Email: 787591 Autolearn: 0 AvgScore: 3.96 AvgScanTime: 1.24 sec Spam: 240782 Autolearn: 0 AvgScore: 13.90 AvgScanTime: 1.38 sec Ham: 546809 Autolearn: 0 AvgScore: -0.42 AvgScanTime: 1.18 sec Time Spent Running SA: 270.97 hours Time Spent Processing Spam: 92.18 hours Time Spent Processing Ham: 178.79 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 229105 85.12 95.15 80.71 2 DKIM_SIGNED 195828 73.24 81.33 69.68 3 DCC_CHECK 193121 49.68 80.21 36.24 4 XM_DK_Pass 190794 71.87 79.24 68.62 5 DKIM_VALID 186675 70.04 77.53 66.74 6 RELAYCOUNTRY_US 177153 74.70 73.57 75.20 7 XM_B_Unicode 173724 66.58 72.15 64.12 8 XMListUnsubscribeExists 168867 53.50 70.13 46.18 9 XM_B_SpammyWords 159218 50.51 66.13 43.63 10 DKIM_VALID_AU 145553 53.18 60.45 49.98 11 XM_DK_Undo_02 117570 19.21 48.83 6.17 12 BAYES_99 96822 15.15 40.21 4.11 13 XM_B_SpammyWords2 92091 24.12 38.25 17.89 14 TR_XM_DKIM_Undo 90393 14.90 37.54 4.92 15 HTML_FONT_LOW_CONTRAST 84861 28.03 35.24 24.86 16 LOC_TINY_FONT_1 84318 25.33 35.02 21.06 17 BAYES_999 79084 12.37 32.84 3.35 18 BAYES_50 77688 47.28 32.26 53.89 19 XM_B_Unicode3 77525 34.71 32.20 35.82 20 TR_DCC_Bayes_99 77346 11.08 32.12 1.82 21 DKIM_VALID_EF 73461 27.27 30.51 25.84 22 RCVD_IN_MSPIKE_H2 68996 26.57 28.65 25.66 23 MIME_HTML_ONLY 66874 20.84 27.77 17.78 24 FVGT_m_MULTI_ODD 63196 22.52 26.25 20.88 25 T_KAM_HTML_FONT_INVALID 59390 19.27 24.67 16.90 26 RELAYCOUNTRY_META 58583 10.62 24.33 4.59 27 T_TM2_M_HEADER_IN_MSG 47830 25.44 19.86 27.90 28 XM_Multi_Part_URI 47359 13.40 19.67 10.64 29 XMSubLong 46038 17.93 19.12 17.41 30 UNTRUSTED_Relay 44126 6.78 18.33 1.69 31 DCC_CHECK_NEGATIVE 43834 48.49 18.20 61.82 32 XM_Body_Dirty_Words 40041 12.90 16.63 11.26 33 BOTNET 38562 5.95 16.02 1.51 34 FSL_BULK_SIG 38102 8.72 15.82 5.60 35 RCVD_IN_MSPIKE_WL 37847 23.06 15.72 26.30 36 TR_XM_SpammyWords2 37291 5.35 15.49 0.88 37 BOTNET_IPINHOSTNAME 32049 6.87 13.31 4.03 38 LOTS_OF_MONEY 31052 7.98 12.90 5.82 39 XM_B_SpammyWords3 29048 6.39 12.06 3.89 40 XM_UncommonTLD01 28895 5.67 12.00 2.89 41 TR_XM_SpammyWords4 27858 6.25 11.57 3.91 42 XM_B_Unsub 25519 9.40 10.60 8.87 43 LotsOfNums_01 24798 8.86 10.30 8.22 44 XMSexyCombo_05 22089 5.13 9.17 3.35 45 RCVD_IN_MSPIKE_H3 21528 12.70 8.94 14.36 46 XM_Evil_Numbers_Gen 21338 8.60 8.86 8.49 47 BAYES_60 20355 7.42 8.45 6.97 48 BAYES_80 20342 5.31 8.45 3.92 49 RCVD_IN_BL_SPAMCOP_NET 20238 3.05 