Email: 545388 Autolearn: 0 AvgScore: 3.76 AvgScanTime: 1.42 sec Spam: 182338 Autolearn: 0 AvgScore: 14.14 AvgScanTime: 1.53 sec Ham: 363050 Autolearn: 0 AvgScore: -1.45 AvgScanTime: 1.37 sec Time Spent Running SA: 215.67 hours Time Spent Processing Spam: 77.44 hours Time Spent Processing Ham: 138.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 174904 90.08 95.92 87.15 2 DKIM_SIGNED 152183 72.42 83.46 66.88 3 XM_DK_Pass 146526 69.84 80.36 64.55 4 DKIM_VALID 146329 69.16 80.25 63.59 5 XM_B_Unicode 143496 73.96 78.70 71.58 6 RELAYCOUNTRY_US 143481 78.95 78.69 79.08 7 DCC_CHECK 129371 44.15 70.95 30.69 8 XMListUnsubscribeExists 119901 51.16 65.76 43.83 9 XM_B_SpammyWords 114878 51.28 63.00 45.40 10 DKIM_VALID_AU 112934 53.73 61.94 49.60 11 BAYES_50 79968 49.14 43.86 51.80 12 XM_B_Unicode3 79437 43.42 43.57 43.35 13 RCVD_IN_MSPIKE_H2 74984 36.41 41.12 34.04 14 XM_DK_Undo_02 70971 16.74 38.92 5.60 15 MIME_HTML_ONLY 68354 25.51 37.49 19.49 16 FVGT_m_MULTI_ODD 64059 27.64 35.13 23.87 17 XM_B_SpammyWords2 62521 23.90 34.29 18.68 18 LOC_TINY_FONT_1 59554 24.52 32.66 20.43 19 TR_XM_DKIM_Undo 55540 12.95 30.46 4.16 20 HTML_FONT_LOW_CONTRAST 55150 25.50 30.25 23.12 21 BAYES_99 53923 13.07 29.57 4.78 22 DCC_CHECK_NEGATIVE 52935 55.80 29.03 69.25 23 DKIM_VALID_EF 50057 25.86 27.45 25.06 24 T_KAM_HTML_FONT_INVALID 45864 20.40 25.15 18.01 25 BAYES_999 42383 10.33 23.24 3.85 26 XM_Body_Dirty_Words 39227 13.32 21.51 9.20 27 XMSubLong 38956 20.83 21.36 20.56 28 T_TM2_M_HEADER_IN_MSG 38703 29.38 21.23 33.48 29 TR_DCC_Bayes_99 38095 8.03 20.89 1.56 30 RELAYCOUNTRY_META 36627 8.94 20.09 3.34 31 XM_Multi_Part_URI 28180 12.44 15.45 10.93 32 XM_B_Unsub 26630 9.81 14.60 7.41 33 TR_XM_BayesUnsub 25895 8.56 14.20 5.73 34 LOTS_OF_MONEY 24723 11.81 13.56 10.93 35 RCVD_IN_MSPIKE_WL 24152 13.09 13.25 13.01 36 FSL_BULK_SIG 22918 6.52 12.57 3.48 37 UNPARSEABLE_RELAY 22755 8.76 12.48 6.89 38 TR_XM_UnparsRelay 22267 7.67 12.21 5.39 39 BOTNET_IPINHOSTNAME 22106 6.80 12.12 4.13 40 XM_UncommonTLD01 21905 7.68 12.01 5.50 41 TR_XM_SpammyWords4 21113 9.48 11.58 8.43 42 RCVD_IN_MSPIKE_H3 