Email: 672747 Autolearn: 0 AvgScore: 2.65 AvgScanTime: 1.32 sec Spam: 204534 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.54 sec Ham: 468213 Autolearn: 0 AvgScore: -2.24 AvgScanTime: 1.23 sec Time Spent Running SA: 247.17 hours Time Spent Processing Spam: 87.22 hours Time Spent Processing Ham: 159.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 196888 92.56 96.26 90.94 2 DKIM_SIGNED 176348 73.20 86.22 67.52 3 XM_DK_Pass 172982 72.06 84.57 66.60 4 DKIM_VALID 168570 70.16 82.42 64.80 5 DCC_CHECK 165917 50.07 81.12 36.50 6 XM_B_Unicode 156539 75.71 76.53 75.35 7 RELAYCOUNTRY_US 152329 81.44 74.48 84.49 8 XMListUnsubscribeExists 146215 54.80 71.49 47.52 9 XM_B_SpammyWords 138378 51.93 67.66 45.06 10 DKIM_VALID_AU 129614 53.51 63.37 49.20 11 XM_DK_Undo_02 106458 21.27 52.05 7.83 12 XM_B_Unicode3 85974 45.15 42.03 46.51 13 TR_XM_DKIM_Undo 84922 15.93 41.52 4.75 14 XM_B_SpammyWords2 79042 23.11 38.64 16.33 15 BAYES_99 76906 15.08 37.60 5.25 16 LOC_TINY_FONT_1 76660 27.00 37.48 22.43 17 BAYES_50 74818 49.30 36.58 54.85 18 HTML_FONT_LOW_CONTRAST 69188 28.09 33.83 25.59 19 MIME_HTML_ONLY 67575 26.67 33.04 23.89 20 RCVD_IN_MSPIKE_H2 64001 25.99 31.29 23.67 21 BAYES_999 62734 12.28 30.67 4.24 22 TR_DCC_Bayes_99 61606 10.62 30.12 2.10 23 DKIM_VALID_EF 59338 26.02 29.01 24.71 24 T_KAM_HTML_FONT_INVALID 56962 20.52 27.85 17.32 25 FVGT_m_MULTI_ODD 56073 23.40 27.42 21.64 26 XMSubLong 48490 20.72 23.71 19.41 27 RELAYCOUNTRY_META 46684 9.78 22.82 4.09 28 RCVD_IN_MSPIKE_WL 44434 25.42 21.72 27.04 29 XM_Body_Dirty_Words 40714 12.80 19.91 9.70 30 T_TM2_M_HEADER_IN_MSG 38916 22.04 19.03 23.36 31 DCC_CHECK_NEGATIVE 35058 48.13 17.14 61.67 32 UNTRUSTED_Relay 34537 6.22 16.89 1.57 33 XM_Multi_Part_URI 32004 12.28 15.65 10.81 34 XM_UncommonTLD01 29336 6.37 14.34 2.89 35 XM_B_SpammyWords3 29150 6.88 14.25 3.66 36 BOTNET 29142 5.64 14.25 1.87 37 TR_XM_SpammyWords2 27955 4.64 13.67 0.70 38 LOTS_OF_MONEY 26874 7.66 13.14 5.26 39 RCVD_IN_BL_SPAMCOP_NET 26333 4.71 12.87 1.15 40 FSL_BULK_SIG 25394 7.22 12.42 4.94 41 XM_B_Unsub 25147 9.45 12.29 8.21 42 BOTNET_IPINHOSTNAME 23852 6.81 11.66 4.69 43 RCVD_IN_MSPIKE_H3 23235 13.57 11.36 14.54 44 TR_XM_SpammyWords4 22439 5.64 10.97 3.31 45 MPART_ALT_DIFF 21849 9.99 10.68 9.69 46 XM_Evil_Numbers_Gen 21825 9.44 10.67 8.90 47 XMSexyCombo_05 21635 5.38 10.58 3.12 48 RCVD_IN_MSPIKE_H4 19557 10.05 9.56 