Email: 551345 Autolearn: 0 AvgScore: 4.27 AvgScanTime: 1.45 sec Spam: 211699 Autolearn: 0 AvgScore: 12.61 AvgScanTime: 1.49 sec Ham: 339646 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.42 sec Time Spent Running SA: 221.82 hours Time Spent Processing Spam: 87.86 hours Time Spent Processing Ham: 133.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 200714 89.43 94.81 86.08 2 DKIM_SIGNED 173393 77.31 81.91 74.44 3 XM_DK_Pass 170958 75.69 80.76 72.54 4 DKIM_VALID 169159 74.82 79.91 71.66 5 RELAYCOUNTRY_US 165365 79.11 78.11 79.73 6 XM_B_Unicode 139042 67.49 65.68 68.63 7 DKIM_VALID_AU 134445 59.79 63.51 57.47 8 XM_B_SpammyWords 125743 50.02 59.40 44.17 9 DCC_CHECK 120501 44.43 56.92 36.64 10 XMListUnsubscribeExists 115373 50.97 54.50 48.77 11 XM_DK_Undo_02 94962 21.74 44.86 7.33 12 DCC_CHECK_NEGATIVE 91165 55.54 43.06 63.31 13 BAYES_50 85566 50.73 40.42 57.16 14 BAYES_99 83304 18.69 39.35 5.81 15 RCVD_IN_MSPIKE_H2 81804 39.02 38.64 39.26 16 XM_B_Unicode3 78639 38.93 37.15 40.04 17 XM_B_SpammyWords2 73684 24.64 34.81 18.31 18 BAYES_999 69735 15.55 32.94 4.71 19 T_TM2_M_HEADER_IN_MSG 64960 29.23 30.69 28.32 20 LOTS_OF_MONEY 64788 16.81 30.60 8.22 21 LOC_TINY_FONT_1 60476 25.37 28.57 23.38 22 FVGT_m_MULTI_ODD 59828 27.05 28.26 26.29 23 MIME_HTML_ONLY 59151 23.01 27.94 19.94 24 HTML_FONT_LOW_CONTRAST 55488 26.47 26.21 26.63 25 TR_XM_DKIM_Undo 54045 12.42 25.53 4.24 26 DKIM_VALID_EF 52885 26.81 24.98 27.96 27 T_KAM_HTML_FONT_INVALID 49319 20.51 23.30 18.78 28 XM_Body_Dirty_Words 49007 16.41 23.15 12.20 29 XMSubLong 45386 21.77 21.44 21.97 30 XM_B_Crypto 42409 9.01 20.03 2.15 31 URIBL_DBL_PHISH 41260 8.24 19.49 1.23 32 TR_DCC_Bayes_99 36955 7.99 17.46 2.09 33 XM_Multi_Part_URI 36322 14.84 17.16 13.39 34 RELAYCOUNTRY_META 35806 8.84 16.91 3.80 35 ANY_BOUNCE_MESSAGE 35657 8.88 16.84 3.92 36 BOUNCE_MESSAGE 35655 8.88 16.84 3.92 37 XM_B_Unsub 33471 11.28 15.81 8.45 38 TR_XM_BayesUnsub 32884 10.29 15.53 7.02 39 TR_XM_Crypto3 31453 6.02 14.86 0.51 40 XM_B_SpammyWords3 27653 7.70 13.06 4.35 41 MIME_HEADER_CTYPE_ONLY 27026 5.37 12.77 0.75 42 XMSexyCombo_05 26878 6.92 12.70 3.33 43 RCVD_IN_MSPIKE_WL 25254 15.43 11.93 17.61 44 TR_XM_SpammyRelay 24865 5.51 11.75 1.63 45 FSL_BULK_SIG 23699 7.73 11.19 5.57 46 TR_XM_SpammyWords4 23576 6.83 11.14 4.14 47 BOTNET_IPINHOSTNAME 21969 7.26 10.38 5.32 48 RCVD_IN_MSPIKE_H3 21642 11.18 10.22 11.77 49 