Email: 291882 Autolearn: 0 AvgScore: 2.52 AvgScanTime: 1.09 sec Spam: 81958 Autolearn: 0 AvgScore: 13.80 AvgScanTime: 1.29 sec Ham: 209924 Autolearn: 0 AvgScore: -1.89 AvgScanTime: 1.02 sec Time Spent Running SA: 88.51 hours Time Spent Processing Spam: 29.28 hours Time Spent Processing Ham: 59.23 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 77293 83.26 94.31 78.94 2 DKIM_SIGNED 72859 78.09 88.90 73.86 3 XM_DK_Pass 70998 76.63 86.63 72.73 4 DKIM_VALID 69256 74.86 84.50 71.10 5 XM_B_Unicode 65489 69.43 79.91 65.34 6 DCC_CHECK 65132 55.90 79.47 46.70 7 RELAYCOUNTRY_US 61356 78.05 74.86 79.29 8 XMListUnsubscribeExists 61169 52.99 74.63 44.54 9 XM_B_SpammyWords 56716 53.01 69.20 46.69 10 DKIM_VALID_AU 52713 60.66 64.32 59.24 11 XM_DK_Undo_02 42734 20.42 52.14 8.04 12 XM_B_Unicode3 39543 43.25 48.25 41.30 13 XM_B_SpammyWords2 33913 23.88 41.38 17.05 14 BAYES_99 33301 16.78 40.63 7.46 15 TR_XM_DKIM_Undo 31843 15.32 38.85 6.14 16 LOC_TINY_FONT_1 30805 28.11 37.59 24.41 17 HTML_FONT_LOW_CONTRAST 27636 29.51 33.72 27.87 18 BAYES_50 26786 48.95 32.68 55.30 19 BAYES_999 26491 13.39 32.32 6.00 20 DKIM_VALID_EF 26436 33.47 32.26 33.94 21 TR_DCC_Bayes_99 25944 11.63 31.66 3.82 22 MIME_HTML_ONLY 25517 24.29 31.13 21.62 23 RCVD_IN_MSPIKE_WL 21506 34.06 26.24 37.11 24 RELAYCOUNTRY_META 20471 10.28 24.98 4.53 25 FVGT_m_MULTI_ODD 20261 22.29 24.72 21.34 26 RCVD_IN_MSPIKE_H2 20175 21.68 24.62 20.53 27 T_KAM_HTML_FONT_INVALID 19952 17.07 24.34 14.23 28 XMSubLong 18759 21.90 22.89 21.52 29 XM_Body_Dirty_Words 18500 14.15 22.57 10.86 30 T_TM2_M_HEADER_IN_MSG 16475 22.14 20.10 22.94 31 DCC_CHECK_NEGATIVE 15211 42.48 18.56 51.82 32 BOTNET 13596 5.75 16.59 1.51 33 XM_Multi_Part_URI 12730 13.00 15.53 12.01 34 TR_XM_SpammyWords2 12480 5.44 15.23 1.62 35 BOTNET_IPINHOSTNAME 12196 8.01 14.88 5.32 36 UNTRUSTED_Relay 12092 5.57 14.75 1.98 37 RCVD_IN_MSPIKE_H3 11387 15.76 13.89 16.49 38 XM_UncommonTLD01 10951 6.87 13.36 4.34 39 XMSexyCombo_05 9889 6.67 12.07 4.56 40 XM_B_SpammyWords3 9756 6.25 11.90 4.05 41 XM_B_Unsub 9721 10.91 11.86 10.54 42 MPART_ALT_DIFF 9567 7.20 11.67 5.45 43 LOTS_OF_MONEY 9359 7.35 11.42 5.76 44 UNPARSEABLE_RELAY 9313 8.53 11.36 7.42 45 TR_XM_UnparsRelay 9217 7.72 11.25 6.34 46 RCVD_IN_MSPIKE_H4 9181 13.18 11.20 13.95 47 FSL_BULK_SIG 8560 9.32 10.44 8.88 48 XM_Evil_Numbers_Gen 8194 9.06 10.00 8.69 49 