Email: 577449 Autolearn: 0 AvgScore: 1.73 AvgScanTime: 1.35 sec Spam: 139628 Autolearn: 0 AvgScore: 14.53 AvgScanTime: 1.61 sec Ham: 437821 Autolearn: 0 AvgScore: -2.36 AvgScanTime: 1.26 sec Time Spent Running SA: 215.85 hours Time Spent Processing Spam: 62.32 hours Time Spent Processing Ham: 153.53 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131965 89.07 94.51 87.33 2 DKIM_SIGNED 109105 64.23 78.14 59.79 3 DCC_CHECK 107753 44.26 77.17 33.77 4 XM_DK_Pass 105625 62.72 75.65 58.59 5 XM_B_Unicode 104062 72.65 74.53 72.06 6 RELAYCOUNTRY_US 103223 77.06 73.93 78.06 7 DKIM_VALID 102003 60.67 73.05 56.72 8 XMListUnsubscribeExists 90861 45.05 65.07 38.67 9 XM_B_SpammyWords 90567 46.92 64.86 41.20 10 DKIM_VALID_AU 74594 45.16 53.42 42.52 11 BAYES_50 62968 51.11 45.10 53.03 12 XM_B_Unicode3 56417 42.19 40.41 42.75 13 XM_DK_Undo_02 52232 13.08 37.41 5.33 14 XM_B_SpammyWords2 49988 21.62 35.80 17.10 15 LOC_TINY_FONT_1 47238 22.87 33.83 19.37 16 HTML_FONT_LOW_CONTRAST 47218 24.78 33.82 21.89 17 MIME_HTML_ONLY 46910 25.59 33.60 23.04 18 TR_XM_DKIM_Undo 42312 10.47 30.30 4.15 19 RCVD_IN_MSPIKE_H2 41182 23.54 29.49 21.64 20 T_KAM_HTML_FONT_INVALID 39898 17.92 28.57 14.53 21 BAYES_99 38593 10.02 27.64 4.39 22 DKIM_VALID_EF 38308 23.64 27.44 22.43 23 FVGT_m_MULTI_ODD 36748 21.28 26.32 19.67 24 XMSubLong 33313 22.07 23.86 21.49 25 DCC_CHECK_NEGATIVE 31816 55.69 22.79 66.19 26 XM_Body_Dirty_Words 30996 12.16 22.20 8.95 27 T_TM2_M_HEADER_IN_MSG 30489 25.85 21.84 27.13 28 TR_DCC_Bayes_99 29903 6.58 21.42 1.85 29 RELAYCOUNTRY_META 29655 9.58 21.24 5.86 30 BAYES_999 29258 7.79 20.95 3.59 31 UNTRUSTED_Relay 26222 7.35 18.78 3.71 32 RCVD_IN_MSPIKE_WL 26124 22.50 18.71 23.70 33 FSL_BULK_SIG 25312 10.24 18.13 7.72 34 XM_Multi_Part_URI 24586 13.11 17.61 11.68 35 BOTNET 22376 4.80 16.03 1.22 36 XM_UncommonTLD01 22255 6.08 15.94 2.94 37 BOTNET_IPINHOSTNAME 18883 5.93 13.52 3.50 38 LOTS_OF_MONEY 18462 9.05 13.22 7.72 39 XM_B_SpammyWords3 15850 5.58 11.35 3.73 40 XM_B_Unsub 15693 9.53 11.24 8.98 41 TR_XM_SpammyRelay 15687 3.71 11.23 1.31 42 UNPARSEABLE_RELAY 15339 7.67 10.99 6.61 43 TR_XM_UnparsRelay 14859 6.32 10.64 4.94 44 TR_XM_SpammyWords4 14428 5.92 10.33 4.51 45 SpammyFromTLD_02 14315 2.76 10.25 0.37 46 RCVD_IN_MSPIKE_H3 14225 11.93 10.19 12.48 47 TR_XM_SpammyWords2 13972 2.93 10.01 0.68 48 XMSexyCombo_05 13960 4.54 10.00 2.80 49 XM_Evil_Numbers_Gen 