Email: 483310 Autolearn: 0 AvgScore: 2.55 AvgScanTime: 1.33 sec Spam: 122143 Autolearn: 0 AvgScore: 14.69 AvgScanTime: 1.60 sec Ham: 361167 Autolearn: 0 AvgScore: -1.55 AvgScanTime: 1.25 sec Time Spent Running SA: 179.13 hours Time Spent Processing Spam: 54.16 hours Time Spent Processing Ham: 124.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 117613 88.45 96.29 85.79 2 DKIM_SIGNED 99690 72.69 81.62 69.67 3 DCC_CHECK 95772 47.12 78.41 36.54 4 RELAYCOUNTRY_US 95694 79.22 78.35 79.51 5 XM_DK_Pass 94592 70.52 77.44 68.17 6 XM_B_Unicode 92880 71.42 76.04 69.86 7 DKIM_VALID 91650 68.34 75.03 66.08 8 XM_B_SpammyWords 82725 49.42 67.73 43.22 9 XMListUnsubscribeExists 81041 49.04 66.35 43.18 10 DKIM_VALID_AU 65844 50.47 53.91 49.30 11 BAYES_50 52629 50.11 43.09 52.48 12 XM_B_Unicode3 49881 41.56 40.84 41.80 13 XM_DK_Undo_02 49202 15.50 40.28 7.11 14 XM_B_SpammyWords2 47106 23.42 38.57 18.30 15 MIME_HTML_ONLY 41955 24.31 34.35 20.91 16 HTML_FONT_LOW_CONTRAST 40590 27.27 33.23 25.26 17 TR_XM_DKIM_Undo 40305 12.26 33.00 5.25 18 LOC_TINY_FONT_1 39346 24.21 32.21 21.50 19 RCVD_IN_MSPIKE_H2 38233 26.20 31.30 24.48 20 BAYES_99 36125 12.79 29.58 7.11 21 DKIM_VALID_EF 34722 26.42 28.43 25.74 22 T_KAM_HTML_FONT_INVALID 34536 19.31 28.28 16.28 23 FVGT_m_MULTI_ODD 33977 23.05 27.82 21.44 24 XMSubLong 31385 21.57 25.70 20.18 25 TR_DCC_Bayes_99 28057 7.69 22.97 2.52 26 BAYES_999 27876 10.37 22.82 6.16 27 XM_Body_Dirty_Words 26780 14.24 21.93 11.64 28 DCC_CHECK_NEGATIVE 26335 52.84 21.56 63.42 29 T_TM2_M_HEADER_IN_MSG 25916 28.20 21.22 30.57 30 RELAYCOUNTRY_META 24330 8.61 19.92 4.79 31 RCVD_IN_MSPIKE_WL 22526 24.76 18.44 26.90 32 FSL_BULK_SIG 21873 10.34 17.91 7.78 33 XM_UncommonTLD01 19174 6.57 15.70 3.48 34 XM_Multi_Part_URI 18760 12.04 15.36 10.91 35 BOTNET 18182 4.88 14.89 1.50 36 LOTS_OF_MONEY 17660 9.51 14.46 7.83 37 UNTRUSTED_Relay 17592 5.18 14.40 2.06 38 BOTNET_IPINHOSTNAME 16238 6.54 13.29 4.25 39 XM_B_Unsub 15441 11.46 12.64 11.06 40 UNPARSEABLE_RELAY 15222 8.95 12.46 7.76 41 XM_B_SpammyWords3 15015 5.85 12.29 3.67 42 TR_XM_UnparsRelay 14840 7.53 12.15 5.97 43 TR_XM_SpammyWords4 14816 6.69 12.13 4.85 44 SpammyFromTLD_02 14294 3.38 11.70 0.57 45 TR_XM_SpammyWords2 13256 3.48 10.85 0.99 46 XMSexyCombo_05 12916 5.67 10.57 4.01 47 T_REMOTE_IMAGE 12330 5.33 10.09 3.71 48 RCVD_IN_MSPIKE_H3 11983 13.19 9.81 14.33 49 XM_SendGrid 