Email: 629680 Autolearn: 0 AvgScore: 0.94 AvgScanTime: 1.35 sec Spam: 167105 Autolearn: 0 AvgScore: 13.84 AvgScanTime: 1.58 sec Ham: 462575 Autolearn: 0 AvgScore: -3.72 AvgScanTime: 1.27 sec Time Spent Running SA: 236.10 hours Time Spent Processing Spam: 73.31 hours Time Spent Processing Ham: 162.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160739 91.19 96.19 89.39 2 DKIM_SIGNED 147762 60.88 88.42 50.92 3 XM_DK_Pass 144272 59.27 86.34 49.49 4 DKIM_VALID 143184 58.56 85.69 48.76 5 RELAYCOUNTRY_US 137507 77.91 82.29 76.33 6 XM_B_Unicode 130772 76.83 78.26 76.31 7 DCC_CHECK 122049 35.40 73.04 21.81 8 XMListUnsubscribeExists 116040 42.66 69.44 32.99 9 DKIM_VALID_AU 108739 45.04 65.07 37.80 10 XM_B_SpammyWords 106003 46.89 63.43 40.92 11 RCVD_IN_MSPIKE_H2 79935 32.03 47.84 26.32 12 BAYES_50 72201 48.03 43.21 49.77 13 XM_B_Unicode3 71607 49.58 42.85 52.01 14 XM_DK_Undo_02 68954 14.40 41.26 4.69 15 FVGT_m_MULTI_ODD 60177 27.65 36.01 24.63 16 MIME_HTML_ONLY 60129 29.02 35.98 26.51 17 LOC_TINY_FONT_1 58561 20.20 35.04 14.84 18 XM_B_SpammyWords2 58423 17.78 34.96 11.57 19 BAYES_99 54335 12.32 32.52 5.03 20 HTML_FONT_LOW_CONTRAST 54039 22.70 32.34 19.22 21 TR_XM_DKIM_Undo 52407 10.67 31.36 3.19 22 DKIM_VALID_EF 52352 22.86 31.33 19.80 23 T_KAM_HTML_FONT_INVALID 46306 17.56 27.71 13.90 24 DCC_CHECK_NEGATIVE 45019 64.57 26.94 78.16 25 BAYES_999 42524 9.92 25.45 4.31 26 XMSubLong 37904 24.90 22.68 25.70 27 TR_DCC_Bayes_99 37782 6.72 22.61 0.97 28 XM_Body_Dirty_Words 36541 11.65 21.87 7.96 29 RELAYCOUNTRY_META 35031 7.53 20.96 2.68 30 T_TM2_M_HEADER_IN_MSG 33836 26.27 20.25 28.45 31 XM_Multi_Part_URI 27753 10.54 16.61 8.35 32 RCVD_IN_MSPIKE_WL 25309 12.33 15.15 11.31 33 XM_B_Unsub 25162 13.46 15.06 12.89 34 TR_XM_BayesUnsub 24539 12.28 14.68 11.41 35 UNPARSEABLE_RELAY 23319 7.59 13.95 5.30 36 TR_XM_UnparsRelay 23014 6.71 13.77 4.15 37 LOTS_OF_MONEY 22925 12.32 13.72 11.81 38 RCVD_IN_MSPIKE_H3 21158 9.13 12.66 7.85 39 BOTNET_IPINHOSTNAME 19898 5.75 11.91 3.52 40 MPART_ALT_DIFF 19009 10.12 11.38 9.67 41 TR_XM_SpammyWords4 19008 10.08 11.37 9.61 42 FSL_BULK_SIG 18876 4.41 11.30 1.92 43 TR_XM_SpammyRelay 18755 3.85 11.22 1.18 44 XM_B_SpammyWords3 18530 4.86 11.09 2.62 45 XMSexyCombo_05 18101 4.55 10.83 2.28 46 TR_XM_SpammyWords2 17432 3.14 10.43 0.50 47 RCVD_IN_BL_SPAMCOP_NET 17352 3.07 10.38 0.43 48 BOTNET 15857 3.44 9.49 1.26 49 UNTRUSTED_Relay 