Email: 518739 Autolearn: 0 AvgScore: 3.23 AvgScanTime: 1.29 sec Spam: 150481 Autolearn: 0 AvgScore: 13.96 AvgScanTime: 1.44 sec Ham: 368258 Autolearn: 0 AvgScore: -1.16 AvgScanTime: 1.23 sec Time Spent Running SA: 185.61 hours Time Spent Processing Spam: 60.04 hours Time Spent Processing Ham: 125.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144625 89.40 96.11 86.66 2 DKIM_SIGNED 134474 74.86 89.36 68.93 3 XM_DK_Pass 130422 73.25 86.67 67.77 4 DKIM_VALID 130070 72.50 86.44 66.81 5 XM_B_Unicode 119642 73.07 79.51 70.44 6 RELAYCOUNTRY_US 119456 76.81 79.38 75.77 7 XMListUnsubscribeExists 109119 52.78 72.51 44.72 8 DCC_CHECK 103504 41.47 68.78 30.30 9 XM_B_SpammyWords 100042 53.23 66.48 47.82 10 DKIM_VALID_AU 98906 55.00 65.73 50.62 11 BAYES_50 66892 54.01 44.45 57.92 12 XM_DK_Undo_02 65639 16.95 43.62 6.05 13 XM_B_Unicode3 63939 44.12 42.49 44.79 14 XM_B_SpammyWords2 57193 23.55 38.01 17.65 15 FVGT_m_MULTI_ODD 54459 26.44 36.19 22.45 16 LOC_TINY_FONT_1 54381 24.79 36.14 20.15 17 TR_XM_DKIM_Undo 52265 13.08 34.73 4.24 18 BAYES_99 49934 12.98 33.18 4.72 19 HTML_FONT_LOW_CONTRAST 47674 26.42 31.68 24.27 20 DCC_CHECK_NEGATIVE 46912 58.49 31.17 69.65 21 MIME_HTML_ONLY 46825 28.05 31.12 26.80 22 T_KAM_HTML_FONT_INVALID 44833 21.05 29.79 17.47 23 DKIM_VALID_EF 44720 26.00 29.72 24.48 24 RCVD_IN_MSPIKE_H2 41060 23.02 27.29 21.28 25 BAYES_999 39118 10.21 26.00 3.75 26 XMSubLong 38311 27.09 25.46 27.76 27 RELAYCOUNTRY_META 36729 9.85 24.41 3.91 28 XM_Body_Dirty_Words 35282 13.97 23.45 10.09 29 TR_DCC_Bayes_99 34600 7.75 22.99 1.52 30 RCVD_IN_MSPIKE_WL 34496 26.42 22.92 27.85 31 T_TM2_M_HEADER_IN_MSG 29584 25.29 19.66 27.60 32 RCVD_IN_MSPIKE_H3 23811 15.91 15.82 15.95 33 XM_Multi_Part_URI 22932 11.93 15.24 10.57 34 MPART_ALT_DIFF 22138 8.33 14.71 5.72 35 XM_B_Unsub 21860 16.05 14.53 16.68 36 XM_B_SpammyWords3 20744 6.80 13.79 3.95 37 LOTS_OF_MONEY 20177 8.80 13.41 6.91 38 UNPARSEABLE_RELAY 20060 9.21 13.33 7.53 39 TR_XM_UnparsRelay 19718 8.07 13.10 6.02 40 BOTNET_IPINHOSTNAME 19568 6.72 13.00 4.16 41 XMSexyCombo_05 19516 6.17 12.97 3.39 42 TR_XM_SpammyRelay 19159 4.92 12.73 1.72 43 UNTRUSTED_Relay 18566 4.40 12.34 1.15 44 XM_UncommonTLD01 17680 5.88 11.75 3.48 45 TR_XM_SpammyWords4 17609 6.57 11.70 4.47 46 RCVD_IN_BL_SPAMCOP_NET 17541 3.81 11.66 0.60 47 TR_XM_SpammyWords2 17522 3.90 11.64 0.74 48 FSL_BULK_SIG 16184 5.31 10.75 3.09 49 BOTNET 