Email: 541644 Autolearn: 0 AvgScore: 1.57 AvgScanTime: 1.42 sec Spam: 132232 Autolearn: 0 AvgScore: 13.49 AvgScanTime: 1.65 sec Ham: 409412 Autolearn: 0 AvgScore: -2.29 AvgScanTime: 1.34 sec Time Spent Running SA: 213.15 hours Time Spent Processing Spam: 60.54 hours Time Spent Processing Ham: 152.60 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127722 90.32 96.59 88.29 2 DKIM_SIGNED 116688 69.88 88.24 63.95 3 XM_DK_Pass 113452 68.08 85.80 62.36 4 DKIM_VALID 109635 65.91 82.91 60.42 5 RELAYCOUNTRY_US 107754 81.65 81.49 81.70 6 XM_B_Unicode 106747 74.73 80.73 72.80 7 DCC_CHECK 96744 40.07 73.16 29.38 8 XMListUnsubscribeExists 95348 48.84 72.11 41.32 9 XM_B_SpammyWords 92723 53.18 70.12 47.70 10 DKIM_VALID_AU 82633 49.36 62.49 45.12 11 XM_DK_Undo_02 63954 16.73 48.36 6.51 12 XM_B_Unicode3 57832 44.19 43.74 44.34 13 BAYES_50 52056 48.55 39.37 51.52 14 TR_XM_DKIM_Undo 50651 13.04 38.30 4.88 15 LOC_TINY_FONT_1 50162 24.31 37.93 19.91 16 XM_B_SpammyWords2 49977 21.75 37.79 16.57 17 BAYES_99 48330 12.74 36.55 5.04 18 HTML_FONT_LOW_CONTRAST 44790 25.72 33.87 23.08 19 T_KAM_HTML_FONT_INVALID 42246 20.39 31.95 16.66 20 FVGT_m_MULTI_ODD 40120 22.74 30.34 20.28 21 MIME_HTML_ONLY 40010 20.51 30.26 17.36 22 DKIM_VALID_EF 39650 25.50 29.99 24.05 23 BAYES_999 38430 10.18 29.06 4.08 24 TR_DCC_Bayes_99 35590 7.99 26.91 1.88 25 DCC_CHECK_NEGATIVE 35440 59.89 26.80 70.57 26 RCVD_IN_MSPIKE_H2 33194 20.62 25.10 19.18 27 XMSubLong 31991 20.74 24.19 19.62 28 RCVD_IN_MSPIKE_WL 31184 25.04 23.58 25.51 29 T_TM2_M_HEADER_IN_MSG 30006 34.28 22.69 38.03 30 XM_Body_Dirty_Words 29408 13.33 22.24 10.45 31 RELAYCOUNTRY_META 25468 7.18 19.26 3.28 32 XM_Multi_Part_URI 22901 12.06 17.32 10.36 33 XM_B_Unsub 19531 10.45 14.77 9.05 34 LOTS_OF_MONEY 18613 12.89 14.08 12.50 35 XM_B_SpammyWords3 17447 5.83 13.19 3.45 36 UNPARSEABLE_RELAY 17017 8.46 12.87 7.04 37 TR_XM_SpammyWords2 17016 3.87 12.87 0.96 38 TR_XM_UnparsRelay 16610 7.26 12.56 5.55 39 TR_XM_SpammyRelay 16413 4.03 12.41 1.32 40 XM_UncommonTLD01 15906 5.19 12.03 2.98 41 BOTNET_IPINHOSTNAME 15896 6.00 12.02 4.05 42 RCVD_IN_MSPIKE_H3 15633 13.17 11.82 13.60 43 TR_XM_SpammyWords4 15569 8.37 11.77 7.27 44 BOTNET 15548 3.97 11.76 1.45 45 UNTRUSTED_Relay 14666 3.53 11.09 1.09 46 RCVD_IN_MSPIKE_H4 14582 10.47 11.03 10.30 47 MPART_ALT_DIFF 14040 6.12 10.62 4.67 48 XM_Evil_Numbers_Gen 14017 8.14 10.60 7.34 49 FSL_BULK_SIG 