Email: 481127 Autolearn: 0 AvgScore: 2.95 AvgScanTime: 1.44 sec Spam: 127992 Autolearn: 0 AvgScore: 15.23 AvgScanTime: 1.95 sec Ham: 353135 Autolearn: 0 AvgScore: -1.50 AvgScanTime: 1.25 sec Time Spent Running SA: 192.17 hours Time Spent Processing Spam: 69.33 hours Time Spent Processing Ham: 122.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122549 88.93 95.75 86.46 2 RELAYCOUNTRY_US 101020 79.02 78.93 79.05 3 DKIM_SIGNED 100842 72.59 78.79 70.35 4 DCC_CHECK 100410 47.32 78.45 36.03 5 XM_B_Unicode 95670 69.39 74.75 67.45 6 XM_DK_Pass 95325 70.38 74.48 68.89 7 DKIM_VALID 92002 67.98 71.88 66.56 8 XM_B_SpammyWords 83779 48.05 65.46 41.73 9 XMListUnsubscribeExists 82464 49.30 64.43 43.82 10 DKIM_VALID_AU 66288 49.96 51.79 49.30 11 XM_DK_Undo_02 52224 16.51 40.80 7.70 12 BAYES_50 51560 51.45 40.28 55.50 13 XM_B_Unicode3 48990 38.36 38.28 38.40 14 XM_B_SpammyWords2 46225 21.97 36.12 16.84 15 MIME_HTML_ONLY 45407 24.14 35.48 20.02 16 BAYES_99 42760 13.58 33.41 6.40 17 LOC_TINY_FONT_1 41316 24.02 32.28 21.02 18 TR_XM_DKIM_Undo 41038 12.56 32.06 5.50 19 HTML_FONT_LOW_CONTRAST 40385 26.51 31.55 24.68 20 DKIM_VALID_EF 37139 27.79 29.02 27.34 21 T_KAM_HTML_FONT_INVALID 37094 19.89 28.98 16.59 22 RCVD_IN_MSPIKE_H2 35441 25.56 27.69 24.79 23 FVGT_m_MULTI_ODD 34171 22.86 26.70 21.47 24 T_TM2_M_HEADER_IN_MSG 33516 31.27 26.19 33.12 25 TR_DCC_Bayes_99 33177 9.15 25.92 3.07 26 BAYES_999 32759 10.62 25.59 5.19 27 XMSubLong 30438 22.54 23.78 22.09 28 DCC_CHECK_NEGATIVE 27511 52.64 21.49 63.93 29 XM_Body_Dirty_Words 26291 13.73 20.54 11.26 30 FSL_BULK_SIG 24743 10.49 19.33 7.28 31 RELAYCOUNTRY_META 24419 8.78 19.08 5.04 32 RCVD_IN_MSPIKE_WL 24375 25.82 19.04 28.27 33 XM_Multi_Part_URI 22543 12.09 17.61 10.09 34 BOTNET 22034 5.68 17.22 1.50 35 XM_UncommonTLD01 19737 6.77 15.42 3.64 36 LOTS_OF_MONEY 18725 8.71 14.63 6.57 37 UNTRUSTED_Relay 17587 4.97 13.74 1.79 38 BOTNET_IPINHOSTNAME 17140 6.63 13.39 4.17 39 TR_XM_SpammyWords4 16452 6.32 12.85 3.95 40 T_REMOTE_IMAGE 15994 6.08 12.50 3.75 41 XM_B_SpammyWords3 15376 5.66 12.01 3.35 42 XM_B_Unsub 14816 9.89 11.58 9.27 43 XMSexyCombo_05 14119 5.77 11.03 3.86 44 TR_XM_SpammyWords2 13847 3.58 10.82 0.95 45 SpammyFromTLD_02 13368 2.92 10.44 0.19 46 UNPARSEABLE_RELAY 12990 8.24 10.15 7.55 47 RCVD_IN_MSPIKE_H3 12729 13.43 9.95 14.69 48 TR_XM_UnparsRelay 12476 7.02 9.75 6.03 49 HTML_IMAGE_RATIO_02 