Email: 667328 Autolearn: 0 AvgScore: 3.69 AvgScanTime: 1.18 sec Spam: 193462 Autolearn: 0 AvgScore: 14.34 AvgScanTime: 1.40 sec Ham: 473866 Autolearn: 0 AvgScore: -0.65 AvgScanTime: 1.09 sec Time Spent Running SA: 218.80 hours Time Spent Processing Spam: 75.30 hours Time Spent Processing Ham: 143.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 185259 90.24 95.76 87.99 2 DKIM_SIGNED 149663 71.37 77.36 68.92 3 DCC_CHECK 148468 46.37 76.74 33.98 4 XM_DK_Pass 146537 70.08 75.74 67.77 5 DKIM_VALID 142507 68.06 73.66 65.77 6 XM_B_Unicode 137198 70.75 70.92 70.68 7 RELAYCOUNTRY_US 130422 73.48 67.41 75.95 8 XMListUnsubscribeExists 119738 48.24 61.89 42.67 9 XM_B_SpammyWords 119713 47.72 61.88 41.95 10 DKIM_VALID_AU 111673 52.29 57.72 50.08 11 XM_DK_Undo_02 84117 17.43 43.48 6.80 12 XM_B_Unicode3 76649 41.96 39.62 42.91 13 MIME_HTML_ONLY 71280 23.95 36.84 18.68 14 BAYES_99 69751 14.23 36.05 5.32 15 BAYES_50 69634 53.27 35.99 60.32 16 XM_B_SpammyWords2 66535 21.75 34.39 16.58 17 LOC_TINY_FONT_1 66248 29.81 34.24 28.01 18 HTML_FONT_LOW_CONTRAST 61531 31.64 31.81 31.57 19 TR_XM_DKIM_Undo 61202 12.44 31.64 4.61 20 TR_DCC_Bayes_99 53490 9.56 27.65 2.18 21 DKIM_VALID_EF 53468 28.09 27.64 28.28 22 BAYES_999 52656 10.86 27.22 4.18 23 XMSubLong 49015 21.48 25.34 19.91 24 RELAYCOUNTRY_META 48462 10.76 25.05 4.93 25 FVGT_m_MULTI_ODD 47263 22.54 24.43 21.76 26 T_KAM_HTML_FONT_INVALID 46802 18.61 24.19 16.33 27 XM_Body_Dirty_Words 45426 14.37 23.48 10.66 28 XM_UncommonTLD01 44060 8.94 22.77 3.29 29 UNTRUSTED_Relay 43390 7.77 22.43 1.79 30 DCC_CHECK_NEGATIVE 42004 51.81 21.71 64.09 31 RCVD_IN_MSPIKE_WL 40497 27.84 20.93 30.65 32 RCVD_IN_MSPIKE_H2 38421 20.37 19.86 20.58 33 T_TM2_M_HEADER_IN_MSG 35640 26.20 18.42 29.37 34 FSL_BULK_SIG 34139 8.76 17.65 5.13 35 BOTNET 31616 5.74 16.34 1.42 36 XM_B_Unsub 28611 10.62 14.79 8.92 37 XM_Multi_Part_URI 27022 11.27 13.97 10.17 38 XMSexyCombo_05 24801 6.07 12.82 3.31 39 SpammyFromTLD_02 23734 3.70 12.27 0.21 40 TR_XM_SpammyWords2 23008 3.99 11.89 0.77 41 BOTNET_IPINHOSTNAME 22635 6.45 11.70 4.30 42 XM_B_SpammyWords3 21961 5.95 11.35 3.75 43 XM_Evil_Numbers_Gen 20957 8.51 10.83 7.56 44 RCVD_IN_MSPIKE_H3 19760 13.67 10.21 15.08 45 RCVD_IN_MSPIKE_H4 18688 11.18 9.66 11.80 46 MPART_ALT_DIFF 18422 6.04 9.52 4.62 47 BAYES_80 18342 6.02 9.48 4.61 48 KHOP_HELO_FCRDNS 18117 4.07 9.36 1.90 49 UNPARSEABLE_RELAY 