Email: 792284 Autolearn: 0 AvgScore: 1.90 AvgScanTime: 1.31 sec Spam: 219829 Autolearn: 0 AvgScore: 13.51 AvgScanTime: 1.43 sec Ham: 572455 Autolearn: 0 AvgScore: -2.56 AvgScanTime: 1.26 sec Time Spent Running SA: 288.39 hours Time Spent Processing Spam: 87.41 hours Time Spent Processing Ham: 200.97 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 208951 91.72 95.05 90.44 2 DKIM_SIGNED 180580 72.83 82.15 69.25 3 XM_DK_Pass 176390 71.55 80.24 68.21 4 DCC_CHECK 174276 48.82 79.28 37.13 5 DKIM_VALID 172247 69.67 78.35 66.34 6 RELAYCOUNTRY_US 166231 82.27 75.62 84.82 7 XM_B_Unicode 163709 74.89 74.47 75.05 8 XMListUnsubscribeExists 145491 51.60 66.18 46.00 9 XM_B_SpammyWords 145268 53.23 66.08 48.29 10 DKIM_VALID_AU 134575 53.75 61.22 50.88 11 XM_DK_Undo_02 97355 17.03 44.29 6.57 12 XM_B_Unicode3 83209 43.37 37.85 45.50 13 XM_B_SpammyWords2 81216 23.64 36.95 18.54 14 BAYES_50 81034 46.45 36.86 50.13 15 HTML_FONT_LOW_CONTRAST 79333 28.61 36.09 25.74 16 TR_XM_DKIM_Undo 77053 13.27 35.05 4.91 17 LOC_TINY_FONT_1 75250 25.60 34.23 22.28 18 BAYES_99 74171 12.36 33.74 4.15 19 MIME_HTML_ONLY 71957 26.16 32.73 23.64 20 RCVD_IN_MSPIKE_H2 62393 25.43 28.38 24.30 21 DKIM_VALID_EF 60317 26.69 27.44 26.40 22 BAYES_999 57916 9.77 26.35 3.40 23 TR_DCC_Bayes_99 56868 8.76 25.87 2.19 24 FVGT_m_MULTI_ODD 53644 21.85 24.40 20.87 25 RELAYCOUNTRY_META 52703 10.10 23.97 4.77 26 XMSubLong 51588 21.56 23.47 20.83 27 T_KAM_HTML_FONT_INVALID 51032 18.44 23.21 16.61 28 T_TM2_M_HEADER_IN_MSG 44248 24.17 20.13 25.72 29 XM_Body_Dirty_Words 41949 14.21 19.08 12.34 30 DCC_CHECK_NEGATIVE 41697 49.37 18.97 61.04 31 XM_Multi_Part_URI 41034 12.83 18.67 10.58 32 UNTRUSTED_Relay 38489 6.36 17.51 2.08 33 FSL_BULK_SIG 37572 8.40 17.09 5.06 34 RCVD_IN_MSPIKE_WL 35581 23.06 16.19 25.70 35 BOTNET 34935 5.48 15.89 1.49 36 XM_B_Unsub 33686 11.31 15.32 9.77 37 BOTNET_IPINHOSTNAME 30847 6.75 14.03 3.96 38 LOTS_OF_MONEY 29247 8.91 13.30 7.22 39 TR_XM_SpammyWords2 28614 3.95 13.02 0.47 40 XM_B_SpammyWords3 24798 6.55 11.28 4.73 41 XMSexyCombo_05 24607 5.87 11.19 3.83 42 LotsOfNums_01 23260 8.40 10.58 7.56 43 RCVD_IN_MSPIKE_BL 21938 3.25 9.98 0.67 44 XM_UncommonTLD01 21795 4.85 9.91 2.91 45 XM_Evil_Numbers_Gen 20869 8.79 9.49 8.51 46 BAYES_80 20302 5.22 9.24 3.68 47 MPART_ALT_DIFF 20049 9.47 9.12 9.60 48 XM_B_Phish_Phrases 19886 7.83 9.05 7.37 49 RCVD_IN_MSPIKE_H3 19203 12.73 