Email: 501993 Autolearn: 0 AvgScore: 3.55 AvgScanTime: 1.41 sec Spam: 136776 Autolearn: 0 AvgScore: 14.98 AvgScanTime: 1.67 sec Ham: 365217 Autolearn: 0 AvgScore: -0.73 AvgScanTime: 1.32 sec Time Spent Running SA: 197.05 hours Time Spent Processing Spam: 63.31 hours Time Spent Processing Ham: 133.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 134268 99.17 98.17 99.55 2 HTML_MESSAGE 128977 90.04 94.30 88.44 3 DKIM_SIGNED 121996 70.18 89.19 63.06 4 XM_DK_Pass 114994 68.21 84.07 62.27 5 DKIM_VALID 113998 67.39 83.35 61.42 6 XM_B_Unicode 112973 72.41 82.60 68.59 7 RELAYCOUNTRY_US 110244 83.32 80.60 84.34 8 DCC_CHECK 102339 50.61 74.82 41.54 9 XM_B_SpammyWords 94903 48.62 69.39 40.84 10 XMListUnsubscribeExists 91472 47.18 66.88 39.80 11 DKIM_VALID_AU 89551 54.29 65.47 50.11 12 LOC_TINY_FONT_1 64693 30.05 47.30 23.60 13 XM_B_Unicode3 63575 41.54 46.48 39.69 14 XM_DK_Undo_02 55807 14.13 40.80 4.14 15 BAYES_50 54406 55.09 39.78 60.82 16 XM_B_SpammyWords2 53439 22.26 39.07 15.96 17 HTML_FONT_LOW_CONTRAST 48459 26.50 35.43 23.16 18 FVGT_m_MULTI_ODD 45628 24.32 33.36 20.94 19 BAYES_99 43842 10.72 32.05 2.73 20 DKIM_VALID_EF 42890 27.35 31.36 25.86 21 TR_XM_DKIM_Undo 40731 9.28 29.78 1.60 22 T_KAM_HTML_FONT_INVALID 40010 21.21 29.25 18.19 23 MIME_HTML_ONLY 39886 23.45 29.16 21.31 24 XMSubLong 34673 22.37 25.35 21.26 25 BAYES_999 33931 8.26 24.81 2.07 26 DCC_CHECK_NEGATIVE 32179 48.91 23.53 58.42 27 T_TM2_M_HEADER_IN_MSG 31264 29.74 22.86 32.31 28 TR_XM_DK_Unsub 31176 14.69 22.79 11.65 29 RCVD_IN_MSPIKE_H2 30454 17.10 22.27 15.17 30 TR_DCC_Bayes_99 30206 6.72 22.08 0.97 31 XM_Multi_Part_URI 28741 13.60 21.01 10.82 32 UNPARSEABLE_RELAY 25428 12.41 18.59 10.10 33 XM_B_Unsub 25277 10.39 18.48 7.36 34 RELAYCOUNTRY_META 24307 7.23 17.77 3.29 35 TR_XM_BayesUnsub 24261 9.04 17.74 5.78 36 XM_B_SpammyWords3 20310 6.81 14.85 3.80 37 TR_MAX_INTL_RELAY 19690 7.46 14.40 4.87 38 LOTS_OF_MONEY 18697 7.51 13.67 5.21 39 TR_XM_SpammyRelay 17893 4.70 13.08 1.55 40 BOTNET_IPINHOSTNAME 17264 5.41 12.62 2.71 41 TR_XM_SpammyWords4 16975 5.93 12.41 3.51 42 TR_XM_SpammyWords2 15019 3.26 10.98 0.36 43 FSL_BULK_SIG 14554 13.86 10.64 15.06 44 BOTNET 13840 3.63 10.12 1.20 45 RCVD_IN_BL_SPAMCOP_NET 13676 3.11 10.00 0.54 46 XM_Evil_Numbers_Gen 13665 8.97 9.99 8.58 47 TR_XM_UnparsRelay 13503 3.55 9.87 1.19 48 RCVD_IN_MSPIKE_WL 12405 13.11 9.07 14.62 49 