Email: 473816 Autolearn: 0 AvgScore: 2.58 AvgScanTime: 1.46 sec Spam: 120566 Autolearn: 0 AvgScore: 15.10 AvgScanTime: 1.98 sec Ham: 353250 Autolearn: 0 AvgScore: -1.70 AvgScanTime: 1.28 sec Time Spent Running SA: 191.68 hours Time Spent Processing Spam: 66.46 hours Time Spent Processing Ham: 125.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115486 89.56 95.79 87.43 2 DKIM_SIGNED 98689 72.94 81.85 69.90 3 DCC_CHECK 94649 48.26 78.50 37.93 4 XM_DK_Pass 94089 70.89 78.04 68.45 5 DKIM_VALID 91225 68.75 75.66 66.40 6 XM_B_Unicode 88312 70.68 73.25 69.80 7 RELAYCOUNTRY_US 88164 78.31 73.13 80.08 8 XMListUnsubscribeExists 77215 49.84 64.04 45.00 9 XM_B_SpammyWords 76994 48.83 63.86 43.70 10 DKIM_VALID_AU 67773 51.19 56.21 49.47 11 XM_DK_Undo_02 52162 16.45 43.26 7.30 12 BAYES_50 49419 51.74 40.99 55.41 13 XM_B_Unicode3 48415 40.87 40.16 41.11 14 LOC_TINY_FONT_1 44715 25.47 37.09 21.50 15 XM_B_SpammyWords2 41624 22.55 34.52 18.46 16 DKIM_VALID_EF 40425 27.53 33.53 25.48 17 TR_XM_DKIM_Undo 38970 12.16 32.32 5.28 18 MIME_HTML_ONLY 38744 24.05 32.14 21.29 19 HTML_FONT_LOW_CONTRAST 38704 27.36 32.10 25.75 20 BAYES_99 36967 12.53 30.66 6.35 21 T_KAM_HTML_FONT_INVALID 36412 20.48 30.20 17.16 22 RCVD_IN_MSPIKE_H2 34326 25.53 28.47 24.53 23 FVGT_m_MULTI_ODD 31283 23.02 25.95 22.02 24 RELAYCOUNTRY_META 30523 9.68 25.32 4.35 25 XMSubLong 30015 21.69 24.90 20.60 26 TR_DCC_Bayes_99 28771 8.12 23.86 2.75 27 BAYES_999 27823 9.70 23.08 5.13 28 XM_Body_Dirty_Words 27365 14.45 22.70 11.64 29 DCC_CHECK_NEGATIVE 25871 51.70 21.46 62.03 30 XM_UncommonTLD01 25278 7.95 20.97 3.50 31 UNTRUSTED_Relay 24599 6.47 20.40 1.71 32 T_TM2_M_HEADER_IN_MSG 24579 28.26 20.39 30.95 33 RCVD_IN_MSPIKE_WL 24212 26.19 20.08 28.28 34 BOTNET 23130 6.07 19.18 1.59 35 XM_B_Unsub 19500 11.79 16.17 10.29 36 FSL_BULK_SIG 19374 9.76 16.07 7.60 37 XM_Multi_Part_URI 18183 11.95 15.08 10.88 38 LOTS_OF_MONEY 17693 9.03 14.67 7.10 39 XMSexyCombo_05 17258 6.34 14.31 3.62 40 MPART_ALT_DIFF 17090 8.52 14.17 6.59 41 BOTNET_IPINHOSTNAME 16786 6.88 13.92 4.47 42 TR_XM_SpammyWords4 14763 6.38 12.24 4.38 43 XM_B_SpammyWords3 13181 5.39 10.93 3.50 44 SpammyFromTLD_02 12942 3.15 10.73 0.56 45 MIME_HTML_MOSTLY 12900 4.55 10.70 2.45 46 TR_XM_SpammyWords2 12764 3.35 10.59 0.88 47 RCVD_IN_MSPIKE_H3 12592 13.95 10.44 15.14 48 UNPARSEABLE_RELAY 12324 8.04 10.22 7.29 49 TR_XM_UnparsRelay 