Email: 447829 Autolearn: 0 AvgScore: 2.88 AvgScanTime: 1.29 sec Spam: 127889 Autolearn: 0 AvgScore: 14.59 AvgScanTime: 1.45 sec Ham: 319940 Autolearn: 0 AvgScore: -1.80 AvgScanTime: 1.22 sec Time Spent Running SA: 159.99 hours Time Spent Processing Spam: 51.54 hours Time Spent Processing Ham: 108.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DKIM_SIGNED 106766 75.73 83.48 72.63 2 HTML_MESSAGE 106240 82.42 83.07 82.16 3 XM_DK_Pass 102952 73.77 80.50 71.08 4 RELAYCOUNTRY_US 97500 80.11 76.24 81.66 5 XMListUnsubscribeExists 92010 55.82 71.95 49.37 6 DKIM_VALID 91559 69.85 71.59 69.15 7 DCC_CHECK 89705 47.03 70.14 37.80 8 XM_B_Unicode 81809 66.01 63.97 66.82 9 XM_B_SpammyWords 72942 47.20 57.04 43.27 10 DKIM_VALID_AU 70031 54.10 54.76 53.84 11 BAYES_50 52814 50.70 41.30 54.46 12 XM_DK_Undo_02 51109 17.14 39.96 8.02 13 XM_B_Unicode3 47031 38.29 36.77 38.89 14 XM_B_SpammyWords2 41573 22.88 32.51 19.03 15 TR_XM_DKIM_Undo 39828 13.01 31.14 5.76 16 DCC_CHECK_NEGATIVE 38055 52.91 29.76 62.17 17 LOC_TINY_FONT_1 37803 24.33 29.56 22.24 18 BAYES_99 37597 12.75 29.40 6.10 19 MIME_HTML_ONLY 36848 24.39 28.81 22.62 20 XM_UncommonTLD01 35704 13.71 27.92 8.03 21 HTML_FONT_LOW_CONTRAST 34673 25.67 27.11 25.09 22 DKIM_VALID_EF 32779 25.41 25.63 25.32 23 T_KAM_HTML_FONT_INVALID 32592 18.63 25.48 15.88 24 FVGT_m_MULTI_ODD 31284 22.16 24.46 21.23 25 RCVD_IN_MSPIKE_H2 29777 23.11 23.28 23.04 26 BAYES_999 29356 10.08 22.95 4.94 27 TR_DCC_Bayes_99 29242 8.93 22.87 3.35 28 RELAYCOUNTRY_META 27901 9.75 21.82 4.93 29 XMSubLong 25841 19.72 20.21 19.53 30 T_TM2_M_HEADER_IN_MSG 22884 25.38 17.89 28.37 31 LOTS_OF_MONEY 22526 11.27 17.61 8.73 32 SpammyFromTLD_01 22323 8.64 17.45 5.11 33 UNTRUSTED_Relay 22247 6.28 17.40 1.83 34 XM_Body_Dirty_Words 22002 12.34 17.20 10.40 35 RCVD_IN_MSPIKE_WL 21845 25.05 17.08 28.23 36 BOTNET 21611 5.85 16.90 1.44 37 XMNumbers 20464 10.20 16.00 7.89 38 XM_SPF_SoftFail 18809 5.70 14.71 2.09 39 FSL_BULK_SIG 18048 9.15 14.11 7.16 40 XM_Multi_Part_URI 17342 11.57 13.56 10.77 41 SUBJ_ALL_CAPS 17156 8.08 13.41 5.95 42 TR_XM_PHPDW 17140 7.26 13.40 4.80 43 TR_XM_PHPForged 16893 7.17 13.21 4.76 44 TR_XM_FormFill2 16877 7.17 13.20 4.76 45 XM_H_PHPOS 16866 7.16 13.19 4.75 46 BOTNET_IPINHOSTNAME 16411 6.63 12.83 4.15 47 DKIM_INVALID 15207 5.88 11.89 3.48 48 MPART_ALT_DIFF 13486 8.62 10.55 7.85 49 TR_XM_SpammyWords2 13405 4.01 10.48 