Email: 584817 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.23 sec Spam: 141939 Autolearn: 0 AvgScore: 14.31 AvgScanTime: 1.41 sec Ham: 442878 Autolearn: 0 AvgScore: -3.36 AvgScanTime: 1.17 sec Time Spent Running SA: 199.27 hours Time Spent Processing Spam: 55.51 hours Time Spent Processing Ham: 143.76 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133137 90.42 93.80 89.33 2 DKIM_SIGNED 115925 63.35 81.67 57.48 3 XM_DK_Pass 111303 61.80 78.42 56.48 4 DKIM_VALID 110643 61.15 77.95 55.76 5 XM_B_Unicode 108188 74.84 76.22 74.39 6 RELAYCOUNTRY_US 107993 77.74 76.08 78.27 7 DCC_CHECK 99922 36.31 70.40 25.39 8 XM_B_SpammyWords 92346 45.71 65.06 39.51 9 XMListUnsubscribeExists 89956 43.63 63.38 37.30 10 DKIM_VALID_AU 83240 46.65 58.64 42.80 11 XM_B_Unicode3 62008 47.94 43.69 49.30 12 XM_DK_Undo_02 59373 14.29 41.83 5.47 13 BAYES_50 58199 50.69 41.00 53.80 14 MIME_HTML_ONLY 49525 30.27 34.89 28.79 15 XM_B_SpammyWords2 49309 19.32 34.74 14.37 16 LOC_TINY_FONT_1 47653 21.11 33.57 17.11 17 BAYES_99 46928 11.43 33.06 4.49 18 TR_XM_DKIM_Undo 45844 10.66 32.30 3.73 19 HTML_FONT_LOW_CONTRAST 44373 27.50 31.26 26.29 20 DCC_CHECK_NEGATIVE 41952 63.65 29.56 74.58 21 DKIM_VALID_EF 41881 23.58 29.51 21.68 22 FVGT_m_MULTI_ODD 40892 21.34 28.81 18.95 23 BAYES_999 36620 9.07 25.80 3.71 24 T_KAM_HTML_FONT_INVALID 35646 17.13 25.11 14.57 25 RCVD_IN_MSPIKE_H2 35281 18.07 24.86 15.90 26 XMSubLong 34140 25.23 24.05 25.61 27 T_TM2_M_HEADER_IN_MSG 34042 24.90 23.98 25.20 28 RELAYCOUNTRY_META 33307 8.05 23.47 3.11 29 TR_DCC_Bayes_99 31758 6.35 22.37 1.21 30 XM_Body_Dirty_Words 31352 12.09 22.09 8.88 31 RCVD_IN_MSPIKE_WL 27018 22.38 19.03 23.45 32 FSL_BULK_SIG 23397 5.99 16.48 2.63 33 XM_Multi_Part_URI 23258 11.42 16.39 9.82 34 UNTRUSTED_Relay 21463 4.57 15.12 1.18 35 XM_B_Unsub 21290 14.25 15.00 14.01 36 LOTS_OF_MONEY 20374 8.41 14.35 6.51 37 BOTNET 18559 4.52 13.08 1.77 38 UNPARSEABLE_RELAY 18200 7.72 12.82 6.08 39 TR_XM_SpammyRelay 17990 3.94 12.67 1.14 40 TR_XM_UnparsRelay 17914 6.68 12.62 4.78 41 RCVD_IN_MSPIKE_H3 17698 13.01 12.47 13.18 42 BOTNET_IPINHOSTNAME 17576 5.73 12.38 3.60 43 XM_UncommonTLD01 17306 5.06 12.19 2.78 44 TR_XM_SpammyWords4 16897 5.98 11.90 4.07 45 XM_B_SpammyWords3 16432 5.28 11.58 3.26 46 RCVD_IN_BL_SPAMCOP_NET 15654 3.10 11.03 0.56 47 TR_XM_SpammyWords2 15069 3.14 10.62 0.75 48 HTML_IMAGE_RATIO_02 14506 5.70 10.22 4.25 49 