Email: 715885 Autolearn: 0 AvgScore: 0.75 AvgScanTime: 2.19 sec Spam: 148553 Autolearn: 0 AvgScore: 12.49 AvgScanTime: 3.93 sec Ham: 567332 Autolearn: 0 AvgScore: -2.33 AvgScanTime: 1.74 sec Time Spent Running SA: 436.09 hours Time Spent Processing Spam: 162.01 hours Time Spent Processing Ham: 274.08 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142974 91.33 96.24 90.05 2 DCC_CHECK 119262 46.00 80.28 37.02 3 DKIM_SIGNED 118074 69.26 79.48 66.58 4 XM_B_Unicode 114947 73.37 77.38 72.32 5 RELAYCOUNTRY_US 114871 80.11 77.33 80.84 6 XM_DK_Pass 114813 67.96 77.29 65.52 7 XMListUnsubscribeExists 102209 50.17 68.80 45.30 8 DKIM_VALID 96646 62.18 65.06 61.43 9 DKIM_VALID_AU 71865 45.94 48.38 45.30 10 XM_DK_Undo_02 64044 13.97 43.11 6.34 11 BAYES_50 62566 48.63 42.12 50.33 12 XM_B_Unicode3 62153 42.60 41.84 42.80 13 MIME_HTML_ONLY 57501 26.32 38.71 23.08 14 LOC_TINY_FONT_1 45645 23.35 30.73 21.41 15 T_KAM_HTML_FONT_INVALID 43267 19.00 29.13 16.35 16 HTML_FONT_LOW_CONTRAST 41967 25.24 28.25 24.45 17 BAYES_99 40828 8.02 27.48 2.93 18 DKIM_VALID_EF 39373 23.52 26.50 22.74 19 FVGT_m_MULTI_ODD 37000 21.42 24.91 20.50 20 BOTNET 34175 6.84 23.01 2.61 21 TR_DCC_Bayes_99 33955 5.78 22.86 1.31 22 XMSubLong 33954 20.62 22.86 20.03 23 RELAYCOUNTRY_META 32015 8.76 21.55 5.41 24 BAYES_999 31208 6.18 21.01 2.30 25 T_TM2_M_HEADER_IN_MSG 29410 24.60 19.80 25.86 26 DCC_CHECK_NEGATIVE 26645 52.16 17.94 61.12 27 XM_Body_Dirty_Words 25037 12.62 16.85 11.52 28 XM_Multi_Part_URI 24821 11.40 16.71 10.02 29 BOTNET_IPINHOSTNAME 21766 6.36 14.65 4.19 30 DKIM_INVALID 21428 7.07 14.42 5.15 31 XM_B_Unsub 21195 9.73 14.27 8.54 32 LOTS_OF_MONEY 20708 8.61 13.94 7.21 33 XM_UncommonTLD01 20185 5.24 13.59 3.05 34 FSL_BULK_SIG 19816 8.29 13.34 6.97 35 XM_B_Phish_Phrases 19628 8.25 13.21 6.96 36 UNTRUSTED_Relay 18655 3.89 12.56 1.62 37 NO_DNS_FOR_FROM 17361 4.95 11.69 3.19 38 HTML_IMAGE_RATIO_02 16709 7.46 11.25 6.46 39 XM_Evil_Numbers_Gen 16134 9.49 10.86 9.13 40 LotsOfNums_01 14871 8.28 10.01 7.83 41 BAYES_80 12835 3.96 8.64 2.74 42 RCVD_IN_MSPIKE_H2 12274 12.13 8.26 13.14 43 XM_CamelCaseFrm001 12014 3.17 8.09 1.89 44 RCVD_IN_MSPIKE_BL 11910 3.10 8.02 1.81 45 XMSexyCombo_05 11773 4.29 7.93 3.34 46 TooManyTo_001 11350 7.60 7.64 7.59 47 BAYES_60 11033 5.67 7.43 5.20 48 KHOP_HELO_FCRDNS 10972 3.00 7.39 1.86 49 XM_B_COVIDMETA 10818 2.88 7.28 1.73 50 