Email: 516483 Autolearn: 0 AvgScore: 4.15 AvgScanTime: 1.41 sec Spam: 174186 Autolearn: 0 AvgScore: 14.13 AvgScanTime: 1.52 sec Ham: 342297 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.36 sec Time Spent Running SA: 202.64 hours Time Spent Processing Spam: 73.70 hours Time Spent Processing Ham: 128.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 164020 89.91 94.16 87.75 2 DKIM_SIGNED 155074 78.06 89.03 72.48 3 XM_DK_Pass 147202 75.49 84.51 70.90 4 DKIM_VALID 146774 74.73 84.26 69.87 5 RELAYCOUNTRY_US 140980 79.42 80.94 78.66 6 XM_B_Unicode 140491 72.98 80.66 69.07 7 XM_B_SpammyWords 120984 51.59 69.46 42.51 8 DCC_CHECK 120245 44.13 69.03 31.46 9 XMListUnsubscribeExists 119862 55.54 68.81 48.79 10 DKIM_VALID_AU 110913 57.63 63.68 54.56 11 RCVD_IN_MSPIKE_H2 86657 41.81 49.75 37.76 12 XM_B_Unicode3 77585 41.78 44.54 40.37 13 XM_DK_Undo_02 74356 18.62 42.69 6.38 14 BAYES_50 71193 51.08 40.87 56.27 15 XM_B_SpammyWords2 69795 25.00 40.07 17.33 16 LOC_TINY_FONT_1 62197 26.79 35.71 22.25 17 FVGT_m_MULTI_ODD 61549 28.20 35.34 24.56 18 DKIM_VALID_EF 58747 29.26 33.73 26.99 19 HTML_FONT_LOW_CONTRAST 58631 29.21 33.66 26.94 20 BAYES_99 57767 14.83 33.16 5.50 21 TR_XM_DKIM_Undo 56321 13.82 32.33 4.40 22 MIME_HTML_ONLY 54022 23.53 31.01 19.72 23 DCC_CHECK_NEGATIVE 53889 55.83 30.94 68.50 24 T_KAM_HTML_FONT_INVALID 51658 22.74 29.66 19.22 25 BAYES_999 45585 11.79 26.17 4.47 26 XMSubLong 40085 21.90 23.01 21.33 27 TR_DCC_Bayes_99 39068 8.56 22.43 1.50 28 XM_Body_Dirty_Words 37760 14.70 21.68 11.16 29 T_TM2_M_HEADER_IN_MSG 37112 28.77 21.31 32.57 30 RELAYCOUNTRY_META 35055 9.38 20.13 3.92 31 XM_Multi_Part_URI 30164 13.47 17.32 11.51 32 LOTS_OF_MONEY 28577 10.54 16.41 7.56 33 XM_B_Unsub 27312 10.98 15.68 8.59 34 TR_XM_BayesUnsub 26719 9.61 15.34 6.70 35 BOTNET_IPINHOSTNAME 23979 7.80 13.77 4.76 36 TR_XM_SpammyRelay 23828 5.77 13.68 1.75 37 FSL_BULK_SIG 22710 6.48 13.04 3.14 38 XM_B_SpammyWords3 22463 6.87 12.90 3.80 39 TR_XM_SpammyWords4 22254 7.52 12.78 4.85 40 BOTNET 21411 5.13 12.29 1.48 41 RCVD_IN_MSPIKE_WL 21410 15.86 12.29 17.67 42 TR_XM_SpammyWords2 20537 4.53 11.79 0.83 43 UNPARSEABLE_RELAY 20444 8.76 11.74 7.24 44 TR_XM_UnparsRelay 20051 7.67 11.51 5.71 45 RCVD_IN_BL_SPAMCOP_NET 18820 3.94 10.80 0.45 46 RCVD_IN_MSPIKE_H3 16435 10.88 9.44 11.62 47 XMSexyCombo_05 16016 5.17 9.19 3.12 48 UNTRUSTED_Relay 15452 3.93 8.87 1.42 