Email: 516822 Autolearn: 0 AvgScore: 3.51 AvgScanTime: 1.25 sec Spam: 152544 Autolearn: 0 AvgScore: 14.35 AvgScanTime: 1.36 sec Ham: 364278 Autolearn: 0 AvgScore: -1.03 AvgScanTime: 1.21 sec Time Spent Running SA: 179.89 hours Time Spent Processing Spam: 57.64 hours Time Spent Processing Ham: 122.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145403 89.56 95.32 87.14 2 DKIM_SIGNED 130557 74.55 85.59 69.93 3 XM_DK_Pass 125158 72.71 82.05 68.80 4 DKIM_VALID 125049 72.05 81.98 67.89 5 RELAYCOUNTRY_US 121218 77.70 79.46 76.96 6 XM_B_Unicode 116244 71.64 76.20 69.73 7 DCC_CHECK 110984 44.84 72.76 33.15 8 XMListUnsubscribeExists 102204 52.79 67.00 46.84 9 XM_B_SpammyWords 100421 52.67 65.83 47.15 10 DKIM_VALID_AU 92797 54.43 60.83 51.75 11 BAYES_50 64713 51.27 42.42 54.98 12 XM_B_Unicode3 63358 40.36 41.53 39.86 13 XM_DK_Undo_02 63138 16.70 41.39 6.36 14 XM_B_SpammyWords2 56315 26.90 36.92 22.70 15 LOC_TINY_FONT_1 50802 25.01 33.30 21.53 16 BAYES_99 50747 13.31 33.27 4.95 17 MIME_HTML_ONLY 50393 22.73 33.04 18.42 18 TR_XM_DKIM_Undo 49411 12.92 32.39 4.77 19 FVGT_m_MULTI_ODD 47732 25.19 31.29 22.63 20 HTML_FONT_LOW_CONTRAST 47725 27.85 31.29 26.42 21 DKIM_VALID_EF 46305 27.31 30.36 26.04 22 T_KAM_HTML_FONT_INVALID 42796 21.84 28.05 19.24 23 DCC_CHECK_NEGATIVE 41513 55.12 27.21 66.81 24 BAYES_999 40218 10.58 26.36 3.97 25 XMSubLong 38811 21.80 25.44 20.27 26 RCVD_IN_MSPIKE_H2 38067 21.18 24.95 19.59 27 TR_DCC_Bayes_99 36954 8.47 24.23 1.87 28 RELAYCOUNTRY_META 34412 9.29 22.56 3.73 29 XM_Body_Dirty_Words 32731 14.18 21.46 11.13 30 T_TM2_M_HEADER_IN_MSG 32715 28.14 21.45 30.94 31 RCVD_IN_MSPIKE_WL 29437 25.50 19.30 28.10 32 FSL_BULK_SIG 23939 6.66 15.69 2.87 33 XM_Multi_Part_URI 23795 12.42 15.60 11.09 34 XM_B_Unsub 23037 12.42 15.10 11.30 35 UNPARSEABLE_RELAY 22174 9.63 14.54 7.58 36 LOTS_OF_MONEY 22136 10.10 14.51 8.25 37 TR_XM_UnparsRelay 21694 8.34 14.22 5.88 38 BOTNET_IPINHOSTNAME 20210 7.20 13.25 4.67 39 RCVD_IN_MSPIKE_H3 20153 15.03 13.21 15.79 40 XM_B_SpammyWords3 19433 7.01 12.74 4.61 41 TR_XM_SpammyWords4 19381 7.68 12.71 5.58 42 UNTRUSTED_Relay 18772 4.48 12.31 1.20 43 BOTNET 17992 4.56 11.79 1.54 44 TR_XM_SpammyRelay 17911 4.62 11.74 1.63 45 XMSexyCombo_05 17149 5.32 11.24 2.85 46 TR_XM_SpammyWords2 16614 3.84 10.89 0.89 47 XM_UncommonTLD01 15940 5.56 10.45 3.51 48 RCVD_IN_BL_SPAMCOP_NET 15642 3.47 10.25 0.64 49 