XMSexyCombo_05 14462 4.40 10.19 2.55 50 MPART_ALT_DIFF 12171 10.81 8.57 11.53 51 XM_Evil_Numbers_Gen 12163 8.13 8.57 7.99 52 BAYES_80 11583 4.82 8.16 3.75 53 BAYES_60 11382 7.91 8.02 7.88 54 RCVD_IN_MSPIKE_BL 11369 2.74 8.01 1.05 55 TR_XM_MSPIKECOMBO 11326 2.73 7.98 1.05 56 XM_SendGrid 11290 5.41 7.95 4.59 57 TR_XM_PhishingBody 10470 3.81 7.38 2.67 58 XM_UB50 10114 2.34 7.13 0.81 59 LotsOfNums_01 9397 7.00 6.62 7.12 60 XM_B_Phish_Phrases 9220 4.21 6.50 3.48 61 TR_XM_MaxUnsub 9148 2.14 6.45 0.77 62 RCVD_IN_MSPIKE_H4 8820 8.17 6.21 8.79 63 XM_SPF_SoftFail 8253 2.75 5.81 1.76 64 T_REMOTE_IMAGE 8125 3.67 5.72 3.02 65 XMSubMetaSx_00 7860 3.82 5.54 3.27 66 HTML_MIME_NO_HTML_TAG 7834 3.02 5.52 2.21 67 RELAYCOUNTRY_CA 7461 1.86 5.26 0.77 68 MIME_HTML_ONLY_MULTI 7348 8.49 5.18 9.55 69 RCVD_IN_PSBL 7265 1.27 5.12 0.04 70 BAYES_95 6876 2.96 4.84 2.35 71 XM_H_Long_From01 6840 4.27 4.82 4.09 72 TR_XM_SPAMCOP 6746 1.31 4.75 0.21 73 TR_XM_DK_SendGrid 6642 3.47 4.68 3.08 74 XM_B_Phish66 6475 2.36 4.56 1.65 75 TM2_M_VERY_LONG_WORD 6343 2.18 4.47 1.45 76 TooManyTo_001 6265 10.37 4.41 12.28 77 TR_XM_SpammyWords5 6248 2.13 4.40 1.40 78 KHOP_HELO_FCRDNS 6157 2.09 4.34 1.37 79 HTML_IMAGE_RATIO_04 6154 14.43 4.34 17.67 80 RCVD_IN_MSPIKE_L5 6152 1.16 4.33 0.14 81 SpammyFromTLD_01 6143 1.46 4.33 0.54 82 HTML_IMAGE_RATIO_06 5936 5.19 4.18 5.51 83 XMStrtUSub 5719 9.77 4.03 11.62 84 XM_OfRef6 5506 1.89 3.88 1.25 85 XMNumbers 5464 3.16 3.85 2.94 86 TR_XM_SpammyWords3 5457 1.29 3.84 0.48 87 XM_B_SpammyTLD 5429 2.28 3.82 1.79 88 XM_B_Investor 5290 6.37 3.73 7.21 89 DKIM_INVALID 5282 2.20 3.72 1.71 90 RCVD_IN_VALIDITY_RPBL 5222 0.91 3.68 0.02 91 MIME_HTML_MOSTLY 5165 2.60 3.64 2.26 92 TR_Mismatch_TLD_02 5156 0.95 3.63 0.09 93 RCVD_IN_VALIDITY_SAFE 4830 3.83 3.40 3.96 94 T_XMDrugObfuBody_14 4671 1.98 3.29 1.56 95 MIME_QP_LONG_LINE 4504 4.07 3.17 4.35 96 TM2_M_URI_OPT_OUT 4470 2.48 3.15 2.27 97 T_FILL_THIS_FORM_SHORT 4460 1.38 3.14 0.82 98 SpammyFromTLD_02 4297 1.00 3.03 0.35 99 XM_DIRTYINTL 4244 0.92 2.99 0.25 100 URI_NOVOWEL 4129 2.44 2.91 2.28 101 RCVD_IN_VALIDITY_CERTIFIED 4121 3.46 2.90 3.64 102 RCVD_IN_IADB_LISTED 3981 4.19 2.80 4.63 103 HOSTED_IMG_DIRECT_MX 3941 0.67 2.78 0.00 104 EBAY_IMG_NOT_RCVD_EBAY 3926 0.67 2.77 0.00 105 TR_XM_MSPIKECOMBO2 3917 0.79 2.76 0.16 106 XM_DK_Undo_01 3871 1.59 2.73 1.22 107 XM_B_Unsub2 3869 1.58 2.73 1.21 108 XM_UB99 3860 0.66 2.72 0.00 109 