Email: 508954 Autolearn: 0 AvgScore: 4.21 AvgScanTime: 1.52 sec Spam: 170517 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.65 sec Ham: 338437 Autolearn: 0 AvgScore: -0.57 AvgScanTime: 1.45 sec Time Spent Running SA: 214.41 hours Time Spent Processing Spam: 78.38 hours Time Spent Processing Ham: 136.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 163143 90.08 95.68 87.25 2 DKIM_SIGNED 157206 81.46 92.19 76.05 3 XM_DK_Pass 154288 79.56 90.48 74.06 4 DKIM_VALID 152974 78.75 89.71 73.22 5 XM_B_Unicode 140665 75.46 82.49 71.91 6 RELAYCOUNTRY_US 133712 79.45 78.42 79.98 7 DCC_CHECK 132105 51.92 77.47 39.05 8 XMListUnsubscribeExists 128591 58.90 75.41 50.58 9 XM_B_SpammyWords 122026 55.42 71.56 47.29 10 DKIM_VALID_AU 115523 61.92 67.75 58.98 11 RCVD_IN_MSPIKE_H2 82218 42.30 48.22 39.31 12 XM_DK_Undo_02 76222 19.60 44.70 6.95 13 XM_B_Unicode3 74866 43.55 43.91 43.36 14 BAYES_50 71358 53.27 41.85 59.03 15 XM_B_SpammyWords2 70398 27.23 41.29 20.15 16 LOC_TINY_FONT_1 66848 30.77 39.20 26.53 17 TR_XM_DKIM_Undo 63039 15.43 36.97 4.58 18 FVGT_m_MULTI_ODD 62592 29.89 36.71 26.46 19 DKIM_VALID_EF 61652 31.35 36.16 28.93 20 HTML_FONT_LOW_CONTRAST 58820 30.85 34.50 29.02 21 MIME_HTML_ONLY 55321 24.29 32.44 20.19 22 BAYES_99 55192 14.25 32.37 5.13 23 T_KAM_HTML_FONT_INVALID 52669 24.29 30.89 20.97 24 BAYES_999 42588 11.14 24.98 4.17 25 TR_DCC_Bayes_99 42005 9.63 24.63 2.07 26 DCC_CHECK_NEGATIVE 38377 48.02 22.51 60.88 27 RELAYCOUNTRY_META 37479 10.04 21.98 4.03 28 XM_Body_Dirty_Words 37407 15.86 21.94 12.79 29 XMSubLong 37285 22.52 21.87 22.85 30 T_TM2_M_HEADER_IN_MSG 36827 25.72 21.60 27.79 31 XM_Multi_Part_URI 32565 15.40 19.10 13.54 32 RCVD_IN_MSPIKE_WL 31084 18.58 18.23 18.76 33 TR_XM_SpammyRelay 28888 7.20 16.94 2.29 34 RCVD_IN_MSPIKE_H3 25663 12.57 15.05 11.32 35 BOTNET_IPINHOSTNAME 25103 8.47 14.72 5.32 36 XM_B_Unsub 24587 10.69 14.42 8.81 37 TR_XM_BayesUnsub 23903 9.51 14.02 7.24 38 LOTS_OF_MONEY 21838 8.70 12.81 6.62 39 XM_B_SpammyWords3 20466 6.93 12.00 4.38 40 UNPARSEABLE_RELAY 20064 9.73 11.77 8.70 41 TR_XM_SpammyWords2 19855 4.46 11.64 0.84 42 TR_XM_SpammyWords4 18945 6.72 11.11 4.50 43 MPART_ALT_DIFF 18895 6.95 11.08 4.86 44 RCVD_IN_BL_SPAMCOP_NET 18890 4.20 11.08 0.74 45 RELAYCOUNTRY_CA 18778 4.59 11.01 1.36 46 XMSexyCombo_05 18463 6.29 10.83 4.01 47 TR_XM_SPAMCOP 15488 3.28 9.08 0.35 48 XM_Evil_Numbers_Gen 15454 