Email: 458125 Autolearn: 0 AvgScore: 3.78 AvgScanTime: 1.30 sec Spam: 152332 Autolearn: 0 AvgScore: 14.42 AvgScanTime: 1.44 sec Ham: 305793 Autolearn: 0 AvgScore: -1.52 AvgScanTime: 1.23 sec Time Spent Running SA: 165.31 hours Time Spent Processing Spam: 61.11 hours Time Spent Processing Ham: 104.20 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143672 88.23 94.32 85.19 2 DKIM_SIGNED 129302 75.94 84.88 71.49 3 XM_DK_Pass 126477 73.67 83.03 69.02 4 DKIM_VALID 125208 72.77 82.19 68.08 5 RELAYCOUNTRY_US 124352 80.91 81.63 80.56 6 XM_B_Unicode 119490 71.83 78.44 68.53 7 DCC_CHECK 109402 45.38 71.82 32.21 8 XM_B_SpammyWords 100453 50.32 65.94 42.53 9 XMListUnsubscribeExists 99069 52.57 65.03 46.37 10 DKIM_VALID_AU 94047 55.24 61.74 52.01 11 RCVD_IN_MSPIKE_H2 71039 39.25 46.63 35.57 12 XM_B_Unicode3 68527 42.68 44.99 41.53 13 BAYES_50 66821 50.38 43.87 53.62 14 XM_DK_Undo_02 60479 17.72 39.70 6.77 15 XM_B_SpammyWords2 57343 24.64 37.64 18.16 16 LOC_TINY_FONT_1 53415 26.03 35.06 21.53 17 MIME_HTML_ONLY 51939 25.19 34.10 20.75 18 HTML_FONT_LOW_CONTRAST 49519 27.70 32.51 25.30 19 BAYES_99 48317 14.64 31.72 6.13 20 TR_XM_DKIM_Undo 48209 13.43 31.65 4.35 21 FVGT_m_MULTI_ODD 47877 26.13 31.43 23.49 22 DKIM_VALID_EF 44596 27.33 29.28 26.36 23 DCC_CHECK_NEGATIVE 42878 54.57 28.15 67.73 24 T_KAM_HTML_FONT_INVALID 42762 22.15 28.07 19.20 25 BAYES_999 38522 11.80 25.29 5.08 26 T_TM2_M_HEADER_IN_MSG 35808 27.55 23.51 29.56 27 XM_Body_Dirty_Words 35575 15.35 23.35 11.36 28 TR_DCC_Bayes_99 33846 8.48 22.22 1.63 29 XMSubLong 32630 21.99 21.42 22.28 30 RELAYCOUNTRY_META 31698 9.16 20.81 3.36 31 XM_Multi_Part_URI 27255 13.74 17.89 11.67 32 XM_B_Unsub 24431 12.14 16.04 10.20 33 TR_XM_BayesUnsub 23878 9.95 15.67 7.09 34 BOTNET_IPINHOSTNAME 23324 8.12 15.31 4.53 35 LOTS_OF_MONEY 22721 10.28 14.92 7.97 36 FSL_BULK_SIG 22553 7.70 14.81 4.16 37 UNPARSEABLE_RELAY 21406 9.71 14.05 7.54 38 TR_XM_UnparsRelay 21064 8.50 13.83 5.85 39 TR_XM_SpammyWords4 19781 7.39 12.99 4.60 40 XM_B_SpammyWords3 18384 7.01 12.07 4.49 41 BOTNET 18342 4.93 12.04 1.39 42 TR_XM_SpammyRelay 17979 4.80 11.80 1.31 43 XMSexyCombo_05 17349 6.12 11.39 3.50 44 TR_XM_SpammyWords2 15772 4.00 10.35 0.83 45 HTML_IMAGE_RATIO_02 15658 7.38 10.28 5.94 46 UNTRUSTED_Relay 15293 4.12 10.04 1.17 47 MPART_ALT_DIFF 13457 6.75 8.83 5.72 48 RCVD_IN_BL_SPAMCOP_NET 13398 3.38 8.80 0.68 49 