Email: 582550 Autolearn: 0 AvgScore: 1.25 AvgScanTime: 1.55 sec Spam: 167772 Autolearn: 0 AvgScore: 14.17 AvgScanTime: 1.94 sec Ham: 414778 Autolearn: 0 AvgScore: -3.97 AvgScanTime: 1.39 sec Time Spent Running SA: 250.58 hours Time Spent Processing Spam: 90.44 hours Time Spent Processing Ham: 160.14 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 157330 90.14 93.78 88.67 2 DKIM_SIGNED 149838 67.52 89.31 58.71 3 XM_DK_Pass 144689 65.89 86.24 57.66 4 DKIM_VALID 144263 65.23 85.99 56.84 5 XM_B_Unicode 137214 73.11 81.79 69.61 6 RELAYCOUNTRY_US 136713 82.08 81.49 82.32 7 DCC_CHECK 118496 37.81 70.63 24.53 8 XMListUnsubscribeExists 118129 47.32 70.41 37.98 9 XM_B_SpammyWords 113799 51.17 67.83 44.43 10 DKIM_VALID_AU 110392 50.61 65.80 44.47 11 RCVD_IN_MSPIKE_H2 80240 36.04 47.83 31.27 12 XM_B_Unicode3 78375 43.40 46.72 42.06 13 BAYES_50 71981 49.06 42.90 51.55 14 XM_DK_Undo_02 68837 15.27 41.03 4.85 15 XM_B_SpammyWords2 63467 21.26 37.83 14.56 16 LOC_TINY_FONT_1 59859 23.15 35.68 18.08 17 FVGT_m_MULTI_ODD 58432 24.23 34.83 19.95 18 DKIM_VALID_EF 56537 26.29 33.70 23.30 19 TR_XM_DKIM_Undo 55337 11.99 32.98 3.50 20 MIME_HTML_ONLY 54762 25.21 32.64 22.21 21 HTML_FONT_LOW_CONTRAST 54401 24.81 32.43 21.73 22 BAYES_99 52920 11.81 31.54 3.82 23 T_KAM_HTML_FONT_INVALID 51023 19.72 30.41 15.39 24 DCC_CHECK_NEGATIVE 49242 62.15 29.35 75.42 25 BAYES_999 41836 9.29 24.94 2.97 26 XMSubLong 39482 20.66 23.53 19.50 27 XM_Body_Dirty_Words 37323 12.98 22.25 9.23 28 TR_DCC_Bayes_99 36106 7.02 21.52 1.16 29 T_TM2_M_HEADER_IN_MSG 35864 27.01 21.38 29.29 30 RELAYCOUNTRY_META 34402 8.04 20.51 3.00 31 XM_Multi_Part_URI 29873 12.20 17.81 9.93 32 XM_B_Unsub 25754 9.17 15.35 6.68 33 TR_XM_BayesUnsub 25159 8.04 15.00 5.23 34 BOTNET_IPINHOSTNAME 23451 6.73 13.98 3.80 35 RCVD_IN_MSPIKE_WL 23017 13.94 13.72 14.03 36 LOTS_OF_MONEY 22668 11.45 13.51 10.62 37 TR_XM_SpammyRelay 22489 4.92 13.40 1.49 38 XM_B_SpammyWords3 22359 6.07 13.33 3.13 39 UNPARSEABLE_RELAY 19838 7.70 11.82 6.03 40 BOTNET 19704 4.22 11.74 1.17 41 TR_XM_SpammyWords4 19461 8.75 11.60 7.60 42 TR_XM_UnparsRelay 19376 6.56 11.55 4.55 43 TR_XM_SpammyWords2 19369 3.75 11.54 0.59 44 FSL_BULK_SIG 18672 4.86 11.13 2.33 45 XM_Evil_Numbers_Gen 16753 9.00 9.99 8.60 46 RCVD_IN_BL_SPAMCOP_NET 16547 3.16 9.86 0.45 47 XMSexyCombo_05 16414 4.74 9.78 2.70 48 XM_UncommonTLD01 16165 4.97 9.64 3.08 49 RCVD_IN_MSPIKE_H3 