Email: 564715 Autolearn: 0 AvgScore: 0.35 AvgScanTime: 1.56 sec Spam: 125678 Autolearn: 0 AvgScore: 13.97 AvgScanTime: 1.85 sec Ham: 439037 Autolearn: 0 AvgScore: -3.55 AvgScanTime: 1.48 sec Time Spent Running SA: 244.73 hours Time Spent Processing Spam: 64.48 hours Time Spent Processing Ham: 180.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 118076 89.68 93.95 88.45 2 DKIM_SIGNED 107228 67.49 85.32 62.39 3 XM_DK_Pass 102240 65.52 81.35 60.99 4 RELAYCOUNTRY_US 99177 81.57 78.91 82.33 5 DKIM_VALID 99083 63.47 78.84 59.06 6 XM_B_Unicode 97540 74.19 77.61 73.21 7 DCC_CHECK 97039 44.31 77.21 34.90 8 XMListUnsubscribeExists 89146 47.21 70.93 40.41 9 XM_B_SpammyWords 85209 48.08 67.80 42.44 10 DKIM_VALID_AU 75644 48.81 60.19 45.56 11 XM_B_Unicode3 55410 45.01 44.09 45.27 12 BAYES_50 54358 49.78 43.25 51.65 13 XM_DK_Undo_02 52171 13.50 41.51 5.48 14 XM_B_SpammyWords2 46726 20.59 37.18 15.84 15 LOC_TINY_FONT_1 46474 23.40 36.98 19.52 16 TR_XM_DKIM_Undo 41870 10.56 33.32 4.04 17 HTML_FONT_LOW_CONTRAST 39402 25.43 31.35 23.73 18 BAYES_99 38134 9.73 30.34 3.83 19 DKIM_VALID_EF 37619 24.23 29.93 22.60 20 FVGT_m_MULTI_ODD 37522 22.59 29.86 20.51 21 T_KAM_HTML_FONT_INVALID 37310 19.06 29.69 16.02 22 MIME_HTML_ONLY 35995 25.11 28.64 24.10 23 XMSubLong 32732 21.95 26.04 20.77 24 RCVD_IN_MSPIKE_H2 32266 19.61 25.67 17.88 25 TR_DCC_Bayes_99 30499 6.69 24.27 1.66 26 BAYES_999 30155 7.68 23.99 3.01 27 DCC_CHECK_NEGATIVE 28597 55.65 22.75 65.06 28 T_TM2_M_HEADER_IN_MSG 28098 24.86 22.36 25.58 29 XM_Body_Dirty_Words 26159 12.36 20.81 9.94 30 RELAYCOUNTRY_META 25512 6.80 20.30 2.94 31 RCVD_IN_MSPIKE_WL 25079 23.27 19.95 24.22 32 XM_Multi_Part_URI 19871 11.48 15.81 10.24 33 LOTS_OF_MONEY 18891 8.22 15.03 6.26 34 FSL_BULK_SIG 18345 9.17 14.60 7.62 35 BOTNET_IPINHOSTNAME 17804 6.05 14.17 3.73 36 UNTRUSTED_Relay 17241 3.81 13.72 0.97 37 BOTNET 16379 4.05 13.03 1.48 38 TR_XM_SpammyWords4 15630 5.74 12.44 3.82 39 TR_XM_SpammyRelay 15560 3.66 12.38 1.17 40 UNPARSEABLE_RELAY 15124 7.99 12.03 6.84 41 XM_B_Unsub 15106 10.11 12.02 9.57 42 XM_UncommonTLD01 14548 4.75 11.58 2.80 43 TR_XM_UnparsRelay 14507 6.77 11.54 5.41 44 XM_B_SpammyWords3 14476 5.16 11.52 3.34 45 RCVD_IN_MSPIKE_H3 14464 12.47 11.51 12.74 46 TR_XM_SpammyWords2 13822 3.01 11.00 0.72 47 XM_Evil_Numbers_Gen 13341 9.16 10.62 8.75 48 MPART_ALT_DIFF 12495 10.97 9.94 11.27 49 RCVD_IN_BL_SPAMCOP_NET 