Email: 635824 Autolearn: 0 AvgScore: 3.57 AvgScanTime: 1.25 sec Spam: 191109 Autolearn: 0 AvgScore: 14.25 AvgScanTime: 1.45 sec Ham: 444715 Autolearn: 0 AvgScore: -1.02 AvgScanTime: 1.17 sec Time Spent Running SA: 221.21 hours Time Spent Processing Spam: 77.22 hours Time Spent Processing Ham: 144.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 180341 89.84 94.37 87.89 2 DKIM_SIGNED 151895 74.83 79.48 72.83 3 XM_DK_Pass 148874 73.52 77.90 71.63 4 DCC_CHECK 146656 50.16 76.74 38.75 5 DKIM_VALID 144796 71.59 75.77 69.80 6 XM_B_Unicode 141240 71.84 73.91 70.95 7 RELAYCOUNTRY_US 135552 79.09 70.93 82.60 8 XMListUnsubscribeExists 127194 52.69 66.56 46.73 9 XM_B_SpammyWords 123995 51.80 64.88 46.18 10 DKIM_VALID_AU 107150 53.79 56.07 52.81 11 XM_DK_Undo_02 88790 19.41 46.46 7.79 12 XM_B_Unicode3 83534 42.06 43.71 41.36 13 XM_B_SpammyWords2 74244 24.62 38.85 18.51 14 TR_XM_DKIM_Undo 71339 14.87 37.33 5.21 15 BAYES_99 71168 15.78 37.24 6.55 16 LOC_TINY_FONT_1 69662 26.68 36.45 22.47 17 BAYES_50 68257 48.91 35.72 54.58 18 MIME_HTML_ONLY 68055 26.85 35.61 23.09 19 HTML_FONT_LOW_CONTRAST 58884 27.29 30.81 25.77 20 BAYES_999 55728 12.57 29.16 5.45 21 TR_DCC_Bayes_99 55138 10.47 28.85 2.57 22 T_KAM_HTML_FONT_INVALID 52910 20.81 27.69 17.85 23 DKIM_VALID_EF 51808 28.45 27.11 29.03 24 FVGT_m_MULTI_ODD 48423 23.18 25.34 22.25 25 XMSubLong 47994 22.55 25.11 21.45 26 XM_Body_Dirty_Words 46909 15.49 24.55 11.60 27 RCVD_IN_MSPIKE_WL 43762 29.66 22.90 32.56 28 RCVD_IN_MSPIKE_H2 41963 22.29 21.96 22.43 29 DCC_CHECK_NEGATIVE 41288 47.93 21.60 59.24 30 RELAYCOUNTRY_META 39776 9.56 20.81 4.72 31 XM_UncommonTLD01 36351 7.86 19.02 3.06 32 UNTRUSTED_Relay 35829 6.96 18.75 1.89 33 T_TM2_M_HEADER_IN_MSG 34079 25.33 17.83 28.56 34 FSL_BULK_SIG 31970 9.84 16.73 6.88 35 XM_Multi_Part_URI 29443 12.28 15.41 10.94 36 BOTNET 29133 5.84 15.24 1.79 37 XMSexyCombo_05 28130 7.32 14.72 4.14 38 TR_XM_SpammyWords2 27811 4.79 14.55 0.59 39 BOTNET_IPINHOSTNAME 26147 7.53 13.68 4.89 40 LOTS_OF_MONEY 25218 8.65 13.20 6.70 41 XM_B_Unsub 24870 11.79 13.01 11.26 42 XM_B_SpammyWords3 23748 6.55 12.43 4.03 43 RCVD_IN_MSPIKE_H3 21718 14.88 11.36 16.39 44 XM_Evil_Numbers_Gen 21256 9.31 11.12 8.54 45 SpammyFromTLD_02 20838 3.56 10.90 0.41 46 RCVD_IN_MSPIKE_H4 20277 12.02 10.61 12.62 47 LotsOfNums_01 18905 8.84 9.89 8.39 48 TR_XM_SpammyWords4 18662 5.76 9.77 4.04 49 