Email: 500926 Autolearn: 0 AvgScore: 2.75 AvgScanTime: 1.36 sec Spam: 130795 Autolearn: 0 AvgScore: 15.13 AvgScanTime: 1.59 sec Ham: 370131 Autolearn: 0 AvgScore: -1.62 AvgScanTime: 1.28 sec Time Spent Running SA: 188.81 hours Time Spent Processing Spam: 57.64 hours Time Spent Processing Ham: 131.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124674 89.20 95.32 87.04 2 DKIM_SIGNED 106282 75.07 81.26 72.88 3 DCC_CHECK 104512 49.58 79.91 38.86 4 XM_DK_Pass 100389 72.87 76.75 71.50 5 RELAYCOUNTRY_US 97698 79.22 74.70 80.82 6 DKIM_VALID 97266 70.65 74.37 69.34 7 XM_B_Unicode 96267 70.57 73.60 69.50 8 XM_B_SpammyWords 84527 49.57 64.63 44.25 9 XMListUnsubscribeExists 84158 51.32 64.34 46.72 10 DKIM_VALID_AU 72942 52.65 55.77 51.54 11 XM_DK_Undo_02 54433 16.28 41.62 7.33 12 BAYES_50 54239 51.91 41.47 55.60 13 XM_B_Unicode3 53615 39.66 40.99 39.19 14 XM_B_SpammyWords2 48028 22.62 36.72 17.64 15 LOC_TINY_FONT_1 43806 25.21 33.49 22.28 16 MIME_HTML_ONLY 42336 22.85 32.37 19.48 17 TR_XM_DKIM_Undo 41930 12.44 32.06 5.51 18 HTML_FONT_LOW_CONTRAST 41837 27.22 31.99 25.54 19 DKIM_VALID_EF 41015 28.74 31.36 27.82 20 T_KAM_HTML_FONT_INVALID 40064 21.48 30.63 18.25 21 BAYES_99 39915 11.93 30.52 5.36 22 FVGT_m_MULTI_ODD 35792 23.98 27.36 22.78 23 RCVD_IN_MSPIKE_H2 34375 25.48 26.28 25.20 24 XMSubLong 32443 22.20 24.80 21.28 25 TR_DCC_Bayes_99 31931 8.35 24.41 2.68 26 BAYES_999 30621 9.27 23.41 4.27 27 RELAYCOUNTRY_META 30382 9.48 23.23 4.62 28 T_TM2_M_HEADER_IN_MSG 27764 29.44 21.23 32.34 29 DCC_CHECK_NEGATIVE 26215 50.38 20.04 61.09 30 XM_UncommonTLD01 25774 7.89 19.71 3.71 31 RCVD_IN_MSPIKE_WL 25773 26.86 19.70 29.39 32 XM_Body_Dirty_Words 25489 13.39 19.49 11.23 33 BOTNET 24669 5.94 18.86 1.38 34 FSL_BULK_SIG 24269 10.10 18.55 7.11 35 UNTRUSTED_Relay 22957 5.73 17.55 1.56 36 XM_Multi_Part_URI 19883 12.08 15.20 10.98 37 XM_B_Unsub 19826 11.31 15.16 9.95 38 BOTNET_IPINHOSTNAME 17721 6.46 13.55 3.95 39 LOTS_OF_MONEY 17230 8.35 13.17 6.64 40 XM_B_SpammyWords3 16250 6.12 12.42 3.89 41 TR_XM_SpammyWords4 14503 5.98 11.09 4.17 42 TR_XM_SpammyWords2 14495 3.48 11.08 0.80 43 RCVD_IN_MSPIKE_H3 13837 14.20 10.58 15.48 44 XMSexyCombo_05 13554 5.00 10.36 3.10 45 UNPARSEABLE_RELAY 13394 8.57 10.24 7.99 46 MPART_ALT_DIFF 13344 6.38 10.20 5.02 47 SpammyFromTLD_02 13306 2.82 10.17 0.22 48 TR_XM_UnparsRelay 13057 6.98 9.98 5.92 49 T_REMOTE_IMAGE 