Email: 634405 Autolearn: 0 AvgScore: 1.39 AvgScanTime: 1.36 sec Spam: 166595 Autolearn: 0 AvgScore: 13.61 AvgScanTime: 1.65 sec Ham: 467810 Autolearn: 0 AvgScore: -2.96 AvgScanTime: 1.26 sec Time Spent Running SA: 240.17 hours Time Spent Processing Spam: 76.48 hours Time Spent Processing Ham: 163.69 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 157914 81.79 94.79 77.16 2 DKIM_SIGNED 150949 65.14 90.61 56.07 3 XM_DK_Pass 148043 63.63 88.86 54.65 4 DKIM_VALID 146547 62.83 87.97 53.89 5 XM_B_Unicode 140777 69.63 84.50 64.34 6 RELAYCOUNTRY_US 133220 73.61 79.97 71.34 7 DCC_CHECK 123051 38.58 73.86 26.01 8 XMListUnsubscribeExists 122543 46.53 73.56 36.90 9 XM_B_SpammyWords 119441 46.94 71.70 38.12 10 DKIM_VALID_AU 110907 49.31 66.57 43.16 11 RCVD_IN_MSPIKE_H2 78759 34.24 47.28 29.60 12 XM_DK_Undo_02 77524 15.48 46.53 4.42 13 XM_B_Unicode3 76163 40.47 45.72 38.60 14 XM_B_SpammyWords2 67761 20.98 40.67 13.97 15 BAYES_50 67378 50.28 40.44 53.78 16 LOC_TINY_FONT_1 66278 24.11 39.78 18.53 17 TR_XM_DKIM_Undo 61971 12.02 37.20 3.05 18 HTML_FONT_LOW_CONTRAST 58809 25.36 35.30 21.82 19 DKIM_VALID_EF 58730 25.15 35.25 21.55 20 FVGT_m_MULTI_ODD 57923 23.81 34.77 19.91 21 BAYES_99 56760 11.42 34.07 3.35 22 T_KAM_HTML_FONT_INVALID 52458 19.34 31.49 15.01 23 MIME_HTML_ONLY 51968 22.94 31.19 20.00 24 BAYES_999 44370 8.95 26.63 2.65 25 DCC_CHECK_NEGATIVE 43512 61.39 26.12 73.94 26 TR_DCC_Bayes_99 40081 7.16 24.06 1.14 27 T_TM2_M_HEADER_IN_MSG 38350 22.98 23.02 22.97 28 XMSubLong 38302 20.09 22.99 19.05 29 XM_Body_Dirty_Words 38247 12.46 22.96 8.73 30 RELAYCOUNTRY_META 33667 7.40 20.21 2.84 31 XM_Multi_Part_URI 31464 12.40 18.89 10.09 32 RCVD_IN_MSPIKE_WL 27452 14.27 16.48 13.49 33 TR_XM_SpammyRelay 25302 4.91 15.19 1.25 34 XM_B_Unsub 24562 8.35 14.74 6.07 35 BOTNET_IPINHOSTNAME 24192 6.46 14.52 3.60 36 TR_XM_BayesUnsub 23943 7.27 14.37 4.74 37 LOTS_OF_MONEY 23298 7.34 13.98 4.98 38 XM_B_SpammyWords3 22290 6.00 13.38 3.37 39 RCVD_IN_MSPIKE_H3 21738 9.57 13.05 8.33 40 TR_XM_SpammyWords2 19450 3.49 11.68 0.57 41 TR_XM_SpammyWords4 19424 5.43 11.66 3.21 42 UNPARSEABLE_RELAY 18460 7.64 11.08 6.41 43 RCVD_IN_BL_SPAMCOP_NET 18098 3.08 10.86 0.31 44 XMSexyCombo_05 16677 4.48 10.01 2.51 45 BOTNET 16324 3.50 9.80 1.25 46 RELAYCOUNTRY_CA 16257 3.21 9.76 0.88 47 XM_Evil_Numbers_Gen 15692 8.49 9.42 8.16 48 FSL_BULK_SIG 14575 4.17 8.75 2.54 49 BAYES_80 