Email: 507678 Autolearn: 0 AvgScore: 2.61 AvgScanTime: 1.47 sec Spam: 130452 Autolearn: 0 AvgScore: 13.70 AvgScanTime: 1.60 sec Ham: 377226 Autolearn: 0 AvgScore: -1.22 AvgScanTime: 1.42 sec Time Spent Running SA: 207.01 hours Time Spent Processing Spam: 58.02 hours Time Spent Processing Ham: 148.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 126082 89.89 96.65 87.56 2 DKIM_SIGNED 113450 73.98 86.97 69.49 3 XM_DK_Pass 109715 72.21 84.10 68.10 4 DKIM_VALID 109318 71.46 83.80 67.19 5 RELAYCOUNTRY_US 105028 77.20 80.51 76.06 6 XM_B_Unicode 103623 73.93 79.43 72.02 7 DCC_CHECK 93791 42.23 71.90 31.97 8 XMListUnsubscribeExists 89791 51.46 68.83 45.46 9 XM_B_SpammyWords 84979 52.47 65.14 48.08 10 DKIM_VALID_AU 82308 53.90 63.09 50.72 11 XM_B_Unicode3 58609 45.83 44.93 46.15 12 XM_DK_Undo_02 58590 16.49 44.91 6.67 13 BAYES_50 53828 54.14 41.26 58.60 14 LOC_TINY_FONT_1 49760 25.60 38.14 21.27 15 XM_B_SpammyWords2 46515 22.26 35.66 17.62 16 HTML_FONT_LOW_CONTRAST 45532 27.57 34.90 25.04 17 BAYES_99 44951 12.92 34.46 5.47 18 DKIM_VALID_EF 42574 27.67 32.64 25.95 19 FVGT_m_MULTI_ODD 42245 25.11 32.38 22.60 20 TR_XM_DKIM_Undo 42064 11.69 32.24 4.59 21 MIME_HTML_ONLY 41527 27.04 31.83 25.38 22 T_KAM_HTML_FONT_INVALID 36614 20.37 28.07 17.71 23 DCC_CHECK_NEGATIVE 36613 57.73 28.07 67.99 24 BAYES_999 35392 10.26 27.13 4.43 25 XMSubLong 34809 27.37 26.68 27.61 26 RCVD_IN_MSPIKE_H2 33970 21.31 26.04 19.68 27 TR_DCC_Bayes_99 31921 7.63 24.47 1.81 28 T_TM2_M_HEADER_IN_MSG 29945 27.02 22.95 28.43 29 XM_Body_Dirty_Words 28980 13.69 22.22 10.74 30 RCVD_IN_MSPIKE_WL 28941 27.49 22.19 29.33 31 RELAYCOUNTRY_META 25261 7.65 19.36 3.60 32 XM_Multi_Part_URI 23495 12.94 18.01 11.19 33 XM_B_Unsub 20077 16.11 15.39 16.36 34 BOTNET 17767 4.63 13.62 1.52 35 UNPARSEABLE_RELAY 17434 8.87 13.36 7.32 36 RCVD_IN_MSPIKE_H3 17360 15.10 13.31 15.72 37 TR_XM_UnparsRelay 17048 7.74 13.07 5.90 38 BOTNET_IPINHOSTNAME 17044 6.62 13.07 4.39 39 LOTS_OF_MONEY 16287 9.19 12.49 8.04 40 UNTRUSTED_Relay 16193 4.12 12.41 1.25 41 FSL_BULK_SIG 15927 5.41 12.21 3.06 42 XM_UncommonTLD01 14472 5.24 11.09 3.22 43 XM_B_SpammyWords3 14458 5.97 11.08 4.20 44 TR_XM_SpammyWords2 13932 3.40 10.68 0.89 45 TR_XM_SpammyRelay 13314 3.76 10.21 1.53 46 XMSexyCombo_05 13285 4.83 10.18 2.98 47 TR_XM_SpammyWords4 13274 6.42 10.18 5.12 48 XM_Evil_Numbers_Gen 12297 7.66 9.43 7.04 49 MPART_ALT_DIFF 