Email: 719379 Autolearn: 0 AvgScore: 3.86 AvgScanTime: 1.46 sec Spam: 216204 Autolearn: 0 AvgScore: 13.55 AvgScanTime: 1.62 sec Ham: 503175 Autolearn: 0 AvgScore: -0.31 AvgScanTime: 1.39 sec Time Spent Running SA: 291.83 hours Time Spent Processing Spam: 97.58 hours Time Spent Processing Ham: 194.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 206237 91.19 95.39 89.38 2 DKIM_SIGNED 189295 81.60 87.55 79.04 3 XM_DK_Pass 182088 79.73 84.22 77.80 4 DKIM_VALID 179733 78.02 83.13 75.83 5 DCC_CHECK 168076 53.37 77.74 42.89 6 RELAYCOUNTRY_US 166456 81.91 76.99 84.02 7 XM_B_Unicode 164752 74.29 76.20 73.46 8 XMListUnsubscribeExists 152963 58.74 70.75 53.58 9 XM_B_SpammyWords 152336 55.13 70.46 48.55 10 DKIM_VALID_AU 139716 59.65 64.62 57.52 11 XM_DK_Undo_02 99807 19.20 46.16 7.62 12 LOC_TINY_FONT_1 87775 31.06 40.60 26.97 13 XM_B_SpammyWords2 86870 26.65 40.18 20.84 14 TR_XM_DKIM_Undo 86305 15.77 39.92 5.39 15 XM_B_Unicode3 85874 42.65 39.72 43.91 16 BAYES_50 84198 51.20 38.94 56.46 17 HTML_FONT_LOW_CONTRAST 77190 31.04 35.70 29.03 18 BAYES_99 71454 13.01 33.05 4.40 19 DKIM_VALID_EF 69310 29.87 32.06 28.94 20 RCVD_IN_MSPIKE_H2 65150 28.69 30.13 28.07 21 FVGT_m_MULTI_ODD 59191 24.97 27.38 23.94 22 MIME_HTML_ONLY 58051 23.26 26.85 21.72 23 T_KAM_HTML_FONT_INVALID 57989 21.73 26.82 19.55 24 TR_DCC_Bayes_99 56510 9.45 26.14 2.28 25 BAYES_999 55181 10.17 25.52 3.57 26 XMSubLong 50152 22.34 23.20 21.98 27 RELAYCOUNTRY_META 47871 10.34 22.14 5.26 28 T_TM2_M_HEADER_IN_MSG 44430 26.13 20.55 28.52 29 DCC_CHECK_NEGATIVE 43172 44.34 19.97 54.81 30 RCVD_IN_MSPIKE_WL 41664 27.30 19.27 30.76 31 XM_Multi_Part_URI 41267 14.04 19.09 11.86 32 XM_Body_Dirty_Words 41180 15.20 19.05 13.55 33 LOTS_OF_MONEY 34883 9.97 16.13 7.31 34 XM_UncommonTLD01 32917 6.79 15.22 3.17 35 BOTNET 32211 5.85 14.90 1.96 36 XM_B_SpammyWords3 31475 8.38 14.56 5.72 37 UNTRUSTED_Relay 29932 5.61 13.84 2.07 38 XM_B_Unsub 29459 11.41 13.63 10.46 39 TR_XM_SpammyWords4 28768 7.46 13.31 4.95 40 BOTNET_IPINHOSTNAME 27494 7.34 12.72 5.03 41 TR_XM_SpammyWords2 27104 4.18 12.54 0.59 42 RCVD_IN_BL_SPAMCOP_NET 25710 4.51 11.89 1.34 43 RCVD_IN_MSPIKE_H3 24255 15.02 11.22 16.65 44 FSL_BULK_SIG 23040 7.64 10.66 6.34 45 LotsOfNums_01 22852 9.23 10.57 8.66 46 XM_Evil_Numbers_Gen 20545 9.10 9.50 8.92 47 MPART_ALT_DIFF 19335 6.27 8.94 5.12 48 XM_H_Long_From01 19237 6.67 8.90 5.71 49 