Email: 683755 Autolearn: 0 AvgScore: 1.05 AvgScanTime: 1.47 sec Spam: 180331 Autolearn: 0 AvgScore: 13.52 AvgScanTime: 1.73 sec Ham: 503424 Autolearn: 0 AvgScore: -3.42 AvgScanTime: 1.38 sec Time Spent Running SA: 278.91 hours Time Spent Processing Spam: 86.48 hours Time Spent Processing Ham: 192.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 173248 89.26 96.07 86.82 2 DKIM_SIGNED 167523 67.16 92.90 57.94 3 XM_DK_Pass 163620 65.59 90.73 56.59 4 DKIM_VALID 162427 64.87 90.07 55.85 5 RELAYCOUNTRY_US 148009 80.03 82.08 79.30 6 XM_B_Unicode 147800 70.57 81.96 66.48 7 XMListUnsubscribeExists 130152 46.55 72.17 37.37 8 XM_B_SpammyWords 126916 51.08 70.38 44.17 9 DCC_CHECK 126146 37.69 69.95 26.13 10 DKIM_VALID_AU 122970 50.87 68.19 44.66 11 RCVD_IN_MSPIKE_H2 93858 36.49 52.05 30.92 12 XM_B_Unicode3 82009 41.41 45.48 39.96 13 XM_DK_Undo_02 81190 15.37 45.02 4.75 14 BAYES_50 75707 49.05 41.98 51.59 15 XM_B_SpammyWords2 74195 22.43 41.14 15.73 16 LOC_TINY_FONT_1 69229 23.84 38.39 18.63 17 FVGT_m_MULTI_ODD 65905 24.24 36.55 19.83 18 TR_XM_DKIM_Undo 65127 12.04 36.12 3.41 19 DKIM_VALID_EF 61371 25.16 34.03 21.98 20 HTML_FONT_LOW_CONTRAST 61226 25.30 33.95 22.20 21 MIME_HTML_ONLY 61202 25.44 33.94 22.40 22 BAYES_99 59838 11.35 33.18 3.53 23 DCC_CHECK_NEGATIVE 54147 62.28 30.03 73.83 24 T_KAM_HTML_FONT_INVALID 53244 19.06 29.53 15.32 25 BAYES_999 47632 8.98 26.41 2.74 26 TR_DCC_Bayes_99 42303 6.96 23.46 1.05 27 XM_Body_Dirty_Words 42239 12.73 23.42 8.91 28 XMSubLong 40695 19.99 22.57 19.06 29 T_TM2_M_HEADER_IN_MSG 37864 26.54 21.00 28.53 30 RELAYCOUNTRY_META 36892 7.90 20.46 3.40 31 XM_Multi_Part_URI 34056 11.97 18.89 9.49 32 RCVD_IN_MSPIKE_WL 30606 15.08 16.97 14.41 33 XM_B_Unsub 29019 9.59 16.09 7.26 34 TR_XM_BayesUnsub 28182 7.77 15.63 4.96 35 UNPARSEABLE_RELAY 25624 8.99 14.21 7.12 36 TR_XM_SpammyRelay 25558 4.85 14.17 1.51 37 RCVD_IN_MSPIKE_H3 24595 10.23 13.64 9.01 38 LOTS_OF_MONEY 24015 11.48 13.32 10.83 39 BOTNET_IPINHOSTNAME 23527 6.02 13.05 3.50 40 XM_B_SpammyWords3 22735 6.16 12.61 3.85 41 TR_XM_SpammyWords2 22030 3.63 12.22 0.56 42 TR_XM_SpammyWords4 21029 8.70 11.66 7.64 43 XMSexyCombo_05 19517 4.99 10.82 2.90 44 XM_Evil_Numbers_Gen 18526 8.92 10.27 8.43 45 MPART_ALT_DIFF 18481 11.49 10.25 11.93 46 RELAYCOUNTRY_CA 18161 3.43 10.07 1.05 47 RCVD_IN_BL_SPAMCOP_NET 17544 2.85 9.73 0.39 48 FSL_BULK_SIG 17401 4.52 9.65 2.69 49 