Email: 561551 Autolearn: 0 AvgScore: 1.28 AvgScanTime: 1.42 sec Spam: 158798 Autolearn: 0 AvgScore: 14.22 AvgScanTime: 1.64 sec Ham: 402753 Autolearn: 0 AvgScore: -3.82 AvgScanTime: 1.33 sec Time Spent Running SA: 221.53 hours Time Spent Processing Spam: 72.51 hours Time Spent Processing Ham: 149.02 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150145 90.35 94.55 88.69 2 DKIM_SIGNED 137530 66.16 86.61 58.10 3 XM_DK_Pass 131618 63.62 82.88 56.03 4 DKIM_VALID 131067 62.90 82.54 55.16 5 RELAYCOUNTRY_US 129678 81.40 81.66 81.30 6 XM_B_Unicode 126552 75.33 79.69 73.61 7 DCC_CHECK 115054 38.29 72.45 24.82 8 XM_B_SpammyWords 105814 48.34 66.63 41.12 9 XMListUnsubscribeExists 103362 45.13 65.09 37.26 10 DKIM_VALID_AU 98272 48.51 61.88 43.24 11 RCVD_IN_MSPIKE_H2 71642 33.70 45.12 29.20 12 BAYES_50 68139 48.19 42.91 50.27 13 XM_B_Unicode3 67269 45.19 42.36 46.31 14 XM_DK_Undo_02 65005 15.36 40.94 5.28 15 XM_B_SpammyWords2 57183 19.74 36.01 13.33 16 LOC_TINY_FONT_1 55993 22.51 35.26 17.48 17 MIME_HTML_ONLY 53693 27.10 33.81 24.46 18 HTML_FONT_LOW_CONTRAST 52593 25.75 33.12 22.85 19 BAYES_99 52010 12.57 32.75 4.61 20 DKIM_VALID_EF 51045 25.19 32.14 22.45 21 FVGT_m_MULTI_ODD 50811 23.23 32.00 19.78 22 TR_XM_DKIM_Undo 49163 11.36 30.96 3.64 23 T_KAM_HTML_FONT_INVALID 44707 18.85 28.15 15.18 24 DCC_CHECK_NEGATIVE 43707 61.68 27.52 75.14 25 BAYES_999 40908 10.00 25.76 3.79 26 T_TM2_M_HEADER_IN_MSG 37128 25.69 23.38 26.60 27 TR_DCC_Bayes_99 36570 7.59 23.03 1.50 28 XM_Body_Dirty_Words 35750 12.69 22.51 8.82 29 XMSubLong 35556 21.36 22.39 20.95 30 RELAYCOUNTRY_META 32367 7.89 20.38 2.96 31 XM_Multi_Part_URI 27336 11.84 17.21 9.72 32 XM_B_Unsub 25181 9.61 15.86 7.15 33 TR_XM_BayesUnsub 24519 8.34 15.44 5.55 34 LOTS_OF_MONEY 23368 9.61 14.72 7.60 35 FSL_BULK_SIG 21766 5.62 13.71 2.42 36 BOTNET 21159 4.64 13.32 1.21 37 UNPARSEABLE_RELAY 21061 8.01 13.26 5.93 38 TR_XM_UnparsRelay 20713 6.92 13.04 4.50 39 BOTNET_IPINHOSTNAME 20333 6.33 12.80 3.78 40 TR_XM_SpammyWords4 20168 7.45 12.70 5.38 41 XM_B_SpammyWords3 18774 5.37 11.82 2.83 42 TR_XM_SpammyRelay 17630 4.10 11.10 1.34 43 UNTRUSTED_Relay 16436 3.68 10.35 1.05 44 XMSexyCombo_05 16161 4.89 10.18 2.81 45 RCVD_IN_MSPIKE_WL 15985 11.65 10.07 12.27 46 TR_XM_SpammyWords2 15821 3.28 9.96 0.65 47 RCVD_IN_BL_SPAMCOP_NET 15781 3.30 9.94 0.69 48 XM_Evil_Numbers_Gen 14606 8.41 9.20 8.10 49 BAYES_80 13260 4.95 