Email: 559411 Autolearn: 0 AvgScore: 1.26 AvgScanTime: 1.22 sec Spam: 159572 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.46 sec Ham: 399839 Autolearn: 0 AvgScore: -3.82 AvgScanTime: 1.13 sec Time Spent Running SA: 189.98 hours Time Spent Processing Spam: 64.59 hours Time Spent Processing Ham: 125.38 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 151116 89.58 94.70 87.54 2 DKIM_SIGNED 139520 66.19 87.43 57.71 3 XM_DK_Pass 135566 64.25 84.96 55.99 4 DKIM_VALID 133921 63.36 83.93 55.15 5 RELAYCOUNTRY_US 131699 80.88 82.53 80.23 6 XM_B_Unicode 129222 73.71 80.98 70.81 7 DCC_CHECK 114205 38.22 71.57 24.91 8 XM_B_SpammyWords 105650 47.59 66.21 40.17 9 XMListUnsubscribeExists 104173 45.68 65.28 37.86 10 DKIM_VALID_AU 101928 48.44 63.88 42.28 11 XM_B_Unicode3 71002 43.98 44.50 43.78 12 RCVD_IN_MSPIKE_H2 70882 33.26 44.42 28.81 13 BAYES_50 66031 48.55 41.38 51.41 14 XM_DK_Undo_02 65112 15.83 40.80 5.86 15 XM_B_SpammyWords2 57931 19.78 36.30 13.19 16 LOC_TINY_FONT_1 57265 22.33 35.89 16.92 17 MIME_HTML_ONLY 53200 26.05 33.34 23.14 18 FVGT_m_MULTI_ODD 52509 23.59 32.91 19.87 19 BAYES_99 51802 12.53 32.46 4.57 20 HTML_FONT_LOW_CONTRAST 50236 25.08 31.48 22.52 21 TR_XM_DKIM_Undo 50166 11.82 31.44 3.98 22 DKIM_VALID_EF 50087 24.64 31.39 21.94 23 DCC_CHECK_NEGATIVE 45313 61.75 28.40 75.06 24 T_KAM_HTML_FONT_INVALID 44907 18.70 28.14 14.94 25 BAYES_999 40827 9.89 25.59 3.62 26 XMSubLong 38888 22.39 24.37 21.60 27 XM_Body_Dirty_Words 36564 13.03 22.91 9.08 28 TR_DCC_Bayes_99 35827 7.61 22.45 1.68 29 RELAYCOUNTRY_META 32368 8.12 20.28 3.26 30 T_TM2_M_HEADER_IN_MSG 32027 23.78 20.07 25.27 31 XM_Multi_Part_URI 27785 11.71 17.41 9.43 32 XM_B_Unsub 27574 10.06 17.28 7.19 33 TR_XM_BayesUnsub 26961 8.80 16.90 5.57 34 LOTS_OF_MONEY 23008 8.89 14.42 6.68 35 BOTNET_IPINHOSTNAME 21853 6.70 13.69 3.91 36 UNPARSEABLE_RELAY 21786 8.39 13.65 6.29 37 TR_XM_UnparsRelay 21426 7.48 13.43 5.11 38 FSL_BULK_SIG 19861 5.41 12.45 2.60 39 XM_B_SpammyWords3 19430 5.59 12.18 2.97 40 TR_XM_SpammyWords4 19363 6.64 12.13 4.44 41 TR_XM_SpammyRelay 18384 4.13 11.52 1.19 42 BOTNET 18004 4.26 11.28 1.46 43 TR_XM_SpammyWords2 16997 3.55 10.65 0.71 44 XMSexyCombo_05 15556 4.68 9.75 2.65 45 RCVD_IN_MSPIKE_WL 14654 9.21 9.18 9.23 46 RCVD_IN_BL_SPAMCOP_NET 14176 2.93 8.88 0.56 47 UNTRUSTED_Relay 14125 3.27 8.85 1.05 48 XM_Evil_Numbers_Gen 14078 8.62 8.82 8.54 49 