49 BAYES_80 15406 5.89 8.84 4.38 50 XM_Evil_Numbers_Gen 15267 8.04 8.76 7.68 51 XM_SendGrid 14388 6.03 8.26 4.89 52 RELAYCOUNTRY_CA 14151 3.51 8.12 1.17 53 BAYES_60 12974 8.52 7.45 9.07 54 LotsOfNums_01 12644 8.56 7.26 9.23 55 TR_XM_SPAMCOP 12061 2.47 6.92 0.21 56 XM_UncommonTLD01 11355 4.59 6.52 3.60 57 MPART_ALT_DIFF 11351 5.56 6.52 5.07 58 TR_XM_PhishingBody 11291 4.30 6.48 3.19 59 XM_H_Long_From01 10737 5.51 6.16 5.17 60 HTML_IMAGE_RATIO_02 10514 5.33 6.04 4.97 61 TR_XM_DK_SendGrid 10260 4.16 5.89 3.28 62 RCVD_IN_MSPIKE_BL 10231 2.82 5.87 1.27 63 XM_B_Phish_Phrases 10067 3.97 5.78 3.05 64 XMSubMetaSx_00 9916 4.42 5.69 3.77 65 TR_XM_MSPIKECOMBO 9320 2.64 5.35 1.26 66 BAYES_95 9075 3.49 5.21 2.62 67 XM_B_Investor 9042 2.83 5.19 1.62 68 HTML_IMAGE_RATIO_04 8425 4.89 4.84 4.92 69 XM_B_SpammyTLD 8417 3.09 4.83 2.20 70 DKIM_INVALID 8300 3.33 4.77 2.60 71 XM_SPF_SoftFail 8177 3.11 4.69 2.30 72 TM2_M_VERY_LONG_WORD 7960 2.75 4.57 1.83 73 TooManyTo_001 7933 6.85 4.55 8.01 74 XM_OfRef6 7783 2.23 4.47 1.10 75 MIME_HTML_ONLY_MULTI 7474 3.78 4.29 3.51 76 XMStrtUSub 7245 4.24 4.16 4.29 77 XM_B_Phish66 6776 2.57 3.89 1.90 78 HTML_MIME_NO_HTML_TAG 6558 3.04 3.76 2.67 79 MIME_QP_LONG_LINE 6441 5.28 3.70 6.09 80 XM_DIRTYINTL 6389 1.48 3.67 0.36 81 XM_UB50 6377 1.83 3.66 0.90 82 HTML_IMAGE_RATIO_08 6280 2.83 3.61 2.43 83 T_XMDrugObfuBody_14 6206 2.37 3.56 1.76 84 TR_XM_SpammyWords3 6040 1.49 3.47 0.48 85 TR_XM_SpammyWords5 5925 2.25 3.40 1.67 86 XMNumbers 5764 3.29 3.31 3.27 87 XMLngstWrd_00 5727 1.77 3.29 1.00 88 XMLngstWrd_01 5680 1.72 3.26 0.94 89 MIME_HTML_MOSTLY 5658 2.58 3.25 2.24 90 T_REMOTE_IMAGE 5633 3.55 3.23 3.70 91 RCVD_IN_VALIDITY_SAFE 5625 3.93 3.23 4.28 92 MONEY_NOHTML 5623 1.14 3.23 0.08 93 T_XMDrugObfuBody_08 5578 1.93 3.20 1.28 94 XMLngstWrd_02 5565 1.64 3.19 0.85 95 T_FILL_THIS_FORM_SHORT 5508 1.67 3.16 0.91 96 XMBody_17 5377 1.30 3.09 0.40 97 HTML_IMAGE_RATIO_06 5343 3.15 3.07 3.20 98 XMLngstWrd_03 5249 1.51 3.01 0.75 99 XMLngstWrd_04 5169 1.46 2.97 0.70 100 XMDiploma_00 5137 2.08 2.95 1.64 101 XM_CamelCaseFrm001 4903 2.20 2.81 1.89 102 RCVD_IN_IADB_LISTED 4729 4.92 2.71 6.05 103 RCVD_IN_MSPIKE_L5 4593 0.90 2.64 0.01 104 RCVD_IN_MSPIKE_H4 4569 4.23 2.62 5.05 105 XM_B_Unsub2 4530 1.68 2.60 1.22 106 BOTNET_NORDNS 4452 0.87 2.56 0.02 107 SpammyFromTLD_02 4381 1.13 2.52 0.42 108 TM2_M_URI_OPT_OUT 4376 2.61 2.51 2.66 109 