Email: 723213 Autolearn: 0 AvgScore: 3.68 AvgScanTime: 1.48 sec Spam: 211518 Autolearn: 0 AvgScore: 13.81 AvgScanTime: 1.70 sec Ham: 511695 Autolearn: 0 AvgScore: -0.51 AvgScanTime: 1.38 sec Time Spent Running SA: 296.46 hours Time Spent Processing Spam: 99.88 hours Time Spent Processing Ham: 196.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 202702 91.01 95.83 89.02 2 DKIM_SIGNED 184424 81.60 87.19 79.29 3 XM_DK_Pass 178434 80.00 84.36 78.20 4 DKIM_VALID 175787 78.23 83.11 76.22 5 XM_B_Unicode 167619 74.04 79.25 71.89 6 DCC_CHECK 167142 54.13 79.02 43.85 7 RELAYCOUNTRY_US 165427 82.89 78.21 84.83 8 XM_B_SpammyWords 152591 56.75 72.14 50.39 9 XMListUnsubscribeExists 152447 58.07 72.07 52.28 10 DKIM_VALID_AU 136376 60.04 64.47 58.20 11 XM_DK_Undo_02 102167 19.96 48.30 8.24 12 XM_B_Unicode3 92294 42.64 43.63 42.22 13 XM_B_SpammyWords2 88088 27.04 41.65 21.00 14 TR_XM_DKIM_Undo 85407 16.08 40.38 6.04 15 LOC_TINY_FONT_1 83268 29.40 39.37 25.27 16 BAYES_50 79597 50.58 37.63 55.93 17 BAYES_99 75426 13.79 35.66 4.75 18 RCVD_IN_MSPIKE_H2 73635 30.55 34.81 28.78 19 HTML_FONT_LOW_CONTRAST 65358 28.86 30.90 28.01 20 DKIM_VALID_EF 64284 30.04 30.39 29.90 21 MIME_HTML_ONLY 62642 23.97 29.62 21.63 22 BAYES_999 61101 11.17 28.89 3.85 23 FVGT_m_MULTI_ODD 60844 25.38 28.77 23.99 24 TR_DCC_Bayes_99 59804 10.26 28.27 2.81 25 T_KAM_HTML_FONT_INVALID 58887 21.73 27.84 19.21 26 XMSubLong 50294 21.86 23.78 21.07 27 T_TM2_M_HEADER_IN_MSG 49347 27.38 23.33 29.06 28 RCVD_IN_MSPIKE_WL 46890 28.49 22.17 31.10 29 RELAYCOUNTRY_META 45201 9.86 21.37 5.10 30 XM_Body_Dirty_Words 43548 14.30 20.59 11.69 31 DCC_CHECK_NEGATIVE 40564 43.79 19.18 53.96 32 BOTNET 38388 6.91 18.15 2.27 33 XM_Multi_Part_URI 32816 12.70 15.51 11.53 34 LOTS_OF_MONEY 32202 9.59 15.22 7.25 35 XM_B_Unsub 32121 11.29 15.19 9.68 36 TR_XM_SpammyWords2 31980 5.11 15.12 0.98 37 XM_B_SpammyWords3 31978 8.31 15.12 5.50 38 BOTNET_IPINHOSTNAME 28540 7.50 13.49 5.03 39 TR_XM_SpammyWords4 27685 7.28 13.09 4.88 40 UNTRUSTED_Relay 27010 5.05 12.77 1.85 41 RCVD_IN_MSPIKE_H3 26184 14.99 12.38 16.07 42 XM_Evil_Numbers_Gen 24496 9.82 11.58 9.09 43 XMSexyCombo_05 23693 5.85 11.20 3.63 44 LotsOfNums_01 22797 9.49 10.78 8.96 45 RCVD_IN_BL_SPAMCOP_NET 22072 4.10 10.44 1.48 46 XM_UncommonTLD01 21154 5.14 10.00 3.13 47 HTML_IMAGE_RATIO_02 20811 8.01 9.84 7.25 48 MPART_ALT_DIFF 20510 6.37 9.70 