Email: 737272 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 1.36 sec Spam: 216647 Autolearn: 0 AvgScore: 13.50 AvgScanTime: 1.58 sec Ham: 520625 Autolearn: 0 AvgScore: -1.67 AvgScanTime: 1.26 sec Time Spent Running SA: 277.91 hours Time Spent Processing Spam: 95.23 hours Time Spent Processing Ham: 182.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 209527 88.32 96.71 84.82 2 DKIM_SIGNED 189344 81.74 87.40 79.38 3 XM_DK_Pass 184671 80.27 85.24 78.20 4 DKIM_VALID 180969 78.24 83.53 76.03 5 DCC_CHECK 173474 55.15 80.07 44.78 6 XM_B_Unicode 171793 71.85 79.30 68.75 7 RELAYCOUNTRY_US 168444 83.05 77.75 85.25 8 XMListUnsubscribeExists 157508 56.06 72.70 49.14 9 XM_B_SpammyWords 156466 56.95 72.22 50.60 10 DKIM_VALID_AU 140493 60.98 64.85 59.37 11 XM_DK_Undo_02 103359 19.25 47.71 7.40 12 XM_B_SpammyWords2 94567 26.67 43.65 19.60 13 XM_B_Unicode3 94256 41.04 43.51 40.02 14 TR_XM_DKIM_Undo 89434 15.84 41.28 5.26 15 LOC_TINY_FONT_1 84069 28.28 38.80 23.90 16 BAYES_50 81763 49.87 37.74 54.92 17 BAYES_99 77706 13.82 35.87 4.64 18 HTML_FONT_LOW_CONTRAST 75178 29.46 34.70 27.27 19 MIME_HTML_ONLY 71066 23.41 32.80 19.50 20 RCVD_IN_MSPIKE_H2 66472 28.44 30.68 27.51 21 DKIM_VALID_EF 64067 32.16 29.57 33.23 22 FVGT_m_MULTI_ODD 64017 24.48 29.55 22.37 23 TR_DCC_Bayes_99 63058 10.43 29.11 2.66 24 BAYES_999 62447 11.02 28.82 3.61 25 T_KAM_HTML_FONT_INVALID 57921 20.05 26.74 17.27 26 XMSubLong 56009 21.86 25.85 20.20 27 RCVD_IN_MSPIKE_WL 53152 31.42 24.53 34.29 28 T_TM2_M_HEADER_IN_MSG 48885 26.86 22.56 28.65 29 RELAYCOUNTRY_META 46579 9.88 21.50 5.05 30 XM_Body_Dirty_Words 46384 14.70 21.41 11.90 31 DCC_CHECK_NEGATIVE 38832 42.83 17.92 53.19 32 XM_B_SpammyWords3 35303 8.04 16.30 4.61 33 TR_XM_SpammyWords2 33521 4.99 15.47 0.63 34 LOTS_OF_MONEY 32350 8.77 14.93 6.20 35 XM_Multi_Part_URI 30876 12.58 14.25 11.88 36 BOTNET 29838 5.55 13.77 2.13 37 TR_XM_SpammyWords4 29302 6.89 13.53 4.12 38 RCVD_IN_MSPIKE_H3 29142 14.72 13.45 15.25 39 UNTRUSTED_Relay 28887 5.19 13.33 1.80 40 BOTNET_IPINHOSTNAME 28240 6.99 13.04 4.48 41 XM_UncommonTLD01 26747 5.82 12.35 3.11 42 XMSexyCombo_05 24359 6.04 11.24 3.87 43 XM_B_Unsub 23823 9.66 11.00 9.10 44 FSL_BULK_SIG 23580 6.65 10.88 4.88 45 XM_Evil_Numbers_Gen 22809 9.50 10.53 9.08 46 RCVD_IN_MSPIKE_H4 22265 12.14 10.28 12.92 47 HTML_IMAGE_RATIO_02 21105 8.16 9.74 7.50 48 XM_B_Phish_Phrases 20255 