroups 4988 2.04 3.79 1.50 86 MIME_QP_LONG_LINE 4936 4.39 3.75 4.58 87 RCVD_IN_PSBL 4899 0.96 3.73 0.11 88 DKIM_INVALID 4857 2.42 3.69 2.03 89 RCVD_IN_VALIDITY_SAFE 4688 3.92 3.57 4.02 90 BOTNET_NORDNS 4678 0.84 3.56 0.02 91 T_REMOTE_IMAGE 4655 3.21 3.54 3.11 92 TM2_M_URI_OPT_OUT 4649 2.74 3.54 2.50 93 URI_NOVOWEL 4520 2.28 3.44 1.93 94 TR_XM_SpammyWords3 4511 1.14 3.43 0.45 95 XM_UB99 4403 0.78 3.35 0.00 96 XMLngstWrd_00 4378 1.48 3.33 0.91 97 XMLngstWrd_01 4206 1.40 3.20 0.86 98 HTML_IMAGE_RATIO_08 4164 2.27 3.17 2.00 99 XM_DIRTYINTL 4159 0.95 3.16 0.27 100 XMLngstWrd_02 4082 1.32 3.10 0.78 101 XM_DK_Undo_01 4028 1.77 3.06 1.37 102 RCVD_IN_MSPIKE_L5 4000 0.80 3.04 0.12 103 XMLngstWrd_03 3997 1.23 3.04 0.68 104 RCVD_IN_VALIDITY_CERTIFIED 3942 3.54 3.00 3.70 105 XMLngstWrd_04 3872 1.16 2.95 0.62 106 XM_B_Phish66 3839 1.85 2.92 1.52 107 XM_CamelCaseFrm001 3822 1.76 2.91 1.41 108 HTML_TITLE_SUBJ_DIFF 3811 0.98 2.90 0.40 109 RCVD_IN_IADB_LISTED 3784 3.88 2.88 4.19 110 RCVD_IN_VALIDITY_RPBL 3764 0.68 2.86 0.02 111 UPPERCASE_75_100 3741 0.98 2.85 0.41 112 KHOP_HELO_FCRDNS 3596 1.65 2.74 1.33 113 XM_OfRef6 3594 1.23 2.73 0.78 114 XM_B_Unsub2 3499 1.63 2.66 1.32 115 T_TooManySym_01 3493 4.31 2.66 4.82 116 XM_UB999 3380 0.60 2.57 0.00 117 RCVD_IN_IADB_SPF 3287 3.48 2.50 3.78 118 MAILING_LIST_MULTI 3210 2.31 2.44 2.26 119 HTML_FONT_TINY_NORDNS 3145 0.60 2.39 0.06 120 T_XMDrugObfuBody_08 3119 1.57 2.37 1.33 121 RCVD_IN_IADB_DK 3028 3.08 2.30 3.32 122 RCVD_IN_IADB_SENDERID 3025 3.17 2.30 3.43 123 XMDiploma_00 2993 1.33 2.28 1.05 124 RELAYCOUNTRY_FR 2936 0.69 2.23 0.22 125 SUBJ_ALL_CAPS 2772 1.69 2.11 1.56 126 URI_HEX 2728 1.24 2.07 0.99 127 RCVD_IN_MSPIKE_L3 2724 0.80 2.07 0.41 128 DKIM_ADSP_CUSTOM_MED 2648 1.02 2.01 0.71 129 XMStockSpam_06 2598 1.59 1.98 1.47 130 XM_URI_RBL 2583 0.55 1.96 0.12 131 BAYES_40 2565 4.21 1.95 4.89 132 T_FILL_THIS_FORM_SHORT 2459 0.96 1.87 0.69 133 XM_B_COVIDMETA 2407 0.76 1.83 0.44 134 DKIM_ADSP_NXDOMAIN 2387 0.61 1.82 0.25 135 USER_IN_DEF_DKIM_WL 2386 7.92 1.81 9.77 136 T_XMDrugObfuBody_00 2379 0.76 1.81 0.45 137 TR_XM_NoHeaderRelay 2323 0.54 1.77 0.16 138 PDS_OTHER_BAD_TLD 2323 