Email: 527197 Autolearn: 0 AvgScore: 2.20 AvgScanTime: 1.67 sec Spam: 123548 Autolearn: 0 AvgScore: 13.28 AvgScanTime: 1.91 sec Ham: 403649 Autolearn: 0 AvgScore: -1.20 AvgScanTime: 1.60 sec Time Spent Running SA: 244.58 hours Time Spent Processing Spam: 65.63 hours Time Spent Processing Ham: 178.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 117358 89.37 94.99 87.65 2 DKIM_SIGNED 106791 73.02 86.44 68.91 3 XM_DK_Pass 102662 71.04 83.09 67.35 4 DKIM_VALID 98754 68.68 79.93 65.23 5 RELAYCOUNTRY_US 96779 77.85 78.33 77.70 6 XM_B_Unicode 94184 70.79 76.23 69.12 7 DCC_CHECK 89483 43.89 72.43 35.16 8 XMListUnsubscribeExists 88739 50.94 71.83 44.54 9 XM_B_SpammyWords 85849 52.61 69.49 47.45 10 DKIM_VALID_AU 72829 50.44 58.95 47.84 11 BAYES_50 57882 51.89 46.85 53.44 12 XM_B_Unicode3 53279 41.21 43.12 40.63 13 XM_DK_Undo_02 50009 14.15 40.48 6.10 14 XM_B_SpammyWords2 47181 25.41 38.19 21.50 15 LOC_TINY_FONT_1 44720 24.78 36.20 21.28 16 TR_XM_DKIM_Undo 40772 11.34 33.00 4.70 17 HTML_FONT_LOW_CONTRAST 39915 26.38 32.31 24.56 18 DKIM_VALID_EF 38807 26.87 31.41 25.49 19 MIME_HTML_ONLY 38507 24.44 31.17 22.38 20 T_KAM_HTML_FONT_INVALID 37570 21.04 30.41 18.17 21 FVGT_m_MULTI_ODD 37091 23.37 30.02 21.33 22 DCC_CHECK_NEGATIVE 34017 56.07 27.53 64.80 23 BAYES_99 33478 9.64 27.10 4.30 24 RCVD_IN_MSPIKE_H2 30887 21.30 25.00 20.17 25 XMSubLong 30382 22.46 24.59 21.81 26 T_TM2_M_HEADER_IN_MSG 28228 29.19 22.85 31.14 27 XM_Body_Dirty_Words 26629 15.36 21.55 13.47 28 RELAYCOUNTRY_META 26082 7.35 21.11 3.14 29 BAYES_999 25546 7.44 20.68 3.38 30 RCVD_IN_MSPIKE_WL 25171 25.74 20.37 27.38 31 TR_DCC_Bayes_99 24317 5.79 19.68 1.54 32 XM_Multi_Part_URI 20741 12.54 16.79 11.24 33 LOTS_OF_MONEY 17114 8.62 13.85 7.02 34 TR_XM_SpammyRelay 16786 4.22 13.59 1.35 35 BOTNET_IPINHOSTNAME 16549 6.22 13.39 4.03 36 XM_UncommonTLD01 15696 5.34 12.70 3.08 37 RCVD_IN_MSPIKE_H3 15611 14.00 12.64 14.42 38 UNPARSEABLE_RELAY 15509 8.94 12.55 7.83 39 UNTRUSTED_Relay 15291 3.71 12.38 1.06 40 BOTNET 14976 4.02 12.12 1.54 41 XM_B_Unsub 14845 11.11 12.02 10.83 42 TR_XM_UnparsRelay 14781 7.37 11.96 5.96 43 XM_B_SpammyWords3 14718 5.57 11.91 3.63 44 MPART_ALT_DIFF 14493 7.45 11.73 6.14 45 FSL_BULK_SIG 13993 7.11 11.33 5.83 46 TR_XM_SpammyWords4 13795 6.14 11.17 4.60 47 XM_Evil_Numbers_Gen 12375 8.07 10.02 7.47 48 XMSexyCombo_05 12009 6.39 9.72 5.37 49 TR_XM_SpammyWords2 