Email: 476539 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.34 sec Spam: 163423 Autolearn: 0 AvgScore: 14.98 AvgScanTime: 1.46 sec Ham: 313116 Autolearn: 0 AvgScore: 0.00 AvgScanTime: 1.28 sec Time Spent Running SA: 177.71 hours Time Spent Processing Spam: 66.11 hours Time Spent Processing Ham: 111.60 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156812 90.07 95.95 86.99 2 DKIM_SIGNED 148022 80.66 90.58 75.49 3 RELAYCOUNTRY_US 129530 79.99 79.26 80.37 4 XM_DK_Pass 129271 75.68 79.10 73.90 5 DKIM_VALID 127826 74.67 78.22 72.82 6 XM_B_Unicode 126902 72.68 77.65 70.09 7 DCC_CHECK 120803 50.61 73.92 38.45 8 XM_B_SpammyWords 105538 51.39 64.58 44.50 9 XMListUnsubscribeExists 105010 54.23 64.26 48.99 10 DKIM_VALID_AU 100451 59.25 61.47 58.09 11 XM_B_Unicode3 75793 42.94 46.38 41.14 12 LOC_TINY_FONT_1 74933 33.00 45.85 26.29 13 BAYES_50 71803 55.23 43.94 61.13 14 XM_B_SpammyWords2 63138 25.43 38.63 18.54 15 HTML_FONT_LOW_CONTRAST 60320 30.61 36.91 27.32 16 XM_DK_Undo_02 59431 15.48 36.37 4.58 17 RCVD_IN_MSPIKE_H2 58125 35.08 35.57 34.83 18 MIME_HTML_ONLY 56813 25.46 34.76 20.60 19 FVGT_m_MULTI_ODD 50420 27.37 30.85 25.55 20 T_KAM_HTML_FONT_INVALID 49850 24.72 30.50 21.69 21 BAYES_99 43919 11.25 26.87 3.10 22 DKIM_VALID_EF 43590 27.70 26.67 28.24 23 TR_XM_DKIM_Undo 41419 9.92 25.34 1.87 24 DCC_CHECK_NEGATIVE 40406 48.88 24.72 61.49 25 XMSubLong 40270 23.47 24.64 22.86 26 XM_B_Unsub 39499 14.28 24.17 9.12 27 T_TM2_M_HEADER_IN_MSG 34120 26.41 20.88 29.30 28 BAYES_999 33990 8.64 20.80 2.30 29 TR_XM_BayesUnsub 33756 11.49 20.66 6.71 30 TR_DCC_Bayes_99 32818 7.54 20.08 0.99 31 XM_Multi_Part_URI 32734 15.32 20.03 12.86 32 RELAYCOUNTRY_META 31829 9.28 19.48 3.95 33 TR_XM_DK_Unsub 30721 14.54 18.80 12.32 34 UNPARSEABLE_RELAY 26112 12.61 15.98 10.85 35 BOTNET 26019 6.39 15.92 1.42 36 TR_MAX_INTL_RELAY 21658 8.19 13.25 5.54 37 FSL_BULK_SIG 21605 9.07 13.22 6.90 38 XM_B_SpammyWords3 21326 7.50 13.05 4.60 39 DKIM_INVALID 20196 5.99 12.36 2.67 40 LOTS_OF_MONEY 19467 8.15 11.91 6.19 41 UNTRUSTED_Relay 18129 4.98 11.09 1.79 42 TR_XM_SpammyWords4 17354 6.36 10.62 4.14 43 TR_XM_SpammyWords2 16377 3.66 10.02 0.33 44 BOTNET_IPINHOSTNAME 16187 5.41 9.90 3.06 45 TR_XM_SpammyRelay 15943 4.70 9.76 2.07 46 XM_Evil_Numbers_Gen 15806 8.83 9.67 8.40 47 HTML_MIME_NO_HTML_TAG 14868 5.68 9.10 3.90 48 RCVD_IN_BL_SPAMCOP_NET 14289 3.46 8.74 0.70 49 