BAYES_80 13854 5.07 8.68 3.64 50 RCVD_IN_MSPIKE_H3 13238 7.84 8.30 7.66 51 LotsOfNums_01 13063 7.26 8.19 6.89 52 XM_UncommonTLD01 12923 4.51 8.10 3.07 53 MPART_ALT_DIFF 12887 10.23 8.08 11.09 54 BAYES_60 12453 7.58 7.80 7.49 55 XM_SendGrid 11736 5.10 7.35 4.20 56 RELAYCOUNTRY_CA 10875 2.70 6.82 1.05 57 TR_XM_PhishingBody 10702 3.70 6.71 2.50 58 HTML_IMAGE_RATIO_02 10448 4.95 6.55 4.31 59 XM_H_Long_From01 10227 4.75 6.41 4.08 60 XMSubMetaSx_00 9861 3.61 6.18 2.59 61 XM_B_Phish_Phrases 9403 3.51 5.89 2.56 62 TR_XM_SPAMCOP 8615 1.72 5.40 0.25 63 BAYES_95 8597 3.11 5.39 2.20 64 HTML_MIME_NO_HTML_TAG 8463 2.68 5.30 1.64 65 XM_B_Investor 8377 2.29 5.25 1.11 66 T_REMOTE_IMAGE 8302 3.72 5.20 3.13 67 MIME_HTML_ONLY_MULTI 8281 8.17 5.19 9.36 68 TM2_M_VERY_LONG_WORD 8203 2.19 5.14 1.02 69 XM_SPF_SoftFail 8091 3.92 5.07 3.47 70 HTML_IMAGE_RATIO_04 7889 14.39 4.94 18.16 71 TR_XM_DK_SendGrid 7580 3.19 4.75 2.56 72 XM_B_SpammyTLD 7382 2.65 4.63 1.86 73 TooManyTo_001 7084 6.26 4.44 6.99 74 XMNumbers 6641 3.88 4.16 3.77 75 XM_B_Phish66 6591 2.25 4.13 1.50 76 XMStrtUSub 6536 10.69 4.10 13.33 77 TR_XM_SpammyWords5 6535 2.06 4.10 1.25 78 MIME_QP_LONG_LINE 6267 4.04 3.93 4.09 79 XM_OfRef6 6156 1.60 3.86 0.70 80 XM_DIRTYINTL 6090 1.25 3.82 0.23 81 MIME_HTML_MOSTLY 5884 2.41 3.69 1.90 82 RCVD_IN_VALIDITY_SAFE 5755 3.78 3.61 3.85 83 XMDiploma_00 5686 1.85 3.56 1.16 84 KHOP_HELO_FCRDNS 5677 2.47 3.56 2.04 85 XM_UB50 5667 1.54 3.55 0.73 86 DKIM_INVALID 5599 2.83 3.51 2.56 87 HTML_IMAGE_RATIO_08 5383 2.26 3.37 1.82 88 T_XMDrugObfuBody_08 5246 1.80 3.29 1.21 89 T_XMDrugObfuBody_14 5225 2.02 3.27 1.51 90 HTML_IMAGE_RATIO_06 5110 5.66 3.20 6.64 91 XM_B_Unsub2 5089 1.76 3.19 1.20 92 XM_CamelCaseFrm001 4877 1.89 3.06 1.43 93 RCVD_IN_VALIDITY_CERTIFIED 4852 3.23 3.04 3.30 94 SpammyFromTLD_01 4495 1.27 2.82 0.65 95 RCVD_IN_VALIDITY_RPBL 4479 0.83 2.81 0.04 96 T_TooManySym_01 4464 4.87 2.80 5.69 97 TM2_M_URI_OPT_OUT 4374 2.20 2.74 1.98 98 XM_H_Undi_Recip 4362 0.93 2.73 0.21 99 XM_DK_Undo_01 4175 1.69 2.62 1.31 100 XM_GoogleGroups 4162 1.52 2.61 1.08 101 XMLngstWrd_00 4136 1.09 2.59 0.49 102 URIBL_DBL_SPAM 4120 0.74 2.58 0.01 103 T_FILL_THIS_FORM_SHORT 4107 1.24 2.57 0.70 104 XMLngstWrd_01 4066 1.03 2.55 0.42 105 XMLngstWrd_02 3912 0.93 2.45 0.33 106 XMLngstWrd_03 3798 0.87 2.38 0.27 107 RCVD_IN_IADB_LISTED 3764 3.57 2.36 4.06 108 XMReplyNow 3708 0.82 2.32 0.22 