Email: 518405 Autolearn: 0 AvgScore: 2.55 AvgScanTime: 1.29 sec Spam: 137612 Autolearn: 0 AvgScore: 14.47 AvgScanTime: 1.52 sec Ham: 380793 Autolearn: 0 AvgScore: -1.76 AvgScanTime: 1.21 sec Time Spent Running SA: 186.42 hours Time Spent Processing Spam: 58.08 hours Time Spent Processing Ham: 128.34 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 130674 87.76 94.96 85.15 2 DKIM_SIGNED 113880 74.14 82.75 71.02 3 XM_DK_Pass 107434 71.86 78.07 69.61 4 DKIM_VALID 105817 69.90 76.90 67.38 5 DCC_CHECK 105768 48.52 76.86 38.27 6 RELAYCOUNTRY_US 97752 78.14 71.03 80.71 7 XM_B_Unicode 95935 66.71 69.71 65.63 8 XM_B_SpammyWords 88438 50.33 64.27 45.30 9 XMListUnsubscribeExists 86441 48.26 62.82 42.99 10 DKIM_VALID_AU 79835 53.24 58.01 51.51 11 XM_DK_Undo_02 58045 16.89 42.18 7.76 12 BAYES_50 53306 50.55 38.74 54.82 13 XM_B_Unicode3 51521 37.74 37.44 37.86 14 XM_B_SpammyWords2 47668 22.33 34.64 17.88 15 LOC_TINY_FONT_1 46058 24.55 33.47 21.33 16 DKIM_VALID_EF 43449 29.44 31.57 28.68 17 TR_XM_DKIM_Undo 43394 12.97 31.53 6.26 18 MIME_HTML_ONLY 42141 22.53 30.62 19.61 19 BAYES_99 41666 12.83 30.28 6.52 20 HTML_FONT_LOW_CONTRAST 41004 26.15 29.80 24.84 21 T_KAM_HTML_FONT_INVALID 40347 19.86 29.32 16.44 22 RCVD_IN_MSPIKE_H2 38763 24.79 28.17 23.57 23 FVGT_m_MULTI_ODD 34170 22.66 24.83 21.88 24 RELAYCOUNTRY_META 34000 9.94 24.71 4.60 25 TR_DCC_Bayes_99 32143 8.81 23.36 3.56 26 BAYES_999 31468 9.90 22.87 5.21 27 DCC_CHECK_NEGATIVE 31244 50.86 22.70 61.03 28 XMSubLong 31200 21.06 22.67 20.48 29 UNTRUSTED_Relay 29319 6.88 21.31 1.66 30 T_TM2_M_HEADER_IN_MSG 28547 29.52 20.74 32.69 31 BOTNET 28092 6.38 20.41 1.31 32 FSL_BULK_SIG 24961 9.97 18.14 7.01 33 XM_Body_Dirty_Words 24915 12.80 18.11 10.88 34 RCVD_IN_MSPIKE_WL 24224 26.56 17.60 29.80 35 XM_UncommonTLD01 23709 7.13 17.23 3.48 36 XM_Multi_Part_URI 20270 11.36 14.73 10.14 37 MPART_ALT_DIFF 18495 7.83 13.44 5.80 38 BOTNET_IPINHOSTNAME 18175 6.33 13.21 3.85 39 XM_B_Unsub 17459 10.22 12.69 9.33 40 LOTS_OF_MONEY 15503 7.76 11.27 6.49 41 XM_B_SpammyWords3 15231 6.11 11.07 4.31 42 MIME_HTML_MOSTLY 14692 4.65 10.68 2.47 43 BAYES_80 14064 6.04 10.22 4.53 44 TR_XM_SpammyWords2 14031 3.72 10.20 1.37 45 RCVD_IN_BL_SPAMCOP_NET 13974 3.15 10.15 0.62 46 UNPARSEABLE_RELAY 13956 7.70 10.14 6.82 47 TR_XM_SpammyWords4 13888 5.88 10.09 4.36 48 XMSexyCombo_05 13696 5.18 9.95 3.46 49 TR_XM_UnparsRelay 