Email: 528471 Autolearn: 0 AvgScore: 2.42 AvgScanTime: 1.43 sec Spam: 140018 Autolearn: 0 AvgScore: 14.36 AvgScanTime: 1.94 sec Ham: 388453 Autolearn: 0 AvgScore: -1.89 AvgScanTime: 1.25 sec Time Spent Running SA: 209.75 hours Time Spent Processing Spam: 75.31 hours Time Spent Processing Ham: 134.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134394 89.09 95.98 86.61 2 DCC_CHECK 110599 50.16 78.99 39.77 3 DKIM_SIGNED 110292 73.48 78.77 71.57 4 RELAYCOUNTRY_US 107487 79.54 76.77 80.55 5 XM_DK_Pass 102852 70.94 73.46 70.04 6 XM_B_Unicode 102615 69.36 73.29 67.94 7 DKIM_VALID 99754 68.92 71.24 68.08 8 XM_B_SpammyWords 91301 49.05 65.21 43.23 9 XMListUnsubscribeExists 90261 50.12 64.46 44.94 10 DKIM_VALID_AU 72675 51.49 51.90 51.35 11 BAYES_50 61370 50.20 43.83 52.49 12 XM_B_Unicode3 55679 39.80 39.77 39.81 13 XM_DK_Undo_02 52546 15.02 37.53 6.90 14 XM_B_SpammyWords2 52387 23.24 37.41 18.13 15 LOC_TINY_FONT_1 46627 24.49 33.30 21.31 16 MIME_HTML_ONLY 44107 23.59 31.50 20.74 17 HTML_FONT_LOW_CONTRAST 43260 26.82 30.90 25.35 18 TR_XM_DKIM_Undo 42168 11.77 30.12 5.16 19 FVGT_m_MULTI_ODD 41877 24.14 29.91 22.06 20 T_KAM_HTML_FONT_INVALID 40571 19.91 28.98 16.65 21 BAYES_99 39486 11.44 28.20 5.40 22 RCVD_IN_MSPIKE_H2 39353 25.77 28.11 24.93 23 DKIM_VALID_EF 37945 26.61 27.10 26.44 24 XMSubLong 35942 22.23 25.67 20.99 25 T_TM2_M_HEADER_IN_MSG 33728 30.81 24.09 33.23 26 BAYES_999 30329 9.05 21.66 4.51 27 TR_DCC_Bayes_99 29954 7.51 21.39 2.51 28 DCC_CHECK_NEGATIVE 29359 49.79 20.97 60.18 29 RELAYCOUNTRY_META 29090 9.06 20.78 4.84 30 FSL_BULK_SIG 28611 11.80 20.43 8.69 31 XM_Body_Dirty_Words 28117 13.59 20.08 11.25 32 RCVD_IN_MSPIKE_WL 26977 26.24 19.27 28.75 33 UNTRUSTED_Relay 23396 5.90 16.71 2.01 34 BOTNET 23296 5.53 16.64 1.53 35 XM_Multi_Part_URI 21527 12.05 15.37 10.85 36 LOTS_OF_MONEY 20290 9.13 14.49 7.20 37 XM_UncommonTLD01 19087 6.26 13.63 3.60 38 XM_B_SpammyWords3 18699 6.19 13.35 3.61 39 XM_B_Unsub 18099 11.19 12.93 10.56 40 BOTNET_IPINHOSTNAME 17940 6.38 12.81 4.06 41 TR_XM_SpammyWords4 17100 6.55 12.21 4.51 42 UNPARSEABLE_RELAY 14649 8.30 10.46 7.52 43 RCVD_IN_MSPIKE_H3 14557 13.95 10.40 15.23 44 TR_XM_UnparsRelay 14210 7.01 10.15 5.88 45 RCVD_IN_MSPIKE_BL 13780 2.84 9.84 0.31 46 TR_XM_SpammyWords2 13584 3.28 9.70 0.97 47 SpammyFromTLD_02 13006 2.73 9.29 0.37 48 XMSexyCombo_05 12857 5.39 9.18 4.02 49 T_REMOTE_IMAGE 12840 