Email: 524397 Autolearn: 0 AvgScore: 4.01 AvgScanTime: 1.41 sec Spam: 185225 Autolearn: 0 AvgScore: 14.29 AvgScanTime: 1.55 sec Ham: 339172 Autolearn: 0 AvgScore: -1.60 AvgScanTime: 1.33 sec Time Spent Running SA: 205.03 hours Time Spent Processing Spam: 79.80 hours Time Spent Processing Ham: 125.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 175991 88.12 95.01 84.35 2 DKIM_SIGNED 164509 78.19 88.82 72.38 3 XM_DK_Pass 160230 76.54 86.51 71.09 4 DKIM_VALID 159403 75.70 86.06 70.05 5 RELAYCOUNTRY_US 154343 81.73 83.33 80.86 6 XM_B_Unicode 147301 71.88 79.53 67.71 7 XMListUnsubscribeExists 128844 55.73 69.56 48.18 8 DCC_CHECK 128737 44.22 69.50 30.41 9 XM_B_SpammyWords 124550 50.15 67.24 40.81 10 DKIM_VALID_AU 120994 58.34 65.32 54.52 11 RCVD_IN_MSPIKE_H2 85922 40.00 46.39 36.51 12 XM_DK_Undo_02 79453 18.97 42.90 5.90 13 BAYES_50 78940 50.45 42.62 54.72 14 XM_B_Unicode3 77743 39.86 41.97 38.71 15 XM_B_SpammyWords2 67775 23.31 36.59 16.05 16 LOC_TINY_FONT_1 67659 26.77 36.53 21.44 17 FVGT_m_MULTI_ODD 63797 27.95 34.44 24.41 18 TR_XM_DKIM_Undo 63021 14.79 34.02 4.28 19 BAYES_99 60961 14.80 32.91 4.91 20 HTML_FONT_LOW_CONTRAST 60488 27.84 32.66 25.21 21 MIME_HTML_ONLY 58846 23.02 31.77 18.25 22 TR_XM_Base64_M1 57510 24.50 31.05 20.93 23 DKIM_VALID_EF 56840 29.06 30.69 28.16 24 DCC_CHECK_NEGATIVE 56442 55.73 30.47 69.52 25 T_KAM_HTML_FONT_INVALID 55270 22.75 29.84 18.87 26 BAYES_999 48521 11.78 26.20 3.91 27 TR_XM_Base64_L1 47660 13.21 25.73 6.38 28 TR_DCC_Bayes_99 43285 9.28 23.37 1.59 29 XM_Body_Dirty_Words 40979 15.24 22.12 11.49 30 T_TM2_M_HEADER_IN_MSG 40903 27.09 22.08 29.83 31 XMSubLong 38412 20.55 20.74 20.44 32 RELAYCOUNTRY_META 34967 8.97 18.88 3.56 33 XM_Multi_Part_URI 31635 13.78 17.08 11.98 34 XM_B_Unsub 30869 10.34 16.67 6.89 35 TR_XM_BayesUnsub 30220 9.04 16.32 5.07 36 RCVD_IN_MSPIKE_WL 27227 15.82 14.70 16.43 37 LOTS_OF_MONEY 26321 9.55 14.21 7.01 38 BOTNET_IPINHOSTNAME 23207 7.34 12.53 4.50 39 TR_XM_SpammyWords4 22384 6.81 12.08 3.93 40 RCVD_IN_MSPIKE_H3 21997 11.31 11.88 11.01 41 UNPARSEABLE_RELAY 21558 8.67 11.64 7.04 42 RCVD_IN_BL_SPAMCOP_NET 21320 4.36 11.51 0.46 43 XM_B_SpammyWords3 21211 6.32 11.45 3.52 44 TR_XM_UnparsRelay 21149 7.44 11.42 5.27 45 TR_XM_SpammyRelay 21106 4.98 11.39 1.47 46 FSL_BULK_SIG 20901 5.44 11.28 2.26 47 TR_XM_SpammyWords2 20257 4.46 10.94 0.92 48 XM_Evil_Numbers_Gen 19796 8.09 10.69 