TR_XM_SpammyWords2 19669 4.11 9.29 0.87 50 XM_UncommonTLD01 18778 6.01 8.87 4.23 51 UNPARSEABLE_RELAY 18423 8.70 8.70 8.69 52 RELAYCOUNTRY_CA 17376 3.87 8.21 1.17 53 ALL_TRUSTED 16254 13.65 7.68 17.38 54 XM_Evil_Numbers_Gen 15890 7.34 7.51 7.23 55 MPART_ALT_DIFF 15631 6.50 7.38 5.94 56 BOTNET 14991 3.78 7.08 1.72 57 RCVD_IN_BL_SPAMCOP_NET 14893 3.07 7.03 0.59 58 XM_B_Investor 14826 3.49 7.00 1.29 59 BAYES_80 14146 5.52 6.68 4.79 60 TooManyTo_001 14058 7.68 6.64 8.33 61 TR_XM_PhishingBody 13929 4.45 6.58 3.12 62 BAYES_60 13476 8.16 6.37 9.27 63 LotsOfNums_01 13289 7.70 6.28 8.58 64 XM_OfRef6 13236 2.99 6.25 0.95 65 XM_B_Phish_Phrases 12389 3.99 5.85 2.83 66 UNTRUSTED_Relay 11836 2.94 5.59 1.29 67 TM2_M_VERY_LONG_WORD 10931 3.20 5.16 1.97 68 TR_XM_SPAMCOP 10898 2.14 5.15 0.26 69 XMStrtUSub 10423 4.77 4.92 4.68 70 XM_SendGrid 10316 5.42 4.87 5.76 71 TR_XM_UnparsRelay 10230 2.91 4.83 1.71 72 MIME_HTML_ONLY_MULTI 10071 4.01 4.76 3.55 73 HTML_IMAGE_RATIO_02 9738 5.32 4.60 5.77 74 XM_B_Phish66 9606 2.77 4.54 1.67 75 XMSubMetaSx_00 9055 3.54 4.28 3.07 76 XM_H_Long_From01 8908 5.29 4.21 5.97 77 XM_B_SpammyTLD 8624 3.13 4.07 2.53 78 BAYES_95 8177 3.53 3.86 3.33 79 HELO_NODOT 7897 2.41 3.73 1.59 80 HELO_NO_DOMAIN 7894 2.41 3.73 1.59 81 HTML_IMAGE_RATIO_04 7793 4.82 3.68 5.53 82 XM_DIRTYINTL 7765 1.61 3.67 0.33 83 XMLngstWrd_00 7743 2.16 3.66 1.23 84 XMLngstWrd_01 7693 2.10 3.63 1.15 85 RCVD_IN_MSPIKE_BL 7627 1.60 3.60 0.35 86 TR_XM_MSPIKECOMBO 7557 1.58 3.57 0.35 87 HTML_MIME_NO_HTML_TAG 7477 2.98 3.53 2.64 88 MISSING_HEADERS 7258 1.62 3.43 0.50 89 XMNumbers 7084 3.71 3.35 3.94 90 T_XMDrugObfuBody_08 7073 2.19 3.34 1.48 91 T_FILL_THIS_FORM_SHORT 7043 1.86 3.33 0.95 92 MIME_HTML_MOSTLY 7039 3.05 3.33 2.88 93 INVESTMENT_ADVICE 6994 1.32 3.30 0.09 94 TR_LOTS_OF_MONEY1 6915 1.32 3.27 0.11 95 TR_XM_SpammyWords5 6765 1.81 3.20 0.94 96 TR_XM_DK_SendGrid 6761 3.63 3.19 3.90 97 T_XMDrugObfuBody_14 6626 2.08 3.13 1.43 98 XM_SPF_SoftFail 6612 2.72 3.12 2.46 99 XMBody_17 6589 1.75 3.11 0.89 100 XMLngstWrd_02 6371 1.81 3.01 1.07 101 SpammyFromTLD_02 6363 1.51 3.01 0.58 102 XM_UB50 6323 1.66 2.99 0.83 103 XMLngstWrd_03 6213 1.74 2.93 1.00 104 XM_GoogleGroups 6206 2.32 2.93 1.93 105 TR_XM_SpammyWords3 6081 1.22 2.87 0.18 106 URIBL_DBL_SPAM 5786 1.05 2.73 0.01 107 MIME_QP_LONG_LINE 5421 4.10 2.56 5.06 108 XMLngstWrd_04 5331 1.55 2.52 0.94 109 HTML_TITLE_SUBJ_DIFF 