Email: 507252 Autolearn: 0 AvgScore: 2.83 AvgScanTime: 1.37 sec Spam: 125515 Autolearn: 0 AvgScore: 14.52 AvgScanTime: 1.59 sec Ham: 381737 Autolearn: 0 AvgScore: -1.01 AvgScanTime: 1.30 sec Time Spent Running SA: 193.25 hours Time Spent Processing Spam: 55.42 hours Time Spent Processing Ham: 137.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120284 89.72 95.83 87.71 2 DKIM_SIGNED 98376 73.43 78.38 71.80 3 XM_B_Unicode 96150 72.67 76.60 71.38 4 RELAYCOUNTRY_US 95952 79.92 76.45 81.06 5 DCC_CHECK 94540 47.70 75.32 38.62 6 XM_DK_Pass 94221 71.48 75.07 70.29 7 DKIM_VALID 91150 69.32 72.62 68.23 8 XMListUnsubscribeExists 80166 50.34 63.87 45.89 9 XM_B_SpammyWords 79733 48.92 63.52 44.12 10 DKIM_VALID_AU 66030 51.64 52.61 51.32 11 BAYES_50 57687 51.36 45.96 53.14 12 XM_B_Unicode3 52786 41.91 42.06 41.86 13 MIME_HTML_ONLY 46407 24.99 36.97 21.05 14 XM_DK_Undo_02 45897 14.85 36.57 7.71 15 XM_B_SpammyWords2 45139 22.19 35.96 17.66 16 LOC_TINY_FONT_1 40916 25.63 32.60 23.33 17 HTML_FONT_LOW_CONTRAST 39225 27.07 31.25 25.70 18 TR_XM_DKIM_Undo 36219 11.27 28.86 5.49 19 DKIM_VALID_EF 35230 26.20 28.07 25.59 20 T_KAM_HTML_FONT_INVALID 34501 20.46 27.49 18.15 21 FVGT_m_MULTI_ODD 34170 23.74 27.22 22.59 22 BAYES_99 32110 11.63 25.58 7.05 23 DCC_CHECK_NEGATIVE 30936 52.25 24.65 61.33 24 XMSubLong 30681 21.60 24.44 20.66 25 T_TM2_M_HEADER_IN_MSG 30080 28.35 23.97 29.79 26 RCVD_IN_MSPIKE_H2 27417 20.25 21.84 19.73 27 FSL_BULK_SIG 26613 11.38 21.20 8.15 28 RCVD_IN_MSPIKE_WL 25763 26.62 20.53 28.62 29 RELAYCOUNTRY_META 25272 7.73 20.13 3.66 30 BAYES_999 24172 9.25 19.26 5.96 31 XM_Body_Dirty_Words 24147 13.39 19.24 11.47 32 TR_DCC_Bayes_99 23351 6.73 18.60 2.83 33 UNTRUSTED_Relay 20521 5.03 16.35 1.31 34 BOTNET 19873 5.09 15.83 1.55 35 XM_Multi_Part_URI 19289 11.93 15.37 10.80 36 XM_UncommonTLD01 18760 6.18 14.95 3.29 37 BOTNET_IPINHOSTNAME 17752 6.57 14.14 4.08 38 LOTS_OF_MONEY 16970 8.72 13.52 7.14 39 RCVD_IN_MSPIKE_H3 15624 14.06 12.45 14.59 40 XM_B_Unsub 15327 11.76 12.21 11.62 41 UNPARSEABLE_RELAY 14874 9.42 11.85 8.62 42 TR_XM_SpammyWords4 14728 6.10 11.73 4.24 43 TR_XM_UnparsRelay 14417 7.80 11.49 6.59 44 HTML_MIME_NO_HTML_TAG 14272 4.62 11.37 2.41 45 XM_B_SpammyWords3 14152 5.60 11.28 3.73 46 SpammyFromTLD_02 13652 2.97 10.88 0.37 47 T_REMOTE_IMAGE 13552 5.67 10.80 3.98 48 TR_XM_SpammyRelay 13403 3.79 10.68 1.52 49 XMSexyCombo_05 