12392 7.16 9.68 6.25 50 HTML_MIME_NO_HTML_TAG 12369 4.46 9.66 2.58 51 KHOP_HELO_FCRDNS 10941 3.71 8.55 1.96 52 XM_Evil_Numbers_Gen 10891 8.20 8.51 8.09 53 BAYES_80 10851 5.64 8.48 4.61 54 BAYES_60 10740 8.93 8.39 9.12 55 T_HTML_TAG_BALANCE_CENTER 10725 2.28 8.38 0.07 56 RCVD_IN_MSPIKE_H4 10373 10.14 8.10 10.87 57 HTML_IMAGE_ONLY_08 10210 2.19 7.98 0.10 58 XM_SendGrid 10117 6.98 7.90 6.65 59 RCVD_IN_BL_SPAMCOP_NET 9564 2.32 7.47 0.45 60 RCVD_IN_MSPIKE_BL 9443 2.20 7.38 0.33 61 MPART_ALT_DIFF 9408 5.44 7.35 4.74 62 TR_XM_MSPIKECOMBO 9378 2.18 7.33 0.31 63 LotsOfNums_01 9077 8.44 7.09 8.93 64 XM_B_Phish_Phrases 8880 4.43 6.94 3.52 65 DKIM_INVALID 8840 4.61 6.91 3.78 66 BODY_URI_ONLY 8494 1.77 6.64 0.01 67 XMSubMetaSx_00 8470 4.41 6.62 3.60 68 MIXED_CENTER_CASE 8195 1.70 6.40 0.00 69 MIXED_HREF_CASE 8195 1.70 6.40 0.00 70 MIXED_IMG_CASE 8096 1.69 6.33 0.00 71 MIXED_AREA_CASE 8090 1.68 6.32 0.00 72 HTML_FONT_SIZE_LARGE 8068 1.76 6.30 0.12 73 MIXED_FONT_CASE 7915 1.65 6.18 0.00 74 XMNumbers 7849 4.06 6.13 3.31 75 TooManyTo_001 7741 8.46 6.05 9.33 76 XM_B_SpammyTLD 7738 3.12 6.05 2.05 77 TR_XM_PhishingBody 7713 4.23 6.03 3.58 78 TR_XM_SpammyWords3 7175 1.68 5.61 0.25 79 TR_XM_SpammyWords5 6889 2.44 5.38 1.37 80 XM_H_Long_From01 6820 5.27 5.33 5.25 81 MIME_HTML_MOSTLY 6235 2.75 4.87 1.98 82 BAYES_95 5960 3.26 4.66 2.76 83 URI_GOOG_STO_SPAMMY 5716 1.19 4.47 0.00 84 HTML_IMAGE_RATIO_04 5646 5.69 4.41 6.15 85 BOTNET_NORDNS 5644 1.18 4.41 0.01 86 RELAYCOUNTRY_CA 5611 2.01 4.38 1.15 87 XM_UB50 5587 1.92 4.37 1.04 88 TR_XM_DK_SendGrid 5413 4.09 4.23 4.04 89 XM_SPF_SoftFail 5246 2.87 4.10 2.43 90 RCVD_IN_MSPIKE_L5 5175 1.14 4.04 0.08 91 RCVD_IN_RP_SAFE 5087 6.12 3.97 6.90 92 T_XMDrugObfuBody_08 4937 2.08 3.86 1.43 93 PDS_OTHER_BAD_TLD 4805 1.21 3.75 0.29 94 XM_UB99 4729 1.00 3.69 0.02 95 TM2_M_URI_OPT_OUT 4585 3.33 3.58 3.24 96 MIME_QP_LONG_LINE 4544 4.88 3.55 5.36 97 HTML_IMAGE_RATIO_06 4511 3.47 3.52 3.45 98 GOOG_STO_IMG_HTML 4493 0.93 3.51 0.00 99 XM_B_Phish66 4468 2.46 3.49 2.08 100 XM_OfRef6 4345 1.56 3.39 0.90 101 URI_PHP_REDIR 4305 0.90 3.36 0.01 102 RCVD_IN_RP_CERTIFIED 4270 5.47 3.34 6.24 103 T_XMDrugObfuBody_14 4116 2.20 3.22 1.83 104 URI_NOVOWEL 4034 2.66 3.15 2.48 105 XM_DIRTYINTL 3919 1.32 3.06 0.70 106 XM_B_COVIDMETA 3860 1.37 3.02 0.77 107 MIME_HTML_ONLY_MULTI 3840 3.21 3.00 3.29 108 XMStrtUSub 3801 3.76 2.97 4.05 109 