Email: 552853 Autolearn: 0 AvgScore: 1.13 AvgScanTime: 1.50 sec Spam: 109917 Autolearn: 0 AvgScore: 13.04 AvgScanTime: 1.78 sec Ham: 442936 Autolearn: 0 AvgScore: -1.83 AvgScanTime: 1.43 sec Time Spent Running SA: 230.77 hours Time Spent Processing Spam: 54.49 hours Time Spent Processing Ham: 176.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 105755 90.57 96.21 89.17 2 DKIM_SIGNED 94780 71.63 86.23 68.01 3 XM_DK_Pass 89987 69.42 81.87 66.33 4 RELAYCOUNTRY_US 87374 79.89 79.49 79.99 5 DKIM_VALID 87285 67.35 79.41 64.36 6 XM_B_Unicode 84461 73.93 76.84 73.21 7 XMListUnsubscribeExists 77486 50.76 70.50 45.86 8 XM_B_SpammyWords 73946 46.51 67.27 41.36 9 DKIM_VALID_AU 63707 50.08 57.96 48.13 10 DCC_CHECK_NEGATIVE 58059 75.05 52.82 80.57 11 BAYES_50 51914 49.70 47.23 50.31 12 DCC_CHECK 51825 24.91 47.15 19.39 13 XM_DK_Undo_02 46744 14.03 42.53 6.96 14 XM_B_Unicode3 46434 45.48 42.24 46.29 15 XM_B_SpammyWords2 40959 21.29 37.26 17.33 16 LOC_TINY_FONT_1 37292 24.44 33.93 22.09 17 TR_XM_DKIM_Undo 36671 10.69 33.36 5.07 18 FVGT_m_MULTI_ODD 36393 24.71 33.11 22.63 19 MIME_HTML_ONLY 34601 22.51 31.48 20.29 20 HTML_FONT_LOW_CONTRAST 34178 26.35 31.09 25.17 21 T_KAM_HTML_FONT_INVALID 34035 20.58 30.96 18.00 22 BAYES_99 32918 16.32 29.95 12.94 23 DKIM_VALID_EF 32281 25.33 29.37 24.33 24 RCVD_IN_MSPIKE_H2 28967 20.62 26.35 19.20 25 XMSubLong 28606 21.02 26.03 19.77 26 BAYES_999 25548 14.15 23.24 11.89 27 XM_Body_Dirty_Words 24899 13.03 22.65 10.64 28 RELAYCOUNTRY_META 24230 7.37 22.04 3.73 29 T_TM2_M_HEADER_IN_MSG 23753 25.84 21.61 26.88 30 RCVD_IN_MSPIKE_WL 23440 24.92 21.33 25.81 31 XM_Multi_Part_URI 18424 12.13 16.76 10.98 32 BOTNET_IPINHOSTNAME 15591 6.29 14.18 4.33 33 XM_B_Unsub 15357 10.77 13.97 9.98 34 LOTS_OF_MONEY 15291 8.25 13.91 6.84 35 TR_XM_SpammyRelay 14458 3.81 13.15 1.49 36 TR_DCC_Bayes_99 14431 3.56 13.13 1.18 37 RCVD_IN_MSPIKE_H3 14347 13.63 13.05 13.77 38 XM_UncommonTLD01 14197 4.91 12.92 2.93 39 UNTRUSTED_Relay 13754 3.51 12.51 1.28 40 BOTNET 13503 3.84 12.28 1.75 41 XM_B_SpammyWords3 13483 5.48 12.27 3.79 42 MPART_ALT_DIFF 13019 7.24 11.84 6.10 43 UNPARSEABLE_RELAY 12801 8.96 11.65 8.30 44 TR_XM_SpammyWords4 12770 5.50 11.62 3.99 45 TR_XM_UnparsRelay 12366 7.66 11.25 6.77 46 XMSexyCombo_05 12224 4.71 11.12 3.12 47 TR_XM_SpammyWords2 11525 2.84 10.49 0.94 48 RCVD_IN_BL_SPAMCOP_NET 11192 2.74 10.18 0.89 49 