8.35 3.62 50 LotsOfNums_01 12677 7.41 7.98 7.18 51 RCVD_IN_MSPIKE_H3 12345 8.28 7.77 8.49 52 XM_UncommonTLD01 12220 4.30 7.70 2.96 53 BAYES_60 11482 7.41 7.23 7.48 54 TR_XM_PhishingBody 11467 3.92 7.22 2.62 55 XM_H_Long_From01 11265 5.10 7.09 4.31 56 XM_SendGrid 11264 4.73 7.09 3.80 57 MPART_ALT_DIFF 11021 9.84 6.94 10.98 58 HTML_IMAGE_RATIO_02 10847 5.50 6.83 4.98 59 HTML_IMAGE_RATIO_04 10502 14.30 6.61 17.33 60 RELAYCOUNTRY_CA 10489 2.39 6.61 0.73 61 TR_XM_SPAMCOP 10053 1.97 6.33 0.25 62 XMSubMetaSx_00 9722 3.73 6.12 2.78 63 XM_B_Phish_Phrases 9193 3.30 5.79 2.31 64 XMStrtUSub 8841 10.28 5.57 12.14 65 XM_UB50 8424 1.99 5.30 0.69 66 T_XMDrugObfuBody_14 7842 2.40 4.94 1.41 67 BAYES_95 7431 2.87 4.68 2.15 68 XM_B_Investor 7419 2.22 4.67 1.25 69 TR_XM_SpammyWords5 7310 2.17 4.60 1.21 70 TooManyTo_001 7288 6.55 4.59 7.32 71 XM_SPF_SoftFail 7110 4.02 4.48 3.85 72 HTML_MIME_NO_HTML_TAG 6777 3.47 4.27 3.15 73 XM_B_SpammyTLD 6692 2.55 4.21 1.90 74 XM_DIRTYINTL 6648 1.35 4.19 0.24 75 MIME_HTML_ONLY_MULTI 6510 7.91 4.10 9.41 76 DKIM_INVALID 6463 3.26 4.07 2.94 77 XM_B_Phish66 6368 2.17 4.01 1.45 78 RCVD_IN_MSPIKE_BL 6365 1.81 4.01 0.95 79 TR_XM_MSPIKECOMBO 6101 1.77 3.84 0.95 80 TM2_M_VERY_LONG_WORD 6018 1.73 3.79 0.91 81 T_REMOTE_IMAGE 5968 3.48 3.76 3.36 82 MIME_QP_LONG_LINE 5824 4.01 3.67 4.14 83 TR_XM_DK_SendGrid 5804 2.77 3.65 2.42 84 MIME_HTML_MOSTLY 5776 2.49 3.64 2.03 85 XMNumbers 5665 3.71 3.57 3.76 86 XM_OfRef6 5564 1.53 3.50 0.75 87 HTML_IMAGE_RATIO_06 5513 5.78 3.47 6.69 88 RCVD_IN_VALIDITY_SAFE 5262 3.84 3.31 4.05 89 TM2_M_URI_OPT_OUT 5248 2.61 3.30 2.33 90 XM_B_Unsub2 5132 1.74 3.23 1.15 91 XM_CamelCaseFrm001 5123 1.94 3.23 1.43 92 T_XMDrugObfuBody_08 5079 1.79 3.20 1.23 93 RCVD_IN_VALIDITY_RPBL 4842 0.89 3.05 0.04 94 URIBL_DBL_SPAM 4662 0.84 2.94 0.01 95 SUBJ_ALL_CAPS 4655 1.75 2.93 1.29 96 KHOP_HELO_FCRDNS 4635 2.48 2.92 2.30 97 T_TooManySym_01 4626 4.84 2.91 5.60 98 RCVD_IN_PSBL 4598 0.93 2.90 0.16 99 BOTNET_NORDNS 4544 0.82 2.86 0.01 100 XMDiploma_00 4487 1.88 2.83 1.51 101 XMBody_17 4479 1.00 2.82 0.28 102 RCVD_IN_IADB_LISTED 4327 3.67 2.72 4.04 103 RCVD_IN_VALIDITY_CERTIFIED 4231 3.32 2.66 3.57 104 TR_Mismatch_TLD_01 4147 0.94 2.61 0.28 105 SpammyFromTLD_01 4054 1.13 2.55 0.57 106 SpammyFromTLD_02 4022 0.98 2.53 0.36 107 XM_UB99 3993 0.71 2.51 0.00 108 FROM_EXCESS_BASE64 3805 2.22 2.40 2.15 109 HTML_IMAGE_RATIO_08 3748 