10955 7.34 8.97 6.79 50 HTML_MIME_NO_HTML_TAG 10947 3.86 8.96 2.13 51 XM_Evil_Numbers_Gen 10835 8.35 8.87 8.17 52 MPART_ALT_DIFF 10595 6.72 8.67 6.06 53 KHOP_HELO_FCRDNS 10282 3.38 8.42 1.68 54 TR_XM_PhishingBody 9734 4.41 7.97 3.20 55 RCVD_IN_BL_SPAMCOP_NET 9673 2.45 7.92 0.60 56 LotsOfNums_01 9671 8.74 7.92 9.02 57 XM_B_Phish_Phrases 9663 4.93 7.91 3.92 58 BAYES_60 9483 8.22 7.76 8.37 59 RCVD_IN_MSPIKE_H4 9424 9.56 7.72 10.19 60 BAYES_80 9410 4.95 7.70 4.02 61 T_HTML_TAG_BALANCE_CENTER 9229 1.95 7.56 0.06 62 HTML_IMAGE_ONLY_08 9190 1.96 7.52 0.08 63 HTML_IMAGE_RATIO_02 8640 6.16 7.07 5.85 64 XMSubMetaSx_00 8352 4.50 6.84 3.71 65 DKIM_INVALID 8040 4.35 6.58 3.59 66 MIME_HTML_MOSTLY 7977 3.32 6.53 2.23 67 TooManyTo_001 7919 7.93 6.48 8.42 68 XM_UB50 7691 2.72 6.30 1.52 69 XM_B_SpammyTLD 7617 3.02 6.24 1.93 70 MIXED_IMG_CASE 7531 1.56 6.17 0.00 71 MIXED_CENTER_CASE 7528 1.56 6.16 0.00 72 MIXED_HREF_CASE 7528 1.56 6.16 0.01 73 MIXED_FONT_CASE 7528 1.56 6.16 0.00 74 MIXED_AREA_CASE 7527 1.56 6.16 0.00 75 XM_H_Long_From01 7376 5.32 6.04 5.08 76 BODY_URI_ONLY 7362 1.53 6.03 0.01 77 HTML_FONT_SIZE_LARGE 6899 1.53 5.65 0.13 78 MIXED_CTYPE_CASE 6459 1.34 5.29 0.00 79 RCVD_IN_MSPIKE_BL 6455 1.71 5.28 0.51 80 URI_GOOG_STO_SPAMMY 6399 1.32 5.24 0.00 81 TR_XM_MSPIKECOMBO 6379 1.69 5.22 0.49 82 TR_XM_DK_SendGrid 6181 4.43 5.06 4.22 83 TR_XM_SPAMCOP 5967 1.49 4.89 0.35 84 XM_B_Phish66 5830 2.62 4.77 1.89 85 URI_NOVOWEL 5775 3.41 4.73 2.97 86 RELAYCOUNTRY_CA 5674 1.84 4.65 0.90 87 HTML_IMAGE_RATIO_04 5386 7.05 4.41 7.95 88 XMNumbers 5178 3.36 4.24 3.06 89 XMNoVowels 5060 2.83 4.14 2.39 90 MIME_QP_LONG_LINE 4854 4.96 3.97 5.30 91 URIBL_DBL_SPAM 4792 0.99 3.92 0.00 92 BAYES_95 4789 2.85 3.92 2.48 93 BOTNET_NORDNS 4770 1.00 3.91 0.02 94 RCVD_IN_RP_SAFE 4767 5.60 3.90 6.17 95 TR_XM_SpammyWords3 4691 1.29 3.84 0.42 96 XM_SPF_SoftFail 4642 2.24 3.80 1.71 97 PDS_OTHER_BAD_TLD 4488 1.05 3.67 0.16 98 T_XMDrugObfuBody_14 4430 3.02 3.63 2.82 99 XM_B_COVIDMETA 4339 1.73 3.55 1.12 100 RCVD_IN_MSPIKE_L5 4257 0.92 3.49 0.05 101 TM2_M_URI_OPT_OUT 4190 3.91 3.43 4.07 102 MIME_HTML_ONLY_MULTI 4062 4.11 3.33 4.37 103 XMStrtUSub 3931 3.75 3.22 3.93 104 XM_DIRTYINTL 3921 1.50 3.21 0.92 105 SpammyFromTLD_01 3848 1.34 3.15 0.73 106 RCVD_IN_RP_CERTIFIED 3832 4.74 3.14 5.28 107 HTML_IMAGE_RATIO_06 3807 3.45 3.12 3.56 108 RCVD_IN_IADB_LISTED 3798 4.86 3.11 