Email: 558675 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.38 sec Spam: 132887 Autolearn: 0 AvgScore: 14.91 AvgScanTime: 1.70 sec Ham: 425788 Autolearn: 0 AvgScore: -3.16 AvgScanTime: 1.28 sec Time Spent Running SA: 214.53 hours Time Spent Processing Spam: 62.59 hours Time Spent Processing Ham: 151.94 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 126521 90.38 95.21 88.88 2 DKIM_SIGNED 109737 67.64 82.58 62.98 3 DCC_CHECK 106078 45.62 79.83 34.94 4 XM_DK_Pass 105707 65.77 79.55 61.47 5 DKIM_VALID 102785 63.86 77.35 59.65 6 XM_B_Unicode 96681 72.80 72.75 72.81 7 RELAYCOUNTRY_US 95870 79.86 72.14 82.26 8 XMListUnsubscribeExists 89471 46.76 67.33 40.34 9 XM_B_SpammyWords 85809 48.75 64.57 43.82 10 DKIM_VALID_AU 78179 48.16 58.83 44.83 11 XM_DK_Undo_02 58081 15.50 43.71 6.70 12 BAYES_50 52732 49.71 39.68 52.83 13 XM_B_Unicode3 52054 43.16 39.17 44.41 14 LOC_TINY_FONT_1 48375 23.60 36.40 19.61 15 XM_B_SpammyWords2 46457 21.24 34.96 16.96 16 DKIM_VALID_EF 44198 25.89 33.26 23.58 17 TR_XM_DKIM_Undo 42732 11.30 32.16 4.79 18 T_KAM_HTML_FONT_INVALID 42451 19.16 31.95 15.17 19 BAYES_99 42188 11.31 31.75 4.94 20 HTML_FONT_LOW_CONTRAST 41477 24.97 31.21 23.03 21 MIME_HTML_ONLY 40274 25.23 30.31 23.64 22 XMSubLong 36432 22.68 27.42 21.20 23 RCVD_IN_MSPIKE_H2 35142 22.44 26.45 21.19 24 FVGT_m_MULTI_ODD 35141 21.89 26.44 20.47 25 RELAYCOUNTRY_META 33955 9.30 25.55 4.23 26 TR_DCC_Bayes_99 33144 7.79 24.94 2.43 27 BAYES_999 31421 8.64 23.64 3.96 28 T_TM2_M_HEADER_IN_MSG 29988 26.40 22.57 27.59 29 XM_Body_Dirty_Words 28265 12.53 21.27 9.80 30 UNTRUSTED_Relay 27657 5.97 20.81 1.34 31 DCC_CHECK_NEGATIVE 26732 54.34 20.12 65.02 32 RCVD_IN_MSPIKE_WL 26173 24.26 19.70 25.68 33 BOTNET 25135 5.52 18.91 1.34 34 XM_UncommonTLD01 25012 6.89 18.82 3.17 35 FSL_BULK_SIG 20638 9.39 15.53 7.48 36 XM_Multi_Part_URI 20626 10.80 15.52 9.33 37 MPART_ALT_DIFF 19349 11.52 14.56 10.58 38 XM_B_Unsub 17967 10.02 13.52 8.93 39 XMSexyCombo_05 17453 5.72 13.13 3.40 40 BOTNET_IPINHOSTNAME 17428 5.88 13.11 3.63 41 LOTS_OF_MONEY 16605 7.72 12.50 6.23 42 MIME_HTML_MOSTLY 15728 4.74 11.84 2.53 43 XM_B_SpammyWords3 15113 5.68 11.37 3.91 44 TR_XM_SpammyWords2 14404 3.37 10.84 1.04 45 TR_XM_SpammyWords4 14144 5.27 10.64 3.59 46 UNPARSEABLE_RELAY 13946 7.17 10.49 6.13 47 TR_XM_UnparsRelay 13740 6.32 10.34 5.07 48 RCVD_IN_MSPIKE_H3 13419 12.83 10.10 13.68 49 