Email: 565024 Autolearn: 0 AvgScore: 2.68 AvgScanTime: 1.22 sec Spam: 157339 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.34 sec Ham: 407685 Autolearn: 0 AvgScore: -1.72 AvgScanTime: 1.17 sec Time Spent Running SA: 191.32 hours Time Spent Processing Spam: 58.54 hours Time Spent Processing Ham: 132.78 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 147120 86.42 93.51 83.68 2 DKIM_SIGNED 126987 75.08 80.71 72.91 3 XM_DK_Pass 123608 73.48 78.56 71.52 4 DCC_CHECK 121301 50.38 77.10 40.07 5 DKIM_VALID 120501 71.51 76.59 69.54 6 XM_B_Unicode 115179 69.55 73.20 68.14 7 RELAYCOUNTRY_US 108018 77.28 68.65 80.60 8 XMListUnsubscribeExists 97243 48.02 61.80 42.69 9 XM_B_SpammyWords 96767 50.56 61.50 46.33 10 DKIM_VALID_AU 88503 54.20 56.25 53.41 11 XM_B_Unicode3 64726 40.38 41.14 40.09 12 XM_DK_Undo_02 64304 17.20 40.87 8.07 13 BAYES_50 64231 52.10 40.82 56.45 14 XM_B_SpammyWords2 53769 21.98 34.17 17.28 15 MIME_HTML_ONLY 52525 23.72 33.38 19.99 16 TR_XM_DKIM_Undo 49841 13.17 31.68 6.03 17 LOC_TINY_FONT_1 48531 23.54 30.84 20.72 18 BAYES_99 48269 13.26 30.68 6.54 19 RCVD_IN_MSPIKE_H2 46458 25.80 29.53 24.37 20 DKIM_VALID_EF 46281 30.39 29.41 30.76 21 HTML_FONT_LOW_CONTRAST 46228 26.66 29.38 25.61 22 FVGT_m_MULTI_ODD 43798 23.99 27.84 22.50 23 T_KAM_HTML_FONT_INVALID 42526 19.30 27.03 16.32 24 RELAYCOUNTRY_META 39851 10.77 25.33 5.14 25 XMSubLong 37836 21.33 24.05 20.28 26 BAYES_999 37421 10.44 23.78 5.29 27 TR_DCC_Bayes_99 36954 8.69 23.49 2.98 28 T_TM2_M_HEADER_IN_MSG 36661 28.57 23.30 30.61 29 XM_Body_Dirty_Words 34787 14.01 22.11 10.88 30 FSL_BULK_SIG 33086 11.23 21.03 7.44 31 DCC_CHECK_NEGATIVE 32574 47.25 20.70 57.50 32 RCVD_IN_MSPIKE_WL 30368 28.33 19.30 31.82 33 UNTRUSTED_Relay 27157 6.33 17.26 2.11 34 BOTNET 22855 5.15 14.53 1.53 35 XM_UncommonTLD01 22766 6.51 14.47 3.44 36 XM_Multi_Part_URI 22764 11.53 14.47 10.39 37 BOTNET_IPINHOSTNAME 20746 6.67 13.19 4.16 38 LOTS_OF_MONEY 20693 8.37 13.15 6.52 39 XM_B_Unsub 20387 10.49 12.96 9.54 40 XM_B_SpammyWords3 20054 6.25 12.75 3.74 41 XMSexyCombo_05 17002 5.34 10.81 3.22 42 TR_XM_PhishingBody 16051 5.57 10.20 3.79 43 RCVD_IN_MSPIKE_H3 16043 14.00 10.20 15.46 44 UNPARSEABLE_RELAY 15744 7.77 10.01 6.90 45 BAYES_60 15711 9.45 9.99 9.24 46 TR_XM_UnparsRelay 15582 7.02 9.90 5.91 47 BAYES_80 15559 6.38 9.89 5.03 48 TR_XM_SpammyWords2 15454 3.78 9.82 1.45 49 TR_XM_SpammyWords4 