14644 3.02 8.76 0.95 50 HTML_MIME_NO_HTML_TAG 14404 3.55 8.62 1.72 51 TM2_M_VERY_LONG_WORD 14399 2.98 8.62 0.94 52 MIME_HTML_ONLY_MULTI 14329 8.11 8.57 7.94 53 XM_Evil_Numbers_Gen 14198 7.86 8.50 7.62 54 BAYES_80 13777 4.60 8.24 3.28 55 XM_UncommonTLD01 12339 3.92 7.38 2.67 56 TR_XM_SPAMCOP 12309 2.10 7.37 0.20 57 RELAYCOUNTRY_CA 12185 2.44 7.29 0.68 58 LotsOfNums_01 12144 6.58 7.27 6.33 59 BAYES_60 11978 7.04 7.17 7.00 60 HTML_IMAGE_RATIO_02 11262 4.35 6.74 3.49 61 XM_GoogleGroups 10868 2.47 6.50 1.01 62 XM_SendGrid 10673 4.10 6.39 3.27 63 XMLngstWrd_00 10584 2.07 6.33 0.54 64 XMLngstWrd_01 10521 2.00 6.30 0.44 65 XMLngstWrd_02 10309 1.87 6.17 0.32 66 XMLngstWrd_03 10227 1.79 6.12 0.22 67 TR_XM_PhishingBody 10226 3.31 6.12 2.29 68 XMLngstWrd_04 10117 1.73 6.05 0.17 69 XM_H_Long_From01 10084 4.32 6.03 3.70 70 XMSubMetaSx_00 10033 3.40 6.00 2.45 71 UPPERCASE_75_100 10027 1.61 6.00 0.03 72 HTML_TITLE_SUBJ_DIFF 10024 1.61 6.00 0.02 73 XM_B_Phish_Phrases 8841 3.00 5.29 2.18 74 BAYES_95 8353 2.76 5.00 1.94 75 HTML_IMAGE_RATIO_04 8114 12.43 4.86 15.16 76 RCVD_IN_MSPIKE_BL 7758 1.87 4.64 0.87 77 XM_B_Investor 7732 2.06 4.63 1.13 78 TR_XM_MSPIKECOMBO 7542 1.84 4.51 0.87 79 TooManyTo_001 7532 10.76 4.51 13.02 80 XM_SPF_SoftFail 6835 7.41 4.09 8.61 81 TR_XM_DK_SendGrid 6716 2.63 4.02 2.13 82 XM_B_SpammyTLD 6687 2.21 4.00 1.57 83 XM_DIRTYINTL 6679 1.23 4.00 0.23 84 HTML_IMAGE_RATIO_06 6537 8.91 3.91 10.71 85 T_XMDrugObfuBody_14 6441 1.98 3.85 1.31 86 XMStrtUSub 6325 8.60 3.79 10.34 87 T_REMOTE_IMAGE 6312 3.05 3.78 2.79 88 TR_XM_SpammyWords5 6270 1.68 3.75 0.94 89 XMNumbers 5969 3.38 3.57 3.32 90 XM_UB50 5892 1.38 3.53 0.60 91 MIME_QP_LONG_LINE 5886 3.81 3.52 3.91 92 XM_OfRef6 5837 1.44 3.49 0.70 93 XMDiploma_00 5725 6.72 3.43 7.92 94 MIME_HTML_MOSTLY 5548 2.18 3.32 1.77 95 XM_B_Phish66 5472 1.90 3.27 1.40 96 SpammyFromTLD_01 5368 1.29 3.21 0.59 97 RCVD_IN_VALIDITY_SAFE 5289 3.34 3.17 3.40 98 XM_CamelCaseFrm001 5118 1.79 3.06 1.33 99 T_XMDrugObfuBody_08 5044 1.62 3.02 1.11 100 XM_B_Unsub2 4897 1.63 2.93 1.16 101 DKIM_INVALID 4578 2.32 2.74 2.16 102 TM2_M_URI_OPT_OUT 4550 2.06 2.72 1.82 103 RCVD_IN_IADB_LISTED 4455 3.53 2.67 3.84 104 RCVD_IN_VALIDITY_CERTIFIED 4405 2.93 2.64 3.04 105 TR_XM_SpammyWords3 4208 0.91 2.52 0.33 106 KHOP_HELO_FCRDNS 4184 4.09 2.50 4.66 107 URI_NOVOWEL 4172 2.06 2.50 1.90 108 T_TooManySym_01 4152 4.29 2.48 4.94 109 