Email: 505225 Autolearn: 0 AvgScore: 3.00 AvgScanTime: 1.22 sec Spam: 151897 Autolearn: 0 AvgScore: 14.09 AvgScanTime: 1.41 sec Ham: 353328 Autolearn: 0 AvgScore: -1.77 AvgScanTime: 1.15 sec Time Spent Running SA: 171.87 hours Time Spent Processing Spam: 59.43 hours Time Spent Processing Ham: 112.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144581 85.81 95.18 81.77 2 DKIM_SIGNED 133896 77.86 88.15 73.43 3 XM_DK_Pass 130071 76.11 85.63 72.01 4 DKIM_VALID 128851 75.10 84.83 70.92 5 XM_B_Unicode 127402 70.05 83.87 64.10 6 RELAYCOUNTRY_US 122311 80.91 80.52 81.08 7 XM_B_SpammyWords 106424 50.03 70.06 41.42 8 DCC_CHECK 105981 40.99 69.77 28.61 9 XMListUnsubscribeExists 104125 50.61 68.55 42.90 10 DKIM_VALID_AU 95406 54.83 62.81 51.39 11 RCVD_IN_MSPIKE_H2 70270 42.16 46.26 40.39 12 XM_B_Unicode3 69695 39.29 45.88 36.45 13 XM_DK_Undo_02 62767 16.45 41.32 5.75 14 BAYES_50 62510 51.91 41.15 56.53 15 XM_B_SpammyWords2 58780 23.42 38.70 16.85 16 LOC_TINY_FONT_1 53421 25.19 35.17 20.89 17 FVGT_m_MULTI_ODD 51052 25.98 33.61 22.70 18 HTML_FONT_LOW_CONTRAST 50687 26.67 33.37 23.79 19 TR_XM_DKIM_Undo 50504 12.83 33.25 4.05 20 BAYES_99 49655 13.11 32.69 4.69 21 DKIM_VALID_EF 47179 28.55 31.06 27.47 22 MIME_HTML_ONLY 46923 22.30 30.89 18.60 23 DCC_CHECK_NEGATIVE 45866 58.97 30.20 71.34 24 T_KAM_HTML_FONT_INVALID 43986 20.93 28.96 17.48 25 BAYES_999 38876 10.36 25.59 3.81 26 TR_DCC_Bayes_99 34046 7.71 22.41 1.40 27 T_TM2_M_HEADER_IN_MSG 33560 30.16 22.09 33.62 28 XM_Body_Dirty_Words 32847 13.87 21.62 10.54 29 XMSubLong 32498 20.01 21.39 19.41 30 RELAYCOUNTRY_META 31099 8.43 20.47 3.25 31 XM_Multi_Part_URI 27662 12.83 18.21 10.52 32 XM_B_Unsub 23926 10.25 15.75 7.88 33 TR_XM_BayesUnsub 23418 8.95 15.42 6.17 34 BOTNET_IPINHOSTNAME 22270 7.42 14.66 4.31 35 LOTS_OF_MONEY 21593 8.97 14.22 6.71 36 TR_XM_SpammyRelay 20553 5.10 13.53 1.47 37 RCVD_IN_MSPIKE_WL 20311 15.44 13.37 16.33 38 BOTNET 18528 4.63 12.20 1.38 39 TR_XM_SpammyWords4 18392 6.73 12.11 4.42 40 XM_B_SpammyWords3 18217 6.01 11.99 3.44 41 UNPARSEABLE_RELAY 17977 8.79 11.83 7.48 42 TR_XM_SpammyWords2 17786 4.05 11.71 0.76 43 TR_XM_UnparsRelay 17581 7.48 11.57 5.72 44 FSL_BULK_SIG 17376 5.52 11.44 2.98 45 XM_Evil_Numbers_Gen 14601 8.37 9.61 7.83 46 RCVD_IN_BL_SPAMCOP_NET 14324 3.10 9.43 0.38 47 XMSexyCombo_05 13599 4.76 8.95 2.96 48 RCVD_IN_MSPIKE_H3 13412 9.79 8.83 10.20 49 RELAYCOUNTRY_CA 