15444 5.64 9.82 4.04 50 MPART_ALT_DIFF 14095 5.93 8.96 4.76 51 RCVD_IN_BL_SPAMCOP_NET 13839 2.97 8.80 0.72 52 XM_Evil_Numbers_Gen 13760 8.19 8.75 7.98 53 RCVD_IN_MSPIKE_H4 12866 10.55 8.18 11.47 54 LotsOfNums_01 12454 8.46 7.92 8.67 55 MIME_HTML_MOSTLY 12240 3.64 7.78 2.04 56 XM_SendGrid 11821 6.53 7.51 6.16 57 HTML_IMAGE_RATIO_02 11810 6.13 7.51 5.60 58 XM_H_Long_From01 11494 5.83 7.31 5.26 59 XM_B_Phish66 11428 3.91 7.26 2.62 60 XM_B_Phish_Phrases 11303 7.33 7.18 7.39 61 T_REMOTE_IMAGE 10623 4.46 6.75 3.57 62 XMSubMetaSx_00 10325 4.28 6.56 3.40 63 KHOP_HELO_FCRDNS 9521 3.20 6.05 2.10 64 HTML_MIME_NO_HTML_TAG 9450 3.63 6.01 2.71 65 XM_UB50 9418 2.71 5.99 1.45 66 SpammyFromTLD_02 9390 1.94 5.97 0.38 67 RELAYCOUNTRY_CA 8984 2.41 5.71 1.14 68 HTML_IMAGE_RATIO_04 8696 5.66 5.53 5.71 69 SpammyFromTLD_01 8494 1.99 5.40 0.68 70 XM_SPF_SoftFail 8461 3.01 5.38 2.09 71 TR_XM_SB_Phish 7868 3.52 5.00 2.95 72 BAYES_95 7801 3.41 4.96 2.81 73 RELAYCOUNTRY_GB 7653 2.08 4.86 1.01 74 XM_B_SpammyTLD 7618 2.77 4.84 1.97 75 XM_OfRef6 7541 1.98 4.79 0.89 76 TR_Sbj_FN_Bdy 7466 1.42 4.75 0.14 77 TooManyTo_001 7445 7.49 4.73 8.56 78 XMSubEmpty 7417 1.47 4.71 0.22 79 XMNumbers 7373 3.51 4.69 3.05 80 XMNoSubject 7343 1.35 4.67 0.07 81 MISSING_SUBJECT 7343 1.35 4.67 0.07 82 BODY_EMPTY 7298 1.30 4.64 0.01 83 XM_DIRTYINTL 7144 1.58 4.54 0.44 84 TR_XM_DK_SendGrid 6957 3.96 4.42 3.79 85 RCVD_IN_MSPIKE_BL 6912 1.42 4.39 0.27 86 RELAYCOUNTRY_FR 6823 1.62 4.34 0.57 87 TR_XM_MSPIKECOMBO 6814 1.39 4.33 0.25 88 HTML_FONT_SIZE_LARGE 6710 1.26 4.26 0.10 89 TM2_M_URI_OPT_OUT 6564 3.20 4.17 2.83 90 DKIM_INVALID 6486 3.57 4.12 3.36 91 ALL_TRUSTED 6260 12.58 3.98 15.89 92 XM_UB99 6171 1.10 3.92 0.00 93 BODY_URI_ONLY 6041 1.08 3.84 0.02 94 HTML_IMAGE_ONLY_12 5859 1.16 3.72 0.17 95 MIME_QP_LONG_LINE 5686 4.93 3.61 5.44 96 XMStrtUSub 5662 6.68 3.60 7.87 97 MIXED_FONT_CASE 5312 0.94 3.38 0.00 98 HTML_IMAGE_RATIO_06 5048 3.30 3.21 3.33 99 XM_PDF 4950 5.18 3.15 5.97 100 TR_XM_COVIDMETA4 4903 1.13 3.12 0.37 101 XM_UB60 4690 0.95 2.98 0.17 102 JH_SPAMMY_PATTERN01 4653 0.82 2.96 0.00 103 PDS_OTHER_BAD_TLD 4649 1.02 2.95 0.28 104 DKIM_ADSP_CUSTOM_MED 4514 1.52 2.87 1.00 105 URIBL_DBL_SPAM 4495 0.80 2.86 0.00 106 XM_UB999 4418 0.78 2.81 0.00 107 TM2_M_VERY_LONG_WORD 4392 1.70 2.79 1.28 108 HTML_SHORT_LINK_IMG_1 4355 0.78 2.77 0.01 109 FORGED_GMAIL_RCVD 4345 1.16 2.76 