T_FILL_THIS_FORM_SHORT 4106 1.09 2.46 0.59 110 RCVD_IN_VALIDITY_RPBL 4060 0.66 2.43 0.01 111 XM_UB99 4026 0.64 2.41 0.00 112 RCVD_IN_MSPIKE_H4 4013 2.96 2.40 3.17 113 XM_DK_Undo_01 3923 1.55 2.35 1.26 114 SpammyFromTLD_02 3910 0.88 2.34 0.35 115 RCVD_IN_IADB_SPF 3772 3.12 2.26 3.43 116 XMBody_17 3730 0.80 2.23 0.28 117 URIBL_DBL_SPAM 3712 0.60 2.22 0.01 118 XMSexyCombo_01 3694 0.91 2.21 0.44 119 TR_LOTS_OF_MONEY3 3603 0.78 2.16 0.29 120 T_XMDrugObfuBody_00 3597 0.95 2.15 0.51 121 HTML_IMAGE_RATIO_08 3553 2.48 2.13 2.61 122 RCVD_IN_IADB_DK 3510 2.75 2.10 2.98 123 RCVD_IN_IADB_SENDERID 3481 2.82 2.08 3.08 124 SUBJ_ALL_CAPS 3452 1.45 2.07 1.23 125 XM_B_SpammyWords4 3350 0.83 2.00 0.40 126 BOTNET_NORDNS 3277 0.53 1.96 0.01 127 ALL_TRUSTED 3253 16.47 1.95 21.71 128 XM_B_COVIDMETA 3189 0.87 1.91 0.49 129 XMHTML_After_End 3173 0.89 1.90 0.53 130 URI_HEX 3116 1.15 1.86 0.89 131 RCVD_IN_MSPIKE_L4 3107 0.77 1.86 0.38 132 XM_UB999 3092 0.49 1.85 0.00 133 MAILING_LIST_MULTI 3065 1.89 1.83 1.90 134 PDS_OTHER_BAD_TLD 3018 0.55 1.81 0.09 135 TR_XM_SB_Phish 2963 1.54 1.77 1.46 136 T_XMHurry_00 2888 0.77 1.73 0.42 137 USER_IN_DEF_DKIM_WL 2856 6.61 1.71 8.38 138 FROM_EXCESS_BASE64 2836 1.88 1.70 1.94 139 TR_XM_MSPIKECOMBO2 2822 0.58 1.69 0.18 140 XMSubPhish11 2789 1.50 1.67 1.44 141 RELAYCOUNTRY_RU 2603 0.43 1.56 0.02 142 RCVD_IN_MSPIKE_L3 2576 0.74 1.54 0.45 143 XMStockSpam_06 2563 0.79 1.53 0.53 144 XMBdyGiftCard01 2549 0.79 1.53 0.53 145 REMOVE_BEFORE_LINK 2459 0.57 1.47 0.25 146 HK_RANDOM_REPLYTO 2418 0.44 1.45 0.08 147 BAYES_40 2412 3.86 1.44 4.74 148 XMGenDplmaNmb 2403 0.84 1.44 0.63 149 RCVD_IN_IADB_VOUCHED 2402 2.13 1.44 2.38 150 XMSubNoVowel 2396 4.58 1.43 5.72 151 TR_XM_COVIDMETA4 2369 0.54 1.42 0.22 152 XM_H_Long_From02 2367 0.86 1.42 0.66 153 TR_XM_NoHeaderRelay 2356 0.45 1.41 0.10 154 TR_XM_PHPDW 2311 0.57 1.38 0.28 155 TR_XM_PHPForged 2256 0.55 1.35 0.26 156 TR_XM_FormFill 2236 0.36 1.34 0.00 157 TR_XM_FormFill2 2223 0.54 1.33 0.26 158 XM_URI_RBL 2216 0.43 1.33 0.10 159 RCVD_IN_PSBL 2189 0.40 1.31 0.08 160 XM_H_PHPOS 2187 0.52 1.31 0.24 161 XM_H_Undi_Recip 2139 0.46 1.28 0.17 162 URIBL_BLACK 2135 0.37 1.28 0.04 163 RELAYCOUNTRY_AU 2130 0.51 1.27 0.23 164 XM_B_DynamicLink 2125 0.35 1.27 0.02 165 HTML_TAG_BALANCE_BODY 2113 0.65 1.26 0.43 166 HTTPS_HTTP_MISMATCH 2102 0.68 1.26 0.47 167 HTML_TAG_BALANCE_CENTER 2092 0.39 1.25 0.08 168 XM_Body_Dirty_Words_01 