15169 4.00 10.08 1.51 50 XM_Evil_Numbers_Gen 12613 7.58 8.38 7.25 51 RCVD_IN_MSPIKE_BL 12533 3.28 8.33 1.22 52 TR_XM_MSPIKECOMBO 12489 3.27 8.30 1.21 53 XM_B_SpammyTLD 11646 3.65 7.74 1.98 54 MIME_HTML_MOSTLY 11348 3.68 7.54 2.10 55 XM_SendGrid 11063 5.84 7.35 5.22 56 TM2_M_VERY_LONG_WORD 10783 3.68 7.17 2.26 57 BAYES_80 10582 5.11 7.03 4.32 58 URI_NOVOWEL 10292 3.73 6.84 2.46 59 BAYES_60 10262 8.33 6.82 8.95 60 MIME_HTML_ONLY_MULTI 10039 4.75 6.67 3.97 61 XMSubMetaSx_00 9989 4.43 6.64 3.52 62 HTML_MIME_NO_HTML_TAG 9883 4.33 6.57 3.41 63 XM_UB50 9854 2.41 6.55 0.72 64 RCVD_IN_MSPIKE_H4 9853 9.35 6.55 10.49 65 RELAYCOUNTRY_CA 9740 2.64 6.47 1.08 66 HTML_IMAGE_RATIO_02 9486 5.64 6.30 5.37 67 TR_XM_MaxUnsub 9442 2.37 6.27 0.78 68 XM_B_Phish_Phrases 9343 3.97 6.21 3.06 69 TR_XM_PhishingBody 9248 3.79 6.15 2.83 70 LotsOfNums_01 9238 8.06 6.14 8.84 71 SpammyFromTLD_01 8955 2.24 5.95 0.72 72 TR_XM_SPAMCOP 8863 1.87 5.89 0.23 73 XM_H_Long_From01 8787 5.31 5.84 5.09 74 XM_DIRTYINTL 8190 1.81 5.44 0.33 75 TR_XM_SpammyWords3 8106 1.97 5.39 0.57 76 XM_GoogleGroups 7225 3.05 4.80 2.33 77 RELAYCOUNTRY_FR 7171 1.53 4.77 0.21 78 TR_XM_DK_SendGrid 7119 3.74 4.73 3.34 79 XMLngstWrd_00 7029 2.47 4.67 1.56 80 XMLngstWrd_01 6966 2.42 4.63 1.51 81 HTML_IMAGE_RATIO_06 6932 3.44 4.61 2.96 82 XMLngstWrd_02 6832 2.34 4.54 1.44 83 XM_B_Investor 6787 2.32 4.51 1.43 84 TooManyTo_001 6479 11.89 4.31 14.99 85 HTML_IMAGE_RATIO_04 6466 4.64 4.30 4.79 86 XMLngstWrd_03 6386 2.20 4.24 1.36 87 RCVD_IN_MSPIKE_L5 6274 1.23 4.17 0.04 88 HTML_TITLE_SUBJ_DIFF 6272 2.05 4.17 1.18 89 XMLngstWrd_04 6262 2.13 4.16 1.29 90 URIBL_DBL_SPAM 6207 1.21 4.12 0.01 91 UPPERCASE_75_100 6171 2.03 4.10 1.18 92 BAYES_95 6152 3.10 4.09 2.69 93 PDS_OTHER_BAD_TLD 6056 1.33 4.02 0.24 94 SpammyFromTLD_02 5713 1.35 3.80 0.36 95 XMStrtUSub 5647 8.49 3.75 10.43 96 XM_SPF_SoftFail 5636 2.83 3.75 2.46 97 T_XMDrugObfuBody_14 5420 2.29 3.60 1.75 98 RCVD_IN_MSPIKE_L3 5372 1.55 3.57 0.72 99 T_XMDrugObfuBody_08 5240 1.91 3.48 1.26 100 T_REMOTE_IMAGE 5203 3.35 3.46 3.31 101 XM_B_Phish66 5150 2.11 3.42 1.57 102 XM_OfRef6 5122 1.70 3.40 1.00 103 XMNumbers 4862 3.28 3.23 3.30 104 MIME_QP_LONG_LINE 4772 5.14 3.17 5.94 105 HTML_IMAGE_RATIO_08 4756 2.40 3.16 2.08 106 RCVD_IN_VALIDITY_SAFE 4619 3.69 3.07 3.94 107 TR_XM_SpammyWords5 4576 1.85 3.04 1.36 108 XMDiploma_00 4570 6.71 3.04 8.21 109 DKIM_INVALID 4404 