5.46 109 XMDiploma_00 3731 1.66 3.05 1.19 110 XM_OfRef6 3655 1.44 2.99 0.91 111 TR_XM_SpammyWords5 3626 1.71 2.97 1.28 112 T_XMDrugObfuBody_08 3577 1.79 2.93 1.40 113 XM_B_Unsub2 3505 2.03 2.87 1.75 114 RCVD_IN_IADB_SPF 3375 4.25 2.76 4.75 115 GOOG_STO_IMG_HTML 3309 0.68 2.71 0.00 116 RCVD_IN_IADB_DK 3173 3.71 2.60 4.08 117 URI_HEX 3135 1.86 2.57 1.62 118 URI_PHP_REDIR 3110 0.64 2.55 0.00 119 JH_SPAMMY_HEADERS 3109 0.64 2.55 0.00 120 TR_XM_SB_Phish 3106 2.60 2.54 2.62 121 RCVD_IN_IADB_SENDERID 3096 3.81 2.53 4.24 122 TR_XM_COVIDMETA4 2991 0.87 2.45 0.34 123 XMSubPhish11 2966 2.55 2.43 2.59 124 RCVD_IN_RP_RNBL 2966 0.62 2.43 0.01 125 TR_XM_COVIDMETA1 2845 0.81 2.33 0.30 126 BAYES_40 2808 4.38 2.30 5.08 127 T_TooManySym_01 2796 5.23 2.29 6.23 128 BAYES_00 2766 10.65 2.26 13.49 129 T_XMDrugObfuBody_00 2762 1.52 2.26 1.27 130 XM_DK_Undo_01 2728 1.80 2.23 1.65 131 XM_B_SpammyWords4 2725 0.86 2.23 0.40 132 HTML_FONT_SIZE_HUGE 2615 0.57 2.14 0.04 133 XMGenDplmaNmb 2614 1.10 2.14 0.75 134 HTML_IMAGE_RATIO_08 2611 2.15 2.14 2.15 135 TM2_M_VERY_LONG_WORD 2597 1.46 2.13 1.23 136 XM_UB99 2566 0.53 2.10 0.00 137 XMSexyCombo_01 2564 0.99 2.10 0.61 138 XM_CamelCaseFrm001 2542 1.78 2.08 1.68 139 BAYES_20 2522 3.88 2.06 4.49 140 TR_XM_PHPDW 2427 0.78 1.99 0.38 141 DIET_1 2424 1.23 1.98 0.98 142 MAILING_LIST_MULTI 2391 2.66 1.96 2.90 143 XM_UB60 2361 0.54 1.93 0.06 144 XM_URI_RBL 2239 0.53 1.83 0.09 145 TR_XM_PHPForged 2139 0.70 1.75 0.34 146 TR_XM_FormFill2 2103 0.70 1.72 0.35 147 RELAYCOUNTRY_IR 2100 0.44 1.72 0.00 148 XM_H_PHPOS 2096 0.68 1.72 0.33 149 FROM_EXCESS_BASE64 2016 2.47 1.65 2.74 150 URIBL_BLACK 1996 0.43 1.63 0.03 151 XMBody_17 1982 0.72 1.62 0.41 152 TR_Symld_Words 1936 1.68 1.59 1.71 153 ALL_TRUSTED 1928 13.15 1.58 17.06 154 XMSlimDrugH 1909 0.59 1.56 0.26 155 XMPhish30 1867 0.82 1.53 0.58 156 T_XMHurry_00 1864 0.63 1.53 0.33 157 XM_Body_Dirty_Words_01 1831 0.54 1.50 0.22 158 XMBrknScrpt_02 1812 1.03 1.48 0.88 159 RELAYCOUNTRY_AU 1791 0.64 1.47 0.37 160 XMStockSpam_06 1778 1.23 1.46 1.15 161 T_FILL_THIS_FORM_SHORT 1775 1.04 1.45 0.90 162 HTTPS_HTTP_MISMATCH 1737 0.88 1.42 0.69 163 SUBJ_ALL_CAPS 1735 1.43 1.42 1.44 164 XM_H_Long_From02 1730 1.07 1.42 0.95 165 RELAYCOUNTRY_NL 1721 0.45 1.41 0.12 166 XM_ProductURIs 1713 1.06 1.40 0.94 167 HELO_NODOT 1695 1.48 1.39 1.51 168 HELO_NO_DOMAIN 1694 1.48 1.39 1.51 169 