Email: 503189 Autolearn: 0 AvgScore: 2.74 AvgScanTime: 1.28 sec Spam: 147342 Autolearn: 0 AvgScore: 14.09 AvgScanTime: 1.42 sec Ham: 355847 Autolearn: 0 AvgScore: -1.96 AvgScanTime: 1.22 sec Time Spent Running SA: 179.01 hours Time Spent Processing Spam: 57.98 hours Time Spent Processing Ham: 121.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140202 89.25 95.15 86.81 2 DKIM_SIGNED 123461 74.48 83.79 70.63 3 XM_DK_Pass 119813 72.83 81.32 69.32 4 DKIM_VALID 119377 72.09 81.02 68.40 5 RELAYCOUNTRY_US 116719 78.52 79.22 78.24 6 XM_B_Unicode 115050 71.48 78.08 68.75 7 DCC_CHECK 101659 42.85 69.00 32.02 8 XMListUnsubscribeExists 99263 52.51 67.37 46.36 9 XM_B_SpammyWords 95696 51.76 64.95 46.30 10 DKIM_VALID_AU 86685 54.89 58.83 53.26 11 BAYES_50 64236 51.02 43.60 54.09 12 XM_B_Unicode3 61375 40.78 41.65 40.42 13 XM_DK_Undo_02 57685 15.78 39.15 6.10 14 XM_B_SpammyWords2 56185 26.04 38.13 21.04 15 LOC_TINY_FONT_1 50844 25.65 34.51 21.98 16 MIME_HTML_ONLY 50495 24.21 34.27 20.04 17 FVGT_m_MULTI_ODD 48337 26.13 32.81 23.37 18 BAYES_99 47390 13.03 32.16 5.11 19 TR_XM_DKIM_Undo 46518 12.59 31.57 4.73 20 HTML_FONT_LOW_CONTRAST 46339 27.99 31.45 26.56 21 DCC_CHECK_NEGATIVE 45600 57.11 30.95 67.94 22 DKIM_VALID_EF 42570 26.87 28.89 26.03 23 T_KAM_HTML_FONT_INVALID 39198 20.16 26.60 17.49 24 BAYES_999 37366 10.36 25.36 4.15 25 RCVD_IN_MSPIKE_H2 35078 20.95 23.81 19.76 26 XMSubLong 35006 21.42 23.76 20.46 27 T_TM2_M_HEADER_IN_MSG 34724 28.86 23.57 31.05 28 RELAYCOUNTRY_META 34169 9.28 23.19 3.52 29 TR_DCC_Bayes_99 32610 7.46 22.13 1.39 30 XM_Body_Dirty_Words 31970 13.94 21.70 10.73 31 RCVD_IN_MSPIKE_WL 29631 26.29 20.11 28.85 32 LOTS_OF_MONEY 22181 10.51 15.05 8.63 33 XM_Multi_Part_URI 22004 11.90 14.93 10.65 34 FSL_BULK_SIG 21771 6.50 14.78 3.07 35 BOTNET_IPINHOSTNAME 21501 7.45 14.59 4.49 36 XM_B_Unsub 21259 12.86 14.43 12.21 37 RCVD_IN_MSPIKE_H3 20168 15.56 13.69 16.34 38 XM_B_SpammyWords3 20168 6.67 13.69 3.77 39 UNPARSEABLE_RELAY 19335 9.01 13.12 7.31 40 UNTRUSTED_Relay 19181 4.70 13.02 1.26 41 TR_XM_UnparsRelay 18951 7.82 12.86 5.74 42 TR_XM_SpammyRelay 17662 4.53 11.99 1.44 43 TR_XM_SpammyWords4 17083 7.51 11.59 5.82 44 BOTNET 16795 4.41 11.40 1.51 45 TR_XM_SpammyWords2 16778 3.89 11.39 0.78 46 XMSexyCombo_05 15273 5.34 10.37 3.26 47 RCVD_IN_BL_SPAMCOP_NET 14544 3.29 9.87 0.56 48 MPART_ALT_DIFF 13251 6.59 8.99 5.60 49 XM_UncommonTLD01 