15401 9.07 9.18 9.02 50 MPART_ALT_DIFF 15362 10.15 9.16 10.55 51 UNTRUSTED_Relay 14223 3.23 8.48 1.11 52 LotsOfNums_01 14093 7.72 8.40 7.44 53 RELAYCOUNTRY_CA 13380 2.94 7.98 0.91 54 BAYES_60 13088 7.24 7.80 7.02 55 BAYES_80 13015 4.55 7.76 3.25 56 XM_B_Phish_Phrases 11439 3.60 6.82 2.29 57 XM_SendGrid 11339 4.77 6.76 3.96 58 TR_XM_PhishingBody 11334 3.78 6.76 2.58 59 TM2_M_VERY_LONG_WORD 10934 2.43 6.52 0.77 60 XM_H_Long_From01 10887 5.12 6.49 4.56 61 HTML_IMAGE_RATIO_02 10441 4.64 6.22 3.99 62 TR_XM_SPAMCOP 10351 1.91 6.17 0.19 63 MIME_HTML_ONLY_MULTI 10107 7.91 6.02 8.68 64 XM_B_SpammyTLD 10093 3.50 6.02 2.48 65 T_XMDrugObfuBody_08 9897 2.54 5.90 1.18 66 XM_SPF_SoftFail 9866 6.58 5.88 6.86 67 XMSubMetaSx_00 9225 3.35 5.50 2.48 68 BAYES_95 8353 2.91 4.98 2.08 69 XM_B_Investor 8072 2.33 4.81 1.33 70 T_XMDrugObfuBody_14 7950 2.28 4.74 1.28 71 TooManyTo_001 7914 6.31 4.72 6.96 72 TR_XM_SpammyWords5 7905 2.27 4.71 1.28 73 XMLngstWrd_00 7887 1.68 4.70 0.45 74 XMLngstWrd_01 7789 1.62 4.64 0.40 75 HTML_MIME_NO_HTML_TAG 7722 2.50 4.60 1.65 76 XMLngstWrd_02 7598 1.52 4.53 0.31 77 SpammyFromTLD_01 7566 1.77 4.51 0.66 78 HTML_IMAGE_RATIO_04 7474 12.98 4.45 16.43 79 XMNumbers 7455 3.33 4.44 2.88 80 XMStrtUSub 7271 9.65 4.33 11.80 81 RCVD_IN_MSPIKE_BL 7193 1.74 4.29 0.71 82 RCVD_IN_MSPIKE_H4 7152 4.22 4.26 4.20 83 TR_XM_DK_SendGrid 7112 3.04 4.24 2.55 84 XMLngstWrd_03 6917 1.37 4.12 0.25 85 TR_XM_MSPIKECOMBO 6888 1.68 4.11 0.71 86 XMLngstWrd_04 6771 1.29 4.04 0.18 87 XMBody_17 6686 1.43 3.99 0.39 88 PDS_OTHER_BAD_TLD 6683 1.24 3.98 0.13 89 XM_UB50 6635 1.64 3.95 0.70 90 MIME_QP_LONG_LINE 6346 4.41 3.78 4.67 91 XM_B_Phish66 6304 2.10 3.76 1.42 92 T_FILL_THIS_FORM_SHORT 6159 1.56 3.67 0.71 93 MIME_HTML_MOSTLY 6099 2.70 3.64 2.33 94 TR_XM_PHPDW 6065 1.28 3.62 0.34 95 XM_DIRTYINTL 6007 1.25 3.58 0.31 96 TR_XM_PHPForged 5933 1.24 3.54 0.31 97 TR_XM_FormFill2 5911 1.24 3.52 0.31 98 XM_H_PHPOS 5895 1.23 3.51 0.31 99 RCVD_IN_VALIDITY_SAFE 5812 3.78 3.46 3.91 100 T_REMOTE_IMAGE 5775 3.51 3.44 3.54 101 RCVD_IN_VALIDITY_RPBL 5720 1.02 3.41 0.05 102 XM_GoogleGroups 5596 1.76 3.34 1.13 103 DKIM_INVALID 5575 2.29 3.32 1.87 104 HTML_IMAGE_RATIO_06 5345 7.38 3.19 9.08 105 TM2_M_URI_OPT_OUT 5218 2.30 3.11 1.98 106 XM_CamelCaseFrm001 5134 2.10 3.06 1.72 107 HTML_IMAGE_RATIO_08 4878 2.89 2.91 2.89 108 XM_DK_Undo_01 4785 1.69 2.85 1.22 109 HTML_TITLE_SUBJ_DIFF 