Email: 552818 Autolearn: 0 AvgScore: 0.11 AvgScanTime: 1.33 sec Spam: 117178 Autolearn: 0 AvgScore: 13.48 AvgScanTime: 1.58 sec Ham: 435640 Autolearn: 0 AvgScore: -3.49 AvgScanTime: 1.27 sec Time Spent Running SA: 204.83 hours Time Spent Processing Spam: 51.53 hours Time Spent Processing Ham: 153.30 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 112833 90.95 96.29 89.51 2 DKIM_SIGNED 101842 67.02 86.91 61.67 3 XM_DK_Pass 96544 65.03 82.39 60.36 4 RELAYCOUNTRY_US 93956 81.02 80.18 81.25 5 DKIM_VALID 93166 62.99 79.51 58.55 6 XM_B_Unicode 88723 73.94 75.72 73.47 7 DCC_CHECK 87502 41.99 74.67 33.20 8 XM_B_SpammyWords 85368 48.47 72.85 41.91 9 XMListUnsubscribeExists 82149 45.81 70.11 39.27 10 DKIM_VALID_AU 70370 47.71 60.05 44.39 11 BAYES_50 56370 50.11 48.11 50.65 12 XM_B_Unicode3 50598 45.16 43.18 45.69 13 XM_DK_Undo_02 46985 13.00 40.10 5.72 14 XM_B_SpammyWords2 43772 20.16 37.36 15.54 15 HTML_FONT_LOW_CONTRAST 40267 24.99 34.36 22.47 16 LOC_TINY_FONT_1 39050 22.69 33.33 19.82 17 TR_XM_DKIM_Undo 38351 10.57 32.73 4.61 18 MIME_HTML_ONLY 35506 25.96 30.30 24.80 19 DKIM_VALID_EF 33798 24.04 28.84 22.75 20 FVGT_m_MULTI_ODD 32576 21.29 27.80 19.54 21 T_KAM_HTML_FONT_INVALID 32262 17.84 27.53 15.23 22 BAYES_99 31564 10.18 26.94 5.67 23 DCC_CHECK_NEGATIVE 29641 57.97 25.30 66.75 24 XMSubLong 28064 20.97 23.95 20.17 25 T_TM2_M_HEADER_IN_MSG 27095 25.24 23.12 25.81 26 RCVD_IN_MSPIKE_WL 26930 24.28 22.98 24.62 27 RCVD_IN_MSPIKE_H2 26405 18.58 22.53 17.52 28 XM_Body_Dirty_Words 24892 12.27 21.24 9.86 29 RELAYCOUNTRY_META 24302 7.08 20.74 3.41 30 BAYES_999 24091 8.21 20.56 4.89 31 TR_DCC_Bayes_99 24072 5.91 20.54 1.97 32 XM_Multi_Part_URI 18871 11.19 16.10 9.87 33 TR_XM_SpammyRelay 17867 4.39 15.25 1.47 34 BOTNET_IPINHOSTNAME 17729 6.08 15.13 3.64 35 XM_B_Unsub 17698 11.54 15.10 10.58 36 BOTNET 16706 4.13 14.26 1.40 37 RCVD_IN_MSPIKE_H3 16539 13.34 14.11 13.13 38 LOTS_OF_MONEY 15104 8.77 12.89 7.67 39 XM_UncommonTLD01 14860 4.97 12.68 2.90 40 XM_B_SpammyWords3 14355 5.60 12.25 3.81 41 UNTRUSTED_Relay 14272 3.52 12.18 1.19 42 FSL_BULK_SIG 13420 8.01 11.45 7.09 43 UNPARSEABLE_RELAY 13381 7.48 11.42 6.42 44 TR_XM_UnparsRelay 12913 6.07 11.02 4.74 45 TR_XM_SpammyWords4 12844 5.50 10.96 4.03 46 XMSexyCombo_05 12323 4.53 10.52 2.92 47 RCVD_IN_BL_SPAMCOP_NET 11989 2.71 10.23 0.68 48 MPART_ALT_DIFF 11786 10.12 10.06 10.14 49 TR_XM_SpammyWords2 