Email: 489599 Autolearn: 0 AvgScore: 3.20 AvgScanTime: 1.36 sec Spam: 144756 Autolearn: 0 AvgScore: 14.56 AvgScanTime: 1.43 sec Ham: 344843 Autolearn: 0 AvgScore: -1.57 AvgScanTime: 1.33 sec Time Spent Running SA: 184.57 hours Time Spent Processing Spam: 57.32 hours Time Spent Processing Ham: 127.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136491 89.19 94.29 87.05 2 DKIM_SIGNED 117909 76.40 81.45 74.28 3 XM_B_Unicode 113035 73.09 78.09 70.99 4 XM_DK_Pass 112354 74.31 77.62 72.92 5 RELAYCOUNTRY_US 112288 80.62 77.57 81.90 6 DKIM_VALID 111746 73.54 77.20 72.01 7 DCC_CHECK 104155 45.26 71.95 34.06 8 XM_B_SpammyWords 93979 50.26 64.92 44.10 9 XMListUnsubscribeExists 89872 52.92 62.09 49.07 10 DKIM_VALID_AU 83374 56.01 57.60 55.35 11 XM_B_Unicode3 61780 43.11 42.68 43.30 12 BAYES_50 60163 51.32 41.56 55.42 13 XM_DK_Undo_02 60153 17.48 41.55 7.38 14 XM_B_SpammyWords2 50595 22.90 34.95 17.84 15 LOC_TINY_FONT_1 49095 25.14 33.92 21.45 16 HTML_FONT_LOW_CONTRAST 47987 28.70 33.15 26.83 17 BAYES_99 47722 14.06 32.97 6.13 18 MIME_HTML_ONLY 47066 23.86 32.51 20.23 19 TR_XM_DKIM_Undo 45800 12.88 31.64 5.01 20 DKIM_VALID_EF 43199 28.26 29.84 27.60 21 FVGT_m_MULTI_ODD 42968 25.32 29.68 23.49 22 DCC_CHECK_NEGATIVE 40539 54.70 28.01 65.90 23 T_KAM_HTML_FONT_INVALID 38624 21.34 26.68 19.09 24 BAYES_999 37085 11.12 25.62 5.03 25 RCVD_IN_MSPIKE_H2 36582 22.65 25.27 21.55 26 T_TM2_M_HEADER_IN_MSG 35054 27.96 24.22 29.53 27 RELAYCOUNTRY_META 34213 9.54 23.63 3.62 28 TR_DCC_Bayes_99 33966 8.27 23.46 1.89 29 XM_Body_Dirty_Words 33932 14.62 23.44 10.91 30 XMSubLong 33442 22.65 23.10 22.47 31 XM_Multi_Part_URI 26200 13.73 18.10 11.89 32 RCVD_IN_MSPIKE_WL 25965 25.76 17.94 29.05 33 FSL_BULK_SIG 24805 7.36 17.14 3.26 34 XM_B_Unsub 22618 11.89 15.62 10.33 35 UNTRUSTED_Relay 22170 5.38 15.32 1.21 36 LOTS_OF_MONEY 20998 9.98 14.51 8.08 37 BOTNET 20068 5.25 13.86 1.64 38 UNPARSEABLE_RELAY 19722 9.62 13.62 7.94 39 TR_XM_UnparsRelay 19434 8.32 13.43 6.18 40 TR_XM_SpammyWords4 17324 7.00 11.97 4.92 41 BOTNET_IPINHOSTNAME 17242 6.86 11.91 4.74 42 TR_XM_SpammyRelay 16978 4.54 