Email: 560370 Autolearn: 0 AvgScore: 4.28 AvgScanTime: 1.68 sec Spam: 188817 Autolearn: 0 AvgScore: 13.62 AvgScanTime: 1.80 sec Ham: 371553 Autolearn: 0 AvgScore: -0.47 AvgScanTime: 1.62 sec Time Spent Running SA: 261.69 hours Time Spent Processing Spam: 94.54 hours Time Spent Processing Ham: 167.16 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 180759 90.45 95.73 87.76 2 DKIM_SIGNED 173960 81.92 92.13 76.73 3 XM_DK_Pass 170479 80.01 90.29 74.79 4 DKIM_VALID 169239 79.22 89.63 73.93 5 XM_B_Unicode 153754 74.88 81.43 71.55 6 RELAYCOUNTRY_US 153102 81.03 81.08 81.00 7 DCC_CHECK 144857 52.07 76.72 39.54 8 XMListUnsubscribeExists 142244 60.13 75.33 52.41 9 XM_B_SpammyWords 128573 53.84 68.09 46.59 10 DKIM_VALID_AU 128104 61.98 67.85 59.00 11 RCVD_IN_MSPIKE_H2 94981 43.51 50.30 40.06 12 XM_B_Unicode3 82022 42.85 43.44 42.55 13 XM_DK_Undo_02 80957 19.03 42.88 6.91 14 BAYES_50 80794 52.70 42.79 57.73 15 XM_B_SpammyWords2 75117 27.25 39.78 20.88 16 FVGT_m_MULTI_ODD 73783 31.16 39.08 27.13 17 LOC_TINY_FONT_1 72458 30.33 38.37 26.24 18 HTML_FONT_LOW_CONTRAST 66613 31.27 35.28 29.23 19 TR_XM_DKIM_Undo 63786 14.56 33.78 4.79 20 MIME_HTML_ONLY 63109 25.06 33.42 20.81 21 DKIM_VALID_EF 62743 29.30 33.23 27.30 22 BAYES_99 60082 14.10 31.82 5.10 23 T_KAM_HTML_FONT_INVALID 57422 24.50 30.41 21.50 24 BAYES_999 47003 11.05 24.89 4.02 25 TR_DCC_Bayes_99 44705 9.48 23.68 2.27 26 DCC_CHECK_NEGATIVE 43928 47.89 23.26 60.41 27 XMSubLong 41960 22.57 22.22 22.74 28 XM_Body_Dirty_Words 41256 15.14 21.85 11.74 29 RELAYCOUNTRY_META 39824 9.53 21.09 3.66 30 T_TM2_M_HEADER_IN_MSG 38919 25.58 20.61 28.10 31 XM_Multi_Part_URI 36115 15.28 19.13 13.32 32 RCVD_IN_MSPIKE_WL 33403 17.80 17.69 17.86 33 RCVD_IN_MSPIKE_H3 27890 12.45 14.77 11.27 34 BOTNET_IPINHOSTNAME 27837 8.19 14.74 4.86 35 XM_B_Unsub 27513 10.41 14.57 8.30 36 TR_XM_BayesUnsub 26566 9.33 14.07 6.93 37 TR_XM_SpammyRelay 26552 5.88 14.06 1.72 38 UNPARSEABLE_RELAY 25938 11.13 13.74 9.80 39 LOTS_OF_MONEY 23424 8.53 12.41 6.56 40 XM_B_SpammyWords3 22452 7.65 11.89 5.49 41 MPART_ALT_DIFF 21608 6.81 11.44 4.46 42 TR_XM_SpammyWords2 20927 4.65 11.08 1.37 43 XMSexyCombo_05 20399 6.14 10.80 3.77 44 TR_XM_SpammyWords4 19310 6.37 10.23 4.41 45 RCVD_IN_BL_SPAMCOP_NET 18174 3.59 9.63 0.53 46 RELAYCOUNTRY_CA 17742 3.86 9.40 1.05 47 FSL_BULK_SIG 17697 6.07 9.37 4.39 48 XM_UncommonTLD01 17259 5.47 9.14 3.61 49 