Email: 510383 Autolearn: 0 AvgScore: 3.07 AvgScanTime: 1.36 sec Spam: 131105 Autolearn: 0 AvgScore: 15.11 AvgScanTime: 1.59 sec Ham: 379278 Autolearn: 0 AvgScore: -1.09 AvgScanTime: 1.28 sec Time Spent Running SA: 193.23 hours Time Spent Processing Spam: 57.89 hours Time Spent Processing Ham: 135.34 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 125467 87.23 95.70 84.30 2 DKIM_SIGNED 107152 75.86 81.73 73.84 3 DCC_CHECK 104842 49.39 79.97 38.82 4 XM_DK_Pass 101652 73.66 77.53 72.32 5 RELAYCOUNTRY_US 99755 79.42 76.09 80.57 6 XM_B_Unicode 99014 69.38 75.52 67.26 7 DKIM_VALID 98617 71.56 75.22 70.30 8 XMListUnsubscribeExists 87462 51.21 66.71 45.85 9 XM_B_SpammyWords 85896 49.34 65.52 43.75 10 DKIM_VALID_AU 73875 51.85 56.35 50.30 11 BAYES_50 54574 51.75 41.63 55.25 12 XM_B_Unicode3 54564 39.68 41.62 39.01 13 XM_DK_Undo_02 52715 15.91 40.21 7.52 14 XM_B_SpammyWords2 48612 22.72 37.08 17.75 15 LOC_TINY_FONT_1 44634 24.94 34.04 21.80 16 HTML_FONT_LOW_CONTRAST 44010 27.75 33.57 25.74 17 MIME_HTML_ONLY 42228 23.28 32.21 20.20 18 BAYES_99 40401 11.77 30.82 5.19 19 DKIM_VALID_EF 40078 27.10 30.57 25.90 20 TR_XM_DKIM_Undo 40054 11.82 30.55 5.35 21 T_KAM_HTML_FONT_INVALID 39720 20.97 30.30 17.74 22 FVGT_m_MULTI_ODD 38713 24.08 29.53 22.20 23 RCVD_IN_MSPIKE_H2 35901 27.34 27.38 27.32 24 XMSubLong 33212 22.98 25.33 22.17 25 TR_DCC_Bayes_99 31854 8.15 24.30 2.57 26 BAYES_999 29935 8.96 22.83 4.16 27 T_TM2_M_HEADER_IN_MSG 27965 28.55 21.33 31.05 28 RELAYCOUNTRY_META 27162 8.50 20.72 4.27 29 RCVD_IN_MSPIKE_WL 26586 26.34 20.28 28.43 30 XM_Body_Dirty_Words 26556 13.21 20.26 10.78 31 DCC_CHECK_NEGATIVE 26200 50.56 19.98 61.13 32 FSL_BULK_SIG 23474 10.12 17.90 7.44 33 UNTRUSTED_Relay 22123 5.49 16.87 1.56 34 BOTNET 21560 5.59 16.44 1.84 35 XM_Multi_Part_URI 21494 12.33 16.39 10.92 36 XM_UncommonTLD01 21363 6.77 16.29 3.48 37 BOTNET_IPINHOSTNAME 17898 6.80 13.65 4.43 38 LOTS_OF_MONEY 17627 8.79 13.44 7.17 39 XM_B_SpammyWords3 17427 6.47 13.29 4.12 40 XM_B_Unsub 17347 10.93 13.23 10.13 41 XMSexyCombo_05 16511 6.12 12.59 3.89 42 TR_XM_SpammyWords4 14998 6.36 11.44 4.61 43 MPART_ALT_DIFF 14634 6.15 11.16 4.41 44 UNPARSEABLE_RELAY 14630 8.30 11.16 7.31 45 TR_XM_UnparsRelay 14338 7.44 10.94 6.23 46 RCVD_IN_MSPIKE_H3 14149 13.89 10.79 14.96 47 TR_XM_SpammyWords2 14147 3.52 10.79 1.01 48 SpammyFromTLD_02 13940 3.01 10.63 0.38 49 XMSubMetaSx_00 