Email: 557578 Autolearn: 0 AvgScore: 3.49 AvgScanTime: 1.42 sec Spam: 134947 Autolearn: 0 AvgScore: 14.55 AvgScanTime: 1.77 sec Ham: 422631 Autolearn: 0 AvgScore: -0.05 AvgScanTime: 1.32 sec Time Spent Running SA: 220.67 hours Time Spent Processing Spam: 66.18 hours Time Spent Processing Ham: 154.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 129353 89.64 95.85 87.65 2 DKIM_SIGNED 106724 67.58 79.09 63.90 3 DCC_CHECK 105333 52.08 78.06 43.79 4 XM_DK_Pass 103230 65.88 76.50 62.49 5 RELAYCOUNTRY_US 101550 71.39 75.25 70.15 6 DKIM_VALID 99766 63.74 73.93 60.49 7 XM_B_Unicode 99258 73.28 73.55 73.19 8 XM_B_SpammyWords 88692 45.31 65.72 38.79 9 XMListUnsubscribeExists 87965 45.36 65.18 39.04 10 DKIM_VALID_AU 73371 47.44 54.37 45.23 11 BAYES_50 57832 53.72 42.86 57.19 12 XM_B_Unicode3 55616 36.89 41.21 35.51 13 XM_DK_Undo_02 53564 14.19 39.69 6.05 14 XM_B_SpammyWords2 48838 21.12 36.19 16.30 15 MIME_HTML_ONLY 46462 29.82 34.43 28.35 16 LOC_TINY_FONT_1 44717 23.02 33.14 19.80 17 TR_XM_DKIM_Undo 42577 11.11 31.55 4.58 18 HTML_FONT_LOW_CONTRAST 41968 23.91 31.10 21.62 19 RCVD_IN_MSPIKE_H2 39664 24.21 29.39 22.55 20 T_KAM_HTML_FONT_INVALID 39588 19.01 29.34 15.71 21 DKIM_VALID_EF 38648 24.46 28.64 23.13 22 BAYES_99 37717 10.34 27.95 4.72 23 XMSubLong 34554 20.39 25.61 18.73 24 FVGT_m_MULTI_ODD 34525 21.72 25.58 20.49 25 RELAYCOUNTRY_META 30071 8.84 22.28 4.55 26 DCC_CHECK_NEGATIVE 29556 47.88 21.90 56.17 27 TR_DCC_Bayes_99 29291 6.85 21.71 2.10 28 BAYES_999 28953 8.15 21.46 3.90 29 T_TM2_M_HEADER_IN_MSG 28782 27.03 21.33 28.86 30 XM_Body_Dirty_Words 26839 12.60 19.89 10.28 31 RCVD_IN_MSPIKE_WL 26238 23.52 19.44 24.83 32 FSL_BULK_SIG 25737 9.75 19.07 6.77 33 UNTRUSTED_Relay 23545 5.81 17.45 2.09 34 BOTNET 21300 4.73 15.78 1.20 35 XM_Multi_Part_URI 20593 10.91 15.26 9.52 36 XM_UncommonTLD01 20247 6.00 15.00 3.13 37 BOTNET_IPINHOSTNAME 18509 6.09 13.72 3.65 38 LOTS_OF_MONEY 18233 7.71 13.51 5.86 39 XM_B_SpammyWords3 16650 5.77 12.34 3.67 40 UNPARSEABLE_RELAY 15199 7.87 11.26 6.79 41 XM_B_Unsub 14843 9.42 11.00 8.92 42 TR_XM_UnparsRelay 14644 6.56 10.85 5.19 43 TR_XM_SpammyWords4 14503 5.35 10.75 3.63 44 XMSexyCombo_05 14293 5.29 10.59 3.60 45 RCVD_IN_MSPIKE_H3 14263 12.43 10.57 13.03 46 SpammyFromTLD_02 13583 2.70 10.07 0.35 47 TR_XM_SpammyWords2 13054 3.04 9.67 0.92 48 RCVD_IN_BL_SPAMCOP_NET 12849 2.91 9.52 0.80 49 