8.61 9.06 8.38 49 XM_UncommonTLD01 14788 5.58 8.67 4.03 50 FSL_BULK_SIG 14765 6.07 8.66 4.77 51 BAYES_80 14759 5.92 8.66 4.55 52 BOTNET 14289 4.04 8.38 1.86 53 UNTRUSTED_Relay 14081 3.81 8.26 1.57 54 BAYES_60 13946 9.10 8.18 9.57 55 TR_XM_UnparsRelay 11834 3.49 6.94 1.75 56 TR_XM_PhishingBody 11306 4.61 6.63 3.59 57 XMSubMetaSx_00 11174 4.56 6.55 3.56 58 LotsOfNums_01 10872 7.96 6.38 8.76 59 HTML_IMAGE_RATIO_02 10823 6.20 6.35 6.12 60 MIME_HTML_MOSTLY 10477 3.81 6.14 2.64 61 XM_SendGrid 10331 5.67 6.06 5.47 62 MIME_HTML_ONLY_MULTI 10079 3.87 5.91 2.84 63 XM_B_Phish_Phrases 9966 4.94 5.84 4.48 64 TM2_M_VERY_LONG_WORD 9503 2.76 5.57 1.34 65 XM_H_Long_From01 9461 5.74 5.55 5.84 66 BAYES_95 8964 3.62 5.26 2.80 67 XM_B_SpammyTLD 8910 3.29 5.23 2.31 68 RCVD_IN_MSPIKE_BL 8737 2.16 5.12 0.67 69 TR_XM_MSPIKECOMBO 8616 2.13 5.05 0.66 70 T_XMDrugObfuBody_08 8357 2.60 4.90 1.43 71 TooManyTo_001 7895 7.47 4.63 8.91 72 URI_NOVOWEL 7820 2.98 4.59 2.17 73 HTML_IMAGE_RATIO_04 7783 5.58 4.56 6.10 74 XM_B_Investor 7626 2.46 4.47 1.45 75 HTML_MIME_NO_HTML_TAG 7475 2.96 4.38 2.24 76 XMBody_17 7341 1.73 4.31 0.43 77 XM_SPF_SoftFail 7188 2.85 4.22 2.16 78 TR_XM_SpammyWords5 6891 2.26 4.04 1.36 79 T_FILL_THIS_FORM_SHORT 6864 1.91 4.03 0.84 80 XM_DIRTYINTL 6817 1.57 4.00 0.35 81 XM_B_Phish66 6807 2.68 3.99 2.01 82 TR_XM_DK_SendGrid 6791 3.86 3.98 3.80 83 XM_UB50 6737 2.05 3.95 1.09 84 T_XMDrugObfuBody_14 6357 2.40 3.73 1.73 85 TR_XM_SpammyWords3 6288 1.45 3.69 0.33 86 SpammyFromTLD_01 6171 1.68 3.62 0.71 87 HK_RANDOM_REPLYTO 6079 1.26 3.57 0.10 88 XMStrtUSub 5995 4.48 3.52 4.96 89 XM_OfRef6 5985 1.94 3.51 1.15 90 RCVD_IN_VALIDITY_SAFE 5903 4.41 3.46 4.89 91 SpammyFromTLD_02 5779 1.52 3.39 0.57 92 XM_GoogleGroups 5750 1.96 3.37 1.25 93 XMNumbers 5609 3.73 3.29 3.95 94 HTML_IMAGE_RATIO_06 5532 3.70 3.24 3.94 95 TM2_M_URI_OPT_OUT 5335 2.33 3.13 1.94 96 XM_DK_Undo_01 5267 2.00 3.09 1.45 97 XMLngstWrd_00 5266 1.45 3.09 0.63 98 RCVD_IN_VALIDITY_CERTIFIED 5227 3.88 3.07 4.30 99 XMLngstWrd_01 5190 1.38 3.04 0.55 100 URIBL_DBL_SPAM 5110 1.01 3.00 0.01 101 XMLngstWrd_02 5058 1.28 2.97 0.43 102 MIME_QP_LONG_LINE 5056 4.23 2.97 4.87 103 RCVD_IN_MSPIKE_H4 5044 4.98 2.96 5.99 104 XMLngstWrd_03 4923 1.14 2.89 0.26 105 HTML_IMAGE_RATIO_08 4847 2.53 2.84 2.38 106 XMLngstWrd_04 4847 1.07 2.84 0.18 107 USER_IN_DEF_DKIM_WL 4820 9.86 2.83 13.40 108 XMDiploma_00 4808 1.78 