XMSexyCombo_05 18984 5.62 8.78 4.27 50 BAYES_80 18345 5.58 8.49 4.33 51 TooManyTo_001 17856 8.69 8.26 8.88 52 BAYES_60 17395 7.53 8.05 7.31 53 HTML_IMAGE_RATIO_02 16832 7.19 7.79 6.94 54 UNPARSEABLE_RELAY 16659 8.05 7.71 8.20 55 TR_XM_UnparsRelay 16139 6.40 7.46 5.94 56 RELAYCOUNTRY_CA 15966 3.27 7.38 1.51 57 RCVD_IN_MSPIKE_H4 15593 10.17 7.21 11.45 58 XMSubMetaSx_00 15389 4.60 7.12 3.52 59 MIME_HTML_MOSTLY 15360 3.84 7.10 2.43 60 XM_B_Phish_Phrases 14878 5.89 6.88 5.46 61 XM_UB50 13624 2.70 6.30 1.16 62 XM_SendGrid 12604 6.95 5.83 7.43 63 XM_B_SpammyTLD 12212 3.62 5.65 2.75 64 XM_OfRef6 11899 2.64 5.50 1.41 65 XM_DK_Undo_01 11722 2.71 5.42 1.55 66 TR_XM_PhishingBody 11720 3.96 5.42 3.33 67 HTML_IMAGE_RATIO_04 11226 5.61 5.19 5.78 68 SpammyFromTLD_01 11150 2.14 5.16 0.84 69 RCVD_IN_MSPIKE_BL 11134 1.69 5.15 0.21 70 BAYES_95 11114 3.38 5.14 2.62 71 TR_XM_MSPIKECOMBO 10801 1.64 5.00 0.20 72 TR_XM_SpammyWords5 10612 2.43 4.91 1.36 73 XM_SPF_SoftFail 10508 2.63 4.86 1.68 74 DKIM_INVALID 9562 3.58 4.42 3.21 75 XMStrtUSub 9388 4.78 4.34 4.97 76 SpammyFromTLD_02 9289 1.48 4.30 0.27 77 TR_LOTS_OF_MONEY3 9245 1.66 4.28 0.54 78 HTML_IMAGE_RATIO_08 9101 3.01 4.21 2.49 79 XMNumbers 9009 3.21 4.17 2.80 80 SUBJ_ALL_CAPS 8737 2.23 4.04 1.46 81 RELAYCOUNTRY_FR 8735 1.49 4.04 0.39 82 KHOP_HELO_FCRDNS 8545 2.25 3.95 1.53 83 T_REMOTE_IMAGE 8310 3.60 3.84 3.49 84 RCVD_IN_MSPIKE_L5 8172 1.19 3.78 0.07 85 T_FILL_THIS_FORM_SHORT 7992 1.68 3.70 0.81 86 GOOGLE_DOC_SUSP 7909 1.12 3.66 0.02 87 HTML_IMAGE_RATIO_06 7758 4.04 3.59 4.24 88 RCVD_IN_RP_RNBL 7581 1.08 3.51 0.04 89 FORGED_GMAIL_RCVD 7573 1.52 3.50 0.67 90 TR_XM_DK_SendGrid 7369 4.23 3.41 4.59 91 TR_Mismatch_TLD_02 7155 1.06 3.31 0.09 92 TM2_M_URI_OPT_OUT 7029 2.71 3.25 2.48 93 RCVD_IN_RP_SAFE 6945 7.33 3.21 9.09 94 XMBody_17 6865 1.42 3.18 0.67 95 T_XMDrugObfuBody_14 6536 2.02 3.02 1.59 96 MIME_QP_LONG_LINE 6521 4.75 3.02 5.50 97 XM_DIRTYINTL 6127 1.24 2.83 0.55 98 MIME_HTML_ONLY_MULTI 6056 2.94 2.80 3.00 99 URI_HEX 5986 2.30 2.77 2.10 100 XM_B_COVIDMETA 5975 1.57 2.76 1.06 101 URIBL_SBL_A 5863 0.97 2.71 0.22 102 T_TooManySym_01 5829 4.02 2.70 4.59 103 XM_B_Phish66 5782 2.04 2.67 1.77 104 XM_B_Unsub2 5710 2.11 2.64 1.89 105 XMBrknScrpt_02 5673 1.29 2.62 0.71 106 XM_UB60 5668 0.88 2.62 0.13 107 TR_XM_SB_Phish 5618 2.84 2.60 2.94 108 XMSubPhish11 5485 2.80 2.54 2.91 109 RCVD_IN_RP_CERTIFIED 5380 6.58 