Email: 782393 Autolearn: 0 AvgScore: 2.79 AvgScanTime: 1.52 sec Spam: 231673 Autolearn: 0 AvgScore: 14.53 AvgScanTime: 1.69 sec Ham: 550720 Autolearn: 0 AvgScore: -2.15 AvgScanTime: 1.45 sec Time Spent Running SA: 330.49 hours Time Spent Processing Spam: 108.77 hours Time Spent Processing Ham: 221.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 217486 91.55 93.88 90.56 2 DKIM_SIGNED 185335 71.10 80.00 67.35 3 DCC_CHECK 182782 48.66 78.90 35.94 4 XM_DK_Pass 178937 69.45 77.24 66.18 5 DKIM_VALID 176026 67.82 75.98 64.39 6 XM_B_Unicode 166139 73.65 71.71 74.47 7 RELAYCOUNTRY_US 161379 79.57 69.66 83.75 8 XMListUnsubscribeExists 152326 51.26 65.75 45.17 9 XM_B_SpammyWords 151508 52.09 65.40 46.49 10 DKIM_VALID_AU 136332 51.42 58.85 48.30 11 XM_DK_Undo_02 107240 17.80 46.29 5.82 12 XM_B_SpammyWords2 85207 23.57 36.78 18.01 13 BAYES_99 83104 13.28 35.87 3.78 14 TR_XM_DKIM_Undo 82019 13.64 35.40 4.48 15 BAYES_50 79624 46.08 34.37 51.01 16 XM_B_Unicode3 77420 40.77 33.42 43.86 17 HTML_FONT_LOW_CONTRAST 76918 26.94 33.20 24.30 18 LOC_TINY_FONT_1 72503 24.28 31.30 21.32 19 DKIM_VALID_EF 71254 27.17 30.76 25.66 20 BAYES_999 66840 10.66 28.85 3.01 21 MIME_HTML_ONLY 66123 25.43 28.54 24.11 22 RCVD_IN_MSPIKE_H2 66057 25.48 28.51 24.21 23 RELAYCOUNTRY_META 64842 11.40 27.99 4.42 24 TR_DCC_Bayes_99 64381 9.55 27.79 1.87 25 FVGT_m_MULTI_ODD 60247 21.86 26.01 20.12 26 T_KAM_HTML_FONT_INVALID 56973 18.72 24.59 16.25 27 XMSubLong 51375 21.47 22.18 21.18 28 UNTRUSTED_Relay 50453 7.70 21.78 1.77 29 T_TM2_M_HEADER_IN_MSG 50300 24.67 21.71 25.92 30 DCC_CHECK_NEGATIVE 44306 49.45 19.12 62.21 31 BOTNET 42385 6.40 18.30 1.39 32 LOTS_OF_MONEY 41465 10.16 17.90 6.91 33 XM_Multi_Part_URI 40643 12.40 17.54 10.24 34 XM_Body_Dirty_Words 37779 13.25 16.31 11.96 35 FSL_BULK_SIG 37737 8.73 16.29 5.55 36 BOTNET_IPINHOSTNAME 36804 7.42 15.89 3.86 37 TR_XM_SpammyWords4 36127 7.98 15.59 4.78 38 RCVD_IN_MSPIKE_WL 36020 22.85 15.55 25.92 39 XM_B_Unsub 32028 10.49 13.82 9.08 40 TR_XM_SpammyWords2 31383 4.40 13.55 0.55 41 RCVD_IN_MSPIKE_BL 31351 4.47 13.53 0.65 42 XM_UncommonTLD01 27144 5.56 11.72 2.97 43 XM_B_SpammyWords3 26810 6.31 11.57 4.09 44 XMSexyCombo_05 23691 5.76 10.23 3.89 45 RCVD_IN_BL_SPAMCOP_NET 23468 3.52 10.13 0.74 46 MPART_ALT_DIFF 23289 9.65 10.05 9.48 47 LotsOfNums_01 22725 8.63 9.81 8.13 48 BAYES_60 21382 7.60 9.23 6.92 49 BAYES_80 20438 5.36 