Email: 494449 Autolearn: 0 AvgScore: 1.41 AvgScanTime: 1.52 sec Spam: 117388 Autolearn: 0 AvgScore: 13.46 AvgScanTime: 1.79 sec Ham: 377061 Autolearn: 0 AvgScore: -2.35 AvgScanTime: 1.43 sec Time Spent Running SA: 208.09 hours Time Spent Processing Spam: 58.37 hours Time Spent Processing Ham: 149.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 111292 89.23 94.81 87.49 2 DKIM_SIGNED 99215 71.85 84.52 67.91 3 XM_DK_Pass 95258 69.80 81.15 66.27 4 RELAYCOUNTRY_US 94103 80.65 80.16 80.80 5 DKIM_VALID 91345 67.36 77.81 64.10 6 XM_B_Unicode 90717 70.62 77.28 68.55 7 XMListUnsubscribeExists 82341 50.58 70.14 44.49 8 XM_B_SpammyWords 81362 50.19 69.31 44.24 9 DCC_CHECK 75883 39.52 64.64 31.70 10 DKIM_VALID_AU 66496 49.96 56.65 47.88 11 BAYES_50 53031 51.29 45.18 53.19 12 XM_B_Unicode3 51002 42.96 43.45 42.81 13 XM_DK_Undo_02 48259 14.98 41.11 6.84 14 XM_B_SpammyWords2 43804 22.41 37.32 17.77 15 DCC_CHECK_NEGATIVE 41465 60.43 35.32 68.25 16 LOC_TINY_FONT_1 40385 25.38 34.40 22.57 17 MIME_HTML_ONLY 40371 26.54 34.39 24.10 18 TR_XM_DKIM_Undo 40228 11.94 34.27 4.98 19 HTML_FONT_LOW_CONTRAST 37524 28.02 31.97 26.79 20 FVGT_m_MULTI_ODD 35056 23.14 29.86 21.05 21 BAYES_99 34680 11.37 29.54 5.71 22 DKIM_VALID_EF 33649 25.13 28.66 24.03 23 T_KAM_HTML_FONT_INVALID 31852 19.50 27.13 17.12 24 RCVD_IN_MSPIKE_H2 30865 20.21 26.29 18.31 25 XM_Body_Dirty_Words 28276 15.30 24.09 12.57 26 T_TM2_M_HEADER_IN_MSG 27699 29.34 23.60 31.13 27 XMSubLong 26953 21.07 22.96 20.48 28 BAYES_999 26813 9.05 22.84 4.76 29 RCVD_IN_MSPIKE_WL 24218 26.23 20.63 27.97 30 RELAYCOUNTRY_META 24113 7.26 20.54 3.13 31 XM_Multi_Part_URI 23300 13.06 19.85 10.95 32 TR_DCC_Bayes_99 22866 6.06 19.48 1.88 33 LOTS_OF_MONEY 17341 10.11 14.77 8.66 34 BOTNET_IPINHOSTNAME 15662 6.47 13.34 4.33 35 TR_XM_SpammyWords4 15421 7.25 13.14 5.42 36 BOTNET 15327 4.32 13.06 1.60 37 RCVD_IN_MSPIKE_H3 14610 14.12 12.45 14.64 38 XM_B_Unsub 14550 12.58 12.39 12.64 39 UNPARSEABLE_RELAY 14324 8.33 12.20 7.13 40 UNTRUSTED_Relay 14016 3.76 11.94 1.22 41 XM_B_SpammyWords3 13877 5.40 11.82 3.40 42 TR_XM_UnparsRelay 13843 6.90 11.79 5.38 43 XMSexyCombo_05 13826 5.86 11.78 4.02 44 TR_XM_SpammyRelay 13328 3.70 11.35 1.32 45 XM_UncommonTLD01 12664 5.02 10.79 3.22 46 MPART_ALT_DIFF 11957 9.83 10.19 9.72 47 TR_XM_SpammyWords2 11827 3.02 10.08 0.82 48 FSL_BULK_SIG 11250 6.42 9.58 5.43 49 XM_Evil_Numbers_Gen 