Email: 526623 Autolearn: 0 AvgScore: 2.57 AvgScanTime: 1.52 sec Spam: 120661 Autolearn: 0 AvgScore: 13.58 AvgScanTime: 1.74 sec Ham: 405962 Autolearn: 0 AvgScore: -0.71 AvgScanTime: 1.46 sec Time Spent Running SA: 223.05 hours Time Spent Processing Spam: 58.16 hours Time Spent Processing Ham: 164.88 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115867 89.87 96.03 88.04 2 DKIM_SIGNED 101762 70.00 84.34 65.74 3 XM_DK_Pass 97900 68.01 81.14 64.11 4 XM_B_Unicode 95280 72.15 78.97 70.12 5 RELAYCOUNTRY_US 95030 74.74 78.76 73.54 6 DKIM_VALID 94305 65.78 78.16 62.10 7 DCC_CHECK 88726 42.25 73.53 32.95 8 XMListUnsubscribeExists 85100 49.35 70.53 43.06 9 XM_B_SpammyWords 81992 53.13 67.95 48.73 10 DKIM_VALID_AU 69023 48.55 57.20 45.97 11 BAYES_50 56109 54.06 46.50 56.30 12 XM_B_Unicode3 52737 41.58 43.71 40.95 13 XM_DK_Undo_02 50529 14.04 41.88 5.76 14 LOC_TINY_FONT_1 44264 24.42 36.68 20.78 15 XM_B_SpammyWords2 44072 24.06 36.53 20.35 16 TR_XM_DKIM_Undo 40756 11.11 33.78 4.37 17 MIME_HTML_ONLY 40237 24.95 33.35 22.46 18 HTML_FONT_LOW_CONTRAST 38074 26.39 31.55 24.86 19 DKIM_VALID_EF 36892 25.61 30.57 24.14 20 FVGT_m_MULTI_ODD 36729 23.22 30.44 21.07 21 T_KAM_HTML_FONT_INVALID 35096 19.93 29.09 17.21 22 BAYES_99 34655 10.00 28.72 4.44 23 DCC_CHECK_NEGATIVE 31877 57.71 26.42 67.01 24 RCVD_IN_MSPIKE_H2 30961 20.55 25.66 19.03 25 XMSubLong 29452 22.85 24.41 22.38 26 XM_Body_Dirty_Words 27925 16.73 23.14 14.82 27 T_TM2_M_HEADER_IN_MSG 27307 29.40 22.63 31.41 28 BAYES_999 26961 7.88 22.34 3.58 29 TR_DCC_Bayes_99 25323 6.09 20.99 1.67 30 RELAYCOUNTRY_META 25321 7.27 20.99 3.19 31 RCVD_IN_MSPIKE_WL 24239 25.50 20.09 27.11 32 XM_Multi_Part_URI 21217 11.99 17.58 10.33 33 BOTNET 17496 4.47 14.50 1.48 34 LOTS_OF_MONEY 16554 9.88 13.72 8.74 35 BOTNET_IPINHOSTNAME 16005 6.41 13.26 4.37 36 UNTRUSTED_Relay 15980 3.88 13.24 1.10 37 XM_B_SpammyWords3 15577 5.91 12.91 3.82 38 FSL_BULK_SIG 15391 7.25 12.76 5.62 39 RCVD_IN_MSPIKE_H3 14964 13.62 12.40 13.99 40 UNPARSEABLE_RELAY 14867 8.65 12.32 7.56 41 XM_UncommonTLD01 14713 5.16 12.19 3.07 42 TR_XM_SpammyRelay 14712 3.87 12.19 1.40 43 TR_XM_UnparsRelay 14352 7.22 11.89 5.84 44 XM_B_Unsub 14310 11.72 11.86 11.68 45 TR_XM_SpammyWords4 14170 7.05 11.74 5.66 46 XMSexyCombo_05 12906 7.14 10.70 6.08 47 MPART_ALT_DIFF 12372 6.52 10.25 5.41 48 RCVD_IN_BL_SPAMCOP_NET 12013 2.94 9.96 0.86 49 XM_Evil_Numbers_Gen 