9.86 9.35 10.07 49 LotsOfNums_01 19275 8.78 8.90 8.73 50 RCVD_IN_BL_SPAMCOP_NET 19178 3.18 8.85 0.81 51 MPART_ALT_DIFF 19147 5.56 8.84 4.19 52 UNPARSEABLE_RELAY 18072 8.19 8.34 8.12 53 TR_XM_UnparsRelay 17553 6.68 8.10 6.09 54 XM_H_Long_From01 16469 6.19 7.60 5.61 55 BAYES_80 16426 5.49 7.58 4.62 56 BAYES_60 15763 7.94 7.28 8.22 57 RELAYCOUNTRY_CA 15477 3.16 7.14 1.51 58 TR_XM_SpammyWords5 14778 3.15 6.82 1.63 59 XM_SendGrid 13994 7.04 6.46 7.28 60 TR_XM_PhishingBody 13755 3.89 6.35 2.86 61 MIME_HTML_MOSTLY 13040 3.36 6.02 2.26 62 TooManyTo_001 12920 7.53 5.96 8.18 63 SpammyFromTLD_02 12577 1.85 5.81 0.20 64 XMSubMetaSx_00 12214 3.92 5.64 3.21 65 T_REMOTE_IMAGE 12108 4.19 5.59 3.61 66 URIBL_SBL_A 11992 2.97 5.54 1.91 67 HTML_IMAGE_RATIO_04 11811 5.54 5.45 5.57 68 XMNumbers 11398 3.54 5.26 2.83 69 RCVD_IN_RP_SAFE 11351 7.93 5.24 9.05 70 KHOP_HELO_FCRDNS 11255 2.99 5.20 2.07 71 XM_UB50 11133 2.27 5.14 1.07 72 XM_DK_Undo_01 10467 2.45 4.83 1.45 73 XM_OfRef6 10161 1.97 4.69 0.83 74 BAYES_95 9240 3.24 4.27 2.81 75 TR_LOTS_OF_MONEY3 9037 1.68 4.17 0.64 76 XMDiploma_00 8906 2.81 4.11 2.27 77 SUBJ_ALL_CAPS 8776 2.32 4.05 1.60 78 TM2_M_URI_OPT_OUT 8642 2.66 3.99 2.11 79 RCVD_IN_RP_CERTIFIED 8581 7.15 3.96 8.47 80 DKIM_INVALID 8375 3.50 3.87 3.35 81 HTML_IMAGE_ONLY_12 8264 1.28 3.81 0.23 82 XMStrtUSub 8087 8.73 3.73 10.81 83 SpammyFromTLD_01 8012 1.59 3.70 0.71 84 BODY_URI_ONLY 7875 1.08 3.63 0.02 85 TR_XM_DK_SendGrid 7845 4.33 3.62 4.63 86 HTML_IMAGE_RATIO_08 7755 2.69 3.58 2.32 87 XM_B_SpammyTLD 7714 2.44 3.56 1.97 88 HTML_SHORT_LINK_IMG_1 7687 1.06 3.55 0.03 89 XMBody_17 7498 1.43 3.46 0.59 90 MIME_HTML_ONLY_MULTI 7378 2.89 3.41 2.67 91 XM_SPF_SoftFail 7246 2.42 3.34 2.03 92 T_FILL_THIS_FORM_SHORT 7084 1.51 3.27 0.77 93 RELAYCOUNTRY_IN 7078 1.03 3.27 0.11 94 RCVD_IN_MSPIKE_BL 7004 1.06 3.23 0.15 95 HTML_IMAGE_RATIO_06 6964 3.14 3.21 3.10 96 XM_B_SpammyWords4 6733 1.35 3.11 0.62 97 XM_DIRTYINTL 6641 1.26 3.07 0.52 98 TR_XM_MSPIKECOMBO 6633 1.00 3.06 0.14 99 T_XMDrugObfuBody_08 6492 2.07 3.00 1.68 100 URI_HEX 6395 1.87 2.95 1.42 101 XM_B_Phish66 6385 2.06 2.95 1.69 102 RELAYCOUNTRY_FR 6315 1.03 2.91 0.25 103 MIME_QP_LONG_LINE 6284 4.70 2.90 5.45 104 FROM_EXCESS_BASE64 6144 2.93 2.84 2.97 105 FORGED_GMAIL_RCVD 5935 1.17 2.74 0.52 106 T_TooManySym_01 5931 3.91 2.74 4.40 107 URIBL_DBL_SPAM 5816 0.79 2.68 0.01 108 XMBrknScrpt_02 