HTML_IMAGE_RATIO_02 8018 7.89 9.78 7.15 50 RCVD_IN_BL_SPAMCOP_NET 7836 3.08 9.56 0.55 51 TR_XM_SpammyWords4 7782 5.33 9.50 3.70 52 BAYES_80 7284 6.79 8.89 5.97 53 MIME_HTML_MOSTLY 7214 4.36 8.80 2.62 54 RELAYCOUNTRY_CA 6890 3.30 8.41 1.30 55 LotsOfNums_01 6807 7.33 8.31 6.94 56 XM_SendGrid 6669 7.17 8.14 6.79 57 BAYES_60 6416 10.89 7.83 12.09 58 XMSubMetaSx_00 6232 4.92 7.60 3.88 59 RCVD_IN_RP_SAFE 5785 8.60 7.06 9.20 60 XM_B_Phish_Phrases 5779 8.72 7.05 9.37 61 TooManyTo_001 5470 6.94 6.67 7.04 62 XM_H_Long_From01 5340 5.35 6.52 4.89 63 HTML_IMAGE_RATIO_04 5230 7.06 6.38 7.32 64 TR_XM_PhishingBody 4767 3.32 5.82 2.35 65 XMStrtUSub 4708 9.46 5.74 10.91 66 XM_B_SpammyTLD 4474 2.96 5.46 1.99 67 BAYES_95 4346 3.78 5.30 3.18 68 RCVD_IN_RP_CERTIFIED 4341 7.44 5.30 8.28 69 SpammyFromTLD_02 4311 1.59 5.26 0.16 70 RELAYCOUNTRY_FR 3957 1.58 4.83 0.32 71 XM_UB50 3649 2.24 4.45 1.38 72 DKIM_INVALID 3603 3.22 4.40 2.77 73 TR_XM_DK_SendGrid 3592 4.36 4.38 4.35 74 XM_UB99 3569 1.22 4.35 0.00 75 RCVD_IN_MSPIKE_BL 3542 1.32 4.32 0.15 76 TR_XM_MSPIKECOMBO 3536 1.31 4.31 0.14 77 SpammyFromTLD_01 3458 1.46 4.22 0.39 78 TM2_M_URI_OPT_OUT 3224 3.74 3.93 3.67 79 XMNumbers 3183 3.89 3.88 3.90 80 HTML_IMAGE_RATIO_08 2928 2.52 3.57 2.11 81 XM_SPF_SoftFail 2903 1.91 3.54 1.27 82 TR_XM_SpammyWords5 2897 2.00 3.53 1.41 83 XMBdyGiftCard01 2894 1.63 3.53 0.89 84 MIME_HTML_ONLY_MULTI 2829 3.52 3.45 3.55 85 XM_UB999 2642 0.91 3.22 0.00 86 T_TooManySym_01 2623 6.87 3.20 8.31 87 XM_OfRef6 2578 1.43 3.15 0.76 88 HTML_IMAGE_RATIO_06 2509 3.37 3.06 3.49 89 FROM_EXCESS_BASE64 2485 3.17 3.03 3.22 90 XM_CamelCaseFrm001 2405 2.07 2.93 1.74 91 XM_DIRTYINTL 2397 1.03 2.92 0.29 92 T_FILL_THIS_FORM_SHORT 2341 1.21 2.86 0.57 93 BOTNET_NORDNS 2337 0.81 2.85 0.02 94 RCVD_IN_RP_RNBL 2280 0.80 2.78 0.03 95 XMSexyCombo_01 2268 1.10 2.77 0.45 96 XM_B_Phish66 2253 1.54 2.75 1.07 97 URI_HEX 2153 1.48 2.63 1.03 98 PDS_OTHER_BAD_TLD 2141 1.14 2.61 0.56 99 MIME_QP_LONG_LINE 2140 3.32 2.61 3.59 100 TR_XM_BayesRelay 2130 0.75 2.60 0.02 101 T_XMDrugObfuBody_14 2093 3.09 2.55 3.30 102 T_XMDrugObfuBody_00 2043 1.30 2.49 0.84 103 BAYES_40 2039 3.26 2.49 3.56 104 XM_B_SpammyWords4 1995 0.95 2.43 0.38 105 XMBrknScrpt_02 1879 1.09 2.29 0.62 106 T_REMOTE_IMAGE 1849 2.79 2.26 3.00 107 TR_XM_SpammyWords3 1842 0.71 2.25 0.11 108 SUBJ_ALL_CAPS 1819 1.45 2.22 1.15 109 