Email: 702197 Autolearn: 0 AvgScore: -1.38 AvgScanTime: 1.98 sec Spam: 89025 Autolearn: 0 AvgScore: 12.16 AvgScanTime: 4.04 sec Ham: 613172 Autolearn: 0 AvgScore: -3.34 AvgScanTime: 1.68 sec Time Spent Running SA: 385.45 hours Time Spent Processing Spam: 99.79 hours Time Spent Processing Ham: 285.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 86410 98.19 97.06 98.36 2 HTML_MESSAGE 82349 91.04 92.50 90.83 3 DKIM_SIGNED 70035 70.16 78.67 68.92 4 XM_DK_Pass 67938 68.91 76.31 67.83 5 XM_B_Unicode 66825 74.32 75.06 74.22 6 RELAYCOUNTRY_US 60124 81.23 67.54 83.22 7 XMListUnsubscribeExists 59538 49.29 66.88 46.74 8 DKIM_VALID 56447 63.88 63.41 63.94 9 XM_DK_Undo_02 49539 16.33 55.65 10.63 10 DKIM_VALID_AU 42955 48.26 48.25 48.26 11 BAYES_99 34393 10.80 38.63 6.76 12 XM_B_Unicode3 34099 43.17 38.30 43.87 13 BAYES_50 31543 47.22 35.43 48.93 14 LOC_TINY_FONT_1 28985 23.79 32.56 22.51 15 BOTNET 27430 8.27 30.81 5.00 16 DKIM_VALID_EF 26866 26.49 30.18 25.96 17 BAYES_999 26850 8.46 30.16 5.31 18 RELAYCOUNTRY_META 26738 8.88 30.03 5.81 19 MIME_HTML_ONLY 24165 24.97 27.14 24.66 20 HTML_FONT_LOW_CONTRAST 24051 24.87 27.02 24.56 21 FVGT_m_MULTI_ODD 22589 21.20 25.37 20.59 22 XMSubLong 22053 21.69 24.77 21.24 23 RCVD_IN_MSPIKE_H2 21379 23.02 24.01 22.88 24 UNTRUSTED_Relay 20172 5.51 22.66 3.02 25 XM_Body_Dirty_Words 20161 13.49 22.65 12.16 26 T_KAM_HTML_FONT_INVALID 19409 17.18 21.80 16.51 27 T_TM2_M_HEADER_IN_MSG 19108 25.53 21.46 26.12 28 XM_Multi_Part_URI 17495 11.94 19.65 10.82 29 XM_UncommonTLD01 16404 4.87 18.43 2.90 30 BOTNET_IPINHOSTNAME 13730 6.11 15.42 4.75 31 DKIM_INVALID 13588 6.28 15.26 4.98 32 XMSexyCombo_05 12104 5.53 13.60 4.36 33 XM_B_Phish_Phrases 11881 8.03 13.35 7.26 34 LOTS_OF_MONEY 11764 8.04 13.21 7.29 35 XM_B_Unsub 11470 11.17 12.88 10.92 36 MPART_ALT_DIFF 11446 10.23 12.86 9.84 37 NO_DNS_FOR_FROM 10872 4.23 12.21 3.07 38 RCVD_IN_MSPIKE_BL 9537 2.10 10.71 0.85 39 LotsOfNums_01 9355 8.37 10.51 8.06 40 XM_Evil_Numbers_Gen 8931 9.28 10.03 9.17 41 RCVD_IN_MSPIKE_WL 7810 22.37 8.77 24.35 42 MIME_HTML_MOSTLY 7804 3.23 8.77 2.43 43 HTML_IMAGE_RATIO_02 7696 6.21 8.64 5.86 44 RCVD_IN_BL_SPAMCOP_NET 7636 2.27 8.58 1.36 45 XMSubMetaSx_00 7213 4.21 8.10 3.64 46 BAYES_80 6879 4.73 7.73 4.30 47 XM_SPF_SoftFail 6861 2.38 7.71 1.61 48 SpammyFromTLD_01 6594 1.63 7.41 0.79 49 RCVD_IN_RP_RNBL 6513 1.04 