TR_XM_UnparsRelay 16354 3.27 9.07 1.19 50 TR_XM_SPAMCOP 15833 2.54 8.78 0.30 51 XM_UncommonTLD01 15161 4.71 8.41 3.38 52 BOTNET 15133 3.10 8.39 1.21 53 BAYES_80 15067 4.66 8.36 3.33 54 BAYES_60 13954 7.22 7.74 7.03 55 XM_SendGrid 13257 5.13 7.35 4.33 56 MIME_HTML_ONLY_MULTI 13062 8.44 7.24 8.86 57 TM2_M_VERY_LONG_WORD 12932 2.90 7.17 1.37 58 LotsOfNums_01 12858 6.49 7.13 6.26 59 TR_XM_PhishingBody 12272 3.59 6.81 2.44 60 HTML_IMAGE_RATIO_02 11665 5.10 6.47 4.61 61 XM_B_Phish_Phrases 11172 3.73 6.20 2.84 62 UNTRUSTED_Relay 10699 2.41 5.93 1.15 63 HTML_MIME_NO_HTML_TAG 10625 3.39 5.89 2.49 64 XM_H_Long_From01 10206 4.60 5.66 4.22 65 XM_B_SpammyTLD 10132 2.96 5.62 2.01 66 TR_XM_SpammyWords5 9317 2.29 5.17 1.27 67 XM_GoogleGroups 8676 2.29 4.81 1.39 68 XMLngstWrd_00 8615 2.16 4.78 1.22 69 BAYES_95 8613 2.73 4.78 1.99 70 XMSubMetaSx_00 8602 2.90 4.77 2.23 71 XMLngstWrd_01 8564 2.10 4.75 1.16 72 TooManyTo_001 8415 5.86 4.67 6.28 73 TR_XM_DK_SendGrid 8374 3.41 4.64 2.97 74 XM_DIRTYINTL 8298 1.40 4.60 0.26 75 HTML_IMAGE_RATIO_04 8201 11.35 4.55 13.79 76 XMNumbers 8158 3.46 4.52 3.08 77 XMLngstWrd_02 8112 1.87 4.50 0.93 78 XM_B_Investor 7913 1.98 4.39 1.12 79 RCVD_IN_VALIDITY_SAFE 7572 3.73 4.20 3.57 80 XMLngstWrd_03 7564 1.72 4.19 0.83 81 HTML_TITLE_SUBJ_DIFF 7511 1.49 4.17 0.53 82 XMLngstWrd_04 7475 1.65 4.15 0.76 83 UPPERCASE_75_100 7349 1.45 4.08 0.52 84 XMStrtUSub 7256 9.29 4.02 11.17 85 XM_OfRef6 7130 1.56 3.95 0.71 86 MIME_HTML_MOSTLY 7053 3.56 3.91 3.44 87 HTML_IMAGE_RATIO_06 7049 8.56 3.91 10.22 88 SpammyFromTLD_02 6536 1.22 3.62 0.35 89 MIME_QP_LONG_LINE 6373 3.77 3.53 3.85 90 T_XMDrugObfuBody_08 6311 2.13 3.50 1.65 91 RCVD_IN_VALIDITY_CERTIFIED 6300 3.16 3.49 3.03 92 XM_B_Phish66 6244 1.90 3.46 1.35 93 XM_SPF_SoftFail 6057 6.36 3.36 7.44 94 T_XMDrugObfuBody_14 6046 1.78 3.35 1.22 95 TM2_M_URI_OPT_OUT 5573 5.01 3.09 5.70 96 XM_UB50 5550 1.36 3.08 0.74 97 XMBody_17 5461 1.02 3.03 0.30 98 SpammyFromTLD_01 5460 1.24 3.03 0.60 99 RCVD_IN_MSPIKE_H4 5428 4.13 3.01 4.53 100 USER_IN_DEF_DKIM_WL 5243 8.02 2.91 9.85 101 T_FILL_THIS_FORM_SHORT 5166 1.30 2.86 0.75 102 HTML_IMAGE_RATIO_08 5116 1.97 2.84 1.66 103 DKIM_INVALID 5096 2.28 2.83 2.09 104 URIBL_DBL_SPAM 5056 0.75 2.80 0.01 105 XM_B_SpammyWords4 5010 1.10 2.78 0.50 106 HK_RANDOM_REPLYTO 4970 0.79 2.76 0.08 107 RCVD_IN_MSPIKE_BL 4689 0.88 2.60 0.26 108 XM_B_Unsub2 4547 1.68 2.52 1.38 109 