13943 5.21 10.54 3.48 50 XMSexyCombo_05 12977 4.46 9.81 2.73 51 XM_SendGrid 12271 6.54 9.28 5.66 52 RCVD_IN_BL_SPAMCOP_NET 11580 2.73 8.76 0.79 53 BAYES_80 10345 4.78 7.82 3.79 54 LotsOfNums_01 10018 8.30 7.58 8.54 55 TR_XM_MaxUnsub 9925 2.42 7.51 0.77 56 HTML_IMAGE_RATIO_02 9893 5.70 7.48 5.13 57 BAYES_60 9167 7.81 6.93 8.09 58 MIME_HTML_MOSTLY 9054 3.05 6.85 1.82 59 XM_B_Phish_Phrases 8538 4.32 6.46 3.63 60 XMSubMetaSx_00 8235 4.02 6.23 3.31 61 URI_NOVOWEL 8234 3.42 6.23 2.51 62 TR_XM_PhishingBody 8229 3.59 6.22 2.74 63 TR_XM_DK_SendGrid 7899 3.98 5.97 3.34 64 XM_H_Long_From01 7135 4.70 5.40 4.47 65 SpammyFromTLD_01 7070 1.77 5.35 0.62 66 TooManyTo_001 7056 7.63 5.34 8.37 67 DKIM_INVALID 7053 3.97 5.33 3.53 68 HTML_IMAGE_RATIO_04 6635 4.56 5.02 4.42 69 TR_XM_SPAMCOP 6595 1.50 4.99 0.38 70 HTML_MIME_NO_HTML_TAG 6583 2.75 4.98 2.03 71 XM_UB50 6557 1.74 4.96 0.70 72 XMStrtUSub 6481 4.04 4.90 3.76 73 RCVD_IN_MSPIKE_BL 6300 1.72 4.76 0.74 74 TR_XM_MSPIKECOMBO 6276 1.71 4.75 0.73 75 RELAYCOUNTRY_CA 6270 1.76 4.74 0.79 76 MIME_HTML_ONLY_MULTI 6192 3.52 4.68 3.14 77 TM2_M_VERY_LONG_WORD 6116 1.98 4.63 1.13 78 XM_B_Investor 5867 2.14 4.44 1.40 79 BAYES_95 5601 2.80 4.24 2.33 80 TM2_M_URI_OPT_OUT 5490 3.48 4.15 3.26 81 TR_XM_SpammyWords5 5425 1.77 4.10 1.02 82 XM_SPF_SoftFail 5309 10.45 4.01 12.53 83 MIME_QP_LONG_LINE 5290 5.27 4.00 5.68 84 SpammyFromTLD_02 5216 1.23 3.94 0.36 85 T_XMDrugObfuBody_08 5213 2.45 3.94 1.97 86 RELAYCOUNTRY_FR 4827 1.05 3.65 0.21 87 XM_B_SpammyTLD 4748 2.31 3.59 1.90 88 XMNumbers 4723 3.37 3.57 3.30 89 T_XMDrugObfuBody_14 4695 2.22 3.55 1.80 90 T_REMOTE_IMAGE 4681 3.34 3.54 3.28 91 KHOP_HELO_FCRDNS 4677 6.19 3.54 7.05 92 HTML_IMAGE_RATIO_06 4431 4.07 3.35 4.30 93 XM_B_Phish66 4424 2.07 3.35 1.66 94 XM_OfRef6 4397 1.44 3.33 0.83 95 JH_SPAMMY_HEADERS 4292 0.79 3.25 0.00 96 RCVD_IN_VALIDITY_SAFE 4261 3.97 3.22 4.22 97 RCVD_IN_IADB_LISTED 4001 4.41 3.03 4.86 98 XMDiploma_00 3937 1.71 2.98 1.30 99 XM_DIRTYINTL 3916 0.94 2.96 0.29 100 TR_XM_SpammyWords3 3797 0.97 2.87 0.35 101 TR_XM_SB_Phish 3726 2.22 2.82 2.02 102 XMSubPhish11 3578 2.17 2.71 1.99 103 XM_B_Unsub2 3506 1.82 2.65 1.55 104 T_TooManySym_01 3459 4.86 2.62 5.59 105 RCVD_IN_VALIDITY_CERTIFIED 3422 3.45 2.59 3.73 106 USER_IN_DEF_DKIM_WL 3327 8.27 2.52 10.13 107 RCVD_IN_IADB_SPF 3284 3.86 2.48 4.30 108 SUBJ_ALL_CAPS 3281 2.89 2.48 3.02 109 XM_B_SpammyWords4 