5.00 49 RCVD_IN_MSPIKE_H4 18764 10.73 8.87 11.50 50 FSL_BULK_SIG 17520 6.53 8.28 5.81 51 XM_B_Phish_Phrases 16364 7.05 7.74 6.76 52 BAYES_80 15531 4.99 7.34 4.02 53 XMSubMetaSx_00 15397 4.51 7.28 3.37 54 UNPARSEABLE_RELAY 15352 7.89 7.26 8.16 55 MIME_HTML_MOSTLY 15242 3.76 7.21 2.34 56 TR_XM_UnparsRelay 14905 6.47 7.05 6.23 57 BAYES_60 13881 7.16 6.56 7.40 58 RELAYCOUNTRY_CA 13848 2.99 6.55 1.51 59 TR_XM_PhishingBody 13495 4.24 6.38 3.35 60 XM_H_Long_From01 13491 5.78 6.38 5.53 61 XM_SendGrid 12409 7.01 5.87 7.48 62 XMNumbers 11747 3.66 5.55 2.88 63 HTML_IMAGE_RATIO_04 11437 5.86 5.41 6.05 64 RCVD_IN_RP_SAFE 11193 7.63 5.29 8.60 65 BOTNET_NORDNS 10961 1.53 5.18 0.02 66 TooManyTo_001 10953 7.35 5.18 8.24 67 TR_XM_SpammyWords5 10697 2.74 5.06 1.78 68 HTML_MIME_NO_HTML_TAG 10353 2.98 4.89 2.19 69 XM_UB50 9928 2.19 4.69 1.15 70 URIBL_SBL_A 9489 2.10 4.49 1.11 71 BAYES_95 9467 3.06 4.48 2.48 72 XM_SPF_SoftFail 9162 2.45 4.33 1.68 73 RCVD_IN_RP_CERTIFIED 9003 6.67 4.26 7.67 74 XMStrtUSub 8829 6.11 4.17 6.92 75 TM2_M_URI_OPT_OUT 8814 2.92 4.17 2.41 76 XM_OfRef6 8699 1.83 4.11 0.89 77 DKIM_INVALID 8637 3.37 4.08 3.07 78 RCVD_IN_MSPIKE_BL 8545 1.31 4.04 0.19 79 HTML_IMAGE_RATIO_08 8529 3.07 4.03 2.67 80 SpammyFromTLD_01 8491 1.78 4.01 0.86 81 TR_XM_MSPIKECOMBO 8369 1.28 3.96 0.18 82 DKIM_ADSP_NXDOMAIN 7468 1.21 3.53 0.24 83 MIME_QP_LONG_LINE 7452 5.04 3.52 5.67 84 XMDiploma_00 7443 2.13 3.52 1.56 85 T_TooManySym_01 7354 4.57 3.48 5.02 86 TR_XM_DK_SendGrid 7275 4.43 3.44 4.83 87 HDRS_MISSP 7271 1.11 3.44 0.15 88 XM_B_SpammyTLD 7239 2.50 3.42 2.12 89 HTML_IMAGE_ONLY_08 7228 1.07 3.42 0.10 90 HTML_IMAGE_RATIO_06 7218 3.77 3.41 3.91 91 XM_DIRTYINTL 7215 1.31 3.41 0.44 92 HTML_SHORT_LINK_IMG_1 7210 1.01 3.41 0.02 93 XM_DK_Undo_01 7165 2.13 3.39 1.61 94 RELAYCOUNTRY_FR 7157 1.21 3.38 0.30 95 XMBody_17 7152 1.47 3.38 0.68 96 XM_B_Phish66 7042 2.38 3.33 1.99 97 HDRS_LCASE_IMGONLY 6969 1.04 3.29 0.10 98 URIBL_DBL_ABUSE_REDIR 6848 0.96 3.24 0.02 99 TR_LOTS_OF_MONEY3 6724 1.24 3.18 0.44 100 SHORTENER_SHORT_IMG 6698 0.93 3.17 0.00 101 XM_UB99 6680 0.93 3.16 0.00 102 MIME_HTML_ONLY_MULTI 6436 3.14 3.04 3.18 103 FROM_EXCESS_BASE64 6355 2.79 3.00 2.70 104 T_XMDrugObfuBody_08 6351 1.95 3.00 1.51 105 BAYES_20 6317 3.68 2.99 3.96 106 TM2_M_VERY_LONG_WORD 6300 1.88 2.98 1.43 107 URI_HEX 6158 1.89 2.91 1.47 108 SUBJ_ALL_CAPS 6154 2.05 2.91 1.70 