12951 8.44 9.28 8.18 50 XM_UB50 12605 4.62 9.03 3.21 51 HTML_IMAGE_RATIO_02 12442 5.81 8.91 4.82 52 T_REMOTE_IMAGE 12166 4.91 8.71 3.69 53 XM_SendGrid 12092 6.49 8.66 5.79 54 HTML_MIME_NO_HTML_TAG 11793 3.68 8.45 2.16 55 TR_XM_PhishingBody 11767 4.08 8.43 2.69 56 BAYES_60 11288 7.34 8.08 7.10 57 LotsOfNums_01 11285 7.66 8.08 7.52 58 MPART_ALT_DIFF 11104 9.58 7.95 10.10 59 KHOP_HELO_FCRDNS 10713 2.92 7.67 1.40 60 RCVD_IN_MSPIKE_H4 10394 8.55 7.44 8.90 61 BAYES_80 10269 4.34 7.35 3.38 62 XM_B_Phish_Phrases 10125 3.88 7.25 2.81 63 T_HTML_TAG_BALANCE_CENTER 10015 1.79 7.17 0.07 64 HTML_IMAGE_ONLY_08 9378 1.71 6.72 0.11 65 RCVD_IN_BL_SPAMCOP_NET 9234 2.04 6.61 0.58 66 XMSubMetaSx_00 9040 3.54 6.47 2.61 67 TooManyTo_001 8229 7.55 5.89 8.08 68 MIXED_FONT_CASE 8163 1.41 5.85 0.00 69 MIXED_CENTER_CASE 8144 1.41 5.83 0.00 70 MIXED_HREF_CASE 8121 1.41 5.82 0.00 71 MIXED_IMG_CASE 8118 1.41 5.81 0.00 72 MIXED_AREA_CASE 8117 1.41 5.81 0.00 73 TM2_M_URI_OPT_OUT 8015 5.08 5.74 4.87 74 XM_B_Phish66 7906 2.56 5.66 1.57 75 MIME_HTML_MOSTLY 7787 3.01 5.58 2.19 76 BODY_URI_ONLY 7748 1.35 5.55 0.01 77 XM_H_Long_From01 7487 4.54 5.36 4.28 78 DKIM_INVALID 7102 3.56 5.09 3.07 79 XMNumbers 6422 3.16 4.60 2.70 80 HTML_IMAGE_RATIO_04 6411 13.65 4.59 16.54 81 RCVD_IN_MSPIKE_BL 6374 1.47 4.56 0.49 82 MIME_QP_LONG_LINE 6323 4.70 4.53 4.76 83 TR_XM_MSPIKECOMBO 6299 1.45 4.51 0.48 84 HTML_FONT_SIZE_LARGE 6112 1.12 4.38 0.08 85 XM_B_SpammyTLD 6062 2.28 4.34 1.62 86 RELAYCOUNTRY_CA 5986 1.53 4.29 0.66 87 TR_XM_SPAMCOP 5915 1.20 4.24 0.24 88 XM_SPF_SoftFail 5856 2.23 4.19 1.60 89 TR_XM_DK_SendGrid 5836 3.81 4.18 3.70 90 GOOG_STO_IMG_HTML 5823 1.01 4.17 0.00 91 BAYES_95 5774 2.55 4.14 2.04 92 URI_NOVOWEL 5730 2.74 4.10 2.30 93 URIBL_DBL_SPAM 5673 0.99 4.06 0.01 94 XMStrtUSub 5636 8.92 4.04 10.48 95 XM_B_Investor 5584 1.84 4.00 1.16 96 XM_OfRef6 5435 1.55 3.89 0.81 97 RCVD_IN_RP_SAFE 5396 5.29 3.86 5.74 98 MIXED_CTYPE_CASE 5312 0.92 3.80 0.00 99 T_XMDrugObfuBody_00 5163 3.07 3.70 2.87 100 SpammyFromTLD_01 4804 1.33 3.44 0.65 101 T_XMDrugObfuBody_08 4648 1.59 3.33 1.04 102 RCVD_IN_RP_CERTIFIED 4521 4.68 3.24 5.14 103 RELAYCOUNTRY_FR 4440 2.67 3.18 2.50 104 TR_XM_SpammyWords5 4439 1.83 3.18 1.40 105 HTML_IMAGE_RATIO_06 4365 4.73 3.13 5.24 106 T_XMDrugObfuBody_14 4247 2.00 3.04 1.67 107 MIME_HTML_ONLY_MULTI 4242 6.94 3.04 8.19 108 XM_B_COVIDMETA 4101 1.19 