Email: 743836 Autolearn: 0 AvgScore: 2.00 AvgScanTime: 1.29 sec Spam: 213605 Autolearn: 0 AvgScore: 13.90 AvgScanTime: 1.46 sec Ham: 530231 Autolearn: 0 AvgScore: -2.79 AvgScanTime: 1.22 sec Time Spent Running SA: 266.86 hours Time Spent Processing Spam: 86.79 hours Time Spent Processing Ham: 180.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 205596 91.74 96.25 89.93 2 DKIM_SIGNED 178683 71.91 83.65 67.18 3 XM_DK_Pass 173593 70.32 81.27 65.91 4 DCC_CHECK 170532 47.77 79.84 34.86 5 DKIM_VALID 169603 68.47 79.40 64.06 6 XM_B_Unicode 165727 75.18 77.59 74.21 7 RELAYCOUNTRY_US 157148 81.38 73.57 84.52 8 XMListUnsubscribeExists 144912 51.17 67.84 44.45 9 XM_B_SpammyWords 143078 52.49 66.98 46.65 10 DKIM_VALID_AU 133505 52.12 62.50 47.94 11 XM_DK_Undo_02 99183 17.96 46.43 6.49 12 XM_B_SpammyWords2 84239 23.84 39.44 17.56 13 XM_B_Unicode3 80881 42.19 37.86 43.94 14 HTML_FONT_LOW_CONTRAST 77630 27.73 36.34 24.26 15 TR_XM_DKIM_Undo 76978 13.91 36.04 5.00 16 BAYES_50 75631 46.28 35.41 50.66 17 BAYES_99 75425 13.16 35.31 4.23 18 LOC_TINY_FONT_1 75389 25.05 35.29 20.92 19 DKIM_VALID_EF 65995 27.15 30.90 25.64 20 MIME_HTML_ONLY 61233 24.96 28.67 23.46 21 RCVD_IN_MSPIKE_H2 59373 25.25 27.80 24.22 22 TR_DCC_Bayes_99 58382 9.34 27.33 2.09 23 BAYES_999 57936 10.17 27.12 3.34 24 RELAYCOUNTRY_META 53928 10.64 25.25 4.75 25 FVGT_m_MULTI_ODD 51799 20.98 24.25 19.66 26 T_KAM_HTML_FONT_INVALID 51772 18.62 24.24 16.36 27 XMSubLong 51236 21.66 23.99 20.73 28 T_TM2_M_HEADER_IN_MSG 45863 25.17 21.47 26.65 29 XM_Multi_Part_URI 41161 12.53 19.27 9.81 30 XM_Body_Dirty_Words 40587 13.75 19.00 11.64 31 DCC_CHECK_NEGATIVE 39171 50.35 18.34 63.24 32 UNTRUSTED_Relay 38968 6.52 18.24 1.80 33 BOTNET 36203 5.90 16.95 1.45 34 RCVD_IN_MSPIKE_WL 35866 22.93 16.79 25.41 35 LOTS_OF_MONEY 31304 8.95 14.66 6.65 36 TR_XM_SpammyWords2 30837 4.56 14.44 0.58 37 FSL_BULK_SIG 29911 7.75 14.00 5.23 38 XM_B_Unsub 29304 10.47 13.72 9.16 39 XM_B_SpammyWords3 29084 7.05 13.62 4.41 40 BOTNET_IPINHOSTNAME 28883 6.60 13.52 3.80 41 XM_UncommonTLD01 27188 5.83 12.73 3.05 42 TR_XM_SpammyWords4 25073 6.30 11.74 4.11 43 XMSexyCombo_05 24665 5.85 11.55 3.55 44 LotsOfNums_01 24285 8.77 11.37 7.73 45 RCVD_IN_MSPIKE_BL 23779 3.69 11.13 0.70 46 MPART_ALT_DIFF 23053 10.12 10.79 9.85 47 XM_Evil_Numbers_Gen 20021 9.02 9.37 8.87 48 BAYES_80 19234 5.27 9.00 3.76 49 RCVD_IN_MSPIKE_H3 19224 