Email: 507159 Autolearn: 0 AvgScore: 3.20 AvgScanTime: 1.43 sec Spam: 155410 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.58 sec Ham: 351749 Autolearn: 0 AvgScore: -1.56 AvgScanTime: 1.36 sec Time Spent Running SA: 201.40 hours Time Spent Processing Spam: 68.32 hours Time Spent Processing Ham: 133.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 148905 88.71 95.81 85.57 2 DKIM_SIGNED 132980 74.98 85.57 70.30 3 XM_DK_Pass 129335 73.09 83.22 68.61 4 DKIM_VALID 128978 72.34 82.99 67.63 5 RELAYCOUNTRY_US 123470 78.55 79.45 78.15 6 XM_B_Unicode 119864 71.86 77.13 69.54 7 DCC_CHECK 114489 44.83 73.67 32.08 8 XMListUnsubscribeExists 100960 51.22 64.96 45.15 9 DKIM_VALID_AU 99063 55.42 63.74 51.74 10 XM_B_SpammyWords 97957 48.45 63.03 42.01 11 BAYES_50 66992 52.69 43.11 56.92 12 XM_DK_Undo_02 65288 17.36 42.01 6.47 13 XM_B_Unicode3 64383 39.10 41.43 38.06 14 LOC_TINY_FONT_1 55665 25.30 35.82 20.65 15 MIME_HTML_ONLY 55295 23.92 35.58 18.76 16 XM_B_SpammyWords2 52791 22.50 33.97 17.44 17 FVGT_m_MULTI_ODD 52474 26.68 33.76 23.54 18 RCVD_IN_MSPIKE_H2 51715 27.81 33.28 25.39 19 BAYES_99 51526 13.72 33.15 5.14 20 TR_XM_DKIM_Undo 50240 13.31 32.33 4.90 21 HTML_FONT_LOW_CONTRAST 49752 26.49 32.01 24.06 22 DKIM_VALID_EF 45329 27.18 29.17 26.30 23 T_KAM_HTML_FONT_INVALID 45018 21.59 28.97 18.33 24 DCC_CHECK_NEGATIVE 40883 55.14 26.31 67.87 25 BAYES_999 39247 10.57 25.25 4.08 26 TR_DCC_Bayes_99 37784 8.82 24.31 1.98 27 RELAYCOUNTRY_META 36288 9.78 23.35 3.78 28 XMSubLong 36138 21.41 23.25 20.60 29 T_TM2_M_HEADER_IN_MSG 35305 27.37 22.72 29.43 30 XM_Body_Dirty_Words 34810 14.76 22.40 11.38 31 RCVD_IN_MSPIKE_WL 32289 23.21 20.78 24.28 32 XM_B_Unsub 26552 10.88 17.09 8.13 33 XM_Multi_Part_URI 26502 13.02 17.05 11.23 34 TR_XM_BayesUnsub 25995 9.54 16.73 6.36 35 FSL_BULK_SIG 23650 6.79 15.22 3.07 36 RCVD_IN_MSPIKE_H3 23303 14.76 14.99 14.65 37 UNPARSEABLE_RELAY 21421 9.47 13.78 7.57 38 TR_XM_UnparsRelay 20890 8.19 13.44 5.88 39 LOTS_OF_MONEY 19785 8.55 12.73 6.70 40 UNTRUSTED_Relay 19260 4.69 12.39 1.29 41 BOTNET 19230 4.91 12.37 1.61 42 XMSexyCombo_05 18277 5.90 11.76 3.31 43 BOTNET_IPINHOSTNAME 18259 6.78 11.75 4.58 44 XM_B_SpammyWords3 17860 6.12 11.49 3.75 45 TR_XM_SpammyWords2 17000 4.00 10.94 0.93 46 TR_XM_SpammyWords4 16651 6.17 10.71 4.16 47 TR_XM_SpammyRelay 16215 4.39 10.43 1.71 48 MPART_ALT_DIFF 15773 6.32 10.15 4.62 49 