Email: 540598 Autolearn: 0 AvgScore: 2.58 AvgScanTime: 1.42 sec Spam: 130418 Autolearn: 0 AvgScore: 14.63 AvgScanTime: 1.71 sec Ham: 410180 Autolearn: 0 AvgScore: -1.25 AvgScanTime: 1.33 sec Time Spent Running SA: 213.65 hours Time Spent Processing Spam: 61.99 hours Time Spent Processing Ham: 151.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124916 89.74 95.78 87.82 2 DCC_CHECK 102286 47.32 78.43 37.42 3 DKIM_SIGNED 99933 70.16 76.63 68.11 4 RELAYCOUNTRY_US 96797 79.70 74.22 81.44 5 XM_B_Unicode 96255 71.83 73.80 71.21 6 XM_DK_Pass 95703 68.45 73.38 66.88 7 DKIM_VALID 92321 66.43 70.79 65.04 8 XM_B_SpammyWords 85361 49.57 65.45 44.52 9 XMListUnsubscribeExists 80806 47.89 61.96 43.42 10 DKIM_VALID_AU 67209 49.40 51.53 48.72 11 BAYES_50 59633 50.57 45.72 52.11 12 XM_B_Unicode3 56115 43.82 43.03 44.08 13 XM_DK_Undo_02 47221 13.88 36.21 6.78 14 XM_B_SpammyWords2 46739 22.94 35.84 18.84 15 MIME_HTML_ONLY 44849 25.57 34.39 22.76 16 LOC_TINY_FONT_1 42824 24.31 32.84 21.59 17 HTML_FONT_LOW_CONTRAST 40414 27.27 30.99 26.09 18 TR_XM_DKIM_Undo 36947 10.53 28.33 4.88 19 FVGT_m_MULTI_ODD 36802 23.13 28.22 21.51 20 DKIM_VALID_EF 35807 25.48 27.46 24.86 21 T_KAM_HTML_FONT_INVALID 35746 19.71 27.41 17.26 22 BAYES_99 33424 11.72 25.63 7.30 23 XMSubLong 32441 21.11 24.87 19.91 24 T_TM2_M_HEADER_IN_MSG 30360 28.10 23.28 29.63 25 RELAYCOUNTRY_META 28587 7.92 21.92 3.46 26 FSL_BULK_SIG 28504 12.06 21.86 8.95 27 DCC_CHECK_NEGATIVE 28074 52.64 21.53 62.54 28 RCVD_IN_MSPIKE_H2 28028 19.54 21.49 18.92 29 RCVD_IN_MSPIKE_WL 26752 26.74 20.51 28.73 30 XM_Body_Dirty_Words 26362 12.57 20.21 10.14 31 BAYES_999 25482 9.55 19.54 6.38 32 TR_DCC_Bayes_99 25243 6.60 19.36 2.54 33 UNTRUSTED_Relay 24181 5.34 18.54 1.15 34 XM_UncommonTLD01 22487 6.92 17.24 3.64 35 BOTNET 21900 5.11 16.79 1.40 36 XM_Multi_Part_URI 20005 11.85 15.34 10.74 37 XM_B_Unsub 19017 12.21 14.58 11.46 38 BOTNET_IPINHOSTNAME 18856 6.47 14.46 3.93 39 TR_XM_SpammyRelay 17407 4.31 13.35 1.44 40 XM_B_SpammyWords3 16278 7.04 12.48 5.31 41 LOTS_OF_MONEY 15827 10.67 12.14 10.20 42 HTML_IMAGE_RATIO_02 14874 7.01 11.40 5.61 43 UNPARSEABLE_RELAY 14629 8.89 11.22 8.15 44 RCVD_IN_MSPIKE_H3 14544 13.36 11.15 14.07 45 SpammyFromTLD_02 14505 2.95 11.12 0.35 46 TR_XM_UnparsRelay 14184 7.36 10.88 6.25 47 RCVD_IN_BL_SPAMCOP_NET 13985 3.37 10.72 1.04 48 TR_XM_SpammyWords4 12752 7.47 9.78 6.74 49 XMSexyCombo_05 