Email: 482200 Autolearn: 0 AvgScore: 1.77 AvgScanTime: 1.30 sec Spam: 108319 Autolearn: 0 AvgScore: 13.55 AvgScanTime: 1.54 sec Ham: 373881 Autolearn: 0 AvgScore: -1.64 AvgScanTime: 1.24 sec Time Spent Running SA: 174.73 hours Time Spent Processing Spam: 46.23 hours Time Spent Processing Ham: 128.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103260 89.07 95.33 87.26 2 DKIM_SIGNED 91654 72.47 84.61 68.95 3 XM_DK_Pass 87098 70.33 80.41 67.41 4 RELAYCOUNTRY_US 84385 78.11 77.90 78.18 5 DKIM_VALID 84152 68.09 77.69 65.31 6 XM_B_Unicode 81103 70.57 74.87 69.32 7 DCC_CHECK 80169 43.52 74.01 34.69 8 XM_B_SpammyWords 76148 48.32 70.30 41.95 9 XMListUnsubscribeExists 73046 48.23 67.44 42.66 10 DKIM_VALID_AU 61830 50.72 57.08 48.88 11 BAYES_50 52371 52.93 48.35 54.26 12 XM_B_Unicode3 45491 40.74 42.00 40.38 13 XM_DK_Undo_02 41666 13.81 38.47 6.67 14 XM_B_SpammyWords2 39990 22.25 36.92 18.00 15 HTML_FONT_LOW_CONTRAST 35747 26.80 33.00 25.00 16 LOC_TINY_FONT_1 34705 23.39 32.04 20.88 17 MIME_HTML_ONLY 33178 24.31 30.63 22.48 18 TR_XM_DKIM_Undo 32836 11.22 30.31 5.69 19 T_KAM_HTML_FONT_INVALID 32138 20.18 29.67 17.43 20 DKIM_VALID_EF 31772 26.55 29.33 25.74 21 FVGT_m_MULTI_ODD 30921 23.63 28.55 22.21 22 RCVD_IN_MSPIKE_H2 29580 21.16 27.31 19.38 23 BAYES_99 28863 11.27 26.65 6.82 24 DCC_CHECK_NEGATIVE 28123 56.43 25.96 65.26 25 T_TM2_M_HEADER_IN_MSG 27558 29.49 25.44 30.66 26 XMSubLong 26954 22.00 24.88 21.16 27 RELAYCOUNTRY_META 23861 7.96 22.03 3.88 28 XM_Body_Dirty_Words 23271 13.74 21.48 11.50 29 RCVD_IN_MSPIKE_WL 22964 26.00 21.20 27.39 30 BAYES_999 22128 9.14 20.43 5.87 31 TR_DCC_Bayes_99 21669 6.57 20.00 2.68 32 XM_Multi_Part_URI 18163 12.04 16.77 10.67 33 BOTNET 16741 4.60 15.46 1.45 34 XM_B_Unsub 16401 13.36 15.14 12.85 35 TR_XM_SpammyRelay 16128 4.64 14.89 1.67 36 BOTNET_IPINHOSTNAME 15311 6.32 14.14 4.05 37 UNTRUSTED_Relay 14646 4.10 13.52 1.37 38 RCVD_IN_MSPIKE_H3 13872 13.96 12.81 14.29 39 FSL_BULK_SIG 13774 8.24 12.72 6.94 40 LOTS_OF_MONEY 13182 9.94 12.17 9.30 41 UNPARSEABLE_RELAY 13022 8.50 12.02 7.48 42 XM_B_SpammyWords3 12941 5.89 11.95 4.14 43 TR_XM_UnparsRelay 12552 6.92 11.59 5.57 44 MPART_ALT_DIFF 11758 6.22 10.85 4.87 45 XM_UncommonTLD01 11696 4.98 10.80 3.29 46 TR_XM_SpammyWords4 11335 5.96 10.46 4.66 47 HTML_IMAGE_RATIO_02 10533 6.78 9.72 5.93 48 TR_XM_SpammyWords2 10161 2.85 9.38 0.95 49 XM_SendGrid 10101 7.31 