XM_Evil_Numbers_Gen 14311 7.94 9.38 7.34 50 MPART_ALT_DIFF 14245 6.24 9.34 4.95 51 RCVD_IN_MSPIKE_BL 13507 3.46 8.85 1.19 52 TR_XM_MSPIKECOMBO 13459 3.45 8.82 1.19 53 HTML_IMAGE_RATIO_02 12736 6.24 8.35 5.36 54 BAYES_80 11904 5.28 7.80 4.22 55 BAYES_60 11373 8.64 7.46 9.14 56 LotsOfNums_01 10158 8.39 6.66 9.11 57 HTML_MIME_NO_HTML_TAG 9775 3.33 6.41 2.03 58 TR_XM_MaxUnsub 9619 2.38 6.31 0.73 59 XM_B_SpammyTLD 9453 3.22 6.20 1.97 60 XMSubMetaSx_00 9351 4.39 6.13 3.66 61 XM_SendGrid 9144 4.66 5.99 4.11 62 RELAYCOUNTRY_CA 9139 2.49 5.99 1.02 63 XM_H_Long_From01 9062 5.35 5.94 5.11 64 RCVD_IN_MSPIKE_H4 8701 9.12 5.70 10.54 65 TR_XM_PhishingBody 8553 4.13 5.61 3.51 66 MIME_HTML_ONLY_MULTI 8516 4.06 5.58 3.42 67 XM_B_Phish_Phrases 8305 4.15 5.44 3.60 68 TooManyTo_001 8211 9.09 5.38 10.64 69 XM_UB50 8075 2.09 5.29 0.75 70 TR_XM_SpammyWords3 8003 1.93 5.25 0.54 71 T_REMOTE_IMAGE 7944 3.91 5.21 3.36 72 XM_B_Investor 7857 2.61 5.15 1.54 73 RCVD_IN_MSPIKE_L5 7690 1.50 5.04 0.02 74 TR_XM_SPAMCOP 7599 1.60 4.98 0.18 75 TM2_M_VERY_LONG_WORD 7471 2.52 4.90 1.53 76 XMStrtUSub 7291 4.56 4.78 4.47 77 XM_SPF_SoftFail 7111 2.76 4.66 1.96 78 BAYES_95 6573 3.16 4.31 2.68 79 MIME_HTML_MOSTLY 6544 2.99 4.29 2.45 80 XM_DIRTYINTL 6473 1.48 4.24 0.32 81 HTML_IMAGE_RATIO_04 6396 4.65 4.19 4.84 82 TR_XM_SpammyWords5 6320 2.20 4.14 1.38 83 TR_XM_DK_SendGrid 6168 2.94 4.04 2.48 84 SpammyFromTLD_01 6147 1.69 4.03 0.72 85 PDS_OTHER_BAD_TLD 5855 1.26 3.84 0.18 86 KHOP_HELO_FCRDNS 5819 2.15 3.81 1.45 87 XM_GoogleGroups 5815 2.32 3.81 1.69 88 DKIM_INVALID 5508 2.50 3.61 2.04 89 XMNumbers 5466 3.49 3.58 3.45 90 T_XMDrugObfuBody_14 5289 2.40 3.47 1.96 91 MIME_QP_LONG_LINE 5281 6.81 3.46 8.22 92 URI_NOVOWEL 5039 2.54 3.30 2.21 93 RCVD_IN_VALIDITY_RPBL 5014 1.00 3.29 0.04 94 HTML_IMAGE_RATIO_06 4981 3.59 3.27 3.72 95 XM_OfRef6 4916 1.59 3.22 0.91 96 XMDiploma_00 4779 1.97 3.13 1.49 97 RCVD_IN_VALIDITY_SAFE 4652 3.85 3.05 4.18 98 RCVD_IN_PSBL 4569 0.98 3.00 0.13 99 XM_DK_Undo_01 4543 2.05 2.98 1.67 100 TM2_M_URI_OPT_OUT 4540 4.42 2.98 5.02 101 XM_B_Phish66 4540 2.48 2.98 2.27 102 RCVD_IN_IADB_LISTED 4481 4.66 2.94 5.38 103 RCVD_IN_MSPIKE_L3 4366 1.44 2.86 0.84 104 XM_UB99 4281 0.83 2.81 0.01 105 XMLngstWrd_00 4157 1.45 2.73 0.91 106 MAILING_LIST_MULTI 4155 2.64 2.72 2.60 107 XMLngstWrd_01 4099 1.39 2.69 0.85 108 SUBJ_ALL_CAPS 4053 1.82 2.66 1.47 109 HTML_IMAGE_RATIO_08 4051 