5583 1.16 2.58 0.57 109 XMBdyGiftCard01 5554 1.36 2.56 0.85 110 XM_B_COVIDMETA 5527 1.33 2.55 0.83 111 RCVD_IN_RP_RNBL 5467 0.79 2.52 0.06 112 XM_B_Unsub2 5366 1.89 2.48 1.64 113 TR_XM_MaxBayes 5343 0.75 2.47 0.04 114 XM_CamelCaseFrm001 5301 2.01 2.45 1.82 115 BAYES_40 4935 4.27 2.28 5.10 116 XM_UB99 4908 0.67 2.27 0.00 117 T_XMHurry_00 4864 1.25 2.25 0.83 118 HTML_FONT_SIZE_LARGE 4831 0.75 2.23 0.13 119 TM2_M_VERY_LONG_WORD 4800 1.57 2.22 1.29 120 XMStockSpam_06 4692 1.55 2.17 1.29 121 XMGenDplmaNmb 4648 1.30 2.15 0.95 122 URI_NOVOWEL 4572 2.58 2.11 2.78 123 RCVD_IN_PSBL 4559 0.69 2.10 0.10 124 GOOGLE_DOC_SUSP 4537 0.62 2.09 0.01 125 BAYES_20 4361 3.24 2.01 3.75 126 T_XMDrugObfuBody_14 4359 2.02 2.01 2.02 127 RCVD_IN_MSPIKE_L5 4271 0.64 1.97 0.08 128 BAYES_00 4252 10.20 1.96 13.62 129 TR_XM_FormFill 4238 0.62 1.96 0.06 130 TR_XM_SB_Phish 4178 1.97 1.93 1.99 131 TR_XM_BayesRelay 4045 0.56 1.87 0.02 132 XM_URI_RBL 4031 0.66 1.86 0.16 133 XM_UB60 4017 0.62 1.85 0.11 134 RCVD_IN_IADB_LISTED 3936 4.07 1.82 5.01 135 XMSubPhish11 3926 1.92 1.81 1.96 136 BOTNET_NORDNS 3900 0.54 1.80 0.01 137 URI_TRY_3LD 3764 1.44 1.74 1.32 138 HK_RANDOM_REPLYTO 3719 0.62 1.72 0.16 139 XMSexyCombo_01 3708 1.03 1.71 0.75 140 XM_UB999 3575 0.49 1.65 0.00 141 TR_XM_PHPDW 3541 0.77 1.63 0.41 142 RCVD_IN_IADB_SPF 3527 3.55 1.63 4.35 143 TR_XM_PHPForged 3463 0.72 1.60 0.35 144 XMHTML_After_End 3434 1.22 1.59 1.06 145 TR_XM_FormFill2 3432 0.72 1.58 0.35 146 XM_H_PHPOS 3425 0.71 1.58 0.35 147 RCVD_IN_IADB_DK 3369 3.10 1.56 3.75 148 RCVD_IN_IADB_SENDERID 3327 3.19 1.54 3.87 149 XMSubMetaI_00 3211 0.89 1.48 0.65 150 MAILING_LIST_MULTI 3167 2.30 1.46 2.65 151 TR_Symld_Words 3117 1.38 1.44 1.36 152 T_XMDrugObfuBody_00 3110 0.95 1.44 0.75 153 TR_Sbj_FN_Bdy 3101 0.52 1.43 0.14 154 TR_XM_SpammyWords3 3082 0.48 1.42 0.09 155 HTML_MIME_NO_HTML_TAG 3056 1.70 1.41 1.82 156 XM_OfRef7 2929 0.49 1.35 0.13 157 TR_XM_INV_DKIM 2753 0.49 1.27 0.17 158 PDS_OTHER_BAD_TLD 2732 0.84 1.26 0.67 159 XM_UB80 2728 0.39 1.26 0.03 160 HTTPS_HTTP_MISMATCH 2725 0.93 1.26 0.79 161 XMPhish08 2725 0.49 1.26 0.17 162 URI_PHP_REDIR 2724 0.37 1.26 0.00 163 URIBL_BLACK 2670 0.39 1.23 0.03 164 TR_XM_COVIDMETA1 2597 0.56 1.20 0.30 165 XM_H_Long_From02 2590 0.98 1.20 0.89 166 TR_XM_COVIDMETA4 2525 0.60 1.17 0.37 167 DIET_1 2456 0.57 1.13 0.34 168 RELAYCOUNTRY_GB 2320 0.99 1.07 0.95 169 