Email: 497703 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 1.62 sec Spam: 129890 Autolearn: 0 AvgScore: 14.69 AvgScanTime: 2.18 sec Ham: 367813 Autolearn: 0 AvgScore: -1.41 AvgScanTime: 1.42 sec Time Spent Running SA: 223.56 hours Time Spent Processing Spam: 78.74 hours Time Spent Processing Ham: 144.81 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122591 88.47 94.38 86.39 2 DKIM_SIGNED 105441 73.76 81.18 71.14 3 DCC_CHECK 101870 48.79 78.43 38.33 4 RELAYCOUNTRY_US 101137 78.99 77.86 79.38 5 XM_DK_Pass 99753 71.61 76.80 69.77 6 XM_B_Unicode 99026 71.44 76.24 69.75 7 DKIM_VALID 96675 69.41 74.43 67.64 8 XMListUnsubscribeExists 86082 50.49 66.27 44.92 9 XM_B_SpammyWords 84796 49.71 65.28 44.21 10 DKIM_VALID_AU 70658 51.96 54.40 51.10 11 BAYES_50 55495 50.76 42.72 53.60 12 XM_B_Unicode3 55115 41.54 42.43 41.23 13 XM_DK_Undo_02 52374 15.91 40.32 7.29 14 XM_B_SpammyWords2 48261 23.70 37.16 18.95 15 LOC_TINY_FONT_1 44875 25.66 34.55 22.52 16 MIME_HTML_ONLY 43952 25.00 33.84 21.88 17 HTML_FONT_LOW_CONTRAST 43295 28.01 33.33 26.13 18 TR_XM_DKIM_Undo 41480 12.41 31.93 5.51 19 BAYES_99 39140 12.28 30.13 5.98 20 T_KAM_HTML_FONT_INVALID 38606 19.90 29.72 16.44 21 RCVD_IN_MSPIKE_H2 38047 26.08 29.29 24.95 22 DKIM_VALID_EF 37334 27.14 28.74 26.58 23 FVGT_m_MULTI_ODD 34720 23.29 26.73 22.07 24 XMSubLong 31868 22.81 24.53 22.20 25 BAYES_999 30037 9.69 23.12 4.95 26 TR_DCC_Bayes_99 29653 8.04 22.83 2.82 27 T_TM2_M_HEADER_IN_MSG 29539 28.94 22.74 31.14 28 XM_Body_Dirty_Words 28844 14.77 22.21 12.14 29 DCC_CHECK_NEGATIVE 27983 51.18 21.54 61.64 30 RCVD_IN_MSPIKE_WL 25910 26.61 19.95 28.96 31 RELAYCOUNTRY_META 25909 8.73 19.95 4.76 32 FSL_BULK_SIG 23118 10.67 17.80 8.16 33 XM_Multi_Part_URI 21246 12.35 16.36 10.94 34 XM_UncommonTLD01 20771 6.72 15.99 3.45 35 BOTNET 20412 5.37 15.71 1.72 36 LOTS_OF_MONEY 19762 9.91 15.21 8.03 37 UNTRUSTED_Relay 19467 5.48 14.99 2.12 38 BOTNET_IPINHOSTNAME 18993 7.25 14.62 4.65 39 TR_XM_SpammyWords4 16645 7.34 12.81 5.40 40 XM_B_SpammyWords3 16308 5.99 12.56 3.67 41 XM_B_Unsub 15691 11.30 12.08 11.03 42 XMSexyCombo_05 15279 6.36 11.76 4.45 43 UNPARSEABLE_RELAY 14578 8.62 11.22 7.70 44 TR_XM_UnparsRelay 14220 7.30 10.95 6.01 45 SpammyFromTLD_02 14072 3.24 10.83 0.56 46 TR_XM_SpammyWords2 14065 3.48 10.83 0.89 47 RCVD_IN_MSPIKE_H3 13350 13.98 10.28 15.29 48 T_REMOTE_IMAGE 12595 5.19 9.70 3.60 