10.27 49 LotsOfNums_01 19119 8.65 9.35 8.34 50 HTML_IMAGE_RATIO_02 18832 7.43 9.21 6.66 51 UNPARSEABLE_RELAY 17248 7.11 8.43 6.54 52 BAYES_60 17208 8.51 8.41 8.56 53 TR_XM_UnparsRelay 16908 6.31 8.27 5.45 54 MIME_HTML_MOSTLY 16790 4.14 8.21 2.36 55 BAYES_80 16757 5.59 8.19 4.45 56 XM_B_Phish_Phrases 16588 5.18 8.11 3.90 57 XM_UB50 15195 3.01 7.43 1.07 58 T_REMOTE_IMAGE 14344 4.20 7.01 2.97 59 RELAYCOUNTRY_CA 14281 2.92 6.98 1.15 60 XMSubMetaSx_00 14231 4.13 6.96 2.90 61 SpammyFromTLD_02 13800 2.24 6.75 0.26 62 XM_SendGrid 13408 6.16 6.56 5.98 63 HTML_IMAGE_RATIO_04 12778 13.39 6.25 16.51 64 XM_H_Long_From01 12580 5.23 6.15 4.83 65 TooManyTo_001 11608 6.68 5.68 7.12 66 BODY_URI_ONLY 11260 1.68 5.51 0.01 67 HTML_SHORT_LINK_IMG_1 11211 1.68 5.48 0.01 68 XMNumbers 10976 3.43 5.37 2.59 69 TR_XM_PhishingBody 10755 3.51 5.26 2.75 70 KHOP_HELO_FCRDNS 10442 2.53 5.11 1.40 71 SpammyFromTLD_01 10416 1.97 5.09 0.61 72 BAYES_95 10213 3.40 4.99 2.71 73 RCVD_IN_RP_SAFE 9955 7.02 4.87 7.96 74 RCVD_IN_PSBL 9509 1.46 4.65 0.07 75 RCVD_IN_MSPIKE_BL 8723 1.37 4.26 0.11 76 URIBL_SBL_A 8674 2.28 4.24 1.42 77 TR_XM_MSPIKECOMBO 8632 1.36 4.22 0.11 78 XM_B_SpammyTLD 8429 2.53 4.12 1.83 79 XM_OfRef6 8232 1.80 4.02 0.83 80 TM2_M_URI_OPT_OUT 8130 2.84 3.97 2.34 81 HTML_FONT_SIZE_LARGE 7925 1.25 3.87 0.11 82 TR_XM_DK_SendGrid 7902 3.80 3.86 3.78 83 DKIM_INVALID 7778 3.04 3.80 2.71 84 RCVD_IN_RP_CERTIFIED 7608 6.17 3.72 7.23 85 HTML_IMAGE_ONLY_12 7579 1.25 3.71 0.17 86 MIME_HTML_ONLY_MULTI 7318 6.62 3.58 7.96 87 XM_DK_Undo_01 7135 1.88 3.49 1.17 88 URI_HEX 7087 1.97 3.46 1.32 89 HTML_IMAGE_RATIO_06 7052 4.44 3.45 4.88 90 MIME_QP_LONG_LINE 7024 4.76 3.43 5.34 91 XM_B_COVIDMETA 6913 1.84 3.38 1.17 92 XMStrtUSub 6911 8.82 3.38 11.20 93 TR_XM_SpammyWords5 6869 2.02 3.36 1.44 94 FROM_EXCESS_BASE64 6848 3.15 3.35 3.07 95 RCVD_IN_RP_RNBL 6667 1.03 3.26 0.06 96 RCVD_IN_MSPIKE_L5 6601 1.02 3.23 0.06 97 RELAYCOUNTRY_FR 6501 1.13 3.18 0.24 98 RELAYCOUNTRY_IN 6359 1.02 3.11 0.10 99 XMBdyGiftCard01 6286 1.39 3.07 0.65 100 T_TooManySym_01 6200 3.95 3.03 4.36 101 TR_LOTS_OF_MONEY3 6078 1.22 2.97 0.46 102 XM_UB60 5988 0.98 2.93 0.13 103 XMBody_17 5966 1.19 2.92 0.44 104 XMDiploma_00 5886 1.70 2.88 1.18 105 XM_SPF_SoftFail 5747 1.74 2.81 1.28 106 XM_UB99 5546 0.83 2.71 0.00 107 XM_CamelCaseFrm001 5514 2.09 2.70 1.82 108 HTML_IMAGE_RATIO_08 5436 2.06 2.66 1.79 109 