2.49 8.34 110 BOTNET_NORDNS 5320 0.75 2.46 0.02 111 FROM_MISSP_REPLYTO 5222 0.73 2.42 0.00 112 XMDiploma_00 5189 1.85 2.40 1.61 113 XM_B_SpammyWords4 5158 1.22 2.39 0.71 114 XM_CamelCaseFrm001 5136 2.04 2.38 1.89 115 BAYES_40 5118 4.43 2.37 5.31 116 T_XMDrugObfuBody_08 5066 1.73 2.34 1.47 117 RCVD_IN_PSBL 4921 0.74 2.28 0.08 118 XM_BadFromFormat 4874 0.86 2.25 0.26 119 HTML_IMAGE_ONLY_12 4717 0.80 2.18 0.20 120 TR_Sbj_FN_Bdy 4533 0.77 2.10 0.19 121 TM2_M_VERY_LONG_WORD 4517 1.54 2.09 1.30 122 URI_TRY_3LD 4431 1.49 2.05 1.25 123 HK_SCAM 4407 0.65 2.04 0.06 124 RCVD_IN_IADB_LISTED 4299 4.57 1.99 5.68 125 TR_XM_SpammyWords3 4219 0.67 1.95 0.12 126 HTML_SHORT_LINK_IMG_1 4162 0.59 1.93 0.01 127 BODY_URI_ONLY 4087 0.59 1.89 0.04 128 HTML_FONT_SIZE_LARGE 4018 0.62 1.86 0.09 129 XM_UB99 4002 0.56 1.85 0.00 130 XMSexyCombo_01 3987 1.04 1.84 0.70 131 HTML_MIME_NO_HTML_TAG 3981 1.97 1.84 2.03 132 TR_XM_MaxBayes 3965 0.56 1.83 0.01 133 XMBdyGiftCard01 3896 1.39 1.80 1.22 134 ADVANCE_FEE_5_NEW_MONEY 3859 0.54 1.78 0.00 135 FROM_EXCESS_BASE64 3839 2.66 1.78 3.03 136 PDS_OTHER_BAD_TLD 3822 1.08 1.77 0.78 137 RCVD_IN_IADB_SPF 3732 3.97 1.73 4.94 138 XMHTML_After_End 3651 1.12 1.69 0.87 139 T_XMHurry_00 3628 0.83 1.68 0.47 140 XM_URI_RBL 3596 0.62 1.66 0.17 141 XMStockSpam_06 3582 1.59 1.66 1.56 142 BAYES_20 3565 3.19 1.65 3.85 143 FROM_SUSPICIOUS_NTLD 3542 0.56 1.64 0.09 144 XMSubMetaSxObfu_03 3535 0.90 1.64 0.58 145 RCVD_IN_IADB_DK 3513 3.46 1.62 4.25 146 T_XMDrugObfuBody_00 3512 1.19 1.62 1.00 147 RCVD_IN_IADB_SENDERID 3475 3.55 1.61 4.39 148 FROM_SUSPICIOUS_NTLD_FP 3467 0.54 1.60 0.09 149 TR_Symld_Words 3390 1.49 1.57 1.46 150 XMGenDplmaNmb 3372 1.08 1.56 0.87 151 XM_Nigeria_01 3283 0.48 1.52 0.03 152 MAILING_LIST_MULTI 3243 2.38 1.50 2.75 153 APP_DEVELOPMENT_NORDNS 3206 0.45 1.48 0.00 154 TR_XM_PHPDW 3179 0.63 1.47 0.28 155 TR_XM_COVIDMETA4 3162 0.71 1.46 0.39 156 BAYES_00 3155 9.77 1.46 13.34 157 TR_XM_FormFill 3112 0.44 1.44 0.01 158 TR_XM_PHPForged 3112 0.60 1.44 0.23 159 T_Symld_Words_02 3099 0.83 1.43 0.57 160 TR_XM_FormFill2 3046 0.59 1.41 0.24 161 XM_H_PHPOS 3042 0.58 1.41 0.23 162 LongTLD 3033 0.53 1.40 0.15 163 TR_XM_COVIDMETA1 3032 0.66 1.40 0.33 164 DATE_IN_PAST_12_24 3016 0.52 1.39 0.15 165 XM_UB80 2989 0.45 1.38 0.05 166 URI_NOVOWEL 2902 2.62 1.34 3.17 167 TR_MetaPhish_Combo_01 2870 0.85 1.33 0.65 168 XM_UB999 2863 0.40 1.32 