Email: 522368 Autolearn: 0 AvgScore: 3.27 AvgScanTime: 1.66 sec Spam: 149933 Autolearn: 0 AvgScore: 14.77 AvgScanTime: 1.79 sec Ham: 372435 Autolearn: 0 AvgScore: -1.35 AvgScanTime: 1.60 sec Time Spent Running SA: 240.34 hours Time Spent Processing Spam: 74.37 hours Time Spent Processing Ham: 165.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143981 89.29 96.03 86.58 2 DKIM_SIGNED 112331 71.87 74.92 70.64 3 XM_DK_Pass 108549 69.82 72.40 68.79 4 DCC_CHECK 107295 47.53 71.56 37.86 5 RELAYCOUNTRY_US 106097 77.98 70.76 80.88 6 DKIM_VALID 104902 67.71 69.97 66.80 7 XM_B_Unicode 101615 68.44 67.77 68.70 8 XMListUnsubscribeExists 93136 51.07 62.12 46.62 9 XM_B_SpammyWords 90618 49.10 60.44 44.54 10 DKIM_VALID_AU 77934 50.44 51.98 49.82 11 BAYES_50 62938 50.42 41.98 53.82 12 MIME_HTML_ONLY 60206 27.42 40.16 22.29 13 XM_B_Unicode3 56674 40.58 37.80 41.70 14 XM_DK_Undo_02 55364 15.43 36.93 6.78 15 XM_B_SpammyWords2 50280 22.72 33.53 18.36 16 TR_XM_DKIM_Undo 45956 12.25 30.65 4.85 17 LOC_TINY_FONT_1 45295 24.57 30.21 22.30 18 DCC_CHECK_NEGATIVE 42607 52.43 28.42 62.10 19 RELAYCOUNTRY_META 40657 10.06 27.12 3.19 20 HTML_FONT_LOW_CONTRAST 40649 26.51 27.11 26.27 21 XM_Multi_Part_URI 40647 15.68 27.11 11.07 22 BAYES_99 40247 11.66 26.84 5.54 23 FVGT_m_MULTI_ODD 38865 23.13 25.92 22.01 24 T_KAM_HTML_FONT_INVALID 38784 19.51 25.87 16.96 25 DKIM_VALID_EF 37480 25.15 25.00 25.21 26 RCVD_IN_MSPIKE_H2 35263 20.59 23.52 19.41 27 BOTNET 34722 7.75 23.16 1.55 28 UNTRUSTED_Relay 33716 7.25 22.49 1.11 29 XMSubLong 32078 20.75 21.39 20.49 30 TR_DCC_Bayes_99 31236 7.53 20.83 2.17 31 BAYES_999 31121 9.24 20.76 4.61 32 HTML_MIME_NO_HTML_TAG 29844 7.46 19.90 2.45 33 T_TM2_M_HEADER_IN_MSG 29725 27.19 19.83 30.16 34 XM_Body_Dirty_Words 28434 13.50 18.96 11.31 35 XM_UncommonTLD01 28079 7.65 18.73 3.19 36 RCVD_IN_MSPIKE_WL 27809 25.84 18.55 28.77 37 FSL_BULK_SIG 26563 10.03 17.72 6.93 38 BODY_URI_ONLY 22819 4.38 15.22 0.01 39 HTML_SHORT_LINK_IMG_1 20900 4.01 13.94 0.02 40 HTML_TAG_BALANCE_CENTER 20730 4.08 13.83 0.15 41 LOTS_OF_MONEY 20263 10.16 13.51 8.82 42 XMSexyCombo_05 19844 6.25 13.24 3.44 43 TR_XM_SpammyWords4 17506 7.21 11.68 5.41 44 RCVD_IN_MSPIKE_H3 17482 14.06 11.66 15.02 45 XM_B_Unsub 16501 11.45 11.01 11.62 46 BOTNET_IPINHOSTNAME 16489 6.30 11.00 4.42 47 XM_B_SpammyWords3 16074 5.90 10.72 3.96 48 TR_XM_SpammyRelay 16022 3.96 10.69 1.25 49 