Email: 502723 Autolearn: 0 AvgScore: 3.75 AvgScanTime: 1.44 sec Spam: 165004 Autolearn: 0 AvgScore: 13.67 AvgScanTime: 1.56 sec Ham: 337719 Autolearn: 0 AvgScore: -1.10 AvgScanTime: 1.38 sec Time Spent Running SA: 200.75 hours Time Spent Processing Spam: 71.66 hours Time Spent Processing Ham: 129.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 158288 88.80 95.93 85.31 2 DKIM_SIGNED 145662 77.56 88.28 72.33 3 XM_DK_Pass 142477 75.48 86.35 70.18 4 DKIM_VALID 141318 74.61 85.65 69.22 5 RELAYCOUNTRY_US 137821 81.57 83.53 80.62 6 XM_B_Unicode 130561 72.73 79.13 69.61 7 DCC_CHECK 123339 45.72 74.75 31.54 8 XMListUnsubscribeExists 114712 54.59 69.52 47.30 9 DKIM_VALID_AU 107915 57.43 65.40 53.53 10 XM_B_SpammyWords 106304 49.99 64.43 42.93 11 BAYES_50 73894 51.53 44.78 54.83 12 XM_B_Unicode3 72560 41.54 43.97 40.35 13 RCVD_IN_MSPIKE_H2 71864 38.01 43.55 35.31 14 XM_DK_Undo_02 64986 17.24 39.38 6.42 15 XM_B_SpammyWords2 60957 24.13 36.94 17.87 16 FVGT_m_MULTI_ODD 59557 28.09 36.09 24.18 17 LOC_TINY_FONT_1 57373 25.74 34.77 21.33 18 MIME_HTML_ONLY 56658 23.69 34.34 18.49 19 HTML_FONT_LOW_CONTRAST 52852 27.91 32.03 25.90 20 BAYES_99 52008 14.02 31.52 5.47 21 TR_XM_DKIM_Undo 50535 13.21 30.63 4.70 22 DKIM_VALID_EF 48515 27.44 29.40 26.48 23 T_KAM_HTML_FONT_INVALID 46241 22.03 28.02 19.09 24 DCC_CHECK_NEGATIVE 41627 54.24 25.23 68.42 25 BAYES_999 41001 11.11 24.85 4.39 26 XMSubLong 37801 22.33 22.91 22.05 27 TR_DCC_Bayes_99 36578 8.53 22.17 1.87 28 XM_Body_Dirty_Words 35085 14.57 21.26 11.30 29 T_TM2_M_HEADER_IN_MSG 33933 27.30 20.56 30.59 30 RELAYCOUNTRY_META 33688 9.32 20.42 3.90 31 XM_Multi_Part_URI 26141 12.61 15.84 11.03 32 XM_B_Unsub 25122 10.48 15.23 8.17 33 TR_XM_BayesUnsub 24447 9.19 14.82 6.44 34 BOTNET_IPINHOSTNAME 22414 7.43 13.58 4.43 35 UNPARSEABLE_RELAY 22004 9.53 13.34 7.67 36 TR_XM_UnparsRelay 21453 8.33 13.00 6.04 37 LOTS_OF_MONEY 20876 9.12 12.65 7.40 38 FSL_BULK_SIG 20875 6.17 12.65 3.00 39 XM_B_SpammyWords3 19750 6.45 11.97 3.75 40 RCVD_IN_MSPIKE_WL 18703 11.19 11.33 11.12 41 MPART_ALT_DIFF 18469 6.89 11.19 4.79 42 TR_XM_SpammyWords4 17718 6.79 10.74 4.85 43 RCVD_IN_MSPIKE_H3 17374 9.66 10.53 9.23 44 TR_XM_SpammyRelay 17324 4.42 10.50 1.45 45 BOTNET 17302 4.44 10.49 1.49 46 XMSexyCombo_05 17166 5.71 10.40 3.41 47 TR_XM_SpammyWords2 17037 4.05 10.33 0.98 48 XM_UncommonTLD01 14511 5.29 8.79 3.58 49 UNTRUSTED_Relay 