9.33 6.73 50 XM_Evil_Numbers_Gen 9976 8.04 9.21 7.70 51 RCVD_IN_BL_SPAMCOP_NET 9774 2.60 9.02 0.73 52 TR_XM_PhishingBody 9401 5.06 8.68 4.01 53 XMSexyCombo_05 9344 4.47 8.63 3.27 54 RCVD_IN_MSPIKE_H4 8706 10.52 8.04 11.24 55 XM_UB50 8549 2.48 7.89 0.91 56 MIME_HTML_MOSTLY 8296 3.56 7.66 2.37 57 BAYES_80 7838 4.48 7.24 3.68 58 BAYES_60 7673 7.71 7.08 7.89 59 TooManyTo_001 7604 10.79 7.02 11.89 60 DKIM_INVALID 7502 4.38 6.93 3.64 61 LotsOfNums_01 7490 8.16 6.91 8.53 62 XM_H_Long_From01 7233 5.06 6.68 4.60 63 URI_NOVOWEL 6867 3.56 6.34 2.75 64 XMSubMetaSx_00 6752 4.58 6.23 4.10 65 XM_B_Phish66 6748 3.42 6.23 2.61 66 XM_B_Phish_Phrases 6502 3.92 6.00 3.32 67 TR_XM_SPAMCOP 5725 1.40 5.29 0.27 68 RELAYCOUNTRY_CA 5654 1.81 5.22 0.82 69 HTML_IMAGE_RATIO_04 5636 5.00 5.20 4.94 70 TR_XM_DK_SendGrid 5381 4.34 4.97 4.16 71 SpammyFromTLD_02 5316 1.30 4.91 0.26 72 XM_SPF_SoftFail 5237 2.81 4.83 2.23 73 TM2_M_URI_OPT_OUT 4855 4.06 4.48 3.94 74 TR_XM_NoHeaderRelay 4817 1.15 4.45 0.19 75 HTML_MIME_NO_HTML_TAG 4741 3.35 4.38 3.05 76 XMNumbers 4666 3.50 4.31 3.27 77 URIBL_DBL_SPAM 4632 0.96 4.28 0.01 78 MIME_QP_LONG_LINE 4625 5.78 4.27 6.21 79 SpammyFromTLD_01 4601 1.51 4.25 0.72 80 XMStrtUSub 4479 4.09 4.14 4.07 81 XM_B_Investor 4387 2.02 4.05 1.43 82 RCVD_IN_RP_RNBL 4234 0.91 3.91 0.04 83 TR_XM_MaxUnsub 4202 1.45 3.88 0.75 84 BAYES_95 4037 2.61 3.73 2.28 85 RCVD_IN_PSBL 3965 0.92 3.66 0.12 86 RCVD_IN_MSPIKE_BL 3958 1.13 3.65 0.40 87 XM_B_SpammyTLD 3945 2.27 3.64 1.87 88 JH_SPAMMY_HEADERS 3930 0.82 3.63 0.00 89 MIME_HTML_ONLY_MULTI 3803 3.24 3.51 3.16 90 HTML_IMAGE_RATIO_06 3788 3.12 3.50 3.02 91 XM_GoogleGroups 3782 2.29 3.49 1.95 92 HTML_IMAGE_ONLY_20 3759 1.83 3.47 1.36 93 TR_XM_SpammyWords5 3665 1.81 3.38 1.35 94 T_XMDrugObfuBody_08 3618 1.90 3.34 1.48 95 RCVD_IN_VALIDITY_RPBL 3501 0.75 3.23 0.04 96 T_XMDrugObfuBody_14 3481 2.27 3.21 2.00 97 XM_OfRef6 3460 1.64 3.19 1.19 98 T_TooManySym_01 3386 5.36 3.13 6.01 99 TR_XM_MSPIKECOMBO 3286 0.99 3.03 0.40 100 XMDiploma_00 3226 3.40 2.98 3.53 101 BAYES_40 3201 4.90 2.96 5.46 102 ALL_TRUSTED 3194 15.71 2.95 19.41 103 XM_B_COVIDMETA 3171 1.19 2.93 0.69 104 BOTNET_NORDNS 3072 0.65 2.84 0.02 105 HTML_TITLE_SUBJ_DIFF 2999 1.10 2.77 0.62 106 HTML_SHORT_LINK_IMG_3 2900 1.11 2.68 0.66 107 MAILING_LIST_MULTI 2856 3.09 2.64 3.23 108 T_REMOTE_IMAGE 2796 3.45 2.58 3.70 109 XM_B_Unsub2 2772 1.57 2.56 1.29 110 