13114 5.19 8.90 3.66 50 HTML_IMAGE_RATIO_02 12716 6.23 8.63 5.24 51 XM_Evil_Numbers_Gen 12246 7.89 8.31 7.71 52 RCVD_IN_MSPIKE_BL 11554 3.01 7.84 1.02 53 TR_XM_MSPIKECOMBO 11424 2.99 7.75 1.01 54 BAYES_80 11387 5.24 7.73 4.21 55 BAYES_60 11124 8.73 7.55 9.22 56 XM_SendGrid 11098 5.99 7.53 5.36 57 XM_H_Long_From01 10732 5.76 7.28 5.13 58 XM_B_Phish_Phrases 10312 4.15 7.00 2.97 59 XM_B_SpammyTLD 9784 3.33 6.64 1.96 60 LotsOfNums_01 9276 8.62 6.30 9.59 61 MIME_HTML_ONLY_MULTI 9167 4.62 6.22 3.96 62 HTML_MIME_NO_HTML_TAG 9057 3.49 6.15 2.39 63 XM_UB50 8975 2.34 6.09 0.79 64 RCVD_IN_MSPIKE_H4 8866 9.34 6.02 10.71 65 RELAYCOUNTRY_CA 8783 2.26 5.96 0.73 66 TM2_M_VERY_LONG_WORD 8417 3.00 5.71 1.87 67 TR_XM_MaxUnsub 8376 2.21 5.68 0.78 68 TR_XM_PhishingBody 8083 3.98 5.49 3.36 69 XMSubMetaSx_00 7948 3.97 5.39 3.38 70 TooManyTo_001 7796 9.21 5.29 10.84 71 XM_SPF_SoftFail 7712 3.59 5.23 2.92 72 TR_XM_DK_SendGrid 7182 3.85 4.87 3.43 73 T_REMOTE_IMAGE 7038 3.87 4.78 3.50 74 PDS_OTHER_BAD_TLD 6927 1.54 4.70 0.24 75 RCVD_IN_MSPIKE_L5 6478 1.36 4.40 0.10 76 XM_B_Investor 6426 2.26 4.36 1.39 77 BAYES_95 6386 3.09 4.33 2.57 78 XMNumbers 6352 3.90 4.31 3.74 79 TR_XM_SPAMCOP 6339 1.35 4.30 0.13 80 TR_XM_SpammyWords3 6291 1.57 4.27 0.45 81 HTML_IMAGE_RATIO_04 6232 5.23 4.23 5.64 82 XM_DIRTYINTL 6074 1.41 4.12 0.28 83 T_XMDrugObfuBody_14 6015 2.50 4.08 1.84 84 XMStrtUSub 5872 4.30 3.99 4.42 85 HTML_IMAGE_RATIO_06 5750 3.50 3.90 3.34 86 UPPERCASE_75_100 5623 1.58 3.82 0.66 87 MIME_HTML_MOSTLY 5490 2.71 3.73 2.29 88 RCVD_IN_VALIDITY_RPBL 5441 1.09 3.69 0.01 89 MIME_QP_LONG_LINE 5401 7.12 3.67 8.55 90 XM_GoogleGroups 5322 2.35 3.61 1.82 91 KHOP_HELO_FCRDNS 5305 2.66 3.60 2.27 92 XMLngstWrd_00 5200 1.82 3.53 1.11 93 SpammyFromTLD_01 5140 1.61 3.49 0.84 94 XMLngstWrd_01 5107 1.76 3.47 1.05 95 TR_XM_SpammyWords5 4970 2.02 3.37 1.46 96 XMLngstWrd_02 4912 1.65 3.33 0.96 97 URI_NOVOWEL 4860 2.74 3.30 2.50 98 XMLngstWrd_03 4771 1.56 3.24 0.87 99 XMLngstWrd_04 4678 1.49 3.17 0.79 100 HTML_TITLE_SUBJ_DIFF 4646 1.41 3.15 0.68 101 XM_OfRef6 4606 1.58 3.13 0.94 102 RCVD_IN_VALIDITY_SAFE 4558 4.11 3.09 4.53 103 XM_URI_RBL 4492 1.00 3.05 0.16 104 RCVD_IN_PSBL 4448 1.00 3.02 0.16 105 XM_B_Phish66 4427 2.14 3.00 1.79 106 SUBJ_ALL_CAPS 4376 1.93 2.97 1.50 107 T_XMDrugObfuBody_08 4367 1.84 2.96 1.37 108 TM2_M_URI_OPT_OUT 4359 4.57 2.96 5.24 109 TR_XM_MSPIKECOMBO2 4324 