5306 1.47 2.51 0.83 110 UPPERCASE_75_100 5237 1.46 2.47 0.83 111 RCVD_IN_VALIDITY_SAFE 5221 3.82 2.47 4.67 112 URI_NOVOWEL 4918 2.36 2.32 2.38 113 HTML_IMAGE_RATIO_06 4914 3.21 2.32 3.76 114 SpammyFromTLD_01 4865 1.46 2.30 0.94 115 RCVD_IN_VALIDITY_CERTIFIED 4443 3.34 2.10 4.11 116 XMDiploma_00 4367 1.56 2.06 1.25 117 TM2_M_URI_OPT_OUT 4338 2.02 2.05 2.00 118 HTML_IMAGE_RATIO_08 4273 2.23 2.02 2.36 119 DKIM_INVALID 4234 2.48 2.00 2.79 120 T_TooManySym_01 4233 4.86 2.00 6.64 121 PDS_OTHER_BAD_TLD 4229 0.97 2.00 0.33 122 HK_RANDOM_REPLYTO 4197 0.81 1.98 0.08 123 SUBJ_ALL_CAPS 4134 1.77 1.95 1.65 124 TR_XM_FormFill 4128 0.76 1.95 0.01 125 XM_B_SpammyWords4 4095 1.09 1.93 0.56 126 RCVD_IN_MSPIKE_L5 4019 0.74 1.90 0.03 127 XM_B_Unsub2 3978 1.59 1.88 1.41 128 XM_H_Undi_Recip 3922 0.84 1.85 0.21 129 XM_DK_Undo_01 3921 1.58 1.85 1.41 130 TR_LOTS_OF_MONEY3 3840 0.94 1.81 0.40 131 FONT_INVIS_LONG_LINE 3704 0.71 1.75 0.06 132 USER_IN_DEF_DKIM_WL 3693 8.45 1.74 12.63 133 URI_PHP_REDIR 3614 0.66 1.71 0.00 134 XM_B_COVIDMETA 3600 0.92 1.70 0.43 135 FROM_EXCESS_BASE64 3535 2.06 1.67 2.30 136 XM_CamelCaseFrm001 3459 2.01 1.63 2.25 137 RCVD_IN_IADB_LISTED 3420 3.64 1.62 4.89 138 TR_XM_NoHeaderRelay 3414 0.69 1.61 0.11 139 TO_IN_SUBJ 3386 0.65 1.60 0.05 140 URI_OPTOUT_3LD 3254 0.65 1.54 0.10 141 RCVD_IN_MSPIKE_H4 3247 3.46 1.53 4.66 142 RCVD_IN_MSPIKE_L3 3230 0.78 1.53 0.32 143 HTTPS_HTTP_MISMATCH 3215 1.19 1.52 0.99 144 RCVD_IN_VALIDITY_RPBL 3193 0.60 1.51 0.04 145 TR_XM_PHPDW 3107 0.80 1.47 0.38 146 TR_XM_PhishingBody2 3088 0.57 1.46 0.02 147 TR_XM_PHPForged 3060 0.77 1.45 0.34 148 RCVD_IN_PSBL 3024 0.74 1.43 0.32 149 TR_XM_FormFill2 3007 0.75 1.42 0.34 150 XM_H_PHPOS 3002 0.75 1.42 0.33 151 T_REMOTE_IMAGE 2971 2.85 1.40 3.75 152 RCVD_IN_IADB_SPF 2966 3.23 1.40 4.37 153 TR_XM_SB_Phish 2960 1.87 1.40 2.16 154 T_XMHurry_00 2905 0.91 1.37 0.62 155 URI_HEX 2859 1.53 1.35 1.65 156 MAILING_LIST_MULTI 2823 1.99 1.33 2.41 157 XMStockSpam_06 2811 1.22 1.33 1.15 158 XMSubPhish11 2801 1.82 1.32 2.14 159 RCVD_IN_IADB_DK 2798 2.87 1.32 3.84 160 RCVD_IN_IADB_SENDERID 2740 2.93 1.29 3.95 161 TR_XM_Undi_Recip11 2706 0.52 1.28 0.04 162 TR_XM_Crypto2 2655 0.58 1.25 0.17 163 BAYES_40 2636 3.34 1.25 4.65 164 LongTLD 2608 0.66 1.23 0.30 165 XM_BadFromFormat 2598 0.62 1.23 0.24 166 RELAYCOUNTRY_AU 2593 0.75 1.22 0.45 167 TR_XM_Undi_Recip5 2531 0.46 1.20 0.01 168 