Email: 461017 Autolearn: 0 AvgScore: 3.24 AvgScanTime: 1.33 sec Spam: 138812 Autolearn: 0 AvgScore: 14.83 AvgScanTime: 1.40 sec Ham: 322205 Autolearn: 0 AvgScore: -1.75 AvgScanTime: 1.30 sec Time Spent Running SA: 170.57 hours Time Spent Processing Spam: 54.07 hours Time Spent Processing Ham: 116.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 132519 89.33 95.47 86.68 2 DKIM_SIGNED 113526 75.29 81.78 72.49 3 RELAYCOUNTRY_US 112565 81.51 81.09 81.70 4 XM_DK_Pass 110705 73.66 79.75 71.04 5 DKIM_VALID 109698 72.77 79.03 70.07 6 XM_B_Unicode 103269 71.01 74.39 69.55 7 XMListUnsubscribeExists 92773 54.03 66.83 48.52 8 DCC_CHECK 92670 43.16 66.76 32.99 9 XM_B_SpammyWords 87871 49.35 63.30 43.34 10 DKIM_VALID_AU 79469 54.24 57.25 52.95 11 XM_DK_Undo_02 60715 18.11 43.74 7.07 12 XM_B_Unicode3 56510 42.35 40.71 43.06 13 BAYES_50 55534 49.85 40.01 54.08 14 MIME_HTML_ONLY 49769 26.61 35.85 22.62 15 LOC_TINY_FONT_1 47552 26.99 34.26 23.86 16 FVGT_m_MULTI_ODD 47367 26.10 34.12 22.64 17 XM_B_SpammyWords2 46873 22.97 33.77 18.31 18 TR_XM_DKIM_Undo 46774 13.62 33.70 4.97 19 DCC_CHECK_NEGATIVE 46097 56.81 33.21 66.97 20 BAYES_99 45590 14.42 32.84 6.49 21 HTML_FONT_LOW_CONTRAST 40927 26.93 29.48 25.83 22 DKIM_VALID_EF 38324 26.83 27.61 26.49 23 BAYES_999 35775 11.47 25.77 5.31 24 RCVD_IN_MSPIKE_H2 35625 22.11 25.66 20.58 25 TR_DCC_Bayes_99 32539 8.46 23.44 2.00 26 XMSubLong 32286 22.37 23.26 21.98 27 T_KAM_HTML_FONT_INVALID 31896 19.72 22.98 18.32 28 RELAYCOUNTRY_META 30982 9.50 22.32 3.98 29 XM_Body_Dirty_Words 29156 14.72 21.00 12.01 30 RCVD_IN_MSPIKE_WL 28884 27.60 20.81 30.52 31 T_TM2_M_HEADER_IN_MSG 26713 26.22 19.24 29.22 32 BOTNET 22100 5.92 15.92 1.61 33 XM_Multi_Part_URI 20532 12.55 14.79 11.58 34 LOTS_OF_MONEY 19798 10.59 14.26 9.01 35 BOTNET_IPINHOSTNAME 19522 7.76 14.06 5.05 36 RCVD_IN_MSPIKE_H3 19260 15.70 13.87 16.48 37 XM_B_Unsub 19070 10.65 13.74 9.33 38 FSL_BULK_SIG 18081 6.60 13.03 3.83 39 UNPARSEABLE_RELAY 17656 9.30 12.72 7.83 40 TR_XM_UnparsRelay 17291 8.01 12.46 6.09 41 XMSexyCombo_05 17089 6.11 12.31 3.44 42 TR_XM_SpammyWords4 16887 7.40 12.17 5.35 43 UNTRUSTED_Relay 16771 4.61 12.08 1.39 44 RCVD_IN_BL_SPAMCOP_NET 16587 4.14 11.95 0.77 45 XM_B_SpammyWords3 15450 5.90 11.13 3.64 46 TR_XM_SpammyRelay 15410 4.50 11.10 1.66 47 TR_XM_SpammyWords2 14268 3.77 10.28 0.97 48 HTML_MIME_NO_HTML_TAG 13761 5.06 9.91 2.97 49 BAYES_80 13273 