Email: 784479 Autolearn: 0 AvgScore: 3.02 AvgScanTime: 1.52 sec Spam: 224369 Autolearn: 0 AvgScore: 13.43 AvgScanTime: 1.75 sec Ham: 560110 Autolearn: 0 AvgScore: -1.15 AvgScanTime: 1.43 sec Time Spent Running SA: 330.96 hours Time Spent Processing Spam: 109.14 hours Time Spent Processing Ham: 221.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 216937 88.68 96.69 85.48 2 DKIM_SIGNED 199337 80.93 88.84 77.76 3 XM_DK_Pass 194399 79.46 86.64 76.58 4 DKIM_VALID 190530 77.66 84.92 74.76 5 XM_B_Unicode 178897 72.63 79.73 69.78 6 DCC_CHECK 177985 55.51 79.33 45.97 7 RELAYCOUNTRY_US 174393 82.71 77.73 84.71 8 XM_B_SpammyWords 164602 57.55 73.36 51.21 9 XMListUnsubscribeExists 164447 55.72 73.29 48.69 10 DKIM_VALID_AU 148570 60.00 66.22 57.52 11 XM_DK_Undo_02 110062 19.44 49.05 7.57 12 XM_B_SpammyWords2 97095 26.19 43.27 19.34 13 XM_B_Unicode3 97021 40.90 43.24 39.97 14 TR_XM_DKIM_Undo 93538 15.77 41.69 5.38 15 BAYES_50 86284 51.23 38.46 56.34 16 LOC_TINY_FONT_1 84645 27.70 37.73 23.68 17 BAYES_99 80525 13.51 35.89 4.54 18 HTML_FONT_LOW_CONTRAST 78717 28.74 35.08 26.20 19 RCVD_IN_MSPIKE_H2 71283 27.64 31.77 25.98 20 MIME_HTML_ONLY 68819 23.35 30.67 20.42 21 DKIM_VALID_EF 68289 31.17 30.44 31.47 22 FVGT_m_MULTI_ODD 65274 24.30 29.09 22.38 23 TR_DCC_Bayes_99 64609 10.06 28.80 2.55 24 BAYES_999 64196 10.75 28.61 3.59 25 T_KAM_HTML_FONT_INVALID 62473 20.67 27.84 17.80 26 XMSubLong 54432 21.40 24.26 20.25 27 RCVD_IN_MSPIKE_WL 51646 30.66 23.02 33.72 28 T_TM2_M_HEADER_IN_MSG 48605 25.31 21.66 26.76 29 RELAYCOUNTRY_META 47251 9.24 21.06 4.51 30 XM_Body_Dirty_Words 45732 13.98 20.38 11.41 31 DCC_CHECK_NEGATIVE 42104 42.48 18.77 51.99 32 XM_B_SpammyWords3 36160 7.82 16.12 4.50 33 XM_Multi_Part_URI 35762 12.68 15.94 11.38 34 LOTS_OF_MONEY 34965 8.81 15.58 6.10 35 TR_XM_SpammyWords2 33070 4.87 14.74 0.92 36 TR_XM_SpammyWords4 31620 6.95 14.09 4.09 37 BOTNET 30094 5.35 13.41 2.13 38 UNTRUSTED_Relay 28444 4.82 12.68 1.67 39 RCVD_IN_MSPIKE_H3 28000 14.70 12.48 15.59 40 BOTNET_IPINHOSTNAME 27388 6.81 12.21 4.65 41 XM_UncommonTLD01 26768 5.41 11.93 2.80 42 XM_B_Unsub 26504 10.81 11.81 10.41 43 XM_Evil_Numbers_Gen 26173 9.62 11.67 8.80 44 RCVD_IN_BL_SPAMCOP_NET 22862 3.69 10.19 1.09 45 XMSexyCombo_05 22837 5.40 10.18 3.49 46 LotsOfNums_01 22279 8.99 9.93 8.62 47 FSL_BULK_SIG 21575 6.66 9.62 5.48 48 RCVD_IN_MSPIKE_H4 21545 11.33 9.60 