12401 5.38 9.48 3.94 50 BAYES_80 11990 5.52 9.17 4.23 51 XM_Evil_Numbers_Gen 11953 8.47 9.14 8.23 52 BAYES_60 11724 8.70 8.96 8.60 53 HTML_MIME_NO_HTML_TAG 11688 3.95 8.94 2.19 54 MIME_HTML_MOSTLY 10790 3.95 8.25 2.43 55 RCVD_IN_MSPIKE_H4 10633 10.29 8.13 11.05 56 KHOP_HELO_FCRDNS 10407 3.55 7.96 1.99 57 HTML_IMAGE_ONLY_08 9857 2.06 7.54 0.13 58 XMSubMetaSx_00 9552 4.24 7.30 3.16 59 LotsOfNums_01 9320 8.83 7.13 9.43 60 HTML_IMAGE_RATIO_02 9289 5.84 7.10 5.39 61 XM_UB50 9272 2.60 7.09 1.01 62 XM_B_Phish_Phrases 9250 4.81 7.07 4.01 63 DKIM_INVALID 9016 4.42 6.89 3.54 64 SpammyFromTLD_01 8843 2.50 6.76 1.00 65 RCVD_IN_BL_SPAMCOP_NET 8722 2.24 6.67 0.67 66 XM_SendGrid 8468 6.42 6.47 6.41 67 URI_NOVOWEL 8338 3.60 6.37 2.62 68 TR_XM_PhishingBody 8098 4.09 6.19 3.34 69 XM_B_SpammyTLD 7815 2.92 5.97 1.83 70 HTML_FONT_SIZE_LARGE 7741 1.62 5.92 0.10 71 MIXED_CENTER_CASE 7639 1.53 5.84 0.00 72 MIXED_HREF_CASE 7636 1.52 5.84 0.00 73 BODY_URI_ONLY 7582 1.52 5.80 0.01 74 GOOG_STO_IMG_HTML 7571 1.51 5.79 0.00 75 MIXED_IMG_CASE 7563 1.51 5.78 0.00 76 MIXED_FONT_CASE 7563 1.51 5.78 0.00 77 MIXED_AREA_CASE 7559 1.51 5.78 0.00 78 XM_H_Long_From01 7418 5.40 5.67 5.30 79 RCVD_IN_MSPIKE_BL 7278 1.62 5.56 0.23 80 TR_XM_MSPIKECOMBO 6986 1.54 5.34 0.20 81 XMNumbers 6793 3.82 5.19 3.34 82 BAYES_95 6303 3.13 4.82 2.54 83 HTML_IMAGE_RATIO_04 6289 5.25 4.81 5.41 84 TooManyTo_001 6262 8.02 4.79 9.17 85 JH_SPAMMY_HEADERS 5940 1.19 4.54 0.00 86 RELAYCOUNTRY_CA 5831 1.91 4.46 1.00 87 XM_SPF_SoftFail 5655 2.91 4.32 2.41 88 HTML_TAG_BALANCE_CENTER 5597 1.16 4.28 0.05 89 MIXED_CTYPE_CASE 5444 1.09 4.16 0.00 90 T_HTML_TAG_BALANCE_CENTER 5206 1.08 3.98 0.06 91 RCVD_IN_MSPIKE_L5 5192 1.06 3.97 0.04 92 XMStrtUSub 5004 4.24 3.83 4.39 93 HTML_IMAGE_RATIO_06 4871 4.17 3.72 4.32 94 TR_XM_DK_SendGrid 4856 3.99 3.71 4.08 95 BOTNET_NORDNS 4798 0.97 3.67 0.02 96 PDS_OTHER_BAD_TLD 4760 1.17 3.64 0.30 97 TR_XM_SpammyWords3 4725 1.06 3.61 0.15 98 RELAYCOUNTRY_FR 4597 1.13 3.51 0.29 99 XM_B_Phish66 4577 2.38 3.50 1.98 100 MIME_QP_LONG_LINE 4465 5.20 3.41 5.83 101 TM2_M_URI_OPT_OUT 4413 3.10 3.37 3.00 102 XM_UB60 4267 0.94 3.26 0.12 103 HTML_IMAGE_RATIO_08 4201 2.65 3.21 2.45 104 RCVD_IN_RP_SAFE 3910 5.99 2.99 7.05 105 XM_DIRTYINTL 3871 1.13 2.96 0.48 106 XM_UB99 3818 0.77 2.92 0.01 107 TR_XM_SpammyWords5 3789 1.86 2.90 1.49 108 T_XMDrugObfuBody_08 3724 1.92 2.85 1.59 109 