12163 4.75 9.69 3.13 50 RCVD_IN_BL_SPAMCOP_NET 12140 3.41 9.67 1.35 51 HTML_IMAGE_RATIO_02 11932 6.62 9.51 5.67 52 XM_Evil_Numbers_Gen 11751 8.66 9.36 8.43 53 XM_SendGrid 11486 8.16 9.15 7.83 54 TR_XM_SpammyWords2 11292 2.91 9.00 0.91 55 T_HTML_TAG_BALANCE_CENTER 10851 2.20 8.65 0.09 56 XM_UB50 10649 2.71 8.48 0.81 57 HTML_IMAGE_ONLY_08 10465 2.14 8.34 0.11 58 RCVD_IN_MSPIKE_H4 9641 10.84 7.68 11.87 59 LotsOfNums_01 9335 8.90 7.44 9.38 60 BAYES_80 9236 4.84 7.36 4.01 61 KHOP_HELO_FCRDNS 9165 2.97 7.30 1.55 62 BODY_URI_ONLY 8838 1.75 7.04 0.01 63 MIXED_CENTER_CASE 8734 1.72 6.96 0.00 64 BAYES_60 8730 8.04 6.96 8.39 65 MIXED_HREF_CASE 8728 1.72 6.95 0.00 66 MIXED_IMG_CASE 8721 1.72 6.95 0.00 67 MIXED_AREA_CASE 8718 1.72 6.95 0.00 68 MIXED_FONT_CASE 8718 1.72 6.95 0.00 69 XMSubMetaSx_00 8684 4.56 6.92 3.78 70 TR_XM_PhishingBody 8574 4.34 6.83 3.52 71 MIXED_CTYPE_CASE 8520 1.68 6.79 0.01 72 HTML_FONT_SIZE_LARGE 8069 1.67 6.43 0.10 73 TooManyTo_001 7710 8.33 6.14 9.05 74 XM_B_Phish_Phrases 7611 4.34 6.06 3.77 75 XMNumbers 7518 3.79 5.99 3.06 76 MPART_ALT_DIFF 7379 5.57 5.88 5.46 77 DKIM_INVALID 7226 4.11 5.76 3.57 78 XM_H_Long_From01 7106 5.24 5.66 5.10 79 TR_XM_SPAMCOP 6551 1.54 5.22 0.33 80 TR_XM_DK_SendGrid 6394 5.02 5.09 5.00 81 GOOG_STO_IMG_HTML 6180 1.22 4.92 0.00 82 HTML_IMAGE_RATIO_04 6005 5.54 4.78 5.79 83 RELAYCOUNTRY_CA 5948 1.74 4.74 0.75 84 MIME_QP_LONG_LINE 5858 6.03 4.67 6.47 85 BOTNET_NORDNS 5693 1.13 4.54 0.01 86 TR_XM_SpammyWords5 5300 2.04 4.22 1.33 87 RCVD_IN_MSPIKE_BL 5297 1.13 4.22 0.12 88 TM2_M_URI_OPT_OUT 5227 3.98 4.16 3.92 89 XM_B_SpammyTLD 5217 2.66 4.16 2.16 90 XM_SPF_SoftFail 5210 2.55 4.15 2.02 91 XMStrtUSub 5137 4.57 4.09 4.72 92 BAYES_95 5086 2.82 4.05 2.41 93 XM_B_Phish66 5066 2.52 4.04 2.02 94 XM_B_Investor 4875 2.15 3.88 1.57 95 XM_OfRef6 4622 1.59 3.68 0.90 96 MIME_HTML_ONLY_MULTI 4595 3.74 3.66 3.77 97 TR_XM_MSPIKECOMBO 4543 0.98 3.62 0.11 98 HTML_IMAGE_RATIO_06 4377 4.54 3.49 4.89 99 RCVD_IN_RP_RNBL 4275 0.88 3.41 0.05 100 URI_GOOG_STO_SPAMMY 4218 0.83 3.36 0.00 101 MIME_HTML_MOSTLY 3998 2.60 3.19 2.40 102 T_XMDrugObfuBody_08 3821 1.75 3.04 1.32 103 BAYES_00 3720 10.77 2.96 13.33 104 BAYES_40 3719 4.75 2.96 5.34 105 XMDiploma_00 3710 1.95 2.96 1.61 106 XM_DK_Undo_01 3652 2.12 2.91 1.86 107 RCVD_IN_VALIDITY_RPBL 3569 0.73 2.84 0.04 108 RELAYCOUNTRY_NL 3563 0.82 2.84 0.16 109 DIET_1 3517 1.06 2.80 