Email: 480908 Autolearn: 0 AvgScore: 3.13 AvgScanTime: 1.32 sec Spam: 136487 Autolearn: 0 AvgScore: 12.58 AvgScanTime: 1.44 sec Ham: 344421 Autolearn: 0 AvgScore: -0.61 AvgScanTime: 1.27 sec Time Spent Running SA: 176.38 hours Time Spent Processing Spam: 54.65 hours Time Spent Processing Ham: 121.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 128788 87.70 94.36 85.06 2 DKIM_SIGNED 123769 78.19 90.68 73.24 3 XM_DK_Pass 118754 76.11 87.01 71.79 4 DKIM_VALID 117725 75.19 86.25 70.81 5 RELAYCOUNTRY_US 116322 81.28 85.23 79.71 6 XM_B_Unicode 112663 72.56 82.54 68.60 7 T_SCC_BODY_TEXT_LINE 108104 82.01 79.20 83.13 8 DKIM_VALID_AU 96075 60.58 70.39 56.69 9 XMListUnsubscribeExists 95558 54.12 70.01 47.83 10 DCC_CHECK 95469 43.04 69.95 32.38 11 XM_B_SpammyWords 94526 50.97 69.26 43.72 12 XM_B_Unicode3 61058 40.88 44.74 39.35 13 LOC_TINY_FONT_1 57579 29.47 42.19 24.43 14 XM_DK_Undo_02 54920 15.60 40.24 5.84 15 XM_B_SpammyWords2 54584 23.90 39.99 17.52 16 BAYES_50 54358 53.02 39.83 58.24 17 HTML_FONT_LOW_CONTRAST 51252 30.15 37.55 27.22 18 FVGT_m_MULTI_ODD 45542 26.87 33.37 24.30 19 BAYES_99 44911 12.66 32.90 4.64 20 DCC_CHECK_NEGATIVE 41001 56.93 30.04 67.58 21 TR_XM_DKIM_Undo 39324 9.78 28.81 2.23 22 RCVD_IN_MSPIKE_H2 38688 25.51 28.35 24.39 23 DKIM_VALID_EF 36678 27.79 26.87 28.15 24 MIME_HTML_ONLY 36369 20.89 26.65 18.61 25 T_KAM_HTML_FONT_INVALID 35409 22.37 25.94 20.96 26 BAYES_999 35146 9.90 25.75 3.62 27 XMSubLong 32743 23.03 23.99 22.66 28 T_TM2_M_HEADER_IN_MSG 31588 27.34 23.14 29.00 29 TR_DCC_Bayes_99 31391 7.67 23.00 1.60 30 XM_Multi_Part_URI 28495 15.99 20.88 14.06 31 TR_XM_DK_Unsub 23802 14.17 17.44 12.88 32 XM_B_Unsub 23145 10.62 16.96 8.11 33 TR_XM_BayesUnsub 22312 9.21 16.35 6.39 34 UNPARSEABLE_RELAY 21803 11.81 15.97 10.17 35 XM_B_SpammyWords3 20012 7.68 14.66 4.91 36 BOTNET_IPINHOSTNAME 19737 7.40 14.46 4.60 37 TR_MAX_INTL_RELAY 18918 8.47 13.86 6.33 38 LOTS_OF_MONEY 18915 8.14 13.86 5.87 39 RELAYCOUNTRY_META 18640 6.82 13.66 4.11 40 TR_XM_SpammyWords4 16950 6.34 12.42 3.93 41 TR_XM_SpammyWords2 16571 3.75 12.14 0.43 42 XM_Evil_Numbers_Gen 13983 8.59 10.24 7.93 43 TR_XM_SpammyRelay 13226 4.25 9.69 2.09 44 BOTNET 13085 3.84 9.59 1.56 45 XM_Body_Dirty_Words 12620 5.34 9.25 3.79 46 TR_XM_UnparsRelay 12121 3.58 8.88 1.48 47 BAYES_80 11863 5.23 8.69 3.85 48 FSL_BULK_SIG 11644 4.72 8.53 3.21 49 