Email: 483877 Autolearn: 0 AvgScore: 2.70 AvgScanTime: 1.38 sec Spam: 129263 Autolearn: 0 AvgScore: 13.48 AvgScanTime: 1.57 sec Ham: 354614 Autolearn: 0 AvgScore: -1.23 AvgScanTime: 1.31 sec Time Spent Running SA: 185.65 hours Time Spent Processing Spam: 56.36 hours Time Spent Processing Ham: 129.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122912 88.79 95.09 86.49 2 DKIM_SIGNED 112488 76.27 87.02 72.35 3 XM_DK_Pass 109041 74.26 84.36 70.58 4 RELAYCOUNTRY_US 107079 81.02 82.84 80.35 5 DKIM_VALID 104479 71.61 80.83 68.25 6 XM_B_Unicode 101274 71.18 78.35 68.57 7 DCC_CHECK 94875 45.06 73.40 34.74 8 XMListUnsubscribeExists 91613 53.49 70.87 47.16 9 XM_B_SpammyWords 87923 49.90 68.02 43.29 10 DKIM_VALID_AU 77402 53.28 59.88 50.87 11 XM_DK_Undo_02 56904 16.76 44.02 6.83 12 XM_B_Unicode3 54215 40.40 41.94 39.83 13 BAYES_50 52558 51.14 40.66 54.96 14 XM_B_SpammyWords2 48727 22.91 37.70 17.52 15 LOC_TINY_FONT_1 46064 26.08 35.64 22.59 16 TR_XM_DKIM_Undo 44292 12.87 34.27 5.08 17 BAYES_99 43679 13.02 33.79 5.45 18 HTML_FONT_LOW_CONTRAST 42933 27.65 33.21 25.62 19 FVGT_m_MULTI_ODD 40797 25.71 31.56 23.58 20 MIME_HTML_ONLY 40195 22.77 31.10 19.73 21 DKIM_VALID_EF 37932 27.30 29.34 26.55 22 T_KAM_HTML_FONT_INVALID 35945 21.48 27.81 19.18 23 RCVD_IN_MSPIKE_H2 35250 22.42 27.27 20.65 24 BAYES_999 34425 10.33 26.63 4.39 25 DCC_CHECK_NEGATIVE 34339 54.89 26.57 65.22 26 TR_DCC_Bayes_99 32456 8.23 25.11 2.08 27 XMSubLong 30826 22.31 23.85 21.75 28 T_TM2_M_HEADER_IN_MSG 29213 28.41 22.60 30.53 29 RCVD_IN_MSPIKE_WL 27295 26.71 21.12 28.75 30 XM_Body_Dirty_Words 26839 14.16 20.76 11.76 31 RELAYCOUNTRY_META 23413 7.48 18.11 3.61 32 XM_Multi_Part_URI 20890 12.44 16.16 11.08 33 XM_B_Unsub 18371 11.44 14.21 10.43 34 LOTS_OF_MONEY 17450 9.23 13.50 7.68 35 UNPARSEABLE_RELAY 17056 9.38 13.19 8.00 36 RCVD_IN_MSPIKE_H3 16869 15.15 13.05 15.92 37 BOTNET_IPINHOSTNAME 16613 6.68 12.85 4.43 38 TR_XM_UnparsRelay 16558 8.04 12.81 6.30 39 XM_B_SpammyWords3 16371 6.33 12.66 4.02 40 FSL_BULK_SIG 15967 6.35 12.35 4.17 41 BOTNET 14406 4.14 11.14 1.58 42 TR_XM_SpammyWords4 14405 6.45 11.14 4.74 43 TR_XM_SpammyRelay 14298 4.07 11.06 1.52 44 TR_XM_SpammyWords2 13794 3.67 10.67 1.12 45 XM_UncommonTLD01 13476 5.50 10.43 3.70 46 XMSexyCombo_05 12549 5.09 9.71 3.41 47 XM_Evil_Numbers_Gen 12407 8.47 9.60 8.06 48 RCVD_IN_BL_SPAMCOP_NET 11805 3.07 9.13 0.87 49 MPART_ALT_DIFF 