Email: 530110 Autolearn: 0 AvgScore: 2.40 AvgScanTime: 1.41 sec Spam: 123388 Autolearn: 0 AvgScore: 13.40 AvgScanTime: 1.59 sec Ham: 406722 Autolearn: 0 AvgScore: -0.94 AvgScanTime: 1.35 sec Time Spent Running SA: 206.92 hours Time Spent Processing Spam: 54.45 hours Time Spent Processing Ham: 152.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 119391 90.25 96.76 88.28 2 DKIM_SIGNED 109498 71.58 88.74 66.37 3 XM_DK_Pass 104363 69.53 84.58 64.96 4 DKIM_VALID 101833 67.52 82.53 62.97 5 RELAYCOUNTRY_US 96905 76.07 78.54 75.33 6 XM_B_Unicode 95479 73.53 77.38 72.36 7 XMListUnsubscribeExists 91808 50.89 74.41 43.75 8 XM_B_SpammyWords 88596 49.53 71.80 42.78 9 DCC_CHECK 86911 39.67 70.44 30.34 10 DKIM_VALID_AU 77150 50.47 62.53 46.81 11 BAYES_50 56983 54.16 46.18 56.58 12 XM_B_Unicode3 52772 45.22 42.77 45.97 13 XM_DK_Undo_02 52220 14.51 42.32 6.07 14 LOC_TINY_FONT_1 46760 24.55 37.90 20.50 15 XM_B_SpammyWords2 45931 21.30 37.22 16.46 16 TR_XM_DKIM_Undo 42625 11.50 34.55 4.51 17 HTML_FONT_LOW_CONTRAST 42087 26.78 34.11 24.56 18 T_KAM_HTML_FONT_INVALID 40105 21.18 32.50 17.74 19 DKIM_VALID_EF 39554 25.94 32.06 24.08 20 FVGT_m_MULTI_ODD 38062 23.84 30.85 21.71 21 DCC_CHECK_NEGATIVE 36422 60.29 29.52 69.62 22 BAYES_99 35302 10.24 28.61 4.67 23 MIME_HTML_ONLY 35091 25.48 28.44 24.58 24 XMSubLong 32592 26.54 26.41 26.57 25 T_TM2_M_HEADER_IN_MSG 31031 28.41 25.15 29.40 26 RCVD_IN_MSPIKE_H2 29015 20.19 23.52 19.18 27 XM_Body_Dirty_Words 28662 14.20 23.23 11.46 28 RCVD_IN_MSPIKE_WL 28122 25.18 22.79 25.90 29 BAYES_999 27438 8.08 22.24 3.78 30 RELAYCOUNTRY_META 27225 7.54 22.06 3.13 31 TR_DCC_Bayes_99 24572 5.77 19.91 1.48 32 XM_Multi_Part_URI 22353 12.20 18.12 10.41 33 TR_XM_SpammyRelay 19070 4.63 15.46 1.35 34 LOTS_OF_MONEY 18932 10.51 15.34 9.05 35 XM_UncommonTLD01 17127 5.56 13.88 3.04 36 TR_XM_SpammyWords4 16715 7.33 13.55 5.44 37 BOTNET_IPINHOSTNAME 16564 6.21 13.42 4.02 38 BOTNET 16258 4.17 13.18 1.44 39 UNTRUSTED_Relay 16150 3.86 13.09 1.06 40 MPART_ALT_DIFF 15825 6.16 12.83 4.13 41 XM_B_Unsub 15149 16.30 12.28 17.52 42 UNPARSEABLE_RELAY 15110 8.50 12.25 7.36 43 TR_XM_UnparsRelay 14664 7.14 11.88 5.70 44 XM_B_SpammyWords3 14514 6.10 11.76 4.39 45 RCVD_IN_MSPIKE_H3 14301 13.14 11.59 13.61 46 RCVD_IN_MSPIKE_H4 13168 10.61 10.67 10.59 47 RCVD_IN_BL_SPAMCOP_NET 12637 2.93 10.24 0.71 48 XMSexyCombo_05 12255 9.48 9.93 9.34 49 