Email: 481618 Autolearn: 0 AvgScore: 2.91 AvgScanTime: 1.41 sec Spam: 153709 Autolearn: 0 AvgScore: 13.80 AvgScanTime: 1.57 sec Ham: 327909 Autolearn: 0 AvgScore: -2.19 AvgScanTime: 1.34 sec Time Spent Running SA: 188.95 hours Time Spent Processing Spam: 66.88 hours Time Spent Processing Ham: 122.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147177 89.15 95.75 86.05 2 DKIM_SIGNED 135450 75.53 88.12 69.62 3 XM_DK_Pass 131749 73.93 85.71 68.41 4 DKIM_VALID 130175 72.99 84.69 67.50 5 XM_B_Unicode 129535 74.18 84.27 69.45 6 RELAYCOUNTRY_US 127208 81.53 82.76 80.95 7 DCC_CHECK 108803 43.42 70.79 30.59 8 XM_B_SpammyWords 106402 50.90 69.22 42.31 9 XMListUnsubscribeExists 103464 52.76 67.31 45.94 10 DKIM_VALID_AU 94810 54.60 61.68 51.28 11 RCVD_IN_MSPIKE_H2 78943 40.89 51.36 35.98 12 XM_DK_Undo_02 69493 19.22 45.21 7.04 13 XM_B_Unicode3 69129 43.82 44.97 43.28 14 BAYES_50 61936 49.21 40.29 53.39 15 LOC_TINY_FONT_1 59468 27.41 38.69 22.13 16 XM_B_SpammyWords2 59350 24.16 38.61 17.39 17 BAYES_99 54339 15.66 35.35 6.42 18 HTML_FONT_LOW_CONTRAST 53900 28.63 35.07 25.61 19 TR_XM_DKIM_Undo 53069 14.31 34.53 4.83 20 DKIM_VALID_EF 48402 28.12 31.49 26.54 21 MIME_HTML_ONLY 48272 24.32 31.40 21.00 22 FVGT_m_MULTI_ODD 47595 24.99 30.96 22.19 23 T_KAM_HTML_FONT_INVALID 46958 22.26 30.55 18.37 24 DCC_CHECK_NEGATIVE 44853 56.54 29.18 69.37 25 BAYES_999 43664 12.69 28.41 5.32 26 TR_DCC_Bayes_99 37094 9.00 24.13 1.90 27 XM_Body_Dirty_Words 36608 15.40 23.82 11.46 28 T_TM2_M_HEADER_IN_MSG 34799 26.64 22.64 28.52 29 XMSubLong 33806 21.07 21.99 20.64 30 XM_Multi_Part_URI 30547 14.71 19.87 12.29 31 XM_B_Unsub 26104 11.84 16.98 9.42 32 RELAYCOUNTRY_META 26097 7.73 16.98 3.39 33 TR_XM_BayesUnsub 25474 10.22 16.57 7.24 34 LOTS_OF_MONEY 23641 9.89 15.38 7.31 35 BOTNET_IPINHOSTNAME 20767 7.57 13.51 4.79 36 UNPARSEABLE_RELAY 20610 9.44 13.41 7.58 37 TR_XM_UnparsRelay 20205 8.16 13.14 5.83 38 TR_XM_SpammyWords4 20165 7.21 13.12 4.43 39 TR_XM_SpammyWords2 18299 4.45 11.90 0.96 40 RCVD_IN_BL_SPAMCOP_NET 18224 4.27 11.86 0.71 41 FSL_BULK_SIG 18041 5.97 11.74 3.27 42 TR_XM_SpammyRelay 17013 4.56 11.07 1.51 43 XM_B_SpammyWords3 16978 5.95 11.05 3.56 44 RCVD_IN_MSPIKE_WL 16452 14.82 10.70 16.76 45 BOTNET 16168 4.37 10.52 1.48 46 XMSexyCombo_05 16110 5.65 10.48 3.39 47 XM_Evil_Numbers_Gen 14199 8.45 9.24 8.08 48 BAYES_80 12494 5.50 8.13 4.27 49 LotsOfNums_01 12039 8.73 