Email: 562148 Autolearn: 0 AvgScore: 0.30 AvgScanTime: 1.32 sec Spam: 143935 Autolearn: 0 AvgScore: 13.82 AvgScanTime: 1.55 sec Ham: 418213 Autolearn: 0 AvgScore: -4.36 AvgScanTime: 1.25 sec Time Spent Running SA: 206.82 hours Time Spent Processing Spam: 61.92 hours Time Spent Processing Ham: 144.90 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138493 90.99 96.22 89.19 2 DKIM_SIGNED 127440 66.00 88.54 58.25 3 XM_DK_Pass 123529 64.58 85.82 57.27 4 DKIM_VALID 123057 63.92 85.49 56.49 5 RELAYCOUNTRY_US 114650 80.48 79.65 80.76 6 XM_B_Unicode 111749 73.61 77.64 72.22 7 XMListUnsubscribeExists 103565 46.70 71.95 38.02 8 DCC_CHECK 102104 38.06 70.94 26.75 9 XM_B_SpammyWords 95990 48.96 66.69 42.86 10 DKIM_VALID_AU 93148 49.35 64.72 44.06 11 XM_DK_Undo_02 62428 15.50 43.37 5.91 12 BAYES_50 60279 48.26 41.88 50.46 13 XM_B_Unicode3 59919 44.15 41.63 45.02 14 XM_B_SpammyWords2 53580 21.98 37.23 16.73 15 LOC_TINY_FONT_1 52520 22.58 36.49 17.80 16 TR_XM_DKIM_Undo 49817 11.73 34.61 3.85 17 BAYES_99 48709 12.34 33.84 4.94 18 FVGT_m_MULTI_ODD 48633 23.48 33.79 19.93 19 MIME_HTML_ONLY 45880 25.96 31.88 23.92 20 HTML_FONT_LOW_CONTRAST 45629 24.78 31.70 22.40 21 DKIM_VALID_EF 44652 24.55 31.02 22.32 22 RCVD_IN_MSPIKE_H2 42211 20.66 29.33 17.67 23 DCC_CHECK_NEGATIVE 41796 61.90 29.04 73.21 24 T_KAM_HTML_FONT_INVALID 41338 18.52 28.72 15.01 25 BAYES_999 37856 9.83 26.30 4.16 26 XMSubLong 35052 21.06 24.35 19.92 27 TR_DCC_Bayes_99 34070 7.20 23.67 1.53 28 XM_Body_Dirty_Words 33614 12.82 23.35 9.20 29 RELAYCOUNTRY_META 33057 8.33 22.97 3.30 30 RCVD_IN_MSPIKE_WL 31995 23.57 22.23 24.03 31 T_TM2_M_HEADER_IN_MSG 31597 25.20 21.95 26.32 32 XM_Multi_Part_URI 25023 11.62 17.38 9.64 33 RCVD_IN_MSPIKE_H3 21730 14.32 15.10 14.05 34 LOTS_OF_MONEY 20121 8.79 13.98 7.01 35 XM_B_Unsub 19786 10.87 13.75 9.88 36 BOTNET_IPINHOSTNAME 19650 6.39 13.65 3.89 37 UNPARSEABLE_RELAY 19180 8.27 13.33 6.53 38 XM_B_SpammyWords3 19143 5.82 13.30 3.24 39 TR_XM_SpammyRelay 19040 4.41 13.23 1.37 40 TR_XM_UnparsRelay 18790 7.18 13.05 5.15 41 MPART_ALT_DIFF 17914 12.21 12.45 12.13 42 TR_XM_SpammyWords4 17161 6.51 11.92 4.65 43 BOTNET 16926 4.10 11.76 1.46 44 XMSexyCombo_05 16748 5.28 11.64 3.10 45 UNTRUSTED_Relay 16054 3.61 11.15 1.02 46 TR_XM_SpammyWords2 15661 3.30 10.88 0.69 47 XM_UncommonTLD01 15378 5.02 10.68 3.06 48 FSL_BULK_SIG 15280 4.96 10.62 3.02 49 RCVD_IN_BL_SPAMCOP_NET 