2.03 2.36 1.90 110 XM_DK_Undo_01 3716 1.56 2.34 1.25 111 TR_XM_SB_Phish 3709 2.04 2.34 1.92 112 RCVD_IN_IADB_SPF 3689 3.22 2.32 3.58 113 URI_NOVOWEL 3651 2.06 2.30 1.97 114 XMSubPhish11 3606 2.00 2.27 1.90 115 RCVD_IN_MSPIKE_H4 3567 3.23 2.25 3.62 116 USER_IN_DEF_DKIM_WL 3459 7.68 2.18 9.84 117 T_FILL_THIS_FORM_SHORT 3455 1.09 2.18 0.66 118 RCVD_IN_IADB_DK 3380 2.82 2.13 3.09 119 RCVD_IN_IADB_SENDERID 3367 2.88 2.12 3.17 120 XMSexyCombo_01 3283 0.86 2.07 0.39 121 XM_B_SpammyWords4 3198 0.85 2.01 0.39 122 XM_UB999 3196 0.57 2.01 0.00 123 XMBrknScrpt_02 3164 0.98 1.99 0.58 124 HTML_TAG_BALANCE_BODY 3159 1.03 1.99 0.65 125 TR_XM_SpammyWords3 3118 0.82 1.96 0.37 126 T_XMDrugObfuBody_00 3018 0.83 1.90 0.41 127 XM_H_Undi_Recip 2997 0.68 1.89 0.20 128 URI_HEX 2985 1.39 1.88 1.20 129 XM_B_COVIDMETA 2971 0.85 1.87 0.44 130 MAILING_LIST_MULTI 2964 2.13 1.87 2.24 131 XMLngstWrd_00 2946 0.87 1.86 0.48 132 XM_GoogleGroups 2855 1.38 1.80 1.22 133 XMLngstWrd_01 2852 0.80 1.80 0.41 134 MONEY_NOHTML 2795 0.55 1.76 0.07 135 XMHTML_After_End 2729 0.89 1.72 0.57 136 TR_XM_NoHeaderRelay 2701 0.55 1.70 0.10 137 XMStockSpam_06 2683 1.14 1.69 0.92 138 TR_XM_MSPIKECOMBO2 2645 0.61 1.67 0.19 139 TR_LOTS_OF_MONEY3 2642 0.68 1.66 0.29 140 XMLngstWrd_02 2615 0.70 1.65 0.32 141 ALL_TRUSTED 2603 12.38 1.64 16.62 142 T_XMHurry_00 2556 0.67 1.61 0.30 143 HK_RANDOM_REPLYTO 2553 0.55 1.61 0.13 144 XMLngstWrd_03 2529 0.64 1.59 0.26 145 RCVD_IN_MSPIKE_L3 2527 1.11 1.59 0.92 146 TR_XM_COVIDMETA4 2514 0.65 1.58 0.28 147 RCVD_IN_IADB_VOUCHED 2510 2.40 1.58 2.73 148 TR_XM_COVIDMETA1 2507 0.58 1.58 0.19 149 BAYES_40 2506 4.29 1.58 5.36 150 RELAYCOUNTRY_DE 2487 0.60 1.57 0.22 151 XM_URI_RBL 2462 0.53 1.55 0.12 152 TR_XM_PHPDW 2433 0.64 1.53 0.29 153 XMPhish14 2428 0.71 1.53 0.38 154 XM_H_Long_From02 2391 1.05 1.51 0.87 155 TR_Symld_Words 2351 1.37 1.48 1.33 156 TR_XM_PHPForged 2347 0.59 1.48 0.25 157 WANT_TO_ORDER 2329 0.42 1.47 0.00 158 XMGenDplmaNmb 2310 0.94 1.45 0.73 159 DATE_IN_PAST_03_06 2302 0.58 1.45 0.23 160 XMLngstWrd_04 2297 0.56 1.45 0.21 161 TR_XM_Undi_Recip5 2295 0.41 1.45 0.01 162 TR_XM_FormFill2 2287 0.58 1.44 0.24 163 XM_H_PHPOS 2270 0.57 1.43 0.23 164 TR_XM_Undi_Recip11 2267 0.43 1.43 0.04 165 XM_B_DynamicLink 2250 0.45 1.42 0.07 166 HTML_IMAGE_ONLY_20 2215 0.81 1.39 0.58 167 RCVD_IN_MSPIKE_L4 2190 0.41 1.38 0.03 168 HTML_TITLE_SUBJ_DIFF 2155 0.40 1.36 0.02 169 