1.42 50 XMSexyCombo_05 12707 5.74 9.94 4.06 51 SpammyFromTLD_02 12566 2.97 9.83 0.23 52 UNPARSEABLE_RELAY 12492 8.26 9.77 7.65 53 TR_XM_UnparsRelay 12268 7.12 9.59 6.13 54 XM_B_SpammyWords3 12083 5.84 9.45 4.39 55 XM_B_Unsub 11933 10.28 9.33 10.66 56 RCVD_IN_MSPIKE_H3 11614 13.03 9.08 14.61 57 XM_Evil_Numbers_Gen 11340 8.63 8.87 8.53 58 TR_XM_SpammyWords4 11007 5.04 8.61 3.62 59 RCVD_IN_BL_SPAMCOP_NET 10601 2.96 8.29 0.84 60 MIME_HTML_MOSTLY 10556 4.16 8.25 2.53 61 XM_UB50 10198 3.12 7.97 1.17 62 HTML_IMAGE_RATIO_02 10030 7.35 7.84 7.15 63 BAYES_60 9702 8.51 7.59 8.88 64 BAYES_80 9470 5.10 7.40 4.18 65 T_REMOTE_IMAGE 9294 4.44 7.27 3.31 66 RCVD_IN_MSPIKE_H4 8974 9.92 7.02 11.08 67 KHOP_HELO_FCRDNS 8371 3.12 6.55 1.75 68 HTML_MIME_NO_HTML_TAG 8316 3.05 6.50 1.67 69 URI_NOVOWEL 8108 3.71 6.34 2.65 70 LotsOfNums_01 8072 7.74 6.31 8.31 71 RCVD_IN_MSPIKE_BL 7745 1.91 6.06 0.25 72 XM_SendGrid 7638 6.03 5.97 6.06 73 TR_XM_MSPIKECOMBO 7192 1.75 5.62 0.20 74 HTML_IMAGE_ONLY_08 7018 1.63 5.49 0.09 75 HTML_TAG_BALANCE_CENTER 6957 1.58 5.44 0.04 76 XM_H_Long_From01 6952 5.04 5.44 4.88 77 BAYES_40 6948 6.40 5.43 6.79 78 XMSubMetaSx_00 6942 3.77 5.43 3.11 79 BODY_URI_ONLY 6802 1.53 5.32 0.01 80 GOOG_STO_IMG_HTML 6721 1.50 5.26 0.00 81 JH_SPAMMY_HEADERS 6485 1.45 5.07 0.01 82 TR_XM_PhishingBody 6418 3.37 5.02 2.72 83 XM_B_SpammyTLD 6341 2.70 4.96 1.79 84 XM_B_Phish_Phrases 6306 3.65 4.93 3.13 85 RCVD_IN_RP_SAFE 6230 6.90 4.87 7.71 86 HTML_FONT_SIZE_LARGE 6034 1.44 4.72 0.13 87 TooManyTo_001 6003 6.89 4.69 7.77 88 MIXED_HREF_CASE 5695 1.27 4.45 0.00 89 MIXED_CENTER_CASE 5692 1.27 4.45 0.00 90 MIXED_IMG_CASE 5590 1.25 4.37 0.00 91 HTML_IMAGE_RATIO_04 5585 5.24 4.37 5.59 92 MIXED_AREA_CASE 5584 1.25 4.37 0.00 93 MIXED_FONT_CASE 5538 1.24 4.33 0.00 94 RCVD_IN_RP_CERTIFIED 5166 6.23 4.04 7.11 95 BAYES_95 5165 3.00 4.04 2.59 96 RELAYCOUNTRY_CA 5066 2.01 3.96 1.23 97 RELAYCOUNTRY_FR 4888 1.32 3.82 0.32 98 XMStrtUSub 4860 4.50 3.80 4.78 99 RCVD_IN_MSPIKE_L5 4789 1.09 3.74 0.03 100 RCVD_IN_RP_RNBL 4146 0.97 3.24 0.06 101 TM2_M_VERY_LONG_WORD 4099 1.85 3.21 1.31 102 MIXED_CTYPE_CASE 3985 0.89 3.12 0.00 103 TR_XM_SpammyWords3 3891 0.99 3.04 0.17 104 BAYES_20 3834 3.68 3.00 3.95 105 HTML_IMAGE_RATIO_06 3811 3.24 2.98 3.34 106 MIME_HTML_ONLY_MULTI 3748 5.04 2.93 5.89 107 TM2_M_URI_OPT_OUT 3709 4.88 2.90 5.67 108 XM_UB99 3705 0.83 2.90 0.01 109 