Email: 503953 Autolearn: 0 AvgScore: 4.83 AvgScanTime: 10.91 sec Spam: 196558 Autolearn: 0 AvgScore: 14.65 AvgScanTime: 15.87 sec Ham: 307395 Autolearn: 0 AvgScore: -1.45 AvgScanTime: 7.74 sec Time Spent Running SA: 1526.80 hours Time Spent Processing Spam: 866.24 hours Time Spent Processing Ham: 660.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 190323 87.26 96.83 81.15 2 DKIM_SIGNED 178014 70.36 90.57 57.43 3 XM_DK_Pass 174669 68.85 88.86 56.05 4 RELAYCOUNTRY_US 170629 75.56 86.81 68.37 5 XM_B_Unicode 155311 70.35 79.02 64.81 6 XM_DK_Undo_02 141719 36.64 72.10 13.96 7 XMListUnsubscribeExists 141275 48.74 71.87 33.94 8 BOTNET 128592 34.76 65.42 15.15 9 XM_B_SpammyWords 126138 50.94 64.17 42.48 10 DKIM_INVALID 125172 36.32 63.68 18.82 11 DCC_CHECK 117523 35.75 59.79 20.38 12 TR_XM_DKIM_Undo 96619 23.23 49.16 6.65 13 BAYES_50 95826 53.12 48.75 55.91 14 XM_B_Unicode3 94884 44.45 48.27 42.01 15 DCC_CHECK_NEGATIVE 78977 64.22 40.18 79.59 16 LOC_TINY_FONT_1 68809 24.46 35.01 17.72 17 HTML_FONT_LOW_CONTRAST 65454 25.79 33.30 20.99 18 XM_B_SpammyWords2 64868 21.10 33.00 13.48 19 FVGT_m_MULTI_ODD 63578 24.48 32.35 19.45 20 MIME_HTML_ONLY 61971 28.65 31.53 26.81 21 DKIM_VALID 52842 34.04 26.88 38.62 22 T_KAM_HTML_FONT_INVALID 51208 18.27 26.05 13.29 23 BAYES_99 49056 13.00 24.96 5.35 24 XMSubLong 47094 25.96 23.96 27.25 25 XM_Body_Dirty_Words 44587 14.72 22.68 9.63 26 T_TM2_M_HEADER_IN_MSG 41328 25.39 21.03 28.19 27 BAYES_999 39690 10.62 20.19 4.49 28 DKIM_VALID_AU 38127 25.28 19.40 29.03 29 XM_Multi_Part_URI 32165 12.52 16.36 10.06 30 RELAYCOUNTRY_META 31952 8.27 16.26 3.16 31 TR_DCC_Bayes_99 30111 6.79 15.32 1.34 32 XM_B_Unsub 28051 16.56 14.27 18.03 33 LOTS_OF_MONEY 27537 9.94 14.01 7.34 34 UNPARSEABLE_RELAY 23686 8.50 12.05 6.24 35 TR_XM_UnparsRelay 22546 7.34 11.47 4.70 36 TR_XM_INV_DKIM 21828 5.06 11.11 1.20 37 MPART_ALT_DIFF 21819 8.22 11.10 6.38 38 TR_XM_SpammyWords4 21753 6.89 11.07 4.22 39 LotsOfNums_01 21207 8.37 10.79 6.82 40 DKIM_VALID_EF 20761 13.14 10.56 14.78 41 XM_Evil_Numbers_Gen 20088 7.50 10.22 5.77 42 BOTNET_IPINHOSTNAME 19851 6.15 10.10 3.63 43 XM_B_SpammyWords3 19628 5.66 9.99 2.90 44 XMSexyCombo_05 19507 5.49 9.92 2.65 45 XM_UncommonTLD01 19432 5.93 9.89 3.40 46 TR_XM_SpammyRelay 16821 4.06 8.56 1.19 47 HTML_IMAGE_RATIO_02 16483 5.76 8.39 4.08 48 UNTRUSTED_Relay 16082 6.14 8.18 4.83 49 XM_SendGrid 15852 