XM_Evil_Numbers_Gen 15086 8.27 9.71 7.63 50 HTML_IMAGE_RATIO_02 14754 6.61 9.49 5.34 51 RCVD_IN_BL_SPAMCOP_NET 14250 3.15 9.17 0.49 52 XM_UncommonTLD01 13802 5.18 8.88 3.54 53 BAYES_80 12348 5.43 7.95 4.32 54 TM2_M_VERY_LONG_WORD 12078 3.14 7.77 1.10 55 LotsOfNums_01 11501 8.50 7.40 8.99 56 XM_SendGrid 11259 5.76 7.24 5.10 57 HTML_MIME_NO_HTML_TAG 11093 3.58 7.14 2.00 58 TR_XM_PhishingBody 11077 4.53 7.13 3.39 59 XM_UB50 11004 2.76 7.08 0.85 60 BAYES_60 10639 8.26 6.85 8.89 61 XMSubMetaSx_00 10498 4.24 6.76 3.13 62 XM_B_Phish_Phrases 10469 4.62 6.74 3.69 63 MIME_HTML_ONLY_MULTI 10320 4.17 6.64 3.07 64 RELAYCOUNTRY_CA 9207 2.64 5.92 1.19 65 XM_H_Long_From01 8796 5.26 5.66 5.08 66 TR_XM_SPAMCOP 8517 1.77 5.48 0.14 67 RCVD_IN_MSPIKE_H4 8508 7.55 5.47 8.47 68 HTML_IMAGE_RATIO_04 8220 4.99 5.29 4.85 69 T_REMOTE_IMAGE 7667 4.23 4.93 3.92 70 XMStrtUSub 7649 4.74 4.92 4.66 71 TooManyTo_001 7528 7.41 4.84 8.55 72 RCVD_IN_MSPIKE_BL 7462 2.33 4.80 1.24 73 TR_XM_DK_SendGrid 7372 3.68 4.74 3.21 74 TR_XM_MSPIKECOMBO 7347 2.31 4.73 1.24 75 MIME_HTML_MOSTLY 7320 3.20 4.71 2.54 76 XMLngstWrd_00 7304 1.80 4.70 0.52 77 BAYES_95 7273 3.33 4.68 2.73 78 XMLngstWrd_01 7232 1.75 4.65 0.47 79 XM_GoogleGroups 7176 2.28 4.62 1.25 80 XMLngstWrd_02 7104 1.68 4.57 0.40 81 XM_B_Phish66 7040 2.82 4.53 2.06 82 XM_B_SpammyTLD 6840 5.15 4.40 5.48 83 XMLngstWrd_03 6630 1.52 4.27 0.30 84 SpammyFromTLD_01 6592 1.83 4.24 0.77 85 XMLngstWrd_04 6506 1.44 4.19 0.23 86 HTML_TITLE_SUBJ_DIFF 6411 1.29 4.13 0.03 87 T_XMDrugObfuBody_14 6388 2.39 4.11 1.63 88 UPPERCASE_75_100 6313 1.26 4.06 0.03 89 XM_SPF_SoftFail 6096 3.00 3.92 2.59 90 XM_B_Investor 5848 2.22 3.76 1.54 91 RCVD_IN_VALIDITY_SAFE 5462 4.17 3.51 4.46 92 RCVD_IN_PSBL 5383 1.15 3.46 0.13 93 XMNumbers 5258 3.93 3.38 4.17 94 URI_NOVOWEL 5185 2.83 3.34 2.61 95 HTML_IMAGE_RATIO_06 5105 3.60 3.28 3.74 96 TR_XM_SpammyWords5 5042 2.08 3.24 1.57 97 T_TooManySym_01 4893 5.16 3.15 6.05 98 USER_IN_DEF_DKIM_WL 4788 8.99 3.08 11.60 99 MIME_QP_LONG_LINE 4707 4.67 3.03 5.40 100 RCVD_IN_MSPIKE_L3 4663 1.72 3.00 1.16 101 RCVD_IN_VALIDITY_CERTIFIED 4631 3.63 2.98 3.91 102 TM2_M_URI_OPT_OUT 4606 2.54 2.96 2.36 103 XM_B_Unsub2 4567 1.96 2.94 1.53 104 RCVD_IN_VALIDITY_RPBL 4542 0.92 2.92 0.04 105 T_XMDrugObfuBody_08 4537 1.96 2.92 1.54 106 KHOP_HELO_FCRDNS 4529 2.24 2.91 1.95 107 HTML_IMAGE_RATIO_08 4363 2.35 2.81 2.15 108 XM_DIRTYINTL 4336 1.08 