Email: 539267 Autolearn: 0 AvgScore: 2.45 AvgScanTime: 1.24 sec Spam: 145436 Autolearn: 0 AvgScore: 13.97 AvgScanTime: 1.36 sec Ham: 393831 Autolearn: 0 AvgScore: -1.80 AvgScanTime: 1.19 sec Time Spent Running SA: 185.07 hours Time Spent Processing Spam: 54.92 hours Time Spent Processing Ham: 130.15 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137634 90.24 94.64 88.62 2 DKIM_SIGNED 125961 73.44 86.61 68.58 3 XM_DK_Pass 121593 71.65 83.61 67.24 4 DKIM_VALID 121436 71.00 83.50 66.38 5 RELAYCOUNTRY_US 117817 81.34 81.01 81.46 6 XM_B_Unicode 113379 73.21 77.96 71.46 7 DCC_CHECK 102555 42.77 70.52 32.53 8 XMListUnsubscribeExists 98780 51.28 67.92 45.13 9 DKIM_VALID_AU 93560 54.87 64.33 51.38 10 XM_B_SpammyWords 93378 51.76 64.21 47.16 11 XM_B_Unicode3 64644 44.88 44.45 45.04 12 XM_DK_Undo_02 62931 16.21 43.27 6.22 13 BAYES_50 59820 50.45 41.13 53.89 14 XM_B_SpammyWords2 53052 24.57 36.48 20.17 15 LOC_TINY_FONT_1 52310 25.40 35.97 21.50 16 BAYES_99 49373 12.77 33.95 4.94 17 TR_XM_DKIM_Undo 47542 12.15 32.69 4.56 18 MIME_HTML_ONLY 47523 22.94 32.68 19.34 19 HTML_FONT_LOW_CONTRAST 47441 26.62 32.62 24.40 20 FVGT_m_MULTI_ODD 47353 25.22 32.56 22.51 21 DKIM_VALID_EF 44233 26.80 30.41 25.47 22 DCC_CHECK_NEGATIVE 42841 57.19 29.46 67.43 23 T_KAM_HTML_FONT_INVALID 39051 20.07 26.85 17.56 24 BAYES_999 38319 10.03 26.35 4.00 25 RCVD_IN_MSPIKE_H2 37801 20.57 25.99 18.56 26 TR_DCC_Bayes_99 35744 8.04 24.58 1.94 27 XMSubLong 35481 21.47 24.40 20.39 28 XM_Body_Dirty_Words 33004 14.18 22.69 11.04 29 RELAYCOUNTRY_META 32527 8.78 22.37 3.77 30 T_TM2_M_HEADER_IN_MSG 32146 31.70 22.10 35.24 31 RCVD_IN_MSPIKE_WL 30617 26.14 21.05 28.02 32 XM_Multi_Part_URI 23620 12.64 16.24 11.31 33 RCVD_IN_MSPIKE_H3 21050 15.13 14.47 15.37 34 XM_B_Unsub 20989 10.63 14.43 9.23 35 FSL_BULK_SIG 20576 6.05 14.15 3.06 36 LOTS_OF_MONEY 20441 12.69 14.05 12.19 37 UNPARSEABLE_RELAY 20165 9.02 13.87 7.24 38 TR_XM_UnparsRelay 19626 7.84 13.49 5.75 39 BOTNET_IPINHOSTNAME 18369 6.52 12.63 4.27 40 XM_B_SpammyWords3 18121 6.31 12.46 4.05 41 TR_XM_SpammyWords2 16767 3.87 11.53 1.04 42 UNTRUSTED_Relay 16743 3.98 11.51 1.19 43 BOTNET 16664 4.15 11.46 1.45 44 TR_XM_SpammyWords4 16496 8.36 11.34 7.25 45 RCVD_IN_BL_SPAMCOP_NET 16142 3.55 11.10 0.76 46 TR_XM_SpammyRelay 15734 4.02 10.82 1.51 47 XMSexyCombo_05 15244 5.39 10.48 3.51 48 XM_Evil_Numbers_Gen 14893 8.96 10.24 8.49 49 