Email: 606540 Autolearn: 0 AvgScore: 4.19 AvgScanTime: 1.16 sec Spam: 186533 Autolearn: 0 AvgScore: 14.78 AvgScanTime: 1.35 sec Ham: 420007 Autolearn: 0 AvgScore: -0.52 AvgScanTime: 1.08 sec Time Spent Running SA: 195.84 hours Time Spent Processing Spam: 70.17 hours Time Spent Processing Ham: 125.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 177850 91.11 95.35 89.23 2 DCC_CHECK 147248 50.09 78.94 37.28 3 DKIM_SIGNED 146181 75.67 78.37 74.46 4 XM_DK_Pass 141872 74.08 76.06 73.20 5 DKIM_VALID 138362 72.09 74.18 71.16 6 RELAYCOUNTRY_US 132008 78.53 70.77 81.97 7 XM_B_Unicode 130372 70.86 69.89 71.28 8 XMListUnsubscribeExists 118520 53.23 63.54 48.65 9 XM_B_SpammyWords 117718 50.34 63.11 44.67 10 DKIM_VALID_AU 105733 54.69 56.68 53.80 11 XM_DK_Undo_02 79724 18.82 42.74 8.20 12 XM_B_Unicode3 76529 40.98 41.03 40.96 13 BAYES_50 70620 51.62 37.86 57.74 14 LOC_TINY_FONT_1 68264 27.28 36.60 23.14 15 MIME_HTML_ONLY 66509 25.51 35.66 21.00 16 XM_B_SpammyWords2 65999 24.04 35.38 19.01 17 BAYES_99 63468 15.15 34.03 6.77 18 TR_XM_DKIM_Undo 61604 13.89 33.03 5.39 19 HTML_FONT_LOW_CONTRAST 60218 28.81 32.28 27.27 20 FVGT_m_MULTI_ODD 50236 24.42 26.93 23.30 21 DKIM_VALID_EF 50106 29.24 26.86 30.29 22 BAYES_999 49106 11.95 26.33 5.56 23 TR_DCC_Bayes_99 48929 9.94 26.23 2.71 24 XMSubLong 48821 23.37 26.17 22.13 25 T_KAM_HTML_FONT_INVALID 45892 20.16 24.60 18.18 26 RELAYCOUNTRY_META 44338 10.91 23.77 5.20 27 UNTRUSTED_Relay 40203 8.04 21.55 2.04 28 XM_UncommonTLD01 39223 8.97 21.03 3.62 29 XM_Body_Dirty_Words 37732 13.87 20.23 11.05 30 T_TM2_M_HEADER_IN_MSG 37065 27.90 19.87 31.46 31 RCVD_IN_MSPIKE_WL 36292 28.83 19.46 33.00 32 BOTNET 35960 7.10 19.28 1.69 33 DCC_CHECK_NEGATIVE 35221 47.71 18.88 60.51 34 RCVD_IN_MSPIKE_H2 35014 19.71 18.77 20.13 35 FSL_BULK_SIG 33614 9.12 18.02 5.17 36 XM_Multi_Part_URI 26783 12.14 14.36 11.16 37 XM_B_Unsub 25590 11.01 13.72 9.80 38 XMSexyCombo_05 24021 6.40 12.88 3.52 39 LOTS_OF_MONEY 22789 8.15 12.22 6.34 40 BOTNET_IPINHOSTNAME 22726 7.16 12.18 4.93 41 XM_B_SpammyWords3 22633 6.59 12.13 4.12 42 SpammyFromTLD_02 21036 3.68 11.28 0.31 43 XM_Evil_Numbers_Gen 20231 9.11 10.85 8.34 44 TR_XM_SpammyWords2 19974 4.23 10.71 1.35 45 MPART_ALT_DIFF 19366 7.00 10.38 5.50 46 TR_XM_SpammyWords4 19220 5.54 10.30 3.43 47 HTML_IMAGE_RATIO_02 18793 7.54 10.07 6.42 48 RCVD_IN_MSPIKE_H3 18009 14.75 9.65 17.01 49 BAYES_80 17772 