HTML_IMAGE_ONLY_04 15769 3.05 10.52 0.05 50 TR_XM_SpammyWords2 15759 3.59 10.51 0.80 51 UNPARSEABLE_RELAY 15683 8.36 10.46 7.52 52 XMSubMetaSx_00 15468 6.00 10.32 4.26 53 TR_XM_UnparsRelay 15206 7.00 10.14 5.74 54 XM_UB50 14763 3.32 9.85 0.69 55 MPART_ALT_DIFF 13936 8.12 9.29 7.64 56 HTML_SHORT_CENTER 13425 2.57 8.95 0.00 57 XM_SPF_SoftFail 12461 3.69 8.31 1.82 58 BOTNET_NORDNS 11338 2.18 7.56 0.02 59 XM_Evil_Numbers_Gen 11263 7.37 7.51 7.31 60 XM_SendGrid 11244 6.49 7.50 6.08 61 RCVD_IN_BL_SPAMCOP_NET 11175 2.98 7.45 1.18 62 BAYES_80 10401 4.89 6.94 4.07 63 BAYES_60 10141 8.43 6.76 9.10 64 RELAYCOUNTRY_RU 10032 1.94 6.69 0.03 65 SpammyFromTLD_02 9926 2.26 6.62 0.50 66 LotsOfNums_01 9830 8.69 6.56 9.54 67 RCVD_IN_MSPIKE_H4 9759 9.77 6.51 11.08 68 HTML_IMAGE_RATIO_02 8954 6.21 5.97 6.31 69 HTML_IMAGE_ONLY_08 8936 1.78 5.96 0.09 70 TooManyTo_001 8278 7.70 5.52 8.58 71 MIME_HTML_MOSTLY 7918 3.32 5.28 2.53 72 TVD_SPACE_RATIO 7873 2.28 5.25 1.09 73 TR_XM_PhishingBody 7773 3.63 5.18 3.01 74 SpammyFromTLD_01 7486 1.89 4.99 0.64 75 DKIM_INVALID 7429 4.16 4.95 3.84 76 MIME_HTML_ONLY_MULTI 7392 5.25 4.93 5.38 77 XM_B_Phish_Phrases 7240 4.16 4.83 3.89 78 TR_XM_SPAMCOP 7082 1.87 4.72 0.73 79 XM_H_Long_From01 7035 4.87 4.69 4.94 80 URI_NOVOWEL 6736 3.46 4.49 3.04 81 T_REMOTE_IMAGE 6646 3.65 4.43 3.34 82 TR_XM_DK_SendGrid 6624 3.96 4.42 3.78 83 RELAYCOUNTRY_CA 6446 1.82 4.30 0.83 84 RCVD_IN_MSPIKE_BL 6349 1.88 4.23 0.93 85 TR_XM_MSPIKECOMBO 6336 1.87 4.23 0.92 86 XM_B_Investor 6255 2.15 4.17 1.33 87 TM2_M_VERY_LONG_WORD 6210 2.12 4.14 1.30 88 TR_XM_SpammyWords5 6177 2.07 4.12 1.25 89 BAYES_00 6065 10.39 4.05 12.94 90 GOOG_STO_IMG_HTML 6033 1.16 4.02 0.01 91 BAYES_95 5906 2.94 3.94 2.54 92 SUBJ_ALL_CAPS 5786 2.33 3.86 1.71 93 XMNumbers 5748 3.87 3.83 3.89 94 RELAYCOUNTRY_PL 5737 1.12 3.83 0.04 95 HTML_IMAGE_RATIO_04 5686 5.70 3.79 6.47 96 XM_OfRef6 5576 1.79 3.72 1.02 97 BAYES_40 5526 4.88 3.69 5.36 98 MIME_QP_LONG_LINE 5502 5.94 3.67 6.85 99 KHOP_HELO_FCRDNS 5246 2.13 3.50 1.57 100 TM2_M_URI_OPT_OUT 5197 4.27 3.47 4.59 101 T_XMDrugObfuBody_08 5189 2.14 3.46 1.61 102 XMDiploma_00 4926 2.03 3.29 1.53 103 TR_XM_MaxUnsub 4896 1.56 3.27 0.88 104 XM_B_SpammyTLD 4538 2.35 3.03 2.07 105 XM_B_Phish66 4504 2.13 3.00 1.78 106 RCVD_IN_VALIDITY_SAFE 4486 4.15 2.99 4.61 107 T_XMDrugObfuBody_14 4485 2.50 2.99 2.30 108 BAYES_20 4412 3.73 2.94 4.05 109 XM_GoogleGroups 4374 