Email: 664704 Autolearn: 0 AvgScore: 0.83 AvgScanTime: 2.15 sec Spam: 124940 Autolearn: 0 AvgScore: 12.31 AvgScanTime: 3.74 sec Ham: 539764 Autolearn: 0 AvgScore: -1.83 AvgScanTime: 1.78 sec Time Spent Running SA: 397.14 hours Time Spent Processing Spam: 129.93 hours Time Spent Processing Ham: 267.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 119335 90.46 95.51 89.29 2 DCC_CHECK 101146 44.10 80.96 35.57 3 RELAYCOUNTRY_US 100730 83.67 80.62 84.38 4 DKIM_SIGNED 99874 68.50 79.94 65.85 5 XM_DK_Pass 96800 67.10 77.48 64.70 6 XM_B_Unicode 94579 73.59 75.70 73.10 7 XMListUnsubscribeExists 86021 48.43 68.85 43.70 8 DKIM_VALID 81694 61.42 65.39 60.50 9 DKIM_VALID_AU 61768 45.96 49.44 45.16 10 BAYES_50 57574 48.30 46.08 48.81 11 XM_DK_Undo_02 51583 12.35 41.29 5.65 12 XM_B_Unicode3 49073 38.84 39.28 38.74 13 MIME_HTML_ONLY 46666 31.25 37.35 29.84 14 LOC_TINY_FONT_1 41229 32.85 33.00 32.81 15 HTML_FONT_LOW_CONTRAST 37364 25.14 29.91 24.04 16 DKIM_VALID_EF 36541 24.21 29.25 23.05 17 T_KAM_HTML_FONT_INVALID 34344 18.14 27.49 15.97 18 BAYES_99 32621 7.10 26.11 2.69 19 FVGT_m_MULTI_ODD 31005 20.28 24.82 19.23 20 XMSubLong 28817 19.29 23.06 18.42 21 BOTNET 28660 6.82 22.94 3.08 22 XM_UncommonTLD01 28643 6.71 22.93 2.96 23 TR_DCC_Bayes_99 26431 5.10 21.15 1.38 24 RELAYCOUNTRY_META 26431 7.78 21.15 4.68 25 BAYES_999 25106 5.50 20.09 2.13 26 T_TM2_M_HEADER_IN_MSG 24763 24.76 19.82 25.91 27 XM_Body_Dirty_Words 23857 12.61 19.09 11.11 28 DCC_CHECK_NEGATIVE 21788 54.11 17.44 62.60 29 FSL_BULK_SIG 21063 7.97 16.86 5.92 30 XM_Multi_Part_URI 18628 11.22 14.91 10.37 31 DKIM_INVALID 18180 7.08 14.55 5.34 32 BOTNET_IPINHOSTNAME 17290 5.83 13.84 3.98 33 XM_B_Phish_Phrases 16461 7.48 13.18 6.16 34 UNTRUSTED_Relay 15613 3.55 12.50 1.48 35 LOTS_OF_MONEY 14317 8.34 11.46 7.62 36 NO_DNS_FOR_FROM 14263 4.74 11.42 3.20 37 HTML_IMAGE_RATIO_02 14160 7.94 11.33 7.16 38 XM_B_Unsub 12800 8.79 10.24 8.46 39 XMSexyCombo_05 12475 4.96 9.98 3.79 40 RCVD_IN_MSPIKE_H2 12118 12.65 9.70 13.33 41 XM_Evil_Numbers_Gen 11976 7.71 9.59 7.28 42 XM_CamelCaseFrm001 11776 3.28 9.43 1.85 43 LotsOfNums_01 10474 