Email: 482052 Autolearn: 0 AvgScore: 2.64 AvgScanTime: 1.32 sec Spam: 128291 Autolearn: 0 AvgScore: 13.99 AvgScanTime: 1.50 sec Ham: 353761 Autolearn: 0 AvgScore: -1.48 AvgScanTime: 1.25 sec Time Spent Running SA: 176.35 hours Time Spent Processing Spam: 53.58 hours Time Spent Processing Ham: 122.77 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122966 88.98 95.85 86.49 2 DKIM_SIGNED 112671 74.01 87.82 68.99 3 XM_DK_Pass 108224 71.80 84.36 67.25 4 DKIM_VALID 105906 69.74 82.55 65.09 5 RELAYCOUNTRY_US 103844 78.02 80.94 76.96 6 XM_B_Unicode 94805 68.87 73.90 67.05 7 DCC_CHECK 93226 42.98 72.67 32.22 8 XMListUnsubscribeExists 89537 50.33 69.79 43.28 9 XM_B_SpammyWords 87641 50.09 68.31 43.48 10 DKIM_VALID_AU 80376 53.10 62.65 49.64 11 XM_DK_Undo_02 56246 16.08 43.84 6.01 12 BAYES_50 54494 51.10 42.48 54.22 13 XM_B_Unicode3 50905 38.00 39.68 37.40 14 LOC_TINY_FONT_1 46114 25.12 35.94 21.19 15 XM_B_SpammyWords2 45320 23.57 35.33 19.30 16 TR_XM_DKIM_Undo 45317 12.89 35.32 4.75 17 DKIM_VALID_EF 43702 28.86 34.06 26.98 18 HTML_FONT_LOW_CONTRAST 42646 27.47 33.24 25.37 19 MIME_HTML_ONLY 40141 22.82 31.29 19.74 20 BAYES_99 40108 11.94 31.26 4.93 21 FVGT_m_MULTI_ODD 38002 24.73 29.62 22.95 22 DCC_CHECK_NEGATIVE 35016 56.97 27.29 67.73 23 T_KAM_HTML_FONT_INVALID 34051 19.73 26.54 17.26 24 RCVD_IN_MSPIKE_H2 31805 20.82 24.79 19.37 25 BAYES_999 31612 9.48 24.64 3.98 26 XMSubLong 30877 22.62 24.07 22.10 27 TR_DCC_Bayes_99 29404 7.29 22.92 1.63 28 XM_Body_Dirty_Words 28701 14.61 22.37 11.79 29 T_TM2_M_HEADER_IN_MSG 28275 29.68 22.04 32.45 30 RELAYCOUNTRY_META 25637 7.72 19.98 3.27 31 RCVD_IN_MSPIKE_WL 23926 25.16 18.65 27.52 32 XM_B_Unsub 21191 12.47 16.52 11.00 33 XM_Multi_Part_URI 19704 11.68 15.36 10.35 34 XM_UncommonTLD01 18482 6.36 14.41 3.44 35 FSL_BULK_SIG 16753 6.49 13.06 4.11 36 TR_XM_SpammyRelay 16714 4.41 13.03 1.29 37 BOTNET_IPINHOSTNAME 16587 6.62 12.93 4.34 38 MPART_ALT_DIFF 16360 7.19 12.75 5.17 39 UNPARSEABLE_RELAY 16167 8.85 12.60 7.48 40 BOTNET 16074 4.36 12.53 1.39 41 TR_XM_UnparsRelay 15900 7.59 12.39 5.84 42 UNTRUSTED_Relay 15708 4.08 12.24 1.12 43 LOTS_OF_MONEY 15085 9.46 11.76 8.63 44 RCVD_IN_MSPIKE_H3 14978 14.08 11.68 14.96 45 XM_B_SpammyWords3 13759 6.21 10.72 4.58 46 TR_XM_SpammyWords2 13221 3.31 10.31 0.78 47 XMSexyCombo_05 13184 5.25 10.28 3.42 48 TR_XM_SpammyWords4 12838 6.89 10.01 5.76 49 XM_Evil_Numbers_Gen 