TR_XM_MSPIKECOMBO 4545 0.86 2.52 0.26 110 SUBJ_ALL_CAPS 4529 2.70 2.51 2.77 111 XM_DK_Undo_01 4354 1.66 2.41 1.40 112 URI_NOVOWEL 4257 1.81 2.36 1.61 113 XM_H_Undi_Recip 4166 0.76 2.31 0.20 114 XMDiploma_00 4158 1.25 2.31 0.87 115 PDS_OTHER_BAD_TLD 4088 0.70 2.27 0.14 116 RCVD_IN_IADB_LISTED 3843 3.30 2.13 3.72 117 TR_LOTS_OF_MONEY3 3704 0.81 2.05 0.36 118 T_TooManySym_01 3688 4.11 2.05 4.86 119 XM_OfRef7 3635 0.60 2.02 0.09 120 URI_PHP_REDIR 3573 0.52 1.98 0.00 121 XM_CamelCaseFrm001 3548 1.73 1.97 1.64 122 FROM_EXCESS_BASE64 3545 2.13 1.97 2.18 123 HTTPS_HTTP_MISMATCH 3524 0.89 1.95 0.51 124 T_REMOTE_IMAGE 3510 2.88 1.95 3.21 125 TR_XM_Undi_Recip5 3497 0.52 1.94 0.01 126 TR_XM_SB_Phish 3492 2.68 1.94 2.95 127 TR_XM_NoHeaderRelay 3413 0.57 1.89 0.09 128 RCVD_IN_IADB_SPF 3378 2.94 1.87 3.32 129 TR_XM_Undi_RecipCombo2 3339 0.49 1.85 0.00 130 XMSubPhish11 3311 2.65 1.84 2.94 131 TR_XM_SpammyWords3 3267 0.57 1.81 0.13 132 RCVD_IN_IADB_DK 3219 2.61 1.79 2.91 133 XM_URI_RBL 3180 0.55 1.76 0.12 134 MAILING_LIST_MULTI 3179 1.91 1.76 1.96 135 RCVD_IN_IADB_SENDERID 3173 2.67 1.76 2.99 136 TR_XM_Undi_Recip11 3149 0.50 1.75 0.06 137 URI_HEX 3142 1.21 1.74 1.02 138 XMStockSpam_06 3088 1.37 1.71 1.24 139 XMSubMetaI_00 3016 0.90 1.67 0.62 140 UNDISC_MONEY 3007 0.44 1.67 0.01 141 T_XMHurry_00 2971 0.76 1.65 0.45 142 RCVD_IN_MSPIKE_L5 2959 0.46 1.64 0.04 143 XMSexyCombo_01 2950 0.69 1.64 0.36 144 XM_Body_Dirty_Words_01 2853 0.51 1.58 0.12 145 T_XMDrugObfuBody_00 2795 0.76 1.55 0.48 146 FONT_INVIS_LONG_LINE 2778 0.43 1.54 0.03 147 TR_XM_FormFill 2736 0.41 1.52 0.01 148 XM_B_COVIDMETA 2714 0.70 1.51 0.41 149 XMHTML_After_End 2680 0.96 1.49 0.77 150 TR_XM_BayesRelay 2599 0.38 1.44 0.00 151 XM_B_DNDMA 2564 0.62 1.42 0.33 152 RELAYCOUNTRY_AU 2563 0.56 1.42 0.25 153 RELAYCOUNTRY_IN 2538 0.40 1.41 0.05 154 BAYES_40 2519 3.96 1.40 4.88 155 ALL_TRUSTED 2497 13.69 1.38 18.10 156 TR_XM_Undi_Recip2 2380 0.36 1.32 0.02 157 XMBdyGiftCard01 2354 0.95 1.31 0.82 158 URIBL_BLACK 2344 0.37 1.30 0.04 159 XMGenDplmaNmb 2337 0.68 1.30 0.46 160 XMBrknScrpt_02 2322 0.78 1.29 0.59 161 RCVD_IN_VALIDITY_RPBL 2298 0.37 1.27 0.05 162 KHOP_HELO_FCRDNS 2184 3.23 1.21 3.95 163 THIS_AD 2164 0.51 1.20 0.26 164 XMPhish30 2111 0.67 1.17 0.49 165 TR_Sbj_FN_Bdy 2093 0.37 1.16 0.09 166 HTML_TAG_BALANCE_BODY 2025 0.74 1.12 0.60 167 TR_XM_PHPDW 2021 0.58 1.12 0.39 168 XM_ProductURIs 1996 