8.82 3.90 50 RCVD_IN_MSPIKE_H3 19778 12.57 8.54 14.26 51 XM_Evil_Numbers_Gen 19727 8.40 8.52 8.35 52 T_REMOTE_IMAGE 19472 4.82 8.40 3.31 53 MIME_HTML_MOSTLY 19318 3.99 8.34 2.16 54 XM_UB50 18916 3.08 8.16 0.94 55 HTML_MIME_NO_HTML_TAG 18454 3.73 7.97 1.95 56 TR_XM_SpammyWords3 17895 2.57 7.72 0.40 57 HTML_IMAGE_RATIO_02 17046 6.24 7.36 5.77 58 KHOP_HELO_FCRDNS 16319 3.17 7.04 1.55 59 TR_LOTS_OF_MONEY3 16282 2.59 7.03 0.72 60 RCVD_IN_MSPIKE_L3 16058 2.36 6.93 0.44 61 URIBL_SBL_A 16051 2.26 6.93 0.29 62 XMSubMetaSx_00 15978 4.11 6.90 2.94 63 BODY_URI_ONLY 14634 1.90 6.32 0.05 64 RCVD_IN_MSPIKE_H4 14282 8.26 6.16 9.14 65 XMNumbers 14032 4.35 6.06 3.63 66 RELAYCOUNTRY_CA 13648 2.67 5.89 1.31 67 SpammyFromTLD_01 13464 2.35 5.81 0.89 68 XMBody_17 13075 2.11 5.64 0.63 69 BAYES_95 12748 3.23 5.50 2.27 70 XM_H_Long_From01 12714 5.07 5.49 4.89 71 XM_B_Phish_Phrases 12487 4.41 5.39 4.00 72 TR_XM_PhishingBody 12041 3.53 5.20 2.83 73 UNPARSEABLE_RELAY 11995 6.40 5.18 6.91 74 HTML_IMAGE_ONLY_08 11933 1.59 5.15 0.10 75 TooManyTo_001 11880 6.58 5.13 7.20 76 RELAYCOUNTRY_FR 11852 1.69 5.12 0.25 77 HTML_IMAGE_RATIO_04 11601 11.92 5.01 14.82 78 HTML_IMAGE_RATIO_08 11465 3.02 4.95 2.21 79 RCVD_IN_MSPIKE_L5 11403 1.56 4.92 0.15 80 RCVD_IN_RP_RNBL 11234 1.49 4.85 0.07 81 XM_UB60 10602 1.42 4.58 0.09 82 XM_SPF_SoftFail 10367 2.38 4.47 1.50 83 XM_SendGrid 10298 5.53 4.45 5.99 84 TM2_M_URI_OPT_OUT 10086 3.35 4.35 2.93 85 RCVD_IN_PSBL 9958 1.34 4.30 0.09 86 T_FONT_INVIS_NAKED_TO 9548 2.36 4.12 1.62 87 XM_OfRef6 9457 1.92 4.08 1.01 88 TR_XM_SpammyWords5 9320 2.22 4.02 1.46 89 DKIM_INVALID 9309 3.28 4.02 2.96 90 SpammyFromTLD_02 9197 1.38 3.97 0.28 91 XM_B_SpammyTLD 8828 2.25 3.81 1.59 92 TR_XM_MaxBayes 8730 1.13 3.77 0.02 93 XMStrtUSub 8497 8.53 3.67 10.58 94 T_XMDrugObfuBody_08 8368 2.11 3.61 1.48 95 TR_XM_MaxSPIKE 8224 1.07 3.55 0.02 96 XMSlimDrugH 7655 1.21 3.30 0.32 97 TM2_M_VERY_LONG_WORD 7630 1.63 3.29 0.94 98 XM_UB99 7449 0.96 3.22 0.01 99 T_XMHurry_00 7430 1.43 3.21 0.68 100 RELAYCOUNTRY_IN 7391 1.01 3.19 0.09 101 URI_HEX 7385 1.86 3.19 1.30 102 XM_B_Phish66 7053 2.00 3.04 1.56 103 XM_DIRTYINTL 6988 1.16 3.02 0.38 104 RCVD_IN_RP_SAFE 6932 5.34 2.99 6.32 105 XMBrknScrpt_02 6819 1.45 2.94 0.82 106 HTML_IMAGE_RATIO_06 6589 4.61 2.84 5.36 107 XM_UB80 6383 0.83 2.76 0.02 108 LH_URI_DOM_IN_PATH 6356 2.08 2.74 1.80 109 URI_TRY_3LD 6150 1.51 2.65 1.02 110 