12.56 9.00 13.99 50 MIME_HTML_MOSTLY 18873 4.20 8.84 2.33 51 BAYES_60 18536 7.18 8.68 6.58 52 RCVD_IN_BL_SPAMCOP_NET 17280 2.99 8.09 0.94 53 XMSubMetaSx_00 16604 4.38 7.77 3.02 54 T_REMOTE_IMAGE 16536 4.43 7.74 3.10 55 XM_UB50 14975 2.65 7.01 0.89 56 TR_XM_PhishingBody 14694 3.99 6.88 2.83 57 RCVD_IN_MSPIKE_H4 14685 8.35 6.87 8.95 58 HTML_IMAGE_RATIO_02 14332 6.08 6.71 5.83 59 SpammyFromTLD_01 13990 2.53 6.55 0.90 60 RCVD_IN_MSPIKE_L3 13928 2.22 6.52 0.49 61 XM_B_Phish_Phrases 13878 4.91 6.50 4.27 62 TooManyTo_001 13742 7.08 6.43 7.34 63 TR_XM_SpammyWords3 13741 2.20 6.43 0.49 64 KHOP_HELO_FCRDNS 13270 2.87 6.21 1.53 65 XMNumbers 13234 3.87 6.20 2.93 66 XMBrknScrpt_02 12670 2.28 5.93 0.80 67 UNPARSEABLE_RELAY 12330 6.50 5.77 6.79 68 RELAYCOUNTRY_CA 12184 2.60 5.70 1.34 69 BODY_URI_ONLY 12117 1.66 5.67 0.04 70 HTML_IMAGE_RATIO_04 11824 12.79 5.54 15.72 71 BAYES_95 11796 3.33 5.52 2.44 72 HTML_IMAGE_ONLY_08 11687 1.63 5.47 0.08 73 HTML_IMAGE_RATIO_08 11250 3.06 5.27 2.18 74 SHORTENED_URL_HREF 10748 1.68 5.03 0.33 75 RELAYCOUNTRY_FR 10629 1.64 4.98 0.29 76 XM_H_Long_From01 10621 4.93 4.97 4.92 77 URIBL_SBL_A 10505 1.54 4.92 0.18 78 HTML_SHORT_LINK_IMG_1 10419 1.41 4.88 0.01 79 XM_SendGrid 10184 5.78 4.77 6.19 80 SHORT_URI_3 9841 1.34 4.61 0.02 81 SHORT_SHORTNER 9775 1.32 4.58 0.01 82 SHORTENER_SHORT_IMG 9724 1.31 4.55 0.00 83 SHORTENED_URL_SRC 9671 1.30 4.53 0.00 84 DKIM_INVALID 9080 3.44 4.25 3.12 85 T_FONT_INVIS_NAKED_TO 8987 2.31 4.21 1.55 86 TR_LOTS_OF_MONEY3 8958 1.53 4.19 0.46 87 XM_SPF_SoftFail 8604 2.34 4.03 1.66 88 XMBody_17 8168 1.56 3.82 0.65 89 XM_B_Phish66 7944 2.25 3.72 1.66 90 TR_XM_SpammyWords5 7660 1.97 3.59 1.31 91 TM2_M_URI_OPT_OUT 7628 3.12 3.57 2.93 92 HTML_IMAGE_RATIO_06 7608 4.44 3.56 4.79 93 XM_OfRef6 7529 1.86 3.52 1.18 94 URI_HEX 7446 1.86 3.49 1.20 95 SpammyFromTLD_02 7424 1.22 3.48 0.31 96 XM_UB60 7332 1.06 3.43 0.11 97 RCVD_IN_MSPIKE_L5 7305 1.10 3.42 0.16 98 RCVD_IN_RP_SAFE 7299 5.27 3.42 6.01 99 XM_UB99 7131 0.96 3.34 0.00 100 XM_DIRTYINTL 7056 1.28 3.30 0.47 101 TR_XM_MaxSPIKE 7056 0.96 3.30 0.02 102 XM_B_SpammyTLD 7002 2.02 3.28 1.52 103 T_XMDrugObfuBody_08 6841 2.11 3.20 1.67 104 RCVD_IN_RP_RNBL 6757 0.94 3.16 0.05 105 RELAYCOUNTRY_IN 6704 0.98 3.14 0.11 106 XMStrtUSub 6604 8.84 3.09 11.15 107 XM_B_COVIDMETA 6230 1.37 2.92 0.74 108 MIME_QP_LONG_LINE 6213 4.62 2.91 5.31 109 RCVD_IN_RP_CERTIFIED 