HTTPS_HTTP_MISMATCH 2154 0.77 1.36 0.54 170 RELAYCOUNTRY_FR 2102 0.50 1.32 0.17 171 PDS_OTHER_BAD_TLD 2066 0.47 1.30 0.14 172 UNDISC_MONEY 2039 0.37 1.28 0.00 173 TR_XM_Undi_RecipCombo2 2002 0.36 1.26 0.00 174 UPPERCASE_75_100 1990 0.37 1.25 0.03 175 XMClaimOffer 1977 0.43 1.24 0.11 176 XMBdyGiftCard01 1957 0.71 1.23 0.51 177 TR_Sbj_FN_Bdy 1929 0.43 1.21 0.12 178 ANY_BOUNCE_MESSAGE 1920 2.72 1.21 3.31 179 BOUNCE_MESSAGE 1918 2.72 1.21 3.31 180 URIBL_BLACK 1917 0.37 1.21 0.04 181 XM_ProductURIs 1897 0.69 1.19 0.49 182 HTML_FONT_SIZE_LARGE 1888 0.39 1.19 0.07 183 XMMoneyMeta_00 1878 0.64 1.18 0.42 184 URI_PHP_REDIR 1822 0.33 1.15 0.00 185 RELAYCOUNTRY_RU 1810 0.34 1.14 0.02 186 TR_XM_FormFill 1790 0.34 1.13 0.03 187 NEW_PRODUCTS 1789 0.32 1.13 0.01 188 HTML_TAG_BALANCE_CENTER 1785 0.36 1.12 0.06 189 BAYES_20 1781 4.07 1.12 5.23 190 URI_TRY_3LD 1780 0.61 1.12 0.40 191 RELAYCOUNTRY_AU 1767 0.46 1.11 0.21 192 DKIM_ADSP_CUSTOM_MED 1765 0.89 1.11 0.80 193 XMSubNoVowel 1720 4.54 1.08 5.90 194 XMPhish30 1659 0.74 1.04 0.61 195 XMReplyNow 1641 0.43 1.03 0.19 196 TR_XM_MaxSPIKE 1614 0.42 1.02 0.18 197 XMSubMetaI_00 1600 0.68 1.01 0.54 198 MPART_ALT_DIFF_COUNT 1589 0.64 1.00 0.49 199 NML_ADSP_CUSTOM_MED 1586 0.65 1.00 0.51 200 REMOVE_BEFORE_LINK 1578 0.41 0.99 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 357189 90.35 94.55 88.69 2 RELAYCOUNTRY_US 327450 81.40 81.66 81.30 3 DCC_CHECK_NEGATIVE 302630 61.68 27.52 75.14 4 XM_B_Unicode 296486 75.33 79.69 73.61 5 DKIM_SIGNED 233985 66.16 86.61 58.10 6 XM_DK_Pass 225653 63.62 82.88 56.03 7 DKIM_VALID 222159 62.90 82.54 55.16 8 BAYES_50 202455 48.19 42.91 50.27 9 XM_B_Unicode3 186517 45.19 42.36 46.31 10 DKIM_VALID_AU 174147 48.51 61.88 43.24 11 XM_B_SpammyWords 165630 48.34 66.63 41.12 12 XMListUnsubscribeExists 150070 45.13 65.09 37.26 13 RCVD_IN_MSPIKE_H2 117618 33.70 45.12 29.20 14 T_TM2_M_HEADER_IN_MSG 107127 25.69 23.38 26.60 15 DCC_CHECK 99951 38.29 72.45 24.82 16 MIME_HTML_ONLY 98504 27.10 33.81 24.46 17 HTML_FONT_LOW_CONTRAST 92028 25.75 33.12 22.85 18 DKIM_VALID_EF 90424 25.19 32.14 22.45 19 XMSubLong 84366 21.36 22.39 20.95 20 FVGT_m_MULTI_ODD 79658 23.23 32.00 19.78 21 HTML_FONT_FACE_BAD 77509 14.07 0.95 19.24 22 XM_H_Trusted_IP 70873 12.62 0.00 17.60 23 LOC_TINY_FONT_1 70419 22.51 35.26 17.48 24 HTML_IMAGE_RATIO_04 69780 14.30 6.61 17.33 25 BAYES_00 67398 12.23 0.81 16.73 26 ALL_TRUSTED 