Email: 374754 Autolearn: 0 AvgScore: 2.43 AvgScanTime: 1.92 sec Spam: 92687 Autolearn: 0 AvgScore: 13.01 AvgScanTime: 3.03 sec Ham: 282067 Autolearn: 0 AvgScore: -1.05 AvgScanTime: 1.55 sec Time Spent Running SA: 199.69 hours Time Spent Processing Spam: 77.99 hours Time Spent Processing Ham: 121.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86618 87.67 93.45 85.77 2 DKIM_SIGNED 75576 78.22 81.54 77.13 3 DCC_CHECK 74884 56.27 80.79 48.21 4 XM_DK_Pass 74110 77.14 79.96 76.21 5 RELAYCOUNTRY_US 70778 79.31 76.36 80.28 6 XM_B_Unicode 68572 72.55 73.98 72.08 7 XMListUnsubscribeExists 67146 59.66 72.44 55.46 8 DKIM_VALID 65367 72.10 70.52 72.62 9 DKIM_VALID_AU 51281 57.79 55.33 58.59 10 XM_DK_Undo_02 43098 17.62 46.50 8.13 11 MIME_HTML_ONLY 39255 27.23 42.35 22.26 12 BAYES_50 37618 50.24 40.59 53.41 13 XM_B_Unicode3 36332 41.53 39.20 42.30 14 DKIM_VALID_EF 29902 28.31 32.26 27.01 15 LOC_TINY_FONT_1 28949 29.48 31.23 28.91 16 BAYES_99 27921 11.14 30.12 4.90 17 T_KAM_HTML_FONT_INVALID 27500 20.53 29.67 17.53 18 HTML_FONT_LOW_CONTRAST 23497 29.19 25.35 30.45 19 RELAYCOUNTRY_META 23215 10.18 25.05 5.29 20 TR_DCC_Bayes_99 22735 8.07 24.53 2.66 21 BAYES_999 22553 8.97 24.33 3.92 22 FVGT_m_MULTI_ODD 20780 22.61 22.42 22.68 23 BOTNET 20149 7.26 21.74 2.50 24 XM_UncommonTLD01 18745 8.47 20.22 4.61 25 XMSubLong 17461 21.07 18.84 21.81 26 XM_Body_Dirty_Words 17428 15.52 18.80 14.44 27 DCC_CHECK_NEGATIVE 16526 42.52 17.83 50.63 28 T_TM2_M_HEADER_IN_MSG 15991 21.75 17.25 23.23 29 UNTRUSTED_Relay 14120 5.16 15.23 1.85 30 XM_Multi_Part_URI 13971 15.01 15.07 14.99 31 HTML_IMAGE_RATIO_02 13457 10.07 14.52 8.61 32 LOTS_OF_MONEY 13272 9.58 14.32 8.02 33 BOTNET_IPINHOSTNAME 12707 7.86 13.71 5.94 34 XM_CamelCaseFrm001 11775 5.43 12.70 3.04 35 FSL_BULK_SIG 11720 9.52 12.64 8.49 36 XM_B_Phish_Phrases 10608 7.85 11.44 6.67 37 DKIM_INVALID 10209 6.12 11.01 4.51 38 RCVD_IN_MSPIKE_H2 9933 13.42 10.72 14.31 39 XMSexyCombo_05 9638 5.77 10.40 4.25 40 URIBL_SBL_A 9033 2.96 9.75 0.74 41 XM_B_Unsub 8906 9.82 9.61 9.88 42 RCVD_IN_MSPIKE_BL 8714 3.74 9.40 1.88 43 XM_UB50 8483 3.03 9.15 1.02 44 NO_DNS_FOR_FROM 8365 4.05 9.02 2.42 45 RELAYCOUNTRY_CA 7653 3.54 8.26 1.99 46 XM_Evil_Numbers_Gen 7615 9.13 8.22 9.43 47 BAYES_80 7607 4.57 8.21 3.37 48 XMSubMetaSx_00 7404 4.59 7.99 3.47 49 TR_XM_MaxBayes 7300 1.97 7.88 0.03 50 BAYES_60 