3261 0.83 2.47 0.30 110 HTML_IMAGE_RATIO_08 3230 9.33 2.44 11.56 111 T_FILL_THIS_FORM_SHORT 3170 1.15 2.40 0.75 112 XMSexyCombo_01 3136 1.14 2.37 0.74 113 RCVD_IN_MSPIKE_L3 3095 0.78 2.34 0.28 114 XMBody_17 3065 0.83 2.32 0.35 115 RCVD_IN_IADB_SENDERID 3006 3.48 2.27 3.87 116 TR_XM_PHPDW 2963 0.78 2.24 0.31 117 XM_CamelCaseFrm001 2934 1.83 2.22 1.71 118 RCVD_IN_IADB_DK 2933 3.39 2.22 3.76 119 TR_XM_PHPForged 2896 0.74 2.19 0.27 120 TR_XM_FormFill2 2866 0.74 2.17 0.27 121 XM_H_PHPOS 2838 0.72 2.15 0.26 122 XM_DK_Undo_01 2806 1.76 2.12 1.65 123 XM_B_COVIDMETA 2792 0.88 2.11 0.49 124 FROM_EXCESS_BASE64 2784 2.19 2.11 2.21 125 XM_GoogleGroups 2731 1.46 2.07 1.26 126 ALL_TRUSTED 2676 12.70 2.02 16.15 127 HTML_TAG_BALANCE_CENTER 2602 0.53 1.97 0.06 128 URI_HEX 2569 1.40 1.94 1.23 129 HTML_IMAGE_ONLY_08 2456 0.53 1.86 0.10 130 XM_URI_RBL 2435 0.53 1.84 0.10 131 URI_NO_WWW_BIZ_CGI 2405 0.45 1.82 0.01 132 RCVD_IN_IADB_VOUCHED 2354 2.55 1.78 2.79 133 BAYES_40 2307 3.90 1.74 4.59 134 XMLngstWrd_00 2287 0.86 1.73 0.58 135 MAILING_LIST_MULTI 2256 2.34 1.71 2.54 136 XM_UB60 2256 0.46 1.71 0.06 137 XMLngstWrd_01 2245 0.81 1.70 0.53 138 RELAYCOUNTRY_AU 2187 0.62 1.65 0.28 139 URIBL_BLACK 2171 0.43 1.64 0.04 140 XMLngstWrd_02 2140 0.74 1.62 0.45 141 XM_Body_Dirty_Words_01 2112 0.81 1.60 0.55 142 T_XMDrugObfuBody_00 2098 0.83 1.59 0.59 143 XM_UB99 2098 0.39 1.59 0.00 144 XMLngstWrd_03 2091 0.67 1.58 0.37 145 BAYES_20 2051 3.33 1.55 3.91 146 TR_XM_FormFill 2044 0.41 1.55 0.04 147 XMLngstWrd_04 2025 0.61 1.53 0.31 148 HTML_TITLE_SUBJ_DIFF 2017 0.47 1.53 0.13 149 XM_UB80 1988 0.37 1.50 0.01 150 TR_XM_INV_DKIM 1954 0.53 1.48 0.22 151 UPPERCASE_75_100 1953 0.47 1.48 0.14 152 TR_XM_NoHeaderRelay 1953 0.49 1.48 0.17 153 HTML_FONT_SIZE_LARGE 1911 0.42 1.45 0.09 154 T_XMHurry_00 1880 1.94 1.42 2.10 155 XMStockSpam_06 1842 1.08 1.39 0.98 156 TR_XM_COVIDMETA4 1833 0.57 1.39 0.31 157 MIXED_CENTER_CASE 1819 0.34 1.38 0.00 158 HTTPS_HTTP_MISMATCH 1816 0.96 1.37 0.83 159 MIXED_HREF_CASE 1815 0.34 1.37 0.00 160 MIXED_IMG_CASE 1807 0.34 1.37 0.00 161 MIXED_AREA_CASE 1803 0.33 1.36 0.00 162 MIXED_FONT_CASE 1794 0.33 1.36 0.00 163 URIBL_DBL_SPAM 1787 0.34 1.35 0.01 164 TR_LOTS_OF_MONEY3 1778 0.46 1.34 0.17 165 RCVD_IN_VALIDITY_RPBL 1772 0.35 1.34 0.02 166 PDS_OTHER_BAD_TLD 1681 0.51 1.27 0.27 167 XMGenDplmaNmb 1658 0.83 1.25 0.69 168 TR_MetaPhish_Combo_01 1657 0.90 1.25 