14148 3.03 9.83 0.69 50 XM_Evil_Numbers_Gen 11956 8.07 8.31 7.98 51 BAYES_80 11527 4.74 8.01 3.62 52 HTML_IMAGE_RATIO_02 11226 5.71 7.80 4.99 53 XM_H_Long_From01 10532 5.13 7.32 4.37 54 BAYES_60 10159 7.72 7.06 7.94 55 LotsOfNums_01 10014 7.09 6.96 7.14 56 XM_SendGrid 9788 4.93 6.80 4.29 57 RELAYCOUNTRY_CA 9704 2.42 6.74 0.93 58 RCVD_IN_MSPIKE_BL 9555 2.49 6.64 1.06 59 RCVD_IN_MSPIKE_H4 9548 8.29 6.63 8.86 60 TR_XM_MSPIKECOMBO 9533 2.48 6.62 1.06 61 TR_XM_PhishingBody 9322 3.67 6.48 2.71 62 MIME_HTML_ONLY_MULTI 9123 9.18 6.34 10.15 63 MIME_HTML_MOSTLY 9038 3.24 6.28 2.19 64 TR_XM_SPAMCOP 8720 1.74 6.06 0.25 65 TM2_M_VERY_LONG_WORD 8531 2.83 5.93 1.77 66 XMSubMetaSx_00 8192 3.77 5.69 3.11 67 XM_B_Phish_Phrases 8189 3.17 5.69 2.30 68 TR_XM_MaxUnsub 7762 1.92 5.39 0.72 69 URI_NOVOWEL 7491 2.88 5.20 2.08 70 XM_B_SpammyTLD 7407 2.50 5.15 1.59 71 TooManyTo_001 7349 7.89 5.11 8.84 72 HTML_MIME_NO_HTML_TAG 7226 3.27 5.02 2.67 73 SpammyFromTLD_01 7225 1.75 5.02 0.62 74 HTML_IMAGE_RATIO_04 7221 15.30 5.02 18.84 75 XM_UB50 7032 1.74 4.89 0.66 76 XM_DIRTYINTL 6896 1.44 4.79 0.28 77 BAYES_95 6671 2.86 4.63 2.25 78 XM_SPF_SoftFail 6155 2.96 4.28 2.51 79 XMStrtUSub 5958 10.02 4.14 12.05 80 TR_XM_SpammyWords3 5824 1.40 4.05 0.49 81 XM_GoogleGroups 5721 2.35 3.97 1.79 82 TR_XM_DK_SendGrid 5712 3.17 3.97 2.89 83 MIME_QP_LONG_LINE 5457 5.52 3.79 6.11 84 XM_B_Investor 5448 1.82 3.79 1.15 85 XM_B_Phish66 5377 2.05 3.74 1.48 86 HTML_IMAGE_RATIO_06 5355 4.72 3.72 5.07 87 XMLngstWrd_00 5292 1.88 3.68 1.27 88 XM_OfRef6 5269 1.47 3.66 0.71 89 XMLngstWrd_01 5228 1.84 3.63 1.23 90 XMLngstWrd_02 5100 1.76 3.54 1.15 91 TR_XM_SpammyWords5 5032 1.86 3.50 1.29 92 XMLngstWrd_03 5020 1.69 3.49 1.07 93 XMDiploma_00 5018 1.82 3.49 1.25 94 RELAYCOUNTRY_FR 4933 1.03 3.43 0.20 95 T_XMDrugObfuBody_14 4919 2.07 3.42 1.61 96 T_XMDrugObfuBody_08 4919 2.13 3.42 1.69 97 XMLngstWrd_04 4913 1.62 3.41 1.01 98 HTML_TITLE_SUBJ_DIFF 4853 1.47 3.37 0.81 99 XM_DK_Undo_01 4742 1.83 3.29 1.32 100 XMNumbers 4733 3.11 3.29 3.06 101 UPPERCASE_75_100 4693 1.44 3.26 0.82 102 RCVD_IN_MSPIKE_L5 4632 0.86 3.22 0.05 103 HTML_IMAGE_RATIO_08 4614 2.19 3.21 1.84 104 PDS_OTHER_BAD_TLD 4593 0.92 3.19 0.14 105 T_REMOTE_IMAGE 4558 3.06 3.17 3.02 106 URIBL_DBL_SPAM 4550 0.82 3.16 0.01 107 RCVD_IN_VALIDITY_SAFE 4416 3.81 3.07 4.07 108 DKIM_INVALID 4383 2.09 3.05 1.76 109 TM2_M_URI_OPT_OUT 4338 3.83 