XM_UncommonTLD01 13252 5.34 8.70 3.66 50 XM_Evil_Numbers_Gen 12830 7.90 8.42 7.64 51 BAYES_80 12407 6.08 8.14 5.05 52 LotsOfNums_01 11753 8.43 7.72 8.78 53 BAYES_60 11548 9.07 7.58 9.81 54 RCVD_IN_MSPIKE_WL 11236 9.40 7.38 10.41 55 TR_XM_PhishingBody 10824 4.42 7.11 3.08 56 RCVD_IN_MSPIKE_H3 10442 8.38 6.85 9.14 57 XM_SendGrid 10416 5.56 6.84 4.93 58 RELAYCOUNTRY_CA 10319 2.82 6.77 0.86 59 XMSubMetaSx_00 9786 4.39 6.42 3.37 60 XM_H_Long_From01 9414 5.43 6.18 5.06 61 TR_XM_SPAMCOP 9281 2.23 6.09 0.31 62 XM_B_Phish_Phrases 8919 3.83 5.85 2.82 63 KHOP_HELO_FCRDNS 8803 3.13 5.78 1.82 64 HTML_MIME_NO_HTML_TAG 8258 3.12 5.42 1.97 65 XM_UB50 8219 2.31 5.40 0.77 66 XM_B_Investor 8106 2.73 5.32 1.44 67 XM_DIRTYINTL 8036 1.98 5.28 0.34 68 MIME_HTML_MOSTLY 7938 3.39 5.21 2.48 69 XM_B_SpammyTLD 7850 3.57 5.15 2.78 70 T_XMDrugObfuBody_14 7663 3.04 5.03 2.05 71 T_REMOTE_IMAGE 7324 4.26 4.81 3.99 72 BAYES_95 7315 3.28 4.80 2.52 73 SpammyFromTLD_01 7239 2.05 4.75 0.70 74 TR_XM_SpammyWords5 7174 2.66 4.71 1.64 75 XMStrtUSub 7138 4.54 4.69 4.47 76 MIME_HTML_ONLY_MULTI 7029 4.22 4.61 4.02 77 TooManyTo_001 6919 6.91 4.54 8.08 78 HTML_IMAGE_RATIO_04 6868 5.67 4.51 6.25 79 XM_OfRef6 6720 2.27 4.41 1.20 80 XM_SPF_SoftFail 6698 2.99 4.40 2.29 81 TR_XM_DK_SendGrid 6486 3.50 4.26 3.12 82 TM2_M_VERY_LONG_WORD 6417 2.25 4.21 1.27 83 XM_B_Phish66 6248 2.59 4.10 1.84 84 MIME_QP_LONG_LINE 5612 4.82 3.68 5.38 85 RCVD_IN_VALIDITY_RPBL 5595 1.24 3.67 0.03 86 RCVD_IN_VALIDITY_SAFE 5353 4.30 3.51 4.68 87 XMNumbers 5345 4.32 3.51 4.72 88 SUBJ_ALL_CAPS 5052 2.47 3.32 2.04 89 URIBL_DBL_SPAM 5004 1.10 3.28 0.01 90 RCVD_IN_PSBL 4978 1.20 3.27 0.17 91 XMDiploma_00 4836 2.69 3.17 2.45 92 T_XMDrugObfuBody_08 4798 1.93 3.15 1.33 93 T_FILL_THIS_FORM_SHORT 4731 1.60 3.11 0.85 94 RCVD_IN_VALIDITY_CERTIFIED 4562 3.70 2.99 4.06 95 HTML_IMAGE_RATIO_06 4529 3.24 2.97 3.37 96 URI_NOVOWEL 4494 2.90 2.95 2.88 97 TR_Mismatch_TLD_01 4384 1.13 2.88 0.26 98 XM_B_Unsub2 4191 1.68 2.75 1.15 99 XM_H_Undi_Recip 4139 1.02 2.72 0.17 100 TM2_M_URI_OPT_OUT 4130 3.06 2.71 3.23 101 DKIM_INVALID 4094 3.17 2.69 3.41 102 PDS_OTHER_BAD_TLD 4045 1.00 2.66 0.17 103 XM_DK_Undo_01 4005 1.78 2.63 1.36 104 HTML_IMAGE_RATIO_08 3889 2.32 2.55 2.21 105 RCVD_IN_IADB_LISTED 3875 4.87 2.54 6.03 106 XM_CamelCaseFrm001 3791 1.98 2.49 1.73 107 XMBody_17 3740 1.03 2.46 0.32 108 XM_B_COVIDMETA 3734 1.22 2.45 0.61 109 