XM_UncommonTLD01 14401 4.93 9.90 3.10 50 MPART_ALT_DIFF 13804 6.53 9.49 5.43 51 XM_SendGrid 13157 6.34 9.05 5.34 52 BAYES_80 11300 5.23 7.77 4.30 53 HTML_IMAGE_RATIO_02 10807 6.26 7.43 5.83 54 LotsOfNums_01 10533 8.37 7.24 8.78 55 BAYES_60 10382 8.42 7.14 8.89 56 XMSubMetaSx_00 9616 4.00 6.61 3.03 57 TR_XM_MaxUnsub 9597 2.31 6.60 0.72 58 RCVD_IN_MSPIKE_BL 9491 2.56 6.53 1.09 59 HTML_MIME_NO_HTML_TAG 9435 3.56 6.49 2.48 60 TR_XM_MSPIKECOMBO 9414 2.54 6.47 1.09 61 XM_H_Long_From01 9399 5.54 6.46 5.19 62 TM2_M_VERY_LONG_WORD 9273 2.96 6.38 1.70 63 MIME_HTML_ONLY_MULTI 9124 4.46 6.27 3.79 64 TR_XM_PhishingBody 9063 4.12 6.23 3.34 65 RCVD_IN_MSPIKE_H4 9022 9.56 6.20 10.80 66 TR_XM_DK_SendGrid 8698 4.09 5.98 3.39 67 XM_B_Phish_Phrases 8473 4.07 5.83 3.43 68 TooManyTo_001 7949 6.95 5.47 7.50 69 HTML_IMAGE_RATIO_04 7616 4.89 5.24 4.76 70 RELAYCOUNTRY_CA 7407 2.08 5.09 0.96 71 TR_XM_SPAMCOP 7383 1.56 5.08 0.26 72 XM_SPF_SoftFail 7081 7.23 4.87 8.10 73 XM_UB50 6818 1.86 4.69 0.81 74 BAYES_95 6728 3.12 4.63 2.57 75 XMStrtUSub 6677 4.44 4.59 4.39 76 SpammyFromTLD_01 6424 1.69 4.42 0.68 77 TR_XM_SpammyWords5 6296 2.14 4.33 1.34 78 T_REMOTE_IMAGE 6248 3.63 4.30 3.38 79 XM_B_SpammyTLD 6108 2.71 4.20 2.16 80 XMNumbers 6057 3.50 4.16 3.26 81 UPPERCASE_75_100 5756 1.55 3.96 0.66 82 XM_GoogleGroups 5641 2.36 3.88 1.80 83 XM_OfRef6 5634 2.07 3.87 1.40 84 XM_B_Investor 5608 2.15 3.86 1.53 85 XM_DIRTYINTL 5574 1.25 3.83 0.30 86 MIME_QP_LONG_LINE 5480 4.91 3.77 5.33 87 XMLngstWrd_00 5480 1.86 3.77 1.16 88 RCVD_IN_VALIDITY_SAFE 5466 4.16 3.76 4.31 89 KHOP_HELO_FCRDNS 5430 4.23 3.73 4.42 90 XMLngstWrd_01 5411 1.81 3.72 1.11 91 MIME_HTML_MOSTLY 5353 2.53 3.68 2.11 92 XMLngstWrd_02 5315 1.72 3.65 1.00 93 RCVD_IN_VALIDITY_RPBL 5048 0.95 3.47 0.02 94 HTML_IMAGE_RATIO_06 5021 4.06 3.45 4.28 95 RCVD_IN_MSPIKE_L5 4936 1.04 3.39 0.17 96 XMLngstWrd_03 4933 1.58 3.39 0.91 97 XMLngstWrd_04 4863 1.52 3.34 0.84 98 HTML_TITLE_SUBJ_DIFF 4846 1.40 3.33 0.69 99 RCVD_IN_VALIDITY_CERTIFIED 4773 3.75 3.28 3.92 100 SUBJ_ALL_CAPS 4679 3.42 3.22 3.50 101 T_XMDrugObfuBody_14 4627 2.17 3.18 1.79 102 DKIM_INVALID 4525 2.44 3.11 2.19 103 XM_B_Phish66 4464 2.25 3.07 1.95 104 TM2_M_URI_OPT_OUT 4381 2.60 3.01 2.45 105 RCVD_IN_IADB_LISTED 4283 4.57 2.94 5.18 106 RCVD_IN_PSBL 4146 0.85 2.85 0.11 107 T_TooManySym_01 4137 4.91 2.84 5.68 108 XM_UB99 4035 0.75 2.77 0.00 109 TR_XM_SpammyWords3 