T_TooManySym_01 4291 4.50 2.46 5.53 110 RCVD_IN_VALIDITY_CERTIFIED 4210 3.29 2.42 3.74 111 SpammyFromTLD_01 4115 1.32 2.36 0.79 112 RCVD_IN_VALIDITY_RPBL 4084 0.80 2.34 0.02 113 RCVD_IN_IADB_SPF 4023 4.32 2.31 5.34 114 KHOP_HELO_FCRDNS 3921 1.85 2.25 1.65 115 URI_NOVOWEL 3842 2.67 2.21 2.91 116 PDS_OTHER_BAD_TLD 3836 0.85 2.20 0.17 117 TR_XM_MSPIKECOMBO2 3740 0.88 2.15 0.23 118 RCVD_IN_IADB_DK 3717 3.78 2.13 4.62 119 RCVD_IN_IADB_SENDERID 3700 3.88 2.12 4.77 120 SUBJ_ALL_CAPS 3687 2.04 2.12 2.00 121 TR_LOTS_OF_MONEY3 3673 1.00 2.11 0.44 122 XM_GoogleGroups 3669 1.94 2.11 1.86 123 URI_PHP_REDIR 3643 0.71 2.09 0.00 124 XM_DK_Undo_01 3638 1.73 2.09 1.55 125 RCVD_IN_MSPIKE_L3 3584 1.25 2.06 0.83 126 USER_IN_DEF_DKIM_WL 3572 8.82 2.05 12.27 127 MAILING_LIST_MULTI 3541 2.75 2.03 3.11 128 XM_B_SpammyWords4 3500 1.05 2.01 0.56 129 FROM_EXCESS_BASE64 3460 2.08 1.99 2.13 130 XM_UB99 3357 0.65 1.93 0.01 131 XM_B_COVIDMETA 3353 0.99 1.92 0.52 132 XMSexyCombo_01 3343 1.34 1.92 1.05 133 BAYES_40 3265 4.55 1.87 5.91 134 XM_H_Undi_Recip 3259 0.77 1.87 0.21 135 TR_Mismatch_TLD_01 3250 2.38 1.87 2.64 136 T_XMDrugObfuBody_00 3216 1.12 1.85 0.75 137 URI_HEX 3068 1.37 1.76 1.16 138 URIBL_BLACK 3040 0.62 1.75 0.05 139 XMStockSpam_06 2940 1.40 1.69 1.26 140 TR_XM_NoHeaderRelay 2929 0.65 1.68 0.13 141 UPPERCASE_75_100 2913 0.94 1.67 0.57 142 T_XMHurry_00 2907 1.13 1.67 0.85 143 TR_XM_SB_Phish 2892 1.90 1.66 2.02 144 URIBL_DBL_SPAM 2859 0.57 1.64 0.02 145 XMHTML_After_End 2858 1.03 1.64 0.72 146 XMBrknScrpt_02 2803 1.01 1.61 0.71 147 HTML_TITLE_SUBJ_DIFF 2785 0.92 1.60 0.58 148 TM2_M_A_HREF_HREF 2744 0.83 1.58 0.45 149 HK_RANDOM_REPLYTO 2710 0.57 1.56 0.06 150 TR_XM_COVIDMETA4 2662 0.67 1.53 0.23 151 RCVD_IN_IADB_VOUCHED 2595 2.99 1.49 3.75 152 XMBdyGiftCard01 2589 0.95 1.49 0.68 153 XMSubPhish11 2586 1.82 1.48 1.99 154 RELAYCOUNTRY_FR 2578 0.66 1.48 0.24 155 XM_UB999 2544 0.49 1.46 0.00 156 ALL_TRUSTED 2480 12.64 1.42 18.36 157 HTTPS_HTTP_MISMATCH 2451 1.01 1.41 0.81 158 TR_XM_COVIDMETA1 2430 0.57 1.40 0.16 159 XM_URI_RBL 2399 0.54 1.38 0.12 160 RCVD_IN_PSBL 2397 0.88 1.38 0.63 161 TR_XM_BayesRelay 2387 0.46 1.37 0.00 162 HTML_TAG_BALANCE_BODY 2358 0.88 1.35 0.64 163 TR_XM_MaxSPIKE 2333 0.54 1.34 0.14 164 XMGenDplmaNmb 2301 1.08 1.32 0.96 165 TR_XM_Undi_Recip5 2240 0.44 1.29 0.01 166 TR_XM_FormFill 2223 0.44 1.28 0.02 167 BAYES_20 2196 3.20 1.26 4.18 168 