RELAYCOUNTRY_UA 5854 0.76 2.53 0.02 111 MIME_QP_LONG_LINE 5581 4.46 2.41 5.32 112 XMDiploma_00 5530 1.63 2.39 1.31 113 SUBJ_ALL_CAPS 5518 1.57 2.38 1.23 114 TVD_SPACE_RATIO 5416 0.97 2.34 0.39 115 TR_XM_DK_SendGrid 5346 3.29 2.31 3.70 116 MIME_HTML_ONLY_MULTI 5332 6.25 2.30 7.91 117 T_FILL_THIS_FORM_SHORT 5328 1.29 2.30 0.87 118 XM_B_COVIDMETA 5309 1.11 2.29 0.61 119 RCVD_IN_RP_CERTIFIED 5297 4.72 2.29 5.74 120 XM_B_Unsub2 5127 1.80 2.21 1.62 121 T_Symld_Words_02 5118 1.01 2.21 0.51 122 XM_UB999 5109 0.65 2.21 0.00 123 BOTNET_NORDNS 5067 0.66 2.19 0.01 124 BAYES_40 4994 4.02 2.16 4.81 125 FROM_EXCESS_BASE64 4950 2.48 2.14 2.62 126 PDS_FROM_2_EMAILS 4945 0.65 2.13 0.03 127 FROM_2_EMAILS_SHORT 4914 0.63 2.12 0.01 128 TR_Symld_Words 4802 1.86 2.07 1.77 129 XM_DK_Undo_01 4720 1.76 2.04 1.64 130 T_HTML_TAG_BALANCE_CENTER 4697 0.68 2.03 0.11 131 DATE_IN_PAST_03_06 4668 2.91 2.01 3.29 132 PDS_TO_EQ_FROM_NAME 4635 0.60 2.00 0.01 133 MISSING_HEADERS 4476 0.87 1.93 0.42 134 TR_XM_UnparsRelay 4410 0.72 1.90 0.23 135 HTML_FONT_SIZE_LARGE 4406 0.63 1.90 0.10 136 T_TooManySym_01 4341 3.55 1.87 4.25 137 NO_FM_NAME_IP_HOSTN 4243 0.55 1.83 0.01 138 XMStockSpam_06 4238 1.43 1.83 1.26 139 TVD_SPACE_RATIO_MINFP 4170 0.54 1.80 0.01 140 XM_UB95 4167 0.54 1.80 0.01 141 TR_XM_COVIDMETA4 4044 0.75 1.75 0.33 142 T_XMDrugObfuBody_14 3980 1.52 1.72 1.44 143 XM_CamelCaseFrm001 3950 1.58 1.70 1.53 144 RCVD_IN_IADB_LISTED 3926 4.13 1.69 5.15 145 LONG_JUNK_URI 3839 0.52 1.66 0.04 146 TR_XM_SB_Phish 3837 1.78 1.66 1.84 147 XM_B_SpammyWords4 3831 0.79 1.65 0.42 148 REPLYTO_WITHOUT_TO_CC 3825 0.51 1.65 0.03 149 HTML_IMAGE_ONLY_12 3757 0.64 1.62 0.23 150 BAYES_20 3753 3.70 1.62 4.58 151 RDNS_DYNAMIC 3712 0.77 1.60 0.42 152 URI_PHP_REDIR 3675 0.47 1.59 0.00 153 TR_LOTS_OF_MONEY1 3640 0.48 1.57 0.02 154 XM_URI_RBL 3639 0.58 1.57 0.17 155 TO_NO_BRKTS_HTML_ONLY 3620 0.60 1.56 0.20 156 DKIM_ADSP_CUSTOM_MED 3573 1.22 1.54 1.09 157 XMSubPhish11 3568 1.73 1.54 1.81 158 RCVD_IN_IADB_SPF 3470 3.63 1.50 4.53 159 XMMoneyMeta_00 3434 0.80 1.48 0.51 160 MILLION_USD 3414 0.44 1.47 0.01 161 NML_ADSP_CUSTOM_MED 3367 0.90 1.45 0.66 162 XMSubMetaD_03 3304 0.44 1.43 0.02 163 HELO_NODOT 3296 1.54 1.42 1.59 164 HELO_NO_DOMAIN 3296 1.54 1.42 1.59 165 RELAYCOUNTRY_GB 3264 1.02 1.41 0.85 166 XMGenDplmaNmb 3202 0.98 1.38 0.81 167 RCVD_IN_IADB_SENDERID 3200 3.28 1.38 4.07 168 FORGED_GMAIL_RCVD 