11799 2.66 9.39 0.73 50 XM_SendGrid 11414 6.50 9.08 5.76 51 XMSexyCombo_05 11295 4.37 8.99 3.05 52 HTML_IMAGE_RATIO_02 10904 5.92 8.68 5.13 53 LotsOfNums_01 10413 7.99 8.29 7.90 54 RCVD_IN_MSPIKE_H4 10172 9.31 8.09 9.65 55 BAYES_80 9699 4.55 7.72 3.65 56 BAYES_60 9323 7.70 7.42 7.78 57 TR_XM_PhishingBody 8379 3.53 6.67 2.64 58 DKIM_INVALID 8145 4.03 6.48 3.33 59 XMSubMetaSx_00 7965 3.88 6.34 3.17 60 SpammyFromTLD_02 7847 1.67 6.24 0.36 61 XM_B_Phish_Phrases 7832 3.84 6.23 3.16 62 XM_B_Investor 7807 2.38 6.21 1.29 63 TooManyTo_001 7793 7.14 6.20 7.41 64 XM_UB50 7504 1.80 5.97 0.61 65 MIME_HTML_MOSTLY 7501 3.09 5.97 2.27 66 RCVD_IN_MSPIKE_BL 7344 1.86 5.84 0.71 67 TR_XM_MSPIKECOMBO 7336 1.85 5.84 0.71 68 XM_H_Long_From01 7238 4.80 5.76 4.52 69 HTML_MIME_NO_HTML_TAG 7064 2.82 5.62 2.02 70 TR_XM_DK_SendGrid 6700 4.04 5.33 3.67 71 XMStrtUSub 6446 10.01 5.13 11.41 72 RELAYCOUNTRY_CA 6259 1.63 4.98 0.67 73 TR_XM_SPAMCOP 6247 1.42 4.97 0.40 74 MIME_HTML_ONLY_MULTI 6025 8.39 4.79 9.42 75 T_REMOTE_IMAGE 5941 3.41 4.73 3.03 76 KHOP_HELO_FCRDNS 5798 2.10 4.61 1.39 77 HTML_IMAGE_RATIO_04 5661 15.01 4.50 18.02 78 XM_SPF_SoftFail 5625 2.40 4.48 1.80 79 URI_NOVOWEL 5520 2.74 4.39 2.26 80 RCVD_IN_VALIDITY_SAFE 5471 4.92 4.35 5.09 81 XMNumbers 5440 3.57 4.33 3.35 82 MIME_QP_LONG_LINE 5436 4.81 4.33 4.95 83 RELAYCOUNTRY_FR 5375 1.08 4.28 0.16 84 TR_XM_MaxUnsub 5284 1.58 4.20 0.83 85 TM2_M_VERY_LONG_WORD 5148 1.88 4.10 1.25 86 TM2_M_URI_OPT_OUT 5125 3.41 4.08 3.22 87 XM_OfRef6 4991 1.51 3.97 0.80 88 BAYES_95 4890 2.54 3.89 2.15 89 TR_XM_SpammyWords5 4810 1.91 3.83 1.36 90 RCVD_IN_VALIDITY_CERTIFIED 4606 4.46 3.66 4.69 91 SUBJ_ALL_CAPS 4379 1.87 3.48 1.40 92 SpammyFromTLD_01 4360 1.26 3.47 0.63 93 XM_B_Phish66 4352 2.02 3.46 1.61 94 XMDiploma_00 4244 1.75 3.38 1.29 95 T_FILL_THIS_FORM_SHORT 4243 1.31 3.38 0.72 96 XM_B_SpammyTLD 4145 2.19 3.30 1.87 97 HTML_IMAGE_RATIO_06 4101 5.11 3.26 5.64 98 T_XMDrugObfuBody_08 4069 1.84 3.24 1.44 99 HTML_IMAGE_ONLY_08 3803 0.73 3.03 0.08 100 T_XMDrugObfuBody_14 3802 2.12 3.03 1.86 101 XMBody_17 3722 0.91 2.96 0.32 102 TR_XM_SpammyWords3 3671 0.92 2.92 0.34 103 XM_UB99 3545 0.63 2.82 0.00 104 RCVD_IN_VALIDITY_RPBL 3518 0.67 2.80 0.06 105 T_TooManySym_01 3479 4.42 2.77 4.89 106 HTML_TAG_BALANCE_CENTER 3364 0.66 2.68 0.08 107 XM_DK_Undo_01 3309 1.72 2.63 1.46 108 RCVD_IN_MSPIKE_L5 3253 0.70 2.59 0.16 109 