Email: 746263 Autolearn: 0 AvgScore: 3.57 AvgScanTime: 1.34 sec Spam: 229074 Autolearn: 0 AvgScore: 13.62 AvgScanTime: 1.43 sec Ham: 517189 Autolearn: 0 AvgScore: -0.89 AvgScanTime: 1.30 sec Time Spent Running SA: 278.50 hours Time Spent Processing Spam: 91.23 hours Time Spent Processing Ham: 187.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 218600 90.48 95.43 88.28 2 DKIM_SIGNED 189491 79.11 82.72 77.51 3 XM_DK_Pass 180875 77.07 78.96 76.23 4 DCC_CHECK 179061 52.24 78.17 40.76 5 DKIM_VALID 176748 75.12 77.16 74.22 6 XM_B_Unicode 167520 71.91 73.13 71.37 7 RELAYCOUNTRY_US 159599 79.42 69.67 83.73 8 XMListUnsubscribeExists 155370 56.53 67.83 51.53 9 XM_B_SpammyWords 150225 53.52 65.58 48.18 10 DKIM_VALID_AU 136209 55.93 59.46 54.36 11 XM_DK_Undo_02 108112 19.38 47.20 7.05 12 XM_B_SpammyWords2 83439 25.99 36.42 21.37 13 BAYES_99 83344 14.34 36.38 4.58 14 XM_B_Unicode3 81318 38.50 35.50 39.83 15 TR_XM_DKIM_Undo 81232 14.26 35.46 4.87 16 BAYES_50 78223 49.48 34.15 56.27 17 HTML_FONT_LOW_CONTRAST 77019 29.31 33.62 27.39 18 LOC_TINY_FONT_1 73792 26.16 32.21 23.48 19 DKIM_VALID_EF 71084 29.69 31.03 29.09 20 MIME_HTML_ONLY 66191 22.69 28.90 19.94 21 BAYES_999 65267 11.22 28.49 3.58 22 RCVD_IN_MSPIKE_H2 64478 27.82 28.15 27.67 23 RELAYCOUNTRY_META 64192 12.57 28.02 5.72 24 TR_DCC_Bayes_99 63350 9.91 27.65 2.06 25 T_KAM_HTML_FONT_INVALID 61703 21.71 26.94 19.39 26 XMSubLong 55001 21.94 24.01 21.02 27 FVGT_m_MULTI_ODD 52108 22.89 22.75 22.95 28 UNTRUSTED_Relay 48845 7.85 21.32 1.88 29 T_TM2_M_HEADER_IN_MSG 48242 27.90 21.06 30.93 30 DCC_CHECK_NEGATIVE 45960 45.74 20.06 57.12 31 XM_Body_Dirty_Words 41905 14.69 18.29 13.09 32 XM_Multi_Part_URI 41384 14.00 18.07 12.20 33 BOTNET 41192 6.65 17.98 1.64 34 RCVD_IN_MSPIKE_WL 37426 24.93 16.34 28.74 35 LOTS_OF_MONEY 35085 9.40 15.32 6.78 36 XM_B_Unsub 33270 12.01 14.52 10.90 37 FSL_BULK_SIG 32886 8.61 14.36 6.06 38 BOTNET_IPINHOSTNAME 31741 7.38 13.86 4.51 39 XM_UncommonTLD01 30670 6.35 13.39 3.23 40 TR_XM_SpammyWords2 30489 4.64 13.31 0.80 41 TR_XM_SpammyWords4 29964 7.09 13.08 4.44 42 MPART_ALT_DIFF 27128 6.81 11.84 4.58 43 RCVD_IN_MSPIKE_BL 25860 4.02 11.29 0.79 44 XM_B_SpammyWords3 25608 6.90 11.18 5.00 45 MIME_HTML_MOSTLY 23513 4.53 10.26 1.99 46 LotsOfNums_01 23090 9.53 10.08 9.29 47 XMSexyCombo_05 22476 5.41 9.81 3.46 48 BAYES_60 21343 8.30 9.32 7.85 49 BAYES_80 21073 5.90 9.20 4.43 50 