RELAYCOUNTRY_IN 1669 0.42 1.37 0.10 170 URI_TRY_3LD 1648 1.17 1.35 1.11 171 NO_DNS_FOR_FROM 1642 0.61 1.34 0.36 172 BAYES_05 1609 2.18 1.32 2.47 173 RCVD_IN_IADB_VOUCHED 1571 2.94 1.29 3.51 174 T_Symld_Words_02 1546 0.63 1.27 0.42 175 XM_UB80 1537 0.33 1.26 0.02 176 XM_UB999 1533 0.32 1.26 0.00 177 USER_IN_DEF_DKIM_WL 1524 8.83 1.25 11.39 178 RELAYCOUNTRY_DE 1512 0.86 1.24 0.73 179 TR_LOTS_OF_MONEY3 1502 0.52 1.23 0.27 180 XM_PDF 1494 3.92 1.22 4.83 181 XMMoneyMeta_00 1485 0.64 1.22 0.45 182 TR_XM_MaxWHORU 1472 0.51 1.21 0.27 183 URIBL_SBL_A 1461 0.41 1.20 0.15 184 RCVD_IN_PSBL 1428 0.43 1.17 0.17 185 TR_XM_INV_DKIM 1426 0.39 1.17 0.12 186 TooManyTo_002 1421 1.89 1.16 2.13 187 TR_Mismatch_TLD_02 1408 0.35 1.15 0.07 188 TR_XM_BayesRelay 1400 0.29 1.15 0.01 189 XMBdyGiftCard01 1378 0.79 1.13 0.68 190 XM_H_PHPMailer 1376 0.70 1.13 0.55 191 XMSubMetaI_00 1367 0.56 1.12 0.37 192 T_MONEY_PERCENT 1283 0.43 1.05 0.22 193 TR_LOTS_OF_MONEY2 1283 0.43 1.05 0.22 194 XM_B_SEO 1281 0.37 1.05 0.14 195 XM_H_Undi_Recip 1207 0.38 0.99 0.18 196 RCVD_IN_MSPIKE_L3 1205 0.47 0.99 0.30 197 TooManyTo_003 1185 1.33 0.97 1.46 198 DKIM_ADSP_CUSTOM_MED 1180 0.95 0.97 0.95 199 TR_XM_SEO4 1172 0.30 0.96 0.08 200 XMWghtMeta_00 1150 0.26 0.94 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 309860 88.45 96.29 85.79 2 RELAYCOUNTRY_US 287161 79.22 78.35 79.51 3 XM_B_Unicode 252298 71.42 76.04 69.86 4 DKIM_SIGNED 251613 72.69 81.62 69.67 5 XM_DK_Pass 246225 70.52 77.44 68.17 6 DKIM_VALID 238652 68.34 75.03 66.08 7 DCC_CHECK_NEGATIVE 229038 52.84 21.56 63.42 8 BAYES_50 189541 50.11 43.09 52.48 9 DKIM_VALID_AU 178073 50.47 53.91 49.30 10 XM_B_SpammyWords 156105 49.42 67.73 43.22 11 XMListUnsubscribeExists 155967 49.04 66.35 43.18 12 XM_B_Unicode3 150977 41.56 40.84 41.80 13 DCC_CHECK 131964 47.12 78.41 36.54 14 T_TM2_M_HEADER_IN_MSG 110393 28.20 21.22 30.57 15 RCVD_IN_MSPIKE_WL 97138 24.76 18.44 26.90 16 DKIM_VALID_EF 92955 26.42 28.43 25.74 17 HTML_FONT_LOW_CONTRAST 91226 27.27 33.23 25.26 18 RCVD_IN_MSPIKE_H2 88397 26.20 31.30 24.48 19 LOC_TINY_FONT_1 77660 24.21 32.21 21.50 20 FVGT_m_MULTI_ODD 77437 23.05 27.82 21.44 21 MIME_HTML_ONLY 75519 24.31 34.35 20.91 22 XMSubLong 72869 21.57 25.70 20.18 23 XM_B_SpammyWords2 66103 23.42 38.57 18.30 24 ALL_TRUSTED 61611 13.15 1.58 17.06 25 T_KAM_HTML_FONT_INVALID 58789 19.31 28.28 16.28 26 RCVD_IN_MSPIKE_H3 51760 