7.30 8.38 7.05 44 XM_B_COVIDMETA 10260 3.10 8.21 1.91 45 XM_UB50 9894 2.21 7.92 0.89 46 XM_H_Long_From01 9746 5.53 7.80 5.01 47 BAYES_80 9356 3.38 7.49 2.43 48 RCVD_IN_MSPIKE_BL 8766 2.77 7.02 1.79 49 RCVD_IN_MSPIKE_L3 8647 2.74 6.92 1.78 50 KHOP_HELO_FCRDNS 8509 7.21 6.81 7.30 51 MPART_ALT_DIFF 8279 14.55 6.63 16.38 52 TR_XM_COVIDMETA4 7954 2.34 6.37 1.41 53 BAYES_60 7859 5.02 6.29 4.73 54 XMSubMetaSx_00 7850 3.37 6.28 2.70 55 RELAYCOUNTRY_CA 7576 2.34 6.06 1.48 56 SpammyFromTLD_02 7575 1.30 6.06 0.20 57 XM_SPF_SoftFail 7560 2.41 6.05 1.57 58 HTML_IMAGE_RATIO_04 7366 4.89 5.90 4.66 59 TooManyTo_001 7014 7.60 5.61 8.06 60 XMHTML_After_End 6696 1.43 5.36 0.52 61 URIBL_SBL_A 6501 1.11 5.20 0.17 62 FROM_MISSP_REPLYTO 6353 0.96 5.08 0.01 63 RDNS_DYNAMIC 6353 1.20 5.08 0.30 64 XM_B_SpammyTLD 6292 2.36 5.04 1.74 65 UNPARSEABLE_RELAY 6199 6.20 4.96 6.49 66 PDS_OTHER_BAD_TLD 6016 1.34 4.82 0.53 67 BODY_URI_ONLY 5811 0.96 4.65 0.11 68 XMNumbers 5684 3.15 4.55 2.83 69 MIME_QP_LONG_LINE 5310 5.01 4.25 5.18 70 XM_SendGrid 5268 5.58 4.22 5.90 71 T_XMDrugObfuBody_08 5199 1.77 4.16 1.21 72 MIME_HTML_MOSTLY 5111 2.55 4.09 2.19 73 FROM_SUSPICIOUS_NTLD 5103 0.79 4.08 0.03 74 FROM_SUSPICIOUS_NTLD_FP 5064 0.78 4.05 0.03 75 FROM_MISSP_DYNIP 5018 0.75 4.02 0.00 76 BAYES_95 4948 1.98 3.96 1.52 77 XM_DIRTYINTL 4890 1.11 3.91 0.46 78 RELAYCOUNTRY_FR 4761 0.87 3.81 0.19 79 XMStrtUSub 4700 3.91 3.76 3.95 80 TR_XM_MaxBayes 4595 0.70 3.68 0.01 81 BOTNET_NORDNS 4480 0.69 3.59 0.02 82 RCVD_IN_BL_SPAMCOP_NET 4412 1.22 3.53 0.69 83 DATE_IN_PAST_03_06 4394 0.80 3.52 0.17 84 BAYES_40 4346 6.31 3.48 6.96 85 NORDNS_LOW_CONTRAST 4238 0.65 3.39 0.02 86 XMBody_17 4138 1.05 3.31 0.53 87 T_REMOTE_IMAGE 4037 3.38 3.23 3.42 88 RCVD_IN_RP_RNBL 4011 0.67 3.21 0.08 89 TM2_M_URI_OPT_OUT 3987 3.09 3.19 3.06 90 SpammyFromTLD_01 3914 1.17 3.13 0.72 91 XM_OfRef6 3739 1.51 2.99 1.16 92 TR_XM_PhishingBody 3625 1.38 2.90 1.03 93 HTML_IMAGE_RATIO_06 3608 3.07 2.89 3.11 94 RCVD_IN_MSPIKE_WL 3594 7.05 2.88 8.01 95 RCVD_IN_MSPIKE_H3 3594 7.05 2.88 8.01 96 XM_URI_RBL 3593 0.67 2.88 0.16 97 MIME_HTML_ONLY_MULTI 3467 12.45 