T_REMOTE_IMAGE 18525 5.28 9.69 3.38 50 KHOP_HELO_FCRDNS 17616 3.89 9.22 1.61 51 BAYES_80 17413 6.16 9.11 4.89 52 UNPARSEABLE_RELAY 17274 7.82 9.04 7.30 53 TR_XM_UnparsRelay 17088 7.06 8.94 6.25 54 HTML_FONT_SIZE_LARGE 16589 2.69 8.68 0.12 55 XM_B_Phish_Phrases 16259 6.28 8.51 5.33 56 RCVD_IN_BL_SPAMCOP_NET 16083 3.11 8.42 0.83 57 MPART_ALT_DIFF 15910 7.93 8.33 7.76 58 HTML_IMAGE_ONLY_12 15689 2.59 8.21 0.18 59 XMSubMetaSx_00 15543 4.75 8.13 3.30 60 HTML_IMAGE_RATIO_02 14927 7.32 7.81 7.11 61 BODY_URI_ONLY 14803 2.33 7.75 0.01 62 BAYES_60 14666 8.44 7.67 8.77 63 MIME_HTML_MOSTLY 13735 4.04 7.19 2.69 64 HTML_SHORT_LINK_IMG_1 12730 2.01 6.66 0.01 65 XM_SendGrid 12627 6.47 6.61 6.41 66 RELAYCOUNTRY_CA 12519 2.87 6.55 1.29 67 XMNumbers 12175 3.89 6.37 2.82 68 TR_XM_PhishingBody 12073 4.01 6.32 3.02 69 TooManyTo_001 10979 7.79 5.74 8.67 70 BAYES_95 10872 3.91 5.69 3.14 71 RCVD_IN_RP_SAFE 10683 6.43 5.59 6.79 72 XM_H_Long_From01 10670 5.57 5.58 5.56 73 HTML_IMAGE_RATIO_04 10490 6.07 5.49 6.32 74 XM_SPF_SoftFail 10249 2.76 5.36 1.64 75 RCVD_IN_MSPIKE_BL 9654 1.70 5.05 0.26 76 TR_XM_MSPIKECOMBO 9595 1.69 5.02 0.26 77 SpammyFromTLD_01 9587 1.96 5.02 0.65 78 XM_UB99 9569 1.51 5.01 0.00 79 XM_B_SpammyTLD 9468 2.77 4.95 1.83 80 XM_UB50 8582 2.27 4.49 1.32 81 RCVD_IN_RP_CERTIFIED 8530 5.61 4.46 6.10 82 XM_OfRef6 8045 1.91 4.21 0.92 83 XM_DIRTYINTL 7811 1.55 4.09 0.45 84 XM_B_Phish66 7510 2.46 3.93 1.83 85 TR_XM_DK_SendGrid 7134 3.93 3.73 4.01 86 DKIM_INVALID 7099 3.24 3.71 3.03 87 XM_B_COVIDMETA 7094 1.88 3.71 1.09 88 RCVD_IN_RP_RNBL 6991 1.12 3.66 0.04 89 XMStrtUSub 6695 4.89 3.50 5.49 90 TR_XM_SpammyWords5 6627 1.91 3.47 1.25 91 TR_XM_SpammyWords3 6623 1.18 3.47 0.20 92 MIME_QP_LONG_LINE 6497 4.77 3.40 5.36 93 ALL_TRUSTED 6301 10.74 3.30 13.94 94 TM2_M_URI_OPT_OUT 6238 4.36 3.26 4.83 95 XM_UB80 6209 1.01 3.25 0.05 96 XM_UB999 6150 0.97 3.22 0.00 97 XM_UB60 6087 1.05 3.19 0.14 98 XM_DK_Undo_01 5880 2.01 3.08 1.55 99 RCVD_IN_MSPIKE_L5 5846 1.00 3.06 0.11 100 XMDiploma_00 5739 1.79 3.00 1.27 101 HTML_IMAGE_RATIO_06 5679 3.34 2.97 3.49 102 RCVD_IN_PSBL 5511 0.93 2.88 0.10 103 RELAYCOUNTRY_DE 5310 1.28 2.78 0.64 104 DKIM_ADSP_CUSTOM_MED 5218 1.47 2.73 0.93 105 T_XMDrugObfuBody_08 5205 1.92 2.72 1.57 106 URIBL_SBL_A 5103 1.01 2.67 0.29 107 FROM_EXCESS_BASE64 5090 2.88 2.66 2.97 108 MIME_HTML_ONLY_MULTI 4964 4.70 2.60 5.60 109 NML_ADSP_CUSTOM_MED 