12562 5.78 9.58 4.46 50 XM_Evil_Numbers_Gen 11951 8.58 9.12 8.40 51 T_REMOTE_IMAGE 11613 4.92 8.86 3.56 52 BAYES_60 11412 8.60 8.70 8.56 53 BAYES_80 11365 5.35 8.67 4.20 54 HTML_IMAGE_RATIO_02 10830 6.15 8.26 5.43 55 RCVD_IN_MSPIKE_H4 10577 10.14 8.07 10.86 56 HTML_MIME_NO_HTML_TAG 10540 3.81 8.04 2.34 57 XM_SendGrid 10353 6.65 7.90 6.22 58 RCVD_IN_BL_SPAMCOP_NET 10229 2.59 7.80 0.78 59 XM_B_Phish_Phrases 10071 4.80 7.68 3.80 60 KHOP_HELO_FCRDNS 10001 3.42 7.63 1.97 61 MIME_HTML_MOSTLY 9694 3.53 7.39 2.19 62 HTML_IMAGE_ONLY_08 8815 1.80 6.72 0.09 63 XM_UB50 8806 2.48 6.72 1.02 64 LotsOfNums_01 8767 8.70 6.69 9.39 65 GOOG_STO_IMG_HTML 8552 1.68 6.52 0.00 66 DKIM_INVALID 8535 4.30 6.51 3.54 67 TR_XM_PhishingBody 8338 4.39 6.36 3.71 68 XM_H_Long_From01 8136 5.32 6.21 5.01 69 HTML_TAG_BALANCE_CENTER 8011 1.60 6.11 0.04 70 MIXED_CENTER_CASE 7756 1.52 5.92 0.00 71 XM_B_SpammyTLD 7752 2.95 5.91 1.93 72 RCVD_IN_MSPIKE_BL 7583 1.80 5.78 0.42 73 XMNumbers 7412 3.96 5.65 3.37 74 HTML_IMAGE_RATIO_04 7353 5.66 5.61 5.68 75 MIXED_HREF_CASE 7181 1.41 5.48 0.00 76 MIXED_FONT_CASE 7127 1.40 5.44 0.00 77 MIXED_IMG_CASE 7120 1.40 5.43 0.00 78 MIXED_AREA_CASE 7114 1.39 5.43 0.00 79 HTML_FONT_SIZE_LARGE 7005 1.44 5.34 0.10 80 TR_XM_MSPIKECOMBO 6979 1.64 5.32 0.37 81 TooManyTo_001 6971 7.82 5.32 8.69 82 BAYES_95 6837 3.24 5.21 2.56 83 BODY_URI_ONLY 6710 1.33 5.12 0.02 84 SpammyFromTLD_01 6560 1.90 5.00 0.82 85 URI_NOVOWEL 6450 3.11 4.92 2.49 86 URIBL_DBL_SPAM 5727 1.14 4.37 0.03 87 TR_XM_DK_SendGrid 5712 3.87 4.36 3.70 88 RCVD_IN_MSPIKE_L5 5356 1.09 4.09 0.06 89 RELAYCOUNTRY_CA 5337 1.81 4.07 1.03 90 XM_SPF_SoftFail 5237 2.92 3.99 2.55 91 XM_DIRTYINTL 5187 1.29 3.96 0.37 92 RCVD_IN_PSBL 5157 1.11 3.93 0.14 93 TR_XM_SpammyWords3 5147 1.23 3.93 0.30 94 XMStrtUSub 5025 4.05 3.83 4.12 95 MIME_HTML_ONLY_MULTI 5001 3.19 3.81 2.98 96 JH_SPAMMY_HEADERS 4997 0.98 3.81 0.00 97 PDS_OTHER_BAD_TLD 4923 1.18 3.76 0.30 98 TM2_M_URI_OPT_OUT 4904 3.27 3.74 3.11 99 BOTNET_NORDNS 4793 0.95 3.66 0.02 100 XM_B_Phish66 4678 2.40 3.57 2.00 101 MIME_QP_LONG_LINE 4513 5.27 3.44 5.90 102 T_XMDrugObfuBody_08 4456 2.25 3.40 1.85 103 RCVD_IN_RP_SAFE 4411 5.99 3.36 6.90 104 XM_UB99 4377 0.86 3.34 0.00 105 T_XMDrugObfuBody_14 4316 2.54 3.29 2.28 106 RELAYCOUNTRY_FR 4273 1.00 3.26 0.22 107 XM_B_COVIDMETA 4237 1.63 3.23 1.08 108 HTML_IMAGE_RATIO_06 4093 3.80 3.12 4.04 109 