2.82 1.26 109 HTML_TITLE_SUBJ_DIFF 4801 0.98 2.82 0.06 110 UPPERCASE_75_100 4743 0.95 2.78 0.03 111 RCVD_IN_MSPIKE_L3 4607 1.19 2.70 0.43 112 RELAYCOUNTRY_IN 4393 0.99 2.58 0.19 113 XM_B_SpammyWords4 4373 1.28 2.56 0.63 114 FROM_EXCESS_BASE64 4358 2.66 2.56 2.71 115 DKIM_INVALID 4232 2.71 2.48 2.83 116 TR_XM_FormFill 4185 0.83 2.45 0.02 117 URI_PHP_REDIR 4148 0.82 2.43 0.00 118 PDS_OTHER_BAD_TLD 3998 0.90 2.34 0.18 119 T_XMHurry_00 3972 1.16 2.33 0.58 120 FONT_INVIS_LONG_LINE 3866 0.80 2.27 0.07 121 SUBJ_ALL_CAPS 3799 1.89 2.23 1.73 122 XM_H_Undi_Recip 3767 0.89 2.21 0.22 123 XM_B_Unsub2 3723 1.83 2.18 1.66 124 XM_B_COVIDMETA 3554 1.11 2.08 0.62 125 XM_CamelCaseFrm001 3496 1.97 2.05 1.94 126 RCVD_IN_VALIDITY_RPBL 3340 0.72 1.96 0.10 127 TR_XM_SB_Phish 3340 1.96 1.96 1.96 128 RCVD_IN_MSPIKE_L5 3325 0.68 1.95 0.03 129 TR_XM_BayesRelay 3227 0.64 1.89 0.00 130 T_TooManySym_01 3190 4.94 1.87 6.49 131 TR_XM_NoHeaderRelay 3178 0.72 1.86 0.14 132 TR_LOTS_OF_MONEY3 3133 0.79 1.84 0.27 133 XMSubPhish11 3131 1.90 1.84 1.93 134 XMSexyCombo_01 3118 0.93 1.83 0.47 135 RCVD_IN_IADB_LISTED 3067 3.72 1.80 4.68 136 MAILING_LIST_MULTI 3024 2.52 1.77 2.90 137 HTTPS_HTTP_MISMATCH 2861 0.96 1.68 0.60 138 XMBdyGiftCard01 2845 1.35 1.67 1.20 139 T_REMOTE_IMAGE 2824 2.84 1.66 3.44 140 XMStockSpam_06 2811 1.66 1.65 1.67 141 ALL_TRUSTED 2746 11.56 1.61 16.57 142 RCVD_IN_IADB_SPF 2715 3.32 1.59 4.19 143 T_XMDrugObfuBody_00 2579 1.08 1.51 0.87 144 RCVD_IN_IADB_DK 2551 2.99 1.50 3.74 145 RCVD_IN_IADB_SENDERID 2533 3.04 1.49 3.83 146 URI_HEX 2460 1.31 1.44 1.24 147 BAYES_40 2445 3.50 1.43 4.54 148 XMGenDplmaNmb 2439 0.83 1.43 0.52 149 RELAYCOUNTRY_AU 2412 0.70 1.41 0.34 150 XM_UB99 2410 0.48 1.41 0.01 151 LongTLD 2334 0.73 1.37 0.40 152 XM_URI_RBL 2327 0.56 1.36 0.15 153 TR_Mismatch_TLD_02 2278 0.50 1.34 0.08 154 TR_XM_Base64_M1 2265 0.99 1.33 0.82 155 XM_Body_Dirty_Words_01 2262 0.64 1.33 0.30 156 TR_XM_PHPDW 2244 0.79 1.32 0.52 157 TR_XM_PHPForged 2151 0.74 1.26 0.47 158 XM_H_Long_From02 2142 1.11 1.26 1.04 159 FROM_SUSPICIOUS_NTLD 2122 0.45 1.24 0.04 160 TR_XM_FormFill2 2120 0.73 1.24 0.47 161 XM_H_PHPOS 2108 0.72 1.24 0.46 162 XMHTML_After_End 1993 0.98 1.17 0.88 163 XM_UB60 1977 0.45 1.16 0.09 164 TR_XM_MSPIKECOMBO2 1972 0.41 1.16 0.03 165 XM_B_SEO 1962 0.47 1.15 0.13 166 MPART_ALT_DIFF_COUNT 1959 0.75 1.15 0.55 167 URIBL_BLACK 1957 0.41 1.15 0.04 168 