Email: 588888 Autolearn: 0 AvgScore: 0.55 AvgScanTime: 1.28 sec Spam: 137204 Autolearn: 0 AvgScore: 13.73 AvgScanTime: 1.52 sec Ham: 451684 Autolearn: 0 AvgScore: -3.45 AvgScanTime: 1.21 sec Time Spent Running SA: 209.86 hours Time Spent Processing Spam: 58.11 hours Time Spent Processing Ham: 151.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131621 90.63 95.93 89.02 2 DKIM_SIGNED 120070 63.08 87.51 55.66 3 XM_DK_Pass 114536 61.13 83.48 54.34 4 DKIM_VALID 112757 59.57 82.18 52.70 5 RELAYCOUNTRY_US 110739 77.90 80.71 77.05 6 XM_B_Unicode 100648 69.62 73.36 68.49 7 DCC_CHECK 97569 37.36 71.11 27.11 8 XMListUnsubscribeExists 93861 43.76 68.41 36.27 9 XM_B_SpammyWords 91647 45.23 66.80 38.67 10 DKIM_VALID_AU 86242 45.43 62.86 40.13 11 XM_DK_Undo_02 58670 14.20 42.76 5.52 12 BAYES_50 57336 47.94 41.79 49.80 13 XM_B_Unicode3 56539 42.98 41.21 43.52 14 LOC_TINY_FONT_1 49884 21.65 36.36 17.19 15 XM_B_SpammyWords2 48790 18.77 35.56 13.67 16 TR_XM_DKIM_Undo 46110 10.82 33.61 3.89 17 HTML_FONT_LOW_CONTRAST 45298 23.06 33.02 20.03 18 BAYES_99 43352 10.63 31.60 4.26 19 MIME_HTML_ONLY 43203 28.87 31.49 28.08 20 DKIM_VALID_EF 41552 22.82 30.28 20.56 21 FVGT_m_MULTI_ODD 40688 20.72 29.66 18.01 22 DCC_CHECK_NEGATIVE 39586 62.60 28.85 72.85 23 T_KAM_HTML_FONT_INVALID 36203 16.78 26.39 13.86 24 BAYES_999 34527 8.59 25.16 3.55 25 RCVD_IN_MSPIKE_H2 34389 18.09 25.06 15.97 26 TR_DCC_Bayes_99 32041 6.67 23.35 1.60 27 T_TM2_M_HEADER_IN_MSG 31634 24.15 23.06 24.48 28 RELAYCOUNTRY_META 31199 7.67 22.74 3.10 29 XMSubLong 31153 24.53 22.71 25.08 30 XM_Body_Dirty_Words 29426 12.60 21.45 9.91 31 RCVD_IN_MSPIKE_WL 28505 22.09 20.78 22.49 32 XM_Multi_Part_URI 22361 10.64 16.30 8.92 33 XM_B_Unsub 21123 10.04 15.40 8.41 34 XM_UncommonTLD01 19980 5.40 14.56 2.62 35 LOTS_OF_MONEY 18232 9.05 13.29 7.76 36 TR_XM_SpammyRelay 17195 3.73 12.53 1.06 37 MPART_ALT_DIFF 17174 10.89 12.52 10.39 38 RCVD_IN_MSPIKE_H3 17085 12.26 12.45 12.20 39 UNPARSEABLE_RELAY 16772 7.40 12.22 5.93 40 BOTNET 16761 3.96 12.22 1.46 41 BOTNET_IPINHOSTNAME 16738 5.72 12.20 3.75 42 TR_XM_UnparsRelay 16412 6.41 11.96 4.73 43 UNTRUSTED_Relay 15624 3.63 11.39 1.27 44 XM_B_SpammyWords3 15373 4.76 11.20 2.81 45 FSL_BULK_SIG 15351 5.46 11.19 3.72 46 TR_XM_SpammyWords4 15017 5.39 10.95 3.71 47 HTML_IMAGE_RATIO_02 14944 6.06 10.89 4.60 48 XM_Evil_Numbers_Gen 13819 7.68 10.07 6.95 49 TR_XM_SpammyWords2 