XM_URI_RBL 2767 0.69 2.55 0.15 111 ALIBABA_IMG_NOT_RCVD_ALI 2739 0.57 2.53 0.00 112 HOSTED_IMG_DIRECT_MX 2719 0.56 2.51 0.00 113 RCVD_IN_IADB_LISTED 2676 4.31 2.47 4.84 114 XM_CamelCaseFrm001 2653 1.79 2.45 1.60 115 HTML_IMAGE_RATIO_08 2652 2.16 2.45 2.07 116 URI_LONG_REPEAT 2626 0.55 2.42 0.00 117 TM2_M_VERY_LONG_WORD 2554 1.27 2.36 0.95 118 TR_XM_PHPDW 2544 0.78 2.35 0.32 119 XM_B_SpammyWords4 2532 0.86 2.34 0.43 120 XM_DIRTYINTL 2524 0.76 2.33 0.31 121 XMSexyCombo_01 2485 1.39 2.29 1.13 122 KHOP_HELO_FCRDNS 2429 1.85 2.24 1.73 123 TR_XM_PHPForged 2408 0.73 2.22 0.30 124 TR_XM_FormFill2 2375 0.72 2.19 0.29 125 XM_H_PHPOS 2354 0.71 2.17 0.28 126 XM_DK_Undo_01 2346 1.95 2.17 1.88 127 T_XMDrugObfuBody_00 2304 1.02 2.13 0.70 128 TR_XM_SB_Phish 2303 2.10 2.13 2.09 129 RCVD_IN_IADB_SPF 2277 3.72 2.10 4.19 130 WANT_TO_ORDER 2271 0.48 2.10 0.01 131 YOUR_DELIVERY_ADDRESS 2267 0.47 2.09 0.00 132 READY_TO_SHIP 2261 0.47 2.09 0.00 133 XMSubPhish11 2240 2.05 2.07 2.05 134 XMStockSpam_06 2238 1.34 2.07 1.13 135 T_FILL_THIS_FORM_SHORT 2173 1.05 2.01 0.78 136 FROM_EXCESS_BASE64 2172 2.27 2.01 2.35 137 URI_HEX 2063 1.49 1.90 1.37 138 RCVD_IN_IADB_SENDERID 2038 3.33 1.88 3.75 139 RCVD_IN_IADB_DK 2036 3.24 1.88 3.63 140 DATE_IN_PAST_03_06 2011 0.67 1.86 0.32 141 RCVD_IN_RP_SAFE 1983 5.59 1.83 6.67 142 XMBrknScrpt_02 1977 1.13 1.83 0.92 143 RELAYCOUNTRY_FR 1962 0.58 1.81 0.23 144 XMBody_17 1959 0.68 1.81 0.35 145 XM_Body_Dirty_Words_01 1950 0.56 1.80 0.20 146 TR_XM_SpammyWords3 1928 0.55 1.78 0.19 147 XMGenDplmaNmb 1912 1.05 1.77 0.84 148 XMSubMetaSSxObfu_00 1861 0.40 1.72 0.02 149 XM_UB99 1830 0.38 1.69 0.00 150 RELAYCOUNTRY_IN 1828 0.47 1.69 0.12 151 URIBL_BLACK 1808 0.41 1.67 0.04 152 BAYES_20 1799 3.41 1.66 3.92 153 TR_Symld_Words 1757 1.83 1.62 1.88 154 SUBJ_ALL_CAPS 1726 1.47 1.59 1.44 155 TR_XM_COVIDMETA4 1721 0.62 1.59 0.33 156 TR_LOTS_OF_MONEY3 1714 0.56 1.58 0.26 157 T_XMHurry_00 1702 0.64 1.57 0.37 158 RCVD_IN_MSPIKE_L3 1673 0.60 1.54 0.32 159 TR_XM_INV_DKIM 1625 0.49 1.50 0.19 160 BAYES_00 1623 10.65 1.50 13.30 161 TR_XM_COVIDMETA1 1533 0.58 1.42 0.34 162 RCVD_IN_IADB_VOUCHED 1507 2.65 1.39 3.01 163 XM_B_DNDMA 1498 0.61 1.38 0.39 164 XM_UB999 1472 0.31 1.36 0.00 165 XM_UB60 1421 0.36 1.31 0.08 166 RELAYCOUNTRY_AU 1401 0.53 1.29 0.31 167 DIET_1 1386 0.60 1.28 0.41 168 XMHTML_After_End 1367 0.86 1.26 0.75 169 XM_B_SEO 1359 0.39 1.25 0.14 170 