12151 8.00 9.47 7.47 50 HTML_IMAGE_RATIO_02 11828 7.12 9.22 6.35 51 RCVD_IN_BL_SPAMCOP_NET 11809 3.00 9.20 0.75 52 XM_SendGrid 10520 6.35 8.20 5.67 53 BAYES_60 10441 8.72 8.14 8.93 54 HTML_MIME_NO_HTML_TAG 10141 4.03 7.90 2.62 55 TooManyTo_001 10039 9.33 7.83 9.88 56 BAYES_80 9267 5.04 7.22 4.25 57 MIME_HTML_ONLY_MULTI 9226 4.33 7.19 3.29 58 XMSubMetaSx_00 8802 4.74 6.86 3.97 59 LotsOfNums_01 8560 7.96 6.67 8.43 60 TR_XM_MaxUnsub 8501 2.36 6.63 0.81 61 RCVD_IN_MSPIKE_H4 8410 9.60 6.56 10.70 62 MIME_HTML_MOSTLY 8321 3.19 6.49 2.00 63 XM_UB50 8184 2.24 6.38 0.73 64 RCVD_IN_MSPIKE_BL 8031 2.38 6.26 0.98 65 TR_XM_MSPIKECOMBO 8024 2.38 6.25 0.97 66 TR_XM_PhishingBody 7956 3.99 6.20 3.19 67 SpammyFromTLD_02 7876 1.81 6.14 0.23 68 XM_B_Phish_Phrases 7818 4.54 6.09 3.97 69 SpammyFromTLD_01 7317 2.07 5.70 0.75 70 URIBL_DBL_SPAM 7094 1.49 5.53 0.03 71 XM_B_SpammyTLD 6958 2.93 5.42 2.02 72 URI_NOVOWEL 6882 3.39 5.36 2.67 73 DKIM_INVALID 6765 4.27 5.27 3.90 74 TR_XM_DK_SendGrid 6468 4.04 5.04 3.68 75 XM_H_Long_From01 6384 5.00 4.98 5.00 76 TM2_M_VERY_LONG_WORD 6089 2.21 4.75 1.29 77 RELAYCOUNTRY_CA 5704 1.66 4.45 0.64 78 XM_SPF_SoftFail 5617 2.83 4.38 2.27 79 TR_XM_SPAMCOP 5577 1.39 4.35 0.31 80 T_REMOTE_IMAGE 5410 3.80 4.22 3.66 81 TM2_M_URI_OPT_OUT 5392 3.85 4.20 3.72 82 XMNumbers 5353 3.90 4.17 3.80 83 RCVD_IN_VALIDITY_SAFE 5313 4.67 4.14 4.86 84 TR_XM_SpammyWords3 5291 1.45 4.12 0.48 85 HTML_IMAGE_RATIO_04 5270 4.96 4.11 5.26 86 BAYES_95 4962 2.92 3.87 2.58 87 XM_B_Phish66 4869 2.48 3.80 2.00 88 XMStrtUSub 4867 3.92 3.79 3.96 89 MIME_QP_LONG_LINE 4850 5.37 3.78 5.94 90 XM_B_Investor 4626 1.99 3.61 1.41 91 HTML_IMAGE_RATIO_06 4595 3.35 3.58 3.26 92 TR_XM_SpammyWords5 4589 2.00 3.58 1.43 93 KHOP_HELO_FCRDNS 4560 2.37 3.55 1.95 94 RCVD_IN_VALIDITY_CERTIFIED 4433 4.07 3.46 4.29 95 T_XMDrugObfuBody_14 4185 2.23 3.26 1.86 96 XMSexyCombo_01 4091 1.68 3.19 1.14 97 XM_OfRef6 3870 1.47 3.02 0.91 98 PDS_OTHER_BAD_TLD 3810 0.92 2.97 0.18 99 T_XMDrugObfuBody_08 3790 1.93 2.95 1.56 100 FROM_SUSPICIOUS_NTLD 3724 0.81 2.90 0.06 101 JH_SPAMMY_HEADERS 3702 0.77 2.89 0.00 102 XM_DIRTYINTL 3656 0.98 2.85 0.31 103 RCVD_IN_IADB_LISTED 3624 4.32 2.82 4.86 104 XM_GoogleGroups 3599 1.74 2.81 1.36 105 HTML_TITLE_SUBJ_DIFF 3576 0.90 2.79 0.22 106 FROM_SUSPICIOUS_NTLD_FP 3567 0.78 2.78 0.05 107 RCVD_IN_MSPIKE_L3 3483 1.11 2.71 0.53 108 T_FILL_THIS_FORM_SHORT 