2.16 2.92 1.85 110 T_HTML_TAG_BALANCE_CENTER 4097 0.80 2.73 0.02 111 XMStrtUSub 4086 3.70 2.73 4.09 112 BAYES_05 3942 2.59 2.63 2.57 113 TR_XM_SpammyWords3 3829 1.05 2.55 0.44 114 RCVD_IN_IADB_LISTED 3826 4.90 2.55 5.85 115 HTML_IMAGE_RATIO_06 3761 3.63 2.51 4.08 116 XMBody_17 3595 1.01 2.40 0.45 117 T_FILL_THIS_FORM_SHORT 3561 1.28 2.38 0.84 118 T_TooManySym_01 3550 4.48 2.37 5.33 119 RCVD_IN_VALIDITY_CERTIFIED 3532 3.57 2.36 4.06 120 XMLngstWrd_00 3507 1.27 2.34 0.84 121 BODY_EMPTY 3480 0.67 2.32 0.01 122 XMLngstWrd_01 3470 1.21 2.31 0.77 123 XMLngstWrd_02 3394 1.14 2.26 0.69 124 XMLngstWrd_03 3340 1.06 2.23 0.59 125 HTML_TITLE_SUBJ_DIFF 3339 0.85 2.23 0.30 126 HTML_IMAGE_RATIO_08 3306 2.59 2.20 2.75 127 JH_SPAMMY_HEADERS 3299 0.63 2.20 0.00 128 XMLngstWrd_04 3275 0.99 2.18 0.51 129 RCVD_IN_IADB_SPF 3250 4.30 2.17 5.16 130 XM_CamelCaseFrm001 3213 1.94 2.14 1.86 131 XMSexyCombo_01 3186 1.51 2.12 1.26 132 UPPERCASE_75_100 3181 0.83 2.12 0.31 133 MIXED_CENTER_CASE 3153 0.60 2.10 0.00 134 MIXED_HREF_CASE 3152 0.60 2.10 0.00 135 MIXED_FONT_CASE 3150 0.60 2.10 0.00 136 MIXED_IMG_CASE 3142 0.60 2.10 0.00 137 MIXED_AREA_CASE 3141 0.60 2.09 0.00 138 XM_B_COVIDMETA 3133 0.98 2.09 0.53 139 T_XMDrugObfuBody_00 3130 1.65 2.09 1.48 140 MAILING_LIST_MULTI 3119 2.54 2.08 2.72 141 XM_DIRTYINTL 3115 0.78 2.08 0.25 142 XM_DK_Undo_01 3076 1.85 2.05 1.76 143 XM_BadFromFormat 3070 0.66 2.05 0.10 144 TM2_M_A_HREF_HREF 3051 1.10 2.03 0.72 145 RCVD_IN_IADB_DK 3030 3.77 2.02 4.48 146 RCVD_IN_IADB_SENDERID 3003 3.89 2.00 4.65 147 HK_RANDOM_FROM 2999 0.67 2.00 0.14 148 ALL_TRUSTED 2874 12.53 1.92 16.80 149 FROM_EXCESS_BASE64 2807 2.55 1.87 2.82 150 RCVD_IN_MSPIKE_L3 2795 0.80 1.86 0.37 151 XM_UB60 2795 0.59 1.86 0.07 152 TR_XM_SB_Phish 2761 1.99 1.84 2.05 153 RELAYCOUNTRY_UA 2739 0.53 1.83 0.00 154 HTML_FONT_SIZE_LARGE 2718 0.57 1.81 0.07 155 XMSubPhish11 2673 1.96 1.78 2.03 156 XM_B_SpammyWords4 2663 1.07 1.78 0.78 157 RELAYCOUNTRY_FR 2613 0.62 1.74 0.16 158 T_XMHurry_00 2589 0.91 1.73 0.59 159 XMGenDplmaNmb 2507 1.04 1.67 0.79 160 TR_XM_NoHeaderRelay 2497 0.60 1.67 0.18 161 FROM_MISSP_REPLYTO 2481 0.48 1.65 0.01 162 XM_B_Unsub2 2475 1.61 1.65 1.59 163 TR_LOTS_OF_MONEY3 2468 0.85 1.65 0.53 164 HDRS_MISSP 2392 0.47 1.60 0.02 165 URI_HEX 2379 1.48 1.59 1.43 166 XM_URI_RBL 2336 0.53 1.56 0.11 167 USER_IN_DEF_DKIM_WL 2258 8.22 1.51 10.93 168 HK_RANDOM_REPLYTO 