Email: 521986 Autolearn: 0 AvgScore: 2.73 AvgScanTime: 1.47 sec Spam: 131550 Autolearn: 0 AvgScore: 14.11 AvgScanTime: 1.59 sec Ham: 390436 Autolearn: 0 AvgScore: -1.11 AvgScanTime: 1.42 sec Time Spent Running SA: 212.61 hours Time Spent Processing Spam: 58.21 hours Time Spent Processing Ham: 154.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127338 89.46 96.80 86.98 2 DKIM_SIGNED 109352 73.68 83.13 70.50 3 XM_DK_Pass 104884 71.39 79.73 68.58 4 RELAYCOUNTRY_US 103703 77.57 78.83 77.15 5 DKIM_VALID 102205 69.36 77.69 66.55 6 XM_B_Unicode 96251 71.82 73.17 71.36 7 XMListUnsubscribeExists 87524 51.79 66.53 46.82 8 XM_B_SpammyWords 86416 52.19 65.69 47.64 9 DKIM_VALID_AU 75112 52.06 57.10 50.36 10 DCC_CHECK_NEGATIVE 66244 73.48 50.36 81.28 11 DCC_CHECK 65241 26.47 49.59 18.68 12 XM_DK_Undo_02 60472 17.22 45.97 7.53 13 XM_B_Unicode3 53525 43.52 40.69 44.47 14 BAYES_50 53513 53.24 40.68 57.47 15 TR_XM_DKIM_Undo 47713 13.28 36.27 5.53 16 BAYES_99 47573 13.66 36.16 6.08 17 XM_B_SpammyWords2 47382 22.86 36.02 18.43 18 LOC_TINY_FONT_1 45296 25.84 34.43 22.95 19 HTML_FONT_LOW_CONTRAST 44931 27.15 34.16 24.79 20 MIME_HTML_ONLY 44818 27.15 34.07 24.82 21 DKIM_VALID_EF 42582 26.72 32.37 24.81 22 FVGT_m_MULTI_ODD 40269 24.88 30.61 22.95 23 BAYES_999 38610 11.11 29.35 4.96 24 T_KAM_HTML_FONT_INVALID 35015 20.53 26.62 18.48 25 XMSubLong 31951 26.10 24.29 26.71 26 T_TM2_M_HEADER_IN_MSG 31454 27.36 23.91 28.52 27 RELAYCOUNTRY_META 30538 8.67 23.21 3.77 28 XM_Body_Dirty_Words 29699 18.18 22.58 16.70 29 RCVD_IN_MSPIKE_H2 28725 20.53 21.84 20.09 30 RCVD_IN_MSPIKE_WL 27672 25.69 21.04 27.26 31 TR_DCC_Bayes_99 24857 5.51 18.90 1.00 32 BOTNET 23409 5.71 17.79 1.63 33 XM_Multi_Part_URI 20484 12.42 15.57 11.36 34 LOTS_OF_MONEY 20045 9.59 15.24 7.68 35 XM_B_Unsub 19519 10.76 14.84 9.39 36 XM_UncommonTLD01 19177 6.14 14.58 3.30 37 RCVD_IN_MSPIKE_H3 17611 14.44 13.39 14.80 38 TR_XM_SpammyRelay 16968 4.49 12.90 1.65 39 TR_XM_SpammyWords4 16898 6.82 12.85 4.79 40 BOTNET_IPINHOSTNAME 16235 6.53 12.34 4.57 41 TR_XM_SpammyWords2 16194 4.07 12.31 1.29 42 UNTRUSTED_Relay 16154 4.02 12.28 1.23 43 UNPARSEABLE_RELAY 16051 8.81 12.20 7.67 44 XM_B_SpammyWords3 15808 6.48 12.02 4.62 45 TR_XM_UnparsRelay 15762 7.64 11.98 6.18 46 MPART_ALT_DIFF 14927 6.49 11.35 4.86 47 XMSexyCombo_05 13099 9.33 9.96 9.12 48 FSL_BULK_SIG 12512 4.22 9.51 2.43 49 HTML_MIME_NO_HTML_TAG 11488 