KHOP_HELO_FCRDNS 1808 1.50 2.21 1.23 110 XMBody_17 1797 0.97 2.19 0.49 111 XM_UB60 1762 0.71 2.15 0.14 112 RCVD_IN_MSPIKE_L5 1734 0.62 2.12 0.04 113 TM2_M_VERY_LONG_WORD 1728 1.43 2.11 1.17 114 URI_NOVOWEL 1691 1.79 2.06 1.69 115 XMDiploma_00 1687 1.45 2.06 1.21 116 URIBL_DBL_SPAM 1618 0.56 1.97 0.01 117 TR_XM_PHPDW 1586 0.73 1.94 0.26 118 T_XMDrugObfuBody_08 1575 1.25 1.92 0.98 119 XM_UB80 1553 0.55 1.89 0.03 120 XM_B_Unsub2 1521 1.21 1.86 0.95 121 XM_B_COVIDMETA 1510 0.97 1.84 0.63 122 URIBL_SBL_A 1501 0.68 1.83 0.23 123 XM_DK_Undo_01 1496 1.53 1.83 1.42 124 DKIM_ADSP_CUSTOM_MED 1471 1.31 1.79 1.12 125 RCVD_IN_PSBL 1459 0.58 1.78 0.11 126 XM_GoogleGroups 1454 1.43 1.77 1.30 127 XMSubMetaI_00 1447 0.95 1.77 0.64 128 XMHTMLBadTable_001 1446 0.98 1.76 0.67 129 FROM_SUSPICIOUS_NTLD 1434 0.53 1.75 0.06 130 XMSexyCombo_04 1415 0.53 1.73 0.07 131 TR_XM_SB_Phish 1410 1.55 1.72 1.48 132 RCVD_IN_MSPIKE_L4 1406 0.50 1.72 0.02 133 TR_Symld_Words 1396 1.30 1.70 1.15 134 HK_RANDOM_REPLYTO 1395 0.60 1.70 0.16 135 XMSubPhish11 1370 1.53 1.67 1.47 136 FROM_SUSPICIOUS_NTLD_FP 1358 0.50 1.66 0.05 137 TR_XM_PHPForged 1351 0.61 1.65 0.20 138 TR_XM_FormFill2 1334 0.61 1.63 0.21 139 FORGED_GMAIL_RCVD 1333 0.86 1.63 0.56 140 NML_ADSP_CUSTOM_MED 1333 0.92 1.63 0.64 141 XM_H_PHPOS 1330 0.60 1.62 0.20 142 TR_XM_INV_DKIM 1301 0.64 1.59 0.27 143 T_XMHurry_00 1296 0.87 1.58 0.59 144 RCVD_IN_IADB_LISTED 1277 2.58 1.56 2.98 145 XM_URI_RBL 1220 0.55 1.49 0.18 146 XM_BadFromFormat 1195 0.64 1.46 0.33 147 DKIM_ADSP_NXDOMAIN 1185 0.69 1.45 0.40 148 XMPhish08 1178 0.53 1.44 0.17 149 MAILING_LIST_MULTI 1173 2.05 1.43 2.30 150 XM_UB95 1169 0.42 1.43 0.02 151 HTML_MIME_NO_HTML_TAG 1164 2.10 1.42 2.37 152 XMStockSpam_06 1163 1.49 1.42 1.52 153 TR_LOTS_OF_MONEY3 1149 0.60 1.40 0.28 154 RCVD_IN_IADB_SPF 1145 2.25 1.40 2.58 155 RELAYCOUNTRY_NL 1139 0.55 1.39 0.22 156 TR_Mismatch_TLD_02 1133 0.44 1.38 0.07 157 HTML_FONT_SIZE_HUGE 1092 0.57 1.33 0.28 158 ALL_TRUSTED 1077 12.80 1.31 17.29 159 XM_Body_Dirty_Words_01 1065 0.54 1.30 0.24 160 RCVD_IN_IADB_SENDERID 1064 2.03 1.30 2.31 161 RCVD_IN_IADB_DK 1064 1.99 1.30 2.26 162 HTTPS_HTTP_MISMATCH 1063 0.69 1.30 0.45 163 XMPhish30 1050 0.84 1.28 0.67 164 TR_XM_FormFill 1031 0.36 1.26 0.00 165 DIET_1 1028 0.74 1.25 0.53 166 RELAYCOUNTRY_DE 1024 0.77 1.25 0.58 167 XM_H_PHPMailer 1014 0.74 1.24 0.55 