2.77 14.69 98 T_XMHurry_00 3339 0.96 2.67 0.57 99 TR_LOTS_OF_MONEY3 3279 0.85 2.62 0.44 100 DATE_IN_PAST_06_12 3261 0.52 2.61 0.03 101 BAYES_20 3229 5.74 2.58 6.47 102 XM_B_Unsub2 3216 1.60 2.57 1.37 103 LongTLD 3179 0.59 2.54 0.14 104 BAYES_00 3142 18.32 2.51 21.98 105 TR_XM_PHPDW 3052 0.92 2.44 0.57 106 FROM_EXCESS_BASE64 3034 2.39 2.43 2.39 107 TR_XM_PHPForged 3033 0.91 2.43 0.56 108 T_TooManySym_01 3007 3.53 2.41 3.78 109 TR_XM_FormFill2 3001 0.90 2.40 0.56 110 XM_H_PHPOS 2995 0.90 2.40 0.55 111 HTML_IMAGE_RATIO_08 2870 2.24 2.30 2.23 112 TM2_M_VERY_LONG_WORD 2757 1.32 2.21 1.12 113 TR_XM_INV_DKIM 2725 0.47 2.18 0.08 114 URI_HEX 2575 1.35 2.06 1.18 115 DATE_IN_PAST_12_24 2481 0.39 1.99 0.02 116 XMDiploma_00 2433 1.39 1.95 1.26 117 TR_XM_DK_Bayes 2305 9.93 1.84 11.80 118 RCVD_IN_IADB_LISTED 2292 3.86 1.83 4.33 119 HTML_MIME_NO_HTML_TAG 2281 1.97 1.83 2.00 120 XMSexyCombo_01 2167 0.64 1.73 0.38 121 SUBJ_ALL_CAPS 2106 1.59 1.69 1.57 122 RCVD_IN_IADB_SPF 2097 3.36 1.68 3.75 123 RELAYCOUNTRY_GB 2095 1.11 1.68 0.98 124 RCVD_IN_RP_SAFE 2029 6.28 1.62 7.36 125 RCVD_IN_IADB_DK 2021 2.92 1.62 3.22 126 RCVD_IN_IADB_SENDERID 2004 2.96 1.60 3.28 127 TR_XM_DK_SendGrid 1976 2.85 1.58 3.15 128 TR_XM_RelayPhish 1896 0.36 1.52 0.09 129 RELAYCOUNTRY_IN 1895 0.35 1.52 0.07 130 TR_XM_MaxSPIKE 1874 0.33 1.50 0.06 131 TR_Mismatch_TLD_01 1867 0.41 1.49 0.16 132 BAYES_05 1864 3.86 1.49 4.41 133 T_XMDrugObfuBody_14 1838 1.43 1.47 1.42 134 REPLYTO_WITHOUT_TO_CC 1820 0.32 1.46 0.06 135 URI_TRY_3LD 1801 1.14 1.44 1.06 136 MAILING_LIST_MULTI 1739 2.00 1.39 2.15 137 HDRS_LCASE_IMGONLY 1711 0.27 1.37 0.02 138 RELAYCOUNTRY_DE 1691 0.52 1.35 0.33 139 SUBJECT_NEEDS_ENCODING 1675 0.25 1.34 0.00 140 SUBJ_ILLEGAL_CHARS 1670 0.25 1.34 0.00 141 SHORT_URI_2 1642 0.27 1.31 0.03 142 HTML_SHORT_LINK_IMG_1 1641 0.27 1.31 0.02 143 XMStockSpam_06 1627 1.07 1.30 1.01 144 T_XMDrugObfuBody_00 1620 0.82 1.30 0.71 145 XMSubMetaI_00 1558 0.54 1.25 0.38 146 XM_DK_Undo_01 1552 1.67 1.24 1.77 147 XMPhish08 1534 0.63 1.23 0.50 148 T_FILL_THIS_FORM_SHORT 1526 1.19 1.22 1.19 149 NO_FM_NAME_IP_HOSTN 1524 0.23 1.22 