Email: 622232 Autolearn: 0 AvgScore: 3.02 AvgScanTime: 1.26 sec Spam: 156336 Autolearn: 0 AvgScore: 13.12 AvgScanTime: 1.57 sec Ham: 465896 Autolearn: 0 AvgScore: -0.37 AvgScanTime: 1.15 sec Time Spent Running SA: 217.38 hours Time Spent Processing Spam: 68.14 hours Time Spent Processing Ham: 149.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 156064 99.54 99.83 99.45 2 HTML_MESSAGE 151349 74.54 96.81 67.07 3 DKIM_SIGNED 140753 65.17 90.03 56.83 4 XM_DK_Pass 135880 63.65 86.92 55.85 5 XM_B_Unicode 135065 63.28 86.39 55.52 6 DKIM_VALID 134185 62.81 85.83 55.09 7 RELAYCOUNTRY_US 125109 65.40 80.03 60.49 8 DCC_CHECK 114097 38.50 72.98 26.93 9 XMListUnsubscribeExists 113733 47.25 72.75 38.70 10 XM_B_SpammyWords 110426 42.87 70.63 33.56 11 DKIM_VALID_AU 99710 49.13 63.78 44.22 12 XM_B_Unicode3 72332 34.19 46.27 30.14 13 XM_DK_Undo_02 70517 14.67 45.11 4.46 14 LOC_TINY_FONT_1 65224 24.89 41.72 19.25 15 XM_B_SpammyWords2 62563 20.37 40.02 13.78 16 BAYES_50 60933 49.51 38.98 53.04 17 HTML_FONT_LOW_CONTRAST 54475 24.88 34.84 21.53 18 BAYES_99 53053 10.82 33.94 3.07 19 TR_XM_DKIM_Undo 51693 9.88 33.07 2.09 20 FVGT_m_MULTI_ODD 51613 22.88 33.01 19.48 21 MIME_HTML_ONLY 48556 18.20 31.06 13.88 22 DKIM_VALID_EF 47213 23.73 30.20 21.56 23 T_KAM_HTML_FONT_INVALID 46532 19.40 29.76 15.92 24 RCVD_IN_MSPIKE_H2 46100 22.92 29.49 20.72 25 DCC_CHECK_NEGATIVE 42224 61.47 27.01 73.04 26 BAYES_999 40859 8.29 26.14 2.31 27 XMSubLong 38222 18.86 24.45 16.99 28 TR_DCC_Bayes_99 37433 6.73 23.94 0.95 29 T_TM2_M_HEADER_IN_MSG 36260 21.70 23.19 21.19 30 TR_XM_DK_Unsub 35258 13.56 22.55 10.55 31 RELAYCOUNTRY_META 31014 7.43 19.84 3.26 32 XM_Multi_Part_URI 28489 12.33 18.22 10.35 33 TR_MAX_INTL_RELAY 24100 7.69 15.42 5.10 34 TR_XM_SpammyRelay 23608 5.22 15.10 1.90 35 XM_B_Unsub 23007 8.07 14.72 5.84 36 TR_XM_BayesUnsub 22204 7.03 14.20 4.63 37 BOTNET_IPINHOSTNAME 21801 6.09 13.94 3.45 38 LOTS_OF_MONEY 21746 7.36 13.91 5.16 39 XM_B_SpammyWords3 21091 5.94 13.49 3.40 40 UNPARSEABLE_RELAY 20334 9.45 13.01 8.26 41 TR_XM_SpammyWords4 19984 5.98 12.78 3.70 42 RCVD_IN_BL_SPAMCOP_NET 19694 3.53 12.60 0.49 43 TR_XM_SpammyWords2 17980 3.17 11.50 0.37 44 RELAYCOUNTRY_CA 15883 3.37 10.16 1.09 45 TR_XM_SPAMCOP 15686 2.75 10.03 0.31 46 BAYES_80 15030 4.74 9.61 3.10 47 XM_Evil_Numbers_Gen 14416 6.52 9.22 5.61 48 BOTNET 14381 3.23 9.20 1.22 49 RCVD_IN_MSPIKE_WL 