Email: 557850 Autolearn: 0 AvgScore: 1.56 AvgScanTime: 1.43 sec Spam: 165603 Autolearn: 0 AvgScore: 14.00 AvgScanTime: 1.68 sec Ham: 392247 Autolearn: 0 AvgScore: -3.69 AvgScanTime: 1.33 sec Time Spent Running SA: 221.60 hours Time Spent Processing Spam: 77.08 hours Time Spent Processing Ham: 144.52 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159450 90.06 96.28 87.43 2 DKIM_SIGNED 142734 66.33 86.19 57.95 3 XM_DK_Pass 139017 64.40 83.95 56.14 4 DKIM_VALID 137557 63.55 83.06 55.30 5 RELAYCOUNTRY_US 137121 79.79 82.80 78.51 6 XM_B_Unicode 128060 73.77 77.33 72.27 7 DCC_CHECK 120620 38.91 72.84 24.59 8 XMListUnsubscribeExists 109464 45.13 66.10 36.28 9 XM_B_SpammyWords 105180 46.83 63.51 39.79 10 DKIM_VALID_AU 103359 48.37 62.41 42.44 11 RCVD_IN_MSPIKE_H2 99650 45.20 60.17 38.88 12 BAYES_50 74575 50.77 45.03 53.19 13 XM_B_Unicode3 69624 41.60 42.04 41.41 14 XM_DK_Undo_02 65822 15.46 39.75 5.21 15 XM_B_SpammyWords2 59873 21.33 36.15 15.07 16 FVGT_m_MULTI_ODD 59012 25.12 35.63 20.69 17 MIME_HTML_ONLY 58694 25.88 35.44 21.84 18 LOC_TINY_FONT_1 57700 22.05 34.84 16.65 19 HTML_FONT_LOW_CONTRAST 51622 23.29 31.17 19.97 20 TR_XM_DKIM_Undo 51561 11.71 31.14 3.51 21 BAYES_99 51512 12.26 31.11 4.31 22 DKIM_VALID_EF 47868 24.13 28.91 22.11 23 T_KAM_HTML_FONT_INVALID 45519 18.67 27.49 14.95 24 DCC_CHECK_NEGATIVE 44933 61.05 27.13 75.37 25 T_TM2_M_HEADER_IN_MSG 39796 25.60 24.03 26.27 26 BAYES_999 39396 9.52 23.79 3.50 27 XM_Body_Dirty_Words 38312 12.84 23.13 8.50 28 XMSubLong 38299 20.88 23.13 19.94 29 TR_DCC_Bayes_99 36203 7.49 21.86 1.43 30 RELAYCOUNTRY_META 32992 8.09 19.92 3.10 31 XM_Multi_Part_URI 28849 11.99 17.42 9.70 32 XM_B_Unsub 26025 9.32 15.72 6.62 33 TR_XM_BayesUnsub 25452 8.11 15.37 5.04 34 FSL_BULK_SIG 24000 6.10 14.49 2.56 35 LOTS_OF_MONEY 21799 8.56 13.16 6.62 36 BOTNET_IPINHOSTNAME 21551 6.41 13.01 3.62 37 UNPARSEABLE_RELAY 21437 8.47 12.94 6.58 38 TR_XM_UnparsRelay 21026 7.41 12.70 5.17 39 BOTNET 20275 4.52 12.24 1.26 40 XM_B_SpammyWords3 19992 5.83 12.07 3.20 41 TR_XM_SpammyWords2 19209 3.85 11.60 0.58 42 TR_XM_SpammyWords4 18641 6.25 11.26 4.14 43 MPART_ALT_DIFF 18500 10.73 11.17 10.55 44 XMSexyCombo_05 18005 4.90 10.87 2.38 45 RCVD_IN_MSPIKE_WL 16823 8.44 10.16 7.72 46 RCVD_IN_MSPIKE_H3 16441 7.88 9.93 7.01 47 UNTRUSTED_Relay 16409 3.63 9.91 0.98 48 TR_XM_SpammyRelay 16117 3.66 9.73 1.09 49 HTML_IMAGE_RATIO_02 