TR_XM_SPAMCOP 3793 0.92 2.96 0.18 110 RCVD_IN_PSBL 3736 0.80 2.92 0.03 111 RCVD_IN_MSPIKE_L4 3541 0.87 2.77 0.18 112 SpammyFromTLD_01 3397 1.33 2.65 0.85 113 HTML_FONT_SIZE_HUGE 3362 0.75 2.63 0.07 114 T_TooManySym_01 3344 5.19 2.61 6.13 115 URIBL_DBL_SPAM 3268 0.69 2.55 0.01 116 RCVD_IN_IADB_LISTED 3195 4.55 2.50 5.30 117 XMDiploma_00 3186 1.69 2.49 1.40 118 HTML_IMAGE_RATIO_08 3130 2.27 2.45 2.21 119 RCVD_IN_RP_RNBL 3100 0.66 2.42 0.02 120 TM2_M_VERY_LONG_WORD 3097 1.44 2.42 1.08 121 HTML_IMAGE_ONLY_20 3017 1.56 2.36 1.27 122 XM_B_Unsub2 3004 1.73 2.35 1.51 123 XM_UB999 2989 0.63 2.34 0.01 124 TR_XM_SB_Phish 2920 2.38 2.28 2.42 125 DIET_1 2917 0.83 2.28 0.30 126 HOSTED_IMG_DIRECT_MX 2906 0.60 2.27 0.00 127 XM_UB60 2898 0.80 2.26 0.26 128 RCVD_IN_IADB_SPF 2777 4.00 2.17 4.67 129 XM_CamelCaseFrm001 2722 1.77 2.13 1.64 130 TR_XM_PHPDW 2677 0.79 2.09 0.32 131 XMSlimDrugH 2647 0.70 2.07 0.21 132 URI_HEX 2644 1.42 2.07 1.19 133 XM_URI_RBL 2637 0.62 2.06 0.10 134 XM_B_SpammyWords4 2620 0.89 2.05 0.47 135 T_XMHurry_00 2615 0.83 2.04 0.40 136 XM_JunkDunk 2613 0.54 2.04 0.00 137 MAILING_LIST_MULTI 2595 2.97 2.03 3.32 138 XMBrknScrpt_02 2577 1.33 2.01 1.08 139 ALL_TRUSTED 2576 13.39 2.01 17.51 140 RCVD_IN_IADB_SENDERID 2571 3.63 2.01 4.22 141 RCVD_IN_IADB_DK 2550 3.53 1.99 4.09 142 XM_DK_Undo_01 2534 1.80 1.98 1.73 143 TR_XM_COVIDMETA4 2533 0.80 1.98 0.38 144 XMSubPhish11 2520 2.27 1.97 2.38 145 XMBody_17 2519 0.82 1.97 0.40 146 RELAYCOUNTRY_FR 2516 0.89 1.97 0.51 147 US_DOLLARS_3 2495 0.90 1.95 0.52 148 TR_XM_PHPForged 2441 0.72 1.91 0.29 149 DEAR_SOMETHING 2426 0.64 1.90 0.18 150 TR_XM_FormFill2 2346 0.70 1.83 0.28 151 XM_UB80 2335 0.52 1.82 0.04 152 XMStockSpam_06 2332 1.34 1.82 1.16 153 XM_H_PHPOS 2330 0.69 1.82 0.28 154 DATE_IN_PAST_03_06 2313 0.73 1.81 0.34 155 T_FILL_THIS_FORM_SHORT 2305 1.12 1.80 0.87 156 BAYES_40 2290 4.49 1.79 5.47 157 T_XMDrugObfuBody_00 2232 1.03 1.74 0.78 158 XMSexyCombo_01 2177 0.94 1.70 0.67 159 FROM_EXCESS_BASE64 2154 2.22 1.68 2.41 160 RELAYCOUNTRY_DE 2118 0.94 1.65 0.69 161 SUBJ_ALL_CAPS 2116 1.61 1.65 1.60 162 AMAZON_IMG_NOT_RCVD_AMZN 2094 0.45 1.64 0.02 163 TR_LOTS_OF_MONEY3 2086 0.70 1.63 0.36 164 ALIBABA_IMG_NOT_RCVD_ALI 2016 0.42 1.58 0.00 165 HOSTED_IMG_MULTI 2016 0.42 1.58 0.00 166 XMMoneyMeta_00 1979 0.82 1.55 0.55 167 TR_XM_COVIDMETA1 1970 0.62 1.54 0.29 168 TR_Symld_Words 1932 1.79 1.51 1.89 