13691 5.70 8.76 4.68 50 RCVD_IN_MSPIKE_H3 13691 5.70 8.76 4.68 51 FSL_BULK_SIG 13353 5.29 8.54 4.20 52 BAYES_60 12208 7.33 7.81 7.17 53 XM_UncommonTLD01 12205 5.84 7.81 5.18 54 HTML_IMAGE_RATIO_02 11184 4.65 7.15 3.82 55 TR_XM_UnparsRelay 11110 2.66 7.11 1.17 56 XM_SPF_SoftFail 10819 5.12 6.92 4.52 57 XM_Body_Dirty_Words 10690 3.28 6.84 2.08 58 LotsOfNums_01 10317 6.51 6.60 6.48 59 MPART_ALT_DIFF 9401 4.19 6.01 3.58 60 XMSubMetaSx_00 9225 3.73 5.90 3.00 61 UNTRUSTED_Relay 9201 2.37 5.89 1.19 62 TooManyTo_001 8710 6.41 5.57 6.69 63 BAYES_95 8691 2.89 5.56 2.00 64 XMBody_17 8559 1.75 5.47 0.51 65 XM_H_Long_From01 8268 4.30 5.29 3.97 66 XM_B_Investor 8094 2.29 5.18 1.32 67 XM_B_Phish_Phrases 7965 3.13 5.09 2.47 68 XM_OfRef6 7382 1.96 4.72 1.03 69 HTML_IMAGE_RATIO_04 7331 3.43 4.69 3.00 70 XM_H_GMP 7072 4.62 4.52 4.65 71 TR_XM_PhishingBody 6987 1.96 4.47 1.12 72 TR_XM_SpammyWords5 6749 1.79 4.32 0.94 73 DKIM_INVALID 6568 2.36 4.20 1.75 74 T_FILL_THIS_FORM_SHORT 6362 1.57 4.07 0.74 75 T_XMDrugObfuBody_14 6282 1.93 4.02 1.24 76 MIME_HTML_ONLY_MULTI 6150 2.07 3.93 1.44 77 TM2_M_URI_OPT_OUT 6024 1.99 3.85 1.36 78 HTML_IMAGE_RATIO_06 6000 2.29 3.84 1.77 79 XMSexyCombo_05 5963 1.98 3.81 1.36 80 XMStrtUSub 5775 3.42 3.69 3.32 81 HTML_IMAGE_RATIO_08 5763 2.32 3.69 1.86 82 XMNumbers 5375 2.35 3.44 1.98 83 XM_B_SpammyTLD 5280 2.35 3.38 2.01 84 SpammyFromTLD_02 5226 2.75 3.34 2.55 85 T_XMDrugObfuBody_08 5186 1.90 3.32 1.42 86 MIME_HTML_MOSTLY 4939 3.00 3.16 2.94 87 TR_LOTS_OF_MONEY3 4932 1.19 3.15 0.53 88 TM2_M_VERY_LONG_WORD 4914 1.50 3.14 0.95 89 RCVD_IN_VALIDITY_SAFE 4851 3.49 3.10 3.62 90 SUBJ_ALL_CAPS 4681 1.57 2.99 1.09 91 XM_CamelCaseFrm001 4627 1.98 2.96 1.65 92 MIME_QP_LONG_LINE 4569 3.80 2.92 4.09 93 XM_UB50 4080 1.19 2.61 0.71 94 XM_B_SpammyWords4 4039 1.03 2.58 0.51 95 SpammyFromTLD_01 4038 1.23 2.58 0.78 96 XMDiploma_00 3913 1.48 2.50 1.14 97 RCVD_IN_VALIDITY_CERTIFIED 3748 2.94 2.40 3.12 98 XM_URI_RBL 3672 0.68 2.35 0.11 99 RELAYCOUNTRY_AU 3534 0.94 2.26 0.50 100 XMPhish30 3521 0.83 2.25 0.35 101 USER_IN_DEF_DKIM_WL 3492 8.29 2.23 10.33 102 T_TooManySym_01 3440 3.50 2.20 3.94 103 HK_RANDOM_REPLYTO 3397 0.63 2.17 0.11 104 TR_XM_BayesRelay 3392 0.55 2.17 0.00 105 TR_XM_FormFill 3389 0.55 2.17 0.01 106 ALL_TRUSTED 3382 28.15 2.16 36.87 107 FONT_INVIS_LONG_LINE 3316 0.56 2.12 0.04 108 XM_B_Unsub2 3240 1.28 2.07 1.01 109 