0.00 150 TR_Mismatch_TLD_02 1500 0.27 1.20 0.06 151 SHORT_SHORTNER 1480 0.24 1.18 0.02 152 XM_UB60 1470 0.27 1.18 0.06 153 HTML_IMAGE_ONLY_04 1468 0.27 1.17 0.06 154 XMGenDplmaNmb 1442 0.83 1.15 0.76 155 TR_Symld_Words 1432 1.26 1.15 1.29 156 XM_ProductURIs 1428 1.22 1.14 1.24 157 XM_H_PHPMailer 1385 0.62 1.11 0.51 158 TR_XM_DK_Bayes1 1365 9.18 1.09 11.05 159 TR_XM_COVIDMETA1 1355 0.28 1.08 0.09 160 XMPhish30 1346 0.43 1.08 0.28 161 T_Symld_Words_02 1323 0.61 1.06 0.51 162 MIME_HEADER_CTYPE_ONLY 1308 0.40 1.05 0.25 163 HK_RANDOM_REPLYTO 1303 0.39 1.04 0.23 164 XM_Combo_Sbj 1289 0.30 1.03 0.13 165 XMSubMetaSxObfu_03 1258 0.47 1.01 0.35 166 TR_MetaPhish_Combo_01 1250 0.77 1.00 0.71 167 XMBrknScrpt_02 1245 0.87 1.00 0.84 168 XM_H_MailChimp 1243 0.30 0.99 0.14 169 ALL_TRUSTED 1202 10.37 0.96 12.55 170 XM_H_PHPOS_M 1194 0.33 0.96 0.18 171 XM_UB80 1175 0.19 0.94 0.01 172 TO_EQ_FM_DOM_HTML_IMG 1172 0.19 0.94 0.01 173 HTML_TAG_BALANCE_BODY 1165 0.43 0.93 0.31 174 HTML_SHORT_CENTER 1163 0.18 0.93 0.00 175 MPART_ALT_DIFF_COUNT 1160 0.50 0.93 0.40 176 RCVD_IN_PSBL 1153 0.21 0.92 0.04 177 RCVD_IN_RP_CERTIFIED 1134 5.41 0.91 6.45 178 HTTPS_HTTP_MISMATCH 1131 0.85 0.91 0.84 179 XM_H_Long_From02 1130 0.87 0.90 0.87 180 XM_UB99 1117 0.17 0.89 0.00 181 URIBL_BLACK 1087 0.18 0.87 0.01 182 DKIM_ADSP_CUSTOM_MED 1078 1.12 0.86 1.18 183 REMOVE_BEFORE_LINK 1064 0.35 0.85 0.24 184 XM_PDF 1044 3.50 0.84 4.12 185 TR_LOTS_OF_MONEY2 1042 0.75 0.83 0.73 186 T_MONEY_PERCENT 1042 0.75 0.83 0.73 187 XMCapTrack 1040 1.25 0.83 1.35 188 XMReplyNow 1039 0.25 0.83 0.11 189 T_TooManySym_02 1034 1.73 0.83 1.94 190 TR_XM_COVIDMETA3 1029 0.18 0.82 0.03 191 XMMoneyMeta_00 1011 0.71 0.81 0.69 192 DIET_1 995 0.35 0.80 0.25 193 XMSubNoVowel 986 3.60 0.79 4.25 194 TR_XM_DK_Bayes2 964 8.07 0.77 9.76 195 DEAR_FRIEND 959 0.18 0.77 0.05 196 RELAYCOUNTRY_AT 956 0.28 0.77 0.17 197 XMBody_78 948 0.40 0.76 0.32 198 XM_BadFromFormat 942 0.23 0.75 0.11 199 MISSING_HEADERS 931 0.59 0.75 0.56 200 HTML_TITLE_SUBJ_DIFF 925 0.19 0.74 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 481941 90.46 95.51 89.29 2 RELAYCOUNTRY_US 