49 TR_XM_PhishingBody 11551 4.82 8.89 3.38 50 XM_SendGrid 11417 7.31 8.79 6.79 51 HTML_MIME_NO_HTML_TAG 11358 4.19 8.74 2.58 52 RCVD_IN_MSPIKE_H4 11311 10.62 8.71 11.29 53 RCVD_IN_BL_SPAMCOP_NET 11229 2.69 8.65 0.59 54 MPART_ALT_DIFF 11116 6.48 8.56 5.74 55 XM_Evil_Numbers_Gen 10756 8.21 8.28 8.19 56 XM_B_Phish_Phrases 10307 5.25 7.94 4.30 57 KHOP_HELO_FCRDNS 9891 3.23 7.61 1.68 58 HTML_IMAGE_ONLY_08 9747 2.03 7.50 0.10 59 BAYES_60 9513 8.17 7.32 8.47 60 T_HTML_TAG_BALANCE_CENTER 9448 1.96 7.27 0.08 61 XM_B_SpammyTLD 9357 3.41 7.20 2.07 62 BAYES_80 9304 4.78 7.16 3.94 63 XMSubMetaSx_00 9301 4.64 7.16 3.75 64 LotsOfNums_01 9060 8.58 6.98 9.14 65 HTML_IMAGE_RATIO_02 8850 5.84 6.81 5.49 66 DKIM_INVALID 8766 4.35 6.75 3.50 67 TooManyTo_001 8540 8.21 6.57 8.78 68 RCVD_IN_MSPIKE_BL 8381 1.94 6.45 0.35 69 TR_XM_MSPIKECOMBO 8003 1.86 6.16 0.34 70 BODY_URI_ONLY 7951 1.61 6.12 0.01 71 XM_B_Phish66 7917 2.93 6.10 1.82 72 MIXED_HREF_CASE 7792 1.57 6.00 0.00 73 XMNumbers 7789 4.13 6.00 3.47 74 MIXED_CENTER_CASE 7788 1.57 6.00 0.00 75 MIXED_FONT_CASE 7778 1.56 5.99 0.00 76 MIXED_AREA_CASE 7771 1.56 5.98 0.00 77 MIME_HTML_MOSTLY 7517 3.27 5.79 2.39 78 MIXED_IMG_CASE 7420 1.49 5.71 0.00 79 XM_H_Long_From01 7147 5.53 5.50 5.54 80 HTML_IMAGE_RATIO_04 7043 6.93 5.42 7.47 81 XM_UB50 7008 2.55 5.40 1.54 82 TR_XM_DK_SendGrid 6208 4.47 4.78 4.36 83 TR_XM_SPAMCOP 6117 1.44 4.71 0.28 84 HTML_FONT_SIZE_LARGE 5954 1.28 4.58 0.11 85 URIBL_DBL_SPAM 5925 1.20 4.56 0.01 86 PDS_OTHER_BAD_TLD 5898 1.31 4.54 0.17 87 RELAYCOUNTRY_CA 5775 1.83 4.45 0.91 88 URI_NOVOWEL 5674 3.12 4.37 2.68 89 URI_GOOG_STO_SPAMMY 5521 1.11 4.25 0.00 90 BAYES_95 5371 2.95 4.14 2.53 91 MIME_QP_LONG_LINE 4986 5.28 3.84 5.79 92 XM_SPF_SoftFail 4937 2.34 3.80 1.83 93 TR_XM_SpammyWords3 4933 1.20 3.80 0.28 94 XM_OfRef6 4740 1.75 3.65 1.08 95 MIME_HTML_ONLY_MULTI 4709 4.02 3.63 4.15 96 BOTNET_NORDNS 4706 0.96 3.62 0.02 97 TM2_M_URI_OPT_OUT 4624 3.65 3.56 3.69 98 RCVD_IN_MSPIKE_L5 4546 0.97 3.50 0.08 99 TR_XM_SpammyWords5 4469 2.13 3.44 1.67 100 RCVD_IN_RP_SAFE 4305 5.65 3.31 6.48 101 XM_B_COVIDMETA 4246 1.72 3.27 1.17 102 T_XMDrugObfuBody_14 4100 2.59 3.16 2.39 103 HTML_IMAGE_RATIO_06 4062 3.66 3.13 3.84 104 T_XMDrugObfuBody_08 4038 1.83 3.11 1.38 105 XM_DIRTYINTL 3947 1.43 3.04 0.86 106 RCVD_IN_PSBL 3914 0.88 3.01 0.13 107 SpammyFromTLD_01 3819 1.30 2.94 0.72 108 GOOG_STO_IMG_HTML 