7.83 9.15 50 RCVD_IN_MSPIKE_H3 11899 10.19 7.74 11.33 51 XM_SendGrid 11465 5.79 7.46 5.01 52 TR_XM_SPAMCOP 11353 2.59 7.39 0.34 53 UNTRUSTED_Relay 11121 3.26 7.24 1.40 54 BAYES_60 10784 8.41 7.02 9.06 55 TR_XM_PhishingBody 10707 4.25 6.97 2.98 56 HTML_IMAGE_RATIO_02 10666 5.95 6.94 5.48 57 RELAYCOUNTRY_CA 10523 2.80 6.85 0.90 58 XMSubMetaSx_00 10515 4.57 6.84 3.51 59 XM_UncommonTLD01 9687 4.37 6.30 3.46 60 MPART_ALT_DIFF 9513 6.48 6.19 6.61 61 XM_H_Long_From01 9511 5.22 6.19 4.77 62 XM_B_Phish_Phrases 9380 4.19 6.10 3.29 63 HTML_IMAGE_RATIO_04 7642 5.76 4.97 6.14 64 RCVD_IN_MSPIKE_BL 7507 2.66 4.88 1.61 65 BAYES_95 7428 3.34 4.83 2.64 66 TooManyTo_001 7290 6.96 4.74 8.00 67 TR_XM_MSPIKECOMBO 7243 2.60 4.71 1.61 68 XM_B_Investor 7068 2.40 4.60 1.36 69 TR_XM_DK_SendGrid 6731 3.54 4.38 3.15 70 XMStrtUSub 6729 4.62 4.38 4.74 71 TR_XM_SpammyWords5 6543 2.41 4.26 1.55 72 XM_SPF_SoftFail 6524 3.05 4.24 2.49 73 XM_B_Phish66 6488 2.50 4.22 1.69 74 MIME_HTML_MOSTLY 6425 3.03 4.18 2.50 75 XM_B_SpammyTLD 6239 2.61 4.06 1.93 76 XM_DIRTYINTL 5936 1.44 3.86 0.30 77 T_XMDrugObfuBody_08 5771 2.17 3.75 1.42 78 MIME_QP_LONG_LINE 5755 4.97 3.74 5.54 79 XM_CamelCaseFrm001 5733 2.38 3.73 1.74 80 XMNumbers 5683 3.42 3.70 3.29 81 HTML_IMAGE_RATIO_08 5676 2.94 3.69 2.59 82 T_XMDrugObfuBody_14 5650 2.33 3.68 1.69 83 RCVD_IN_VALIDITY_SAFE 5632 4.22 3.66 4.48 84 XM_OfRef6 5588 1.84 3.64 1.00 85 HTML_IMAGE_RATIO_06 5548 4.57 3.61 5.02 86 T_REMOTE_IMAGE 5526 3.57 3.60 3.55 87 DKIM_INVALID 5275 2.54 3.43 2.12 88 RCVD_IN_IADB_LISTED 4942 5.23 3.22 6.18 89 MIME_HTML_ONLY_MULTI 4794 4.17 3.12 4.67 90 XM_UB50 4784 1.51 3.11 0.75 91 ALL_TRUSTED 4653 12.05 3.03 16.28 92 TM2_M_VERY_LONG_WORD 4588 1.73 2.98 1.15 93 SUBJ_ALL_CAPS 4588 3.09 2.98 3.14 94 XMDiploma_00 4547 1.86 2.96 1.34 95 SpammyFromTLD_01 4534 1.35 2.95 0.60 96 RCVD_IN_VALIDITY_CERTIFIED 4489 3.57 2.92 3.87 97 TM2_M_URI_OPT_OUT 4443 3.13 2.89 3.24 98 XM_B_Unsub2 4304 1.87 2.80 1.44 99 XMBody_17 4235 1.12 2.76 0.35 100 RCVD_IN_IADB_SPF 4209 4.57 2.74 5.44 101 RCVD_IN_VALIDITY_RPBL 4176 0.88 2.72 0.02 102 T_TooManySym_01 4159 4.75 2.71 5.71 103 RCVD_IN_MSPIKE_H4 4126 3.88 2.68 4.43 104 URI_NOVOWEL 4120 2.79 2.68 2.84 105 BOTNET_NORDNS 4077 0.89 2.65 0.06 106 RCVD_IN_IADB_DK 3925 4.00 2.55 4.67 107 TR_XM_MSPIKECOMBO2 3922 1.03 2.55 0.32 108 USER_IN_DEF_DKIM_WL 3894 9.09 2.53 12.16 109 FROM_EXCESS_BASE64 3886 