17431 7.42 9.01 6.77 50 LOTS_OF_MONEY 17176 6.72 8.88 5.83 51 TR_XM_UnparsRelay 17101 6.65 8.84 5.76 52 BODY_URI_ONLY 16878 2.53 8.72 0.00 53 HTML_IMAGE_ONLY_12 16084 2.57 8.31 0.23 54 BAYES_60 15768 8.37 8.15 8.45 55 HTML_SHORT_LINK_IMG_1 15444 2.32 7.98 0.01 56 TooManyTo_001 15372 8.53 7.95 8.76 57 LotsOfNums_01 15157 7.77 7.83 7.75 58 RCVD_IN_BL_SPAMCOP_NET 14898 2.75 7.70 0.73 59 MIME_HTML_MOSTLY 14831 3.85 7.67 2.30 60 TR_XM_SpammyWords4 14598 4.88 7.55 3.79 61 HTML_IMAGE_RATIO_02 14472 6.69 7.48 6.37 62 XM_B_Phish_Phrases 14225 5.54 7.35 4.80 63 XM_UB50 12985 2.81 6.71 1.22 64 BAYES_95 12515 3.95 6.47 2.92 65 SpammyFromTLD_01 12473 2.41 6.45 0.75 66 XM_UB99 12369 1.86 6.39 0.01 67 XM_SendGrid 12008 6.19 6.21 6.18 68 TR_XM_PhishingBody 11550 3.90 5.97 3.05 69 XM_H_Long_From01 11369 5.22 5.88 4.95 70 XMSubMetaSx_00 11368 4.22 5.88 3.55 71 XMNumbers 11325 3.92 5.85 3.13 72 RCVD_IN_MSPIKE_BL 10698 1.73 5.53 0.17 73 TR_XM_MSPIKECOMBO 10329 1.66 5.34 0.16 74 XM_DIRTYINTL 10283 1.85 5.32 0.44 75 T_REMOTE_IMAGE 10010 4.03 5.17 3.56 76 RELAYCOUNTRY_CA 9921 2.39 5.13 1.27 77 HTML_IMAGE_RATIO_04 9662 5.19 4.99 5.27 78 XM_B_SpammyTLD 8930 2.75 4.62 1.99 79 RCVD_IN_RP_SAFE 8696 6.16 4.49 6.83 80 HTML_FONT_SIZE_LARGE 7842 1.26 4.05 0.12 81 RCVD_IN_RP_RNBL 7836 1.20 4.05 0.03 82 URIBL_DBL_SPAM 7804 1.18 4.03 0.01 83 HTML_IMAGE_RATIO_06 7798 3.45 4.03 3.22 84 HTML_MIME_NO_HTML_TAG 7582 2.70 3.92 2.20 85 TR_XM_DK_SendGrid 7190 3.90 3.72 3.97 86 XM_UB999 7190 1.08 3.72 0.00 87 DKIM_INVALID 7156 3.31 3.70 3.15 88 XMDiploma_00 7012 2.44 3.62 1.96 89 RELAYCOUNTRY_FR 6981 1.25 3.61 0.29 90 TM2_M_URI_OPT_OUT 6934 2.69 3.58 2.33 91 RCVD_IN_RP_CERTIFIED 6753 5.48 3.49 6.29 92 XM_UB60 6442 1.06 3.33 0.13 93 XM_SPF_SoftFail 6419 2.21 3.32 1.76 94 XMBdyGiftCard01 6410 1.32 3.31 0.51 95 RCVD_IN_MSPIKE_L5 6380 1.01 3.30 0.08 96 ALL_TRUSTED 6336 15.64 3.28 20.69 97 XM_B_Phish66 5906 2.37 3.05 2.09 98 XM_B_Unsub2 5850 1.90 3.02 1.43 99 XMStrtUSub 5810 4.85 3.00 5.60 100 XM_UB80 5713 0.89 2.95 0.04 101 TR_XM_SpammyWords5 5654 1.78 2.92 1.31 102 FROM_EXCESS_BASE64 5541 2.64 2.86 2.56 103 MIME_QP_LONG_LINE 5432 4.31 2.81 4.92 104 HTML_IMAGE_RATIO_08 5378 2.19 2.78 1.95 105 URI_HEX 5322 1.77 2.75 1.37 106 TR_XM_SpammyWords3 5259 0.86 2.72 0.10 107 MIME_HTML_ONLY_MULTI 5255 2.82 2.72 2.86 108 RELAYCOUNTRY_DE 5172 1.16 2.67 0.54 109 XM_JunkDunk 