2.94 0.63 109 T_TooManySym_01 4078 4.34 2.92 4.80 110 XMNoVowels 4058 1.87 2.91 1.54 111 XM_B_Unsub2 4046 1.63 2.90 1.22 112 XMDiploma_00 4002 2.07 2.87 1.82 113 XM_DIRTYINTL 3966 0.91 2.84 0.30 114 HTML_IMAGE_RATIO_08 3944 2.01 2.82 1.76 115 URI_GOOG_STO_SPAMMY 3925 0.68 2.81 0.00 116 BAYES_40 3864 4.85 2.77 5.51 117 ANY_BOUNCE_MESSAGE 3648 4.62 2.61 5.26 118 BOUNCE_MESSAGE 3646 4.62 2.61 5.26 119 RCVD_IN_IADB_LISTED 3577 4.01 2.56 4.48 120 HTML_FONT_SIZE_HUGE 3529 0.64 2.53 0.04 121 XM_UB60 3523 0.67 2.52 0.08 122 XM_DK_Undo_01 3407 1.76 2.44 1.55 123 TR_XM_SB_Phish 3367 1.95 2.41 1.80 124 XM_UB99 3324 0.58 2.38 0.01 125 JH_SPAMMY_HEADERS 3297 0.57 2.36 0.00 126 XMSubPhish11 3259 1.92 2.33 1.78 127 XMSexyCombo_01 3151 0.85 2.26 0.41 128 RCVD_IN_IADB_SPF 3148 3.56 2.25 3.97 129 MAILING_LIST_MULTI 3145 2.48 2.25 2.55 130 BOTNET_NORDNS 3135 0.55 2.25 0.01 131 TM2_M_VERY_LONG_WORD 3003 1.32 2.15 1.06 132 RCVD_IN_IADB_DK 2989 3.17 2.14 3.50 133 XM_B_SpammyWords4 2983 0.77 2.14 0.34 134 RCVD_IN_IADB_SENDERID 2953 3.23 2.11 3.59 135 RCVD_IN_MSPIKE_L4 2926 0.64 2.10 0.18 136 BAYES_20 2906 4.35 2.08 5.08 137 XMBounce_01 2850 2.27 2.04 2.34 138 HTML_IMAGE_ONLY_32 2817 0.76 2.02 0.35 139 XM_CamelCaseFrm001 2651 1.65 1.90 1.57 140 XM_URI_RBL 2643 0.53 1.89 0.10 141 XM_Body_Dirty_Words_01 2639 0.59 1.89 0.18 142 RCVD_IN_PSBL 2634 0.57 1.89 0.15 143 PDS_OTHER_BAD_TLD 2601 0.58 1.86 0.17 144 TR_XM_NoHeaderRelay 2588 0.60 1.85 0.20 145 BAYES_00 2540 12.73 1.82 16.21 146 URI_HEX 2506 1.40 1.79 1.28 147 XMStockSpam_06 2497 1.20 1.79 1.02 148 XMBrknScrpt_02 2491 1.12 1.78 0.91 149 TR_XM_SpammyWords3 2453 0.71 1.76 0.38 150 HOSTED_IMG_DIRECT_MX 2428 0.42 1.74 0.00 151 ALIBABA_IMG_NOT_RCVD_ALI 2401 0.42 1.72 0.00 152 XM_DrugUnitList 2399 0.42 1.72 0.00 153 TR_XM_PHPDW 2391 0.58 1.71 0.22 154 DIET_1 2369 0.61 1.70 0.27 155 DATE_IN_PAST_06_12 2339 0.48 1.68 0.10 156 TR_XM_COVIDMETA4 2296 0.65 1.64 0.33 157 XMGenDplmaNmb 2293 0.90 1.64 0.66 158 TR_XM_PHPForged 2260 0.54 1.62 0.20 159 TR_XM_FormFill2 2223 0.54 1.59 0.20 160 XM_H_PHPOS 2200 0.53 1.58 0.19 161 ALL_TRUSTED 2200 13.41 1.58 17.18 162 FROM_EXCESS_BASE64 2199 1.94 1.57 2.06 163 URIBL_BLACK 2163 0.39 1.55 0.02 164 XMMoneyMeta_00 2139 0.74 1.53 0.48 165 TR_XM_PhishingBody3 2129 0.37 1.52 0.00 166 RELAYCOUNTRY_NL 2110 0.48 1.51 0.15 167 SUBJ_ALL_CAPS 2092 1.33 1.50 1.27 168 XMBody_17 2077 0.61 