RCVD_IN_MSPIKE_L3 3770 1.02 2.66 0.49 110 XM_GoogleGroups 3632 1.67 2.56 1.39 111 SUBJ_ALL_CAPS 3623 1.69 2.55 1.42 112 HTML_IMAGE_RATIO_08 3616 2.03 2.55 1.87 113 BOTNET_NORDNS 3587 0.63 2.53 0.02 114 T_TooManySym_01 3486 4.08 2.46 4.60 115 RCVD_IN_IADB_SPF 3386 3.65 2.39 4.06 116 USER_IN_DEF_DKIM_WL 3296 7.61 2.32 9.31 117 XM_B_COVIDMETA 3264 0.92 2.30 0.47 118 XM_B_SpammyWords4 3222 0.81 2.27 0.35 119 XMLngstWrd_00 3181 1.14 2.24 0.79 120 RCVD_IN_IADB_DK 3147 3.19 2.22 3.50 121 XMLngstWrd_01 3112 1.10 2.19 0.75 122 XMDiploma_00 3082 5.78 2.17 6.94 123 HTML_TAG_BALANCE_CENTER 3079 0.56 2.17 0.05 124 T_XMDrugObfuBody_08 3060 5.99 2.16 7.21 125 RELAYCOUNTRY_FR 3059 0.67 2.16 0.19 126 XMLngstWrd_02 3034 1.02 2.14 0.67 127 ALL_TRUSTED 3028 15.33 2.13 19.55 128 RCVD_IN_IADB_SENDERID 3016 3.28 2.12 3.65 129 XMLngstWrd_03 2988 0.96 2.11 0.59 130 URI_HEX 2959 1.44 2.08 1.23 131 DKIM_ADSP_CUSTOM_MED 2948 1.06 2.08 0.74 132 XMBody_17 2942 0.77 2.07 0.35 133 TR_XM_NoHeaderRelay 2937 0.60 2.07 0.13 134 PDS_OTHER_BAD_TLD 2920 0.81 2.06 0.40 135 XM_UB999 2904 0.50 2.05 0.00 136 T_XMDrugObfuBody_00 2901 0.98 2.04 0.64 137 MAILING_LIST_MULTI 2898 2.06 2.04 2.07 138 XM_CamelCaseFrm001 2892 1.56 2.04 1.41 139 XMLngstWrd_04 2882 0.90 2.03 0.54 140 HTML_TITLE_SUBJ_DIFF 2798 0.80 1.97 0.42 141 HTML_IMAGE_ONLY_08 2751 0.54 1.94 0.09 142 XM_UB60 2742 0.52 1.93 0.07 143 UPPERCASE_75_100 2741 0.78 1.93 0.42 144 URIBL_DBL_SPAM 2731 0.47 1.92 0.01 145 NML_ADSP_CUSTOM_MED 2724 0.82 1.92 0.46 146 GOOG_STO_IMG_HTML 2717 0.47 1.91 0.00 147 FROM_SUSPICIOUS_NTLD 2715 0.49 1.91 0.03 148 FROM_EXCESS_BASE64 2683 1.99 1.89 2.03 149 HTML_FONT_SIZE_LARGE 2636 0.51 1.86 0.08 150 FORGED_GMAIL_RCVD 2628 0.75 1.85 0.39 151 TR_XM_SB_Phish 2620 1.78 1.85 1.75 152 FROM_SUSPICIOUS_NTLD_FP 2616 0.47 1.84 0.03 153 HTML_IMAGE_ONLY_28 2597 0.69 1.83 0.32 154 XMStockSpam_06 2579 1.16 1.82 0.95 155 RELAYCOUNTRY_AU 2560 0.63 1.80 0.25 156 TR_XM_PHPDW 2560 0.71 1.80 0.36 157 TR_Symld_Words 2534 1.51 1.79 1.42 158 XM_URI_RBL 2512 0.50 1.77 0.10 159 XMSubPhish11 2479 1.74 1.75 1.74 160 TR_XM_PHPForged 2476 0.65 1.74 0.31 161 TR_XM_FormFill2 2430 0.65 1.71 0.31 162 XM_H_PHPOS 2407 0.64 1.70 0.30 163 DIET_1 2399 0.63 1.69 0.29 164 XMSubNoVowel 2369 4.44 1.67 5.32 165 BAYES_40 2343 4.14 1.65 4.94 166 RCVD_IN_IADB_VOUCHED 2333 2.61 1.64 2.92 167 RELAYCOUNTRY_DE 2330 0.56 1.64 0.21 168 LongTLD 2319 