Email: 684931 Autolearn: 0 AvgScore: 3.81 AvgScanTime: 1.32 sec Spam: 194965 Autolearn: 0 AvgScore: 13.74 AvgScanTime: 1.46 sec Ham: 489966 Autolearn: 0 AvgScore: -0.15 AvgScanTime: 1.26 sec Time Spent Running SA: 250.63 hours Time Spent Processing Spam: 79.19 hours Time Spent Processing Ham: 171.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 178950 90.08 91.79 89.41 2 DKIM_SIGNED 150548 79.19 77.22 79.98 3 DCC_CHECK 147227 49.52 75.51 39.18 4 XM_DK_Pass 145721 77.65 74.74 78.81 5 RELAYCOUNTRY_US 145250 80.92 74.50 83.48 6 XM_B_Unicode 142893 72.24 73.29 71.82 7 DKIM_VALID 141665 75.39 72.66 76.48 8 XM_B_SpammyWords 132127 54.79 67.77 49.62 9 XMListUnsubscribeExists 127356 56.33 65.32 52.75 10 DKIM_VALID_AU 109366 56.99 56.10 57.34 11 XM_DK_Undo_02 80072 18.06 41.07 8.91 12 BAYES_50 74288 50.89 38.10 55.98 13 XM_B_SpammyWords2 73453 27.42 37.67 23.34 14 XM_B_Unicode3 71484 40.06 36.67 41.42 15 BAYES_99 65742 13.51 33.72 5.46 16 HTML_FONT_LOW_CONTRAST 64669 29.76 33.17 28.40 17 LOC_TINY_FONT_1 63861 26.21 32.76 23.61 18 MIME_HTML_ONLY 61750 23.39 31.67 20.10 19 DKIM_VALID_EF 55256 29.96 28.34 30.61 20 RCVD_IN_MSPIKE_H2 53542 27.41 27.46 27.38 21 BAYES_999 51406 10.69 26.37 4.45 22 TR_DCC_Bayes_99 50175 9.10 25.74 2.48 23 FVGT_m_MULTI_ODD 49924 24.15 25.61 23.57 24 T_KAM_HTML_FONT_INVALID 46112 20.34 23.65 19.02 25 XMSubLong 45908 22.54 23.55 22.14 26 RELAYCOUNTRY_META 44118 10.29 22.63 5.38 27 DCC_CHECK_NEGATIVE 43591 48.28 22.36 58.59 28 T_TM2_M_HEADER_IN_MSG 43167 28.10 22.14 30.47 29 XM_Multi_Part_URI 40696 14.76 20.87 12.33 30 BOTNET 39364 7.35 20.19 2.24 31 XM_Body_Dirty_Words 35549 14.28 18.23 12.70 32 UNTRUSTED_Relay 34760 6.56 17.83 2.08 33 LOTS_OF_MONEY 32118 10.23 16.47 7.75 34 FSL_BULK_SIG 31701 8.52 16.26 5.44 35 RCVD_IN_MSPIKE_WL 29370 25.60 15.06 29.80 36 TR_XM_SpammyWords2 25893 4.88 13.28 1.53 37 XM_B_Unsub 23470 11.85 12.04 11.78 38 RCVD_IN_MSPIKE_BL 23061 3.81 11.83 0.62 39 XM_B_SpammyWords3 22983 7.74 11.79 6.13 40 XM_UncommonTLD01 22929 5.83 11.76 3.47 41 BOTNET_IPINHOSTNAME 22900 6.89 11.75 4.95 42 XM_B_Phish_Phrases 22114 8.13 11.34 6.85 43 XM_Evil_Numbers_Gen 19906 8.69 10.21 8.09 44 XMSexyCombo_05 19322 5.36 9.91 3.55 45 T_REMOTE_IMAGE 19156 5.42 9.83 3.67 46 LotsOfNums_01 17844 9.67 9.15 9.88 47 MPART_ALT_DIFF 17553 5.18 9.00 3.66 48 RCVD_IN_RP_RNBL 16793 2.54 8.61 0.13 49 RCVD_IN_MSPIKE_H3 16380 14.39 