Email: 479333 Autolearn: 0 AvgScore: 0.50 AvgScanTime: 1.33 sec Spam: 79296 Autolearn: 0 AvgScore: 12.83 AvgScanTime: 1.53 sec Ham: 400037 Autolearn: 0 AvgScore: -1.95 AvgScanTime: 1.29 sec Time Spent Running SA: 176.86 hours Time Spent Processing Spam: 33.76 hours Time Spent Processing Ham: 143.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 79261 99.95 99.96 99.95 2 HTML_MESSAGE 74555 88.75 94.02 87.70 3 DKIM_SIGNED 65622 72.95 82.76 71.00 4 XM_DK_Pass 62960 70.94 79.40 69.26 5 DKIM_VALID 60468 68.54 76.26 67.01 6 RELAYCOUNTRY_US 59254 78.20 74.73 78.89 7 XM_B_Unicode 56072 67.66 70.71 67.06 8 XM_B_SpammyWords 54081 49.66 68.20 45.98 9 XMListUnsubscribeExists 53482 49.38 67.45 45.79 10 DKIM_VALID_AU 45653 51.84 57.57 50.70 11 XM_DK_Undo_02 37021 14.15 46.69 7.70 12 BAYES_50 35056 53.53 44.21 55.38 13 TR_XM_DKIM_Undo 31368 11.48 39.56 5.92 14 XM_B_Unicode3 30320 38.53 38.24 38.59 15 XM_B_SpammyWords2 29197 21.35 36.82 18.28 16 BAYES_99 26410 10.44 33.31 5.91 17 FVGT_m_MULTI_ODD 26361 24.72 33.24 23.03 18 LOC_TINY_FONT_1 26064 24.83 32.87 23.24 19 MIME_HTML_ONLY 24474 24.86 30.86 23.66 20 DKIM_VALID_EF 23829 26.97 30.05 26.36 21 HTML_FONT_LOW_CONTRAST 23817 27.92 30.04 27.51 22 T_KAM_HTML_FONT_INVALID 23484 19.77 29.62 17.82 23 BAYES_999 20806 8.26 26.24 4.70 24 XMSubLong 20584 21.69 25.96 20.84 25 RCVD_IN_MSPIKE_H2 20332 21.36 25.64 20.51 26 RELAYCOUNTRY_META 20293 7.61 25.59 4.05 27 T_TM2_M_HEADER_IN_MSG 18952 29.72 23.90 30.87 28 XM_Body_Dirty_Words 17592 13.47 22.19 11.74 29 RCVD_IN_MSPIKE_WL 15866 26.43 20.01 27.70 30 UNTRUSTED_Relay 12601 3.87 15.89 1.48 31 XM_Multi_Part_URI 12535 11.95 15.81 11.18 32 XM_UncommonTLD01 12298 5.39 15.51 3.39 33 BOTNET 12104 4.02 15.26 1.79 34 LOTS_OF_MONEY 11621 8.47 14.66 7.25 35 BOTNET_IPINHOSTNAME 11617 6.27 14.65 4.60 36 TR_XM_SpammyRelay 11211 3.86 14.14 1.82 37 RCVD_IN_MSPIKE_H3 10660 14.61 13.44 14.84 38 TR_XM_SpammyWords2 9987 2.90 12.59 0.98 39 MPART_ALT_DIFF 9975 7.23 12.58 6.16 40 XM_B_Unsub 9804 10.96 12.36 10.68 41 TR_XM_SpammyWords4 9234 5.83 11.64 4.68 42 XM_B_SpammyWords3 9114 5.24 11.49 3.99 43 UNPARSEABLE_RELAY 8665 8.68 10.93 8.24 44 XMSexyCombo_05 8645 4.77 10.90 3.56 45 TR_XM_UnparsRelay 8405 7.19 10.60 6.51 46 HTML_MIME_NO_HTML_TAG 7576 5.54 9.55 4.74 47 RCVD_IN_BL_SPAMCOP_NET 7188 2.23 9.06 0.87 48 XM_Evil_Numbers_Gen 6816 8.20 8.60 8.12 49 SpammyFromTLD_02 