HTML_IMAGE_RATIO_02 10804 5.61 7.92 4.70 50 BAYES_60 10611 8.58 7.77 8.90 51 LotsOfNums_01 10387 8.04 7.61 8.22 52 XM_UncommonTLD01 10182 4.86 7.46 3.83 53 XMNumbers 8801 3.87 6.45 2.84 54 TooManyTo_001 8402 7.84 6.16 8.51 55 MPART_ALT_DIFF 8379 4.55 6.14 3.92 56 RCVD_IN_BL_SPAMCOP_NET 8313 2.16 6.09 0.60 57 XMSubMetaSx_00 8179 4.53 5.99 3.96 58 UNTRUSTED_Relay 8053 2.82 5.90 1.60 59 XM_SPF_SoftFail 7861 3.79 5.76 3.01 60 HTML_IMAGE_RATIO_04 7775 4.81 5.70 4.46 61 XM_H_Long_From01 7353 5.16 5.39 5.06 62 XM_B_Phish_Phrases 7027 4.25 5.15 3.90 63 XMStrtUSub 6878 5.22 5.04 5.29 64 TR_XM_SpammyWords5 6839 2.41 5.01 1.38 65 XM_B_Investor 6782 2.73 4.97 1.84 66 XMSexyCombo_05 6639 2.38 4.86 1.40 67 BAYES_95 6402 3.10 4.69 2.47 68 XM_H_GMP 6385 6.10 4.68 6.67 69 TR_XM_PhishingBody 6288 2.64 4.61 1.86 70 RELAYCOUNTRY_CA 6265 2.04 4.59 1.04 71 TR_XM_PHPForged 6096 1.64 4.47 0.52 72 DKIM_INVALID 6044 3.00 4.43 2.44 73 TR_XM_PHPDW 6031 1.61 4.42 0.50 74 TR_XM_FormFill2 5946 1.60 4.36 0.51 75 XM_H_PHPOS 5923 1.58 4.34 0.49 76 MIME_HTML_MOSTLY 5699 2.65 4.18 2.04 77 TR_XM_SPAMCOP 5479 1.34 4.01 0.28 78 SpammyFromTLD_01 5410 1.73 3.96 0.84 79 TM2_M_URI_OPT_OUT 5219 2.51 3.82 1.99 80 HTML_IMAGE_RATIO_08 5100 3.05 3.74 2.78 81 HTML_IMAGE_RATIO_06 5048 3.09 3.70 2.85 82 XM_B_SpammyTLD 4986 2.55 3.65 2.11 83 MIME_HTML_ONLY_MULTI 4896 2.77 3.59 2.45 84 T_XMDrugObfuBody_14 4813 2.12 3.53 1.57 85 T_XMDrugObfuBody_08 4715 2.08 3.45 1.54 86 MIME_QP_LONG_LINE 4693 4.62 3.44 5.09 87 XMBody_17 4644 1.36 3.40 0.55 88 TM2_M_VERY_LONG_WORD 4552 1.84 3.34 1.24 89 RCVD_IN_VALIDITY_SAFE 4307 3.87 3.16 4.15 90 SCC_BODY_URI_ONLY 4257 2.83 3.12 2.71 91 XM_UB50 4227 1.61 3.10 1.02 92 XM_CamelCaseFrm001 4138 2.33 3.03 2.06 93 USER_IN_DEF_DKIM_WL 4075 8.78 2.99 11.08 94 XM_B_SpammyWords4 3989 1.46 2.92 0.88 95 SUBJ_ALL_CAPS 3914 1.79 2.87 1.37 96 XM_URI_RBL 3873 0.90 2.84 0.13 97 RCVD_IN_MSPIKE_WL 3663 5.10 2.68 6.06 98 RCVD_IN_MSPIKE_H3 3663 5.10 2.68 6.06 99 RCVD_IN_VALIDITY_CERTIFIED 3608 3.42 2.64 3.73 100 XM_B_Unsub2 3539 1.77 2.59 1.45 101 RELAYCOUNTRY_AU 3520 1.28 2.58 0.76 102 XM_OfRef6 3483 1.77 2.55 1.47 103 TR_LOTS_OF_MONEY3 3433 0.91 2.52 0.28 104 FROM_EXCESS_BASE64 3238 1.97 2.37 1.81 105 TM2_M_BODY_EMPTY 3081 1.01 2.26 0.52 106 T_TooManySym_01 2998 4.38 2.20 5.24 107 XMDiploma_00 2993 1.66 2.19 1.45 108 XMEmptyBody_01 2958 0.67 2.17 0.07 109 