UNDISC_MONEY 2112 0.41 1.21 0.01 169 RELAYCOUNTRY_AU 2080 0.60 1.19 0.30 170 DKIM_ADSP_CUSTOM_MED 2059 0.99 1.18 0.90 171 XM_B_DNDMA 2042 0.73 1.17 0.51 172 TR_Symld_Words 2030 1.41 1.17 1.53 173 RELAYCOUNTRY_RU 1999 0.44 1.15 0.08 174 TR_XM_PHPDW 1978 2.17 1.14 2.70 175 XMReplyNow 1972 0.58 1.13 0.30 176 XMPhish30 1971 0.84 1.13 0.69 177 XM_H_Long_From02 1958 1.28 1.12 1.36 178 TR_XM_Base64_M1 1918 0.84 1.10 0.71 179 TR_XM_Undi_Recip11 1900 0.40 1.09 0.05 180 TR_XM_PHPForged 1882 2.13 1.08 2.66 181 XMMoneyMeta_00 1867 0.65 1.07 0.43 182 URI_TRY_3LD 1849 0.67 1.06 0.47 183 XM_UB60 1844 0.42 1.06 0.10 184 TR_XM_FormFill2 1836 2.12 1.05 2.66 185 XM_H_PHPOS 1826 2.11 1.05 2.65 186 PLING_QUERY 1803 0.60 1.04 0.38 187 MPART_ALT_DIFF_COUNT 1783 0.74 1.02 0.59 188 XM_UB80 1779 0.37 1.02 0.04 189 FONT_INVIS_LONG_LINE 1728 0.44 0.99 0.17 190 XM_ProductURIs 1715 0.79 0.98 0.69 191 XM_S_SpammyWords 1690 0.53 0.97 0.31 192 TR_XM_Spammywords 1690 0.53 0.97 0.30 193 XM_OfRef7 1674 0.41 0.96 0.12 194 XMClaimOffer 1669 0.38 0.96 0.09 195 RCVD_IN_IADB_OPTIN 1666 1.97 0.96 2.49 196 HTML_TAG_BALANCE_CENTER 1593 0.36 0.91 0.08 197 DIET_1 1586 0.48 0.91 0.25 198 HK_SCAM 1569 0.30 0.90 0.00 199 MONEY_FORM_SHORT 1546 0.30 0.89 0.00 200 FORGED_GMAIL_RCVD 1535 0.63 0.88 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 300361 89.91 94.16 87.75 2 RELAYCOUNTRY_US 269236 79.42 80.94 78.66 3 DKIM_SIGNED 248091 78.06 89.03 72.48 4 XM_DK_Pass 242697 75.49 84.51 70.90 5 DKIM_VALID 239176 74.73 84.26 69.87 6 XM_B_Unicode 236425 72.98 80.66 69.07 7 DCC_CHECK_NEGATIVE 234478 55.83 30.94 68.50 8 BAYES_50 192604 51.08 40.87 56.27 9 DKIM_VALID_AU 186757 57.63 63.68 54.56 10 XMListUnsubscribeExists 167008 55.54 68.81 48.79 11 XM_B_SpammyWords 145495 51.59 69.46 42.51 12 XM_B_Unicode3 138176 41.78 44.54 40.37 13 RCVD_IN_MSPIKE_H2 129262 41.81 49.75 37.76 14 T_TM2_M_HEADER_IN_MSG 111496 28.77 21.31 32.57 15 DCC_CHECK 107684 44.13 69.03 31.46 16 DKIM_VALID_EF 92376 29.26 33.73 26.99 17 HTML_FONT_LOW_CONTRAST 92212 29.21 33.66 26.94 18 FVGT_m_MULTI_ODD 84074 28.20 35.34 24.56 19 LOC_TINY_FONT_1 76148 26.79 35.71 22.25 20 XMSubLong 73023 21.90 23.01 21.33 21 MIME_HTML_ONLY 67499 23.53 31.01 19.72 22 T_KAM_HTML_FONT_INVALID 65795 22.74 29.66 19.22 23 ALL_TRUSTED 62829 12.64 1.42 18.36 24 RCVD_IN_MSPIKE_WL 60498 15.86 12.29 17.67 25 XM_B_SpammyWords2 59324 25.00 40.07 