Email: 511150 Autolearn: 0 AvgScore: 3.09 AvgScanTime: 1.37 sec Spam: 147281 Autolearn: 0 AvgScore: 13.79 AvgScanTime: 1.49 sec Ham: 363869 Autolearn: 0 AvgScore: -1.24 AvgScanTime: 1.32 sec Time Spent Running SA: 194.43 hours Time Spent Processing Spam: 60.96 hours Time Spent Processing Ham: 133.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 141297 90.06 95.94 87.67 2 DKIM_SIGNED 125517 74.85 85.22 70.65 3 XM_DK_Pass 122706 73.52 83.31 69.55 4 DKIM_VALID 121488 72.62 82.49 68.63 5 RELAYCOUNTRY_US 117218 78.58 79.59 78.17 6 XM_B_Unicode 113924 70.63 77.35 67.91 7 DCC_CHECK 101473 43.44 68.90 33.14 8 XMListUnsubscribeExists 101301 53.49 68.78 47.30 9 XM_B_SpammyWords 98431 52.72 66.83 47.00 10 DKIM_VALID_AU 91428 55.43 62.08 52.74 11 XM_DK_Undo_02 62572 16.99 42.48 6.67 12 XM_B_Unicode3 62411 40.67 42.38 39.98 13 BAYES_50 60407 50.05 41.01 53.70 14 XM_B_SpammyWords2 56689 26.57 38.49 21.74 15 LOC_TINY_FONT_1 51523 25.22 34.98 21.28 16 TR_XM_DKIM_Undo 51172 13.47 34.74 4.85 17 BAYES_99 50794 13.57 34.49 5.10 18 FVGT_m_MULTI_ODD 50190 26.98 34.08 24.11 19 HTML_FONT_LOW_CONTRAST 49664 29.19 33.72 27.36 20 MIME_HTML_ONLY 47929 23.12 32.54 19.30 21 DCC_CHECK_NEGATIVE 45770 56.51 31.08 66.81 22 DKIM_VALID_EF 40448 26.47 27.46 26.07 23 T_KAM_HTML_FONT_INVALID 40258 21.70 27.33 19.42 24 BAYES_999 39434 10.64 26.77 4.11 25 RCVD_IN_MSPIKE_H2 37438 22.17 25.42 20.86 26 TR_DCC_Bayes_99 35742 8.25 24.27 1.76 27 XMSubLong 33999 21.44 23.08 20.77 28 T_TM2_M_HEADER_IN_MSG 33253 27.16 22.58 29.01 29 XM_Body_Dirty_Words 33053 14.12 22.44 10.75 30 RCVD_IN_MSPIKE_WL 32118 26.61 21.81 28.55 31 RELAYCOUNTRY_META 30855 8.84 20.95 3.93 32 XM_Multi_Part_URI 25654 13.36 17.42 11.72 33 RCVD_IN_MSPIKE_H3 21688 15.76 14.73 16.17 34 XM_B_Unsub 21468 13.55 14.58 13.13 35 UNPARSEABLE_RELAY 20986 9.55 14.25 7.65 36 TR_XM_UnparsRelay 20240 8.24 13.74 6.01 37 BOTNET_IPINHOSTNAME 20004 7.17 13.58 4.57 38 XM_B_SpammyWords3 19555 7.00 13.28 4.45 39 LOTS_OF_MONEY 19290 8.52 13.10 6.67 40 FSL_BULK_SIG 18432 5.80 12.51 3.08 41 TR_XM_SpammyWords2 17307 4.14 11.75 1.07 42 XMSexyCombo_05 16730 5.35 11.36 2.92 43 TR_XM_SpammyWords4 16633 6.14 11.29 4.06 44 TR_XM_SpammyRelay 16601 4.45 11.27 1.68 45 BOTNET 16029 4.30 10.88 1.63 46 UNTRUSTED_Relay 15416 3.90 10.47 1.24 47 MPART_ALT_DIFF 14525 6.75 9.86 5.49 48 RCVD_IN_BL_SPAMCOP_NET 13699 3.17 9.30 0.69 49 XM_UncommonTLD01 