Email: 739293 Autolearn: 0 AvgScore: 3.76 AvgScanTime: 1.37 sec Spam: 218005 Autolearn: 0 AvgScore: 13.63 AvgScanTime: 1.53 sec Ham: 521288 Autolearn: 0 AvgScore: -0.37 AvgScanTime: 1.31 sec Time Spent Running SA: 281.80 hours Time Spent Processing Spam: 92.44 hours Time Spent Processing Ham: 189.35 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 207334 92.00 95.11 90.70 2 DKIM_SIGNED 176162 76.28 80.81 74.39 3 XM_DK_Pass 169465 74.54 77.73 73.20 4 XM_B_Unicode 168144 75.06 77.13 74.19 5 DKIM_VALID 167631 72.94 76.89 71.28 6 DCC_CHECK 166862 50.25 76.54 39.26 7 RELAYCOUNTRY_US 158687 78.48 72.79 80.86 8 XMListUnsubscribeExists 145689 55.12 66.83 50.23 9 XM_B_SpammyWords 144390 52.54 66.23 46.81 10 DKIM_VALID_AU 128398 55.02 58.90 53.39 11 XM_DK_Undo_02 96720 18.36 44.37 7.48 12 BAYES_99 82943 15.75 38.05 6.42 13 XM_B_Unicode3 82073 39.37 37.65 40.09 14 XM_B_SpammyWords2 81252 24.82 37.27 19.62 15 TR_XM_DKIM_Undo 79142 14.51 36.30 5.40 16 HTML_FONT_LOW_CONTRAST 78901 31.53 36.19 29.59 17 BAYES_50 74884 47.86 34.35 53.52 18 LOC_TINY_FONT_1 73626 26.59 33.77 23.58 19 MIME_HTML_ONLY 67465 25.85 30.95 23.71 20 RCVD_IN_MSPIKE_H2 65972 28.32 30.26 27.51 21 BAYES_999 64874 11.96 29.76 4.51 22 TR_DCC_Bayes_99 61687 9.91 28.30 2.21 23 DKIM_VALID_EF 61397 27.88 28.16 27.77 24 FVGT_m_MULTI_ODD 55159 23.09 25.30 22.17 25 T_KAM_HTML_FONT_INVALID 51186 19.85 23.48 18.33 26 XMSubLong 50648 21.39 23.23 20.63 27 RELAYCOUNTRY_META 48834 10.02 22.40 4.84 28 DCC_CHECK_NEGATIVE 47494 47.69 21.79 58.52 29 XM_Multi_Part_URI 45654 14.36 20.94 11.60 30 T_TM2_M_HEADER_IN_MSG 45589 26.75 20.91 29.18 31 RCVD_IN_MSPIKE_WL 39539 24.88 18.14 27.70 32 XM_Body_Dirty_Words 37037 13.93 16.99 12.65 33 UNTRUSTED_Relay 35369 6.21 16.22 2.02 34 BOTNET 33678 5.88 15.45 1.88 35 FSL_BULK_SIG 31433 8.52 14.42 6.05 36 TR_XM_SpammyWords2 30303 4.82 13.90 1.02 37 XM_B_SpammyWords3 29138 7.50 13.37 5.04 38 LotsOfNums_01 29022 10.01 13.31 8.63 39 BOTNET_IPINHOSTNAME 28962 7.06 13.29 4.46 40 LOTS_OF_MONEY 26959 7.92 12.37 6.07 41 XM_B_Unsub 26629 10.82 12.21 10.24 42 TR_XM_SpammyWords4 23067 5.79 10.58 3.78 43 RCVD_IN_MSPIKE_H3 22065 14.05 10.12 15.69 44 XM_UncommonTLD01 21555 5.10 9.89 3.10 45 XM_Evil_Numbers_Gen 20871 8.96 9.57 8.70 46 RCVD_IN_BL_SPAMCOP_NET 20143 3.53 9.24 1.14 47 BAYES_80 18876 5.81 8.66 4.62 48 MPART_ALT_DIFF 17421 5.82 7.99 4.91 49 HTML_IMAGE_RATIO_02 