Email: 575461 Autolearn: 0 AvgScore: 4.32 AvgScanTime: 1.58 sec Spam: 216680 Autolearn: 0 AvgScore: 14.24 AvgScanTime: 1.56 sec Ham: 358781 Autolearn: 0 AvgScore: -1.67 AvgScanTime: 1.58 sec Time Spent Running SA: 252.13 hours Time Spent Processing Spam: 94.17 hours Time Spent Processing Ham: 157.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 209907 90.79 96.87 87.12 2 XM_B_Unicode 192403 77.29 88.80 70.34 3 XM_B_SpammyWords 172662 57.79 79.69 44.57 4 XM_B_Unicode3 138783 49.56 64.05 40.81 5 DKIM_SIGNED 136891 67.11 63.18 69.48 6 DCC_CHECK 136836 42.14 63.15 29.45 7 XM_DK_Pass 134135 65.77 61.90 68.11 8 DKIM_VALID 132468 64.95 61.14 67.25 9 RELAYCOUNTRY_US 128350 72.08 59.23 79.84 10 MIME_HTML_ONLY 110842 33.42 51.15 22.70 11 XMListUnsubscribeExists 103440 46.78 47.74 46.19 12 DKIM_VALID_AU 96577 48.72 44.57 51.23 13 XM_Multi_Part_URI 93760 23.73 43.27 11.92 14 BAYES_99 92107 19.64 42.51 5.83 15 DCC_CHECK_NEGATIVE 79797 57.82 36.83 70.50 16 RCVD_IN_MSPIKE_H2 75912 36.00 35.03 36.58 17 XM_B_Phish_Phrases 73294 15.05 33.83 3.72 18 XM_SPF_SoftFail 71692 13.80 33.09 2.15 19 XM_DK_Undo_02 69740 16.51 32.19 7.04 20 ALL_TRUSTED 66615 22.52 30.74 17.55 21 BAYES_50 64713 46.33 29.87 56.27 22 BAYES_999 64533 14.19 29.78 4.78 23 DKIM_ADSP_DISCARD 63877 11.14 29.48 0.06 24 ZMIvirSobY_SUB63 63805 11.12 29.45 0.06 25 XM_B_SpammyWords2 59318 22.54 27.38 19.62 26 LOC_TINY_FONT_1 58436 24.00 26.97 22.20 27 HTML_FONT_LOW_CONTRAST 57378 25.91 26.48 25.57 28 TR_XM_DKIM_Undo 55679 12.73 25.70 4.90 29 TR_DCC_Bayes_99 55572 10.56 25.65 1.44 30 FVGT_m_MULTI_ODD 49813 22.91 22.99 22.87 31 DKIM_VALID_EF 48596 25.22 22.43 26.90 32 FSL_BULK_SIG 47552 10.07 21.95 2.90 33 URI_HEX 46936 9.07 21.66 1.46 34 T_KAM_HTML_FONT_INVALID 45073 19.61 20.80 18.89 35 XM_Body_Dirty_Words 37521 13.39 17.32 11.02 36 T_TM2_M_HEADER_IN_MSG 34775 24.59 16.05 29.75 37 XMSubLong 34170 18.98 15.77 20.91 38 XM_B_Unsub 28189 11.44 13.01 10.49 39 TR_XM_BayesUnsub 27256 8.87 12.58 6.62 40 RELAYCOUNTRY_META 24448 6.29 11.28 3.28 41 LOTS_OF_MONEY 23788 8.51 10.98 7.02 42 BOTNET_IPINHOSTNAME 22147 7.06 10.22 5.16 43 XM_B_SpammyWords3 21132 6.61 9.75 4.71 44 BAYES_80 20729 6.12 9.57 4.03 45 TR_XM_SpammyWords4 19379 5.96 8.94 4.16 46 RCVD_IN_MSPIKE_WL 19016 13.79 8.78 16.82 47 UNPARSEABLE_RELAY 18942 8.08 8.74 7.68 48 RCVD_IN_BL_SPAMCOP_NET 18613 3.69 8.59 0.72 49 TR_XM_SpammyWords2 18532 