20392 9.70 11.18 8.95 43 RCVD_IN_BL_SPAMCOP_NET 20383 4.26 11.18 0.79 44 MPART_ALT_DIFF 19984 6.52 10.96 4.30 45 TR_XM_SpammyRelay 19771 4.54 10.84 1.38 46 XMSexyCombo_05 19749 5.43 10.83 2.71 47 XM_B_SpammyWords3 19452 6.00 10.67 3.65 48 BOTNET 19282 4.38 10.57 1.27 49 BAYES_60 18797 9.03 10.31 8.38 50 TR_XM_SpammyWords2 16729 3.58 9.17 0.77 51 TM2_M_VERY_LONG_WORD 16588 3.75 9.10 1.07 52 HTML_MIME_NO_HTML_TAG 16559 4.20 9.08 1.75 53 XM_Evil_Numbers_Gen 16342 7.77 8.96 7.17 54 MIME_HTML_ONLY_MULTI 15750 4.90 8.64 3.03 55 UNTRUSTED_Relay 15234 3.55 8.35 1.13 56 BAYES_80 13741 6.41 7.54 5.85 57 LotsOfNums_01 13270 7.72 7.28 7.94 58 XMLngstWrd_00 12353 2.54 6.77 0.42 59 XM_SendGrid 12253 5.30 6.72 4.58 60 XM_GoogleGroups 12242 3.09 6.71 1.27 61 XMLngstWrd_01 12171 2.48 6.67 0.37 62 ALL_TRUSTED 12136 14.60 6.66 18.60 63 XMLngstWrd_02 12078 2.41 6.62 0.29 64 RELAYCOUNTRY_CA 11813 2.73 6.48 0.85 65 XMLngstWrd_03 11644 2.29 6.39 0.23 66 HTML_TITLE_SUBJ_DIFF 11585 2.14 6.35 0.02 67 XMLngstWrd_04 11548 2.23 6.33 0.16 68 TR_XM_PhishingBody 11458 4.35 6.28 3.38 69 UPPERCASE_75_100 11452 2.12 6.28 0.04 70 HTML_IMAGE_RATIO_02 11031 5.44 6.05 5.14 71 XMSubMetaSx_00 10968 4.12 6.02 3.17 72 XM_H_Long_From01 10892 5.15 5.97 4.74 73 TR_XM_SPAMCOP 10851 2.25 5.95 0.39 74 XM_B_Phish_Phrases 10145 3.73 5.56 2.80 75 XM_B_Investor 10010 3.07 5.49 1.86 76 XMStrtUSub 9286 4.73 5.09 4.54 77 RCVD_IN_MSPIKE_BL 9072 2.37 4.98 1.06 78 TR_XM_MSPIKECOMBO 8795 2.32 4.82 1.06 79 HTML_IMAGE_RATIO_04 8457 4.71 4.64 4.75 80 TooManyTo_001 8200 6.78 4.50 7.92 81 BAYES_95 7914 3.00 4.34 2.33 82 XM_B_SpammyTLD 7780 2.92 4.27 2.24 83 TR_XM_DK_SendGrid 7746 3.30 4.25 2.82 84 XM_SPF_SoftFail 7680 5.70 4.21 6.44 85 XM_B_Phish66 7651 2.63 4.20 1.85 86 PDS_FROM_NAME_TO_DOMAIN 7641 2.79 4.19 2.09 87 PDS_FRNOM_TODOM_NAKED_TO 7631 2.79 4.19 2.09 88 HTML_OBFUSCATE_05_10 7620 2.88 4.18 2.23 89 XM_DIRTYINTL 7581 1.58 4.16 0.28 90 T_XMDrugObfuBody_14 7516 2.55 4.12 1.76 91 XM_UB50 7346 1.84 4.03 0.73 92 XMFrmHeader_02 7027 1.29 3.85 0.00 93 T_REMOTE_IMAGE 6896 3.70 3.78 3.67 94 XMFrmHeader_01 6695 