0.00 169 HK_RANDOM_REPLYTO 2854 0.51 1.32 0.17 170 URG_BIZ 2764 0.44 1.28 0.07 171 URI_NO_WWW_INFO_CGI 2687 0.39 1.24 0.02 172 MILLION_USD 2683 0.38 1.24 0.01 173 URIBL_BLACK 2643 0.40 1.22 0.04 174 XM_Nigeria_02 2637 0.37 1.22 0.00 175 TR_XM_BayesRelay 2625 0.37 1.21 0.01 176 XM_H_Long_From02 2498 1.02 1.16 0.96 177 XM_ProductURIs 2447 1.04 1.13 1.01 178 RDNS_DYNAMIC 2444 0.95 1.13 0.88 179 XMSubNoVowel 2444 1.35 1.13 1.45 180 MISSING_HEADERS 2370 0.67 1.10 0.48 181 XM_OfRef7 2336 0.48 1.08 0.23 182 RELAYCOUNTRY_DE 2314 0.63 1.07 0.44 183 RELAYCOUNTRY_NL 2292 0.46 1.06 0.20 184 DATE_IN_PAST_06_12 2285 0.47 1.06 0.22 185 ALL_TRUSTED 2252 8.76 1.04 12.08 186 RELAYCOUNTRY_GB 2233 1.01 1.03 1.00 187 XMMoneyMeta_00 2214 0.72 1.02 0.58 188 XMBody_78 2196 0.61 1.02 0.44 189 TR_XM_DK_Bayes 2171 7.44 1.00 10.20 190 XM_S_ServInvoice 2155 0.30 1.00 0.01 191 TR_XM_INV_DKIM 2134 0.36 0.99 0.09 192 TR_XM_DK_Bayes1 2105 7.21 0.97 9.89 193 REPLYTO_WITHOUT_TO_CC 2063 0.31 0.95 0.04 194 MONEY_FORM_SHORT 2038 0.29 0.94 0.01 195 RCVD_IN_IADB_VOUCHED 1987 2.82 0.92 3.63 196 XMReplyNow 1977 0.35 0.91 0.11 197 XMPhish30 1947 0.73 0.90 0.65 198 TR_XM_DK_Bayes2 1945 6.38 0.90 8.74 199 HTTPS_HTTP_MISMATCH 1941 0.87 0.90 0.86 200 DKIM_ADSP_CUSTOM_MED 1873 0.99 0.87 1.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 449743 91.19 95.39 89.38 2 RELAYCOUNTRY_US 422757 81.91 76.99 84.02 3 DKIM_SIGNED 397719 81.60 87.55 79.04 4 XM_DK_Pass 391469 79.73 84.22 77.80 5 DKIM_VALID 381556 78.02 83.13 75.83 6 XM_B_Unicode 369653 74.29 76.20 73.46 7 DKIM_VALID_AU 289425 59.65 64.62 57.52 8 BAYES_50 284106 51.20 38.94 56.46 9 DCC_CHECK_NEGATIVE 275804 44.34 19.97 54.81 10 XMListUnsubscribeExists 269616 58.74 70.75 53.58 11 XM_B_SpammyWords 244279 55.13 70.46 48.55 12 XM_B_Unicode3 220953 42.65 39.72 43.91 13 DCC_CHECK 215826 53.37 77.74 42.89 14 RCVD_IN_MSPIKE_WL 154757 27.30 19.27 30.76 15 HTML_FONT_LOW_CONTRAST 146076 31.04 35.70 29.03 16 DKIM_VALID_EF 145596 29.87 32.06 28.94 17 T_TM2_M_HEADER_IN_MSG 143510 26.13 20.55 28.52 18 RCVD_IN_MSPIKE_H2 141265 28.69 30.13 28.07 19 LOC_TINY_FONT_1 135685 31.06 40.60 26.97 20 FVGT_m_MULTI_ODD 120468 24.97 27.38 23.94 21 XMSubLong 110591 22.34 23.20 21.98 22 MIME_HTML_ONLY 109274 23.26 26.85 21.72 23 XM_B_SpammyWords2 104842 26.65 40.18 20.84 24 T_KAM_HTML_FONT_INVALID 98349 21.73 26.82 19.55 25 RCVD_IN_MSPIKE_H3 