XM_URI_RBL 2516 0.54 1.19 0.13 169 XMGenDplmaNmb 2478 0.79 1.17 0.55 170 KHOP_HELO_FCRDNS 2473 1.42 1.17 1.58 171 RELAYCOUNTRY_IN 2456 0.47 1.16 0.04 172 XMBdyGiftCard01 2435 0.99 1.15 0.90 173 XMSexyCombo_01 2389 0.62 1.13 0.31 174 T_XMDrugObfuBody_00 2379 0.79 1.12 0.58 175 BAYES_20 2242 2.56 1.06 3.50 176 UNDISC_MONEY 2223 0.41 1.05 0.01 177 FROM_SUSPICIOUS_NTLD 2115 0.43 1.00 0.07 178 XM_B_SEO 2097 0.49 0.99 0.17 179 XMReplyNow 2093 0.51 0.99 0.21 180 XM_H_Long_From02 2090 0.89 0.99 0.83 181 TM2_M_BODY_EMPTY 2038 0.81 0.96 0.71 182 URIBL_BLACK 2007 0.39 0.95 0.04 183 TR_LOTS_OF_MONEY2 1996 0.49 0.94 0.21 184 T_MONEY_PERCENT 1996 0.49 0.94 0.21 185 XMEmptyBody_01 1987 0.59 0.94 0.37 186 TR_XM_COVIDMETA4 1976 0.44 0.93 0.14 187 TR_XM_SEO4 1966 0.42 0.93 0.10 188 XMSubMetaSxObfu_03 1939 0.58 0.92 0.37 189 TR_XM_Base64_M1 1928 0.73 0.91 0.62 190 TR_XM_Undi_RecipCombo2 1907 0.35 0.90 0.00 191 DIET_1 1886 0.52 0.89 0.29 192 URG_BIZ 1870 0.36 0.88 0.03 193 FROM_SUSPICIOUS_NTLD_FP 1865 0.37 0.88 0.05 194 TR_XM_BayesRelay 1859 0.34 0.88 0.00 195 XMHTML_After_End 1825 0.87 0.86 0.88 196 TR_XM_MSPIKECOMBO2 1821 0.34 0.86 0.02 197 TR_XM_COVIDMETA1 1810 0.44 0.85 0.19 198 XMMailDelErr 1808 0.41 0.85 0.14 199 TR_XM_Undi_Recip2 1805 0.34 0.85 0.02 200 TR_XM_Undi_Recip4 1799 0.33 0.85 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 292371 89.43 94.81 86.08 2 RELAYCOUNTRY_US 270805 79.11 78.11 79.73 3 DKIM_SIGNED 252838 77.31 81.91 74.44 4 XM_DK_Pass 246367 75.69 80.76 72.54 5 DKIM_VALID 243375 74.82 79.91 71.66 6 XM_B_Unicode 233083 67.49 65.68 68.63 7 DCC_CHECK_NEGATIVE 215042 55.54 43.06 63.31 8 DKIM_VALID_AU 195203 59.79 63.51 57.47 9 BAYES_50 194150 50.73 40.42 57.16 10 XMListUnsubscribeExists 165630 50.97 54.50 48.77 11 XM_B_SpammyWords 150035 50.02 59.40 44.17 12 XM_B_Unicode3 136007 38.93 37.15 40.04 13 RCVD_IN_MSPIKE_H2 133349 39.02 38.64 39.26 14 DCC_CHECK 124447 44.43 56.92 36.64 15 T_TM2_M_HEADER_IN_MSG 96202 29.23 30.69 28.32 16 DKIM_VALID_EF 94957 26.81 24.98 27.96 17 HTML_FONT_LOW_CONTRAST 90455 26.47 26.21 26.63 18 FVGT_m_MULTI_ODD 89286 27.05 28.26 26.29 19 LOC_TINY_FONT_1 79395 25.37 28.57 23.38 20 XMSubLong 74618 21.77 21.44 21.97 21 MIME_HTML_ONLY 67740 23.01 27.94 19.94 22 T_KAM_HTML_FONT_INVALID 63776 20.51 23.30 18.78 23 XM_B_SpammyWords2 62194 24.64 34.81 18.31 24 RCVD_IN_MSPIKE_WL 59796 15.43 11.93 17.61 25 ALL_TRUSTED 