XM_B_Unsub2 5342 1.74 2.61 1.35 110 XM_BadFromFormat 5285 0.91 2.58 0.18 111 XM_B_Phish66 5278 2.01 2.58 1.76 112 TR_XM_SpammyWords3 5252 0.81 2.57 0.05 113 XM_DIRTYINTL 5161 0.99 2.52 0.32 114 T_XMDrugObfuBody_14 5050 2.03 2.47 1.84 115 XM_B_SpammyWords4 4979 1.14 2.43 0.58 116 T_XMHurry_00 4702 1.08 2.30 0.55 117 TR_XM_MaxBayes 4671 0.71 2.28 0.02 118 RCVD_IN_IADB_LISTED 4651 4.35 2.27 5.26 119 BOTNET_NORDNS 4567 0.69 2.23 0.02 120 TM2_M_VERY_LONG_WORD 4461 1.54 2.18 1.27 121 T_XMDrugObfuBody_08 4450 1.65 2.18 1.42 122 XMBrknScrpt_02 4364 0.99 2.13 0.49 123 RELAYCOUNTRY_DE 4336 0.87 2.12 0.33 124 URI_PHP_REDIR 4271 0.64 2.09 0.00 125 PDS_OTHER_BAD_TLD 4202 0.98 2.05 0.52 126 XM_UB999 4192 0.62 2.05 0.00 127 URIBL_DBL_SPAM 4097 0.62 2.00 0.02 128 RCVD_IN_IADB_SPF 4081 3.81 2.00 4.60 129 HTML_IMAGE_ONLY_08 3957 0.65 1.93 0.08 130 RCVD_IN_IADB_DK 3935 3.34 1.92 3.96 131 XMLongAddy 3913 0.63 1.91 0.06 132 RCVD_IN_IADB_SENDERID 3902 3.44 1.91 4.11 133 FROM_LOCAL_HEX 3884 0.64 1.90 0.09 134 TR_XM_SB_Phish 3854 1.79 1.88 1.74 135 XM_H_Long_From03 3848 0.60 1.88 0.04 136 FROM_LOCAL_DIGITS 3835 0.58 1.87 0.02 137 HDRS_LCASE_IMGONLY 3775 0.58 1.85 0.02 138 FORGED_GMAIL_RCVD 3733 0.92 1.83 0.52 139 XMSubPhish11 3721 1.74 1.82 1.71 140 URI_TRY_3LD 3666 1.18 1.79 0.91 141 TR_XM_COVIDMETA4 3663 0.74 1.79 0.28 142 URI_NOVOWEL 3605 2.54 1.76 2.88 143 XM_URI_RBL 3564 0.64 1.74 0.16 144 T_FILL_THIS_FORM_SHORT 3534 0.95 1.73 0.61 145 XMGenDplmaNmb 3527 0.98 1.72 0.65 146 BAYES_40 3491 4.67 1.71 5.97 147 TR_XM_BayesRelay 3401 0.52 1.66 0.02 148 SUBJ_ALL_CAPS 3272 1.40 1.60 1.31 149 MAILING_LIST_MULTI 3256 1.95 1.59 2.10 150 XM_UB80 3207 0.51 1.57 0.04 151 T_XMDrugObfuBody_00 3148 0.87 1.54 0.58 152 XMSexyCombo_01 3146 0.71 1.54 0.35 153 XMSubMetaI_00 3132 0.79 1.53 0.46 154 HK_RANDOM_REPLYTO 3127 0.58 1.53 0.16 155 XM_UB95 3048 0.47 1.49 0.02 156 URIBL_BLACK 3043 0.47 1.49 0.03 157 XMStockSpam_06 3008 0.84 1.47 0.57 158 TR_XM_INV_DKIM 2951 0.50 1.44 0.08 159 XMHTML_After_End 2917 1.11 1.43 0.97 160 HTML_MIME_NO_HTML_TAG 2879 1.96 1.41 2.20 161 TR_XM_COVIDMETA1 2724 0.63 1.33 0.33 162 BAYES_20 2510 3.83 1.23 4.97 163 DEAR_FRIEND 2450 0.45 1.20 0.12 164 TR_XM_PHPDW 2429 0.56 1.19 0.28 165 XMPhish08 2415 0.49 1.18 0.18 166 GOOGLE_DOC_SUSP 2351 0.36 1.15 0.01 167 XMMoneyMeta_00 2301 0.68 1.12 0.49 168 T_TooManySym_02 2247 1.83 1.10 2.15 169 