Email: 570588 Autolearn: 0 AvgScore: 0.73 AvgScanTime: 1.31 sec Spam: 149724 Autolearn: 0 AvgScore: 14.01 AvgScanTime: 1.50 sec Ham: 420864 Autolearn: 0 AvgScore: -4.00 AvgScanTime: 1.24 sec Time Spent Running SA: 207.82 hours Time Spent Processing Spam: 62.49 hours Time Spent Processing Ham: 145.33 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137419 89.75 91.78 89.03 2 DKIM_SIGNED 118347 64.67 79.04 59.56 3 XM_DK_Pass 114940 63.35 76.77 58.58 4 DKIM_VALID 113852 62.60 76.04 57.82 5 RELAYCOUNTRY_US 113102 78.16 75.54 79.09 6 XM_B_Unicode 112803 72.71 75.34 71.78 7 DCC_CHECK 102044 37.74 68.15 26.92 8 XM_B_SpammyWords 101880 51.48 68.05 45.58 9 XMListUnsubscribeExists 93614 44.86 62.52 38.58 10 DKIM_VALID_AU 84556 47.90 56.47 44.85 11 BAYES_50 65687 49.34 43.87 51.28 12 XM_B_Unicode3 63843 43.36 42.64 43.62 13 XM_B_SpammyWords2 61006 24.85 40.75 19.19 14 XM_DK_Undo_02 54935 13.79 36.69 5.64 15 MIME_HTML_ONLY 51618 26.25 34.48 23.32 16 FVGT_m_MULTI_ODD 48693 23.52 32.52 20.31 17 DCC_CHECK_NEGATIVE 47621 62.22 31.81 73.04 18 LOC_TINY_FONT_1 47599 22.20 31.79 18.78 19 HTML_FONT_LOW_CONTRAST 44678 24.88 29.84 23.11 20 TR_XM_DKIM_Undo 44124 10.79 29.47 4.14 21 BAYES_99 43919 11.08 29.33 4.58 22 RCVD_IN_MSPIKE_H2 42611 20.48 28.46 17.64 23 XMSubLong 41206 21.71 27.52 19.65 24 DKIM_VALID_EF 39621 23.46 26.46 22.39 25 T_TM2_M_HEADER_IN_MSG 38576 27.29 25.76 27.83 26 T_KAM_HTML_FONT_INVALID 35558 17.13 23.75 14.77 27 BAYES_999 34358 8.79 22.95 3.76 28 RELAYCOUNTRY_META 33893 8.24 22.64 3.12 29 XM_Body_Dirty_Words 31993 12.49 21.37 9.33 30 TR_DCC_Bayes_99 31149 6.66 20.80 1.63 31 LOTS_OF_MONEY 28343 10.76 18.93 7.86 32 RCVD_IN_MSPIKE_WL 28011 22.79 18.71 24.24 33 FSL_BULK_SIG 26160 6.78 17.47 2.97 34 XM_B_Unsub 24800 12.33 16.56 10.82 35 TR_XM_SpammyWords4 23941 8.28 15.99 5.53 36 XM_Multi_Part_URI 23540 11.54 15.72 10.05 37 BOTNET_IPINHOSTNAME 20259 6.39 13.53 3.85 38 TR_XM_SpammyRelay 19409 4.34 12.96 1.27 39 UNTRUSTED_Relay 19120 4.17 12.77 1.12 40 RCVD_IN_MSPIKE_H3 18471 13.49 12.34 13.90 41 XM_B_SpammyWords3 18340 5.76 12.25 3.45 42 UNPARSEABLE_RELAY 16787 7.65 11.21 6.38 43 TR_XM_UnparsRelay 16318 6.45 10.90 4.87 44 BAYES_80 15719 5.28 10.50 3.42 45 BOTNET 15170 3.69 10.13 1.40 46 XMSexyCombo_05 13843 4.50 9.25 2.81 47 TR_XM_SpammyWords2 13601 2.94 9.08 0.75 48 XM_UncommonTLD01 13546 4.58 9.05 3.00 49 MPART_ALT_DIFF 13228 10.35 8.83 