0.95 2.93 0.13 110 RCVD_IN_IADB_LISTED 4185 4.54 2.84 5.24 111 DKIM_INVALID 4084 2.39 2.77 2.23 112 SpammyFromTLD_02 4039 1.11 2.74 0.43 113 XM_B_COVIDMETA 4039 1.21 2.74 0.58 114 XMBody_17 4028 1.09 2.73 0.42 115 XM_DK_Undo_01 3969 2.17 2.69 1.95 116 XM_UB99 3885 0.78 2.64 0.01 117 RCVD_IN_VALIDITY_CERTIFIED 3705 3.61 2.51 4.06 118 T_FILL_THIS_FORM_SHORT 3681 1.37 2.50 0.91 119 T_TooManySym_01 3627 4.55 2.46 5.41 120 XMDiploma_00 3596 1.90 2.44 1.67 121 TR_Mismatch_TLD_01 3586 0.89 2.43 0.25 122 RCVD_IN_IADB_SPF 3478 4.06 2.36 4.76 123 XM_CamelCaseFrm001 3474 1.93 2.36 1.75 124 BOTNET_NORDNS 3407 0.69 2.31 0.02 125 URI_PHP_REDIR 3343 0.67 2.27 0.00 126 HTML_IMAGE_RATIO_08 3334 2.33 2.26 2.35 127 RELAYCOUNTRY_FR 3304 0.80 2.24 0.20 128 TR_XM_SB_Phish 3267 2.10 2.22 2.05 129 XM_B_SpammyWords4 3208 0.95 2.18 0.45 130 XM_UB999 3158 0.63 2.14 0.00 131 RCVD_IN_IADB_DK 3126 3.62 2.12 4.24 132 XMSubPhish11 3092 2.05 2.10 2.03 133 RCVD_IN_IADB_SENDERID 3026 3.70 2.05 4.39 134 RELAYCOUNTRY_NL 3010 0.70 2.04 0.15 135 T_HTML_TAG_BALANCE_CENTER 2924 0.68 1.98 0.14 136 XM_B_Unsub2 2903 1.55 1.97 1.38 137 RCVD_IN_MSPIKE_L3 2887 0.77 1.96 0.28 138 XMSexyCombo_01 2884 0.91 1.96 0.48 139 MAILING_LIST_MULTI 2828 2.26 1.92 2.40 140 BAYES_40 2795 4.32 1.90 5.32 141 ALL_TRUSTED 2776 14.25 1.88 19.37 142 XMHTML_After_End 2760 1.01 1.87 0.65 143 RCVD_IN_IADB_VOUCHED 2714 2.63 1.84 2.95 144 HTML_IMAGE_ONLY_08 2585 0.60 1.75 0.13 145 URIBL_DBL_SPAM 2583 0.52 1.75 0.01 146 USER_IN_DEF_DKIM_WL 2534 8.81 1.72 11.74 147 XM_UB60 2528 0.55 1.72 0.07 148 FROM_EXCESS_BASE64 2428 2.16 1.65 2.38 149 XMBrknScrpt_02 2387 0.93 1.62 0.65 150 T_XMDrugObfuBody_00 2383 0.99 1.62 0.73 151 TR_LOTS_OF_MONEY3 2358 0.65 1.60 0.26 152 URI_GOOG_STO_SPAMMY 2319 0.46 1.57 0.00 153 URI_HEX 2306 1.26 1.57 1.14 154 TR_XM_BayesRelay 2239 0.45 1.52 0.00 155 TR_XM_PHPDW 2225 0.69 1.51 0.35 156 XMStockSpam_06 2215 1.25 1.50 1.14 157 URIBL_BLACK 2212 0.48 1.50 0.06 158 XMSubNoVowel 2195 1.21 1.49 1.09 159 HTTPS_HTTP_MISMATCH 2189 0.96 1.49 0.74 160 URI_TRY_3LD 2169 0.93 1.47 0.71 161 MONEY_NOHTML 2150 0.48 1.46 0.07 162 XMBdyGiftCard01 2143 1.37 1.45 1.33 163 MIXED_CENTER_CASE 2131 0.43 1.45 0.00 164 TR_XM_PHPForged 2105 0.63 1.43 0.30 165 MIXED_HREF_CASE 2102 0.42 1.43 0.00 166 BODY_URI_ONLY 2098 0.43 1.42 0.02 167 MIXED_IMG_CASE 2089 0.42 1.42 0.00 168 MIXED_AREA_CASE 2087 0.42 1.42 