1.49 0.34 169 T_XMHurry_00 2077 1.80 1.49 1.89 170 HELO_NODOT 2055 1.48 1.47 1.48 171 HELO_NO_DOMAIN 2055 1.48 1.47 1.48 172 XMSlimDrugH 2045 0.50 1.46 0.19 173 RELAYCOUNTRY_AU 2034 0.59 1.46 0.32 174 XM_UB999 2020 0.36 1.45 0.01 175 FROM_SUSPICIOUS_NTLD 2003 0.39 1.43 0.05 176 RELAYCOUNTRY_IN 1983 0.43 1.42 0.12 177 FROM_SUSPICIOUS_NTLD_FP 1921 0.37 1.38 0.05 178 XM_UB80 1909 0.34 1.37 0.02 179 RELAYCOUNTRY_DE 1905 0.68 1.36 0.46 180 TR_XM_COVIDMETA1 1881 0.47 1.35 0.20 181 RCVD_IN_MSPIKE_L5 1873 0.40 1.34 0.10 182 XM_PDF 1814 3.55 1.30 4.26 183 XM_B_DNDMA 1795 0.65 1.29 0.44 184 T_FILL_THIS_FORM_SHORT 1791 0.82 1.28 0.68 185 TR_XM_INV_DKIM 1763 0.36 1.26 0.07 186 URI_TRY_3LD 1727 0.94 1.24 0.85 187 XMBdyGiftCard01 1720 0.71 1.23 0.54 188 HTTPS_HTTP_MISMATCH 1701 1.38 1.22 1.43 189 XMSexyCombo_04 1685 0.36 1.21 0.09 190 RELAYCOUNTRY_GB 1645 0.88 1.18 0.79 191 TR_XM_BayesRelay 1588 0.28 1.14 0.00 192 MPART_ALT_DIFF_COUNT 1576 0.55 1.13 0.37 193 RCVD_IN_IADB_VOUCHED 1556 2.28 1.11 2.65 194 TR_LOTS_OF_MONEY3 1537 0.40 1.10 0.18 195 TM2_M_A_HREF_HREF 1534 0.44 1.10 0.23 196 XM_B_SEO 1518 0.35 1.09 0.11 197 RCVD_IN_RP_RNBL 1506 0.28 1.08 0.02 198 RCVD_IN_MSPIKE_H5 1505 2.02 1.08 2.32 199 RCVD_IN_MSPIKE_L3 1500 0.41 1.07 0.20 200 XM_ProductURIs 1491 0.61 1.07 0.47 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 382347 89.07 94.51 87.33 2 RELAYCOUNTRY_US 341763 77.06 73.93 78.06 3 XM_B_Unicode 315472 72.65 74.53 72.06 4 DCC_CHECK_NEGATIVE 289783 55.69 22.79 66.19 5 DKIM_SIGNED 261769 64.23 78.14 59.79 6 XM_DK_Pass 256539 62.72 75.65 58.59 7 DKIM_VALID 248326 60.67 73.05 56.72 8 BAYES_50 232187 51.11 45.10 53.03 9 XM_B_Unicode3 187182 42.19 40.41 42.75 10 DKIM_VALID_AU 186176 45.16 53.42 42.52 11 XM_B_SpammyWords 180393 46.92 64.86 41.20 12 XMListUnsubscribeExists 169307 45.05 65.07 38.67 13 DCC_CHECK 147843 44.26 77.17 33.77 14 T_TM2_M_HEADER_IN_MSG 118771 25.85 21.84 27.13 15 RCVD_IN_MSPIKE_WL 103783 22.50 18.71 23.70 16 MIME_HTML_ONLY 100864 25.59 33.60 23.04 17 DKIM_VALID_EF 98213 23.64 27.44 22.43 18 HTML_FONT_LOW_CONTRAST 95853 24.78 33.82 21.89 19 RCVD_IN_MSPIKE_H2 94726 23.54 29.49 21.64 20 XMSubLong 94107 22.07 23.86 21.49 21 FVGT_m_MULTI_ODD 86136 21.28 26.32 19.67 22 LOC_TINY_FONT_1 84827 22.87 33.83 19.37 23 ALL_TRUSTED 75212 13.41 1.58 17.18 24 XM_B_SpammyWords2 74865 21.62 35.80 17.10 25 HTML_IMAGE_RATIO_04 72422 