3.76 8.55 0.87 50 TR_XM_UnparsRelay 18322 6.85 8.46 5.88 51 BAYES_95 17667 4.65 8.15 2.54 52 TR_XM_SpammyRelay 17374 3.92 8.02 1.45 53 BOTNET 17356 4.06 8.01 1.67 54 XMSexyCombo_05 15819 4.81 7.30 3.31 55 XM_Evil_Numbers_Gen 15665 7.52 7.23 7.69 56 BAYES_60 14358 7.79 6.63 8.49 57 RCVD_IN_MSPIKE_H3 12601 8.84 5.82 10.66 58 LotsOfNums_01 12414 7.52 5.73 8.61 59 XM_B_SpammyTLD 11992 3.62 5.53 2.47 60 URIBL_DBL_ABUSE_SPAM 11826 2.06 5.46 0.01 61 HTML_IMAGE_RATIO_02 11360 5.33 5.24 5.38 62 XM_SendGrid 11130 5.09 5.14 5.06 63 UNTRUSTED_Relay 11077 2.67 5.11 1.20 64 MPART_ALT_DIFF 11022 7.47 5.09 8.91 65 TR_XM_PhishingBody 10578 3.79 4.88 3.13 66 XMSubMetaSx_00 10446 3.91 4.82 3.35 67 TR_XM_SPAMCOP 10312 1.94 4.76 0.24 68 XM_H_Long_From01 10214 5.60 4.71 6.14 69 XM_UncommonTLD01 9970 4.26 4.60 4.06 70 RELAYCOUNTRY_CA 9561 2.26 4.41 0.96 71 T_XMDrugObfuBody_14 8068 2.61 3.72 1.94 72 HTML_IMAGE_RATIO_04 7996 4.66 3.69 5.25 73 XM_B_Investor 7972 2.30 3.68 1.46 74 TooManyTo_001 7928 6.13 3.66 7.62 75 T_XMDrugObfuBody_08 7485 2.37 3.45 1.72 76 XMStrtUSub 7427 4.47 3.43 5.10 77 MIME_QP_LONG_LINE 7280 4.57 3.36 5.31 78 TR_XM_DK_SendGrid 7046 3.23 3.25 3.21 79 TR_XM_SpammyWords5 7024 1.99 3.24 1.23 80 RCVD_IN_MSPIKE_BL 6247 1.79 2.88 1.13 81 MIME_HTML_MOSTLY 6153 3.01 2.84 3.12 82 MIME_HTML_ONLY_MULTI 6102 5.30 2.82 6.80 83 TR_XM_MSPIKECOMBO 6081 1.76 2.81 1.13 84 XM_B_Phish66 5766 2.01 2.66 1.62 85 XM_B_SpammyTLD2 5685 1.03 2.62 0.06 86 RCVD_IN_VALIDITY_SAFE 5605 3.75 2.59 4.45 87 TM2_M_VERY_LONG_WORD 5581 1.73 2.58 1.22 88 RCVD_IN_VALIDITY_RPBL 5534 0.99 2.55 0.04 89 XM_UB50 5455 1.42 2.52 0.76 90 HTML_IMAGE_RATIO_06 5359 3.10 2.47 3.48 91 RCVD_IN_IADB_LISTED 5315 4.47 2.45 5.69 92 XM_OfRef6 5227 1.42 2.41 0.81 93 XMNumbers 5206 2.96 2.40 3.29 94 TM2_M_URI_OPT_OUT 4868 4.58 2.25 5.98 95 XM_DIRTYINTL 4829 1.07 2.23 0.36 96 XMDiploma_00 4820 1.86 2.22 1.64 97 RCVD_IN_IADB_SPF 4645 3.93 2.14 5.00 98 XMBody_17 4599 1.01 2.12 0.34 99 URIBL_DBL_SPAM 4567 0.81 2.11 0.03 100 XM_B_Unsub2 4488 1.77 2.07 1.59 101 T_FILL_THIS_FORM_SHORT 4452 1.62 2.05 1.36 102 XM_URI_RBL 4451 0.85 2.05 0.13 103 HTML_IMAGE_RATIO_08 4431 2.29 2.04 2.43 104 DKIM_INVALID 4423 2.16 2.04 2.23 105 RCVD_IN_IADB_SENDERID 4375 3.52 2.02 4.43 106 RCVD_IN_IADB_DK 4352 3.44 2.01 4.31 107 RCVD_IN_VALIDITY_CERTIFIED 4299 3.18 1.98 3.89 108 USER_IN_DEF_DKIM_WL 4200 8.13 1.94 11.87 109 