83798 15.02 11.22 16.65 26 XM_Body_Dirty_Words 68185 15.20 19.05 13.55 27 BAYES_00 67143 9.77 1.46 13.34 28 ALL_TRUSTED 60773 8.76 1.04 12.08 29 XM_Multi_Part_URI 59699 14.04 19.09 11.86 30 RCVD_IN_MSPIKE_H4 57598 10.17 7.21 11.45 31 XM_B_Unsub 52653 11.41 13.63 10.46 32 TR_XM_DK_Bayes 51327 7.44 1.00 10.20 33 TR_XM_DK_Bayes1 49786 7.21 0.97 9.89 34 XM_DKIMWhitelistDomains 46292 6.50 0.22 9.20 35 RCVD_IN_RP_SAFE 45752 7.33 3.21 9.09 36 XM_Evil_Numbers_Gen 44903 9.10 9.50 8.92 37 TooManyTo_001 44658 8.69 8.26 8.88 38 TR_XM_DK_Bayes2 43956 6.38 0.90 8.74 39 LotsOfNums_01 43576 9.23 10.57 8.66 40 RCVD_IN_RP_CERTIFIED 41987 6.58 2.49 8.34 41 UNPARSEABLE_RELAY 41284 8.05 7.71 8.20 42 XM_DK_Undo_02 38317 19.20 46.16 7.62 43 XM_SendGrid 37362 6.95 5.83 7.43 44 LOTS_OF_MONEY 36804 9.97 16.13 7.31 45 BAYES_60 36781 7.53 8.05 7.31 46 HTML_IMAGE_RATIO_02 34915 7.19 7.79 6.94 47 FSL_BULK_SIG 31899 7.64 10.66 6.34 48 TR_XM_UnparsRelay 29867 6.40 7.46 5.94 49 IN_ZIMBRA_NJ_WHITELIST 29642 4.13 0.04 5.89 50 HTML_IMAGE_RATIO_04 29099 5.61 5.19 5.78 51 XM_B_SpammyWords3 28781 8.38 14.56 5.72 52 XM_H_Long_From01 28719 6.67 8.90 5.71 53 RCVD_IN_IADB_LISTED 28578 4.57 1.99 5.68 54 MIME_QP_LONG_LINE 27683 4.75 3.02 5.50 55 XM_B_Phish_Phrases 27498 5.89 6.88 5.46 56 TR_XM_DKIM_Undo 27142 15.77 39.92 5.39 57 BAYES_40 26725 4.43 2.37 5.31 58 RELAYCOUNTRY_META 26482 10.34 22.14 5.26 59 MPART_ALT_DIFF 25739 6.27 8.94 5.12 60 BOTNET_IPINHOSTNAME 25291 7.34 12.72 5.03 61 XMStrtUSub 25027 4.78 4.34 4.97 62 TR_XM_SpammyWords4 24932 7.46 13.31 4.95 63 RCVD_IN_IADB_SPF 24832 3.97 1.73 4.94 64 T_TooManySym_01 23104 4.02 2.70 4.59 65 TR_XM_DK_SendGrid 23072 4.23 3.41 4.59 66 BAYES_99 22146 13.01 33.05 4.40 67 RCVD_IN_IADB_SENDERID 22076 3.55 1.61 4.39 68 XM_PDF 21786 3.26 0.76 4.33 69 BAYES_80 21774 5.58 8.49 4.33 70 XMSexyCombo_05 21466 5.62 8.78 4.27 71 RCVD_IN_IADB_DK 21371 3.46 1.62 4.25 72 HTML_IMAGE_RATIO_06 21339 4.04 3.59 4.24 73 BAYES_20 19348 3.19 1.65 3.85 74 RCVD_IN_IADB_VOUCHED 18278 2.82 0.92 3.63 75 BAYES_999 17958 10.17 25.52 3.57 76 XMSubMetaSx_00 17731 4.60 7.12 3.52 77 T_REMOTE_IMAGE 17580 3.60 3.84 3.49 78 TR_XM_PhishingBody 16768 3.96 5.42 3.33 79 DKIM_INVALID 16163 3.58 4.42 3.21 80 URI_NOVOWEL 15959 2.62 1.34 3.17 81 XM_UncommonTLD01 15955 6.79 15.22 3.17 82 FROM_EXCESS_BASE64 15266 2.66 1.78 3.03 83 MIME_HTML_ONLY_MULTI 15092 2.94 2.80 