11.73 1.53 43 XM_B_SpammyWords3 16818 6.09 11.62 3.78 44 RCVD_IN_MSPIKE_H3 16803 14.86 11.61 16.23 45 RCVD_IN_BL_SPAMCOP_NET 16333 3.87 11.28 0.75 46 XM_UncommonTLD01 15774 5.65 10.90 3.44 47 XMSexyCombo_05 15646 5.48 10.81 3.25 48 HTML_IMAGE_RATIO_02 14610 7.34 10.09 6.18 49 TR_XM_SpammyWords2 14164 3.52 9.78 0.89 50 BAYES_80 12532 5.83 8.66 4.65 51 XM_Evil_Numbers_Gen 12248 7.93 8.46 7.71 52 XM_UB50 12004 3.00 8.29 0.78 53 XM_SendGrid 11412 6.45 7.88 5.85 54 RCVD_IN_MSPIKE_BL 11085 3.20 7.66 1.33 55 TR_XM_MSPIKECOMBO 11042 3.18 7.63 1.32 56 BAYES_60 10720 8.87 7.41 9.48 57 T_REMOTE_IMAGE 10593 4.85 7.32 3.81 58 TR_XM_MaxUnsub 10571 2.80 7.30 0.92 59 LotsOfNums_01 9074 8.75 6.27 9.80 60 MPART_ALT_DIFF 8772 5.75 6.06 5.62 61 RCVD_IN_MSPIKE_H4 8624 9.43 5.96 10.88 62 XM_SPF_SoftFail 8623 3.49 5.96 2.45 63 XM_B_Phish_Phrases 8345 4.14 5.76 3.46 64 KHOP_HELO_FCRDNS 8301 2.89 5.73 1.70 65 XMSubMetaSx_00 8188 4.10 5.66 3.45 66 XM_H_Long_From01 8155 5.47 5.63 5.40 67 TR_XM_PhishingBody 8149 4.32 5.63 3.77 68 TR_XM_DK_SendGrid 7352 4.12 5.08 3.71 69 BAYES_95 7225 3.52 4.99 2.91 70 HTML_IMAGE_RATIO_06 7187 4.11 4.96 3.76 71 TooManyTo_001 7129 7.29 4.92 8.28 72 TR_XM_SpammyWords5 7032 2.59 4.86 1.63 73 RCVD_IN_PSBL 6745 1.46 4.66 0.12 74 RELAYCOUNTRY_CA 6727 1.92 4.65 0.77 75 TR_XM_SPAMCOP 6516 1.50 4.50 0.25 76 HTML_MIME_NO_HTML_TAG 6267 2.99 4.33 2.42 77 HTML_IMAGE_RATIO_04 6186 5.04 4.27 5.35 78 DKIM_INVALID 6163 2.86 4.26 2.27 79 XMStrtUSub 6155 4.42 4.25 4.50 80 TR_XM_SpammyWords3 6012 1.61 4.15 0.54 81 RCVD_IN_VALIDITY_RPBL 5909 1.22 4.08 0.02 82 BOTNET_NORDNS 5838 1.21 4.03 0.02 83 XM_B_SpammyTLD 5820 2.78 4.02 2.25 84 XM_B_Investor 5695 2.41 3.93 1.77 85 RCVD_IN_MSPIKE_L5 5409 1.23 3.74 0.18 86 XMNumbers 5367 3.68 3.71 3.67 87 XM_DIRTYINTL 5355 1.30 3.70 0.30 88 XM_OfRef6 5210 1.84 3.60 1.09 89 T_XMDrugObfuBody_14 5130 2.42 3.54 1.95 90 TM2_M_VERY_LONG_WORD 5128 2.03 3.54 1.39 91 MIME_QP_LONG_LINE 4968 5.39 3.43 6.22 92 RCVD_IN_VALIDITY_SAFE 4900 4.26 3.39 4.63 93 T_FILL_THIS_FORM_SHORT 4886 1.56 3.38 0.80 94 MIME_HTML_ONLY_MULTI 4807 3.36 3.32 3.38 