12.02 49 HTML_IMAGE_RATIO_02 21038 7.19 9.38 6.32 50 MPART_ALT_DIFF 20545 6.75 9.16 5.79 51 UNPARSEABLE_RELAY 18368 7.90 8.19 7.79 52 XM_B_Phish_Phrases 18348 9.40 8.18 9.88 53 TR_XM_UnparsRelay 17818 6.67 7.94 6.16 54 BAYES_80 17139 5.49 7.64 4.63 55 BAYES_60 16818 7.72 7.50 7.81 56 TR_XM_PhishingBody 16077 4.02 7.17 2.75 57 RELAYCOUNTRY_CA 16004 2.93 7.13 1.25 58 XM_H_Long_From01 15833 6.04 7.06 5.63 59 MIME_HTML_MOSTLY 15694 3.71 6.99 2.39 60 XMSubMetaSx_00 14746 4.00 6.57 2.97 61 XM_SendGrid 14294 6.81 6.37 6.99 62 HTML_IMAGE_RATIO_04 12676 5.50 5.65 5.45 63 XM_DK_Undo_01 12583 2.63 5.61 1.43 64 TooManyTo_001 12464 6.91 5.56 7.46 65 URIBL_SBL_A 12135 2.70 5.41 1.61 66 TR_XM_SpammyWords5 12116 2.54 5.40 1.39 67 SpammyFromTLD_02 11851 1.69 5.28 0.25 68 XMNumbers 11728 3.50 5.23 2.81 69 XM_OfRef6 11723 2.11 5.22 0.87 70 XM_UB50 11533 2.17 5.14 0.98 71 SpammyFromTLD_01 10924 1.88 4.87 0.68 72 T_REMOTE_IMAGE 10891 3.79 4.85 3.36 73 RCVD_IN_RP_SAFE 10571 6.89 4.71 7.76 74 XMDiploma_00 10254 2.91 4.57 2.24 75 HTML_IMAGE_RATIO_08 10230 2.90 4.56 2.23 76 BAYES_95 10150 3.20 4.52 2.67 77 KHOP_HELO_FCRDNS 9719 2.29 4.33 1.47 78 XMStrtUSub 9476 8.51 4.22 10.23 79 XM_B_Phish66 8840 2.36 3.94 1.73 80 DKIM_INVALID 8807 3.27 3.93 3.00 81 TM2_M_URI_OPT_OUT 8631 3.51 3.85 3.37 82 TR_XM_DK_SendGrid 8524 4.17 3.80 4.32 83 RCVD_IN_RP_CERTIFIED 7767 6.08 3.46 7.13 84 RELAYCOUNTRY_FR 7755 1.16 3.46 0.24 85 MIME_QP_LONG_LINE 7656 4.98 3.41 5.61 86 RCVD_IN_MSPIKE_BL 7529 1.04 3.36 0.11 87 TR_LOTS_OF_MONEY3 7507 1.36 3.35 0.56 88 TR_XM_MSPIKECOMBO 7489 1.03 3.34 0.10 89 XMBody_17 7420 1.34 3.31 0.56 90 XM_DIRTYINTL 7185 1.20 3.20 0.40 91 T_XMDrugObfuBody_14 7172 2.71 3.20 2.51 92 T_XMHurry_00 7036 1.54 3.14 0.91 93 XM_SPF_SoftFail 7006 2.19 3.12 1.82 94 HTML_IMAGE_RATIO_06 6991 3.59 3.12 3.78 95 BODY_URI_ONLY 6884 0.89 3.07 0.01 96 XM_B_SpammyTLD 6879 2.45 3.07 2.20 97 FORGED_GMAIL_RCVD 6866 1.27 3.06 0.56 98 MIME_HTML_ONLY_MULTI 6691 3.63 2.98 3.89 99 SUBJ_ALL_CAPS 6670 1.80 2.97 1.33 100 XM_B_COVIDMETA 6611 1.29 2.95 0.63 101 RELAYCOUNTRY_IN 6349 0.88 2.83 0.10 102 URI_HEX 6315 1.78 2.81 1.36 103 HTML_SHORT_LINK_IMG_1 6302 0.82 2.81 0.02 104 T_TooManySym_01 6234 4.26 2.78 4.85 105 GOOGLE_DOC_SUSP 6174 0.80 2.75 0.02 106 TR_XM_MaxBayes 6062 0.79 2.70 0.03 107 HTML_IMAGE_ONLY_12 6000 0.90 2.67 0.20 108 XM_B_SpammyWords4 5835 1.17 2.60 