3200 0.89 1.38 0.68 169 XMSubMetaD_00 3199 0.45 1.38 0.05 170 RCVD_IN_IADB_DK 3190 3.20 1.38 3.97 171 XMSexyCombo_01 3144 0.74 1.36 0.48 172 TR_XM_FormFill 3130 0.41 1.35 0.01 173 T_XMDrugObfuBody_00 3091 0.80 1.33 0.58 174 PDS_OTHER_BAD_TLD 3082 0.53 1.33 0.19 175 DIET_1 3018 0.70 1.30 0.44 176 ALL_TRUSTED 3016 9.39 1.30 12.79 177 SUBJ_DOLLARS 3004 0.54 1.30 0.22 178 XM_OfRef7 2979 0.49 1.29 0.15 179 TR_XM_PHPDW 2974 0.57 1.28 0.27 180 RCVD_IN_MSPIKE_L4 2937 0.41 1.27 0.05 181 TR_XM_INV_DKIM 2927 0.42 1.26 0.07 182 FROM_MISSP_REPLYTO 2919 0.38 1.26 0.01 183 TR_XM_PHPForged 2914 0.54 1.26 0.24 184 RELAYCOUNTRY_DE 2891 0.66 1.25 0.42 185 URG_BIZ 2891 0.40 1.25 0.04 186 TR_XM_FormFill2 2884 0.53 1.24 0.23 187 XM_H_PHPOS 2877 0.53 1.24 0.23 188 XMBdyGiftCard01 2855 0.94 1.23 0.82 189 TR_XM_SpoofStaff 2849 0.40 1.23 0.05 190 MIMEOLE_DIRECT_TO_MX 2848 0.37 1.23 0.00 191 DKIM_ADSP_ALL 2796 0.39 1.21 0.05 192 XMSpoofStaff2 2784 0.39 1.20 0.05 193 MAILING_LIST_MULTI 2758 1.95 1.19 2.27 194 BAYES_00 2687 13.80 1.16 19.11 195 DRUGS_ERECTILE 2677 0.36 1.16 0.02 196 XMHTML_After_End 2663 0.79 1.15 0.64 197 XMSubNoVowel 2643 3.37 1.14 4.30 198 XMSubMetaSSx_00 2634 0.46 1.14 0.18 199 URI_NO_WWW_BIZ_CGI 2632 0.35 1.14 0.02 200 DEAR_SOMETHING 2549 0.42 1.10 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 498756 91.55 93.88 90.56 2 RELAYCOUNTRY_US 461205 79.57 69.66 83.75 3 XM_B_Unicode 410113 73.65 71.71 74.47 4 DKIM_SIGNED 370924 71.10 80.00 67.35 5 XM_DK_Pass 364459 69.45 77.24 66.18 6 DKIM_VALID 354596 67.82 75.98 64.39 7 DCC_CHECK_NEGATIVE 342613 49.45 19.12 62.21 8 BAYES_50 280924 46.08 34.37 51.01 9 DKIM_VALID_AU 266011 51.42 58.85 48.30 10 XM_B_SpammyWords 256031 52.09 65.40 46.49 11 XMListUnsubscribeExists 248760 51.26 65.75 45.17 12 XM_B_Unicode3 241568 40.77 33.42 43.86 13 DCC_CHECK 197953 48.66 78.90 35.94 14 T_TM2_M_HEADER_IN_MSG 142748 24.67 21.71 25.92 15 RCVD_IN_MSPIKE_WL 142742 22.85 15.55 25.92 16 DKIM_VALID_EF 141298 27.17 30.76 25.66 17 HTML_FONT_LOW_CONTRAST 133832 26.94 33.20 24.30 18 RCVD_IN_MSPIKE_H2 133333 25.48 28.51 24.21 19 MIME_HTML_ONLY 132804 25.43 28.54 24.11 20 LOC_TINY_FONT_1 117431 24.28 31.30 21.32 21 XMSubLong 116642 21.47 22.18 21.18 22 FVGT_m_MULTI_ODD 110788 21.86 26.01 20.12 23 BAYES_00 105247 13.80 1.16 19.11 24 XM_B_SpammyWords2 99195 23.57 36.78 18.01 25 T_KAM_HTML_FONT_INVALID 89508 18.72 