5118 0.77 2.65 0.00 110 TM2_M_VERY_LONG_WORD 5077 1.64 2.62 1.24 111 FROM_SUSPICIOUS_NTLD 5021 0.80 2.60 0.06 112 FROM_SUSPICIOUS_NTLD_FP 4929 0.78 2.55 0.06 113 XM_UB95 4873 0.74 2.52 0.02 114 THIS_AD 4871 1.05 2.52 0.44 115 XM_B_COVIDMETA 4839 1.12 2.50 0.55 116 RELAYCOUNTRY_IN 4796 0.80 2.48 0.11 117 HTML_FONT_SIZE_HUGE 4794 0.82 2.48 0.14 118 T_TooManySym_01 4779 4.23 2.47 4.95 119 TR_Sbj_FN_Bdy 4739 0.83 2.45 0.17 120 RCVD_IN_PSBL 4664 0.73 2.41 0.04 121 XMSubEmpty 4550 0.85 2.35 0.23 122 XM_OfRef6 4541 1.33 2.35 0.91 123 URIBL_SBL_A 4521 1.08 2.34 0.57 124 T_XMDrugObfuBody_08 4469 1.72 2.31 1.48 125 MAILING_LIST_MULTI 4455 2.71 2.30 2.88 126 BODY_EMPTY 4404 0.69 2.28 0.05 127 PDS_OTHER_BAD_TLD 4403 0.99 2.28 0.47 128 T_XMDrugObfuBody_14 4395 1.98 2.27 1.86 129 MISSING_SUBJECT 4335 0.70 2.24 0.07 130 XMNoSubject 4335 0.70 2.24 0.07 131 XM_DK_Undo_01 4269 1.68 2.21 1.47 132 XMBrknScrpt_02 4173 1.00 2.16 0.53 133 XM_CamelCaseFrm001 4081 1.74 2.11 1.58 134 XMGenDplmaNmb 4052 1.30 2.09 0.98 135 RELAYCOUNTRY_GB 4030 1.39 2.08 1.10 136 XMSexyCombo_01 3921 1.15 2.03 0.79 137 DIET_1 3676 0.90 1.90 0.50 138 RCVD_IN_IADB_LISTED 3628 3.80 1.88 4.58 139 XMSubMetaI_00 3603 1.09 1.86 0.78 140 TR_XM_BayesRelay 3599 0.56 1.86 0.03 141 TR_XM_PHPDW 3598 0.80 1.86 0.36 142 BOTNET_NORDNS 3572 0.55 1.85 0.02 143 TooManyTo_002 3510 2.33 1.81 2.54 144 TR_XM_SB_Phish 3488 1.97 1.80 2.04 145 XM_URI_RBL 3438 0.61 1.78 0.13 146 DATE_IN_PAST_12_24 3436 0.58 1.78 0.09 147 XM_B_SpammyWords4 3378 0.85 1.75 0.48 148 TR_XM_PHPForged 3370 0.71 1.74 0.29 149 XMSubPhish11 3344 1.93 1.73 2.02 150 TR_XM_FormFill2 3328 0.71 1.72 0.29 151 XM_H_PHPOS 3312 0.70 1.71 0.28 152 URI_NOVOWEL 3229 2.18 1.67 2.39 153 NO_DNS_FOR_FROM 3185 0.62 1.65 0.21 154 RCVD_IN_IADB_SPF 3180 3.30 1.64 3.98 155 T_FILL_THIS_FORM_SHORT 3143 1.08 1.62 0.85 156 RCVD_IN_IADB_DK 2956 2.90 1.53 3.45 157 TR_XM_MaxWHORU 2954 0.58 1.53 0.19 158 RCVD_IN_IADB_SENDERID 2952 2.98 1.53 3.57 159 TooManyTo_003 2926 1.65 1.51 1.70 160 TR_XM_INV_DKIM 2890 0.48 1.49 0.07 161 TR_Mismatch_TLD_02 2872 0.49 1.48 0.08 162 T_XMHurry_00 2794 0.63 1.44 0.30 163 TR_XM_COVIDMETA4 2722 0.64 1.41 0.32 164 URIBL_BLACK 2658 0.42 1.37 0.03 165 XMStockSpam_06 2647 1.20 1.37 1.13 166 XM_Body_Dirty_Words_01 2591 0.49 1.34 0.15 167 BAYES_40 2577 4.23 1.33 5.41 168 SUBJ_ALL_CAPS 2511 1.37 1.30 1.41 169 DKIM_ADSP_NXDOMAIN 