168 SUBJ_DOLLARS 1012 0.51 1.23 0.23 169 URIBL_BLACK 1007 0.36 1.23 0.02 170 RELAYCOUNTRY_GB 985 0.88 1.20 0.76 171 XM_H_Undi_Recip 976 0.49 1.19 0.22 172 T_HTML_TAG_BALANCE_CENTER 961 0.52 1.17 0.27 173 NUMERIC_HTTP_ADDR 945 0.54 1.15 0.30 174 RCVD_IN_MSPIKE_H5 938 5.12 1.14 6.67 175 XM_PDF 937 2.05 1.14 2.40 176 TR_Mismatch_TLD_01 935 0.55 1.14 0.32 177 BAYES_20 921 2.67 1.12 3.27 178 XM_B_Crypto 910 0.33 1.11 0.03 179 URI_TRY_3LD 885 1.08 1.08 1.08 180 XMSubNoVowel 880 1.87 1.07 2.18 181 TR_XM_MaxBayes 874 0.30 1.07 0.00 182 RELAYCOUNTRY_IN 853 0.36 1.04 0.09 183 XMClaimOffer 849 0.38 1.04 0.12 184 XMReplyNow 843 0.35 1.03 0.08 185 XMGenDplmaNmb 837 0.80 1.02 0.71 186 XM_B_REG_HTML 833 0.82 1.02 0.74 187 XM_Nigeria_01 828 0.30 1.01 0.02 188 XMBody_78 823 0.59 1.00 0.43 189 T_MONEY_PERCENT 822 0.34 1.00 0.09 190 TR_LOTS_OF_MONEY2 822 0.34 1.00 0.09 191 LongTLD 814 0.35 0.99 0.10 192 PLING_QUERY 808 0.59 0.99 0.43 193 XMHTML_After_End 803 1.02 0.98 1.04 194 URI_PHP_REDIR 800 0.28 0.98 0.00 195 XM_Body_Obfu01 786 0.36 0.96 0.12 196 XMHTML_ManyTags1 786 0.28 0.96 0.01 197 AC_BR_BONANZA 783 0.28 0.96 0.02 198 XMBody_06 781 0.27 0.95 0.00 199 XMHTML_ManyTags3 780 0.27 0.95 0.01 200 XMHTML_ManyTags2 780 0.27 0.95 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 166444 78.05 74.86 79.29 2 HTML_MESSAGE 165724 83.26 94.31 78.94 3 DKIM_SIGNED 155058 78.09 88.90 73.86 4 XM_DK_Pass 152671 76.63 86.63 72.73 5 DKIM_VALID 149248 74.86 84.50 71.10 6 XM_B_Unicode 137160 69.43 79.91 65.34 7 DKIM_VALID_AU 124352 60.66 64.32 59.24 8 BAYES_50 116093 48.95 32.68 55.30 9 DCC_CHECK_NEGATIVE 108774 42.48 18.56 51.82 10 DCC_CHECK 98044 55.90 79.47 46.70 11 XM_B_SpammyWords 98007 53.01 69.20 46.69 12 XMListUnsubscribeExists 93505 52.99 74.63 44.54 13 XM_B_Unicode3 86699 43.25 48.25 41.30 14 RCVD_IN_MSPIKE_WL 77902 34.06 26.24 37.11 15 DKIM_VALID_EF 71251 33.47 32.26 33.94 16 HTML_FONT_LOW_CONTRAST 58507 29.51 33.72 27.87 17 LOC_TINY_FONT_1 51246 28.11 37.59 24.41 18 T_TM2_M_HEADER_IN_MSG 48149 22.14 20.10 22.94 19 MIME_HTML_ONLY 45379 24.29 31.13 21.62 20 XMSubLong 45169 21.90 22.89 21.52 21 FVGT_m_MULTI_ODD 44801 22.29 24.72 21.34 22 RCVD_IN_MSPIKE_H2 43107 21.68 24.62 20.53 23 ALL_TRUSTED 36297 12.80 1.31 17.29 24 XM_DKIMWhitelistDomains 36106 12.38 0.02 17.20 25 XM_B_SpammyWords2 35787 23.88 41.38 17.05 26 