TR_XM_InvalidRelay 3180 0.53 2.03 0.02 110 ANY_BOUNCE_MESSAGE 3034 19.87 1.94 25.88 111 BOUNCE_MESSAGE 2988 19.86 1.91 25.88 112 TR_Mismatch_TLD_02 2865 0.51 1.83 0.06 113 THIS_AD 2852 0.77 1.82 0.42 114 URI_TRY_3LD 2840 0.81 1.82 0.48 115 MAILING_LIST_MULTI 2783 2.06 1.78 2.15 116 FROM_EXCESS_BASE64 2739 1.59 1.75 1.54 117 XMBrknScrpt_02 2651 0.75 1.70 0.43 118 HTML_MIME_NO_HTML_TAG 2634 1.53 1.68 1.48 119 XM_H_Long_From02 2611 1.02 1.67 0.80 120 BAYES_40 2577 5.61 1.65 6.94 121 XMStockSpam_06 2569 0.90 1.64 0.66 122 T_XMHurry_00 2548 0.69 1.63 0.37 123 URI_HEX 2474 1.17 1.58 1.03 124 XM_DK_Undo_01 2464 1.45 1.58 1.41 125 T_REMOTE_IMAGE 2463 2.39 1.58 2.67 126 RCVD_IN_IADB_LISTED 2441 2.82 1.56 3.24 127 TR_MetaPhish_Combo_01 2352 0.87 1.50 0.66 128 TR_XM_NoHeaderRelay 2280 0.43 1.46 0.09 129 AC_BR_BONANZA 2259 0.42 1.44 0.08 130 TR_XM_INV_DKIM 2201 0.38 1.41 0.04 131 RCVD_IN_IADB_SPF 2197 2.52 1.41 2.89 132 TR_XM_PHPForged 2196 0.56 1.40 0.27 133 HTTPS_HTTP_MISMATCH 2190 0.82 1.40 0.62 134 RCVD_IN_IADB_SENDERID 2092 2.30 1.34 2.63 135 TR_XM_PHPDW 2085 0.54 1.33 0.27 136 RCVD_IN_IADB_DK 2084 2.26 1.33 2.57 137 BAYES_20 2060 2.38 1.32 2.74 138 TR_XM_FormFill2 2040 0.54 1.30 0.28 139 RCVD_IN_VALIDITY_RPBL 2033 0.34 1.30 0.02 140 XM_H_PHPOS 2021 0.53 1.29 0.27 141 BOTNET_NORDNS 1958 0.32 1.25 0.00 142 TR_Caps_n_Bayes_99 1946 0.32 1.24 0.01 143 XM_HighProb1 1897 0.31 1.21 0.00 144 XMGenDplmaNmb 1873 0.73 1.20 0.57 145 XMBdyGiftCard01 1841 0.64 1.18 0.45 146 XM_SendGrid 1816 1.11 1.16 1.09 147 KHOP_HELO_FCRDNS 1782 0.91 1.14 0.84 148 T_STY_INVIS_DIRECT 1761 0.40 1.13 0.16 149 HTML_FONT_SIZE_LARGE 1734 0.31 1.11 0.05 150 HTML_TAG_BALANCE_BODY 1718 0.58 1.10 0.41 151 TR_XM_SpoofStaff 1671 0.33 1.07 0.08 152 XMSpoofStaff2 1649 0.32 1.05 0.08 153 MPART_ALT_DIFF_COUNT 1646 0.75 1.05 0.65 154 SCC_BODY_URI_ONLY 1641 10.49 1.05 13.66 155 PLING_QUERY 1627 0.50 1.04 0.32 156 XMHTML_After_End 1622 0.49 1.04 0.31 157 XM_H_Undi_Recip 1618 0.35 1.03 0.12 158 T_XMDrugObfuBody_00 1614 0.58 1.03 0.42 159 TR_XM_PSC1 1613 0.31 1.03 0.07 160 XM_H_SpoofStaff4 1609 0.34 1.03 0.11 161 TO_NO_BRKTS_HTML_IMG 1600 0.27 1.02 0.02 162 URI_PHISH 1587 0.26 1.02 0.01 163 RELAYCOUNTRY_KR 1586 0.26 1.01 0.01 164 XM_ProductURIs 1573 0.55 1.01 0.40 165 XMReplyNow 1562 0.37 1.00 0.16 166 XM_UB60 1556 0.29 1.00 0.06 167 TR_XM_SpoofStaff2 1555 0.25 0.99 0.00 168 XM_DIRTYINTL 