0.49 1.77 0.11 139 TR_XM_PHPDW 2321 0.63 1.77 0.28 140 XMSexyCombo_01 2312 0.64 1.76 0.30 141 XM_B_SpammyWords4 2310 0.76 1.76 0.46 142 ADMITS_SPAM 2266 0.46 1.72 0.07 143 RELAYCOUNTRY_AU 2246 0.58 1.71 0.23 144 TR_XM_PHPForged 2238 0.58 1.70 0.24 145 TR_XM_FormFill2 2212 0.58 1.68 0.24 146 XM_H_PHPOS 2188 0.57 1.66 0.23 147 FORGED_GMAIL_RCVD 2178 0.65 1.66 0.34 148 RCVD_IN_IADB_VOUCHED 2166 2.25 1.65 2.44 149 RELAYCOUNTRY_GB 2158 0.87 1.64 0.63 150 TR_XM_SB_Phish 2060 1.68 1.57 1.71 151 FROM_EXCESS_BASE64 2044 1.88 1.55 1.97 152 XM_UB60 2043 0.41 1.55 0.06 153 NML_ADSP_CUSTOM_MED 2041 0.71 1.55 0.46 154 TR_Symld_Words 2036 1.54 1.55 1.54 155 TM2_M_A_HREF_HREF 2033 0.64 1.55 0.37 156 XMSubPhish11 1997 1.65 1.52 1.69 157 RELAYCOUNTRY_NL 1989 0.46 1.51 0.14 158 ALL_TRUSTED 1939 16.03 1.47 20.45 159 URIBL_BLACK 1930 0.37 1.47 0.03 160 XMHTML_After_End 1928 0.78 1.47 0.57 161 HTML_IMAGE_ONLY_32 1927 0.63 1.47 0.37 162 XMBrknScrpt_02 1847 0.80 1.40 0.61 163 BAYES_20 1840 3.91 1.40 4.68 164 XMPhish30 1802 0.79 1.37 0.61 165 RELAYCOUNTRY_RU 1801 0.35 1.37 0.04 166 TooManyTo_002 1801 1.79 1.37 1.92 167 URIBL_DBL_SPAM 1780 0.32 1.35 0.01 168 DIET_1 1778 0.55 1.35 0.30 169 TR_LOTS_OF_MONEY2 1733 0.44 1.32 0.17 170 T_MONEY_PERCENT 1733 0.44 1.32 0.17 171 XMBody_17 1679 0.52 1.28 0.30 172 TooManyTo_003 1639 1.25 1.25 1.26 173 XM_RECPTID 1630 0.29 1.24 0.01 174 TR_BOTNET_NEGATE 1624 0.50 1.24 0.28 175 TR_LOTS_OF_MONEY3 1621 0.44 1.23 0.21 176 XMBdyGiftCard01 1599 0.75 1.22 0.61 177 HK_RANDOM_REPLYTO 1594 0.35 1.21 0.09 178 TR_XM_FormFill 1562 0.28 1.19 0.01 179 TR_Mismatch_TLD_02 1561 0.32 1.19 0.05 180 TR_XM_COVIDMETA1 1553 0.46 1.18 0.24 181 JH_SPAMMY_HEADERS 1540 0.27 1.17 0.00 182 TooManyTo_004 1526 0.95 1.16 0.88 183 XMPhish14 1519 0.53 1.16 0.33 184 URI_TRY_3LD 1515 0.66 1.15 0.50 185 HTTPS_HTTP_MISMATCH 1497 0.73 1.14 0.61 186 TR_XM_BayesRelay 1471 0.26 1.12 0.00 187 TooManyTo_005 1463 0.80 1.11 0.70 188 XM_H_Long_From02 1457 0.85 1.11 0.77 189 T_Symld_Words_02 1445 0.55 1.10 0.38 190 XMSubNoVowel 1432 3.98 1.09 4.86 191 XMBody_78 1426 0.48 1.08 0.30 192 XM_H_Undi_Recip 1425 0.37 1.08 0.15 193 XM_UB80 1423 0.27 1.08 0.02 194 XMGenDplmaNmb 1404 0.68 1.07 0.56 195 TR_XM_RelayPhish 1403 0.28 1.07 0.04 196 T_XMHurry_00 1370 0.49 1.04 0.33 197 XM_Body_Dirty_Words_01 1340 0.32 1.02 0.10 198 HTML_TAG_BALANCE_CENTER 1339 0.28 1.02 0.06 199 TR_Mismatch_TLD_01 1297 0.40 0.99 0.22 200 HTML_IMAGE_ONLY_20 1295 0.63 0.98 0.