TR_XM_SpammyWords2 11992 2.82 9.72 0.73 50 XM_Evil_Numbers_Gen 11454 7.56 9.28 7.03 51 MIME_HTML_MOSTLY 10777 3.49 8.73 1.90 52 URI_NOVOWEL 9904 4.25 8.03 3.10 53 XMSubMetaSx_00 9807 10.32 7.95 11.03 54 XM_SendGrid 9795 6.43 7.94 5.97 55 HTML_IMAGE_RATIO_02 9448 5.73 7.66 5.14 56 FSL_BULK_SIG 9435 4.40 7.65 3.42 57 LotsOfNums_01 9228 8.54 7.48 8.87 58 TR_XM_PhishingBody 9224 4.22 7.48 3.24 59 BAYES_60 9003 7.80 7.30 7.95 60 BAYES_80 8893 4.59 7.21 3.80 61 TooManyTo_001 8506 13.72 6.89 15.79 62 XM_UB50 8361 2.09 6.78 0.67 63 SpammyFromTLD_01 8004 2.00 6.49 0.63 64 RCVD_IN_MSPIKE_BL 7807 2.18 6.33 0.93 65 TR_XM_MSPIKECOMBO 7796 2.17 6.32 0.91 66 DKIM_INVALID 7665 4.06 6.21 3.40 67 XM_B_Phish_Phrases 7659 3.79 6.21 3.05 68 XM_H_Long_From01 6984 4.91 5.66 4.68 69 MIME_QP_LONG_LINE 6398 6.92 5.19 7.45 70 RELAYCOUNTRY_CA 6291 1.72 5.10 0.70 71 MIME_HTML_ONLY_MULTI 6163 3.31 4.99 2.80 72 XM_B_Investor 6082 2.36 4.93 1.58 73 TR_XM_SPAMCOP 6035 1.36 4.89 0.29 74 TM2_M_URI_OPT_OUT 6024 4.46 4.88 4.33 75 JH_SPAMMY_HEADERS 5610 1.06 4.55 0.00 76 XM_SPF_SoftFail 5560 4.55 4.51 4.57 77 TR_XM_DK_SendGrid 5509 3.86 4.46 3.68 78 HTML_IMAGE_RATIO_04 5502 4.66 4.46 4.72 79 TM2_M_VERY_LONG_WORD 5350 2.04 4.34 1.34 80 XM_B_SpammyTLD 5294 2.53 4.29 1.99 81 T_XMDrugObfuBody_08 5203 2.50 4.22 1.97 82 XM_B_Phish66 5186 2.60 4.20 2.11 83 BAYES_95 4939 2.76 4.00 2.38 84 TR_XM_MaxUnsub 4679 1.38 3.79 0.64 85 XM_OfRef6 4678 1.57 3.79 0.89 86 HTML_MIME_NO_HTML_TAG 4659 2.53 3.78 2.15 87 RELAYCOUNTRY_FR 4627 1.04 3.75 0.22 88 XMSexyCombo_01 4607 2.05 3.73 1.54 89 TR_XM_SpammyWords5 4507 1.99 3.65 1.49 90 TR_XM_SpammyWords3 4476 1.17 3.63 0.42 91 HTML_IMAGE_RATIO_06 4469 3.36 3.62 3.28 92 XMStrtUSub 4459 3.91 3.61 4.00 93 T_FILL_THIS_FORM_SHORT 4201 1.49 3.40 0.91 94 RCVD_IN_VALIDITY_SAFE 4138 4.35 3.35 4.65 95 URIBL_DBL_SPAM 4078 0.78 3.31 0.01 96 KHOP_HELO_FCRDNS 4016 2.96 3.25 2.87 97 T_REMOTE_IMAGE 3890 3.06 3.15 3.03 98 T_TooManySym_01 3873 4.64 3.14 5.10 99 XMNumbers 3796 3.34 3.08 3.42 100 RCVD_IN_MSPIKE_L3 3697 0.92 3.00 0.29 101 SpammyFromTLD_02 3693 0.98 2.99 0.37 102 T_XMDrugObfuBody_14 3660 2.26 2.97 2.04 103 RCVD_IN_IADB_LISTED 3624 4.77 2.94 5.32 104 XM_DIRTYINTL 3455 0.88 2.80 0.29 105 RCVD_IN_VALIDITY_CERTIFIED 3394 3.75 2.75 4.05 106 HTML_IMAGE_RATIO_08 3349 4.19 2.71 4.64 107 XM_B_COVIDMETA 3269 1.17 2.65 0.72 108 TR_XM_FormFill 3140 0.69 2.54 