13.65 4.59 16.54 26 BAYES_00 70969 12.73 1.82 16.21 27 XM_H_Trusted_IP 66486 11.51 0.00 15.19 28 T_KAM_HTML_FONT_INVALID 63604 17.92 28.57 14.53 29 HTML_FONT_FACE_BAD 62267 11.00 0.90 14.22 30 RCVD_IN_MSPIKE_H3 54660 11.93 10.19 12.48 31 XM_Multi_Part_URI 51117 13.11 17.61 11.68 32 XMStrtUSub 45893 8.92 4.04 10.48 33 MPART_ALT_DIFF 44226 9.58 7.95 10.10 34 USER_IN_DEF_DKIM_WL 43173 7.71 0.97 9.86 35 XM_B_Unsub 39329 9.53 11.24 8.98 36 XM_Body_Dirty_Words 39198 12.16 22.20 8.95 37 RCVD_IN_MSPIKE_H4 38967 8.55 7.44 8.90 38 MIME_HTML_ONLY_MULTI 35861 6.94 3.04 8.19 39 XM_Evil_Numbers_Gen 35801 8.44 9.28 8.18 40 TooManyTo_001 35358 7.55 5.89 8.08 41 LOTS_OF_MONEY 33817 9.05 13.22 7.72 42 FSL_BULK_SIG 33796 10.24 18.13 7.72 43 LotsOfNums_01 32924 7.66 8.08 7.52 44 BAYES_60 31089 7.34 8.08 7.10 45 UNPARSEABLE_RELAY 28931 7.67 10.99 6.61 46 TR_XM_DK_Bayes 27707 4.99 0.77 6.33 47 XM_DKIMWhitelistDomains 27591 4.78 0.02 6.30 48 TR_XM_DK_Bayes1 26840 4.83 0.76 6.13 49 RELAYCOUNTRY_META 25673 9.58 21.24 5.86 50 XM_SendGrid 25367 6.49 8.66 5.79 51 RCVD_IN_RP_SAFE 25145 5.29 3.86 5.74 52 BAYES_40 24144 4.85 2.77 5.51 53 XM_DK_Undo_02 23321 13.08 37.41 5.33 54 BOUNCE_MESSAGE 23049 4.62 2.61 5.26 55 ANY_BOUNCE_MESSAGE 23049 4.62 2.61 5.26 56 TR_XM_DK_Bayes2 22949 4.12 0.62 5.24 57 HTML_IMAGE_RATIO_06 22929 4.73 3.13 5.24 58 RCVD_IN_RP_CERTIFIED 22522 4.68 3.24 5.14 59 BAYES_20 22241 4.35 2.08 5.08 60 TR_XM_UnparsRelay 21640 6.32 10.64 4.94 61 XMSubNoVowel 21349 3.88 0.77 4.88 62 TM2_M_URI_OPT_OUT 21306 5.08 5.74 4.87 63 HTML_IMAGE_RATIO_02 21091 5.81 8.91 4.82 64 T_TooManySym_01 21008 4.34 2.92 4.80 65 MIME_QP_LONG_LINE 20836 4.70 4.53 4.76 66 TR_XM_SpammyWords4 19751 5.92 10.33 4.51 67 RCVD_IN_IADB_LISTED 19604 4.01 2.56 4.48 68 BAYES_99 19241 10.02 27.64 4.39 69 XM_H_Long_From01 18747 4.54 5.36 4.28 70 XM_PDF 18664 3.55 1.30 4.26 71 TR_XM_DKIM_Undo 18168 10.47 30.30 4.15 72 RCVD_IN_IADB_SPF 17403 3.56 2.25 3.97 73 XM_B_SpammyWords3 16345 5.58 11.35 3.73 74 UNTRUSTED_Relay 16237 7.35 18.78 3.71 75 TR_XM_DK_SendGrid 16185 3.81 4.18 3.70 76 T_REMOTE_IMAGE 16172 4.91 8.71 3.69 77 BAYES_999 15733 7.79 20.95 3.59 78 RCVD_IN_IADB_SENDERID 15721 3.23 2.11 3.59 79 BOTNET_IPINHOSTNAME 15336 5.93 13.52 3.50 80 RCVD_IN_IADB_DK 15326 3.17 2.14 3.50 81 BAYES_80 14810 4.34 7.35 3.38 82 BAYES_05 14201 2.70 1.00 3.24 83 XM_UB50 14049 4.62 9.03 3.21 84 