FROM_SUSPICIOUS_NTLD_FP 1916 0.40 1.12 0.04 169 XMPhish30 1914 0.82 1.12 0.67 170 TR_XM_Undi_Recip5 1889 0.38 1.11 0.01 171 TR_XM_COVIDMETA1 1874 0.50 1.10 0.20 172 HTML_TAG_BALANCE_BODY 1842 0.83 1.08 0.70 173 KHOP_HELO_FCRDNS 1785 1.08 1.05 1.10 174 XM_ProductURIs 1772 0.70 1.04 0.53 175 PLING_QUERY 1739 1.01 1.02 1.01 176 SHOPIFY_IMG_NOT_RCVD_SFY 1733 0.50 1.02 0.24 177 TR_XM_InvalidRelay 1731 0.35 1.02 0.02 178 TR_XM_Undi_Recip2 1726 0.36 1.01 0.03 179 XM_UB999 1724 0.34 1.01 0.00 180 XMSubMetaSSx_00 1724 0.43 1.01 0.14 181 BAYES_20 1713 2.55 1.00 3.33 182 XMReplyNow 1701 0.48 1.00 0.22 183 TR_XM_COVIDMETA4 1692 0.43 0.99 0.15 184 XMBrknScrpt_02 1683 0.79 0.99 0.70 185 TR_MetaPhish_Combo_01 1660 0.72 0.97 0.59 186 TR_XM_Undi_RecipCombo2 1638 0.33 0.96 0.01 187 UNDISC_MONEY 1627 0.32 0.95 0.00 188 XM_B_DNDMA 1618 0.60 0.95 0.42 189 XMSubMetaI_00 1594 0.75 0.93 0.66 190 XM_S_SpammyWords 1576 0.49 0.92 0.27 191 TR_XM_Spammywords 1576 0.49 0.92 0.27 192 XM_B_COPY_HTML 1557 0.90 0.91 0.89 193 BOTNET_NORDNS 1541 0.31 0.90 0.01 194 TR_XM_SEO4 1535 0.35 0.90 0.07 195 TR_XM_MaxSPIKE 1529 0.31 0.90 0.02 196 XMPhish14 1517 0.65 0.89 0.53 197 TM2_M_OBFU_COMMENT 1506 0.41 0.88 0.18 198 RELAYCOUNTRY_FR 1489 0.48 0.87 0.28 199 XM_B_REG_HTML 1461 0.51 0.86 0.33 200 T_Symld_Words_02 1458 0.62 0.86 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 295303 90.08 95.68 87.25 2 RELAYCOUNTRY_US 270673 79.45 78.42 79.98 3 DKIM_SIGNED 257393 81.46 92.19 76.05 4 XM_DK_Pass 250657 79.56 90.48 74.06 5 DKIM_VALID 247814 78.75 89.71 73.22 6 XM_B_Unicode 243382 75.46 82.49 71.91 7 DCC_CHECK_NEGATIVE 206047 48.02 22.51 60.88 8 BAYES_50 199781 53.27 41.85 59.03 9 DKIM_VALID_AU 199620 61.92 67.75 58.98 10 XMListUnsubscribeExists 171171 58.90 75.41 50.58 11 XM_B_SpammyWords 160057 55.42 71.56 47.29 12 XM_B_Unicode3 146760 43.55 43.91 43.36 13 RCVD_IN_MSPIKE_H2 133053 42.30 48.22 39.31 14 DCC_CHECK 132155 51.92 77.47 39.05 15 HTML_FONT_LOW_CONTRAST 98217 30.85 34.50 29.02 16 DKIM_VALID_EF 97897 31.35 36.16 28.93 17 T_TM2_M_HEADER_IN_MSG 94054 25.72 21.60 27.79 18 LOC_TINY_FONT_1 89781 30.77 39.20 26.53 19 FVGT_m_MULTI_ODD 89535 29.89 36.71 26.46 20 XMSubLong 77325 22.52 21.87 22.85 21 T_KAM_HTML_FONT_INVALID 70967 24.29 30.89 20.97 22 MIME_HTML_ONLY 68314 24.29 32.44 20.19 23 XM_B_SpammyWords2 68206 27.23 41.29 20.15 24 RCVD_IN_MSPIKE_WL 63474 18.58 