RELAYCOUNTRY_GB 1346 0.95 1.24 0.86 171 XM_PDF 1280 4.26 1.18 5.15 172 TR_XM_SEO4 1258 0.34 1.16 0.10 173 XMPhish30 1257 0.85 1.16 0.76 174 XMSubMetaI_00 1234 0.62 1.14 0.47 175 USER_IN_DEF_DKIM_WL 1218 8.73 1.12 10.94 176 NO_DNS_FOR_FROM 1213 0.48 1.12 0.29 177 URI_TRY_3LD 1207 0.66 1.11 0.52 178 RCVD_IN_RP_CERTIFIED 1203 4.87 1.11 5.96 179 TM2_M_A_HREF_HREF 1183 0.52 1.09 0.35 180 HTTPS_HTTP_MISMATCH 1173 0.80 1.08 0.71 181 XM_H_PHPMailer 1169 0.68 1.08 0.56 182 RELAYCOUNTRY_AZ 1169 0.24 1.08 0.00 183 PDS_OTHER_BAD_TLD 1166 0.46 1.08 0.28 184 TR_XM_PhishingBody3 1150 0.24 1.06 0.01 185 RELAYCOUNTRY_CN 1135 0.31 1.05 0.10 186 TR_XM_MaxWHORU 1131 0.40 1.04 0.21 187 RCVD_IN_IADB_OPTIN 1111 1.72 1.03 1.92 188 RCVD_IN_MSPIKE_L5 1105 0.24 1.02 0.01 189 XMMoneyMeta_00 1076 0.60 0.99 0.48 190 TR_MetaPhish_Combo_01 1068 0.76 0.99 0.69 191 DKIM_ADSP_NXDOMAIN 1066 0.49 0.98 0.35 192 TR_XM_BayesRelay 1052 0.22 0.97 0.00 193 URI_PHP_REDIR 1049 0.22 0.97 0.00 194 DKIM_ADSP_CUSTOM_MED 1034 1.02 0.95 1.04 195 TR_BOTNET_NEGATE 1031 0.37 0.95 0.20 196 RELAYCOUNTRY_RU 1026 0.24 0.95 0.03 197 TooManyTo_002 1012 2.06 0.93 2.39 198 RCVD_IN_VALIDITY_SAFE 1002 4.64 0.93 5.72 199 T_TooManySym_02 1001 2.82 0.92 3.37 200 RELAYCOUNTRY_PL 990 0.23 0.91 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 326249 89.07 95.33 87.26 2 RELAYCOUNTRY_US 292283 78.11 77.90 78.18 3 XM_B_Unicode 259187 70.57 74.87 69.32 4 DKIM_SIGNED 257794 72.47 84.61 68.95 5 XM_DK_Pass 252034 70.33 80.41 67.41 6 DKIM_VALID 244179 68.09 77.69 65.31 7 DCC_CHECK_NEGATIVE 243987 56.43 25.96 65.26 8 BAYES_50 202865 52.93 48.35 54.26 9 DKIM_VALID_AU 182763 50.72 57.08 48.88 10 XMListUnsubscribeExists 159514 48.23 67.44 42.66 11 XM_B_SpammyWords 156827 48.32 70.30 41.95 12 XM_B_Unicode3 150961 40.74 42.00 40.38 13 DCC_CHECK 129696 43.52 74.01 34.69 14 T_TM2_M_HEADER_IN_MSG 114632 29.49 25.44 30.66 15 RCVD_IN_MSPIKE_WL 102392 26.00 21.20 27.39 16 DKIM_VALID_EF 96233 26.55 29.33 25.74 17 HTML_FONT_LOW_CONTRAST 93463 26.80 33.00 25.00 18 MIME_HTML_ONLY 84051 24.31 30.63 22.48 19 FVGT_m_MULTI_ODD 83025 23.63 28.55 22.21 20 XMSubLong 79113 22.00 24.88 21.16 21 LOC_TINY_FONT_1 78064 23.39 32.04 20.88 22 ALL_TRUSTED 72553 15.71 2.95 19.41 23 RCVD_IN_MSPIKE_H2 72473 21.16 27.31 19.38 24 XM_B_SpammyWords2 67290 22.25 36.92 18.00 25 T_KAM_HTML_FONT_INVALID 65173 20.18 29.67 17.43 26 RCVD_IN_MSPIKE_H3 