Email: 721316 Autolearn: 0 AvgScore: 4.13 AvgScanTime: 1.22 sec Spam: 234158 Autolearn: 0 AvgScore: 13.40 AvgScanTime: 1.35 sec Ham: 487158 Autolearn: 0 AvgScore: -0.32 AvgScanTime: 1.17 sec Time Spent Running SA: 245.40 hours Time Spent Processing Spam: 87.75 hours Time Spent Processing Ham: 157.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 225349 91.21 96.24 88.79 2 DKIM_SIGNED 198312 80.05 84.69 77.82 3 XM_DK_Pass 191853 78.28 81.93 76.52 4 DKIM_VALID 188243 76.44 80.39 74.54 5 DCC_CHECK 183773 52.88 78.48 40.57 6 XM_B_Unicode 175707 72.86 75.04 71.81 7 RELAYCOUNTRY_US 168656 79.98 72.03 83.80 8 XM_B_SpammyWords 159574 55.20 68.15 48.97 9 XMListUnsubscribeExists 158938 57.04 67.88 51.83 10 DKIM_VALID_AU 147507 58.20 62.99 55.90 11 XM_DK_Undo_02 112212 20.72 47.92 7.64 12 XM_B_SpammyWords2 89421 26.63 38.19 21.08 13 TR_XM_DKIM_Undo 86501 15.82 36.94 5.66 14 BAYES_99 83929 15.19 35.84 5.26 15 XM_B_Unicode3 82319 38.76 35.16 40.49 16 HTML_FONT_LOW_CONTRAST 82029 30.37 35.03 28.13 17 BAYES_50 77985 47.89 33.30 54.91 18 LOC_TINY_FONT_1 77631 27.25 33.15 24.41 19 DKIM_VALID_EF 74280 30.29 31.72 29.60 20 MIME_HTML_ONLY 66303 23.43 28.32 21.08 21 RCVD_IN_MSPIKE_H2 65909 27.82 28.15 27.66 22 TR_DCC_Bayes_99 64390 10.77 27.50 2.72 23 BAYES_999 64044 11.70 27.35 4.17 24 T_KAM_HTML_FONT_INVALID 62351 21.73 26.63 19.38 25 RELAYCOUNTRY_META 60338 11.80 25.77 5.09 26 FVGT_m_MULTI_ODD 60128 23.88 25.68 23.02 27 XMSubLong 56297 22.42 24.04 21.65 28 T_TM2_M_HEADER_IN_MSG 49977 26.92 21.34 29.60 29 XM_Multi_Part_URI 47414 14.21 20.25 11.31 30 DCC_CHECK_NEGATIVE 45872 45.03 19.59 57.25 31 UNTRUSTED_Relay 44559 7.55 19.03 2.03 32 XM_Body_Dirty_Words 41273 14.65 17.63 13.22 33 BOTNET 40071 6.64 17.11 1.61 34 RCVD_IN_MSPIKE_WL 37820 24.61 16.15 28.67 35 XM_B_Unsub 35993 12.57 15.37 11.23 36 LOTS_OF_MONEY 34287 9.46 14.64 6.96 37 TR_XM_SpammyWords2 32131 4.98 13.72 0.78 38 FSL_BULK_SIG 31845 8.05 13.60 5.38 39 BOTNET_IPINHOSTNAME 30958 7.21 13.22 4.33 40 XM_UncommonTLD01 29903 6.32 12.77 3.21 41 TR_XM_SpammyWords4 28138 6.82 12.02 4.33 42 MPART_ALT_DIFF 27129 7.01 11.59 4.82 43 XM_B_SpammyWords3 25159 7.19 10.74 5.49 44 BAYES_80 24665 6.79 10.53 4.99 45 MIME_HTML_MOSTLY 24440 4.93 10.44 2.28 46 XMSexyCombo_05 24285 5.99 10.37 3.88 47 LotsOfNums_01 24276 9.36 10.37 8.87 48 RCVD_IN_MSPIKE_BL 24008 3.83 10.25 0.74 49 BAYES_60 20561 8.61 8.78 8.52 