Email: 620767 Autolearn: 0 AvgScore: 0.37 AvgScanTime: 1.68 sec Spam: 84761 Autolearn: 0 AvgScore: 12.80 AvgScanTime: 3.30 sec Ham: 536006 Autolearn: 0 AvgScore: -1.60 AvgScanTime: 1.43 sec Time Spent Running SA: 290.29 hours Time Spent Processing Spam: 77.59 hours Time Spent Processing Ham: 212.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 82287 98.01 97.08 98.15 2 HTML_MESSAGE 77483 88.57 91.41 88.12 3 XM_B_Unicode 64394 70.57 75.97 69.71 4 DKIM_SIGNED 63123 75.93 74.47 76.16 5 XM_DK_Pass 60732 74.59 71.65 75.06 6 XMListUnsubscribeExists 56025 52.90 66.10 50.82 7 RELAYCOUNTRY_US 53867 78.91 63.55 81.34 8 DKIM_VALID 49921 69.32 58.90 70.97 9 XM_DK_Undo_02 41806 16.45 49.32 11.26 10 DKIM_VALID_AU 35657 51.61 42.07 53.12 11 BAYES_99 34313 12.00 40.48 7.50 12 XM_B_Unicode3 29957 38.53 35.34 39.04 13 BAYES_50 29369 50.22 34.65 52.69 14 BAYES_999 27173 9.48 32.06 5.91 15 LOC_TINY_FONT_1 27111 26.15 31.99 25.23 16 T_TM2_M_HEADER_IN_MSG 25291 30.91 29.84 31.07 17 RELAYCOUNTRY_META 23914 9.26 28.21 6.26 18 BOTNET 23096 6.35 27.25 3.05 19 FVGT_m_MULTI_ODD 22881 22.86 26.99 22.21 20 DKIM_VALID_EF 22543 27.80 26.60 27.99 21 UNTRUSTED_Relay 21653 6.05 25.55 2.96 22 MIME_HTML_ONLY 21566 21.88 25.44 21.32 23 HTML_FONT_LOW_CONTRAST 20880 27.82 24.63 28.32 24 RCVD_IN_MSPIKE_H2 18830 25.75 22.22 26.31 25 XMSubLong 18387 21.13 21.69 21.04 26 T_KAM_HTML_FONT_INVALID 18340 18.88 21.64 18.44 27 XM_UncommonTLD01 18173 5.73 21.44 3.24 28 XM_Multi_Part_URI 17191 13.49 20.28 12.41 29 XM_Body_Dirty_Words 15465 13.79 18.25 13.09 30 XM_B_Phish_Phrases 14982 8.96 17.68 7.58 31 RCVD_IN_MSPIKE_BL 14228 3.20 16.79 1.05 32 BOTNET_IPINHOSTNAME 13875 6.73 16.37 5.21 33 DKIM_INVALID 13202 6.61 15.58 5.20 34 MPART_ALT_DIFF 11711 6.12 13.82 4.91 35 RCVD_IN_BL_SPAMCOP_NET 10895 2.69 12.85 1.08 36 XM_SPF_SoftFail 10462 3.33 12.34 1.90 37 RCVD_IN_RP_RNBL 9997 1.79 11.79 0.21 38 RCVD_IN_MSPIKE_L5 9779 1.90 11.54 0.37 39 SpammyFromTLD_01 9775 2.32 11.53 0.86 40 XM_B_Unsub 9536 10.89 11.25 10.84 41 RCVD_IN_PSBL 9466 1.55 11.17 0.03 42 LOTS_OF_MONEY 9427 7.84 11.12 7.32 43 XMSexyCombo_05 9374 5.33 11.06 4.43 44 NO_DNS_FOR_FROM 8311 3.55 9.81 2.56 45 LotsOfNums_01 8124 8.47 9.58 8.30 46 T_XMDrugObfuBody_08 7871 2.73 9.29 1.70 47 XMDiploma_00 7621 3.39 8.99 2.50 48 RCVD_IN_MSPIKE_WL 7376 24.19 8.70 26.64 49 XM_UB99 7270 1.18 8.58 0.01 50 