0.49 110 BAYES_20 3355 3.60 2.67 3.91 111 XM_DIRTYINTL 3347 0.86 2.67 0.27 112 MAILING_LIST_MULTI 3300 2.75 2.63 2.79 113 T_XMDrugObfuBody_14 3299 2.29 2.63 2.19 114 RCVD_IN_PSBL 3288 0.73 2.62 0.10 115 XM_B_COVIDMETA 3200 1.15 2.55 0.69 116 XM_CamelCaseFrm001 3119 1.99 2.48 1.82 117 HTML_IMAGE_RATIO_08 3112 2.59 2.48 2.63 118 T_TooManySym_01 3091 4.84 2.46 5.62 119 XM_B_Unsub2 3069 1.92 2.45 1.75 120 HTML_FONT_SIZE_HUGE 3032 0.63 2.42 0.04 121 URIBL_DBL_SPAM 2974 0.60 2.37 0.01 122 SUBJ_ALL_CAPS 2877 1.68 2.29 1.48 123 RCVD_IN_IADB_LISTED 2809 4.85 2.24 5.70 124 TR_XM_PHPDW 2804 0.81 2.23 0.34 125 TM2_M_VERY_LONG_WORD 2790 1.43 2.22 1.18 126 TR_XM_SB_Phish 2723 2.14 2.17 2.13 127 XM_URI_RBL 2703 0.61 2.15 0.10 128 TR_XM_PHPForged 2699 0.77 2.15 0.31 129 TR_XM_FormFill2 2677 0.77 2.13 0.32 130 XM_H_PHPOS 2668 0.76 2.13 0.31 131 T_XMDrugObfuBody_00 2643 1.05 2.11 0.71 132 RCVD_IN_MSPIKE_L3 2642 0.59 2.10 0.10 133 XMSubPhish11 2637 2.09 2.10 2.09 134 XM_GoogleGroups 2604 1.70 2.07 1.57 135 ALL_TRUSTED 2599 12.93 2.07 16.51 136 ALIBABA_IMG_NOT_RCVD_ALI 2596 0.51 2.07 0.00 137 HOSTED_IMG_DIRECT_MX 2584 0.51 2.06 0.00 138 RCVD_IN_IADB_SPF 2498 4.21 1.99 4.94 139 SpammyFromTLD_01 2475 1.08 1.97 0.79 140 XMSexyCombo_01 2445 1.35 1.95 1.15 141 RCVD_IN_IADB_DK 2351 3.68 1.87 4.27 142 RCVD_IN_IADB_SENDERID 2321 3.77 1.85 4.40 143 XM_B_SpammyWords4 2291 0.68 1.83 0.31 144 URI_HEX 2273 1.60 1.81 1.54 145 READY_TO_SHIP 2193 0.44 1.75 0.00 146 WANT_TO_ORDER 2191 0.44 1.75 0.00 147 TR_XM_NoHeaderRelay 2176 0.57 1.73 0.19 148 HTML_IMAGE_ONLY_20 2172 1.31 1.73 1.17 149 URIBL_BLACK 2114 0.43 1.68 0.02 150 FROM_EXCESS_BASE64 2103 2.51 1.68 2.78 151 XMBrknScrpt_02 2055 0.98 1.64 0.76 152 T_FILL_THIS_FORM_SHORT 2003 1.05 1.60 0.87 153 XMGenDplmaNmb 1998 0.95 1.59 0.74 154 XMBody_17 1953 0.59 1.56 0.27 155 TM2_M_A_HREF_HREF 1952 0.77 1.56 0.51 156 TR_LOTS_OF_MONEY3 1921 0.56 1.53 0.24 157 XM_UB60 1902 0.43 1.52 0.07 158 BAYES_05 1833 2.18 1.46 2.42 159 HTML_TITLE_SUBJ_DIFF 1819 0.65 1.45 0.39 160 TR_XM_INV_DKIM 1807 0.46 1.44 0.14 161 RCVD_IN_RP_SAFE 1800 5.80 1.43 7.24 162 HTML_SHORT_LINK_IMG_3 1780 0.69 1.42 0.45 163 TR_Symld_Words 1757 1.57 1.40 1.63 164 XMStockSpam_06 1755 1.23 1.40 1.17 165 TR_XM_COVIDMETA1 1753 0.49 1.40 0.19 166 PDS_OTHER_BAD_TLD 1735 0.57 1.38 0.30 167 RELAYCOUNTRY_DE 1733 0.61 1.38 0.35 168 TR_XM_COVIDMETA4 1726 0.53 1.38 