2498 0.52 1.29 0.20 170 TR_Symld_Words 2437 1.37 1.26 1.41 171 TooManyTo_004 2435 1.26 1.26 1.26 172 T_XMDrugObfuBody_00 2423 0.68 1.25 0.45 173 XMPhish08 2417 0.54 1.25 0.25 174 MISSING_HEADERS 2351 0.68 1.22 0.46 175 XM_BadFromFormat 2326 0.48 1.20 0.18 176 RCVD_IN_MSPIKE_L3 2297 0.39 1.19 0.07 177 TR_XM_COVIDMETA1 2196 0.57 1.14 0.33 178 XMHTML_After_End 2189 1.04 1.13 1.00 179 TR_XM_RelayPhish 2105 0.39 1.09 0.10 180 HTTPS_HTTP_MISMATCH 2090 0.94 1.08 0.88 181 XMOemUri 2076 0.49 1.07 0.25 182 RELAYCOUNTRY_RU 2050 0.33 1.06 0.03 183 XM_H_Long_From02 2049 0.98 1.06 0.95 184 RCVD_IN_MSPIKE_H5 2049 2.98 1.06 3.77 185 NORDNS_LOW_CONTRAST 2046 0.31 1.06 0.00 186 URI_TRY_3LD 2032 1.13 1.05 1.16 187 NUMERIC_HTTP_ADDR 2014 0.53 1.04 0.32 188 BAYES_20 1995 2.38 1.03 2.93 189 TooManyTo_005 1981 1.03 1.02 1.03 190 XMBody_17 1943 0.53 1.00 0.34 191 DKIM_ADSP_CUSTOM_MED 1927 0.98 1.00 0.97 192 URI_PHP_REDIR 1914 0.29 0.99 0.00 193 XMSubMetaSxObfu_03 1907 0.95 0.99 0.94 194 RELAYCOUNTRY_CH 1888 0.31 0.98 0.04 195 TR_XM_MaxBayes 1887 0.29 0.98 0.01 196 XM_PDF 1883 3.87 0.97 5.06 197 RDNS_DYNAMIC 1834 0.62 0.95 0.49 198 THIS_IS_ADV_SUSP_NTLD 1832 0.27 0.95 0.00 199 TR_LOTS_OF_MONEY3 1825 0.39 0.94 0.16 200 ANY_BOUNCE_MESSAGE 1804 2.14 0.93 2.64 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 416938 90.24 95.76 87.99 2 RELAYCOUNTRY_US 359910 73.48 67.41 75.95 3 XM_B_Unicode 334950 70.75 70.92 70.68 4 DKIM_SIGNED 326599 71.37 77.36 68.92 5 XM_DK_Pass 321130 70.08 75.74 67.77 6 DKIM_VALID 311683 68.06 73.66 65.77 7 DCC_CHECK_NEGATIVE 303706 51.81 21.71 64.09 8 BAYES_50 285823 53.27 35.99 60.32 9 DKIM_VALID_AU 237301 52.29 57.72 50.08 10 XM_B_Unicode3 203330 41.96 39.62 42.91 11 XMListUnsubscribeExists 202195 48.24 61.89 42.67 12 XM_B_SpammyWords 198764 47.72 61.88 41.95 13 DCC_CHECK 160999 46.37 76.74 33.98 14 HTML_FONT_LOW_CONTRAST 149599 31.64 31.81 31.57 15 RCVD_IN_MSPIKE_WL 145261 27.84 20.93 30.65 16 T_TM2_M_HEADER_IN_MSG 139168 26.20 18.42 29.37 17 DKIM_VALID_EF 133998 28.09 27.64 28.28 18 LOC_TINY_FONT_1 132711 29.81 34.24 28.01 19 FVGT_m_MULTI_ODD 103122 22.54 24.43 21.76 20 ALL_TRUSTED 98056 15.64 3.28 20.69 21 RCVD_IN_MSPIKE_H2 97535 20.37 19.86 20.58 22 XMSubLong 94329 21.48 25.34 19.91 23 MIME_HTML_ONLY 88526 23.95 36.84 18.68 24 XM_B_SpammyWords2 78589 21.75 34.39 16.58 25 T_KAM_HTML_FONT_INVALID 77390 18.61 