6212 4.76 2.91 5.51 110 URI_TRY_3LD 6191 1.58 2.90 1.05 111 TR_XM_MaxBayes 6041 0.82 2.83 0.02 112 MIME_HTML_ONLY_MULTI 5761 6.60 2.70 8.17 113 LH_URI_DOM_IN_PATH 5602 1.95 2.62 1.67 114 XMDiploma_00 5376 1.81 2.52 1.52 115 SUBJ_ALL_CAPS 5212 1.69 2.44 1.39 116 TR_XM_DK_SendGrid 5199 3.38 2.43 3.76 117 HTML_MIME_NO_HTML_TAG 5181 2.19 2.43 2.09 118 XM_URI_RBL 5119 0.81 2.40 0.18 119 T_XMHurry_00 4796 1.06 2.25 0.59 120 BAYES_40 4752 4.14 2.22 4.91 121 XM_UB80 4648 0.65 2.18 0.04 122 XM_UB999 4603 0.62 2.15 0.00 123 XM_B_Unsub2 4522 1.73 2.12 1.57 124 XM_B_SpammyWords4 4473 1.01 2.09 0.57 125 RCVD_IN_PSBL 4457 0.61 2.09 0.01 126 XM_CamelCaseFrm001 4451 1.73 2.08 1.59 127 BOTNET_NORDNS 4379 0.60 2.05 0.02 128 TR_XM_COVIDMETA4 4327 0.82 2.03 0.33 129 T_XMDrugObfuBody_14 4314 1.65 2.02 1.50 130 T_TooManySym_01 4277 3.74 2.00 4.44 131 TR_XM_SB_Phish 4198 1.97 1.97 1.98 132 XM_DK_Undo_01 4059 1.67 1.90 1.57 133 RELAYCOUNTRY_UA 4055 0.55 1.90 0.00 134 XMSubPhish11 3964 1.92 1.86 1.94 135 RCVD_IN_IADB_LISTED 3902 4.11 1.83 5.03 136 FROM_EXCESS_BASE64 3897 2.21 1.82 2.37 137 TM2_M_VERY_LONG_WORD 3706 1.17 1.73 0.95 138 RELAYCOUNTRY_GB 3701 1.38 1.73 1.23 139 XMSexyCombo_01 3690 0.88 1.73 0.54 140 BAYES_20 3628 3.85 1.70 4.71 141 XMSubMetaSxObfu_03 3540 0.74 1.66 0.37 142 PDS_OTHER_BAD_TLD 3504 0.60 1.64 0.18 143 T_FILL_THIS_FORM_SHORT 3457 1.07 1.62 0.85 144 RCVD_IN_IADB_SPF 3427 3.60 1.60 4.40 145 MAILING_LIST_MULTI 3420 2.28 1.60 2.55 146 XMClaimOffer 3325 0.58 1.56 0.19 147 XMBdyGiftCard01 3257 0.91 1.52 0.67 148 RCVD_IN_IADB_SENDERID 3211 3.23 1.50 3.93 149 RCVD_IN_IADB_DK 3197 3.15 1.50 3.82 150 TR_XM_UnparsRelay 3184 0.60 1.49 0.24 151 XMMoneyMeta_00 3166 0.80 1.48 0.52 152 XMGenDplmaNmb 3152 1.03 1.48 0.85 153 XMStockSpam_06 3026 1.18 1.42 1.08 154 TR_XM_PHPDW 3015 0.60 1.41 0.28 155 TR_XM_PHPForged 2971 0.57 1.39 0.24 156 TR_XM_FormFill2 2922 0.57 1.37 0.24 157 XM_H_PHPOS 2908 0.56 1.36 0.24 158 XM_UB95 2884 0.40 1.35 0.02 159 TR_Symld_Words 2877 1.63 1.35 1.74 160 TR_XM_COVIDMETA1 2704 0.54 1.27 0.24 161 RDNS_DYNAMIC 2572 0.67 1.20 0.45 162 REMOVE_BEFORE_LINK 2558 0.52 1.20 0.25 163 XMHTML_After_End 2492 0.88 1.17 0.76 164 TR_XM_INV_DKIM 2475 0.38 1.16 0.07 165 BAYES_00 2458 14.19 1.15 19.44 166 ALL_TRUSTED 2443 8.90 1.14 12.03 167 XMBody_78 2412 0.58 1.13 0.37 168 URI_PHP_REDIR 2379 0.33 1.11 0.01 169 RELAYCOUNTRY_DE 2337 