10727 8.46 9.14 8.26 50 RCVD_IN_BL_SPAMCOP_NET 10669 2.95 9.09 1.04 51 XM_SendGrid 10289 6.55 8.76 5.86 52 LotsOfNums_01 9549 8.82 8.13 9.04 53 HTML_IMAGE_RATIO_02 9104 6.42 7.76 6.00 54 RCVD_IN_MSPIKE_H4 8680 10.22 7.39 11.09 55 HTML_MIME_NO_HTML_TAG 8661 3.48 7.38 2.27 56 BAYES_80 8608 4.71 7.33 3.89 57 XM_B_Phish_Phrases 8067 4.54 6.87 3.81 58 XMSubMetaSx_00 7941 5.24 6.76 4.76 59 DKIM_INVALID 7870 4.49 6.70 3.80 60 BAYES_60 7657 7.84 6.52 8.25 61 TR_XM_PhishingBody 7614 3.72 6.49 2.86 62 RCVD_IN_MSPIKE_BL 7436 2.45 6.33 1.24 63 TR_XM_MSPIKECOMBO 7434 2.44 6.33 1.23 64 TooManyTo_001 7204 8.35 6.14 9.04 65 XM_H_Long_From01 7036 5.30 5.99 5.09 66 XM_UB50 6961 2.02 5.93 0.80 67 MIME_HTML_ONLY_MULTI 6691 7.05 5.70 7.47 68 MIME_HTML_MOSTLY 6427 3.46 5.48 2.83 69 TR_XM_SPAMCOP 6306 1.62 5.37 0.45 70 HTML_IMAGE_RATIO_04 6214 7.43 5.29 8.09 71 XM_B_Investor 5907 2.24 5.03 1.37 72 RELAYCOUNTRY_CA 5827 1.64 4.96 0.60 73 TR_XM_SpammyWords5 5669 2.11 4.83 1.26 74 TR_XM_DK_SendGrid 5665 3.97 4.83 3.70 75 TM2_M_URI_OPT_OUT 5613 5.83 4.78 6.15 76 SpammyFromTLD_02 5456 1.39 4.65 0.38 77 KHOP_HELO_FCRDNS 5136 2.37 4.38 1.74 78 MIME_QP_LONG_LINE 5090 6.29 4.34 6.90 79 XM_SPF_SoftFail 4966 2.63 4.23 2.13 80 T_XMDrugObfuBody_14 4950 2.59 4.22 2.09 81 RCVD_IN_VALIDITY_SAFE 4916 4.40 4.19 4.46 82 XMNumbers 4867 3.59 4.15 3.41 83 TR_XM_PHPDW 4843 1.19 4.13 0.27 84 TR_XM_MaxUnsub 4784 1.60 4.08 0.83 85 XMStrtUSub 4673 3.91 3.98 3.89 86 BAYES_95 4646 2.74 3.96 2.36 87 XM_OfRef6 4578 1.51 3.90 0.76 88 TR_XM_PHPForged 4576 1.11 3.90 0.25 89 TR_XM_FormFill2 4561 1.11 3.89 0.24 90 TM2_M_VERY_LONG_WORD 4552 1.88 3.88 1.26 91 XM_H_PHPOS 4548 1.10 3.87 0.24 92 TR_XM_SpammyWords3 4521 1.41 3.85 0.65 93 HTML_IMAGE_ONLY_08 4502 0.99 3.84 0.11 94 T_REMOTE_IMAGE 4450 3.38 3.79 3.26 95 URI_NOVOWEL 4431 3.12 3.77 2.92 96 HTML_IMAGE_RATIO_06 4063 4.81 3.46 5.23 97 SpammyFromTLD_01 4058 1.30 3.46 0.63 98 XM_B_Phish66 4037 2.11 3.44 1.69 99 SUBJ_ALL_CAPS 4009 2.25 3.42 1.89 100 XM_DIRTYINTL 3937 1.01 3.35 0.28 101 BODY_URI_ONLY 3937 0.80 3.35 0.01 102 XM_B_SpammyTLD 3814 2.15 3.25 1.80 103 RCVD_IN_VALIDITY_CERTIFIED 3787 3.72 3.23 3.88 104 RELAYCOUNTRY_RU 3662 0.76 3.12 0.03 105 XM_H_PHPMailer 3607 1.09 3.07 0.47 106 FROM_EXCESS_BASE64 3580 2.75 3.05 2.65 107 T_FILL_THIS_FORM_SHORT 3361 1.25 2.86 0.75 108 T_XMDrugObfuBody_08 3351 1.72 2.85 1.37 109 XM_DK_Undo_01 