11580 7.15 9.60 6.43 50 HTML_IMAGE_RATIO_02 11289 6.06 9.36 5.09 51 TR_XM_SpammyWords2 11161 2.66 9.25 0.70 52 XM_SendGrid 10728 6.83 8.89 6.22 53 BAYES_60 8993 8.02 7.45 8.19 54 XM_UB50 8855 2.20 7.34 0.67 55 LotsOfNums_01 8725 8.56 7.23 8.95 56 BAYES_80 8703 4.56 7.21 3.77 57 RCVD_IN_MSPIKE_H4 8663 10.24 7.18 11.15 58 TR_XM_PhishingBody 8498 3.88 7.04 2.94 59 XMSubMetaSx_00 7962 5.60 6.60 5.30 60 T_REMOTE_IMAGE 7651 6.72 6.34 6.84 61 MIME_HTML_MOSTLY 7537 3.07 6.25 2.13 62 DKIM_INVALID 7457 4.22 6.18 3.64 63 XM_H_Long_From01 7376 5.27 6.11 5.03 64 XM_B_Phish_Phrases 7342 3.65 6.08 2.92 65 TooManyTo_001 7099 11.89 5.88 13.67 66 RCVD_IN_MSPIKE_BL 6511 1.97 5.40 0.95 67 TR_XM_MSPIKECOMBO 6504 1.96 5.39 0.94 68 TR_XM_SPAMCOP 6371 1.52 5.28 0.40 69 RELAYCOUNTRY_CA 6298 1.77 5.22 0.75 70 HTML_IMAGE_RATIO_04 6251 5.44 5.18 5.51 71 HTML_MIME_NO_HTML_TAG 5876 2.73 4.87 2.09 72 MIME_HTML_ONLY_MULTI 5845 4.13 4.84 3.92 73 TR_XM_DK_SendGrid 5836 4.02 4.84 3.78 74 URI_NOVOWEL 5724 3.17 4.74 2.70 75 XM_B_Investor 5670 2.05 4.70 1.26 76 SpammyFromTLD_02 5628 1.37 4.66 0.39 77 SpammyFromTLD_01 5583 1.59 4.63 0.69 78 TM2_M_URI_OPT_OUT 5439 5.41 4.51 5.67 79 XM_SPF_SoftFail 5171 2.53 4.29 2.01 80 KHOP_HELO_FCRDNS 5085 2.06 4.21 1.43 81 TM2_M_VERY_LONG_WORD 4904 1.99 4.06 1.38 82 HTML_IMAGE_RATIO_06 4643 3.42 3.85 3.30 83 MIME_QP_LONG_LINE 4614 7.19 3.82 8.18 84 TR_XM_SpammyWords5 4605 1.87 3.82 1.29 85 XM_B_SpammyTLD 4599 2.44 3.81 2.04 86 BAYES_95 4560 2.55 3.78 2.18 87 XM_B_Phish66 4550 2.12 3.77 1.63 88 RCVD_IN_VALIDITY_SAFE 4472 4.35 3.71 4.54 89 XMNumbers 4388 3.52 3.64 3.48 90 TR_XM_MaxUnsub 4162 1.34 3.45 0.71 91 T_XMDrugObfuBody_14 3959 2.36 3.28 2.09 92 TR_XM_SpammyWords3 3816 1.08 3.16 0.46 93 XMStrtUSub 3656 4.04 3.03 4.33 94 RCVD_IN_VALIDITY_CERTIFIED 3561 3.78 2.95 4.02 95 XM_DIRTYINTL 3535 0.91 2.93 0.31 96 T_XMDrugObfuBody_08 3476 1.62 2.88 1.25 97 T_TooManySym_01 3353 4.79 2.78 5.38 98 RELAYCOUNTRY_FR 3351 0.78 2.78 0.19 99 HTML_IMAGE_RATIO_08 3321 2.64 2.75 2.60 100 RCVD_IN_PSBL 3304 0.67 2.74 0.05 101 HTML_IMAGE_ONLY_20 3231 1.23 2.68 0.80 102 JH_SPAMMY_HEADERS 3223 0.61 2.67 0.00 103 T_FILL_THIS_FORM_SHORT 3206 1.21 2.66 0.79 104 RCVD_IN_IADB_LISTED 3169 4.77 2.63 5.41 105 ALL_TRUSTED 3086 19.34 2.56 24.33 106 XM_URI_RBL 2999 0.68 2.49 0.14 107 XM_CamelCaseFrm001 2972 1.92 2.46 1.76 108 RCVD_IN_VALIDITY_RPBL 2881 0.58 2.39 0.04 109 