4954 1.20 2.59 0.60 110 TR_XM_BayesRelay 4917 0.79 2.57 0.03 111 FORGED_GMAIL_RCVD 4884 1.11 2.56 0.49 112 XM_B_Unsub2 4877 1.80 2.55 1.48 113 MONEY_NOHTML 4835 0.84 2.53 0.11 114 T_XMDrugObfuBody_14 4774 2.27 2.50 2.17 115 T_TooManySym_01 4695 4.09 2.46 4.79 116 URI_HEX 4683 1.74 2.45 1.44 117 XMBdyGiftCard01 4640 1.06 2.43 0.47 118 RELAYCOUNTRY_FR 4614 0.89 2.41 0.23 119 XM_H_Undi_Recip 4607 0.98 2.41 0.36 120 XM_B_SpammyWords4 4594 0.98 2.40 0.37 121 XM_CamelCaseFrm001 4559 1.91 2.39 1.70 122 XM_UB95 4546 0.73 2.38 0.02 123 RCVD_IN_IADB_LISTED 4477 4.53 2.34 5.48 124 PDS_OTHER_BAD_TLD 4455 0.91 2.33 0.29 125 TR_XM_SB_Phish 4396 3.31 2.30 3.75 126 URIBL_DBL_SPAM 4321 0.69 2.26 0.01 127 BOTNET_NORDNS 4265 0.69 2.23 0.02 128 FILL_THIS_FORM 4250 0.84 2.22 0.24 129 URI_PHP_REDIR 4230 0.67 2.21 0.00 130 XMSubPhish11 4209 3.27 2.20 3.72 131 FILL_THIS_FORM_LONG 4152 0.69 2.17 0.06 132 MONEY_ATM_CARD 4106 0.65 2.15 0.00 133 MONEY_FORM 4094 0.65 2.14 0.01 134 TR_XM_Undi_Recip5 4076 0.65 2.13 0.01 135 RCVD_IN_IADB_SPF 4070 3.96 2.13 4.74 136 HTML_IMAGE_RATIO_08 3901 2.02 2.04 2.01 137 RCVD_IN_IADB_DK 3889 3.47 2.03 4.09 138 TR_XM_Undi_Recip9 3883 0.61 2.03 0.00 139 RCVD_IN_IADB_SENDERID 3863 3.58 2.02 4.24 140 TR_XM_Undi_Recip2 3817 0.61 2.00 0.01 141 HTML_SHORT_LINK_IMG_2 3807 0.63 1.99 0.04 142 TR_XM_Undi_RecipCombo2 3797 0.60 1.99 0.00 143 T_XMHurry_00 3788 0.94 1.98 0.49 144 TM2_M_VERY_LONG_WORD 3760 1.51 1.97 1.32 145 HTML_MIME_NO_HTML_TAG 3718 2.29 1.95 2.44 146 XMBrknScrpt_02 3604 0.96 1.89 0.56 147 SUBJ_ALL_CAPS 3490 1.69 1.83 1.63 148 XM_URI_RBL 3477 0.65 1.82 0.15 149 XMGenDplmaNmb 3421 1.06 1.79 0.75 150 XMSexyCombo_01 3397 0.81 1.78 0.40 151 T_FILL_THIS_FORM_LOAN 3358 0.58 1.76 0.07 152 TR_XM_COVIDMETA1 3242 0.72 1.70 0.31 153 T_FILL_THIS_FORM_SHORT 3233 1.10 1.69 0.85 154 XMBody_17 3219 0.82 1.68 0.45 155 BAYES_40 3182 3.80 1.67 4.71 156 T_XMDrugObfuBody_00 3064 1.00 1.60 0.74 157 URI_NOVOWEL 3051 2.51 1.60 2.91 158 URIBL_BLACK 2921 0.49 1.53 0.05 159 TR_XM_COVIDMETA4 2920 0.75 1.53 0.41 160 TR_XM_PHPDW 2901 0.67 1.52 0.31 161 MAILING_LIST_MULTI 2833 2.24 1.48 2.57 162 XMSubMetaSxObfu_03 2823 0.85 1.48 0.57 163 TR_XM_MaxBayes 2820 0.45 1.48 0.00 164 XMStockSpam_06 2774 1.40 1.45 1.37 165 TR_XM_INV_DKIM 2748 0.51 1.44 0.11 166 XMHTML_After_End 2641 1.14 1.38 1.04 167 TR_XM_PHPForged 2622 0.58 1.37 0.24 168 TR_Symld_Words 