8.74 14.27 50 RCVD_IN_BL_SPAMCOP_NET 18399 3.10 8.37 1.08 51 BAYES_60 17606 6.75 8.01 6.27 52 HTML_IMAGE_RATIO_02 17164 6.51 7.81 6.01 53 T_REMOTE_IMAGE 16211 4.29 7.37 3.11 54 XM_UB50 16039 2.81 7.30 1.08 55 MIME_HTML_MOSTLY 15762 3.68 7.17 2.34 56 XMBrknScrpt_02 15705 2.58 7.14 0.83 57 KHOP_HELO_FCRDNS 15169 2.92 6.90 1.39 58 RCVD_IN_MSPIKE_H4 14337 8.24 6.52 8.90 59 HTML_SHORT_LINK_IMG_1 14080 1.80 6.40 0.03 60 RCVD_IN_MSPIKE_L3 13684 2.05 6.22 0.45 61 TooManyTo_001 13529 6.91 6.15 7.20 62 TR_XM_SpammyWords3 13057 1.95 5.94 0.42 63 HTML_IMAGE_ONLY_12 12871 1.77 5.86 0.20 64 XMSubMetaSx_00 12489 3.61 5.68 2.81 65 HTML_IMAGE_RATIO_04 12461 12.51 5.67 15.14 66 TR_XM_PhishingBody 12422 3.64 5.65 2.86 67 XMNumbers 12382 3.61 5.63 2.83 68 UNPARSEABLE_RELAY 12152 6.48 5.53 6.85 69 BODY_URI_ONLY 12001 1.55 5.46 0.05 70 XM_H_Long_From01 11964 5.31 5.44 5.25 71 BAYES_95 11745 3.10 5.34 2.23 72 RELAYCOUNTRY_CA 10987 2.34 5.00 1.32 73 HTML_IMAGE_RATIO_08 10700 2.81 4.87 2.02 74 XM_SendGrid 10653 5.83 4.85 6.21 75 RELAYCOUNTRY_FR 10059 1.46 4.58 0.27 76 URIBL_SBL_A 10054 1.43 4.57 0.22 77 SpammyFromTLD_01 9843 1.92 4.48 0.94 78 T_FONT_INVIS_NAKED_TO 9793 2.38 4.45 1.58 79 XM_SPF_SoftFail 8948 2.19 4.07 1.47 80 HTML_MIME_NO_HTML_TAG 8821 2.69 4.01 2.19 81 TR_LOTS_OF_MONEY3 8811 1.74 4.01 0.87 82 URI_HEX 8493 2.02 3.86 1.32 83 XM_B_COVIDMETA 8341 1.92 3.79 1.21 84 DKIM_INVALID 8333 3.15 3.79 2.91 85 XMStrtUSub 8152 9.20 3.71 11.31 86 XMBody_17 7842 1.55 3.57 0.78 87 RCVD_IN_RP_SAFE 7750 5.66 3.53 6.48 88 XM_B_Phish66 7677 2.22 3.49 1.73 89 HTML_IMAGE_RATIO_06 7673 4.36 3.49 4.69 90 XM_B_SpammyTLD 7329 2.09 3.33 1.62 91 XM_OfRef6 7245 1.67 3.30 1.04 92 RCVD_IN_RP_RNBL 7227 0.95 3.29 0.06 93 XM_DIRTYINTL 7224 1.21 3.29 0.41 94 T_XMDrugObfuBody_08 6811 2.44 3.10 2.19 95 LH_URI_DOM_IN_PATH 6803 2.05 3.09 1.65 96 RCVD_IN_MSPIKE_L5 6787 0.98 3.09 0.17 97 RCVD_IN_RP_CERTIFIED 6728 5.22 3.06 6.05 98 SpammyFromTLD_02 6539 1.03 2.97 0.29 99 TM2_M_URI_OPT_OUT 6297 2.94 2.86 2.97 100 TR_XM_MaxSPIKE 6282 0.80 2.86 0.01 101 XM_UB60 6240 0.84 2.84 0.07 102 URI_TRY_3LD 6162 1.77 2.80 1.38 103 XM_UB99 6128 0.78 2.79 0.00 104 SUBJ_ALL_CAPS 6079 1.90 2.77 1.57 105 US_DOLLARS_3 6027 1.34 2.74 0.81 106 MIME_HTML_ONLY_MULTI 5889 6.36 2.68 7.78 107 RELAYCOUNTRY_IN 5825 0.82 2.65 0.11 108 BAYES_40 5805 4.44 2.64 5.13 109 TR_XM_DK_SendGrid 5739 3.53 2.61 3.88 110 