2051 0.43 1.23 0.14 169 TR_Symld_Words 2037 1.25 1.22 1.26 170 MPART_ALT_DIFF_COUNT 2017 0.60 1.21 0.38 171 RELAYCOUNTRY_CN 2002 0.35 1.20 0.05 172 XMPhish30 1996 0.68 1.19 0.49 173 URI_PHP_REDIR 1953 0.31 1.17 0.00 174 TR_XM_COVIDMETA1 1920 0.43 1.15 0.17 175 HTML_IMAGE_ONLY_20 1894 0.70 1.13 0.54 176 MIXED_CENTER_CASE 1867 0.30 1.12 0.00 177 MIXED_HREF_CASE 1861 0.30 1.11 0.00 178 RCVD_IN_MSPIKE_L5 1859 0.33 1.11 0.04 179 BAYES_20 1859 3.77 1.11 4.73 180 MIXED_IMG_CASE 1856 0.30 1.11 0.00 181 MIXED_AREA_CASE 1846 0.29 1.10 0.00 182 TR_XM_BayesRelay 1846 0.29 1.10 0.00 183 XM_PDF 1841 2.95 1.10 3.61 184 RELAYCOUNTRY_DE 1830 0.43 1.10 0.19 185 XMReplyNow 1800 0.44 1.08 0.21 186 RELAYCOUNTRY_FR 1789 0.41 1.07 0.17 187 MIXED_FONT_CASE 1749 0.28 1.05 0.00 188 URI_TRY_3LD 1725 0.56 1.03 0.39 189 XMSubMetaI_00 1723 0.78 1.03 0.68 190 XMSexyCombo_04 1718 0.31 1.03 0.05 191 XMBrknScrpt_02 1683 0.63 1.01 0.50 192 HTML_FONT_SIZE_LARGE 1659 0.35 0.99 0.11 193 XMMoneyMeta_00 1648 0.51 0.99 0.34 194 XM_UB60 1613 0.29 0.97 0.05 195 XM_B_DNDMA 1610 0.50 0.96 0.34 196 MONEY_NOHTML 1576 0.29 0.94 0.06 197 XMPhish14 1560 0.43 0.93 0.24 198 MIME_CHARSET_FARAWAY 1526 0.34 0.91 0.13 199 RELAYCOUNTRY_IN 1501 0.28 0.90 0.06 200 HTML_FONT_TINY_NORDNS 1483 0.29 0.89 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 413484 91.19 96.19 89.39 2 DCC_CHECK_NEGATIVE 361543 64.57 26.94 78.16 3 RELAYCOUNTRY_US 353106 77.91 82.29 76.33 4 XM_B_Unicode 353002 76.83 78.26 76.31 5 XM_B_Unicode3 240564 49.58 42.85 52.01 6 DKIM_SIGNED 235566 60.88 88.42 50.92 7 BAYES_50 230232 48.03 43.21 49.77 8 XM_DK_Pass 228914 59.27 86.34 49.49 9 DKIM_VALID 225565 58.56 85.69 48.76 10 XM_B_SpammyWords 189278 46.89 63.43 40.92 11 DKIM_VALID_AU 174847 45.04 65.07 37.80 12 XMListUnsubscribeExists 152601 42.66 69.44 32.99 13 T_TM2_M_HEADER_IN_MSG 131583 26.27 20.25 28.45 14 MIME_HTML_ONLY 122629 29.02 35.98 26.51 15 RCVD_IN_MSPIKE_H2 121768 32.03 47.84 26.32 16 XMSubLong 118890 24.90 22.68 25.70 17 FVGT_m_MULTI_ODD 113921 27.65 36.01 24.63 18 DCC_CHECK 100871 35.40 73.04 21.81 19 ALL_TRUSTED 100435 16.47 1.95 21.71 20 HTML_FONT_FACE_BAD 99776 16.08 0.87 21.57 21 DKIM_VALID_EF 91575 22.86 31.33 19.80 22 BAYES_00 91220 14.69 0.76 19.72 23 HTML_FONT_LOW_CONTRAST 88899 22.70 32.34 19.22 24 XM_H_Trusted_IP 71172 11.30 0.00 15.39 25 HTML_IMAGE_RATIO_04 70149 12.43 4.86 15.16 26 