12341 4.67 9.46 3.15 50 XM_Evil_Numbers_Gen 12157 8.46 9.32 8.19 51 TR_XM_SpammyWords2 12139 2.94 9.31 0.92 52 RCVD_IN_MSPIKE_H4 11337 11.45 8.69 12.33 53 HTML_MIME_NO_HTML_TAG 11333 3.86 8.69 2.33 54 XMSubMetaSx_00 11127 4.50 8.53 3.22 55 XM_UB50 11098 2.63 8.51 0.76 56 T_REMOTE_IMAGE 10948 4.94 8.39 3.84 57 XM_SendGrid 10947 7.60 8.39 7.35 58 MPART_ALT_DIFF 10028 7.17 7.69 7.01 59 BAYES_80 9878 4.59 7.57 3.64 60 KHOP_HELO_FCRDNS 9776 4.02 7.50 2.92 61 LotsOfNums_01 9570 8.52 7.34 8.89 62 BAYES_60 9392 7.71 7.20 7.88 63 T_HTML_TAG_BALANCE_CENTER 9205 1.74 7.06 0.05 64 HTML_IMAGE_ONLY_08 9161 1.77 7.02 0.09 65 BODY_URI_ONLY 8495 1.58 6.51 0.01 66 GOOG_STO_IMG_HTML 8391 1.55 6.43 0.00 67 TR_XM_PhishingBody 8196 3.71 6.28 2.89 68 XM_B_Phish_Phrases 8175 4.29 6.27 3.66 69 TooManyTo_001 8085 7.45 6.20 7.85 70 XM_H_Long_From01 7634 5.06 5.85 4.81 71 DKIM_INVALID 7612 3.73 5.84 3.06 72 HTML_FONT_SIZE_LARGE 7595 1.48 5.82 0.10 73 MIXED_CENTER_CASE 7430 1.37 5.70 0.00 74 MIXED_HREF_CASE 7428 1.37 5.70 0.00 75 MIXED_IMG_CASE 7421 1.38 5.69 0.00 76 MIXED_AREA_CASE 7414 1.37 5.68 0.00 77 MIXED_CTYPE_CASE 7410 1.37 5.68 0.00 78 MIME_HTML_MOSTLY 7189 2.97 5.51 2.17 79 MIXED_FONT_CASE 7188 1.33 5.51 0.00 80 TR_XM_SPAMCOP 7156 1.64 5.49 0.41 81 XM_B_SpammyTLD 6936 2.72 5.32 1.90 82 XMNumbers 6691 3.49 5.13 2.97 83 RCVD_IN_RP_RNBL 6250 1.22 4.79 0.08 84 HTML_IMAGE_RATIO_04 5930 5.33 4.55 5.58 85 TR_XM_DK_SendGrid 5852 4.57 4.49 4.60 86 RELAYCOUNTRY_CA 5651 1.71 4.33 0.87 87 RCVD_IN_PSBL 5489 1.15 4.21 0.17 88 URI_NOVOWEL 5403 3.07 4.14 2.73 89 XM_SPF_SoftFail 5329 4.49 4.09 4.62 90 RCVD_IN_VALIDITY_RPBL 5254 1.02 4.03 0.07 91 RCVD_IN_MSPIKE_BL 5243 1.01 4.02 0.05 92 BAYES_95 5075 2.63 3.89 2.23 93 MIME_QP_LONG_LINE 5041 5.32 3.87 5.79 94 HTML_IMAGE_RATIO_06 4992 3.64 3.83 3.58 95 XMStrtUSub 4845 4.68 3.71 4.99 96 XM_B_Investor 4838 1.99 3.71 1.44 97 XM_B_Phish66 4804 2.22 3.68 1.76 98 TM2_M_URI_OPT_OUT 4563 4.72 3.50 5.11 99 WANT_TO_ORDER 4492 0.84 3.44 0.01 100 BAYES_40 4355 4.82 3.34 5.29 101 TR_XM_NoHeaderRelay 4300 0.95 3.30 0.20 102 TR_XM_SpammyWords5 4208 1.81 3.23 1.35 103 HTML_IMAGE_RATIO_08 4183 4.04 3.21 4.31 104 MIME_HTML_ONLY_MULTI 4179 4.92 3.20 5.47 105 XM_OfRef6 4149 1.42 3.18 0.86 106 XMSexyCombo_01 4001 1.42 3.07 0.90 107 RCVD_IN_IADB_LISTED 3940 4.98 3.02 5.60 108 BOTNET_NORDNS 3925 0.74 3.01 0.02 109 T_XMDrugObfuBody_08 3921 1.86 