1548 0.31 0.99 0.08 169 T_MONEY_PERCENT 1513 0.47 0.97 0.30 170 TR_LOTS_OF_MONEY2 1513 0.47 0.97 0.30 171 URI_NOVOWEL 1501 1.15 0.96 1.22 172 TVD_FW_GRAPHIC_NAME_LONG 1493 0.24 0.95 0.00 173 RELAYCOUNTRY_CZ 1468 0.25 0.94 0.02 174 XM_OfRef7 1461 0.36 0.93 0.16 175 XMClaimOffer 1442 0.32 0.92 0.12 176 XM_B_Phish66 1419 0.38 0.91 0.20 177 XMBody_78 1389 0.43 0.89 0.28 178 TR_XM_Base64_L1 1382 0.30 0.88 0.10 179 RELAYCOUNTRY_GB 1355 0.46 0.87 0.32 180 TM2_M_OBFU_COMMENT 1344 0.36 0.86 0.19 181 TR_Symld_Words 1343 0.97 0.86 1.00 182 XM_B_SEO 1313 0.32 0.84 0.15 183 TR_XM_Base64_M1 1307 0.65 0.84 0.58 184 XM_UB99 1295 0.21 0.83 0.00 185 XMSlimDrugH 1294 0.40 0.83 0.26 186 XM_UB80 1265 0.21 0.81 0.01 187 XM_B_COVIDMETA 1263 0.31 0.81 0.14 188 XMPhish14 1252 0.43 0.80 0.31 189 XMSexyCombo_01 1241 0.28 0.79 0.11 190 XMSubMetaI_00 1239 0.53 0.79 0.44 191 DKIM_ADSP_NXDOMAIN 1221 0.33 0.78 0.18 192 XMMoneyMeta_00 1212 0.46 0.78 0.35 193 TR_XM_SEO4 1210 0.25 0.77 0.08 194 XM_B_DNDMA 1201 0.48 0.77 0.38 195 PDS_OTHER_BAD_TLD 1193 0.25 0.76 0.08 196 XM_ShortIntro_01 1192 0.58 0.76 0.52 197 TR_XM_Undi_Recip19 1190 0.22 0.76 0.04 198 DIET_1 1189 0.30 0.76 0.15 199 DKIM_ADSP_CUSTOM_MED 1182 0.68 0.76 0.65 200 TR_XM_DK_SendGrid 1176 0.71 0.75 0.69 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 463330 99.54 99.83 99.45 2 DCC_CHECK_NEGATIVE 340271 61.47 27.01 73.04 3 HTML_MESSAGE 312489 74.54 96.81 67.07 4 RELAYCOUNTRY_US 281817 65.40 80.03 60.49 5 DKIM_SIGNED 264778 65.17 90.03 56.83 6 XM_DK_Pass 260187 63.65 86.92 55.85 7 XM_B_Unicode 258685 63.28 86.39 55.52 8 DKIM_VALID 256647 62.81 85.83 55.09 9 BAYES_50 247104 49.51 38.98 53.04 10 DKIM_VALID_AU 206019 49.13 63.78 44.22 11 XMListUnsubscribeExists 180295 47.25 72.75 38.70 12 ALL_TRUSTED 171783 28.15 2.16 36.87 13 XM_B_SpammyWords 156340 42.87 70.63 33.56 14 XM_B_Unicode3 140399 34.19 46.27 30.14 15 DCC_CHECK 125485 38.50 72.98 26.93 16 ANY_BOUNCE_MESSAGE 120575 19.87 1.94 25.88 17 BOUNCE_MESSAGE 120566 19.86 1.91 25.88 18 DKIM_VALID_EF 100449 23.73 30.20 21.56 19 HTML_FONT_LOW_CONTRAST 100315 24.88 34.84 21.53 20 T_TM2_M_HEADER_IN_MSG 98740 21.70 23.19 21.19 21 RCVD_IN_MSPIKE_H2 96517 22.92 29.49 20.72 22 BAYES_00 91986 14.92 0.54 19.74 23 FVGT_m_MULTI_ODD 90756 22.88 33.01 19.48 24 LOC_TINY_FONT_1 89672 24.89 41.72 19.25 25 XMSubLong 79142 18.86 24.45 16.99 26 T_KAM_HTML_FONT_INVALID 