8.40 16.78 50 BAYES_80 15931 5.39 8.17 4.29 51 HTML_IMAGE_RATIO_02 15094 6.82 7.74 6.45 52 TR_XM_SpammyWords3 14099 2.31 7.23 0.35 53 MIME_HTML_MOSTLY 13871 3.62 7.11 2.23 54 BAYES_60 13694 7.24 7.02 7.33 55 RCVD_IN_PSBL 12882 1.89 6.61 0.01 56 XM_UB50 12798 2.62 6.56 1.05 57 RCVD_IN_MSPIKE_L5 12786 2.01 6.56 0.20 58 XMNumbers 12350 4.49 6.33 3.75 59 KHOP_HELO_FCRDNS 12310 2.97 6.31 1.65 60 RCVD_IN_BL_SPAMCOP_NET 12234 2.71 6.27 1.29 61 SHORTENED_URL_HREF 12134 2.01 6.22 0.33 62 XMSubMetaSx_00 12103 4.47 6.21 3.78 63 RCVD_IN_MSPIKE_H4 11794 9.35 6.05 10.66 64 HTML_SHORT_LINK_IMG_1 11292 1.66 5.79 0.02 65 TooManyTo_001 11278 8.21 5.78 9.17 66 UNPARSEABLE_RELAY 11089 7.27 5.69 7.90 67 SHORTENED_URL_SRC 11007 1.61 5.65 0.00 68 SHORTENER_SHORT_IMG 10991 1.60 5.64 0.00 69 HTML_IMAGE_RATIO_04 10936 5.21 5.61 5.05 70 HTML_IMAGE_ONLY_08 10786 1.65 5.53 0.11 71 BODY_URI_ONLY 10770 1.60 5.52 0.03 72 SHORT_SHORTNER 10697 1.57 5.49 0.01 73 SHORT_URI_3 10690 1.59 5.48 0.04 74 RELAYCOUNTRY_CA 10438 2.59 5.35 1.49 75 TR_XM_PhishingBody 10405 3.87 5.34 3.29 76 URIBL_SBL_A 10386 1.64 5.33 0.18 77 XMBrknScrpt_02 10242 2.29 5.25 1.12 78 BAYES_95 9768 3.26 5.01 2.56 79 XM_SendGrid 9727 6.63 4.99 7.28 80 XM_OfRef6 9704 2.38 4.98 1.35 81 TR_XM_COVIDMETA4 9449 1.71 4.85 0.47 82 SpammyFromTLD_01 9415 2.17 4.83 1.11 83 XM_H_Long_From01 9314 5.82 4.78 6.24 84 XM_B_COVIDMETA 9214 2.28 4.73 1.31 85 DATE_IN_PAST_03_06 9122 1.38 4.68 0.07 86 RCVD_IN_MSPIKE_L3 9068 1.59 4.65 0.38 87 DKIM_INVALID 8883 3.80 4.56 3.50 88 FROM_EXCESS_BASE64 8534 2.96 4.38 2.39 89 T_XMDrugObfuBody_08 8508 2.49 4.36 1.74 90 ANY_BOUNCE_MESSAGE 8365 2.86 4.29 2.29 91 BOUNCE_MESSAGE 8364 2.86 4.29 2.29 92 XM_Lotto 8252 1.32 4.23 0.15 93 XM_B_SpammyTLD 8235 2.67 4.22 2.06 94 HTML_IMAGE_RATIO_06 8000 3.85 4.10 3.75 95 T_FONT_INVIS_NAKED_TO 7760 2.63 3.98 2.09 96 XM_SPF_SoftFail 7676 2.30 3.94 1.65 97 SpammyFromTLD_02 7583 1.35 3.89 0.34 98 HTML_IMAGE_RATIO_08 7385 2.66 3.79 2.21 99 URI_PHP_REDIR 7339 1.08 3.76 0.01 100 XMBody_17 7297 1.61 3.74 0.76 101 HTML_MIME_NO_HTML_TAG 7274 2.94 3.73 2.63 102 XMStrtUSub 7272 4.12 3.73 4.27 103 TR_LOTS_OF_MONEY3 6967 1.69 3.57 0.93 104 URI_HEX 6962 2.00 3.57 1.38 105 TM2_M_URI_OPT_OUT 6747 2.82 3.46 2.57 106 XM_UB99 6476 0.95 3.32 0.00 107 XM_B_Phish66 6474 2.29 3.32 1.88 108 URI_TRY_3LD 6390 1.79 3.28 1.19 109 XMDiploma_00 6186 2.55 3.17 2.30 110 