RCVD_IN_IADB_LISTED 3229 3.79 2.57 4.14 110 BAYES_40 3212 4.82 2.56 5.46 111 BOTNET_NORDNS 3165 0.57 2.52 0.01 112 HTML_IMAGE_RATIO_08 3097 2.09 2.46 1.99 113 XM_UB999 3075 0.55 2.45 0.00 114 XM_DIRTYINTL 3046 0.74 2.42 0.26 115 XM_B_Unsub2 3036 1.65 2.42 1.43 116 MIXED_CENTER_CASE 2995 0.53 2.38 0.00 117 MIXED_HREF_CASE 2986 0.53 2.38 0.00 118 MIXED_FONT_CASE 2983 0.53 2.37 0.00 119 MIXED_IMG_CASE 2982 0.53 2.37 0.00 120 MIXED_AREA_CASE 2980 0.53 2.37 0.00 121 TR_XM_FormFill 2978 0.55 2.37 0.02 122 XM_B_COVIDMETA 2876 1.08 2.29 0.74 123 RCVD_IN_IADB_SPF 2812 3.34 2.24 3.65 124 JH_SPAMMY_HEADERS 2792 0.50 2.22 0.00 125 MAILING_LIST_MULTI 2776 2.16 2.21 2.14 126 XM_B_SpammyWords4 2721 0.80 2.17 0.41 127 ALL_TRUSTED 2715 12.78 2.16 15.82 128 RCVD_IN_MSPIKE_L3 2660 0.69 2.12 0.28 129 RCVD_IN_IADB_DK 2626 2.94 2.09 3.18 130 XMBdyGiftCard01 2615 1.07 2.08 0.79 131 TR_XM_SB_Phish 2586 2.01 2.06 2.00 132 XM_CamelCaseFrm001 2583 1.60 2.06 1.47 133 RCVD_IN_IADB_SENDERID 2579 3.02 2.05 3.29 134 XM_URI_RBL 2570 0.53 2.04 0.10 135 BODY_URI_ONLY 2565 0.46 2.04 0.01 136 T_Symld_Words_02 2524 0.76 2.01 0.41 137 HTML_FONT_TINY_NORDNS 2516 0.56 2.00 0.15 138 T_XMDrugObfuBody_00 2488 0.93 1.98 0.63 139 BAYES_20 2476 4.27 1.97 4.92 140 XMSubPhish11 2459 1.97 1.96 1.97 141 XMStockSpam_06 2454 1.28 1.95 1.08 142 TR_XM_PHPDW 2452 0.81 1.95 0.48 143 XM_GoogleGroups 2403 1.36 1.91 1.20 144 HTML_FONT_SIZE_HUGE 2379 0.45 1.89 0.04 145 TM2_M_A_HREF_HREF 2359 0.64 1.88 0.28 146 TR_XM_PHPForged 2359 0.76 1.88 0.44 147 RCVD_IN_PSBL 2353 0.45 1.87 0.04 148 USER_IN_DEF_DKIM_WL 2344 8.45 1.87 10.33 149 TR_XM_FormFill2 2330 0.76 1.85 0.44 150 XM_H_PHPOS 2313 0.74 1.84 0.43 151 XMGenDplmaNmb 2292 0.92 1.82 0.66 152 TR_Symld_Words 2239 1.59 1.78 1.54 153 URIBL_BLACK 2211 0.42 1.76 0.04 154 TR_Caps_n_Bayes_99 2201 0.45 1.75 0.07 155 FROM_EXCESS_BASE64 2189 2.34 1.74 2.52 156 TR_XM_COVIDMETA4 2126 0.64 1.69 0.34 157 XMSexyCombo_01 2123 0.81 1.69 0.56 158 BAYES_00 2120 13.86 1.69 17.35 159 URIBL_DBL_SPAM 2113 0.39 1.68 0.02 160 XM_UB60 2084 0.41 1.66 0.06 161 URI_HEX 2045 1.26 1.63 1.15 162 TR_XM_INV_DKIM 2039 0.43 1.62 0.09 163 XM_OfRef7 2023 0.43 1.61 0.09 164 XMLngstWrd_00 1981 0.92 1.58 0.73 165 TR_XM_NoHeaderRelay 1947 0.46 1.55 0.15 166 XM_ShortIntro_01 1934 0.75 1.54 0.52 167 XMLngstWrd_01 1926 0.86 1.53 0.67 168 TR_LOTS_OF_MONEY3 1913 0.63 1.52 0.37 169 