6.06 8.06 4.78 50 FSL_BULK_SIG 15831 4.70 8.05 2.55 51 RCVD_IN_MSPIKE_H2 15828 10.07 8.05 11.36 52 TR_XM_SpammyWords2 15802 3.52 8.04 0.63 53 BAYES_60 15585 7.86 7.93 7.82 54 MIME_HTML_ONLY_MULTI 14145 5.76 7.20 4.85 55 BAYES_80 14034 4.72 7.14 3.18 56 RCVD_IN_MSPIKE_WL 13993 12.96 7.12 16.70 57 TM2_M_VERY_LONG_WORD 13442 3.68 6.84 1.65 58 TR_XM_COVIDMETA4 13364 3.39 6.80 1.21 59 HTML_MIME_NO_HTML_TAG 12885 4.16 6.56 2.62 60 XMSubMetaSx_00 12313 4.12 6.26 2.74 61 TR_XM_PhishingBody 11934 3.99 6.07 2.66 62 TooManyTo_001 11451 12.06 5.83 16.05 63 MIME_QP_LONG_LINE 11281 4.77 5.74 4.14 64 XM_H_Long_From01 11110 4.88 5.65 4.39 65 XM_GoogleGroups 10766 3.11 5.48 1.60 66 TR_XM_MaxUnsub 10316 2.70 5.25 1.06 67 MIME_HTML_MOSTLY 10172 3.35 5.18 2.18 68 HTML_IMAGE_RATIO_04 10122 5.44 5.15 5.62 69 XM_H_MailChimp 9937 2.32 5.06 0.57 70 XM_B_Phish_Phrases 9681 3.82 4.93 3.12 71 URI_NOVOWEL 9473 3.23 4.82 2.21 72 XMLngstWrd_00 9200 2.41 4.68 0.96 73 XMLngstWrd_01 9132 2.37 4.65 0.91 74 RCVD_IN_MSPIKE_H3 8993 7.28 4.58 9.01 75 XMLngstWrd_02 8921 2.28 4.54 0.83 76 SpammyFromTLD_02 8836 2.13 4.50 0.61 77 XMLngstWrd_03 8744 2.19 4.45 0.74 78 HTML_TITLE_SUBJ_DIFF 8521 2.14 4.34 0.73 79 XMLngstWrd_04 8487 2.10 4.32 0.68 80 UPPERCASE_75_100 8348 2.01 4.25 0.59 81 KHOP_HELO_FCRDNS 7865 3.64 4.00 3.41 82 BAYES_95 7819 2.77 3.98 2.00 83 XM_UB50 7563 1.89 3.85 0.65 84 HTML_IMAGE_RATIO_06 7420 3.89 3.77 3.96 85 SpammyFromTLD_01 7338 1.80 3.73 0.56 86 RELAYCOUNTRY_CA 6971 1.78 3.55 0.65 87 XM_B_SpammyTLD 6559 2.66 3.34 2.23 88 T_REMOTE_IMAGE 6458 3.18 3.29 3.11 89 URI_HEX 6021 1.84 3.06 1.06 90 FROM_EXCESS_BASE64 6014 2.14 3.06 1.55 91 T_XMDrugObfuBody_14 5930 2.28 3.02 1.81 92 XMStrtUSub 5899 3.24 3.00 3.39 93 TR_XM_SpammyWords5 5801 1.78 2.95 1.03 94 TM2_M_URI_OPT_OUT 5768 3.21 2.93 3.38 95 XM_B_Phish66 5717 2.14 2.91 1.65 96 XM_H_ConstantContact 5623 1.41 2.86 0.48 97 XM_B_Investor 5591 1.84 2.84 1.20 98 XM_SPF_SoftFail 5512 2.46 2.80 2.24 99 XMSexyCombo_01 5470 1.37 2.78 0.46 100 RCVD_IN_BL_SPAMCOP_NET 5461 1.36 2.78 0.46 101 XM_OfRef6 5341 1.60 2.72 0.89 102 T_XMDrugObfuBody_08 5293 1.74 2.69 1.14 103 XM_CamelCaseFrm001 5291 1.91 2.69 1.42 104 HTML_IMAGE_RATIO_08 5278 2.26 2.69 1.99 105 XMNumbers 5248 3.15 2.67 3.46 106 XM_DIRTYINTL 5185 1.18 2.64 0.25 107 MAILING_LIST_MULTI 5181 2.39 2.64 2.24 108 T_TooManySym_01 5152 4.63 2.62 5.91 109 TR_XM_SB_Phish 