3.74 8.73 2.05 50 RCVD_IN_BL_SPAMCOP_NET 11452 2.84 8.71 0.86 51 XM_Evil_Numbers_Gen 11029 7.59 8.38 7.32 52 XMSubMetaSx_00 10477 5.36 7.96 4.49 53 XM_SendGrid 10197 6.34 7.75 5.86 54 RCVD_IN_MSPIKE_H4 9556 9.90 7.26 10.78 55 TR_XM_MaxUnsub 9475 2.46 7.20 0.87 56 BAYES_80 9401 4.93 7.15 4.18 57 BAYES_60 9088 8.19 6.91 8.62 58 HTML_IMAGE_RATIO_02 9033 6.17 6.87 5.93 59 URI_NOVOWEL 9018 3.77 6.86 2.74 60 XM_UB50 8764 2.23 6.66 0.74 61 T_REMOTE_IMAGE 8432 8.09 6.41 8.66 62 TR_XM_PhishingBody 8406 3.94 6.39 3.12 63 LotsOfNums_01 8244 8.60 6.27 9.39 64 SpammyFromTLD_02 8017 1.88 6.09 0.46 65 RCVD_IN_MSPIKE_BL 7958 2.14 6.05 0.82 66 TR_XM_MSPIKECOMBO 7950 2.13 6.04 0.82 67 TooManyTo_001 7920 11.90 6.02 13.89 68 MIME_HTML_MOSTLY 7851 2.92 5.97 1.90 69 DKIM_INVALID 7147 4.32 5.43 3.94 70 TR_XM_PHPDW 7115 1.64 5.41 0.37 71 TR_XM_PHPForged 6955 1.57 5.29 0.31 72 TR_XM_FormFill2 6939 1.57 5.27 0.32 73 XM_H_PHPOS 6916 1.56 5.26 0.31 74 BOTNET_NORDNS 6664 1.29 5.07 0.01 75 BODY_URI_ONLY 6622 1.28 5.03 0.01 76 T_XMDrugObfuBody_08 6541 2.41 4.97 1.54 77 SpammyFromTLD_01 6527 1.78 4.96 0.70 78 RELAYCOUNTRY_CA 6482 1.97 4.93 0.98 79 MIME_HTML_ONLY_MULTI 6396 3.61 4.86 3.18 80 XM_SPF_SoftFail 6372 2.90 4.84 2.24 81 XM_H_Long_From01 6250 4.94 4.75 5.01 82 TR_XM_SPAMCOP 6239 1.48 4.74 0.38 83 XM_B_Phish_Phrases 6193 3.77 4.71 3.46 84 GOOG_STO_IMG_HTML 6098 1.17 4.64 0.00 85 TR_XM_DK_SendGrid 5828 3.74 4.43 3.50 86 XM_B_SpammyTLD 5820 2.81 4.42 2.27 87 HTML_SHORT_LINK_IMG_1 5639 1.09 4.29 0.02 88 TM2_M_VERY_LONG_WORD 5616 2.16 4.27 1.45 89 HTML_TAG_BALANCE_CENTER 5601 1.12 4.26 0.07 90 XMStrtUSub 5493 4.02 4.18 3.97 91 TR_XM_SpammyWords5 5451 2.06 4.14 1.36 92 XMNumbers 5310 3.62 4.04 3.48 93 XM_B_Investor 5277 2.19 4.01 1.57 94 XM_H_PHPMailer 5179 1.35 3.94 0.48 95 TM2_M_URI_OPT_OUT 5096 3.47 3.87 3.34 96 XM_B_Phish66 4981 2.26 3.79 1.75 97 BAYES_95 4966 2.92 3.77 2.63 98 HTML_IMAGE_RATIO_06 4885 3.70 3.71 3.69 99 HTML_IMAGE_RATIO_04 4869 5.04 3.70 5.49 100 TR_XM_SpammyWords3 4779 1.20 3.63 0.38 101 XM_H_PHPOS_M 4746 0.97 3.61 0.08 102 MIME_QP_LONG_LINE 4551 5.48 3.46 6.16 103 KHOP_HELO_FCRDNS 4539 2.16 3.45 1.73 104 RELAYCOUNTRY_FR 4285 1.01 3.26 0.25 105 XM_DIRTYINTL 4187 1.06 3.18 0.34 106 T_XMDrugObfuBody_14 4124 2.11 3.13 1.76 107 XM_Body_Dirty_Words_01 4074 0.90 3.10 0.16 108 JH_SPAMMY_HEADERS 3894 0.75 2.96 0.00 109 HTML_IMAGE_ONLY_04 3882 0.77 