0.54 110 TR_XM_SpammyWords5 4329 1.69 2.75 1.29 111 XM_B_COVIDMETA 4219 1.29 2.68 0.75 112 HTML_IMAGE_RATIO_08 4144 2.38 2.63 2.29 113 NML_ADSP_CUSTOM_MED 4107 1.22 2.61 0.69 114 XMSubPhish18 4106 1.18 2.61 0.63 115 RCVD_IN_RP_RNBL 4090 0.75 2.60 0.03 116 T_XMDrugObfuBody_08 3981 1.90 2.53 1.65 117 RCVD_IN_RP_SAFE 3913 5.10 2.49 6.11 118 T_TooManySym_01 3897 4.24 2.48 4.92 119 XM_UB80 3884 0.73 2.47 0.05 120 XM_OfRef7 3861 0.76 2.45 0.11 121 XMSubPhish11 3762 2.34 2.39 2.32 122 T_XMDrugObfuBody_14 3758 2.01 2.39 1.87 123 RCVD_IN_PSBL 3748 0.71 2.38 0.07 124 XM_H_Undi_Recip 3717 0.77 2.36 0.16 125 MIME_HTML_ONLY_MULTI 3705 2.88 2.35 3.08 126 RCVD_IN_IADB_LISTED 3699 4.12 2.35 4.81 127 TR_XM_SpoofPhishAttach 3680 1.15 2.34 0.69 128 MONEY_NOHTML 3631 0.71 2.31 0.09 129 HK_RANDOM_REPLYTO 3619 0.75 2.30 0.16 130 URI_PHP_REDIR 3587 0.64 2.28 0.00 131 URIBL_SBL_A 3576 0.79 2.27 0.22 132 XM_DK_Undo_01 3538 1.95 2.25 1.83 133 XM_B_Unsub2 3530 1.66 2.24 1.43 134 RCVD_IN_IADB_SPF 3384 3.62 2.15 4.18 135 TR_XM_COVIDMETA1 3328 0.80 2.12 0.29 136 XM_CamelCaseFrm001 3284 1.88 2.09 1.80 137 XMDiploma_00 3280 1.53 2.08 1.31 138 HTML_IMAGE_ONLY_20 3219 1.29 2.05 1.00 139 RCVD_IN_IADB_DK 3205 3.18 2.04 3.62 140 RCVD_IN_IADB_SENDERID 3191 3.27 2.03 3.75 141 FILL_THIS_FORM 3136 0.72 1.99 0.23 142 TR_XM_Undi_Recip5 3056 0.55 1.94 0.01 143 TR_XM_SpammyWords3 3032 0.67 1.93 0.19 144 FILL_THIS_FORM_LONG 3009 0.58 1.91 0.07 145 MAILING_LIST_MULTI 3007 2.61 1.91 2.88 146 XMSexyCombo_01 2999 0.81 1.91 0.39 147 XM_URI_RBL 2974 0.62 1.89 0.13 148 XM_B_SpammyWords4 2957 0.78 1.88 0.35 149 URI_TRY_3LD 2912 1.24 1.85 1.00 150 RCVD_IN_MSPIKE_L5 2888 0.55 1.84 0.06 151 FROM_EXCESS_BASE64 2867 2.28 1.82 2.45 152 XM_DrugUnitList 2780 0.49 1.77 0.00 153 TR_XM_Undi_Recip9 2763 0.49 1.76 0.00 154 RCVD_IN_RP_CERTIFIED 2724 4.38 1.73 5.40 155 XMBrknScrpt_02 2714 1.24 1.72 1.05 156 RCVD_IN_MSPIKE_L4 2714 0.55 1.72 0.10 157 RELAYCOUNTRY_IN 2701 0.57 1.72 0.13 158 UNDISC_MONEY 2593 0.46 1.65 0.01 159 URIBL_BLACK 2520 0.47 1.60 0.03 160 T_XMHurry_00 2496 0.79 1.59 0.48 161 XMLngstWrd_00 2467 1.00 1.57 0.78 162 MY_SERVERS_FOUND 2462 0.80 1.56 0.51 163 URI_HEX 2458 1.37 1.56 1.29 164 XMStockSpam_06 2392 1.30 1.52 1.22 165 XMLngstWrd_01 2355 0.93 1.50 0.71 166 XMBody_17 2338 0.65 1.49 0.32 167 T_FILL_THIS_FORM_FRAUD_PHISH 2318 0.43 1.47 0.03 168 USER_IN_DEF_DKIM_WL 2311 