BAYES_80 12048 4.57 8.81 2.98 50 XM_B_Phish_Phrases 11965 5.74 8.75 4.62 51 BAYES_60 10376 6.22 7.59 5.70 52 XMSubMetaSx_00 9848 4.09 7.20 2.92 53 XM_Body_Dirty_Words 9509 3.44 6.95 2.13 54 RELAYCOUNTRY_CA 9262 2.31 6.77 0.63 55 UNTRUSTED_Relay 9213 2.80 6.74 1.32 56 XM_UncommonTLD01 8890 4.40 6.50 3.61 57 MPART_ALT_DIFF 8869 8.58 6.48 9.36 58 LotsOfNums_01 8662 6.35 6.33 6.35 59 XM_B_PhoneNumber 8345 7.51 6.10 8.04 60 XM_B_Investor 8274 2.57 6.05 1.27 61 DKIM_INVALID 7998 2.79 5.85 1.64 62 HTML_IMAGE_RATIO_02 7945 4.38 5.81 3.85 63 XMStrtUSub 7793 8.94 5.70 10.15 64 XM_H_Long_From01 7387 4.97 5.40 4.81 65 TR_XM_SPAMCOP 7208 1.55 5.27 0.16 66 XM_H_GMP 6867 5.05 5.02 5.06 67 BAYES_95 6857 2.74 5.01 1.89 68 HTML_IMAGE_RATIO_04 6725 10.66 4.92 12.81 69 XMSexyCombo_05 6211 1.89 4.54 0.89 70 RCVD_IN_MSPIKE_BL 6204 1.82 4.54 0.81 71 TR_XM_MSPIKECOMBO 6202 1.82 4.53 0.81 72 RCVD_IN_MSPIKE_H3 6140 6.31 4.49 7.00 73 TR_XM_PhishingBody 5998 2.22 4.39 1.41 74 MIME_HTML_MOSTLY 5669 2.91 4.14 2.44 75 TR_XM_SpammyWords5 5593 1.96 4.09 1.17 76 TooManyTo_001 5523 6.09 4.04 6.86 77 XMNumbers 5522 3.07 4.04 2.71 78 T_XMDrugObfuBody_14 5493 2.31 4.02 1.68 79 XM_OfRef6 5386 1.57 3.94 0.68 80 XM_B_SpammyTLD 5311 2.56 3.88 2.07 81 TM2_M_VERY_LONG_WORD 5252 7.27 3.84 8.55 82 XM_B_Unsub2 4896 1.80 3.58 1.13 83 TR_XM_INV_DKIM 4625 0.93 3.38 0.01 84 HTML_IMAGE_RATIO_06 4548 4.06 3.33 4.34 85 XM_URI_RBL 4514 1.07 3.30 0.24 86 TR_XM_NoHeaderRelay 4494 1.06 3.29 0.23 87 MIME_HTML_ONLY_MULTI 4492 6.10 3.28 7.15 88 TR_XM_SpammyWords3 4486 1.17 3.28 0.38 89 XM_SPF_SoftFail 4348 1.63 3.18 1.05 90 XM_CamelCaseFrm001 4269 2.12 3.12 1.75 91 XMDiploma_00 4160 1.70 3.04 1.19 92 RCVD_IN_VALIDITY_RPBL 4079 0.83 2.98 0.02 93 T_XMDrugObfuBody_08 4019 1.71 2.94 1.25 94 MIME_QP_LONG_LINE 3944 4.01 2.88 4.44 95 XM_UB50 3889 1.41 2.84 0.88 96 XM_B_URI_Unicode 3881 1.95 2.84 1.62 97 RCVD_IN_MSPIKE_H4 3764 2.97 2.75 3.05 98 RELAYCOUNTRY_AU 3666 1.08 2.68 0.48 99 T_TooManySym_01 3663 4.64 2.68 5.38 100 SpammyFromTLD_02 3645 1.00 2.66 0.38 101 TM2_M_URI_OPT_OUT 3593 1.90 2.63 1.63 102 HTML_IMAGE_RATIO_08 3592 2.30 2.63 2.18 103 RCVD_IN_MSPIKE_L3 3428 1.12 2.51 0.60 104 XM_B_SpammyWords4 3308 1.00 2.42 0.46 105 T_FILL_THIS_FORM_SHORT 3216 1.11 2.35 0.64 106 XMBody_17 2988 0.80 2.18 0.28 107 USER_IN_DEF_DKIM_WL 2977 8.51 2.18 10.89 108 MAILING_LIST_MULTI 2924 2.77 2.14 