14345 4.67 8.61 3.27 50 TR_XM_SPAMCOP 13649 2.29 8.19 0.19 51 MPART_ALT_DIFF 13543 8.98 8.13 9.28 52 UNTRUSTED_Relay 13332 2.92 8.00 1.10 53 XM_UncommonTLD01 13311 4.32 7.99 3.02 54 BAYES_60 12904 7.14 7.75 6.93 55 TR_XM_UnparsRelay 11589 2.69 6.96 1.17 56 LotsOfNums_01 11439 6.69 6.87 6.62 57 TR_XM_PhishingBody 11416 3.84 6.85 2.77 58 XM_SendGrid 11303 4.92 6.78 4.26 59 XM_B_Phish_Phrases 10248 3.80 6.15 2.96 60 HTML_IMAGE_RATIO_02 10212 4.91 6.13 4.47 61 XMSubMetaSx_00 9992 3.69 6.00 2.86 62 XM_H_Long_From01 9777 4.56 5.87 4.09 63 BAYES_95 8672 2.92 5.21 2.10 64 HTML_IMAGE_RATIO_04 8549 11.87 5.13 14.27 65 XM_B_Investor 8530 2.17 5.12 1.12 66 MIME_HTML_MOSTLY 8241 3.14 4.95 2.50 67 XM_OfRef6 7965 1.88 4.78 0.85 68 TooManyTo_001 7664 5.92 4.60 6.39 69 XM_B_SpammyTLD 7394 2.54 4.44 1.87 70 T_FILL_THIS_FORM_SHORT 7180 1.66 4.31 0.72 71 XM_SPF_SoftFail 7107 2.55 4.27 1.94 72 T_XMDrugObfuBody_08 7100 2.00 4.26 1.20 73 XMBody_17 7027 1.48 4.22 0.50 74 RCVD_IN_MSPIKE_BL 6938 1.36 4.16 0.36 75 XM_DIRTYINTL 6874 1.25 4.13 0.22 76 TR_XM_MSPIKECOMBO 6839 1.34 4.11 0.36 77 MIME_HTML_ONLY_MULTI 6793 6.42 4.08 7.25 78 XMStrtUSub 6718 8.60 4.03 10.22 79 TR_XM_DK_SendGrid 6680 3.22 4.01 2.94 80 XM_B_Phish66 6266 2.02 3.76 1.40 81 XMNumbers 6262 3.15 3.76 2.93 82 T_XMDrugObfuBody_14 6237 1.79 3.74 1.09 83 TM2_M_VERY_LONG_WORD 6167 1.66 3.70 0.93 84 RCVD_IN_VALIDITY_SAFE 6158 3.86 3.70 3.92 85 TR_XM_SpammyWords5 5866 1.59 3.52 0.91 86 HTML_IMAGE_RATIO_06 5629 4.35 3.38 4.70 87 XM_UB50 5582 1.40 3.35 0.71 88 HTML_IMAGE_RATIO_08 5494 2.02 3.30 1.56 89 SpammyFromTLD_01 5474 1.27 3.29 0.55 90 TM2_M_URI_OPT_OUT 5354 11.51 3.21 14.46 91 RCVD_IN_MSPIKE_H4 5319 4.02 3.19 4.32 92 URI_NOVOWEL 5280 1.92 3.17 1.47 93 MIME_QP_LONG_LINE 5111 3.59 3.07 3.78 94 SpammyFromTLD_02 5023 1.11 3.02 0.44 95 TR_XM_SpammyWords3 4809 0.91 2.89 0.21 96 RCVD_IN_VALIDITY_CERTIFIED 4798 3.33 2.88 3.49 97 XM_B_Unsub2 4586 1.69 2.75 1.32 98 XM_DK_Undo_01 4466 1.55 2.68 1.15 99 DKIM_INVALID 4402 2.31 2.64 2.19 100 URIBL_DBL_SPAM 4233 0.67 2.54 0.00 101 XM_CamelCaseFrm001 4162 1.72 2.50 1.45 102 XMDiploma_00 4058 1.28 2.44 0.87 103 HTML_MIME_NO_HTML_TAG 4058 1.95 2.44 1.78 104 USER_IN_DEF_DKIM_WL 4050 7.58 2.43 9.42 105 T_TooManySym_01 4033 4.28 2.42 4.94 106 TR_XM_FormFill 3971 0.64 2.38 0.03 107 XM_B_SpammyWords4 3812 0.91 2.29 0.42 108 FROM_EXCESS_BASE64 3799 1.83 2.28 