DKIM_INVALID 13443 3.56 5.09 3.07 85 XM_UncommonTLD01 12865 6.08 15.94 2.94 86 T_XMDrugObfuBody_00 12545 3.07 3.70 2.87 87 XM_B_Phish_Phrases 12289 3.88 7.25 2.81 88 XMSexyCombo_05 12251 4.54 10.00 2.80 89 XMNumbers 11818 3.16 4.60 2.70 90 TR_XM_PhishingBody 11774 4.08 8.43 2.69 91 RCVD_IN_IADB_VOUCHED 11589 2.28 1.11 2.65 92 XMSubMetaSx_00 11421 3.54 6.47 2.61 93 MAILING_LIST_MULTI 11169 2.48 2.25 2.55 94 RELAYCOUNTRY_FR 10957 2.67 3.18 2.50 95 XMBounce_01 10240 2.27 2.04 2.34 96 T_TooManySym_02 10177 1.94 0.74 2.32 97 RCVD_IN_MSPIKE_H5 10156 2.02 1.08 2.32 98 URI_NOVOWEL 10082 2.74 4.10 2.30 99 MIME_HTML_MOSTLY 9584 3.01 5.58 2.19 100 HTML_MIME_NO_HTML_TAG 9461 3.68 8.45 2.16 101 FROM_EXCESS_BASE64 9014 1.94 1.57 2.06 102 BAYES_95 8928 2.55 4.14 2.04 103 TooManyTo_002 8689 1.72 0.88 1.98 104 T_XMHurry_00 8294 1.80 1.49 1.89 105 XMSubGarbage 8189 1.43 0.05 1.87 106 TR_DCC_Bayes_99 8100 6.58 21.42 1.85 107 XMSubLongNoVowel 8071 1.45 0.20 1.84 108 XMDiploma_00 7960 2.07 2.87 1.82 109 TR_XM_SB_Phish 7877 1.95 2.41 1.80 110 XMSubPhish11 7801 1.92 2.33 1.78 111 HTML_IMAGE_RATIO_08 7686 2.01 2.82 1.76 112 IN_HORDE_ADDRESS_BOOK 7437 1.31 0.08 1.70 113 RCVD_IN_IADB_OPTIN 7352 1.45 0.71 1.68 114 T_XMDrugObfuBody_14 7296 2.00 3.04 1.67 115 XM_B_SpammyTLD 7082 2.28 4.34 1.62 116 XM_SPF_SoftFail 7023 2.23 4.19 1.60 117 INVALID_MSGID 6892 1.24 0.17 1.57 118 XM_CamelCaseFrm001 6881 1.65 1.90 1.57 119 XM_B_Phish66 6857 2.56 5.66 1.57 120 XM_DK_Undo_01 6775 1.76 2.44 1.55 121 XMNoVowels 6725 1.87 2.91 1.54 122 HELO_NODOT 6474 1.48 1.47 1.48 123 HELO_NO_DOMAIN 6474 1.48 1.47 1.48 124 MSGID_NOFQDN1 6356 1.12 0.08 1.45 125 HTTPS_HTTP_MISMATCH 6242 1.38 1.22 1.43 126 KHOP_HELO_FCRDNS 6145 2.92 7.67 1.40 127 TR_XM_SpammyWords5 6145 1.83 3.18 1.40 128 TO_MALFORMED 6056 1.07 0.10 1.38 129 TR_Symld_Words 5833 1.26 1.05 1.33 130 TR_XM_SpammyRelay 5716 3.71 11.23 1.31 131 TooManyTo_003 5669 1.14 0.66 1.29 132 URI_HEX 5593 1.40 1.79 1.28 133 SUBJ_ALL_CAPS 5564 1.33 1.50 1.27 134 XM_B_Unsub2 5362 1.63 2.90 1.22 135 BOTNET 5352 4.80 16.03 1.22 136 TVD_RCVD_IP 5112 0.99 0.44 1.17 137 XM_GoogleGroups 5108 1.06 0.74 1.17 138 XM_B_Investor 5061 1.84 4.00 1.16 139 XMCapTrack 5008 0.97 0.44 1.14 140 XMGappySubj_01 4989 0.91 0.19 1.14 141 XM_E_Blogspot 4962 0.88 0.08 1.13 142 TM2_M_VERY_LONG_WORD 4630 1.32 2.15 1.06 143 HTML_IMAGE_ONLY_28 4578 0.89 0.40 1.05 