455428 83.67 80.62 84.38 3 XM_B_Unicode 394582 73.59 75.70 73.10 4 DKIM_SIGNED 355427 68.50 79.94 65.85 5 XM_DK_Pass 349249 67.10 77.48 64.70 6 DCC_CHECK_NEGATIVE 337884 54.11 17.44 62.60 7 DKIM_VALID 326579 61.42 65.39 60.50 8 BAYES_50 263458 48.30 46.08 48.81 9 DKIM_VALID_AU 243735 45.96 49.44 45.16 10 XMListUnsubscribeExists 235885 48.43 68.85 43.70 11 XM_B_Unicode3 209102 38.84 39.28 38.74 12 DCC_CHECK 191982 44.10 80.96 35.57 13 LOC_TINY_FONT_1 177101 32.85 33.00 32.81 14 MIME_HTML_ONLY 161085 31.25 37.35 29.84 15 T_TM2_M_HEADER_IN_MSG 139850 24.76 19.82 25.91 16 HTML_FONT_LOW_CONTRAST 129769 25.14 29.91 24.04 17 DKIM_VALID_EF 124389 24.21 29.25 23.05 18 BAYES_00 118636 18.32 2.51 21.98 19 FVGT_m_MULTI_ODD 103822 20.28 24.82 19.23 20 XMSubLong 99428 19.29 23.06 18.42 21 MPART_ALT_DIFF 88430 14.55 6.63 16.38 22 T_KAM_HTML_FONT_INVALID 86224 18.14 27.49 15.97 23 MIME_HTML_ONLY_MULTI 79312 12.45 2.77 14.69 24 RCVD_IN_MSPIKE_H2 71954 12.65 9.70 13.33 25 HTML_FONT_FACE_BAD 70768 10.76 0.60 13.11 26 ALL_TRUSTED 67752 10.37 0.96 12.55 27 TR_XM_DK_Bayes 63689 9.93 1.84 11.80 28 IN_ZIMBRA_NJ_WHITELIST 63146 9.50 0.02 11.70 29 XM_Body_Dirty_Words 59942 12.61 19.09 11.11 30 TR_XM_DK_Bayes1 59634 9.18 1.09 11.05 31 XM_Multi_Part_URI 55968 11.22 14.91 10.37 32 TR_XM_DK_Bayes2 52691 8.07 0.77 9.76 33 XM_B_Unsub 45649 8.79 10.24 8.46 34 TooManyTo_001 43522 7.60 5.61 8.06 35 RCVD_IN_MSPIKE_H3 43262 7.05 2.88 8.01 36 RCVD_IN_MSPIKE_WL 43262 7.05 2.88 8.01 37 LOTS_OF_MONEY 41139 8.34 11.46 7.62 38 RCVD_IN_RP_SAFE 39743 6.28 1.62 7.36 39 KHOP_HELO_FCRDNS 39429 7.21 6.81 7.30 40 XM_Evil_Numbers_Gen 39288 7.71 9.59 7.28 41 HTML_IMAGE_RATIO_02 38646 7.94 11.33 7.16 42 LotsOfNums_01 38074 7.30 8.38 7.05 43 BAYES_40 37573 6.31 3.48 6.96 44 UNPARSEABLE_RELAY 35005 6.20 4.96 6.49 45 BAYES_20 34933 5.74 2.58 6.47 46 RCVD_IN_RP_CERTIFIED 34831 5.41 0.91 6.45 47 XM_DKIMWhitelistDomains 33551 5.06 0.04 6.22 48 XM_B_Phish_Phrases 33241 7.48 13.18 6.16 49 FSL_BULK_SIG 31941 7.97 16.86 5.92 50 XM_SendGrid 31853 5.58 4.22 5.90 51 XM_DK_Undo_02 30487 12.35 41.29 5.65 52 DKIM_INVALID 