URIBL_DBL_SPAM 2866 0.55 2.38 0.01 110 XMSexyCombo_01 2781 2.13 2.30 2.07 111 XMDiploma_00 2747 1.44 2.28 1.20 112 RCVD_IN_IADB_SPF 2725 4.23 2.26 4.82 113 XM_OfRef6 2724 1.12 2.26 0.79 114 T_XMDrugObfuBody_00 2719 1.05 2.25 0.70 115 XM_DK_Undo_01 2709 1.73 2.25 1.58 116 SUBJ_ALL_CAPS 2671 1.74 2.21 1.60 117 RCVD_IN_MSPIKE_L5 2622 0.69 2.17 0.24 118 XM_GoogleGroups 2549 1.45 2.11 1.25 119 BAYES_40 2539 4.93 2.10 5.77 120 XM_B_COVIDMETA 2534 0.85 2.10 0.48 121 TR_XM_SB_Phish 2515 1.84 2.08 1.76 122 RELAYCOUNTRY_AZ 2502 0.48 2.07 0.00 123 FROM_EXCESS_BASE64 2490 2.17 2.06 2.20 124 HOSTED_IMG_DIRECT_MX 2486 0.47 2.06 0.00 125 ALIBABA_IMG_NOT_RCVD_ALI 2483 0.47 2.06 0.00 126 RCVD_IN_IADB_DK 2482 3.76 2.06 4.26 127 XM_B_Unsub2 2481 1.45 2.06 1.27 128 T_XMHurry_00 2473 3.38 2.05 3.77 129 RCVD_IN_IADB_SENDERID 2458 3.84 2.04 4.38 130 XMSubPhish11 2398 1.80 1.99 1.74 131 TR_XM_PHPDW 2321 0.64 1.92 0.26 132 XM_UB60 2283 0.49 1.89 0.07 133 HTML_TAG_BALANCE_CENTER 2281 0.51 1.89 0.09 134 RCVD_IN_MSPIKE_L3 2260 0.71 1.87 0.36 135 HTML_IMAGE_ONLY_08 2259 0.49 1.87 0.08 136 GOOG_STO_IMG_HTML 2232 0.42 1.85 0.00 137 TR_XM_COVIDMETA4 2213 0.68 1.83 0.33 138 URI_HEX 2150 1.42 1.78 1.31 139 MAILING_LIST_MULTI 2125 2.29 1.76 2.45 140 BAYES_20 2102 3.86 1.74 4.49 141 XMLngstWrd_00 2099 0.83 1.74 0.56 142 TR_XM_PHPForged 2097 0.57 1.74 0.22 143 TR_XM_FormFill2 2063 0.56 1.71 0.22 144 XMLngstWrd_01 2051 0.77 1.70 0.49 145 XM_H_PHPOS 2045 0.55 1.69 0.21 146 BAYES_00 2032 9.56 1.68 11.90 147 XM_B_SpammyWords4 2022 0.65 1.68 0.34 148 XMStockSpam_06 2011 0.89 1.67 0.66 149 TR_XM_INV_DKIM 1989 0.53 1.65 0.20 150 XMLngstWrd_02 1971 0.69 1.63 0.42 151 USER_IN_DEF_DKIM_WL 1945 7.76 1.61 9.59 152 MIXED_CENTER_CASE 1918 0.37 1.59 0.00 153 MIXED_HREF_CASE 1916 0.36 1.59 0.00 154 XMLngstWrd_03 1907 0.62 1.58 0.33 155 MIXED_IMG_CASE 1905 0.36 1.58 0.00 156 MIXED_AREA_CASE 1898 0.36 1.57 0.00 157 MIXED_FONT_CASE 1892 0.36 1.57 0.00 158 TR_XM_COVIDMETA1 1889 0.49 1.57 0.17 159 URIBL_BLACK 1876 0.39 1.55 0.04 160 XMGenDplmaNmb 1875 0.84 1.55 0.63 161 HTML_TITLE_SUBJ_DIFF 1851 0.48 1.53 0.16 162 XM_UB99 1844 0.35 1.53 0.00 163 BOTNET_NORDNS 1838 0.36 1.52 0.01 164 XMLngstWrd_04 1835 0.57 1.52 0.28 165 XM_Body_Dirty_Words_01 1817 0.43 1.51 0.11 166 XMBrknScrpt_02 1803 0.94 1.49 0.78 167 TR_Symld_Words 1781 1.58 1.48 1.61 168 UPPERCASE_75_100 1758 0.47 1.46 0.17 169 