3814 0.77 2.94 0.00 109 XMStrtUSub 3690 3.75 2.84 4.07 110 RCVD_IN_IADB_LISTED 3606 4.84 2.78 5.56 111 RCVD_IN_RP_CERTIFIED 3586 4.78 2.76 5.49 112 XMDiploma_00 3534 1.63 2.72 1.25 113 XM_UB99 3532 0.71 2.72 0.01 114 BAYES_40 3466 4.57 2.67 5.24 115 FROM_EXCESS_BASE64 3463 2.45 2.67 2.37 116 T_TooManySym_01 3457 5.14 2.66 6.01 117 HTML_FONT_SIZE_HUGE 3432 0.76 2.64 0.09 118 BAYES_00 3383 10.54 2.60 13.34 119 TR_XM_SB_Phish 3296 2.48 2.54 2.46 120 RCVD_IN_IADB_SPF 3218 4.27 2.48 4.90 121 XMSubPhish11 3192 2.44 2.46 2.44 122 XMSlimDrugH 3110 0.82 2.39 0.27 123 TM2_M_VERY_LONG_WORD 3103 1.42 2.39 1.08 124 TR_XM_COVIDMETA4 3056 0.90 2.35 0.38 125 RCVD_IN_IADB_DK 3053 3.76 2.35 4.26 126 RCVD_IN_IADB_SENDERID 3048 3.86 2.35 4.40 127 URI_PHP_REDIR 3035 0.61 2.34 0.00 128 JH_SPAMMY_HEADERS 3031 0.61 2.33 0.00 129 URI_HEX 3012 1.57 2.32 1.30 130 XMBody_17 3011 1.00 2.32 0.53 131 DIET_1 2892 0.94 2.23 0.48 132 HTML_IMAGE_RATIO_08 2857 2.22 2.20 2.22 133 BAYES_20 2850 3.79 2.19 4.35 134 XM_UB60 2786 0.62 2.14 0.08 135 XM_CamelCaseFrm001 2784 1.87 2.14 1.77 136 TR_Symld_Words 2719 1.93 2.09 1.87 137 XM_DK_Undo_01 2664 1.75 2.05 1.65 138 TR_XM_PhishingBody3 2646 0.53 2.04 0.00 139 T_FILL_THIS_FORM_SHORT 2646 1.27 2.04 1.00 140 XMSexyCombo_01 2640 1.22 2.03 0.93 141 URI_TRY_3LD 2614 1.29 2.01 1.04 142 TR_XM_PHPDW 2573 0.73 1.98 0.29 143 XM_B_SpammyWords4 2480 0.74 1.91 0.33 144 TR_XM_COVIDMETA1 2443 0.71 1.88 0.29 145 ALL_TRUSTED 2441 13.12 1.88 17.10 146 XMWghtMeta_00 2440 0.51 1.88 0.02 147 US_DOLLARS_3 2401 1.02 1.85 0.73 148 SUBJ_ALL_CAPS 2398 1.84 1.85 1.83 149 RCVD_IN_MSPIKE_L4 2396 0.61 1.84 0.17 150 MAILING_LIST_MULTI 2376 2.32 1.83 2.50 151 RCVD_IN_RP_RNBL 2356 0.49 1.81 0.02 152 FROM_SUSPICIOUS_NTLD 2339 0.50 1.80 0.04 153 TR_XM_PHPForged 2322 0.65 1.79 0.25 154 XM_B_Unsub2 2317 1.40 1.78 1.26 155 TR_XM_FormFill2 2305 0.65 1.77 0.25 156 FROM_SUSPICIOUS_NTLD_FP 2296 0.49 1.77 0.03 157 XM_H_PHPOS 2294 0.64 1.77 0.24 158 XM_URI_RBL 2272 0.56 1.75 0.14 159 TR_LOTS_OF_MONEY3 2247 0.76 1.73 0.42 160 XMStockSpam_06 2239 1.63 1.72 1.60 161 T_XMHurry_00 2168 0.92 1.67 0.66 162 XM_UB999 2162 0.43 1.66 0.00 163 XMGenDplmaNmb 2157 0.98 1.66 0.74 164 XM_Body_Dirty_Words_01 2119 1.05 1.63 0.84 165 RELAYCOUNTRY_NL 2095 0.54 1.61 0.16 166 RELAYCOUNTRY_DE 2034 1.04 1.57 0.85 167 XM_UB80 1961 0.41 1.51 0.03 168 URIBL_SBL_A 1956 0.49 1.51 