13238 3.30 8.72 0.97 50 BAYES_80 12874 5.07 8.48 3.60 51 UNTRUSTED_Relay 12460 3.32 8.20 1.22 52 BAYES_60 12235 8.03 8.05 8.01 53 TR_XM_PhishingBody 11661 4.33 7.68 2.90 54 XMSubMetaSx_00 11264 4.56 7.42 3.33 55 LotsOfNums_01 11199 7.52 7.37 7.59 56 XM_UncommonTLD01 10771 4.59 7.09 3.51 57 XM_H_Long_From01 10587 6.04 6.97 5.64 58 MPART_ALT_DIFF 10466 5.56 6.89 4.99 59 HTML_IMAGE_RATIO_02 10223 5.46 6.73 4.91 60 XM_B_Phish_Phrases 9675 4.07 6.37 3.09 61 XM_SendGrid 9398 5.11 6.19 4.64 62 T_XMDrugObfuBody_08 8884 2.92 5.85 1.66 63 TR_XM_SPAMCOP 8278 1.77 5.45 0.18 64 TooManyTo_001 7831 7.29 5.16 8.21 65 XM_B_Investor 7825 2.58 5.15 1.47 66 XM_SPF_SoftFail 7810 3.60 5.14 2.94 67 XM_B_SpammyTLD 7578 3.02 4.99 2.17 68 BAYES_95 7552 3.05 4.97 2.22 69 XM_B_Phish66 7483 2.78 4.93 1.86 70 RCVD_IN_VALIDITY_RPBL 7051 1.41 4.64 0.02 71 MIME_HTML_ONLY_MULTI 6689 3.73 4.40 3.44 72 TM2_M_VERY_LONG_WORD 6508 2.18 4.28 1.27 73 T_XMDrugObfuBody_14 6483 2.43 4.27 1.63 74 XMStrtUSub 6405 4.14 4.22 4.10 75 RCVD_IN_MSPIKE_BL 6399 1.89 4.21 0.89 76 HTML_IMAGE_RATIO_04 6351 4.23 4.18 4.25 77 TR_XM_MSPIKECOMBO 6138 1.84 4.04 0.89 78 XM_OfRef6 6125 1.89 4.03 0.97 79 XMBody_17 5997 1.49 3.95 0.43 80 HTML_IMAGE_RATIO_06 5889 3.88 3.88 3.87 81 TR_XM_DK_SendGrid 5801 3.27 3.82 3.04 82 XM_UB50 5667 1.67 3.73 0.79 83 XM_DIRTYINTL 5562 1.34 3.66 0.34 84 MIME_HTML_MOSTLY 5470 2.65 3.60 2.25 85 MIME_QP_LONG_LINE 5368 4.32 3.53 4.66 86 URIBL_DBL_SPAM 5359 1.07 3.53 0.01 87 T_FILL_THIS_FORM_SHORT 5340 1.68 3.52 0.89 88 TR_XM_SpammyWords5 5279 2.00 3.48 1.37 89 T_REMOTE_IMAGE 5250 3.67 3.46 3.77 90 DKIM_INVALID 5045 2.75 3.32 2.51 91 HTML_MIME_NO_HTML_TAG 5013 2.38 3.30 1.98 92 XMNumbers 4977 3.28 3.28 3.28 93 RCVD_IN_VALIDITY_SAFE 4867 4.27 3.20 4.72 94 XM_CamelCaseFrm001 4745 2.03 3.12 1.56 95 XMDiploma_00 4665 1.99 3.07 1.53 96 HTML_IMAGE_RATIO_08 4516 2.38 2.97 2.12 97 XM_B_Unsub2 4484 1.77 2.95 1.27 98 PDS_OTHER_BAD_TLD 4309 0.96 2.84 0.15 99 TM2_M_URI_OPT_OUT 4291 2.34 2.82 2.14 100 BOTNET_NORDNS 4248 0.85 2.80 0.01 101 SpammyFromTLD_02 4186 0.98 2.76 0.21 102 RCVD_IN_MSPIKE_H4 4081 4.27 2.69 4.94 103 URI_NOVOWEL 3991 2.39 2.63 2.29 104 URI_PHP_REDIR 3915 0.78 2.58 0.01 105 RCVD_IN_IADB_LISTED 3914 4.03 2.58 4.66 106 RCVD_IN_VALIDITY_CERTIFIED 3900 3.63 2.57 4.08 107 T_TooManySym_01 3757 5.00 2.47 6.08 108 SpammyFromTLD_01 3729 1.25 2.45 0.73 109 XM_B_SpammyWords4 