5078 2.06 2.58 1.73 110 XMSubPhish11 4934 2.02 2.51 1.71 111 BAYES_00 4747 10.44 2.42 15.57 112 XM_DK_Undo_01 4579 1.75 2.33 1.37 113 RCVD_IN_MSPIKE_H4 4560 4.77 2.32 6.33 114 BOTNET_NORDNS 4545 0.94 2.31 0.07 115 T_XMDrugObfuBody_00 4480 1.42 2.28 0.88 116 XM_B_Unsub2 4418 1.70 2.25 1.35 117 BAYES_40 4238 3.58 2.16 4.50 118 TR_XM_DK_Bayes 4131 4.65 2.10 6.27 119 XMDiploma_00 4024 6.45 2.05 9.27 120 XMStockSpam_06 3554 1.37 1.81 1.10 121 SUBJ_ALL_CAPS 3471 1.77 1.77 1.77 122 BAYES_20 3409 2.82 1.73 3.51 123 RELAYCOUNTRY_FR 3363 0.76 1.71 0.16 124 XM_B_COVIDMETA 3362 0.94 1.71 0.45 125 XMPhish30 3297 1.01 1.68 0.58 126 T_FILL_THIS_FORM_SHORT 3272 1.11 1.66 0.76 127 TR_Symld_Words 3232 1.70 1.64 1.73 128 RCVD_IN_MSPIKE_BL 3232 1.12 1.64 0.78 129 TR_XM_MSPIKECOMBO 3208 1.11 1.63 0.77 130 JH_SPAMMY_HEADERS 3093 0.61 1.57 0.00 131 TR_XM_DK_SendGrid 2953 1.83 1.50 2.05 132 TR_XM_COVIDMETA1 2893 0.71 1.47 0.22 133 TR_XM_SPAMCOP 2876 0.68 1.46 0.17 134 ANY_BOUNCE_MESSAGE 2859 5.01 1.45 7.29 135 XM_B_SpammyWords4 2852 0.74 1.45 0.28 136 BOUNCE_MESSAGE 2852 5.01 1.45 7.29 137 XM_Body_Dirty_Words_01 2684 0.63 1.37 0.16 138 TM2_M_A_HREF_HREF 2666 0.83 1.36 0.50 139 RELAYCOUNTRY_AU 2649 0.68 1.35 0.25 140 UPGRADE_MAILBOX 2629 0.74 1.34 0.36 141 PDS_OTHER_BAD_TLD 2610 0.60 1.33 0.14 142 TR_XM_PHPDW 2567 0.79 1.31 0.45 143 TR_XM_NoHeaderRelay 2559 0.60 1.30 0.16 144 XMBdyGiftCard01 2541 0.79 1.29 0.47 145 XM_UB99 2509 0.50 1.28 0.00 146 TR_XM_PHPForged 2411 0.74 1.23 0.42 147 TR_XM_FormFill2 2374 0.73 1.21 0.42 148 XM_H_PHPOS 2366 0.72 1.20 0.42 149 T_Symld_Words_02 2348 0.72 1.19 0.42 150 T_XMHurry_00 2325 0.65 1.18 0.31 151 XMGenDplmaNmb 2314 0.80 1.18 0.55 152 RCVD_IN_VALIDITY_SAFE 2267 1.88 1.15 2.35 153 XM_PDF 2265 3.51 1.15 5.02 154 XM_ProductURIs 2239 0.79 1.14 0.56 155 HTML_IMAGE_ONLY_08 2223 0.50 1.13 0.09 156 HTML_TAG_BALANCE_CENTER 2220 0.47 1.13 0.05 157 XM_H_Long_From02 2165 0.92 1.10 0.80 158 FROM_SUSPICIOUS_NTLD 2164 0.45 1.10 0.04 159 TR_LOTS_OF_MONEY3 2148 0.56 1.09 0.21 160 DKIM_ADSP_CUSTOM_MED 2125 0.79 1.08 0.61 161 XM_UB999 2085 0.41 1.06 0.00 162 BODY_URI_ONLY 2070 0.42 1.05 0.01 163 XM_UB60 2060 0.48 1.05 0.12 164 URI_TRY_3LD 2041 0.67 1.04 0.43 165 FROM_SUSPICIOUS_NTLD_FP 1993 0.42 1.01 0.04 166 GOOG_STO_IMG_HTML 1969 0.39 1.00 0.00 167 RCVD_IN_IADB_LISTED 1945 2.47 0.99 3.41 168 XMBody_17 1944 0.52 0.99 0.22 169 