3.01 109 XMStockSpam_06 2873 1.34 2.10 1.05 110 FROM_EXCESS_BASE64 2869 1.59 2.10 1.41 111 HTML_IMAGE_ONLY_20 2708 0.78 1.98 0.33 112 T_XMDrugObfuBody_00 2685 1.13 1.96 0.82 113 ALL_TRUSTED 2613 10.06 1.91 13.11 114 RCVD_IN_VALIDITY_SAFE 2602 2.81 1.90 3.15 115 XMGenDplmaNmb 2577 0.98 1.88 0.64 116 XM_H_Long_From02 2547 1.04 1.86 0.74 117 RCVD_IN_MSPIKE_H5 2501 3.83 1.83 4.58 118 BAYES_40 2472 4.87 1.81 6.02 119 SpammyFromTLD_01 2431 0.98 1.78 0.69 120 BOTNET_NORDNS 2394 0.48 1.75 0.01 121 TR_XM_MSPIKECOMBO2 2353 0.50 1.72 0.04 122 TR_LOTS_OF_MONEY3 2349 0.62 1.72 0.21 123 SUBJ_ALL_CAPS 2348 1.32 1.72 1.18 124 T_XMHurry_00 2267 0.75 1.66 0.41 125 XM_PDF 2247 3.21 1.64 3.80 126 RCVD_IN_ZEN_LASTEXTERNAL 2232 0.44 1.63 0.00 127 SHORTCIRCUIT 2232 0.44 1.63 0.00 128 HTML_MIME_NO_HTML_TAG 2229 1.99 1.63 2.12 129 KHOP_HELO_FCRDNS 2220 3.92 1.62 4.78 130 T_REMOTE_IMAGE 2168 2.68 1.59 3.09 131 T_MONEY_PERCENT 2116 0.55 1.55 0.18 132 TR_LOTS_OF_MONEY2 2116 0.55 1.55 0.18 133 XMBrknScrpt_02 2114 0.91 1.55 0.68 134 HK_RANDOM_REPLYTO 2032 0.47 1.49 0.10 135 XMPhish30 2005 0.74 1.47 0.47 136 TR_XM_PHPForged 1985 0.58 1.45 0.25 137 TR_XM_FormFill2 1978 0.58 1.45 0.25 138 SCC_BODY_URI_ONLY 1960 2.41 1.43 2.78 139 XM_DK_Undo_01 1958 1.55 1.43 1.60 140 RCVD_IN_VALIDITY_CERTIFIED 1953 2.39 1.43 2.75 141 RCVD_IN_PSBL 1952 0.64 1.43 0.35 142 TR_XM_PHPDW 1944 0.57 1.42 0.25 143 URI_TRY_3LD 1943 0.74 1.42 0.48 144 RCVD_IN_IADB_LISTED 1942 2.38 1.42 2.74 145 BAYES_20 1937 4.30 1.42 5.39 146 XM_UB99 1933 0.39 1.41 0.00 147 XM_H_PHPOS 1921 0.56 1.40 0.24 148 URI_NOVOWEL 1899 1.20 1.39 1.13 149 XM_B_SEO 1868 0.52 1.37 0.20 150 DIET_1 1850 0.51 1.35 0.19 151 RCVD_IN_PBL 1838 0.86 1.34 0.68 152 URI_HEX 1830 1.15 1.34 1.08 153 RDNS_DYNAMIC 1796 0.46 1.31 0.15 154 LongTLD 1756 0.75 1.28 0.55 155 XM_B_COPY_HTML 1753 0.84 1.28 0.68 156 PDS_RDNS_DYNAMIC_FP 1753 0.37 1.28 0.03 157 TR_Symld_Words 1743 1.26 1.27 1.26 158 XM_SendGrid 1736 1.33 1.27 1.35 159 XM_B_Phish66 1716 0.56 1.25 0.30 160 TM2_M_OBFU_COMMENT 1714 0.52 1.25 0.24 161 RCVD_IN_IADB_SPF 1695 2.08 1.24 2.39 162 RCVD_IN_XBL 1680 0.34 1.23 0.01 163 DKIM_ADSP_NXDOMAIN 1678 0.51 1.23 0.24 164 URIBL_BLACK 1673 0.34 1.22 0.01 165 TR_XM_SEO4 1672 0.40 1.22 0.09 166 RELAYCOUNTRY_GB 1664 0.72 1.22 0.54 167 XM_HighProb1 1660 0.33 1.21 0.00 168 DKIM_ADSP_CUSTOM_MED 1650 0.80 1.21 0.64 169 TR_XM_InvalidRelay 