Email: 542200 Autolearn: 0 AvgScore: 1.11 AvgScanTime: 1.39 sec Spam: 129481 Autolearn: 0 AvgScore: 15.13 AvgScanTime: 1.97 sec Ham: 412719 Autolearn: 0 AvgScore: -3.29 AvgScanTime: 1.21 sec Time Spent Running SA: 209.12 hours Time Spent Processing Spam: 70.72 hours Time Spent Processing Ham: 138.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122617 90.00 94.70 88.52 2 DKIM_SIGNED 104771 66.67 80.92 62.19 3 DCC_CHECK 102734 44.35 79.34 33.38 4 XM_DK_Pass 99022 64.59 76.48 60.87 5 DKIM_VALID 95889 62.49 74.06 58.86 6 RELAYCOUNTRY_US 95461 79.58 73.73 81.41 7 XM_B_Unicode 93800 72.83 72.44 72.95 8 XMListUnsubscribeExists 81698 44.87 63.10 39.15 9 XM_B_SpammyWords 80896 47.14 62.48 42.33 10 DKIM_VALID_AU 70872 46.36 54.74 43.74 11 XM_DK_Undo_02 52789 14.61 40.77 6.40 12 BAYES_50 52604 49.50 40.63 52.28 13 XM_B_Unicode3 49757 42.20 38.43 43.39 14 XM_B_SpammyWords2 46280 20.37 35.74 15.55 15 LOC_TINY_FONT_1 44312 22.48 34.22 18.79 16 MIME_HTML_ONLY 42403 25.36 32.75 23.04 17 BAYES_99 41349 11.12 31.93 4.59 18 HTML_FONT_LOW_CONTRAST 40043 25.19 30.93 23.39 19 T_KAM_HTML_FONT_INVALID 39359 18.59 30.40 14.88 20 DKIM_VALID_EF 39020 25.25 30.14 23.71 21 TR_XM_DKIM_Undo 38735 10.85 29.92 4.87 22 RCVD_IN_MSPIKE_H2 34997 22.86 27.03 21.55 23 FVGT_m_MULTI_ODD 34919 21.56 26.97 19.87 24 XMSubLong 32921 22.10 25.43 21.06 25 TR_DCC_Bayes_99 31929 7.51 24.66 2.13 26 BAYES_999 31251 8.56 24.14 3.67 27 RELAYCOUNTRY_META 31141 8.90 24.05 4.14 28 T_TM2_M_HEADER_IN_MSG 27329 26.19 21.11 27.79 29 XM_Body_Dirty_Words 27258 12.57 21.05 9.91 30 DCC_CHECK_NEGATIVE 26680 55.61 20.61 66.59 31 RCVD_IN_MSPIKE_WL 24502 23.41 18.92 24.82 32 UNTRUSTED_Relay 23754 5.59 18.35 1.59 33 FSL_BULK_SIG 23561 9.81 18.20 7.18 34 XM_UncommonTLD01 23399 6.76 18.07 3.21 35 BOTNET 21356 5.16 16.49 1.60 36 XM_B_Unsub 19376 10.07 14.96 8.54 37 XM_Multi_Part_URI 19069 10.52 14.73 9.20 38 BOTNET_IPINHOSTNAME 18455 6.34 14.25 3.86 39 LOTS_OF_MONEY 18266 7.85 14.11 5.89 40 XMSexyCombo_05 15193 5.27 11.73 3.24 41 XM_B_SpammyWords3 15025 5.38 11.60 3.43 42 TR_XM_SpammyWords4 14974 5.51 11.56 3.61 43 SpammyFromTLD_02 14653 2.95 11.32 0.32 44 TR_XM_SpammyWords2 13482 3.15 10.41 0.87 45 UNPARSEABLE_RELAY 13386 7.52 10.34 6.63 46 TR_XM_UnparsRelay 13112 6.21 10.13 4.98 47 RCVD_IN_MSPIKE_H3 12974 12.58 10.02 13.39 48 T_REMOTE_IMAGE 12962 4.97 10.01 3.38 49 MPART_ALT_DIFF 