95 SUBJ_ALL_CAPS 4554 2.21 3.15 1.81 96 XM_B_Phish66 4439 2.38 3.07 2.10 97 MIME_HTML_MOSTLY 4347 2.92 3.00 2.88 98 SpammyFromTLD_01 4231 1.38 2.92 0.73 99 RCVD_IN_IADB_LISTED 4156 5.33 2.87 6.37 100 DKIM_ADSP_CUSTOM_MED 4152 1.44 2.87 0.84 101 RCVD_IN_VALIDITY_CERTIFIED 4135 3.82 2.86 4.22 102 T_XMDrugObfuBody_08 3975 2.06 2.75 1.77 103 TM2_M_URI_OPT_OUT 3972 2.88 2.74 2.94 104 FORGED_GMAIL_RCVD 3952 1.12 2.73 0.44 105 HTML_TAG_BALANCE_CENTER 3900 0.86 2.69 0.09 106 NML_ADSP_CUSTOM_MED 3825 1.17 2.64 0.55 107 RCVD_IN_MSPIKE_L3 3750 1.15 2.59 0.55 108 URI_NOVOWEL 3743 2.97 2.59 3.13 109 PDS_OTHER_BAD_TLD 3724 0.92 2.57 0.23 110 XM_DK_Undo_01 3555 1.79 2.46 1.52 111 RCVD_IN_IADB_SPF 3473 4.68 2.40 5.64 112 XM_B_Unsub2 3449 1.88 2.38 1.67 113 TR_Mismatch_TLD_02 3433 0.76 2.37 0.08 114 TR_XM_MSPIKECOMBO2 3362 0.84 2.32 0.21 115 MAILING_LIST_MULTI 3359 2.57 2.32 2.67 116 TR_XM_NoHeaderRelay 3349 0.81 2.31 0.18 117 HTML_TAG_BALANCE_BODY 3345 1.18 2.31 0.71 118 RELAYCOUNTRY_PL 3273 0.70 2.26 0.04 119 XMDiploma_00 3271 1.57 2.26 1.28 120 RCVD_IN_IADB_DK 3217 4.13 2.22 4.93 121 XM_CamelCaseFrm001 3192 1.84 2.21 1.69 122 T_TooManySym_01 3172 4.74 2.19 5.81 123 HTML_FONT_SIZE_LARGE 3169 0.72 2.19 0.10 124 HTML_IMAGE_ONLY_24 3149 0.91 2.18 0.38 125 ANY_BOUNCE_MESSAGE 3121 2.64 2.16 2.85 126 RCVD_IN_IADB_SENDERID 3100 4.23 2.14 5.11 127 XM_B_SpammyWords4 3084 1.12 2.13 0.69 128 DATE_IN_PAST_12_24 3083 0.65 2.13 0.02 129 HTML_IMAGE_RATIO_08 3038 2.16 2.10 2.19 130 HOSTED_IMG_DIRECT_MX 3027 0.62 2.09 0.00 131 XM_DrugUnitList 3024 0.62 2.09 0.00 132 HTML_IMAGE_ONLY_08 2969 0.70 2.05 0.14 133 XM_UB99 2936 0.60 2.03 0.00 134 BOUNCE_MESSAGE 2879 2.58 1.99 2.83 135 AMAZON_IMG_NOT_RCVD_AMZN 2875 0.60 1.99 0.02 136 TR_XM_NOT_AMZN 2875 0.60 1.99 0.02 137 SpammyFromTLD_02 2815 0.87 1.94 0.41 138 TR_XM_COVIDMETA4 2798 0.70 1.93 0.18 139 RELAYCOUNTRY_DE 2767 0.75 1.91 0.26 140 XM_B_COVIDMETA 2728 0.96 1.88 0.57 141 T_XMDrugObfuBody_00 2720 1.04 1.88 0.69 142 URI_HEX 2685 1.39 1.85 1.19 143 XM_URI_RBL 2674 0.65 1.85 0.15 144 XM_ShortIntro_01 2663 1.01 1.84 0.66 145 