66925 12.38 1.64 16.62 27 T_KAM_HTML_FONT_INVALID 61153 18.85 28.15 15.18 28 XM_B_SpammyWords2 53692 19.74 36.01 13.33 29 RCVD_IN_MSPIKE_WL 49420 11.65 10.07 12.27 30 XMStrtUSub 48891 10.28 5.57 12.14 31 MPART_ALT_DIFF 44210 9.84 6.94 10.98 32 USER_IN_DEF_DKIM_WL 39651 7.68 2.18 9.84 33 XM_Multi_Part_URI 39151 11.84 17.21 9.72 34 MIME_HTML_ONLY_MULTI 37895 7.91 4.10 9.41 35 XM_Body_Dirty_Words 35533 12.69 22.51 8.82 36 RCVD_IN_MSPIKE_H3 34174 8.28 7.77 8.49 37 XM_Evil_Numbers_Gen 32635 8.41 9.20 8.10 38 IN_ZIMBRA_NJ_WHITELIST 32067 5.75 0.13 7.96 39 LOTS_OF_MONEY 30594 9.61 14.72 7.60 40 BAYES_60 30110 7.41 7.23 7.48 41 TooManyTo_001 29496 6.55 4.59 7.32 42 LotsOfNums_01 28920 7.41 7.98 7.18 43 XM_B_Unsub 28787 9.61 15.86 7.15 44 XM_DKIMWhitelistDomains 27252 4.92 0.25 6.77 45 HTML_IMAGE_RATIO_06 26941 5.78 3.47 6.69 46 UNPARSEABLE_RELAY 23895 8.01 13.26 5.93 47 XMSubNoVowel 23782 4.54 1.08 5.90 48 T_TooManySym_01 22535 4.84 2.91 5.60 49 TR_XM_BayesUnsub 22337 8.34 15.44 5.55 50 TR_XM_SpammyWords4 21650 7.45 12.70 5.38 51 BAYES_40 21607 4.29 1.58 5.36 52 XM_DK_Undo_02 21268 15.36 40.94 5.28 53 TR_XM_DK_Bayes 21105 3.93 0.60 5.24 54 BAYES_20 21063 4.07 1.12 5.23 55 TR_XM_DK_Bayes1 20594 3.83 0.59 5.11 56 HTML_IMAGE_RATIO_02 20046 5.50 6.83 4.98 57 BAYES_99 18576 12.57 32.75 4.61 58 BAYES_05 18320 3.42 0.57 4.55 59 TR_XM_UnparsRelay 18144 6.92 13.04 4.50 60 TR_XM_DK_Bayes2 18128 3.36 0.48 4.50 61 XM_H_Long_From01 17368 5.10 7.09 4.31 62 MIME_QP_LONG_LINE 16676 4.01 3.67 4.14 63 RCVD_IN_VALIDITY_SAFE 16298 3.84 3.31 4.05 64 RCVD_IN_IADB_LISTED 16283 3.67 2.72 4.04 65 XM_SPF_SoftFail 15491 4.02 4.48 3.85 66 XM_PDF 15449 3.02 0.97 3.84 67 XM_SendGrid 15310 4.73 7.09 3.80 68 BAYES_999 15270 10.00 25.76 3.79 69 BOTNET_IPINHOSTNAME 15237 6.33 12.80 3.78 70 XMNumbers 15152 3.71 3.57 3.76 71 TR_XM_DKIM_Undo 14651 11.36 30.96 3.64 72 RCVD_IN_MSPIKE_H4 14588 3.23 2.25 3.62 73 BAYES_80 14560 4.95 8.35 3.62 74 T_TooManySym_02 14531 2.83 0.85 3.61 75 RCVD_IN_IADB_SPF 14399 3.22 2.32 3.58 76 RCVD_IN_VALIDITY_CERTIFIED 14396 3.32 2.66 3.57 77 T_REMOTE_IMAGE 13552 3.48 3.76 3.36 78 ANY_BOUNCE_MESSAGE 13347 2.72 1.21 3.31 79 BOUNCE_MESSAGE 13346 2.72 1.21 3.31 80 RCVD_IN_IADB_SENDERID 12787 2.88 2.12 3.17 81 HTML_MIME_NO_HTML_TAG 12704 3.47 4.27 3.15 82 RCVD_IN_IADB_DK 12439 2.82 2.13 3.09 83 RELAYCOUNTRY_META 11939 7.89 20.38 2.96 84 XM_UncommonTLD01 