Email: 521518 Autolearn: 0 AvgScore: 3.61 AvgScanTime: 1.30 sec Spam: 168135 Autolearn: 0 AvgScore: 13.60 AvgScanTime: 1.42 sec Ham: 353383 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.24 sec Time Spent Running SA: 187.82 hours Time Spent Processing Spam: 66.25 hours Time Spent Processing Ham: 121.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160990 90.04 95.75 87.33 2 DKIM_SIGNED 148997 77.63 88.62 72.40 3 XM_DK_Pass 144610 75.75 86.01 70.88 4 DKIM_VALID 144070 75.01 85.69 69.92 5 RELAYCOUNTRY_US 137333 79.89 81.68 79.04 6 XM_B_Unicode 132853 70.87 79.02 67.00 7 XMListUnsubscribeExists 115735 54.78 68.83 48.09 8 DCC_CHECK 114113 42.94 67.87 31.08 9 DKIM_VALID_AU 112974 58.61 67.19 54.53 10 XM_B_SpammyWords 111777 52.60 66.48 45.99 11 RCVD_IN_MSPIKE_H2 86001 42.09 51.15 37.78 12 XM_B_Unicode3 73877 40.78 43.94 39.28 13 BAYES_50 71707 52.31 42.65 56.90 14 XM_DK_Undo_02 70951 17.92 42.20 6.37 15 XM_B_SpammyWords2 60876 23.52 36.21 17.49 16 FVGT_m_MULTI_ODD 59797 28.18 35.56 24.66 17 LOC_TINY_FONT_1 58880 26.30 35.02 22.15 18 MIME_HTML_ONLY 57882 26.51 34.43 22.75 19 HTML_FONT_LOW_CONTRAST 56798 28.12 33.78 25.43 20 BAYES_99 55293 14.26 32.89 5.40 21 TR_XM_DKIM_Undo 55225 13.81 32.85 4.75 22 DCC_CHECK_NEGATIVE 53983 57.02 32.11 68.88 23 DKIM_VALID_EF 53360 28.27 31.74 26.62 24 T_KAM_HTML_FONT_INVALID 48076 21.89 28.59 18.69 25 BAYES_999 43405 11.19 25.82 4.23 26 XMSubLong 39200 22.29 23.31 21.80 27 TR_DCC_Bayes_99 38275 8.63 22.76 1.90 28 T_TM2_M_HEADER_IN_MSG 35195 26.69 20.93 29.43 29 XM_Body_Dirty_Words 34280 13.61 20.39 10.38 30 RELAYCOUNTRY_META 32238 8.77 19.17 3.82 31 XM_Multi_Part_URI 30797 15.96 18.32 14.84 32 XM_B_Unsub 27033 11.01 16.08 8.60 33 TR_XM_BayesUnsub 26344 9.73 15.67 6.91 34 LOTS_OF_MONEY 23012 9.26 13.69 7.16 35 FSL_BULK_SIG 21966 6.28 13.06 3.05 36 RCVD_IN_MSPIKE_WL 21728 16.21 12.92 17.77 37 UNPARSEABLE_RELAY 21169 9.07 12.59 7.39 38 BOTNET_IPINHOSTNAME 21104 7.12 12.55 4.53 39 XM_B_SpammyWords3 20980 6.64 12.48 3.87 40 TR_XM_UnparsRelay 20674 7.85 12.30 5.73 41 TR_XM_SpammyWords4 19273 6.63 11.46 4.33 42 TR_XM_SpammyWords2 18642 4.33 11.09 1.12 43 TR_XM_SpammyRelay 18047 4.57 10.73 1.64 44 BOTNET 17884 4.36 10.64 1.38 45 RCVD_IN_MSPIKE_H3 16777 11.35 9.98 12.00 46 XM_Evil_Numbers_Gen 16255 8.48 9.67 7.92 47 RCVD_IN_BL_SPAMCOP_NET 15806 3.34 9.40 0.46 48 MPART_ALT_DIFF 15424 6.83 9.17 5.71 49 