17.33 26 USER_IN_DEF_DKIM_WL 41990 8.82 2.05 12.27 27 RCVD_IN_MSPIKE_H3 39769 10.88 9.44 11.62 28 XM_Multi_Part_URI 39388 13.47 17.32 11.51 29 XM_Body_Dirty_Words 38188 14.70 21.68 11.16 30 BAYES_00 33868 6.80 0.72 9.89 31 LotsOfNums_01 31592 8.56 7.26 9.23 32 BAYES_60 31053 8.52 7.45 9.07 33 XM_B_Unsub 29398 10.98 15.68 8.59 34 XM_DKIMWhitelistDomains 29247 5.68 0.04 8.54 35 TooManyTo_001 27425 6.85 4.55 8.01 36 XM_Evil_Numbers_Gen 26282 8.04 8.76 7.68 37 LOTS_OF_MONEY 25862 10.54 16.41 7.56 38 UNPARSEABLE_RELAY 24799 8.76 11.74 7.24 39 IN_ZIMBRA_NJ_WHITELIST 24520 4.79 0.12 7.16 40 TR_XM_BayesUnsub 22939 9.61 15.34 6.70 41 XM_DK_Undo_02 21835 18.62 42.69 6.38 42 MIME_QP_LONG_LINE 20836 5.28 3.70 6.09 43 TR_XM_DK_Bayes 20719 4.19 0.53 6.05 44 RCVD_IN_IADB_LISTED 20693 4.92 2.71 6.05 45 TR_XM_DK_Bayes1 20267 4.10 0.52 5.92 46 BAYES_40 20237 4.55 1.87 5.91 47 TR_XM_UnparsRelay 19538 7.67 11.51 5.71 48 T_TooManySym_01 18925 4.50 2.46 5.53 49 BAYES_99 18812 14.83 33.16 5.50 50 RCVD_IN_IADB_SPF 18294 4.32 2.31 5.34 51 TR_XM_DK_Bayes2 18034 3.64 0.45 5.27 52 XM_H_Long_From01 17710 5.51 6.16 5.17 53 MPART_ALT_DIFF 17343 5.56 6.52 5.07 54 RCVD_IN_MSPIKE_H4 17290 4.23 2.62 5.05 55 HTML_IMAGE_RATIO_02 17008 5.33 6.04 4.97 56 HTML_IMAGE_RATIO_04 16825 4.89 4.84 4.92 57 XM_SendGrid 16747 6.03 8.26 4.89 58 TR_XM_SpammyWords4 16588 7.52 12.78 4.85 59 RCVD_IN_IADB_SENDERID 16332 3.88 2.12 4.77 60 XM_PDF 16331 3.42 0.75 4.77 61 BOTNET_IPINHOSTNAME 16306 7.80 13.77 4.76 62 RCVD_IN_IADB_DK 15815 3.78 2.13 4.62 63 BAYES_999 15309 11.79 26.17 4.47 64 TR_XM_DKIM_Undo 15060 13.82 32.33 4.40 65 BAYES_80 14991 5.89 8.84 4.38 66 XMStrtUSub 14668 4.24 4.16 4.29 67 RCVD_IN_VALIDITY_SAFE 14648 3.93 3.23 4.28 68 BAYES_20 14323 3.20 1.26 4.18 69 RELAYCOUNTRY_META 13415 9.38 20.13 3.92 70 XM_B_SpammyWords3 13024 6.87 12.90 3.80 71 XMSubMetaSx_00 12901 4.42 5.69 3.77 72 RCVD_IN_IADB_VOUCHED 12830 2.99 1.49 3.75 73 RCVD_IN_VALIDITY_CERTIFIED 12808 3.29 2.42 3.74 74 T_REMOTE_IMAGE 12679 3.55 3.23 3.70 75 XM_UncommonTLD01 12328 4.59 6.52 3.60 76 MIME_HTML_ONLY_MULTI 12030 3.78 4.29 3.51 77 TR_XM_DK_SendGrid 11219 4.16 5.89 3.28 78 XMNumbers 11203 3.29 3.31 3.27 79 T_TooManySym_02 11181 2.45 0.84 3.27 80 HTML_IMAGE_RATIO_06 10950 3.15 3.07 3.20 81 TR_XM_PhishingBody 10914 4.30 6.48 3.19 82 FSL_BULK_SIG 10741 6.48 13.04 3.14 83 ANY_BOUNCE_MESSAGE 10700 2.34 0.79 