2.36 2.93 2.12 110 XM_DK_Undo_01 4148 1.76 2.76 1.36 111 TM2_M_URI_OPT_OUT 4053 2.76 2.69 2.78 112 RCVD_IN_VALIDITY_CERTIFIED 3952 3.24 2.63 3.48 113 XM_B_SpammyWords4 3905 1.20 2.60 0.63 114 T_FILL_THIS_FORM_SHORT 3898 1.33 2.59 0.81 115 KHOP_HELO_FCRDNS 3881 2.03 2.58 1.81 116 URI_PHP_REDIR 3860 0.75 2.57 0.00 117 JH_SPAMMY_HEADERS 3790 0.74 2.52 0.01 118 RCVD_IN_IADB_LISTED 3709 4.32 2.46 5.07 119 XM_CamelCaseFrm001 3634 1.87 2.41 1.64 120 XM_B_COVIDMETA 3490 1.07 2.32 0.57 121 T_TooManySym_01 3479 4.72 2.31 5.70 122 XM_B_Unsub2 3462 1.65 2.30 1.38 123 RCVD_IN_VALIDITY_RPBL 3459 0.68 2.30 0.02 124 URI_NO_WWW_BIZ_CGI 3401 0.67 2.26 0.02 125 TR_XM_SB_Phish 3290 2.14 2.19 2.13 126 RCVD_IN_IADB_SPF 3141 3.81 2.09 4.52 127 BOTNET_NORDNS 3108 0.61 2.07 0.02 128 XM_UB99 3085 0.60 2.05 0.00 129 URI_LONG_REPEAT 3073 0.60 2.04 0.00 130 XMBody_17 2947 0.87 1.96 0.42 131 MAILING_LIST_MULTI 2934 2.51 1.95 2.73 132 XMSubPhish11 2918 2.06 1.94 2.11 133 RCVD_IN_IADB_DK 2901 3.41 1.93 4.02 134 TR_XM_MSPIKECOMBO2 2898 0.65 1.93 0.13 135 HTTPS_HTTP_MISMATCH 2872 1.08 1.91 0.74 136 BAYES_40 2860 3.78 1.90 4.55 137 XMStockSpam_06 2856 1.16 1.90 0.86 138 T_XMDrugObfuBody_00 2830 1.06 1.88 0.73 139 USER_IN_DEF_DKIM_WL 2809 8.21 1.87 10.80 140 RCVD_IN_IADB_SENDERID 2761 3.46 1.83 4.13 141 URI_HEX 2638 1.32 1.75 1.14 142 T_XMHurry_00 2623 0.85 1.74 0.49 143 XM_B_SEO 2560 0.58 1.70 0.13 144 RCVD_IN_PSBL 2525 0.50 1.68 0.02 145 SUBJ_ALL_CAPS 2519 1.52 1.67 1.46 146 XM_UB999 2507 0.49 1.67 0.00 147 ALL_TRUSTED 2438 15.85 1.62 21.66 148 TR_XM_SEO4 2431 0.52 1.62 0.08 149 TR_XM_PHPDW 2380 0.73 1.58 0.38 150 XMBdyGiftCard01 2374 0.96 1.58 0.70 151 TR_XM_PHPForged 2352 0.69 1.56 0.33 152 RELAYCOUNTRY_AU 2337 0.69 1.55 0.33 153 TR_XM_NoHeaderRelay 2314 0.56 1.54 0.15 154 XMSexyCombo_01 2301 0.66 1.53 0.31 155 TR_XM_FormFill2 2287 0.68 1.52 0.34 156 TR_XM_BayesRelay 2286 0.44 1.52 0.00 157 FROM_EXCESS_BASE64 2284 1.99 1.52 2.18 158 XM_H_PHPOS 2268 0.66 1.51 0.32 159 TR_Symld_Words 2246 1.43 1.49 1.40 160 RCVD_IN_IADB_VOUCHED 2201 2.55 1.46 2.99 161 TR_XM_COVIDMETA4 2121 0.53 1.41 0.17 162 RELAYCOUNTRY_RU 2112 0.42 1.40 0.02 163 XMHTML_After_End 2053 0.95 1.36 0.78 164 XM_H_Long_From02 1986 1.21 1.32 1.16 165 HTML_FONT_TINY_NORDNS 1955 0.43 1.30 0.07 166 XM_URI_RBL 1954 0.45 1.30 0.11 167 TR_XM_FormFill 1942 0.38 1.29 0.01 168 XMGenDplmaNmb 1934 5.81 1.29 7.66 