RELAYCOUNTRY_UA 5703 0.73 2.59 0.01 111 BOTNET_NORDNS 5556 0.71 2.53 0.02 112 T_XMDrugObfuBody_00 5451 1.07 2.48 0.53 113 MIME_QP_LONG_LINE 5403 4.38 2.46 5.12 114 XMDiploma_00 5307 1.62 2.41 1.31 115 TR_XM_MaxBayes 5190 0.66 2.36 0.01 116 TM2_M_VERY_LONG_WORD 5167 1.40 2.35 1.03 117 T_XMHurry_00 5053 1.12 2.30 0.67 118 TR_Sbj_FN_Bdy 4983 0.74 2.27 0.15 119 XM_UB80 4852 0.63 2.21 0.02 120 XM_B_SpammyWords4 4785 1.09 2.18 0.68 121 TR_XM_COVIDMETA4 4631 0.84 2.11 0.36 122 RCVD_IN_PSBL 4590 0.59 2.09 0.02 123 T_TooManySym_01 4539 3.47 2.06 4.01 124 XM_B_Unsub2 4464 2.02 2.03 2.02 125 FROM_EXCESS_BASE64 4320 2.59 1.97 2.83 126 XM_CamelCaseFrm001 4289 1.84 1.95 1.80 127 T_XMDrugObfuBody_14 4277 1.58 1.95 1.44 128 BAYES_20 4248 4.01 1.93 4.80 129 RCVD_IN_IADB_LISTED 4243 3.93 1.93 4.70 130 PDS_OTHER_BAD_TLD 4059 0.76 1.85 0.34 131 TR_XM_SB_Phish 4053 1.90 1.84 1.93 132 XMSexyCombo_01 3914 0.85 1.78 0.50 133 XMSubPhish11 3901 1.84 1.77 1.87 134 TR_Symld_Words 3791 1.58 1.72 1.52 135 XMStockSpam_06 3736 1.23 1.70 1.04 136 XM_UB999 3716 0.47 1.69 0.00 137 XM_URI_RBL 3666 0.67 1.67 0.29 138 XMSubEmpty 3647 0.61 1.66 0.21 139 RCVD_IN_IADB_SPF 3609 3.46 1.64 4.16 140 XMGenDplmaNmb 3435 0.97 1.56 0.74 141 XM_DK_Undo_01 3413 1.42 1.55 1.37 142 RCVD_IN_IADB_SENDERID 3348 3.15 1.52 3.77 143 XMNoSubject 3343 0.48 1.52 0.08 144 MISSING_SUBJECT 3343 0.48 1.52 0.08 145 HTML_FONT_SIZE_LARGE 3340 0.60 1.52 0.25 146 XMSlimDrugH 3324 0.59 1.51 0.24 147 RCVD_IN_IADB_DK 3304 3.06 1.50 3.66 148 TR_XM_UnparsRelay 3228 0.58 1.47 0.24 149 DKIM_ADSP_NXDOMAIN 3098 0.73 1.41 0.46 150 TR_Caps_n_Bayes_99 3042 0.45 1.38 0.09 151 T_FILL_THIS_FORM_SHORT 2997 1.05 1.36 0.93 152 T_Symld_Words_02 2980 0.69 1.36 0.43 153 TR_XM_COVIDMETA1 2980 0.63 1.36 0.35 154 DKIM_ADSP_CUSTOM_MED 2970 1.03 1.35 0.91 155 XM_UB95 2946 0.38 1.34 0.01 156 XMHTML_After_End 2940 0.89 1.34 0.72 157 FROM_SUSPICIOUS_NTLD 2917 0.41 1.33 0.06 158 TR_XM_PHPDW 2910 0.59 1.32 0.30 159 TR_XM_PHPForged 2889 0.58 1.31 0.29 160 TR_XM_FormFill2 2859 0.57 1.30 0.29 161 XM_H_PHPOS 2851 0.57 1.30 0.29 162 FROM_SUSPICIOUS_NTLD_FP 2817 0.40 1.28 0.06 163 MAILING_LIST_MULTI 2813 1.94 1.28 2.19 164 FORGED_GMAIL_RCVD 2807 0.74 1.28 0.53 165 XMBdyGiftCard01 2780 0.88 1.26 0.73 166 BAYES_00 2730 14.99 1.24 20.26 167 RELAYCOUNTRY_GB 2695 0.98 1.23 0.88 168 DATE_IN_PAST_03_06 2680 0.38 1.22 0.06 169 NML_ADSP_CUSTOM_MED 