1.23 3.67 0.00 95 MIME_QP_LONG_LINE 6507 4.40 3.57 4.82 96 TR_XM_SpammyWords5 6280 2.00 3.44 1.27 97 XMNumbers 6257 3.96 3.43 4.22 98 SpammyFromTLD_01 5953 1.57 3.26 0.72 99 T_XMDrugObfuBody_08 5912 1.85 3.24 1.14 100 DKIM_INVALID 5854 3.26 3.21 3.28 101 HTML_IMAGE_RATIO_06 5747 5.69 3.15 6.96 102 MIME_HTML_MOSTLY 5700 2.59 3.13 2.33 103 TR_XM_SpammyWords3 5684 1.37 3.12 0.50 104 XM_OfRef6 5566 1.59 3.05 0.85 105 XM_CamelCaseFrm001 5535 2.30 3.04 1.93 106 URIBL_DBL_SPAM 5490 1.01 3.01 0.01 107 XMDiploma_00 5117 2.12 2.81 1.77 108 TM2_M_URI_OPT_OUT 5065 2.41 2.78 2.22 109 XM_B_Unsub2 5049 1.95 2.77 1.54 110 RCVD_IN_VALIDITY_SAFE 4956 3.89 2.72 4.47 111 KHOP_HELO_FCRDNS 4911 4.12 2.69 4.84 112 T_XMHurry_00 4838 2.42 2.65 2.30 113 RCVD_IN_IADB_LISTED 4681 3.87 2.57 4.53 114 T_TooManySym_01 4614 4.94 2.53 6.16 115 SpammyFromTLD_02 4499 1.10 2.47 0.41 116 USER_IN_DEF_DKIM_WL 4434 8.16 2.43 11.04 117 RCVD_IN_VALIDITY_RPBL 4414 0.84 2.42 0.04 118 BOTNET_NORDNS 4337 0.80 2.38 0.01 119 RCVD_IN_VALIDITY_CERTIFIED 4072 3.47 2.23 4.09 120 RCVD_IN_IADB_SPF 3958 3.38 2.17 3.99 121 XMSexyCombo_01 3931 0.95 2.16 0.34 122 T_FILL_THIS_FORM_SHORT 3921 1.24 2.15 0.78 123 SUBJ_ALL_CAPS 3870 1.68 2.12 1.46 124 XM_B_SpammyWords4 3840 0.98 2.11 0.41 125 PDS_OTHER_BAD_TLD 3837 0.82 2.10 0.17 126 HTML_IMAGE_RATIO_08 3787 2.51 2.08 2.73 127 URI_NOVOWEL 3777 2.14 2.07 2.18 128 XM_DK_Undo_01 3747 1.69 2.05 1.50 129 RCVD_IN_MSPIKE_L4 3681 0.70 2.02 0.03 130 RCVD_IN_MSPIKE_H4 3677 3.25 2.02 3.87 131 RCVD_IN_IADB_DK 3618 2.96 1.98 3.44 132 RCVD_IN_IADB_SENDERID 3594 3.02 1.97 3.55 133 RCVD_IN_PSBL 3530 0.79 1.94 0.22 134 XM_B_COVIDMETA 3518 1.01 1.93 0.55 135 TR_XM_SB_Phish 3505 2.14 1.92 2.24 136 FROM_EXCESS_BASE64 3450 2.22 1.89 2.38 137 XMBody_17 3436 0.86 1.88 0.35 138 XMSubPhish11 3392 2.09 1.86 2.20 139 XM_UB99 3303 0.61 1.81 0.00 140 MAILING_LIST_MULTI 3279 2.34 1.80 2.62 141 TR_XM_MSPIKECOMBO2 3192 0.66 1.75 0.11 142 URI_PHP_REDIR 3179 0.58 1.74 0.00 143 URI_HEX 3164 1.45 1.74 1.30 144 T_XMDrugObfuBody_00 3071 0.95 1.68 0.57 145 BAYES_40 3066 3.96 1.68 5.11 146 RCVD_IN_MSPIKE_L3 