XM_SPF_SoftFail 10559 2.68 7.11 1.52 51 XM_UB50 10527 2.23 7.09 0.96 52 TR_XM_COVIDMETA4 9853 2.41 6.63 1.31 53 RELAYCOUNTRY_CA 9555 2.57 6.43 1.56 54 URIBL_SBL_A 9214 1.64 6.20 0.45 55 MPART_ALT_DIFF 8929 8.12 6.01 8.67 56 XM_H_Long_From01 8890 5.11 5.98 4.88 57 RCVD_IN_MSPIKE_L3 8640 2.61 5.82 1.77 58 RCVD_IN_BL_SPAMCOP_NET 8601 2.01 5.79 1.02 59 XMSubMetaSx_00 8546 3.62 5.75 3.06 60 XM_B_Unsub2 8083 2.51 5.44 1.74 61 UNPARSEABLE_RELAY 7954 6.41 5.35 6.68 62 MIME_QP_LONG_LINE 7851 5.34 5.28 5.36 63 BAYES_95 7812 2.41 5.26 1.66 64 HTML_IMAGE_RATIO_04 7749 11.81 5.22 13.54 65 TR_XM_MaxBayes 7491 1.06 5.04 0.02 66 T_XMDrugObfuBody_08 7069 2.16 4.76 1.48 67 XM_SendGrid 6562 5.68 4.42 6.01 68 XMNumbers 6527 3.28 4.39 2.99 69 RCVD_IN_RP_RNBL 6313 0.93 4.25 0.07 70 HTML_MIME_NO_HTML_TAG 6159 3.94 4.15 3.88 71 RDNS_DYNAMIC 6042 1.08 4.07 0.29 72 ALL_TRUSTED 6032 13.25 4.06 15.66 73 BODY_URI_ONLY 5690 0.84 3.83 0.05 74 XM_B_SpammyTLD 5595 2.31 3.77 1.92 75 PDS_OTHER_BAD_TLD 5595 1.36 3.77 0.73 76 XMHTML_After_End 5497 1.30 3.70 0.67 77 T_REMOTE_IMAGE 5478 3.39 3.69 3.32 78 DKIM_ADSP_NXDOMAIN 5377 1.01 3.62 0.33 79 XMStrtUSub 5365 7.59 3.61 8.63 80 BAYES_40 5005 5.52 3.37 6.08 81 FROM_EXCESS_BASE64 4835 2.64 3.25 2.48 82 MIME_HTML_MOSTLY 4819 2.53 3.24 2.35 83 HTML_IMAGE_RATIO_06 4819 4.20 3.24 4.45 84 SpammyFromTLD_02 4795 0.85 3.23 0.23 85 XM_OfRef6 4726 1.42 3.18 0.96 86 SpammyFromTLD_01 4702 1.28 3.17 0.79 87 XMBody_17 4699 1.06 3.16 0.52 88 TR_LOTS_OF_MONEY3 4688 1.02 3.16 0.46 89 TM2_M_URI_OPT_OUT 4654 2.98 3.13 2.95 90 HTML_SHORT_LINK_IMG_1 4614 0.65 3.11 0.01 91 RELAYCOUNTRY_DE 4597 1.02 3.09 0.47 92 XM_URI_RBL 4540 0.77 3.06 0.17 93 TooManyTo_002 4412 2.28 2.97 2.09 94 MIME_HTML_ONLY_MULTI 4237 5.83 2.85 6.61 95 RELAYCOUNTRY_FR 4143 0.76 2.79 0.23 96 HTML_IMAGE_RATIO_08 4071 2.21 2.74 2.08 97 TR_XM_PhishingBody 4070 2.08 2.74 1.91 98 RCVD_IN_PSBL 3999 0.58 2.69 0.03 99 XMDiploma_00 3918 1.66 2.64 1.40 100 BOTNET_NORDNS 3866 0.55 2.60 0.01 101 XM_DIRTYINTL 3809 0.87 2.56 0.43 102 TR_XM_INV_DKIM 3783 0.61 2.55 0.11 103 DATE_IN_PAST_03_06 3684 0.64 2.48 0.16 104 TooManyTo_003 3619 1.65 2.44 1.44 105 HTML_IMAGE_ONLY_08 3610 0.59 2.43 0.10 106 RCVD_IN_MSPIKE_H3 3571 6.88 2.40 8.05 107 RCVD_IN_MSPIKE_WL 3571 6.88 2.40 8.05 108 NO_FM_NAME_IP_HOSTN 3501 0.49 2.36 0.00 109 BAYES_20 3467 4.83 2.33 5.49 110 URIBL_DBL_SPAM 3266 