169 XM_B_Crypto 1910 0.48 1.49 0.11 170 RELAYCOUNTRY_NL 1896 0.55 1.48 0.21 171 URIBL_BLACK 1888 0.42 1.48 0.03 172 XMGenDplmaNmb 1875 0.98 1.46 0.81 173 TR_XM_INV_DKIM 1864 0.44 1.46 0.08 174 HTTPS_HTTP_MISMATCH 1834 0.96 1.43 0.79 175 XM_Body_Dirty_Words_01 1799 0.52 1.41 0.21 176 URIBL_SBL_A 1759 0.41 1.37 0.06 177 XMWghtMeta_00 1754 0.38 1.37 0.02 178 XMSubMetaI_00 1744 0.76 1.36 0.55 179 MPART_ALT_DIFF_COUNT 1741 0.65 1.36 0.40 180 TR_XM_BayesRelay 1700 0.36 1.33 0.01 181 BAYES_20 1666 3.01 1.30 3.63 182 XMHTML_After_End 1620 1.17 1.27 1.13 183 JH_SPAMMY_HEADERS 1609 0.34 1.26 0.00 184 XM_H_Long_From02 1607 1.02 1.26 0.93 185 XM_PDF 1606 4.46 1.25 5.62 186 XM_H_PHPMailer 1549 0.84 1.21 0.70 187 XM_UB95 1549 0.34 1.21 0.03 188 RELAYCOUNTRY_AU 1505 0.56 1.18 0.34 189 TR_XM_MaxBayes 1489 0.31 1.16 0.00 190 T_MONEY_PERCENT 1468 0.52 1.15 0.29 191 TR_LOTS_OF_MONEY2 1468 0.52 1.15 0.29 192 RELAYCOUNTRY_GB 1463 1.11 1.14 1.10 193 RCVD_IN_IADB_VOUCHED 1442 2.58 1.13 3.10 194 TR_Mismatch_TLD_02 1394 0.35 1.09 0.08 195 URI_TRY_3LD 1389 0.93 1.09 0.87 196 XM_ProductURIs 1389 0.67 1.09 0.52 197 TooManyTo_002 1389 2.26 1.09 2.68 198 T_Symld_Words_02 1380 0.80 1.08 0.70 199 DKIM_ADSP_CUSTOM_MED 1376 1.09 1.08 1.09 200 XM_B_SEO 1365 0.38 1.07 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 305329 88.93 95.75 86.46 2 RELAYCOUNTRY_US 279150 79.02 78.93 79.05 3 DKIM_SIGNED 248413 72.59 78.79 70.35 4 XM_DK_Pass 243289 70.38 74.48 68.89 5 XM_B_Unicode 238190 69.39 74.75 67.45 6 DKIM_VALID 235050 67.98 71.88 66.56 7 DCC_CHECK_NEGATIVE 225746 52.64 21.49 63.93 8 BAYES_50 195984 51.45 40.28 55.50 9 DKIM_VALID_AU 174107 49.96 51.79 49.30 10 XMListUnsubscribeExists 154754 49.30 64.43 43.82 11 XM_B_SpammyWords 147380 48.05 65.46 41.73 12 XM_B_Unicode3 135590 38.36 38.28 38.40 13 DCC_CHECK 127238 47.32 78.45 36.03 14 T_TM2_M_HEADER_IN_MSG 116945 31.27 26.19 33.12 15 RCVD_IN_MSPIKE_WL 99829 25.82 19.04 28.27 16 DKIM_VALID_EF 96547 27.79 29.02 27.34 17 RCVD_IN_MSPIKE_H2 87538 25.56 27.69 24.79 18 HTML_FONT_LOW_CONTRAST 87164 26.51 31.55 24.68 19 XMSubLong 78009 22.54 23.78 22.09 20 FVGT_m_MULTI_ODD 75806 22.86 26.70 21.47 21 LOC_TINY_FONT_1 74243 24.02 32.28 21.02 22 MIME_HTML_ONLY 70715 24.14 35.48 20.02 23 ALL_TRUSTED 61839 13.39 2.01 17.51 24 XM_B_SpammyWords2 59456 21.97 36.12 16.84 25 T_KAM_HTML_FONT_INVALID 58581 19.89 28.98 16.59 26 