0.79 169 TR_XM_COVIDMETA1 1649 0.48 1.25 0.23 170 RCVD_IN_MSPIKE_L5 1644 0.33 1.24 0.03 171 GOOG_STO_IMG_HTML 1601 0.30 1.21 0.00 172 HTML_TAG_BALANCE_BODY 1557 0.67 1.18 0.50 173 XM_UB999 1539 0.29 1.16 0.00 174 RCVD_IN_MSPIKE_L4 1537 0.60 1.16 0.42 175 XM_H_Long_From02 1529 0.97 1.16 0.90 176 XMPhish30 1527 0.61 1.15 0.43 177 TR_XM_BayesRelay 1523 0.28 1.15 0.00 178 TM2_M_A_HREF_HREF 1502 0.53 1.14 0.33 179 XM_H_PHPMailer 1490 0.64 1.13 0.49 180 BAYES_00 1461 13.72 1.10 17.80 181 FROM_SUSPICIOUS_NTLD 1440 0.30 1.09 0.04 182 TR_Symld_Words 1432 1.43 1.08 1.54 183 XMBrknScrpt_02 1420 0.89 1.07 0.83 184 XM_PDF 1420 3.51 1.07 4.29 185 TR_Mismatch_TLD_02 1413 0.32 1.07 0.08 186 XMHTML_After_End 1412 0.74 1.07 0.63 187 TR_Caps_n_Bayes_99 1404 0.31 1.06 0.07 188 RCVD_IN_IADB_OPTIN 1389 1.61 1.05 1.79 189 RELAYCOUNTRY_GB 1378 0.82 1.04 0.75 190 T_Symld_Words_02 1373 0.57 1.04 0.42 191 BOTNET_NORDNS 1365 0.26 1.03 0.01 192 LongTLD 1318 0.36 1.00 0.15 193 XM_B_DNDMA 1306 0.44 0.99 0.26 194 FROM_SUSPICIOUS_NTLD_FP 1302 0.27 0.98 0.04 195 BODY_URI_ONLY 1301 0.25 0.98 0.01 196 RELAYCOUNTRY_DE 1266 0.42 0.96 0.25 197 XM_ProductURIs 1249 0.59 0.94 0.48 198 URI_TRY_3LD 1244 0.61 0.94 0.51 199 XMHTMLBadTable_001 1223 0.55 0.92 0.43 200 DIET_1 1217 0.39 0.92 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 361464 90.32 96.59 88.29 2 RELAYCOUNTRY_US 334475 81.65 81.49 81.70 3 XM_B_Unicode 298037 74.73 80.73 72.80 4 DCC_CHECK_NEGATIVE 288931 59.89 26.80 70.57 5 DKIM_SIGNED 261834 69.88 88.24 63.95 6 XM_DK_Pass 255311 68.08 85.80 62.36 7 DKIM_VALID 247363 65.91 82.91 60.42 8 BAYES_50 210911 48.55 39.37 51.52 9 XM_B_SpammyWords 195298 53.18 70.12 47.70 10 DKIM_VALID_AU 184721 49.36 62.49 45.12 11 XM_B_Unicode3 181530 44.19 43.74 44.34 12 XMListUnsubscribeExists 169168 48.84 72.11 41.32 13 T_TM2_M_HEADER_IN_MSG 155682 34.28 22.69 38.03 14 DCC_CHECK 120287 40.07 73.16 29.38 15 RCVD_IN_MSPIKE_WL 104440 25.04 23.58 25.51 16 DKIM_VALID_EF 98449 25.50 29.99 24.05 17 HTML_FONT_LOW_CONTRAST 94506 25.72 33.87 23.08 18 FVGT_m_MULTI_ODD 83040 22.74 30.34 20.28 19 LOC_TINY_FONT_1 81514 24.31 37.93 19.91 20 XMSubLong 80337 20.74 24.19 19.62 21 RCVD_IN_MSPIKE_H2 78517 20.62 25.10 19.18 22 BAYES_00 72878 13.72 1.10 17.80 23 MIME_HTML_ONLY 71090 20.51 30.26 17.36 24 IN_ZIMBRA_NJ_WHITELIST 68870 12.74 0.08 16.82 25 T_KAM_HTML_FONT_INVALID 68195 20.39 31.95 16.66 