2.39 2.66 2.28 110 XMLngstWrd_02 4002 1.31 2.62 0.76 111 BOTNET_NORDNS 3942 0.77 2.58 0.02 112 RCVD_IN_VALIDITY_CERTIFIED 3941 3.41 2.58 3.76 113 XMLngstWrd_03 3898 1.23 2.56 0.68 114 T_XMDrugObfuBody_08 3815 1.68 2.50 1.33 115 XMLngstWrd_04 3811 1.16 2.50 0.60 116 XM_CamelCaseFrm001 3788 2.07 2.48 1.90 117 HTML_TITLE_SUBJ_DIFF 3748 1.00 2.46 0.39 118 RCVD_IN_IADB_SPF 3743 4.10 2.45 4.80 119 UPPERCASE_75_100 3693 0.99 2.42 0.40 120 TR_XM_MSPIKECOMBO2 3648 0.80 2.39 0.14 121 T_FILL_THIS_FORM_SHORT 3636 1.34 2.38 0.90 122 URI_PHP_REDIR 3631 0.70 2.38 0.00 123 XM_UB999 3540 0.69 2.32 0.00 124 XM_B_SpammyWords4 3510 0.91 2.30 0.33 125 T_TooManySym_01 3471 4.37 2.28 5.24 126 RCVD_IN_IADB_DK 3404 3.62 2.23 4.19 127 RCVD_IN_IADB_SENDERID 3278 3.70 2.15 4.35 128 SpammyFromTLD_02 3259 0.91 2.14 0.40 129 XMSexyCombo_01 3226 1.03 2.11 0.57 130 XM_B_Unsub2 3215 1.84 2.11 1.72 131 TR_Mismatch_TLD_02 3198 0.72 2.10 0.14 132 T_HTML_TAG_BALANCE_CENTER 3147 0.69 2.06 0.11 133 TR_XM_SB_Phish 3096 1.96 2.03 1.94 134 XMBody_17 3091 0.83 2.03 0.33 135 XM_H_Undi_Recip 3021 0.70 1.98 0.16 136 XMSubPhish11 2982 1.93 1.95 1.91 137 ALL_TRUSTED 2863 14.91 1.88 20.37 138 RCVD_IN_IADB_VOUCHED 2846 2.82 1.87 3.22 139 HTML_IMAGE_ONLY_08 2846 0.62 1.87 0.10 140 TR_XM_NoHeaderRelay 2779 0.65 1.82 0.16 141 BAYES_40 2743 4.26 1.80 5.29 142 XM_B_COVIDMETA 2704 0.92 1.77 0.56 143 USER_IN_DEF_DKIM_WL 2578 8.84 1.69 11.84 144 URI_HEX 2512 1.41 1.65 1.31 145 FROM_EXCESS_BASE64 2483 2.13 1.63 2.33 146 TR_Mismatch_TLD_01 2468 0.64 1.62 0.24 147 XMGenDplmaNmb 2393 0.94 1.57 0.68 148 MIXED_CENTER_CASE 2377 0.46 1.56 0.00 149 MIXED_HREF_CASE 2362 0.46 1.55 0.00 150 XM_URI_RBL 2352 0.53 1.54 0.10 151 MIXED_IMG_CASE 2346 0.46 1.54 0.00 152 TR_XM_PHPDW 2340 0.71 1.53 0.36 153 MIXED_AREA_CASE 2340 0.45 1.53 0.00 154 T_XMDrugObfuBody_00 2330 0.93 1.53 0.68 155 RELAYCOUNTRY_RU 2328 0.47 1.53 0.03 156 RELAYCOUNTRY_FR 2307 0.59 1.51 0.21 157 MIXED_FONT_CASE 2301 0.45 1.51 0.00 158 XMBdyGiftCard01 2299 1.02 1.51 0.81 159 RELAYCOUNTRY_AU 2290 0.71 1.50 0.38 160 URI_TRY_3LD 2280 0.88 1.49 0.63 161 TR_XM_PHPForged 2277 0.66 1.49 0.31 162 URIBL_DBL_SPAM 2216 0.44 1.45 0.01 163 BODY_URI_ONLY 2210 0.45 1.45 0.03 164 TR_Symld_Words 2207 1.46 1.45 1.46 165 XMStockSpam_06 2186 0.89 1.43 0.66 166 TR_XM_FormFill2 2184 0.64 1.43 0.31 167 RELAYCOUNTRY_DE 2168 0.61 1.42 0.27 168 XM_H_PHPOS 2165 0.63 