12053 6.77 10.00 5.67 50 BAYES_80 11099 5.60 9.21 4.37 51 T_REMOTE_IMAGE 10982 5.05 9.11 3.67 52 BAYES_60 10925 8.74 9.06 8.63 53 URI_NOVOWEL 10573 4.20 8.77 2.64 54 KHOP_HELO_FCRDNS 10456 3.46 8.67 1.68 55 RCVD_IN_MSPIKE_H4 10409 10.08 8.63 10.57 56 HTML_MIME_NO_HTML_TAG 10302 4.06 8.54 2.53 57 XM_Evil_Numbers_Gen 10299 8.10 8.54 7.95 58 RCVD_IN_BL_SPAMCOP_NET 10228 2.58 8.48 0.57 59 SpammyFromTLD_01 10207 2.72 8.47 0.76 60 XMSubMetaSx_00 9206 4.31 7.64 3.17 61 T_HTML_TAG_BALANCE_CENTER 9097 2.04 7.55 0.15 62 XM_B_Phish_Phrases 8965 4.61 7.44 3.65 63 HTML_IMAGE_RATIO_02 8797 6.98 7.30 6.87 64 XM_UB50 8755 2.68 7.26 1.12 65 XM_SendGrid 8669 6.43 7.19 6.17 66 HTML_IMAGE_ONLY_08 8575 1.88 7.11 0.09 67 RELAYCOUNTRY_FR 8311 1.99 6.89 0.31 68 LotsOfNums_01 8231 8.82 6.83 9.49 69 TR_XM_PhishingBody 7956 3.98 6.60 3.08 70 JH_SPAMMY_HEADERS 7594 1.60 6.30 0.00 71 DKIM_INVALID 7464 4.19 6.19 3.50 72 BODY_URI_ONLY 7305 1.55 6.06 0.01 73 TooManyTo_001 7214 8.09 5.98 8.81 74 XM_H_Long_From01 7018 5.33 5.82 5.16 75 XM_DIRTYINTL 6983 1.84 5.79 0.49 76 MIXED_CENTER_CASE 6731 1.42 5.58 0.00 77 MIXED_HREF_CASE 6725 1.42 5.58 0.00 78 MIXED_FONT_CASE 6720 1.42 5.57 0.00 79 MIXED_IMG_CASE 6716 1.42 5.57 0.00 80 MIXED_AREA_CASE 6713 1.42 5.57 0.00 81 XMNumbers 6665 3.75 5.53 3.14 82 BAYES_95 6434 3.35 5.34 2.68 83 RCVD_IN_MSPIKE_BL 6244 1.65 5.18 0.45 84 XM_B_SpammyTLD 5993 2.81 4.97 2.07 85 URI_GOOG_STO_SPAMMY 5900 1.25 4.89 0.00 86 HTML_IMAGE_RATIO_04 5899 6.79 4.89 7.43 87 TR_XM_MSPIKECOMBO 5792 1.55 4.80 0.43 88 HTML_FONT_SIZE_LARGE 5611 1.26 4.65 0.11 89 XM_UB99 5308 1.13 4.40 0.01 90 XM_SPF_SoftFail 5159 2.49 4.28 1.87 91 HTML_IMAGE_RATIO_06 5142 4.12 4.26 4.07 92 RELAYCOUNTRY_CA 5104 1.84 4.23 1.02 93 TM2_M_URI_OPT_OUT 4755 3.78 3.94 3.72 94 XM_B_Phish66 4604 2.30 3.82 1.78 95 TR_XM_DK_SendGrid 4533 3.78 3.76 3.79 96 URIBL_DBL_SPAM 4500 0.96 3.73 0.01 97 RCVD_IN_MSPIKE_L5 4302 0.96 3.57 0.07 98 MIME_HTML_ONLY_MULTI 4299 4.43 3.57 4.72 99 XM_UB60 4292 1.02 3.56 0.16 100 HTML_FONT_SIZE_HUGE 4274 0.98 3.54 0.10 101 RCVD_IN_RP_SAFE 4238 5.70 3.52 6.45 102 TR_XM_SpammyWords3 3850 1.09 3.19 0.38 103 TR_XM_SpammyWords5 3847 1.77 3.19 1.29 104 MIME_QP_LONG_LINE 3822 5.03 3.17 5.66 105 XM_B_COVIDMETA 3776 1.55 3.13 1.01 106 XM_OfRef6 3752 1.51 3.11 0.97 107 TR_XM_SPAMCOP 3715 1.00 3.08 0.29 108 XM_UB999 3709 0.78 3.08 0.00 109 BOTNET_NORDNS 