6.11 9.56 4.63 50 MPART_ALT_DIFF 12967 8.08 9.34 7.53 51 XM_UncommonTLD01 12607 5.19 9.08 3.51 52 XM_Evil_Numbers_Gen 11732 7.91 8.45 7.68 53 XM_SendGrid 11054 6.48 7.96 5.83 54 XMSubMetaSx_00 10956 4.70 7.89 3.32 55 RCVD_IN_MSPIKE_BL 10866 3.23 7.83 1.25 56 TR_XM_MSPIKECOMBO 10774 3.21 7.76 1.25 57 XM_H_Long_From01 10527 6.20 7.58 5.61 58 BAYES_60 10361 9.03 7.46 9.70 59 HTML_IMAGE_RATIO_02 9560 6.21 6.89 5.92 60 TM2_M_VERY_LONG_WORD 9418 3.49 6.78 2.07 61 MIME_HTML_ONLY_MULTI 9297 5.90 6.70 5.55 62 RCVD_IN_MSPIKE_H4 9198 10.50 6.63 12.17 63 LotsOfNums_01 9131 8.77 6.58 9.71 64 TR_XM_MaxUnsub 8961 2.33 6.46 0.55 65 TR_XM_PhishingBody 8653 4.02 6.23 3.07 66 XM_BadFromFormat 8334 1.88 6.00 0.11 67 XM_B_Phish_Phrases 8020 3.96 5.78 3.17 68 XMNumbers 7939 4.35 5.72 3.76 69 XM_B_SpammyTLD 7912 3.37 5.70 2.37 70 XM_SPF_SoftFail 7456 3.09 5.37 2.11 71 TR_XM_SPAMCOP 7436 1.77 5.36 0.23 72 T_REMOTE_IMAGE 7337 4.13 5.29 3.63 73 RELAYCOUNTRY_CA 7225 2.24 5.20 0.96 74 TR_XM_SpammyWords5 7160 2.57 5.16 1.45 75 BODY_URI_ONLY 7101 1.55 5.12 0.01 76 TR_XM_DK_SendGrid 7052 4.07 5.08 3.64 77 TR_XM_SpammyWords3 6855 1.91 4.94 0.60 78 XM_GoogleGroups 6781 2.92 4.89 2.07 79 RCVD_IN_MSPIKE_L5 6662 1.55 4.80 0.14 80 HDRS_MISSP 6607 1.46 4.76 0.04 81 TooManyTo_001 6392 6.99 4.60 8.01 82 HTML_IMAGE_RATIO_04 6200 6.40 4.47 7.23 83 GOOG_STO_IMG_HTML 6065 1.32 4.37 0.00 84 BAYES_95 5948 3.34 4.28 2.94 85 XM_B_Investor 5713 2.31 4.12 1.53 86 XMLngstWrd_00 5604 2.08 4.04 1.23 87 XMLngstWrd_01 5522 2.01 3.98 1.16 88 HTML_TAG_BALANCE_CENTER 5495 1.23 3.96 0.05 89 XMLngstWrd_02 5468 1.93 3.94 1.06 90 XMLngstWrd_03 5429 1.86 3.91 0.97 91 HTML_TITLE_SUBJ_DIFF 5389 1.74 3.88 0.81 92 UPPERCASE_75_100 5364 1.72 3.86 0.80 93 XMLngstWrd_04 5359 1.80 3.86 0.92 94 DKIM_ADSP_CUSTOM_MED 5251 1.78 3.78 0.92 95 XM_UB50 5196 1.72 3.74 0.85 96 MIME_QP_LONG_LINE 5001 5.26 3.60 5.97 97 T_XMDrugObfuBody_08 4990 2.15 3.59 1.53 98 XMStrtUSub 4989 4.22 3.59 4.50 99 T_XMDrugObfuBody_14 4966 3.02 3.58 2.79 100 MIME_HTML_MOSTLY 4960 2.89 3.57 2.60 101 PDS_OTHER_BAD_TLD 4953 1.18 3.57 0.16 102 RCVD_IN_VALIDITY_SAFE 4872 4.39 3.51 4.76 103 BOTNET_NORDNS 4844 1.07 3.49 0.03 104 KHOP_HELO_FCRDNS 4815 2.09 3.47 1.50 105 HTML_SHORT_LINK_IMG_1 4708 1.04 3.39 0.03 106 RELAYCOUNTRY_FR 4701 1.19 3.39 0.24 107 URI_PHP_REDIR 4496 0.98 3.24 0.00 108 XM_B_Phish66 4328 2.18 3.12 1.77 109 RCVD_IN_IADB_LISTED 