TR_XM_DK_SendGrid 3605 3.58 2.82 3.88 110 XMSlimDrugH 3591 0.97 2.81 0.23 111 TR_XM_SpammyWords5 3401 1.85 2.66 1.52 112 MIME_QP_LONG_LINE 3378 4.29 2.64 4.95 113 RCVD_IN_PSBL 3315 0.79 2.59 0.07 114 PDS_OTHER_BAD_TLD 3312 0.97 2.59 0.32 115 DIET_1 3303 1.01 2.58 0.39 116 XM_UB60 3267 0.84 2.55 0.16 117 XM_B_Phish66 3263 1.83 2.55 1.55 118 XM_DIRTYINTL 3258 0.96 2.55 0.33 119 RELAYCOUNTRY_DE 3197 1.45 2.50 1.03 120 FROM_EXCESS_BASE64 3177 2.49 2.48 2.50 121 BOTNET_NORDNS 3175 0.72 2.48 0.01 122 T_XMDrugObfuBody_08 3078 1.72 2.41 1.45 123 URIBL_DBL_SPAM 3068 0.69 2.40 0.00 124 XM_OfRef6 2992 1.25 2.34 0.82 125 USER_IN_DEF_DKIM_WL 2962 9.30 2.32 12.09 126 XMSubMetaI_00 2902 1.45 2.27 1.12 127 XMBrknScrpt_02 2721 1.32 2.13 1.00 128 XM_UB80 2694 0.64 2.11 0.06 129 XMDiploma_00 2688 1.57 2.10 1.36 130 URIBL_DBL_ABUSE_SPAM 2661 0.62 2.08 0.04 131 T_XMDrugObfuBody_14 2640 2.17 2.06 2.21 132 XMBody_17 2605 0.95 2.04 0.52 133 HTML_FONT_SIZE_HUGE 2596 0.64 2.03 0.08 134 T_TooManySym_01 2591 4.47 2.03 5.45 135 RCVD_IN_IADB_LISTED 2486 3.91 1.94 4.70 136 XM_UB999 2439 0.54 1.91 0.00 137 URI_GOOG_STO_SPAMMY 2437 0.54 1.91 0.00 138 XM_JunkDunk 2386 0.53 1.87 0.00 139 XM_DK_Undo_01 2384 1.55 1.86 1.43 140 T_XMHurry_00 2337 0.86 1.83 0.48 141 XM_CamelCaseFrm001 2300 1.77 1.80 1.75 142 HTML_IMAGE_RATIO_08 2291 1.82 1.79 1.84 143 XM_URI_RBL 2224 0.57 1.74 0.11 144 RCVD_IN_IADB_SPF 2190 3.41 1.71 4.09 145 LONG_JUNK_URI 2155 0.54 1.69 0.08 146 MAILING_LIST_MULTI 2120 2.71 1.66 3.13 147 URI_HEX 2080 1.63 1.63 1.63 148 RCVD_IN_IADB_DK 2040 2.98 1.60 3.54 149 URI_NO_WWW_INFO_CGI 2005 0.46 1.57 0.01 150 RCVD_IN_IADB_SENDERID 2002 3.06 1.57 3.65 151 XM_B_SpammyWords4 1990 0.75 1.56 0.42 152 RELAYCOUNTRY_IN 1971 0.52 1.54 0.11 153 T_FILL_THIS_FORM_SHORT 1954 1.02 1.53 0.82 154 TR_Mismatch_TLD_02 1855 0.47 1.45 0.08 155 TR_XM_SB_Phish 1848 2.71 1.45 3.22 156 PDS_FROM_2_EMAILS 1803 0.40 1.41 0.00 157 XMSubPhish11 1796 2.69 1.40 3.20 158 FROM_2_EMAILS_SHORT 1769 0.40 1.38 0.00 159 URIBL_BLACK 1749 0.42 1.37 0.04 160 XM_B_Unsub2 1741 1.01 1.36 0.87 161 ALL_TRUSTED 1727 11.07 1.35 14.95 162 XMBdyGiftCard01 1722 0.92 1.35 0.75 163 RELAYCOUNTRY_GB 1706 1.16 1.33 1.08 164 URIBL_SBL_A 1667 0.52 1.30 0.21 165 THIS_AD 1612 0.65 1.26 0.41 166 DATE_IN_PAST_03_06 1596 0.61 1.25 0.36 167 RCVD_IN_MSPIKE_L4 1587 0.43 1.24 0.11 168 TR_LOTS_OF_MONEY2 1582 0.45 1.24 0.13 169 