Email: 460002 Autolearn: 0 AvgScore: 3.02 AvgScanTime: 1.20 sec Spam: 136729 Autolearn: 0 AvgScore: 13.82 AvgScanTime: 1.33 sec Ham: 323273 Autolearn: 0 AvgScore: -1.55 AvgScanTime: 1.14 sec Time Spent Running SA: 153.17 hours Time Spent Processing Spam: 50.59 hours Time Spent Processing Ham: 102.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130467 89.68 95.42 87.25 2 DKIM_SIGNED 118042 75.53 86.33 70.96 3 XM_DK_Pass 114955 74.07 84.08 69.84 4 DKIM_VALID 113368 73.01 82.91 68.82 5 RELAYCOUNTRY_US 108398 79.82 79.28 80.05 6 XM_B_Unicode 106071 71.73 77.58 69.26 7 DCC_CHECK 97212 43.70 71.10 32.11 8 XMListUnsubscribeExists 93598 53.28 68.46 46.86 9 XM_B_SpammyWords 89648 51.54 65.57 45.61 10 DKIM_VALID_AU 84291 55.60 61.65 53.04 11 XM_B_Unicode3 60400 42.92 44.17 42.39 12 BAYES_50 57901 50.84 42.35 54.43 13 XM_DK_Undo_02 57838 17.57 42.30 7.11 14 XM_B_SpammyWords2 49202 24.96 35.99 20.30 15 LOC_TINY_FONT_1 48283 25.88 35.31 21.90 16 MIME_HTML_ONLY 47017 25.63 34.39 21.92 17 TR_XM_DKIM_Undo 45674 13.34 33.40 4.85 18 HTML_FONT_LOW_CONTRAST 45191 29.26 33.05 27.66 19 BAYES_99 44347 13.87 32.43 6.01 20 FVGT_m_MULTI_ODD 42415 25.35 31.02 22.96 21 DCC_CHECK_NEGATIVE 39467 56.26 28.87 67.84 22 DKIM_VALID_EF 39179 27.54 28.65 27.07 23 T_KAM_HTML_FONT_INVALID 38106 21.22 27.87 18.41 24 BAYES_999 34378 10.96 25.14 4.96 25 RCVD_IN_MSPIKE_H2 33871 21.12 24.77 19.58 26 XM_Body_Dirty_Words 32170 15.20 23.53 11.68 27 RELAYCOUNTRY_META 31406 9.27 22.97 3.48 28 TR_DCC_Bayes_99 30921 8.06 22.61 1.90 29 XMSubLong 30317 21.42 22.17 21.10 30 T_TM2_M_HEADER_IN_MSG 30137 26.87 22.04 28.92 31 RCVD_IN_MSPIKE_WL 27761 26.86 20.30 29.63 32 XM_Multi_Part_URI 24086 13.91 17.62 12.34 33 LOTS_OF_MONEY 22179 11.13 16.22 8.98 34 XM_B_Unsub 20477 13.44 14.98 12.78 35 TR_XM_SpammyWords4 19419 8.11 14.20 5.54 36 UNPARSEABLE_RELAY 19022 9.59 13.91 7.76 37 RCVD_IN_MSPIKE_H3 18978 15.84 13.88 16.67 38 TR_XM_UnparsRelay 18722 8.40 13.69 6.16 39 BOTNET_IPINHOSTNAME 18703 7.54 13.68 4.94 40 FSL_BULK_SIG 17962 6.21 13.14 3.28 41 UNTRUSTED_Relay 17133 4.55 12.53 1.17 42 XMSexyCombo_05 16636 6.13 12.17 3.58 43 MPART_ALT_DIFF 16154 8.70 11.81 7.38 44 TR_XM_SpammyRelay 16079 4.47 11.76 1.38 45 XM_B_SpammyWords3 15055 6.40 11.01 4.45 46 BOTNET 14834 4.32 10.85 1.56 47 TR_XM_SpammyWords2 14802 3.94 10.83 1.02 48 RCVD_IN_BL_SPAMCOP_NET 14039 3.65 10.27 0.85 49 RCVD_IN_MSPIKE_BL 