RELAYCOUNTRY_FR 6071 1.08 3.11 0.27 111 TR_XM_MaxBayes 6047 0.89 3.10 0.01 112 XM_DIRTYINTL 5783 1.23 2.97 0.54 113 RELAYCOUNTRY_IN 5750 0.91 2.95 0.10 114 XM_B_Unsub2 5739 3.27 2.94 3.40 115 BAYES_40 5627 4.34 2.89 4.92 116 LH_URI_DOM_IN_PATH 5583 2.13 2.86 1.84 117 TR_XM_DK_SendGrid 5332 3.97 2.73 4.46 118 DIET_1 5281 0.94 2.71 0.24 119 HTML_IMAGE_ONLY_12 5173 0.91 2.65 0.21 120 T_PDS_OTHER_BAD_TLD 5154 1.09 2.64 0.47 121 XM_UB999 4954 0.72 2.54 0.00 122 MIME_QP_LONG_LINE 4865 5.31 2.50 6.43 123 TR_XM_SB_Phish 4813 2.48 2.47 2.49 124 DKIM_ADSP_NXDOMAIN 4808 1.16 2.47 0.64 125 NO_DNS_FOR_FROM 4788 1.05 2.46 0.49 126 LOCALPART_IN_SUBJECT 4743 0.71 2.43 0.02 127 FROM_SUSPICIOUS_NTLD 4724 0.74 2.42 0.08 128 XMSubPhish11 4650 2.44 2.39 2.46 129 FROM_SUSPICIOUS_NTLD_FP 4639 0.73 2.38 0.07 130 BOTNET_NORDNS 4594 0.69 2.36 0.03 131 XM_CamelCaseFrm001 4497 2.09 2.31 2.00 132 MIME_HTML_ONLY_MULTI 4266 2.09 2.19 2.06 133 TO_NAME_SUBJ_NO_RDNS 4143 0.60 2.12 0.00 134 TR_XM_UnparsRelay 4068 0.96 2.09 0.51 135 XM_UB60 4041 0.65 2.07 0.08 136 TR_XM_MaxSPIKE 3978 0.59 2.04 0.02 137 BAYES_00 3912 10.38 2.01 13.71 138 XM_URI_RBL 3884 0.72 1.99 0.22 139 RCVD_IN_RP_SAFE 3880 5.85 1.99 7.39 140 RELAYCOUNTRY_GB 3861 1.33 1.98 1.07 141 TM2_M_VERY_LONG_WORD 3857 1.37 1.98 1.12 142 T_TooManySym_01 3826 4.24 1.96 5.14 143 BAYES_20 3812 3.10 1.96 3.56 144 RCVD_IN_IADB_LISTED 3710 4.80 1.90 5.95 145 T_FILL_THIS_FORM_SHORT 3681 1.26 1.89 1.01 146 XM_B_SpammyWords4 3630 0.99 1.86 0.65 147 XMSexyCombo_01 3616 0.90 1.85 0.51 148 SUBJ_ALL_CAPS 3352 1.65 1.72 1.63 149 XMGenDplmaNmb 3340 1.18 1.71 0.96 150 T_XMDrugObfuBody_14 3323 1.63 1.70 1.60 151 XM_OfRef7 3294 0.57 1.69 0.13 152 T_XMDrugObfuBody_00 3284 0.96 1.68 0.68 153 XMStockSpam_06 3111 1.15 1.60 0.97 154 XM_UB80 3109 0.48 1.59 0.04 155 RCVD_IN_IADB_SPF 3072 4.16 1.58 5.18 156 T_XMHurry_00 3015 0.76 1.55 0.45 157 TR_XM_COVIDMETA1 2998 0.66 1.54 0.31 158 LongTLD 2997 0.55 1.54 0.16 159 RCVD_IN_RP_CERTIFIED 2992 5.33 1.53 6.84 160 RELAYCOUNTRY_TR 2991 0.44 1.53 0.01 161 TR_XM_INV_DKIM 2893 0.47 1.48 0.07 162 TR_XM_PHPDW 2826 0.64 1.45 0.31 163 XMBdyGiftCard01 2799 1.01 1.44 0.83 164 TR_XM_PHPForged 2775 0.62 1.42 0.30 165 RCVD_IN_IADB_SENDERID 2770 3.72 1.42 4.64 166 RCVD_IN_IADB_DK 2767 3.62 1.42 4.50 167 TR_XM_FormFill2 2750 0.61 1.41 0.30 168 XM_H_PHPOS 2744 0.61 1.41 0.29 169 URI_NO_WWW_BIZ_CGI 2681 0.41 1.38 