XM_Evil_Numbers_Gen 10282 7.44 9.35 6.97 50 XM_SendGrid 10245 7.85 9.32 7.48 51 HTML_MIME_NO_HTML_TAG 8799 3.46 8.01 2.34 52 LotsOfNums_01 8635 8.91 7.86 9.17 53 RCVD_IN_MSPIKE_H4 8565 9.82 7.79 10.33 54 FSL_BULK_SIG 8521 3.90 7.75 2.95 55 XMSubMetaSx_00 8299 4.11 7.55 3.26 56 TR_XM_PhishingBody 8278 4.01 7.53 3.14 57 HTML_IMAGE_RATIO_02 8230 5.94 7.49 5.56 58 MIME_HTML_MOSTLY 7578 3.33 6.89 2.45 59 BAYES_80 7509 4.48 6.83 3.90 60 DKIM_INVALID 7495 4.27 6.82 3.64 61 MIME_HTML_ONLY_MULTI 7339 4.74 6.68 4.26 62 BAYES_60 7235 7.72 6.58 8.00 63 XM_B_Phish_Phrases 7200 3.52 6.55 2.76 64 TR_XM_SPAMCOP 7187 1.60 6.54 0.38 65 TooManyTo_001 7049 7.68 6.41 8.00 66 TM2_M_VERY_LONG_WORD 6980 2.42 6.35 1.44 67 XM_UB50 6914 1.95 6.29 0.87 68 SpammyFromTLD_02 6816 1.53 6.20 0.38 69 XM_H_Long_From01 6138 4.77 5.58 4.57 70 RELAYCOUNTRY_CA 6113 1.77 5.56 0.82 71 XM_GoogleGroups 5734 2.18 5.22 1.43 72 TR_XM_DK_SendGrid 5424 4.52 4.93 4.42 73 KHOP_HELO_FCRDNS 5401 2.05 4.91 1.34 74 RCVD_IN_MSPIKE_BL 5378 1.59 4.89 0.77 75 XM_B_Phish66 5371 2.28 4.89 1.63 76 TR_XM_MSPIKECOMBO 5370 1.58 4.89 0.76 77 HTML_IMAGE_RATIO_04 5112 5.31 4.65 5.48 78 TM2_M_URI_OPT_OUT 4940 3.82 4.49 3.66 79 MIME_QP_LONG_LINE 4911 5.95 4.47 6.32 80 TR_XM_MaxUnsub 4909 1.59 4.47 0.87 81 SpammyFromTLD_01 4899 1.43 4.46 0.67 82 T_REMOTE_IMAGE 4768 3.20 4.34 2.92 83 XMLngstWrd_00 4695 1.89 4.27 1.29 84 XM_SPF_SoftFail 4641 2.22 4.22 1.72 85 XMLngstWrd_01 4637 1.66 4.22 1.03 86 XM_OfRef6 4624 1.54 4.21 0.88 87 HTML_TITLE_SUBJ_DIFF 4604 1.12 4.19 0.35 88 XMLngstWrd_02 4563 1.45 4.15 0.77 89 XMLngstWrd_03 4507 1.24 4.10 0.53 90 XM_B_Investor 4507 1.98 4.10 1.45 91 XMNumbers 4476 3.35 4.07 3.17 92 XMLngstWrd_04 4432 1.19 4.03 0.48 93 UPPERCASE_75_100 4371 1.09 3.98 0.37 94 XMStrtUSub 4370 3.54 3.98 3.44 95 URI_NOVOWEL 4343 2.73 3.95 2.42 96 XM_DIRTYINTL 3898 0.97 3.55 0.33 97 BAYES_95 3792 2.59 3.45 2.37 98 TR_XM_SpammyWords5 3742 1.81 3.40 1.41 99 HTML_IMAGE_RATIO_06 3627 3.97 3.30 4.13 100 T_XMDrugObfuBody_14 3466 2.42 3.15 2.24 101 XM_B_SpammyTLD 3460 2.11 3.15 1.86 102 XMDiploma_00 3452 1.68 3.14 1.32 103 TR_XM_NoHeaderRelay 3426 0.81 3.12 0.24 104 MAILING_LIST_MULTI 3422 2.58 3.11 2.45 105 T_XMDrugObfuBody_08 3294 1.62 3.00 1.27 106 GOOG_STO_IMG_HTML 3269 0.61 2.97 0.03 107 RCVD_IN_IADB_LISTED 3187 4.57 2.90 4.99 108 RELAYCOUNTRY_FR 2989 0.69 2.72 0.18 109 URIBL_DBL_SPAM 2913 0.54 