1.67 109 TR_LOTS_OF_MONEY3 3723 0.83 2.23 0.33 110 T_XMHurry_00 3552 0.89 2.13 0.44 111 RCVD_IN_MSPIKE_L3 3533 0.72 2.12 0.22 112 RELAYCOUNTRY_IN 3458 0.59 2.08 0.06 113 XMSexyCombo_01 3253 1.02 1.95 0.69 114 TR_XM_SB_Phish 3236 1.67 1.94 1.57 115 T_XMDrugObfuBody_00 3229 0.93 1.94 0.57 116 FONT_INVIS_LONG_LINE 3193 0.54 1.92 0.05 117 RCVD_IN_IADB_LISTED 3182 2.92 1.91 3.29 118 MAILING_LIST_MULTI 3161 1.96 1.90 1.99 119 XMSubPhish11 3101 1.60 1.86 1.50 120 HK_RANDOM_REPLYTO 3034 0.52 1.82 0.06 121 SUBJ_ALL_CAPS 3029 1.33 1.82 1.15 122 URI_PHP_REDIR 3025 0.48 1.82 0.00 123 XM_B_COVIDMETA 2969 0.76 1.78 0.40 124 TR_Mismatch_TLD_02 2920 0.58 1.75 0.16 125 XMStockSpam_06 2875 1.30 1.73 1.15 126 URI_HEX 2851 1.09 1.71 0.87 127 RCVD_IN_IADB_SPF 2803 2.63 1.68 2.97 128 RCVD_IN_VALIDITY_RPBL 2768 0.48 1.66 0.05 129 XM_UB99 2759 0.44 1.66 0.00 130 LongTLD 2733 0.66 1.64 0.31 131 T_REMOTE_IMAGE 2727 2.63 1.64 2.98 132 TR_XM_NoHeaderRelay 2664 0.50 1.60 0.10 133 XMBdyGiftCard01 2660 0.97 1.60 0.75 134 FROM_SUSPICIOUS_NTLD 2655 0.44 1.59 0.03 135 XM_H_Undi_Recip 2648 0.55 1.59 0.18 136 HTTPS_HTTP_MISMATCH 2646 0.89 1.59 0.64 137 RCVD_IN_IADB_DK 2627 2.37 1.58 2.66 138 ALL_TRUSTED 2613 19.84 1.57 26.34 139 RCVD_IN_IADB_SENDERID 2593 2.40 1.56 2.70 140 TR_XM_PHPDW 2584 0.70 1.55 0.39 141 XM_GoogleGroups 2538 1.08 1.52 0.93 142 FROM_SUSPICIOUS_NTLD_FP 2533 0.42 1.52 0.03 143 XM_URI_RBL 2522 0.48 1.51 0.11 144 TR_XM_PHPForged 2501 0.67 1.50 0.38 145 PDS_OTHER_BAD_TLD 2484 0.54 1.49 0.20 146 BAYES_40 2472 3.63 1.48 4.39 147 RCVD_IN_MSPIKE_L5 2465 0.40 1.48 0.02 148 TR_XM_FormFill2 2454 0.66 1.47 0.37 149 XM_H_PHPOS 2443 0.66 1.47 0.37 150 DIET_1 2433 0.64 1.46 0.35 151 XMHTML_After_End 2394 0.89 1.44 0.69 152 XMPhish30 2389 0.98 1.43 0.82 153 XMBrknScrpt_02 2374 0.81 1.43 0.60 154 XMLngstWrd_00 2329 0.75 1.40 0.53 155 XM_ProductURIs 2308 0.74 1.39 0.52 156 BOTNET_NORDNS 2279 0.37 1.37 0.01 157 XM_Body_Dirty_Words_01 2273 0.43 1.36 0.10 158 TR_XM_BayesRelay 2251 0.36 1.35 0.00 159 XMLngstWrd_01 2222 0.69 1.33 0.45 160 URIBL_BLACK 2168 0.37 1.30 0.04 161 XMGenDplmaNmb 2151 0.68 1.29 0.46 162 XMLngstWrd_02 2053 0.59 1.23 0.36 163 RELAYCOUNTRY_AU 2051 0.50 1.23 0.23 164 HTML_TAG_BALANCE_BODY 2023 0.69 1.21 0.51 165 TR_XM_InvalidRelay 2022 0.33 1.21 0.02 166 KHOP_HELO_FCRDNS 2011 1.18 1.21 1.17 167 XMReplyNow 2006 0.47 1.20 0.21 168 XM_OfRef7 