URI_PHP_REDIR 3879 0.77 2.96 0.01 110 TR_XM_SpammyWords5 3793 2.02 2.89 1.72 111 TR_XM_SB_Phish 3661 2.25 2.79 2.07 112 XM_OfRef6 3653 1.39 2.79 0.90 113 XMSubPhish11 3600 2.22 2.75 2.04 114 TM2_M_VERY_LONG_WORD 3592 1.63 2.74 1.25 115 XM_UB60 3301 0.71 2.52 0.09 116 T_TooManySym_01 3251 4.52 2.48 5.23 117 HTML_FONT_SIZE_HUGE 3240 0.68 2.47 0.06 118 XM_B_SpammyWords4 3238 0.95 2.47 0.42 119 XMBrknScrpt_02 3209 1.36 2.45 0.98 120 RCVD_IN_RP_CERTIFIED 3175 5.27 2.42 6.26 121 XMDiploma_00 3071 1.48 2.34 1.18 122 XM_URI_RBL 3060 0.69 2.33 0.12 123 HTML_IMAGE_RATIO_08 3036 2.43 2.32 2.47 124 XMBody_17 2970 0.91 2.27 0.44 125 RELAYCOUNTRY_DE 2961 0.97 2.26 0.52 126 XM_UB80 2933 0.59 2.24 0.02 127 FROM_EXCESS_BASE64 2820 2.53 2.15 2.66 128 XM_UB999 2811 0.55 2.14 0.00 129 ALL_TRUSTED 2808 12.77 2.14 16.45 130 XMSexyCombo_01 2802 1.21 2.14 0.89 131 TR_XM_COVIDMETA4 2799 0.88 2.13 0.44 132 XM_DK_Undo_01 2792 1.72 2.13 1.58 133 BAYES_40 2761 4.45 2.11 5.27 134 URI_GOOG_STO_SPAMMY 2733 0.54 2.08 0.00 135 XM_B_Unsub2 2726 1.84 2.08 1.76 136 RCVD_IN_IADB_LISTED 2696 4.42 2.06 5.24 137 DIET_1 2684 0.84 2.05 0.42 138 XM_CamelCaseFrm001 2620 1.73 2.00 1.64 139 XMSlimDrugH 2556 0.69 1.95 0.26 140 TR_XM_PHPDW 2407 0.69 1.84 0.29 141 URI_HEX 2404 1.56 1.83 1.47 142 URIBL_BLACK 2377 0.50 1.81 0.04 143 RCVD_IN_IADB_SPF 2372 3.90 1.81 4.63 144 MAILING_LIST_MULTI 2334 2.55 1.78 2.81 145 TR_XM_COVIDMETA1 2307 0.68 1.76 0.31 146 URI_TRY_3LD 2294 1.19 1.75 1.00 147 T_XMHurry_00 2246 1.05 1.71 0.82 148 RCVD_IN_IADB_DK 2245 3.46 1.71 4.07 149 RCVD_IN_IADB_SENDERID 2232 3.54 1.70 4.17 150 T_XMDrugObfuBody_00 2159 0.91 1.65 0.65 151 TR_XM_PHPForged 2126 0.61 1.62 0.26 152 TR_XM_FormFill2 2108 0.61 1.61 0.26 153 XM_H_PHPOS 2090 0.59 1.59 0.25 154 HTTPS_HTTP_MISMATCH 2067 0.99 1.58 0.79 155 XMGenDplmaNmb 1994 0.92 1.52 0.71 156 USER_IN_DEF_DKIM_WL 1990 9.00 1.52 11.59 157 XM_JunkDunk 1970 0.39 1.50 0.00 158 XMStockSpam_06 1933 1.27 1.47 1.20 159 RCVD_IN_RP_RNBL 1908 0.38 1.46 0.01 160 MIXED_CTYPE_CASE 1900 0.38 1.45 0.00 161 XM_Body_Dirty_Words_01 1877 0.51 1.43 0.19 162 RCVD_IN_MSPIKE_H5 1860 2.31 1.42 2.62 163 BAYES_20 1805 3.95 1.38 4.83 164 SUBJ_ALL_CAPS 1800 1.56 1.37 1.62 165 XM_UB95 1776 0.36 1.35 0.01 166 TR_MetaPhish_Combo_01 1771 0.92 1.35 0.77 167 RELAYCOUNTRY_IN 1731 0.45 1.32 0.15 168 TR_Symld_Words 1703 1.54 1.30 1.62 169 DATE_IN_PAST_03_06 1666 