LOC_TINY_FONT_1 68659 20.20 35.04 14.84 27 T_KAM_HTML_FONT_INVALID 64295 17.56 27.71 13.90 28 TooManyTo_001 60205 10.76 4.51 13.02 29 XM_B_Unsub 59615 13.46 15.06 12.89 30 IN_ZIMBRA_NJ_WHITELIST 55682 8.87 0.10 12.04 31 LOTS_OF_MONEY 54642 12.32 13.72 11.81 32 XM_B_SpammyWords2 53541 17.78 34.96 11.57 33 TR_XM_BayesUnsub 52801 12.28 14.68 11.41 34 RCVD_IN_MSPIKE_WL 52339 12.33 15.15 11.31 35 HTML_IMAGE_RATIO_06 49546 8.91 3.91 10.71 36 XMStrtUSub 47850 8.60 3.79 10.34 37 MPART_ALT_DIFF 44714 10.12 11.38 9.67 38 TR_XM_SpammyWords4 44452 10.08 11.37 9.61 39 XM_SPF_SoftFail 39837 7.41 4.09 8.61 40 USER_IN_DEF_DKIM_WL 38756 6.61 1.71 8.38 41 XM_Multi_Part_URI 38634 10.54 16.61 8.35 42 XM_Body_Dirty_Words 36839 11.65 21.87 7.96 43 MIME_HTML_ONLY_MULTI 36719 8.11 8.57 7.94 44 XMDiploma_00 36616 6.72 3.43 7.92 45 RCVD_IN_MSPIKE_H3 36315 9.13 12.66 7.85 46 XM_Evil_Numbers_Gen 35268 7.86 8.50 7.62 47 BAYES_60 32359 7.04 7.17 7.00 48 LotsOfNums_01 29291 6.58 7.27 6.33 49 XMSubNoVowel 26439 4.58 1.43 5.72 50 XM_DKIMWhitelistDomains 25719 4.10 0.05 5.56 51 UNPARSEABLE_RELAY 24499 7.59 13.95 5.30 52 BAYES_99 23264 12.32 32.52 5.03 53 T_TooManySym_01 22865 4.29 2.48 4.94 54 BAYES_40 21922 3.86 1.44 4.74 55 BAYES_20 21882 3.77 1.11 4.73 56 TR_XM_DK_Bayes 21776 3.60 0.55 4.71 57 XM_DK_Undo_02 21713 14.40 41.26 4.69 58 KHOP_HELO_FCRDNS 21545 4.09 2.50 4.66 59 TR_XM_DK_Bayes1 21322 3.53 0.54 4.61 60 BAYES_999 19934 9.92 25.45 4.31 61 TR_XM_UnparsRelay 19219 6.71 13.77 4.15 62 TR_XM_DK_Bayes2 18658 3.08 0.44 4.03 63 MIME_QP_LONG_LINE 18089 3.81 3.52 3.91 64 RCVD_IN_IADB_LISTED 17759 3.53 2.67 3.84 65 BAYES_05 17510 2.93 0.55 3.79 66 ANY_BOUNCE_MESSAGE 17133 2.91 0.71 3.70 67 BOUNCE_MESSAGE 17131 2.91 0.71 3.70 68 XM_H_Long_From01 17093 4.32 6.03 3.70 69 XM_PDF 16714 2.95 1.10 3.61 70 BOTNET_IPINHOSTNAME 16278 5.75 11.91 3.52 71 HTML_IMAGE_RATIO_02 16136 4.35 6.74 3.49 72 RCVD_IN_IADB_SPF 15889 3.12 2.26 3.43 73 RCVD_IN_VALIDITY_SAFE 15712 3.34 3.17 3.40 74 XMNumbers 15344 3.38 3.57 3.32 75 BAYES_80 15185 4.60 8.24 3.28 76 XM_SendGrid 15131 4.10 6.39 3.27 77 TR_XM_DKIM_Undo 14758 10.67 31.36 3.19 78 RCVD_IN_MSPIKE_H4 14643 2.96 2.40 3.17 79 RCVD_IN_IADB_SENDERID 14264 2.82 2.08 3.08 80 T_TooManySym_02 14092 2.46 0.83 3.05 81 RCVD_IN_VALIDITY_CERTIFIED 14068 2.93 2.64 3.04 82 RCVD_IN_IADB_DK 13795 2.75 2.10 2.98 83 T_REMOTE_IMAGE 12895 3.05 3.78 2.79 84 