2.49 2.53 2.47 110 RCVD_IN_IADB_SENDERID 3872 4.11 2.52 4.85 111 T_FILL_THIS_FORM_SHORT 3621 1.32 2.36 0.83 112 TR_XM_SpammyWords3 3565 1.13 2.32 0.57 113 URIBL_DBL_SPAM 3494 0.74 2.27 0.02 114 HTML_MIME_NO_HTML_TAG 3434 2.04 2.23 1.95 115 KHOP_HELO_FCRDNS 3337 1.98 2.17 1.89 116 URI_HEX 3292 1.61 2.14 1.36 117 XM_DK_Undo_01 3259 1.72 2.12 1.53 118 TR_LOTS_OF_MONEY3 3110 0.76 2.02 0.17 119 TR_XM_SB_Phish 3010 2.15 1.96 2.24 120 RCVD_IN_MSPIKE_L3 2931 1.18 1.91 0.84 121 T_XMDrugObfuBody_00 2900 1.20 1.89 0.87 122 XMSubPhish11 2814 2.09 1.83 2.22 123 BAYES_40 2774 4.57 1.80 5.87 124 XMSexyCombo_01 2698 0.96 1.76 0.59 125 XM_B_SpammyWords4 2669 0.93 1.74 0.55 126 XMStockSpam_06 2648 1.29 1.72 1.09 127 TR_XM_PHPDW 2624 0.80 1.71 0.37 128 MAILING_LIST_MULTI 2597 2.19 1.69 2.43 129 XMGenDplmaNmb 2594 1.06 1.69 0.76 130 SpammyFromTLD_02 2581 0.77 1.68 0.35 131 T_XMHurry_00 2578 0.88 1.68 0.50 132 RCVD_IN_IADB_VOUCHED 2567 3.16 1.67 3.86 133 XM_B_COVIDMETA 2551 1.11 1.66 0.85 134 RCVD_IN_PSBL 2544 0.62 1.66 0.13 135 TR_XM_PHPForged 2543 0.75 1.65 0.33 136 TR_XM_FormFill2 2520 0.74 1.64 0.32 137 XM_H_PHPOS 2511 0.73 1.63 0.31 138 PDS_OTHER_BAD_TLD 2410 0.59 1.57 0.13 139 XM_B_DynamicLink 2386 0.52 1.55 0.03 140 HTTPS_HTTP_MISMATCH 2380 0.85 1.55 0.52 141 TR_XM_COVIDMETA1 2379 0.68 1.55 0.27 142 XM_UB99 2328 0.49 1.51 0.00 143 RCVD_IN_MSPIKE_L5 2315 0.51 1.51 0.04 144 HK_RANDOM_REPLYTO 2306 0.54 1.50 0.09 145 XMBrknScrpt_02 2301 0.76 1.50 0.41 146 XMHTML_After_End 2292 0.93 1.49 0.67 147 TR_XM_NoHeaderRelay 2270 0.54 1.48 0.11 148 MPART_ALT_DIFF_COUNT 2265 0.87 1.47 0.59 149 XMBdyGiftCard01 2203 0.97 1.43 0.76 150 HTML_TAG_BALANCE_BODY 2155 0.95 1.40 0.73 151 RELAYCOUNTRY_AU 2144 0.67 1.39 0.33 152 TR_Symld_Words 2064 1.53 1.34 1.62 153 URIBL_BLACK 2061 0.47 1.34 0.06 154 XM_URI_RBL 2041 0.51 1.33 0.12 155 RCVD_IN_MSPIKE_L4 1997 0.91 1.30 0.73 156 XMSubMetaI_00 1968 0.87 1.28 0.68 157 XM_H_Long_From02 1908 1.07 1.24 0.99 158 TR_MetaPhish_Combo_01 1900 1.10 1.24 1.03 159 XM_UB999 1892 0.39 1.23 0.00 160 XMPhish30 1836 0.84 1.19 0.68 161 TR_XM_BayesRelay 1815 0.38 1.18 0.00 162 BAYES_20 1809 3.13 1.18 4.05 163 TR_XM_MaxSPIKE 1779 0.47 1.16 0.14 164 XM_B_DNDMA 1766 0.78 1.15 0.60 165 TR_XM_FormFill 1728 0.37 1.12 0.02 166 URI_PHP_REDIR 1723 0.36 1.12 0.00 167 TR_XM_Base64_M1 1708 1.10 1.11 1.10 168 DIET_1 1706 0.90 1.11 0.80 169 TR_Caps_n_Bayes_99 