3526 1.11 2.32 0.58 110 XMSexyCombo_01 3483 0.97 2.29 0.40 111 XM_B_COVIDMETA 3470 1.16 2.28 0.68 112 RCVD_IN_MSPIKE_L3 3463 1.21 2.28 0.74 113 XM_DK_Undo_01 3374 1.77 2.22 1.58 114 FROM_EXCESS_BASE64 3337 2.31 2.20 2.36 115 TM2_M_A_HREF_HREF 3321 0.86 2.19 0.29 116 XMLngstWrd_00 3266 0.97 2.15 0.46 117 RCVD_IN_IADB_SPF 3254 3.55 2.14 4.16 118 XMLngstWrd_01 3213 0.91 2.12 0.39 119 XM_GoogleGroups 3186 1.66 2.10 1.47 120 TR_XM_MSPIKECOMBO2 3096 0.67 2.04 0.08 121 USER_IN_DEF_DKIM_WL 3084 8.54 2.03 11.34 122 RCVD_IN_IADB_DK 3069 3.11 2.02 3.58 123 XMLngstWrd_02 3058 0.82 2.01 0.31 124 RCVD_IN_PSBL 3053 1.07 2.01 0.66 125 RCVD_IN_IADB_SENDERID 3038 3.20 2.00 3.72 126 HK_RANDOM_REPLYTO 3024 0.66 1.99 0.08 127 TR_XM_SB_Phish 3009 2.04 1.98 2.07 128 TR_XM_COVIDMETA1 2972 0.73 1.96 0.20 129 MAILING_LIST_MULTI 2955 2.79 1.95 3.16 130 XM_UB99 2932 0.58 1.93 0.00 131 XMBrknScrpt_02 2930 1.24 1.93 0.95 132 DIET_1 2920 0.76 1.92 0.26 133 TR_XM_SpammyWords3 2912 0.90 1.92 0.46 134 RCVD_IN_MSPIKE_H5 2818 1.39 1.86 1.18 135 SUBJ_ALL_CAPS 2799 1.58 1.84 1.47 136 URI_HEX 2791 1.44 1.84 1.27 137 XMLngstWrd_03 2763 0.67 1.82 0.17 138 XMSubPhish11 2748 1.96 1.81 2.02 139 HTML_IMAGE_ONLY_24 2692 0.80 1.77 0.38 140 FONT_INVIS_LONG_LINE 2675 0.65 1.76 0.18 141 XMLngstWrd_04 2665 0.61 1.75 0.12 142 XMHTML_After_End 2656 1.06 1.75 0.76 143 ALL_TRUSTED 2636 11.96 1.74 16.35 144 XMStockSpam_06 2612 1.40 1.72 1.26 145 BAYES_40 2556 5.22 1.68 6.74 146 TR_XM_NoHeaderRelay 2521 0.59 1.66 0.12 147 XM_H_Undi_Recip 2459 0.69 1.62 0.29 148 HTML_TITLE_SUBJ_DIFF 2442 0.50 1.61 0.03 149 T_XMDrugObfuBody_00 2422 0.97 1.59 0.70 150 TR_XM_FormFill 2414 0.50 1.59 0.04 151 HTTPS_HTTP_MISMATCH 2368 1.08 1.56 0.88 152 XM_UB999 2350 0.47 1.55 0.00 153 MPART_ALT_DIFF_COUNT 2305 0.88 1.52 0.60 154 XM_URI_RBL 2284 0.54 1.50 0.12 155 UPPERCASE_75_100 2282 0.46 1.50 0.02 156 HTML_TAG_BALANCE_BODY 2263 0.87 1.49 0.60 157 TR_LOTS_OF_MONEY3 2258 0.66 1.49 0.30 158 TR_XM_MaxSPIKE 2236 0.48 1.47 0.06 159 XMBdyGiftCard01 2236 0.91 1.47 0.67 160 RCVD_IN_MSPIKE_L5 2192 0.45 1.44 0.02 161 TR_XM_PHPDW 2184 0.64 1.44 0.30 162 URIBL_BLACK 2110 0.45 1.39 0.05 163 TR_XM_PHPForged 2107 0.60 1.39 0.26 164 KHOP_HELO_FCRDNS 2080 1.89 1.37 2.12 165 T_XMHurry_00 2073 0.71 1.36 0.43 166 RELAYCOUNTRY_FR 2060 0.57 1.36 0.24 167 TR_XM_FormFill2 2056 0.58 1.35 0.25 168 XM_H_PHPOS 2052 0.58 1.35 0.24 169 BAYES_20 