XM_Evil_Numbers_Gen 20551 8.05 8.97 7.65 51 T_REMOTE_IMAGE 20131 5.03 8.79 3.36 52 RCVD_IN_MSPIKE_H3 19620 13.34 8.56 15.46 53 RCVD_IN_BL_SPAMCOP_NET 18980 3.18 8.29 0.92 54 HTML_MIME_NO_HTML_TAG 18328 3.92 8.00 2.12 55 KHOP_HELO_FCRDNS 17761 3.77 7.75 2.01 56 XM_UB50 17606 3.02 7.69 0.95 57 HTML_IMAGE_RATIO_02 17376 6.60 7.59 6.17 58 SpammyFromTLD_01 16520 2.87 7.21 0.94 59 RCVD_IN_MSPIKE_L3 15984 2.55 6.98 0.59 60 RCVD_IN_MSPIKE_H4 15855 9.36 6.92 10.44 61 TR_XM_SpammyWords3 15472 2.44 6.75 0.53 62 XMSubMetaSx_00 14424 4.28 6.30 3.39 63 BODY_URI_ONLY 14321 1.95 6.25 0.04 64 RELAYCOUNTRY_CA 14288 2.98 6.24 1.54 65 URIBL_SBL_A 13771 2.08 6.01 0.34 66 XMNumbers 13485 3.95 5.89 3.09 67 RELAYCOUNTRY_FR 13110 1.97 5.72 0.31 68 DKIM_INVALID 12743 3.99 5.56 3.29 69 TooManyTo_001 12681 7.51 5.54 8.39 70 XM_B_Phish_Phrases 12532 4.44 5.47 3.98 71 BAYES_95 12425 3.57 5.42 2.75 72 HTML_IMAGE_RATIO_04 12189 5.26 5.32 5.23 73 TR_LOTS_OF_MONEY3 11728 1.98 5.12 0.59 74 UNPARSEABLE_RELAY 11710 7.40 5.11 8.42 75 HTML_IMAGE_ONLY_08 11600 1.63 5.06 0.11 76 TR_XM_PhishingBody 11439 3.59 4.99 2.97 77 XM_H_Long_From01 11332 5.29 4.95 5.44 78 XMStrtUSub 11132 4.65 4.86 4.56 79 HTML_IMAGE_RATIO_08 10812 3.37 4.72 2.77 80 HTML_IMAGE_RATIO_06 10224 4.62 4.46 4.69 81 XM_UB60 10133 1.42 4.42 0.09 82 XM_SPF_SoftFail 10030 2.95 4.38 2.32 83 XM_SendGrid 9908 6.61 4.33 7.62 84 XM_UB99 9671 1.30 4.22 0.00 85 TM2_M_URI_OPT_OUT 9545 3.40 4.17 3.06 86 T_FONT_INVIS_NAKED_TO 9397 2.52 4.10 1.82 87 XM_OfRef6 9029 2.02 3.94 1.16 88 XMBrknScrpt_02 8922 1.78 3.89 0.84 89 XM_DIRTYINTL 8837 1.52 3.86 0.48 90 XMBody_17 8784 1.64 3.83 0.66 91 RCVD_IN_RP_SAFE 8505 5.49 3.71 6.27 92 TR_XM_MaxBayes 8183 1.11 3.57 0.02 93 SpammyFromTLD_02 8059 1.31 3.52 0.33 94 TR_XM_SpammyWords5 7922 2.05 3.46 1.43 95 RELAYCOUNTRY_IN 7815 1.11 3.41 0.09 96 TR_XM_MaxSPIKE 7725 1.05 3.37 0.02 97 URI_HEX 7708 1.86 3.36 1.19 98 RCVD_IN_RP_RNBL 7362 1.03 3.21 0.06 99 XMDiploma_00 7225 2.47 3.15 2.16 100 RCVD_IN_RP_CERTIFIED 7051 4.93 3.08 5.75 101 XM_B_Phish66 6940 2.13 3.03 1.73 102 RCVD_IN_MSPIKE_L5 6811 1.02 2.97 0.15 103 XM_UB999 6752 0.91 2.95 0.00 104 T_XMDrugObfuBody_08 6687 2.27 2.92 1.99 105 RELAYCOUNTRY_UA 6479 0.87 2.83 0.01 106 XM_B_SpammyTLD 6385 2.38 2.79 2.19 107 T_XMHurry_00 5807 1.28 2.53 0.72 108 XM_UB80 5609 0.77 2.45 0.03 109 URI_TRY_3LD 5601 1.77 2.45 1.47 110 XM_B_Unsub2 5475 