Email: 816497 Autolearn: 0 AvgScore: 2.27 AvgScanTime: 1.76 sec Spam: 242763 Autolearn: 0 AvgScore: 13.77 AvgScanTime: 2.55 sec Ham: 573734 Autolearn: 0 AvgScore: -2.60 AvgScanTime: 1.43 sec Time Spent Running SA: 399.47 hours Time Spent Processing Spam: 172.16 hours Time Spent Processing Ham: 227.31 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 234906 86.82 96.76 82.62 2 DKIM_SIGNED 213510 74.96 87.95 69.47 3 XM_DK_Pass 201176 72.52 82.87 68.13 4 DKIM_VALID 197455 70.92 81.34 66.51 5 RELAYCOUNTRY_US 191559 82.01 78.91 83.32 6 DCC_CHECK 189659 51.75 78.13 40.60 7 XM_B_Unicode 189113 71.24 77.90 68.42 8 XMListUnsubscribeExists 173995 49.41 71.67 39.99 9 XM_B_SpammyWords 173296 57.53 71.38 51.66 10 DKIM_VALID_AU 149826 55.00 61.72 52.15 11 XM_DK_Undo_02 117678 19.15 48.47 6.74 12 XM_B_Unicode3 102182 40.58 42.09 39.94 13 TR_XM_DKIM_Undo 100267 16.03 41.30 5.34 14 XM_B_SpammyWords2 99397 24.50 40.94 17.54 15 LOC_TINY_FONT_1 95464 25.18 39.32 19.20 16 BAYES_99 92348 14.68 38.04 4.80 17 BAYES_50 91432 56.27 37.66 64.15 18 RCVD_IN_MSPIKE_H2 82596 26.47 34.02 23.28 19 HTML_FONT_LOW_CONTRAST 82578 25.83 34.02 22.36 20 BAYES_999 74783 11.54 30.80 3.38 21 MIME_HTML_ONLY 73920 22.96 30.45 19.79 22 TR_DCC_Bayes_99 72607 10.61 29.91 2.45 23 FVGT_m_MULTI_ODD 72435 22.99 29.84 20.10 24 DKIM_VALID_EF 70073 30.91 28.86 31.78 25 T_KAM_HTML_FONT_INVALID 69301 19.11 28.55 15.11 26 XMSubLong 56992 19.58 23.48 17.94 27 RCVD_IN_MSPIKE_WL 53947 29.41 22.22 32.46 28 T_TM2_M_HEADER_IN_MSG 50016 24.75 20.60 26.50 29 RELAYCOUNTRY_META 49592 8.84 20.43 3.94 30 XM_Body_Dirty_Words 49381 12.97 20.34 9.85 31 DCC_CHECK_NEGATIVE 48556 46.38 20.00 57.55 32 BOTNET 37589 5.63 15.48 1.46 33 LOTS_OF_MONEY 37148 9.31 15.30 6.77 34 XM_Multi_Part_URI 34835 11.22 14.35 9.90 35 TR_XM_SpammyWords2 34642 4.75 14.27 0.72 36 XM_B_SpammyWords3 33754 6.59 13.90 3.50 37 TR_XM_SpammyWords4 31255 7.20 12.87 4.81 38 UNTRUSTED_Relay 30175 4.65 12.43 1.35 39 XM_B_Unsub 29515 8.98 12.16 7.64 40 RCVD_IN_MSPIKE_H3 29029 13.31 11.96 13.89 41 XM_UncommonTLD01 28287 5.27 11.65 2.57 42 BOTNET_IPINHOSTNAME 28254 6.05 11.64 3.69 43 XM_Evil_Numbers_Gen 27378 9.07 11.28 8.14 44 FSL_BULK_SIG 26491 7.03 10.91 5.39 45 RCVD_IN_BL_SPAMCOP_NET 24685 3.61 10.17 0.84 46 XMSexyCombo_05 24334 5.01 10.02 2.89 47 LotsOfNums_01 23426 8.24 9.65 7.64 48 XM_B_Phish_Phrases 23321 11.38 9.61 12.12 49 