XMSexyCombo_05 15107 4.90 8.99 2.95 50 BAYES_80 14279 5.69 8.49 4.35 51 XM_UncommonTLD01 13592 5.01 8.08 3.54 52 UNTRUSTED_Relay 13515 3.42 8.04 1.22 53 LotsOfNums_01 13144 8.53 7.82 8.87 54 HTML_IMAGE_RATIO_02 12845 8.15 7.64 8.40 55 TM2_M_VERY_LONG_WORD 12427 3.96 7.39 2.32 56 MIME_HTML_ONLY_MULTI 12001 5.19 7.14 4.27 57 BAYES_60 11883 8.36 7.07 8.97 58 XM_SendGrid 11711 5.47 6.97 4.76 59 HTML_MIME_NO_HTML_TAG 11462 4.55 6.82 3.47 60 XM_H_Long_From01 10904 5.45 6.49 4.96 61 RELAYCOUNTRY_CA 10877 2.83 6.47 1.10 62 TR_XM_SPAMCOP 10843 2.24 6.45 0.24 63 TR_XM_PhishingBody 10134 4.10 6.03 3.18 64 XM_B_Phish_Phrases 10023 4.03 5.96 3.11 65 XMLngstWrd_00 9375 2.97 5.58 1.73 66 XMLngstWrd_01 9306 2.91 5.53 1.66 67 XMLngstWrd_02 9098 2.80 5.41 1.56 68 XM_GoogleGroups 8946 3.45 5.32 2.56 69 XMSubMetaSx_00 8867 3.77 5.27 3.05 70 XMLngstWrd_03 8674 2.65 5.16 1.46 71 XMLngstWrd_04 8580 2.59 5.10 1.39 72 BAYES_95 8310 3.46 4.94 2.75 73 TooManyTo_001 8232 7.22 4.90 8.33 74 HTML_TITLE_SUBJ_DIFF 8172 2.43 4.86 1.28 75 UPPERCASE_75_100 7960 2.38 4.73 1.25 76 TR_XM_DK_SendGrid 7918 3.59 4.71 3.06 77 RCVD_IN_MSPIKE_BL 7899 2.26 4.70 1.10 78 HTML_IMAGE_RATIO_04 7868 4.66 4.68 4.64 79 XM_B_Investor 7755 2.67 4.61 1.74 80 TR_XM_MSPIKECOMBO 7742 2.23 4.60 1.10 81 XMNumbers 7570 3.66 4.50 3.26 82 XM_SPF_SoftFail 7177 3.03 4.27 2.44 83 XM_B_SpammyTLD 6588 2.91 3.92 2.43 84 TR_XM_SpammyWords5 6540 2.28 3.89 1.52 85 XM_OfRef6 6524 1.95 3.88 1.03 86 XMStrtUSub 6264 4.35 3.73 4.64 87 T_XMDrugObfuBody_14 6183 2.30 3.68 1.64 88 MIME_QP_LONG_LINE 6175 4.96 3.67 5.57 89 XM_UB50 5500 1.58 3.27 0.78 90 XM_DIRTYINTL 5437 1.23 3.23 0.27 91 XM_B_Phish66 5363 2.26 3.19 1.82 92 RCVD_IN_VALIDITY_SAFE 5331 4.05 3.17 4.47 93 SpammyFromTLD_02 5285 1.32 3.14 0.46 94 MIME_HTML_MOSTLY 5254 2.56 3.12 2.30 95 SpammyFromTLD_01 5184 1.49 3.08 0.73 96 T_XMDrugObfuBody_08 5098 1.97 3.03 1.46 97 XM_B_SpammyWords4 5013 1.34 2.98 0.56 98 HTML_IMAGE_RATIO_06 4984 3.40 2.96 3.60 99 DKIM_INVALID 4927 2.62 2.93 2.48 100 ALL_TRUSTED 4893 13.32 2.91 18.27 101 XM_DK_Undo_01 4830 2.09 2.87 1.72 102 TM2_M_URI_OPT_OUT 4710 2.39 2.80 2.19 103 XM_B_Unsub2 4693 1.89 2.79 1.46 104 XM_CamelCaseFrm001 4671 2.30 2.78 2.08 105 USER_IN_DEF_DKIM_WL 4669 9.34 2.78 12.47 106 T_REMOTE_IMAGE 4637 3.46 2.76 3.79 107 RCVD_IN_IADB_LISTED 4432 4.47 2.64 5.34 108 RCVD_IN_MSPIKE_H4 4414 4.00 2.63 4.65 109 T_FILL_THIS_FORM_SHORT 