8.41 0.68 50 T_REMOTE_IMAGE 19270 4.75 8.00 3.32 51 TooManyTo_001 19267 7.85 8.00 7.78 52 HTML_MIME_NO_HTML_TAG 19263 3.81 8.00 1.96 53 MPART_ALT_DIFF 18002 5.19 7.48 4.18 54 XM_UB50 17414 2.81 7.23 0.86 55 HTML_IMAGE_RATIO_02 17348 6.47 7.20 6.15 56 RCVD_IN_MSPIKE_BL 16846 2.32 7.00 0.26 57 XM_B_Phish_Phrases 16796 5.15 6.98 4.35 58 TR_XM_MSPIKECOMBO 15790 2.18 6.56 0.25 59 KHOP_HELO_FCRDNS 15586 3.11 6.47 1.63 60 UNPARSEABLE_RELAY 15582 6.89 6.47 7.07 61 TM2_M_URI_OPT_OUT 15017 9.54 6.24 10.99 62 TR_XM_UnparsRelay 14916 5.30 6.19 4.91 63 BODY_URI_ONLY 14815 1.92 6.15 0.05 64 RCVD_IN_MSPIKE_H4 14489 8.47 6.02 9.55 65 MIME_HTML_MOSTLY 13776 3.10 5.72 1.95 66 RELAYCOUNTRY_CA 13749 2.72 5.71 1.40 67 URIBL_SBL_A 13730 1.91 5.70 0.24 68 XM_SendGrid 13595 6.19 5.65 6.43 69 T_XMHurry_00 13260 2.29 5.51 0.88 70 XMSubMetaSx_00 13214 3.88 5.49 3.17 71 XM_B_SpammyTLD 12882 2.96 5.35 1.90 72 BAYES_95 12466 3.22 5.18 2.35 73 TR_XM_PhishingBody 12337 3.37 5.12 2.60 74 HTML_IMAGE_RATIO_06 11881 3.70 4.93 3.16 75 HTML_IMAGE_ONLY_08 11364 1.52 4.72 0.11 76 XM_H_Long_From01 11105 4.95 4.61 5.10 77 XMStrtUSub 11051 5.40 4.59 5.76 78 XMNumbers 10974 3.41 4.56 2.90 79 TR_XM_SpammyWords5 10961 2.49 4.55 1.58 80 XMBody_17 10855 1.82 4.51 0.64 81 SpammyFromTLD_01 10815 1.90 4.49 0.76 82 XM_OfRef6 10775 2.36 4.48 1.43 83 HTML_IMAGE_RATIO_04 10723 4.49 4.45 4.50 84 TR_LOTS_OF_MONEY3 10660 1.79 4.43 0.63 85 RCVD_IN_RP_RNBL 10157 1.34 4.22 0.07 86 XM_UB60 9598 1.27 3.99 0.08 87 RELAYCOUNTRY_FR 9566 1.40 3.97 0.27 88 T_FONT_INVIS_NAKED_TO 9543 2.21 3.96 1.44 89 PDS_OTHER_BAD_TLD 9401 1.60 3.90 0.58 90 XM_DIRTYINTL 9261 1.47 3.85 0.43 91 DKIM_INVALID 9153 3.21 3.80 2.95 92 RCVD_IN_MSPIKE_L5 9077 1.20 3.77 0.06 93 HTML_IMAGE_RATIO_08 8863 2.84 3.68 2.47 94 TR_XM_MaxBayes 8534 1.09 3.54 0.02 95 RCVD_IN_RP_SAFE 8243 5.78 3.42 6.82 96 XM_B_Phish66 8232 2.25 3.42 1.74 97 URI_TRY_3LD 8193 2.10 3.40 1.53 98 XM_SPF_SoftFail 8184 2.29 3.40 1.80 99 TR_XM_DK_SendGrid 8148 3.93 3.38 4.17 100 XMBrknScrpt_02 7679 1.54 3.19 0.81 101 URI_HEX 7575 1.86 3.15 1.29 102 T_XMDrugObfuBody_08 7513 1.88 3.12 1.33 103 TR_XM_SpammyWords3 7339 1.01 3.05 0.11 104 T_FILL_THIS_FORM_SHORT 7315 1.62 3.04 1.00 105 SUBJ_ALL_CAPS 7133 1.94 2.96 1.49 106 SpammyFromTLD_02 6904 1.01 2.87 0.19 107 XMDiploma_00 6848 1.99 2.84 1.61 108 RCVD_IN_RP_CERTIFIED 6732 5.13 2.80 6.15 109 RELAYCOUNTRY_IN 6674 