6.68 49 BOTNET 19183 4.58 10.36 1.43 50 XMSexyCombo_05 18056 5.31 9.75 2.89 51 TR_XM_Base64_C 16975 4.14 9.16 1.39 52 MPART_ALT_DIFF 16391 6.24 8.85 4.82 53 XM_UncommonTLD01 16021 5.95 8.65 4.48 54 UNTRUSTED_Relay 14988 3.64 8.09 1.20 55 TR_XM_Base64_L2 14937 3.66 8.06 1.25 56 LotsOfNums_01 14921 8.99 8.06 9.50 57 BAYES_80 14786 5.61 7.98 4.31 58 TR_XM_Base64_M2 14388 5.22 7.77 3.82 59 BAYES_60 13270 8.52 7.16 9.25 60 HTML_IMAGE_RATIO_02 12670 5.96 6.84 5.47 61 RELAYCOUNTRY_CA 12461 3.04 6.73 1.03 62 XM_SendGrid 12407 5.26 6.70 4.48 63 TR_XM_PhishingBody 12266 4.49 6.62 3.32 64 TR_XM_SPAMCOP 11930 2.37 6.44 0.15 65 XM_H_Long_From01 11851 5.54 6.40 5.07 66 XM_B_Phish_Phrases 11845 4.40 6.39 3.32 67 TM2_M_VERY_LONG_WORD 11632 3.04 6.28 1.27 68 HTML_MIME_NO_HTML_TAG 10877 3.39 5.87 2.03 69 MIME_HTML_ONLY_MULTI 10721 4.19 5.79 3.32 70 XMSubMetaSx_00 9883 4.18 5.34 3.54 71 XMStrtUSub 9579 4.52 5.17 4.16 72 XM_B_Investor 9495 2.87 5.13 1.64 73 XM_SPF_SoftFail 9021 3.77 4.87 3.18 74 BAYES_95 8773 3.41 4.74 2.69 75 TooManyTo_001 8612 7.12 4.65 8.47 76 HTML_IMAGE_RATIO_04 8270 4.51 4.46 4.54 77 SpammyFromTLD_01 8169 2.64 4.41 1.67 78 TR_XM_DK_SendGrid 8028 3.44 4.33 2.95 79 XM_B_Phish66 7813 2.77 4.22 1.98 80 HTML_IMAGE_RATIO_06 7738 4.21 4.18 4.23 81 XMLngstWrd_00 7691 1.99 4.15 0.81 82 XM_GoogleGroups 7685 2.72 4.15 1.95 83 T_XMDrugObfuBody_14 7666 2.53 4.14 1.65 84 XMLngstWrd_01 7605 1.92 4.11 0.73 85 MIME_QP_LONG_LINE 7496 5.27 4.05 5.94 86 XM_B_SpammyTLD 7468 2.86 4.03 2.23 87 XMLngstWrd_02 7442 1.81 4.02 0.61 88 XMLngstWrd_03 7279 1.70 3.93 0.49 89 MIME_HTML_MOSTLY 7177 2.71 3.87 2.07 90 XMLngstWrd_04 7141 1.62 3.86 0.40 91 RCVD_IN_MSPIKE_BL 7067 2.14 3.82 1.23 92 TR_XM_SpammyWords5 7018 2.21 3.79 1.34 93 HTML_TITLE_SUBJ_DIFF 6878 1.42 3.71 0.16 94 UPPERCASE_75_100 6774 1.39 3.66 0.15 95 T_REMOTE_IMAGE 6764 3.77 3.65 3.84 96 TR_XM_MSPIKECOMBO 6664 2.06 3.60 1.22 97 URI_NOVOWEL 6558 2.83 3.54 2.44 98 XMDiploma_00 6366 2.25 3.44 1.60 99 T_XMDrugObfuBody_08 6145 2.03 3.32 1.33 100 USER_IN_DEF_DKIM_WL 6082 8.39 3.28 11.18 101 XM_CamelCaseFrm001 6057 2.37 3.27 1.88 102 XM_UB50 6030 1.63 3.26 0.74 103 XM_B_Unsub2 5987 1.85 3.23 1.10 104 URIBL_DBL_SPAM 5975 1.15 3.23 0.02 105 RCVD_IN_IADB_LISTED 5668 4.69 3.06 5.58 106 XMNumbers 5662 3.45 3.06 3.67 107 XM_DIRTYINTL 5629 1.27 3.04 0.31 108 T_TooManySym_01 5594 4.99 3.02 6.07 109 TM2_M_URI_OPT_OUT 