14376 3.68 8.71 1.23 50 XM_Evil_Numbers_Gen 14350 8.27 8.70 8.07 51 MIME_HTML_ONLY_MULTI 14170 5.05 8.59 3.33 52 TM2_M_VERY_LONG_WORD 14054 3.56 8.52 1.14 53 HTML_MIME_NO_HTML_TAG 13931 3.92 8.44 1.70 54 RCVD_IN_BL_SPAMCOP_NET 13791 3.13 8.36 0.57 55 BAYES_80 13042 5.58 7.90 4.45 56 LotsOfNums_01 12937 8.29 7.84 8.51 57 XM_SendGrid 11968 5.90 7.25 5.24 58 BAYES_60 11510 8.64 6.98 9.45 59 TR_XM_PhishingBody 11345 4.43 6.88 3.24 60 HTML_IMAGE_RATIO_02 11297 5.90 6.85 5.44 61 RELAYCOUNTRY_CA 11046 3.01 6.69 1.20 62 XMSubMetaSx_00 10844 4.79 6.57 3.92 63 XM_H_Long_From01 10835 5.69 6.57 5.25 64 XMLngstWrd_00 10225 2.37 6.20 0.51 65 XMLngstWrd_01 10160 2.31 6.16 0.43 66 XMLngstWrd_02 10015 2.21 6.07 0.33 67 XM_GoogleGroups 10009 2.88 6.07 1.33 68 XMLngstWrd_03 9514 2.05 5.77 0.24 69 HTML_IMAGE_RATIO_04 9470 5.45 5.74 5.31 70 HTML_TITLE_SUBJ_DIFF 9413 1.89 5.70 0.03 71 XMLngstWrd_04 9345 1.98 5.66 0.18 72 XM_B_Phish_Phrases 9291 4.07 5.63 3.31 73 UPPERCASE_75_100 9246 1.86 5.60 0.03 74 TR_XM_DK_SendGrid 8194 3.91 4.97 3.39 75 T_REMOTE_IMAGE 8157 4.28 4.94 3.95 76 TR_XM_SPAMCOP 8134 1.81 4.93 0.29 77 XM_B_SpammyTLD 8124 3.54 4.92 2.87 78 XM_B_Investor 7775 2.65 4.71 1.65 79 XMStrtUSub 7636 4.50 4.63 4.44 80 TooManyTo_001 7545 7.15 4.57 8.41 81 XM_SPF_SoftFail 7544 3.42 4.57 2.86 82 BAYES_95 7510 3.33 4.55 2.74 83 XM_UB50 6408 1.80 3.88 0.79 84 MIME_QP_LONG_LINE 6393 4.80 3.87 5.26 85 T_XMDrugObfuBody_14 6329 2.91 3.84 2.46 86 XM_B_Phish66 6243 2.56 3.78 1.97 87 MIME_HTML_MOSTLY 6207 2.80 3.76 2.33 88 XM_DIRTYINTL 6106 1.41 3.70 0.29 89 SpammyFromTLD_01 5940 1.71 3.60 0.78 90 XMNumbers 5806 4.13 3.52 4.43 91 XMDiploma_00 5607 1.99 3.40 1.30 92 HTML_IMAGE_RATIO_06 5520 3.95 3.35 4.24 93 XM_OfRef6 5358 1.80 3.25 1.09 94 T_XMDrugObfuBody_08 5264 1.94 3.19 1.33 95 HTML_IMAGE_RATIO_08 5254 2.54 3.18 2.22 96 T_TooManySym_01 5200 5.68 3.15 6.91 97 RCVD_IN_VALIDITY_SAFE 5140 4.06 3.12 4.52 98 XM_CamelCaseFrm001 4901 2.22 2.97 1.85 99 TR_XM_SpammyWords5 4858 1.86 2.94 1.33 100 URIBL_DBL_SPAM 4715 0.95 2.86 0.01 101 KHOP_HELO_FCRDNS 4640 2.22 2.81 1.93 102 XM_B_Unsub2 4520 1.94 2.74 1.55 103 DKIM_INVALID 4344 2.95 2.63 3.11 104 RCVD_IN_IADB_LISTED 4232 4.61 2.56 5.62 105 TM2_M_URI_OPT_OUT 4217 2.30 2.56 2.18 106 RCVD_IN_VALIDITY_RPBL 4180 0.88 2.53 0.08 107 RCVD_IN_VALIDITY_CERTIFIED 4135 3.50 2.51 3.99 108 PDS_OTHER_BAD_TLD 4118 0.97 2.50 