2.79 0.32 109 TR_Mismatch_TLD_01 4316 1.02 2.78 0.25 110 RCVD_IN_IADB_LISTED 4292 4.62 2.76 5.44 111 RELAYCOUNTRY_RU 4080 0.82 2.63 0.02 112 XM_DK_Undo_01 4074 1.91 2.62 1.60 113 XM_CamelCaseFrm001 4031 2.10 2.59 1.88 114 XMSexyCombo_01 4028 1.21 2.59 0.60 115 DKIM_INVALID 4002 2.65 2.58 2.68 116 XM_OfRef6 3978 1.44 2.56 0.95 117 SpammyFromTLD_02 3976 1.06 2.56 0.39 118 XMDiploma_00 3937 1.78 2.53 1.44 119 T_FILL_THIS_FORM_SHORT 3818 1.29 2.46 0.78 120 XMStockSpam_06 3683 1.30 2.37 0.83 121 RCVD_IN_IADB_SPF 3516 4.03 2.26 4.82 122 TR_XM_SB_Phish 3490 2.38 2.25 2.43 123 TR_XM_SpammyWords3 3467 1.05 2.23 0.52 124 T_XMHurry_00 3425 1.10 2.20 0.61 125 XMSubPhish11 3296 2.22 2.12 2.27 126 XMBody_17 3264 0.92 2.10 0.40 127 RCVD_IN_IADB_DK 3186 3.51 2.05 4.15 128 RCVD_IN_IADB_SENDERID 3094 3.61 1.99 4.33 129 XM_B_COVIDMETA 3058 1.15 1.97 0.79 130 FROM_EXCESS_BASE64 3020 2.35 1.94 2.54 131 BOTNET_NORDNS 3002 0.60 1.93 0.02 132 HTTPS_HTTP_MISMATCH 2949 1.16 1.90 0.84 133 TR_XM_MSPIKECOMBO2 2915 0.68 1.88 0.14 134 SUBJ_ALL_CAPS 2914 1.68 1.88 1.60 135 XM_UB99 2770 0.55 1.78 0.00 136 XMHTML_After_End 2768 1.13 1.78 0.84 137 RCVD_IN_IADB_VOUCHED 2757 2.89 1.77 3.39 138 XM_B_SpammyWords4 2755 0.87 1.77 0.47 139 T_XMDrugObfuBody_00 2750 0.96 1.77 0.60 140 RELAYCOUNTRY_UA 2746 0.54 1.77 0.00 141 BAYES_40 2734 3.97 1.76 4.95 142 ALL_TRUSTED 2729 13.85 1.76 19.19 143 URI_HEX 2711 1.45 1.74 1.33 144 TR_XM_PHPDW 2678 0.84 1.72 0.45 145 MAILING_LIST_MULTI 2677 2.40 1.72 2.70 146 TR_XM_PHPForged 2653 0.81 1.71 0.41 147 TR_XM_FormFill2 2599 0.80 1.67 0.41 148 XM_H_PHPOS 2584 0.79 1.66 0.40 149 PDS_OTHER_BAD_TLD 2417 0.62 1.56 0.21 150 HK_RANDOM_REPLYTO 2416 0.65 1.55 0.25 151 RCVD_IN_MSPIKE_L5 2371 0.48 1.53 0.02 152 XM_H_Long_From02 2356 1.35 1.52 1.27 153 HTML_IMAGE_ONLY_08 2319 0.54 1.49 0.13 154 TR_XM_COVIDMETA1 2312 0.63 1.49 0.25 155 HTML_TAG_BALANCE_CENTER 2305 0.57 1.48 0.16 156 TR_Symld_Words 2289 1.64 1.47 1.71 157 TR_LOTS_OF_MONEY3 2256 0.57 1.45 0.18 158 RELAYCOUNTRY_IN 2189 0.49 1.41 0.09 159 HTML_TAG_BALANCE_BODY 2163 0.96 1.39 0.77 160 HTML_IMAGE_ONLY_28 2136 0.69 1.37 0.39 161 BODY_URI_ONLY 2127 0.44 1.37 0.03 162 URIBL_BLACK 2125 0.46 1.37 0.05 163 XM_URI_RBL 2116 0.49 1.36 0.10 164 TR_XM_MaxSPIKE 2113 0.51 1.36 0.13 165 RELAYCOUNTRY_FR 2061 0.57 1.33 0.23 166 XMSubMetaI_00 2060 1.00 1.33 0.85 167 BOUNCE_MESSAGE 2049 2.44 1.32 2.93 168 