3416 1.32 2.66 0.83 109 RELAYCOUNTRY_FR 3266 0.83 2.55 0.20 110 XMLngstWrd_00 3239 1.19 2.52 0.70 111 URI_HEX 3217 1.66 2.51 1.36 112 BAYES_40 3211 4.54 2.50 5.28 113 XMLngstWrd_01 3197 1.14 2.49 0.65 114 HTML_IMAGE_ONLY_12 3129 0.84 2.44 0.26 115 XMLngstWrd_02 3128 1.05 2.44 0.55 116 RCVD_IN_PSBL 3122 0.77 2.43 0.17 117 XMLngstWrd_03 3070 0.97 2.39 0.45 118 RCVD_IN_MSPIKE_L5 3050 0.66 2.38 0.04 119 TR_XM_PHPDW 3042 0.91 2.37 0.37 120 XM_DK_Undo_01 3032 1.95 2.36 1.81 121 XMLngstWrd_04 2982 0.90 2.32 0.39 122 USER_IN_DEF_DKIM_WL 2980 8.60 2.32 10.87 123 ALL_TRUSTED 2971 15.96 2.32 20.91 124 XM_B_COVIDMETA 2957 1.02 2.30 0.56 125 T_TooManySym_01 2925 5.09 2.28 6.11 126 SUBJ_ALL_CAPS 2925 1.94 2.28 1.82 127 TR_XM_PHPForged 2910 0.85 2.27 0.33 128 UPPERCASE_75_100 2900 0.75 2.26 0.21 129 RCVD_IN_IADB_SPF 2895 3.76 2.26 4.30 130 TR_XM_FormFill2 2876 0.84 2.24 0.33 131 XM_H_PHPOS 2863 0.83 2.23 0.32 132 XMBody_17 2839 0.95 2.21 0.49 133 BAYES_20 2782 3.55 2.17 4.05 134 HTML_IMAGE_RATIO_08 2732 1.99 2.13 1.95 135 HTML_SHORT_LINK_IMG_2 2713 0.61 2.11 0.06 136 XMDiploma_00 2706 1.51 2.11 1.30 137 TR_XM_NoHeaderRelay 2649 0.68 2.06 0.17 138 RCVD_IN_IADB_DK 2590 3.29 2.02 3.75 139 HTML_IMAGE_ONLY_08 2561 0.61 2.00 0.10 140 RCVD_IN_IADB_SENDERID 2545 3.36 1.98 3.85 141 BOTNET_NORDNS 2545 0.55 1.98 0.03 142 XM_URI_RBL 2521 0.61 1.97 0.12 143 TR_XM_FormFill 2422 0.51 1.89 0.01 144 RCVD_IN_IADB_VOUCHED 2410 2.75 1.88 3.07 145 XM_B_Unsub2 2393 1.52 1.87 1.39 146 DATE_IN_PAST_12_24 2378 0.50 1.85 0.01 147 TR_XM_SB_Phish 2365 2.06 1.84 2.14 148 RELAYCOUNTRY_IN 2356 0.56 1.84 0.09 149 RCVD_IN_VALIDITY_RPBL 2338 0.50 1.82 0.02 150 XM_H_TOP 2329 0.49 1.82 0.01 151 XM_CamelCaseFrm001 2309 1.70 1.80 1.66 152 FROM_EXCESS_BASE64 2308 2.27 1.80 2.44 153 XMSubPhish11 2273 2.02 1.77 2.11 154 MAILING_LIST_MULTI 2186 2.52 1.70 2.82 155 XM_B_SpammyWords4 2129 0.66 1.66 0.30 156 PLING_QUERY 2117 1.00 1.65 0.77 157 XM_UB60 2093 0.48 1.63 0.06 158 T_XMHurry_00 2084 2.65 1.62 3.02 159 HTML_TAG_BALANCE_CENTER 2072 0.48 1.62 0.06 160 XMBrknScrpt_02 2061 1.20 1.61 1.06 161 XMStockSpam_06 2040 1.27 1.59 1.15 162 T_XMDrugObfuBody_00 1965 0.97 1.53 0.77 163 XM_UB99 1891 0.39 1.47 0.00 164 TR_MetaPhish_Combo_01 1888 0.93 1.47 0.73 165 XMSexyCombo_04 1864 0.51 1.45 0.17 166 TR_XM_INV_DKIM 1840 0.70 1.43 0.43 167 TR_XM_COVIDMETA4 1823 0.60 1.42 0.30 168 BODY_URI_ONLY 