15510 5.84 9.37 4.35 50 LotsOfNums_01 14746 7.80 8.90 7.34 51 XM_Evil_Numbers_Gen 14688 8.14 8.87 7.83 52 XM_UncommonTLD01 14357 4.78 8.67 3.13 53 TR_XM_PhishingBody 13865 4.34 8.37 2.64 54 BAYES_80 13269 4.84 8.01 3.50 55 RCVD_IN_BL_SPAMCOP_NET 13055 2.66 7.88 0.45 56 MIME_HTML_ONLY_MULTI 12492 8.49 7.54 8.89 57 HTML_MIME_NO_HTML_TAG 12303 3.49 7.43 1.82 58 BAYES_60 12207 7.61 7.37 7.72 59 TM2_M_VERY_LONG_WORD 11936 2.89 7.21 1.07 60 XM_B_Phish_Phrases 11917 4.01 7.20 2.67 61 XM_SendGrid 11680 5.22 7.05 4.44 62 XM_B_SpammyTLD 11095 5.87 6.70 5.51 63 TR_XM_SPAMCOP 11021 2.17 6.66 0.28 64 XMSubMetaSx_00 10441 3.82 6.30 2.77 65 XM_H_Long_From01 10251 4.89 6.19 4.33 66 XM_B_Phish66 9672 2.88 5.84 1.62 67 RELAYCOUNTRY_CA 9360 2.31 5.65 0.90 68 XM_UB50 8392 1.94 5.07 0.63 69 TooManyTo_001 8138 6.45 4.91 7.10 70 XM_GoogleGroups 7873 2.15 4.75 1.04 71 XM_B_Investor 7783 2.30 4.70 1.28 72 BAYES_95 7776 2.87 4.70 2.10 73 XMLngstWrd_00 7681 1.70 4.64 0.47 74 XMLngstWrd_01 7599 1.66 4.59 0.42 75 TR_XM_DK_SendGrid 7569 3.40 4.57 2.91 76 XMLngstWrd_02 7482 1.59 4.52 0.35 77 XMLngstWrd_03 7396 1.53 4.47 0.29 78 XMLngstWrd_04 7266 1.46 4.39 0.22 79 MIME_HTML_MOSTLY 7215 2.77 4.36 2.10 80 HTML_TITLE_SUBJ_DIFF 7147 1.31 4.32 0.04 81 HTML_IMAGE_RATIO_04 7058 12.75 4.26 16.33 82 UPPERCASE_75_100 7054 1.28 4.26 0.03 83 MIME_QP_LONG_LINE 6805 4.28 4.11 4.35 84 T_REMOTE_IMAGE 6690 3.50 4.04 3.27 85 HTML_IMAGE_RATIO_06 6487 4.67 3.92 4.99 86 XM_SPF_SoftFail 6211 2.69 3.75 2.24 87 T_XMDrugObfuBody_08 6169 1.93 3.73 1.17 88 XM_DIRTYINTL 6042 1.25 3.65 0.23 89 SpammyFromTLD_01 6007 1.50 3.63 0.60 90 XMNumbers 5896 3.74 3.56 3.81 91 T_FILL_THIS_FORM_SHORT 5796 1.54 3.50 0.71 92 XMStrtUSub 5745 9.12 3.47 11.51 93 RCVD_IN_VALIDITY_SAFE 5643 3.85 3.41 4.04 94 PDS_OTHER_BAD_TLD 5407 1.08 3.27 0.16 95 T_XMDrugObfuBody_14 5379 1.92 3.25 1.35 96 XMDiploma_00 5307 1.86 3.20 1.30 97 URIBL_DBL_SPAM 5263 0.95 3.18 0.01 98 RCVD_IN_PSBL 5253 1.03 3.17 0.12 99 DKIM_INVALID 5177 2.79 3.13 2.64 100 TR_XM_SpammyWords5 5176 1.75 3.13 1.16 101 TR_Mismatch_TLD_01 5128 1.04 3.10 0.18 102 XM_DK_Undo_01 4976 1.76 3.00 1.23 103 HTML_IMAGE_RATIO_08 4974 2.13 3.00 1.77 104 RCVD_IN_VALIDITY_CERTIFIED 4860 3.34 2.93 3.51 105 URI_NOVOWEL 4590 2.37 2.77 2.20 106 RCVD_IN_VALIDITY_RPBL 4514 0.84 2.73 0.04 107 TM2_M_URI_OPT_OUT 4416 2.13 2.67 1.91 108 KHOP_HELO_FCRDNS 4371 2.03 2.64 1.77 