10.88 50 RCVD_IN_BL_SPAMCOP_NET 12927 2.62 8.63 0.48 51 XM_Evil_Numbers_Gen 11858 8.50 7.92 8.71 52 XM_B_Phish_Phrases 11145 4.22 7.44 3.08 53 BAYES_60 10871 7.49 7.26 7.57 54 XM_UB50 10495 2.40 7.01 0.76 55 LotsOfNums_01 10132 7.32 6.77 7.51 56 XM_SendGrid 10077 5.28 6.73 4.77 57 TR_XM_PhishingBody 9512 3.80 6.35 2.89 58 ALL_TRUSTED 9349 15.57 6.24 18.89 59 HTML_MIME_NO_HTML_TAG 9345 3.28 6.24 2.23 60 XM_SPF_SoftFail 9146 3.38 6.11 2.42 61 XM_H_Long_From01 9062 4.83 6.05 4.40 62 HTML_IMAGE_RATIO_02 9017 5.24 6.02 4.97 63 XM_B_SpammyTLD 8987 2.84 6.00 1.71 64 TM2_M_URI_OPT_OUT 8961 5.06 5.99 4.74 65 RCVD_IN_MSPIKE_BL 8870 2.22 5.92 0.90 66 RCVD_IN_MSPIKE_H4 8803 8.14 5.88 8.95 67 TR_XM_MSPIKECOMBO 8753 2.20 5.85 0.90 68 MIME_HTML_ONLY_MULTI 8400 8.22 5.61 9.15 69 TR_XM_MaxUnsub 7994 1.96 5.34 0.76 70 T_REMOTE_IMAGE 7904 3.61 5.28 3.02 71 TM2_M_VERY_LONG_WORD 7837 2.56 5.23 1.60 72 TooManyTo_001 7750 8.07 5.18 9.09 73 XMSubMetaSx_00 7595 3.47 5.07 2.90 74 TR_XM_SB_Phish 7532 3.14 5.03 2.46 75 RELAYCOUNTRY_CA 7368 1.80 4.92 0.69 76 XMSubPhish11 7360 3.10 4.92 2.45 77 XMNumbers 7092 3.29 4.74 2.78 78 XM_B_Investor 6902 2.09 4.61 1.19 79 MONEY_NOHTML 6812 1.24 4.55 0.06 80 BAYES_95 6685 2.79 4.46 2.19 81 HTML_IMAGE_RATIO_04 6053 13.06 4.04 16.27 82 TR_XM_DK_SendGrid 6045 3.40 4.04 3.18 83 PDS_OTHER_BAD_TLD 5982 1.16 4.00 0.15 84 XMStrtUSub 5895 9.56 3.94 11.55 85 TR_XM_SPAMCOP 5879 1.18 3.93 0.20 86 T_XMDrugObfuBody_08 5677 1.93 3.79 1.26 87 UPPERCASE_75_100 5624 1.42 3.76 0.59 88 TR_LOTS_OF_MONEY3 5592 1.11 3.73 0.18 89 MIME_HTML_MOSTLY 5486 2.50 3.66 2.08 90 T_XMDrugObfuBody_14 5391 2.07 3.60 1.52 91 TR_XM_SpammyWords3 5388 1.25 3.60 0.42 92 XM_GoogleGroups 5360 2.13 3.58 1.61 93 HTML_IMAGE_RATIO_06 5337 4.47 3.56 4.79 94 XM_OfRef6 5330 1.50 3.56 0.77 95 TR_Mismatch_TLD_01 5311 1.07 3.55 0.18 96 MIME_QP_LONG_LINE 5184 6.17 3.46 7.14 97 LOADSA_MONEY_COMBO 5168 0.93 3.45 0.03 98 TR_XM_SpammyWords5 5109 1.78 3.41 1.20 99 URI_NOVOWEL 5071 2.43 3.39 2.08 100 KHOP_HELO_FCRDNS 5049 2.29 3.37 1.91 101 XFER_LOTSA_MONEY 4983 0.88 3.33 0.02 102 XMLngstWrd_00 4938 1.70 3.30 1.13 103 XMLngstWrd_01 4893 1.66 3.27 1.08 104 RCVD_IN_VALIDITY_SAFE 4818 3.82 3.22 4.04 105 XMLngstWrd_02 4789 1.57 3.20 0.99 106 SUBJ_ALL_CAPS 4759 1.85 3.18 1.37 107 XM_Lotto 4750 0.88 3.17 0.06 108 XMLngstWrd_03 4718 1.48 3.15 0.89 109 SpammyFromTLD_01 4716 1.24 3.15 0.57 110 