13104 3.73 9.58 1.25 50 TR_XM_MSPIKECOMBO 12958 3.70 9.48 1.25 51 XM_UncommonTLD01 12175 5.25 8.90 3.70 52 XM_Evil_Numbers_Gen 11903 8.14 8.71 7.91 53 HTML_IMAGE_RATIO_02 11616 6.91 8.50 6.24 54 BAYES_80 10835 5.41 7.92 4.35 55 XM_SendGrid 10670 6.18 7.80 5.49 56 BAYES_60 10281 8.72 7.52 9.23 57 XMSubMetaSx_00 9614 5.02 7.03 4.17 58 LotsOfNums_01 9301 8.45 6.80 9.15 59 XM_H_Long_From01 9254 5.68 6.77 5.23 60 TR_XM_MaxUnsub 8972 2.69 6.56 1.05 61 MIME_HTML_ONLY_MULTI 8872 5.71 6.49 5.38 62 RELAYCOUNTRY_CA 8857 2.52 6.48 0.85 63 TR_XM_PhishingBody 8696 4.10 6.36 3.14 64 RCVD_IN_MSPIKE_H4 8334 9.54 6.10 11.00 65 HTML_MIME_NO_HTML_TAG 8303 3.51 6.07 2.42 66 XM_UB50 7903 2.28 5.78 0.79 67 MIME_HTML_MOSTLY 7854 3.46 5.74 2.49 68 XM_B_Phish_Phrases 7782 3.77 5.69 2.96 69 TR_XM_SPAMCOP 7683 1.88 5.62 0.30 70 XM_B_SpammyTLD 7429 3.18 5.43 2.23 71 TR_XM_SpammyWords3 7330 1.98 5.36 0.55 72 XM_B_Investor 7318 2.78 5.35 1.70 73 TM2_M_VERY_LONG_WORD 7190 2.97 5.26 2.00 74 TooManyTo_001 7042 8.95 5.15 10.56 75 URI_NOVOWEL 6829 3.25 4.99 2.52 76 T_REMOTE_IMAGE 6768 4.07 4.95 3.70 77 TR_XM_DK_SendGrid 6286 3.80 4.60 3.46 78 BAYES_95 6170 3.36 4.51 2.87 79 SpammyFromTLD_02 5964 1.74 4.36 0.62 80 RCVD_IN_MSPIKE_L5 5875 1.30 4.30 0.03 81 RCVD_IN_MSPIKE_L3 5843 1.68 4.27 0.58 82 XMNumbers 5565 3.89 4.07 3.81 83 HTML_IMAGE_RATIO_06 5404 3.71 3.95 3.61 84 XM_DIRTYINTL 5388 1.40 3.94 0.33 85 XM_OfRef6 5302 1.86 3.88 1.01 86 HTML_IMAGE_RATIO_04 5290 5.87 3.87 6.72 87 XM_SPF_SoftFail 5238 2.44 3.83 1.85 88 KHOP_HELO_FCRDNS 5205 1.98 3.81 1.21 89 XM_B_Phish66 5171 2.48 3.78 1.93 90 T_XMDrugObfuBody_14 5102 2.45 3.73 1.91 91 XMStrtUSub 5038 4.08 3.68 4.25 92 RELAYCOUNTRY_FR 5024 1.23 3.67 0.20 93 MIME_QP_LONG_LINE 4895 6.74 3.58 8.07 94 TR_XM_SpammyWords5 4688 2.10 3.43 1.53 95 DKIM_INVALID 4674 2.52 3.42 2.14 96 PDS_OTHER_BAD_TLD 4653 1.13 3.40 0.17 97 RCVD_IN_VALIDITY_SAFE 4594 4.06 3.36 4.36 98 T_XMDrugObfuBody_08 4560 2.02 3.34 1.46 99 TM2_M_URI_OPT_OUT 4522 5.01 3.31 5.73 100 SpammyFromTLD_01 4497 1.44 3.29 0.66 101 XM_GoogleGroups 4306 2.30 3.15 1.93 102 XMLngstWrd_00 4169 1.68 3.05 1.10 103 XMLngstWrd_01 4096 1.62 3.00 1.04 104 RCVD_IN_IADB_LISTED 4090 4.64 2.99 5.34 105 RCVD_IN_VALIDITY_CERTIFIED 4009 3.61 2.93 3.90 106 XMLngstWrd_02 4004 1.55 2.93 0.97 107 URIBL_DBL_SPAM 3858 0.86 2.82 0.04 108 XM_DK_Undo_01 3780 1.88 2.76 1.51 109 