2645 0.77 1.20 0.61 170 PDS_FROM_2_EMAILS 2549 0.41 1.16 0.12 171 XMSubMetaD_00 2546 0.35 1.16 0.05 172 LongTLD 2540 0.41 1.16 0.13 173 TVD_SPACE_RATIO 2524 0.54 1.15 0.30 174 DIET_1 2502 0.58 1.14 0.37 175 REMOVE_BEFORE_LINK 2500 0.48 1.14 0.22 176 URI_NOVOWEL 2482 1.85 1.13 2.12 177 HTML_TAG_BALANCE_BODY 2445 0.60 1.11 0.41 178 TR_XM_INV_DKIM 2419 0.34 1.10 0.05 179 FROM_2_EMAILS_SHORT 2349 0.30 1.07 0.01 180 RDNS_DYNAMIC 2313 0.62 1.05 0.46 181 XMSubMetaD_01 2288 0.29 1.04 0.00 182 TR_XM_RelayPhish 2288 0.42 1.04 0.18 183 TVD_SPACE_RATIO_MINFP 2283 0.30 1.04 0.01 184 URIBL_BLACK 2252 0.30 1.02 0.02 185 PDS_TO_EQ_FROM_NAME 2216 0.28 1.01 0.01 186 XM_PDF 2212 3.02 1.01 3.80 187 XM_ProductURIs 2204 0.90 1.00 0.86 188 XMSubMetaSxObfu_03 2201 0.50 1.00 0.31 189 ALL_TRUSTED 2185 8.58 0.99 11.50 190 BAYES_05 2181 2.68 0.99 3.33 191 RCVD_IN_IADB_VOUCHED 2164 2.28 0.98 2.78 192 XMSubMetaSSx_00 2161 0.38 0.98 0.15 193 XMSubNoVowel 2142 3.21 0.97 4.07 194 XMSubMetaI_00 2045 0.75 0.93 0.69 195 NO_FM_NAME_IP_HOSTN 2043 0.26 0.93 0.00 196 XM_H_Long_From02 2041 0.88 0.93 0.86 197 RCVD_IN_MSPIKE_H5 2041 2.09 0.93 2.54 198 TR_BOTNET_NEGATE 2010 0.48 0.91 0.31 199 XMBody_78 2006 0.58 0.91 0.46 200 MIMEOLE_DIRECT_TO_MX 1989 0.25 0.90 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 517732 91.72 95.05 90.44 2 RELAYCOUNTRY_US 485546 82.27 75.62 84.82 3 XM_B_Unicode 429618 74.89 74.47 75.05 4 DKIM_SIGNED 396418 72.83 82.15 69.25 5 XM_DK_Pass 390489 71.55 80.24 68.21 6 DKIM_VALID 379769 69.67 78.35 66.34 7 DCC_CHECK_NEGATIVE 349423 49.37 18.97 61.04 8 DKIM_VALID_AU 291263 53.75 61.22 50.88 9 BAYES_50 286980 46.45 36.86 50.13 10 XM_B_SpammyWords 276456 53.23 66.08 48.29 11 XMListUnsubscribeExists 263355 51.60 66.18 46.00 12 XM_B_Unicode3 260439 43.37 37.85 45.50 13 DCC_CHECK 212540 48.82 79.28 37.13 14 DKIM_VALID_EF 151131 26.69 27.44 26.40 15 HTML_FONT_LOW_CONTRAST 147370 28.61 36.09 25.74 16 T_TM2_M_HEADER_IN_MSG 147251 24.17 20.13 25.72 17 RCVD_IN_MSPIKE_WL 147136 23.06 16.19 25.70 18 RCVD_IN_MSPIKE_H2 139102 25.43 28.38 24.30 19 MIME_HTML_ONLY 135311 26.16 32.73 23.64 20 LOC_TINY_FONT_1 127562 25.60 34.23 22.28 21 FVGT_m_MULTI_ODD 119492 21.85 24.40 20.87 22 XMSubLong 119217 21.56 23.47 20.83 23 BAYES_00 116002 14.99 1.24 20.26 24 XM_B_SpammyWords2 106109 23.64 36.95 18.54 25 T_KAM_HTML_FONT_INVALID 95076 18.44 23.21 16.61 26 