109 T_TooManySym_01 4250 4.70 2.57 5.60 110 XM_B_Unsub2 4205 1.42 2.54 0.95 111 RCVD_IN_IADB_LISTED 4094 3.85 2.47 4.43 112 URI_PHP_REDIR 4026 0.72 2.43 0.00 113 USER_IN_DEF_DKIM_WL 3934 7.41 2.38 9.54 114 XM_OfRef6 3829 1.20 2.31 0.73 115 TARINGANET_IMG_NOT_RCVD_TN 3730 0.67 2.25 0.01 116 XM_CamelCaseFrm001 3727 1.66 2.25 1.42 117 HOSTED_IMG_DIRECT_MX 3717 0.67 2.24 0.00 118 RCVD_IN_IADB_SPF 3681 3.38 2.22 3.88 119 XMStockSpam_06 3675 1.14 2.22 0.69 120 SpammyFromTLD_02 3625 0.92 2.19 0.39 121 RCVD_IN_IADB_DK 3529 2.99 2.13 3.35 122 RCVD_IN_IADB_SENDERID 3488 3.06 2.11 3.47 123 TR_XM_SB_Phish 3452 1.88 2.08 1.80 124 TR_XM_COVIDMETA1 3445 0.80 2.08 0.26 125 XMSexyCombo_01 3401 0.88 2.05 0.38 126 XM_B_COVIDMETA 3361 0.93 2.03 0.47 127 XMSubPhish11 3257 1.83 1.97 1.77 128 ANY_BOUNCE_MESSAGE 3244 3.03 1.96 3.48 129 BOUNCE_MESSAGE 3232 3.02 1.95 3.47 130 SUBJ_ALL_CAPS 3225 1.63 1.95 1.50 131 T_XMDrugObfuBody_00 3146 0.96 1.90 0.56 132 XM_UB99 3072 0.55 1.86 0.00 133 BOTNET_NORDNS 2966 0.54 1.79 0.02 134 XMHTML_After_End 2934 0.94 1.77 0.59 135 XMBody_17 2900 0.73 1.75 0.30 136 XM_B_SpammyWords4 2869 0.84 1.73 0.47 137 ALL_TRUSTED 2832 14.16 1.71 19.41 138 FROM_EXCESS_BASE64 2703 1.74 1.63 1.79 139 XMBrknScrpt_02 2655 0.80 1.60 0.46 140 MAILING_LIST_MULTI 2648 2.00 1.60 2.17 141 HTTPS_HTTP_MISMATCH 2635 0.91 1.59 0.62 142 HTML_FONT_FACE_BAD 2564 11.74 1.55 16.04 143 RELAYCOUNTRY_FR 2506 0.59 1.51 0.20 144 XM_H_Undi_Recip 2462 0.55 1.49 0.16 145 DATE_IN_PAST_12_24 2422 0.45 1.46 0.02 146 BAYES_40 2420 4.35 1.46 5.57 147 HTML_IMAGE_ONLY_08 2392 0.51 1.44 0.12 148 URI_HEX 2371 1.16 1.43 1.04 149 XM_URI_RBL 2345 0.50 1.42 0.12 150 TR_XM_PHPDW 2332 0.64 1.41 0.32 151 XM_UB999 2255 0.41 1.36 0.00 152 RELAYCOUNTRY_DE 2198 0.53 1.33 0.19 153 TR_XM_PHPForged 2194 0.60 1.32 0.29 154 XM_H_Long_From02 2189 1.06 1.32 0.95 155 XMBdyGiftCard01 2171 0.84 1.31 0.65 156 DATE_IN_PAST_03_06 2168 0.55 1.31 0.23 157 RELAYCOUNTRY_AU 2163 0.54 1.31 0.22 158 URI_OPTOUT_3LD 2156 0.50 1.30 0.16 159 TR_XM_FormFill2 2150 0.59 1.30 0.29 160 HK_RANDOM_REPLYTO 2137 0.45 1.29 0.10 161 XM_H_PHPOS 2135 0.58 1.29 0.28 162 XMGenDplmaNmb 2108 0.95 1.27 0.81 163 T_XMHurry_00 2078 1.28 1.25 1.29 164 XM_B_SEO 2066 0.96 1.25 0.84 165 XM_RXBody 2037 0.50 1.23 0.20 166 TR_XM_NoHeaderRelay 2028 0.43 1.22 0.09 167 HTML_TAG_BALANCE_BODY 2013 0.85 1.22 0.69 168 HTML_TAG_BALANCE_CENTER 