13348 5.09 9.06 3.49 50 XM_Evil_Numbers_Gen 12514 7.89 8.50 7.64 51 HTML_IMAGE_RATIO_02 12461 6.16 8.46 5.23 52 BAYES_80 11760 5.46 7.98 4.44 53 RCVD_IN_MSPIKE_BL 11143 3.20 7.57 1.44 54 XM_SendGrid 11139 5.97 7.56 5.32 55 TR_XM_MSPIKECOMBO 11092 3.19 7.53 1.43 56 BAYES_60 10957 8.77 7.44 9.32 57 XM_H_Long_From01 10668 5.70 7.24 5.08 58 TR_XM_PhishingBody 10265 4.43 6.97 3.40 59 XMSubMetaSx_00 10044 4.28 6.82 3.25 60 RCVD_IN_MSPIKE_H4 9936 9.66 6.75 10.83 61 HTML_MIME_NO_HTML_TAG 9758 3.81 6.63 2.68 62 LotsOfNums_01 9613 8.29 6.53 9.00 63 TR_XM_MaxUnsub 9219 2.29 6.26 0.68 64 RELAYCOUNTRY_CA 9217 2.59 6.26 1.10 65 TM2_M_VERY_LONG_WORD 8923 3.25 6.06 2.11 66 MIME_HTML_ONLY_MULTI 8805 4.48 5.98 3.88 67 XM_B_Phish_Phrases 8524 4.03 5.79 3.32 68 XM_B_SpammyTLD 8433 3.11 5.73 2.06 69 TooManyTo_001 8122 10.12 5.51 11.98 70 TR_XM_SPAMCOP 7537 1.63 5.12 0.22 71 TR_XM_DK_SendGrid 7315 3.81 4.97 3.35 72 HTML_IMAGE_RATIO_04 7142 5.07 4.85 5.16 73 TR_XM_SpammyWords3 6936 1.81 4.71 0.63 74 XMStrtUSub 6721 4.48 4.56 4.44 75 XM_UB50 6624 1.84 4.50 0.76 76 XM_B_Investor 6610 2.36 4.49 1.50 77 XM_B_Phish66 6509 2.75 4.42 2.07 78 XM_SPF_SoftFail 6434 2.86 4.37 2.25 79 BAYES_95 6331 3.48 4.30 3.14 80 XM_DIRTYINTL 6328 1.49 4.30 0.35 81 RCVD_IN_MSPIKE_L5 6079 1.22 4.13 0.05 82 T_REMOTE_IMAGE 6036 4.01 4.10 3.97 83 XM_GoogleGroups 6029 2.60 4.09 1.99 84 HTML_IMAGE_RATIO_06 6019 3.88 4.09 3.80 85 XMLngstWrd_00 5791 2.09 3.93 1.34 86 XMLngstWrd_01 5708 2.03 3.88 1.28 87 MIME_QP_LONG_LINE 5706 8.05 3.87 9.73 88 XM_OfRef6 5693 1.73 3.87 0.87 89 MIME_HTML_MOSTLY 5607 2.79 3.81 2.38 90 XMLngstWrd_02 5589 1.93 3.79 1.17 91 XMNumbers 5564 3.45 3.78 3.32 92 PDS_OTHER_BAD_TLD 5517 1.22 3.75 0.20 93 T_XMDrugObfuBody_14 5493 2.38 3.73 1.84 94 XMLngstWrd_03 5170 1.79 3.51 1.09 95 XMLngstWrd_04 5101 1.73 3.46 1.03 96 URIBL_DBL_SPAM 5052 1.00 3.43 0.01 97 HTML_TITLE_SUBJ_DIFF 5013 1.57 3.40 0.83 98 ALL_TRUSTED 4998 14.69 3.39 19.26 99 TM2_M_URI_OPT_OUT 4972 5.76 3.38 6.73 100 SpammyFromTLD_01 4966 1.50 3.37 0.75 101 UPPERCASE_75_100 4939 1.55 3.35 0.83 102 TR_XM_SpammyWords5 4827 1.97 3.28 1.44 103 URI_NOVOWEL 4729 2.79 3.21 2.62 104 KHOP_HELO_FCRDNS 4600 2.11 3.12 1.70 105 T_XMDrugObfuBody_08 4410 1.99 2.99 1.59 106 XMDiploma_00 4173 1.83 2.83 1.42 107 XM_DK_Undo_01 4057 1.94 2.75 1.61 108 RCVD_IN_VALIDITY_SAFE 4054 3.88 2.75 4.34 109 DKIM_INVALID 4029 2.23 2.74 