HTML_IMAGE_RATIO_04 86649 12.51 5.67 15.14 27 RCVD_IN_MSPIKE_H3 81667 12.73 8.74 14.27 28 XM_H_Trusted_IP 75424 9.52 0.00 13.18 29 HTML_FONT_FACE_BAD 72447 9.32 0.63 12.66 30 XM_Body_Dirty_Words 70653 14.21 19.08 12.34 31 ALL_TRUSTED 65821 8.58 0.99 11.50 32 XMStrtUSub 64761 9.20 3.71 11.31 33 XM_Multi_Part_URI 60590 12.83 18.67 10.58 34 XM_B_Unsub 55944 11.31 15.32 9.77 35 MPART_ALT_DIFF 54979 9.47 9.12 9.60 36 TR_XM_DK_Bayes 54939 7.18 0.88 9.60 37 TR_XM_DK_Bayes1 53260 6.96 0.86 9.30 38 RCVD_IN_MSPIKE_H4 50953 8.24 6.52 8.90 39 XM_Evil_Numbers_Gen 48737 8.79 9.49 8.51 40 TR_XM_DK_Bayes2 47686 6.20 0.67 8.33 41 XM_DKIMWhitelistDomains 47060 5.95 0.02 8.22 42 MIME_HTML_ONLY_MULTI 44512 6.36 2.68 7.78 43 LotsOfNums_01 43280 8.40 10.58 7.56 44 XM_B_Phish_Phrases 42188 7.83 9.05 7.37 45 LOTS_OF_MONEY 41331 8.91 13.30 7.22 46 TooManyTo_001 41203 6.91 6.15 7.20 47 UNPARSEABLE_RELAY 39206 6.48 5.53 6.85 48 XM_DK_Undo_02 37602 17.03 44.29 6.57 49 RCVD_IN_RP_SAFE 37079 5.66 3.53 6.48 50 BAYES_60 35907 6.75 8.01 6.27 51 XM_SendGrid 35527 5.83 4.85 6.21 52 RCVD_IN_RP_CERTIFIED 34655 5.22 3.06 6.05 53 HTML_IMAGE_RATIO_02 34410 6.51 7.81 6.01 54 IN_ZIMBRA_NJ_WHITELIST 32491 4.12 0.08 5.68 55 XM_H_Long_From01 30074 5.31 5.44 5.25 56 BAYES_40 29394 4.44 2.64 5.13 57 MIME_QP_LONG_LINE 29336 4.38 2.46 5.12 58 FSL_BULK_SIG 28964 8.40 17.09 5.06 59 TR_XM_DKIM_Undo 28085 13.27 35.05 4.91 60 BAYES_20 27485 4.01 1.93 4.80 61 RELAYCOUNTRY_META 27294 10.10 23.97 4.77 62 XM_B_SpammyWords3 27101 6.55 11.28 4.73 63 RCVD_IN_IADB_LISTED 26906 3.93 1.93 4.70 64 HTML_IMAGE_RATIO_06 26837 4.36 3.49 4.69 65 RCVD_IN_IADB_SPF 23819 3.46 1.64 4.16 66 BAYES_99 23733 12.36 33.74 4.15 67 XMSubNoVowel 23278 3.21 0.97 4.07 68 T_TooManySym_01 22947 3.47 2.06 4.01 69 BOTNET_IPINHOSTNAME 22656 6.75 14.03 3.96 70 TR_XM_DK_SendGrid 22224 3.53 2.61 3.88 71 XMSexyCombo_05 21905 5.87 11.19 3.83 72 XM_PDF 21730 3.02 1.01 3.80 73 RCVD_IN_IADB_SENDERID 21588 3.15 1.52 3.77 74 BAYES_80 21090 5.22 9.24 3.68 75 RCVD_IN_IADB_DK 20939 3.06 1.50 3.66 76 BAYES_999 19480 9.77 26.35 3.40 77 BAYES_05 19077 2.68 0.99 3.33 78 T_REMOTE_IMAGE 17814 4.29 7.37 3.11 79 TM2_M_URI_OPT_OUT 17030 2.94 2.86 2.97 80 ANY_BOUNCE_MESSAGE 16882 2.26 0.48 2.95 81 BOUNCE_MESSAGE 16872 2.26 0.48 2.95 82 XM_UncommonTLD01 16665 4.85 9.91 2.91 83 DKIM_INVALID 16649 3.15 3.79 2.91 84 TR_XM_PhishingBody 16385 3.64 5.65 