1.42 0.30 169 XMHTML_After_End 2143 0.89 1.40 0.67 170 XM_H_Long_From02 2119 1.37 1.39 1.36 171 DKIM_ADSP_CUSTOM_MED 2113 1.02 1.39 0.86 172 URIBL_BLACK 2078 0.43 1.36 0.05 173 BAYES_20 2054 3.47 1.35 4.36 174 XM_Body_Dirty_Words_01 2050 0.48 1.34 0.12 175 HTTPS_HTTP_MISMATCH 2004 0.89 1.31 0.72 176 DIET_1 1994 0.60 1.31 0.30 177 FROM_SUSPICIOUS_NTLD 1939 0.41 1.27 0.05 178 TR_XM_COVIDMETA4 1937 0.49 1.27 0.16 179 XMCapTrack 1930 1.22 1.27 1.21 180 TR_XM_BayesRelay 1891 0.37 1.24 0.00 181 XM_UB60 1891 0.42 1.24 0.08 182 RELAYCOUNTRY_GB 1866 0.88 1.22 0.73 183 TR_LOTS_OF_MONEY2 1858 0.49 1.22 0.18 184 T_MONEY_PERCENT 1858 0.49 1.22 0.18 185 XM_UB80 1850 0.37 1.21 0.02 186 XMSubNoVowel 1842 1.19 1.21 1.19 187 TR_XM_MaxSPIKE 1835 0.42 1.20 0.10 188 XMBrknScrpt_02 1833 0.81 1.20 0.65 189 FROM_SUSPICIOUS_NTLD_FP 1790 0.38 1.17 0.04 190 RCVD_IN_IADB_OPTIN 1788 1.83 1.17 2.11 191 TR_LOTS_OF_MONEY3 1786 0.50 1.17 0.22 192 XMMoneyMeta_00 1765 0.66 1.16 0.45 193 REMOVE_BEFORE_LINK 1747 0.54 1.15 0.28 194 XM_B_SEO 1713 0.44 1.12 0.16 195 URI_LONG_REPEAT 1708 0.36 1.12 0.04 196 T_XMHurry_00 1700 2.16 1.11 2.60 197 TR_XM_FormFill 1693 0.33 1.11 0.01 198 HTML_FONT_SIZE_LARGE 1692 0.44 1.11 0.15 199 HK_RANDOM_REPLYTO 1680 0.41 1.10 0.12 200 XMPhish30 1611 0.69 1.06 0.54 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 317446 89.56 95.32 87.14 2 RELAYCOUNTRY_US 280365 77.70 79.46 76.96 3 DKIM_SIGNED 254747 74.55 85.59 69.93 4 XM_B_Unicode 254012 71.64 76.20 69.73 5 XM_DK_Pass 250621 72.71 82.05 68.80 6 DKIM_VALID 247316 72.05 81.98 67.89 7 DCC_CHECK_NEGATIVE 243361 55.12 27.21 66.81 8 BAYES_50 200264 51.27 42.42 54.98 9 DKIM_VALID_AU 188523 54.43 60.83 51.75 10 XM_B_SpammyWords 171772 52.67 65.83 47.15 11 XMListUnsubscribeExists 170641 52.79 67.00 46.84 12 XM_B_Unicode3 145211 40.36 41.53 39.86 13 DCC_CHECK 120768 44.84 72.76 33.15 14 T_TM2_M_HEADER_IN_MSG 112708 28.14 21.45 30.94 15 RCVD_IN_MSPIKE_WL 102358 25.50 19.30 28.10 16 HTML_FONT_LOW_CONTRAST 96231 27.85 31.29 26.42 17 DKIM_VALID_EF 94843 27.31 30.36 26.04 18 XM_B_SpammyWords2 82697 26.90 36.92 22.70 19 FVGT_m_MULTI_ODD 82447 25.19 31.29 22.63 20 LOC_TINY_FONT_1 78446 25.01 33.30 21.53 21 ALL_TRUSTED 74203 14.91 1.88 20.37 22 XMSubLong 73857 21.80 25.44 20.27 23 RCVD_IN_MSPIKE_H2 71372 21.18 24.95 19.59 24 T_KAM_HTML_FONT_INVALID 70075 21.84 28.05 19.24 25 MIME_HTML_ONLY 67095 