0.91 2.77 0.09 110 MIME_QP_LONG_LINE 6408 4.40 2.66 5.17 111 XM_UB99 6105 0.78 2.54 0.00 112 XM_UB80 5717 0.75 2.37 0.03 113 MIME_HTML_ONLY_MULTI 5383 2.52 2.24 2.65 114 TO_NO_BRKTS_HTML_ONLY 5321 0.79 2.21 0.16 115 RCVD_IN_MSPIKE_L3 5309 0.79 2.20 0.16 116 XM_DK_Undo_01 5283 1.78 2.19 1.60 117 RELAYCOUNTRY_UA 5118 0.67 2.13 0.03 118 XM_B_COVIDMETA 5055 1.44 2.10 1.15 119 RCVD_IN_PSBL 5022 0.69 2.09 0.08 120 BAYES_40 4900 3.90 2.04 4.72 121 FROM_EXCESS_BASE64 4817 2.23 2.00 2.33 122 BOTNET_NORDNS 4759 0.62 1.98 0.02 123 XM_B_Unsub2 4757 1.73 1.98 1.62 124 TR_XM_SB_Phish 4669 1.92 1.94 1.92 125 TR_XM_RelayPhish 4631 0.63 1.92 0.06 126 DATE_IN_PAST_03_06 4580 0.63 1.90 0.08 127 TR_XM_FormFill 4423 0.57 1.84 0.02 128 XM_CamelCaseFrm001 4418 1.73 1.83 1.68 129 RCVD_IN_IADB_LISTED 4417 4.25 1.83 5.31 130 T_TooManySym_01 4410 3.26 1.83 3.88 131 XMSubPhish11 4381 1.87 1.82 1.89 132 HTML_IMAGE_ONLY_12 4281 0.70 1.78 0.22 133 XM_UB999 4214 0.54 1.75 0.00 134 HTML_TAG_BALANCE_CENTER 4198 0.66 1.74 0.18 135 XMSubNoVowel 4072 1.56 1.69 1.51 136 XMGenDplmaNmb 3993 1.03 1.66 0.76 137 XM_URI_RBL 3920 0.60 1.63 0.15 138 XM_B_SpammyWords4 3884 0.79 1.61 0.43 139 RCVD_IN_IADB_SPF 3883 3.70 1.61 4.62 140 TR_Symld_Words 3842 1.56 1.60 1.55 141 ALL_TRUSTED 3824 15.38 1.59 21.45 142 BAYES_20 3761 3.15 1.56 3.85 143 TM2_M_VERY_LONG_WORD 3761 1.22 1.56 1.07 144 RDNS_DYNAMIC 3728 0.76 1.55 0.42 145 RCVD_IN_IADB_DK 3577 3.23 1.49 3.99 146 RCVD_IN_IADB_SENDERID 3548 3.32 1.47 4.14 147 DATE_IN_PAST_06_12 3535 0.49 1.47 0.06 148 XMHTML_After_End 3514 1.01 1.46 0.81 149 PDS_BTC_ID 3499 0.47 1.45 0.04 150 XMBdyGiftCard01 3498 0.86 1.45 0.59 151 XM_B_Crypto 3445 0.47 1.43 0.04 152 T_XMDrugObfuBody_14 3435 1.39 1.43 1.38 153 XMStockSpam_06 3416 0.91 1.42 0.68 154 HK_RANDOM_REPLYTO 3376 0.58 1.40 0.22 155 TR_XM_COVIDMETA4 3311 0.64 1.38 0.32 156 BITCOIN_EXTORT_01 3293 0.42 1.37 0.01 157 TR_XM_INV_DKIM 3264 0.47 1.36 0.08 158 TR_XM_PHPDW 3231 0.60 1.34 0.27 159 XMSexyCombo_01 3215 0.63 1.34 0.32 160 MAILING_LIST_MULTI 3195 2.05 1.33 2.37 161 TR_XM_PHPForged 3185 0.57 1.32 0.23 162 XM_UB95 3179 0.41 1.32 0.02 163 TR_XM_FormFill2 3174 0.56 1.32 0.23 164 XM_H_PHPOS 3158 0.56 1.31 0.23 165 HTML_FONT_SIZE_LARGE 3139 0.47 1.30 0.10 166 XM_OfRef7 3116 0.50 1.29 0.15 167 URI_NO_WWW_BIZ_CGI 3079 0.40 1.28 0.01 168 URI_PHP_REDIR 3068 0.40 1.27 0.01 169 FROM_SUSPICIOUS_NTLD 