Email: 494246 Autolearn: 0 AvgScore: 3.76 AvgScanTime: 1.43 sec Spam: 159168 Autolearn: 0 AvgScore: 13.77 AvgScanTime: 1.58 sec Ham: 335078 Autolearn: 0 AvgScore: -0.99 AvgScanTime: 1.36 sec Time Spent Running SA: 196.65 hours Time Spent Processing Spam: 69.78 hours Time Spent Processing Ham: 126.87 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 152601 88.93 95.87 85.63 2 DKIM_SIGNED 139407 77.13 87.58 72.17 3 XM_DK_Pass 135825 74.86 85.33 69.88 4 DKIM_VALID 134796 73.97 84.69 68.87 5 RELAYCOUNTRY_US 132111 81.23 83.00 80.39 6 XM_B_Unicode 129060 72.99 81.08 69.14 7 DCC_CHECK 115349 44.97 72.47 31.91 8 XMListUnsubscribeExists 108169 55.07 67.96 48.94 9 XM_B_SpammyWords 106663 50.54 67.01 42.72 10 DKIM_VALID_AU 102936 57.29 64.67 53.78 11 XM_B_Unicode3 70838 42.84 44.51 42.05 12 BAYES_50 69326 51.12 43.56 54.72 13 RCVD_IN_MSPIKE_H2 68519 38.15 43.05 35.83 14 XM_DK_Undo_02 63345 17.31 39.80 6.62 15 LOC_TINY_FONT_1 60344 26.45 37.91 21.00 16 XM_B_SpammyWords2 58295 23.10 36.62 16.67 17 FVGT_m_MULTI_ODD 55842 27.58 35.08 24.02 18 BAYES_99 51918 14.32 32.62 5.63 19 HTML_FONT_LOW_CONTRAST 50869 27.64 31.96 25.59 20 TR_XM_DKIM_Undo 50183 13.10 31.53 4.35 21 MIME_HTML_ONLY 50057 22.94 31.45 18.90 22 DKIM_VALID_EF 48723 28.27 30.61 27.16 23 T_KAM_HTML_FONT_INVALID 47987 22.52 30.15 18.90 24 DCC_CHECK_NEGATIVE 43770 54.99 27.50 68.05 25 BAYES_999 41290 11.42 25.94 4.53 26 XMSubLong 38242 23.29 24.03 22.94 27 XM_Body_Dirty_Words 35711 14.48 22.44 10.69 28 TR_DCC_Bayes_99 35249 8.16 22.15 1.52 29 T_TM2_M_HEADER_IN_MSG 34766 27.61 21.84 30.34 30 RELAYCOUNTRY_META 30191 8.84 18.97 4.03 31 XM_Multi_Part_URI 26689 12.99 16.77 11.19 32 XM_B_Unsub 25865 10.57 16.25 7.87 33 TR_XM_BayesUnsub 25282 9.02 15.88 5.76 34 LOTS_OF_MONEY 22500 10.09 14.14 8.16 35 UNPARSEABLE_RELAY 21752 9.48 13.67 7.49 36 BOTNET_IPINHOSTNAME 21621 7.62 13.58 4.78 37 TR_XM_UnparsRelay 21308 8.31 13.39 5.89 38 TR_XM_SpammyWords4 19729 7.41 12.40 5.05 39 XM_B_SpammyWords3 18752 6.13 11.78 3.45 40 FSL_BULK_SIG 18751 5.48 11.78 2.49 41 TR_XM_SpammyWords2 16274 3.94 10.22 0.96 42 TR_XM_SpammyRelay 15973 4.34 10.04 1.63 43 BOTNET 15920 4.16 10.00 1.39 44 XMSexyCombo_05 15268 5.04 9.59 2.88 45 RCVD_IN_MSPIKE_WL 14447 10.46 9.08 11.12 46 MPART_ALT_DIFF 13908 5.88 8.74 4.53 47 XM_Evil_Numbers_Gen 13747 7.87 8.64 7.50 48 RCVD_IN_BL_SPAMCOP_NET 13560 3.20 8.52 0.67 49 