2048 4.00 1.35 5.15 170 TR_XM_Base64_M1 2042 1.16 1.34 1.09 171 XMGenDplmaNmb 2041 0.96 1.34 0.79 172 RCVD_IN_IADB_VOUCHED 2007 2.40 1.32 2.86 173 TR_Symld_Words 1935 1.68 1.27 1.86 174 RELAYCOUNTRY_AU 1871 0.54 1.23 0.25 175 RELAYCOUNTRY_RU 1856 0.40 1.22 0.04 176 HTTP_EXCESSIVE_ESCAPES 1855 0.37 1.22 0.00 177 TR_XM_Undi_Recip5 1821 0.36 1.20 0.00 178 XM_B_SEO 1736 0.41 1.14 0.10 179 BOUNCE_MESSAGE 1708 1.69 1.12 1.93 180 ANY_BOUNCE_MESSAGE 1708 1.69 1.12 1.93 181 T_Symld_Words_02 1677 0.71 1.10 0.55 182 XM_PDF 1672 3.76 1.10 4.91 183 UNDISC_MONEY 1666 0.33 1.10 0.01 184 TR_XM_BayesRelay 1654 0.33 1.09 0.00 185 XMReplyNow 1615 0.53 1.06 0.30 186 XM_H_Long_From02 1594 0.96 1.05 0.93 187 TR_XM_COVIDMETA4 1585 0.46 1.04 0.21 188 TR_XM_Undi_Recip2 1565 0.32 1.03 0.02 189 TR_XM_Undi_RecipCombo2 1563 0.31 1.03 0.00 190 XMPhish30 1539 0.59 1.01 0.41 191 XMSubMetaI_00 1533 0.65 1.01 0.49 192 TR_Mismatch_TLD_02 1513 0.35 1.00 0.08 193 XMSubMetaSxObfu_02 1507 0.68 0.99 0.55 194 FROM_SUSPICIOUS_NTLD 1488 0.31 0.98 0.02 195 DKIM_ADSP_CUSTOM_MED 1482 0.97 0.98 0.97 196 TR_XM_Undi_Recip11 1476 0.34 0.97 0.08 197 XM_UB60 1467 0.35 0.97 0.08 198 MONEY_NOHTML 1461 0.33 0.96 0.05 199 TR_XM_SEO4 1459 0.33 0.96 0.05 200 XM_Body_Dirty_Words_01 1455 0.39 0.96 0.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 288928 85.81 95.18 81.77 2 RELAYCOUNTRY_US 286482 80.91 80.52 81.08 3 DKIM_SIGNED 259454 77.86 88.15 73.43 4 XM_DK_Pass 254432 76.11 85.63 72.01 5 DCC_CHECK_NEGATIVE 252062 58.97 30.20 71.34 6 DKIM_VALID 250589 75.10 84.83 70.92 7 XM_B_Unicode 226493 70.05 83.87 64.10 8 BAYES_50 199743 51.91 41.15 56.53 9 DKIM_VALID_AU 181587 54.83 62.81 51.39 10 XMListUnsubscribeExists 151590 50.61 68.55 42.90 11 XM_B_SpammyWords 146359 50.03 70.06 41.42 12 RCVD_IN_MSPIKE_H2 142723 42.16 46.26 40.39 13 XM_B_Unicode3 128798 39.29 45.88 36.45 14 T_TM2_M_HEADER_IN_MSG 118797 30.16 22.09 33.62 15 DCC_CHECK 101089 40.99 69.77 28.61 16 DKIM_VALID_EF 97045 28.55 31.06 27.47 17 HTML_FONT_LOW_CONTRAST 84052 26.67 33.37 23.79 18 FVGT_m_MULTI_ODD 80218 25.98 33.61 22.70 19 LOC_TINY_FONT_1 73827 25.19 35.17 20.89 20 XMSubLong 68587 20.01 21.39 19.41 21 MIME_HTML_ONLY 65732 22.30 30.89 18.60 22 T_KAM_HTML_FONT_INVALID 61755 20.93 28.96 17.48 23 XM_B_SpammyWords2 59528 23.42 38.70 16.85 24 ALL_TRUSTED 57776 11.96 1.74 16.35 25 RCVD_IN_MSPIKE_WL 57698 15.44 13.37 16.33 26 