0.25 169 TO_NO_BRKTS_PCNT 1722 0.35 1.37 0.01 170 XM_Body_Dirty_Words_01 1706 0.82 1.36 0.65 171 XM_UB99 1698 0.34 1.35 0.00 172 RELAYCOUNTRY_AU 1688 0.61 1.34 0.37 173 RCVD_IN_MSPIKE_L5 1674 0.33 1.33 0.00 174 URI_NOVOWEL 1622 2.47 1.29 2.86 175 RELAYCOUNTRY_FR 1608 0.48 1.28 0.21 176 URI_TRY_3LD 1585 0.97 1.26 0.87 177 XMHTML_After_End 1579 0.90 1.26 0.79 178 T_XMHurry_00 1575 0.58 1.25 0.35 179 XMSlimDrugH 1571 0.54 1.25 0.30 180 TR_XM_SpammyWords3 1482 0.32 1.18 0.04 181 XMPhish30 1475 0.82 1.18 0.70 182 XM_PDF 1473 3.92 1.17 4.82 183 XM_UB80 1382 0.29 1.10 0.02 184 TR_XM_DK_Bayes 1365 5.99 1.09 7.60 185 TR_XM_BayesRelay 1358 0.27 1.08 0.00 186 TR_XM_DK_Bayes1 1336 5.81 1.06 7.37 187 TR_BOTNET_NEGATE 1336 0.49 1.06 0.30 188 HTML_IMAGE_ONLY_16 1315 0.45 1.05 0.26 189 USER_IN_DEF_DKIM_WL 1310 9.06 1.04 11.69 190 XM_H_PHPMailer 1269 0.64 1.01 0.52 191 RELAYCOUNTRY_GB 1263 0.88 1.01 0.84 192 XM_UB999 1255 0.25 1.00 0.00 193 TR_LOTS_OF_MONEY2 1250 0.34 1.00 0.12 194 T_MONEY_PERCENT 1250 0.34 1.00 0.12 195 URI_PHP_REDIR 1247 0.25 0.99 0.01 196 XM_H_Undi_Recip 1232 0.36 0.98 0.16 197 XM_H_Long_From02 1227 1.17 0.98 1.23 198 XM_B_SEO 1226 0.35 0.98 0.15 199 XMMoneyMeta_00 1225 0.70 0.98 0.62 200 TR_MetaPhish_Combo_01 1208 0.91 0.96 0.89 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 334817 89.72 95.83 87.71 2 RELAYCOUNTRY_US 309448 79.92 76.45 81.06 3 DKIM_SIGNED 274087 73.43 78.38 71.80 4 XM_B_Unicode 272485 72.67 76.60 71.38 5 XM_DK_Pass 268338 71.48 75.07 70.29 6 DKIM_VALID 260463 69.32 72.62 68.23 7 DCC_CHECK_NEGATIVE 234124 52.25 24.65 61.33 8 BAYES_50 202847 51.36 45.96 53.14 9 DKIM_VALID_AU 195903 51.64 52.61 51.32 10 XMListUnsubscribeExists 175198 50.34 63.87 45.89 11 XM_B_SpammyWords 168416 48.92 63.52 44.12 12 XM_B_Unicode3 159780 41.91 42.06 41.86 13 DCC_CHECK 147435 47.70 75.32 38.62 14 T_TM2_M_HEADER_IN_MSG 113730 28.35 23.97 29.79 15 RCVD_IN_MSPIKE_WL 109262 26.62 20.53 28.62 16 HTML_FONT_LOW_CONTRAST 98102 27.07 31.25 25.70 17 DKIM_VALID_EF 97680 26.20 28.07 25.59 18 LOC_TINY_FONT_1 89078 25.63 32.60 23.33 19 FVGT_m_MULTI_ODD 86239 23.74 27.22 22.59 20 MIME_HTML_ONLY 80337 24.99 36.97 21.05 21 XMSubLong 78874 21.60 24.44 20.66 22 RCVD_IN_MSPIKE_H2 75306 20.25 21.84 19.73 23 T_KAM_HTML_FONT_INVALID 69268 20.46 27.49 18.15 24 XM_B_SpammyWords2 67409 22.19 35.96 17.66 25 ALL_TRUSTED 63006 12.93 2.07 16.51 26 