8.41 1.47 11.09 169 T_FILL_THIS_FORM_SHORT 2268 1.16 1.44 1.05 170 TR_XM_BayesRelay 2265 0.41 1.44 0.01 171 URI_OPTOUT_3LD 2223 0.58 1.41 0.26 172 URI_NOVOWEL 2221 2.23 1.41 2.55 173 T_XMDrugObfuBody_00 2212 0.74 1.41 0.48 174 TR_XM_INV_DKIM 2206 0.46 1.40 0.10 175 BAYES_40 2203 3.71 1.40 4.60 176 XM_UB95 2202 0.41 1.40 0.03 177 TR_XM_PHPDW 2106 0.59 1.34 0.31 178 TR_XM_PhishingBody3 2098 0.37 1.33 0.00 179 TR_XM_PHPForged 1944 0.53 1.24 0.26 180 XMBdyGiftCard01 1935 0.84 1.23 0.69 181 SUBJ_ALL_CAPS 1919 1.39 1.22 1.45 182 TR_XM_FormFill2 1912 0.53 1.22 0.26 183 BOTNET_NORDNS 1911 0.35 1.21 0.01 184 XM_H_PHPOS 1901 0.52 1.21 0.25 185 TR_Symld_Words 1881 1.53 1.20 1.66 186 RELAYCOUNTRY_DE 1877 0.76 1.19 0.59 187 TR_XM_MaxBayes 1822 0.33 1.16 0.00 188 XM_B_SEO 1813 0.43 1.15 0.15 189 DIET_1 1807 0.62 1.15 0.42 190 URI_NO_WWW_BIZ_CGI 1775 0.33 1.13 0.02 191 XMMoneyMeta_00 1757 0.75 1.12 0.60 192 XMPhish14 1737 0.54 1.10 0.33 193 XMGenDplmaNmb 1726 0.89 1.10 0.82 194 BAYES_20 1704 3.04 1.08 3.80 195 TR_LOTS_OF_MONEY3 1704 0.42 1.08 0.17 196 HTTPS_HTTP_MISMATCH 1681 0.84 1.07 0.75 197 TR_XM_SEO4 1664 0.36 1.06 0.08 198 XMHTML_After_End 1644 1.06 1.04 1.07 199 ANY_BOUNCE_MESSAGE 1624 2.18 1.03 2.62 200 BOUNCE_MESSAGE 1620 2.18 1.03 2.62 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 341148 86.42 93.51 83.68 2 RELAYCOUNTRY_US 328607 77.28 68.65 80.60 3 DKIM_SIGNED 297227 75.08 80.71 72.91 4 XM_DK_Pass 291563 73.48 78.56 71.52 5 DKIM_VALID 283522 71.51 76.59 69.54 6 XM_B_Unicode 277792 69.55 73.20 68.14 7 DCC_CHECK_NEGATIVE 234424 47.25 20.70 57.50 8 BAYES_50 230151 52.10 40.82 56.45 9 DKIM_VALID_AU 217728 54.20 56.25 53.41 10 XM_B_SpammyWords 188893 50.56 61.50 46.33 11 XMListUnsubscribeExists 174056 48.02 61.80 42.69 12 XM_B_Unicode3 163434 40.38 41.14 40.09 13 DCC_CHECK 163379 50.38 77.10 40.07 14 RCVD_IN_MSPIKE_WL 129730 28.33 19.30 31.82 15 DKIM_VALID_EF 125409 30.39 29.41 30.76 16 T_TM2_M_HEADER_IN_MSG 124776 28.57 23.30 30.61 17 HTML_FONT_LOW_CONTRAST 104398 26.66 29.38 25.61 18 RCVD_IN_MSPIKE_H2 99346 25.80 29.53 24.37 19 FVGT_m_MULTI_ODD 91746 23.99 27.84 22.50 20 LOC_TINY_FONT_1 84482 23.54 30.84 20.72 21 XMSubLong 82692 21.33 24.05 20.28 22 MIME_HTML_ONLY 81513 23.72 33.38 19.99 23 XM_B_SpammyWords2 70428 21.98 34.17 17.28 24 T_KAM_HTML_FONT_INVALID 66520 19.30 27.03 16.32 25 ALL_TRUSTED 64801 12.58 3.98 15.89 