XM_OfRef6 3657 1.51 2.80 1.05 110 MIME_HTML_ONLY_MULTI 3626 3.21 2.77 3.36 111 URIBL_DBL_SPAM 3603 0.74 2.75 0.02 112 RELAYCOUNTRY_DE 3581 1.27 2.74 0.75 113 XM_B_COVIDMETA 3549 1.26 2.71 0.75 114 URI_PHP_REDIR 3503 0.71 2.68 0.01 115 TM2_M_VERY_LONG_WORD 3408 1.58 2.61 1.21 116 XMDiploma_00 3329 1.76 2.55 1.48 117 DIET_1 3297 0.89 2.52 0.32 118 RCVD_IN_IADB_LISTED 3284 4.82 2.51 5.64 119 TR_XM_SB_Phish 3281 2.44 2.51 2.42 120 URI_GOOG_STO_SPAMMY 3196 0.64 2.44 0.00 121 T_TooManySym_01 3186 4.58 2.44 5.33 122 XMSubPhish11 3156 2.40 2.41 2.40 123 XM_CamelCaseFrm001 3154 2.06 2.41 1.94 124 TR_XM_PHPDW 3039 0.91 2.32 0.42 125 TR_XM_COVIDMETA4 3018 0.89 2.31 0.39 126 T_XMDrugObfuBody_14 2994 2.14 2.29 2.09 127 RCVD_IN_RP_CERTIFIED 2977 5.29 2.28 6.35 128 XM_B_SpammyWords4 2953 0.93 2.26 0.46 129 XM_UB80 2952 0.62 2.26 0.04 130 XM_B_Unsub2 2907 1.98 2.22 1.89 131 RCVD_IN_IADB_SPF 2906 4.23 2.22 4.94 132 HTML_FONT_SIZE_HUGE 2848 0.61 2.18 0.06 133 TR_XM_PHPForged 2802 0.84 2.14 0.38 134 TR_XM_FormFill2 2780 0.83 2.13 0.38 135 XMBody_17 2780 0.84 2.13 0.39 136 XMSexyCombo_01 2775 0.93 2.12 0.51 137 XM_H_PHPOS 2765 0.82 2.11 0.37 138 RCVD_IN_IADB_DK 2731 3.69 2.09 4.26 139 RCVD_IN_IADB_SENDERID 2728 3.81 2.09 4.42 140 URI_HEX 2725 1.51 2.08 1.31 141 BAYES_40 2713 4.66 2.07 5.58 142 URIBL_DBL_ABUSE_SPAM 2697 0.55 2.06 0.01 143 XM_DK_Undo_01 2697 1.96 2.06 1.92 144 RELAYCOUNTRY_GB 2629 1.41 2.01 1.20 145 T_XMHurry_00 2616 0.91 2.00 0.53 146 XM_URI_RBL 2487 0.60 1.90 0.14 147 XMSlimDrugH 2446 0.72 1.87 0.32 148 MAILING_LIST_MULTI 2420 2.79 1.85 3.12 149 XM_UB999 2334 0.47 1.78 0.00 150 SUBJ_ALL_CAPS 2331 1.73 1.78 1.71 151 XMMoneyMeta_00 2280 0.93 1.74 0.64 152 ALL_TRUSTED 2219 12.32 1.70 16.07 153 URIBL_BLACK 2166 0.45 1.66 0.03 154 RCVD_IN_RP_RNBL 2162 0.50 1.65 0.10 155 FROM_EXCESS_BASE64 2127 2.42 1.63 2.70 156 RCVD_IN_PSBL 2103 0.47 1.61 0.06 157 T_XMDrugObfuBody_00 2103 0.94 1.61 0.70 158 TR_LOTS_OF_MONEY3 2097 0.58 1.60 0.22 159 DKIM_ADSP_NXDOMAIN 2081 0.62 1.59 0.27 160 XMSubMetaI_00 2048 0.88 1.57 0.64 161 XMBrknScrpt_02 2012 1.05 1.54 0.88 162 T_FILL_THIS_FORM_SHORT 1991 0.97 1.52 0.77 163 TR_XM_COVIDMETA1 1980 0.58 1.51 0.25 164 TR_XM_BayesRelay 1977 0.40 1.51 0.01 165 TR_Mismatch_TLD_02 1969 0.45 1.51 0.07 166 XMStockSpam_06 1942 0.93 1.48 0.74 167 XMGenDplmaNmb 1902 1.07 1.45 0.93 168 RELAYCOUNTRY_IN 1895 0.46 1.45 0.11 