2008 0.44 1.21 0.11 169 RELAYCOUNTRY_IN 1967 0.40 1.19 0.06 170 MIXED_CENTER_CASE 1967 0.36 1.19 0.01 171 MIXED_HREF_CASE 1922 0.35 1.16 0.01 172 TR_XM_Undi_Recip11 1909 0.37 1.15 0.04 173 MIXED_IMG_CASE 1903 0.35 1.15 0.01 174 MIXED_AREA_CASE 1899 0.34 1.15 0.00 175 RELAYCOUNTRY_GB 1895 0.76 1.14 0.59 176 URIBL_BLACK 1893 0.37 1.14 0.05 177 BODY_URI_ONLY 1873 0.36 1.13 0.03 178 READY_TO_SHIP 1871 0.35 1.13 0.02 179 TR_MetaPhish_Combo_01 1871 0.90 1.13 0.80 180 TR_LOTS_OF_MONEY3 1864 0.51 1.13 0.26 181 MIXED_FONT_CASE 1860 0.34 1.12 0.00 182 TR_Symld_Words 1845 1.18 1.11 1.20 183 TR_XM_SEO4 1845 0.36 1.11 0.04 184 XM_ProductURIs 1817 0.64 1.10 0.45 185 XM_UB60 1812 0.36 1.09 0.05 186 XMSubNoVowel 1812 3.82 1.09 4.97 187 XM_Body_Dirty_Words_01 1786 0.40 1.08 0.11 188 XMSubMetaI_00 1781 0.60 1.08 0.39 189 RCVD_IN_IADB_VOUCHED 1758 2.35 1.06 2.89 190 RELAYCOUNTRY_RU 1757 0.33 1.06 0.02 191 XMMoneyMeta_00 1743 0.62 1.05 0.44 192 BAYES_20 1696 3.81 1.02 4.98 193 XM_PDF 1693 3.23 1.02 4.16 194 TR_XM_Undi_Recip6 1677 0.30 1.01 0.00 195 DIET_1 1662 0.45 1.00 0.22 196 URI_TRY_3LD 1653 0.62 1.00 0.46 197 TR_MRelay_UG 1653 0.30 1.00 0.01 198 XMPhish30 1650 0.70 1.00 0.57 199 XMReplyNow 1644 0.47 0.99 0.25 200 URI_GOOG_STO_SPAMMY 1597 0.29 0.96 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 342945 90.06 96.28 87.43 2 RELAYCOUNTRY_US 307968 79.79 82.80 78.51 3 DCC_CHECK_NEGATIVE 295629 61.05 27.13 75.37 4 XM_B_Unicode 283467 73.77 77.33 72.27 5 DKIM_SIGNED 227298 66.33 86.19 57.95 6 XM_DK_Pass 220227 64.40 83.95 56.14 7 DKIM_VALID 216929 63.55 83.06 55.30 8 BAYES_50 208637 50.77 45.03 53.19 9 DKIM_VALID_AU 166488 48.37 62.41 42.44 10 XM_B_Unicode3 162428 41.60 42.04 41.41 11 XM_B_SpammyWords 156066 46.83 63.51 39.79 12 RCVD_IN_MSPIKE_H2 152523 45.20 60.17 38.88 13 XMListUnsubscribeExists 142308 45.13 66.10 36.28 14 T_TM2_M_HEADER_IN_MSG 103034 25.60 24.03 26.27 15 DCC_CHECK 96456 38.91 72.84 24.59 16 DKIM_VALID_EF 86718 24.13 28.91 22.11 17 MIME_HTML_ONLY 85667 25.88 35.44 21.84 18 FVGT_m_MULTI_ODD 81142 25.12 35.63 20.69 19 HTML_FONT_LOW_CONTRAST 78324 23.29 31.17 19.97 20 XMSubLong 78207 20.88 23.13 19.94 21 ALL_TRUSTED 76145 14.16 1.71 19.41 22 LOC_TINY_FONT_1 65299 22.05 34.84 16.65 23 HTML_IMAGE_RATIO_04 64056 12.75 4.26 16.33 24 XM_H_Trusted_IP 63487 11.38 0.00 16.19 25 HTML_FONT_FACE_BAD 62932 11.74 1.55 16.04 26 