Email: 508447 Autolearn: 0 AvgScore: 2.78 AvgScanTime: 1.50 sec Spam: 133190 Autolearn: 0 AvgScore: 14.30 AvgScanTime: 2.07 sec Ham: 375257 Autolearn: 0 AvgScore: -1.31 AvgScanTime: 1.30 sec Time Spent Running SA: 211.98 hours Time Spent Processing Spam: 76.62 hours Time Spent Processing Ham: 135.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128442 89.48 96.44 87.01 2 DKIM_SIGNED 109546 74.54 82.25 71.81 3 RELAYCOUNTRY_US 105644 79.71 79.32 79.84 4 XM_DK_Pass 103916 72.42 78.02 70.43 5 DCC_CHECK 103471 48.82 77.69 38.58 6 XM_B_Unicode 102284 71.15 76.80 69.14 7 DKIM_VALID 100221 70.10 75.25 68.28 8 XMListUnsubscribeExists 90265 51.26 67.77 45.40 9 XM_B_SpammyWords 88138 49.07 66.17 43.00 10 DKIM_VALID_AU 73392 51.73 55.10 50.54 11 XM_B_Unicode3 55734 39.99 41.85 39.34 12 XM_DK_Undo_02 54385 16.59 40.83 7.98 13 BAYES_50 54291 51.19 40.76 54.89 14 XM_B_SpammyWords2 49307 22.29 37.02 17.07 15 LOC_TINY_FONT_1 46400 24.92 34.84 21.40 16 BAYES_99 44400 13.60 33.34 6.60 17 HTML_FONT_LOW_CONTRAST 44277 26.69 33.24 24.36 18 TR_XM_DKIM_Undo 42759 12.75 32.10 5.88 19 MIME_HTML_ONLY 42523 22.55 31.93 19.22 20 RCVD_IN_MSPIKE_H2 40125 26.69 30.13 25.48 21 DKIM_VALID_EF 38706 27.19 29.06 26.52 22 T_KAM_HTML_FONT_INVALID 37763 20.38 28.35 17.55 23 FVGT_m_MULTI_ODD 37595 23.65 28.23 22.03 24 BAYES_999 34662 10.73 26.02 5.31 25 TR_DCC_Bayes_99 34232 9.12 25.70 3.24 26 XMSubLong 33879 22.59 25.44 21.58 27 DCC_CHECK_NEGATIVE 29676 51.13 22.28 61.37 28 T_TM2_M_HEADER_IN_MSG 28966 29.08 21.75 31.69 29 RCVD_IN_MSPIKE_WL 27558 26.25 20.69 28.22 30 XM_Body_Dirty_Words 27244 13.38 20.45 10.86 31 RELAYCOUNTRY_META 22674 8.03 17.02 4.84 32 XM_Multi_Part_URI 21365 11.94 16.04 10.48 33 FSL_BULK_SIG 21197 9.88 15.91 7.74 34 UNTRUSTED_Relay 18698 5.03 14.04 1.84 35 BOTNET 18372 4.60 13.79 1.33 36 BOTNET_IPINHOSTNAME 18200 6.73 13.66 4.27 37 LOTS_OF_MONEY 17794 8.91 13.36 7.33 38 XM_UncommonTLD01 17725 6.07 13.31 3.50 39 XM_B_SpammyWords3 17144 6.14 12.87 3.74 40 XM_B_Unsub 16305 10.25 12.24 9.55 41 TR_XM_SpammyWords4 15239 5.95 11.44 4.00 42 RCVD_IN_MSPIKE_H3 15228 14.10 11.43 15.04 43 TR_XM_SpammyWords2 15102 3.88 11.34 1.23 44 UNPARSEABLE_RELAY 14813 8.98 11.12 8.21 45 TR_XM_UnparsRelay 14357 7.71 10.78 6.62 46 XMSexyCombo_05 13223 4.75 9.93 2.91 47 XM_Evil_Numbers_Gen 12648 8.19 9.50 7.73 48 XM_SendGrid 11691 7.76 8.78 7.40 49 SpammyFromTLD_02 