0.47 2.20 0.02 111 BAYES_00 3171 17.41 2.13 21.41 112 T_TooManySym_01 3163 3.56 2.13 3.94 113 URI_HEX 3161 1.57 2.13 1.42 114 TR_Mismatch_TLD_01 3132 0.59 2.11 0.19 115 URI_TRY_3LD 3131 1.36 2.11 1.16 116 T_XMHurry_00 3014 0.75 2.03 0.41 117 XM_UB60 2989 0.46 2.01 0.06 118 RCVD_IN_MSPIKE_L5 2939 0.42 1.98 0.01 119 RCVD_IN_IADB_LISTED 2919 4.13 1.96 4.69 120 TooManyTo_004 2827 1.25 1.90 1.08 121 TM2_M_VERY_LONG_WORD 2795 1.31 1.88 1.16 122 TR_XM_DK_SendGrid 2728 3.06 1.84 3.38 123 SUBJ_ALL_CAPS 2677 1.68 1.80 1.65 124 RCVD_IN_IADB_SPF 2663 3.60 1.79 4.08 125 TR_XM_PHPDW 2642 0.76 1.78 0.49 126 XMBrknScrpt_02 2638 0.87 1.78 0.64 127 URI_WP_HACKED_2 2636 0.44 1.77 0.09 128 XMSexyCombo_01 2618 0.78 1.76 0.53 129 RCVD_IN_IADB_DK 2606 3.17 1.75 3.54 130 RCVD_IN_IADB_SENDERID 2593 3.23 1.75 3.61 131 TR_XM_PHPForged 2589 0.74 1.74 0.48 132 FROM_SUSPICIOUS_NTLD 2570 0.38 1.73 0.03 133 TR_XM_FormFill2 2561 0.73 1.72 0.48 134 XMGenDplmaNmb 2558 0.98 1.72 0.79 135 XM_H_PHPOS 2548 0.73 1.72 0.47 136 MIME_HEADER_CTYPE_ONLY 2525 0.51 1.70 0.19 137 TR_XM_MaxSPIKE 2513 0.42 1.69 0.09 138 HDRS_LCASE_IMGONLY 2497 0.36 1.68 0.01 139 XMStockSpam_06 2488 1.10 1.67 0.95 140 FROM_SUSPICIOUS_NTLD_FP 2476 0.37 1.67 0.03 141 T_FILL_THIS_FORM_SHORT 2436 1.22 1.64 1.11 142 TR_XM_RelayPhish 2307 0.43 1.55 0.14 143 RCVD_IN_RP_SAFE 2269 6.22 1.53 7.44 144 TR_XM_DK_Bayes 2260 8.87 1.52 10.80 145 SCRIPT_GIBBERISH 2237 0.31 1.51 0.00 146 DATE_IN_PAST_06_12 2220 0.42 1.49 0.13 147 LongTLD 2205 0.44 1.48 0.16 148 T_XMDrugObfuBody_14 2180 1.59 1.47 1.62 149 RELAYCOUNTRY_GB 2179 1.21 1.47 1.14 150 XMBdyGiftCard01 2083 1.02 1.40 0.92 151 TooManyTo_005 1989 1.00 1.34 0.91 152 MAILING_LIST_MULTI 1959 2.31 1.32 2.58 153 HDRS_MISSP 1941 0.29 1.31 0.03 154 DKIM_ADSP_CUSTOM_MED 1852 1.16 1.25 1.13 155 BAYES_05 1834 3.55 1.23 4.16 156 SHORT_SHORTNER 1828 0.28 1.23 0.03 157 TR_Symld_Words 1791 1.22 1.21 1.22 158 SUSPICIOUS_RECIPS 1753 0.25 1.18 0.01 159 XMPhish30 1751 0.47 1.18 0.29 160 DIET_1 1723 0.43 1.16 0.23 161 XM_DK_Undo_01 1692 1.66 1.14 1.80 162 FORGED_GMAIL_RCVD 1665 0.60 1.12 0.46 163 XM_UB80 1657 0.25 1.12 0.02 164 HK_RANDOM_REPLYTO 1627 0.38 1.10 0.19 165 XMMoneyMeta_00 1622 0.69 1.09 0.58 166 T_XMDrugObfuBody_00 1613 0.68 1.09 0.58 167 NML_ADSP_CUSTOM_MED 1583 0.88 1.07 0.84 168 RCVD_IN_RP_CERTIFIED 1563 5.63 1.05 6.82 169 XM_H_MailChimp 1552 0.35 