0.13 169 XMBrknScrpt_02 1924 1.00 1.48 0.84 170 USER_IN_DEF_DKIM_WL 1902 8.76 1.46 11.33 171 URIBL_BLACK 1878 0.41 1.45 0.04 172 XMMoneyMeta_00 1863 0.75 1.43 0.51 173 T_XMDrugObfuBody_00 1837 0.84 1.41 0.64 174 XM_H_Long_From02 1803 1.08 1.39 0.97 175 RELAYCOUNTRY_IN 1753 0.45 1.35 0.13 176 TR_XM_BayesRelay 1703 0.35 1.31 0.01 177 TR_XM_INV_DKIM 1639 0.43 1.26 0.14 178 TR_XM_MaxBayes 1623 0.33 1.25 0.01 179 XMNoVowels 1606 1.20 1.24 1.19 180 XM_B_SEO 1586 0.46 1.22 0.20 181 XMPhish30 1559 0.99 1.20 0.92 182 MPART_ALT_DIFF_COUNT 1542 0.58 1.19 0.36 183 DKIM_ADSP_CUSTOM_MED 1499 0.97 1.15 0.91 184 TR_XM_SEO4 1491 0.41 1.15 0.15 185 RELAYCOUNTRY_IR 1488 0.30 1.15 0.00 186 T_Symld_Words_02 1470 0.61 1.13 0.42 187 RCVD_IN_IADB_VOUCHED 1469 2.83 1.13 3.43 188 RELAYCOUNTRY_FR 1457 0.72 1.12 0.58 189 XM_H_TOP 1456 0.30 1.12 0.01 190 XM_JunkDunk 1450 0.29 1.12 0.00 191 HK_RANDOM_REPLYTO 1448 0.37 1.11 0.11 192 RELAYCOUNTRY_GB 1446 0.93 1.11 0.87 193 XMBdyGiftCard01 1414 0.75 1.09 0.63 194 RELAYCOUNTRY_CH 1398 0.31 1.08 0.04 195 XM_PDF 1382 4.32 1.06 5.47 196 TM2_M_A_HREF_HREF 1373 0.58 1.06 0.41 197 BAYES_05 1360 2.16 1.05 2.55 198 FORGED_GMAIL_RCVD 1357 0.60 1.04 0.44 199 HELO_NODOT 1348 1.50 1.04 1.66 200 HELO_NO_DOMAIN 1346 1.50 1.04 1.66 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 317751 88.47 94.38 86.39 2 RELAYCOUNTRY_US 291977 78.99 77.86 79.38 3 DKIM_SIGNED 261664 73.76 81.18 71.14 4 XM_DK_Pass 256632 71.61 76.80 69.77 5 XM_B_Unicode 256539 71.44 76.24 69.75 6 DKIM_VALID 248774 69.41 74.43 67.64 7 DCC_CHECK_NEGATIVE 226736 51.18 21.54 61.64 8 BAYES_50 197147 50.76 42.72 53.60 9 DKIM_VALID_AU 187968 51.96 54.40 51.10 10 XMListUnsubscribeExists 165224 50.49 66.27 44.92 11 XM_B_SpammyWords 162626 49.71 65.28 44.21 12 XM_B_Unicode3 151638 41.54 42.43 41.23 13 DCC_CHECK 140965 48.79 78.43 38.33 14 T_TM2_M_HEADER_IN_MSG 114521 28.94 22.74 31.14 15 RCVD_IN_MSPIKE_WL 106521 26.61 19.95 28.96 16 DKIM_VALID_EF 97761 27.14 28.74 26.58 17 HTML_FONT_LOW_CONTRAST 96108 28.01 33.33 26.13 18 RCVD_IN_MSPIKE_H2 91771 26.08 29.29 24.95 19 LOC_TINY_FONT_1 82845 25.66 34.55 22.52 20 XMSubLong 81654 22.81 24.53 22.20 21 FVGT_m_MULTI_ODD 81194 23.29 26.73 22.07 22 MIME_HTML_ONLY 80460 25.00 33.84 21.88 23 XM_B_SpammyWords2 69714 23.70 37.16 18.95 24 ALL_TRUSTED 62881 13.12 1.88 17.10 25 T_KAM_HTML_FONT_INVALID 60461 19.90 29.72 16.44 