109 SpammyFromTLD_02 5842 1.00 2.76 0.28 110 RCVD_IN_RP_RNBL 5833 0.83 2.76 0.03 111 XMBrknScrpt_02 5816 1.26 2.75 0.64 112 TR_XM_MaxBayes 5779 0.81 2.73 0.01 113 XM_B_COVIDMETA 5703 1.40 2.70 0.86 114 XMBdyGiftCard01 5690 1.71 2.69 1.30 115 RCVD_IN_MSPIKE_L5 5681 0.83 2.69 0.07 116 RCVD_IN_PSBL 5607 0.79 2.65 0.02 117 XM_B_Unsub2 5543 1.93 2.62 1.65 118 XM_UB999 5522 0.77 2.61 0.00 119 BAYES_40 5274 4.37 2.49 5.15 120 PDS_OTHER_BAD_TLD 5193 1.24 2.46 0.74 121 XM_B_SpammyWords4 5087 1.29 2.40 0.82 122 T_FILL_THIS_FORM_SHORT 4903 1.31 2.32 0.89 123 XM_CamelCaseFrm001 4830 2.08 2.28 1.99 124 RCVD_IN_IADB_LISTED 4700 4.64 2.22 5.64 125 T_XMDrugObfuBody_14 4439 2.01 2.10 1.98 126 URI_NOVOWEL 4403 2.73 2.08 3.00 127 XMStockSpam_06 4362 1.55 2.06 1.34 128 TR_XM_SpammyWords3 4278 0.66 2.02 0.10 129 RCVD_IN_IADB_SPF 4223 4.06 2.00 4.91 130 FORGED_GMAIL_RCVD 4196 1.00 1.98 0.59 131 T_REMOTE_IMAGE 4181 3.36 1.98 3.93 132 TR_XM_COVIDMETA4 4137 0.87 1.96 0.42 133 RCVD_IN_IADB_DK 3999 3.55 1.89 4.24 134 XM_URI_RBL 3966 0.67 1.88 0.17 135 RCVD_IN_IADB_SENDERID 3952 3.65 1.87 4.39 136 XMGenDplmaNmb 3941 1.15 1.86 0.85 137 T_XMHurry_00 3918 0.95 1.85 0.58 138 MAILING_LIST_MULTI 3748 2.49 1.77 2.79 139 FROM_SUSPICIOUS_NTLD 3724 0.56 1.76 0.06 140 URI_TRY_3LD 3713 1.72 1.76 1.70 141 TR_XM_BayesRelay 3627 0.52 1.71 0.02 142 XM_Lotto 3566 0.56 1.69 0.09 143 XM_UB60 3527 0.56 1.67 0.10 144 URIBL_BLACK 3514 0.51 1.66 0.03 145 XM_RXBody 3498 0.87 1.65 0.55 146 LongTLD 3498 0.60 1.65 0.16 147 GOOGLE_DOC_SUSP 3492 0.49 1.65 0.01 148 BAYES_05 3435 2.11 1.62 2.31 149 XMSexyCombo_01 3418 0.82 1.62 0.50 150 RELAYCOUNTRY_GB 3410 1.24 1.61 1.08 151 RELAYCOUNTRY_IN 3406 0.55 1.61 0.11 152 FROM_SUSPICIOUS_NTLD_FP 3402 0.51 1.61 0.06 153 TR_XM_SB_Phish 3387 1.92 1.60 2.05 154 XMHTML_After_End 3354 1.17 1.59 0.99 155 XMSubPhish11 3294 1.88 1.56 2.02 156 XM_H_Long_From02 3184 1.48 1.51 1.47 157 KHOP_HELO_FCRDNS 3183 1.52 1.50 1.53 158 XMSubMetaI_00 3053 0.85 1.44 0.61 159 HK_RANDOM_REPLYTO 3052 0.55 1.44 0.19 160 XMPhish08 2909 0.56 1.38 0.22 161 TR_XM_FormFill 2897 0.41 1.37 0.01 162 TR_XM_COVIDMETA1 2893 0.70 1.37 0.42 163 TR_Caps_n_Bayes_99 2892 0.51 1.37 0.16 164 T_XMDrugObfuBody_00 2804 0.93 1.33 0.76 165 TR_XM_PHPDW 2778 0.73 1.31 0.49 166 URI_PHP_REDIR 2749 0.38 1.30 0.00 167 TR_XM_PHPForged 2737 0.70 1.29 0.45 168 TR_XM_FormFill2 2721 0.70 