169 XM_H_Undi_Recip 1920 0.51 1.28 0.20 170 XM_UB60 1864 0.42 1.24 0.08 171 TR_XM_COVIDMETA1 1852 0.48 1.23 0.18 172 HTML_FONT_FACE_BAD 1805 1.03 1.20 0.96 173 BAYES_20 1805 2.92 1.20 3.62 174 MPART_ALT_DIFF_COUNT 1793 0.75 1.19 0.56 175 XMSubMetaSxObfu_03 1787 0.59 1.19 0.35 176 URIBL_BLACK 1775 0.37 1.18 0.04 177 RELAYCOUNTRY_DE 1761 0.52 1.17 0.26 178 TR_LOTS_OF_MONEY3 1758 0.49 1.17 0.21 179 TR_XM_MaxSPIKE 1736 0.38 1.15 0.07 180 HTML_TAG_BALANCE_BODY 1721 0.78 1.14 0.63 181 REMOVE_BEFORE_LINK 1679 0.47 1.12 0.20 182 DIET_1 1655 0.54 1.10 0.31 183 XMMoneyMeta_00 1618 0.70 1.08 0.55 184 TR_BOTNET_NEGATE 1605 0.54 1.07 0.32 185 HTML_IMAGE_ONLY_08 1593 0.38 1.06 0.11 186 XMPhish30 1591 0.68 1.06 0.52 187 RELAYCOUNTRY_GB 1562 0.83 1.04 0.74 188 HTML_TAG_BALANCE_CENTER 1549 0.37 1.03 0.10 189 XM_ProductURIs 1549 0.74 1.03 0.62 190 XMBrknScrpt_02 1536 0.78 1.02 0.68 191 URI_TRY_3LD 1464 0.64 0.97 0.51 192 BODY_URI_ONLY 1437 0.32 0.95 0.06 193 RELAYCOUNTRY_IN 1420 0.33 0.94 0.08 194 XMSlimDrugH 1383 0.47 0.92 0.29 195 XM_B_DNDMA 1371 0.56 0.91 0.42 196 DKIM_ADSP_CUSTOM_MED 1356 0.84 0.90 0.82 197 MIXED_CENTER_CASE 1340 0.26 0.89 0.00 198 MIXED_HREF_CASE 1332 0.26 0.89 0.00 199 CONTENT_AFTER_HTML 1323 0.30 0.88 0.06 200 XMSubNoVowel 1308 1.00 0.87 1.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 319117 89.40 96.11 86.66 2 RELAYCOUNTRY_US 279012 76.81 79.38 75.77 3 XM_B_Unicode 259394 73.07 79.51 70.44 4 DCC_CHECK_NEGATIVE 256500 58.49 31.17 69.65 5 DKIM_SIGNED 253852 74.86 89.36 68.93 6 XM_DK_Pass 249555 73.25 86.67 67.77 7 DKIM_VALID 246031 72.50 86.44 66.81 8 BAYES_50 213291 54.01 44.45 57.92 9 DKIM_VALID_AU 186402 55.00 65.73 50.62 10 XM_B_SpammyWords 176104 53.23 66.48 47.82 11 XM_B_Unicode3 164950 44.12 42.49 44.79 12 XMListUnsubscribeExists 164697 52.78 72.51 44.72 13 DCC_CHECK 111592 41.47 68.78 30.30 14 RCVD_IN_MSPIKE_WL 102566 26.42 22.92 27.85 15 XMSubLong 102227 27.09 25.46 27.76 16 T_TM2_M_HEADER_IN_MSG 101626 25.29 19.66 27.60 17 MIME_HTML_ONLY 98696 28.05 31.12 26.80 18 DKIM_VALID_EF 90156 26.00 29.72 24.48 19 HTML_FONT_LOW_CONTRAST 89366 26.42 31.68 24.27 20 FVGT_m_MULTI_ODD 82679 26.44 36.19 22.45 21 ALL_TRUSTED 79766 15.85 1.62 21.66 22 RCVD_IN_MSPIKE_H2 78378 23.02 27.29 21.28 23 LOC_TINY_FONT_1 74202 24.79 36.14 20.15 24 XM_B_SpammyWords2 64987 23.55 38.01 17.65 25 T_KAM_HTML_FONT_INVALID 64345 21.05 29.79 17.47 