26 RCVD_IN_MSPIKE_H3 56230 13.98 10.28 15.29 27 BAYES_00 49060 10.54 2.60 13.34 28 XM_Body_Dirty_Words 44646 14.77 22.21 12.14 29 USER_IN_DEF_DKIM_WL 41675 8.76 1.46 11.33 30 RCVD_IN_MSPIKE_H4 41523 10.62 8.71 11.29 31 XM_B_Unsub 40557 11.30 12.08 11.03 32 XM_Multi_Part_URI 40236 12.35 16.36 10.94 33 LotsOfNums_01 33624 8.58 6.98 9.14 34 TooManyTo_001 32303 8.21 6.57 8.78 35 BAYES_60 31153 8.17 7.32 8.47 36 XM_DKIMWhitelistDomains 30212 6.09 0.09 8.21 37 XM_Evil_Numbers_Gen 30116 8.21 8.28 8.19 38 FSL_BULK_SIG 29997 10.67 17.80 8.16 39 LOTS_OF_MONEY 29547 9.91 15.21 8.03 40 TR_XM_DK_Bayes 28914 6.05 0.92 7.86 41 UNPARSEABLE_RELAY 28316 8.62 11.22 7.70 42 TR_XM_DK_Bayes1 27971 5.85 0.88 7.60 43 HTML_IMAGE_RATIO_04 27464 6.93 5.42 7.47 44 XM_DK_Undo_02 26814 15.91 40.32 7.29 45 XM_SendGrid 24983 7.31 8.79 6.79 46 RCVD_IN_RP_SAFE 23830 5.65 3.31 6.48 47 TR_XM_DK_Bayes2 23815 4.95 0.64 6.47 48 T_TooManySym_01 22117 5.14 2.66 6.01 49 TR_XM_UnparsRelay 22088 7.30 10.95 6.01 50 BAYES_99 22002 12.28 30.13 5.98 51 XM_H_Trusted_IP 21331 4.29 0.00 5.80 52 MIME_QP_LONG_LINE 21305 5.28 3.84 5.79 53 MPART_ALT_DIFF 21123 6.48 8.56 5.74 54 RCVD_IN_IADB_LISTED 20464 4.84 2.78 5.56 55 XM_H_Long_From01 20395 5.53 5.50 5.54 56 TR_XM_DKIM_Undo 20263 12.41 31.93 5.51 57 HTML_IMAGE_RATIO_02 20208 5.84 6.81 5.49 58 RCVD_IN_RP_CERTIFIED 20187 4.78 2.76 5.49 59 XM_PDF 20101 4.32 1.06 5.47 60 TR_XM_SpammyWords4 19876 7.34 12.81 5.40 61 IN_ZIMBRA_NJ_WHITELIST 19783 3.99 0.06 5.38 62 BAYES_40 19269 4.57 2.67 5.24 63 BAYES_999 18196 9.69 23.12 4.95 64 RCVD_IN_IADB_SPF 18017 4.27 2.48 4.90 65 RELAYCOUNTRY_META 17524 8.73 19.95 4.76 66 BOTNET_IPINHOSTNAME 17110 7.25 14.62 4.65 67 XMSexyCombo_05 16355 6.36 11.76 4.45 68 RCVD_IN_IADB_SENDERID 16188 3.86 2.35 4.40 69 TR_XM_DK_SendGrid 16024 4.47 4.78 4.36 70 BAYES_20 16006 3.79 2.19 4.35 71 XM_B_Phish_Phrases 15825 5.25 7.94 4.30 72 RCVD_IN_IADB_DK 15672 3.76 2.35 4.26 73 MIME_HTML_ONLY_MULTI 15282 4.02 3.63 4.15 74 XMStrtUSub 14961 3.75 2.84 4.07 75 BAYES_80 14474 4.78 7.16 3.94 76 HTML_IMAGE_RATIO_06 14131 3.66 3.13 3.84 77 XMSubMetaSx_00 13807 4.64 7.16 3.75 78 TM2_M_URI_OPT_OUT 13554 3.65 3.56 3.69 79 XM_B_SpammyWords3 13506 5.99 12.56 3.67 80 T_REMOTE_IMAGE 13248 5.19 9.70 3.60 81 BOUNCE_MESSAGE 13072 2.79 0.64 3.55 82 ANY_BOUNCE_MESSAGE 13072 2.80 0.65 3.55 83 DKIM_INVALID 12890 4.35 6.75 3.50 84 