24.59 16.25 26 HTML_IMAGE_RATIO_04 81632 11.92 5.01 14.82 27 RCVD_IN_MSPIKE_H3 78548 12.57 8.54 14.26 28 HTML_FONT_FACE_BAD 71942 9.38 0.61 13.06 29 XM_H_Trusted_IP 71692 9.16 0.00 13.02 30 ALL_TRUSTED 70453 9.39 1.30 12.79 31 XM_Body_Dirty_Words 65892 13.25 16.31 11.96 32 XMStrtUSub 58265 8.53 3.67 10.58 33 XM_Multi_Part_URI 56376 12.40 17.54 10.24 34 MPART_ALT_DIFF 52206 9.65 10.05 9.48 35 RCVD_IN_MSPIKE_H4 50321 8.26 6.16 9.14 36 XM_B_Unsub 50022 10.49 13.82 9.08 37 TR_XM_DK_Bayes 46195 6.07 0.55 8.39 38 DATE_IN_PAST_06_12 46068 6.13 0.80 8.37 39 XM_Evil_Numbers_Gen 46008 8.40 8.52 8.35 40 TR_XM_DK_Bayes1 44787 5.88 0.52 8.13 41 LotsOfNums_01 44757 8.63 9.81 8.13 42 MIME_HTML_ONLY_MULTI 43535 6.25 2.30 7.91 43 TooManyTo_001 39635 6.58 5.13 7.20 44 TR_XM_DK_Bayes2 39584 5.20 0.46 7.19 45 XM_DKIMWhitelistDomains 38132 4.89 0.05 6.92 46 BAYES_60 38115 7.60 9.23 6.92 47 LOTS_OF_MONEY 38052 10.16 17.90 6.91 48 UNPARSEABLE_RELAY 38049 6.40 5.18 6.91 49 RCVD_IN_RP_SAFE 34825 5.34 2.99 6.32 50 XM_SendGrid 32989 5.53 4.45 5.99 51 XM_DK_Undo_02 32049 17.80 46.29 5.82 52 HTML_IMAGE_RATIO_02 31785 6.24 7.36 5.77 53 RCVD_IN_RP_CERTIFIED 31616 4.72 2.29 5.74 54 FSL_BULK_SIG 30587 8.73 16.29 5.55 55 IN_ZIMBRA_NJ_WHITELIST 30119 3.89 0.12 5.47 56 HTML_IMAGE_RATIO_06 29512 4.61 2.84 5.36 57 MIME_QP_LONG_LINE 29283 4.46 2.41 5.32 58 RCVD_IN_IADB_LISTED 28382 4.13 1.69 5.15 59 XM_H_Long_From01 26926 5.07 5.49 4.89 60 BAYES_40 26483 4.02 2.16 4.81 61 TR_XM_SpammyWords4 26342 7.98 15.59 4.78 62 XM_PDF 25561 3.51 0.83 4.64 63 BAYES_20 25227 3.70 1.62 4.58 64 RCVD_IN_IADB_SPF 24960 3.63 1.50 4.53 65 TR_XM_DKIM_Undo 24688 13.64 35.40 4.48 66 RELAYCOUNTRY_META 24329 11.40 27.99 4.42 67 XMSubNoVowel 23708 3.37 1.14 4.30 68 T_TooManySym_01 23403 3.55 1.87 4.25 69 XM_B_SpammyWords3 22550 6.31 11.57 4.09 70 RCVD_IN_IADB_SENDERID 22440 3.28 1.38 4.07 71 XM_B_Phish_Phrases 22043 4.41 5.39 4.00 72 RCVD_IN_IADB_DK 21837 3.20 1.38 3.97 73 BAYES_80 21496 5.36 8.82 3.90 74 XMSexyCombo_05 21412 5.76 10.23 3.89 75 BOTNET_IPINHOSTNAME 21282 7.42 15.89 3.86 76 BAYES_99 20804 13.28 35.87 3.78 77 TR_XM_DK_SendGrid 20367 3.29 2.31 3.70 78 XMNumbers 19974 4.35 6.06 3.63 79 T_REMOTE_IMAGE 18216 4.82 8.40 3.31 80 DATE_IN_PAST_03_06 18114 2.91 2.01 3.29 81 BAYES_05 17813 2.57 0.99 3.23 82 RCVD_IN_IADB_VOUCHED 16583 2.36 0.80 3.01 83 BAYES_999 16580 10.66 28.85 3.01 84 