XM_Evil_Numbers_Gen 12759 7.98 9.45 7.51 50 T_REMOTE_IMAGE 11749 4.59 8.71 3.27 51 XM_SendGrid 11616 6.71 8.61 6.10 52 HTML_IMAGE_RATIO_02 11399 5.43 8.45 4.46 53 BAYES_60 11229 9.04 8.32 9.27 54 MPART_ALT_DIFF 11195 5.16 8.30 4.16 55 XMSubMetaSx_00 11177 4.50 8.28 3.30 56 LotsOfNums_01 10945 7.98 8.11 7.93 57 HTML_MIME_NO_HTML_TAG 10863 11.87 8.05 13.09 58 RCVD_IN_MSPIKE_H4 10697 9.14 7.93 9.53 59 XM_UB50 10639 3.16 7.88 1.65 60 BAYES_80 10224 4.52 7.58 3.55 61 XM_B_Phish_Phrases 10076 5.00 7.47 4.21 62 KHOP_HELO_FCRDNS 9924 2.96 7.35 1.56 63 TR_XM_PhishingBody 8840 3.83 6.55 2.96 64 TooManyTo_001 8839 7.62 6.55 7.96 65 MIME_HTML_MOSTLY 8665 3.03 6.42 1.95 66 RCVD_IN_MSPIKE_BL 8589 1.77 6.36 0.31 67 T_HTML_TAG_BALANCE_CENTER 8584 1.61 6.36 0.09 68 TR_XM_MSPIKECOMBO 8539 1.76 6.33 0.30 69 HTML_IMAGE_ONLY_08 8520 1.60 6.31 0.10 70 XM_H_Long_From01 7556 4.85 5.60 4.62 71 MIXED_CENTER_CASE 7004 1.26 5.19 0.00 72 MIXED_HREF_CASE 6981 1.25 5.17 0.00 73 MIXED_AREA_CASE 6980 1.25 5.17 0.00 74 MIXED_FONT_CASE 6975 1.25 5.17 0.00 75 DKIM_INVALID 6958 3.84 5.16 3.42 76 BODY_URI_ONLY 6901 1.25 5.11 0.01 77 MIXED_IMG_CASE 6755 1.21 5.01 0.00 78 URI_NOVOWEL 6728 3.02 4.99 2.40 79 HTML_IMAGE_RATIO_04 6550 4.87 4.85 4.88 80 TR_XM_SPAMCOP 6493 1.34 4.81 0.23 81 TR_XM_DK_SendGrid 6449 4.06 4.78 3.82 82 TR_XM_SpammyRelay 5836 1.38 4.32 0.44 83 BAYES_95 5772 2.67 4.28 2.15 84 RELAYCOUNTRY_CA 5749 1.69 4.26 0.87 85 XMStrtUSub 5721 3.93 4.24 3.83 86 HTML_FONT_SIZE_LARGE 5671 1.08 4.20 0.08 87 XM_SPF_SoftFail 5669 2.30 4.20 1.70 88 XMNumbers 5611 3.02 4.16 2.66 89 MIME_QP_LONG_LINE 5594 4.47 4.15 4.58 90 XM_B_SpammyTLD 5476 2.32 4.06 1.76 91 XM_B_Phish66 5254 2.30 3.89 1.79 92 URI_GOOG_STO_SPAMMY 5139 0.92 3.81 0.00 93 SpammyFromTLD_01 5137 1.46 3.81 0.71 94 HTML_IMAGE_RATIO_06 5017 4.16 3.72 4.30 95 TR_XM_SpammyWords5 4785 1.72 3.55 1.14 96 RCVD_IN_PSBL 4782 0.88 3.54 0.02 97 URIBL_DBL_SPAM 4752 0.86 3.52 0.01 98 XM_OfRef6 4677 1.44 3.47 0.79 99 XMNoVowels 4659 2.44 3.45 2.11 100 RCVD_IN_RP_SAFE 4399 5.32 3.26 5.98 101 TM2_M_URI_OPT_OUT 4394 3.15 3.26 3.12 102 T_XMDrugObfuBody_14 4178 2.22 3.10 1.94 103 XMDiploma_00 4171 1.64 3.09 1.17 104 RCVD_IN_MSPIKE_L4 4117 0.82 3.05 0.10 105 T_XMDrugObfuBody_08 3962 1.89 2.94 1.56 106 JH_SPAMMY_HEADERS 3958 0.71 2.93 0.00 107 HTML_FONT_SIZE_HUGE 3948 0.74 2.93 0.04 108 RCVD_IN_IADB_LISTED 3943 4.25 2.92 4.68 