XMNumbers 12761 4.13 6.00 3.47 85 XM_UncommonTLD01 12681 6.72 15.99 3.45 86 RCVD_IN_IADB_VOUCHED 12631 2.83 1.13 3.43 87 TR_XM_PhishingBody 12439 4.82 8.89 3.38 88 TR_DCC_Bayes_99 10362 8.04 22.83 2.82 89 URI_NOVOWEL 9839 3.12 4.37 2.68 90 T_TooManySym_02 9659 2.17 0.88 2.63 91 HTML_MIME_NO_HTML_TAG 9493 4.19 8.74 2.58 92 BAYES_05 9393 2.16 1.05 2.55 93 BAYES_95 9302 2.95 4.14 2.53 94 MAILING_LIST_MULTI 9189 2.32 1.83 2.50 95 TR_XM_SB_Phish 9039 2.48 2.54 2.46 96 XMSubPhish11 8960 2.44 2.46 2.44 97 T_XMDrugObfuBody_14 8804 2.59 3.16 2.39 98 MIME_HTML_MOSTLY 8778 3.27 5.79 2.39 99 RCVD_IN_MSPIKE_H5 8768 2.01 0.96 2.38 100 FROM_EXCESS_BASE64 8732 2.45 2.67 2.37 101 TooManyTo_002 8574 1.96 0.92 2.33 102 HTML_IMAGE_RATIO_08 8182 2.22 2.20 2.22 103 UNTRUSTED_Relay 7799 5.48 14.99 2.12 104 IN_HORDE_ADDRESS_BOOK 7791 1.58 0.07 2.12 105 RCVD_IN_IADB_OPTIN 7780 1.75 0.72 2.12 106 XM_B_SpammyTLD 7604 3.41 7.20 2.07 107 INVALID_MSGID 7266 1.50 0.15 1.98 108 TR_Symld_Words 6881 1.93 2.09 1.87 109 SUBJ_ALL_CAPS 6745 1.84 1.85 1.83 110 XM_SPF_SoftFail 6729 2.34 3.80 1.83 111 MSGID_NOFQDN1 6706 1.36 0.04 1.82 112 XM_B_Phish66 6680 2.93 6.10 1.82 113 XM_CamelCaseFrm001 6510 1.87 2.14 1.77 114 TO_MALFORMED 6384 1.28 0.01 1.74 115 BOTNET 6308 5.37 15.71 1.72 116 KHOP_HELO_FCRDNS 6177 3.23 7.61 1.68 117 TR_XM_SpammyWords5 6141 2.13 3.44 1.67 118 HELO_NODOT 6102 1.50 1.04 1.66 119 HELO_NO_DOMAIN 6101 1.50 1.04 1.66 120 XM_DK_Undo_01 6070 1.75 2.05 1.65 121 XMSubNoVowel 6025 1.34 0.48 1.64 122 HTML_FONT_FACE_BAD 5958 1.41 0.83 1.62 123 XMStockSpam_06 5877 1.63 1.72 1.60 124 XM_UB50 5660 2.55 5.40 1.54 125 TooManyTo_003 5640 1.33 0.75 1.53 126 TVD_RCVD_IP 5321 1.12 0.18 1.45 127 XMGappySubj_01 5160 1.08 0.18 1.40 128 T_XMDrugObfuBody_08 5061 1.83 3.11 1.38 129 URI_HEX 4788 1.57 2.32 1.30 130 XM_B_Unsub2 4647 1.40 1.78 1.26 131 XMDiploma_00 4587 1.63 2.72 1.25 132 XMNoVowels 4362 1.20 1.24 1.19 133 XM_B_COVIDMETA 4300 1.72 3.27 1.17 134 XMCapTrack 4268 1.06 0.77 1.16 135 HTML_IMAGE_ONLY_20 4210 0.92 0.27 1.14 136 XM_GoogleGroups 4206 1.01 0.62 1.14 137 TooManyTo_004 4006 0.98 0.66 1.09 138 TM2_M_VERY_LONG_WORD 3978 1.42 2.39 1.08 139 XM_OfRef6 3969 1.75 3.65 1.08 140 URI_TRY_3LD 3824 1.29 2.01 1.04 141 XMHTML_After_End 3711 0.97 0.87 1.01 142 T_FILL_THIS_FORM_SHORT 3681 1.27 2.04 1.00 143 XM_H_Long_From02 3580 1.08 1.39 0.97 144 XMSexyCombo_01 