RCVD_IN_MSPIKE_H3 55711 14.06 12.45 14.59 27 BAYES_00 50886 10.77 2.96 13.33 28 RCVD_IN_MSPIKE_H4 45326 10.84 7.68 11.87 29 USER_IN_DEF_DKIM_WL 44628 9.06 1.04 11.69 30 XM_B_Unsub 44340 11.76 12.21 11.62 31 XM_Body_Dirty_Words 43782 13.39 19.24 11.47 32 XM_Multi_Part_URI 41216 11.93 15.37 10.80 33 LotsOfNums_01 35806 8.90 7.44 9.38 34 TooManyTo_001 34552 8.33 6.14 9.05 35 UNPARSEABLE_RELAY 32908 9.42 11.85 8.62 36 XM_Evil_Numbers_Gen 32194 8.66 9.36 8.43 37 BAYES_60 32045 8.04 6.96 8.39 38 FSL_BULK_SIG 31114 11.38 21.20 8.15 39 XM_DKIMWhitelistDomains 30295 5.98 0.02 7.94 40 XM_SendGrid 29906 8.16 9.15 7.83 41 XM_DK_Undo_02 29426 14.85 36.57 7.71 42 TR_XM_DK_Bayes 29021 5.99 1.09 7.60 43 TR_XM_DK_Bayes1 28118 5.81 1.06 7.37 44 RCVD_IN_RP_SAFE 27619 5.80 1.43 7.24 45 LOTS_OF_MONEY 27245 8.72 13.52 7.14 46 BAYES_99 26898 11.63 25.58 7.05 47 TR_XM_UnparsRelay 25159 7.80 11.49 6.59 48 MIME_QP_LONG_LINE 24714 6.03 4.67 6.47 49 RCVD_IN_RP_CERTIFIED 24038 4.93 0.76 6.30 50 TR_XM_DK_Bayes2 24006 4.94 0.85 6.29 51 RCVD_IN_VALIDITY_SAFE 23772 4.86 0.71 6.23 52 BAYES_999 22765 9.25 19.26 5.96 53 HTML_IMAGE_RATIO_04 22108 5.54 4.78 5.79 54 RCVD_IN_IADB_LISTED 21775 4.85 2.24 5.70 55 HTML_IMAGE_RATIO_02 21653 6.62 9.51 5.67 56 T_TooManySym_01 21446 4.84 2.46 5.62 57 TR_XM_DKIM_Undo 20963 11.27 28.86 5.49 58 MPART_ALT_DIFF 20857 5.57 5.88 5.46 59 RCVD_IN_VALIDITY_CERTIFIED 20642 4.13 0.23 5.41 60 BAYES_40 20377 4.75 2.96 5.34 61 XM_H_Trusted_IP 19829 3.91 0.00 5.19 62 XM_H_Long_From01 19456 5.24 5.66 5.10 63 TR_XM_DK_SendGrid 19089 5.02 5.09 5.00 64 RCVD_IN_IADB_SPF 18842 4.21 1.99 4.94 65 HTML_IMAGE_RATIO_06 18657 4.54 3.49 4.89 66 XM_PDF 18402 3.92 1.17 4.82 67 XMStrtUSub 18024 4.57 4.09 4.72 68 RCVD_IN_IADB_SENDERID 16807 3.77 1.85 4.40 69 RCVD_IN_IADB_DK 16304 3.68 1.87 4.27 70 TR_XM_SpammyWords4 16203 6.10 11.73 4.24 71 BOTNET_IPINHOSTNAME 15567 6.57 14.14 4.08 72 BAYES_80 15307 4.84 7.36 4.01 73 T_REMOTE_IMAGE 15189 5.67 10.80 3.98 74 TM2_M_URI_OPT_OUT 14951 3.98 4.16 3.92 75 BAYES_20 14916 3.60 2.67 3.91 76 XMSubMetaSx_00 14436 4.56 6.92 3.78 77 XM_B_Phish_Phrases 14389 4.34 6.06 3.77 78 MIME_HTML_ONLY_MULTI 14375 3.74 3.66 3.77 79 XM_B_SpammyWords3 14254 5.60 11.28 3.73 80 RELAYCOUNTRY_META 13955 7.73 20.13 3.66 81 RCVD_IN_IADB_VOUCHED 13769 2.94 0.90 3.61 82 ANY_BOUNCE_MESSAGE 13745 2.90 0.76 3.60 83 BOUNCE_MESSAGE 13740 2.90 0.76 3.60 