1897 0.37 1.14 0.09 169 XM_UB999 1886 0.30 1.13 0.00 170 RCVD_IN_PSBL 1885 0.51 1.13 0.29 171 RELAYCOUNTRY_FR 1874 0.45 1.12 0.20 172 TR_XM_Base64_M1 1842 0.71 1.11 0.58 173 URI_TRY_3LD 1825 0.66 1.10 0.51 174 XM_B_SEO 1812 0.36 1.09 0.10 175 TR_XM_Undi_Recip5 1807 0.29 1.08 0.00 176 BAYES_20 1797 3.61 1.08 4.52 177 TR_XM_COVIDMETA1 1758 0.38 1.06 0.14 178 MPART_ALT_DIFF_COUNT 1744 0.57 1.05 0.40 179 TR_XM_MSPIKECOMBO2 1716 0.28 1.03 0.02 180 XMMoneyMeta_00 1697 0.57 1.02 0.41 181 TR_XM_Undi_RecipCombo2 1695 0.27 1.02 0.00 182 HTML_FONT_FACE_BAD 1694 10.55 1.02 13.95 183 XM_UB80 1689 0.28 1.01 0.02 184 XM_UB60 1658 0.31 1.00 0.06 185 TR_XM_SEO4 1639 0.30 0.98 0.05 186 XM_B_COPY_HTML 1626 0.62 0.98 0.49 187 PLING_QUERY 1626 0.54 0.98 0.38 188 XM_H_Long_From02 1611 0.83 0.97 0.78 189 TR_Symld_Words 1594 1.11 0.96 1.17 190 UNDISC_MONEY 1568 0.25 0.94 0.00 191 XMLngstWrd_03 1553 0.45 0.93 0.28 192 HTML_IMAGE_ONLY_20 1550 0.58 0.93 0.46 193 TR_XM_Undi_Recip11 1534 0.27 0.92 0.04 194 HTML_TITLE_SUBJ_DIFF 1512 0.25 0.91 0.01 195 RELAYCOUNTRY_RU 1505 0.25 0.90 0.02 196 RCVD_IN_IADB_VOUCHED 1472 1.61 0.88 1.87 197 XMLngstWrd_04 1469 0.39 0.88 0.21 198 TR_XM_Base64_L1 1458 0.45 0.88 0.30 199 SHOPIFY_IMG_NOT_RCVD_SFY 1448 0.38 0.87 0.21 200 XMSubMetaI_00 1434 0.49 0.86 0.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 360940 81.79 94.79 77.16 2 DCC_CHECK_NEGATIVE 345922 61.39 26.12 73.94 3 RELAYCOUNTRY_US 333739 73.61 79.97 71.34 4 XM_B_Unicode 300986 69.63 84.50 64.34 5 DKIM_SIGNED 262321 65.14 90.61 56.07 6 XM_DK_Pass 255635 63.63 88.86 54.65 7 DKIM_VALID 252081 62.83 87.97 53.89 8 BAYES_50 251577 50.28 40.44 53.78 9 DKIM_VALID_AU 201926 49.31 66.57 43.16 10 XM_B_Unicode3 180558 40.47 45.72 38.60 11 XM_B_SpammyWords 178346 46.94 71.70 38.12 12 XMListUnsubscribeExists 172645 46.53 73.56 36.90 13 RCVD_IN_MSPIKE_H2 138460 34.24 47.28 29.60 14 ALL_TRUSTED 123243 19.84 1.57 26.34 15 DCC_CHECK 121684 38.58 73.86 26.01 16 T_TM2_M_HEADER_IN_MSG 107435 22.98 23.02 22.97 17 HTML_FONT_LOW_CONTRAST 102074 25.36 35.30 21.82 18 DKIM_VALID_EF 100795 25.15 35.25 21.55 19 MIME_HTML_ONLY 93557 22.94 31.19 20.00 20 FVGT_m_MULTI_ODD 93151 23.81 34.77 19.91 21 XMSubLong 89140 20.09 22.99 19.05 22 LOC_TINY_FONT_1 86676 24.11 39.78 18.53 23 BAYES_00 83991 13.44 0.75 17.95 24 ANY_BOUNCE_MESSAGE 72222 11.58 0.73 15.44 25 BOUNCE_MESSAGE 72220 11.58 0.73 