Email: 499048 Autolearn: 0 AvgScore: 3.53 AvgScanTime: 1.21 sec Spam: 151859 Autolearn: 0 AvgScore: 14.25 AvgScanTime: 1.41 sec Ham: 347189 Autolearn: 0 AvgScore: -1.16 AvgScanTime: 1.12 sec Time Spent Running SA: 167.77 hours Time Spent Processing Spam: 59.52 hours Time Spent Processing Ham: 108.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143454 88.33 94.47 85.65 2 DKIM_SIGNED 131390 72.83 86.52 66.85 3 XM_DK_Pass 127372 70.38 83.88 64.48 4 DKIM_VALID 126419 69.46 83.25 63.43 5 RELAYCOUNTRY_US 123634 77.46 81.41 75.73 6 XM_B_Unicode 122244 70.90 80.50 66.70 7 DCC_CHECK 106017 39.75 69.81 26.60 8 XM_B_SpammyWords 102252 51.16 67.33 44.09 9 XMListUnsubscribeExists 100300 48.67 66.05 41.06 10 DKIM_VALID_AU 95862 53.04 63.13 48.62 11 RCVD_IN_MSPIKE_H2 67190 36.79 44.24 33.52 12 BAYES_50 63402 49.62 41.75 53.06 13 XM_B_Unicode3 63153 40.05 41.59 39.37 14 XM_DK_Undo_02 62149 16.45 40.93 5.75 15 XM_B_SpammyWords2 54483 23.31 35.88 17.82 16 FVGT_m_MULTI_ODD 52595 25.79 34.63 21.92 17 LOC_TINY_FONT_1 51740 23.67 34.07 19.11 18 BAYES_99 51313 13.76 33.79 5.00 19 MIME_HTML_ONLY 48935 23.45 32.22 19.62 20 TR_XM_DKIM_Undo 47957 12.56 31.58 4.24 21 HTML_FONT_LOW_CONTRAST 47345 26.11 31.18 23.90 22 DKIM_VALID_EF 45898 27.13 30.22 25.78 23 DCC_CHECK_NEGATIVE 45793 60.21 30.15 73.36 24 T_KAM_HTML_FONT_INVALID 41045 20.16 27.03 17.16 25 BAYES_999 40797 10.96 26.87 4.00 26 TR_DCC_Bayes_99 35517 8.13 23.39 1.45 27 XMSubLong 34767 23.55 22.89 23.84 28 T_TM2_M_HEADER_IN_MSG 33894 28.75 22.32 31.57 29 XM_Body_Dirty_Words 33469 16.71 22.04 14.38 30 RELAYCOUNTRY_META 32011 8.92 21.08 3.60 31 XM_B_Unsub 24465 13.28 16.11 12.04 32 TR_XM_BayesUnsub 23517 10.50 15.49 8.32 33 XM_Multi_Part_URI 23398 13.08 15.41 12.06 34 BOTNET_IPINHOSTNAME 22234 7.42 14.64 4.26 35 UNPARSEABLE_RELAY 20510 8.80 13.51 6.74 36 TR_XM_UnparsRelay 20162 7.64 13.28 5.17 37 LOTS_OF_MONEY 18569 8.60 12.23 7.01 38 FSL_BULK_SIG 18428 6.01 12.13 3.34 39 BOTNET 18104 4.54 11.92 1.32 40 XM_B_SpammyWords3 17326 6.32 11.41 4.09 41 TR_XM_SpammyRelay 17298 4.52 11.39 1.52 42 RCVD_IN_MSPIKE_WL 16647 12.92 10.96 13.77 43 TR_XM_SpammyWords4 15468 6.12 10.19 4.34 44 XMSexyCombo_05 14945 6.56 9.84 5.12 45 UNTRUSTED_Relay 14892 3.87 9.81 1.27 46 TR_XM_SpammyWords2 14585 3.43 9.60 0.73 47 RCVD_IN_MSPIKE_H3 13338 9.18 8.78 9.35 48 MPART_ALT_DIFF 13151 5.73 8.66 4.45 49 XM_Evil_Numbers_Gen 