Email: 708931 Autolearn: 0 AvgScore: 2.29 AvgScanTime: 1.77 sec Spam: 199952 Autolearn: 0 AvgScore: 14.47 AvgScanTime: 2.14 sec Ham: 508979 Autolearn: 0 AvgScore: -2.49 AvgScanTime: 1.62 sec Time Spent Running SA: 347.97 hours Time Spent Processing Spam: 119.08 hours Time Spent Processing Ham: 228.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 193558 91.00 96.80 88.72 2 DKIM_SIGNED 161132 69.41 80.59 65.03 3 DCC_CHECK 156330 46.96 78.18 34.69 4 XM_DK_Pass 155478 67.66 77.76 63.70 5 DKIM_VALID 151893 65.92 75.96 61.98 6 XM_B_Unicode 148590 72.64 74.31 71.98 7 RELAYCOUNTRY_US 145407 79.58 72.72 82.27 8 XMListUnsubscribeExists 133848 48.96 66.94 41.90 9 XM_B_SpammyWords 133265 51.07 66.65 44.95 10 DKIM_VALID_AU 115879 50.07 57.95 46.97 11 XM_DK_Undo_02 90517 17.58 45.27 6.70 12 XM_B_Unicode3 85190 43.23 42.61 43.48 13 XM_B_SpammyWords2 77262 22.77 38.64 16.54 14 BAYES_99 75740 14.47 37.88 5.27 15 MIME_HTML_ONLY 72758 27.21 36.39 23.60 16 LOC_TINY_FONT_1 72149 24.43 36.08 19.85 17 TR_XM_DKIM_Undo 71048 13.27 35.53 4.52 18 BAYES_50 69960 49.14 34.99 54.69 19 HTML_FONT_LOW_CONTRAST 66736 26.43 33.38 23.70 20 DKIM_VALID_EF 59050 26.86 29.53 25.81 21 TR_DCC_Bayes_99 58125 9.81 29.07 2.24 22 BAYES_999 58120 11.21 29.07 4.19 23 T_KAM_HTML_FONT_INVALID 55123 18.81 27.57 15.37 24 FVGT_m_MULTI_ODD 51622 22.06 25.82 20.58 25 XMSubLong 51551 21.96 25.78 20.46 26 RCVD_IN_MSPIKE_WL 45567 27.58 22.79 29.46 27 RELAYCOUNTRY_META 44071 9.54 22.04 4.63 28 XM_UncommonTLD01 41590 8.02 20.80 3.00 29 RCVD_IN_MSPIKE_H2 41528 19.78 20.77 19.39 30 XM_Body_Dirty_Words 41295 13.09 20.65 10.12 31 DCC_CHECK_NEGATIVE 39933 51.15 19.97 63.39 32 UNTRUSTED_Relay 38736 6.59 19.37 1.57 33 T_TM2_M_HEADER_IN_MSG 37763 23.96 18.89 25.95 34 FSL_BULK_SIG 34691 9.61 17.35 6.58 35 BOTNET 30368 5.26 15.19 1.36 36 XM_Multi_Part_URI 29731 10.95 14.87 9.41 37 TR_XM_SpammyWords2 27613 4.40 13.81 0.70 38 XM_B_Unsub 26442 9.81 13.22 8.47 39 BOTNET_IPINHOSTNAME 25147 6.55 12.58 4.18 40 XMSexyCombo_05 25040 6.09 12.52 3.56 41 SpammyFromTLD_02 24453 3.66 12.23 0.30 42 XM_B_SpammyWords3 23602 6.09 11.80 3.85 43 RCVD_IN_MSPIKE_H3 22385 13.67 11.20 14.64 44 LOTS_OF_MONEY 22270 7.34 11.14 5.85 45 XM_Evil_Numbers_Gen 21484 9.31 10.74 8.75 46 RCVD_IN_MSPIKE_H4 20966 11.13 10.49 11.38 47 TR_XM_SpammyWords4 18638 5.18 9.32 3.55 48 UNPARSEABLE_RELAY 18548 6.96 9.28 6.05 49 BAYES_80 