17239 6.80 7.91 6.34 50 BAYES_60 17144 7.50 7.86 7.35 51 UNPARSEABLE_RELAY 17054 7.64 7.82 7.57 52 XMSexyCombo_05 17020 4.95 7.81 3.75 53 XM_B_Phish_Phrases 16653 5.14 7.64 4.09 54 TR_XM_UnparsRelay 16366 5.90 7.51 5.23 55 RCVD_IN_MSPIKE_H4 15719 8.94 7.21 9.66 56 XM_SendGrid 14457 6.78 6.63 6.84 57 T_REMOTE_IMAGE 14178 4.38 6.50 3.49 58 MIME_HTML_MOSTLY 13585 3.36 6.23 2.16 59 RELAYCOUNTRY_CA 13524 2.79 6.20 1.37 60 RCVD_IN_MSPIKE_BL 13522 2.14 6.20 0.44 61 HTML_IMAGE_RATIO_08 13434 3.54 6.16 2.44 62 TR_XM_MSPIKECOMBO 13395 2.12 6.14 0.43 63 TooManyTo_001 13225 7.41 6.07 7.98 64 TR_XM_PhishingBody 12528 3.71 5.75 2.86 65 KHOP_HELO_FCRDNS 12062 2.90 5.53 1.80 66 XM_B_SpammyTLD 11987 3.70 5.50 2.95 67 XM_H_Long_From01 11922 5.83 5.47 5.98 68 BAYES_95 11399 3.90 5.23 3.34 69 XM_UB50 11201 2.27 5.14 1.06 70 XMSubMetaSx_00 10980 3.66 5.04 3.08 71 HTML_IMAGE_ONLY_12 10923 1.64 5.01 0.23 72 BODY_URI_ONLY 10663 1.48 4.89 0.06 73 HTML_SHORT_LINK_IMG_1 10629 1.46 4.88 0.03 74 XM_OfRef6 10537 2.06 4.83 0.90 75 XMStrtUSub 10063 4.79 4.62 4.87 76 XM_SPF_SoftFail 9745 2.51 4.47 1.69 77 HTML_IMAGE_RATIO_04 9685 5.15 4.44 5.44 78 HTML_IMAGE_RATIO_06 9394 4.52 4.31 4.61 79 ALL_TRUSTED 8875 12.08 4.07 15.43 80 RCVD_IN_MSPIKE_L5 8844 1.25 4.06 0.08 81 TR_XM_SpammyWords5 8771 2.28 4.02 1.56 82 XMNumbers 8599 3.40 3.94 3.17 83 RCVD_IN_RP_SAFE 8589 6.46 3.94 7.51 84 T_FONT_INVIS_NAKED_TO 8567 2.29 3.93 1.60 85 URIBL_SBL_A 8542 1.24 3.92 0.12 86 DKIM_INVALID 8531 3.34 3.91 3.11 87 PDS_OTHER_BAD_TLD 8448 2.20 3.88 1.49 88 XM_UB99 8124 1.11 3.73 0.01 89 TR_XM_DK_SendGrid 7735 4.01 3.55 4.21 90 URI_HEX 7696 1.97 3.53 1.32 91 RCVD_IN_RP_RNBL 7618 1.06 3.49 0.05 92 SpammyFromTLD_02 7589 1.28 3.48 0.36 93 SpammyFromTLD_01 7559 1.62 3.47 0.85 94 XM_B_COVIDMETA 7346 1.49 3.37 0.70 95 TM2_M_URI_OPT_OUT 7320 2.71 3.36 2.44 96 RCVD_IN_RP_CERTIFIED 7285 5.83 3.34 6.86 97 XM_DK_Undo_01 6804 2.11 3.12 1.68 98 XMBrknScrpt_02 6660 1.47 3.05 0.80 99 XM_B_Phish66 6632 2.11 3.04 1.72 100 RCVD_IN_PSBL 6572 0.93 3.01 0.06 101 T_XMDrugObfuBody_08 6505 1.93 2.98 1.48 102 XMDiploma_00 6221 2.53 2.85 2.40 103 TR_XM_SB_Phish 6141 2.31 2.82 2.09 104 MIME_QP_LONG_LINE 6048 4.71 2.77 5.52 105 RELAYCOUNTRY_FR 6032 1.04 2.77 0.31 106 XMSubPhish11 5906 2.25 2.71 2.06 107 T_FILL_THIS_FORM_SHORT 5894 1.50 2.70 1.00 108 TR_XM_SpammyWords3 5858 1.03 2.69 0.33 109 RELAYCOUNTRY_IN 