7.32 0.13 50 TR_XM_PhishingBody 6508 3.49 7.31 2.94 51 BAYES_60 6429 6.53 7.22 6.43 52 XM_UB50 6245 2.39 7.01 1.72 53 TooManyTo_001 6196 7.13 6.96 7.16 54 RELAYCOUNTRY_CA 6141 2.27 6.90 1.60 55 XM_H_Long_From01 6006 5.13 6.75 4.89 56 XM_B_COVIDMETA 5885 2.17 6.61 1.53 57 RELAYCOUNTRY_FR 5819 1.09 6.54 0.30 58 XM_UB99 5727 0.82 6.43 0.01 59 XM_DIRTYINTL 5577 1.28 6.26 0.55 60 URI_PHP_REDIR 5486 0.84 6.16 0.07 61 HTML_IMAGE_RATIO_04 5435 12.36 6.11 13.27 62 SpammyFromTLD_02 5233 1.04 5.88 0.34 63 XM_B_SpammyTLD 4985 2.29 5.60 1.81 64 RCVD_IN_PSBL 4954 0.72 5.56 0.02 65 UNPARSEABLE_RELAY 4600 6.62 5.17 6.83 66 RCVD_IN_MSPIKE_H3 4514 12.70 5.07 13.81 67 RCVD_IN_MSPIKE_L3 4436 1.08 4.98 0.51 68 BAYES_95 4419 2.89 4.96 2.59 69 TR_XM_COVIDMETA4 4321 1.18 4.85 0.65 70 T_XMDrugObfuBody_08 4243 1.85 4.77 1.43 71 XM_B_Phish66 4188 2.13 4.70 1.76 72 RCVD_IN_MSPIKE_L5 4159 0.84 4.67 0.28 73 XM_UB999 4139 0.59 4.65 0.00 74 TR_XM_INV_DKIM 3993 0.71 4.49 0.16 75 SUBJ_ALL_CAPS 3972 2.06 4.46 1.71 76 BOTNET_NORDNS 3609 2.25 4.05 1.99 77 XM_SendGrid 3576 5.84 4.02 6.11 78 XM_URI_RBL 3256 0.64 3.66 0.20 79 HTML_IMAGE_RATIO_08 3216 2.62 3.61 2.48 80 XMDiploma_00 3169 1.81 3.56 1.56 81 RCVD_IN_MSPIKE_H4 3137 8.26 3.52 8.95 82 TR_XM_MaxWHORU 3118 0.49 3.50 0.05 83 XM_OfRef6 3104 1.41 3.49 1.11 84 XMNumbers 3104 2.91 3.49 2.83 85 XMBody_17 3019 1.18 3.39 0.86 86 XMBrknScrpt_02 2909 1.22 3.27 0.93 87 XMStrtUSub 2872 8.61 3.23 9.39 88 T_PDS_OTHER_BAD_TLD 2835 0.97 3.18 0.64 89 URIBL_SBL_A 2826 0.56 3.17 0.18 90 TM2_M_URI_OPT_OUT 2820 4.12 3.17 4.26 91 FROM_SUSPICIOUS_NTLD 2790 0.45 3.13 0.06 92 TR_XM_COVIDMETA1 2692 0.72 3.02 0.38 93 TR_XM_MaxBayes 2682 0.41 3.01 0.03 94 FROM_SUSPICIOUS_NTLD_FP 2658 0.43 2.99 0.06 95 XMSexyCombo_01 2650 0.93 2.98 0.63 96 KHOP_HELO_FCRDNS 2611 1.64 2.93 1.46 97 TR_XM_MaxSPIKE 2579 0.41 2.90 0.05 98 TR_XM_PHPDW 2509 0.76 2.82 0.46 99 XM_B_Unsub2 2483 2.62 2.79 2.60 100 XM_UB80 2457 0.49 2.76 0.16 101 XM_CamelCaseFrm001 2428 1.70 2.73 1.55 102 TR_XM_UnparsRelay 2399 0.69 2.69 0.40 103 T_TooManySym_01 2344 3.82 2.63 3.99 104 RELAYCOUNTRY_DE 2344 0.66 2.63 0.38 105 T_REMOTE_IMAGE 2341 2.96 2.63 3.01 106 ALL_TRUSTED 2336 10.85 2.62 12.04 107 HTML_IMAGE_RATIO_06 2326 4.89 2.61 5.22 108 BAYES_40 2286 4.75 2.57 5.07 109 HTML_MIME_NO_HTML_TAG 2251 2.10 2.53 2.03 110 RELAYCOUNTRY_RU 2225 1.06 2.50 0.85 