Email: 705778 Autolearn: 0 AvgScore: 3.23 AvgScanTime: 1.36 sec Spam: 201353 Autolearn: 0 AvgScore: 13.66 AvgScanTime: 1.50 sec Ham: 504425 Autolearn: 0 AvgScore: -0.93 AvgScanTime: 1.31 sec Time Spent Running SA: 267.28 hours Time Spent Processing Spam: 83.91 hours Time Spent Processing Ham: 183.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 192706 89.41 95.71 86.90 2 DKIM_SIGNED 175527 80.64 87.17 78.03 3 XM_DK_Pass 172287 79.35 85.56 76.88 4 DKIM_VALID 167820 77.25 83.35 74.81 5 RELAYCOUNTRY_US 160330 82.80 79.63 84.07 6 DCC_CHECK 159786 52.54 79.36 41.84 7 XM_B_Unicode 155467 71.53 77.21 69.26 8 XMListUnsubscribeExists 147271 55.86 73.14 48.96 9 XM_B_SpammyWords 145012 55.72 72.02 49.22 10 DKIM_VALID_AU 129886 59.67 64.51 57.73 11 XM_DK_Undo_02 99513 19.78 49.42 7.95 12 TR_XM_DKIM_Undo 83914 15.82 41.68 5.50 13 XM_B_Unicode3 83388 40.65 41.41 40.35 14 XM_B_SpammyWords2 80510 25.75 39.98 20.07 15 LOC_TINY_FONT_1 78277 29.00 38.88 25.05 16 BAYES_50 75628 49.81 37.56 54.70 17 BAYES_99 71962 13.71 35.74 4.92 18 HTML_FONT_LOW_CONTRAST 67987 30.09 33.77 28.63 19 RCVD_IN_MSPIKE_H2 67524 29.52 33.54 27.91 20 DKIM_VALID_EF 62701 31.01 31.14 30.96 21 MIME_HTML_ONLY 61977 24.16 30.78 21.52 22 BAYES_999 57874 10.92 28.74 3.81 23 FVGT_m_MULTI_ODD 57365 24.55 28.49 22.98 24 TR_DCC_Bayes_99 57136 10.03 28.38 2.71 25 T_KAM_HTML_FONT_INVALID 51183 19.77 25.42 17.51 26 XMSubLong 48468 21.31 24.07 20.21 27 RCVD_IN_MSPIKE_WL 45189 29.04 22.44 31.67 28 T_TM2_M_HEADER_IN_MSG 42549 26.43 21.13 28.55 29 XM_Body_Dirty_Words 42120 15.06 20.92 12.72 30 RELAYCOUNTRY_META 41929 9.24 20.82 4.62 31 DCC_CHECK_NEGATIVE 37705 45.44 18.73 56.11 32 BOTNET 36110 6.44 17.93 1.85 33 XM_Multi_Part_URI 29234 12.45 14.52 11.62 34 XM_B_SpammyWords3 28625 7.31 14.22 4.56 35 TR_XM_SpammyWords2 27880 4.49 13.85 0.75 36 LOTS_OF_MONEY 27187 8.13 13.50 5.98 37 BOTNET_IPINHOSTNAME 25517 6.83 12.67 4.50 38 RCVD_IN_MSPIKE_H3 24552 14.64 12.19 15.62 39 UNTRUSTED_Relay 23443 4.56 11.64 1.73 40 XM_UncommonTLD01 23118 5.81 11.48 3.55 41 TR_XM_SpammyWords4 22223 5.96 11.04 3.94 42 XM_B_Unsub 22086 10.23 10.97 9.94 43 XM_Evil_Numbers_Gen 21645 9.68 10.75 9.26 44 MPART_ALT_DIFF 21398 6.23 10.63 4.48 45 HTML_IMAGE_RATIO_02 20067 7.79 9.97 6.93 46 RCVD_IN_BL_SPAMCOP_NET 19937 3.71 9.90 1.24 47 XMSexyCombo_05 19917 6.04 9.89 4.50 48 RCVD_IN_MSPIKE_H4 18428 10.89 9.15 