26 RCVD_IN_MSPIKE_H3 63041 14.00 10.20 15.46 27 XM_DKIMWhitelistDomains 50325 8.91 0.02 12.34 28 RCVD_IN_MSPIKE_H4 46760 10.55 8.18 11.47 29 USER_IN_DEF_DKIM_WL 45230 8.41 1.47 11.09 30 XM_Body_Dirty_Words 44347 14.01 22.11 10.88 31 XM_Multi_Part_URI 42372 11.53 14.47 10.39 32 XM_B_Unsub 38907 10.49 12.96 9.54 33 BAYES_00 38350 6.97 0.65 9.41 34 BAYES_60 37657 9.45 9.99 9.24 35 LotsOfNums_01 35332 8.46 7.92 8.67 36 TooManyTo_001 34892 7.49 4.73 8.56 37 XM_DK_Undo_02 32887 17.20 40.87 8.07 38 XM_Evil_Numbers_Gen 32536 8.19 8.75 7.98 39 XMStrtUSub 32103 6.68 3.60 7.87 40 FSL_BULK_SIG 30340 11.23 21.03 7.44 41 XM_B_Phish_Phrases 30119 7.33 7.18 7.39 42 UNPARSEABLE_RELAY 28133 7.77 10.01 6.90 43 BAYES_99 26661 13.26 30.68 6.54 44 LOTS_OF_MONEY 26575 8.37 13.15 6.52 45 XM_SendGrid 25103 6.53 7.51 6.16 46 RCVD_IN_RP_SAFE 24896 5.10 2.49 6.11 47 TR_XM_DKIM_Undo 24574 13.17 31.68 6.03 48 XM_PDF 24321 5.18 3.15 5.97 49 TR_XM_DK_Bayes 24195 4.41 0.45 5.93 50 TR_XM_UnparsRelay 24075 7.02 9.90 5.91 51 TR_XM_DK_Bayes1 23405 4.27 0.44 5.74 52 HTML_IMAGE_RATIO_04 23277 5.66 5.53 5.71 53 HTML_IMAGE_RATIO_02 22821 6.13 7.51 5.60 54 MIME_QP_LONG_LINE 22192 4.93 3.61 5.44 55 RCVD_IN_RP_CERTIFIED 22028 4.38 1.73 5.40 56 BAYES_999 21566 10.44 23.78 5.29 57 XM_H_Long_From01 21440 5.83 7.31 5.26 58 IN_ZIMBRA_NJ_WHITELIST 21163 3.75 0.03 5.19 59 RELAYCOUNTRY_META 20974 10.77 25.33 5.14 60 BAYES_80 20502 6.38 9.89 5.03 61 T_TooManySym_01 20074 4.24 2.48 4.92 62 TR_XM_DK_Bayes2 20052 3.66 0.41 4.92 63 RCVD_IN_MSPIKE_H5 19929 3.79 0.93 4.89 64 RCVD_IN_IADB_LISTED 19597 4.12 2.35 4.81 65 MPART_ALT_DIFF 19406 5.93 8.96 4.76 66 BAYES_40 18747 3.71 1.40 4.60 67 RCVD_IN_IADB_SPF 17061 3.62 2.15 4.18 68 BOTNET_IPINHOSTNAME 16957 6.67 13.19 4.16 69 TR_XM_SpammyWords4 16451 5.64 9.82 4.04 70 BAYES_20 15474 3.04 1.08 3.80 71 TR_XM_PhishingBody 15446 5.57 10.20 3.79 72 TR_XM_DK_SendGrid 15434 3.96 4.42 3.79 73 RCVD_IN_IADB_SENDERID 15283 3.27 2.03 3.75 74 XM_B_SpammyWords3 15264 6.25 12.75 3.74 75 XM_H_Trusted_IP 15200 2.69 0.00 3.73 76 RCVD_IN_IADB_DK 14756 3.18 2.04 3.62 77 T_REMOTE_IMAGE 14554 4.46 6.75 3.57 78 XM_UncommonTLD01 14016 6.51 14.47 3.44 79 XMSubMetaSx_00 13846 4.28 6.56 3.40 80 DKIM_INVALID 13705 3.57 4.12 3.36 81 HTML_IMAGE_RATIO_06 13573 3.30 3.21 3.33 82 XMSexyCombo_05 13145 5.34 10.81 3.22 83 MIME_HTML_ONLY_MULTI 12575 2.88 2.35 3.08 