T_MONEY_PERCENT 1582 0.45 1.24 0.13 170 TR_XM_BayesRelay 1549 0.35 1.21 0.01 171 TR_LOTS_OF_MONEY3 1538 0.42 1.20 0.11 172 XM_UB95 1538 0.36 1.20 0.03 173 XMGenDplmaNmb 1505 0.94 1.18 0.85 174 XM_B_COVIDMETA 1495 0.86 1.17 0.73 175 URI_TRY_3LD 1494 1.01 1.17 0.95 176 URI_PHP_REDIR 1486 0.33 1.16 0.00 177 XM_RXBody 1471 0.63 1.15 0.42 178 XMSolicitRefs_0 1432 0.52 1.12 0.28 179 XMStockSpam_06 1426 1.16 1.12 1.18 180 T_PDS_TO_EQ_FROM_NAME 1417 0.32 1.11 0.00 181 BAYES_05 1409 1.91 1.10 2.23 182 XM_TLDProd2 1401 0.47 1.10 0.22 183 T_HTML_TAG_BALANCE_CENTER 1373 0.32 1.07 0.02 184 XM_H_PHPMailer 1370 0.90 1.07 0.83 185 XMSexyCombo_01 1369 0.57 1.07 0.36 186 SHOPIFY_IMG_NOT_RCVD_SFY 1367 0.52 1.07 0.29 187 TR_XM_COVIDMETA4 1366 0.53 1.07 0.32 188 XM_H_Undi_Recip 1334 0.43 1.04 0.19 189 TR_XM_INV_DKIM 1324 0.33 1.04 0.05 190 TR_XM_COVIDMETA1 1318 0.40 1.03 0.15 191 HTTPS_HTTP_MISMATCH 1287 0.81 1.01 0.73 192 T_XMDrugObfuBody_00 1285 0.79 1.00 0.71 193 XM_H_Long_From02 1285 1.10 1.00 1.13 194 RELAYCOUNTRY_PL 1282 0.31 1.00 0.04 195 NO_FM_NAME_IP_HOSTN 1272 0.29 0.99 0.00 196 RCVD_IN_MSPIKE_H5 1257 2.09 0.98 2.54 197 XMPhish30 1206 0.60 0.94 0.46 198 XM_Body_Dirty_Words_01 1195 0.36 0.93 0.13 199 FROM_SUSPICIOUS_NTLD 1191 0.30 0.93 0.04 200 TR_XM_FormFill 1191 0.30 0.93 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 262857 82.42 83.07 82.16 2 RELAYCOUNTRY_US 261267 80.11 76.24 81.66 3 DKIM_SIGNED 232358 75.73 83.48 72.63 4 XM_DK_Pass 227417 73.77 80.50 71.08 5 DKIM_VALID 221229 69.85 71.59 69.15 6 XM_B_Unicode 213799 66.01 63.97 66.82 7 DCC_CHECK_NEGATIVE 198898 52.91 29.76 62.17 8 BAYES_50 174242 50.70 41.30 54.46 9 DKIM_VALID_AU 172241 54.10 54.76 53.84 10 XMListUnsubscribeExists 157967 55.82 71.95 49.37 11 XM_B_SpammyWords 138446 47.20 57.04 43.27 12 XM_B_Unicode3 124435 38.29 36.77 38.89 13 DCC_CHECK 120922 47.03 70.14 37.80 14 T_TM2_M_HEADER_IN_MSG 90763 25.38 17.89 28.37 15 RCVD_IN_MSPIKE_WL 90323 25.05 17.08 28.23 16 DKIM_VALID_EF 81016 25.41 25.63 25.32 17 HTML_FONT_LOW_CONTRAST 80284 25.67 27.11 25.09 18 RCVD_IN_MSPIKE_H2 73700 23.11 23.28 23.04 19 MIME_HTML_ONLY 72362 24.39 28.81 22.62 20 LOC_TINY_FONT_1 71166 24.33 29.56 22.24 21 FVGT_m_MULTI_ODD 67935 22.16 24.46 21.23 22 XMSubLong 62489 19.72 20.21 19.53 23 XM_B_SpammyWords2 60878 22.88 32.51 19.03 24 T_KAM_HTML_FONT_INVALID 50820 18.63 25.48 15.88 25 ALL_TRUSTED 