1.03 1.11 1.00 169 TR_XM_COVIDMETA1 1969 0.40 1.09 0.15 170 TR_Symld_Words 1947 1.11 1.08 1.13 171 MPART_ALT_DIFF_COUNT 1946 0.57 1.08 0.39 172 BAYES_20 1925 4.08 1.07 5.16 173 TR_XM_PHPForged 1915 0.55 1.06 0.37 174 FILL_THIS_FORM 1875 3.61 1.04 4.52 175 TR_Caps_n_Bayes_99 1868 0.29 1.04 0.03 176 TR_XM_FormFill2 1852 0.54 1.03 0.37 177 XM_H_PHPOS 1832 0.54 1.02 0.36 178 XMClaimOffer 1758 0.31 0.97 0.07 179 XMPhish14 1737 0.44 0.96 0.26 180 HTML_FONT_FACE_BAD 1730 13.92 0.96 18.56 181 MONEY_FORM 1717 0.25 0.95 0.00 182 TR_XM_Undi_RecipCombo3 1708 0.25 0.95 0.00 183 XM_UB99 1704 0.25 0.94 0.00 184 RCVD_IN_IADB_VOUCHED 1700 1.88 0.94 2.21 185 TR_XM_InvalidRelay 1659 0.26 0.92 0.02 186 BAYES_00 1658 13.95 0.92 18.62 187 TR_XM_Undi_Recip9 1655 0.24 0.92 0.00 188 TR_MetaPhish_Combo_01 1606 0.65 0.89 0.56 189 URI_TRY_3LD 1560 0.53 0.87 0.40 190 XM_H_Long_From02 1557 0.99 0.86 1.04 191 TR_XM_Base64_M1 1557 0.81 0.86 0.79 192 XMPhish08 1555 0.44 0.86 0.29 193 XM_PDF 1553 3.85 0.86 4.92 194 ANY_BOUNCE_MESSAGE 1505 3.86 0.83 4.94 195 BOUNCE_MESSAGE 1504 3.86 0.83 4.94 196 RELAYCOUNTRY_GB 1484 0.60 0.82 0.52 197 XMReplyNow 1478 0.35 0.82 0.18 198 RELAYCOUNTRY_FR 1452 0.39 0.81 0.23 199 TM2_M_A_HREF_HREF 1436 0.34 0.80 0.17 200 TR_XM_Undi_Recip6 1418 0.21 0.79 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 437058 89.26 96.07 86.82 2 RELAYCOUNTRY_US 399196 80.03 82.08 79.30 3 DCC_CHECK_NEGATIVE 371685 62.28 30.03 73.83 4 XM_B_Unicode 334695 70.57 81.96 66.48 5 DKIM_SIGNED 291678 67.16 92.90 57.94 6 XM_DK_Pass 284868 65.59 90.73 56.59 7 DKIM_VALID 281159 64.87 90.07 55.85 8 BAYES_50 259697 49.05 41.98 51.59 9 DKIM_VALID_AU 224846 50.87 68.19 44.66 10 XM_B_SpammyWords 222376 51.08 70.38 44.17 11 XM_B_Unicode3 201145 41.41 45.48 39.96 12 XMListUnsubscribeExists 188127 46.55 72.17 37.37 13 RCVD_IN_MSPIKE_H2 155641 36.49 52.05 30.92 14 T_TM2_M_HEADER_IN_MSG 143619 26.54 21.00 28.53 15 DCC_CHECK 131540 37.69 69.95 26.13 16 MIME_HTML_ONLY 112743 25.44 33.94 22.40 17 HTML_FONT_LOW_CONTRAST 111736 25.30 33.95 22.20 18 DKIM_VALID_EF 110666 25.16 34.03 21.98 19 FVGT_m_MULTI_ODD 99806 24.24 36.55 19.83 20 XMSubLong 95976 19.99 22.57 19.06 21 LOC_TINY_FONT_1 93807 23.84 38.39 18.63 22 BAYES_00 93722 13.95 0.92 18.62 23 HTML_FONT_FACE_BAD 93430 13.92 0.96 18.56 24 ALL_TRUSTED 91124 13.69 1.38 18.10 25 XM_B_SpammyWords2 79202 22.43 41.14 15.73 26 