0.13 109 ALL_TRUSTED 3114 17.93 2.52 22.60 110 XMBody_17 3109 0.90 2.52 0.41 111 XM_DK_Undo_01 3089 1.73 2.50 1.49 112 RCVD_IN_IADB_SPF 2977 4.12 2.41 4.64 113 BAYES_40 2920 4.47 2.37 5.11 114 XMDiploma_00 2912 6.37 2.36 7.59 115 XM_GoogleGroups 2871 1.44 2.33 1.18 116 XM_CamelCaseFrm001 2855 1.72 2.31 1.54 117 XM_B_Unsub2 2851 1.46 2.31 1.20 118 RCVD_IN_MSPIKE_L5 2846 0.67 2.31 0.17 119 SUBJ_ALL_CAPS 2712 2.25 2.20 2.27 120 RCVD_IN_IADB_DK 2685 3.58 2.18 4.00 121 XM_UB60 2682 0.55 2.17 0.05 122 RCVD_IN_IADB_SENDERID 2647 3.67 2.15 4.13 123 URI_HEX 2614 1.41 2.12 1.20 124 XM_URI_RBL 2579 0.59 2.09 0.14 125 T_XMDrugObfuBody_00 2554 0.99 2.07 0.66 126 XMLngstWrd_00 2471 0.89 2.00 0.55 127 BAYES_20 2457 3.41 1.99 3.84 128 TR_XM_SB_Phish 2449 2.22 1.98 2.30 129 XMLngstWrd_01 2421 0.83 1.96 0.48 130 XMSubPhish11 2373 2.19 1.92 2.28 131 HTML_TITLE_SUBJ_DIFF 2364 0.56 1.92 0.15 132 USER_IN_DEF_DKIM_WL 2363 8.68 1.92 10.73 133 TR_XM_PHPDW 2363 0.68 1.92 0.31 134 XM_B_SpammyWords4 2358 0.82 1.91 0.48 135 FROM_EXCESS_BASE64 2353 2.18 1.91 2.26 136 TR_XM_NoHeaderRelay 2349 0.57 1.90 0.17 137 XMLngstWrd_02 2321 0.75 1.88 0.41 138 XMLngstWrd_03 2283 0.68 1.85 0.33 139 RCVD_IN_VALIDITY_RPBL 2270 0.47 1.84 0.06 140 MAILING_LIST_MULTI 2222 2.40 1.80 2.58 141 TR_XM_PHPForged 2221 0.62 1.80 0.27 142 XMLngstWrd_04 2215 0.63 1.80 0.27 143 XM_TLDProd2 2196 0.56 1.78 0.18 144 RCVD_IN_IADB_VOUCHED 2194 2.95 1.78 3.30 145 TR_XM_FormFill2 2190 0.62 1.77 0.26 146 XM_H_PHPOS 2167 0.60 1.76 0.26 147 UPPERCASE_75_100 2154 0.52 1.75 0.14 148 PDS_OTHER_BAD_TLD 2107 0.60 1.71 0.27 149 XMStockSpam_06 2093 1.00 1.70 0.78 150 TR_XM_COVIDMETA4 2068 0.64 1.68 0.33 151 URIBL_BLACK 1994 0.41 1.62 0.05 152 TR_Symld_Words 1960 1.59 1.59 1.59 153 XMGenDplmaNmb 1938 0.85 1.57 0.63 154 BOTNET_NORDNS 1885 0.37 1.53 0.01 155 XMBdyGiftCard01 1877 0.84 1.52 0.64 156 TR_XM_COVIDMETA1 1853 0.49 1.50 0.18 157 RELAYCOUNTRY_AU 1846 0.59 1.50 0.31 158 XM_Body_Dirty_Words_01 1797 0.44 1.46 0.14 159 XM_UB99 1743 0.33 1.41 0.00 160 XM_Lotto 1730 0.46 1.40 0.17 161 BAYES_00 1728 10.56 1.40 13.33 162 TR_LOTS_OF_MONEY3 1720 0.63 1.39 0.40 163 URI_NO_WWW_BIZ_CGI 1701 0.33 1.38 0.01 164 XMHTML_After_End 1661 0.81 1.35 0.64 165 URI_LONG_REPEAT 1659 0.31 1.34 0.00 166 TR_XM_INV_DKIM 1658 0.41 1.34 0.13 167 T_XMHurry_00 1656 0.66 1.34 0.45 168 RELAYCOUNTRY_GB 1626 0.85 1.32 0.71 169 