RCVD_IN_MSPIKE_H3 51873 13.43 9.95 14.69 27 XM_Body_Dirty_Words 39777 13.73 20.54 11.26 28 USER_IN_DEF_DKIM_WL 39106 8.37 0.91 11.07 29 RCVD_IN_MSPIKE_H4 38398 10.14 8.10 10.87 30 BAYES_00 36317 7.80 0.93 10.28 31 XM_Multi_Part_URI 35622 12.09 17.61 10.09 32 TooManyTo_001 32941 8.46 6.05 9.33 33 XM_B_Unsub 32750 9.89 11.58 9.27 34 BAYES_60 32204 8.93 8.39 9.12 35 LotsOfNums_01 31544 8.44 7.09 8.93 36 XM_Evil_Numbers_Gen 28573 8.20 8.51 8.09 37 XM_DK_Undo_02 27196 16.51 40.80 7.70 38 XM_DKIMWhitelistDomains 26698 5.56 0.05 7.56 39 UNPARSEABLE_RELAY 26655 8.24 10.15 7.55 40 FSL_BULK_SIG 25712 10.49 19.33 7.28 41 RCVD_IN_RP_SAFE 24349 6.12 3.97 6.90 42 XM_SendGrid 23472 6.98 7.90 6.65 43 LOTS_OF_MONEY 23201 8.71 14.63 6.57 44 BAYES_99 22584 13.58 33.41 6.40 45 TR_XM_DK_Bayes 22153 4.76 0.58 6.27 46 HTML_IMAGE_RATIO_02 22062 7.16 9.68 6.25 47 RCVD_IN_RP_CERTIFIED 22041 5.47 3.34 6.24 48 HTML_IMAGE_RATIO_04 21724 5.69 4.41 6.15 49 T_TooManySym_01 21645 5.19 2.61 6.13 50 TR_XM_DK_Bayes1 21497 4.62 0.56 6.09 51 TR_XM_UnparsRelay 21299 7.02 9.75 6.03 52 XM_PDF 19852 4.46 1.25 5.62 53 IN_ZIMBRA_NJ_WHITELIST 19495 4.07 0.06 5.52 54 TR_XM_DKIM_Undo 19410 12.56 32.06 5.50 55 BAYES_40 19304 4.49 1.79 5.47 56 MIME_QP_LONG_LINE 18914 4.88 3.55 5.36 57 RCVD_IN_IADB_LISTED 18713 4.55 2.50 5.30 58 XM_H_Long_From01 18524 5.27 5.33 5.25 59 BAYES_999 18341 10.62 25.59 5.19 60 TR_XM_DK_Bayes2 17888 3.84 0.45 5.07 61 RELAYCOUNTRY_META 17813 8.78 19.08 5.04 62 MPART_ALT_DIFF 16747 5.44 7.35 4.74 63 XM_H_Trusted_IP 16634 3.46 0.00 4.71 64 RCVD_IN_IADB_SPF 16492 4.00 2.17 4.67 65 BAYES_80 16274 5.64 8.48 4.61 66 RCVD_IN_IADB_SENDERID 14890 3.63 2.01 4.22 67 BOTNET_IPINHOSTNAME 14735 6.63 13.39 4.17 68 RCVD_IN_IADB_DK 14452 3.53 1.99 4.09 69 XMStrtUSub 14311 3.76 2.97 4.05 70 TR_XM_DK_SendGrid 14267 4.09 4.23 4.04 71 TR_XM_SpammyWords4 13951 6.32 12.85 3.95 72 XMSexyCombo_05 13646 5.77 11.03 3.86 73 DKIM_INVALID 13363 4.61 6.91 3.78 74 T_REMOTE_IMAGE 13239 6.08 12.50 3.75 75 XM_UncommonTLD01 12841 6.77 15.42 3.64 76 BAYES_20 12821 3.01 1.30 3.63 77 XMSubMetaSx_00 12724 4.41 6.62 3.60 78 TR_XM_PhishingBody 12655 4.23 6.03 3.58 79 XM_B_Phish_Phrases 12426 4.43 6.94 3.52 80 HTML_IMAGE_RATIO_06 12199 3.47 3.52 3.45 81 XM_B_SpammyWords3 11833 5.66 12.01 3.35 82 MAILING_LIST_MULTI 11715 2.97 2.03 3.32 83 XMNumbers 11679 4.06 6.13 3.31 84 MIME_HTML_ONLY_MULTI 