18458 5.58 9.23 4.15 50 TR_XM_UnparsRelay 18329 6.26 9.17 5.12 51 RCVD_IN_BL_SPAMCOP_NET 17640 3.01 8.82 0.73 52 HTML_SHORT_LINK_IMG_1 17587 2.50 8.80 0.03 53 KHOP_HELO_FCRDNS 17264 3.52 8.63 1.52 54 BODY_URI_ONLY 17014 2.40 8.51 0.01 55 HTML_IMAGE_ONLY_12 16839 2.54 8.42 0.23 56 XM_B_Phish_Phrases 16796 5.72 8.40 4.67 57 XMSubMetaSx_00 16642 4.66 8.32 3.22 58 BAYES_60 16256 8.01 8.13 7.96 59 LotsOfNums_01 15837 7.58 7.92 7.45 60 HTML_IMAGE_RATIO_02 15473 6.25 7.74 5.66 61 MPART_ALT_DIFF 15140 9.10 7.57 9.70 62 TooManyTo_001 14412 7.56 7.21 7.69 63 HTML_FONT_SIZE_LARGE 14298 2.09 7.15 0.10 64 XM_SendGrid 12377 5.50 6.19 5.22 65 XM_H_Long_From01 12236 5.40 6.12 5.12 66 TR_XM_PhishingBody 11944 3.59 5.97 2.66 67 HTML_IMAGE_RATIO_04 11864 12.83 5.93 15.54 68 BAYES_95 11746 3.61 5.87 2.72 69 RCVD_IN_MSPIKE_BL 11370 1.72 5.69 0.16 70 XM_UB99 11318 1.60 5.66 0.00 71 TR_XM_MSPIKECOMBO 11243 1.70 5.62 0.16 72 MIME_HTML_MOSTLY 11114 3.34 5.56 2.47 73 XM_B_SpammyTLD 10878 2.58 5.44 1.46 74 RELAYCOUNTRY_CA 10850 2.41 5.43 1.23 75 XM_UB50 10490 2.24 5.25 1.06 76 SpammyFromTLD_01 10409 2.07 5.21 0.83 77 XMNumbers 9564 3.32 4.78 2.75 78 XMStrtUSub 9560 10.34 4.78 12.52 79 DKIM_INVALID 9239 3.49 4.62 3.04 80 RCVD_IN_RP_SAFE 8202 5.88 4.10 6.57 81 TM2_M_URI_OPT_OUT 7998 3.00 4.00 2.61 82 XM_DIRTYINTL 7827 1.40 3.91 0.42 83 RCVD_IN_MSPIKE_L5 7119 1.04 3.56 0.05 84 MIME_QP_LONG_LINE 7047 4.44 3.52 4.80 85 TR_XM_SpammyWords5 6837 2.02 3.42 1.48 86 XMDiploma_00 6835 2.08 3.42 1.56 87 XM_B_COVIDMETA 6709 1.75 3.36 1.13 88 XM_B_Phish66 6675 2.19 3.34 1.74 89 RCVD_IN_RP_CERTIFIED 6569 5.16 3.29 5.90 90 TR_XM_DK_SendGrid 6535 3.14 3.27 3.09 91 XM_SPF_SoftFail 6467 2.00 3.23 1.51 92 XM_UB999 6463 0.91 3.23 0.00 93 TR_XM_SpammyWords3 6384 0.96 3.19 0.09 94 XM_B_Unsub2 6250 1.92 3.13 1.45 95 RCVD_IN_RP_RNBL 6145 0.87 3.07 0.01 96 XM_UB80 6043 0.87 3.02 0.03 97 HTML_IMAGE_RATIO_06 5970 4.23 2.99 4.71 98 RELAYCOUNTRY_FR 5934 1.00 2.97 0.23 99 T_XMDrugObfuBody_14 5887 2.17 2.94 1.87 100 XM_DK_Undo_01 5761 1.77 2.88 1.33 101 MIME_HTML_ONLY_MULTI 5698 6.47 2.85 7.89 102 XM_UB60 5678 0.89 2.84 0.13 103 FROM_EXCESS_BASE64 5571 2.69 2.79 2.65 104 RCVD_IN_PSBL 5567 0.85 2.78 0.09 105 T_XMDrugObfuBody_08 5465 1.72 2.73 1.32 106 XM_OfRef6 5400 1.39 2.70 0.87 107 RELAYCOUNTRY_DE 5187 1.21 2.59 0.66 108 URIBL_DBL_SPAM 5174 0.74 2.59 0.01 109 XMBdyGiftCard01 