12883 10.20 9.95 10.28 50 RCVD_IN_BL_SPAMCOP_NET 11872 2.64 9.17 0.59 51 BAYES_80 11352 4.79 8.77 3.54 52 HTML_MIME_NO_HTML_TAG 11166 3.76 8.62 2.23 53 XM_Evil_Numbers_Gen 10503 8.67 8.11 8.85 54 BAYES_60 10450 7.75 8.07 7.65 55 RCVD_IN_MSPIKE_H4 10427 8.90 8.05 9.17 56 KHOP_HELO_FCRDNS 10094 2.99 7.80 1.49 57 XMSubMetaSx_00 10027 4.15 7.74 3.02 58 HTML_IMAGE_ONLY_08 9918 1.92 7.66 0.12 59 T_HTML_TAG_BALANCE_CENTER 9735 1.88 7.52 0.11 60 XM_B_SpammyTLD 9388 2.97 7.25 1.63 61 MIME_HTML_MOSTLY 9013 3.35 6.96 2.22 62 HTML_IMAGE_RATIO_02 8951 5.13 6.91 4.58 63 RCVD_IN_MSPIKE_BL 8882 1.89 6.86 0.33 64 DKIM_INVALID 8882 4.18 6.86 3.33 65 LotsOfNums_01 8861 7.69 6.84 7.95 66 XM_SendGrid 8766 5.85 6.77 5.56 67 XM_UB50 8753 2.43 6.76 1.07 68 XMNumbers 8611 3.90 6.65 3.04 69 TR_XM_MSPIKECOMBO 8582 1.82 6.63 0.32 70 XM_B_Phish_Phrases 8442 3.92 6.52 3.10 71 URI_NOVOWEL 8297 3.28 6.41 2.30 72 TR_XM_PhishingBody 8097 3.84 6.25 3.08 73 BODY_URI_ONLY 7901 1.47 6.10 0.01 74 MIXED_CENTER_CASE 7499 1.38 5.79 0.00 75 MIXED_HREF_CASE 7487 1.38 5.78 0.00 76 MIXED_IMG_CASE 7483 1.38 5.78 0.00 77 MIXED_AREA_CASE 7480 1.38 5.78 0.00 78 BAYES_95 7241 3.02 5.59 2.21 79 XM_H_Long_From01 7120 4.64 5.50 4.37 80 MIXED_FONT_CASE 6951 1.28 5.37 0.00 81 RCVD_IN_MSPIKE_L5 6930 1.33 5.35 0.07 82 TooManyTo_001 6828 7.40 5.27 8.06 83 HTML_FONT_SIZE_LARGE 6614 1.27 5.11 0.07 84 URIBL_DBL_SPAM 6447 1.19 4.98 0.01 85 SpammyFromTLD_01 6316 1.77 4.88 0.80 86 HTML_IMAGE_RATIO_04 6211 14.41 4.80 17.43 87 RELAYCOUNTRY_CA 5961 1.86 4.60 1.00 88 XM_UB99 5848 1.08 4.52 0.00 89 XM_DIRTYINTL 5384 1.34 4.16 0.46 90 JH_SPAMMY_HEADERS 5301 0.98 4.09 0.00 91 TM2_M_URI_OPT_OUT 5173 3.06 4.00 2.77 92 HTML_IMAGE_RATIO_06 5053 4.82 3.90 5.11 93 XM_SPF_SoftFail 4949 2.20 3.82 1.68 94 URI_GOOG_STO_SPAMMY 4912 0.91 3.79 0.00 95 PDS_OTHER_BAD_TLD 4910 1.02 3.79 0.14 96 TR_XM_SpammyWords3 4684 1.06 3.62 0.26 97 TR_XM_DK_SendGrid 4509 3.60 3.48 3.64 98 XM_B_Phish66 4470 2.25 3.45 1.87 99 BOTNET_NORDNS 4466 0.83 3.45 0.01 100 GOOG_STO_IMG_HTML 4423 0.82 3.42 0.00 101 TR_XM_SpammyWords5 4393 1.88 3.39 1.41 102 RELAYCOUNTRY_FR 4310 1.03 3.33 0.31 103 MIME_HTML_ONLY_MULTI 4186 7.31 3.23 8.59 104 T_XMDrugObfuBody_08 4144 1.85 3.20 1.42 105 MIME_QP_LONG_LINE 4077 4.48 3.15 4.89 106 RCVD_IN_RP_SAFE 3970 5.29 3.07 5.99 107 T_TooManySym_01 3918 4.41 3.03 4.84 108 XMStrtUSub 3891 8.89 3.01 