XM_UncommonTLD01 16337 5.56 11.72 2.97 85 DKIM_INVALID 16328 3.28 4.02 2.96 86 XMSubMetaSx_00 16209 4.11 6.90 2.94 87 TM2_M_URI_OPT_OUT 16150 3.35 4.35 2.93 88 TR_XM_PhishingBody 15602 3.53 5.20 2.83 89 FROM_EXCESS_BASE64 14418 2.48 2.14 2.62 90 ANY_BOUNCE_MESSAGE 14079 1.95 0.52 2.56 91 BOUNCE_MESSAGE 14077 1.95 0.52 2.56 92 RCVD_IN_MSPIKE_H5 13873 2.02 0.85 2.52 93 URI_NOVOWEL 12925 1.95 1.02 2.35 94 BAYES_95 12506 3.23 5.50 2.27 95 MAILING_LIST_MULTI 12498 1.95 1.19 2.27 96 HTML_IMAGE_RATIO_08 12178 3.02 4.95 2.21 97 MIME_HTML_MOSTLY 11903 3.99 8.34 2.16 98 T_TooManySym_02 11238 1.63 0.65 2.04 99 TooManyTo_002 11170 1.58 0.52 2.03 100 HTML_MIME_NO_HTML_TAG 10719 3.73 7.97 1.95 101 RCVD_IN_IADB_OPTIN 10683 1.54 0.58 1.94 102 TR_DCC_Bayes_99 10302 9.55 27.79 1.87 103 TR_XM_SB_Phish 10122 1.78 1.66 1.84 104 XMSubPhish11 9962 1.73 1.54 1.81 105 LH_URI_DOM_IN_PATH 9919 2.08 2.74 1.80 106 UNTRUSTED_Relay 9774 7.70 21.78 1.77 107 TR_Symld_Words 9730 1.86 2.07 1.77 108 XM_DK_Undo_01 9012 1.76 2.04 1.64 109 XM_B_Unsub2 8938 1.80 2.21 1.62 110 T_FONT_INVIS_NAKED_TO 8927 2.36 4.12 1.62 111 XM_B_SpammyTLD 8773 2.25 3.81 1.59 112 HELO_NODOT 8752 1.54 1.42 1.59 113 HELO_NO_DOMAIN 8751 1.54 1.42 1.59 114 XM_B_Phish66 8578 2.00 3.04 1.56 115 KHOP_HELO_FCRDNS 8512 3.17 7.04 1.55 116 XM_CamelCaseFrm001 8432 1.58 1.70 1.53 117 XM_SPF_SoftFail 8252 2.38 4.47 1.50 118 XMSubGarbage 8202 1.07 0.08 1.49 119 T_XMDrugObfuBody_08 8150 2.11 3.61 1.48 120 TR_XM_SpammyWords5 8018 2.22 4.02 1.46 121 XMSubLongNoVowel 7980 1.10 0.27 1.45 122 T_XMDrugObfuBody_14 7945 1.52 1.72 1.44 123 IN_HORDE_ADDRESS_BOOK 7722 1.10 0.39 1.40 124 BOTNET 7665 6.40 18.30 1.39 125 TooManyTo_003 7421 1.07 0.42 1.35 126 RELAYCOUNTRY_CA 7232 2.67 5.89 1.31 127 XMDiploma_00 7218 1.63 2.39 1.31 128 INVALID_MSGID 7212 0.99 0.21 1.31 129 URI_HEX 7162 1.86 3.19 1.30 130 XMStockSpam_06 6924 1.43 1.83 1.26 131 TVD_RCVD_IP 6848 1.07 0.65 1.24 132 SUBJ_ALL_CAPS 6794 1.57 2.38 1.23 133 T_OBFU_PDF_ATTACH 6692 0.89 0.13 1.22 134 TO_MALFORMED 6618 0.85 0.00 1.20 135 MSGID_NOFQDN1 6512 0.84 0.03 1.18 136 XMCapTrack 6390 0.91 0.32 1.16 137 XMGappySubj_01 6312 0.88 0.25 1.15 138 DKIM_ADSP_CUSTOM_MED 6010 1.22 1.54 1.09 139 XM_GoogleGroups 5780 0.87 0.43 1.05 140 URI_TRY_3LD 5630 1.51 2.65 1.02 141 CK_HELO_DYNAMIC_SPLIT_IP 5599 0.97 0.87 1.02 142 HELO_MISC_IP 5596 0.84 0.41 1.02 143 XM_OfRef6 