5826 0.86 2.67 0.10 110 BOTNET_NORDNS 5520 0.76 2.53 0.01 111 XM_UB999 5520 0.76 2.53 0.01 112 SUBJ_ALL_CAPS 5503 1.82 2.52 1.52 113 TR_LOTS_OF_MONEY3 5502 0.94 2.52 0.28 114 XM_B_Unsub2 5429 2.40 2.49 2.37 115 XM_UB60 5372 0.81 2.46 0.12 116 T_TooManySym_01 5252 3.77 2.41 4.34 117 XM_DIRTYINTL 5215 0.98 2.39 0.40 118 TR_XM_MaxBayes 5206 0.71 2.39 0.01 119 XM_B_SpammyWords4 5158 1.28 2.37 0.83 120 HTML_FONT_SIZE_LARGE 5157 0.77 2.37 0.10 121 TM2_M_VERY_LONG_WORD 5026 1.52 2.31 1.19 122 T_XMDrugObfuBody_14 5016 1.87 2.30 1.68 123 MIME_HTML_ONLY_MULTI 4979 2.97 2.28 3.26 124 TR_Symld_Words 4960 1.63 2.28 1.36 125 XM_UB80 4876 0.70 2.24 0.05 126 XM_CamelCaseFrm001 4804 1.99 2.20 1.90 127 BAYES_40 4739 4.01 2.17 4.77 128 XMSubNoVowel 4620 1.91 2.12 1.82 129 RCVD_IN_IADB_LISTED 4480 4.69 2.05 5.80 130 XMBdyGiftCard01 4392 1.07 2.01 0.68 131 XMGenDplmaNmb 4387 1.58 2.01 1.40 132 URI_TRY_3LD 4234 1.56 1.94 1.40 133 FROM_EXCESS_BASE64 4096 2.67 1.88 3.00 134 RCVD_IN_IADB_SPF 4013 4.10 1.84 5.05 135 XM_URI_RBL 4000 0.65 1.83 0.15 136 XMSlimDrugH 3853 0.73 1.77 0.30 137 XM_UB95 3796 0.52 1.74 0.01 138 RCVD_IN_IADB_DK 3783 3.60 1.74 4.37 139 FORGED_GMAIL_RCVD 3782 0.98 1.73 0.67 140 RCVD_IN_IADB_SENDERID 3770 3.69 1.73 4.51 141 T_XMDrugObfuBody_00 3760 1.04 1.72 0.76 142 TR_XM_COVIDMETA4 3739 0.77 1.72 0.37 143 T_Symld_Words_02 3727 0.95 1.71 0.63 144 T_XMHurry_00 3597 0.90 1.65 0.59 145 XM_OfRef7 3528 0.55 1.62 0.10 146 XMMoneyMeta_00 3455 0.97 1.58 0.71 147 BAYES_20 3369 3.01 1.55 3.63 148 HTML_MIME_NO_HTML_TAG 3354 1.71 1.54 1.79 149 XMSexyCombo_01 3339 0.78 1.53 0.46 150 TR_XM_PHPDW 3280 0.65 1.50 0.29 151 RELAYCOUNTRY_UA 3267 0.48 1.50 0.06 152 XMStockSpam_06 3249 1.25 1.49 1.15 153 TR_XM_PHPForged 3244 0.62 1.49 0.26 154 HK_RANDOM_REPLYTO 3218 0.58 1.48 0.20 155 TR_XM_FormFill2 3194 0.61 1.47 0.25 156 XMBody_17 3189 0.78 1.46 0.49 157 XM_H_PHPOS 3188 0.60 1.46 0.25 158 FROM_SUSPICIOUS_NTLD 3053 0.48 1.40 0.09 159 TR_XM_FormFill 2962 0.41 1.36 0.01 160 FROM_SUSPICIOUS_NTLD_FP 2914 0.45 1.34 0.08 161 RCVD_IN_MSPIKE_L3 2874 0.60 1.32 0.30 162 BAYES_00 2823 10.29 1.29 14.05 163 XM_JunkDunk 2721 0.37 1.25 0.00 164 URI_NOVOWEL 2707 2.45 1.24 2.95 165 XMSubMetaI_00 2697 0.78 1.24 0.59 166 MAILING_LIST_MULTI 2677 2.23 1.23 2.65 167 HTTPS_HTTP_MISMATCH 2640 0.93 1.21 0.81 168 TR_Mismatch_TLD_02 2537 0.39 1.16 0.07 169 TR_Mismatch_TLD_01 