1799 0.38 1.40 0.01 169 XM_Body_Dirty_Words_01 1782 0.54 1.39 0.23 170 DIET_1 1776 0.60 1.38 0.32 171 BAYES_00 1773 9.91 1.38 13.01 172 URI_PHP_REDIR 1738 0.37 1.35 0.02 173 URIBL_BLACK 1731 0.39 1.35 0.04 174 XM_B_DNDMA 1716 0.63 1.34 0.37 175 TR_Mismatch_TLD_02 1664 0.41 1.30 0.09 176 MIXED_HREF_CASE 1660 0.35 1.29 0.00 177 HTML_TAG_BALANCE_BODY 1655 0.75 1.29 0.56 178 TM2_M_A_HREF_HREF 1652 0.78 1.29 0.60 179 MIXED_IMG_CASE 1650 0.34 1.29 0.00 180 XM_TLDProd2 1591 0.48 1.24 0.20 181 MIXED_CENTER_CASE 1587 0.33 1.24 0.00 182 XMGenDplmaNmb 1582 0.82 1.23 0.67 183 MIXED_AREA_CASE 1571 0.33 1.22 0.00 184 MIXED_FONT_CASE 1566 0.33 1.22 0.00 185 TR_XM_COVIDMETA1 1556 0.47 1.21 0.20 186 RELAYCOUNTRY_AU 1555 0.57 1.21 0.33 187 XMMoneyMeta_00 1546 0.62 1.21 0.40 188 XM_UB80 1525 0.33 1.19 0.01 189 RELAYCOUNTRY_RU 1522 0.34 1.19 0.04 190 RCVD_IN_MSPIKE_L4 1491 0.61 1.16 0.41 191 XMSlimDrugH 1465 0.54 1.14 0.32 192 RCVD_IN_IADB_OPTIN 1463 1.83 1.14 2.09 193 RELAYCOUNTRY_PL 1459 0.32 1.14 0.02 194 LongTLD 1452 0.43 1.13 0.17 195 XM_UB999 1429 0.30 1.11 0.00 196 HTML_FONT_SIZE_LARGE 1404 0.38 1.09 0.13 197 URI_NO_WWW_BIZ_CGI 1382 0.29 1.08 0.01 198 GOOGLE_DOC_SUSP 1378 0.29 1.07 0.00 199 TR_XM_DocuGoogle 1373 0.29 1.07 0.00 200 URI_TRY_3LD 1369 0.75 1.07 0.63 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 305955 88.98 95.85 86.49 2 RELAYCOUNTRY_US 272242 78.02 80.94 76.96 3 DKIM_SIGNED 244072 74.01 87.82 68.99 4 DCC_CHECK_NEGATIVE 239611 56.97 27.29 67.73 5 XM_DK_Pass 237901 71.80 84.36 67.25 6 XM_B_Unicode 237185 68.87 73.90 67.05 7 DKIM_VALID 230262 69.74 82.55 65.09 8 BAYES_50 191813 51.10 42.48 54.22 9 DKIM_VALID_AU 175599 53.10 62.65 49.64 10 XM_B_SpammyWords 153811 50.09 68.31 43.48 11 XMListUnsubscribeExists 153102 50.33 69.79 43.28 12 XM_B_Unicode3 132293 38.00 39.68 37.40 13 T_TM2_M_HEADER_IN_MSG 114778 29.68 22.04 32.45 14 DCC_CHECK 113968 42.98 72.67 32.22 15 RCVD_IN_MSPIKE_WL 97368 25.16 18.65 27.52 16 DKIM_VALID_EF 95434 28.86 34.06 26.98 17 HTML_FONT_LOW_CONTRAST 89754 27.47 33.24 25.37 18 FVGT_m_MULTI_ODD 81190 24.73 29.62 22.95 19 XMSubLong 78182 22.62 24.07 22.10 20 LOC_TINY_FONT_1 74960 25.12 35.94 21.19 21 ALL_TRUSTED 73980 15.96 2.32 20.91 22 MIME_HTML_ONLY 69847 22.82 31.29 19.74 23 RCVD_IN_MSPIKE_H2 68541 20.82 24.79 19.37 24 XM_B_SpammyWords2 68286 23.57 35.33 19.30 25 T_KAM_HTML_FONT_INVALID 61043 19.73 