Email: 513605 Autolearn: 0 AvgScore: 3.75 AvgScanTime: 1.28 sec Spam: 141884 Autolearn: 0 AvgScore: 14.55 AvgScanTime: 1.44 sec Ham: 371721 Autolearn: 0 AvgScore: -0.37 AvgScanTime: 1.22 sec Time Spent Running SA: 182.53 hours Time Spent Processing Spam: 56.88 hours Time Spent Processing Ham: 125.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132414 87.08 93.33 84.69 2 DKIM_SIGNED 112138 72.69 79.03 70.27 3 DCC_CHECK 109099 48.09 76.89 37.09 4 XM_B_Unicode 108155 69.99 76.23 67.61 5 RELAYCOUNTRY_US 107439 76.98 75.72 77.47 6 XM_DK_Pass 107284 70.42 75.61 68.44 7 DKIM_VALID 103840 68.30 73.19 66.44 8 XM_B_SpammyWords 93403 48.63 65.83 42.07 9 XMListUnsubscribeExists 89325 49.66 62.96 44.58 10 DKIM_VALID_AU 76470 50.76 53.90 49.56 11 BAYES_50 66082 53.67 46.57 56.38 12 XM_B_Unicode3 59898 40.67 42.22 40.08 13 XM_DK_Undo_02 53281 14.81 37.55 6.12 14 XM_B_SpammyWords2 52485 22.90 36.99 17.53 15 MIME_HTML_ONLY 47202 23.41 33.27 19.65 16 HTML_FONT_LOW_CONTRAST 46637 27.22 32.87 25.07 17 LOC_TINY_FONT_1 45758 24.23 32.25 21.17 18 TR_XM_DKIM_Undo 43277 11.68 30.50 4.50 19 RCVD_IN_MSPIKE_H2 42720 26.23 30.11 24.75 20 T_KAM_HTML_FONT_INVALID 42094 21.11 29.67 17.85 21 DKIM_VALID_EF 40906 26.76 28.83 25.97 22 BAYES_99 38418 11.47 27.08 5.51 23 FVGT_m_MULTI_ODD 37175 23.26 26.20 22.14 24 XMSubLong 34952 22.04 24.63 21.04 25 DCC_CHECK_NEGATIVE 32737 51.86 23.07 62.85 26 RELAYCOUNTRY_META 31158 11.71 21.96 7.80 27 XM_Body_Dirty_Words 30333 13.32 21.38 10.25 28 TR_DCC_Bayes_99 30069 7.30 21.19 2.00 29 T_TM2_M_HEADER_IN_MSG 29992 27.59 21.14 30.05 30 BAYES_999 29503 9.09 20.79 4.63 31 RCVD_IN_MSPIKE_WL 27600 25.19 19.45 27.39 32 FSL_BULK_SIG 27493 11.00 19.38 7.81 33 XM_Multi_Part_URI 24927 14.77 17.57 13.70 34 UNTRUSTED_Relay 23853 8.36 16.81 5.14 35 XM_UncommonTLD01 22538 6.79 15.88 3.31 36 BOTNET 22009 5.28 15.51 1.38 37 LOTS_OF_MONEY 19342 8.93 13.63 7.13 38 BOTNET_IPINHOSTNAME 19030 6.53 13.41 3.90 39 XM_B_Unsub 17432 10.87 12.29 10.32 40 XM_B_SpammyWords3 17364 6.11 12.24 3.77 41 TR_XM_SpammyRelay 17162 4.63 12.10 1.78 42 UNPARSEABLE_RELAY 16577 8.88 11.68 7.81 43 TR_XM_UnparsRelay 16106 7.40 11.35 5.89 44 TR_XM_SpammyWords2 15951 3.73 11.24 0.86 45 TR_XM_SpammyWords4 15651 6.06 11.03 4.17 46 RCVD_IN_MSPIKE_H3 15068 13.38 10.62 14.43 47 XMSexyCombo_05 14467 4.79 10.20 2.73 48 T_REMOTE_IMAGE 13852 5.45 9.76 3.80 49 XM_Evil_Numbers_Gen 