50 XM_Evil_Numbers_Gen 20252 7.96 8.65 7.63 51 RCVD_IN_MSPIKE_H3 20142 12.94 8.60 15.03 52 T_REMOTE_IMAGE 18907 5.10 8.07 3.67 53 XMBrknScrpt_02 18818 3.23 8.04 0.92 54 RCVD_IN_BL_SPAMCOP_NET 18718 3.27 7.99 1.00 55 HTML_IMAGE_RATIO_02 17292 6.82 7.38 6.55 56 TR_XM_PhishingBody 17074 4.42 7.29 3.04 57 HTML_MIME_NO_HTML_TAG 16635 3.94 7.10 2.42 58 HTML_IMAGE_RATIO_04 16371 5.87 6.99 5.34 59 XM_UB50 15904 2.91 6.79 1.05 60 RCVD_IN_MSPIKE_H4 15438 9.38 6.59 10.72 61 SpammyFromTLD_01 15300 2.75 6.53 0.93 62 RCVD_IN_MSPIKE_L3 15224 2.45 6.50 0.50 63 KHOP_HELO_FCRDNS 14995 3.13 6.40 1.56 64 TR_XM_SpammyWords3 14967 2.43 6.39 0.52 65 XMSubMetaSx_00 14420 4.33 6.16 3.46 66 TooManyTo_001 14137 7.52 6.04 8.23 67 BAYES_95 13991 4.04 5.98 3.10 68 RELAYCOUNTRY_CA 13604 2.92 5.81 1.53 69 XM_B_Phish_Phrases 13449 4.98 5.74 4.62 70 HTML_IMAGE_RATIO_06 13344 4.35 5.70 3.70 71 RELAYCOUNTRY_FR 13259 2.03 5.66 0.28 72 BODY_URI_ONLY 13106 1.85 5.60 0.05 73 TM2_M_URI_OPT_OUT 12833 3.77 5.48 2.94 74 XM_B_Phish66 12695 3.05 5.42 1.91 75 UNPARSEABLE_RELAY 12297 7.60 5.25 8.73 76 XMStrtUSub 12175 5.14 5.20 5.11 77 XMBody_17 11981 2.14 5.12 0.71 78 XM_H_Long_From01 11503 5.47 4.91 5.73 79 URIBL_SBL_A 11437 1.77 4.88 0.27 80 XMNumbers 10954 3.70 4.68 3.23 81 HTML_IMAGE_ONLY_08 10566 1.52 4.51 0.08 82 XM_SendGrid 10506 6.82 4.49 7.94 83 DKIM_INVALID 10069 3.61 4.30 3.28 84 T_FONT_INVIS_NAKED_TO 9403 2.68 4.02 2.04 85 URI_HEX 9207 2.35 3.93 1.59 86 XM_DIRTYINTL 8929 1.63 3.81 0.58 87 SpammyFromTLD_02 8924 1.45 3.81 0.32 88 TR_LOTS_OF_MONEY3 8516 1.52 3.64 0.51 89 HTML_IMAGE_RATIO_08 8423 2.83 3.60 2.46 90 XM_UB60 8378 1.22 3.58 0.09 91 XM_SPF_SoftFail 8084 2.23 3.45 1.64 92 URI_TRY_3LD 7956 1.83 3.40 1.08 93 XM_OfRef6 7938 1.98 3.39 1.30 94 XM_UB80 7543 1.06 3.22 0.02 95 TR_XM_SpammyWords5 7441 2.14 3.18 1.65 96 XM_UB99 7365 1.02 3.15 0.00 97 TR_XM_MaxSPIKE 7351 1.03 3.14 0.02 98 RCVD_IN_RP_SAFE 7274 6.01 3.11 7.40 99 T_XMDrugObfuBody_08 7169 2.18 3.06 1.75 100 RCVD_IN_MSPIKE_L5 7144 1.10 3.05 0.16 101 XM_B_SpammyTLD 7054 2.28 3.01 1.93 102 RELAYCOUNTRY_IN 7027 1.06 3.00 0.12 103 RCVD_IN_RP_RNBL 6927 1.00 2.96 0.06 104 LH_URI_DOM_IN_PATH 6466 2.11 2.76 1.80 105 TR_XM_SB_Phish 6354 2.42 2.71 2.28 106 TR_XM_DK_SendGrid 6189 4.14 2.64 4.86 107 XMDiploma_00 6114 2.03 2.61 1.75 108 XMSubPhish11 6085 2.37 2.60 2.26 109 TR_XM_MaxBayes 6035 0.85 2.58 0.02 110 