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 384774 90.59 96.37 88.84 2 RELAYCOUNTRY_US 336142 77.82 78.50 77.61 3 XM_B_Unicode 320813 74.64 76.50 74.07 4 DCC_CHECK_NEGATIVE 319535 63.43 29.33 73.78 5 DKIM_SIGNED 253032 64.84 85.97 58.42 6 XM_DK_Pass 247778 63.02 82.15 57.21 7 DKIM_VALID 244229 62.42 82.27 56.39 8 BAYES_50 233292 51.09 41.94 53.86 9 XM_B_Unicode3 211987 47.30 41.86 48.94 10 DKIM_VALID_AU 189590 48.01 61.98 43.77 11 XM_B_SpammyWords 170458 45.40 65.29 39.36 12 XMListUnsubscribeExists 161218 44.28 67.54 37.22 13 MIME_HTML_ONLY 125854 30.39 34.77 29.06 14 XMSubLong 114423 26.42 26.42 26.42 15 DCC_CHECK 113414 36.54 70.64 26.19 16 T_TM2_M_HEADER_IN_MSG 106351 24.48 24.21 24.55 17 RCVD_IN_MSPIKE_WL 105690 23.86 22.09 24.40 18 DKIM_VALID_EF 97700 24.84 32.37 22.56 19 HTML_FONT_LOW_CONTRAST 95681 24.58 32.78 22.09 20 ALL_TRUSTED 88558 16.03 1.47 20.45 21 FVGT_m_MULTI_ODD 82362 21.82 31.06 19.02 22 LOC_TINY_FONT_1 80016 22.38 35.26 18.47 23 RCVD_IN_MSPIKE_H2 73190 19.00 25.93 16.90 24 HTML_IMAGE_RATIO_04 72168 13.88 4.71 16.66 25 BAYES_00 69392 12.49 0.84 16.02 26 XM_H_Trusted_IP 67097 11.88 0.00 15.49 27 HTML_FONT_FACE_BAD 65934 11.88 0.85 15.22 28 XM_B_SpammyWords2 64218 19.48 34.80 14.83 29 XM_B_Unsub 62622 14.74 15.68 14.46 30 T_KAM_HTML_FONT_INVALID 60713 16.96 26.66 14.02 31 RCVD_IN_MSPIKE_H3 57546 13.44 13.96 13.29 32 TooManyTo_001 57160 11.30 5.04 13.20 33 XMStrtUSub 49949 9.96 4.78 11.53 34 MPART_ALT_DIFF 47052 10.78 10.50 10.86 35 XM_Body_Dirty_Words 44191 13.19 23.02 10.20 36 USER_IN_DEF_DKIM_WL 42321 7.92 1.81 9.77 37 RCVD_IN_MSPIKE_H4 41302 9.09 7.60 9.54 38 XM_Multi_Part_URI 40286 10.88 16.06 9.30 39 MIME_HTML_ONLY_MULTI 39262 8.41 6.27 9.07 40 XM_Evil_Numbers_Gen 35320 8.47 9.52 8.15 41 BAYES_60 32085 7.33 7.08 7.41 42 LotsOfNums_01 31453 7.31 7.48 7.26 43 