3.13 84 BOUNCE_MESSAGE 10700 2.34 0.79 3.13 85 XMSexyCombo_05 10666 5.17 9.19 3.12 86 MAILING_LIST_MULTI 10639 2.75 2.03 3.11 87 XM_B_Phish_Phrases 10457 3.97 5.78 3.05 88 XM_H_PHPMailer 10024 2.10 0.46 2.93 89 URI_NOVOWEL 9964 2.67 2.21 2.91 90 TR_XM_PHPDW 9231 2.17 1.14 2.70 91 HTML_MIME_NO_HTML_TAG 9149 3.04 3.76 2.67 92 TR_XM_PHPForged 9110 2.13 1.08 2.66 93 TM2_M_URI_OPT_OUT 9110 2.61 2.51 2.66 94 TR_XM_FormFill2 9108 2.12 1.05 2.66 95 XM_H_PHPOS 9063 2.11 1.05 2.65 96 TR_Mismatch_TLD_01 9023 2.38 1.87 2.64 97 BAYES_95 8958 3.49 5.21 2.62 98 DKIM_INVALID 8915 3.33 4.77 2.60 99 RCVD_IN_IADB_OPTIN 8526 1.97 0.96 2.49 100 XM_H_PHPOS_M 8408 1.72 0.26 2.46 101 XM_H_Trusted_IP 8400 1.63 0.00 2.45 102 HTML_IMAGE_RATIO_08 8318 2.83 3.61 2.43 103 XM_SPF_SoftFail 7887 3.11 4.69 2.30 104 TooManyTo_002 7804 1.72 0.61 2.28 105 MIME_HTML_MOSTLY 7678 2.58 3.25 2.24 106 XM_B_SpammyTLD 7538 3.09 4.83 2.20 107 BAYES_05 7450 1.65 0.60 2.18 108 FROM_EXCESS_BASE64 7305 2.08 1.99 2.13 109 TR_XM_SB_Phish 6927 1.90 1.66 2.02 110 SUBJ_ALL_CAPS 6848 2.04 2.12 2.00 111 INVALID_MSGID 6835 1.36 0.10 2.00 112 XMSubPhish11 6824 1.82 1.48 1.99 113 TVD_RCVD_IP 6680 1.41 0.33 1.95 114 HELO_NODOT 6600 1.39 0.33 1.93 115 HELO_NO_DOMAIN 6598 1.39 0.33 1.93 116 XM_B_Phish66 6501 2.57 3.89 1.90 117 XM_CamelCaseFrm001 6472 2.20 2.81 1.89 118 XM_GoogleGroups 6353 1.94 2.11 1.86 119 IN_HORDE_ADDRESS_BOOK 6275 1.25 0.10 1.83 120 TM2_M_VERY_LONG_WORD 6260 2.75 4.57 1.83 121 MSGID_NOFQDN1 6044 1.18 0.03 1.77 122 T_XMDrugObfuBody_14 6023 2.37 3.56 1.76 123 TO_MALFORMED 5997 1.18 0.05 1.75 124 TR_XM_SpammyRelay 5995 5.77 13.68 1.75 125 TR_XM_SpammyWords5 5710 2.25 3.40 1.67 126 KHOP_HELO_FCRDNS 5640 1.85 2.25 1.65 127 XMDiploma_00 5609 2.08 2.95 1.64 128 XM_B_Investor 5554 2.83 5.19 1.62 129 XM_DK_Undo_01 5305 1.73 2.09 1.55 130 TR_Symld_Words 5241 1.41 1.17 1.53 131 TooManyTo_003 5143 1.12 0.36 1.50 132 TR_DCC_Bayes_99 5129 8.56 22.43 1.50 133 BOTNET 5059 5.13 12.29 1.48 134 UNTRUSTED_Relay 4852 3.93 8.87 1.42 135 XM_H_Long_From02 4644 1.28 1.12 1.36 136 XMGappySubj_01 4498 0.92 0.16 1.31 137 T_XMDrugObfuBody_08 4398 1.93 3.20 1.28 138 RCVD_IN_MSPIKE_BL 4336 2.82 5.87 1.27 139 TR_XM_MSPIKECOMBO 4320 2.64 5.35 1.26 140 XMStockSpam_06 4296 1.40 1.69 1.26 141 XM_B_Unsub2 4161 1.68 2.60 1.22 142 XMBSHREFv2 4124 0.90 0.31 1.20 143 RELAYCOUNTRY_CA 3992 3.51 8.12 1.17 144 