7181 6.52 7.75 6.12 51 XM_SPF_SoftFail 7005 2.63 7.56 1.01 52 LotsOfNums_01 6446 8.62 6.95 9.17 53 RCVD_IN_MSPIKE_L3 6214 2.79 6.70 1.50 54 T_XMDrugObfuBody_08 6191 2.72 6.68 1.42 55 RCVD_IN_BL_SPAMCOP_NET 6088 2.39 6.57 1.01 56 XM_H_Long_From01 5960 5.93 6.43 5.76 57 TooManyTo_001 5598 7.25 6.04 7.65 58 RCVD_IN_RP_RNBL 5583 1.58 6.02 0.12 59 PDS_OTHER_BAD_TLD 5503 2.52 5.94 1.39 60 MPART_ALT_DIFF 5491 5.52 5.92 5.39 61 XM_B_COVIDMETA 5117 2.60 5.52 1.64 62 BODY_URI_ONLY 5117 1.41 5.52 0.06 63 KHOP_HELO_FCRDNS 4902 2.17 5.29 1.14 64 HTML_IMAGE_RATIO_04 4771 5.33 5.15 5.39 65 TR_XM_COVIDMETA4 4728 2.02 5.10 1.01 66 SpammyFromTLD_02 4704 1.41 5.08 0.20 67 XMStrtUSub 4488 4.48 4.84 4.36 68 UNPARSEABLE_RELAY 4455 7.62 4.81 8.54 69 XMBody_17 4386 1.77 4.73 0.80 70 HTML_MIME_NO_HTML_TAG 4326 2.72 4.67 2.08 71 RELAYCOUNTRY_FR 4126 1.31 4.45 0.27 72 BAYES_95 4034 2.62 4.35 2.04 73 XM_B_SpammyTLD 4031 3.16 4.35 2.77 74 RELAYCOUNTRY_DE 3937 1.36 4.25 0.41 75 XM_SendGrid 3624 6.59 3.91 7.47 76 TR_LOTS_OF_MONEY3 3587 1.43 3.87 0.63 77 XMHTML_After_End 3568 1.42 3.85 0.62 78 MIME_HTML_MOSTLY 3501 3.09 3.78 2.87 79 XMNumbers 3462 3.76 3.74 3.77 80 RDNS_DYNAMIC 3431 1.28 3.70 0.49 81 FROM_SUSPICIOUS_NTLD 3422 0.96 3.69 0.06 82 RCVD_IN_PSBL 3365 1.58 3.63 0.91 83 FROM_SUSPICIOUS_NTLD_FP 3356 0.94 3.62 0.05 84 FROM_EXCESS_BASE64 3338 3.60 3.60 3.60 85 XM_DIRTYINTL 3125 1.18 3.37 0.46 86 BAYES_40 3091 4.62 3.33 5.05 87 BOTNET_NORDNS 3090 0.84 3.33 0.02 88 MIME_QP_LONG_LINE 2928 4.47 3.16 4.90 89 LongTLD 2863 0.91 3.09 0.19 90 MISSING_HEADERS 2753 1.01 2.97 0.36 91 T_XMHurry_00 2745 1.10 2.96 0.49 92 XM_B_Unsub2 2737 1.90 2.95 1.55 93 DATE_IN_PAST_06_12 2666 0.98 2.88 0.35 94 MIME_HTML_ONLY_MULTI 2627 2.89 2.83 2.91 95 SpammyFromTLD_01 2617 1.04 2.82 0.45 96 SUBJ_ALL_CAPS 2605 1.48 2.81 1.05 97 HTML_IMAGE_RATIO_08 2526 2.98 2.73 3.07 98 DATE_IN_PAST_03_06 2485 0.75 2.68 0.12 99 XMSexyCombo_01 2465 1.00 2.66 0.46 100 URIBL_DBL_SPAM 2450 0.67 2.64 0.03 101 DKIM_ADSP_NXDOMAIN 2329 0.87 2.51 0.34 102 SCRIPT_GIBBERISH 2315 0.62 2.50 0.00 103 BAYES_20 2292 3.54 2.47 3.89 104 TR_Mismatch_TLD_02 2272 0.65 2.45 0.06 105 ALL_TRUSTED 2178 12.35 2.35 15.63 106 HTML_IMAGE_RATIO_06 2166 3.30 2.34 3.61 107 TR_XM_PHPDW 2113 0.92 2.28 0.48 108 TR_XM_PhishingBody 2061 1.54 2.22 1.32 109 TR_XM_PHPForged 2057 0.89 2.22 0.45 