13081 7.60 8.61 7.16 50 BAYES_80 12810 5.22 8.44 3.82 51 RCVD_IN_BL_SPAMCOP_NET 12662 2.99 8.34 0.64 52 XM_UncommonTLD01 12404 4.95 8.17 3.55 53 LotsOfNums_01 11549 7.74 7.61 7.80 54 BAYES_60 11273 9.36 7.42 10.21 55 XM_SendGrid 10740 5.37 7.07 4.62 56 RELAYCOUNTRY_CA 10200 2.76 6.72 1.04 57 HTML_IMAGE_RATIO_02 10058 5.75 6.62 5.37 58 HTML_MIME_NO_HTML_TAG 9715 3.19 6.40 1.79 59 TR_XM_PhishingBody 9633 3.94 6.34 2.88 60 XM_H_Long_From01 9575 5.10 6.31 4.57 61 XMSubMetaSx_00 9356 4.44 6.16 3.69 62 XM_B_Phish_Phrases 9034 4.17 5.95 3.39 63 MIME_HTML_ONLY_MULTI 8746 3.84 5.76 3.00 64 RCVD_IN_MSPIKE_BL 8699 2.49 5.73 1.07 65 TM2_M_VERY_LONG_WORD 8599 2.48 5.66 1.08 66 TR_XM_MSPIKECOMBO 8505 2.45 5.60 1.07 67 XM_B_Investor 7800 2.40 5.14 1.21 68 TooManyTo_001 7734 11.42 5.09 14.19 69 TR_XM_SPAMCOP 7649 1.71 5.04 0.25 70 XMStrtUSub 7442 4.31 4.90 4.05 71 XM_B_SpammyTLD 7412 2.79 4.88 1.88 72 URIBL_DBL_SPAM 7289 1.47 4.80 0.02 73 T_REMOTE_IMAGE 7079 3.96 4.66 3.66 74 BAYES_95 7060 2.97 4.65 2.23 75 T_XMDrugObfuBody_14 6895 2.52 4.54 1.64 76 TR_XM_DK_SendGrid 6775 3.43 4.46 2.98 77 HTML_IMAGE_RATIO_04 6646 4.93 4.38 5.17 78 XM_SPF_SoftFail 6644 3.48 4.38 3.08 79 XMNumbers 6132 4.27 4.04 4.37 80 XM_UB50 6119 1.81 4.03 0.85 81 T_XMDrugObfuBody_08 5999 2.10 3.95 1.30 82 MIME_QP_LONG_LINE 5947 7.00 3.92 8.35 83 SpammyFromTLD_01 5894 1.68 3.88 0.72 84 TR_XM_SpammyWords5 5668 2.01 3.73 1.26 85 XM_B_Phish66 5664 2.42 3.73 1.85 86 TR_XM_SpammyWords3 5553 1.44 3.66 0.47 87 XM_DIRTYINTL 5412 1.30 3.56 0.31 88 XM_OfRef6 5403 1.76 3.56 0.98 89 RCVD_IN_VALIDITY_SAFE 5390 4.07 3.55 4.30 90 XM_GoogleGroups 5337 1.91 3.51 1.20 91 XMLngstWrd_00 5279 1.30 3.48 0.35 92 XMLngstWrd_01 5159 1.25 3.40 0.30 93 MIME_HTML_MOSTLY 5106 2.25 3.36 1.76 94 KHOP_HELO_FCRDNS 5080 2.47 3.35 2.09 95 HTML_IMAGE_RATIO_06 5048 3.31 3.32 3.30 96 XMLngstWrd_02 5040 1.17 3.32 0.23 97 DKIM_INVALID 4971 3.37 3.27 3.41 98 RCVD_IN_VALIDITY_RPBL 4780 0.99 3.15 0.05 99 XMLngstWrd_03 4637 1.05 3.05 0.17 100 HTML_TITLE_SUBJ_DIFF 4610 0.94 3.04 0.03 101 XMLngstWrd_04 4543 1.00 2.99 0.13 102 TM2_M_URI_OPT_OUT 4543 4.88 2.99 5.71 103 RCVD_IN_VALIDITY_CERTIFIED 4506 3.57 2.97 3.83 104 UPPERCASE_75_100 4473 0.91 2.95 0.02 105 T_TooManySym_01 4376 5.46 2.88 6.59 106 XM_UB99 4307 0.86 2.84 0.00 107 XM_CamelCaseFrm001 4255 1.93 2.80 1.55 108 XM_B_Unsub2 4254 1.65 2.80 1.14 109 RCVD_IN_MSPIKE_L4 