XMSubMetaSx_00 12850 5.03 9.67 3.58 50 SpammyFromTLD_02 12543 2.49 9.44 0.32 51 BAYES_80 12168 4.95 9.16 3.64 52 BAYES_60 12045 8.07 9.06 7.77 53 XM_Evil_Numbers_Gen 11599 8.91 8.73 8.97 54 RCVD_IN_MSPIKE_H4 10891 9.20 8.20 9.51 55 HTML_IMAGE_RATIO_02 10728 5.41 8.07 4.58 56 SpammyFromTLD_01 10582 2.45 7.96 0.73 57 T_REMOTE_IMAGE 10431 4.29 7.85 3.18 58 XM_UB50 9930 2.48 7.47 0.92 59 LotsOfNums_01 9863 7.99 7.42 8.16 60 TR_XM_PhishingBody 9797 4.46 7.37 3.55 61 RCVD_IN_BL_SPAMCOP_NET 9690 2.21 7.29 0.63 62 XM_B_Phish_Phrases 9518 4.14 7.16 3.20 63 XM_SendGrid 9387 5.63 7.06 5.18 64 HTML_MIME_NO_HTML_TAG 8734 3.08 6.57 1.99 65 XM_H_Long_From01 8571 4.99 6.45 4.54 66 RELAYCOUNTRY_FR 8039 1.62 6.05 0.23 67 KHOP_HELO_FCRDNS 7905 2.50 5.95 1.42 68 RCVD_IN_MSPIKE_BL 7230 1.56 5.44 0.34 69 HTML_FONT_SIZE_LARGE 7178 1.35 5.40 0.08 70 XMNumbers 7111 3.57 5.35 3.01 71 TooManyTo_001 7073 7.26 5.32 7.86 72 DKIM_INVALID 6952 3.78 5.23 3.32 73 BAYES_95 6708 2.91 5.05 2.25 74 TR_XM_MSPIKECOMBO 6675 1.42 5.02 0.29 75 HTML_IMAGE_ONLY_08 6606 1.25 4.97 0.09 76 BODY_URI_ONLY 6481 1.17 4.88 0.01 77 XM_DIRTYINTL 6333 1.39 4.77 0.34 78 GOOG_STO_IMG_HTML 6183 1.11 4.65 0.00 79 HTML_IMAGE_RATIO_04 6139 14.07 4.62 17.02 80 XM_B_SpammyTLD 6090 2.29 4.58 1.58 81 RELAYCOUNTRY_CA 5998 1.93 4.51 1.13 82 XM_B_Phish66 5983 2.77 4.50 2.22 83 XM_SPF_SoftFail 5815 2.29 4.38 1.64 84 XM_UB99 5569 1.00 4.19 0.00 85 TM2_M_URI_OPT_OUT 5489 2.93 4.13 2.55 86 MIXED_HREF_CASE 5291 0.95 3.98 0.00 87 JH_SPAMMY_HEADERS 5231 0.94 3.94 0.00 88 MIXED_IMG_CASE 5150 0.92 3.88 0.00 89 TR_XM_DK_SendGrid 5074 3.45 3.82 3.33 90 URI_NOVOWEL 4963 2.54 3.73 2.16 91 TR_XM_SpammyWords5 4894 1.97 3.68 1.44 92 T_HTML_TAG_BALANCE_CENTER 4817 0.93 3.62 0.09 93 XM_UB60 4760 0.92 3.58 0.09 94 MIME_QP_LONG_LINE 4752 4.47 3.58 4.74 95 XM_B_COVIDMETA 4740 1.61 3.57 1.00 96 URIBL_DBL_SPAM 4718 0.87 3.55 0.03 97 URI_PHP_REDIR 4664 0.84 3.51 0.01 98 MIXED_FONT_CASE 4554 0.82 3.43 0.00 99 HTML_IMAGE_RATIO_06 4514 4.66 3.40 5.06 100 MIME_HTML_ONLY_MULTI 4437 7.50 3.34 8.79 101 RCVD_IN_MSPIKE_L5 4393 0.85 3.31 0.08 102 RCVD_IN_RP_SAFE 4330 5.82 3.26 6.62 103 XM_OfRef6 4172 1.41 3.14 0.87 104 TR_XM_SpammyWords3 4162 0.94 3.13 0.26 105 RELAYCOUNTRY_DE 4114 1.20 3.10 0.61 106 TR_XM_SB_Phish 4094 2.51 3.08 2.33 107 XM_UB80 3970 0.74 2.99 0.04 108 XMSubPhish11 3966 2.46 2.98 2.30 109 PDS_OTHER_BAD_TLD 3966 