11.58 49 LotsOfNums_01 17048 8.48 8.47 8.48 50 UNPARSEABLE_RELAY 16493 7.87 8.19 7.74 51 FSL_BULK_SIG 16298 6.30 8.09 5.58 52 TR_XM_UnparsRelay 16047 6.47 7.97 5.87 53 MIME_HTML_MOSTLY 15646 3.84 7.77 2.27 54 XM_B_Phish_Phrases 15503 7.55 7.70 7.49 55 XM_H_Long_From01 15381 5.99 7.64 5.33 56 BAYES_80 14397 5.36 7.15 4.65 57 BAYES_60 13575 7.16 6.74 7.33 58 RELAYCOUNTRY_CA 13332 2.91 6.62 1.43 59 XM_SendGrid 13249 6.93 6.58 7.07 60 TooManyTo_001 12970 7.86 6.44 8.42 61 TR_XM_PhishingBody 12581 4.08 6.25 3.21 62 T_REMOTE_IMAGE 12215 4.42 6.07 3.76 63 XMNumbers 11540 3.83 5.73 3.06 64 URIBL_SBL_A 11280 3.06 5.60 2.05 65 XMSubMetaSx_00 11077 3.61 5.50 2.85 66 SpammyFromTLD_01 10832 2.34 5.38 1.13 67 TR_XM_SpammyWords5 10769 2.69 5.35 1.63 68 XM_OfRef6 10747 2.19 5.34 0.94 69 HTML_IMAGE_RATIO_04 10188 5.47 5.06 5.64 70 RCVD_IN_RP_SAFE 9699 7.30 4.82 8.29 71 HTML_MIME_NO_HTML_TAG 9695 2.74 4.81 1.92 72 BOTNET_NORDNS 9686 1.38 4.81 0.01 73 XM_B_SpammyTLD 9679 2.70 4.81 1.86 74 XM_UB50 8831 1.95 4.39 0.98 75 XM_SPF_SoftFail 8613 2.59 4.28 1.91 76 BAYES_95 8272 2.96 4.11 2.50 77 RELAYCOUNTRY_FR 8183 1.34 4.06 0.25 78 XM_DK_Undo_01 8086 2.26 4.02 1.56 79 HDRS_MISSP 8030 1.21 3.99 0.10 80 XMBody_17 8011 1.74 3.98 0.84 81 TM2_M_URI_OPT_OUT 7963 2.61 3.95 2.08 82 DKIM_ADSP_NXDOMAIN 7834 1.32 3.89 0.29 83 HTML_IMAGE_RATIO_06 7720 3.57 3.83 3.47 84 DKIM_INVALID 7707 3.39 3.83 3.22 85 TR_XM_DK_SendGrid 7682 4.27 3.82 4.45 86 RCVD_IN_MSPIKE_BL 7572 1.21 3.76 0.19 87 HTML_IMAGE_ONLY_08 7378 1.12 3.66 0.10 88 HTML_SHORT_LINK_IMG_1 7301 1.05 3.63 0.02 89 HDRS_LCASE_IMGONLY 7251 1.07 3.60 0.05 90 RCVD_IN_RP_CERTIFIED 6984 6.46 3.47 7.65 91 TR_XM_MSPIKECOMBO 6962 1.11 3.46 0.17 92 URI_HEX 6788 2.14 3.37 1.65 93 MIME_HTML_ONLY_MULTI 6718 2.90 3.34 2.73 94 XMStrtUSub 6530 6.71 3.24 8.09 95 XM_B_Phish66 6457 2.29 3.21 1.92 96 BAYES_40 6393 4.95 3.18 5.66 97 HTML_IMAGE_RATIO_08 6260 2.51 3.11 2.27 98 FROM_EXCESS_BASE64 6218 3.14 3.09 3.16 99 T_TooManySym_01 6200 4.10 3.08 4.50 100 XMDiploma_00 6171 1.88 3.06 1.41 101 XM_DIRTYINTL 6091 1.15 3.03 0.41 102 XM_UB99 5964 0.85 2.96 0.00 103 T_XMDrugObfuBody_08 5943 1.78 2.95 1.31 104 URIBL_DBL_SPAM 5862 0.84 2.91 0.02 105 MIME_QP_LONG_LINE 5734 4.52 2.85 5.19 106 TR_XM_MaxBayes 5665 0.83 2.81 0.04 107 XM_B_COVIDMETA 5562 1.40 2.76 0.85 108 XMBrknScrpt_02 5545 1.34 2.75 0.78 109 SpammyFromTLD_02 5517 