26 XM_B_SpammyWords2 67836 21.75 37.79 16.57 27 ALL_TRUSTED 66110 12.70 2.02 16.15 28 RCVD_IN_MSPIKE_H3 55696 13.17 11.82 13.60 29 XM_SPF_SoftFail 51315 10.45 4.01 12.53 30 LOTS_OF_MONEY 51193 12.89 14.08 12.50 31 HTML_FONT_FACE_BAD 47343 8.93 0.78 11.56 32 HTML_IMAGE_RATIO_08 47326 9.33 2.44 11.56 33 XM_Body_Dirty_Words 42795 13.33 22.24 10.45 34 XM_Multi_Part_URI 42398 12.06 17.32 10.36 35 RCVD_IN_MSPIKE_H4 42149 10.47 11.03 10.30 36 USER_IN_DEF_DKIM_WL 41478 8.27 2.52 10.13 37 XM_B_Unsub 37053 10.45 14.77 9.05 38 LotsOfNums_01 34960 8.30 7.58 8.54 39 TooManyTo_001 34281 7.63 5.34 8.37 40 BAYES_60 33134 7.81 6.93 8.09 41 XM_Evil_Numbers_Gen 30058 8.14 10.60 7.34 42 TR_XM_SpammyWords4 29775 8.37 11.77 7.27 43 KHOP_HELO_FCRDNS 28846 6.19 3.54 7.05 44 UNPARSEABLE_RELAY 28820 8.46 12.87 7.04 45 FILL_THIS_FORM 27808 5.19 0.22 6.79 46 XM_DKIMWhitelistDomains 27038 5.00 0.03 6.60 47 XM_DK_Undo_02 26670 16.73 48.36 6.51 48 TR_XM_DK_Bayes 24288 4.62 0.55 5.93 49 TR_XM_DK_Bayes1 23313 4.43 0.52 5.69 50 MIME_QP_LONG_LINE 23269 5.27 4.00 5.68 51 XM_SendGrid 23165 6.54 9.28 5.66 52 T_TooManySym_01 22872 4.86 2.62 5.59 53 TR_XM_UnparsRelay 22734 7.26 12.56 5.55 54 HTML_IMAGE_RATIO_02 21006 5.70 7.48 5.13 55 BAYES_99 20651 12.74 36.55 5.04 56 TR_XM_DKIM_Undo 19993 13.04 38.30 4.88 57 RCVD_IN_IADB_LISTED 19907 4.41 3.03 4.86 58 TR_XM_DK_Bayes2 19639 3.72 0.40 4.80 59 MPART_ALT_DIFF 19113 6.12 10.62 4.67 60 BAYES_40 18803 3.90 1.74 4.59 61 XM_H_Long_From01 18317 4.70 5.40 4.47 62 HTML_IMAGE_RATIO_04 18084 4.56 5.02 4.42 63 HTML_IMAGE_RATIO_06 17619 4.07 3.35 4.30 64 RCVD_IN_IADB_SPF 17599 3.86 2.48 4.30 65 XM_PDF 17568 3.51 1.07 4.29 66 RCVD_IN_VALIDITY_SAFE 17267 3.97 3.22 4.22 67 BAYES_999 16715 10.18 29.06 4.08 68 BOTNET_IPINHOSTNAME 16595 6.00 12.02 4.05 69 BAYES_20 16008 3.33 1.55 3.91 70 RCVD_IN_IADB_SENDERID 15849 3.48 2.27 3.87 71 BAYES_80 15521 4.78 7.82 3.79 72 RCVD_IN_IADB_DK 15402 3.39 2.22 3.76 73 XMStrtUSub 15375 4.04 4.90 3.76 74 RCVD_IN_VALIDITY_CERTIFIED 15253 3.45 2.59 3.73 75 XM_B_Phish_Phrases 14846 4.32 6.46 3.63 76 DKIM_INVALID 14471 3.97 5.33 3.53 77 FSL_BULK_SIG 14264 5.21 10.54 3.48 78 XM_B_SpammyWords3 14142 5.83 13.19 3.45 79 TR_XM_DK_SendGrid 13678 3.98 5.97 3.34 80 XMSubMetaSx_00 13564 4.02 6.23 3.31 81 XMNumbers 13526 3.37 3.57 3.30 82 RELAYCOUNTRY_META 13448 7.18 19.26 3.28 83 T_REMOTE_IMAGE 13434 3.34 3.54 3.28 84 