110 TR_XM_FormFill2 2039 0.88 2.20 0.45 111 XM_H_PHPOS 2039 0.88 2.20 0.45 112 TR_XM_INV_DKIM 2037 0.66 2.20 0.16 113 RCVD_IN_MSPIKE_H3 2034 7.12 2.19 8.73 114 RCVD_IN_MSPIKE_WL 2034 7.12 2.19 8.73 115 XM_UB60 2022 0.59 2.18 0.07 116 T_TooManySym_01 1975 5.06 2.13 6.03 117 TR_XM_MaxSPIKE 1960 0.61 2.11 0.12 118 TM2_M_URI_OPT_OUT 1942 3.44 2.10 3.88 119 RCVD_IN_RP_SAFE 1931 9.75 2.08 12.26 120 XM_URI_RBL 1928 0.65 2.08 0.18 121 RCVD_IN_MSPIKE_L4 1865 0.50 2.01 0.01 122 BAYES_00 1775 14.42 1.92 18.53 123 TR_Mismatch_TLD_01 1731 0.62 1.87 0.20 124 DATE_IN_PAST_12_24 1715 0.64 1.85 0.25 125 URI_TRY_3LD 1711 1.76 1.85 1.73 126 REPLYTO_WITHOUT_TO_CC 1694 0.52 1.83 0.09 127 XM_OfRef6 1692 1.16 1.83 0.94 128 TR_XM_DK_SendGrid 1680 3.70 1.81 4.32 129 XMDiploma_00 1640 1.38 1.77 1.25 130 T_XMDrugObfuBody_14 1634 1.63 1.76 1.58 131 TR_Sbj_FN_Bdy 1624 0.56 1.75 0.17 132 TR_LOTS_OF_MONEY1 1598 0.44 1.72 0.02 133 XM_Nigeria_01 1591 0.48 1.72 0.07 134 HTML_SHORT_LINK_IMG_1 1581 0.45 1.71 0.04 135 URI_HEX 1575 1.30 1.70 1.17 136 XM_Lotto 1529 0.44 1.65 0.04 137 XM_UB80 1513 0.42 1.63 0.02 138 TM2_M_VERY_LONG_WORD 1498 1.54 1.62 1.52 139 T_REMOTE_IMAGE 1448 2.95 1.56 3.41 140 TooManyTo_002 1445 1.70 1.56 1.75 141 URIBL_RHS_DOB 1442 0.52 1.56 0.18 142 RCVD_IN_IADB_LISTED 1410 3.08 1.52 3.59 143 RCVD_IN_RP_CERTIFIED 1387 8.80 1.50 11.20 144 XMStockSpam_06 1387 1.20 1.50 1.10 145 TR_XM_DK_Bayes 1364 10.54 1.47 13.53 146 T_FILL_THIS_FORM_SHORT 1325 1.46 1.43 1.46 147 FROM_ADDR_WS 1270 0.34 1.37 0.00 148 RCVD_IN_IADB_SPF 1247 2.71 1.35 3.16 149 FROM_NO_USER 1246 0.34 1.34 0.01 150 XM_ProductURIs 1220 1.15 1.32 1.10 151 RCVD_IN_IADB_DK 1216 2.41 1.31 2.77 152 RCVD_IN_IADB_SENDERID 1210 2.47 1.31 2.85 153 TooManyTo_003 1174 1.30 1.27 1.31 154 XMSubMetaI_00 1156 0.98 1.25 0.90 155 BAYES_05 1151 2.33 1.24 2.68 156 URI_WP_HACKED_2 1128 0.34 1.22 0.05 157 T_XMDrugObfuBody_00 1099 0.73 1.19 0.57 158 RELAYCOUNTRY_GB 1069 0.94 1.15 0.88 159 HTML_IMAGE_ONLY_08 1063 0.37 1.15 0.12 160 TR_XM_RelayPhish 1047 0.37 1.13 0.12 161 XM_H_PHPMailer 1045 0.69 1.13 0.54 162 PLING_QUERY 1028 0.82 1.11 0.73 163 SUBJ_YOUR_FAMILY 1023 0.32 1.10 0.06 164 XM_XX_Yahoo 1001 0.29 1.08 0.03 165 LIST_PARTIAL_SHORT_MSG 996 0.27 1.07 0.00 166 NO_FM_NAME_IP_HOSTN 977 0.26 1.05 0.00 167 DKIM_ADSP_CUSTOM_MED 953 1.15 1.03 1.19 168 TooManyTo_004 948 