12076 6.15 9.26 5.07 50 RCVD_IN_BL_SPAMCOP_NET 11735 2.75 9.00 0.59 51 XM_SendGrid 11367 6.27 8.71 5.43 52 RCVD_IN_MSPIKE_H4 10841 10.76 8.31 11.60 53 HTML_IMAGE_RATIO_02 10538 6.26 8.08 5.63 54 BAYES_80 10114 5.10 7.75 4.18 55 LotsOfNums_01 9865 8.76 7.56 9.17 56 BAYES_60 9416 8.19 7.22 8.53 57 TR_XM_PhishingBody 9354 4.38 7.17 3.42 58 TR_XM_MaxUnsub 8807 2.34 6.75 0.81 59 XM_UB50 8450 2.27 6.48 0.82 60 RCVD_IN_MSPIKE_BL 8343 2.50 6.40 1.15 61 TR_XM_MSPIKECOMBO 8255 2.47 6.33 1.14 62 XMSubMetaSx_00 7989 4.39 6.12 3.79 63 XM_B_Phish_Phrases 7848 4.04 6.02 3.36 64 XM_H_Long_From01 7563 5.04 5.80 4.78 65 MIME_HTML_MOSTLY 6920 3.31 5.30 2.62 66 HTML_IMAGE_RATIO_04 6745 4.92 5.17 4.83 67 TR_XM_DK_SendGrid 6743 3.82 5.17 3.35 68 TooManyTo_001 6456 12.30 4.95 14.84 69 XM_SPF_SoftFail 6338 2.85 4.86 2.15 70 SpammyFromTLD_02 6138 1.51 4.71 0.40 71 URI_NOVOWEL 6125 3.46 4.70 3.04 72 MIME_HTML_ONLY_MULTI 5956 3.32 4.57 2.89 73 RELAYCOUNTRY_CA 5887 1.76 4.51 0.80 74 BAYES_95 5825 3.07 4.47 2.59 75 TR_XM_SPAMCOP 5773 1.28 4.43 0.19 76 XMStrtUSub 5637 4.34 4.32 4.34 77 XMNumbers 5433 3.68 4.16 3.51 78 XM_B_Investor 5424 2.16 4.16 1.47 79 TM2_M_VERY_LONG_WORD 5285 2.07 4.05 1.38 80 TR_XM_SpammyWords5 5087 1.97 3.90 1.31 81 MIME_QP_LONG_LINE 5055 5.14 3.87 5.58 82 SpammyFromTLD_01 5050 1.50 3.87 0.68 83 HTML_MIME_NO_HTML_TAG 4983 2.63 3.82 2.21 84 XM_B_SpammyTLD 4929 2.74 3.78 2.39 85 RCVD_IN_VALIDITY_SAFE 4881 4.18 3.74 4.34 86 T_REMOTE_IMAGE 4877 3.51 3.74 3.43 87 HTML_IMAGE_RATIO_06 4724 3.36 3.62 3.26 88 XM_B_Phish66 4691 2.29 3.60 1.84 89 T_XMDrugObfuBody_14 4624 2.51 3.54 2.16 90 TM2_M_URI_OPT_OUT 4467 2.71 3.42 2.46 91 TR_XM_SpammyWords3 4462 1.27 3.42 0.52 92 XM_B_Unsub2 4353 2.12 3.34 1.70 93 KHOP_HELO_FCRDNS 4282 1.94 3.28 1.48 94 HTML_IMAGE_RATIO_08 4215 2.54 3.23 2.30 95 RCVD_IN_IADB_LISTED 4148 5.09 3.18 5.76 96 DKIM_INVALID 4132 2.52 3.17 2.30 97 RCVD_IN_VALIDITY_CERTIFIED 4079 3.77 3.13 4.00 98 RCVD_IN_MSPIKE_L5 3620 0.83 2.77 0.15 99 XM_CamelCaseFrm001 3570 2.01 2.74 1.76 100 XM_OfRef6 3570 1.45 2.74 1.00 101 RCVD_IN_IADB_SPF 3447 4.49 2.64 5.13 102 RCVD_IN_VALIDITY_RPBL 3380 0.67 2.59 0.01 103 XM_DIRTYINTL 3353 0.91 2.57 0.34 104 XM_DK_Undo_01 3330 1.80 2.55 1.54 105 RCVD_IN_MSPIKE_L3 3307 1.02 2.54 0.50 106 T_TooManySym_01 3193 4.69 2.45 5.47 107 T_XMDrugObfuBody_08 3183 1.66 2.44 1.40 108 BOTNET_NORDNS 3143 0.63 2.41 0.01 109 