XM_B_SpammyWords2 59094 21.33 36.15 15.07 27 T_KAM_HTML_FONT_INVALID 58626 18.67 27.49 14.95 28 BAYES_00 57818 10.60 0.79 14.74 29 XMStrtUSub 45146 9.12 3.47 11.51 30 MPART_ALT_DIFF 41364 10.73 11.17 10.55 31 XM_Multi_Part_URI 38044 11.99 17.42 9.70 32 USER_IN_DEF_DKIM_WL 37404 7.41 2.38 9.54 33 MIME_HTML_ONLY_MULTI 34870 8.49 7.54 8.89 34 XM_Body_Dirty_Words 33339 12.84 23.13 8.50 35 XM_Evil_Numbers_Gen 30708 8.14 8.87 7.83 36 RCVD_IN_MSPIKE_WL 30279 8.44 10.16 7.72 37 BAYES_60 30269 7.61 7.37 7.72 38 LotsOfNums_01 28779 7.80 8.90 7.34 39 TooManyTo_001 27865 6.45 4.91 7.10 40 RCVD_IN_MSPIKE_H3 27516 7.88 9.93 7.01 41 LOTS_OF_MONEY 25967 8.56 13.16 6.62 42 XM_B_Unsub 25948 9.32 15.72 6.62 43 UNPARSEABLE_RELAY 25794 8.47 12.94 6.58 44 XM_DKIMWhitelistDomains 25060 4.76 0.89 6.39 45 IN_ZIMBRA_NJ_WHITELIST 23535 4.26 0.14 6.00 46 T_TooManySym_01 21971 4.70 2.57 5.60 47 BAYES_40 21831 4.35 1.46 5.57 48 XM_B_SpammyTLD 21628 5.87 6.70 5.51 49 TR_XM_DK_Bayes 20936 3.93 0.61 5.34 50 TR_XM_DK_Bayes1 20504 3.86 0.61 5.23 51 XM_DK_Undo_02 20426 15.46 39.75 5.21 52 TR_XM_UnparsRelay 20283 7.41 12.70 5.17 53 TR_XM_BayesUnsub 19763 8.11 15.37 5.04 54 HTML_IMAGE_RATIO_06 19584 4.67 3.92 4.99 55 BAYES_20 19548 3.81 1.02 4.98 56 XMSubNoVowel 19502 3.82 1.09 4.97 57 TR_XM_DK_Bayes2 17876 3.35 0.50 4.56 58 XM_SendGrid 17420 5.22 7.05 4.44 59 RCVD_IN_IADB_LISTED 17371 3.85 2.47 4.43 60 HTML_IMAGE_RATIO_02 17081 5.84 9.37 4.35 61 MIME_QP_LONG_LINE 17069 4.28 4.11 4.35 62 XM_H_Long_From01 17001 4.89 6.19 4.33 63 BAYES_99 16889 12.26 31.11 4.31 64 XM_PDF 16322 3.23 1.02 4.16 65 TR_XM_SpammyWords4 16224 6.25 11.26 4.14 66 RCVD_IN_VALIDITY_SAFE 15830 3.85 3.41 4.04 67 BAYES_05 15260 2.88 0.50 3.89 68 RCVD_IN_IADB_SPF 15202 3.38 2.22 3.88 69 XMNumbers 14954 3.74 3.56 3.81 70 BOTNET_IPINHOSTNAME 14194 6.41 13.01 3.62 71 TR_XM_DKIM_Undo 13780 11.71 31.14 3.51 72 RCVD_IN_VALIDITY_CERTIFIED 13775 3.34 2.93 3.51 73 BAYES_80 13738 4.84 8.01 3.50 74 BAYES_999 13717 9.52 23.79 3.50 75 ANY_BOUNCE_MESSAGE 13631 3.03 1.96 3.48 76 BOUNCE_MESSAGE 13630 3.02 1.95 3.47 77 RCVD_IN_IADB_SENDERID 13601 3.06 2.11 3.47 78 T_TooManySym_02 13579 2.68 0.81 3.46 79 RCVD_IN_IADB_DK 13144 2.99 2.13 3.35 80 T_REMOTE_IMAGE 12825 3.50 4.04 3.27 81 XM_B_SpammyWords3 12535 5.83 12.07 3.20 82 XM_UncommonTLD01 12291 4.78 8.67 3.13 83 RELAYCOUNTRY_META 12146 8.09 19.92 3.10 84 TR_XM_DK_SendGrid 