TM2_M_URI_OPT_OUT 13353 3.48 4.15 3.26 85 ANY_BOUNCE_MESSAGE 12899 2.52 0.55 3.15 86 BOUNCE_MESSAGE 12899 2.52 0.55 3.15 87 MIME_HTML_ONLY_MULTI 12863 3.52 4.68 3.14 88 SUBJ_ALL_CAPS 12382 2.89 2.48 3.02 89 XM_UncommonTLD01 12210 5.19 12.03 2.98 90 XM_H_Trusted_IP 12072 2.23 0.00 2.95 91 T_TooManySym_02 11949 2.40 0.79 2.92 92 BAYES_05 11944 2.37 0.69 2.92 93 RCVD_IN_IADB_VOUCHED 11440 2.55 1.78 2.79 94 TR_XM_PhishingBody 11214 3.59 6.22 2.74 95 XMSexyCombo_05 11185 4.46 9.81 2.73 96 MAILING_LIST_MULTI 10400 2.34 1.71 2.54 97 URI_NOVOWEL 10279 3.42 6.23 2.51 98 BAYES_95 9559 2.80 4.24 2.33 99 FROM_EXCESS_BASE64 9064 2.19 2.11 2.21 100 T_XMHurry_00 8618 1.94 1.42 2.10 101 TooManyTo_002 8416 1.70 0.61 2.06 102 HTML_MIME_NO_HTML_TAG 8299 2.75 4.98 2.03 103 TR_XM_SB_Phish 8281 2.22 2.82 2.02 104 XMSubPhish11 8156 2.17 2.71 1.99 105 T_XMDrugObfuBody_08 8048 2.45 3.94 1.97 106 XM_B_SpammyTLD 7780 2.31 3.59 1.90 107 TR_DCC_Bayes_99 7693 7.99 26.91 1.88 108 HELO_NODOT 7505 1.55 0.68 1.83 109 HELO_NO_DOMAIN 7497 1.53 0.59 1.83 110 MIME_HTML_MOSTLY 7454 3.05 6.85 1.82 111 T_XMDrugObfuBody_14 7355 2.22 3.55 1.80 112 RCVD_IN_IADB_OPTIN 7317 1.61 1.05 1.79 113 INVALID_MSGID 7077 1.34 0.13 1.73 114 IN_HORDE_ADDRESS_BOOK 7046 1.33 0.11 1.72 115 XM_CamelCaseFrm001 7002 1.83 2.22 1.71 116 XM_B_Phish66 6786 2.07 3.35 1.66 117 XM_DK_Undo_01 6749 1.76 2.12 1.65 118 RCVD_IN_MSPIKE_H5 6595 1.40 0.73 1.61 119 XM_E_Blogspot 6577 1.24 0.11 1.61 120 XM_B_Unsub2 6362 1.82 2.65 1.55 121 TR_Symld_Words 6295 1.43 1.08 1.54 122 MSGID_NOFQDN1 6202 1.15 0.03 1.51 123 TO_MALFORMED 6135 1.14 0.02 1.50 124 BOTNET 5934 3.97 11.76 1.45 125 XM_B_Investor 5733 2.14 4.44 1.40 126 TVD_RCVD_IP 5607 1.09 0.24 1.37 127 TooManyTo_003 5562 1.14 0.44 1.36 128 TR_XM_SpammyRelay 5409 4.03 12.41 1.32 129 XMDiploma_00 5303 1.71 2.98 1.30 130 XM_GoogleGroups 5150 1.46 2.07 1.26 131 URI_HEX 5040 1.40 1.94 1.23 132 XMGappySubj_01 4787 0.90 0.09 1.17 133 TM2_M_VERY_LONG_WORD 4623 1.98 4.63 1.13 134 XMCapTrack 4612 0.94 0.36 1.13 135 UNTRUSTED_Relay 4478 3.53 11.09 1.09 136 XMSubNoVowel 4439 1.00 0.75 1.08 137 XMBSHREFv2 4435 0.90 0.34 1.08 138 TR_XM_SpammyWords5 4172 1.77 4.10 1.02 139 XMStockSpam_06 3994 1.08 1.39 0.98 140 TR_XM_SpammyWords2 3927 3.87 12.87 0.96 141 TooManyTo_004 3868 0.80 0.36 0.94 142 TVD_SPACE_RATIO 3846 0.72 0.06 0.94 143 DKIM_ADSP_CUSTOM_MED 3786 0.89 0.76 0.92 144 