109 SUBJ_ALL_CAPS 3706 1.69 2.32 1.44 110 BOTNET_NORDNS 3631 0.66 2.28 0.01 111 TR_XM_SB_Phish 3606 2.18 2.26 2.14 112 HTML_TITLE_SUBJ_DIFF 3597 0.66 2.25 0.03 113 XMLngstWrd_04 3563 0.80 2.23 0.22 114 USER_IN_DEF_DKIM_WL 3508 7.49 2.20 9.60 115 TR_XM_PHPDW 3491 0.82 2.19 0.27 116 RCVD_IN_IADB_SPF 3431 3.18 2.15 3.60 117 UPPERCASE_75_100 3391 0.63 2.13 0.03 118 XMSubPhish11 3368 2.12 2.11 2.12 119 XM_B_SpammyWords4 3366 0.87 2.11 0.38 120 TR_XM_PHPForged 3345 0.76 2.10 0.23 121 RCVD_IN_IADB_DK 3303 2.82 2.07 3.13 122 PDS_OTHER_BAD_TLD 3296 0.70 2.07 0.16 123 TR_XM_FormFill2 3291 0.76 2.06 0.24 124 TR_XM_Undi_Recip5 3283 0.59 2.06 0.00 125 XM_H_PHPOS 3280 0.74 2.06 0.22 126 XM_H_Long_From02 3279 1.15 2.05 0.79 127 XMStockSpam_06 3238 1.28 2.03 0.97 128 SpammyFromTLD_02 3238 0.83 2.03 0.35 129 RCVD_IN_IADB_SENDERID 3235 2.89 2.03 3.24 130 XMSexyCombo_01 3226 0.87 2.02 0.41 131 XMGenDplmaNmb 3164 1.04 1.98 0.67 132 XMBody_17 3162 0.75 1.98 0.26 133 XM_UB99 3143 0.56 1.97 0.00 134 TR_XM_Undi_RecipCombo2 3045 0.55 1.91 0.00 135 XM_B_COVIDMETA 3029 0.90 1.90 0.50 136 URI_NOVOWEL 3015 1.96 1.89 1.98 137 MAILING_LIST_MULTI 2929 2.16 1.84 2.29 138 T_XMDrugObfuBody_00 2868 0.96 1.80 0.62 139 XM_URI_RBL 2865 0.59 1.80 0.11 140 UNDISC_MONEY 2837 0.51 1.78 0.00 141 FROM_EXCESS_BASE64 2813 2.05 1.76 2.16 142 RELAYCOUNTRY_FR 2808 0.67 1.76 0.23 143 ALL_TRUSTED 2631 12.91 1.65 17.40 144 BAYES_40 2607 4.49 1.63 5.64 145 TR_XM_NoHeaderRelay 2531 0.53 1.59 0.10 146 XMHTML_After_End 2525 0.89 1.58 0.61 147 URI_HEX 2492 1.16 1.56 1.01 148 TR_XM_Undi_Recip2 2483 0.45 1.56 0.02 149 HTTPS_HTTP_MISMATCH 2450 0.84 1.54 0.57 150 XMBdyGiftCard01 2439 0.97 1.53 0.74 151 TR_XM_Undi_Recip4 2434 0.44 1.53 0.00 152 MONEY_NOHTML 2374 0.48 1.49 0.07 153 TR_XM_COVIDMETA1 2343 0.56 1.47 0.20 154 RCVD_IN_PSBL 2339 0.52 1.47 0.14 155 RELAYCOUNTRY_AU 2307 0.61 1.45 0.27 156 URI_PHP_REDIR 2288 0.41 1.43 0.00 157 HTML_IMAGE_ONLY_08 2255 0.48 1.41 0.11 158 HTML_TAG_BALANCE_CENTER 2237 0.48 1.40 0.11 159 HK_RANDOM_REPLYTO 2224 0.45 1.39 0.08 160 XM_UB999 2211 0.40 1.39 0.00 161 HTML_IMAGE_ONLY_20 2198 0.81 1.38 0.59 162 TR_Mismatch_TLD_02 2195 0.45 1.38 0.08 163 DIET_1 2190 0.55 1.37 0.22 164 TR_XM_Undi_Recip11 2071 0.40 1.30 0.04 165 T_XMHurry_00 2068 0.67 1.30 0.42 166 TR_LOTS_OF_MONEY3 2011 0.49 1.26 0.19 167 TR_XM_Undi_RecipCombo3 1998 0.36 1.25 0.00 168 