3629 0.77 3.01 0.01 110 XMStrtUSub 3600 3.65 2.99 3.88 111 XM_UB80 3443 0.75 2.86 0.03 112 T_XMDrugObfuBody_08 3381 1.75 2.80 1.39 113 PDS_OTHER_BAD_TLD 3361 0.83 2.79 0.16 114 T_XMDrugObfuBody_14 3330 2.43 2.76 2.31 115 RCVD_IN_RP_CERTIFIED 3257 4.92 2.70 5.68 116 HTML_IMAGE_RATIO_08 3251 2.42 2.70 2.33 117 XMDiploma_00 3231 1.80 2.68 1.50 118 T_TooManySym_01 3079 4.64 2.55 5.35 119 T_XMHurry_00 2978 0.97 2.47 0.45 120 GOOG_STO_IMG_HTML 2897 0.61 2.40 0.00 121 RCVD_IN_IADB_LISTED 2889 4.77 2.40 5.58 122 TR_XM_SB_Phish 2843 2.37 2.36 2.38 123 US_DOLLARS_3 2800 1.35 2.32 1.02 124 XMSubPhish11 2720 2.32 2.26 2.35 125 XMSlimDrugH 2693 0.78 2.23 0.29 126 XM_CamelCaseFrm001 2669 1.92 2.21 1.82 127 TR_XM_COVIDMETA1 2639 0.82 2.19 0.35 128 RELAYCOUNTRY_DE 2585 1.04 2.14 0.67 129 TM2_M_VERY_LONG_WORD 2572 1.46 2.13 1.23 130 XM_B_Unsub2 2560 1.72 2.12 1.58 131 RCVD_IN_IADB_SPF 2504 4.17 2.08 4.89 132 XM_DK_Undo_01 2490 1.81 2.07 1.73 133 FROM_EXCESS_BASE64 2476 2.62 2.05 2.81 134 XMBody_17 2474 0.89 2.05 0.50 135 BAYES_40 2437 4.59 2.02 5.47 136 XM_URI_RBL 2424 0.59 2.01 0.11 137 URI_PHP_REDIR 2415 0.51 2.00 0.00 138 RCVD_IN_IADB_DK 2345 3.67 1.94 4.26 139 RCVD_IN_IADB_SENDERID 2328 3.75 1.93 4.38 140 RELAYCOUNTRY_NL 2237 0.63 1.86 0.21 141 TR_XM_PHPDW 2212 0.67 1.83 0.27 142 MAILING_LIST_MULTI 2198 2.52 1.82 2.76 143 SUBJ_ALL_CAPS 2141 1.63 1.78 1.58 144 XM_B_SpammyWords4 2097 0.68 1.74 0.32 145 ALL_TRUSTED 2069 12.90 1.72 16.72 146 RCVD_IN_PSBL 2062 0.53 1.71 0.13 147 TR_XM_COVIDMETA4 2020 0.69 1.68 0.35 148 URI_HEX 2004 1.30 1.66 1.18 149 TR_XM_PHPForged 1992 0.59 1.65 0.23 150 TR_XM_FormFill2 1973 0.59 1.64 0.23 151 XM_H_PHPOS 1961 0.58 1.63 0.22 152 XMSexyCombo_01 1961 0.76 1.63 0.47 153 XM_UB95 1898 0.42 1.57 0.02 154 URI_TRY_3LD 1887 1.25 1.57 1.14 155 XM_JunkDunk 1882 0.40 1.56 0.00 156 DIET_1 1863 0.75 1.55 0.48 157 T_XMDrugObfuBody_00 1860 0.88 1.54 0.66 158 T_FILL_THIS_FORM_SHORT 1859 1.05 1.54 0.88 159 URI_NO_WWW_BIZ_CGI 1856 0.40 1.54 0.01 160 XMGenDplmaNmb 1856 0.98 1.54 0.79 161 XMStockSpam_06 1831 1.29 1.52 1.21 162 RCVD_IN_RP_RNBL 1821 0.45 1.51 0.08 163 URIBL_BLACK 1761 0.39 1.46 0.03 164 ADMITS_SPAM 1681 0.42 1.39 0.09 165 XMBrknScrpt_02 1664 1.02 1.38 0.89 166 DKIM_ADSP_CUSTOM_MED 1653 1.10 1.37 1.00 167 TR_Symld_Words 1609 1.83 1.33 2.00 168 BAYES_20 1592 3.09 1.32 3.69 169 RELAYCOUNTRY_IN 1584 0.41 1.31 0.10 