11507 2.74 9.82 0.83 50 XM_Evil_Numbers_Gen 10742 8.74 9.17 8.63 51 XM_SendGrid 10462 6.36 8.93 5.66 52 RCVD_IN_MSPIKE_H4 9915 9.49 8.46 9.76 53 HTML_IMAGE_RATIO_02 9702 5.37 8.28 4.59 54 XMSubMetaSx_00 9320 4.21 7.95 3.21 55 BAYES_80 9153 4.36 7.81 3.44 56 XM_UB50 8939 2.22 7.63 0.77 57 MIME_HTML_MOSTLY 8832 3.35 7.54 2.22 58 DKIM_INVALID 8676 4.03 7.40 3.12 59 LotsOfNums_01 8465 7.53 7.22 7.61 60 BAYES_60 8439 7.03 7.20 6.98 61 XM_B_Phish_Phrases 7965 4.16 6.80 3.45 62 TR_XM_PhishingBody 7339 3.51 6.26 2.76 63 URI_NOVOWEL 7265 3.24 6.20 2.45 64 TooManyTo_001 7154 8.37 6.11 8.98 65 SpammyFromTLD_01 6993 1.78 5.97 0.66 66 XM_H_Long_From01 6457 4.48 5.51 4.21 67 HTML_IMAGE_RATIO_04 6275 13.87 5.36 16.16 68 TR_XM_SPAMCOP 6113 1.29 5.22 0.23 69 HTML_MIME_NO_HTML_TAG 6106 3.13 5.21 2.57 70 SpammyFromTLD_02 5968 1.36 5.09 0.35 71 RELAYCOUNTRY_CA 5872 1.60 5.01 0.68 72 TR_XM_DK_SendGrid 5748 3.83 4.91 3.54 73 MIME_QP_LONG_LINE 5735 5.10 4.89 5.16 74 XM_SPF_SoftFail 5580 2.36 4.76 1.71 75 URIBL_DBL_SPAM 5431 0.99 4.63 0.01 76 XM_B_Investor 5207 2.19 4.44 1.59 77 RCVD_IN_MSPIKE_BL 5173 1.23 4.41 0.37 78 XM_GoogleGroups 4955 2.29 4.23 1.77 79 TR_XM_MSPIKECOMBO 4891 1.17 4.17 0.36 80 XM_B_SpammyTLD 4839 2.29 4.13 1.80 81 TR_XM_NoHeaderRelay 4831 1.01 4.12 0.17 82 HTML_IMAGE_RATIO_06 4823 5.25 4.12 5.56 83 XMNumbers 4760 3.09 4.06 2.83 84 TM2_M_URI_OPT_OUT 4701 3.39 4.01 3.22 85 XMStrtUSub 4615 9.08 3.94 10.46 86 HTML_IMAGE_ONLY_20 4570 1.99 3.90 1.48 87 HTML_TITLE_SUBJ_DIFF 4556 1.34 3.89 0.66 88 BAYES_95 4415 2.47 3.77 2.12 89 HTML_SHORT_LINK_IMG_3 4301 1.33 3.67 0.70 90 TR_XM_MaxUnsub 4253 1.27 3.63 0.64 91 TR_XM_SpammyWords5 4239 1.80 3.62 1.31 92 JH_SPAMMY_HEADERS 4116 0.75 3.51 0.00 93 XM_B_Phish66 4114 1.99 3.51 1.58 94 RCVD_IN_RP_RNBL 3704 0.73 3.16 0.07 95 MIME_HTML_ONLY_MULTI 3581 7.26 3.06 8.39 96 XM_OfRef6 3567 1.36 3.04 0.91 97 XMDiploma_00 3488 2.48 2.98 2.34 98 RCVD_IN_PSBL 3482 0.72 2.97 0.12 99 T_XMDrugObfuBody_08 3418 1.60 2.92 1.24 100 XM_B_Unsub2 3382 1.65 2.89 1.31 101 XM_B_COVIDMETA 3373 1.09 2.88 0.60 102 T_TooManySym_01 3249 4.41 2.77 4.85 103 XM_DIRTYINTL 3166 0.79 2.70 0.27 104 T_XMDrugObfuBody_14 3136 2.04 2.68 1.86 105 RCVD_IN_VALIDITY_RPBL 3134 0.62 2.67 0.06 106 RCVD_IN_IADB_LISTED 3124 3.94 2.67 4.29 107 TR_XM_SpammyWords3 3015 0.68 2.57 0.18 108 BAYES_40 2901 5.05 2.48 5.74 109 TM2_M_VERY_LONG_WORD 2833 1.33 