0.84 1.09 0.73 170 URI_NOVOWEL 2293 2.03 1.07 2.41 171 XMPhish14 2293 0.59 1.07 0.39 172 FROM_SUSPICIOUS_NTLD 2281 0.35 1.07 0.06 173 URI_NO_WWW_BIZ_CGI 2270 0.31 1.06 0.01 174 XMPhish08 2228 0.55 1.04 0.35 175 T_XMDrugObfuBody_00 2224 0.68 1.04 0.54 176 XMSubNoVowel 2218 3.24 1.04 4.13 177 TR_XM_FormFill 2207 0.30 1.03 0.01 178 DATE_IN_PAST_03_06 2187 0.34 1.02 0.07 179 FROM_SUSPICIOUS_NTLD_FP 2168 0.33 1.01 0.06 180 BAYES_05 2145 2.61 1.00 3.26 181 RELAYCOUNTRY_NL 2134 0.39 1.00 0.14 182 TR_BOTNET_NEGATE 2039 0.51 0.95 0.33 183 XM_ProductURIs 2019 0.66 0.95 0.55 184 RCVD_IN_MSPIKE_H5 1957 2.02 0.92 2.47 185 ANY_BOUNCE_MESSAGE 1918 2.08 0.90 2.55 186 XM_PDF 1898 3.12 0.89 4.02 187 TR_XM_RelayPhish 1882 0.42 0.88 0.23 188 BOUNCE_MESSAGE 1872 2.07 0.88 2.55 189 XMPhish30 1859 0.51 0.87 0.37 190 HTML_TAG_BALANCE_BODY 1857 0.54 0.87 0.40 191 XMSexyCombo_04 1797 0.31 0.84 0.10 192 XMSubMetaI_00 1788 0.50 0.84 0.36 193 TR_Mismatch_TLD_02 1786 0.29 0.84 0.07 194 XM_Lotto 1750 0.32 0.82 0.12 195 RCVD_IN_IADB_VOUCHED 1733 2.37 0.81 2.99 196 LongTLD 1724 0.34 0.81 0.15 197 HK_RANDOM_REPLYTO 1713 0.35 0.80 0.17 198 TR_Caps_n_Bayes_99 1703 0.31 0.80 0.12 199 DKIM_ADSP_CUSTOM_MED 1689 0.91 0.79 0.95 200 XMSlimDrugH 1663 0.42 0.78 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 476825 91.74 96.25 89.93 2 RELAYCOUNTRY_US 448157 81.38 73.57 84.52 3 XM_B_Unicode 393507 75.18 77.59 74.21 4 DKIM_SIGNED 356215 71.91 83.65 67.18 5 XM_DK_Pass 349463 70.32 81.27 65.91 6 DKIM_VALID 339689 68.47 79.40 64.06 7 DCC_CHECK_NEGATIVE 335317 50.35 18.34 63.24 8 BAYES_50 268607 46.28 35.41 50.66 9 DKIM_VALID_AU 254190 52.12 62.50 47.94 10 XM_B_SpammyWords 247377 52.49 66.98 46.65 11 XMListUnsubscribeExists 235674 51.17 67.84 44.45 12 XM_B_Unicode3 232962 42.19 37.86 43.94 13 DCC_CHECK 184834 47.77 79.84 34.86 14 T_TM2_M_HEADER_IN_MSG 141326 25.17 21.47 26.65 15 DKIM_VALID_EF 135975 27.15 30.90 25.64 16 RCVD_IN_MSPIKE_WL 134722 22.93 16.79 25.41 17 HTML_FONT_LOW_CONTRAST 128638 27.73 36.34 24.26 18 RCVD_IN_MSPIKE_H2 128444 25.25 27.80 24.22 19 MIME_HTML_ONLY 124401 24.96 28.67 23.46 20 LOC_TINY_FONT_1 110924 25.05 35.29 20.92 21 XMSubLong 109912 21.66 23.99 20.73 22 FVGT_m_MULTI_ODD 104221 20.98 24.25 19.66 23 BAYES_00 103075 14.19 1.15 19.44 24 XM_B_SpammyWords2 93093 23.84 39.44 17.56 25 T_KAM_HTML_FONT_INVALID 86744 18.62 24.24 16.36 26 HTML_IMAGE_RATIO_04 