74174 19.40 29.76 15.92 27 MIME_HTML_ONLY 64667 18.20 31.06 13.88 28 XM_B_SpammyWords2 64178 20.37 40.02 13.78 29 SCC_BODY_URI_ONLY 63646 10.49 1.05 13.66 30 TR_XM_DK_Unsub 49132 13.56 22.55 10.55 31 XM_Multi_Part_URI 48210 12.33 18.22 10.35 32 USER_IN_DEF_DKIM_WL 48107 8.29 2.23 10.33 33 UNPARSEABLE_RELAY 38469 9.45 13.01 8.26 34 BAYES_60 33385 7.33 7.81 7.17 35 BAYES_40 32341 5.61 1.65 6.94 36 TooManyTo_001 31153 6.41 5.57 6.69 37 LotsOfNums_01 30193 6.51 6.60 6.48 38 XM_B_Unsub 27222 8.07 14.72 5.84 39 XM_Evil_Numbers_Gen 26135 6.52 9.22 5.61 40 XM_DKIMWhitelistDomains 26074 4.20 0.02 5.60 41 IN_ZIMBRA_NJ_WHITELIST 24557 3.96 0.06 5.27 42 XM_UncommonTLD01 24129 5.84 7.81 5.18 43 LOTS_OF_MONEY 24058 7.36 13.91 5.16 44 TR_MAX_INTL_RELAY 23750 7.69 15.42 5.10 45 TR_XM_DK_Bayes 23369 3.85 0.39 5.02 46 TR_XM_DK_Bayes1 23064 3.80 0.39 4.95 47 RCVD_IN_MSPIKE_WL 21784 5.70 8.76 4.68 48 RCVD_IN_MSPIKE_H3 21784 5.70 8.76 4.68 49 XM_H_GMP 21662 4.62 4.52 4.65 50 TR_XM_BayesUnsub 21563 7.03 14.20 4.63 51 XM_SPF_SoftFail 21040 5.12 6.92 4.52 52 XM_DK_Undo_02 20787 14.67 45.11 4.46 53 TR_XM_DK_Bayes2 20325 3.34 0.31 4.36 54 FSL_BULK_SIG 19582 5.29 8.54 4.20 55 MIME_QP_LONG_LINE 19078 3.80 2.92 4.09 56 XM_H_Long_From01 18487 4.30 5.29 3.97 57 T_TooManySym_01 18335 3.50 2.20 3.94 58 HTML_IMAGE_RATIO_02 17779 4.65 7.15 3.82 59 TR_XM_SpammyWords4 17245 5.98 12.78 3.70 60 RCVD_IN_VALIDITY_SAFE 16870 3.49 3.10 3.62 61 MPART_ALT_DIFF 16666 4.19 6.01 3.58 62 BOTNET_IPINHOSTNAME 16091 6.09 13.94 3.45 63 XM_B_SpammyWords3 15861 5.94 13.49 3.40 64 XM_PDF 15616 2.63 0.48 3.35 65 XMStrtUSub 15483 3.42 3.69 3.32 66 RELAYCOUNTRY_META 15187 7.43 19.84 3.26 67 RCVD_IN_IADB_LISTED 15112 2.82 1.56 3.24 68 RCVD_IN_VALIDITY_CERTIFIED 14558 2.94 2.40 3.12 69 BAYES_80 14444 4.74 9.61 3.10 70 BAYES_99 14300 10.82 33.94 3.07 71 HTML_IMAGE_RATIO_04 13981 3.43 4.69 3.00 72 XMSubMetaSx_00 13975 3.73 5.90 3.00 73 MIME_HTML_MOSTLY 13701 3.00 3.16 2.94 74 RCVD_IN_IADB_SPF 13484 2.52 1.41 2.89 75 BAYES_20 12773 2.38 1.32 2.74 76 T_REMOTE_IMAGE 12439 2.39 1.58 2.67 77 RCVD_IN_IADB_SENDERID 12240 2.30 1.34 2.63 78 RCVD_IN_IADB_DK 11958 2.26 1.33 2.57 79 SpammyFromTLD_02 11900 2.75 3.34 2.55 80 XM_B_Phish_Phrases 11526 3.13 5.09 2.47 81 BAYES_999 10739 8.29 26.14 2.31 82 BAYES_05 10266 1.80 0.61 2.20 83 MAILING_LIST_MULTI 10016 2.06 1.78 2.15 84 TR_XM_DKIM_Undo 