4186 1.39 2.49 0.87 110 RCVD_IN_VALIDITY_CERTIFIED 4115 3.45 2.45 3.93 111 HTML_IMAGE_RATIO_08 4052 2.61 2.41 2.70 112 T_TooManySym_01 3937 4.91 2.34 6.13 113 TR_XM_MSPIKECOMBO2 3926 0.85 2.34 0.14 114 XMBody_17 3856 1.04 2.29 0.44 115 XMDiploma_00 3814 1.70 2.27 1.43 116 TR_XM_SpammyWords3 3799 1.05 2.26 0.48 117 RCVD_IN_IADB_SPF 3782 3.92 2.25 4.71 118 KHOP_HELO_FCRDNS 3727 1.89 2.22 1.73 119 BOTNET_NORDNS 3687 0.71 2.19 0.01 120 MAILING_LIST_MULTI 3626 2.59 2.16 2.79 121 TR_LOTS_OF_MONEY3 3623 0.89 2.15 0.29 122 RCVD_IN_IADB_DK 3559 3.46 2.12 4.10 123 RCVD_IN_IADB_SENDERID 3553 3.54 2.11 4.22 124 RCVD_IN_VALIDITY_RPBL 3552 0.69 2.11 0.02 125 TR_XM_SB_Phish 3524 2.20 2.10 2.25 126 HK_RANDOM_REPLYTO 3489 0.75 2.08 0.12 127 RCVD_IN_MSPIKE_L5 3473 0.68 2.07 0.02 128 FROM_EXCESS_BASE64 3466 2.14 2.06 2.18 129 PDS_OTHER_BAD_TLD 3460 0.76 2.06 0.14 130 XM_UB99 3401 0.65 2.02 0.00 131 XMSubPhish11 3365 2.15 2.00 2.22 132 RCVD_IN_MSPIKE_L3 3339 1.12 1.99 0.71 133 RCVD_IN_PSBL 3294 0.95 1.96 0.47 134 XM_BadFromFormat 3242 2.66 1.93 3.00 135 XMSexyCombo_01 3163 0.89 1.88 0.43 136 URI_HEX 3149 1.50 1.87 1.32 137 URI_NOVOWEL 3116 2.26 1.85 2.45 138 XM_B_COVIDMETA 2952 0.94 1.76 0.55 139 RELAYCOUNTRY_RU 2938 0.58 1.75 0.03 140 TVD_PH_BODY_ACCOUNTS_PRE 2933 2.64 1.74 3.06 141 XM_H_Undi_Recip 2895 0.79 1.72 0.34 142 SUBJ_ALL_CAPS 2867 1.64 1.71 1.60 143 XM_UB999 2707 0.52 1.61 0.00 144 T_XMHurry_00 2701 0.90 1.61 0.57 145 XM_URI_RBL 2664 0.58 1.58 0.10 146 DC_PNG_UNO_LARGO 2643 2.60 1.57 3.09 147 BAYES_40 2640 4.50 1.57 5.89 148 TO_NO_BRKTS_HTML_IMG 2634 2.51 1.57 2.96 149 XMStockSpam_06 2579 1.24 1.53 1.10 150 RELAYCOUNTRY_AU 2565 0.72 1.53 0.33 151 T_XMDrugObfuBody_00 2534 1.21 1.51 1.06 152 TR_XM_NoHeaderRelay 2532 0.57 1.51 0.13 153 RCVD_IN_IADB_VOUCHED 2458 2.79 1.46 3.41 154 TR_XM_PHPDW 2430 0.72 1.45 0.37 155 URIBL_BLACK 2389 0.50 1.42 0.06 156 HTML_TAG_BALANCE_BODY 2375 0.89 1.41 0.64 157 TR_XM_PHPForged 2364 0.66 1.41 0.31 158 TR_XM_FormFill2 2324 0.66 1.38 0.31 159 XM_H_Long_From02 2319 1.24 1.38 1.18 160 XMHTML_After_End 2319 0.93 1.38 0.71 161 XM_H_PHPOS 2305 0.65 1.37 0.30 162 RELAYCOUNTRY_FR 2207 0.60 1.31 0.26 163 URI_TRY_3LD 2195 0.79 1.31 0.55 164 URIBL_DBL_SPAM 2131 0.42 1.27 0.01 165 TR_XM_MaxSPIKE 2106 0.46 1.25 0.08 166 XMGenDplmaNmb 2094 0.96 1.25 0.83 167 TR_XM_Base64_M1 2085 0.99 1.24 0.88 168 TR_XM_FormFill 2076 0.41 