XM_UB50 7142 2.60 8.43 1.68 51 XM_Evil_Numbers_Gen 6749 9.54 7.96 9.79 52 RELAYCOUNTRY_CA 6567 2.66 7.75 1.85 53 TR_XM_PhishingBody 6531 4.05 7.71 3.48 54 BAYES_80 6343 4.98 7.48 4.59 55 HTML_IMAGE_RATIO_02 6311 7.54 7.45 7.56 56 BAYES_60 6081 7.12 7.17 7.11 57 XM_UB999 5906 0.96 6.97 0.01 58 XMSubMetaSx_00 5804 4.74 6.85 4.40 59 XM_H_Long_From01 5474 5.61 6.46 5.47 60 TooManyTo_001 4993 8.43 5.89 8.83 61 XM_B_Phish66 4762 2.57 5.62 2.09 62 XMBrknScrpt_02 4337 1.86 5.12 1.35 63 XM_B_COVIDMETA 4310 2.54 5.08 2.14 64 UNPARSEABLE_RELAY 4303 7.31 5.08 7.66 65 BOTNET_NORDNS 4279 0.70 5.05 0.02 66 SpammyFromTLD_02 4231 0.89 4.99 0.24 67 RCVD_IN_MSPIKE_H3 4117 13.67 4.86 15.07 68 XM_DIRTYINTL 4077 1.22 4.81 0.65 69 MIME_HTML_MOSTLY 4049 2.67 4.78 2.34 70 RCVD_IN_MSPIKE_L3 3799 1.12 4.48 0.59 71 FROM_SUSPICIOUS_NTLD 3736 0.67 4.41 0.08 72 HTML_IMAGE_RATIO_04 3708 5.18 4.37 5.31 73 HTML_IMAGE_ONLY_32 3680 0.98 4.34 0.44 74 FROM_SUSPICIOUS_NTLD_FP 3677 0.65 4.34 0.07 75 XMBody_17 3667 1.38 4.33 0.92 76 BAYES_95 3653 2.94 4.31 2.72 77 TR_XM_COVIDMETA4 3631 1.18 4.28 0.69 78 T_PDS_OTHER_BAD_TLD 3603 0.95 4.25 0.43 79 XMNumbers 3446 3.48 4.07 3.38 80 HTML_IMAGE_RATIO_06 3379 3.73 3.99 3.68 81 XM_B_SpammyTLD 3344 2.28 3.95 2.01 82 TR_XM_INV_DKIM 3283 0.70 3.87 0.20 83 XM_SendGrid 3118 6.42 3.68 6.86 84 DATE_IN_PAST_03_06 3043 0.60 3.59 0.13 85 RCVD_IN_MSPIKE_H4 3037 9.00 3.58 9.86 86 XMStrtUSub 3011 5.20 3.55 5.46 87 XM_URI_RBL 2886 0.66 3.40 0.22 88 RELAYCOUNTRY_FR 2794 0.83 3.30 0.44 89 TR_Mismatch_TLD_02 2747 0.53 3.24 0.10 90 TR_XM_PHPDW 2733 0.96 3.22 0.60 91 TM2_M_VERY_LONG_WORD 2719 1.48 3.21 1.21 92 TM2_M_URI_OPT_OUT 2695 3.47 3.18 3.52 93 XM_CamelCaseFrm001 2683 2.12 3.17 1.96 94 XM_UB60 2645 0.67 3.12 0.28 95 ALL_TRUSTED 2599 12.29 3.07 13.75 96 TR_XM_PHPForged 2587 0.91 3.05 0.58 97 TR_XM_FormFill2 2545 0.90 3.00 0.57 98 XM_H_PHPOS 2542 0.90 3.00 0.57 99 URIBL_SBL_A 2525 0.70 2.98 0.34 100 RELAYCOUNTRY_RU 2420 0.62 2.86 0.26 101 TR_XM_MaxSPIKE 2371 0.43 2.80 0.06 102 TR_XM_MaxWHORU 2340 0.42 2.76 0.05 103 URI_PHP_REDIR 2312 0.44 2.73 0.08 104 TR_XM_RelayPhish 2298 0.51 2.71 0.16 105 HTML_IMAGE_RATIO_08 2247 2.68 2.65 2.68 106 URI_HEX 2195 1.89 2.59 1.78 107 TR_XM_MaxBayes 2191 0.38 2.58 0.03 108 T_REMOTE_IMAGE 2143 3.76 2.53 3.96 109 HTML_MIME_NO_HTML_TAG 2142 2.45 2.53 2.44 110 TR_XM_UnparsRelay 2135 0.76 