9757 9.88 33.07 2.09 85 XM_Body_Dirty_Words 9706 3.28 6.84 2.08 86 XM_B_SpammyTLD 9367 2.35 3.38 2.01 87 BAYES_95 9297 2.89 5.56 2.00 88 XMNumbers 9226 2.35 3.44 1.98 89 TooManyTo_002 9166 1.66 0.73 1.97 90 T_TooManySym_02 8861 1.60 0.69 1.90 91 TR_XM_SpammyRelay 8860 5.22 15.10 1.90 92 RCVD_IN_IADB_VOUCHED 8840 1.59 0.67 1.90 93 HTML_IMAGE_RATIO_08 8685 2.32 3.69 1.86 94 HTML_IMAGE_RATIO_06 8253 2.29 3.84 1.77 95 DKIM_INVALID 8131 2.36 4.20 1.75 96 XMLngstWrd_00 7721 1.36 0.47 1.66 97 XM_CamelCaseFrm001 7709 1.98 2.96 1.65 98 INVALID_MSGID 7503 1.25 0.16 1.61 99 FROM_EXCESS_BASE64 7169 1.59 1.75 1.54 100 HTML_MIME_NO_HTML_TAG 6891 1.53 1.68 1.48 101 MSGID_NOFQDN1 6866 1.11 0.02 1.47 102 TO_MALFORMED 6818 1.24 0.56 1.46 103 MIME_HTML_ONLY_MULTI 6732 2.07 3.93 1.44 104 T_XMDrugObfuBody_08 6629 1.90 3.32 1.42 105 XM_DK_Undo_01 6577 1.45 1.58 1.41 106 HELO_NODOT 6440 1.09 0.24 1.38 107 HELO_NO_DOMAIN 6430 1.09 0.24 1.38 108 TM2_M_URI_OPT_OUT 6348 1.99 3.85 1.36 109 XMSexyCombo_05 6338 1.98 3.81 1.36 110 XM_B_Investor 6130 2.29 5.18 1.32 111 RCVD_IN_IADB_OPTIN 5835 1.05 0.45 1.25 112 T_XMDrugObfuBody_14 5757 1.93 4.02 1.24 113 BOTNET 5692 3.23 9.20 1.22 114 URI_NOVOWEL 5685 1.15 0.96 1.22 115 UNTRUSTED_Relay 5550 2.37 5.89 1.19 116 TR_XM_UnparsRelay 5444 2.66 7.11 1.17 117 TVD_RCVD_IP 5359 1.02 0.64 1.15 118 XMDiploma_00 5288 1.48 2.50 1.14 119 TR_XM_PhishingBody 5197 1.96 4.47 1.12 120 RELAYCOUNTRY_CA 5101 3.37 10.16 1.09 121 SUBJ_ALL_CAPS 5094 1.57 2.99 1.09 122 XM_SendGrid 5067 1.11 1.16 1.09 123 TooManyTo_003 5045 0.96 0.60 1.08 124 IN_HORDE_ADDRESS_BOOK 4974 0.81 0.06 1.07 125 T_HTML_ATTACH 4903 0.86 0.28 1.05 126 XM_OfRef6 4810 1.96 4.72 1.03 127 URI_HEX 4799 1.17 1.58 1.03 128 XMGappySubj_01 4728 0.83 0.26 1.01 129 XM_B_Unsub2 4713 1.28 2.07 1.01 130 TR_Symld_Words 4675 0.97 0.86 1.00 131 TM2_M_VERY_LONG_WORD 4418 1.50 3.14 0.95 132 TR_DCC_Bayes_99 4415 6.73 23.94 0.95 133 TR_XM_SpammyWords5 4385 1.79 4.32 0.94 134 XM_GoogleGroups 4082 0.80 0.56 0.88 135 XMBSHREFv2 4012 0.72 0.30 0.86 136 KHOP_HELO_FCRDNS 3899 0.91 1.14 0.84 137 XMCapTrack 3749 0.69 0.33 0.80 138 XM_H_Long_From02 3726 1.02 1.67 0.80 139 TooManyTo_004 3653 0.72 0.55 0.78 140 FROM_GOV_DKIM_AU 3651 0.64 0.20 0.78 141 TVD_SPACE_RATIO 3635 0.60 0.08 0.78 142 SpammyFromTLD_01 3633 1.23 2.58 0.78 143 T_FILL_THIS_FORM_SHORT 3431 1.57 4.07 0.74 144 XMBody_95 