6648 1.60 8.38 0.25 50 XM_UB50 6393 2.12 8.06 0.94 51 XM_SendGrid 6102 7.23 7.70 7.13 52 XMSubMetaSx_00 5992 4.53 7.56 3.93 53 TR_XM_PhishingBody 5647 3.85 7.12 3.20 54 TM2_M_VERY_LONG_WORD 5601 2.37 7.06 1.44 55 MIME_HTML_ONLY_MULTI 5418 4.84 6.83 4.44 56 LotsOfNums_01 5294 8.12 6.68 8.41 57 MIME_HTML_MOSTLY 5287 3.16 6.67 2.46 58 TooManyTo_001 5214 8.85 6.58 9.30 59 DKIM_INVALID 5154 4.40 6.50 3.99 60 BAYES_60 5051 7.81 6.37 8.10 61 RCVD_IN_MSPIKE_H4 5029 10.20 6.34 10.96 62 XM_B_Phish_Phrases 5002 3.68 6.31 3.16 63 XM_B_Investor 4956 2.41 6.25 1.64 64 RCVD_IN_MSPIKE_BL 4817 1.76 6.07 0.91 65 TR_XM_MSPIKECOMBO 4793 1.75 6.04 0.90 66 BAYES_80 4788 4.38 6.04 4.05 67 RELAYCOUNTRY_CA 4778 1.77 6.03 0.93 68 HTML_IMAGE_RATIO_02 4746 6.46 5.99 6.56 69 XM_H_Long_From01 4438 4.87 5.60 4.73 70 T_REMOTE_IMAGE 4363 3.98 5.50 3.68 71 XMNumbers 4358 4.00 5.50 3.71 72 TR_XM_SPAMCOP 4271 1.14 5.39 0.30 73 URI_NOVOWEL 4144 2.90 5.23 2.44 74 KHOP_HELO_FCRDNS 4102 2.24 5.17 1.66 75 XM_GoogleGroups 4068 2.10 5.13 1.50 76 XMLngstWrd_00 3951 1.48 4.98 0.78 77 XMLngstWrd_01 3926 1.42 4.95 0.72 78 XMLngstWrd_02 3848 1.34 4.85 0.65 79 HTML_TITLE_SUBJ_DIFF 3823 1.10 4.82 0.36 80 TR_XM_DK_SendGrid 3782 4.41 4.77 4.33 81 XMLngstWrd_03 3780 1.25 4.77 0.55 82 SpammyFromTLD_01 3767 1.49 4.75 0.84 83 XMLngstWrd_04 3719 1.19 4.69 0.49 84 UPPERCASE_75_100 3647 1.05 4.60 0.35 85 XM_OfRef6 3568 1.68 4.50 1.13 86 TM2_M_URI_OPT_OUT 3532 3.87 4.45 3.75 87 TR_XM_MaxUnsub 3525 1.40 4.45 0.80 88 XM_B_Phish66 3521 2.31 4.44 1.89 89 HTML_IMAGE_RATIO_04 3485 5.18 4.39 5.33 90 XM_SPF_SoftFail 3460 2.64 4.36 2.30 91 TR_XM_SpammyWords5 3295 1.95 4.16 1.51 92 XM_B_SpammyTLD 3273 2.42 4.13 2.08 93 MIME_QP_LONG_LINE 3267 5.49 4.12 5.76 94 XM_DIRTYINTL 2795 0.87 3.52 0.34 95 XMStrtUSub 2731 4.02 3.44 4.14 96 JH_SPAMMY_HEADERS 2648 0.55 3.34 0.00 97 ALL_TRUSTED 2626 15.84 3.31 18.33 98 RELAYCOUNTRY_FR 2606 0.82 3.29 0.33 99 TR_XM_SpammyWords3 2601 0.93 3.28 0.46 100 T_XMDrugObfuBody_08 2576 1.91 3.25 1.64 101 RCVD_IN_VALIDITY_RPBL 2488 0.57 3.14 0.06 102 HTML_IMAGE_ONLY_08 2475 0.61 3.12 0.11 103 TR_XM_PHPDW 2429 0.83 3.06 0.38 104 XMBody_17 2416 0.90 3.05 0.48 105 T_FILL_THIS_FORM_SHORT 2406 1.33 3.03 0.99 106 HTML_IMAGE_RATIO_06 2388 3.69 3.01 3.83 107 BAYES_95 2356 2.53 2.97 2.44 108 XM_B_COVIDMETA 2340 1.01 2.95 0.62 109 XMDiploma_00 2309 1.65 2.91 1.40 110 