0.60 109 T_FILL_THIS_FORM_SHORT 5806 1.26 2.59 0.73 110 FROM_EXCESS_BASE64 5799 2.80 2.58 2.88 111 XMBrknScrpt_02 5774 1.29 2.57 0.77 112 T_XMDrugObfuBody_08 5447 1.94 2.43 1.74 113 XMBdyGiftCard01 5441 1.18 2.43 0.68 114 XM_CamelCaseFrm001 5421 2.04 2.42 1.89 115 RCVD_IN_MSPIKE_L5 5407 0.73 2.41 0.06 116 XM_B_Unsub2 5358 2.04 2.39 1.90 117 TM2_M_VERY_LONG_WORD 5034 1.52 2.24 1.23 118 TR_XM_SB_Phish 5027 2.55 2.24 2.68 119 XMGenDplmaNmb 5025 1.38 2.24 1.04 120 XM_UB99 4955 0.63 2.21 0.00 121 RCVD_IN_IADB_LISTED 4893 4.70 2.18 5.70 122 XMSubPhish11 4874 2.52 2.17 2.66 123 HTML_FONT_SIZE_LARGE 4792 0.70 2.14 0.12 124 TR_XM_SpammyWords3 4664 0.63 2.08 0.05 125 XMSexyCombo_01 4592 0.83 2.05 0.34 126 URIBL_DBL_SPAM 4379 0.56 1.95 0.01 127 RCVD_IN_IADB_SPF 4328 4.10 1.93 4.97 128 BAYES_40 4250 4.18 1.89 5.09 129 TR_XM_BayesRelay 4245 0.55 1.89 0.02 130 XM_OfRef7 4179 0.65 1.86 0.17 131 RCVD_IN_IADB_DK 4038 3.58 1.80 4.29 132 RCVD_IN_IADB_SENDERID 4003 3.68 1.78 4.44 133 XMHTML_After_End 3911 1.17 1.74 0.93 134 XM_UB60 3815 0.57 1.70 0.12 135 HK_RANDOM_REPLYTO 3784 0.59 1.69 0.15 136 URI_NOVOWEL 3770 2.49 1.68 2.81 137 XMStockSpam_06 3759 1.25 1.68 1.08 138 XM_URI_RBL 3735 0.59 1.66 0.16 139 TR_XM_COVIDMETA1 3729 0.70 1.66 0.31 140 XM_UB999 3671 0.47 1.64 0.00 141 RCVD_IN_PSBL 3567 0.52 1.59 0.09 142 RCVD_IN_RP_RNBL 3527 0.47 1.57 0.03 143 BAYES_20 3461 2.95 1.54 3.52 144 T_XMDrugObfuBody_00 3458 0.85 1.54 0.57 145 URI_TRY_3LD 3454 1.21 1.54 1.08 146 BAYES_00 3426 9.82 1.53 13.14 147 TR_XM_FormFill 3405 0.44 1.52 0.01 148 XMSubMetaI_00 3384 0.90 1.51 0.66 149 TR_XM_PHPDW 3375 0.66 1.50 0.33 150 BOTNET_NORDNS 3368 0.44 1.50 0.01 151 TR_XM_PHPForged 3315 0.62 1.48 0.28 152 XM_ProductURIs 3313 1.01 1.48 0.83 153 MAILING_LIST_MULTI 3295 2.18 1.47 2.46 154 TR_XM_FormFill2 3285 0.62 1.46 0.28 155 TR_XM_COVIDMETA4 3274 0.64 1.46 0.31 156 XM_H_PHPOS 3273 0.61 1.46 0.28 157 URIBL_BLACK 3272 0.44 1.46 0.03 158 HTML_MIME_NO_HTML_TAG 3245 1.68 1.45 1.78 159 URI_PHP_REDIR 3127 0.40 1.39 0.00 160 ALL_TRUSTED 3094 9.00 1.38 12.05 161 RELAYCOUNTRY_GB 2919 1.08 1.30 0.99 162 TR_XM_Spammywords 2861 0.69 1.28 0.45 163 XM_S_SpammyWords 2861 0.69 1.28 0.45 164 XM_UB80 2839 0.38 1.27 0.03 165 FILL_THIS_FORM 2812 0.47 1.25 0.16 166 XM_H_Long_From02 2775 1.20 1.24 1.19 167 HTTPS_HTTP_MISMATCH 2768 0.90 1.23 0.77 168 PDS_OTHER_BAD_TLD 2708 0.83 1.21 