USER_IN_DEF_DKIM_WL 2642 8.78 1.83 11.70 146 MONEY_NOHTML 2639 0.60 1.82 0.08 147 TR_Symld_Words 2621 1.78 1.81 1.77 148 BAYES_40 2613 4.10 1.81 5.06 149 XMBody_17 2574 0.81 1.78 0.40 150 WANT_TO_ORDER 2510 0.51 1.73 0.00 151 RCVD_IN_IADB_VOUCHED 2501 3.17 1.73 3.78 152 XM_UB60 2461 0.55 1.70 0.07 153 TR_XM_SB_Phish 2432 1.89 1.68 1.98 154 TR_XM_PHPDW 2429 0.73 1.68 0.33 155 BODY_URI_ONLY 2428 0.50 1.68 0.01 156 GOOG_STO_IMG_HTML 2412 0.49 1.67 0.00 157 XMSexyCombo_01 2400 0.88 1.66 0.55 158 MIXED_CENTER_CASE 2355 0.48 1.63 0.00 159 MIXED_HREF_CASE 2353 0.48 1.63 0.00 160 HTML_FONT_FACE_BAD 2342 1.28 1.62 1.14 161 MIXED_IMG_CASE 2338 0.48 1.62 0.01 162 FROM_EXCESS_BASE64 2336 2.42 1.61 2.76 163 MIXED_AREA_CASE 2336 0.48 1.61 0.00 164 MIXED_FONT_CASE 2333 0.48 1.61 0.00 165 XMSubPhish11 2324 1.86 1.61 1.97 166 TR_XM_PHPForged 2312 0.67 1.60 0.28 167 TR_XM_FormFill2 2285 0.67 1.58 0.29 168 RELAYCOUNTRY_FR 2274 0.61 1.57 0.20 169 XM_H_PHPOS 2272 0.66 1.57 0.28 170 MPART_ALT_DIFF_COUNT 2266 0.83 1.57 0.51 171 FROM_ADDR_WS 2211 0.45 1.53 0.00 172 XMReplyNow 2195 0.64 1.52 0.28 173 T_XMHurry_00 2187 0.77 1.51 0.46 174 URIBL_DBL_SPAM 2176 0.45 1.50 0.01 175 XM_UB999 2160 0.44 1.49 0.00 176 TM2_M_A_HREF_HREF 2155 0.86 1.49 0.59 177 XMStockSpam_06 2153 1.02 1.49 0.83 178 MISSING_HEADERS 2135 0.71 1.47 0.39 179 LOADSA_MONEY_COMBO 2134 0.46 1.47 0.04 180 URIBL_BLACK 2119 0.47 1.46 0.06 181 HTML_FONT_SIZE_HUGE 2105 0.47 1.45 0.05 182 XMBounce_01 2102 0.44 1.45 0.02 183 FROM_SUSPICIOUS_NTLD 2098 0.46 1.45 0.04 184 TR_LOTS_OF_MONEY3 2087 0.62 1.44 0.27 185 XMGenDplmaNmb 2069 0.97 1.43 0.78 186 XM_UB80 2009 0.42 1.39 0.02 187 ALL_TRUSTED 1985 11.48 1.37 15.72 188 FROM_SUSPICIOUS_NTLD_FP 1937 0.42 1.34 0.04 189 RELAYCOUNTRY_RO 1918 0.40 1.32 0.01 190 XM_OfRef7 1900 0.46 1.31 0.11 191 TR_Sbj_FN_Bdy 1899 0.49 1.31 0.14 192 RELAYCOUNTRY_AU 1896 0.68 1.31 0.41 193 XMMailDelErr 1894 0.39 1.31 0.00 194 XM_S_SpammyWords 1891 0.55 1.31 0.23 195 TR_XM_Spammywords 1890 0.55 1.31 0.23 196 RCVD_IN_MSPIKE_L4 1883 0.80 1.30 0.59 197 XM_GoogleGroups 1881 1.41 1.30 1.46 198 XFER_LOTSA_MONEY 