PDS_OTHER_BAD_TLD 1736 0.54 1.44 0.27 170 HTML_FONT_SIZE_LARGE 1729 0.41 1.43 0.11 171 BODY_URI_ONLY 1720 0.34 1.43 0.01 172 TR_XM_FormFill 1706 0.33 1.41 0.01 173 TR_XM_NoHeaderRelay 1693 0.46 1.40 0.18 174 RCVD_IN_IADB_VOUCHED 1682 2.69 1.39 3.07 175 XMBody_17 1666 0.58 1.38 0.35 176 RCVD_IN_MSPIKE_L4 1622 0.56 1.34 0.33 177 XMBdyGiftCard01 1531 0.82 1.27 0.69 178 TM2_M_A_HREF_HREF 1524 0.59 1.26 0.39 179 XMHTML_After_End 1518 0.84 1.26 0.72 180 TR_Mismatch_TLD_02 1513 0.40 1.25 0.15 181 FROM_SUSPICIOUS_NTLD 1490 0.32 1.23 0.05 182 TR_LOTS_OF_MONEY3 1488 0.51 1.23 0.29 183 XMPhish30 1484 0.74 1.23 0.60 184 FROM_SUSPICIOUS_NTLD_FP 1444 0.31 1.20 0.05 185 HTML_FONT_TINY_NORDNS 1441 0.42 1.19 0.19 186 TR_XM_BayesRelay 1410 0.27 1.17 0.00 187 URI_NO_WWW_BIZ_CGI 1384 0.27 1.15 0.01 188 XM_UB999 1382 0.26 1.15 0.00 189 XM_ProductURIs 1369 0.80 1.13 0.70 190 TR_BOTNET_NEGATE 1331 0.45 1.10 0.26 191 RELAYCOUNTRY_IN 1321 0.32 1.09 0.09 192 RELAYCOUNTRY_AU 1280 0.48 1.06 0.30 193 XM_H_PHPMailer 1252 0.62 1.04 0.50 194 XMSubMetaI_00 1250 0.58 1.04 0.44 195 HTML_TAG_BALANCE_BODY 1233 0.65 1.02 0.54 196 RELAYCOUNTRY_GB 1226 0.77 1.02 0.69 197 HTTPS_HTTP_MISMATCH 1222 0.80 1.01 0.73 198 URI_TRY_3LD 1218 0.62 1.01 0.50 199 LongTLD 1171 0.32 0.97 0.12 200 XMPhish08 1170 0.43 0.97 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 357409 89.87 96.03 88.04 2 RELAYCOUNTRY_US 298546 74.74 78.76 73.54 3 XM_B_Unicode 284675 72.15 78.97 70.12 4 DCC_CHECK_NEGATIVE 272026 57.71 26.42 67.01 5 DKIM_SIGNED 266876 70.00 84.34 65.74 6 XM_DK_Pass 260242 68.01 81.14 64.11 7 DKIM_VALID 252107 65.78 78.16 62.10 8 BAYES_50 228560 54.06 46.50 56.30 9 XM_B_SpammyWords 197829 53.13 67.95 48.73 10 DKIM_VALID_AU 186631 48.55 57.20 45.97 11 XMListUnsubscribeExists 174793 49.35 70.53 43.06 12 XM_B_Unicode3 166225 41.58 43.71 40.95 13 DCC_CHECK 133757 42.25 73.53 32.95 14 T_TM2_M_HEADER_IN_MSG 127496 29.40 22.63 31.41 15 RCVD_IN_MSPIKE_WL 110053 25.50 20.09 27.11 16 HTML_FONT_LOW_CONTRAST 100902 26.39 31.55 24.86 17 ALL_TRUSTED 98771 19.34 2.56 24.33 18 DKIM_VALID_EF 97988 25.61 30.57 24.14 19 MIME_HTML_ONLY 91178 24.95 33.35 22.46 20 XMSubLong 90870 22.85 24.41 22.38 21 FVGT_m_MULTI_ODD 85535 23.22 30.44 21.07 22 LOC_TINY_FONT_1 84342 24.42 36.68 20.78 23 XM_B_SpammyWords2 82626 24.06 36.53 20.35 24 RCVD_IN_MSPIKE_H2 77274 20.55 25.66 19.03 25 T_KAM_HTML_FONT_INVALID 69868 