1.09 1.02 1.11 169 XMSexyCombo_04 944 0.32 1.02 0.09 170 XMPhish30 913 0.59 0.99 0.46 171 TR_XM_DK_Bayes1 901 9.86 0.97 12.79 172 XMBdyGiftCard01 899 1.46 0.97 1.62 173 XMBrknScrpt_02 896 1.22 0.97 1.31 174 XMGenDplmaNmb 890 0.79 0.96 0.73 175 XM_H_PHPOS_M 884 0.39 0.95 0.21 176 NML_ADSP_CUSTOM_MED 860 0.88 0.93 0.86 177 HK_RANDOM_REPLYTO 859 0.38 0.93 0.20 178 URIBL_BLACK 847 0.23 0.91 0.01 179 MAILING_LIST_MULTI 833 2.00 0.90 2.36 180 SUBJ_DOLLARS 824 0.58 0.89 0.47 181 TR_XM_DK_Bayes2 816 9.21 0.88 11.95 182 XM_SPF_Unknown 810 0.41 0.87 0.26 183 DIET_1 806 0.48 0.87 0.36 184 MPART_ALT_DIFF_COUNT 805 0.52 0.87 0.41 185 FORGED_GMAIL_RCVD 796 0.62 0.86 0.54 186 FROM_MISSP_DYNIP 764 0.20 0.82 0.00 187 XMPhish08 747 0.58 0.81 0.51 188 XM_DK_Undo_01 740 1.43 0.80 1.64 189 DEAR_FRIEND 720 0.25 0.78 0.07 190 XMHTMLBadTable_001 719 0.81 0.78 0.82 191 XMReplyNow 715 0.26 0.77 0.10 192 XMMoneyMeta_00 713 0.41 0.77 0.30 193 TR_Symld_Words 707 1.10 0.76 1.21 194 T_MONEY_PERCENT 707 0.55 0.76 0.48 195 TR_LOTS_OF_MONEY2 707 0.55 0.76 0.48 196 HTML_FONT_SIZE_HUGE 707 0.35 0.76 0.21 197 FROM_MISSP_REPLYTO 696 0.19 0.75 0.00 198 HK_SCAM 695 0.20 0.75 0.01 199 XM_UB99 694 0.19 0.75 0.00 200 TooManyTo_005 694 0.93 0.75 0.99 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 241927 87.67 93.45 85.77 2 RELAYCOUNTRY_US 226441 79.31 76.36 80.28 3 DKIM_SIGNED 217554 78.22 81.54 77.13 4 XM_DK_Pass 214971 77.14 79.96 76.21 5 DKIM_VALID 204845 72.10 70.52 72.62 6 XM_B_Unicode 203303 72.55 73.98 72.08 7 DKIM_VALID_AU 165272 57.79 55.33 58.59 8 XMListUnsubscribeExists 156442 59.66 72.44 55.46 9 BAYES_50 150655 50.24 40.59 53.41 10 DCC_CHECK_NEGATIVE 142808 42.52 17.83 50.63 11 DCC_CHECK 135977 56.27 80.79 48.21 12 XM_B_Unicode3 119312 41.53 39.20 42.30 13 HTML_FONT_LOW_CONTRAST 85896 29.19 25.35 30.45 14 LOC_TINY_FONT_1 81541 29.48 31.23 28.91 15 DKIM_VALID_EF 76182 28.31 32.26 27.01 16 T_TM2_M_HEADER_IN_MSG 65531 21.75 17.25 23.23 17 FVGT_m_MULTI_ODD 63959 22.61 22.42 22.68 18 MIME_HTML_ONLY 62793 27.23 42.35 22.26 19 XMSubLong 61510 21.07 18.84 21.81 20 BAYES_00 52278 14.42 1.92 18.53 21 T_KAM_HTML_FONT_INVALID 49451 20.53 29.67 17.53 22 ALL_TRUSTED 44087 12.35 2.35 15.63 23 XM_Multi_Part_URI 42276 15.01 15.07 14.99 24 XM_Body_Dirty_Words 40720 15.52 18.80 14.44 25 RCVD_IN_MSPIKE_H2 40356 13.42 10.72 14.31 26 