111 MIME_QP_LONG_LINE 2222 4.52 2.50 4.82 112 XM_UB60 2206 0.54 2.48 0.26 113 TR_XM_PHPForged 2174 0.68 2.44 0.42 114 TR_XM_FormFill2 2156 0.67 2.42 0.42 115 XM_H_PHPOS 2152 0.67 2.42 0.41 116 URI_HEX 2135 1.69 2.40 1.59 117 TM2_M_VERY_LONG_WORD 2075 1.25 2.33 1.10 118 XM_UB95 2053 0.31 2.31 0.02 119 MIME_HTML_ONLY_MULTI 2038 7.23 2.29 7.94 120 DKIM_ADSP_NXDOMAIN 1868 0.85 2.10 0.67 121 T_XMDrugObfuBody_14 1821 1.73 2.05 1.68 122 XMMoneyMeta_00 1813 0.76 2.04 0.58 123 DKIM_ADSP_CUSTOM_MED 1765 1.15 1.98 1.03 124 ANY_BOUNCE_MESSAGE 1722 2.85 1.93 2.99 125 BOUNCE_MESSAGE 1720 2.85 1.93 2.99 126 TR_Mismatch_TLD_02 1715 0.31 1.93 0.07 127 XMHTML_After_End 1686 0.87 1.89 0.72 128 T_FILL_THIS_FORM_SHORT 1681 0.95 1.89 0.81 129 NML_ADSP_CUSTOM_MED 1679 0.89 1.89 0.75 130 URI_TRY_3LD 1666 1.40 1.87 1.33 131 TR_Symld_Words 1593 1.73 1.79 1.72 132 TR_Caps_n_Bayes_99 1551 0.33 1.74 0.13 133 LongTLD 1543 0.34 1.73 0.14 134 MISSING_HEADERS 1495 0.69 1.68 0.54 135 TR_XM_RelayPhish 1486 0.31 1.67 0.11 136 RDNS_DYNAMIC 1483 0.48 1.67 0.31 137 XM_SPF_Unknown 1481 0.72 1.66 0.59 138 FROM_EXCESS_BASE64 1474 2.47 1.66 2.58 139 FORGED_GMAIL_RCVD 1470 0.69 1.65 0.55 140 TR_XM_DK_SendGrid 1449 3.14 1.63 3.36 141 TR_LOTS_OF_MONEY3 1446 0.61 1.62 0.46 142 BAYES_20 1425 4.07 1.60 4.43 143 XMSubNoVowel 1424 3.63 1.60 3.93 144 XMSexyCombo_04 1390 0.35 1.56 0.18 145 MAILING_LIST_MULTI 1374 1.92 1.54 1.97 146 XMStockSpam_06 1339 1.45 1.50 1.44 147 T_XMDrugObfuBody_00 1331 0.70 1.50 0.59 148 XM_PDF 1324 3.43 1.49 3.71 149 XMBounce_01 1305 0.29 1.47 0.11 150 RELAYCOUNTRY_GB 1295 0.90 1.45 0.82 151 RELAYCOUNTRY_CN 1292 0.23 1.45 0.05 152 XMSlimDrugH 1240 0.58 1.39 0.46 153 XMSubMetaSxObfu_03 1230 0.56 1.38 0.44 154 URI_NOVOWEL 1198 1.89 1.35 1.97 155 DEAR_SOMETHING 1192 0.32 1.34 0.17 156 XM_H_PHPMailer 1190 0.60 1.34 0.49 157 REPLYTO_WITHOUT_TO_CC 1189 0.22 1.34 0.05 158 DATE_IN_PAST_03_06 1183 0.27 1.33 0.12 159 MPART_ALT_DIFF_COUNT 1171 0.45 1.32 0.32 160 XMGenDplmaNmb 1116 0.96 1.25 0.92 161 DATE_IN_PAST_06_12 1115 0.37 1.25 0.24 162 XM_HighProb1 1115 0.16 1.25 0.01 163 T_TVD_MIME_NO_HEADERS 1111 0.19 1.25 0.04 164 URI_NO_WWW_BIZ_CGI 1108 0.17 1.24 0.01 165 XMMailDelErr 1098 0.16 1.23 0.00 166 XM_BadFromFormat 1094 0.31 1.23 0.17 167 TR_Mismatch_TLD_01 1093 0.39 1.23 0.27 168 XM_B_COPY_HTML 1051 0.53 1.18 0.43 169 XMBdyGiftCard01 