4776 0.84 2.85 0.02 110 URIBL_DBL_SPAM 4732 0.82 2.82 0.02 111 UPPERCASE_75_100 4726 0.83 2.82 0.03 112 XM_B_Unsub2 4684 1.69 2.79 1.25 113 XM_OfRef6 4631 1.40 2.76 0.85 114 RCVD_IN_VALIDITY_CERTIFIED 4631 3.16 2.76 3.32 115 SUBJ_ALL_CAPS 4579 2.14 2.73 1.90 116 BOTNET_NORDNS 4438 0.79 2.65 0.04 117 XMDiploma_00 4377 1.61 2.61 1.21 118 URI_NOVOWEL 4308 2.08 2.57 1.88 119 SpammyFromTLD_02 4179 1.02 2.49 0.42 120 USER_IN_DEF_DKIM_WL 4107 7.75 2.45 9.90 121 RCVD_IN_IADB_LISTED 4074 3.65 2.43 4.15 122 XMBrknScrpt_02 3963 1.06 2.36 0.54 123 FONT_INVIS_LONG_LINE 3884 0.71 2.32 0.07 124 TR_LOTS_OF_MONEY3 3835 0.82 2.29 0.23 125 T_TooManySym_01 3790 4.10 2.26 4.85 126 XM_Body_Dirty_Words_01 3764 0.71 2.24 0.09 127 XM_B_COVIDMETA 3546 0.93 2.11 0.45 128 RCVD_IN_MSPIKE_L3 3502 1.06 2.09 0.65 129 TR_XM_FormFill 3469 0.61 2.07 0.02 130 T_XMDrugObfuBody_00 3463 0.99 2.06 0.56 131 FROM_EXCESS_BASE64 3432 1.83 2.05 1.75 132 RCVD_IN_IADB_SPF 3380 3.24 2.01 3.73 133 TR_XM_SpammyWords3 3251 0.81 1.94 0.36 134 TR_XM_MSPIKECOMBO2 3229 0.63 1.92 0.10 135 BAYES_40 3173 4.12 1.89 5.02 136 RCVD_IN_IADB_DK 3163 2.88 1.89 3.28 137 RCVD_IN_IADB_SENDERID 3140 2.94 1.87 3.38 138 RCVD_IN_PSBL 3130 0.97 1.87 0.61 139 XM_B_SpammyWords4 3054 0.80 1.82 0.39 140 URI_PHP_REDIR 3046 0.53 1.82 0.01 141 MAILING_LIST_MULTI 3032 2.20 1.81 2.35 142 XM_UB99 3009 0.52 1.79 0.00 143 TR_XM_NoHeaderRelay 2936 0.59 1.75 0.12 144 RCVD_IN_MSPIKE_L5 2886 0.51 1.72 0.02 145 BAYES_20 2818 4.15 1.68 5.15 146 XM_TLDProd2 2807 0.58 1.67 0.13 147 HTTPS_HTTP_MISMATCH 2804 0.95 1.67 0.66 148 T_XMHurry_00 2793 0.91 1.66 0.61 149 XMStockSpam_06 2734 1.19 1.63 1.01 150 TR_XM_SB_Phish 2728 1.86 1.63 1.95 151 URI_HEX 2716 1.17 1.62 0.99 152 XMSubPhish11 2652 1.83 1.58 1.93 153 XM_H_Undi_Recip 2626 0.60 1.57 0.21 154 HTML_IMAGE_ONLY_24 2625 0.68 1.56 0.32 155 ALL_TRUSTED 2504 11.32 1.49 15.29 156 HK_RANDOM_REPLYTO 2488 0.49 1.48 0.08 157 XMGppyBdWords 2460 0.49 1.47 0.09 158 XM_URI_RBL 2455 0.51 1.46 0.12 159 XM_UB999 2427 0.42 1.45 0.00 160 XMSexyCombo_01 2422 0.63 1.44 0.30 161 TR_XM_COVIDMETA1 2397 0.57 1.43 0.22 162 XMHTML_After_End 2338 1.14 1.39 1.04 163 XMGenDplmaNmb 2313 0.87 1.38 0.67 164 XMBdyGiftCard01 2283 0.78 1.36 0.55 165 RELAYCOUNTRY_AU 2260 0.53 1.35 0.19 166 XMBSHREFv2 2254 1.16 1.34 1.08 167 TR_XM_MaxSPIKE 2204 0.44 1.31 0.09 168 T_XMDrugObfuBody_12 2170 0.46 1.29 