XMSexyCombo_01 4196 1.03 1.94 0.49 110 FROM_EXCESS_BASE64 4134 2.05 1.91 2.14 111 RCVD_IN_MSPIKE_L3 4085 1.36 1.89 1.04 112 SUBJ_ALL_CAPS 4076 1.61 1.88 1.44 113 T_TooManySym_01 4041 4.26 1.86 5.71 114 URI_NOVOWEL 3943 2.40 1.82 2.76 115 T_REMOTE_IMAGE 3935 3.10 1.82 3.87 116 MAILING_LIST_MULTI 3879 2.41 1.79 2.78 117 RCVD_IN_MSPIKE_H4 3845 3.72 1.77 4.90 118 TR_XM_SB_Phish 3832 3.07 1.77 3.85 119 XMSubPhish11 3752 3.05 1.73 3.84 120 XM_CamelCaseFrm001 3719 1.73 1.72 1.73 121 PDS_OTHER_BAD_TLD 3639 0.71 1.68 0.13 122 T_XMDrugObfuBody_00 3483 1.03 1.61 0.68 123 BOTNET_NORDNS 3452 0.61 1.59 0.01 124 TR_XM_SpammyWords3 3436 0.91 1.59 0.50 125 SpammyFromTLD_01 3380 1.00 1.56 0.65 126 SpammyFromTLD_02 3316 0.87 1.53 0.47 127 XM_B_COVIDMETA 3280 0.95 1.51 0.61 128 TR_LOTS_OF_MONEY3 3238 0.77 1.49 0.33 129 XM_B_SpammyWords4 3199 0.87 1.48 0.50 130 XM_H_Undi_Recip 3126 0.67 1.44 0.21 131 XM_DK_Undo_01 3122 1.41 1.44 1.39 132 TR_XM_NoHeaderRelay 3099 0.61 1.43 0.12 133 TR_XM_MSPIKECOMBO2 3066 0.66 1.41 0.20 134 URI_PHP_REDIR 3050 0.53 1.41 0.00 135 XMStockSpam_06 2928 1.19 1.35 1.10 136 XM_HighProb1 2841 0.50 1.31 0.00 137 URI_TRY_3LD 2769 0.80 1.28 0.51 138 BAYES_40 2763 3.54 1.28 4.90 139 MPART_ALT_DIFF_COUNT 2748 0.83 1.27 0.57 140 T_XMHurry_00 2655 0.69 1.23 0.37 141 XMBdyGiftCard01 2653 0.93 1.22 0.75 142 TR_XM_MaxSPIKE 2646 0.57 1.22 0.18 143 HK_RANDOM_REPLYTO 2621 0.52 1.21 0.10 144 HTML_TAG_BALANCE_BODY 2617 0.88 1.21 0.69 145 HTML_MIME_NO_HTML_TAG 2595 1.82 1.20 2.19 146 RCVD_IN_MSPIKE_H5 2570 1.23 1.19 1.25 147 RCVD_IN_IADB_VOUCHED 2528 2.66 1.17 3.56 148 TR_MetaPhish_Combo_01 2515 1.00 1.16 0.90 149 XMGenDplmaNmb 2503 0.95 1.16 0.83 150 RCVD_IN_PSBL 2329 0.91 1.07 0.82 151 RELAYCOUNTRY_AU 2241 0.56 1.03 0.27 152 XMHTML_After_End 2235 0.83 1.03 0.71 153 URIBL_BLACK 2213 0.41 1.02 0.05 154 TR_XM_COVIDMETA1 2210 0.52 1.02 0.22 155 TR_XM_BayesRelay 2208 0.39 1.02 0.00 156 TR_XM_Undi_Recip5 2195 0.38 1.01 0.01 157 XMBrknScrpt_02 2135 0.73 0.99 0.58 158 TR_XM_PHPDW 2131 0.53 0.98 0.25 159 XM_UB99 2129 0.37 0.98 0.00 160 XM_Body_Dirty_Words_01 2109 0.70 0.97 0.53 161 TR_XM_FormFill 2091 0.37 0.97 0.01 162 XM_H_Long_From02 2084 1.03 0.96 1.06 163 TM2_M_A_HREF_HREF 2074 0.71 0.96 0.56 164 KHOP_HELO_FCRDNS 2074 1.23 0.96 1.40 165 HTTPS_HTTP_MISMATCH 2042 0.77 0.94 0.67 166 TR_XM_PHPForged 2038 0.49 0.94 0.22 167 TR_XM_FormFill2 1986 0.48 0.92 0.22 168 