4079 0.84 2.69 0.04 110 T_FILL_THIS_FORM_SHORT 4021 1.39 2.65 0.84 111 PDS_OTHER_BAD_TLD 3951 0.92 2.60 0.18 112 URI_NOVOWEL 3945 2.33 2.60 2.22 113 URI_PHP_REDIR 3853 0.77 2.54 0.00 114 XM_B_SpammyWords4 3764 1.11 2.48 0.51 115 XMDiploma_00 3750 1.62 2.47 1.25 116 XM_H_Undi_Recip 3721 0.98 2.45 0.34 117 XM_DK_Undo_01 3684 1.79 2.43 1.52 118 MAILING_LIST_MULTI 3589 2.64 2.36 2.76 119 RCVD_IN_IADB_LISTED 3572 3.89 2.35 4.56 120 USER_IN_DEF_DKIM_WL 3566 8.26 2.35 10.85 121 XMSexyCombo_01 3372 1.34 2.22 0.96 122 XM_UB999 3368 0.68 2.22 0.00 123 BOTNET_NORDNS 3310 0.67 2.18 0.01 124 HTML_TAG_BALANCE_BODY 3309 1.02 2.18 0.51 125 RCVD_IN_MSPIKE_H4 3248 3.61 2.14 4.25 126 ALL_TRUSTED 3233 15.70 2.13 21.64 127 SUBJ_ALL_CAPS 3114 1.80 2.05 1.69 128 RCVD_IN_PSBL 3057 0.78 2.01 0.24 129 TR_XM_SB_Phish 3051 2.02 2.01 2.02 130 RCVD_IN_IADB_SPF 3048 3.43 2.01 4.06 131 TR_XM_Undi_Recip5 2992 0.67 1.97 0.10 132 SpammyFromTLD_02 2962 0.74 1.95 0.21 133 XM_H_Long_From02 2910 1.22 1.92 0.91 134 XMSubPhish11 2889 1.96 1.90 1.99 135 XMStockSpam_06 2864 1.40 1.89 1.19 136 FROM_EXCESS_BASE64 2818 2.28 1.86 2.46 137 RCVD_IN_IADB_DK 2807 3.02 1.85 3.54 138 RCVD_IN_IADB_SENDERID 2780 3.09 1.83 3.64 139 HTML_IMAGE_ONLY_08 2706 0.63 1.78 0.13 140 UNDISC_MONEY 2686 0.58 1.77 0.06 141 TR_XM_PHPDW 2656 0.76 1.75 0.33 142 XM_B_COVIDMETA 2639 0.95 1.74 0.61 143 HTML_IMAGE_RATIO_08 2635 1.93 1.74 2.01 144 TR_XM_MSPIKECOMBO2 2626 0.65 1.73 0.18 145 TR_XM_PHPForged 2595 0.73 1.71 0.29 146 MONEY_NOHTML 2578 0.57 1.70 0.08 147 T_XMHurry_00 2543 0.82 1.67 0.44 148 TR_XM_Undi_Recip2 2541 0.59 1.67 0.11 149 TR_XM_FormFill2 2527 0.71 1.66 0.29 150 XM_H_PHPOS 2507 0.70 1.65 0.28 151 TR_XM_COVIDMETA4 2500 0.69 1.65 0.27 152 XMBody_17 2476 0.85 1.63 0.51 153 T_Symld_Words_02 2398 0.79 1.58 0.44 154 HTML_FONT_SIZE_LARGE 2396 0.57 1.58 0.13 155 URI_HEX 2380 1.21 1.57 1.05 156 HTTPS_HTTP_MISMATCH 2376 0.95 1.56 0.69 157 RCVD_IN_MSPIKE_L3 2339 1.18 1.54 1.02 158 RELAYCOUNTRY_DE 2316 0.68 1.53 0.31 159 XM_URI_RBL 2316 0.54 1.53 0.11 160 TR_XM_Undi_Recip11 2316 0.52 1.53 0.07 161 XMBrknScrpt_02 2292 0.79 1.51 0.47 162 BAYES_40 2266 4.28 1.49 5.50 163 TR_XM_NoHeaderRelay 2200 0.51 1.45 0.10 164 TR_XM_Undi_RecipCombo2 2147 0.43 1.41 0.00 165 HTML_TAG_BALANCE_CENTER 2129 0.47 1.40 0.06 166 RCVD_IN_MSPIKE_L5 2087 0.43 1.37 0.01 167 RCVD_IN_IADB_VOUCHED 2080 2.44 1.37 2.90 168 