5.10 9.17 3.63 50 TR_XM_PhishingBody 12303 5.03 8.79 3.68 51 XM_B_Phish_Phrases 11950 4.90 8.53 3.59 52 XM_Evil_Numbers_Gen 11840 7.60 8.46 7.29 53 HTML_IMAGE_RATIO_02 11646 6.28 8.32 5.55 54 LotsOfNums_01 11261 8.73 8.04 8.97 55 TR_XM_MSPIKECOMBO 11186 2.33 7.99 0.29 56 RCVD_IN_MSPIKE_H4 11145 10.19 7.96 11.00 57 XM_SendGrid 11124 7.06 7.94 6.74 58 XM_B_SpammyTLD 10760 3.71 7.68 2.27 59 RCVD_IN_BL_SPAMCOP_NET 10572 2.45 7.55 0.61 60 DKIM_INVALID 10538 4.56 7.53 3.49 61 BAYES_60 10365 8.34 7.40 8.67 62 BAYES_80 10354 5.01 7.39 4.15 63 XM_UB50 10348 2.98 7.39 1.39 64 XMSubMetaSx_00 9619 4.74 6.87 3.98 65 MPART_ALT_DIFF 9492 5.25 6.78 4.70 66 KHOP_HELO_FCRDNS 9108 3.56 6.50 2.50 67 HTML_MIME_NO_HTML_TAG 8962 3.54 6.40 2.50 68 XM_B_Phish66 8677 3.17 6.20 2.08 69 TooManyTo_001 8391 8.03 5.99 8.77 70 XM_H_Long_From01 7783 5.02 5.56 4.82 71 PDS_OTHER_BAD_TLD 7441 1.62 5.31 0.28 72 T_HTML_TAG_BALANCE_CENTER 7144 1.38 5.10 0.04 73 RCVD_IN_MSPIKE_L5 7072 1.39 5.05 0.07 74 HTML_IMAGE_ONLY_08 6985 1.39 4.99 0.09 75 XMNumbers 6975 3.56 4.98 3.05 76 TR_XM_SpammyWords3 6780 1.45 4.84 0.23 77 MIME_HTML_MOSTLY 6741 2.86 4.81 2.15 78 BOTNET_NORDNS 6667 1.27 4.76 0.02 79 XM_ShortIntro_01 6612 3.37 4.72 2.89 80 TR_XM_SpammyWords5 6522 2.50 4.66 1.72 81 BAYES_40 6188 5.71 4.42 6.17 82 TR_XM_DK_SendGrid 6137 4.07 4.38 3.95 83 HTML_IMAGE_RATIO_04 6022 5.07 4.30 5.34 84 RELAYCOUNTRY_CA 6012 1.85 4.29 0.98 85 BODY_URI_ONLY 5941 1.14 4.24 0.02 86 BAYES_95 5737 2.93 4.10 2.51 87 XM_SPF_SoftFail 5717 3.07 4.08 2.71 88 TR_XM_SPAMCOP 5660 1.28 4.04 0.28 89 HTML_FONT_SIZE_LARGE 5617 1.13 4.01 0.09 90 MIXED_CENTER_CASE 5612 1.06 4.01 0.00 91 MIXED_HREF_CASE 5611 1.06 4.01 0.00 92 MIXED_FONT_CASE 5604 1.06 4.00 0.00 93 MIXED_AREA_CASE 5595 1.06 4.00 0.00 94 MIXED_IMG_CASE 5273 1.00 3.77 0.00 95 T_TooManySym_01 4940 4.88 3.53 5.36 96 MIME_QP_LONG_LINE 4937 4.98 3.53 5.51 97 TM2_M_URI_OPT_OUT 4870 3.37 3.48 3.32 98 URI_PHP_REDIR 4831 0.92 3.45 0.00 99 MIME_HTML_ONLY_MULTI 4613 3.10 3.29 3.03 100 HELO_NODOT 4604 3.20 3.29 3.16 101 HELO_NO_DOMAIN 4604 3.20 3.29 3.16 102 MISSING_HEADERS 4597 2.13 3.28 1.71 103 HTML_IMAGE_RATIO_06 4472 3.30 3.19 3.34 104 RCVD_IN_RP_SAFE 4276 6.05 3.05 7.12 105 XMStrtUSub 4271 3.80 3.05 4.08 106 URI_NOVOWEL 4231 2.68 3.02 2.56 107 XM_B_COVIDMETA 4230 1.33 3.02 0.72 108 XM_OfRef6 4216 1.51 3.01 0.97 109 HTML_IMAGE_RATIO_08 4147 2.66 