0.12 169 RCVD_IN_IADB_VOUCHED 2163 2.08 1.29 2.40 170 KHOP_HELO_FCRDNS 2146 3.09 1.28 3.82 171 URIBL_BLACK 2089 0.38 1.25 0.04 172 TM2_M_BODY_EMPTY 2058 0.64 1.23 0.41 173 XM_UB60 1957 0.38 1.17 0.07 174 XM_H_Long_From02 1955 0.93 1.17 0.83 175 EXCLAMACION_ES 1951 0.39 1.16 0.08 176 HTTP_EXCESSIVE_ESCAPES 1951 0.34 1.16 0.00 177 RELAYCOUNTRY_RU 1949 0.36 1.16 0.04 178 RELAYCOUNTRY_IN 1927 0.37 1.15 0.06 179 XM_B_SexDrugs1 1926 0.33 1.15 0.00 180 PP_MIME_FAKE_ASCII_TEXT 1917 0.36 1.14 0.04 181 XM_Body_Dirty_Words_02 1912 0.33 1.14 0.00 182 XMPhish30 1901 0.67 1.13 0.49 183 XMEmptyBody_01 1864 0.39 1.11 0.10 184 HTML_TAG_BALANCE_BODY 1842 0.74 1.10 0.60 185 TR_XM_BayesRelay 1812 0.31 1.08 0.00 186 REMOVE_BEFORE_LINK 1809 0.44 1.08 0.18 187 TR_Caps_n_Bayes_99 1802 0.42 1.07 0.15 188 TR_Symld_Words 1784 1.21 1.06 1.27 189 WEIRD_QUOTING 1782 0.32 1.06 0.02 190 SHORT_URI_5 1774 0.31 1.06 0.01 191 MPART_ALT_DIFF_COUNT 1757 0.61 1.05 0.43 192 TR_XM_Base64_M1 1735 0.79 1.03 0.69 193 XM_B_COPY_HTML 1725 0.66 1.03 0.51 194 RELAYCOUNTRY_FR 1720 0.47 1.03 0.24 195 TR_XM_INV_DKIM 1715 0.32 1.02 0.03 196 XM_PDF 1659 3.04 0.99 3.86 197 XMPhish14 1651 0.57 0.98 0.40 198 DIET_1 1646 0.47 0.98 0.26 199 XM_B_DNDMA 1539 0.48 0.92 0.31 200 PLING_QUERY 1534 0.51 0.91 0.35 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 367778 90.14 93.78 88.67 2 RELAYCOUNTRY_US 341452 82.08 81.49 82.32 3 DCC_CHECK_NEGATIVE 312841 62.15 29.35 75.42 4 XM_B_Unicode 288713 73.11 81.79 69.61 5 DKIM_SIGNED 243518 67.52 89.31 58.71 6 XM_DK_Pass 239180 65.89 86.24 57.66 7 DKIM_VALID 235748 65.23 85.99 56.84 8 BAYES_50 213828 49.06 42.90 51.55 9 DKIM_VALID_AU 184454 50.61 65.80 44.47 10 XM_B_SpammyWords 184269 51.17 67.83 44.43 11 XM_B_Unicode3 174447 43.40 46.72 42.06 12 XMListUnsubscribeExists 157544 47.32 70.41 37.98 13 RCVD_IN_MSPIKE_H2 129721 36.04 47.83 31.27 14 T_TM2_M_HEADER_IN_MSG 121502 27.01 21.38 29.29 15 DCC_CHECK 101743 37.81 70.63 24.53 16 DKIM_VALID_EF 96629 26.29 33.70 23.30 17 MIME_HTML_ONLY 92125 25.21 32.64 22.21 18 HTML_FONT_LOW_CONTRAST 90132 24.81 32.43 21.73 19 HTML_FONT_FACE_BAD 85578 14.92 0.81 20.63 20 FVGT_m_MULTI_ODD 82735 24.23 34.83 19.95 21 XMSubLong 80866 20.66 23.53 19.50 22 BAYES_00 76182 13.27 0.66 18.37 23 LOC_TINY_FONT_1 75006 23.15 35.68 18.08 24 HTML_IMAGE_RATIO_04 68137 12.98 4.45 16.43 25 T_KAM_HTML_FONT_INVALID 63832 19.72 30.41 