11509 2.57 8.64 0.41 50 XM_B_SpammyTLD 11440 4.31 8.59 2.78 51 RCVD_IN_MSPIKE_H4 11239 10.13 8.44 10.73 52 LotsOfNums_01 11144 9.31 8.37 9.65 53 BAYES_80 10765 5.80 8.08 4.99 54 T_REMOTE_IMAGE 10670 4.89 8.01 3.79 55 HTML_IMAGE_RATIO_02 10188 6.08 7.65 5.52 56 RCVD_IN_BL_SPAMCOP_NET 9862 2.38 7.40 0.60 57 HTML_MIME_NO_HTML_TAG 9672 3.59 7.26 2.29 58 TR_XM_PhishingBody 9646 4.31 7.24 3.27 59 XM_B_Phish_Phrases 9509 4.73 7.14 3.88 60 BAYES_60 9383 8.87 7.04 9.51 61 DKIM_INVALID 9325 4.44 7.00 3.53 62 TooManyTo_001 9198 8.30 6.91 8.79 63 MPART_ALT_DIFF 8597 5.37 6.45 4.98 64 XMSubMetaSx_00 8556 4.00 6.42 3.14 65 KHOP_HELO_FCRDNS 8379 3.12 6.29 2.00 66 XMNumbers 8226 3.97 6.18 3.18 67 T_HTML_TAG_BALANCE_CENTER 8165 1.71 6.13 0.14 68 RCVD_IN_MSPIKE_BL 7642 1.88 5.74 0.51 69 HTML_IMAGE_ONLY_08 7470 1.54 5.61 0.09 70 HTML_IMAGE_RATIO_04 7239 6.04 5.44 6.25 71 XM_H_Long_From01 7056 5.26 5.30 5.25 72 PDS_OTHER_BAD_TLD 6289 1.45 4.72 0.30 73 TR_XM_DK_SendGrid 6228 4.72 4.68 4.74 74 MIXED_CENTER_CASE 6031 1.19 4.53 0.00 75 MIXED_HREF_CASE 6031 1.19 4.53 0.00 76 MIXED_IMG_CASE 6019 1.19 4.52 0.00 77 MIXED_AREA_CASE 6017 1.18 4.52 0.00 78 MIXED_FONT_CASE 6016 1.18 4.52 0.00 79 BAYES_95 6014 3.35 4.52 2.94 80 XM_UB50 5861 1.94 4.40 1.07 81 TR_XM_MSPIKECOMBO 5837 1.42 4.38 0.37 82 BODY_URI_ONLY 5783 1.15 4.34 0.01 83 XM_B_Phish66 5768 2.63 4.33 2.03 84 MIME_QP_LONG_LINE 5708 5.32 4.29 5.68 85 XM_SPF_SoftFail 5657 2.75 4.25 2.22 86 BOTNET_NORDNS 5636 1.12 4.23 0.02 87 RELAYCOUNTRY_CA 5406 1.84 4.06 1.06 88 MIME_HTML_MOSTLY 5336 2.74 4.01 2.29 89 HTML_FONT_SIZE_LARGE 5201 1.11 3.90 0.11 90 TR_XM_SpammyWords5 4967 2.02 3.73 1.42 91 URI_GOOG_STO_SPAMMY 4880 0.96 3.66 0.00 92 RCVD_IN_RP_SAFE 4864 5.75 3.65 6.49 93 TM2_M_URI_OPT_OUT 4843 3.34 3.64 3.24 94 XMStrtUSub 4769 4.11 3.58 4.30 95 TR_XM_SPAMCOP 4577 1.13 3.44 0.31 96 XM_UB99 4448 0.89 3.34 0.02 97 RCVD_IN_MSPIKE_L5 4400 0.98 3.30 0.15 98 TR_XM_SpammyWords3 4273 1.08 3.21 0.32 99 HTML_IMAGE_RATIO_06 4208 3.92 3.16 4.19 100 MIME_HTML_ONLY_MULTI 4107 3.28 3.08 3.35 101 T_XMDrugObfuBody_14 4045 2.32 3.04 2.07 102 XM_OfRef6 3934 1.35 2.95 0.78 103 URI_PHP_REDIR 3898 0.77 2.93 0.01 104 T_XMDrugObfuBody_08 3883 1.88 2.92 1.51 105 XM_B_Unsub2 3878 1.94 2.91 1.60 106 T_TooManySym_01 3847 4.70 2.89 5.34 107 RCVD_IN_RP_CERTIFIED 3819 5.09 2.87 5.88 108 RCVD_IN_IADB_LISTED 3753 5.08 2.82 5.89 