RDNS_DYNAMIC 1603 0.60 1.30 0.39 170 XMPhish30 1583 0.69 1.28 0.52 171 URI_TRY_3LD 1581 0.64 1.28 0.44 172 XMBrknScrpt_02 1580 0.89 1.28 0.77 173 XM_UB80 1574 0.31 1.28 0.01 174 XM_B_Crypto 1573 0.45 1.27 0.20 175 TR_XM_RelayPhish 1554 0.33 1.26 0.04 176 RELAYCOUNTRY_IN 1524 0.35 1.24 0.09 177 SHORT_URI_2 1512 1.46 1.23 1.53 178 TM2_M_A_HREF_HREF 1511 0.52 1.22 0.31 179 XM_H_Undi_Recip 1458 0.38 1.18 0.13 180 HTTPS_HTTP_MISMATCH 1447 0.85 1.17 0.76 181 XMMoneyMeta_00 1441 0.72 1.17 0.58 182 PLING_QUERY 1420 0.56 1.15 0.38 183 XMSubMetaI_00 1417 0.69 1.15 0.55 184 FROM_SUSPICIOUS_NTLD 1409 0.30 1.14 0.04 185 TR_MetaPhish_Combo_01 1397 0.83 1.13 0.73 186 XM_UB999 1387 0.26 1.12 0.00 187 XMSubject_11 1328 0.26 1.08 0.01 188 TR_Mismatch_TLD_02 1318 0.32 1.07 0.09 189 XM_ProductURIs 1306 0.71 1.06 0.60 190 FROM_SUSPICIOUS_NTLD_FP 1302 0.28 1.06 0.04 191 DIET_1 1295 0.50 1.05 0.33 192 XMSpecificSbj 1290 0.24 1.05 0.00 193 XM_H_PHPMailer 1279 0.60 1.04 0.47 194 TR_XM_Spammywords 1273 0.45 1.03 0.27 195 XM_S_SpammyWords 1273 0.45 1.03 0.27 196 RCVD_IN_IADB_OPTIN 1272 1.87 1.03 2.13 197 LongTLD 1268 0.35 1.03 0.14 198 XM_B_SEO 1254 0.31 1.02 0.09 199 RCVD_IN_MSPIKE_L4 1253 0.58 1.02 0.45 200 XM_XX_Yahoo 1235 0.27 1.00 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 359046 90.25 96.76 88.28 2 RELAYCOUNTRY_US 306376 76.07 78.54 75.33 3 XM_B_Unicode 294305 73.53 77.38 72.36 4 DCC_CHECK_NEGATIVE 283178 60.29 29.52 69.62 5 DKIM_SIGNED 269944 71.58 88.74 66.37 6 XM_DK_Pass 264225 69.53 84.58 64.96 7 DKIM_VALID 256112 67.52 82.53 62.97 8 BAYES_50 230115 54.16 46.18 56.58 9 DKIM_VALID_AU 190379 50.47 62.53 46.81 10 XM_B_Unicode3 186969 45.22 42.77 45.97 11 XMListUnsubscribeExists 177959 50.89 74.41 43.75 12 XM_B_SpammyWords 173983 49.53 71.80 42.78 13 DCC_CHECK 123380 39.67 70.44 30.34 14 T_TM2_M_HEADER_IN_MSG 119558 28.41 25.15 29.40 15 XMSubLong 108080 26.54 26.41 26.57 16 RCVD_IN_MSPIKE_WL 105356 25.18 22.79 25.90 17 MIME_HTML_ONLY 99978 25.48 28.44 24.58 18 HTML_FONT_LOW_CONTRAST 99891 26.78 34.11 24.56 19 DKIM_VALID_EF 97946 25.94 32.06 24.08 20 ALL_TRUSTED 91911 17.93 2.52 22.60 21 FVGT_m_MULTI_ODD 88318 23.84 30.85 21.71 22 LOC_TINY_FONT_1 83366 24.55 37.90 20.50 23 RCVD_IN_MSPIKE_H2 77998 20.19 23.52 19.18 24 T_KAM_HTML_FONT_INVALID 72169 21.18 32.50 17.74 25 XM_B_Unsub 71242 16.30 12.28 17.52 26 XM_B_SpammyWords2 66958 21.30 37.22 