1.04 0.17 170 DATE_IN_PAST_12_24 1542 0.29 1.04 0.09 171 XMSubMetaI_00 1522 0.58 1.02 0.46 172 T_MONEY_PERCENT 1507 0.41 1.01 0.25 173 TR_LOTS_OF_MONEY2 1507 0.41 1.01 0.25 174 XM_ProductURIs 1467 0.75 0.99 0.69 175 REPLYTO_WITHOUT_TO_CC 1448 0.27 0.97 0.09 176 XM_UB99 1411 0.21 0.95 0.01 177 TO_MALFORMED 1404 1.20 0.95 1.27 178 T_Symld_Words_02 1376 0.54 0.93 0.43 179 TR_XM_DK_Bayes1 1356 8.11 0.91 10.00 180 HTTPS_HTTP_MISMATCH 1334 0.77 0.90 0.74 181 XM_H_PHPMailer 1332 0.56 0.90 0.47 182 HTML_FONT_SIZE_HUGE 1324 0.25 0.89 0.08 183 SHORT_URI_2 1323 0.21 0.89 0.03 184 SUBJ_DOLLARS 1309 0.40 0.88 0.28 185 XM_H_Undi_Recip 1262 0.54 0.85 0.46 186 XMPhish08 1245 0.52 0.84 0.44 187 ANY_BOUNCE_MESSAGE 1239 2.76 0.83 3.26 188 MISSING_HEADERS 1233 0.57 0.83 0.51 189 BOUNCE_MESSAGE 1222 2.75 0.82 3.26 190 XM_H_Long_From02 1219 0.95 0.82 0.99 191 MPART_ALT_DIFF_COUNT 1209 0.50 0.81 0.41 192 RELAYCOUNTRY_FI 1200 0.20 0.81 0.05 193 TR_Mismatch_TLD_02 1194 0.24 0.80 0.10 194 TR_MetaPhish_Combo_01 1183 0.71 0.80 0.69 195 TR_XM_COVIDMETA1 1155 0.26 0.78 0.13 196 HTML_IMAGE_ONLY_04 1145 0.20 0.77 0.05 197 URIBL_BLACK 1143 0.18 0.77 0.02 198 TR_XM_DK_Bayes2 1122 7.15 0.76 8.82 199 URIBL_DBL_ABUSE_REDIR 1111 0.16 0.75 0.00 200 XMPhish14 1092 1.06 0.74 1.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 510857 91.33 96.24 90.05 2 RELAYCOUNTRY_US 458655 80.11 77.33 80.84 3 XM_B_Unicode 410311 73.37 77.38 72.32 4 DKIM_SIGNED 377733 69.26 79.48 66.58 5 XM_DK_Pass 371726 67.96 77.29 65.52 6 DKIM_VALID 348515 62.18 65.06 61.43 7 DCC_CHECK_NEGATIVE 346753 52.16 17.94 61.12 8 BAYES_50 285542 48.63 42.12 50.33 9 DKIM_VALID_AU 256986 45.94 48.38 45.30 10 XMListUnsubscribeExists 256976 50.17 68.80 45.30 11 XM_B_Unicode3 242792 42.60 41.84 42.80 12 DCC_CHECK 210033 46.00 80.28 37.02 13 T_TM2_M_HEADER_IN_MSG 146706 24.60 19.80 25.86 14 HTML_FONT_LOW_CONTRAST 138691 25.24 28.25 24.45 15 MIME_HTML_ONLY 130949 26.32 38.71 23.08 16 DKIM_VALID_EF 128989 23.52 26.50 22.74 17 LOC_TINY_FONT_1 121494 23.35 30.73 21.41 18 BAYES_00 121438 17.41 2.13 21.41 19 FVGT_m_MULTI_ODD 116313 21.42 24.91 20.50 20 XMSubLong 113639 20.62 22.86 20.03 21 T_KAM_HTML_FONT_INVALID 92772 19.00 29.13 16.35 22 ALL_TRUSTED 88833 13.25 4.06 15.66 23 HTML_IMAGE_RATIO_04 76801 11.81 5.22 13.54 24 RCVD_IN_MSPIKE_H2 74569 12.13 8.26 13.14 25 XM_Body_Dirty_Words 65334 12.62 16.85 