2.38 2.39 2.38 111 HTML_FONT_SIZE_LARGE 5464 0.80 2.39 0.10 112 TR_XM_DK_SendGrid 5364 3.97 2.34 4.69 113 LH_URI_DOM_IN_PATH 5307 2.23 2.32 2.20 114 MIME_QP_LONG_LINE 5280 4.75 2.30 5.83 115 TO_NO_BRKTS_HTML_ONLY 5192 0.80 2.27 0.15 116 BOTNET_NORDNS 5066 0.69 2.21 0.02 117 XM_B_COVIDMETA 4947 1.22 2.16 0.80 118 RCVD_IN_IADB_LISTED 4914 4.90 2.15 6.12 119 XM_CamelCaseFrm001 4794 2.01 2.09 1.98 120 BAYES_40 4647 3.78 2.03 4.55 121 XMMoneyMeta_00 4404 0.96 1.92 0.54 122 RCVD_IN_IADB_SPF 4350 4.29 1.90 5.35 123 MIME_HTML_ONLY_MULTI 4324 2.71 1.89 3.08 124 XM_B_SpammyWords4 4317 0.93 1.88 0.50 125 FROM_EXCESS_BASE64 4291 2.25 1.87 2.42 126 T_FILL_THIS_FORM_SHORT 4289 1.21 1.87 0.92 127 TR_XM_SB_Phish 4275 2.01 1.87 2.07 128 SUBJ_ALL_CAPS 4229 1.54 1.85 1.40 129 TM2_M_VERY_LONG_WORD 4125 1.32 1.80 1.10 130 XMSubPhish11 4078 1.96 1.78 2.04 131 RCVD_IN_IADB_SENDERID 4033 3.86 1.76 4.79 132 RCVD_IN_IADB_DK 4017 3.77 1.75 4.66 133 XM_DK_Undo_01 3996 1.63 1.74 1.58 134 RELAYCOUNTRY_GB 3984 1.20 1.74 0.96 135 HTML_IMAGE_ONLY_12 3964 0.67 1.73 0.20 136 RCVD_IN_PSBL 3938 0.59 1.72 0.09 137 T_TooManySym_01 3919 4.41 1.71 5.60 138 TR_Symld_Words 3896 1.71 1.70 1.71 139 XMSexyCombo_01 3782 0.83 1.65 0.47 140 XMGenDplmaNmb 3782 1.42 1.65 1.31 141 XM_UB95 3737 0.51 1.63 0.01 142 XM_URI_RBL 3715 0.61 1.62 0.16 143 TR_XM_UnparsRelay 3674 0.69 1.60 0.29 144 BAYES_20 3620 2.82 1.58 3.37 145 TR_XM_COVIDMETA4 3591 0.75 1.57 0.39 146 URI_PHP_REDIR 3458 0.47 1.51 0.01 147 MAILING_LIST_MULTI 3352 2.85 1.46 3.46 148 T_XMDrugObfuBody_14 3351 1.55 1.46 1.59 149 ALL_TRUSTED 3340 9.18 1.46 12.60 150 URI_NO_WWW_BIZ_CGI 3332 0.47 1.45 0.03 151 PDS_OTHER_BAD_TLD 3328 0.73 1.45 0.41 152 XMStockSpam_06 3149 1.23 1.37 1.16 153 TR_XM_INV_DKIM 3073 0.46 1.34 0.07 154 TR_XM_PHPDW 3046 0.64 1.33 0.33 155 TR_XM_PHPForged 3006 0.61 1.31 0.30 156 TR_XM_FormFill2 2975 0.60 1.30 0.30 157 XM_H_PHPOS 2963 0.60 1.29 0.29 158 RDNS_DYNAMIC 2893 0.70 1.26 0.45 159 T_HTML_TAG_BALANCE_CENTER 2878 0.46 1.26 0.10 160 XM_S_ServInvoice 2828 0.42 1.23 0.06 161 RELAYCOUNTRY_DE 2754 0.72 1.20 0.51 162 XMSubNoVowel 2651 1.47 1.16 1.61 163 TR_Mismatch_TLD_01 2646 0.66 1.16 0.45 164 XMSlimDrugH 2627 0.58 1.15 0.33 165 REMOVE_BEFORE_LINK 2624 0.54 1.15 0.27 166 TO_NO_BRKTS_PCNT 2621 0.35 1.14 0.00 167 URI_NOVOWEL 2586 2.27 1.13 2.78 168 T_XMDrugObfuBody_00 2513 0.88 1.10 0.78 169 FROM_SUSPICIOUS_NTLD 