BAYES_40 2915 4.23 2.14 5.06 110 T_XMHurry_00 2844 1.04 2.08 0.63 111 BAYES_20 2826 3.12 2.07 3.54 112 MAILING_LIST_MULTI 2821 2.69 2.07 2.94 113 ANY_BOUNCE_MESSAGE 2799 4.09 2.05 4.89 114 BOUNCE_MESSAGE 2795 4.08 2.05 4.89 115 URI_HEX 2705 1.47 1.98 1.26 116 XM_SendGrid 2665 1.65 1.95 1.54 117 T_FILL_THIS_FORM_SHORT 2608 1.27 1.91 1.01 118 XMBrknScrpt_02 2582 0.91 1.89 0.52 119 SpammyFromTLD_02 2527 0.69 1.85 0.23 120 ALL_TRUSTED 2447 12.78 1.79 17.13 121 T_REMOTE_IMAGE 2392 3.08 1.75 3.61 122 XM_DK_Undo_01 2330 1.74 1.71 1.76 123 TR_XM_NoHeaderRelay 2326 0.57 1.70 0.12 124 TR_XM_INV_DKIM 2285 0.51 1.67 0.05 125 RCVD_IN_IADB_LISTED 2237 3.62 1.64 4.40 126 HTML_MIME_NO_HTML_TAG 2236 2.10 1.64 2.28 127 XMStockSpam_06 2224 0.99 1.63 0.74 128 TR_Caps_n_Bayes_99 2130 0.46 1.56 0.03 129 XM_HighProb1 2118 0.44 1.55 0.00 130 THIS_AD 2070 0.75 1.52 0.45 131 TR_XM_Base64_M1 2069 0.91 1.52 0.67 132 HTTPS_HTTP_MISMATCH 2041 1.04 1.50 0.86 133 HTML_TAG_BALANCE_BODY 2022 0.70 1.48 0.38 134 XMSubMetaI_00 2010 0.95 1.47 0.74 135 TR_MetaPhish_Combo_01 2007 0.99 1.47 0.80 136 AC_BR_BONANZA 1997 0.47 1.46 0.08 137 T_XMDrugObfuBody_00 1973 0.85 1.45 0.62 138 XMPhish14 1970 0.77 1.44 0.50 139 RCVD_IN_IADB_SPF 1958 3.20 1.43 3.90 140 XM_H_PHPMailer 1912 0.96 1.40 0.79 141 XM_DIRTYINTL 1868 0.59 1.37 0.28 142 RCVD_IN_IADB_DK 1860 2.83 1.36 3.41 143 RCVD_IN_IADB_SENDERID 1847 2.89 1.35 3.51 144 XMBdyGiftCard01 1839 0.81 1.35 0.59 145 XMLngstWrd_00 1824 0.95 1.34 0.80 146 KHOP_HELO_FCRDNS 1814 1.22 1.33 1.17 147 DKIM_ADSP_CUSTOM_MED 1788 1.05 1.31 0.95 148 BOTNET_NORDNS 1783 0.38 1.31 0.01 149 XMReplyNow 1765 0.57 1.29 0.28 150 XMPhish30 1759 0.81 1.29 0.61 151 URI_TRY_3LD 1697 0.88 1.24 0.74 152 XMHTML_After_End 1660 0.88 1.22 0.75 153 URI_NOVOWEL 1605 1.51 1.18 1.64 154 XM_B_COPY_HTML 1580 0.85 1.16 0.73 155 XMSexyCombo_01 1564 0.50 1.15 0.24 156 TR_XM_FormFill 1550 0.33 1.14 0.02 157 T_MONEY_PERCENT 1540 0.50 1.13 0.25 158 TR_LOTS_OF_MONEY2 1540 0.50 1.13 0.25 159 XM_S_SpammyWords 1510 0.49 1.11 0.24 160 TR_XM_Spammywords 1510 0.49 1.11 0.24 161 RDNS_DYNAMIC 1476 0.55 1.08 0.34 162 TR_Symld_Words 1465 1.44 1.07 1.58 163 XMGenDplmaNmb 1463 0.93 1.07 0.88 164 TR_XM_InvalidRelay 1460 0.32 1.07 0.03 165 NML_ADSP_CUSTOM_MED 1457 0.77 1.07 0.65 166 BAYES_00 1453 7.81 1.06 10.48 167 RCVD_IN_PSBL 1444 0.46 1.06 0.22 168 FORGED_GMAIL_RCVD 1435 