ANY_BOUNCE_MESSAGE 2049 2.44 1.32 2.93 169 XMBrknScrpt_02 2042 0.83 1.31 0.62 170 TR_XM_BayesRelay 2031 0.40 1.31 0.00 171 XM_UB999 2020 0.40 1.30 0.00 172 HTML_FONT_SIZE_HUGE 1989 0.44 1.28 0.07 173 MIXED_CENTER_CASE 1988 0.39 1.28 0.00 174 TR_XM_FormFill 1988 0.40 1.28 0.01 175 URIBL_DBL_SPAM 1976 0.40 1.27 0.01 176 MIXED_HREF_CASE 1960 0.39 1.26 0.00 177 MIXED_AREA_CASE 1941 0.38 1.25 0.00 178 MIXED_IMG_CASE 1941 0.39 1.25 0.01 179 RELAYCOUNTRY_GB 1940 0.89 1.25 0.73 180 XMNoVowels 1913 0.82 1.23 0.64 181 MIXED_FONT_CASE 1910 0.38 1.23 0.00 182 XMGenDplmaNmb 1908 1.04 1.23 0.95 183 RELAYCOUNTRY_DE 1872 0.56 1.20 0.28 184 XM_RXBody 1865 0.52 1.20 0.22 185 BAYES_20 1861 2.84 1.20 3.57 186 XM_UB60 1844 0.41 1.19 0.07 187 TR_XM_NoHeaderRelay 1819 0.46 1.17 0.14 188 RELAYCOUNTRY_AU 1815 0.56 1.17 0.29 189 XMMoneyMeta_00 1775 0.74 1.14 0.56 190 TR_XM_COVIDMETA4 1738 0.48 1.12 0.20 191 HTML_FONT_FACE_BAD 1695 1.04 1.09 1.02 192 XM_PDF 1694 3.75 1.09 4.92 193 DIET_1 1691 0.56 1.09 0.32 194 RCVD_IN_IADB_OPTIN 1672 1.90 1.08 2.27 195 TR_BOTNET_NEGATE 1647 0.56 1.06 0.34 196 XMPhish30 1597 0.67 1.03 0.51 197 XM_UB80 1590 0.32 1.02 0.02 198 T_Symld_Words_02 1590 0.73 1.02 0.60 199 TR_MetaPhish_Combo_01 1563 1.14 1.01 1.20 200 URI_TRY_3LD 1556 0.66 1.00 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 301007 88.71 95.81 85.57 2 RELAYCOUNTRY_US 274908 78.55 79.45 78.15 3 DKIM_SIGNED 247297 74.98 85.57 70.30 4 XM_B_Unicode 244592 71.86 77.13 69.54 5 XM_DK_Pass 241326 73.09 83.22 68.61 6 DCC_CHECK_NEGATIVE 238744 55.14 26.31 67.87 7 DKIM_VALID 237883 72.34 82.99 67.63 8 BAYES_50 200226 52.69 43.11 56.92 9 DKIM_VALID_AU 181996 55.42 63.74 51.74 10 XMListUnsubscribeExists 158817 51.22 64.96 45.15 11 XM_B_SpammyWords 147780 48.45 63.03 42.01 12 XM_B_Unicode3 133891 39.10 41.43 38.06 13 DCC_CHECK 112850 44.83 73.67 32.08 14 T_TM2_M_HEADER_IN_MSG 103509 27.37 22.72 29.43 15 DKIM_VALID_EF 92494 27.18 29.17 26.30 16 RCVD_IN_MSPIKE_H2 89310 27.81 33.28 25.39 17 RCVD_IN_MSPIKE_WL 85402 23.21 20.78 24.28 18 HTML_FONT_LOW_CONTRAST 84617 26.49 32.01 24.06 19 FVGT_m_MULTI_ODD 82819 26.68 33.76 23.54 20 LOC_TINY_FONT_1 72636 25.30 35.82 20.65 21 XMSubLong 72444 21.41 23.25 20.60 22 ALL_TRUSTED 67515 13.85 1.76 19.19 23 MIME_HTML_ONLY 66001 23.92 35.58 18.76 24 T_KAM_HTML_FONT_INVALID 64493 21.59 28.97 18.33 25 XM_B_SpammyWords2 61333 22.50 33.97 17.44 