T_KAM_HTML_FONT_INVALID 77103 19.06 29.53 15.32 27 RCVD_IN_MSPIKE_WL 72524 15.08 16.97 14.41 28 HTML_IMAGE_RATIO_04 69425 11.35 4.55 13.79 29 XM_H_Trusted_IP 67570 9.88 0.00 13.42 30 MPART_ALT_DIFF 60051 11.49 10.25 11.93 31 XMStrtUSub 56243 9.29 4.02 11.17 32 IN_ZIMBRA_NJ_WHITELIST 56094 8.22 0.08 11.14 33 LOTS_OF_MONEY 54504 11.48 13.32 10.83 34 HTML_IMAGE_RATIO_06 51463 8.56 3.91 10.22 35 USER_IN_DEF_DKIM_WL 49589 8.02 2.91 9.85 36 XM_Multi_Part_URI 47779 11.97 18.89 9.49 37 RCVD_IN_MSPIKE_H3 45357 10.23 13.64 9.01 38 XM_Body_Dirty_Words 44833 12.73 23.42 8.91 39 MIME_HTML_ONLY_MULTI 44625 8.44 7.24 8.86 40 XM_Evil_Numbers_Gen 42463 8.92 10.27 8.43 41 TR_XM_SpammyWords4 38440 8.70 11.66 7.64 42 XM_DKIMWhitelistDomains 37760 5.53 0.03 7.50 43 XM_SPF_SoftFail 37433 6.36 3.36 7.44 44 XM_B_Unsub 36567 9.59 16.09 7.26 45 UNPARSEABLE_RELAY 35865 8.99 14.21 7.12 46 BAYES_60 35399 7.22 7.74 7.03 47 TooManyTo_001 31619 5.86 4.67 6.28 48 LotsOfNums_01 31535 6.49 7.13 6.26 49 TM2_M_URI_OPT_OUT 28709 5.01 3.09 5.70 50 BAYES_20 25998 4.08 1.07 5.16 51 TR_XM_BayesUnsub 24978 7.77 15.63 4.96 52 ANY_BOUNCE_MESSAGE 24876 3.86 0.83 4.94 53 BOUNCE_MESSAGE 24870 3.86 0.83 4.94 54 XM_PDF 24790 3.85 0.86 4.92 55 BAYES_40 24583 3.96 1.40 4.88 56 T_TooManySym_01 24446 4.11 2.05 4.86 57 TR_XM_DK_Bayes 24180 3.73 0.73 4.80 58 XM_DK_Undo_02 23910 15.37 45.02 4.75 59 TR_XM_DK_Bayes1 23824 3.67 0.72 4.73 60 HTML_IMAGE_RATIO_02 23227 5.10 6.47 4.61 61 RCVD_IN_MSPIKE_H4 22780 4.13 3.01 4.53 62 FILL_THIS_FORM 22777 3.61 1.04 4.52 63 XMSubNoVowel 22292 3.35 0.35 4.43 64 FILL_THIS_FORM_LONG 22025 3.34 0.43 4.38 65 XM_SendGrid 21817 5.13 7.35 4.33 66 XM_H_Long_From01 21221 4.60 5.66 4.22 67 TR_XM_DK_Bayes2 21169 3.27 0.64 4.21 68 KHOP_HELO_FCRDNS 19880 3.23 1.21 3.95 69 BAYES_05 19429 3.00 0.58 3.86 70 MIME_QP_LONG_LINE 19403 3.77 3.53 3.85 71 XM_B_SpammyWords3 19362 6.16 12.61 3.85 72 RCVD_IN_IADB_LISTED 18712 3.30 2.13 3.72 73 RCVD_IN_VALIDITY_SAFE 17961 3.73 4.20 3.57 74 BAYES_99 17790 11.35 33.18 3.53 75 BOTNET_IPINHOSTNAME 17612 6.02 13.05 3.50 76 MIME_HTML_MOSTLY 17312 3.56 3.91 3.44 77 TR_XM_DKIM_Undo 17172 12.04 36.12 3.41 78 RELAYCOUNTRY_META 17129 7.90 20.46 3.40 79 XM_UncommonTLD01 17010 4.71 8.41 3.38 80 BAYES_80 16777 4.66 8.36 3.33 81 RCVD_IN_IADB_SPF 16694 2.94 1.87 3.32 82 T_REMOTE_IMAGE 16179 2.88 1.95 3.21 83 XMNumbers 15509 3.46 4.52 3.08 84 