13701 2.78 9.99 0.59 50 XMSexyCombo_05 13673 8.91 9.97 8.59 51 XM_SendGrid 11586 5.46 8.44 4.55 52 RCVD_IN_BL_SPAMCOP_NET 11566 2.49 8.43 0.69 53 BAYES_80 10766 4.29 7.85 3.21 54 RCVD_IN_MSPIKE_H4 10407 8.53 7.59 8.81 55 LotsOfNums_01 10181 7.58 7.42 7.63 56 BAYES_60 9689 11.06 7.06 12.27 57 XMSubMetaSx_00 9466 8.81 6.90 9.39 58 MIME_HTML_ONLY_MULTI 9444 8.47 6.88 8.96 59 XMStrtUSub 9221 14.29 6.72 16.58 60 TR_XM_PhishingBody 9206 3.38 6.71 2.37 61 MIME_HTML_MOSTLY 9138 2.97 6.66 1.85 62 TooManyTo_001 9054 11.89 6.60 13.49 63 TR_XM_MaxUnsub 8706 2.06 6.35 0.76 64 SpammyFromTLD_02 8489 1.72 6.19 0.36 65 HTML_MIME_NO_HTML_TAG 8440 2.90 6.15 1.91 66 SpammyFromTLD_01 8413 1.84 6.13 0.54 67 XM_H_Long_From01 8313 4.47 6.06 3.98 68 XM_B_Phish_Phrases 8244 3.34 6.01 2.53 69 XM_UB50 8207 2.09 5.98 0.90 70 BAYES_95 7882 2.77 5.74 1.87 71 RCVD_IN_MSPIKE_BL 7671 1.95 5.59 0.84 72 TR_XM_MSPIKECOMBO 7619 1.94 5.55 0.84 73 TM2_M_VERY_LONG_WORD 7387 2.17 5.38 1.19 74 DKIM_INVALID 7313 3.51 5.33 2.96 75 URI_NOVOWEL 7025 2.87 5.12 2.18 76 TR_XM_DK_SendGrid 7014 3.42 5.11 2.91 77 HTML_IMAGE_RATIO_04 6520 13.75 4.75 16.48 78 MIME_QP_LONG_LINE 6349 5.30 4.63 5.51 79 RELAYCOUNTRY_CA 6322 1.54 4.61 0.61 80 TR_XM_SPAMCOP 6303 1.28 4.59 0.27 81 URIBL_DBL_SPAM 5908 1.01 4.31 0.01 82 HTML_IMAGE_ONLY_08 5850 1.25 4.26 0.34 83 XM_SPF_SoftFail 5633 4.14 4.11 4.14 84 XM_B_SpammyTLD 5469 2.15 3.99 1.60 85 T_REMOTE_IMAGE 5456 3.24 3.98 3.02 86 TR_XM_NoHeaderRelay 5356 1.03 3.90 0.16 87 XM_B_Investor 5331 1.92 3.89 1.32 88 TM2_M_URI_OPT_OUT 5184 3.38 3.78 3.26 89 HTML_FONT_SIZE_LARGE 5163 1.13 3.76 0.32 90 RCVD_IN_VALIDITY_SAFE 5082 4.00 3.70 4.09 91 XM_B_Phish66 4929 1.96 3.59 1.46 92 KHOP_HELO_FCRDNS 4918 2.95 3.58 2.76 93 TR_XM_SpammyWords3 4872 1.16 3.55 0.43 94 T_XMDrugObfuBody_08 4767 1.73 3.47 1.19 95 XM_GoogleGroups 4597 1.74 3.35 1.25 96 HTML_IMAGE_RATIO_06 4577 4.68 3.34 5.09 97 XM_OfRef6 4539 1.46 3.31 0.90 98 XMNumbers 4417 2.93 3.22 2.84 99 XMLngstWrd_00 4390 1.23 3.20 0.63 100 TR_XM_SpammyWords5 4367 1.68 3.18 1.23 101 XMLngstWrd_01 4348 1.18 3.17 0.58 102 T_XMDrugObfuBody_14 4342 1.99 3.16 1.64 103 XMLngstWrd_02 4263 1.11 3.11 0.51 104 RELAYCOUNTRY_DE 4248 0.85 3.10 0.17 105 RELAYCOUNTRY_FR 4217 1.06 3.07 0.44 106 XMLngstWrd_03 4181 1.04 3.05 0.44 107 XM_DIRTYINTL 4122 0.88 3.00 0.23 108 XMLngstWrd_04 4072 0.98 2.97 0.38 109 HTML_SHORT_LINK_IMG_1 