0.68 1.05 0.54 169 XM_H_Undi_Recip 1432 0.45 1.05 0.22 170 XM_B_Phish66 1422 0.52 1.04 0.31 171 MPART_ALT_DIFF_COUNT 1401 0.71 1.03 0.59 172 RCVD_IN_VALIDITY_RPBL 1391 0.32 1.02 0.04 173 XM_UB99 1383 0.29 1.01 0.00 174 TR_XM_DK_SendGrid 1301 0.95 0.95 0.94 175 DIET_1 1227 0.50 0.90 0.34 176 XM_H_PHPOS_M 1210 0.31 0.89 0.08 177 SHOPIFY_IMG_NOT_RCVD_SFY 1208 0.45 0.89 0.27 178 XM_PDF 1207 3.66 0.88 4.76 179 TooManyTo_002 1182 2.03 0.87 2.49 180 TM2_M_OBFU_COMMENT 1172 0.40 0.86 0.22 181 TR_XM_Base64_L1 1168 0.32 0.86 0.11 182 RELAYCOUNTRY_FR 1167 0.41 0.86 0.23 183 XM_B_COVIDMETA 1152 0.56 0.84 0.45 184 BAYES_05 1148 2.25 0.84 2.81 185 ACT_NOW_CAPS 1130 0.32 0.83 0.12 186 TVD_RCVD_IP 1124 1.26 0.82 1.43 187 HTML_FONT_FACE_BAD 1109 0.55 0.81 0.44 188 XMClaimOffer 1109 0.39 0.81 0.23 189 TR_XM_DK_Bayes 1109 5.24 0.81 6.99 190 FROM_SUSPICIOUS_NTLD 1107 0.25 0.81 0.02 191 TR_XM_DK_Bayes1 1104 5.17 0.81 6.90 192 XMPhish08 1096 0.50 0.80 0.37 193 XM_B_SEO 1094 0.31 0.80 0.12 194 XM_UB999 1090 0.23 0.80 0.00 195 PLING_QUERY 1089 0.54 0.80 0.43 196 XM_H_Long_From02 1078 0.96 0.79 1.03 197 HELO_NODOT 1063 1.61 0.78 1.94 198 HELO_NO_DOMAIN 1059 1.61 0.78 1.94 199 XMMoneyMeta_00 1057 0.64 0.77 0.58 200 XM_ProductURIs 1031 0.73 0.76 0.72 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 292968 87.70 94.36 85.06 2 T_SCC_BODY_TEXT_LINE 286310 82.01 79.20 83.13 3 RELAYCOUNTRY_US 274550 81.28 85.23 79.71 4 DKIM_SIGNED 252263 78.19 90.68 73.24 5 XM_DK_Pass 247244 76.11 87.01 71.79 6 DKIM_VALID 243871 75.19 86.25 70.81 7 XM_B_Unicode 236288 72.56 82.54 68.60 8 DCC_CHECK_NEGATIVE 232772 56.93 30.04 67.58 9 BAYES_50 200599 53.02 39.83 58.24 10 DKIM_VALID_AU 195242 60.58 70.39 56.69 11 XMListUnsubscribeExists 164722 54.12 70.01 47.83 12 XM_B_SpammyWords 150575 50.97 69.26 43.72 13 XM_B_Unicode3 135522 40.88 44.74 39.35 14 DCC_CHECK 111528 43.04 69.95 32.38 15 T_TM2_M_HEADER_IN_MSG 99892 27.34 23.14 29.00 16 DKIM_VALID_EF 96954 27.79 26.87 28.15 17 HTML_FONT_LOW_CONTRAST 93754 30.15 37.55 27.22 18 LOC_TINY_FONT_1 84139 29.47 42.19 24.43 19 RCVD_IN_MSPIKE_H2 83998 25.51 28.35 24.39 20 FVGT_m_MULTI_ODD 83681 26.87 33.37 24.30 21 XMSubLong 78033 23.03 23.99 22.66 22 T_KAM_HTML_FONT_INVALID 72176 22.37 25.94 20.96 23 MIME_HTML_ONLY 64085 20.89 26.65 18.61 24 XM_B_SpammyWords2 60338 23.90 39.99 17.52 25 ALL_TRUSTED 59013 12.78 1.79 