4304 5.27 3.10 6.20 110 FORGED_GMAIL_RCVD 4225 1.23 3.04 0.44 111 NML_ADSP_CUSTOM_MED 4206 1.32 3.03 0.58 112 FROM_MISSP_REPLYTO 4163 0.92 3.00 0.02 113 XM_OfRef6 4132 1.55 2.98 0.94 114 SpammyFromTLD_01 4063 1.33 2.93 0.65 115 RCVD_IN_VALIDITY_CERTIFIED 4036 3.91 2.91 4.34 116 RCVD_IN_PSBL 4015 0.90 2.89 0.05 117 TM2_M_URI_OPT_OUT 4009 3.09 2.89 3.18 118 XM_UB80 3970 0.88 2.86 0.02 119 HTML_IMAGE_RATIO_06 3963 3.45 2.85 3.71 120 DKIM_INVALID 3828 2.53 2.76 2.42 121 SpammyFromTLD_02 3763 1.26 2.71 0.63 122 HTML_IMAGE_ONLY_04 3744 0.85 2.70 0.05 123 HTML_SHORT_CENTER 3705 0.81 2.67 0.00 124 XM_DIRTYINTL 3691 1.03 2.66 0.33 125 RCVD_IN_VALIDITY_RPBL 3691 0.82 2.66 0.03 126 RCVD_IN_IADB_SPF 3634 4.63 2.62 5.49 127 HTML_IMAGE_ONLY_08 3540 0.85 2.55 0.11 128 XM_B_COVIDMETA 3493 1.20 2.52 0.64 129 XM_CamelCaseFrm001 3463 1.92 2.49 1.67 130 USER_IN_DEF_DKIM_WL 3458 9.27 2.49 12.18 131 XMDiploma_00 3450 1.51 2.49 1.09 132 T_TooManySym_01 3437 5.25 2.48 6.45 133 XM_B_Unsub2 3333 1.67 2.40 1.35 134 RCVD_IN_IADB_DK 3331 4.06 2.40 4.78 135 T_XMDrugObfuBody_00 3320 1.36 2.39 0.92 136 RCVD_IN_IADB_SENDERID 3294 4.18 2.37 4.95 137 SUBJ_ALL_CAPS 3203 2.03 2.31 1.91 138 FROM_EXCESS_BASE64 3163 2.45 2.28 2.53 139 T_FILL_THIS_FORM_SHORT 3138 1.20 2.26 0.74 140 MAILING_LIST_MULTI 3111 2.65 2.24 2.83 141 LONG_JUNK_URI3 3106 0.69 2.24 0.03 142 RELAYCOUNTRY_CZ 3095 0.68 2.23 0.01 143 TR_XM_SB_Phish 3066 2.35 2.21 2.41 144 XMBody_17 3061 0.96 2.21 0.43 145 URI_NOVOWEL 3059 2.64 2.20 2.83 146 T_TVD_MIME_EPI 2995 0.66 2.16 0.02 147 TR_Symld_Words 2953 1.86 2.13 1.75 148 RCVD_IN_MSPIKE_L3 2946 1.06 2.12 0.61 149 HTML_IMAGE_RATIO_08 2944 2.18 2.12 2.21 150 XM_DK_Undo_01 2943 1.73 2.12 1.56 151 XMSubPhish11 2892 2.29 2.08 2.38 152 TR_XM_MSPIKECOMBO2 2887 0.74 2.08 0.16 153 XM_B_SpammyWords4 2753 1.08 1.98 0.70 154 XM_UB99 2687 0.58 1.94 0.00 155 RELAYCOUNTRY_AU 2686 0.82 1.93 0.34 156 XMSexyCombo_01 2592 0.96 1.87 0.57 157 RCVD_IN_IADB_VOUCHED 2489 3.20 1.79 3.81 158 BAYES_40 2391 3.94 1.72 4.89 159 BAYES_20 2330 2.96 1.68 3.51 160 T_XMHurry_00 2321 0.96 1.67 0.65 161 URI_HEX 2273 1.43 1.64 1.34 162 TR_XM_PHPDW 2255 0.74 1.62 0.35 163 TR_XM_PHPForged 2146 0.69 1.55 0.32 164 URIBL_DBL_SPAM 2126 0.47 1.53 0.02 165 TR_XM_FormFill2 2120 0.68 1.53 0.32 166 XM_H_PHPOS 2108 0.67 1.52 0.31 167 MIXED_CENTER_CASE 2080 0.45 1.50 0.00 168 MIXED_HREF_CASE 2076 0.45 1.50 