2621 1.48 1.37 1.52 169 TR_XM_FormFill2 2608 0.58 1.36 0.24 170 URI_TRY_3LD 2606 1.10 1.36 0.99 171 XM_H_PHPOS 2588 0.57 1.35 0.24 172 MIME_HEADER_CTYPE_ONLY 2555 0.45 1.34 0.08 173 XMSubMetaI_00 2546 0.91 1.33 0.73 174 XM_JunkDunk 2501 0.39 1.31 0.00 175 XM_Body_Dirty_Words_01 2339 0.44 1.22 0.11 176 XM_H_Long_From02 2320 1.25 1.21 1.26 177 BAYES_20 2296 3.12 1.20 3.95 178 RELAYCOUNTRY_IN 2284 0.42 1.20 0.09 179 XMSlimDrugH 2224 0.57 1.16 0.32 180 THIS_AD 2123 0.76 1.11 0.60 181 BAYES_00 2075 8.25 1.09 11.32 182 XM_BadFromFormat 2074 0.50 1.09 0.25 183 XM_RXBody 2053 0.80 1.07 0.69 184 NUMERIC_HTTP_ADDR 2011 0.56 1.05 0.35 185 TR_XM_RelayPhish 1948 0.37 1.02 0.09 186 URI_NO_WWW_BIZ_CGI 1932 0.31 1.01 0.01 187 TR_LOTS_OF_MONEY3 1931 0.43 1.01 0.18 188 RCVD_IN_MSPIKE_L4 1909 0.36 1.00 0.09 189 HTTPS_HTTP_MISMATCH 1895 0.75 0.99 0.64 190 RELAYCOUNTRY_CH 1893 0.34 0.99 0.05 191 XMPhish08 1890 0.41 0.99 0.16 192 XMSubMetaD_00 1874 0.32 0.98 0.04 193 RCVD_IN_MSPIKE_L3 1840 0.33 0.96 0.06 194 HK_RANDOM_REPLYTO 1827 0.41 0.96 0.17 195 DIET_1 1816 0.70 0.95 0.59 196 NO_DNS_FOR_FROM 1800 0.41 0.94 0.18 197 TR_XM_MaxWHORU 1785 0.40 0.93 0.17 198 RCVD_IN_MSPIKE_H5 1767 2.76 0.92 3.55 199 XM_B_SEO 1743 0.37 0.91 0.13 200 TR_MetaPhish_Combo_01 1721 0.69 0.90 0.61 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 390861 89.84 94.37 87.89 2 RELAYCOUNTRY_US 367345 79.09 70.93 82.60 3 DKIM_SIGNED 323881 74.83 79.48 72.83 4 XM_DK_Pass 318555 73.52 77.90 71.63 5 XM_B_Unicode 315534 71.84 73.91 70.95 6 DKIM_VALID 310389 71.59 75.77 69.80 7 DCC_CHECK_NEGATIVE 263464 47.93 21.60 59.24 8 BAYES_50 242731 48.91 35.72 54.58 9 DKIM_VALID_AU 234869 53.79 56.07 52.81 10 XMListUnsubscribeExists 207814 52.69 66.56 46.73 11 XM_B_SpammyWords 205385 51.80 64.88 46.18 12 XM_B_Unicode3 183921 42.06 43.71 41.36 13 DCC_CHECK 172305 50.16 76.74 38.75 14 RCVD_IN_MSPIKE_WL 144820 29.66 22.90 32.56 15 DKIM_VALID_EF 129079 28.45 27.11 29.03 16 T_TM2_M_HEADER_IN_MSG 126992 25.33 17.83 28.56 17 HTML_FONT_LOW_CONTRAST 114605 27.29 30.81 25.77 18 MIME_HTML_ONLY 102669 26.85 35.61 23.09 19 LOC_TINY_FONT_1 99949 26.68 36.45 22.47 20 RCVD_IN_MSPIKE_H2 99747 22.29 21.96 22.43 21 FVGT_m_MULTI_ODD 98962 23.18 25.34 22.25 22 XMSubLong 95374 22.55 25.11 21.45 23 XM_B_SpammyWords2 82299 24.62 38.85 18.51 24 T_KAM_HTML_FONT_INVALID 79403 20.81 27.69 17.85 25 RCVD_IN_MSPIKE_H3 