XM_Body_Dirty_Words_01 2226 0.46 1.03 0.22 170 ALL_TRUSTED 2223 8.24 1.03 11.24 171 BAYES_05 2187 1.93 1.01 2.31 172 RDNS_DYNAMIC 2111 0.64 0.97 0.50 173 TR_BOTNET_NEGATE 2104 0.56 0.97 0.39 174 XMPhish30 2083 0.55 0.96 0.37 175 DKIM_ADSP_CUSTOM_MED 1990 0.94 0.92 0.95 176 XM_ProductURIs 1984 1.07 0.92 1.13 177 HK_SCAM 1959 0.27 0.90 0.01 178 XMPhish14 1952 0.63 0.90 0.52 179 XM_S_SpammyWords 1944 0.68 0.90 0.59 180 TR_XM_Spammywords 1944 0.68 0.90 0.59 181 HTML_TAG_BALANCE_BODY 1931 0.52 0.89 0.37 182 NUMERIC_HTTP_ADDR 1907 0.45 0.88 0.26 183 TR_Caps_n_Bayes_99 1880 0.33 0.87 0.11 184 URG_BIZ 1860 0.30 0.86 0.07 185 TR_Mismatch_TLD_02 1836 0.32 0.85 0.10 186 TR_XM_RelayPhish 1833 0.31 0.85 0.08 187 XMBody_78 1747 0.55 0.81 0.44 188 RCVD_IN_MSPIKE_H5 1745 4.56 0.81 6.12 189 NA_DOLLARS 1742 0.24 0.80 0.00 190 XM_TLDProd2 1742 0.39 0.80 0.21 191 TooManyTo_002 1741 1.79 0.80 2.20 192 XM_PDF 1726 3.13 0.80 4.10 193 T_TooManySym_02 1689 1.85 0.78 2.29 194 T_MONEY_PERCENT 1676 0.36 0.77 0.19 195 TR_LOTS_OF_MONEY2 1676 0.36 0.77 0.19 196 XMSubMetaSxObfu_03 1672 0.47 0.77 0.34 197 XMReplyNow 1662 0.29 0.77 0.09 198 XM_BadFromFormat 1655 0.36 0.76 0.20 199 MPART_ALT_DIFF_COUNT 1631 0.45 0.75 0.33 200 T_Symld_Words_02 1619 0.56 0.75 0.48 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 443840 83.05 77.75 85.25 2 HTML_MESSAGE 441605 88.32 96.71 84.82 3 DKIM_SIGNED 413278 81.74 87.40 79.38 4 XM_DK_Pass 407145 80.27 85.24 78.20 5 DKIM_VALID 395855 78.24 83.53 76.03 6 XM_B_Unicode 357905 71.85 79.30 68.75 7 DKIM_VALID_AU 309077 60.98 64.85 59.37 8 BAYES_50 285936 49.87 37.74 54.92 9 DCC_CHECK_NEGATIVE 276929 42.83 17.92 53.19 10 XM_B_SpammyWords 263413 56.95 72.22 50.60 11 XMListUnsubscribeExists 255810 56.06 72.70 49.14 12 DCC_CHECK 233126 55.15 80.07 44.78 13 XM_B_Unicode3 208339 41.04 43.51 40.02 14 RCVD_IN_MSPIKE_WL 178508 31.42 24.53 34.29 15 DKIM_VALID_EF 173026 32.16 29.57 33.23 16 T_TM2_M_HEADER_IN_MSG 149141 26.86 22.56 28.65 17 RCVD_IN_MSPIKE_H2 143215 28.44 30.68 27.51 18 HTML_FONT_LOW_CONTRAST 141986 29.46 34.70 27.27 19 LOC_TINY_FONT_1 124440 28.28 38.80 23.90 20 FVGT_m_MULTI_ODD 116443 24.48 29.55 22.37 21 XMSubLong 105144 21.86 25.85 20.20 22 XM_B_SpammyWords2 102050 26.67 43.65 19.60 23 MIME_HTML_ONLY 101534 23.41 32.80 19.50 24 T_KAM_HTML_FONT_INVALID 89936 20.05 26.74 17.27 25 RCVD_IN_MSPIKE_H3 79402 14.72 13.45 15.25 