3017 1.23 1.65 1.02 147 HTML_TAG_BALANCE_BODY 2895 0.88 1.59 0.52 148 RCVD_IN_IADB_VOUCHED 2852 2.52 1.56 3.00 149 TR_XM_NoHeaderRelay 2750 0.58 1.51 0.11 150 XM_H_Long_From02 2613 1.32 1.43 1.26 151 XMStockSpam_06 2559 0.92 1.40 0.67 152 XM_UB999 2548 0.47 1.40 0.00 153 RELAYCOUNTRY_RU 2541 0.48 1.39 0.02 154 HTTPS_HTTP_MISMATCH 2532 0.99 1.39 0.79 155 TR_XM_PHPDW 2520 0.69 1.38 0.34 156 XM_URI_RBL 2507 0.54 1.37 0.12 157 XMGenDplmaNmb 2471 1.12 1.36 1.01 158 TR_LOTS_OF_MONEY3 2464 0.56 1.35 0.16 159 TR_XM_PHPForged 2437 0.64 1.34 0.29 160 TR_XM_FormFill2 2407 0.63 1.32 0.29 161 XM_H_PHPOS 2387 0.62 1.31 0.27 162 TR_XM_COVIDMETA4 2380 0.62 1.31 0.27 163 BAYES_20 2375 3.09 1.30 3.99 164 HK_RANDOM_REPLYTO 2318 0.50 1.27 0.11 165 XMBrknScrpt_02 2304 0.92 1.26 0.74 166 RELAYCOUNTRY_DE 2300 0.59 1.26 0.26 167 RELAYCOUNTRY_AU 2292 0.60 1.26 0.27 168 URIBL_BLACK 2275 0.46 1.25 0.06 169 TR_XM_COVIDMETA1 2246 0.57 1.23 0.24 170 XMHTML_After_End 2195 0.84 1.20 0.65 171 XMMoneyMeta_00 2170 0.74 1.19 0.51 172 XM_H_Undi_Recip 2140 0.53 1.17 0.20 173 HTML_TAG_BALANCE_CENTER 2104 0.43 1.15 0.07 174 RCVD_IN_MSPIKE_L5 2097 0.39 1.15 0.00 175 XMBdyGiftCard01 2095 0.82 1.15 0.65 176 TR_Symld_Words 2054 1.35 1.13 1.47 177 XM_B_SEO 2031 1.00 1.11 0.94 178 RELAYCOUNTRY_GB 2021 0.81 1.11 0.65 179 TR_XM_MaxSPIKE 1978 0.43 1.08 0.10 180 XMReplyNow 1965 0.53 1.08 0.26 181 XMClaimOffer 1916 0.43 1.05 0.12 182 XM_Body_Dirty_Words_01 1916 0.43 1.05 0.12 183 HTML_FONT_SIZE_HUGE 1904 0.40 1.04 0.07 184 XM_B_DynamicLink 1893 0.36 1.04 0.03 185 URI_TRY_3LD 1887 0.74 1.03 0.59 186 TR_MetaPhish_Combo_01 1887 0.95 1.03 0.91 187 RCVD_IN_IADB_OPTIN 1869 1.70 1.03 2.04 188 TR_XM_SEO4 1867 0.40 1.02 0.09 189 MPART_ALT_DIFF_COUNT 1862 0.70 1.02 0.54 190 MONEY_NOHTML 1857 0.40 1.02 0.09 191 DIET_1 1844 0.50 1.01 0.24 192 XM_PDF 1791 3.21 0.98 4.33 193 XMSexyCombo_04 1786 0.42 0.98 0.13 194 XMSubMetaSxObfu_03 1738 0.55 0.95 0.35 195 DKIM_ADSP_CUSTOM_MED 1732 0.91 0.95 0.89 196 XMSubNoVowel 1725 1.41 0.95 1.64 197 REMOVE_BEFORE_LINK 1714 0.49 0.94 0.27 198 XM_UB60 1708 0.35 0.94 0.06 