3.01 1.50 110 XM_B_COVIDMETA 3770 1.36 2.89 0.87 111 DATE_IN_PAST_03_06 3740 0.84 2.87 0.19 112 SpammyFromTLD_01 3684 1.15 2.82 0.62 113 RELAYCOUNTRY_CH 3679 0.71 2.82 0.04 114 URIBL_DBL_SPAM 3552 0.66 2.72 0.01 115 TR_XM_PHPDW 3548 0.88 2.72 0.29 116 BAYES_20 3521 3.60 2.70 3.89 117 TM2_M_VERY_LONG_WORD 3495 1.40 2.68 1.00 118 TR_XM_PHPForged 3457 0.83 2.65 0.25 119 XM_CamelCaseFrm001 3449 2.01 2.64 1.81 120 T_TooManySym_01 3426 4.69 2.63 5.35 121 RCVD_IN_IADB_SPF 3400 4.35 2.61 4.90 122 TR_XM_FormFill2 3393 0.82 2.60 0.25 123 XM_DIRTYINTL 3389 0.83 2.60 0.27 124 T_XMDrugObfuBody_14 3373 2.46 2.59 2.42 125 PDS_OTHER_BAD_TLD 3367 0.84 2.58 0.29 126 XM_H_PHPOS 3365 0.81 2.58 0.24 127 BAYES_00 3341 12.11 2.56 15.14 128 RCVD_IN_IADB_DK 3151 3.82 2.42 4.27 129 RCVD_IN_IADB_SENDERID 3133 3.91 2.40 4.39 130 TR_XM_MSPIKECOMBO 3117 0.61 2.39 0.04 131 RCVD_IN_MSPIKE_L3 3104 0.61 2.38 0.04 132 XM_B_Unsub2 3024 1.62 2.32 1.39 133 TR_XM_SB_Phish 2938 2.95 2.25 3.17 134 XM_UB99 2921 0.54 2.24 0.00 135 XMDiploma_00 2869 1.41 2.20 1.15 136 XMSubPhish11 2849 2.91 2.18 3.14 137 XM_URI_RBL 2776 0.62 2.13 0.14 138 FROM_EXCESS_BASE64 2735 2.25 2.10 2.30 139 RELAYCOUNTRY_FR 2719 0.66 2.08 0.21 140 XM_B_SpammyWords4 2701 0.91 2.07 0.54 141 ALIBABA_IMG_NOT_RCVD_ALI 2700 0.50 2.07 0.00 142 HOSTED_IMG_DIRECT_MX 2686 0.50 2.06 0.00 143 XM_DK_Undo_01 2573 1.50 1.97 1.35 144 JH_SPAMMY_HEADERS 2560 0.47 1.96 0.00 145 MAILING_LIST_MULTI 2422 2.55 1.86 2.77 146 XM_UB60 2386 0.49 1.83 0.06 147 ALL_TRUSTED 2331 12.69 1.79 16.15 148 T_XMDrugObfuBody_00 2326 0.96 1.78 0.69 149 TR_XM_SpammyWords3 2210 0.42 1.69 0.01 150 RCVD_IN_IADB_VOUCHED 2199 2.90 1.69 3.28 151 TR_XM_COVIDMETA1 2158 0.60 1.65 0.26 152 XMBody_17 2151 0.64 1.65 0.32 153 DIET_1 2146 0.67 1.65 0.36 154 RCVD_IN_MSPIKE_ZBI 2126 0.40 1.63 0.01 155 URI_HEX 2121 1.27 1.63 1.16 156 XMStockSpam_06 2069 1.32 1.59 1.23 157 XM_UB999 2062 0.38 1.58 0.00 158 RELAYCOUNTRY_AU 2052 0.62 1.57 0.32 159 HTML_FONT_SIZE_HUGE 2030 0.42 1.56 0.05 160 TR_XM_COVIDMETA4 2017 0.58 1.55 0.27 161 XMBrknScrpt_02 1973 0.91 1.51 0.72 162 RELAYCOUNTRY_DE 1956 0.59 1.50 0.30 163 HTML_FONT_FACE_BAD 1929 3.26 1.48 3.83 164 RCVD_IN_RP_SAFE 1917 5.32 1.47 6.54 165 T_FILL_THIS_FORM_SHORT 1901 1.00 1.46 0.86 166 URIBL_BLACK 1891 0.37 1.45 0.03 167 XMGenDplmaNmb 1879 0.86 1.44 0.68 168 TR_XM_INV_DKIM 1849 0.40 1.42 0.08 169 XM_PDF 1820 