18.23 18.76 25 ALL_TRUSTED 56094 11.56 1.61 16.57 26 XM_Multi_Part_URI 45816 15.40 19.10 13.54 27 USER_IN_DEF_DKIM_WL 45346 9.86 2.83 13.40 28 XM_Body_Dirty_Words 43303 15.86 21.94 12.79 29 RCVD_IN_MSPIKE_H3 38319 12.57 15.05 11.32 30 XM_DKIMWhitelistDomains 33135 6.53 0.07 9.79 31 BAYES_60 32372 9.10 8.18 9.57 32 BAYES_00 30553 6.23 0.68 9.03 33 TooManyTo_001 30144 7.47 4.63 8.91 34 XM_B_Unsub 29818 10.69 14.42 8.81 35 LotsOfNums_01 29662 7.96 6.38 8.76 36 UNPARSEABLE_RELAY 29440 9.73 11.77 8.70 37 XM_Evil_Numbers_Gen 28370 8.61 9.06 8.38 38 TR_XM_BayesUnsub 24508 9.51 14.02 7.24 39 XM_DK_Undo_02 23513 19.60 44.70 6.95 40 IN_ZIMBRA_NJ_WHITELIST 23148 4.58 0.09 6.84 41 LOTS_OF_MONEY 22420 8.70 12.81 6.62 42 T_TooManySym_01 21977 4.94 1.87 6.49 43 TR_XM_DK_Bayes 21299 4.35 0.50 6.29 44 TR_XM_DK_Bayes1 20974 4.29 0.50 6.20 45 HTML_IMAGE_RATIO_02 20729 6.20 6.35 6.12 46 HTML_IMAGE_RATIO_04 20639 5.58 4.56 6.10 47 RCVD_IN_MSPIKE_H4 20288 4.98 2.96 5.99 48 XM_H_Long_From01 19749 5.74 5.55 5.84 49 TR_XM_DK_Bayes2 18813 3.84 0.41 5.56 50 XM_SendGrid 18511 5.67 6.06 5.47 51 BOTNET_IPINHOSTNAME 18019 8.47 14.72 5.32 52 BAYES_99 17356 14.25 32.37 5.13 53 XMStrtUSub 16803 4.48 3.52 4.96 54 RCVD_IN_VALIDITY_SAFE 16535 4.41 3.46 4.89 55 MIME_QP_LONG_LINE 16494 4.23 2.97 4.87 56 MPART_ALT_DIFF 16461 6.95 11.08 4.86 57 XM_PDF 16390 3.40 0.53 4.84 58 FSL_BULK_SIG 16129 6.07 8.66 4.77 59 RCVD_IN_IADB_LISTED 15844 3.72 1.80 4.68 60 TR_XM_DKIM_Undo 15491 15.43 36.97 4.58 61 BAYES_80 15385 5.92 8.66 4.55 62 BAYES_40 15363 3.50 1.43 4.54 63 TR_XM_SpammyWords4 15232 6.72 11.11 4.50 64 XM_B_Phish_Phrases 15161 4.94 5.84 4.48 65 XM_B_SpammyWords3 14810 6.93 12.00 4.38 66 RCVD_IN_VALIDITY_CERTIFIED 14545 3.88 3.07 4.30 67 RCVD_IN_IADB_SPF 14183 3.32 1.59 4.19 68 BAYES_999 14119 11.14 24.98 4.17 69 T_TooManySym_02 14074 2.96 0.58 4.16 70 XM_UncommonTLD01 13631 5.58 8.67 4.03 71 RELAYCOUNTRY_META 13623 10.04 21.98 4.03 72 XMSexyCombo_05 13559 6.29 10.83 4.01 73 XMNumbers 13380 3.73 3.29 3.95 74 HTML_IMAGE_RATIO_06 13320 3.70 3.24 3.94 75 RCVD_IN_IADB_SENDERID 12958 3.04 1.49 3.83 76 TR_XM_DK_SendGrid 12859 3.86 3.98 3.80 77 RCVD_IN_IADB_DK 12661 2.99 1.50 3.74 78 TR_XM_PhishingBody 12143 4.61 6.63 3.59 79 XMSubMetaSx_00 12053 4.56 6.55 3.56 80 T_REMOTE_IMAGE 11642 2.84 1.66 3.44 81 BAYES_20 11280 2.55 1.00 3.33 82 MAILING_LIST_MULTI 9806 2.52 1.77 2.90 