13695 6.78 9.95 5.64 50 RCVD_IN_MSPIKE_BL 13674 2.89 9.94 0.34 51 RCVD_IN_MSPIKE_H3 13132 13.44 9.54 14.84 52 XM_Evil_Numbers_Gen 11899 8.35 8.65 8.24 53 HTML_MIME_NO_HTML_TAG 11573 3.86 8.41 2.21 54 SpammyFromTLD_01 11380 2.77 8.27 0.78 55 BAYES_60 11283 8.50 8.20 8.61 56 LotsOfNums_01 10342 8.23 7.52 8.48 57 TR_XM_MSPIKECOMBO 10099 2.17 7.34 0.30 58 RCVD_IN_MSPIKE_H4 9730 10.00 7.07 11.06 59 XM_SendGrid 9426 5.97 6.85 5.65 60 HTML_IMAGE_RATIO_02 9323 6.33 6.77 6.16 61 XMSubMetaSx_00 9151 4.72 6.65 4.02 62 SpammyFromTLD_02 9113 1.90 6.62 0.19 63 TR_XM_PhishingBody 8405 4.02 6.11 3.27 64 XM_B_Phish_Phrases 8380 6.17 6.09 6.20 65 BAYES_95 8110 3.82 5.89 3.07 66 DKIM_INVALID 8063 4.24 5.86 3.65 67 XM_H_Long_From01 8031 4.93 5.84 4.60 68 XM_UB50 8014 2.36 5.82 1.11 69 RCVD_IN_MSPIKE_L5 7673 1.55 5.58 0.09 70 T_REMOTE_IMAGE 6837 3.82 4.97 3.41 71 TooManyTo_001 6797 7.91 4.94 8.98 72 XM_B_SpammyTLD 6633 2.63 4.82 1.84 73 RELAYCOUNTRY_FR 6438 1.49 4.68 0.33 74 RELAYCOUNTRY_CA 6348 2.13 4.61 1.23 75 XMStrtUSub 6238 6.50 4.53 7.21 76 XM_UB99 6191 1.20 4.50 0.00 77 TR_XM_SpammyWords3 6160 1.38 4.48 0.26 78 XMNumbers 5883 3.80 4.28 3.63 79 TR_Sbj_FN_Bdy 5868 1.24 4.26 0.15 80 BODY_EMPTY 5852 1.14 4.25 0.02 81 XM_SPF_SoftFail 5844 2.74 4.25 2.19 82 RCVD_IN_RP_RNBL 5755 1.13 4.18 0.02 83 XMSubEmpty 5660 1.28 4.11 0.26 84 BOTNET_NORDNS 5641 1.10 4.10 0.01 85 XMNoSubject 5531 1.13 4.02 0.09 86 MISSING_SUBJECT 5531 1.13 4.02 0.09 87 URIBL_SBL_A 5467 1.24 3.97 0.25 88 RCVD_IN_PSBL 5342 1.07 3.88 0.05 89 XM_B_Phish66 5115 2.50 3.72 2.07 90 MIME_QP_LONG_LINE 5094 4.45 3.70 4.72 91 KHOP_HELO_FCRDNS 5020 2.35 3.65 1.88 92 URI_PHP_REDIR 4824 0.93 3.51 0.00 93 TR_XM_DK_SendGrid 4801 3.51 3.49 3.52 94 TM2_M_URI_OPT_OUT 4725 3.05 3.43 2.91 95 HTML_IMAGE_RATIO_04 4717 4.99 3.43 5.55 96 PDS_OTHER_BAD_TLD 4564 1.08 3.32 0.28 97 RCVD_IN_RP_SAFE 4520 6.31 3.28 7.41 98 XM_UB80 4492 0.89 3.26 0.04 99 MIME_HTML_ONLY_MULTI 4334 3.74 3.15 3.96 100 TR_XM_SpammyWords5 4095 1.97 2.98 1.61 101 T_XMDrugObfuBody_08 4076 2.15 2.96 1.85 102 TR_XM_SB_Phish 3983 2.29 2.89 2.08 103 XM_UB999 3975 0.77 2.89 0.00 104 HTML_IMAGE_RATIO_06 3967 3.94 2.88 4.32 105 XMSubPhish11 3820 2.24 2.78 2.05 106 HELO_NODOT 3799 2.34 2.76 2.19 107 HELO_NO_DOMAIN 3789 2.34 2.75 2.19 108 XM_UB60 3781 0.82 2.75 0.13 109 BODY_URI_ONLY 3700 0.72 2.69 0.01 110 MISSING_HEADERS 3659 1.10 