3948 1.11 2.71 0.51 110 URI_NOVOWEL 3789 2.35 2.61 2.25 111 XMDiploma_00 3708 1.79 2.55 1.51 112 T_XMDrugObfuBody_08 3680 1.86 2.53 1.61 113 BOTNET_NORDNS 3668 0.70 2.52 0.03 114 RCVD_IN_IADB_SPF 3648 4.07 2.51 4.65 115 XM_CamelCaseFrm001 3644 1.87 2.51 1.64 116 SpammyFromTLD_02 3623 0.93 2.49 0.35 117 USER_IN_DEF_DKIM_WL 3590 9.53 2.47 12.14 118 XM_B_SpammyWords4 3561 1.03 2.45 0.50 119 XMBody_17 3541 0.98 2.43 0.45 120 XM_B_Unsub2 3467 1.76 2.38 1.53 121 TR_XM_MSPIKECOMBO2 3459 0.71 2.38 0.10 122 RCVD_IN_IADB_DK 3379 3.61 2.32 4.09 123 T_FILL_THIS_FORM_SHORT 3379 1.28 2.32 0.89 124 XM_DK_Undo_01 3358 1.62 2.31 1.36 125 RCVD_IN_IADB_SENDERID 3319 3.71 2.28 4.24 126 XM_UB999 3147 0.58 2.16 0.00 127 RCVD_IN_MSPIKE_L3 3142 0.95 2.16 0.50 128 URI_HEX 3132 1.59 2.15 1.38 129 HTML_IMAGE_RATIO_08 3081 6.26 2.12 7.78 130 TR_Symld_Words 3069 1.66 2.11 1.50 131 MAILING_LIST_MULTI 2986 2.34 2.05 2.45 132 T_XMHurry_00 2927 0.95 2.01 0.56 133 XMSexyCombo_01 2853 0.89 1.96 0.49 134 RELAYCOUNTRY_RU 2835 0.54 1.95 0.02 135 TR_XM_SB_Phish 2824 2.14 1.94 2.21 136 RELAYCOUNTRY_AU 2792 0.74 1.92 0.30 137 XMSubPhish11 2785 2.13 1.91 2.21 138 TR_XM_NoHeaderRelay 2752 0.64 1.89 0.17 139 TR_XM_PHPDW 2727 0.77 1.88 0.36 140 XM_B_COVIDMETA 2714 0.91 1.87 0.56 141 BAYES_40 2690 4.25 1.85 5.13 142 XMStockSpam_06 2670 3.11 1.84 3.59 143 TR_XM_PHPForged 2654 0.72 1.82 0.32 144 TR_XM_FormFill2 2618 0.72 1.80 0.32 145 XM_H_PHPOS 2595 0.71 1.78 0.31 146 XM_URI_RBL 2541 0.55 1.75 0.10 147 HTML_IMAGE_ONLY_08 2495 0.54 1.72 0.11 148 RCVD_IN_IADB_VOUCHED 2467 2.70 1.70 3.07 149 BODY_URI_ONLY 2458 0.46 1.69 0.01 150 FROM_EXCESS_BASE64 2419 2.50 1.66 2.81 151 HTML_TAG_BALANCE_CENTER 2407 0.55 1.66 0.15 152 URIBL_DBL_SPAM 2363 0.45 1.62 0.02 153 GOOG_STO_IMG_HTML 2357 0.44 1.62 0.00 154 XM_ProductURIs 2342 1.34 1.61 1.24 155 T_XMDrugObfuBody_00 2324 0.96 1.60 0.72 156 XMSubNoVowel 2313 1.37 1.59 1.29 157 BAYES_20 2274 3.17 1.56 3.76 158 XMReplyNow 2262 0.59 1.56 0.23 159 HTML_FONT_SIZE_LARGE 2211 0.48 1.52 0.10 160 URIBL_BLACK 2205 0.45 1.52 0.05 161 XMSubMetaI_00 2197 0.91 1.51 0.69 162 TR_Mismatch_TLD_02 2166 0.46 1.49 0.09 163 PDS_OTHER_BAD_TLD 2112 0.61 1.45 0.30 164 TR_XM_FormFill 2093 0.40 1.44 0.01 165 MIXED_CENTER_CASE 2074 0.39 1.43 0.00 166 MIXED_HREF_CASE 2071 0.39 1.42 0.00 167 MIXED_IMG_CASE 2060 0.39 1.42 0.00 168 MIXED_AREA_CASE 2057 0.38 1.41 0.00 