0.82 2.98 0.14 110 URIBL_DBL_ABUSE_SPAM 3909 0.71 2.94 0.01 111 T_XMDrugObfuBody_08 3907 2.05 2.94 1.78 112 HTML_TAG_BALANCE_CENTER 3655 0.67 2.75 0.02 113 BOTNET_NORDNS 3625 0.66 2.73 0.01 114 XM_B_Unsub2 3585 1.63 2.70 1.30 115 XMStrtUSub 3549 9.23 2.67 11.28 116 HTML_IMAGE_RATIO_08 3367 1.98 2.53 1.81 117 T_XMDrugObfuBody_14 3366 2.31 2.53 2.24 118 XM_CamelCaseFrm001 3349 1.68 2.52 1.41 119 XM_UB999 3341 0.60 2.51 0.00 120 RCVD_IN_IADB_LISTED 3263 4.00 2.46 4.48 121 XMDiploma_00 3249 1.56 2.44 1.29 122 RCVD_IN_RP_CERTIFIED 3235 5.13 2.43 5.98 123 TM2_M_VERY_LONG_WORD 3192 1.39 2.40 1.08 124 XM_URI_RBL 3067 0.63 2.31 0.11 125 XM_DK_Undo_01 3032 1.70 2.28 1.52 126 T_TooManySym_01 2981 4.28 2.24 4.91 127 RCVD_IN_IADB_SPF 2938 3.52 2.21 3.93 128 RCVD_IN_RP_RNBL 2898 0.53 2.18 0.02 129 MIXED_CENTER_CASE 2889 0.52 2.17 0.00 130 RCVD_IN_PSBL 2852 0.55 2.15 0.05 131 SUBJ_ALL_CAPS 2850 1.54 2.14 1.35 132 XMBody_17 2841 0.82 2.14 0.41 133 MIXED_AREA_CASE 2812 0.50 2.12 0.00 134 RCVD_IN_IADB_DK 2801 3.13 2.11 3.45 135 BAYES_40 2783 4.65 2.09 5.45 136 RCVD_IN_IADB_SENDERID 2782 3.20 2.09 3.55 137 TR_XM_PHPDW 2746 0.69 2.07 0.26 138 XMSexyCombo_01 2720 0.82 2.05 0.43 139 ALL_TRUSTED 2658 11.95 2.00 15.05 140 TR_Symld_Words 2654 1.88 2.00 1.85 141 MAILING_LIST_MULTI 2556 2.70 1.92 2.94 142 TR_XM_PHPForged 2503 0.62 1.88 0.23 143 TR_XM_FormFill2 2477 0.62 1.86 0.23 144 XM_H_PHPOS 2467 0.61 1.86 0.22 145 MIXED_CTYPE_CASE 2464 0.44 1.85 0.00 146 TR_XM_COVIDMETA4 2442 0.83 1.84 0.51 147 TR_XM_COVIDMETA1 2395 0.88 1.80 0.60 148 DIET_1 2336 0.67 1.76 0.33 149 URI_HEX 2316 1.33 1.74 1.20 150 XMSubMetaI_00 2236 0.75 1.68 0.46 151 XMSlimDrugH 2213 0.59 1.67 0.26 152 XM_UB95 2199 0.40 1.65 0.01 153 T_FILL_THIS_FORM_SHORT 2198 0.94 1.65 0.72 154 XM_B_SpammyWords4 2180 0.61 1.64 0.29 155 FROM_EXCESS_BASE64 2123 2.17 1.60 2.35 156 RELAYCOUNTRY_IN 2059 0.49 1.55 0.15 157 BAYES_20 1985 4.29 1.49 5.16 158 XM_Body_Dirty_Words_01 1971 0.48 1.48 0.16 159 URIBL_BLACK 1945 0.37 1.46 0.03 160 T_XMHurry_00 1943 0.58 1.46 0.31 161 XMBrknScrpt_02 1924 1.03 1.45 0.90 162 RCVD_IN_MSPIKE_H5 1863 2.23 1.40 2.49 163 USER_IN_DEF_DKIM_WL 1838 8.04 1.38 10.12 164 XMStockSpam_06 1820 1.09 1.37 1.00 165 T_MONEY_PERCENT 1811 0.56 1.36 0.31 166 TR_LOTS_OF_MONEY2 1811 0.56 1.36 0.31 167 HTML_EXTRA_CLOSE 1779 0.35 1.34 0.05 168 TR_XM_BayesRelay 1774 0.32 1.33 0.01 169 URI_TRY_3LD 