11824 2.90 9.57 0.85 50 XM_SendGrid 11497 7.17 9.31 6.51 51 RCVD_IN_BL_SPAMCOP_NET 11268 2.86 9.12 0.95 52 HTML_IMAGE_RATIO_02 10538 6.00 8.53 5.23 53 BAYES_60 9936 10.16 8.04 10.81 54 LotsOfNums_01 9934 8.94 8.04 9.22 55 MIME_HTML_MOSTLY 9524 3.58 7.71 2.32 56 XMSubMetaSx_00 9264 5.31 7.50 4.64 57 BAYES_80 9158 4.68 7.41 3.84 58 RCVD_IN_MSPIKE_H4 8889 9.92 7.19 10.76 59 XM_UB50 8478 2.12 6.86 0.67 60 DKIM_INVALID 8037 4.34 6.51 3.68 61 URI_NOVOWEL 8031 3.57 6.50 2.67 62 TR_XM_PhishingBody 8015 3.99 6.49 3.22 63 TooManyTo_001 7956 10.43 6.44 11.65 64 XM_H_Long_From01 7523 5.17 6.09 4.88 65 XM_B_Investor 7188 2.66 5.82 1.69 66 XM_B_Phish_Phrases 6991 3.86 5.66 3.31 67 SpammyFromTLD_02 6650 1.54 5.38 0.36 68 TR_XM_DK_SendGrid 6575 4.31 5.32 4.00 69 TR_XM_SPAMCOP 6344 1.48 5.13 0.36 70 MIME_HTML_ONLY_MULTI 6302 4.48 5.10 4.29 71 HTML_MIME_NO_HTML_TAG 6272 2.71 5.08 1.99 72 RELAYCOUNTRY_CA 6198 1.74 5.02 0.74 73 SpammyFromTLD_01 6187 1.68 5.01 0.66 74 HTML_IMAGE_RATIO_04 6131 5.05 4.96 5.07 75 MIME_QP_LONG_LINE 6032 6.64 4.88 7.18 76 RCVD_IN_MSPIKE_BL 5938 1.89 4.81 1.00 77 TR_XM_MSPIKECOMBO 5932 1.88 4.80 0.99 78 TM2_M_URI_OPT_OUT 5873 4.39 4.75 4.28 79 XMStrtUSub 5793 4.50 4.69 4.45 80 XM_SPF_SoftFail 5585 2.60 4.52 2.01 81 KHOP_HELO_FCRDNS 5449 2.28 4.41 1.62 82 T_REMOTE_IMAGE 4894 5.71 3.96 6.25 83 TM2_M_VERY_LONG_WORD 4883 1.83 3.95 1.19 84 RELAYCOUNTRY_FR 4774 1.06 3.86 0.20 85 JH_SPAMMY_HEADERS 4650 0.88 3.76 0.00 86 XM_B_Phish66 4648 2.35 3.76 1.92 87 RCVD_IN_VALIDITY_SAFE 4621 4.43 3.74 4.64 88 BAYES_95 4618 2.66 3.74 2.33 89 TR_XM_MaxUnsub 4530 1.30 3.67 0.58 90 XMNumbers 4222 3.96 3.42 4.12 91 TR_XM_SpammyWords5 4221 1.83 3.42 1.34 92 HTML_IMAGE_RATIO_06 4146 4.46 3.36 4.80 93 T_XMDrugObfuBody_08 4139 1.98 3.35 1.56 94 XMSexyCombo_01 3934 1.79 3.18 1.36 95 T_XMDrugObfuBody_14 3794 2.34 3.07 2.11 96 XM_B_SpammyTLD 3792 2.17 3.07 1.89 97 TR_XM_SpammyWords3 3684 1.08 2.98 0.49 98 HTML_IMAGE_RATIO_08 3644 2.64 2.95 2.54 99 RCVD_IN_VALIDITY_CERTIFIED 3634 3.83 2.94 4.10 100 ALL_TRUSTED 3575 16.13 2.89 20.18 101 SUBJ_ALL_CAPS 3568 1.80 2.89 1.47 102 XM_OfRef6 3403 1.37 2.75 0.95 103 T_TooManySym_01 3295 4.47 2.67 5.02 104 XMDiploma_00 3258 1.71 2.64 1.43 105 RCVD_IN_IADB_LISTED 3190 4.94 2.58 5.66 106 XM_DIRTYINTL 3083 0.80 2.50 0.29 107 XM_DK_Undo_01 3049 1.87 2.47 1.68 108 BAYES_40 3018 5.02 2.44 5.81 109 TR_XM_SB_Phish 2990 