XMLngstWrd_04 4645 1.41 3.10 0.81 111 HTML_TITLE_SUBJ_DIFF 4637 1.26 3.10 0.60 112 MIME_HEADER_CTYPE_ONLY 4635 1.00 3.10 0.26 113 RCVD_IN_VALIDITY_RPBL 4601 0.81 3.07 0.01 114 XM_B_Phish66 4575 1.94 3.06 1.55 115 DKIM_INVALID 4495 2.07 3.00 1.74 116 XM_DK_Undo_01 4461 1.77 2.98 1.33 117 XM_XX_Yahoo 4398 0.85 2.94 0.11 118 XMDiploma_00 4307 1.50 2.88 1.01 119 RELAYCOUNTRY_TW 4242 0.77 2.83 0.04 120 XMSubject_48 4188 0.75 2.80 0.02 121 XMBody_17 4179 0.95 2.79 0.29 122 RCVD_IN_VALIDITY_CERTIFIED 4159 3.35 2.78 3.55 123 MONEY_FRAUD_3 4150 0.73 2.77 0.00 124 XM_B_SpammyWords4 4081 1.04 2.73 0.44 125 RCVD_IN_IADB_LISTED 3983 3.81 2.66 4.22 126 XM_CamelCaseFrm001 3852 1.75 2.57 1.45 127 XM_DIRTYINTL 3671 0.84 2.45 0.27 128 RCVD_IN_MSPIKE_L5 3633 0.65 2.43 0.02 129 XM_Body_Dirty_Words_01 3611 1.10 2.41 0.63 130 XM_B_Unsub2 3583 1.50 2.39 1.18 131 T_TooManySym_01 3574 3.92 2.39 4.47 132 ADVANCE_FEE_2_NEW_MONEY 3527 0.62 2.36 0.01 133 T_FILL_THIS_FORM_SHORT 3442 1.15 2.30 0.74 134 BOTNET_NORDNS 3405 0.61 2.27 0.02 135 SpammyFromTLD_02 3387 0.88 2.26 0.39 136 RCVD_IN_IADB_SPF 3331 3.35 2.22 3.75 137 HTML_IMAGE_RATIO_08 3306 2.09 2.21 2.04 138 XM_B_COVIDMETA 3287 0.93 2.20 0.48 139 T_HTML_TAG_BALANCE_CENTER 3174 0.64 2.12 0.11 140 RCVD_IN_IADB_DK 3083 2.96 2.06 3.28 141 HTML_IMAGE_ONLY_08 3027 0.61 2.02 0.11 142 RCVD_IN_IADB_SENDERID 2988 3.03 2.00 3.40 143 URI_HEX 2892 1.31 1.93 1.09 144 TR_XM_MSPIKECOMBO2 2885 0.60 1.93 0.13 145 XMSexyCombo_01 2830 0.77 1.89 0.38 146 RCVD_IN_MSPIKE_L3 2744 0.68 1.83 0.27 147 URI_PHP_REDIR 2726 0.48 1.82 0.00 148 USER_IN_DEF_DKIM_WL 2708 7.96 1.81 10.15 149 XM_UB99 2657 0.47 1.77 0.00 150 BODY_URI_ONLY 2596 0.46 1.73 0.01 151 BAYES_40 2584 4.63 1.73 5.66 152 URIBL_DBL_SPAM 2566 0.46 1.71 0.01 153 T_XMDrugObfuBody_00 2555 1.14 1.71 0.94 154 RELAYCOUNTRY_AU 2551 0.63 1.70 0.24 155 RCVD_IN_IADB_VOUCHED 2542 2.28 1.70 2.49 156 XM_H_Undi_Recip 2526 0.58 1.69 0.19 157 MAILING_LIST_MULTI 2484 1.97 1.66 2.08 158 XMHTML_After_End 2430 0.93 1.62 0.68 159 RCVD_IN_MSPIKE_L4 2376 0.87 1.59 0.61 160 MIXED_CENTER_CASE 2352 0.41 1.57 0.00 161 HTTPS_HTTP_MISMATCH 2348 0.87 1.57 0.62 162 XM_B_Crypto 2341 0.55 1.56 0.19 163 MIXED_HREF_CASE 2338 0.41 1.56 0.00 164 XM_UB60 2338 0.45 1.56 0.05 165 XMBdyGiftCard01 2330 0.93 1.56 0.71 166 MIXED_AREA_CASE 2324 0.41 1.55 0.00 167 MIXED_IMG_CASE 2324 0.41 1.55 0.00 168 MIXED_FONT_CASE 2312 