24.19 16.33 26 RCVD_IN_MSPIKE_H3 71482 13.67 10.21 15.08 27 RCVD_IN_MSPIKE_H4 55929 11.18 9.66 11.80 28 XM_Body_Dirty_Words 50494 14.37 23.48 10.66 29 XM_Multi_Part_URI 48201 11.27 13.97 10.17 30 XM_DKIMWhitelistDomains 42374 6.36 0.03 8.94 31 XM_B_Unsub 42270 10.62 14.79 8.92 32 TooManyTo_001 41524 8.53 7.95 8.76 33 BAYES_60 40062 8.37 8.15 8.45 34 BAYES_00 39468 6.17 0.88 8.33 35 LotsOfNums_01 36706 7.77 7.83 7.75 36 XM_Evil_Numbers_Gen 35829 8.51 10.83 7.56 37 RCVD_IN_RP_SAFE 32384 6.16 4.49 6.83 38 XM_DK_Undo_02 32224 17.43 43.48 6.80 39 UNPARSEABLE_RELAY 32097 7.42 9.01 6.77 40 HTML_IMAGE_RATIO_02 30199 6.69 7.48 6.37 41 RCVD_IN_RP_CERTIFIED 29784 5.48 3.49 6.29 42 XM_SendGrid 29279 6.19 6.21 6.18 43 LOTS_OF_MONEY 27643 6.72 8.88 5.83 44 TR_XM_UnparsRelay 27272 6.65 8.84 5.76 45 XMStrtUSub 26560 4.85 3.00 5.60 46 TR_XM_DK_Bayes 26040 4.09 0.64 5.50 47 BAYES_40 25638 4.23 1.33 5.41 48 TR_XM_DK_Bayes1 25407 3.99 0.63 5.36 49 BAYES_99 25192 14.23 36.05 5.32 50 HTML_IMAGE_RATIO_04 24963 5.19 4.99 5.27 51 IN_ZIMBRA_NJ_WHITELIST 24524 3.69 0.05 5.18 52 FSL_BULK_SIG 24331 8.76 17.65 5.13 53 XM_PDF 23969 3.87 0.97 5.06 54 SPOOF_COM2COM 23531 3.56 0.12 4.97 55 T_TooManySym_01 23465 4.23 2.47 4.95 56 XM_H_Long_From01 23444 5.22 5.88 4.95 57 RELAYCOUNTRY_META 23357 10.76 25.05 4.93 58 MIME_QP_LONG_LINE 23326 4.31 2.81 4.92 59 XM_B_Phish_Phrases 22747 5.54 7.35 4.80 60 TR_XM_DK_Bayes2 22145 3.49 0.59 4.67 61 MPART_ALT_DIFF 21876 6.04 9.52 4.62 62 BAYES_80 21834 6.02 9.48 4.61 63 TR_XM_DKIM_Undo 21827 12.44 31.64 4.61 64 RCVD_IN_IADB_LISTED 21720 3.80 1.88 4.58 65 BOTNET_IPINHOSTNAME 20378 6.45 11.70 4.30 66 BAYES_999 19824 10.86 27.22 4.18 67 RCVD_IN_IADB_SPF 18864 3.30 1.64 3.98 68 TR_XM_DK_SendGrid 18829 3.90 3.72 3.97 69 TR_XM_SpammyWords4 17948 4.88 7.55 3.79 70 RCVD_IN_MSPIKE_H5 17850 2.98 1.06 3.77 71 XM_B_SpammyWords3 17750 5.95 11.35 3.75 72 RCVD_IN_IADB_SENDERID 16911 2.98 1.53 3.57 73 T_REMOTE_IMAGE 16886 4.03 5.17 3.56 74 XMSubMetaSx_00 16816 4.22 5.88 3.55 75 RCVD_IN_IADB_DK 16368 2.90 1.53 3.45 76 XM_H_Trusted_IP 15873 2.38 0.00 3.35 77 XMSexyCombo_05 15680 6.07 12.82 3.31 78 XM_UncommonTLD01 15590 8.94 22.77 3.29 79 HTML_IMAGE_RATIO_06 15250 3.45 4.03 3.22 80 DKIM_INVALID 14916 3.31 3.70 3.15 81 XMNumbers 14853 3.92 5.85 3.13 82 TR_XM_PhishingBody 14472 3.90 5.97 3.05 83 BAYES_20 13869 2.38 1.03 2.93 84 BAYES_95 