3.01 4.11 110 RCVD_IN_MSPIKE_L3 4017 1.15 2.79 0.58 111 RCVD_IN_IADB_LISTED 3855 3.75 2.68 4.12 112 SpammyFromTLD_02 3777 0.92 2.62 0.34 113 T_XMHurry_00 3741 1.59 2.60 1.24 114 XM_CamelCaseFrm001 3738 1.67 2.60 1.35 115 T_TooManySym_01 3692 4.11 2.57 4.65 116 RCVD_IN_VALIDITY_CERTIFIED 3665 3.34 2.55 3.61 117 XM_B_Unsub2 3618 1.56 2.51 1.23 118 T_FILL_THIS_FORM_SHORT 3580 1.13 2.49 0.66 119 RCVD_IN_VALIDITY_RPBL 3549 0.67 2.47 0.05 120 XM_UB99 3386 0.61 2.35 0.00 121 TR_XM_SB_Phish 3374 1.82 2.34 1.64 122 RCVD_IN_IADB_SPF 3329 3.31 2.31 3.65 123 RCVD_IN_PSBL 3282 0.60 2.28 0.02 124 XM_B_SpammyWords4 3277 0.88 2.28 0.40 125 XM_B_COVIDMETA 3191 0.87 2.22 0.41 126 XMSubPhish11 3175 1.77 2.21 1.61 127 MAILING_LIST_MULTI 3108 2.21 2.16 2.23 128 RCVD_IN_IADB_DK 3066 2.92 2.13 3.19 129 RCVD_IN_IADB_SENDERID 3002 2.99 2.09 3.30 130 ALL_TRUSTED 2967 13.24 2.06 17.08 131 XMStockSpam_06 2962 1.23 2.06 0.94 132 KHOP_HELO_FCRDNS 2948 1.93 2.05 1.90 133 XMBody_17 2943 0.77 2.04 0.33 134 TR_XM_MSPIKECOMBO2 2858 0.68 1.99 0.23 135 TR_Mismatch_TLD_01 2789 0.66 1.94 0.22 136 BOTNET_NORDNS 2757 0.50 1.92 0.01 137 XM_UB999 2754 0.49 1.91 0.00 138 FROM_EXCESS_BASE64 2690 2.03 1.87 2.09 139 BAYES_40 2576 4.44 1.79 5.35 140 URI_HEX 2567 1.27 1.78 1.10 141 URI_NO_WWW_BIZ_CGI 2564 0.46 1.78 0.01 142 SUBJ_ALL_CAPS 2547 1.46 1.77 1.36 143 HTTPS_HTTP_MISMATCH 2510 0.94 1.74 0.66 144 XMGenDplmaNmb 2468 0.93 1.71 0.66 145 XMSexyCombo_01 2437 1.01 1.69 0.77 146 USER_IN_DEF_DKIM_WL 2416 7.39 1.68 9.36 147 XMHTML_After_End 2375 0.91 1.65 0.65 148 T_XMDrugObfuBody_00 2363 0.84 1.64 0.57 149 URI_PHP_REDIR 2311 0.41 1.61 0.00 150 XM_H_Long_From02 2270 0.94 1.58 0.72 151 TR_XM_PHPDW 2236 0.62 1.55 0.30 152 TR_XM_COVIDMETA1 2214 0.51 1.54 0.16 153 RELAYCOUNTRY_AU 2199 0.56 1.53 0.23 154 TR_XM_PHPForged 2197 0.58 1.53 0.25 155 TR_Symld_Words 2196 1.40 1.53 1.36 156 TR_XM_BayesRelay 2181 0.39 1.52 0.00 157 XM_H_Undi_Recip 2171 0.51 1.51 0.16 158 RELAYCOUNTRY_RU 2121 0.39 1.47 0.02 159 TR_XM_FormFill2 2117 0.57 1.47 0.26 160 XM_H_PHPOS 2099 0.55 1.46 0.24 161 RCVD_IN_IADB_VOUCHED 2072 2.25 1.44 2.53 162 URIBL_BLACK 2067 0.40 1.44 0.04 163 REMOVE_BEFORE_LINK 2061 0.52 1.43 0.20 164 JH_SPAMMY_HEADERS 2043 0.36 1.42 0.00 165 TR_XM_COVIDMETA4 2028 0.50 1.41 0.19 166 TR_XM_NoHeaderRelay 1985 0.46 1.38 0.15 167 XM_URI_RBL 1984 0.43 1.38 0.10 168 TR_XM_MaxSPIKE 1911 0.42 1.33 