0.92 2.74 0.20 110 TR_LOTS_OF_MONEY3 5264 1.01 2.61 0.37 111 T_FILL_THIS_FORM_SHORT 5171 1.34 2.57 0.85 112 SUBJ_ALL_CAPS 4914 1.87 2.44 1.64 113 XM_UB999 4893 0.69 2.43 0.00 114 XM_B_SpammyWords4 4858 1.20 2.41 0.72 115 XMBdyGiftCard01 4789 1.27 2.38 0.83 116 BAYES_20 4715 3.46 2.34 3.91 117 RCVD_IN_MSPIKE_L5 4517 0.70 2.24 0.08 118 XM_CamelCaseFrm001 4509 1.90 2.24 1.76 119 TM2_M_VERY_LONG_WORD 4490 1.51 2.23 1.22 120 FORGED_GMAIL_RCVD 4462 1.05 2.22 0.59 121 TR_XM_PHPDW 4425 1.06 2.20 0.61 122 T_XMDrugObfuBody_14 4374 2.03 2.17 1.97 123 HTML_TITLE_SUBJ_DIFF 4358 0.65 2.16 0.05 124 TR_XM_PHPForged 4340 1.03 2.16 0.58 125 TR_XM_FormFill2 4321 1.03 2.15 0.58 126 XM_H_PHPOS 4313 1.02 2.14 0.57 127 XMSubMetaI_00 4292 1.19 2.13 0.82 128 TR_XM_SpammyWords3 4262 0.68 2.12 0.10 129 TR_XM_SB_Phish 4145 1.99 2.06 1.97 130 URI_NOVOWEL 4035 2.64 2.00 2.89 131 RCVD_IN_IADB_LISTED 3995 4.17 1.98 5.04 132 XMSexyCombo_01 3980 0.85 1.98 0.40 133 XMSubPhish11 3851 1.93 1.91 1.93 134 XM_B_Unsub2 3795 1.58 1.88 1.45 135 KHOP_HELO_FCRDNS 3779 1.80 1.88 1.77 136 RCVD_IN_RP_RNBL 3744 0.56 1.86 0.04 137 XM_URI_RBL 3735 0.65 1.85 0.16 138 XMStockSpam_06 3723 1.65 1.85 1.57 139 TR_XM_BayesRelay 3651 0.53 1.81 0.02 140 T_XMHurry_00 3648 1.08 1.81 0.79 141 URI_TRY_3LD 3617 1.60 1.80 1.52 142 PDS_OTHER_BAD_TLD 3605 0.87 1.79 0.50 143 RCVD_IN_IADB_SPF 3529 3.62 1.75 4.37 144 T_XMDrugObfuBody_00 3488 1.02 1.73 0.74 145 XM_OfRef7 3475 0.58 1.73 0.12 146 BAYES_05 3283 2.13 1.63 2.33 147 RCVD_IN_IADB_DK 3273 3.13 1.63 3.73 148 RCVD_IN_IADB_SENDERID 3248 3.25 1.61 3.90 149 XMGenDplmaNmb 3245 0.97 1.61 0.72 150 BAYES_00 3122 10.44 1.55 13.99 151 GOOGLE_DOC_SUSP 3107 0.45 1.54 0.01 152 TR_XM_FormFill 3054 0.45 1.52 0.02 153 RCVD_IN_PSBL 2988 0.47 1.48 0.07 154 HK_RANDOM_REPLYTO 2987 0.55 1.48 0.18 155 RELAYCOUNTRY_GB 2975 1.08 1.48 0.92 156 XMHTML_After_End 2758 1.01 1.37 0.87 157 MAILING_LIST_MULTI 2718 2.21 1.35 2.56 158 HTTPS_HTTP_MISMATCH 2715 0.95 1.35 0.79 159 FROM_SUSPICIOUS_NTLD 2679 0.42 1.33 0.06 160 XMSubject_48 2661 0.41 1.32 0.04 161 URI_PHP_REDIR 2655 0.38 1.32 0.00 162 XMPhish08 2655 0.50 1.32 0.18 163 XM_UB60 2632 0.45 1.31 0.10 164 URIBL_BLACK 2574 0.40 1.28 0.04 165 FROM_SUSPICIOUS_NTLD_FP 2564 0.40 1.27 0.05 166 TR_XM_COVIDMETA4 2545 0.62 1.26 0.36 167 TR_Symld_Words 2510 1.34 1.25 1.37 168 TR_XM_INV_DKIM 2486 0.38 1.23 0.05 169 