Email: 575356 Autolearn: 0 AvgScore: 0.14 AvgScanTime: 1.58 sec Spam: 122371 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.88 sec Ham: 452985 Autolearn: 0 AvgScore: -3.56 AvgScanTime: 1.50 sec Time Spent Running SA: 252.35 hours Time Spent Processing Spam: 63.83 hours Time Spent Processing Ham: 188.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 117497 90.33 96.02 88.79 2 DKIM_SIGNED 101926 65.34 83.29 60.49 3 XM_DK_Pass 98102 63.53 80.17 59.03 4 DKIM_VALID 94660 61.41 77.35 57.10 5 RELAYCOUNTRY_US 91718 80.16 74.95 81.57 6 XM_B_Unicode 90296 72.39 73.79 72.01 7 DCC_CHECK 87924 38.94 71.85 30.05 8 XMListUnsubscribeExists 86000 45.12 70.28 38.32 9 XM_B_SpammyWords 83170 48.77 67.97 43.59 10 DKIM_VALID_AU 70496 45.71 57.61 42.49 11 BAYES_50 56510 50.12 46.18 51.18 12 XM_B_Unicode3 49670 44.16 40.59 45.13 13 XM_DK_Undo_02 47973 12.51 39.20 5.30 14 LOC_TINY_FONT_1 44469 23.15 36.34 19.59 15 XM_B_SpammyWords2 43176 19.46 35.28 15.19 16 MIME_HTML_ONLY 40835 25.74 33.37 23.68 17 TR_XM_DKIM_Undo 39180 9.78 32.02 3.77 18 HTML_FONT_LOW_CONTRAST 38703 25.16 31.63 23.41 19 T_KAM_HTML_FONT_INVALID 38247 18.77 31.25 15.39 20 DKIM_VALID_EF 36881 24.23 30.14 22.63 21 FVGT_m_MULTI_ODD 34903 20.84 28.52 18.76 22 DCC_CHECK_NEGATIVE 34399 61.02 28.11 69.92 23 BAYES_99 33014 8.77 26.98 3.85 24 XMSubLong 30910 20.60 25.26 19.34 25 RELAYCOUNTRY_META 30581 7.91 24.99 3.30 26 RCVD_IN_MSPIKE_H2 29247 18.86 23.90 17.50 27 T_TM2_M_HEADER_IN_MSG 27260 26.57 22.28 27.72 28 XM_Body_Dirty_Words 26045 12.42 21.28 10.03 29 BAYES_999 25355 6.83 20.72 3.07 30 TR_DCC_Bayes_99 23902 5.24 19.53 1.37 31 RCVD_IN_MSPIKE_WL 23181 23.49 18.94 24.72 32 XM_Multi_Part_URI 22032 11.67 18.00 9.96 33 UNTRUSTED_Relay 20738 4.48 16.95 1.11 34 BOTNET 19257 4.52 15.74 1.49 35 TR_XM_SpammyRelay 17788 4.13 14.54 1.32 36 XM_UncommonTLD01 16516 5.08 13.50 2.81 37 BOTNET_IPINHOSTNAME 16289 5.67 13.31 3.60 38 LOTS_OF_MONEY 15708 8.86 12.84 7.78 39 MPART_ALT_DIFF 15495 11.65 12.66 11.38 40 RCVD_IN_MSPIKE_H3 14480 12.68 11.83 12.90 41 XM_B_Unsub 14230 10.44 11.63 10.12 42 XM_B_SpammyWords3 13609 4.77 11.12 3.05 43 FSL_BULK_SIG 13441 6.72 10.98 5.57 44 TR_XM_SpammyWords4 13429 5.96 10.97 4.61 45 UNPARSEABLE_RELAY 12726 7.83 10.40 7.13 46 TR_XM_UnparsRelay 12244 6.49 10.01 5.55 47 XMSexyCombo_05 12153 4.34 9.93 2.83 48 HTML_IMAGE_RATIO_02 11706 6.14 9.57 5.22 49 XM_Evil_Numbers_Gen 