RCVD_IN_MSPIKE_H4 22843 10.64 9.41 11.16 50 UNPARSEABLE_RELAY 22548 6.84 9.29 5.81 51 TR_XM_UnparsRelay 21944 6.22 9.04 5.03 52 HTML_IMAGE_RATIO_02 20284 6.48 8.36 5.68 53 BAYES_80 19543 6.92 8.05 6.44 54 MPART_ALT_DIFF 19537 7.93 8.05 7.88 55 XM_H_Long_From01 18317 5.32 7.55 4.38 56 BAYES_60 17884 9.29 7.37 10.11 57 XM_SendGrid 17774 5.76 7.32 5.09 58 TooManyTo_001 16105 6.74 6.63 6.79 59 DKIM_INVALID 16055 4.04 6.61 2.95 60 RELAYCOUNTRY_CA 16014 2.67 6.60 1.01 61 XMSubMetaSx_00 15748 4.04 6.49 3.00 62 XMNumbers 15632 3.69 6.44 2.53 63 TR_XM_PhishingBody 15414 3.49 6.35 2.28 64 MIME_HTML_MOSTLY 14067 3.24 5.79 2.16 65 HTML_IMAGE_RATIO_04 13679 10.77 5.63 12.94 66 T_REMOTE_IMAGE 12694 3.61 5.23 2.93 67 TR_XM_SpammyWords5 12662 2.45 5.22 1.28 68 XM_OfRef6 12490 2.03 5.14 0.71 69 BAYES_95 12222 3.57 5.03 2.96 70 XM_DK_Undo_01 11854 2.85 4.88 1.99 71 TM2_M_URI_OPT_OUT 11777 3.05 4.85 2.28 72 BOTNET_NORDNS 11748 1.54 4.84 0.15 73 XM_UB50 11658 2.09 4.80 0.94 74 SpammyFromTLD_02 11552 1.59 4.76 0.25 75 RCVD_IN_RP_SAFE 11064 6.00 4.56 6.61 76 XM_B_SpammyTLD 11029 2.57 4.54 1.73 77 XMStrtUSub 10936 14.35 4.50 18.52 78 KHOP_HELO_FCRDNS 10455 2.31 4.31 1.46 79 URIBL_SBL_A 9472 2.11 3.90 1.36 80 RCVD_IN_MSPIKE_BL 9068 1.18 3.74 0.10 81 TR_XM_MSPIKECOMBO 9029 1.17 3.72 0.09 82 XM_B_Phish66 8736 2.05 3.60 1.40 83 MIME_HTML_ONLY_MULTI 8615 5.53 3.55 6.36 84 T_FILL_THIS_FORM_SHORT 8521 1.51 3.51 0.67 85 URIBL_DBL_SPAM 8383 1.04 3.45 0.01 86 SpammyFromTLD_01 8314 1.45 3.42 0.62 87 XMDiploma_00 8305 2.07 3.42 1.49 88 XMBody_17 8304 1.31 3.42 0.42 89 RCVD_IN_RP_CERTIFIED 8238 5.27 3.39 6.06 90 TR_LOTS_OF_MONEY3 8131 1.27 3.35 0.39 91 HTML_IMAGE_RATIO_06 8117 3.63 3.34 3.75 92 BODY_URI_ONLY 8061 0.99 3.32 0.01 93 XM_B_Unsub2 7562 1.75 3.11 1.17 94 HTML_IMAGE_RATIO_08 7524 2.21 3.10 1.84 95 MIME_QP_LONG_LINE 7507 4.29 3.09 4.80 96 XM_SPF_SoftFail 7400 2.09 3.05 1.69 97 HTML_SHORT_LINK_IMG_1 7118 0.88 2.93 0.01 98 XM_B_COVIDMETA 7085 1.43 2.92 0.79 99 RELAYCOUNTRY_IN 7015 0.91 2.89 0.08 100 TR_XM_DK_SendGrid 6967 3.08 2.87 3.17 101 XMBdyGiftCard01 6883 1.37 2.84 0.75 102 RCVD_IN_MSPIKE_L5 6640 0.85 2.74 0.05 103 XM_DIRTYINTL 6558 1.04 2.70 0.34 104 XM_UB99 6515 0.81 2.68 0.01 105 URI_HEX 6399 1.54 2.64 1.08 106 T_TooManySym_01 6204 3.85 2.56 4.40 107 XM_B_SpammyWords4 6182 1.09 2.55 0.47 108 FORGED_GMAIL_RCVD 6133 1.11 2.53 0.52 109 RELAYCOUNTRY_FR 