1758 1.26 1.32 1.24 170 XMBdyGiftCard01 1741 0.80 1.31 0.64 171 TR_XM_INV_DKIM 1738 0.38 1.31 0.09 172 T_XMDrugObfuBody_00 1734 0.76 1.30 0.58 173 HTML_IMAGE_ONLY_20 1727 0.68 1.30 0.48 174 FROM_SUSPICIOUS_NTLD 1704 0.33 1.28 0.04 175 XMHTML_After_End 1704 1.02 1.28 0.94 176 XM_H_Undi_Recip 1676 0.42 1.26 0.16 177 FROM_SUSPICIOUS_NTLD_FP 1652 0.32 1.24 0.03 178 MPART_ALT_DIFF_COUNT 1645 0.55 1.24 0.33 179 XMGenDplmaNmb 1636 0.87 1.23 0.75 180 HTML_SHORT_LINK_IMG_3 1621 0.33 1.22 0.06 181 XM_JunkDunk 1589 0.28 1.20 0.00 182 TR_Mismatch_TLD_02 1574 0.34 1.18 0.08 183 HTML_FONT_SIZE_HUGE 1572 0.35 1.18 0.09 184 XM_PDF 1563 3.76 1.18 4.57 185 XMMoneyMeta_00 1562 0.69 1.18 0.54 186 XM_H_Long_From02 1537 0.88 1.16 0.80 187 URI_NO_WWW_BIZ_CGI 1489 0.27 1.12 0.01 188 XM_H_PHPMailer 1461 0.70 1.10 0.58 189 XMSubMetaSSx_00 1458 0.37 1.10 0.14 190 XM_B_SEO 1439 0.51 1.08 0.33 191 NO_DNS_FOR_FROM 1404 0.40 1.06 0.20 192 XM_S_SpammyWords 1402 0.55 1.06 0.39 193 TR_XM_Spammywords 1401 0.55 1.05 0.39 194 RELAYCOUNTRY_CH 1401 0.30 1.05 0.07 195 ADMITS_SPAM 1399 0.35 1.05 0.12 196 DKIM_ADSP_CUSTOM_MED 1381 0.86 1.04 0.80 197 HTTPS_HTTP_MISMATCH 1381 0.84 1.04 0.77 198 XMSexyCombo_04 1374 0.35 1.03 0.14 199 LongTLD 1373 0.35 1.03 0.13 200 TR_XM_MaxWHORU 1369 0.38 1.03 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 378422 90.38 95.21 88.88 2 RELAYCOUNTRY_US 350265 79.86 72.14 82.26 3 XM_B_Unicode 310014 72.80 72.75 72.81 4 DCC_CHECK_NEGATIVE 276854 54.34 20.12 65.02 5 DKIM_SIGNED 268158 67.64 82.58 62.98 6 XM_DK_Pass 261748 65.77 79.55 61.47 7 DKIM_VALID 254001 63.86 77.35 59.65 8 BAYES_50 224959 49.71 39.68 52.83 9 DKIM_VALID_AU 190900 48.16 58.83 44.83 10 XM_B_Unicode3 189084 43.16 39.17 44.41 11 XM_B_SpammyWords 186571 48.75 64.57 43.82 12 XMListUnsubscribeExists 171759 46.76 67.33 40.34 13 DCC_CHECK 148769 45.62 79.83 34.94 14 T_TM2_M_HEADER_IN_MSG 117489 26.40 22.57 27.59 15 RCVD_IN_MSPIKE_WL 109339 24.26 19.70 25.68 16 MIME_HTML_ONLY 100653 25.23 30.31 23.64 17 DKIM_VALID_EF 100419 25.89 33.26 23.58 18 HTML_FONT_LOW_CONTRAST 98050 24.97 31.21 23.03 19 XMSubLong 90248 22.68 27.42 21.20 20 RCVD_IN_MSPIKE_H2 90235 22.44 26.45 21.19 21 FVGT_m_MULTI_ODD 87163 21.89 26.44 20.47 22 LOC_TINY_FONT_1 83496 23.60 36.40 19.61 23 HTML_IMAGE_RATIO_04 72454 14.07 4.62 17.02 24 XM_B_SpammyWords2 72231 21.24 34.96 16.96 25 XM_H_Trusted_IP 68230 