2.04 2.42 1.92 110 XM_GoogleGroups 2927 1.50 2.37 1.23 111 T_FILL_THIS_FORM_SHORT 2902 1.16 2.35 0.79 112 XM_URI_RBL 2894 0.63 2.34 0.11 113 XM_B_Unsub2 2852 1.94 2.31 1.83 114 URIBL_DBL_SPAM 2837 0.55 2.30 0.01 115 XMSubPhish11 2744 1.97 2.22 1.90 116 FROM_EXCESS_BASE64 2631 2.23 2.13 2.27 117 TR_XM_PHPDW 2615 0.71 2.12 0.29 118 XM_B_SpammyWords4 2599 0.86 2.10 0.48 119 XM_B_COVIDMETA 2583 0.84 2.09 0.46 120 RCVD_IN_IADB_SPF 2571 4.31 2.08 4.99 121 XMStockSpam_06 2540 1.14 2.06 0.86 122 RCVD_IN_MSPIKE_L3 2528 0.79 2.05 0.40 123 BAYES_20 2501 3.75 2.02 4.28 124 XMLngstWrd_00 2492 1.05 2.02 0.76 125 XM_CamelCaseFrm001 2481 1.79 2.01 1.72 126 XMBody_17 2477 0.76 2.00 0.38 127 MAILING_LIST_MULTI 2473 2.26 2.00 2.33 128 GOOG_STO_IMG_HTML 2460 0.47 1.99 0.00 129 URI_HEX 2442 1.41 1.98 1.23 130 XMLngstWrd_01 2433 0.99 1.97 0.69 131 HTML_IMAGE_ONLY_08 2431 0.53 1.97 0.09 132 T_XMDrugObfuBody_00 2401 0.94 1.94 0.64 133 HTML_TAG_BALANCE_CENTER 2394 0.53 1.94 0.10 134 RCVD_IN_IADB_DK 2382 3.78 1.93 4.35 135 TR_XM_PHPForged 2364 0.63 1.91 0.24 136 RCVD_IN_IADB_SENDERID 2358 3.88 1.91 4.49 137 TR_XM_FormFill2 2345 0.63 1.90 0.24 138 XMLngstWrd_02 2341 0.89 1.89 0.59 139 XM_H_PHPOS 2319 0.62 1.88 0.23 140 USER_IN_DEF_DKIM_WL 2294 8.58 1.86 10.64 141 XMLngstWrd_03 2276 0.79 1.84 0.47 142 RELAYCOUNTRY_AU 2264 0.66 1.83 0.30 143 HTML_TITLE_SUBJ_DIFF 2248 0.56 1.82 0.17 144 XMLngstWrd_04 2210 0.71 1.79 0.38 145 URIBL_BLACK 2163 0.44 1.75 0.04 146 TR_XM_COVIDMETA4 2150 0.67 1.74 0.34 147 UPPERCASE_75_100 2093 0.53 1.69 0.17 148 MIXED_CENTER_CASE 2053 0.39 1.66 0.00 149 MIXED_HREF_CASE 2052 0.39 1.66 0.00 150 MIXED_FONT_CASE 2051 0.39 1.66 0.00 151 MIXED_IMG_CASE 2044 0.39 1.65 0.00 152 MIXED_AREA_CASE 2044 0.39 1.65 0.00 153 TR_XM_INV_DKIM 1987 0.49 1.61 0.15 154 TR_XM_NoHeaderRelay 1982 0.50 1.60 0.17 155 XMGenDplmaNmb 1960 0.90 1.59 0.69 156 TM2_M_A_HREF_HREF 1954 0.62 1.58 0.33 157 XM_UB60 1953 0.42 1.58 0.06 158 RCVD_IN_IADB_VOUCHED 1933 2.93 1.56 3.35 159 RCVD_IN_MSPIKE_L5 1930 0.55 1.56 0.24 160 RCVD_IN_PSBL 1883 0.41 1.52 0.07 161 XMMoneyMeta_00 1874 0.84 1.52 0.64 162 DIET_1 1869 0.68 1.51 0.42 163 XMReplyNow 1774 0.43 1.44 0.12 164 TR_XM_FormFill 1766 0.34 1.43 0.01 165 BAYES_00 1763 10.00 1.43 12.62 166 BODY_URI_ONLY 1703 0.33 1.38 0.01 167 BOTNET_NORDNS 1700 0.34 1.38 0.02 168 URI_NO_WWW_BIZ_CGI 1692 0.33 1.37 0.01 169 XMHTML_After_End 