59030 13.65 7.68 17.38 26 XM_Multi_Part_URI 45492 14.84 17.16 13.39 27 USER_IN_DEF_DKIM_WL 42914 8.45 1.74 12.63 28 XM_Body_Dirty_Words 41447 16.41 23.15 12.20 29 RCVD_IN_MSPIKE_H3 39979 11.18 10.22 11.77 30 XM_DKIMWhitelistDomains 32626 5.94 0.06 9.61 31 BAYES_00 31617 5.91 0.46 9.31 32 BAYES_60 31498 8.16 6.37 9.27 33 UNPARSEABLE_RELAY 29524 8.70 8.70 8.69 34 LotsOfNums_01 29155 7.70 6.28 8.58 35 XM_B_Unsub 28717 11.28 15.81 8.45 36 TooManyTo_001 28300 7.68 6.64 8.33 37 LOTS_OF_MONEY 27910 16.81 30.60 8.22 38 XM_DK_Undo_02 24891 21.74 44.86 7.33 39 XM_Evil_Numbers_Gen 24565 7.34 7.51 7.23 40 TR_XM_BayesUnsub 23842 10.29 15.53 7.02 41 T_TooManySym_01 22567 4.86 2.00 6.64 42 IN_ZIMBRA_NJ_WHITELIST 22266 4.07 0.07 6.56 43 TR_XM_DK_Bayes 20719 3.88 0.31 6.10 44 TR_XM_DK_Bayes1 20389 3.82 0.31 6.00 45 XM_H_Long_From01 20276 5.29 4.21 5.97 46 MPART_ALT_DIFF 20190 6.50 7.38 5.94 47 BAYES_99 19720 18.69 39.35 5.81 48 HTML_IMAGE_RATIO_02 19603 5.32 4.60 5.77 49 XM_SendGrid 19572 5.42 4.87 5.76 50 FSL_BULK_SIG 18921 7.73 11.19 5.57 51 HTML_IMAGE_RATIO_04 18769 4.82 3.68 5.53 52 BOTNET_IPINHOSTNAME 18074 7.26 10.38 5.32 53 TR_XM_DK_Bayes2 17900 3.34 0.25 5.27 54 MIME_QP_LONG_LINE 17174 4.10 2.56 5.06 55 RCVD_IN_IADB_LISTED 16622 3.64 1.62 4.89 56 XM_PDF 16463 3.17 0.48 4.85 57 BAYES_80 16265 5.52 6.68 4.79 58 BAYES_999 16010 15.55 32.94 4.71 59 XMStrtUSub 15880 4.77 4.92 4.68 60 RCVD_IN_VALIDITY_SAFE 15850 3.82 2.47 4.67 61 RCVD_IN_MSPIKE_H4 15817 3.46 1.53 4.66 62 BAYES_40 15798 3.34 1.25 4.65 63 RCVD_IN_IADB_SPF 14851 3.23 1.40 4.37 64 XM_B_SpammyWords3 14779 7.70 13.06 4.35 65 TR_XM_DKIM_Undo 14413 12.42 25.53 4.24 66 XM_UncommonTLD01 14362 6.01 8.87 4.23 67 T_TooManySym_02 14159 2.82 0.65 4.17 68 TR_XM_SpammyWords4 14074 6.83 11.14 4.14 69 RCVD_IN_VALIDITY_CERTIFIED 13971 3.34 2.10 4.11 70 RCVD_IN_IADB_SENDERID 13410 2.93 1.29 3.95 71 XMNumbers 13398 3.71 3.35 3.94 72 BOUNCE_MESSAGE 13328 8.88 16.84 3.92 73 ANY_BOUNCE_MESSAGE 13328 8.88 16.84 3.92 74 TR_XM_DK_SendGrid 13239 3.63 3.19 3.90 75 RCVD_IN_IADB_DK 13050 2.87 1.32 3.84 76 RELAYCOUNTRY_META 12919 8.84 16.91 3.80 77 HTML_IMAGE_RATIO_06 12776 3.21 2.32 3.76 78 T_REMOTE_IMAGE 12725 2.85 1.40 3.75 79 MIME_HTML_ONLY_MULTI 12049 4.01 4.76 3.55 80 BAYES_20 11887 2.56 1.06 3.50 81 BAYES_95 11307 3.53 3.86 3.33 82 XMSexyCombo_05 11296 6.92 12.70 3.33 83 TR_XM_PhishingBody 10591 4.45 6.58 