11544 8.75 9.43 8.56 50 TR_XM_SpammyWords2 11208 2.45 9.16 0.64 51 XM_UB50 10780 2.43 8.81 0.70 52 RCVD_IN_BL_SPAMCOP_NET 10538 2.40 8.61 0.72 53 MIME_HTML_MOSTLY 10173 3.75 8.31 2.52 54 BAYES_60 9909 7.39 8.10 7.20 55 RCVD_IN_MSPIKE_BL 9300 2.31 7.60 0.88 56 TR_XM_MSPIKECOMBO 9289 2.30 7.59 0.88 57 BAYES_80 9213 4.19 7.53 3.29 58 XM_SendGrid 9123 6.22 7.46 5.89 59 LotsOfNums_01 9009 7.36 7.36 7.36 60 URI_NOVOWEL 8670 3.43 7.09 2.44 61 HTML_MIME_NO_HTML_TAG 8415 3.02 6.88 1.98 62 RCVD_IN_MSPIKE_H4 8241 9.28 6.73 9.97 63 XMSubMetaSx_00 7762 4.25 6.34 3.69 64 SpammyFromTLD_02 7743 1.60 6.33 0.32 65 TR_XM_PhishingBody 7734 3.34 6.32 2.54 66 T_REMOTE_IMAGE 7490 3.71 6.12 3.05 67 DKIM_INVALID 7266 3.93 5.94 3.39 68 TooManyTo_001 7117 7.71 5.82 8.22 69 XM_B_Phish_Phrases 6834 3.32 5.58 2.71 70 XM_B_Investor 6731 2.20 5.50 1.31 71 XM_H_Long_From01 6646 4.90 5.43 4.75 72 T_XMDrugObfuBody_14 6642 2.62 5.43 1.87 73 SpammyFromTLD_01 6624 1.67 5.41 0.66 74 MIME_HTML_ONLY_MULTI 6222 8.46 5.08 9.38 75 XMNumbers 6073 3.59 4.96 3.22 76 RELAYCOUNTRY_CA 5919 1.65 4.84 0.80 77 HTML_IMAGE_RATIO_04 5898 14.33 4.82 16.90 78 TR_XM_SPAMCOP 5738 1.28 4.69 0.35 79 JH_SPAMMY_HEADERS 5505 0.96 4.50 0.00 80 KHOP_HELO_FCRDNS 5387 2.82 4.40 2.40 81 XM_SPF_SoftFail 5203 3.91 4.25 3.81 82 TM2_M_URI_OPT_OUT 5197 4.02 4.25 3.95 83 TR_XM_DK_SendGrid 4838 3.77 3.95 3.72 84 MIME_QP_LONG_LINE 4775 5.46 3.90 5.88 85 TR_XM_SpammyWords3 4701 1.15 3.84 0.43 86 RELAYCOUNTRY_FR 4645 1.01 3.80 0.26 87 RCVD_IN_VALIDITY_SAFE 4577 4.40 3.74 4.58 88 HTML_IMAGE_RATIO_06 4451 4.81 3.64 5.12 89 TR_XM_SpammyWords5 4314 1.67 3.53 1.17 90 HTML_TAG_BALANCE_CENTER 4295 0.79 3.51 0.06 91 TM2_M_VERY_LONG_WORD 4284 1.52 3.50 0.99 92 BAYES_95 4249 2.32 3.47 2.01 93 T_XMDrugObfuBody_08 4199 1.69 3.43 1.22 94 TR_XM_MaxUnsub 4059 1.17 3.32 0.59 95 XM_B_Phish66 4013 1.86 3.28 1.48 96 BODY_URI_ONLY 3950 0.70 3.23 0.01 97 T_TooManySym_01 3919 4.68 3.20 5.08 98 RCVD_IN_VALIDITY_CERTIFIED 3710 3.83 3.03 4.04 99 DIET_1 3704 0.95 3.03 0.39 100 XMStrtUSub 3693 9.44 3.02 11.18 101 XM_B_SpammyTLD 3674 1.96 3.00 1.68 102 XM_OfRef6 3406 1.17 2.78 0.73 103 XM_B_Unsub2 3398 1.46 2.78 1.10 104 URIBL_DBL_SPAM 3375 0.59 2.76 0.01 105 XM_UB60 3344 0.62 2.73 0.05 106 RCVD_IN_IADB_LISTED 3332 4.04 2.72 4.40 107 XMDiploma_00 3319 1.46 2.71 1.12 108 BAYES_40 3311 5.02 2.71 5.64 109 RCVD_IN_MSPIKE_L5 3304 0.74 