15.44 26 T_KAM_HTML_FONT_INVALID 70209 19.34 31.49 15.01 27 TM2_M_URI_OPT_OUT 67663 11.51 3.21 14.46 28 HTML_IMAGE_RATIO_04 66740 11.87 5.13 14.27 29 XM_B_SpammyWords2 65333 20.98 40.67 13.97 30 HTML_FONT_FACE_BAD 65260 10.55 1.02 13.95 31 RCVD_IN_MSPIKE_WL 63088 14.27 16.48 13.49 32 XM_H_Trusted_IP 59863 9.44 0.00 12.80 33 XMStrtUSub 47810 8.60 4.03 10.22 34 XM_Multi_Part_URI 47188 12.40 18.89 10.09 35 USER_IN_DEF_DKIM_WL 44047 7.58 2.43 9.42 36 MPART_ALT_DIFF 43426 8.98 8.13 9.28 37 XM_Body_Dirty_Words 40829 12.46 22.96 8.73 38 RCVD_IN_MSPIKE_H3 38972 9.57 13.05 8.33 39 XM_Evil_Numbers_Gen 38181 8.49 9.42 8.16 40 MIME_HTML_ONLY_MULTI 33937 6.42 4.08 7.25 41 BAYES_60 32407 7.14 7.75 6.93 42 LotsOfNums_01 30985 6.69 6.87 6.62 43 XM_DKIMWhitelistDomains 30285 4.78 0.03 6.47 44 UNPARSEABLE_RELAY 29986 7.64 11.08 6.41 45 TooManyTo_001 29888 5.92 4.60 6.39 46 XM_B_Unsub 28398 8.35 14.74 6.07 47 IN_ZIMBRA_NJ_WHITELIST 23696 3.76 0.11 5.07 48 LOTS_OF_MONEY 23299 7.34 13.98 4.98 49 T_TooManySym_01 23103 4.28 2.42 4.94 50 TR_XM_DK_Bayes 22448 3.68 0.56 4.80 51 TR_XM_BayesUnsub 22175 7.27 14.37 4.74 52 TR_XM_DK_Bayes1 22044 3.62 0.55 4.71 53 HTML_IMAGE_RATIO_06 21967 4.35 3.38 4.70 54 BAYES_20 21126 3.61 1.08 4.52 55 HTML_IMAGE_RATIO_02 20908 4.91 6.13 4.47 56 XM_DK_Undo_02 20668 15.48 46.53 4.42 57 BAYES_40 20558 3.63 1.48 4.39 58 RCVD_IN_MSPIKE_H4 20205 4.02 3.19 4.32 59 XM_SendGrid 19919 4.92 6.78 4.26 60 TR_XM_DK_Bayes2 19512 3.19 0.44 4.17 61 XMSubNoVowel 19350 3.22 0.65 4.14 62 XM_H_Long_From01 19140 4.56 5.87 4.09 63 RCVD_IN_VALIDITY_SAFE 18341 3.86 3.70 3.92 64 MIME_QP_LONG_LINE 17671 3.59 3.07 3.78 65 BAYES_05 17366 2.90 0.61 3.71 66 BOTNET_IPINHOSTNAME 16820 6.46 14.52 3.60 67 RCVD_IN_VALIDITY_CERTIFIED 16330 3.33 2.88 3.49 68 XM_PDF 16237 2.72 0.62 3.47 69 XM_B_SpammyWords3 15773 6.00 13.38 3.37 70 BAYES_99 15658 11.42 34.07 3.35 71 RCVD_IN_IADB_LISTED 15373 2.92 1.91 3.29 72 BAYES_80 15281 4.67 8.61 3.27 73 TR_XM_SpammyWords4 15038 5.43 11.66 3.21 74 TR_XM_DKIM_Undo 14263 12.02 37.20 3.05 75 T_TooManySym_02 14145 2.42 0.72 3.02 76 XM_UncommonTLD01 14120 4.32 7.99 3.02 77 T_REMOTE_IMAGE 13945 2.63 1.64 2.98 78 RCVD_IN_IADB_SPF 13888 2.63 1.68 2.97 79 XM_B_Phish_Phrases 13837 3.80 6.15 2.96 80 TR_XM_DK_SendGrid 13744 3.22 4.01 2.94 81 XMNumbers 13729 3.15 3.76 2.93 82 XMSubMetaSx_00 13398 3.69 6.00 2.86 83 RELAYCOUNTRY_META 