RELAYCOUNTRY_META 12412 7.53 20.96 2.68 85 XM_UncommonTLD01 12342 3.92 7.38 2.67 86 XM_B_SpammyWords3 12102 4.86 11.09 2.62 87 HTML_IMAGE_RATIO_08 12094 2.48 2.13 2.61 88 XMSubMetaSx_00 11352 3.40 6.00 2.45 89 RCVD_IN_IADB_VOUCHED 11025 2.13 1.44 2.38 90 TR_XM_PhishingBody 10604 3.31 6.12 2.29 91 XMSexyCombo_05 10551 4.55 10.83 2.28 92 XM_B_Phish_Phrases 10065 3.00 5.29 2.18 93 DKIM_INVALID 10001 2.32 2.74 2.16 94 TR_XM_DK_SendGrid 9874 2.63 4.02 2.13 95 XMSubLongNoVowel 9353 1.57 0.32 2.02 96 XMSubGarbage 9243 1.49 0.07 2.00 97 BAYES_95 8996 2.76 5.00 1.94 98 FROM_EXCESS_BASE64 8987 1.88 1.70 1.94 99 FSL_BULK_SIG 8887 4.41 11.30 1.92 100 MAILING_LIST_MULTI 8811 1.89 1.83 1.90 101 URI_NOVOWEL 8808 2.06 2.50 1.90 102 TM2_M_URI_OPT_OUT 8399 2.06 2.72 1.82 103 MIME_HTML_MOSTLY 8189 2.18 3.32 1.77 104 HTML_MIME_NO_HTML_TAG 7950 3.55 8.62 1.72 105 TooManyTo_002 7765 1.39 0.59 1.68 106 RCVD_IN_IADB_OPTIN 7395 1.40 0.86 1.60 107 XM_B_SpammyTLD 7255 2.21 4.00 1.57 108 TVD_RCVD_IP 7128 1.20 0.25 1.54 109 TR_XM_SB_Phish 6737 1.54 1.77 1.46 110 INVALID_MSGID 6705 1.11 0.16 1.45 111 XMSubPhish11 6673 1.50 1.67 1.44 112 HELO_NODOT 6607 1.18 0.47 1.43 113 HELO_NO_DOMAIN 6600 1.17 0.46 1.43 114 XM_B_Phish66 6473 1.90 3.27 1.40 115 IN_HORDE_ADDRESS_BOOK 6249 1.02 0.10 1.35 116 XM_CamelCaseFrm001 6167 1.79 3.06 1.33 117 T_XMDrugObfuBody_14 6049 1.98 3.85 1.31 118 TO_MALFORMED 5942 0.96 0.04 1.28 119 XM_DK_Undo_01 5830 1.55 2.35 1.26 120 BOTNET 5815 3.44 9.49 1.26 121 TR_Symld_Words 5812 1.25 1.22 1.26 122 SUBJ_ALL_CAPS 5692 1.45 2.07 1.23 123 SHORTENED_URL_HREF 5664 0.93 0.12 1.22 124 T_TooManySym_03 5483 0.94 0.28 1.19 125 TR_XM_SpammyRelay 5478 3.85 11.22 1.18 126 XM_B_Unsub2 5372 1.63 2.93 1.16 127 XM_B_Investor 5247 2.06 4.63 1.13 128 T_XMDrugObfuBody_08 5131 1.62 3.02 1.11 129 TooManyTo_003 5100 0.94 0.48 1.10 130 XM_E_Blogspot 5043 0.84 0.16 1.09 131 XMGappySubj_01 4722 0.78 0.12 1.02 132 XM_GoogleGroups 4666 2.47 6.50 1.01 133 XMBSHREFv2 4508 0.78 0.23 0.97 134 TR_DCC_Bayes_99 4502 6.72 22.61 0.97 135 UNTRUSTED_Relay 4384 3.02 8.76 0.95 136 TM2_M_VERY_LONG_WORD 4355 2.98 8.62 0.94 137 TR_XM_SpammyWords5 4339 1.68 3.75 0.94 138 XMCapTrack 4190 0.77 0.39 0.91 139 URI_HEX 4097 1.15 1.86 0.89 140 RCVD_IN_MSPIKE_BL 4029 1.87 4.64 0.87 141 TR_XM_MSPIKECOMBO 4024 1.84 4.51 0.87 142 TooManyTo_004 3726 0.69 0.39 0.81 143 BASE64_LENGTH_79_INF 3504 0.62 0.25 