XM_DKIMWhitelistDomains 31046 5.53 0.11 7.17 44 LOTS_OF_MONEY 26536 7.83 13.42 6.13 45 UNPARSEABLE_RELAY 25716 7.46 12.46 5.94 46 TR_XM_DK_Bayes 25644 4.65 0.47 5.92 47 XM_DK_Undo_02 25592 14.25 41.72 5.91 48 HTML_IMAGE_RATIO_06 25304 5.49 4.34 5.84 49 IN_ZIMBRA_NJ_WHITELIST 25198 4.49 0.10 5.82 50 TR_XM_DK_Bayes1 25050 4.55 0.47 5.78 51 TR_XM_DK_Bayes2 22288 4.03 0.34 5.15 52 BAYES_40 21193 4.21 1.95 4.89 53 XMSubNoVowel 21029 3.98 1.09 4.86 54 T_TooManySym_01 20856 4.31 2.66 4.82 55 HTML_IMAGE_RATIO_02 20432 5.53 8.20 4.72 56 BAYES_20 20257 3.91 1.40 4.68 57 TR_XM_UnparsRelay 20124 6.41 12.21 4.65 58 MIME_QP_LONG_LINE 19846 4.39 3.75 4.58 59 BAYES_99 19755 11.37 33.82 4.56 60 XM_SendGrid 19603 5.39 8.24 4.53 61 XM_H_Long_From01 19173 5.01 6.94 4.43 62 TR_XM_DKIM_Undo 18257 10.61 31.68 4.22 63 RCVD_IN_IADB_LISTED 18138 3.88 2.88 4.19 64 RCVD_IN_VALIDITY_SAFE 17416 3.92 3.57 4.02 65 XM_PDF 17375 3.28 0.86 4.01 66 TR_XM_SpammyWords4 16694 5.50 10.94 3.85 67 RCVD_IN_IADB_SPF 16358 3.48 2.50 3.78 68 BAYES_999 16092 9.11 26.88 3.72 69 RCVD_IN_VALIDITY_CERTIFIED 16019 3.54 3.00 3.70 70 BOTNET_IPINHOSTNAME 15991 5.76 12.55 3.69 71 ANY_BOUNCE_MESSAGE 15878 3.02 0.88 3.67 72 BOUNCE_MESSAGE 15873 3.02 0.88 3.66 73 XM_B_SpammyWords3 15585 5.37 11.23 3.60 74 BAYES_80 14995 4.48 7.82 3.46 75 RCVD_IN_IADB_SENDERID 14853 3.17 2.30 3.43 76 RCVD_IN_IADB_DK 14376 3.08 2.30 3.32 77 XMSexyCombo_05 13688 5.13 11.63 3.16 78 RELAYCOUNTRY_META 13619 7.65 22.49 3.14 79 T_REMOTE_IMAGE 13479 3.21 3.54 3.11 80 XMNumbers 13348 3.53 5.01 3.08 81 BAYES_05 13200 2.51 0.72 3.05 82 FSL_BULK_SIG 12854 5.21 12.61 2.97 83 TR_XM_DK_SendGrid 12494 3.30 4.66 2.88 84 XM_UncommonTLD01 12414 5.01 12.06 2.87 85 TR_XM_PhishingBody 11696 3.55 6.33 2.70 86 T_TooManySym_02 11604 2.27 0.93 2.68 87 XMSubMetaSx_00 11006 3.31 5.86 2.54 88 XM_B_Phish_Phrases 10988 3.39 6.20 2.54 89 TM2_M_URI_OPT_OUT 10830 2.74 3.54 2.50 90 RCVD_IN_IADB_VOUCHED 10557 2.25 1.65 2.44 91 HTML_MIME_NO_HTML_TAG 9896 3.22 6.29 2.28 92 MAILING_LIST_MULTI 9805 2.31 2.44 2.26 93 MIME_HTML_MOSTLY 9587 2.75 4.50 2.21 94 BAYES_95 8935 2.62 4.44 2.06 95 DKIM_INVALID 8803 2.42 3.69 2.03 