0.50 1.63 0.14 169 MIXED_CENTER_CASE 2312 0.40 1.63 0.00 170 MIXED_HREF_CASE 2304 0.40 1.62 0.00 171 MIXED_AREA_CASE 2300 0.39 1.62 0.00 172 MIXED_IMG_CASE 2300 0.39 1.62 0.00 173 MIXED_FONT_CASE 2293 0.39 1.62 0.00 174 RELAYCOUNTRY_RU 2282 0.41 1.61 0.02 175 TR_LOTS_OF_MONEY3 2247 0.53 1.58 0.19 176 XMSexyCombo_01 2205 0.76 1.55 0.51 177 BODY_URI_ONLY 2126 0.37 1.50 0.01 178 XM_ProductURIs 2125 1.01 1.50 0.85 179 HTML_IMAGE_ONLY_32 2092 0.63 1.47 0.36 180 XM_Body_Dirty_Words_01 2038 0.72 1.44 0.50 181 HTML_TAG_BALANCE_BODY 2004 0.75 1.41 0.54 182 URIBL_BLACK 1972 0.36 1.39 0.04 183 TR_XM_FormFill 1941 0.34 1.37 0.01 184 XMHTML_After_End 1881 0.76 1.33 0.57 185 HTML_FONT_FACE_BAD 1862 12.76 1.31 16.43 186 BAYES_20 1861 3.76 1.31 4.55 187 XMBody_78 1818 0.48 1.28 0.23 188 XM_DrugUnitList 1804 0.31 1.27 0.00 189 TR_XM_COVIDMETA1 1788 0.39 1.26 0.11 190 TR_BOTNET_NEGATE 1709 0.51 1.20 0.29 191 XM_H_Long_From02 1705 1.05 1.20 1.00 192 XM_UB80 1699 0.31 1.20 0.02 193 RELAYCOUNTRY_GB 1695 0.78 1.19 0.65 194 MPART_ALT_DIFF_COUNT 1683 0.59 1.19 0.40 195 T_XMHurry_00 1653 0.51 1.16 0.30 196 TR_XM_BayesRelay 1581 0.27 1.11 0.00 197 XMPhish30 1575 0.70 1.11 0.57 198 DATE_IN_PAST_03_06 1539 0.30 1.08 0.05 199 RELAYCOUNTRY_GR 1538 0.26 1.08 0.00 200 MONEY_NOHTML 1537 0.31 1.08 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 395644 90.42 93.80 89.33 2 RELAYCOUNTRY_US 346654 77.74 76.08 78.27 3 DCC_CHECK_NEGATIVE 330282 63.65 29.56 74.58 4 XM_B_Unicode 329477 74.84 76.22 74.39 5 DKIM_SIGNED 254550 63.35 81.67 57.48 6 XM_DK_Pass 250124 61.80 78.42 56.48 7 DKIM_VALID 246960 61.15 77.95 55.76 8 BAYES_50 238259 50.69 41.00 53.80 9 XM_B_Unicode3 218340 47.94 43.69 49.30 10 DKIM_VALID_AU 189555 46.65 58.64 42.80 11 XM_B_SpammyWords 174971 45.71 65.06 39.51 12 XMListUnsubscribeExists 165189 43.63 63.38 37.30 13 MIME_HTML_ONLY 127486 30.27 34.89 28.79 14 HTML_FONT_LOW_CONTRAST 116448 27.50 31.26 26.29 15 XMSubLong 113402 25.23 24.05 25.61 16 DCC_CHECK 112449 36.31 70.40 25.39 17 T_TM2_M_HEADER_IN_MSG 111590 24.90 23.98 25.20 18 RCVD_IN_MSPIKE_WL 103844 22.38 19.03 23.45 19 DKIM_VALID_EF 96027 23.58 29.51 21.68 20 ALL_TRUSTED 86604 15.33 2.13 19.55 21 FVGT_m_MULTI_ODD 83935 21.34 28.81 18.95 22 HTML_IMAGE_RATIO_04 78247 14.43 4.34 17.67 23 LOC_TINY_FONT_1 75785 21.11 33.57 17.11 24 XM_H_Trusted_IP 73957 12.65 0.00 16.70 25 HTML_FONT_FACE_BAD 72772 12.76 1.31 