0.46 1.27 0.18 170 TR_LOTS_OF_MONEY3 1660 0.64 1.27 0.42 171 XMBdyGiftCard01 1647 0.87 1.26 0.73 172 XMWghtMeta_00 1641 0.33 1.25 0.01 173 T_HTML_TAG_BALANCE_CENTER 1565 0.32 1.19 0.02 174 XMMoneyMeta_00 1556 0.68 1.19 0.51 175 TR_XM_BayesRelay 1551 0.31 1.18 0.01 176 URIBL_DBL_ABUSE_SPAM 1531 0.32 1.17 0.03 177 TR_XM_INV_DKIM 1520 0.37 1.16 0.10 178 XM_PDF 1483 3.98 1.13 4.96 179 TR_BOTNET_NEGATE 1480 0.57 1.13 0.38 180 T_FILL_THIS_FORM_SHORT 1470 0.85 1.12 0.75 181 XMHTML_After_End 1465 1.19 1.12 1.21 182 TR_Mismatch_TLD_02 1441 0.35 1.10 0.09 183 RELAYCOUNTRY_GB 1419 0.94 1.08 0.90 184 XM_B_SEO 1419 0.40 1.08 0.16 185 XM_H_Long_From02 1413 1.22 1.08 1.26 186 XMPhish30 1393 0.96 1.06 0.93 187 SHOPIFY_IMG_NOT_RCVD_SFY 1383 0.41 1.05 0.18 188 XMSubMetaSxObfu_03 1368 0.52 1.04 0.33 189 XM_H_PHPMailer 1368 0.80 1.04 0.71 190 RELAYCOUNTRY_CH 1364 0.32 1.04 0.06 191 FROM_SUSPICIOUS_NTLD 1329 0.28 1.01 0.03 192 RELAYCOUNTRY_ES 1327 0.29 1.01 0.04 193 TR_LOTS_OF_MONEY2 1303 0.43 0.99 0.24 194 T_MONEY_PERCENT 1303 0.43 0.99 0.24 195 XMSubMetaSSx_00 1276 0.35 0.97 0.14 196 TR_XM_SEO4 1271 0.32 0.97 0.10 197 FROM_SUSPICIOUS_NTLD_FP 1271 0.27 0.97 0.03 198 RCVD_IN_IADB_VOUCHED 1271 2.50 0.97 3.03 199 DKIM_ADSP_NXDOMAIN 1248 0.42 0.95 0.24 200 XMPhish08 1233 0.38 0.94 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 319722 87.23 95.70 84.30 2 RELAYCOUNTRY_US 305597 79.42 76.09 80.57 3 DKIM_SIGNED 280043 75.86 81.73 73.84 4 XM_DK_Pass 274301 73.66 77.53 72.32 5 DKIM_VALID 266629 71.56 75.22 70.30 6 XM_B_Unicode 255111 69.38 75.52 67.26 7 DCC_CHECK_NEGATIVE 231838 50.56 19.98 61.13 8 BAYES_50 209561 51.75 41.63 55.25 9 DKIM_VALID_AU 190771 51.85 56.35 50.30 10 XMListUnsubscribeExists 173913 51.21 66.71 45.85 11 XM_B_SpammyWords 165920 49.34 65.52 43.75 12 XM_B_Unicode3 147942 39.68 41.62 39.01 13 DCC_CHECK 147253 49.39 79.97 38.82 14 T_TM2_M_HEADER_IN_MSG 117769 28.55 21.33 31.05 15 RCVD_IN_MSPIKE_WL 107828 26.34 20.28 28.43 16 RCVD_IN_MSPIKE_H2 103631 27.34 27.38 27.32 17 DKIM_VALID_EF 98230 27.10 30.57 25.90 18 HTML_FONT_LOW_CONTRAST 97627 27.75 33.57 25.74 19 FVGT_m_MULTI_ODD 84198 24.08 29.53 22.20 20 XMSubLong 84088 22.98 25.33 22.17 21 LOC_TINY_FONT_1 82670 24.94 34.04 21.80 22 MIME_HTML_ONLY 76608 23.28 32.21 20.20 23 XM_B_SpammyWords2 67326 22.72 37.08 17.75 24 T_KAM_HTML_FONT_INVALID 67290 20.97 30.30 17.74 25 ALL_TRUSTED 