BAYES_80 13482 5.09 8.25 3.44 50 XMStrtUSub 13397 6.09 8.20 4.99 51 XM_B_Phish_Phrases 13203 5.92 8.08 4.79 52 TR_XM_NoHeaderRelay 13055 2.88 7.99 0.21 53 XM_Body_Dirty_Words 12943 4.28 7.92 2.38 54 LotsOfNums_01 12619 7.95 7.72 8.07 55 HTTP_ESCAPED_HOST 12461 2.69 7.62 0.11 56 TR_XM_UnparsRelay 12280 3.58 7.51 1.53 57 BAYES_60 12169 6.92 7.45 6.64 58 HTML_IMAGE_RATIO_02 11510 5.67 7.04 4.95 59 TR_XM_SPAMCOP 11132 2.62 6.81 0.42 60 TR_XM_InvalidRelay 11090 2.34 6.79 0.02 61 XM_UncommonTLD01 10753 5.04 6.58 4.24 62 XMSubMetaSx_00 10566 4.61 6.47 3.64 63 XM_UB50 10250 2.91 6.27 1.15 64 XM_B_PhoneNumber 9392 8.88 5.75 10.51 65 MPART_ALT_DIFF 8987 4.56 5.50 4.06 66 XM_H_Long_From01 8080 5.51 4.94 5.80 67 RELAYCOUNTRY_CA 8027 2.35 4.91 1.02 68 BAYES_95 7858 3.03 4.81 2.10 69 XMSexyCombo_05 7488 2.46 4.58 1.36 70 XM_H_GMP 7384 5.26 4.52 5.65 71 HTML_IMAGE_RATIO_04 7312 4.26 4.47 4.14 72 HTML_IMAGE_RATIO_06 7175 3.41 4.39 2.90 73 RCVD_IN_VALIDITY_RPBL 6914 1.54 4.23 0.14 74 XM_B_Investor 6805 2.54 4.16 1.69 75 TR_XM_PhishingBody 6732 2.61 4.12 1.82 76 TR_XM_COVIDMETA4 6702 1.47 4.10 0.10 77 T_XMDrugObfuBody_14 6678 2.65 4.09 1.90 78 HTML_TAG_BALANCE_CENTER 6632 1.48 4.06 0.14 79 HTML_IMAGE_ONLY_12 6427 1.50 3.93 0.22 80 BODY_SINGLE_URI 6365 1.34 3.89 0.01 81 HTML_SHORT_LINK_IMG_2 6303 1.34 3.86 0.02 82 TM2_M_VERY_LONG_WORD 6279 2.28 3.84 1.46 83 HTML_IMAGE_ONLY_16 6248 1.52 3.82 0.32 84 XMNumbers 6186 3.36 3.79 3.14 85 HTML_SHORT_LINK_IMG_3 6163 1.38 3.77 0.13 86 TO_EQ_FM_DIRECT_MX 6142 1.33 3.76 0.06 87 XM_B_SpammyTLD 6119 3.07 3.74 2.72 88 XMNoVowels 6007 2.97 3.68 2.61 89 BAYES_40 5571 5.06 3.41 5.92 90 MIME_HTML_MOSTLY 5499 2.54 3.36 2.11 91 TooManyTo_001 5424 7.07 3.32 9.03 92 RELAYCOUNTRY_RU 5412 1.15 3.31 0.02 93 RCVD_IN_MSPIKE_WL 5293 4.81 3.24 5.63 94 RCVD_IN_MSPIKE_H3 5293 4.81 3.24 5.63 95 TR_XM_SpammyWords5 5225 2.09 3.20 1.51 96 RELAYCOUNTRY_RO 5091 1.08 3.12 0.01 97 XM_OfRef6 5063 1.70 3.10 0.97 98 MIME_QP_LONG_LINE 5010 4.57 3.07 5.35 99 MIME_HTML_ONLY_MULTI 4912 2.59 3.01 2.38 100 TM2_M_URI_OPT_OUT 4836 2.24 2.96 1.87 101 SpammyFromTLD_02 4740 1.38 2.90 0.58 102 T_XMDrugObfuBody_08 4715 1.97 2.89 1.49 103 XM_CamelCaseFrm001 4493 2.53 2.75 2.42 104 XM_SPF_SoftFail 4425 1.91 2.71 1.50 105 XMDiploma_00 4354 2.02 2.66 1.69 106 RELAYCOUNTRY_AU 4206 1.27 2.57 0.59 107 HTML_IMAGE_RATIO_08 4132 2.86 2.53 3.03 108 BOTNET_NORDNS 