0.68 169 XMPhish08 2651 0.48 1.18 0.19 170 TR_Sbj_FN_Bdy 2646 0.43 1.18 0.13 171 MONEY_FORM 2589 0.33 1.15 0.01 172 T_Symld_Words_02 2584 0.73 1.15 0.56 173 HK_SCAM 2547 0.33 1.14 0.00 174 TR_XM_INV_DKIM 2435 0.40 1.09 0.12 175 XMSexyCombo_04 2420 0.36 1.08 0.07 176 TR_Symld_Words 2341 1.72 1.04 1.99 177 HTML_TAG_BALANCE_BODY 2284 0.56 1.02 0.38 178 BAYES_05 2282 1.90 1.02 2.25 179 XMPhish14 2276 0.58 1.01 0.40 180 XMPhish30 2204 0.54 0.98 0.36 181 XM_Body_Dirty_Words_01 2167 0.51 0.97 0.33 182 T_MONEY_PERCENT 2122 0.48 0.95 0.30 183 TR_LOTS_OF_MONEY2 2122 0.48 0.95 0.30 184 FILL_THIS_FORM_LONG 2108 0.30 0.94 0.04 185 RCVD_IN_MSPIKE_H5 2101 4.63 0.94 6.11 186 XM_B_SEO 2072 0.36 0.92 0.14 187 NA_DOLLARS 2064 0.26 0.92 0.00 188 RCVD_IN_IADB_VOUCHED 2012 2.75 0.90 3.49 189 DIET_1 2002 0.46 0.89 0.29 190 XMBody_78 1994 0.52 0.89 0.37 191 XM_Body_Obfu01 1979 0.49 0.88 0.33 192 MONEY_FRAUD_3 1927 0.25 0.86 0.00 193 NUMERIC_HTTP_ADDR 1902 0.42 0.85 0.25 194 TR_XM_RelayPhish 1900 0.30 0.85 0.08 195 XM_UB95 1895 0.25 0.84 0.02 196 URIBL_CSS 1863 0.25 0.83 0.02 197 URIBL_CSS_A 1863 0.25 0.83 0.02 198 TR_XM_SEO4 1863 0.30 0.83 0.08 199 XMReplyNow 1845 0.31 0.82 0.10 200 TR_XM_DK_Bayes 1830 6.17 0.82 8.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 478765 88.68 96.69 85.48 2 RELAYCOUNTRY_US 474467 82.71 77.73 84.71 3 DKIM_SIGNED 435546 80.93 88.84 77.76 4 XM_DK_Pass 428919 79.46 86.64 76.58 5 DKIM_VALID 418715 77.66 84.92 74.76 6 XM_B_Unicode 390841 72.63 79.73 69.78 7 DKIM_VALID_AU 322155 60.00 66.22 57.52 8 BAYES_50 315572 51.23 38.46 56.34 9 DCC_CHECK_NEGATIVE 291181 42.48 18.77 51.99 10 XM_B_SpammyWords 286827 57.55 73.36 51.21 11 XMListUnsubscribeExists 272691 55.72 73.29 48.69 12 DCC_CHECK 257477 55.51 79.33 45.97 13 XM_B_Unicode3 223854 40.90 43.24 39.97 14 RCVD_IN_MSPIKE_WL 188893 30.66 23.02 33.72 15 DKIM_VALID_EF 176252 31.17 30.44 31.47 16 T_TM2_M_HEADER_IN_MSG 149913 25.31 21.66 26.76 17 HTML_FONT_LOW_CONTRAST 146729 28.74 35.08 26.20 18 RCVD_IN_MSPIKE_H2 145535 27.64 31.77 25.98 19 LOC_TINY_FONT_1 132632 27.70 37.73 23.68 20 FVGT_m_MULTI_ODD 125361 24.30 29.09 22.38 21 MIME_HTML_ONLY 114370 23.35 30.67 20.42 22 XMSubLong 113435 21.40 24.26 20.25 23 XM_B_SpammyWords2 108339 26.19 43.27 19.34 24 T_KAM_HTML_FONT_INVALID 99681 20.67 27.84 17.80 25 RCVD_IN_MSPIKE_H3 87317 14.70 12.48 15.59 26 XM_DKIMWhitelistDomains 