1623 0.33 1.19 0.01 170 XMSubMetaI_00 1609 0.57 1.18 0.34 171 XMBody_78 1602 0.56 1.17 0.33 172 XM_DIRTYINTL 1588 0.35 1.16 0.05 173 RELAYCOUNTRY_FR 1567 0.45 1.15 0.19 174 RCVD_IN_IADB_DK 1566 1.81 1.14 2.05 175 XM_ProductURIs 1561 0.62 1.14 0.43 176 HTTPS_HTTP_MISMATCH 1523 0.70 1.11 0.54 177 RCVD_IN_IADB_SENDERID 1516 1.86 1.11 2.14 178 BOUNCE_MESSAGE 1469 8.39 1.07 11.13 179 ANY_BOUNCE_MESSAGE 1469 8.39 1.07 11.13 180 RCVD_IN_MSPIKE_L4 1458 0.44 1.07 0.20 181 NML_ADSP_CUSTOM_MED 1454 0.56 1.06 0.38 182 XM_B_COVIDMETA 1426 0.57 1.04 0.39 183 MPART_ALT_DIFF_COUNT 1424 0.59 1.04 0.42 184 XM_B_DNDMA 1417 0.54 1.04 0.36 185 TVD_RCVD_IP 1417 0.75 1.04 0.64 186 SHOPIFY_IMG_NOT_RCVD_SFY 1385 0.43 1.01 0.21 187 BAYES_00 1365 8.53 1.00 11.35 188 XM_UB999 1355 0.27 0.99 0.00 189 TR_XM_MaxSPIKE 1344 0.29 0.98 0.04 190 T_TooManySym_02 1344 2.30 0.98 2.79 191 THIS_AD 1323 0.44 0.97 0.24 192 RCVD_IN_MSPIKE_L5 1322 0.27 0.97 0.01 193 XM_OfRef7 1295 0.35 0.95 0.13 194 XMSexyCombo_01 1288 0.34 0.94 0.12 195 XM_UB60 1275 0.29 0.93 0.06 196 TM2_M_A_HREF_HREF 1271 0.44 0.93 0.26 197 FORGED_GMAIL_RCVD 1262 0.55 0.92 0.41 198 TR_Mismatch_TLD_02 1262 0.32 0.92 0.10 199 XM_Nigeria_01 1254 0.26 0.92 0.02 200 RCVD_IN_SBL_CSS 1243 0.27 0.91 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 363581 99.17 98.17 99.55 2 HTML_MESSAGE 323002 90.04 94.30 88.44 3 RELAYCOUNTRY_US 308040 83.32 80.60 84.34 4 XM_B_Unicode 250517 72.41 82.60 68.59 5 DKIM_SIGNED 230316 70.18 89.19 63.06 6 XM_DK_Pass 227425 68.21 84.07 62.27 7 DKIM_VALID 224319 67.39 83.35 61.42 8 BAYES_50 222141 55.09 39.78 60.82 9 DCC_CHECK_NEGATIVE 213352 48.91 23.53 58.42 10 DKIM_VALID_AU 183005 54.29 65.47 50.11 11 DCC_CHECK 151703 50.61 74.82 41.54 12 XM_B_SpammyWords 149153 48.62 69.39 40.84 13 XMListUnsubscribeExists 145366 47.18 66.88 39.80 14 XM_B_Unicode3 144968 41.54 46.48 39.69 15 T_TM2_M_HEADER_IN_MSG 118018 29.74 22.86 32.31 16 DKIM_VALID_EF 94428 27.35 31.36 25.86 17 LOC_TINY_FONT_1 86179 30.05 47.30 23.60 18 HTML_FONT_LOW_CONTRAST 84593 26.50 35.43 23.16 19 MIME_HTML_ONLY 77845 23.45 29.16 21.31 20 XMSubLong 77646 22.37 25.35 21.26 21 FVGT_m_MULTI_ODD 76476 24.32 33.36 20.94 22 T_KAM_HTML_FONT_INVALID 66443 21.21 29.25 18.19 23 XM_B_SpammyWords2 58280 22.26 39.07 15.96 24 RCVD_IN_MSPIKE_H2 55401 17.10 22.27 15.17 25 FSL_BULK_SIG 55017 13.86 10.64 15.06 26 