6041 0.88 2.49 0.20 110 FROM_EXCESS_BASE64 5999 2.35 2.47 2.29 111 TM2_M_VERY_LONG_WORD 5986 1.46 2.47 1.04 112 RCVD_IN_PSBL 5783 0.77 2.38 0.09 113 SUBJ_ALL_CAPS 5740 1.54 2.36 1.20 114 HTML_IMAGE_ONLY_12 5636 0.79 2.32 0.14 115 TR_XM_MaxBayes 5586 0.70 2.30 0.02 116 HTML_FONT_SIZE_LARGE 5585 0.74 2.30 0.09 117 XMBrknScrpt_02 5578 1.06 2.30 0.54 118 T_XMDrugObfuBody_08 5503 1.52 2.27 1.21 119 RCVD_IN_RP_RNBL 5316 0.66 2.19 0.02 120 T_XMDrugObfuBody_14 5263 1.87 2.17 1.74 121 XM_UB60 5157 0.72 2.12 0.13 122 T_XMHurry_00 5133 2.68 2.11 2.92 123 XM_CamelCaseFrm001 5109 1.72 2.10 1.56 124 TR_XM_BayesRelay 5020 0.63 2.07 0.02 125 RCVD_IN_IADB_LISTED 4971 3.99 2.05 4.82 126 TR_XM_SB_Phish 4918 1.88 2.03 1.81 127 XMSubPhish11 4757 1.84 1.96 1.79 128 XM_UB999 4679 0.58 1.93 0.01 129 URI_NOVOWEL 4672 2.36 1.92 2.55 130 GOOGLE_DOC_SUSP 4644 0.57 1.91 0.01 131 TR_XM_SpammyWords3 4600 0.59 1.89 0.04 132 RCVD_IN_IADB_SPF 4554 3.53 1.88 4.23 133 PDS_OTHER_BAD_TLD 4422 0.87 1.82 0.47 134 RCVD_IN_IADB_DK 4337 3.12 1.79 3.68 135 XMStockSpam_06 4314 1.28 1.78 1.07 136 XMGenDplmaNmb 4295 1.04 1.77 0.73 137 RCVD_IN_IADB_SENDERID 4271 3.20 1.76 3.80 138 MAILING_LIST_MULTI 4189 2.05 1.73 2.19 139 TR_XM_COVIDMETA4 3964 0.68 1.63 0.27 140 URI_TRY_3LD 3959 1.15 1.63 0.95 141 TR_XM_INV_DKIM 3866 0.52 1.59 0.07 142 HTML_MIME_NO_HTML_TAG 3851 1.65 1.59 1.67 143 XM_URI_RBL 3844 0.58 1.58 0.15 144 XMSubMetaI_00 3753 0.85 1.55 0.56 145 HK_RANDOM_REPLYTO 3746 0.54 1.54 0.12 146 TR_XM_FormFill 3705 0.46 1.53 0.01 147 XMHTML_After_End 3634 1.04 1.50 0.85 148 XMBody_78 3603 0.68 1.48 0.34 149 TR_XM_COVIDMETA1 3601 0.66 1.48 0.32 150 BAYES_40 3533 3.03 1.46 3.69 151 XM_UB80 3456 0.44 1.42 0.03 152 XM_BadFromFormat 3431 0.49 1.41 0.10 153 XMSexyCombo_01 3242 0.66 1.34 0.37 154 HDRS_LCASE_IMGONLY 3229 0.41 1.33 0.02 155 ANY_BOUNCE_MESSAGE 3206 2.28 1.32 2.69 156 BOUNCE_MESSAGE 3206 2.28 1.32 2.69 157 URIBL_BLACK 3122 0.40 1.29 0.02 158 TR_XM_PHPDW 2920 0.53 1.20 0.24 159 RELAYCOUNTRY_GB 2899 1.10 1.19 1.07 160 ALL_TRUSTED 2857 10.20 1.18 14.02 161 TR_XM_PHPForged 2838 0.49 1.17 0.20 162 TR_BOTNET_NEGATE 2792 0.59 1.15 0.35 163 RELAYCOUNTRY_NL 2777 0.43 1.14 0.12 164 TR_XM_FormFill2 2768 0.48 1.14 0.21 165 XM_H_PHPOS 2761 0.48 1.14 0.20 166 DIET_1 2751 0.52 1.13 0.26 167 HTTPS_HTTP_MISMATCH 2674 0.80 1.10 0.67 168 NORDNS_LOW_CONTRAST 2647 0.36 1.09 0.06 169 