3927 0.83 2.40 0.01 109 XM_B_URI_Unicode 3874 2.15 2.37 2.04 110 XM_B_Unsub2 3839 1.81 2.35 1.53 111 MAILING_LIST_MULTI 3773 2.84 2.31 3.11 112 T_TooManySym_01 3770 4.68 2.31 5.92 113 FROM_EXCESS_BASE64 3687 1.74 2.26 1.48 114 XM_URI_RBL 3617 1.02 2.21 0.39 115 XMStockSpam_06 3601 1.34 2.20 0.89 116 RCVD_IN_VALIDITY_SAFE 3425 3.66 2.10 4.47 117 XM_B_SpammyWords4 3237 1.09 1.98 0.62 118 T_REMOTE_IMAGE 3155 2.96 1.93 3.50 119 BAYES_20 3137 3.37 1.92 4.12 120 DIET_1 3082 0.92 1.89 0.42 121 T_XMHurry_00 3076 1.03 1.88 0.58 122 RCVD_IN_VALIDITY_CERTIFIED 3008 3.16 1.84 3.86 123 RCVD_IN_PSBL 2995 0.94 1.83 0.48 124 NO_DNS_FOR_FROM 2972 0.80 1.82 0.27 125 DKIM_ADSP_NXDOMAIN 2934 0.83 1.80 0.32 126 SpammyFromTLD_01 2903 1.25 1.78 0.98 127 XM_H_Long_From02 2893 1.27 1.77 1.00 128 TR_XM_MaxWHORU 2871 0.74 1.76 0.21 129 XMGenDplmaNmb 2843 1.20 1.74 0.91 130 T_FILL_THIS_FORM_SHORT 2837 1.17 1.74 0.88 131 ALL_TRUSTED 2834 11.26 1.73 16.24 132 T_XMDrugObfuBody_00 2830 1.15 1.73 0.84 133 USER_IN_DEF_DKIM_WL 2804 9.29 1.72 13.25 134 URI_HEX 2688 1.58 1.64 1.54 135 SUBJ_ALL_CAPS 2646 1.61 1.62 1.60 136 XM_SendGrid 2640 1.46 1.62 1.37 137 XM_DK_Undo_01 2577 1.74 1.58 1.82 138 TR_XM_INV_DKIM 2461 0.62 1.51 0.16 139 HK_RANDOM_FROM 2432 0.61 1.49 0.15 140 KHOP_HELO_FCRDNS 2321 1.44 1.42 1.45 141 XM_B_COPY_HTML 2272 1.19 1.39 1.08 142 RCVD_IN_ZEN_LASTEXTERNAL 2197 0.46 1.34 0.00 143 SHORTCIRCUIT 2197 0.46 1.34 0.00 144 XMBody_17 2193 0.73 1.34 0.41 145 XMPhish30 2177 0.83 1.33 0.57 146 HK_RANDOM_REPLYTO 2136 0.51 1.31 0.09 147 ANY_BOUNCE_MESSAGE 2131 2.76 1.30 3.51 148 XMSexyCombo_01 2126 0.58 1.30 0.21 149 BOUNCE_MESSAGE 2123 2.75 1.30 3.51 150 XMBrknScrpt_02 2122 0.90 1.30 0.69 151 XM_B_Phish66 2096 0.67 1.28 0.35 152 LongTLD 2074 0.71 1.27 0.41 153 BAYES_00 2018 7.78 1.23 11.20 154 URI_NOVOWEL 1918 1.43 1.17 1.56 155 TR_XM_Base64_M1 1911 0.80 1.17 0.60 156 NORDNS_LOW_CONTRAST 1899 0.42 1.16 0.03 157 TR_Symld_Words 1854 1.44 1.13 1.60 158 RCVD_IN_IADB_LISTED 1847 3.00 1.13 3.97 159 MIME_CHARSET_FARAWAY 1846 0.66 1.13 0.41 160 RCVD_IN_PBL 1765 0.85 1.08 0.73 161 XMBdyGiftCard01 1746 0.75 1.07 0.59 162 HTTPS_HTTP_MISMATCH 1736 0.91 1.06 0.83 163 HOSTED_IMG_MULTI_PUB_01 1712 0.37 1.05 0.02 164 XMSlimDrugH 1681 0.69 1.03 0.51 165 RCVD_IN_IADB_SPF 1664 2.62 1.02 3.46 166 DKIM_ADSP_CUSTOM_MED 1661 0.97 1.02 0.94 167 URI_TRY_3LD 1652 0.66 1.01 0.48 