22.73 33.04 18.42 26 RCVD_IN_MSPIKE_H3 57503 15.03 13.21 15.79 27 USER_IN_DEF_DKIM_WL 43132 8.84 1.69 11.84 28 BAYES_00 42860 8.56 0.91 11.77 29 XM_B_Unsub 41171 12.42 15.10 11.30 30 XM_Body_Dirty_Words 40556 14.18 21.46 11.13 31 XM_Multi_Part_URI 40392 12.42 15.60 11.09 32 TooManyTo_001 38767 9.09 5.38 10.64 33 RCVD_IN_MSPIKE_H4 38413 9.12 5.70 10.54 34 BAYES_60 33293 8.64 7.46 9.14 35 LotsOfNums_01 33193 8.39 6.66 9.11 36 LOTS_OF_MONEY 30044 10.10 14.51 8.25 37 MIME_QP_LONG_LINE 29932 6.81 3.46 8.22 38 UNPARSEABLE_RELAY 27605 9.63 14.54 7.58 39 XM_Evil_Numbers_Gen 26725 7.94 9.38 7.34 40 XM_DKIMWhitelistDomains 26441 5.12 0.03 7.26 41 IN_ZIMBRA_NJ_WHITELIST 24545 4.78 0.10 6.74 42 TR_XM_DK_Bayes 23968 4.79 0.53 6.58 43 TR_XM_DK_Bayes1 23513 4.70 0.53 6.45 44 XM_DK_Undo_02 23152 16.70 41.39 6.36 45 TR_XM_UnparsRelay 21424 8.34 14.22 5.88 46 TR_XM_DK_Bayes2 20571 4.10 0.41 5.65 47 TR_XM_SpammyWords4 20322 7.68 12.71 5.58 48 RCVD_IN_IADB_LISTED 19592 4.66 2.94 5.38 49 HTML_IMAGE_RATIO_02 19528 6.24 8.35 5.36 50 BAYES_40 19273 4.26 1.80 5.29 51 T_TooManySym_01 19100 4.37 2.28 5.24 52 XM_H_Long_From01 18611 5.35 5.94 5.11 53 TM2_M_URI_OPT_OUT 18285 4.42 2.98 5.02 54 BAYES_99 18023 13.31 33.27 4.95 55 MPART_ALT_DIFF 18018 6.24 9.34 4.95 56 HTML_IMAGE_RATIO_04 17614 4.65 4.19 4.84 57 RCVD_IN_IADB_SPF 17472 4.10 2.45 4.80 58 TR_XM_DKIM_Undo 17377 12.92 32.39 4.77 59 BOTNET_IPINHOSTNAME 17001 7.20 13.25 4.67 60 XM_B_SpammyWords3 16782 7.01 12.74 4.61 61 XMStrtUSub 16300 4.56 4.78 4.47 62 BAYES_20 15874 3.47 1.35 4.36 63 RCVD_IN_IADB_SENDERID 15843 3.70 2.15 4.35 64 BAYES_80 15388 5.28 7.80 4.22 65 RCVD_IN_IADB_DK 15280 3.62 2.23 4.19 66 RCVD_IN_VALIDITY_SAFE 15231 3.85 3.05 4.18 67 XM_PDF 15205 3.18 0.79 4.17 68 XM_SendGrid 14963 4.66 5.99 4.11 69 BAYES_999 14478 10.58 26.36 3.97 70 RCVD_IN_VALIDITY_CERTIFIED 13687 3.41 2.58 3.76 71 RELAYCOUNTRY_META 13597 9.29 22.56 3.73 72 HTML_IMAGE_RATIO_06 13555 3.59 3.27 3.72 73 XMSubMetaSx_00 13325 4.39 6.13 3.66 74 XM_B_Phish_Phrases 13127 4.15 5.44 3.60 75 TR_XM_PhishingBody 12788 4.13 5.61 3.51 76 XM_UncommonTLD01 12773 5.56 10.45 3.51 77 XMNumbers 12581 3.49 3.58 3.45 78 MIME_HTML_ONLY_MULTI 12463 4.06 5.58 3.42 79 T_REMOTE_IMAGE 12238 3.91 5.21 3.36 80 XM_H_Trusted_IP 12096 2.34 0.00 3.32 81 RCVD_IN_IADB_VOUCHED 11726 2.82 1.87 3.22 82 T_TooManySym_02 10739 2.27 0.65 2.95 83 FSL_BULK_SIG 10463 