62388 12.77 2.14 16.45 26 RCVD_IN_MSPIKE_H3 56731 13.89 10.79 14.96 27 USER_IN_DEF_DKIM_WL 43964 9.00 1.52 11.59 28 BAYES_00 42539 8.52 0.74 11.22 29 XM_Multi_Part_URI 41432 12.33 16.39 10.92 30 RCVD_IN_MSPIKE_H4 41174 10.14 8.07 10.86 31 XM_Body_Dirty_Words 40870 13.21 20.26 10.78 32 XM_B_Unsub 38434 10.93 13.23 10.13 33 LotsOfNums_01 35619 8.70 6.69 9.39 34 TooManyTo_001 32953 7.82 5.32 8.69 35 BAYES_60 32479 8.60 8.70 8.56 36 XM_Evil_Numbers_Gen 31863 8.58 9.12 8.40 37 TR_XM_DK_Bayes 28938 5.81 0.56 7.63 38 XM_DKIMWhitelistDomains 28835 5.66 0.03 7.60 39 XM_DK_Undo_02 28511 15.91 40.21 7.52 40 FSL_BULK_SIG 28201 10.12 17.90 7.44 41 TR_XM_DK_Bayes1 28181 5.66 0.55 7.43 42 UNPARSEABLE_RELAY 27740 8.30 11.16 7.31 43 LOTS_OF_MONEY 27211 8.79 13.44 7.17 44 RCVD_IN_RP_SAFE 26154 5.99 3.36 6.90 45 RCVD_IN_RP_CERTIFIED 23741 5.27 2.42 6.26 46 TR_XM_UnparsRelay 23625 7.44 10.94 6.23 47 XM_SendGrid 23600 6.65 7.90 6.22 48 MIME_QP_LONG_LINE 22363 5.27 3.44 5.90 49 HTML_IMAGE_RATIO_04 21546 5.66 5.61 5.68 50 HTML_IMAGE_RATIO_02 20578 6.15 8.26 5.43 51 TR_XM_DKIM_Undo 20291 11.82 30.55 5.35 52 IN_ZIMBRA_NJ_WHITELIST 19974 3.93 0.06 5.27 53 BAYES_40 19973 4.45 2.11 5.27 54 RCVD_IN_IADB_LISTED 19881 4.42 2.06 5.24 55 T_TooManySym_01 19823 4.52 2.48 5.23 56 BAYES_99 19673 11.77 30.82 5.19 57 TR_XM_DK_Bayes2 19483 3.95 0.50 5.14 58 XM_H_Long_From01 18998 5.32 6.21 5.01 59 XM_PDF 18826 3.98 1.13 4.96 60 BAYES_20 18331 3.95 1.38 4.83 61 RCVD_IN_IADB_SPF 17543 3.90 1.81 4.63 62 TR_XM_SpammyWords4 17468 6.36 11.44 4.61 63 XMSubMetaSx_00 16924 5.78 9.58 4.46 64 BOTNET_IPINHOSTNAME 16819 6.80 13.65 4.43 65 MPART_ALT_DIFF 16735 6.15 11.16 4.41 66 RELAYCOUNTRY_META 16204 8.50 20.72 4.27 67 BAYES_80 15928 5.35 8.67 4.20 68 RCVD_IN_IADB_SENDERID 15832 3.54 1.70 4.17 69 BAYES_999 15771 8.96 22.83 4.16 70 XMStrtUSub 15633 4.05 3.83 4.12 71 XM_B_SpammyWords3 15613 6.47 13.29 4.12 72 RCVD_IN_IADB_DK 15421 3.46 1.71 4.07 73 HTML_IMAGE_RATIO_06 15304 3.80 3.12 4.04 74 XMSexyCombo_05 14735 6.12 12.59 3.89 75 XM_B_Phish_Phrases 14428 4.80 7.68 3.80 76 TR_XM_PhishingBody 14053 4.39 6.36 3.71 77 TR_XM_DK_SendGrid 14018 3.87 4.36 3.70 78 T_REMOTE_IMAGE 13513 4.92 8.86 3.56 79 DKIM_INVALID 13414 4.30 6.51 3.54 80 XM_UncommonTLD01 13200 6.77 16.29 3.48 81 XMNumbers 12800 3.96 5.65 3.37 82 T_HTML_ATTACH 12205 2.48 0.33 3.22 83 TM2_M_URI_OPT_OUT 11810 3.27 3.74 