1688 0.44 1.10 0.12 170 URI_TRY_3LD 1678 0.74 1.09 0.58 171 HTML_IMAGE_ONLY_20 1638 1.05 1.07 1.05 172 SHOPIFY_IMG_NOT_RCVD_SFY 1629 0.48 1.06 0.21 173 XM_H_Undi_Recip 1592 0.47 1.04 0.20 174 RCVD_IN_IADB_OPTIN 1582 2.13 1.03 2.65 175 XM_B_Crypto 1553 0.37 1.01 0.07 176 TM2_M_A_HREF_HREF 1531 0.64 1.00 0.48 177 THIS_AD 1527 0.55 0.99 0.34 178 HTML_SHORT_LINK_IMG_3 1506 0.37 0.98 0.08 179 T_TooManySym_02 1439 2.55 0.94 3.31 180 RELAYCOUNTRY_RU 1417 0.41 0.92 0.17 181 XM_Body_Dirty_Words_01 1408 0.37 0.92 0.12 182 TR_XM_COVIDMETA4 1379 0.44 0.90 0.23 183 XM_B_SEO 1351 0.39 0.88 0.16 184 RELAYCOUNTRY_FR 1345 0.42 0.88 0.21 185 TM2_M_OBFU_COMMENT 1344 0.41 0.87 0.19 186 XMReplyNow 1340 0.49 0.87 0.31 187 FONT_INVIS_LONG_LINE 1339 0.30 0.87 0.03 188 T_MONEY_PERCENT 1331 0.47 0.87 0.28 189 TR_LOTS_OF_MONEY2 1331 0.47 0.87 0.28 190 HTML_FONT_FACE_BAD 1330 2.93 0.87 3.90 191 HTML_FONT_TINY_NORDNS 1321 0.32 0.86 0.07 192 ANY_BOUNCE_MESSAGE 1316 2.52 0.86 3.30 193 HTML_TAG_BALANCE_CENTER 1314 0.41 0.85 0.20 194 BOUNCE_MESSAGE 1314 2.52 0.85 3.29 195 XM_ProductURIs 1308 0.78 0.85 0.75 196 XMHTMLBadTable_001 1274 0.60 0.83 0.50 197 XM_UB60 1271 0.30 0.83 0.05 198 XMPhish14 1262 0.53 0.82 0.40 199 DKIM_ADSP_CUSTOM_MED 1262 0.91 0.82 0.94 200 TR_XM_SEO4 1239 0.33 0.81 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 282173 89.15 95.75 86.05 2 RELAYCOUNTRY_US 265450 81.53 82.76 80.95 3 DKIM_SIGNED 228292 75.53 88.12 69.62 4 XM_B_Unicode 227719 74.18 84.27 69.45 5 DCC_CHECK_NEGATIVE 227474 56.54 29.18 69.37 6 XM_DK_Pass 224328 73.93 85.71 68.41 7 DKIM_VALID 221339 72.99 84.69 67.50 8 BAYES_50 175087 49.21 40.29 53.39 9 DKIM_VALID_AU 168140 54.60 61.68 51.28 10 XMListUnsubscribeExists 150636 52.76 67.31 45.94 11 XM_B_Unicode3 141907 43.82 44.97 43.28 12 XM_B_SpammyWords 138724 50.90 69.22 42.31 13 RCVD_IN_MSPIKE_H2 117974 40.89 51.36 35.98 14 DCC_CHECK 100292 43.42 70.79 30.59 15 T_TM2_M_HEADER_IN_MSG 93514 26.64 22.64 28.52 16 DKIM_VALID_EF 87031 28.12 31.49 26.54 17 HTML_FONT_LOW_CONTRAST 83986 28.63 35.07 25.61 18 FVGT_m_MULTI_ODD 72754 24.99 30.96 22.19 19 LOC_TINY_FONT_1 72561 27.41 38.69 22.13 20 MIME_HTML_ONLY 68875 24.32 31.40 21.00 21 XMSubLong 67668 21.07 21.99 20.64 22 T_KAM_HTML_FONT_INVALID 60243 22.26 30.55 18.37 23 XM_B_SpammyWords2 57026 24.16 38.61 17.39 24 RCVD_IN_MSPIKE_WL 54943 14.82 10.70 16.76 25 ALL_TRUSTED 53388 12.05 