1.23 0.02 169 XMSubNoVowel 2049 1.07 1.22 1.00 170 REMOVE_BEFORE_LINK 2027 0.58 1.21 0.28 171 TR_MetaPhish_Combo_01 1962 1.11 1.17 1.08 172 XMBrknScrpt_02 1937 0.77 1.15 0.58 173 HTTPS_HTTP_MISMATCH 1884 0.92 1.12 0.82 174 TR_XM_COVIDMETA1 1852 0.47 1.10 0.17 175 XM_B_DNDMA 1851 0.60 1.10 0.36 176 TR_Symld_Words 1824 1.44 1.08 1.62 177 BAYES_20 1781 2.62 1.06 3.37 178 THIS_AD 1771 0.46 1.05 0.17 179 MONEY_NOHTML 1759 0.38 1.05 0.07 180 MPART_ALT_DIFF_COUNT 1748 0.70 1.04 0.54 181 XMPhish30 1651 0.69 0.98 0.56 182 HTML_TAG_BALANCE_CENTER 1631 0.40 0.97 0.12 183 XM_S_SpammyWords 1627 0.44 0.97 0.19 184 TR_XM_Spammywords 1627 0.44 0.97 0.19 185 XMMoneyMeta_00 1610 0.73 0.96 0.63 186 XMReplyNow 1598 0.52 0.95 0.31 187 RELAYCOUNTRY_GB 1593 0.68 0.95 0.55 188 TR_XM_BayesRelay 1580 0.30 0.94 0.00 189 XMHTMLBadTable_001 1573 0.70 0.94 0.59 190 DIET_1 1572 0.53 0.93 0.34 191 RCVD_IN_IADB_OPTIN 1551 1.84 0.92 2.28 192 XM_Body_Dirty_Words_01 1524 0.38 0.91 0.13 193 XMBdyGiftCard01 1493 0.74 0.89 0.67 194 DKIM_ADSP_CUSTOM_MED 1486 0.85 0.88 0.84 195 XM_UB60 1476 0.34 0.88 0.08 196 PLING_QUERY 1471 0.53 0.87 0.37 197 TR_XM_COVIDMETA4 1470 0.42 0.87 0.21 198 TR_Mismatch_TLD_01 1461 0.45 0.87 0.25 199 XM_B_COPY_HTML 1456 0.71 0.87 0.63 200 FROM_SUSPICIOUS_NTLD 1445 0.29 0.86 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 308603 90.04 95.75 87.33 2 RELAYCOUNTRY_US 279328 79.89 81.68 79.04 3 DKIM_SIGNED 255859 77.63 88.62 72.40 4 XM_DK_Pass 250463 75.75 86.01 70.88 5 DKIM_VALID 247100 75.01 85.69 69.92 6 DCC_CHECK_NEGATIVE 243393 57.02 32.11 68.88 7 XM_B_Unicode 236761 70.87 79.02 67.00 8 BAYES_50 201088 52.31 42.65 56.90 9 DKIM_VALID_AU 192690 58.61 67.19 54.53 10 XMListUnsubscribeExists 169931 54.78 68.83 48.09 11 XM_B_SpammyWords 162536 52.60 66.48 45.99 12 XM_B_Unicode3 138798 40.78 43.94 39.28 13 RCVD_IN_MSPIKE_H2 133509 42.09 51.15 37.78 14 DCC_CHECK 109826 42.94 67.87 31.08 15 T_TM2_M_HEADER_IN_MSG 103983 26.69 20.93 29.43 16 DKIM_VALID_EF 94056 28.27 31.74 26.62 17 HTML_FONT_LOW_CONTRAST 89856 28.12 33.78 25.43 18 FVGT_m_MULTI_ODD 87145 28.18 35.56 24.66 19 MIME_HTML_ONLY 80397 26.51 34.43 22.75 20 LOC_TINY_FONT_1 78260 26.30 35.02 22.15 21 XMSubLong 77032 22.29 23.31 21.80 22 T_KAM_HTML_FONT_INVALID 66064 21.89 28.59 18.69 23 ALL_TRUSTED 64566 13.32 2.91 18.27 24 RCVD_IN_MSPIKE_WL 62809 16.21 12.92 17.77 25 XM_B_SpammyWords2 61796 23.52 