3065 0.44 1.27 0.08 170 NO_FM_NAME_IP_HOSTN 2928 0.37 1.22 0.00 171 TR_XM_Crypto2 2895 0.37 1.20 0.00 172 FROM_SUSPICIOUS_NTLD_FP 2871 0.41 1.19 0.07 173 TR_Mismatch_TLD_01 2724 0.59 1.13 0.35 174 URI_NOVOWEL 2686 2.10 1.12 2.54 175 TR_Caps_n_Bayes_99 2657 0.43 1.10 0.13 176 TR_MetaPhish_Combo_01 2632 0.78 1.09 0.64 177 HELO_NODOT 2588 1.37 1.07 1.51 178 HELO_NO_DOMAIN 2561 1.37 1.06 1.51 179 RELAYCOUNTRY_GB 2498 0.99 1.04 0.97 180 DATE_IN_PAST_12_24 2467 0.40 1.02 0.12 181 XMSubMetaI_00 2454 0.73 1.02 0.61 182 BAYES_00 2440 10.07 1.01 14.06 183 XM_S_SpammyWords 2437 0.56 1.01 0.37 184 TR_XM_Spammywords 2430 0.56 1.01 0.37 185 XMSubMetaSxObfu_03 2419 0.78 1.00 0.67 186 XM_PDF 2392 3.73 0.99 4.93 187 T_Symld_Words_02 2379 0.62 0.99 0.45 188 XMBody_78 2379 0.61 0.99 0.45 189 XMMoneyMeta_00 2355 0.61 0.98 0.45 190 RELAYCOUNTRY_DE 2354 0.54 0.98 0.35 191 HTML_TAG_BALANCE_BODY 2299 0.57 0.95 0.41 192 NO_DNS_FOR_FROM 2274 0.55 0.94 0.37 193 MISSING_HEADERS 2257 0.58 0.94 0.43 194 REMOVE_BEFORE_LINK 2246 0.41 0.93 0.19 195 RCVD_IN_IADB_VOUCHED 2188 2.55 0.91 3.28 196 TR_XM_MaxSPIKE 2186 0.28 0.91 0.00 197 TR_XM_COVIDMETA1 2177 0.45 0.90 0.25 198 HTML_IMAGE_ONLY_20 2163 0.62 0.90 0.49 199 XMSubEmpty 2102 0.77 0.87 0.73 200 TR_XM_BayesRelay 2083 0.27 0.87 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 441307 85.12 95.15 80.71 2 RELAYCOUNTRY_US 411215 74.70 73.57 75.20 3 DKIM_SIGNED 381036 73.24 81.33 69.68 4 XM_DK_Pass 375231 71.87 79.24 68.62 5 DKIM_VALID 364932 70.04 77.53 66.74 6 XM_B_Unicode 350635 66.58 72.15 64.12 7 DCC_CHECK_NEGATIVE 338045 48.49 18.20 61.82 8 BAYES_50 294684 47.28 32.26 53.89 9 DKIM_VALID_AU 273307 53.18 60.45 49.98 10 XMListUnsubscribeExists 252509 53.50 70.13 46.18 11 XM_B_SpammyWords 238582 50.51 66.13 43.63 12 DCC_CHECK 198138 49.68 80.21 36.24 13 XM_B_Unicode3 195849 34.71 32.20 35.82 14 T_TM2_M_HEADER_IN_MSG 152563 25.44 19.86 27.90 15 RCVD_IN_MSPIKE_WL 143800 23.06 15.72 26.30 16 DKIM_VALID_EF 141315 27.27 30.51 25.84 17 RCVD_IN_MSPIKE_H2 140288 26.57 28.65 25.66 18 HTML_FONT_LOW_CONTRAST 135917 28.03 35.24 24.86 19 ALL_TRUSTED 117273 15.38 1.59 21.45 20 LOC_TINY_FONT_1 115176 25.33 35.02 21.06 21 FVGT_m_MULTI_ODD 114185 22.52 26.25 20.88 22 XM_B_SpammyWords2 97837 24.12 38.25 17.89 23 MIME_HTML_ONLY 97223 20.84 27.77 17.78 24 XMSubLong 95187 17.93 19.12 17.41 25 T_KAM_HTML_FONT_INVALID 92407 19.27 24.67 