26 XM_B_Unsub 61410 16.05 14.53 16.68 27 RCVD_IN_MSPIKE_H3 58737 15.91 15.82 15.95 28 TooManyTo_001 55193 11.89 4.31 14.99 29 BAYES_00 40266 7.98 0.76 10.93 30 USER_IN_DEF_DKIM_WL 39764 8.21 1.87 10.80 31 XM_Multi_Part_URI 38936 11.93 15.24 10.57 32 RCVD_IN_MSPIKE_H4 38624 9.35 6.55 10.49 33 XMStrtUSub 38399 8.49 3.75 10.43 34 XM_Body_Dirty_Words 37175 13.97 23.45 10.09 35 BAYES_60 32942 8.33 6.82 8.95 36 LotsOfNums_01 32550 8.06 6.14 8.84 37 XMDiploma_00 30234 6.71 3.04 8.21 38 XMGenDplmaNmb 28222 5.81 1.29 7.66 39 UNPARSEABLE_RELAY 27740 9.21 13.33 7.53 40 XM_Evil_Numbers_Gen 26687 7.58 8.38 7.25 41 XM_DKIMWhitelistDomains 26519 5.13 0.07 7.20 42 LOTS_OF_MONEY 25451 8.80 13.41 6.91 43 IN_ZIMBRA_NJ_WHITELIST 24240 4.70 0.11 6.58 44 TR_XM_DK_Bayes 24107 4.80 0.52 6.55 45 TR_XM_DK_Bayes1 23616 4.70 0.52 6.41 46 XM_DK_Undo_02 22269 16.95 43.62 6.05 47 TR_XM_UnparsRelay 22160 8.07 13.10 6.02 48 MIME_QP_LONG_LINE 21882 5.14 3.17 5.94 49 MPART_ALT_DIFF 21077 8.33 14.71 5.72 50 T_TooManySym_01 20987 4.72 2.31 5.70 51 HTML_IMAGE_RATIO_02 19758 5.64 6.30 5.37 52 XM_SendGrid 19241 5.84 7.35 5.22 53 TR_XM_DK_Bayes2 18958 3.79 0.46 5.15 54 XM_H_Long_From01 18753 5.31 5.84 5.09 55 RCVD_IN_IADB_LISTED 18687 4.32 2.46 5.07 56 XM_PDF 17843 3.66 0.75 4.85 57 HTML_IMAGE_RATIO_04 17627 4.64 4.30 4.79 58 BAYES_99 17398 12.98 33.18 4.72 59 BAYES_40 16751 3.78 1.90 4.55 60 RCVD_IN_IADB_SPF 16639 3.81 2.09 4.52 61 TR_XM_SpammyWords4 16458 6.57 11.70 4.47 62 BAYES_80 15916 5.11 7.03 4.32 63 TR_XM_DKIM_Undo 15607 13.08 34.73 4.24 64 BOTNET_IPINHOSTNAME 15314 6.72 13.00 4.16 65 RCVD_IN_IADB_SENDERID 15212 3.46 1.83 4.13 66 RCVD_IN_IADB_DK 14802 3.41 1.93 4.02 67 MIME_HTML_ONLY_MULTI 14605 4.75 6.67 3.97 68 XM_B_SpammyWords3 14533 6.80 13.79 3.95 69 RCVD_IN_VALIDITY_SAFE 14500 3.69 3.07 3.94 70 RELAYCOUNTRY_META 14386 9.85 24.41 3.91 71 BAYES_999 13826 10.21 26.00 3.75 72 BAYES_20 13326 2.92 1.20 3.62 73 XMSubMetaSx_00 12968 4.43 6.64 3.52 74 RCVD_IN_VALIDITY_CERTIFIED 12833 3.24 2.63 3.48 75 XM_UncommonTLD01 12802 5.88 11.75 3.48 76 HTML_MIME_NO_HTML_TAG 12556 4.33 6.57 3.41 77 XMSexyCombo_05 12469 6.17 12.97 3.39 78 TR_XM_DK_SendGrid 12283 3.74 4.73 3.34 79 T_REMOTE_IMAGE 12187 3.35 3.46 3.31 80 XMNumbers 12145 3.28 3.23 3.30 81 FSL_BULK_SIG 11374 5.31 10.75 3.09 82 T_TooManySym_02 11303 2.37 0.66 3.07 83 XM_B_Phish_Phrases 11265 3.97 6.21 3.06 84 