6.14 9.53 4.63 50 KHOP_HELO_FCRDNS 17306 3.99 9.28 1.64 51 UNPARSEABLE_RELAY 16869 7.72 9.04 7.13 52 TR_XM_UnparsRelay 16605 6.91 8.90 6.03 53 RCVD_IN_MSPIKE_H4 16585 11.64 8.89 12.86 54 XMSubMetaSx_00 16394 5.01 8.79 3.33 55 MIME_HTML_MOSTLY 15463 4.34 8.29 2.59 56 BAYES_60 15234 8.73 8.17 8.98 57 HTML_SHORT_LINK_IMG_1 14615 2.42 7.84 0.02 58 LotsOfNums_01 14334 7.79 7.68 7.84 59 HTML_FONT_SIZE_LARGE 13900 2.40 7.45 0.16 60 XM_B_Phish_Phrases 13805 4.53 7.40 3.26 61 RCVD_IN_BL_SPAMCOP_NET 13500 2.70 7.24 0.69 62 HTML_IMAGE_ONLY_12 13498 2.38 7.24 0.23 63 BODY_URI_ONLY 13373 2.21 7.17 0.01 64 XM_B_SpammyTLD 12023 3.25 6.45 1.83 65 TooManyTo_001 11976 8.23 6.42 9.04 66 XM_SendGrid 11809 6.26 6.33 6.23 67 XM_UB50 11653 2.83 6.25 1.31 68 XM_H_Long_From01 11439 6.08 6.13 6.05 69 TR_XM_PhishingBody 11374 3.96 6.10 3.01 70 XM_UB99 10468 1.73 5.61 0.00 71 BAYES_95 10447 3.74 5.60 2.91 72 XMNumbers 10383 3.87 5.57 3.11 73 SpammyFromTLD_01 10328 2.30 5.54 0.86 74 RCVD_IN_MSPIKE_BL 10190 1.74 5.46 0.08 75 TR_XM_MSPIKECOMBO 10087 1.72 5.41 0.08 76 HTML_IMAGE_RATIO_04 9386 5.63 5.03 5.89 77 RCVD_IN_RP_SAFE 8579 6.65 4.60 7.56 78 RELAYCOUNTRY_CA 8428 2.36 4.52 1.41 79 XMDiploma_00 8416 3.14 4.51 2.53 80 RELAYCOUNTRY_FR 8120 1.53 4.35 0.28 81 XM_SPF_SoftFail 8099 2.45 4.34 1.62 82 DKIM_INVALID 7819 3.58 4.19 3.30 83 RCVD_IN_PSBL 7468 1.29 4.00 0.08 84 URIBL_SBL_A 7419 2.16 3.98 1.35 85 XM_UB999 7313 1.21 3.92 0.00 86 HTML_IMAGE_RATIO_06 7226 4.06 3.87 4.14 87 XM_DIRTYINTL 7181 1.49 3.85 0.44 88 XM_OfRef6 7133 1.79 3.82 0.89 89 T_REMOTE_IMAGE 6926 3.73 3.71 3.74 90 TR_XM_DK_SendGrid 6880 3.61 3.69 3.57 91 TR_XM_SpammyWords5 6644 2.18 3.56 1.56 92 XM_UB80 6620 1.12 3.55 0.04 93 RCVD_IN_RP_CERTIFIED 6530 5.74 3.50 6.74 94 RCVD_IN_RP_RNBL 6527 1.08 3.50 0.01 95 BOTNET_NORDNS 6458 1.07 3.46 0.01 96 TM2_M_URI_OPT_OUT 6440 2.92 3.45 2.68 97 XM_DK_Undo_01 6378 2.12 3.42 1.54 98 HTML_MIME_NO_HTML_TAG 6178 2.48 3.31 2.11 99 XM_UB60 6148 1.11 3.30 0.15 100 XMBdyGiftCard01 6068 1.28 3.25 0.40 101 XM_B_Phish66 5958 2.28 3.19 1.88 102 T_XMDrugObfuBody_14 5940 2.39 3.18 2.03 103 PDS_OTHER_BAD_TLD 5889 1.13 3.16 0.24 104 XMStrtUSub 5775 4.15 3.10 4.61 105 URI_HEX 5582 1.91 2.99 1.43 106 XMBrknScrpt_02 5463 1.39 2.93 0.71 107 RCVD_IN_MSPIKE_L5 5440 0.92 2.92 0.03 108 XM_B_SpammyWords4 5338 1.35 2.86 0.67 109 MIME_HTML_ONLY_MULTI 5220 3.21 2.80 3.40 110 XM_B_Unsub2 