0.22 109 XMSexyCombo_01 3979 1.57 2.41 1.15 110 SpammyFromTLD_02 3886 1.05 2.36 0.41 111 RCVD_IN_IADB_SPF 3794 4.04 2.30 4.88 112 XM_DK_Undo_01 3715 1.79 2.25 1.56 113 XM_B_COVIDMETA 3666 1.06 2.22 0.49 114 BOTNET_NORDNS 3616 0.73 2.19 0.02 115 T_FILL_THIS_FORM_SHORT 3611 1.35 2.19 0.94 116 RCVD_IN_IADB_DK 3607 3.52 2.19 4.18 117 RCVD_IN_IADB_SENDERID 3572 3.63 2.16 4.35 118 FROM_EXCESS_BASE64 3560 2.93 2.16 3.30 119 XM_B_SpammyWords4 3520 1.10 2.13 0.60 120 USER_IN_DEF_DKIM_WL 3500 9.01 2.12 12.38 121 TR_XM_SB_Phish 3338 2.11 2.02 2.15 122 URI_NOVOWEL 3292 2.48 2.00 2.71 123 T_XMDrugObfuBody_00 3222 1.10 1.95 0.68 124 XM_UB99 3192 0.64 1.93 0.00 125 XMBody_17 3170 0.87 1.92 0.36 126 XMSubPhish11 3159 2.05 1.91 2.11 127 XM_URI_RBL 3144 0.70 1.91 0.11 128 MAILING_LIST_MULTI 3067 2.77 1.86 3.21 129 URI_PHP_REDIR 2906 0.58 1.76 0.00 130 URI_HEX 2860 1.52 1.73 1.42 131 XMHTML_After_End 2829 1.08 1.71 0.77 132 XMStockSpam_06 2792 1.46 1.69 1.35 133 RCVD_IN_PSBL 2759 0.68 1.67 0.20 134 HK_RANDOM_REPLYTO 2753 0.63 1.67 0.12 135 SUBJ_ALL_CAPS 2723 1.80 1.65 1.88 136 HTML_IMAGE_ONLY_08 2714 0.63 1.64 0.14 137 BAYES_40 2552 3.96 1.55 5.14 138 TR_XM_PHPDW 2537 0.77 1.54 0.39 139 XM_H_Undi_Recip 2528 0.66 1.53 0.23 140 XM_UB999 2464 0.49 1.49 0.00 141 ALL_TRUSTED 2423 11.62 1.47 16.58 142 TR_LOTS_OF_MONEY3 2387 0.63 1.45 0.23 143 TR_XM_PHPForged 2377 0.70 1.44 0.34 144 RELAYCOUNTRY_RU 2352 0.48 1.43 0.03 145 TR_XM_FormFill2 2331 0.69 1.41 0.34 146 XMBdyGiftCard01 2329 0.91 1.41 0.67 147 TR_XM_COVIDMETA1 2324 0.59 1.41 0.19 148 URI_TRY_3LD 2318 0.82 1.40 0.54 149 XM_H_PHPOS 2317 0.68 1.40 0.32 150 RELAYCOUNTRY_DE 2310 0.67 1.40 0.31 151 HTTPS_HTTP_MISMATCH 2293 0.88 1.39 0.64 152 HTML_TAG_BALANCE_CENTER 2277 0.53 1.38 0.12 153 XM_H_Long_From02 2265 1.33 1.37 1.30 154 XMSexyCombo_04 2254 0.88 1.37 0.64 155 XMGenDplmaNmb 2235 0.93 1.35 0.72 156 T_XMHurry_00 2127 0.72 1.29 0.45 157 TR_Symld_Words 2105 1.47 1.28 1.57 158 URIBL_BLACK 2074 0.46 1.26 0.08 159 HTML_TAG_BALANCE_BODY 2073 0.84 1.26 0.64 160 HTML_FONT_SIZE_HUGE 2038 0.46 1.24 0.08 161 MIXED_CENTER_CASE 2031 0.41 1.23 0.00 162 MIXED_HREF_CASE 2016 0.40 1.22 0.00 163 MIXED_IMG_CASE 2004 0.40 1.21 0.01 164 MIXED_AREA_CASE 2000 0.40 1.21 0.00 165 DIET_1 1996 0.58 1.21 0.27 166 XMSubNoVowel 1992 1.24 1.21 1.25 167 BAYES_20 1967 2.81 1.19 3.61 168 MIXED_FONT_CASE 1959 0.39 1.19 0.00 169 