83 MIME_HTML_ONLY_MULTI 9623 3.87 5.91 2.84 84 DKIM_INVALID 9579 2.71 2.48 2.83 85 BAYES_95 9484 3.62 5.26 2.80 86 RCVD_IN_IADB_VOUCHED 9263 2.09 0.81 2.74 87 FROM_EXCESS_BASE64 9184 2.66 2.56 2.71 88 MIME_HTML_MOSTLY 8938 3.81 6.14 2.64 89 HTML_IMAGE_RATIO_08 8048 2.53 2.84 2.38 90 XM_B_SpammyTLD 7821 3.29 5.23 2.31 91 TR_XM_SpammyRelay 7758 7.20 16.94 2.29 92 HTML_MIME_NO_HTML_TAG 7568 2.96 4.38 2.24 93 URI_NOVOWEL 7340 2.98 4.59 2.17 94 XM_SPF_SoftFail 7295 2.85 4.22 2.16 95 XM_H_Trusted_IP 7104 1.40 0.00 2.10 96 TR_DCC_Bayes_99 7008 9.63 24.63 2.07 97 INVALID_MSGID 6983 1.41 0.12 2.06 98 ANY_BOUNCE_MESSAGE 6873 1.55 0.60 2.03 99 BOUNCE_MESSAGE 6873 1.55 0.60 2.03 100 BAYES_05 6862 1.54 0.57 2.03 101 XM_B_Phish66 6808 2.68 3.99 2.01 102 TR_XM_SB_Phish 6642 1.96 1.96 1.96 103 TooManyTo_002 6624 1.49 0.56 1.96 104 XM_CamelCaseFrm001 6555 1.97 2.05 1.94 105 TM2_M_URI_OPT_OUT 6549 2.33 3.13 1.94 106 XMSubPhish11 6522 1.90 1.84 1.93 107 MSGID_NOFQDN1 6518 1.29 0.02 1.93 108 BOTNET 6292 4.04 8.38 1.86 109 IN_HORDE_ADDRESS_BOOK 6258 1.26 0.10 1.85 110 HTML_FONT_FACE_BAD 5939 1.42 0.74 1.75 111 TO_MALFORMED 5925 1.17 0.01 1.75 112 RCVD_IN_IADB_OPTIN 5914 1.33 0.50 1.75 113 TR_XM_UnparsRelay 5910 3.49 6.94 1.75 114 T_XMDrugObfuBody_14 5849 2.40 3.73 1.73 115 SUBJ_ALL_CAPS 5843 1.89 2.23 1.73 116 TVD_RCVD_IP 5784 1.21 0.22 1.71 117 XMStockSpam_06 5645 1.66 1.65 1.67 118 XM_B_Unsub2 5602 1.83 2.18 1.66 119 T_TooManySym_03 5510 1.16 0.23 1.63 120 UNTRUSTED_Relay 5325 3.81 8.26 1.57 121 TVD_SPACE_RATIO 5069 1.02 0.07 1.50 122 XM_B_Investor 4916 2.46 4.47 1.45 123 XM_DK_Undo_01 4904 2.00 3.09 1.45 124 RCVD_IN_MSPIKE_H5 4867 1.03 0.22 1.44 125 HELO_NODOT 4857 1.12 0.51 1.44 126 T_XMDrugObfuBody_08 4855 2.60 4.90 1.43 127 HELO_NO_DOMAIN 4851 1.12 0.51 1.43 128 XMGappySubj_01 4723 1.02 0.28 1.40 129 XMBSHREFv2 4638 1.05 0.40 1.37 130 RELAYCOUNTRY_CA 4599 4.59 11.01 1.36 131 TR_XM_SpammyWords5 4586 2.26 4.04 1.36 132 TM2_M_VERY_LONG_WORD 4532 2.76 5.57 1.34 133 TR_Symld_Words 4489 1.15 0.79 1.33 134 TooManyTo_003 4380 1.00 0.42 1.29 135 XMDiploma_00 4250 1.78 2.82 1.26 136 XM_GoogleGroups 4244 1.96 3.37 1.25 137 URI_HEX 4198 1.31 1.44 1.24 138 XMBdyGiftCard01 4045 1.35 1.67 1.20 139 FROM_GOV_DKIM_AU 4007 0.83 0.12 1.18 140 XMBody_95 3959 0.82 0.13 1.17 141 XM_OfRef6 3901 1.94 3.51 1.15 142 SHORT_URI_3 3859 0.88 0.38 1.14 143 KHOP_HELO_FCRDNS 