11750 6.22 9.09 5.17 50 LotsOfNums_01 11458 9.46 8.86 9.68 51 UNTRUSTED_Relay 11110 3.19 8.59 1.22 52 XM_SendGrid 11086 6.64 8.58 5.94 53 HTML_IMAGE_RATIO_02 10994 6.55 8.51 5.84 54 BAYES_80 10820 5.34 8.37 4.24 55 BAYES_60 9536 8.89 7.38 9.44 56 RCVD_IN_MSPIKE_H4 9495 9.99 7.35 10.96 57 XMSubMetaSx_00 9278 4.98 7.18 4.17 58 TR_XM_PhishingBody 9248 4.36 7.15 3.33 59 TR_XM_MaxUnsub 8538 2.42 6.61 0.89 60 TooManyTo_001 8145 8.78 6.30 9.68 61 DKIM_INVALID 8009 4.66 6.20 4.10 62 HTML_MIME_NO_HTML_TAG 7214 3.29 5.58 2.46 63 XM_H_Long_From01 7028 5.10 5.44 4.97 64 RCVD_IN_MSPIKE_BL 6919 2.23 5.35 1.09 65 TR_XM_MSPIKECOMBO 6916 2.22 5.35 1.08 66 MIME_HTML_ONLY_MULTI 6860 3.94 5.31 3.45 67 TR_XM_DK_SendGrid 6745 4.05 5.22 3.63 68 XM_B_Phish_Phrases 6704 4.32 5.19 4.01 69 SpammyFromTLD_02 6468 1.69 5.00 0.49 70 XM_SPF_SoftFail 6410 2.97 4.96 2.24 71 RELAYCOUNTRY_CA 6353 1.91 4.91 0.81 72 XM_B_Investor 6106 2.48 4.72 1.66 73 TM2_M_URI_OPT_OUT 6072 4.04 4.70 3.80 74 TM2_M_VERY_LONG_WORD 6011 2.37 4.65 1.53 75 TR_XM_SPAMCOP 5964 1.47 4.61 0.33 76 BAYES_95 5962 3.17 4.61 2.65 77 MIME_HTML_MOSTLY 5921 2.84 4.58 2.20 78 MIME_QP_LONG_LINE 5748 6.24 4.45 6.90 79 HTML_IMAGE_RATIO_04 5651 5.09 4.37 5.35 80 XMStrtUSub 5637 4.29 4.36 4.26 81 XMNumbers 5314 3.85 4.11 3.76 82 TR_XM_SpammyWords5 5155 2.26 3.99 1.63 83 HTML_IMAGE_RATIO_06 5093 4.51 3.94 4.72 84 T_REMOTE_IMAGE 4990 3.59 3.86 3.49 85 KHOP_HELO_FCRDNS 4918 2.35 3.80 1.82 86 XM_B_Phish66 4740 2.46 3.67 2.02 87 URI_NOVOWEL 4670 3.10 3.61 2.91 88 XM_UB50 4588 1.51 3.55 0.77 89 RCVD_IN_VALIDITY_SAFE 4501 4.19 3.48 4.44 90 SpammyFromTLD_01 4491 1.61 3.47 0.92 91 TR_XM_SpammyWords3 4442 1.32 3.44 0.54 92 XM_B_SpammyTLD 4205 2.42 3.25 2.12 93 T_XMDrugObfuBody_08 4117 2.00 3.18 1.57 94 T_FILL_THIS_FORM_SHORT 3912 1.46 3.03 0.89 95 T_XMDrugObfuBody_14 3852 2.18 2.98 1.89 96 RCVD_IN_IADB_LISTED 3740 5.06 2.89 5.85 97 RCVD_IN_VALIDITY_CERTIFIED 3731 3.56 2.89 3.81 98 XMDiploma_00 3731 1.77 2.89 1.37 99 T_TooManySym_01 3597 5.10 2.78 5.94 100 XM_GoogleGroups 3568 1.80 2.76 1.44 101 XM_B_Unsub2 3342 1.81 2.59 1.53 102 TR_XM_PHPDW 3273 1.13 2.53 0.62 103 HTML_IMAGE_RATIO_08 3210 2.57 2.48 2.61 104 TR_XM_PHPForged 3173 1.07 2.45 0.56 105 RCVD_IN_MSPIKE_L3 3149 1.07 2.44 0.57 106 TR_XM_FormFill2 3137 1.06 2.43 0.56 107 TR_XM_SB_Phish 3130 2.10 2.42 1.99 108 XM_DIRTYINTL 3128 0.90 2.42 0.34 109 XM_H_PHPOS 