3.00 84 TR_XM_SB_Phish 14787 2.84 2.60 2.94 85 XMSubPhish11 14659 2.80 2.54 2.91 86 XMNumbers 14096 3.21 4.17 2.80 87 MAILING_LIST_MULTI 13851 2.38 1.50 2.75 88 TooManyTo_002 13851 2.13 0.70 2.75 89 XM_B_SpammyTLD 13838 3.62 5.65 2.75 90 RCVD_IN_MSPIKE_H5 13361 2.11 0.84 2.66 91 BAYES_95 13197 3.38 5.14 2.62 92 HTML_IMAGE_RATIO_08 12527 3.01 4.21 2.49 93 TM2_M_URI_OPT_OUT 12492 2.71 3.25 2.48 94 MIME_HTML_MOSTLY 12248 3.84 7.10 2.43 95 RCVD_IN_IADB_OPTIN 11926 1.83 0.58 2.37 96 BAYES_05 11650 1.87 0.82 2.32 97 TR_DCC_Bayes_99 11493 9.45 26.14 2.28 98 T_TooManySym_02 10634 1.73 0.85 2.11 99 URI_HEX 10563 2.30 2.77 2.10 100 UNTRUSTED_Relay 10391 5.61 13.84 2.07 101 TooManyTo_003 10225 1.60 0.59 2.03 102 HTML_MIME_NO_HTML_TAG 10197 1.97 1.84 2.03 103 XM_H_Trusted_IP 10138 1.41 0.00 2.01 104 BOTNET 9865 5.85 14.90 1.96 105 XM_CamelCaseFrm001 9529 2.04 2.38 1.89 106 XM_B_Unsub2 9485 2.11 2.64 1.89 107 XM_B_Phish66 8909 2.04 2.67 1.77 108 TVD_RCVD_IP 8670 1.33 0.40 1.72 109 XM_SPF_SoftFail 8436 2.63 4.86 1.68 110 TooManyTo_004 8308 1.30 0.49 1.65 111 XMDiploma_00 8116 1.85 2.40 1.61 112 T_XMDrugObfuBody_14 8019 2.02 3.02 1.59 113 ANY_BOUNCE_MESSAGE 8007 1.22 0.37 1.59 114 HELO_NO_DOMAIN 8002 1.30 0.62 1.59 115 HELO_NODOT 8002 1.30 0.63 1.59 116 BOUNCE_MESSAGE 8001 1.22 0.37 1.59 117 XMStockSpam_06 7843 1.59 1.66 1.56 118 XM_DK_Undo_01 7796 2.71 5.42 1.55 119 IN_HORDE_ADDRESS_BOOK 7749 1.10 0.06 1.54 120 KHOP_HELO_FCRDNS 7674 2.25 3.95 1.53 121 RELAYCOUNTRY_CA 7591 3.27 7.38 1.51 122 INVALID_MSGID 7524 1.18 0.46 1.50 123 HELO_MISC_IP 7477 1.11 0.23 1.49 124 TooManyTo_005 7453 1.17 0.43 1.48 125 T_XMDrugObfuBody_08 7398 1.73 2.34 1.47 126 TR_Symld_Words 7341 1.49 1.57 1.46 127 SUBJ_ALL_CAPS 7322 2.23 4.04 1.46 128 XMSubNoVowel 7301 1.35 1.13 1.45 129 XM_OfRef6 7078 2.64 5.50 1.41 130 TR_XM_SpammyWords5 6849 2.43 4.91 1.36 131 RCVD_IN_BL_SPAMCOP_NET 6747 4.51 11.89 1.34 132 MSGID_NOFQDN1 6650 0.94 0.05 1.32 133 XMBSHREFv2 6573 0.99 0.27 1.31 134 TM2_M_VERY_LONG_WORD 6563 1.54 2.09 1.30 135 TO_MALFORMED 6475 0.90 0.01 1.29 136 USER_IN_DEF_DKIM_WL 6348 0.89 0.02 1.26 137 URI_TRY_3LD 6287 1.49 2.05 1.25 138 XMCapTrack 6167 0.97 0.38 1.23 139 XMBdyGiftCard01 6127 1.39 1.80 1.22 140 XM_GoogleGroups 5871 0.96 0.48 1.17 141 XM_UB50 5814 2.70 6.30 1.16 142 XM_B_COVIDMETA 5332 1.57 2.76 1.06 143 DKIM_ADSP_CUSTOM_MED 5249 0.99 0.87 1.04 144 