2.42 1.04 110 XM_CamelCaseFrm001 2796 1.73 2.39 1.55 111 RCVD_IN_IADB_SPF 2741 3.45 2.34 3.75 112 XM_URI_RBL 2731 0.59 2.33 0.12 113 XM_DK_Undo_01 2597 1.72 2.22 1.59 114 T_XMDrugObfuBody_00 2591 1.04 2.21 0.73 115 KHOP_HELO_FCRDNS 2570 1.55 2.19 1.38 116 RCVD_IN_IADB_DK 2558 3.04 2.18 3.27 117 XM_B_SpammyWords4 2555 0.75 2.18 0.37 118 MAILING_LIST_MULTI 2514 2.25 2.15 2.27 119 RCVD_IN_IADB_SENDERID 2483 3.10 2.12 3.37 120 TR_XM_SB_Phish 2466 2.02 2.10 2.00 121 ALL_TRUSTED 2464 13.42 2.10 16.46 122 TR_XM_PHPDW 2418 0.66 2.06 0.28 123 XMSubPhish11 2401 1.99 2.05 1.97 124 HTML_IMAGE_RATIO_08 2341 2.03 2.00 2.04 125 TR_XM_PHPForged 2337 0.62 1.99 0.26 126 URI_LONG_REPEAT 2336 0.42 1.99 0.00 127 TR_XM_FormFill2 2312 0.62 1.97 0.26 128 XMBody_17 2310 0.69 1.97 0.34 129 XM_H_PHPOS 2294 0.61 1.96 0.25 130 XMSexyCombo_01 2283 0.95 1.95 0.69 131 FROM_EXCESS_BASE64 2253 2.29 1.92 2.38 132 RCVD_IN_MSPIKE_L5 2248 0.43 1.92 0.03 133 T_REMOTE_IMAGE 2220 2.91 1.89 3.18 134 URI_HEX 2202 1.44 1.88 1.32 135 T_FILL_THIS_FORM_SHORT 2185 0.96 1.86 0.72 136 RELAYCOUNTRY_FR 2151 0.54 1.84 0.19 137 BOTNET_NORDNS 2150 0.40 1.83 0.01 138 SUBJ_ALL_CAPS 2099 1.43 1.79 1.34 139 RCVD_IN_MSPIKE_L3 2037 0.58 1.74 0.26 140 TR_XM_COVIDMETA4 2018 0.58 1.72 0.27 141 RELAYCOUNTRY_IN 2000 0.43 1.71 0.09 142 TR_XM_INV_DKIM 1993 0.46 1.70 0.13 143 HTTPS_HTTP_MISMATCH 1935 0.85 1.65 0.63 144 XMGenDplmaNmb 1908 0.93 1.63 0.74 145 XMStockSpam_06 1882 1.16 1.61 1.04 146 XM_Body_Dirty_Words_01 1860 0.46 1.59 0.16 147 RELAYCOUNTRY_PL 1852 0.35 1.58 0.02 148 BAYES_20 1845 4.32 1.57 5.06 149 T_XMHurry_00 1834 0.73 1.57 0.51 150 RCVD_IN_RP_SAFE 1828 5.13 1.56 6.09 151 URIBL_BLACK 1793 0.35 1.53 0.04 152 XMBrknScrpt_02 1764 0.90 1.51 0.74 153 TR_LOTS_OF_MONEY3 1756 0.54 1.50 0.29 154 TR_XM_COVIDMETA1 1667 0.47 1.42 0.22 155 URI_PHP_REDIR 1660 0.30 1.42 0.00 156 XMHTML_After_End 1643 0.83 1.40 0.68 157 XM_UB99 1630 0.30 1.39 0.00 158 USER_IN_DEF_DKIM_WL 1606 7.99 1.37 9.77 159 RELAYCOUNTRY_AU 1589 0.57 1.36 0.35 160 TR_Symld_Words 1572 1.50 1.34 1.55 161 ALIBABA_IMG_NOT_RCVD_ALI 1568 0.29 1.34 0.00 162 EBAY_IMG_NOT_RCVD_EBAY 1566 0.28 1.34 0.00 163 HOSTED_IMG_MULTI 1565 0.28 1.34 0.00 164 HOSTED_IMG_DIRECT_MX 1563 0.28 1.33 0.00 165 RELAYCOUNTRY_RU 1512 0.30 1.29 0.04 166 RCVD_IN_IADB_VOUCHED 1497 2.34 1.28 2.62 167 RELAYCOUNTRY_GB 1492 0.85 1.27 0.74 168 XMPhish30 1484 0.70 1.27 