RCVD_IN_MSPIKE_H3 34617 15.76 13.89 16.49 27 T_KAM_HTML_FONT_INVALID 29864 17.07 24.34 14.23 28 RCVD_IN_MSPIKE_H4 29286 13.18 11.20 13.95 29 BAYES_60 25375 10.89 7.83 12.09 30 XM_Multi_Part_URI 25215 13.00 15.53 12.01 31 XMStrtUSub 22904 9.46 5.74 10.91 32 XM_Body_Dirty_Words 22796 14.15 22.57 10.86 33 XM_B_Unsub 22132 10.91 11.86 10.54 34 XM_B_Phish_Phrases 19671 8.72 7.05 9.37 35 RCVD_IN_RP_SAFE 19310 8.60 7.06 9.20 36 FSL_BULK_SIG 18649 9.32 10.44 8.88 37 XM_Evil_Numbers_Gen 18245 9.06 10.00 8.69 38 T_TooManySym_01 17435 6.87 3.20 8.31 39 RCVD_IN_RP_CERTIFIED 17386 7.44 5.30 8.28 40 XM_DK_Undo_02 16881 20.42 52.14 8.04 41 BAYES_00 16009 5.63 0.51 7.63 42 BAYES_99 15668 16.78 40.63 7.46 43 UNPARSEABLE_RELAY 15584 8.53 11.36 7.42 44 HTML_IMAGE_RATIO_04 15373 7.06 6.38 7.32 45 HTML_IMAGE_RATIO_02 15010 7.89 9.78 7.15 46 TooManyTo_001 14781 6.94 6.67 7.04 47 LotsOfNums_01 14576 7.33 8.31 6.94 48 XM_SendGrid 14253 7.17 8.14 6.79 49 RCVD_IN_MSPIKE_H5 13999 5.12 1.14 6.67 50 TR_XM_UnparsRelay 13308 7.72 11.25 6.34 51 TR_XM_DKIM_Undo 12882 15.32 38.85 6.14 52 BAYES_999 12590 13.39 32.32 6.00 53 BAYES_80 12540 6.79 8.89 5.97 54 LOTS_OF_MONEY 12088 7.35 11.42 5.76 55 MPART_ALT_DIFF 11444 7.20 11.67 5.45 56 XM_H_Trusted_IP 11339 3.88 0.00 5.40 57 TR_XM_DK_Bayes 11313 3.97 0.34 5.39 58 BOTNET_IPINHOSTNAME 11174 8.01 14.88 5.32 59 TR_XM_DK_Bayes1 11040 3.88 0.34 5.26 60 T_TooManySym_02 10921 3.98 0.87 5.20 61 XM_H_Long_From01 10271 5.35 6.52 4.89 62 TR_XM_DK_Bayes2 10070 3.54 0.32 4.80 63 XMSexyCombo_05 9574 6.67 12.07 4.56 64 RELAYCOUNTRY_META 9520 10.28 24.98 4.53 65 TR_XM_DK_SendGrid 9133 4.36 4.38 4.35 66 XM_UncommonTLD01 9107 6.87 13.36 4.34 67 XM_B_SpammyWords3 8495 6.25 11.90 4.05 68 IN_ZIMBRA_NJ_WHITELIST 8483 2.91 0.03 4.04 69 XMNumbers 8177 3.89 3.88 3.90 70 XMSubMetaSx_00 8138 4.92 7.60 3.88 71 TR_DCC_Bayes_99 8014 11.63 31.66 3.82 72 TR_XM_SpammyWords4 7775 5.33 9.50 3.70 73 TM2_M_URI_OPT_OUT 7700 3.74 3.93 3.67 74 INVALID_MSGID 7667 2.78 0.54 3.65 75 ANY_BOUNCE_MESSAGE 7592 2.72 0.43 3.62 76 BOUNCE_MESSAGE 7592 2.72 0.42 3.62 77 MIME_QP_LONG_LINE 7536 3.32 2.61 3.59 78 BAYES_40 7469 3.26 2.49 3.56 79 MIME_HTML_ONLY_MULTI 7450 3.52 3.45 3.55 80 HTML_IMAGE_RATIO_06 7335 3.37 3.06 3.49 81 MSGID_NOFQDN1 7320 2.59 0.28 3.49 82 T_XMDrugObfuBody_14 6929 3.09 2.55 3.30 83 BAYES_20 6870 2.67 1.12 3.27 84 