3.03 16.28 26 XM_Multi_Part_URI 40298 14.71 19.87 12.29 27 USER_IN_DEF_DKIM_WL 39873 9.09 2.53 12.16 28 BAYES_00 38281 8.20 0.79 11.67 29 XM_Body_Dirty_Words 37568 15.40 23.82 11.46 30 RCVD_IN_MSPIKE_H3 37160 10.19 7.74 11.33 31 XM_B_Unsub 30899 11.84 16.98 9.42 32 LotsOfNums_01 29997 8.73 7.83 9.15 33 BAYES_60 29715 8.41 7.02 9.06 34 XM_DKIMWhitelistDomains 27829 5.85 0.22 8.49 35 XM_Evil_Numbers_Gen 26485 8.45 9.24 8.08 36 TooManyTo_001 26228 6.96 4.74 8.00 37 UNPARSEABLE_RELAY 24841 9.44 13.41 7.58 38 LOTS_OF_MONEY 23974 9.89 15.38 7.31 39 TR_XM_BayesUnsub 23757 10.22 16.57 7.24 40 XM_DK_Undo_02 23088 19.22 45.21 7.04 41 IN_ZIMBRA_NJ_WHITELIST 23074 4.83 0.12 7.04 42 XM_H_Trusted_IP 22987 4.77 0.00 7.01 43 MPART_ALT_DIFF 21672 6.48 6.19 6.61 44 BAYES_99 21063 15.66 35.35 6.42 45 TR_XM_DK_Bayes 20372 4.42 0.59 6.21 46 RCVD_IN_IADB_LISTED 20268 5.23 3.22 6.18 47 HTML_IMAGE_RATIO_04 20122 5.76 4.97 6.14 48 TR_XM_DK_Bayes1 19957 4.33 0.58 6.09 49 BAYES_40 19232 4.57 1.80 5.87 50 TR_XM_UnparsRelay 19119 8.16 13.14 5.83 51 T_TooManySym_01 18737 4.75 2.71 5.71 52 MIME_QP_LONG_LINE 18167 4.97 3.74 5.54 53 HTML_IMAGE_RATIO_02 17979 5.95 6.94 5.48 54 RCVD_IN_IADB_SPF 17822 4.57 2.74 5.44 55 TR_XM_DK_Bayes2 17520 3.78 0.45 5.34 56 BAYES_999 17449 12.69 28.41 5.32 57 HTML_IMAGE_RATIO_06 16454 4.57 3.61 5.02 58 XM_SendGrid 16420 5.79 7.46 5.01 59 RCVD_IN_IADB_SENDERID 15902 4.11 2.52 4.85 60 TR_XM_DKIM_Undo 15854 14.31 34.53 4.83 61 BOTNET_IPINHOSTNAME 15715 7.57 13.51 4.79 62 XM_H_Long_From01 15641 5.22 6.19 4.77 63 XMStrtUSub 15545 4.62 4.38 4.74 64 RCVD_IN_IADB_DK 15329 4.00 2.55 4.67 65 MIME_HTML_ONLY_MULTI 15313 4.17 3.12 4.67 66 XM_PDF 15177 3.38 0.73 4.63 67 RCVD_IN_VALIDITY_SAFE 14704 4.22 3.66 4.48 68 RCVD_IN_MSPIKE_H4 14541 3.88 2.68 4.43 69 TR_XM_SpammyWords4 14540 7.21 13.12 4.43 70 BAYES_80 14001 5.50 8.13 4.27 71 BAYES_20 13270 3.13 1.18 4.05 72 HTML_FONT_FACE_BAD 12789 2.93 0.87 3.90 73 RCVD_IN_VALIDITY_CERTIFIED 12701 3.57 2.92 3.87 74 RCVD_IN_IADB_VOUCHED 12651 3.16 1.67 3.86 75 XM_B_SpammyWords3 11684 5.95 11.05 3.56 76 T_REMOTE_IMAGE 11651 3.57 3.60 3.55 77 XMSubMetaSx_00 11500 4.57 6.84 3.51 78 XM_UncommonTLD01 11341 4.37 6.30 3.46 79 RELAYCOUNTRY_META 11109 7.73 16.98 3.39 80 XMSexyCombo_05 11105 5.65 10.48 3.39 81 T_TooManySym_02 10848 2.55 0.94 3.31 82 ANY_BOUNCE_MESSAGE 10808 2.52 0.86 3.30 83 BOUNCE_MESSAGE 10804 2.52 