169 MIXED_FONT_CASE 2051 0.38 1.41 0.00 170 ALL_TRUSTED 2037 12.09 1.40 16.04 171 XMBdyGiftCard01 2028 0.84 1.39 0.63 172 RELAYCOUNTRY_FR 2015 0.54 1.39 0.23 173 MONEY_NOHTML 1952 0.42 1.34 0.08 174 XMPhish30 1934 0.71 1.33 0.48 175 T_Symld_Words_02 1929 0.76 1.33 0.56 176 TR_LOTS_OF_MONEY3 1916 0.51 1.32 0.22 177 TooManyTo_002 1912 1.84 1.31 2.04 178 XMGenDplmaNmb 1892 1.06 1.30 0.97 179 RELAYCOUNTRY_GB 1876 0.92 1.29 0.79 180 FROM_SUSPICIOUS_NTLD 1875 0.38 1.29 0.04 181 TR_BOTNET_NEGATE 1861 0.59 1.28 0.33 182 XM_H_Undi_Recip 1857 0.47 1.28 0.18 183 URI_TRY_3LD 1835 0.79 1.26 0.61 184 TM2_M_A_HREF_HREF 1833 0.72 1.26 0.53 185 RELAYCOUNTRY_DE 1759 0.52 1.21 0.26 186 FROM_SUSPICIOUS_NTLD_FP 1746 0.35 1.20 0.04 187 XMHTML_After_End 1728 0.86 1.19 0.74 188 HTTPS_HTTP_MISMATCH 1695 0.94 1.17 0.86 189 TooManyTo_003 1694 1.30 1.16 1.35 190 XM_H_Long_From02 1663 0.99 1.14 0.93 191 XM_Body_Dirty_Words_01 1636 0.58 1.12 0.38 192 XM_UB60 1635 0.36 1.12 0.07 193 LongTLD 1600 0.39 1.10 0.12 194 TR_XM_BayesRelay 1574 0.30 1.08 0.01 195 RELAYCOUNTRY_BR 1564 0.30 1.08 0.01 196 HK_RANDOM_REPLYTO 1564 0.36 1.08 0.09 197 TooManyTo_004 1559 0.98 1.07 0.95 198 XMPhish14 1556 0.75 1.07 0.64 199 HTML_FONT_TINY_NORDNS 1543 0.34 1.06 0.08 200 DIET_1 1540 0.55 1.06 0.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 349013 90.24 94.64 88.62 2 RELAYCOUNTRY_US 320809 81.34 81.01 81.46 3 XM_B_Unicode 281418 73.21 77.96 71.46 4 DKIM_SIGNED 270071 73.44 86.61 68.58 5 DCC_CHECK_NEGATIVE 265567 57.19 29.46 67.43 6 XM_DK_Pass 264811 71.65 83.61 67.24 7 DKIM_VALID 261441 71.00 83.50 66.38 8 BAYES_50 212249 50.45 41.13 53.89 9 DKIM_VALID_AU 202340 54.87 64.33 51.38 10 XM_B_SpammyWords 185750 51.76 64.21 47.16 11 XMListUnsubscribeExists 177748 51.28 67.92 45.13 12 XM_B_Unicode3 177368 44.88 44.45 45.04 13 T_TM2_M_HEADER_IN_MSG 138784 31.70 22.10 35.24 14 DCC_CHECK 128115 42.77 70.52 32.53 15 RCVD_IN_MSPIKE_WL 110356 26.14 21.05 28.02 16 DKIM_VALID_EF 100293 26.80 30.41 25.47 17 HTML_FONT_LOW_CONTRAST 96103 26.62 32.62 24.40 18 FVGT_m_MULTI_ODD 88660 25.22 32.56 22.51 19 LOC_TINY_FONT_1 84678 25.40 35.97 21.50 20 XMSubLong 80315 21.47 24.40 20.39 21 XM_B_SpammyWords2 79435 24.57 36.48 20.17 22 MIME_HTML_ONLY 76160 22.94 32.68 19.34 23 RCVD_IN_MSPIKE_H2 73103 20.57 25.99 18.56 24 T_KAM_HTML_FONT_INVALID 69162 20.07 26.85 17.56 25 ALL_TRUSTED 63177 12.09 1.40 16.04 