4069 0.90 2.97 0.28 110 JH_SPAMMY_HEADERS 4022 0.68 2.93 0.00 111 RCVD_IN_VALIDITY_CERTIFIED 4015 3.52 2.93 3.70 112 RCVD_IN_IADB_LISTED 3860 3.92 2.81 4.26 113 XM_B_Unsub2 3776 1.63 2.75 1.28 114 HTML_TITLE_SUBJ_DIFF 3721 0.79 2.71 0.20 115 XMDiploma_00 3617 1.42 2.64 1.05 116 XM_DK_Undo_01 3608 1.69 2.63 1.41 117 XM_B_COVIDMETA 3567 0.99 2.60 0.50 118 RCVD_IN_MSPIKE_L3 3560 0.98 2.59 0.50 119 MISSING_HEADERS 3558 0.84 2.59 0.31 120 UPPERCASE_75_100 3540 0.81 2.58 0.27 121 RCVD_IN_IADB_SPF 3284 3.46 2.39 3.79 122 XM_B_SpammyWords4 3216 0.84 2.34 0.38 123 TR_Symld_Words 3214 1.93 2.34 1.80 124 ALL_TRUSTED 3120 16.44 2.27 20.74 125 FROM_OFFERS 3059 0.58 2.23 0.08 126 XMSexyCombo_01 3039 1.29 2.21 1.00 127 RCVD_IN_IADB_DK 3028 3.07 2.21 3.33 128 T_TVD_MIME_EPI 2996 0.52 2.18 0.01 129 RCVD_IN_IADB_SENDERID 2995 3.15 2.18 3.44 130 RELAYCOUNTRY_AU 2943 0.73 2.14 0.30 131 RCVD_IN_MSPIKE_L5 2932 0.52 2.14 0.03 132 URIBL_CSS_A 2891 0.51 2.11 0.02 133 URIBL_CSS 2891 0.51 2.11 0.02 134 T_TooManySym_01 2870 4.25 2.09 4.90 135 BAYES_40 2868 4.26 2.09 4.91 136 HTML_IMAGE_RATIO_08 2786 2.88 2.03 3.14 137 USER_IN_DEF_DKIM_WL 2753 7.40 2.01 9.04 138 T_FILL_THIS_FORM_SHORT 2729 0.97 1.99 0.67 139 FROM_EXCESS_BASE64 2720 2.13 1.98 2.17 140 URI_HEX 2682 1.31 1.95 1.11 141 XM_CamelCaseFrm001 2679 1.39 1.95 1.22 142 XM_UB60 2627 0.50 1.91 0.07 143 XMStockSpam_06 2615 1.03 1.91 0.77 144 HDRS_MISSP 2573 0.46 1.88 0.02 145 BAYES_20 2573 4.01 1.88 4.66 146 TR_XM_SB_Phish 2507 1.58 1.83 1.51 147 XM_Body_Dirty_Words_01 2482 0.51 1.81 0.12 148 TR_XM_PHPDW 2479 0.63 1.81 0.28 149 MAILING_LIST_MULTI 2408 2.05 1.76 2.15 150 DKIM_ADSP_CUSTOM_MED 2405 1.18 1.75 1.00 151 SUBJ_ALL_CAPS 2387 2.27 1.74 2.43 152 T_XMDrugObfuBody_00 2378 0.96 1.73 0.72 153 XMSubPhish11 2373 1.54 1.73 1.49 154 TR_XM_PHPForged 2364 0.59 1.72 0.25 155 XMGenDplmaNmb 2337 0.80 1.70 0.53 156 TR_XM_FormFill2 2327 0.59 1.70 0.25 157 XM_H_PHPOS 2312 0.58 1.69 0.24 158 TR_XM_COVIDMETA1 2302 0.54 1.68 0.19 159 XM_URI_RBL 2296 0.56 1.67 0.22 160 BOTNET_NORDNS 2293 0.40 1.67 0.02 161 RELAYCOUNTRY_IN 2259 0.44 1.65 0.07 162 FORGED_GMAIL_RCVD 2251 0.89 1.64 0.67 163 TR_LOTS_OF_MONEY3 2238 0.66 1.63 0.36 164 RCVD_IN_PSBL 2203 0.49 1.61 0.15 165 FROM_SUSPICIOUS_NTLD 2190 0.40 1.60 0.04 166 NML_ADSP_CUSTOM_MED 2183 0.93 1.59 0.72 167 T_MONEY_PERCENT 2181 0.47 1.59 0.13 168 TR_LOTS_OF_MONEY2 2181 0.47 1.59 