1684 0.83 1.36 0.67 170 T_Symld_Words_02 1659 0.70 1.34 0.50 171 RELAYCOUNTRY_GB 1659 0.89 1.34 0.75 172 XM_UB99 1650 0.31 1.34 0.00 173 T_XMHurry_00 1616 1.66 1.31 1.76 174 XM_Body_Dirty_Words_01 1596 0.41 1.29 0.14 175 TR_XM_COVIDMETA1 1588 0.55 1.29 0.33 176 XM_H_Undi_Recip 1573 0.41 1.27 0.15 177 TR_BOTNET_NEGATE 1535 0.51 1.24 0.29 178 XMPhish30 1527 0.65 1.24 0.47 179 XMBrknScrpt_02 1514 0.89 1.23 0.78 180 HTML_FONT_SIZE_LARGE 1511 0.35 1.22 0.08 181 HTML_FONT_TINY_NORDNS 1481 0.38 1.20 0.13 182 RCVD_IN_MSPIKE_L4 1474 0.55 1.19 0.35 183 TR_Mismatch_TLD_02 1458 0.33 1.18 0.07 184 HTML_FONT_SIZE_HUGE 1422 0.30 1.15 0.05 185 XM_ProductURIs 1410 0.74 1.14 0.62 186 XM_H_PHPMailer 1396 0.72 1.13 0.59 187 TR_Sbj_FN_Bdy 1395 0.39 1.13 0.16 188 RELAYCOUNTRY_IN 1392 0.31 1.13 0.06 189 RCVD_IN_VALIDITY_RPBL 1381 0.29 1.12 0.04 190 URI_TRY_3LD 1380 0.65 1.12 0.50 191 XMSubMetaSxObfu_03 1337 0.47 1.08 0.29 192 TR_XM_BayesRelay 1333 0.25 1.08 0.00 193 TR_MetaPhish_Combo_01 1311 0.83 1.06 0.76 194 XMSubMetaI_00 1306 0.62 1.06 0.49 195 URI_LONG_REPEAT 1302 0.25 1.05 0.00 196 TR_Symld_Words 1282 1.38 1.04 1.49 197 XM_H_Long_From02 1276 1.10 1.03 1.13 198 TR_XM_Undi_Recip5 1275 0.24 1.03 0.00 199 XM_UB999 1267 0.24 1.03 0.00 200 XMSlimDrugH 1220 0.47 0.99 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 353791 89.37 94.99 87.65 2 RELAYCOUNTRY_US 313628 77.85 78.33 77.70 3 XM_B_Unicode 279020 70.79 76.23 69.12 4 DKIM_SIGNED 278169 73.02 86.44 68.91 5 XM_DK_Pass 271846 71.04 83.09 67.35 6 DKIM_VALID 263308 68.68 79.93 65.23 7 DCC_CHECK_NEGATIVE 261571 56.07 27.53 64.80 8 BAYES_50 215706 51.89 46.85 53.44 9 DKIM_VALID_AU 193105 50.44 58.95 47.84 10 XM_B_SpammyWords 191522 52.61 69.49 47.45 11 XMListUnsubscribeExists 179800 50.94 71.83 44.54 12 XM_B_Unicode3 163995 41.21 43.12 40.63 13 DCC_CHECK 141906 43.89 72.43 35.16 14 T_TM2_M_HEADER_IN_MSG 125685 29.19 22.85 31.14 15 RCVD_IN_MSPIKE_WL 110525 25.74 20.37 27.38 16 DKIM_VALID_EF 102876 26.87 31.41 25.49 17 HTML_FONT_LOW_CONTRAST 99155 26.38 32.31 24.56 18 MIME_HTML_ONLY 90349 24.44 31.17 22.38 19 XMSubLong 88052 22.46 24.59 21.81 20 XM_B_SpammyWords2 86789 25.41 38.19 21.50 21 FVGT_m_MULTI_ODD 86101 23.37 30.02 21.33 22 LOC_TINY_FONT_1 85910 24.78 36.20 21.28 23 ALL_TRUSTED 81439 16.13 2.89 20.18 24 RCVD_IN_MSPIKE_H2 81420 21.30 25.00 20.17 25 T_KAM_HTML_FONT_INVALID 73354 21.04 30.41 