81123 10.36 0.05 14.48 27 BAYES_00 73606 9.82 1.53 13.14 28 ALL_TRUSTED 67477 9.00 1.38 12.05 29 RCVD_IN_MSPIKE_H4 67340 11.33 9.60 12.02 30 XM_Body_Dirty_Words 63914 13.98 20.38 11.41 31 XM_Multi_Part_URI 63739 12.68 15.94 11.38 32 XM_B_Unsub 58323 10.81 11.81 10.41 33 XMStrtUSub 57292 8.51 4.22 10.23 34 XM_B_Phish_Phrases 55364 9.40 8.18 9.88 35 XM_Evil_Numbers_Gen 49296 9.62 11.67 8.80 36 LotsOfNums_01 48281 8.99 9.93 8.62 37 TR_XM_DK_Bayes 46545 6.17 0.82 8.31 38 TR_XM_DK_Bayes1 45060 5.97 0.78 8.04 39 BAYES_60 43721 7.72 7.50 7.81 40 UNPARSEABLE_RELAY 43618 7.90 8.19 7.79 41 RCVD_IN_RP_SAFE 43441 6.89 4.71 7.76 42 XM_DK_Undo_02 42418 19.44 49.05 7.57 43 TooManyTo_001 41770 6.91 5.56 7.46 44 RCVD_IN_RP_CERTIFIED 39913 6.08 3.46 7.13 45 XM_SendGrid 39125 6.81 6.37 6.99 46 TR_XM_DK_Bayes2 38875 5.16 0.72 6.94 47 HTML_IMAGE_RATIO_02 35381 7.19 9.38 6.32 48 TR_XM_UnparsRelay 34525 6.67 7.94 6.16 49 RCVD_IN_MSPIKE_H5 34236 4.63 0.94 6.11 50 LOTS_OF_MONEY 34150 8.81 15.58 6.10 51 MPART_ALT_DIFF 32423 6.75 9.16 5.79 52 RCVD_IN_IADB_LISTED 31944 4.70 2.18 5.70 53 XM_H_Long_From01 31562 6.04 7.06 5.63 54 MIME_QP_LONG_LINE 31408 4.98 3.41 5.61 55 FSL_BULK_SIG 30682 6.66 9.62 5.48 56 HTML_IMAGE_RATIO_04 30499 5.50 5.65 5.45 57 TR_XM_DKIM_Undo 30155 15.77 41.69 5.38 58 BAYES_40 28512 4.18 1.89 5.09 59 RCVD_IN_IADB_SPF 27827 4.10 1.93 4.97 60 IN_ZIMBRA_NJ_WHITELIST 27743 3.55 0.04 4.95 61 T_TooManySym_01 27174 4.26 2.78 4.85 62 BOTNET_IPINHOSTNAME 26052 6.81 12.21 4.65 63 BAYES_80 25955 5.49 7.64 4.63 64 BAYES_99 25429 13.51 35.89 4.54 65 RELAYCOUNTRY_META 25246 9.24 21.06 4.51 66 XM_B_SpammyWords3 25188 7.82 16.12 4.50 67 RCVD_IN_IADB_SENDERID 24863 3.68 1.78 4.44 68 TR_XM_DK_SendGrid 24222 4.17 3.80 4.32 69 RCVD_IN_IADB_DK 24045 3.58 1.80 4.29 70 TR_XM_SpammyWords4 22895 6.95 14.09 4.09 71 MIME_HTML_ONLY_MULTI 21801 3.63 2.98 3.89 72 XM_PDF 21396 2.92 0.69 3.82 73 HTML_IMAGE_RATIO_06 21200 3.59 3.12 3.78 74 XM_H_Trusted_IP 20888 2.66 0.00 3.73 75 BAYES_999 20123 10.75 28.61 3.59 76 BAYES_20 19717 2.95 1.54 3.52 77 RCVD_IN_IADB_VOUCHED 19532 2.75 0.90 3.49 78 XMSexyCombo_05 19520 5.40 10.18 3.49 79 TM2_M_URI_OPT_OUT 18866 3.51 3.85 3.37 80 T_REMOTE_IMAGE 18807 3.79 4.85 3.36 81 DKIM_INVALID 16831 3.27 3.93 3.00 82 XMSubMetaSx_00 16653 4.00 6.57 2.97 83 FROM_EXCESS_BASE64 16131 2.80 2.58 2.88 84 URI_NOVOWEL 15755 2.49 