RCVD_IN_VALIDITY_RPBL 3710 0.83 2.71 0.04 110 XM_CamelCaseFrm001 3602 2.01 2.63 1.74 111 XMLngstWrd_03 3582 1.40 2.62 0.88 112 HTML_TITLE_SUBJ_DIFF 3513 1.28 2.57 0.74 113 XMLngstWrd_04 3509 1.35 2.57 0.83 114 T_FILL_THIS_FORM_SHORT 3507 1.40 2.56 0.90 115 RCVD_IN_IADB_SPF 3491 4.13 2.55 4.80 116 HTML_IMAGE_RATIO_08 3460 2.22 2.53 2.08 117 UPPERCASE_75_100 3387 1.26 2.48 0.74 118 RCVD_IN_PSBL 3348 0.82 2.45 0.13 119 XMBody_17 3339 1.02 2.44 0.41 120 TR_XM_SB_Phish 3323 2.19 2.43 2.09 121 T_TooManySym_01 3291 5.24 2.41 6.44 122 TR_XM_MSPIKECOMBO2 3277 0.88 2.40 0.23 123 XM_B_SpammyWords4 3195 1.34 2.34 0.92 124 RCVD_IN_IADB_DK 3150 3.67 2.30 4.25 125 RCVD_IN_IADB_SENDERID 3130 3.74 2.29 4.36 126 XMSubPhish11 3100 2.13 2.27 2.07 127 XM_B_COVIDMETA 3067 1.15 2.24 0.69 128 URI_PHP_REDIR 3060 0.67 2.24 0.00 129 XM_B_Unsub2 3023 1.52 2.21 1.23 130 TR_Mismatch_TLD_01 2938 0.81 2.15 0.24 131 USER_IN_DEF_DKIM_WL 2899 9.04 2.12 11.97 132 T_XMDrugObfuBody_00 2784 1.17 2.04 0.81 133 XM_UB60 2712 0.63 1.98 0.06 134 BAYES_40 2701 4.15 1.98 5.08 135 ALL_TRUSTED 2666 12.94 1.95 17.60 136 RCVD_IN_IADB_VOUCHED 2659 2.79 1.94 3.15 137 URI_LONG_REPEAT 2631 0.58 1.92 0.00 138 XMSexyCombo_01 2562 1.43 1.87 1.25 139 FROM_EXCESS_BASE64 2556 2.49 1.87 2.75 140 URI_HEX 2494 1.55 1.82 1.43 141 URI_TRY_3LD 2402 1.00 1.76 0.68 142 SUBJ_ALL_CAPS 2379 1.77 1.74 1.79 143 TR_XM_PHPDW 2374 0.78 1.74 0.38 144 XM_UB99 2362 0.51 1.73 0.00 145 HTML_IMAGE_ONLY_08 2317 0.59 1.69 0.12 146 MAILING_LIST_MULTI 2314 2.22 1.69 2.44 147 TR_LOTS_OF_MONEY3 2305 0.75 1.69 0.35 148 BOTNET_NORDNS 2278 0.51 1.67 0.02 149 HTML_TAG_BALANCE_CENTER 2263 0.59 1.66 0.14 150 TR_XM_PHPForged 2261 0.73 1.65 0.34 151 XMDiploma_00 2247 1.40 1.64 1.30 152 TR_XM_FormFill2 2220 0.72 1.62 0.34 153 XM_H_PHPOS 2207 0.71 1.61 0.33 154 DIET_1 2172 0.82 1.59 0.50 155 XMStockSpam_06 2130 1.36 1.56 1.27 156 TR_XM_COVIDMETA1 2127 0.81 1.56 0.49 157 BAYES_20 2107 3.28 1.54 4.01 158 TR_XM_COVIDMETA4 2079 0.57 1.52 0.17 159 XMBdyGiftCard01 2046 1.04 1.50 0.85 160 XM_H_Undi_Recip 2022 0.60 1.48 0.23 161 MIXED_CENTER_CASE 2020 0.44 1.48 0.00 162 TR_XM_NoHeaderRelay 2012 0.55 1.47 0.16 163 MIXED_HREF_CASE 2009 0.44 1.47 0.00 164 MIXED_IMG_CASE 1994 0.44 1.46 0.01 165 MIXED_AREA_CASE 1974 0.43 1.44 0.00 166 MIXED_FONT_CASE 1947 0.43 1.42 0.01 167 TR_XM_BayesRelay 1938 0.42 1.42 0.00 168 XMHTML_After_End 1934 0.88 1.41 