XMHTML_After_End 2065 0.89 1.36 0.68 169 HK_RANDOM_REPLYTO 2059 0.48 1.36 0.09 170 XMSubNoVowel 2016 1.54 1.33 1.63 171 T_XMDrugObfuBody_00 2011 0.69 1.32 0.41 172 TR_XM_FormFill 1995 0.41 1.31 0.01 173 RELAYCOUNTRY_AU 1965 0.55 1.29 0.23 174 RELAYCOUNTRY_RU 1942 0.42 1.28 0.05 175 XMSubMetaI_00 1891 0.75 1.25 0.53 176 RELAYCOUNTRY_FR 1886 0.54 1.24 0.23 177 XMGenDplmaNmb 1864 0.89 1.23 0.74 178 MPART_ALT_DIFF_COUNT 1815 0.77 1.20 0.58 179 XM_PDF 1807 3.67 1.19 4.75 180 TR_Mismatch_TLD_02 1771 0.41 1.17 0.08 181 XM_B_DynamicLink 1770 0.37 1.17 0.03 182 XMReplyNow 1758 0.53 1.16 0.25 183 TR_Symld_Words 1747 1.44 1.15 1.57 184 XMMoneyMeta_00 1743 0.69 1.15 0.49 185 HTML_IMAGE_ONLY_28 1739 0.70 1.15 0.50 186 BODY_URI_ONLY 1727 0.35 1.14 0.01 187 XMBdyGiftCard01 1724 0.74 1.14 0.57 188 URIBL_BLACK 1714 0.37 1.13 0.04 189 TR_LOTS_OF_MONEY3 1710 0.45 1.13 0.15 190 MIXED_CENTER_CASE 1708 0.34 1.12 0.00 191 TR_XM_COVIDMETA1 1694 0.46 1.12 0.18 192 MIXED_HREF_CASE 1690 0.34 1.11 0.00 193 PLING_QUERY 1679 0.59 1.11 0.36 194 MIXED_IMG_CASE 1673 0.34 1.10 0.01 195 MIXED_AREA_CASE 1667 0.33 1.10 0.00 196 MIXED_FONT_CASE 1665 0.33 1.10 0.00 197 XM_B_DNDMA 1628 0.54 1.07 0.31 198 DIET_1 1598 0.58 1.05 0.37 199 XM_UB60 1591 0.36 1.05 0.06 200 XMPhish14 1579 0.52 1.04 0.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 297357 88.33 94.47 85.65 2 RELAYCOUNTRY_US 262911 77.46 81.41 75.73 3 DCC_CHECK_NEGATIVE 254701 60.21 30.15 73.36 4 DKIM_SIGNED 232085 72.83 86.52 66.85 5 XM_B_Unicode 231564 70.90 80.50 66.70 6 XM_DK_Pass 223866 70.38 83.88 64.48 7 DKIM_VALID 220238 69.46 83.25 63.43 8 BAYES_50 184207 49.62 41.75 53.06 9 DKIM_VALID_AU 168817 53.04 63.13 48.62 10 XM_B_SpammyWords 153078 51.16 67.33 44.09 11 XMListUnsubscribeExists 142571 48.67 66.05 41.06 12 XM_B_Unicode3 136699 40.05 41.59 39.37 13 RCVD_IN_MSPIKE_H2 116389 36.79 44.24 33.52 14 T_TM2_M_HEADER_IN_MSG 109592 28.75 22.32 31.57 15 DCC_CHECK 92355 39.75 69.81 26.60 16 DKIM_VALID_EF 89494 27.13 30.22 25.78 17 HTML_FONT_LOW_CONTRAST 82973 26.11 31.18 23.90 18 XMSubLong 82780 23.55 22.89 23.84 19 FVGT_m_MULTI_ODD 76091 25.79 34.63 21.92 20 ALL_TRUSTED 75123 15.70 2.13 21.64 21 MIME_HTML_ONLY 68110 23.45 32.22 19.62 22 LOC_TINY_FONT_1 66362 23.67 34.07 19.11 23 XM_B_SpammyWords2 61853 23.31 35.88 17.82 24 T_KAM_HTML_FONT_INVALID 59588 20.16 27.03 17.16 25 XM_Body_Dirty_Words 49932 16.71 