5082 1.88 2.72 1.50 111 TR_XM_SpammyWords3 5015 0.85 2.69 0.03 112 MIME_QP_LONG_LINE 4895 4.05 2.62 4.69 113 FORGED_GMAIL_RCVD 4868 1.17 2.61 0.54 114 RELAYCOUNTRY_IN 4573 0.85 2.45 0.13 115 XM_B_COVIDMETA 4530 1.28 2.43 0.77 116 RELAYCOUNTRY_DE 4509 1.13 2.42 0.56 117 DKIM_ADSP_NXDOMAIN 4502 0.94 2.41 0.28 118 XMGenDplmaNmb 4480 1.62 2.40 1.27 119 T_XMDrugObfuBody_08 4466 1.89 2.39 1.67 120 TR_XM_SB_Phish 4398 2.26 2.36 2.22 121 FROM_EXCESS_BASE64 4310 3.09 2.31 3.44 122 XMSubPhish11 4280 2.23 2.29 2.19 123 TM2_M_VERY_LONG_WORD 4254 1.56 2.28 1.23 124 DATE_IN_PAST_06_12 4180 0.89 2.24 0.30 125 T_TooManySym_01 4165 4.09 2.23 4.92 126 XM_UB95 4002 0.67 2.15 0.02 127 XM_CamelCaseFrm001 3991 2.08 2.14 2.05 128 XM_DrugUnitList 3956 0.65 2.12 0.00 129 URIBL_DBL_SPAM 3941 0.66 2.11 0.02 130 T_FILL_THIS_FORM_SHORT 3941 1.22 2.11 0.82 131 ALIBABA_IMG_NOT_RCVD_ALI 3936 0.65 2.11 0.00 132 HTML_IMAGE_RATIO_08 3911 2.17 2.10 2.21 133 URI_PHP_REDIR 3903 0.64 2.09 0.00 134 FROM_SUSPICIOUS_NTLD 3895 0.69 2.09 0.08 135 TR_XM_MaxBayes 3849 0.65 2.06 0.02 136 FROM_SUSPICIOUS_NTLD_FP 3828 0.68 2.05 0.07 137 ALL_TRUSTED 3797 10.53 2.04 14.30 138 XM_URI_RBL 3706 0.73 1.99 0.17 139 RCVD_IN_IADB_LISTED 3657 3.91 1.96 4.77 140 HOSTED_IMG_DIRECT_MX 3556 0.59 1.91 0.00 141 TR_Mismatch_TLD_02 3551 0.63 1.90 0.06 142 URI_NOVOWEL 3339 2.55 1.79 2.89 143 DKIM_ADSP_CUSTOM_MED 3251 1.23 1.74 1.00 144 NO_DNS_FOR_FROM 3218 0.70 1.73 0.25 145 DATE_IN_PAST_12_24 3201 0.54 1.72 0.02 146 HTML_IMAGE_ONLY_32 3189 0.82 1.71 0.42 147 RCVD_IN_IADB_SPF 3158 3.31 1.69 4.03 148 RCVD_IN_MSPIKE_L4 3100 0.52 1.66 0.01 149 HDRS_MISSP 3092 0.63 1.66 0.17 150 TR_XM_COVIDMETA4 3066 0.71 1.64 0.29 151 TR_XM_INV_DKIM 3052 0.58 1.64 0.11 152 XMStockSpam_06 3032 1.08 1.63 0.83 153 XM_H_Undi_Recip 3007 0.67 1.61 0.26 154 URIBL_BLACK 2988 0.53 1.60 0.05 155 BAYES_40 2987 3.48 1.60 4.31 156 NML_ADSP_CUSTOM_MED 2961 0.97 1.59 0.69 157 SUBJ_ALL_CAPS 2936 1.70 1.57 1.75 158 XMHTML_After_End 2933 1.39 1.57 1.31 159 RCVD_IN_IADB_DK 2923 2.82 1.57 3.38 160 XMSexyCombo_01 2909 0.73 1.56 0.36 161 RCVD_IN_IADB_SENDERID 2881 2.91 1.54 3.52 162 MONEY_NOHTML 2880 0.55 1.54 0.11 163 MIME_HEADER_CTYPE_ONLY 2871 0.54 1.54 0.10 164 XMSubMetaI_00 2844 0.88 1.52 0.59 165 TR_XM_PHPDW 2640 0.70 1.42 0.39 166 MAILING_LIST_MULTI 2635 2.32 1.41 2.72 167 XMSubMetaSSx_00 2617 0.56 1.40 0.18 168 MONEY_FORM_SHORT 