2.52 0.48 111 XM_UB80 2128 0.41 2.51 0.08 112 KHOP_HELO_FCRDNS 2101 1.90 2.48 1.80 113 SUBJ_ALL_CAPS 2056 1.64 2.43 1.51 114 DKIM_ADSP_CUSTOM_MED 1973 1.30 2.33 1.13 115 XM_OfRef6 1968 1.37 2.32 1.22 116 RDNS_DYNAMIC 1935 0.60 2.28 0.33 117 XMSexyCombo_01 1913 1.24 2.26 1.08 118 BAYES_40 1864 4.35 2.20 4.69 119 MIME_QP_LONG_LINE 1862 4.79 2.20 5.20 120 TR_XM_COVIDMETA1 1861 0.66 2.20 0.42 121 DATE_IN_PAST_06_12 1852 0.49 2.18 0.23 122 NML_ADSP_CUSTOM_MED 1771 1.01 2.09 0.84 123 T_XMDrugObfuBody_14 1766 1.81 2.08 1.77 124 T_TooManySym_01 1732 4.04 2.04 4.36 125 XM_B_Unsub2 1718 2.74 2.03 2.85 126 MIME_HTML_ONLY_MULTI 1713 2.92 2.02 3.07 127 FORGED_GMAIL_RCVD 1648 0.75 1.94 0.56 128 LongTLD 1595 0.39 1.88 0.15 129 PDS_FROM_2_EMAILS 1561 0.29 1.84 0.05 130 XMHTML_After_End 1558 1.20 1.84 1.09 131 FROM_EXCESS_BASE64 1511 2.36 1.78 2.45 132 XM_PDF 1505 4.61 1.78 5.06 133 TR_LOTS_OF_MONEY3 1467 0.78 1.73 0.63 134 TVD_SPACE_RATIO 1411 0.58 1.66 0.41 135 RELAYCOUNTRY_DE 1401 0.63 1.65 0.46 136 XMStockSpam_06 1394 1.28 1.64 1.22 137 BAYES_20 1387 3.38 1.64 3.66 138 T_FILL_THIS_FORM_SHORT 1384 1.21 1.63 1.14 139 FROM_2_EMAILS_SHORT 1356 0.22 1.60 0.00 140 TR_Symld_Words 1343 1.86 1.58 1.90 141 XM_UB95 1341 0.24 1.58 0.02 142 TR_XM_DK_SendGrid 1326 3.55 1.56 3.86 143 TVD_SPACE_RATIO_MINFP 1316 0.23 1.55 0.02 144 XMSubNoVowel 1316 1.08 1.55 1.00 145 URI_NOVOWEL 1304 2.06 1.54 2.14 146 T_XMDrugObfuBody_00 1301 0.85 1.53 0.74 147 LONG_JUNK_URI 1289 0.25 1.52 0.05 148 NO_FM_NAME_IP_HOSTN 1261 0.21 1.49 0.00 149 XM_Combo_Sbj 1209 0.49 1.43 0.34 150 XMGppyBdWords 1198 0.35 1.41 0.19 151 HELO_NODOT 1184 1.72 1.40 1.77 152 HELO_NO_DOMAIN 1183 1.72 1.40 1.77 153 T_PDS_TO_EQ_FROM_NAME 1183 0.19 1.40 0.00 154 MAILING_LIST_MULTI 1180 2.19 1.39 2.32 155 XMBody_78 1155 0.51 1.36 0.37 156 TR_XM_SpoofStaff 1153 0.26 1.36 0.09 157 MPART_ALT_DIFF_COUNT 1142 0.48 1.35 0.34 158 XMGenDplmaNmb 1135 1.19 1.34 1.16 159 XMSpoofStaff2 1130 0.25 1.33 0.08 160 TR_Mismatch_TLD_01 1090 0.39 1.29 0.24 161 MIME_CHARSET_FARAWAY 1056 0.29 1.25 0.14 162 URI_TRY_3LD 1054 1.31 1.24 1.32 163 XMSubMetaI_00 1043 1.12 1.23 1.10 164 HK_RANDOM_REPLYTO 1027 0.34 1.21 0.21 165 BAYES_00 1027 12.85 1.21 14.69 166 XM_SPF_Unknown 1026 0.81 1.21 0.75 167 URIBL_BLACK 1001 0.18 1.18 0.03 168 XM_H_PHPMailer 994 0.67 1.17 0.59 169 RELAYCOUNTRY_IN 990 0.23 1.17 0.08 