3.12 84 XMSubMetaSx_00 10441 3.54 4.28 3.07 85 RCVD_IN_IADB_VOUCHED 10137 2.14 0.78 2.98 86 MIME_HTML_MOSTLY 9776 3.05 3.33 2.88 87 XM_B_Phish_Phrases 9604 3.99 5.85 2.83 88 DKIM_INVALID 9463 2.48 2.00 2.79 89 HTML_MIME_NO_HTML_TAG 8965 2.98 3.53 2.64 90 XM_B_SpammyTLD 8610 3.13 4.07 2.53 91 XM_SPF_SoftFail 8362 2.72 3.12 2.46 92 MAILING_LIST_MULTI 8174 1.99 1.33 2.41 93 URI_NOVOWEL 8084 2.36 2.32 2.38 94 HTML_IMAGE_RATIO_08 8026 2.23 2.02 2.36 95 XM_H_Trusted_IP 7837 1.42 0.00 2.31 96 FROM_EXCESS_BASE64 7801 2.06 1.67 2.30 97 XM_CamelCaseFrm001 7630 2.01 1.63 2.25 98 BAYES_05 7403 1.56 0.56 2.18 99 TR_XM_SB_Phish 7341 1.87 1.40 2.16 100 TooManyTo_002 7306 1.51 0.48 2.15 101 XM_B_Crypto 7290 9.01 20.03 2.15 102 XMSubPhish11 7261 1.82 1.32 2.14 103 TR_DCC_Bayes_99 7093 7.99 17.46 2.09 104 INVALID_MSGID 6831 1.29 0.13 2.01 105 TVD_RCVD_IP 6817 1.30 0.16 2.01 106 TM2_M_URI_OPT_OUT 6798 2.02 2.05 2.00 107 TM2_M_VERY_LONG_WORD 6706 3.20 5.16 1.97 108 HTML_FONT_FACE_BAD 6612 1.41 0.54 1.95 109 XM_GoogleGroups 6572 2.32 2.93 1.93 110 TR_Symld_Words 6483 1.46 0.73 1.91 111 RCVD_IN_IADB_OPTIN 6483 1.33 0.41 1.91 112 MSGID_NOFQDN1 6382 1.17 0.02 1.88 113 IN_HORDE_ADDRESS_BOOK 6027 1.12 0.08 1.77 114 TO_MALFORMED 5943 1.08 0.01 1.75 115 BOTNET 5825 3.78 7.08 1.72 116 TR_XM_UnparsRelay 5796 2.91 4.83 1.71 117 XM_B_Phish66 5659 2.77 4.54 1.67 118 SUBJ_ALL_CAPS 5617 1.77 1.95 1.65 119 T_TooManySym_03 5602 1.08 0.18 1.65 120 URI_HEX 5596 1.53 1.35 1.65 121 TR_XM_SpammyRelay 5540 5.51 11.75 1.63 122 HELO_NODOT 5401 2.41 3.73 1.59 123 HELO_NO_DOMAIN 5400 2.41 3.73 1.59 124 TVD_SPACE_RATIO 5361 0.99 0.05 1.58 125 KHOP_HELO_FCRDNS 5357 1.42 1.17 1.58 126 T_XMDrugObfuBody_08 5026 2.19 3.34 1.48 127 TooManyTo_003 4906 1.05 0.40 1.44 128 T_XMDrugObfuBody_14 4847 2.08 3.13 1.43 129 XM_B_Unsub2 4801 1.59 1.88 1.41 130 XM_DK_Undo_01 4777 1.58 1.85 1.41 131 XMGappySubj_01 4691 0.90 0.12 1.38 132 XM_B_Investor 4389 3.49 7.00 1.29 133 UNTRUSTED_Relay 4379 2.94 5.59 1.29 134 XMDiploma_00 4253 1.56 2.06 1.25 135 URIBL_DBL_PHISH 4165 8.24 19.49 1.23 136 XMLngstWrd_00 4162 2.16 3.66 1.23 137 XMBSHREFv2 4028 0.79 0.15 1.19 138 RCVD_IN_MSPIKE_H5 4000 0.79 0.17 1.18 139 RELAYCOUNTRY_CA 3987 3.87 8.21 1.17 140 XMStockSpam_06 3918 1.22 1.33 1.15 141 XMLngstWrd_01 3907 2.10 3.63 1.15 142 XMLngstWrd_02 3626 1.81 3.01 1.07 143 TooManyTo_004 3549 0.78 0.35 1.04 144 