18.17 26 RCVD_IN_MSPIKE_H3 58212 14.00 12.64 14.42 27 XM_Body_Dirty_Words 54373 15.36 21.55 13.47 28 BAYES_00 50942 10.00 1.43 12.62 29 TooManyTo_001 47022 10.43 6.44 11.65 30 XM_Multi_Part_URI 45358 12.54 16.79 11.24 31 XM_B_Unsub 43716 11.11 12.02 10.83 32 BAYES_60 43624 10.16 8.04 10.81 33 RCVD_IN_MSPIKE_H4 43433 9.92 7.19 10.76 34 USER_IN_DEF_DKIM_WL 42936 8.58 1.86 10.64 35 LotsOfNums_01 37218 8.94 8.04 9.22 36 UNPARSEABLE_RELAY 31619 8.94 12.55 7.83 37 XM_Evil_Numbers_Gen 30161 8.07 10.02 7.47 38 TR_XM_DK_Bayes 29425 5.75 0.72 7.29 39 MIME_QP_LONG_LINE 28991 6.64 4.88 7.18 40 TR_XM_DK_Bayes1 28446 5.55 0.66 7.05 41 LOTS_OF_MONEY 28316 8.62 13.85 7.02 42 XM_DKIMWhitelistDomains 27529 5.24 0.08 6.82 43 XM_SendGrid 26279 7.17 9.31 6.51 44 T_REMOTE_IMAGE 25228 5.71 3.96 6.25 45 IN_ZIMBRA_NJ_WHITELIST 25005 4.76 0.09 6.19 46 MPART_ALT_DIFF 24795 7.45 11.73 6.14 47 XM_DK_Undo_02 24611 14.15 40.48 6.10 48 TR_XM_UnparsRelay 24076 7.37 11.96 5.96 49 TR_XM_DK_Bayes2 23941 4.68 0.60 5.93 50 FSL_BULK_SIG 23516 7.11 11.33 5.83 51 BAYES_40 23442 5.02 2.44 5.81 52 RCVD_IN_IADB_LISTED 22837 4.94 2.58 5.66 53 XMSexyCombo_05 21656 6.39 9.72 5.37 54 HTML_IMAGE_RATIO_02 21109 6.00 8.53 5.23 55 HTML_IMAGE_RATIO_04 20485 5.05 4.96 5.07 56 T_TooManySym_01 20279 4.47 2.67 5.02 57 RCVD_IN_IADB_SPF 20145 4.31 2.08 4.99 58 XM_H_Long_From01 19713 5.17 6.09 4.88 59 HTML_IMAGE_RATIO_06 19388 4.46 3.36 4.80 60 TR_XM_DKIM_Undo 18987 11.34 33.00 4.70 61 RCVD_IN_VALIDITY_SAFE 18745 4.43 3.74 4.64 62 XMSubMetaSx_00 18725 5.31 7.50 4.64 63 TR_XM_SpammyWords4 18583 6.14 11.17 4.60 64 XM_PDF 18503 3.74 0.96 4.58 65 RCVD_IN_IADB_SENDERID 18114 3.88 1.91 4.49 66 XMStrtUSub 17951 4.50 4.69 4.45 67 XM_H_Trusted_IP 17723 3.36 0.00 4.39 68 RCVD_IN_IADB_DK 17557 3.78 1.93 4.35 69 BAYES_99 17363 9.64 27.10 4.30 70 MIME_HTML_ONLY_MULTI 17308 4.48 5.10 4.29 71 BAYES_20 17266 3.75 2.02 4.28 72 TM2_M_URI_OPT_OUT 17257 4.39 4.75 4.28 73 XMNumbers 16642 3.96 3.42 4.12 74 RCVD_IN_VALIDITY_CERTIFIED 16551 3.83 2.94 4.10 75 BOTNET_IPINHOSTNAME 16259 6.22 13.39 4.03 76 TR_XM_DK_SendGrid 16165 4.31 5.32 4.00 77 BAYES_80 15489 4.68 7.41 3.84 78 DKIM_INVALID 14861 4.34 6.51 3.68 79 XM_B_SpammyWords3 14653 5.57 11.91 3.63 80 ANY_BOUNCE_MESSAGE 14340 2.86 0.60 3.55 81 BOUNCE_MESSAGE 14339 2.86 0.60 3.55 82 BAYES_999 13660 7.44 20.68 3.38 83 RCVD_IN_IADB_VOUCHED 13526 2.93 1.56 3.35 