3243 1.82 2.76 1.53 110 RCVD_IN_IADB_LISTED 3142 4.93 2.68 5.63 111 RCVD_IN_MSPIKE_L3 3134 1.07 2.67 0.58 112 XM_H_PHPOS_M 3126 0.69 2.66 0.08 113 T_TooManySym_01 3121 5.27 2.66 6.08 114 T_XMDrugObfuBody_00 3014 1.86 2.57 1.64 115 TR_XM_SB_Phish 3009 2.22 2.56 2.11 116 XMStockSpam_06 2952 1.85 2.51 1.64 117 XMDiploma_00 2930 1.55 2.50 1.26 118 XM_CamelCaseFrm001 2918 1.87 2.49 1.68 119 XMSubPhish11 2907 2.18 2.48 2.09 120 XM_B_SpammyWords4 2893 0.87 2.46 0.37 121 HTML_SHORT_LINK_IMG_1 2850 0.59 2.43 0.02 122 ALL_TRUSTED 2839 13.57 2.42 17.05 123 XM_GoogleGroups 2772 1.56 2.36 1.31 124 RCVD_IN_MSPIKE_L5 2737 0.77 2.33 0.29 125 URIBL_DBL_SPAM 2737 0.56 2.33 0.01 126 XM_B_COVIDMETA 2735 1.05 2.33 0.65 127 BAYES_40 2674 4.77 2.28 5.55 128 BAYES_20 2645 3.91 2.25 4.42 129 XMSexyCombo_01 2643 1.92 2.25 1.82 130 RCVD_IN_IADB_SPF 2624 4.30 2.24 4.94 131 XMSubject_48 2620 0.55 2.23 0.02 132 HTML_IMAGE_RATIO_08 2620 2.47 2.23 2.54 133 UPPERCASE_75_100 2459 0.65 2.09 0.20 134 XMLngstWrd_00 2427 1.01 2.07 0.68 135 XMBody_17 2385 0.76 2.03 0.36 136 XMLngstWrd_01 2384 0.95 2.03 0.61 137 T_XMHurry_00 2376 0.80 2.02 0.42 138 RCVD_IN_IADB_DK 2361 3.74 2.01 4.28 139 BAYES_00 2349 11.02 2.00 13.83 140 RCVD_IN_IADB_SENDERID 2337 3.86 1.99 4.44 141 USER_IN_DEF_DKIM_WL 2329 9.17 1.98 11.41 142 HTML_TITLE_SUBJ_DIFF 2297 0.64 1.96 0.23 143 MAILING_LIST_MULTI 2295 2.27 1.96 2.36 144 XM_B_Unsub2 2271 1.42 1.93 1.26 145 XM_URI_RBL 2265 0.53 1.93 0.10 146 XMLngstWrd_02 2258 0.85 1.92 0.52 147 HTML_TAG_BALANCE_CENTER 2257 0.60 1.92 0.19 148 BOTNET_NORDNS 2231 0.46 1.90 0.01 149 TR_XM_COVIDMETA4 2222 0.68 1.89 0.30 150 URI_HEX 2221 1.55 1.89 1.45 151 XMLngstWrd_03 2194 0.77 1.87 0.43 152 TR_XM_INV_DKIM 2121 0.65 1.81 0.29 153 XMLngstWrd_04 2086 0.70 1.78 0.36 154 RELAYCOUNTRY_FR 2017 0.57 1.72 0.22 155 RCVD_IN_VALIDITY_RPBL 1972 0.43 1.68 0.04 156 TR_Symld_Words 1971 1.67 1.68 1.67 157 JH_SPAMMY_HEADERS 1952 0.40 1.66 0.00 158 XM_B_DNDMA 1945 0.76 1.66 0.49 159 MONEY_NOHTML 1908 0.45 1.63 0.08 160 RELAYCOUNTRY_AU 1897 0.62 1.62 0.31 161 TR_XM_FormFill 1892 0.39 1.61 0.01 162 XM_ProductURIs 1889 1.53 1.61 1.50 163 XMGenDplmaNmb 1862 0.91 1.59 0.70 164 TR_XM_NoHeaderRelay 1860 0.51 1.58 0.18 165 HTML_FONT_SIZE_LARGE 1821 0.44 1.55 0.09 166 MIXED_CENTER_CASE 1817 0.37 1.55 0.00 167 MIXED_HREF_CASE 1815 0.37 1.55 0.00 168 XMBrknScrpt_02 1808 0.97 1.54 0.80 169 