0.00 169 BAYES_00 2074 8.50 1.49 11.52 170 MIXED_IMG_CASE 2065 0.45 1.49 0.00 171 MIXED_AREA_CASE 2064 0.45 1.49 0.00 172 MIXED_FONT_CASE 2058 0.45 1.48 0.00 173 XM_Body_Dirty_Words_01 2058 0.92 1.48 0.68 174 XM_URI_RBL 2053 0.53 1.48 0.13 175 URIBL_BLACK 2042 0.48 1.47 0.06 176 TR_XM_COVIDMETA4 2010 0.57 1.45 0.19 177 HTML_FONT_SIZE_LARGE 2006 0.53 1.45 0.13 178 RELAYCOUNTRY_PL 1977 0.45 1.42 0.03 179 TR_XM_COVIDMETA1 1964 0.62 1.41 0.28 180 DATE_IN_PAST_03_06 1946 0.52 1.40 0.15 181 HTTPS_HTTP_MISMATCH 1897 0.87 1.37 0.66 182 XM_UB999 1895 0.41 1.37 0.00 183 XMGenDplmaNmb 1883 0.83 1.36 0.60 184 TR_Mismatch_TLD_02 1858 0.46 1.34 0.08 185 FROM_SUSPICIOUS_NTLD 1855 0.43 1.34 0.04 186 XMStockSpam_06 1842 1.24 1.33 1.21 187 XMPhish30 1811 0.84 1.30 0.64 188 DIET_1 1799 0.73 1.30 0.49 189 TR_XM_FormFill 1796 0.44 1.29 0.07 190 ALL_TRUSTED 1784 11.33 1.29 15.66 191 TR_XM_NoHeaderRelay 1777 0.52 1.28 0.20 192 TM2_M_A_HREF_HREF 1765 0.90 1.27 0.74 193 FROM_SUSPICIOUS_NTLD_FP 1760 0.41 1.27 0.04 194 XM_UB60 1750 0.47 1.26 0.12 195 XMBdyGiftCard01 1719 0.92 1.24 0.78 196 RELAYCOUNTRY_DE 1688 0.59 1.22 0.33 197 TR_XM_BayesRelay 1617 0.35 1.16 0.00 198 T_Symld_Words_02 1613 0.63 1.16 0.40 199 HTML_FONT_TINY_NORDNS 1572 0.38 1.13 0.05 200 XMGppyBdWords 1506 0.42 1.08 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 279291 89.33 95.47 86.68 2 RELAYCOUNTRY_US 263232 81.51 81.09 81.70 3 DKIM_SIGNED 233575 75.29 81.78 72.49 4 XM_DK_Pass 228886 73.66 79.75 71.04 5 DKIM_VALID 225762 72.77 79.03 70.07 6 XM_B_Unicode 224080 71.01 74.39 69.55 7 DCC_CHECK_NEGATIVE 215791 56.81 33.21 66.97 8 BAYES_50 174264 49.85 40.01 54.08 9 DKIM_VALID_AU 170593 54.24 57.25 52.95 10 XMListUnsubscribeExists 156336 54.03 66.83 48.52 11 XM_B_SpammyWords 139647 49.35 63.30 43.34 12 XM_B_Unicode3 138743 42.35 40.71 43.06 13 DCC_CHECK 106284 43.16 66.76 32.99 14 RCVD_IN_MSPIKE_WL 98338 27.60 20.81 30.52 15 T_TM2_M_HEADER_IN_MSG 94155 26.22 19.24 29.22 16 DKIM_VALID_EF 85360 26.83 27.61 26.49 17 HTML_FONT_LOW_CONTRAST 83214 26.93 29.48 25.83 18 LOC_TINY_FONT_1 76879 26.99 34.26 23.86 19 FVGT_m_MULTI_ODD 72951 26.10 34.12 22.64 20 MIME_HTML_ONLY 72897 26.61 35.85 22.62 21 XMSubLong 70831 22.37 23.26 21.98 22 RCVD_IN_MSPIKE_H2 66318 22.11 25.66 20.58 23 T_KAM_HTML_FONT_INVALID 59013 19.72 22.98 18.32 24 XM_B_SpammyWords2 59000 22.97 33.77 18.31 25 RCVD_IN_MSPIKE_H3 53100 15.70 