3330 0.58 0.17 0.71 145 XM_UB50 3315 1.19 2.61 0.71 146 TR_XM_DK_SendGrid 3211 0.71 0.75 0.69 147 T_TooManySym_03 3086 0.57 0.28 0.66 148 TR_MetaPhish_Combo_01 3071 0.87 1.50 0.66 149 XMStockSpam_06 3056 0.90 1.64 0.66 150 DKIM_ADSP_CUSTOM_MED 3049 0.68 0.76 0.65 151 MPART_ALT_DIFF_COUNT 3013 0.75 1.05 0.65 152 TooManyTo_005 2927 0.60 0.50 0.63 153 HTTPS_HTTP_MISMATCH 2910 0.82 1.40 0.62 154 TR_XM_Base64_M1 2716 0.65 0.84 0.58 155 XMGappySubj_02 2712 0.45 0.05 0.58 156 XMGenDplmaNmb 2650 0.73 1.20 0.57 157 TR_LOTS_OF_MONEY3 2484 1.19 3.15 0.53 158 XM_ShortIntro_01 2434 0.58 0.76 0.52 159 XM_B_SpammyWords4 2385 1.03 2.58 0.51 160 XMBody_17 2360 1.75 5.47 0.51 161 RELAYCOUNTRY_AU 2346 0.94 2.26 0.50 162 RCVD_IN_BL_SPAMCOP_NET 2263 3.53 12.60 0.49 163 URI_TRY_3LD 2225 0.81 1.82 0.48 164 XM_H_PHPMailer 2207 0.49 0.56 0.47 165 XM_B_COPY_HTML 2204 0.54 0.73 0.47 166 XM_B_FormFill 2178 0.38 0.12 0.47 167 XMBdyGiftCard01 2113 0.64 1.18 0.45 168 XMSubMetaSxObfu_02 2067 0.40 0.27 0.44 169 FILL_THIS_FORM 2063 0.45 0.48 0.44 170 XMSubMetaI_00 2060 0.53 0.79 0.44 171 SHORT_HELO_AND_INLINE_IMAGE 2018 0.34 0.05 0.43 172 XMBrknScrpt_02 2015 0.75 1.70 0.43 173 T_XMDrugObfuBody_00 1978 0.58 1.03 0.42 174 USER_IN_WELCOMELIST 1964 0.32 0.00 0.42 175 USER_IN_WHITELIST 1964 0.32 0.00 0.42 176 THIS_AD 1953 0.77 1.82 0.42 177 NML_ADSP_CUSTOM_MED 1948 0.47 0.64 0.42 178 T_OBFU_PDF_ATTACH 1909 0.33 0.09 0.41 179 HTML_TAG_BALANCE_BODY 1905 0.58 1.10 0.41 180 XM_ProductURIs 1874 0.55 1.01 0.40 181 XMNoVowels 1854 0.41 0.45 0.40 182 XM_B_DNDMA 1762 0.48 0.77 0.38 183 T_Symld_Words_02 1727 0.45 0.69 0.37 184 FORGED_GMAIL_RCVD 1723 0.42 0.59 0.37 185 T_XMHurry_00 1723 0.69 1.63 0.37 186 TR_XM_SpammyWords2 1716 3.17 11.50 0.37 187 XMMoneyMeta_00 1651 0.46 0.78 0.35 188 XMPhish30 1632 0.83 2.25 0.35 189 XMDateMe_00 1616 0.35 0.35 0.35 190 TO_NO_BRKTS_HTML_ONLY 1594 0.31 0.21 0.34 191 GMD_PDF_EMPTY_BODY 1579 0.27 0.05 0.34 192 SUBJ_DOLLARS 1579 0.36 0.44 0.34 193 RCVD_IN_PSBL 1549 0.32 0.29 0.33 194 HTML_IMAGE_ONLY_28 1535 0.29 0.19 0.33 195 SHOPIFY_IMG_NOT_RCVD_SFY 1531 0.39 0.56 0.33 196 RELAYCOUNTRY_GB 1511 0.46 0.87 0.32 197 PLING_QUERY 1508 0.50 1.04 0.32 198 XMSubMetaSxObfu_03 1497 0.42 0.71 0.32 199 TR_XM_COVIDMETA5 1455 0.25 0.05 0.31 200 TR_XM_SPAMCOP 1442 2.75 10.03 0.31 ----------------------------------------------------------------------