MIXED_IMG_CASE 1807 0.37 1.54 0.00 170 MIXED_AREA_CASE 1807 0.37 1.54 0.00 171 RCVD_IN_IADB_VOUCHED 1802 3.02 1.54 3.48 172 MIXED_FONT_CASE 1798 0.36 1.53 0.00 173 XMBdyGiftCard01 1790 0.98 1.52 0.81 174 TR_Mismatch_TLD_02 1787 0.42 1.52 0.08 175 TM2_M_A_HREF_HREF 1769 0.80 1.51 0.58 176 XM_OfRef7 1718 0.43 1.46 0.11 177 XM_Body_Dirty_Words_01 1699 0.45 1.45 0.15 178 URIBL_BLACK 1697 0.37 1.45 0.04 179 XM_UB99 1670 0.34 1.42 0.00 180 XM_S_SpammyWords 1664 0.46 1.42 0.16 181 TR_XM_Spammywords 1664 0.46 1.42 0.16 182 TR_XM_COVIDMETA1 1604 0.49 1.37 0.22 183 TR_Caps_n_Bayes_99 1600 0.39 1.36 0.09 184 RCVD_IN_MSPIKE_L4 1563 0.60 1.33 0.37 185 RELAYCOUNTRY_IN 1557 0.38 1.33 0.08 186 DIET_1 1526 0.93 1.30 0.81 187 XM_H_Undi_Recip 1472 0.45 1.25 0.21 188 XMSubMetaI_00 1453 0.93 1.24 0.83 189 XMPhish30 1438 0.77 1.22 0.63 190 RELAYCOUNTRY_GB 1426 0.79 1.21 0.66 191 URI_TRY_3LD 1416 0.73 1.21 0.59 192 XM_B_SEO 1406 0.39 1.20 0.13 193 RCVD_IN_PSBL 1394 0.43 1.19 0.19 194 TR_LOTS_OF_MONEY3 1365 0.55 1.16 0.36 195 TR_MetaPhish_Combo_01 1351 0.85 1.15 0.76 196 T_Symld_Words_02 1333 0.69 1.14 0.56 197 XM_UB999 1317 0.27 1.12 0.00 198 TR_Mismatch_TLD_01 1307 0.45 1.11 0.25 199 HTTPS_HTTP_MISMATCH 1300 0.78 1.11 0.67 200 ANY_BOUNCE_MESSAGE 1289 3.37 1.10 4.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 329902 89.23 94.81 87.49 2 RELAYCOUNTRY_US 304649 80.65 80.16 80.80 3 XM_B_Unicode 258482 70.62 77.28 68.55 4 DCC_CHECK_NEGATIVE 257352 60.43 35.32 68.25 5 DKIM_SIGNED 256053 71.85 84.52 67.91 6 XM_DK_Pass 249875 69.80 81.15 66.27 7 DKIM_VALID 241709 67.36 77.81 64.10 8 BAYES_50 200557 51.29 45.18 53.19 9 DKIM_VALID_AU 180521 49.96 56.65 47.88 10 XMListUnsubscribeExists 167748 50.58 70.14 44.49 11 XM_B_SpammyWords 166799 50.19 69.31 44.24 12 XM_B_Unicode3 161401 42.96 43.45 42.81 13 DCC_CHECK 119547 39.52 64.64 31.70 14 T_TM2_M_HEADER_IN_MSG 117395 29.34 23.60 31.13 15 RCVD_IN_MSPIKE_WL 105464 26.23 20.63 27.97 16 HTML_FONT_LOW_CONTRAST 101025 28.02 31.97 26.79 17 MIME_HTML_ONLY 90858 26.54 34.39 24.10 18 DKIM_VALID_EF 90620 25.13 28.66 24.03 19 LOC_TINY_FONT_1 85098 25.38 34.40 22.57 20 FVGT_m_MULTI_ODD 79356 23.14 29.86 21.05 21 XMSubLong 77230 21.07 22.96 20.48 22 RCVD_IN_MSPIKE_H2 69053 20.21 26.29 18.31 23 XM_B_SpammyWords2 67008 22.41 37.32 17.77 24 T_KAM_HTML_FONT_INVALID 64555 19.50 27.13 17.12 25 ALL_TRUSTED 64280 13.57 2.42 