2.70 0.21 110 RCVD_IN_MSPIKE_L3 3224 0.85 2.63 0.37 111 XM_DIRTYINTL 3210 0.76 2.62 0.26 112 XMSlimDrugH 3199 0.80 2.61 0.31 113 RELAYCOUNTRY_RU 3078 0.56 2.52 0.03 114 HTML_IMAGE_ONLY_20 2972 1.08 2.43 0.72 115 XMSexyCombo_01 2960 1.41 2.42 1.14 116 RCVD_IN_PSBL 2933 0.57 2.40 0.08 117 HTML_IMAGE_ONLY_08 2932 0.58 2.40 0.09 118 ALL_TRUSTED 2928 13.20 2.39 16.12 119 XM_URI_RBL 2892 0.68 2.36 0.23 120 T_FILL_THIS_FORM_SHORT 2876 1.15 2.35 0.83 121 HTML_IMAGE_RATIO_08 2786 3.45 2.28 3.77 122 HTML_SHORT_LINK_IMG_1 2773 0.49 2.27 0.01 123 RCVD_IN_MSPIKE_L4 2761 0.71 2.26 0.30 124 XM_DK_Undo_01 2756 1.55 2.25 1.36 125 XM_CamelCaseFrm001 2753 1.47 2.25 1.25 126 RCVD_IN_IADB_SPF 2751 3.50 2.25 3.84 127 XM_B_COVIDMETA 2722 0.97 2.22 0.63 128 SUBJ_ALL_CAPS 2697 1.99 2.20 1.93 129 ALIBABA_IMG_NOT_RCVD_ALI 2656 0.46 2.17 0.00 130 TR_XM_SB_Phish 2655 1.87 2.17 1.79 131 HOSTED_IMG_DIRECT_MX 2655 0.46 2.17 0.00 132 XMSubPhish11 2619 1.85 2.14 1.78 133 XM_GoogleGroups 2578 1.33 2.11 1.12 134 RCVD_IN_IADB_DK 2534 3.02 2.07 3.28 135 XMWghtMeta_00 2498 0.45 2.04 0.02 136 RCVD_IN_IADB_SENDERID 2485 3.12 2.03 3.42 137 BAYES_00 2477 14.87 2.02 18.34 138 BAYES_20 2461 4.49 2.01 5.16 139 TR_XM_PHPDW 2422 0.65 1.98 0.29 140 XMStockSpam_06 2418 1.18 1.98 0.96 141 GOOG_STO_IMG_HTML 2389 0.42 1.95 0.00 142 MAILING_LIST_MULTI 2353 2.47 1.92 2.62 143 RELAYCOUNTRY_AZ 2342 0.41 1.91 0.00 144 HTML_IMAGE_ONLY_04 2339 0.44 1.91 0.04 145 HTML_FONT_SIZE_LARGE 2324 0.46 1.90 0.08 146 TR_XM_COVIDMETA4 2317 0.66 1.89 0.33 147 HTML_SHORT_CENTER 2294 0.40 1.87 0.00 148 URI_HEX 2270 1.41 1.86 1.29 149 FROM_EXCESS_BASE64 2262 2.04 1.85 2.09 150 XMBrknScrpt_02 2252 1.04 1.84 0.83 151 XMLngstWrd_00 2231 0.93 1.82 0.68 152 SUBJECT_DIET 2231 0.39 1.82 0.00 153 RCVD_IN_VALIDITY_RPBL 2217 0.40 1.81 0.02 154 XMLngstWrd_01 2173 0.87 1.78 0.62 155 TR_XM_PHPForged 2169 0.58 1.77 0.26 156 TR_XM_FormFill2 2140 0.58 1.75 0.26 157 TR_XM_NoHeaderRelay 2124 0.51 1.74 0.18 158 T_XMHurry_00 2123 0.65 1.73 0.35 159 XM_H_PHPOS 2116 0.57 1.73 0.25 160 XM_B_SpammyWords4 2109 0.78 1.72 0.52 161 XMLngstWrd_02 2071 0.79 1.69 0.54 162 USER_IN_DEF_DKIM_WL 2058 7.55 1.68 9.14 163 HTML_TITLE_SUBJ_DIFF 2048 0.48 1.67 0.15 164 MIXED_CENTER_CASE 2035 0.35 1.66 0.00 165 MIXED_HREF_CASE 2028 0.35 1.66 0.00 166 MIXED_IMG_CASE 2022 0.35 1.65 0.00 167 MIXED_AREA_CASE 2018 0.35 1.65 0.00 168 XMLngstWrd_03 2015 