2528 0.62 1.16 0.39 170 DKIM_ADSP_CUSTOM_MED 2506 1.11 1.15 1.09 171 TR_XM_COVIDMETA1 2497 0.61 1.15 0.38 172 TVD_SPACE_RATIO 2495 0.65 1.14 0.45 173 TR_XM_BayesRelay 2487 0.34 1.14 0.01 174 TVD_SPACE_RATIO_MINFP 2471 0.35 1.13 0.02 175 XMSubMetaD_03 2446 0.37 1.12 0.06 176 TR_Caps_n_Bayes_99 2431 0.36 1.12 0.05 177 RDNS_DYNAMIC 2427 0.65 1.11 0.45 178 XM_ProductURIs 2399 1.15 1.10 1.17 179 XMBody_78 2380 0.66 1.09 0.48 180 XMHTML_After_End 2376 0.86 1.09 0.76 181 XMPhish08 2355 0.51 1.08 0.27 182 TR_MetaPhish_Combo_01 2306 0.70 1.06 0.56 183 RELAYCOUNTRY_GB 2303 0.98 1.06 0.94 184 DRUGS_ERECTILE 2280 0.35 1.05 0.06 185 URI_PHP_REDIR 2275 0.31 1.04 0.01 186 XM_H_Long_From02 2268 1.19 1.04 1.25 187 NML_ADSP_CUSTOM_MED 2262 0.83 1.04 0.75 188 HTML_TAG_BALANCE_BODY 2241 0.55 1.03 0.35 189 LongTLD 2220 0.41 1.02 0.16 190 XMSubMetaD_00 2199 0.35 1.01 0.08 191 NUMERIC_HTTP_ADDR 2140 0.53 0.98 0.34 192 RELAYCOUNTRY_DE 2082 0.57 0.96 0.41 193 TR_XM_INV_DKIM 2078 0.35 0.95 0.10 194 TR_XM_DK_Bayes 2030 7.24 0.93 9.88 195 PDS_FROM_2_EMAILS 2015 0.29 0.92 0.03 196 TR_XM_DK_Bayes1 2003 7.03 0.92 9.59 197 XM_Combo_Sbj 1982 0.39 0.91 0.17 198 XMSubMetaD_01 1980 0.27 0.91 0.00 199 FROM_2_EMAILS_SHORT 1970 0.27 0.90 0.00 200 SERGIO_SUBJECT_VIAGRA01 1967 0.27 0.90 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 472811 92.00 95.11 90.70 2 RELAYCOUNTRY_US 421522 78.48 72.79 80.86 3 DKIM_SIGNED 387782 76.28 80.81 74.39 4 XM_B_Unicode 386747 75.06 77.13 74.19 5 XM_DK_Pass 381574 74.54 77.73 73.20 6 DKIM_VALID 371594 72.94 76.89 71.28 7 DCC_CHECK_NEGATIVE 305077 47.69 21.79 58.52 8 BAYES_50 278974 47.86 34.35 53.52 9 DKIM_VALID_AU 278329 55.02 58.90 53.39 10 XMListUnsubscribeExists 261829 55.12 66.83 50.23 11 XM_B_SpammyWords 244017 52.54 66.23 46.81 12 XM_B_Unicode3 208987 39.37 37.65 40.09 13 DCC_CHECK 204639 50.25 76.54 39.26 14 HTML_FONT_LOW_CONTRAST 154231 31.53 36.19 29.59 15 T_TM2_M_HEADER_IN_MSG 152137 26.75 20.91 29.18 16 DKIM_VALID_EF 144743 27.88 28.16 27.77 17 RCVD_IN_MSPIKE_WL 144417 24.88 18.14 27.70 18 RCVD_IN_MSPIKE_H2 143381 28.32 30.26 27.51 19 MIME_HTML_ONLY 123613 25.85 30.95 23.71 20 LOC_TINY_FONT_1 122928 26.59 33.77 23.58 21 FVGT_m_MULTI_ODD 115548 23.09 25.30 22.17 22 XMSubLong 107516 21.39 23.23 20.63 23 XM_B_SpammyWords2 102266 24.82 37.27 19.62 24 T_KAM_HTML_FONT_INVALID 95533 19.85 23.48 18.33 25 RCVD_IN_MSPIKE_H3 