13.87 16.48 26 ALL_TRUSTED 50465 11.33 1.29 15.66 27 USER_IN_DEF_DKIM_WL 39258 9.27 2.49 12.18 28 RCVD_IN_MSPIKE_H4 39225 10.50 6.63 12.17 29 XM_Body_Dirty_Words 38706 14.72 21.00 12.01 30 XM_Multi_Part_URI 37322 12.55 14.79 11.58 31 BAYES_00 37107 8.50 1.49 11.52 32 LotsOfNums_01 31293 8.77 6.58 9.71 33 BAYES_60 31263 9.03 7.46 9.70 34 XM_B_Unsub 30051 10.65 13.74 9.33 35 LOTS_OF_MONEY 29033 10.59 14.26 9.01 36 TooManyTo_001 25819 6.99 4.60 8.01 37 UNPARSEABLE_RELAY 25227 9.30 12.72 7.83 38 XM_Evil_Numbers_Gen 24738 7.91 8.45 7.68 39 XM_DKIMWhitelistDomains 24497 5.34 0.09 7.60 40 MPART_ALT_DIFF 24264 8.08 9.34 7.53 41 HTML_IMAGE_RATIO_04 23309 6.40 4.47 7.23 42 XM_DK_Undo_02 22785 18.11 43.74 7.07 43 TR_XM_DK_Bayes 21826 4.89 0.51 6.77 44 IN_ZIMBRA_NJ_WHITELIST 21790 4.77 0.13 6.76 45 TR_XM_DK_Bayes1 21342 4.78 0.50 6.62 46 BAYES_99 20900 14.42 32.84 6.49 47 T_TooManySym_01 20784 5.25 2.48 6.45 48 RCVD_IN_IADB_LISTED 19988 5.27 3.10 6.20 49 TR_XM_UnparsRelay 19621 8.01 12.46 6.09 50 MIME_QP_LONG_LINE 19242 5.26 3.60 5.97 51 HTML_IMAGE_RATIO_02 19063 6.21 6.89 5.92 52 XM_H_Trusted_IP 19053 4.13 0.00 5.91 53 XM_SendGrid 18800 6.48 7.96 5.83 54 TR_XM_DK_Bayes2 18637 4.15 0.36 5.78 55 XM_H_Long_From01 18061 6.20 7.58 5.61 56 MIME_HTML_ONLY_MULTI 17896 5.90 6.70 5.55 57 RCVD_IN_IADB_SPF 17695 4.63 2.62 5.49 58 TR_XM_SpammyWords4 17233 7.40 12.17 5.35 59 BAYES_999 17097 11.47 25.77 5.31 60 BOTNET_IPINHOSTNAME 16262 7.76 14.06 5.05 61 TR_XM_DKIM_Undo 16020 13.62 33.70 4.97 62 RCVD_IN_IADB_SENDERID 15963 4.18 2.37 4.95 63 BAYES_40 15767 3.94 1.72 4.89 64 XM_PDF 15569 3.62 0.79 4.83 65 RCVD_IN_IADB_DK 15392 4.06 2.40 4.78 66 RCVD_IN_VALIDITY_SAFE 15345 4.39 3.51 4.76 67 BAYES_80 14908 6.11 9.56 4.63 68 XMStrtUSub 14486 4.22 3.59 4.50 69 RCVD_IN_VALIDITY_CERTIFIED 13974 3.91 2.91 4.34 70 RELAYCOUNTRY_META 12828 9.50 22.32 3.98 71 FSL_BULK_SIG 12350 6.60 13.03 3.83 72 RCVD_IN_IADB_VOUCHED 12271 3.20 1.79 3.81 73 T_TooManySym_02 12239 2.87 0.72 3.80 74 XMNumbers 12111 4.35 5.72 3.76 75 HTML_IMAGE_RATIO_06 11961 3.45 2.85 3.71 76 XM_B_SpammyWords3 11741 5.90 11.13 3.64 77 TR_XM_DK_SendGrid 11720 4.07 5.08 3.64 78 T_REMOTE_IMAGE 11691 4.13 5.29 3.63 79 BAYES_20 11316 2.96 1.68 3.51 80 XM_UncommonTLD01 11313 5.19 9.08 3.51 81 XMSexyCombo_05 11084 6.11 12.31 3.44 82 XMSubMetaSx_00 10690 4.70 7.89 3.32 83 ANY_BOUNCE_MESSAGE 10525 2.55 0.88 3.27 84 