3126 1.05 2.42 0.55 110 RCVD_IN_IADB_SPF 3099 4.44 2.40 5.18 111 XMSubPhish11 3061 2.07 2.37 1.96 112 XMLngstWrd_00 2986 1.24 2.31 0.85 113 XMLngstWrd_01 2948 1.18 2.28 0.78 114 XMBody_17 2885 0.87 2.23 0.38 115 XMLngstWrd_02 2882 1.09 2.23 0.68 116 XM_CamelCaseFrm001 2880 1.91 2.23 1.80 117 USER_IN_DEF_DKIM_WL 2855 8.75 2.21 11.13 118 XMSexyCombo_01 2847 1.29 2.20 0.96 119 RCVD_IN_IADB_DK 2813 3.87 2.18 4.49 120 ALL_TRUSTED 2806 13.26 2.17 17.31 121 RCVD_IN_IADB_SENDERID 2793 3.99 2.16 4.66 122 XMLngstWrd_03 2760 0.98 2.14 0.55 123 XM_DK_Undo_01 2758 1.91 2.13 1.82 124 HTML_TITLE_SUBJ_DIFF 2755 0.73 2.13 0.22 125 XM_OfRef6 2751 1.16 2.13 0.80 126 XM_URI_RBL 2733 0.65 2.11 0.12 127 FROM_EXCESS_BASE64 2705 2.48 2.09 2.62 128 URIBL_DBL_SPAM 2691 0.56 2.08 0.01 129 XMLngstWrd_04 2684 0.90 2.08 0.47 130 SUBJ_ALL_CAPS 2654 1.98 2.05 1.95 131 RELAYCOUNTRY_AU 2625 0.81 2.03 0.37 132 UPPERCASE_75_100 2577 0.69 1.99 0.22 133 MAILING_LIST_MULTI 2564 2.59 1.98 2.81 134 URI_HEX 2557 1.52 1.98 1.35 135 RCVD_IN_VALIDITY_RPBL 2492 0.54 1.93 0.03 136 XM_B_SpammyWords4 2432 0.81 1.88 0.41 137 T_XMDrugObfuBody_00 2393 1.10 1.85 0.83 138 TR_XM_FormFill 2318 0.49 1.79 0.01 139 XM_B_COVIDMETA 2313 0.92 1.79 0.60 140 RCVD_IN_PSBL 2299 0.54 1.78 0.10 141 TR_XM_INV_DKIM 2238 0.76 1.73 0.40 142 BAYES_40 2213 4.02 1.71 4.86 143 RELAYCOUNTRY_FR 2177 0.61 1.68 0.23 144 BOTNET_NORDNS 2175 0.46 1.68 0.02 145 TR_MetaPhish_Combo_01 2157 1.13 1.67 0.94 146 RCVD_IN_IADB_VOUCHED 2156 3.16 1.67 3.71 147 HTML_IMAGE_ONLY_08 2119 0.52 1.64 0.11 148 XM_UB99 2111 0.44 1.63 0.00 149 BAYES_20 2110 3.20 1.63 3.77 150 HTML_FONT_SIZE_LARGE 2072 0.50 1.60 0.10 151 TR_XM_COVIDMETA4 2057 0.69 1.59 0.37 152 RCVD_IN_MSPIKE_L5 2047 0.45 1.58 0.03 153 URIBL_BLACK 2016 0.45 1.56 0.05 154 JH_SPAMMY_HEADERS 2010 0.42 1.55 0.00 155 TR_LOTS_OF_MONEY3 2005 0.68 1.55 0.36 156 XMStockSpam_06 1961 1.29 1.52 1.20 157 RELAYCOUNTRY_GB 1929 0.97 1.49 0.77 158 TM2_M_A_HREF_HREF 1904 0.85 1.47 0.63 159 XM_B_SEO 1889 0.51 1.46 0.16 160 HTML_TAG_BALANCE_CENTER 1869 0.40 1.45 0.01 161 TR_XM_BayesRelay 1857 0.39 1.44 0.00 162 XMGenDplmaNmb 1833 1.02 1.42 0.87 163 XM_Body_Dirty_Words_01 1809 0.53 1.40 0.21 164 TR_XM_SEO4 1791 0.44 1.39 0.09 165 XMPhish30 1789 0.76 1.38 0.53 166 T_XMHurry_00 1783 0.70 1.38 0.46 167 HTTPS_HTTP_MISMATCH 1770 0.90 1.37 0.73 168 HTML_TAG_BALANCE_BODY 1760 0.75 1.36 0.53 