199 XM_B_DNDMA 1689 0.56 0.93 0.37 200 MIXED_CENTER_CASE 1687 0.31 0.93 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 316381 90.08 95.92 87.15 2 RELAYCOUNTRY_US 287098 78.95 78.69 79.08 3 XM_B_Unicode 259881 73.96 78.70 71.58 4 DCC_CHECK_NEGATIVE 251417 55.80 29.03 69.25 5 DKIM_SIGNED 242798 72.42 83.46 66.88 6 XM_DK_Pass 234357 69.84 80.36 64.55 7 DKIM_VALID 230876 69.16 80.25 63.59 8 BAYES_50 188062 49.14 43.86 51.80 9 DKIM_VALID_AU 180082 53.73 61.94 49.60 10 XM_B_SpammyWords 164821 51.28 63.00 45.40 11 XMListUnsubscribeExists 159135 51.16 65.76 43.83 12 XM_B_Unicode3 157395 43.42 43.57 43.35 13 RCVD_IN_MSPIKE_H2 123597 36.41 41.12 34.04 14 T_TM2_M_HEADER_IN_MSG 121555 29.38 21.23 33.48 15 DCC_CHECK 111436 44.15 70.95 30.69 16 DKIM_VALID_EF 90971 25.86 27.45 25.06 17 FVGT_m_MULTI_ODD 86674 27.64 35.13 23.87 18 HTML_FONT_LOW_CONTRAST 83921 25.50 30.25 23.12 19 XMSubLong 74631 20.83 21.36 20.56 20 LOC_TINY_FONT_1 74160 24.52 32.66 20.43 21 MIME_HTML_ONLY 70771 25.51 37.49 19.49 22 XM_B_SpammyWords2 67821 23.90 34.29 18.68 23 ALL_TRUSTED 67513 14.60 6.66 18.60 24 T_KAM_HTML_FONT_INVALID 65400 20.40 25.15 18.01 25 BAYES_00 54354 10.24 0.81 14.97 26 RCVD_IN_MSPIKE_WL 47250 13.09 13.25 13.01 27 USER_IN_DEF_DKIM_WL 40074 8.16 2.43 11.04 28 XM_Multi_Part_URI 39692 12.44 15.45 10.93 29 LOTS_OF_MONEY 39673 11.81 13.56 10.93 30 IN_ZIMBRA_NJ_WHITELIST 39064 7.21 0.13 10.76 31 XM_Body_Dirty_Words 33407 13.32 21.51 9.20 32 RCVD_IN_MSPIKE_H3 32499 9.70 11.18 8.95 33 TR_XM_SpammyWords4 30617 9.48 11.58 8.43 34 BAYES_60 30439 9.03 10.31 8.38 35 LotsOfNums_01 28815 7.72 7.28 7.94 36 TooManyTo_001 28753 6.78 4.50 7.92 37 XM_DKIMWhitelistDomains 27615 5.09 0.07 7.61 38 XM_B_Unsub 26893 9.81 14.60 7.41 39 XM_Evil_Numbers_Gen 26046 7.77 8.96 7.17 40 HTML_IMAGE_RATIO_06 25267 5.69 3.15 6.96 41 UNPARSEABLE_RELAY 25020 8.76 12.48 6.89 42 XM_SPF_SoftFail 23380 5.70 4.21 6.44 43 TR_XM_DK_Bayes 22532 4.35 0.65 6.21 44 T_TooManySym_01 22346 4.94 2.53 6.16 45 TR_XM_DK_Bayes1 22064 4.26 0.64 6.08 46 BAYES_80 21228 6.41 7.54 5.85 47 TR_XM_BayesUnsub 20811 8.56 14.20 5.73 