0.11 169 URI_LONG_REPEAT 1894 0.34 1.32 0.01 170 HK_RANDOM_REPLYTO 1879 0.40 1.31 0.09 171 HTML_FONT_TINY_NORDNS 1861 0.37 1.29 0.06 172 TR_XM_FormFill 1857 0.35 1.29 0.02 173 BAYES_20 1834 4.42 1.27 5.51 174 XM_ProductURIs 1805 0.65 1.25 0.44 175 XM_B_SEO 1783 0.41 1.24 0.12 176 HTML_TAG_BALANCE_BODY 1769 0.70 1.23 0.51 177 XM_UB60 1746 0.35 1.21 0.05 178 DATE_IN_PAST_03_06 1738 0.35 1.21 0.05 179 TR_LOTS_OF_MONEY3 1704 0.42 1.18 0.15 180 RELAYCOUNTRY_GB 1626 0.73 1.13 0.59 181 XM_S_SpammyWords 1619 0.46 1.12 0.24 182 TR_XM_Spammywords 1619 0.46 1.12 0.24 183 HTML_FONT_FACE_BAD 1608 12.97 1.12 17.05 184 XM_B_DNDMA 1587 0.57 1.10 0.39 185 XM_UB80 1572 0.29 1.09 0.02 186 TR_BOTNET_NEGATE 1551 0.48 1.08 0.27 187 XMPhish30 1524 0.73 1.06 0.62 188 URI_TRY_3LD 1523 0.68 1.06 0.55 189 XMBdyGiftCard01 1475 0.79 1.02 0.71 190 TR_XM_SEO4 1460 0.30 1.01 0.05 191 T_Symld_Words_02 1435 0.61 1.00 0.47 192 XMPhish14 1414 0.54 0.98 0.39 193 TR_MetaPhish_Combo_01 1390 0.76 0.97 0.69 194 YOUR_DELIVERY_ADDRESS 1376 0.25 0.96 0.01 195 DETAILS_OF_PRODUCT 1369 0.24 0.95 0.00 196 XMSubMetaSxObfu_03 1369 0.47 0.95 0.31 197 HOSTED_IMG_DIRECT_MX 1363 0.24 0.95 0.00 198 TM2_M_A_HREF_HREF 1362 0.46 0.95 0.29 199 XMMoneyMeta_00 1361 0.57 0.95 0.44 200 XMSubNoVowel 1345 5.13 0.93 6.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 373018 90.99 96.22 89.19 2 RELAYCOUNTRY_US 337762 80.48 79.65 80.76 3 DCC_CHECK_NEGATIVE 306190 61.90 29.04 73.21 4 XM_B_Unicode 302026 73.61 77.64 72.22 5 DKIM_SIGNED 243603 66.00 88.54 58.25 6 XM_DK_Pass 239504 64.58 85.82 57.27 7 DKIM_VALID 236240 63.92 85.49 56.49 8 BAYES_50 211032 48.26 41.88 50.46 9 XM_B_Unicode3 188283 44.15 41.63 45.02 10 DKIM_VALID_AU 184271 49.35 64.72 44.06 11 XM_B_SpammyWords 179262 48.96 66.69 42.86 12 XMListUnsubscribeExists 158984 46.70 71.95 38.02 13 DCC_CHECK 111874 38.06 70.94 26.75 14 T_TM2_M_HEADER_IN_MSG 110088 25.20 21.95 26.32 15 RCVD_IN_MSPIKE_WL 100517 23.57 22.23 24.03 16 MIME_HTML_ONLY 100053 25.96 31.88 23.92 17 HTML_FONT_LOW_CONTRAST 93681 24.78 31.70 22.40 18 DKIM_VALID_EF 93339 24.55 31.02 22.32 19 FVGT_m_MULTI_ODD 83362 23.48 33.79 19.93 20 XMSubLong 83318 21.06 24.35 19.92 21 HTML_IMAGE_RATIO_04 78790 15.30 5.02 18.84 22 XM_H_Trusted_IP 76351 13.58 0.00 18.26 23 LOC_TINY_FONT_1 74422 22.58 36.49 17.80 24 RCVD_IN_MSPIKE_H2 73919 20.66 29.33 17.67 25 ALL_TRUSTED 71450 13.24 2.06 17.08 