XM_Body_Obfu01 2340 0.62 1.16 0.40 170 TR_XM_COVIDMETA1 2318 0.53 1.15 0.29 171 UNCLAIMED_MONEY 2285 0.32 1.13 0.00 172 RCVD_IN_MSPIKE_H5 2209 3.51 1.10 4.48 173 XM_H_Long_From02 2200 1.01 1.09 0.98 174 TR_XM_DK_Bayes 2200 7.37 1.09 9.87 175 RELAYCOUNTRY_NL 2182 0.45 1.08 0.19 176 TR_XM_DK_Bayes1 2148 7.08 1.07 9.48 177 XM_UB80 2129 0.32 1.06 0.03 178 NUMERIC_HTTP_ADDR 2097 0.51 1.04 0.29 179 FVGT_m_MULTI_ODD_EMAIL 2096 0.32 1.04 0.04 180 TR_BOTNET_NEGATE 2051 0.55 1.02 0.37 181 XMPhish30 2045 0.78 1.02 0.68 182 RDNS_DYNAMIC 1982 0.65 0.98 0.52 183 TR_Mismatch_TLD_02 1981 0.33 0.98 0.06 184 RELAYCOUNTRY_DE 1970 0.58 0.98 0.43 185 DATE_IN_PAST_12_24 1923 0.31 0.96 0.05 186 XM_ProductURIs 1915 0.95 0.95 0.95 187 HK_RANDOM_FROM 1907 0.36 0.95 0.13 188 ACT_NOW_CAPS 1875 0.34 0.93 0.11 189 RCVD_IN_IADB_VOUCHED 1872 2.52 0.93 3.16 190 TR_XM_DK_Bayes2 1859 6.01 0.92 8.04 191 XM_Body_Dirty_Words_01 1792 0.43 0.89 0.24 192 TR_LOTS_OF_MONEY2 1774 0.36 0.88 0.15 193 T_MONEY_PERCENT 1774 0.36 0.88 0.15 194 TR_XM_RelayPhish 1771 0.31 0.88 0.08 195 FILL_THIS_FORM 1764 0.40 0.88 0.20 196 LongTLD 1745 0.36 0.87 0.16 197 T_Symld_Words_02 1682 0.63 0.84 0.55 198 TR_Sbj_FN_Bdy 1679 0.35 0.83 0.16 199 THIS_AD 1666 0.39 0.83 0.21 200 ALL_TRUSTED 1665 9.22 0.83 12.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 438337 89.41 95.71 86.90 2 RELAYCOUNTRY_US 424066 82.80 79.63 84.07 3 DKIM_SIGNED 393611 80.64 87.17 78.03 4 XM_DK_Pass 387778 79.35 85.56 76.88 5 DKIM_VALID 377364 77.25 83.35 74.81 6 XM_B_Unicode 349389 71.53 77.21 69.26 7 DKIM_VALID_AU 291223 59.67 64.51 57.73 8 DCC_CHECK_NEGATIVE 283014 45.44 18.73 56.11 9 BAYES_50 275932 49.81 37.56 54.70 10 XM_B_SpammyWords 248263 55.72 72.02 49.22 11 XMListUnsubscribeExists 246952 55.86 73.14 48.96 12 DCC_CHECK 211065 52.54 79.36 41.84 13 XM_B_Unicode3 203516 40.65 41.41 40.35 14 RCVD_IN_MSPIKE_WL 159765 29.04 22.44 31.67 15 DKIM_VALID_EF 156171 31.01 31.14 30.96 16 HTML_FONT_LOW_CONTRAST 144408 30.09 33.77 28.63 17 T_TM2_M_HEADER_IN_MSG 143997 26.43 21.13 28.55 18 RCVD_IN_MSPIKE_H2 140797 29.52 33.54 27.91 19 LOC_TINY_FONT_1 126381 29.00 38.88 25.05 20 FVGT_m_MULTI_ODD 115931 24.55 28.49 22.98 21 MIME_HTML_ONLY 108537 24.16 30.78 21.52 22 XMSubLong 101951 21.31 24.07 20.21 23 XM_B_SpammyWords2 101220 25.75 39.98 20.07 24 T_KAM_HTML_FONT_INVALID 88346 19.77 25.42 17.51 25 RCVD_IN_MSPIKE_H3 