48 XM_DK_Undo_02 20339 16.74 38.92 5.60 49 XM_UncommonTLD01 19966 7.68 12.01 5.50 50 TR_XM_UnparsRelay 19567 7.67 12.21 5.39 51 TR_XM_DK_Bayes2 19367 3.71 0.48 5.33 52 HTML_IMAGE_RATIO_02 18650 5.44 6.05 5.14 53 HTML_FONT_FACE_BAD 18645 3.68 0.79 5.14 54 BAYES_40 18553 3.96 1.68 5.11 55 KHOP_HELO_FCRDNS 17557 4.12 2.69 4.84 56 MIME_QP_LONG_LINE 17488 4.40 3.57 4.82 57 BAYES_99 17365 13.07 29.57 4.78 58 HTML_IMAGE_RATIO_04 17253 4.71 4.64 4.75 59 XM_H_Long_From01 17219 5.15 5.97 4.74 60 XM_SendGrid 16626 5.30 6.72 4.58 61 XMStrtUSub 16485 4.73 5.09 4.54 62 RCVD_IN_IADB_LISTED 16437 3.87 2.57 4.53 63 RCVD_IN_VALIDITY_SAFE 16244 3.89 2.72 4.47 64 XM_PDF 15733 3.21 0.98 4.33 65 MPART_ALT_DIFF 15598 6.52 10.96 4.30 66 XMNumbers 15333 3.96 3.43 4.22 67 TR_XM_DKIM_Undo 15113 12.95 30.46 4.16 68 BOTNET_IPINHOSTNAME 14989 6.80 12.12 4.13 69 RCVD_IN_VALIDITY_CERTIFIED 14849 3.47 2.23 4.09 70 BAYES_20 14483 3.09 1.30 3.99 71 RCVD_IN_IADB_SPF 14479 3.38 2.17 3.99 72 RCVD_IN_MSPIKE_H4 14052 3.25 2.02 3.87 73 T_TooManySym_02 14029 2.81 0.70 3.86 74 BAYES_999 13965 10.33 23.24 3.85 75 T_REMOTE_IMAGE 13308 3.70 3.78 3.67 76 XM_B_SpammyWords3 13262 6.00 10.67 3.65 77 XM_H_Trusted_IP 13042 2.39 0.00 3.59 78 RCVD_IN_IADB_SENDERID 12897 3.02 1.97 3.55 79 FSL_BULK_SIG 12619 6.52 12.57 3.48 80 RCVD_IN_IADB_DK 12505 2.96 1.98 3.44 81 TR_XM_PhishingBody 12267 4.35 6.28 3.38 82 RELAYCOUNTRY_META 12139 8.94 20.09 3.34 83 DKIM_INVALID 11922 3.26 3.21 3.28 84 XMSubMetaSx_00 11492 4.12 6.02 3.17 85 MIME_HTML_ONLY_MULTI 10992 4.90 8.64 3.03 86 RCVD_IN_IADB_VOUCHED 10879 2.52 1.56 3.00 87 TR_XM_DK_SendGrid 10228 3.30 4.25 2.82 88 XM_B_Phish_Phrases 10177 3.73 5.56 2.80 89 BAYES_05 10103 2.05 0.59 2.78 90 HTML_IMAGE_RATIO_08 9923 2.51 2.08 2.73 91 XMSexyCombo_05 9841 5.43 10.83 2.71 92 MAILING_LIST_MULTI 9502 2.34 1.80 2.62 93 ANY_BOUNCE_MESSAGE 9174 1.87 0.57 2.53 94 BOUNCE_MESSAGE 9170 1.87 0.57 2.53 95 FROM_EXCESS_BASE64 8649 2.22 1.89 2.38 96 BAYES_95 8457 3.00 4.34 2.33 97 MIME_HTML_MOSTLY 8447 2.59 3.13 2.33 98 T_XMHurry_00 8366 2.42 2.65 2.30 99 TR_XM_SB_Phish 8141 2.14 1.92 