2.95 0.04 110 HDRS_LCASE_IMGONLY 3855 0.76 2.93 0.03 111 HTML_SHORT_CENTER 3827 0.74 2.91 0.00 112 XMBody_17 3808 1.07 2.89 0.45 113 HTML_IMAGE_ONLY_08 3774 0.80 2.87 0.10 114 XM_OfRef6 3737 1.34 2.84 0.84 115 RCVD_IN_VALIDITY_SAFE 3654 4.35 2.78 4.87 116 HTML_IMAGE_RATIO_08 3634 2.22 2.76 2.03 117 PDS_OTHER_BAD_TLD 3517 0.93 2.67 0.34 118 FROM_SUSPICIOUS_NTLD 3489 0.72 2.65 0.07 119 RELAYCOUNTRY_GB 3472 1.25 2.64 0.78 120 T_XMDrugObfuBody_00 3397 1.18 2.58 0.71 121 FROM_SUSPICIOUS_NTLD_FP 3367 0.69 2.56 0.06 122 T_FILL_THIS_FORM_SHORT 3353 1.21 2.55 0.76 123 LongTLD 3352 0.77 2.55 0.17 124 T_TooManySym_01 3257 5.18 2.48 6.09 125 RCVD_IN_MSPIKE_L3 3234 0.85 2.46 0.31 126 XM_GoogleGroups 3223 1.65 2.45 1.38 127 RCVD_IN_MSPIKE_L5 3216 0.65 2.44 0.04 128 XM_DK_Undo_01 3190 1.85 2.42 1.65 129 XMSexyCombo_01 3163 1.53 2.40 1.24 130 SUBJ_ALL_CAPS 3121 1.77 2.37 1.56 131 RCVD_IN_IADB_LISTED 3011 4.64 2.29 5.43 132 XMStockSpam_06 2945 1.48 2.24 1.23 133 XMLngstWrd_00 2921 1.02 2.22 0.61 134 XM_CamelCaseFrm001 2888 1.87 2.20 1.77 135 ALL_TRUSTED 2879 15.69 2.19 20.24 136 XMLngstWrd_01 2867 0.96 2.18 0.55 137 HTML_EXTRA_CLOSE 2840 0.56 2.16 0.02 138 XMDiploma_00 2833 1.43 2.15 1.18 139 XMLngstWrd_02 2800 0.90 2.13 0.49 140 RCVD_IN_VALIDITY_CERTIFIED 2793 3.83 2.12 4.40 141 XM_B_Unsub2 2780 1.51 2.11 1.31 142 XMLngstWrd_03 2746 0.83 2.09 0.41 143 HTML_TITLE_SUBJ_DIFF 2702 0.68 2.05 0.21 144 TR_XM_SB_Phish 2690 2.11 2.04 2.13 145 HTML_FONT_SIZE_HUGE 2663 0.55 2.02 0.05 146 XMLngstWrd_04 2660 0.77 2.02 0.34 147 XM_B_SpammyWords4 2632 0.82 2.00 0.42 148 TR_XM_FormFill 2605 0.52 1.98 0.03 149 XMSubPhish11 2600 2.07 1.98 2.10 150 URIBL_DBL_SPAM 2590 0.50 1.97 0.01 151 UPPERCASE_75_100 2579 0.65 1.96 0.20 152 XM_URI_RBL 2548 0.59 1.94 0.14 153 TR_XM_NoHeaderRelay 2511 0.63 1.91 0.20 154 RELAYCOUNTRY_RU 2493 0.50 1.90 0.03 155 BAYES_40 2431 3.96 1.85 4.67 156 RCVD_IN_IADB_SPF 2387 4.06 1.81 4.82 157 XM_BadFromFormat 2368 0.54 1.80 0.11 158 NORDNS_LOW_CONTRAST 2284 0.45 1.74 0.01 159 TR_LOTS_OF_MONEY3 2284 0.65 1.74 0.29 160 URI_NO_WWW_BIZ_CGI 2277 0.45 1.73 0.02 161 XMEqualsVooDoo_00 2253 0.46 1.71 0.04 162 BAYES_20 2223 3.02 1.69 3.46 163 MAILING_LIST_MULTI 2198 2.90 1.67 3.31 164 RCVD_IN_IADB_DK 2191 3.57 1.67 4.22 165 INVALID_DATE 2178 0.44 1.66 0.03 166 RCVD_IN_IADB_SENDERID 2171 3.66 1.65 4.34 167 XM_UB60 2169 0.48 1.65 0.08 168 XM_B_COVIDMETA 