RCVD_IN_MSPIKE_L5 2297 0.63 2.90 0.18 111 T_Symld_Words_02 2288 0.85 2.89 0.44 112 BAYES_40 2257 4.92 2.85 5.33 113 SUBJ_ALL_CAPS 2223 1.91 2.80 1.73 114 T_XMDrugObfuBody_14 2222 2.25 2.80 2.14 115 TR_XM_PHPForged 2220 0.73 2.80 0.32 116 TR_XM_FormFill2 2184 0.73 2.75 0.33 117 XM_H_PHPOS 2167 0.72 2.73 0.32 118 BOTNET_NORDNS 2152 0.48 2.71 0.04 119 T_TooManySym_01 2133 4.84 2.69 5.26 120 GOOG_STO_IMG_HTML 2131 0.44 2.69 0.00 121 URIBL_DBL_SPAM 2092 0.45 2.64 0.01 122 XM_UB99 2072 0.43 2.61 0.00 123 MIXED_CENTER_CASE 2051 0.43 2.59 0.00 124 MIXED_HREF_CASE 2049 0.43 2.58 0.00 125 MIXED_FONT_CASE 2048 0.43 2.58 0.00 126 MIXED_AREA_CASE 2040 0.43 2.57 0.00 127 MIXED_IMG_CASE 2040 0.43 2.57 0.00 128 XM_URI_RBL 2018 0.53 2.54 0.13 129 HTML_IMAGE_RATIO_08 1965 2.32 2.48 2.28 130 MAILING_LIST_MULTI 1951 2.71 2.46 2.76 131 XM_B_SpammyWords4 1946 0.89 2.45 0.58 132 XM_DK_Undo_01 1919 1.82 2.42 1.70 133 TR_XM_NoHeaderRelay 1890 0.56 2.38 0.20 134 XMSexyCombo_01 1863 1.12 2.35 0.88 135 URIBL_BLACK 1861 0.43 2.35 0.06 136 RCVD_IN_RP_RNBL 1844 0.42 2.33 0.04 137 HTML_FONT_SIZE_LARGE 1811 0.48 2.28 0.13 138 TR_XM_COVIDMETA1 1761 0.59 2.22 0.27 139 XMStockSpam_06 1726 1.52 2.18 1.39 140 XM_CamelCaseFrm001 1721 1.77 2.17 1.69 141 RCVD_IN_PSBL 1720 0.41 2.17 0.06 142 RCVD_IN_IADB_LISTED 1706 4.20 2.15 4.60 143 XM_B_Unsub2 1673 1.53 2.11 1.41 144 BAYES_20 1634 3.68 2.06 4.00 145 XM_UB999 1629 0.34 2.05 0.00 146 TR_XM_INV_DKIM 1621 0.44 2.04 0.12 147 BODY_URI_ONLY 1592 0.35 2.01 0.02 148 T_XMDrugObfuBody_00 1588 0.80 2.00 0.56 149 RCVD_IN_MSPIKE_L3 1553 0.65 1.96 0.39 150 XMGenDplmaNmb 1534 0.97 1.93 0.77 151 TR_XM_SB_Phish 1527 2.02 1.93 2.04 152 TR_XM_COVIDMETA4 1518 0.66 1.91 0.41 153 T_HTML_TAG_BALANCE_CENTER 1481 0.37 1.87 0.07 154 XMSubPhish11 1478 1.99 1.86 2.01 155 XMHTML_After_End 1457 0.95 1.84 0.77 156 RCVD_IN_IADB_SPF 1400 3.67 1.77 4.05 157 T_XMHurry_00 1391 1.13 1.75 1.01 158 RELAYCOUNTRY_RU 1342 0.30 1.69 0.02 159 PDS_OTHER_BAD_TLD 1327 0.51 1.67 0.28 160 XMBrknScrpt_02 1325 1.26 1.67 1.17 161 XM_OfRef7 1324 0.39 1.67 0.13 162 RCVD_IN_IADB_DK 1281 3.21 1.62 3.53 163 LOADSA_MONEY_COMBO 1279 0.31 1.61 0.05 164 TR_Symld_Words 1261 1.67 1.59 1.68 165 RELAYCOUNTRY_AU 1255 0.55 1.58 0.34 166 RCVD_IN_IADB_SENDERID 1247 3.29 1.57 3.63 167 XM_Body_Dirty_Words_01 1243 0.76 1.57 0.60 168 XM_UB60 1239 0.33 1.56 0.09 169 XM_H_PHPMailer 