12.21 0.00 16.02 26 HTML_FONT_FACE_BAD 65076 11.82 0.71 15.28 27 T_KAM_HTML_FONT_INVALID 64595 19.16 31.95 15.17 28 ALL_TRUSTED 64078 11.95 2.00 15.05 29 BAYES_00 63229 11.52 0.87 14.85 30 RCVD_IN_MSPIKE_H3 58255 12.83 10.10 13.68 31 XMStrtUSub 48035 9.23 2.67 11.28 32 MPART_ALT_DIFF 45037 11.52 14.56 10.58 33 USER_IN_DEF_DKIM_WL 43081 8.04 1.38 10.12 34 XM_Body_Dirty_Words 41748 12.53 21.27 9.80 35 RCVD_IN_MSPIKE_H4 40498 9.20 8.20 9.51 36 XM_Multi_Part_URI 39727 10.80 15.52 9.33 37 XM_Evil_Numbers_Gen 38191 8.91 8.73 8.97 38 XM_B_Unsub 38032 10.02 13.52 8.93 39 MIME_HTML_ONLY_MULTI 37447 7.50 3.34 8.79 40 LotsOfNums_01 34765 7.99 7.42 8.16 41 TooManyTo_001 33466 7.26 5.32 7.86 42 BAYES_60 33063 8.07 9.06 7.77 43 FSL_BULK_SIG 31828 9.39 15.53 7.48 44 XM_DK_Undo_02 28508 15.50 43.71 6.70 45 RCVD_IN_RP_SAFE 28183 5.82 3.26 6.62 46 XM_DKIMWhitelistDomains 27937 5.00 0.02 6.56 47 LOTS_OF_MONEY 26526 7.72 12.50 6.23 48 UNPARSEABLE_RELAY 26118 7.17 10.49 6.13 49 RCVD_IN_RP_CERTIFIED 25446 5.13 2.43 5.98 50 TR_XM_DK_Bayes 23643 4.39 0.64 5.55 51 BAYES_40 23190 4.65 2.09 5.45 52 TR_XM_DK_Bayes1 22903 4.25 0.63 5.38 53 XM_SendGrid 22062 5.63 7.06 5.18 54 BAYES_20 21963 4.29 1.49 5.16 55 TR_XM_UnparsRelay 21592 6.32 10.34 5.07 56 HTML_IMAGE_RATIO_06 21539 4.66 3.40 5.06 57 BAYES_99 21015 11.31 31.75 4.94 58 T_TooManySym_01 20909 4.28 2.24 4.91 59 TR_XM_DKIM_Undo 20412 11.30 32.16 4.79 60 MIME_QP_LONG_LINE 20197 4.47 3.58 4.74 61 TR_XM_DK_Bayes2 20028 3.71 0.52 4.70 62 IN_ZIMBRA_NJ_WHITELIST 19907 3.58 0.05 4.68 63 HTML_IMAGE_RATIO_02 19505 5.41 8.07 4.58 64 XM_PDF 19441 3.76 1.18 4.57 65 XM_H_Long_From01 19326 4.99 6.45 4.54 66 RCVD_IN_IADB_LISTED 19071 4.00 2.46 4.48 67 XMSubNoVowel 19035 3.52 0.48 4.47 68 RELAYCOUNTRY_META 18009 9.30 25.55 4.23 69 BAYES_999 16855 8.64 23.64 3.96 70 RCVD_IN_IADB_SPF 16752 3.52 2.21 3.93 71 XM_B_SpammyWords3 16628 5.68 11.37 3.91 72 BAYES_80 15509 4.95 9.16 3.64 73 BOTNET_IPINHOSTNAME 15436 5.88 13.11 3.63 74 TR_XM_SpammyWords4 15295 5.27 10.64 3.59 75 XMSubMetaSx_00 15224 5.03 9.67 3.58 76 TR_XM_PhishingBody 15110 4.46 7.37 3.55 77 RCVD_IN_IADB_SENDERID 15096 3.20 2.09 3.55 78 RCVD_IN_IADB_DK 14684 3.13 2.11 3.45 79 XMSexyCombo_05 14496 5.72 13.13 3.40 80 TR_XM_DK_SendGrid 14175 3.45 3.82 3.33 81 DKIM_INVALID 14157 3.78 5.23 3.32 82 XM_B_Phish_Phrases 13625 4.14 7.16 3.20 83 T_REMOTE_IMAGE 13522 