XM_Evil_Numbers_Gen 16411 8.88 8.69 8.97 50 BAYES_80 16251 6.06 8.61 4.77 51 BOTNET 16218 4.00 8.59 1.66 52 TM2_M_VERY_LONG_WORD 15756 3.67 8.34 1.30 53 TR_XM_UnparsRelay 15737 4.17 8.33 2.06 54 BAYES_60 14865 9.03 7.87 9.61 55 MIME_HTML_ONLY_MULTI 14857 4.32 7.87 2.52 56 TR_XM_SPAMCOP 14360 2.73 7.61 0.26 57 UNTRUSTED_Relay 14307 3.54 7.58 1.49 58 LotsOfNums_01 14075 8.75 7.45 9.40 59 HTML_IMAGE_RATIO_02 13280 6.34 7.03 5.98 60 TR_XM_PhishingBody 12469 4.74 6.60 3.79 61 XM_SendGrid 12408 6.16 6.57 5.95 62 HTML_MIME_NO_HTML_TAG 12206 3.51 6.46 2.00 63 XM_GoogleGroups 10783 2.69 5.71 1.15 64 XMSubMetaSx_00 10658 4.13 5.64 3.36 65 XMLngstWrd_00 10538 2.27 5.58 0.58 66 XMLngstWrd_01 10480 2.20 5.55 0.50 67 XMLngstWrd_02 10358 2.12 5.49 0.41 68 XM_H_Long_From01 10247 5.70 5.43 5.84 69 XM_B_Phish_Phrases 9912 4.54 5.25 4.19 70 XM_B_SpammyTLD 9889 3.74 5.24 2.97 71 XMLngstWrd_03 9757 1.96 5.17 0.33 72 UPPERCASE_75_100 9699 1.74 5.14 0.02 73 XMLngstWrd_04 9691 1.90 5.13 0.26 74 HTML_TITLE_SUBJ_DIFF 9673 1.75 5.12 0.03 75 BAYES_95 9289 3.63 4.92 2.98 76 MIME_HTML_MOSTLY 8533 3.04 4.52 2.30 77 RCVD_IN_MSPIKE_BL 8346 2.00 4.42 0.76 78 TR_XM_MSPIKECOMBO 8176 1.96 4.33 0.76 79 TR_XM_DK_SendGrid 8165 4.14 4.32 4.05 80 XM_B_Investor 8002 2.41 4.24 1.48 81 T_XMDrugObfuBody_08 7986 2.43 4.23 1.51 82 XMStrtUSub 7969 4.85 4.22 5.16 83 TR_XM_SpammyWords5 7943 2.50 4.21 1.63 84 HTML_IMAGE_RATIO_04 7902 5.05 4.19 5.49 85 TooManyTo_001 7874 6.51 4.17 7.69 86 SpammyFromTLD_02 7855 1.73 4.16 0.49 87 XM_DIRTYINTL 7668 1.56 4.06 0.29 88 XM_SPF_SoftFail 7653 2.86 4.05 2.25 89 XM_B_Phish66 7458 2.76 3.95 2.15 90 MIME_QP_LONG_LINE 7376 4.88 3.91 5.38 91 XMBody_17 7277 1.67 3.85 0.55 92 XMNumbers 7225 3.93 3.83 3.98 93 XM_OfRef6 6878 1.77 3.64 0.82 94 T_XMDrugObfuBody_14 6807 2.09 3.61 1.33 95 T_FILL_THIS_FORM_SHORT 6734 1.77 3.57 0.85 96 URIBL_DBL_SPAM 6618 1.19 3.50 0.01 97 XM_UB50 6421 1.80 3.40 0.99 98 HTML_IMAGE_RATIO_06 6286 3.74 3.33 3.94 99 TR_XM_SpammyWords3 6262 1.43 3.32 0.47 100 RCVD_IN_VALIDITY_SAFE 6119 4.76 3.24 5.53 101 URI_NOVOWEL 5610 2.54 2.97 2.31 102 SpammyFromTLD_01 5575 1.55 2.95 0.84 103 XM_DK_Undo_01 5482 1.92 2.90 1.41 104 HTML_IMAGE_RATIO_08 5276 2.77 2.79 2.75 105 TM2_M_URI_OPT_OUT 5264 2.18 2.79 1.87 106 RCVD_IN_VALIDITY_CERTIFIED 4916 4.11 2.60 4.88 107 RCVD_IN_MSPIKE_H4 4897 4.44 2.59 5.38 108 XMDiploma_00 4788 1.59 2.54 1.12 109 