1218 0.81 1.54 0.66 170 DIET_1 1210 0.59 1.53 0.40 171 HTTPS_HTTP_MISMATCH 1206 0.85 1.52 0.72 172 URI_HEX 1200 1.47 1.51 1.46 173 XM_H_Undi_Recip 1182 0.42 1.49 0.21 174 MONEY_NOHTML 1162 0.29 1.47 0.06 175 TR_Mismatch_TLD_01 1139 0.44 1.44 0.25 176 TR_XM_BayesRelay 1124 0.24 1.42 0.00 177 RCVD_IN_VALIDITY_SAFE 1114 4.66 1.40 5.31 178 TM2_M_A_HREF_HREF 1103 0.59 1.39 0.43 179 TooManyTo_002 1100 2.15 1.39 2.30 180 RELAYCOUNTRY_DE 1099 0.43 1.39 0.24 181 HTML_FONT_SIZE_HUGE 1073 0.27 1.35 0.06 182 RELAYCOUNTRY_CN 1069 0.30 1.35 0.09 183 TR_LOTS_OF_MONEY3 1054 0.48 1.33 0.31 184 HTML_TAG_BALANCE_CENTER 1031 0.27 1.30 0.07 185 RELAYCOUNTRY_IN 994 0.29 1.25 0.10 186 RCVD_IN_IADB_VOUCHED 993 2.42 1.25 2.65 187 TR_XM_FormFill 985 0.30 1.24 0.11 188 XFER_LOTSA_MONEY 977 0.23 1.23 0.03 189 BAYES_00 977 10.50 1.23 12.33 190 XMMoneyMeta_00 971 0.63 1.22 0.52 191 XMSubMetaI_00 967 0.87 1.22 0.80 192 FROM_EXCESS_BASE64 960 2.16 1.21 2.35 193 XM_PDF 956 4.25 1.21 4.85 194 MILLION_USD 955 0.20 1.20 0.00 195 RCVD_IN_MSPIKE_L4 943 0.47 1.19 0.33 196 XM_B_SEO 937 0.31 1.18 0.14 197 DEAR_BENEFICIARY 930 0.19 1.17 0.00 198 MONEY_FRAUD_8 929 0.19 1.17 0.00 199 ADVANCE_FEE_5_NEW_MONEY 913 0.19 1.15 0.00 200 MIME_CHARSET_FARAWAY 909 0.34 1.15 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 399855 99.95 99.96 99.95 2 HTML_MESSAGE 350833 88.75 94.02 87.70 3 RELAYCOUNTRY_US 315605 78.20 74.73 78.89 4 DKIM_SIGNED 284028 72.95 82.76 71.00 5 XM_DK_Pass 277057 70.94 79.40 69.26 6 XM_B_Unicode 268252 67.66 70.71 67.06 7 DKIM_VALID 268079 68.54 76.26 67.01 8 BAYES_50 221553 53.53 44.21 55.38 9 DKIM_VALID_AU 202830 51.84 57.57 50.70 10 XM_B_SpammyWords 183945 49.66 68.20 45.98 11 XMListUnsubscribeExists 183190 49.38 67.45 45.79 12 XM_B_Unicode3 154373 38.53 38.24 38.59 13 T_TM2_M_HEADER_IN_MSG 123501 29.72 23.90 30.87 14 RCVD_IN_MSPIKE_WL 110810 26.43 20.01 27.70 15 HTML_FONT_LOW_CONTRAST 110032 27.92 30.04 27.51 16 DKIM_VALID_EF 105451 26.97 30.05 26.36 17 MIME_HTML_ONLY 94667 24.86 30.86 23.66 18 LOC_TINY_FONT_1 92963 24.83 32.87 23.24 19 FVGT_m_MULTI_ODD 92133 24.72 33.24 23.03 20 XMSubLong 83368 21.69 25.96 20.84 21 RCVD_IN_MSPIKE_H2 82058 21.36 25.64 20.51 22 ALL_TRUSTED 73316 15.84 3.31 18.33 23 XM_B_SpammyWords2 73127 21.35 36.82 18.28 24 T_KAM_HTML_FONT_INVALID 71288 19.77 29.62 17.82 25 RCVD_IN_MSPIKE_H3 59383 14.61 13.44 14.84 26 