16.46 27 TooManyTo_001 64241 13.72 6.89 15.79 28 RCVD_IN_MSPIKE_H3 55350 13.14 11.59 13.61 29 BAYES_00 54236 10.56 1.40 13.33 30 XM_Body_Dirty_Words 46604 14.20 23.23 11.46 31 XMSubMetaSx_00 44875 10.32 7.95 11.03 32 USER_IN_DEF_DKIM_WL 43636 8.68 1.92 10.73 33 RCVD_IN_MSPIKE_H4 43065 10.61 10.67 10.59 34 XM_Multi_Part_URI 42338 12.20 18.12 10.41 35 XMSexyCombo_05 37992 9.48 9.93 9.34 36 LOTS_OF_MONEY 36791 10.51 15.34 9.05 37 LotsOfNums_01 36060 8.54 7.48 8.87 38 IN_ZIMBRA_NJ_WHITELIST 34662 6.56 0.08 8.52 39 BAYES_60 32353 7.80 7.30 7.95 40 XMDiploma_00 30866 6.37 2.36 7.59 41 MIME_QP_LONG_LINE 30307 6.92 5.19 7.45 42 UNPARSEABLE_RELAY 29940 8.50 12.25 7.36 43 XM_Evil_Numbers_Gen 28601 7.56 9.28 7.03 44 TR_XM_DK_Bayes 28249 5.48 0.63 6.95 45 XMSubMetaSxObfu_03 27529 5.38 0.79 6.77 46 TR_XM_DK_Bayes1 27249 5.28 0.61 6.70 47 XM_DKIMWhitelistDomains 26312 4.97 0.05 6.47 48 XM_DK_Undo_02 24699 14.51 42.32 6.07 49 XM_SendGrid 24282 6.43 7.94 5.97 50 TR_XM_UnparsRelay 23173 7.14 11.88 5.70 51 TR_XM_DK_Bayes2 22964 4.45 0.49 5.65 52 TR_XM_SpammyWords4 22142 7.33 13.55 5.44 53 RCVD_IN_IADB_LISTED 21647 4.77 2.94 5.32 54 HTML_IMAGE_RATIO_02 20913 5.73 7.66 5.14 55 BAYES_40 20792 4.47 2.37 5.11 56 T_TooManySym_01 20741 4.64 3.14 5.10 57 HTML_IMAGE_RATIO_04 19212 4.66 4.46 4.72 58 XM_H_Long_From01 19029 4.91 5.66 4.68 59 BAYES_99 18980 10.24 28.61 4.67 60 RCVD_IN_VALIDITY_SAFE 18912 4.35 3.35 4.65 61 RCVD_IN_IADB_SPF 18886 4.12 2.41 4.64 62 HTML_IMAGE_RATIO_08 18878 4.19 2.71 4.64 63 XM_SPF_SoftFail 18586 4.55 4.51 4.57 64 XM_PDF 18354 3.66 0.84 4.51 65 TR_XM_DKIM_Undo 18329 11.50 34.55 4.51 66 XM_B_SpammyWords3 17838 6.10 11.76 4.39 67 TM2_M_URI_OPT_OUT 17631 4.46 4.88 4.33 68 MPART_ALT_DIFF 16813 6.16 12.83 4.13 69 RCVD_IN_IADB_SENDERID 16810 3.67 2.15 4.13 70 RCVD_IN_VALIDITY_CERTIFIED 16472 3.75 2.75 4.05 71 BOTNET_IPINHOSTNAME 16343 6.21 13.42 4.02 72 RCVD_IN_IADB_DK 16273 3.58 2.18 4.00 73 XMStrtUSub 16264 3.91 3.61 4.00 74 BAYES_20 15607 3.41 1.99 3.84 75 BAYES_80 15465 4.59 7.21 3.80 76 BAYES_999 15374 8.08 22.24 3.78 77 TR_XM_DK_SendGrid 14950 3.86 4.46 3.68 78 FSL_BULK_SIG 13915 4.40 7.65 3.42 79 XMNumbers 13899 3.34 3.08 3.42 80 DKIM_INVALID 13832 4.06 6.21 3.40 81 HTML_FONT_FACE_BAD 13707 2.74 0.65 3.37 82 RCVD_IN_IADB_VOUCHED 13430 2.95 1.78 3.30 83 HTML_IMAGE_RATIO_06 13344 3.36 3.62 3.28 84 ANY_BOUNCE_MESSAGE 13323 