0.65 169 TM2_M_A_HREF_HREF 1881 0.89 1.38 0.69 170 URI_GOOG_STO_SPAMMY 1862 0.41 1.36 0.00 171 RELAYCOUNTRY_AU 1839 0.61 1.34 0.30 172 RELAYCOUNTRY_RU 1831 0.41 1.34 0.02 173 HTTPS_HTTP_MISMATCH 1816 0.83 1.33 0.62 174 RELAYCOUNTRY_DE 1804 0.58 1.32 0.27 175 URIBL_BLACK 1803 0.42 1.32 0.04 176 XM_URI_RBL 1793 0.48 1.31 0.13 177 XM_UB999 1763 0.38 1.29 0.00 178 TR_XM_MaxSPIKE 1755 0.44 1.28 0.08 179 T_XMHurry_00 1731 0.67 1.27 0.42 180 XMPhish30 1694 0.81 1.24 0.62 181 XM_B_SEO 1666 0.44 1.22 0.11 182 XM_H_Long_From02 1661 0.98 1.21 0.88 183 XM_UB80 1642 0.37 1.20 0.02 184 TR_Mismatch_TLD_02 1594 0.40 1.17 0.08 185 BODY_URI_ONLY 1563 0.35 1.14 0.02 186 RCVD_IN_IADB_OPTIN 1558 1.81 1.14 2.09 187 HTML_TAG_BALANCE_BODY 1545 0.81 1.13 0.67 188 HTML_FONT_TINY_NORDNS 1524 0.38 1.11 0.07 189 HTML_FONT_SIZE_HUGE 1492 0.37 1.09 0.07 190 TR_XM_SEO4 1479 0.37 1.08 0.07 191 HTML_FONT_FACE_BAD 1452 1.64 1.06 1.89 192 TR_Symld_Words 1451 1.44 1.06 1.60 193 XMSubMetaI_00 1427 0.61 1.04 0.42 194 TR_BOTNET_NEGATE 1400 0.55 1.02 0.35 195 RELAYCOUNTRY_IN 1388 0.35 1.02 0.08 196 XMReplyNow 1382 0.45 1.01 0.21 197 HTML_FONT_SIZE_LARGE 1376 0.35 1.01 0.07 198 TR_MetaPhish_Combo_01 1371 0.87 1.00 0.82 199 MONEY_NOHTML 1319 0.36 0.96 0.10 200 XM_Body_Dirty_Words_01 1318 0.39 0.96 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 282054 89.68 95.42 87.25 2 RELAYCOUNTRY_US 258796 79.82 79.28 80.05 3 DKIM_SIGNED 229388 75.53 86.33 70.96 4 XM_DK_Pass 225767 74.07 84.08 69.84 5 XM_B_Unicode 223905 71.73 77.58 69.26 6 DKIM_VALID 222472 73.01 82.91 68.82 7 DCC_CHECK_NEGATIVE 219324 56.26 28.87 67.84 8 BAYES_50 175969 50.84 42.35 54.43 9 DKIM_VALID_AU 171476 55.60 61.65 53.04 10 XMListUnsubscribeExists 151488 53.28 68.46 46.86 11 XM_B_SpammyWords 147437 51.54 65.57 45.61 12 XM_B_Unicode3 137032 42.92 44.17 42.39 13 DCC_CHECK 103800 43.70 71.10 32.11 14 RCVD_IN_MSPIKE_WL 95789 26.86 20.30 29.63 15 T_TM2_M_HEADER_IN_MSG 93484 26.87 22.04 28.92 16 HTML_FONT_LOW_CONTRAST 89418 29.26 33.05 27.66 17 DKIM_VALID_EF 87498 27.54 28.65 27.07 18 FVGT_m_MULTI_ODD 74211 25.35 31.02 22.96 19 MIME_HTML_ONLY 70872 25.63 34.39 21.92 20 LOC_TINY_FONT_1 70784 25.88 35.31 21.90 21 XMSubLong 68207 21.42 22.17 21.10 22 XM_B_SpammyWords2 65622 24.96 35.99 20.30 23 RCVD_IN_MSPIKE_H2 63288 21.12 24.77 19.58 24 T_KAM_HTML_FONT_INVALID 59510 21.22 27.87 18.41 25 ALL_TRUSTED 56881 12.94 