RCVD_IN_MSPIKE_WL 53406 13.11 9.07 14.62 27 ALL_TRUSTED 47874 10.06 1.91 13.11 28 HTML_IMAGE_RATIO_04 46772 10.66 4.92 12.81 29 TR_XM_DK_Unsub 42544 14.69 22.79 11.65 30 HTML_FONT_FACE_BAD 41464 8.40 0.50 11.35 31 BAYES_00 41447 8.53 1.00 11.35 32 ANY_BOUNCE_MESSAGE 40665 8.39 1.07 11.13 33 BOUNCE_MESSAGE 40662 8.39 1.07 11.13 34 USER_IN_DEF_DKIM_WL 39757 8.51 2.18 10.89 35 XM_Multi_Part_URI 39534 13.60 21.01 10.82 36 XM_H_Trusted_IP 39027 7.77 0.00 10.69 37 XMStrtUSub 37083 8.94 5.70 10.15 38 UNPARSEABLE_RELAY 36870 12.41 18.59 10.10 39 MPART_ALT_DIFF 34197 8.58 6.48 9.36 40 XM_Evil_Numbers_Gen 31339 8.97 9.99 8.58 41 TM2_M_VERY_LONG_WORD 31219 7.27 3.84 8.55 42 XM_B_PhoneNumber 29359 7.51 6.10 8.04 43 MAY_BE_FORGED 27011 5.39 0.02 7.40 44 XM_B_Unsub 26866 10.39 18.48 7.36 45 MIME_HTML_ONLY_MULTI 26131 6.10 3.28 7.15 46 RCVD_IN_MSPIKE_H3 25548 6.31 4.49 7.00 47 TooManyTo_001 25036 6.09 4.04 6.86 48 LotsOfNums_01 23208 6.35 6.33 6.35 49 BAYES_40 21979 4.87 1.81 6.02 50 TR_XM_DK_Bayes 21226 4.44 0.77 5.81 51 TR_XM_BayesUnsub 21099 9.04 17.74 5.78 52 TR_XM_DK_Bayes1 20903 4.37 0.76 5.72 53 BAYES_60 20827 6.22 7.59 5.70 54 BAYES_20 19668 4.30 1.42 5.39 55 T_TooManySym_01 19652 4.64 2.68 5.38 56 XM_DKIMWhitelistDomains 19626 3.92 0.02 5.37 57 LOTS_OF_MONEY 19017 7.51 13.67 5.21 58 XM_H_GMP 18497 5.05 5.02 5.06 59 TR_MAX_INTL_RELAY 17781 7.46 14.40 4.87 60 TR_XM_DK_Bayes2 17636 3.61 0.35 4.83 61 XM_H_Long_From01 17562 4.97 5.40 4.81 62 KHOP_HELO_FCRDNS 17471 3.92 1.62 4.78 63 XM_B_Phish_Phrases 16866 5.74 8.75 4.62 64 RCVD_IN_MSPIKE_H5 16722 3.83 1.83 4.58 65 MIME_QP_LONG_LINE 16211 4.01 2.88 4.44 66 HTML_IMAGE_RATIO_06 15852 4.06 3.33 4.34 67 XM_DK_Undo_02 15110 14.13 40.80 4.14 68 XMSubNoVowel 14186 2.93 0.40 3.88 69 HTML_IMAGE_RATIO_02 14043 4.38 5.81 3.85 70 XM_B_SpammyWords3 13892 6.81 14.85 3.80 71 XM_PDF 13861 3.21 1.64 3.80 72 XM_UncommonTLD01 13175 4.40 6.50 3.61 73 TR_XM_SpammyWords4 12813 5.93 12.41 3.51 74 RELAYCOUNTRY_META 11999 7.23 17.77 3.29 75 RCVD_IN_VALIDITY_SAFE 11512 2.81 1.90 3.15 76 BAYES_05 11402 2.52 0.91 3.12 77 T_REMOTE_IMAGE 11283 2.68 1.59 3.09 78 RCVD_IN_MSPIKE_H4 11136 2.97 2.75 3.05 79 MAILING_LIST_MULTI 10981 2.77 2.14 3.01 80 BAYES_80 10889 4.57 8.81 2.98 81 XMSubMetaSx_00 10681 4.09 7.20 2.92 82 T_TooManySym_02 10177 2.30 0.98 2.79 83 SCC_BODY_URI_ONLY 10143 2.41 1.43 2.78 84 RCVD_IN_VALIDITY_CERTIFIED 