13276 7.40 20.21 2.84 84 TR_XM_PhishingBody 12968 3.84 6.85 2.77 85 RCVD_IN_IADB_SENDERID 12644 2.40 1.56 2.70 86 RCVD_IN_IADB_DK 12431 2.37 1.58 2.66 87 BAYES_999 12390 8.95 26.63 2.65 88 FSL_BULK_SIG 11895 4.17 8.75 2.54 89 XMSexyCombo_05 11765 4.48 10.01 2.51 90 MIME_HTML_MOSTLY 11679 3.14 4.95 2.50 91 DKIM_INVALID 10240 2.31 2.64 2.19 92 BAYES_95 9845 2.92 5.21 2.10 93 MAILING_LIST_MULTI 9290 1.96 1.90 1.99 94 XM_SPF_SoftFail 9093 2.55 4.27 1.94 95 RCVD_IN_IADB_VOUCHED 8759 1.61 0.88 1.87 96 XM_B_SpammyTLD 8728 2.54 4.44 1.87 97 XMSubLongNoVowel 8625 1.40 0.16 1.84 98 XMSubGarbage 8440 1.34 0.05 1.80 99 HTML_MIME_NO_HTML_TAG 8309 1.95 2.44 1.78 100 TooManyTo_002 7840 1.40 0.64 1.68 101 FROM_EXCESS_BASE64 7809 1.83 2.28 1.67 102 TR_XM_SB_Phish 7358 1.67 1.94 1.57 103 HTML_IMAGE_RATIO_08 7297 2.02 3.30 1.56 104 TVD_RCVD_IP 7147 1.20 0.27 1.53 105 XMSubPhish11 7033 1.60 1.86 1.50 106 URI_NOVOWEL 6890 1.92 3.17 1.47 107 XM_CamelCaseFrm001 6771 1.72 2.50 1.45 108 INVALID_MSGID 6752 1.10 0.15 1.44 109 XM_B_Phish66 6549 2.02 3.76 1.40 110 IN_HORDE_ADDRESS_BOOK 6315 1.03 0.12 1.35 111 MSGID_NOFQDN1 6279 1.00 0.03 1.34 112 XM_B_Unsub2 6165 1.69 2.75 1.32 113 HELO_NODOT 6163 1.10 0.48 1.32 114 HELO_NO_DOMAIN 6157 1.09 0.47 1.32 115 TO_MALFORMED 5975 0.95 0.03 1.28 116 BOTNET 5870 3.50 9.80 1.25 117 TR_XM_SpammyRelay 5866 4.91 15.19 1.25 118 RCVD_IN_IADB_OPTIN 5789 1.05 0.51 1.24 119 T_XMDrugObfuBody_08 5615 2.00 4.26 1.20 120 T_TooManySym_03 5612 0.96 0.27 1.20 121 KHOP_HELO_FCRDNS 5487 1.18 1.21 1.17 122 TR_Symld_Words 5479 1.11 0.96 1.17 123 TR_XM_UnparsRelay 5466 2.69 6.96 1.17 124 SUBJ_ALL_CAPS 5381 1.33 1.82 1.15 125 XM_DK_Undo_01 5379 1.55 2.68 1.15 126 XMStockSpam_06 5377 1.30 1.73 1.15 127 TR_DCC_Bayes_99 5326 7.16 24.06 1.14 128 XM_B_Investor 5255 2.17 5.12 1.12 129 TooManyTo_003 5250 0.96 0.50 1.12 130 TVD_SPACE_RATIO 5247 0.85 0.09 1.12 131 UNTRUSTED_Relay 5168 2.92 8.00 1.10 132 T_XMDrugObfuBody_14 5099 1.79 3.74 1.09 133 XM_E_Blogspot 4462 0.73 0.12 0.95 134 XMGappySubj_01 4410 0.73 0.13 0.94 135 TM2_M_VERY_LONG_WORD 4358 1.66 3.70 0.93 136 XM_GoogleGroups 4328 1.08 1.52 0.93 137 TR_XM_SpammyWords5 4236 1.59 3.52 0.91 138 RELAYCOUNTRY_CA 4105 3.21 9.76 0.88 139 XMCapTrack 4077 0.73 0.32 0.87 140 URI_HEX 4067 1.09 1.71 0.87 141 XMDiploma_00 4061 1.28 2.44 0.87 142 XMBody_95 4019 0.68 0.16 0.86 143 XM_OfRef6 3982 1.88 