1.95 17.60 26 RCVD_IN_MSPIKE_H3 53885 15.84 13.88 16.67 27 XM_B_Unsub 41327 13.44 14.98 12.78 28 XM_Multi_Part_URI 39879 13.91 17.62 12.34 29 USER_IN_DEF_DKIM_WL 38704 9.04 2.12 11.97 30 XM_Body_Dirty_Words 37747 15.20 23.53 11.68 31 BAYES_00 37216 8.36 0.90 11.51 32 RCVD_IN_MSPIKE_H4 35557 9.54 6.10 11.00 33 TooManyTo_001 34138 8.95 5.15 10.56 34 BAYES_60 29854 8.72 7.52 9.23 35 LotsOfNums_01 29575 8.45 6.80 9.15 36 LOTS_OF_MONEY 29015 11.13 16.22 8.98 37 MIME_QP_LONG_LINE 26091 6.74 3.58 8.07 38 XM_Evil_Numbers_Gen 25558 8.14 8.71 7.91 39 XM_DKIMWhitelistDomains 25463 5.59 0.18 7.88 40 UNPARSEABLE_RELAY 25081 9.59 13.91 7.76 41 MPART_ALT_DIFF 23869 8.70 11.81 7.38 42 XM_DK_Undo_02 22978 17.57 42.30 7.11 43 IN_ZIMBRA_NJ_WHITELIST 22080 4.83 0.11 6.83 44 HTML_IMAGE_RATIO_04 21709 5.87 3.87 6.72 45 T_TooManySym_01 20808 5.24 2.41 6.44 46 HTML_IMAGE_RATIO_02 20170 6.91 8.50 6.24 47 TR_XM_DK_Bayes 20013 4.54 0.63 6.19 48 TR_XM_UnparsRelay 19929 8.40 13.69 6.16 49 TR_XM_DK_Bayes1 19583 4.44 0.62 6.06 50 BAYES_99 19435 13.87 32.43 6.01 51 TM2_M_URI_OPT_OUT 18536 5.01 3.31 5.73 52 XM_H_Trusted_IP 17928 3.90 0.00 5.55 53 TR_XM_SpammyWords4 17899 8.11 14.20 5.54 54 XM_SendGrid 17763 6.18 7.80 5.49 55 MIME_HTML_ONLY_MULTI 17396 5.71 6.49 5.38 56 RCVD_IN_IADB_LISTED 17264 4.64 2.99 5.34 57 TR_XM_DK_Bayes2 17186 3.87 0.47 5.32 58 XM_H_Long_From01 16896 5.68 6.77 5.23 59 BAYES_40 16411 4.15 1.98 5.08 60 BAYES_999 16047 10.96 25.14 4.96 61 BOTNET_IPINHOSTNAME 15984 7.54 13.68 4.94 62 TR_XM_DKIM_Undo 15691 13.34 33.40 4.85 63 RCVD_IN_IADB_SPF 15526 4.13 2.55 4.80 64 XM_B_SpammyWords3 14386 6.40 11.01 4.45 65 RCVD_IN_VALIDITY_SAFE 14102 4.06 3.36 4.36 66 RCVD_IN_IADB_SENDERID 14091 3.74 2.29 4.36 67 BAYES_80 14059 5.41 7.92 4.35 68 RCVD_IN_IADB_DK 13743 3.67 2.30 4.25 69 XMStrtUSub 13735 4.08 3.68 4.25 70 XMSubMetaSx_00 13485 5.02 7.03 4.17 71 XM_PDF 13253 3.13 0.83 4.10 72 BAYES_20 12971 3.28 1.54 4.01 73 RCVD_IN_VALIDITY_CERTIFIED 12620 3.61 2.93 3.90 74 T_TooManySym_02 12364 2.89 0.70 3.82 75 XMNumbers 12332 3.89 4.07 3.81 76 XM_UncommonTLD01 11963 5.25 8.90 3.70 77 T_REMOTE_IMAGE 11945 4.07 4.95 3.70 78 HTML_IMAGE_RATIO_06 11664 3.71 3.95 3.61 79 XMSexyCombo_05 11571 6.13 12.17 3.58 80 RELAYCOUNTRY_META 11235 9.27 22.97 3.48 81 TR_XM_DK_SendGrid 11187 3.80 4.60 3.46 82 FSL_BULK_SIG 10591 6.21 13.14 3.28 83 RCVD_IN_IADB_VOUCHED 10188 2.79 