53438 13.96 12.81 14.29 27 BAYES_00 49733 10.65 1.50 13.30 28 XM_B_Unsub 48029 13.36 15.14 12.85 29 TooManyTo_001 44446 10.79 7.02 11.89 30 XM_Body_Dirty_Words 42989 13.74 21.48 11.50 31 RCVD_IN_MSPIKE_H4 42016 10.52 8.04 11.24 32 USER_IN_DEF_DKIM_WL 40892 8.73 1.12 10.94 33 XM_Multi_Part_URI 39897 12.04 16.77 10.67 34 LOTS_OF_MONEY 34766 9.94 12.17 9.30 35 LotsOfNums_01 31879 8.16 6.91 8.53 36 BAYES_60 29492 7.71 7.08 7.89 37 TR_XM_DK_Bayes 28847 6.15 0.76 7.72 38 XM_Evil_Numbers_Gen 28782 8.04 9.21 7.70 39 UNPARSEABLE_RELAY 27978 8.50 12.02 7.48 40 TR_XM_DK_Bayes1 27873 5.94 0.73 7.46 41 FSL_BULK_SIG 25944 8.24 12.72 6.94 42 BAYES_99 25501 11.27 26.65 6.82 43 XM_SendGrid 25147 7.31 9.33 6.73 44 RCVD_IN_RP_SAFE 24956 5.59 1.83 6.67 45 XM_DK_Undo_02 24942 13.81 38.47 6.67 46 XM_DKIMWhitelistDomains 24832 5.21 0.25 6.64 47 IN_ZIMBRA_NJ_WHITELIST 24425 5.09 0.11 6.53 48 TR_XM_DK_Bayes2 23413 4.98 0.54 6.26 49 MIME_QP_LONG_LINE 23232 5.78 4.27 6.21 50 T_TooManySym_01 22478 5.36 3.13 6.01 51 RCVD_IN_RP_CERTIFIED 22301 4.87 1.11 5.96 52 HTML_IMAGE_RATIO_02 22171 6.78 9.72 5.93 53 BAYES_999 21946 9.14 20.43 5.87 54 RCVD_IN_VALIDITY_SAFE 21375 4.64 0.93 5.72 55 TR_XM_DKIM_Undo 21287 11.22 30.31 5.69 56 TR_XM_UnparsRelay 20825 6.92 11.59 5.57 57 BAYES_40 20417 4.90 2.96 5.46 58 XM_PDF 19268 4.26 1.18 5.15 59 RCVD_IN_VALIDITY_CERTIFIED 19103 4.05 0.40 5.11 60 HTML_IMAGE_RATIO_04 18459 5.00 5.20 4.94 61 XM_H_Trusted_IP 18320 3.80 0.00 4.90 62 MPART_ALT_DIFF 18219 6.22 10.85 4.87 63 RCVD_IN_IADB_LISTED 18107 4.31 2.47 4.84 64 TR_XM_SpammyWords4 17409 5.96 10.46 4.66 65 XM_H_Long_From01 17188 5.06 6.68 4.60 66 RCVD_IN_IADB_SPF 15679 3.72 2.10 4.19 67 TR_XM_DK_SendGrid 15543 4.34 4.97 4.16 68 XM_B_SpammyWords3 15472 5.89 11.95 4.14 69 XMSubMetaSx_00 15345 4.58 6.23 4.10 70 XMStrtUSub 15234 4.09 4.14 4.07 71 BOTNET_IPINHOSTNAME 15151 6.32 14.14 4.05 72 TR_XM_PhishingBody 14988 5.06 8.68 4.01 73 TM2_M_URI_OPT_OUT 14738 4.06 4.48 3.94 74 BAYES_20 14649 3.41 1.66 3.92 75 RELAYCOUNTRY_META 14509 7.96 22.03 3.88 76 RCVD_IN_IADB_SENDERID 14012 3.33 1.88 3.75 77 T_REMOTE_IMAGE 13827 3.45 2.58 3.70 78 BAYES_80 13763 4.48 7.24 3.68 79 DKIM_INVALID 13615 4.38 6.93 3.64 80 RCVD_IN_IADB_DK 13589 3.24 1.88 3.63 81 XMDiploma_00 13192 3.40 2.98 3.53 82 T_TooManySym_02 12590 2.82 0.92 3.37 83 XM_B_Phish_Phrases 12399 3.92 6.00 3.32 84 XM_UncommonTLD01 12318 