TR_Mismatch_TLD_02 2239 0.36 1.09 0.05 170 SUBJ_DOLLARS 2215 0.50 1.08 0.24 171 TR_XM_PHPForged 2185 0.48 1.07 0.23 172 NUMERIC_HTTP_ADDR 2182 0.57 1.07 0.36 173 PLING_QUERY 2168 1.08 1.06 1.08 174 TR_XM_FormFill2 2156 0.48 1.05 0.22 175 XM_H_PHPOS 2149 0.47 1.05 0.22 176 XM_OfRef7 2110 0.38 1.03 0.09 177 T_Symld_Words_02 2109 0.62 1.03 0.45 178 TR_XM_RelayPhish 2074 0.35 1.01 0.07 179 XMSubMetaSxObfu_03 2070 0.61 1.01 0.43 180 MONEY_NOHTML 2052 0.36 1.00 0.08 181 RELAYCOUNTRY_GB 2046 0.88 1.00 0.83 182 XMPhish30 2014 0.65 0.98 0.50 183 TR_XM_FormFill 2002 0.31 0.98 0.01 184 ALL_TRUSTED 1955 8.97 0.96 12.48 185 HTTPS_HTTP_MISMATCH 1877 0.66 0.92 0.54 186 XM_H_Long_From02 1876 0.94 0.92 0.96 187 XMSubMetaSSx_00 1860 0.43 0.91 0.22 188 XM_PDF 1843 2.97 0.90 3.88 189 RELAYCOUNTRY_IT 1841 0.30 0.90 0.04 190 THIS_AD 1830 0.57 0.89 0.43 191 XM_ProductURIs 1824 0.78 0.89 0.74 192 TR_Symld_Words 1811 1.07 0.89 1.15 193 RCVD_IN_IADB_VOUCHED 1782 2.55 0.87 3.28 194 FROM_SUSPICIOUS_NTLD 1763 0.30 0.86 0.06 195 XM_Body_Obfu01 1729 0.38 0.85 0.17 196 TR_LOTS_OF_MONEY2 1711 0.54 0.84 0.41 197 T_MONEY_PERCENT 1711 0.54 0.84 0.41 198 HTML_FONT_FACE_BAD 1668 10.17 0.82 14.26 199 FROM_SUSPICIOUS_NTLD_FP 1647 0.28 0.81 0.06 200 RCVD_IN_MSPIKE_H5 1642 1.80 0.80 2.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 425794 92.56 96.26 90.94 2 RELAYCOUNTRY_US 395583 81.44 74.48 84.49 3 XM_B_Unicode 352796 75.71 76.53 75.35 4 DKIM_SIGNED 316121 73.20 86.22 67.52 5 XM_DK_Pass 311823 72.06 84.57 66.60 6 DKIM_VALID 303416 70.16 82.42 64.80 7 DCC_CHECK_NEGATIVE 288751 48.13 17.14 61.67 8 BAYES_50 256827 49.30 36.58 54.85 9 DKIM_VALID_AU 230360 53.51 63.37 49.20 10 XMListUnsubscribeExists 222476 54.80 71.49 47.52 11 XM_B_Unicode3 217779 45.15 42.03 46.51 12 XM_B_SpammyWords 210965 51.93 67.66 45.06 13 DCC_CHECK 170899 50.07 81.12 36.50 14 RCVD_IN_MSPIKE_WL 126603 25.42 21.72 27.04 15 HTML_FONT_LOW_CONTRAST 119797 28.09 33.83 25.59 16 DKIM_VALID_EF 115708 26.02 29.01 24.71 17 MIME_HTML_ONLY 111869 26.67 33.04 23.89 18 RCVD_IN_MSPIKE_H2 110835 25.99 31.29 23.67 19 T_TM2_M_HEADER_IN_MSG 109359 22.04 19.03 23.36 20 LOC_TINY_FONT_1 105010 27.00 37.48 22.43 21 FVGT_m_MULTI_ODD 101337 23.40 27.42 21.64 22 XMSubLong 90879 20.72 23.71 19.41 23 T_KAM_HTML_FONT_INVALID 81109 20.52 27.85 17.32 24 HTML_IMAGE_RATIO_04 77285 13.39 6.25 16.51 25 XM_B_SpammyWords2 76441 