10052 2.39 1.43 2.75 85 RCVD_IN_IADB_LISTED 10000 2.38 1.42 2.74 86 BAYES_99 9974 10.72 32.05 2.73 87 BOTNET_IPINHOSTNAME 9890 5.41 12.62 2.71 88 XMNumbers 9886 3.07 4.04 2.71 89 MIME_HTML_MOSTLY 8928 2.91 4.14 2.44 90 RCVD_IN_IADB_SPF 8742 2.08 1.24 2.39 91 TooManyTo_002 8039 1.82 0.81 2.20 92 HTML_IMAGE_RATIO_08 7968 2.30 2.63 2.18 93 RCVD_IN_IADB_SENDERID 7801 1.86 1.11 2.14 94 XM_Body_Dirty_Words 7773 3.44 6.95 2.13 95 HTML_MIME_NO_HTML_TAG 7743 1.99 1.63 2.12 96 XM_B_SpammyTLD 7553 2.56 3.88 2.07 97 BAYES_999 7547 8.26 24.81 2.07 98 RCVD_IN_IADB_DK 7501 1.81 1.14 2.05 99 INVALID_MSGID 7223 1.54 0.37 1.98 100 BAYES_95 6887 2.74 5.01 1.89 101 XMSubLongNoVowel 6841 1.39 0.11 1.87 102 XMSubGarbage 6664 1.33 0.02 1.82 103 RCVD_IN_IADB_VOUCHED 6474 1.50 0.77 1.77 104 XM_CamelCaseFrm001 6398 2.12 3.12 1.75 105 TO_MALFORMED 6367 1.28 0.04 1.74 106 T_XMDrugObfuBody_14 6118 2.31 4.02 1.68 107 DKIM_INVALID 5997 2.79 5.85 1.64 108 TM2_M_URI_OPT_OUT 5958 1.90 2.63 1.63 109 XM_B_URI_Unicode 5924 1.95 2.84 1.62 110 TR_XM_DKIM_Undo 5840 9.28 29.78 1.60 111 XM_DK_Undo_01 5840 1.55 1.43 1.60 112 TR_XM_SpammyRelay 5676 4.70 13.08 1.55 113 FROM_EXCESS_BASE64 5137 1.59 2.10 1.41 114 TR_XM_PhishingBody 5135 2.22 4.39 1.41 115 TooManyTo_003 5124 1.20 0.66 1.40 116 XM_SendGrid 4944 1.33 1.27 1.35 117 UNTRUSTED_Relay 4825 2.80 6.74 1.32 118 XM_B_Investor 4647 2.57 6.05 1.27 119 XMGappySubj_01 4619 1.01 0.34 1.26 120 TR_Symld_Words 4601 1.26 1.27 1.26 121 RCVD_IN_IADB_OPTIN 4551 1.05 0.54 1.25 122 T_XMDrugObfuBody_08 4550 1.71 2.94 1.25 123 BOTNET 4377 3.63 10.12 1.20 124 XMDiploma_00 4355 1.70 3.04 1.19 125 TR_XM_UnparsRelay 4330 3.55 9.87 1.19 126 SUBJ_ALL_CAPS 4302 1.32 1.72 1.18 127 TR_XM_SpammyWords5 4265 1.96 4.09 1.17 128 XM_GoogleGroups 4228 1.07 0.84 1.16 129 T_TooManySym_03 4139 0.98 0.55 1.13 130 XM_B_Unsub2 4122 1.80 3.58 1.13 131 URI_NOVOWEL 4118 1.20 1.39 1.13 132 HELO_NODOT 4021 0.83 0.12 1.10 133 HELO_NO_DOMAIN 4013 0.83 0.11 1.10 134 IN_HORDE_ADDRESS_BOOK 3993 0.81 0.07 1.09 135 URI_HEX 3935 1.15 1.34 1.08 136 XMStockSpam_06 3833 1.34 2.10 1.05 137 XM_SPF_SoftFail 3829 1.63 3.18 1.05 138 TooManyTo_004 3784 0.91 0.57 1.04 139 XM_H_PHPMailer 3637 0.87 0.54 1.00 140 TR_DCC_Bayes_99 3529 6.72 22.08 0.97 141 XMCapTrack 3454 0.80 0.41 0.95 142 HTML_IMAGE_ONLY_32 3408 0.77 0.35 0.93 143 FROM_GOV_DKIM_AU 3328 0.81 0.53 