XMLngstWrd_00 2647 0.59 1.09 0.38 170 T_XMDrugObfuBody_00 2628 0.65 1.08 0.46 171 MILLION_USD 2608 0.33 1.07 0.01 172 XM_ProductURIs 2585 0.71 1.06 0.56 173 XMPhish08 2534 0.39 1.04 0.11 174 MONEY_FORM_SHORT 2515 0.31 1.04 0.00 175 TO_IN_SUBJ 2460 0.31 1.01 0.02 176 TR_Caps_n_Bayes_99 2417 0.32 1.00 0.04 177 BAYES_20 2387 1.70 0.98 2.00 178 T_Symld_Words_02 2370 0.60 0.98 0.44 179 XM_H_Long_From02 2341 0.88 0.96 0.85 180 TR_Symld_Words 2288 1.31 0.94 1.46 181 XM_Body_Dirty_Words_01 2259 0.64 0.93 0.52 182 XM_B_SEO 2250 0.34 0.93 0.09 183 XMSubNoVowel 2244 2.44 0.92 3.09 184 XM_OfRef7 2203 0.32 0.91 0.08 185 XMPhish30 2200 0.50 0.91 0.33 186 FROM_SUSPICIOUS_NTLD 2189 0.30 0.90 0.04 187 DKIM_ADSP_CUSTOM_MED 2186 0.89 0.90 0.89 188 XMLngstWrd_01 2178 0.50 0.90 0.34 189 SUBJ_DOLLARS 2164 0.41 0.89 0.21 190 XM_UB95 2158 0.28 0.89 0.02 191 HTML_FONT_FACE_BAD 2146 7.58 0.88 10.41 192 XM_PDF 2143 2.65 0.88 3.40 193 URI_OPTOUT_3LD 2133 0.28 0.88 0.03 194 NUMERIC_HTTP_ADDR 2128 0.48 0.88 0.31 195 TR_XM_SEO4 2108 0.30 0.87 0.05 196 DKIM_ADSP_NXDOMAIN 2106 0.44 0.87 0.26 197 HTML_TAG_BALANCE_BODY 2091 0.47 0.86 0.30 198 FROM_SUSPICIOUS_NTLD_FP 2079 0.28 0.86 0.03 199 RCVD_IN_MSPIKE_H5 2075 5.46 0.85 7.41 200 HDRS_MISSP 2075 0.27 0.85 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 478032 82.01 78.91 83.32 2 HTML_MESSAGE 474000 86.82 96.76 82.62 3 DKIM_SIGNED 398561 74.96 87.95 69.47 4 XM_B_Unicode 392567 71.24 77.90 68.42 5 XM_DK_Pass 390907 72.52 82.87 68.13 6 DKIM_VALID 381608 70.92 81.34 66.51 7 BAYES_50 368034 56.27 37.66 64.15 8 DCC_CHECK_NEGATIVE 330175 46.38 20.00 57.55 9 DKIM_VALID_AU 299224 55.00 61.72 52.15 10 XM_B_SpammyWords 296396 57.53 71.38 51.66 11 DCC_CHECK 232912 51.75 78.13 40.60 12 XMListUnsubscribeExists 229450 49.41 71.67 39.99 13 XM_B_Unicode3 229147 40.58 42.09 39.94 14 RCVD_IN_MSPIKE_WL 186215 29.41 22.22 32.46 15 DKIM_VALID_EF 182327 30.91 28.86 31.78 16 T_TM2_M_HEADER_IN_MSG 152029 24.75 20.60 26.50 17 RCVD_IN_MSPIKE_H2 133548 26.47 34.02 23.28 18 HTML_FONT_LOW_CONTRAST 128307 25.83 34.02 22.36 19 FVGT_m_MULTI_ODD 115309 22.99 29.84 20.10 20 MIME_HTML_ONLY 113547 22.96 30.45 19.79 21 LOC_TINY_FONT_1 110158 25.18 39.32 19.20 22 XMStrtUSub 106261 14.35 4.50 18.52 23 XMSubLong 102902 19.58 23.48 17.94 24 XM_B_SpammyWords2 100613 24.50 40.94 17.54 25 XM_DKIMWhitelistDomains 90937 11.17 0.10 15.85 26 