13439 7.95 9.47 7.37 50 SpammyFromTLD_02 13290 2.83 9.37 0.33 51 XM_UB50 12365 5.72 8.71 4.57 52 XM_SendGrid 12159 7.37 8.57 6.91 53 HTML_IMAGE_RATIO_02 12120 6.29 8.54 5.43 54 HTML_MIME_NO_HTML_TAG 11778 4.27 8.30 2.74 55 KHOP_HELO_FCRDNS 11679 3.45 8.23 1.62 56 MPART_ALT_DIFF 11417 5.41 8.05 4.40 57 RCVD_IN_MSPIKE_H4 10972 9.79 7.73 10.57 58 T_HTML_TAG_BALANCE_CENTER 10832 2.15 7.63 0.05 59 RCVD_IN_BL_SPAMCOP_NET 10694 2.63 7.54 0.75 60 TR_XM_PhishingBody 10676 4.31 7.52 3.09 61 BAYES_80 10531 4.73 7.42 3.70 62 XMSubMetaSx_00 10351 4.13 7.30 2.93 63 BAYES_60 10175 7.94 7.17 8.23 64 LotsOfNums_01 10167 8.69 7.17 9.27 65 HTML_IMAGE_ONLY_08 9577 1.94 6.75 0.10 66 XM_B_Phish_Phrases 9361 4.54 6.60 3.75 67 MIXED_HREF_CASE 8743 1.70 6.16 0.00 68 MIXED_FONT_CASE 8578 1.67 6.05 0.00 69 XM_H_Long_From01 8424 5.23 5.94 4.96 70 DKIM_INVALID 8298 4.39 5.85 3.83 71 BODY_URI_ONLY 8204 1.61 5.78 0.02 72 HTML_FONT_SIZE_LARGE 7950 1.62 5.60 0.10 73 MIME_HTML_MOSTLY 7909 3.02 5.57 2.05 74 MIXED_CENTER_CASE 7855 1.53 5.54 0.00 75 MIXED_IMG_CASE 7847 1.53 5.53 0.00 76 MIXED_AREA_CASE 7846 1.53 5.53 0.00 77 TooManyTo_001 7563 7.59 5.33 8.46 78 XMStrtUSub 7558 4.54 5.33 4.24 79 XMNumbers 7368 3.96 5.19 3.48 80 TR_XM_DK_SendGrid 7009 4.31 4.94 4.08 81 XM_B_Phish66 6920 2.66 4.88 1.81 82 TM2_M_URI_OPT_OUT 6850 6.02 4.83 6.47 83 XM_OfRef6 6823 1.94 4.81 0.84 84 XM_SPF_SoftFail 6788 2.66 4.78 1.85 85 TR_XM_SPAMCOP 6709 1.50 4.73 0.27 86 RCVD_IN_MSPIKE_BL 6632 1.59 4.67 0.41 87 RELAYCOUNTRY_CA 6601 1.91 4.65 0.87 88 MIXED_CTYPE_CASE 6541 1.28 4.61 0.00 89 TR_XM_MSPIKECOMBO 6492 1.56 4.58 0.41 90 GOOG_STO_IMG_HTML 6241 1.22 4.40 0.00 91 HTML_IMAGE_RATIO_04 6225 5.36 4.39 5.73 92 SpammyFromTLD_01 6145 1.78 4.33 0.80 93 BAYES_95 6040 2.84 4.26 2.29 94 XM_B_SpammyTLD 6033 2.59 4.25 1.95 95 T_XMDrugObfuBody_08 5967 2.05 4.21 1.22 96 MIME_QP_LONG_LINE 5865 5.20 4.13 5.61 97 HTML_IMAGE_RATIO_06 5505 3.81 3.88 3.79 98 XM_B_Investor 5265 2.09 3.71 1.47 99 T_XMDrugObfuBody_00 5194 4.20 3.66 4.40 100 URI_NOVOWEL 5193 3.06 3.66 2.83 101 XM_DIRTYINTL 5084 1.20 3.58 0.29 102 T_TooManySym_01 4965 4.70 3.50 5.16 103 RCVD_IN_RP_SAFE 4941 5.88 3.48 6.79 104 T_XMDrugObfuBody_14 4763 2.56 3.36 2.26 105 TR_XM_SpammyWords5 4706 2.05 3.32 1.57 106 XMNoVowels 4573 2.44 3.22 2.15 107 MIME_HTML_ONLY_MULTI 4361 2.95 3.07 2.90 108 URIBL_DBL_SPAM 4244 0.83 2.99 0.00 109 XM_B_COVIDMETA 