0.85 3.29 84 XMNumbers 10796 3.42 3.70 3.29 85 XM_B_Phish_Phrases 10777 4.19 6.10 3.29 86 FSL_BULK_SIG 10735 5.97 11.74 3.27 87 TM2_M_URI_OPT_OUT 10624 3.13 2.89 3.24 88 TR_XM_DK_SendGrid 10326 3.54 4.38 3.15 89 SUBJ_ALL_CAPS 10310 3.09 2.98 3.14 90 TR_XM_PhishingBody 9783 4.25 6.97 2.98 91 URI_NOVOWEL 9315 2.79 2.68 2.84 92 RCVD_IN_IADB_OPTIN 8696 2.13 1.03 2.65 93 BAYES_95 8648 3.34 4.83 2.64 94 BAYES_05 8603 1.98 0.61 2.62 95 HTML_IMAGE_RATIO_08 8505 2.94 3.69 2.59 96 MIME_HTML_MOSTLY 8189 3.03 4.18 2.50 97 XM_SPF_SoftFail 8176 3.05 4.24 2.49 98 FROM_EXCESS_BASE64 8109 2.49 2.53 2.47 99 TVD_RCVD_IP 7974 1.75 0.30 2.43 100 MAILING_LIST_MULTI 7967 2.19 1.69 2.43 101 TR_XM_SB_Phish 7355 2.15 1.96 2.24 102 TooManyTo_002 7319 1.69 0.54 2.23 103 XMSubPhish11 7275 2.09 1.83 2.22 104 DKIM_INVALID 6953 2.54 3.43 2.12 105 INVALID_MSGID 6670 1.49 0.32 2.03 106 HTML_MIME_NO_HTML_TAG 6405 2.04 2.23 1.95 107 XM_B_SpammyTLD 6340 2.61 4.06 1.93 108 TR_DCC_Bayes_99 6237 9.00 24.13 1.90 109 KHOP_HELO_FCRDNS 6194 1.98 2.17 1.89 110 IN_HORDE_ADDRESS_BOOK 6153 1.33 0.16 1.88 111 TO_MALFORMED 5938 1.24 0.03 1.81 112 XM_CamelCaseFrm001 5711 2.38 3.73 1.74 113 TVD_SPACE_RATIO 5578 1.28 0.38 1.70 114 T_XMDrugObfuBody_14 5556 2.33 3.68 1.69 115 XM_B_Phish66 5536 2.50 4.22 1.69 116 HELO_NODOT 5359 1.27 0.50 1.63 117 HELO_NO_DOMAIN 5354 1.27 0.49 1.63 118 TR_Symld_Words 5305 1.53 1.34 1.62 119 RCVD_IN_MSPIKE_BL 5288 2.66 4.88 1.61 120 TR_XM_MSPIKECOMBO 5286 2.60 4.71 1.61 121 TR_XM_SpammyWords5 5072 2.41 4.26 1.55 122 XM_DK_Undo_01 5022 1.72 2.12 1.53 123 TR_XM_SpammyRelay 4967 4.56 11.07 1.51 124 BOTNET 4856 4.37 10.52 1.48 125 XM_B_Unsub2 4719 1.87 2.80 1.44 126 T_XMDrugObfuBody_08 4663 2.17 3.75 1.42 127 XMSubNoVowel 4647 1.17 0.65 1.42 128 UNTRUSTED_Relay 4602 3.26 7.24 1.40 129 XMBSHREFv2 4540 1.01 0.20 1.38 130 TooManyTo_003 4508 1.08 0.44 1.37 131 URI_HEX 4468 1.61 2.14 1.36 132 XM_B_Investor 4467 2.40 4.60 1.36 133 XMDiploma_00 4388 1.86 2.96 1.34 134 XMGappySubj_01 4264 0.99 0.32 1.30 135 XM_GoogleGroups 4024 1.01 0.56 1.23 136 TM2_M_VERY_LONG_WORD 3762 1.73 2.98 1.15 137 TR_XM_Base64_M1 3607 1.10 1.11 1.10 138 XMStockSpam_06 3584 1.29 1.72 1.09 139 HTML_IMAGE_ONLY_20 3441 1.05 1.07 1.05 140 TR_MetaPhish_Combo_01 3379 1.10 1.24 1.03 141 XM_OfRef6 3275 1.84 3.64 1.00 142 XMCapTrack 3267 0.80 0.37 1.00 143 RCVD_IN_MSPIKE_H5 3242 0.76 0.28 0.99 144 