T_HTML_TAG_BALANCE_CENTER 5878 0.90 2.51 0.13 111 RCVD_IN_RP_CERTIFIED 5670 5.40 2.42 6.83 112 XM_CamelCaseFrm001 5632 1.96 2.41 1.74 113 FROM_EXCESS_BASE64 5590 2.37 2.39 2.37 114 T_TooManySym_01 5457 4.00 2.33 4.80 115 T_XMHurry_00 5281 1.25 2.26 0.77 116 MIME_HTML_ONLY_MULTI 5183 2.76 2.21 3.03 117 MIME_QP_LONG_LINE 5122 4.63 2.19 5.81 118 XM_UB999 4929 0.68 2.10 0.00 119 XM_B_COVIDMETA 4844 1.10 2.07 0.63 120 XM_B_SpammyWords4 4749 1.12 2.03 0.68 121 RCVD_IN_IADB_LISTED 4681 4.81 2.00 6.16 122 BAYES_40 4581 3.87 1.96 4.79 123 BOTNET_NORDNS 4581 0.66 1.96 0.03 124 SUBJ_ALL_CAPS 4567 1.78 1.95 1.70 125 RELAYCOUNTRY_UA 4452 0.62 1.90 0.01 126 T_FILL_THIS_FORM_SHORT 4435 1.34 1.89 1.08 127 RELAYCOUNTRY_GB 4356 1.24 1.86 0.94 128 XM_URI_RBL 4320 0.73 1.84 0.19 129 XM_B_Unsub2 4244 2.33 1.81 2.57 130 TM2_M_VERY_LONG_WORD 4052 1.41 1.73 1.25 131 RELAYCOUNTRY_DE 4043 0.87 1.73 0.47 132 XM_DK_Undo_01 4001 1.62 1.71 1.58 133 RCVD_IN_IADB_SPF 3980 4.20 1.70 5.40 134 PDS_OTHER_BAD_TLD 3964 0.85 1.69 0.45 135 TR_XM_UnparsRelay 3721 0.76 1.59 0.35 136 XMSexyCombo_01 3686 0.93 1.57 0.63 137 RCVD_IN_IADB_SENDERID 3623 3.79 1.55 4.87 138 ALL_TRUSTED 3600 8.80 1.54 12.29 139 RCVD_IN_PSBL 3588 0.50 1.53 0.00 140 RCVD_IN_IADB_DK 3563 3.68 1.52 4.71 141 XMHTML_After_End 3531 1.01 1.51 0.77 142 BAYES_00 3407 9.11 1.46 12.79 143 XMSubNoVowel 3406 1.33 1.45 1.27 144 HTML_FONT_SIZE_LARGE 3390 0.53 1.45 0.09 145 T_XMDrugObfuBody_14 3362 1.49 1.44 1.52 146 BAYES_20 3336 2.84 1.42 3.52 147 XMStockSpam_06 3287 1.05 1.40 0.88 148 XM_UB95 3202 0.45 1.37 0.01 149 XMGenDplmaNmb 3191 1.00 1.36 0.83 150 TR_XM_PHPDW 3137 0.62 1.34 0.28 151 TR_XM_COVIDMETA4 3122 0.70 1.33 0.40 152 TR_XM_PHPForged 3007 0.57 1.28 0.23 153 T_XMDrugObfuBody_00 2996 0.89 1.28 0.70 154 URI_PHP_REDIR 2984 0.42 1.27 0.01 155 TR_XM_FormFill2 2982 0.57 1.27 0.23 156 XM_H_PHPOS 2974 0.57 1.27 0.23 157 MAILING_LIST_MULTI 2959 2.04 1.26 2.41 158 FROM_SUSPICIOUS_NTLD 2957 0.45 1.26 0.07 159 TR_Symld_Words 2904 1.61 1.24 1.79 160 FROM_SUSPICIOUS_NTLD_FP 2837 0.43 1.21 0.06 161 TR_XM_COVIDMETA1 2820 0.60 1.20 0.31 162 XM_Combo_Sbj 2777 0.61 1.19 0.34 163 XM_ProductURIs 2740 1.02 1.17 0.94 164 HTML_IMAGE_ONLY_12 2720 0.52 1.16 0.21 165 XMMoneyMeta_00 2699 0.89 1.15 0.76 166 RCVD_IN_IADB_VOUCHED 2691 2.83 1.15 3.64 167 LongTLD 2557 0.45 1.09 0.14 168 XMBdyGiftCard01 2555 0.77 1.09 0.62 169 NO_DNS_FOR_FROM 