109 XM_DIRTYINTL 3708 1.19 2.78 0.62 110 URIBL_DBL_SPAM 3651 0.73 2.74 0.02 111 XMSlimDrugH 3456 1.05 2.59 0.51 112 HTML_FONT_SIZE_HUGE 3445 0.74 2.59 0.09 113 XM_B_COVIDMETA 3411 1.42 2.56 1.02 114 SpammyFromTLD_01 3337 1.28 2.51 0.85 115 XM_CamelCaseFrm001 3316 1.97 2.49 1.78 116 HTML_IMAGE_RATIO_08 3312 2.51 2.49 2.51 117 RCVD_IN_IADB_SPF 3308 4.46 2.48 5.16 118 XMDiploma_00 3288 2.18 2.47 2.08 119 URI_HEX 3257 1.89 2.45 1.70 120 TM2_M_VERY_LONG_WORD 3219 1.49 2.42 1.16 121 XM_ShortIntro_01 3102 1.58 2.33 1.31 122 XM_UB999 3100 0.61 2.33 0.00 123 US_DOLLARS_3 3053 1.24 2.29 0.87 124 RCVD_IN_IADB_DK 3040 3.89 2.28 4.46 125 XM_URI_RBL 3039 0.71 2.28 0.15 126 RCVD_IN_IADB_SENDERID 3008 4.01 2.26 4.63 127 MAILING_LIST_MULTI 2995 2.75 2.25 2.93 128 DIET_1 2980 0.82 2.24 0.31 129 TR_XM_COVIDMETA4 2961 0.85 2.22 0.37 130 BAYES_00 2880 8.23 2.16 10.38 131 GOOG_STO_IMG_HTML 2878 0.57 2.16 0.00 132 T_XMHurry_00 2858 0.88 2.15 0.43 133 T_XMDrugObfuBody_00 2792 1.00 2.10 0.61 134 URI_NOVOWEL 2791 2.65 2.10 2.85 135 BAYES_40 2690 4.27 2.02 5.07 136 TR_XM_SB_Phish 2672 2.12 2.01 2.16 137 XMBody_17 2638 0.86 1.98 0.46 138 XMSubPhish11 2615 2.07 1.96 2.11 139 XMSexyCombo_01 2611 0.76 1.96 0.33 140 XM_UB60 2591 0.68 1.95 0.23 141 XM_DK_Undo_01 2560 1.75 1.92 1.68 142 HELO_NODOT 2553 2.11 1.92 2.18 143 HELO_NO_DOMAIN 2547 2.11 1.91 2.18 144 TR_XM_COVIDMETA1 2527 0.73 1.90 0.31 145 TR_XM_PHPDW 2463 0.72 1.85 0.31 146 XM_B_SpammyWords4 2414 0.77 1.81 0.40 147 MISSING_HEADERS 2362 0.91 1.77 0.61 148 MPART_ALT_DIFF_COUNT 2357 0.78 1.77 0.43 149 RCVD_IN_RP_RNBL 2335 0.50 1.75 0.05 150 ALL_TRUSTED 2329 12.61 1.75 16.46 151 TR_XM_PHPForged 2303 0.65 1.73 0.27 152 SUBJ_ALL_CAPS 2295 1.59 1.72 1.54 153 FROM_SUSPICIOUS_NTLD 2253 0.48 1.69 0.05 154 TR_XM_INV_DKIM 2247 0.52 1.69 0.10 155 HK_RANDOM_FROM 2246 0.62 1.69 0.24 156 TR_XM_FormFill2 2201 0.63 1.65 0.27 157 FROM_SUSPICIOUS_NTLD_FP 2190 0.46 1.64 0.04 158 XM_H_PHPOS 2183 0.62 1.64 0.26 159 XM_UB80 2123 0.45 1.59 0.04 160 RELAYCOUNTRY_DE 2079 0.74 1.56 0.45 161 XMGenDplmaNmb 2069 1.10 1.55 0.94 162 XMStockSpam_06 2044 0.95 1.53 0.75 163 RELAYCOUNTRY_NL 2031 0.56 1.52 0.22 164 XMWghtMeta_00 2026 0.46 1.52 0.08 165 FROM_EXCESS_BASE64 2000 2.24 1.50 2.50 166 XMBrknScrpt_02 1997 1.10 1.50 0.96 167 XM_JunkDunk 1987 0.39 1.49 0.00 168 T_FILL_THIS_FORM_SHORT 1982 1.00 1.49 0.83 169 URIBL_BLACK 1982 