17.13 26 XM_Multi_Part_URI 48419 15.99 20.88 14.06 27 TR_XM_DK_Unsub 44359 14.17 17.44 12.88 28 USER_IN_DEF_DKIM_WL 38151 8.78 2.99 11.08 29 BAYES_00 36097 7.81 1.06 10.48 30 UNPARSEABLE_RELAY 35015 11.81 15.97 10.17 31 BAYES_60 30639 8.58 7.77 8.90 32 TooManyTo_001 29323 7.84 6.16 8.51 33 XM_DKIMWhitelistDomains 28385 6.02 0.41 8.24 34 LotsOfNums_01 28298 8.04 7.61 8.22 35 XM_B_Unsub 27923 10.62 16.96 8.11 36 XM_Evil_Numbers_Gen 27320 8.59 10.24 7.93 37 TR_XM_DK_Bayes 24090 5.24 0.81 6.99 38 TR_XM_DK_Bayes1 23751 5.17 0.81 6.90 39 XM_H_GMP 22968 6.10 4.68 6.67 40 TR_XM_BayesUnsub 21996 9.21 16.35 6.39 41 TR_MAX_INTL_RELAY 21792 8.47 13.86 6.33 42 IN_ZIMBRA_NJ_WHITELIST 21587 4.51 0.07 6.27 43 RCVD_IN_MSPIKE_WL 20875 5.10 2.68 6.06 44 RCVD_IN_MSPIKE_H3 20875 5.10 2.68 6.06 45 TR_XM_DK_Bayes2 20680 4.51 0.74 6.00 46 LOTS_OF_MONEY 20223 8.14 13.86 5.87 47 XM_DK_Undo_02 20103 15.60 40.24 5.84 48 XMStrtUSub 18204 5.22 5.04 5.29 49 T_TooManySym_01 18053 4.38 2.20 5.24 50 MIME_QP_LONG_LINE 17521 4.62 3.44 5.09 51 XM_H_Long_From01 17441 5.16 5.39 5.06 52 BAYES_40 17422 4.23 2.14 5.06 53 XM_B_SpammyWords3 16927 7.68 14.66 4.91 54 ANY_BOUNCE_MESSAGE 16852 4.09 2.05 4.89 55 BOUNCE_MESSAGE 16849 4.08 2.05 4.89 56 XM_PDF 16399 3.66 0.88 4.76 57 HTML_IMAGE_RATIO_02 16197 5.61 7.92 4.70 58 BAYES_99 15987 12.66 32.90 4.64 59 BOTNET_IPINHOSTNAME 15841 7.40 14.46 4.60 60 HTML_IMAGE_RATIO_04 15348 4.81 5.70 4.46 61 RCVD_IN_IADB_LISTED 15162 3.62 1.64 4.40 62 RCVD_IN_VALIDITY_SAFE 14282 3.87 3.16 4.15 63 RELAYCOUNTRY_META 14153 6.82 13.66 4.11 64 XMSubMetaSx_00 13624 4.53 5.99 3.96 65 TR_XM_SpammyWords4 13525 6.34 12.42 3.93 66 MPART_ALT_DIFF 13487 4.55 6.14 3.92 67 RCVD_IN_IADB_SPF 13430 3.20 1.43 3.90 68 XM_B_Phish_Phrases 13422 4.25 5.15 3.90 69 BAYES_80 13272 5.23 8.69 3.85 70 XM_UncommonTLD01 13180 4.86 7.46 3.83 71 XM_Body_Dirty_Words 13046 5.34 9.25 3.79 72 RCVD_IN_VALIDITY_CERTIFIED 12843 3.42 2.64 3.73 73 BAYES_999 12468 9.90 25.75 3.62 74 T_REMOTE_IMAGE 12421 3.08 1.75 3.61 75 BAYES_20 12201 3.12 2.07 3.54 76 RCVD_IN_IADB_SENDERID 12073 2.89 1.35 3.51 77 RCVD_IN_IADB_DK 11751 2.83 1.36 3.41 78 FSL_BULK_SIG 11063 4.72 8.53 3.21 79 XM_SPF_SoftFail 10362 3.79 5.76 3.01 80 MAILING_LIST_MULTI 10125 2.69 2.07 2.94 81 HTML_IMAGE_RATIO_06 9818 3.09 3.70 2.85 82 XMNumbers 9790 3.87 6.45 2.84 83 T_TooManySym_02 9775 2.24 0.73 2.84 