2.96 2.54 110 XM_DIRTYINTL 4096 1.27 2.93 0.67 111 REPLYTO_WITHOUT_TO_CC 4020 1.69 2.87 1.27 112 TM2_M_VERY_LONG_WORD 3898 1.59 2.78 1.16 113 LUCRATIVE 3826 1.64 2.73 1.24 114 T_XMDrugObfuBody_14 3819 2.23 2.73 2.05 115 URI_GOOG_STO_SPAMMY 3770 0.71 2.69 0.00 116 T_XMDrugObfuBody_08 3758 1.81 2.68 1.50 117 US_DOLLARS_3 3747 1.38 2.68 0.92 118 RCVD_IN_PSBL 3731 0.77 2.66 0.08 119 GOOG_STO_IMG_HTML 3502 0.66 2.50 0.00 120 XMDiploma_00 3474 1.61 2.48 1.30 121 TR_XM_COVIDMETA4 3412 0.92 2.44 0.37 122 SpammyFromTLD_01 3387 1.24 2.42 0.81 123 RCVD_IN_MSPIKE_L4 3378 0.77 2.41 0.17 124 TR_XM_SB_Phish 3349 2.30 2.39 2.26 125 RCVD_IN_IADB_LISTED 3349 4.39 2.39 5.11 126 XMSubPhish11 3230 2.26 2.31 2.24 127 XM_B_SpammyWords4 3213 0.89 2.29 0.39 128 FROM_EXCESS_BASE64 3205 2.50 2.29 2.58 129 ANY_BOUNCE_MESSAGE 3203 3.33 2.29 3.70 130 BOUNCE_MESSAGE 3202 3.33 2.29 3.70 131 XM_CamelCaseFrm001 3183 1.95 2.27 1.84 132 T_XMHurry_00 3115 0.96 2.22 0.50 133 XMSlimDrugH 3098 0.77 2.21 0.25 134 T_XMDrugObfuBody_00 3045 1.04 2.17 0.63 135 URI_HEX 3044 1.54 2.17 1.31 136 TR_XM_PHPDW 3036 0.78 2.17 0.27 137 RCVD_IN_IADB_SPF 3004 3.87 2.15 4.49 138 DIET_1 3001 0.86 2.14 0.40 139 RELAYCOUNTRY_AZ 2943 0.56 2.10 0.00 140 XMStockSpam_06 2941 1.05 2.10 0.67 141 XMBody_17 2910 0.84 2.08 0.40 142 XM_UB60 2902 0.61 2.07 0.09 143 RCVD_IN_RP_CERTIFIED 2883 5.26 2.06 6.41 144 XM_DK_Undo_01 2871 1.84 2.05 1.76 145 RCVD_IN_IADB_DK 2836 3.43 2.03 3.94 146 XM_B_Unsub2 2833 1.67 2.02 1.54 147 TR_XM_PHPForged 2827 0.70 2.02 0.23 148 RCVD_IN_IADB_SENDERID 2791 3.50 1.99 4.05 149 XM_URI_RBL 2760 0.63 1.97 0.15 150 TR_XM_FormFill2 2751 0.69 1.96 0.23 151 XM_H_PHPOS 2742 0.68 1.96 0.22 152 URIBL_DBL_SPAM 2717 0.52 1.94 0.01 153 XM_UB99 2714 0.52 1.94 0.01 154 BAYES_00 2710 10.44 1.94 13.50 155 MAILING_LIST_MULTI 2704 2.53 1.93 2.75 156 RCVD_IN_MSPIKE_ZBI 2594 0.51 1.85 0.02 157 HTML_IMAGE_ONLY_20 2561 1.05 1.83 0.77 158 RELAYCOUNTRY_NG_I 2538 0.48 1.81 0.00 159 FROM_SUSPICIOUS_NTLD 2491 0.51 1.78 0.05 160 TR_XM_PhishingBody2 2485 0.57 1.77 0.13 161 RCVD_IN_RP_RNBL 2478 0.50 1.77 0.04 162 BAYES_20 2473 3.55 1.77 4.19 163 URI_OPTOUT_3LD 2466 0.57 1.76 0.14 164 TR_XM_COVIDMETA1 2452 0.70 1.75 0.32 165 SUBJ_ALL_CAPS 2449 1.98 1.75 2.06 166 TR_Mismatch_TLD_02 2408 0.52 1.72 0.09 167 FROM_SUSPICIOUS_NTLD_FP 2404 0.48 1.72 0.04 168 XMNoVowels 2394 1.37 1.71 1.25 169 XMSexyCombo_01 