2.02 110 SpammyFromTLD_02 4022 1.09 2.73 0.43 111 HTML_IMAGE_RATIO_08 3936 2.37 2.67 2.24 112 RCVD_IN_MSPIKE_L3 3912 1.29 2.66 0.73 113 RCVD_IN_IADB_LISTED 3899 4.86 2.65 5.76 114 T_TooManySym_01 3828 4.54 2.60 5.33 115 RCVD_IN_VALIDITY_RPBL 3773 0.77 2.56 0.05 116 XM_CamelCaseFrm001 3702 2.03 2.51 1.84 117 T_FILL_THIS_FORM_SHORT 3568 1.31 2.42 0.86 118 XM_B_SpammyWords4 3561 1.07 2.42 0.52 119 RCVD_IN_PSBL 3417 0.69 2.32 0.03 120 RCVD_IN_VALIDITY_CERTIFIED 3403 3.50 2.31 3.98 121 XM_B_Unsub2 3393 2.08 2.30 1.99 122 XMBody_17 3300 0.93 2.24 0.40 123 URI_PHP_REDIR 3293 0.64 2.24 0.00 124 URI_HEX 3288 1.55 2.23 1.27 125 MAILING_LIST_MULTI 3283 2.59 2.23 2.74 126 RCVD_IN_IADB_SPF 3215 4.26 2.18 5.10 127 TR_Mismatch_TLD_01 3156 0.79 2.14 0.24 128 TR_XM_MSPIKECOMBO2 3091 0.75 2.10 0.21 129 TR_XM_PHPDW 3058 0.86 2.08 0.37 130 USER_IN_DEF_DKIM_WL 2997 8.63 2.03 11.30 131 TR_XM_PHPForged 2996 0.82 2.03 0.33 132 XMSexyCombo_01 2944 0.83 2.00 0.36 133 RCVD_IN_IADB_DK 2918 3.74 1.98 4.45 134 XM_UB99 2880 0.57 1.96 0.00 135 TR_XM_FormFill2 2877 0.80 1.95 0.34 136 XM_H_PHPOS 2861 0.79 1.94 0.32 137 XM_B_COVIDMETA 2859 0.99 1.94 0.61 138 RCVD_IN_IADB_SENDERID 2841 3.83 1.93 4.60 139 FROM_EXCESS_BASE64 2830 2.81 1.92 3.16 140 HTTPS_HTTP_MISMATCH 2812 1.09 1.91 0.76 141 TR_XM_SB_Phish 2783 2.05 1.89 2.12 142 BAYES_40 2695 4.03 1.83 4.92 143 T_XMDrugObfuBody_00 2559 1.03 1.74 0.75 144 RELAYCOUNTRY_FR 2544 0.68 1.73 0.26 145 XMSubPhish11 2536 1.98 1.72 2.09 146 TR_XM_BayesRelay 2524 0.50 1.71 0.00 147 TR_XM_COVIDMETA1 2462 0.64 1.67 0.23 148 XM_UB60 2454 0.53 1.67 0.07 149 XMStockSpam_06 2420 0.99 1.64 0.73 150 TR_Symld_Words 2417 1.58 1.64 1.56 151 RCVD_IN_IADB_VOUCHED 2373 2.93 1.61 3.47 152 RELAYCOUNTRY_AU 2361 0.68 1.60 0.31 153 XM_UB999 2360 0.46 1.60 0.00 154 SUBJ_ALL_CAPS 2304 1.72 1.56 1.78 155 T_XMHurry_00 2273 0.71 1.54 0.37 156 TR_XM_COVIDMETA4 2232 0.58 1.52 0.20 157 XMHTML_After_End 2163 0.91 1.47 0.69 158 BAYES_20 2107 3.51 1.43 4.36 159 URIBL_BLACK 2105 0.44 1.43 0.04 160 XM_URI_RBL 2091 0.49 1.42 0.11 161 TR_XM_NoHeaderRelay 2083 0.53 1.41 0.17 162 XM_H_Long_From02 2055 1.31 1.40 1.28 163 HTML_IMAGE_ONLY_08 2029 0.47 1.38 0.11 164 BOTNET_NORDNS 2019 0.41 1.37 0.02 165 HTML_TAG_BALANCE_CENTER 1913 0.46 1.30 0.12 166 XM_H_Undi_Recip 1886 0.49 1.28 0.17 167 HTML_TAG_BALANCE_BODY 1871 0.82 1.27 0.64 168 TooManyTo_002 1836 1.97 1.25 