26 RCVD_IN_MSPIKE_H3 60515 15.13 14.47 15.37 27 BAYES_00 54762 10.43 1.02 13.90 28 IN_ZIMBRA_NJ_WHITELIST 48948 9.10 0.10 12.43 29 LOTS_OF_MONEY 48004 12.69 14.05 12.19 30 USER_IN_DEF_DKIM_WL 47809 9.53 2.47 12.14 31 XM_Multi_Part_URI 44559 12.64 16.24 11.31 32 XM_Body_Dirty_Words 43460 14.18 22.69 11.04 33 RCVD_IN_MSPIKE_H4 42523 9.56 6.20 10.80 34 XM_B_Unsub 36331 10.63 14.43 9.23 35 BAYES_60 35011 8.42 7.14 8.89 36 LotsOfNums_01 34584 8.37 7.24 8.78 37 XM_Evil_Numbers_Gen 33417 8.96 10.24 8.49 38 XM_SPF_SoftFail 31918 7.23 4.87 8.10 39 XM_DKIMWhitelistDomains 31628 5.93 0.25 8.03 40 HTML_IMAGE_RATIO_08 30651 6.26 2.12 7.78 41 TooManyTo_001 29550 6.95 5.47 7.50 42 TR_XM_SpammyWords4 28570 8.36 11.34 7.25 43 UNPARSEABLE_RELAY 28496 9.02 13.87 7.24 44 HTML_FONT_FACE_BAD 27787 5.37 0.80 7.06 45 TR_XM_DK_Bayes 24867 4.76 0.54 6.31 46 XM_DK_Undo_02 24511 16.21 43.27 6.22 47 TR_XM_DK_Bayes1 24356 4.66 0.53 6.18 48 HTML_IMAGE_RATIO_02 22955 6.26 7.43 5.83 49 TR_XM_UnparsRelay 22646 7.84 13.49 5.75 50 T_TooManySym_01 22361 4.91 2.84 5.68 51 MPART_ALT_DIFF 21399 6.53 9.49 5.43 52 TR_XM_DK_Bayes2 21254 4.06 0.45 5.40 53 XM_SendGrid 21028 6.34 9.05 5.34 54 MIME_QP_LONG_LINE 20973 4.91 3.77 5.33 55 XM_H_Long_From01 20459 5.54 6.46 5.19 56 RCVD_IN_IADB_LISTED 20387 4.57 2.94 5.18 57 BAYES_40 20222 4.25 1.85 5.13 58 BAYES_99 19470 12.77 33.95 4.94 59 HTML_IMAGE_RATIO_04 18766 4.89 5.24 4.76 60 RCVD_IN_IADB_SPF 18301 4.07 2.51 4.65 61 TR_XM_DKIM_Undo 17952 12.15 32.69 4.56 62 KHOP_HELO_FCRDNS 17402 4.23 3.73 4.42 63 XMStrtUSub 17279 4.44 4.59 4.39 64 RCVD_IN_VALIDITY_SAFE 16970 4.16 3.76 4.31 65 XM_PDF 16952 3.40 0.96 4.30 66 BAYES_80 16927 5.23 7.77 4.30 67 HTML_IMAGE_RATIO_06 16859 4.06 3.45 4.28 68 BOTNET_IPINHOSTNAME 16804 6.52 12.63 4.27 69 RCVD_IN_IADB_SENDERID 16684 3.71 2.28 4.24 70 RCVD_IN_IADB_DK 16109 3.61 2.32 4.09 71 XM_B_SpammyWords3 15931 6.31 12.46 4.05 72 BAYES_999 15771 10.03 26.35 4.00 73 RCVD_IN_VALIDITY_CERTIFIED 15437 3.75 3.28 3.92 74 MIME_HTML_ONLY_MULTI 14937 4.46 6.27 3.79 75 RELAYCOUNTRY_META 14842 8.78 22.37 3.77 76 BAYES_20 14794 3.17 1.56 3.76 77 XMStockSpam_06 14124 3.11 1.84 3.59 78 XMSexyCombo_05 13842 5.39 10.48 3.51 79 SUBJ_ALL_CAPS 13779 3.42 3.22 3.50 80 FILL_THIS_FORM 13752 2.61 0.23 3.49 81 XM_B_Phish_Phrases 13501 4.07 5.83 3.43 82 TR_XM_DK_SendGrid 13370 4.09 5.98 3.39 83 T_REMOTE_IMAGE 13301 3.63 