13.19 9.81 14.33 27 BAYES_00 48715 10.65 2.26 13.49 28 XM_Body_Dirty_Words 42034 14.24 21.93 11.64 29 USER_IN_DEF_DKIM_WL 41130 8.83 1.25 11.39 30 XM_B_Unsub 39942 11.46 12.64 11.06 31 XM_Multi_Part_URI 39419 12.04 15.36 10.91 32 RCVD_IN_MSPIKE_H4 36789 9.56 7.72 10.19 33 LotsOfNums_01 32564 8.74 7.92 9.02 34 TooManyTo_001 30420 7.93 6.48 8.42 35 BAYES_60 30227 8.22 7.76 8.37 36 XM_Evil_Numbers_Gen 29510 8.35 8.87 8.17 37 HTML_IMAGE_RATIO_04 28706 7.05 4.41 7.95 38 TR_XM_DK_Bayes 28492 6.08 0.73 7.89 39 XM_DKIMWhitelistDomains 28352 5.87 0.03 7.85 40 LOTS_OF_MONEY 28287 9.51 14.46 7.83 41 FSL_BULK_SIG 28091 10.34 17.91 7.78 42 UNPARSEABLE_RELAY 28041 8.95 12.46 7.76 43 TR_XM_DK_Bayes1 27584 5.89 0.70 7.64 44 XM_H_Trusted_IP 26720 5.53 0.00 7.40 45 XM_DK_Undo_02 25696 15.50 40.28 7.11 46 BAYES_99 25692 12.79 29.58 7.11 47 XM_SendGrid 24535 7.34 8.97 6.79 48 TR_XM_DK_Bayes2 23469 4.99 0.52 6.50 49 T_TooManySym_01 22500 5.23 2.29 6.23 50 RCVD_IN_RP_SAFE 22275 5.60 3.90 6.17 51 BAYES_999 22235 10.37 22.82 6.16 52 MPART_ALT_DIFF 21879 6.72 8.67 6.06 53 TR_XM_UnparsRelay 21566 7.53 12.15 5.97 54 HTML_IMAGE_RATIO_02 21122 6.16 7.07 5.85 55 RCVD_IN_IADB_LISTED 19713 4.86 3.11 5.46 56 MIME_QP_LONG_LINE 19137 4.96 3.97 5.30 57 RCVD_IN_RP_CERTIFIED 19059 4.74 3.14 5.28 58 TR_XM_DKIM_Undo 18955 12.26 33.00 5.25 59 BAYES_40 18354 4.38 2.30 5.08 60 XM_H_Long_From01 18352 5.32 6.04 5.08 61 TR_XM_SpammyWords4 17515 6.69 12.13 4.85 62 ANY_BOUNCE_MESSAGE 17475 3.79 0.68 4.84 63 BOUNCE_MESSAGE 17474 3.79 0.68 4.84 64 XM_PDF 17461 3.92 1.22 4.83 65 RELAYCOUNTRY_META 17283 8.61 19.92 4.79 66 RCVD_IN_IADB_SPF 17169 4.25 2.76 4.75 67 BAYES_20 16209 3.88 2.06 4.49 68 MIME_HTML_ONLY_MULTI 15794 4.11 3.33 4.37 69 BOTNET_IPINHOSTNAME 15350 6.54 13.29 4.25 70 RCVD_IN_IADB_SENDERID 15305 3.81 2.53 4.24 71 TR_XM_DK_SendGrid 15236 4.43 5.06 4.22 72 RCVD_IN_IADB_DK 14750 3.71 2.60 4.08 73 TM2_M_URI_OPT_OUT 14696 3.91 3.43 4.07 74 BAYES_80 14506 4.95 7.70 4.02 75 XMSexyCombo_05 14497 5.67 10.57 4.01 76 XMStrtUSub 14188 3.75 3.22 3.93 77 XM_B_Phish_Phrases 14144 4.93 7.91 3.92 78 T_REMOTE_IMAGE 13416 5.33 10.09 3.71 79 XMSubMetaSx_00 13412 4.50 6.84 3.71 80 XM_B_SpammyWords3 13267 5.85 12.29 3.67 81 DKIM_INVALID 12961 4.35 6.58 3.59 82 HTML_IMAGE_RATIO_06 12864 3.45 3.12 3.56 83 RCVD_IN_IADB_VOUCHED 12662 2.94 1.29 3.51 84 XM_UncommonTLD01 12557 