28848 7.08 14.55 5.34 53 MIME_QP_LONG_LINE 27960 5.01 4.25 5.18 54 XM_H_Long_From01 27032 5.53 7.80 5.01 55 BAYES_60 25511 5.02 6.29 4.73 56 RELAYCOUNTRY_META 25259 7.78 21.15 4.68 57 HTML_IMAGE_RATIO_04 25134 4.89 5.90 4.66 58 BAYES_05 23802 3.86 1.49 4.41 59 RCVD_IN_IADB_LISTED 23393 3.86 1.83 4.33 60 XMSubNoVowel 22930 3.60 0.79 4.25 61 XM_PDF 22223 3.50 0.84 4.12 62 BOTNET_IPINHOSTNAME 21472 5.83 13.84 3.98 63 XMStrtUSub 21308 3.91 3.76 3.95 64 XMSexyCombo_05 20474 4.96 9.98 3.79 65 T_TooManySym_01 20424 3.53 2.41 3.78 66 RCVD_IN_IADB_SPF 20223 3.36 1.68 3.75 67 T_REMOTE_IMAGE 18443 3.38 3.23 3.42 68 RCVD_IN_IADB_SENDERID 17679 2.96 1.60 3.28 69 RCVD_IN_IADB_DK 17396 2.92 1.62 3.22 70 NO_DNS_FOR_FROM 17265 4.74 11.42 3.20 71 TR_XM_DK_SendGrid 16985 2.85 1.58 3.15 72 HTML_IMAGE_RATIO_06 16800 3.07 2.89 3.11 73 BOTNET 16651 6.82 22.94 3.08 74 TM2_M_URI_OPT_OUT 16531 3.09 3.19 3.06 75 XM_UncommonTLD01 15957 6.71 22.93 2.96 76 ANY_BOUNCE_MESSAGE 15581 2.43 0.44 2.89 77 BOUNCE_MESSAGE 15580 2.43 0.44 2.89 78 XMNumbers 15255 3.15 4.55 2.83 79 XM_H_Trusted_IP 14959 2.25 0.00 2.77 80 RCVD_IN_IADB_VOUCHED 14663 2.33 0.65 2.72 81 XMSubMetaSx_00 14568 3.37 6.28 2.70 82 BAYES_99 14542 7.10 26.11 2.69 83 BAYES_80 13117 3.38 7.49 2.43 84 FROM_EXCESS_BASE64 12883 2.39 2.43 2.39 85 TooManyTo_002 12601 2.00 0.57 2.33 86 HTML_IMAGE_RATIO_08 12027 2.24 2.30 2.23 87 MIME_HTML_MOSTLY 11808 2.55 4.09 2.19 88 MAILING_LIST_MULTI 11588 2.00 1.39 2.15 89 BAYES_999 11483 5.50 20.09 2.13 90 HTML_MIME_NO_HTML_TAG 10788 1.97 1.83 2.00 91 T_TooManySym_02 10490 1.73 0.83 1.94 92 XM_B_COVIDMETA 10322 3.10 8.21 1.91 93 XM_CamelCaseFrm001 9999 3.28 9.43 1.85 94 RCVD_IN_MSPIKE_BL 9646 2.77 7.02 1.79 95 RCVD_IN_MSPIKE_L3 9587 2.74 6.92 1.78 96 XM_DK_Undo_01 9543 1.67 1.24 1.77 97 XM_B_SpammyTLD 9387 2.36 5.04 1.74 98 RCVD_IN_IADB_OPTIN 9143 1.46 0.47 1.69 99 TooManyTo_003 8978 1.44 0.45 1.66 100 TVD_RCVD_IP 8685 1.43 0.67 1.61 101 HELO_NODOT 8542 1.42 0.72 1.58 102 HELO_NO_DOMAIN 8540 1.42 0.71 1.58 103 SUBJ_ALL_CAPS 8489 1.59 1.69 1.57 104 XM_SPF_SoftFail 8452 2.41 6.05 1.57 105 BAYES_95 8191 