0.70 1.65 0.45 169 MIXED_FONT_CASE 2011 0.35 1.64 0.00 170 TR_Symld_Words 2005 1.62 1.64 1.61 171 RCVD_IN_IADB_VOUCHED 1990 2.59 1.63 2.85 172 XMLngstWrd_04 1926 0.64 1.57 0.39 173 XMBody_17 1914 0.60 1.56 0.34 174 TM2_M_A_HREF_HREF 1846 0.58 1.51 0.33 175 XMGenDplmaNmb 1840 0.86 1.50 0.69 176 URIBL_BLACK 1827 0.35 1.49 0.04 177 UPPERCASE_75_100 1821 0.46 1.49 0.18 178 TR_XM_INV_DKIM 1752 0.44 1.43 0.17 179 RELAYCOUNTRY_IN 1747 0.36 1.43 0.07 180 RELAYCOUNTRY_GB 1728 0.90 1.41 0.76 181 BOTNET_NORDNS 1690 0.31 1.38 0.02 182 RELAYCOUNTRY_AU 1646 0.51 1.35 0.28 183 XMHTML_After_End 1607 0.76 1.31 0.61 184 XMPhish30 1606 0.66 1.31 0.48 185 XM_ProductURIs 1596 0.80 1.30 0.67 186 XM_UB99 1586 0.28 1.30 0.00 187 TR_XM_COVIDMETA1 1582 0.40 1.29 0.15 188 T_XMDrugObfuBody_00 1574 0.65 1.29 0.47 189 XMBdyGiftCard01 1519 0.73 1.24 0.60 190 XMMoneyMeta_00 1517 0.65 1.24 0.49 191 TR_XM_FormFill 1502 0.28 1.23 0.02 192 URI_TRY_3LD 1483 0.67 1.21 0.52 193 XM_B_SEO 1430 0.34 1.17 0.12 194 PLING_QUERY 1396 0.57 1.14 0.41 195 XM_Body_Dirty_Words_01 1389 0.32 1.14 0.11 196 URI_LONG_REPEAT 1349 0.24 1.10 0.00 197 XM_UB80 1345 0.24 1.10 0.01 198 DATE_IN_PAST_03_06 1337 0.44 1.09 0.26 199 HTML_FONT_TINY_NORDNS 1327 0.31 1.08 0.10 200 XM_H_Long_From02 1320 0.84 1.08 0.78 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 402209 90.33 96.02 88.79 2 RELAYCOUNTRY_US 369515 80.16 74.95 81.57 3 XM_B_Unicode 326217 72.39 73.79 72.01 4 DCC_CHECK_NEGATIVE 316709 61.02 28.11 69.92 5 DKIM_SIGNED 274011 65.34 83.29 60.49 6 XM_DK_Pass 267418 63.53 80.17 59.03 7 DKIM_VALID 258659 61.41 77.35 57.10 8 BAYES_50 231831 50.12 46.18 51.18 9 XM_B_Unicode3 204428 44.16 40.59 45.13 10 XM_B_SpammyWords 197441 48.77 67.97 43.59 11 DKIM_VALID_AU 192490 45.71 57.61 42.49 12 XMListUnsubscribeExists 173594 45.12 70.28 38.32 13 DCC_CHECK 136136 38.94 71.85 30.05 14 T_TM2_M_HEADER_IN_MSG 125586 26.57 22.28 27.72 15 RCVD_IN_MSPIKE_WL 111958 23.49 18.94 24.72 16 MIME_HTML_ONLY 107256 25.74 33.37 23.68 17 HTML_FONT_LOW_CONTRAST 106040 25.16 31.63 23.41 18 DKIM_VALID_EF 102527 24.23 30.14 22.63 19 LOC_TINY_FONT_1 88732 23.15 36.34 19.59 20 XMSubLong 87601 20.60 25.26 19.34 21 FVGT_m_MULTI_ODD 84978 20.84 28.52 18.76 22 BAYES_00 83060 14.87 2.02 18.34 23 RCVD_IN_MSPIKE_H2 79270 18.86 23.90 17.50 24 HTML_FONT_FACE_BAD 78869 13.85 0.65 17.41 25 HTML_IMAGE_RATIO_04 76551 14.33 4.82 16.90 