1039 0.79 1.17 0.74 170 NUMERIC_HTTP_ADDR 1037 0.52 1.16 0.43 171 XM_DK_Undo_01 1035 1.58 1.16 1.64 172 XM_OfRef7 1032 0.24 1.16 0.11 173 TR_LOTS_OF_MONEY1 1026 0.17 1.15 0.02 174 HELO_NODOT 1004 1.46 1.13 1.50 175 HELO_NO_DOMAIN 1004 1.46 1.13 1.50 176 FROM_MISSPACED 984 0.15 1.11 0.01 177 XMBody_78 977 0.42 1.10 0.33 178 TR_MetaPhish_Combo_01 927 1.25 1.04 1.28 179 DIET_1 920 0.49 1.03 0.41 180 XMSubMetaI_00 901 0.62 1.01 0.56 181 FSL_THIS_IS_ADV 896 0.21 1.01 0.09 182 RCVD_IN_MSPIKE_L4 893 0.18 1.00 0.06 183 XMPhish14 887 0.46 1.00 0.38 184 MIME_CHARSET_FARAWAY 879 0.20 0.99 0.08 185 BAYES_05 877 3.22 0.99 3.54 186 FROM_MISSP_MSFT 875 0.12 0.98 0.00 187 HK_RANDOM_REPLYTO 864 0.25 0.97 0.14 188 RELAYCOUNTRY_NL 859 0.32 0.96 0.22 189 XMPhish30 858 0.49 0.96 0.43 190 INVESTMENT_ADVICE 852 0.23 0.96 0.13 191 DEAR_FRIEND 849 0.20 0.95 0.09 192 MONEY_FROM_MISSP 845 0.12 0.95 0.00 193 URIBL_BLACK 845 0.14 0.95 0.02 194 T_XMHurry_00 842 0.60 0.95 0.55 195 XMReplyNow 829 0.24 0.93 0.14 196 FSL_CTYPE_WIN1251 824 0.12 0.93 0.00 197 RELAYCOUNTRY_IN 821 0.21 0.92 0.11 198 NORDNS_LOW_CONTRAST 807 0.12 0.91 0.01 199 TooManyTo_002 805 1.59 0.90 1.69 200 XM_H_MailChimp 803 0.28 0.90 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 603107 98.19 97.06 98.36 2 HTML_MESSAGE 556935 91.04 92.50 90.83 3 RELAYCOUNTRY_US 510301 81.23 67.54 83.22 4 XM_B_Unicode 455076 74.32 75.06 74.22 5 DKIM_SIGNED 422625 70.16 78.67 68.92 6 XM_DK_Pass 415942 68.91 76.31 67.83 7 DKIM_VALID 392084 63.88 63.41 63.94 8 BAYES_50 300037 47.22 35.43 48.93 9 DKIM_VALID_AU 295930 48.26 48.25 48.26 10 XMListUnsubscribeExists 286575 49.29 66.88 46.74 11 XM_B_Unicode3 269008 43.17 38.30 43.87 12 T_TM2_M_HEADER_IN_MSG 160156 25.53 21.46 26.12 13 DKIM_VALID_EF 159149 26.49 30.18 25.96 14 MIME_HTML_ONLY 151207 24.97 27.14 24.66 15 HTML_FONT_LOW_CONTRAST 150594 24.87 27.02 24.56 16 RCVD_IN_MSPIKE_WL 149306 22.37 8.77 24.35 17 RCVD_IN_MSPIKE_H2 140269 23.02 24.01 22.88 18 LOC_TINY_FONT_1 138050 23.79 32.56 22.51 19 XMSubLong 130242 21.69 24.77 21.24 20 FVGT_m_MULTI_ODD 126248 21.20 25.37 20.59 21 BAYES_00 110069 15.78 0.87 17.95 22 T_KAM_HTML_FONT_INVALID 101240 17.18 21.80 16.51 23 RCVD_IN_MSPIKE_H3 84649 12.70 5.07 13.81 24 HTML_IMAGE_RATIO_04 81374 12.36 6.11 13.27 25 XM_H_Trusted_IP 78711 11.21 0.00 12.84 26 XM_Body_Dirty_Words 74538 13.49 