4.98 10.80 3.29 85 ANY_BOUNCE_MESSAGE 12313 2.71 0.69 3.29 86 BOUNCE_MESSAGE 12312 2.71 0.69 3.29 87 XMSexyCombo_05 12209 4.47 8.63 3.27 88 XMNumbers 12208 3.50 4.31 3.27 89 MAILING_LIST_MULTI 12063 3.09 2.64 3.23 90 MIME_HTML_ONLY_MULTI 11827 3.24 3.51 3.16 91 HTML_MIME_NO_HTML_TAG 11393 3.35 4.38 3.05 92 HTML_IMAGE_RATIO_06 11279 3.12 3.50 3.02 93 RCVD_IN_IADB_VOUCHED 11269 2.65 1.39 3.01 94 URI_NOVOWEL 10279 3.56 6.34 2.75 95 TR_DCC_Bayes_99 10012 6.57 20.00 2.68 96 XM_B_Phish66 9759 3.42 6.23 2.61 97 XMSubNoVowel 9210 2.07 0.71 2.46 98 TooManyTo_002 8930 2.06 0.93 2.39 99 BAYES_05 8927 2.04 0.84 2.39 100 MIME_HTML_MOSTLY 8869 3.56 7.66 2.37 101 FROM_EXCESS_BASE64 8788 2.27 2.01 2.35 102 BAYES_95 8527 2.61 3.73 2.28 103 XM_SPF_SoftFail 8328 2.81 4.83 2.23 104 TR_XM_SB_Phish 7813 2.10 2.13 2.09 105 HTML_IMAGE_RATIO_08 7751 2.16 2.45 2.07 106 XMSubPhish11 7669 2.05 2.07 2.05 107 HELO_NODOT 7510 1.72 0.74 2.01 108 HELO_NO_DOMAIN 7507 1.72 0.73 2.01 109 T_XMDrugObfuBody_14 7462 2.27 3.21 2.00 110 XM_GoogleGroups 7284 2.29 3.49 1.95 111 RCVD_IN_IADB_OPTIN 7164 1.72 1.03 1.92 112 TR_Symld_Words 7046 1.83 1.62 1.88 113 XM_DK_Undo_01 7045 1.95 2.17 1.88 114 XM_B_SpammyTLD 6985 2.27 3.64 1.87 115 RCVD_IN_MSPIKE_H5 6938 1.52 0.36 1.86 116 INVALID_MSGID 6911 1.51 0.35 1.85 117 IN_HORDE_ADDRESS_BOOK 6590 1.39 0.10 1.76 118 KHOP_HELO_FCRDNS 6471 1.85 2.24 1.73 119 MSGID_NOFQDN1 6304 1.34 0.17 1.69 120 TR_XM_SpammyRelay 6258 4.64 14.89 1.67 121 TooManyTo_003 6058 1.43 0.75 1.62 122 TO_MALFORMED 6012 1.25 0.01 1.61 123 XM_CamelCaseFrm001 5968 1.79 2.45 1.60 124 TVD_RCVD_IP 5598 1.20 0.17 1.50 125 T_XMDrugObfuBody_08 5522 1.90 3.34 1.48 126 BOTNET 5423 4.60 15.46 1.45 127 SUBJ_ALL_CAPS 5366 1.47 1.59 1.44 128 XM_B_Investor 5357 2.02 4.05 1.43 129 URI_HEX 5139 1.49 1.90 1.37 130 UNTRUSTED_Relay 5130 4.10 13.52 1.37 131 HTML_IMAGE_ONLY_20 5071 1.83 3.47 1.36 132 TR_XM_SpammyWords5 5058 1.81 3.38 1.35 133 XMCapTrack 5009 1.15 0.49 1.34 134 XM_B_Unsub2 4809 1.57 2.56 1.29 135 TVD_SPACE_RATIO_MINFP 4761 1.02 0.15 1.27 136 XM_OfRef6 4439 1.64 3.19 1.19 137 TooManyTo_004 4290 1.02 0.60 1.15 138 XMStockSpam_06 4239 1.34 2.07 1.13 139 XMSexyCombo_01 4233 1.39 2.29 1.13 140 XMGappySubj_01 4120 0.93 0.35 1.10 141 HTML_FONT_FACE_BAD 3998 0.99 0.70 1.07 142 DKIM_ADSP_CUSTOM_MED 3898 1.02 0.95 1.04 143 XM_E_Blogspot 3599 0.85 0.46 0.96 144 TR_XM_SpammyWords2 