2.86 85 FROM_EXCESS_BASE64 16194 2.59 1.97 2.83 86 XMNumbers 16184 3.61 5.63 2.83 87 XMSubMetaSx_00 16092 3.61 5.68 2.81 88 RCVD_IN_IADB_VOUCHED 15915 2.28 0.98 2.78 89 RCVD_IN_MSPIKE_H5 14516 2.09 0.93 2.54 90 MIME_HTML_MOSTLY 13412 3.68 7.17 2.34 91 BAYES_95 12781 3.10 5.34 2.23 92 TR_DCC_Bayes_99 12549 8.76 25.87 2.19 93 HTML_MIME_NO_HTML_TAG 12528 2.69 4.01 2.19 94 MAILING_LIST_MULTI 12528 1.94 1.28 2.19 95 T_XMDrugObfuBody_08 12527 2.44 3.10 2.19 96 URI_NOVOWEL 12162 1.85 1.13 2.12 97 UNTRUSTED_Relay 11915 6.36 17.51 2.08 98 HTML_IMAGE_RATIO_08 11551 2.81 4.87 2.02 99 XM_B_Unsub2 11547 2.02 2.03 2.02 100 T_TooManySym_02 11148 1.58 0.64 1.95 101 TR_XM_SB_Phish 11033 1.90 1.84 1.93 102 XMSubPhish11 10701 1.84 1.77 1.87 103 TooManyTo_002 10652 1.50 0.57 1.86 104 XM_CamelCaseFrm001 10327 1.84 1.95 1.80 105 RCVD_IN_IADB_OPTIN 10135 1.47 0.68 1.77 106 XM_B_Phish66 9890 2.22 3.49 1.73 107 LH_URI_DOM_IN_PATH 9457 2.05 3.09 1.65 108 XMSubGarbage 9279 1.19 0.05 1.62 109 XM_B_SpammyTLD 9269 2.09 3.33 1.62 110 T_FONT_INVIS_NAKED_TO 9027 2.38 4.45 1.58 111 SUBJ_ALL_CAPS 8963 1.90 2.77 1.57 112 XMSubLongNoVowel 8737 1.19 0.30 1.53 113 TR_Symld_Words 8713 1.58 1.72 1.52 114 BOTNET 8516 5.48 15.89 1.49 115 HELO_NODOT 8467 1.29 0.80 1.48 116 HELO_NO_DOMAIN 8462 1.29 0.80 1.48 117 XM_SPF_SoftFail 8425 2.19 4.07 1.47 118 IN_HORDE_ADDRESS_BOOK 8399 1.13 0.24 1.47 119 T_XMDrugObfuBody_14 8246 1.58 1.95 1.44 120 KHOP_HELO_FCRDNS 7932 2.92 6.90 1.39 121 URI_TRY_3LD 7882 1.77 2.80 1.38 122 XM_DK_Undo_01 7868 1.42 1.55 1.37 123 RELAYCOUNTRY_CA 7572 2.34 5.00 1.32 124 URI_HEX 7534 2.02 3.86 1.32 125 XMDiploma_00 7509 1.62 2.41 1.31 126 INVALID_MSGID 7345 0.99 0.23 1.28 127 TVD_RCVD_IP 7214 0.99 0.29 1.26 128 XMBody_95 7032 0.92 0.12 1.23 129 TooManyTo_003 6991 1.01 0.46 1.22 130 XM_B_COVIDMETA 6899 1.92 3.79 1.21 131 XMGappySubj_01 6720 0.90 0.18 1.17 132 TO_MALFORMED 6502 0.84 0.06 1.14 133 XMCapTrack 6350 0.90 0.35 1.11 134 XM_UB50 6194 2.81 7.30 1.08 135 RCVD_IN_BL_SPAMCOP_NET 6155 3.10 8.37 1.08 136 HELO_MISC_IP 6061 0.85 0.32 1.06 137 CK_HELO_DYNAMIC_SPLIT_IP 6054 0.92 0.55 1.06 138 TR_MSPIKEBAYES00 6048 0.77 0.02 1.06 139 XM_OfRef6 5973 1.67 3.30 1.04 140 XMStockSpam_06 5973 1.23 1.70 1.04 141 TM2_M_VERY_LONG_WORD 5920 1.40 2.35 1.03 142 XM_GoogleGroups 5686 0.85 0.46 0.99 143 XM_E_Blogspot 5508 0.71 0.07 0.96 144 SpammyFromTLD_01 5353 1.92 