XM_H_PHPOS 1976 0.48 0.91 0.21 169 XM_B_SEO 1975 0.45 0.91 0.17 170 BAYES_20 1967 2.68 0.91 3.75 171 UNDISC_MONEY 1938 0.34 0.89 0.00 172 XMSubMetaI_00 1933 0.72 0.89 0.62 173 TR_XM_Base64_M1 1922 0.81 0.89 0.76 174 DIET_1 1921 0.65 0.89 0.50 175 TR_XM_Undi_Recip11 1919 0.37 0.89 0.05 176 FONT_INVIS_LONG_LINE 1901 0.37 0.88 0.06 177 TR_Sbj_FN_Bdy 1856 0.40 0.86 0.13 178 XMPhish30 1842 0.88 0.85 0.89 179 RCVD_IN_MSPIKE_L5 1840 0.33 0.85 0.02 180 TR_Mismatch_TLD_02 1796 0.42 0.83 0.18 181 TR_Mismatch_TLD_01 1756 0.47 0.81 0.27 182 XM_UB999 1707 0.30 0.79 0.00 183 TR_Symld_Words 1696 1.25 0.78 1.53 184 XMPhish14 1693 0.53 0.78 0.37 185 DKIM_ADSP_CUSTOM_MED 1613 0.85 0.74 0.92 186 RELAYCOUNTRY_IN 1599 0.32 0.74 0.07 187 XMLngstWrd_00 1569 0.63 0.72 0.57 188 TR_XM_SEO4 1528 0.33 0.71 0.10 189 TR_XM_COVIDMETA4 1525 0.41 0.70 0.23 190 XMLngstWrd_01 1521 0.57 0.70 0.50 191 T_TooManySym_02 1519 2.04 0.70 2.84 192 RELAYCOUNTRY_FR 1504 0.40 0.69 0.23 193 ANY_BOUNCE_MESSAGE 1500 1.77 0.69 2.42 194 BOUNCE_MESSAGE 1492 1.77 0.69 2.42 195 RCVD_IN_IADB_OPTIN 1453 1.74 0.67 2.39 196 TM2_M_OBFU_COMMENT 1445 0.36 0.67 0.18 197 T_MONEY_PERCENT 1436 0.37 0.66 0.20 198 TR_LOTS_OF_MONEY2 1436 0.37 0.66 0.20 199 XM_ProductURIs 1389 0.82 0.64 0.92 200 XMHTMLBadTable_001 1387 0.48 0.64 0.39 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 312570 90.79 96.87 87.12 2 RELAYCOUNTRY_US 286463 72.08 59.23 79.84 3 DCC_CHECK_NEGATIVE 252948 57.82 36.83 70.50 4 XM_B_Unicode 252374 77.29 88.80 70.34 5 DKIM_SIGNED 249286 67.11 63.18 69.48 6 XM_DK_Pass 244349 65.77 61.90 68.11 7 DKIM_VALID 241274 64.95 61.14 67.25 8 BAYES_50 201897 46.33 29.87 56.27 9 DKIM_VALID_AU 183800 48.72 44.57 51.23 10 XMListUnsubscribeExists 165732 46.78 47.74 46.19 11 XM_B_SpammyWords 159913 57.79 79.69 44.57 12 XM_B_Unicode3 146409 49.56 64.05 40.81 13 RCVD_IN_MSPIKE_H2 131246 36.00 35.03 36.58 14 T_TM2_M_HEADER_IN_MSG 106727 24.59 16.05 29.75 15 DCC_CHECK 105651 42.14 63.15 29.45 16 DKIM_VALID_EF 96516 25.22 22.43 26.90 17 HTML_FONT_LOW_CONTRAST 91726 25.91 26.48 25.57 18 FVGT_m_MULTI_ODD 82048 22.91 22.99 22.87 19 MIME_HTML_ONLY 81452 33.42 51.15 22.70 20 LOC_TINY_FONT_1 79657 24.00 26.97 22.20 21 XMSubLong 75034 18.98 15.77 20.91 22 XM_B_SpammyWords2 70383 22.54 27.38 19.62 23 T_KAM_HTML_FONT_INVALID 67771 19.61 20.80 18.89 24 ALL_TRUSTED 62966 22.52 30.74 17.55 25 RCVD_IN_MSPIKE_WL 60337 