16.90 26 RCVD_IN_MSPIKE_H3 78497 12.70 8.94 14.36 27 BAYES_00 76871 10.07 1.01 14.06 28 XM_Body_Dirty_Words 61555 12.90 16.63 11.26 29 TM2_M_URI_OPT_OUT 60120 9.54 6.24 10.99 30 XM_Multi_Part_URI 58177 13.40 19.67 10.64 31 ANY_BOUNCE_MESSAGE 54649 7.06 0.41 9.99 32 BOUNCE_MESSAGE 54648 7.06 0.41 9.99 33 RCVD_IN_MSPIKE_H4 52230 8.47 6.02 9.55 34 TR_XM_DK_Bayes 49819 6.55 0.73 9.11 35 XM_B_Unsub 48496 9.40 10.60 8.87 36 TR_XM_DK_Bayes1 48191 6.34 0.71 8.81 37 XM_Evil_Numbers_Gen 46425 8.60 8.86 8.49 38 LotsOfNums_01 44975 8.86 10.30 8.22 39 TooManyTo_001 42562 7.85 8.00 7.78 40 TR_XM_DK_Bayes2 41316 5.42 0.57 7.56 41 XM_DKIMWhitelistDomains 38922 4.95 0.03 7.12 42 UNPARSEABLE_RELAY 38686 6.89 6.47 7.07 43 BAYES_60 38119 7.42 8.45 6.97 44 RCVD_IN_RP_SAFE 37272 5.78 3.42 6.82 45 XM_SendGrid 35163 6.19 5.65 6.43 46 XM_DK_Undo_02 33756 19.21 48.83 6.17 47 RCVD_IN_RP_CERTIFIED 33638 5.13 2.80 6.15 48 HTML_IMAGE_RATIO_02 33617 6.47 7.20 6.15 49 BAYES_05 33252 4.48 0.83 6.08 50 LOTS_OF_MONEY 31829 7.98 12.90 5.82 51 XMStrtUSub 31486 5.40 4.59 5.76 52 FSL_BULK_SIG 30601 8.72 15.82 5.60 53 IN_ZIMBRA_NJ_WHITELIST 30200 3.85 0.04 5.52 54 RCVD_IN_IADB_LISTED 29028 4.25 1.83 5.31 55 MIME_QP_LONG_LINE 28272 4.40 2.66 5.17 56 XM_H_Long_From01 27875 4.95 4.61 5.10 57 XM_PDF 26974 3.73 0.99 4.93 58 TR_XM_DKIM_Undo 26925 14.90 37.54 4.92 59 TR_XM_UnparsRelay 26821 5.30 6.19 4.91 60 BAYES_40 25807 3.90 2.04 4.72 61 RCVD_IN_IADB_SPF 25241 3.70 1.61 4.62 62 RELAYCOUNTRY_META 25087 10.62 24.33 4.59 63 HTML_IMAGE_RATIO_04 24623 4.49 4.45 4.50 64 XM_B_Phish_Phrases 23775 5.15 6.98 4.35 65 MPART_ALT_DIFF 22873 5.19 7.48 4.18 66 TR_XM_DK_SendGrid 22778 3.93 3.38 4.17 67 RCVD_IN_IADB_SENDERID 22620 3.32 1.47 4.14 68 BAYES_99 22485 15.15 40.21 4.11 69 BOTNET_IPINHOSTNAME 22035 6.87 13.31 4.03 70 RCVD_IN_IADB_DK 21838 3.23 1.49 3.99 71 BAYES_80 21462 5.31 8.45 3.92 72 TR_XM_SpammyWords4 21396 6.25 11.57 3.91 73 XM_B_SpammyWords3 21273 6.39 12.06 3.89 74 T_TooManySym_01 21237 3.26 1.83 3.88 75 BAYES_20 21071 3.15 1.56 3.85 76 BAYES_999 18334 12.37 32.84 3.35 77 XMSexyCombo_05 18329 5.13 9.17 3.35 78 T_REMOTE_IMAGE 18151 4.75 8.00 3.32 79 RCVD_IN_IADB_VOUCHED 17934 2.55 0.91 3.28 80 XMSubMetaSx_00 17328 3.88 5.49 3.17 81 HTML_IMAGE_RATIO_06 17293 3.70 4.93 3.16 82 DKIM_INVALID 16104 3.21 3.80 2.95 83 XMNumbers 15851 3.41 4.56 2.90 84 XM_UncommonTLD01 15777 5.67 