TR_MetaPhish_Combo_01 1939 0.78 0.99 0.65 170 RCVD_IN_VALIDITY_CERTIFIED 1926 1.66 0.98 2.09 171 XM_ShortIntro_01 1918 0.81 0.98 0.71 172 XM_B_COPY_HTML 1908 0.67 0.97 0.47 173 MPART_ALT_DIFF_COUNT 1851 0.55 0.94 0.30 174 XMBrknScrpt_02 1842 0.63 0.94 0.44 175 BAYES_05 1841 1.69 0.94 2.17 176 URIBL_DBL_SPAM 1823 0.37 0.93 0.01 177 MIXED_FONT_CASE 1800 0.36 0.92 0.00 178 XM_UB80 1787 0.36 0.91 0.01 179 RELAYCOUNTRY_GB 1766 0.76 0.90 0.67 180 MIXED_CENTER_CASE 1764 0.35 0.90 0.00 181 MIXED_HREF_CASE 1762 0.35 0.90 0.00 182 MIXED_IMG_CASE 1756 0.35 0.89 0.00 183 TooManyTo_002 1753 1.68 0.89 2.19 184 MIXED_AREA_CASE 1751 0.35 0.89 0.00 185 XMPhish14 1725 0.49 0.88 0.24 186 XMSexyCombo_04 1706 0.41 0.87 0.12 187 TR_XM_FormFill 1697 0.34 0.86 0.00 188 XMBounce_01 1691 2.71 0.86 3.90 189 RELAYCOUNTRY_IT 1691 0.45 0.86 0.19 190 XMCapTrack 1669 0.96 0.85 1.03 191 ALL_TRUSTED 1669 16.17 0.85 25.97 192 RCVD_IN_IADB_SPF 1647 2.17 0.84 3.03 193 RCVD_IN_MSPIKE_L3 1617 0.56 0.82 0.40 194 TR_XM_SpammyWords3 1605 0.53 0.82 0.34 195 T_TooManySym_02 1586 2.43 0.81 3.46 196 PLING_QUERY 1584 0.53 0.81 0.36 197 HTTPS_HTTP_MISMATCH 1559 0.62 0.79 0.51 198 XMHTML_After_End 1545 0.70 0.79 0.65 199 RELAYCOUNTRY_RU 1531 0.32 0.78 0.02 200 XMSubNoVowel 1508 1.40 0.77 1.80 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 249439 87.26 96.83 81.15 2 DCC_CHECK_NEGATIVE 244667 64.22 40.18 79.59 3 RELAYCOUNTRY_US 210152 75.56 86.81 68.37 4 XM_B_Unicode 199218 70.35 79.02 64.81 5 DKIM_SIGNED 176547 70.36 90.57 57.43 6 XM_DK_Pass 172309 68.85 88.86 56.05 7 BAYES_50 171853 53.12 48.75 55.91 8 XM_B_SpammyWords 130581 50.94 64.17 42.48 9 XM_B_Unicode3 129128 44.45 48.27 42.01 10 DKIM_VALID 118706 34.04 26.88 38.62 11 XMListUnsubscribeExists 104341 48.74 71.87 33.94 12 DKIM_VALID_AU 89252 25.28 19.40 29.03 13 T_TM2_M_HEADER_IN_MSG 86642 25.39 21.03 28.19 14 XMSubLong 83753 25.96 23.96 27.25 15 MIME_HTML_ONLY 82424 28.65 31.53 26.81 16 ALL_TRUSTED 79824 16.17 0.85 25.97 17 HTML_FONT_LOW_CONTRAST 64510 25.79 33.30 20.99 18 DCC_CHECK 62632 35.75 59.79 20.38 19 FVGT_m_MULTI_ODD 59781 24.48 32.35 19.45 20 DKIM_INVALID 57841 36.32 63.68 18.82 21 XM_B_Unsub 55417 16.56 14.27 18.03 22 LOC_TINY_FONT_1 54466 24.46 35.01 17.72 23 RCVD_IN_MSPIKE_WL 51327 12.96 7.12 16.70 24 TooManyTo_001 49343 12.06 5.83 16.05 25 BAYES_00 47849 10.44 2.42 15.57 26 BOTNET 46576 34.76 65.42 15.15 