84 BAYES_05 9692 2.25 0.84 2.81 85 HTML_IMAGE_RATIO_08 9590 3.05 3.74 2.78 86 RCVD_IN_IADB_VOUCHED 9399 2.15 0.70 2.73 87 SCC_BODY_URI_ONLY 9333 2.83 3.12 2.71 88 TooManyTo_002 8581 2.03 0.87 2.49 89 BAYES_95 8510 3.10 4.69 2.47 90 MIME_HTML_ONLY_MULTI 8436 2.77 3.59 2.45 91 DKIM_INVALID 8392 3.00 4.43 2.44 92 HTML_MIME_NO_HTML_TAG 7845 2.10 1.64 2.28 93 TR_XM_DKIM_Undo 7687 9.78 28.81 2.23 94 INVALID_MSGID 7312 1.57 0.16 2.12 95 XM_B_SpammyTLD 7275 2.55 3.65 2.11 96 TR_XM_SpammyRelay 7205 4.25 9.69 2.09 97 XM_CamelCaseFrm001 7088 2.33 3.03 2.06 98 MIME_HTML_MOSTLY 7025 2.65 4.18 2.04 99 TM2_M_URI_OPT_OUT 6851 2.51 3.82 1.99 100 HELO_NODOT 6678 1.61 0.78 1.94 101 HELO_NO_DOMAIN 6676 1.61 0.78 1.94 102 TR_XM_PhishingBody 6401 2.64 4.61 1.86 103 RCVD_IN_IADB_OPTIN 6370 1.44 0.41 1.85 104 XM_B_Investor 6326 2.73 4.97 1.84 105 TO_MALFORMED 6304 1.32 0.02 1.83 106 FROM_EXCESS_BASE64 6239 1.97 2.37 1.81 107 XM_DK_Undo_01 6060 1.74 1.71 1.76 108 URI_NOVOWEL 5654 1.51 1.18 1.64 109 UNTRUSTED_Relay 5523 2.82 5.90 1.60 110 TR_DCC_Bayes_99 5507 7.67 23.00 1.60 111 TR_Symld_Words 5441 1.44 1.07 1.58 112 T_XMDrugObfuBody_14 5402 2.12 3.53 1.57 113 BOTNET 5383 3.84 9.59 1.56 114 XM_SendGrid 5289 1.65 1.95 1.54 115 T_XMDrugObfuBody_08 5288 2.08 3.45 1.54 116 TooManyTo_003 5110 1.27 0.74 1.48 117 TR_XM_UnparsRelay 5088 3.58 8.88 1.48 118 XM_OfRef6 5047 1.77 2.55 1.47 119 XMDiploma_00 4997 1.66 2.19 1.45 120 XM_B_Unsub2 4993 1.77 2.59 1.45 121 TVD_RCVD_IP 4918 1.26 0.82 1.43 122 XM_H_Trusted_IP 4843 1.01 0.00 1.41 123 IN_HORDE_ADDRESS_BOOK 4823 1.02 0.05 1.40 124 XMSexyCombo_05 4821 2.38 4.86 1.40 125 TR_XM_SpammyWords5 4757 2.41 5.01 1.38 126 SUBJ_ALL_CAPS 4715 1.79 2.87 1.37 127 TVD_SPACE_RATIO 4370 0.94 0.12 1.27 128 URI_HEX 4352 1.47 1.98 1.26 129 TM2_M_VERY_LONG_WORD 4287 1.84 3.34 1.24 130 XM_GoogleGroups 4108 1.00 0.50 1.19 131 XMCapTrack 4070 0.97 0.44 1.18 132 KHOP_HELO_FCRDNS 4044 1.22 1.33 1.17 133 XMBody_95 3912 0.86 0.17 1.14 134 TooManyTo_004 3810 0.99 0.68 1.11 135 XMBSHREFv2 3725 0.87 0.32 1.08 136 XMGappySubj_01 3690 0.81 0.14 1.07 137 XMNoVowels 3645 0.92 0.58 1.06 138 RELAYCOUNTRY_CA 3566 2.04 4.59 1.04 139 XM_H_Long_From02 3545 0.96 0.79 1.03 140 XM_UB50 3526 1.61 3.10 1.02 141 T_FILL_THIS_FORM_SHORT 3491 1.27 1.91 1.01 142 T_TooManySym_03 3307 0.78 0.33 0.96 143 DKIM_ADSP_CUSTOM_MED 3266 1.05 1.31 0.95 144 