DKIM_INVALID 4721 2.70 2.50 2.81 110 FROM_EXCESS_BASE64 4684 2.81 2.48 2.98 111 HK_RANDOM_REPLYTO 4595 0.87 2.43 0.08 112 T_TooManySym_01 4491 5.11 2.38 6.50 113 URI_PHP_REDIR 4474 0.80 2.37 0.01 114 XM_B_SpammyWords4 4472 1.20 2.37 0.60 115 RCVD_IN_IADB_LISTED 4463 4.28 2.36 5.25 116 PDS_OTHER_BAD_TLD 4318 1.10 2.29 0.50 117 USER_IN_DEF_DKIM_WL 4301 10.11 2.28 14.09 118 SUBJ_ALL_CAPS 4274 2.07 2.26 1.97 119 XM_B_Unsub2 4228 1.84 2.24 1.63 120 FONT_INVIS_LONG_LINE 4137 0.79 2.19 0.08 121 T_XMHurry_00 4084 1.25 2.16 0.79 122 RCVD_IN_IADB_SPF 4020 3.84 2.13 4.71 123 RCVD_IN_MSPIKE_L3 3992 1.11 2.11 0.60 124 MAILING_LIST_MULTI 3895 2.44 2.06 2.64 125 XMStockSpam_06 3851 1.81 2.04 1.70 126 RCVD_IN_MSPIKE_L5 3814 0.71 2.02 0.05 127 RCVD_IN_IADB_DK 3809 3.46 2.02 4.19 128 RCVD_IN_IADB_SENDERID 3783 3.50 2.00 4.27 129 XM_CamelCaseFrm001 3758 2.09 1.99 2.15 130 XM_H_Undi_Recip 3743 0.79 1.98 0.18 131 TR_XM_FormFill 3730 0.67 1.98 0.01 132 TR_LOTS_OF_MONEY3 3725 0.91 1.97 0.37 133 TR_XM_NoHeaderRelay 3672 0.73 1.94 0.12 134 T_XMDrugObfuBody_00 3500 1.36 1.85 1.11 135 URI_HEX 3424 1.62 1.81 1.52 136 XM_B_COVIDMETA 3372 0.92 1.79 0.48 137 XMSexyCombo_01 3262 0.81 1.73 0.35 138 RCVD_IN_VALIDITY_RPBL 3125 0.62 1.66 0.09 139 XM_URI_RBL 3122 0.64 1.65 0.13 140 BAYES_40 3073 3.74 1.63 4.81 141 T_REMOTE_IMAGE 3054 3.06 1.62 3.79 142 TR_XM_SB_Phish 3053 1.96 1.62 2.14 143 RELAYCOUNTRY_IN 2880 0.57 1.53 0.09 144 HTTPS_HTTP_MISMATCH 2868 1.11 1.52 0.90 145 TR_XM_BayesRelay 2776 0.50 1.47 0.00 146 TR_XM_PHPDW 2748 0.83 1.46 0.51 147 TR_Mismatch_TLD_02 2740 0.56 1.45 0.10 148 FROM_SUSPICIOUS_NTLD 2719 0.52 1.44 0.05 149 XMBdyGiftCard01 2711 1.15 1.44 1.01 150 XMSubPhish11 2708 1.89 1.43 2.12 151 XM_UB99 2640 0.47 1.40 0.00 152 TR_XM_PHPForged 2619 0.79 1.39 0.49 153 ALL_TRUSTED 2604 11.08 1.38 16.01 154 TR_XM_FormFill2 2585 0.78 1.37 0.48 155 XM_H_PHPOS 2579 0.78 1.37 0.48 156 TR_XM_InvalidRelay 2541 0.47 1.35 0.02 157 TR_XM_Undi_Recip11 2500 0.48 1.32 0.05 158 URIBL_BLACK 2465 0.48 1.31 0.06 159 LongTLD 2431 0.62 1.29 0.27 160 RELAYCOUNTRY_AU 2286 0.62 1.21 0.32 161 XMHTML_After_End 2274 1.07 1.20 0.99 162 XMPhish30 2264 0.91 1.20 0.76 163 MPART_ALT_DIFF_COUNT 2261 0.80 1.20 0.59 164 FROM_SUSPICIOUS_NTLD_FP 2216 0.43 1.17 0.05 165 TR_XM_Base64_M1 2170 0.98 1.15 0.90 166 XMSubMetaI_00 2113 0.80 1.12 0.63 167 RCVD_IN_PSBL 2048 0.66 1.08 0.44 168 RELAYCOUNTRY_FR 