XM_H_Long_From02 3700 0.97 1.16 0.90 145 XM_OfRef6 3398 1.44 3.33 0.83 146 T_TooManySym_03 3398 0.71 0.34 0.83 147 HTTPS_HTTP_MISMATCH 3381 0.96 1.37 0.83 148 XMBrknScrpt_02 3378 0.89 1.07 0.83 149 RELAYCOUNTRY_CA 3237 1.76 4.74 0.79 150 RCVD_IN_BL_SPAMCOP_NET 3228 2.73 8.76 0.79 151 TR_MetaPhish_Combo_01 3224 0.90 1.25 0.79 152 RCVD_IN_RP_SAFE 3198 0.79 0.82 0.78 153 TR_XM_MaxUnsub 3165 2.42 7.51 0.77 154 TooManyTo_005 3123 0.65 0.29 0.76 155 T_FILL_THIS_FORM_SHORT 3083 1.15 2.40 0.75 156 RELAYCOUNTRY_GB 3066 0.82 1.04 0.75 157 XMSexyCombo_01 3050 1.14 2.37 0.74 158 RCVD_IN_MSPIKE_BL 3021 1.72 4.76 0.74 159 TR_XM_MSPIKECOMBO 2977 1.71 4.75 0.73 160 RCVD_IN_RP_CERTIFIED 2852 0.69 0.65 0.70 161 XM_UB50 2850 1.74 4.96 0.70 162 XMGenDplmaNmb 2827 0.83 1.25 0.69 163 FROM_GOV_DKIM_AU 2794 0.54 0.12 0.68 164 XMHTML_After_End 2582 0.74 1.07 0.63 165 XM_ShortIntro_01 2567 0.59 0.48 0.63 166 SpammyFromTLD_01 2532 1.77 5.35 0.62 167 T_XMDrugObfuBody_00 2413 0.83 1.59 0.59 168 XMLngstWrd_00 2393 0.86 1.73 0.58 169 XMBody_95 2331 0.46 0.13 0.57 170 SHORT_HELO_AND_INLINE_IMAGE 2292 0.45 0.12 0.56 171 NML_ADSP_CUSTOM_MED 2273 0.57 0.63 0.56 172 XM_Body_Dirty_Words_01 2259 0.81 1.60 0.55 173 HTML_IMAGE_ONLY_20 2254 0.47 0.23 0.55 174 RCVD_IN_SORBS_DUL 2244 0.49 0.33 0.55 175 T_OBFU_PDF_ATTACH 2239 0.44 0.09 0.55 176 XMNoVowels 2203 0.51 0.42 0.54 177 XMLngstWrd_01 2154 0.81 1.70 0.53 178 FORGED_GMAIL_RCVD 2106 0.54 0.61 0.51 179 URI_TRY_3LD 2068 0.61 0.94 0.51 180 XMBdyGiftCard01 2059 0.55 0.68 0.50 181 HTML_TAG_BALANCE_BODY 2048 0.67 1.18 0.50 182 XM_B_COPY_HTML 2047 0.59 0.87 0.50 183 XM_B_COVIDMETA 1997 0.88 2.11 0.49 184 XM_H_PHPMailer 1989 0.64 1.13 0.49 185 XM_ProductURIs 1971 0.59 0.94 0.48 186 TR_MSPIKEBAYES00 1911 0.36 0.02 0.47 187 XMMoneyMeta_00 1883 0.54 0.80 0.46 188 HTML_IMAGE_ONLY_32 1852 0.42 0.31 0.45 189 XMLngstWrd_02 1843 0.74 1.62 0.45 190 XMPhish30 1772 0.61 1.15 0.43 191 XMHTMLBadTable_001 1756 0.55 0.92 0.43 192 T_Symld_Words_02 1728 0.57 1.04 0.42 193 SHORT_URI_2 1717 0.46 0.58 0.42 194 RCVD_IN_MSPIKE_L4 1701 0.60 1.16 0.42 195 HTML_IMAGE_ONLY_28 1700 0.41 0.39 0.42 196 MPART_ALT_DIFF_COUNT 1669 0.52 0.86 0.41 197 FROM_GOV_SPOOF 1642 0.33 0.10 0.40 198 XMPhish14 1609 0.47 0.71 0.39 199 TR_XM_SPAMCOP 1554 1.50 4.99 0.38 200 XMLngstWrd_03 1531 0.67 1.58 0.37 ----------------------------------------------------------------------