0.41 1.54 0.00 169 TR_XM_PHPDW 2293 0.63 1.53 0.31 170 TR_XM_NoHeaderRelay 2227 0.50 1.49 0.15 171 TR_XM_PHPForged 2216 0.60 1.48 0.29 172 XM_URI_RBL 2201 0.47 1.47 0.11 173 FROM_EXCESS_BASE64 2194 2.20 1.47 2.46 174 TR_XM_FormFill2 2155 0.60 1.44 0.30 175 PDS_FROM_NAME_TO_DOMAIN 2146 0.38 1.43 0.00 176 XM_H_PHPOS 2145 0.58 1.43 0.28 177 PDS_FRNOM_TODOM_NAKED_TO 2141 0.38 1.43 0.00 178 TR_XM_COVIDMETA1 2137 0.48 1.43 0.15 179 RELAYCOUNTRY_DE 2126 0.54 1.42 0.23 180 TR_Symld_Words 2069 1.29 1.38 1.26 181 XMStockSpam_06 2067 1.11 1.38 1.02 182 XM_UB999 2057 0.36 1.37 0.00 183 RELAYCOUNTRY_GB 2051 0.80 1.37 0.59 184 XMPhish30 2005 0.92 1.34 0.77 185 PDS_BTC_ID 1965 0.45 1.31 0.15 186 BAYES_20 1963 4.50 1.31 5.63 187 URIBL_BLACK 1956 0.37 1.31 0.04 188 XMBrknScrpt_02 1942 0.68 1.30 0.45 189 HTML_FONT_SIZE_LARGE 1931 0.39 1.29 0.07 190 FROM_ADDR_WS 1924 0.34 1.29 0.00 191 TR_Mismatch_TLD_02 1891 0.38 1.26 0.07 192 DKIM_ADSP_CUSTOM_MED 1889 0.88 1.26 0.74 193 RELAYCOUNTRY_NL 1835 0.42 1.23 0.13 194 XM_H_Long_From02 1813 0.94 1.21 0.85 195 RCVD_IN_PSBL 1796 0.41 1.20 0.13 196 XMGenDplmaNmb 1794 0.74 1.20 0.57 197 XM_B_SEO 1756 0.41 1.17 0.13 198 RELAYCOUNTRY_SG 1719 0.33 1.15 0.03 199 T_XMHurry_00 1712 2.20 1.14 2.57 200 NML_ADSP_CUSTOM_MED 1696 0.63 1.13 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 374692 89.75 91.78 89.03 2 RELAYCOUNTRY_US 332842 78.16 75.54 79.09 3 DCC_CHECK_NEGATIVE 307419 62.22 31.81 73.04 4 XM_B_Unicode 302096 72.71 75.34 71.78 5 DKIM_SIGNED 250677 64.67 79.04 59.56 6 XM_DK_Pass 246530 63.35 76.77 58.58 7 DKIM_VALID 243337 62.60 76.04 57.82 8 BAYES_50 215819 49.34 43.87 51.28 9 XM_B_SpammyWords 191838 51.48 68.05 45.58 10 DKIM_VALID_AU 188740 47.90 56.47 44.85 11 XM_B_Unicode3 183591 43.36 42.64 43.62 12 XMListUnsubscribeExists 162354 44.86 62.52 38.58 13 T_TM2_M_HEADER_IN_MSG 117122 27.29 25.76 27.83 14 DCC_CHECK 113298 37.74 68.15 26.92 15 RCVD_IN_MSPIKE_WL 102007 22.79 18.71 24.24 16 MIME_HTML_ONLY 98161 26.25 34.48 23.32 17 HTML_FONT_LOW_CONTRAST 97271 24.88 29.84 23.11 18 DKIM_VALID_EF 94211 23.46 26.46 22.39 19 FVGT_m_MULTI_ODD 85485 23.52 32.52 20.31 20 XMSubLong 82684 21.71 27.52 19.65 21 XM_B_SpammyWords2 80774 24.85 40.75 19.19 22 ALL_TRUSTED 79482 15.57 6.24 18.89 23 LOC_TINY_FONT_1 79050 22.20 31.79 18.78 24 RCVD_IN_MSPIKE_H2 74252 20.48 28.46 17.64 25 HTML_IMAGE_RATIO_04 68459 13.06 4.04 16.27 26 