81810 14.05 10.12 15.69 26 ALL_TRUSTED 80459 12.08 4.07 15.43 27 BAYES_00 73254 10.29 1.29 14.05 28 XM_Body_Dirty_Words 65935 13.93 16.99 12.65 29 XM_Multi_Part_URI 60483 14.36 20.94 11.60 30 XM_B_Unsub 53386 10.82 12.21 10.24 31 TR_XM_DK_Bayes 51518 7.24 0.93 9.88 32 RCVD_IN_MSPIKE_H4 50374 8.94 7.21 9.66 33 TR_XM_DK_Bayes1 49991 7.03 0.92 9.59 34 XM_Evil_Numbers_Gen 45367 8.96 9.57 8.70 35 LotsOfNums_01 45005 10.01 13.31 8.63 36 XM_DKIMWhitelistDomains 44269 5.99 0.02 8.49 37 TR_XM_DK_Bayes2 44015 6.20 0.83 8.44 38 TooManyTo_001 41586 7.41 6.07 7.98 39 UNPARSEABLE_RELAY 39449 7.64 7.82 7.57 40 RCVD_IN_RP_SAFE 39162 6.46 3.94 7.51 41 XM_DK_Undo_02 38988 18.36 44.37 7.48 42 BAYES_60 38306 7.50 7.86 7.35 43 RCVD_IN_RP_CERTIFIED 35784 5.83 3.34 6.86 44 XM_SendGrid 35670 6.78 6.63 6.84 45 BAYES_99 33492 15.75 38.05 6.42 46 HTML_IMAGE_RATIO_02 33066 6.80 7.91 6.34 47 LOTS_OF_MONEY 31618 7.92 12.37 6.07 48 FSL_BULK_SIG 31534 8.52 14.42 6.05 49 XM_H_Long_From01 31179 5.83 5.47 5.98 50 IN_ZIMBRA_NJ_WHITELIST 31101 4.23 0.07 5.97 51 RCVD_IN_IADB_LISTED 30216 4.69 2.05 5.80 52 MIME_QP_LONG_LINE 28770 4.71 2.77 5.52 53 HTML_IMAGE_RATIO_04 28374 5.15 4.44 5.44 54 TR_XM_DKIM_Undo 28128 14.51 36.30 5.40 55 TR_XM_UnparsRelay 27250 5.90 7.51 5.23 56 RCVD_IN_IADB_SPF 26321 4.10 1.84 5.05 57 XM_B_SpammyWords3 26284 7.50 13.37 5.04 58 MPART_ALT_DIFF 25620 5.82 7.99 4.91 59 XMStrtUSub 25364 4.79 4.62 4.87 60 RELAYCOUNTRY_META 25246 10.02 22.40 4.84 61 BAYES_40 24882 4.01 2.17 4.77 62 BAYES_80 24063 5.81 8.66 4.62 63 HTML_IMAGE_RATIO_06 24013 4.52 4.31 4.61 64 RCVD_IN_IADB_SENDERID 23530 3.69 1.73 4.51 65 BAYES_999 23523 11.96 29.76 4.51 66 BOTNET_IPINHOSTNAME 23251 7.06 13.29 4.46 67 RCVD_IN_IADB_DK 22803 3.60 1.74 4.37 68 T_TooManySym_01 22601 3.77 2.41 4.34 69 TR_XM_DK_SendGrid 21945 4.01 3.55 4.21 70 XM_PDF 21802 3.20 0.86 4.18 71 XM_B_Phish_Phrases 21346 5.14 7.64 4.09 72 TR_XM_SpammyWords4 19711 5.79 10.58 3.78 73 XMSexyCombo_05 19551 4.95 7.81 3.75 74 RCVD_IN_IADB_VOUCHED 19037 2.82 0.84 3.65 75 BAYES_20 18911 3.01 1.55 3.63 76 T_REMOTE_IMAGE 18216 4.38 6.50 3.49 77 BAYES_95 17400 3.90 5.23 3.34 78 MIME_HTML_ONLY_MULTI 17004 2.97 2.28 3.26 79 XMNumbers 16540 3.40 3.94 3.17 80 DKIM_INVALID 16188 3.34 3.91 3.11 81 XM_UncommonTLD01 16138 5.10 9.89 3.10 82 XMSubMetaSx_00 16062 3.66 5.04 3.08 83 FROM_EXCESS_BASE64 15654 2.67 1.88 3.00 84 