URI_GOOG_STO_SPAMMY 1911 0.38 1.16 0.00 170 TR_XM_NoHeaderRelay 1910 0.46 1.16 0.12 171 XMPhish30 1904 0.76 1.15 0.57 172 RELAYCOUNTRY_GB 1899 0.92 1.15 0.81 173 TR_MetaPhish_Combo_01 1858 0.98 1.13 0.90 174 RELAYCOUNTRY_AU 1855 0.56 1.12 0.28 175 HTML_IMAGE_ONLY_20 1846 0.75 1.12 0.57 176 RCVD_IN_MSPIKE_BL 1817 0.38 1.10 0.03 177 RCVD_IN_IADB_VOUCHED 1796 2.92 1.09 3.82 178 XM_PDF 1788 3.43 1.08 4.58 179 XM_B_DynamicLink 1773 0.37 1.07 0.03 180 XMBrknScrpt_02 1769 0.69 1.07 0.50 181 XM_UB60 1755 0.40 1.06 0.07 182 TR_XM_FormFill 1689 0.34 1.02 0.01 183 MPART_ALT_DIFF_COUNT 1611 0.69 0.98 0.55 184 XMMoneyMeta_00 1609 0.69 0.98 0.54 185 XMPhish14 1606 0.61 0.97 0.43 186 REMOVE_BEFORE_LINK 1591 0.45 0.96 0.20 187 TR_XM_MSPIKECOMBO 1562 0.33 0.95 0.02 188 XM_B_SEO 1532 0.97 0.93 0.98 189 XMReplyNow 1502 0.48 0.91 0.27 190 BAYES_00 1496 8.26 0.91 11.85 191 BODY_URI_ONLY 1496 0.31 0.91 0.02 192 DKIM_ADSP_CUSTOM_MED 1477 0.90 0.90 0.90 193 MONEY_NOHTML 1469 0.36 0.89 0.10 194 T_MONEY_PERCENT 1440 0.39 0.87 0.15 195 TR_LOTS_OF_MONEY2 1440 0.39 0.87 0.15 196 T_Symld_Words_02 1440 0.64 0.87 0.52 197 TR_XM_SEO4 1438 0.33 0.87 0.06 198 XMHTMLBadTable_001 1430 0.62 0.87 0.51 199 TR_Mismatch_TLD_01 1423 0.47 0.86 0.28 200 XM_B_DNDMA 1421 0.52 0.86 0.36 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 288118 88.80 95.93 85.31 2 RELAYCOUNTRY_US 272255 81.57 83.53 80.62 3 DKIM_SIGNED 244264 77.56 88.28 72.33 4 XM_DK_Pass 237003 75.48 86.35 70.18 5 XM_B_Unicode 235074 72.73 79.13 69.61 6 DKIM_VALID 233755 74.61 85.65 69.22 7 DCC_CHECK_NEGATIVE 231058 54.24 25.23 68.42 8 BAYES_50 185156 51.53 44.78 54.83 9 DKIM_VALID_AU 180774 57.43 65.40 53.53 10 XMListUnsubscribeExists 159729 54.59 69.52 47.30 11 XM_B_SpammyWords 144993 49.99 64.43 42.93 12 XM_B_Unicode3 136265 41.54 43.97 40.35 13 RCVD_IN_MSPIKE_H2 119240 38.01 43.55 35.31 14 DCC_CHECK 106516 45.72 74.75 31.54 15 T_TM2_M_HEADER_IN_MSG 103298 27.30 20.56 30.59 16 DKIM_VALID_EF 89412 27.44 29.40 26.48 17 HTML_FONT_LOW_CONTRAST 87463 27.91 32.03 25.90 18 FVGT_m_MULTI_ODD 81656 28.09 36.09 24.18 19 XMSubLong 74467 22.33 22.91 22.05 20 LOC_TINY_FONT_1 72050 25.74 34.77 21.33 21 T_KAM_HTML_FONT_INVALID 64484 22.03 28.02 19.09 22 MIME_HTML_ONLY 62431 23.69 34.34 18.49 23 XM_B_SpammyWords2 60352 24.13 36.94 17.87 24 ALL_TRUSTED 55990 11.62 1.47 16.58 25 USER_IN_DEF_DKIM_WL 41804 9.01 2.12 12.38 