13.79 8.78 16.82 26 XM_Multi_Part_URI 42772 23.73 43.27 11.92 27 USER_IN_DEF_DKIM_WL 42571 8.13 1.94 11.87 28 BAYES_00 42236 7.57 0.60 11.77 29 XM_Body_Dirty_Words 39546 13.39 17.32 11.02 30 RCVD_IN_MSPIKE_H3 38262 8.84 5.82 10.66 31 XM_B_Unsub 37643 11.44 13.01 10.49 32 MPART_ALT_DIFF 31973 7.47 5.09 8.91 33 XM_DKIMWhitelistDomains 31099 5.46 0.15 8.67 34 LotsOfNums_01 30883 7.52 5.73 8.61 35 BAYES_60 30467 7.79 6.63 8.49 36 XM_Evil_Numbers_Gen 27590 7.52 7.23 7.69 37 UNPARSEABLE_RELAY 27565 8.08 8.74 7.68 38 TooManyTo_001 27326 6.13 3.66 7.62 39 XM_DK_Undo_02 25248 16.51 32.19 7.04 40 LOTS_OF_MONEY 25170 8.51 10.98 7.02 41 XM_H_Trusted_IP 24569 4.27 0.00 6.85 42 MIME_HTML_ONLY_MULTI 24390 5.30 2.82 6.80 43 TR_XM_BayesUnsub 23761 8.87 12.58 6.62 44 IN_ZIMBRA_NJ_WHITELIST 23606 4.13 0.08 6.58 45 TR_XM_DK_Bayes 22045 4.01 0.47 6.14 46 XM_H_Long_From01 22040 5.60 4.71 6.14 47 TR_XM_DK_Bayes1 21730 3.95 0.46 6.06 48 TM2_M_URI_OPT_OUT 21469 4.58 2.25 5.98 49 XM_PDF 21098 3.90 0.61 5.88 50 TR_XM_UnparsRelay 21097 6.85 8.46 5.88 51 BAYES_99 20899 19.64 42.51 5.83 52 T_TooManySym_01 20473 4.26 1.86 5.71 53 RCVD_IN_IADB_LISTED 20411 4.47 2.45 5.69 54 HTML_IMAGE_RATIO_02 19302 5.33 5.24 5.38 55 MIME_QP_LONG_LINE 19034 4.57 3.36 5.31 56 HTML_IMAGE_RATIO_04 18823 4.66 3.69 5.25 57 TR_XM_DK_Bayes2 18816 3.40 0.33 5.24 58 BOTNET_IPINHOSTNAME 18496 7.06 10.22 5.16 59 XMStrtUSub 18311 4.47 3.43 5.10 60 XM_SendGrid 18167 5.09 5.14 5.06 61 RCVD_IN_IADB_SPF 17942 3.93 2.14 5.00 62 BAYES_40 17585 3.54 1.28 4.90 63 RCVD_IN_MSPIKE_H4 17578 3.72 1.77 4.90 64 TR_XM_DKIM_Undo 17569 12.73 25.70 4.90 65 BAYES_999 17138 14.19 29.78 4.78 66 XM_B_SpammyWords3 16911 6.61 9.75 4.71 67 RCVD_IN_VALIDITY_SAFE 15959 3.75 2.59 4.45 68 RCVD_IN_IADB_SENDERID 15886 3.52 2.02 4.43 69 RCVD_IN_IADB_DK 15454 3.44 2.01 4.31 70 TR_XM_SpammyWords4 14913 5.96 8.94 4.16 71 XM_UncommonTLD01 14558 4.26 4.60 4.06 72 BAYES_80 14474 6.12 9.57 4.03 73 RCVD_IN_VALIDITY_CERTIFIED 13972 3.18 1.98 3.89 74 T_REMOTE_IMAGE 13883 3.10 1.82 3.87 75 TR_XM_SB_Phish 13825 3.07 1.77 3.85 76 XMSubPhish11 13780 3.05 1.73 3.84 77 BAYES_20 13459 2.68 0.91 3.75 78 XM_B_Phish_Phrases 13339 15.05 33.83 3.72 79 RCVD_IN_IADB_VOUCHED 12766 2.66 1.17 3.56 80 HTML_IMAGE_RATIO_06 12501 3.10 2.47 3.48 81 XMSubMetaSx_00 12029 3.91 4.82 3.35 82 XMSexyCombo_05 11858 4.81 7.30 3.31 83 XMNumbers 11814 2.96 2.40 3.29 84 