XM_H_Long_From02 3230 1.07 1.24 0.99 145 TooManyTo_004 3218 0.79 0.37 0.98 146 XMBody_95 3185 0.71 0.15 0.97 147 TR_XM_SpammyWords2 3135 4.45 11.90 0.96 148 DKIM_ADSP_CUSTOM_MED 3097 0.91 0.82 0.94 149 RCVD_IN_RP_SAFE 3024 0.84 0.68 0.92 150 RELAYCOUNTRY_CA 2965 2.80 6.85 0.90 151 T_XMDrugObfuBody_00 2859 1.20 1.89 0.87 152 XM_B_COVIDMETA 2801 1.11 1.66 0.85 153 RCVD_IN_MSPIKE_L3 2757 1.18 1.91 0.84 154 T_FILL_THIS_FORM_SHORT 2726 1.32 2.36 0.83 155 TooManyTo_005 2626 0.65 0.33 0.80 156 RCVD_IN_RP_CERTIFIED 2612 0.71 0.53 0.80 157 DIET_1 2607 0.90 1.11 0.80 158 T_TooManySym_03 2505 0.69 0.52 0.76 159 XMGenDplmaNmb 2498 1.06 1.69 0.76 160 XMBdyGiftCard01 2487 0.97 1.43 0.76 161 XM_UB50 2474 1.51 3.11 0.75 162 XM_ProductURIs 2449 0.78 0.85 0.75 163 XM_shorewaves_Whitelist 2425 0.50 0.00 0.74 164 HTML_TAG_BALANCE_BODY 2402 0.95 1.40 0.73 165 RCVD_IN_MSPIKE_L4 2388 0.91 1.30 0.73 166 RCVD_IN_BL_SPAMCOP_NET 2329 4.27 11.86 0.71 167 T_OBFU_PDF_ATTACH 2300 0.51 0.12 0.70 168 XM_ShortIntro_01 2284 0.57 0.31 0.70 169 MSGID_NOFQDN1 2278 0.49 0.04 0.69 170 XMSubMetaI_00 2233 0.87 1.28 0.68 171 XMPhish30 2230 0.84 1.19 0.68 172 XM_B_COPY_HTML 2208 0.71 0.78 0.67 173 XMHTML_After_End 2194 0.93 1.49 0.67 174 XM_D_tchamptons_WL 2084 0.44 0.01 0.64 175 XM_RXBody 2071 0.58 0.46 0.63 176 XM_H_PHPMailer 2022 0.61 0.61 0.62 177 XM_B_DNDMA 1974 0.78 1.15 0.60 178 SpammyFromTLD_01 1956 1.35 2.95 0.60 179 XMSexyCombo_01 1929 0.96 1.76 0.59 180 RELAYCOUNTRY_GB 1928 0.62 0.69 0.59 181 MPART_ALT_DIFF_COUNT 1924 0.87 1.47 0.59 182 URI_TRY_3LD 1908 0.74 1.09 0.58 183 TR_XM_SpammyWords3 1875 1.13 2.32 0.57 184 NML_ADSP_CUSTOM_MED 1870 0.60 0.68 0.57 185 XM_B_SpammyWords4 1805 0.93 1.74 0.55 186 SHORT_HELO_AND_INLINE_IMAGE 1797 0.40 0.08 0.55 187 DATE_IN_PAST_03_06 1725 0.57 0.66 0.53 188 HTTPS_HTTP_MISMATCH 1713 0.85 1.55 0.52 189 FORGED_GMAIL_RCVD 1678 0.57 0.69 0.51 190 XMNoVowels 1672 0.49 0.44 0.51 191 T_XMHurry_00 1655 0.88 1.68 0.50 192 XMHTMLBadTable_001 1638 0.60 0.83 0.50 193 XMLngstWrd_00 1636 0.47 0.41 0.50 194 FROM_GOV_DKIM_AU 1612 0.38 0.15 0.49 195 TM2_M_A_HREF_HREF 1574 0.64 1.00 0.48 196 TM2_M_BODY_EMPTY 1536 0.37 0.17 0.47 197 BASE64_LENGTH_79_INF 1464 0.36 0.18 0.45 198 PLING_QUERY 1433 0.52 0.70 0.44 199 FROM_GOV_SPOOF 1416 0.35 0.17 0.43 200 USER_IN_WHITELIST 1395 0.29 0.00 0.43 ----------------------------------------------------------------------