5383 2.60 2.91 2.43 110 BOTNET_NORDNS 5307 1.02 2.87 0.01 111 XM_OfRef6 5121 1.56 2.76 0.90 112 DKIM_INVALID 5106 2.48 2.76 2.34 113 RCVD_IN_VALIDITY_RPBL 4866 0.94 2.63 0.02 114 RCVD_IN_VALIDITY_SAFE 4836 3.57 2.61 4.09 115 RCVD_IN_MSPIKE_H4 4825 4.00 2.60 4.76 116 RCVD_IN_IADB_SPF 4757 4.13 2.57 4.98 117 XMBody_17 4751 1.13 2.56 0.34 118 FROM_EXCESS_BASE64 4637 2.30 2.50 2.19 119 HTML_IMAGE_RATIO_08 4576 2.31 2.47 2.22 120 XM_DK_Undo_01 4515 1.95 2.44 1.68 121 TR_XM_PHPDW 4464 1.68 2.41 1.28 122 TR_LOTS_OF_MONEY3 4444 1.12 2.40 0.42 123 TR_XM_PHPForged 4389 1.64 2.37 1.24 124 TR_XM_FormFill2 4361 1.63 2.35 1.24 125 XM_H_PHPOS 4341 1.62 2.34 1.23 126 RCVD_IN_IADB_DK 4330 3.63 2.34 4.33 127 RCVD_IN_IADB_SENDERID 4313 3.74 2.33 4.51 128 XMStockSpam_06 4301 1.31 2.32 0.76 129 XMBrknScrpt_02 4301 1.19 2.32 0.57 130 SUBJ_ALL_CAPS 4193 1.72 2.26 1.42 131 T_FILL_THIS_FORM_SHORT 4068 1.32 2.20 0.85 132 KHOP_HELO_FCRDNS 4056 2.11 2.19 2.07 133 RCVD_IN_VALIDITY_CERTIFIED 4001 3.11 2.16 3.63 134 XM_B_SpammyWords4 3965 1.15 2.14 0.61 135 HTTPS_HTTP_MISMATCH 3902 1.15 2.11 0.63 136 T_XMHurry_00 3854 1.11 2.08 0.58 137 SpammyFromTLD_02 3850 1.05 2.08 0.49 138 URI_HEX 3842 1.58 2.07 1.31 139 TR_XM_MSPIKECOMBO2 3817 0.79 2.06 0.10 140 URI_PHP_REDIR 3775 0.72 2.04 0.00 141 T_XMDrugObfuBody_00 3700 1.19 2.00 0.74 142 TR_XM_SB_Phish 3694 2.18 1.99 2.28 143 HK_RANDOM_REPLYTO 3658 0.77 1.97 0.11 144 XM_Body_Dirty_Words_01 3641 0.79 1.97 0.15 145 MAILING_LIST_MULTI 3621 2.83 1.95 3.31 146 RCVD_IN_MSPIKE_L3 3555 1.15 1.92 0.73 147 XMSubPhish11 3485 2.11 1.88 2.24 148 TR_XM_SpammyWords3 3394 0.99 1.83 0.53 149 ALL_TRUSTED 3344 11.38 1.81 16.61 150 URI_TRY_3LD 3296 0.99 1.78 0.55 151 RCVD_IN_IADB_VOUCHED 3218 2.86 1.74 3.47 152 XM_UB99 3208 0.61 1.73 0.01 153 PDS_OTHER_BAD_TLD 3183 0.70 1.72 0.14 154 MPART_ALT_DIFF_COUNT 3143 0.94 1.70 0.53 155 RCVD_IN_PSBL 3115 0.71 1.68 0.18 156 BAYES_40 3092 3.94 1.67 5.18 157 TR_XM_NoHeaderRelay 2964 0.64 1.60 0.12 158 XMGenDplmaNmb 2953 1.17 1.59 0.94 159 XMHTML_After_End 2889 1.00 1.56 0.69 160 XMSexyCombo_01 2748 0.72 1.48 0.31 161 XM_URI_RBL 2697 0.60 1.46 0.13 162 XM_B_COVIDMETA 2662 0.78 1.44 0.43 163 XMClaimOffer 2634 0.57 1.42 0.11 164 BAYES_20 2533 3.10 1.37 4.04 165 TR_XM_COVIDMETA1 2476 0.60 1.34 0.19 166 XM_UB999 2460 0.47 1.33 0.00 167 TR_XM_MaxSPIKE 2425 0.49 1.31 0.05 168 HTML_TAG_BALANCE_BODY 2419 0.87 