169 BAYES_20 1863 3.20 1.42 3.83 170 USER_IN_DEF_DKIM_WL 1839 8.42 1.41 10.90 171 RELAYCOUNTRY_NL 1827 0.51 1.40 0.19 172 HTTPS_HTTP_MISMATCH 1781 0.98 1.36 0.85 173 XM_JunkDunk 1754 0.35 1.34 0.00 174 FROM_SUSPICIOUS_NTLD 1743 0.38 1.33 0.05 175 XM_UB95 1743 0.36 1.33 0.02 176 TR_XM_INV_DKIM 1726 0.39 1.32 0.06 177 FROM_SUSPICIOUS_NTLD_FP 1696 0.37 1.30 0.04 178 TR_MetaPhish_Combo_01 1661 1.15 1.27 1.10 179 HTML_IMAGE_ONLY_20 1606 0.79 1.23 0.63 180 XMHTML_After_End 1594 1.09 1.22 1.05 181 NO_DNS_FOR_FROM 1576 0.48 1.20 0.22 182 XM_B_SEO 1544 0.44 1.18 0.18 183 XM_H_Long_From02 1532 1.06 1.17 1.02 184 XMBdyGiftCard01 1518 0.78 1.16 0.64 185 RCVD_IN_IADB_VOUCHED 1500 2.82 1.15 3.41 186 URIBL_SBL_A 1497 0.46 1.14 0.21 187 XMSexyCombo_04 1467 0.41 1.12 0.15 188 XM_H_Undi_Recip 1458 0.43 1.11 0.19 189 RELAYCOUNTRY_CH 1436 0.34 1.10 0.08 190 URI_TRY_3LD 1434 1.01 1.10 0.98 191 TR_XM_SEO4 1434 0.35 1.10 0.09 192 XM_Body_Dirty_Words_01 1423 0.38 1.09 0.13 193 XMPhish30 1403 0.72 1.07 0.59 194 TR_Symld_Words 1375 1.49 1.05 1.65 195 TR_XM_MaxWHORU 1371 0.42 1.05 0.20 196 XM_H_PHPMailer 1370 0.83 1.05 0.75 197 ADMITS_SPAM 1321 0.35 1.01 0.12 198 RCVD_IN_MSPIKE_H5 1303 2.37 1.00 2.86 199 LongTLD 1297 0.38 0.99 0.16 200 XM_PDF 1296 3.87 0.99 4.88 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 322154 89.20 95.32 87.04 2 RELAYCOUNTRY_US 299151 79.22 74.70 80.82 3 DKIM_SIGNED 269752 75.07 81.26 72.88 4 XM_DK_Pass 264633 72.87 76.75 71.50 5 XM_B_Unicode 257228 70.57 73.60 69.50 6 DKIM_VALID 256643 70.65 74.37 69.34 7 DCC_CHECK_NEGATIVE 226129 50.38 20.04 61.09 8 BAYES_50 205792 51.91 41.47 55.60 9 DKIM_VALID_AU 190774 52.65 55.77 51.54 10 XMListUnsubscribeExists 172928 51.32 64.34 46.72 11 XM_B_SpammyWords 163790 49.57 64.63 44.25 12 XM_B_Unicode3 145070 39.66 40.99 39.19 13 DCC_CHECK 143823 49.58 79.91 38.86 14 T_TM2_M_HEADER_IN_MSG 119707 29.44 21.23 32.34 15 RCVD_IN_MSPIKE_WL 108795 26.86 19.70 29.39 16 DKIM_VALID_EF 102958 28.74 31.36 27.82 17 HTML_FONT_LOW_CONTRAST 94534 27.22 31.99 25.54 18 RCVD_IN_MSPIKE_H2 93275 25.48 26.28 25.20 19 FVGT_m_MULTI_ODD 84307 23.98 27.36 22.78 20 LOC_TINY_FONT_1 82468 25.21 33.49 22.28 21 XMSubLong 78762 22.20 24.80 21.28 22 MIME_HTML_ONLY 72120 22.85 32.37 19.48 23 T_KAM_HTML_FONT_INVALID 67540 21.48 30.63 18.25 24 XM_B_SpammyWords2 65288 22.62 36.72 17.64 25 ALL_TRUSTED 59487 12.32 1.70 