22.04 14.38 26 TooManyTo_001 49263 11.42 5.09 14.19 27 RCVD_IN_MSPIKE_WL 47821 12.92 10.96 13.77 28 BAYES_00 44933 9.30 0.97 12.94 29 XM_Multi_Part_URI 41869 13.08 15.41 12.06 30 XM_B_Unsub 41798 13.28 16.11 12.04 31 USER_IN_DEF_DKIM_WL 37679 8.26 2.35 10.85 32 BAYES_60 35442 9.36 7.42 10.21 33 RCVD_IN_MSPIKE_H3 32462 9.18 8.78 9.35 34 MIME_QP_LONG_LINE 28987 7.00 3.92 8.35 35 TR_XM_BayesUnsub 28900 10.50 15.49 8.32 36 LotsOfNums_01 27097 7.74 7.61 7.80 37 IN_ZIMBRA_NJ_WHITELIST 26271 5.30 0.12 7.57 38 XM_DKIMWhitelistDomains 26148 5.28 0.14 7.53 39 XM_Evil_Numbers_Gen 24867 7.60 8.61 7.16 40 LOTS_OF_MONEY 24347 8.60 12.23 7.01 41 UNPARSEABLE_RELAY 23399 8.80 13.51 6.74 42 TR_XM_DK_Bayes 23167 4.87 0.74 6.67 43 T_TooManySym_01 22887 5.46 2.88 6.59 44 TR_XM_DK_Bayes1 22655 4.76 0.73 6.53 45 XM_DK_Undo_02 19961 16.45 40.93 5.75 46 TM2_M_URI_OPT_OUT 19814 4.88 2.99 5.71 47 BAYES_40 19080 4.28 1.49 5.50 48 HTML_IMAGE_RATIO_02 18642 5.75 6.62 5.37 49 TR_XM_DK_Bayes2 18278 3.85 0.60 5.26 50 TR_XM_UnparsRelay 17944 7.64 13.28 5.17 51 HTML_IMAGE_RATIO_04 17934 4.93 4.38 5.17 52 XMSexyCombo_05 17788 6.56 9.84 5.12 53 BAYES_99 17348 13.76 33.79 5.00 54 XM_PDF 16489 3.67 1.19 4.75 55 XM_SendGrid 16057 5.37 7.07 4.62 56 XM_H_Long_From01 15879 5.10 6.31 4.57 57 RCVD_IN_IADB_LISTED 15825 3.89 2.35 4.56 58 MPART_ALT_DIFF 15436 5.73 8.66 4.45 59 XMNumbers 15159 4.27 4.04 4.37 60 TR_XM_SpammyWords4 15054 6.12 10.19 4.34 61 RCVD_IN_VALIDITY_SAFE 14926 4.07 3.55 4.30 62 BAYES_20 14875 3.28 0.98 4.28 63 BOTNET_IPINHOSTNAME 14804 7.42 14.64 4.26 64 RCVD_IN_MSPIKE_H4 14743 3.61 2.14 4.25 65 TR_XM_DKIM_Undo 14737 12.56 31.58 4.24 66 T_TooManySym_02 14670 3.16 0.72 4.23 67 XM_B_SpammyWords3 14204 6.32 11.41 4.09 68 RCVD_IN_IADB_SPF 14093 3.43 2.01 4.06 69 XMStrtUSub 14071 4.31 4.90 4.05 70 BAYES_999 13879 10.96 26.87 4.00 71 XM_H_Trusted_IP 13417 2.69 0.00 3.86 72 RCVD_IN_VALIDITY_CERTIFIED 13291 3.57 2.97 3.83 73 BAYES_80 13264 5.22 8.44 3.82 74 XMSubMetaSx_00 12806 4.44 6.16 3.69 75 SHORT_URI_3 12710 2.69 0.46 3.66 76 T_REMOTE_IMAGE 12694 3.96 4.66 3.66 77 RCVD_IN_IADB_SENDERID 12646 3.09 1.83 3.64 78 RELAYCOUNTRY_META 12515 8.92 21.08 3.60 79 XM_UncommonTLD01 12318 4.95 8.17 3.55 80 RCVD_IN_IADB_DK 12281 3.02 1.85 3.54 81 DKIM_INVALID 11847 3.37 3.27 3.41 82 XM_B_Phish_Phrases 11768 4.17 5.95 3.39 83 FSL_BULK_SIG 11583 6.01 12.13 3.34 84 HTML_IMAGE_RATIO_06 