1874 0.40 1.29 0.02 199 HTML_SHORT_LINK_IMG_1 1869 0.39 1.29 0.02 200 XMBdyGiftCard01 1851 0.97 1.28 0.85 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 300181 89.19 94.29 87.05 2 RELAYCOUNTRY_US 282417 80.62 77.57 81.90 3 DKIM_SIGNED 256149 76.40 81.45 74.28 4 XM_DK_Pass 251472 74.31 77.62 72.92 5 DKIM_VALID 248328 73.54 77.20 72.01 6 XM_B_Unicode 244793 73.09 78.09 70.99 7 DCC_CHECK_NEGATIVE 227250 54.70 28.01 65.90 8 BAYES_50 191095 51.32 41.56 55.42 9 DKIM_VALID_AU 190866 56.01 57.60 55.35 10 XMListUnsubscribeExists 169217 52.92 62.09 49.07 11 XM_B_SpammyWords 152077 50.26 64.92 44.10 12 XM_B_Unicode3 149308 43.11 42.68 43.30 13 DCC_CHECK 117453 45.26 71.95 34.06 14 T_TM2_M_HEADER_IN_MSG 101825 27.96 24.22 29.53 15 RCVD_IN_MSPIKE_WL 100171 25.76 17.94 29.05 16 DKIM_VALID_EF 95168 28.26 29.84 27.60 17 HTML_FONT_LOW_CONTRAST 92520 28.70 33.15 26.83 18 FVGT_m_MULTI_ODD 81016 25.32 29.68 23.49 19 XMSubLong 77475 22.65 23.10 22.47 20 RCVD_IN_MSPIKE_H2 74303 22.65 25.27 21.55 21 LOC_TINY_FONT_1 73982 25.14 33.92 21.45 22 MIME_HTML_ONLY 69748 23.86 32.51 20.23 23 T_KAM_HTML_FONT_INVALID 65846 21.34 26.68 19.09 24 XM_B_SpammyWords2 61509 22.90 34.95 17.84 25 RCVD_IN_MSPIKE_H3 55956 14.86 11.61 16.23 26 ALL_TRUSTED 54221 11.48 1.37 15.72 27 XM_Multi_Part_URI 41017 13.73 18.10 11.89 28 USER_IN_DEF_DKIM_WL 40360 8.78 1.83 11.70 29 XM_Body_Dirty_Words 37630 14.62 23.44 10.91 30 RCVD_IN_MSPIKE_H4 37522 9.43 5.96 10.88 31 BAYES_00 35813 7.56 0.82 10.39 32 XM_B_Unsub 35610 11.89 15.62 10.33 33 LotsOfNums_01 33786 8.75 6.27 9.80 34 BAYES_60 32694 8.87 7.41 9.48 35 TooManyTo_001 28570 7.29 4.92 8.28 36 LOTS_OF_MONEY 27856 9.98 14.51 8.08 37 UNPARSEABLE_RELAY 27366 9.62 13.62 7.94 38 XM_DKIMWhitelistDomains 26844 5.50 0.07 7.78 39 XM_Evil_Numbers_Gen 26583 7.93 8.46 7.71 40 XM_DK_Undo_02 25447 17.48 41.55 7.38 41 IN_ZIMBRA_NJ_WHITELIST 24191 4.96 0.08 7.02 42 TR_XM_DK_Bayes 22103 4.66 0.50 6.41 43 RCVD_IN_IADB_LISTED 21955 5.33 2.87 6.37 44 TR_XM_DK_Bayes1 21686 4.58 0.50 6.29 45 MIME_QP_LONG_LINE 21437 5.39 3.43 6.22 46 HTML_IMAGE_RATIO_02 21323 7.34 