3436 1.22 2.03 0.93 145 XMBSHREFv2 3383 0.76 0.29 0.92 146 XMPhish30 3383 0.99 1.20 0.92 147 RELAYCOUNTRY_CA 3353 1.83 4.45 0.91 148 DKIM_ADSP_CUSTOM_MED 3334 0.97 1.15 0.91 149 TM2_M_BODY_EMPTY 3320 0.80 0.49 0.90 150 TR_XM_SpammyWords2 3278 3.48 10.83 0.89 151 RELAYCOUNTRY_GB 3203 0.93 1.11 0.87 152 XM_DIRTYINTL 3179 1.43 3.04 0.86 153 TooManyTo_005 3156 0.79 0.58 0.86 154 RELAYCOUNTRY_DE 3137 1.04 1.57 0.85 155 TR_MetaPhish_Combo_01 3129 0.89 0.99 0.85 156 XM_Body_Dirty_Words_01 3096 1.05 1.63 0.84 157 XMBrknScrpt_02 3075 1.00 1.48 0.84 158 XMSubMetaSxObfu_03 2921 0.82 0.91 0.79 159 XMBody_95 2900 0.65 0.24 0.79 160 T_TooManySym_03 2863 0.65 0.29 0.78 161 TR_MSPIKEBAYES00 2729 0.55 0.03 0.74 162 XMGenDplmaNmb 2715 0.98 1.66 0.74 163 US_DOLLARS_3 2673 1.02 1.85 0.73 164 SpammyFromTLD_01 2656 1.30 2.94 0.72 165 T_OBFU_PDF_ATTACH 2528 0.55 0.15 0.69 166 FROM_GOV_DKIM_AU 2516 0.54 0.15 0.68 167 XM_SPF_Unknown 2445 0.62 0.48 0.66 168 HTTPS_HTTP_MISMATCH 2431 0.75 1.01 0.66 169 T_XMHurry_00 2418 0.92 1.67 0.66 170 XM_ProductURIs 2400 0.71 0.87 0.65 171 T_XMDrugObfuBody_00 2360 0.84 1.41 0.64 172 XM_B_COPY_HTML 2302 0.62 0.62 0.63 173 XMBdyGiftCard01 2301 0.75 1.09 0.63 174 XM_ShortIntro_01 2233 0.64 0.72 0.61 175 NML_ADSP_CUSTOM_MED 2200 0.67 0.88 0.60 176 RCVD_IN_BL_SPAMCOP_NET 2156 2.69 8.65 0.59 177 RELAYCOUNTRY_FR 2126 0.72 1.12 0.58 178 TVD_SPACE_RATIO_MINFP 2104 0.56 0.51 0.57 179 RCVD_IN_SORBS_DUL 2090 0.48 0.24 0.57 180 SpammyFromTLD_02 2052 3.24 10.83 0.56 181 FROM_GOV_SPOOF 2040 0.48 0.26 0.55 182 XMSexyCombo_04 2036 0.59 0.71 0.55 183 XM_H_PHPMailer 2033 0.65 0.93 0.55 184 XMHTMLBadTable_001 1998 0.55 0.56 0.54 185 XMBody_17 1961 1.00 2.32 0.53 186 XMSubMetaSx_01 1959 0.49 0.36 0.53 187 TVD_SPACE_RATIO 1900 0.52 0.54 0.52 188 XMMoneyMeta_00 1877 0.75 1.43 0.51 189 XMSexyCombo_02 1793 0.45 0.34 0.49 190 DIET_1 1782 0.94 2.23 0.48 191 SHORT_HELO_AND_INLINE_IMAGE 1754 0.39 0.14 0.48 192 XMBounce_01 1734 0.40 0.19 0.47 193 MISSING_HEADERS 1702 0.55 0.80 0.46 194 GMD_PDF_EMPTY_BODY 1701 0.36 0.05 0.46 195 FORGED_GMAIL_RCVD 1613 0.60 1.04 0.44 196 HTML_TAG_BALANCE_BODY 1588 0.49 0.67 0.43 197 T_Symld_Words_02 1559 0.61 1.13 0.42 198 TR_LOTS_OF_MONEY3 1557 0.76 1.73 0.42 199 TM2_M_A_HREF_HREF 1521 0.58 1.06 0.41 200 PLING_QUERY 1509 0.47 0.65 0.41 ----------------------------------------------------------------------