UNTRUSTED_Relay 13420 3.48 8.43 1.14 50 RCVD_IN_MSPIKE_H3 13223 8.57 8.31 8.70 51 LotsOfNums_01 12874 8.75 8.09 9.06 52 BAYES_80 12581 5.52 7.90 4.38 53 XM_UncommonTLD01 12439 5.03 7.82 3.70 54 XM_SendGrid 12096 5.94 7.60 5.16 55 BAYES_60 11408 8.69 7.17 9.41 56 HTML_IMAGE_RATIO_02 11315 6.07 7.11 5.58 57 XM_H_Long_From01 10586 5.50 6.65 4.95 58 TR_XM_PhishingBody 10392 4.38 6.53 3.37 59 RELAYCOUNTRY_CA 10196 3.01 6.41 1.40 60 XMSubMetaSx_00 10005 4.64 6.29 3.85 61 HTML_MIME_NO_HTML_TAG 9804 3.12 6.16 1.68 62 XM_B_Phish_Phrases 9593 3.94 6.03 2.95 63 TM2_M_VERY_LONG_WORD 9551 2.73 6.00 1.17 64 MIME_HTML_ONLY_MULTI 9038 3.88 5.68 3.02 65 XM_B_Investor 8672 2.64 5.45 1.30 66 TR_XM_SPAMCOP 8078 1.86 5.08 0.33 67 XM_B_SpammyTLD 8060 3.09 5.06 2.15 68 TR_XM_DK_SendGrid 7950 3.82 4.99 3.27 69 TooManyTo_001 7709 7.12 4.84 8.21 70 BAYES_95 7603 3.31 4.78 2.62 71 HTML_IMAGE_RATIO_04 7521 5.08 4.73 5.24 72 T_XMDrugObfuBody_14 7112 2.76 4.47 1.95 73 MIME_QP_LONG_LINE 7107 5.14 4.47 5.45 74 T_REMOTE_IMAGE 7064 4.06 4.44 3.89 75 XM_SPF_SoftFail 6831 3.77 4.29 3.53 76 URIBL_DBL_SPAM 6591 1.34 4.14 0.01 77 T_XMDrugObfuBody_08 6312 2.29 3.97 1.49 78 XM_B_Phish66 6291 2.49 3.95 1.80 79 XM_UB50 6176 1.74 3.88 0.73 80 MIME_HTML_MOSTLY 6016 2.68 3.78 2.16 81 XMLngstWrd_00 5971 1.45 3.75 0.36 82 TR_XM_SpammyWords5 5886 2.19 3.70 1.47 83 XMLngstWrd_01 5764 1.37 3.62 0.30 84 XMNumbers 5731 4.26 3.60 4.58 85 XM_GoogleGroups 5726 2.02 3.60 1.27 86 XMStrtUSub 5717 4.24 3.59 4.55 87 XMLngstWrd_02 5678 1.31 3.57 0.24 88 RCVD_IN_VALIDITY_SAFE 5537 4.58 3.48 5.10 89 HTML_IMAGE_RATIO_06 5495 4.05 3.45 4.33 90 XMLngstWrd_03 5235 1.18 3.29 0.18 91 HTML_TITLE_SUBJ_DIFF 5183 1.08 3.26 0.05 92 SpammyFromTLD_01 5180 1.63 3.25 0.86 93 XMLngstWrd_04 5066 1.11 3.18 0.13 94 XM_DIRTYINTL 5043 1.23 3.17 0.31 95 TM2_M_URI_OPT_OUT 4997 2.69 3.14 2.48 96 UPPERCASE_75_100 4936 1.02 3.10 0.03 97 XM_CamelCaseFrm001 4833 2.21 3.04 1.82 98 XMDiploma_00 4821 1.92 3.03 1.40 99 KHOP_HELO_FCRDNS 4818 2.36 3.03 2.04 100 RCVD_IN_VALIDITY_CERTIFIED 4656 4.06 2.93 4.60 101 DKIM_INVALID 4611 3.17 2.90 3.29 102 PDS_OTHER_BAD_TLD 4434 1.02 2.79 0.19 103 T_TooManySym_01 4349 5.48 2.73 6.78 104 XM_OfRef6 4325 1.53 2.72 0.97 105 XM_B_Unsub2 4310 1.81 2.71 1.39 106 XM_DK_Undo_01 4293 1.85 2.70 1.44 107 HTML_IMAGE_RATIO_08 4249 2.40 2.67 2.27 108 RCVD_IN_IADB_LISTED 4200 4.65 2.64 5.60 109 