MIXED_CENTER_CASE 1996 0.36 1.25 0.01 169 URG_BIZ 1995 0.38 1.25 0.03 170 RELAYCOUNTRY_GB 1985 0.78 1.24 0.60 171 MIXED_HREF_CASE 1972 0.36 1.24 0.01 172 MIXED_IMG_CASE 1964 0.36 1.23 0.01 173 MIXED_AREA_CASE 1960 0.35 1.23 0.00 174 BAYES_20 1957 4.19 1.23 5.38 175 RCVD_IN_MSPIKE_BL 1952 0.36 1.22 0.02 176 XMBrknScrpt_02 1944 0.65 1.22 0.42 177 TR_Symld_Words 1942 1.30 1.22 1.33 178 MIXED_FONT_CASE 1930 0.35 1.21 0.01 179 RELAYCOUNTRY_DE 1912 0.51 1.20 0.24 180 XM_B_DynamicLink 1898 0.36 1.19 0.03 181 URIBL_BLACK 1897 0.37 1.19 0.04 182 URI_TRY_3LD 1893 0.67 1.19 0.47 183 HTML_TAG_BALANCE_BODY 1881 0.69 1.18 0.50 184 XM_B_SEO 1807 0.90 1.13 0.81 185 RDNS_DYNAMIC 1798 0.87 1.13 0.76 186 TR_XM_FormFill 1779 0.32 1.11 0.01 187 FILL_THIS_FORM 1767 0.50 1.11 0.25 188 XM_PDF 1766 3.02 1.11 3.79 189 MPART_ALT_DIFF_COUNT 1761 0.64 1.10 0.45 190 XM_UB60 1740 0.36 1.09 0.07 191 XMMoneyMeta_00 1709 0.64 1.07 0.47 192 TR_XM_SEO4 1680 0.33 1.05 0.05 193 XM_UB80 1673 0.31 1.05 0.02 194 FILL_THIS_FORM_LONG 1663 0.37 1.04 0.10 195 RELAYCOUNTRY_RU 1654 0.31 1.04 0.02 196 URI_GOOG_STO_SPAMMY 1652 0.30 1.04 0.00 197 XMSubNoVowel 1633 4.72 1.02 6.19 198 HTML_FONT_SIZE_HUGE 1630 0.32 1.02 0.05 199 XMDateMe_00 1629 0.57 1.02 0.39 200 BODY_URI_ONLY 1628 0.31 1.02 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 350008 89.58 94.70 87.54 2 RELAYCOUNTRY_US 320778 80.88 82.53 80.23 3 DCC_CHECK_NEGATIVE 300105 61.75 28.40 75.06 4 XM_B_Unicode 283114 73.71 80.98 70.81 5 DKIM_SIGNED 230760 66.19 87.43 57.71 6 XM_DK_Pass 223863 64.25 84.96 55.99 7 DKIM_VALID 220506 63.36 83.93 55.15 8 BAYES_50 205562 48.55 41.38 51.41 9 XM_B_Unicode3 175042 43.98 44.50 43.78 10 DKIM_VALID_AU 169066 48.44 63.88 42.28 11 XM_B_SpammyWords 160601 47.59 66.21 40.17 12 XMListUnsubscribeExists 151380 45.68 65.28 37.86 13 RCVD_IN_MSPIKE_H2 115203 33.26 44.42 28.81 14 T_TM2_M_HEADER_IN_MSG 101020 23.78 20.07 25.27 15 DCC_CHECK 99596 38.22 71.57 24.91 16 MIME_HTML_ONLY 92503 26.05 33.34 23.14 17 HTML_FONT_LOW_CONTRAST 90061 25.08 31.48 22.52 18 DKIM_VALID_EF 87728 24.64 31.39 21.94 19 XMSubLong 86372 22.39 24.37 21.60 20 FVGT_m_MULTI_ODD 79430 23.59 32.91 19.87 21 HTML_FONT_FACE_BAD 75160 13.63 0.67 18.80 22 HTML_IMAGE_RATIO_04 72611 14.39 4.94 18.16 23 XM_H_Trusted_IP 71678 12.81 0.00 17.93 24 ALL_TRUSTED 69571 12.91 1.65 17.40 25 LOC_TINY_FONT_1 67640 22.33 35.89 16.92 26 BAYES_00 