109 GOOG_STO_IMG_HTML 3863 0.69 2.86 0.00 110 T_TooManySym_01 3824 4.68 2.83 5.27 111 MIME_HTML_ONLY_MULTI 3760 2.82 2.79 2.83 112 BAYES_40 3760 4.24 2.79 4.70 113 XM_DIRTYINTL 3721 1.37 2.76 0.93 114 XM_B_COVIDMETA 3661 1.21 2.71 0.72 115 BAYES_00 3596 9.79 2.66 12.07 116 RCVD_IN_IADB_SPF 3488 3.71 2.58 4.07 117 XM_UB99 3442 0.62 2.55 0.00 118 HTML_IMAGE_RATIO_08 3425 2.23 2.54 2.13 119 RELAYCOUNTRY_IN 3373 0.69 2.50 0.11 120 RCVD_IN_RP_RNBL 3361 0.63 2.49 0.04 121 URI_HEX 3345 1.48 2.48 1.17 122 RCVD_IN_RP_CERTIFIED 3318 4.68 2.46 5.40 123 RCVD_IN_IADB_DK 3277 3.25 2.43 3.52 124 RCVD_IN_IADB_SENDERID 3269 3.33 2.42 3.62 125 XM_B_SpammyWords4 3193 0.81 2.37 0.31 126 XMSexyCombo_01 3129 0.95 2.32 0.51 127 TM2_M_VERY_LONG_WORD 3107 1.34 2.30 1.04 128 TR_XM_SB_Phish 3091 1.96 2.29 1.85 129 BAYES_20 3060 3.63 2.27 4.06 130 XM_CamelCaseFrm001 3037 1.72 2.25 1.55 131 RCVD_IN_MSPIKE_L5 3029 0.60 2.24 0.08 132 MIXED_CTYPE_CASE 3010 0.54 2.23 0.00 133 XMSubPhish11 2953 1.90 2.19 1.81 134 XM_UB60 2913 0.58 2.16 0.08 135 T_XMDrugObfuBody_00 2857 1.04 2.12 0.70 136 SUBJ_ALL_CAPS 2854 1.63 2.11 1.48 137 MAILING_LIST_MULTI 2826 2.31 2.09 2.38 138 XM_B_Unsub2 2820 1.64 2.09 1.50 139 XM_URI_RBL 2800 0.56 2.07 0.07 140 PDS_OTHER_BAD_TLD 2782 0.70 2.06 0.27 141 TR_XM_SpammyWords3 2779 0.67 2.06 0.22 142 BOTNET_NORDNS 2656 0.48 1.97 0.01 143 T_FILL_THIS_FORM_SHORT 2579 1.08 1.91 0.82 144 FROM_EXCESS_BASE64 2561 2.22 1.90 2.33 145 DIET_1 2514 0.70 1.86 0.33 146 TR_XM_PHPDW 2481 0.63 1.84 0.25 147 TR_XM_PHPForged 2452 0.60 1.82 0.21 148 ALL_TRUSTED 2447 20.50 1.81 26.46 149 XMSlimDrugH 2445 0.67 1.81 0.30 150 TR_XM_COVIDMETA4 2436 0.67 1.81 0.31 151 TR_XM_COVIDMETA1 2377 0.62 1.76 0.25 152 TR_XM_FormFill2 2361 0.59 1.75 0.22 153 XM_H_PHPOS 2341 0.58 1.73 0.21 154 XM_DK_Undo_01 2339 1.58 1.73 1.54 155 XMBody_17 2326 0.67 1.72 0.34 156 XM_UB999 2325 0.42 1.72 0.00 157 URIBL_BLACK 2219 0.41 1.64 0.01 158 XM_DrugUnitList 2144 0.39 1.59 0.00 159 ALIBABA_IMG_NOT_RCVD_ALI 2144 0.39 1.59 0.00 160 HOSTED_IMG_DIRECT_MX 2136 0.38 1.58 0.00 161 XMGenDplmaNmb 2127 0.93 1.58 0.73 162 RELAYCOUNTRY_NL 2030 0.47 1.50 0.14 163 USER_IN_DEF_DKIM_WL 2024 7.97 1.50 10.03 164 XMSubNoVowel 2004 1.58 1.49 1.61 165 T_XMHurry_00 1988 0.69 1.47 0.45 166 XM_B_Investor 1941 0.69 1.44 0.45 167 XMStockSpam_06 1916 1.17 1.42 1.09 168 XMHTML_After_End 1912 0.99 1.42 0.85 