2.66 0.65 3.28 85 BOUNCE_MESSAGE 13322 2.66 0.64 3.28 86 TR_XM_PhishingBody 13161 4.22 7.48 3.24 87 RELAYCOUNTRY_META 12725 7.54 22.06 3.13 88 URI_NOVOWEL 12628 4.25 8.03 3.10 89 XM_B_Phish_Phrases 12409 3.79 6.21 3.05 90 XM_UncommonTLD01 12372 5.56 13.88 3.04 91 T_REMOTE_IMAGE 12307 3.06 3.15 3.03 92 T_TooManySym_02 11687 2.40 0.83 2.87 93 KHOP_HELO_FCRDNS 11657 2.96 3.25 2.87 94 MIME_HTML_ONLY_MULTI 11388 3.31 4.99 2.80 95 MAILING_LIST_MULTI 10498 2.40 1.80 2.58 96 XM_H_Trusted_IP 10461 1.97 0.00 2.57 97 BAYES_95 9699 2.76 4.00 2.38 98 BAYES_05 9467 2.00 0.93 2.33 99 TR_XM_SB_Phish 9339 2.22 1.98 2.30 100 XMSubPhish11 9259 2.19 1.92 2.28 101 SUBJ_ALL_CAPS 9213 2.25 2.20 2.27 102 FROM_EXCESS_BASE64 9195 2.18 1.91 2.26 103 HTML_MIME_NO_HTML_TAG 8759 2.53 3.78 2.15 104 RCVD_IN_IADB_OPTIN 8648 1.87 1.03 2.13 105 XM_B_Phish66 8599 2.60 4.20 2.11 106 T_XMDrugObfuBody_14 8302 2.26 2.97 2.04 107 XM_B_SpammyTLD 8095 2.53 4.29 1.99 108 TooManyTo_002 8063 1.74 0.94 1.98 109 T_XMDrugObfuBody_08 8026 2.50 4.22 1.97 110 MIME_HTML_MOSTLY 7730 3.49 8.73 1.90 111 RCVD_IN_MSPIKE_H5 6941 1.43 0.53 1.71 112 FILL_THIS_FORM 6879 1.34 0.18 1.69 113 IN_HORDE_ADDRESS_BOOK 6822 1.31 0.11 1.68 114 INVALID_MSGID 6814 1.32 0.14 1.68 115 HELO_NODOT 6652 1.42 0.71 1.64 116 HELO_NO_DOMAIN 6648 1.42 0.70 1.63 117 TR_Symld_Words 6461 1.59 1.59 1.59 118 XM_B_Investor 6445 2.36 4.93 1.58 119 XM_CamelCaseFrm001 6264 1.72 2.31 1.54 120 XMSexyCombo_01 6245 2.05 3.73 1.54 121 MSGID_NOFQDN1 6236 1.18 0.03 1.53 122 SHORT_URI_2 6235 1.46 1.23 1.53 123 TO_MALFORMED 6137 1.16 0.02 1.51 124 XM_DK_Undo_01 6072 1.73 2.50 1.49 125 TR_XM_SpammyWords5 6042 1.99 3.65 1.49 126 TR_DCC_Bayes_99 6019 5.77 19.91 1.48 127 BOTNET 5871 4.17 13.18 1.44 128 TVD_RCVD_IP 5851 1.16 0.23 1.44 129 SHORTENED_URL_HREF 5489 1.12 0.38 1.35 130 TR_XM_SpammyRelay 5485 4.63 15.46 1.35 131 TM2_M_VERY_LONG_WORD 5452 2.04 4.34 1.34 132 TooManyTo_003 5413 1.20 0.79 1.33 133 XM_B_Unsub2 4876 1.46 2.31 1.20 134 URI_HEX 4872 1.41 2.12 1.20 135 XM_GoogleGroups 4789 1.44 2.33 1.18 136 XM_H_Long_From02 4745 1.11 0.94 1.17 137 XMGappySubj_01 4662 0.91 0.11 1.15 138 UNTRUSTED_Relay 4331 3.86 13.09 1.06 139 XMCapTrack 4064 0.85 0.35 1.00 140 TVD_SPACE_RATIO 3808 0.73 0.04 0.94 141 TooManyTo_004 3797 0.88 0.71 0.93 142 RCVD_IN_RP_SAFE 3795 0.87 0.66 0.93 143 XMSubNoVowel 3773 0.88 0.74 0.93 144 RCVD_IN_MSPIKE_BL 