27 DKIM_VALID_EF 45445 13.14 10.56 14.78 28 XM_DK_Undo_02 42912 36.64 72.10 13.96 29 XM_B_SpammyWords2 41446 21.10 33.00 13.48 30 T_KAM_HTML_FONT_INVALID 40846 18.27 26.05 13.29 31 RCVD_IN_MSPIKE_H2 34931 10.07 8.05 11.36 32 XM_Multi_Part_URI 30927 12.52 16.36 10.06 33 XM_Body_Dirty_Words 29588 14.72 22.68 9.63 34 XMDiploma_00 28506 6.45 2.05 9.27 35 RCVD_IN_MSPIKE_H3 27684 7.28 4.58 9.01 36 XM_DKIMWhitelistDomains 26153 5.39 0.53 8.51 37 BAYES_60 24035 7.86 7.93 7.82 38 IN_ZIMBRA_NJ_WHITELIST 23331 4.71 0.21 7.59 39 USER_IN_DEF_DKIM_WL 23163 4.88 0.73 7.54 40 LOTS_OF_MONEY 22576 9.94 14.01 7.34 41 ANY_BOUNCE_MESSAGE 22395 5.01 1.45 7.29 42 BOUNCE_MESSAGE 22394 5.01 1.45 7.29 43 LotsOfNums_01 20963 8.37 10.79 6.82 44 TR_XM_DKIM_Undo 20447 23.23 49.16 6.65 45 MPART_ALT_DIFF 19625 8.22 11.10 6.38 46 RCVD_IN_MSPIKE_H4 19464 4.77 2.32 6.33 47 XM_H_Trusted_IP 19368 3.84 0.00 6.30 48 TR_XM_DK_Bayes 19285 4.65 2.10 6.27 49 UNPARSEABLE_RELAY 19175 8.50 12.05 6.24 50 T_TooManySym_01 18170 4.63 2.62 5.91 51 XM_Evil_Numbers_Gen 17726 7.50 10.22 5.77 52 HELO_NODOT 17342 3.59 0.39 5.64 53 HELO_NO_DOMAIN 17339 3.59 0.39 5.64 54 HTML_IMAGE_RATIO_04 17271 5.44 5.15 5.62 55 BAYES_99 16439 13.00 24.96 5.35 56 XM_PDF 15420 3.51 1.15 5.02 57 MIME_HTML_ONLY_MULTI 14903 5.76 7.20 4.85 58 UNTRUSTED_Relay 14842 6.14 8.18 4.83 59 XM_SendGrid 14679 6.06 8.06 4.78 60 TR_XM_UnparsRelay 14444 7.34 11.47 4.70 61 BAYES_40 13823 3.58 2.16 4.50 62 BAYES_999 13805 10.62 20.19 4.49 63 XM_H_Long_From01 13500 4.88 5.65 4.39 64 TR_XM_SpammyWords4 12964 6.89 11.07 4.22 65 MIME_QP_LONG_LINE 12733 4.77 5.74 4.14 66 HTML_IMAGE_RATIO_02 12546 5.76 8.39 4.08 67 HTML_IMAGE_RATIO_06 12169 3.89 3.77 3.96 68 XMBounce_01 11978 2.71 0.86 3.90 69 FSL_HELO_NON_FQDN_1 11631 2.40 0.22 3.78 70 XMBounce_02 11501 2.34 0.14 3.74 71 TR_XM_DK_Bayes1 11198 2.27 0.12 3.64 72 BOTNET_IPINHOSTNAME 11156 6.15 10.10 3.63 73 BAYES_20 10798 2.82 1.73 3.51 74 T_TooManySym_02 10635 2.43 0.81 3.46 75 XMNumbers 10626 3.15 2.67 3.46 76 RCVD_IN_IADB_LISTED 10496 2.47 0.99 3.41 77 KHOP_HELO_FCRDNS 10487 3.64 4.00 3.41 78 XM_UncommonTLD01 10455 5.93 9.89 3.40 79 XMStrtUSub 10427 3.24 3.00 3.39 80 TM2_M_URI_OPT_OUT 10384 3.21 2.93 3.38 81 TR_XM_DK_Bayes2 9824 1.99 0.10 3.20 82 BAYES_80 9762 4.72 7.14 3.18 83 RELAYCOUNTRY_META 9700 8.27 16.26 3.16 84 XM_B_Phish_Phrases 9589 3.82 4.93 3.12 85 T_REMOTE_IMAGE 