22.65 12.16 27 ALL_TRUSTED 73832 10.85 2.62 12.04 28 XM_B_Unsub 66932 11.17 12.88 10.92 29 XM_Multi_Part_URI 66348 11.94 19.65 10.82 30 HTML_FONT_FACE_BAD 66338 9.54 0.75 10.82 31 XM_DK_Undo_02 65162 16.33 55.65 10.63 32 MPART_ALT_DIFF 60358 10.23 12.86 9.84 33 XMStrtUSub 57566 8.61 3.23 9.39 34 XM_Evil_Numbers_Gen 56204 9.28 10.03 9.17 35 RCVD_IN_MSPIKE_H4 54898 8.26 3.52 8.95 36 LotsOfNums_01 49404 8.37 10.51 8.06 37 MIME_HTML_ONLY_MULTI 48711 7.23 2.29 7.94 38 IN_ZIMBRA_NJ_WHITELIST 46131 6.57 0.03 7.52 39 TR_XM_DK_Bayes 45173 6.49 0.46 7.37 40 LOTS_OF_MONEY 44713 8.04 13.21 7.29 41 XM_B_Phish_Phrases 44513 8.03 13.35 7.26 42 TooManyTo_001 43887 7.13 6.96 7.16 43 TR_XM_DK_Bayes1 42095 6.02 0.22 6.87 44 UNPARSEABLE_RELAY 41853 6.62 5.17 6.83 45 BAYES_99 41436 10.80 38.63 6.76 46 BAYES_60 39429 6.53 7.22 6.43 47 XM_DKIMWhitelistDomains 38202 5.45 0.05 6.23 48 TR_XM_DK_Bayes2 37504 5.37 0.19 6.12 49 XM_SendGrid 37461 5.84 4.02 6.11 50 RCVD_IN_RP_SAFE 37116 5.33 0.38 6.05 51 HTML_IMAGE_RATIO_02 35902 6.21 8.64 5.86 52 RELAYCOUNTRY_META 35626 8.88 30.03 5.81 53 RCVD_IN_RP_CERTIFIED 34772 4.98 0.22 5.67 54 BAYES_999 32557 8.46 30.16 5.31 55 HTML_IMAGE_RATIO_06 32023 4.89 2.61 5.22 56 BAYES_40 31102 4.75 2.57 5.07 57 BOTNET 30635 8.27 30.81 5.00 58 DKIM_INVALID 30541 6.28 15.26 4.98 59 XM_H_Long_From01 29992 5.13 6.75 4.89 60 MIME_QP_LONG_LINE 29552 4.52 2.50 4.82 61 BOTNET_IPINHOSTNAME 29156 6.11 15.42 4.75 62 BAYES_20 27152 4.07 1.60 4.43 63 XMSexyCombo_05 26747 5.53 13.60 4.36 64 BAYES_80 26351 4.73 7.73 4.30 65 TM2_M_URI_OPT_OUT 26141 4.12 3.17 4.26 66 RCVD_IN_IADB_LISTED 25518 3.73 0.79 4.16 67 T_TooManySym_01 24446 3.82 2.63 3.99 68 XMSubNoVowel 24100 3.63 1.60 3.93 69 XM_PDF 22772 3.43 1.49 3.71 70 XMSubMetaSx_00 22346 4.21 8.10 3.64 71 RCVD_IN_IADB_SPF 22125 3.24 0.69 3.61 72 BAYES_05 21716 3.22 0.99 3.54 73 TR_XM_DK_SendGrid 20628 3.14 1.63 3.36 74 RCVD_IN_IADB_SENDERID 19806 2.91 0.67 3.23 75 RCVD_IN_IADB_DK 19163 2.81 0.66 3.13 76 NO_DNS_FOR_FROM 18800 4.23 12.21 3.07 77 UNTRUSTED_Relay 18542 5.51 22.66 3.02 78 T_REMOTE_IMAGE 18472 2.96 2.63 3.01 79 ANY_BOUNCE_MESSAGE 18316 2.85 1.93 2.99 80 BOUNCE_MESSAGE 18305 2.85 1.93 2.99 81 TR_XM_PhishingBody 18001 3.49 7.31 2.94 82 XM_UncommonTLD01 17767 4.87 18.43 2.90 83 XMNumbers 17349 2.91 3.49 2.83 84 XM_B_Unsub2 15929 2.62 2.79 2.60 85 BAYES_95 