170 XM_HighProb1 968 0.16 1.14 0.01 171 TR_MetaPhish_Combo_01 957 0.76 1.13 0.70 172 RELAYCOUNTRY_GB 938 0.95 1.11 0.93 173 T_Symld_Words_02 891 0.56 1.05 0.49 174 TM2_M_BODY_EMPTY 875 0.53 1.03 0.46 175 XM_ShortIntro_01 868 0.67 1.02 0.61 176 DATE_IN_PAST_12_24 865 0.29 1.02 0.18 177 INVESTMENT_ADVICE 860 0.25 1.01 0.12 178 CHARSET_FARAWAY_HEADER 844 0.17 1.00 0.04 179 XMEmptyBody_01 836 0.23 0.99 0.11 180 XM_H_SpoofStaff4 829 0.21 0.98 0.09 181 TR_XM_PSC1 826 0.21 0.97 0.08 182 TR_XM_SpoofStaff2 824 0.13 0.97 0.00 183 XMMoneyMeta_00 822 0.67 0.97 0.63 184 XM_H_Long_From02 818 1.00 0.97 1.01 185 XMSubMetaSxObfu_03 811 0.74 0.96 0.71 186 RELAYCOUNTRY_NL 801 0.47 0.95 0.40 187 TR_LOTS_OF_MONEY2 800 0.33 0.94 0.24 188 T_MONEY_PERCENT 800 0.33 0.94 0.24 189 XM_DK_Undo_01 792 1.55 0.93 1.65 190 XMReplyNow 786 0.26 0.93 0.15 191 TooManyTo_002 784 1.98 0.92 2.15 192 REMOVE_BEFORE_LINK 781 0.33 0.92 0.24 193 RELAYCOUNTRY_CN 768 0.19 0.91 0.08 194 DIET_1 766 0.64 0.90 0.60 195 RCVD_IN_IADB_LISTED 756 4.39 0.89 4.95 196 XM_BadFromFormat 738 0.30 0.87 0.21 197 T_XMHurry_00 737 0.65 0.87 0.62 198 TR_Caps_n_Bayes_99 735 0.20 0.87 0.09 199 MISSING_HEADERS 734 0.65 0.87 0.61 200 XMSexyCombo_04 733 0.56 0.86 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 526104 98.01 97.08 98.15 2 HTML_MESSAGE 472351 88.57 91.41 88.12 3 RELAYCOUNTRY_US 435979 78.91 63.55 81.34 4 DKIM_SIGNED 408240 75.93 74.47 76.16 5 XM_DK_Pass 402301 74.59 71.65 75.06 6 DKIM_VALID 380390 69.32 58.90 70.97 7 XM_B_Unicode 373657 70.57 75.97 69.71 8 DKIM_VALID_AU 284707 51.61 42.07 53.12 9 BAYES_50 282399 50.22 34.65 52.69 10 XMListUnsubscribeExists 272388 52.90 66.10 50.82 11 XM_B_Unicode3 209243 38.53 35.34 39.04 12 T_TM2_M_HEADER_IN_MSG 166562 30.91 29.84 31.07 13 HTML_FONT_LOW_CONTRAST 151820 27.82 24.63 28.32 14 DKIM_VALID_EF 150009 27.80 26.60 27.99 15 RCVD_IN_MSPIKE_WL 142786 24.19 8.70 26.64 16 RCVD_IN_MSPIKE_H2 141002 25.75 22.22 26.31 17 LOC_TINY_FONT_1 135244 26.15 31.99 25.23 18 FVGT_m_MULTI_ODD 119047 22.86 26.99 22.21 19 MIME_HTML_ONLY 114251 21.88 25.44 21.32 20 XMSubLong 112779 21.13 21.69 21.04 21 T_KAM_HTML_FONT_INVALID 98846 18.88 21.64 18.44 22 RCVD_IN_MSPIKE_H3 80756 13.67 4.86 15.07 23 BAYES_00 78736 12.85 1.21 14.69 24 ALL_TRUSTED 73682 12.29 3.07 13.75 25 XM_Body_Dirty_Words 70138 13.79 18.25 13.09 26 XM_Multi_Part_URI 66535 