10.74 109 XM_OfRef6 3852 1.32 2.97 0.80 110 XM_UB999 3742 0.69 2.89 0.00 111 URI_PHP_REDIR 3618 0.67 2.79 0.01 112 RCVD_IN_PSBL 3495 0.73 2.70 0.11 113 XM_B_COVIDMETA 3477 1.30 2.69 0.86 114 HTML_IMAGE_RATIO_08 3405 2.04 2.63 1.86 115 XM_UB60 3389 0.71 2.62 0.12 116 TR_Mismatch_TLD_02 3369 0.68 2.60 0.07 117 TR_XM_SB_Phish 3283 2.25 2.54 2.16 118 DIET_1 3245 0.83 2.51 0.30 119 XM_B_Unsub2 3209 1.56 2.48 1.27 120 US_DOLLARS_3 3190 1.10 2.46 0.67 121 T_XMDrugObfuBody_14 3161 2.08 2.44 1.97 122 TM2_M_VERY_LONG_WORD 3151 1.43 2.43 1.11 123 HTML_FONT_SIZE_HUGE 3117 0.66 2.41 0.11 124 XMSubPhish11 3049 2.17 2.35 2.11 125 RCVD_IN_RP_CERTIFIED 3016 4.65 2.33 5.38 126 XM_DK_Undo_01 2973 1.72 2.30 1.54 127 ALL_TRUSTED 2958 12.41 2.28 15.59 128 RCVD_IN_IADB_LISTED 2904 4.10 2.24 4.68 129 XMDiploma_00 2840 1.42 2.19 1.17 130 XMSexyCombo_01 2803 0.79 2.16 0.36 131 BAYES_40 2782 5.04 2.15 5.95 132 TR_Symld_Words 2631 1.69 2.03 1.58 133 URI_HEX 2630 1.45 2.03 1.27 134 XM_UB80 2614 0.50 2.02 0.03 135 XM_URI_RBL 2565 0.56 1.98 0.11 136 XM_CamelCaseFrm001 2560 1.62 1.98 1.51 137 XMNoVowels 2558 1.05 1.98 0.76 138 TR_XM_COVIDMETA4 2517 0.75 1.94 0.37 139 RCVD_IN_IADB_SPF 2456 3.58 1.90 4.11 140 XM_JunkDunk 2381 0.44 1.84 0.00 141 SUBJ_ALL_CAPS 2356 1.46 1.82 1.35 142 RCVD_IN_IADB_DK 2316 3.14 1.79 3.56 143 RCVD_IN_IADB_SENDERID 2303 3.24 1.78 3.69 144 RELAYCOUNTRY_IN 2260 0.52 1.75 0.14 145 XM_UB95 2234 0.43 1.73 0.02 146 XM_B_SpammyWords4 2222 0.64 1.72 0.30 147 TR_XM_PHPDW 2220 0.61 1.71 0.26 148 XMBody_17 2214 0.74 1.71 0.43 149 RELAYCOUNTRY_RU 2125 0.41 1.64 0.03 150 XMStockSpam_06 2082 1.16 1.61 1.02 151 MAILING_LIST_MULTI 2049 2.36 1.58 2.61 152 RELAYCOUNTRY_NL 2030 0.50 1.57 0.17 153 FROM_EXCESS_BASE64 2008 1.98 1.55 2.12 154 T_XMHurry_00 1991 0.66 1.54 0.39 155 DKIM_ADSP_NXDOMAIN 1987 0.54 1.53 0.23 156 URIBL_BLACK 1982 0.38 1.53 0.02 157 RCVD_IN_RP_RNBL 1976 0.42 1.53 0.07 158 XMBrknScrpt_02 1949 0.96 1.51 0.79 159 TR_XM_PHPForged 1941 0.53 1.50 0.23 160 TR_XM_FormFill2 1940 0.53 1.50 0.22 161 XM_H_PHPOS 1909 0.52 1.47 0.22 162 HTML_IMAGE_ONLY_20 1874 0.91 1.45 0.74 163 TR_XM_COVIDMETA1 1869 0.59 1.44 0.33 164 XM_H_Long_From02 1850 1.01 1.43 0.87 165 XMSlimDrugH 1849 0.50 1.43 0.21 166 XMMoneyMeta_00 1846 0.82 1.43 0.63 167 T_FILL_THIS_FORM_SHORT 1772 0.89 1.37 0.74 168 TR_XM_BayesRelay 1722 0.33 1.33 0.01 169 RELAYCOUNTRY_DE 