26 ALL_TRUSTED 73000 13.20 2.39 16.12 27 XM_H_Trusted_IP 72394 12.58 0.00 15.98 28 T_KAM_HTML_FONT_INVALID 69736 18.77 31.25 15.39 29 XM_B_SpammyWords2 68794 19.46 35.28 15.19 30 RCVD_IN_MSPIKE_H3 58452 12.68 11.83 12.90 31 MPART_ALT_DIFF 51555 11.65 12.66 11.38 32 XMStrtUSub 50640 9.44 3.02 11.18 33 XM_B_Unsub 45827 10.44 11.63 10.12 34 XM_Body_Dirty_Words 45428 12.42 21.28 10.03 35 RCVD_IN_MSPIKE_H4 45155 9.28 6.73 9.97 36 XM_Multi_Part_URI 45111 11.67 18.00 9.96 37 MIME_HTML_ONLY_MULTI 42480 8.46 5.08 9.38 38 USER_IN_DEF_DKIM_WL 41406 7.55 1.68 9.14 39 XM_Evil_Numbers_Gen 38779 8.75 9.43 8.56 40 TooManyTo_001 37256 7.71 5.82 8.22 41 LOTS_OF_MONEY 35257 8.86 12.84 7.78 42 IN_ZIMBRA_NJ_WHITELIST 33597 5.86 0.10 7.42 43 LotsOfNums_01 33327 7.36 7.36 7.36 44 BAYES_60 32611 7.39 8.10 7.20 45 UNPARSEABLE_RELAY 32312 7.83 10.40 7.13 46 TR_XM_DK_Bayes 29498 5.31 0.85 6.51 47 TR_XM_DK_Bayes1 28532 5.13 0.81 6.30 48 XM_DKIMWhitelistDomains 27602 4.80 0.03 6.09 49 XM_SendGrid 26684 6.22 7.46 5.89 50 MIME_QP_LONG_LINE 26638 5.46 3.90 5.88 51 BAYES_40 25563 5.02 2.71 5.64 52 FSL_BULK_SIG 25251 6.72 10.98 5.57 53 TR_XM_UnparsRelay 25122 6.49 10.01 5.55 54 TR_XM_DK_Bayes2 24286 4.35 0.61 5.36 55 XM_DK_Undo_02 24029 12.51 39.20 5.30 56 HTML_IMAGE_RATIO_02 23644 6.14 9.57 5.22 57 BAYES_20 23376 4.49 2.01 5.16 58 HTML_IMAGE_RATIO_06 23200 4.81 3.64 5.12 59 T_TooManySym_01 23000 4.68 3.20 5.08 60 XM_H_Long_From01 21521 4.90 5.43 4.75 61 XMSubNoVowel 21124 3.78 0.53 4.66 62 TR_XM_SpammyWords4 20861 5.96 10.97 4.61 63 RCVD_IN_VALIDITY_SAFE 20750 4.40 3.74 4.58 64 RCVD_IN_IADB_LISTED 19928 4.04 2.72 4.40 65 RCVD_IN_VALIDITY_CERTIFIED 18317 3.83 3.03 4.04 66 XM_PDF 18260 3.37 0.94 4.03 67 ANY_BOUNCE_MESSAGE 18180 3.32 0.74 4.01 68 BOUNCE_MESSAGE 18172 3.32 0.74 4.01 69 TM2_M_URI_OPT_OUT 17909 4.02 4.25 3.95 70 BAYES_99 17444 8.77 26.98 3.85 71 RCVD_IN_IADB_SPF 17402 3.50 2.25 3.84 72 XM_SPF_SoftFail 17270 3.91 4.25 3.81 73 TR_XM_DKIM_Undo 17098 9.78 32.02 3.77 74 HTML_IMAGE_RATIO_08 17085 3.45 2.28 3.77 75 TR_XM_DK_SendGrid 16840 3.77 3.95 3.72 76 XMSubMetaSx_00 16707 4.25 6.34 3.69 77 BOTNET_IPINHOSTNAME 16322 5.67 13.31 3.60 78 RCVD_IN_IADB_SENDERID 15478 3.12 2.03 3.42 79 DKIM_INVALID 15352 3.93 5.94 3.39 80 BAYES_05 15121 2.84 1.00 3.34 81 RELAYCOUNTRY_META 14930 7.91 24.99 3.30 82 BAYES_80 14886 4.19 7.53 3.29 83 RCVD_IN_IADB_DK 14870 3.02 