72901 14.88 11.36 16.39 26 ALL_TRUSTED 61999 10.74 3.30 13.94 27 RCVD_IN_MSPIKE_H4 56141 12.02 10.61 12.62 28 XM_Body_Dirty_Words 51605 15.49 24.55 11.60 29 BAYES_00 50354 8.25 1.09 11.32 30 XM_B_Unsub 50066 11.79 13.01 11.26 31 XM_Multi_Part_URI 48656 12.28 15.41 10.94 32 XM_DKIMWhitelistDomains 43845 6.99 0.31 9.86 33 BAYES_60 38992 8.44 7.67 8.77 34 TooManyTo_001 38536 7.79 5.74 8.67 35 XM_Evil_Numbers_Gen 37971 9.31 11.12 8.54 36 LotsOfNums_01 37321 8.84 9.89 8.39 37 XM_DK_Undo_02 34631 19.41 46.46 7.79 38 MPART_ALT_DIFF 34518 7.93 8.33 7.76 39 UNPARSEABLE_RELAY 32446 7.82 9.04 7.30 40 HTML_IMAGE_RATIO_02 31600 7.32 7.81 7.11 41 FSL_BULK_SIG 30583 9.84 16.73 6.88 42 RCVD_IN_RP_SAFE 30180 6.43 5.59 6.79 43 TR_XM_DK_Bayes 30040 4.96 0.79 6.75 44 XM_H_Trusted_IP 30013 4.72 0.00 6.75 45 LOTS_OF_MONEY 29777 8.65 13.20 6.70 46 TR_XM_DK_Bayes1 29322 4.85 0.78 6.59 47 BAYES_99 29140 15.78 37.24 6.55 48 XM_SendGrid 28512 6.47 6.61 6.41 49 HTML_IMAGE_RATIO_04 28105 6.07 5.49 6.32 50 TR_XM_UnparsRelay 27774 7.06 8.94 6.25 51 RCVD_IN_RP_CERTIFIED 27142 5.61 4.46 6.10 52 TR_XM_DK_Bayes2 25993 4.31 0.73 5.84 53 MIME_HTML_ONLY_MULTI 24915 4.70 2.60 5.60 54 XM_H_Long_From01 24740 5.57 5.58 5.56 55 XMStrtUSub 24414 4.89 3.50 5.49 56 RCVD_IN_IADB_LISTED 24354 4.53 2.34 5.48 57 BAYES_999 24217 12.57 29.16 5.45 58 IN_ZIMBRA_NJ_WHITELIST 24134 3.82 0.08 5.43 59 MIME_QP_LONG_LINE 23836 4.77 3.40 5.36 60 XM_B_Phish_Phrases 23696 6.28 8.51 5.33 61 TR_XM_DKIM_Undo 23180 14.87 37.33 5.21 62 BOTNET_IPINHOSTNAME 21756 7.53 13.68 4.89 63 BAYES_80 21750 6.16 9.11 4.89 64 TM2_M_URI_OPT_OUT 21464 4.36 3.26 4.83 65 T_TooManySym_01 21317 4.09 2.46 4.79 66 RCVD_IN_IADB_SPF 21081 3.96 2.13 4.74 67 RELAYCOUNTRY_META 20978 9.56 20.81 4.72 68 BAYES_40 20962 3.80 1.67 4.71 69 XM_PDF 19615 3.32 0.78 4.41 70 RCVD_IN_IADB_SENDERID 18869 3.58 2.02 4.24 71 XMSexyCombo_05 18413 7.32 14.72 4.14 72 RCVD_IN_IADB_DK 18205 3.47 2.03 4.09 73 TR_XM_SpammyWords4 17980 5.76 9.77 4.04 74 XM_B_SpammyWords3 17912 6.55 12.43 4.03 75 TR_XM_DK_SendGrid 17838 3.93 3.73 4.01 76 BAYES_20 17553 3.12 1.20 3.95 77 TR_XM_SB_Phish 16655 3.31 2.30 3.75 78 XMSubPhish11 16562 3.27 2.20 3.72 79 RCVD_IN_MSPIKE_H5 15778 2.76 0.92 3.55 80 HTML_IMAGE_RATIO_06 15526 3.34 2.97 3.49 81 RCVD_IN_IADB_VOUCHED 15305 2.66 0.85 3.44 82 T_REMOTE_IMAGE 15040 5.28 9.69 3.38 83 XMSubMetaSx_00 14663 4.75 