1714 0.75 1.32 0.58 170 HTTPS_HTTP_MISMATCH 1697 0.79 1.31 0.62 171 HDRS_MISSP 1682 0.36 1.30 0.06 172 T_XMDrugObfuBody_00 1675 0.72 1.29 0.54 173 XMHTML_After_End 1669 1.23 1.29 1.21 174 HTML_SHORT_LINK_IMG_3 1658 0.35 1.28 0.06 175 TR_XM_INV_DKIM 1642 0.40 1.27 0.13 176 BAYES_20 1623 4.17 1.25 5.08 177 XMGenDplmaNmb 1602 0.87 1.24 0.75 178 XMSubMetaSxObfu_03 1600 0.57 1.24 0.37 179 RELAYCOUNTRY_GB 1547 0.91 1.19 0.82 180 XMPhish30 1522 0.67 1.18 0.51 181 RELAYCOUNTRY_PL 1505 0.29 1.16 0.02 182 URI_TRY_3LD 1496 0.99 1.16 0.94 183 RELAYCOUNTRY_AU 1453 0.50 1.12 0.30 184 USER_IN_DEF_DKIM_WL 1452 7.53 1.12 9.53 185 XM_H_Undi_Recip 1443 0.38 1.11 0.14 186 XM_Body_Dirty_Words_01 1437 0.36 1.11 0.13 187 T_Symld_Words_02 1404 0.60 1.08 0.45 188 RCVD_IN_IADB_VOUCHED 1392 2.43 1.08 2.86 189 XM_B_SEO 1389 0.35 1.07 0.13 190 XM_H_PHPMailer 1373 0.68 1.06 0.57 191 XMSubMetaI_00 1356 0.52 1.05 0.35 192 T_MONEY_PERCENT 1349 0.35 1.04 0.14 193 TR_LOTS_OF_MONEY2 1349 0.35 1.04 0.14 194 FROM_SUSPICIOUS_NTLD 1322 0.27 1.02 0.04 195 XMSexyCombo_04 1296 0.33 1.00 0.12 196 XM_PDF 1280 3.57 0.99 4.38 197 TR_XM_SEO4 1275 0.30 0.98 0.08 198 RELAYCOUNTRY_IR 1261 0.23 0.97 0.00 199 XMBdyGiftCard01 1260 0.67 0.97 0.58 200 TR_LOTS_OF_MONEY3 1251 0.33 0.97 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 365338 90.00 94.70 88.52 2 RELAYCOUNTRY_US 336002 79.58 73.73 81.41 3 XM_B_Unicode 301087 72.83 72.44 72.95 4 DCC_CHECK_NEGATIVE 274815 55.61 20.61 66.59 5 DKIM_SIGNED 256690 66.67 80.92 62.19 6 XM_DK_Pass 251207 64.59 76.48 60.87 7 DKIM_VALID 242933 62.49 74.06 58.86 8 BAYES_50 215776 49.50 40.63 52.28 9 DKIM_VALID_AU 180518 46.36 54.74 43.74 10 XM_B_Unicode3 179071 42.20 38.43 43.39 11 XM_B_SpammyWords 174691 47.14 62.48 42.33 12 XMListUnsubscribeExists 161575 44.87 63.10 39.15 13 DCC_CHECK 137753 44.35 79.34 33.38 14 T_TM2_M_HEADER_IN_MSG 114683 26.19 21.11 27.79 15 RCVD_IN_MSPIKE_WL 102452 23.41 18.92 24.82 16 DKIM_VALID_EF 97859 25.25 30.14 23.71 17 HTML_FONT_LOW_CONTRAST 96532 25.19 30.93 23.39 18 MIME_HTML_ONLY 95092 25.36 32.75 23.04 19 RCVD_IN_MSPIKE_H2 88961 22.86 27.03 21.55 20 XMSubLong 86904 22.10 25.43 21.06 21 FVGT_m_MULTI_ODD 82003 21.56 26.97 19.87 22 LOC_TINY_FONT_1 77566 22.48 34.22 18.79 23 HTML_IMAGE_RATIO_04 71941 14.41 4.80 17.43 24 XM_H_Trusted_IP 66335 12.23 0.00 16.07 25 ALL_TRUSTED 64334 12.41 2.28 15.59 26 