2.07 3.28 84 XMNumbers 14577 3.59 4.96 3.22 85 BAYES_999 13922 6.83 20.72 3.07 86 T_REMOTE_IMAGE 13831 3.71 6.12 3.05 87 XM_B_SpammyWords3 13827 4.77 11.12 3.05 88 RCVD_IN_IADB_VOUCHED 12901 2.59 1.63 2.85 89 XMSexyCombo_05 12812 4.34 9.93 2.83 90 XM_UncommonTLD01 12708 5.08 13.50 2.81 91 T_TooManySym_02 12548 2.39 0.97 2.77 92 XM_B_Phish_Phrases 12290 3.32 5.58 2.71 93 MAILING_LIST_MULTI 11863 2.47 1.92 2.62 94 TR_XM_PhishingBody 11486 3.34 6.32 2.54 95 MIME_HTML_MOSTLY 11399 3.75 8.31 2.52 96 URI_NOVOWEL 11066 3.43 7.09 2.44 97 KHOP_HELO_FCRDNS 10862 2.82 4.40 2.40 98 FROM_EXCESS_BASE64 9454 2.04 1.85 2.09 99 BAYES_95 9088 2.32 3.47 2.01 100 HTML_MIME_NO_HTML_TAG 8981 3.02 6.88 1.98 101 SUBJ_ALL_CAPS 8748 1.99 2.20 1.93 102 T_XMDrugObfuBody_14 8456 2.62 5.43 1.87 103 TooManyTo_002 8394 1.61 0.72 1.85 104 RCVD_IN_MSPIKE_H5 8351 1.53 0.38 1.84 105 XMSubGarbage 8341 1.46 0.06 1.84 106 XMSubLongNoVowel 8273 1.47 0.15 1.83 107 RCVD_IN_IADB_OPTIN 8242 1.62 0.90 1.82 108 TR_XM_SB_Phish 8122 1.87 2.17 1.79 109 XMSubPhish11 8041 1.85 2.14 1.78 110 XM_B_SpammyTLD 7594 1.96 3.00 1.68 111 TR_Symld_Words 7299 1.62 1.64 1.61 112 INVALID_MSGID 7167 1.29 0.21 1.58 113 HELO_NODOT 6908 1.35 0.68 1.52 114 HELO_NO_DOMAIN 6906 1.35 0.68 1.52 115 BOTNET 6758 4.52 15.74 1.49 116 XM_B_Phish66 6684 1.86 3.28 1.48 117 XM_E_Blogspot 6670 1.18 0.12 1.47 118 IN_HORDE_ADDRESS_BOOK 6663 1.17 0.07 1.47 119 FILL_THIS_FORM 6586 1.19 0.22 1.45 120 MSGID_NOFQDN1 6241 1.11 0.10 1.38 121 TR_DCC_Bayes_99 6222 5.24 19.53 1.37 122 TO_MALFORMED 6199 1.08 0.00 1.37 123 XM_DK_Undo_01 6159 1.55 2.25 1.36 124 TR_XM_SpammyRelay 5990 4.13 14.54 1.32 125 XM_B_Investor 5954 2.20 5.50 1.31 126 URI_HEX 5852 1.41 1.86 1.29 127 TVD_RCVD_IP 5830 1.07 0.27 1.29 128 XM_CamelCaseFrm001 5684 1.47 2.25 1.25 129 T_XMDrugObfuBody_08 5505 1.69 3.43 1.22 130 SHORT_URI_3 5492 1.06 0.51 1.21 131 TooManyTo_003 5448 1.07 0.58 1.20 132 XMGappySubj_01 5404 0.98 0.20 1.19 133 TR_XM_SpammyWords5 5301 1.67 3.53 1.17 134 XMSexyCombo_01 5164 1.41 2.42 1.14 135 XMDiploma_00 5096 1.46 2.71 1.12 136 XM_GoogleGroups 5083 1.33 2.11 1.12 137 UNTRUSTED_Relay 5014 4.48 16.95 1.11 138 XM_B_Unsub2 5005 1.46 2.78 1.10 139 XMCapTrack 4763 0.90 0.36 1.05 140 TM2_M_VERY_LONG_WORD 4478 1.52 3.50 0.99 141 XMStockSpam_06 4367 1.18 1.98 0.96 142 RCVD_IN_RP_SAFE 4154 0.88 0.76 0.92 143 RCVD_IN_MSPIKE_BL 4000 2.31 7.60 0.88 