0.02 170 TR_XM_RelayPhish 2620 0.53 1.34 0.21 171 FILL_THIS_FORM 2610 0.53 1.34 0.21 172 TR_Mismatch_TLD_01 2565 0.59 1.32 0.30 173 TR_MetaPhish_Combo_01 2488 0.90 1.28 0.75 174 HTML_FONT_SIZE_LARGE 2486 0.43 1.28 0.09 175 HTTPS_HTTP_MISMATCH 2462 0.97 1.26 0.85 176 XMHTML_After_End 2443 1.03 1.25 0.95 177 XM_DK_Undo_01 2409 1.74 1.24 1.94 178 HK_RANDOM_FROM 2376 0.43 1.22 0.12 179 MAILING_LIST_MULTI 2374 2.45 1.22 2.94 180 T_FILL_THIS_FORM_LONG 2363 0.44 1.21 0.13 181 REMOVE_BEFORE_LINK 2303 0.56 1.18 0.31 182 RELAYCOUNTRY_DE 2280 0.67 1.17 0.46 183 XMSubNoVowel 2268 0.52 1.16 0.27 184 DKIM_ADSP_CUSTOM_MED 2179 1.16 1.12 1.18 185 URI_NOVOWEL 2174 2.25 1.12 2.70 186 TR_LOTS_OF_MONEY2 2158 0.49 1.11 0.24 187 T_MONEY_PERCENT 2158 0.49 1.11 0.24 188 TR_Symld_Words 2142 1.86 1.10 2.16 189 RCVD_IN_IADB_VOUCHED 2050 2.91 1.05 3.66 190 ALL_TRUSTED 2049 9.26 1.05 12.52 191 T_LONG_INVISIBLE_TEXT 2040 0.62 1.05 0.46 192 BAYES_05 2015 1.86 1.03 2.19 193 DATE_IN_PAST_06_12 2003 0.33 1.03 0.05 194 XM_UB95 1998 0.30 1.02 0.02 195 NML_ADSP_CUSTOM_MED 1993 0.88 1.02 0.83 196 XMSubMetaI_00 1982 0.63 1.02 0.47 197 ADVANCE_FEE_3_NEW_MONEY 1882 0.28 0.97 0.00 198 MIME_CHARSET_FARAWAY 1881 0.37 0.96 0.13 199 HK_RANDOM_REPLYTO 1859 0.45 0.95 0.24 200 XM_ProductURIs 1844 1.07 0.95 1.12 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 438060 90.08 91.79 89.41 2 RELAYCOUNTRY_US 409022 80.92 74.50 83.48 3 DKIM_SIGNED 391853 79.19 77.22 79.98 4 XM_DK_Pass 386152 77.65 74.74 78.81 5 DKIM_VALID 374722 75.39 72.66 76.48 6 XM_B_Unicode 351870 72.24 73.29 71.82 7 DCC_CHECK_NEGATIVE 287074 48.28 22.36 58.59 8 DKIM_VALID_AU 280942 56.99 56.10 57.34 9 BAYES_50 274274 50.89 38.10 55.98 10 XMListUnsubscribeExists 258444 56.33 65.32 52.75 11 XM_B_SpammyWords 243145 54.79 67.77 49.62 12 XM_B_Unicode3 202925 40.06 36.67 41.42 13 DCC_CHECK 191959 49.52 75.51 39.18 14 DKIM_VALID_EF 149972 29.96 28.34 30.61 15 T_TM2_M_HEADER_IN_MSG 149277 28.10 22.14 30.47 16 RCVD_IN_MSPIKE_WL 145997 25.60 15.06 29.80 17 HTML_FONT_LOW_CONTRAST 139138 29.76 33.17 28.40 18 RCVD_IN_MSPIKE_H2 134177 27.41 27.46 27.38 19 LOC_TINY_FONT_1 115686 26.21 32.76 23.61 20 FVGT_m_MULTI_ODD 115491 24.15 25.61 23.57 21 XM_B_SpammyWords2 114352 27.42 37.67 23.34 22 XMSubLong 108498 22.54 23.55 22.14 23 MIME_HTML_ONLY 98466 23.39 31.67 20.10 24 T_KAM_HTML_FONT_INVALID 93211 20.34 23.65 19.02 25 