1.68 2.81 85 XMNumbers 15746 3.50 5.23 2.81 86 XM_UncommonTLD01 15686 5.41 11.93 2.80 87 TR_XM_PhishingBody 15428 4.02 7.17 2.75 88 BOUNCE_MESSAGE 15058 2.04 0.43 2.69 89 ANY_BOUNCE_MESSAGE 15058 2.04 0.43 2.69 90 TR_XM_SB_Phish 14991 2.55 2.24 2.68 91 BAYES_95 14967 3.20 4.52 2.67 92 XMSubPhish11 14873 2.52 2.17 2.66 93 T_TooManySym_02 14832 2.09 0.70 2.65 94 TR_DCC_Bayes_99 14302 10.06 28.80 2.55 95 T_XMDrugObfuBody_14 14070 2.71 3.20 2.51 96 MAILING_LIST_MULTI 13772 2.18 1.47 2.46 97 MIME_HTML_MOSTLY 13386 3.71 6.99 2.39 98 RCVD_IN_IADB_OPTIN 12734 1.79 0.58 2.27 99 BAYES_05 12606 1.90 1.02 2.25 100 XMDiploma_00 12554 2.91 4.57 2.24 101 HTML_IMAGE_RATIO_08 12486 2.90 4.56 2.23 102 XM_B_SpammyTLD 12336 2.45 3.07 2.20 103 BOTNET 11904 5.35 13.41 2.13 104 TR_Symld_Words 11162 1.72 1.04 1.99 105 XM_B_Unsub2 10617 2.04 2.39 1.90 106 XM_CamelCaseFrm001 10562 2.04 2.42 1.89 107 TooManyTo_002 10562 1.54 0.66 1.89 108 XM_SPF_SoftFail 10209 2.19 3.12 1.82 109 HTML_MIME_NO_HTML_TAG 9963 1.68 1.45 1.78 110 T_XMDrugObfuBody_08 9762 1.94 2.43 1.74 111 XM_B_Phish66 9694 2.36 3.94 1.73 112 UNTRUSTED_Relay 9367 4.82 12.68 1.67 113 URIBL_SBL_A 9023 2.70 5.41 1.61 114 HELO_NODOT 8804 1.25 0.44 1.57 115 HELO_NO_DOMAIN 8802 1.25 0.44 1.57 116 KHOP_HELO_FCRDNS 8257 2.29 4.33 1.47 117 TVD_RCVD_IP 8131 1.09 0.19 1.45 118 XM_DK_Undo_01 8023 2.63 5.61 1.43 119 IN_HORDE_ADDRESS_BOOK 7995 1.04 0.06 1.43 120 TR_XM_SpammyWords5 7812 2.54 5.40 1.39 121 XMSubNoVowel 7631 1.20 0.79 1.36 122 URI_HEX 7619 1.78 2.81 1.36 123 SUBJ_ALL_CAPS 7475 1.80 2.97 1.33 124 INVALID_MSGID 7319 1.04 0.38 1.31 125 TooManyTo_003 7143 1.07 0.56 1.28 126 RELAYCOUNTRY_CA 7017 2.93 7.13 1.25 127 TM2_M_VERY_LONG_WORD 6904 1.52 2.24 1.23 128 HELO_MISC_IP 6904 0.96 0.28 1.23 129 XM_H_Long_From02 6656 1.20 1.24 1.19 130 TO_MALFORMED 6455 0.82 0.00 1.15 131 MSGID_NOFQDN1 6437 0.83 0.03 1.15 132 XMCapTrack 6129 0.87 0.30 1.09 133 USER_IN_DEF_DKIM_WL 6100 0.80 0.08 1.09 134 RCVD_IN_BL_SPAMCOP_NET 6084 3.69 10.19 1.09 135 XMStockSpam_06 6073 1.25 1.68 1.08 136 URI_TRY_3LD 6061 1.21 1.54 1.08 137 XMGenDplmaNmb 5802 1.38 2.24 1.04 138 RELAYCOUNTRY_GB 5550 1.08 1.30 0.99 139 XM_UB50 5514 2.17 5.14 0.98 140 XMBSHREFv2 5494 0.76 0.21 0.98 141 TR_MSPIKEBAYES00 5395 0.69 0.02 0.96 142 XMBody_95 5389 0.72 0.12 0.96 143 XM_GoogleGroups 5269 0.78 0.39 0.94 144 XMHTML_After_End 5235 