2487 0.38 1.09 0.06 170 XMBdyGiftCard01 2479 0.77 1.08 0.63 171 BAYES_00 2475 10.04 1.08 14.00 172 DKIM_ADSP_CUSTOM_MED 2473 1.07 1.08 1.07 173 TR_Mismatch_TLD_02 2458 0.39 1.07 0.09 174 HTML_TAG_BALANCE_BODY 2424 0.66 1.06 0.48 175 TR_XM_COVIDMETA1 2403 0.51 1.05 0.27 176 FROM_SUSPICIOUS_NTLD_FP 2386 0.36 1.04 0.06 177 XMSubMetaI_00 2375 0.75 1.04 0.62 178 TR_XM_FormFill 2372 0.33 1.04 0.01 179 XMHTML_After_End 2369 0.90 1.03 0.84 180 DATE_IN_PAST_03_06 2341 0.37 1.02 0.09 181 RCVD_IN_MSPIKE_L4 2340 0.34 1.02 0.04 182 NML_ADSP_CUSTOM_MED 2220 0.76 0.97 0.67 183 RCVD_IN_IADB_VOUCHED 2217 2.83 0.97 3.65 184 FORGED_GMAIL_RCVD 2208 0.75 0.96 0.65 185 XMBody_78 2181 0.60 0.95 0.44 186 XM_B_SEO 2181 0.37 0.95 0.10 187 LongTLD 2101 0.40 0.92 0.18 188 HK_RANDOM_REPLYTO 2084 0.43 0.91 0.22 189 T_Symld_Words_02 2043 0.69 0.89 0.60 190 XM_OfRef7 1966 0.37 0.86 0.16 191 FROM_MISSP_REPLYTO 1964 0.27 0.86 0.01 192 RCVD_IN_MSPIKE_H5 1951 2.23 0.85 2.85 193 SUBJ_DOLLARS 1941 0.50 0.85 0.34 194 BAYES_05 1924 1.77 0.84 2.18 195 SHORTENED_URL_HREF 1908 0.67 0.83 0.59 196 XM_Combo_Sbj 1841 0.43 0.80 0.27 197 XM_H_Long_From02 1830 1.09 0.80 1.21 198 XMPhish30 1827 0.47 0.80 0.33 199 HTML_IMAGE_ONLY_32 1818 0.56 0.79 0.46 200 XM_SPF_Unknown 1813 0.68 0.79 0.62 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 456584 90.48 95.43 88.28 2 RELAYCOUNTRY_US 433065 79.42 69.67 83.73 3 DKIM_SIGNED 400860 79.11 82.72 77.51 4 XM_DK_Pass 394272 77.07 78.96 76.23 5 DKIM_VALID 383857 75.12 77.16 74.22 6 XM_B_Unicode 369103 71.91 73.13 71.37 7 DCC_CHECK_NEGATIVE 295401 45.74 20.06 57.12 8 BAYES_50 291046 49.48 34.15 56.27 9 DKIM_VALID_AU 281167 55.93 59.46 54.36 10 XMListUnsubscribeExists 266493 56.53 67.83 51.53 11 XM_B_SpammyWords 249172 53.52 65.58 48.18 12 DCC_CHECK 210807 52.24 78.17 40.76 13 XM_B_Unicode3 206022 38.50 35.50 39.83 14 T_TM2_M_HEADER_IN_MSG 159973 27.90 21.06 30.93 15 DKIM_VALID_EF 150467 29.69 31.03 29.09 16 RCVD_IN_MSPIKE_WL 148640 24.93 16.34 28.74 17 RCVD_IN_MSPIKE_H2 143114 27.82 28.15 27.67 18 HTML_FONT_LOW_CONTRAST 141681 29.31 33.62 27.39 19 LOC_TINY_FONT_1 121437 26.16 32.21 23.48 20 FVGT_m_MULTI_ODD 118706 22.89 22.75 22.95 21 XM_B_SpammyWords2 110518 25.99 36.42 21.37 22 XMSubLong 108714 21.94 24.01 21.02 23 MIME_HTML_ONLY 103119 22.69 28.90 19.94 24 T_KAM_HTML_FONT_INVALID 100308 21.71 26.94 19.39 25 RCVD_IN_MSPIKE_H3 79937 13.34 