26 XM_DKIMWhitelistDomains 76811 10.44 0.07 14.75 27 BAYES_00 70923 10.20 1.96 13.62 28 RCVD_IN_MSPIKE_H4 67263 12.14 10.28 12.92 29 XM_Body_Dirty_Words 61959 14.70 21.41 11.90 30 XM_Multi_Part_URI 61872 12.58 14.25 11.88 31 ALL_TRUSTED 58514 8.24 1.03 11.24 32 XMStrtUSub 56278 8.73 3.73 10.81 33 XM_B_Phish_Phrases 52424 9.86 9.35 10.07 34 TR_XM_DK_Bayes 49093 6.87 0.72 9.43 35 XM_B_Unsub 47366 9.66 11.00 9.10 36 XM_Evil_Numbers_Gen 47249 9.50 10.53 9.08 37 RCVD_IN_RP_SAFE 47096 7.93 5.24 9.05 38 TR_XM_DK_Bayes1 47001 6.58 0.68 9.03 39 LotsOfNums_01 45459 8.78 8.90 8.73 40 RCVD_IN_RP_CERTIFIED 44117 7.15 3.96 8.47 41 BAYES_60 42810 7.94 7.28 8.22 42 TooManyTo_001 42570 7.53 5.96 8.18 43 UNPARSEABLE_RELAY 42296 8.19 8.34 8.12 44 TR_XM_DK_Bayes2 40001 5.60 0.60 7.68 45 HTML_IMAGE_RATIO_02 39039 8.16 9.74 7.50 46 XM_DK_Undo_02 38545 19.25 47.71 7.40 47 XM_SendGrid 37892 7.04 6.46 7.28 48 LOTS_OF_MONEY 32280 8.77 14.93 6.20 49 RCVD_IN_MSPIKE_H5 31843 4.56 0.81 6.12 50 TR_XM_UnparsRelay 31701 6.68 8.10 6.09 51 XM_H_Long_From01 29189 6.19 7.60 5.61 52 HTML_IMAGE_RATIO_04 29002 5.54 5.45 5.57 53 MIME_QP_LONG_LINE 28359 4.70 2.90 5.45 54 IN_ZIMBRA_NJ_WHITELIST 28199 3.84 0.06 5.42 55 TR_XM_DKIM_Undo 27382 15.84 41.28 5.26 56 BAYES_40 26546 4.27 2.28 5.10 57 RELAYCOUNTRY_META 26285 9.88 21.50 5.05 58 RCVD_IN_IADB_LISTED 26091 4.07 1.82 5.01 59 FSL_BULK_SIG 25425 6.65 10.88 4.88 60 BAYES_99 24149 13.82 35.87 4.64 61 TR_XM_DK_SendGrid 24100 4.33 3.62 4.63 62 BAYES_80 24078 5.49 7.58 4.62 63 XM_B_SpammyWords3 23993 8.04 16.30 4.61 64 BOTNET_IPINHOSTNAME 23324 6.99 13.04 4.48 65 T_TooManySym_01 22896 3.91 2.74 4.40 66 RCVD_IN_IADB_SPF 22651 3.55 1.63 4.35 67 MPART_ALT_DIFF 21828 5.56 8.84 4.19 68 TR_XM_SpammyWords4 21475 6.89 13.53 4.12 69 XM_PDF 21355 3.13 0.80 4.10 70 RCVD_IN_IADB_SENDERID 20171 3.19 1.54 3.87 71 XMSexyCombo_05 20142 6.04 11.24 3.87 72 RCVD_IN_IADB_DK 19520 3.10 1.56 3.75 73 BAYES_20 19503 3.24 2.01 3.75 74 BAYES_999 18785 11.02 28.82 3.61 75 T_REMOTE_IMAGE 18775 4.19 5.59 3.61 76 DKIM_INVALID 17423 3.50 3.87 3.35 77 XMSubMetaSx_00 16714 3.92 5.64 3.21 78 RCVD_IN_IADB_VOUCHED 16219 2.41 0.72 3.12 79 XM_UncommonTLD01 16168 5.82 12.35 3.11 80 HTML_IMAGE_RATIO_06 16162 3.14 3.21 3.10 81 FROM_EXCESS_BASE64 15450 2.93 2.84 2.97 82 TR_XM_PhishingBody 14908 3.89 6.35 2.86 83 XMNumbers 14721 3.54 5.26 2.83 84 BAYES_95 