26 RCVD_IN_MSPIKE_H3 51529 14.76 14.99 14.65 27 USER_IN_DEF_DKIM_WL 40812 8.99 3.08 11.60 28 XM_Body_Dirty_Words 40029 14.76 22.40 11.38 29 XM_Multi_Part_URI 39519 13.02 17.05 11.23 30 BAYES_00 39194 7.94 0.69 11.14 31 LotsOfNums_01 31631 8.50 7.40 8.99 32 BAYES_60 31265 8.26 6.85 8.89 33 TooManyTo_001 30070 7.41 4.84 8.55 34 RCVD_IN_MSPIKE_H4 29789 7.55 5.47 8.47 35 XM_B_Unsub 28611 10.88 17.09 8.13 36 XM_DKIMWhitelistDomains 27481 5.69 0.90 7.81 37 XM_Evil_Numbers_Gen 26854 8.27 9.71 7.63 38 UNPARSEABLE_RELAY 26622 9.47 13.78 7.57 39 IN_ZIMBRA_NJ_WHITELIST 24603 4.89 0.13 6.99 40 LOTS_OF_MONEY 23569 8.55 12.73 6.70 41 XM_DK_Undo_02 22774 17.36 42.01 6.47 42 TR_XM_DK_Bayes 22425 4.57 0.48 6.38 43 TR_XM_BayesUnsub 22386 9.54 16.73 6.36 44 TR_XM_DK_Bayes1 22053 4.49 0.47 6.27 45 T_TooManySym_01 21273 5.16 3.15 6.05 46 TR_XM_UnparsRelay 20667 8.19 13.44 5.88 47 TR_XM_DK_Bayes2 19646 3.98 0.36 5.59 48 XM_B_SpammyTLD 19287 5.15 4.40 5.48 49 RCVD_IN_IADB_LISTED 19131 4.62 2.76 5.44 50 MIME_QP_LONG_LINE 18995 4.67 3.03 5.40 51 HTML_IMAGE_RATIO_02 18792 6.61 9.49 5.34 52 BAYES_99 18066 13.72 33.15 5.14 53 XM_SendGrid 17945 5.76 7.24 5.10 54 XM_H_Long_From01 17866 5.26 5.66 5.08 55 BAYES_40 17425 3.97 1.76 4.95 56 XM_PDF 17308 3.75 1.09 4.92 57 TR_XM_DKIM_Undo 17238 13.31 32.33 4.90 58 HTML_IMAGE_RATIO_04 17077 4.99 5.29 4.85 59 RCVD_IN_IADB_SPF 16941 4.03 2.26 4.82 60 XMStrtUSub 16409 4.74 4.92 4.66 61 MPART_ALT_DIFF 16266 6.32 10.15 4.62 62 BOTNET_IPINHOSTNAME 16112 6.78 11.75 4.58 63 RCVD_IN_VALIDITY_SAFE 15696 4.17 3.51 4.46 64 RCVD_IN_IADB_SENDERID 15222 3.61 1.99 4.33 65 BAYES_80 15208 5.43 7.95 4.32 66 XMNumbers 14655 3.93 3.38 4.17 67 TR_XM_SpammyWords4 14648 6.17 10.71 4.16 68 RCVD_IN_IADB_DK 14610 3.51 2.05 4.15 69 BAYES_999 14350 10.57 25.25 4.08 70 T_REMOTE_IMAGE 13777 4.23 4.93 3.92 71 RCVD_IN_VALIDITY_CERTIFIED 13755 3.63 2.98 3.91 72 RELAYCOUNTRY_META 13289 9.78 23.35 3.78 73 XM_B_SpammyWords3 13199 6.12 11.49 3.75 74 HTML_IMAGE_RATIO_06 13169 3.60 3.28 3.74 75 XM_B_Phish_Phrases 12965 4.62 6.74 3.69 76 T_TooManySym_02 12965 2.80 0.79 3.69 77 BAYES_20 12544 2.84 1.20 3.57 78 XM_UncommonTLD01 12459 5.18 8.88 3.54 79 RCVD_IN_IADB_VOUCHED 11918 2.89 1.77 3.39 80 TR_XM_PhishingBody 11918 4.53 7.13 3.39 81 XM_H_Trusted_IP 11657 2.30 0.00 3.31 82 XMSexyCombo_05 11632 5.90 11.76 3.31 83 TR_XM_DK_SendGrid 11280 3.68 4.74 3.21 84 