0.13 169 RCVD_IN_IADB_VOUCHED 2119 2.41 1.54 2.68 170 XMBody_17 2110 0.56 1.54 0.26 171 FROM_SUSPICIOUS_NTLD_FP 2105 0.39 1.53 0.04 172 TR_XM_COVIDMETA4 1979 0.52 1.44 0.24 173 TR_Mismatch_TLD_02 1966 0.39 1.43 0.08 174 TR_XM_INV_DKIM 1961 0.56 1.43 0.29 175 XMBdyGiftCard01 1951 0.68 1.42 0.46 176 XMPhish30 1938 0.70 1.41 0.48 177 HTML_TAG_BALANCE_CENTER 1916 0.37 1.40 0.05 178 T_XMHurry_00 1898 0.67 1.38 0.45 179 RCVD_IN_VALIDITY_RPBL 1812 0.32 1.32 0.01 180 URIBL_BLACK 1761 0.33 1.28 0.04 181 PDS_OTHER_BAD_TLD 1745 0.39 1.27 0.12 182 BAYES_00 1685 12.43 1.23 15.83 183 TR_XM_FormFill 1685 0.29 1.23 0.01 184 XM_UB99 1668 0.28 1.22 0.00 185 TR_MetaPhish_Combo_01 1614 0.72 1.18 0.58 186 TR_BOTNET_NEGATE 1604 0.49 1.17 0.28 187 XMBody_78 1565 0.48 1.14 0.28 188 XM_OfRef7 1562 0.34 1.14 0.10 189 TM2_M_A_HREF_HREF 1556 0.54 1.13 0.36 190 XM_UB80 1552 0.27 1.13 0.01 191 URI_TRY_3LD 1544 0.63 1.13 0.48 192 HTML_SHORT_LINK_IMG_2 1530 0.30 1.12 0.06 193 TR_XM_BayesRelay 1513 0.26 1.10 0.00 194 LongTLD 1500 0.34 1.09 0.11 195 HTML_TAG_BALANCE_BODY 1480 0.58 1.08 0.43 196 DIET_1 1474 0.45 1.07 0.25 197 XM_H_Long_From02 1472 0.86 1.07 0.79 198 MIXED_CENTER_CASE 1461 0.25 1.06 0.00 199 MIXED_HREF_CASE 1454 0.25 1.06 0.00 200 MIXED_AREA_CASE 1449 0.25 1.06 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 402110 90.63 95.93 89.02 2 RELAYCOUNTRY_US 348031 77.90 80.71 77.05 3 DCC_CHECK_NEGATIVE 329060 62.60 28.85 72.85 4 XM_B_Unicode 309343 69.62 73.36 68.49 5 DKIM_SIGNED 251405 63.08 87.51 55.66 6 XM_DK_Pass 245432 61.13 83.48 54.34 7 DKIM_VALID 238021 59.57 82.18 52.70 8 BAYES_50 224961 47.94 41.79 49.80 9 XM_B_Unicode3 196572 42.98 41.21 43.52 10 DKIM_VALID_AU 181274 45.43 62.86 40.13 11 XM_B_SpammyWords 174680 45.23 66.80 38.67 12 XMListUnsubscribeExists 163816 43.76 68.41 36.27 13 MIME_HTML_ONLY 126838 28.87 31.49 28.08 14 DCC_CHECK 122463 37.36 71.11 27.11 15 XMSubLong 113283 24.53 22.71 25.08 16 T_TM2_M_HEADER_IN_MSG 110574 24.15 23.06 24.48 17 RCVD_IN_MSPIKE_WL 101565 22.09 20.78 22.49 18 ALL_TRUSTED 93694 16.44 2.27 20.74 19 DKIM_VALID_EF 92860 22.82 30.28 20.56 20 HTML_FONT_LOW_CONTRAST 90471 23.06 33.02 20.03 21 FVGT_m_MULTI_ODD 81359 20.72 29.66 18.01 22 HTML_FONT_FACE_BAD 80133 13.78 0.73 17.74 23 LOC_TINY_FONT_1 77632 21.65 36.36 17.19 24 XMStrtUSub 74904 14.29 6.72 16.58 25 HTML_IMAGE_RATIO_04 74449 13.75 4.75 16.48 26 RCVD_IN_MSPIKE_H2 