6.66 15.69 2.87 84 XMSexyCombo_05 10365 5.32 11.24 2.85 85 ANY_BOUNCE_MESSAGE 9999 2.16 0.75 2.74 86 BOUNCE_MESSAGE 9998 2.16 0.75 2.74 87 BAYES_95 9753 3.16 4.31 2.68 88 BAYES_05 9547 2.04 0.64 2.62 89 T_XMHurry_00 9484 2.16 1.11 2.60 90 MAILING_LIST_MULTI 9481 2.64 2.72 2.60 91 TR_XM_DK_SendGrid 9046 2.94 4.04 2.48 92 MIME_HTML_MOSTLY 8930 2.99 4.29 2.45 93 FROM_EXCESS_BASE64 8500 2.13 1.63 2.33 94 HTML_IMAGE_RATIO_08 8322 2.39 2.66 2.28 95 SHORT_URI_2 8315 1.72 0.38 2.28 96 XM_B_Phish66 8287 2.48 2.98 2.27 97 URI_NOVOWEL 8068 2.54 3.30 2.21 98 TooManyTo_002 7816 1.77 0.86 2.15 99 RCVD_IN_IADB_OPTIN 7695 1.83 1.17 2.11 100 DKIM_INVALID 7431 2.50 3.61 2.04 101 HTML_MIME_NO_HTML_TAG 7411 3.33 6.41 2.03 102 XM_B_SpammyTLD 7164 3.22 6.20 1.97 103 XM_SPF_SoftFail 7143 2.76 4.66 1.96 104 T_XMDrugObfuBody_14 7124 2.40 3.47 1.96 105 TR_XM_SB_Phish 7056 1.96 2.03 1.94 106 XMSubPhish11 6974 1.93 1.95 1.91 107 XM_CamelCaseFrm001 6927 2.07 2.48 1.90 108 TR_DCC_Bayes_99 6796 8.47 24.23 1.87 109 HELO_NODOT 6745 1.40 0.32 1.85 110 HELO_NO_DOMAIN 6739 1.40 0.31 1.85 111 INVALID_MSGID 6627 1.37 0.28 1.82 112 IN_HORDE_ADDRESS_BOOK 6462 1.28 0.11 1.77 113 RCVD_IN_MSPIKE_H5 6442 1.36 0.38 1.77 114 XM_B_Unsub2 6274 1.84 2.11 1.72 115 XM_GoogleGroups 6172 2.32 3.81 1.69 116 XM_DK_Undo_01 6076 2.05 2.98 1.67 117 MSGID_NOFQDN1 5982 1.18 0.08 1.64 118 TR_XM_SpammyRelay 5947 4.62 11.74 1.63 119 TO_MALFORMED 5801 1.12 0.01 1.59 120 TVD_RCVD_IP 5763 1.20 0.30 1.58 121 XM_B_Investor 5620 2.61 5.15 1.54 122 BOTNET 5598 4.56 11.79 1.54 123 TM2_M_VERY_LONG_WORD 5558 2.52 4.90 1.53 124 XMDiploma_00 5426 1.97 3.13 1.49 125 SUBJ_ALL_CAPS 5370 1.82 2.66 1.47 126 TR_Symld_Words 5335 1.46 1.45 1.46 127 TooManyTo_003 5303 1.24 0.72 1.46 128 KHOP_HELO_FCRDNS 5272 2.15 3.81 1.45 129 TR_XM_SpammyWords5 5045 2.20 4.14 1.38 130 XM_H_Long_From02 4965 1.37 1.39 1.36 131 T_XMDrugObfuBody_08 4851 1.68 2.50 1.33 132 XMGappySubj_01 4802 1.05 0.42 1.32 133 URI_HEX 4772 1.41 1.65 1.31 134 DKIM_ADSP_NXDOMAIN 4399 0.98 0.45 1.21 135 XMCapTrack 4396 1.22 1.27 1.21 136 TVD_SPACE_RATIO 4374 0.88 0.11 1.20 137 UNTRUSTED_Relay 4364 4.48 12.31 1.20 138 RCVD_IN_MSPIKE_BL 4353 3.46 8.85 1.19 139 TR_XM_MSPIKECOMBO 4350 3.45 8.82 1.19 140 XMBSHREFv2 4320 0.90 0.23 1.19 141 XMSubNoVowel 4317 1.19 1.21 1.19 142 RELAYCOUNTRY_CA 3722 2.49 5.99 1.02 143 TooManyTo_004 3710 0.90 0.61 1.02 144 