T_KAM_HTML_FONT_INVALID 86708 19.11 28.55 15.11 27 ALL_TRUSTED 80448 10.20 1.18 14.02 28 RCVD_IN_MSPIKE_H3 79669 13.31 11.96 13.89 29 HTML_IMAGE_RATIO_04 74236 10.77 5.63 12.94 30 XM_B_Phish_Phrases 69557 11.38 9.61 12.12 31 RCVD_IN_MSPIKE_H4 64040 10.64 9.41 11.16 32 XM_H_Trusted_IP 62737 7.68 0.00 10.93 33 HTML_FONT_FACE_BAD 59725 7.58 0.88 10.41 34 BAYES_60 58005 9.29 7.37 10.11 35 XM_Multi_Part_URI 56806 11.22 14.35 9.90 36 XM_Body_Dirty_Words 56535 12.97 20.34 9.85 37 XM_Evil_Numbers_Gen 46692 9.07 11.28 8.14 38 MPART_ALT_DIFF 45222 7.93 8.05 7.88 39 XM_B_Unsub 43842 8.98 12.16 7.64 40 LotsOfNums_01 43834 8.24 9.65 7.64 41 RCVD_IN_MSPIKE_H5 42509 5.46 0.85 7.41 42 TooManyTo_001 38928 6.74 6.63 6.79 43 LOTS_OF_MONEY 38867 9.31 15.30 6.77 44 XM_DK_Undo_02 38651 19.15 48.47 6.74 45 RCVD_IN_RP_SAFE 37938 6.00 4.56 6.61 46 BAYES_80 36936 6.92 8.05 6.44 47 MIME_HTML_ONLY_MULTI 36510 5.53 3.55 6.36 48 RCVD_IN_RP_CERTIFIED 34764 5.27 3.39 6.06 49 UNPARSEABLE_RELAY 33308 6.84 9.29 5.81 50 HTML_IMAGE_RATIO_02 32596 6.48 8.36 5.68 51 FSL_BULK_SIG 30946 7.03 10.91 5.39 52 TR_XM_DKIM_Undo 30649 16.03 41.30 5.34 53 XM_SendGrid 29218 5.76 7.32 5.09 54 TR_XM_UnparsRelay 28850 6.22 9.04 5.03 55 RCVD_IN_IADB_LISTED 27634 3.99 2.05 4.82 56 TR_XM_SpammyWords4 27569 7.20 12.87 4.81 57 MIME_QP_LONG_LINE 27543 4.29 3.09 4.80 58 BAYES_99 27539 14.68 38.04 4.80 59 BAYES_00 27191 3.53 0.68 4.74 60 IN_ZIMBRA_NJ_WHITELIST 26763 3.30 0.06 4.66 61 T_TooManySym_01 25245 3.85 2.56 4.40 62 XM_H_Long_From01 25157 5.32 7.55 4.38 63 RCVD_IN_IADB_SPF 24257 3.53 1.88 4.23 64 RELAYCOUNTRY_META 22609 8.84 20.43 3.94 65 TR_XM_DK_Bayes 22165 2.83 0.40 3.86 66 RCVD_IN_IADB_SENDERID 21822 3.20 1.76 3.80 67 TR_XM_DK_Bayes1 21779 2.78 0.38 3.80 68 HTML_IMAGE_RATIO_06 21542 3.63 3.34 3.75 69 BAYES_40 21199 3.03 1.46 3.69 70 BOTNET_IPINHOSTNAME 21177 6.05 11.64 3.69 71 RCVD_IN_IADB_DK 21116 3.12 1.79 3.68 72 XM_B_SpammyWords3 20085 6.59 13.90 3.50 73 XM_PDF 19514 2.65 0.88 3.40 74 TR_XM_DK_Bayes2 19470 2.47 0.29 3.39 75 BAYES_999 19405 11.54 30.80 3.38 76 TR_XM_DK_SendGrid 18192 3.08 2.87 3.17 77 XMSubNoVowel 17710 2.44 0.92 3.09 78 XMSubMetaSx_00 17210 4.04 6.49 3.00 79 BAYES_95 16954 3.57 5.03 2.96 80 DKIM_INVALID 16953 4.04 6.61 2.95 81 T_REMOTE_IMAGE 16789 3.61 5.23 2.93 82 T_XMHurry_00 16747 2.68 2.11 2.92 83 XMSexyCombo_05 16553 5.01 10.02 2.89 84 RCVD_IN_IADB_VOUCHED 