36.21 17.49 26 XM_Multi_Part_URI 52451 15.96 18.32 14.84 27 USER_IN_DEF_DKIM_WL 44060 9.34 2.78 12.47 28 RCVD_IN_MSPIKE_H3 42405 11.35 9.98 12.00 29 XM_Body_Dirty_Words 36685 13.61 20.39 10.38 30 BAYES_00 36296 7.22 0.81 10.27 31 BAYES_60 31712 8.36 7.07 8.97 32 LotsOfNums_01 31351 8.53 7.82 8.87 33 XM_DKIMWhitelistDomains 31324 6.04 0.12 8.86 34 XM_B_Unsub 30378 11.01 16.08 8.60 35 HTML_IMAGE_RATIO_02 29676 8.15 7.64 8.40 36 TooManyTo_001 29442 7.22 4.90 8.33 37 XM_Evil_Numbers_Gen 27977 8.48 9.67 7.92 38 UNPARSEABLE_RELAY 26123 9.07 12.59 7.39 39 LOTS_OF_MONEY 25301 9.26 13.69 7.16 40 TR_XM_BayesUnsub 24415 9.73 15.67 6.91 41 IN_ZIMBRA_NJ_WHITELIST 24306 4.70 0.11 6.88 42 XM_DK_Undo_02 22524 17.92 42.20 6.37 43 T_TooManySym_01 21669 4.91 2.34 6.13 44 TR_XM_DK_Bayes 20939 4.21 0.62 5.93 45 BAYES_40 20804 4.50 1.57 5.89 46 TR_XM_DK_Bayes1 20560 4.14 0.62 5.82 47 TR_XM_UnparsRelay 20260 7.85 12.30 5.73 48 MPART_ALT_DIFF 20176 6.83 9.17 5.71 49 MIME_QP_LONG_LINE 19677 4.96 3.67 5.57 50 BAYES_99 19083 14.26 32.89 5.40 51 RCVD_IN_IADB_LISTED 18876 4.47 2.64 5.34 52 TR_XM_DK_Bayes2 18023 3.61 0.48 5.10 53 XM_PDF 17662 3.65 0.83 5.00 54 XM_H_Long_From01 17523 5.45 6.49 4.96 55 XM_SendGrid 16812 5.47 6.97 4.76 56 TR_XM_DKIM_Undo 16773 13.81 32.85 4.75 57 RCVD_IN_IADB_SPF 16642 3.92 2.25 4.71 58 RCVD_IN_MSPIKE_H4 16428 4.00 2.63 4.65 59 HTML_IMAGE_RATIO_04 16410 4.66 4.68 4.64 60 XMStrtUSub 16406 4.35 3.73 4.64 61 BOTNET_IPINHOSTNAME 16022 7.12 12.55 4.53 62 RCVD_IN_VALIDITY_SAFE 15804 4.05 3.17 4.47 63 BAYES_80 15374 5.69 8.49 4.35 64 TR_XM_SpammyWords4 15306 6.63 11.46 4.33 65 MIME_HTML_ONLY_MULTI 15083 5.19 7.14 4.27 66 BAYES_999 14940 11.19 25.82 4.23 67 RCVD_IN_IADB_SENDERID 14907 3.54 2.11 4.22 68 RCVD_IN_IADB_DK 14494 3.46 2.12 4.10 69 RCVD_IN_VALIDITY_CERTIFIED 13891 3.45 2.45 3.93 70 XM_B_SpammyWords3 13673 6.64 12.48 3.87 71 RELAYCOUNTRY_META 13499 8.77 19.17 3.82 72 T_REMOTE_IMAGE 13389 3.46 2.76 3.79 73 HTML_IMAGE_RATIO_06 12734 3.40 2.96 3.60 74 XM_UncommonTLD01 12514 5.01 8.08 3.54 75 T_TooManySym_02 12361 2.57 0.63 3.50 76 HTML_MIME_NO_HTML_TAG 12260 4.55 6.82 3.47 77 RCVD_IN_IADB_VOUCHED 12067 2.79 1.46 3.41 78 BAYES_20 11894 2.62 1.06 3.37 79 XMNumbers 11528 3.66 4.50 3.26 80 TR_XM_PhishingBody 11242 4.10 6.03 3.18 81 XM_B_Phish_Phrases 10986 4.03 5.96 3.11 82 DC_PNG_UNO_LARGO 10919 2.60 1.57 3.09 83 TR_XM_DK_SendGrid 10818 3.59 