144 T_XMDrugObfuBody_08 4558 1.59 3.33 1.04 145 XMStockSpam_06 4447 1.20 1.79 1.02 146 TR_MetaPhish_Combo_01 4186 0.95 0.94 0.96 147 TooManyTo_004 3998 0.82 0.51 0.91 148 XMBrknScrpt_02 3987 1.12 1.78 0.91 149 URI_TRY_3LD 3705 0.94 1.24 0.85 150 XMBSHREFv2 3673 0.70 0.27 0.84 151 XM_H_Long_From02 3626 0.86 0.97 0.83 152 DKIM_ADSP_CUSTOM_MED 3571 0.83 0.90 0.82 153 XM_OfRef6 3535 1.55 3.89 0.81 154 RELAYCOUNTRY_GB 3439 0.88 1.18 0.79 155 HELO_MISC_IP 3435 0.61 0.05 0.78 156 XMHTML_After_End 3232 0.80 1.00 0.74 157 TooManyTo_005 3170 0.65 0.40 0.72 158 IN_ZIMBRA_NJ_WHITELIST 3135 0.55 0.01 0.72 159 TO_IN_SUBJ 3042 0.56 0.14 0.69 160 T_TooManySym_03 2980 0.58 0.27 0.68 161 T_FILL_THIS_FORM_SHORT 2962 0.82 1.28 0.68 162 TR_XM_SpammyWords2 2960 2.93 10.01 0.68 163 HTML_IMAGE_ONLY_20 2955 0.55 0.17 0.67 164 XMGenDplmaNmb 2878 0.90 1.64 0.66 165 RELAYCOUNTRY_CA 2874 1.53 4.29 0.66 166 SpammyFromTLD_01 2858 1.33 3.44 0.65 167 T_OBFU_PDF_ATTACH 2826 0.54 0.21 0.65 168 XM_B_COVIDMETA 2753 1.19 2.94 0.63 169 XMBody_95 2559 0.48 0.16 0.58 170 TR_MSPIKEBAYES00 2529 0.45 0.03 0.58 171 RCVD_IN_BL_SPAMCOP_NET 2520 2.04 6.61 0.58 172 XM_B_COPY_HTML 2452 0.58 0.62 0.56 173 RCVD_IN_SORBS_DUL 2408 0.55 0.54 0.55 174 XMBdyGiftCard01 2386 0.71 1.23 0.54 175 XM_ShortIntro_01 2370 0.55 0.57 0.54 176 NML_ADSP_CUSTOM_MED 2315 0.57 0.72 0.53 177 FROM_GOV_DKIM_AU 2269 0.50 0.46 0.52 178 RCVD_IN_MSPIKE_BL 2129 1.47 4.56 0.49 179 XMMoneyMeta_00 2114 0.74 1.53 0.48 180 TR_XM_MSPIKECOMBO 2097 1.45 4.51 0.48 181 XMPhish30 2075 0.60 1.01 0.47 182 XM_ProductURIs 2050 0.61 1.07 0.47 183 RELAYCOUNTRY_DE 2029 0.68 1.36 0.46 184 XMLngstWrd_00 1977 0.42 0.34 0.45 185 TVD_SPACE_RATIO 1967 0.36 0.07 0.45 186 XM_B_DNDMA 1933 0.65 1.29 0.44 187 XMSubMetaI_00 1927 0.52 0.77 0.44 188 FROM_GOV_SPOOF 1914 0.35 0.09 0.44 189 FORGED_GMAIL_RCVD 1855 0.50 0.75 0.42 190 MISSING_HEADERS 1810 0.46 0.61 0.41 191 XMSexyCombo_01 1786 0.85 2.26 0.41 192 XM_H_PHPMailer 1775 0.53 0.92 0.41 193 HTML_TAG_BALANCE_BODY 1772 0.50 0.81 0.40 194 XMLngstWrd_01 1766 0.38 0.30 0.40 195 SHORT_HELO_AND_INLINE_IMAGE 1742 0.38 0.32 0.40 196 LOW_PRICE 1728 0.40 0.41 0.39 197 XMPhish14 1718 0.55 1.06 0.39 198 TVD_SPACE_RATIO_MINFP 1710 0.33 0.15 0.39 199 TR_XM_SpammyWords3 1651 0.71 1.76 0.38 200 TM2_M_BODY_EMPTY 1641 0.31 0.11 0.37 ----------------------------------------------------------------------