16.07 26 RCVD_IN_MSPIKE_H3 57298 14.20 10.58 15.48 27 BAYES_00 43834 8.94 0.74 11.84 28 XM_Body_Dirty_Words 41576 13.39 19.49 11.23 29 RCVD_IN_MSPIKE_H4 40909 10.29 8.13 11.05 30 XM_Multi_Part_URI 40648 12.08 15.20 10.98 31 USER_IN_DEF_DKIM_WL 40329 8.42 1.41 10.90 32 XM_B_Unsub 36836 11.31 15.16 9.95 33 LotsOfNums_01 34913 8.83 7.13 9.43 34 TooManyTo_001 33933 8.02 4.79 9.17 35 BAYES_60 31848 8.70 8.96 8.60 36 XM_Evil_Numbers_Gen 30477 8.47 9.14 8.23 37 UNPARSEABLE_RELAY 29559 8.57 10.24 7.99 38 TR_XM_DK_Bayes 27277 5.57 0.47 7.37 39 XM_DK_Undo_02 27124 16.28 41.62 7.33 40 TR_XM_DK_Bayes1 26413 5.39 0.46 7.14 41 FSL_BULK_SIG 26327 10.10 18.55 7.11 42 XM_DKIMWhitelistDomains 26138 5.22 0.01 7.06 43 RCVD_IN_RP_SAFE 26079 5.99 2.99 7.05 44 LOTS_OF_MONEY 24595 8.35 13.17 6.64 45 XM_SendGrid 23713 6.42 6.47 6.41 46 RCVD_IN_RP_CERTIFIED 23521 5.29 2.28 6.35 47 TR_XM_DK_Bayes2 22400 4.57 0.38 6.05 48 TR_XM_UnparsRelay 21906 6.98 9.98 5.92 49 MIME_QP_LONG_LINE 21572 5.20 3.41 5.83 50 RCVD_IN_IADB_LISTED 20879 4.82 2.51 5.64 51 BAYES_40 20636 4.66 2.07 5.58 52 TR_XM_DKIM_Undo 20391 12.44 32.06 5.51 53 IN_ZIMBRA_NJ_WHITELIST 20346 4.08 0.06 5.50 54 HTML_IMAGE_RATIO_04 20016 5.25 4.81 5.41 55 HTML_IMAGE_RATIO_02 19953 5.84 7.10 5.39 56 BAYES_99 19833 11.93 30.52 5.36 57 T_TooManySym_01 19745 4.58 2.44 5.33 58 XM_H_Long_From01 19632 5.40 5.67 5.30 59 MPART_ALT_DIFF 18594 6.38 10.20 5.02 60 RCVD_IN_IADB_SPF 18285 4.23 2.22 4.94 61 XM_PDF 18072 3.87 0.99 4.88 62 RELAYCOUNTRY_META 17093 9.48 23.23 4.62 63 RCVD_IN_IADB_SENDERID 16355 3.81 2.09 4.42 64 XMStrtUSub 16231 4.24 3.83 4.39 65 HTML_IMAGE_RATIO_06 16005 4.17 3.72 4.32 66 BAYES_999 15798 9.27 23.41 4.27 67 RCVD_IN_IADB_DK 15758 3.69 2.09 4.26 68 BAYES_80 15657 5.52 9.17 4.23 69 TR_XM_SpammyWords4 15435 5.98 11.09 4.17 70 TR_XM_DK_SendGrid 15114 3.99 3.71 4.08 71 XM_B_Phish_Phrases 14836 4.81 7.07 4.01 72 BOTNET_IPINHOSTNAME 14626 6.46 13.55 3.95 73 T_REMOTE_IMAGE 14566 5.38 9.48 3.94 74 XM_B_SpammyWords3 14402 6.12 12.42 3.89 75 XM_H_Trusted_IP 14186 2.83 0.00 3.83 76 BAYES_20 14175 3.20 1.42 3.83 77 XM_UncommonTLD01 13727 7.89 19.71 3.71 78 DKIM_INVALID 13109 4.42 6.89 3.54 79 RCVD_IN_IADB_VOUCHED 12609 2.82 1.15 3.41 80 MIME_HTML_ONLY_MULTI 12434 3.21 2.77 3.36 81 TR_XM_PhishingBody 12379 4.09 6.19 3.34 82 XMNumbers 12353 3.82 5.19 3.34 83 XMSubMetaSx_00 11688 4.24 7.30 3.16 