19.93 29.09 17.21 26 XM_Body_Dirty_Words 60172 16.73 23.14 14.82 27 RCVD_IN_MSPIKE_H3 56785 13.62 12.40 13.99 28 TooManyTo_001 55512 11.89 5.88 13.67 29 BAYES_00 48321 9.56 1.68 11.90 30 XM_B_Unsub 47418 11.72 11.86 11.68 31 RCVD_IN_MSPIKE_H4 45261 10.24 7.18 11.15 32 XM_Multi_Part_URI 41923 11.99 17.58 10.33 33 USER_IN_DEF_DKIM_WL 38940 7.76 1.61 9.59 34 LotsOfNums_01 36347 8.56 7.23 8.95 35 LOTS_OF_MONEY 35474 9.88 13.72 8.74 36 BAYES_60 33245 8.02 7.45 8.19 37 MIME_QP_LONG_LINE 33225 7.19 3.82 8.18 38 UNPARSEABLE_RELAY 30692 8.65 12.32 7.56 39 TR_XM_DK_Bayes 28160 5.56 0.91 6.94 40 T_REMOTE_IMAGE 27764 6.72 6.34 6.84 41 TR_XM_DK_Bayes1 27327 5.39 0.86 6.73 42 XM_Evil_Numbers_Gen 26087 7.15 9.60 6.43 43 XM_DKIMWhitelistDomains 25292 4.82 0.08 6.23 44 XM_SendGrid 25246 6.83 8.89 6.22 45 XMSexyCombo_05 24701 7.14 10.70 6.08 46 IN_ZIMBRA_NJ_WHITELIST 24437 4.66 0.08 6.02 47 TR_XM_UnparsRelay 23695 7.22 11.89 5.84 48 TR_XM_DK_Bayes2 23648 4.61 0.52 5.83 49 BAYES_40 23433 4.93 2.10 5.77 50 XM_DK_Undo_02 23384 14.04 41.88 5.76 51 TM2_M_URI_OPT_OUT 23036 5.41 4.51 5.67 52 TR_XM_SpammyWords4 22978 7.05 11.74 5.66 53 FSL_BULK_SIG 22804 7.25 12.76 5.62 54 HTML_IMAGE_RATIO_04 22387 5.44 5.18 5.51 55 MPART_ALT_DIFF 21971 6.52 10.25 5.41 56 RCVD_IN_IADB_LISTED 21947 4.77 2.63 5.41 57 T_TooManySym_01 21851 4.79 2.78 5.38 58 XMSubMetaSx_00 21528 5.60 6.60 5.30 59 HTML_IMAGE_RATIO_02 20646 6.06 9.36 5.09 60 XM_H_Long_From01 20401 5.27 6.11 5.03 61 RCVD_IN_IADB_SPF 19554 4.23 2.26 4.82 62 XM_PDF 18472 3.71 0.88 4.55 63 RCVD_IN_VALIDITY_SAFE 18415 4.35 3.71 4.54 64 BAYES_20 18236 3.86 1.74 4.49 65 BAYES_99 18007 10.00 28.72 4.44 66 RCVD_IN_IADB_SENDERID 17773 3.84 2.04 4.38 67 BOTNET_IPINHOSTNAME 17744 6.41 13.26 4.37 68 TR_XM_DKIM_Undo 17731 11.11 33.78 4.37 69 XMStrtUSub 17597 4.04 3.03 4.33 70 RCVD_IN_IADB_DK 17305 3.76 2.06 4.26 71 XM_H_Trusted_IP 16647 3.16 0.00 4.10 72 RCVD_IN_VALIDITY_CERTIFIED 16327 3.78 2.95 4.02 73 MIME_HTML_ONLY_MULTI 15909 4.13 4.84 3.92 74 XM_B_SpammyWords3 15525 5.91 12.91 3.82 75 TR_XM_DK_SendGrid 15326 4.02 4.84 3.78 76 T_XMHurry_00 15309 3.38 2.05 3.77 77 BAYES_80 15287 4.56 7.21 3.77 78 DKIM_INVALID 14769 4.22 6.18 3.64 79 BAYES_999 14531 7.88 22.34 3.58 80 XMNumbers 14127 3.52 3.64 3.48 81 HTML_IMAGE_RATIO_06 13391 3.42 3.85 3.30 82 ANY_BOUNCE_MESSAGE 13139 2.65 0.68 3.24 83 BOUNCE_MESSAGE 13135 2.65 0.68 3.24 