XM_B_SpammyWords2 64173 20.37 35.74 15.55 27 BAYES_00 63389 11.91 0.93 15.36 28 HTML_FONT_FACE_BAD 63127 11.79 0.60 15.30 29 T_KAM_HTML_FONT_INVALID 61423 18.59 30.40 14.88 30 RCVD_IN_MSPIKE_H3 55251 12.58 10.02 13.39 31 XMStrtUSub 44333 8.89 3.01 10.74 32 MPART_ALT_DIFF 42407 10.20 9.95 10.28 33 XM_Body_Dirty_Words 40889 12.57 21.05 9.91 34 USER_IN_DEF_DKIM_WL 39351 7.53 1.12 9.53 35 XM_Multi_Part_URI 37984 10.52 14.73 9.20 36 RCVD_IN_MSPIKE_H4 37841 8.90 8.05 9.17 37 XM_Evil_Numbers_Gen 36509 8.67 8.11 8.85 38 MIME_HTML_ONLY_MULTI 35454 7.31 3.23 8.59 39 XM_B_Unsub 35233 10.07 14.96 8.54 40 TooManyTo_001 33282 7.40 5.27 8.06 41 LotsOfNums_01 32813 7.69 6.84 7.95 42 BAYES_60 31584 7.75 8.07 7.65 43 FSL_BULK_SIG 29647 9.81 18.20 7.18 44 UNPARSEABLE_RELAY 27377 7.52 10.34 6.63 45 XM_DK_Undo_02 26403 14.61 40.77 6.40 46 XM_DKIMWhitelistDomains 25900 4.78 0.02 6.28 47 TR_XM_DK_Bayes 25278 4.82 0.67 6.12 48 RCVD_IN_RP_SAFE 24711 5.29 3.07 5.99 49 BAYES_40 24560 5.04 2.15 5.95 50 TR_XM_DK_Bayes1 24466 4.67 0.65 5.93 51 LOTS_OF_MONEY 24312 7.85 14.11 5.89 52 XM_SendGrid 22942 5.85 6.77 5.56 53 RCVD_IN_RP_CERTIFIED 22200 4.65 2.33 5.38 54 HTML_IMAGE_RATIO_06 21096 4.82 3.90 5.11 55 TR_XM_DK_Bayes2 21041 4.01 0.53 5.10 56 BAYES_20 20960 4.17 1.25 5.08 57 XMSubNoVowel 20795 4.06 0.94 5.04 58 TR_XM_UnparsRelay 20535 6.21 10.13 4.98 59 MIME_QP_LONG_LINE 20187 4.48 3.15 4.89 60 TR_XM_DKIM_Undo 20103 10.85 29.92 4.87 61 T_TooManySym_01 19966 4.41 3.03 4.84 62 RCVD_IN_IADB_LISTED 19322 4.10 2.24 4.68 63 IN_ZIMBRA_NJ_WHITELIST 18969 3.52 0.08 4.60 64 BAYES_99 18938 11.12 31.93 4.59 65 HTML_IMAGE_RATIO_02 18887 5.13 6.91 4.58 66 XM_PDF 18067 3.57 0.99 4.38 67 XM_H_Long_From01 18023 4.64 5.50 4.37 68 RELAYCOUNTRY_META 17104 8.90 24.05 4.14 69 RCVD_IN_IADB_SPF 16981 3.58 1.90 4.11 70 BOTNET_IPINHOSTNAME 15918 6.34 14.25 3.86 71 RCVD_IN_IADB_SENDERID 15248 3.24 1.78 3.69 72 BAYES_999 15165 8.56 24.14 3.67 73 TR_XM_DK_SendGrid 15025 3.60 3.48 3.64 74 TR_XM_SpammyWords4 14911 5.51 11.56 3.61 75 RCVD_IN_IADB_DK 14690 3.14 1.79 3.56 76 BAYES_80 14623 4.79 8.77 3.54 77 ANY_BOUNCE_MESSAGE 14423 2.84 0.73 3.49 78 BOUNCE_MESSAGE 14416 2.83 0.72 3.49 79 XM_B_SpammyWords3 14170 5.38 11.60 3.43 80 T_REMOTE_IMAGE 13970 4.97 10.01 3.38 81 DKIM_INVALID 13757 4.18 6.86 3.33 82 BAYES_05 13753 2.70 0.68 3.33 83 XMSexyCombo_05 13354 5.27 11.73 3.24 84 