16520 2.26 0.78 2.88 85 ANY_BOUNCE_MESSAGE 15448 2.28 1.32 2.69 86 BOUNCE_MESSAGE 15448 2.28 1.32 2.69 87 XM_UncommonTLD01 14736 5.27 11.65 2.57 88 URI_NOVOWEL 14622 2.36 1.92 2.55 89 XMNumbers 14532 3.69 6.44 2.53 90 TR_DCC_Bayes_99 14039 10.61 29.91 2.45 91 FROM_EXCESS_BASE64 13153 2.35 2.47 2.29 92 TR_XM_PhishingBody 13106 3.49 6.35 2.28 93 TM2_M_URI_OPT_OUT 13102 3.05 4.85 2.28 94 T_TooManySym_02 12725 1.79 0.76 2.22 95 MAILING_LIST_MULTI 12585 2.05 1.73 2.19 96 MIME_HTML_MOSTLY 12394 3.24 5.79 2.16 97 BAYES_20 11479 1.70 0.98 2.00 98 XM_DK_Undo_01 11408 2.85 4.88 1.99 99 RCVD_IN_IADB_OPTIN 10725 1.46 0.50 1.87 100 TooManyTo_002 10651 1.51 0.70 1.86 101 HTML_IMAGE_RATIO_08 10544 2.21 3.10 1.84 102 TR_XM_SB_Phish 10402 1.88 2.03 1.81 103 XMSubPhish11 10282 1.84 1.96 1.79 104 T_XMDrugObfuBody_14 9988 1.87 2.17 1.74 105 XM_B_SpammyTLD 9935 2.57 4.54 1.73 106 TVD_RCVD_IP 9828 1.25 0.15 1.71 107 XM_SPF_SoftFail 9703 2.09 3.05 1.69 108 HTML_MIME_NO_HTML_TAG 9591 1.65 1.59 1.67 109 XM_CamelCaseFrm001 8924 1.72 2.10 1.56 110 XMDiploma_00 8576 2.07 3.42 1.49 111 HELO_NODOT 8427 1.17 0.45 1.47 112 HELO_NO_DOMAIN 8426 1.16 0.44 1.47 113 TR_Symld_Words 8383 1.31 0.94 1.46 114 BOTNET 8380 5.63 15.48 1.46 115 KHOP_HELO_FCRDNS 8376 2.31 4.31 1.46 116 XM_B_Phish66 8040 2.05 3.60 1.40 117 URIBL_SBL_A 7791 2.11 3.90 1.36 118 UNTRUSTED_Relay 7766 4.65 12.43 1.35 119 IN_HORDE_ADDRESS_BOOK 7551 0.95 0.07 1.32 120 TR_XM_SpammyWords5 7363 2.45 5.22 1.28 121 TooManyTo_003 7131 1.04 0.55 1.24 122 INVALID_MSGID 7075 1.01 0.47 1.23 123 T_XMDrugObfuBody_08 6916 1.52 2.27 1.21 124 SUBJ_ALL_CAPS 6869 1.54 2.36 1.20 125 XM_B_Unsub2 6716 1.75 3.11 1.17 126 MSGID_NOFQDN1 6447 0.80 0.04 1.12 127 TO_MALFORMED 6440 0.80 0.02 1.12 128 HELO_MISC_IP 6430 0.88 0.30 1.12 129 BAYES_05 6397 1.00 0.72 1.11 130 URI_HEX 6169 1.54 2.64 1.08 131 XMStockSpam_06 6125 1.28 1.78 1.07 132 RELAYCOUNTRY_GB 6119 1.10 1.19 1.07 133 TM2_M_VERY_LONG_WORD 5946 1.46 2.47 1.04 134 XMCapTrack 5868 0.85 0.43 1.02 135 XMSubGarbage 5784 0.76 0.18 1.01 136 RELAYCOUNTRY_CA 5779 2.67 6.60 1.01 137 XMSubLongNoVowel 5729 0.79 0.30 1.00 138 URI_TRY_3LD 5423 1.15 1.63 0.95 139 XM_UB50 5403 2.09 4.80 0.94 140 USER_IN_DEF_DKIM_WL 5324 0.76 0.38 0.93 141 XM_E_Blogspot 5165 0.66 0.09 0.90 142 XM_GoogleGroups 5163 0.77 0.48 0.90 143 DKIM_ADSP_CUSTOM_MED 5113 0.89 0.90 0.89 144 TooManyTo_004 5038 