2194 0.48 1.46 0.09 169 TR_XM_PHPDW 2141 0.71 1.43 0.42 170 URIBL_DBL_SPAM 2134 0.41 1.42 0.01 171 NO_DNS_FOR_FROM 2116 0.70 1.41 0.41 172 XMStockSpam_06 2094 1.20 1.40 1.13 173 RELAYCOUNTRY_IN 2083 0.45 1.39 0.07 174 RCVD_IN_IADB_VOUCHED 2072 2.85 1.38 3.44 175 TR_XM_PHPForged 2071 0.67 1.38 0.38 176 TR_XM_FormFill2 2037 0.66 1.36 0.38 177 DKIM_ADSP_NXDOMAIN 2034 0.71 1.36 0.45 178 TR_XM_COVIDMETA4 2032 0.59 1.36 0.29 179 XM_H_PHPOS 2029 0.65 1.35 0.37 180 TR_XM_INV_DKIM 2025 0.63 1.35 0.33 181 RELAYCOUNTRY_AU 1997 0.59 1.33 0.29 182 XM_Body_Dirty_Words_01 1975 0.55 1.32 0.25 183 URIBL_BLACK 1962 0.41 1.31 0.05 184 TR_XM_FormFill 1962 0.41 1.31 0.05 185 RCVD_IN_MSPIKE_L5 1935 0.52 1.29 0.21 186 URI_GOOG_STO_SPAMMY 1930 0.37 1.29 0.00 187 XM_H_Undi_Recip 1895 0.46 1.26 0.14 188 URI_TRY_3LD 1857 0.95 1.24 0.84 189 RCVD_IN_VALIDITY_RPBL 1850 0.42 1.23 0.10 190 XM_UB99 1836 0.35 1.22 0.00 191 TR_Symld_Words 1787 1.58 1.19 1.73 192 HTML_FONT_TINY_NORDNS 1768 0.43 1.18 0.13 193 XMBrknScrpt_02 1754 0.88 1.17 0.76 194 DIET_1 1749 0.83 1.17 0.69 195 HTML_FONT_SIZE_HUGE 1719 0.37 1.15 0.06 196 XM_ProductURIs 1712 1.00 1.14 0.94 197 TR_XM_COVIDMETA1 1698 0.49 1.13 0.23 198 DKIM_ADSP_CUSTOM_MED 1639 0.95 1.09 0.89 199 XMPhish30 1630 0.77 1.09 0.65 200 FROM_SUSPICIOUS_NTLD 1617 0.34 1.08 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 322463 89.29 96.03 86.58 2 RELAYCOUNTRY_US 301243 77.98 70.76 80.88 3 DKIM_SIGNED 263103 71.87 74.92 70.64 4 XM_DK_Pass 256181 69.82 72.40 68.79 5 XM_B_Unicode 255877 68.44 67.77 68.70 6 DKIM_VALID 248805 67.71 69.97 66.80 7 DCC_CHECK_NEGATIVE 231290 52.43 28.42 62.10 8 BAYES_50 200447 50.42 41.98 53.82 9 DKIM_VALID_AU 185534 50.44 51.98 49.82 10 XMListUnsubscribeExists 173630 51.07 62.12 46.62 11 XM_B_SpammyWords 165888 49.10 60.44 44.54 12 XM_B_Unicode3 155293 40.58 37.80 41.70 13 DCC_CHECK 140999 47.53 71.56 37.86 14 T_TM2_M_HEADER_IN_MSG 112329 27.19 19.83 30.16 15 RCVD_IN_MSPIKE_WL 107162 25.84 18.55 28.77 16 HTML_FONT_LOW_CONTRAST 97855 26.51 27.11 26.27 17 DKIM_VALID_EF 93880 25.15 25.00 25.21 18 LOC_TINY_FONT_1 83045 24.57 30.21 22.30 19 MIME_HTML_ONLY 83026 27.42 40.16 22.29 20 FVGT_m_MULTI_ODD 81958 23.13 25.92 22.01 21 XMSubLong 76296 20.75 21.39 20.49 22 RCVD_IN_MSPIKE_H2 72282 20.59 23.52 19.41 23 XM_B_SpammyWords2 68395 22.72 33.53 18.36 24 T_KAM_HTML_FONT_INVALID 63148 19.51 25.87 16.96 25 