BAYES_00 65923 11.78 0.85 15.66 27 XM_H_Trusted_IP 64643 11.33 0.00 15.36 28 HTML_FONT_FACE_BAD 62707 11.17 0.67 14.90 29 T_KAM_HTML_FONT_INVALID 62159 17.13 23.75 14.77 30 RCVD_IN_MSPIKE_H3 58487 13.49 12.34 13.90 31 XMStrtUSub 48625 9.56 3.94 11.55 32 MPART_ALT_DIFF 45811 10.35 8.83 10.88 33 XM_B_Unsub 45536 12.33 16.56 10.82 34 USER_IN_DEF_DKIM_WL 42699 7.96 1.81 10.15 35 XM_Multi_Part_URI 42298 11.54 15.72 10.05 36 XM_Body_Dirty_Words 39259 12.49 21.37 9.33 37 MIME_HTML_ONLY_MULTI 38528 8.22 5.61 9.15 38 TooManyTo_001 38270 8.07 5.18 9.09 39 RCVD_IN_MSPIKE_H4 37647 8.14 5.88 8.95 40 XM_Evil_Numbers_Gen 36653 8.50 7.92 8.71 41 LOTS_OF_MONEY 33074 10.76 18.93 7.86 42 BAYES_60 31843 7.49 7.26 7.57 43 LotsOfNums_01 31609 7.32 6.77 7.51 44 MIME_QP_LONG_LINE 30046 6.17 3.46 7.14 45 XM_DKIMWhitelistDomains 29481 5.19 0.10 7.00 46 UNPARSEABLE_RELAY 26855 7.65 11.21 6.38 47 IN_ZIMBRA_NJ_WHITELIST 25385 4.47 0.08 6.03 48 BAYES_40 23812 4.63 1.73 5.66 49 XM_DK_Undo_02 23743 13.79 36.69 5.64 50 BAYES_20 23713 4.50 1.31 5.63 51 TR_XM_SpammyWords4 23287 8.28 15.99 5.53 52 TR_XM_DK_Bayes 23044 4.15 0.44 5.48 53 TR_XM_DK_Bayes1 22572 4.07 0.43 5.36 54 HTML_IMAGE_RATIO_02 20901 5.24 6.02 4.97 55 TR_XM_UnparsRelay 20487 6.45 10.90 4.87 56 HTML_IMAGE_RATIO_06 20140 4.47 3.56 4.79 57 XM_SendGrid 20056 5.28 6.73 4.77 58 TM2_M_URI_OPT_OUT 19934 5.06 5.99 4.74 59 TR_XM_DK_Bayes2 19873 3.58 0.37 4.72 60 XMSubNoVowel 19655 3.69 0.95 4.67 61 BAYES_99 19288 11.08 29.33 4.58 62 T_TooManySym_01 18798 3.92 2.39 4.47 63 XM_H_Long_From01 18511 4.83 6.05 4.40 64 RCVD_IN_IADB_LISTED 17759 3.81 2.66 4.22 65 TR_XM_DKIM_Undo 17425 10.79 29.47 4.14 66 RCVD_IN_VALIDITY_SAFE 17006 3.82 3.22 4.04 67 BAYES_05 16836 3.12 0.66 4.00 68 XM_PDF 16816 3.18 0.89 4.00 69 BOTNET_IPINHOSTNAME 16208 6.39 13.53 3.85 70 BAYES_999 15817 8.79 22.95 3.76 71 RCVD_IN_IADB_SPF 15787 3.35 2.22 3.75 72 RCVD_IN_VALIDITY_CERTIFIED 14937 3.35 2.78 3.55 73 XM_B_SpammyWords3 14510 5.76 12.25 3.45 74 BAYES_80 14409 5.28 10.50 3.42 75 ANY_BOUNCE_MESSAGE 14408 2.70 0.66 3.42 76 BOUNCE_MESSAGE 14407 2.70 0.66 3.42 77 RCVD_IN_IADB_SENDERID 14292 3.03 2.00 3.40 78 RCVD_IN_IADB_DK 13795 2.96 2.06 3.28 79 TR_XM_DK_SendGrid 13369 3.40 4.04 3.18 80 RELAYCOUNTRY_META 13119 8.24 22.64 3.12 81 XM_B_Phish_Phrases 12958 4.22 7.44 3.08 82 T_REMOTE_IMAGE 12720 3.61 5.28 3.02 83 XM_UncommonTLD01 12613 4.58 9.05 3.00 