78769 14.64 12.19 15.62 26 BAYES_00 70581 10.44 1.55 13.99 27 XM_Body_Dirty_Words 64155 15.06 20.92 12.72 28 XM_DKIMWhitelistDomains 63670 9.04 0.07 12.62 29 ALL_TRUSTED 63433 9.22 0.83 12.58 30 XM_Multi_Part_URI 58635 12.45 14.52 11.62 31 RCVD_IN_MSPIKE_H4 58411 10.89 9.15 11.58 32 XM_B_Unsub 50125 10.23 10.97 9.94 33 TR_XM_DK_Bayes 49785 7.37 1.09 9.87 34 TR_XM_DK_Bayes1 47798 7.08 1.07 9.48 35 XM_Evil_Numbers_Gen 46692 9.68 10.75 9.26 36 LotsOfNums_01 42798 8.48 8.47 8.48 37 TooManyTo_001 42481 7.86 6.44 8.42 38 RCVD_IN_RP_SAFE 41826 7.30 4.82 8.29 39 XMStrtUSub 40814 6.71 3.24 8.09 40 TR_XM_DK_Bayes2 40549 6.01 0.92 8.04 41 XM_DK_Undo_02 40083 19.78 49.42 7.95 42 UNPARSEABLE_RELAY 39027 7.87 8.19 7.74 43 RCVD_IN_RP_CERTIFIED 38601 6.46 3.47 7.65 44 XM_B_Phish_Phrases 37803 7.55 7.70 7.49 45 BAYES_60 36976 7.16 6.74 7.33 46 XM_SendGrid 35658 6.93 6.58 7.07 47 HTML_IMAGE_RATIO_02 34938 7.79 9.97 6.93 48 LOTS_OF_MONEY 30170 8.13 13.50 5.98 49 TR_XM_UnparsRelay 29594 6.47 7.97 5.87 50 BAYES_40 28574 4.95 3.18 5.66 51 HTML_IMAGE_RATIO_04 28427 5.47 5.06 5.64 52 FSL_BULK_SIG 28139 6.30 8.09 5.58 53 IN_ZIMBRA_NJ_WHITELIST 28038 3.99 0.06 5.56 54 TR_XM_DKIM_Undo 27721 15.82 41.68 5.50 55 XM_H_Long_From01 26862 5.99 7.64 5.33 56 MIME_QP_LONG_LINE 26188 4.52 2.85 5.19 57 RCVD_IN_IADB_LISTED 25418 4.17 1.98 5.04 58 BAYES_99 24796 13.71 35.74 4.92 59 BAYES_80 23452 5.36 7.15 4.65 60 RELAYCOUNTRY_META 23319 9.24 20.82 4.62 61 XM_B_SpammyWords3 22987 7.31 14.22 4.56 62 BOTNET_IPINHOSTNAME 22703 6.83 12.67 4.50 63 T_TooManySym_01 22702 4.10 3.08 4.50 64 XMSexyCombo_05 22680 6.04 9.89 4.50 65 XM_PDF 22645 3.44 0.82 4.49 66 MPART_ALT_DIFF 22589 6.23 10.63 4.48 67 RCVD_IN_MSPIKE_H5 22585 3.51 1.10 4.48 68 TR_XM_DK_SendGrid 22431 4.27 3.82 4.45 69 RCVD_IN_IADB_SPF 22053 3.62 1.75 4.37 70 TR_XM_SpammyWords4 19854 5.96 11.04 3.94 71 BAYES_20 19723 3.46 2.34 3.91 72 RCVD_IN_IADB_SENDERID 19679 3.25 1.61 3.90 73 BAYES_999 19230 10.92 28.74 3.81 74 T_REMOTE_IMAGE 18976 4.42 6.07 3.76 75 RCVD_IN_IADB_DK 18806 3.13 1.63 3.73 76 XM_UncommonTLD01 17918 5.81 11.48 3.55 77 HTML_IMAGE_RATIO_06 17506 3.57 3.83 3.47 78 DKIM_INVALID 16247 3.39 3.83 3.22 79 TR_XM_PhishingBody 16215 4.08 6.25 3.21 80 FROM_EXCESS_BASE64 15962 3.14 3.09 3.16 81 RCVD_IN_IADB_VOUCHED 15938 2.52 0.93 3.16 82 XMNumbers 15460 3.83 5.73 3.06 83 URI_NOVOWEL 14579 2.64 2.00 