6.57 15.70 3.48 85 IN_ZIMBRA_NJ_WHITELIST 12210 2.54 0.05 3.38 86 TR_XM_PhishingBody 11575 4.41 7.97 3.20 87 XMNumbers 11046 3.36 4.24 3.06 88 URI_NOVOWEL 10717 3.41 4.73 2.97 89 XMSubNoVowel 10603 2.29 0.36 2.94 90 MAILING_LIST_MULTI 10468 2.66 1.96 2.90 91 T_XMDrugObfuBody_14 10171 3.02 3.63 2.82 92 T_TooManySym_02 10030 2.24 0.67 2.78 93 FROM_EXCESS_BASE64 9912 2.47 1.65 2.74 94 TR_XM_SB_Phish 9470 2.60 2.54 2.62 95 XMSubPhish11 9348 2.55 2.43 2.59 96 TR_DCC_Bayes_99 9106 7.69 22.97 2.52 97 BAYES_95 8974 2.85 3.92 2.48 98 BAYES_05 8934 2.18 1.32 2.47 99 XMNoVowels 8639 2.83 4.14 2.39 100 RCVD_IN_MSPIKE_H5 8589 2.01 0.92 2.38 101 MIME_HTML_MOSTLY 8047 3.32 6.53 2.23 102 RCVD_IN_IADB_OPTIN 7956 1.86 0.83 2.20 103 HTML_IMAGE_RATIO_08 7771 2.15 2.14 2.15 104 TooManyTo_002 7708 1.89 1.16 2.13 105 HTML_MIME_NO_HTML_TAG 7690 3.86 8.96 2.13 106 HTML_IMAGE_ONLY_20 7627 1.80 0.86 2.11 107 UNTRUSTED_Relay 7452 5.18 14.40 2.06 108 INVALID_MSGID 7152 1.52 0.16 1.98 109 IN_HORDE_ADDRESS_BOOK 7006 1.47 0.10 1.94 110 XM_B_SpammyTLD 6958 3.02 6.24 1.93 111 XM_B_Phish66 6840 2.62 4.77 1.89 112 MSGID_NOFQDN1 6574 1.38 0.07 1.82 113 XM_B_Unsub2 6311 2.03 2.87 1.75 114 TO_MALFORMED 6308 1.31 0.02 1.75 115 HTML_FONT_FACE_BAD 6242 1.52 0.90 1.73 116 XM_SPF_SoftFail 6194 2.24 3.80 1.71 117 TR_Symld_Words 6160 1.68 1.59 1.71 118 KHOP_HELO_FCRDNS 6076 3.38 8.42 1.68 119 XM_CamelCaseFrm001 6055 1.78 2.08 1.68 120 XM_DK_Undo_01 5957 1.80 2.23 1.65 121 URI_HEX 5847 1.86 2.57 1.62 122 XM_UB50 5479 2.72 6.30 1.52 123 TVD_RCVD_IP 5461 1.17 0.17 1.51 124 HELO_NODOT 5449 1.48 1.39 1.51 125 HELO_NO_DOMAIN 5447 1.48 1.39 1.51 126 BOTNET 5416 4.88 14.89 1.50 127 TooManyTo_003 5265 1.33 0.97 1.46 128 SUBJ_ALL_CAPS 5183 1.43 1.42 1.44 129 T_XMDrugObfuBody_08 5063 1.79 2.93 1.40 130 XMGappySubj_01 4945 1.07 0.20 1.37 131 TR_XM_SpammyWords5 4618 1.71 2.97 1.28 132 T_XMDrugObfuBody_00 4591 1.52 2.26 1.27 133 TVD_SPACE_RATIO_MINFP 4579 0.96 0.04 1.27 134 TM2_M_VERY_LONG_WORD 4450 1.46 2.13 1.23 135 XM_GoogleGroups 4408 1.07 0.64 1.22 136 XMCapTrack 4307 1.10 0.84 1.19 137 XMDiploma_00 4286 1.66 3.05 1.19 138 XMStockSpam_06 4157 1.23 1.46 1.15 139 XM_B_COVIDMETA 4029 1.73 3.55 1.12 140 URI_TRY_3LD 4019 1.17 1.35 1.11 141 RELAYCOUNTRY_GB 3823 1.03 0.94 1.06 142 TooManyTo_004 3624 0.96 0.84 1.00 143 TR_XM_SpammyWords2 3573 3.48 10.85 0.99 144 DIET_1 3529 1.23 