2605 0.43 1.40 0.01 169 BAYES_00 2549 7.19 1.37 9.78 170 T_XMHurry_00 2542 0.86 1.36 0.64 171 RELAYCOUNTRY_CH 2522 0.47 1.35 0.08 172 TR_XM_RelayPhish 2521 0.49 1.35 0.11 173 TR_Symld_Words 2518 1.51 1.35 1.58 174 DIET_1 2495 0.75 1.34 0.48 175 TR_XM_COVIDMETA1 2494 0.63 1.34 0.31 176 URI_TRY_3LD 2457 1.16 1.32 1.09 177 TR_XM_PHPForged 2433 0.61 1.30 0.30 178 T_XMDrugObfuBody_00 2409 0.79 1.29 0.57 179 RELAYCOUNTRY_GB 2393 1.11 1.28 1.03 180 TR_XM_FormFill2 2381 0.60 1.28 0.30 181 XM_H_PHPOS 2366 0.59 1.27 0.29 182 XMBody_17 2358 0.62 1.26 0.33 183 BAYES_20 2192 2.45 1.18 3.01 184 XMSubMetaSxObfu_03 2149 0.73 1.15 0.54 185 XMSlimDrugH 2087 0.57 1.12 0.33 186 XMPhish08 2067 0.50 1.11 0.23 187 TR_XM_Undi_Recip11 2059 0.41 1.10 0.09 188 XM_JunkDunk 2022 0.33 1.08 0.00 189 XM_H_TOP 2020 0.34 1.08 0.00 190 HTTPS_HTTP_MISMATCH 2005 0.98 1.07 0.94 191 XMMoneyMeta_00 1992 0.79 1.07 0.67 192 XM_Body_Dirty_Words_01 1983 0.40 1.06 0.11 193 TR_XM_BayesRelay 1978 0.35 1.06 0.03 194 TR_XM_Undi_Recip2 1941 0.32 1.04 0.00 195 TR_XM_Undi_RecipCombo2 1932 0.32 1.04 0.00 196 FILL_THIS_FORM_FRAUD_PHISH 1932 0.36 1.04 0.05 197 GOOGLE_DOC_SUSP 1915 0.32 1.03 0.00 198 XM_B_SEO 1881 0.40 1.01 0.13 199 TR_XM_Undi_Recip5 1872 0.31 1.00 0.01 200 XM_BadFromFormat 1840 0.49 0.99 0.27 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 374755 91.11 95.35 89.23 2 RELAYCOUNTRY_US 344280 78.53 70.77 81.97 3 DKIM_SIGNED 312758 75.67 78.37 74.46 4 XM_DK_Pass 307428 74.08 76.06 73.20 5 XM_B_Unicode 299395 70.86 69.89 71.28 6 DKIM_VALID 298881 72.09 74.18 71.16 7 DCC_CHECK_NEGATIVE 254132 47.71 18.88 60.51 8 BAYES_50 242498 51.62 37.86 57.74 9 DKIM_VALID_AU 225963 54.69 56.68 53.80 10 XMListUnsubscribeExists 204318 53.23 63.54 48.65 11 XM_B_SpammyWords 187619 50.34 63.11 44.67 12 XM_B_Unicode3 172054 40.98 41.03 40.96 13 DCC_CHECK 156597 50.09 78.94 37.28 14 RCVD_IN_MSPIKE_WL 138590 28.83 19.46 33.00 15 T_TM2_M_HEADER_IN_MSG 132152 27.90 19.87 31.46 16 DKIM_VALID_EF 127219 29.24 26.86 30.29 17 HTML_FONT_LOW_CONTRAST 114553 28.81 32.28 27.27 18 FVGT_m_MULTI_ODD 97854 24.42 26.93 23.30 19 LOC_TINY_FONT_1 97172 27.28 36.60 23.14 20 XMSubLong 92946 23.37 26.17 22.13 21 MIME_HTML_ONLY 88202 25.51 35.66 21.00 22 RCVD_IN_MSPIKE_H2 84565 19.71 18.77 20.13 23 XM_B_SpammyWords2 79829 24.04 35.38 19.01 24 T_KAM_HTML_FONT_INVALID 76370 20.16 24.60 18.18 25 RCVD_IN_MSPIKE_H3 