4.81 1.40 5.89 170 HK_RANDOM_FROM 1814 0.43 1.39 0.12 171 TR_XM_BayesRelay 1802 0.34 1.38 0.01 172 BAYES_05 1777 2.24 1.36 2.52 173 USER_IN_DEF_DKIM_WL 1734 9.03 1.33 11.48 174 FROM_SUSPICIOUS_NTLD 1704 0.34 1.31 0.04 175 XM_UB80 1681 0.33 1.29 0.02 176 RELAYCOUNTRY_NL 1663 0.44 1.28 0.18 177 XM_Body_Dirty_Words_01 1653 0.43 1.27 0.16 178 T_XMHurry_00 1652 0.59 1.27 0.37 179 FROM_SUSPICIOUS_NTLD_FP 1630 0.33 1.25 0.04 180 RELAYCOUNTRY_IN 1607 0.37 1.23 0.10 181 SUBJ_ALL_CAPS 1595 1.92 1.22 2.14 182 XM_H_Undi_Recip 1593 0.40 1.22 0.13 183 XMMoneyMeta_00 1583 0.63 1.21 0.44 184 HK_RANDOM_ENVFROM 1556 0.36 1.19 0.09 185 RCVD_IN_IADB_OPTIN 1544 1.88 1.18 2.11 186 XMSubMetaI_00 1520 0.63 1.17 0.46 187 T_Symld_Words_02 1518 0.69 1.16 0.54 188 TR_BOTNET_NEGATE 1518 0.49 1.16 0.28 189 URI_TRY_3LD 1475 0.88 1.13 0.80 190 TR_Symld_Words 1434 1.34 1.10 1.42 191 XMPhish30 1431 0.60 1.10 0.44 192 XMBody_78 1429 0.51 1.10 0.33 193 RELAYCOUNTRY_CN 1424 0.32 1.09 0.07 194 XMSubMetaSSx_00 1423 0.37 1.09 0.14 195 MIME_CHARSET_FARAWAY 1421 0.39 1.09 0.16 196 DKIM_ADSP_CUSTOM_MED 1370 1.01 1.05 0.99 197 TR_Mismatch_TLD_02 1356 0.33 1.04 0.10 198 XMSlimDrugH 1319 0.42 1.01 0.24 199 RELAYCOUNTRY_GB 1275 0.79 0.98 0.73 200 XM_H_Long_From02 1252 1.19 0.96 1.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 360200 89.74 95.78 87.82 2 RELAYCOUNTRY_US 334035 79.70 74.22 81.44 3 XM_B_Unicode 292070 71.83 73.80 71.21 4 DKIM_SIGNED 279358 70.16 76.63 68.11 5 XM_DK_Pass 274333 68.45 73.38 66.88 6 DKIM_VALID 266797 66.43 70.79 65.04 7 DCC_CHECK_NEGATIVE 256514 52.64 21.53 62.54 8 BAYES_50 213754 50.57 45.72 52.11 9 DKIM_VALID_AU 199835 49.40 51.53 48.72 10 XM_B_SpammyWords 182629 49.57 65.45 44.52 11 XM_B_Unicode3 180792 43.82 43.03 44.08 12 XMListUnsubscribeExists 178104 47.89 61.96 43.42 13 DCC_CHECK 153499 47.32 78.43 37.42 14 T_TM2_M_HEADER_IN_MSG 121527 28.10 23.28 29.63 15 RCVD_IN_MSPIKE_WL 117827 26.74 20.51 28.73 16 HTML_FONT_LOW_CONTRAST 107026 27.27 30.99 26.09 17 DKIM_VALID_EF 101958 25.48 27.46 24.86 18 MIME_HTML_ONLY 93369 25.57 34.39 22.76 19 LOC_TINY_FONT_1 88575 24.31 32.84 21.59 20 FVGT_m_MULTI_ODD 88240 23.13 28.22 21.51 21 XMSubLong 81654 21.11 24.87 19.91 22 RCVD_IN_MSPIKE_H2 77605 19.54 21.49 18.92 23 XM_B_SpammyWords2 77289 22.94 35.84 18.84 24 T_KAM_HTML_FONT_INVALID 70789 19.71 27.41 17.26 25 ALL_TRUSTED 66247 12.69 1.79 16.15 26 BAYES_00 