RCVD_IN_IADB_VOUCHED 11008 2.55 1.46 2.99 85 HTML_IMAGE_RATIO_06 10906 3.44 4.61 2.96 86 TR_XM_PhishingBody 10411 3.79 6.15 2.83 87 TM2_M_URI_OPT_OUT 10249 2.76 2.69 2.78 88 MAILING_LIST_MULTI 10071 2.51 1.95 2.73 89 BAYES_95 9918 3.10 4.09 2.69 90 XM_H_Trusted_IP 9910 1.91 0.00 2.69 91 XM_SPF_SoftFail 9066 2.83 3.75 2.46 92 URI_NOVOWEL 9064 3.73 6.84 2.46 93 ANY_BOUNCE_MESSAGE 8994 1.99 0.87 2.44 94 BOUNCE_MESSAGE 8991 1.98 0.87 2.44 95 XM_GoogleGroups 8572 3.05 4.80 2.33 96 BAYES_05 8442 1.79 0.55 2.29 97 TM2_M_VERY_LONG_WORD 8313 3.68 7.17 2.26 98 FROM_EXCESS_BASE64 8013 1.99 1.52 2.18 99 TR_XM_SB_Phish 7831 2.14 2.19 2.13 100 DKIM_INVALID 7821 2.36 2.93 2.12 101 TooManyTo_002 7796 1.72 0.73 2.12 102 XMSubPhish11 7765 2.06 1.94 2.11 103 MIME_HTML_MOSTLY 7739 3.68 7.54 2.10 104 HTML_IMAGE_RATIO_08 7674 2.40 3.16 2.08 105 TVD_RCVD_IP 7310 1.49 0.29 1.99 106 XM_B_SpammyTLD 7299 3.65 7.74 1.98 107 RCVD_IN_IADB_OPTIN 7260 1.64 0.82 1.97 108 KHOP_HELO_FCRDNS 6671 2.03 2.58 1.81 109 INVALID_MSGID 6581 1.31 0.14 1.79 110 T_XMDrugObfuBody_14 6435 2.29 3.60 1.75 111 TR_XM_SpammyRelay 6346 4.92 12.73 1.72 112 HELO_NODOT 6139 1.32 0.46 1.67 113 HELO_NO_DOMAIN 6137 1.32 0.46 1.67 114 IN_HORDE_ADDRESS_BOOK 6063 1.22 0.16 1.65 115 XM_CamelCaseFrm001 6046 1.87 2.41 1.64 116 TO_MALFORMED 5785 1.13 0.04 1.57 117 XM_B_Phish66 5782 2.11 3.42 1.57 118 XMLngstWrd_00 5759 2.47 4.67 1.56 119 TR_DCC_Bayes_99 5608 7.75 22.99 1.52 120 XMLngstWrd_01 5569 2.42 4.63 1.51 121 BOTNET 5560 4.00 10.08 1.51 122 SUBJ_ALL_CAPS 5364 1.52 1.67 1.46 123 XMLngstWrd_02 5306 2.34 4.54 1.44 124 XM_B_Investor 5256 2.32 4.51 1.43 125 RCVD_IN_MSPIKE_H5 5205 1.16 0.55 1.41 126 TR_Symld_Words 5148 1.43 1.49 1.40 127 TooManyTo_003 5141 1.17 0.61 1.40 128 XM_B_Unsub2 5096 1.65 2.30 1.38 129 T_HTML_ATTACH 5043 0.99 0.07 1.37 130 XMLngstWrd_03 5023 2.20 4.24 1.36 131 TR_XM_SpammyWords5 5017 1.85 3.04 1.36 132 XM_DK_Undo_01 5007 1.76 2.76 1.36 133 XMLngstWrd_04 4764 2.13 4.16 1.29 134 SHORTENED_URL_HREF 4717 0.93 0.07 1.28 135 T_XMDrugObfuBody_08 4645 1.91 3.48 1.26 136 RCVD_IN_MSPIKE_BL 4478 3.28 8.33 1.22 137 XMGappySubj_01 4464 0.90 0.13 1.21 138 TR_XM_MSPIKECOMBO 4462 3.27 8.30 1.21 139 HTML_TITLE_SUBJ_DIFF 4341 2.05 4.17 1.18 140 UPPERCASE_75_100 4339 2.03 4.10 1.18 141 XM_H_Long_From02 4278 1.21 1.32 1.16 142 UNTRUSTED_Relay 4243 4.40 12.34 1.15 143 URI_HEX 4187 1.32 1.75 1.14 144 