BOUNCE_MESSAGE 10525 2.55 0.88 3.27 85 TM2_M_URI_OPT_OUT 10258 3.09 2.89 3.18 86 XM_B_Phish_Phrases 10223 3.96 5.78 3.17 87 TR_XM_PhishingBody 9884 4.02 6.23 3.07 88 HTML_MIME_NO_HTML_TAG 9584 5.06 9.91 2.97 89 BAYES_95 9471 3.34 4.28 2.94 90 URI_NOVOWEL 9122 2.64 2.20 2.83 91 MAILING_LIST_MULTI 9112 2.65 2.24 2.83 92 T_XMDrugObfuBody_14 8979 3.02 3.58 2.79 93 MIME_HTML_MOSTLY 8374 2.89 3.57 2.60 94 FROM_EXCESS_BASE64 8151 2.45 2.28 2.53 95 RCVD_IN_IADB_OPTIN 7981 2.04 1.02 2.48 96 DKIM_INVALID 7813 2.53 2.76 2.42 97 TR_XM_SB_Phish 7753 2.35 2.21 2.41 98 XMSubPhish11 7655 2.29 2.08 2.38 99 XM_B_SpammyTLD 7639 3.37 5.70 2.37 100 BAYES_05 7199 1.81 0.81 2.23 101 HTML_IMAGE_RATIO_08 7105 2.18 2.12 2.21 102 TooManyTo_002 6953 1.73 0.72 2.16 103 XM_SPF_SoftFail 6784 3.09 5.37 2.11 104 TM2_M_VERY_LONG_WORD 6677 3.49 6.78 2.07 105 XM_GoogleGroups 6663 2.92 4.89 2.07 106 INVALID_MSGID 6613 1.52 0.28 2.05 107 TVD_RCVD_IP 6553 1.51 0.28 2.03 108 HTML_FONT_FACE_BAD 6489 1.63 0.75 2.01 109 TR_DCC_Bayes_99 6460 8.46 23.44 2.00 110 SUBJ_ALL_CAPS 6167 2.03 2.31 1.91 111 MSGID_NOFQDN1 6156 1.37 0.10 1.91 112 TO_MALFORMED 6040 1.32 0.02 1.87 113 RCVD_IN_MSPIKE_H5 6013 1.40 0.31 1.87 114 IN_HORDE_ADDRESS_BOOK 5856 1.34 0.24 1.82 115 XM_B_Phish66 5708 2.18 3.12 1.77 116 TR_Symld_Words 5630 1.86 2.13 1.75 117 XMSubNoVowel 5517 1.41 0.72 1.71 118 XM_CamelCaseFrm001 5374 1.92 2.49 1.67 119 TR_XM_SpammyRelay 5354 4.50 11.10 1.66 120 HELO_NODOT 5220 1.29 0.52 1.62 121 HELO_NO_DOMAIN 5213 1.29 0.52 1.62 122 BOTNET 5172 5.92 15.92 1.61 123 XM_DK_Undo_01 5024 1.73 2.12 1.56 124 XMGappySubj_01 5016 1.12 0.12 1.56 125 XM_B_Investor 4936 2.31 4.12 1.53 126 T_XMDrugObfuBody_08 4927 2.15 3.59 1.53 127 KHOP_HELO_FCRDNS 4843 2.09 3.47 1.50 128 TooManyTo_003 4718 1.22 0.64 1.46 129 TR_XM_SpammyWords5 4684 2.57 5.16 1.45 130 UNTRUSTED_Relay 4489 4.61 12.08 1.39 131 XM_B_Unsub2 4354 1.67 2.40 1.35 132 URI_HEX 4310 1.43 1.64 1.34 133 RCVD_IN_MSPIKE_BL 4029 3.23 7.83 1.25 134 XM_ProductURIs 4020 1.04 0.55 1.25 135 TR_XM_MSPIKECOMBO 4014 3.21 7.76 1.25 136 XMLngstWrd_00 3965 2.08 4.04 1.23 137 XMStockSpam_06 3890 1.24 1.33 1.21 138 HTML_IMAGE_ONLY_20 3886 0.98 0.47 1.21 139 XMLngstWrd_01 3726 2.01 3.98 1.16 140 XMBSHREFv2 3659 0.86 0.23 1.14 141 TVD_SPACE_RATIO 3650 0.98 0.63 1.13 142 XMCapTrack 3546 1.03 0.87 1.10 143 XMDiploma_00 3520 1.51 2.49 1.09 144 XMLngstWrd_02 3426 