8.56 15.46 26 BAYES_00 72415 10.04 1.08 14.00 27 XM_Body_Dirty_Words 67708 14.69 18.29 13.09 28 ALL_TRUSTED 65190 9.18 1.46 12.60 29 XM_Multi_Part_URI 63105 14.00 18.07 12.20 30 XM_B_Unsub 56348 12.01 14.52 10.90 31 RCVD_IN_MSPIKE_H4 53979 9.36 6.92 10.44 32 TR_XM_DK_Bayes 48418 6.70 0.71 9.36 33 LotsOfNums_01 48034 9.53 10.08 9.29 34 TR_XM_DK_Bayes1 47300 6.55 0.68 9.15 35 UNPARSEABLE_RELAY 43548 7.40 5.11 8.42 36 TooManyTo_001 43389 7.51 5.54 8.39 37 XM_DKIMWhitelistDomains 42384 5.69 0.03 8.20 38 TR_XM_DK_Bayes2 42218 5.85 0.63 8.16 39 BAYES_60 40583 8.30 9.32 7.85 40 XM_Evil_Numbers_Gen 39546 8.05 8.97 7.65 41 XM_SendGrid 39402 6.61 4.33 7.62 42 XM_DK_Undo_02 36485 19.38 47.20 7.05 43 LOTS_OF_MONEY 35079 9.40 15.32 6.78 44 IN_ZIMBRA_NJ_WHITELIST 32464 4.37 0.06 6.28 45 RCVD_IN_RP_SAFE 32444 5.49 3.71 6.27 46 HTML_IMAGE_RATIO_02 31899 6.60 7.59 6.17 47 RCVD_IN_IADB_LISTED 31657 4.90 2.15 6.12 48 FSL_BULK_SIG 31343 8.61 14.36 6.06 49 MIME_QP_LONG_LINE 30153 4.75 2.30 5.83 50 RCVD_IN_RP_CERTIFIED 29738 4.93 3.08 5.75 51 RELAYCOUNTRY_META 29587 12.57 28.02 5.72 52 T_TooManySym_01 28986 4.41 1.71 5.60 53 XM_H_Long_From01 28110 5.29 4.95 5.44 54 RCVD_IN_IADB_SPF 27679 4.29 1.90 5.35 55 HTML_IMAGE_RATIO_04 27028 5.26 5.32 5.23 56 XM_B_SpammyWords3 25880 6.90 11.18 5.00 57 TR_XM_DKIM_Undo 25173 14.26 35.46 4.87 58 RCVD_IN_IADB_SENDERID 24780 3.86 1.76 4.79 59 HTML_IMAGE_RATIO_06 24258 4.62 4.46 4.69 60 TR_XM_DK_SendGrid 24242 3.97 2.34 4.69 61 RCVD_IN_IADB_DK 24117 3.77 1.75 4.66 62 BAYES_99 23702 14.34 36.38 4.58 63 MPART_ALT_DIFF 23686 6.81 11.84 4.58 64 XMStrtUSub 23585 4.65 4.86 4.56 65 BAYES_40 23552 3.78 2.03 4.55 66 BOTNET_IPINHOSTNAME 23311 7.38 13.86 4.51 67 XM_PDF 23007 3.32 0.77 4.45 68 TR_XM_SpammyWords4 22944 7.09 13.08 4.44 69 BAYES_80 22926 5.90 9.20 4.43 70 XM_B_Phish_Phrases 20608 4.44 5.47 3.98 71 RCVD_IN_IADB_VOUCHED 18878 2.83 0.97 3.65 72 BAYES_999 18497 11.22 28.49 3.58 73 XMSexyCombo_05 17901 5.41 9.81 3.46 74 MAILING_LIST_MULTI 17889 2.85 1.46 3.46 75 XMSubMetaSx_00 17540 4.28 6.30 3.39 76 BAYES_20 17446 2.82 1.58 3.37 77 T_REMOTE_IMAGE 17387 5.03 8.79 3.36 78 DKIM_INVALID 17003 3.99 5.56 3.29 79 XM_UncommonTLD01 16681 6.35 13.39 3.23 80 XMNumbers 15962 3.95 5.89 3.09 81 MIME_HTML_ONLY_MULTI 15909 2.71 1.89 3.08 82 TM2_M_URI_OPT_OUT 15836 3.40 4.17 3.06 83 TR_XM_PhishingBody 15353 3.59 4.99 2.97 84 RCVD_IN_MSPIKE_H5 