169 MIXED_CENTER_CASE 1734 0.36 1.34 0.00 170 TR_XM_NoHeaderRelay 1732 0.49 1.34 0.18 171 MIXED_HREF_CASE 1731 0.36 1.34 0.00 172 RCVD_IN_MSPIKE_L4 1720 0.71 1.33 0.48 173 MIXED_IMG_CASE 1718 0.36 1.33 0.00 174 MIXED_AREA_CASE 1717 0.35 1.33 0.00 175 TR_XM_COVIDMETA1 1716 0.53 1.33 0.24 176 MIXED_FONT_CASE 1714 0.35 1.33 0.00 177 TR_Symld_Words 1697 1.72 1.31 1.87 178 XMSubMetaI_00 1668 0.75 1.29 0.55 179 XM_UB999 1624 0.34 1.26 0.00 180 XM_H_Long_From02 1571 1.31 1.22 1.34 181 XM_UB60 1565 0.38 1.21 0.08 182 BAYES_00 1542 9.36 1.19 12.34 183 HK_RANDOM_REPLYTO 1511 0.38 1.17 0.09 184 TR_XM_Spammywords 1501 0.55 1.16 0.33 185 XM_S_SpammyWords 1501 0.55 1.16 0.33 186 TR_Mismatch_TLD_02 1489 0.36 1.15 0.07 187 XMHTML_After_End 1475 0.89 1.14 0.80 188 BODY_URI_ONLY 1458 0.31 1.13 0.01 189 GOOG_STO_IMG_HTML 1455 0.30 1.13 0.00 190 TR_BOTNET_NEGATE 1395 0.55 1.08 0.36 191 URI_TRY_3LD 1301 0.66 1.01 0.54 192 LongTLD 1297 0.38 1.00 0.16 193 TooManyTo_002 1293 2.02 1.00 2.39 194 FROM_SUSPICIOUS_NTLD 1291 0.30 1.00 0.05 195 DKIM_ADSP_CUSTOM_MED 1287 0.99 1.00 0.99 196 HTML_FONT_FACE_BAD 1279 1.01 0.99 1.01 197 XM_H_PHPMailer 1279 0.76 0.99 0.68 198 RCVD_IN_IADB_OPTIN 1270 2.03 0.98 2.42 199 RELAYCOUNTRY_CN 1259 0.32 0.97 0.08 200 RELAYCOUNTRY_IN 1256 0.33 0.97 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 306723 88.79 95.09 86.49 2 RELAYCOUNTRY_US 284944 81.02 82.84 80.35 3 DKIM_SIGNED 256559 76.27 87.02 72.35 4 XM_DK_Pass 250275 74.26 84.36 70.58 5 XM_B_Unicode 243170 71.18 78.35 68.57 6 DKIM_VALID 242025 71.61 80.83 68.25 7 DCC_CHECK_NEGATIVE 231266 54.89 26.57 65.22 8 BAYES_50 194895 51.14 40.66 54.96 9 DKIM_VALID_AU 180409 53.28 59.88 50.87 10 XMListUnsubscribeExists 167235 53.49 70.87 47.16 11 XM_B_SpammyWords 153528 49.90 68.02 43.29 12 XM_B_Unicode3 141259 40.40 41.94 39.83 13 DCC_CHECK 123176 45.06 73.40 34.74 14 T_TM2_M_HEADER_IN_MSG 108280 28.41 22.60 30.53 15 RCVD_IN_MSPIKE_WL 101935 26.71 21.12 28.75 16 DKIM_VALID_EF 94143 27.30 29.34 26.55 17 HTML_FONT_LOW_CONTRAST 90840 27.65 33.21 25.62 18 FVGT_m_MULTI_ODD 83617 25.71 31.56 23.58 19 LOC_TINY_FONT_1 80109 26.08 35.64 22.59 20 XMSubLong 77139 22.31 23.85 21.75 21 RCVD_IN_MSPIKE_H2 73232 22.42 27.27 20.65 22 MIME_HTML_ONLY 69971 22.77 31.10 19.73 23 T_KAM_HTML_FONT_INVALID 68010 21.48 27.81 19.18 24 XM_B_SpammyWords2 62113 22.91 37.70 17.52 25 ALL_TRUSTED 61376 13.26 