2.26 169 TR_XM_FormFill 1833 0.36 1.24 0.01 170 XM_B_SEO 1810 0.45 1.23 0.13 171 TR_XM_MaxSPIKE 1804 0.41 1.22 0.09 172 RELAYCOUNTRY_DE 1765 0.51 1.20 0.23 173 TR_LOTS_OF_MONEY3 1760 0.52 1.19 0.25 174 HOSTED_IMG_DIRECT_MX 1749 0.34 1.19 0.00 175 YOUR_DELIVERY_ADDRESS 1748 0.35 1.19 0.01 176 RELAYCOUNTRY_RU 1740 0.36 1.18 0.03 177 MIXED_CENTER_CASE 1717 0.34 1.17 0.00 178 RELAYCOUNTRY_GB 1700 0.88 1.15 0.76 179 MIXED_HREF_CASE 1695 0.33 1.15 0.00 180 MIXED_IMG_CASE 1685 0.33 1.14 0.00 181 MIXED_AREA_CASE 1684 0.33 1.14 0.00 182 TR_BOTNET_NEGATE 1679 0.59 1.14 0.37 183 XMGenDplmaNmb 1678 0.76 1.14 0.60 184 TooManyTo_003 1668 1.40 1.13 1.51 185 TM2_M_A_HREF_HREF 1668 0.53 1.13 0.29 186 MIXED_FONT_CASE 1659 0.33 1.13 0.00 187 XMPhish30 1656 0.65 1.12 0.46 188 XMMoneyMeta_00 1638 0.77 1.11 0.63 189 HTML_FONT_SIZE_HUGE 1613 0.35 1.10 0.05 190 XM_UB80 1559 0.32 1.06 0.02 191 DIET_1 1557 0.49 1.06 0.27 192 TR_XM_SEO4 1550 0.36 1.05 0.08 193 XM_B_DNDMA 1537 0.54 1.04 0.33 194 HTML_FONT_FACE_BAD 1532 0.92 1.04 0.87 195 TooManyTo_004 1531 1.07 1.04 1.09 196 HTML_FONT_TINY_NORDNS 1527 0.35 1.04 0.07 197 XM_Body_Dirty_Words_01 1511 0.44 1.03 0.21 198 XM_ProductURIs 1488 0.77 1.01 0.67 199 XMBdyGiftCard01 1486 0.77 1.01 0.67 200 DKIM_ADSP_CUSTOM_MED 1440 0.90 0.98 0.87 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 319022 90.06 95.94 87.67 2 RELAYCOUNTRY_US 284447 78.58 79.59 78.17 3 DKIM_SIGNED 257079 74.85 85.22 70.65 4 XM_DK_Pass 253074 73.52 83.31 69.55 5 DKIM_VALID 249718 72.62 82.49 68.63 6 XM_B_Unicode 247092 70.63 77.35 67.91 7 DCC_CHECK_NEGATIVE 243089 56.51 31.08 66.81 8 BAYES_50 195399 50.05 41.01 53.70 9 DKIM_VALID_AU 191919 55.43 62.08 52.74 10 XMListUnsubscribeExists 172116 53.49 68.78 47.30 11 XM_B_SpammyWords 171032 52.72 66.83 47.00 12 XM_B_Unicode3 145485 40.67 42.38 39.98 13 DCC_CHECK 120583 43.44 68.90 33.14 14 T_TM2_M_HEADER_IN_MSG 105553 27.16 22.58 29.01 15 RCVD_IN_MSPIKE_WL 103884 26.61 21.81 28.55 16 HTML_FONT_LOW_CONTRAST 99556 29.19 33.72 27.36 17 DKIM_VALID_EF 94863 26.47 27.46 26.07 18 FVGT_m_MULTI_ODD 87721 26.98 34.08 24.11 19 XM_B_SpammyWords2 79100 26.57 38.49 21.74 20 LOC_TINY_FONT_1 77414 25.22 34.98 21.28 21 RCVD_IN_MSPIKE_H2 75903 22.17 25.42 20.86 22 XMSubLong 75580 21.44 23.08 20.77 23 T_KAM_HTML_FONT_INVALID 70679 21.70 27.33 19.42 24 MIME_HTML_ONLY 70227 23.12 32.54 19.30 25 ALL_TRUSTED 70065 14.69 