63228 11.53 0.78 15.81 27 T_KAM_HTML_FONT_INVALID 59725 18.70 28.14 14.94 28 XMStrtUSub 53282 10.69 4.10 13.33 29 XM_B_SpammyWords2 52739 19.78 36.30 13.19 30 MPART_ALT_DIFF 44358 10.23 8.08 11.09 31 USER_IN_DEF_DKIM_WL 38377 7.49 2.20 9.60 32 XM_Multi_Part_URI 37707 11.71 17.41 9.43 33 MIME_HTML_ONLY_MULTI 37438 8.17 5.19 9.36 34 RCVD_IN_MSPIKE_WL 36887 9.21 9.18 9.23 35 XM_Body_Dirty_Words 36300 13.03 22.91 9.08 36 XM_Evil_Numbers_Gen 34146 8.62 8.82 8.54 37 RCVD_IN_MSPIKE_H3 30644 7.84 8.30 7.66 38 BAYES_60 29946 7.58 7.80 7.49 39 XM_B_Unsub 28730 10.06 17.28 7.19 40 TooManyTo_001 27949 6.26 4.44 6.99 41 XM_DKIMWhitelistDomains 27619 5.03 0.32 6.91 42 LotsOfNums_01 27536 7.26 8.19 6.89 43 IN_ZIMBRA_NJ_WHITELIST 26801 4.83 0.12 6.70 44 LOTS_OF_MONEY 26716 8.89 14.42 6.68 45 HTML_IMAGE_RATIO_06 26560 5.66 3.20 6.64 46 UNPARSEABLE_RELAY 25169 8.39 13.65 6.29 47 XMSubNoVowel 24756 4.72 1.02 6.19 48 XM_DK_Undo_02 23438 15.83 40.80 5.86 49 T_TooManySym_01 22770 4.87 2.80 5.69 50 BAYES_40 22538 4.49 1.63 5.64 51 TR_XM_BayesUnsub 22277 8.80 16.90 5.57 52 TR_XM_DK_Bayes 21737 4.06 0.62 5.44 53 BAYES_20 21498 4.19 1.23 5.38 54 TR_XM_DK_Bayes1 21311 3.98 0.61 5.33 55 TR_XM_UnparsRelay 20427 7.48 13.43 5.11 56 BAYES_99 18278 12.53 32.46 4.57 57 TR_XM_DK_Bayes2 18225 3.40 0.49 4.56 58 TR_XM_SpammyWords4 17769 6.64 12.13 4.44 59 HTML_IMAGE_RATIO_02 17233 4.95 6.55 4.31 60 XM_SendGrid 16803 5.10 7.35 4.20 61 MIME_QP_LONG_LINE 16340 4.04 3.93 4.09 62 XM_H_Long_From01 16328 4.75 6.41 4.08 63 RCVD_IN_IADB_LISTED 16230 3.57 2.36 4.06 64 TR_XM_DKIM_Undo 15930 11.82 31.44 3.98 65 BOTNET_IPINHOSTNAME 15648 6.70 13.69 3.91 66 BAYES_05 15448 2.94 0.64 3.86 67 RCVD_IN_VALIDITY_SAFE 15379 3.78 3.61 3.85 68 XM_PDF 15148 3.02 1.11 3.79 69 XMNumbers 15091 3.88 4.16 3.77 70 T_TooManySym_02 14691 2.87 0.87 3.67 71 BAYES_80 14536 5.07 8.68 3.64 72 BAYES_999 14494 9.89 25.59 3.62 73 RCVD_IN_IADB_SPF 14376 3.18 2.15 3.60 74 BOUNCE_MESSAGE 13866 2.74 0.92 3.47 75 ANY_BOUNCE_MESSAGE 13866 2.74 0.92 3.47 76 XM_SPF_SoftFail 13855 3.92 5.07 3.47 77 RCVD_IN_VALIDITY_CERTIFIED 13198 3.23 3.04 3.30 78 RELAYCOUNTRY_META 13040 8.12 20.28 3.26 79 RCVD_IN_IADB_SENDERID 12942 2.89 2.03 3.24 80 T_REMOTE_IMAGE 12529 3.72 5.20 3.13 81 RCVD_IN_IADB_DK 12500 2.82 2.07 3.13 82 XM_UncommonTLD01 12279 4.51 8.10 3.07 83 XM_B_SpammyWords3 11864 5.59 12.18 2.97 84 XMSubLongNoVowel 