USER_IN_DEF_DKIM_WL 3559 9.06 2.34 12.41 110 RCVD_IN_IADB_SPF 3550 4.29 2.33 5.26 111 FROM_EXCESS_BASE64 3490 2.56 2.29 2.69 112 MONEY_NOHTML 3435 0.81 2.25 0.08 113 T_TooManySym_01 3406 5.72 2.24 7.45 114 RCVD_IN_IADB_DK 3401 3.76 2.23 4.53 115 RCVD_IN_IADB_SENDERID 3349 3.87 2.20 4.70 116 TR_XM_Undi_Recip11 3155 0.71 2.07 0.04 117 TR_XM_SB_Phish 3111 2.14 2.04 2.19 118 XMLngstWrd_00 3051 0.98 2.00 0.47 119 XM_B_SpammyWords4 3016 1.27 1.98 0.92 120 XMSubPhish11 3006 2.10 1.97 2.17 121 XMLngstWrd_01 2978 0.92 1.95 0.40 122 RELAYCOUNTRY_IN 2922 0.69 1.92 0.08 123 XMStockSpam_06 2898 1.45 1.90 1.22 124 T_XMDrugObfuBody_00 2895 1.16 1.90 0.78 125 XMBdyGiftCard01 2869 1.47 1.88 1.27 126 XMLngstWrd_02 2867 0.82 1.88 0.29 127 TR_XM_COVIDMETA1 2855 0.84 1.87 0.33 128 URI_PHP_REDIR 2816 0.62 1.85 0.00 129 XM_UB99 2804 0.61 1.84 0.00 130 TR_XM_Undi_Recip5 2748 0.60 1.80 0.00 131 XM_GoogleGroups 2710 1.38 1.78 1.19 132 XMSexyCombo_01 2681 0.86 1.76 0.42 133 HOSTED_IMG_DIRECT_MX 2681 0.59 1.76 0.00 134 BOTNET_NORDNS 2663 0.59 1.75 0.01 135 MAILING_LIST_MULTI 2651 2.29 1.74 2.57 136 ALL_TRUSTED 2556 12.01 1.68 17.15 137 RELAYCOUNTRY_RU 2539 0.57 1.67 0.02 138 T_XMHurry_00 2537 0.82 1.67 0.40 139 BAYES_40 2458 3.84 1.61 4.95 140 SpammyFromTLD_02 2438 0.81 1.60 0.42 141 UNDISC_MONEY 2392 0.52 1.57 0.00 142 XMGenDplmaNmb 2385 1.24 1.57 1.07 143 URI_HEX 2378 1.38 1.56 1.29 144 TR_XM_Undi_RecipCombo2 2350 0.51 1.54 0.00 145 TR_XM_NoHeaderRelay 2272 0.58 1.49 0.12 146 DIET_1 2256 1.18 1.48 1.04 147 XM_H_PHPMailer 2256 0.94 1.48 0.66 148 RELAYCOUNTRY_AU 2232 0.68 1.47 0.28 149 XMLngstWrd_03 2220 0.63 1.46 0.22 150 HTTPS_HTTP_MISMATCH 2195 0.92 1.44 0.65 151 HTML_IMAGE_ONLY_08 2194 0.55 1.44 0.11 152 TR_LOTS_OF_MONEY3 2192 0.59 1.44 0.17 153 HTML_TAG_BALANCE_CENTER 2173 0.56 1.43 0.13 154 RELAYCOUNTRY_DE 2160 0.65 1.42 0.26 155 TR_XM_PHPDW 2156 0.76 1.42 0.43 156 FILL_THIS_FORM 2151 0.74 1.41 0.40 157 HTML_TITLE_SUBJ_DIFF 2106 0.50 1.38 0.05 158 XM_URI_RBL 2099 0.52 1.38 0.10 159 XM_H_Long_From02 2094 1.41 1.37 1.43 160 XM_Body_Dirty_Words_01 2083 0.54 1.37 0.13 161 TR_XM_PHPForged 2058 0.71 1.35 0.38 162 XM_OfRef7 2057 0.54 1.35 0.13 163 T_MONEY_PERCENT 2056 0.54 1.35 0.14 164 TR_LOTS_OF_MONEY2 2056 0.54 1.35 0.14 165 TR_XM_FormFill2 2036 0.71 1.34 0.39 166 XM_H_PHPOS 2024 0.69 1.33 0.37 167 XM_UB999 2018 0.44 1.32 0.00 168 DATE_IN_PAST_03_06 2013 