10.09 6.18 47 TR_XM_UnparsRelay 21320 8.32 13.43 6.18 48 BAYES_99 21135 14.06 32.97 6.13 49 XM_SendGrid 20178 6.45 7.88 5.85 50 T_TooManySym_01 20041 4.74 2.19 5.81 51 RCVD_IN_IADB_SPF 19451 4.68 2.40 5.64 52 MPART_ALT_DIFF 19371 5.75 6.06 5.62 53 TR_XM_DK_Bayes2 18976 4.00 0.43 5.50 54 XM_H_Long_From01 18637 5.47 5.63 5.40 55 HTML_IMAGE_RATIO_04 18466 5.04 4.27 5.35 56 RCVD_IN_IADB_SENDERID 17626 4.23 2.14 5.11 57 XM_PDF 17468 3.83 0.88 5.07 58 BAYES_40 17454 4.10 1.81 5.06 59 BAYES_999 17356 11.12 25.62 5.03 60 TR_XM_DKIM_Undo 17269 12.88 31.64 5.01 61 RCVD_IN_IADB_DK 16991 4.13 2.22 4.93 62 TR_XM_SpammyWords4 16965 7.00 11.97 4.92 63 BOTNET_IPINHOSTNAME 16329 6.86 11.91 4.74 64 BAYES_80 16020 5.83 8.66 4.65 65 RCVD_IN_VALIDITY_SAFE 15957 4.26 3.39 4.63 66 XMStrtUSub 15509 4.42 4.25 4.50 67 RCVD_IN_VALIDITY_CERTIFIED 14548 3.82 2.86 4.22 68 T_REMOTE_IMAGE 13148 4.85 7.32 3.81 69 RCVD_IN_IADB_VOUCHED 13031 3.17 1.73 3.78 70 XM_B_SpammyWords3 13018 6.09 11.62 3.78 71 TR_XM_PhishingBody 12996 4.32 5.63 3.77 72 HTML_IMAGE_RATIO_06 12950 4.11 4.96 3.76 73 TR_XM_DK_SendGrid 12806 4.12 5.08 3.71 74 XMNumbers 12641 3.68 3.71 3.67 75 RELAYCOUNTRY_META 12482 9.54 23.63 3.62 76 BAYES_20 12396 2.88 1.19 3.59 77 XM_B_Phish_Phrases 11922 4.14 5.76 3.46 78 XMSubMetaSx_00 11903 4.10 5.66 3.45 79 XM_UncommonTLD01 11876 5.65 10.90 3.44 80 MIME_HTML_ONLY_MULTI 11654 3.36 3.32 3.38 81 XM_H_Trusted_IP 11433 2.34 0.00 3.32 82 FSL_BULK_SIG 11230 7.36 17.14 3.26 83 XMSexyCombo_05 11202 5.48 10.81 3.25 84 URI_NOVOWEL 10801 2.97 2.59 3.13 85 T_TooManySym_02 10673 2.39 0.72 3.10 86 TM2_M_URI_OPT_OUT 10139 2.88 2.74 2.94 87 BAYES_95 10018 3.52 4.99 2.91 88 MIME_HTML_MOSTLY 9942 2.92 3.00 2.88 89 ANY_BOUNCE_MESSAGE 9817 2.64 2.16 2.85 90 BOUNCE_MESSAGE 9775 2.58 1.99 2.83 91 FROM_EXCESS_BASE64 9507 2.42 1.61 2.76 92 MAILING_LIST_MULTI 9215 2.57 2.32 2.67 93 RCVD_IN_IADB_OPTIN 8708 2.10 1.08 2.53 94 XM_SPF_SoftFail 8440 3.49 5.96 2.45 95 HTML_MIME_NO_HTML_TAG 8354 2.99 4.33 2.42 96 BAYES_05 8215 1.85 0.58 2.38 97 DKIM_INVALID 7821 2.86 4.26 2.27 98 XM_B_SpammyTLD 7774 2.78 4.02 