11603 2.20 0.45 2.90 85 XMSubGarbage 11480 2.09 0.12 2.87 86 RCVD_IN_IADB_VOUCHED 10708 2.18 0.93 2.68 87 XMSexyCombo_05 10598 4.68 9.75 2.65 88 FSL_BULK_SIG 10392 5.41 12.45 2.60 89 XMSubMetaSx_00 10341 3.61 6.18 2.59 90 DKIM_INVALID 10254 2.83 3.51 2.56 91 TR_XM_DK_SendGrid 10248 3.19 4.75 2.56 92 XM_B_Phish_Phrases 10232 3.51 5.89 2.56 93 TR_XM_PhishingBody 9985 3.70 6.71 2.50 94 MAILING_LIST_MULTI 9143 2.16 1.84 2.29 95 BAYES_95 8799 3.11 5.39 2.20 96 FROM_EXCESS_BASE64 8632 2.05 1.76 2.16 97 TR_XM_SB_Phish 8576 2.18 2.26 2.14 98 XMSubPhish11 8490 2.12 2.11 2.12 99 KHOP_HELO_FCRDNS 8159 2.47 3.56 2.04 100 TM2_M_URI_OPT_OUT 7933 2.20 2.74 1.98 101 URI_NOVOWEL 7926 1.96 1.89 1.98 102 TooManyTo_002 7684 1.53 0.55 1.92 103 MIME_HTML_MOSTLY 7601 2.41 3.69 1.90 104 XM_B_SpammyTLD 7445 2.65 4.63 1.86 105 HTML_IMAGE_RATIO_08 7274 2.26 3.37 1.82 106 TVD_RCVD_IP 6990 1.31 0.23 1.75 107 RCVD_IN_IADB_OPTIN 6952 1.38 0.48 1.74 108 TR_DCC_Bayes_99 6731 7.61 22.45 1.68 109 INVALID_MSGID 6645 1.23 0.16 1.66 110 HTML_MIME_NO_HTML_TAG 6551 2.68 5.30 1.64 111 HELO_NODOT 6097 1.23 0.49 1.52 112 HELO_NO_DOMAIN 6092 1.23 0.48 1.52 113 IN_HORDE_ADDRESS_BOOK 6066 1.12 0.11 1.52 114 T_XMDrugObfuBody_14 6048 2.02 3.27 1.51 115 RCVD_IN_MSPIKE_H4 6001 1.29 0.75 1.50 116 XM_B_Phish66 6000 2.25 4.13 1.50 117 BOTNET 5823 4.26 11.28 1.46 118 TO_MALFORMED 5788 1.05 0.05 1.45 119 SUBJ_ALL_CAPS 5769 1.69 2.32 1.44 120 XM_CamelCaseFrm001 5719 1.89 3.06 1.43 121 T_TooManySym_03 5569 1.10 0.37 1.39 122 XM_E_Blogspot 5454 1.01 0.12 1.36 123 TR_Symld_Words 5327 1.30 1.22 1.33 124 XM_DK_Undo_01 5255 1.69 2.62 1.31 125 TooManyTo_003 5031 1.03 0.45 1.26 126 TR_XM_SpammyWords5 4979 2.06 4.10 1.25 127 T_XMDrugObfuBody_08 4842 1.80 3.29 1.21 128 XMGappySubj_01 4805 0.93 0.24 1.20 129 XM_B_Unsub2 4782 1.76 3.19 1.20 130 TR_XM_SpammyRelay 4747 4.13 11.52 1.19 131 XMDiploma_00 4655 1.85 3.56 1.16 132 XM_B_Investor 4444 2.29 5.25 1.11 133 XM_GoogleGroups 4332 1.52 2.61 1.08 134 RELAYCOUNTRY_CA 4202 2.70 6.82 1.05 135 UNTRUSTED_Relay 4192 3.27 8.85 1.05 136 XMCapTrack 4147 0.86 0.40 1.04 137 TM2_M_VERY_LONG_WORD 4065 2.19 5.14 1.02 138 URI_HEX 4021 1.16 1.56 1.01 139 XMBSHREFv2 3946 0.79 0.29 0.99 140 XMStockSpam_06 3895 1.28 2.03 0.97 141 TooManyTo_004 3509 0.72 0.32 0.88 142 TVD_SPACE_RATIO 3279 0.60 0.06 0.82 143 XM_B_SEO 3239 0.90 1.13 0.81 144 FROM_GOV_DKIM_AU 3153 