1.93 3.94 1.06 145 TooManyTo_004 3399 0.91 0.58 1.05 146 XM_H_Long_From02 3386 1.02 0.96 1.05 147 TR_MetaPhish_Combo_01 3194 0.96 0.90 0.99 148 XMLngstWrd_03 3140 1.86 3.91 0.97 149 TR_XM_SpammyWords2 3117 3.77 10.28 0.97 150 RELAYCOUNTRY_CA 3107 2.24 5.20 0.96 151 RCVD_IN_RP_SAFE 3035 0.89 0.77 0.94 152 XM_OfRef6 3028 1.55 2.98 0.94 153 T_XMDrugObfuBody_00 2966 1.36 2.39 0.92 154 XMLngstWrd_04 2954 1.80 3.86 0.92 155 DKIM_ADSP_CUSTOM_MED 2950 1.78 3.78 0.92 156 RCVD_IN_RP_CERTIFIED 2779 0.79 0.62 0.86 157 XM_UB50 2746 1.72 3.74 0.85 158 TooManyTo_005 2721 0.75 0.53 0.84 159 HTML_TITLE_SUBJ_DIFF 2619 1.74 3.88 0.81 160 T_TooManySym_03 2605 0.63 0.22 0.81 161 UPPERCASE_75_100 2579 1.72 3.86 0.80 162 XMBdyGiftCard01 2522 0.92 1.24 0.78 163 RCVD_IN_BL_SPAMCOP_NET 2480 4.14 11.95 0.77 164 XMBrknScrpt_02 2431 0.75 0.75 0.75 165 TM2_M_A_HREF_HREF 2400 0.90 1.27 0.74 166 RELAYCOUNTRY_GB 2390 0.78 0.88 0.74 167 T_FILL_THIS_FORM_SHORT 2378 1.20 2.26 0.74 168 XM_D_tchamptons_WL 2349 0.53 0.06 0.73 169 XM_B_SpammyWords4 2245 1.08 1.98 0.70 170 XM_B_COPY_HTML 2229 0.70 0.71 0.69 171 FROM_GOV_DKIM_AU 2201 0.50 0.07 0.68 172 XM_Body_Dirty_Words_01 2195 0.92 1.48 0.68 173 HTTPS_HTTP_MISMATCH 2124 0.87 1.37 0.66 174 T_XMHurry_00 2092 0.96 1.67 0.65 175 SpammyFromTLD_01 2079 1.33 2.93 0.65 176 XMPhish30 2077 0.84 1.30 0.64 177 XM_B_COVIDMETA 2054 1.20 2.52 0.64 178 SpammyFromTLD_02 2039 1.26 2.71 0.63 179 T_OBFU_PDF_ATTACH 2034 0.48 0.13 0.63 180 XMHTML_After_End 1984 0.68 0.84 0.62 181 RCVD_IN_MSPIKE_L3 1960 1.06 2.12 0.61 182 TR_MSPIKEBAYES00 1956 0.43 0.02 0.61 183 XM_ShortIntro_01 1955 0.62 0.66 0.61 184 TR_XM_SpammyWords3 1949 1.91 4.94 0.60 185 XMGenDplmaNmb 1944 0.83 1.36 0.60 186 XM_H_PHPMailer 1900 0.65 0.80 0.59 187 NML_ADSP_CUSTOM_MED 1876 1.32 3.03 0.58 188 XMSexyCombo_01 1851 0.96 1.87 0.57 189 XMSubMetaD_03 1790 0.51 0.40 0.56 190 HTML_TAG_BALANCE_BODY 1773 0.61 0.74 0.55 191 TR_XM_MaxUnsub 1760 2.33 6.46 0.55 192 XMBody_95 1755 0.42 0.13 0.54 193 T_MANY_PILL_PRICE 1719 0.38 0.03 0.53 194 URI_TRY_3LD 1646 0.68 1.08 0.51 195 MPART_ALT_DIFF_COUNT 1617 0.54 0.63 0.50 196 RCVD_IN_MSPIKE_L4 1593 0.60 0.84 0.49 197 DIET_1 1575 0.73 1.30 0.49 198 XMNoVowels 1564 0.43 0.32 0.49 199 SHORT_HELO_AND_INLINE_IMAGE 1549 0.36 0.07 0.48 200 XM_shorewaves_Whitelist 1449 0.31 0.00 0.45 ----------------------------------------------------------------------