0.76 0.48 0.88 145 XMHTML_After_End 4893 1.04 1.50 0.85 146 XMBody_95 4889 0.65 0.16 0.85 147 XMBSHREFv2 4871 0.68 0.29 0.85 148 XM_H_Long_From02 4862 0.88 0.96 0.85 149 RCVD_IN_BL_SPAMCOP_NET 4813 3.61 10.17 0.84 150 XMGappySubj_01 4749 0.63 0.15 0.83 151 XM_B_COVIDMETA 4558 1.43 2.92 0.79 152 XMBdyGiftCard01 4301 1.37 2.84 0.75 153 XMGenDplmaNmb 4187 1.04 1.77 0.73 154 TooManyTo_005 4156 0.63 0.40 0.72 155 TR_XM_SpammyWords2 4146 4.75 14.27 0.72 156 XM_OfRef6 4080 2.03 5.14 0.71 157 TVD_PH_BODY_ACCOUNTS_PRE 4072 0.64 0.49 0.71 158 T_FILL_THIS_FORM_SHORT 3844 1.51 3.51 0.67 159 HTTPS_HTTP_MISMATCH 3818 0.80 1.10 0.67 160 TVD_SPACE_RATIO 3570 0.46 0.07 0.62 161 SpammyFromTLD_01 3559 1.45 3.42 0.62 162 XMHTMLBadTable_001 3468 0.61 0.61 0.60 163 RELAYCOUNTRY_DE 3345 0.63 0.74 0.58 164 NML_ADSP_CUSTOM_MED 3331 0.63 0.75 0.58 165 TR_MSPIKEBAYES00 3282 0.41 0.03 0.57 166 XM_ProductURIs 3208 0.71 1.06 0.56 167 XMSubMetaI_00 3188 0.85 1.55 0.56 168 XMBrknScrpt_02 3080 1.06 2.30 0.54 169 XM_Body_Dirty_Words_01 2981 0.64 0.93 0.52 170 FORGED_GMAIL_RCVD 2966 1.11 2.53 0.52 171 T_OBFU_PDF_ATTACH 2891 0.41 0.18 0.50 172 T_TooManySym_03 2876 0.42 0.22 0.50 173 MSGID_FROM_MTA_HEADER 2717 0.37 0.13 0.47 174 XM_B_SpammyWords4 2703 1.09 2.55 0.47 175 PDS_OTHER_BAD_TLD 2670 0.87 1.82 0.47 176 TR_MetaPhish_Combo_01 2669 0.56 0.79 0.47 177 XM_SPF_Unknown 2647 0.47 0.48 0.46 178 T_XMDrugObfuBody_00 2643 0.65 1.08 0.46 179 XMMoneyMeta_00 2601 0.54 0.76 0.45 180 XM_H_PHPMailer 2564 0.47 0.51 0.45 181 T_Symld_Words_02 2552 0.60 0.98 0.44 182 XM_ShortIntro_01 2530 0.42 0.37 0.44 183 RCVD_IN_SORBS_DUL 2528 0.37 0.20 0.44 184 SHORT_HELO_AND_INLINE_IMAGE 2528 0.33 0.07 0.44 185 XM_B_REG_HTML 2516 0.39 0.29 0.44 186 XM_Body_Obfu01 2510 0.52 0.72 0.44 187 RDNS_DYNAMIC 2473 0.52 0.73 0.43 188 XM_RXBody 2456 0.44 0.45 0.43 189 XMBody_17 2431 1.31 3.42 0.42 190 XMNoVowels 2332 0.40 0.38 0.41 191 FROM_GOV_SPOOF 2275 0.32 0.13 0.40 192 TR_LOTS_OF_MONEY3 2251 1.27 3.35 0.39 193 HTML_IMAGE_ONLY_20 2239 0.37 0.33 0.39 194 FROM_GOV_DKIM_AU 2213 0.40 0.43 0.39 195 XMPhish14 2190 0.46 0.64 0.38 196 XM_B_COPY_HTML 2173 0.44 0.57 0.38 197 XMLngstWrd_00 2162 0.59 1.09 0.38 198 XMSubMetaSxObfu_03 2161 0.47 0.69 0.38 199 USER_IN_WHITELIST 2157 0.26 0.00 0.38 200 USER_IN_WELCOMELIST 2157 0.26 0.00 0.38 ----------------------------------------------------------------------