4.71 3.06 84 TVD_PH_BODY_ACCOUNTS_PRE 10812 2.64 1.74 3.06 85 FSL_BULK_SIG 10793 6.28 13.06 3.05 86 XMSubMetaSx_00 10787 3.77 5.27 3.05 87 XM_BadFromFormat 10619 2.66 1.93 3.00 88 TO_NO_BRKTS_HTML_IMG 10463 2.51 1.57 2.96 89 XMSexyCombo_05 10435 4.90 8.99 2.95 90 MAILING_LIST_MULTI 9872 2.59 2.16 2.79 91 BAYES_95 9728 3.46 4.94 2.75 92 HTML_IMAGE_RATIO_08 9534 2.61 2.41 2.70 93 XM_H_Trusted_IP 9474 1.82 0.00 2.68 94 XM_GoogleGroups 9063 3.45 5.32 2.56 95 DKIM_INVALID 8759 2.62 2.93 2.48 96 URI_NOVOWEL 8664 2.26 1.85 2.45 97 XM_SPF_SoftFail 8637 3.03 4.27 2.44 98 XM_B_SpammyTLD 8575 2.91 3.92 2.43 99 ANY_BOUNCE_MESSAGE 8410 1.84 0.72 2.38 100 BOUNCE_MESSAGE 8408 1.84 0.72 2.38 101 TM2_M_VERY_LONG_WORD 8213 3.96 7.39 2.32 102 MIME_HTML_MOSTLY 8116 2.56 3.12 2.30 103 RCVD_IN_IADB_OPTIN 8050 1.84 0.92 2.28 104 TR_XM_SB_Phish 7937 2.20 2.10 2.25 105 XMSubPhish11 7844 2.15 2.00 2.22 106 TM2_M_URI_OPT_OUT 7750 2.39 2.80 2.19 107 TooManyTo_002 7746 1.65 0.52 2.19 108 FROM_EXCESS_BASE64 7703 2.14 2.06 2.18 109 TVD_RCVD_IP 7680 1.60 0.40 2.17 110 BAYES_05 7402 1.59 0.52 2.09 111 XM_CamelCaseFrm001 7339 2.30 2.78 2.08 112 HELO_NODOT 7007 1.54 0.60 1.98 113 HELO_NO_DOMAIN 7002 1.53 0.60 1.98 114 TR_DCC_Bayes_99 6714 8.63 22.76 1.90 115 INVALID_MSGID 6655 1.31 0.11 1.88 116 IN_HORDE_ADDRESS_BOOK 6427 1.26 0.08 1.82 117 XM_B_Phish66 6418 2.26 3.19 1.82 118 XM_B_Investor 6165 2.67 4.61 1.74 119 KHOP_HELO_FCRDNS 6126 1.89 2.22 1.73 120 XMLngstWrd_00 6112 2.97 5.58 1.73 121 XM_DK_Undo_01 6061 2.09 2.87 1.72 122 TO_MALFORMED 5937 1.15 0.04 1.68 123 XMLngstWrd_01 5865 2.91 5.53 1.66 124 MSGID_NOFQDN1 5850 1.13 0.03 1.66 125 T_XMDrugObfuBody_14 5806 2.30 3.68 1.64 126 TR_XM_SpammyRelay 5778 4.57 10.73 1.64 127 TR_Symld_Words 5711 1.44 1.08 1.62 128 SUBJ_ALL_CAPS 5663 1.64 1.71 1.60 129 XMLngstWrd_02 5512 2.80 5.41 1.56 130 TR_XM_SpammyWords5 5376 2.28 3.89 1.52 131 XMLngstWrd_03 5172 2.65 5.16 1.46 132 XM_B_Unsub2 5168 1.89 2.79 1.46 133 T_XMDrugObfuBody_08 5166 1.97 3.03 1.46 134 XMDiploma_00 5050 1.70 2.27 1.43 135 TooManyTo_003 5022 1.09 0.38 1.42 136 XMLngstWrd_04 4909 2.59 5.10 1.39 137 BOTNET 4869 4.36 10.64 1.38 138 XMGappySubj_01 4821 0.99 0.20 1.36 139 URI_HEX 4651 1.50 1.87 1.32 140 HTML_TITLE_SUBJ_DIFF 4515 2.43 4.86 1.28 141 UPPERCASE_75_100 4431 2.38 4.73 1.25 142 XMCapTrack 4349 0.94 0.34 1.23 143 UNTRUSTED_Relay 4297 3.42 8.04 1.22 144 