168 XM_B_COVIDMETA 1643 0.48 1.01 0.20 169 RELAYCOUNTRY_FR 1641 0.57 1.00 0.34 170 HTML_IMAGE_ONLY_20 1611 0.62 0.99 0.42 171 TM2_M_OBFU_COMMENT 1594 0.48 0.98 0.22 172 RCVD_IN_IADB_DK 1591 2.29 0.97 2.98 173 RCVD_IN_IADB_SENDERID 1580 2.35 0.97 3.07 174 TR_Mismatch_TLD_02 1564 0.38 0.96 0.08 175 TR_LOTS_OF_MONEY2 1547 0.55 0.95 0.35 176 T_STY_INVIS_DIRECT 1547 0.56 0.95 0.35 177 T_MONEY_PERCENT 1547 0.55 0.95 0.35 178 XMSubMetaI_00 1527 0.65 0.93 0.51 179 XM_B_SEO 1517 0.47 0.93 0.22 180 XM_ProductURIs 1509 0.58 0.92 0.41 181 XMHTML_After_End 1503 0.51 0.92 0.30 182 MPART_ALT_DIFF_COUNT 1501 0.74 0.92 0.65 183 XM_DIRTYINTL 1479 0.39 0.91 0.11 184 PLING_QUERY 1462 0.61 0.89 0.47 185 HTML_TAG_BALANCE_BODY 1405 0.64 0.86 0.52 186 TR_XM_DK_SendGrid 1401 0.83 0.86 0.81 187 SHOPIFY_IMG_NOT_RCVD_SFY 1387 0.47 0.85 0.27 188 XM_OfRef7 1370 0.44 0.84 0.23 189 XM_HighProb1 1348 0.29 0.82 0.01 190 TR_XM_SEO4 1311 0.34 0.80 0.10 191 NML_ADSP_CUSTOM_MED 1302 0.71 0.80 0.66 192 RDNS_DYNAMIC 1297 0.45 0.79 0.28 193 PDS_RDNS_DYNAMIC_FP 1274 0.37 0.78 0.16 194 XM_B_DNDMA 1269 0.67 0.78 0.61 195 BAYES_05 1266 1.81 0.77 2.35 196 RELAYCOUNTRY_GB 1254 0.62 0.77 0.55 197 XMReplyNow 1251 0.46 0.77 0.30 198 XM_B_REG_HTML 1238 0.39 0.76 0.20 199 XM_RXBody 1237 0.44 0.76 0.27 200 THIS_AD 1222 0.48 0.75 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 272389 90.07 95.95 86.99 2 RELAYCOUNTRY_US 251664 79.99 79.26 80.37 3 DKIM_SIGNED 236358 80.66 90.58 75.49 4 XM_DK_Pass 231387 75.68 79.10 73.90 5 DKIM_VALID 228004 74.67 78.22 72.82 6 XM_B_Unicode 219454 72.68 77.65 70.09 7 DCC_CHECK_NEGATIVE 192526 48.88 24.72 61.49 8 BAYES_50 191396 55.23 43.94 61.13 9 DKIM_VALID_AU 181902 59.25 61.47 58.09 10 XMListUnsubscribeExists 153398 54.23 64.26 48.99 11 XM_B_SpammyWords 139336 51.39 64.58 44.50 12 XM_B_Unicode3 128828 42.94 46.38 41.14 13 DCC_CHECK 120388 50.61 73.92 38.45 14 RCVD_IN_MSPIKE_H2 109051 35.08 35.57 34.83 15 T_TM2_M_HEADER_IN_MSG 91749 26.41 20.88 29.30 16 DKIM_VALID_EF 88434 27.70 26.67 28.24 17 HTML_FONT_LOW_CONTRAST 85532 30.61 36.91 27.32 18 LOC_TINY_FONT_1 82332 33.00 45.85 26.29 19 FVGT_m_MULTI_ODD 79987 27.37 30.85 25.55 20 XMSubLong 71581 23.47 24.64 22.86 21 T_KAM_HTML_FONT_INVALID 67929 24.72 30.50 21.69 22 MIME_HTML_ONLY 64493 25.46 34.76 20.60 23 XM_B_SpammyWords2 58041 25.43 38.63 18.54 24 ALL_TRUSTED 50844 11.26 1.73 16.24 25 