0.91 144 XM_E_Blogspot 3296 0.69 0.12 0.90 145 XMNoVowels 3266 0.78 0.49 0.89 146 XM_ShortIntro_01 3264 0.77 0.45 0.89 147 XMSexyCombo_05 3252 1.89 4.54 0.89 148 XM_UB50 3212 1.41 2.84 0.88 149 TR_XM_DK_SendGrid 3138 0.87 0.90 0.86 150 TooManyTo_005 3062 0.75 0.52 0.84 151 T_XMDrugObfuBody_00 2999 1.13 1.96 0.82 152 RCVD_IN_MSPIKE_BL 2948 1.82 4.54 0.81 153 TR_XM_MSPIKECOMBO 2944 1.82 4.53 0.81 154 TVD_SPACE_RATIO 2911 0.63 0.17 0.80 155 XM_H_Long_From02 2692 1.04 1.86 0.74 156 TR_MetaPhish_Combo_01 2610 0.72 0.72 0.71 157 SpammyFromTLD_01 2510 0.98 1.78 0.69 158 RCVD_IN_PBL 2491 0.86 1.34 0.68 159 XM_OfRef6 2486 1.57 3.94 0.68 160 XMBrknScrpt_02 2478 0.91 1.55 0.68 161 XM_B_COPY_HTML 2476 0.84 1.28 0.68 162 XMLngstWrd_00 2437 0.58 0.35 0.67 163 TR_XM_Base64_M1 2426 0.69 0.75 0.66 164 XMGappySubj_02 2423 0.50 0.05 0.66 165 XMGenDplmaNmb 2355 0.98 1.88 0.64 166 DKIM_ADSP_CUSTOM_MED 2352 0.80 1.21 0.64 167 T_FILL_THIS_FORM_SHORT 2344 1.11 2.35 0.64 168 TVD_RCVD_IP 2335 0.75 1.04 0.64 169 RELAYCOUNTRY_CA 2315 2.31 6.77 0.63 170 RCVD_IN_MSPIKE_L3 2176 1.12 2.51 0.60 171 LOW_PRICE 2131 0.52 0.36 0.58 172 XMBdyGiftCard01 2098 0.63 0.79 0.57 173 T_Symld_Words_02 2056 0.61 0.74 0.56 174 LongTLD 2004 0.75 1.28 0.55 175 HTTPS_HTTP_MISMATCH 1971 0.70 1.11 0.54 176 RELAYCOUNTRY_GB 1968 0.72 1.22 0.54 177 RCVD_IN_BL_SPAMCOP_NET 1954 3.11 10.00 0.54 178 T_OBFU_PDF_ATTACH 1898 0.42 0.17 0.52 179 MIME_CHARSET_FARAWAY 1820 0.44 0.30 0.50 180 HTML_TAG_BALANCE_BODY 1813 0.60 0.88 0.50 181 URI_TRY_3LD 1771 0.74 1.42 0.48 182 RELAYCOUNTRY_AU 1738 1.08 2.68 0.48 183 XMPhish30 1728 0.74 1.47 0.47 184 XM_B_SpammyWords4 1692 1.00 2.42 0.46 185 XMLngstWrd_01 1624 0.41 0.31 0.44 186 XMMoneyMeta_00 1594 0.55 0.84 0.44 187 XM_ProductURIs 1575 0.62 1.14 0.43 188 CHARSET_FARAWAY_HEADER 1540 0.35 0.15 0.42 189 MPART_ALT_DIFF_COUNT 1526 0.59 1.04 0.42 190 T_XMHurry_00 1491 0.75 1.66 0.41 191 FORGED_GMAIL_RCVD 1487 0.55 0.92 0.41 192 XMBSHREFv2 1478 0.41 0.41 0.40 193 XMPhish14 1477 0.50 0.75 0.40 194 MSGID_FROM_MTA_HEADER 1460 0.35 0.21 0.40 195 XM_B_COVIDMETA 1420 0.57 1.04 0.39 196 XMSubMetaSxObfu_03 1404 0.45 0.64 0.38 197 SpammyFromTLD_02 1381 1.00 2.66 0.38 198 XMDateMe_00 1377 0.42 0.52 0.38 199 NML_ADSP_CUSTOM_MED 1377 0.56 1.06 0.38 200 TR_XM_SpammyWords3 1370 1.17 3.28 0.38 ----------------------------------------------------------------------