USER_IN_DEF_DKIM_WL 40055 8.54 2.03 11.34 27 XM_Body_Dirty_Words 37226 13.87 21.62 10.54 28 XM_Multi_Part_URI 37153 12.83 18.21 10.52 29 BAYES_00 36285 7.42 0.80 10.27 30 RCVD_IN_MSPIKE_H3 36049 9.79 8.83 10.20 31 XM_DKIMWhitelistDomains 30097 5.99 0.10 8.52 32 TooManyTo_001 29007 7.29 5.16 8.21 33 BAYES_60 28310 8.03 8.05 8.01 34 XM_B_Unsub 27836 10.25 15.75 7.88 35 XM_Evil_Numbers_Gen 27683 8.37 9.61 7.83 36 LotsOfNums_01 26807 7.52 7.37 7.59 37 UNPARSEABLE_RELAY 26416 8.79 11.83 7.48 38 BAYES_40 23820 5.22 1.68 6.74 39 LOTS_OF_MONEY 23716 8.97 14.22 6.71 40 IN_ZIMBRA_NJ_WHITELIST 23558 4.69 0.09 6.67 41 TR_XM_BayesUnsub 21795 8.95 15.42 6.17 42 T_TooManySym_01 21484 5.00 2.47 6.08 43 TR_XM_DK_Bayes 21270 4.39 0.60 6.02 44 TR_XM_DK_Bayes1 20872 4.31 0.58 5.91 45 XM_DK_Undo_02 20318 16.45 41.32 5.75 46 TR_XM_UnparsRelay 20210 7.48 11.57 5.72 47 XM_H_Long_From01 19927 6.04 6.97 5.64 48 T_HTML_ATTACH 18286 3.68 0.20 5.18 49 BAYES_20 18183 4.00 1.35 5.15 50 TR_XM_DK_Bayes2 17909 3.69 0.48 5.07 51 MPART_ALT_DIFF 17620 5.56 6.89 4.99 52 RCVD_IN_MSPIKE_H4 17467 4.27 2.69 4.94 53 HTML_IMAGE_RATIO_02 17363 5.46 6.73 4.91 54 XM_PDF 17338 3.76 1.10 4.91 55 RCVD_IN_VALIDITY_SAFE 16690 4.27 3.20 4.72 56 BAYES_99 16558 13.11 32.69 4.69 57 RCVD_IN_IADB_LISTED 16467 4.03 2.58 4.66 58 MIME_QP_LONG_LINE 16449 4.32 3.53 4.66 59 XM_SendGrid 16398 5.11 6.19 4.64 60 TR_XM_SpammyWords4 15603 6.73 12.11 4.42 61 BOTNET_IPINHOSTNAME 15229 7.42 14.66 4.31 62 HTML_IMAGE_RATIO_04 15017 4.23 4.18 4.25 63 RCVD_IN_IADB_SPF 14701 3.55 2.14 4.16 64 XMStrtUSub 14503 4.14 4.22 4.10 65 RCVD_IN_VALIDITY_CERTIFIED 14419 3.63 2.57 4.08 66 TR_XM_DKIM_Undo 14320 12.83 33.25 4.05 67 HTML_IMAGE_RATIO_06 13690 3.88 3.88 3.87 68 BAYES_999 13450 10.36 25.59 3.81 69 T_REMOTE_IMAGE 13307 3.67 3.46 3.77 70 RCVD_IN_IADB_SENDERID 13128 3.20 2.00 3.72 71 BAYES_80 12723 5.07 8.48 3.60 72 RCVD_IN_IADB_DK 12642 3.11 2.02 3.58 73 XM_UncommonTLD01 12395 4.59 7.09 3.51 74 XM_B_SpammyWords3 12162 6.01 11.99 3.44 75 MIME_HTML_ONLY_MULTI 12150 3.73 4.40 3.44 76 T_TooManySym_02 12107 2.60 0.68 3.43 77 XMSubMetaSx_00 11773 4.56 7.42 3.33 78 XMNumbers 11576 3.28 3.28 3.28 79 RELAYCOUNTRY_META 11488 8.43 20.47 3.25 80 MAILING_LIST_MULTI 11154 2.79 1.95 3.16 81 XM_B_Phish_Phrases 10911 4.07 6.37 3.09 82 TR_XM_DK_SendGrid 10735 3.27 3.82 3.04 83 XM_H_Trusted_IP 10566 2.09 0.00 2.99 84 FSL_BULK_SIG 