XM_UncommonTLD01 13253 6.76 18.07 3.21 85 XM_B_Phish_Phrases 12814 3.92 6.52 3.10 86 TR_XM_PhishingBody 12701 3.84 6.25 3.08 87 XMNumbers 12533 3.90 6.65 3.04 88 XMSubMetaSx_00 12454 4.15 7.74 3.02 89 RCVD_IN_IADB_VOUCHED 11791 2.43 1.08 2.86 90 TM2_M_URI_OPT_OUT 11420 3.06 4.00 2.77 91 MAILING_LIST_MULTI 10767 2.36 1.58 2.61 92 T_TooManySym_02 10211 2.08 0.83 2.47 93 TooManyTo_002 9578 1.98 0.88 2.32 94 URI_NOVOWEL 9504 3.28 6.41 2.30 95 RCVD_IN_MSPIKE_H5 9360 1.93 0.85 2.27 96 HTML_MIME_NO_HTML_TAG 9197 3.76 8.62 2.23 97 MIME_HTML_MOSTLY 9158 3.35 6.96 2.22 98 BAYES_95 9133 3.02 5.59 2.21 99 TR_XM_SB_Phish 8934 2.25 2.54 2.16 100 TR_DCC_Bayes_99 8791 7.51 24.66 2.13 101 FROM_EXCESS_BASE64 8744 1.98 1.55 2.12 102 XMSubPhish11 8699 2.17 2.35 2.11 103 XMSubGarbage 8337 1.65 0.46 2.02 104 T_XMDrugObfuBody_14 8136 2.08 2.44 1.97 105 XMSubLongNoVowel 8081 1.58 0.37 1.96 106 XM_B_Phish66 7728 2.25 3.45 1.87 107 HTML_IMAGE_RATIO_08 7667 2.04 2.63 1.86 108 RCVD_IN_IADB_OPTIN 7606 1.55 0.62 1.84 109 HELO_NODOT 7531 1.54 0.65 1.82 110 HELO_NO_DOMAIN 7530 1.54 0.64 1.82 111 INVALID_MSGID 7086 1.36 0.24 1.72 112 IN_HORDE_ADDRESS_BOOK 7065 1.32 0.08 1.71 113 XM_SPF_SoftFail 6954 2.20 3.82 1.68 114 XM_B_SpammyTLD 6711 2.97 7.25 1.63 115 BOTNET 6598 5.16 16.49 1.60 116 UNTRUSTED_Relay 6571 5.59 18.35 1.59 117 TR_Symld_Words 6521 1.69 2.03 1.58 118 TO_MALFORMED 6347 1.18 0.05 1.54 119 XM_DK_Undo_01 6338 1.72 2.30 1.54 120 XM_CamelCaseFrm001 6236 1.62 1.98 1.51 121 KHOP_HELO_FCRDNS 6135 2.99 7.80 1.49 122 TooManyTo_003 6129 1.30 0.71 1.49 123 T_XMDrugObfuBody_08 5863 1.85 3.20 1.42 124 TR_XM_SpammyWords5 5806 1.88 3.39 1.41 125 SUBJ_ALL_CAPS 5566 1.46 1.82 1.35 126 TVD_RCVD_IP 5562 1.08 0.22 1.35 127 XMCapTrack 5244 1.08 0.47 1.27 128 URI_HEX 5229 1.45 2.03 1.27 129 XM_B_Unsub2 5229 1.56 2.48 1.27 130 XM_GoogleGroups 5175 1.10 0.61 1.25 131 XMHTML_After_End 5005 1.23 1.29 1.21 132 XM_E_Blogspot 4884 0.92 0.07 1.18 133 XMDiploma_00 4848 1.42 2.19 1.17 134 TM2_M_VERY_LONG_WORD 4600 1.43 2.43 1.11 135 XM_UB50 4422 2.43 6.76 1.07 136 TooManyTo_004 4353 0.94 0.58 1.05 137 XMGappySubj_01 4344 0.83 0.12 1.05 138 XM_ProductURIs 4273 0.97 0.76 1.04 139 XMStockSpam_06 4228 1.16 1.61 1.02 140 MSGID_NOFQDN1 4154 0.77 0.02 1.01 141 RELAYCOUNTRY_CA 4139 1.86 4.60 1.00 142 URI_TRY_3LD 3869 0.99 1.16 0.94 143 DKIM_ADSP_CUSTOM_MED 3645 0.85 0.75 0.88 