84 MAILING_LIST_MULTI 11557 2.79 1.85 3.12 85 XMSexyCombo_05 11488 5.00 10.36 3.10 86 TM2_M_URI_OPT_OUT 11103 3.10 3.37 3.00 87 RCVD_IN_MSPIKE_H5 10588 2.37 1.00 2.86 88 ANY_BOUNCE_MESSAGE 10076 2.15 0.53 2.72 89 T_TooManySym_02 10076 2.20 0.72 2.72 90 BOUNCE_MESSAGE 10074 2.15 0.53 2.72 91 FROM_EXCESS_BASE64 9999 2.42 1.63 2.70 92 TR_DCC_Bayes_99 9921 8.35 24.41 2.68 93 URI_NOVOWEL 9702 3.60 6.37 2.62 94 TooManyTo_002 9669 2.14 0.78 2.61 95 BAYES_95 9384 3.13 4.82 2.54 96 HTML_IMAGE_RATIO_08 9062 2.65 3.21 2.45 97 MIME_HTML_MOSTLY 8979 3.95 8.25 2.43 98 BAYES_05 8970 2.00 0.82 2.42 99 TR_XM_SB_Phish 8954 2.44 2.51 2.42 100 XM_SPF_SoftFail 8925 2.91 4.32 2.41 101 XMSubPhish11 8889 2.40 2.41 2.40 102 RCVD_IN_IADB_OPTIN 8362 1.88 0.82 2.26 103 HTML_MIME_NO_HTML_TAG 8100 3.95 8.94 2.19 104 HELO_NODOT 7780 1.73 0.67 2.10 105 HELO_NO_DOMAIN 7778 1.73 0.66 2.10 106 T_XMDrugObfuBody_14 7727 2.14 2.29 2.09 107 KHOP_HELO_FCRDNS 7370 3.55 7.96 1.99 108 XM_B_Phish66 7332 2.38 3.50 1.98 109 IN_HORDE_ADDRESS_BOOK 7309 1.49 0.12 1.97 110 XM_CamelCaseFrm001 7183 2.06 2.41 1.94 111 XM_DK_Undo_01 7119 1.96 2.06 1.92 112 XM_B_Unsub2 6997 1.98 2.22 1.89 113 INVALID_MSGID 6926 1.43 0.19 1.87 114 XM_B_SpammyTLD 6790 2.92 5.97 1.83 115 TVD_RCVD_IP 6464 1.36 0.25 1.75 116 TooManyTo_003 6337 1.42 0.61 1.71 117 SUBJ_ALL_CAPS 6326 1.73 1.78 1.71 118 TO_MALFORMED 6178 1.24 0.02 1.67 119 TR_Symld_Words 6108 1.49 1.05 1.65 120 T_XMDrugObfuBody_08 5878 1.92 2.85 1.59 121 UNTRUSTED_Relay 5770 5.73 17.55 1.56 122 XMCapTrack 5568 1.24 0.48 1.50 123 TR_XM_SpammyWords5 5510 1.86 2.90 1.49 124 XMDiploma_00 5491 1.76 2.55 1.48 125 BOTNET 5107 5.94 18.86 1.38 126 XM_GoogleGroups 4961 1.15 0.60 1.34 127 XMGappySubj_01 4894 1.02 0.15 1.32 128 URI_HEX 4858 1.51 2.08 1.31 129 TooManyTo_004 4534 1.03 0.48 1.22 130 TM2_M_VERY_LONG_WORD 4489 1.58 2.61 1.21 131 RELAYCOUNTRY_GB 4454 1.41 2.01 1.20 132 XMSubNoVowel 4315 1.01 0.56 1.17 133 TR_MetaPhish_Combo_01 4076 1.15 1.27 1.10 134 XM_OfRef6 3883 1.51 2.80 1.05 135 XMHTML_After_End 3882 1.09 1.22 1.05 136 XM_H_Long_From02 3779 1.06 1.17 1.02 137 HTML_FONT_FACE_BAD 3760 0.92 0.65 1.02 138 XM_UB50 3743 2.60 7.09 1.01 139 RELAYCOUNTRY_CA 3719 1.91 4.46 1.00 140 TooManyTo_005 3700 0.85 0.41 1.00 141 SpammyFromTLD_01 3699 2.50 6.76 1.00 142 DKIM_ADSP_CUSTOM_MED 3696 0.93 0.74 1.00 143 URI_TRY_3LD 3624 1.01 1.10 0.98 144 