47844 11.07 1.35 14.95 26 RCVD_IN_MSPIKE_H3 46739 13.03 9.08 14.61 27 USER_IN_DEF_DKIM_WL 38679 9.30 2.32 12.09 28 RCVD_IN_MSPIKE_H4 35460 9.92 7.02 11.08 29 BAYES_00 34635 7.95 0.74 10.83 30 XM_Multi_Part_URI 34470 11.57 13.56 10.77 31 XM_B_Unsub 34099 10.28 9.33 10.66 32 XM_Body_Dirty_Words 33280 12.34 17.20 10.40 33 BAYES_60 28412 8.51 7.59 8.88 34 LOTS_OF_MONEY 27922 11.27 17.61 8.73 35 XM_Evil_Numbers_Gen 27296 8.63 8.87 8.53 36 LotsOfNums_01 26576 7.74 6.31 8.31 37 XM_DKIMWhitelistDomains 25934 5.79 0.01 8.11 38 XM_UncommonTLD01 25681 13.71 27.92 8.03 39 XM_DK_Undo_02 25650 17.14 39.96 8.02 40 XMNumbers 25228 10.20 16.00 7.89 41 MPART_ALT_DIFF 25106 8.62 10.55 7.85 42 TooManyTo_001 24864 6.89 4.69 7.77 43 RCVD_IN_RP_SAFE 24658 6.90 4.87 7.71 44 UNPARSEABLE_RELAY 24489 8.26 9.77 7.65 45 FSL_BULK_SIG 22922 9.15 14.11 7.16 46 HTML_IMAGE_RATIO_02 22880 7.35 7.84 7.15 47 RCVD_IN_RP_CERTIFIED 22736 6.23 4.04 7.11 48 XM_H_Trusted_IP 22314 4.98 0.00 6.97 49 BAYES_40 21714 6.40 5.43 6.79 50 TR_XM_UnparsRelay 19608 7.12 9.59 6.13 51 BAYES_99 19519 12.75 29.40 6.10 52 XM_SendGrid 19378 6.03 5.97 6.06 53 SUBJ_ALL_CAPS 19043 8.08 13.41 5.95 54 TR_XM_DK_Bayes 18879 4.38 0.58 5.90 55 MIME_HTML_ONLY_MULTI 18840 5.04 2.93 5.89 56 TR_XM_DKIM_Undo 18419 13.01 31.14 5.76 57 TM2_M_URI_OPT_OUT 18150 4.88 2.90 5.67 58 TR_XM_DK_Bayes1 18131 4.21 0.57 5.67 59 HTML_IMAGE_RATIO_04 17897 5.24 4.37 5.59 60 T_TooManySym_01 17448 4.47 2.03 5.45 61 SpammyFromTLD_01 16361 8.64 17.45 5.11 62 TR_XM_DK_Bayes2 16012 3.70 0.43 5.00 63 MIME_QP_LONG_LINE 15846 4.29 2.64 4.95 64 BAYES_999 15802 10.08 22.95 4.94 65 RELAYCOUNTRY_META 15764 9.75 21.82 4.93 66 XM_H_Long_From01 15613 5.04 5.44 4.88 67 TR_XM_PHPDW 15363 7.26 13.40 4.80 68 XMStrtUSub 15281 4.50 3.80 4.78 69 TR_XM_FormFill2 15235 7.17 13.20 4.76 70 TR_XM_PHPForged 15228 7.17 13.21 4.76 71 XM_H_PHPOS 15198 7.16 13.19 4.75 72 RCVD_IN_IADB_LISTED 15044 3.91 1.94 4.70 73 IN_ZIMBRA_NJ_WHITELIST 14779 3.32 0.07 4.62 74 XM_B_SpammyWords3 14058 5.84 9.45 4.39 75 BAYES_80 13370 5.10 7.40 4.18 76 BOTNET_IPINHOSTNAME 13286 6.63 12.83 4.15 77 RCVD_IN_IADB_SPF 13099 3.41 1.71 4.09 78 XMSexyCombo_05 12990 5.74 9.94 4.06 79 BAYES_20 12633 3.68 3.00 3.95 80 TR_XM_DK_SendGrid 12424 3.58 2.82 3.88 81 XM_PDF 11869 2.83 0.63 3.71 82 RCVD_IN_IADB_SENDERID 11681 3.06 1.57 3.65 83 TR_XM_SpammyWords4 11567 5.04 8.61 3.62 84 