RCVD_IN_VALIDITY_RPBL 3999 0.83 2.51 0.03 110 URI_PHP_REDIR 3877 0.79 2.44 0.00 111 RCVD_IN_IADB_SPF 3853 4.11 2.42 4.92 112 T_FILL_THIS_FORM_SHORT 3737 1.31 2.35 0.81 113 RCVD_IN_IADB_DK 3669 3.63 2.31 4.25 114 RCVD_IN_IADB_SENDERID 3608 3.71 2.27 4.39 115 USER_IN_DEF_DKIM_WL 3597 8.71 2.26 11.78 116 XMBody_17 3473 0.96 2.18 0.39 117 XMSexyCombo_01 3420 1.11 2.15 0.62 118 ALL_TRUSTED 3304 12.02 2.08 16.74 119 XM_B_COVIDMETA 3279 0.94 2.06 0.41 120 XM_B_SpammyWords4 3229 1.00 2.03 0.51 121 T_XMDrugObfuBody_00 3221 1.17 2.02 0.76 122 URI_NOVOWEL 3185 2.71 2.00 3.05 123 BOTNET_NORDNS 3183 0.65 2.00 0.01 124 TR_XM_SB_Phish 3174 2.12 1.99 2.18 125 XMHTML_After_End 3074 1.09 1.93 0.69 126 SUBJ_ALL_CAPS 3073 1.86 1.93 1.83 127 XMSubPhish11 3003 2.07 1.89 2.16 128 SpammyFromTLD_02 2973 0.87 1.87 0.40 129 XMBrknScrpt_02 2838 1.23 1.78 0.97 130 FROM_EXCESS_BASE64 2830 2.40 1.78 2.70 131 XM_URI_RBL 2818 0.65 1.77 0.11 132 TR_XM_PHPDW 2742 0.77 1.72 0.31 133 RELAYCOUNTRY_AU 2727 0.79 1.71 0.36 134 XM_UB99 2642 0.54 1.66 0.00 135 HTTPS_HTTP_MISMATCH 2639 1.00 1.66 0.69 136 TR_XM_PHPForged 2608 0.70 1.64 0.26 137 TR_LOTS_OF_MONEY3 2606 0.63 1.64 0.16 138 URI_HEX 2561 1.17 1.61 0.96 139 TR_XM_FormFill2 2553 0.70 1.60 0.27 140 XM_H_PHPOS 2534 0.68 1.59 0.25 141 XM_H_Undi_Recip 2512 0.66 1.58 0.23 142 MAILING_LIST_MULTI 2492 2.30 1.57 2.65 143 XMGenDplmaNmb 2466 0.97 1.55 0.70 144 TR_XM_COVIDMETA1 2433 0.88 1.53 0.57 145 BAYES_40 2423 3.89 1.52 5.02 146 HTML_IMAGE_ONLY_08 2421 0.57 1.52 0.12 147 TR_Symld_Words 2408 1.76 1.51 1.88 148 HTML_TAG_BALANCE_BODY 2343 0.96 1.47 0.72 149 XMStockSpam_06 2333 0.95 1.47 0.71 150 XMBdyGiftCard01 2288 0.86 1.44 0.59 151 RCVD_IN_PSBL 2279 0.52 1.43 0.09 152 HTML_TAG_BALANCE_CENTER 2192 0.50 1.38 0.09 153 XM_B_SEO 2102 1.10 1.32 0.99 154 T_XMHurry_00 2066 0.73 1.30 0.46 155 RELAYCOUNTRY_DE 2063 0.63 1.30 0.31 156 URIBL_BLACK 1957 0.43 1.23 0.05 157 XM_UB999 1947 0.40 1.22 0.00 158 URI_TRY_3LD 1928 0.77 1.21 0.56 159 XM_H_Long_From02 1888 1.35 1.19 1.43 160 RCVD_IN_MSPIKE_BL 1878 0.39 1.18 0.01 161 TR_XM_SEO4 1877 0.43 1.18 0.08 162 XM_B_DynamicLink 1862 0.41 1.17 0.05 163 REMOVE_BEFORE_LINK 1859 0.51 1.17 0.20 164 TR_XM_NoHeaderRelay 1859 0.45 1.17 0.11 165 MIXED_CENTER_CASE 1835 0.37 1.15 0.00 166 BAYES_20 1829 2.98 1.15 3.85 167 MIXED_HREF_CASE 1826 0.37 1.15 0.00 168 MIXED_IMG_CASE 1818 0.37 1.14 0.00 169 