2540 0.73 1.08 0.56 170 URI_NO_WWW_BIZ_CGI 2462 0.35 1.05 0.01 171 TR_XM_INV_DKIM 2460 0.42 1.05 0.12 172 HTML_TAG_BALANCE_BODY 2444 0.68 1.04 0.50 173 URI_NOVOWEL 2444 2.09 1.04 2.59 174 XMBody_78 2443 0.67 1.04 0.49 175 TO_NO_BRKTS_PCNT 2420 0.34 1.03 0.00 176 RDNS_DYNAMIC 2327 0.65 0.99 0.49 177 T_STY_INVIS_DIRECT 2317 0.37 0.99 0.07 178 TR_Mismatch_TLD_01 2297 0.46 0.98 0.21 179 TR_Caps_n_Bayes_99 2252 0.37 0.96 0.09 180 RCVD_IN_MSPIKE_H5 2240 2.28 0.96 2.92 181 TR_XM_FormFill 2214 0.31 0.95 0.01 182 XM_H_Long_From02 2210 1.22 0.94 1.35 183 TR_BOTNET_NEGATE 2163 0.54 0.92 0.36 184 RELAYCOUNTRY_NL 2161 0.43 0.92 0.20 185 XMSubMetaI_00 2130 0.69 0.91 0.58 186 REMOVE_BEFORE_LINK 2101 0.46 0.90 0.25 187 XM_SPF_Unknown 2002 0.65 0.85 0.55 188 PLING_QUERY 1992 0.58 0.85 0.46 189 RCVD_IN_IADB_OPTIN 1971 1.88 0.84 2.37 190 XM_PDF 1950 3.51 0.83 4.79 191 DKIM_ADSP_CUSTOM_MED 1902 1.01 0.81 1.11 192 TR_XM_DK_Bayes 1873 6.15 0.80 8.72 193 XM_OfRef7 1868 0.38 0.80 0.19 194 TR_XM_RelayPhish 1859 0.31 0.79 0.07 195 DATE_IN_PAST_03_06 1821 0.31 0.78 0.08 196 MISSING_HEADERS 1795 0.62 0.77 0.54 197 FORGED_GMAIL_RCVD 1789 0.68 0.76 0.64 198 HTML_IMAGE_ONLY_16 1788 0.43 0.76 0.27 199 XMSubMetaSxObfu_03 1785 0.60 0.76 0.52 200 HK_RANDOM_REPLYTO 1779 0.38 0.76 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 432554 91.21 96.24 88.79 2 RELAYCOUNTRY_US 408226 79.98 72.03 83.80 3 DKIM_SIGNED 379119 80.05 84.69 77.82 4 XM_DK_Pass 372771 78.28 81.93 76.52 5 DKIM_VALID 363122 76.44 80.39 74.54 6 XM_B_Unicode 349832 72.86 75.04 71.81 7 DCC_CHECK_NEGATIVE 278919 45.03 19.59 57.25 8 DKIM_VALID_AU 272310 58.20 62.99 55.90 9 BAYES_50 267478 47.89 33.30 54.91 10 XMListUnsubscribeExists 252510 57.04 67.88 51.83 11 XM_B_SpammyWords 238571 55.20 68.15 48.97 12 DCC_CHECK 197635 52.88 78.48 40.57 13 XM_B_Unicode3 197242 38.76 35.16 40.49 14 DKIM_VALID_EF 144211 30.29 31.72 29.60 15 T_TM2_M_HEADER_IN_MSG 144198 26.92 21.34 29.60 16 RCVD_IN_MSPIKE_WL 139666 24.61 16.15 28.67 17 HTML_FONT_LOW_CONTRAST 137031 30.37 35.03 28.13 18 RCVD_IN_MSPIKE_H2 134735 27.82 28.15 27.66 19 LOC_TINY_FONT_1 118899 27.25 33.15 24.41 20 FVGT_m_MULTI_ODD 112156 23.88 25.68 23.02 21 XMSubLong 105450 22.42 24.04 21.65 22 MIME_HTML_ONLY 102703 23.43 28.32 21.08 23 XM_B_SpammyWords2 102686 26.63 38.19 21.08 24 T_KAM_HTML_FONT_INVALID 94402 21.73 26.63 19.38 25 RCVD_IN_MSPIKE_H3 73230 