XMBSHREFv2 4284 0.95 0.39 1.21 145 XM_H_Long_From02 4165 1.24 1.38 1.18 146 RCVD_IN_MSPIKE_H5 3976 0.87 0.32 1.13 147 TR_XM_SpammyWords2 3945 4.33 11.09 1.12 148 TVD_SPACE_RATIO 3908 0.77 0.06 1.11 149 RELAYCOUNTRY_CA 3900 2.83 6.47 1.10 150 RCVD_IN_MSPIKE_BL 3887 2.26 4.70 1.10 151 TR_XM_MSPIKECOMBO 3885 2.23 4.60 1.10 152 XMStockSpam_06 3878 1.24 1.53 1.10 153 TR_MetaPhish_Combo_01 3817 1.11 1.17 1.08 154 T_XMDrugObfuBody_00 3752 1.21 1.51 1.06 155 XM_OfRef6 3633 1.95 3.88 1.03 156 TooManyTo_004 3584 0.79 0.33 1.01 157 XM_ProductURIs 3582 0.94 0.80 1.01 158 XMSubNoVowel 3547 1.07 1.22 1.00 159 HTML_FONT_FACE_BAD 3171 0.82 0.65 0.90 160 TR_XM_Base64_M1 3103 0.99 1.24 0.88 161 RCVD_IN_RP_SAFE 3089 0.81 0.66 0.87 162 T_FILL_THIS_FORM_SHORT 3086 1.39 2.49 0.87 163 DKIM_ADSP_CUSTOM_MED 2969 0.85 0.88 0.84 164 XMGenDplmaNmb 2934 0.96 1.25 0.83 165 TooManyTo_005 2897 0.64 0.27 0.82 166 HTTPS_HTTP_MISMATCH 2892 0.92 1.12 0.82 167 XM_UB50 2740 1.58 3.27 0.78 168 RCVD_IN_RP_CERTIFIED 2725 0.70 0.54 0.77 169 XMBody_95 2670 0.56 0.16 0.76 170 SpammyFromTLD_01 2576 1.49 3.08 0.73 171 T_TooManySym_03 2562 0.57 0.26 0.72 172 XMHTML_After_End 2519 0.93 1.38 0.71 173 RCVD_IN_MSPIKE_L3 2514 1.12 1.99 0.71 174 XM_ShortIntro_01 2485 0.59 0.36 0.70 175 XMSubMetaI_00 2435 0.73 0.83 0.69 176 XMBdyGiftCard01 2366 0.74 0.89 0.67 177 XMNoVowels 2290 0.55 0.36 0.65 178 HTML_TAG_BALANCE_BODY 2251 0.89 1.41 0.64 179 XM_B_COPY_HTML 2234 0.71 0.87 0.63 180 XMMoneyMeta_00 2211 0.73 0.96 0.63 181 T_OBFU_PDF_ATTACH 2195 0.48 0.20 0.62 182 SHORT_HELO_AND_INLINE_IMAGE 2166 0.45 0.11 0.61 183 XMHTMLBadTable_001 2083 0.70 0.94 0.59 184 XMBrknScrpt_02 2054 0.77 1.15 0.58 185 FROM_GOV_DKIM_AU 2019 0.45 0.20 0.57 186 T_XMHurry_00 1997 0.90 1.61 0.57 187 XMPhish30 1970 0.69 0.98 0.56 188 XM_B_SpammyWords4 1968 1.34 2.98 0.56 189 XM_shorewaves_Whitelist 1949 0.37 0.00 0.55 190 URI_TRY_3LD 1941 0.79 1.31 0.55 191 XM_H_PHPMailer 1937 0.59 0.68 0.55 192 XM_B_COVIDMETA 1932 0.94 1.76 0.55 193 RELAYCOUNTRY_GB 1931 0.68 0.95 0.55 194 MPART_ALT_DIFF_COUNT 1896 0.70 1.04 0.54 195 XMOemUri 1833 0.40 0.15 0.52 196 RCVD_IN_SORBS_DUL 1815 0.39 0.12 0.51 197 NML_ADSP_CUSTOM_MED 1809 0.58 0.71 0.51 198 HTML_IMAGE_ONLY_20 1777 0.56 0.67 0.50 199 T_Symld_Words_02 1740 0.58 0.76 0.49 200 TR_XM_SpammyWords3 1686 1.05 2.26 0.48 ----------------------------------------------------------------------