5535 1.92 4.08 1.01 144 USER_IN_DEF_DKIM_WL 5376 0.69 0.00 0.98 145 TooManyTo_004 5344 0.79 0.36 0.97 146 XM_E_Blogspot 5286 0.69 0.05 0.96 147 XM_UB50 5163 3.08 8.16 0.94 148 TM2_M_VERY_LONG_WORD 5155 1.63 3.29 0.94 149 SpammyFromTLD_01 4916 2.35 5.81 0.89 150 XMBSHREFv2 4779 0.70 0.29 0.87 151 T_FILL_THIS_FORM_SHORT 4778 1.29 2.30 0.87 152 XM_H_Long_From02 4733 0.82 0.72 0.86 153 RELAYCOUNTRY_GB 4681 1.02 1.41 0.85 154 HTTPS_HTTP_MISMATCH 4647 0.81 0.73 0.84 155 XMBrknScrpt_02 4525 1.45 2.94 0.82 156 XMBdyGiftCard01 4523 0.94 1.23 0.82 157 XM_ProductURIs 4516 0.75 0.57 0.82 158 T_TooManySym_03 4486 0.63 0.19 0.81 159 XMGenDplmaNmb 4465 0.98 1.38 0.81 160 TR_MSPIKEBAYES00 4355 0.56 0.01 0.79 161 TooManyTo_005 4212 0.63 0.31 0.76 162 RCVD_IN_BL_SPAMCOP_NET 4102 3.52 10.13 0.74 163 TR_LOTS_OF_MONEY3 3990 2.59 7.03 0.72 164 TR_MetaPhish_Combo_01 3861 0.68 0.62 0.70 165 XMBody_95 3849 0.54 0.18 0.70 166 FORGED_GMAIL_RCVD 3772 0.89 1.38 0.68 167 T_XMHurry_00 3742 1.43 3.21 0.68 168 NML_ADSP_CUSTOM_MED 3638 0.90 1.45 0.66 169 RCVD_IN_MSPIKE_BL 3588 4.47 13.53 0.65 170 XMSubMetaI_00 3570 0.76 1.02 0.65 171 XMHTML_After_End 3534 0.79 1.15 0.64 172 XMBody_17 3468 2.11 5.64 0.63 173 XM_B_COVIDMETA 3354 1.11 2.29 0.61 174 XMSubEmpty 3294 0.54 0.42 0.60 175 XM_SPF_Unknown 3223 0.61 0.68 0.59 176 FROM_GOV_DKIM_AU 3205 0.52 0.36 0.58 177 T_XMDrugObfuBody_00 3197 0.80 1.33 0.58 178 XM_RXBody 3166 0.52 0.38 0.57 179 TR_XM_SpammyWords2 3047 4.40 13.55 0.55 180 NUMERIC_HTTP_ADDR 3041 0.49 0.34 0.55 181 XMNoVowels 2991 0.46 0.27 0.54 182 FROM_GOV_SPOOF 2846 0.40 0.11 0.52 183 XMMoneyMeta_00 2835 0.80 1.48 0.51 184 SHORTENED_URL_HREF 2824 0.57 0.71 0.51 185 T_Symld_Words_02 2822 1.01 2.21 0.51 186 DKIM_ADSP_NXDOMAIN 2800 0.49 0.43 0.51 187 NO_DNS_FOR_FROM 2746 0.47 0.41 0.50 188 XM_H_PHPMailer 2737 0.48 0.44 0.50 189 XMHTMLBadTable_001 2712 0.50 0.52 0.49 190 XM_ShortIntro_01 2655 0.49 0.52 0.48 191 XMSexyCombo_01 2635 0.74 1.36 0.48 192 T_TooManySym_04 2548 0.34 0.04 0.46 193 XMPhish14 2497 0.54 0.75 0.45 194 RCVD_IN_SORBS_DUL 2452 0.40 0.28 0.45 195 DIET_1 2434 0.70 1.30 0.44 196 RCVD_IN_MSPIKE_L3 2430 2.36 6.93 0.44 197 HTML_IMAGE_ONLY_32 2420 0.44 0.44 0.44 198 MISSING_HEADERS 2329 0.87 1.93 0.42 199 XM_B_SpammyWords4 2318 0.79 1.65 0.42 200 RDNS_DYNAMIC 2312 0.77 1.60 0.42 ----------------------------------------------------------------------