0.00 169 MIXED_FONT_CASE 2083 0.41 1.41 0.00 170 DIET_1 2068 0.76 1.40 0.50 171 TR_XM_NoHeaderRelay 2065 0.54 1.40 0.18 172 TR_XM_FormFill2 2065 0.63 1.40 0.30 173 RCVD_IN_MSPIKE_L4 2059 0.86 1.40 0.63 174 XM_H_PHPOS 2052 0.62 1.39 0.29 175 BAYES_20 2024 3.67 1.37 4.63 176 RELAYCOUNTRY_AU 1968 0.63 1.34 0.34 177 XM_H_Undi_Recip 1965 0.53 1.33 0.20 178 TR_MetaPhish_Combo_01 1951 0.97 1.32 0.83 179 ADVANCE_FEE_5_NEW_MONEY 1935 0.39 1.31 0.00 180 TR_XM_FormFill 1888 0.38 1.28 0.01 181 RELAYCOUNTRY_CN 1881 0.42 1.28 0.07 182 DEAR_BENEFICIARY 1849 0.37 1.25 0.01 183 TR_Mismatch_TLD_02 1839 0.44 1.25 0.11 184 RELAYCOUNTRY_RU 1810 0.38 1.23 0.03 185 YOUR_DELIVERY_ADDRESS 1807 0.37 1.23 0.01 186 T_XMHurry_00 1800 1.88 1.22 2.15 187 DKIM_ADSP_CUSTOM_MED 1769 0.99 1.20 0.90 188 RELAYCOUNTRY_DE 1748 0.54 1.19 0.28 189 XMGenDplmaNmb 1745 1.17 1.18 1.17 190 RCVD_IN_IADB_OPTIN 1711 1.71 1.16 1.94 191 MIME_CHARSET_FARAWAY 1710 0.48 1.16 0.20 192 HTML_FONT_SIZE_LARGE 1700 0.40 1.15 0.09 193 XM_B_DNDMA 1698 0.64 1.15 0.43 194 RELAYCOUNTRY_SG 1697 0.36 1.15 0.04 195 XMPhish30 1684 1.01 1.14 0.96 196 TR_Symld_Words 1662 1.33 1.13 1.41 197 XM_UB80 1657 0.34 1.12 0.02 198 XM_B_SEO 1651 0.41 1.12 0.12 199 NML_ADSP_CUSTOM_MED 1623 0.72 1.10 0.57 200 TR_XM_COVIDMETA4 1616 0.47 1.10 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 308906 89.25 95.15 86.81 2 RELAYCOUNTRY_US 278398 78.52 79.22 78.24 3 DKIM_SIGNED 251323 74.48 83.79 70.63 4 XM_DK_Pass 246671 72.83 81.32 69.32 5 XM_B_Unicode 244648 71.48 78.08 68.75 6 DKIM_VALID 243390 72.09 81.02 68.40 7 DCC_CHECK_NEGATIVE 241760 57.11 30.95 67.94 8 BAYES_50 192478 51.02 43.60 54.09 9 DKIM_VALID_AU 189520 54.89 58.83 53.26 10 XMListUnsubscribeExists 164971 52.51 67.37 46.36 11 XM_B_SpammyWords 164771 51.76 64.95 46.30 12 XM_B_Unicode3 143819 40.78 41.65 40.42 13 DCC_CHECK 113953 42.85 69.00 32.02 14 T_TM2_M_HEADER_IN_MSG 110485 28.86 23.57 31.05 15 RCVD_IN_MSPIKE_WL 102663 26.29 20.11 28.85 16 HTML_FONT_LOW_CONTRAST 94503 27.99 31.45 26.56 17 DKIM_VALID_EF 92624 26.87 28.89 26.03 18 FVGT_m_MULTI_ODD 83156 26.13 32.81 23.37 19 LOC_TINY_FONT_1 78218 25.65 34.51 21.98 20 XM_B_SpammyWords2 74869 26.04 38.13 21.04 21 XMSubLong 72799 21.42 23.76 20.46 22 MIME_HTML_ONLY 71323 24.21 34.27 20.04 23 RCVD_IN_MSPIKE_H2 70333 20.95 23.81 19.76 24 ALL_TRUSTED 68922 14.25 1.88 19.37 25 T_KAM_HTML_FONT_INVALID 62235 20.16 