1.31 0.63 169 XM_H_Undi_Recip 2415 0.60 1.30 0.21 170 RELAYCOUNTRY_AU 2403 0.66 1.30 0.31 171 REMOVE_BEFORE_LINK 2379 0.70 1.28 0.39 172 TM2_M_A_HREF_HREF 2366 0.66 1.28 0.33 173 TR_XM_Base64_L3 2359 0.47 1.27 0.03 174 XM_B_DynamicLink 2336 0.46 1.26 0.03 175 XMBdyGiftCard01 2319 0.94 1.25 0.76 176 RELAYCOUNTRY_IN 2266 0.49 1.22 0.08 177 DIET_1 2258 0.60 1.22 0.26 178 HTML_FONT_FACE_BAD 2234 1.07 1.21 1.00 179 XMNoVowels 2230 0.77 1.20 0.53 180 XM_UB60 2197 0.46 1.19 0.06 181 ANY_BOUNCE_MESSAGE 2162 2.65 1.17 3.45 182 RELAYCOUNTRY_RU 2131 0.43 1.15 0.03 183 XM_H_Long_From02 2125 1.24 1.15 1.28 184 URIBL_BLACK 2100 0.44 1.13 0.06 185 XMReplyNow 2057 0.53 1.11 0.22 186 XM_PDF 2035 4.15 1.10 5.82 187 TR_Symld_Words 1983 1.33 1.07 1.47 188 RCVD_IN_IADB_OPTIN 1983 1.85 1.07 2.28 189 TR_XM_Base64_M3 1936 0.77 1.05 0.62 190 TR_XM_FormFill 1919 0.37 1.04 0.01 191 TR_MetaPhish_Combo_01 1904 0.83 1.03 0.73 192 XM_UB80 1903 0.37 1.03 0.01 193 XMSubMetaI_00 1840 0.75 0.99 0.62 194 T_Symld_Words_02 1816 0.74 0.98 0.60 195 XMPhish30 1796 0.69 0.97 0.54 196 XM_DKIMWhitelistDomains 1786 5.82 0.96 8.48 197 TR_XM_Undi_Recip11 1767 0.36 0.95 0.04 198 XMPhish14 1763 0.63 0.95 0.45 199 RELAYCOUNTRY_FR 1730 0.47 0.93 0.21 200 HTML_TAG_BALANCE_CENTER 1698 0.40 0.92 0.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286106 88.12 95.01 84.35 2 RELAYCOUNTRY_US 274240 81.73 83.33 80.86 3 DKIM_SIGNED 245508 78.19 88.82 72.38 4 XM_DK_Pass 241125 76.54 86.51 71.09 5 DKIM_VALID 237583 75.70 86.06 70.05 6 DCC_CHECK_NEGATIVE 235791 55.73 30.47 69.52 7 XM_B_Unicode 229640 71.88 79.53 67.71 8 BAYES_50 185604 50.45 42.62 54.72 9 DKIM_VALID_AU 184917 58.34 65.32 54.52 10 XMListUnsubscribeExists 163401 55.73 69.56 48.18 11 XM_B_SpammyWords 138412 50.15 67.24 40.81 12 XM_B_Unicode3 131282 39.86 41.97 38.71 13 RCVD_IN_MSPIKE_H2 123837 40.00 46.39 36.51 14 DCC_CHECK 103148 44.22 69.50 30.41 15 T_TM2_M_HEADER_IN_MSG 101164 27.09 22.08 29.83 16 DKIM_VALID_EF 95524 29.06 30.69 28.16 17 HTML_FONT_LOW_CONTRAST 85489 27.84 32.66 25.21 18 FVGT_m_MULTI_ODD 82777 27.95 34.44 24.41 19 LOC_TINY_FONT_1 72707 26.77 36.53 21.44 20 TR_XM_Base64_M1 70989 24.50 31.05 20.93 21 XMSubLong 69327 20.55 20.74 20.44 22 T_KAM_HTML_FONT_INVALID 64008 22.75 29.84 18.87 23 MIME_HTML_ONLY 61886 23.02 31.77 18.25 24 ALL_TRUSTED 56325 11.38 1.81 16.61 25 RCVD_IN_MSPIKE_WL 55719 15.82 14.70 16.43 