72141 18.09 25.06 15.97 27 BAYES_00 71513 12.43 1.23 15.83 28 XM_H_Trusted_IP 71235 12.10 0.00 15.77 29 T_KAM_HTML_FONT_INVALID 62596 16.78 26.39 13.86 30 XM_B_SpammyWords2 61747 18.77 35.56 13.67 31 TooManyTo_001 60954 11.89 6.60 13.49 32 BAYES_60 55428 11.06 7.06 12.27 33 RCVD_IN_MSPIKE_H3 55101 12.26 12.45 12.20 34 MPART_ALT_DIFF 46951 10.89 12.52 10.39 35 XM_Body_Dirty_Words 44771 12.60 21.45 9.91 36 XMSubMetaSx_00 42421 8.81 6.90 9.39 37 USER_IN_DEF_DKIM_WL 40827 7.40 2.01 9.04 38 MIME_HTML_ONLY_MULTI 40462 8.47 6.88 8.96 39 XM_Multi_Part_URI 40291 10.64 16.30 8.92 40 RCVD_IN_MSPIKE_H4 39804 8.53 7.59 8.81 41 XMSexyCombo_05 38784 8.91 9.97 8.59 42 XM_B_Unsub 37973 10.04 15.40 8.41 43 LOTS_OF_MONEY 35042 9.05 13.29 7.76 44 LotsOfNums_01 34468 7.58 7.42 7.63 45 IN_ZIMBRA_NJ_WHITELIST 33652 5.73 0.06 7.45 46 XM_Evil_Numbers_Gen 31414 7.68 10.07 6.95 47 XMSubMetaSSx_00 27508 4.82 0.66 6.09 48 UNPARSEABLE_RELAY 26798 7.40 12.22 5.93 49 XM_DKIMWhitelistDomains 25396 4.32 0.03 5.62 50 XM_DK_Undo_02 24953 14.20 42.76 5.52 51 MIME_QP_LONG_LINE 24868 5.30 4.63 5.51 52 TR_XM_DK_Bayes 24371 4.26 0.51 5.40 53 XMSubNoVowel 24370 4.24 0.43 5.40 54 TR_XM_DK_Bayes1 23687 4.14 0.50 5.24 55 HTML_IMAGE_RATIO_06 22974 4.68 3.34 5.09 56 BAYES_40 22198 4.26 2.09 4.91 57 T_TooManySym_01 22134 4.25 2.09 4.90 58 TR_XM_UnparsRelay 21362 6.41 11.96 4.73 59 BAYES_20 21069 4.01 1.88 4.66 60 HTML_IMAGE_RATIO_02 20766 6.06 10.89 4.60 61 TR_XM_DK_Bayes2 20619 3.60 0.41 4.56 62 XM_SendGrid 20560 5.46 8.44 4.55 63 BAYES_99 19240 10.63 31.60 4.26 64 RCVD_IN_IADB_LISTED 19230 3.92 2.81 4.26 65 XM_SPF_SoftFail 18722 4.14 4.11 4.14 66 RCVD_IN_VALIDITY_SAFE 18460 4.00 3.70 4.09 67 XM_H_Long_From01 17991 4.47 6.06 3.98 68 XM_PDF 17631 3.21 0.92 3.90 69 TR_XM_DKIM_Undo 17582 10.82 33.61 3.89 70 RCVD_IN_IADB_SPF 17113 3.46 2.39 3.79 71 ANY_BOUNCE_MESSAGE 17001 3.05 0.69 3.76 72 BOUNCE_MESSAGE 16999 3.05 0.68 3.76 73 BOTNET_IPINHOSTNAME 16940 5.72 12.20 3.75 74 FSL_BULK_SIG 16790 5.46 11.19 3.72 75 TR_XM_SpammyWords4 16747 5.39 10.95 3.71 76 RCVD_IN_VALIDITY_CERTIFIED 16707 3.52 2.93 3.70 77 BAYES_999 16057 8.59 25.16 3.55 78 RCVD_IN_IADB_SENDERID 15553 3.15 2.18 3.44 79 RCVD_IN_IADB_DK 15022 3.07 2.21 3.33 80 TM2_M_URI_OPT_OUT 14738 3.38 3.78 3.26 81 BAYES_80 14478 4.29 7.85 3.21 82 BAYES_05 14334 2.61 0.76 3.17 83 HTML_IMAGE_RATIO_08 14172 2.88 2.03 3.14 84 