15.39 26 ALL_TRUSTED 63434 11.32 1.49 15.29 27 XM_H_Trusted_IP 63201 10.85 0.00 15.24 28 XM_B_SpammyWords2 60387 21.26 37.83 14.56 29 RCVD_IN_MSPIKE_WL 58193 13.94 13.72 14.03 30 XMStrtUSub 48955 9.65 4.33 11.80 31 IN_ZIMBRA_NJ_WHITELIST 44673 7.70 0.10 10.77 32 LOTS_OF_MONEY 44040 11.45 13.51 10.62 33 MPART_ALT_DIFF 43753 10.15 9.16 10.55 34 XM_Multi_Part_URI 41176 12.20 17.81 9.93 35 USER_IN_DEF_DKIM_WL 41043 7.75 2.45 9.90 36 XM_Body_Dirty_Words 38296 12.98 22.25 9.23 37 HTML_IMAGE_RATIO_06 37658 7.38 3.19 9.08 38 RCVD_IN_MSPIKE_H3 37431 9.07 9.18 9.02 39 MIME_HTML_ONLY_MULTI 35982 7.91 6.02 8.68 40 XM_Evil_Numbers_Gen 35681 9.00 9.99 8.60 41 TR_XM_SpammyWords4 31504 8.75 11.60 7.60 42 LotsOfNums_01 30854 7.72 8.40 7.44 43 BAYES_60 29109 7.24 7.80 7.02 44 TooManyTo_001 28858 6.31 4.72 6.96 45 XM_SPF_SoftFail 28456 6.58 5.88 6.86 46 XM_B_Unsub 27694 9.17 15.35 6.68 47 XM_DKIMWhitelistDomains 27391 4.71 0.02 6.60 48 UNPARSEABLE_RELAY 25016 7.70 11.82 6.03 49 TR_XM_BayesUnsub 21696 8.04 15.00 5.23 50 BAYES_20 21364 4.15 1.68 5.15 51 BAYES_40 20821 4.12 1.89 5.02 52 TR_XM_DK_Bayes 20289 3.63 0.50 4.89 53 XM_DK_Undo_02 20117 15.27 41.03 4.85 54 T_TooManySym_01 20110 4.10 2.26 4.85 55 XMSubNoVowel 20092 3.60 0.51 4.84 56 TR_XM_DK_Bayes1 19949 3.57 0.49 4.81 57 MIME_QP_LONG_LINE 19361 4.41 3.78 4.67 58 XM_H_Long_From01 18931 5.12 6.49 4.56 59 TR_XM_UnparsRelay 18867 6.56 11.55 4.55 60 TR_XM_DK_Bayes2 17555 3.13 0.39 4.23 61 RCVD_IN_MSPIKE_H4 17432 4.22 4.26 4.20 62 RCVD_IN_IADB_LISTED 17208 3.65 2.43 4.15 63 HTML_IMAGE_RATIO_02 16564 4.64 6.22 3.99 64 XM_SendGrid 16423 4.77 6.76 3.96 65 RCVD_IN_VALIDITY_SAFE 16229 3.78 3.46 3.91 66 XM_PDF 16029 3.04 0.99 3.86 67 BAYES_99 15855 11.81 31.54 3.82 68 KHOP_HELO_FCRDNS 15855 3.09 1.28 3.82 69 BOTNET_IPINHOSTNAME 15744 6.73 13.98 3.80 70 RCVD_IN_IADB_SPF 15468 3.24 2.01 3.73 71 BAYES_05 14852 2.75 0.71 3.58 72 T_REMOTE_IMAGE 14684 3.51 3.44 3.54 73 TR_XM_DKIM_Undo 14516 11.99 32.98 3.50 74 RCVD_IN_IADB_SENDERID 14005 2.94 1.87 3.38 75 RCVD_IN_VALIDITY_CERTIFIED 13771 3.16 2.76 3.32 76 RCVD_IN_IADB_DK 13603 2.88 1.89 3.28 77 BAYES_80 13483 4.55 7.76 3.25 78 XM_B_SpammyWords3 12988 6.07 13.33 3.13 79 XM_UncommonTLD01 12791 4.97 9.64 3.08 80 ANY_BOUNCE_MESSAGE 12613 2.37 0.71 3.04 81 BOUNCE_MESSAGE 12612 2.37 0.71 3.04 82 RELAYCOUNTRY_META 12436 8.04 20.51 3.00 83 BAYES_999 12306 9.29 24.94 