11468 3.31 3.32 3.30 85 XM_SPF_SoftFail 10703 3.48 4.38 3.08 86 MIME_HTML_ONLY_MULTI 10427 3.84 5.76 3.00 87 TR_XM_DK_SendGrid 10356 3.43 4.46 2.98 88 BAYES_05 10298 2.22 0.51 2.97 89 RCVD_IN_IADB_VOUCHED 10080 2.44 1.37 2.90 90 TR_XM_PhishingBody 10015 3.94 6.34 2.88 91 MAILING_LIST_MULTI 9597 2.64 2.36 2.76 92 ANY_BOUNCE_MESSAGE 8689 1.96 0.73 2.50 93 BOUNCE_MESSAGE 8689 1.96 0.73 2.50 94 FROM_EXCESS_BASE64 8542 2.28 1.86 2.46 95 TooManyTo_002 8533 1.88 0.57 2.46 96 BAYES_95 7737 2.97 4.65 2.23 97 URI_NOVOWEL 7702 2.33 2.60 2.22 98 KHOP_HELO_FCRDNS 7271 2.47 3.35 2.09 99 HTML_FONT_FACE_BAD 7265 1.76 1.00 2.09 100 HELO_NODOT 7237 1.61 0.51 2.08 101 HELO_NO_DOMAIN 7222 1.60 0.50 2.08 102 TR_XM_SB_Phish 7023 2.02 2.01 2.02 103 HTML_IMAGE_RATIO_08 6993 1.93 1.74 2.01 104 INVALID_MSGID 6929 1.45 0.19 2.00 105 RCVD_IN_IADB_OPTIN 6925 1.64 0.82 1.99 106 XMSubPhish11 6912 1.96 1.90 1.99 107 XM_B_SpammyTLD 6514 2.79 4.88 1.88 108 XM_B_Phish66 6432 2.42 3.73 1.85 109 HTML_MIME_NO_HTML_TAG 6202 3.19 6.40 1.79 110 TVD_RCVD_IP 6154 1.31 0.24 1.77 111 MIME_HTML_MOSTLY 6119 2.25 3.36 1.76 112 IN_HORDE_ADDRESS_BOOK 6053 1.24 0.09 1.74 113 TooManyTo_003 5887 1.33 0.48 1.70 114 SUBJ_ALL_CAPS 5859 1.80 2.05 1.69 115 TO_MALFORMED 5787 1.22 0.18 1.67 116 T_TooManySym_03 5703 1.26 0.37 1.64 117 T_XMDrugObfuBody_14 5692 2.52 4.54 1.64 118 XMSubNoVowel 5659 1.54 1.33 1.63 119 TR_Symld_Words 5458 1.44 1.15 1.57 120 XM_CamelCaseFrm001 5373 1.93 2.80 1.55 121 TR_XM_SpammyRelay 5275 4.52 11.39 1.52 122 XM_DK_Undo_01 5272 1.79 2.43 1.52 123 TR_DCC_Bayes_99 5034 8.13 23.39 1.45 124 BOTNET 4569 4.54 11.92 1.32 125 T_XMDrugObfuBody_08 4498 2.10 3.95 1.30 126 UNTRUSTED_Relay 4415 3.87 9.81 1.27 127 TR_XM_SpammyWords5 4374 2.01 3.73 1.26 128 XMDiploma_00 4355 1.62 2.47 1.25 129 TooManyTo_004 4292 0.97 0.37 1.24 130 XMCapTrack 4256 0.97 0.39 1.23 131 XMGappySubj_01 4210 0.89 0.15 1.21 132 XM_B_Investor 4184 2.40 5.14 1.21 133 XM_GoogleGroups 4171 1.91 3.51 1.20 134 XMStockSpam_06 4138 1.40 1.89 1.19 135 XM_B_Unsub2 3972 1.65 2.80 1.14 136 T_HTML_ATTACH 3946 0.81 0.07 1.14 137 XMBSHREFv2 3861 0.89 0.38 1.11 138 TM2_M_VERY_LONG_WORD 3759 2.48 5.66 1.08 139 RCVD_IN_MSPIKE_BL 3719 2.49 5.73 1.07 140 TR_XM_MSPIKECOMBO 3710 2.45 5.60 1.07 141 URI_HEX 3645 1.21 1.57 1.05 142 RELAYCOUNTRY_CA 3594 2.76 6.72 1.04 143 TVD_SPACE_RATIO 3562 0.74 0.08 1.03 144 