2159 0.72 1.64 0.41 169 TR_XM_INV_DKIM 2110 0.68 1.60 0.36 170 URI_HEX 2089 1.29 1.59 1.19 171 URIBL_BLACK 2064 0.44 1.57 0.05 172 XMMoneyMeta_00 2059 0.75 1.57 0.48 173 DATE_IN_PAST_03_06 2050 0.64 1.56 0.33 174 T_XMHurry_00 2037 0.77 1.55 0.51 175 T_Symld_Words_02 2029 0.78 1.54 0.52 176 FROM_EXCESS_BASE64 2025 2.09 1.54 2.28 177 XM_H_TOP 2009 0.40 1.53 0.01 178 XM_UB99 2008 0.39 1.53 0.00 179 XMBdyGiftCard01 1968 1.02 1.50 0.86 180 TR_M_TOP_BAYES 1961 0.38 1.49 0.01 181 TR_Symld_Words 1949 1.52 1.48 1.54 182 TR_XM_COVIDMETA4 1941 0.60 1.48 0.30 183 DKIM_ADSP_NXDOMAIN 1911 0.61 1.45 0.33 184 TR_XM_BayesRelay 1906 0.37 1.45 0.01 185 RELAYCOUNTRY_PL 1831 0.37 1.39 0.03 186 RELAYCOUNTRY_AU 1823 0.60 1.39 0.33 187 HTML_FONT_SIZE_LARGE 1786 0.41 1.36 0.09 188 XMGenDplmaNmb 1786 0.90 1.36 0.74 189 MIXED_CENTER_CASE 1764 0.34 1.34 0.00 190 MIXED_HREF_CASE 1755 0.34 1.33 0.00 191 MIXED_IMG_CASE 1753 0.34 1.33 0.00 192 MIXED_AREA_CASE 1751 0.34 1.33 0.00 193 XMHTML_After_End 1748 0.87 1.33 0.71 194 RCVD_IN_IADB_VOUCHED 1744 2.71 1.33 3.18 195 MIXED_FONT_CASE 1739 0.33 1.32 0.00 196 USER_IN_DEF_DKIM_WL 1730 8.57 1.32 11.02 197 TR_XM_COVIDMETA1 1711 0.44 1.30 0.15 198 SHORT_URI_2 1706 0.53 1.30 0.27 199 RCVD_IN_VALIDITY_RPBL 1671 0.36 1.27 0.05 200 HDRS_MISSP 1662 0.35 1.26 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 339607 89.46 96.80 86.98 2 DCC_CHECK_NEGATIVE 317331 73.48 50.36 81.28 3 RELAYCOUNTRY_US 301215 77.57 78.83 77.15 4 XM_B_Unicode 278620 71.82 73.17 71.36 5 DKIM_SIGNED 275243 73.68 83.13 70.50 6 XM_DK_Pass 267754 71.39 79.73 68.58 7 DKIM_VALID 259851 69.36 77.69 66.55 8 BAYES_50 224371 53.24 40.68 57.47 9 DKIM_VALID_AU 196635 52.06 57.10 50.36 10 XM_B_SpammyWords 186008 52.19 65.69 47.64 11 XMListUnsubscribeExists 182789 51.79 66.53 46.82 12 XM_B_Unicode3 173622 43.52 40.69 44.47 13 T_TM2_M_HEADER_IN_MSG 111364 27.36 23.91 28.52 14 RCVD_IN_MSPIKE_WL 106434 25.69 21.04 27.26 15 XMSubLong 104284 26.10 24.29 26.71 16 MIME_HTML_ONLY 96902 27.15 34.07 24.82 17 DKIM_VALID_EF 96882 26.72 32.37 24.81 18 HTML_FONT_LOW_CONTRAST 96798 27.15 34.16 24.79 19 FVGT_m_MULTI_ODD 89624 24.88 30.61 22.95 20 LOC_TINY_FONT_1 89611 25.84 34.43 22.95 21 ALL_TRUSTED 79020 15.69 2.19 20.24 22 RCVD_IN_MSPIKE_H2 78450 20.53 21.84 20.09 23 DCC_CHECK 72946 26.47 49.59 18.68 24 T_KAM_HTML_FONT_INVALID 72140 20.53 26.62 18.48 25 XM_B_SpammyWords2 