1.29 0.46 169 XM_H_PHPOS 2718 0.69 1.28 0.45 170 XM_OfRef7 2691 0.48 1.27 0.15 171 BAYES_00 2582 10.27 1.22 14.01 172 NUMERIC_HTTP_ADDR 2559 0.61 1.21 0.36 173 TR_Symld_Words 2523 1.30 1.19 1.35 174 XM_UB80 2434 0.36 1.15 0.03 175 TR_XM_RelayPhish 2337 0.40 1.10 0.10 176 TR_XM_INV_DKIM 2317 0.39 1.10 0.10 177 HK_SCAM 2284 0.32 1.08 0.01 178 HTTPS_HTTP_MISMATCH 2229 0.93 1.05 0.87 179 URG_BIZ 2219 0.34 1.05 0.05 180 MONEY_FRAUD_8 2209 0.31 1.04 0.00 181 ALL_TRUSTED 2163 8.50 1.02 11.58 182 RELAYCOUNTRY_NL 2116 0.44 1.00 0.21 183 XM_Body_Obfu01 2089 0.54 0.99 0.35 184 DKIM_ADSP_CUSTOM_MED 2085 0.95 0.99 0.94 185 TR_BOTNET_NEGATE 2076 0.64 0.98 0.49 186 RDNS_DYNAMIC 2046 0.70 0.97 0.59 187 RELAYCOUNTRY_CN 2041 0.33 0.96 0.07 188 TR_LOTS_OF_MONEY2 2029 0.44 0.96 0.23 189 T_MONEY_PERCENT 2029 0.44 0.96 0.23 190 XMPhish30 1993 0.64 0.94 0.51 191 SUBJ_ILLEGAL_CHARS 1950 0.28 0.92 0.01 192 SUBJECT_NEEDS_ENCODING 1945 0.28 0.92 0.01 193 RCVD_IN_MSPIKE_H5 1942 2.77 0.92 3.53 194 HK_RANDOM_FROM 1936 0.35 0.92 0.11 195 RCVD_IN_IADB_VOUCHED 1917 2.82 0.91 3.60 196 XM_Body_Dirty_Words_01 1909 0.42 0.90 0.23 197 PLING_QUERY 1878 0.60 0.89 0.48 198 XMBody_78 1872 0.57 0.89 0.43 199 XM_ProductURIs 1856 1.11 0.88 1.21 200 TR_Mismatch_TLD_02 1852 0.31 0.88 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 455497 91.01 95.83 89.02 2 RELAYCOUNTRY_US 434050 82.89 78.21 84.83 3 DKIM_SIGNED 405710 81.60 87.19 79.29 4 XM_DK_Pass 400144 80.00 84.36 78.20 5 DKIM_VALID 390010 78.23 83.11 76.22 6 XM_B_Unicode 367845 74.04 79.25 71.89 7 DKIM_VALID_AU 297826 60.04 64.47 58.20 8 BAYES_50 286186 50.58 37.63 55.93 9 DCC_CHECK_NEGATIVE 276108 43.79 19.18 53.96 10 XMListUnsubscribeExists 267494 58.07 72.07 52.28 11 XM_B_SpammyWords 257834 56.75 72.14 50.39 12 DCC_CHECK 224363 54.13 79.02 43.85 13 XM_B_Unicode3 216049 42.64 43.63 42.22 14 RCVD_IN_MSPIKE_WL 159142 28.49 22.17 31.10 15 DKIM_VALID_EF 153000 30.04 30.39 29.90 16 T_TM2_M_HEADER_IN_MSG 148698 27.38 23.33 29.06 17 RCVD_IN_MSPIKE_H2 147288 30.55 34.81 28.78 18 HTML_FONT_LOW_CONTRAST 143347 28.86 30.90 28.01 19 LOC_TINY_FONT_1 129329 29.40 39.37 25.27 20 FVGT_m_MULTI_ODD 122741 25.38 28.77 23.99 21 MIME_HTML_ONLY 110689 23.97 29.62 21.63 22 XMSubLong 107836 21.86 23.78 21.07 23 XM_B_SpammyWords2 107466 27.04 41.65 21.00 24 T_KAM_HTML_FONT_INVALID 98284 21.73 27.84 19.21 25 RCVD_IN_MSPIKE_H3 