T_XMHurry_00 1907 0.69 1.52 0.45 170 LOADSA_MONEY_COMBO 1861 0.36 1.48 0.04 171 HTML_FONT_SIZE_LARGE 1853 0.40 1.47 0.09 172 URI_GOOG_STO_SPAMMY 1841 0.33 1.46 0.00 173 TR_XM_COVIDMETA1 1824 0.47 1.45 0.19 174 DIET_1 1818 0.53 1.45 0.27 175 XMLngstWrd_02 1817 0.77 1.45 0.57 176 XMBrknScrpt_02 1805 0.93 1.44 0.79 177 GOOG_STO_IMG_HTML 1758 0.31 1.40 0.00 178 XMLngstWrd_03 1754 0.69 1.40 0.49 179 XMPhish30 1747 0.71 1.39 0.51 180 XMSubMetaI_00 1725 0.70 1.37 0.50 181 RCVD_IN_IADB_VOUCHED 1715 2.17 1.36 2.40 182 XMLngstWrd_04 1699 0.62 1.35 0.41 183 DKIM_ADSP_CUSTOM_MED 1696 0.95 1.35 0.83 184 XMHTML_After_End 1678 0.76 1.34 0.60 185 HTML_TITLE_SUBJ_DIFF 1655 0.43 1.32 0.18 186 UPPERCASE_75_100 1581 0.40 1.26 0.16 187 NML_ADSP_CUSTOM_MED 1537 0.69 1.22 0.54 188 FORGED_GMAIL_RCVD 1531 0.62 1.22 0.45 189 URI_TRY_3LD 1515 0.71 1.21 0.57 190 XMSlimDrugH 1511 0.41 1.20 0.18 191 RELAYCOUNTRY_IN 1499 0.32 1.19 0.08 192 HTTPS_HTTP_MISMATCH 1483 0.76 1.18 0.64 193 XM_RXBody 1471 0.86 1.17 0.78 194 BAYES_05 1459 2.75 1.16 3.21 195 XM_Combo_Sbj 1438 0.41 1.14 0.21 196 XM_H_Undi_Recip 1434 0.36 1.14 0.14 197 XMMoneyMeta_00 1431 0.59 1.14 0.43 198 RCVD_IN_MSPIKE_L4 1423 0.45 1.13 0.26 199 RELAYCOUNTRY_AU 1419 0.47 1.13 0.28 200 TR_Mismatch_TLD_01 1408 0.45 1.12 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 388348 89.68 93.95 88.45 2 RELAYCOUNTRY_US 361439 81.57 78.91 82.33 3 XM_B_Unicode 321427 74.19 77.61 73.21 4 DCC_CHECK_NEGATIVE 285658 55.65 22.75 65.06 5 DKIM_SIGNED 273923 67.49 85.32 62.39 6 XM_DK_Pass 267753 65.52 81.35 60.99 7 DKIM_VALID 259314 63.47 78.84 59.06 8 BAYES_50 226749 49.78 43.25 51.65 9 DKIM_VALID_AU 200013 48.81 60.19 45.56 10 XM_B_Unicode3 198752 45.01 44.09 45.27 11 XM_B_SpammyWords 186328 48.08 67.80 42.44 12 XMListUnsubscribeExists 177429 47.21 70.93 40.41 13 DCC_CHECK 153213 44.31 77.21 34.90 14 T_TM2_M_HEADER_IN_MSG 112314 24.86 22.36 25.58 15 RCVD_IN_MSPIKE_WL 106345 23.27 19.95 24.22 16 MIME_HTML_ONLY 105787 25.11 28.64 24.10 17 HTML_FONT_LOW_CONTRAST 104199 25.43 31.35 23.73 18 DKIM_VALID_EF 99212 24.23 29.93 22.60 19 XMSubLong 91205 21.95 26.04 20.77 20 FVGT_m_MULTI_ODD 90046 22.59 29.86 20.51 21 LOC_TINY_FONT_1 85692 23.40 36.98 19.52 22 HTML_IMAGE_RATIO_04 79125 15.01 4.50 18.02 23 RCVD_IN_MSPIKE_H2 78489 19.61 25.67 17.88 24 BAYES_00 76169 13.86 1.69 17.35 25 XM_H_Trusted_IP 72411 12.82 0.00 16.49 