0.67 0.39 0.79 145 XM_H_Long_From02 3150 1.15 2.05 0.79 146 RCVD_IN_RP_SAFE 3139 0.75 0.67 0.79 147 RDNS_DYNAMIC 3056 0.87 1.13 0.76 148 DKIM_ADSP_CUSTOM_MED 3038 0.82 0.97 0.76 149 XMBdyGiftCard01 2960 0.97 1.53 0.74 150 FVGT_m_MULTI_ODD_EMAIL 2940 0.56 0.12 0.74 151 XM_UB50 2920 1.54 3.55 0.73 152 TooManyTo_005 2867 0.59 0.27 0.72 153 TR_XM_SpammyWords2 2854 3.55 10.65 0.71 154 T_FILL_THIS_FORM_SHORT 2813 1.24 2.57 0.70 155 XM_OfRef6 2779 1.60 3.86 0.70 156 RCVD_IN_RP_CERTIFIED 2682 0.64 0.55 0.67 157 XMGenDplmaNmb 2670 1.04 1.98 0.67 158 TR_MetaPhish_Combo_01 2644 0.76 1.01 0.66 159 SpammyFromTLD_01 2618 1.27 2.82 0.65 160 T_XMDrugObfuBody_00 2498 0.96 1.80 0.62 161 XMHTML_After_End 2428 0.89 1.58 0.61 162 RELAYCOUNTRY_GB 2400 0.78 1.24 0.60 163 HTML_IMAGE_ONLY_20 2347 0.81 1.38 0.59 164 XMBody_95 2294 0.46 0.18 0.57 165 T_OBFU_PDF_ATTACH 2280 0.50 0.32 0.57 166 MSGID_NOFQDN1 2272 0.41 0.02 0.57 167 HTTPS_HTTP_MISMATCH 2261 0.84 1.54 0.57 168 RCVD_IN_BL_SPAMCOP_NET 2233 2.93 8.88 0.56 169 XM_ShortIntro_01 2229 0.53 0.46 0.56 170 XM_B_COPY_HTML 2222 0.66 0.91 0.56 171 XMPhish30 2163 0.65 0.93 0.54 172 HTML_TAG_BALANCE_BODY 2006 0.69 1.18 0.50 173 XM_ProductURIs 1998 0.60 0.84 0.50 174 XM_B_COVIDMETA 1996 0.90 1.90 0.50 175 NML_ADSP_CUSTOM_MED 1959 0.57 0.78 0.49 176 XMLngstWrd_00 1950 1.09 2.59 0.49 177 XMNoVowels 1904 0.54 0.68 0.48 178 XMMoneyMeta_00 1885 0.64 1.07 0.47 179 URI_TRY_3LD 1868 0.67 1.19 0.47 180 XM_H_PHPMailer 1850 0.56 0.81 0.46 181 MPART_ALT_DIFF_COUNT 1804 0.64 1.10 0.45 182 SHORT_HELO_AND_INLINE_IMAGE 1721 0.33 0.08 0.43 183 T_MANY_PILL_PRICE 1711 0.31 0.02 0.43 184 T_Symld_Words_02 1707 0.56 0.88 0.43 185 T_XMHurry_00 1698 0.67 1.30 0.42 186 XMLngstWrd_01 1688 1.03 2.55 0.42 187 XMBrknScrpt_02 1681 0.65 1.22 0.42 188 RCVD_IN_SORBS_DUL 1667 0.33 0.11 0.42 189 FORGED_GMAIL_RCVD 1658 0.53 0.81 0.41 190 XMHTMLBadTable_001 1643 0.57 0.98 0.41 191 XMSexyCombo_01 1632 0.87 2.02 0.41 192 FROM_GOV_SPOOF 1612 0.36 0.25 0.40 193 HTML_IMAGE_ONLY_28 1594 0.40 0.39 0.40 194 XMDateMe_00 1576 0.57 1.02 0.39 195 XM_B_SpammyWords4 1528 0.87 2.11 0.38 196 MY_SERVERS_FOUND 1501 0.29 0.09 0.38 197 XMSlimDrugH 1468 0.47 0.72 0.37 198 TM2_M_BODY_EMPTY 1462 0.29 0.10 0.37 199 USER_IN_WELCOMELIST 1461 0.26 0.00 0.37 200 USER_IN_WHITELIST 1461 0.26 0.00 0.37 ----------------------------------------------------------------------