11.52 26 XM_H_Trusted_IP 63169 8.82 0.00 11.13 27 HTML_FONT_FACE_BAD 62652 8.86 0.54 11.04 28 TR_XM_DK_Bayes 61267 8.87 1.52 10.80 29 XM_Multi_Part_URI 56821 11.40 16.71 10.02 30 TR_XM_DK_Bayes1 56737 8.11 0.91 10.00 31 XM_Evil_Numbers_Gen 51783 9.49 10.86 9.13 32 TR_XM_DK_Bayes2 50053 7.15 0.76 8.82 33 MPART_ALT_DIFF 49169 8.12 6.01 8.67 34 XMStrtUSub 48958 7.59 3.61 8.63 35 XM_B_Unsub 48445 9.73 14.27 8.54 36 RCVD_IN_MSPIKE_H3 45659 6.88 2.40 8.05 37 RCVD_IN_MSPIKE_WL 45659 6.88 2.40 8.05 38 LotsOfNums_01 44418 8.28 10.01 7.83 39 TooManyTo_001 43058 7.60 7.64 7.59 40 RCVD_IN_RP_SAFE 42231 6.22 1.53 7.44 41 LOTS_OF_MONEY 40929 8.61 13.94 7.21 42 FSL_BULK_SIG 39563 8.29 13.34 6.97 43 XM_B_Phish_Phrases 39461 8.25 13.21 6.96 44 RCVD_IN_RP_CERTIFIED 38710 5.63 1.05 6.82 45 UNPARSEABLE_RELAY 37910 6.41 5.35 6.68 46 MIME_HTML_ONLY_MULTI 37479 5.83 2.85 6.61 47 HTML_IMAGE_RATIO_02 36662 7.46 11.25 6.46 48 XM_DK_Undo_02 35974 13.97 43.11 6.34 49 XM_DKIMWhitelistDomains 34837 4.87 0.02 6.14 50 BAYES_40 34509 5.52 3.37 6.08 51 XM_SendGrid 34119 5.68 4.42 6.01 52 BAYES_20 31146 4.83 2.33 5.49 53 RELAYCOUNTRY_META 30720 8.76 21.55 5.41 54 MIME_QP_LONG_LINE 30406 5.34 5.28 5.36 55 BAYES_60 29529 5.67 7.43 5.20 56 DKIM_INVALID 29218 7.07 14.42 5.15 57 XM_H_Long_From01 27697 5.11 5.98 4.88 58 RCVD_IN_IADB_LISTED 26627 4.13 1.96 4.69 59 HTML_IMAGE_RATIO_06 25264 4.20 3.24 4.45 60 BOTNET_IPINHOSTNAME 23783 6.36 14.65 4.19 61 BAYES_05 23590 3.55 1.23 4.16 62 RCVD_IN_IADB_SPF 23133 3.60 1.79 4.08 63 XM_PDF 22768 3.32 0.68 4.01 64 T_TooManySym_01 22356 3.56 2.13 3.94 65 HTML_MIME_NO_HTML_TAG 22024 3.94 4.15 3.88 66 XMSubNoVowel 21200 3.09 0.61 3.74 67 RCVD_IN_IADB_SENDERID 20508 3.23 1.75 3.61 68 RCVD_IN_IADB_DK 20095 3.17 1.75 3.54 69 TR_XM_DK_SendGrid 19200 3.06 1.84 3.38 70 XMSexyCombo_05 18954 4.29 7.93 3.34 71 T_REMOTE_IMAGE 18813 3.39 3.69 3.32 72 ANY_BOUNCE_MESSAGE 18503 2.76 0.83 3.26 73 BOUNCE_MESSAGE 18495 2.75 0.82 3.26 74 NO_DNS_FOR_FROM 18100 4.95 11.69 3.19 75 XMSubMetaSx_00 17352 3.62 5.75 3.06 76 XM_UncommonTLD01 17319 5.24 13.59 3.05 77 XMNumbers 16965 3.28 4.39 2.99 78 IN_ZIMBRA_NJ_WHITELIST 16926 2.37 0.02 2.98 79 TM2_M_URI_OPT_OUT 16709 2.98 3.13 2.95 80 RCVD_IN_IADB_VOUCHED 16705 2.45 0.58 2.94 81 BAYES_99 16616 8.02 27.48 2.93 82 BAYES_80 15517 3.96 8.64 2.74 83 BOTNET 14802 6.84 23.01 2.61 84 MAILING_LIST_MULTI 