0.55 169 BAYES_00 1427 13.68 1.22 17.03 170 DATE_IN_PAST_03_06 1399 0.46 1.19 0.26 171 XM_UB60 1376 0.30 1.17 0.07 172 TR_XM_BayesRelay 1354 0.25 1.16 0.00 173 TR_LOTS_OF_MONEY2 1335 0.39 1.14 0.18 174 T_MONEY_PERCENT 1335 0.39 1.14 0.18 175 XMBody_78 1326 0.48 1.13 0.31 176 XM_UB999 1302 0.24 1.11 0.00 177 XM_H_Long_From02 1219 0.89 1.04 0.85 178 PDS_OTHER_BAD_TLD 1216 0.42 1.04 0.25 179 T_XMDrugObfuBody_12 1215 0.31 1.04 0.12 180 TR_Mismatch_TLD_01 1195 0.40 1.02 0.23 181 XM_PDF 1193 3.47 1.02 4.13 182 NUMERIC_HTTP_ADDR 1171 0.51 1.00 0.38 183 URI_TRY_3LD 1145 0.65 0.98 0.56 184 XM_S_SpammyWords 1144 0.50 0.98 0.37 185 TR_XM_Spammywords 1143 0.50 0.98 0.37 186 RELAYCOUNTRY_CN 1122 0.26 0.96 0.08 187 HTML_TAG_BALANCE_BODY 1120 0.57 0.96 0.47 188 XMMoneyMeta_00 1096 0.56 0.94 0.46 189 DEAR_FRIEND 1084 0.22 0.93 0.03 190 NORDNS_LOW_CONTRAST 1081 0.20 0.92 0.00 191 XM_H_PHPMailer 1068 0.56 0.91 0.47 192 BAYES_05 1063 2.80 0.91 3.31 193 RCVD_IN_RP_CERTIFIED 1054 4.54 0.90 5.51 194 BOUNCE_MESSAGE 1049 3.31 0.90 3.96 195 ANY_BOUNCE_MESSAGE 1049 3.31 0.90 3.96 196 RCVD_IN_IADB_OPTIN 1039 1.50 0.89 1.66 197 TR_BOTNET_NEGATE 1024 0.38 0.87 0.25 198 TM2_M_A_HREF_HREF 1024 0.36 0.87 0.22 199 XM_Combo_Sbj 1011 0.33 0.86 0.19 200 DIET_1 984 0.42 0.84 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 389960 90.95 96.29 89.51 2 RELAYCOUNTRY_US 353937 81.02 80.18 81.25 3 XM_B_Unicode 320049 73.94 75.72 73.47 4 DCC_CHECK_NEGATIVE 290811 57.97 25.30 66.75 5 DKIM_SIGNED 268669 67.02 86.91 61.67 6 XM_DK_Pass 262957 65.03 82.39 60.36 7 DKIM_VALID 255059 62.99 79.51 58.55 8 BAYES_50 220670 50.11 48.11 50.65 9 XM_B_Unicode3 199049 45.16 43.18 45.69 10 DKIM_VALID_AU 193377 47.71 60.05 44.39 11 XM_B_SpammyWords 182558 48.47 72.85 41.91 12 XMListUnsubscribeExists 171081 45.81 70.11 39.27 13 DCC_CHECK 144651 41.99 74.67 33.20 14 T_TM2_M_HEADER_IN_MSG 112454 25.24 23.12 25.81 15 MIME_HTML_ONLY 108019 25.96 30.30 24.80 16 RCVD_IN_MSPIKE_WL 107268 24.28 22.98 24.62 17 DKIM_VALID_EF 99091 24.04 28.84 22.75 18 HTML_FONT_LOW_CONTRAST 97894 24.99 34.36 22.47 19 XMSubLong 87865 20.97 23.95 20.17 20 LOC_TINY_FONT_1 86358 22.69 33.33 19.82 21 FVGT_m_MULTI_ODD 85128 21.29 27.80 19.54 22 RCVD_IN_MSPIKE_H2 76331 18.58 22.53 17.52 23 BAYES_00 74180 13.68 1.22 17.03 24 ALL_TRUSTED 71699 13.42 2.10 16.46 25 HTML_IMAGE_RATIO_04 70421 13.87 5.36 16.16 26 XM_H_Trusted_IP 