2.24 100 XM_B_SpammyTLD 8129 2.92 4.27 2.24 101 HTML_OBFUSCATE_05_10 8086 2.88 4.18 2.23 102 TM2_M_URI_OPT_OUT 8063 2.41 2.78 2.22 103 XMSubPhish11 8001 2.09 1.86 2.20 104 URI_NOVOWEL 7903 2.14 2.07 2.18 105 TooManyTo_002 7872 1.59 0.44 2.17 106 PDS_FROM_NAME_TO_DOMAIN 7582 2.79 4.19 2.09 107 PDS_FRNOM_TODOM_NAKED_TO 7580 2.79 4.19 2.09 108 RCVD_IN_IADB_OPTIN 7396 1.70 1.03 2.04 109 HELO_NODOT 7316 1.51 0.50 2.02 110 HELO_NO_DOMAIN 7296 1.50 0.49 2.01 111 XM_CamelCaseFrm001 6996 2.30 3.04 1.93 112 INVALID_MSGID 6910 1.31 0.13 1.90 113 XM_B_Investor 6751 3.07 5.49 1.86 114 XM_B_Phish66 6708 2.63 4.20 1.85 115 XMDiploma_00 6425 2.12 2.81 1.77 116 IN_HORDE_ADDRESS_BOOK 6415 1.22 0.12 1.77 117 T_XMDrugObfuBody_14 6407 2.55 4.12 1.76 118 TVD_RCVD_IP 6399 1.26 0.26 1.76 119 HTML_MIME_NO_HTML_TAG 6352 4.20 9.08 1.75 120 XMSubNoVowel 5951 1.41 0.95 1.64 121 TO_MALFORMED 5845 1.09 0.05 1.61 122 TR_DCC_Bayes_99 5675 8.03 20.89 1.56 123 XM_B_Unsub2 5605 1.95 2.77 1.54 124 T_TooManySym_03 5560 1.13 0.33 1.53 125 XM_DK_Undo_01 5444 1.69 2.05 1.50 126 TR_Symld_Words 5331 1.35 1.13 1.47 127 SUBJ_ALL_CAPS 5307 1.68 2.12 1.46 128 TooManyTo_003 5169 1.06 0.35 1.42 129 TR_XM_SpammyRelay 5005 4.54 10.84 1.38 130 URI_HEX 4733 1.45 1.74 1.30 131 XM_GoogleGroups 4612 3.09 6.71 1.27 132 TR_XM_SpammyWords5 4607 2.00 3.44 1.27 133 BOTNET 4596 4.38 10.57 1.27 134 XMGappySubj_01 4588 0.90 0.18 1.26 135 XM_H_Long_From02 4568 1.32 1.43 1.26 136 XMBSHREFv2 4493 0.93 0.30 1.24 137 XMCapTrack 4248 0.89 0.33 1.17 138 T_XMDrugObfuBody_08 4151 1.85 3.24 1.14 139 UNTRUSTED_Relay 4115 3.55 8.35 1.13 140 TM2_M_VERY_LONG_WORD 3875 3.75 9.10 1.07 141 RCVD_IN_MSPIKE_BL 3846 2.37 4.98 1.06 142 TR_XM_MSPIKECOMBO 3840 2.32 4.82 1.06 143 TooManyTo_004 3712 0.77 0.28 1.02 144 RCVD_IN_MSPIKE_L3 3703 1.23 1.65 1.02 145 XMGenDplmaNmb 3649 1.12 1.36 1.01 146 TVD_SPACE_RATIO 3424 0.69 0.19 0.94 147 XM_B_SEO 3404 1.00 1.11 0.94 148 TR_MetaPhish_Combo_01 3292 0.95 1.03 0.91 149 XM_ProductURIs 3287 0.85 0.73 0.91 150 DKIM_ADSP_CUSTOM_MED 3238 0.91 0.95 0.89 151 XMPhish30 3106 0.84 0.80 0.86 152 XM_OfRef6 