71959 22.86 36.02 18.43 26 XM_Body_Dirty_Words 65194 18.18 22.58 16.70 27 RCVD_IN_MSPIKE_H3 57783 14.44 13.39 14.80 28 TooManyTo_001 54215 11.90 6.02 13.89 29 XM_Multi_Part_URI 44357 12.42 15.57 11.36 30 USER_IN_DEF_DKIM_WL 43011 8.57 1.32 11.02 31 BAYES_00 42129 8.33 1.02 10.79 32 RCVD_IN_MSPIKE_H4 42098 9.90 7.26 10.78 33 LotsOfNums_01 36661 8.60 6.27 9.39 34 XM_B_Unsub 36646 10.76 14.84 9.39 35 XMSexyCombo_05 35606 9.33 9.96 9.12 36 T_REMOTE_IMAGE 33803 8.09 6.41 8.66 37 BAYES_60 33661 8.19 6.91 8.62 38 LOTS_OF_MONEY 29999 9.59 15.24 7.68 39 UNPARSEABLE_RELAY 29936 8.81 12.20 7.67 40 XM_DK_Undo_02 29419 17.22 45.97 7.53 41 XM_Evil_Numbers_Gen 28569 7.59 8.38 7.32 42 XM_DKIMWhitelistDomains 26721 5.13 0.03 6.84 43 TR_XM_DK_Bayes 25374 4.99 0.52 6.50 44 IN_ZIMBRA_NJ_WHITELIST 25149 4.83 0.07 6.44 45 TR_XM_DK_Bayes1 24604 4.84 0.48 6.30 46 TR_XM_UnparsRelay 24128 7.64 11.98 6.18 47 MIME_QP_LONG_LINE 24050 5.48 3.46 6.16 48 T_TooManySym_01 23763 5.18 2.48 6.09 49 BAYES_99 23729 13.66 36.16 6.08 50 HTML_IMAGE_RATIO_02 23151 6.17 6.87 5.93 51 XM_SendGrid 22877 6.34 7.75 5.86 52 TR_XM_DKIM_Undo 21582 13.28 36.27 5.53 53 HTML_IMAGE_RATIO_04 21418 5.04 3.70 5.49 54 TR_XM_DK_Bayes2 21283 4.19 0.45 5.45 55 RCVD_IN_IADB_LISTED 21199 4.64 2.29 5.43 56 XM_H_Long_From01 19552 4.94 4.75 5.01 57 BAYES_999 19383 11.11 29.35 4.96 58 RCVD_IN_VALIDITY_SAFE 19029 4.35 2.78 4.87 59 MPART_ALT_DIFF 18958 6.49 11.35 4.86 60 RCVD_IN_IADB_SPF 18825 4.06 1.81 4.82 61 TR_XM_SpammyWords4 18698 6.82 12.85 4.79 62 BAYES_40 18245 3.96 1.85 4.67 63 XM_B_SpammyWords3 18034 6.48 12.02 4.62 64 BOTNET_IPINHOSTNAME 17828 6.53 12.34 4.57 65 XMSubMetaSx_00 17525 5.36 7.96 4.49 66 XM_PDF 17338 3.53 0.82 4.44 67 RCVD_IN_VALIDITY_CERTIFIED 17189 3.83 2.12 4.40 68 RCVD_IN_IADB_SENDERID 16959 3.66 1.65 4.34 69 RCVD_IN_IADB_DK 16468 3.57 1.67 4.22 70 BAYES_80 16330 4.93 7.15 4.18 71 XMStrtUSub 15509 4.02 4.18 3.97 72 DKIM_INVALID 15392 4.32 5.43 3.94 73 RELAYCOUNTRY_META 14702 8.67 23.21 3.77 74 HTML_IMAGE_RATIO_06 14412 3.70 3.71 3.69 75 TR_XM_DK_SendGrid 13671 3.74 4.43 3.50 76 XMNumbers 13603 3.62 4.04 3.48 77 BAYES_20 13517 3.02 1.69 3.46 78 XM_B_Phish_Phrases 13501 3.77 4.71 3.46 79 T_TooManySym_02 13404 2.76 0.75 3.43 80 TM2_M_URI_OPT_OUT 13028 3.47 3.87 3.34 81 MAILING_LIST_MULTI 12917 2.90 1.67 3.31 82 XM_UncommonTLD01 12896 6.14 14.58 3.30 83 MIME_HTML_ONLY_MULTI 12425 