RELAYCOUNTRY_META 11753 6.29 11.28 3.28 85 TR_XM_DK_SendGrid 11532 3.23 3.25 3.21 86 TR_XM_PhishingBody 11236 3.79 4.88 3.13 87 MIME_HTML_MOSTLY 11193 3.01 2.84 3.12 88 FSL_BULK_SIG 10391 10.07 21.95 2.90 89 T_TooManySym_02 10206 2.04 0.70 2.84 90 MAILING_LIST_MULTI 9961 2.41 1.79 2.78 91 URI_NOVOWEL 9885 2.40 1.82 2.76 92 BAYES_95 9101 4.65 8.15 2.54 93 XM_B_SpammyTLD 8856 3.62 5.53 2.47 94 HTML_IMAGE_RATIO_08 8726 2.29 2.04 2.43 95 BOUNCE_MESSAGE 8687 1.77 0.69 2.42 96 ANY_BOUNCE_MESSAGE 8687 1.77 0.69 2.42 97 BAYES_05 8663 1.69 0.49 2.41 98 RCVD_IN_IADB_OPTIN 8563 1.74 0.67 2.39 99 DKIM_INVALID 8012 2.16 2.04 2.23 100 HTML_MIME_NO_HTML_TAG 7869 1.82 1.20 2.19 101 XM_SPF_SoftFail 7696 13.80 33.09 2.15 102 FROM_EXCESS_BASE64 7686 2.05 1.91 2.14 103 TVD_RCVD_IP 7020 1.27 0.13 1.96 104 T_XMDrugObfuBody_14 6950 2.61 3.72 1.94 105 TooManyTo_002 6875 1.33 0.35 1.92 106 INVALID_MSGID 6784 1.22 0.10 1.89 107 IN_HORDE_ADDRESS_BOOK 6490 1.16 0.07 1.81 108 XM_CamelCaseFrm001 6209 1.73 1.72 1.73 109 T_XMDrugObfuBody_08 6173 2.37 3.45 1.72 110 HTML_FONT_FACE_BAD 6157 1.26 0.51 1.72 111 TO_MALFORMED 6107 1.08 0.05 1.70 112 XMSubNoVowel 6079 1.25 0.50 1.69 113 BOTNET 5980 4.06 8.01 1.67 114 MSGID_NOFQDN1 5918 1.04 0.02 1.65 115 XMDiploma_00 5887 1.86 2.22 1.64 116 XM_B_Phish66 5805 2.01 2.66 1.62 117 HELO_NODOT 5775 1.14 0.37 1.61 118 HELO_NO_DOMAIN 5774 1.14 0.36 1.61 119 XM_B_Unsub2 5700 1.77 2.07 1.59 120 XMBSHREFv2 5609 1.06 0.23 1.56 121 TR_Symld_Words 5474 1.25 0.78 1.53 122 URI_HEX 5254 9.07 21.66 1.46 123 XM_B_Investor 5253 2.30 3.68 1.46 124 TR_XM_SpammyRelay 5199 3.92 8.02 1.45 125 TR_DCC_Bayes_99 5181 10.56 25.65 1.44 126 SUBJ_ALL_CAPS 5181 1.61 1.88 1.44 127 KHOP_HELO_FCRDNS 5031 1.23 0.96 1.40 128 XM_DK_Undo_01 5001 1.41 1.44 1.39 129 T_FILL_THIS_FORM_SHORT 4890 1.62 2.05 1.36 130 XMGappySubj_01 4847 0.88 0.10 1.35 131 T_OBFU_PDF_ATTACH 4542 0.84 0.13 1.27 132 TooManyTo_003 4511 0.89 0.28 1.26 133 RCVD_IN_MSPIKE_H5 4497 1.23 1.19 1.25 134 XM_GoogleGroups 4467 0.96 0.48 1.25 135 TR_XM_SpammyWords5 4411 1.99 3.24 1.23 136 TM2_M_VERY_LONG_WORD 4372 1.73 2.58 1.22 137 XMBody_95 4344 0.78 0.08 1.21 138 UNTRUSTED_Relay 4311 2.67 5.11 1.20 139 RCVD_IN_MSPIKE_BL 4072 1.79 2.88 1.13 140 TR_XM_MSPIKECOMBO 4061 1.76 2.81 1.13 141 XMStockSpam_06 3940 1.19 1.35 1.10 142 XM_H_Long_From02 3820 1.03 0.96 1.06 143 RCVD_IN_MSPIKE_L3 3715 1.36 1.89 1.04 