14613 3.24 4.27 2.81 85 URI_NOVOWEL 14473 2.58 2.11 2.78 86 MIME_HTML_ONLY_MULTI 13917 2.89 3.41 2.67 87 TR_DCC_Bayes_99 13847 10.43 29.11 2.66 88 MAILING_LIST_MULTI 13781 2.30 1.46 2.65 89 XM_H_Trusted_IP 12798 1.74 0.00 2.46 90 HTML_IMAGE_RATIO_08 12070 2.69 3.58 2.32 91 BAYES_05 12052 1.93 1.01 2.31 92 T_TooManySym_02 11944 1.85 0.78 2.29 93 XMDiploma_00 11840 2.81 4.11 2.27 94 MIME_HTML_MOSTLY 11741 3.36 6.02 2.26 95 TooManyTo_002 11437 1.79 0.80 2.20 96 BOTNET 11090 5.55 13.77 2.13 97 TM2_M_URI_OPT_OUT 11005 2.66 3.99 2.11 98 KHOP_HELO_FCRDNS 10762 2.99 5.20 2.07 99 XM_SPF_SoftFail 10577 2.42 3.34 2.03 100 T_XMDrugObfuBody_14 10542 2.02 2.01 2.02 101 RCVD_IN_IADB_OPTIN 10456 1.55 0.46 2.01 102 TR_XM_SB_Phish 10337 1.97 1.93 1.99 103 XM_B_SpammyTLD 10269 2.44 3.56 1.97 104 XMSubPhish11 10226 1.92 1.81 1.96 105 URIBL_SBL_A 9935 2.97 5.54 1.91 106 XM_CamelCaseFrm001 9489 2.01 2.45 1.82 107 TVD_RCVD_IP 9466 1.34 0.19 1.82 108 HTML_MIME_NO_HTML_TAG 9461 1.70 1.41 1.82 109 UNTRUSTED_Relay 9393 5.19 13.33 1.80 110 ANY_BOUNCE_MESSAGE 9182 1.40 0.52 1.76 111 BOUNCE_MESSAGE 9182 1.40 0.52 1.76 112 HELO_NO_DOMAIN 8938 1.35 0.46 1.72 113 HELO_NODOT 8938 1.35 0.46 1.72 114 XM_B_Phish66 8818 2.06 2.95 1.69 115 T_XMDrugObfuBody_08 8745 2.07 3.00 1.68 116 XM_B_Unsub2 8564 1.89 2.48 1.64 117 TR_XM_SpammyWords5 8465 3.15 6.82 1.63 118 SUBJ_ALL_CAPS 8329 2.32 4.05 1.60 119 IN_HORDE_ADDRESS_BOOK 7868 1.09 0.06 1.51 120 RELAYCOUNTRY_CA 7845 3.16 7.14 1.51 121 TooManyTo_003 7750 1.26 0.70 1.49 122 XM_DK_Undo_01 7562 2.45 4.83 1.45 123 INVALID_MSGID 7507 1.12 0.34 1.44 124 URI_HEX 7410 1.87 2.95 1.42 125 TR_Symld_Words 7075 1.38 1.44 1.36 126 URI_TRY_3LD 6879 1.44 1.74 1.32 127 TM2_M_VERY_LONG_WORD 6742 1.57 2.22 1.29 128 XMStockSpam_06 6741 1.55 2.17 1.29 129 HELO_MISC_IP 6486 1.01 0.46 1.25 130 MSGID_NOFQDN1 6478 0.89 0.03 1.24 131 USER_IN_DEF_DKIM_WL 6458 0.88 0.00 1.24 132 TO_MALFORMED 6373 0.87 0.00 1.22 133 XMCapTrack 6323 0.97 0.38 1.21 134 XM_ProductURIs 5868 1.07 0.92 1.13 135 TooManyTo_004 5743 0.96 0.63 1.10 136 XM_GoogleGroups 5622 0.92 0.53 1.08 137 XM_UB50 5596 2.27 5.14 1.07 138 XMHTML_After_End 5530 1.22 1.59 1.06 139 XM_RXBody 5316 0.82 0.33 1.02 140 XMBody_95 5274 0.75 0.11 1.01 141 XMSubNoVowel 5245 0.87 0.53 1.01 142 DKIM_ADSP_CUSTOM_MED 4957 0.94 0.92 0.95 143 RELAYCOUNTRY_GB 4956 0.99 1.07 0.95 144 XMGenDplmaNmb 