5151 0.92 2.58 0.28 110 URI_HEX 5097 1.76 2.55 1.45 111 TR_XM_BayesRelay 4936 0.71 2.47 0.02 112 XM_CamelCaseFrm001 4818 1.80 2.41 1.56 113 URIBL_SBL_A 4705 0.87 2.35 0.29 114 HTML_IMAGE_RATIO_08 4635 2.07 2.32 1.98 115 XM_JunkDunk 4569 0.64 2.29 0.00 116 T_TooManySym_01 4544 4.04 2.27 4.73 117 TM2_M_VERY_LONG_WORD 4525 1.36 2.26 1.00 118 T_FILL_THIS_FORM_SHORT 4506 1.14 2.25 0.70 119 XM_UB95 4443 0.64 2.22 0.01 120 PDS_OTHER_BAD_TLD 4403 0.76 2.20 0.19 121 SUBJ_ALL_CAPS 4234 1.55 2.12 1.33 122 DIET_1 4223 0.89 2.11 0.41 123 TR_XM_SB_Phish 4217 2.54 2.11 2.72 124 MAILING_LIST_MULTI 4157 2.52 2.08 2.70 125 RCVD_IN_IADB_LISTED 4117 3.89 2.06 4.61 126 HTML_MIME_NO_HTML_TAG 4000 2.66 2.00 2.92 127 XMBrknScrpt_02 3988 0.88 1.99 0.45 128 XMSubPhish11 3956 2.49 1.98 2.69 129 BOTNET_NORDNS 3808 0.54 1.90 0.01 130 XMSlimDrugH 3774 0.72 1.89 0.27 131 RCVD_IN_IADB_SPF 3734 3.42 1.87 4.03 132 T_REMOTE_IMAGE 3649 2.78 1.82 3.15 133 XM_URI_RBL 3626 0.63 1.81 0.16 134 RCVD_IN_IADB_DK 3573 3.02 1.79 3.50 135 URI_PHP_REDIR 3523 0.50 1.76 0.00 136 RCVD_IN_IADB_SENDERID 3514 3.09 1.76 3.62 137 FROM_SUSPICIOUS_NTLD 3453 0.53 1.73 0.06 138 XM_B_SpammyWords4 3440 0.80 1.72 0.43 139 XMGenDplmaNmb 3440 1.04 1.72 0.77 140 HK_RANDOM_REPLYTO 3433 0.62 1.72 0.19 141 FROM_SUSPICIOUS_NTLD_FP 3291 0.50 1.65 0.05 142 TR_Symld_Words 3279 1.50 1.64 1.45 143 XMSexyCombo_01 3273 0.69 1.64 0.32 144 TR_XM_INV_DKIM 3251 0.52 1.63 0.09 145 XMStockSpam_06 3133 1.17 1.57 1.02 146 RELAYCOUNTRY_IN 3111 0.51 1.56 0.09 147 TR_Mismatch_TLD_02 3100 0.49 1.55 0.08 148 ALL_TRUSTED 3048 10.98 1.52 14.70 149 URIBL_BLACK 3027 0.45 1.51 0.03 150 TR_XM_PHPDW 3014 1.18 1.51 1.05 151 TR_XM_COVIDMETA4 2907 0.75 1.45 0.48 152 TooManyTo_002 2820 1.89 1.41 2.08 153 TR_XM_FormFill 2819 0.41 1.41 0.01 154 BAYES_40 2816 4.00 1.41 5.02 155 DKIM_ADSP_NXDOMAIN 2805 1.09 1.40 0.97 156 XMMoneyMeta_00 2802 0.80 1.40 0.57 157 XMWghtMeta_00 2735 0.40 1.37 0.02 158 TR_XM_PHPForged 2706 1.10 1.35 1.00 159 TR_XM_FormFill2 2690 1.09 1.35 1.00 160 XM_H_PHPOS 2667 1.09 1.33 0.99 161 T_XMDrugObfuBody_00 2651 0.91 1.33 0.74 162 URI_NOVOWEL 2618 2.05 1.31 2.34 163 XMBody_17 2613 0.62 1.31 0.35 164 T_XMHurry_00 2511 0.71 1.26 0.50 165 DATE_IN_PAST_06_12 2490 0.45 1.25 0.14 166 TooManyTo_003 2425 1.33 1.21 1.38 167 BAYES_20 2400 3.38 1.20 4.24 168 XM_Body_Dirty_Words_01 2398 0.40 1.20 0.09 169 RCVD_IN_MSPIKE_L4 