0.76 1.32 0.48 169 HTML_FONT_FACE_BAD 1994 1.70 1.31 1.89 170 MONEY_FORM 1994 0.44 1.31 0.01 171 XMLngstWrd_04 1981 0.54 1.30 0.16 172 FILL_THIS_FORM_LONG 1979 0.52 1.30 0.13 173 UPPERCASE_75_100 1930 0.44 1.27 0.02 174 XMBrknScrpt_02 1917 0.76 1.26 0.51 175 THIS_AD 1897 0.53 1.25 0.17 176 MIXED_CENTER_CASE 1873 0.41 1.23 0.00 177 MIXED_HREF_CASE 1851 0.41 1.22 0.00 178 BODY_URI_ONLY 1838 0.41 1.21 0.02 179 MIXED_IMG_CASE 1834 0.40 1.20 0.00 180 MIXED_AREA_CASE 1831 0.40 1.20 0.00 181 XM_B_SEO 1827 1.14 1.20 1.10 182 XMPhish30 1824 0.81 1.20 0.62 183 XMHTML_After_End 1819 0.83 1.19 0.65 184 URIBL_BLACK 1798 0.44 1.18 0.08 185 TR_Symld_Words 1791 1.41 1.18 1.53 186 MIXED_FONT_CASE 1776 0.39 1.17 0.00 187 HK_RANDOM_REPLYTO 1763 0.45 1.16 0.10 188 HTML_TAG_BALANCE_BODY 1743 0.80 1.14 0.63 189 TR_XM_FormFill 1712 0.38 1.12 0.01 190 TR_XM_SEO4 1702 0.44 1.12 0.10 191 XM_UB60 1682 0.41 1.10 0.06 192 XMPhish14 1677 0.62 1.10 0.39 193 URI_TRY_3LD 1656 0.72 1.09 0.54 194 XM_ProductURIs 1622 0.75 1.06 0.60 195 XM_B_DynamicLink 1612 0.37 1.06 0.03 196 XMReplyNow 1580 0.50 1.04 0.24 197 URI_GOOG_STO_SPAMMY 1574 0.34 1.03 0.00 198 MPART_ALT_DIFF_COUNT 1571 0.73 1.03 0.58 199 BAYES_20 1549 2.74 1.02 3.61 200 TR_Caps_n_Bayes_99 1548 0.56 1.02 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 260520 88.23 94.32 85.19 2 RELAYCOUNTRY_US 246338 80.91 81.63 80.56 3 DKIM_SIGNED 218602 75.94 84.88 71.49 4 XM_DK_Pass 211045 73.67 83.03 69.02 5 XM_B_Unicode 209560 71.83 78.44 68.53 6 DKIM_VALID 208182 72.77 82.19 68.08 7 DCC_CHECK_NEGATIVE 207128 54.57 28.15 67.73 8 BAYES_50 163973 50.38 43.87 53.62 9 DKIM_VALID_AU 159029 55.24 61.74 52.01 10 XMListUnsubscribeExists 141789 52.57 65.03 46.37 11 XM_B_SpammyWords 130061 50.32 65.94 42.53 12 XM_B_Unicode3 126999 42.68 44.99 41.53 13 RCVD_IN_MSPIKE_H2 108784 39.25 46.63 35.57 14 DCC_CHECK 98508 45.38 71.82 32.21 15 T_TM2_M_HEADER_IN_MSG 90389 27.55 23.51 29.56 16 DKIM_VALID_EF 80605 27.33 29.28 26.36 17 HTML_FONT_LOW_CONTRAST 77375 27.70 32.51 25.30 18 FVGT_m_MULTI_ODD 71843 26.13 31.43 23.49 19 XMSubLong 68131 21.99 21.42 22.28 20 LOC_TINY_FONT_1 65828 26.03 35.06 21.53 21 MIME_HTML_ONLY 63462 25.19 34.10 20.75 22 T_KAM_HTML_FONT_INVALID 58727 22.15 28.07 19.20 23 XM_B_SpammyWords2 55535 24.64 37.64 18.16 24 ALL_TRUSTED 52447 12.01 1.68 17.15 25 USER_IN_DEF_DKIM_WL 37951 9.06 2.34 12.41 26 BAYES_00 