2.66 0.53 111 T_HTML_TAG_BALANCE_CENTER 3653 0.79 2.65 0.11 112 RCVD_IN_MSPIKE_ZBI 3575 0.72 2.60 0.04 113 XM_DIRTYINTL 3501 0.93 2.54 0.35 114 RCVD_IN_RP_CERTIFIED 3498 5.63 2.54 6.75 115 XM_OfRef6 3483 1.49 2.53 1.12 116 XMBody_17 3443 0.99 2.50 0.44 117 HTML_IMAGE_ONLY_08 3370 0.75 2.45 0.13 118 T_XMDrugObfuBody_14 3327 2.42 2.42 2.42 119 HTML_IMAGE_RATIO_08 3298 2.15 2.40 2.06 120 XM_UB95 3297 0.64 2.40 0.01 121 XM_B_COVIDMETA 3251 1.14 2.36 0.70 122 T_TooManySym_01 3225 4.79 2.34 5.67 123 HTML_FONT_SIZE_LARGE 3181 0.70 2.31 0.12 124 BAYES_00 3167 8.46 2.30 10.68 125 RELAYCOUNTRY_IN 3163 0.69 2.30 0.11 126 URIBL_DBL_SPAM 3162 0.61 2.30 0.00 127 RCVD_IN_IADB_LISTED 3142 4.07 2.28 4.72 128 REPLYTO_WITHOUT_TO_CC 3084 0.62 2.24 0.03 129 XM_B_Unsub2 3071 1.59 2.23 1.36 130 TR_XM_COVIDMETA4 3069 0.89 2.23 0.41 131 XM_ShortIntro_01 2922 1.06 2.12 0.68 132 GOOG_STO_IMG_HTML 2914 0.56 2.12 0.00 133 TM2_M_VERY_LONG_WORD 2894 1.45 2.10 1.22 134 XMDiploma_00 2860 1.49 2.08 1.28 135 TR_XM_PHPDW 2837 0.83 2.06 0.39 136 RELAYCOUNTRY_NG_I 2822 0.54 2.05 0.00 137 RCVD_IN_IADB_SPF 2816 3.53 2.05 4.07 138 TR_Symld_Words 2800 1.76 2.03 1.66 139 MIXED_HREF_CASE 2785 0.54 2.02 0.00 140 XM_DK_Undo_01 2773 1.76 2.02 1.67 141 BAYES_40 2730 4.21 1.98 5.02 142 XM_CamelCaseFrm001 2702 1.73 1.96 1.64 143 TR_XM_PHPForged 2658 0.76 1.93 0.34 144 RCVD_IN_IADB_SENDERID 2636 3.17 1.92 3.62 145 MAILING_LIST_MULTI 2627 2.80 1.91 3.12 146 RCVD_IN_IADB_DK 2619 3.08 1.90 3.50 147 TR_XM_FormFill2 2600 0.75 1.89 0.34 148 XM_H_PHPOS 2591 0.74 1.88 0.33 149 XM_B_SpammyWords4 2587 0.86 1.88 0.50 150 ALL_TRUSTED 2529 12.35 1.84 16.15 151 XM_URI_RBL 2503 0.57 1.82 0.11 152 XMSubNoVowel 2495 1.62 1.81 1.55 153 MIXED_FONT_CASE 2454 0.48 1.78 0.01 154 MIXED_IMG_CASE 2440 0.47 1.77 0.01 155 BAYES_20 2382 3.63 1.73 4.31 156 URI_HEX 2371 1.67 1.72 1.65 157 T_XMDrugObfuBody_00 2338 0.93 1.70 0.65 158 TR_XM_COVIDMETA1 2330 0.70 1.69 0.34 159 RELAYCOUNTRY_GB 2318 1.14 1.68 0.95 160 TR_Mismatch_TLD_02 2316 0.50 1.68 0.07 161 XMBrknScrpt_02 2309 1.19 1.68 1.02 162 XMStockSpam_06 2257 1.25 1.64 1.11 163 FROM_EXCESS_BASE64 2195 2.28 1.60 2.53 164 URI_NOVOWEL 2189 2.27 1.59 2.51 165 XMSexyCombo_01 2144 1.06 1.56 0.88 166 URIBL_BLACK 2025 0.42 1.47 0.03 167 TR_MetaPhish_Combo_01 2003 0.98 1.46 0.81 168 T_FILL_THIS_FORM_SHORT 1991 1.02 1.45 0.87 169 TR_XM_BayesRelay 1985 0.39 