71430 14.75 9.65 17.01 26 ALL_TRUSTED 60069 10.53 2.04 14.30 27 RCVD_IN_MSPIKE_H4 54018 11.64 8.89 12.86 28 XM_Multi_Part_URI 46852 12.14 14.36 11.16 29 XM_Body_Dirty_Words 46421 13.87 20.23 11.05 30 XM_B_Unsub 41179 11.01 13.72 9.80 31 BAYES_00 41067 7.19 1.37 9.78 32 TooManyTo_001 37954 8.23 6.42 9.04 33 XM_DKIMWhitelistDomains 37771 6.23 0.02 8.99 34 BAYES_60 37723 8.73 8.17 8.98 35 XM_Evil_Numbers_Gen 35008 9.11 10.85 8.34 36 XM_DK_Undo_02 34447 18.82 42.74 8.20 37 LotsOfNums_01 32929 7.79 7.68 7.84 38 RCVD_IN_RP_SAFE 31758 6.65 4.60 7.56 39 UNPARSEABLE_RELAY 29943 7.72 9.04 7.13 40 BAYES_99 28424 15.15 34.03 6.77 41 TR_XM_DK_Bayes 28304 4.83 0.55 6.74 42 RCVD_IN_RP_CERTIFIED 28291 5.74 3.50 6.74 43 TR_XM_DK_Bayes1 27711 4.73 0.53 6.60 44 HTML_IMAGE_RATIO_02 26944 7.54 10.07 6.42 45 LOTS_OF_MONEY 26620 8.15 12.22 6.34 46 XM_SendGrid 26160 6.26 6.33 6.23 47 XM_H_Long_From01 25412 6.08 6.13 6.05 48 TR_XM_UnparsRelay 25328 6.91 8.90 6.03 49 TR_XM_DK_Bayes2 24744 4.21 0.43 5.89 50 HTML_IMAGE_RATIO_04 24732 5.63 5.03 5.89 51 IN_ZIMBRA_NJ_WHITELIST 24309 4.02 0.06 5.79 52 BAYES_999 23361 11.95 26.33 5.56 53 MPART_ALT_DIFF 23084 7.00 10.38 5.50 54 TR_XM_DKIM_Undo 22634 13.89 33.03 5.39 55 RELAYCOUNTRY_META 21839 10.91 23.77 5.20 56 FSL_BULK_SIG 21725 9.12 18.02 5.17 57 BOTNET_IPINHOSTNAME 20700 7.16 12.18 4.93 58 T_TooManySym_01 20652 4.09 2.23 4.92 59 XM_PDF 20297 3.61 0.87 4.83 60 RCVD_IN_IADB_LISTED 20037 3.91 1.96 4.77 61 MIME_QP_LONG_LINE 19687 4.05 2.62 4.69 62 BAYES_80 19453 6.14 9.53 4.63 63 XMStrtUSub 19372 4.15 3.10 4.61 64 BAYES_40 18115 3.48 1.60 4.31 65 HTML_IMAGE_RATIO_06 17378 4.06 3.87 4.14 66 XM_B_SpammyWords3 17318 6.59 12.13 4.12 67 RCVD_IN_IADB_SPF 16929 3.31 1.69 4.03 68 T_REMOTE_IMAGE 15711 3.73 3.71 3.74 69 XM_H_Trusted_IP 15562 2.57 0.00 3.71 70 XM_UncommonTLD01 15188 8.97 21.03 3.62 71 TR_XM_DK_SendGrid 14991 3.61 3.69 3.57 72 RCVD_IN_IADB_SENDERID 14776 2.91 1.54 3.52 73 XMSexyCombo_05 14773 6.40 12.88 3.52 74 FROM_EXCESS_BASE64 14459 3.09 2.31 3.44 75 TR_XM_SpammyWords4 14389 5.54 10.30 3.43 76 MIME_HTML_ONLY_MULTI 14261 3.21 2.80 3.40 77 RCVD_IN_IADB_DK 14206 2.82 1.57 3.38 78 XMSubMetaSx_00 14003 5.01 8.79 3.33 79 DKIM_INVALID 13877 3.58 4.19 3.30 80 RCVD_IN_IADB_VOUCHED 13852 2.58 0.95 3.30 81 XM_B_Phish_Phrases 13686 4.53 7.40 3.26 82 RCVD_IN_MSPIKE_H5 13142 2.45 0.91 3.13 83 XMNumbers 13062 3.87 5.57 