36243 8.13 0.66 11.85 27 XM_Multi_Part_URI 35701 13.74 17.89 11.67 28 XM_Body_Dirty_Words 34728 15.35 23.35 11.36 29 RCVD_IN_MSPIKE_WL 31842 9.40 7.38 10.41 30 XM_B_Unsub 31187 12.14 16.04 10.20 31 BAYES_60 30006 9.07 7.58 9.81 32 RCVD_IN_MSPIKE_H3 27959 8.38 6.85 9.14 33 XM_DKIMWhitelistDomains 27135 5.94 0.04 8.87 34 LotsOfNums_01 26856 8.43 7.72 8.78 35 TooManyTo_001 24720 6.91 4.54 8.08 36 LOTS_OF_MONEY 24363 10.28 14.92 7.97 37 XM_Evil_Numbers_Gen 23365 7.90 8.42 7.64 38 UNPARSEABLE_RELAY 23068 9.71 14.05 7.54 39 T_TooManySym_01 22776 5.72 2.24 7.45 40 IN_ZIMBRA_NJ_WHITELIST 21727 4.79 0.13 7.11 41 TR_XM_BayesUnsub 21684 9.95 15.67 7.09 42 XM_DK_Undo_02 20695 17.72 39.70 6.77 43 TR_XM_DK_Bayes 19614 4.44 0.48 6.41 44 TR_XM_DK_Bayes1 19278 4.37 0.47 6.30 45 HTML_IMAGE_RATIO_04 19100 5.67 4.51 6.25 46 BAYES_99 18736 14.64 31.72 6.13 47 RCVD_IN_IADB_LISTED 18432 4.87 2.54 6.03 48 HTML_IMAGE_RATIO_02 18160 7.38 10.28 5.94 49 TR_XM_UnparsRelay 17878 8.50 13.83 5.85 50 MPART_ALT_DIFF 17486 6.75 8.83 5.72 51 TR_XM_DK_Bayes2 16967 3.83 0.39 5.55 52 MIME_QP_LONG_LINE 16460 4.82 3.68 5.38 53 RCVD_IN_IADB_SPF 16091 4.29 2.33 5.26 54 BAYES_999 15532 11.80 25.29 5.08 55 XM_H_Long_From01 15458 5.43 6.18 5.06 56 BAYES_80 15452 6.08 8.14 5.05 57 XM_H_Trusted_IP 15361 3.35 0.00 5.02 58 BAYES_40 15127 3.84 1.61 4.95 59 XM_SendGrid 15062 5.56 6.84 4.93 60 XM_PDF 14627 3.44 0.75 4.78 61 XMNumbers 14442 4.32 3.51 4.72 62 RCVD_IN_IADB_SENDERID 14367 3.87 2.20 4.70 63 RCVD_IN_VALIDITY_SAFE 14326 4.30 3.51 4.68 64 TR_XM_SpammyWords4 14055 7.39 12.99 4.60 65 BOTNET_IPINHOSTNAME 13863 8.12 15.31 4.53 66 RCVD_IN_IADB_DK 13842 3.76 2.23 4.53 67 XM_B_SpammyWords3 13721 7.01 12.07 4.49 68 XMStrtUSub 13657 4.54 4.69 4.47 69 T_TooManySym_02 13531 3.16 0.62 4.42 70 TR_XM_DKIM_Undo 13315 13.43 31.65 4.35 71 FSL_BULK_SIG 12726 7.70 14.81 4.16 72 RCVD_IN_VALIDITY_CERTIFIED 12408 3.70 2.99 4.06 73 MIME_HTML_ONLY_MULTI 12292 4.22 4.61 4.02 74 RCVD_IN_IADB_VOUCHED 12292 3.00 0.95 4.02 75 T_REMOTE_IMAGE 12200 4.26 4.81 3.99 76 XM_UncommonTLD01 11199 5.34 8.70 3.66 77 BAYES_20 11026 2.74 1.02 3.61 78 XMSexyCombo_05 10704 6.12 11.39 3.50 79 DKIM_INVALID 10420 3.17 2.69 3.41 80 XMSubMetaSx_00 10303 4.39 6.42 3.37 81 HTML_IMAGE_RATIO_06 10294 3.24 2.97 3.37 82 RELAYCOUNTRY_META 10266 9.16 20.81 3.36 83 TM2_M_URI_OPT_OUT 9870 3.06 2.71 3.23 84 TR_XM_DK_SendGrid 