84 FSL_BULK_SIG 12508 6.78 17.47 2.97 85 XMSubMetaSx_00 12188 3.47 5.07 2.90 86 TR_XM_PhishingBody 12169 3.80 6.35 2.89 87 XMSexyCombo_05 11818 4.50 9.25 2.81 88 XMNumbers 11700 3.29 4.74 2.78 89 T_TooManySym_02 10917 2.12 0.78 2.59 90 T_XMHurry_00 10821 2.20 1.14 2.57 91 RCVD_IN_IADB_VOUCHED 10494 2.28 1.70 2.49 92 TR_XM_SB_Phish 10374 3.14 5.03 2.46 93 FROM_EXCESS_BASE64 10358 2.20 1.47 2.46 94 XMSubPhish11 10309 3.10 4.92 2.45 95 XM_SPF_SoftFail 10168 3.38 6.11 2.42 96 SHORT_URI_2 9883 1.84 0.42 2.35 97 HTML_MIME_NO_HTML_TAG 9394 3.28 6.24 2.23 98 BAYES_95 9211 2.79 4.46 2.19 99 URI_NOVOWEL 8770 2.43 3.39 2.08 100 MIME_HTML_MOSTLY 8769 2.50 3.66 2.08 101 MAILING_LIST_MULTI 8762 1.97 1.66 2.08 102 HTML_IMAGE_RATIO_08 8594 2.09 2.21 2.04 103 TVD_RCVD_IP 8530 1.55 0.22 2.03 104 KHOP_HELO_FCRDNS 8019 2.29 3.37 1.91 105 TooManyTo_002 7774 1.56 0.75 1.85 106 XMSubGarbage 7682 1.35 0.03 1.83 107 XMSubLongNoVowel 7467 1.34 0.11 1.77 108 DKIM_INVALID 7340 2.07 3.00 1.74 109 XM_B_SpammyTLD 7203 2.84 6.00 1.71 110 INVALID_MSGID 6874 1.26 0.20 1.63 111 TR_DCC_Bayes_99 6855 6.66 20.80 1.63 112 RCVD_IN_IADB_OPTIN 6847 1.48 1.07 1.63 113 XM_GoogleGroups 6782 2.13 3.58 1.61 114 TM2_M_VERY_LONG_WORD 6744 2.56 5.23 1.60 115 XM_B_Phish66 6512 1.94 3.06 1.55 116 T_XMDrugObfuBody_14 6397 2.07 3.60 1.52 117 MSGID_NOFQDN1 6359 1.13 0.06 1.51 118 IN_HORDE_ADDRESS_BOOK 6313 1.13 0.11 1.50 119 HELO_NODOT 6171 1.20 0.47 1.47 120 HELO_NO_DOMAIN 6169 1.20 0.46 1.47 121 XM_CamelCaseFrm001 6113 1.75 2.57 1.45 122 BOTNET 5912 3.69 10.13 1.40 123 RCVD_IN_MSPIKE_H5 5873 1.16 0.49 1.40 124 TO_MALFORMED 5793 1.02 0.01 1.38 125 SUBJ_ALL_CAPS 5782 1.85 3.18 1.37 126 XM_DK_Undo_01 5614 1.77 2.98 1.33 127 TR_XM_SpammyRelay 5328 4.34 12.96 1.27 128 T_XMDrugObfuBody_08 5317 1.93 3.79 1.26 129 TooManyTo_003 5297 1.10 0.65 1.26 130 TR_Symld_Words 5290 1.29 1.38 1.26 131 TR_XM_SpammyWords5 5037 1.78 3.41 1.20 132 XM_B_Investor 5005 2.09 4.61 1.19 133 XM_B_Unsub2 4953 1.50 2.39 1.18 134 XM_E_Blogspot 4913 0.90 0.13 1.17 135 XMGappySubj_01 4871 0.89 0.15 1.16 136 XMLngstWrd_00 4747 1.70 3.30 1.13 137 UNTRUSTED_Relay 4698 4.17 12.77 1.12 138 URI_HEX 4592 1.31 1.93 1.09 139 XMLngstWrd_01 4557 1.66 3.27 1.08 140 XMCapTrack 4312 0.84 0.34 1.02 141 XMStockSpam_06 4285 1.11 1.38 1.02 142 XMDiploma_00 4259 1.50 2.88 1.01 143 XMLngstWrd_02 4169 1.57 3.20 0.99 144 XMBSHREFv2 4132 0.80 