170 XMMoneyMeta_00 1561 0.65 1.29 0.43 171 RELAYCOUNTRY_GB 1542 1.05 1.28 0.97 172 USER_IN_DEF_DKIM_WL 1512 8.66 1.25 11.19 173 FORGED_GMAIL_RCVD 1507 0.70 1.25 0.52 174 HTML_IMAGE_ONLY_20 1491 1.48 1.24 1.57 175 XMPhish30 1488 0.82 1.23 0.67 176 XM_Body_Dirty_Words_01 1476 0.42 1.22 0.14 177 TR_XM_BayesRelay 1472 0.31 1.22 0.00 178 TR_XM_INV_DKIM 1447 0.38 1.20 0.10 179 MPART_ALT_DIFF_COUNT 1434 0.64 1.19 0.45 180 XM_H_Long_From02 1402 1.04 1.16 1.00 181 NML_ADSP_CUSTOM_MED 1349 0.77 1.12 0.65 182 NO_DNS_FOR_FROM 1315 0.45 1.09 0.23 183 TR_LOTS_OF_MONEY3 1314 0.42 1.09 0.19 184 T_Symld_Words_02 1314 0.61 1.09 0.45 185 TR_XM_MaxWHORU 1297 0.42 1.08 0.20 186 URIBL_SBL_A 1278 0.43 1.06 0.21 187 XMBdyGiftCard01 1276 0.86 1.06 0.79 188 RCVD_IN_IADB_VOUCHED 1267 2.71 1.05 3.28 189 T_MONEY_PERCENT 1249 0.39 1.04 0.16 190 TR_LOTS_OF_MONEY2 1249 0.39 1.04 0.16 191 TooManyTo_002 1245 2.00 1.03 2.33 192 XM_BadFromFormat 1225 0.37 1.02 0.15 193 XM_H_PHPMailer 1222 0.76 1.01 0.67 194 XM_B_SEO 1221 0.37 1.01 0.15 195 RCVD_IN_MSPIKE_H5 1211 2.16 1.00 2.56 196 XM_SPF_Unknown 1210 0.74 1.00 0.65 197 XMHTML_After_End 1189 1.06 0.99 1.09 198 XM_H_Undi_Recip 1180 0.35 0.98 0.14 199 RELAYCOUNTRY_AU 1176 0.49 0.98 0.32 200 XM_PDF 1172 4.40 0.97 5.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 308854 89.56 95.79 87.43 2 RELAYCOUNTRY_US 282891 78.31 73.13 80.08 3 DKIM_SIGNED 246912 72.94 81.85 69.90 4 XM_B_Unicode 246561 70.68 73.25 69.80 5 XM_DK_Pass 241796 70.89 78.04 68.45 6 DKIM_VALID 234546 68.75 75.66 66.40 7 DCC_CHECK_NEGATIVE 219112 51.70 21.46 62.03 8 BAYES_50 195734 51.74 40.99 55.41 9 DKIM_VALID_AU 174765 51.19 56.21 49.47 10 XMListUnsubscribeExists 158956 49.84 64.04 45.00 11 XM_B_SpammyWords 154374 48.83 63.86 43.70 12 XM_B_Unicode3 145216 40.87 40.16 41.11 13 DCC_CHECK 133998 48.26 78.50 37.93 14 T_TM2_M_HEADER_IN_MSG 109339 28.26 20.39 30.95 15 RCVD_IN_MSPIKE_WL 99896 26.19 20.08 28.28 16 HTML_FONT_LOW_CONTRAST 90945 27.36 32.10 25.75 17 DKIM_VALID_EF 89998 27.53 33.53 25.48 18 RCVD_IN_MSPIKE_H2 86637 25.53 28.47 24.53 19 FVGT_m_MULTI_ODD 77788 23.02 25.95 22.02 20 LOC_TINY_FONT_1 75944 25.47 37.09 21.50 21 MIME_HTML_ONLY 75193 24.05 32.14 21.29 22 XMSubLong 72755 21.69 24.90 20.60 23 XM_B_SpammyWords2 65226 22.55 34.52 18.46 24 T_KAM_HTML_FONT_INVALID 60620 20.48 30.20 17.16 25 ALL_TRUSTED 59047 12.90 1.72 16.72 26 