RCVD_IN_IADB_DK 3137 3.93 2.40 4.46 110 MAILING_LIST_MULTI 3104 2.64 2.38 2.73 111 RCVD_IN_IADB_SENDERID 3083 4.03 2.36 4.61 112 TR_XM_SB_Phish 3081 2.18 2.36 2.11 113 XM_B_COVIDMETA 3072 1.05 2.35 0.60 114 XMDiploma_00 3044 6.46 2.33 7.89 115 HTML_FONT_TINY_NORDNS 3038 0.64 2.33 0.06 116 T_XMDrugObfuBody_00 3005 1.16 2.30 0.76 117 T_FILL_THIS_FORM_SHORT 2996 1.21 2.30 0.83 118 XM_B_SpammyWords4 2967 1.03 2.27 0.61 119 XM_URI_RBL 2908 0.66 2.23 0.12 120 XMSubPhish11 2902 2.12 2.22 2.08 121 URI_HEX 2862 1.63 2.19 1.43 122 RCVD_IN_PSBL 2816 0.59 2.16 0.05 123 XM_GoogleGroups 2797 1.68 2.14 1.52 124 JH_SPAMMY_HEADERS 2729 0.54 2.09 0.00 125 RELAYCOUNTRY_FR 2654 0.72 2.03 0.27 126 XM_UB99 2505 0.50 1.92 0.00 127 RCVD_IN_IADB_VOUCHED 2430 3.07 1.86 3.49 128 XMSexyCombo_01 2367 0.89 1.81 0.57 129 TR_XM_PHPDW 2287 0.70 1.75 0.34 130 XMStockSpam_06 2278 1.10 1.75 0.87 131 TR_XM_PHPForged 2277 0.66 1.75 0.29 132 URIBL_DBL_SPAM 2169 0.44 1.66 0.02 133 ALL_TRUSTED 2161 16.48 1.66 21.60 134 TR_XM_NoHeaderRelay 2160 0.55 1.66 0.17 135 TR_XM_FormFill2 2121 0.64 1.63 0.29 136 XM_H_PHPOS 2116 0.63 1.62 0.28 137 SUBJ_ALL_CAPS 2112 1.58 1.62 1.57 138 USER_IN_DEF_DKIM_WL 2100 8.53 1.61 10.93 139 FROM_EXCESS_BASE64 2091 2.22 1.60 2.43 140 URI_TRY_3LD 2087 0.88 1.60 0.63 141 TR_MetaPhish_Combo_01 2073 0.88 1.59 0.63 142 BAYES_40 2062 3.89 1.58 4.69 143 DKIM_ADSP_CUSTOM_MED 2016 1.05 1.55 0.88 144 PDS_OTHER_BAD_TLD 1987 0.57 1.52 0.23 145 TR_XM_COVIDMETA1 1961 0.54 1.50 0.21 146 TR_LOTS_OF_MONEY3 1955 0.84 1.50 0.62 147 TR_XM_FormFill 1949 0.42 1.49 0.04 148 XM_UB60 1930 0.43 1.48 0.07 149 XMLngstWrd_00 1929 0.82 1.48 0.60 150 XMPhish30 1858 1.04 1.42 0.91 151 URIBL_BLACK 1856 0.42 1.42 0.08 152 XMLngstWrd_01 1846 0.76 1.42 0.54 153 TR_BOTNET_NEGATE 1831 0.63 1.40 0.37 154 T_XMHurry_00 1799 0.80 1.38 0.59 155 HTML_TAG_BALANCE_CENTER 1787 0.41 1.37 0.08 156 XMBody_17 1785 0.58 1.37 0.31 157 XMLngstWrd_02 1782 0.70 1.37 0.48 158 BAYES_00 1745 7.95 1.34 10.23 159 XM_UB999 1742 0.34 1.34 0.00 160 RELAYCOUNTRY_AU 1738 0.56 1.33 0.29 161 XMGenDplmaNmb 1718 0.83 1.32 0.66 162 HTML_TITLE_SUBJ_DIFF 1715 0.49 1.31 0.21 163 XMLngstWrd_03 1704 0.62 1.31 0.39 164 TR_Symld_Words 1669 1.72 1.28 1.88 165 RELAYCOUNTRY_GB 1627 0.89 1.25 0.76 166 DIET_1 1607 0.62 1.23 0.41 167 TR_XM_BayesRelay 1595 0.32 1.22 0.01 168 RELAYCOUNTRY_NL 1581 0.44 1.21 0.17 169 XMLngstWrd_04 1579 