URI_HEX 3986 1.37 1.76 1.16 145 XMCapTrack 3951 0.90 0.40 1.15 146 XMBody_95 3863 0.81 0.17 1.13 147 TooManyTo_004 3820 0.85 0.31 1.12 148 XM_OfRef6 3758 2.23 4.47 1.10 149 HTML_FONT_FACE_BAD 3593 0.91 0.65 1.05 150 XMSexyCombo_01 3586 1.34 1.92 1.05 151 RCVD_IN_MSPIKE_H5 3439 0.74 0.23 1.00 152 XMLngstWrd_00 3420 1.77 3.29 1.00 153 XMGenDplmaNmb 3272 1.08 1.32 0.96 154 XMLngstWrd_01 3210 1.72 3.26 0.94 155 TooManyTo_005 3133 0.70 0.26 0.92 156 T_FILL_THIS_FORM_SHORT 3117 1.67 3.16 0.91 157 XM_UB50 3078 1.83 3.66 0.90 158 DKIM_ADSP_CUSTOM_MED 3076 0.99 1.18 0.90 159 XMSubNoVowel 3038 0.86 0.82 0.89 160 RCVD_IN_RP_SAFE 2930 0.78 0.64 0.86 161 T_XMHurry_00 2909 1.13 1.67 0.85 162 XMLngstWrd_02 2898 1.64 3.19 0.85 163 TVD_SPACE_RATIO 2889 0.60 0.11 0.84 164 RCVD_IN_MSPIKE_L3 2854 1.25 2.06 0.83 165 TR_XM_SpammyWords2 2838 4.53 11.79 0.83 166 XMSubMetaSxObfu_03 2799 0.69 0.43 0.82 167 HTTPS_HTTP_MISMATCH 2779 1.01 1.41 0.81 168 SpammyFromTLD_01 2711 1.32 2.36 0.79 169 TR_MetaPhish_Combo_01 2670 0.81 0.87 0.78 170 T_XMDrugObfuBody_00 2572 1.12 1.85 0.75 171 XMLngstWrd_03 2560 1.51 3.01 0.75 172 RCVD_IN_RP_CERTIFIED 2559 0.65 0.47 0.75 173 XMHTML_After_End 2474 1.03 1.64 0.72 174 T_TooManySym_03 2462 0.58 0.30 0.72 175 XMBrknScrpt_02 2439 1.01 1.61 0.71 176 TR_XM_Base64_M1 2421 0.84 1.10 0.71 177 XMLngstWrd_04 2382 1.46 2.97 0.70 178 XM_ProductURIs 2371 0.79 0.98 0.69 179 XMPhish30 2347 0.84 1.13 0.69 180 XMBdyGiftCard01 2317 0.95 1.49 0.68 181 HTML_TAG_BALANCE_BODY 2179 0.88 1.35 0.64 182 XM_ShortIntro_01 2172 0.52 0.29 0.63 183 RCVD_IN_PSBL 2171 0.88 1.38 0.63 184 HTML_IMAGE_ONLY_20 2092 0.66 0.76 0.61 185 FROM_GOV_DKIM_AU 2077 0.50 0.28 0.61 186 MPART_ALT_DIFF_COUNT 2027 0.74 1.02 0.59 187 T_OBFU_PDF_ATTACH 2022 0.43 0.13 0.59 188 SHORT_HELO_AND_INLINE_IMAGE 2011 0.42 0.08 0.59 189 XMSexyCombo_04 1995 0.60 0.65 0.58 190 HTML_TITLE_SUBJ_DIFF 1986 0.92 1.60 0.58 191 RELAYCOUNTRY_GB 1982 0.63 0.73 0.58 192 XMSubMetaSxObfu_02 1975 0.55 0.48 0.58 193 UPPERCASE_75_100 1964 0.94 1.67 0.57 194 RCVD_IN_SORBS_DUL 1942 0.43 0.17 0.57 195 XM_B_SpammyWords4 1932 1.05 2.01 0.56 196 XMHTMLBadTable_001 1846 0.65 0.86 0.54 197 T_Symld_Words_02 1816 0.61 0.77 0.53 198 NML_ADSP_CUSTOM_MED 1791 0.64 0.87 0.52 199 XMNoVowels 1785 0.47 0.37 0.52 200 XM_B_COVIDMETA 1775 0.99 1.92 0.52 ----------------------------------------------------------------------