96 XMSubGarbage 8779 1.63 0.33 2.03 97 HTML_IMAGE_RATIO_08 8671 2.27 3.17 2.00 98 XMSubLongNoVowel 8620 1.63 0.46 1.99 99 FROM_EXCESS_BASE64 8544 1.88 1.55 1.97 100 URI_NOVOWEL 8356 2.28 3.44 1.93 101 TooManyTo_002 8330 1.79 1.37 1.92 102 XM_SPF_SoftFail 7986 2.59 5.03 1.84 103 TR_XM_SB_Phish 7417 1.68 1.57 1.71 104 XMSubPhish11 7341 1.65 1.52 1.69 105 XM_B_SpammyTLD 7315 2.21 3.94 1.69 106 T_XMDrugObfuBody_14 7301 2.32 4.42 1.69 107 RCVD_IN_IADB_OPTIN 6953 1.46 0.98 1.61 108 INVALID_MSGID 6915 1.36 0.57 1.60 109 RCVD_IN_MSPIKE_H5 6842 1.34 0.53 1.58 110 TR_DCC_Bayes_99 6811 6.74 23.76 1.57 111 SUBJ_ALL_CAPS 6760 1.69 2.11 1.56 112 HELO_NODOT 6691 1.36 0.74 1.54 113 HELO_NO_DOMAIN 6690 1.35 0.72 1.54 114 TR_Symld_Words 6672 1.54 1.55 1.54 115 TVD_RCVD_IP 6637 1.29 0.49 1.53 116 XM_B_Phish66 6593 1.85 2.92 1.52 117 IN_HORDE_ADDRESS_BOOK 6591 1.19 0.10 1.52 118 XM_GoogleGroups 6505 2.04 3.79 1.50 119 XMStockSpam_06 6352 1.59 1.98 1.47 120 MSGID_NOFQDN1 6311 1.18 0.25 1.46 121 XM_CamelCaseFrm001 6100 1.76 2.91 1.41 122 TO_MALFORMED 6053 1.08 0.01 1.40 123 BOTNET 6021 4.47 14.61 1.39 124 XM_DK_Undo_01 5944 1.77 3.06 1.37 125 T_XMDrugObfuBody_08 5754 1.57 2.37 1.33 126 KHOP_HELO_FCRDNS 5741 1.65 2.74 1.33 127 TM2_M_VERY_LONG_WORD 5731 2.27 5.38 1.32 128 XM_B_Unsub2 5725 1.63 2.66 1.32 129 TooManyTo_003 5441 1.25 1.25 1.26 130 XM_B_Investor 5340 1.96 4.34 1.23 131 TR_XM_SpammyWords5 5075 1.95 4.53 1.17 132 XM_E_Blogspot 5037 0.94 0.21 1.16 133 TR_XM_SpammyRelay 4929 3.58 11.62 1.14 134 XMGappySubj_01 4885 0.90 0.15 1.13 135 SHORTENED_URL_HREF 4792 0.90 0.23 1.11 136 UNTRUSTED_Relay 4726 4.09 13.98 1.09 137 XMDiploma_00 4537 1.33 2.28 1.05 138 XMCapTrack 4452 0.95 0.68 1.03 139 URI_HEX 4276 1.24 2.07 0.99 140 XMLngstWrd_00 3952 1.48 3.33 0.91 141 RCVD_IN_MSPIKE_BL 3847 2.09 6.06 0.89 142 TooManyTo_004 3816 0.95 1.16 0.88 143 TVD_SPACE_RATIO 3812 0.70 0.13 0.88 144 TR_XM_MSPIKECOMBO 3808 2.04 5.88 0.88 145 XMLngstWrd_01 3708 1.40 3.20 0.86 146 XMBSHREFv2 3696 0.74 0.37 0.85 147 TR_XM_MaxUnsub 3518 2.30 7.21 0.81 148 XMLngstWrd_02 3392 1.32 3.10 0.78 149 XM_OfRef6 3366 1.23 2.73 0.78 150 RCVD_IN_RP_SAFE 