2397 0.38 1.20 0.06 170 XM_H_Long_From02 2395 1.02 1.20 0.95 171 TR_XM_MaxBayes 2367 0.34 1.18 0.00 172 THIS_AD 2365 0.42 1.18 0.13 173 RELAYCOUNTRY_GB 2345 1.18 1.17 1.19 174 TR_LOTS_OF_MONEY3 2313 0.45 1.16 0.17 175 URI_TRY_3LD 2254 0.98 1.13 0.93 176 XMSubMetaSxObfu_03 2216 0.63 1.11 0.44 177 RCVD_IN_MSPIKE_H5 2216 2.78 1.11 3.44 178 XMHTML_After_End 2152 0.88 1.08 0.80 179 TooManyTo_004 2143 1.03 1.07 1.01 180 XMPhish08 2139 0.41 1.07 0.16 181 TR_XM_RelayPhish 2134 0.49 1.07 0.26 182 NO_DNS_FOR_FROM 2105 0.96 1.05 0.92 183 TR_XM_MaxWHORU 2081 0.94 1.04 0.90 184 XM_B_SEO 2071 0.39 1.04 0.14 185 T_Symld_Words_02 2063 0.56 1.03 0.37 186 TR_XM_COVIDMETA1 2048 0.46 1.02 0.24 187 TR_MetaPhish_Combo_01 2027 0.70 1.01 0.58 188 HTTPS_HTTP_MISMATCH 2025 0.77 1.01 0.68 189 RELAYCOUNTRY_RU 2010 0.30 1.01 0.02 190 XM_PDF 1950 3.12 0.98 3.97 191 TR_LOTS_OF_MONEY2 1950 0.49 0.98 0.30 192 T_MONEY_PERCENT 1950 0.49 0.98 0.30 193 NUMERIC_HTTP_ADDR 1939 0.47 0.97 0.28 194 TR_Caps_n_Bayes_99 1936 0.29 0.97 0.02 195 TooManyTo_005 1891 0.85 0.95 0.81 196 RELAYCOUNTRY_CH 1844 0.29 0.92 0.04 197 XMSubMetaI_00 1831 0.51 0.92 0.35 198 HTML_TAG_BALANCE_BODY 1815 0.49 0.91 0.33 199 XMPhish30 1795 0.50 0.90 0.35 200 XMOemUri 1746 0.52 0.87 0.37 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 451541 91.00 96.80 88.72 2 RELAYCOUNTRY_US 418734 79.58 72.72 82.27 3 XM_B_Unicode 366368 72.64 74.31 71.98 4 DKIM_SIGNED 330964 69.41 80.59 65.03 5 XM_DK_Pass 324216 67.66 77.76 63.70 6 DCC_CHECK_NEGATIVE 322651 51.15 19.97 63.39 7 DKIM_VALID 315466 65.92 75.96 61.98 8 BAYES_50 278375 49.14 34.99 54.69 9 DKIM_VALID_AU 239051 50.07 57.95 46.97 10 XM_B_SpammyWords 228769 51.07 66.65 44.95 11 XM_B_Unicode3 221307 43.23 42.61 43.48 12 XMListUnsubscribeExists 213244 48.96 66.94 41.90 13 DCC_CHECK 176562 46.96 78.18 34.69 14 RCVD_IN_MSPIKE_WL 149936 27.58 22.79 29.46 15 T_TM2_M_HEADER_IN_MSG 132071 23.96 18.89 25.95 16 DKIM_VALID_EF 131386 26.86 29.53 25.81 17 HTML_FONT_LOW_CONTRAST 120644 26.43 33.38 23.70 18 MIME_HTML_ONLY 120142 27.21 36.39 23.60 19 FVGT_m_MULTI_ODD 104753 22.06 25.82 20.58 20 XMSubLong 104153 21.96 25.78 20.46 21 LOC_TINY_FONT_1 101051 24.43 36.08 19.85 22 RCVD_IN_MSPIKE_H2 98672 19.78 20.77 19.39 23 XM_B_SpammyWords2 84165 22.77 38.64 16.54 24 HTML_IMAGE_RATIO_04 79108 12.83 5.93 15.54 25 T_KAM_HTML_FONT_INVALID 78252 18.81 27.57 