9570 3.18 3.29 3.11 86 RCVD_IN_IADB_SPF 9299 2.17 0.84 3.03 87 XM_B_SpammyWords3 8914 5.66 9.99 2.90 88 XMSubMetaSx_00 8425 4.12 6.26 2.74 89 RCVD_IN_IADB_SENDERID 8409 1.96 0.75 2.74 90 TR_XM_PhishingBody 8175 3.99 6.07 2.66 91 XMSexyCombo_05 8159 5.49 9.92 2.65 92 RCVD_IN_IADB_DK 8111 1.91 0.76 2.64 93 HTML_MIME_NO_HTML_TAG 8055 4.16 6.56 2.62 94 FSL_BULK_SIG 7853 4.70 8.05 2.55 95 RCVD_IN_VALIDITY_SAFE 7231 1.88 1.15 2.35 96 XM_SPF_SoftFail 6878 2.46 2.80 2.24 97 MAILING_LIST_MULTI 6872 2.39 2.64 2.24 98 XM_B_SpammyTLD 6843 2.66 3.34 2.23 99 URI_NOVOWEL 6788 3.23 4.82 2.21 100 INVALID_MSGID 6746 1.43 0.23 2.19 101 TooManyTo_002 6737 1.68 0.89 2.19 102 MIME_HTML_MOSTLY 6691 3.35 5.18 2.18 103 BAYES_05 6678 1.69 0.94 2.17 104 DKIM_ADSP_NXDOMAIN 6489 1.33 0.11 2.11 105 RCVD_IN_IADB_VOUCHED 6435 1.52 0.62 2.09 106 RCVD_IN_VALIDITY_CERTIFIED 6430 1.66 0.98 2.09 107 TVD_RCVD_IP 6390 1.34 0.19 2.08 108 TR_XM_DK_SendGrid 6288 1.83 1.50 2.05 109 MSGID_NOFQDN1 6273 1.29 0.11 2.04 110 NO_DNS_FOR_FROM 6224 1.28 0.12 2.02 111 IN_HORDE_ADDRESS_BOOK 6183 1.33 0.26 2.01 112 BAYES_95 6154 2.77 3.98 2.00 113 HTML_IMAGE_RATIO_08 6126 2.26 2.69 1.99 114 TO_MALFORMED 6042 1.20 0.01 1.97 115 HTML_FONT_FACE_BAD 5960 1.45 0.68 1.94 116 T_XMDrugObfuBody_14 5570 2.28 3.02 1.81 117 XMSubNoVowel 5544 1.40 0.77 1.80 118 SUBJ_ALL_CAPS 5436 1.77 1.77 1.77 119 TR_Symld_Words 5328 1.70 1.64 1.73 120 TR_XM_SB_Phish 5306 2.06 2.58 1.73 121 XMSubPhish11 5262 2.02 2.51 1.71 122 XM_B_Phish66 5081 2.14 2.91 1.65 123 TM2_M_VERY_LONG_WORD 5080 3.68 6.84 1.65 124 XM_GoogleGroups 4931 3.11 5.48 1.60 125 XMGappySubj_01 4801 1.04 0.22 1.56 126 FROM_EXCESS_BASE64 4774 2.14 3.06 1.55 127 SHORTENED_URL_HREF 4384 0.90 0.07 1.43 128 TooManyTo_003 4374 1.15 0.72 1.42 129 XM_CamelCaseFrm001 4353 1.91 2.69 1.42 130 XM_DK_Undo_01 4220 1.75 2.33 1.37 131 RCVD_IN_MSPIKE_H5 4179 0.92 0.22 1.36 132 XM_B_Unsub2 4163 1.70 2.25 1.35 133 RCVD_IN_IADB_OPTIN 4148 0.98 0.40 1.35 134 TR_DCC_Bayes_99 4119 6.79 15.32 1.34 135 XMBSHREFv2 3774 0.86 0.29 1.23 136 TR_XM_COVIDMETA4 3710 3.39 6.80 1.21 137 TR_XM_INV_DKIM 3688 5.06 11.11 1.20 138 XM_B_Investor 3680 1.84 2.84 1.20 139 TVD_SPACE_RATIO 3661 0.76 0.10 1.19 140 TR_XM_SpammyRelay 3646 4.06 8.56 1.19 141 XMBody_95 3561 0.83 0.32 1.16 142 T_XMDrugObfuBody_08 3491 1.74 2.69 1.14 143 XMStockSpam_06 3370 1.37 1.81 1.10 144 TR_XM_MaxUnsub 