4.30 3.38 84 TR_XM_PhishingBody 13155 4.12 6.23 3.34 85 XMNumbers 12841 3.50 4.16 3.26 86 XM_H_Trusted_IP 12682 2.35 0.00 3.22 87 XM_UncommonTLD01 12192 4.93 9.90 3.10 88 RCVD_IN_IADB_VOUCHED 12089 2.70 1.70 3.07 89 FSL_BULK_SIG 12065 6.05 14.15 3.06 90 XMSubMetaSx_00 11935 4.00 6.61 3.03 91 T_TooManySym_02 11439 2.37 0.94 2.90 92 FROM_EXCESS_BASE64 11051 2.50 1.66 2.81 93 ANY_BOUNCE_MESSAGE 10621 2.17 0.75 2.70 94 BOUNCE_MESSAGE 10620 2.17 0.75 2.70 95 BAYES_05 10276 2.12 0.79 2.61 96 BAYES_95 10112 3.12 4.63 2.57 97 HTML_MIME_NO_HTML_TAG 9753 3.56 6.49 2.48 98 MAILING_LIST_MULTI 9647 2.34 2.05 2.45 99 TM2_M_URI_OPT_OUT 9644 2.60 3.01 2.45 100 URI_NOVOWEL 8862 2.35 2.61 2.25 101 URG_BIZ 8751 1.67 0.19 2.22 102 TR_XM_SB_Phish 8719 2.14 1.94 2.21 103 XMSubPhish11 8687 2.13 1.91 2.21 104 DKIM_INVALID 8630 2.44 3.11 2.19 105 XM_B_SpammyTLD 8518 2.71 4.20 2.16 106 MIME_HTML_MOSTLY 8317 2.53 3.68 2.11 107 TooManyTo_002 8025 1.84 1.31 2.04 108 RCVD_IN_IADB_OPTIN 7976 1.75 1.01 2.03 109 XM_B_Phish66 7688 2.25 3.07 1.95 110 TR_DCC_Bayes_99 7637 8.04 24.58 1.94 111 RCVD_IN_MSPIKE_H5 7318 1.46 0.37 1.86 112 INVALID_MSGID 7149 1.43 0.37 1.82 113 XM_GoogleGroups 7073 2.36 3.88 1.80 114 T_XMDrugObfuBody_14 7056 2.17 3.18 1.79 115 HELO_NODOT 6912 1.45 0.62 1.76 116 HELO_NO_DOMAIN 6901 1.45 0.62 1.75 117 TM2_M_VERY_LONG_WORD 6705 2.96 6.38 1.70 118 IN_HORDE_ADDRESS_BOOK 6594 1.27 0.19 1.67 119 XM_CamelCaseFrm001 6453 1.87 2.51 1.64 120 T_XMDrugObfuBody_08 6334 1.86 2.53 1.61 121 MSGID_NOFQDN1 6223 1.21 0.21 1.58 122 TO_MALFORMED 6044 1.12 0.00 1.53 123 XM_B_Unsub2 6008 1.76 2.38 1.53 124 XM_B_Investor 6007 2.15 3.86 1.53 125 XMDiploma_00 5963 1.79 2.55 1.51 126 TR_XM_SpammyRelay 5952 4.02 10.82 1.51 127 TR_Symld_Words 5909 1.66 2.11 1.50 128 TVD_RCVD_IP 5764 1.18 0.42 1.46 129 BOTNET 5697 4.15 11.46 1.45 130 XM_OfRef6 5531 2.07 3.87 1.40 131 URI_HEX 5451 1.59 2.15 1.38 132 XM_DK_Undo_01 5360 1.62 2.31 1.36 133 TooManyTo_003 5302 1.30 1.16 1.35 134 TR_XM_SpammyWords5 5258 2.14 4.33 1.34 135 XMSubNoVowel 5064 1.37 1.59 1.29 136 XM_ProductURIs 4884 1.34 1.61 1.24 137 UNTRUSTED_Relay 4699 3.98 11.51 1.19 138 XMLngstWrd_00 4564 1.86 3.77 1.16 139 XMGappySubj_01 4531 0.88 0.14 1.15 140 XMCapTrack 4366 0.90 0.34 1.11 141 XMLngstWrd_01 4352 1.81 3.72 1.11 142 RCVD_IN_MSPIKE_BL 4310 2.56 6.53 1.09 143 TR_XM_MSPIKECOMBO 4307 2.54 6.47 1.09 144 XMBSHREFv2 