84 RELAYCOUNTRY_META 12955 7.27 20.99 3.19 85 XM_UncommonTLD01 12464 5.16 12.19 3.07 86 RCVD_IN_IADB_VOUCHED 12459 2.69 1.39 3.07 87 BAYES_05 12007 2.46 0.80 2.96 88 TR_XM_PhishingBody 11926 3.88 7.04 2.94 89 XM_B_Phish_Phrases 11869 3.65 6.08 2.92 90 T_TooManySym_02 11391 2.30 0.62 2.81 91 URI_NOVOWEL 10969 3.17 4.74 2.70 92 HTML_IMAGE_RATIO_08 10568 2.64 2.75 2.60 93 MAILING_LIST_MULTI 9942 2.29 1.76 2.45 94 SHORT_URI_3 9916 2.01 0.56 2.44 95 FROM_EXCESS_BASE64 8926 2.17 2.06 2.20 96 BAYES_95 8861 2.55 3.78 2.18 97 MIME_HTML_MOSTLY 8646 3.07 6.25 2.13 98 HTML_MIME_NO_HTML_TAG 8495 2.73 4.87 2.09 99 T_XMDrugObfuBody_14 8493 2.36 3.28 2.09 100 XMSexyCombo_01 8415 2.13 2.30 2.07 101 TooManyTo_002 8328 1.74 0.67 2.05 102 XM_B_SpammyTLD 8262 2.44 3.81 2.04 103 XM_SPF_SoftFail 8148 2.53 4.29 2.01 104 RCVD_IN_MSPIKE_H5 8007 1.64 0.51 1.97 105 RCVD_IN_IADB_OPTIN 7645 1.63 0.79 1.88 106 TR_XM_SB_Phish 7160 1.84 2.08 1.76 107 XM_CamelCaseFrm001 7148 1.92 2.46 1.76 108 XMSubPhish11 7059 1.80 1.99 1.74 109 INVALID_MSGID 6882 1.35 0.19 1.70 110 TR_DCC_Bayes_99 6769 6.09 20.99 1.67 111 IN_HORDE_ADDRESS_BOOK 6667 1.29 0.10 1.64 112 XM_B_Phish66 6623 2.12 3.77 1.63 113 TR_Symld_Words 6555 1.58 1.48 1.61 114 HELO_NODOT 6538 1.39 0.67 1.61 115 HELO_NO_DOMAIN 6538 1.39 0.67 1.61 116 SUBJ_ALL_CAPS 6482 1.74 2.21 1.60 117 XM_DK_Undo_01 6400 1.73 2.25 1.58 118 MSGID_NOFQDN1 6324 1.21 0.05 1.56 119 TO_MALFORMED 6280 1.19 0.01 1.55 120 BOTNET 6024 4.47 14.50 1.48 121 HTML_FONT_FACE_BAD 5844 1.32 0.93 1.44 122 KHOP_HELO_FCRDNS 5788 2.06 4.21 1.43 123 TooManyTo_003 5687 1.20 0.54 1.40 124 TR_XM_SpammyRelay 5672 3.87 12.19 1.40 125 TM2_M_VERY_LONG_WORD 5600 1.99 4.06 1.38 126 TVD_RCVD_IP 5453 1.07 0.13 1.34 127 URI_HEX 5313 1.42 1.78 1.31 128 TR_XM_SpammyWords5 5256 1.87 3.82 1.29 129 XM_B_Unsub2 5162 1.45 2.06 1.27 130 XM_H_Long_From02 5125 1.19 0.93 1.26 131 XM_B_Investor 5102 2.05 4.70 1.26 132 XM_GoogleGroups 5091 1.45 2.11 1.25 133 T_XMDrugObfuBody_08 5075 1.62 2.88 1.25 134 XMGappySubj_01 4953 1.01 0.31 1.22 135 XMDiploma_00 4852 1.44 2.28 1.20 136 XMSubNoVowel 4841 1.12 0.86 1.19 137 UNTRUSTED_Relay 4469 3.88 13.24 1.10 138 XMCapTrack 4412 0.92 0.37 1.09 139 XMSubMetaSx_01 4138 0.89 0.48 1.02 140 TooManyTo_004 3973 0.86 0.47 0.98 141 XMBSHREFv2 3863 0.81 0.32 0.95 142 RCVD_IN_MSPIKE_BL 3840 1.97 5.40 0.95 143 TR_XM_MSPIKECOMBO 3809 1.96 5.39 0.94 144 