26 BAYES_00 40011 8.26 0.91 11.85 27 XM_Body_Dirty_Words 38149 14.57 21.26 11.30 28 RCVD_IN_MSPIKE_WL 37570 11.19 11.33 11.12 29 XM_Multi_Part_URI 37236 12.61 15.84 11.03 30 BAYES_60 31919 8.64 6.98 9.45 31 RCVD_IN_MSPIKE_H3 31183 9.66 10.53 9.23 32 LotsOfNums_01 28743 8.29 7.84 8.51 33 TooManyTo_001 28405 7.15 4.57 8.41 34 XM_B_Unsub 27581 10.48 15.23 8.17 35 XM_DKIMWhitelistDomains 27524 5.49 0.05 8.15 36 XM_Evil_Numbers_Gen 27248 8.27 8.70 8.07 37 UNPARSEABLE_RELAY 25908 9.53 13.34 7.67 38 IN_ZIMBRA_NJ_WHITELIST 25676 5.15 0.13 7.60 39 LOTS_OF_MONEY 24988 9.12 12.65 7.40 40 T_TooManySym_01 23343 5.68 3.15 6.91 41 TR_XM_BayesUnsub 21750 9.19 14.82 6.44 42 TR_XM_DK_Bayes 21696 4.54 0.69 6.42 43 XM_DK_Undo_02 21686 17.24 39.38 6.42 44 TR_XM_DK_Bayes1 21187 4.44 0.68 6.27 45 TR_XM_UnparsRelay 20407 8.33 13.00 6.04 46 RCVD_IN_IADB_LISTED 18967 4.61 2.56 5.62 47 TR_XM_DK_Bayes2 18530 3.87 0.55 5.49 48 BAYES_99 18487 14.02 31.52 5.47 49 HTML_IMAGE_RATIO_02 18362 5.90 6.85 5.44 50 HTML_IMAGE_RATIO_04 17932 5.45 5.74 5.31 51 MIME_QP_LONG_LINE 17760 4.80 3.87 5.26 52 XM_H_Long_From01 17747 5.69 6.57 5.25 53 XM_SendGrid 17712 5.90 7.25 5.24 54 BAYES_40 17358 3.96 1.55 5.14 55 RCVD_IN_IADB_SPF 16491 4.04 2.30 4.88 56 TR_XM_SpammyWords4 16394 6.79 10.74 4.85 57 MPART_ALT_DIFF 16190 6.89 11.19 4.79 58 TR_XM_DKIM_Undo 15869 13.21 30.63 4.70 59 XM_PDF 15473 3.43 1.08 4.58 60 RCVD_IN_VALIDITY_SAFE 15277 4.06 3.12 4.52 61 BAYES_80 15026 5.58 7.90 4.45 62 XMStrtUSub 14987 4.50 4.63 4.44 63 XMNumbers 14967 4.13 3.52 4.43 64 BOTNET_IPINHOSTNAME 14960 7.43 13.58 4.43 65 BAYES_999 14838 11.11 24.85 4.39 66 T_TooManySym_02 14770 3.17 0.71 4.37 67 RCVD_IN_IADB_SENDERID 14699 3.63 2.16 4.35 68 HTML_IMAGE_RATIO_06 14328 3.95 3.35 4.24 69 RCVD_IN_IADB_DK 14106 3.52 2.19 4.18 70 RCVD_IN_VALIDITY_CERTIFIED 13464 3.50 2.51 3.99 71 T_REMOTE_IMAGE 13347 4.28 4.94 3.95 72 XMSubMetaSx_00 13223 4.79 6.57 3.92 73 RELAYCOUNTRY_META 13170 9.32 20.42 3.90 74 RCVD_IN_IADB_VOUCHED 12894 2.92 1.09 3.82 75 XM_B_SpammyWords3 12670 6.45 11.97 3.75 76 BAYES_20 12178 2.81 1.19 3.61 77 XM_UncommonTLD01 12090 5.29 8.79 3.58 78 XMSexyCombo_05 11516 5.71 10.40 3.41 79 TR_XM_DK_SendGrid 11459 3.91 4.97 3.39 80 MIME_HTML_ONLY_MULTI 11232 5.05 8.59 3.33 81 XM_B_Phish_Phrases 11189 4.07 5.63 3.31 82 FROM_EXCESS_BASE64 11160 2.93 2.16 3.30 83 TR_XM_PhishingBody 10935 4.43 6.88 