13860 3.95 6.47 2.92 85 MAILING_LIST_MULTI 13631 2.71 2.30 2.88 86 MIME_HTML_ONLY_MULTI 13575 2.82 2.72 2.86 87 RCVD_IN_IADB_VOUCHED 13188 2.22 0.85 2.78 88 ANY_BOUNCE_MESSAGE 12509 2.14 0.93 2.64 89 BOUNCE_MESSAGE 12499 2.14 0.93 2.64 90 FROM_EXCESS_BASE64 12108 2.64 2.86 2.56 91 TooManyTo_002 12040 2.33 1.81 2.54 92 T_TooManySym_02 11996 2.04 0.83 2.53 93 URI_NOVOWEL 11304 2.18 1.67 2.39 94 TM2_M_URI_OPT_OUT 11047 2.69 3.58 2.33 95 MIME_HTML_MOSTLY 10880 3.85 7.67 2.30 96 HTML_MIME_NO_HTML_TAG 10430 2.70 3.92 2.20 97 TR_DCC_Bayes_99 10337 9.56 27.65 2.18 98 XM_B_Phish66 9899 2.37 3.05 2.09 99 TR_XM_SB_Phish 9672 1.97 1.80 2.04 100 XMSubPhish11 9550 1.93 1.73 2.02 101 XM_B_SpammyTLD 9416 2.75 4.62 1.99 102 XMDiploma_00 9288 2.44 3.62 1.96 103 HTML_IMAGE_RATIO_08 9239 2.19 2.78 1.95 104 HELO_NODOT 9238 1.54 0.55 1.95 105 HELO_NO_DOMAIN 9238 1.54 0.54 1.95 106 KHOP_HELO_FCRDNS 9024 4.07 9.36 1.90 107 T_XMDrugObfuBody_14 8809 1.98 2.27 1.86 108 TVD_RCVD_IP 8777 1.39 0.26 1.85 109 RCVD_IN_IADB_OPTIN 8559 1.45 0.59 1.81 110 UNTRUSTED_Relay 8459 7.77 22.43 1.79 111 XM_SPF_SoftFail 8349 2.21 3.32 1.76 112 BAYES_05 8098 1.39 0.60 1.71 113 TooManyTo_003 8055 1.65 1.51 1.70 114 XM_CamelCaseFrm001 7505 1.74 2.11 1.58 115 INVALID_MSGID 7221 1.24 0.56 1.52 116 IN_HORDE_ADDRESS_BOOK 7220 1.10 0.05 1.52 117 T_XMDrugObfuBody_08 6995 1.72 2.31 1.48 118 XM_DK_Undo_01 6958 1.68 2.21 1.47 119 XM_B_Unsub2 6796 1.90 3.02 1.43 120 BOTNET 6720 5.74 16.34 1.42 121 TR_Symld_Words 6694 1.37 1.26 1.41 122 MSGID_NOFQDN1 6687 1.01 0.04 1.41 123 SUBJ_ALL_CAPS 6664 1.37 1.30 1.41 124 USER_IN_DEF_DKIM_WL 6506 0.98 0.00 1.37 125 URI_HEX 6501 1.77 2.75 1.37 126 XMCapTrack 6353 1.08 0.43 1.34 127 TO_MALFORMED 6293 0.94 0.00 1.33 128 TR_XM_SpammyWords5 6222 1.78 2.92 1.31 129 XMSubNoVowel 6181 1.13 0.71 1.30 130 RELAYCOUNTRY_CA 6036 2.39 5.13 1.27 131 TooManyTo_004 5957 1.26 1.26 1.26 132 TM2_M_VERY_LONG_WORD 5869 1.64 2.62 1.24 133 XM_UB50 5759 2.81 6.71 1.22 134 HELO_MISC_IP 5736 0.89 0.09 1.21 135 XM_GoogleGroups 5489 0.96 0.46 1.16 136 URI_TRY_3LD 5486 1.13 1.05 1.16 137 XMStockSpam_06 5352 1.20 1.37 1.13 138 RELAYCOUNTRY_GB 5223 1.39 2.08 1.10 139 HTML_FONT_FACE_BAD 5080 0.96 0.70 1.07 140 XMBSHREFv2 5001 0.81 0.20 1.06 141 TooManyTo_005 4872 1.03 1.02 1.03 142 XMHTML_After_End 4760 1.04 1.13 1.00 143 XMGenDplmaNmb 4621 1.30 2.09 0.98 144 