FROM_EXCESS_BASE64 6769 3.17 3.03 3.22 85 BAYES_95 6681 3.78 5.30 3.18 86 T_REMOTE_IMAGE 6304 2.79 2.26 3.00 87 RCVD_IN_IADB_LISTED 6261 2.58 1.56 2.98 88 TO_MALFORMED 6230 2.14 0.02 2.97 89 TVD_RCVD_IP 5869 2.04 0.09 2.80 90 DKIM_INVALID 5810 3.22 4.40 2.77 91 MIME_HTML_MOSTLY 5504 4.36 8.80 2.62 92 RCVD_IN_IADB_SPF 5413 2.25 1.40 2.58 93 XM_PDF 5048 2.05 1.14 2.40 94 HTML_MIME_NO_HTML_TAG 4976 2.10 1.42 2.37 95 TR_XM_PhishingBody 4923 3.32 5.82 2.35 96 RCVD_IN_IADB_SENDERID 4853 2.03 1.30 2.31 97 MAILING_LIST_MULTI 4825 2.05 1.43 2.30 98 RCVD_IN_IADB_DK 4737 1.99 1.30 2.26 99 XMSubNoVowel 4570 1.87 1.07 2.18 100 HTML_IMAGE_RATIO_08 4435 2.52 3.57 2.11 101 IN_HORDE_ADDRESS_BOOK 4389 1.52 0.07 2.09 102 XM_B_SpammyTLD 4173 2.96 5.46 1.99 103 UNTRUSTED_Relay 4153 5.57 14.75 1.98 104 HELO_MISC_IP 3899 1.35 0.05 1.86 105 RCVD_IN_IADB_VOUCHED 3798 1.49 0.69 1.81 106 USER_IN_DEF_DKIM_WL 3754 1.31 0.09 1.79 107 HTML_FONT_FACE_BAD 3719 1.44 0.58 1.77 108 XM_CamelCaseFrm001 3648 2.07 2.93 1.74 109 URI_NOVOWEL 3540 1.79 2.06 1.69 110 TR_XM_SpammyWords2 3409 5.44 15.23 1.62 111 XMBSHREFv2 3405 1.24 0.25 1.62 112 TooManyTo_002 3393 1.35 0.66 1.62 113 BAYES_05 3219 1.26 0.55 1.53 114 XMStockSpam_06 3189 1.49 1.42 1.52 115 BOTNET 3178 5.75 16.59 1.51 116 TR_XM_SB_Phish 3105 1.55 1.72 1.48 117 XMSubPhish11 3082 1.53 1.67 1.47 118 XMGappySubj_01 3002 1.09 0.20 1.43 119 XM_DK_Undo_01 2979 1.53 1.83 1.42 120 TR_XM_SpammyWords5 2952 2.00 3.53 1.41 121 XM_UB50 2893 2.24 4.45 1.38 122 HTML_IMAGE_ONLY_20 2786 1.03 0.28 1.33 123 RELAYCOUNTRY_CA 2729 3.30 8.41 1.30 124 XM_GoogleGroups 2723 1.43 1.77 1.30 125 XM_SPF_SoftFail 2669 1.91 3.54 1.27 126 KHOP_HELO_FCRDNS 2578 1.50 2.21 1.23 127 XMDiploma_00 2543 1.45 2.06 1.21 128 TVD_SPACE_RATIO 2487 0.87 0.06 1.18 129 TM2_M_VERY_LONG_WORD 2451 1.43 2.11 1.17 130 RCVD_IN_IADB_OPTIN 2427 0.98 0.52 1.16 131 SUBJ_ALL_CAPS 2412 1.45 2.22 1.15 132 TR_Symld_Words 2406 1.30 1.70 1.15 133 DKIM_ADSP_CUSTOM_MED 2361 1.31 1.79 1.12 134 TooManyTo_003 2345 0.96 0.55 1.12 135 T_TooManySym_03 2342 0.87 0.23 1.12 136 XM_H_Long_From02 2286 1.04 0.90 1.09 137 URI_TRY_3LD 2259 1.08 1.08 1.08 138 XM_B_Phish66 2240 1.54 2.75 1.07 139 XMHTML_After_End 2178 1.02 0.98 1.04 140 URI_HEX 2168 1.48 2.63 1.03 141 T_XMDrugObfuBody_08 2065 1.25 1.92 0.98 142 XMBody_95 2045 0.73 0.11 0.97 143 XM_B_Unsub2 1999 1.21 1.86 