XMLngstWrd_03 3385 1.74 2.93 1.00 145 HTTPS_HTTP_MISMATCH 3372 1.19 1.52 0.99 146 XMBody_95 3326 0.76 0.40 0.98 147 XM_OfRef6 3241 2.99 6.25 0.95 148 T_FILL_THIS_FORM_SHORT 3228 1.86 3.33 0.95 149 XMLngstWrd_04 3206 1.55 2.52 0.94 150 XMCapTrack 3204 0.67 0.23 0.94 151 TR_XM_SpammyWords5 3201 1.81 3.20 0.94 152 SpammyFromTLD_01 3182 1.46 2.30 0.94 153 FROM_GOV_DKIM_AU 3113 0.63 0.17 0.92 154 T_OBFU_PDF_ATTACH 3104 0.59 0.07 0.91 155 RCVD_IN_RP_SAFE 3100 0.76 0.51 0.91 156 XM_ProductURIs 3087 0.84 0.73 0.91 157 XMBdyGiftCard01 3048 0.99 1.15 0.90 158 DKIM_ADSP_CUSTOM_MED 3046 0.85 0.78 0.90 159 XMBody_17 3034 1.75 3.11 0.89 160 XMHTML_After_End 2972 0.87 0.86 0.88 161 TR_XM_SpammyWords2 2966 4.11 9.29 0.87 162 FVGT_m_MULTI_ODD_EMAIL 2944 0.58 0.12 0.87 163 UPPERCASE_75_100 2836 1.46 2.47 0.83 164 XM_UB50 2826 1.66 2.99 0.83 165 HTML_TITLE_SUBJ_DIFF 2814 1.47 2.51 0.83 166 XM_H_Long_From02 2810 0.89 0.99 0.83 167 TooManyTo_005 2802 0.62 0.30 0.82 168 HTML_IMAGE_ONLY_20 2784 0.64 0.34 0.82 169 RCVD_IN_RP_CERTIFIED 2759 0.66 0.42 0.81 170 XMSubNoVowel 2640 0.59 0.29 0.78 171 HTML_TAG_BALANCE_BODY 2638 0.78 0.78 0.78 172 XMPhish30 2616 0.79 0.83 0.77 173 MIME_HEADER_CTYPE_ONLY 2555 5.37 12.77 0.75 174 XMSubMetaI_00 2513 0.76 0.79 0.74 175 URI_TRY_3LD 2489 0.75 0.77 0.73 176 XM_B_COPY_HTML 2477 0.69 0.64 0.73 177 TM2_M_BODY_EMPTY 2423 0.81 0.96 0.71 178 PLING_QUERY 2356 0.59 0.42 0.69 179 TR_MetaPhish_Combo_01 2310 0.65 0.61 0.68 180 XM_H_PHPMailer 2291 0.63 0.57 0.67 181 XM_RXBody 2253 0.57 0.41 0.66 182 XMBrknScrpt_02 2248 0.73 0.85 0.66 183 XMNoVowels 2166 0.54 0.39 0.64 184 T_XMHurry_00 2121 0.91 1.37 0.62 185 TR_XM_Base64_M1 2098 0.73 0.91 0.62 186 RCVD_IN_BL_SPAMCOP_NET 2010 3.07 7.03 0.59 187 SpammyFromTLD_02 1967 1.51 3.01 0.58 188 XM_Body_Dirty_Words_01 1956 0.61 0.66 0.58 189 T_XMDrugObfuBody_00 1956 0.79 1.12 0.58 190 XM_ShortIntro_01 1953 0.46 0.29 0.58 191 XM_B_SpammyWords4 1891 1.09 1.93 0.56 192 XMGenDplmaNmb 1880 0.79 1.17 0.55 193 NML_ADSP_CUSTOM_MED 1842 0.58 0.64 0.54 194 FORGED_GMAIL_RCVD 1835 0.60 0.69 0.54 195 MPART_ALT_DIFF_COUNT 1746 0.63 0.81 0.51 196 TR_XM_Crypto3 1733 6.02 14.86 0.51 197 MISSING_HEADERS 1685 1.62 3.43 0.50 198 XMHTMLBadTable_001 1661 0.54 0.63 0.49 199 T_Symld_Words_02 1642 0.48 0.48 0.48 200 HTML_IMAGE_ONLY_32 1599 0.35 0.15 0.47 ----------------------------------------------------------------------