3.11 84 TR_XM_PhishingBody 12659 3.96 6.10 3.01 85 BAYES_20 12653 2.45 1.18 3.01 86 BAYES_95 12242 3.74 5.60 2.91 87 URI_NOVOWEL 12157 2.55 1.79 2.89 88 MAILING_LIST_MULTI 11426 2.32 1.41 2.72 89 TR_DCC_Bayes_99 11375 9.94 26.23 2.71 90 T_TooManySym_02 11281 2.14 0.92 2.69 91 TM2_M_URI_OPT_OUT 11257 2.92 3.45 2.68 92 MIME_HTML_MOSTLY 10870 4.34 8.29 2.59 93 XMDiploma_00 10620 3.14 4.51 2.53 94 TooManyTo_002 10375 1.96 0.80 2.47 95 ANY_BOUNCE_MESSAGE 10261 1.89 0.63 2.44 96 BOUNCE_MESSAGE 10258 1.88 0.63 2.44 97 TR_XM_SB_Phish 9308 2.26 2.36 2.22 98 HTML_IMAGE_RATIO_08 9277 2.17 2.10 2.21 99 XMSubPhish11 9216 2.23 2.29 2.19 100 RCVD_IN_IADB_OPTIN 9203 1.72 0.67 2.19 101 HTML_MIME_NO_HTML_TAG 8867 2.48 3.31 2.11 102 XM_CamelCaseFrm001 8601 2.08 2.14 2.05 103 UNTRUSTED_Relay 8556 8.04 21.55 2.04 104 T_XMDrugObfuBody_14 8535 2.39 3.18 2.03 105 HELO_NODOT 8527 1.66 0.82 2.03 106 HELO_NO_DOMAIN 8525 1.66 0.82 2.03 107 XM_B_Phish66 7879 2.28 3.19 1.88 108 BAYES_05 7829 1.50 0.68 1.86 109 TVD_RCVD_IP 7704 1.34 0.22 1.83 110 XM_B_SpammyTLD 7680 3.25 6.45 1.83 111 SUBJ_ALL_CAPS 7351 1.70 1.57 1.75 112 INVALID_MSGID 7225 1.29 0.33 1.72 113 BOTNET 7083 7.10 19.28 1.69 114 T_XMDrugObfuBody_08 7006 1.89 2.39 1.67 115 IN_HORDE_ADDRESS_BOOK 6941 1.17 0.08 1.65 116 KHOP_HELO_FCRDNS 6901 3.99 9.28 1.64 117 XM_SPF_SoftFail 6791 2.45 4.34 1.62 118 MSGID_NOFQDN1 6678 1.12 0.07 1.59 119 TooManyTo_003 6659 1.31 0.68 1.59 120 TR_Symld_Words 6653 1.51 1.35 1.58 121 TR_XM_SpammyWords5 6550 2.18 3.56 1.56 122 XM_DK_Undo_01 6486 2.12 3.42 1.54 123 XMSubNoVowel 6322 1.25 0.67 1.51 124 XM_B_Unsub2 6311 1.88 2.72 1.50 125 TO_MALFORMED 6207 1.09 0.21 1.48 126 XM_H_Long_From02 6188 1.30 0.92 1.47 127 XMCapTrack 6097 1.17 0.53 1.45 128 URI_HEX 5996 1.91 2.99 1.43 129 RELAYCOUNTRY_CA 5903 2.36 4.52 1.41 130 TR_XM_SpammyWords2 5683 4.23 10.71 1.35 131 URIBL_SBL_A 5673 2.16 3.98 1.35 132 HELO_MISC_IP 5556 0.95 0.10 1.32 133 XM_GoogleGroups 5509 1.06 0.49 1.31 134 XM_UB50 5503 2.83 6.25 1.31 135 XMHTML_After_End 5501 1.39 1.57 1.31 136 USER_IN_DEF_DKIM_WL 5333 0.88 0.00 1.27 137 XMGenDplmaNmb 5325 1.62 2.40 1.27 138 TM2_M_VERY_LONG_WORD 5186 1.56 2.28 1.23 139 HTML_FONT_FACE_BAD 5021 0.99 0.54 1.20 140 TooManyTo_004 4869 0.98 0.59 1.16 141 XMBSHREFv2 4865 0.88 0.24 1.16 142 URI_TRY_3LD 4584 1.16 1.32 1.09 143 XMGappySubj_01 4502 0.79 0.16 1.07 144 RELAYCOUNTRY_GB 