82222 14.99 12.38 16.07 26 BAYES_00 71683 10.27 1.22 14.01 27 XM_Body_Dirty_Words 59840 14.30 20.59 11.69 28 ALL_TRUSTED 59274 8.50 1.02 11.58 29 XM_Multi_Part_URI 59018 12.70 15.51 11.53 30 RCVD_IN_MSPIKE_H4 58849 10.73 8.87 11.50 31 XM_DKIMWhitelistDomains 54801 7.59 0.04 10.71 32 TR_XM_DK_Bayes 53629 7.66 0.83 10.48 33 TR_XM_DK_Bayes1 51979 7.42 0.80 10.16 34 XM_B_Unsub 49533 11.29 15.19 9.68 35 XM_Evil_Numbers_Gen 46519 9.82 11.58 9.09 36 LotsOfNums_01 45849 9.49 10.78 8.96 37 TR_XM_DK_Bayes2 44617 6.38 0.72 8.72 38 RCVD_IN_RP_SAFE 43990 7.63 5.29 8.60 39 XM_DK_Undo_02 42188 19.96 48.30 8.24 40 TooManyTo_001 42182 7.35 5.18 8.24 41 UNPARSEABLE_RELAY 41741 7.89 7.26 8.16 42 RCVD_IN_RP_CERTIFIED 39223 6.67 4.26 7.67 43 XM_SendGrid 38260 7.01 5.87 7.48 44 BAYES_60 37877 7.16 6.56 7.40 45 LOTS_OF_MONEY 37119 9.59 15.22 7.25 46 HTML_IMAGE_RATIO_02 37112 8.01 9.84 7.25 47 XMStrtUSub 35389 6.11 4.17 6.92 48 XM_B_Phish_Phrases 34587 7.05 7.74 6.76 49 TR_XM_UnparsRelay 31883 6.47 7.05 6.23 50 HTML_IMAGE_RATIO_04 30956 5.86 5.41 6.05 51 TR_XM_DKIM_Undo 30916 16.08 40.38 6.04 52 IN_ZIMBRA_NJ_WHITELIST 29952 4.16 0.05 5.85 53 FSL_BULK_SIG 29716 6.53 8.28 5.81 54 MIME_QP_LONG_LINE 28997 5.04 3.52 5.67 55 RCVD_IN_IADB_LISTED 28885 4.64 2.22 5.64 56 XM_H_Long_From01 28317 5.78 6.38 5.53 57 XM_B_SpammyWords3 28140 8.31 15.12 5.50 58 BAYES_40 26332 4.37 2.49 5.15 59 RELAYCOUNTRY_META 26073 9.86 21.37 5.10 60 BOTNET_IPINHOSTNAME 25731 7.50 13.49 5.03 61 T_TooManySym_01 25704 4.57 3.48 5.02 62 MPART_ALT_DIFF 25586 6.37 9.70 5.00 63 RCVD_IN_IADB_SPF 25123 4.06 2.00 4.91 64 TR_XM_SpammyWords4 24974 7.28 13.09 4.88 65 TR_XM_DK_SendGrid 24733 4.43 3.44 4.83 66 BAYES_99 24294 13.79 35.66 4.75 67 XM_PDF 22440 3.32 0.73 4.39 68 RCVD_IN_IADB_SENDERID 22439 3.65 1.87 4.39 69 RCVD_IN_IADB_DK 21691 3.55 1.89 4.24 70 BAYES_80 20563 4.99 7.34 4.02 71 BAYES_20 20285 3.68 2.99 3.96 72 T_REMOTE_IMAGE 20094 3.36 1.98 3.93 73 HTML_IMAGE_RATIO_06 20028 3.77 3.41 3.91 74 BAYES_999 19717 11.17 28.89 3.85 75 XMSexyCombo_05 18590 5.85 11.20 3.63 76 RCVD_IN_IADB_VOUCHED 18442 2.82 0.91 3.60 77 RCVD_IN_MSPIKE_H5 18071 2.77 0.92 3.53 78 XMSubMetaSx_00 17251 4.51 7.28 3.37 79 TR_XM_PhishingBody 17143 4.24 6.38 3.35 80 MIME_HTML_ONLY_MULTI 16271 3.14 3.04 3.18 81 XM_UncommonTLD01 16026 5.14 10.00 3.13 82 DKIM_INVALID 15700 3.37 4.08 3.07 83 URI_NOVOWEL 15349 