RCVD_IN_MSPIKE_H3 82203 14.39 8.40 16.78 26 BAYES_00 67171 10.38 2.01 13.71 27 XM_Body_Dirty_Words 62246 14.28 18.23 12.70 28 ALL_TRUSTED 61358 9.26 1.05 12.52 29 XM_Multi_Part_URI 60404 14.76 20.87 12.33 30 XM_B_Unsub 57728 11.85 12.04 11.78 31 RCVD_IN_MSPIKE_H4 52254 9.35 6.05 10.66 32 TR_XM_DK_Bayes 51857 7.76 0.67 10.58 33 TR_XM_DK_Bayes1 50241 7.52 0.65 10.25 34 LotsOfNums_01 48393 9.67 9.15 9.88 35 TooManyTo_001 44941 8.21 5.78 9.17 36 TR_XM_DK_Bayes2 44685 6.68 0.55 9.12 37 XM_DK_Undo_02 43654 18.06 41.07 8.91 38 XM_Evil_Numbers_Gen 39639 8.69 10.21 8.09 39 UNPARSEABLE_RELAY 38714 7.27 5.69 7.90 40 LOTS_OF_MONEY 37953 10.23 16.47 7.75 41 XM_DKIMWhitelistDomains 37630 5.50 0.03 7.68 42 IN_ZIMBRA_NJ_WHITELIST 36384 5.33 0.05 7.43 43 RCVD_IN_RP_SAFE 36220 5.85 1.99 7.39 44 BAYES_60 35906 7.24 7.02 7.33 45 XM_SendGrid 35657 6.63 4.99 7.28 46 XM_B_Phish_Phrases 33544 8.13 11.34 6.85 47 RCVD_IN_RP_CERTIFIED 33501 5.33 1.53 6.84 48 HTML_IMAGE_RATIO_02 31594 6.82 7.74 6.45 49 MIME_QP_LONG_LINE 31518 5.31 2.50 6.43 50 XM_H_Long_From01 30578 5.82 4.78 6.24 51 XM_B_SpammyWords3 30011 7.74 11.79 6.13 52 RCVD_IN_IADB_LISTED 29142 4.80 1.90 5.95 53 BAYES_99 26766 13.51 33.72 5.46 54 FSL_BULK_SIG 26665 8.52 16.26 5.44 55 RELAYCOUNTRY_META 26347 10.29 22.63 5.38 56 RCVD_IN_IADB_SPF 25404 4.16 1.58 5.18 57 T_TooManySym_01 25203 4.24 1.96 5.14 58 HTML_IMAGE_RATIO_04 24726 5.21 5.61 5.05 59 BOTNET_IPINHOSTNAME 24260 6.89 11.75 4.95 60 BAYES_40 24091 4.34 2.89 4.92 61 RCVD_IN_IADB_SENDERID 22723 3.72 1.42 4.64 62 XM_PDF 22288 3.52 0.92 4.55 63 RCVD_IN_IADB_DK 22044 3.62 1.42 4.50 64 TR_XM_DK_SendGrid 21830 3.97 2.73 4.46 65 BAYES_999 21792 10.69 26.37 4.45 66 BAYES_80 20998 5.39 8.17 4.29 67 XMStrtUSub 20941 4.12 3.73 4.27 68 XMSubMetaSx_00 18524 4.47 6.21 3.78 69 HTML_IMAGE_RATIO_06 18389 3.85 4.10 3.75 70 XMNumbers 18371 4.49 6.33 3.75 71 T_REMOTE_IMAGE 17993 5.42 9.83 3.67 72 MPART_ALT_DIFF 17931 5.18 9.00 3.66 73 RCVD_IN_IADB_VOUCHED 17910 2.91 1.05 3.66 74 BAYES_20 17438 3.10 1.96 3.56 75 XMSexyCombo_05 17396 5.36 9.91 3.55 76 DKIM_INVALID 17131 3.80 4.56 3.50 77 XM_UncommonTLD01 17012 5.83 11.76 3.47 78 XM_B_Unsub2 16683 3.27 2.94 3.40 79 TR_XM_PhishingBody 16105 3.87 5.34 3.29 80 MAILING_LIST_MULTI 14396 2.45 1.22 2.94 81 URI_NOVOWEL 13220 2.25 1.12 2.70 82 HTML_MIME_NO_HTML_TAG 12881 2.94 3.73 2.63 83 TM2_M_URI_OPT_OUT 12589 2.82 3.46 2.57 84 