MIXED_AREA_CASE 1813 0.37 1.14 0.00 170 HTML_IMAGE_ONLY_20 1794 0.79 1.13 0.63 171 MIXED_FONT_CASE 1771 0.36 1.11 0.00 172 T_Symld_Words_02 1742 0.72 1.09 0.54 173 XM_PDF 1732 3.36 1.09 4.44 174 RELAYCOUNTRY_RU 1725 0.36 1.08 0.02 175 XMMoneyMeta_00 1700 0.74 1.07 0.58 176 DIET_1 1668 0.52 1.05 0.28 177 XM_ProductURIs 1662 0.67 1.04 0.50 178 RCVD_IN_IADB_VOUCHED 1656 2.84 1.04 3.70 179 XMSubMetaI_00 1650 0.70 1.04 0.55 180 XMPhish30 1643 0.97 1.03 0.94 181 TR_XM_MSPIKECOMBO 1622 0.33 1.02 0.01 182 XM_UB60 1608 0.36 1.01 0.05 183 XMSubNoVowel 1601 0.95 1.01 0.93 184 RDNS_DYNAMIC 1584 0.76 1.00 0.65 185 HK_RANDOM_REPLYTO 1575 0.41 0.99 0.14 186 XMReplyNow 1574 0.48 0.99 0.24 187 PLING_QUERY 1555 0.70 0.98 0.57 188 TR_LOTS_OF_MONEY2 1554 0.41 0.98 0.15 189 T_MONEY_PERCENT 1554 0.41 0.98 0.15 190 BODY_URI_ONLY 1523 0.32 0.96 0.01 191 MPART_ALT_DIFF_COUNT 1518 0.71 0.95 0.59 192 TR_MetaPhish_Combo_01 1506 0.91 0.95 0.90 193 TR_Mismatch_TLD_01 1496 0.51 0.94 0.30 194 XM_Body_Dirty_Words_01 1488 0.37 0.93 0.10 195 RELAYCOUNTRY_GB 1483 0.86 0.93 0.83 196 HTML_FONT_SIZE_LARGE 1470 0.36 0.92 0.10 197 TM2_M_A_HREF_HREF 1451 0.49 0.91 0.30 198 T_TooManySym_02 1445 3.25 0.91 4.36 199 XMSlimDrugH 1435 0.52 0.90 0.35 200 XMHTMLBadTable_001 1389 0.60 0.87 0.47 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 286923 88.93 95.87 85.63 2 RELAYCOUNTRY_US 269364 81.23 83.00 80.39 3 DKIM_SIGNED 241811 77.13 87.58 72.17 4 XM_DK_Pass 234163 74.86 85.33 69.88 5 XM_B_Unicode 231666 72.99 81.08 69.14 6 DKIM_VALID 230777 73.97 84.69 68.87 7 DCC_CHECK_NEGATIVE 228013 54.99 27.50 68.05 8 BAYES_50 183344 51.12 43.56 54.72 9 DKIM_VALID_AU 180206 57.29 64.67 53.78 10 XMListUnsubscribeExists 163991 55.07 67.96 48.94 11 XM_B_SpammyWords 143132 50.54 67.01 42.72 12 XM_B_Unicode3 140900 42.84 44.51 42.05 13 RCVD_IN_MSPIKE_H2 120047 38.15 43.05 35.83 14 DCC_CHECK 106920 44.97 72.47 31.91 15 T_TM2_M_HEADER_IN_MSG 101672 27.61 21.84 30.34 16 DKIM_VALID_EF 91006 28.27 30.61 27.16 17 HTML_FONT_LOW_CONTRAST 85741 27.64 31.96 25.59 18 FVGT_m_MULTI_ODD 80489 27.58 35.08 24.02 19 XMSubLong 76852 23.29 24.03 22.94 20 LOC_TINY_FONT_1 70372 26.45 37.91 21.00 21 MIME_HTML_ONLY 63343 22.94 31.45 18.90 22 T_KAM_HTML_FONT_INVALID 63320 22.52 30.15 18.90 23 ALL_TRUSTED 56086 12.02 2.08 16.74 24 XM_B_SpammyWords2 55853 23.10 36.62 16.67 25 BAYES_00 39582 8.23 0.69 11.81 26 