26.54 17.26 26 RCVD_IN_MSPIKE_H3 52909 14.08 11.68 14.96 27 BAYES_00 46013 9.91 1.38 13.01 28 XM_Body_Dirty_Words 41725 14.61 22.37 11.79 29 XM_B_Unsub 38907 12.47 16.52 11.00 30 USER_IN_DEF_DKIM_WL 38454 8.60 2.32 10.87 31 RCVD_IN_MSPIKE_H4 37859 9.60 6.56 10.70 32 XM_Multi_Part_URI 36601 11.68 15.36 10.35 33 TooManyTo_001 34944 9.33 7.83 9.88 34 BAYES_60 31602 8.72 8.14 8.93 35 LOTS_OF_MONEY 30540 9.46 11.76 8.63 36 LotsOfNums_01 29816 7.96 6.67 8.43 37 XM_DKIMWhitelistDomains 27580 5.73 0.02 7.80 38 UNPARSEABLE_RELAY 26473 8.85 12.60 7.48 39 XM_Evil_Numbers_Gen 26414 8.00 9.47 7.47 40 TR_XM_DK_Bayes 24657 5.30 0.68 6.97 41 TR_XM_DK_Bayes1 23963 5.15 0.66 6.77 42 IN_ZIMBRA_NJ_WHITELIST 23449 4.89 0.08 6.63 43 HTML_IMAGE_RATIO_02 22475 7.12 9.22 6.35 44 T_TooManySym_01 21615 5.09 2.28 6.11 45 XM_DK_Undo_02 21247 16.08 43.84 6.01 46 MIME_QP_LONG_LINE 21031 5.37 3.78 5.94 47 TR_XM_UnparsRelay 20665 7.59 12.39 5.84 48 TR_XM_DK_Bayes2 20380 4.37 0.53 5.76 49 TR_XM_SpammyWords4 20360 6.89 10.01 5.76 50 XM_SendGrid 20069 6.35 8.20 5.67 51 XM_PDF 19142 4.24 1.02 5.41 52 BAYES_40 18692 4.54 2.50 5.28 53 HTML_IMAGE_RATIO_04 18621 4.96 4.11 5.26 54 MPART_ALT_DIFF 18295 7.19 12.75 5.17 55 XM_H_Long_From01 17705 5.00 4.98 5.00 56 BAYES_99 17428 11.94 31.26 4.93 57 RCVD_IN_VALIDITY_SAFE 17193 4.67 4.14 4.86 58 RCVD_IN_IADB_LISTED 17189 4.32 2.82 4.86 59 TR_XM_DKIM_Undo 16804 12.89 35.32 4.75 60 XM_B_SpammyWords3 16194 6.21 10.72 4.58 61 BOTNET_IPINHOSTNAME 15345 6.62 12.93 4.34 62 RCVD_IN_IADB_SPF 15216 3.76 2.26 4.30 63 RCVD_IN_VALIDITY_CERTIFIED 15186 4.07 3.46 4.29 64 BAYES_80 15040 5.04 7.22 4.25 65 FSL_BULK_SIG 14536 6.49 13.06 4.11 66 BAYES_20 14316 3.55 2.17 4.05 67 BAYES_999 14097 9.48 24.64 3.98 68 XM_B_Phish_Phrases 14060 4.54 6.09 3.97 69 XMSubMetaSx_00 14053 4.74 6.86 3.97 70 XMStrtUSub 14024 3.92 3.79 3.96 71 DKIM_INVALID 13810 4.27 5.27 3.90 72 RCVD_IN_IADB_SENDERID 13634 3.36 1.98 3.85 73 XMNumbers 13457 3.90 4.17 3.80 74 RCVD_IN_IADB_DK 13263 3.29 2.02 3.75 75 TM2_M_URI_OPT_OUT 13161 3.85 4.20 3.72 76 TR_XM_DK_SendGrid 13018 4.04 5.04 3.68 77 T_REMOTE_IMAGE 12932 3.80 4.22 3.66 78 T_TooManySym_02 12254 2.76 0.82 3.46 79 XM_UncommonTLD01 12183 6.36 14.41 3.44 80 XM_H_Trusted_IP 12153 2.52 0.00 3.44 81 XMSexyCombo_05 12115 5.25 10.28 3.42 82 ANY_BOUNCE_MESSAGE 11942 2.71 0.87 3.38 83 BOUNCE_MESSAGE 11940 2.71 0.87 3.38 84 