3.61 4.86 3.18 84 RCVD_IN_IADB_VOUCHED 12401 2.71 1.33 3.18 85 TR_XM_PhishingBody 12167 3.94 6.39 3.12 86 ANY_BOUNCE_MESSAGE 12004 2.45 0.61 3.07 87 BOUNCE_MESSAGE 12000 2.45 0.60 3.07 88 URI_NOVOWEL 10680 3.77 6.86 2.74 89 XM_H_Trusted_IP 10387 1.99 0.00 2.66 90 BAYES_95 10285 2.92 3.77 2.63 91 FSL_BULK_SIG 9503 4.22 9.51 2.43 92 FROM_EXCESS_BASE64 8889 2.09 1.54 2.28 93 XM_B_SpammyTLD 8868 2.81 4.42 2.27 94 XM_SPF_SoftFail 8743 2.90 4.84 2.24 95 TR_XM_SB_Phish 8324 2.11 2.04 2.13 96 XMSubPhish11 8217 2.07 1.98 2.10 97 BAYES_05 8147 1.75 0.76 2.09 98 HTML_MIME_NO_HTML_TAG 8016 3.74 8.73 2.05 99 TooManyTo_002 7935 1.69 0.65 2.03 100 HTML_IMAGE_RATIO_08 7933 2.22 2.76 2.03 101 RCVD_IN_IADB_OPTIN 7717 1.66 0.71 1.98 102 MIME_HTML_MOSTLY 7404 2.92 5.97 1.90 103 INVALID_MSGID 7303 1.42 0.09 1.87 104 XM_CamelCaseFrm001 6893 1.87 2.20 1.77 105 T_XMDrugObfuBody_14 6875 2.11 3.13 1.76 106 HELO_NODOT 6852 1.47 0.61 1.75 107 HELO_NO_DOMAIN 6845 1.46 0.60 1.75 108 XM_B_Phish66 6838 2.26 3.79 1.75 109 IN_HORDE_ADDRESS_BOOK 6766 1.32 0.11 1.73 110 KHOP_HELO_FCRDNS 6739 2.16 3.45 1.73 111 RCVD_IN_MSPIKE_H5 6553 1.35 0.38 1.68 112 XM_DK_Undo_01 6457 1.85 2.42 1.65 113 TR_XM_SpammyRelay 6446 4.49 12.90 1.65 114 MSGID_NOFQDN1 6397 1.23 0.02 1.64 115 BOTNET 6380 5.71 17.79 1.63 116 TVD_RCVD_IP 6245 1.27 0.29 1.60 117 TO_MALFORMED 6154 1.18 0.01 1.58 118 XM_B_Investor 6146 2.19 4.01 1.57 119 SUBJ_ALL_CAPS 6106 1.77 2.37 1.56 120 T_XMDrugObfuBody_08 6019 2.41 4.97 1.54 121 TR_Symld_Words 6011 1.52 1.48 1.54 122 TM2_M_VERY_LONG_WORD 5671 2.16 4.27 1.45 123 XM_GoogleGroups 5398 1.65 2.45 1.38 124 TR_XM_SpammyWords5 5315 2.06 4.14 1.36 125 TooManyTo_003 5307 1.16 0.55 1.36 126 XM_H_Long_From02 5184 1.23 0.93 1.33 127 XMGappySubj_01 5109 1.04 0.24 1.31 128 XM_B_Unsub2 5106 1.51 2.11 1.31 129 TR_XM_SpammyWords2 5041 4.07 12.31 1.29 130 XMNoVowels 4913 1.06 0.47 1.26 131 XMSexyCombo_01 4847 1.53 2.40 1.24 132 UNTRUSTED_Relay 4811 4.02 12.28 1.23 133 XMStockSpam_06 4784 1.48 2.24 1.23 134 URI_HEX 4657 1.29 1.59 1.19 135 XMDiploma_00 4626 1.43 2.15 1.18 136 XMBSHREFv2 4441 0.94 0.35 1.14 137 XMCapTrack 4285 0.90 0.33 1.10 138 TR_DCC_Bayes_99 3902 5.51 18.90 1.00 139 HTML_FONT_FACE_BAD 3826 0.88 0.59 0.98 140 RELAYCOUNTRY_CA 3820 1.97 4.93 0.98 141 RCVD_IN_RP_SAFE 3779 0.86 0.55 0.97 142 TooManyTo_004 3713 0.83 0.48 0.95 143 TVD_SPACE_RATIO 3681 0.75 0.17 0.94 