84 XM_B_Phish_Phrases 13368 3.86 5.66 3.31 85 TR_XM_PhishingBody 13014 3.99 6.49 3.22 86 RELAYCOUNTRY_META 12692 7.35 21.11 3.14 87 XM_UncommonTLD01 12438 5.34 12.70 3.08 88 T_TooManySym_02 11744 2.40 0.74 2.91 89 URI_NOVOWEL 10784 3.57 6.50 2.67 90 BAYES_05 10349 2.19 0.96 2.56 91 HTML_IMAGE_RATIO_08 10266 2.64 2.95 2.54 92 BAYES_95 9424 2.66 3.74 2.33 93 MAILING_LIST_MULTI 9416 2.26 2.00 2.33 94 MIME_HTML_MOSTLY 9359 3.58 7.71 2.32 95 FROM_EXCESS_BASE64 9149 2.23 2.13 2.27 96 RCVD_IN_MSPIKE_H5 8880 1.81 0.54 2.20 97 RCVD_IN_IADB_OPTIN 8684 1.84 0.84 2.15 98 T_XMDrugObfuBody_14 8529 2.34 3.07 2.11 99 TooManyTo_002 8247 1.71 0.62 2.04 100 XM_SPF_SoftFail 8124 2.60 4.52 2.01 101 HTML_MIME_NO_HTML_TAG 8020 2.71 5.08 1.99 102 TR_XM_SB_Phish 7756 2.04 2.42 1.92 103 XM_B_Phish66 7755 2.35 3.76 1.92 104 XMSubPhish11 7658 1.97 2.22 1.90 105 XM_B_SpammyTLD 7640 2.17 3.07 1.89 106 XM_B_Unsub2 7375 1.94 2.31 1.83 107 HTML_FONT_FACE_BAD 7329 1.56 0.73 1.82 108 T_XMHurry_00 7122 1.66 1.31 1.76 109 IN_HORDE_ADDRESS_BOOK 7046 1.36 0.08 1.75 110 HELO_NODOT 6994 1.50 0.72 1.73 111 HELO_NO_DOMAIN 6993 1.49 0.72 1.73 112 XM_CamelCaseFrm001 6952 1.79 2.01 1.72 113 XM_B_Investor 6822 2.66 5.82 1.69 114 INVALID_MSGID 6793 1.33 0.16 1.68 115 XM_DK_Undo_01 6787 1.87 2.47 1.68 116 KHOP_HELO_FCRDNS 6554 2.28 4.41 1.62 117 T_XMDrugObfuBody_08 6277 1.98 3.35 1.56 118 BOTNET 6224 4.02 12.12 1.54 119 TR_DCC_Bayes_99 6210 5.79 19.68 1.54 120 TO_MALFORMED 6207 1.18 0.00 1.54 121 MSGID_NOFQDN1 6172 1.18 0.03 1.53 122 TR_Symld_Words 6014 1.38 1.04 1.49 123 SUBJ_ALL_CAPS 5917 1.80 2.89 1.47 124 XMDiploma_00 5760 1.71 2.64 1.43 125 XMSexyCombo_01 5508 1.79 3.18 1.36 126 TVD_RCVD_IP 5487 1.10 0.25 1.36 127 TooManyTo_003 5469 1.15 0.47 1.35 128 TR_XM_SpammyRelay 5451 4.22 13.59 1.35 129 TR_XM_SpammyWords5 5419 1.83 3.42 1.34 130 URI_HEX 4975 1.41 1.98 1.23 131 XM_GoogleGroups 4965 1.50 2.37 1.23 132 XMCapTrack 4849 1.01 0.39 1.20 133 TM2_M_VERY_LONG_WORD 4791 1.83 3.95 1.19 134 XM_H_Long_From02 4546 1.10 1.03 1.13 135 XMGappySubj_01 4458 0.89 0.17 1.10 136 XMSubNoVowel 4444 0.95 0.48 1.10 137 UNTRUSTED_Relay 4262 3.71 12.38 1.06 138 SHORT_URI_3 4157 0.98 0.82 1.03 139 RCVD_IN_MSPIKE_BL 4019 1.89 4.81 1.00 140 TR_XM_MSPIKECOMBO 3995 1.88 4.80 0.99 141 XMBSHREFv2 3955 0.84 0.38 0.98 142 TVD_SPACE_RATIO 3906 0.77 0.12 0.97 143 XM_OfRef6 3841 1.37 2.75 0.95 144 