69827 12.63 0.00 16.03 27 XM_B_SpammyWords2 67683 20.16 37.36 15.54 28 T_KAM_HTML_FONT_INVALID 66336 17.84 27.53 15.23 29 HTML_FONT_FACE_BAD 63328 11.63 0.81 14.54 30 RCVD_IN_MSPIKE_H3 57213 13.34 14.11 13.13 31 XM_B_Unsub 46104 11.54 15.10 10.58 32 XMStrtUSub 45573 9.08 3.94 10.46 33 MPART_ALT_DIFF 44178 10.12 10.06 10.14 34 XM_Multi_Part_URI 43015 11.19 16.10 9.87 35 XM_Body_Dirty_Words 42941 12.27 21.24 9.86 36 USER_IN_DEF_DKIM_WL 42574 7.99 1.37 9.77 37 RCVD_IN_MSPIKE_H4 42520 9.49 8.46 9.76 38 TooManyTo_001 39109 8.37 6.11 8.98 39 XM_Evil_Numbers_Gen 37588 8.74 9.17 8.63 40 MIME_HTML_ONLY_MULTI 36552 7.26 3.06 8.39 41 LOTS_OF_MONEY 33402 8.77 12.89 7.67 42 LotsOfNums_01 33136 7.53 7.22 7.61 43 FSL_BULK_SIG 30869 8.01 11.45 7.09 44 BAYES_60 30418 7.03 7.20 6.98 45 TR_XM_DK_Bayes 30287 5.62 0.65 6.95 46 TR_XM_DK_Bayes1 29235 5.42 0.63 6.71 47 UNPARSEABLE_RELAY 27976 7.48 11.42 6.42 48 RCVD_IN_RP_SAFE 26527 5.13 1.56 6.09 49 XM_DKIMWhitelistDomains 26286 4.76 0.02 6.03 50 IN_ZIMBRA_NJ_WHITELIST 25372 4.61 0.08 5.82 51 XMSubNoVowel 25060 4.66 0.61 5.75 52 TR_XM_DK_Bayes2 25012 4.63 0.49 5.74 53 BAYES_40 24999 5.05 2.48 5.74 54 XM_DK_Undo_02 24907 13.00 40.10 5.72 55 BAYES_99 24698 10.18 26.94 5.67 56 XM_SendGrid 24673 6.36 8.93 5.66 57 HTML_IMAGE_RATIO_06 24223 5.25 4.12 5.56 58 RCVD_IN_RP_CERTIFIED 24019 4.54 0.90 5.51 59 RCVD_IN_VALIDITY_SAFE 22664 4.28 0.83 5.20 60 MIME_QP_LONG_LINE 22466 5.10 4.89 5.16 61 BAYES_20 22043 4.32 1.57 5.06 62 BAYES_999 21283 8.21 20.56 4.89 63 T_TooManySym_01 21132 4.41 2.77 4.85 64 TR_XM_UnparsRelay 20651 6.07 11.02 4.74 65 RCVD_IN_VALIDITY_CERTIFIED 20514 3.78 0.33 4.71 66 TR_XM_DKIM_Undo 20096 10.57 32.73 4.61 67 HTML_IMAGE_RATIO_02 20000 5.37 8.28 4.59 68 RCVD_IN_IADB_LISTED 18678 3.94 2.67 4.29 69 XM_H_Long_From01 18327 4.48 5.51 4.21 70 XM_PDF 18012 3.47 1.02 4.13 71 TR_XM_SpammyWords4 17575 5.50 10.96 4.03 72 ANY_BOUNCE_MESSAGE 17257 3.31 0.90 3.96 73 BOUNCE_MESSAGE 17248 3.31 0.90 3.96 74 XM_B_SpammyWords3 16603 5.60 12.25 3.81 75 RCVD_IN_IADB_SPF 16333 3.45 2.34 3.75 76 BOTNET_IPINHOSTNAME 15855 6.08 15.13 3.64 77 TR_XM_DK_SendGrid 15406 3.83 4.91 3.54 78 XM_B_Phish_Phrases 15048 4.16 6.80 3.45 79 BAYES_80 14970 4.36 7.81 3.44 80 RELAYCOUNTRY_META 14859 7.08 20.74 3.41 81 RCVD_IN_IADB_SENDERID 14672 3.10 2.12 3.37 82 BAYES_05 14410 2.80 0.91 3.31 83 RCVD_IN_IADB_DK 14254 3.04 2.18 3.27 84 