169 XMBrknScrpt_02 1899 0.84 1.41 0.65 170 URI_TRY_3LD 1895 0.92 1.40 0.76 171 RELAYCOUNTRY_DE 1853 0.79 1.37 0.60 172 XM_UB80 1852 0.34 1.37 0.01 173 XM_Body_Dirty_Words_01 1838 0.40 1.36 0.10 174 HELO_NO_DOMAIN 1831 1.54 1.36 1.59 175 HELO_NODOT 1831 1.54 1.36 1.59 176 RELAYCOUNTRY_AU 1795 0.58 1.33 0.33 177 XM_PDF 1788 3.85 1.32 4.66 178 TR_Symld_Words 1761 1.32 1.30 1.32 179 BAYES_05 1757 2.05 1.30 2.28 180 RELAYCOUNTRY_GB 1754 0.96 1.30 0.86 181 TR_XM_INV_DKIM 1749 0.36 1.30 0.06 182 XM_H_Long_From02 1724 1.14 1.28 1.09 183 TR_LOTS_OF_MONEY3 1701 0.51 1.26 0.28 184 RCVD_IN_IADB_VOUCHED 1687 2.52 1.25 2.92 185 MPART_ALT_DIFF_COUNT 1670 0.59 1.24 0.38 186 T_Symld_Words_02 1664 0.64 1.23 0.46 187 DATE_IN_PAST_03_06 1655 0.51 1.23 0.29 188 RELAYCOUNTRY_CN 1645 0.35 1.22 0.08 189 TooManyTo_002 1601 1.91 1.19 2.14 190 MIME_CHARSET_FARAWAY 1601 0.39 1.19 0.13 191 XMMoneyMeta_00 1578 0.73 1.17 0.60 192 HTTPS_HTTP_MISMATCH 1552 0.77 1.15 0.65 193 TR_Mismatch_TLD_02 1526 0.32 1.13 0.06 194 TR_BOTNET_NEGATE 1506 0.47 1.12 0.26 195 URIBL_SBL_A 1476 0.36 1.09 0.13 196 XMSubject_48 1454 0.27 1.08 0.01 197 XM_UB95 1442 0.26 1.07 0.01 198 XMSubMetaI_00 1434 0.52 1.06 0.35 199 URI_NO_WWW_BIZ_CGI 1429 0.27 1.06 0.01 200 TR_XM_BayesRelay 1422 0.26 1.05 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 370435 89.64 95.85 87.65 2 XM_B_Unicode 309337 73.28 73.55 73.19 3 RELAYCOUNTRY_US 296489 71.39 75.25 70.15 4 DKIM_SIGNED 270067 67.58 79.09 63.90 5 XM_DK_Pass 264091 65.88 76.50 62.49 6 DKIM_VALID 255632 63.74 73.93 60.49 7 BAYES_50 241708 53.72 42.86 57.19 8 DCC_CHECK_NEGATIVE 237388 47.88 21.90 56.17 9 DKIM_VALID_AU 191169 47.44 54.37 45.23 10 DCC_CHECK 185061 52.08 78.06 43.79 11 XMListUnsubscribeExists 164980 45.36 65.18 39.04 12 XM_B_SpammyWords 163930 45.31 65.72 38.79 13 XM_B_Unicode3 150097 36.89 41.21 35.51 14 T_TM2_M_HEADER_IN_MSG 121956 27.03 21.33 28.86 15 MIME_HTML_ONLY 119816 29.82 34.43 28.35 16 ALL_TRUSTED 111841 20.50 1.81 26.46 17 RCVD_IN_MSPIKE_WL 104922 23.52 19.44 24.83 18 DKIM_VALID_EF 97750 24.46 28.64 23.13 19 RCVD_IN_MSPIKE_H2 95300 24.21 29.39 22.55 20 HTML_FONT_LOW_CONTRAST 91367 23.91 31.10 21.62 21 FVGT_m_MULTI_ODD 86598 21.72 25.58 20.49 22 LOC_TINY_FONT_1 83663 23.02 33.14 19.80 23 XMSubLong 79162 20.39 25.61 18.73 24 XM_B_SpammyWords2 68909 21.12 36.19 16.30 25 T_KAM_HTML_FONT_INVALID 66395 19.01 