84 DKIM_INVALID 13624 4.11 5.76 3.57 85 TR_XM_PhishingBody 13423 4.34 6.83 3.52 86 XM_UncommonTLD01 12577 6.18 14.95 3.29 87 XMSexyCombo_05 11956 4.75 9.69 3.13 88 XMNumbers 11686 3.79 5.99 3.06 89 T_TooManySym_02 11064 2.37 0.76 2.90 90 URI_NOVOWEL 10906 2.47 1.29 2.86 91 TR_DCC_Bayes_99 10811 6.73 18.60 2.83 92 MAILING_LIST_MULTI 10664 2.75 2.63 2.79 93 FROM_EXCESS_BASE64 10615 2.51 1.68 2.78 94 HTML_IMAGE_RATIO_08 10041 2.59 2.48 2.63 95 BAYES_05 9246 2.18 1.46 2.42 96 BAYES_95 9202 2.82 4.05 2.41 97 HTML_MIME_NO_HTML_TAG 9182 4.62 11.37 2.41 98 MIME_HTML_MOSTLY 9174 2.60 3.19 2.40 99 XMSubNoVowel 8942 1.92 0.62 2.34 100 TooManyTo_002 8715 1.93 0.84 2.28 101 RCVD_IN_IADB_OPTIN 8628 1.86 0.63 2.26 102 T_XMDrugObfuBody_14 8342 2.29 2.63 2.19 103 XM_B_SpammyTLD 8256 2.66 4.16 2.16 104 RCVD_IN_MSPIKE_H5 8225 1.72 0.40 2.15 105 TR_XM_SB_Phish 8133 2.14 2.17 2.13 106 XMSubPhish11 7970 2.09 2.10 2.09 107 XM_SPF_SoftFail 7725 2.55 4.15 2.02 108 XM_B_Phish66 7695 2.52 4.04 2.02 109 HELO_NODOT 7532 1.64 0.63 1.97 110 HELO_NO_DOMAIN 7529 1.64 0.63 1.97 111 IN_HORDE_ADDRESS_BOOK 7155 1.44 0.10 1.87 112 XM_DK_Undo_01 7099 2.12 2.91 1.86 113 XM_CamelCaseFrm001 6964 1.99 2.48 1.82 114 INVALID_MSGID 6858 1.40 0.18 1.80 115 XM_B_Unsub2 6689 1.92 2.45 1.75 116 TR_Symld_Words 6228 1.57 1.40 1.63 117 XMDiploma_00 6163 1.95 2.96 1.61 118 MSGID_NOFQDN1 6140 1.22 0.05 1.61 119 TooManyTo_003 6017 1.35 0.66 1.58 120 XM_B_Investor 6009 2.15 3.88 1.57 121 XM_GoogleGroups 5999 1.70 2.07 1.57 122 TO_MALFORMED 5999 1.19 0.01 1.57 123 BOTNET 5928 5.09 15.83 1.55 124 KHOP_HELO_FCRDNS 5921 2.97 7.30 1.55 125 URI_HEX 5867 1.60 1.81 1.54 126 TR_XM_SpammyRelay 5810 3.79 10.68 1.52 127 SUBJ_ALL_CAPS 5663 1.68 2.29 1.48 128 TVD_RCVD_IP 5362 1.15 0.38 1.40 129 RCVD_IN_BL_SPAMCOP_NET 5161 3.41 9.67 1.35 130 TR_XM_SpammyWords5 5069 2.04 4.22 1.33 131 T_XMDrugObfuBody_08 5055 1.75 3.04 1.32 132 HTML_FONT_FACE_BAD 4989 1.17 0.76 1.31 133 UNTRUSTED_Relay 4988 5.03 16.35 1.31 134 XMCapTrack 4837 1.07 0.47 1.27 135 XM_H_Long_From02 4685 1.17 0.98 1.23 136 TVD_SPACE_RATIO_MINFP 4534 0.91 0.08 1.19 137 XMGappySubj_01 4529 0.92 0.12 1.19 138 TM2_M_VERY_LONG_WORD 4489 1.43 2.22 1.18 139 XMStockSpam_06 4472 1.23 1.40 1.17 140 HTML_IMAGE_ONLY_20 4453 1.31 1.73 1.17 141 XMSexyCombo_01 4408 1.35 1.95 1.15 142 TooManyTo_004 4170 0.95 0.53 1.09 143 XMBSHREFv2 4133 0.91 0.37 1.08 