0.56 1.21 0.33 170 BAYES_20 1566 2.96 1.20 3.57 171 XMBrknScrpt_02 1546 0.78 1.19 0.64 172 XM_B_REG_HTML 1535 0.54 1.18 0.32 173 XMHTML_After_End 1527 0.80 1.17 0.67 174 UPPERCASE_75_100 1514 0.45 1.16 0.20 175 RCVD_IN_IADB_OPTIN 1493 2.05 1.14 2.36 176 HTML_IMAGE_ONLY_08 1491 0.41 1.14 0.15 177 TM2_M_A_HREF_HREF 1488 0.62 1.14 0.44 178 HTTPS_HTTP_MISMATCH 1452 0.82 1.11 0.72 179 XMSubNoVowel 1447 1.01 1.11 0.98 180 GOOG_STO_IMG_HTML 1414 0.28 1.08 0.00 181 XM_UB80 1403 0.29 1.08 0.02 182 XMSubMetaI_00 1397 0.55 1.07 0.37 183 XMPhish14 1382 0.57 1.06 0.40 184 HTML_TAG_BALANCE_BODY 1375 0.81 1.05 0.73 185 TR_XM_COVIDMETA4 1365 0.42 1.05 0.20 186 TR_Mismatch_TLD_01 1354 0.45 1.04 0.24 187 XMHTMLBadTable_001 1353 0.53 1.04 0.36 188 NML_ADSP_CUSTOM_MED 1350 0.64 1.03 0.50 189 RELAYCOUNTRY_CN 1349 0.34 1.03 0.09 190 RCVD_IN_MSPIKE_L4 1328 0.62 1.02 0.48 191 FORGED_GMAIL_RCVD 1305 0.57 1.00 0.42 192 XM_Body_Dirty_Words_01 1295 0.35 0.99 0.13 193 XM_PDF 1293 3.64 0.99 4.56 194 BODY_URI_ONLY 1289 0.26 0.99 0.01 195 TooManyTo_002 1262 1.75 0.97 2.02 196 T_MONEY_PERCENT 1258 0.36 0.96 0.15 197 TR_LOTS_OF_MONEY2 1258 0.36 0.96 0.15 198 ANY_BOUNCE_MESSAGE 1245 1.99 0.95 2.34 199 BOUNCE_MESSAGE 1245 1.99 0.95 2.34 200 XM_H_Long_From02 1245 1.21 0.95 1.30 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 330292 89.89 96.65 87.56 2 RELAYCOUNTRY_US 286923 77.20 80.51 76.06 3 XM_B_Unicode 271687 73.93 79.43 72.02 4 DKIM_SIGNED 262137 73.98 86.97 69.49 5 XM_DK_Pass 256890 72.21 84.10 68.10 6 DCC_CHECK_NEGATIVE 256477 57.73 28.07 67.99 7 DKIM_VALID 253459 71.46 83.80 67.19 8 BAYES_50 221054 54.14 41.26 58.60 9 DKIM_VALID_AU 191314 53.90 63.09 50.72 10 XM_B_SpammyWords 181380 52.47 65.14 48.08 11 XM_B_Unicode3 174080 45.83 44.93 46.15 12 XMListUnsubscribeExists 171483 51.46 68.83 45.46 13 DCC_CHECK 120586 42.23 71.90 31.97 14 RCVD_IN_MSPIKE_WL 110628 27.49 22.19 29.33 15 T_TM2_M_HEADER_IN_MSG 107232 27.02 22.95 28.43 16 XMSubLong 104149 27.37 26.68 27.61 17 DKIM_VALID_EF 97880 27.67 32.64 25.95 18 MIME_HTML_ONLY 95726 27.04 31.83 25.38 19 HTML_FONT_LOW_CONTRAST 94456 27.57 34.90 25.04 20 FVGT_m_MULTI_ODD 85242 25.11 32.38 22.60 21 ALL_TRUSTED 81480 16.48 1.66 21.60 22 LOC_TINY_FONT_1 80230 25.60 38.14 21.27 23 RCVD_IN_MSPIKE_H2 74231 21.31 26.04 19.68 24 T_KAM_HTML_FONT_INVALID 66824 20.37 28.07 17.71 25 XM_B_SpammyWords2 66484 22.26 35.66 17.62 