TR_XM_DK_Bayes 38152 10.54 1.47 13.53 27 TR_XM_DK_Bayes1 36064 9.86 0.97 12.79 28 RCVD_IN_RP_SAFE 34593 9.75 2.08 12.26 29 TR_XM_DK_Bayes2 33715 9.21 0.88 11.95 30 RCVD_IN_RP_CERTIFIED 31592 8.80 1.50 11.20 31 XM_B_Unsub 27880 9.82 9.61 9.88 32 XM_DKIMWhitelistDomains 27052 7.23 0.04 9.59 33 XM_Evil_Numbers_Gen 26596 9.13 8.22 9.43 34 LotsOfNums_01 25853 8.62 6.95 9.17 35 RCVD_IN_MSPIKE_WL 24637 7.12 2.19 8.73 36 RCVD_IN_MSPIKE_H3 24637 7.12 2.19 8.73 37 HTML_IMAGE_RATIO_02 24295 10.07 14.52 8.61 38 UNPARSEABLE_RELAY 24090 7.62 4.81 8.54 39 FSL_BULK_SIG 23947 9.52 12.64 8.49 40 XM_DK_Undo_02 22931 17.62 46.50 8.13 41 LOTS_OF_MONEY 22615 9.58 14.32 8.02 42 TooManyTo_001 21566 7.25 6.04 7.65 43 XM_SendGrid 21057 6.59 3.91 7.47 44 XM_B_Phish_Phrases 18826 7.85 11.44 6.67 45 BAYES_60 17269 6.52 7.75 6.12 46 T_TooManySym_01 17006 5.06 2.13 6.03 47 BOTNET_IPINHOSTNAME 16763 7.86 13.71 5.94 48 XM_H_Long_From01 16256 5.93 6.43 5.76 49 HTML_IMAGE_RATIO_04 15211 5.33 5.15 5.39 50 MPART_ALT_DIFF 15195 5.52 5.92 5.39 51 RELAYCOUNTRY_META 14923 10.18 25.05 5.29 52 BAYES_40 14236 4.62 3.33 5.05 53 BAYES_99 13822 11.14 30.12 4.90 54 MIME_QP_LONG_LINE 13813 4.47 3.16 4.90 55 XM_UncommonTLD01 13014 8.47 20.22 4.61 56 DKIM_INVALID 12709 6.12 11.01 4.51 57 XMStrtUSub 12293 4.48 4.84 4.36 58 TR_XM_DK_SendGrid 12197 3.70 1.81 4.32 59 XMSexyCombo_05 11987 5.77 10.40 4.25 60 BAYES_999 11050 8.97 24.33 3.92 61 BAYES_20 10959 3.54 2.47 3.89 62 TM2_M_URI_OPT_OUT 10954 3.44 2.10 3.88 63 ANY_BOUNCE_MESSAGE 10628 2.88 0.19 3.77 64 BOUNCE_MESSAGE 10626 2.88 0.19 3.77 65 XMNumbers 10621 3.76 3.74 3.77 66 HTML_IMAGE_RATIO_06 10189 3.30 2.34 3.61 67 FROM_EXCESS_BASE64 10159 3.60 3.60 3.60 68 RCVD_IN_IADB_LISTED 10117 3.08 1.52 3.59 69 XMSubMetaSx_00 9801 4.59 7.99 3.47 70 T_REMOTE_IMAGE 9615 2.95 1.56 3.41 71 BAYES_80 9511 4.57 8.21 3.37 72 RCVD_IN_IADB_SPF 8907 2.71 1.35 3.16 73 T_TooManySym_02 8669 2.43 0.48 3.07 74 HTML_IMAGE_RATIO_08 8660 2.98 2.73 3.07 75 XM_CamelCaseFrm001 8579 5.43 12.70 3.04 76 IN_ZIMBRA_NJ_WHITELIST 8245 2.20 0.01 2.92 77 MIME_HTML_ONLY_MULTI 8222 2.89 2.83 2.91 78 MIME_HTML_MOSTLY 8085 3.09 3.78 2.87 79 TVD_RCVD_IP 8052 2.24 0.38 2.85 80 RCVD_IN_IADB_SENDERID 8035 2.47 1.31 2.85 81 RCVD_IN_IADB_DK 7805 2.41 1.31 2.77 82 XM_B_SpammyTLD 7803 3.16 4.35 2.77 83 XM_PDF 7780 2.18 0.43 2.76 84 XM_H_Trusted_IP 