26 XM_B_SpammyWords2 54438 23.31 36.59 16.05 27 BAYES_00 41564 8.17 0.70 12.25 28 XM_Multi_Part_URI 40634 13.78 17.08 11.98 29 XM_Body_Dirty_Words 38963 15.24 22.12 11.49 30 USER_IN_DEF_DKIM_WL 37924 8.39 3.28 11.18 31 RCVD_IN_MSPIKE_H3 37330 11.31 11.88 11.01 32 LotsOfNums_01 32222 8.99 8.06 9.50 33 BAYES_60 31385 8.52 7.16 9.25 34 XM_DKIMWhitelistDomains 28756 5.82 0.96 8.48 35 TooManyTo_001 28726 7.12 4.65 8.47 36 IN_ZIMBRA_NJ_WHITELIST 24322 4.70 0.17 7.17 37 UNPARSEABLE_RELAY 23888 8.67 11.64 7.04 38 LOTS_OF_MONEY 23782 9.55 14.21 7.01 39 TR_XM_DK_Bayes 23727 4.70 0.49 7.00 40 XM_B_Unsub 23362 10.34 16.67 6.89 41 TR_XM_DK_Bayes1 23188 4.59 0.49 6.84 42 XM_Evil_Numbers_Gen 22647 8.09 10.69 6.68 43 TR_XM_Base64_L1 21637 13.21 25.73 6.38 44 T_TooManySym_01 20572 4.99 3.02 6.07 45 MIME_QP_LONG_LINE 20132 5.27 4.05 5.94 46 XM_DK_Undo_02 20016 18.97 42.90 5.90 47 TR_XM_DK_Bayes2 19980 3.94 0.37 5.89 48 XM_PDF 19725 4.15 1.10 5.82 49 RCVD_IN_IADB_LISTED 18909 4.69 3.06 5.58 50 HTML_IMAGE_RATIO_02 18569 5.96 6.84 5.47 51 TR_XM_UnparsRelay 17872 7.44 11.42 5.27 52 BAYES_40 17556 3.94 1.67 5.18 53 XM_H_Long_From01 17194 5.54 6.40 5.07 54 TR_XM_BayesUnsub 17189 9.04 16.32 5.07 55 RCVD_IN_IADB_SPF 16889 4.13 2.57 4.98 56 BAYES_99 16668 14.80 32.91 4.91 57 MPART_ALT_DIFF 16351 6.24 8.85 4.82 58 RCVD_IN_MSPIKE_H4 16158 4.00 2.60 4.76 59 HTML_IMAGE_RATIO_04 15389 4.51 4.46 4.54 60 RCVD_IN_IADB_SENDERID 15286 3.74 2.33 4.51 61 BOTNET_IPINHOSTNAME 15279 7.34 12.53 4.50 62 XM_SendGrid 15194 5.26 6.70 4.48 63 XM_UncommonTLD01 15192 5.95 8.65 4.48 64 RCVD_IN_IADB_DK 14690 3.63 2.34 4.33 65 BAYES_80 14610 5.61 7.98 4.31 66 TR_XM_DKIM_Undo 14520 14.79 34.02 4.28 67 HTML_IMAGE_RATIO_06 14352 4.21 4.18 4.23 68 XMStrtUSub 14108 4.52 5.17 4.16 69 RCVD_IN_VALIDITY_SAFE 13886 3.57 2.61 4.09 70 BAYES_20 13708 3.10 1.37 4.04 71 TR_XM_SpammyWords4 13323 6.81 12.08 3.93 72 BAYES_999 13273 11.78 26.20 3.91 73 T_REMOTE_IMAGE 13026 3.77 3.65 3.84 74 TR_XM_Base64_M2 12964 5.22 7.77 3.82 75 XMNumbers 12432 3.45 3.06 3.67 76 RCVD_IN_VALIDITY_CERTIFIED 12303 3.11 2.16 3.63 77 RELAYCOUNTRY_META 12062 8.97 18.88 3.56 78 XMSubMetaSx_00 12017 4.18 5.34 3.54 79 XM_B_SpammyWords3 11930 6.32 11.45 3.52 80 RCVD_IN_IADB_VOUCHED 11764 2.86 1.74 3.47 81 ANY_BOUNCE_MESSAGE 11718 2.65 1.17 3.45 82 BOUNCE_MESSAGE 11710 2.54 0.87 3.45 83 TR_XM_PhishingBody 11255 4.49 6.62 3.32 84 