2.89 84 XMSubMetaSx_00 14378 3.61 5.50 2.85 85 MIME_HTML_ONLY_MULTI 13751 2.90 3.34 2.73 86 TR_DCC_Bayes_99 13673 10.03 28.38 2.71 87 MAILING_LIST_MULTI 12891 2.21 1.35 2.56 88 BAYES_95 12610 2.96 4.11 2.50 89 TooManyTo_002 11895 1.88 0.67 2.36 90 BAYES_05 11768 2.13 1.63 2.33 91 XM_H_Trusted_IP 11484 1.63 0.00 2.28 92 HTML_IMAGE_RATIO_08 11473 2.51 3.11 2.27 93 MIME_HTML_MOSTLY 11471 3.84 7.77 2.27 94 T_TooManySym_02 11006 1.74 0.63 2.18 95 RCVD_IN_IADB_OPTIN 10546 1.67 0.60 2.09 96 TM2_M_URI_OPT_OUT 10469 2.61 3.95 2.08 97 URIBL_SBL_A 10344 3.06 5.60 2.05 98 HELO_NO_DOMAIN 10141 1.61 0.62 2.01 99 HELO_NODOT 10141 1.61 0.62 2.01 100 T_XMDrugObfuBody_14 9948 2.03 2.17 1.97 101 TR_XM_SB_Phish 9935 1.99 2.06 1.97 102 XMSubPhish11 9758 1.93 1.91 1.93 103 XM_B_Phish66 9696 2.29 3.21 1.92 104 HTML_MIME_NO_HTML_TAG 9670 2.74 4.81 1.92 105 XM_SPF_SoftFail 9651 2.59 4.28 1.91 106 XM_B_SpammyTLD 9390 2.70 4.81 1.86 107 BOTNET 9342 6.44 17.93 1.85 108 ANY_BOUNCE_MESSAGE 9215 1.42 0.41 1.83 109 BOUNCE_MESSAGE 9214 1.42 0.41 1.83 110 KHOP_HELO_FCRDNS 8907 1.80 1.88 1.77 111 XM_CamelCaseFrm001 8901 1.90 2.24 1.76 112 UNTRUSTED_Relay 8741 4.56 11.64 1.73 113 TooManyTo_003 8365 1.35 0.57 1.66 114 URI_HEX 8328 2.14 3.37 1.65 115 SUBJ_ALL_CAPS 8259 1.87 2.44 1.64 116 TR_XM_SpammyWords5 8228 2.69 5.35 1.63 117 XMStockSpam_06 7906 1.65 1.85 1.57 118 XM_DK_Undo_01 7859 2.26 4.02 1.56 119 TVD_RCVD_IP 7834 1.16 0.19 1.55 120 IN_HORDE_ADDRESS_BOOK 7731 1.11 0.06 1.53 121 URI_TRY_3LD 7686 1.60 1.80 1.52 122 INVALID_MSGID 7640 1.19 0.36 1.51 123 USER_IN_DEF_DKIM_WL 7579 1.08 0.03 1.50 124 XM_B_Unsub2 7329 1.58 1.88 1.45 125 RELAYCOUNTRY_CA 7191 2.91 6.62 1.43 126 XMDiploma_00 7105 1.88 3.06 1.41 127 TR_Symld_Words 6928 1.34 1.25 1.37 128 XMCapTrack 6616 1.06 0.44 1.31 129 T_XMDrugObfuBody_08 6609 1.78 2.95 1.31 130 MSGID_NOFQDN1 6536 0.94 0.03 1.30 131 TooManyTo_004 6447 1.06 0.50 1.28 132 TO_MALFORMED 6432 0.91 0.01 1.28 133 RCVD_IN_BL_SPAMCOP_NET 6270 3.71 9.90 1.24 134 HELO_MISC_IP 6243 0.95 0.22 1.24 135 TM2_M_VERY_LONG_WORD 6140 1.51 2.23 1.22 136 SpammyFromTLD_01 5686 2.34 5.38 1.13 137 TooManyTo_005 5557 0.91 0.44 1.10 138 XM_GoogleGroups 5547 0.93 0.49 1.10 139 DKIM_ADSP_CUSTOM_MED 5148 0.95 0.78 1.02 140 XMBSHREFv2 5083 0.79 0.24 1.01 141 TR_MSPIKEBAYES00 4978 0.71 0.02 0.99 142 XM_UB50 4965 1.95 4.39 0.98 143 XM_H_Long_From02 4954 