14724 2.23 0.85 2.85 85 XM_H_Trusted_IP 14412 1.93 0.00 2.79 86 URI_NOVOWEL 14372 2.27 1.13 2.78 87 HTML_IMAGE_RATIO_08 14312 3.37 4.72 2.77 88 T_TooManySym_02 14265 2.07 0.51 2.76 89 BAYES_95 14222 3.57 5.42 2.75 90 FROM_EXCESS_BASE64 12529 2.25 1.87 2.42 91 XM_B_Unsub2 12298 2.38 2.39 2.38 92 RCVD_IN_IADB_OPTIN 12295 1.86 0.69 2.38 93 XM_SPF_SoftFail 11992 2.95 4.38 2.32 94 LH_URI_DOM_IN_PATH 11361 2.23 2.32 2.20 95 XM_B_SpammyTLD 11349 2.38 2.79 2.19 96 BAYES_05 11296 1.77 0.84 2.18 97 XMDiploma_00 11183 2.47 3.15 2.16 98 HTML_MIME_NO_HTML_TAG 10950 3.92 8.00 2.12 99 TR_XM_SB_Phish 10696 2.01 1.87 2.07 100 TR_DCC_Bayes_99 10637 9.91 27.65 2.06 101 XMSubPhish11 10539 1.96 1.78 2.04 102 TooManyTo_002 10417 1.57 0.58 2.01 103 KHOP_HELO_FCRDNS 10399 3.77 7.75 2.01 104 MIME_HTML_MOSTLY 10287 4.53 10.26 1.99 105 T_XMDrugObfuBody_08 10271 2.27 2.92 1.99 106 XM_CamelCaseFrm001 10224 2.01 2.09 1.98 107 ANY_BOUNCE_MESSAGE 10109 1.50 0.48 1.95 108 BOUNCE_MESSAGE 10109 1.50 0.48 1.95 109 UNTRUSTED_Relay 9716 7.85 21.32 1.88 110 XMNoVowels 9708 1.39 0.30 1.88 111 TVD_RCVD_IP 9541 1.43 0.50 1.84 112 T_FONT_INVIS_NAKED_TO 9402 2.52 4.10 1.82 113 XM_B_Phish66 8942 2.13 3.03 1.73 114 TR_Symld_Words 8858 1.71 1.70 1.71 115 BOTNET 8468 6.65 17.98 1.64 116 XMSubNoVowel 8326 1.47 1.16 1.61 117 T_XMDrugObfuBody_14 8242 1.55 1.46 1.59 118 XM_DK_Undo_01 8183 1.63 1.74 1.58 119 HELO_NODOT 8021 1.29 0.69 1.55 120 HELO_NO_DOMAIN 8018 1.29 0.69 1.55 121 RELAYCOUNTRY_CA 7948 2.98 6.24 1.54 122 IN_HORDE_ADDRESS_BOOK 7820 1.08 0.09 1.51 123 URI_TRY_3LD 7590 1.77 2.45 1.47 124 TR_XM_SpammyWords5 7394 2.05 3.46 1.43 125 SUBJ_ALL_CAPS 7237 1.54 1.85 1.40 126 INVALID_MSGID 7216 1.03 0.22 1.40 127 TooManyTo_003 7091 1.09 0.46 1.37 128 XMGappySubj_01 6906 1.00 0.23 1.34 129 XMGenDplmaNmb 6781 1.42 1.65 1.31 130 TO_MALFORMED 6570 0.88 0.01 1.27 131 XM_ProductURIs 6511 1.09 0.71 1.26 132 MSGID_NOFQDN1 6447 0.87 0.02 1.25 133 XMCapTrack 6332 0.96 0.36 1.22 134 XM_H_Long_From02 6268 1.09 0.80 1.21 135 URI_HEX 6158 1.86 3.36 1.19 136 XM_OfRef6 6025 2.02 3.94 1.16 137 XMStockSpam_06 6007 1.23 1.37 1.16 138 RELAYCOUNTRY_NL 5986 1.04 0.78 1.16 139 T_TooManySym_03 5860 0.83 0.16 1.13 140 XM_GoogleGroups 5778 0.91 0.43 1.12 141 HELO_MISC_IP 5765 0.85 0.25 1.11 142 CK_HELO_DYNAMIC_SPLIT_IP 5756 0.91 0.45 1.11 143 TM2_M_VERY_LONG_WORD 5707 1.32 1.80 1.10 144 DKIM_ADSP_CUSTOM_MED 