17.05 26 RCVD_IN_MSPIKE_H3 55185 14.12 12.45 14.64 27 BAYES_00 52144 11.02 2.00 13.83 28 XM_B_Unsub 47650 12.58 12.39 12.64 29 XM_Body_Dirty_Words 47390 15.30 24.09 12.57 30 USER_IN_DEF_DKIM_WL 43028 9.17 1.98 11.41 31 RCVD_IN_MSPIKE_H4 41828 10.22 7.39 11.09 32 XM_Multi_Part_URI 41293 13.06 19.85 10.95 33 MPART_ALT_DIFF 36640 9.83 10.19 9.72 34 XM_H_Trusted_IP 35423 7.16 0.00 9.39 35 TooManyTo_001 34095 8.35 6.14 9.04 36 LotsOfNums_01 34083 8.82 8.13 9.04 37 LOTS_OF_MONEY 32648 10.11 14.77 8.66 38 XM_Evil_Numbers_Gen 31128 8.46 9.14 8.26 39 BAYES_60 31121 7.84 6.52 8.25 40 HTML_IMAGE_RATIO_04 30501 7.43 5.29 8.09 41 MIME_HTML_ONLY_MULTI 28179 7.05 5.70 7.47 42 XM_DKIMWhitelistDomains 27115 5.50 0.06 7.19 43 UNPARSEABLE_RELAY 26877 8.33 12.20 7.13 44 TR_XM_DK_Bayes 26412 5.51 0.70 7.00 45 MIME_QP_LONG_LINE 26000 6.29 4.34 6.90 46 XM_DK_Undo_02 25790 14.98 41.11 6.84 47 TR_XM_DK_Bayes1 25549 5.32 0.66 6.78 48 IN_ZIMBRA_NJ_WHITELIST 23611 4.80 0.09 6.26 49 TM2_M_URI_OPT_OUT 23193 5.83 4.78 6.15 50 T_TooManySym_01 22937 5.27 2.66 6.08 51 HTML_IMAGE_RATIO_02 22617 6.42 7.76 6.00 52 XM_SendGrid 22084 6.55 8.76 5.86 53 TR_XM_DK_Bayes2 21890 4.55 0.54 5.81 54 BAYES_99 21524 11.37 29.54 5.71 55 RCVD_IN_IADB_LISTED 21241 4.93 2.68 5.63 56 BAYES_40 20925 4.77 2.28 5.55 57 FSL_BULK_SIG 20469 6.42 9.58 5.43 58 TR_XM_SpammyWords4 20433 7.25 13.14 5.42 59 TR_XM_UnparsRelay 20273 6.90 11.79 5.38 60 HTML_IMAGE_RATIO_06 19704 4.81 3.46 5.23 61 XM_H_Long_From01 19190 5.30 5.99 5.09 62 TR_XM_DKIM_Undo 18793 11.94 34.27 4.98 63 RCVD_IN_IADB_SPF 18613 4.30 2.24 4.94 64 BAYES_999 17957 9.05 22.84 4.76 65 XMSubMetaSx_00 17953 5.24 6.76 4.76 66 RCVD_IN_VALIDITY_SAFE 16818 4.40 4.19 4.46 67 RCVD_IN_IADB_SENDERID 16750 3.86 1.99 4.44 68 BAYES_20 16664 3.91 2.25 4.42 69 XM_PDF 16612 3.54 0.74 4.41 70 BOTNET_IPINHOSTNAME 16318 6.47 13.34 4.33 71 RCVD_IN_IADB_DK 16155 3.74 2.01 4.28 72 ANY_BOUNCE_MESSAGE 15364 3.37 1.10 4.07 73 BOUNCE_MESSAGE 15363 3.37 1.10 4.07 74 XMSexyCombo_05 15139 5.86 11.78 4.02 75 BAYES_80 14667 4.71 7.33 3.89 76 XMStrtUSub 14666 3.91 3.98 3.89 77 RCVD_IN_VALIDITY_CERTIFIED 14630 3.72 3.23 3.88 78 XM_B_Phish_Phrases 14378 4.54 6.87 3.81 79 DKIM_INVALID 14344 4.49 6.70 3.80 80 TR_XM_DK_SendGrid 13941 3.97 4.83 3.70 81 RCVD_IN_IADB_VOUCHED 13110 3.02 1.54 3.48 82 HTML_FONT_FACE_BAD 12933 2.83 0.89 3.43 83 XMNumbers 12870 3.59 4.15 