2.25 99 HTML_IMAGE_RATIO_08 7540 2.16 2.10 2.19 100 TVD_RCVD_IP 7522 1.62 0.28 2.18 101 TooManyTo_002 7252 1.82 1.14 2.10 102 XM_B_Phish66 7231 2.38 3.07 2.10 103 TR_XM_SB_Phish 6840 1.89 1.68 1.98 104 INVALID_MSGID 6813 1.44 0.15 1.98 105 XMSubPhish11 6777 1.86 1.61 1.97 106 T_XMDrugObfuBody_14 6726 2.42 3.54 1.95 107 RCVD_IN_MSPIKE_H5 6693 1.48 0.37 1.94 108 TR_DCC_Bayes_99 6515 8.27 23.46 1.89 109 IN_HORDE_ADDRESS_BOOK 6411 1.34 0.10 1.86 110 HELO_NODOT 6311 1.45 0.55 1.83 111 HELO_NO_DOMAIN 6308 1.45 0.54 1.83 112 MSGID_NOFQDN1 6283 1.31 0.08 1.82 113 SUBJ_ALL_CAPS 6254 2.21 3.15 1.81 114 TR_Symld_Words 6118 1.78 1.81 1.77 115 XM_B_Investor 6105 2.41 3.93 1.77 116 T_XMDrugObfuBody_08 6088 2.06 2.75 1.77 117 TO_MALFORMED 6052 1.24 0.01 1.76 118 KHOP_HELO_FCRDNS 5867 2.89 5.73 1.70 119 XM_CamelCaseFrm001 5816 1.84 2.21 1.69 120 XM_B_Unsub2 5747 1.88 2.38 1.67 121 BOTNET 5655 5.25 13.86 1.64 122 TR_XM_SpammyWords5 5626 2.59 4.86 1.63 123 XM_H_Long_From02 5297 1.43 1.18 1.54 124 TR_XM_SpammyRelay 5263 4.54 11.73 1.53 125 XM_DK_Undo_01 5231 1.79 2.46 1.52 126 XM_GoogleGroups 5038 1.41 1.30 1.46 127 TooManyTo_003 4818 1.29 1.03 1.40 128 TM2_M_VERY_LONG_WORD 4797 2.03 3.54 1.39 129 XMGappySubj_01 4578 1.03 0.30 1.33 130 RCVD_IN_MSPIKE_BL 4575 3.20 7.66 1.33 131 TR_XM_MSPIKECOMBO 4538 3.18 7.63 1.32 132 XMDiploma_00 4429 1.57 2.26 1.28 133 XMSubNoVowel 4306 1.25 1.25 1.25 134 UNTRUSTED_Relay 4160 5.38 15.32 1.21 135 URI_HEX 4100 1.39 1.85 1.19 136 XMCapTrack 3963 0.96 0.51 1.15 137 HTML_FONT_FACE_BAD 3939 1.28 1.62 1.14 138 XM_OfRef6 3776 1.84 3.60 1.09 139 TVD_SPACE_RATIO 3636 0.77 0.09 1.05 140 XMBSHREFv2 3613 0.83 0.31 1.05 141 XMPhish30 3456 1.07 1.23 1.00 142 TooManyTo_004 3420 0.98 0.96 0.99 143 TR_XM_MaxUnsub 3162 2.80 7.30 0.92 144 RCVD_IN_RP_SAFE 3150 0.85 0.68 0.91 145 XMBody_95 3094 0.68 0.17 0.90 146 TR_XM_SpammyWords2 3068 3.52 9.78 0.89 147 RCVD_IN_RP_CERTIFIED 2929 0.76 0.53 0.85 148 XMBdyGiftCard01 2914 0.97 1.28 0.85 149 DKIM_ADSP_CUSTOM_MED 2900 1.44 2.87 0.84 150 XMStockSpam_06 2865 1.02 1.49 0.83 151 RELAYCOUNTRY_GB 2787 0.89 1.09 