RCVD_IN_VALIDITY_CERTIFIED 15273 3.16 3.49 3.03 85 RCVD_IN_IADB_SENDERID 15056 2.67 1.76 2.99 86 TR_XM_DK_SendGrid 14943 3.41 4.64 2.97 87 TR_XM_SB_Phish 14854 2.68 1.94 2.95 88 XMSubPhish11 14777 2.65 1.84 2.94 89 RCVD_IN_IADB_DK 14633 2.61 1.79 2.91 90 XMSexyCombo_05 14585 4.99 10.82 2.90 91 XM_B_Phish_Phrases 14310 3.73 6.20 2.84 92 T_TooManySym_02 14187 2.23 0.61 2.82 93 SUBJ_ALL_CAPS 13937 2.70 2.51 2.77 94 BAYES_999 13798 8.98 26.41 2.74 95 FSL_BULK_SIG 13526 4.52 9.65 2.69 96 HTML_MIME_NO_HTML_TAG 12531 3.39 5.89 2.49 97 TR_XM_PhishingBody 12296 3.59 6.81 2.44 98 XMSubMetaSx_00 11216 2.90 4.77 2.23 99 RCVD_IN_IADB_VOUCHED 11134 1.88 0.94 2.21 100 FROM_EXCESS_BASE64 10995 2.13 1.97 2.18 101 DKIM_INVALID 10519 2.28 2.83 2.09 102 XM_B_SpammyTLD 10099 2.96 5.62 2.01 103 BAYES_95 10028 2.73 4.78 1.99 104 MAILING_LIST_MULTI 9859 1.91 1.76 1.96 105 XMSubLongNoVowel 9124 1.36 0.08 1.81 106 XMSubGarbage 8855 1.32 0.08 1.76 107 HTML_IMAGE_RATIO_08 8333 1.97 2.84 1.66 108 T_XMDrugObfuBody_08 8285 2.13 3.50 1.65 109 XM_CamelCaseFrm001 8269 1.73 1.97 1.64 110 TooManyTo_002 8244 1.37 0.62 1.64 111 URI_NOVOWEL 8100 1.81 2.36 1.61 112 TR_XM_SpammyRelay 7587 4.85 14.17 1.51 113 RCVD_IN_IADB_OPTIN 7414 1.23 0.56 1.47 114 INVALID_MSGID 7337 1.13 0.20 1.46 115 TVD_RCVD_IP 7316 1.14 0.26 1.45 116 IN_HORDE_ADDRESS_BOOK 7072 1.06 0.11 1.40 117 XM_DK_Undo_01 7029 1.66 2.41 1.40 118 XM_GoogleGroups 6982 2.29 4.81 1.39 119 XM_B_Unsub2 6947 1.68 2.52 1.38 120 TM2_M_VERY_LONG_WORD 6891 2.90 7.17 1.37 121 MSGID_NOFQDN1 6785 1.02 0.09 1.35 122 XM_B_Phish66 6779 1.90 3.46 1.35 123 TR_XM_SpammyWords5 6373 2.29 5.17 1.27 124 XMStockSpam_06 6264 1.37 1.71 1.24 125 HELO_NODOT 6237 1.05 0.50 1.24 126 HELO_NO_DOMAIN 6233 1.04 0.50 1.24 127 XMLngstWrd_00 6163 2.16 4.78 1.22 128 T_XMDrugObfuBody_14 6146 1.78 3.35 1.22 129 BOTNET 6080 3.10 8.39 1.21 130 TO_MALFORMED 6048 0.89 0.01 1.20 131 TR_XM_UnparsRelay 6011 3.27 9.07 1.19 132 XMLngstWrd_01 5823 2.10 4.75 1.16 133 UNTRUSTED_Relay 5794 2.41 5.93 1.15 134 T_TooManySym_03 5727 0.90 0.24 1.14 135 TR_Symld_Words 5664 1.11 1.08 1.13 136 XM_B_Investor 5654 1.98 4.39 1.12 137 XM_E_Blogspot 5651 0.85 0.09 1.12 138 T_HTML_ATTACH 5637 0.91 0.31 1.12 139 TooManyTo_003 5532 0.94 0.51 1.10 140 T_OBFU_PDF_ATTACH 5532 0.85 0.15 1.10 141 TVD_SPACE_RATIO 5378 0.81 0.10 1.07 142 RELAYCOUNTRY_CA 5272 3.43 10.07 1.05 143 TR_DCC_Bayes_99 5269 