16.43 26 RCVD_IN_MSPIKE_H2 70405 18.07 24.86 15.90 27 BAYES_00 66817 11.68 1.06 15.09 28 T_KAM_HTML_FONT_INVALID 64514 17.13 25.11 14.57 29 XM_B_SpammyWords2 63652 19.32 34.74 14.37 30 XM_B_Unsub 62026 14.25 15.00 14.01 31 RCVD_IN_MSPIKE_H3 58379 13.01 12.47 13.18 32 TooManyTo_001 54405 10.37 4.41 12.28 33 XMStrtUSub 51441 9.77 4.03 11.62 34 MPART_ALT_DIFF 51061 10.81 8.57 11.53 35 XM_Multi_Part_URI 43510 11.42 16.39 9.82 36 MIME_HTML_ONLY_MULTI 42299 8.49 5.18 9.55 37 USER_IN_DEF_DKIM_WL 41212 7.61 2.32 9.31 38 XM_Body_Dirty_Words 39333 12.09 22.09 8.88 39 RCVD_IN_MSPIKE_H4 38950 8.17 6.21 8.79 40 XM_Evil_Numbers_Gen 35371 8.13 8.57 7.99 41 BAYES_60 34897 7.91 8.02 7.88 42 T_XMDrugObfuBody_08 31946 5.99 2.16 7.21 43 XM_B_Investor 31934 6.37 3.73 7.21 44 LotsOfNums_01 31551 7.00 6.62 7.12 45 XMDiploma_00 30746 5.78 2.17 6.94 46 XMGenDplmaNmb 29051 5.23 1.08 6.56 47 LOTS_OF_MONEY 28823 8.41 14.35 6.51 48 XM_DKIMWhitelistDomains 28511 4.96 0.36 6.44 49 UNPARSEABLE_RELAY 26919 7.72 12.82 6.08 50 IN_ZIMBRA_NJ_WHITELIST 24467 4.21 0.12 5.52 51 HTML_IMAGE_RATIO_06 24413 5.19 4.18 5.51 52 XM_DK_Undo_02 24220 14.29 41.83 5.47 53 XMSubNoVowel 23583 4.44 1.67 5.32 54 BAYES_40 21870 4.14 1.65 4.94 55 TR_XM_DK_Bayes 21867 3.88 0.58 4.94 56 TR_XM_DK_Bayes1 21474 3.81 0.58 4.85 57 TR_XM_UnparsRelay 21166 6.68 12.62 4.78 58 RCVD_IN_IADB_LISTED 20516 4.19 2.80 4.63 59 T_TooManySym_01 20351 4.08 2.46 4.60 60 XM_SendGrid 20328 5.41 7.95 4.59 61 BAYES_20 20132 3.76 1.31 4.55 62 BAYES_99 19907 11.43 33.06 4.49 63 MIME_QP_LONG_LINE 19285 4.07 3.17 4.35 64 TR_XM_DK_Bayes2 18846 3.31 0.36 4.26 65 HTML_IMAGE_RATIO_02 18838 5.70 10.22 4.25 66 XM_H_Long_From01 18109 4.27 4.82 4.09 67 TR_XM_SpammyWords4 18047 5.98 11.90 4.07 68 RCVD_IN_IADB_SPF 17967 3.65 2.39 4.06 69 ANY_BOUNCE_MESSAGE 17904 3.28 0.90 4.04 70 BOUNCE_MESSAGE 17858 3.27 0.88 4.03 71 RCVD_IN_VALIDITY_SAFE 17542 3.83 3.40 3.96 72 XM_PDF 17188 3.16 0.90 3.88 73 BAYES_80 16605 4.82 8.16 3.75 74 TR_XM_DKIM_Undo 16506 10.66 32.30 3.73 75 BAYES_999 16428 9.07 25.80 3.71 76 RCVD_IN_IADB_SENDERID 16181 3.28 2.12 3.65 77 RCVD_IN_VALIDITY_CERTIFIED 16132 3.46 2.90 3.64 78 BOTNET_IPINHOSTNAME 15953 5.73 12.38 3.60 79 RCVD_IN_IADB_DK 15516 3.19 2.22 3.50 80 XM_B_Phish_Phrases 15406 4.21 6.50 3.48 81 XMSubMetaSx_00 14494 3.82 5.54 3.27 82 XM_B_SpammyWords3 14443 5.28 11.58 3.26 83 BAYES_05 13971 2.56 0.70 3.15 84 