TVD_SPACE_RATIO 5163 0.75 0.09 1.03 145 XM_ProductURIs 5063 1.04 1.13 1.01 146 RELAYCOUNTRY_GB 5051 1.01 1.03 1.00 147 T_XMDrugObfuBody_00 5014 1.19 1.62 1.00 148 TR_MSPIKEBAYES00 4940 0.69 0.01 0.98 149 XM_H_Long_From02 4840 1.02 1.16 0.96 150 HTML_FONT_FACE_BAD 4623 0.82 0.58 0.92 151 XMGappySubj_01 4560 0.69 0.18 0.91 152 XMSubEmpty 4426 0.69 0.24 0.88 153 RDNS_DYNAMIC 4407 0.95 1.13 0.88 154 XMHTML_After_End 4390 1.12 1.69 0.87 155 XMGenDplmaNmb 4388 1.08 1.56 0.87 156 XMBody_95 4351 0.64 0.11 0.86 157 HTTPS_HTTP_MISMATCH 4331 0.87 0.90 0.86 158 SpammyFromTLD_01 4239 2.14 5.16 0.84 159 T_FILL_THIS_FORM_SHORT 4065 1.68 3.70 0.81 160 PDS_OTHER_BAD_TLD 3914 1.08 1.77 0.78 161 FROM_GOV_DKIM_AU 3757 0.58 0.18 0.75 162 XM_B_SpammyWords4 3591 1.22 2.39 0.71 163 XMBrknScrpt_02 3586 1.29 2.62 0.71 164 NML_ADSP_CUSTOM_MED 3578 0.73 0.77 0.71 165 XMSexyCombo_01 3507 1.04 1.84 0.70 166 FORGED_GMAIL_RCVD 3395 1.52 3.50 0.67 167 XMBody_17 3350 1.42 3.18 0.67 168 STOX_REPLY_TYPE_OLD 3289 0.47 0.05 0.65 169 STOX_REPLY_TYPE 3289 0.47 0.05 0.65 170 XMPhish30 3275 0.73 0.90 0.65 171 STOX_REPLY_TYPE_WITHOUT_QUOTES 3274 0.47 0.05 0.65 172 TR_MetaPhish_Combo_01 3250 0.85 1.33 0.65 173 XM_SPF_Unknown 3073 0.60 0.56 0.61 174 TR_XM_SpammyWords2 2978 4.18 12.54 0.59 175 T_TooManySym_03 2973 0.45 0.12 0.59 176 XMMoneyMeta_00 2931 0.72 1.02 0.58 177 XMHTMLBadTable_001 2922 0.55 0.49 0.58 178 XMSubMetaSxObfu_03 2909 0.90 1.64 0.58 179 T_OBFU_PDF_ATTACH 2847 0.45 0.19 0.57 180 T_Symld_Words_02 2847 0.83 1.43 0.57 181 NUMERIC_HTTP_ADDR 2814 0.64 0.84 0.56 182 XM_DIRTYINTL 2767 1.24 2.83 0.55 183 XM_ShortIntro_01 2714 0.49 0.39 0.54 184 TR_LOTS_OF_MONEY3 2705 1.66 4.28 0.54 185 XMOemUri 2602 0.43 0.23 0.52 186 XMNoVowels 2598 0.48 0.39 0.52 187 FROM_GOV_SPOOF 2560 0.39 0.13 0.51 188 XMSubMetaI_00 2522 0.61 0.85 0.50 189 PLING_QUERY 2469 0.51 0.56 0.49 190 HTML_IMAGE_ONLY_20 2430 0.43 0.32 0.48 191 XM_S_SpammyWords 2417 0.58 0.81 0.48 192 TR_XM_Spammywords 2416 0.58 0.81 0.48 193 MISSING_HEADERS 2415 0.67 1.10 0.48 194 RCVD_IN_SORBS_DUL 2413 0.42 0.29 0.48 195 XM_H_PHPMailer 2386 0.49 0.52 0.47 196 XMPhish14 2378 0.54 0.70 0.47 197 T_XMHurry_00 2342 0.83 1.68 0.47 198 XM_Body_Obfu01 2339 0.55 0.73 0.46 199 TM2_M_BODY_EMPTY 2337 0.35 0.09 0.46 200 HTML_TAG_BALANCE_BODY 2290 0.52 0.67 0.46 ----------------------------------------------------------------------