0.41 1.49 0.03 170 TR_Symld_Words 1927 1.62 1.45 1.68 171 REPLYTO_WITHOUT_TO_CC 1854 0.47 1.39 0.14 172 URI_TRY_3LD 1834 1.12 1.38 1.03 173 TR_XM_BayesRelay 1818 0.36 1.36 0.00 174 RCVD_IN_MSPIKE_ZBI 1805 0.46 1.36 0.14 175 RCVD_IN_IADB_VOUCHED 1793 2.97 1.35 3.55 176 T_Symld_Words_02 1776 0.70 1.33 0.48 177 TR_LOTS_OF_MONEY3 1769 0.61 1.33 0.35 178 BAYES_20 1769 2.91 1.33 3.47 179 RELAYCOUNTRY_NG_I 1731 0.42 1.30 0.11 180 USER_IN_DEF_DKIM_WL 1661 8.45 1.25 11.01 181 XM_H_Long_From02 1597 1.36 1.20 1.42 182 XMMoneyMeta_00 1590 0.75 1.19 0.59 183 XMPhish30 1575 0.71 1.18 0.54 184 XMSubMetaI_00 1565 0.64 1.18 0.44 185 RELAYCOUNTRY_GB 1553 1.21 1.17 1.22 186 PLING_QUERY 1546 0.60 1.16 0.40 187 XM_B_SEO 1506 0.41 1.13 0.16 188 XM_Body_Dirty_Words_01 1470 0.41 1.10 0.16 189 XM_H_PHPMailer 1469 0.77 1.10 0.66 190 URIBL_SBL_A 1461 0.36 1.10 0.09 191 TooManyTo_002 1418 2.00 1.06 2.33 192 XM_PDF 1408 4.23 1.06 5.35 193 ANY_BOUNCE_MESSAGE 1406 2.86 1.06 3.51 194 XMHTML_After_End 1406 1.04 1.06 1.03 195 BOUNCE_MESSAGE 1389 2.86 1.04 3.51 196 XMHTMLBadTable_001 1389 0.67 1.04 0.54 197 TR_XM_SEO4 1366 0.33 1.03 0.08 198 TR_Mismatch_TLD_02 1364 0.30 1.02 0.05 199 RELAYCOUNTRY_FR 1356 0.61 1.02 0.47 200 HTTPS_HTTP_MISMATCH 1353 0.86 1.02 0.81 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 326496 89.48 96.44 87.01 2 RELAYCOUNTRY_US 299620 79.71 79.32 79.84 3 DKIM_SIGNED 269456 74.54 82.25 71.81 4 XM_DK_Pass 264312 72.42 78.02 70.43 5 XM_B_Unicode 259460 71.15 76.80 69.14 6 DKIM_VALID 256216 70.10 75.25 68.28 7 DCC_CHECK_NEGATIVE 230289 51.13 22.28 61.37 8 BAYES_50 205990 51.19 40.76 54.89 9 DKIM_VALID_AU 189642 51.73 55.10 50.54 10 XMListUnsubscribeExists 170371 51.26 67.77 45.40 11 XM_B_SpammyWords 161362 49.07 66.17 43.00 12 XM_B_Unicode3 147612 39.99 41.85 39.34 13 DCC_CHECK 144757 48.82 77.69 38.58 14 T_TM2_M_HEADER_IN_MSG 118902 29.08 21.75 31.69 15 RCVD_IN_MSPIKE_WL 105903 26.25 20.69 28.22 16 DKIM_VALID_EF 99534 27.19 29.06 26.52 17 RCVD_IN_MSPIKE_H2 95599 26.69 30.13 25.48 18 HTML_FONT_LOW_CONTRAST 91409 26.69 33.24 24.36 19 FVGT_m_MULTI_ODD 82654 23.65 28.23 22.03 20 XMSubLong 80982 22.59 25.44 21.58 21 LOC_TINY_FONT_1 80290 24.92 34.84 21.40 22 MIME_HTML_ONLY 72141 22.55 31.93 19.22 23 T_KAM_HTML_FONT_INVALID 65866 20.38 28.35 17.55 24 XM_B_SpammyWords2 64038 22.29 37.02 17.07 25 ALL_TRUSTED 61764 12.61 1.75 16.46 26 