26.60 17.49 26 RCVD_IN_MSPIKE_H3 58143 15.56 13.69 16.34 27 BAYES_00 43664 8.90 0.77 12.27 28 XM_B_Unsub 43441 12.86 14.43 12.21 29 USER_IN_DEF_DKIM_WL 41783 8.81 1.72 11.74 30 TooManyTo_001 38563 9.21 5.29 10.84 31 XM_Body_Dirty_Words 38175 13.94 21.70 10.73 32 RCVD_IN_MSPIKE_H4 38121 9.34 6.02 10.71 33 XM_Multi_Part_URI 37899 11.90 14.93 10.65 34 LotsOfNums_01 34116 8.62 6.30 9.59 35 BAYES_60 32824 8.73 7.55 9.22 36 LOTS_OF_MONEY 30713 10.51 15.05 8.63 37 MIME_QP_LONG_LINE 30416 7.12 3.67 8.55 38 XM_Evil_Numbers_Gen 27439 7.89 8.31 7.71 39 XM_DKIMWhitelistDomains 26821 5.34 0.03 7.54 40 UNPARSEABLE_RELAY 26007 9.01 13.12 7.31 41 IN_ZIMBRA_NJ_WHITELIST 24723 4.94 0.08 6.95 42 TR_XM_DK_Bayes 22829 4.65 0.38 6.42 43 TR_XM_DK_Bayes1 22288 4.54 0.37 6.26 44 XM_DK_Undo_02 21720 15.78 39.15 6.10 45 TR_XM_SpammyWords4 20712 7.51 11.59 5.82 46 TR_XM_UnparsRelay 20413 7.82 12.86 5.74 47 HTML_IMAGE_RATIO_04 20079 5.23 4.23 5.64 48 MPART_ALT_DIFF 19930 6.59 8.99 5.60 49 TR_XM_DK_Bayes2 19728 4.01 0.29 5.54 50 T_TooManySym_01 19248 4.55 2.46 5.41 51 XM_SendGrid 19057 5.99 7.53 5.36 52 BAYES_40 18923 4.32 1.90 5.32 53 RCVD_IN_IADB_LISTED 18659 4.54 2.84 5.24 54 HTML_IMAGE_RATIO_02 18639 6.23 8.63 5.24 55 TM2_M_URI_OPT_OUT 18633 4.57 2.96 5.24 56 XM_H_Long_From01 18239 5.76 7.28 5.13 57 BAYES_99 18191 13.03 32.16 5.11 58 XM_PDF 16977 3.64 0.93 4.77 59 RCVD_IN_IADB_SPF 16948 4.06 2.36 4.76 60 TR_XM_DKIM_Undo 16822 12.59 31.57 4.73 61 BAYES_20 16462 3.67 1.37 4.63 62 RCVD_IN_VALIDITY_SAFE 16114 4.11 3.09 4.53 63 BOTNET_IPINHOSTNAME 15966 7.45 14.59 4.49 64 XMStrtUSub 15746 4.30 3.99 4.42 65 RCVD_IN_IADB_SENDERID 15617 3.70 2.05 4.39 66 RCVD_IN_IADB_DK 15074 3.62 2.12 4.24 67 BAYES_80 14970 5.24 7.73 4.21 68 BAYES_999 14776 10.36 25.36 4.15 69 RCVD_IN_VALIDITY_CERTIFIED 14462 3.61 2.51 4.06 70 MIME_HTML_ONLY_MULTI 14087 4.62 6.22 3.96 71 XM_B_SpammyWords3 13398 6.67 13.69 3.77 72 XMNumbers 13294 3.90 4.31 3.74 73 XM_UncommonTLD01 13013 5.19 8.90 3.66 74 RELAYCOUNTRY_META 12512 9.28 23.19 3.52 75 T_REMOTE_IMAGE 12444 3.87 4.78 3.50 76 TR_XM_DK_SendGrid 12194 3.85 4.87 3.43 77 XMSubMetaSx_00 12018 3.97 5.39 3.38 78 TR_XM_PhishingBody 11952 3.98 5.49 3.36 79 HTML_IMAGE_RATIO_06 11876 3.50 3.90 3.34 80 XMSexyCombo_05 11593 5.34 10.37 3.26 81 FSL_BULK_SIG 10925 6.50 14.78 3.07 82 XM_H_Trusted_IP 10812 2.15 0.00 3.04 83 T_TooManySym_02 10713 2.31 