RCVD_IN_MSPIKE_H3 53494 13.95 10.44 15.14 27 XM_Body_Dirty_Words 41124 14.45 22.70 11.64 28 USER_IN_DEF_DKIM_WL 39538 8.66 1.25 11.19 29 BAYES_00 38752 8.38 0.77 10.97 30 XM_Multi_Part_URI 38443 11.95 15.08 10.88 31 RCVD_IN_MSPIKE_H4 37355 10.08 8.63 10.57 32 XM_B_Unsub 36342 11.79 16.17 10.29 33 LotsOfNums_01 33539 8.82 6.83 9.49 34 TooManyTo_001 31107 8.09 5.98 8.81 35 BAYES_60 30498 8.74 9.06 8.63 36 XM_DKIMWhitelistDomains 28513 6.02 0.02 8.07 37 XM_Evil_Numbers_Gen 28080 8.10 8.54 7.95 38 FSL_BULK_SIG 26854 9.76 16.07 7.60 39 HTML_IMAGE_RATIO_04 26251 6.79 4.89 7.43 40 XM_DK_Undo_02 25802 16.45 43.26 7.30 41 UNPARSEABLE_RELAY 25759 8.04 10.22 7.29 42 XM_H_Trusted_IP 25343 5.35 0.00 7.17 43 LOTS_OF_MONEY 25083 9.03 14.67 7.10 44 HTML_IMAGE_RATIO_02 24252 6.98 7.30 6.87 45 MPART_ALT_DIFF 23263 8.52 14.17 6.59 46 RCVD_IN_RP_SAFE 22782 5.70 3.52 6.45 47 BAYES_99 22425 12.53 30.66 6.35 48 TR_XM_DK_Bayes 22417 4.85 0.48 6.35 49 XM_SendGrid 21788 6.43 7.19 6.17 50 TR_XM_DK_Bayes1 21704 4.69 0.45 6.14 51 RCVD_IN_RP_CERTIFIED 20071 4.92 2.70 5.68 52 TR_XM_UnparsRelay 20019 6.77 10.00 5.67 53 MIME_QP_LONG_LINE 20001 5.03 3.17 5.66 54 RCVD_IN_IADB_LISTED 19698 4.77 2.40 5.58 55 XM_PDF 19669 4.40 0.97 5.57 56 BAYES_40 19325 4.59 2.02 5.47 57 T_TooManySym_01 18895 4.64 2.55 5.35 58 TR_XM_DK_Bayes2 18886 4.08 0.39 5.35 59 TR_XM_DKIM_Undo 18641 12.16 32.32 5.28 60 IN_ZIMBRA_NJ_WHITELIST 18400 3.90 0.05 5.21 61 XM_H_Long_From01 18215 5.33 5.82 5.16 62 BAYES_999 18128 9.70 23.08 5.13 63 RCVD_IN_IADB_SPF 17264 4.17 2.08 4.89 64 MIME_HTML_ONLY_MULTI 16677 4.43 3.57 4.72 65 BOTNET_IPINHOSTNAME 15800 6.88 13.92 4.47 66 TR_XM_SpammyWords4 15468 6.38 12.24 4.38 67 RCVD_IN_IADB_SENDERID 15461 3.75 1.93 4.38 68 BAYES_80 15437 5.60 9.21 4.37 69 RELAYCOUNTRY_META 15366 9.68 25.32 4.35 70 RCVD_IN_IADB_DK 15045 3.67 1.94 4.26 71 HTML_IMAGE_RATIO_06 14375 4.12 4.26 4.07 72 XMStrtUSub 13696 3.65 2.99 3.88 73 TR_XM_DK_SendGrid 13398 3.78 3.76 3.79 74 TM2_M_URI_OPT_OUT 13140 3.78 3.94 3.72 75 BAYES_20 13045 3.09 1.32 3.69 76 T_REMOTE_IMAGE 12955 5.05 9.11 3.67 77 XM_B_Phish_Phrases 12896 4.61 7.44 3.65 78 XMSexyCombo_05 12785 6.34 14.31 3.62 79 XM_UncommonTLD01 12377 7.95 20.97 3.50 80 DKIM_INVALID 12366 4.19 6.19 3.50 81 XM_B_SpammyWords3 12362 5.39 10.93 3.50 82 RCVD_IN_IADB_VOUCHED 11589 2.71 1.05 3.28 83 ANY_BOUNCE_MESSAGE 11574 2.61 0.67 3.28 