TR_XM_DK_SendGrid 3253 0.95 0.95 0.94 145 TooManyTo_005 3109 0.83 0.65 0.90 146 XMSubNoVowel 3055 0.72 0.30 0.89 147 XM_B_SpammyWords4 3041 1.46 2.92 0.88 148 XMGenDplmaNmb 3022 0.93 1.07 0.88 149 XM_ShortIntro_01 2997 0.77 0.53 0.87 150 HTTPS_HTTP_MISMATCH 2951 1.04 1.50 0.86 151 SpammyFromTLD_01 2904 1.73 3.96 0.84 152 T_OBFU_PDF_ATTACH 2777 0.61 0.10 0.81 153 TR_MetaPhish_Combo_01 2769 0.99 1.47 0.80 154 XMLngstWrd_00 2761 0.95 1.34 0.80 155 FROM_GOV_DKIM_AU 2737 0.65 0.29 0.79 156 XM_H_PHPMailer 2708 0.96 1.40 0.79 157 RCVD_IN_RP_SAFE 2651 0.76 0.75 0.77 158 RELAYCOUNTRY_AU 2624 1.28 2.58 0.76 159 XMGappySubj_02 2586 0.56 0.07 0.75 160 XMHTML_After_End 2575 0.88 1.22 0.75 161 XMStockSpam_06 2556 0.99 1.63 0.74 162 XMSubMetaI_00 2550 0.95 1.47 0.74 163 URI_TRY_3LD 2532 0.88 1.24 0.74 164 XM_B_COPY_HTML 2507 0.85 1.16 0.73 165 XM_ProductURIs 2480 0.73 0.76 0.72 166 MSGID_NOFQDN1 2422 0.51 0.01 0.70 167 RCVD_IN_RP_CERTIFIED 2374 0.68 0.65 0.69 168 USER_IN_WELCOMELIST 2334 0.49 0.00 0.68 169 USER_IN_WHITELIST 2334 0.49 0.00 0.68 170 TR_XM_Base64_M1 2301 0.91 1.52 0.67 171 NML_ADSP_CUSTOM_MED 2238 0.77 1.07 0.65 172 T_XMHurry_00 2171 1.04 2.08 0.63 173 T_XMDrugObfuBody_00 2131 0.85 1.45 0.62 174 XMPhish30 2116 0.81 1.29 0.61 175 FILL_THIS_FORM 2061 0.51 0.29 0.60 176 RCVD_IN_BL_SPAMCOP_NET 2058 2.16 6.09 0.60 177 XMBdyGiftCard01 2040 0.81 1.35 0.59 178 SHORT_HELO_AND_INLINE_IMAGE 2036 0.44 0.05 0.59 179 MPART_ALT_DIFF_COUNT 2027 0.71 1.03 0.59 180 XMMoneyMeta_00 2003 0.64 0.77 0.58 181 XMBody_17 1911 1.36 3.40 0.55 182 FORGED_GMAIL_RCVD 1846 0.68 1.05 0.54 183 XMBrknScrpt_02 1794 0.91 1.89 0.52 184 TM2_M_BODY_EMPTY 1785 1.01 2.26 0.52 185 TR_XM_PHPForged 1778 1.64 4.47 0.52 186 T_Symld_Words_02 1774 0.57 0.70 0.52 187 TR_XM_FormFill2 1758 1.60 4.36 0.51 188 HTML_IMAGE_ONLY_28 1731 0.44 0.28 0.50 189 TR_XM_PHPDW 1718 1.61 4.42 0.50 190 XMPhish14 1711 0.77 1.44 0.50 191 XM_H_PHPOS 1679 1.58 4.34 0.49 192 RELAYCOUNTRY_GB 1649 0.53 0.64 0.48 193 MISSING_HEADERS 1557 0.44 0.42 0.45 194 XM_B_COVIDMETA 1550 0.56 0.84 0.45 195 THIS_AD 1541 0.75 1.52 0.45 196 HTML_FONT_FACE_BAD 1512 0.55 0.81 0.44 197 XM_B_FormFill 1511 0.33 0.07 0.44 198 PLING_QUERY 1495 0.54 0.80 0.43 199 RCVD_IN_SORBS_DUL 1489 0.33 0.08 0.43 200 XMSubMetaSxObfu_02 1465 0.45 0.53 0.43 ----------------------------------------------------------------------