62101 12.11 2.56 15.14 27 RCVD_IN_MSPIKE_H3 57695 13.36 11.15 14.07 28 RCVD_IN_MSPIKE_H4 50578 11.45 8.69 12.33 29 USER_IN_DEF_DKIM_WL 47107 9.03 1.33 11.48 30 XM_B_Unsub 47015 12.21 14.58 11.46 31 XM_Multi_Part_URI 44043 11.85 15.34 10.74 32 LOTS_OF_MONEY 41840 10.67 12.14 10.20 33 XM_Body_Dirty_Words 41594 12.57 20.21 10.14 34 FSL_BULK_SIG 36703 12.06 21.86 8.95 35 LotsOfNums_01 36480 8.52 7.34 8.89 36 XM_Evil_Numbers_Gen 33595 8.46 9.32 8.19 37 UNPARSEABLE_RELAY 33435 8.89 11.22 8.15 38 BAYES_60 32302 7.71 7.20 7.88 39 TooManyTo_001 32195 7.45 6.20 7.85 40 TR_XM_DK_Bayes 30735 5.88 0.79 7.49 41 XM_SendGrid 30134 7.60 8.39 7.35 42 XM_DKIMWhitelistDomains 30100 5.61 0.16 7.34 43 BAYES_99 29942 11.72 25.63 7.30 44 TR_XM_DK_Bayes1 29762 5.69 0.76 7.26 45 MPART_ALT_DIFF 28759 7.17 7.69 7.01 46 XM_DK_Undo_02 27807 13.88 36.21 6.78 47 TR_XM_SpammyWords4 27633 7.47 9.78 6.74 48 XM_H_Trusted_IP 27388 5.07 0.00 6.68 49 RCVD_IN_RP_SAFE 26833 5.32 1.47 6.54 50 BAYES_999 26158 9.55 19.54 6.38 51 TR_XM_UnparsRelay 25620 7.36 10.88 6.25 52 TR_XM_DK_Bayes2 25577 4.87 0.56 6.24 53 XM_PDF 24167 4.81 1.40 5.89 54 MIME_QP_LONG_LINE 23731 5.32 3.87 5.79 55 RCVD_IN_RP_CERTIFIED 23433 4.54 0.84 5.71 56 RCVD_IN_VALIDITY_SAFE 23008 4.44 0.76 5.61 57 HTML_IMAGE_RATIO_02 22997 7.01 11.40 5.61 58 RCVD_IN_IADB_LISTED 22976 4.98 3.02 5.60 59 HTML_IMAGE_RATIO_04 22890 5.33 4.55 5.58 60 MIME_HTML_ONLY_MULTI 22428 4.92 3.20 5.47 61 T_TooManySym_01 21948 4.69 2.63 5.35 62 XM_B_SpammyWords3 21785 7.04 12.48 5.31 63 BAYES_40 21715 4.82 3.34 5.29 64 TM2_M_URI_OPT_OUT 20940 4.72 3.50 5.11 65 XMStrtUSub 20459 4.68 3.71 4.99 66 RCVD_IN_IADB_SPF 20102 4.35 2.61 4.90 67 RCVD_IN_VALIDITY_CERTIFIED 20070 3.79 0.30 4.89 68 TR_XM_DKIM_Undo 20004 10.53 28.33 4.88 69 XM_H_Long_From01 19736 5.06 5.85 4.81 70 XM_SPF_SoftFail 18964 4.49 4.09 4.62 71 TR_XM_DK_SendGrid 18860 4.57 4.49 4.60 72 RCVD_IN_IADB_SENDERID 17998 3.91 2.40 4.39 73 HTML_IMAGE_RATIO_08 17679 4.04 3.21 4.31 74 RCVD_IN_IADB_DK 17506 3.82 2.42 4.27 75 BOTNET_IPINHOSTNAME 16107 6.47 14.46 3.93 76 BAYES_20 15953 3.60 2.70 3.89 77 T_REMOTE_IMAGE 15745 4.94 8.39 3.84 78 HTML_FONT_FACE_BAD 15692 3.26 1.48 3.83 79 XM_B_Phish_Phrases 15015 4.29 6.27 3.66 80 ANY_BOUNCE_MESSAGE 14975 2.99 0.93 3.65 81 BOUNCE_MESSAGE 14970 2.99 0.92 3.65 82 BAYES_80 14924 4.59 7.57 3.64 83 XM_UncommonTLD01 14920 6.92 17.24 3.64 84 