4160 1.32 2.93 0.71 110 ANY_BOUNCE_MESSAGE 4159 5.34 2.93 6.26 111 BOUNCE_MESSAGE 4158 5.34 2.93 6.26 112 HTML_IMAGE_RATIO_08 4077 2.56 2.87 2.44 113 TM2_M_VERY_LONG_WORD 4044 1.79 2.85 1.38 114 XM_B_Unsub2 4018 1.83 2.83 1.44 115 RCVD_IN_IADB_LISTED 3977 4.59 2.80 5.28 116 XMSexyCombo_01 3965 1.09 2.79 0.44 117 RCVD_IN_RP_CERTIFIED 3928 5.06 2.77 5.94 118 BAYES_40 3857 4.54 2.72 5.24 119 RELAYCOUNTRY_FR 3804 3.34 2.68 3.59 120 RCVD_IN_MSPIKE_L4 3562 0.83 2.51 0.19 121 XMDiploma_00 3537 1.78 2.49 1.50 122 TR_XM_SB_Phish 3530 2.11 2.49 1.96 123 RCVD_IN_IADB_SPF 3508 4.05 2.47 4.66 124 XMSubPhish11 3444 2.07 2.43 1.93 125 TR_XM_NoHeaderRelay 3427 0.84 2.42 0.24 126 XM_CamelCaseFrm001 3327 1.95 2.34 1.80 127 XM_H_Undi_Recip 3306 0.76 2.33 0.15 128 RCVD_IN_IADB_DK 3277 3.58 2.31 4.07 129 RCVD_IN_IADB_SENDERID 3221 3.66 2.27 4.19 130 HTML_IMAGE_ONLY_24 3216 0.88 2.27 0.34 131 XM_OfRef7 3205 0.69 2.26 0.10 132 TR_XM_SpammyWords3 3189 0.81 2.25 0.26 133 URI_GOOG_STO_SPAMMY 3178 0.62 2.24 0.00 134 TR_XM_COVIDMETA1 3084 0.78 2.17 0.24 135 XM_B_SpammyWords4 3016 0.90 2.13 0.43 136 RCVD_IN_PSBL 2973 0.60 2.10 0.03 137 RELAYCOUNTRY_CH 2966 0.61 2.09 0.04 138 BOTNET_NORDNS 2922 0.58 2.06 0.01 139 BAYES_20 2893 3.35 2.04 3.86 140 MAILING_LIST_MULTI 2884 2.57 2.03 2.77 141 XMBrknScrpt_02 2784 1.13 1.96 0.82 142 XM_URI_RBL 2760 0.64 1.95 0.14 143 XM_UB99 2724 0.53 1.92 0.00 144 RELAYCOUNTRY_DE 2695 1.22 1.90 0.96 145 FILL_THIS_FORM 2644 0.74 1.86 0.31 146 TR_XM_PHPDW 2511 0.70 1.77 0.29 147 JH_SPAMMY_HEADERS 2501 0.49 1.76 0.00 148 XM_UB60 2487 0.53 1.75 0.07 149 URI_HEX 2454 1.33 1.73 1.17 150 FROM_EXCESS_BASE64 2451 2.27 1.73 2.48 151 XM_Body_Dirty_Words_01 2418 0.69 1.70 0.30 152 BAYES_00 2418 9.44 1.70 12.39 153 TR_XM_PHPForged 2407 0.65 1.70 0.25 154 XMBounce_01 2404 2.96 1.69 3.44 155 XM_DK_Undo_01 2402 1.61 1.69 1.58 156 TR_Symld_Words 2395 1.76 1.69 1.79 157 TR_XM_FormFill2 2358 0.64 1.66 0.24 158 XM_H_PHPOS 2338 0.63 1.65 0.24 159 PDS_OTHER_BAD_TLD 2323 0.67 1.64 0.30 160 SUBJ_ALL_CAPS 2318 1.73 1.63 1.77 161 XMStockSpam_06 2277 1.37 1.60 1.28 162 HOSTED_IMG_DIRECT_MX 2237 0.44 1.58 0.00 163 TR_XM_COVIDMETA4 2230 0.65 1.57 0.30 164 XM_DrugUnitList 2196 0.43 1.55 0.00 165 ALIBABA_IMG_NOT_RCVD_ALI 2194 0.43 1.55 0.00 166 HTML_TAG_BALANCE_BODY 2187 0.82 1.54 0.55 167 XMSubMetaSSx_00 2174 0.51 1.53 0.13 168 URIBL_BLACK 2174 0.44 1.53 0.02 169 