TVD_SPACE_RATIO 3754 0.74 0.12 0.92 145 DKIM_ADSP_CUSTOM_MED 3704 0.92 0.95 0.91 146 RCVD_IN_RP_SAFE 3618 0.87 0.79 0.89 147 RCVD_IN_BL_SPAMCOP_NET 3478 2.94 9.96 0.86 148 RCVD_IN_RP_CERTIFIED 3298 0.75 0.55 0.81 149 HTML_IMAGE_ONLY_20 3251 1.23 2.68 0.80 150 TooManyTo_005 3245 0.72 0.44 0.80 151 T_FILL_THIS_FORM_SHORT 3191 1.21 2.66 0.79 152 XM_OfRef6 3191 1.12 2.26 0.79 153 XMBrknScrpt_02 3169 0.94 1.49 0.78 154 XMSexyCombo_02 3151 0.73 0.59 0.78 155 XMBody_95 3100 0.63 0.17 0.76 156 RELAYCOUNTRY_CA 3042 1.77 5.22 0.75 157 HTTPS_HTTP_MISMATCH 2974 0.80 1.01 0.73 158 XMHTML_After_End 2915 0.84 1.26 0.72 159 TR_XM_MaxUnsub 2892 1.34 3.45 0.71 160 XM_ProductURIs 2830 0.80 1.13 0.70 161 T_XMDrugObfuBody_00 2825 1.05 2.25 0.70 162 TR_XM_SpammyWords2 2823 2.66 9.25 0.70 163 SpammyFromTLD_01 2808 1.59 4.63 0.69 164 RELAYCOUNTRY_GB 2807 0.77 1.02 0.69 165 XMBdyGiftCard01 2801 0.82 1.27 0.69 166 T_TooManySym_03 2785 0.59 0.26 0.69 167 XM_UB50 2735 2.20 7.34 0.67 168 XMStockSpam_06 2679 0.89 1.67 0.66 169 XMGenDplmaNmb 2571 0.84 1.55 0.63 170 NML_ADSP_CUSTOM_MED 2443 0.65 0.82 0.60 171 XMPhish30 2417 0.74 1.23 0.60 172 XM_ShortIntro_01 2358 0.59 0.62 0.58 173 XMHTMLBadTable_001 2355 0.65 0.90 0.58 174 T_OBFU_PDF_ATTACH 2347 0.48 0.13 0.58 175 XM_B_COPY_HTML 2316 0.59 0.65 0.57 176 TR_MetaPhish_Combo_01 2310 0.63 0.84 0.57 177 XMNoVowels 2308 0.54 0.44 0.57 178 FROM_GOV_DKIM_AU 2303 0.48 0.18 0.57 179 XMLngstWrd_00 2265 0.83 1.74 0.56 180 HTML_TAG_BALANCE_BODY 2208 0.65 1.02 0.54 181 TR_MSPIKEBAYES00 2183 0.42 0.02 0.54 182 URI_TRY_3LD 2038 0.62 1.01 0.50 183 T_Symld_Words_02 2012 0.60 0.96 0.50 184 XM_H_PHPMailer 2012 0.62 1.04 0.50 185 FORGED_GMAIL_RCVD 2009 0.57 0.82 0.49 186 XMLngstWrd_01 2000 0.77 1.70 0.49 187 SHORT_HELO_AND_INLINE_IMAGE 1948 0.39 0.10 0.48 188 XM_B_COVIDMETA 1942 0.85 2.10 0.48 189 TR_XM_SpammyWords3 1884 1.08 3.16 0.46 190 RCVD_IN_SORBS_DUL 1859 0.40 0.21 0.46 191 SHORTENED_URL_HREF 1834 0.39 0.18 0.45 192 XMMoneyMeta_00 1826 0.55 0.89 0.45 193 HTML_IMAGE_ONLY_28 1802 0.45 0.48 0.44 194 XMSubMetaI_00 1789 0.58 1.04 0.44 195 XMLngstWrd_02 1687 0.69 1.63 0.42 196 DIET_1 1679 0.52 0.89 0.41 197 MPART_ALT_DIFF_COUNT 1666 0.44 0.54 0.41 198 RDNS_DYNAMIC 1636 0.44 0.56 0.40 199 TR_XM_SPAMCOP 1636 1.52 5.28 0.40 200 TM2_M_A_HREF_HREF 1576 0.59 1.26 0.39 ----------------------------------------------------------------------