RCVD_IN_MSPIKE_H3 56454 14.10 11.43 15.04 27 USER_IN_DEF_DKIM_WL 41322 8.45 1.25 11.01 28 XM_Body_Dirty_Words 40763 13.38 20.45 10.86 29 RCVD_IN_MSPIKE_H4 40250 10.13 8.44 10.73 30 XM_Multi_Part_URI 39331 11.94 16.04 10.48 31 BAYES_00 38960 8.23 2.16 10.38 32 LotsOfNums_01 36197 9.31 8.37 9.65 33 XM_B_Unsub 35830 10.25 12.24 9.55 34 BAYES_60 35691 8.87 7.04 9.51 35 TooManyTo_001 32990 8.30 6.91 8.79 36 UNPARSEABLE_RELAY 30824 8.98 11.12 8.21 37 XM_DK_Undo_02 29946 16.59 40.83 7.98 38 FSL_BULK_SIG 29045 9.88 15.91 7.74 39 XM_Evil_Numbers_Gen 28996 8.19 9.50 7.73 40 XM_DKIMWhitelistDomains 28700 5.65 0.02 7.65 41 XM_SendGrid 27777 7.76 8.78 7.40 42 LOTS_OF_MONEY 27499 8.91 13.36 7.33 43 TR_XM_UnparsRelay 24832 7.71 10.78 6.62 44 BAYES_99 24750 13.60 33.34 6.60 45 RCVD_IN_RP_SAFE 24372 5.75 3.65 6.49 46 HTML_IMAGE_RATIO_04 23462 6.04 5.44 6.25 47 TR_XM_DK_Bayes 23385 4.76 0.62 6.23 48 TR_XM_DK_Bayes1 22782 4.64 0.60 6.07 49 RCVD_IN_IADB_LISTED 22093 5.08 2.82 5.89 50 RCVD_IN_RP_CERTIFIED 22073 5.09 2.87 5.88 51 TR_XM_DKIM_Undo 22055 12.75 32.10 5.88 52 MIME_QP_LONG_LINE 21328 5.32 4.29 5.68 53 HTML_IMAGE_RATIO_02 20707 6.08 7.65 5.52 54 IN_ZIMBRA_NJ_WHITELIST 20121 3.97 0.06 5.36 55 XM_PDF 20077 4.23 1.06 5.35 56 T_TooManySym_01 20033 4.70 2.89 5.34 57 BAYES_999 19909 10.73 26.02 5.31 58 XM_H_Long_From01 19687 5.26 5.30 5.25 59 TR_XM_DK_Bayes2 19442 3.96 0.51 5.18 60 RCVD_IN_IADB_SPF 19374 4.46 2.48 5.16 61 BAYES_40 19037 4.27 2.02 5.07 62 BAYES_80 18712 5.80 8.08 4.99 63 MPART_ALT_DIFF 18698 5.37 6.45 4.98 64 RELAYCOUNTRY_META 18161 8.03 17.02 4.84 65 TR_XM_DK_SendGrid 17770 4.72 4.68 4.74 66 RCVD_IN_IADB_SENDERID 17372 4.01 2.26 4.63 67 RCVD_IN_IADB_DK 16724 3.89 2.28 4.46 68 XMStrtUSub 16142 4.11 3.58 4.30 69 BOTNET_IPINHOSTNAME 16023 6.73 13.66 4.27 70 XM_H_Trusted_IP 15881 3.12 0.00 4.23 71 HTML_IMAGE_RATIO_06 15738 3.92 3.16 4.19 72 TR_XM_SpammyWords4 15010 5.95 11.44 4.00 73 XM_B_Phish_Phrases 14547 4.73 7.14 3.88 74 T_REMOTE_IMAGE 14212 4.89 8.01 3.79 75 XM_B_SpammyWords3 14050 6.14 12.87 3.74 76 RCVD_IN_IADB_VOUCHED 13309 2.97 1.35 3.55 77 DKIM_INVALID 13240 4.44 7.00 3.53 78 ANY_BOUNCE_MESSAGE 13159 2.86 1.06 3.51 79 BOUNCE_MESSAGE 13155 2.86 1.04 3.51 80 XM_UncommonTLD01 13125 6.07 13.31 3.50 81 BAYES_20 13019 2.91 1.33 3.47 82 MIME_HTML_ONLY_MULTI 12561 3.28 3.08 3.35 83 TR_XM_PhishingBody 12276 4.31 7.24 3.27 84 