26 HTML_FONT_FACE_BAD 71306 12.97 1.12 17.05 27 XM_B_SpammyWords2 69957 21.98 37.23 16.73 28 BAYES_00 67050 12.15 0.88 16.03 29 T_KAM_HTML_FONT_INVALID 62786 18.52 28.72 15.01 30 RCVD_IN_MSPIKE_H3 58760 14.32 15.10 14.05 31 MPART_ALT_DIFF 50739 12.21 12.45 12.13 32 XMStrtUSub 50377 10.02 4.14 12.05 33 MIME_HTML_ONLY_MULTI 42459 9.18 6.34 10.15 34 XM_B_Unsub 41323 10.87 13.75 9.88 35 XM_Multi_Part_URI 40314 11.62 17.38 9.64 36 USER_IN_DEF_DKIM_WL 39154 7.39 1.68 9.36 37 XM_Body_Dirty_Words 38457 12.82 23.35 9.20 38 RCVD_IN_MSPIKE_H4 37064 8.29 6.63 8.86 39 TooManyTo_001 36988 7.89 5.11 8.84 40 XM_Evil_Numbers_Gen 33392 8.07 8.31 7.98 41 BAYES_60 33216 7.72 7.06 7.94 42 LotsOfNums_01 29870 7.09 6.96 7.14 43 LOTS_OF_MONEY 29318 8.79 13.98 7.01 44 XMSubNoVowel 27470 5.13 0.93 6.57 45 UNPARSEABLE_RELAY 27305 8.27 13.33 6.53 46 MIME_QP_LONG_LINE 25570 5.52 3.79 6.11 47 XM_DKIMWhitelistDomains 25536 4.59 0.20 6.11 48 XM_DK_Undo_02 24708 15.50 43.37 5.91 49 IN_ZIMBRA_NJ_WHITELIST 23885 4.27 0.09 5.71 50 BAYES_20 23024 4.42 1.27 5.51 51 BAYES_40 22381 4.44 1.79 5.35 52 TR_XM_UnparsRelay 21545 7.18 13.05 5.15 53 TR_XM_DK_Bayes 21343 3.97 0.68 5.10 54 HTML_IMAGE_RATIO_06 21200 4.72 3.72 5.07 55 TR_XM_DK_Bayes1 20906 3.89 0.67 5.00 56 HTML_IMAGE_RATIO_02 20873 5.71 7.80 4.99 57 BAYES_99 20660 12.34 33.84 4.94 58 TR_XM_SpammyWords4 19448 6.51 11.92 4.65 59 T_TooManySym_01 19437 4.11 2.57 4.65 60 TR_XM_DK_Bayes2 18290 3.39 0.52 4.37 61 XM_H_Long_From01 18282 5.13 7.32 4.37 62 XM_SendGrid 17944 4.93 6.80 4.29 63 BAYES_999 17398 9.83 26.30 4.16 64 RCVD_IN_IADB_LISTED 17231 3.75 2.68 4.12 65 TM2_M_URI_OPT_OUT 17183 3.83 3.01 4.11 66 RCVD_IN_VALIDITY_SAFE 17020 3.81 3.07 4.07 67 XM_PDF 16504 3.16 0.87 3.95 68 BAYES_05 16304 3.06 0.63 3.90 69 BOTNET_IPINHOSTNAME 16266 6.39 13.65 3.89 70 TR_XM_DKIM_Undo 16102 11.73 34.61 3.85 71 RCVD_IN_IADB_SPF 15252 3.31 2.31 3.65 72 BAYES_80 15135 4.74 8.01 3.62 73 RCVD_IN_VALIDITY_CERTIFIED 15089 3.34 2.55 3.61 74 ANY_BOUNCE_MESSAGE 13849 2.65 0.72 3.31 75 BOUNCE_MESSAGE 13848 2.65 0.72 3.31 76 RCVD_IN_IADB_SENDERID 13815 2.99 2.09 3.30 77 RELAYCOUNTRY_META 13798 8.33 22.97 3.30 78 XM_B_SpammyWords3 13551 5.82 13.30 3.24 79 RCVD_IN_IADB_DK 13338 2.92 2.13 3.19 80 XMSubMetaSx_00 13015 3.77 5.69 3.11 81 XMSexyCombo_05 12961 5.28 11.64 3.10 82 XM_UncommonTLD01 12816 5.02 10.68 3.06 83 XMNumbers 12777 3.11 3.29 3.06 