TM2_M_URI_OPT_OUT 14037 3.39 4.01 3.22 85 XMSubMetaSx_00 13966 4.21 7.95 3.21 86 T_REMOTE_IMAGE 13874 2.91 1.89 3.18 87 DKIM_INVALID 13610 4.03 7.40 3.12 88 XMSexyCombo_05 12724 4.53 10.52 2.92 89 XM_UncommonTLD01 12632 4.97 12.68 2.90 90 XMNumbers 12336 3.09 4.06 2.83 91 TR_XM_PhishingBody 12038 3.51 6.26 2.76 92 T_TooManySym_02 12011 2.32 0.68 2.76 93 RCVD_IN_IADB_VOUCHED 11420 2.34 1.28 2.62 94 HTML_MIME_NO_HTML_TAG 11209 3.13 5.21 2.57 95 URI_NOVOWEL 10665 3.24 6.20 2.45 96 FROM_EXCESS_BASE64 10382 2.29 1.92 2.38 97 XMDiploma_00 10195 2.48 2.98 2.34 98 MAILING_LIST_MULTI 9904 2.25 2.15 2.27 99 MIME_HTML_MOSTLY 9678 3.35 7.54 2.22 100 BAYES_95 9242 2.47 3.77 2.12 101 TooManyTo_002 8921 1.78 0.80 2.05 102 HTML_IMAGE_RATIO_08 8873 2.03 2.00 2.04 103 TR_XM_SB_Phish 8725 2.02 2.10 2.00 104 TR_DCC_Bayes_99 8596 5.91 20.54 1.97 105 XMSubPhish11 8574 1.99 2.05 1.97 106 XMSubGarbage 8487 1.54 0.02 1.95 107 XMSubLongNoVowel 8191 1.51 0.12 1.88 108 T_XMDrugObfuBody_14 8123 2.04 2.68 1.86 109 XM_B_SpammyTLD 7840 2.29 4.13 1.80 110 XM_GoogleGroups 7728 2.29 4.23 1.77 111 RCVD_IN_MSPIKE_H5 7535 1.45 0.41 1.73 112 XM_SPF_SoftFail 7461 2.36 4.76 1.71 113 HELO_NO_DOMAIN 7317 1.48 0.75 1.68 114 HELO_NODOT 7317 1.48 0.75 1.68 115 RCVD_IN_IADB_OPTIN 7231 1.50 0.89 1.66 116 IN_HORDE_ADDRESS_BOOK 6958 1.28 0.09 1.60 117 XM_DK_Undo_01 6939 1.72 2.22 1.59 118 XM_B_Investor 6910 2.19 4.44 1.59 119 XM_B_Phish66 6865 1.99 3.51 1.58 120 INVALID_MSGID 6853 1.28 0.19 1.57 121 XM_CamelCaseFrm001 6758 1.73 2.39 1.55 122 TR_Symld_Words 6739 1.50 1.34 1.55 123 HTML_IMAGE_ONLY_20 6431 1.99 3.90 1.48 124 TR_XM_SpammyRelay 6387 4.39 15.25 1.47 125 MSGID_NOFQDN1 6269 1.15 0.09 1.44 126 BOTNET 6099 4.13 14.26 1.40 127 KHOP_HELO_FCRDNS 6019 1.55 2.19 1.38 128 TO_MALFORMED 6010 1.09 0.01 1.38 129 TooManyTo_003 5866 1.19 0.61 1.35 130 SUBJ_ALL_CAPS 5830 1.43 1.79 1.34 131 URI_HEX 5736 1.44 1.88 1.32 132 TR_XM_SpammyWords5 5717 1.80 3.62 1.31 133 XM_B_Unsub2 5714 1.65 2.89 1.31 134 T_XMDrugObfuBody_08 5412 1.60 2.92 1.24 135 TVD_RCVD_IP 5303 1.00 0.21 1.22 136 UNTRUSTED_Relay 5177 3.52 12.18 1.19 137 XMCapTrack 5109 1.01 0.42 1.17 138 XM_E_Blogspot 4960 0.93 0.13 1.14 139 TVD_SPACE_RATIO_MINFP 4909 0.93 0.21 1.13 140 XM_ProductURIs 4796 1.04 0.81 1.10 141 XMGappySubj_01 4671 0.87 0.12 1.07 142 XMStockSpam_06 4538 1.16 1.61 1.04 143 TM2_M_VERY_LONG_WORD 4512 1.33 2.42 1.04 