2041 0.57 1.08 0.30 169 XMSubMetaSxObfu_03 2009 0.68 1.06 0.48 170 KHOP_HELO_FCRDNS 2004 1.19 1.06 1.25 171 BAYES_20 2001 2.82 1.06 3.71 172 XM_UB60 1985 0.43 1.05 0.11 173 XM_UB999 1972 0.35 1.04 0.00 174 XMBrknScrpt_02 1959 0.97 1.04 0.93 175 XMClaimOffer 1902 0.49 1.01 0.23 176 URI_TRY_3LD 1883 0.77 1.00 0.65 177 RCVD_IN_IADB_VOUCHED 1876 2.45 0.99 3.20 178 XM_B_SEO 1862 0.46 0.99 0.19 179 TR_XM_MSPIKECOMBO2 1857 0.36 0.98 0.04 180 XM_Body_Dirty_Words_01 1853 0.48 0.98 0.22 181 HTML_TAG_BALANCE_BODY 1804 0.81 0.96 0.74 182 BOTNET_NORDNS 1791 0.33 0.95 0.02 183 TR_XM_Undi_Recip5 1771 0.32 0.94 0.01 184 TR_XM_Undi_Recip6 1765 0.32 0.93 0.01 185 SHOPIFY_IMG_NOT_RCVD_SFY 1757 0.46 0.93 0.22 186 XMGenDplmaNmb 1742 0.71 0.92 0.61 187 TR_Symld_Words 1707 1.11 0.90 1.21 188 RELAYCOUNTRY_RU 1686 0.31 0.89 0.02 189 XM_B_COPY_HTML 1655 0.73 0.88 0.65 190 TR_XM_COVIDMETA4 1649 0.40 0.87 0.15 191 HTML_FONT_FACE_BAD 1623 0.94 0.86 0.98 192 UNDISC_MONEY 1607 0.29 0.85 0.00 193 XM_ProductURIs 1600 0.57 0.85 0.43 194 TR_MetaPhish_Combo_01 1581 0.69 0.84 0.61 195 DIET_1 1560 0.57 0.83 0.44 196 XM_OfRef7 1529 0.35 0.81 0.11 197 XM_H_Long_From02 1528 1.24 0.81 1.46 198 TR_XM_MaxSPIKE 1528 0.29 0.81 0.03 199 TR_XM_SEO4 1512 0.34 0.80 0.11 200 RELAYCOUNTRY_DE 1471 0.53 0.78 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 326068 90.45 95.73 87.76 2 RELAYCOUNTRY_US 300957 81.03 81.08 81.00 3 DKIM_SIGNED 285109 81.92 92.13 76.73 4 XM_DK_Pass 277877 80.01 90.29 74.79 5 DKIM_VALID 274673 79.22 89.63 73.93 6 XM_B_Unicode 265834 74.88 81.43 71.55 7 DCC_CHECK_NEGATIVE 224451 47.89 23.26 60.41 8 DKIM_VALID_AU 219230 61.98 67.85 59.00 9 BAYES_50 214513 52.70 42.79 57.73 10 XMListUnsubscribeExists 194713 60.13 75.33 52.41 11 XM_B_SpammyWords 173116 53.84 68.09 46.59 12 XM_B_Unicode3 158087 42.85 43.44 42.55 13 RCVD_IN_MSPIKE_H2 148857 43.51 50.30 40.06 14 DCC_CHECK 146922 52.07 76.72 39.54 15 HTML_FONT_LOW_CONTRAST 108610 31.27 35.28 29.23 16 T_TM2_M_HEADER_IN_MSG 104400 25.58 20.61 28.10 17 DKIM_VALID_EF 101438 29.30 33.23 27.30 18 FVGT_m_MULTI_ODD 100815 31.16 39.08 27.13 19 LOC_TINY_FONT_1 97513 30.33 38.37 26.24 20 XMSubLong 84507 22.57 22.22 22.74 21 T_KAM_HTML_FONT_INVALID 79880 24.50 30.41 21.50 22 XM_B_SpammyWords2 77587 27.25 39.78 20.88 23 MIME_HTML_ONLY 77320 25.06 33.42 20.81 24 RCVD_IN_MSPIKE_WL 66343 17.80 17.69 17.86 25 ALL_TRUSTED 59485 