3331 0.76 0.72 0.77 151 XM_H_Long_From02 3318 0.85 1.11 0.77 152 RCVD_IN_BL_SPAMCOP_NET 3303 2.74 9.23 0.76 153 TR_XM_SpammyWords2 3181 2.80 9.60 0.73 154 DKIM_ADSP_CUSTOM_MED 3086 1.02 2.01 0.71 155 RCVD_IN_RP_CERTIFIED 3081 0.68 0.58 0.71 156 TooManyTo_005 3045 0.80 1.11 0.70 157 T_FILL_THIS_FORM_SHORT 2986 0.96 1.87 0.69 158 XM_UB50 2981 1.91 5.95 0.69 159 XMLngstWrd_03 2958 1.23 3.04 0.68 160 T_TooManySym_03 2911 0.60 0.37 0.67 161 TR_MetaPhish_Combo_01 2883 0.72 0.88 0.67 162 SpammyFromTLD_01 2768 1.43 4.04 0.64 163 RELAYCOUNTRY_CA 2752 1.52 4.43 0.64 164 RELAYCOUNTRY_GB 2744 0.87 1.64 0.63 165 XMLngstWrd_04 2666 1.16 2.95 0.62 166 XMBrknScrpt_02 2663 0.80 1.40 0.61 167 XMBdyGiftCard01 2657 0.75 1.22 0.61 168 FROM_GOV_DKIM_AU 2651 0.56 0.40 0.61 169 HTTPS_HTTP_MISMATCH 2637 0.73 1.14 0.61 170 XMPhish30 2631 0.79 1.37 0.61 171 XMBody_95 2614 0.51 0.20 0.60 172 TR_MSPIKEBAYES00 2557 0.46 0.02 0.59 173 XMHTML_After_End 2464 0.78 1.47 0.57 174 XMGenDplmaNmb 2415 0.68 1.07 0.56 175 T_OBFU_PDF_ATTACH 2413 0.47 0.19 0.56 176 XM_ShortIntro_01 2406 0.51 0.35 0.56 177 XM_B_COPY_HTML 2340 0.58 0.72 0.54 178 XM_RXBody 2273 0.59 0.82 0.52 179 HTML_IMAGE_ONLY_20 2252 0.63 0.98 0.52 180 HTML_TAG_BALANCE_BODY 2245 0.62 0.96 0.52 181 URI_TRY_3LD 2186 0.66 1.15 0.50 182 PLING_QUERY 2093 0.50 0.56 0.48 183 XMNoVowels 2087 0.49 0.53 0.48 184 XM_H_PHPMailer 2015 0.55 0.81 0.47 185 SHORT_HELO_AND_INLINE_IMAGE 2000 0.38 0.12 0.46 186 XM_B_SpammyWords4 1976 0.76 1.76 0.46 187 NML_ADSP_CUSTOM_MED 1971 0.71 1.55 0.46 188 TR_XM_SpammyWords3 1940 1.14 3.43 0.45 189 T_XMDrugObfuBody_00 1936 0.76 1.81 0.45 190 XM_B_COVIDMETA 1906 0.76 1.83 0.44 191 XM_D_tchamptons_WL 1903 0.34 0.01 0.44 192 RCVD_IN_SORBS_DUL 1893 0.42 0.38 0.44 193 XMMoneyMeta_00 1879 0.51 0.78 0.43 194 UPPERCASE_75_100 1790 0.98 2.85 0.41 195 RCVD_IN_MSPIKE_L3 1779 0.80 2.07 0.41 196 T_MANY_PILL_PRICE 1751 0.31 0.00 0.40 197 HTML_TITLE_SUBJ_DIFF 1736 0.98 2.90 0.40 198 MPART_ALT_DIFF_COUNT 1719 0.51 0.87 0.40 199 FROM_GOV_SPOOF 1673 0.32 0.09 0.39 200 SpammyFromTLD_02 1672 1.48 5.07 0.39 ----------------------------------------------------------------------