0.81 152 T_FILL_THIS_FORM_SHORT 2752 1.56 3.38 0.80 153 TooManyTo_005 2717 0.82 0.89 0.79 154 XM_UB50 2704 3.00 8.29 0.78 155 URI_TRY_3LD 2702 0.86 1.03 0.78 156 HTML_IMAGE_ONLY_20 2699 0.74 0.62 0.78 157 XMGenDplmaNmb 2684 0.97 1.43 0.78 158 RELAYCOUNTRY_CA 2664 1.92 4.65 0.77 159 TR_MetaPhish_Combo_01 2608 0.81 0.93 0.76 160 RCVD_IN_BL_SPAMCOP_NET 2601 3.87 11.28 0.75 161 XMHTML_After_End 2560 0.85 1.12 0.74 162 HTTPS_HTTP_MISMATCH 2543 0.78 0.88 0.74 163 SpammyFromTLD_01 2504 1.38 2.92 0.73 164 T_TooManySym_03 2494 0.60 0.30 0.72 165 XMBrknScrpt_02 2461 0.76 0.86 0.71 166 HTML_TAG_BALANCE_BODY 2452 1.18 2.31 0.71 167 XM_B_SpammyWords4 2385 1.12 2.13 0.69 168 T_XMDrugObfuBody_00 2383 1.04 1.88 0.69 169 T_OBFU_PDF_ATTACH 2265 0.50 0.12 0.66 170 XM_ShortIntro_01 2265 1.01 1.84 0.66 171 XMNoVowels 2207 0.58 0.45 0.64 172 XM_B_COPY_HTML 2158 0.61 0.56 0.63 173 TR_MSPIKEBAYES00 2071 0.43 0.02 0.60 174 XM_ProductURIs 2043 0.72 1.01 0.59 175 TM2_M_A_HREF_HREF 2043 0.86 1.49 0.59 176 XMLngstWrd_00 2039 0.74 1.10 0.59 177 RCVD_IN_MSPIKE_L4 2029 0.80 1.30 0.59 178 XM_H_PHPMailer 2013 0.65 0.80 0.58 179 XM_shorewaves_Whitelist 1979 0.40 0.00 0.57 180 XM_B_COVIDMETA 1974 0.96 1.88 0.57 181 FROM_GOV_DKIM_AU 1957 0.43 0.11 0.57 182 FROM_GOV_SPOOF 1937 0.42 0.08 0.56 183 XMSexyCombo_01 1900 0.88 1.66 0.55 184 XM_D_tchamptons_WL 1890 0.39 0.01 0.55 185 RCVD_IN_MSPIKE_L3 1883 1.15 2.59 0.55 186 NML_ADSP_CUSTOM_MED 1881 1.17 2.64 0.55 187 T_Symld_Words_02 1855 0.65 0.93 0.54 188 TR_XM_SpammyWords3 1851 1.61 4.15 0.54 189 SHORT_HELO_AND_INLINE_IMAGE 1808 0.39 0.08 0.52 190 XMLngstWrd_01 1792 0.67 1.04 0.52 191 MPART_ALT_DIFF_COUNT 1774 0.83 1.57 0.51 192 RCVD_IN_SORBS_DUL 1722 0.41 0.20 0.50 193 XM_B_DNDMA 1589 0.52 0.67 0.46 194 T_XMHurry_00 1577 0.77 1.51 0.46 195 FORGED_GMAIL_RCVD 1533 1.12 2.73 0.44 196 XMLngstWrd_02 1524 0.60 0.99 0.44 197 RDNS_DYNAMIC 1503 0.52 0.73 0.44 198 XMMoneyMeta_00 1486 0.49 0.61 0.43 199 XMHTMLBadTable_001 1436 0.61 1.06 0.42 200 SpammyFromTLD_02 1421 0.87 1.94 0.41 ----------------------------------------------------------------------