XM_H_Trusted_IP 15443 2.09 0.00 2.96 85 XM_B_SpammyTLD 15398 3.70 5.50 2.95 86 URI_NOVOWEL 15378 2.45 1.24 2.95 87 TR_XM_PhishingBody 14913 3.71 5.75 2.86 88 MAILING_LIST_MULTI 13796 2.23 1.23 2.65 89 TM2_M_URI_OPT_OUT 12738 2.71 3.36 2.44 90 HTML_IMAGE_RATIO_08 12707 3.54 6.16 2.44 91 RCVD_IN_IADB_OPTIN 12664 1.89 0.59 2.43 92 XMDiploma_00 12503 2.53 2.85 2.40 93 XM_B_Unsub2 12332 2.40 2.49 2.37 94 RCVD_IN_MSPIKE_H5 12233 1.89 0.81 2.35 95 BAYES_05 11643 1.82 0.83 2.23 96 TR_DCC_Bayes_99 11546 9.91 28.30 2.21 97 MIME_HTML_MOSTLY 11263 3.36 6.23 2.16 98 TooManyTo_002 10972 1.68 0.65 2.10 99 TR_XM_SB_Phish 10918 2.31 2.82 2.09 100 XMSubPhish11 10764 2.25 2.71 2.06 101 UNTRUSTED_Relay 10513 6.21 16.22 2.02 102 T_TooManySym_02 10442 1.60 0.64 2.00 103 XM_CamelCaseFrm001 9926 1.99 2.20 1.90 104 BOTNET 9814 5.88 15.45 1.88 105 XMSubNoVowel 9489 1.91 2.12 1.82 106 KHOP_HELO_FCRDNS 9359 2.90 5.53 1.80 107 HTML_MIME_NO_HTML_TAG 9320 1.71 1.54 1.79 108 XM_B_Phish66 8948 2.11 3.04 1.72 109 XM_SPF_SoftFail 8824 2.51 4.47 1.69 110 T_XMDrugObfuBody_14 8775 1.87 2.30 1.68 111 XM_DK_Undo_01 8768 2.11 3.12 1.68 112 HELO_NODOT 8749 1.43 0.85 1.68 113 HELO_NO_DOMAIN 8748 1.43 0.84 1.68 114 T_FONT_INVIS_NAKED_TO 8357 2.29 3.93 1.60 115 ANY_BOUNCE_MESSAGE 8340 1.27 0.48 1.60 116 BOUNCE_MESSAGE 8331 1.27 0.48 1.60 117 TR_XM_SpammyWords5 8120 2.28 4.02 1.56 118 SUBJ_ALL_CAPS 7922 1.82 2.52 1.52 119 IN_HORDE_ADDRESS_BOOK 7798 1.11 0.18 1.50 120 PDS_OTHER_BAD_TLD 7791 2.20 3.88 1.49 121 TVD_RCVD_IP 7774 1.17 0.38 1.49 122 T_XMDrugObfuBody_08 7741 1.93 2.98 1.48 123 TooManyTo_003 7411 1.16 0.53 1.42 124 XMGenDplmaNmb 7293 1.58 2.01 1.40 125 URI_TRY_3LD 7279 1.56 1.94 1.40 126 INVALID_MSGID 7160 1.11 0.48 1.37 127 RELAYCOUNTRY_CA 7122 2.79 6.20 1.37 128 TR_Symld_Words 7099 1.63 2.28 1.36 129 URI_HEX 6894 1.97 3.53 1.32 130 TO_MALFORMED 6622 0.93 0.12 1.27 131 XM_H_Long_From02 6533 1.19 1.04 1.25 132 XMCapTrack 6516 1.01 0.42 1.25 133 MSGID_NOFQDN1 6470 0.90 0.07 1.24 134 TM2_M_VERY_LONG_WORD 6201 1.52 2.31 1.19 135 XM_ProductURIs 6074 1.15 1.10 1.17 136 XMStockSpam_06 5994 1.25 1.49 1.15 137 RCVD_IN_BL_SPAMCOP_NET 5949 3.53 9.24 1.14 138 XM_GoogleGroups 5868 0.93 0.45 1.13 139 HELO_MISC_IP 5734 0.92 0.48 1.10 140 CK_HELO_DYNAMIC_SPLIT_IP 5734 0.90 0.41 1.10 141 DKIM_ADSP_CUSTOM_MED 5688 1.11 1.15 1.09 142 USER_IN_DEF_DKIM_WL 5619 0.76 0.01 1.08 143 XM_UB50 