7633 2.04 0.00 2.71 85 INVALID_MSGID 7619 2.11 0.32 2.70 86 BAYES_05 7567 2.33 1.24 2.68 87 TR_DCC_Bayes_99 7512 8.07 24.53 2.66 88 CK_HELO_DYNAMIC_SPLIT_IP 7231 1.95 0.10 2.56 89 HELO_DYNAMIC_IPADDR2 7207 1.93 0.05 2.56 90 TO_MALFORMED 7107 2.02 0.50 2.52 91 BOTNET 7058 7.26 21.74 2.50 92 NO_DNS_FOR_FROM 6816 4.05 9.02 2.42 93 MAILING_LIST_MULTI 6668 2.00 0.90 2.36 94 RCVD_IN_IADB_VOUCHED 5874 1.69 0.48 2.08 95 HTML_MIME_NO_HTML_TAG 5866 2.72 4.67 2.08 96 BAYES_95 5768 2.62 4.35 2.04 97 RELAYCOUNTRY_CA 5601 3.54 8.26 1.99 98 RCVD_IN_MSPIKE_BL 5308 3.74 9.40 1.88 99 IN_HORDE_ADDRESS_BOOK 5235 1.40 0.03 1.86 100 UNTRUSTED_Relay 5215 5.16 15.23 1.85 101 USER_IN_DEF_DKIM_WL 5100 1.36 0.00 1.81 102 TooManyTo_002 4924 1.70 1.56 1.75 103 URI_TRY_3LD 4890 1.76 1.85 1.73 104 XM_DK_Undo_01 4633 1.43 0.80 1.64 105 XM_B_COVIDMETA 4623 2.60 5.52 1.64 106 XMBdyGiftCard01 4581 1.46 0.97 1.62 107 T_XMDrugObfuBody_14 4467 1.63 1.76 1.58 108 XM_B_Unsub2 4386 1.90 2.95 1.55 109 TM2_M_VERY_LONG_WORD 4287 1.54 1.62 1.52 110 RCVD_IN_MSPIKE_L3 4233 2.79 6.70 1.50 111 T_FILL_THIS_FORM_SHORT 4129 1.46 1.43 1.46 112 XM_GoogleGroups 4050 1.19 0.44 1.44 113 T_XMDrugObfuBody_08 3992 2.72 6.68 1.42 114 PDS_OTHER_BAD_TLD 3923 2.52 5.94 1.39 115 TR_XM_PhishingBody 3723 1.54 2.22 1.32 116 TooManyTo_003 3708 1.30 1.27 1.31 117 XMBrknScrpt_02 3687 1.22 0.97 1.31 118 RCVD_IN_IADB_OPTIN 3635 1.05 0.33 1.29 119 XMDiploma_00 3522 1.38 1.77 1.25 120 XMGappySubj_01 3464 0.95 0.10 1.23 121 TR_Symld_Words 3405 1.10 0.76 1.21 122 DKIM_ADSP_CUSTOM_MED 3356 1.15 1.03 1.19 123 URI_HEX 3288 1.30 1.70 1.17 124 KHOP_HELO_FCRDNS 3228 2.17 5.29 1.14 125 TooManyTo_004 3134 1.09 1.02 1.11 126 XMStockSpam_06 3114 1.20 1.50 1.10 127 XM_ProductURIs 3091 1.15 1.32 1.10 128 XM_H_Long_From02 3014 0.91 0.44 1.07 129 SUBJ_ALL_CAPS 2959 1.48 2.81 1.05 130 XM_UB50 2888 3.03 9.15 1.02 131 RCVD_IN_BL_SPAMCOP_NET 2860 2.39 6.57 1.01 132 TR_XM_COVIDMETA4 2855 2.02 5.10 1.01 133 XM_SPF_SoftFail 2841 2.63 7.56 1.01 134 TooManyTo_005 2785 0.93 0.75 0.99 135 XM_OfRef6 2664 1.16 1.83 0.94 136 TR_MetaPhish_Combo_01 2606 0.84 0.59 0.92 137 RCVD_IN_PSBL 2566 1.58 3.63 0.91 138 HTML_FONT_FACE_BAD 2565 0.80 0.46 0.91 139 XMSubNoVowel 2563 0.83 0.58 0.91 140 HTML_TAG_BALANCE_BODY 2545 0.86 0.72 0.90 141 XMSubMetaI_00 2530 0.98 1.25 0.90 142 RELAYCOUNTRY_GB 2471 