2.17 17.31 26 RCVD_IN_MSPIKE_H3 56440 15.15 13.05 15.92 27 BAYES_00 43773 9.36 1.19 12.34 28 XM_Body_Dirty_Words 41686 14.16 20.76 11.76 29 USER_IN_DEF_DKIM_WL 39485 8.75 2.21 11.13 30 XM_Multi_Part_URI 39297 12.44 16.16 11.08 31 RCVD_IN_MSPIKE_H4 38852 9.99 7.35 10.96 32 XM_B_Unsub 36977 11.44 14.21 10.43 33 TooManyTo_001 34318 8.78 6.30 9.68 34 LotsOfNums_01 34318 9.46 8.86 9.68 35 BAYES_60 33468 8.89 7.38 9.44 36 XM_DKIMWhitelistDomains 28629 5.93 0.04 8.07 37 XM_Evil_Numbers_Gen 28597 8.47 9.60 8.06 38 UNPARSEABLE_RELAY 28354 9.38 13.19 8.00 39 LOTS_OF_MONEY 27233 9.23 13.50 7.68 40 TR_XM_DK_Bayes 25272 5.36 0.53 7.13 41 TR_XM_DK_Bayes1 24557 5.21 0.50 6.92 42 MIME_QP_LONG_LINE 24451 6.24 4.45 6.90 43 XM_DK_Undo_02 24206 16.76 44.02 6.83 44 IN_ZIMBRA_NJ_WHITELIST 24089 5.00 0.08 6.79 45 TR_XM_UnparsRelay 22337 8.04 12.81 6.30 46 TR_XM_DK_Bayes2 21267 4.51 0.43 6.00 47 T_TooManySym_01 21081 5.10 2.78 5.94 48 XM_SendGrid 21059 6.64 8.58 5.94 49 RCVD_IN_IADB_LISTED 20747 5.06 2.89 5.85 50 HTML_IMAGE_RATIO_02 20714 6.55 8.51 5.84 51 BAYES_99 19321 13.02 33.79 5.45 52 HTML_IMAGE_RATIO_04 18975 5.09 4.37 5.35 53 RCVD_IN_IADB_SPF 18378 4.44 2.40 5.18 54 XM_PDF 18358 4.03 0.89 5.18 55 MPART_ALT_DIFF 18351 6.22 9.09 5.17 56 TR_XM_DKIM_Undo 18001 12.87 34.27 5.08 57 XM_H_Long_From01 17641 5.10 5.44 4.97 58 BAYES_40 17249 4.02 1.71 4.86 59 TR_XM_SpammyWords4 16812 6.45 11.14 4.74 60 HTML_IMAGE_RATIO_06 16737 4.51 3.94 4.72 61 RCVD_IN_IADB_SENDERID 16515 3.99 2.16 4.66 62 RCVD_IN_IADB_DK 15918 3.87 2.18 4.49 63 RCVD_IN_VALIDITY_SAFE 15760 4.19 3.48 4.44 64 BOTNET_IPINHOSTNAME 15705 6.68 12.85 4.43 65 BAYES_999 15583 10.33 26.63 4.39 66 XMStrtUSub 15109 4.29 4.36 4.26 67 BAYES_80 15031 5.34 8.37 4.24 68 XMSubMetaSx_00 14801 4.98 7.18 4.17 69 FSL_BULK_SIG 14781 6.35 12.35 4.17 70 DKIM_INVALID 14534 4.66 6.20 4.10 71 XM_B_SpammyWords3 14245 6.33 12.66 4.02 72 XM_B_Phish_Phrases 14217 4.32 5.19 4.01 73 RCVD_IN_VALIDITY_CERTIFIED 13511 3.56 2.89 3.81 74 TM2_M_URI_OPT_OUT 13482 4.04 4.70 3.80 75 BAYES_20 13366 3.20 1.63 3.77 76 XMNumbers 13323 3.85 4.11 3.76 77 RCVD_IN_IADB_VOUCHED 13139 3.16 1.67 3.71 78 XM_UncommonTLD01 13117 5.50 10.43 3.70 79 TR_XM_DK_SendGrid 12873 4.05 5.22 3.63 80 ANY_BOUNCE_MESSAGE 12807 2.82 0.64 3.61 81 BOUNCE_MESSAGE 12805 2.82 0.64 3.61 82 RELAYCOUNTRY_META 12794 7.48 18.11 3.61 83 XM_H_Trusted_IP 12638 2.61 0.00 3.56 