0.60 3.01 84 XM_B_Phish_Phrases 10581 4.15 7.00 2.97 85 RCVD_IN_IADB_VOUCHED 10508 2.63 1.84 2.95 86 XM_SPF_SoftFail 10377 3.59 5.23 2.92 87 ANY_BOUNCE_MESSAGE 9586 2.11 0.71 2.69 88 BOUNCE_MESSAGE 9584 2.11 0.71 2.69 89 BAYES_05 9174 1.99 0.57 2.58 90 BAYES_95 9155 3.09 4.33 2.57 91 SHORT_URI_2 9086 1.93 0.44 2.55 92 TVD_RCVD_IP 8956 1.84 0.19 2.52 93 URI_NOVOWEL 8910 2.74 3.30 2.50 94 MAILING_LIST_MULTI 8543 2.26 1.92 2.40 95 HTML_MIME_NO_HTML_TAG 8496 3.49 6.15 2.39 96 FROM_EXCESS_BASE64 8464 2.16 1.65 2.38 97 HTML_IMAGE_RATIO_08 8368 2.33 2.26 2.35 98 MIME_HTML_MOSTLY 8136 2.71 3.73 2.29 99 KHOP_HELO_FCRDNS 8075 2.66 3.60 2.27 100 DKIM_INVALID 7933 2.39 2.77 2.23 101 T_XMHurry_00 7658 1.88 1.22 2.15 102 TooManyTo_002 7420 1.66 0.64 2.09 103 TR_XM_SB_Phish 7312 2.10 2.22 2.05 104 XMSubPhish11 7211 2.05 2.10 2.03 105 XM_B_SpammyTLD 6963 3.33 6.64 1.96 106 XM_DK_Undo_01 6955 2.17 2.69 1.95 107 RCVD_IN_IADB_OPTIN 6905 1.71 1.16 1.94 108 INVALID_MSGID 6690 1.38 0.18 1.88 109 TM2_M_VERY_LONG_WORD 6671 3.00 5.71 1.87 110 T_XMDrugObfuBody_14 6559 2.50 4.08 1.84 111 XM_GoogleGroups 6492 2.35 3.61 1.82 112 RCVD_IN_MSPIKE_H5 6399 1.39 0.41 1.80 113 XM_B_Phish66 6355 2.14 3.00 1.79 114 HELO_NODOT 6317 1.40 0.49 1.78 115 HELO_NO_DOMAIN 6314 1.40 0.48 1.77 116 XM_CamelCaseFrm001 6238 1.93 2.36 1.75 117 IN_HORDE_ADDRESS_BOOK 6235 1.27 0.10 1.75 118 MSGID_NOFQDN1 6230 1.26 0.07 1.75 119 XMDiploma_00 5943 1.90 2.44 1.67 120 TO_MALFORMED 5785 1.15 0.01 1.63 121 BOTNET 5385 4.41 11.40 1.51 122 SUBJ_ALL_CAPS 5334 1.93 2.97 1.50 123 TR_XM_SpammyWords5 5182 2.02 3.37 1.46 124 TR_XM_SpammyRelay 5124 4.53 11.99 1.44 125 TR_Symld_Words 5018 1.33 1.13 1.41 126 TR_DCC_Bayes_99 4945 7.46 22.13 1.39 127 TooManyTo_003 4942 1.14 0.53 1.39 128 XM_B_Investor 4940 2.26 4.36 1.39 129 XM_B_Unsub2 4913 1.55 1.97 1.38 130 XM_H_Long_From02 4909 1.29 1.08 1.38 131 T_XMDrugObfuBody_08 4883 1.84 2.96 1.37 132 XMGappySubj_01 4859 1.02 0.18 1.37 133 XMBdyGiftCard01 4745 1.37 1.45 1.33 134 UNTRUSTED_Relay 4470 4.70 13.02 1.26 135 XMGenDplmaNmb 4155 1.17 1.18 1.17 136 XMStockSpam_06 4074 1.25 1.50 1.14 137 XMCapTrack 4071 0.91 0.35 1.14 138 URI_HEX 4039 1.26 1.57 1.14 139 XMBSHREFv2 4009 0.90 0.34 1.13 140 XMLngstWrd_00 3941 1.82 3.53 1.11 141 XMSubNoVowel 3870 1.21 1.49 1.09 142 XM_shorewaves_Whitelist 3780 0.75 0.00 1.06 143 HTML_FONT_FACE_BAD 3748 0.97 0.75 1.05 144 