2302 0.84 1.64 0.55 170 T_FILL_THIS_FORM_SHORT 2241 1.08 1.60 0.89 171 XM_UB80 2157 0.43 1.54 0.03 172 URIBL_BLACK 2147 0.43 1.53 0.03 173 RELAYCOUNTRY_NL 2112 0.54 1.51 0.19 174 DATE_IN_PAST_03_06 2110 0.61 1.51 0.29 175 RELAYCOUNTRY_DE 2058 0.93 1.47 0.74 176 MPART_ALT_DIFF_COUNT 2044 0.73 1.46 0.47 177 TR_LOTS_OF_MONEY3 1994 0.65 1.42 0.37 178 TR_Symld_Words 1985 1.69 1.42 1.79 179 ALL_TRUSTED 1984 12.09 1.42 15.94 180 TR_XM_PhishingBody3 1982 0.38 1.42 0.00 181 USER_IN_DEF_DKIM_WL 1916 8.58 1.37 11.18 182 XMGenDplmaNmb 1915 0.95 1.37 0.80 183 XMBrknScrpt_02 1887 0.98 1.35 0.84 184 XMLngstWrd_00 1879 0.70 1.34 0.47 185 TR_XM_INV_DKIM 1868 0.43 1.33 0.10 186 URI_TRY_3LD 1854 1.19 1.32 1.14 187 XMLngstWrd_01 1838 0.66 1.31 0.42 188 JH_SPAMMY_HEADERS 1838 0.35 1.31 0.00 189 XM_H_Long_From02 1836 1.31 1.31 1.30 190 HTML_FONT_SIZE_HUGE 1827 0.39 1.30 0.05 191 XMWghtMeta_00 1782 0.35 1.27 0.02 192 XM_UB999 1733 0.33 1.24 0.00 193 HTTPS_HTTP_MISMATCH 1691 0.94 1.21 0.84 194 TR_XM_BayesRelay 1686 0.32 1.20 0.01 195 XM_Body_Dirty_Words_01 1669 0.48 1.19 0.23 196 XMMoneyMeta_00 1647 0.73 1.18 0.56 197 XMPhish30 1597 0.99 1.14 0.93 198 XMHTML_After_End 1572 1.10 1.12 1.09 199 RELAYCOUNTRY_FR 1547 0.61 1.10 0.44 200 RELAYCOUNTRY_GB 1546 1.02 1.10 0.99 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 336431 89.09 95.98 86.61 2 RELAYCOUNTRY_US 312884 79.54 76.77 80.55 3 DKIM_SIGNED 278028 73.48 78.77 71.57 4 XM_DK_Pass 272059 70.94 73.46 70.04 5 DKIM_VALID 264476 68.92 71.24 68.08 6 XM_B_Unicode 263920 69.36 73.29 67.94 7 DCC_CHECK_NEGATIVE 233788 49.79 20.97 60.18 8 BAYES_50 203905 50.20 43.83 52.49 9 DKIM_VALID_AU 199459 51.49 51.90 51.35 10 XMListUnsubscribeExists 174589 50.12 64.46 44.94 11 XM_B_SpammyWords 167936 49.05 65.21 43.23 12 XM_B_Unicode3 154640 39.80 39.77 39.81 13 DCC_CHECK 154496 50.16 78.99 39.77 14 T_TM2_M_HEADER_IN_MSG 129078 30.81 24.09 33.23 15 RCVD_IN_MSPIKE_WL 111692 26.24 19.27 28.75 16 DKIM_VALID_EF 102705 26.61 27.10 26.44 17 HTML_FONT_LOW_CONTRAST 98461 26.82 30.90 25.35 18 RCVD_IN_MSPIKE_H2 96858 25.77 28.11 24.93 19 FVGT_m_MULTI_ODD 85689 24.14 29.91 22.06 20 LOC_TINY_FONT_1 82782 24.49 33.30 21.31 21 XMSubLong 81549 22.23 25.67 20.99 22 MIME_HTML_ONLY 80568 23.59 31.50 20.74 23 XM_B_SpammyWords2 70425 23.24 37.41 18.13 24 T_KAM_HTML_FONT_INVALID 64660 19.91 28.98 16.65 25 ALL_TRUSTED 61927 12.09 1.42 