11916 4.30 7.70 2.96 85 DKIM_INVALID 11826 3.26 4.07 2.94 86 XM_B_SpammyWords3 11403 5.37 11.82 2.83 87 XMSexyCombo_05 11324 4.89 10.18 2.81 88 XMSubMetaSx_00 11201 3.73 6.12 2.78 89 RCVD_IN_IADB_VOUCHED 10991 2.40 1.58 2.73 90 TR_XM_PhishingBody 10565 3.92 7.22 2.62 91 FSL_BULK_SIG 9766 5.62 13.71 2.42 92 TR_XM_DK_SendGrid 9758 2.77 3.65 2.42 93 TM2_M_URI_OPT_OUT 9387 2.61 3.30 2.33 94 XM_B_Phish_Phrases 9321 3.30 5.79 2.31 95 KHOP_HELO_FCRDNS 9277 2.48 2.92 2.30 96 XMSubLongNoVowel 9038 1.68 0.27 2.24 97 MAILING_LIST_MULTI 9002 2.13 1.87 2.24 98 XMSubGarbage 8962 1.63 0.13 2.23 99 BAYES_95 8659 2.87 4.68 2.15 100 FROM_EXCESS_BASE64 8644 2.22 2.40 2.15 101 MIME_HTML_MOSTLY 8179 2.49 3.64 2.03 102 TooManyTo_002 8084 1.62 0.64 2.01 103 URI_NOVOWEL 7931 2.06 2.30 1.97 104 TR_XM_SB_Phish 7734 2.04 2.34 1.92 105 XM_B_SpammyTLD 7654 2.55 4.21 1.90 106 XMSubPhish11 7641 2.00 2.27 1.90 107 HTML_IMAGE_RATIO_08 7633 2.03 2.36 1.90 108 RCVD_IN_IADB_OPTIN 7474 1.61 0.98 1.86 109 BASE64_LENGTH_79_INF 7054 1.40 0.50 1.75 110 INVALID_MSGID 7026 1.30 0.16 1.74 111 TVD_RCVD_IP 6644 1.27 0.29 1.65 112 HELO_NODOT 6618 1.33 0.53 1.64 113 HELO_NO_DOMAIN 6611 1.33 0.53 1.64 114 HTML_IMAGE_ONLY_16 6408 1.29 0.53 1.59 115 IN_HORDE_ADDRESS_BOOK 6279 1.15 0.10 1.56 116 XMDiploma_00 6077 1.88 2.83 1.51 117 TR_DCC_Bayes_99 6044 7.59 23.03 1.50 118 TO_MALFORMED 5923 1.07 0.04 1.47 119 XM_B_Phish66 5840 2.17 4.01 1.45 120 T_TooManySym_03 5774 1.11 0.30 1.43 121 XM_CamelCaseFrm001 5749 1.94 3.23 1.43 122 T_HTML_ATTACH 5724 1.14 0.42 1.42 123 T_XMDrugObfuBody_14 5661 2.40 4.94 1.41 124 TR_XM_SpammyRelay 5400 4.10 11.10 1.34 125 TR_Symld_Words 5369 1.37 1.48 1.33 126 XM_E_Blogspot 5292 0.99 0.17 1.31 127 TooManyTo_003 5284 1.09 0.53 1.31 128 SUBJ_ALL_CAPS 5176 1.75 2.93 1.29 129 XM_DK_Undo_01 5036 1.56 2.34 1.25 130 XMCapTrack 5033 1.06 0.57 1.25 131 XM_B_Investor 5030 2.22 4.67 1.25 132 T_XMDrugObfuBody_08 4947 1.79 3.20 1.23 133 XM_GoogleGroups 4902 1.38 1.80 1.22 134 BOTNET 4883 4.64 13.32 1.21 135 TR_XM_SpammyWords5 4883 2.17 4.60 1.21 136 URI_HEX 4843 1.39 1.88 1.20 137 XMGappySubj_01 4738 0.88 0.12 1.18 138 XM_B_Unsub2 4631 1.74 3.23 1.15 139 UNTRUSTED_Relay 4218 3.68 10.35 1.05 140 XMBSHREFv2 4043 0.82 0.36 1.00 141 RCVD_IN_MSPIKE_BL 3826 1.81 4.01 0.95 142 TR_XM_MSPIKECOMBO 3818 1.77 3.84 0.95 143 TooManyTo_004 3790 0.80 0.43 0.94 144 XMStockSpam_06 3709 