USER_IN_DEF_DKIM_WL 39456 8.71 2.26 11.78 27 XM_Multi_Part_URI 37509 12.99 16.77 11.19 28 RCVD_IN_MSPIKE_WL 37267 10.46 9.08 11.12 29 XM_Body_Dirty_Words 35835 14.48 22.44 10.69 30 BAYES_60 31525 8.69 7.17 9.41 31 LotsOfNums_01 30368 8.75 8.09 9.06 32 RCVD_IN_MSPIKE_H3 29152 8.57 8.31 8.70 33 TooManyTo_001 27499 7.12 4.84 8.21 34 IN_ZIMBRA_NJ_WHITELIST 27458 5.59 0.10 8.19 35 XM_DKIMWhitelistDomains 27359 5.55 0.04 8.16 36 LOTS_OF_MONEY 27348 10.09 14.14 8.16 37 XM_B_Unsub 26378 10.57 16.25 7.87 38 XM_Evil_Numbers_Gen 25144 7.87 8.64 7.50 39 UNPARSEABLE_RELAY 25089 9.48 13.67 7.49 40 T_TooManySym_01 22714 5.48 2.73 6.78 41 XM_DK_Undo_02 22192 17.31 39.80 6.62 42 TR_XM_DK_Bayes 21111 4.44 0.51 6.30 43 TR_XM_DK_Bayes1 20581 4.33 0.50 6.14 44 TR_XM_UnparsRelay 19742 8.31 13.39 5.89 45 TR_XM_BayesUnsub 19294 9.02 15.88 5.76 46 BAYES_99 18862 14.32 32.62 5.63 47 RCVD_IN_IADB_LISTED 18768 4.65 2.64 5.60 48 HTML_IMAGE_RATIO_02 18708 6.07 7.11 5.58 49 MIME_QP_LONG_LINE 18277 5.14 4.47 5.45 50 TR_XM_DK_Bayes2 18164 3.82 0.46 5.42 51 HTML_IMAGE_RATIO_04 17568 5.08 4.73 5.24 52 XM_SendGrid 17285 5.94 7.60 5.16 53 RCVD_IN_VALIDITY_SAFE 17087 4.58 3.48 5.10 54 TR_XM_SpammyWords4 16905 7.41 12.40 5.05 55 BAYES_40 16810 3.89 1.52 5.02 56 XM_H_Long_From01 16587 5.50 6.65 4.95 57 RCVD_IN_IADB_SPF 16479 4.11 2.42 4.92 58 BOTNET_IPINHOSTNAME 16017 7.62 13.58 4.78 59 RCVD_IN_VALIDITY_CERTIFIED 15402 4.06 2.93 4.60 60 XMNumbers 15334 4.26 3.60 4.58 61 XMStrtUSub 15241 4.24 3.59 4.55 62 MPART_ALT_DIFF 15178 5.88 8.74 4.53 63 BAYES_999 15168 11.42 25.94 4.53 64 XM_PDF 14886 3.36 1.09 4.44 65 RCVD_IN_IADB_SENDERID 14706 3.71 2.27 4.39 66 BAYES_80 14681 5.52 7.90 4.38 67 T_TooManySym_02 14616 3.25 0.91 4.36 68 TR_XM_DKIM_Undo 14586 13.10 31.53 4.35 69 HTML_IMAGE_RATIO_06 14516 4.05 3.45 4.33 70 RCVD_IN_IADB_DK 14257 3.63 2.31 4.25 71 RELAYCOUNTRY_META 13509 8.84 18.97 4.03 72 T_REMOTE_IMAGE 13026 4.06 4.44 3.89 73 XMSubMetaSx_00 12914 4.64 6.29 3.85 74 BAYES_20 12901 2.98 1.15 3.85 75 XM_UncommonTLD01 12408 5.03 7.82 3.70 76 RCVD_IN_IADB_VOUCHED 12392 2.84 1.04 3.70 77 XM_SPF_SoftFail 11816 3.77 4.29 3.53 78 XM_B_SpammyWords3 11550 6.13 11.78 3.45 79 TR_XM_PhishingBody 11277 4.38 6.53 3.37 80 DKIM_INVALID 11034 3.17 2.90 3.29 81 TR_XM_DK_SendGrid 10946 3.82 4.99 3.27 82 XM_H_Trusted_IP 10615 2.15 0.00 3.17 83 URI_NOVOWEL 10223 2.71 2.00 3.05 84 MIME_HTML_ONLY_MULTI 