12.94 8.60 15.03 26 XM_Body_Dirty_Words 64381 14.65 17.63 13.22 27 BAYES_00 62289 9.11 1.46 12.79 28 ALL_TRUSTED 59863 8.80 1.54 12.29 29 XM_Multi_Part_URI 55113 14.21 20.25 11.31 30 XM_B_Unsub 54690 12.57 15.37 11.23 31 RCVD_IN_MSPIKE_H4 52204 9.38 6.59 10.72 32 LotsOfNums_01 43228 9.36 10.37 8.87 33 UNPARSEABLE_RELAY 42518 7.60 5.25 8.73 34 TR_XM_DK_Bayes 42493 6.15 0.80 8.72 35 TR_XM_DK_Bayes1 41530 6.00 0.75 8.52 36 BAYES_60 41509 8.61 8.78 8.52 37 TooManyTo_001 40080 7.52 6.04 8.23 38 XM_DKIMWhitelistDomains 38981 5.41 0.01 8.00 39 XM_SendGrid 38703 6.82 4.49 7.94 40 TR_XM_DK_Bayes2 37628 5.42 0.63 7.72 41 XM_DK_Undo_02 37234 20.72 47.92 7.64 42 XM_Evil_Numbers_Gen 37170 7.96 8.65 7.63 43 RCVD_IN_RP_SAFE 36057 6.01 3.11 7.40 44 LOTS_OF_MONEY 33915 9.46 14.64 6.96 45 RCVD_IN_RP_CERTIFIED 33259 5.40 2.42 6.83 46 IN_ZIMBRA_NJ_WHITELIST 32018 4.45 0.05 6.57 47 HTML_IMAGE_RATIO_02 31905 6.82 7.38 6.55 48 RCVD_IN_IADB_LISTED 29993 4.81 2.00 6.16 49 MIME_QP_LONG_LINE 28288 4.63 2.19 5.81 50 XM_H_Long_From01 27918 5.47 4.91 5.73 51 TR_XM_DKIM_Undo 27593 15.82 36.94 5.66 52 XM_B_SpammyWords3 26724 7.19 10.74 5.49 53 RCVD_IN_IADB_SPF 26314 4.20 1.70 5.40 54 FSL_BULK_SIG 26219 8.05 13.60 5.38 55 HTML_IMAGE_RATIO_04 25994 5.87 6.99 5.34 56 BAYES_99 25643 15.19 35.84 5.26 57 XMStrtUSub 24877 5.14 5.20 5.11 58 RELAYCOUNTRY_META 24772 11.80 25.77 5.09 59 BAYES_80 24321 6.79 10.53 4.99 60 RCVD_IN_IADB_SENDERID 23734 3.79 1.55 4.87 61 TR_XM_DK_SendGrid 23654 4.14 2.64 4.86 62 MPART_ALT_DIFF 23466 7.01 11.59 4.82 63 T_TooManySym_01 23375 4.00 2.33 4.80 64 XM_PDF 23357 3.51 0.83 4.79 65 BAYES_40 23316 3.87 1.96 4.79 66 RCVD_IN_IADB_DK 22961 3.68 1.52 4.71 67 XM_B_Phish_Phrases 22502 4.98 5.74 4.62 68 BOTNET_IPINHOSTNAME 21082 7.21 13.22 4.33 69 TR_XM_SpammyWords4 21082 6.82 12.02 4.33 70 BAYES_999 20315 11.70 27.35 4.17 71 XMSexyCombo_05 18901 5.99 10.37 3.88 72 HTML_IMAGE_RATIO_06 18004 4.35 5.70 3.70 73 T_REMOTE_IMAGE 17894 5.10 8.07 3.67 74 RCVD_IN_IADB_VOUCHED 17748 2.83 1.15 3.64 75 BAYES_20 17145 2.84 1.42 3.52 76 XMSubMetaSx_00 16843 4.33 6.16 3.46 77 DKIM_INVALID 15997 3.61 4.30 3.28 78 XMNumbers 15740 3.70 4.68 3.23 79 XM_UncommonTLD01 15649 6.32 12.77 3.21 80 BAYES_95 15123 4.04 5.98 3.10 81 TR_XM_PhishingBody 14820 4.42 7.29 3.04 82 MIME_HTML_ONLY_MULTI 14744 2.76 2.21 3.03 83 TM2_M_URI_OPT_OUT 14344 3.77 5.48 2.94 84 RCVD_IN_MSPIKE_H5 