BAYES_00 49337 10.50 1.23 12.33 27 XM_Body_Dirty_Words 46972 13.47 22.19 11.74 28 XM_Multi_Part_URI 44731 11.95 15.81 11.18 29 RCVD_IN_MSPIKE_H4 43860 10.20 6.34 10.96 30 XM_B_Unsub 42721 10.96 12.36 10.68 31 USER_IN_DEF_DKIM_WL 41163 8.65 0.40 10.29 32 TooManyTo_001 37214 8.85 6.58 9.30 33 LotsOfNums_01 33645 8.12 6.68 8.41 34 UNPARSEABLE_RELAY 32965 8.68 10.93 8.24 35 XM_Evil_Numbers_Gen 32489 8.20 8.60 8.12 36 BAYES_60 32404 7.81 6.37 8.10 37 XM_DK_Undo_02 30783 14.15 46.69 7.70 38 LOTS_OF_MONEY 28989 8.47 14.66 7.25 39 XM_SendGrid 28534 7.23 7.70 7.13 40 XM_DKIMWhitelistDomains 26844 5.60 0.01 6.71 41 TR_XM_DK_Bayes 26695 5.64 0.43 6.67 42 HTML_IMAGE_RATIO_02 26224 6.46 5.99 6.56 43 TR_XM_UnparsRelay 26057 7.19 10.60 6.51 44 TR_XM_DK_Bayes1 25712 5.43 0.40 6.43 45 MPART_ALT_DIFF 24662 7.23 12.58 6.16 46 IN_ZIMBRA_NJ_WHITELIST 24296 5.08 0.08 6.07 47 TR_XM_DKIM_Undo 23676 11.48 39.56 5.92 48 BAYES_99 23651 10.44 33.31 5.91 49 MIME_QP_LONG_LINE 23044 5.49 4.12 5.76 50 HTML_IMAGE_RATIO_04 21321 5.18 4.39 5.33 51 TR_XM_DK_Bayes2 21307 4.49 0.30 5.33 52 BAYES_40 21305 4.92 2.85 5.33 53 RCVD_IN_VALIDITY_SAFE 21222 4.66 1.40 5.31 54 T_TooManySym_01 21047 4.84 2.69 5.26 55 XM_PDF 19396 4.25 1.21 4.85 56 RCVD_IN_VALIDITY_CERTIFIED 19019 4.13 0.97 4.75 57 HTML_MIME_NO_HTML_TAG 18980 5.54 9.55 4.74 58 XM_H_Long_From01 18925 4.87 5.60 4.73 59 BAYES_999 18806 8.26 26.24 4.70 60 TR_XM_SpammyWords4 18722 5.83 11.64 4.68 61 BOTNET_IPINHOSTNAME 18417 6.27 14.65 4.60 62 RCVD_IN_IADB_LISTED 18416 4.20 2.15 4.60 63 MIME_HTML_ONLY_MULTI 17776 4.84 6.83 4.44 64 TR_XM_DK_SendGrid 17333 4.41 4.77 4.33 65 XMStrtUSub 16561 4.02 3.44 4.14 66 BAYES_80 16210 4.38 6.04 4.05 67 RCVD_IN_IADB_SPF 16198 3.67 1.77 4.05 68 RELAYCOUNTRY_META 16185 7.61 25.59 4.05 69 BAYES_20 16020 3.68 2.06 4.00 70 XM_B_SpammyWords3 15980 5.24 11.49 3.99 71 DKIM_INVALID 15949 4.40 6.50 3.99 72 XMSubMetaSx_00 15707 4.53 7.56 3.93 73 XM_H_Trusted_IP 15631 3.26 0.00 3.91 74 RCVD_IN_RP_SAFE 15362 3.32 0.72 3.84 75 HTML_IMAGE_RATIO_06 15304 3.69 3.01 3.83 76 TM2_M_URI_OPT_OUT 14998 3.87 4.45 3.75 77 XMNumbers 14829 4.00 5.50 3.71 78 T_REMOTE_IMAGE 14734 3.98 5.50 3.68 79 RCVD_IN_IADB_SENDERID 14519 3.29 1.57 3.63 80 XMSexyCombo_05 14223 4.77 10.90 3.56 81 RCVD_IN_IADB_DK 14129 3.21 1.62 3.53 82 RCVD_IN_RP_CERTIFIED 13883 2.96 0.40 3.47 83 XM_UncommonTLD01 13544 5.39 15.51 