84 XMNumbers 12435 3.51 4.69 3.05 85 TR_DCC_Bayes_99 12144 8.69 23.49 2.98 86 RCVD_IN_IADB_VOUCHED 12095 2.38 0.87 2.97 87 TR_XM_SB_Phish 12016 3.52 5.00 2.95 88 MAILING_LIST_MULTI 11733 2.61 1.91 2.88 89 TM2_M_URI_OPT_OUT 11525 3.20 4.17 2.83 90 BAYES_95 11458 3.41 4.96 2.81 91 HTML_MIME_NO_HTML_TAG 11037 3.63 6.01 2.71 92 ANY_BOUNCE_MESSAGE 10695 2.18 1.03 2.62 93 XM_B_Phish66 10689 3.91 7.26 2.62 94 BOUNCE_MESSAGE 10675 2.18 1.03 2.62 95 URI_NOVOWEL 10406 2.23 1.41 2.55 96 FROM_EXCESS_BASE64 9994 2.28 1.82 2.45 97 T_TooManySym_02 9911 2.00 0.88 2.43 98 TooManyTo_002 9695 1.94 0.81 2.38 99 XMSubPhish11 9449 2.34 2.39 2.32 100 HTML_IMAGE_RATIO_08 9327 2.38 2.63 2.29 101 BAYES_05 8683 1.68 0.53 2.13 102 UNTRUSTED_Relay 8609 6.33 17.26 2.11 103 KHOP_HELO_FCRDNS 8546 3.20 6.05 2.10 104 XM_SPF_SoftFail 8533 3.01 5.38 2.09 105 MIME_HTML_MOSTLY 8312 3.64 7.78 2.04 106 XM_B_SpammyTLD 8040 2.77 4.84 1.97 107 HELO_NODOT 7853 1.54 0.53 1.93 108 HELO_NO_DOMAIN 7852 1.54 0.53 1.93 109 RCVD_IN_IADB_OPTIN 7759 1.54 0.59 1.90 110 T_XMDrugObfuBody_14 7627 2.01 2.39 1.87 111 XM_DK_Undo_01 7470 1.95 2.25 1.83 112 XM_CamelCaseFrm001 7340 1.88 2.09 1.80 113 INVALID_MSGID 7206 1.39 0.40 1.77 114 IN_HORDE_ADDRESS_BOOK 7123 1.28 0.07 1.75 115 TVD_RCVD_IP 6812 1.26 0.18 1.67 116 TR_Symld_Words 6758 1.53 1.20 1.66 117 T_XMDrugObfuBody_08 6739 1.90 2.53 1.65 118 TooManyTo_003 6332 1.31 0.68 1.55 119 TO_MALFORMED 6238 1.11 0.02 1.53 120 BOTNET 6221 5.15 14.53 1.53 121 SUBJ_ALL_CAPS 5927 1.39 1.22 1.45 122 TR_XM_SpammyWords2 5912 3.78 9.82 1.45 123 XM_UB50 5895 2.71 5.99 1.45 124 XM_B_Unsub2 5841 1.66 2.24 1.43 125 XMSubNoVowel 5800 1.26 0.85 1.42 126 XMCapTrack 5770 1.16 0.49 1.42 127 XMDiploma_00 5359 1.53 2.08 1.31 128 URI_HEX 5273 1.37 1.56 1.29 129 TR_XM_SpammyWords5 5241 1.69 2.75 1.29 130 TM2_M_VERY_LONG_WORD 5226 1.70 2.79 1.28 131 XM_H_Long_From02 5169 1.14 0.79 1.27 132 XM_GoogleGroups 5123 1.06 0.55 1.26 133 XMStockSpam_06 4973 1.30 1.52 1.22 134 XMGappySubj_01 4894 0.91 0.16 1.20 135 RELAYCOUNTRY_CA 4639 2.41 5.71 1.14 136 TooManyTo_004 4632 0.98 0.59 1.14 137 XMHTML_After_End 4360 1.06 1.04 1.07 138 XMBrknScrpt_02 4295 1.24 1.72 1.05 139 T_FILL_THIS_FORM_SHORT 4262 1.16 1.44 1.05 140 HTML_FONT_FACE_BAD 4206 0.95 0.74 1.03 141 RELAYCOUNTRY_GB 4106 2.08 4.86 1.01 142 DKIM_ADSP_CUSTOM_MED 4081 1.52 2.87 1.00 143 URI_TRY_3LD 4068 1.24 