MIME_HTML_ONLY_MULTI 11639 4.33 7.19 3.29 85 RELAYCOUNTRY_META 11571 7.72 19.98 3.27 86 HTML_IMAGE_RATIO_06 11542 3.35 3.58 3.26 87 TR_XM_PhishingBody 11274 3.99 6.20 3.19 88 RCVD_IN_IADB_VOUCHED 10844 2.75 1.88 3.07 89 T_XMHurry_00 10669 2.65 1.62 3.02 90 MAILING_LIST_MULTI 9967 2.52 1.70 2.82 91 BAYES_05 9740 2.27 0.93 2.75 92 URI_NOVOWEL 9449 3.39 5.36 2.67 93 HTML_MIME_NO_HTML_TAG 9265 4.03 7.90 2.62 94 BAYES_95 9110 2.92 3.87 2.58 95 FROM_EXCESS_BASE64 8643 2.27 1.80 2.44 96 TooManyTo_002 8596 2.03 0.94 2.43 97 XM_SPF_SoftFail 8017 2.83 4.38 2.27 98 TR_XM_SB_Phish 7582 2.06 1.84 2.14 99 XMSubPhish11 7456 2.02 1.77 2.11 100 RCVD_IN_IADB_OPTIN 7378 1.83 1.14 2.09 101 XM_B_SpammyTLD 7161 2.93 5.42 2.02 102 XM_B_Phish66 7074 2.48 3.80 2.00 103 MIME_HTML_MOSTLY 7059 3.19 6.49 2.00 104 HELO_NODOT 7004 1.63 0.65 1.98 105 HELO_NO_DOMAIN 7003 1.63 0.65 1.98 106 HTML_IMAGE_RATIO_08 6884 1.99 2.13 1.95 107 KHOP_HELO_FCRDNS 6883 2.37 3.55 1.95 108 INVALID_MSGID 6766 1.46 0.19 1.91 109 IN_HORDE_ADDRESS_BOOK 6615 1.40 0.10 1.87 110 RCVD_IN_MSPIKE_H5 6600 1.48 0.42 1.87 111 T_XMDrugObfuBody_14 6579 2.23 3.26 1.86 112 SUBJ_ALL_CAPS 6431 1.94 2.28 1.82 113 XM_DK_Undo_01 6390 1.95 2.36 1.81 114 TVD_RCVD_IP 6347 1.41 0.34 1.79 115 MSGID_NOFQDN1 6197 1.29 0.03 1.75 116 TO_MALFORMED 6140 1.28 0.02 1.74 117 XM_CamelCaseFrm001 5885 1.70 1.80 1.66 118 TooManyTo_003 5801 1.42 0.81 1.64 119 TR_DCC_Bayes_99 5761 7.29 22.92 1.63 120 TR_Symld_Words 5707 1.45 1.00 1.61 121 T_XMDrugObfuBody_08 5532 1.93 2.95 1.56 122 TR_XM_SpammyWords5 5053 2.00 3.58 1.43 123 XM_B_Investor 4976 1.99 3.61 1.41 124 BOTNET 4932 4.36 12.53 1.39 125 XM_B_Unsub2 4914 1.52 1.87 1.39 126 XMSubNoVowel 4853 1.17 0.62 1.37 127 XM_GoogleGroups 4810 1.74 2.81 1.36 128 URI_HEX 4798 1.66 2.51 1.36 129 XMCapTrack 4708 1.07 0.37 1.33 130 XMDiploma_00 4589 1.51 2.11 1.30 131 TR_XM_SpammyRelay 4552 4.41 13.03 1.29 132 TM2_M_VERY_LONG_WORD 4547 2.21 4.75 1.29 133 XMGappySubj_01 4292 0.94 0.19 1.21 134 XMStockSpam_06 4069 1.27 1.59 1.15 135 TVD_SPACE_RATIO 4053 0.87 0.13 1.15 136 TooManyTo_004 4039 1.03 0.71 1.14 137 XMSexyCombo_01 4016 1.68 3.19 1.14 138 UNTRUSTED_Relay 3974 4.08 12.24 1.12 139 XMBSHREFv2 3829 0.89 0.36 1.08 140 XMBrknScrpt_02 3740 1.20 1.61 1.06 141 HTML_FONT_FACE_BAD 3577 0.96 0.80 1.01 142 RCVD_IN_MSPIKE_BL 3458 2.38 6.26 0.98 143 XM_H_Long_From02 3442 0.99 1.02 0.97 144 