XMLngstWrd_01 3733 1.76 3.47 1.05 145 XMHTMLBadTable_001 3679 0.97 0.81 1.03 146 TVD_SPACE_RATIO 3643 0.75 0.08 1.02 147 RCVD_IN_MSPIKE_BL 3613 3.01 7.84 1.02 148 TR_XM_MSPIKECOMBO 3611 2.99 7.75 1.01 149 TooManyTo_004 3515 0.83 0.46 0.99 150 XM_ProductURIs 3465 1.00 1.05 0.97 151 XMLngstWrd_02 3407 1.65 3.33 0.96 152 XMPhish30 3401 1.01 1.14 0.96 153 XM_OfRef6 3342 1.58 3.13 0.94 154 T_FILL_THIS_FORM_SHORT 3228 1.37 2.50 0.91 155 DKIM_ADSP_CUSTOM_MED 3210 0.99 1.20 0.90 156 RCVD_IN_RP_SAFE 3108 0.82 0.67 0.87 157 XMLngstWrd_03 3092 1.56 3.24 0.87 158 SpammyFromTLD_01 2981 1.61 3.49 0.84 159 TR_MetaPhish_Combo_01 2942 0.97 1.32 0.83 160 XMBody_95 2932 0.61 0.11 0.82 161 TooManyTo_005 2846 0.68 0.40 0.80 162 XM_UB50 2820 2.34 6.09 0.79 163 XMLngstWrd_04 2811 1.49 3.17 0.79 164 TR_XM_SpammyWords2 2792 3.89 11.39 0.78 165 RCVD_IN_RP_CERTIFIED 2788 0.71 0.54 0.78 166 HTML_TAG_BALANCE_BODY 2770 0.81 0.90 0.78 167 TR_XM_MaxUnsub 2759 2.21 5.68 0.78 168 HTTPS_HTTP_MISMATCH 2651 0.96 1.49 0.74 169 T_XMDrugObfuBody_00 2598 0.99 1.62 0.73 170 RELAYCOUNTRY_CA 2589 2.26 5.96 0.73 171 RELAYCOUNTRY_GB 2579 0.80 0.98 0.72 172 URI_TRY_3LD 2519 0.93 1.47 0.71 173 T_TooManySym_03 2434 0.56 0.25 0.68 174 XM_RXBody 2432 0.69 0.69 0.68 175 HTML_TITLE_SUBJ_DIFF 2427 1.41 3.15 0.68 176 FROM_GOV_DKIM_AU 2339 0.53 0.22 0.66 177 UPPERCASE_75_100 2335 1.58 3.82 0.66 178 XM_ShortIntro_01 2301 0.64 0.62 0.65 179 XMHTML_After_End 2299 1.01 1.87 0.65 180 XMBrknScrpt_02 2298 0.93 1.62 0.65 181 HTML_IMAGE_ONLY_20 2275 0.58 0.44 0.64 182 RCVD_IN_MSPIKE_L4 2259 0.86 1.40 0.63 183 XM_B_COPY_HTML 2174 0.62 0.64 0.61 184 XM_B_COVIDMETA 2072 1.21 2.74 0.58 185 T_OBFU_PDF_ATTACH 2067 0.46 0.15 0.58 186 MPART_ALT_DIFF_COUNT 2055 0.67 0.88 0.58 187 NML_ADSP_CUSTOM_MED 2016 0.72 1.10 0.57 188 RCVD_IN_BL_SPAMCOP_NET 1999 3.29 9.87 0.56 189 SHORTENED_URL_HREF 1925 0.42 0.13 0.54 190 SHORT_HELO_AND_INLINE_IMAGE 1867 0.39 0.08 0.52 191 XMSlimDrugH 1843 0.63 0.90 0.52 192 XM_H_PHPMailer 1842 0.56 0.66 0.52 193 T_Symld_Words_02 1841 0.58 0.72 0.52 194 RCVD_IN_SORBS_DUL 1835 0.42 0.19 0.52 195 FORGED_GMAIL_RCVD 1786 0.57 0.73 0.50 196 DIET_1 1762 0.76 1.40 0.50 197 XMMoneyMeta_00 1728 0.54 0.67 0.49 198 XMSexyCombo_01 1713 0.91 1.96 0.48 199 XMNoVowels 1708 0.43 0.29 0.48 200 TR_MSPIKEBAYES00 1611 0.33 0.02 0.45 ----------------------------------------------------------------------