84 BOUNCE_MESSAGE 11568 2.61 0.66 3.27 85 XMSubMetaSx_00 11203 4.31 7.64 3.17 86 XMNumbers 11082 3.75 5.53 3.14 87 TR_XM_PhishingBody 10882 3.98 6.60 3.08 88 FROM_EXCESS_BASE64 9937 2.62 2.05 2.81 89 MAILING_LIST_MULTI 9762 2.52 1.82 2.76 90 TR_DCC_Bayes_99 9717 8.12 23.86 2.75 91 BAYES_95 9462 3.35 5.34 2.68 92 T_TooManySym_02 9385 2.16 0.71 2.66 93 URI_NOVOWEL 9319 4.20 8.77 2.64 94 RCVD_IN_MSPIKE_H5 9047 2.16 1.00 2.56 95 HTML_MIME_NO_HTML_TAG 8938 4.06 8.54 2.53 96 MIME_HTML_MOSTLY 8641 4.55 10.70 2.45 97 BAYES_05 8567 1.97 0.63 2.43 98 TR_XM_SB_Phish 8396 2.37 2.36 2.38 99 XMSubPhish11 8295 2.32 2.26 2.35 100 TooManyTo_002 8245 2.00 1.03 2.33 101 HTML_IMAGE_RATIO_08 8227 2.42 2.70 2.33 102 T_XMDrugObfuBody_14 8168 2.43 2.76 2.31 103 RCVD_IN_IADB_OPTIN 7596 1.77 0.65 2.15 104 XMSubNoVowel 7561 1.74 0.55 2.14 105 INVALID_MSGID 7467 1.64 0.26 2.11 106 XM_B_SpammyTLD 7310 2.81 4.97 2.07 107 IN_HORDE_ADDRESS_BOOK 7112 1.53 0.11 2.01 108 TR_Symld_Words 7049 1.83 1.33 2.00 109 HTML_FONT_FACE_BAD 6915 1.69 0.90 1.96 110 MSGID_NOFQDN1 6903 1.47 0.04 1.95 111 XM_SPF_SoftFail 6619 2.49 4.28 1.87 112 XM_CamelCaseFrm001 6426 1.92 2.21 1.82 113 HELO_NODOT 6402 1.50 0.57 1.81 114 HELO_NO_DOMAIN 6401 1.50 0.57 1.81 115 TO_MALFORMED 6325 1.35 0.05 1.79 116 XM_B_Phish66 6286 2.30 3.82 1.78 117 XM_DK_Undo_01 6098 1.81 2.07 1.73 118 UNTRUSTED_Relay 6041 6.47 20.40 1.71 119 KHOP_HELO_FCRDNS 5921 3.46 8.67 1.68 120 BOTNET 5623 6.07 19.18 1.59 121 SUBJ_ALL_CAPS 5595 1.63 1.78 1.58 122 XM_B_Unsub2 5576 1.72 2.12 1.58 123 HTML_IMAGE_ONLY_20 5533 1.48 1.24 1.57 124 TooManyTo_003 5421 1.36 0.85 1.53 125 XMGappySubj_01 5297 1.18 0.24 1.50 126 TVD_RCVD_IP 5297 1.26 0.54 1.50 127 XMDiploma_00 5294 1.80 2.68 1.50 128 T_XMDrugObfuBody_08 4901 1.75 2.80 1.39 129 XMCapTrack 4576 1.09 0.49 1.30 130 TR_XM_SpammyWords5 4550 1.77 3.19 1.29 131 XM_GoogleGroups 4358 1.08 0.63 1.23 132 TM2_M_VERY_LONG_WORD 4344 1.46 2.13 1.23 133 XMStockSpam_06 4258 1.29 1.52 1.21 134 URI_HEX 4171 1.30 1.66 1.18 135 URI_TRY_3LD 4025 1.25 1.57 1.14 136 XM_UB50 3953 2.68 7.26 1.12 137 XMHTML_After_End 3843 1.06 0.99 1.09 138 TooManyTo_004 3833 0.99 0.73 1.09 139 RELAYCOUNTRY_CA 3611 1.84 4.23 1.02 140 US_DOLLARS_3 3606 1.35 2.32 1.02 141 XM_B_COVIDMETA 3564 1.55 3.13 1.01 142 DKIM_ADSP_CUSTOM_MED 3548 1.10 1.37 1.00 143 XM_H_Long_From02 3539 1.04 1.16 1.00 144 RELAYCOUNTRY_GB 