15875 2.89 4.96 2.59 86 FROM_EXCESS_BASE64 15843 2.47 1.66 2.58 87 RCVD_IN_IADB_VOUCHED 15640 2.26 0.27 2.55 88 HTML_IMAGE_RATIO_08 15209 2.62 3.61 2.48 89 MIME_HTML_MOSTLY 14903 3.23 8.77 2.43 90 HTML_MIME_NO_HTML_TAG 12461 2.10 2.53 2.03 91 BOTNET_NORDNS 12210 2.25 4.05 1.99 92 URI_NOVOWEL 12108 1.89 1.35 1.97 93 MAILING_LIST_MULTI 12091 1.92 1.54 1.97 94 T_TooManySym_02 11513 1.72 0.61 1.88 95 XM_B_SpammyTLD 11082 2.29 5.60 1.81 96 XM_B_Phish66 10769 2.13 4.70 1.76 97 XM_UB50 10548 2.39 7.01 1.72 98 TR_Symld_Words 10532 1.73 1.79 1.72 99 SUBJ_ALL_CAPS 10491 2.06 4.46 1.71 100 TooManyTo_002 10361 1.59 0.90 1.69 101 T_XMDrugObfuBody_14 10306 1.73 2.05 1.68 102 XM_DK_Undo_01 10058 1.58 1.16 1.64 103 XM_SPF_SoftFail 9875 2.38 7.71 1.61 104 RCVD_IN_IADB_OPTIN 9831 1.43 0.27 1.60 105 RELAYCOUNTRY_CA 9806 2.27 6.90 1.60 106 RCVD_IN_MSPIKE_H5 9759 1.41 0.18 1.59 107 URI_HEX 9730 1.69 2.40 1.59 108 XMDiploma_00 9540 1.81 3.56 1.56 109 XM_CamelCaseFrm001 9501 1.70 2.73 1.55 110 TVD_RCVD_IP 9452 1.39 0.35 1.54 111 XM_B_COVIDMETA 9381 2.17 6.61 1.53 112 HELO_NODOT 9219 1.46 1.13 1.50 113 HELO_NO_DOMAIN 9216 1.46 1.13 1.50 114 KHOP_HELO_FCRDNS 8938 1.64 2.93 1.46 115 XMStockSpam_06 8849 1.45 1.50 1.44 116 T_XMDrugObfuBody_08 8782 1.85 4.77 1.43 117 RCVD_IN_BL_SPAMCOP_NET 8311 2.27 8.58 1.36 118 URI_TRY_3LD 8145 1.40 1.87 1.33 119 XMSubGarbage 8065 1.16 0.08 1.32 120 TR_MetaPhish_Combo_01 7818 1.25 1.04 1.28 121 HELO_MISC_IP 7749 1.18 0.60 1.26 122 CK_HELO_DYNAMIC_SPLIT_IP 7740 1.17 0.53 1.26 123 IN_HORDE_ADDRESS_BOOK 7684 1.10 0.03 1.25 124 INVALID_MSGID 7564 1.17 0.76 1.23 125 XMSubLongNoVowel 7435 1.11 0.38 1.21 126 XM_GoogleGroups 7107 1.07 0.49 1.16 127 TooManyTo_003 6875 1.06 0.66 1.12 128 XM_OfRef6 6786 1.41 3.49 1.11 129 TM2_M_VERY_LONG_WORD 6733 1.25 2.33 1.10 130 XM_E_Blogspot 6594 0.95 0.09 1.08 131 TO_MALFORMED 6404 0.92 0.06 1.04 132 DKIM_ADSP_CUSTOM_MED 6336 1.15 1.98 1.03 133 XMCapTrack 6239 0.96 0.58 1.02 134 XMGappySubj_01 6223 0.91 0.17 1.01 135 XMBrknScrpt_02 5689 1.22 3.27 0.93 136 XMGenDplmaNmb 5643 0.96 1.25 0.92 137 USER_IN_DEF_DKIM_WL 5489 0.78 0.00 0.90 138 XMBody_17 5301 1.18 3.39 0.86 139 RELAYCOUNTRY_RU 5238 1.06 2.50 0.85 140 RCVD_IN_MSPIKE_BL 5224 2.10 10.71 0.85 141 XM_ProductURIs 5221 0.84 0.78 0.85 142 XM_H_Long_From02 5151 0.83 0.79 0.84 143 RELAYCOUNTRY_GB 5022 0.90 1.45 0.82 