15.94 26 RCVD_IN_MSPIKE_H3 59163 13.95 10.40 15.23 27 BAYES_00 52445 10.44 1.94 13.50 28 XM_Body_Dirty_Words 43720 13.59 20.08 11.25 29 USER_IN_DEF_DKIM_WL 43411 8.58 1.37 11.18 30 RCVD_IN_MSPIKE_H4 42728 10.19 7.96 11.00 31 XM_Multi_Part_URI 42151 12.05 15.37 10.85 32 XM_B_Unsub 41032 11.19 12.93 10.56 33 LotsOfNums_01 34853 8.73 8.04 8.97 34 TooManyTo_001 34069 8.03 5.99 8.77 35 FSL_BULK_SIG 33738 11.80 20.43 8.69 36 BAYES_60 33688 8.34 7.40 8.67 37 TR_XM_DK_Bayes 30663 5.98 0.67 7.89 38 XM_DKIMWhitelistDomains 29643 5.61 0.02 7.63 39 TR_XM_DK_Bayes1 29629 5.78 0.65 7.63 40 UNPARSEABLE_RELAY 29216 8.30 10.46 7.52 41 XM_Evil_Numbers_Gen 28307 7.60 8.46 7.29 42 LOTS_OF_MONEY 27967 9.13 14.49 7.20 43 RCVD_IN_RP_SAFE 27674 6.05 3.05 7.12 44 XM_DK_Undo_02 26811 15.02 37.53 6.90 45 XM_SendGrid 26174 7.06 7.94 6.74 46 TR_XM_DK_Bayes2 24961 4.86 0.53 6.43 47 RCVD_IN_RP_CERTIFIED 24897 5.26 2.06 6.41 48 BAYES_40 23977 5.71 4.42 6.17 49 TR_XM_UnparsRelay 22822 7.01 10.15 5.88 50 HTML_IMAGE_RATIO_02 21543 6.28 8.32 5.55 51 IN_ZIMBRA_NJ_WHITELIST 21440 4.07 0.04 5.52 52 MIME_QP_LONG_LINE 21403 4.98 3.53 5.51 53 BAYES_99 20985 11.44 28.20 5.40 54 T_TooManySym_01 20825 4.88 3.53 5.36 55 HTML_IMAGE_RATIO_04 20753 5.07 4.30 5.34 56 XM_PDF 20130 4.08 1.01 5.18 57 TR_XM_DKIM_Undo 20033 11.77 30.12 5.16 58 RCVD_IN_IADB_LISTED 19846 4.39 2.39 5.11 59 RELAYCOUNTRY_META 18793 9.06 20.78 4.84 60 XM_H_Long_From01 18726 5.02 5.56 4.82 61 MPART_ALT_DIFF 18242 5.25 6.78 4.70 62 TR_XM_SpammyWords4 17527 6.55 12.21 4.51 63 BAYES_999 17506 9.05 21.66 4.51 64 RCVD_IN_IADB_SPF 17457 3.87 2.15 4.49 65 BAYES_20 16287 3.55 1.77 4.19 66 BAYES_80 16103 5.01 7.39 4.15 67 XMStrtUSub 15834 3.80 3.05 4.08 68 BOTNET_IPINHOSTNAME 15753 6.38 12.81 4.06 69 RCVD_IN_IADB_SENDERID 15724 3.50 1.99 4.05 70 XMSexyCombo_05 15614 5.39 9.18 4.02 71 XMSubMetaSx_00 15454 4.74 6.87 3.98 72 TR_XM_DK_SendGrid 15359 4.07 4.38 3.95 73 RCVD_IN_IADB_DK 15286 3.43 2.03 3.94 74 ANY_BOUNCE_MESSAGE 14386 3.33 2.29 3.70 75 BOUNCE_MESSAGE 14385 3.33 2.29 3.70 76 TR_XM_PhishingBody 14304 5.03 8.79 3.68 77 T_REMOTE_IMAGE 14086 5.10 9.17 3.63 78 XM_B_SpammyWords3 14019 6.19 13.35 3.61 79 XM_UncommonTLD01 13978 6.26 13.63 3.60 80 XM_B_Phish_Phrases 13929 4.90 8.53 3.59 81 XM_H_Trusted_IP 13888 2.63 0.00 3.58 82 DKIM_INVALID 13552 4.56 7.53 3.49 83 HTML_IMAGE_RATIO_06 12991 3.30 3.19 3.34 84 