10118 3.88 5.68 3.02 85 XM_B_Phish_Phrases 9879 3.94 6.03 2.95 86 XMSexyCombo_05 9665 5.04 9.59 2.88 87 FROM_EXCESS_BASE64 9049 2.40 1.78 2.70 88 MAILING_LIST_MULTI 8879 2.30 1.57 2.65 89 HTML_FONT_FACE_BAD 8798 2.02 0.74 2.63 90 BAYES_95 8778 3.31 4.78 2.62 91 BAYES_05 8589 1.94 0.62 2.56 92 FSL_BULK_SIG 8345 5.48 11.78 2.49 93 TM2_M_URI_OPT_OUT 8320 2.69 3.14 2.48 94 RCVD_IN_IADB_OPTIN 8260 1.86 0.58 2.47 95 ANY_BOUNCE_MESSAGE 8081 1.89 0.80 2.41 96 BOUNCE_MESSAGE 8079 1.89 0.79 2.41 97 RCVD_IN_MSPIKE_H4 7878 1.83 0.73 2.35 98 HTML_IMAGE_RATIO_08 7610 2.40 2.67 2.27 99 TooManyTo_002 7464 1.69 0.56 2.23 100 TR_XM_SB_Phish 7308 2.12 1.99 2.18 101 XMSubPhish11 7227 2.07 1.89 2.16 102 MIME_HTML_MOSTLY 7221 2.68 3.78 2.16 103 XM_B_SpammyTLD 7201 3.09 5.06 2.15 104 INVALID_MSGID 7103 1.48 0.15 2.12 105 KHOP_HELO_FCRDNS 6832 2.36 3.03 2.04 106 T_XMDrugObfuBody_14 6538 2.76 4.47 1.95 107 TR_Symld_Words 6296 1.76 1.51 1.88 108 IN_HORDE_ADDRESS_BOOK 6236 1.30 0.13 1.86 109 SUBJ_ALL_CAPS 6128 1.86 1.93 1.83 110 HELO_NODOT 6116 1.39 0.46 1.83 111 HELO_NO_DOMAIN 6113 1.38 0.46 1.82 112 XM_CamelCaseFrm001 6109 2.21 3.04 1.82 113 XM_B_Phish66 6032 2.49 3.95 1.80 114 TO_MALFORMED 5805 1.19 0.05 1.73 115 HTML_MIME_NO_HTML_TAG 5628 3.12 6.16 1.68 116 T_TooManySym_03 5490 1.20 0.28 1.64 117 TR_XM_SpammyRelay 5471 4.34 10.04 1.63 118 TVD_RCVD_IP 5443 1.17 0.21 1.62 119 TR_DCC_Bayes_99 5078 8.16 22.15 1.52 120 T_XMDrugObfuBody_08 5003 2.29 3.97 1.49 121 TR_XM_SpammyWords5 4916 2.19 3.70 1.47 122 TooManyTo_003 4909 1.14 0.44 1.47 123 XM_DK_Undo_01 4841 1.85 2.70 1.44 124 XM_H_Long_From02 4796 1.35 1.19 1.43 125 XMDiploma_00 4687 1.92 3.03 1.40 126 RELAYCOUNTRY_CA 4685 3.01 6.41 1.40 127 XM_B_Unsub2 4659 1.81 2.71 1.39 128 BOTNET 4645 4.16 10.00 1.39 129 XMGappySubj_01 4534 0.99 0.24 1.35 130 XM_B_Investor 4365 2.64 5.45 1.30 131 XM_GoogleGroups 4243 2.02 3.60 1.27 132 TM2_M_VERY_LONG_WORD 3929 2.73 6.00 1.17 133 UNTRUSTED_Relay 3804 3.48 8.43 1.14 134 XMCapTrack 3800 0.89 0.36 1.13 135 XMBSHREFv2 3745 0.84 0.25 1.12 136 TooManyTo_004 3502 0.82 0.34 1.05 137 TVD_SPACE_RATIO 3354 0.70 0.08 1.00 138 XM_B_SEO 3320 1.10 1.32 0.99 139 RCVD_IN_RP_SAFE 3266 0.94 0.86 0.97 140 XMBrknScrpt_02 3258 1.23 1.78 0.97 141 XM_OfRef6 3255 1.53 2.72 0.97 142 URI_HEX 3224 1.17 1.61 0.96 143 TR_XM_SpammyWords2 3210 3.94 10.22 0.96 144 XMPhish30 3138 0.97 1.03 