3.11 84 RCVD_IN_IADB_VOUCHED 11477 2.50 0.97 3.03 85 MIME_HTML_ONLY_MULTI 11305 3.19 3.81 2.98 86 XM_H_Trusted_IP 11141 2.18 0.00 2.94 87 BAYES_05 11079 2.36 0.75 2.92 88 MAILING_LIST_MULTI 10659 2.55 1.78 2.81 89 FROM_EXCESS_BASE64 10099 2.53 2.15 2.66 90 T_TooManySym_02 9965 2.18 0.88 2.63 91 RCVD_IN_MSPIKE_H5 9923 2.31 1.42 2.62 92 TR_DCC_Bayes_99 9760 8.15 24.30 2.57 93 BAYES_95 9714 3.24 5.21 2.56 94 XM_SPF_SoftFail 9674 2.92 3.99 2.55 95 URI_NOVOWEL 9440 3.11 4.92 2.49 96 HTML_IMAGE_RATIO_08 9369 2.43 2.32 2.47 97 ANY_BOUNCE_MESSAGE 9349 1.98 0.59 2.46 98 BOUNCE_MESSAGE 9347 1.98 0.59 2.46 99 TooManyTo_002 9132 2.01 0.87 2.41 100 HTML_MIME_NO_HTML_TAG 8881 3.81 8.04 2.34 101 T_XMDrugObfuBody_14 8643 2.54 3.29 2.28 102 MIME_HTML_MOSTLY 8305 3.53 7.39 2.19 103 TR_XM_SB_Phish 7839 2.25 2.79 2.07 104 XMSubPhish11 7729 2.22 2.75 2.04 105 HELO_NODOT 7623 1.65 0.61 2.01 106 HELO_NO_DOMAIN 7622 1.65 0.61 2.01 107 XM_B_Phish66 7572 2.40 3.57 2.00 108 KHOP_HELO_FCRDNS 7459 3.42 7.63 1.97 109 XM_B_SpammyTLD 7319 2.95 5.91 1.93 110 RCVD_IN_IADB_OPTIN 7253 1.59 0.67 1.91 111 IN_HORDE_ADDRESS_BOOK 7208 1.44 0.12 1.90 112 INVALID_MSGID 7122 1.43 0.14 1.88 113 T_XMDrugObfuBody_08 7022 2.25 3.40 1.85 114 BOTNET 6982 5.59 16.44 1.84 115 XM_B_Unsub2 6680 1.84 2.08 1.76 116 TR_XM_SpammyWords5 6515 2.02 2.89 1.72 117 TO_MALFORMED 6273 1.23 0.01 1.65 118 XM_CamelCaseFrm001 6216 1.73 2.00 1.64 119 TVD_RCVD_IP 6189 1.29 0.29 1.63 120 TR_Symld_Words 6153 1.54 1.30 1.62 121 SUBJ_ALL_CAPS 6149 1.56 1.37 1.62 122 XM_DK_Undo_01 5999 1.72 2.13 1.58 123 UNTRUSTED_Relay 5922 5.49 16.87 1.56 124 TooManyTo_003 5866 1.33 0.71 1.55 125 URI_HEX 5572 1.56 1.83 1.47 126 XMCapTrack 5072 1.11 0.44 1.34 127 XM_H_Long_From02 4792 1.22 1.08 1.26 128 TM2_M_VERY_LONG_WORD 4736 1.63 2.74 1.25 129 XMHTML_After_End 4601 1.19 1.12 1.21 130 XMGappySubj_01 4580 0.93 0.11 1.21 131 XM_GoogleGroups 4557 1.05 0.61 1.20 132 XMStockSpam_06 4554 1.27 1.47 1.20 133 XMDiploma_00 4479 1.48 2.34 1.18 134 HTML_FONT_FACE_BAD 4304 1.00 0.60 1.13 135 XM_B_COVIDMETA 4090 1.63 3.23 1.08 136 TooManyTo_004 4080 0.96 0.62 1.08 137 RELAYCOUNTRY_CA 3912 1.81 4.07 1.03 138 XM_UB50 3854 2.48 6.72 1.02 139 TR_XM_SpammyWords2 3842 3.52 10.79 1.01 140 URI_TRY_3LD 3803 1.19 1.75 1.00 141 XMBrknScrpt_02 3721 1.36 2.45 0.98 142 XMPhish30 3526 0.96 1.06 0.93 143 XM_OfRef6 3422 1.39 2.79 0.90 144 