2.65 0.01 110 TR_XM_SpammyWords3 2909 0.81 2.65 0.36 111 HTML_IMAGE_RATIO_08 2827 2.68 2.57 2.71 112 XMSexyCombo_01 2734 1.10 2.49 0.76 113 XM_CamelCaseFrm001 2707 1.78 2.46 1.61 114 RCVD_IN_IADB_SPF 2674 4.00 2.43 4.39 115 T_TooManySym_01 2672 4.64 2.43 5.19 116 HTML_IMAGE_ONLY_08 2625 0.55 2.39 0.10 117 XM_B_SpammyWords4 2611 0.81 2.38 0.42 118 XM_URI_RBL 2592 0.57 2.36 0.12 119 XM_B_COVIDMETA 2558 0.86 2.33 0.49 120 TR_XM_COVIDMETA1 2548 0.81 2.32 0.43 121 XM_UB99 2538 0.46 2.31 0.00 122 XM_DK_Undo_01 2524 1.63 2.30 1.46 123 RCVD_IN_IADB_DK 2492 3.52 2.27 3.84 124 RCVD_IN_IADB_SENDERID 2469 3.60 2.25 3.94 125 URI_HEX 2441 1.40 2.22 1.20 126 BAYES_40 2369 4.44 2.16 5.01 127 ALL_TRUSTED 2365 14.42 2.15 17.46 128 XM_B_Unsub2 2345 1.44 2.13 1.26 129 JH_SPAMMY_HEADERS 2330 0.42 2.12 0.00 130 XMGenDplmaNmb 2304 1.03 2.10 0.76 131 T_XMDrugObfuBody_00 2303 0.98 2.10 0.70 132 RCVD_IN_VALIDITY_RPBL 2282 0.52 2.08 0.13 133 TR_XM_PHPDW 2261 0.62 2.06 0.27 134 TR_LOTS_OF_MONEY3 2244 0.82 2.04 0.52 135 T_FILL_THIS_FORM_SHORT 2215 0.96 2.02 0.70 136 BOTNET_NORDNS 2196 0.41 2.00 0.01 137 XM_Body_Dirty_Words_01 2155 0.52 1.96 0.17 138 TR_XM_PHPForged 2145 0.57 1.95 0.23 139 MIXED_CENTER_CASE 2138 0.39 1.95 0.00 140 RCVD_IN_MSPIKE_L5 2136 0.57 1.94 0.22 141 MIXED_HREF_CASE 2131 0.39 1.94 0.00 142 MIXED_IMG_CASE 2129 0.39 1.94 0.00 143 T_HTML_TAG_BALANCE_CENTER 2125 0.46 1.93 0.10 144 MIXED_AREA_CASE 2125 0.38 1.93 0.00 145 TR_XM_SB_Phish 2118 1.98 1.93 2.00 146 RCVD_IN_MSPIKE_L3 2100 0.63 1.91 0.31 147 SUBJ_ALL_CAPS 2095 2.12 1.91 2.18 148 TR_XM_FormFill2 2093 0.56 1.90 0.23 149 XM_H_PHPOS 2071 0.55 1.88 0.22 150 RCVD_IN_VALIDITY_SAFE 2070 4.73 1.88 5.44 151 MIXED_FONT_CASE 2060 0.37 1.87 0.00 152 XM_UB999 2049 0.37 1.86 0.00 153 URIBL_BLACK 2047 0.41 1.86 0.05 154 TR_XM_INV_DKIM 2029 0.59 1.85 0.28 155 FROM_EXCESS_BASE64 1974 2.19 1.80 2.29 156 RCVD_IN_RP_RNBL 1962 0.45 1.78 0.12 157 HTML_FONT_SIZE_LARGE 1952 0.43 1.78 0.10 158 XMSubPhish11 1936 1.92 1.76 1.96 159 RELAYCOUNTRY_AU 1862 0.65 1.69 0.39 160 TR_XM_COVIDMETA4 1836 0.60 1.67 0.34 161 RCVD_IN_IADB_VOUCHED 1781 2.72 1.62 2.99 162 BAYES_20 1767 3.31 1.61 3.73 163 TR_Symld_Words 1750 1.53 1.59 1.52 164 T_XMHurry_00 1718 0.74 1.56 0.54 165 RCVD_IN_RP_SAFE 1676 4.25 1.52 4.93 166 RCVD_IN_VALIDITY_CERTIFIED 1662 4.21 1.51 4.88 167 BODY_URI_ONLY 1636 0.31 1.49 0.01 168 HTTPS_HTTP_MISMATCH 