BAYES_95 12533 3.26 5.01 2.56 85 T_TooManySym_02 12516 1.99 0.57 2.55 86 TR_XM_SB_Phish 12190 2.48 2.47 2.49 87 TR_DCC_Bayes_99 12155 9.10 25.74 2.48 88 XMSubPhish11 12072 2.44 2.39 2.46 89 FROM_EXCESS_BASE64 11733 2.96 4.38 2.39 90 RCVD_IN_MSPIKE_H5 11540 1.86 0.61 2.36 91 RCVD_IN_IADB_OPTIN 11454 1.87 0.69 2.34 92 XMDiploma_00 11282 2.55 3.17 2.30 93 TooManyTo_002 11264 1.80 0.54 2.30 94 ANY_BOUNCE_MESSAGE 11222 2.86 4.29 2.29 95 BOUNCE_MESSAGE 11208 2.86 4.29 2.29 96 BOTNET 10987 7.35 20.19 2.24 97 MIME_HTML_MOSTLY 10912 3.62 7.11 2.23 98 HTML_IMAGE_RATIO_08 10826 2.66 3.79 2.21 99 BAYES_05 10730 1.86 1.03 2.19 100 TR_Symld_Words 10604 1.86 1.10 2.16 101 T_FONT_INVIS_NAKED_TO 10264 2.63 3.98 2.09 102 UNTRUSTED_Relay 10178 6.56 17.83 2.08 103 XM_B_SpammyTLD 10070 2.67 4.22 2.06 104 MIME_HTML_ONLY_MULTI 10069 2.09 2.19 2.06 105 XM_CamelCaseFrm001 9804 2.09 2.31 2.00 106 XM_DK_Undo_01 9515 1.74 1.24 1.94 107 XM_B_Phish66 9212 2.29 3.32 1.88 108 LH_URI_DOM_IN_PATH 9009 2.13 2.86 1.84 109 T_XMDrugObfuBody_08 8546 2.49 4.36 1.74 110 HELO_NODOT 8097 1.39 0.74 1.65 111 HELO_NO_DOMAIN 8095 1.39 0.74 1.65 112 KHOP_HELO_FCRDNS 8066 2.97 6.31 1.65 113 XM_SPF_SoftFail 8065 2.30 3.94 1.65 114 SUBJ_ALL_CAPS 7982 1.65 1.72 1.63 115 IN_HORDE_ADDRESS_BOOK 7973 1.19 0.09 1.63 116 T_XMDrugObfuBody_14 7818 1.63 1.70 1.60 117 TVD_RCVD_IP 7566 1.14 0.14 1.54 118 TR_XM_SpammyWords2 7519 4.88 13.28 1.53 119 TooManyTo_003 7457 1.21 0.42 1.52 120 INVALID_MSGID 7455 1.20 0.41 1.52 121 RELAYCOUNTRY_CA 7277 2.59 5.35 1.49 122 XM_H_Long_From02 6928 1.27 0.91 1.41 123 XMGappySubj_01 6914 1.10 0.31 1.41 124 URI_HEX 6746 2.00 3.57 1.38 125 XM_OfRef6 6612 2.38 4.98 1.35 126 TO_MALFORMED 6584 0.96 0.01 1.34 127 XM_B_COVIDMETA 6427 2.28 4.73 1.31 128 XMCapTrack 6354 1.03 0.37 1.30 129 RCVD_IN_BL_SPAMCOP_NET 6311 2.71 6.27 1.29 130 HELO_MISC_IP 6086 0.98 0.32 1.24 131 CK_HELO_DYNAMIC_SPLIT_IP 6082 0.99 0.36 1.24 132 USER_IN_DEF_DKIM_WL 5930 0.87 0.01 1.21 133 URI_TRY_3LD 5847 1.79 3.28 1.19 134 DKIM_ADSP_CUSTOM_MED 5794 1.16 1.12 1.18 135 XM_GoogleGroups 5683 0.94 0.39 1.16 136 TM2_M_VERY_LONG_WORD 5506 1.37 1.98 1.12 137 XM_ProductURIs 5478 1.07 0.95 1.12 138 XMBrknScrpt_02 5472 2.29 5.25 1.12 139 SpammyFromTLD_01 5421 2.17 4.83 1.11 140 TooManyTo_004 5265 0.87 0.36 1.07 141 XMBSHREFv2 5264 0.97 0.70 1.07 142 RELAYCOUNTRY_GB 5241 1.33 1.98 1.07 143 T_TooManySym_03 5205 