12.00 2.89 85 MIME_HTML_ONLY_MULTI 14470 2.52 2.24 2.65 86 TR_XM_PhishingBody 14218 3.37 5.12 2.60 87 URI_NOVOWEL 13864 2.10 1.12 2.54 88 HTML_IMAGE_RATIO_08 13489 2.84 3.68 2.47 89 RCVD_IN_MSPIKE_H5 13073 1.89 0.76 2.39 90 MAILING_LIST_MULTI 12952 2.05 1.33 2.37 91 BAYES_95 12871 3.22 5.18 2.35 92 FROM_EXCESS_BASE64 12738 2.23 2.00 2.33 93 XM_H_Trusted_IP 12569 1.60 0.00 2.30 94 RCVD_IN_IADB_OPTIN 11784 1.69 0.62 2.16 95 TooManyTo_002 11434 1.60 0.49 2.09 96 T_TooManySym_02 10952 1.62 0.75 2.00 97 HTML_MIME_NO_HTML_TAG 10726 3.81 8.00 1.96 98 MIME_HTML_MOSTLY 10647 3.10 5.72 1.95 99 TR_XM_SB_Phish 10486 1.92 1.94 1.92 100 XM_B_SpammyTLD 10410 2.96 5.35 1.90 101 XMSubPhish11 10357 1.87 1.82 1.89 102 TR_DCC_Bayes_99 9928 11.08 32.12 1.82 103 XM_SPF_SoftFail 9823 2.29 3.40 1.80 104 XM_B_Phish66 9500 2.25 3.42 1.74 105 UNTRUSTED_Relay 9256 6.78 18.33 1.69 106 XM_CamelCaseFrm001 9208 1.73 1.83 1.68 107 KHOP_HELO_FCRDNS 8887 3.11 6.47 1.63 108 XM_B_Unsub2 8859 1.73 1.98 1.62 109 XMDiploma_00 8802 1.99 2.84 1.61 110 XM_DK_Undo_01 8772 1.78 2.19 1.60 111 TR_XM_SpammyWords5 8652 2.49 4.55 1.58 112 TR_Symld_Words 8460 1.56 1.60 1.55 113 URI_TRY_3LD 8376 2.10 3.40 1.53 114 BOTNET 8272 5.95 16.02 1.51 115 XMSubNoVowel 8239 1.56 1.69 1.51 116 HELO_NO_DOMAIN 8239 1.37 1.06 1.51 117 HELO_NODOT 8239 1.37 1.07 1.51 118 SUBJ_ALL_CAPS 8159 1.94 2.96 1.49 119 T_FONT_INVIS_NAKED_TO 7879 2.21 3.96 1.44 120 XM_OfRef6 7814 2.36 4.48 1.43 121 TooManyTo_003 7740 1.10 0.38 1.42 122 RELAYCOUNTRY_CA 7670 2.72 5.71 1.40 123 IN_HORDE_ADDRESS_BOOK 7613 0.98 0.06 1.39 124 T_XMDrugObfuBody_14 7532 1.39 1.43 1.38 125 TVD_RCVD_IP 7494 1.15 0.64 1.37 126 INVALID_MSGID 7293 1.12 0.64 1.33 127 T_XMDrugObfuBody_08 7269 1.88 3.12 1.33 128 URI_HEX 7081 1.86 3.15 1.29 129 TO_MALFORMED 6597 0.86 0.06 1.21 130 MSGID_NOFQDN1 6553 0.84 0.02 1.20 131 USER_IN_DEF_DKIM_WL 6468 0.83 0.02 1.18 132 XM_GoogleGroups 6399 0.94 0.41 1.17 133 XMCapTrack 6316 0.89 0.30 1.16 134 XM_B_COVIDMETA 6312 1.44 2.10 1.15 135 TM2_M_VERY_LONG_WORD 5863 1.22 1.56 1.07 136 DKIM_ADSP_CUSTOM_MED 5790 0.96 0.75 1.06 137 TooManyTo_004 5733 0.83 0.33 1.05 138 XMGappySubj_01 5715 0.78 0.17 1.05 139 HELO_MISC_IP 5575 0.80 0.31 1.02 140 CK_HELO_DYNAMIC_SPLIT_IP 5564 0.93 0.73 1.02 141 T_FILL_THIS_FORM_SHORT 5456 1.62 3.04 1.00 142 HTML_FONT_FACE_BAD 5344 0.85 0.56 0.98 143 RELAYCOUNTRY_GB 5298 0.99 1.04 0.97 