RCVD_IN_IADB_DK 11310 2.98 1.60 3.54 85 DKIM_INVALID 11129 5.88 11.89 3.48 86 TR_DCC_Bayes_99 10727 8.93 22.87 3.35 87 HTML_IMAGE_RATIO_06 10701 3.24 2.98 3.34 88 T_REMOTE_IMAGE 10585 4.44 7.27 3.31 89 TR_XM_SB_Phish 10310 2.71 1.45 3.22 90 XMSubPhish11 10249 2.69 1.40 3.20 91 XM_B_Phish_Phrases 10027 3.65 4.93 3.13 92 MAILING_LIST_MULTI 10013 2.71 1.66 3.13 93 XMSubMetaSx_00 9941 3.77 5.43 3.11 94 T_TooManySym_02 9418 2.28 0.62 2.94 95 RCVD_IN_IADB_VOUCHED 9256 2.32 0.87 2.89 96 ANY_BOUNCE_MESSAGE 8896 2.21 0.80 2.78 97 BOUNCE_MESSAGE 8896 2.21 0.80 2.78 98 TR_XM_PhishingBody 8691 3.37 5.02 2.72 99 URI_NOVOWEL 8488 3.71 6.34 2.65 100 BAYES_95 8284 3.00 4.04 2.59 101 RCVD_IN_MSPIKE_H5 8124 2.09 0.98 2.54 102 MIME_HTML_MOSTLY 8094 4.16 8.25 2.53 103 FROM_EXCESS_BASE64 7983 2.49 2.48 2.50 104 BAYES_05 7125 1.91 1.10 2.23 105 T_XMDrugObfuBody_14 7081 2.17 2.06 2.21 106 INVALID_MSGID 7001 1.63 0.22 2.19 107 TooManyTo_002 6738 1.66 0.55 2.11 108 XM_SPF_SoftFail 6699 5.70 14.71 2.09 109 XMSubNoVowel 6421 1.60 0.59 2.01 110 TVD_RCVD_IP 6125 1.52 0.54 1.91 111 TO_MALFORMED 6097 1.37 0.02 1.91 112 IN_HORDE_ADDRESS_BOOK 6036 1.43 0.29 1.89 113 RCVD_IN_IADB_OPTIN 6024 1.51 0.58 1.88 114 HTML_IMAGE_RATIO_08 5878 1.82 1.79 1.84 115 UNTRUSTED_Relay 5870 6.28 17.40 1.83 116 XM_B_SpammyTLD 5731 2.70 4.96 1.79 117 XM_CamelCaseFrm001 5606 1.77 1.80 1.75 118 KHOP_HELO_FCRDNS 5587 3.12 6.55 1.75 119 HTML_MIME_NO_HTML_TAG 5350 3.05 6.50 1.67 120 HELO_NODOT 5310 1.35 0.56 1.66 121 HELO_NO_DOMAIN 5226 1.32 0.55 1.63 122 URI_HEX 5222 1.63 1.63 1.63 123 XM_B_Phish66 4954 1.83 2.55 1.55 124 TR_Symld_Words 4943 1.35 0.88 1.54 125 TR_XM_SpammyWords5 4864 1.85 2.66 1.52 126 T_XMDrugObfuBody_08 4639 1.72 2.41 1.45 127 BOTNET 4599 5.85 16.90 1.44 128 TooManyTo_003 4590 1.14 0.41 1.43 129 XM_DK_Undo_01 4561 1.55 1.86 1.43 130 XM_E_Blogspot 4541 1.04 0.09 1.42 131 TR_XM_SpammyWords2 4538 4.01 10.48 1.42 132 XMDiploma_00 4349 1.57 2.10 1.36 133 TM2_M_VERY_LONG_WORD 4177 1.85 3.21 1.31 134 RELAYCOUNTRY_CA 3941 2.01 3.96 1.23 135 XM_GoogleGroups 3908 1.01 0.48 1.22 136 XMStockSpam_06 3786 1.16 1.12 1.18 137 XM_UB50 3754 3.12 7.97 1.17 138 XM_H_Long_From02 3631 1.10 1.00 1.13 139 XMSubMetaI_00 3582 1.45 2.27 1.12 140 XMGappySubj_01 3574 0.84 0.16 1.12 141 HTML_FONT_FACE_BAD 3487 0.92 0.48 1.09 142 RELAYCOUNTRY_GB 3470 1.16 1.33 1.08 143 XMCapTrack 3423 0.86 