XM_UB80 2141 0.44 1.51 0.03 170 ALL_TRUSTED 2124 12.06 1.50 16.10 171 FILL_THIS_FORM_LONG 2119 0.47 1.49 0.08 172 HELO_NODOT 2035 1.59 1.43 1.66 173 HELO_NO_DOMAIN 2034 1.59 1.43 1.66 174 T_FILL_THIS_FORM_SHORT 2012 1.02 1.42 0.86 175 URIBL_DBL_ABUSE_SPAM 2006 0.48 1.41 0.12 176 DIET_1 1991 0.59 1.40 0.28 177 XMGenDplmaNmb 1983 0.91 1.40 0.72 178 USER_IN_DEF_DKIM_WL 1979 8.35 1.39 11.01 179 RCVD_IN_MSPIKE_L5 1968 0.42 1.39 0.06 180 TR_XM_Undi_Recip2 1961 0.39 1.38 0.01 181 T_FILL_THIS_FORM_LOAN 1950 0.45 1.37 0.10 182 T_XMHurry_00 1945 0.74 1.37 0.50 183 URI_TRY_3LD 1940 1.06 1.37 0.94 184 RELAYCOUNTRY_GB 1937 1.06 1.37 0.94 185 TR_XM_Undi_Recip9 1928 0.38 1.36 0.00 186 TR_Mismatch_TLD_02 1924 0.44 1.36 0.09 187 RELAYCOUNTRY_NL 1900 0.49 1.34 0.17 188 RELAYCOUNTRY_AU 1891 0.60 1.33 0.32 189 RELAYCOUNTRY_IN 1889 0.45 1.33 0.11 190 TR_XM_INV_DKIM 1845 0.58 1.30 0.31 191 TR_LOTS_OF_MONEY3 1829 0.50 1.29 0.20 192 HTML_FONT_SIZE_HUGE 1825 0.39 1.29 0.05 193 UNDISC_MONEY 1818 0.36 1.28 0.00 194 XM_H_FedEx_Spoof 1815 0.38 1.28 0.03 195 DKIM_ADSP_NXDOMAIN 1803 0.55 1.27 0.27 196 XMBody_17 1795 0.58 1.27 0.32 197 DATE_IN_PAST_03_06 1788 0.50 1.26 0.21 198 XMMoneyMeta_00 1785 0.73 1.26 0.53 199 ADVANCE_FEE_2_NEW_FORM 1776 0.35 1.25 0.00 200 RCVD_IN_IADB_VOUCHED 1732 2.69 1.22 3.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 314815 87.08 93.33 84.69 2 RELAYCOUNTRY_US 287954 76.98 75.72 77.47 3 DKIM_SIGNED 261213 72.69 79.03 70.27 4 XM_DK_Pass 254397 70.42 75.61 68.44 5 XM_B_Unicode 251337 69.99 76.23 67.61 6 DKIM_VALID 246969 68.30 73.19 66.44 7 DCC_CHECK_NEGATIVE 233629 51.86 23.07 62.85 8 BAYES_50 209589 53.67 46.57 56.38 9 DKIM_VALID_AU 184219 50.76 53.90 49.56 10 XMListUnsubscribeExists 165717 49.66 62.96 44.58 11 XM_B_SpammyWords 156369 48.63 65.83 42.07 12 XM_B_Unicode3 149001 40.67 42.22 40.08 13 DCC_CHECK 137876 48.09 76.89 37.09 14 T_TM2_M_HEADER_IN_MSG 111692 27.59 21.14 30.05 15 RCVD_IN_MSPIKE_WL 101799 25.19 19.45 27.39 16 DKIM_VALID_EF 96530 26.76 28.83 25.97 17 HTML_FONT_LOW_CONTRAST 93181 27.22 32.87 25.07 18 RCVD_IN_MSPIKE_H2 91996 26.23 30.11 24.75 19 FVGT_m_MULTI_ODD 82281 23.26 26.20 22.14 20 LOC_TINY_FONT_1 78678 24.23 32.25 21.17 21 XMSubLong 78226 22.04 24.63 21.04 22 MIME_HTML_ONLY 73051 23.41 33.27 19.65 23 T_KAM_HTML_FONT_INVALID 66352 21.11 29.67 17.85 24 XM_B_SpammyWords2 65156 22.90 36.99 17.53 25 ALL_TRUSTED 