83336 12.79 5.54 15.72 27 XM_H_Trusted_IP 76151 10.24 0.00 14.36 28 RCVD_IN_MSPIKE_H3 74204 12.56 9.00 13.99 29 HTML_FONT_FACE_BAD 72212 9.91 0.72 13.62 30 ALL_TRUSTED 63774 8.90 1.14 12.03 31 XM_Body_Dirty_Words 61697 13.75 19.00 11.64 32 XMStrtUSub 59137 8.84 3.09 11.15 33 MPART_ALT_DIFF 52221 10.12 10.79 9.85 34 XM_Multi_Part_URI 52027 12.53 19.27 9.81 35 XM_B_Unsub 48587 10.47 13.72 9.16 36 RCVD_IN_MSPIKE_H4 47439 8.35 6.87 8.95 37 XM_Evil_Numbers_Gen 47043 9.02 9.37 8.87 38 MIME_HTML_ONLY_MULTI 43300 6.60 2.70 8.17 39 TR_XM_DK_Bayes 43009 6.00 0.75 8.11 40 TR_XM_DK_Bayes1 41849 5.83 0.71 7.89 41 LotsOfNums_01 40986 8.77 11.37 7.73 42 XM_DKIMWhitelistDomains 39206 5.28 0.03 7.39 43 TooManyTo_001 38932 7.08 6.43 7.34 44 TR_XM_DK_Bayes2 37021 5.16 0.62 6.98 45 UNPARSEABLE_RELAY 35995 6.50 5.77 6.79 46 LOTS_OF_MONEY 35278 8.95 14.66 6.65 47 BAYES_60 34902 7.18 8.68 6.58 48 XM_DK_Undo_02 34393 17.96 46.43 6.49 49 XM_SendGrid 32810 5.78 4.77 6.19 50 RCVD_IN_RP_SAFE 31873 5.27 3.42 6.01 51 HTML_IMAGE_RATIO_02 30911 6.08 6.71 5.83 52 IN_ZIMBRA_NJ_WHITELIST 29282 3.95 0.05 5.52 53 RCVD_IN_RP_CERTIFIED 29197 4.76 2.91 5.51 54 MIME_QP_LONG_LINE 28171 4.62 2.91 5.31 55 FSL_BULK_SIG 27731 7.75 14.00 5.23 56 RCVD_IN_IADB_LISTED 26675 4.11 1.83 5.03 57 TR_XM_DKIM_Undo 26511 13.91 36.04 5.00 58 XM_H_Long_From01 26082 4.93 4.97 4.92 59 BAYES_40 26025 4.14 2.22 4.91 60 HTML_IMAGE_RATIO_06 25402 4.44 3.56 4.79 61 RELAYCOUNTRY_META 25192 10.64 25.25 4.75 62 BAYES_20 24998 3.85 1.70 4.71 63 T_TooManySym_01 23549 3.74 2.00 4.44 64 XM_B_SpammyWords3 23358 7.05 13.62 4.41 65 RCVD_IN_IADB_SPF 23339 3.60 1.60 4.40 66 XM_B_Phish_Phrases 22643 4.91 6.50 4.27 67 BAYES_99 22454 13.16 35.31 4.23 68 XMSubNoVowel 21907 3.24 1.04 4.13 69 TR_XM_SpammyWords4 21783 6.30 11.74 4.11 70 XM_PDF 21302 3.12 0.89 4.02 71 RCVD_IN_IADB_SENDERID 20847 3.23 1.50 3.93 72 RCVD_IN_IADB_DK 20235 3.15 1.50 3.82 73 BOTNET_IPINHOSTNAME 20174 6.60 13.52 3.80 74 TR_XM_DK_SendGrid 19962 3.38 2.43 3.76 75 BAYES_80 19930 5.27 9.00 3.76 76 XMSexyCombo_05 18833 5.85 11.55 3.55 77 BAYES_999 17700 10.17 27.12 3.34 78 BAYES_05 17274 2.61 1.00 3.26 79 DKIM_INVALID 16526 3.44 4.25 3.12 80 T_REMOTE_IMAGE 16443 4.43 7.74 3.10 81 XM_UncommonTLD01 16174 5.83 12.73 3.05 82 XMSubMetaSx_00 15996 4.38 7.77 3.02 83 RCVD_IN_IADB_VOUCHED 15869 2.37 0.81 2.99 84 TM2_M_URI_OPT_OUT 15558 3.12 