3093 1.59 3.05 0.85 153 RELAYCOUNTRY_CA 3092 2.73 6.48 0.85 154 RCVD_IN_RP_SAFE 2988 0.76 0.63 0.82 155 TooManyTo_005 2977 0.62 0.21 0.82 156 FVGT_m_MULTI_ODD_EMAIL 2962 0.57 0.07 0.82 157 HTTPS_HTTP_MISMATCH 2880 0.99 1.39 0.79 158 RCVD_IN_BL_SPAMCOP_NET 2861 4.26 11.18 0.79 159 T_FILL_THIS_FORM_SHORT 2825 1.24 2.15 0.78 160 TR_XM_SpammyWords2 2789 3.58 9.17 0.77 161 RCVD_IN_RP_CERTIFIED 2751 0.68 0.53 0.76 162 XMBrknScrpt_02 2704 0.92 1.26 0.74 163 XM_UB50 2665 1.84 4.03 0.73 164 XMSubMetaI_00 2607 0.70 0.67 0.72 165 SpammyFromTLD_01 2599 1.57 3.26 0.72 166 XMStockSpam_06 2440 0.92 1.40 0.67 167 T_OBFU_PDF_ATTACH 2437 0.55 0.29 0.67 168 XMBody_95 2406 0.48 0.11 0.66 169 RELAYCOUNTRY_GB 2371 0.81 1.11 0.65 170 XMHTML_After_End 2369 0.84 1.20 0.65 171 XMBdyGiftCard01 2363 0.82 1.15 0.65 172 MSGID_NOFQDN1 2317 0.43 0.00 0.64 173 SHORT_HELO_AND_INLINE_IMAGE 2213 0.43 0.07 0.61 174 XM_ShortIntro_01 2193 0.51 0.33 0.60 175 NML_ADSP_CUSTOM_MED 2174 0.64 0.72 0.60 176 XMHTMLBadTable_001 2160 0.69 0.88 0.59 177 URI_TRY_3LD 2132 0.74 1.03 0.59 178 T_XMDrugObfuBody_00 2085 0.95 1.68 0.57 179 TVD_SPACE_RATIO_MINFP 2042 0.41 0.11 0.56 180 FROM_GOV_DKIM_AU 2031 0.45 0.22 0.56 181 XM_B_COVIDMETA 2008 1.01 1.93 0.55 182 MPART_ALT_DIFF_COUNT 1978 0.70 1.02 0.54 183 HTML_IMAGE_ONLY_20 1946 0.63 0.82 0.54 184 HTML_TAG_BALANCE_BODY 1900 0.88 1.59 0.52 185 XM_H_PHPMailer 1893 0.55 0.60 0.52 186 XMMoneyMeta_00 1860 0.74 1.19 0.51 187 XMNoVowels 1826 0.45 0.34 0.50 188 TR_XM_SpammyWords3 1806 1.37 3.12 0.50 189 RCVD_IN_SORBS_DUL 1782 0.37 0.13 0.49 190 FORGED_GMAIL_RCVD 1743 0.60 0.84 0.48 191 T_Symld_Words_02 1692 0.61 0.89 0.47 192 XM_B_COPY_HTML 1632 0.55 0.76 0.45 193 HTML_IMAGE_ONLY_32 1629 0.35 0.15 0.45 194 BASE64_LENGTH_79_INF 1563 0.34 0.17 0.43 195 USER_IN_WHITELIST 1529 0.28 0.00 0.42 196 USER_IN_WELCOMELIST 1529 0.28 0.00 0.42 197 XMLngstWrd_00 1518 2.54 6.77 0.42 198 TM2_M_BODY_EMPTY 1510 0.35 0.21 0.42 199 MISSING_HEADERS 1500 0.39 0.35 0.41 200 XM_B_SpammyWords4 1487 0.98 2.11 0.41 ----------------------------------------------------------------------