3.24 84 XM_H_Trusted_IP 10928 2.17 0.00 3.24 85 MAILING_LIST_MULTI 10840 2.77 1.86 3.21 86 DKIM_INVALID 10509 2.95 2.63 3.11 87 FSL_BULK_SIG 10131 6.17 12.65 3.00 88 XM_B_SpammyTLD 9679 3.54 4.92 2.87 89 XM_SPF_SoftFail 9656 3.42 4.57 2.86 90 ANY_BOUNCE_MESSAGE 9299 2.10 0.77 2.75 91 BOUNCE_MESSAGE 9298 2.10 0.77 2.75 92 BAYES_95 9237 3.33 4.55 2.74 93 URI_NOVOWEL 9166 2.48 2.00 2.71 94 RCVD_IN_IADB_OPTIN 8585 1.91 0.62 2.54 95 BAYES_05 8343 1.86 0.62 2.47 96 T_XMDrugObfuBody_14 8303 2.91 3.84 2.46 97 TooManyTo_002 7912 1.73 0.49 2.34 98 MIME_HTML_MOSTLY 7873 2.80 3.76 2.33 99 HTML_IMAGE_RATIO_08 7503 2.54 3.18 2.22 100 TM2_M_URI_OPT_OUT 7364 2.30 2.56 2.18 101 TR_XM_SB_Phish 7257 2.11 2.02 2.15 102 XMSubPhish11 7140 2.05 1.91 2.11 103 XM_B_Phish66 6648 2.56 3.78 1.97 104 INVALID_MSGID 6643 1.37 0.15 1.97 105 HELO_NODOT 6551 1.47 0.50 1.94 106 HELO_NO_DOMAIN 6549 1.46 0.49 1.94 107 KHOP_HELO_FCRDNS 6522 2.22 2.81 1.93 108 IN_HORDE_ADDRESS_BOOK 6473 1.33 0.11 1.92 109 SUBJ_ALL_CAPS 6333 1.80 1.65 1.88 110 TR_DCC_Bayes_99 6316 8.53 22.17 1.87 111 XM_CamelCaseFrm001 6242 2.22 2.97 1.85 112 RCVD_IN_MSPIKE_H4 5989 1.42 0.69 1.77 113 T_TooManySym_03 5901 1.29 0.35 1.75 114 TO_MALFORMED 5779 1.19 0.12 1.71 115 HTML_MIME_NO_HTML_TAG 5757 3.92 8.44 1.70 116 TVD_RCVD_IP 5658 1.20 0.22 1.68 117 XM_B_Investor 5561 2.65 4.71 1.65 118 HTML_FONT_FACE_BAD 5405 1.28 0.62 1.60 119 TR_Symld_Words 5288 1.47 1.28 1.57 120 XM_DK_Undo_01 5272 1.79 2.25 1.56 121 TooManyTo_003 5236 1.17 0.38 1.55 122 XM_B_Unsub2 5229 1.94 2.74 1.55 123 BOTNET 5028 4.44 10.49 1.49 124 XMGappySubj_01 4972 1.02 0.09 1.47 125 TR_XM_SpammyRelay 4889 4.42 10.50 1.45 126 URI_HEX 4783 1.52 1.73 1.42 127 XMStockSpam_06 4553 1.46 1.69 1.35 128 TR_XM_SpammyWords5 4508 1.86 2.94 1.33 129 T_XMDrugObfuBody_08 4489 1.94 3.19 1.33 130 XM_GoogleGroups 4486 2.88 6.07 1.33 131 XM_H_Long_From02 4406 1.33 1.37 1.30 132 XMDiploma_00 4386 1.99 3.40 1.30 133 XMCapTrack 4231 0.98 0.42 1.25 134 XMSubNoVowel 4227 1.24 1.21 1.25 135 UNTRUSTED_Relay 4145 3.68 8.71 1.23 136 RELAYCOUNTRY_CA 4068 3.01 6.69 1.20 137 XMBSHREFv2 3953 0.88 0.30 1.17 138 XMSexyCombo_01 3894 1.57 2.41 1.15 139 TM2_M_VERY_LONG_WORD 3843 3.56 8.52 1.14 140 TooManyTo_004 3815 0.85 0.29 1.13 141 XM_OfRef6 3696 1.80 3.25 1.09 142 TVD_SPACE_RATIO 3416 0.70 0.07 1.01 143 XM_B_SEO 3322 0.97 0.93 0.98 144 TR_XM_SpammyWords2 3320 