144 TR_XM_MSPIKECOMBO 3965 2.30 7.59 0.88 145 DKIM_ADSP_CUSTOM_MED 3892 0.86 0.85 0.86 146 TVD_SPACE_RATIO 3779 0.70 0.18 0.83 147 TooManyTo_004 3753 0.76 0.50 0.83 148 T_FILL_THIS_FORM_SHORT 3746 1.15 2.35 0.83 149 XMBrknScrpt_02 3745 1.04 1.84 0.83 150 RCVD_IN_RP_CERTIFIED 3710 0.77 0.57 0.82 151 RELAYCOUNTRY_CA 3602 1.65 4.84 0.80 152 XM_H_Long_From02 3529 0.84 1.08 0.78 153 XMBSHREFv2 3469 0.67 0.32 0.77 154 RELAYCOUNTRY_GB 3448 0.90 1.41 0.76 155 XM_OfRef6 3315 1.17 2.78 0.73 156 HTML_IMAGE_ONLY_20 3260 1.08 2.43 0.72 157 RCVD_IN_BL_SPAMCOP_NET 3257 2.40 8.61 0.72 158 XM_UB50 3185 2.43 8.81 0.70 159 FROM_GOV_DKIM_AU 3162 0.67 0.55 0.70 160 XMGenDplmaNmb 3114 0.86 1.50 0.69 161 T_TooManySym_03 3106 0.62 0.37 0.69 162 XMLngstWrd_00 3096 0.93 1.82 0.68 163 TooManyTo_005 3073 0.63 0.45 0.68 164 XM_ProductURIs 3020 0.80 1.30 0.67 165 SpammyFromTLD_01 3008 1.67 5.41 0.66 166 TR_XM_SpammyWords2 2910 2.45 9.16 0.64 167 XM_B_COVIDMETA 2873 0.97 2.22 0.63 168 T_OBFU_PDF_ATTACH 2853 0.53 0.14 0.63 169 XMLngstWrd_01 2820 0.87 1.78 0.62 170 XMHTML_After_End 2766 0.76 1.31 0.61 171 XM_B_COPY_HTML 2747 0.62 0.67 0.61 172 HTTPS_HTTP_MISMATCH 2733 0.69 0.99 0.60 173 XMBdyGiftCard01 2703 0.73 1.24 0.60 174 TR_XM_MaxUnsub 2684 1.17 3.32 0.59 175 XMBody_95 2562 0.48 0.18 0.57 176 TR_MSPIKEBAYES00 2522 0.44 0.01 0.56 177 TR_MetaPhish_Combo_01 2503 0.61 0.81 0.55 178 XMNoVowels 2497 0.56 0.58 0.55 179 NML_ADSP_CUSTOM_MED 2472 0.57 0.67 0.55 180 XMLngstWrd_02 2459 0.79 1.69 0.54 181 T_Symld_Words_02 2402 0.60 0.88 0.53 182 XM_ShortIntro_01 2402 0.53 0.51 0.53 183 URI_TRY_3LD 2356 0.67 1.21 0.52 184 XM_B_SpammyWords4 2353 0.78 1.72 0.52 185 HTML_TAG_BALANCE_BODY 2272 0.62 1.08 0.50 186 XMMoneyMeta_00 2199 0.65 1.24 0.49 187 XMPhish30 2174 0.66 1.31 0.48 188 T_XMDrugObfuBody_00 2151 0.65 1.29 0.47 189 XM_B_DNDMA 2129 0.53 0.75 0.47 190 FORGED_GMAIL_RCVD 2089 0.51 0.69 0.46 191 XMLngstWrd_03 2036 0.70 1.65 0.45 192 RCVD_IN_SORBS_DUL 2011 0.41 0.28 0.44 193 SHORT_HELO_AND_INLINE_IMAGE 1987 0.37 0.10 0.44 194 HTML_IMAGE_ONLY_28 1957 0.42 0.40 0.43 195 XMHTMLBadTable_001 1943 0.47 0.63 0.43 196 TR_XM_SpammyWords3 1929 1.15 3.84 0.43 197 XMSubMetaI_00 1923 0.56 1.07 0.42 198 XM_H_PHPMailer 1873 0.55 1.07 0.41 199 PLING_QUERY 1862 0.57 1.14 0.41 200 XMSubMetaSx_01 1855 0.43 0.49 0.41 ----------------------------------------------------------------------