3.39 84 TR_XM_PhishingBody 12821 3.85 7.12 3.20 85 XM_B_Phish_Phrases 12657 3.68 6.31 3.16 86 ANY_BOUNCE_MESSAGE 12287 2.74 1.06 3.07 87 BOUNCE_MESSAGE 12281 2.74 1.05 3.07 88 T_TooManySym_02 11893 2.61 0.80 2.97 89 MAILING_LIST_MULTI 11026 2.71 2.46 2.76 90 RCVD_IN_IADB_VOUCHED 10613 2.42 1.25 2.65 91 MIME_HTML_MOSTLY 9849 3.16 6.67 2.46 92 BAYES_05 9787 2.20 0.97 2.45 93 BAYES_95 9756 2.53 2.97 2.44 94 URI_NOVOWEL 9755 2.90 5.23 2.44 95 FROM_EXCESS_BASE64 9403 2.16 1.21 2.35 96 XM_SPF_SoftFail 9190 2.64 4.36 2.30 97 TooManyTo_002 9185 2.15 1.39 2.30 98 HTML_IMAGE_RATIO_08 9135 2.32 2.48 2.28 99 T_XMDrugObfuBody_14 8554 2.25 2.80 2.14 100 XM_B_SpammyTLD 8311 2.42 4.13 2.08 101 TR_XM_SB_Phish 8170 2.02 1.93 2.04 102 HELO_NODOT 8051 1.84 0.97 2.01 103 XMSubPhish11 8050 1.99 1.86 2.01 104 HELO_NO_DOMAIN 8049 1.84 0.97 2.01 105 RCVD_IN_MSPIKE_H5 7567 1.62 0.22 1.89 106 XM_B_Phish66 7554 2.31 4.44 1.89 107 TR_XM_SpammyRelay 7275 3.86 14.14 1.82 108 BOTNET 7148 4.02 15.26 1.79 109 RCVD_IN_IADB_OPTIN 7107 1.63 0.88 1.78 110 IN_HORDE_ADDRESS_BOOK 6940 1.46 0.07 1.73 111 SUBJ_ALL_CAPS 6927 1.91 2.80 1.73 112 XM_DK_Undo_01 6818 1.82 2.42 1.70 113 XM_CamelCaseFrm001 6745 1.77 2.17 1.69 114 TR_Symld_Words 6734 1.67 1.59 1.68 115 INVALID_MSGID 6729 1.44 0.19 1.68 116 KHOP_HELO_FCRDNS 6659 2.24 5.17 1.66 117 XM_B_Investor 6577 2.41 6.25 1.64 118 T_XMDrugObfuBody_08 6556 1.91 3.25 1.64 119 TVD_RCVD_IP 6238 1.34 0.21 1.56 120 MSGID_NOFQDN1 6122 1.29 0.06 1.53 121 TooManyTo_003 6059 1.45 1.12 1.51 122 TR_XM_SpammyWords5 6058 1.95 4.16 1.51 123 TO_MALFORMED 6040 1.26 0.03 1.51 124 XM_GoogleGroups 5994 2.10 5.13 1.50 125 UNTRUSTED_Relay 5935 3.87 15.89 1.48 126 HTML_FONT_FACE_BAD 5831 1.33 0.67 1.46 127 URI_HEX 5828 1.47 1.51 1.46 128 TM2_M_VERY_LONG_WORD 5773 2.37 7.06 1.44 129 XM_B_Unsub2 5656 1.53 2.11 1.41 130 XMDiploma_00 5603 1.65 2.91 1.40 131 XMStockSpam_06 5541 1.52 2.18 1.39 132 XMSubNoVowel 5145 1.23 0.97 1.29 133 XMCapTrack 4949 1.12 0.56 1.24 134 XMBrknScrpt_02 4693 1.26 1.67 1.17 135 XM_OfRef6 4508 1.68 4.50 1.13 136 DKIM_ADSP_CUSTOM_MED 4477 1.10 0.98 1.12 137 XM_H_Long_From02 4333 1.04 0.82 1.08 138 TooManyTo_004 4247 1.03 0.85 1.06 139 XMBSHREFv2 4097 0.94 0.49 1.02 140 T_XMHurry_00 4038 1.13 1.75 1.01 141 T_FILL_THIS_FORM_SHORT 3976 1.33 3.03 0.99 142 TVD_SPACE_RATIO 3959 0.84 0.10 0.99 143 XMGappySubj_01 3940 0.85 