11613 3.21 3.00 3.29 85 ANY_BOUNCE_MESSAGE 11570 2.59 0.71 3.28 86 BOUNCE_MESSAGE 11570 2.59 0.71 3.28 87 TM2_M_URI_OPT_OUT 11424 3.33 3.58 3.24 88 RCVD_IN_IADB_VOUCHED 10951 2.58 1.13 3.10 89 TR_DCC_Bayes_99 10840 9.15 25.92 3.07 90 T_TooManySym_02 9939 2.24 0.67 2.81 91 BAYES_95 9733 3.26 4.66 2.76 92 RCVD_IN_MSPIKE_H5 9558 2.25 0.99 2.71 93 TooManyTo_002 9467 2.26 1.09 2.68 94 HTML_MIME_NO_HTML_TAG 9108 4.46 9.66 2.58 95 URI_NOVOWEL 8745 2.66 3.15 2.48 96 XM_SPF_SoftFail 8577 2.87 4.10 2.43 97 TR_XM_SB_Phish 8533 2.38 2.28 2.42 98 FROM_EXCESS_BASE64 8507 2.22 1.68 2.41 99 XMSubPhish11 8410 2.27 1.97 2.38 100 BAYES_05 7913 1.84 0.75 2.24 101 HELO_NODOT 7816 1.80 0.66 2.21 102 HELO_NO_DOMAIN 7813 1.80 0.66 2.21 103 HTML_IMAGE_RATIO_08 7801 2.27 2.45 2.21 104 XM_B_Phish66 7355 2.46 3.49 2.08 105 XM_B_SpammyTLD 7253 3.12 6.05 2.05 106 RCVD_IN_IADB_OPTIN 7232 1.70 0.74 2.05 107 IN_HORDE_ADDRESS_BOOK 7117 1.50 0.08 2.02 108 MIME_HTML_MOSTLY 7007 2.75 4.87 1.98 109 INVALID_MSGID 6979 1.51 0.23 1.98 110 KHOP_HELO_FCRDNS 6915 3.71 8.55 1.96 111 TR_Symld_Words 6677 1.79 1.51 1.89 112 XMSubNoVowel 6652 1.50 0.46 1.88 113 TVD_RCVD_IP 6487 1.48 0.51 1.84 114 MSGID_NOFQDN1 6476 1.35 0.03 1.83 115 T_XMDrugObfuBody_14 6461 2.20 3.22 1.83 116 TO_MALFORMED 6322 1.32 0.01 1.79 117 UNTRUSTED_Relay 6322 4.97 13.74 1.79 118 TooManyTo_003 6300 1.55 0.89 1.78 119 XM_DK_Undo_01 6120 1.80 1.98 1.73 120 XM_CamelCaseFrm001 5797 1.77 2.13 1.64 121 SUBJ_ALL_CAPS 5650 1.61 1.65 1.60 122 XM_GoogleGroups 5334 1.28 0.65 1.51 123 XM_B_Unsub2 5319 1.73 2.35 1.51 124 BOTNET 5290 5.68 17.22 1.50 125 XMCapTrack 5290 1.26 0.62 1.50 126 T_XMDrugObfuBody_08 5055 2.08 3.86 1.43 127 XMDiploma_00 4951 1.69 2.49 1.40 128 TR_XM_SpammyWords5 4844 2.44 5.38 1.37 129 TooManyTo_004 4552 1.15 0.77 1.29 130 XMGappySubj_01 4546 0.98 0.13 1.29 131 HTML_IMAGE_ONLY_20 4482 1.56 2.36 1.27 132 URI_HEX 4193 1.42 2.07 1.19 133 XMStockSpam_06 4113 1.34 1.82 1.16 134 RELAYCOUNTRY_CA 4062 2.01 4.38 1.15 135 XMHTML_After_End 3996 1.17 1.27 1.13 136 RELAYCOUNTRY_GB 3873 1.11 1.14 1.10 137 DKIM_ADSP_CUSTOM_MED 3857 1.09 1.08 1.09 138 TM2_M_VERY_LONG_WORD 3821 1.44 2.42 1.08 139 XMBrknScrpt_02 3799 1.33 2.01 1.08 140 TooManyTo_005 3696 0.95 0.68 1.05 141 XMNoVowels 3685 0.96 0.73 1.04 142 XM_UB50 3664 1.92 4.37 1.04 143 HTML_FONT_FACE_BAD 3450 0.89 0.66 0.98 144 TR_XM_SpammyWords2 3368 