11397 3.40 4.57 2.91 85 RCVD_IN_IADB_VOUCHED 11335 2.35 1.06 2.89 86 XMSubMetaSx_00 10878 3.82 6.30 2.77 87 XM_B_Phish_Phrases 10468 4.01 7.20 2.67 88 DKIM_INVALID 10369 2.79 3.13 2.64 89 TR_XM_PhishingBody 10360 4.34 8.37 2.64 90 FSL_BULK_SIG 10054 6.10 14.49 2.56 91 XMSexyCombo_05 9337 4.90 10.87 2.38 92 XM_SPF_SoftFail 8788 2.69 3.75 2.24 93 URI_NOVOWEL 8640 2.37 2.77 2.20 94 MAILING_LIST_MULTI 8526 2.00 1.60 2.17 95 BAYES_95 8253 2.87 4.70 2.10 96 MIME_HTML_MOSTLY 8249 2.77 4.36 2.10 97 TVD_RCVD_IP 8060 1.50 0.18 2.05 98 TooManyTo_002 7756 1.61 0.75 1.98 99 XMSubLongNoVowel 7718 1.45 0.23 1.97 100 RCVD_IN_IADB_OPTIN 7653 1.54 0.56 1.95 101 XMSubGarbage 7528 1.36 0.04 1.92 102 TM2_M_URI_OPT_OUT 7474 2.13 2.67 1.91 103 INVALID_MSGID 7309 1.36 0.18 1.86 104 HTML_MIME_NO_HTML_TAG 7158 3.49 7.43 1.82 105 TR_XM_SB_Phish 7047 1.88 2.08 1.80 106 FROM_EXCESS_BASE64 7018 1.74 1.63 1.79 107 XMSubPhish11 6958 1.83 1.97 1.77 108 KHOP_HELO_FCRDNS 6948 2.03 2.64 1.77 109 HTML_IMAGE_RATIO_08 6930 2.13 3.00 1.77 110 XM_B_Phish66 6368 2.88 5.84 1.62 111 HELO_NODOT 6333 1.26 0.42 1.61 112 HELO_NO_DOMAIN 6331 1.26 0.42 1.61 113 IN_HORDE_ADDRESS_BOOK 6138 1.15 0.16 1.56 114 SUBJ_ALL_CAPS 5879 1.63 1.95 1.50 115 TO_MALFORMED 5772 1.04 0.01 1.47 116 TR_DCC_Bayes_99 5591 7.49 21.86 1.43 117 XM_CamelCaseFrm001 5554 1.66 2.25 1.42 118 T_TooManySym_03 5425 1.11 0.47 1.38 119 T_XMDrugObfuBody_14 5311 1.92 3.25 1.35 120 TooManyTo_003 5114 1.10 0.62 1.30 121 XMDiploma_00 5082 1.86 3.20 1.30 122 T_XMHurry_00 5044 1.28 1.25 1.29 123 XM_B_Investor 5038 2.30 4.70 1.28 124 BOTNET 4933 4.52 12.24 1.26 125 XM_E_Blogspot 4923 0.93 0.15 1.26 126 XM_DK_Undo_01 4832 1.76 3.00 1.23 127 XMGappySubj_01 4758 0.89 0.12 1.21 128 TR_Symld_Words 4724 1.18 1.11 1.20 129 T_XMDrugObfuBody_08 4587 1.93 3.73 1.17 130 TR_XM_SpammyWords5 4569 1.75 3.13 1.16 131 TR_XM_SpammyRelay 4292 3.66 9.73 1.09 132 TM2_M_VERY_LONG_WORD 4201 2.89 7.21 1.07 133 XM_GoogleGroups 4093 2.15 4.75 1.04 134 URI_HEX 4088 1.16 1.43 1.04 135 XMCapTrack 4053 0.86 0.46 1.03 136 UNTRUSTED_Relay 3833 3.63 9.91 0.98 137 XM_B_Unsub2 3741 1.42 2.54 0.95 138 XM_H_Long_From02 3732 1.06 1.32 0.95 139 XMBSHREFv2 3663 0.77 0.37 0.93 140 TVD_SPACE_RATIO 3573 0.79 0.52 0.91 141 TooManyTo_004 3559 0.79 0.50 0.91 142 RELAYCOUNTRY_CA 3536 2.31 5.65 0.90 143 DKIM_ADSP_CUSTOM_MED 3310 0.83 0.80 0.84 144 XM_B_SEO 3291 0.96 