RELAYCOUNTRY_META 13762 8.05 23.47 3.11 85 TR_XM_DK_SendGrid 13640 3.47 4.68 3.08 86 T_REMOTE_IMAGE 13367 3.67 5.72 3.02 87 XMNumbers 13003 3.16 3.85 2.94 88 RCVD_IN_IADB_VOUCHED 12918 2.61 1.64 2.92 89 XM_UncommonTLD01 12308 5.06 12.19 2.78 90 TR_XM_PhishingBody 11826 3.81 7.38 2.67 91 FSL_BULK_SIG 11645 5.99 16.48 2.63 92 XMSexyCombo_05 11299 4.40 10.19 2.55 93 T_TooManySym_02 11081 2.12 0.94 2.50 94 BAYES_95 10409 2.96 4.84 2.35 95 URI_NOVOWEL 10117 2.44 2.91 2.28 96 TM2_M_URI_OPT_OUT 10052 2.48 3.15 2.27 97 MIME_HTML_MOSTLY 10020 2.60 3.64 2.26 98 HTML_MIME_NO_HTML_TAG 9799 3.02 5.52 2.21 99 XMSubGarbage 9760 1.72 0.19 2.20 100 XMSubLongNoVowel 9559 1.71 0.30 2.16 101 MAILING_LIST_MULTI 9159 2.06 2.04 2.07 102 FROM_EXCESS_BASE64 8978 1.99 1.89 2.03 103 RCVD_IN_IADB_OPTIN 8405 1.67 0.95 1.90 104 HTML_IMAGE_RATIO_08 8273 2.03 2.55 1.87 105 XM_B_SpammyTLD 7920 2.28 3.82 1.79 106 BOTNET 7853 4.52 13.08 1.77 107 XM_SPF_SoftFail 7802 2.75 5.81 1.76 108 TR_XM_SB_Phish 7763 1.78 1.85 1.75 109 XMSubPhish11 7697 1.74 1.75 1.74 110 TooManyTo_002 7604 1.55 1.03 1.72 111 DKIM_INVALID 7590 2.20 3.72 1.71 112 INVALID_MSGID 7347 1.31 0.21 1.66 113 XM_B_Phish66 7311 2.36 4.56 1.65 114 T_XMDrugObfuBody_14 6930 1.98 3.29 1.56 115 HELO_NODOT 6777 1.28 0.50 1.53 116 HELO_NO_DOMAIN 6769 1.28 0.49 1.53 117 TVD_RCVD_IP 6599 1.24 0.45 1.49 118 RCVD_IN_MSPIKE_H5 6515 1.20 0.35 1.47 119 TM2_M_VERY_LONG_WORD 6426 2.18 4.47 1.45 120 MSGID_NOFQDN1 6381 1.12 0.12 1.44 121 IN_HORDE_ADDRESS_BOOK 6348 1.11 0.09 1.43 122 TR_Symld_Words 6291 1.51 1.79 1.42 123 SUBJ_ALL_CAPS 6269 1.69 2.55 1.42 124 XM_CamelCaseFrm001 6254 1.56 2.04 1.41 125 TR_XM_SpammyWords5 6192 2.13 4.40 1.40 126 XM_GoogleGroups 6140 1.67 2.56 1.39 127 KHOP_HELO_FCRDNS 6068 2.09 4.34 1.37 128 TO_MALFORMED 6046 1.04 0.03 1.37 129 XM_E_Blogspot 5570 0.98 0.13 1.26 130 XM_OfRef6 5549 1.89 3.88 1.25 131 URI_HEX 5447 1.44 2.08 1.23 132 XM_DK_Undo_01 5405 1.59 2.73 1.22 133 XM_B_Unsub2 5363 1.58 2.73 1.21 134 TR_DCC_Bayes_99 5355 6.35 22.37 1.21 135 UNTRUSTED_Relay 5237 4.57 15.12 1.18 136 TooManyTo_003 5096 1.10 0.92 1.15 137 TR_XM_SpammyRelay 5058 3.94 12.67 1.14 138 XM_ShortIntro_01 4776 0.96 0.61 1.08 139 XMGappySubj_01 4723 0.83 0.11 1.07 140 RCVD_IN_MSPIKE_BL 4650 2.74 8.01 1.05 141 TR_XM_MSPIKECOMBO 4636 2.73 7.98 1.05 142 XM_H_Long_From02 4426 1.05 1.20 1.00 143 XMStockSpam_06 4186 1.16 1.82 0.95 144 