4.48 0.94 145 T_FILL_THIS_FORM_SHORT 5305 1.05 1.36 0.93 146 DKIM_ADSP_CUSTOM_MED 5223 1.03 1.35 0.91 147 USER_IN_DEF_DKIM_WL 5199 0.66 0.02 0.91 148 RELAYCOUNTRY_GB 5033 0.98 1.23 0.88 149 XMBSHREFv2 5011 0.70 0.25 0.88 150 TR_LOTS_OF_MONEY3 4974 1.74 4.01 0.87 151 XM_H_Long_From02 4924 0.88 0.93 0.86 152 TooManyTo_004 4915 0.73 0.39 0.86 153 XM_ProductURIs 4913 0.90 1.00 0.86 154 XMBrknScrpt_02 4726 2.58 7.14 0.83 155 US_DOLLARS_3 4629 1.34 2.74 0.81 156 XMBody_17 4470 1.55 3.57 0.78 157 T_MONEY_PERCENT 4401 0.80 0.88 0.77 158 TR_LOTS_OF_MONEY2 4401 0.80 0.88 0.77 159 T_TooManySym_03 4395 0.60 0.17 0.77 160 XMGenDplmaNmb 4218 0.97 1.56 0.74 161 XMBdyGiftCard01 4154 0.88 1.26 0.73 162 XMHTML_After_End 4123 0.89 1.34 0.72 163 HTTPS_HTTP_MISMATCH 4092 0.73 0.76 0.71 164 TM2_M_A_HREF_HREF 4015 0.65 0.50 0.70 165 TooManyTo_005 3996 0.60 0.34 0.70 166 XMSubMetaI_00 3929 0.75 0.93 0.69 167 RELAYCOUNTRY_DE 3928 0.70 0.72 0.69 168 XM_B_SpammyWords4 3870 1.09 2.18 0.68 169 RCVD_IN_MSPIKE_BL 3837 3.25 9.98 0.67 170 T_XMHurry_00 3828 1.12 2.30 0.67 171 TR_MetaPhish_Combo_01 3724 0.71 0.87 0.65 172 XM_ShortIntro_01 3676 0.57 0.39 0.64 173 FROM_GOV_DKIM_AU 3670 0.60 0.49 0.64 174 XM_S_SpammyWords 3655 0.69 0.84 0.64 175 TR_XM_Spammywords 3649 0.69 0.83 0.64 176 NML_ADSP_CUSTOM_MED 3475 0.77 1.20 0.61 177 XM_SPF_Unknown 3263 0.66 0.89 0.57 178 T_OBFU_PDF_ATTACH 3130 0.44 0.18 0.55 179 NUMERIC_HTTP_ADDR 3125 0.54 0.53 0.55 180 FORGED_GMAIL_RCVD 3023 0.74 1.28 0.53 181 T_XMDrugObfuBody_00 3022 1.07 2.48 0.53 182 XMMoneyMeta_00 2949 0.60 0.83 0.52 183 XMNoVowels 2882 0.46 0.35 0.50 184 XMSexyCombo_01 2845 0.85 1.78 0.50 185 XMHTMLBadTable_001 2837 0.58 0.79 0.50 186 XM_H_PHPMailer 2809 0.49 0.48 0.49 187 MISSING_HEADERS 2704 0.53 0.67 0.47 188 TR_XM_SpammyWords2 2699 3.95 13.02 0.47 189 DKIM_ADSP_NXDOMAIN 2650 0.73 1.41 0.46 190 RDNS_DYNAMIC 2638 0.62 1.05 0.46 191 XMBody_78 2616 0.58 0.91 0.46 192 RCVD_IN_SORBS_DUL 2583 0.39 0.24 0.45 193 RCVD_IN_MSPIKE_L3 2570 2.05 6.22 0.45 194 T_TooManySym_04 2552 0.34 0.07 0.45 195 NO_DNS_FOR_FROM 2543 0.50 0.64 0.44 196 HTML_IMAGE_ONLY_32 2515 0.41 0.34 0.44 197 HTML_IMAGE_ONLY_20 2513 0.39 0.25 0.44 198 SHORT_HELO_AND_INLINE_IMAGE 2479 0.35 0.13 0.43 199 T_Symld_Words_02 2451 0.69 1.36 0.43 200 TR_XM_SpammyWords3 2422 1.95 5.94 0.42 ----------------------------------------------------------------------