0.15 0.98 144 TR_XM_SpammyWords2 3936 2.90 12.59 0.98 145 XM_E_Blogspot 3766 0.82 0.21 0.94 146 XM_UB50 3759 2.12 8.06 0.94 147 RELAYCOUNTRY_CA 3711 1.77 6.03 0.93 148 RCVD_IN_MSPIKE_BL 3638 1.76 6.07 0.91 149 TR_XM_MSPIKECOMBO 3614 1.75 6.04 0.90 150 XMBdyGiftCard01 3606 0.83 0.45 0.90 151 XMSexyCombo_01 3509 1.12 2.35 0.88 152 RCVD_IN_BL_SPAMCOP_NET 3481 2.23 9.06 0.87 153 TooManyTo_005 3424 0.84 0.78 0.86 154 SpammyFromTLD_01 3372 1.49 4.75 0.84 155 XM_ProductURIs 3317 0.84 0.92 0.83 156 RELAYCOUNTRY_GB 3305 0.87 1.07 0.83 157 SHORT_URI_2 3237 0.83 0.91 0.81 158 XMSubMetaI_00 3219 0.87 1.22 0.80 159 TR_XM_MaxUnsub 3195 1.40 4.45 0.80 160 XMLngstWrd_00 3124 1.48 4.98 0.78 161 XMGenDplmaNmb 3093 0.97 1.93 0.77 162 HTML_IMAGE_ONLY_20 3091 0.69 0.25 0.77 163 XMHTML_After_End 3073 0.95 1.84 0.77 164 XMNoVowels 3059 0.74 0.62 0.76 165 XMBody_95 2981 0.66 0.21 0.75 166 NML_ADSP_CUSTOM_MED 2940 0.74 0.79 0.73 167 TR_MetaPhish_Combo_01 2918 0.72 0.69 0.73 168 HTTPS_HTTP_MISMATCH 2890 0.85 1.52 0.72 169 XMLngstWrd_01 2865 1.42 4.95 0.72 170 T_TooManySym_03 2856 0.66 0.37 0.71 171 XM_H_PHPMailer 2656 0.81 1.54 0.66 172 XM_ShortIntro_01 2619 0.65 0.63 0.65 173 T_OBFU_PDF_ATTACH 2597 0.57 0.19 0.65 174 XMLngstWrd_02 2586 1.34 4.85 0.65 175 RCVD_IN_SORBS_DUL 2559 0.59 0.36 0.64 176 XM_RXBody 2532 0.59 0.36 0.63 177 XMPhish30 2502 0.68 0.96 0.63 178 XM_B_COVIDMETA 2499 1.01 2.95 0.62 179 URI_TRY_3LD 2483 0.66 0.85 0.62 180 FORGED_GMAIL_RCVD 2389 0.62 0.76 0.60 181 XM_Body_Dirty_Words_01 2389 0.76 1.57 0.60 182 XM_B_DNDMA 2348 0.60 0.64 0.59 183 SHORT_HELO_AND_INLINE_IMAGE 2348 0.51 0.13 0.59 184 XM_B_SpammyWords4 2301 0.89 2.45 0.58 185 T_XMDrugObfuBody_00 2259 0.80 2.00 0.56 186 HTML_TAG_BALANCE_BODY 2238 0.57 0.62 0.56 187 XM_B_COPY_HTML 2233 0.56 0.59 0.56 188 XMLngstWrd_03 2203 1.25 4.77 0.55 189 XMMoneyMeta_00 2072 0.63 1.22 0.52 190 PLING_QUERY 1998 0.58 0.96 0.50 191 XMLngstWrd_04 1977 1.19 4.69 0.49 192 FROM_GOV_SPOOF 1955 0.45 0.25 0.49 193 TR_MSPIKEBAYES00 1931 0.40 0.01 0.48 194 XMBody_17 1905 0.90 3.05 0.48 195 HTML_IMAGE_ONLY_32 1890 0.46 0.40 0.47 196 FROM_GOV_DKIM_AU 1855 0.41 0.15 0.46 197 TR_XM_SpammyWords3 1848 0.93 3.28 0.46 198 XMDateMe_00 1830 0.44 0.33 0.46 199 HTML_IMAGE_ONLY_28 1820 0.45 0.44 0.45 200 T_Symld_Words_02 1764 0.85 2.89 0.44 ----------------------------------------------------------------------