26 XM_B_Unsub 61725 16.11 15.39 16.36 27 RCVD_IN_MSPIKE_H3 59307 15.10 13.31 15.72 28 TooManyTo_001 55979 12.30 4.95 14.84 29 RCVD_IN_MSPIKE_H4 43772 10.76 8.31 11.60 30 XM_Multi_Part_URI 42211 12.94 18.01 11.19 31 USER_IN_DEF_DKIM_WL 41230 8.53 1.61 10.93 32 XM_Body_Dirty_Words 40509 13.69 22.22 10.74 33 BAYES_00 38608 7.95 1.34 10.23 34 LotsOfNums_01 34603 8.76 7.56 9.17 35 BAYES_60 32171 8.19 7.22 8.53 36 LOTS_OF_MONEY 30345 9.19 12.49 8.04 37 XMDiploma_00 29766 6.46 2.33 7.89 38 XM_DKIMWhitelistDomains 29138 5.75 0.05 7.72 39 UNPARSEABLE_RELAY 27615 8.87 13.36 7.32 40 XM_Evil_Numbers_Gen 26575 7.66 9.43 7.04 41 IN_ZIMBRA_NJ_WHITELIST 25386 5.03 0.11 6.73 42 XM_DK_Undo_02 25151 16.49 44.91 6.67 43 TR_XM_DK_Bayes 24203 5.00 0.89 6.42 44 TR_XM_DK_Bayes1 23659 4.89 0.89 6.27 45 TR_XM_UnparsRelay 22264 7.74 13.07 5.90 46 RCVD_IN_IADB_LISTED 21714 5.09 3.18 5.76 47 HTML_IMAGE_RATIO_02 21229 6.26 8.08 5.63 48 MIME_QP_LONG_LINE 21042 5.14 3.87 5.58 49 BAYES_99 20647 12.92 34.46 5.47 50 T_TooManySym_01 20623 4.69 2.45 5.47 51 TR_XM_DK_Bayes2 20567 4.26 0.80 5.45 52 XM_SendGrid 20482 6.27 8.71 5.43 53 RCVD_IN_IADB_SPF 19349 4.49 2.64 5.13 54 TR_XM_SpammyWords4 19314 6.42 10.18 5.12 55 MPART_ALT_DIFF 19139 6.15 9.26 5.07 56 HTML_IMAGE_RATIO_04 18223 4.92 5.17 4.83 57 XM_H_Long_From01 18049 5.04 5.80 4.78 58 BAYES_40 17679 3.89 1.58 4.69 59 RCVD_IN_IADB_SENDERID 17400 4.03 2.36 4.61 60 TR_XM_DKIM_Undo 17304 11.69 32.24 4.59 61 XM_PDF 17189 3.64 0.99 4.56 62 RCVD_IN_IADB_DK 16837 3.93 2.40 4.46 63 BAYES_999 16706 10.26 27.13 4.43 64 BOTNET_IPINHOSTNAME 16563 6.62 13.07 4.39 65 XMStrtUSub 16381 4.34 4.32 4.34 66 RCVD_IN_VALIDITY_SAFE 16357 4.18 3.74 4.34 67 XM_B_SpammyWords3 15827 5.97 11.08 4.20 68 BAYES_80 15780 5.10 7.75 4.18 69 RCVD_IN_VALIDITY_CERTIFIED 15081 3.77 3.13 4.00 70 XMSubMetaSx_00 14300 4.39 6.12 3.79 71 RELAYCOUNTRY_META 13571 7.65 19.36 3.60 72 BAYES_20 13481 2.96 1.20 3.57 73 XMNumbers 13249 3.68 4.16 3.51 74 RCVD_IN_IADB_VOUCHED 13160 3.07 1.86 3.49 75 T_REMOTE_IMAGE 12938 3.51 3.74 3.43 76 TR_XM_PhishingBody 12892 4.38 7.17 3.42 77 XM_B_Phish_Phrases 12663 4.04 6.02 3.36 78 TR_XM_DK_SendGrid 12646 3.82 5.17 3.35 79 HTML_IMAGE_RATIO_06 12309 3.36 3.62 3.26 80 XM_UncommonTLD01 12135 5.24 11.09 3.22 81 FSL_BULK_SIG 11553 5.41 12.21 3.06 82 T_TooManySym_02 11468 2.47 0.81 3.04 83 URI_NOVOWEL 11460 3.46 4.70 3.04 84 XMSexyCombo_05 