1.44 0.01 170 LUCRATIVE 1981 0.38 1.44 0.00 171 URI_NO_WWW_BIZ_CGI 1958 0.39 1.42 0.01 172 RDNS_DYNAMIC 1937 0.69 1.41 0.43 173 SUBJ_ALL_CAPS 1867 1.46 1.36 1.49 174 T_XMHurry_00 1866 0.66 1.36 0.40 175 XMGenDplmaNmb 1829 0.93 1.33 0.78 176 RELAYCOUNTRY_CN 1784 0.41 1.30 0.09 177 XM_PDF 1749 4.22 1.27 5.29 178 XMBdyGiftCard01 1736 0.81 1.26 0.64 179 XMSubMetaI_00 1700 0.82 1.24 0.67 180 TR_XM_MaxBayes 1696 0.33 1.23 0.00 181 PDS_RDNS_DYNAMIC_FP 1692 0.36 1.23 0.04 182 RELAYCOUNTRY_RU 1689 0.36 1.23 0.04 183 HTTPS_HTTP_MISMATCH 1688 0.88 1.23 0.76 184 URI_TRY_3LD 1627 0.99 1.18 0.92 185 XM_Body_Dirty_Words_01 1588 0.41 1.15 0.14 186 USER_IN_DEF_DKIM_WL 1587 8.50 1.15 11.16 187 GOOGLE_DOC_SUSP 1566 0.30 1.14 0.00 188 TR_XM_DocuGoogle 1561 0.30 1.13 0.00 189 RCVD_IN_MSPIKE_L4 1554 0.41 1.13 0.15 190 NO_DNS_FOR_FROM 1552 0.45 1.13 0.21 191 XMHTML_After_End 1543 1.12 1.12 1.12 192 TR_XM_MaxWHORU 1512 0.43 1.10 0.19 193 XM_S_ServInvoice 1500 0.29 1.09 0.00 194 FROM_SUSPICIOUS_NTLD 1475 0.31 1.07 0.04 195 RELAYCOUNTRY_DE 1444 0.56 1.05 0.39 196 XM_BadFromFormat 1439 0.39 1.05 0.15 197 FROM_SUSPICIOUS_NTLD_FP 1433 0.30 1.04 0.03 198 DKIM_ADSP_CUSTOM_MED 1420 1.04 1.03 1.04 199 ANY_BOUNCE_MESSAGE 1417 2.27 1.03 2.71 200 BOUNCE_MESSAGE 1413 2.27 1.03 2.71 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 324255 87.76 94.96 85.15 2 RELAYCOUNTRY_US 307352 78.14 71.03 80.71 3 DKIM_SIGNED 270453 74.14 82.75 71.02 4 XM_DK_Pass 265082 71.86 78.07 69.61 5 DKIM_VALID 256560 69.90 76.90 67.38 6 XM_B_Unicode 249896 66.71 69.71 65.63 7 DCC_CHECK_NEGATIVE 232394 50.86 22.70 61.03 8 BAYES_50 208756 50.55 38.74 54.82 9 DKIM_VALID_AU 196157 53.24 58.01 51.51 10 XM_B_SpammyWords 172497 50.33 64.27 45.30 11 XMListUnsubscribeExists 163717 48.26 62.82 42.99 12 DCC_CHECK 145740 48.52 76.86 38.27 13 XM_B_Unicode3 144150 37.74 37.44 37.86 14 T_TM2_M_HEADER_IN_MSG 124484 29.52 20.74 32.69 15 RCVD_IN_MSPIKE_WL 113472 26.56 17.60 29.80 16 DKIM_VALID_EF 109193 29.44 31.57 28.68 17 HTML_FONT_LOW_CONTRAST 94576 26.15 29.80 24.84 18 RCVD_IN_MSPIKE_H2 89760 24.79 28.17 23.57 19 FVGT_m_MULTI_ODD 83312 22.66 24.83 21.88 20 LOC_TINY_FONT_1 81219 24.55 33.47 21.33 21 XMSubLong 77991 21.06 22.67 20.48 22 MIME_HTML_ONLY 74663 22.53 30.62 19.61 23 XM_B_SpammyWords2 68080 22.33 34.64 17.88 24 T_KAM_HTML_FONT_INVALID 62588 19.86 29.32 16.44 25 ALL_TRUSTED 61482 