3412 1.05 1.28 0.97 145 XM_OfRef6 3411 1.51 3.11 0.97 146 XMBSHREFv2 3273 0.75 0.23 0.93 147 XMBrknScrpt_02 3150 1.02 1.38 0.89 148 T_FILL_THIS_FORM_SHORT 3117 1.05 1.54 0.88 149 TR_XM_SpammyWords2 3098 3.35 10.59 0.88 150 TooManyTo_005 3021 0.80 0.65 0.86 151 XMGenDplmaNmb 2789 0.98 1.54 0.79 152 XMBdyGiftCard01 2781 0.86 1.06 0.79 153 T_TooManySym_03 2684 0.62 0.21 0.76 154 SpammyFromTLD_01 2672 2.72 8.47 0.76 155 XMBody_95 2626 0.61 0.22 0.74 156 XM_ProductURIs 2577 0.76 0.84 0.73 157 XMNoVowels 2543 0.71 0.66 0.72 158 TR_MetaPhish_Combo_01 2453 0.76 0.96 0.69 159 HTTPS_HTTP_MISMATCH 2422 0.76 0.97 0.69 160 XMPhish30 2377 0.82 1.23 0.67 161 XM_H_PHPMailer 2375 0.76 1.01 0.67 162 RELAYCOUNTRY_DE 2363 1.04 2.14 0.67 163 T_XMDrugObfuBody_00 2314 0.88 1.54 0.66 164 NML_ADSP_CUSTOM_MED 2307 0.77 1.12 0.65 165 XM_SPF_Unknown 2286 0.74 1.00 0.65 166 T_OBFU_PDF_ATTACH 2267 0.52 0.18 0.64 167 RCVD_IN_SORBS_DUL 2222 0.52 0.18 0.63 168 FROM_GOV_DKIM_AU 2214 0.50 0.14 0.63 169 TVD_SPACE_RATIO_MINFP 2199 0.59 0.48 0.62 170 XM_B_COPY_HTML 2104 0.62 0.69 0.60 171 MISSING_HEADERS 2071 0.57 0.53 0.59 172 XM_ShortIntro_01 2045 0.61 0.68 0.58 173 RCVD_IN_BL_SPAMCOP_NET 2007 2.58 8.48 0.57 174 SpammyFromTLD_02 1979 3.15 10.73 0.56 175 TR_MSPIKEBAYES00 1953 0.41 0.01 0.55 176 FROM_GOV_SPOOF 1890 0.45 0.20 0.54 177 FORGED_GMAIL_RCVD 1825 0.70 1.25 0.52 178 XM_B_REG_HTML 1803 0.49 0.44 0.51 179 XMBody_17 1757 0.89 2.05 0.50 180 T_MANY_PILL_PRICE 1752 0.37 0.00 0.50 181 SHORT_HELO_AND_INLINE_IMAGE 1746 0.39 0.07 0.49 182 XMHTMLBadTable_001 1742 0.51 0.54 0.49 183 XM_DIRTYINTL 1722 1.84 5.79 0.49 184 DIET_1 1713 0.75 1.55 0.48 185 XMSubMetaI_00 1700 0.57 0.81 0.48 186 XMSexyCombo_01 1656 0.76 1.63 0.47 187 TR_XM_Spammywords 1598 0.44 0.41 0.45 188 XM_S_SpammyWords 1598 0.44 0.41 0.45 189 T_XMHurry_00 1595 0.97 2.47 0.45 190 TM2_M_BODY_EMPTY 1595 0.37 0.11 0.45 191 RCVD_IN_MSPIKE_BL 1595 1.65 5.18 0.45 192 TVD_SPACE_RATIO 1586 0.44 0.43 0.45 193 T_Symld_Words_02 1577 0.61 1.09 0.45 194 MPART_ALT_DIFF_COUNT 1575 0.64 1.19 0.45 195 HTML_IMAGE_ONLY_28 1569 0.44 0.41 0.44 196 BASE64_LENGTH_79_INF 1544 0.39 0.24 0.44 197 TR_XM_MSPIKECOMBO 1536 1.55 4.80 0.43 198 XMMoneyMeta_00 1534 0.65 1.29 0.43 199 RDNS_DYNAMIC 1514 0.56 0.93 0.43 200 TM2_M_A_HREF_HREF 1483 0.45 0.52 0.42 ----------------------------------------------------------------------