15.37 26 ALL_TRUSTED 74803 10.98 1.52 14.70 27 RCVD_IN_MSPIKE_H3 74521 13.67 11.20 14.64 28 XM_H_Trusted_IP 71625 10.10 0.00 14.07 29 HTML_FONT_FACE_BAD 67190 9.65 0.63 13.20 30 BAYES_00 66332 9.55 0.69 13.03 31 XMStrtUSub 63748 10.34 4.78 12.52 32 RCVD_IN_MSPIKE_H4 57910 11.13 10.49 11.38 33 XM_Body_Dirty_Words 51494 13.09 20.65 10.12 34 MPART_ALT_DIFF 49373 9.10 7.57 9.70 35 XM_Multi_Part_URI 47878 10.95 14.87 9.41 36 XM_Evil_Numbers_Gen 44525 9.31 10.74 8.75 37 XM_B_Unsub 43135 9.81 13.22 8.47 38 XM_DKIMWhitelistDomains 42033 5.94 0.02 8.26 39 BAYES_60 40495 8.01 8.13 7.96 40 MIME_HTML_ONLY_MULTI 40155 6.47 2.85 7.89 41 TooManyTo_001 39163 7.56 7.21 7.69 42 LotsOfNums_01 37935 7.58 7.92 7.45 43 XM_DK_Undo_02 34096 17.58 45.27 6.70 44 FSL_BULK_SIG 33470 9.61 17.35 6.58 45 RCVD_IN_RP_SAFE 33452 5.88 4.10 6.57 46 UNPARSEABLE_RELAY 30798 6.96 9.28 6.05 47 RCVD_IN_RP_CERTIFIED 30044 5.16 3.29 5.90 48 LOTS_OF_MONEY 29773 7.34 11.14 5.85 49 HTML_IMAGE_RATIO_02 28825 6.25 7.74 5.66 50 TR_XM_DK_Bayes 27951 4.09 0.51 5.49 51 TR_XM_DK_Bayes1 27274 3.99 0.51 5.36 52 BAYES_99 26829 14.47 37.88 5.27 53 XM_SendGrid 26579 5.50 6.19 5.22 54 TR_XM_UnparsRelay 26079 6.26 9.17 5.12 55 XM_H_Long_From01 26061 5.40 6.12 5.12 56 BAYES_40 25541 4.00 1.41 5.02 57 IN_ZIMBRA_NJ_WHITELIST 24697 3.50 0.04 4.85 58 MIME_QP_LONG_LINE 24454 4.44 3.52 4.80 59 TR_XM_DK_Bayes2 24150 3.53 0.45 4.74 60 T_TooManySym_01 24097 4.04 2.27 4.73 61 HTML_IMAGE_RATIO_06 23997 4.23 2.99 4.71 62 XM_B_Phish_Phrases 23779 5.72 8.40 4.67 63 RELAYCOUNTRY_META 23543 9.54 22.04 4.63 64 RCVD_IN_IADB_LISTED 23439 3.89 2.06 4.61 65 TR_XM_DKIM_Undo 23003 13.27 35.53 4.52 66 XMSubNoVowel 21633 3.22 0.59 4.25 67 BAYES_20 21559 3.38 1.20 4.24 68 BAYES_999 21328 11.21 29.07 4.19 69 BOTNET_IPINHOSTNAME 21300 6.55 12.58 4.18 70 BAYES_80 21130 5.58 9.23 4.15 71 RCVD_IN_IADB_SPF 20534 3.42 1.87 4.03 72 XM_PDF 20200 3.12 0.98 3.97 73 XM_B_SpammyWords3 19605 6.09 11.80 3.85 74 RCVD_IN_IADB_SENDERID 18420 3.09 1.76 3.62 75 XMSexyCombo_05 18131 6.09 12.52 3.56 76 TR_XM_SpammyWords4 18078 5.18 9.32 3.55 77 RCVD_IN_IADB_DK 17812 3.02 1.79 3.50 78 RCVD_IN_MSPIKE_H5 17505 2.78 1.11 3.44 79 ANY_BOUNCE_MESSAGE 16957 2.52 0.45 3.33 80 BOUNCE_MESSAGE 16950 2.52 0.45 3.33 81 XMSubMetaSx_00 16397 4.66 8.32 3.22 82 T_REMOTE_IMAGE 16056 2.78 1.82 3.15 83 TR_XM_DK_SendGrid 15743 3.14 3.27 3.09 84 DKIM_INVALID 