3.58 10.82 0.95 145 XM_H_Long_From02 3291 1.02 1.26 0.93 146 XM_OfRef6 3183 1.56 3.39 0.90 147 XMBSHREFv2 3176 0.74 0.29 0.90 148 T_TooManySym_03 3095 0.71 0.24 0.88 149 XM_E_Blogspot 3090 0.67 0.09 0.88 150 URI_TRY_3LD 3089 0.93 1.09 0.87 151 T_FILL_THIS_FORM_SHORT 3066 1.12 1.80 0.87 152 SpammyFromTLD_01 3006 1.33 2.65 0.85 153 XMPhish30 2999 0.89 1.00 0.85 154 XMSolicitRefs_0 2868 0.70 0.39 0.81 155 XMGenDplmaNmb 2851 0.98 1.46 0.81 156 HTTPS_HTTP_MISMATCH 2799 0.96 1.43 0.79 157 T_XMDrugObfuBody_00 2745 1.03 1.74 0.78 158 XM_B_COVIDMETA 2711 1.37 3.02 0.77 159 TR_MetaPhish_Combo_01 2709 0.77 0.79 0.77 160 XMBody_95 2665 0.59 0.15 0.75 161 RCVD_IN_SORBS_DUL 2665 0.64 0.33 0.75 162 XM_ShortIntro_01 2629 0.72 0.65 0.74 163 XM_SPF_Unknown 2612 0.75 0.76 0.74 164 NML_ADSP_CUSTOM_MED 2473 0.71 0.73 0.70 165 XM_H_PHPMailer 2470 0.84 1.21 0.70 166 T_Symld_Words_02 2469 0.80 1.08 0.70 167 XMBdyGiftCard01 2456 0.73 0.82 0.70 168 XM_DIRTYINTL 2455 1.32 3.06 0.70 169 RELAYCOUNTRY_DE 2427 0.94 1.65 0.69 170 XMSexyCombo_01 2349 0.94 1.70 0.67 171 T_OBFU_PDF_ATTACH 2185 0.50 0.16 0.62 172 XMSubMetaSxObfu_03 2143 0.62 0.65 0.61 173 SHORT_HELO_AND_INLINE_IMAGE 2090 0.46 0.10 0.59 174 FROM_GOV_SPOOF 2087 0.52 0.31 0.59 175 MISSING_HEADERS 2065 0.60 0.63 0.58 176 TM2_M_BODY_EMPTY 2031 0.46 0.14 0.58 177 XMMoneyMeta_00 1957 0.82 1.55 0.55 178 XMSubMetaI_00 1932 0.76 1.36 0.55 179 FORGED_GMAIL_RCVD 1894 0.63 0.91 0.54 180 HTML_IMAGE_ONLY_32 1856 0.46 0.26 0.53 181 US_DOLLARS_3 1853 0.90 1.95 0.52 182 XM_ProductURIs 1844 0.67 1.09 0.52 183 XMHTMLBadTable_001 1826 0.63 0.95 0.52 184 RELAYCOUNTRY_FR 1787 0.89 1.97 0.51 185 T_MANY_PILL_PRICE 1756 0.37 0.00 0.50 186 XM_B_COPY_HTML 1744 0.54 0.65 0.49 187 HTML_IMAGE_ONLY_28 1730 0.43 0.28 0.49 188 TR_MSPIKEBAYES00 1718 0.36 0.01 0.49 189 TVD_SPACE_RATIO 1686 0.38 0.11 0.48 190 XM_B_SpammyWords4 1671 0.89 2.05 0.47 191 XM_B_REG_HTML 1624 0.60 0.98 0.46 192 NICE_REPLY_A 1612 0.34 0.03 0.46 193 RCVD_IN_BL_SPAMCOP_NET 1590 2.32 7.47 0.45 194 RDNS_DYNAMIC 1565 0.56 0.89 0.44 195 PDS_BAD_THREAD_QP_64 1511 0.37 0.20 0.43 196 USER_IN_WHITELIST 1492 0.31 0.00 0.42 197 USER_IN_WELCOMELIST 1492 0.31 0.00 0.42 198 TM2_M_A_HREF_HREF 1478 0.47 0.62 0.42 199 GMD_PDF_EMPTY_BODY 1470 0.33 0.09 0.42 200 TVD_SPACE_RATIO_MINFP 1469 0.33 0.10 0.42 ----------------------------------------------------------------------