4.29 7.85 3.18 84 XM_UncommonTLD01 13490 6.89 18.82 3.17 85 ANY_BOUNCE_MESSAGE 13333 2.54 0.67 3.13 86 BOUNCE_MESSAGE 13332 2.54 0.66 3.13 87 BAYES_05 13292 2.58 0.85 3.12 88 XMNumbers 12834 3.57 5.35 3.01 89 MAILING_LIST_MULTI 12534 2.70 1.92 2.94 90 RCVD_IN_IADB_VOUCHED 11139 2.24 1.02 2.62 91 TM2_M_URI_OPT_OUT 10862 2.93 4.13 2.55 92 MIME_HTML_MOSTLY 10763 4.74 11.84 2.53 93 RCVD_IN_MSPIKE_H5 10586 2.23 1.40 2.49 94 TR_DCC_Bayes_99 10355 7.79 24.94 2.43 95 T_TooManySym_02 10165 1.98 0.67 2.39 96 FROM_EXCESS_BASE64 10021 2.17 1.60 2.35 97 TR_XM_SB_Phish 9915 2.51 3.08 2.33 98 XMSubPhish11 9778 2.46 2.98 2.30 99 BAYES_95 9565 2.91 5.05 2.25 100 T_XMDrugObfuBody_14 9519 2.31 2.53 2.24 101 TooManyTo_002 9514 1.92 0.90 2.23 102 XM_B_Phish66 9471 2.77 4.50 2.22 103 URI_NOVOWEL 9218 2.54 3.73 2.16 104 HTML_MIME_NO_HTML_TAG 8454 3.08 6.57 1.99 105 HELO_NODOT 7914 1.57 0.65 1.86 106 HELO_NO_DOMAIN 7914 1.57 0.65 1.86 107 TR_Symld_Words 7861 1.88 2.00 1.85 108 XMSubLongNoVowel 7732 1.41 0.11 1.82 109 HTML_IMAGE_RATIO_08 7706 1.98 2.53 1.81 110 XMSubGarbage 7652 1.38 0.05 1.80 111 T_XMDrugObfuBody_08 7572 2.05 2.94 1.78 112 IN_HORDE_ADDRESS_BOOK 7157 1.31 0.11 1.68 113 INVALID_MSGID 7036 1.31 0.23 1.65 114 RCVD_IN_IADB_OPTIN 7028 1.41 0.64 1.65 115 XM_SPF_SoftFail 6998 2.29 4.38 1.64 116 XM_B_SpammyTLD 6729 2.29 4.58 1.58 117 XM_DK_Undo_01 6473 1.70 2.28 1.52 118 TO_MALFORMED 6250 1.12 0.01 1.47 119 TR_XM_SpammyWords5 6137 1.97 3.68 1.44 120 TooManyTo_003 6129 1.27 0.73 1.44 121 KHOP_HELO_FCRDNS 6039 2.50 5.95 1.42 122 XM_CamelCaseFrm001 6020 1.68 2.52 1.41 123 SUBJ_ALL_CAPS 5731 1.54 2.14 1.35 124 BOTNET 5719 5.52 18.91 1.34 125 UNTRUSTED_Relay 5707 5.97 20.81 1.34 126 XM_B_Unsub2 5539 1.63 2.70 1.30 127 XMDiploma_00 5479 1.56 2.44 1.29 128 XMCapTrack 5465 1.09 0.46 1.28 129 XM_GoogleGroups 5403 1.12 0.63 1.27 130 URI_TRY_3LD 5283 1.26 1.32 1.24 131 TVD_RCVD_IP 5146 0.98 0.25 1.21 132 URI_HEX 5115 1.33 1.74 1.20 133 XM_E_Blogspot 5088 0.93 0.07 1.19 134 RELAYCOUNTRY_CA 4793 1.93 4.51 1.13 135 TM2_M_VERY_LONG_WORD 4600 1.39 2.40 1.08 136 TR_XM_SpammyWords2 4447 3.37 10.84 1.04 137 RELAYCOUNTRY_GB 4433 1.02 0.97 1.04 138 XMGappySubj_01 4400 0.82 0.12 1.03 139 TooManyTo_004 4334 0.93 0.63 1.02 140 XMStockSpam_06 4266 1.09 1.37 1.00 141 XM_B_COVIDMETA 4251 1.61 3.57 1.00 142 XMHTML_After_End 3984 1.02 1.28 0.94 143 XM_UB50 3909 2.48 7.47 