0.29 0.98 145 TVD_SPACE_RATIO 4085 0.74 0.11 0.97 146 T_XMDrugObfuBody_00 3958 1.14 1.71 0.94 147 RCVD_IN_MSPIKE_BL 3803 2.22 5.92 0.90 148 TR_XM_MSPIKECOMBO 3801 2.20 5.85 0.90 149 TooManyTo_004 3766 0.80 0.53 0.89 150 XMLngstWrd_03 3748 1.48 3.15 0.89 151 XM_H_Long_From02 3571 0.94 1.21 0.85 152 XM_shorewaves_Whitelist 3503 0.61 0.00 0.83 153 XMLngstWrd_04 3417 1.41 3.10 0.81 154 RCVD_IN_RP_SAFE 3368 0.76 0.64 0.80 155 XM_OfRef6 3239 1.50 3.56 0.77 156 XMPhish30 3230 0.92 1.34 0.77 157 XM_UB50 3209 2.40 7.01 0.76 158 TR_XM_MaxUnsub 3186 1.96 5.34 0.76 159 TR_XM_SpammyWords2 3174 2.94 9.08 0.75 160 DKIM_ADSP_CUSTOM_MED 3122 0.88 1.26 0.74 161 T_FILL_THIS_FORM_SHORT 3112 1.15 2.30 0.74 162 TooManyTo_005 3017 0.65 0.48 0.72 163 XMBdyGiftCard01 2999 0.93 1.56 0.71 164 RCVD_IN_RP_CERTIFIED 2964 0.66 0.54 0.70 165 TR_MetaPhish_Combo_01 2955 0.75 0.87 0.70 166 FROM_GOV_DKIM_AU 2910 0.61 0.38 0.69 167 RELAYCOUNTRY_CA 2889 1.80 4.92 0.69 168 XMHTML_After_End 2858 0.93 1.62 0.68 169 T_TooManySym_03 2731 0.57 0.35 0.65 170 XM_RXBody 2714 0.65 0.66 0.64 171 XM_Body_Dirty_Words_01 2668 1.10 2.41 0.63 172 HTTPS_HTTP_MISMATCH 2595 0.87 1.57 0.62 173 RCVD_IN_MSPIKE_L4 2585 0.87 1.59 0.61 174 XMBody_95 2538 0.48 0.13 0.60 175 HTML_TITLE_SUBJ_DIFF 2537 1.26 3.10 0.60 176 UPPERCASE_75_100 2501 1.42 3.76 0.59 177 RELAYCOUNTRY_GB 2496 0.80 1.37 0.59 178 XM_B_COPY_HTML 2481 0.61 0.69 0.59 179 XMGenDplmaNmb 2419 0.74 1.20 0.57 180 SpammyFromTLD_01 2379 1.24 3.15 0.57 181 T_Symld_Words_02 2307 0.67 1.01 0.55 182 HTML_IMAGE_ONLY_20 2295 0.52 0.47 0.55 183 HTML_TAG_BALANCE_BODY 2289 0.65 0.93 0.54 184 T_OBFU_PDF_ATTACH 2254 0.45 0.19 0.54 185 XM_ShortIntro_01 2192 0.59 0.79 0.52 186 SHORTENED_URL_HREF 2148 0.41 0.12 0.51 187 URI_TRY_3LD 2146 0.61 0.89 0.51 188 RCVD_IN_BL_SPAMCOP_NET 2041 2.62 8.63 0.48 189 XM_B_COVIDMETA 2023 0.93 2.20 0.48 190 XMBrknScrpt_02 1914 0.68 1.30 0.45 191 RCVD_IN_SORBS_DUL 1908 0.37 0.15 0.45 192 NML_ADSP_CUSTOM_MED 1906 0.63 1.13 0.45 193 SHORT_HELO_AND_INLINE_IMAGE 1898 0.35 0.07 0.45 194 XM_ProductURIs 1885 0.57 0.92 0.45 195 XM_H_PHPMailer 1872 0.51 0.70 0.44 196 XM_B_SpammyWords4 1864 1.04 2.73 0.44 197 MPART_ALT_DIFF_COUNT 1832 0.57 0.97 0.44 198 TR_MSPIKEBAYES00 1774 0.31 0.01 0.42 199 TR_XM_SpammyWords3 1771 1.25 3.60 0.42 200 XMNoVowels 1760 0.40 0.35 0.42 ----------------------------------------------------------------------