TR_DCC_Bayes_99 12156 9.12 25.70 3.24 85 TM2_M_URI_OPT_OUT 12156 3.34 3.64 3.24 86 XMNumbers 11941 3.97 6.18 3.18 87 XMSubMetaSx_00 11790 4.00 6.42 3.14 88 BAYES_95 11039 3.35 4.52 2.94 89 MAILING_LIST_MULTI 11002 2.75 2.25 2.93 90 XMSexyCombo_05 10904 4.75 9.93 2.91 91 URI_NOVOWEL 10707 2.65 2.10 2.85 92 XM_B_SpammyTLD 10450 4.31 8.59 2.78 93 T_TooManySym_02 9777 2.12 0.74 2.61 94 HTML_IMAGE_RATIO_08 9432 2.51 2.49 2.51 95 FROM_EXCESS_BASE64 9388 2.24 1.50 2.50 96 RCVD_IN_MSPIKE_H5 9199 2.02 0.82 2.45 97 RCVD_IN_IADB_OPTIN 8781 1.97 0.93 2.34 98 TooManyTo_002 8744 2.00 1.06 2.33 99 HTML_MIME_NO_HTML_TAG 8602 3.59 7.26 2.29 100 MIME_HTML_MOSTLY 8601 2.74 4.01 2.29 101 XM_SPF_SoftFail 8348 2.75 4.25 2.22 102 HELO_NODOT 8175 2.11 1.92 2.18 103 HELO_NO_DOMAIN 8173 2.11 1.91 2.18 104 TR_XM_SB_Phish 8099 2.12 2.01 2.16 105 BAYES_05 8056 1.77 0.73 2.15 106 XMSubPhish11 7926 2.07 1.96 2.11 107 XMDiploma_00 7816 2.18 2.47 2.08 108 T_XMDrugObfuBody_14 7761 2.32 3.04 2.07 109 XM_B_Phish66 7616 2.63 4.33 2.03 110 KHOP_HELO_FCRDNS 7501 3.12 6.29 2.00 111 IN_HORDE_ADDRESS_BOOK 7053 1.41 0.08 1.88 112 INVALID_MSGID 6982 1.41 0.15 1.86 113 UNTRUSTED_Relay 6890 5.03 14.04 1.84 114 XM_CamelCaseFrm001 6681 1.97 2.49 1.78 115 XMSubNoVowel 6467 1.44 0.64 1.72 116 MSGID_NOFQDN1 6442 1.27 0.03 1.72 117 TVD_RCVD_IP 6423 1.33 0.25 1.71 118 URI_HEX 6370 1.89 2.45 1.70 119 TO_MALFORMED 6322 1.25 0.02 1.68 120 XM_DK_Undo_01 6317 1.75 1.92 1.68 121 TR_Symld_Words 6291 1.62 1.45 1.68 122 XM_B_Unsub2 5996 1.94 2.91 1.60 123 SUBJ_ALL_CAPS 5795 1.59 1.72 1.54 124 TooManyTo_003 5743 1.36 0.90 1.53 125 T_XMDrugObfuBody_08 5658 1.88 2.92 1.51 126 XM_H_Long_From02 5316 1.36 1.20 1.42 127 TR_XM_SpammyWords5 5312 2.02 3.73 1.42 128 XM_GoogleGroups 5088 1.18 0.68 1.36 129 XMCapTrack 5034 1.17 0.68 1.34 130 BOTNET 5005 4.60 13.79 1.33 131 XM_ShortIntro_01 4933 1.58 2.33 1.31 132 XMGappySubj_01 4711 0.96 0.14 1.26 133 TR_XM_SpammyWords2 4633 3.88 11.34 1.23 134 RELAYCOUNTRY_GB 4576 1.21 1.17 1.22 135 TM2_M_VERY_LONG_WORD 4356 1.49 2.42 1.16 136 TooManyTo_004 4179 1.02 0.77 1.11 137 XM_UB50 4008 1.94 4.40 1.07 138 RELAYCOUNTRY_CA 3959 1.84 4.06 1.06 139 XMHTML_After_End 3879 1.04 1.06 1.03 140 HTML_IMAGE_ONLY_20 3859 0.99 0.89 1.03 141 URI_TRY_3LD 3852 1.12 1.38 1.03 142 XM_B_COVIDMETA 3827 1.42 2.56 1.02 143 XMBrknScrpt_02 3584 1.10 1.50 0.96 144 XMNoVowels 3574 