0.95 144 XMBdyGiftCard01 1870 1.63 3.53 0.89 145 TooManyTo_004 1842 0.77 0.50 0.88 146 T_XMDrugObfuBody_00 1758 1.30 2.49 0.84 147 XM_OfRef6 1597 1.43 3.15 0.76 148 RELAYCOUNTRY_GB 1592 0.88 1.20 0.76 149 TooManyTo_005 1571 0.66 0.44 0.75 150 TVD_SPACE_RATIO_MINFP 1554 0.70 0.58 0.74 151 XM_B_REG_HTML 1552 0.82 1.02 0.74 152 TR_MetaPhish_Combo_01 1529 0.73 0.75 0.73 153 XMGenDplmaNmb 1496 0.80 1.02 0.71 154 XMLngstWrd_00 1496 0.64 0.45 0.71 155 XM_B_COPY_HTML 1431 0.73 0.87 0.68 156 XMPhish30 1414 0.84 1.28 0.67 157 XMHTMLBadTable_001 1409 0.98 1.76 0.67 158 HELO_NODOT 1392 0.61 0.49 0.66 159 HELO_NO_DOMAIN 1392 0.61 0.48 0.66 160 TR_MSPIKEBAYES00 1381 0.48 0.03 0.66 161 XMSubMetaSxObfu_02 1370 0.57 0.37 0.65 162 NML_ADSP_CUSTOM_MED 1352 0.92 1.63 0.64 163 XMLngstWrd_01 1350 0.57 0.40 0.64 164 XMSubMetaI_00 1335 0.95 1.77 0.64 165 XM_B_COVIDMETA 1324 0.97 1.84 0.63 166 XMBrknScrpt_02 1298 1.09 2.29 0.62 167 USER_IN_WELCOMELIST 1271 0.44 0.00 0.61 168 USER_IN_WHITELIST 1271 0.44 0.00 0.61 169 XM_ProductURIs 1253 0.63 0.70 0.60 170 T_XMHurry_00 1238 0.87 1.58 0.59 171 XMCapTrack 1237 0.50 0.29 0.59 172 RELAYCOUNTRY_DE 1210 0.77 1.25 0.58 173 T_FILL_THIS_FORM_SHORT 1188 1.21 2.86 0.57 174 RDNS_DYNAMIC 1184 0.66 0.91 0.56 175 FORGED_GMAIL_RCVD 1184 0.86 1.63 0.56 176 PDS_OTHER_BAD_TLD 1174 1.14 2.61 0.56 177 RCVD_IN_BL_SPAMCOP_NET 1161 3.08 9.56 0.55 178 XM_H_PHPMailer 1149 0.74 1.24 0.55 179 XMLngstWrd_02 1128 0.49 0.36 0.54 180 DIET_1 1119 0.74 1.25 0.53 181 T_TooManySym_04 1084 0.40 0.11 0.52 182 XMBody_17 1032 0.97 2.19 0.49 183 DATE_IN_PAST_03_06 1016 0.47 0.42 0.48 184 TR_XM_Spammywords 969 0.49 0.55 0.46 185 XM_S_SpammyWords 969 0.49 0.55 0.46 186 XMLngstWrd_03 969 0.42 0.32 0.46 187 SHOPIFY_IMG_NOT_RCVD_SFY 954 0.55 0.80 0.45 188 XMSexyCombo_01 949 1.10 2.77 0.45 189 TM2_M_A_HREF_HREF 948 0.48 0.56 0.45 190 HTTPS_HTTP_MISMATCH 944 0.69 1.30 0.45 191 XM_ShortIntro_01 922 0.45 0.47 0.44 192 XMNoVowels 915 0.48 0.58 0.44 193 XMBody_78 906 0.59 1.00 0.43 194 PLING_QUERY 901 0.59 0.99 0.43 195 HTML_TAG_BALANCE_BODY 869 0.53 0.83 0.41 196 DKIM_ADSP_NXDOMAIN 842 0.69 1.45 0.40 197 XMLngstWrd_04 831 0.35 0.22 0.40 198 MISSING_HEADERS 819 0.43 0.53 0.39 199 SpammyFromTLD_01 817 1.46 4.22 0.39 200 CTE_8BIT_MISMATCH 806 0.29 0.03 0.38 ----------------------------------------------------------------------