XM_B_Phish_Phrases 11251 4.40 6.39 3.32 85 MIME_HTML_ONLY_MULTI 11250 4.19 5.79 3.32 86 MAILING_LIST_MULTI 11213 2.83 1.95 3.31 87 XM_H_Trusted_IP 11211 2.14 0.00 3.31 88 T_TooManySym_02 10979 2.31 0.61 3.24 89 XM_SPF_SoftFail 10770 3.77 4.87 3.18 90 TR_XM_DK_SendGrid 10022 3.44 4.33 2.95 91 XMSexyCombo_05 9790 5.31 9.75 2.89 92 BAYES_95 9118 3.41 4.74 2.69 93 BAYES_05 8955 2.01 0.85 2.64 94 TVD_RCVD_IP 8693 1.75 0.26 2.56 95 URI_NOVOWEL 8276 2.83 3.54 2.44 96 TM2_M_URI_OPT_OUT 8250 2.60 2.91 2.43 97 TooManyTo_002 8072 1.71 0.49 2.38 98 DKIM_INVALID 7925 2.48 2.76 2.34 99 TR_XM_SB_Phish 7747 2.18 1.99 2.28 100 RCVD_IN_IADB_OPTIN 7728 1.85 1.07 2.28 101 FSL_BULK_SIG 7650 5.44 11.28 2.26 102 XMSubPhish11 7595 2.11 1.88 2.24 103 XM_B_SpammyTLD 7553 2.86 4.03 2.23 104 HTML_IMAGE_RATIO_08 7524 2.31 2.47 2.22 105 FROM_EXCESS_BASE64 7417 2.30 2.50 2.19 106 HELO_NODOT 7108 1.58 0.62 2.10 107 HELO_NO_DOMAIN 7094 1.57 0.61 2.09 108 MIME_HTML_MOSTLY 7029 2.71 3.87 2.07 109 KHOP_HELO_FCRDNS 7004 2.11 2.19 2.07 110 HTML_MIME_NO_HTML_TAG 6891 3.39 5.87 2.03 111 XM_B_Phish66 6718 2.77 4.22 1.98 112 INVALID_MSGID 6646 1.32 0.15 1.96 113 XM_GoogleGroups 6601 2.72 4.15 1.95 114 XM_CamelCaseFrm001 6384 2.37 3.27 1.88 115 IN_HORDE_ADDRESS_BOOK 6300 1.25 0.14 1.86 116 TO_MALFORMED 5948 1.14 0.00 1.75 117 XM_DK_Undo_01 5706 1.95 2.44 1.68 118 SpammyFromTLD_01 5654 2.64 4.41 1.67 119 T_XMDrugObfuBody_14 5595 2.53 4.14 1.65 120 XM_B_Investor 5564 2.87 5.13 1.64 121 XMDiploma_00 5421 2.25 3.44 1.60 122 TR_DCC_Bayes_99 5392 9.28 23.37 1.59 123 TooManyTo_003 5269 1.13 0.37 1.55 124 TR_XM_SpammyRelay 4999 4.98 11.39 1.47 125 TR_Symld_Words 4983 1.33 1.07 1.47 126 XMGappySubj_01 4909 0.99 0.15 1.45 127 BOTNET 4854 4.58 10.36 1.43 128 SUBJ_ALL_CAPS 4827 1.72 2.26 1.42 129 TR_XM_Base64_C 4728 4.14 9.16 1.39 130 TR_XM_SpammyWords5 4552 2.21 3.79 1.34 131 T_XMDrugObfuBody_08 4521 2.03 3.32 1.33 132 XMCapTrack 4497 0.98 0.33 1.33 133 URI_HEX 4439 1.58 2.07 1.31 134 XM_H_Long_From02 4353 1.24 1.15 1.28 135 TR_XM_PHPDW 4352 1.68 2.41 1.28 136 XMBSHREFv2 4337 0.92 0.27 1.28 137 TM2_M_VERY_LONG_WORD 4293 3.04 6.28 1.27 138 TR_XM_Base64_L2 4243 3.66 8.06 1.25 139 TR_XM_PHPForged 4220 1.64 2.37 1.24 140 TR_XM_FormFill2 4189 1.63 2.35 1.24 141 RCVD_IN_MSPIKE_BL 4159 2.14 3.82 1.23 142 XM_H_PHPOS 4156 1.62 2.34 1.23 143 TR_XM_MSPIKECOMBO 4150 2.06 3.60 1.22 144 XMSubNoVowel 