144 XMCapTrack 3506 0.72 0.28 0.98 145 RELAYCOUNTRY_CA 3432 2.26 4.41 0.96 146 XM_ProductURIs 3315 0.82 0.64 0.92 147 DKIM_ADSP_CUSTOM_MED 3296 0.85 0.74 0.92 148 TooManyTo_004 3269 0.65 0.22 0.91 149 RCVD_IN_RP_SAFE 3256 0.75 0.50 0.91 150 TR_MetaPhish_Combo_01 3244 1.00 1.16 0.90 151 XMPhish30 3203 0.88 0.85 0.89 152 TR_XM_SpammyWords2 3118 3.76 8.55 0.87 153 FROM_GOV_DKIM_AU 2977 0.56 0.12 0.83 154 XMGenDplmaNmb 2961 0.95 1.16 0.83 155 RCVD_IN_PSBL 2931 0.91 1.07 0.82 156 XM_OfRef6 2921 1.42 2.41 0.81 157 RCVD_IN_RP_CERTIFIED 2853 0.64 0.40 0.80 158 TVD_SPACE_RATIO 2777 0.50 0.06 0.77 159 XM_UB50 2743 1.42 2.52 0.76 160 TR_XM_Base64_M1 2739 0.81 0.89 0.76 161 XMBdyGiftCard01 2700 0.93 1.22 0.75 162 RCVD_IN_BL_SPAMCOP_NET 2596 3.69 8.59 0.72 163 TooManyTo_005 2553 0.52 0.19 0.71 164 XMHTML_After_End 2552 0.83 1.03 0.71 165 XM_D_tchamptons_WL 2533 0.46 0.06 0.71 166 HTML_TAG_BALANCE_BODY 2464 0.88 1.21 0.69 167 T_XMDrugObfuBody_00 2425 1.03 1.61 0.68 168 HTTPS_HTTP_MISMATCH 2392 0.77 0.94 0.67 169 SpammyFromTLD_01 2350 1.00 1.56 0.65 170 HTML_IMAGE_ONLY_20 2344 0.54 0.35 0.65 171 XM_B_COPY_HTML 2340 0.61 0.55 0.65 172 T_TooManySym_03 2320 0.48 0.20 0.65 173 TM2_M_BODY_EMPTY 2309 0.46 0.16 0.64 174 XMSubMetaI_00 2212 0.72 0.89 0.62 175 XM_B_COVIDMETA 2173 0.95 1.51 0.61 176 SHORT_HELO_AND_INLINE_IMAGE 2163 0.39 0.04 0.60 177 RELAYCOUNTRY_GB 2138 0.54 0.44 0.60 178 XM_E_Blogspot 2084 0.39 0.06 0.58 179 XMBrknScrpt_02 2068 0.73 0.99 0.58 180 XMLngstWrd_00 2062 0.63 0.72 0.57 181 XM_H_PHPMailer 2048 0.54 0.49 0.57 182 MPART_ALT_DIFF_COUNT 2043 0.83 1.27 0.57 183 TM2_M_A_HREF_HREF 2023 0.71 0.96 0.56 184 XM_ShortIntro_01 2007 0.52 0.45 0.56 185 FORGED_GMAIL_RCVD 1930 0.57 0.63 0.54 186 XMNoVowels 1911 0.43 0.25 0.53 187 XM_Body_Dirty_Words_01 1908 0.70 0.97 0.53 188 NML_ADSP_CUSTOM_MED 1848 0.54 0.57 0.52 189 URI_TRY_3LD 1829 0.80 1.28 0.51 190 DIET_1 1792 0.65 0.89 0.50 191 XM_B_SpammyWords4 1788 0.87 1.48 0.50 192 TR_XM_SpammyWords3 1783 0.91 1.59 0.50 193 XMLngstWrd_01 1776 0.57 0.70 0.50 194 XMSexyCombo_01 1759 1.03 1.94 0.49 195 BASE64_LENGTH_79_INF 1757 0.36 0.13 0.49 196 SpammyFromTLD_02 1695 0.87 1.53 0.47 197 T_Symld_Words_02 1670 0.52 0.62 0.47 198 XM_B_DNDMA 1615 0.51 0.62 0.45 199 XMSubMetaSxObfu_02 1607 0.37 0.23 0.45 200 MISSING_HEADERS 1562 0.39 0.31 0.44 ----------------------------------------------------------------------