6.96 23.46 1.05 144 XM_H_Long_From02 5231 0.99 0.86 1.04 145 URI_HEX 5113 1.21 1.74 1.02 146 XMBody_95 5072 0.78 0.15 1.01 147 XM_ProductURIs 5057 1.03 1.11 1.00 148 XMLngstWrd_02 4679 1.87 4.50 0.93 149 XMGappySubj_01 4547 0.71 0.19 0.90 150 XMBSHREFv2 4442 0.75 0.40 0.88 151 XMCapTrack 4435 0.74 0.33 0.88 152 RCVD_IN_MSPIKE_H5 4387 0.73 0.32 0.87 153 XMDiploma_00 4374 1.25 2.31 0.87 154 XMLngstWrd_03 4201 1.72 4.19 0.83 155 XMBdyGiftCard01 4129 0.95 1.31 0.82 156 TR_XM_Base64_M1 3974 0.81 0.86 0.79 157 XM_RXBody 3933 0.74 0.63 0.78 158 TooManyTo_004 3868 0.68 0.42 0.77 159 XMHTML_After_End 3866 0.96 1.49 0.77 160 XMLngstWrd_04 3805 1.65 4.15 0.76 161 T_FILL_THIS_FORM_SHORT 3753 1.30 2.86 0.75 162 DC_PNG_UNO_LARGO 3753 0.57 0.08 0.75 163 XM_UB50 3720 1.36 3.08 0.74 164 RCVD_IN_RP_SAFE 3680 0.74 0.77 0.73 165 XM_OfRef6 3564 1.56 3.95 0.71 166 DKIM_ADSP_CUSTOM_MED 3395 0.66 0.63 0.67 167 DC_IMAGE_SPAM_TEXT 3177 0.46 0.00 0.63 168 DC_IMAGE_SPAM_HTML 3175 0.46 0.00 0.63 169 RCVD_IN_RP_CERTIFIED 3174 0.62 0.61 0.63 170 TooManyTo_005 3138 0.56 0.38 0.62 171 XMSubMetaI_00 3131 0.90 1.67 0.62 172 HTML_TAG_BALANCE_BODY 3044 0.74 1.12 0.60 173 FVGT_m_MULTI_ODD_EMAIL 3028 0.49 0.19 0.60 174 FROM_GOV_DKIM_AU 3009 0.56 0.45 0.60 175 SpammyFromTLD_01 2996 1.24 3.03 0.60 176 XMBrknScrpt_02 2983 0.78 1.29 0.59 177 TR_XM_SpammyWords2 2822 3.63 12.22 0.56 178 TR_MetaPhish_Combo_01 2805 0.65 0.89 0.56 179 XM_ShortIntro_01 2715 0.48 0.32 0.54 180 XM_B_COPY_HTML 2651 0.58 0.72 0.53 181 HTML_TITLE_SUBJ_DIFF 2650 1.49 4.17 0.53 182 RELAYCOUNTRY_GB 2612 0.60 0.82 0.52 183 UPPERCASE_75_100 2598 1.45 4.08 0.52 184 HTTPS_HTTP_MISMATCH 2543 0.89 1.95 0.51 185 XM_B_SpammyWords4 2538 1.10 2.78 0.50 186 XMPhish30 2463 0.67 1.17 0.49 187 T_XMDrugObfuBody_00 2408 0.76 1.55 0.48 188 TM2_M_BODY_EMPTY 2386 0.40 0.19 0.47 189 XMGenDplmaNmb 2329 0.68 1.30 0.46 190 XMNoVowels 2296 0.44 0.40 0.46 191 T_XMHurry_00 2248 0.76 1.65 0.45 192 XM_H_PHPMailer 2229 0.46 0.52 0.44 193 NML_ADSP_CUSTOM_MED 2150 0.45 0.51 0.43 194 XM_B_COVIDMETA 2052 0.70 1.51 0.41 195 HTML_IMAGE_ONLY_20 2051 0.50 0.76 0.41 196 URI_TRY_3LD 2037 0.53 0.87 0.40 197 TO_NO_BRKTS_HTML_ONLY 2004 0.33 0.14 0.40 198 T_Symld_Words_02 1989 0.48 0.73 0.40 199 FORGED_GMAIL_RCVD 1989 0.42 0.51 0.40 200 MPART_ALT_DIFF_COUNT 1977 0.57 1.08 0.39 ----------------------------------------------------------------------