26 HTML_FONT_FACE_BAD 71382 12.83 0.84 16.26 27 T_KAM_HTML_FONT_INVALID 70331 19.06 29.69 16.02 28 XM_B_SpammyWords2 69528 20.59 37.18 15.84 29 ALL_TRUSTED 69454 12.78 2.16 15.82 30 RCVD_IN_MSPIKE_H3 55948 12.47 11.51 12.74 31 XMStrtUSub 50082 10.01 5.13 11.41 32 MPART_ALT_DIFF 49475 10.97 9.94 11.27 33 USER_IN_DEF_DKIM_WL 45360 8.45 1.87 10.33 34 XM_Multi_Part_URI 44962 11.48 15.81 10.24 35 XM_Body_Dirty_Words 43619 12.36 20.81 9.94 36 RCVD_IN_MSPIKE_H4 42384 9.31 8.09 9.65 37 XM_B_Unsub 42011 10.11 12.02 9.57 38 MIME_HTML_ONLY_MULTI 41350 8.39 4.79 9.42 39 XM_Evil_Numbers_Gen 38396 9.16 10.62 8.75 40 LotsOfNums_01 34701 7.99 8.29 7.90 41 BAYES_60 34157 7.70 7.42 7.78 42 FSL_BULK_SIG 33460 9.17 14.60 7.62 43 TooManyTo_001 32529 7.14 6.20 7.41 44 UNPARSEABLE_RELAY 30012 7.99 12.03 6.84 45 XM_DKIMWhitelistDomains 29884 5.30 0.05 6.81 46 TR_XM_DK_Bayes 27862 5.13 0.88 6.35 47 LOTS_OF_MONEY 27502 8.22 15.03 6.26 48 TR_XM_DK_Bayes1 26963 4.96 0.83 6.14 49 XM_SendGrid 25290 6.50 9.08 5.76 50 IN_ZIMBRA_NJ_WHITELIST 24943 4.44 0.11 5.68 51 HTML_IMAGE_RATIO_06 24741 5.11 3.26 5.64 52 XM_DK_Undo_02 24073 13.50 41.51 5.48 53 BAYES_40 23993 4.82 2.56 5.46 54 TR_XM_UnparsRelay 23748 6.77 11.54 5.41 55 TR_XM_DK_Bayes2 23318 4.27 0.65 5.31 56 HTML_IMAGE_RATIO_02 22515 5.92 8.68 5.13 57 XMSubNoVowel 22424 4.11 0.63 5.11 58 RCVD_IN_VALIDITY_SAFE 22337 4.92 4.35 5.09 59 MIME_QP_LONG_LINE 21735 4.81 4.33 4.95 60 BAYES_20 21621 4.27 1.97 4.92 61 T_TooManySym_01 21472 4.42 2.77 4.89 62 RCVD_IN_VALIDITY_CERTIFIED 20592 4.46 3.66 4.69 63 XM_H_Long_From01 19851 4.80 5.76 4.52 64 ANY_BOUNCE_MESSAGE 18864 3.48 0.64 4.30 65 BOUNCE_MESSAGE 18862 3.48 0.64 4.30 66 RCVD_IN_IADB_LISTED 18189 3.79 2.57 4.14 67 TR_XM_DKIM_Undo 17737 10.56 33.32 4.04 68 XM_PDF 17436 3.29 0.89 3.97 69 BAYES_99 16802 9.73 30.34 3.83 70 TR_XM_SpammyWords4 16781 5.74 12.44 3.82 71 BOTNET_IPINHOSTNAME 16361 6.05 14.17 3.73 72 TR_XM_DK_SendGrid 16110 4.04 5.33 3.67 73 RCVD_IN_IADB_SPF 16045 3.34 2.24 3.65 74 BAYES_80 16004 4.55 7.72 3.65 75 XMNumbers 14714 3.57 4.33 3.35 76 XM_B_SpammyWords3 14673 5.16 11.52 3.34 77 DKIM_INVALID 14609 4.03 6.48 3.33 78 RCVD_IN_IADB_SENDERID 14455 3.02 2.05 3.29 79 TM2_M_URI_OPT_OUT 14120 3.41 4.08 3.22 80 BAYES_05 14085 2.75 1.16 3.21 81 RCVD_IN_IADB_DK 13961 2.94 2.09 3.18 82 XMSubMetaSx_00 13920 3.88 6.34 3.17 83 XM_B_Phish_Phrases 13860 3.84 