1.17 1.74 0.93 145 TooManyTo_004 5227 0.81 0.51 0.93 146 TR_XM_SpammyWords2 5145 4.87 14.74 0.92 147 T_XMHurry_00 5072 1.54 3.14 0.91 148 DKIM_ADSP_CUSTOM_MED 5024 0.87 0.79 0.90 149 XM_OfRef6 4845 2.11 5.22 0.87 150 XMGappySubj_01 4715 0.67 0.24 0.84 151 XM_ProductURIs 4638 1.01 1.48 0.83 152 FROM_GOV_DKIM_AU 4360 0.60 0.14 0.78 153 XMBrknScrpt_02 4320 1.29 2.57 0.77 154 HTTPS_HTTP_MISMATCH 4302 0.90 1.23 0.77 155 TooManyTo_005 4240 0.66 0.42 0.76 156 HTML_FONT_FACE_BAD 4152 0.74 0.73 0.74 157 T_FILL_THIS_FORM_SHORT 4072 1.26 2.59 0.73 158 XMBdyGiftCard01 3803 1.18 2.43 0.68 159 SpammyFromTLD_01 3795 1.88 4.87 0.68 160 PDS_OTHER_BAD_TLD 3791 0.83 1.21 0.68 161 XMSubMetaI_00 3702 0.90 1.51 0.66 162 TVD_SPACE_RATIO 3604 0.48 0.06 0.64 163 XM_B_COVIDMETA 3530 1.29 2.95 0.63 164 XM_SPF_Unknown 3456 0.60 0.55 0.62 165 NML_ADSP_CUSTOM_MED 3368 0.62 0.66 0.60 166 XM_B_SpammyWords4 3356 1.17 2.60 0.60 167 TR_MetaPhish_Combo_01 3332 0.61 0.64 0.59 168 T_XMDrugObfuBody_00 3208 0.85 1.54 0.57 169 T_Symld_Words_02 3163 0.73 1.15 0.56 170 TR_LOTS_OF_MONEY3 3125 1.36 3.35 0.56 171 XMBody_17 3119 1.34 3.31 0.56 172 FORGED_GMAIL_RCVD 3114 1.27 3.06 0.56 173 XMMoneyMeta_00 3110 0.59 0.68 0.56 174 RELAYCOUNTRY_DE 3096 0.58 0.63 0.55 175 T_TooManySym_03 3095 0.44 0.15 0.55 176 XM_ShortIntro_01 3054 0.47 0.28 0.55 177 XM_H_PHPMailer 2994 0.53 0.53 0.53 178 XMNoVowels 2992 0.58 0.70 0.53 179 HTML_IMAGE_ONLY_20 2769 0.40 0.15 0.49 180 XMLngstWrd_00 2737 0.48 0.46 0.49 181 RDNS_DYNAMIC 2590 0.56 0.79 0.46 182 XMSubMetaSxObfu_03 2582 0.54 0.73 0.46 183 SHORT_HELO_AND_INLINE_IMAGE 2572 0.34 0.06 0.46 184 TR_BOTNET_NEGATE 2560 0.54 0.73 0.46 185 XM_S_SpammyWords 2534 0.69 1.28 0.45 186 TR_XM_Spammywords 2532 0.69 1.28 0.45 187 T_OBFU_PDF_ATTACH 2523 0.35 0.11 0.45 188 PLING_QUERY 2515 0.48 0.57 0.45 189 RCVD_IN_SORBS_DUL 2499 0.37 0.18 0.45 190 XMHTMLBadTable_001 2484 0.51 0.69 0.44 191 XM_RXBody 2427 0.43 0.44 0.43 192 TM2_M_BODY_EMPTY 2403 0.32 0.06 0.43 193 XM_DIRTYINTL 2254 1.20 3.20 0.40 194 XMPhish14 2235 0.58 1.01 0.40 195 HTML_IMAGE_ONLY_32 2173 0.33 0.18 0.39 196 HTML_TAG_BALANCE_BODY 2142 0.56 1.02 0.38 197 MISSING_HEADERS 2124 0.36 0.32 0.38 198 XMBody_78 2095 0.52 0.89 0.37 199 XMLngstWrd_01 2083 0.38 0.42 0.37 200 SHOPIFY_IMG_NOT_RCVD_SFY 2072 0.37 0.36 0.37 ----------------------------------------------------------------------