29.34 15.71 26 HTML_MIME_NO_HTML_TAG 55313 11.87 8.05 13.09 27 RCVD_IN_MSPIKE_H3 55049 12.43 10.57 13.03 28 BAYES_00 51012 9.79 2.66 12.07 29 T_HTML_ATTACH 48409 8.85 0.71 11.45 30 XM_Body_Dirty_Words 43440 12.60 19.89 10.28 31 USER_IN_DEF_DKIM_WL 42407 7.97 1.50 10.03 32 RCVD_IN_MSPIKE_H4 40259 9.14 7.93 9.53 33 XM_Multi_Part_URI 40220 10.91 15.26 9.52 34 BAYES_60 39171 9.04 8.32 9.27 35 XM_B_Unsub 37708 9.42 11.00 8.92 36 TooManyTo_001 33646 7.62 6.55 7.96 37 LotsOfNums_01 33532 7.98 8.11 7.93 38 XM_Evil_Numbers_Gen 31759 7.98 9.45 7.51 39 TR_XM_DK_Bayes 29613 5.49 0.76 7.01 40 TR_XM_DK_Bayes1 28744 5.33 0.73 6.80 41 UNPARSEABLE_RELAY 28710 7.87 11.26 6.79 42 FSL_BULK_SIG 28628 9.75 19.07 6.77 43 XM_DKIMWhitelistDomains 28564 5.14 0.05 6.76 44 XM_SendGrid 25772 6.71 8.61 6.10 45 XM_DK_Undo_02 25567 14.19 39.69 6.05 46 RCVD_IN_RP_SAFE 25277 5.32 3.26 5.98 47 LOTS_OF_MONEY 24750 7.71 13.51 5.86 48 TR_XM_DK_Bayes2 24229 4.48 0.57 5.73 49 RCVD_IN_RP_CERTIFIED 22801 4.68 2.46 5.40 50 T_TooManySym_01 22265 4.68 2.83 5.27 51 TR_XM_UnparsRelay 21940 6.56 10.85 5.19 52 HTML_IMAGE_RATIO_04 20624 4.87 4.85 4.88 53 BAYES_99 19945 10.34 27.95 4.72 54 BAYES_40 19883 4.24 2.79 4.70 55 RCVD_IN_IADB_LISTED 19758 4.25 2.92 4.68 56 XM_PDF 19676 3.85 1.32 4.66 57 XM_H_Long_From01 19512 4.85 5.60 4.62 58 TR_XM_DKIM_Undo 19371 11.11 31.55 4.58 59 ANY_BOUNCE_MESSAGE 19351 3.70 0.93 4.58 60 BOUNCE_MESSAGE 19349 3.70 0.93 4.58 61 MIME_QP_LONG_LINE 19340 4.47 4.15 4.58 62 RELAYCOUNTRY_META 19218 8.84 22.28 4.55 63 HTML_IMAGE_RATIO_02 18864 5.43 8.45 4.46 64 HTML_IMAGE_RATIO_06 18193 4.16 3.72 4.30 65 XM_B_Phish_Phrases 17790 5.00 7.47 4.21 66 MPART_ALT_DIFF 17586 5.16 8.30 4.16 67 RCVD_IN_IADB_SPF 17212 3.71 2.58 4.07 68 BAYES_20 17174 3.63 2.27 4.06 69 XM_H_Trusted_IP 16905 3.03 0.00 4.00 70 BAYES_999 16476 8.15 21.46 3.90 71 XMStrtUSub 16166 3.93 4.24 3.83 72 TR_XM_DK_SendGrid 16161 4.06 4.78 3.82 73 XM_B_SpammyWords3 15495 5.77 12.34 3.67 74 BOTNET_IPINHOSTNAME 15431 6.09 13.72 3.65 75 TR_XM_SpammyWords4 15331 5.35 10.75 3.63 76 RCVD_IN_IADB_SENDERID 15313 3.33 2.42 3.62 77 XMSexyCombo_05 15205 5.29 10.59 3.60 78 BAYES_80 14987 4.52 7.58 3.55 79 RCVD_IN_IADB_DK 14857 3.25 2.43 3.52 80 DKIM_INVALID 14435 3.84 5.16 3.42 81 XMSubMetaSx_00 13936 4.50 8.28 3.30 82 T_REMOTE_IMAGE 13841 4.59 8.71 3.27 83 XM_UncommonTLD01 13219 6.00 15.00 3.13 84 