23.11 38.64 16.33 26 RCVD_IN_MSPIKE_H3 68062 13.57 11.36 14.54 27 HTML_FONT_FACE_BAD 66774 10.17 0.82 14.26 28 XM_H_Trusted_IP 66157 9.83 0.00 14.13 29 ALL_TRUSTED 58421 8.97 0.96 12.48 30 XMStrtUSub 52422 8.82 3.38 11.20 31 XM_Multi_Part_URI 50621 12.28 15.65 10.81 32 BAYES_00 48840 7.46 0.66 10.43 33 RCVD_IN_MSPIKE_H4 48071 10.05 9.56 10.27 34 XM_Body_Dirty_Words 45401 12.80 19.91 9.70 35 MPART_ALT_DIFF 45371 9.99 10.68 9.69 36 XM_Evil_Numbers_Gen 41670 9.44 10.67 8.90 37 BAYES_60 40071 8.51 8.41 8.56 38 LotsOfNums_01 39059 8.65 9.35 8.34 39 XM_B_Unsub 38439 9.45 12.29 8.21 40 RCVD_IN_RP_SAFE 37273 7.02 4.87 7.96 41 MIME_HTML_ONLY_MULTI 37247 6.62 3.58 7.96 42 XM_DK_Undo_02 36666 21.27 52.05 7.83 43 XM_DKIMWhitelistDomains 35227 5.32 0.28 7.52 44 RCVD_IN_RP_CERTIFIED 33872 6.17 3.72 7.23 45 TooManyTo_001 33334 6.68 5.68 7.12 46 TR_XM_DK_Bayes 31480 4.81 0.42 6.72 47 HTML_IMAGE_RATIO_02 31160 7.43 9.21 6.66 48 TR_XM_DK_Bayes1 30635 4.68 0.41 6.54 49 UNPARSEABLE_RELAY 30604 7.11 8.43 6.54 50 XM_SendGrid 28010 6.16 6.56 5.98 51 BAYES_40 27959 4.67 1.71 5.97 52 TR_XM_DK_Bayes2 27363 4.16 0.30 5.84 53 TR_XM_UnparsRelay 25532 6.31 8.27 5.45 54 MIME_QP_LONG_LINE 25009 4.76 3.43 5.34 55 LOTS_OF_MONEY 24644 7.66 13.14 5.26 56 RCVD_IN_IADB_LISTED 24637 4.35 2.27 5.26 57 BAYES_99 24560 15.08 37.60 5.25 58 BAYES_20 23260 3.83 1.23 4.97 59 FSL_BULK_SIG 23150 7.22 12.42 4.94 60 IN_ZIMBRA_NJ_WHITELIST 22872 3.42 0.05 4.88 61 HTML_IMAGE_RATIO_06 22826 4.44 3.45 4.88 62 XM_H_Long_From01 22610 5.23 6.15 4.83 63 TR_XM_DKIM_Undo 22240 15.93 41.52 4.75 64 BOTNET_IPINHOSTNAME 21955 6.81 11.66 4.69 65 RCVD_IN_IADB_SPF 21524 3.81 2.00 4.60 66 XMSubNoVowel 20948 3.31 0.65 4.47 67 BAYES_80 20846 5.59 8.19 4.45 68 T_TooManySym_01 20395 3.95 3.03 4.36 69 BAYES_999 19863 12.28 30.67 4.24 70 RCVD_IN_IADB_SENDERID 19226 3.44 1.91 4.11 71 RELAYCOUNTRY_META 19130 9.78 22.82 4.09 72 RCVD_IN_IADB_DK 18556 3.34 1.92 3.96 73 XM_B_Phish_Phrases 18279 5.18 8.11 3.90 74 XM_PDF 18159 2.97 0.90 3.88 75 TR_XM_DK_SendGrid 17682 3.80 3.86 3.78 76 XM_B_SpammyWords3 17153 6.88 14.25 3.66 77 TR_XM_SpammyWords4 15503 5.64 10.97 3.31 78 RCVD_IN_IADB_VOUCHED 15346 2.55 0.87 3.28 79 XMSexyCombo_05 14591 5.38 10.58 3.12 80 FROM_EXCESS_BASE64 14367 3.15 3.35 3.07 81 ANY_BOUNCE_MESSAGE 14075 2.25 0.53 3.01 82 BOUNCE_MESSAGE 14073 2.25 0.53 3.01 83 T_REMOTE_IMAGE 13886 4.20 