1.98 0.98 145 XM_H_Long_From02 3421 1.07 1.42 0.95 146 DKIM_ADSP_CUSTOM_MED 3420 0.95 0.97 0.95 147 XM_ProductURIs 3386 1.06 1.40 0.94 148 XMBSHREFv2 3362 0.78 0.33 0.93 149 XMHTML_After_End 3344 0.92 0.88 0.93 150 XM_DIRTYINTL 3331 1.50 3.21 0.92 151 XM_OfRef6 3301 1.44 2.99 0.91 152 T_FILL_THIS_FORM_SHORT 3260 1.04 1.45 0.90 153 RELAYCOUNTRY_CA 3240 1.84 4.65 0.90 154 XMBrknScrpt_02 3179 1.03 1.48 0.88 155 XMSolicitRefs_0 3020 0.75 0.51 0.84 156 T_TooManySym_03 3000 0.69 0.26 0.83 157 RELAYCOUNTRY_FR 2883 0.83 0.93 0.80 158 TooManyTo_005 2865 0.78 0.74 0.79 159 XMBody_95 2703 0.62 0.23 0.75 160 XMGenDplmaNmb 2692 1.10 2.14 0.75 161 TR_MetaPhish_Combo_01 2677 0.79 0.92 0.74 162 RELAYCOUNTRY_DE 2649 0.86 1.24 0.73 163 SpammyFromTLD_01 2648 1.34 3.15 0.73 164 FROM_GOV_DKIM_AU 2630 0.59 0.17 0.73 165 T_OBFU_PDF_ATTACH 2572 0.57 0.14 0.71 166 HTTPS_HTTP_MISMATCH 2499 0.88 1.42 0.69 167 XMBounce_01 2488 0.55 0.14 0.69 168 XMBdyGiftCard01 2458 0.79 1.13 0.68 169 XM_SPF_Unknown 2416 0.68 0.71 0.67 170 HELO_MISC_IP 2301 0.53 0.19 0.64 171 MSGID_FROM_MTA_HEADER 2227 0.53 0.27 0.62 172 TR_MSPIKEBAYES00 2215 0.46 0.02 0.61 173 TM2_M_BODY_EMPTY 2214 0.48 0.08 0.61 174 NML_ADSP_CUSTOM_MED 2213 0.64 0.74 0.61 175 XMSexyCombo_01 2212 0.99 2.10 0.61 176 RCVD_IN_BL_SPAMCOP_NET 2156 2.45 7.92 0.60 177 XMPhish30 2102 0.82 1.53 0.58 178 SpammyFromTLD_02 2053 3.38 11.70 0.57 179 XM_H_PHPMailer 2001 0.70 1.13 0.55 180 XM_B_COPY_HTML 1933 0.54 0.56 0.54 181 XM_D_tchamptons_WL 1880 0.39 0.00 0.52 182 XM_ShortIntro_01 1837 0.51 0.51 0.51 183 RCVD_IN_SORBS_DUL 1830 0.49 0.46 0.51 184 RCVD_IN_MSPIKE_BL 1828 1.71 5.28 0.51 185 TR_XM_MSPIKECOMBO 1785 1.69 5.22 0.49 186 XMHTMLBadTable_001 1775 0.53 0.63 0.49 187 FORGED_GMAIL_RCVD 1770 0.59 0.87 0.49 188 T_MANY_PILL_PRICE 1767 0.37 0.00 0.49 189 TVD_SPACE_RATIO 1767 0.38 0.06 0.49 190 HTML_TAG_BALANCE_BODY 1762 0.54 0.69 0.49 191 TM2_M_A_HREF_HREF 1713 0.56 0.81 0.47 192 FROM_GOV_SPOOF 1712 0.39 0.15 0.47 193 USER_IN_WHITELIST 1652 0.34 0.00 0.46 194 USER_IN_WELCOMELIST 1652 0.34 0.00 0.46 195 MISSING_HEADERS 1638 0.47 0.52 0.45 196 XMMoneyMeta_00 1611 0.64 1.22 0.45 197 XMLngstWrd_00 1606 0.42 0.36 0.44 198 HTML_IMAGE_ONLY_32 1600 0.40 0.29 0.44 199 XM_B_REG_HTML 1569 0.53 0.81 0.43 200 XMSubMetaSxObfu_02 1551 0.42 0.40 0.43 ----------------------------------------------------------------------