USER_IN_DEF_DKIM_WL 41474 9.29 1.72 13.25 26 XM_Multi_Part_URI 40257 15.32 20.03 12.86 27 TR_XM_DK_Unsub 38585 14.54 18.80 12.32 28 BAYES_00 35071 7.78 1.23 11.20 29 UNPARSEABLE_RELAY 33958 12.61 15.98 10.85 30 XM_B_PhoneNumber 32907 8.88 5.75 10.51 31 XM_B_Unsub 28548 14.28 24.17 9.12 32 TooManyTo_001 28283 7.07 3.32 9.03 33 XM_Evil_Numbers_Gen 26292 8.83 9.67 8.40 34 LotsOfNums_01 25261 7.95 7.72 8.07 35 TR_XM_DK_Bayes 23214 5.11 0.70 7.41 36 TR_XM_DK_Bayes1 22687 5.00 0.69 7.25 37 IN_ZIMBRA_NJ_WHITELIST 22262 4.73 0.16 7.11 38 FSL_BULK_SIG 21618 9.07 13.22 6.90 39 TR_XM_BayesUnsub 21001 11.49 20.66 6.71 40 BAYES_60 20791 6.92 7.45 6.64 41 XM_DKIMWhitelistDomains 20203 4.25 0.02 6.45 42 LOTS_OF_MONEY 19378 8.15 11.91 6.19 43 TR_XM_DK_Bayes2 19140 4.21 0.56 6.11 44 T_TooManySym_01 18528 4.68 2.31 5.92 45 BAYES_40 18525 5.06 3.41 5.92 46 XM_H_Long_From01 18154 5.51 4.94 5.80 47 XM_H_GMP 17698 5.26 4.52 5.65 48 RCVD_IN_MSPIKE_H3 17620 4.81 3.24 5.63 49 RCVD_IN_MSPIKE_WL 17620 4.81 3.24 5.63 50 TR_MAX_INTL_RELAY 17350 8.19 13.25 5.54 51 MIME_QP_LONG_LINE 16751 4.57 3.07 5.35 52 XMStrtUSub 15628 6.09 8.20 4.99 53 HTML_IMAGE_RATIO_02 15510 5.67 7.04 4.95 54 XM_B_Phish_Phrases 14985 5.92 8.08 4.79 55 XM_PDF 14848 3.34 0.65 4.74 56 XM_B_SpammyWords3 14405 7.50 13.05 4.60 57 XM_DK_Undo_02 14343 15.48 36.37 4.58 58 RCVD_IN_VALIDITY_SAFE 14010 3.66 2.10 4.47 59 XM_UncommonTLD01 13275 5.04 6.58 4.24 60 TR_XM_SpammyWords4 12974 6.36 10.62 4.14 61 HTML_IMAGE_RATIO_04 12970 4.26 4.47 4.14 62 BAYES_20 12913 3.37 1.92 4.12 63 MPART_ALT_DIFF 12725 4.56 5.50 4.06 64 RCVD_IN_IADB_LISTED 12443 3.00 1.13 3.97 65 RELAYCOUNTRY_META 12375 9.28 19.48 3.95 66 HTML_MIME_NO_HTML_TAG 12220 5.68 9.10 3.90 67 RCVD_IN_VALIDITY_CERTIFIED 12073 3.16 1.84 3.86 68 XMSubMetaSx_00 11385 4.61 6.47 3.64 69 ANY_BOUNCE_MESSAGE 11003 2.76 1.30 3.51 70 BOUNCE_MESSAGE 10983 2.75 1.30 3.51 71 T_REMOTE_IMAGE 10947 2.96 1.93 3.50 72 RCVD_IN_IADB_SPF 10822 2.62 1.02 3.46 73 BAYES_80 10758 5.09 8.25 3.44 74 TooManyTo_002 9998 2.27 0.51 3.19 75 XMNumbers 9830 3.36 3.79 3.14 76 MAILING_LIST_MULTI 9738 2.84 2.31 3.11 77 BAYES_99 9708 11.25 26.87 3.10 78 RCVD_IN_IADB_SENDERID 9610 2.35 0.97 3.07 79 BOTNET_IPINHOSTNAME 9578 5.41 9.90 3.06 80 HTML_IMAGE_RATIO_08 9485 2.86 2.53 3.03 81 T_TooManySym_02 9442 2.20 0.64 3.02 82 RCVD_IN_IADB_DK 9319 2.29 0.97 2.98 83 HTML_IMAGE_RATIO_06 