2.97 84 HTML_IMAGE_RATIO_08 11986 2.89 2.91 2.89 85 XMNumbers 11925 3.33 4.44 2.88 86 T_TooManySym_02 11441 2.16 0.67 2.76 87 XMSexyCombo_05 11218 4.74 9.78 2.70 88 TR_XM_PhishingBody 10690 3.78 6.76 2.58 89 TR_XM_DK_SendGrid 10580 3.04 4.24 2.55 90 XM_B_SpammyTLD 10295 3.50 6.02 2.48 91 XMSubMetaSx_00 10278 3.35 5.50 2.48 92 RCVD_IN_IADB_VOUCHED 9959 2.08 1.29 2.40 93 MAILING_LIST_MULTI 9757 2.20 1.81 2.35 94 FSL_BULK_SIG 9658 4.86 11.13 2.33 95 MIME_HTML_MOSTLY 9656 2.70 3.64 2.33 96 XM_B_Phish_Phrases 9513 3.60 6.82 2.29 97 XMSubLongNoVowel 8928 1.59 0.19 2.15 98 XMSubGarbage 8797 1.52 0.05 2.12 99 BAYES_95 8627 2.91 4.98 2.08 100 TooManyTo_002 8300 1.59 0.58 2.00 101 TM2_M_URI_OPT_OUT 8204 2.30 3.11 1.98 102 TR_XM_SB_Phish 8081 1.86 1.63 1.95 103 XMSubPhish11 8021 1.83 1.58 1.93 104 SUBJ_ALL_CAPS 7871 2.14 2.73 1.90 105 URI_NOVOWEL 7803 2.08 2.57 1.88 106 DKIM_INVALID 7770 2.29 3.32 1.87 107 TVD_RCVD_IP 7728 1.42 0.33 1.86 108 FROM_EXCESS_BASE64 7252 1.83 2.05 1.75 109 XM_CamelCaseFrm001 7120 2.10 3.06 1.72 110 INVALID_MSGID 7014 1.25 0.17 1.69 111 HELO_NODOT 7009 1.36 0.55 1.69 112 HELO_NO_DOMAIN 7003 1.36 0.54 1.69 113 HTML_MIME_NO_HTML_TAG 6837 2.50 4.60 1.65 114 RCVD_IN_IADB_OPTIN 6531 1.33 0.71 1.57 115 IN_HORDE_ADDRESS_BOOK 6257 1.11 0.12 1.51 116 TR_XM_SpammyRelay 6171 4.92 13.40 1.49 117 MSGID_NOFQDN1 6148 1.07 0.05 1.48 118 TO_MALFORMED 5964 1.11 0.30 1.44 119 XM_B_Phish66 5909 2.10 3.76 1.42 120 XM_B_Investor 5527 2.33 4.81 1.33 121 TooManyTo_003 5420 1.06 0.45 1.31 122 T_XMDrugObfuBody_14 5316 2.28 4.74 1.28 123 TR_XM_SpammyWords5 5290 2.27 4.71 1.28 124 TR_Symld_Words 5274 1.21 1.06 1.27 125 XM_B_Unsub2 5172 1.69 2.79 1.25 126 XM_DK_Undo_01 5071 1.69 2.85 1.22 127 XMDiploma_00 5022 1.61 2.61 1.21 128 T_XMDrugObfuBody_08 4879 2.54 5.90 1.18 129 BOTNET 4852 4.22 11.74 1.17 130 XMGappySubj_01 4836 0.86 0.09 1.17 131 TR_DCC_Bayes_99 4816 7.02 21.52 1.16 132 XM_E_Blogspot 4723 0.84 0.11 1.14 133 XM_GoogleGroups 4676 1.76 3.34 1.13 134 UNTRUSTED_Relay 4588 3.23 8.48 1.11 135 XMBSHREFv2 4475 1.16 1.34 1.08 136 XMHTML_After_End 4329 1.14 1.39 1.04 137 XMStockSpam_06 4185 1.19 1.63 1.01 138 URI_HEX 4090 1.17 1.62 0.99 139 XMCapTrack 4052 0.81 0.40 0.98 140 TooManyTo_004 3831 0.77 0.38 0.92 141 RELAYCOUNTRY_CA 3764 2.94 7.98 0.91 142 XMBody_95 3564 0.67 0.19 0.86 143 XM_OfRef6 3537 1.40 2.76 0.85 144 XM_H_Long_From02 3459 0.93 