12.35 1.84 16.15 26 RCVD_IN_MSPIKE_H3 56519 13.44 9.54 14.84 27 USER_IN_DEF_DKIM_WL 42493 8.50 1.15 11.16 28 RCVD_IN_MSPIKE_H4 42131 10.00 7.07 11.06 29 XM_Body_Dirty_Words 41446 12.80 18.11 10.88 30 BAYES_00 40680 8.46 2.30 10.68 31 XM_Multi_Part_URI 38627 11.36 14.73 10.14 32 XM_DKIMWhitelistDomains 36942 7.15 0.09 9.70 33 XM_B_Unsub 35537 10.22 12.69 9.33 34 TooManyTo_001 34204 7.91 4.94 8.98 35 BAYES_60 32796 8.50 8.20 8.61 36 LotsOfNums_01 32298 8.23 7.52 8.48 37 XM_Evil_Numbers_Gen 31390 8.35 8.65 8.24 38 XM_DK_Undo_02 29532 16.89 42.18 7.76 39 RCVD_IN_RP_SAFE 28207 6.31 3.28 7.41 40 XMStrtUSub 27461 6.50 4.53 7.21 41 FSL_BULK_SIG 26702 9.97 18.14 7.01 42 UNPARSEABLE_RELAY 25974 7.70 10.14 6.82 43 RCVD_IN_RP_CERTIFIED 25706 5.63 2.54 6.75 44 BAYES_99 24841 12.83 30.28 6.52 45 LOTS_OF_MONEY 24704 7.76 11.27 6.49 46 TR_XM_DKIM_Undo 23855 12.97 31.53 6.26 47 XM_B_Phish_Phrases 23615 6.17 6.09 6.20 48 HTML_IMAGE_RATIO_02 23475 6.33 6.77 6.16 49 TR_XM_DK_Bayes 23129 4.63 0.62 6.07 50 TR_XM_DK_Bayes1 22290 4.46 0.60 5.85 51 MPART_ALT_DIFF 22077 7.83 13.44 5.80 52 T_TooManySym_01 21584 4.79 2.34 5.67 53 XM_SendGrid 21515 5.97 6.85 5.65 54 TR_XM_UnparsRelay 21464 6.78 9.95 5.64 55 HTML_IMAGE_RATIO_04 21126 4.99 3.43 5.55 56 XM_PDF 20140 4.22 1.27 5.29 57 XM_H_Trusted_IP 20140 3.88 0.00 5.29 58 BAYES_999 19841 9.90 22.87 5.21 59 IN_ZIMBRA_NJ_WHITELIST 19774 3.83 0.05 5.19 60 TR_XM_DK_Bayes2 19147 3.82 0.48 5.03 61 BAYES_40 19119 4.21 1.98 5.02 62 MIME_QP_LONG_LINE 17979 4.45 3.70 4.72 63 RCVD_IN_IADB_LISTED 17957 4.07 2.28 4.72 64 RELAYCOUNTRY_META 17516 9.94 24.71 4.60 65 XM_H_Long_From01 17510 4.93 5.84 4.60 66 BAYES_80 17232 6.04 10.22 4.53 67 TR_XM_SpammyWords4 16617 5.88 10.09 4.36 68 HTML_IMAGE_RATIO_06 16453 3.94 2.88 4.32 69 XM_B_SpammyWords3 16427 6.11 11.07 4.31 70 BAYES_20 16414 3.63 1.73 4.31 71 RCVD_IN_IADB_SPF 15481 3.53 2.05 4.07 72 XMSubMetaSx_00 15298 4.72 6.65 4.02 73 MIME_HTML_ONLY_MULTI 15062 3.74 3.15 3.96 74 RCVD_IN_MSPIKE_H5 14822 3.12 0.99 3.89 75 BOTNET_IPINHOSTNAME 14660 6.33 13.21 3.85 76 DKIM_INVALID 13893 4.24 5.86 3.65 77 XMNumbers 13823 3.80 4.28 3.63 78 RCVD_IN_IADB_SENDERID 13794 3.17 1.92 3.62 79 TR_DCC_Bayes_99 13551 8.81 23.36 3.56 80 TR_XM_DK_SendGrid 13420 3.51 3.49 3.52 81 RCVD_IN_IADB_DK 13335 3.08 1.90 3.50 82 XM_UncommonTLD01 13249 7.13 17.23 3.48 83 XMSexyCombo_05 13169 5.18 9.95 