4118 1.04 0.73 1.21 145 UNTRUSTED_Relay 4075 3.64 8.09 1.20 146 TVD_SPACE_RATIO 3832 0.78 0.13 1.13 147 TooManyTo_004 3814 0.84 0.31 1.12 148 XM_B_Unsub2 3728 1.85 3.23 1.10 149 RELAYCOUNTRY_CA 3479 3.04 6.73 1.03 150 HTML_FONT_FACE_BAD 3377 1.07 1.21 1.00 151 XMGenDplmaNmb 3173 1.17 1.59 0.94 152 TooManyTo_005 3150 0.70 0.27 0.93 153 TR_XM_SpammyWords2 3125 4.46 10.94 0.92 154 T_OBFU_PDF_ATTACH 3088 0.69 0.30 0.91 155 DKIM_ADSP_CUSTOM_MED 3048 0.86 0.80 0.90 156 XM_OfRef6 3041 1.56 2.76 0.90 157 T_FILL_THIS_FORM_SHORT 2871 1.32 2.20 0.85 158 XM_shorewaves_Whitelist 2813 0.54 0.00 0.83 159 XMLngstWrd_00 2763 1.99 4.15 0.81 160 HTML_IMAGE_ONLY_20 2725 0.83 0.87 0.80 161 RCVD_IN_RP_SAFE 2665 0.71 0.56 0.79 162 T_TooManySym_03 2650 0.60 0.26 0.78 163 XMBdyGiftCard01 2585 0.94 1.25 0.76 164 XMStockSpam_06 2565 1.31 2.32 0.76 165 T_XMDrugObfuBody_00 2517 1.19 2.00 0.74 166 XM_UB50 2504 1.63 3.26 0.74 167 XMBody_95 2483 0.51 0.11 0.73 168 TR_MetaPhish_Combo_01 2473 0.83 1.03 0.73 169 XMLngstWrd_01 2470 1.92 4.11 0.73 170 FROM_GOV_DKIM_AU 2461 0.51 0.13 0.73 171 RCVD_IN_MSPIKE_L3 2461 1.15 1.92 0.73 172 XM_ShortIntro_01 2419 0.63 0.48 0.71 173 RCVD_IN_RP_CERTIFIED 2392 0.62 0.45 0.71 174 XMHTML_After_End 2332 1.00 1.56 0.69 175 MSGID_NOFQDN1 2277 0.44 0.01 0.67 176 RELAYCOUNTRY_GB 2276 0.69 0.72 0.67 177 RCVD_IN_MSPIKE_H5 2231 0.50 0.22 0.66 178 TVD_PH_BODY_ACCOUNTS_PRE 2142 0.51 0.29 0.63 179 HTTPS_HTTP_MISMATCH 2134 1.15 2.11 0.63 180 HTML_TAG_BALANCE_BODY 2132 0.87 1.31 0.63 181 TR_XM_Base64_M3 2103 0.77 1.05 0.62 182 XMSubMetaI_00 2089 0.75 0.99 0.62 183 XM_B_SpammyWords4 2074 1.15 2.14 0.61 184 SHORT_HELO_AND_INLINE_IMAGE 2071 0.43 0.10 0.61 185 XMLngstWrd_02 2063 1.81 4.02 0.61 186 XM_H_PHPMailer 2061 0.65 0.73 0.61 187 T_Symld_Words_02 2049 0.74 0.98 0.60 188 XMMoneyMeta_00 1970 0.67 0.83 0.58 189 TM2_M_BODY_EMPTY 1966 0.42 0.12 0.58 190 T_XMHurry_00 1962 1.11 2.08 0.58 191 XMBrknScrpt_02 1947 1.19 2.32 0.57 192 NML_ADSP_CUSTOM_MED 1945 0.58 0.59 0.57 193 URI_TRY_3LD 1872 0.99 1.78 0.55 194 XMHTMLBadTable_001 1846 0.61 0.74 0.54 195 XMPhish30 1827 0.69 0.97 0.54 196 XM_B_COPY_HTML 1796 0.62 0.80 0.53 197 XMNoVowels 1795 0.77 1.20 0.53 198 MPART_ALT_DIFF_COUNT 1790 0.94 1.70 0.53 199 TR_XM_SpammyWords3 1787 0.99 1.83 0.53 200 RCVD_IN_SORBS_DUL 1772 0.38 0.13 0.52 ----------------------------------------------------------------------