3.39 19.26 26 RCVD_IN_MSPIKE_H3 58851 15.76 14.73 16.17 27 XM_B_Unsub 47786 13.55 14.58 13.13 28 BAYES_00 45615 9.16 0.82 12.54 29 TooManyTo_001 43593 10.12 5.51 11.98 30 XM_Multi_Part_URI 42650 13.36 17.42 11.72 31 USER_IN_DEF_DKIM_WL 41127 8.63 2.03 11.30 32 RCVD_IN_MSPIKE_H4 39419 9.66 6.75 10.83 33 XM_Body_Dirty_Words 39112 14.12 22.44 10.75 34 MIME_QP_LONG_LINE 35418 8.05 3.87 9.73 35 BAYES_60 33896 8.77 7.44 9.32 36 LotsOfNums_01 32754 8.29 6.53 9.00 37 UNPARSEABLE_RELAY 27833 9.55 14.25 7.65 38 XM_Evil_Numbers_Gen 27796 7.89 8.50 7.64 39 XM_DKIMWhitelistDomains 26376 5.17 0.02 7.25 40 IN_ZIMBRA_NJ_WHITELIST 24516 4.83 0.11 6.74 41 TM2_M_URI_OPT_OUT 24487 5.76 3.38 6.73 42 XM_DK_Undo_02 24275 16.99 42.48 6.67 43 LOTS_OF_MONEY 24272 8.52 13.10 6.67 44 TR_XM_DK_Bayes 23470 4.74 0.50 6.45 45 TR_XM_DK_Bayes1 22967 4.64 0.50 6.31 46 TR_XM_UnparsRelay 21882 8.24 13.74 6.01 47 RCVD_IN_IADB_LISTED 20957 4.86 2.65 5.76 48 TR_XM_DK_Bayes2 20147 4.07 0.43 5.54 49 MPART_ALT_DIFF 19978 6.75 9.86 5.49 50 T_TooManySym_01 19382 4.54 2.60 5.33 51 XM_SendGrid 19363 5.97 7.56 5.32 52 HTML_IMAGE_RATIO_02 19044 6.16 8.46 5.23 53 HTML_IMAGE_RATIO_04 18763 5.07 4.85 5.16 54 RCVD_IN_IADB_SPF 18570 4.26 2.18 5.10 55 BAYES_99 18552 13.57 34.49 5.10 56 XM_H_Long_From01 18469 5.70 7.24 5.08 57 BAYES_40 17900 4.03 1.83 4.92 58 TR_XM_DKIM_Undo 17660 13.47 34.74 4.85 59 RCVD_IN_IADB_SENDERID 16755 3.83 1.93 4.60 60 BOTNET_IPINHOSTNAME 16620 7.17 13.58 4.57 61 XM_PDF 16232 3.41 0.82 4.46 62 XM_B_SpammyWords3 16204 7.00 13.28 4.45 63 RCVD_IN_IADB_DK 16178 3.74 1.98 4.45 64 XMStrtUSub 16155 4.48 4.56 4.44 65 BAYES_80 16141 5.46 7.98 4.44 66 BAYES_20 15851 3.51 1.43 4.36 67 RCVD_IN_VALIDITY_SAFE 15793 3.88 2.75 4.34 68 BAYES_999 14967 10.64 26.77 4.11 69 TR_XM_SpammyWords4 14771 6.14 11.29 4.06 70 RCVD_IN_VALIDITY_CERTIFIED 14467 3.50 2.31 3.98 71 T_REMOTE_IMAGE 14443 4.01 4.10 3.97 72 RELAYCOUNTRY_META 14317 8.84 20.95 3.93 73 MIME_HTML_ONLY_MULTI 14119 4.48 5.98 3.88 74 HTML_IMAGE_RATIO_06 13820 3.88 4.09 3.80 75 SHORT_URI_2 12991 2.72 0.62 3.57 76 XM_UncommonTLD01 12681 5.09 9.06 3.49 77 RCVD_IN_IADB_VOUCHED 12624 2.93 1.61 3.47 78 TR_XM_PhishingBody 12385 4.43 6.97 3.40 79 XM_H_Trusted_IP 12279 2.40 0.00 3.37 80 TR_XM_DK_SendGrid 12181 3.81 4.97 3.35 81 XMNumbers 12076 3.45 3.78 3.32 82 XM_B_Phish_Phrases 12063 4.03 5.79 3.32 83 XMSubMetaSx_00 11809 4.28 