RCVD_IN_MSPIKE_L3 3539 1.18 1.54 1.02 145 TooManyTo_005 3443 0.78 0.30 0.99 146 XM_OfRef6 3394 1.76 3.56 0.98 147 XMSexyCombo_01 3319 1.34 2.22 0.96 148 XM_B_SEO 3286 0.97 1.03 0.95 149 XM_E_Blogspot 3262 0.71 0.17 0.94 150 XM_H_Long_From02 3160 1.22 1.92 0.91 151 DKIM_ADSP_CUSTOM_MED 3116 0.91 0.94 0.90 152 RCVD_IN_RP_SAFE 2979 0.82 0.74 0.86 153 FVGT_m_MULTI_ODD_EMAIL 2944 0.62 0.10 0.85 154 XM_UB50 2934 1.81 4.03 0.85 155 T_FILL_THIS_FORM_SHORT 2924 1.39 2.65 0.84 156 RCVD_IN_RP_CERTIFIED 2675 0.72 0.62 0.77 157 XMBody_95 2635 0.56 0.11 0.76 158 XMGenDplmaNmb 2566 0.89 1.23 0.74 159 TR_XM_SpammyWords2 2536 3.43 9.60 0.73 160 XMNoVowels 2530 0.60 0.30 0.73 161 SpammyFromTLD_01 2499 1.68 3.88 0.72 162 TR_MetaPhish_Combo_01 2402 0.73 0.81 0.69 163 XM_ShortIntro_01 2392 0.67 0.63 0.69 164 HTTPS_HTTP_MISMATCH 2388 0.95 1.56 0.69 165 XMHTML_After_End 2370 0.89 1.36 0.68 166 RELAYCOUNTRY_GB 2344 0.72 0.82 0.68 167 MSGID_NOFQDN1 2309 0.47 0.01 0.67 168 SHORTENED_URL_HREF 2282 0.55 0.30 0.66 169 RCVD_IN_BL_SPAMCOP_NET 2235 2.99 8.34 0.64 170 T_OBFU_PDF_ATTACH 2205 0.57 0.43 0.64 171 HTML_IMAGE_ONLY_20 2184 0.73 0.95 0.63 172 XM_RXBody 2183 0.58 0.46 0.63 173 TVD_SPACE_RATIO_MINFP 2180 0.47 0.12 0.63 174 XM_B_COVIDMETA 2125 0.95 1.74 0.61 175 XM_ProductURIs 2059 0.68 0.88 0.59 176 XMSlimDrugH 2040 0.69 0.93 0.59 177 MPART_ALT_DIFF_COUNT 2025 0.77 1.20 0.58 178 NML_ADSP_CUSTOM_MED 2014 0.63 0.74 0.58 179 RCVD_IN_SORBS_DUL 2013 0.44 0.12 0.58 180 XM_H_PHPMailer 1978 0.64 0.81 0.57 181 XMBdyGiftCard01 1973 0.74 1.14 0.57 182 SHORT_HELO_AND_INLINE_IMAGE 1929 0.41 0.07 0.56 183 XMSubMetaI_00 1857 0.75 1.25 0.53 184 XM_B_SpammyWords4 1767 1.11 2.48 0.51 185 XMBody_17 1765 0.85 1.63 0.51 186 HTML_TAG_BALANCE_BODY 1757 1.02 2.18 0.51 187 URI_TRY_3LD 1753 0.65 1.00 0.50 188 HTML_IMAGE_ONLY_28 1749 0.70 1.15 0.50 189 FORGED_GMAIL_RCVD 1719 0.59 0.80 0.50 190 XMMoneyMeta_00 1685 0.69 1.15 0.49 191 FILL_THIS_FORM 1684 0.48 0.47 0.49 192 XMSubMetaSxObfu_02 1657 0.44 0.36 0.48 193 SUBJ_DOLLARS 1655 0.51 0.59 0.48 194 TR_XM_SpammyWords3 1649 1.44 3.66 0.47 195 XMBrknScrpt_02 1648 0.79 1.51 0.47 196 XMPhish30 1643 0.58 0.84 0.47 197 XMHTMLBadTable_001 1624 0.61 0.94 0.47 198 XM_B_COPY_HTML 1579 0.54 0.75 0.45 199 FROM_GOV_DKIM_AU 1549 0.43 0.39 0.45 200 TM2_M_BODY_EMPTY 1545 0.37 0.19 0.45 ----------------------------------------------------------------------