0.32 1.07 144 TooManyTo_004 3387 0.86 0.35 1.06 145 DKIM_ADSP_CUSTOM_MED 3305 0.96 0.77 1.03 146 RELAYCOUNTRY_DE 3287 1.45 2.50 1.03 147 XMBrknScrpt_02 3196 1.32 2.13 1.00 148 XM_ProductURIs 3052 0.91 0.79 0.95 149 URI_TRY_3LD 3027 1.01 1.17 0.95 150 XMBSHREFv2 3018 0.75 0.28 0.94 151 T_TooManySym_03 3018 0.71 0.14 0.94 152 XMBody_95 2888 0.68 0.11 0.90 153 XMHTML_After_End 2809 0.89 0.92 0.88 154 XM_B_Unsub2 2781 1.01 1.36 0.87 155 TooManyTo_005 2709 0.69 0.31 0.85 156 XMGenDplmaNmb 2708 0.94 1.18 0.85 157 RCVD_IN_BL_SPAMCOP_NET 2674 2.96 8.29 0.84 158 XM_H_PHPMailer 2645 0.90 1.07 0.83 159 T_FILL_THIS_FORM_SHORT 2616 1.02 1.53 0.82 160 XM_OfRef6 2608 1.25 2.34 0.82 161 MSGID_NOFQDN1 2453 0.55 0.02 0.77 162 XMNoVowels 2446 0.77 0.79 0.76 163 XMBdyGiftCard01 2384 0.92 1.35 0.75 164 XM_B_COVIDMETA 2348 0.86 1.17 0.73 165 HTTPS_HTTP_MISMATCH 2323 0.81 1.01 0.73 166 T_XMDrugObfuBody_00 2272 0.79 1.00 0.71 167 XM_B_REG_HTML 2229 0.63 0.45 0.70 168 NML_ADSP_CUSTOM_MED 2125 0.63 0.54 0.66 169 XM_B_COPY_HTML 2106 0.64 0.60 0.66 170 MSGID_FROM_MTA_HEADER 2013 0.51 0.22 0.63 171 TR_MetaPhish_Combo_01 1968 0.57 0.45 0.62 172 HTML_IMAGE_ONLY_20 1877 0.63 0.72 0.59 173 RCVD_IN_SORBS_DUL 1850 0.49 0.28 0.58 174 T_MANY_PILL_PRICE 1748 0.39 0.00 0.55 175 FORGED_GMAIL_RCVD 1727 0.57 0.66 0.54 176 TVD_SPACE_RATIO 1696 0.40 0.09 0.53 177 XM_ShortIntro_01 1692 0.51 0.46 0.53 178 XMBody_17 1654 0.95 2.04 0.52 179 TR_MSPIKEBAYES00 1616 0.36 0.01 0.51 180 USER_IN_WELCOMELIST 1609 0.36 0.00 0.50 181 USER_IN_WHITELIST 1609 0.36 0.00 0.50 182 RDNS_DYNAMIC 1543 0.58 0.84 0.48 183 T_XMHurry_00 1530 0.86 1.83 0.48 184 XMHTMLBadTable_001 1519 0.54 0.70 0.47 185 T_OBFU_PDF_ATTACH 1517 0.38 0.13 0.47 186 NICE_REPLY_A 1486 0.34 0.02 0.46 187 XMPhish30 1468 0.60 0.94 0.46 188 MISSING_HEADERS 1424 0.52 0.70 0.45 189 TM2_M_BODY_EMPTY 1411 0.34 0.08 0.44 190 XMLngstWrd_00 1388 0.40 0.33 0.43 191 XM_shorewaves_Whitelist 1372 0.31 0.00 0.43 192 TO_NO_BRKTS_HTML_ONLY 1361 0.34 0.14 0.43 193 XM_B_SpammyWords4 1347 0.75 1.56 0.42 194 MPART_ALT_DIFF_COUNT 1346 0.52 0.77 0.42 195 XM_RXBody 1344 0.63 1.15 0.42 196 XMPhish14 1340 0.46 0.55 0.42 197 THIS_AD 1314 0.65 1.26 0.41 198 HTML_IMAGE_ONLY_32 1313 0.34 0.17 0.41 199 XM_SPF_Unknown 1278 0.48 0.69 0.40 200 HTML_TAG_BALANCE_BODY 1269 0.47 0.65 0.40 ----------------------------------------------------------------------