TM2_M_URI_OPT_OUT 13186 3.15 3.26 3.12 85 TR_XM_PhishingBody 12528 3.83 6.55 2.96 86 RCVD_IN_IADB_VOUCHED 12360 2.52 1.25 2.92 87 MIME_HTML_ONLY_MULTI 11953 2.82 2.79 2.83 88 XMNumbers 11221 3.02 4.16 2.66 89 URI_NOVOWEL 10138 3.02 4.99 2.40 90 MAILING_LIST_MULTI 10040 2.31 2.09 2.38 91 T_TooManySym_02 9884 2.01 0.99 2.34 92 FROM_EXCESS_BASE64 9832 2.22 1.90 2.33 93 BAYES_05 9646 2.05 1.30 2.28 94 RCVD_IN_MSPIKE_H5 9614 1.95 0.95 2.27 95 BAYES_95 9092 2.67 4.28 2.15 96 TooManyTo_002 9036 1.91 1.19 2.14 97 HTML_IMAGE_RATIO_08 9014 2.23 2.54 2.13 98 XMNoVowels 8922 2.44 3.45 2.11 99 TR_DCC_Bayes_99 8884 6.85 21.71 2.10 100 UNTRUSTED_Relay 8840 5.81 17.45 2.09 101 MIME_HTML_MOSTLY 8226 3.03 6.42 1.95 102 T_XMDrugObfuBody_14 8195 2.22 3.10 1.94 103 RCVD_IN_IADB_OPTIN 8075 1.64 0.78 1.91 104 TR_XM_SB_Phish 7810 1.96 2.29 1.85 105 XMSubPhish11 7650 1.90 2.19 1.81 106 XM_B_Phish66 7568 2.30 3.89 1.79 107 IN_HORDE_ADDRESS_BOOK 7555 1.38 0.09 1.79 108 XM_B_SpammyTLD 7458 2.32 4.06 1.76 109 XM_SPF_SoftFail 7170 2.30 4.20 1.70 110 XM_UB50 6967 3.16 7.88 1.65 111 INVALID_MSGID 6933 1.28 0.15 1.64 112 XMSubNoVowel 6815 1.58 1.49 1.61 113 HELO_NODOT 6738 1.54 1.36 1.59 114 HELO_NO_DOMAIN 6736 1.54 1.36 1.59 115 KHOP_HELO_FCRDNS 6599 2.96 7.35 1.56 116 T_XMDrugObfuBody_08 6587 1.89 2.94 1.56 117 XM_CamelCaseFrm001 6550 1.72 2.25 1.55 118 XM_DK_Undo_01 6496 1.58 1.73 1.54 119 MSGID_NOFQDN1 6424 1.16 0.04 1.52 120 TO_MALFORMED 6356 1.14 0.00 1.50 121 XM_B_Unsub2 6334 1.64 2.09 1.50 122 SUBJ_ALL_CAPS 6257 1.63 2.11 1.48 123 TVD_RCVD_IP 6147 1.20 0.41 1.45 124 TooManyTo_003 5969 1.31 0.97 1.41 125 TR_Symld_Words 5589 1.32 1.30 1.32 126 XMCapTrack 5282 1.13 0.76 1.25 127 XM_GoogleGroups 5105 1.10 0.77 1.21 128 BOTNET 5089 4.73 15.78 1.20 129 XMDiploma_00 4946 1.64 3.09 1.17 130 URI_HEX 4935 1.48 2.48 1.17 131 TR_XM_SpammyWords5 4812 1.72 3.55 1.14 132 XM_H_Long_From02 4609 1.14 1.28 1.09 133 XMStockSpam_06 4592 1.17 1.42 1.09 134 XMGappySubj_01 4564 0.85 0.12 1.08 135 TM2_M_VERY_LONG_WORD 4379 1.34 2.30 1.04 136 TooManyTo_004 4154 0.94 0.81 0.98 137 XM_DIRTYINTL 3916 1.37 2.76 0.93 138 HTML_FONT_FACE_BAD 3915 0.88 0.72 0.93 139 TR_XM_SpammyWords2 3872 3.04 9.67 0.92 140 HTML_IMAGE_ONLY_20 3784 0.90 0.90 0.90 141 RELAYCOUNTRY_CA 3698 1.69 4.26 0.87 142 RELAYCOUNTRY_GB 3617 0.96 1.30 0.86 143 XMHTML_After_End 3598 0.99 1.42 0.85 144 