8.13 3.30 84 ANY_BOUNCE_MESSAGE 14632 2.50 0.65 3.29 85 BOUNCE_MESSAGE 14631 2.50 0.65 3.29 86 BAYES_95 13965 3.91 5.69 3.14 87 XM_UncommonTLD01 13595 7.86 19.02 3.06 88 DKIM_INVALID 13492 3.24 3.71 3.03 89 TR_XM_PhishingBody 13441 4.01 6.32 3.02 90 FROM_EXCESS_BASE64 13199 2.88 2.66 2.97 91 URI_NOVOWEL 12927 2.51 1.60 2.91 92 XMNumbers 12559 3.89 6.37 2.82 93 MIME_HTML_MOSTLY 11959 4.04 7.19 2.69 94 TR_DCC_Bayes_99 11439 10.47 28.85 2.57 95 MAILING_LIST_MULTI 11438 2.24 1.48 2.57 96 T_TooManySym_02 11411 2.03 0.78 2.57 97 HTML_MIME_NO_HTML_TAG 10845 2.29 1.95 2.44 98 TooManyTo_002 10324 1.82 0.66 2.32 99 XMSubNoVowel 10081 1.84 0.86 2.27 100 RCVD_IN_IADB_OPTIN 9912 1.73 0.58 2.23 101 T_XMDrugObfuBody_14 9647 2.27 2.50 2.17 102 BAYES_05 9267 1.64 0.62 2.08 103 HTML_IMAGE_RATIO_08 8958 2.02 2.04 2.01 104 UNTRUSTED_Relay 8418 6.96 18.75 1.89 105 XM_B_SpammyTLD 8127 2.77 4.95 1.83 106 XM_B_Phish66 8121 2.46 3.93 1.83 107 BOTNET 7970 5.84 15.24 1.79 108 XM_CamelCaseFrm001 7574 1.91 2.39 1.70 109 TVD_RCVD_IP 7534 1.23 0.14 1.69 110 HELO_NODOT 7458 1.31 0.47 1.68 111 HELO_NO_DOMAIN 7457 1.31 0.47 1.68 112 XM_SPF_SoftFail 7312 2.76 5.36 1.64 113 INVALID_MSGID 7292 1.31 0.53 1.64 114 IN_HORDE_ADDRESS_BOOK 7263 1.16 0.07 1.63 115 SUBJ_ALL_CAPS 7237 1.69 1.83 1.63 116 KHOP_HELO_FCRDNS 7148 3.89 9.22 1.61 117 HTML_FONT_FACE_BAD 7117 1.32 0.68 1.60 118 T_XMDrugObfuBody_08 6994 1.92 2.72 1.57 119 TooManyTo_003 6965 1.26 0.55 1.57 120 XM_DK_Undo_01 6896 2.01 3.08 1.55 121 TR_Symld_Words 6781 1.48 1.37 1.52 122 XM_B_Unsub2 6597 1.80 2.55 1.48 123 MSGID_NOFQDN1 6561 1.05 0.07 1.48 124 URI_HEX 6387 1.74 2.45 1.44 125 TO_MALFORMED 6326 1.04 0.16 1.42 126 XMStockSpam_06 6103 1.40 1.45 1.37 127 TM2_M_VERY_LONG_WORD 5862 1.51 1.97 1.32 128 XM_UB50 5849 2.27 4.49 1.32 129 RELAYCOUNTRY_CA 5753 2.87 6.55 1.29 130 XMDiploma_00 5651 1.79 3.00 1.27 131 XM_H_Long_From02 5605 1.25 1.21 1.26 132 TR_XM_SpammyWords5 5539 1.91 3.47 1.25 133 XMGappySubj_01 5484 0.91 0.17 1.23 134 USER_IN_DEF_DKIM_WL 5442 0.87 0.04 1.22 135 HELO_MISC_IP 5407 0.87 0.07 1.22 136 XM_GoogleGroups 5239 0.99 0.55 1.18 137 XMCapTrack 5087 0.90 0.34 1.14 138 TooManyTo_004 5032 0.94 0.49 1.13 139 XMBSHREFv2 4838 0.82 0.20 1.09 140 XM_B_COVIDMETA 4835 1.88 3.71 1.09 141 HTML_IMAGE_ONLY_20 4784 0.91 0.53 1.08 142 XMHTML_After_End 4614 1.14 1.38 1.04 143 URI_TRY_3LD 4383 1.10 1.36 0.99 