14610 2.31 1.32 2.58 85 FROM_EXCESS_BASE64 14076 2.64 3.25 2.48 86 MIME_HTML_MOSTLY 13315 2.53 3.24 2.35 87 BAYES_999 13021 6.18 21.01 2.30 88 TooManyTo_002 11875 2.28 2.97 2.09 89 HTML_IMAGE_RATIO_08 11781 2.21 2.74 2.08 90 T_TooManySym_02 11225 1.72 0.72 1.98 91 XM_B_SpammyTLD 10915 2.31 3.77 1.92 92 TR_XM_PhishingBody 10820 2.08 2.74 1.91 93 XM_CamelCaseFrm001 10702 3.17 8.09 1.89 94 KHOP_HELO_FCRDNS 10530 3.00 7.39 1.86 95 RCVD_IN_MSPIKE_BL 10285 3.10 8.02 1.81 96 XM_DK_Undo_01 10194 1.66 1.14 1.80 97 RCVD_IN_IADB_OPTIN 10096 1.48 0.36 1.78 98 RCVD_IN_MSPIKE_L3 10061 2.61 5.82 1.77 99 XM_B_Unsub2 9861 2.51 5.44 1.74 100 XM_B_COVIDMETA 9811 2.88 7.28 1.73 101 BAYES_95 9441 2.41 5.26 1.66 102 SUBJ_ALL_CAPS 9380 1.68 1.80 1.65 103 TVD_RCVD_IP 9247 1.34 0.25 1.63 104 T_XMDrugObfuBody_14 9203 1.59 1.47 1.62 105 UNTRUSTED_Relay 9166 3.89 12.56 1.62 106 RELAYCOUNTRY_CA 8838 2.57 6.43 1.56 107 HELO_NODOT 8671 1.33 0.57 1.53 108 HELO_NO_DOMAIN 8670 1.33 0.57 1.53 109 XM_SPF_SoftFail 8645 2.68 7.11 1.52 110 T_XMDrugObfuBody_08 8391 2.16 4.76 1.48 111 TooManyTo_003 8191 1.65 2.44 1.44 112 URI_HEX 8066 1.57 2.13 1.42 113 XMDiploma_00 7962 1.66 2.64 1.40 114 IN_HORDE_ADDRESS_BOOK 7646 1.08 0.05 1.35 115 XMSubLongNoVowel 7518 1.06 0.06 1.33 116 XMSubGarbage 7500 1.05 0.02 1.32 117 INVALID_MSGID 7463 1.09 0.25 1.32 118 TR_DCC_Bayes_99 7429 5.78 22.86 1.31 119 HELO_MISC_IP 7424 1.05 0.07 1.31 120 TR_XM_COVIDMETA4 7423 2.41 6.63 1.31 121 CK_HELO_DYNAMIC_SPLIT_IP 7422 1.05 0.07 1.31 122 XM_GoogleGroups 7198 1.11 0.50 1.27 123 TO_MALFORMED 7192 1.20 0.95 1.27 124 XMCapTrack 6948 1.07 0.49 1.22 125 TR_Symld_Words 6931 1.22 1.21 1.22 126 TM2_M_VERY_LONG_WORD 6589 1.31 1.88 1.16 127 URI_TRY_3LD 6572 1.36 2.11 1.16 128 XMPhish14 6529 1.06 0.74 1.15 129 RELAYCOUNTRY_GB 6465 1.21 1.47 1.14 130 DKIM_ADSP_CUSTOM_MED 6423 1.16 1.25 1.13 131 T_FILL_THIS_FORM_SHORT 6270 1.22 1.64 1.11 132 TooManyTo_004 6155 1.25 1.90 1.08 133 RCVD_IN_BL_SPAMCOP_NET 5773 2.01 5.79 1.02 134 XM_H_Long_From02 5617 0.95 0.82 0.99 135 XM_UB50 5467 2.23 7.09 0.96 136 XM_OfRef6 5440 1.42 3.18 0.96 137 XMStockSpam_06 5380 1.10 1.67 0.95 138 XM_E_Blogspot 5215 0.75 0.09 0.92 139 XMBdyGiftCard01 5199 1.02 1.40 0.92 140 TooManyTo_005 5180 1.00 1.34 0.91 141 USER_IN_DEF_DKIM_WL 4981 0.70 0.00 0.88 142 XMGappySubj_01 4936 0.75 0.28 0.87 143 NML_ADSP_CUSTOM_MED 4742 