TR_XM_MSPIKECOMBO 3440 2.38 6.25 0.97 145 RCVD_IN_RP_SAFE 3432 0.93 0.81 0.97 146 DKIM_ADSP_CUSTOM_MED 3328 0.96 1.01 0.94 147 TooManyTo_005 3303 0.85 0.64 0.93 148 XM_OfRef6 3231 1.47 3.02 0.91 149 XM_E_Blogspot 3101 0.68 0.13 0.88 150 T_TooManySym_03 3100 0.71 0.27 0.88 151 RCVD_IN_RP_CERTIFIED 3070 0.81 0.66 0.87 152 XM_ProductURIs 3038 0.90 1.00 0.86 153 HTTPS_HTTP_MISMATCH 2971 0.89 1.03 0.84 154 T_FILL_THIS_FORM_SHORT 2927 1.32 2.66 0.83 155 TR_XM_MaxUnsub 2855 2.36 6.63 0.81 156 XMNoVowels 2770 0.70 0.47 0.78 157 TR_XM_SpammyWords2 2749 3.31 10.31 0.78 158 XMHTML_After_End 2736 0.84 1.04 0.77 159 RELAYCOUNTRY_GB 2718 0.83 1.02 0.77 160 T_XMDrugObfuBody_00 2713 0.97 1.53 0.77 161 PLING_QUERY 2709 1.00 1.65 0.77 162 XMBody_95 2685 0.59 0.14 0.76 163 SpammyFromTLD_01 2665 2.07 5.70 0.75 164 RCVD_IN_BL_SPAMCOP_NET 2658 3.00 9.20 0.75 165 TR_MetaPhish_Combo_01 2600 0.93 1.47 0.73 166 XM_UB50 2591 2.24 6.38 0.73 167 XMBdyGiftCard01 2497 0.79 1.00 0.71 168 XMLngstWrd_00 2482 1.19 2.52 0.70 169 HTML_IMAGE_ONLY_20 2420 0.63 0.48 0.68 170 XM_ShortIntro_01 2397 0.70 0.76 0.68 171 XMGenDplmaNmb 2360 0.82 1.23 0.67 172 SHORT_URI_2 2348 0.65 0.62 0.66 173 XMLngstWrd_01 2288 1.14 2.49 0.65 174 RELAYCOUNTRY_CA 2279 1.66 4.45 0.64 175 T_OBFU_PDF_ATTACH 2260 0.51 0.17 0.64 176 URI_TRY_3LD 2240 0.75 1.07 0.63 177 RCVD_IN_SORBS_DUL 2229 0.57 0.40 0.63 178 XM_H_PHPMailer 2202 0.73 1.05 0.62 179 NML_ADSP_CUSTOM_MED 2166 0.64 0.73 0.61 180 TM2_M_A_HREF_HREF 2129 0.78 1.29 0.60 181 TR_MSPIKEBAYES00 2078 0.44 0.03 0.59 182 SHORT_HELO_AND_INLINE_IMAGE 1973 0.44 0.10 0.56 183 XM_B_COVIDMETA 1973 1.02 2.30 0.56 184 HTML_TAG_BALANCE_BODY 1971 0.75 1.29 0.56 185 XMLngstWrd_02 1956 1.05 2.44 0.55 186 XM_B_COPY_HTML 1905 0.60 0.78 0.54 187 XMPhish30 1899 0.67 1.02 0.54 188 RCVD_IN_MSPIKE_L3 1872 1.11 2.71 0.53 189 XMBody_106 1847 0.39 0.03 0.52 190 XM_D_tchamptons_WL 1812 0.38 0.00 0.51 191 FORGED_GMAIL_RCVD 1781 0.59 0.82 0.50 192 XMSubMetaI_00 1777 0.61 0.92 0.50 193 T_MANY_PILL_PRICE 1752 0.36 0.00 0.50 194 HTML_IMAGE_ONLY_32 1744 0.41 0.18 0.49 195 FROM_GOV_SPOOF 1742 0.40 0.13 0.49 196 XMBody_17 1728 0.95 2.21 0.49 197 TR_XM_SpammyWords3 1683 1.45 4.12 0.48 198 XMLngstWrd_03 1597 0.97 2.39 0.45 199 USER_IN_WELCOMELIST 1580 0.33 0.00 0.45 200 USER_IN_WHITELIST 1580 0.33 0.00 0.45 ----------------------------------------------------------------------