TR_MetaPhish_Combo_01 3666 1.00 0.99 1.01 145 XMLngstWrd_00 3314 1.45 2.73 0.91 146 XM_OfRef6 3304 1.59 3.22 0.91 147 HTML_FONT_FACE_BAD 3303 0.80 0.54 0.91 148 T_FILL_THIS_FORM_SHORT 3285 1.34 2.38 0.90 149 TR_XM_SpammyWords2 3234 3.84 10.89 0.89 150 DKIM_ADSP_CUSTOM_MED 3140 1.02 1.39 0.86 151 XMLngstWrd_01 3094 1.39 2.69 0.85 152 RCVD_IN_MSPIKE_L3 3057 1.44 2.86 0.84 153 RCVD_IN_RP_SAFE 3019 0.77 0.62 0.83 154 TooManyTo_005 2994 0.74 0.56 0.82 155 XMBdyGiftCard01 2957 1.02 1.51 0.81 156 XMBody_95 2877 0.59 0.13 0.79 157 XMLngstWrd_02 2765 1.31 2.62 0.76 158 T_TooManySym_03 2759 0.61 0.27 0.76 159 XM_UB50 2748 2.09 5.29 0.75 160 RCVD_IN_RP_CERTIFIED 2706 0.67 0.51 0.74 161 XM_ProductURIs 2694 0.82 1.01 0.74 162 TR_XM_MaxUnsub 2660 2.38 6.31 0.73 163 RELAYCOUNTRY_GB 2657 0.88 1.22 0.73 164 HTTPS_HTTP_MISMATCH 2620 0.89 1.31 0.72 165 SpammyFromTLD_01 2609 1.69 4.03 0.72 166 XMGenDplmaNmb 2478 0.94 1.57 0.68 167 XMLngstWrd_03 2462 1.23 2.56 0.68 168 T_XMDrugObfuBody_00 2462 0.93 1.53 0.68 169 XMHTML_After_End 2455 0.89 1.40 0.67 170 FROM_GOV_DKIM_AU 2420 0.50 0.12 0.66 171 XMStockSpam_06 2401 0.89 1.43 0.66 172 XM_RXBody 2366 0.62 0.54 0.65 173 HTML_TAG_BALANCE_BODY 2357 0.70 0.81 0.65 174 XMBrknScrpt_02 2350 0.81 1.20 0.65 175 RCVD_IN_BL_SPAMCOP_NET 2315 3.47 10.25 0.64 176 URI_TRY_3LD 2283 0.88 1.49 0.63 177 TR_MSPIKEBAYES00 2230 0.44 0.02 0.61 178 XMNoVowels 2227 0.53 0.32 0.61 179 XMLngstWrd_04 2203 1.16 2.50 0.60 180 XM_ShortIntro_01 2179 0.57 0.51 0.60 181 XM_B_COPY_HTML 2176 0.62 0.69 0.60 182 XM_H_PHPMailer 2165 0.62 0.68 0.59 183 T_Symld_Words_02 2143 0.63 0.72 0.59 184 HTML_IMAGE_ONLY_20 2094 0.53 0.43 0.57 185 XMSexyCombo_01 2078 1.03 2.11 0.57 186 MPART_ALT_DIFF_COUNT 2046 0.65 0.86 0.56 187 XM_B_COVIDMETA 2042 0.92 1.77 0.56 188 NML_ADSP_CUSTOM_MED 1987 0.62 0.80 0.55 189 TR_XM_SpammyWords3 1969 1.93 5.25 0.54 190 XMPhish30 1954 0.69 1.06 0.54 191 XMHTMLBadTable_001 1900 0.59 0.76 0.52 192 T_OBFU_PDF_ATTACH 1895 0.40 0.13 0.52 193 XMSubMetaI_00 1870 0.62 0.88 0.51 194 SHORT_HELO_AND_INLINE_IMAGE 1860 0.38 0.07 0.51 195 RCVD_IN_SORBS_DUL 1793 0.41 0.22 0.49 196 SHORTENED_URL_HREF 1769 0.41 0.22 0.49 197 XMOemUri 1722 0.38 0.16 0.47 198 XM_S_SpammyWords 1722 0.53 0.67 0.47 199 TR_XM_Spammywords 1720 0.53 0.67 0.47 200 XMMoneyMeta_00 1654 0.66 1.16 0.45 ----------------------------------------------------------------------