3.46 84 T_REMOTE_IMAGE 12987 3.82 4.97 3.41 85 TR_XM_PhishingBody 12438 4.02 6.11 3.27 86 MAILING_LIST_MULTI 11880 2.80 1.91 3.12 87 BAYES_95 11700 3.82 5.89 3.07 88 RCVD_IN_IADB_VOUCHED 11255 2.43 0.98 2.96 89 TM2_M_URI_OPT_OUT 11067 3.05 3.43 2.91 90 T_TooManySym_02 11056 2.31 0.68 2.90 91 TooManyTo_002 10460 2.27 0.95 2.75 92 ANY_BOUNCE_MESSAGE 10333 2.27 1.03 2.71 93 BOUNCE_MESSAGE 10329 2.27 1.03 2.71 94 FROM_EXCESS_BASE64 9625 2.28 1.60 2.53 95 URI_NOVOWEL 9571 2.27 1.59 2.51 96 MIME_HTML_MOSTLY 9413 4.65 10.68 2.47 97 BAYES_05 9254 1.96 0.66 2.43 98 T_XMDrugObfuBody_14 9201 2.42 2.42 2.42 99 HTML_MIME_NO_HTML_TAG 8427 3.86 8.41 2.21 100 XM_SPF_SoftFail 8344 2.74 4.25 2.19 101 HELO_NODOT 8335 2.34 2.76 2.19 102 HELO_NO_DOMAIN 8332 2.34 2.75 2.19 103 TR_XM_SB_Phish 7906 2.29 2.89 2.08 104 XM_B_Phish66 7869 2.50 3.72 2.07 105 HTML_FONT_FACE_BAD 7858 1.71 0.73 2.06 106 HTML_IMAGE_RATIO_08 7832 2.15 2.40 2.06 107 XMSubPhish11 7804 2.24 2.78 2.05 108 RCVD_IN_IADB_OPTIN 7243 1.58 0.68 1.90 109 KHOP_HELO_FCRDNS 7146 2.35 3.65 1.88 110 IN_HORDE_ADDRESS_BOOK 7141 1.41 0.11 1.88 111 TVD_RCVD_IP 7057 1.54 0.67 1.85 112 T_XMDrugObfuBody_08 7051 2.15 2.96 1.85 113 XM_B_SpammyTLD 7016 2.63 4.82 1.84 114 TooManyTo_003 7011 1.56 0.77 1.84 115 INVALID_MSGID 6949 1.48 0.52 1.82 116 XM_DK_Undo_01 6354 1.76 2.02 1.67 117 UNTRUSTED_Relay 6339 6.88 21.31 1.66 118 TR_Symld_Words 6338 1.76 2.03 1.66 119 URI_HEX 6271 1.67 1.72 1.65 120 XM_CamelCaseFrm001 6263 1.73 1.96 1.64 121 TO_MALFORMED 6233 1.21 0.01 1.64 122 TR_XM_SpammyWords5 6141 1.97 2.98 1.61 123 XMSubNoVowel 5907 1.62 1.81 1.55 124 SUBJ_ALL_CAPS 5685 1.46 1.36 1.49 125 XMCapTrack 5513 1.19 0.48 1.45 126 TR_XM_SpammyWords2 5231 3.72 10.20 1.37 127 XM_B_Unsub2 5170 1.59 2.23 1.36 128 TooManyTo_004 5154 1.17 0.67 1.35 129 BOTNET 5001 6.38 20.41 1.31 130 XM_GoogleGroups 4935 1.11 0.60 1.30 131 XMDiploma_00 4882 1.49 2.08 1.28 132 RELAYCOUNTRY_CA 4684 2.13 4.61 1.23 133 TM2_M_VERY_LONG_WORD 4636 1.45 2.10 1.22 134 XMGappySubj_01 4414 0.89 0.16 1.16 135 XMHTML_After_End 4260 1.12 1.12 1.12 136 XM_OfRef6 4253 1.49 2.53 1.12 137 XM_UB50 4244 2.36 5.82 1.11 138 XMStockSpam_06 4233 1.25 1.64 1.11 139 TooManyTo_005 4215 0.97 0.57 1.11 140 DKIM_ADSP_CUSTOM_MED 3963 1.04 1.03 1.04 141 XMBrknScrpt_02 3877 1.19 1.68 1.02 142 XM_E_Blogspot 3844 0.76 0.08 1.01 143 XMNoVowels 3794 0.97 0.89 1.00 