5548 2.27 5.14 1.06 144 TR_MSPIKEBAYES00 5460 0.74 0.01 1.05 145 TR_XM_SpammyWords2 5312 4.82 13.90 1.02 146 TooManyTo_004 5268 0.84 0.45 1.01 147 XMBSHREFv2 5251 0.83 0.39 1.01 148 T_FILL_THIS_FORM_SHORT 5232 1.50 2.70 1.00 149 XMGappySubj_01 5225 0.76 0.17 1.00 150 HTML_FONT_FACE_BAD 4969 0.84 0.57 0.95 151 RELAYCOUNTRY_GB 4915 0.98 1.06 0.94 152 XM_OfRef6 4712 2.06 4.83 0.90 153 XM_Superlative01 4634 0.83 0.69 0.89 154 XMSubEmpty 4458 0.84 0.82 0.86 155 SpammyFromTLD_01 4434 1.62 3.47 0.85 156 TooManyTo_005 4384 0.71 0.39 0.84 157 XM_B_SpammyWords4 4337 1.28 2.37 0.83 158 FROM_GOV_DKIM_AU 4301 0.71 0.42 0.83 159 HTTPS_HTTP_MISMATCH 4226 0.93 1.21 0.81 160 XMBrknScrpt_02 4189 1.47 3.05 0.80 161 XMBody_95 4116 0.59 0.11 0.79 162 XMHTML_After_End 3956 0.86 1.09 0.76 163 T_XMDrugObfuBody_00 3953 1.04 1.72 0.76 164 NML_ADSP_CUSTOM_MED 3893 0.83 1.04 0.75 165 XMMoneyMeta_00 3717 0.97 1.58 0.71 166 XM_B_COVIDMETA 3672 1.49 3.37 0.70 167 XMBdyGiftCard01 3533 1.07 2.01 0.68 168 FORGED_GMAIL_RCVD 3482 0.98 1.73 0.67 169 T_OBFU_PDF_ATTACH 3440 0.51 0.14 0.66 170 T_Symld_Words_02 3302 0.95 1.71 0.63 171 SHORTENED_URL_HREF 3111 0.63 0.70 0.60 172 T_XMHurry_00 3076 0.90 1.65 0.59 173 XMSubMetaI_00 3051 0.78 1.24 0.59 174 XM_SPF_Unknown 3045 0.60 0.64 0.58 175 T_TooManySym_03 3010 0.45 0.16 0.58 176 XM_ShortIntro_01 2942 0.53 0.43 0.56 177 TR_MetaPhish_Combo_01 2897 0.70 1.06 0.56 178 RCVD_IN_SORBS_DUL 2711 0.46 0.30 0.52 179 XMNoVowels 2700 0.51 0.48 0.52 180 SHORT_HELO_AND_INLINE_IMAGE 2678 0.39 0.08 0.51 181 HTML_IMAGE_ONLY_20 2647 0.48 0.40 0.51 182 XM_H_PHPMailer 2633 0.50 0.49 0.51 183 XMOemUri 2618 0.43 0.25 0.50 184 XMBody_17 2569 0.78 1.46 0.49 185 XMBody_78 2487 0.66 1.09 0.48 186 XMLngstWrd_00 2440 0.43 0.35 0.47 187 XMSexyCombo_01 2413 0.78 1.53 0.46 188 RDNS_DYNAMIC 2365 0.65 1.11 0.45 189 XMHTMLBadTable_001 2349 0.49 0.57 0.45 190 TM2_M_BODY_EMPTY 2324 0.33 0.05 0.45 191 TVD_SPACE_RATIO 2320 0.65 1.14 0.45 192 RCVD_IN_MSPIKE_BL 2310 2.14 6.20 0.44 193 TR_BOTNET_NEGATE 2307 0.51 0.69 0.44 194 HTML_IMAGE_ONLY_32 2268 0.37 0.21 0.44 195 XMPhish14 2247 0.50 0.68 0.43 196 TR_XM_MSPIKECOMBO 2245 2.12 6.14 0.43 197 XMLngstWrd_01 2190 0.39 0.32 0.42 198 RELAYCOUNTRY_DE 2160 0.57 0.96 0.41 199 MISSING_HEADERS 2157 0.43 0.45 0.41 200 XM_DIRTYINTL 2063 0.98 2.39 0.40 ----------------------------------------------------------------------