9078 3.41 4.39 2.90 84 XM_B_SpammyTLD 8516 3.07 3.74 2.72 85 RCVD_IN_IADB_VOUCHED 8417 1.93 0.48 2.69 86 DKIM_INVALID 8354 5.99 12.36 2.67 87 XMNoVowels 8166 2.97 3.68 2.61 88 XM_CamelCaseFrm001 7575 2.53 2.75 2.42 89 INVALID_MSGID 7526 1.63 0.15 2.40 90 XM_Body_Dirty_Words 7465 4.28 7.92 2.38 91 MIME_HTML_ONLY_MULTI 7449 2.59 3.01 2.38 92 BAYES_05 7357 1.81 0.77 2.35 93 BAYES_999 7191 8.64 20.80 2.30 94 MIME_HTML_MOSTLY 6617 2.54 3.36 2.11 95 BAYES_95 6586 3.03 4.81 2.10 96 TR_XM_SpammyRelay 6471 4.70 9.76 2.07 97 XM_B_URI_Unicode 6393 2.15 2.37 2.04 98 TO_MALFORMED 6276 1.33 0.03 2.00 99 T_XMDrugObfuBody_14 5943 2.65 4.09 1.90 100 RCVD_IN_IADB_OPTIN 5880 1.34 0.31 1.88 101 TM2_M_URI_OPT_OUT 5856 2.24 2.96 1.87 102 TR_XM_DKIM_Undo 5843 9.92 25.34 1.87 103 XM_DK_Undo_01 5697 1.74 1.58 1.82 104 TR_XM_PhishingBody 5684 2.61 4.12 1.82 105 UNTRUSTED_Relay 5590 4.98 11.09 1.79 106 TooManyTo_003 5585 1.31 0.42 1.78 107 XM_B_Investor 5284 2.54 4.16 1.69 108 XMDiploma_00 5284 2.02 2.66 1.69 109 TR_Symld_Words 5012 1.44 1.13 1.60 110 SUBJ_ALL_CAPS 5010 1.61 1.62 1.60 111 URI_NOVOWEL 4889 1.43 1.17 1.56 112 URI_HEX 4831 1.58 1.64 1.54 113 TR_XM_UnparsRelay 4787 3.58 7.51 1.53 114 XM_B_Unsub2 4785 1.81 2.35 1.53 115 TR_XM_SpammyWords5 4738 2.09 3.20 1.51 116 XM_SPF_SoftFail 4682 1.91 2.71 1.50 117 T_XMDrugObfuBody_08 4673 1.97 2.89 1.49 118 FROM_EXCESS_BASE64 4620 1.74 2.26 1.48 119 TM2_M_VERY_LONG_WORD 4566 2.28 3.84 1.46 120 IN_HORDE_ADDRESS_BOOK 4560 1.19 0.69 1.46 121 KHOP_HELO_FCRDNS 4546 1.44 1.42 1.45 122 HELO_NODOT 4473 0.98 0.12 1.43 123 HELO_NO_DOMAIN 4469 0.98 0.12 1.43 124 BOTNET 4431 6.39 15.92 1.42 125 XM_SendGrid 4300 1.46 1.62 1.37 126 XMSexyCombo_05 4254 2.46 4.58 1.36 127 TooManyTo_004 4252 1.02 0.36 1.36 128 XMGappySubj_01 4113 0.92 0.16 1.31 129 XM_GoogleGroups 3916 1.07 0.72 1.25 130 XMCapTrack 3854 0.93 0.37 1.23 131 T_TooManySym_03 3824 0.87 0.20 1.22 132 XM_UB50 3599 2.91 6.27 1.15 133 TooManyTo_005 3527 0.85 0.32 1.13 134 XM_B_COPY_HTML 3394 1.19 1.39 1.08 135 TVD_SPACE_RATIO 3186 0.73 0.19 1.02 136 RELAYCOUNTRY_CA 3182 2.35 4.91 1.02 137 XM_H_Long_From02 3139 1.27 1.77 1.00 138 TR_DCC_Bayes_99 3096 7.54 20.08 0.99 139 FROM_GOV_DKIM_AU 3084 0.72 0.22 0.98 140 SpammyFromTLD_01 3077 1.25 1.78 0.98 141 XM_OfRef6 3031 1.70 3.10 0.97 142 DKIM_ADSP_CUSTOM_MED 2944 0.97 1.02 0.94 143 XMGenDplmaNmb 2862 1.20 1.74 0.91 