RELAYCOUNTRY_GB 3396 0.94 1.08 0.90 145 XMSexyCombo_01 3393 1.21 2.14 0.89 146 DKIM_ADSP_CUSTOM_MED 3348 0.82 0.64 0.88 147 TooManyTo_005 3297 0.79 0.55 0.87 148 XMBSHREFv2 3257 0.73 0.36 0.86 149 SpammyFromTLD_01 3116 1.90 5.00 0.82 150 T_XMHurry_00 3101 1.05 1.71 0.82 151 T_TooManySym_03 3049 0.67 0.29 0.80 152 HTTPS_HTTP_MISMATCH 2985 0.99 1.58 0.79 153 RCVD_IN_BL_SPAMCOP_NET 2971 2.59 7.80 0.78 154 XMLngstWrd_00 2904 0.67 0.40 0.77 155 TR_MetaPhish_Combo_01 2902 0.92 1.35 0.77 156 FROM_GOV_DKIM_AU 2862 0.63 0.27 0.75 157 XMSolicitRefs_0 2856 0.68 0.46 0.75 158 T_FILL_THIS_FORM_SHORT 2853 0.85 1.12 0.75 159 XMBdyGiftCard01 2770 0.87 1.26 0.73 160 XMBody_95 2741 0.59 0.20 0.72 161 XM_H_PHPMailer 2707 0.80 1.04 0.71 162 XMGenDplmaNmb 2700 0.92 1.52 0.71 163 XMNoVowels 2652 0.66 0.54 0.70 164 MSGID_NOFQDN1 2481 0.49 0.01 0.65 165 T_XMDrugObfuBody_00 2473 0.91 1.65 0.65 166 T_OBFU_PDF_ATTACH 2452 0.53 0.19 0.65 167 XMHTMLBadTable_001 2393 0.63 0.64 0.63 168 XMSubMetaI_00 2372 0.69 0.90 0.63 169 XM_SPF_Unknown 2371 0.67 0.82 0.63 170 RCVD_IN_SORBS_DUL 2310 0.52 0.26 0.61 171 TR_MSPIKEBAYES00 2227 0.44 0.02 0.59 172 SHORT_HELO_AND_INLINE_IMAGE 2210 0.45 0.07 0.58 173 XM_B_COPY_HTML 2135 0.57 0.60 0.56 174 XM_ShortIntro_01 2113 0.65 0.93 0.56 175 NML_ADSP_CUSTOM_MED 2113 0.54 0.48 0.56 176 XM_ProductURIs 2106 0.60 0.72 0.56 177 XMLngstWrd_01 2092 0.50 0.36 0.55 178 XMSubMetaSxObfu_04 2057 0.46 0.20 0.54 179 XMSexyCombo_04 1982 0.60 0.82 0.52 180 XMSubNoVowel 1977 0.56 0.67 0.52 181 RELAYCOUNTRY_DE 1975 0.97 2.26 0.52 182 TVD_SPACE_RATIO 1968 0.43 0.16 0.52 183 TM2_M_BODY_EMPTY 1957 0.43 0.18 0.52 184 T_Symld_Words_02 1936 0.60 0.85 0.51 185 XMMoneyMeta_00 1920 0.68 1.19 0.51 186 XMPhish14 1886 0.56 0.73 0.50 187 FROM_GOV_SPOOF 1830 0.39 0.14 0.48 188 XM_B_REG_HTML 1826 0.46 0.39 0.48 189 FORGED_GMAIL_RCVD 1782 0.48 0.51 0.47 190 HTML_IMAGE_ONLY_20 1776 0.54 0.73 0.47 191 HTML_TAG_BALANCE_BODY 1756 0.53 0.72 0.46 192 T_MANY_PILL_PRICE 1744 0.34 0.01 0.46 193 HTML_IMAGE_ONLY_32 1715 0.41 0.29 0.45 194 MISSING_HEADERS 1693 0.45 0.45 0.45 195 XMBody_17 1678 0.91 2.27 0.44 196 TR_XM_COVIDMETA4 1672 0.88 2.13 0.44 197 HTML_IMAGE_ONLY_28 1634 0.44 0.48 0.43 198 DIET_1 1608 0.84 2.05 0.42 199 RCVD_IN_MSPIKE_BL 1602 1.80 5.78 0.42 200 XM_B_SpammyWords4 1601 0.95 2.47 0.42 ----------------------------------------------------------------------