1628 0.83 1.48 0.67 169 XMBody_17 1589 0.55 1.45 0.33 170 XMBrknScrpt_02 1589 0.85 1.45 0.70 171 XMHTML_After_End 1572 0.78 1.43 0.61 172 XM_XX_Yahoo 1568 0.41 1.43 0.16 173 XMSlimDrugH 1567 0.54 1.43 0.33 174 TM2_M_A_HREF_HREF 1553 0.64 1.41 0.45 175 TR_XM_BayesRelay 1519 0.28 1.38 0.01 176 XMStockSpam_06 1495 0.79 1.36 0.65 177 BAYES_00 1466 9.44 1.33 11.45 178 RELAYCOUNTRY_CN 1454 0.32 1.32 0.07 179 XM_UB60 1432 0.32 1.30 0.08 180 DIET_1 1395 0.54 1.27 0.35 181 PDS_OTHER_BAD_TLD 1362 0.45 1.24 0.26 182 XM_PDF 1355 3.74 1.23 4.37 183 XMPhish30 1352 0.87 1.23 0.78 184 HTML_FONT_SIZE_HUGE 1333 0.28 1.21 0.05 185 RELAYCOUNTRY_RU 1319 0.26 1.20 0.03 186 TR_XM_FormFill 1299 0.24 1.18 0.01 187 TooManyTo_002 1266 1.78 1.15 1.93 188 TR_Mismatch_TLD_01 1259 0.43 1.15 0.25 189 RCVD_IN_RP_CERTIFIED 1251 3.76 1.14 4.41 190 TR_BOTNET_NEGATE 1248 0.50 1.14 0.34 191 XMSubNoVowel 1221 4.76 1.11 5.66 192 URI_TRY_3LD 1213 0.65 1.10 0.54 193 XMBdyGiftCard01 1200 0.74 1.09 0.66 194 RELAYCOUNTRY_DE 1191 0.45 1.08 0.30 195 RCVD_IN_IADB_OPTIN 1184 1.76 1.08 1.93 196 RELAYCOUNTRY_GB 1174 0.81 1.07 0.74 197 XM_H_PHPMailer 1170 0.56 1.06 0.44 198 T_Symld_Words_02 1158 0.60 1.05 0.49 199 XMCapTrack 1137 0.99 1.03 0.98 200 RCVD_IN_MSPIKE_L4 1134 0.38 1.03 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 394966 90.57 96.21 89.17 2 DCC_CHECK_NEGATIVE 356860 75.05 52.82 80.57 3 RELAYCOUNTRY_US 354324 79.89 79.49 79.99 4 XM_B_Unicode 324254 73.93 76.84 73.21 5 DKIM_SIGNED 301219 71.63 86.23 68.01 6 XM_DK_Pass 293801 69.42 81.87 66.33 7 DKIM_VALID 285086 67.35 79.41 64.36 8 BAYES_50 222836 49.70 47.23 50.31 9 DKIM_VALID_AU 213181 50.08 57.96 48.13 10 XM_B_Unicode3 205020 45.48 42.24 46.29 11 XMListUnsubscribeExists 203142 50.76 70.50 45.86 12 XM_B_SpammyWords 183180 46.51 67.27 41.36 13 T_TM2_M_HEADER_IN_MSG 119079 25.84 21.61 26.88 14 RCVD_IN_MSPIKE_WL 114330 24.92 21.33 25.81 15 HTML_FONT_LOW_CONTRAST 111500 26.35 31.09 25.17 16 DKIM_VALID_EF 107750 25.33 29.37 24.33 17 FVGT_m_MULTI_ODD 100230 24.71 33.11 22.63 18 LOC_TINY_FONT_1 97836 24.44 33.93 22.09 19 MIME_HTML_ONLY 89860 22.51 31.48 20.29 20 XMSubLong 87578 21.02 26.03 19.77 21 DCC_CHECK 85893 24.91 47.15 19.39 22 RCVD_IN_MSPIKE_H2 85051 20.62 26.35 19.20 23 T_KAM_HTML_FONT_INVALID 79747 20.58 30.96 18.00 24 ALL_TRUSTED 77339 14.42 2.15 17.46 25 XM_B_SpammyWords2 76762 21.29 37.26 17.33 