XMCapTrack 4070 0.92 0.48 1.11 145 RELAYCOUNTRY_CA 3977 2.64 6.47 1.08 146 XMSubNoVowel 3866 1.00 0.87 1.05 147 TooManyTo_004 3715 0.87 0.53 1.01 148 XM_OfRef6 3694 1.70 3.40 1.00 149 XMBSHREFv2 3662 0.79 0.28 0.99 150 TVD_SPACE_RATIO 3601 0.81 0.41 0.98 151 HTML_FONT_FACE_BAD 3542 1.03 1.20 0.96 152 XMStockSpam_06 3177 1.16 1.90 0.86 153 DKIM_ADSP_CUSTOM_MED 3021 0.84 0.90 0.82 154 T_FILL_THIS_FORM_SHORT 3001 1.33 2.59 0.81 155 TooManyTo_005 2965 0.70 0.44 0.81 156 TR_MetaPhish_Combo_01 2943 0.75 0.63 0.80 157 RCVD_IN_RP_SAFE 2895 0.73 0.59 0.79 158 T_TooManySym_03 2879 0.65 0.34 0.78 159 TR_XM_MaxUnsub 2864 2.37 6.27 0.78 160 XMHTML_After_End 2861 0.95 1.36 0.78 161 RELAYCOUNTRY_GB 2730 0.83 1.04 0.74 162 XMBody_95 2726 0.57 0.14 0.74 163 TR_XM_SpammyWords2 2720 3.90 11.64 0.74 164 HTTPS_HTTP_MISMATCH 2713 1.08 1.91 0.74 165 HTML_IMAGE_ONLY_20 2691 0.63 0.40 0.73 166 T_XMDrugObfuBody_00 2672 1.06 1.88 0.73 167 XM_UB50 2661 2.41 6.55 0.72 168 RCVD_IN_MSPIKE_L3 2654 1.55 3.57 0.72 169 SpammyFromTLD_01 2640 2.24 5.95 0.72 170 RCVD_IN_RP_CERTIFIED 2596 0.64 0.48 0.70 171 XMBdyGiftCard01 2584 0.96 1.58 0.70 172 XMBrknScrpt_02 2491 0.78 1.02 0.68 173 XM_shorewaves_Whitelist 2451 0.47 0.00 0.67 174 XMNoVowels 2377 0.57 0.38 0.65 175 HTML_TAG_BALANCE_BODY 2336 0.78 1.14 0.63 176 XM_B_SpammyWords4 2332 1.20 2.60 0.63 177 T_OBFU_PDF_ATTACH 2311 0.47 0.10 0.63 178 XM_ProductURIs 2300 0.74 1.03 0.62 179 MSGID_NOFQDN1 2278 0.44 0.01 0.62 180 XM_H_PHPMailer 2247 0.63 0.68 0.61 181 RCVD_IN_BL_SPAMCOP_NET 2204 3.81 11.66 0.60 182 TR_XM_SpammyWords3 2100 1.97 5.39 0.57 183 XM_B_COVIDMETA 2081 1.07 2.32 0.57 184 MPART_ALT_DIFF_COUNT 2075 0.75 1.19 0.56 185 XM_ShortIntro_01 2064 0.49 0.33 0.56 186 NML_ADSP_CUSTOM_MED 2059 0.62 0.77 0.56 187 XM_B_COPY_HTML 2040 0.62 0.78 0.55 188 SHORT_HELO_AND_INLINE_IMAGE 2026 0.41 0.08 0.55 189 XMMoneyMeta_00 2019 0.70 1.08 0.55 190 XMPhish30 1918 0.68 1.06 0.52 191 TR_MSPIKEBAYES00 1906 0.37 0.02 0.52 192 FROM_GOV_DKIM_AU 1878 0.39 0.11 0.51 193 URI_TRY_3LD 1872 0.64 0.97 0.51 194 T_XMHurry_00 1797 0.85 1.74 0.49 195 SHORT_URI_2 1784 0.38 0.13 0.48 196 XM_S_SpammyWords 1783 0.50 0.53 0.48 197 TR_XM_Spammywords 1783 0.50 0.53 0.48 198 PLING_QUERY 1741 0.57 0.82 0.47 199 FROM_GOV_SPOOF 1692 0.35 0.07 0.46 200 RCVD_IN_MSPIKE_L4 1677 0.49 0.56 0.46 ----------------------------------------------------------------------