6.82 3.25 84 FROM_EXCESS_BASE64 11508 2.81 1.92 3.16 85 BAYES_95 11434 3.48 4.30 3.14 86 FSL_BULK_SIG 11202 5.80 12.51 3.08 87 T_TooManySym_02 10991 2.34 0.65 3.02 88 XMSexyCombo_05 10627 5.35 11.36 2.92 89 BOUNCE_MESSAGE 9988 2.18 0.77 2.74 90 ANY_BOUNCE_MESSAGE 9988 2.18 0.77 2.74 91 MAILING_LIST_MULTI 9952 2.59 2.23 2.74 92 HTML_MIME_NO_HTML_TAG 9736 3.81 6.63 2.68 93 URI_NOVOWEL 9523 2.79 3.21 2.62 94 BAYES_05 9080 1.97 0.66 2.50 95 MIME_HTML_MOSTLY 8649 2.79 3.81 2.38 96 RCVD_IN_IADB_OPTIN 8363 1.91 0.96 2.30 97 TooManyTo_002 8214 1.97 1.25 2.26 98 XM_SPF_SoftFail 8194 2.86 4.37 2.25 99 HTML_IMAGE_RATIO_08 8167 2.37 2.67 2.24 100 TR_XM_SB_Phish 7696 2.05 1.89 2.12 101 TM2_M_VERY_LONG_WORD 7674 3.25 6.06 2.11 102 XMSubPhish11 7599 1.98 1.72 2.09 103 XM_B_Phish66 7529 2.75 4.42 2.07 104 XM_B_SpammyTLD 7483 3.11 5.73 2.06 105 DKIM_INVALID 7361 2.23 2.74 2.02 106 XM_GoogleGroups 7241 2.60 4.09 1.99 107 XM_B_Unsub2 7240 2.08 2.30 1.99 108 INVALID_MSGID 6848 1.43 0.31 1.88 109 XM_CamelCaseFrm001 6683 2.03 2.51 1.84 110 T_XMDrugObfuBody_14 6682 2.38 3.73 1.84 111 HELO_NODOT 6658 1.46 0.56 1.83 112 HELO_NO_DOMAIN 6656 1.46 0.56 1.83 113 SUBJ_ALL_CAPS 6493 1.72 1.56 1.78 114 TVD_RCVD_IP 6489 1.33 0.22 1.78 115 TR_DCC_Bayes_99 6410 8.25 24.27 1.76 116 IN_HORDE_ADDRESS_BOOK 6302 1.26 0.10 1.73 117 KHOP_HELO_FCRDNS 6182 2.11 3.12 1.70 118 TR_XM_SpammyRelay 6122 4.45 11.27 1.68 119 BOTNET 5939 4.30 10.88 1.63 120 XM_DK_Undo_01 5841 1.94 2.75 1.61 121 T_XMDrugObfuBody_08 5785 1.99 2.99 1.59 122 TO_MALFORMED 5783 1.14 0.02 1.59 123 TR_Symld_Words 5666 1.58 1.64 1.56 124 RCVD_IN_MSPIKE_H5 5614 1.19 0.34 1.54 125 TooManyTo_003 5490 1.40 1.13 1.51 126 XM_B_Investor 5468 2.36 4.49 1.50 127 TR_XM_SpammyWords5 5248 1.97 3.28 1.44 128 RCVD_IN_MSPIKE_BL 5238 3.20 7.57 1.44 129 TR_XM_MSPIKECOMBO 5196 3.19 7.53 1.43 130 XMDiploma_00 5174 1.83 2.83 1.42 131 XMLngstWrd_00 4867 2.09 3.93 1.34 132 XMSubNoVowel 4705 1.16 0.85 1.29 133 XM_H_Long_From02 4655 1.31 1.40 1.28 134 XMLngstWrd_01 4651 2.03 3.88 1.28 135 XMGappySubj_01 4649 0.94 0.11 1.28 136 URI_HEX 4639 1.55 2.23 1.27 137 UNTRUSTED_Relay 4515 3.90 10.47 1.24 138 XMLngstWrd_02 4267 1.93 3.79 1.17 139 XMBSHREFv2 4232 0.92 0.34 1.16 140 XMCapTrack 4212 0.92 0.33 1.16 141 RELAYCOUNTRY_CA 4002 2.59 6.26 1.10 142 XMLngstWrd_03 3969 1.79 3.51 1.09 143 TooManyTo_004 3950 1.07 1.04 1.09 144 TR_XM_SpammyWords2 