144 T_FILL_THIS_FORM_SHORT 4969 0.95 1.89 0.81 145 TooManyTo_004 4955 0.78 0.56 0.81 146 SpammyFromTLD_01 4849 1.63 7.41 0.79 147 T_TooManySym_03 4676 0.69 0.18 0.76 148 NML_ADSP_CUSTOM_MED 4576 0.89 1.89 0.75 149 XMBdyGiftCard01 4517 0.79 1.17 0.74 150 XMHTML_After_End 4445 0.87 1.89 0.72 151 T_Symld_Words_02 4309 0.73 0.89 0.70 152 XM_RXBody 4134 0.65 0.46 0.67 153 DKIM_ADSP_NXDOMAIN 4108 0.85 2.10 0.67 154 HTTPS_HTTP_MISMATCH 4102 0.69 0.86 0.67 155 TooManyTo_005 4073 0.64 0.44 0.66 156 TR_MSPIKEBAYES00 3976 0.57 0.00 0.65 157 TR_XM_COVIDMETA4 3955 1.18 4.85 0.65 158 T_PDS_OTHER_BAD_TLD 3945 0.97 3.18 0.64 159 XM_ShortIntro_01 3855 0.62 0.54 0.63 160 XMSexyCombo_01 3848 0.93 2.98 0.63 161 XMBody_95 3692 0.55 0.16 0.60 162 TR_BOTNET_NEGATE 3633 0.57 0.40 0.59 163 T_XMDrugObfuBody_00 3598 0.70 1.50 0.59 164 XM_SPF_Unknown 3595 0.72 1.66 0.59 165 XMMoneyMeta_00 3536 0.76 2.04 0.58 166 SUBJ_DOLLARS 3473 0.53 0.31 0.57 167 XMSubMetaI_00 3449 0.62 1.01 0.56 168 T_OBFU_PDF_ATTACH 3447 0.53 0.27 0.56 169 XMHTMLBadTable_001 3404 0.54 0.46 0.56 170 XM_DIRTYINTL 3391 1.28 6.26 0.55 171 FORGED_GMAIL_RCVD 3380 0.69 1.65 0.55 172 T_XMHurry_00 3358 0.60 0.95 0.55 173 MISSING_HEADERS 3338 0.69 1.68 0.54 174 RCVD_IN_MSPIKE_L3 3148 1.08 4.98 0.51 175 XMNoVowels 3122 0.51 0.53 0.51 176 HTML_TAG_BALANCE_BODY 3109 0.53 0.68 0.51 177 FROM_GOV_DKIM_AU 3048 0.45 0.14 0.50 178 XM_H_PHPMailer 3009 0.60 1.34 0.49 179 XM_B_REG_HTML 3006 0.46 0.22 0.49 180 TVD_SPACE_RATIO 2962 0.44 0.11 0.48 181 TR_LOTS_OF_MONEY3 2829 0.61 1.62 0.46 182 XMSlimDrugH 2818 0.58 1.39 0.46 183 TR_XM_PHPDW 2801 0.76 2.82 0.46 184 BODY_QUOTE_MALF_MSGID 2766 0.49 0.78 0.45 185 XMSubMetaSxObfu_03 2706 0.56 1.38 0.44 186 XM_B_COPY_HTML 2640 0.53 1.18 0.43 187 NUMERIC_HTTP_ADDR 2634 0.52 1.16 0.43 188 XMPhish30 2606 0.49 0.96 0.43 189 T_TooManySym_04 2602 0.38 0.08 0.42 190 TR_XM_PHPForged 2589 0.68 2.44 0.42 191 TR_XM_FormFill2 2566 0.67 2.42 0.42 192 XM_H_PHPOS 2542 0.67 2.42 0.41 193 DIET_1 2538 0.49 1.03 0.41 194 TR_XM_UnparsRelay 2479 0.69 2.69 0.40 195 HTML_IMAGE_ONLY_28 2474 0.41 0.42 0.40 196 XMBSHREFv2 2454 0.40 0.36 0.40 197 XMLngstWrd_00 2427 0.40 0.43 0.40 198 PLING_QUERY 2393 0.39 0.40 0.39 199 RCVD_IN_SORBS_DUL 2375 0.37 0.23 0.39 200 FROM_GOV_SPOOF 2363 0.36 0.21 0.39 ----------------------------------------------------------------------