11.08 1.38 16.01 26 USER_IN_DEF_DKIM_WL 52343 10.11 2.28 14.09 27 XM_Multi_Part_URI 49502 15.28 19.13 13.32 28 XM_Body_Dirty_Words 43602 15.14 21.85 11.74 29 RCVD_IN_MSPIKE_H3 41856 12.45 14.77 11.27 30 UNPARSEABLE_RELAY 36414 11.13 13.74 9.80 31 XM_DKIMWhitelistDomains 35854 6.46 0.17 9.65 32 BAYES_60 35714 9.03 7.87 9.61 33 LotsOfNums_01 34932 8.75 7.45 9.40 34 BAYES_00 33584 6.25 0.76 9.04 35 XM_Evil_Numbers_Gen 33326 8.88 8.69 8.97 36 XM_B_Unsub 30835 10.41 14.57 8.30 37 TooManyTo_001 28579 6.51 4.17 7.69 38 TR_XM_BayesUnsub 25734 9.33 14.07 6.93 39 XM_DK_Undo_02 25690 19.03 42.88 6.91 40 IN_ZIMBRA_NJ_WHITELIST 25175 4.52 0.08 6.78 41 LOTS_OF_MONEY 24374 8.53 12.41 6.56 42 T_TooManySym_01 24161 5.11 2.38 6.50 43 HTML_IMAGE_RATIO_02 22227 6.34 7.03 5.98 44 XM_SendGrid 22115 6.16 6.57 5.95 45 TR_XM_DK_Bayes 21737 4.07 0.56 5.85 46 XM_H_Long_From01 21686 5.70 5.43 5.84 47 TR_XM_DK_Bayes1 21406 4.01 0.56 5.76 48 XM_PDF 20751 3.93 0.67 5.58 49 RCVD_IN_VALIDITY_SAFE 20547 4.76 3.24 5.53 50 XM_B_SpammyWords3 20407 7.65 11.89 5.49 51 HTML_IMAGE_RATIO_04 20395 5.05 4.19 5.49 52 MIME_QP_LONG_LINE 19990 4.88 3.91 5.38 53 RCVD_IN_MSPIKE_H4 19983 4.44 2.59 5.38 54 RCVD_IN_IADB_LISTED 19516 4.28 2.36 5.25 55 TR_XM_DK_Bayes2 19229 3.61 0.52 5.18 56 XMStrtUSub 19189 4.85 4.22 5.16 57 BAYES_99 18938 14.10 31.82 5.10 58 RCVD_IN_VALIDITY_CERTIFIED 18115 4.11 2.60 4.88 59 BOTNET_IPINHOSTNAME 18047 8.19 14.74 4.86 60 BAYES_40 17870 3.74 1.63 4.81 61 TR_XM_DKIM_Undo 17807 14.56 33.78 4.79 62 BAYES_80 17721 6.06 8.61 4.77 63 RCVD_IN_IADB_SPF 17484 3.84 2.13 4.71 64 MPART_ALT_DIFF 16581 6.81 11.44 4.46 65 TR_XM_SpammyWords4 16392 6.37 10.23 4.41 66 FSL_BULK_SIG 16313 6.07 9.37 4.39 67 RCVD_IN_IADB_SENDERID 15857 3.50 2.00 4.27 68 RCVD_IN_IADB_DK 15559 3.46 2.02 4.19 69 XM_B_Phish_Phrases 15556 4.54 5.25 4.19 70 TR_XM_DK_SendGrid 15044 4.14 4.32 4.05 71 BAYES_999 14929 11.05 24.89 4.02 72 XMNumbers 14776 3.93 3.83 3.98 73 HTML_IMAGE_RATIO_06 14650 3.74 3.33 3.94 74 T_REMOTE_IMAGE 14075 3.06 1.62 3.79 75 TR_XM_PhishingBody 14070 4.74 6.60 3.79 76 XMSexyCombo_05 14004 6.14 10.80 3.77 77 BAYES_20 13801 2.82 1.06 3.71 78 T_TooManySym_02 13750 2.67 0.65 3.70 79 RELAYCOUNTRY_META 13589 9.53 21.09 3.66 80 XM_UncommonTLD01 13421 5.47 9.14 3.61 81 XMSubMetaSx_00 12494 4.13 5.64 3.36 82 RCVD_IN_IADB_VOUCHED 11879 2.45 0.99 3.20 83 BAYES_95 11075 3.63 4.92 2.98 84 