3.41 84 XM_B_SpammyWords3 12814 5.40 11.82 3.40 85 T_REMOTE_IMAGE 12287 3.38 3.79 3.26 86 XM_UncommonTLD01 12144 5.02 10.79 3.22 87 RELAYCOUNTRY_META 11793 7.26 20.54 3.13 88 T_TooManySym_02 11622 2.55 0.83 3.08 89 URI_NOVOWEL 11020 3.12 3.77 2.92 90 TR_XM_PhishingBody 10777 3.72 6.49 2.86 91 MIME_HTML_MOSTLY 10682 3.46 5.48 2.83 92 BAYES_05 10545 2.35 0.93 2.80 93 FROM_EXCESS_BASE64 10004 2.75 3.05 2.65 94 HTML_IMAGE_RATIO_08 9587 2.47 2.23 2.54 95 MAILING_LIST_MULTI 8916 2.27 1.96 2.36 96 BAYES_95 8907 2.74 3.96 2.36 97 HTML_MIME_NO_HTML_TAG 8568 3.48 7.38 2.27 98 RCVD_IN_MSPIKE_H5 8451 1.90 0.79 2.24 99 RCVD_IN_IADB_OPTIN 8348 1.90 0.87 2.21 100 XM_SPF_SoftFail 8030 2.63 4.23 2.13 101 TR_XM_SB_Phish 7949 2.22 2.56 2.11 102 XMSubPhish11 7877 2.18 2.48 2.09 103 T_XMDrugObfuBody_14 7876 2.59 4.22 2.09 104 TooManyTo_002 7530 1.77 1.03 2.00 105 SUBJ_ALL_CAPS 7127 2.25 3.42 1.89 106 TR_DCC_Bayes_99 7093 6.06 19.48 1.88 107 INVALID_MSGID 6878 1.43 0.15 1.82 108 XMSexyCombo_01 6848 1.92 2.25 1.82 109 XM_B_SpammyTLD 6800 2.15 3.25 1.80 110 XMSubNoVowel 6789 1.56 0.77 1.80 111 TVD_RCVD_IP 6607 1.37 0.14 1.75 112 KHOP_HELO_FCRDNS 6560 2.37 4.38 1.74 113 IN_HORDE_ADDRESS_BOOK 6468 1.33 0.11 1.72 114 MSGID_NOFQDN1 6389 1.30 0.05 1.69 115 XM_B_Phish66 6382 2.11 3.44 1.69 116 XM_CamelCaseFrm001 6349 1.87 2.49 1.68 117 TO_MALFORMED 6327 1.28 0.00 1.68 118 TR_Symld_Words 6298 1.67 1.68 1.67 119 T_XMDrugObfuBody_00 6199 1.86 2.57 1.64 120 XMStockSpam_06 6174 1.85 2.51 1.64 121 BOTNET 6041 4.32 13.06 1.60 122 XM_DK_Undo_01 5759 1.82 2.76 1.53 123 XM_ProductURIs 5670 1.53 1.61 1.50 124 HELO_NODOT 5481 1.25 0.60 1.45 125 HELO_NO_DOMAIN 5480 1.25 0.60 1.45 126 URI_HEX 5464 1.55 1.89 1.45 127 SHORT_URI_3 5298 1.15 0.35 1.41 128 XM_B_Investor 5176 2.24 5.03 1.37 129 T_XMDrugObfuBody_08 5168 1.72 2.85 1.37 130 TooManyTo_003 5043 1.23 0.89 1.34 131 TR_XM_SpammyRelay 4981 3.70 11.35 1.32 132 XM_GoogleGroups 4921 1.56 2.36 1.31 133 XM_B_Unsub2 4757 1.42 1.93 1.26 134 TM2_M_VERY_LONG_WORD 4757 1.88 3.88 1.26 135 TR_XM_SpammyWords5 4745 2.11 4.83 1.26 136 XMDiploma_00 4742 1.55 2.50 1.26 137 RCVD_IN_MSPIKE_BL 4669 2.45 6.33 1.24 138 TR_XM_MSPIKECOMBO 4635 2.44 6.33 1.23 139 UNTRUSTED_Relay 4584 3.76 11.94 1.22 140 XMGappySubj_01 4381 0.94 0.21 1.16 141 HTML_IMAGE_ONLY_20 4135 0.93 0.41 1.10 142 DKIM_ADSP_CUSTOM_MED 4125 1.06 0.96 1.09 143 XMCapTrack 