10523 5.52 11.44 2.98 85 XMSexyCombo_05 10446 4.76 8.95 2.96 86 XM_SPF_SoftFail 10400 3.60 5.14 2.94 87 TR_XM_PhishingBody 10230 4.33 7.68 2.90 88 RCVD_IN_IADB_VOUCHED 10112 2.40 1.32 2.86 89 BAYES_05 9851 2.20 0.82 2.79 90 DKIM_INVALID 8865 2.75 3.32 2.51 91 TooManyTo_002 8583 1.90 0.66 2.43 92 FROM_EXCESS_BASE64 8322 2.31 2.20 2.36 93 URI_NOVOWEL 8096 2.39 2.63 2.29 94 MIME_HTML_MOSTLY 7940 2.65 3.60 2.25 95 BAYES_95 7855 3.05 4.97 2.22 96 TVD_RCVD_IP 7844 1.64 0.29 2.22 97 XM_B_SpammyTLD 7672 3.02 4.99 2.17 98 TM2_M_URI_OPT_OUT 7552 2.34 2.82 2.14 99 HTML_IMAGE_RATIO_08 7493 2.38 2.97 2.12 100 KHOP_HELO_FCRDNS 7492 1.89 1.37 2.12 101 TR_XM_SB_Phish 7319 2.04 1.98 2.07 102 HELO_NODOT 7199 1.65 0.76 2.04 103 HELO_NO_DOMAIN 7198 1.65 0.75 2.04 104 XMSubPhish11 7152 1.96 1.81 2.02 105 HTML_FONT_FACE_BAD 7136 1.62 0.67 2.02 106 RCVD_IN_IADB_OPTIN 7095 1.63 0.74 2.01 107 HTML_MIME_NO_HTML_TAG 7000 2.38 3.30 1.98 108 INVALID_MSGID 6978 1.42 0.12 1.97 109 ANY_BOUNCE_MESSAGE 6828 1.69 1.12 1.93 110 BOUNCE_MESSAGE 6826 1.69 1.12 1.93 111 XM_B_Phish66 6562 2.78 4.93 1.86 112 TR_Symld_Words 6562 1.68 1.27 1.86 113 MSGID_NOFQDN1 6217 1.24 0.03 1.76 114 IN_HORDE_ADDRESS_BOOK 6193 1.26 0.12 1.75 115 TO_MALFORMED 6100 1.27 0.21 1.73 116 T_XMDrugObfuBody_08 5871 2.92 5.85 1.66 117 TooManyTo_003 5815 1.31 0.53 1.65 118 T_XMDrugObfuBody_14 5773 2.43 4.27 1.63 119 XM_DK_Undo_01 5567 1.77 2.22 1.58 120 XM_CamelCaseFrm001 5512 2.03 3.12 1.56 121 XMDiploma_00 5404 1.99 3.07 1.53 122 XM_B_Investor 5211 2.58 5.15 1.47 123 SUBJ_ALL_CAPS 5201 1.58 1.84 1.47 124 TR_XM_SpammyRelay 5191 5.10 13.53 1.47 125 XM_GoogleGroups 5184 1.66 2.10 1.47 126 TR_DCC_Bayes_99 4932 7.71 22.41 1.40 127 BOTNET 4862 4.63 12.20 1.38 128 TR_XM_SpammyWords5 4850 2.00 3.48 1.37 129 XMBody_95 4598 0.95 0.12 1.30 130 URI_HEX 4496 1.44 1.84 1.27 131 TM2_M_VERY_LONG_WORD 4492 2.18 4.28 1.27 132 XM_B_Unsub2 4483 1.77 2.95 1.27 133 XMStockSpam_06 4466 1.40 1.72 1.26 134 XMCapTrack 4373 0.98 0.37 1.24 135 UNTRUSTED_Relay 4305 3.32 8.20 1.22 136 TooManyTo_004 4237 0.97 0.44 1.20 137 XMGappySubj_01 4213 0.87 0.11 1.19 138 RCVD_IN_MSPIKE_H5 4182 1.39 1.86 1.18 139 TR_XM_Base64_M1 3834 1.16 1.34 1.09 140 XMBSHREFv2 3699 0.82 0.30 1.05 141 TooManyTo_005 3503 0.79 0.33 0.99 142 RELAYCOUNTRY_CA 3437 3.30 8.72 0.97 143 DKIM_ADSP_CUSTOM_MED 3422 0.97 0.98 0.97 144 XM_OfRef6 3422 1.89 4.03 0.97 145 