3732 1.08 1.05 1.10 144 XM_UB50 3702 2.05 3.95 1.09 145 XM_H_Long_From02 3515 1.11 1.26 1.04 146 PLING_QUERY 3413 1.01 1.02 1.01 147 XMCapTrack 3411 0.77 0.29 1.01 148 RCVD_IN_RP_SAFE 3229 0.87 0.71 0.95 149 TooManyTo_004 3103 0.73 0.37 0.92 150 DKIM_ADSP_CUSTOM_MED 3094 0.80 0.58 0.91 151 XM_B_COPY_HTML 3021 0.90 0.91 0.89 152 XMHTML_After_End 2979 0.98 1.17 0.88 153 FVGT_m_MULTI_ODD_EMAIL 2974 0.62 0.11 0.88 154 XMSubNoVowel 2950 0.86 0.83 0.87 155 T_XMDrugObfuBody_00 2930 1.08 1.51 0.87 156 RCVD_IN_RP_CERTIFIED 2913 0.77 0.59 0.86 157 TR_XM_SpammyWords2 2857 4.46 11.64 0.84 158 T_FILL_THIS_FORM_SHORT 2848 1.91 4.03 0.84 159 HTML_IMAGE_ONLY_20 2826 0.67 0.34 0.84 160 TR_XM_Base64_M1 2766 0.99 1.33 0.82 161 RCVD_IN_BL_SPAMCOP_NET 2495 4.20 11.08 0.74 162 TooManyTo_005 2435 0.59 0.34 0.72 163 SpammyFromTLD_01 2401 1.68 3.62 0.71 164 XMBrknScrpt_02 2360 0.79 0.99 0.70 165 HTML_TAG_BALANCE_BODY 2360 0.83 1.08 0.70 166 RCVD_IN_MSPIKE_BL 2270 2.16 5.12 0.67 167 XMSubMetaSxObfu_02 2268 0.61 0.50 0.67 168 XMPhish30 2266 0.82 1.12 0.67 169 XMSubMetaI_00 2237 0.75 0.93 0.66 170 TR_XM_MSPIKECOMBO 2217 2.13 5.05 0.66 171 XM_B_SpammyWords4 2140 1.28 2.56 0.63 172 XMLngstWrd_00 2134 1.45 3.09 0.63 173 XM_B_COVIDMETA 2106 1.11 2.08 0.62 174 HTTPS_HTTP_MISMATCH 2032 0.96 1.68 0.60 175 TR_MetaPhish_Combo_01 2004 0.72 0.97 0.59 176 XM_H_PHPMailer 1981 0.63 0.70 0.59 177 NML_ADSP_CUSTOM_MED 1953 0.52 0.42 0.58 178 T_XMHurry_00 1953 1.16 2.33 0.58 179 SpammyFromTLD_02 1934 1.52 3.39 0.57 180 XMNoVowels 1917 0.51 0.41 0.57 181 T_OBFU_PDF_ATTACH 1916 0.40 0.06 0.57 182 RELAYCOUNTRY_GB 1908 0.60 0.67 0.56 183 FORGED_GMAIL_RCVD 1883 0.52 0.44 0.56 184 XM_ShortIntro_01 1874 0.54 0.52 0.55 185 MPART_ALT_DIFF_COUNT 1869 0.75 1.15 0.55 186 XMLngstWrd_01 1850 1.38 3.04 0.55 187 XMOemUri 1842 0.42 0.18 0.54 188 XM_ProductURIs 1802 0.70 1.04 0.53 189 URI_TRY_3LD 1793 0.62 0.80 0.53 190 XMPhish14 1785 0.65 0.89 0.53 191 XMGenDplmaNmb 1766 0.83 1.43 0.52 192 TR_XM_PHPDW 1759 0.79 1.32 0.52 193 T_Symld_Words_02 1694 0.62 0.86 0.50 194 RCVD_IN_PSBL 1692 0.58 0.73 0.50 195 FILL_THIS_FORM 1600 0.51 0.59 0.47 196 XMSexyCombo_01 1599 0.93 1.83 0.47 197 TR_XM_PHPForged 1599 0.74 1.26 0.47 198 TR_XM_FormFill2 1588 0.73 1.24 0.47 199 XM_H_PHPOS 1572 0.72 1.24 0.46 200 DIET_1 1544 0.59 0.85 0.46 ----------------------------------------------------------------------