4315 1.11 1.28 1.03 145 DKIM_ADSP_CUSTOM_MED 4193 1.23 1.74 1.00 146 TooManyTo_005 3965 0.81 0.52 0.94 147 HTTPS_HTTP_MISMATCH 3957 0.98 1.07 0.94 148 XMBody_95 3840 0.66 0.10 0.91 149 HTML_IMAGE_ONLY_20 3770 0.70 0.24 0.90 150 XM_OfRef6 3733 1.79 3.82 0.89 151 SpammyFromTLD_01 3599 2.30 5.54 0.86 152 XM_ProductURIs 3558 0.80 0.71 0.85 153 XMStockSpam_06 3505 1.08 1.63 0.83 154 T_FILL_THIS_FORM_SHORT 3455 1.22 2.11 0.82 155 TVD_SPACE_RATIO 3392 0.58 0.08 0.81 156 XM_B_COVIDMETA 3243 1.28 2.43 0.77 157 TR_MSPIKEBAYES00 3236 0.54 0.02 0.77 158 XM_ShortIntro_01 3000 0.62 0.40 0.71 159 T_TooManySym_03 2990 0.56 0.20 0.71 160 XMBrknScrpt_02 2962 1.39 2.93 0.71 161 NML_ADSP_CUSTOM_MED 2911 0.97 1.59 0.69 162 RCVD_IN_BL_SPAMCOP_NET 2904 2.70 7.24 0.69 163 SHORT_HELO_AND_INLINE_IMAGE 2856 0.50 0.08 0.68 164 XM_B_SpammyWords4 2827 1.35 2.86 0.67 165 XMMoneyMeta_00 2802 0.79 1.07 0.67 166 XMHTMLBadTable_001 2719 0.67 0.73 0.65 167 TR_MetaPhish_Combo_01 2706 0.69 0.80 0.64 168 RCVD_IN_SORBS_DUL 2703 0.51 0.21 0.64 169 T_XMHurry_00 2697 0.86 1.36 0.64 170 XMNoVowels 2678 0.58 0.43 0.64 171 XM_H_PHPMailer 2627 0.66 0.74 0.63 172 T_OBFU_PDF_ATTACH 2605 0.47 0.14 0.62 173 XMSubMetaI_00 2493 0.88 1.52 0.59 174 RDNS_DYNAMIC 2405 0.67 0.90 0.57 175 T_XMDrugObfuBody_00 2392 0.79 1.29 0.57 176 XM_SPF_Unknown 2377 0.64 0.79 0.57 177 T_Symld_Words_02 2374 0.61 0.71 0.57 178 RELAYCOUNTRY_DE 2364 1.13 2.42 0.56 179 TVD_SPACE_RATIO_MINFP 2339 0.52 0.44 0.56 180 XMLngstWrd_00 2292 0.48 0.34 0.55 181 XMSubMetaSxObfu_03 2269 0.73 1.15 0.54 182 FORGED_GMAIL_RCVD 2256 1.17 2.61 0.54 183 FROM_GOV_DKIM_AU 2183 0.45 0.29 0.52 184 FROM_GOV_SPOOF 2172 0.41 0.18 0.52 185 XMLngstWrd_01 2076 0.43 0.30 0.49 186 DIET_1 2037 0.75 1.34 0.48 187 XMSolicitRefs_0 2014 0.46 0.41 0.48 188 TM2_M_BODY_EMPTY 1946 0.34 0.08 0.46 189 HTML_IMAGE_ONLY_28 1902 0.40 0.27 0.45 190 XMPhish30 1889 0.61 0.97 0.45 191 XM_DIRTYINTL 1829 1.49 3.85 0.44 192 USER_IN_WELCOMELIST 1804 0.30 0.00 0.43 193 USER_IN_WHITELIST 1804 0.30 0.00 0.43 194 HTML_IMAGE_ONLY_32 1785 0.82 1.71 0.42 195 MISSING_HEADERS 1752 0.40 0.36 0.42 196 SHOPIFY_IMG_NOT_RCVD_SFY 1748 0.44 0.49 0.42 197 XM_B_REG_HTML 1732 0.36 0.25 0.41 198 XMLngstWrd_02 1724 0.36 0.25 0.41 199 HTML_TAG_BALANCE_BODY 1712 0.51 0.73 0.41 200 XMBdyGiftCard01 1695 1.28 3.25 0.40 ----------------------------------------------------------------------