ALL_TRUSTED 62579 12.53 1.92 16.80 26 RCVD_IN_MSPIKE_H3 55957 14.06 11.66 15.02 27 BAYES_00 48196 10.39 4.05 12.94 28 XM_B_Unsub 43286 11.45 11.01 11.62 29 XM_Body_Dirty_Words 42104 13.50 18.96 11.31 30 RCVD_IN_MSPIKE_H4 41273 9.77 6.51 11.08 31 XM_Multi_Part_URI 41243 15.68 27.11 11.07 32 USER_IN_DEF_DKIM_WL 40694 8.22 1.51 10.93 33 LotsOfNums_01 35546 8.69 6.56 9.54 34 BAYES_60 33888 8.43 6.76 9.10 35 LOTS_OF_MONEY 32834 10.16 13.51 8.82 36 TooManyTo_001 31950 7.70 5.52 8.58 37 MPART_ALT_DIFF 28463 8.12 9.29 7.64 38 UNPARSEABLE_RELAY 27995 8.36 10.46 7.52 39 XM_Evil_Numbers_Gen 27236 7.37 7.51 7.31 40 XM_DKIMWhitelistDomains 27168 5.22 0.06 7.29 41 TR_XM_DK_Bayes 26990 5.34 0.61 7.25 42 TR_XM_DK_Bayes1 26175 5.18 0.58 7.03 43 FSL_BULK_SIG 25808 10.03 17.72 6.93 44 MIME_QP_LONG_LINE 25518 5.94 3.67 6.85 45 XM_DK_Undo_02 25255 15.43 36.93 6.78 46 IN_ZIMBRA_NJ_WHITELIST 24621 4.73 0.07 6.61 47 HTML_IMAGE_RATIO_04 24091 5.70 3.79 6.47 48 XM_H_Trusted_IP 23616 4.52 0.00 6.34 49 HTML_IMAGE_RATIO_02 23510 6.21 5.97 6.31 50 XM_SendGrid 22646 6.49 7.50 6.08 51 TR_XM_DK_Bayes2 22492 4.42 0.41 6.04 52 RCVD_IN_IADB_LISTED 21795 4.90 2.55 5.85 53 TR_XM_UnparsRelay 21369 7.00 10.14 5.74 54 BAYES_99 20635 11.66 26.84 5.54 55 TR_XM_SpammyWords4 20136 7.21 11.68 5.41 56 MIME_HTML_ONLY_MULTI 20034 5.25 4.93 5.38 57 BAYES_40 19981 4.88 3.69 5.36 58 XM_PDF 19945 4.04 0.77 5.36 59 T_TooManySym_01 19835 4.48 2.37 5.33 60 RCVD_IN_IADB_SPF 19204 4.30 2.17 5.16 61 XM_H_Long_From01 18401 4.87 4.69 4.94 62 TR_XM_DKIM_Undo 18060 12.25 30.65 4.85 63 RCVD_IN_IADB_SENDERID 17303 3.89 2.00 4.65 64 RCVD_IN_VALIDITY_SAFE 17179 4.15 2.99 4.61 65 BAYES_999 17171 9.24 20.76 4.61 66 TM2_M_URI_OPT_OUT 17087 4.27 3.47 4.59 67 RCVD_IN_IADB_DK 16689 3.77 2.02 4.48 68 BOTNET_IPINHOSTNAME 16446 6.30 11.00 4.42 69 XMSubMetaSx_00 15883 6.00 10.32 4.26 70 XMStrtUSub 15236 3.70 2.73 4.09 71 HTML_IMAGE_RATIO_06 15213 3.63 2.51 4.08 72 BAYES_80 15152 4.89 6.94 4.07 73 RCVD_IN_VALIDITY_CERTIFIED 15120 3.57 2.36 4.06 74 BAYES_20 15094 3.73 2.94 4.05 75 XM_B_SpammyWords3 14751 5.90 10.72 3.96 76 ANY_BOUNCE_MESSAGE 14676 2.98 0.60 3.94 77 BOUNCE_MESSAGE 14676 2.98 0.60 3.94 78 XMNumbers 14490 3.87 3.83 3.89 79 XM_B_Phish_Phrases 14487 4.16 4.83 3.89 80 DKIM_INVALID 14298 4.16 4.95 3.84 81 TR_XM_DK_SendGrid 14066 3.96 4.42 3.78 82 RCVD_IN_IADB_VOUCHED 12828 2.85 1.38 3.44 83 XMSexyCombo_05 