XMSubMetaSx_00 10993 4.24 6.76 3.13 85 MIME_HTML_ONLY_MULTI 10805 4.17 6.64 3.07 86 FSL_BULK_SIG 10797 6.79 15.22 3.07 87 ANY_BOUNCE_MESSAGE 10321 2.44 1.32 2.93 88 BOUNCE_MESSAGE 10320 2.44 1.32 2.93 89 BAYES_95 9597 3.33 4.68 2.73 90 MAILING_LIST_MULTI 9506 2.40 1.72 2.70 91 DKIM_INVALID 9414 2.65 2.58 2.68 92 URI_NOVOWEL 9191 2.83 3.34 2.61 93 XM_SPF_SoftFail 9101 3.00 3.92 2.59 94 MIME_HTML_MOSTLY 8932 3.20 4.71 2.54 95 FROM_EXCESS_BASE64 8917 2.35 1.94 2.54 96 TR_XM_SB_Phish 8557 2.38 2.25 2.43 97 TM2_M_URI_OPT_OUT 8297 2.54 2.96 2.36 98 BAYES_05 8221 1.81 0.62 2.34 99 TooManyTo_002 8198 1.90 0.91 2.33 100 RCVD_IN_IADB_OPTIN 7983 1.90 1.08 2.27 101 XMSubPhish11 7981 2.22 2.12 2.27 102 HTML_IMAGE_RATIO_08 7554 2.35 2.81 2.15 103 TVD_RCVD_IP 7292 1.53 0.31 2.07 104 XM_B_Phish66 7259 2.82 4.53 2.06 105 HTML_MIME_NO_HTML_TAG 7042 3.58 7.14 2.00 106 TR_DCC_Bayes_99 6965 8.82 24.31 1.98 107 KHOP_HELO_FCRDNS 6852 2.24 2.91 1.95 108 INVALID_MSGID 6812 1.43 0.27 1.94 109 HELO_NODOT 6775 1.48 0.47 1.93 110 HELO_NO_DOMAIN 6773 1.48 0.46 1.93 111 IN_HORDE_ADDRESS_BOOK 6641 1.37 0.19 1.89 112 XM_CamelCaseFrm001 6603 2.10 2.59 1.88 113 TR_XM_SpammyRelay 6032 4.39 10.43 1.71 114 TR_Symld_Words 6027 1.64 1.47 1.71 115 TO_MALFORMED 5830 1.16 0.02 1.66 116 T_XMDrugObfuBody_14 5744 2.39 4.11 1.63 117 BOTNET 5650 4.91 12.37 1.61 118 XM_DK_Undo_01 5611 1.91 2.62 1.60 119 SUBJ_ALL_CAPS 5611 1.68 1.88 1.60 120 TR_XM_SpammyWords5 5520 2.08 3.24 1.57 121 TooManyTo_003 5435 1.31 0.79 1.55 122 XM_B_Investor 5429 2.22 3.76 1.54 123 T_XMDrugObfuBody_08 5422 1.96 2.92 1.54 124 XM_B_Unsub2 5369 1.96 2.94 1.53 125 XMDiploma_00 5078 1.78 2.53 1.44 126 XMGappySubj_01 4794 0.97 0.09 1.36 127 URI_HEX 4668 1.45 1.74 1.33 128 UNTRUSTED_Relay 4525 4.69 12.39 1.29 129 XM_H_Long_From02 4467 1.35 1.52 1.27 130 XMSubNoVowel 4464 1.17 0.96 1.27 131 XM_GoogleGroups 4382 2.28 4.62 1.25 132 T_TooManySym_03 4370 0.95 0.30 1.24 133 RCVD_IN_MSPIKE_BL 4362 2.33 4.80 1.24 134 XMCapTrack 4360 0.99 0.44 1.24 135 TR_XM_MSPIKECOMBO 4352 2.31 4.73 1.24 136 DKIM_ADSP_NXDOMAIN 4346 1.05 0.62 1.24 137 TR_MetaPhish_Combo_01 4224 1.14 1.01 1.20 138 RELAYCOUNTRY_CA 4199 2.64 5.92 1.19 139 RCVD_IN_MSPIKE_H5 4084 0.90 0.31 1.16 140 XMBSHREFv2 4075 0.91 0.34 1.16 141 RCVD_IN_MSPIKE_L3 4066 1.72 3.00 1.16 142 TM2_M_VERY_LONG_WORD 3858 3.14 7.77 1.10 143 TooManyTo_004 3817 0.96 0.68 1.09 144 