7.01 2.97 84 XMSubMetaSx_00 13576 4.13 6.96 2.90 85 XM_UncommonTLD01 13509 6.37 14.34 2.89 86 URI_NOVOWEL 13471 2.54 1.76 2.88 87 BAYES_05 13172 2.14 0.59 2.81 88 TR_XM_PhishingBody 12874 3.51 5.26 2.75 89 DKIM_INVALID 12705 3.04 3.80 2.71 90 BAYES_95 12677 3.40 4.99 2.71 91 XMNumbers 12126 3.43 5.37 2.59 92 MIME_HTML_MOSTLY 11060 4.14 8.21 2.36 93 TM2_M_URI_OPT_OUT 10972 2.84 3.97 2.34 94 RCVD_IN_MSPIKE_H5 10470 1.80 0.80 2.24 95 HTML_MIME_NO_HTML_TAG 10306 1.96 1.41 2.20 96 T_TooManySym_02 10064 1.83 1.10 2.15 97 RCVD_IN_IADB_OPTIN 10002 1.64 0.51 2.14 98 MAILING_LIST_MULTI 9835 1.95 1.59 2.10 99 TR_DCC_Bayes_99 9814 10.62 30.12 2.10 100 BOTNET 8776 5.64 14.25 1.87 101 T_XMDrugObfuBody_14 8603 2.03 2.47 1.84 102 XM_B_SpammyTLD 8581 2.53 4.12 1.83 103 XM_CamelCaseFrm001 8531 2.09 2.70 1.82 104 HTML_IMAGE_RATIO_08 8389 2.06 2.66 1.79 105 TooManyTo_002 8373 1.42 0.59 1.79 106 XM_B_Phish66 8246 2.01 2.58 1.76 107 XMSubGarbage 8244 1.24 0.06 1.76 108 TR_XM_SB_Phish 8159 1.79 1.88 1.74 109 XMSubLongNoVowel 8146 1.26 0.16 1.74 110 XMSubPhish11 7995 1.74 1.82 1.71 111 TVD_RCVD_IP 7968 1.22 0.13 1.70 112 INVALID_MSGID 7386 1.21 0.36 1.58 113 UNTRUSTED_Relay 7337 6.22 16.89 1.57 114 IN_HORDE_ADDRESS_BOOK 6953 1.05 0.06 1.49 115 TR_XM_SpammyWords5 6728 2.02 3.36 1.44 116 URIBL_SBL_A 6657 2.28 4.24 1.42 117 T_XMDrugObfuBody_08 6630 1.65 2.18 1.42 118 KHOP_HELO_FCRDNS 6573 2.53 5.11 1.40 119 MSGID_NOFQDN1 6450 0.97 0.03 1.38 120 XM_B_Unsub2 6340 1.74 2.61 1.35 121 TO_MALFORMED 6224 0.93 0.02 1.33 122 URI_HEX 6197 1.97 3.46 1.32 123 HELO_NO_DOMAIN 6141 1.02 0.35 1.31 124 HELO_NODOT 6141 1.03 0.37 1.31 125 SUBJ_ALL_CAPS 6117 1.40 1.60 1.31 126 USER_IN_DEF_DKIM_WL 6026 0.96 0.22 1.29 127 XM_SPF_SoftFail 5984 1.74 2.81 1.28 128 TM2_M_VERY_LONG_WORD 5927 1.54 2.18 1.27 129 HELO_MISC_IP 5584 0.85 0.08 1.19 130 XMDiploma_00 5520 1.70 2.88 1.18 131 XM_DK_Undo_01 5490 1.88 3.49 1.17 132 XM_B_COVIDMETA 5489 1.84 3.38 1.17 133 TooManyTo_003 5416 0.95 0.49 1.16 134 TR_Symld_Words 5384 1.07 0.89 1.15 135 RELAYCOUNTRY_CA 5369 2.92 6.98 1.15 136 RCVD_IN_BL_SPAMCOP_NET 5364 4.71 12.87 1.15 137 PLING_QUERY 5065 1.08 1.06 1.08 138 XM_UB50 5028 3.01 7.43 1.07 139 XMBSHREFv2 4965 0.82 0.26 1.06 140 XM_E_Blogspot 4688 0.71 0.05 1.00 141 XMGappySubj_01 4654 0.75 0.19 0.99 142 XMHTML_After_End 4560 1.11 1.43 0.97 143 XM_GoogleGroups 4529 0.82 0.48 0.97 