3.57 2.93 85 XMNumbers 15557 3.87 6.20 2.93 86 TR_XM_PhishingBody 14995 3.99 6.88 2.83 87 ANY_BOUNCE_MESSAGE 13535 2.08 0.90 2.55 88 BOUNCE_MESSAGE 13524 2.07 0.88 2.55 89 MAILING_LIST_MULTI 13503 2.28 1.60 2.55 90 RCVD_IN_MSPIKE_H5 13079 2.02 0.92 2.47 91 BAYES_95 12964 3.33 5.52 2.44 92 URI_NOVOWEL 12790 2.03 1.07 2.41 93 FROM_EXCESS_BASE64 12556 2.21 1.82 2.37 94 MIME_HTML_MOSTLY 12358 4.20 8.84 2.33 95 T_TooManySym_02 12098 1.79 0.58 2.28 96 HTML_IMAGE_RATIO_08 11536 3.06 5.27 2.18 97 TR_DCC_Bayes_99 11094 9.34 27.33 2.09 98 HTML_MIME_NO_HTML_TAG 11093 2.19 2.43 2.09 99 TooManyTo_002 10620 1.61 0.63 2.00 100 RCVD_IN_IADB_OPTIN 10477 1.57 0.56 1.98 101 TR_XM_SB_Phish 10473 1.97 1.97 1.98 102 XMSubPhish11 10300 1.92 1.86 1.94 103 UNTRUSTED_Relay 9532 6.52 18.24 1.80 104 TR_Symld_Words 9246 1.63 1.35 1.74 105 LH_URI_DOM_IN_PATH 8875 1.95 2.62 1.67 106 T_XMDrugObfuBody_08 8861 2.11 3.20 1.67 107 XM_SPF_SoftFail 8811 2.34 4.03 1.66 108 HELO_NODOT 8801 1.35 0.59 1.66 109 HELO_NO_DOMAIN 8800 1.35 0.59 1.66 110 XM_B_Phish66 8782 2.25 3.72 1.66 111 XM_CamelCaseFrm001 8449 1.73 2.08 1.59 112 XM_DK_Undo_01 8343 1.67 1.90 1.57 113 XM_B_Unsub2 8324 1.73 2.12 1.57 114 XMSubGarbage 8295 1.13 0.04 1.56 115 T_FONT_INVIS_NAKED_TO 8205 2.31 4.21 1.55 116 XMSubLongNoVowel 8124 1.18 0.32 1.53 117 KHOP_HELO_FCRDNS 8107 2.87 6.21 1.53 118 XM_B_SpammyTLD 8059 2.02 3.28 1.52 119 XMDiploma_00 8052 1.81 2.52 1.52 120 T_XMDrugObfuBody_14 7977 1.65 2.02 1.50 121 BOTNET 7683 5.90 16.95 1.45 122 INVALID_MSGID 7462 1.08 0.26 1.41 123 SUBJ_ALL_CAPS 7391 1.69 2.44 1.39 124 IN_HORDE_ADDRESS_BOOK 7378 1.02 0.10 1.39 125 XMGappySubj_01 7293 1.03 0.18 1.38 126 RELAYCOUNTRY_CA 7130 2.60 5.70 1.34 127 TR_XM_SpammyWords5 6972 1.97 3.59 1.31 128 TVD_RCVD_IP 6839 1.03 0.39 1.29 129 TooManyTo_003 6687 1.04 0.48 1.26 130 RELAYCOUNTRY_GB 6542 1.38 1.73 1.23 131 TO_MALFORMED 6506 0.88 0.03 1.23 132 URI_HEX 6379 1.86 3.49 1.20 133 XM_OfRef6 6271 1.86 3.52 1.18 134 XMCapTrack 6219 0.94 0.36 1.17 135 XMStockSpam_06 5749 1.18 1.42 1.08 136 XM_GoogleGroups 5639 0.88 0.43 1.06 137 HELO_MISC_IP 5610 0.83 0.25 1.06 138 CK_HELO_DYNAMIC_SPLIT_IP 5606 0.89 0.47 1.06 139 URI_TRY_3LD 5593 1.58 2.90 1.05 140 XM_E_Blogspot 5471 0.75 0.05 1.03 141 USER_IN_DEF_DKIM_WL 5348 0.72 0.01 1.01 142 XMBSHREFv2 5080 0.76 0.27 0.96 143 DKIM_ADSP_CUSTOM_MED 5051 0.91 0.79 0.95 144 