84 T_REMOTE_IMAGE 12617 3.06 3.17 3.02 85 FSL_BULK_SIG 12610 4.96 10.62 3.02 86 TR_XM_DK_SendGrid 12085 3.17 3.97 2.89 87 TR_XM_PhishingBody 11317 3.67 6.48 2.71 88 HTML_MIME_NO_HTML_TAG 11155 3.27 5.02 2.67 89 T_TooManySym_02 10646 2.06 0.65 2.55 90 RCVD_IN_IADB_VOUCHED 10590 2.25 1.44 2.53 91 XM_SPF_SoftFail 10511 2.96 4.28 2.51 92 TVD_RCVD_IP 9744 1.80 0.27 2.33 93 XM_B_Phish_Phrases 9619 3.17 5.69 2.30 94 BAYES_95 9408 2.86 4.63 2.25 95 MAILING_LIST_MULTI 9324 2.21 2.16 2.23 96 XMSubLongNoVowel 9178 1.68 0.17 2.19 97 MIME_HTML_MOSTLY 9178 3.24 6.28 2.19 98 XMSubGarbage 9062 1.63 0.05 2.17 99 FROM_EXCESS_BASE64 8732 2.03 1.87 2.09 100 URI_NOVOWEL 8718 2.88 5.20 2.08 101 TooManyTo_002 8052 1.65 0.84 1.93 102 KHOP_HELO_FCRDNS 7928 1.93 2.05 1.90 103 HTML_IMAGE_RATIO_08 7682 2.19 3.21 1.84 104 XM_GoogleGroups 7473 2.35 3.97 1.79 105 TM2_M_VERY_LONG_WORD 7389 2.83 5.93 1.77 106 DKIM_INVALID 7363 2.09 3.05 1.76 107 SHORT_URI_2 7185 1.37 0.37 1.72 108 T_XMDrugObfuBody_08 7048 2.13 3.42 1.69 109 RCVD_IN_IADB_OPTIN 6972 1.48 0.92 1.67 110 TR_XM_SB_Phish 6852 1.82 2.34 1.64 111 XMSubPhish11 6753 1.77 2.21 1.61 112 HELO_NODOT 6741 1.33 0.52 1.61 113 HELO_NO_DOMAIN 6740 1.33 0.51 1.61 114 T_XMDrugObfuBody_14 6718 2.07 3.42 1.61 115 XM_B_SpammyTLD 6655 2.50 5.15 1.59 116 INVALID_MSGID 6592 1.22 0.20 1.58 117 TR_DCC_Bayes_99 6404 7.20 23.67 1.53 118 XM_B_Phish66 6173 2.05 3.74 1.48 119 BOTNET 6114 4.10 11.76 1.46 120 IN_HORDE_ADDRESS_BOOK 6102 1.12 0.14 1.46 121 TO_MALFORMED 5775 1.03 0.01 1.38 122 TR_XM_SpammyRelay 5736 4.41 13.23 1.37 123 SUBJ_ALL_CAPS 5678 1.46 1.77 1.36 124 TR_Symld_Words 5673 1.40 1.53 1.36 125 XM_CamelCaseFrm001 5648 1.67 2.60 1.35 126 XM_DK_Undo_01 5531 1.83 3.29 1.32 127 TR_XM_SpammyWords5 5397 1.86 3.50 1.29 128 XM_E_Blogspot 5339 1.00 0.20 1.28 129 HTML_IMAGE_ONLY_20 5306 1.09 0.57 1.27 130 XMLngstWrd_00 5302 1.88 3.68 1.27 131 XMDiploma_00 5225 1.82 3.49 1.25 132 T_XMHurry_00 5194 1.59 2.60 1.24 133 TooManyTo_003 5180 1.11 0.73 1.24 134 XM_B_Unsub2 5158 1.56 2.51 1.23 135 XMLngstWrd_01 5124 1.84 3.63 1.23 136 XMLngstWrd_02 4811 1.76 3.54 1.15 137 XM_B_Investor 4799 1.82 3.79 1.15 138 XMGappySubj_01 4749 0.89 0.19 1.14 139 RCVD_IN_MSPIKE_H5 4693 0.96 0.50 1.12 140 URI_HEX 4592 1.27 1.78 1.10 141 XMLngstWrd_03 4476 1.69 3.49 1.07 142 RCVD_IN_MSPIKE_BL 4418 2.49 6.64 1.06 143 TR_XM_MSPIKECOMBO 4413 2.48 6.62 1.06 144 