XMNoVowels 3366 0.81 0.46 0.95 146 XMBrknScrpt_02 3354 1.24 1.93 0.95 147 RCVD_IN_RP_SAFE 3317 0.86 0.68 0.94 148 TVD_SPACE_RATIO 3306 0.70 0.15 0.94 149 XM_H_Long_From02 3272 0.96 1.05 0.93 150 RCVD_IN_MSPIKE_BL 3156 1.89 4.21 0.89 151 TR_XM_MSPIKECOMBO 3137 1.84 4.04 0.89 152 T_FILL_THIS_FORM_SHORT 3133 1.68 3.52 0.89 153 HTTPS_HTTP_MISMATCH 3095 1.08 1.56 0.88 154 T_TooManySym_03 2968 0.66 0.25 0.84 155 XM_shorewaves_Whitelist 2871 0.57 0.00 0.81 156 RCVD_IN_RP_CERTIFIED 2865 0.74 0.58 0.81 157 XMGenDplmaNmb 2807 0.96 1.34 0.79 158 XM_UB50 2789 1.67 3.73 0.79 159 XMHTML_After_End 2699 1.06 1.75 0.76 160 TR_XM_SpammyWords2 2671 4.05 11.71 0.76 161 RCVD_IN_MSPIKE_L3 2629 1.21 2.28 0.74 162 SpammyFromTLD_01 2594 1.25 2.45 0.73 163 XM_ShortIntro_01 2592 0.67 0.53 0.73 164 T_XMDrugObfuBody_00 2482 0.97 1.59 0.70 165 T_OBFU_PDF_ATTACH 2457 0.60 0.37 0.70 166 TR_MetaPhish_Combo_01 2433 0.75 0.91 0.69 167 FILL_THIS_FORM 2416 0.71 0.77 0.68 168 XM_B_COVIDMETA 2410 1.16 2.28 0.68 169 XMBdyGiftCard01 2379 0.91 1.47 0.67 170 RCVD_IN_PSBL 2337 1.07 2.01 0.66 171 SHORT_HELO_AND_INLINE_IMAGE 2232 0.48 0.11 0.63 172 XM_H_PHPMailer 2208 0.69 0.83 0.62 173 MPART_ALT_DIFF_COUNT 2125 0.88 1.52 0.60 174 HTML_TAG_BALANCE_BODY 2120 0.87 1.49 0.60 175 RELAYCOUNTRY_GB 2089 0.63 0.73 0.59 176 NML_ADSP_CUSTOM_MED 2069 0.63 0.74 0.59 177 XM_B_SpammyWords4 2058 1.11 2.32 0.58 178 XM_B_COPY_HTML 1966 0.60 0.71 0.56 179 XMSubMetaSxObfu_02 1953 0.68 0.99 0.55 180 T_Symld_Words_02 1931 0.71 1.10 0.55 181 RCVD_IN_SORBS_DUL 1903 0.51 0.45 0.54 182 XMSubNoVowel 1900 0.65 0.92 0.54 183 URI_TRY_3LD 1825 0.64 0.93 0.52 184 XMMoneyMeta_00 1822 0.59 0.75 0.52 185 FORGED_GMAIL_RCVD 1800 0.59 0.79 0.51 186 XMSubMetaI_00 1738 0.65 1.01 0.49 187 XMhairloss01 1736 0.36 0.05 0.49 188 T_MANY_PILL_PRICE 1728 0.34 0.00 0.49 189 HTML_IMAGE_ONLY_32 1717 0.42 0.28 0.49 190 HTML_IMAGE_ONLY_20 1663 0.56 0.78 0.47 191 XMHTMLBadTable_001 1643 0.58 0.83 0.47 192 XMLngstWrd_00 1625 0.97 2.15 0.46 193 TR_XM_SpammyWords3 1614 0.90 1.92 0.46 194 MISSING_HEADERS 1586 0.42 0.36 0.45 195 TM2_M_BODY_EMPTY 1582 0.36 0.14 0.45 196 XMSubMetaSxObfu_03 1580 0.52 0.69 0.45 197 XM_ProductURIs 1553 0.52 0.70 0.44 198 XMDateMe_00 1538 0.57 0.89 0.44 199 MSGID_FROM_MTA_HEADER 1537 0.35 0.14 0.44 200 TO_NO_BRKTS_HTML_ONLY 1530 0.36 0.20 0.43 ----------------------------------------------------------------------