84 T_REMOTE_IMAGE 12393 3.59 3.86 3.49 85 MIME_HTML_ONLY_MULTI 12217 3.94 5.31 3.45 86 XMSexyCombo_05 12076 5.09 9.71 3.41 87 T_TooManySym_02 11847 2.69 0.89 3.34 88 TR_XM_PhishingBody 11826 4.36 7.15 3.33 89 URI_NOVOWEL 10314 3.10 3.61 2.91 90 MAILING_LIST_MULTI 9950 2.59 1.98 2.81 91 BAYES_95 9388 3.17 4.61 2.65 92 FROM_EXCESS_BASE64 9299 2.48 2.09 2.62 93 HTML_IMAGE_RATIO_08 9245 2.57 2.48 2.61 94 HTML_MIME_NO_HTML_TAG 8712 3.29 5.58 2.46 95 RCVD_IN_IADB_OPTIN 8574 2.03 0.98 2.42 96 TooManyTo_002 8458 2.02 1.00 2.39 97 BAYES_05 8109 1.85 0.65 2.29 98 XM_SPF_SoftFail 7939 2.97 4.96 2.24 99 MIME_HTML_MOSTLY 7813 2.84 4.58 2.20 100 XM_B_SpammyTLD 7504 2.42 3.25 2.12 101 TR_DCC_Bayes_99 7380 8.23 25.11 2.08 102 XM_B_Phish66 7176 2.46 3.67 2.02 103 HELO_NODOT 7060 1.64 0.66 1.99 104 HELO_NO_DOMAIN 7053 1.63 0.66 1.99 105 TR_XM_SB_Phish 7041 2.10 2.42 1.99 106 XMSubPhish11 6963 2.07 2.37 1.96 107 SUBJ_ALL_CAPS 6909 1.98 2.05 1.95 108 IN_HORDE_ADDRESS_BOOK 6900 1.45 0.08 1.95 109 T_XMDrugObfuBody_14 6693 2.18 2.98 1.89 110 INVALID_MSGID 6663 1.41 0.12 1.88 111 RCVD_IN_MSPIKE_H5 6643 1.57 0.72 1.87 112 TR_Symld_Words 6619 1.72 1.31 1.87 113 XM_DK_Undo_01 6465 1.91 2.13 1.82 114 KHOP_HELO_FCRDNS 6437 2.35 3.80 1.82 115 XM_CamelCaseFrm001 6380 1.91 2.23 1.80 116 TO_MALFORMED 6134 1.27 0.01 1.73 117 MSGID_NOFQDN1 6124 1.27 0.02 1.73 118 TVD_RCVD_IP 5965 1.35 0.44 1.68 119 XM_B_Investor 5895 2.48 4.72 1.66 120 TR_XM_SpammyWords5 5770 2.26 3.99 1.63 121 TooManyTo_003 5656 1.40 0.85 1.59 122 BOTNET 5615 4.14 11.14 1.58 123 T_XMDrugObfuBody_08 5558 2.00 3.18 1.57 124 TM2_M_VERY_LONG_WORD 5440 2.37 4.65 1.53 125 XM_B_Unsub2 5432 1.81 2.59 1.53 126 TR_XM_SpammyRelay 5395 4.07 11.06 1.52 127 XM_GoogleGroups 5118 1.80 2.76 1.44 128 XMSubNoVowel 5099 1.23 0.67 1.44 129 XMDiploma_00 4848 1.77 2.89 1.37 130 XMGappySubj_01 4818 1.03 0.11 1.36 131 URI_HEX 4789 1.52 1.98 1.35 132 XM_H_Long_From02 4764 1.31 1.22 1.34 133 XMCapTrack 4685 1.12 0.55 1.32 134 XMBSHREFv2 4566 1.06 0.43 1.29 135 UNTRUSTED_Relay 4325 3.19 8.59 1.22 136 XMStockSpam_06 4269 1.29 1.52 1.20 137 TooManyTo_004 4028 1.03 0.74 1.14 138 TR_XM_SpammyWords2 3962 3.67 10.67 1.12 139 RCVD_IN_MSPIKE_BL 3852 2.23 5.35 1.09 140 TR_XM_MSPIKECOMBO 3827 2.22 5.35 1.08 141 TVD_SPACE_RATIO 3820 0.81 0.08 1.08 142 HTML_FONT_FACE_BAD 3598 1.01 0.99 1.01 143 DKIM_ADSP_CUSTOM_MED 3522 0.99 1.00 0.99 