4143 0.86 0.32 1.05 145 TR_XM_SpammyWords2 4103 3.87 11.53 1.04 146 XMLngstWrd_02 3948 1.72 3.65 1.00 147 XMGenDplmaNmb 3816 1.06 1.30 0.97 148 RELAYCOUNTRY_CA 3791 2.08 5.09 0.96 149 TVD_SPACE_RATIO 3789 0.78 0.30 0.96 150 TooManyTo_004 3730 0.98 1.07 0.95 151 XM_H_Long_From02 3669 0.99 1.14 0.93 152 XM_E_Blogspot 3648 0.72 0.18 0.93 153 XMLngstWrd_03 3593 1.58 3.39 0.91 154 T_FILL_THIS_FORM_SHORT 3513 1.28 2.32 0.89 155 TR_MetaPhish_Combo_01 3395 0.89 0.95 0.86 156 HTTPS_HTTP_MISMATCH 3385 0.94 1.17 0.86 157 XMLngstWrd_04 3325 1.52 3.34 0.84 158 RCVD_IN_RP_SAFE 3238 0.82 0.81 0.82 159 DKIM_ADSP_CUSTOM_MED 3217 0.86 0.99 0.82 160 XM_UB50 3199 1.86 4.69 0.81 161 RELAYCOUNTRY_GB 3105 0.92 1.29 0.79 162 T_TooManySym_03 3064 0.63 0.24 0.78 163 RCVD_IN_BL_SPAMCOP_NET 2999 3.55 11.10 0.76 164 RCVD_IN_RP_CERTIFIED 2966 0.74 0.72 0.75 165 TooManyTo_005 2920 0.81 0.99 0.74 166 XMHTML_After_End 2910 0.86 1.19 0.74 167 TR_XM_MaxUnsub 2845 2.31 6.60 0.72 168 T_XMDrugObfuBody_00 2836 0.96 1.60 0.72 169 XMBrknScrpt_02 2767 0.72 0.77 0.70 170 HTML_TITLE_SUBJ_DIFF 2705 1.40 3.33 0.69 171 XMSubMetaI_00 2702 0.91 1.51 0.69 172 HTML_IMAGE_ONLY_20 2694 0.59 0.34 0.68 173 SpammyFromTLD_01 2678 1.69 4.42 0.68 174 UPPERCASE_75_100 2584 1.55 3.96 0.66 175 XMBody_95 2520 0.53 0.23 0.64 176 XMPhish14 2503 0.75 1.07 0.64 177 XMBdyGiftCard01 2478 0.84 1.39 0.63 178 HTML_TAG_BALANCE_BODY 2475 0.70 0.89 0.63 179 URI_TRY_3LD 2413 0.79 1.26 0.61 180 FROM_GOV_DKIM_AU 2353 0.46 0.09 0.60 181 XM_RXBody 2299 0.64 0.78 0.58 182 XM_ShortIntro_01 2248 0.58 0.60 0.57 183 XMSubMetaSxObfu_03 2229 0.66 0.91 0.57 184 T_XMHurry_00 2216 0.95 2.01 0.56 185 XM_B_COVIDMETA 2197 0.91 1.87 0.56 186 TR_MSPIKEBAYES00 2192 0.42 0.03 0.56 187 T_Symld_Words_02 2187 0.76 1.33 0.56 188 T_OBFU_PDF_ATTACH 2133 0.46 0.22 0.54 189 XMMoneyMeta_00 2103 0.64 0.93 0.53 190 XMHTMLBadTable_001 2079 0.65 0.99 0.53 191 TM2_M_A_HREF_HREF 2070 0.72 1.26 0.53 192 SHORT_HELO_AND_INLINE_IMAGE 2053 0.40 0.08 0.52 193 NML_ADSP_CUSTOM_MED 2053 0.61 0.86 0.52 194 TR_XM_SpammyWords3 2025 1.11 2.71 0.51 195 XM_H_PHPMailer 2002 0.60 0.85 0.51 196 XM_B_SpammyWords4 1971 1.03 2.45 0.50 197 RCVD_IN_MSPIKE_L3 1969 0.95 2.16 0.50 198 RCVD_IN_SORBS_DUL 1952 0.44 0.28 0.50 199 XMSexyCombo_01 1936 0.89 1.96 0.49 200 XMPhish30 1877 0.71 1.33 0.48 ----------------------------------------------------------------------