FROM_EXCESS_BASE64 11058 2.81 2.48 2.98 85 XM_B_SpammyTLD 11049 3.74 5.24 2.97 86 DKIM_INVALID 10436 2.70 2.50 2.81 87 HTML_IMAGE_RATIO_08 10230 2.77 2.79 2.75 88 MAILING_LIST_MULTI 9805 2.44 2.06 2.64 89 MIME_HTML_ONLY_MULTI 9372 4.32 7.87 2.52 90 URI_NOVOWEL 8601 2.54 2.97 2.31 91 MIME_HTML_MOSTLY 8529 3.04 4.52 2.30 92 TR_DCC_Bayes_99 8429 9.48 23.68 2.27 93 XM_SPF_SoftFail 8365 2.86 4.05 2.25 94 BAYES_05 8336 1.67 0.54 2.24 95 XM_B_Phish66 7996 2.76 3.95 2.15 96 XM_CamelCaseFrm001 7972 2.09 1.99 2.15 97 TR_XM_SB_Phish 7947 1.96 1.62 2.14 98 XMSubPhish11 7867 1.89 1.43 2.12 99 RCVD_IN_IADB_OPTIN 7720 1.56 0.53 2.08 100 TooManyTo_002 7671 1.54 0.50 2.06 101 TR_XM_UnparsRelay 7646 4.17 8.33 2.06 102 ANY_BOUNCE_MESSAGE 7477 1.49 0.47 2.01 103 BOUNCE_MESSAGE 7477 1.49 0.47 2.01 104 HTML_MIME_NO_HTML_TAG 7441 3.51 6.46 2.00 105 SUBJ_ALL_CAPS 7332 2.07 2.26 1.97 106 TM2_M_URI_OPT_OUT 6939 2.18 2.79 1.87 107 INVALID_MSGID 6898 1.28 0.15 1.86 108 IN_HORDE_ADDRESS_BOOK 6806 1.25 0.10 1.83 109 MSGID_NOFQDN1 6490 1.17 0.04 1.75 110 TR_XM_SpammyRelay 6401 5.88 14.06 1.72 111 XMStockSpam_06 6301 1.81 2.04 1.70 112 BOTNET 6173 4.00 8.59 1.66 113 XM_B_Unsub2 6074 1.84 2.24 1.63 114 TR_XM_SpammyWords5 6047 2.50 4.21 1.63 115 TO_MALFORMED 5923 1.06 0.01 1.59 116 XM_H_Trusted_IP 5899 1.05 0.00 1.59 117 HELO_NODOT 5888 1.20 0.43 1.58 118 HELO_NO_DOMAIN 5880 1.19 0.43 1.58 119 TVD_RCVD_IP 5796 1.13 0.28 1.56 120 T_TooManySym_03 5726 1.13 0.32 1.54 121 URI_HEX 5636 1.62 1.81 1.52 122 T_XMDrugObfuBody_08 5603 2.43 4.23 1.51 123 UNTRUSTED_Relay 5527 3.54 7.58 1.49 124 XM_B_Investor 5482 2.41 4.24 1.48 125 XM_H_Long_From02 5435 1.24 0.81 1.46 126 T_OBFU_PDF_ATTACH 5425 1.04 0.21 1.46 127 XM_DK_Undo_01 5257 1.92 2.90 1.41 128 TooManyTo_003 5177 1.06 0.42 1.39 129 TVD_SPACE_RATIO 5151 0.96 0.13 1.39 130 TR_XM_SpammyWords2 5108 4.65 11.08 1.37 131 T_XMDrugObfuBody_14 4930 2.09 3.61 1.33 132 TM2_M_VERY_LONG_WORD 4833 3.67 8.34 1.30 133 XMGappySubj_01 4678 0.90 0.20 1.26 134 KHOP_HELO_FCRDNS 4637 1.19 1.06 1.25 135 XMBSHREFv2 4555 0.92 0.33 1.23 136 TR_Symld_Words 4506 1.11 0.90 1.21 137 RCVD_IN_MSPIKE_H5 4504 0.91 0.33 1.21 138 XM_GoogleGroups 4286 2.69 5.71 1.15 139 XMDiploma_00 4143 1.59 2.54 1.12 140 T_XMDrugObfuBody_00 4120 1.36 1.85 1.11 141 XMBody_95 3995 0.81 0.30 1.08 142 RELAYCOUNTRY_CA 3886 3.86 9.40 1.05 143 XMCapTrack 3803 0.79 0.33 1.02 144 