6.23 3.16 84 XMSexyCombo_05 13407 4.37 8.99 3.05 85 T_REMOTE_IMAGE 13322 3.41 4.73 3.03 86 BAYES_999 13215 7.68 23.99 3.01 87 RELAYCOUNTRY_META 12909 6.80 20.30 2.94 88 XM_UncommonTLD01 12277 4.75 11.58 2.80 89 TR_XM_PhishingBody 11569 3.53 6.67 2.64 90 T_TooManySym_02 11354 2.17 0.73 2.59 91 FROM_EXCESS_BASE64 11052 2.34 1.74 2.52 92 RCVD_IN_IADB_VOUCHED 10520 2.17 1.36 2.40 93 MIME_HTML_MOSTLY 9957 3.09 5.97 2.27 94 URI_NOVOWEL 9925 2.74 4.39 2.26 95 BAYES_95 9450 2.54 3.89 2.15 96 MAILING_LIST_MULTI 9398 2.16 2.21 2.14 97 XMSubGarbage 9313 1.66 0.03 2.12 98 XMSubLongNoVowel 9068 1.63 0.11 2.07 99 HTML_MIME_NO_HTML_TAG 8847 2.82 5.62 2.02 100 TR_XM_SB_Phish 8783 2.01 2.06 2.00 101 HTML_IMAGE_RATIO_08 8721 2.09 2.46 1.99 102 XMSubPhish11 8651 1.97 1.96 1.97 103 TooManyTo_002 8497 1.73 1.01 1.94 104 XM_B_SpammyTLD 8196 2.19 3.30 1.87 105 T_XMDrugObfuBody_14 8177 2.12 3.03 1.86 106 RCVD_IN_MSPIKE_H5 8013 1.50 0.35 1.83 107 XM_SPF_SoftFail 7910 2.40 4.48 1.80 108 TR_DCC_Bayes_99 7301 6.69 24.27 1.66 109 IN_HORDE_ADDRESS_BOOK 7145 1.29 0.10 1.63 110 XM_B_Phish66 7067 2.02 3.46 1.61 111 HELO_NODOT 6835 1.36 0.69 1.56 112 HELO_NO_DOMAIN 6833 1.36 0.69 1.56 113 INVALID_MSGID 6812 1.24 0.14 1.55 114 RCVD_IN_IADB_OPTIN 6795 1.41 0.93 1.55 115 TR_Symld_Words 6749 1.59 1.78 1.54 116 BOTNET 6492 4.05 13.03 1.48 117 XM_CamelCaseFrm001 6474 1.60 2.06 1.47 118 XM_DK_Undo_01 6406 1.72 2.63 1.46 119 T_XMDrugObfuBody_08 6321 1.84 3.24 1.44 120 MSGID_NOFQDN1 6318 1.13 0.06 1.44 121 XM_B_Unsub2 6279 1.65 2.42 1.43 122 SUBJ_ALL_CAPS 6158 1.87 3.48 1.40 123 KHOP_HELO_FCRDNS 6089 2.10 4.61 1.39 124 TO_MALFORMED 6043 1.07 0.01 1.38 125 TR_XM_SpammyWords5 5953 1.91 3.83 1.36 126 XM_E_Blogspot 5769 1.08 0.25 1.31 127 TVD_RCVD_IP 5736 1.06 0.21 1.31 128 XMDiploma_00 5650 1.75 3.38 1.29 129 XM_B_Investor 5647 2.38 6.21 1.29 130 TooManyTo_003 5561 1.16 0.80 1.27 131 TM2_M_VERY_LONG_WORD 5477 1.88 4.10 1.25 132 XM_H_Long_From02 5316 1.13 0.84 1.21 133 XM_GoogleGroups 5281 1.36 1.91 1.20 134 TR_XM_SpammyRelay 5117 3.66 12.38 1.17 135 URI_HEX 5060 1.26 1.63 1.15 136 XMGappySubj_01 5008 0.92 0.16 1.14 137 XMStockSpam_06 4756 1.28 1.95 1.08 138 RCVD_IN_RP_SAFE 4472 0.99 0.87 1.02 139 XMCapTrack 4312 0.86 0.41 0.98 140 UNTRUSTED_Relay 4249 3.81 13.72 0.97 141 RCVD_IN_RP_CERTIFIED 4115 0.88 0.70 0.94 142 TooManyTo_004 3939 0.83 0.60 0.90 143 TVD_SPACE_RATIO 