13.49 20.28 12.41 27 XM_DK_Undo_02 60335 16.45 49.32 11.26 28 XM_B_Unsub 58078 10.89 11.25 10.84 29 RCVD_IN_MSPIKE_H4 52845 9.00 3.58 9.86 30 XM_Evil_Numbers_Gen 52475 9.54 7.96 9.79 31 TooManyTo_001 47330 8.43 5.89 8.83 32 LotsOfNums_01 44472 8.47 9.58 8.30 33 TR_XM_DK_Bayes 43808 7.16 0.77 8.17 34 UNPARSEABLE_RELAY 41067 7.31 5.08 7.66 35 TR_XM_DK_Bayes1 41058 6.70 0.64 7.66 36 XM_B_Phish_Phrases 40651 8.96 17.68 7.58 37 HTML_IMAGE_RATIO_02 40523 7.54 7.45 7.56 38 BAYES_99 40200 12.00 40.48 7.50 39 XM_DKIMWhitelistDomains 39507 6.37 0.04 7.37 40 LOTS_OF_MONEY 39243 7.84 11.12 7.32 41 RCVD_IN_RP_SAFE 38284 6.21 0.30 7.14 42 BAYES_60 38099 7.12 7.17 7.11 43 XM_SendGrid 36747 6.42 3.68 6.86 44 TR_XM_DK_Bayes2 35702 5.79 0.28 6.66 45 RCVD_IN_RP_CERTIFIED 35663 5.77 0.21 6.65 46 RELAYCOUNTRY_META 33561 9.26 28.21 6.26 47 IN_ZIMBRA_NJ_WHITELIST 32642 5.27 0.06 6.09 48 BAYES_999 31657 9.48 32.06 5.91 49 XM_H_Long_From01 29323 5.61 6.46 5.47 50 XMStrtUSub 29240 5.20 3.55 5.46 51 HTML_IMAGE_RATIO_04 28445 5.18 4.37 5.31 52 BOTNET_IPINHOSTNAME 27908 6.73 16.37 5.21 53 MIME_QP_LONG_LINE 27892 4.79 2.20 5.20 54 DKIM_INVALID 27850 6.61 15.58 5.20 55 XM_PDF 27104 4.61 1.78 5.06 56 RCVD_IN_IADB_LISTED 26509 4.39 0.89 4.95 57 MPART_ALT_DIFF 26294 6.12 13.82 4.91 58 BAYES_40 25129 4.35 2.20 4.69 59 BAYES_80 24596 4.98 7.48 4.59 60 XMSexyCombo_05 23722 5.33 11.06 4.43 61 XMSubMetaSx_00 23595 4.74 6.85 4.40 62 T_TooManySym_01 23344 4.04 2.04 4.36 63 RCVD_IN_IADB_SPF 22836 3.78 0.77 4.26 64 T_REMOTE_IMAGE 21205 3.76 2.53 3.96 65 TR_XM_DK_SendGrid 20688 3.55 1.56 3.86 66 RCVD_IN_IADB_SENDERID 20311 3.37 0.74 3.79 67 HTML_IMAGE_RATIO_06 19745 3.73 3.99 3.68 68 RCVD_IN_IADB_DK 19641 3.26 0.74 3.66 69 BAYES_20 19592 3.38 1.64 3.66 70 TM2_M_URI_OPT_OUT 18873 3.47 3.18 3.52 71 TR_XM_PhishingBody 18636 4.05 7.71 3.48 72 XMNumbers 18143 3.48 4.07 3.38 73 XM_UncommonTLD01 17379 5.73 21.44 3.24 74 RCVD_IN_IADB_VOUCHED 16720 2.74 0.31 3.12 75 MIME_HTML_ONLY_MULTI 16437 2.92 2.02 3.07 76 BOTNET 16327 6.35 27.25 3.05 77 UNTRUSTED_Relay 15881 6.05 25.55 2.96 78 XM_B_Unsub2 15269 2.74 2.03 2.85 79 ANY_BOUNCE_MESSAGE 14784 2.49 0.81 2.76 80 BOUNCE_MESSAGE 14780 2.49 0.81 2.76 81 BAYES_95 14602 2.94 4.31 2.72 82 HTML_IMAGE_RATIO_08 14365 2.68 2.65 2.68 83 XM_H_Trusted_IP 14003 2.26 0.00 2.61 84 NO_DNS_FOR_FROM 13715 3.55 9.81 2.56 85 