26 RCVD_IN_MSPIKE_H3 61013 13.63 13.05 13.77 27 BAYES_99 57323 16.32 29.95 12.94 28 BAYES_999 52684 14.15 23.24 11.89 29 BAYES_00 50736 9.44 1.33 11.45 30 XM_Multi_Part_URI 48630 12.13 16.76 10.98 31 XM_Body_Dirty_Words 47133 13.03 22.65 10.64 32 RCVD_IN_MSPIKE_H4 45735 9.82 7.79 10.33 33 USER_IN_DEF_DKIM_WL 44627 8.26 0.94 10.08 34 XM_B_Unsub 44197 10.77 13.97 9.98 35 LotsOfNums_01 40600 8.91 7.86 9.17 36 XM_H_Trusted_IP 39540 7.15 0.00 8.93 37 UNPARSEABLE_RELAY 36747 8.96 11.65 8.30 38 BAYES_60 35443 7.72 6.58 8.00 39 TooManyTo_001 35423 7.68 6.41 8.00 40 XM_SendGrid 33144 7.85 9.32 7.48 41 XM_Evil_Numbers_Gen 30873 7.44 9.35 6.97 42 XM_DK_Undo_02 30826 14.03 42.53 6.96 43 LOTS_OF_MONEY 30300 8.25 13.91 6.84 44 TR_XM_UnparsRelay 30003 7.66 11.25 6.77 45 TR_XM_DK_Bayes 29420 5.44 0.60 6.64 46 TR_XM_DK_Bayes1 28526 5.28 0.58 6.44 47 MIME_QP_LONG_LINE 27993 5.95 4.47 6.32 48 MPART_ALT_DIFF 27035 7.24 11.84 6.10 49 ANY_BOUNCE_MESSAGE 26974 5.02 0.72 6.09 50 BOUNCE_MESSAGE 26971 5.02 0.72 6.09 51 XM_DKIMWhitelistDomains 26808 4.85 0.02 6.05 52 XMSubNoVowel 25072 4.76 1.11 5.66 53 IN_ZIMBRA_NJ_WHITELIST 24929 4.53 0.11 5.63 54 HTML_IMAGE_RATIO_02 24607 5.94 7.49 5.56 55 HTML_IMAGE_RATIO_04 24266 5.31 4.65 5.48 56 RCVD_IN_VALIDITY_SAFE 24087 4.73 1.88 5.44 57 TR_XM_DK_Bayes2 23821 4.40 0.46 5.38 58 T_TooManySym_01 22985 4.64 2.43 5.19 59 TR_XM_DKIM_Undo 22454 10.69 33.36 5.07 60 BAYES_40 22193 4.44 2.16 5.01 61 RCVD_IN_IADB_LISTED 22090 4.57 2.90 4.99 62 RCVD_IN_RP_SAFE 21819 4.25 1.52 4.93 63 RCVD_IN_VALIDITY_CERTIFIED 21594 4.21 1.51 4.88 64 TVD_SPACE_RATIO_MINFP 21123 3.85 0.13 4.77 65 XM_H_Long_From01 20241 4.77 5.58 4.57 66 TR_XM_DK_SendGrid 19583 4.52 4.93 4.42 67 RCVD_IN_RP_CERTIFIED 19546 3.76 1.14 4.41 68 RCVD_IN_IADB_SPF 19429 4.00 2.43 4.39 69 XM_PDF 19346 3.74 1.23 4.37 70 BOTNET_IPINHOSTNAME 19198 6.29 14.18 4.33 71 MIME_HTML_ONLY_MULTI 18885 4.74 6.68 4.26 72 HTML_IMAGE_RATIO_06 18314 3.97 3.30 4.13 73 TR_XM_SpammyWords4 17660 5.50 11.62 3.99 74 RCVD_IN_IADB_SENDERID 17443 3.60 2.25 3.94 75 BAYES_80 17278 4.48 6.83 3.90 76 RCVD_IN_IADB_DK 16993 3.52 2.27 3.84 77 XM_B_SpammyWords3 16799 5.48 12.27 3.79 78 BAYES_20 16515 3.31 1.61 3.73 79 RELAYCOUNTRY_META 16511 7.37 22.04 3.73 80 TM2_M_URI_OPT_OUT 16196 3.82 4.49 3.66 81 DKIM_INVALID 16133 4.27 6.82 3.64 82 XMStrtUSub 15221 3.54 3.98 3.44 83 XMSubMetaSx_00 14428 