144 DKIM_ADSP_CUSTOM_MED 3630 0.89 0.78 0.93 145 T_TooManySym_03 3621 0.76 0.26 0.93 146 XMSubNoVowel 3612 0.86 0.68 0.93 147 XMSubMetaSxObfu_03 3550 0.90 0.87 0.91 148 RCVD_IN_RP_CERTIFIED 3468 0.76 0.38 0.89 149 TR_XM_MaxUnsub 3387 2.46 7.20 0.87 150 RCVD_IN_BL_SPAMCOP_NET 3366 2.84 8.71 0.86 151 XMBdyGiftCard01 3351 1.02 1.50 0.86 152 TR_MetaPhish_Combo_01 3319 0.84 0.82 0.85 153 XM_OfRef6 3261 1.34 2.84 0.84 154 RCVD_IN_MSPIKE_BL 3210 2.14 6.05 0.82 155 TR_XM_MSPIKECOMBO 3194 2.13 6.04 0.82 156 RELAYCOUNTRY_GB 3045 1.25 2.64 0.78 157 HTTPS_HTTP_MISMATCH 3019 0.81 0.94 0.77 158 T_FILL_THIS_FORM_SHORT 2982 1.21 2.55 0.76 159 TooManyTo_005 2973 0.67 0.40 0.76 160 XMGenDplmaNmb 2905 0.90 1.36 0.74 161 XM_UB50 2902 2.23 6.66 0.74 162 XMBrknScrpt_02 2847 0.72 0.70 0.73 163 XMPhish30 2790 0.79 1.01 0.71 164 XMHTML_After_End 2785 0.87 1.33 0.71 165 XMBody_95 2781 0.57 0.15 0.71 166 T_XMDrugObfuBody_00 2766 1.18 2.58 0.71 167 SpammyFromTLD_01 2740 1.78 4.96 0.70 168 XM_ShortIntro_01 2450 0.61 0.56 0.63 169 T_OBFU_PDF_ATTACH 2426 0.50 0.14 0.62 170 NML_ADSP_CUSTOM_MED 2420 0.63 0.67 0.62 171 XMSubMetaI_00 2395 0.72 1.05 0.61 172 LOW_PRICE 2392 0.58 0.48 0.61 173 XMLngstWrd_00 2378 1.02 2.22 0.61 174 HTML_IMAGE_ONLY_20 2373 0.59 0.54 0.61 175 XM_B_COPY_HTML 2368 0.59 0.54 0.61 176 XM_ProductURIs 2350 0.66 0.84 0.60 177 TR_MSPIKEBAYES00 2334 0.45 0.02 0.60 178 FROM_GOV_DKIM_AU 2272 0.50 0.25 0.58 179 XM_D_tchamptons_WL 2232 0.43 0.00 0.57 180 HTML_TAG_BALANCE_BODY 2205 0.66 0.93 0.56 181 XMLngstWrd_01 2158 0.96 2.18 0.55 182 FORGED_GMAIL_RCVD 2107 0.57 0.68 0.54 183 XMSexyCombo_04 2075 0.56 0.65 0.53 184 SHORT_HELO_AND_INLINE_IMAGE 2065 0.42 0.08 0.53 185 URI_TRY_3LD 2055 0.66 1.05 0.53 186 T_Symld_Words_02 2018 0.78 1.54 0.52 187 T_XMHurry_00 1975 0.77 1.55 0.51 188 RCVD_IN_SORBS_DUL 1924 0.44 0.28 0.49 189 XMLngstWrd_02 1921 0.90 2.13 0.49 190 XM_H_PHPMailer 1892 1.35 3.94 0.48 191 XMMoneyMeta_00 1864 0.75 1.57 0.48 192 MPART_ALT_DIFF_COUNT 1841 0.55 0.80 0.47 193 RCVD_IN_MSPIKE_L4 1837 0.64 1.14 0.47 194 SpammyFromTLD_02 1814 1.88 6.09 0.46 195 XM_B_DNDMA 1809 0.51 0.67 0.46 196 XMBody_106 1808 0.36 0.06 0.46 197 XMBody_17 1767 1.07 2.89 0.45 198 XM_B_SpammyWords4 1647 0.82 2.00 0.42 199 XMHTMLBadTable_001 1644 0.52 0.82 0.42 200 TM2_M_A_HREF_HREF 1636 0.59 1.10 0.42 ----------------------------------------------------------------------