11227 4.83 10.18 2.98 85 MIME_HTML_ONLY_MULTI 10915 3.32 4.57 2.89 86 XM_H_Trusted_IP 10879 2.14 0.00 2.88 87 MAILING_LIST_MULTI 10292 2.64 2.38 2.73 88 MIME_HTML_MOSTLY 9874 3.31 5.30 2.62 89 BAYES_95 9782 3.07 4.47 2.59 90 TM2_M_URI_OPT_OUT 9286 2.71 3.42 2.46 91 FROM_EXCESS_BASE64 9158 2.22 1.60 2.43 92 XM_B_SpammyTLD 9001 2.74 3.78 2.39 93 RCVD_IN_IADB_OPTIN 8904 2.05 1.14 2.36 94 ANY_BOUNCE_MESSAGE 8833 1.99 0.95 2.34 95 BOUNCE_MESSAGE 8833 1.99 0.95 2.34 96 DKIM_INVALID 8678 2.52 3.17 2.30 97 HTML_IMAGE_RATIO_08 8669 2.54 3.23 2.30 98 HTML_MIME_NO_HTML_TAG 8353 2.63 3.82 2.21 99 T_XMDrugObfuBody_14 8136 2.51 3.54 2.16 100 XM_SPF_SoftFail 8113 2.85 4.86 2.15 101 BAYES_05 8016 1.76 0.72 2.12 102 TR_XM_SB_Phish 7973 2.18 2.36 2.11 103 XMSubPhish11 7848 2.12 2.22 2.08 104 TooManyTo_002 7618 1.75 0.97 2.02 105 RCVD_IN_MSPIKE_H5 7549 1.63 0.57 2.00 106 TR_Symld_Words 7088 1.72 1.28 1.88 107 XM_B_Phish66 6932 2.29 3.60 1.84 108 INVALID_MSGID 6854 1.42 0.26 1.82 109 TR_DCC_Bayes_99 6833 7.63 24.47 1.81 110 IN_HORDE_ADDRESS_BOOK 6755 1.36 0.10 1.79 111 XM_CamelCaseFrm001 6642 2.01 2.74 1.76 112 TVD_RCVD_IP 6641 1.41 0.41 1.76 113 HELO_NODOT 6446 1.43 0.63 1.71 114 HELO_NO_DOMAIN 6445 1.43 0.62 1.71 115 XM_B_Unsub2 6419 2.12 3.34 1.70 116 MSGID_NOFQDN1 6329 1.27 0.11 1.68 117 TO_MALFORMED 6023 1.19 0.00 1.60 118 SUBJ_ALL_CAPS 5914 1.58 1.62 1.57 119 XM_DK_Undo_01 5797 1.80 2.55 1.54 120 TR_XM_SpammyRelay 5784 3.76 10.21 1.53 121 XM_GoogleGroups 5720 1.68 2.14 1.52 122 BOTNET 5715 4.63 13.62 1.52 123 KHOP_HELO_FCRDNS 5586 1.94 3.28 1.48 124 XM_B_Investor 5530 2.16 4.16 1.47 125 URI_HEX 5405 1.63 2.19 1.43 126 T_XMDrugObfuBody_08 5263 1.66 2.44 1.40 127 TM2_M_VERY_LONG_WORD 5201 2.07 4.05 1.38 128 TooManyTo_003 5107 1.23 0.87 1.35 129 XMGappySubj_01 4957 1.02 0.17 1.31 130 TR_XM_SpammyWords5 4933 1.97 3.90 1.31 131 XM_H_Long_From02 4893 1.21 0.95 1.30 132 UNTRUSTED_Relay 4712 4.12 12.41 1.25 133 SHORTENED_URL_HREF 4424 0.90 0.10 1.17 134 RCVD_IN_MSPIKE_BL 4340 2.50 6.40 1.15 135 XMCapTrack 4328 1.03 0.70 1.15 136 TR_XM_MSPIKECOMBO 4284 2.47 6.33 1.14 137 HTML_FONT_FACE_BAD 4198 0.99 0.63 1.11 138 TVD_SPACE_RATIO 3797 0.77 0.09 1.01 139 XM_OfRef6 3779 1.45 2.74 1.00 140 XMSubNoVowel 3685 1.01 1.11 0.98 141 XMBSHREFv2 3673 0.82 0.39 0.97 142 TooManyTo_004 3486 0.88 0.76 0.92 143 XMPhish30 3431 1.04 1.42 0.91 144 TR_XM_SpammyWords2 