2.73 2.08 3.00 84 XMNumbers 14720 3.66 5.55 2.88 85 TR_DCC_Bayes_99 14364 10.26 28.27 2.81 86 MAILING_LIST_MULTI 14289 2.49 1.77 2.79 87 FROM_EXCESS_BASE64 13830 2.79 3.00 2.70 88 HTML_IMAGE_RATIO_08 13685 3.07 4.03 2.67 89 BAYES_95 12665 3.06 4.48 2.48 90 TM2_M_URI_OPT_OUT 12326 2.92 4.17 2.41 91 RCVD_IN_IADB_OPTIN 12140 1.84 0.56 2.37 92 MIME_HTML_MOSTLY 11970 3.76 7.21 2.34 93 BAYES_05 11796 2.11 1.62 2.31 94 BOTNET 11616 6.91 18.15 2.27 95 T_TooManySym_02 11343 1.82 0.86 2.22 96 HTML_MIME_NO_HTML_TAG 11223 2.98 4.89 2.19 97 XM_B_SpammyTLD 10869 2.50 3.42 2.12 98 TooManyTo_002 10868 1.65 0.51 2.12 99 TR_XM_SB_Phish 10487 1.92 1.60 2.05 100 XMSubPhish11 10335 1.88 1.56 2.02 101 XM_H_Trusted_IP 10285 1.42 0.00 2.01 102 XM_CamelCaseFrm001 10206 2.08 2.28 1.99 103 XM_B_Phish66 10198 2.38 3.33 1.99 104 T_XMDrugObfuBody_14 10118 2.01 2.10 1.98 105 UNTRUSTED_Relay 9479 5.05 12.77 1.85 106 TR_XM_SpammyWords5 9083 2.74 5.06 1.78 107 URI_TRY_3LD 8714 1.72 1.76 1.70 108 SUBJ_ALL_CAPS 8692 2.05 2.91 1.70 109 HELO_NODOT 8655 1.39 0.67 1.69 110 HELO_NO_DOMAIN 8654 1.37 0.58 1.69 111 XM_SPF_SoftFail 8584 2.45 4.33 1.68 112 XM_B_Unsub2 8439 1.93 2.62 1.65 113 BOUNCE_MESSAGE 8331 1.32 0.57 1.63 114 ANY_BOUNCE_MESSAGE 8331 1.32 0.57 1.63 115 XM_DK_Undo_01 8224 2.13 3.39 1.61 116 XMDiploma_00 7968 2.13 3.52 1.56 117 USER_IN_DEF_DKIM_WL 7952 1.11 0.05 1.55 118 KHOP_HELO_FCRDNS 7835 1.52 1.50 1.53 119 T_XMDrugObfuBody_08 7742 1.95 3.00 1.51 120 RELAYCOUNTRY_CA 7740 2.99 6.55 1.51 121 IN_HORDE_ADDRESS_BOOK 7686 1.08 0.06 1.50 122 INVALID_MSGID 7609 1.24 0.64 1.49 123 RCVD_IN_BL_SPAMCOP_NET 7560 4.10 10.44 1.48 124 XM_H_Long_From02 7536 1.48 1.51 1.47 125 URI_HEX 7525 1.89 2.91 1.47 126 TVD_RCVD_IP 7367 1.09 0.25 1.44 127 TM2_M_VERY_LONG_WORD 7326 1.88 2.98 1.43 128 TooManyTo_003 6944 1.08 0.42 1.36 129 TR_Symld_Words 6887 1.30 1.19 1.35 130 XMStockSpam_06 6848 1.55 2.06 1.34 131 XMBdyGiftCard01 6665 1.71 2.69 1.30 132 HELO_MISC_IP 6615 1.02 0.37 1.29 133 MSGID_NOFQDN1 6570 1.02 0.37 1.28 134 XMCapTrack 6495 0.99 0.32 1.27 135 TO_MALFORMED 6457 0.89 0.01 1.26 136 XM_ProductURIs 6199 1.11 0.88 1.21 137 XM_UB50 5889 2.19 4.69 1.15 138 XM_GoogleGroups 5886 0.97 0.52 1.15 139 URIBL_SBL_A 5696 2.10 4.49 1.11 140 RELAYCOUNTRY_GB 5532 1.24 1.61 1.08 141 TR_MSPIKEBAYES00 5497 0.77 0.03 1.07 142 XMBSHREFv2 5387 0.87 0.42 1.05 143 XMHTML_After_End 