3887 0.77 0.35 0.89 144 XMBSHREFv2 3846 0.76 0.38 0.88 145 DKIM_ADSP_CUSTOM_MED 3643 0.95 1.35 0.83 146 TR_XM_MaxUnsub 3625 1.58 4.20 0.83 147 XM_OfRef6 3526 1.51 3.97 0.80 148 XMBrknScrpt_02 3472 0.93 1.44 0.79 149 XMBdyGiftCard01 3448 1.07 2.08 0.79 150 XM_RXBody 3412 0.86 1.17 0.78 151 XM_B_COVIDMETA 3247 1.08 2.29 0.74 152 RCVD_IN_BL_SPAMCOP_NET 3214 2.66 9.39 0.73 153 XMLngstWrd_00 3205 0.92 1.58 0.73 154 TooManyTo_005 3179 0.68 0.53 0.72 155 T_FILL_THIS_FORM_SHORT 3171 1.31 3.38 0.72 156 TR_XM_SpammyWords2 3159 3.01 11.00 0.72 157 HTML_IMAGE_ONLY_20 3145 0.62 0.26 0.72 158 RCVD_IN_MSPIKE_BL 3134 1.86 5.84 0.71 159 TR_XM_MSPIKECOMBO 3103 1.85 5.84 0.71 160 TR_MetaPhish_Combo_01 3057 0.70 0.72 0.70 161 T_TooManySym_03 2996 0.59 0.28 0.68 162 XMLngstWrd_01 2948 0.86 1.53 0.67 163 RELAYCOUNTRY_CA 2922 1.63 4.98 0.67 164 XMGenDplmaNmb 2912 0.92 1.82 0.66 165 XM_USANA_RCVD 2911 0.52 0.00 0.66 166 FROM_GOV_DKIM_AU 2860 0.61 0.48 0.65 167 RELAYCOUNTRY_GB 2816 0.74 1.09 0.64 168 HTTPS_HTTP_MISMATCH 2810 0.76 1.18 0.64 169 T_XMDrugObfuBody_00 2786 0.93 1.98 0.63 170 SpammyFromTLD_01 2750 1.26 3.47 0.63 171 XM_UB50 2668 1.80 5.97 0.61 172 XMHTML_After_End 2633 0.76 1.34 0.60 173 XM_ProductURIs 2575 0.64 0.81 0.59 174 XMLngstWrd_02 2514 0.77 1.45 0.57 175 XMBody_95 2505 0.50 0.27 0.57 176 URI_TRY_3LD 2483 0.71 1.21 0.57 177 TR_MSPIKEBAYES00 2466 0.45 0.05 0.56 178 XMSexyCombo_01 2463 0.81 1.69 0.56 179 XMNoVowels 2371 0.60 0.80 0.54 180 XM_B_COPY_HTML 2359 0.57 0.68 0.54 181 NML_ADSP_CUSTOM_MED 2359 0.69 1.22 0.54 182 T_OBFU_PDF_ATTACH 2320 0.44 0.14 0.53 183 XM_ShortIntro_01 2276 0.75 1.54 0.52 184 XMPhish30 2252 0.71 1.39 0.51 185 XMSubMetaI_00 2211 0.70 1.37 0.50 186 RCVD_IN_SORBS_DUL 2177 0.44 0.26 0.50 187 DKIM_ADSP_NXDOMAIN 2174 0.46 0.33 0.50 188 XMLngstWrd_03 2142 0.69 1.40 0.49 189 TR_XM_PHPDW 2105 0.81 1.95 0.48 190 HTML_TAG_BALANCE_BODY 2032 0.57 0.93 0.46 191 T_XMHurry_00 1978 0.69 1.52 0.45 192 FORGED_GMAIL_RCVD 1969 0.62 1.22 0.45 193 SHORT_URI_2 1964 0.43 0.38 0.45 194 SHORT_HELO_AND_INLINE_IMAGE 1958 0.37 0.11 0.45 195 TR_XM_FormFill2 1946 0.76 1.85 0.44 196 NO_DNS_FOR_FROM 1936 0.44 0.42 0.44 197 TR_XM_PHPForged 1933 0.76 1.88 0.44 198 XMHTMLBadTable_001 1932 0.51 0.74 0.44 199 XMMoneyMeta_00 1888 0.59 1.14 0.43 200 XM_H_PHPOS 1887 0.74 1.84 0.43 ----------------------------------------------------------------------