1.94 3.15 84 TR_XM_PhishingBody 10149 4.10 6.36 3.14 85 BOUNCE_MESSAGE 9692 2.39 0.94 3.00 86 ANY_BOUNCE_MESSAGE 9692 2.39 0.94 3.00 87 XM_B_Phish_Phrases 9567 3.77 5.69 2.96 88 BAYES_95 9281 3.36 4.51 2.87 89 FROM_EXCESS_BASE64 8896 2.49 1.87 2.75 90 URI_NOVOWEL 8136 3.25 4.99 2.52 91 BAYES_05 8071 2.00 0.82 2.50 92 MIME_HTML_MOSTLY 8051 3.46 5.74 2.49 93 MAILING_LIST_MULTI 7889 2.22 1.69 2.44 94 HTML_MIME_NO_HTML_TAG 7821 3.51 6.07 2.42 95 SHORT_URI_2 7249 1.69 0.38 2.24 96 XM_B_SpammyTLD 7193 3.18 5.43 2.23 97 TooManyTo_002 7030 1.80 0.92 2.17 98 DKIM_INVALID 6916 2.52 3.42 2.14 99 RCVD_IN_IADB_OPTIN 6765 1.81 1.14 2.09 100 TR_XM_SB_Phish 6755 2.19 2.43 2.09 101 HTML_IMAGE_RATIO_08 6737 2.22 2.53 2.08 102 XMSubPhish11 6689 2.13 2.27 2.07 103 INVALID_MSGID 6579 1.50 0.23 2.04 104 TM2_M_VERY_LONG_WORD 6480 2.97 5.26 2.00 105 RCVD_IN_MSPIKE_H5 6347 1.48 0.33 1.96 106 XM_B_Phish66 6255 2.48 3.78 1.93 107 XM_GoogleGroups 6254 2.30 3.15 1.93 108 T_XMDrugObfuBody_14 6183 2.45 3.73 1.91 109 TR_DCC_Bayes_99 6150 8.06 22.61 1.90 110 HTML_FONT_FACE_BAD 6114 1.64 1.06 1.89 111 XM_SPF_SoftFail 5967 2.44 3.83 1.85 112 TO_MALFORMED 5814 1.27 0.01 1.80 113 IN_HORDE_ADDRESS_BOOK 5796 1.29 0.11 1.79 114 SUBJ_ALL_CAPS 5783 1.77 1.74 1.79 115 XM_CamelCaseFrm001 5625 2.01 2.63 1.74 116 TVD_RCVD_IP 5545 1.24 0.12 1.72 117 XM_B_Investor 5480 2.78 5.35 1.70 118 TR_Symld_Words 5177 1.44 1.06 1.60 119 BOTNET 5029 4.32 10.85 1.56 120 XMGappySubj_01 4985 1.12 0.11 1.54 121 TR_XM_SpammyWords5 4950 2.10 3.43 1.53 122 XMSubNoVowel 4944 1.34 0.90 1.53 123 HELO_NODOT 4937 1.22 0.49 1.53 124 HELO_NO_DOMAIN 4935 1.22 0.48 1.53 125 XM_DK_Undo_01 4885 1.88 2.76 1.51 126 TooManyTo_003 4777 1.28 0.81 1.48 127 T_XMDrugObfuBody_08 4730 2.02 3.34 1.46 128 URI_HEX 4637 1.55 1.82 1.43 129 TR_XM_SpammyRelay 4471 4.47 11.76 1.38 130 XMBSHREFv2 4191 1.01 0.33 1.30 131 XMDiploma_00 4190 1.40 1.64 1.30 132 XMStockSpam_06 4112 1.36 1.56 1.27 133 RCVD_IN_MSPIKE_BL 4050 3.73 9.58 1.25 134 TR_XM_MSPIKECOMBO 4047 3.70 9.48 1.25 135 XMSexyCombo_01 4027 1.43 1.87 1.25 136 XM_B_Unsub2 3974 1.52 2.21 1.23 137 KHOP_HELO_FCRDNS 3908 1.98 3.81 1.21 138 TVD_SPACE_RATIO 3804 0.99 0.56 1.18 139 UNTRUSTED_Relay 3789 4.55 12.53 1.17 140 XMLngstWrd_00 3547 1.68 3.05 1.10 141 HTML_IMAGE_ONLY_20 3456 0.85 0.35 1.07 142 XMCapTrack 3446 0.86 0.36 1.07 143 TR_XM_MaxUnsub 3405 2.69 6.56 1.05 144 