TM2_M_URI_OPT_OUT 12914 3.37 3.48 3.32 85 HELO_NODOT 12286 3.20 3.29 3.16 86 HELO_NO_DOMAIN 12285 3.20 3.29 3.16 87 RCVD_IN_IADB_VOUCHED 11906 2.53 1.04 3.06 88 XMNumbers 11843 3.56 4.98 3.05 89 MIME_HTML_ONLY_MULTI 11756 3.10 3.29 3.03 90 BAYES_05 11315 2.39 0.95 2.91 91 XM_ShortIntro_01 11217 3.37 4.72 2.89 92 MAILING_LIST_MULTI 10671 2.53 1.93 2.75 93 XM_SPF_SoftFail 10519 3.07 4.08 2.71 94 T_TooManySym_02 10093 2.07 0.61 2.60 95 FROM_EXCESS_BASE64 10011 2.50 2.29 2.58 96 URI_NOVOWEL 9928 2.68 3.02 2.56 97 HTML_IMAGE_RATIO_08 9884 2.66 2.96 2.54 98 RCVD_IN_MSPIKE_H5 9801 2.10 0.91 2.52 99 TR_DCC_Bayes_99 9752 7.51 21.39 2.51 100 BAYES_95 9732 2.93 4.10 2.51 101 KHOP_HELO_FCRDNS 9724 3.56 6.50 2.50 102 HTML_MIME_NO_HTML_TAG 9723 3.54 6.40 2.50 103 TooManyTo_002 9494 2.07 1.02 2.44 104 TVD_RCVD_IP 8971 1.73 0.14 2.31 105 XM_B_SpammyTLD 8826 3.71 7.68 2.27 106 TR_XM_SB_Phish 8794 2.30 2.39 2.26 107 XMSubPhish11 8694 2.26 2.31 2.24 108 MIME_HTML_MOSTLY 8347 2.86 4.81 2.15 109 XM_B_Phish66 8077 3.17 6.20 2.08 110 SUBJ_ALL_CAPS 7991 1.98 1.75 2.06 111 T_XMDrugObfuBody_14 7967 2.23 2.73 2.05 112 UNTRUSTED_Relay 7794 5.90 16.71 2.01 113 RCVD_IN_IADB_OPTIN 7480 1.61 0.72 1.93 114 IN_HORDE_ADDRESS_BOOK 7424 1.43 0.08 1.91 115 INVALID_MSGID 7221 1.41 0.18 1.86 116 XM_CamelCaseFrm001 7142 1.95 2.27 1.84 117 TR_Symld_Words 6955 1.69 1.42 1.79 118 XM_DK_Undo_01 6855 1.84 2.05 1.76 119 TR_XM_SpammyWords5 6677 2.50 4.66 1.72 120 MISSING_HEADERS 6650 2.13 3.28 1.71 121 MSGID_NOFQDN1 6609 1.26 0.05 1.70 122 TO_MALFORMED 6348 1.21 0.02 1.63 123 TooManyTo_003 6058 1.37 0.85 1.56 124 XM_B_Unsub2 5996 1.67 2.02 1.54 125 BOTNET 5933 5.53 16.64 1.53 126 T_XMDrugObfuBody_08 5831 1.81 2.68 1.50 127 XM_UB50 5408 2.98 7.39 1.39 128 URI_HEX 5104 1.54 2.17 1.31 129 XM_H_Long_From02 5065 1.31 1.31 1.30 130 XMDiploma_00 5051 1.61 2.48 1.30 131 XMCapTrack 5004 1.20 0.96 1.29 132 REPLYTO_WITHOUT_TO_CC 4934 1.69 2.87 1.27 133 XM_GoogleGroups 4907 1.09 0.59 1.26 134 XMNoVowels 4842 1.37 1.71 1.25 135 LUCRATIVE 4821 1.64 2.73 1.24 136 XMGappySubj_01 4633 0.93 0.19 1.19 137 XMSubNoVowel 4519 1.01 0.59 1.16 138 TM2_M_VERY_LONG_WORD 4489 1.59 2.78 1.16 139 URI_TRY_3LD 4437 1.19 1.32 1.14 140 TooManyTo_004 4258 1.00 0.73 1.10 141 XMHTML_After_End 4225 1.10 1.12 1.09 142 HTML_FONT_FACE_BAD 3987 0.93 0.65 1.03 143 MIME_HEADER_CTYPE_ONLY 3929 0.79 0.18 1.01 144 RELAYCOUNTRY_GB 