TVD_SPACE_RATIO 3775 0.96 0.70 1.07 145 HTML_FONT_FACE_BAD 3590 1.04 1.09 1.02 146 XMGenDplmaNmb 3350 1.04 1.23 0.95 147 XM_OfRef6 3334 1.44 2.56 0.95 148 TR_XM_SpammyWords2 3269 4.00 10.94 0.93 149 DKIM_ADSP_CUSTOM_MED 3099 0.90 0.96 0.88 150 RCVD_IN_RP_SAFE 3075 0.82 0.70 0.87 151 TooManyTo_005 3060 0.69 0.28 0.87 152 XM_UB50 2997 2.76 7.08 0.85 153 XMSubMetaI_00 2995 1.00 1.33 0.85 154 XMHTML_After_End 2956 1.13 1.78 0.84 155 HTTPS_HTTP_MISMATCH 2938 1.16 1.90 0.84 156 XMStockSpam_06 2920 1.30 2.37 0.83 157 XM_B_COVIDMETA 2764 1.15 1.97 0.79 158 T_FILL_THIS_FORM_SHORT 2736 1.29 2.46 0.78 159 RCVD_IN_RP_CERTIFIED 2704 0.71 0.59 0.77 160 HTML_TAG_BALANCE_BODY 2702 0.96 1.39 0.77 161 SpammyFromTLD_01 2699 1.83 4.24 0.77 162 XMBody_95 2620 0.56 0.13 0.74 163 FROM_GOV_DKIM_AU 2618 0.55 0.12 0.74 164 RELAYCOUNTRY_GB 2567 0.89 1.25 0.73 165 XM_ShortIntro_01 2478 0.78 0.94 0.70 166 XMBdyGiftCard01 2457 0.76 0.91 0.70 167 T_OBFU_PDF_ATTACH 2436 0.56 0.27 0.69 168 HTML_IMAGE_ONLY_20 2363 0.52 0.19 0.67 169 XM_B_SEO 2363 0.72 0.82 0.67 170 MSGID_NOFQDN1 2299 0.46 0.02 0.65 171 XMNoVowels 2242 0.82 1.23 0.64 172 XM_shorewaves_Whitelist 2189 0.43 0.00 0.62 173 XMBrknScrpt_02 2188 0.83 1.31 0.62 174 T_XMHurry_00 2153 1.10 2.20 0.61 175 XM_H_PHPMailer 2144 0.66 0.77 0.61 176 T_XMDrugObfuBody_00 2116 0.96 1.77 0.60 177 XMSexyCombo_01 2112 1.21 2.59 0.60 178 T_Symld_Words_02 2108 0.73 1.02 0.60 179 MPART_ALT_DIFF_COUNT 2100 0.70 0.94 0.60 180 SHORT_HELO_AND_INLINE_IMAGE 2021 0.42 0.07 0.57 181 XMMoneyMeta_00 1975 0.74 1.14 0.56 182 NML_ADSP_CUSTOM_MED 1962 0.61 0.74 0.56 183 XM_B_COPY_HTML 1913 0.60 0.73 0.54 184 RCVD_IN_SORBS_DUL 1913 0.42 0.14 0.54 185 FROM_GOV_SPOOF 1840 0.39 0.09 0.52 186 TR_XM_SpammyWords3 1840 1.05 2.23 0.52 187 XMLngstWrd_00 1835 1.80 4.70 0.52 188 FVGT_m_MULTI_ODD_EMAIL 1829 0.40 0.13 0.52 189 XM_ProductURIs 1814 0.60 0.79 0.52 190 XMPhish30 1801 0.67 1.03 0.51 191 URI_TRY_3LD 1798 0.66 1.00 0.51 192 TR_MSPIKEBAYES00 1783 0.36 0.02 0.51 193 XMPhish14 1759 0.55 0.68 0.50 194 XMHTMLBadTable_001 1726 0.60 0.84 0.49 195 RCVD_IN_BL_SPAMCOP_NET 1723 3.15 9.17 0.49 196 XMDateMe_00 1688 0.45 0.39 0.48 197 XM_B_SpammyWords4 1663 0.87 1.77 0.47 198 XMLngstWrd_01 1662 1.75 4.65 0.47 199 TM2_M_BODY_EMPTY 1622 0.39 0.21 0.46 200 HTML_IMAGE_ONLY_32 1594 0.41 0.33 0.45 ----------------------------------------------------------------------