144 XM_H_Long_From02 3711 0.99 1.02 0.97 145 RELAYCOUNTRY_GB 3609 1.14 1.68 0.95 146 XMBSHREFv2 3574 0.77 0.29 0.94 147 URI_TRY_3LD 3512 0.99 1.18 0.92 148 XM_SPF_Unknown 3417 0.87 0.78 0.90 149 XMSexyCombo_01 3368 1.06 1.56 0.88 150 T_FILL_THIS_FORM_SHORT 3318 1.02 1.45 0.87 151 T_TooManySym_03 3289 0.70 0.25 0.86 152 TR_MetaPhish_Combo_01 3093 0.98 1.46 0.81 153 XM_H_PHPMailer 3043 0.85 0.99 0.80 154 SpammyFromTLD_01 2978 2.77 8.27 0.78 155 XMGenDplmaNmb 2974 0.93 1.33 0.78 156 HTML_IMAGE_ONLY_20 2910 0.63 0.27 0.76 157 XMBody_95 2888 0.60 0.15 0.76 158 HTTPS_HTTP_MISMATCH 2888 0.88 1.23 0.76 159 XM_ProductURIs 2818 0.72 0.67 0.74 160 XM_B_COVIDMETA 2678 1.14 2.36 0.70 161 RCVD_IN_SORBS_DUL 2668 0.57 0.22 0.70 162 FROM_GOV_SPOOF 2666 0.57 0.20 0.70 163 NML_ADSP_CUSTOM_MED 2659 0.69 0.66 0.70 164 XM_ShortIntro_01 2580 1.06 2.12 0.68 165 XMSubMetaI_00 2537 0.82 1.24 0.67 166 T_XMDrugObfuBody_00 2478 0.93 1.70 0.65 167 XMBdyGiftCard01 2442 0.81 1.26 0.64 168 RCVD_IN_BL_SPAMCOP_NET 2378 3.15 10.15 0.62 169 MSGID_NOFQDN1 2366 0.47 0.03 0.62 170 TR_MSPIKEBAYES00 2295 0.45 0.01 0.60 171 SHORT_HELO_AND_INLINE_IMAGE 2249 0.47 0.14 0.59 172 XMSexyCombo_04 2230 0.62 0.72 0.59 173 XM_RXBody 2217 0.57 0.52 0.58 174 T_OBFU_PDF_ATTACH 2212 0.50 0.26 0.58 175 XMMoneyMeta_00 2154 0.69 1.02 0.57 176 FILL_THIS_FORM 2120 0.47 0.24 0.56 177 XMPhish30 2050 0.62 0.84 0.54 178 MISSING_HEADERS 2018 1.10 2.66 0.53 179 XM_B_COPY_HTML 2014 0.55 0.59 0.53 180 FORGED_GMAIL_RCVD 1997 0.62 0.88 0.52 181 TM2_M_BODY_EMPTY 1977 0.41 0.12 0.52 182 XM_B_SpammyWords4 1885 0.86 1.88 0.50 183 HTML_IMAGE_ONLY_28 1809 0.59 0.92 0.48 184 XMLngstWrd_00 1798 0.50 0.56 0.47 185 XM_B_REG_HTML 1796 0.45 0.37 0.47 186 HTML_IMAGE_ONLY_32 1794 0.39 0.15 0.47 187 NICE_REPLY_A 1728 0.34 0.03 0.45 188 TVD_SPACE_RATIO 1709 0.47 0.54 0.45 189 XMBody_17 1694 0.99 2.50 0.44 190 XMPhish14 1641 0.49 0.64 0.43 191 RDNS_DYNAMIC 1640 0.69 1.41 0.43 192 T_Symld_Words_02 1620 0.55 0.90 0.43 193 XMHTMLBadTable_001 1604 0.51 0.75 0.42 194 XMLngstWrd_01 1601 0.44 0.48 0.42 195 XMDateMe_00 1566 0.42 0.44 0.41 196 TR_XM_COVIDMETA4 1559 0.89 2.23 0.41 197 T_XMHurry_00 1539 0.66 1.36 0.40 198 XMSubMetaSxObfu_03 1521 0.48 0.71 0.40 199 HTML_IMAGE_ONLY_24 1516 0.43 0.52 0.40 200 TO_NO_BRKTS_HTML_ONLY 1514 0.36 0.24 0.40 ----------------------------------------------------------------------