4.78 0.85 144 XMBSHREFv2 3963 0.70 0.27 0.85 145 RCVD_IN_MSPIKE_H5 3911 0.68 0.24 0.84 146 XMPhish30 3837 0.98 1.43 0.82 147 TooManyTo_004 3719 0.70 0.43 0.79 148 RCVD_IN_RP_SAFE 3664 0.77 0.72 0.78 149 XM_H_Long_From02 3633 0.83 0.97 0.78 150 XMBdyGiftCard01 3509 0.97 1.60 0.75 151 T_FILL_THIS_FORM_SHORT 3357 1.66 4.31 0.72 152 XM_UB50 3309 1.40 3.35 0.71 153 RCVD_IN_RP_CERTIFIED 3306 0.67 0.56 0.71 154 XMSexyCombo_01 3239 1.02 1.95 0.69 155 XMHTML_After_End 3232 0.89 1.44 0.69 156 DKIM_ADSP_CUSTOM_MED 3043 0.68 0.75 0.65 157 TooManyTo_005 3042 0.58 0.39 0.65 158 HTTPS_HTTP_MISMATCH 2998 0.89 1.59 0.64 159 FVGT_m_MULTI_ODD_EMAIL 2976 0.50 0.12 0.64 160 XMBrknScrpt_02 2787 0.81 1.43 0.60 161 TR_MetaPhish_Combo_01 2774 0.64 0.76 0.59 162 TR_XM_Base64_M1 2690 0.71 1.11 0.58 163 T_XMDrugObfuBody_00 2688 0.93 1.94 0.57 164 TR_XM_SpammyWords2 2684 3.49 11.68 0.57 165 URI_OPTOUT_3LD 2625 0.47 0.22 0.56 166 SpammyFromTLD_01 2570 1.27 3.29 0.55 167 FROM_GOV_DKIM_AU 2562 0.52 0.46 0.55 168 XMLngstWrd_00 2457 0.75 1.40 0.53 169 XM_ProductURIs 2413 0.74 1.39 0.52 170 HTML_TAG_BALANCE_BODY 2385 0.69 1.21 0.51 171 URI_TRY_3LD 2384 0.66 1.10 0.51 172 XMBody_17 2362 1.48 4.22 0.50 173 XM_B_COPY_HTML 2301 0.62 0.98 0.49 174 XM_ShortIntro_01 2298 0.54 0.69 0.49 175 XM_H_PHPMailer 2174 0.53 0.70 0.46 176 XMGenDplmaNmb 2162 0.68 1.29 0.46 177 HTML_IMAGE_ONLY_20 2147 0.58 0.93 0.46 178 XMLngstWrd_01 2124 0.69 1.33 0.45 179 T_XMHurry_00 2077 0.89 2.13 0.44 180 XM_RXBody 2057 0.47 0.57 0.44 181 SpammyFromTLD_02 2039 1.11 3.02 0.44 182 XMSexyCombo_04 2002 0.49 0.65 0.43 183 XMNoVowels 1982 0.42 0.42 0.42 184 RELAYCOUNTRY_GB 1980 0.49 0.69 0.42 185 T_OBFU_PDF_ATTACH 1980 0.34 0.11 0.42 186 NML_ADSP_CUSTOM_MED 1959 0.46 0.59 0.42 187 XM_B_SpammyWords4 1946 0.91 2.29 0.42 188 XMMoneyMeta_00 1895 0.57 1.02 0.41 189 XM_B_COVIDMETA 1869 0.76 1.78 0.40 190 T_Symld_Words_02 1869 0.51 0.81 0.40 191 MPART_ALT_DIFF_COUNT 1861 0.57 1.05 0.40 192 XMOemUri 1860 0.42 0.46 0.40 193 TR_XM_PHPDW 1844 0.70 1.55 0.39 194 SHORT_HELO_AND_INLINE_IMAGE 1832 0.31 0.06 0.39 195 HTML_IMAGE_ONLY_32 1815 0.35 0.25 0.39 196 PLING_QUERY 1783 0.54 0.98 0.38 197 TR_XM_PHPForged 1769 0.67 1.50 0.38 198 TR_XM_FormFill2 1741 0.66 1.47 0.37 199 XM_H_PHPOS 1724 0.66 1.47 0.37 200 RCVD_IN_MSPIKE_BL 1702 1.36 4.16 0.36 ----------------------------------------------------------------------