3270 2.70 5.25 1.06 145 URI_HEX 3264 1.84 3.06 1.06 146 XMCapTrack 3172 0.96 0.85 1.03 147 TR_XM_SpammyWords5 3166 1.78 2.95 1.03 148 HTML_IMAGE_ONLY_20 3140 0.78 0.40 1.02 149 TooManyTo_004 3020 0.83 0.60 0.98 150 XM_D_tchamptons_WL 2955 0.66 0.18 0.96 151 XMLngstWrd_00 2951 2.41 4.68 0.96 152 XMLngstWrd_01 2795 2.37 4.65 0.91 153 XM_OfRef6 2730 1.60 2.72 0.89 154 T_XMDrugObfuBody_00 2699 1.42 2.28 0.88 155 XMLngstWrd_02 2556 2.28 4.54 0.83 156 T_TooManySym_03 2519 0.59 0.22 0.82 157 XM_H_Long_From02 2463 0.92 1.10 0.80 158 RCVD_IN_MSPIKE_BL 2413 1.12 1.64 0.78 159 TooManyTo_005 2398 0.68 0.52 0.78 160 TR_XM_MSPIKECOMBO 2378 1.11 1.63 0.77 161 T_FILL_THIS_FORM_SHORT 2334 1.11 1.66 0.76 162 XMLngstWrd_03 2282 2.19 4.45 0.74 163 HTML_TITLE_SUBJ_DIFF 2248 2.14 4.34 0.73 164 FROM_GOV_SPOOF 2204 0.69 0.65 0.72 165 XM_ShortIntro_01 2175 0.81 0.98 0.71 166 XMSolicitRefs_0 2102 0.69 0.70 0.68 167 XMLngstWrd_04 2085 2.10 4.32 0.68 168 T_OBFU_PDF_ATTACH 2079 0.50 0.23 0.68 169 RELAYCOUNTRY_GB 2073 0.76 0.90 0.67 170 TR_MetaPhish_Combo_01 2013 0.78 0.99 0.65 171 XMHTML_After_End 1999 0.70 0.79 0.65 172 RELAYCOUNTRY_CA 1999 1.78 3.55 0.65 173 XM_UB50 1986 1.89 3.85 0.65 174 TR_XM_SpammyWords2 1948 3.52 8.04 0.63 175 TVD_SPACE_RATIO_MINFP 1894 0.39 0.04 0.62 176 SpammyFromTLD_02 1876 2.13 4.50 0.61 177 DKIM_ADSP_CUSTOM_MED 1871 0.79 1.08 0.61 178 UPPERCASE_75_100 1803 2.01 4.25 0.59 179 XMPhish30 1776 1.01 1.68 0.58 180 XM_H_MailChimp 1763 2.32 5.06 0.57 181 SpammyFromTLD_01 1735 1.80 3.73 0.56 182 XM_ProductURIs 1731 0.79 1.14 0.56 183 XM_H_PHPMailer 1724 0.61 0.68 0.56 184 SHORT_HELO_AND_INLINE_IMAGE 1721 0.36 0.06 0.56 185 XMGenDplmaNmb 1699 0.80 1.18 0.55 186 DIET_1 1635 0.61 0.74 0.53 187 HTTPS_HTTP_MISMATCH 1578 0.62 0.79 0.51 188 TM2_M_A_HREF_HREF 1542 0.83 1.36 0.50 189 TM2_M_BODY_EMPTY 1490 0.35 0.14 0.48 190 HTML_TAG_BALANCE_BODY 1484 0.55 0.67 0.48 191 XM_H_ConstantContact 1478 1.41 2.86 0.48 192 XM_shorewaves_Whitelist 1474 0.29 0.00 0.48 193 USER_IN_WELCOMELIST 1467 0.29 0.00 0.48 194 USER_IN_WHITELIST 1467 0.29 0.00 0.48 195 XM_B_COPY_HTML 1458 0.67 0.97 0.47 196 XMBdyGiftCard01 1447 0.79 1.29 0.47 197 XMNoVowels 1442 0.50 0.55 0.47 198 XMSexyCombo_01 1417 1.37 2.78 0.46 199 RCVD_IN_BL_SPAMCOP_NET 1406 1.36 2.78 0.46 200 XM_B_COVIDMETA 1395 0.94 1.71 0.45 ----------------------------------------------------------------------