144 XM_H_Long_From02 3609 1.01 1.43 0.87 145 TR_XM_SpammyWords2 3585 3.15 10.41 0.87 146 XM_B_COVIDMETA 3554 1.30 2.69 0.86 147 TooManyTo_005 3500 0.77 0.53 0.85 148 RELAYCOUNTRY_GB 3401 0.91 1.19 0.82 149 XMBSHREFv2 3326 0.71 0.39 0.81 150 XM_OfRef6 3309 1.32 2.97 0.80 151 SpammyFromTLD_01 3289 1.77 4.88 0.80 152 XMBrknScrpt_02 3269 0.96 1.51 0.79 153 T_TooManySym_03 3238 0.63 0.15 0.78 154 XMNoVowels 3154 1.05 1.98 0.76 155 XMGenDplmaNmb 3113 0.87 1.24 0.75 156 HTML_IMAGE_ONLY_20 3054 0.91 1.45 0.74 157 T_FILL_THIS_FORM_SHORT 3047 0.89 1.37 0.74 158 FROM_GOV_DKIM_AU 2850 0.61 0.34 0.69 159 US_DOLLARS_3 2763 1.10 2.46 0.67 160 TR_MetaPhish_Combo_01 2747 0.72 0.91 0.67 161 T_OBFU_PDF_ATTACH 2603 0.51 0.14 0.63 162 XMMoneyMeta_00 2586 0.82 1.43 0.63 163 HTTPS_HTTP_MISMATCH 2563 0.79 1.31 0.62 164 XMBody_95 2559 0.53 0.25 0.62 165 XM_SPF_Unknown 2516 0.65 0.78 0.61 166 NML_ADSP_CUSTOM_MED 2458 0.59 0.58 0.60 167 RCVD_IN_BL_SPAMCOP_NET 2431 2.64 9.17 0.59 168 RCVD_IN_SORBS_DUL 2415 0.50 0.25 0.59 169 XMBdyGiftCard01 2389 0.67 0.97 0.58 170 RELAYCOUNTRY_DE 2377 0.75 1.32 0.58 171 MISSING_HEADERS 2351 0.54 0.45 0.57 172 XM_H_PHPMailer 2336 0.68 1.06 0.57 173 SHORT_HELO_AND_INLINE_IMAGE 2263 0.44 0.08 0.55 174 T_XMDrugObfuBody_00 2238 0.72 1.29 0.54 175 XM_B_COPY_HTML 2190 0.57 0.70 0.53 176 XMLngstWrd_00 2137 0.50 0.44 0.52 177 TR_MSPIKEBAYES00 2131 0.40 0.01 0.52 178 XMPhish30 2090 0.67 1.18 0.51 179 XM_ShortIntro_01 2023 0.60 0.94 0.49 180 FORGED_GMAIL_RCVD 1990 0.51 0.61 0.48 181 TVD_SPACE_RATIO 1981 0.48 0.47 0.48 182 FROM_GOV_SPOOF 1933 0.42 0.26 0.47 183 XMLngstWrd_01 1896 0.44 0.38 0.46 184 XM_DIRTYINTL 1880 1.34 4.16 0.46 185 T_Symld_Words_02 1843 0.60 1.08 0.45 186 XMHTMLBadTable_001 1841 0.51 0.73 0.45 187 XMBody_17 1791 0.74 1.71 0.43 188 HTML_TAG_BALANCE_BODY 1764 0.54 0.91 0.43 189 TO_NO_BRKTS_HTML_ONLY 1761 0.53 0.85 0.43 190 HTML_IMAGE_ONLY_28 1728 0.40 0.32 0.42 191 XMPhish14 1722 0.50 0.76 0.42 192 TM2_M_BODY_EMPTY 1713 0.52 0.87 0.42 193 XMDateMe_00 1655 0.38 0.31 0.40 194 XM_B_REG_HTML 1625 0.42 0.50 0.39 195 XMLngstWrd_02 1602 0.37 0.32 0.39 196 HTML_IMAGE_ONLY_32 1595 0.34 0.21 0.39 197 T_XMHurry_00 1590 0.66 1.54 0.39 198 NICE_REPLY_A 1570 0.30 0.02 0.38 199 RDNS_DYNAMIC 1549 0.43 0.60 0.38 200 XM_Body_Obfu01 1548 0.41 0.50 0.38 ----------------------------------------------------------------------