DKIM_ADSP_CUSTOM_MED 4613 0.98 1.00 0.97 145 XM_H_Long_From02 4502 0.98 1.06 0.95 146 XMSubMetaSxObfu_03 4454 0.95 0.99 0.94 147 XM_OfRef6 4311 1.33 2.35 0.91 148 HTTPS_HTTP_MISMATCH 4176 0.94 1.08 0.88 149 XMGappySubj_01 4152 0.66 0.15 0.88 150 T_FILL_THIS_FORM_SHORT 4045 1.08 1.62 0.85 151 XMBody_95 3900 0.61 0.09 0.82 152 XMSexyCombo_01 3745 1.15 2.03 0.79 153 XMSubMetaI_00 3675 1.09 1.86 0.78 154 TR_XM_SpammyWords2 3632 3.99 11.89 0.77 155 SpammyFromTLD_01 3577 2.41 6.45 0.75 156 TVD_SPACE_RATIO 3535 0.55 0.08 0.75 157 XMNoVowels 3479 0.63 0.36 0.73 158 RCVD_IN_BL_SPAMCOP_NET 3456 2.75 7.70 0.73 159 T_TooManySym_03 3202 0.59 0.37 0.68 160 HTML_IMAGE_ONLY_20 3155 0.70 0.80 0.67 161 NML_ADSP_CUSTOM_MED 3136 0.71 0.85 0.66 162 XMLngstWrd_00 3062 0.63 0.60 0.65 163 XM_E_Blogspot 3042 0.47 0.06 0.64 164 XM_H_PHPMailer 3037 0.67 0.74 0.64 165 XM_ProductURIs 2930 0.63 0.66 0.62 166 TR_MetaPhish_Combo_01 2898 0.64 0.70 0.61 167 XM_ShortIntro_01 2881 0.55 0.42 0.61 168 TR_MSPIKEBAYES00 2846 0.43 0.01 0.60 169 XM_SPF_Unknown 2796 0.62 0.70 0.59 170 RCVD_IN_SORBS_DUL 2764 0.47 0.19 0.58 171 URIBL_SBL_A 2710 1.08 2.34 0.57 172 XMLngstWrd_01 2698 0.57 0.57 0.57 173 XMMoneyMeta_00 2690 0.64 0.81 0.57 174 XM_B_COVIDMETA 2619 1.12 2.50 0.55 175 T_OBFU_PDF_ATTACH 2619 0.44 0.16 0.55 176 FORGED_GMAIL_RCVD 2541 0.62 0.82 0.54 177 RELAYCOUNTRY_DE 2538 1.16 2.67 0.54 178 T_Symld_Words_02 2534 0.63 0.85 0.53 179 SHORT_HELO_AND_INLINE_IMAGE 2533 0.40 0.06 0.53 180 XMBrknScrpt_02 2490 1.00 2.16 0.53 181 XMBdyGiftCard01 2407 1.32 3.31 0.51 182 DIET_1 2362 0.90 1.90 0.50 183 XMSexyCombo_04 2349 0.55 0.67 0.50 184 FROM_GOV_SPOOF 2325 0.42 0.24 0.49 185 RDNS_DYNAMIC 2304 0.62 0.95 0.49 186 XM_B_SpammyWords4 2294 0.85 1.75 0.48 187 TM2_M_BODY_EMPTY 2292 0.38 0.12 0.48 188 PDS_OTHER_BAD_TLD 2206 0.99 2.28 0.47 189 HTML_IMAGE_ONLY_32 2181 0.39 0.21 0.46 190 MISSING_HEADERS 2169 0.68 1.22 0.46 191 XMHTMLBadTable_001 2153 0.49 0.59 0.45 192 T_XMDrugObfuBody_00 2147 0.68 1.25 0.45 193 PLING_QUERY 2140 0.46 0.50 0.45 194 THIS_AD 2105 1.05 2.52 0.44 195 XM_DIRTYINTL 2067 1.85 5.32 0.44 196 TVD_SPACE_RATIO_MINFP 1993 0.39 0.32 0.42 197 XM_B_REG_HTML 1983 0.41 0.41 0.42 198 XMDateMe_00 1971 0.38 0.28 0.42 199 T_MANY_PILL_PRICE 1954 0.30 0.02 0.41 200 HTML_IMAGE_ONLY_28 1918 0.41 0.43 0.40 ----------------------------------------------------------------------