XMCapTrack 4143 0.80 0.36 0.94 145 TVD_SPACE_RATIO 3803 0.68 0.11 0.86 146 XMBSHREFv2 3796 0.72 0.29 0.86 147 XM_ProductURIs 3777 1.01 1.50 0.85 148 TooManyTo_004 3635 0.82 0.83 0.82 149 T_FILL_THIS_FORM_SHORT 3626 1.38 3.14 0.82 150 XM_UB50 3568 2.34 7.13 0.81 151 XMLngstWrd_00 3510 1.14 2.24 0.79 152 RCVD_IN_RP_SAFE 3406 0.77 0.75 0.77 153 RELAYCOUNTRY_CA 3398 1.86 5.26 0.77 154 TR_XM_MaxUnsub 3389 2.14 6.45 0.77 155 XMLngstWrd_01 3306 1.10 2.19 0.75 156 TR_XM_SpammyWords2 3300 3.14 10.62 0.75 157 DKIM_ADSP_CUSTOM_MED 3267 1.06 2.08 0.74 158 RCVD_IN_RP_CERTIFIED 3130 0.69 0.63 0.71 159 TR_MetaPhish_Combo_01 3055 0.76 1.00 0.69 160 XMLngstWrd_02 2958 1.02 2.14 0.67 161 HTML_IMAGE_ONLY_20 2895 0.67 0.73 0.65 162 TooManyTo_005 2877 0.68 0.75 0.65 163 RELAYCOUNTRY_GB 2861 0.78 1.19 0.65 164 T_XMDrugObfuBody_00 2854 0.98 2.04 0.64 165 XMBody_95 2753 0.53 0.24 0.62 166 T_TooManySym_03 2737 0.54 0.30 0.62 167 XMLngstWrd_03 2625 0.96 2.11 0.59 168 XM_B_COPY_HTML 2591 0.58 0.57 0.59 169 URI_TRY_3LD 2554 0.69 1.03 0.58 170 XMHTML_After_End 2535 0.76 1.33 0.57 171 XMPhish30 2511 0.70 1.11 0.57 172 RCVD_IN_BL_SPAMCOP_NET 2486 3.10 11.03 0.56 173 HTTPS_HTTP_MISMATCH 2462 0.67 1.02 0.56 174 XMSubMetaSxObfu_03 2442 0.55 0.57 0.55 175 XMLngstWrd_04 2407 0.90 2.03 0.54 176 SpammyFromTLD_01 2397 1.46 4.33 0.54 177 HTML_TAG_BALANCE_BODY 2377 0.75 1.41 0.54 178 T_OBFU_PDF_ATTACH 2295 0.44 0.20 0.52 179 XM_RXBody 2292 0.56 0.67 0.52 180 XMSexyCombo_01 2265 0.76 1.55 0.51 181 XM_H_PHPMailer 2249 0.57 0.78 0.51 182 XM_Body_Dirty_Words_01 2197 0.72 1.44 0.50 183 RCVD_IN_MSPIKE_L3 2180 1.02 2.66 0.49 184 XMBdyGiftCard01 2117 0.54 0.73 0.48 185 TR_XM_SpammyWords3 2113 1.29 3.84 0.48 186 XM_B_COVIDMETA 2099 0.92 2.30 0.47 187 NML_ADSP_CUSTOM_MED 2047 0.82 1.92 0.46 188 XMBrknScrpt_02 2045 0.59 0.98 0.46 189 SHORT_HELO_AND_INLINE_IMAGE 2036 0.37 0.07 0.46 190 FROM_GOV_DKIM_AU 1998 0.43 0.36 0.45 191 TR_MSPIKEBAYES00 1963 0.34 0.02 0.44 192 XM_B_DNDMA 1952 0.58 1.03 0.44 193 RCVD_IN_SORBS_DUL 1924 0.37 0.19 0.43 194 XMSubMetaI_00 1887 0.58 1.06 0.43 195 HTML_TITLE_SUBJ_DIFF 1860 0.80 1.97 0.42 196 UPPERCASE_75_100 1847 0.78 1.93 0.42 197 RCVD_IN_MSPIKE_L4 1845 0.56 0.99 0.42 198 FROM_GOV_SPOOF 1800 0.35 0.15 0.41 199 PDS_OTHER_BAD_TLD 1789 0.81 2.06 0.40 200 MPART_ALT_DIFF_COUNT 1782 0.59 1.19 0.40 ----------------------------------------------------------------------