RCVD_IN_RP_SAFE 3766 0.91 0.72 1.01 145 XMBdyGiftCard01 3748 1.15 1.44 1.01 146 XMHTML_After_End 3694 1.07 1.20 0.99 147 XM_UB50 3685 1.80 3.40 0.99 148 HTML_FONT_FACE_BAD 3646 0.94 0.86 0.98 149 TooManyTo_004 3569 0.76 0.35 0.96 150 XMBrknScrpt_02 3461 0.97 1.04 0.93 151 TR_XM_Base64_M1 3347 0.98 1.15 0.90 152 DKIM_ADSP_CUSTOM_MED 3330 0.77 0.53 0.90 153 HTTPS_HTTP_MISMATCH 3328 1.11 1.52 0.90 154 RCVD_IN_RP_CERTIFIED 3317 0.79 0.59 0.89 155 T_FILL_THIS_FORM_SHORT 3168 1.77 3.57 0.85 156 SpammyFromTLD_01 3108 1.55 2.95 0.84 157 XM_OfRef6 3038 1.77 3.64 0.82 158 FROM_GOV_DKIM_AU 2999 0.63 0.30 0.81 159 FVGT_m_MULTI_ODD_EMAIL 2964 0.57 0.11 0.80 160 T_XMHurry_00 2935 1.25 2.16 0.79 161 TooManyTo_005 2932 0.64 0.33 0.79 162 XMPhish30 2840 0.91 1.20 0.76 163 RCVD_IN_MSPIKE_BL 2837 2.00 4.42 0.76 164 TR_XM_MSPIKECOMBO 2829 1.96 4.33 0.76 165 HTML_TAG_BALANCE_BODY 2754 0.81 0.96 0.74 166 XMSubNoVowel 2681 0.66 0.54 0.72 167 XMNoVowels 2595 0.60 0.40 0.70 168 XM_ShortIntro_01 2439 0.63 0.59 0.66 169 XM_B_COPY_HTML 2427 0.73 0.88 0.65 170 URI_TRY_3LD 2407 0.77 1.00 0.65 171 XMSubMetaI_00 2344 0.80 1.12 0.63 172 XMGenDplmaNmb 2261 0.71 0.92 0.61 173 TR_MetaPhish_Combo_01 2258 0.69 0.84 0.61 174 TR_XM_Base64_L1 2241 0.66 0.78 0.60 175 XM_B_SpammyWords4 2232 1.20 2.37 0.60 176 RCVD_IN_MSPIKE_L3 2222 1.11 2.11 0.60 177 MPART_ALT_DIFF_COUNT 2203 0.80 1.20 0.59 178 NML_ADSP_CUSTOM_MED 2185 0.52 0.39 0.59 179 FORGED_GMAIL_RCVD 2165 0.53 0.43 0.58 180 XMLngstWrd_00 2156 2.27 5.58 0.58 181 XMSubMetaSxObfu_02 2096 0.55 0.53 0.56 182 XMBody_17 2055 1.67 3.85 0.55 183 XM_H_PHPMailer 1986 0.58 0.68 0.53 184 XMHTMLBadTable_001 1982 0.55 0.57 0.53 185 BASE64_LENGTH_79_INF 1977 0.44 0.27 0.53 186 RCVD_IN_BL_SPAMCOP_NET 1960 3.59 9.63 0.53 187 XM_RXBody 1955 0.51 0.49 0.53 188 T_Symld_Words_02 1925 0.53 0.55 0.52 189 XM_B_DNDMA 1923 0.57 0.68 0.52 190 TR_XM_PHPDW 1889 0.83 1.46 0.51 191 RELAYCOUNTRY_GB 1888 0.58 0.73 0.51 192 XMLngstWrd_01 1875 2.20 5.55 0.50 193 XMMoneyMeta_00 1853 0.58 0.73 0.50 194 PDS_OTHER_BAD_TLD 1842 1.10 2.29 0.50 195 SpammyFromTLD_02 1812 1.73 4.16 0.49 196 TR_XM_PHPForged 1807 0.79 1.39 0.49 197 TR_XM_FormFill2 1798 0.78 1.37 0.48 198 XMSubMetaSxObfu_03 1780 0.68 1.06 0.48 199 SHORT_HELO_AND_INLINE_IMAGE 1773 0.34 0.07 0.48 200 XM_B_COVIDMETA 1770 0.92 1.79 0.48 ----------------------------------------------------------------------