T_FILL_THIS_FORM_SHORT 3453 1.08 1.91 0.82 145 RELAYCOUNTRY_FR 3452 0.84 0.93 0.82 146 HELO_MISC_IP 3424 0.68 0.29 0.81 147 DKIM_ADSP_CUSTOM_MED 3404 0.84 0.94 0.81 148 RCVD_IN_BL_SPAMCOP_NET 3380 2.91 9.52 0.80 149 XM_OfRef6 3342 1.44 3.47 0.79 150 XMBSHREFv2 3336 0.68 0.32 0.79 151 TooManyTo_005 3328 0.77 0.74 0.79 152 XM_RXBody 3316 0.76 0.70 0.78 153 URI_TRY_3LD 3216 0.92 1.40 0.76 154 IN_ZIMBRA_NJ_WHITELIST 3193 0.57 0.01 0.76 155 TR_MetaPhish_Combo_01 3187 0.81 0.99 0.75 156 XMBody_95 3114 0.59 0.14 0.74 157 XMGenDplmaNmb 3072 0.93 1.58 0.73 158 XM_B_COVIDMETA 3064 1.21 2.71 0.72 159 SpammyFromTLD_01 2989 1.46 3.81 0.71 160 T_TooManySym_03 2958 0.61 0.34 0.70 161 T_XMDrugObfuBody_00 2951 1.04 2.12 0.70 162 XMBrknScrpt_02 2757 0.84 1.41 0.65 163 HTTPS_HTTP_MISMATCH 2755 0.77 1.15 0.65 164 XMBounce_01 2748 0.51 0.08 0.65 165 URI_OPTOUT_3LD 2625 0.59 0.49 0.62 166 TR_MSPIKEBAYES00 2620 0.48 0.02 0.62 167 RELAYCOUNTRY_DE 2544 0.79 1.37 0.60 168 XMMoneyMeta_00 2519 0.73 1.17 0.60 169 XM_ShortIntro_01 2409 0.60 0.70 0.57 170 T_OBFU_PDF_ATTACH 2348 0.47 0.19 0.56 171 FROM_GOV_DKIM_AU 2316 0.46 0.17 0.55 172 NML_ADSP_CUSTOM_MED 2294 0.59 0.72 0.54 173 XMLngstWrd_00 2243 0.56 0.64 0.53 174 XMSexyCombo_01 2149 0.95 2.32 0.51 175 XMBdyGiftCard01 2137 0.54 0.63 0.51 176 RCVD_IN_SORBS_DUL 2128 0.61 0.95 0.50 177 XMHTMLBadTable_001 2088 0.53 0.64 0.49 178 XM_ProductURIs 2065 0.61 0.97 0.49 179 XMLngstWrd_01 1985 0.51 0.62 0.47 180 XM_H_PHPMailer 1932 0.55 0.84 0.46 181 T_Symld_Words_02 1925 0.64 1.23 0.46 182 TVD_SPACE_RATIO 1922 0.46 0.48 0.45 183 XM_B_Investor 1910 0.69 1.44 0.45 184 T_XMHurry_00 1887 0.69 1.47 0.45 185 XMPhish30 1876 0.59 1.04 0.44 186 XM_B_COPY_HTML 1874 0.47 0.56 0.44 187 TR_XM_SpammyRelay 1871 1.38 4.32 0.44 188 TVD_SPACE_RATIO_MINFP 1825 0.44 0.47 0.43 189 XMPhish14 1817 0.55 0.93 0.43 190 HTML_TAG_BALANCE_BODY 1785 0.49 0.69 0.42 191 XMSubMetaSxObfu_03 1784 0.51 0.76 0.42 192 HTML_IMAGE_ONLY_32 1764 0.37 0.24 0.42 193 TM2_M_BODY_EMPTY 1756 0.35 0.13 0.42 194 PLING_QUERY 1724 0.44 0.54 0.41 195 SHORT_HELO_AND_INLINE_IMAGE 1685 0.38 0.32 0.40 196 MISSING_HEADERS 1673 0.50 0.83 0.40 197 FORGED_GMAIL_RCVD 1653 0.49 0.81 0.39 198 HTML_IMAGE_ONLY_28 1641 0.42 0.50 0.39 199 NICE_REPLY_A 1623 0.30 0.03 0.38 200 MPART_ALT_DIFF_COUNT 1613 0.59 1.24 0.38 ----------------------------------------------------------------------