144 XMSexyCombo_01 3401 1.29 2.20 0.96 145 TR_MetaPhish_Combo_01 3324 1.13 1.67 0.94 146 SpammyFromTLD_01 3278 1.61 3.47 0.92 147 TooManyTo_005 3229 0.83 0.60 0.91 148 T_FILL_THIS_FORM_SHORT 3171 1.46 3.03 0.89 149 TR_XM_MaxUnsub 3155 2.42 6.61 0.89 150 XMBrknScrpt_02 3114 0.84 0.75 0.88 151 XMGenDplmaNmb 3100 1.02 1.42 0.87 152 RCVD_IN_RP_SAFE 3079 0.85 0.81 0.87 153 RCVD_IN_BL_SPAMCOP_NET 3069 3.07 9.13 0.87 154 T_TooManySym_03 3052 0.70 0.28 0.86 155 XMLngstWrd_00 3026 1.24 2.31 0.85 156 T_XMDrugObfuBody_00 2950 1.10 1.85 0.83 157 RELAYCOUNTRY_CA 2885 1.91 4.91 0.81 158 XM_OfRef6 2852 1.16 2.13 0.80 159 XMHTML_After_End 2826 0.89 1.14 0.80 160 XMLngstWrd_01 2780 1.18 2.28 0.78 161 RELAYCOUNTRY_GB 2743 0.97 1.49 0.77 162 XM_UB50 2742 1.51 3.55 0.77 163 RCVD_IN_RP_CERTIFIED 2730 0.73 0.62 0.77 164 XMBody_95 2654 0.59 0.17 0.75 165 HTTPS_HTTP_MISMATCH 2594 0.90 1.37 0.73 166 TR_MSPIKEBAYES00 2508 0.52 0.02 0.71 167 XMLngstWrd_02 2397 1.09 2.23 0.68 168 XM_ShortIntro_01 2397 0.65 0.57 0.68 169 XM_H_PHPMailer 2396 0.76 0.99 0.68 170 FROM_GOV_DKIM_AU 2374 0.53 0.15 0.67 171 T_OBFU_PDF_ATTACH 2326 0.52 0.17 0.66 172 XMBdyGiftCard01 2319 0.72 0.92 0.65 173 HTML_IMAGE_ONLY_20 2281 0.59 0.44 0.64 174 NML_ADSP_CUSTOM_MED 2264 0.68 0.80 0.64 175 XMNoVowels 2253 0.56 0.36 0.64 176 T_Symld_Words_02 2233 0.70 0.89 0.63 177 TM2_M_A_HREF_HREF 2229 0.85 1.47 0.63 178 TR_XM_PHPDW 2209 1.13 2.53 0.62 179 SHORT_HELO_AND_INLINE_IMAGE 2130 0.47 0.10 0.60 180 XM_B_COVIDMETA 2130 0.92 1.79 0.60 181 SHORT_URI_2 2107 0.61 0.65 0.59 182 RCVD_IN_SORBS_DUL 2107 0.51 0.29 0.59 183 XMSubMetaSxObfu_03 2090 0.65 0.80 0.59 184 RCVD_IN_MSPIKE_L3 2023 1.07 2.44 0.57 185 XMMoneyMeta_00 1998 0.62 0.76 0.56 186 TR_XM_FormFill2 1987 1.06 2.43 0.56 187 TR_XM_PHPForged 1981 1.07 2.45 0.56 188 XMSubMetaI_00 1968 0.75 1.29 0.55 189 XM_B_COPY_HTML 1963 0.57 0.61 0.55 190 XMLngstWrd_03 1959 0.98 2.14 0.55 191 XM_H_PHPOS 1955 1.05 2.42 0.55 192 TR_XM_SpammyWords3 1932 1.32 3.44 0.54 193 URI_TRY_3LD 1906 0.66 1.01 0.54 194 HTML_TAG_BALANCE_BODY 1876 0.75 1.36 0.53 195 FORGED_GMAIL_RCVD 1874 0.62 0.85 0.53 196 XMPhish30 1870 0.76 1.38 0.53 197 HTML_IMAGE_ONLY_32 1869 0.45 0.24 0.53 198 XM_ProductURIs 1802 0.61 0.87 0.51 199 XMHTMLBadTable_001 1779 0.61 0.91 0.50 200 XM_D_tchamptons_WL 1724 0.36 0.00 0.49 ----------------------------------------------------------------------