RELAYCOUNTRY_META 13993 7.67 22.74 3.10 85 T_REMOTE_IMAGE 13644 3.24 3.98 3.02 86 DKIM_INVALID 13384 3.51 5.33 2.96 87 TR_XM_DK_SendGrid 13135 3.42 5.11 2.91 88 XMNumbers 12844 2.93 3.22 2.84 89 XM_B_SpammyWords3 12685 4.76 11.20 2.81 90 KHOP_HELO_FCRDNS 12445 2.95 3.58 2.76 91 RCVD_IN_IADB_VOUCHED 12101 2.41 1.54 2.68 92 XM_UncommonTLD01 11832 5.40 14.56 2.62 93 T_TooManySym_02 11812 2.14 0.58 2.62 94 XM_B_Phish_Phrases 11407 3.34 6.01 2.53 95 SUBJ_ALL_CAPS 10987 2.27 1.74 2.43 96 TR_XM_PhishingBody 10698 3.38 6.71 2.37 97 URI_NOVOWEL 9862 2.87 5.12 2.18 98 FROM_EXCESS_BASE64 9811 2.13 1.98 2.17 99 MAILING_LIST_MULTI 9689 2.05 1.76 2.15 100 XMSubGarbage 9419 1.60 0.02 2.09 101 XMSubLongNoVowel 9241 1.59 0.08 2.05 102 HTML_MIME_NO_HTML_TAG 8630 2.90 6.15 1.91 103 BAYES_95 8453 2.77 5.74 1.87 104 MIME_HTML_MOSTLY 8350 2.97 6.66 1.85 105 TR_Symld_Words 8123 1.93 2.34 1.80 106 TooManyTo_002 7861 1.55 0.92 1.74 107 RCVD_IN_IADB_OPTIN 7677 1.51 0.90 1.70 108 T_XMDrugObfuBody_14 7404 1.99 3.16 1.64 109 TR_DCC_Bayes_99 7239 6.67 23.35 1.60 110 XM_B_SpammyTLD 7220 2.15 3.99 1.60 111 HELO_NODOT 6876 1.30 0.58 1.52 112 HELO_NO_DOMAIN 6869 1.30 0.58 1.52 113 TR_XM_SB_Phish 6816 1.58 1.83 1.51 114 IN_HORDE_ADDRESS_BOOK 6814 1.18 0.09 1.51 115 INVALID_MSGID 6792 1.21 0.23 1.50 116 TVD_RCVD_IP 6745 1.23 0.35 1.49 117 XMSubPhish11 6709 1.54 1.73 1.49 118 RCVD_IN_MSPIKE_H5 6660 1.30 0.74 1.47 119 XM_B_Phish66 6596 1.96 3.59 1.46 120 BOTNET 6579 3.96 12.22 1.46 121 XM_DK_Undo_01 6365 1.69 2.63 1.41 122 MSGID_NOFQDN1 6211 1.09 0.15 1.38 123 TO_MALFORMED 6135 1.09 0.20 1.36 124 XM_B_Investor 5979 1.92 3.89 1.32 125 XM_B_Unsub2 5798 1.63 2.75 1.28 126 UNTRUSTED_Relay 5737 3.63 11.39 1.27 127 XM_GoogleGroups 5630 1.74 3.35 1.25 128 TR_XM_SpammyWords5 5542 1.68 3.18 1.23 129 XM_CamelCaseFrm001 5530 1.39 1.95 1.22 130 T_XMDrugObfuBody_08 5396 1.73 3.47 1.19 131 TM2_M_VERY_LONG_WORD 5376 2.17 5.38 1.19 132 TooManyTo_003 5216 1.07 0.80 1.15 133 URI_HEX 5020 1.31 1.95 1.11 134 TVD_SPACE_RATIO 4980 1.04 0.82 1.10 135 XM_E_Blogspot 4966 0.88 0.15 1.10 136 TR_XM_SpammyRelay 4774 3.73 12.53 1.06 137 XMDiploma_00 4721 1.42 2.64 1.05 138 XMGappySubj_01 4616 0.84 0.25 1.02 139 XMSexyCombo_01 4538 1.29 2.21 1.00 140 DKIM_ADSP_CUSTOM_MED 4523 1.18 1.75 1.00 141 XMCapTrack 4411 0.86 0.49 0.98 142 XM_UB50 4084 2.09 5.98 0.90 143 XM_OfRef6 4043 1.46 3.31 0.90 144 