1.14 1.69 0.92 145 RCVD_IN_MSPIKE_L3 3688 1.11 1.59 0.92 146 TM2_M_VERY_LONG_WORD 3682 1.73 3.79 0.91 147 TVD_SPACE_RATIO 3525 0.68 0.20 0.88 148 XM_H_Long_From02 3514 1.05 1.51 0.87 149 RCVD_IN_RP_SAFE 3360 0.78 0.64 0.83 150 XM_B_SEO 3297 0.86 0.95 0.82 151 DKIM_ADSP_CUSTOM_MED 3242 0.89 1.11 0.80 152 TooManyTo_005 3056 0.65 0.36 0.76 153 XM_OfRef6 3034 1.53 3.50 0.75 154 XMGenDplmaNmb 2952 0.94 1.45 0.73 155 FVGT_m_MULTI_ODD_EMAIL 2950 0.57 0.15 0.73 156 RELAYCOUNTRY_CA 2940 2.39 6.61 0.73 157 RCVD_IN_RP_CERTIFIED 2922 0.67 0.51 0.73 158 XM_UB50 2776 1.99 5.30 0.69 159 RCVD_IN_BL_SPAMCOP_NET 2771 3.30 9.94 0.69 160 T_FILL_THIS_FORM_SHORT 2662 1.09 2.18 0.66 161 XMBody_95 2604 0.56 0.32 0.65 162 TR_XM_SpammyWords2 2601 3.28 9.96 0.65 163 HTML_TAG_BALANCE_BODY 2601 1.03 1.99 0.65 164 TR_MetaPhish_Combo_01 2479 0.69 0.89 0.62 165 XMPhish30 2471 0.74 1.04 0.61 166 RELAYCOUNTRY_GB 2438 0.66 0.81 0.61 167 HTML_IMAGE_ONLY_20 2343 0.81 1.39 0.58 168 TVD_SPACE_RATIO_MINFP 2333 0.47 0.18 0.58 169 XMBrknScrpt_02 2327 0.98 1.99 0.58 170 SpammyFromTLD_01 2313 1.13 2.55 0.57 171 MSGID_NOFQDN1 2312 0.42 0.02 0.57 172 XMHTML_After_End 2276 0.89 1.72 0.57 173 FROM_GOV_DKIM_AU 2252 0.51 0.38 0.56 174 FILL_THIS_FORM 2223 0.48 0.31 0.55 175 XM_ShortIntro_01 2222 0.49 0.35 0.55 176 XMSubMetaI_00 2195 0.68 1.01 0.54 177 HTTPS_HTTP_MISMATCH 2175 0.77 1.36 0.54 178 XM_H_PHPMailer 2143 0.61 0.79 0.53 179 T_OBFU_PDF_ATTACH 2128 0.45 0.24 0.53 180 XMBdyGiftCard01 2056 0.71 1.23 0.51 181 NML_ADSP_CUSTOM_MED 2050 0.65 1.00 0.51 182 SHORT_HELO_AND_INLINE_IMAGE 2023 0.38 0.06 0.50 183 MPART_ALT_DIFF_COUNT 1982 0.64 1.00 0.49 184 XM_ProductURIs 1960 0.69 1.19 0.49 185 XMLngstWrd_00 1939 0.87 1.86 0.48 186 XM_B_COPY_HTML 1840 0.59 0.91 0.46 187 XM_B_COVIDMETA 1782 0.85 1.87 0.44 188 FORGED_GMAIL_RCVD 1771 0.59 0.99 0.44 189 XMHTMLBadTable_001 1757 0.54 0.81 0.44 190 T_MANY_PILL_PRICE 1745 0.31 0.00 0.43 191 XMNoVowels 1743 0.45 0.49 0.43 192 XMMoneyMeta_00 1710 0.64 1.18 0.42 193 T_Symld_Words_02 1697 0.55 0.88 0.42 194 RCVD_IN_SORBS_DUL 1696 0.34 0.14 0.42 195 XMSubMetaSxObfu_02 1671 0.46 0.57 0.41 196 T_XMDrugObfuBody_00 1656 0.83 1.90 0.41 197 XMLngstWrd_01 1655 0.80 1.80 0.41 198 URI_TRY_3LD 1626 0.61 1.12 0.40 199 MY_SERVERS_FOUND 1620 0.33 0.15 0.40 200 FROM_GOV_SPOOF 1585 0.31 0.09 0.39 ----------------------------------------------------------------------