3858 1.02 1.10 0.99 145 RELAYCOUNTRY_CA 3789 1.85 4.29 0.98 146 TR_XM_SpammyWords2 3755 3.28 9.70 0.97 147 XM_OfRef6 3755 1.51 3.01 0.97 148 DKIM_ADSP_CUSTOM_MED 3649 0.93 0.90 0.94 149 XM_shorewaves_Whitelist 3627 0.69 0.00 0.93 150 XMPhish30 3622 0.99 1.14 0.93 151 US_DOLLARS_3 3564 1.38 2.68 0.92 152 XMBSHREFv2 3557 0.75 0.28 0.92 153 TooManyTo_005 3480 0.84 0.67 0.90 154 T_FILL_THIS_FORM_SHORT 3469 1.08 1.60 0.89 155 T_TooManySym_03 3437 0.72 0.26 0.88 156 XM_ProductURIs 3368 0.93 1.10 0.87 157 HTTPS_HTTP_MISMATCH 3277 0.94 1.21 0.84 158 XMBrknScrpt_02 3272 0.98 1.35 0.84 159 XMBdyGiftCard01 3140 0.87 1.04 0.81 160 SpammyFromTLD_01 3140 1.24 2.42 0.81 161 XMGenDplmaNmb 3118 0.95 1.37 0.80 162 HTML_IMAGE_ONLY_20 3007 1.05 1.83 0.77 163 XMBody_95 2901 0.60 0.19 0.75 164 TR_MetaPhish_Combo_01 2878 0.79 0.94 0.74 165 RELAYCOUNTRY_DE 2857 0.93 1.47 0.74 166 XM_B_COVIDMETA 2803 1.33 3.02 0.72 167 XM_SPF_Unknown 2665 0.71 0.78 0.69 168 MY_SERVERS_FOUND 2664 0.54 0.15 0.69 169 TR_MSPIKEBAYES00 2663 0.51 0.01 0.69 170 XM_DIRTYINTL 2611 1.27 2.93 0.67 171 XMStockSpam_06 2585 1.05 2.10 0.67 172 XM_H_PHPMailer 2584 0.74 0.94 0.67 173 XMSubMetaI_00 2559 0.76 1.05 0.66 174 T_XMDrugObfuBody_00 2430 1.04 2.17 0.63 175 T_OBFU_PDF_ATTACH 2428 0.50 0.16 0.63 176 XM_B_REG_HTML 2370 0.62 0.64 0.61 177 RCVD_IN_BL_SPAMCOP_NET 2353 2.45 7.55 0.61 178 RCVD_IN_SORBS_DUL 2342 0.50 0.20 0.60 179 NML_ADSP_CUSTOM_MED 2327 0.62 0.66 0.60 180 HTML_TAG_BALANCE_BODY 2245 0.67 0.94 0.58 181 XMMoneyMeta_00 2192 0.73 1.18 0.56 182 XM_B_COPY_HTML 2181 0.61 0.76 0.56 183 XMSexyCombo_01 2135 0.84 1.64 0.55 184 SHORT_HELO_AND_INLINE_IMAGE 2099 0.42 0.09 0.54 185 TM2_M_BODY_EMPTY 2008 0.40 0.07 0.52 186 XMSubMetaSxObfu_03 1967 0.52 0.55 0.51 187 FROM_GOV_SPOOF 1958 0.42 0.20 0.50 188 T_XMHurry_00 1938 0.96 2.22 0.50 189 HTML_IMAGE_ONLY_28 1870 0.46 0.40 0.48 190 T_Symld_Words_02 1866 0.58 0.85 0.48 191 FORGED_GMAIL_RCVD 1863 0.55 0.74 0.48 192 XMHTMLBadTable_001 1821 0.46 0.42 0.47 193 MPART_ALT_DIFF_COUNT 1820 0.73 1.46 0.47 194 XMLngstWrd_00 1815 0.70 1.34 0.47 195 XMSubMetaSxObfu_02 1810 0.51 0.64 0.47 196 TVD_SPACE_RATIO 1705 0.36 0.13 0.44 197 RELAYCOUNTRY_FR 1693 0.61 1.10 0.44 198 XMEmptySub 1664 0.38 0.26 0.43 199 XMOemUri 1657 0.36 0.17 0.43 200 TVD_SPACE_RATIO_MINFP 1654 0.35 0.14 0.43 ----------------------------------------------------------------------