9548 3.50 4.26 3.12 85 TR_XM_PhishingBody 9404 4.42 7.11 3.08 86 URI_NOVOWEL 8805 2.90 2.95 2.88 87 XM_B_Phish_Phrases 8625 3.83 5.85 2.82 88 XM_B_SpammyTLD 8506 3.57 5.15 2.78 89 FROM_EXCESS_BASE64 8227 2.56 2.29 2.69 90 ANY_BOUNCE_MESSAGE 8174 2.10 0.95 2.67 91 BOUNCE_MESSAGE 8166 2.10 0.95 2.67 92 RCVD_IN_IADB_OPTIN 8037 1.93 0.52 2.63 93 MAILING_LIST_MULTI 7849 2.29 1.74 2.57 94 BAYES_95 7703 3.28 4.80 2.52 95 MIME_HTML_MOSTLY 7591 3.39 5.21 2.48 96 BAYES_05 7525 1.84 0.60 2.46 97 XMDiploma_00 7481 2.69 3.17 2.45 98 XM_SPF_SoftFail 7011 2.99 4.40 2.29 99 INVALID_MSGID 6773 1.53 0.14 2.21 100 HTML_IMAGE_RATIO_08 6752 2.32 2.55 2.21 101 TR_XM_SB_Phish 6701 2.14 2.04 2.19 102 TVD_RCVD_IP 6696 1.52 0.16 2.19 103 XMSubPhish11 6623 2.10 1.97 2.17 104 TooManyTo_002 6512 1.56 0.42 2.13 105 T_XMDrugObfuBody_14 6256 3.04 5.03 2.05 106 SUBJ_ALL_CAPS 6253 2.47 3.32 2.04 107 HTML_MIME_NO_HTML_TAG 6033 3.12 5.42 1.97 108 TO_MALFORMED 5786 1.27 0.02 1.89 109 HTML_FONT_FACE_BAD 5773 1.70 1.31 1.89 110 IN_HORDE_ADDRESS_BOOK 5702 1.29 0.15 1.86 111 XM_B_Phish66 5626 2.59 4.10 1.84 112 KHOP_HELO_FCRDNS 5557 3.13 5.78 1.82 113 XM_CamelCaseFrm001 5299 1.98 2.49 1.73 114 T_TooManySym_03 5296 1.25 0.28 1.73 115 TR_XM_SpammyWords5 5010 2.66 4.71 1.64 116 TR_DCC_Bayes_99 4996 8.48 22.22 1.63 117 HELO_NODOT 4894 1.19 0.37 1.60 118 HELO_NO_DOMAIN 4893 1.19 0.37 1.60 119 TR_Symld_Words 4687 1.41 1.18 1.53 120 XMSubNoVowel 4681 1.31 0.88 1.53 121 XMGappySubj_01 4456 1.03 0.16 1.46 122 XM_B_Investor 4400 2.73 5.32 1.44 123 XM_H_Long_From02 4364 1.41 1.37 1.43 124 TooManyTo_003 4320 1.05 0.33 1.41 125 BOTNET 4246 4.93 12.04 1.39 126 XM_DK_Undo_01 4159 1.78 2.63 1.36 127 T_XMDrugObfuBody_08 4055 1.93 3.15 1.33 128 TR_XM_SpammyRelay 4010 4.80 11.80 1.31 129 URI_HEX 3957 1.38 1.56 1.29 130 TM2_M_VERY_LONG_WORD 3895 2.25 4.21 1.27 131 XMBdyGiftCard01 3870 1.47 1.88 1.27 132 XMStockSpam_06 3739 1.45 1.90 1.22 133 RCVD_IN_MSPIKE_H4 3693 0.97 0.50 1.21 134 XM_OfRef6 3658 2.27 4.41 1.20 135 XM_GoogleGroups 3633 1.38 1.78 1.19 136 UNTRUSTED_Relay 3566 4.12 10.04 1.17 137 XMBSHREFv2 3563 0.85 0.20 1.17 138 XM_B_Unsub2 3526 1.68 2.75 1.15 139 XM_B_SEO 3378 1.14 1.20 1.10 140 XMCapTrack 3332 0.85 0.36 1.09 141 TVD_SPACE_RATIO 3311 0.85 0.37 1.08 142 XMGenDplmaNmb 3279 1.24 1.57 1.07 143 DIET_1 3170 1.18 1.48 1.04 144 TooManyTo_004 2964 0.74 0.27 0.97 145 