0.92 144 XMBrknScrpt_02 3835 1.03 1.45 0.90 145 XM_OfRef6 3714 1.41 3.14 0.87 146 XM_ProductURIs 3614 0.76 0.46 0.85 147 TooManyTo_005 3485 0.75 0.55 0.82 148 XM_H_Long_From02 3407 0.88 1.16 0.80 149 XMBSHREFv2 3405 0.67 0.25 0.80 150 DKIM_ADSP_CUSTOM_MED 3397 0.86 1.04 0.80 151 HTTPS_HTTP_MISMATCH 3285 0.84 1.04 0.77 152 XMGenDplmaNmb 3211 0.87 1.23 0.75 153 SpammyFromTLD_01 3102 2.45 7.96 0.73 154 T_TooManySym_03 3072 0.62 0.29 0.72 155 T_FILL_THIS_FORM_SHORT 3069 0.94 1.65 0.72 156 XMNoVowels 2937 0.69 0.68 0.69 157 XM_SPF_Unknown 2836 0.73 0.95 0.67 158 XMBdyGiftCard01 2728 0.80 1.31 0.64 159 TR_MetaPhish_Combo_01 2724 0.66 0.74 0.64 160 RCVD_IN_BL_SPAMCOP_NET 2662 2.21 7.29 0.63 161 RELAYCOUNTRY_DE 2615 1.20 3.10 0.61 162 RCVD_IN_SORBS_DUL 2595 0.51 0.18 0.61 163 TR_XM_COVIDMETA1 2548 0.88 1.80 0.60 164 T_OBFU_PDF_ATTACH 2505 0.50 0.22 0.59 165 T_XMDrugObfuBody_00 2489 0.76 1.30 0.58 166 XMBody_95 2486 0.49 0.18 0.58 167 XMPhish14 2486 0.68 1.00 0.58 168 XM_H_PHPMailer 2456 0.70 1.10 0.58 169 XMLngstWrd_00 2423 0.52 0.37 0.57 170 XM_B_COPY_HTML 2415 0.56 0.54 0.57 171 MSGID_NOFQDN1 2404 0.43 0.01 0.56 172 T_Symld_Words_02 2382 0.63 0.87 0.56 173 XMPhish30 2357 0.65 0.95 0.55 174 SHORT_HELO_AND_INLINE_IMAGE 2332 0.44 0.11 0.55 175 XMMoneyMeta_00 2306 0.69 1.18 0.54 176 TR_MSPIKEBAYES00 2273 0.41 0.01 0.53 177 FROM_GOV_SPOOF 2241 0.45 0.21 0.53 178 NML_ADSP_CUSTOM_MED 2208 0.60 0.88 0.52 179 XM_ShortIntro_01 2203 0.51 0.50 0.52 180 TR_XM_COVIDMETA4 2183 0.83 1.84 0.51 181 XM_B_REG_HTML 2180 0.52 0.55 0.51 182 MSGID_FROM_MTA_HEADER 2132 0.45 0.27 0.50 183 XMLngstWrd_01 2095 0.45 0.31 0.49 184 HTML_IMAGE_ONLY_20 2065 0.68 1.30 0.48 185 XMSubMetaI_00 1942 0.75 1.68 0.46 186 TM2_M_BODY_EMPTY 1937 0.41 0.25 0.45 187 FROM_GOV_DKIM_AU 1888 0.43 0.40 0.44 188 TVD_SPACE_RATIO 1880 0.38 0.17 0.44 189 XMHTMLBadTable_001 1848 0.46 0.53 0.43 190 XMSexyCombo_01 1834 0.82 2.05 0.43 191 XMLngstWrd_02 1790 0.38 0.23 0.42 192 T_MANY_PILL_PRICE 1771 0.32 0.00 0.42 193 XMBody_17 1767 0.82 2.14 0.41 194 HTML_IMAGE_ONLY_28 1743 0.53 0.90 0.41 195 MISSING_HEADERS 1693 0.41 0.44 0.40 196 MY_SERVERS_FOUND 1674 0.34 0.18 0.39 197 XMBody_78 1672 0.47 0.70 0.39 198 RDNS_DYNAMIC 1660 0.47 0.73 0.39 199 XM_S_SpammyWords 1654 0.55 1.06 0.39 200 TR_XM_Spammywords 1652 0.55 1.05 0.39 ----------------------------------------------------------------------