0.88 1.07 0.84 144 XMGenDplmaNmb 4481 0.98 1.72 0.79 145 SpammyFromTLD_01 4479 1.28 3.17 0.79 146 XMNoVowels 4388 0.71 0.45 0.77 147 HTTPS_HTTP_MISMATCH 4176 0.77 0.90 0.74 148 PDS_OTHER_BAD_TLD 4158 1.36 3.77 0.73 149 UPPERCASE_75_100 4124 0.59 0.06 0.73 150 UNICODE_OBFU_ASC 4015 0.66 0.49 0.71 151 TR_MetaPhish_Combo_01 3930 0.71 0.80 0.69 152 XM_ProductURIs 3894 0.75 0.99 0.69 153 XMHTML_After_End 3802 1.30 3.70 0.67 154 HTML_TAG_BALANCE_BODY 3617 0.63 0.59 0.64 155 XMBrknScrpt_02 3611 0.87 1.78 0.64 156 T_TooManySym_03 3508 0.54 0.23 0.62 157 XMMoneyMeta_00 3307 0.69 1.09 0.58 158 T_XMDrugObfuBody_00 3289 0.68 1.09 0.58 159 TR_MSPIKEBAYES00 3193 0.45 0.01 0.56 160 XM_RXBody 3085 0.51 0.37 0.54 161 FROM_GOV_DKIM_AU 3076 0.45 0.11 0.54 162 XMSexyCombo_01 2994 0.78 1.76 0.53 163 XMBody_17 2925 1.06 3.16 0.52 164 MISSING_HEADERS 2875 0.57 0.83 0.51 165 TR_XM_PHPDW 2800 0.76 1.78 0.49 166 RCVD_IN_SORBS_DUL 2783 0.41 0.10 0.49 167 XM_ShortIntro_01 2781 0.47 0.40 0.49 168 TR_XM_PHPForged 2709 0.74 1.74 0.48 169 TR_XM_FormFill2 2697 0.73 1.72 0.48 170 RELAYCOUNTRY_DE 2685 1.02 3.09 0.47 171 XM_H_PHPMailer 2680 0.56 0.90 0.47 172 XM_SPF_Unknown 2666 0.51 0.67 0.47 173 XM_H_PHPOS 2662 0.73 1.72 0.47 174 XMSubMetaI_00 2638 0.58 1.02 0.46 175 FORGED_GMAIL_RCVD 2637 0.60 1.12 0.46 176 T_OBFU_PDF_ATTACH 2615 0.39 0.13 0.46 177 TR_LOTS_OF_MONEY3 2612 1.02 3.16 0.46 178 XM_H_Undi_Recip 2582 0.54 0.85 0.46 179 XMSubMetaSxObfu_03 2576 0.51 0.71 0.45 180 URIBL_SBL_A 2548 1.64 6.20 0.45 181 HTML_IMAGE_ONLY_20 2545 0.42 0.31 0.45 182 LOW_PRICE 2501 0.48 0.63 0.44 183 PLING_QUERY 2497 0.44 0.43 0.44 184 XMPhish08 2476 0.52 0.84 0.44 185 T_Symld_Words_02 2467 0.54 0.93 0.43 186 XMHTMLBadTable_001 2426 0.46 0.61 0.43 187 XM_DIRTYINTL 2422 0.87 2.56 0.43 188 XMSubMetaSxObfu_02 2357 0.40 0.36 0.42 189 RELAYCOUNTRY_NL 2355 0.41 0.40 0.42 190 MPART_ALT_DIFF_COUNT 2343 0.50 0.81 0.41 191 T_XMHurry_00 2324 0.75 2.03 0.41 192 FROM_GOV_SPOOF 2276 0.34 0.13 0.40 193 TR_Sbj_FN_Bdy 2266 0.38 0.32 0.40 194 SHORT_HELO_AND_INLINE_IMAGE 2125 0.31 0.05 0.37 195 RELAYCOUNTRY_AU 2115 0.44 0.71 0.37 196 URI_NOVOWEL 2108 0.41 0.53 0.37 197 XM_B_REG_HTML 2087 0.34 0.22 0.37 198 HTML_IMAGE_ONLY_28 2026 0.38 0.48 0.36 199 XMLKML 2011 0.28 0.00 0.35 200 XM_B_COPY_HTML 2002 0.37 0.45 0.35 ----------------------------------------------------------------------