1.25 0.84 145 XMGenDplmaNmb 3185 0.95 1.27 0.81 146 RCVD_IN_RP_SAFE 3154 0.77 0.69 0.80 147 TR_MetaPhish_Combo_01 3128 0.90 1.13 0.80 148 FVGT_m_MULTI_ODD_EMAIL 2946 0.55 0.07 0.75 149 TooManyTo_005 2877 0.58 0.22 0.73 150 XM_OfRef6 2873 1.20 2.31 0.73 151 T_FILL_THIS_FORM_SHORT 2803 1.54 3.50 0.71 152 RCVD_IN_RP_CERTIFIED 2788 0.67 0.58 0.71 153 HTML_TAG_BALANCE_BODY 2723 0.85 1.22 0.69 154 XMStockSpam_06 2690 1.14 2.22 0.69 155 XMBdyGiftCard01 2533 0.84 1.31 0.65 156 RCVD_IN_MSPIKE_H4 2533 0.52 0.21 0.65 157 XM_UB50 2457 1.94 5.07 0.63 158 XM_shorewaves_Whitelist 2448 0.44 0.00 0.62 159 HTTPS_HTTP_MISMATCH 2438 0.91 1.59 0.62 160 XMBody_95 2437 0.51 0.26 0.62 161 T_OBFU_PDF_ATTACH 2428 0.52 0.28 0.62 162 XM_B_COPY_HTML 2412 0.65 0.72 0.61 163 DKIM_ADSP_NXDOMAIN 2408 0.62 0.63 0.61 164 FROM_GOV_DKIM_AU 2406 0.53 0.32 0.61 165 XM_ShortIntro_01 2403 0.56 0.44 0.61 166 SpammyFromTLD_01 2369 1.50 3.63 0.60 167 RELAYCOUNTRY_GB 2328 0.76 1.14 0.59 168 NML_ADSP_CUSTOM_MED 2323 0.60 0.62 0.59 169 XMHTML_After_End 2320 0.94 1.77 0.59 170 MSGID_NOFQDN1 2304 0.42 0.01 0.59 171 TR_XM_SpammyWords2 2282 3.85 11.60 0.58 172 XMPhish30 2254 0.70 1.00 0.57 173 T_XMDrugObfuBody_00 2201 0.96 1.90 0.56 174 HTML_IMAGE_ONLY_20 2128 0.54 0.53 0.54 175 XM_B_DNDMA 2071 0.64 0.92 0.53 176 SHORT_HELO_AND_INLINE_IMAGE 1912 0.36 0.07 0.49 177 T_Symld_Words_02 1880 0.57 0.80 0.48 178 FORGED_GMAIL_RCVD 1877 0.54 0.67 0.48 179 XM_B_COVIDMETA 1830 0.93 2.03 0.47 180 XMLngstWrd_00 1829 1.70 4.64 0.47 181 XM_B_SpammyWords4 1828 0.84 1.73 0.47 182 URI_TRY_3LD 1820 0.62 1.00 0.46 183 XMBrknScrpt_02 1816 0.80 1.60 0.46 184 RCVD_IN_SORBS_DUL 1810 0.35 0.10 0.46 185 XM_H_PHPMailer 1799 0.53 0.71 0.46 186 XMNoVowels 1791 0.42 0.33 0.46 187 XM_ProductURIs 1766 0.64 1.10 0.45 188 RCVD_IN_BL_SPAMCOP_NET 1760 2.66 7.88 0.45 189 MPART_ALT_DIFF_COUNT 1719 0.55 0.82 0.44 190 XMMoneyMeta_00 1707 0.62 1.05 0.44 191 XMLngstWrd_01 1654 1.66 4.59 0.42 192 XMSubMetaI_00 1540 0.60 1.08 0.39 193 SpammyFromTLD_02 1521 0.92 2.19 0.39 194 HTML_IMAGE_ONLY_28 1505 0.40 0.43 0.38 195 XMSexyCombo_01 1496 0.88 2.05 0.38 196 RDNS_DYNAMIC 1484 0.41 0.49 0.38 197 XMHTMLBadTable_001 1480 0.51 0.83 0.38 198 HTML_IMAGE_ONLY_32 1456 0.32 0.21 0.37 199 MY_SERVERS_FOUND 1454 0.31 0.17 0.37 200 TM2_M_A_HREF_HREF 1449 0.48 0.74 0.37 ----------------------------------------------------------------------