1.01 1.09 0.98 144 XMSubNoVowel 4896 0.87 0.62 0.97 145 XM_ProductURIs 4815 0.95 0.95 0.95 146 XM_OfRef6 4743 2.19 5.34 0.94 147 HTML_FONT_FACE_BAD 4719 0.88 0.75 0.94 148 RELAYCOUNTRY_GB 4627 1.08 1.48 0.92 149 XMBody_95 4581 0.69 0.14 0.91 150 T_OBFU_PDF_ATTACH 4508 0.67 0.10 0.89 151 XMHTML_After_End 4385 1.01 1.37 0.87 152 XM_B_COVIDMETA 4302 1.40 2.76 0.85 153 T_FILL_THIS_FORM_SHORT 4288 1.34 2.57 0.85 154 XMBody_17 4242 1.74 3.98 0.84 155 XMBdyGiftCard01 4174 1.27 2.38 0.83 156 XMGappySubj_01 4154 0.64 0.19 0.82 157 XMSubMetaI_00 4133 1.19 2.13 0.82 158 T_XMHurry_00 3965 1.08 1.81 0.79 159 HTTPS_HTTP_MISMATCH 3963 0.95 1.35 0.79 160 XMBrknScrpt_02 3911 1.34 2.75 0.78 161 TR_XM_SpammyWords2 3806 4.49 13.85 0.75 162 T_XMDrugObfuBody_00 3730 1.02 1.73 0.74 163 XM_B_SpammyWords4 3633 1.20 2.41 0.72 164 XMGenDplmaNmb 3610 0.97 1.61 0.72 165 NML_ADSP_CUSTOM_MED 3482 0.66 0.59 0.69 166 PLING_QUERY 3479 0.66 0.60 0.69 167 XMPhish30 3425 0.78 1.02 0.68 168 TVD_SPACE_RATIO 3321 0.49 0.06 0.66 169 XM_E_Blogspot 3178 0.47 0.07 0.63 170 MISSING_HEADERS 3172 0.56 0.38 0.63 171 XM_RXBody 3160 0.56 0.41 0.63 172 TR_XM_PHPDW 3085 1.06 2.20 0.61 173 XM_SPF_Unknown 3083 0.62 0.63 0.61 174 TR_MetaPhish_Combo_01 2996 0.64 0.75 0.59 175 XM_ShortIntro_01 2993 0.52 0.35 0.59 176 FORGED_GMAIL_RCVD 2970 1.05 2.22 0.59 177 TR_XM_FormFill2 2942 1.03 2.15 0.58 178 TR_XM_PHPForged 2906 1.03 2.16 0.58 179 XM_H_PHPOS 2865 1.02 2.14 0.57 180 T_TooManySym_03 2862 0.49 0.29 0.57 181 XM_H_PHPMailer 2794 0.55 0.55 0.55 182 T_Symld_Words_02 2793 0.63 0.84 0.55 183 RCVD_IN_SORBS_DUL 2756 0.43 0.14 0.55 184 FROM_GOV_DKIM_AU 2741 0.41 0.08 0.54 185 SHORT_HELO_AND_INLINE_IMAGE 2710 0.40 0.06 0.54 186 XMHTMLBadTable_001 2664 0.55 0.60 0.53 187 RDNS_DYNAMIC 2615 0.65 0.98 0.52 188 XMMoneyMeta_00 2595 0.53 0.56 0.51 189 PDS_OTHER_BAD_TLD 2525 0.87 1.79 0.50 190 XMNoVowels 2497 0.45 0.34 0.50 191 TM2_M_BODY_EMPTY 2428 0.36 0.05 0.48 192 HTML_IMAGE_ONLY_20 2424 0.39 0.16 0.48 193 HTML_IMAGE_ONLY_32 2359 0.43 0.33 0.47 194 XM_S_SpammyWords 2329 0.55 0.77 0.46 195 TR_XM_Spammywords 2329 0.55 0.77 0.46 196 DIET_1 2319 0.53 0.71 0.46 197 TM2_M_A_HREF_HREF 2316 0.56 0.81 0.46 198 RELAYCOUNTRY_DE 2153 0.58 0.98 0.43 199 XMLngstWrd_00 2114 0.43 0.44 0.42 200 HTML_IMAGE_ONLY_28 2081 0.47 0.62 0.41 ----------------------------------------------------------------------