59830 12.06 1.50 16.10 26 RCVD_IN_MSPIKE_H3 53650 13.38 10.62 14.43 27 XM_Multi_Part_URI 50935 14.77 17.57 13.70 28 BAYES_00 46071 9.44 1.70 12.39 29 USER_IN_DEF_DKIM_WL 40917 8.35 1.39 11.01 30 RCVD_IN_MSPIKE_H4 39303 9.79 7.73 10.57 31 XM_B_Unsub 38372 10.87 12.29 10.32 32 XM_Body_Dirty_Words 38085 13.32 21.38 10.25 33 LotsOfNums_01 34451 8.69 7.17 9.27 34 TooManyTo_001 31444 7.59 5.33 8.46 35 BAYES_60 30605 7.94 7.17 8.23 36 UNPARSEABLE_RELAY 29036 8.88 11.68 7.81 37 FSL_BULK_SIG 29024 11.00 19.38 7.81 38 RELAYCOUNTRY_META 28987 11.71 21.96 7.80 39 TR_XM_DK_Bayes 27733 5.59 0.68 7.46 40 XM_Evil_Numbers_Gen 27380 7.95 9.47 7.37 41 TR_XM_DK_Bayes1 26916 5.42 0.66 7.24 42 LOTS_OF_MONEY 26506 8.93 13.63 7.13 43 XM_DKIMWhitelistDomains 25736 5.03 0.08 6.92 44 XM_SendGrid 25678 7.37 8.57 6.91 45 RCVD_IN_RP_SAFE 25237 5.88 3.48 6.79 46 TM2_M_URI_OPT_OUT 24064 6.02 4.83 6.47 47 ANY_BOUNCE_MESSAGE 23260 5.34 2.93 6.26 48 BOUNCE_MESSAGE 23260 5.34 2.93 6.26 49 TR_XM_DK_Bayes2 22934 4.62 0.57 6.17 50 XM_DK_Undo_02 22767 14.81 37.55 6.12 51 RCVD_IN_RP_CERTIFIED 22062 5.06 2.77 5.94 52 TR_XM_UnparsRelay 21901 7.40 11.35 5.89 53 HTML_IMAGE_RATIO_04 21305 5.36 4.39 5.73 54 MIME_QP_LONG_LINE 20841 5.20 4.13 5.61 55 BAYES_99 20490 11.47 27.08 5.51 56 HTML_IMAGE_RATIO_02 20187 6.29 8.54 5.43 57 RCVD_IN_IADB_LISTED 19612 4.59 2.80 5.28 58 BAYES_40 19466 4.54 2.72 5.24 59 T_TooManySym_01 19195 4.70 3.50 5.16 60 UNTRUSTED_Relay 19088 8.36 16.81 5.14 61 XM_PDF 18468 3.93 1.20 4.97 62 XM_H_Long_From01 18450 5.23 5.94 4.96 63 RCVD_IN_IADB_SPF 17304 4.05 2.47 4.66 64 BAYES_999 17199 9.09 20.79 4.63 65 XM_UB50 16989 5.72 8.71 4.57 66 TR_XM_DKIM_Undo 16717 11.68 30.50 4.50 67 MPART_ALT_DIFF 16373 5.41 8.05 4.40 68 T_XMDrugObfuBody_00 16361 4.20 3.66 4.40 69 XM_H_Trusted_IP 16182 3.15 0.00 4.35 70 XMStrtUSub 15777 4.54 5.33 4.24 71 RCVD_IN_IADB_SENDERID 15585 3.66 2.27 4.19 72 TR_XM_SpammyWords4 15499 6.06 11.03 4.17 73 TR_XM_DK_SendGrid 15148 4.31 4.94 4.08 74 RCVD_IN_IADB_DK 15134 3.58 2.31 4.07 75 BOTNET_IPINHOSTNAME 14509 6.53 13.41 3.90 76 BAYES_20 14330 3.35 2.04 3.86 77 DKIM_INVALID 14244 4.39 5.85 3.83 78 T_REMOTE_IMAGE 14142 5.45 9.76 3.80 79 HTML_IMAGE_RATIO_06 14075 3.81 3.88 3.79 80 XM_B_SpammyWords3 14002 6.11 12.24 3.77 81 XM_B_Phish_Phrases 13933 4.54 6.60 3.75 82 BAYES_80 13737 4.73 7.42 3.70 83 RELAYCOUNTRY_FR 13350 3.34 2.68 3.59 84 XMNumbers 