UNTRUSTED_Relay 4254 3.61 11.15 1.02 145 XMLngstWrd_04 4215 1.62 3.41 1.01 146 XMCapTrack 4075 0.86 0.53 0.97 147 XMStockSpam_06 3950 1.23 2.06 0.94 148 RELAYCOUNTRY_CA 3898 2.42 6.74 0.93 149 XM_shorewaves_Whitelist 3858 0.69 0.00 0.92 150 XMBSHREFv2 3849 0.75 0.25 0.92 151 XM_RXBody 3766 0.82 0.59 0.90 152 TVD_SPACE_RATIO 3705 0.71 0.19 0.89 153 TooManyTo_004 3582 0.79 0.58 0.86 154 UPPERCASE_75_100 3419 1.44 3.26 0.82 155 RCVD_IN_RP_SAFE 3403 0.76 0.62 0.81 156 HTML_TITLE_SUBJ_DIFF 3393 1.47 3.37 0.81 157 XMSexyCombo_01 3235 1.01 1.69 0.77 158 RCVD_IN_RP_CERTIFIED 3066 0.67 0.47 0.73 159 FROM_GOV_DKIM_AU 3029 0.66 0.48 0.72 160 TR_XM_MaxUnsub 3024 1.92 5.39 0.72 161 XM_H_Long_From02 2993 0.94 1.58 0.72 162 XMBdyGiftCard01 2983 0.79 1.02 0.71 163 XM_OfRef6 2975 1.47 3.66 0.71 164 DKIM_ADSP_CUSTOM_MED 2940 0.75 0.89 0.70 165 RCVD_IN_BL_SPAMCOP_NET 2887 3.03 9.83 0.69 166 TR_MetaPhish_Combo_01 2878 0.76 0.97 0.69 167 TR_XM_SpammyWords2 2870 3.30 10.88 0.69 168 XMGenDplmaNmb 2762 0.93 1.71 0.66 169 XM_UB50 2757 1.74 4.89 0.66 170 T_FILL_THIS_FORM_SHORT 2752 1.13 2.49 0.66 171 HTTPS_HTTP_MISMATCH 2749 0.94 1.74 0.66 172 XMHTML_After_End 2728 0.91 1.65 0.65 173 TooManyTo_005 2723 0.60 0.44 0.65 174 XMBrknScrpt_02 2714 0.72 0.93 0.65 175 SpammyFromTLD_01 2608 1.75 5.02 0.62 176 XMPhish30 2583 0.73 1.06 0.62 177 T_TooManySym_03 2550 0.54 0.33 0.61 178 RELAYCOUNTRY_GB 2454 0.73 1.13 0.59 179 RCVD_IN_MSPIKE_L3 2443 1.15 2.79 0.58 180 T_XMDrugObfuBody_00 2377 0.84 1.64 0.57 181 URI_TRY_3LD 2317 0.68 1.06 0.55 182 MSGID_NOFQDN1 2290 0.41 0.02 0.55 183 XMBody_95 2285 0.47 0.23 0.55 184 XMSexyCombo_04 2217 0.60 0.82 0.53 185 XMSubMetaSSx_00 2203 0.53 0.52 0.53 186 XM_B_COPY_HTML 2173 0.57 0.71 0.52 187 HTML_TAG_BALANCE_BODY 2152 0.70 1.23 0.51 188 XM_H_PHPMailer 2136 0.56 0.72 0.51 189 T_OBFU_PDF_ATTACH 2116 0.41 0.12 0.51 190 XM_ShortIntro_01 2102 0.46 0.35 0.50 191 SHORT_HELO_AND_INLINE_IMAGE 2092 0.39 0.08 0.50 192 TR_XM_SpammyWords3 2052 1.40 4.05 0.49 193 T_Symld_Words_02 1967 0.61 1.00 0.47 194 XM_D_tchamptons_WL 1905 0.35 0.02 0.46 195 NML_ADSP_CUSTOM_MED 1863 0.51 0.71 0.45 196 XM_ProductURIs 1859 0.65 1.25 0.44 197 XMMoneyMeta_00 1849 0.57 0.95 0.44 198 XMSubMetaI_00 1845 0.52 0.75 0.44 199 RCVD_IN_SORBS_DUL 1828 0.36 0.14 0.44 200 XMNoVowels 1816 0.41 0.36 0.43 ----------------------------------------------------------------------