0.96 0.97 0.95 145 XMGenDplmaNmb 3530 1.10 1.55 0.94 146 HTML_FONT_FACE_BAD 3499 0.88 0.72 0.93 147 TooManyTo_005 3432 0.86 0.71 0.91 148 XMBSHREFv2 3365 0.80 0.51 0.90 149 DKIM_ADSP_CUSTOM_MED 3320 0.90 0.95 0.88 150 US_DOLLARS_3 3271 1.24 2.29 0.87 151 SpammyFromTLD_01 3194 1.28 2.51 0.85 152 TR_MetaPhish_Combo_01 3111 0.77 0.61 0.83 153 T_FILL_THIS_FORM_SHORT 3102 1.00 1.49 0.83 154 T_TooManySym_03 3057 0.66 0.22 0.81 155 HTTPS_HTTP_MISMATCH 3041 0.86 1.02 0.81 156 XM_OfRef6 2928 1.35 2.95 0.78 157 XMBody_95 2901 0.62 0.18 0.77 158 XMStockSpam_06 2809 0.95 1.53 0.75 159 XM_SPF_Unknown 2747 0.70 0.62 0.73 160 RCVD_IN_SORBS_DUL 2666 0.60 0.28 0.71 161 XMBdyGiftCard01 2618 0.77 0.98 0.70 162 XM_ProductURIs 2500 0.73 0.92 0.67 163 XM_H_PHPMailer 2462 0.77 1.10 0.66 164 T_OBFU_PDF_ATTACH 2347 0.50 0.15 0.63 165 XM_DIRTYINTL 2342 1.19 2.78 0.62 166 FROM_GOV_SPOOF 2331 0.52 0.23 0.62 167 MISSING_HEADERS 2279 0.91 1.77 0.61 168 T_XMDrugObfuBody_00 2278 1.00 2.10 0.61 169 RCVD_IN_BL_SPAMCOP_NET 2254 2.38 7.40 0.60 170 XMMoneyMeta_00 2202 0.75 1.19 0.59 171 SHORT_HELO_AND_INLINE_IMAGE 2176 0.45 0.10 0.58 172 NML_ADSP_CUSTOM_MED 2153 0.62 0.76 0.57 173 MIME_HEADER_CTYPE_ONLY 2082 0.43 0.09 0.55 174 TR_MSPIKEBAYES00 2068 0.41 0.01 0.55 175 XMHTMLBadTable_001 2033 0.67 1.04 0.54 176 XMPhish30 2021 0.71 1.18 0.54 177 TM2_M_BODY_EMPTY 1975 0.41 0.09 0.53 178 RCVD_IN_MSPIKE_BL 1902 1.88 5.74 0.51 179 XMSlimDrugH 1896 1.05 2.59 0.51 180 XM_B_COPY_HTML 1863 0.53 0.62 0.50 181 XMLngstWrd_00 1849 0.53 0.62 0.49 182 T_Symld_Words_02 1795 0.70 1.33 0.48 183 HTML_TAG_BALANCE_BODY 1785 0.58 0.88 0.48 184 FROM_GOV_DKIM_AU 1776 0.37 0.09 0.47 185 RELAYCOUNTRY_FR 1756 0.61 1.02 0.47 186 HTML_IMAGE_ONLY_32 1720 0.40 0.23 0.46 187 XMBody_17 1711 0.86 1.98 0.46 188 TVD_SPACE_RATIO 1705 0.36 0.08 0.45 189 RELAYCOUNTRY_DE 1701 0.74 1.56 0.45 190 FORGED_GMAIL_RCVD 1699 0.55 0.82 0.45 191 XMSubMetaI_00 1667 0.64 1.18 0.44 192 T_XMHurry_00 1626 0.88 2.15 0.43 193 TM2_M_A_HREF_HREF 1619 0.54 0.84 0.43 194 MPART_ALT_DIFF_COUNT 1608 0.78 1.77 0.43 195 HTML_IMAGE_ONLY_28 1606 0.43 0.44 0.43 196 XMDateMe_00 1601 0.43 0.44 0.43 197 USER_IN_WELCOMELIST 1600 0.31 0.00 0.43 198 USER_IN_WHITELIST 1600 0.31 0.00 0.43 199 XMLngstWrd_01 1588 0.47 0.60 0.42 200 MY_SERVERS_FOUND 1569 0.35 0.16 0.42 ----------------------------------------------------------------------