4.05 10.33 0.98 145 T_FILL_THIS_FORM_SHORT 3165 1.35 2.19 0.94 146 TooManyTo_005 3127 0.70 0.23 0.93 147 XM_USANA_RCVD 3046 0.61 0.00 0.90 148 TR_MetaPhish_Combo_01 3044 0.98 1.13 0.90 149 DKIM_ADSP_CUSTOM_MED 3036 0.90 0.90 0.90 150 RCVD_IN_RP_SAFE 3012 0.82 0.66 0.89 151 FVGT_m_MULTI_ODD_EMAIL 2964 0.62 0.08 0.88 152 FROM_GOV_DKIM_AU 2852 0.60 0.11 0.84 153 XMNoVowels 2798 0.66 0.31 0.83 154 RELAYCOUNTRY_GB 2739 0.92 1.15 0.81 155 XM_ShortIntro_01 2668 0.68 0.46 0.79 156 RCVD_IN_RP_CERTIFIED 2667 0.70 0.52 0.79 157 XM_UB50 2653 1.80 3.88 0.79 158 SpammyFromTLD_01 2635 1.71 3.60 0.78 159 XMHTML_After_End 2614 1.08 1.71 0.77 160 XMBody_95 2435 0.54 0.17 0.72 161 XMGenDplmaNmb 2426 0.93 1.35 0.72 162 MSGID_NOFQDN1 2316 0.46 0.01 0.69 163 T_XMDrugObfuBody_00 2312 1.10 1.95 0.68 164 RDNS_DYNAMIC 2296 0.70 0.75 0.68 165 XMBdyGiftCard01 2250 0.91 1.41 0.67 166 HTML_TAG_BALANCE_BODY 2168 0.84 1.26 0.64 167 XMSexyCombo_04 2167 0.88 1.37 0.64 168 HTTPS_HTTP_MISMATCH 2145 0.88 1.39 0.64 169 NML_ADSP_CUSTOM_MED 2118 0.65 0.70 0.63 170 XM_Body_Dirty_Words_01 2071 0.68 0.82 0.61 171 T_OBFU_PDF_ATTACH 2058 0.51 0.31 0.61 172 XM_B_SpammyWords4 2027 1.10 2.13 0.60 173 XM_B_COPY_HTML 1940 0.60 0.64 0.57 174 SHORT_HELO_AND_INLINE_IMAGE 1936 0.40 0.06 0.57 175 XMPhish30 1933 0.76 1.15 0.57 176 RCVD_IN_BL_SPAMCOP_NET 1925 3.13 8.36 0.57 177 HTML_IMAGE_ONLY_20 1923 0.75 1.12 0.57 178 XMSolicitRefs_0 1871 0.52 0.46 0.55 179 MPART_ALT_DIFF_COUNT 1846 0.69 0.98 0.55 180 XMMoneyMeta_00 1837 0.69 0.98 0.54 181 NUMERIC_HTTP_ADDR 1835 0.45 0.25 0.54 182 URI_TRY_3LD 1820 0.82 1.40 0.54 183 XM_H_PHPMailer 1819 0.61 0.75 0.54 184 RCVD_IN_SORBS_DUL 1785 0.40 0.14 0.53 185 XMSexyCombo_02 1773 0.42 0.19 0.52 186 T_Symld_Words_02 1773 0.64 0.87 0.52 187 XMLngstWrd_00 1712 2.37 6.20 0.51 188 XMHTMLBadTable_001 1711 0.62 0.87 0.51 189 XMBrknScrpt_02 1688 0.69 1.07 0.50 190 XM_B_COVIDMETA 1671 1.06 2.22 0.49 191 USER_IN_WHITELIST 1665 0.33 0.00 0.49 192 USER_IN_WELCOMELIST 1665 0.33 0.00 0.49 193 XMSubMetaI_00 1631 0.59 0.80 0.48 194 FORGED_GMAIL_RCVD 1555 0.55 0.75 0.46 195 HTML_IMAGE_ONLY_32 1520 0.38 0.22 0.45 196 T_XMHurry_00 1508 0.72 1.29 0.45 197 XM_ProductURIs 1506 0.53 0.69 0.45 198 XMPhish14 1466 0.61 0.97 0.43 199 XMLngstWrd_01 1462 2.31 6.16 0.43 200 XMSlimDrugH 1461 0.50 0.63 0.43 ----------------------------------------------------------------------