4.11 7.55 3.26 84 XMNumbers 14036 3.35 4.07 3.17 85 TR_XM_PhishingBody 13896 4.01 7.53 3.14 86 XMSexyCombo_05 13817 4.71 11.12 3.12 87 RCVD_IN_IADB_VOUCHED 13253 2.72 1.62 2.99 88 FSL_BULK_SIG 13054 3.90 7.75 2.95 89 XM_UncommonTLD01 12971 4.91 12.92 2.93 90 T_REMOTE_IMAGE 12945 3.20 4.34 2.92 91 XM_B_Phish_Phrases 12245 3.52 6.55 2.76 92 HTML_IMAGE_RATIO_08 11986 2.68 2.57 2.71 93 T_TooManySym_02 11697 2.24 0.63 2.64 94 MIME_HTML_MOSTLY 10853 3.33 6.89 2.45 95 MAILING_LIST_MULTI 10840 2.58 3.11 2.45 96 URI_NOVOWEL 10737 2.73 3.95 2.42 97 BAYES_95 10508 2.59 3.45 2.37 98 HTML_MIME_NO_HTML_TAG 10357 3.46 8.01 2.34 99 FROM_EXCESS_BASE64 10141 2.19 1.80 2.29 100 BAYES_05 10098 1.99 0.84 2.28 101 T_XMDrugObfuBody_14 9910 2.42 3.15 2.24 102 SUBJ_ALL_CAPS 9641 2.12 1.91 2.18 103 HTML_FONT_FACE_BAD 9547 1.88 0.79 2.16 104 TR_XM_SB_Phish 8839 1.98 1.93 2.00 105 XMSubPhish11 8696 1.92 1.76 1.96 106 TooManyTo_002 8556 1.78 1.15 1.93 107 RCVD_IN_IADB_OPTIN 8544 1.76 1.08 1.93 108 XM_B_SpammyTLD 8224 2.11 3.15 1.86 109 BOTNET 7740 3.84 12.28 1.75 110 XM_SPF_SoftFail 7639 2.22 4.22 1.72 111 RCVD_IN_MSPIKE_H5 7582 1.47 0.48 1.71 112 XM_B_Phish66 7215 2.28 4.89 1.63 113 XM_CamelCaseFrm001 7137 1.78 2.46 1.61 114 IN_HORDE_ADDRESS_BOOK 7053 1.30 0.11 1.59 115 INVALID_MSGID 6876 1.28 0.19 1.55 116 TR_Symld_Words 6730 1.53 1.59 1.52 117 HELO_NODOT 6690 1.38 0.83 1.51 118 HELO_NO_DOMAIN 6689 1.38 0.83 1.51 119 TR_XM_SpammyRelay 6587 3.81 13.15 1.49 120 XM_DK_Undo_01 6486 1.63 2.30 1.46 121 XM_B_Investor 6441 1.98 4.10 1.45 122 TM2_M_VERY_LONG_WORD 6391 2.42 6.35 1.44 123 XM_GoogleGroups 6315 2.18 5.22 1.43 124 MSGID_NOFQDN1 6285 1.16 0.09 1.42 125 TR_XM_SpammyWords5 6239 1.81 3.40 1.41 126 TO_MALFORMED 6054 1.11 0.10 1.37 127 KHOP_HELO_FCRDNS 5939 2.05 4.91 1.34 128 XMDiploma_00 5857 1.68 3.14 1.32 129 TooManyTo_003 5733 1.22 0.90 1.29 130 XMLngstWrd_00 5727 1.89 4.27 1.29 131 UNTRUSTED_Relay 5668 3.51 12.51 1.28 132 T_XMDrugObfuBody_08 5639 1.62 3.00 1.27 133 XM_B_Unsub2 5602 1.44 2.13 1.26 134 TVD_RCVD_IP 5377 1.03 0.30 1.21 135 URI_HEX 5295 1.40 2.22 1.20 136 TR_DCC_Bayes_99 5244 3.56 13.13 1.18 137 XM_H_Long_From02 5019 1.09 0.92 1.13 138 XMGappySubj_01 4749 0.89 0.18 1.07 139 XMLngstWrd_01 4545 1.66 4.22 1.03 140 XMCapTrack 4322 0.99 1.03 0.98 141 DKIM_ADSP_CUSTOM_MED 4237 0.96 0.96 0.96 142 TR_XM_SpammyWords2 4183 2.84 10.49 0.94 143 