0.81 0.17 1.06 144 XM_UB50 5160 2.62 6.56 1.05 145 TR_MSPIKEBAYES00 5074 0.74 0.00 1.04 146 T_FILL_THIS_FORM_SHORT 4960 1.26 1.89 1.01 147 XMStockSpam_06 4759 1.15 1.60 0.97 148 XMGenDplmaNmb 4717 1.18 1.71 0.96 149 FROM_GOV_DKIM_AU 4703 0.73 0.17 0.96 150 XMHTML_After_End 4646 1.03 1.25 0.95 151 TR_LOTS_OF_MONEY3 4577 1.69 3.57 0.93 152 HTTPS_HTTP_MISMATCH 4180 0.97 1.26 0.85 153 TooManyTo_005 4122 0.69 0.29 0.84 154 XMBdyGiftCard01 4085 1.01 1.44 0.83 155 NML_ADSP_CUSTOM_MED 4057 0.88 1.02 0.83 156 XMBody_95 3939 0.60 0.10 0.80 157 XMBody_17 3728 1.61 3.74 0.76 158 TR_MetaPhish_Combo_01 3682 0.90 1.28 0.75 159 XM_ShortIntro_01 3675 0.65 0.41 0.75 160 T_OBFU_PDF_ATTACH 3568 0.57 0.19 0.73 161 XM_SPF_Unknown 3489 0.75 0.84 0.71 162 T_XMDrugObfuBody_00 3323 0.96 1.68 0.68 163 XM_B_SpammyWords4 3167 0.99 1.86 0.65 164 DKIM_ADSP_NXDOMAIN 3134 1.16 2.47 0.64 165 XMNoVowels 3110 0.56 0.38 0.63 166 RCVD_IN_MSPIKE_BL 3037 3.81 11.83 0.62 167 HTML_FONT_FACE_BAD 3011 0.59 0.53 0.61 168 T_TooManySym_04 2980 0.45 0.05 0.61 169 NUMERIC_HTTP_ADDR 2910 0.66 0.82 0.59 170 TR_BOTNET_NEGATE 2908 0.67 0.87 0.59 171 XM_RXBody 2818 0.50 0.33 0.58 172 XMSubMetaSxObfu_02 2729 0.46 0.23 0.56 173 MPART_ALT_DIFF_COUNT 2724 0.61 0.74 0.56 174 XMMoneyMeta_00 2723 0.61 0.75 0.56 175 FORGED_GMAIL_RCVD 2680 0.65 0.91 0.55 176 XM_DIRTYINTL 2659 1.23 2.97 0.54 177 XM_B_REG_HTML 2658 0.55 0.56 0.54 178 HTML_TAG_BALANCE_BODY 2638 0.59 0.73 0.54 179 XMSolicitRefs_0 2616 0.49 0.36 0.53 180 RELAYCOUNTRY_AU 2610 0.56 0.61 0.53 181 PLING_QUERY 2606 0.51 0.44 0.53 182 XMPhish14 2553 0.55 0.61 0.52 183 SENDGRID_REDIR 2532 0.63 0.91 0.52 184 XMHTMLBadTable_001 2530 0.55 0.64 0.52 185 XMSexyCombo_01 2522 0.90 1.85 0.51 186 RDNS_DYNAMIC 2517 0.60 0.80 0.51 187 TR_XM_UnparsRelay 2516 0.96 2.09 0.51 188 T_Symld_Words_02 2497 0.61 0.85 0.51 189 FROM_GOV_SPOOF 2436 0.40 0.15 0.50 190 XM_H_PHPMailer 2410 0.49 0.49 0.49 191 NO_DNS_FOR_FROM 2393 1.05 2.46 0.49 192 XMSubMetaI_00 2310 0.63 1.02 0.47 193 T_PDS_OTHER_BAD_TLD 2310 1.09 2.64 0.47 194 TR_XM_COVIDMETA4 2288 1.71 4.85 0.47 195 RCVD_IN_SORBS_DUL 2282 0.38 0.15 0.47 196 RELAYCOUNTRY_DE 2276 0.67 1.17 0.46 197 XM_S_SubURI 2261 0.34 0.05 0.46 198 T_LONG_INVISIBLE_TEXT 2238 0.62 1.05 0.46 199 XMPhish08 2225 0.50 0.60 0.45 200 T_XMHurry_00 2216 0.76 1.55 0.45 ----------------------------------------------------------------------