0.94 1.15 0.88 143 T_TooManySym_03 2457 0.69 0.13 0.87 144 NML_ADSP_CUSTOM_MED 2425 0.88 0.93 0.86 145 XMHTMLBadTable_001 2324 0.81 0.78 0.82 146 XM_RXBody 2286 0.70 0.37 0.81 147 XMBody_17 2244 1.77 4.73 0.80 148 NORDNS_LOW_CONTRAST 2128 0.65 0.31 0.75 149 URIBL_SBL_A 2075 2.96 9.75 0.74 150 XMGenDplmaNmb 2059 0.79 0.96 0.73 151 XMSolicitRefs_0 2057 0.64 0.37 0.73 152 PLING_QUERY 2046 0.82 1.11 0.73 153 HELO_NODOT 2045 0.68 0.56 0.73 154 HELO_NO_DOMAIN 2044 0.68 0.56 0.72 155 XM_B_REG_HTML 1887 0.62 0.45 0.67 156 TR_LOTS_OF_MONEY3 1770 1.43 3.87 0.63 157 XMHTML_After_End 1750 1.42 3.85 0.62 158 HTTPS_HTTP_MISMATCH 1725 0.60 0.56 0.61 159 TR_MSPIKEBAYES00 1712 0.46 0.00 0.61 160 USER_IN_WHITELIST 1688 0.45 0.00 0.60 161 T_XMDrugObfuBody_00 1619 0.73 1.19 0.57 162 XM_H_PHPMailer 1529 0.69 1.13 0.54 163 FORGED_GMAIL_RCVD 1510 0.62 0.86 0.54 164 HTML_IMAGE_ONLY_20 1469 0.46 0.29 0.52 165 XMBody_95 1443 0.40 0.07 0.51 166 XMPhish08 1436 0.58 0.81 0.51 167 URI_NOVOWEL 1424 0.55 0.70 0.50 168 RDNS_DYNAMIC 1384 1.28 3.70 0.49 169 T_XMHurry_00 1380 1.10 2.96 0.49 170 XMSubMetaSxObfu_02 1363 0.50 0.57 0.48 171 TR_LOTS_OF_MONEY2 1354 0.55 0.76 0.48 172 T_MONEY_PERCENT 1354 0.55 0.76 0.48 173 TR_XM_PHPDW 1340 0.92 2.28 0.48 174 SUBJ_DOLLARS 1335 0.58 0.89 0.47 175 XMCapTrack 1330 0.48 0.50 0.47 176 XM_DIRTYINTL 1307 1.18 3.37 0.46 177 XMPhish30 1298 0.59 0.99 0.46 178 XM_B_COPY_HTML 1297 0.51 0.66 0.46 179 XMSexyCombo_01 1285 1.00 2.66 0.46 180 TR_XM_PHPForged 1283 0.89 2.22 0.45 181 TR_XM_FormFill2 1277 0.88 2.20 0.45 182 XM_H_PHPOS 1265 0.88 2.20 0.45 183 SpammyFromTLD_01 1265 1.04 2.82 0.45 184 XMNoVowels 1239 0.45 0.48 0.44 185 XM_Combo_Sbj 1231 0.45 0.51 0.44 186 XMBody_78 1217 0.49 0.66 0.43 187 HTML_OBFUSCATE_05_10 1188 0.35 0.11 0.42 188 MPART_ALT_DIFF_COUNT 1159 0.52 0.87 0.41 189 RELAYCOUNTRY_DE 1152 1.36 4.25 0.41 190 TVD_SPACE_RATIO 1144 0.34 0.16 0.41 191 T_TooManySym_04 1106 0.31 0.05 0.39 192 XM_ShortIntro_01 1074 0.46 0.69 0.38 193 XMBSHREFv2 1055 0.41 0.50 0.37 194 RCVD_IN_MSPIKE_L5 1054 0.45 0.69 0.37 195 XM_Akamai 1040 0.28 0.03 0.37 196 BODY_ENHANCEMENT 1027 0.28 0.04 0.36 197 MISSING_HEADERS 1026 1.01 2.97 0.36 198 DIET_1 1009 0.48 0.87 0.36 199 DATE_IN_PAST_06_12 999 0.98 2.88 0.35 200 THIS_AD 966 0.34 0.34 0.34 ----------------------------------------------------------------------