3957 0.90 0.43 1.05 144 RCVD_IN_BL_SPAMCOP_NET 3939 2.95 9.09 1.04 145 XMSubMetaSx_01 3914 0.88 0.36 1.04 146 XMBSHREFv2 3746 0.85 0.39 0.99 147 TooManyTo_004 3646 0.93 0.82 0.97 148 XM_H_Long_From02 3618 0.92 0.80 0.96 149 TVD_SPACE_RATIO 3612 0.79 0.25 0.96 150 XMSexyCombo_02 3448 0.79 0.37 0.91 151 XMBody_95 3272 0.70 0.18 0.87 152 RCVD_IN_RP_SAFE 3209 0.87 0.91 0.85 153 TR_XM_MaxUnsub 3142 1.60 4.08 0.83 154 XMSubMetaI_00 3137 0.93 1.24 0.83 155 TR_XM_SpammyWords2 3109 3.02 10.08 0.82 156 DIET_1 3064 0.93 1.30 0.81 157 XMBdyGiftCard01 3054 0.98 1.52 0.81 158 XMSubMetaSxObfu_03 3019 0.85 1.01 0.80 159 XM_UB50 3016 2.02 5.93 0.80 160 XMBrknScrpt_02 3009 0.97 1.54 0.80 161 TooManyTo_005 2952 0.78 0.77 0.78 162 XM_OfRef6 2880 1.51 3.90 0.76 163 TR_MetaPhish_Combo_01 2862 0.85 1.15 0.76 164 T_TooManySym_03 2843 0.64 0.29 0.75 165 T_FILL_THIS_FORM_SHORT 2825 1.25 2.86 0.75 166 RCVD_IN_RP_CERTIFIED 2812 0.73 0.67 0.75 167 NML_ADSP_CUSTOM_MED 2786 0.75 0.78 0.74 168 XMGenDplmaNmb 2624 0.91 1.59 0.70 169 XMHTML_After_End 2573 0.76 1.03 0.68 170 XMLngstWrd_00 2548 1.01 2.07 0.68 171 HTTPS_HTTP_MISMATCH 2533 0.78 1.11 0.67 172 RELAYCOUNTRY_GB 2487 0.79 1.21 0.66 173 XM_B_COVIDMETA 2464 1.05 2.33 0.65 174 TR_XM_SpammyWords3 2456 1.41 3.85 0.65 175 SpammyFromTLD_01 2370 1.30 3.46 0.63 176 XMPhish30 2363 0.77 1.22 0.63 177 FORGED_GMAIL_RCVD 2318 0.66 0.83 0.61 178 XMLngstWrd_01 2313 0.95 2.03 0.61 179 RELAYCOUNTRY_CA 2277 1.64 4.96 0.60 180 HTML_TAG_BALANCE_BODY 2221 0.66 0.87 0.59 181 URI_TRY_3LD 2217 0.73 1.21 0.59 182 TM2_M_A_HREF_HREF 2185 0.80 1.51 0.58 183 RCVD_IN_MSPIKE_L3 2173 1.07 2.67 0.58 184 TR_MSPIKEBAYES00 2130 0.44 0.06 0.56 185 XM_B_COPY_HTML 2098 0.66 0.98 0.56 186 T_Symld_Words_02 2095 0.69 1.14 0.56 187 XMSexyCombo_04 2053 0.63 0.90 0.54 188 XM_D_tchamptons_WL 2041 0.41 0.00 0.54 189 T_OBFU_PDF_ATTACH 2028 0.43 0.10 0.54 190 TVD_SPACE_RATIO_MINFP 1987 0.43 0.12 0.53 191 XM_ShortIntro_01 1972 0.57 0.74 0.52 192 XMLngstWrd_02 1963 0.85 1.92 0.52 193 FROM_GOV_DKIM_AU 1931 0.42 0.11 0.51 194 XMNoVowels 1923 0.57 0.76 0.51 195 XM_B_DNDMA 1836 0.76 1.66 0.49 196 XM_E_Blogspot 1800 0.40 0.14 0.48 197 XM_H_PHPMailer 1761 1.09 3.07 0.47 198 HTML_IMAGE_ONLY_32 1716 0.39 0.20 0.46 199 TR_XM_SPAMCOP 1708 1.62 5.37 0.45 200 RCVD_IN_SORBS_DUL 1677 0.40 0.25 0.44 ----------------------------------------------------------------------