15498 3.49 4.62 3.04 85 XM_UncommonTLD01 15247 8.02 20.80 3.00 86 BAYES_05 14897 2.27 0.60 2.93 87 HTML_MIME_NO_HTML_TAG 14879 2.66 2.00 2.92 88 RCVD_IN_IADB_VOUCHED 14162 2.21 0.76 2.78 89 XMNumbers 13974 3.32 4.78 2.75 90 TR_XM_SB_Phish 13822 2.54 2.11 2.72 91 BAYES_95 13820 3.61 5.87 2.72 92 MAILING_LIST_MULTI 13735 2.52 2.08 2.70 93 XMSubPhish11 13715 2.49 1.98 2.69 94 TR_XM_PhishingBody 13541 3.59 5.97 2.66 95 FROM_EXCESS_BASE64 13471 2.69 2.79 2.65 96 TM2_M_URI_OPT_OUT 13271 3.00 4.00 2.61 97 MIME_HTML_MOSTLY 12596 3.34 5.56 2.47 98 T_TooManySym_02 11994 1.93 0.83 2.36 99 URI_NOVOWEL 11907 2.05 1.31 2.34 100 TR_DCC_Bayes_99 11420 9.81 29.07 2.24 101 TooManyTo_002 10603 1.89 1.41 2.08 102 HTML_IMAGE_RATIO_08 10066 2.07 2.32 1.98 103 T_XMDrugObfuBody_14 9522 2.17 2.94 1.87 104 RCVD_IN_IADB_OPTIN 9150 1.43 0.50 1.80 105 TVD_RCVD_IP 8990 1.33 0.23 1.77 106 XM_B_Phish66 8850 2.19 3.34 1.74 107 HELO_NO_DOMAIN 8499 1.36 0.56 1.67 108 HELO_NODOT 8499 1.36 0.56 1.67 109 XMSubGarbage 8218 1.18 0.06 1.61 110 UNTRUSTED_Relay 7976 6.59 19.37 1.57 111 XMDiploma_00 7939 2.08 3.42 1.56 112 XM_CamelCaseFrm001 7923 1.80 2.41 1.56 113 XMSubLongNoVowel 7893 1.16 0.18 1.55 114 KHOP_HELO_FCRDNS 7719 3.52 8.63 1.52 115 XM_SPF_SoftFail 7698 2.00 3.23 1.51 116 TR_XM_SpammyWords5 7508 2.02 3.42 1.48 117 XM_B_SpammyTLD 7433 2.58 5.44 1.46 118 XM_B_Unsub2 7385 1.92 3.13 1.45 119 TR_Symld_Words 7383 1.50 1.64 1.45 120 URI_HEX 7376 1.76 2.55 1.45 121 IN_HORDE_ADDRESS_BOOK 7201 1.03 0.07 1.41 122 INVALID_MSGID 7085 1.09 0.31 1.39 123 TooManyTo_003 7034 1.33 1.21 1.38 124 BOTNET 6902 5.26 15.19 1.36 125 SUBJ_ALL_CAPS 6761 1.55 2.12 1.33 126 XM_DK_Undo_01 6755 1.77 2.88 1.33 127 T_XMDrugObfuBody_08 6694 1.72 2.73 1.32 128 USER_IN_DEF_DKIM_WL 6479 0.92 0.02 1.27 129 MSGID_NOFQDN1 6475 0.92 0.04 1.27 130 TO_MALFORMED 6332 0.90 0.02 1.24 131 RELAYCOUNTRY_CA 6257 2.41 5.43 1.23 132 RELAYCOUNTRY_GB 6050 1.18 1.17 1.19 133 XMCapTrack 6021 0.97 0.43 1.18 134 XM_B_COVIDMETA 5727 1.75 3.36 1.13 135 HELO_MISC_IP 5642 0.83 0.11 1.11 136 XM_GoogleGroups 5498 0.92 0.52 1.08 137 XM_UB50 5393 2.24 5.25 1.06 138 TR_XM_PHPDW 5357 1.18 1.51 1.05 139 XMStockSpam_06 5174 1.17 1.57 1.02 140 TooManyTo_004 5129 1.03 1.07 1.01 141 TM2_M_VERY_LONG_WORD 5097 1.36 2.26 1.00 142 TR_XM_PHPForged 5084 1.10 1.35 1.00 143 XM_E_Blogspot 5069 0.73 0.07 1.00 144 TR_XM_FormFill2 