FVGT_m_MULTI_ODD_EMAIL 2922 0.66 0.08 0.96 146 DKIM_ADSP_CUSTOM_MED 2895 0.96 1.00 0.95 147 HTML_IMAGE_ONLY_20 2892 0.76 0.37 0.95 148 RCVD_IN_RP_SAFE 2876 0.84 0.63 0.94 149 XM_B_SpammyWords4 2819 1.27 1.98 0.92 150 XM_D_tchamptons_WL 2656 0.58 0.00 0.87 151 RELAYCOUNTRY_CA 2616 2.82 6.77 0.86 152 XMSolicitRefs_0 2611 0.74 0.51 0.85 153 T_FILL_THIS_FORM_SHORT 2587 1.60 3.11 0.85 154 TR_XM_SpammyWords2 2548 4.00 10.35 0.83 155 RCVD_IN_RP_CERTIFIED 2539 0.73 0.53 0.83 156 TR_MetaPhish_Combo_01 2530 0.89 1.00 0.83 157 TM2_M_A_HREF_HREF 2423 0.76 0.68 0.79 158 T_XMDrugObfuBody_00 2397 1.16 1.90 0.78 159 TooManyTo_005 2366 0.60 0.24 0.77 160 XM_UB50 2352 2.31 5.40 0.77 161 MSGID_NOFQDN1 2299 0.50 0.00 0.75 162 XMBody_95 2244 0.52 0.10 0.73 163 SpammyFromTLD_01 2144 2.05 4.75 0.70 164 RCVD_IN_BL_SPAMCOP_NET 2086 3.38 8.80 0.68 165 FROM_GOV_DKIM_AU 2041 0.50 0.17 0.67 166 XM_H_PHPMailer 2033 0.94 1.48 0.66 167 HTTPS_HTTP_MISMATCH 2000 0.92 1.44 0.65 168 XMHTML_After_End 1995 0.83 1.19 0.65 169 XM_ShortIntro_01 1982 0.57 0.41 0.65 170 NML_ADSP_CUSTOM_MED 1957 0.69 0.78 0.64 171 HTML_TAG_BALANCE_BODY 1920 0.80 1.14 0.63 172 XMSubMetaI_00 1903 0.70 0.86 0.62 173 RELAYCOUNTRY_GB 1897 0.71 0.88 0.62 174 XMPhish30 1883 0.81 1.20 0.62 175 XM_B_COVIDMETA 1853 1.22 2.45 0.61 176 XM_ProductURIs 1830 0.75 1.06 0.60 177 T_OBFU_PDF_ATTACH 1810 0.44 0.13 0.59 178 MPART_ALT_DIFF_COUNT 1779 0.73 1.03 0.58 179 XM_B_COPY_HTML 1769 0.62 0.69 0.58 180 XMNoVowels 1709 0.58 0.62 0.56 181 T_MANY_PILL_PRICE 1702 0.38 0.03 0.56 182 URI_TRY_3LD 1649 0.72 1.09 0.54 183 T_Symld_Words_02 1643 0.57 0.63 0.54 184 XMMoneyMeta_00 1618 0.69 1.00 0.53 185 XMBrknScrpt_02 1562 0.76 1.26 0.51 186 FORGED_GMAIL_RCVD 1559 0.61 0.80 0.51 187 SHORT_HELO_AND_INLINE_IMAGE 1549 0.35 0.05 0.51 188 XM_shorewaves_Whitelist 1541 0.34 0.00 0.50 189 RCVD_IN_SORBS_DUL 1497 0.36 0.10 0.49 190 DATE_IN_PAST_03_06 1482 0.76 1.32 0.48 191 XMHTMLBadTable_001 1446 0.61 0.88 0.47 192 XMLngstWrd_00 1438 0.98 2.00 0.47 193 TR_XM_INV_DKIM 1377 0.47 0.50 0.45 194 RDNS_DYNAMIC 1343 0.46 0.51 0.44 195 TM2_M_BODY_EMPTY 1308 0.35 0.19 0.43 196 TR_XM_PHPDW 1306 0.76 1.42 0.43 197 SpammyFromTLD_02 1292 0.81 1.60 0.42 198 XMSexyCombo_01 1274 0.86 1.76 0.42 199 USER_IN_WHITELIST 1273 0.28 0.00 0.42 200 USER_IN_WELCOMELIST 1273 0.28 0.00 0.42 ----------------------------------------------------------------------