5520 1.07 1.08 1.07 145 TR_MSPIKEBAYES00 5518 0.76 0.08 1.07 146 TooManyTo_004 5144 0.81 0.39 0.99 147 USER_IN_DEF_DKIM_WL 5011 0.67 0.01 0.97 148 RELAYCOUNTRY_GB 4952 1.20 1.74 0.96 149 XM_UB50 4926 3.02 7.69 0.95 150 HTML_FONT_FACE_BAD 4875 0.86 0.69 0.94 151 SpammyFromTLD_01 4872 2.87 7.21 0.94 152 RCVD_IN_BL_SPAMCOP_NET 4781 3.18 8.29 0.92 153 T_FILL_THIS_FORM_SHORT 4744 1.21 1.87 0.92 154 XMBSHREFv2 4707 0.70 0.21 0.91 155 XMBody_95 4486 0.65 0.16 0.87 156 XMHTML_After_End 4367 0.90 1.03 0.84 157 XMBrknScrpt_02 4326 1.78 3.89 0.84 158 TR_MetaPhish_Combo_01 4318 0.75 0.56 0.83 159 TooManyTo_005 4216 0.67 0.34 0.82 160 FROM_GOV_DKIM_AU 4148 0.59 0.11 0.80 161 XM_B_COVIDMETA 4123 1.22 2.16 0.80 162 TR_XM_SpammyWords2 4121 4.64 13.31 0.80 163 RCVD_IN_MSPIKE_BL 4104 4.02 11.29 0.79 164 T_XMDrugObfuBody_00 4053 0.88 1.10 0.78 165 XMSubEmpty 3975 0.70 0.56 0.77 166 T_XMHurry_00 3738 1.28 2.53 0.72 167 T_TooManySym_04 3616 0.50 0.06 0.70 168 HTTPS_HTTP_MISMATCH 3570 0.67 0.63 0.69 169 NML_ADSP_CUSTOM_MED 3483 0.76 0.97 0.67 170 XMBody_17 3419 1.64 3.83 0.66 171 FORGED_GMAIL_RCVD 3361 0.75 0.96 0.65 172 XMBdyGiftCard01 3270 0.77 1.08 0.63 173 XM_SPF_Unknown 3232 0.68 0.79 0.62 174 XMSubMetaI_00 3186 0.75 1.04 0.62 175 T_Symld_Words_02 3119 0.69 0.89 0.60 176 T_OBFU_PDF_ATTACH 3085 0.45 0.13 0.60 177 SHORTENED_URL_HREF 3068 0.67 0.83 0.59 178 TR_LOTS_OF_MONEY3 3067 1.98 5.12 0.59 179 RCVD_IN_MSPIKE_L3 3060 2.55 6.98 0.59 180 XMHTMLBadTable_001 2895 0.57 0.58 0.56 181 DKIM_ADSP_NXDOMAIN 2849 0.61 0.76 0.55 182 XM_ShortIntro_01 2823 0.52 0.46 0.55 183 XMMoneyMeta_00 2785 0.96 1.92 0.54 184 XM_H_PHPMailer 2783 0.51 0.44 0.54 185 TR_XM_SpammyWords3 2761 2.44 6.75 0.53 186 NO_DNS_FOR_FROM 2756 0.56 0.62 0.53 187 NUMERIC_HTTP_ADDR 2750 0.46 0.31 0.53 188 RELAYCOUNTRY_DE 2626 0.72 1.20 0.51 189 XM_B_SpammyWords4 2590 0.93 1.88 0.50 190 XM_DIRTYINTL 2492 1.52 3.86 0.48 191 HTML_TAG_BALANCE_BODY 2489 0.66 1.06 0.48 192 XM_shorewaves_Whitelist 2457 0.33 0.00 0.48 193 XM_RXBody 2455 0.46 0.42 0.47 194 XMPhish08 2435 0.49 0.54 0.47 195 XMSexyCombo_01 2407 0.83 1.65 0.47 196 HTML_IMAGE_ONLY_32 2377 0.56 0.79 0.46 197 RDNS_DYNAMIC 2324 0.70 1.26 0.45 198 TM2_M_BODY_EMPTY 2319 0.33 0.05 0.45 199 TR_Mismatch_TLD_01 2307 0.66 1.16 0.45 200 SENDGRID_REDIR 2306 0.54 0.75 0.45 ----------------------------------------------------------------------