144 XMStockSpam_06 2784 1.34 2.20 0.89 145 T_FILL_THIS_FORM_SHORT 2743 1.17 1.74 0.88 146 T_XMDrugObfuBody_00 2629 1.15 1.73 0.84 147 HTTPS_HTTP_MISMATCH 2611 0.91 1.06 0.83 148 XM_ShortIntro_01 2566 0.69 0.43 0.82 149 TR_XM_DK_SendGrid 2548 0.83 0.86 0.81 150 XM_H_PHPMailer 2504 0.69 0.48 0.80 151 TR_MetaPhish_Combo_01 2500 0.76 0.69 0.80 152 RCVD_IN_PBL 2301 0.85 1.08 0.73 153 XMBody_95 2185 0.54 0.25 0.70 154 RCVD_IN_BL_SPAMCOP_NET 2185 3.46 8.74 0.70 155 T_Symld_Words_02 2175 0.69 0.68 0.69 156 XMLngstWrd_00 2164 0.63 0.51 0.69 157 XMBrknScrpt_02 2159 0.90 1.30 0.69 158 XM_B_FormFill 2133 0.45 0.02 0.68 159 NML_ADSP_CUSTOM_MED 2062 0.71 0.80 0.66 160 XMGappySubj_02 2054 0.45 0.05 0.66 161 MPART_ALT_DIFF_COUNT 2031 0.74 0.92 0.65 162 T_OBFU_PDF_ATTACH 1995 0.46 0.11 0.64 163 XM_B_SpammyWords4 1945 1.09 1.98 0.62 164 XM_B_DNDMA 1919 0.67 0.78 0.61 165 TVD_RCVD_IP 1902 0.65 0.73 0.61 166 TR_XM_Base64_M1 1889 0.80 1.17 0.60 167 FORGED_GMAIL_RCVD 1877 0.63 0.70 0.60 168 RELAYCOUNTRY_AU 1862 1.27 2.57 0.59 169 XMBdyGiftCard01 1841 0.75 1.07 0.59 170 T_XMHurry_00 1828 1.03 1.88 0.58 171 SpammyFromTLD_02 1814 1.38 2.90 0.58 172 XMPhish30 1788 0.83 1.33 0.57 173 XMPhish14 1748 0.59 0.65 0.56 174 RELAYCOUNTRY_GB 1707 0.62 0.77 0.55 175 XMDateMe_00 1669 0.43 0.25 0.53 176 HTML_TAG_BALANCE_BODY 1639 0.64 0.86 0.52 177 XMLngstWrd_01 1594 0.44 0.30 0.51 178 XMSlimDrugH 1592 0.69 1.03 0.51 179 XMSubMetaI_00 1590 0.65 0.93 0.51 180 MSGID_FROM_MTA_HEADER 1575 0.37 0.11 0.50 181 URI_TRY_3LD 1502 0.66 1.01 0.48 182 TO_NO_BRKTS_HTML_ONLY 1493 0.50 0.54 0.48 183 RCVD_IN_PSBL 1488 0.94 1.83 0.48 184 PLING_QUERY 1458 0.61 0.89 0.47 185 T_TVD_MIME_NO_HEADERS 1451 0.31 0.02 0.46 186 HTML_IMAGE_ONLY_32 1424 0.35 0.16 0.45 187 SHORT_HELO_AND_INLINE_IMAGE 1401 0.30 0.03 0.45 188 TM2_M_BODY_EMPTY 1398 0.32 0.09 0.45 189 XMMoneyMeta_00 1392 0.53 0.69 0.44 190 HTML_IMAGE_ONLY_28 1356 0.44 0.45 0.43 191 RELAYCOUNTRY_DE 1345 0.42 0.40 0.43 192 XM_Ancestry_Forge 1334 0.28 0.00 0.43 193 TR_XM_SPAMCOP 1330 2.62 6.81 0.42 194 HTML_IMAGE_ONLY_20 1321 0.62 0.99 0.42 195 DIET_1 1301 0.92 1.89 0.42 196 MIME_CHARSET_FARAWAY 1298 0.66 1.13 0.41 197 XMBSHREFv2 1296 0.37 0.29 0.41 198 USER_IN_WHITELIST 1288 0.27 0.00 0.41 199 USER_IN_WELCOMELIST 1288 0.27 0.00 0.41 200 LongTLD 1286 0.71 1.27 0.41 ----------------------------------------------------------------------