3877 4.14 11.75 1.07 145 XMLngstWrd_04 3735 1.73 3.46 1.03 146 TVD_SPACE_RATIO 3693 0.77 0.15 1.01 147 TR_MetaPhish_Combo_01 3515 0.91 0.78 0.97 148 XM_RXBody 3448 0.92 0.85 0.95 149 TooManyTo_005 3214 0.90 0.94 0.88 150 RCVD_IN_RP_SAFE 3186 0.78 0.54 0.88 151 DKIM_ADSP_CUSTOM_MED 3175 0.90 0.98 0.87 152 XM_OfRef6 3167 1.73 3.87 0.87 153 HTML_FONT_FACE_BAD 3148 0.92 1.04 0.87 154 T_FILL_THIS_FORM_SHORT 3121 1.31 2.42 0.86 155 HTML_TITLE_SUBJ_DIFF 3034 1.57 3.40 0.83 156 UPPERCASE_75_100 3004 1.55 3.35 0.83 157 XMBody_95 2993 0.62 0.12 0.82 158 XM_USANA_RCVD 2937 0.57 0.00 0.81 159 RCVD_IN_RP_CERTIFIED 2914 0.70 0.45 0.80 160 XMSubMetaI_00 2854 0.80 0.84 0.78 161 XM_UB50 2783 1.84 4.50 0.76 162 RELAYCOUNTRY_GB 2782 0.88 1.15 0.76 163 HTTPS_HTTP_MISMATCH 2776 1.09 1.91 0.76 164 T_TooManySym_03 2756 0.62 0.27 0.76 165 T_XMDrugObfuBody_00 2731 1.03 1.74 0.75 166 SpammyFromTLD_01 2726 1.50 3.37 0.75 167 RCVD_IN_MSPIKE_L3 2668 1.29 2.66 0.73 168 XMStockSpam_06 2663 0.99 1.64 0.73 169 SHORTENED_URL_HREF 2608 0.59 0.27 0.72 170 RCVD_IN_BL_SPAMCOP_NET 2516 3.17 9.30 0.69 171 XMHTML_After_End 2495 0.91 1.47 0.69 172 TR_XM_MaxUnsub 2469 2.29 6.26 0.68 173 XMBdyGiftCard01 2439 0.77 1.01 0.67 174 XM_ProductURIs 2436 0.77 1.01 0.67 175 FROM_GOV_DKIM_AU 2413 0.50 0.10 0.66 176 RCVD_IN_MSPIKE_L4 2354 0.68 0.75 0.65 177 HTML_TAG_BALANCE_BODY 2334 0.82 1.27 0.64 178 XM_ShortIntro_01 2304 0.57 0.42 0.63 179 TR_XM_SpammyWords3 2301 1.81 4.71 0.63 180 XMMoneyMeta_00 2299 0.77 1.11 0.63 181 MSGID_NOFQDN1 2290 0.46 0.04 0.63 182 T_OBFU_PDF_ATTACH 2263 0.48 0.14 0.62 183 HTML_IMAGE_ONLY_20 2245 0.53 0.32 0.62 184 XM_B_COVIDMETA 2226 0.99 1.94 0.61 185 XM_B_COPY_HTML 2202 0.63 0.69 0.61 186 XMGenDplmaNmb 2182 0.76 1.14 0.60 187 TR_MSPIKEBAYES00 2137 0.42 0.01 0.59 188 XM_S_SpammyWords 2119 0.63 0.75 0.58 189 TR_XM_Spammywords 2117 0.63 0.75 0.58 190 XM_H_PHPMailer 2110 0.65 0.82 0.58 191 XMNoVowels 2084 0.54 0.44 0.57 192 SHORT_HELO_AND_INLINE_IMAGE 2012 0.42 0.10 0.55 193 URI_TRY_3LD 2006 0.66 0.93 0.55 194 NML_ADSP_CUSTOM_MED 1981 0.59 0.69 0.54 195 XMPhish14 1960 0.60 0.75 0.54 196 XM_B_SpammyWords4 1884 1.07 2.42 0.52 197 XMBrknScrpt_02 1857 0.61 0.84 0.51 198 T_Symld_Words_02 1854 0.60 0.84 0.51 199 SHORT_URI_3 1840 0.43 0.25 0.51 200 XMHTMLBadTable_001 1820 0.62 0.90 0.50 ----------------------------------------------------------------------