12796 6.25 13.24 3.44 84 T_REMOTE_IMAGE 12445 3.65 4.43 3.34 85 RELAYCOUNTRY_META 11884 10.06 27.12 3.19 86 XM_UncommonTLD01 11869 7.65 18.73 3.19 87 URI_NOVOWEL 11330 3.46 4.49 3.04 88 T_TooManySym_02 11254 2.33 0.61 3.02 89 TR_XM_PhishingBody 11206 3.63 5.18 3.01 90 FROM_EXCESS_BASE64 10496 2.55 1.87 2.82 91 HTML_IMAGE_RATIO_08 10237 2.59 2.20 2.75 92 MAILING_LIST_MULTI 10126 2.54 2.08 2.72 93 RCVD_IN_MSPIKE_H5 9932 2.01 0.38 2.67 94 BAYES_05 9567 2.59 2.63 2.57 95 BAYES_95 9467 2.94 3.94 2.54 96 MIME_HTML_MOSTLY 9407 3.32 5.28 2.53 97 HTML_MIME_NO_HTML_TAG 9117 7.46 19.90 2.45 98 HTML_FONT_FACE_BAD 9049 1.96 0.81 2.43 99 T_XMDrugObfuBody_14 8572 2.50 2.99 2.30 100 RCVD_IN_IADB_OPTIN 8361 1.86 0.90 2.24 101 TR_DCC_Bayes_99 8095 7.53 20.83 2.17 102 XM_B_SpammyTLD 7713 2.35 3.03 2.07 103 TR_XM_SB_Phish 7641 1.99 1.84 2.05 104 TooManyTo_002 7555 1.62 0.60 2.03 105 XMSubPhish11 7542 1.96 1.78 2.03 106 INVALID_MSGID 7240 1.42 0.12 1.94 107 XM_CamelCaseFrm001 6924 1.94 2.14 1.86 108 XM_GoogleGroups 6904 2.16 2.92 1.85 109 XM_SPF_SoftFail 6789 3.69 8.31 1.82 110 IN_HORDE_ADDRESS_BOOK 6674 1.30 0.07 1.79 111 XM_B_Phish66 6618 2.13 3.00 1.78 112 XM_DK_Undo_01 6570 1.85 2.05 1.76 113 TR_Symld_Words 6446 1.58 1.19 1.73 114 MSGID_NOFQDN1 6382 1.23 0.03 1.71 115 SUBJ_ALL_CAPS 6375 2.33 3.86 1.71 116 TO_MALFORMED 6033 1.16 0.02 1.62 117 T_XMDrugObfuBody_08 5990 2.14 3.46 1.61 118 XM_B_Unsub2 5937 1.61 1.65 1.59 119 HELO_NODOT 5887 1.27 0.51 1.58 120 HELO_NO_DOMAIN 5885 1.27 0.50 1.58 121 KHOP_HELO_FCRDNS 5859 2.13 3.50 1.57 122 BOTNET 5771 7.75 23.16 1.55 123 XMDiploma_00 5692 2.03 3.29 1.53 124 T_XMDrugObfuBody_00 5511 1.65 2.09 1.48 125 URI_HEX 5343 1.48 1.59 1.43 126 XMSubNoVowel 5147 1.12 0.46 1.38 127 TVD_RCVD_IP 5013 0.98 0.08 1.35 128 XMGappySubj_01 5007 1.00 0.16 1.34 129 XM_B_Investor 4956 2.15 4.17 1.33 130 TM2_M_VERY_LONG_WORD 4853 2.12 4.14 1.30 131 TooManyTo_003 4829 1.05 0.45 1.30 132 XMSexyCombo_01 4705 1.51 2.12 1.26 133 TR_XM_SpammyRelay 4666 3.96 10.69 1.25 134 TR_XM_SpammyWords5 4653 2.07 4.12 1.25 135 RCVD_IN_BL_SPAMCOP_NET 4399 2.98 7.45 1.18 136 XMStockSpam_06 4192 1.20 1.40 1.13 137 UNTRUSTED_Relay 4147 7.25 22.49 1.11 138 HTML_IMAGE_ONLY_20 4070 0.82 0.16 1.09 139 TVD_SPACE_RATIO 4050 2.28 5.25 1.09 140 XM_H_Long_From02 3910 0.96 0.74 1.05 141 XMCapTrack 3858 0.89 0.53 1.04 142 XM_OfRef6 3791 1.79 3.72 1.02 143 XMBSHREFv2 