12952 3.96 5.19 3.48 85 XMBounce_01 12796 2.96 1.69 3.44 86 XM_UncommonTLD01 12311 6.79 15.88 3.31 87 RCVD_IN_IADB_VOUCHED 12099 2.69 1.22 3.25 88 TR_XM_PhishingBody 11471 4.31 7.52 3.09 89 XMSubMetaSx_00 10882 4.13 7.30 2.93 90 MIME_HTML_ONLY_MULTI 10766 2.95 3.07 2.90 91 URI_NOVOWEL 10518 3.06 3.66 2.83 92 MAILING_LIST_MULTI 10301 2.57 2.03 2.77 93 HTML_MIME_NO_HTML_TAG 10167 4.27 8.30 2.74 94 XMSexyCombo_05 10134 4.79 10.20 2.73 95 T_TooManySym_02 9561 2.14 1.02 2.57 96 FROM_EXCESS_BASE64 9201 2.27 1.73 2.48 97 HTML_IMAGE_RATIO_08 9075 2.56 2.87 2.44 98 BAYES_05 8896 2.02 1.03 2.39 99 RCVD_IN_MSPIKE_H5 8846 2.03 1.10 2.38 100 BAYES_95 8528 2.84 4.26 2.29 101 T_XMDrugObfuBody_14 8398 2.56 3.36 2.26 102 TooManyTo_002 8367 1.87 0.88 2.25 103 XMNoVowels 7982 2.44 3.22 2.15 104 RCVD_IN_IADB_OPTIN 7722 1.73 0.81 2.08 105 MIME_HTML_MOSTLY 7623 3.02 5.57 2.05 106 TR_DCC_Bayes_99 7425 7.30 21.19 2.00 107 TR_XM_SB_Phish 7285 2.11 2.49 1.96 108 XM_B_SpammyTLD 7259 2.59 4.25 1.95 109 XMSubPhish11 7185 2.07 2.43 1.93 110 IN_HORDE_ADDRESS_BOOK 6969 1.38 0.09 1.87 111 XM_SPF_SoftFail 6869 2.66 4.78 1.85 112 INVALID_MSGID 6754 1.38 0.24 1.82 113 XM_B_Phish66 6721 2.66 4.88 1.81 114 XM_CamelCaseFrm001 6706 1.95 2.34 1.80 115 TR_Symld_Words 6637 1.76 1.69 1.79 116 TR_XM_SpammyRelay 6600 4.63 12.10 1.78 117 SUBJ_ALL_CAPS 6573 1.73 1.63 1.77 118 MSGID_NOFQDN1 6268 1.25 0.10 1.69 119 HELO_NODOT 6156 1.59 1.43 1.66 120 HELO_NO_DOMAIN 6156 1.59 1.43 1.66 121 TO_MALFORMED 6051 1.41 0.83 1.63 122 KHOP_HELO_FCRDNS 6040 3.45 8.23 1.62 123 XM_DK_Undo_01 5859 1.61 1.69 1.58 124 TR_XM_SpammyWords5 5823 2.05 3.32 1.57 125 TooManyTo_003 5612 1.28 0.68 1.51 126 XMDiploma_00 5580 1.78 2.49 1.50 127 XM_B_Investor 5465 2.09 3.71 1.47 128 XM_B_Unsub2 5362 1.83 2.83 1.44 129 XMGappySubj_01 5337 1.07 0.11 1.44 130 XMSubNoVowel 5311 1.23 0.69 1.43 131 TM2_M_VERY_LONG_WORD 5145 1.79 2.85 1.38 132 BOTNET 5127 5.28 15.51 1.38 133 XM_GoogleGroups 4941 1.14 0.65 1.33 134 XMStockSpam_06 4768 1.37 1.60 1.28 135 XMCapTrack 4747 1.05 0.45 1.28 136 TVD_RCVD_IP 4575 1.04 0.52 1.23 137 T_XMDrugObfuBody_08 4537 2.05 4.21 1.22 138 URI_HEX 4367 1.33 1.73 1.17 139 HTML_FONT_FACE_BAD 4292 1.02 0.68 1.15 140 TooManyTo_004 3904 0.91 0.54 1.05 141 DKIM_ADSP_CUSTOM_MED 3898 1.02 0.94 1.05 142 XM_H_Long_From02 3792 1.02 1.02 1.02 143 RELAYCOUNTRY_DE 3580 1.22 1.90 0.96 144 HTML_IMAGE_ONLY_20 