144 TooManyTo_004 4027 0.83 0.49 0.92 145 TVD_SPACE_RATIO 3971 0.74 0.10 0.91 146 XM_OfRef6 3945 1.36 3.04 0.91 147 XM_H_Long_From02 3691 0.89 1.04 0.85 148 XMBSHREFv2 3665 0.72 0.27 0.84 149 TR_XM_SpammyWords2 3636 2.74 9.82 0.83 150 DKIM_ADSP_CUSTOM_MED 3593 0.81 0.75 0.82 151 XM_UB50 3341 2.22 7.63 0.77 152 RELAYCOUNTRY_GB 3218 0.85 1.27 0.74 153 XMGenDplmaNmb 3218 0.93 1.63 0.74 154 XMBrknScrpt_02 3210 0.90 1.51 0.74 155 T_XMDrugObfuBody_00 3173 1.04 2.21 0.73 156 TooManyTo_005 3141 0.65 0.40 0.72 157 T_FILL_THIS_FORM_SHORT 3139 0.96 1.86 0.72 158 HTML_SHORT_LINK_IMG_3 3038 1.33 3.67 0.70 159 XMSexyCombo_01 2991 0.95 1.95 0.69 160 RELAYCOUNTRY_CA 2980 1.60 5.01 0.68 161 RCVD_IN_BL_SPAMCOP_NET 2969 2.71 10.23 0.68 162 XMHTML_After_End 2966 0.83 1.40 0.68 163 TR_MetaPhish_Combo_01 2920 0.71 0.84 0.67 164 HTML_TITLE_SUBJ_DIFF 2873 1.34 3.89 0.66 165 SpammyFromTLD_01 2870 1.78 5.97 0.66 166 T_TooManySym_03 2798 0.56 0.26 0.64 167 TR_XM_MaxUnsub 2767 1.27 3.63 0.64 168 HTTPS_HTTP_MISMATCH 2749 0.85 1.65 0.63 169 XMNoVowels 2731 0.64 0.71 0.63 170 XM_B_COPY_HTML 2642 0.64 0.78 0.61 171 XM_B_COVIDMETA 2630 1.09 2.88 0.60 172 T_OBFU_PDF_ATTACH 2536 0.49 0.13 0.58 173 RCVD_IN_SORBS_DUL 2457 0.49 0.23 0.56 174 URI_TRY_3LD 2446 0.65 0.98 0.56 175 XM_ShortIntro_01 2435 0.56 0.58 0.56 176 NML_ADSP_CUSTOM_MED 2433 0.58 0.65 0.56 177 FROM_GOV_DKIM_AU 2412 0.55 0.53 0.55 178 XMPhish30 2380 0.70 1.27 0.55 179 XMBody_95 2305 0.46 0.22 0.53 180 SHORT_URI_2 2263 0.50 0.44 0.52 181 T_XMHurry_00 2211 0.73 1.57 0.51 182 TR_MSPIKEBAYES00 2191 0.40 0.04 0.50 183 XMBdyGiftCard01 2140 0.52 0.61 0.49 184 XMLngstWrd_00 2119 0.49 0.50 0.49 185 XM_H_PHPMailer 2049 0.56 0.91 0.47 186 HTML_TAG_BALANCE_BODY 2041 0.57 0.96 0.47 187 XMMoneyMeta_00 2016 0.56 0.94 0.46 188 SHORT_HELO_AND_INLINE_IMAGE 1997 0.38 0.11 0.46 189 T_MANY_PILL_PRICE 1975 0.36 0.01 0.45 190 FORGED_GMAIL_RCVD 1920 0.48 0.62 0.44 191 XMSubMetaI_00 1846 0.50 0.78 0.42 192 XMLngstWrd_01 1844 0.43 0.43 0.42 193 HTML_IMAGE_ONLY_28 1788 0.41 0.41 0.41 194 XMHTMLBadTable_001 1757 0.42 0.47 0.40 195 PLING_QUERY 1731 0.44 0.59 0.40 196 FROM_GOV_SPOOF 1722 0.34 0.14 0.40 197 TM2_M_BODY_EMPTY 1675 0.33 0.11 0.38 198 RDNS_DYNAMIC 1668 0.44 0.66 0.38 199 NUMERIC_HTTP_ADDR 1663 0.51 1.00 0.38 200 RCVD_IN_MSPIKE_BL 1611 1.23 4.41 0.37 ----------------------------------------------------------------------