TM2_M_VERY_LONG_WORD 5011 1.17 1.73 0.95 145 RCVD_IN_BL_SPAMCOP_NET 4995 2.99 8.09 0.94 146 TR_MSPIKEBAYES00 4821 0.65 0.01 0.91 147 TooManyTo_004 4816 0.77 0.41 0.91 148 SpammyFromTLD_01 4792 2.53 6.55 0.90 149 XM_H_Long_From02 4790 0.85 0.72 0.90 150 XM_UB50 4717 2.65 7.01 0.89 151 T_FILL_THIS_FORM_SHORT 4523 1.07 1.62 0.85 152 XMGenDplmaNmb 4495 1.03 1.48 0.85 153 T_TooManySym_03 4459 0.64 0.13 0.84 154 TR_MetaPhish_Combo_01 4277 0.76 0.64 0.81 155 XMBrknScrpt_02 4256 2.28 5.93 0.80 156 HTTPS_HTTP_MISMATCH 4179 0.77 0.73 0.79 157 XMHTML_After_End 4043 0.88 1.17 0.76 158 XM_B_COVIDMETA 3948 1.37 2.92 0.74 159 XMBody_95 3918 0.56 0.12 0.74 160 RELAYCOUNTRY_DE 3897 0.84 1.09 0.73 161 TooManyTo_005 3868 0.62 0.36 0.73 162 XM_ShortIntro_01 3696 0.68 0.65 0.70 163 RCVD_IN_MSPIKE_BL 3691 3.69 11.13 0.70 164 XMBdyGiftCard01 3546 0.91 1.52 0.67 165 NML_ADSP_CUSTOM_MED 3475 0.67 0.71 0.66 166 XMBody_17 3436 1.56 3.82 0.65 167 FROM_GOV_DKIM_AU 3335 0.56 0.39 0.63 168 T_XMHurry_00 3103 1.06 2.25 0.59 169 XM_SPF_Unknown 3073 0.62 0.71 0.58 170 TR_XM_SpammyWords2 3053 4.56 14.44 0.58 171 XM_B_SpammyWords4 3014 1.01 2.09 0.57 172 T_OBFU_PDF_ATTACH 3013 0.45 0.14 0.57 173 XM_ProductURIs 2919 0.66 0.95 0.55 174 XMSexyCombo_01 2882 0.88 1.73 0.54 175 T_XMDrugObfuBody_00 2870 0.68 1.04 0.54 176 XMMoneyMeta_00 2778 0.80 1.48 0.52 177 NO_DNS_FOR_FROM 2770 0.52 0.53 0.52 178 DKIM_ADSP_NXDOMAIN 2762 0.56 0.67 0.52 179 XM_H_PHPMailer 2753 0.55 0.64 0.52 180 FORGED_GMAIL_RCVD 2731 0.57 0.71 0.52 181 LOW_PRICE 2727 0.51 0.50 0.51 182 T_Symld_Words_02 2649 0.55 0.69 0.50 183 TR_XM_SpammyWords3 2616 2.20 6.43 0.49 184 RCVD_IN_MSPIKE_L3 2573 2.22 6.52 0.49 185 XMSolicitRefs_0 2561 0.43 0.32 0.48 186 MSGID_FROM_MTA_HEADER 2557 0.39 0.14 0.48 187 T_TooManySym_04 2552 0.36 0.05 0.48 188 RCVD_IN_SORBS_DUL 2536 0.38 0.15 0.48 189 SHORT_HELO_AND_INLINE_IMAGE 2480 0.35 0.06 0.47 190 XM_DIRTYINTL 2476 1.28 3.30 0.47 191 TR_LOTS_OF_MONEY3 2443 1.53 4.19 0.46 192 XMLngstWrd_00 2392 0.40 0.27 0.45 193 RDNS_DYNAMIC 2375 0.67 1.20 0.45 194 FROM_GOV_SPOOF 2365 0.35 0.11 0.45 195 XM_S_SubURI 2306 0.33 0.06 0.43 196 MISSING_HEADERS 2298 0.44 0.44 0.43 197 HTML_IMAGE_ONLY_20 2293 0.39 0.27 0.43 198 XMNoVowels 2284 0.43 0.41 0.43 199 SENDGRID_REDIR 2167 0.49 0.68 0.41 200 TM2_M_BODY_EMPTY 2144 0.31 0.06 0.40 ----------------------------------------------------------------------