HTML_IMAGE_RATIO_06 14701 3.64 3.83 3.58 85 RELAYCOUNTRY_META 14208 7.92 21.92 3.46 86 RCVD_IN_IADB_VOUCHED 13463 2.90 1.69 3.28 87 XMSubMetaSx_00 13194 4.50 8.53 3.22 88 TR_XM_SB_Phish 13005 2.95 2.25 3.17 89 XMSexyCombo_05 12911 4.67 9.46 3.15 90 XMSubPhish11 12897 2.91 2.18 3.14 91 DKIM_INVALID 12561 3.73 5.84 3.06 92 XMNumbers 12180 3.49 5.13 2.97 93 XMSubNoVowel 11991 2.44 0.93 2.92 94 KHOP_HELO_FCRDNS 11968 4.02 7.50 2.92 95 TR_XM_PhishingBody 11835 3.71 6.28 2.89 96 MAILING_LIST_MULTI 11361 2.55 1.86 2.77 97 T_TooManySym_02 11228 2.20 0.52 2.74 98 URI_NOVOWEL 11208 3.07 4.14 2.73 99 TR_DCC_Bayes_99 10428 6.60 19.36 2.54 100 BAYES_05 10349 2.24 1.36 2.52 101 T_XMDrugObfuBody_14 9943 2.46 2.59 2.42 102 RCVD_IN_MSPIKE_H5 9554 1.93 0.67 2.33 103 HTML_MIME_NO_HTML_TAG 9544 3.86 8.69 2.33 104 FROM_EXCESS_BASE64 9430 2.25 2.10 2.30 105 BAYES_95 9132 2.63 3.89 2.23 106 MIME_HTML_MOSTLY 8893 2.97 5.51 2.17 107 SUBJ_ALL_CAPS 8772 1.92 1.22 2.14 108 RCVD_IN_IADB_OPTIN 8640 1.88 1.18 2.11 109 TooManyTo_002 8361 1.74 0.78 2.04 110 XM_B_SpammyTLD 7780 2.72 5.32 1.90 111 XM_CamelCaseFrm001 7414 2.01 2.64 1.81 112 IN_HORDE_ADDRESS_BOOK 7391 1.39 0.10 1.80 113 XM_B_Phish66 7206 2.22 3.68 1.76 114 INVALID_MSGID 6729 1.29 0.17 1.64 115 TVD_SPACE_RATIO_MINFP 6720 1.33 0.37 1.64 116 HELO_NODOT 6464 1.34 0.58 1.58 117 HELO_NO_DOMAIN 6463 1.34 0.58 1.58 118 MSGID_NOFQDN1 6173 1.16 0.06 1.50 119 T_XMDrugObfuBody_08 6142 1.86 3.01 1.50 120 TO_MALFORMED 6005 1.11 0.01 1.46 121 FILL_THIS_FORM 5954 1.15 0.21 1.45 122 TR_XM_SpammyRelay 5908 4.31 13.35 1.44 123 XM_B_Investor 5900 1.99 3.71 1.44 124 TR_Symld_Words 5829 1.34 1.10 1.42 125 TVD_RCVD_IP 5799 1.19 0.47 1.41 126 BOTNET 5748 5.11 16.79 1.40 127 XM_B_Unsub2 5713 1.62 2.32 1.39 128 TR_XM_SpammyWords5 5552 1.81 3.23 1.35 129 XM_DK_Undo_01 5539 1.50 1.97 1.35 130 XM_E_Blogspot 5529 1.06 0.14 1.35 131 TooManyTo_003 5478 1.16 0.59 1.34 132 XM_GoogleGroups 5191 1.17 0.85 1.27 133 IN_ZIMBRA_NJ_WHITELIST 5171 0.96 0.01 1.26 134 XM_H_Long_From02 5169 1.19 0.96 1.26 135 XMStockSpam_06 5063 1.32 1.59 1.23 136 T_OBFU_PDF_ATTACH 4847 0.99 0.38 1.18 137 URI_HEX 4763 1.27 1.63 1.16 138 XMDiploma_00 4728 1.41 2.20 1.15 139 UNTRUSTED_Relay 4699 5.34 18.54 1.15 140 XMCapTrack 4373 0.94 0.54 1.07 141 XMGappySubj_01 4311 0.83 0.12 1.05 142 RCVD_IN_BL_SPAMCOP_NET 4253 3.37 10.72 1.04 143 TM2_M_VERY_LONG_WORD 4092 1.40 2.68 