5066 1.09 1.35 1.00 145 XM_H_PHPOS 5039 1.09 1.33 0.99 146 DKIM_ADSP_NXDOMAIN 4933 1.09 1.40 0.97 147 XMBSHREFv2 4923 0.78 0.30 0.97 148 XM_H_Long_From02 4822 1.02 1.20 0.95 149 URI_TRY_3LD 4712 0.98 1.13 0.93 150 NO_DNS_FOR_FROM 4699 0.96 1.05 0.92 151 XMGappySubj_01 4670 0.70 0.13 0.92 152 TR_XM_MaxWHORU 4562 0.94 1.04 0.90 153 XM_OfRef6 4425 1.39 2.70 0.87 154 SpammyFromTLD_01 4244 2.07 5.21 0.83 155 TooManyTo_005 4113 0.85 0.95 0.81 156 DKIM_ADSP_CUSTOM_MED 4102 0.80 0.80 0.81 157 XMHTML_After_End 4083 0.88 1.08 0.80 158 XMGenDplmaNmb 3925 1.04 1.72 0.77 159 T_XMDrugObfuBody_00 3773 0.91 1.33 0.74 160 TR_MSPIKEBAYES00 3759 0.53 0.01 0.74 161 RCVD_IN_BL_SPAMCOP_NET 3715 3.01 8.82 0.73 162 T_FILL_THIS_FORM_SHORT 3586 1.14 2.25 0.70 163 TR_XM_SpammyWords2 3568 4.40 13.81 0.70 164 HTTPS_HTTP_MISMATCH 3467 0.77 1.01 0.68 165 TVD_SPACE_RATIO 3442 0.51 0.10 0.68 166 XMBody_95 3441 0.51 0.09 0.68 167 RELAYCOUNTRY_DE 3362 1.21 2.59 0.66 168 XM_ProductURIs 3221 0.62 0.60 0.63 169 TR_MetaPhish_Combo_01 2962 0.70 1.01 0.58 170 T_TooManySym_03 2941 0.47 0.21 0.58 171 XMMoneyMeta_00 2878 0.80 1.40 0.57 172 NML_ADSP_CUSTOM_MED 2867 0.59 0.65 0.56 173 HTML_IMAGE_ONLY_20 2827 0.50 0.35 0.56 174 XM_H_PHPMailer 2710 0.60 0.76 0.53 175 XMNoVowels 2678 0.52 0.50 0.53 176 FROM_GOV_SPOOF 2640 0.41 0.13 0.52 177 MSGID_FROM_MTA_HEADER 2625 0.42 0.18 0.52 178 XM_ShortIntro_01 2625 0.51 0.49 0.52 179 T_OBFU_PDF_ATTACH 2566 0.43 0.24 0.50 180 XM_SPF_Unknown 2543 0.53 0.60 0.50 181 T_XMHurry_00 2533 0.71 1.26 0.50 182 SHORT_HELO_AND_INLINE_IMAGE 2466 0.37 0.07 0.48 183 RCVD_IN_SORBS_DUL 2458 0.40 0.18 0.48 184 XMSolicitRefs_0 2448 0.51 0.58 0.48 185 TR_XM_COVIDMETA4 2443 0.75 1.45 0.48 186 XMHTMLBadTable_001 2399 0.50 0.57 0.47 187 XM_S_SpammyWords 2284 0.53 0.75 0.45 188 XMBrknScrpt_02 2281 0.88 1.99 0.45 189 TR_XM_Spammywords 2277 0.53 0.75 0.45 190 RDNS_DYNAMIC 2274 0.56 0.84 0.45 191 XMSubMetaSxObfu_03 2234 0.63 1.11 0.44 192 XM_B_SpammyWords4 2211 0.80 1.72 0.43 193 MISSING_HEADERS 2193 0.50 0.66 0.43 194 HTML_IMAGE_ONLY_28 2151 0.41 0.37 0.42 195 XM_DIRTYINTL 2129 1.40 3.91 0.42 196 FROM_GOV_DKIM_AU 2111 0.43 0.47 0.41 197 DIET_1 2093 0.89 2.11 0.41 198 FORGED_GMAIL_RCVD 2028 0.48 0.70 0.40 199 HTML_IMAGE_ONLY_32 2011 0.35 0.23 0.40 200 T_MANY_PILL_PRICE 2003 0.28 0.00 0.39 ----------------------------------------------------------------------