144 DKIM_ADSP_CUSTOM_MED 3703 0.95 0.89 0.97 145 XM_ProductURIs 3513 0.91 0.89 0.92 146 TVD_SPACE_RATIO 3505 0.72 0.10 0.92 147 TR_XM_SpammyWords2 3473 2.91 9.00 0.91 148 XM_OfRef6 3423 1.59 3.68 0.90 149 TR_MetaPhish_Combo_01 3409 0.91 0.96 0.89 150 T_FILL_THIS_FORM_SHORT 3338 1.05 1.60 0.87 151 URI_TRY_3LD 3323 0.97 1.26 0.87 152 TooManyTo_005 3300 0.76 0.45 0.86 153 RELAYCOUNTRY_GB 3194 0.88 1.01 0.84 154 HTTPS_HTTP_MISMATCH 3187 0.86 0.94 0.83 155 XM_UB50 3078 2.71 8.48 0.81 156 IN_ZIMBRA_NJ_WHITELIST 3061 0.60 0.00 0.80 157 SpammyFromTLD_01 3016 1.08 1.97 0.79 158 XMHTML_After_End 3005 0.90 1.26 0.79 159 XMBrknScrpt_02 2900 0.98 1.64 0.76 160 T_TooManySym_03 2875 0.64 0.31 0.75 161 RELAYCOUNTRY_CA 2865 1.74 4.74 0.75 162 XMGenDplmaNmb 2832 0.95 1.59 0.74 163 XMBody_95 2781 0.58 0.14 0.73 164 FROM_GOV_DKIM_AU 2722 0.58 0.19 0.71 165 T_XMDrugObfuBody_00 2700 1.05 2.11 0.71 166 XMPhish30 2689 0.82 1.18 0.70 167 XM_ShortIntro_01 2669 0.69 0.67 0.70 168 XM_B_COVIDMETA 2630 1.15 2.55 0.69 169 RCVD_IN_SORBS_DUL 2581 0.59 0.33 0.68 170 XMLngstWrd_00 2540 0.58 0.31 0.67 171 XM_Body_Dirty_Words_01 2465 0.82 1.36 0.65 172 NML_ADSP_CUSTOM_MED 2417 0.66 0.72 0.63 173 XMSubMetaI_00 2404 0.70 0.91 0.63 174 XMMoneyMeta_00 2348 0.70 0.98 0.62 175 XMNoVowels 2324 0.59 0.52 0.61 176 XMBdyGiftCard01 2202 0.58 0.58 0.58 177 T_OBFU_PDF_ATTACH 2201 0.50 0.26 0.58 178 XMLngstWrd_01 2177 0.50 0.27 0.57 179 TR_MSPIKEBAYES00 2115 0.44 0.10 0.55 180 FORGED_GMAIL_RCVD 2076 0.59 0.75 0.54 181 SHORT_HELO_AND_INLINE_IMAGE 2000 0.42 0.10 0.52 182 XM_H_PHPMailer 1967 0.64 1.01 0.52 183 TM2_M_A_HREF_HREF 1940 0.77 1.56 0.51 184 TM2_M_BODY_EMPTY 1935 0.41 0.11 0.51 185 SHORT_URI_3 1900 0.44 0.27 0.50 186 HTML_TAG_BALANCE_BODY 1884 0.57 0.80 0.49 187 HTML_IMAGE_ONLY_28 1878 0.52 0.59 0.49 188 XMHTMLBadTable_001 1869 0.46 0.37 0.49 189 XM_B_COPY_HTML 1860 0.55 0.73 0.49 190 DIET_1 1859 1.06 2.80 0.49 191 HTML_IMAGE_ONLY_32 1811 0.40 0.18 0.47 192 HTML_SHORT_LINK_IMG_3 1735 0.69 1.42 0.45 193 XMDateMe_00 1735 0.45 0.42 0.45 194 XMLngstWrd_02 1729 0.39 0.20 0.45 195 XM_USANA_RCVD 1724 0.34 0.00 0.45 196 T_Symld_Words_02 1713 0.56 0.89 0.45 197 MISSING_HEADERS 1634 0.44 0.49 0.43 198 RDNS_DYNAMIC 1620 0.52 0.79 0.42 199 MPART_ALT_DIFF_COUNT 1597 0.46 0.59 0.42 200 XMBody_78 1576 0.49 0.74 0.41 ----------------------------------------------------------------------