0.94 145 XMSubNoVowel 3112 0.95 1.01 0.93 146 TR_MetaPhish_Combo_01 3001 0.91 0.95 0.90 147 RCVD_IN_RP_CERTIFIED 2958 0.83 0.73 0.88 148 FVGT_m_MULTI_ODD_EMAIL 2956 0.63 0.09 0.88 149 DKIM_ADSP_CUSTOM_MED 2936 0.85 0.79 0.88 150 SpammyFromTLD_01 2867 1.63 3.25 0.86 151 TooManyTo_005 2767 0.64 0.25 0.83 152 RELAYCOUNTRY_GB 2765 0.86 0.93 0.83 153 T_FILL_THIS_FORM_SHORT 2726 1.31 2.35 0.81 154 XMBody_95 2568 0.57 0.16 0.77 155 T_XMDrugObfuBody_00 2545 1.17 2.02 0.76 156 XM_UB50 2432 1.74 3.88 0.73 157 XM_B_COPY_HTML 2408 0.69 0.62 0.72 158 HTML_TAG_BALANCE_BODY 2398 0.96 1.47 0.72 159 XMStockSpam_06 2384 0.95 1.47 0.71 160 XMGenDplmaNmb 2346 0.97 1.55 0.70 161 XMHTML_After_End 2328 1.09 1.93 0.69 162 HTTPS_HTTP_MISMATCH 2327 1.00 1.66 0.69 163 MSGID_NOFQDN1 2312 0.47 0.01 0.69 164 FROM_GOV_DKIM_AU 2265 0.50 0.13 0.68 165 RCVD_IN_BL_SPAMCOP_NET 2250 3.20 8.52 0.67 166 RDNS_DYNAMIC 2171 0.76 1.00 0.65 167 T_OBFU_PDF_ATTACH 2125 0.53 0.31 0.63 168 XM_ShortIntro_01 2115 0.57 0.43 0.63 169 HTML_IMAGE_ONLY_20 2097 0.79 1.13 0.63 170 XMSexyCombo_01 2071 1.11 2.15 0.62 171 XMBdyGiftCard01 1979 0.86 1.44 0.59 172 MPART_ALT_DIFF_COUNT 1968 0.71 0.95 0.59 173 XMMoneyMeta_00 1947 0.74 1.07 0.58 174 PLING_QUERY 1922 0.70 0.98 0.57 175 TR_XM_COVIDMETA1 1911 0.88 1.53 0.57 176 XM_H_PHPMailer 1898 0.65 0.81 0.57 177 URI_TRY_3LD 1877 0.77 1.21 0.56 178 NML_ADSP_CUSTOM_MED 1868 0.57 0.60 0.56 179 XMSubMetaI_00 1833 0.70 1.04 0.55 180 SHORT_HELO_AND_INLINE_IMAGE 1814 0.39 0.07 0.54 181 XMSubMetaSxObfu_02 1803 0.49 0.39 0.54 182 T_Symld_Words_02 1793 0.72 1.09 0.54 183 XMNoVowels 1787 0.47 0.34 0.53 184 XM_B_SpammyWords4 1711 1.00 2.03 0.51 185 XM_ProductURIs 1663 0.67 1.04 0.50 186 FORGED_GMAIL_RCVD 1637 0.54 0.65 0.49 187 XMHTMLBadTable_001 1575 0.60 0.87 0.47 188 BASE64_LENGTH_79_INF 1558 0.47 0.49 0.46 189 T_XMHurry_00 1533 0.73 1.30 0.46 190 RCVD_IN_SORBS_DUL 1531 0.34 0.10 0.46 191 XMSubMetaSxObfu_03 1491 0.55 0.77 0.44 192 XMDateMe_00 1489 0.46 0.48 0.44 193 DATE_IN_PAST_03_06 1480 0.43 0.40 0.44 194 USER_IN_WHITELIST 1478 0.30 0.00 0.44 195 USER_IN_WELCOMELIST 1478 0.30 0.00 0.44 196 HTML_IMAGE_ONLY_28 1467 0.41 0.35 0.44 197 XMOemUri 1465 0.36 0.20 0.44 198 HTML_IMAGE_ONLY_32 1441 0.37 0.25 0.43 199 FROM_GOV_SPOOF 1387 0.35 0.22 0.41 200 XM_B_COVIDMETA 1369 0.94 2.06 0.41 ----------------------------------------------------------------------