14232 2.28 0.96 2.92 85 TR_DCC_Bayes_99 13272 10.77 27.50 2.72 86 XM_H_Trusted_IP 12792 1.77 0.00 2.63 87 URI_NOVOWEL 12627 2.09 1.04 2.59 88 XM_B_Unsub2 12529 2.33 1.81 2.57 89 HTML_IMAGE_RATIO_08 11993 2.83 3.60 2.46 90 HTML_MIME_NO_HTML_TAG 11797 3.94 7.10 2.42 91 T_TooManySym_02 11745 1.86 0.71 2.41 92 MAILING_LIST_MULTI 11728 2.04 1.26 2.41 93 RCVD_IN_IADB_OPTIN 11556 1.88 0.84 2.37 94 FROM_EXCESS_BASE64 11525 2.37 2.39 2.37 95 MIME_HTML_MOSTLY 11113 4.93 10.44 2.28 96 TR_XM_SB_Phish 11107 2.42 2.71 2.28 97 XMSubPhish11 10990 2.37 2.60 2.26 98 BAYES_05 10333 1.67 0.73 2.12 99 TooManyTo_002 10299 1.61 0.55 2.11 100 T_FONT_INVIS_NAKED_TO 9928 2.68 4.02 2.04 101 UNTRUSTED_Relay 9899 7.55 19.03 2.03 102 ANY_BOUNCE_MESSAGE 9799 1.56 0.63 2.01 103 BOUNCE_MESSAGE 9798 1.56 0.62 2.01 104 XM_B_SpammyTLD 9425 2.28 3.01 1.93 105 XM_B_Phish66 9321 3.05 5.42 1.91 106 LH_URI_DOM_IN_PATH 8772 2.11 2.76 1.80 107 TR_Symld_Words 8740 1.61 1.24 1.79 108 HELO_NODOT 8576 1.37 0.57 1.76 109 HELO_NO_DOMAIN 8575 1.37 0.57 1.76 110 T_XMDrugObfuBody_08 8521 2.18 3.06 1.75 111 XMDiploma_00 8514 2.03 2.61 1.75 112 XM_CamelCaseFrm001 8471 1.96 2.41 1.74 113 SUBJ_ALL_CAPS 8280 1.78 1.95 1.70 114 TR_XM_SpammyWords5 8019 2.14 3.18 1.65 115 XM_SPF_SoftFail 8009 2.23 3.45 1.64 116 BOTNET 7830 6.64 17.11 1.61 117 URI_HEX 7745 2.35 3.93 1.59 118 XM_DK_Undo_01 7687 1.62 1.71 1.58 119 IN_HORDE_ADDRESS_BOOK 7592 1.08 0.09 1.56 120 KHOP_HELO_FCRDNS 7589 3.13 6.40 1.56 121 RELAYCOUNTRY_CA 7430 2.92 5.81 1.53 122 INVALID_MSGID 7417 1.11 0.24 1.52 123 T_XMDrugObfuBody_14 7411 1.49 1.44 1.52 124 TVD_RCVD_IP 6783 1.05 0.34 1.39 125 USER_IN_DEF_DKIM_WL 6665 0.93 0.02 1.37 126 XM_H_Long_From02 6582 1.22 0.94 1.35 127 TO_MALFORMED 6564 0.92 0.02 1.35 128 TooManyTo_003 6490 1.04 0.42 1.33 129 XMGappySubj_01 6384 0.92 0.10 1.31 130 XM_OfRef6 6321 1.98 3.39 1.30 131 XMSubNoVowel 6177 1.33 1.45 1.27 132 TM2_M_VERY_LONG_WORD 6090 1.41 1.73 1.25 133 XMCapTrack 5855 0.91 0.30 1.20 134 HTML_FONT_FACE_BAD 5682 1.00 0.64 1.17 135 HELO_MISC_IP 5600 0.83 0.18 1.15 136 CK_HELO_DYNAMIC_SPLIT_IP 5597 0.88 0.32 1.15 137 XM_GoogleGroups 5417 0.88 0.40 1.11 138 DKIM_ADSP_CUSTOM_MED 5413 1.01 0.81 1.11 139 URI_TRY_3LD 5275 1.83 3.40 1.08 140 T_FILL_THIS_FORM_SHORT 5250 1.34 1.89 1.08 141 XM_UB50 5105 2.91 6.79 1.05 142 RCVD_IN_BL_SPAMCOP_NET 4893 3.27 7.99 1.00 143 XMBSHREFv2 4670 0.73 0.25 