XMDiploma_00 13414 3.39 8.99 2.50 86 FROM_EXCESS_BASE64 13134 2.36 1.78 2.45 87 HTML_MIME_NO_HTML_TAG 13061 2.45 2.53 2.44 88 BAYES_05 12649 2.15 0.83 2.36 89 MIME_HTML_MOSTLY 12517 2.67 4.78 2.34 90 MAILING_LIST_MULTI 12435 2.19 1.39 2.32 91 T_TooManySym_02 11882 1.99 0.58 2.22 92 TooManyTo_002 11524 1.98 0.92 2.15 93 URI_NOVOWEL 11487 2.06 1.54 2.14 94 XM_B_COVIDMETA 11469 2.54 5.08 2.14 95 XM_B_Phish66 11183 2.57 5.62 2.09 96 RCVD_IN_IADB_OPTIN 11089 1.83 0.30 2.07 97 XM_B_SpammyTLD 10787 2.28 3.95 2.01 98 XM_CamelCaseFrm001 10492 2.12 3.17 1.96 99 XM_SPF_SoftFail 10194 3.33 12.34 1.90 100 TR_Symld_Words 10173 1.86 1.58 1.90 101 RELAYCOUNTRY_CA 9931 2.66 7.75 1.85 102 KHOP_HELO_FCRDNS 9663 1.90 2.48 1.80 103 TVD_RCVD_IP 9578 1.63 0.63 1.79 104 URI_HEX 9536 1.89 2.59 1.78 105 T_XMDrugObfuBody_14 9491 1.81 2.08 1.77 106 HELO_NODOT 9465 1.72 1.40 1.77 107 HELO_NO_DOMAIN 9464 1.72 1.40 1.77 108 RCVD_IN_MSPIKE_H5 9185 1.52 0.26 1.71 109 T_XMDrugObfuBody_08 9101 2.73 9.29 1.70 110 XM_UB50 9025 2.60 8.43 1.68 111 XM_DK_Undo_01 8827 1.55 0.93 1.65 112 SUBJ_ALL_CAPS 8116 1.64 2.43 1.51 113 TooManyTo_003 7707 1.33 0.66 1.44 114 HELO_MISC_IP 7697 1.33 0.68 1.44 115 CK_HELO_DYNAMIC_SPLIT_IP 7685 1.35 0.80 1.43 116 IN_HORDE_ADDRESS_BOOK 7413 1.23 0.30 1.38 117 XMBrknScrpt_02 7240 1.86 5.12 1.35 118 INVALID_MSGID 7196 1.19 0.21 1.34 119 URI_TRY_3LD 7060 1.31 1.24 1.32 120 XM_GoogleGroups 6808 1.16 0.49 1.27 121 XMCapTrack 6639 1.15 0.57 1.24 122 XMStockSpam_06 6561 1.28 1.64 1.22 123 XM_OfRef6 6543 1.37 2.32 1.22 124 TM2_M_VERY_LONG_WORD 6468 1.48 3.21 1.21 125 TO_MALFORMED 6351 1.02 0.01 1.18 126 XMGenDplmaNmb 6233 1.19 1.34 1.16 127 USER_IN_DEF_DKIM_WL 6184 1.00 0.01 1.15 128 T_FILL_THIS_FORM_SHORT 6137 1.21 1.63 1.14 129 DKIM_ADSP_CUSTOM_MED 6070 1.30 2.33 1.13 130 XMSubMetaI_00 5902 1.12 1.23 1.10 131 XMHTML_After_End 5861 1.20 1.84 1.09 132 RCVD_IN_BL_SPAMCOP_NET 5804 2.69 12.85 1.08 133 XMSexyCombo_01 5802 1.24 2.26 1.08 134 XM_ProductURIs 5751 1.02 0.69 1.07 135 TooManyTo_004 5684 0.99 0.58 1.06 136 RCVD_IN_MSPIKE_BL 5651 3.20 16.79 1.05 137 XMGappySubj_01 5642 0.93 0.13 1.05 138 XM_H_Long_From02 5390 1.00 0.97 1.01 139 XMSubNoVowel 5363 1.08 1.55 1.00 140 T_OBFU_PDF_ATTACH 5281 0.90 0.38 0.99 141 HTML_FONT_FACE_BAD 4990 0.92 0.82 0.93 142 RELAYCOUNTRY_GB 4966 0.95 1.11 0.93 143 XMBody_17 4905 1.38 4.33 