3568 2.85 9.38 0.95 145 TM2_M_VERY_LONG_WORD 3546 1.27 2.36 0.95 146 XMNoVowels 3541 0.92 0.84 0.95 147 XMBSHREFv2 3529 0.83 0.46 0.94 148 TVD_SPACE_RATIO 3499 0.76 0.15 0.94 149 XMBrknScrpt_02 3457 1.13 1.83 0.92 150 TooManyTo_005 3452 0.83 0.50 0.92 151 XM_UB50 3413 2.48 7.89 0.91 152 XM_H_Long_From02 3394 0.89 0.83 0.91 153 T_TooManySym_03 3248 0.75 0.36 0.87 154 RELAYCOUNTRY_GB 3226 0.95 1.24 0.86 155 XMGenDplmaNmb 3144 1.05 1.77 0.84 156 RELAYCOUNTRY_CA 3071 1.81 5.22 0.82 157 XM_ProductURIs 2923 0.80 0.85 0.78 158 T_FILL_THIS_FORM_SHORT 2909 1.05 2.01 0.78 159 XMPhish30 2860 0.85 1.16 0.76 160 XMBody_95 2855 0.63 0.16 0.76 161 TR_XM_MaxUnsub 2809 1.45 3.88 0.75 162 XMHTML_After_End 2802 0.86 1.26 0.75 163 RCVD_IN_BL_SPAMCOP_NET 2748 2.60 9.02 0.73 164 SpammyFromTLD_01 2691 1.51 4.25 0.72 165 HTTPS_HTTP_MISMATCH 2664 0.80 1.08 0.71 166 T_XMDrugObfuBody_00 2633 1.02 2.13 0.70 167 NML_ADSP_CUSTOM_MED 2591 0.70 0.73 0.69 168 XM_B_COVIDMETA 2578 1.19 2.93 0.69 169 TR_MetaPhish_Combo_01 2574 0.76 0.99 0.69 170 SHORT_URI_3 2567 0.63 0.42 0.69 171 HTML_SHORT_LINK_IMG_3 2454 1.11 2.68 0.66 172 XMBdyGiftCard01 2381 0.66 0.73 0.64 173 SHORTENED_URL_HREF 2367 0.55 0.25 0.63 174 XM_ShortIntro_01 2346 0.62 0.58 0.63 175 HTML_TITLE_SUBJ_DIFF 2315 1.10 2.77 0.62 176 T_OBFU_PDF_ATTACH 2246 0.51 0.21 0.60 177 T_Symld_Words_02 2158 0.65 0.90 0.58 178 RCVD_IN_SORBS_DUL 2147 0.50 0.23 0.57 179 XM_H_PHPMailer 2101 0.68 1.08 0.56 180 SHORT_HELO_AND_INLINE_IMAGE 2074 0.45 0.11 0.55 181 HTML_IMAGE_ONLY_24 2024 0.51 0.39 0.54 182 FORGED_GMAIL_RCVD 2002 0.60 0.80 0.54 183 XM_B_COPY_HTML 1974 0.55 0.61 0.53 184 URI_TRY_3LD 1962 0.66 1.11 0.52 185 HTML_IMAGE_ONLY_28 1926 0.55 0.66 0.52 186 TR_MSPIKEBAYES00 1909 0.40 0.02 0.51 187 THIS_AD 1854 0.50 0.53 0.50 188 HTML_TAG_BALANCE_BODY 1847 0.57 0.84 0.49 189 TM2_M_BODY_EMPTY 1830 0.42 0.18 0.49 190 XMMoneyMeta_00 1810 0.60 0.99 0.48 191 SHORT_URI_2 1772 0.45 0.39 0.47 192 T_MANY_PILL_PRICE 1758 0.36 0.00 0.47 193 XMSubMetaI_00 1742 0.62 1.14 0.47 194 MISSING_HEADERS 1729 0.54 0.80 0.46 195 FROM_GOV_SPOOF 1728 0.39 0.14 0.46 196 USER_IN_WELCOMELIST 1702 0.35 0.00 0.46 197 USER_IN_WHITELIST 1702 0.35 0.00 0.46 198 XMLngstWrd_00 1661 0.43 0.37 0.44 199 MSGID_FROM_MTA_HEADER 1638 0.47 0.57 0.44 200 HTML_IMAGE_ONLY_32 1615 0.42 0.37 0.43 ----------------------------------------------------------------------