0.96 144 TooManyTo_004 4629 0.76 0.36 0.95 145 RELAYCOUNTRY_GB 4600 1.24 1.86 0.94 146 XM_ProductURIs 4584 1.02 1.17 0.94 147 T_TooManySym_03 4548 0.75 0.36 0.93 148 SpammyFromTLD_01 4519 2.75 6.53 0.93 149 XMBrknScrpt_02 4470 3.23 8.04 0.92 150 XMBody_95 4356 0.65 0.15 0.89 151 XMStockSpam_06 4265 1.05 1.40 0.88 152 XMGenDplmaNmb 4029 1.00 1.36 0.83 153 TR_MSPIKEBAYES00 3985 0.56 0.02 0.82 154 NML_ADSP_CUSTOM_MED 3900 0.78 0.73 0.80 155 TR_XM_SpammyWords2 3777 4.98 13.72 0.78 156 XMHTML_After_End 3761 1.01 1.51 0.77 157 T_XMHurry_00 3744 1.25 2.26 0.77 158 TooManyTo_005 3736 0.62 0.31 0.77 159 XMMoneyMeta_00 3690 0.89 1.15 0.76 160 FROM_GOV_DKIM_AU 3669 0.54 0.11 0.75 161 RCVD_IN_MSPIKE_BL 3590 3.83 10.25 0.74 162 TR_MetaPhish_Combo_01 3560 0.73 0.73 0.73 163 XMBody_17 3483 2.14 5.12 0.71 164 HTTPS_HTTP_MISMATCH 3469 0.69 0.66 0.71 165 T_XMDrugObfuBody_00 3410 0.89 1.28 0.70 166 XM_ShortIntro_01 3323 0.66 0.60 0.68 167 XM_B_SpammyWords4 3319 1.12 2.03 0.68 168 MSGID_NOFQDN1 3269 0.46 0.01 0.67 169 T_Symld_Words_02 3214 0.67 0.68 0.66 170 T_OBFU_PDF_ATTACH 3126 0.47 0.12 0.64 171 FORGED_GMAIL_RCVD 3104 0.68 0.76 0.64 172 XMSexyCombo_01 3057 0.93 1.57 0.63 173 XM_B_COVIDMETA 3056 1.10 2.07 0.63 174 XMBdyGiftCard01 3013 0.77 1.09 0.62 175 NUMERIC_HTTP_ADDR 2852 0.57 0.54 0.59 176 XM_DIRTYINTL 2849 1.63 3.81 0.58 177 XMSubMetaI_00 2833 0.69 0.91 0.58 178 T_TooManySym_04 2758 0.40 0.05 0.57 179 NO_DNS_FOR_FROM 2716 0.73 1.08 0.56 180 XMHTMLBadTable_001 2698 0.60 0.69 0.55 181 XM_SPF_Unknown 2691 0.65 0.85 0.55 182 DKIM_ADSP_NXDOMAIN 2668 0.61 0.74 0.55 183 MISSING_HEADERS 2649 0.62 0.77 0.54 184 XMNoVowels 2627 0.51 0.44 0.54 185 TR_XM_SpammyWords3 2532 2.43 6.39 0.52 186 XMSubMetaSxObfu_03 2522 0.60 0.76 0.52 187 TR_LOTS_OF_MONEY3 2464 1.52 3.64 0.51 188 RCVD_IN_MSPIKE_L3 2448 2.45 6.50 0.50 189 SHORT_HELO_AND_INLINE_IMAGE 2447 0.36 0.06 0.50 190 HTML_TAG_BALANCE_BODY 2440 0.68 1.04 0.50 191 TM2_M_BODY_EMPTY 2438 0.35 0.05 0.50 192 RCVD_IN_SORBS_DUL 2430 0.38 0.12 0.50 193 SENDGRID_REDIR 2425 0.53 0.61 0.50 194 XMBody_78 2383 0.67 1.04 0.49 195 RDNS_DYNAMIC 2376 0.65 0.99 0.49 196 HTML_IMAGE_ONLY_20 2341 0.44 0.35 0.48 197 XM_H_PHPMailer 2273 0.49 0.55 0.47 198 XM_S_SubURI 2268 0.33 0.06 0.47 199 RELAYCOUNTRY_DE 2268 0.87 1.73 0.47 200 PLING_QUERY 2217 0.58 0.85 0.46 ----------------------------------------------------------------------