144 XM_H_Long_From02 4476 0.94 0.92 0.96 145 URI_TRY_3LD 4259 1.18 1.79 0.91 146 DKIM_ADSP_CUSTOM_MED 4188 0.86 0.77 0.89 147 XMCapTrack 4148 0.72 0.34 0.89 148 XMBody_95 4099 0.64 0.10 0.88 149 TooManyTo_004 3991 0.72 0.42 0.85 150 XM_OfRef6 3893 1.80 4.02 0.83 151 TR_MSPIKEBAYES00 3866 0.58 0.01 0.83 152 RELAYCOUNTRY_GB 3863 0.88 1.00 0.83 153 XM_ProductURIs 3442 0.78 0.89 0.74 154 TVD_SPACE_RATIO 3416 0.52 0.05 0.73 155 TR_XM_SpammyWords2 3261 4.64 13.67 0.70 156 TooManyTo_005 3178 0.58 0.36 0.68 157 FROM_GOV_DKIM_AU 3081 0.62 0.52 0.66 158 XMBdyGiftCard01 3066 1.39 3.07 0.65 159 XMGenDplmaNmb 3058 0.98 1.72 0.65 160 SpammyFromTLD_01 2869 1.97 5.09 0.61 161 T_FILL_THIS_FORM_SHORT 2862 0.95 1.73 0.61 162 XM_SPF_Unknown 2826 0.63 0.68 0.60 163 TR_MetaPhish_Combo_01 2820 0.62 0.66 0.60 164 XM_B_SpammyWords4 2722 1.14 2.43 0.58 165 T_XMDrugObfuBody_00 2700 0.87 1.54 0.58 166 NML_ADSP_CUSTOM_MED 2683 0.59 0.62 0.57 167 XMStockSpam_06 2668 0.84 1.47 0.57 168 T_TooManySym_03 2617 0.43 0.12 0.56 169 T_XMHurry_00 2589 1.08 2.30 0.55 170 HTTPS_HTTP_MISMATCH 2548 0.66 0.92 0.54 171 T_OBFU_PDF_ATTACH 2436 0.42 0.19 0.52 172 FORGED_GMAIL_RCVD 2423 0.92 1.83 0.52 173 PDS_OTHER_BAD_TLD 2422 0.98 2.05 0.52 174 HTML_IMAGE_ONLY_20 2412 0.42 0.22 0.52 175 XMHTMLBadTable_001 2379 0.54 0.62 0.51 176 XMPhish30 2331 0.65 0.98 0.50 177 XM_ShortIntro_01 2291 0.43 0.31 0.49 178 XMBrknScrpt_02 2289 0.99 2.13 0.49 179 XMMoneyMeta_00 2282 0.68 1.12 0.49 180 XM_B_REG_HTML 2279 0.46 0.39 0.49 181 RDNS_DYNAMIC 2266 0.54 0.68 0.48 182 XM_H_PHPMailer 2225 0.49 0.52 0.48 183 XMSubMetaI_00 2166 0.79 1.53 0.46 184 TR_LOTS_OF_MONEY3 2144 1.22 2.97 0.46 185 T_Symld_Words_02 2084 0.62 1.03 0.45 186 XMLngstWrd_00 2075 0.46 0.49 0.44 187 XM_B_COPY_HTML 2068 0.47 0.54 0.44 188 XMBody_17 2063 1.19 2.92 0.44 189 XMSubMetaSxObfu_02 2046 0.40 0.31 0.44 190 XMSubMetaSxObfu_03 2024 0.61 1.01 0.43 191 THIS_AD 2016 0.57 0.89 0.43 192 FROM_GOV_SPOOF 1959 0.33 0.12 0.42 193 TR_LOTS_OF_MONEY2 1936 0.54 0.84 0.41 194 T_MONEY_PERCENT 1936 0.54 0.84 0.41 195 RCVD_IN_SORBS_DUL 1864 0.32 0.13 0.40 196 TM2_M_BODY_EMPTY 1854 0.30 0.08 0.40 197 XMLngstWrd_01 1833 0.41 0.45 0.39 198 SHORT_HELO_AND_INLINE_IMAGE 1831 0.29 0.05 0.39 199 XM_S_SpammyWords 1812 0.43 0.54 0.39 200 TR_XM_Spammywords 1803 0.43 0.54 0.39 ----------------------------------------------------------------------