TooManyTo_004 3840 0.82 0.40 0.95 145 RCVD_IN_BL_SPAMCOP_NET 3832 2.86 9.12 0.95 146 RCVD_IN_RP_SAFE 3704 0.90 0.86 0.92 147 DKIM_ADSP_CUSTOM_MED 3699 0.90 0.84 0.92 148 XMStockSpam_06 3487 1.14 2.06 0.86 149 TR_XM_SpammyWords2 3439 2.90 9.57 0.85 150 HTTPS_HTTP_MISMATCH 3347 0.86 0.96 0.83 151 RCVD_IN_RP_CERTIFIED 3261 0.78 0.67 0.81 152 T_FILL_THIS_FORM_SHORT 3206 1.16 2.35 0.79 153 XMBrknScrpt_02 3155 0.89 1.23 0.78 154 TooManyTo_005 3131 0.68 0.36 0.78 155 TR_MetaPhish_Combo_01 3074 0.83 1.06 0.76 156 XMLngstWrd_00 3053 1.05 2.02 0.76 157 RELAYCOUNTRY_GB 3010 0.89 1.34 0.75 158 RELAYCOUNTRY_CA 2979 1.74 5.02 0.74 159 T_TooManySym_03 2877 0.62 0.31 0.71 160 FROM_GOV_DKIM_AU 2797 0.57 0.18 0.69 161 XMGenDplmaNmb 2772 0.90 1.59 0.69 162 XMLngstWrd_01 2766 0.99 1.97 0.69 163 XMHTML_After_End 2698 0.83 1.36 0.67 164 XM_UB50 2692 2.12 6.86 0.67 165 T_OBFU_PDF_ATTACH 2679 0.54 0.15 0.66 166 SpammyFromTLD_01 2662 1.68 5.01 0.66 167 XMBody_95 2650 0.55 0.18 0.66 168 T_XMDrugObfuBody_00 2575 0.94 1.94 0.64 169 XMMoneyMeta_00 2569 0.84 1.52 0.64 170 XM_ProductURIs 2489 0.74 1.14 0.62 171 NML_ADSP_CUSTOM_MED 2430 0.63 0.70 0.60 172 XM_ShortIntro_01 2420 0.58 0.52 0.60 173 XM_H_PHPMailer 2397 0.72 1.13 0.59 174 XMBdyGiftCard01 2383 0.62 0.73 0.59 175 TR_MSPIKEBAYES00 2374 0.46 0.02 0.59 176 HTML_IMAGE_ONLY_20 2374 0.53 0.33 0.59 177 XMLngstWrd_02 2369 0.89 1.89 0.59 178 TR_XM_MaxUnsub 2342 1.30 3.67 0.58 179 XMPhish14 2155 0.56 0.65 0.53 180 HTML_TAG_BALANCE_BODY 2154 0.62 0.91 0.53 181 XMNoVowels 2146 0.59 0.78 0.53 182 SHORT_HELO_AND_INLINE_IMAGE 2091 0.42 0.11 0.52 183 FILL_THIS_FORM 2068 0.46 0.31 0.51 184 URI_TRY_3LD 2035 0.65 1.12 0.50 185 T_Symld_Words_02 2018 0.70 1.34 0.50 186 RCVD_IN_SORBS_DUL 2000 0.45 0.28 0.50 187 XM_B_COPY_HTML 1992 0.61 0.99 0.49 188 TR_XM_SpammyWords3 1987 1.08 2.98 0.49 189 FORGED_GMAIL_RCVD 1974 0.54 0.70 0.49 190 XMSubMetaI_00 1969 0.62 1.06 0.49 191 HTML_IMAGE_ONLY_28 1963 0.47 0.42 0.49 192 XM_B_SpammyWords4 1926 0.86 2.10 0.48 193 XMLngstWrd_03 1910 0.79 1.84 0.47 194 XMHTMLBadTable_001 1900 0.52 0.69 0.47 195 XMPhish30 1884 0.65 1.24 0.47 196 XM_B_DNDMA 1865 0.54 0.81 0.46 197 XM_B_COVIDMETA 1858 0.84 2.09 0.46 198 XMDateMe_00 1803 0.49 0.65 0.45 199 HTML_IMAGE_ONLY_32 1782 0.39 0.24 0.44 200 XM_D_tchamptons_WL 1755 0.33 0.00 0.43 ----------------------------------------------------------------------