1.00 144 DKIM_ADSP_CUSTOM_MED 4071 1.01 1.05 0.99 145 HTML_IMAGE_ONLY_20 4043 0.87 0.50 0.99 146 TooManyTo_004 3954 0.85 0.49 0.96 147 TR_XM_SpammyWords2 3780 2.94 9.31 0.92 148 XMBSHREFv2 3699 0.76 0.29 0.90 149 XMSexyCombo_01 3677 1.42 3.07 0.90 150 TVD_SPACE_RATIO 3594 0.69 0.09 0.88 151 RELAYCOUNTRY_CA 3586 1.71 4.33 0.87 152 XM_B_COVIDMETA 3577 1.36 2.89 0.87 153 T_FILL_THIS_FORM_SHORT 3516 1.00 1.46 0.86 154 XM_OfRef6 3508 1.42 3.18 0.86 155 XM_ProductURIs 3360 0.82 0.82 0.82 156 HELO_MISC_IP 3349 0.64 0.10 0.82 157 XMNoVowels 3287 0.78 0.73 0.80 158 URI_TRY_3LD 3278 0.88 1.13 0.80 159 TooManyTo_005 3164 0.68 0.40 0.77 160 XMBody_95 3128 0.62 0.19 0.76 161 XM_UB50 3101 2.63 8.51 0.76 162 XMHTML_After_End 3007 0.78 0.92 0.73 163 RELAYCOUNTRY_GB 2985 0.79 0.98 0.73 164 XMBrknScrpt_02 2957 0.91 1.51 0.72 165 XMSubMetaSxObfu_03 2880 0.70 0.71 0.70 166 T_TooManySym_03 2842 0.57 0.20 0.69 167 T_XMDrugObfuBody_00 2839 0.96 1.78 0.69 168 TR_MetaPhish_Combo_01 2830 0.74 0.91 0.69 169 XMGenDplmaNmb 2770 0.86 1.44 0.68 170 NML_ADSP_CUSTOM_MED 2691 0.71 0.89 0.66 171 XMBdyGiftCard01 2565 0.63 0.64 0.63 172 SpammyFromTLD_01 2545 1.15 2.82 0.62 173 XM_ShortIntro_01 2450 0.56 0.45 0.60 174 HTTPS_HTTP_MISMATCH 2450 0.67 0.92 0.60 175 FROM_GOV_DKIM_AU 2450 0.52 0.29 0.60 176 FORGED_GMAIL_RCVD 2412 0.66 0.87 0.59 177 XMLngstWrd_00 2384 0.54 0.42 0.58 178 TR_MSPIKEBAYES00 2361 0.45 0.04 0.58 179 T_Symld_Words_02 2232 0.69 1.16 0.54 180 XM_B_SpammyWords4 2203 0.91 2.07 0.54 181 XM_B_COPY_HTML 2162 0.60 0.82 0.53 182 HTML_TAG_BALANCE_BODY 2129 0.57 0.73 0.52 183 XM_RXBody 2086 0.48 0.37 0.51 184 XMLngstWrd_01 1965 0.46 0.38 0.48 185 HTML_IMAGE_ONLY_28 1955 0.52 0.67 0.48 186 XM_H_PHPMailer 1930 0.57 0.90 0.47 187 XMSubMetaI_00 1880 0.63 1.17 0.46 188 RCVD_IN_SORBS_DUL 1870 0.38 0.13 0.46 189 XMHTMLBadTable_001 1835 0.45 0.45 0.45 190 XMMoneyMeta_00 1803 0.63 1.21 0.44 191 TM2_M_BODY_EMPTY 1793 0.36 0.11 0.44 192 XMPhish30 1787 0.60 1.10 0.44 193 XMSubMetaSx_01 1785 0.45 0.50 0.44 194 SHORT_HELO_AND_INLINE_IMAGE 1777 0.35 0.08 0.43 195 MPART_ALT_DIFF_COUNT 1766 0.48 0.65 0.43 196 MSGID_FROM_MTA_HEADER 1701 0.40 0.37 0.41 197 XMSexyCombo_04 1695 0.53 0.90 0.41 198 HTML_IMAGE_ONLY_32 1694 0.47 0.65 0.41 199 TR_XM_SPAMCOP 1694 1.64 5.49 0.41 200 FROM_GOV_SPOOF 1687 0.37 0.22 0.41 ----------------------------------------------------------------------