XMGenDplmaNmb 3439 1.07 1.45 0.93 145 XM_SPF_Unknown 3281 0.86 0.77 0.89 146 XMBrknScrpt_02 3245 1.05 1.54 0.88 147 HTTPS_HTTP_MISMATCH 3152 0.98 1.36 0.85 148 T_TooManySym_03 3111 0.68 0.22 0.84 149 XMBSHREFv2 2983 0.70 0.40 0.81 150 TR_XM_SpammyWords2 2959 3.48 11.08 0.80 151 TR_MSPIKEBAYES00 2903 0.58 0.01 0.78 152 T_FILL_THIS_FORM_SHORT 2868 0.97 1.52 0.77 153 XMBody_95 2825 0.62 0.21 0.76 154 XM_H_PHPMailer 2781 0.83 1.05 0.75 155 XM_B_COVIDMETA 2769 1.26 2.71 0.75 156 RELAYCOUNTRY_DE 2765 1.27 2.74 0.75 157 XMNoVowels 2754 0.78 0.87 0.74 158 XMStockSpam_06 2726 0.93 1.48 0.74 159 T_XMDrugObfuBody_00 2589 0.94 1.61 0.70 160 RCVD_IN_BL_SPAMCOP_NET 2485 2.24 6.67 0.67 161 RCVD_IN_SORBS_DUL 2469 0.54 0.20 0.67 162 XM_ShortIntro_01 2413 0.64 0.59 0.65 163 MSGID_NOFQDN1 2394 0.48 0.01 0.65 164 NML_ADSP_CUSTOM_MED 2374 0.63 0.61 0.64 165 XMBdyGiftCard01 2374 0.78 1.16 0.64 166 XMMoneyMeta_00 2366 0.93 1.74 0.64 167 XMSubMetaI_00 2353 0.88 1.57 0.64 168 HTML_IMAGE_ONLY_20 2333 0.79 1.23 0.63 169 XM_ProductURIs 2318 0.60 0.52 0.63 170 T_OBFU_PDF_ATTACH 2304 0.51 0.20 0.62 171 FROM_GOV_SPOOF 2287 0.50 0.15 0.62 172 SHORT_HELO_AND_INLINE_IMAGE 2267 0.48 0.10 0.61 173 MSGID_FROM_MTA_HEADER 2245 0.49 0.17 0.61 174 TM2_M_BODY_EMPTY 2216 0.48 0.13 0.60 175 XMHTMLBadTable_001 2196 0.62 0.69 0.59 176 XM_B_REG_HTML 2187 0.56 0.47 0.59 177 XMPhish30 2185 0.72 1.07 0.59 178 XM_B_COPY_HTML 2122 0.59 0.65 0.57 179 PLING_QUERY 2062 0.62 0.78 0.56 180 MISSING_HEADERS 2027 0.60 0.76 0.55 181 XMLngstWrd_00 2001 0.47 0.28 0.54 182 T_XMHurry_00 1961 0.91 2.00 0.53 183 TVD_SPACE_RATIO 1948 0.41 0.08 0.53 184 FORGED_GMAIL_RCVD 1937 0.54 0.60 0.52 185 HTML_IMAGE_ONLY_32 1883 0.45 0.28 0.51 186 XMSexyCombo_01 1870 0.93 2.12 0.51 187 XM_DIRTYINTL 1779 1.13 2.96 0.48 188 HTML_TAG_BALANCE_BODY 1766 0.55 0.77 0.48 189 XMLngstWrd_01 1766 0.41 0.22 0.48 190 HTML_IMAGE_ONLY_28 1732 0.47 0.49 0.47 191 XM_B_SpammyWords4 1710 0.93 2.26 0.46 192 NICE_REPLY_A 1602 0.33 0.02 0.43 193 PDS_BAD_THREAD_QP_64 1595 0.36 0.15 0.43 194 RDNS_DYNAMIC 1589 0.49 0.67 0.43 195 XM_H_SpoofStaff4 1555 0.39 0.29 0.42 196 XMBody_78 1550 0.46 0.57 0.42 197 XMPhish14 1547 0.53 0.86 0.42 198 T_Symld_Words_02 1541 0.44 0.50 0.42 199 XM_shorewaves_Whitelist 1540 0.31 0.00 0.42 200 TR_XM_PHPDW 1537 0.91 2.32 0.42 ----------------------------------------------------------------------