0.76 144 DKIM_ADSP_CUSTOM_MED 3482 0.78 0.85 0.75 145 TVD_SPACE_RATIO 3413 0.58 0.15 0.74 146 XM_B_SEO 3282 0.73 0.80 0.71 147 XM_OfRef6 3234 1.44 3.49 0.70 148 XMSubMetaI_00 3163 0.78 1.03 0.68 149 RELAYCOUNTRY_CA 3149 2.44 7.29 0.68 150 RCVD_IN_RP_SAFE 3141 0.66 0.60 0.68 151 XM_H_Long_From02 3068 0.86 1.42 0.66 152 TooManyTo_005 3005 0.57 0.35 0.65 153 FROM_GOV_DKIM_AU 2988 0.57 0.35 0.65 154 FVGT_m_MULTI_ODD_EMAIL 2944 0.50 0.11 0.64 155 XMGenDplmaNmb 2895 0.84 1.44 0.63 156 RCVD_IN_RP_CERTIFIED 2813 0.57 0.47 0.61 157 XM_UB50 2773 1.38 3.53 0.60 158 T_FILL_THIS_FORM_SHORT 2735 1.09 2.46 0.59 159 SpammyFromTLD_01 2730 1.29 3.21 0.59 160 HTML_IMAGE_ONLY_20 2489 0.70 1.13 0.54 161 XMLngstWrd_00 2479 2.07 6.33 0.54 162 XMBody_95 2451 0.48 0.33 0.53 163 XMStockSpam_06 2440 0.79 1.53 0.53 164 XMHTML_After_End 2438 0.89 1.90 0.53 165 XMBdyGiftCard01 2432 0.79 1.53 0.53 166 XM_B_COPY_HTML 2395 0.58 0.75 0.52 167 XMSubEmpty 2384 0.43 0.21 0.52 168 T_XMDrugObfuBody_00 2380 0.95 2.15 0.51 169 TR_XM_SpammyWords2 2334 3.14 10.43 0.50 170 TR_MetaPhish_Combo_01 2333 0.55 0.66 0.50 171 XM_ShortIntro_01 2326 0.46 0.35 0.50 172 XMBrknScrpt_02 2313 0.63 1.01 0.50 173 RELAYCOUNTRY_GB 2309 0.58 0.80 0.50 174 XM_B_COVIDMETA 2287 0.87 1.91 0.49 175 XMPhish30 2271 0.68 1.19 0.49 176 MSGID_NOFQDN1 2268 0.36 0.01 0.49 177 NML_ADSP_CUSTOM_MED 2211 0.53 0.69 0.48 178 HTTPS_HTTP_MISMATCH 2152 0.68 1.26 0.47 179 XM_H_PHPMailer 2126 0.50 0.62 0.46 180 RCVD_IN_MSPIKE_L3 2100 0.74 1.54 0.45 181 T_OBFU_PDF_ATTACH 2076 0.41 0.29 0.45 182 XMLngstWrd_01 2043 2.00 6.30 0.44 183 XMSexyCombo_01 2038 0.91 2.21 0.44 184 HTML_TAG_BALANCE_BODY 2011 0.65 1.26 0.43 185 XMOemUri 2010 0.40 0.30 0.43 186 RCVD_IN_BL_SPAMCOP_NET 1984 3.07 10.38 0.43 187 PLING_QUERY 1969 0.49 0.66 0.43 188 T_XMHurry_00 1946 0.77 1.73 0.42 189 T_Symld_Words_02 1915 0.51 0.76 0.41 190 FORGED_GMAIL_RCVD 1908 0.49 0.72 0.41 191 SHORT_HELO_AND_INLINE_IMAGE 1881 0.32 0.07 0.41 192 XM_B_SpammyWords4 1851 0.83 2.00 0.40 193 RCVD_IN_SORBS_DUL 1792 0.31 0.09 0.39 194 URI_TRY_3LD 1788 0.56 1.03 0.39 195 MPART_ALT_DIFF_COUNT 1749 0.60 1.21 0.38 196 XM_ProductURIs 1747 0.43 0.59 0.38 197 RCVD_IN_MSPIKE_L4 1735 0.77 1.86 0.38 198 XMHTMLBadTable_001 1709 0.49 0.82 0.37 199 XMNoVowels 1671 0.38 0.43 0.36 200 FROM_GOV_SPOOF 1643 0.29 0.12 0.36 ----------------------------------------------------------------------