3351 3.40 10.68 0.89 145 DKIM_ADSP_CUSTOM_MED 3317 1.05 1.55 0.88 146 XMStockSpam_06 3299 1.10 1.75 0.87 147 RCVD_IN_RP_SAFE 3235 0.85 0.84 0.86 148 XM_ProductURIs 3209 0.81 0.70 0.85 149 T_FILL_THIS_FORM_SHORT 3148 1.21 2.30 0.83 150 XM_UB50 3089 2.27 6.48 0.82 151 TR_XM_MaxUnsub 3070 2.34 6.75 0.81 152 RELAYCOUNTRY_CA 3024 1.76 4.51 0.80 153 RCVD_IN_RP_CERTIFIED 2978 0.77 0.71 0.79 154 T_TooManySym_03 2959 0.67 0.36 0.78 155 RELAYCOUNTRY_GB 2884 0.89 1.25 0.76 156 T_XMDrugObfuBody_00 2880 1.16 2.30 0.76 157 TooManyTo_005 2850 0.74 0.69 0.76 158 HTML_TAG_BALANCE_BODY 2735 0.81 1.05 0.73 159 HTTPS_HTTP_MISMATCH 2714 0.82 1.11 0.72 160 XMBody_95 2673 0.57 0.16 0.71 161 SpammyFromTLD_01 2555 1.50 3.87 0.68 162 TM2_M_BODY_EMPTY 2536 0.53 0.12 0.67 163 XMHTML_After_End 2534 0.80 1.17 0.67 164 XMGenDplmaNmb 2492 0.83 1.32 0.66 165 XMBdyGiftCard01 2484 0.73 0.95 0.66 166 XM_H_PHPMailer 2472 0.72 0.92 0.66 167 XMBrknScrpt_02 2411 0.78 1.19 0.64 168 URI_TRY_3LD 2390 0.88 1.60 0.63 169 TR_MetaPhish_Combo_01 2375 0.88 1.59 0.63 170 TR_MSPIKEBAYES00 2338 0.48 0.08 0.62 171 TR_LOTS_OF_MONEY3 2320 0.84 1.50 0.62 172 T_OBFU_PDF_ATTACH 2308 0.51 0.22 0.61 173 HTML_IMAGE_ONLY_20 2299 0.60 0.56 0.61 174 XM_B_SpammyWords4 2286 1.03 2.27 0.61 175 XM_B_COVIDMETA 2275 1.05 2.35 0.60 176 XMLngstWrd_00 2251 0.82 1.48 0.60 177 RCVD_IN_BL_SPAMCOP_NET 2243 2.75 9.00 0.59 178 T_XMHurry_00 2238 0.80 1.38 0.59 179 FROM_GOV_DKIM_AU 2199 0.50 0.28 0.58 180 XM_ShortIntro_01 2174 0.53 0.39 0.58 181 XMSexyCombo_01 2144 0.89 1.81 0.57 182 XMLngstWrd_01 2036 0.76 1.42 0.54 183 XM_B_COPY_HTML 2011 0.55 0.61 0.53 184 SHORT_HELO_AND_INLINE_IMAGE 1970 0.41 0.10 0.52 185 TR_XM_SpammyWords3 1970 1.27 3.42 0.52 186 T_Symld_Words_02 1942 0.61 0.90 0.51 187 XMNoVowels 1931 0.50 0.45 0.51 188 NML_ADSP_CUSTOM_MED 1901 0.64 1.03 0.50 189 RCVD_IN_MSPIKE_L3 1892 1.02 2.54 0.50 190 RCVD_IN_MSPIKE_L4 1812 0.62 1.02 0.48 191 RCVD_IN_SORBS_DUL 1804 0.45 0.36 0.48 192 XMLngstWrd_02 1797 0.70 1.37 0.48 193 MPART_ALT_DIFF_COUNT 1738 0.48 0.54 0.46 194 TM2_M_A_HREF_HREF 1676 0.62 1.14 0.44 195 SUBJ_YOUR_FAMILY 1674 0.39 0.22 0.44 196 HTML_IMAGE_ONLY_32 1667 0.39 0.26 0.44 197 XMMoneyMeta_00 1594 0.51 0.77 0.42 198 FORGED_GMAIL_RCVD 1594 0.57 1.00 0.42 199 DIET_1 1564 0.62 1.23 0.41 200 FROM_GOV_SPOOF 1556 0.33 0.10 0.41 ----------------------------------------------------------------------