3531 0.78 0.32 0.95 145 RELAYCOUNTRY_GB 3511 1.06 1.37 0.94 146 URI_TRY_3LD 3482 1.06 1.37 0.94 147 IN_ZIMBRA_NJ_WHITELIST 3273 0.64 0.01 0.88 148 RELAYCOUNTRY_CA 3221 1.91 4.65 0.87 149 TR_XM_SpammyWords2 3213 3.73 11.24 0.86 150 T_FILL_THIS_FORM_SHORT 3206 1.02 1.42 0.86 151 XM_OfRef6 3119 1.94 4.81 0.84 152 TooManyTo_005 3090 0.71 0.40 0.83 153 XMBrknScrpt_02 3030 1.13 1.96 0.82 154 SpammyFromTLD_01 2982 1.78 4.33 0.80 155 TR_MetaPhish_Combo_01 2892 0.85 1.05 0.78 156 XMBody_95 2844 0.60 0.17 0.77 157 HELO_MISC_IP 2818 0.56 0.03 0.76 158 XMBSHREFv2 2818 0.65 0.35 0.76 159 HTTPS_HTTP_MISMATCH 2809 0.88 1.22 0.76 160 XMHTML_After_End 2808 0.83 1.04 0.76 161 T_TooManySym_03 2794 0.64 0.35 0.75 162 RCVD_IN_BL_SPAMCOP_NET 2793 2.63 7.54 0.75 163 XMGenDplmaNmb 2673 0.91 1.40 0.72 164 TR_MSPIKEBAYES00 2669 0.53 0.02 0.72 165 XM_B_COVIDMETA 2635 1.32 2.93 0.71 166 XMBdyGiftCard01 2501 0.75 0.96 0.67 167 NML_ADSP_CUSTOM_MED 2477 0.69 0.76 0.67 168 XMPhish30 2337 0.78 1.17 0.63 169 T_OBFU_PDF_ATTACH 2244 0.48 0.17 0.60 170 FORGED_GMAIL_RCVD 2235 0.66 0.82 0.60 171 TVD_SPACE_RATIO_MINFP 2137 0.44 0.09 0.57 172 FROM_GOV_DKIM_AU 2106 0.49 0.29 0.57 173 XM_B_COPY_HTML 2094 0.57 0.58 0.56 174 XM_ProductURIs 2082 0.60 0.71 0.56 175 XM_ShortIntro_01 2042 0.54 0.52 0.55 176 HTML_TAG_BALANCE_BODY 2042 0.82 1.54 0.55 177 XMMoneyMeta_00 1982 0.73 1.26 0.53 178 XM_H_PHPMailer 1908 0.63 0.95 0.51 179 MPART_ALT_DIFF_COUNT 1899 0.53 0.59 0.51 180 XM_B_REG_HTML 1886 0.51 0.52 0.51 181 T_XMHurry_00 1877 0.74 1.37 0.50 182 RCVD_IN_SORBS_DUL 1818 0.50 0.53 0.49 183 TVD_SPACE_RATIO 1803 0.38 0.09 0.49 184 SHORT_HELO_AND_INLINE_IMAGE 1730 0.42 0.31 0.47 185 XM_D_tchamptons_WL 1703 0.33 0.00 0.46 186 T_HTML_ATTACH 1696 0.38 0.17 0.46 187 XMBody_78 1678 0.53 0.73 0.45 188 MISSING_HEADERS 1675 0.55 0.80 0.45 189 URI_TRUNCATED 1669 0.38 0.19 0.45 190 HTML_IMAGE_ONLY_28 1656 0.46 0.50 0.45 191 MSGID_FROM_MTA_HEADER 1643 0.40 0.28 0.44 192 XMSexyCombo_01 1635 1.09 2.79 0.44 193 TM2_M_A_HREF_HREF 1632 0.53 0.78 0.44 194 HTML_IMAGE_ONLY_32 1610 0.44 0.47 0.43 195 FROM_GOV_SPOOF 1594 0.33 0.08 0.43 196 XM_B_SpammyWords4 1590 0.90 2.13 0.43 197 PLING_QUERY 1559 0.46 0.56 0.42 198 XM_B_DNDMA 1549 0.53 0.81 0.42 199 DATE_IN_FUTURE_12_24 1543 0.30 0.02 0.42 200 RCVD_IN_MSPIKE_BL 1539 1.59 4.67 0.41 ----------------------------------------------------------------------