144 RELAYCOUNTRY_GB 4326 0.94 0.86 0.97 145 DKIM_ADSP_CUSTOM_MED 4127 1.47 2.73 0.93 146 XM_OfRef6 4102 1.91 4.21 0.92 147 TooManyTo_005 3998 0.76 0.43 0.90 148 T_FILL_THIS_FORM_SHORT 3762 1.10 1.69 0.85 149 TVD_SPACE_RATIO_MINFP 3726 0.67 0.29 0.84 150 RCVD_IN_BL_SPAMCOP_NET 3711 3.11 8.42 0.83 151 XMBody_95 3503 0.58 0.11 0.79 152 TR_MSPIKEBAYES00 3488 0.55 0.02 0.78 153 TVD_SPACE_RATIO 3348 0.55 0.07 0.75 154 XMGenDplmaNmb 3318 1.06 1.79 0.75 155 T_XMDrugObfuBody_00 3275 1.00 1.60 0.74 156 XMSubMetaI_00 3242 0.91 1.33 0.73 157 XMNoVowels 3076 0.68 0.67 0.69 158 XM_ProductURIs 3065 0.64 0.52 0.69 159 XM_RXBody 3047 0.80 1.07 0.69 160 FROM_GOV_DKIM_AU 2996 0.61 0.46 0.67 161 SpammyFromTLD_01 2887 1.96 5.02 0.65 162 HTTPS_HTTP_MISMATCH 2843 0.75 0.99 0.64 163 RELAYCOUNTRY_DE 2843 1.28 2.78 0.64 164 T_TooManySym_03 2801 0.57 0.43 0.63 165 TR_MetaPhish_Combo_01 2694 0.69 0.90 0.61 166 THIS_AD 2678 0.76 1.11 0.60 167 XM_SPF_Unknown 2665 0.60 0.59 0.60 168 NML_ADSP_CUSTOM_MED 2655 1.20 2.59 0.60 169 TR_XM_SpammyWords2 2638 4.79 14.55 0.59 170 DIET_1 2627 0.70 0.95 0.59 171 XMSubMetaSxObfu_03 2550 0.85 1.48 0.57 172 T_OBFU_PDF_ATTACH 2547 0.44 0.15 0.57 173 XMBrknScrpt_02 2473 0.96 1.89 0.56 174 FROM_GOV_SPOOF 2389 0.43 0.19 0.54 175 RCVD_IN_SORBS_DUL 2313 0.39 0.10 0.52 176 XM_ShortIntro_01 2311 0.46 0.31 0.52 177 XM_H_PHPMailer 2307 0.57 0.68 0.52 178 XMHTMLBadTable_001 2280 0.55 0.63 0.51 179 XMMoneyMeta_00 2233 0.57 0.72 0.50 180 XMPhish30 2225 0.61 0.88 0.50 181 RDNS_DYNAMIC 2212 0.55 0.67 0.50 182 TM2_M_BODY_EMPTY 2189 0.36 0.05 0.49 183 T_XMHurry_00 2174 0.94 1.98 0.49 184 FORGED_GMAIL_RCVD 2174 1.11 2.56 0.49 185 XMBdyGiftCard01 2081 1.06 2.43 0.47 186 MISSING_HEADERS 2041 0.44 0.39 0.46 187 XMBody_17 2015 0.82 1.68 0.45 188 XM_DIRTYINTL 2015 1.55 4.09 0.45 189 XMLngstWrd_00 1995 0.42 0.34 0.45 190 TM2_M_A_HREF_HREF 1976 0.45 0.47 0.44 191 SHORT_HELO_AND_INLINE_IMAGE 1968 0.33 0.05 0.44 192 XMPhish14 1916 0.46 0.52 0.43 193 XM_E_Blogspot 1882 0.31 0.06 0.42 194 XM_B_COPY_HTML 1832 0.49 0.68 0.41 195 SpammyFromTLD_02 1824 3.56 10.90 0.41 196 TR_XM_COVIDMETA4 1822 0.75 1.53 0.41 197 XMSexyCombo_01 1783 0.81 1.78 0.40 198 SHOPIFY_IMG_NOT_RCVD_SFY 1779 0.44 0.55 0.40 199 HTML_TAG_BALANCE_BODY 1778 0.47 0.65 0.40 200 XM_D_tchamptons_WL 1741 0.27 0.00 0.39 ----------------------------------------------------------------------