4927 1.30 2.15 0.95 145 XMBSHREFv2 4903 0.73 0.23 0.94 146 TR_MSPIKEBAYES00 4892 0.67 0.03 0.94 147 TooManyTo_005 4805 0.82 0.56 0.92 148 HTML_FONT_FACE_BAD 4720 0.82 0.61 0.91 149 XM_H_Long_From02 4645 0.98 1.20 0.89 150 XMBdyGiftCard01 4441 1.36 2.56 0.85 151 T_XMHurry_00 4336 1.25 2.25 0.83 152 XM_OfRef6 4332 1.97 4.69 0.83 153 XM_B_COVIDMETA 4315 1.33 2.55 0.83 154 RCVD_IN_BL_SPAMCOP_NET 4234 3.18 8.85 0.81 155 FROM_GOV_DKIM_AU 4163 0.58 0.07 0.80 156 XMGappySubj_01 4148 0.66 0.34 0.80 157 HTTPS_HTTP_MISMATCH 4102 0.93 1.26 0.79 158 T_FILL_THIS_FORM_SHORT 4027 1.51 3.27 0.77 159 XMSexyCombo_01 3897 1.03 1.71 0.75 160 T_XMDrugObfuBody_00 3887 0.95 1.44 0.75 161 SpammyFromTLD_01 3710 1.59 3.70 0.71 162 PDS_OTHER_BAD_TLD 3489 0.84 1.26 0.67 163 TVD_SPACE_RATIO 3456 0.49 0.06 0.66 164 NML_ADSP_CUSTOM_MED 3395 0.66 0.67 0.65 165 XMSubMetaI_00 3382 0.89 1.48 0.65 166 TR_LOTS_OF_MONEY3 3356 1.68 4.17 0.64 167 TR_XM_SpammyWords2 3265 4.99 15.47 0.63 168 XM_E_Blogspot 3225 0.47 0.10 0.62 169 XM_B_SpammyWords4 3204 1.35 3.11 0.62 170 T_TooManySym_03 3144 0.50 0.26 0.60 171 XM_SPF_Unknown 3106 0.59 0.56 0.60 172 XMBody_17 3058 1.43 3.46 0.59 173 XM_S_SpammyWords 3055 0.68 0.90 0.59 174 TR_XM_Spammywords 3049 0.68 0.90 0.59 175 XMBrknScrpt_02 2952 1.16 2.58 0.57 176 HTML_IMAGE_ONLY_20 2882 0.49 0.33 0.55 177 RCVD_IN_SORBS_DUL 2796 0.43 0.16 0.54 178 XM_ShortIntro_01 2747 0.46 0.31 0.53 179 TR_MetaPhish_Combo_01 2745 0.54 0.59 0.53 180 FORGED_GMAIL_RCVD 2713 1.17 2.74 0.52 181 XMNoVowels 2700 0.48 0.40 0.52 182 XM_DIRTYINTL 2685 1.26 3.07 0.52 183 XMPhish14 2683 0.63 0.90 0.52 184 XM_H_PHPMailer 2657 0.50 0.49 0.51 185 XMSexyCombo_04 2645 0.57 0.71 0.51 186 XMSubMetaSSx_00 2643 0.50 0.47 0.51 187 SHORT_HELO_AND_INLINE_IMAGE 2605 0.37 0.05 0.50 188 RDNS_DYNAMIC 2603 0.64 0.97 0.50 189 XM_shorewaves_Whitelist 2596 0.35 0.00 0.50 190 T_Symld_Words_02 2521 0.56 0.75 0.48 191 T_OBFU_PDF_ATTACH 2463 0.37 0.14 0.47 192 RELAYCOUNTRY_DE 2411 0.50 0.59 0.46 193 TM2_M_BODY_EMPTY 2319 0.33 0.07 0.45 194 XMBody_78 2303 0.55 0.81 0.44 195 XMMoneyMeta_00 2299 0.48 0.58 0.44 196 MISSING_HEADERS 2296 0.42 0.38 0.44 197 FROM_GOV_SPOOF 2246 0.33 0.09 0.43 198 XMSubMetaSxObfu_04 2225 0.36 0.19 0.43 199 XMLngstWrd_00 2219 0.42 0.41 0.43 200 HTML_IMAGE_ONLY_28 2168 0.36 0.22 0.42 ----------------------------------------------------------------------