1.17 0.83 145 RCVD_IN_MSPIKE_H5 3330 0.65 0.28 0.80 146 RCVD_IN_RP_SAFE 3242 0.75 0.69 0.78 147 TM2_M_VERY_LONG_WORD 3205 2.43 6.52 0.77 148 TVD_SPACE_RATIO 3041 0.56 0.12 0.73 149 RCVD_IN_MSPIKE_BL 2961 1.74 4.29 0.71 150 TooManyTo_005 2951 0.59 0.30 0.71 151 T_FILL_THIS_FORM_SHORT 2946 1.56 3.67 0.71 152 DKIM_ADSP_CUSTOM_MED 2939 0.76 0.89 0.71 153 TR_XM_MSPIKECOMBO 2926 1.68 4.11 0.71 154 XM_UB50 2901 1.64 3.95 0.70 155 TR_MetaPhish_Combo_01 2877 0.74 0.86 0.69 156 XMNoVowels 2866 0.67 0.61 0.69 157 TR_XM_Base64_M1 2858 0.79 1.03 0.69 158 RCVD_IN_RP_CERTIFIED 2805 0.63 0.53 0.68 159 XMGenDplmaNmb 2762 0.87 1.38 0.67 160 SpammyFromTLD_01 2733 1.77 4.51 0.66 161 HTTPS_HTTP_MISMATCH 2732 0.95 1.67 0.66 162 RCVD_IN_MSPIKE_L3 2702 1.06 2.09 0.65 163 T_TooManySym_03 2666 0.54 0.27 0.64 164 RCVD_IN_PSBL 2525 0.97 1.87 0.61 165 T_XMHurry_00 2518 0.91 1.66 0.61 166 HTML_TAG_BALANCE_BODY 2481 0.74 1.10 0.60 167 TR_XM_SpammyWords2 2459 3.75 11.54 0.59 168 T_OBFU_PDF_ATTACH 2383 0.48 0.25 0.57 169 T_XMDrugObfuBody_00 2303 0.99 2.06 0.56 170 XM_ShortIntro_01 2294 0.50 0.35 0.55 171 XMBdyGiftCard01 2288 0.78 1.36 0.55 172 XMBrknScrpt_02 2232 1.06 2.36 0.54 173 FROM_GOV_DKIM_AU 2225 0.48 0.35 0.54 174 T_Symld_Words_02 2211 0.58 0.69 0.53 175 TO_NO_BRKTS_HTML_ONLY 2162 0.41 0.12 0.52 176 XM_B_COPY_HTML 2110 0.66 1.03 0.51 177 SHORT_HELO_AND_INLINE_IMAGE 2106 0.39 0.08 0.51 178 RELAYCOUNTRY_GB 2054 0.58 0.78 0.50 179 XMPhish30 2020 0.67 1.13 0.49 180 XMSubMetaI_00 2015 0.60 0.89 0.49 181 NML_ADSP_CUSTOM_MED 1963 0.51 0.60 0.47 182 XMHTMLBadTable_001 1905 0.56 0.81 0.46 183 URI_TRY_3LD 1895 0.57 0.85 0.46 184 RCVD_IN_SORBS_DUL 1890 0.46 0.46 0.46 185 RCVD_IN_BL_SPAMCOP_NET 1878 3.16 9.86 0.45 186 XMLngstWrd_00 1874 1.68 4.70 0.45 187 XM_B_COVIDMETA 1856 0.93 2.11 0.45 188 HTML_IMAGE_ONLY_20 1805 0.51 0.68 0.44 189 MPART_ALT_DIFF_COUNT 1804 0.61 1.05 0.43 190 XM_ProductURIs 1777 0.50 0.69 0.43 191 XMDateMe_00 1774 0.40 0.34 0.43 192 SpammyFromTLD_02 1755 1.02 2.49 0.42 193 XM_H_PHPMailer 1709 0.49 0.67 0.41 194 TM2_M_BODY_EMPTY 1695 0.64 1.23 0.41 195 XMMoneyMeta_00 1691 0.49 0.71 0.41 196 DKIM_ADSP_NXDOMAIN 1680 0.48 0.66 0.41 197 XMLngstWrd_01 1666 1.62 4.64 0.40 198 XMPhish14 1664 0.57 0.98 0.40 199 HTML_IMAGE_ONLY_28 1642 0.42 0.46 0.40 200 XMBody_17 1637 1.43 3.99 0.39 ----------------------------------------------------------------------