RCVD_IN_MSPIKE_BL 3805 1.95 5.59 0.84 145 TR_XM_MSPIKECOMBO 3791 1.94 5.55 0.84 146 XMBSHREFv2 3763 0.71 0.33 0.83 147 TooManyTo_004 3713 0.80 0.71 0.82 148 RCVD_IN_RP_SAFE 3609 0.78 0.70 0.80 149 XM_H_Long_From02 3566 0.86 1.07 0.79 150 XMStockSpam_06 3479 1.03 1.91 0.77 151 TR_XM_MaxUnsub 3414 2.06 6.35 0.76 152 RCVD_IN_RP_CERTIFIED 3287 0.69 0.55 0.73 153 NML_ADSP_CUSTOM_MED 3269 0.93 1.59 0.72 154 T_XMDrugObfuBody_00 3269 0.96 1.73 0.72 155 RCVD_IN_BL_SPAMCOP_NET 3102 2.49 8.43 0.69 156 T_FILL_THIS_FORM_SHORT 3006 0.97 1.99 0.67 157 FORGED_GMAIL_RCVD 3005 0.89 1.64 0.67 158 TooManyTo_005 3004 0.66 0.63 0.67 159 T_TooManySym_03 2947 0.55 0.20 0.65 160 FILL_THIS_FORM 2887 0.63 0.59 0.64 161 SHORT_URI_2 2873 0.66 0.73 0.64 162 XMLngstWrd_00 2861 1.23 3.20 0.63 163 RELAYCOUNTRY_GB 2837 0.72 1.02 0.63 164 RELAYCOUNTRY_CA 2757 1.54 4.61 0.61 165 FROM_GOV_DKIM_AU 2744 0.57 0.44 0.61 166 TR_XM_SpammyWords2 2665 2.78 9.99 0.59 167 XMBrknScrpt_02 2656 0.67 0.94 0.59 168 TR_MetaPhish_Combo_01 2629 0.72 1.18 0.58 169 XMHTML_After_End 2629 0.68 1.01 0.58 170 XMLngstWrd_01 2609 1.18 3.17 0.58 171 HTTPS_HTTP_MISMATCH 2570 0.68 1.05 0.57 172 XM_D_tchamptons_WL 2461 0.42 0.00 0.54 173 T_OBFU_PDF_ATTACH 2436 0.45 0.17 0.54 174 SpammyFromTLD_01 2428 1.84 6.13 0.54 175 XMBody_95 2425 0.47 0.25 0.54 176 XMGenDplmaNmb 2376 0.80 1.70 0.53 177 XMMoneyMeta_00 2349 0.64 1.02 0.52 178 TR_MSPIKEBAYES00 2298 0.40 0.04 0.51 179 XMLngstWrd_02 2283 1.11 3.11 0.51 180 XM_B_COVIDMETA 2253 0.99 2.60 0.50 181 RCVD_IN_MSPIKE_L3 2240 0.98 2.59 0.50 182 TVD_SPACE_RATIO_MINFP 2194 0.56 0.81 0.49 183 XM_ShortIntro_01 2185 0.49 0.52 0.48 184 URI_TRY_3LD 2172 0.63 1.13 0.48 185 HTML_IMAGE_ONLY_20 2166 0.48 0.47 0.48 186 XMPhish30 2155 0.70 1.41 0.48 187 SHORT_HELO_AND_INLINE_IMAGE 2125 0.38 0.09 0.47 188 RCVD_IN_SORBS_DUL 2096 0.43 0.30 0.46 189 XM_B_COPY_HTML 2071 0.50 0.63 0.46 190 XMBdyGiftCard01 2067 0.68 1.42 0.46 191 T_XMHurry_00 2048 0.67 1.38 0.45 192 T_Symld_Words_02 2023 0.49 0.64 0.45 193 RELAYCOUNTRY_FR 1997 1.06 3.07 0.44 194 XMLngstWrd_03 1965 1.04 3.05 0.44 195 HTML_TAG_BALANCE_BODY 1953 0.58 1.08 0.43 196 XMNoVowels 1940 0.40 0.29 0.43 197 TR_XM_SpammyWords3 1934 1.16 3.55 0.43 198 XM_ProductURIs 1887 0.53 0.92 0.42 199 XMSubMetaI_00 1877 0.52 0.86 0.42 200 XM_H_PHPMailer 1777 0.51 0.91 0.39 ----------------------------------------------------------------------