1.85 1.00 144 HTML_IMAGE_ONLY_20 4065 1.29 2.05 1.00 145 TooManyTo_005 3802 0.82 0.54 0.93 146 XM_OfRef6 3643 1.98 4.79 0.89 147 XMBSHREFv2 3461 0.69 0.26 0.85 148 XMGenDplmaNmb 3325 0.89 1.10 0.82 149 XM_SPF_Unknown 3277 0.76 0.65 0.80 150 XMLngstWrd_00 3198 1.00 1.57 0.78 151 XM_B_COVIDMETA 3077 1.29 2.68 0.75 152 XMBody_95 3074 0.61 0.25 0.75 153 HTTPS_HTTP_MISMATCH 3047 0.84 1.07 0.75 154 T_TooManySym_03 3019 0.60 0.24 0.74 155 XM_ProductURIs 3008 0.73 0.73 0.74 156 RCVD_IN_BL_SPAMCOP_NET 2927 2.97 8.80 0.72 157 XMLngstWrd_01 2888 0.93 1.50 0.71 158 XMBdyGiftCard01 2828 0.84 1.23 0.69 159 TR_XM_SpoofPhishAttach 2797 1.15 2.34 0.69 160 NML_ADSP_CUSTOM_MED 2797 1.22 2.61 0.69 161 FROM_GOV_SPOOF 2787 0.54 0.17 0.68 162 SpammyFromTLD_01 2773 1.99 5.40 0.68 163 XMNoVowels 2771 0.62 0.46 0.68 164 RCVD_IN_SORBS_DUL 2696 0.54 0.21 0.66 165 T_OBFU_PDF_ATTACH 2621 0.53 0.23 0.64 166 TR_MetaPhish_Combo_01 2590 0.68 0.78 0.64 167 TR_MSPIKEBAYES00 2571 0.46 0.03 0.63 168 XMSubPhish18 2567 1.18 2.61 0.63 169 XMMoneyMeta_00 2462 0.75 1.12 0.60 170 MSGID_NOFQDN1 2426 0.44 0.05 0.60 171 XM_ShortIntro_01 2417 0.55 0.43 0.59 172 RELAYCOUNTRY_DE 2416 0.76 1.19 0.59 173 XMPhish30 2389 0.67 0.88 0.59 174 RELAYCOUNTRY_FR 2320 1.62 4.34 0.57 175 XMLngstWrd_02 2310 0.61 0.73 0.57 176 SHORT_HELO_AND_INLINE_IMAGE 2255 0.44 0.14 0.55 177 FORGED_GMAIL_RCVD 2212 1.16 2.76 0.54 178 XM_H_PHPMailer 2137 0.56 0.66 0.52 179 TVD_SPACE_RATIO_MINFP 2100 0.46 0.31 0.52 180 MY_SERVERS_FOUND 2072 0.80 1.56 0.51 181 TM2_M_BODY_EMPTY 1983 0.39 0.12 0.49 182 T_XMHurry_00 1971 0.79 1.59 0.48 183 T_XMDrugObfuBody_00 1958 0.74 1.41 0.48 184 HTML_TAG_BALANCE_BODY 1956 0.54 0.68 0.48 185 XM_B_COPY_HTML 1953 0.46 0.42 0.48 186 TVD_SPACE_RATIO 1918 0.38 0.14 0.47 187 XMSolicitRefs_0 1916 0.44 0.37 0.47 188 FROM_GOV_DKIM_AU 1879 0.39 0.19 0.46 189 TR_XM_Spammywords 1872 0.56 0.82 0.46 190 XM_S_SpammyWords 1872 0.56 0.82 0.46 191 XMSubject_11 1856 0.37 0.15 0.46 192 HTML_IMAGE_ONLY_28 1842 0.51 0.67 0.45 193 HTML_IMAGE_ONLY_32 1836 0.39 0.22 0.45 194 T_Symld_Words_02 1816 0.53 0.76 0.45 195 XM_DIRTYINTL 1785 1.58 4.54 0.44 196 XMDateMe_00 1739 0.42 0.41 0.43 197 XMLngstWrd_03 1726 0.47 0.58 0.42 198 RDNS_DYNAMIC 1706 0.44 0.48 0.42 199 DIET_1 1696 0.62 1.15 0.42 200 MISSING_HEADERS 1695 0.47 0.59 0.42 ----------------------------------------------------------------------