TooManyTo_004 3978 0.86 0.70 0.90 144 RCVD_IN_BL_SPAMCOP_NET 3929 2.74 10.18 0.89 145 TVD_SPACE_RATIO 3892 0.72 0.09 0.88 146 XM_OfRef6 3891 1.54 4.21 0.88 147 TR_XM_MaxUnsub 3856 1.59 4.47 0.87 148 XM_UB50 3854 1.95 6.29 0.87 149 XM_ProductURIs 3796 0.87 0.94 0.86 150 HTML_IMAGE_ONLY_20 3771 0.72 0.21 0.85 151 XMBSHREFv2 3662 0.73 0.36 0.83 152 RELAYCOUNTRY_CA 3650 1.77 5.56 0.82 153 XMPhish30 3459 0.87 1.23 0.78 154 XMLngstWrd_02 3428 1.45 4.15 0.77 155 TR_MetaPhish_Combo_01 3413 0.78 0.84 0.77 156 RCVD_IN_MSPIKE_BL 3395 1.59 4.89 0.77 157 XMSexyCombo_01 3371 1.10 2.49 0.76 158 XMGenDplmaNmb 3365 1.03 2.10 0.76 159 TR_XM_MSPIKECOMBO 3362 1.58 4.89 0.76 160 RELAYCOUNTRY_GB 3282 0.81 1.07 0.74 161 TooManyTo_005 3171 0.70 0.62 0.72 162 T_XMDrugObfuBody_00 3116 0.98 2.10 0.70 163 XMBrknScrpt_02 3100 0.85 1.45 0.70 164 T_FILL_THIS_FORM_SHORT 3092 0.96 2.02 0.70 165 XMBody_95 3082 0.59 0.17 0.70 166 SHORT_URI_2 3078 0.67 0.55 0.69 167 FROM_GOV_DKIM_AU 2995 0.61 0.34 0.68 168 SpammyFromTLD_01 2981 1.43 4.46 0.67 169 HTTPS_HTTP_MISMATCH 2950 0.83 1.48 0.67 170 XMBdyGiftCard01 2905 0.74 1.09 0.66 171 XMStockSpam_06 2898 0.79 1.36 0.65 172 NML_ADSP_CUSTOM_MED 2857 0.68 0.81 0.65 173 T_TooManySym_03 2803 0.55 0.23 0.63 174 XM_B_COPY_HTML 2784 0.66 0.81 0.63 175 XMHTML_After_End 2716 0.78 1.43 0.61 176 HTML_TAG_BALANCE_BODY 2645 0.60 0.63 0.60 177 XMOemUri 2458 0.55 0.54 0.55 178 FORGED_GMAIL_RCVD 2441 0.61 0.82 0.55 179 URI_TRY_3LD 2401 0.65 1.10 0.54 180 T_XMHurry_00 2393 0.74 1.56 0.54 181 TR_MSPIKEBAYES00 2393 0.44 0.03 0.54 182 XMLngstWrd_03 2359 1.24 4.10 0.53 183 TR_LOTS_OF_MONEY3 2313 0.82 2.04 0.52 184 T_OBFU_PDF_ATTACH 2280 0.46 0.23 0.51 185 XM_ShortIntro_01 2192 0.49 0.45 0.49 186 XM_B_COVIDMETA 2183 0.86 2.33 0.49 187 XMNoVowels 2180 0.50 0.53 0.49 188 T_Symld_Words_02 2172 0.60 1.05 0.49 189 XMLngstWrd_04 2124 1.19 4.03 0.48 190 RCVD_IN_SORBS_DUL 2078 0.42 0.24 0.47 191 XMDateMe_00 2056 0.46 0.43 0.46 192 XMPhish14 2008 0.49 0.66 0.45 193 XMSubMetaI_00 2000 0.54 0.90 0.45 194 XMHTMLBadTable_001 1975 0.48 0.63 0.45 195 TM2_M_A_HREF_HREF 1973 0.64 1.41 0.45 196 TR_Sbj_FN_Bdy 1945 0.46 0.52 0.44 197 XM_H_PHPMailer 1944 0.56 1.06 0.44 198 TR_XM_COVIDMETA1 1926 0.81 2.32 0.43 199 XM_H_Undi_Recip 1859 0.50 0.80 0.42 200 XM_B_SpammyWords4 1854 0.81 2.38 0.42 ----------------------------------------------------------------------