3779 0.80 0.26 1.01 144 XM_ProductURIs 3518 1.00 1.14 0.94 145 RCVD_IN_RP_SAFE 3512 0.85 0.63 0.94 146 RCVD_IN_MSPIKE_BL 3460 1.88 4.23 0.93 147 TR_XM_MSPIKECOMBO 3434 1.87 4.23 0.92 148 TooManyTo_004 3404 0.75 0.33 0.91 149 DKIM_ADSP_CUSTOM_MED 3318 0.95 1.09 0.89 150 TR_XM_MaxUnsub 3260 1.56 3.27 0.88 151 URI_TRY_3LD 3122 0.95 1.24 0.84 152 XMLngstWrd_00 3122 1.27 2.34 0.84 153 T_FILL_THIS_FORM_SHORT 3120 1.28 2.38 0.84 154 RCVD_IN_RP_CERTIFIED 3084 0.73 0.49 0.83 155 RELAYCOUNTRY_CA 3074 1.82 4.30 0.83 156 TR_XM_SpammyWords2 2990 3.59 10.51 0.80 157 SHORT_URI_2 2980 0.70 0.44 0.80 158 XMGenDplmaNmb 2950 1.04 1.67 0.79 159 XMHTML_After_End 2936 0.79 0.80 0.79 160 XMBdyGiftCard01 2929 0.84 0.97 0.79 161 T_OBFU_PDF_ATTACH 2907 0.59 0.12 0.78 162 XM_B_SpammyWords4 2901 1.07 1.78 0.78 163 XMLngstWrd_01 2876 1.21 2.31 0.77 164 XMSubMetaSxObfu_03 2853 0.70 0.52 0.77 165 XMBrknScrpt_02 2820 0.88 1.17 0.76 166 T_TooManySym_03 2798 0.59 0.21 0.75 167 FROM_GOV_DKIM_AU 2747 0.56 0.13 0.74 168 XMBody_95 2722 0.56 0.13 0.73 169 HTML_TAG_BALANCE_BODY 2721 0.74 0.76 0.73 170 TR_MetaPhish_Combo_01 2713 0.75 0.80 0.73 171 TR_XM_SPAMCOP 2709 1.87 4.72 0.73 172 TM2_M_A_HREF_HREF 2692 1.10 2.03 0.72 173 RELAYCOUNTRY_GB 2692 0.75 0.80 0.72 174 TooManyTo_005 2677 0.59 0.29 0.72 175 XM_B_COPY_HTML 2606 0.76 0.92 0.70 176 DIET_1 2588 0.83 1.17 0.69 177 XMLngstWrd_02 2560 1.14 2.26 0.69 178 XM_UB50 2560 3.32 9.85 0.69 179 HTTPS_HTTP_MISMATCH 2549 0.79 1.05 0.68 180 XM_D_tchamptons_WL 2463 0.47 0.00 0.66 181 XM_RXBody 2433 0.55 0.29 0.65 182 XMPhish30 2410 0.77 1.09 0.65 183 SpammyFromTLD_01 2377 1.89 4.99 0.64 184 TR_MSPIKEBAYES00 2314 0.45 0.02 0.62 185 XMLngstWrd_03 2199 1.06 2.23 0.59 186 T_XMHurry_00 2188 0.91 1.73 0.59 187 XMNoVowels 2173 0.55 0.48 0.58 188 XMSexyCombo_04 2105 0.55 0.53 0.57 189 XM_ShortIntro_01 2059 0.50 0.36 0.55 190 TVD_PH_BODY_ACCOUNTS_PRE 2034 0.42 0.11 0.55 191 NML_ADSP_CUSTOM_MED 2030 0.56 0.61 0.55 192 XM_B_COVIDMETA 1987 0.98 2.09 0.53 193 TR_LOTS_OF_MONEY3 1980 0.85 1.65 0.53 194 XM_H_PHPMailer 1929 0.58 0.72 0.52 195 XMLngstWrd_04 1914 0.99 2.18 0.51 196 FORGED_GMAIL_RCVD 1891 0.58 0.77 0.51 197 SpammyFromTLD_02 1861 2.26 6.62 0.50 198 MPART_ALT_DIFF_COUNT 1818 0.52 0.58 0.49 199 XM_B_DNDMA 1786 0.56 0.76 0.48 200 TM2_M_BODY_EMPTY 1781 0.46 0.43 0.48 ----------------------------------------------------------------------