XMLngstWrd_01 3346 1.62 3.00 1.04 145 TooManyTo_004 3335 0.92 0.67 1.03 146 TR_XM_SpammyWords2 3306 3.94 10.83 1.02 147 XM_OfRef6 3251 1.86 3.88 1.01 148 XMLngstWrd_02 3123 1.55 2.93 0.97 149 XM_B_SpammyWords4 2980 1.34 2.34 0.92 150 T_FILL_THIS_FORM_SHORT 2916 1.40 2.56 0.90 151 RCVD_IN_RP_SAFE 2863 0.81 0.64 0.89 152 XMLngstWrd_03 2848 1.40 2.62 0.88 153 XM_H_Long_From02 2841 0.98 1.21 0.88 154 DKIM_ADSP_CUSTOM_MED 2749 0.85 0.86 0.85 155 XMBdyGiftCard01 2748 1.04 1.50 0.85 156 RELAYCOUNTRY_CA 2743 2.52 6.48 0.85 157 RCVD_IN_BL_SPAMCOP_NET 2740 3.65 10.27 0.85 158 XMBody_95 2697 0.63 0.14 0.83 159 XMLngstWrd_04 2686 1.35 2.57 0.83 160 TooManyTo_005 2669 0.77 0.64 0.83 161 TR_MetaPhish_Combo_01 2647 0.87 1.00 0.82 162 T_XMDrugObfuBody_00 2612 1.17 2.04 0.81 163 RCVD_IN_RP_CERTIFIED 2587 0.72 0.52 0.80 164 XM_UB50 2565 2.28 5.78 0.79 165 FROM_GOV_DKIM_AU 2465 0.57 0.13 0.76 166 UPPERCASE_75_100 2403 1.26 2.48 0.74 167 HTML_TITLE_SUBJ_DIFF 2391 1.28 2.57 0.74 168 T_TooManySym_03 2388 0.61 0.29 0.74 169 MSGID_NOFQDN1 2302 0.51 0.02 0.71 170 TM2_M_A_HREF_HREF 2230 0.89 1.38 0.69 171 XM_B_COPY_HTML 2229 0.74 0.87 0.69 172 XM_B_COVIDMETA 2228 1.15 2.24 0.69 173 URI_TRY_3LD 2183 1.00 1.76 0.68 174 XM_ProductURIs 2165 0.76 0.96 0.67 175 HTML_TAG_BALANCE_BODY 2165 0.81 1.13 0.67 176 XM_RXBody 2143 0.67 0.67 0.66 177 SpammyFromTLD_01 2118 1.44 3.29 0.66 178 XMHTML_After_End 2097 0.88 1.41 0.65 179 XMGenDplmaNmb 2078 0.71 0.88 0.64 180 RCVD_IN_MSPIKE_L4 2059 0.72 0.91 0.64 181 SpammyFromTLD_02 2020 1.74 4.36 0.62 182 XMPhish30 2011 0.81 1.24 0.62 183 XMSexyCombo_04 2009 0.61 0.58 0.62 184 HTTPS_HTTP_MISMATCH 2008 0.83 1.33 0.62 185 RELAYCOUNTRY_GB 1977 0.71 0.93 0.61 186 XMBrknScrpt_02 1892 0.67 0.87 0.59 187 XM_ShortIntro_01 1890 0.59 0.62 0.58 188 RCVD_IN_MSPIKE_L3 1885 1.68 4.27 0.58 189 TR_MSPIKEBAYES00 1849 0.41 0.02 0.57 190 XM_H_PHPMailer 1839 0.65 0.85 0.57 191 DKIM_ADSP_NXDOMAIN 1771 0.66 0.93 0.55 192 T_OBFU_PDF_ATTACH 1766 0.42 0.13 0.55 193 TR_XM_SpammyWords3 1765 1.98 5.36 0.55 194 XM_D_tchamptons_WL 1750 0.38 0.00 0.54 195 TVD_SPACE_RATIO_MINFP 1746 0.43 0.17 0.54 196 NML_ADSP_CUSTOM_MED 1743 0.60 0.73 0.54 197 XMNoVowels 1729 0.47 0.32 0.53 198 DIET_1 1615 0.82 1.59 0.50 199 XMSubMetaSxObfu_03 1590 0.62 0.94 0.49 200 TR_XM_COVIDMETA1 1584 0.81 1.56 0.49 ----------------------------------------------------------------------