144 TR_XM_SpammyWords2 4813 5.35 15.49 0.88 145 T_XMHurry_00 4798 2.29 5.51 0.88 146 XM_H_Long_From02 4738 0.83 0.74 0.87 147 XMBSHREFv2 4711 0.68 0.26 0.86 148 TooManyTo_005 4711 0.68 0.27 0.86 149 XM_UB50 4694 2.81 7.23 0.86 150 TR_MSPIKEBAYES00 4629 0.59 0.01 0.85 151 XMBrknScrpt_02 4453 1.54 3.19 0.81 152 XMHTML_After_End 4410 1.01 1.46 0.81 153 T_OBFU_PDF_ATTACH 4251 0.60 0.21 0.78 154 SpammyFromTLD_01 4170 1.90 4.49 0.76 155 XMGenDplmaNmb 4146 1.03 1.66 0.76 156 T_TooManySym_03 4105 0.65 0.41 0.75 157 T_XMDrugObfuBody_00 4096 0.76 0.78 0.75 158 HTTPS_HTTP_MISMATCH 4011 0.71 0.66 0.73 159 XMSubEmpty 3992 0.77 0.87 0.73 160 XMBody_95 3972 0.54 0.11 0.73 161 XM_ProductURIs 3924 0.69 0.63 0.72 162 RCVD_IN_BL_SPAMCOP_NET 3745 3.05 8.41 0.68 163 XMStockSpam_06 3725 0.91 1.42 0.68 164 XMSubMetaSxObfu_03 3690 0.78 1.00 0.67 165 NML_ADSP_CUSTOM_MED 3661 0.65 0.61 0.67 166 FORGED_GMAIL_RCVD 3516 0.64 0.65 0.64 167 TR_MetaPhish_Combo_01 3513 0.78 1.09 0.64 168 XMBody_17 3474 1.82 4.51 0.64 169 TR_LOTS_OF_MONEY3 3460 1.79 4.43 0.63 170 XM_E_Blogspot 3363 0.44 0.05 0.62 171 XM_SPF_Unknown 3332 0.62 0.63 0.61 172 XMSubMetaI_00 3330 0.73 1.02 0.61 173 XMBdyGiftCard01 3248 0.86 1.45 0.59 174 PDS_OTHER_BAD_TLD 3180 1.60 3.90 0.58 175 XM_ShortIntro_01 3085 0.52 0.43 0.56 176 SHORTENED_URL_HREF 3051 0.62 0.76 0.56 177 PLING_QUERY 2922 0.58 0.67 0.53 178 XM_H_PHPMailer 2883 0.50 0.43 0.53 179 XMNoVowels 2828 0.47 0.35 0.52 180 FROM_GOV_DKIM_AU 2800 0.38 0.07 0.51 181 HTML_IMAGE_ONLY_20 2692 0.62 0.90 0.49 182 RCVD_IN_SORBS_DUL 2595 0.43 0.33 0.47 183 TM2_M_BODY_EMPTY 2584 0.34 0.05 0.47 184 XMMoneyMeta_00 2480 0.61 0.98 0.45 185 T_Symld_Words_02 2472 0.62 0.99 0.45 186 NUMERIC_HTTP_ADDR 2466 0.53 0.70 0.45 187 FROM_GOV_SPOOF 2448 0.36 0.15 0.45 188 XMBody_78 2436 0.61 0.99 0.45 189 XMHTMLBadTable_001 2395 0.47 0.54 0.44 190 XM_DIRTYINTL 2353 1.47 3.85 0.43 191 HTML_IMAGE_ONLY_28 2348 0.40 0.34 0.43 192 XM_B_SpammyWords4 2347 0.79 1.61 0.43 193 MISSING_HEADERS 2333 0.58 0.94 0.43 194 HTML_IMAGE_ONLY_32 2294 0.34 0.17 0.42 195 RDNS_DYNAMIC 2281 0.76 1.55 0.42 196 DKIM_ADSP_NXDOMAIN 2234 0.49 0.67 0.41 197 SHORT_HELO_AND_INLINE_IMAGE 2227 0.32 0.12 0.41 198 HTML_TAG_BALANCE_BODY 2216 0.57 0.95 0.41 199 T_TooManySym_04 2114 0.29 0.06 0.39 200 NO_DNS_FOR_FROM 2020 0.55 0.94 0.37 ----------------------------------------------------------------------