0.92 144 T_TooManySym_03 4648 0.77 0.17 0.87 145 TooManyTo_005 4636 0.81 0.47 0.86 146 SpammyFromTLD_01 4616 2.32 11.53 0.86 147 NML_ADSP_CUSTOM_MED 4522 1.01 2.09 0.84 148 HTTPS_HTTP_MISMATCH 4347 0.81 0.84 0.81 149 XMBody_95 4097 0.67 0.10 0.76 150 XM_SPF_Unknown 4026 0.81 1.21 0.75 151 T_XMDrugObfuBody_00 3960 0.85 1.53 0.74 152 XMSubMetaSxObfu_03 3797 0.74 0.96 0.71 153 TR_MetaPhish_Combo_01 3741 0.76 1.13 0.70 154 XMBdyGiftCard01 3717 0.67 0.54 0.69 155 TR_XM_COVIDMETA4 3672 1.18 4.28 0.69 156 XM_RXBody 3655 0.63 0.29 0.68 157 XM_E_Blogspot 3603 0.60 0.11 0.67 158 TR_BOTNET_NEGATE 3531 0.64 0.50 0.66 159 XM_DIRTYINTL 3497 1.22 4.81 0.65 160 TR_LOTS_OF_MONEY3 3357 0.78 1.73 0.63 161 XMMoneyMeta_00 3352 0.67 0.97 0.63 162 TR_MSPIKEBAYES00 3346 0.54 0.01 0.62 163 T_XMHurry_00 3321 0.65 0.87 0.62 164 XM_ShortIntro_01 3281 0.67 1.02 0.61 165 MISSING_HEADERS 3274 0.65 0.87 0.61 166 TR_XM_PHPDW 3239 0.96 3.22 0.60 167 DIET_1 3224 0.64 0.90 0.60 168 RCVD_IN_MSPIKE_L3 3159 1.12 4.48 0.59 169 XM_H_PHPMailer 3149 0.67 1.17 0.59 170 XMNoVowels 3140 0.57 0.44 0.59 171 DKIM_ADSP_NXDOMAIN 3104 0.59 0.67 0.58 172 TR_XM_PHPForged 3089 0.91 3.05 0.58 173 TR_XM_FormFill2 3067 0.90 3.00 0.57 174 XM_H_PHPOS 3039 0.90 3.00 0.57 175 FORGED_GMAIL_RCVD 3020 0.75 1.94 0.56 176 NUMERIC_HTTP_ADDR 2978 0.59 0.81 0.56 177 XMHTMLBadTable_001 2957 0.52 0.35 0.55 178 HTML_TAG_BALANCE_BODY 2822 0.56 0.79 0.53 179 XM_B_REG_HTML 2816 0.48 0.17 0.53 180 XMSexyCombo_04 2715 0.56 0.86 0.51 181 XMOemUri 2707 0.48 0.36 0.51 182 HTML_IMAGE_ONLY_20 2703 0.49 0.43 0.50 183 XMPhish08 2641 0.53 0.77 0.49 184 XMBSHREFv2 2628 0.48 0.45 0.49 185 T_TooManySym_04 2615 0.43 0.05 0.49 186 RCVD_IN_SORBS_DUL 2614 0.49 0.54 0.49 187 T_Symld_Words_02 2607 0.56 1.05 0.49 188 TR_XM_UnparsRelay 2570 0.76 2.52 0.48 189 XMSlimDrugH 2546 0.52 0.77 0.47 190 XMPhish14 2539 0.50 0.65 0.47 191 FROM_GOV_DKIM_AU 2521 0.42 0.09 0.47 192 BODY_QUOTE_MALF_MSGID 2512 0.51 0.74 0.47 193 RELAYCOUNTRY_DE 2488 0.63 1.65 0.46 194 FROM_GOV_SPOOF 2478 0.43 0.24 0.46 195 HTML_IMAGE_ONLY_28 2477 0.44 0.30 0.46 196 TM2_M_BODY_EMPTY 2442 0.53 1.03 0.46 197 HTML_IMAGE_ONLY_32 2385 0.98 4.34 0.44 198 XMSubMetaSxObfu_04 2351 0.41 0.25 0.44 199 RELAYCOUNTRY_FR 2344 0.83 3.30 0.44 200 XM_B_COPY_HTML 2326 0.46 0.65 0.43 ----------------------------------------------------------------------