3770 2.18 6.33 0.93 145 XMBSHREFv2 3699 0.77 0.30 0.91 146 TR_XM_MSPIKECOMBO 3694 2.17 6.32 0.91 147 T_FILL_THIS_FORM_SHORT 3693 1.49 3.40 0.91 148 XM_OfRef6 3626 1.57 3.79 0.89 149 RCVD_IN_RP_CERTIFIED 3349 0.75 0.52 0.82 150 DKIM_ADSP_CUSTOM_MED 3297 0.83 0.88 0.81 151 XMStockSpam_06 3187 1.00 1.70 0.78 152 XMBrknScrpt_02 3152 0.89 1.28 0.77 153 TooManyTo_005 3113 0.74 0.65 0.77 154 HTTPS_HTTP_MISMATCH 3075 0.85 1.17 0.76 155 HTML_IMAGE_ONLY_20 3075 0.66 0.35 0.76 156 TR_MetaPhish_Combo_01 2984 0.83 1.13 0.73 157 TR_XM_SpammyWords2 2963 2.82 9.72 0.73 158 XM_B_COVIDMETA 2940 1.17 2.65 0.72 159 RCVD_IN_BL_SPAMCOP_NET 2870 2.93 10.24 0.71 160 RELAYCOUNTRY_GB 2868 0.85 1.32 0.71 161 RELAYCOUNTRY_CA 2840 1.72 5.10 0.70 162 T_TooManySym_03 2832 0.61 0.33 0.70 163 XM_UB50 2708 2.09 6.78 0.67 164 T_XMDrugObfuBody_00 2697 0.99 2.07 0.66 165 TR_XM_MaxUnsub 2619 1.38 3.79 0.64 166 XMHTML_After_End 2612 0.81 1.35 0.64 167 XMBdyGiftCard01 2592 0.84 1.52 0.64 168 XMGenDplmaNmb 2578 0.85 1.57 0.63 169 SpammyFromTLD_01 2577 2.00 6.49 0.63 170 HTML_TAG_BALANCE_BODY 2467 0.69 0.95 0.61 171 XM_ProductURIs 2459 0.71 1.06 0.60 172 XMBody_95 2451 0.49 0.12 0.60 173 T_OBFU_PDF_ATTACH 2375 0.47 0.11 0.58 174 XMMoneyMeta_00 2368 0.72 1.17 0.58 175 FROM_GOV_DKIM_AU 2355 0.48 0.17 0.58 176 XMLngstWrd_00 2253 0.89 2.00 0.55 177 XMSubMetaI_00 2250 0.69 1.15 0.55 178 XM_B_COPY_HTML 2218 0.58 0.69 0.55 179 NML_ADSP_CUSTOM_MED 2214 0.59 0.73 0.54 180 XM_ShortIntro_01 2181 0.51 0.41 0.54 181 XMNoVowels 2097 0.61 0.94 0.52 182 XMPhish30 2096 0.69 1.28 0.52 183 TR_MSPIKEBAYES00 2029 0.39 0.04 0.50 184 SHORT_HELO_AND_INLINE_IMAGE 2012 0.40 0.09 0.49 185 RCVD_IN_SORBS_DUL 1982 0.44 0.30 0.49 186 T_Symld_Words_02 1973 0.54 0.73 0.49 187 XMLngstWrd_01 1965 0.83 1.96 0.48 188 XM_B_SpammyWords4 1964 0.82 1.91 0.48 189 FORGED_GMAIL_RCVD 1935 0.54 0.74 0.48 190 XM_H_PHPMailer 1920 0.60 1.04 0.47 191 T_XMHurry_00 1826 0.66 1.34 0.45 192 RCVD_IN_MSPIKE_L4 1816 0.58 1.02 0.45 193 URI_TRY_3LD 1805 0.64 1.28 0.44 194 DKIM_ADSP_NXDOMAIN 1774 0.44 0.45 0.44 195 HTML_IMAGE_ONLY_28 1758 0.41 0.33 0.43 196 TR_XM_SpammyWords3 1719 1.17 3.63 0.42 197 XMLngstWrd_02 1663 0.75 1.88 0.41 198 XMHTMLBadTable_001 1660 0.51 0.83 0.41 199 XMBody_17 1659 0.90 2.52 0.41 200 TR_LOTS_OF_MONEY3 1616 0.63 1.39 0.40 ----------------------------------------------------------------------