5073 1.17 1.59 0.99 144 TooManyTo_004 5007 0.80 0.37 0.98 145 TR_XM_SpammyWords2 5002 5.11 15.12 0.98 146 FROM_GOV_DKIM_AU 4828 0.71 0.14 0.94 147 DKIM_ADSP_CUSTOM_MED 4786 0.95 0.99 0.94 148 XMGappySubj_01 4679 0.71 0.20 0.91 149 HTML_FONT_FACE_BAD 4671 0.80 0.54 0.91 150 T_FILL_THIS_FORM_SHORT 4573 1.31 2.32 0.89 151 XM_OfRef6 4534 1.83 4.11 0.89 152 HTTPS_HTTP_MISMATCH 4472 0.93 1.05 0.87 153 SpammyFromTLD_01 4412 1.78 4.01 0.86 154 XM_B_COVIDMETA 4394 1.40 2.70 0.86 155 XMGenDplmaNmb 4359 1.15 1.86 0.85 156 XMBody_95 4224 0.61 0.09 0.83 157 XM_B_SpammyWords4 4207 1.29 2.40 0.82 158 TooManyTo_005 4061 0.65 0.32 0.79 159 XMSubNoVowel 4007 0.76 0.69 0.78 160 T_XMDrugObfuBody_00 3901 0.93 1.33 0.76 161 PDS_OTHER_BAD_TLD 3802 1.24 2.46 0.74 162 XMBody_17 3485 1.47 3.38 0.68 163 NML_ADSP_CUSTOM_MED 3386 0.70 0.79 0.66 164 XMBrknScrpt_02 3278 1.26 2.75 0.64 165 XMHTMLBadTable_001 3238 0.62 0.60 0.63 166 XMMoneyMeta_00 3180 0.69 0.84 0.62 167 XMSubMetaI_00 3127 0.85 1.44 0.61 168 TR_MetaPhish_Combo_01 3119 0.61 0.62 0.61 169 T_TooManySym_03 3117 0.53 0.34 0.61 170 XM_ShortIntro_01 3062 0.52 0.33 0.60 171 T_OBFU_PDF_ATTACH 3054 0.46 0.14 0.60 172 XM_SPF_Unknown 3039 0.58 0.55 0.59 173 FORGED_GMAIL_RCVD 3022 1.00 1.98 0.59 174 RDNS_DYNAMIC 3005 0.70 0.97 0.59 175 XM_H_PHPMailer 3003 0.51 0.32 0.59 176 T_XMHurry_00 2983 0.95 1.85 0.58 177 T_Symld_Words_02 2925 0.66 0.88 0.57 178 XM_RXBody 2799 0.87 1.65 0.55 179 XMNoVowels 2779 0.49 0.38 0.54 180 HTML_IMAGE_ONLY_20 2747 0.46 0.27 0.54 181 XMPhish14 2744 0.57 0.64 0.54 182 XMPhish30 2626 0.64 0.94 0.51 183 XMLngstWrd_00 2610 0.47 0.36 0.51 184 RELAYCOUNTRY_DE 2580 0.55 0.67 0.50 185 RCVD_IN_SORBS_DUL 2555 0.42 0.24 0.50 186 XMSexyCombo_01 2540 0.82 1.62 0.50 187 TR_XM_PHPDW 2531 0.73 1.31 0.49 188 TR_BOTNET_NEGATE 2529 0.64 0.98 0.49 189 HTML_TAG_BALANCE_BODY 2512 0.55 0.69 0.49 190 PLING_QUERY 2445 0.60 0.89 0.48 191 DIET_1 2411 0.54 0.70 0.47 192 SHORT_HELO_AND_INLINE_IMAGE 2370 0.35 0.07 0.46 193 TR_XM_FormFill2 2370 0.70 1.29 0.46 194 TR_XM_PHPForged 2322 0.70 1.29 0.45 195 XM_H_PHPOS 2279 0.69 1.28 0.45 196 HTML_IMAGE_ONLY_28 2249 0.39 0.27 0.44 197 XM_DIRTYINTL 2235 1.31 3.41 0.44 198 TR_LOTS_OF_MONEY3 2233 1.24 3.18 0.44 199 XMBody_78 2215 0.57 0.89 0.43 200 XMLngstWrd_01 2204 0.40 0.34 0.43 ----------------------------------------------------------------------