1.98 3.96 1.52 106 RELAYCOUNTRY_CA 8006 2.34 6.06 1.48 107 UNTRUSTED_Relay 7997 3.55 12.50 1.48 108 T_XMDrugObfuBody_14 7686 1.43 1.47 1.42 109 TR_XM_COVIDMETA4 7617 2.34 6.37 1.41 110 IN_HORDE_ADDRESS_BOOK 7564 1.15 0.04 1.40 111 INVALID_MSGID 7511 1.17 0.23 1.39 112 TR_DCC_Bayes_99 7460 5.10 21.15 1.38 113 XM_B_Unsub2 7406 1.60 2.57 1.37 114 USER_IN_DEF_DKIM_WL 7287 1.10 0.00 1.35 115 XMCapTrack 7273 1.25 0.83 1.35 116 XM_GoogleGroups 7178 1.18 0.54 1.33 117 TO_MALFORMED 7148 1.08 0.03 1.32 118 TR_Symld_Words 6959 1.26 1.15 1.29 119 TooManyTo_004 6929 1.11 0.37 1.28 120 XMDiploma_00 6805 1.39 1.95 1.26 121 CK_HELO_DYNAMIC_SPLIT_IP 6743 1.05 0.20 1.25 122 HELO_DYNAMIC_IPADDR2 6735 1.03 0.07 1.25 123 XM_ProductURIs 6674 1.22 1.14 1.24 124 T_XMDrugObfuBody_08 6551 1.77 4.16 1.21 125 T_FILL_THIS_FORM_SHORT 6412 1.19 1.22 1.19 126 URI_HEX 6391 1.35 2.06 1.18 127 DKIM_ADSP_CUSTOM_MED 6376 1.12 0.86 1.18 128 XM_OfRef6 6271 1.51 2.99 1.16 129 XMBdyGiftCard01 6068 1.04 0.69 1.12 130 TM2_M_VERY_LONG_WORD 6039 1.32 2.21 1.12 131 TooManyTo_005 5930 0.95 0.30 1.10 132 URI_TRY_3LD 5748 1.14 1.44 1.06 133 TR_XM_PhishingBody 5570 1.38 2.90 1.03 134 FUZZY_CREDIT 5556 0.85 0.06 1.03 135 XMStockSpam_06 5463 1.07 1.30 1.01 136 RELAYCOUNTRY_GB 5266 1.11 1.68 0.98 137 XMGappySubj_01 5158 0.82 0.24 0.96 138 XM_UB50 4809 2.21 7.92 0.89 139 NML_ADSP_CUSTOM_MED 4703 0.83 0.67 0.87 140 XM_H_Long_From02 4678 0.87 0.90 0.87 141 XMBrknScrpt_02 4534 0.87 1.00 0.84 142 HTTPS_HTTP_MISMATCH 4521 0.85 0.91 0.84 143 XMGenDplmaNmb 4085 0.83 1.15 0.76 144 T_MONEY_PERCENT 3917 0.75 0.83 0.73 145 TR_LOTS_OF_MONEY2 3917 0.75 0.83 0.73 146 SpammyFromTLD_01 3893 1.17 3.13 0.72 147 TR_MetaPhish_Combo_01 3853 0.77 1.00 0.71 148 T_XMDrugObfuBody_00 3832 0.82 1.30 0.71 149 XMMoneyMeta_00 3736 0.71 0.81 0.69 150 RCVD_IN_BL_SPAMCOP_NET 3699 1.22 3.53 0.69 151 XMNoVowels 3506 0.65 0.63 0.65 152 T_TooManySym_03 3408 0.59 0.40 0.63 153 XM_SPF_Unknown 3167 0.61 0.74 0.59 154 XM_E_Blogspot 3143 0.50 0.14 0.58 155 TR_XM_PHPDW 3078 0.92 2.44 0.57 156 T_XMHurry_00 3059 0.96 2.67 0.57 157 TR_XM_PHPForged 3033 0.91 2.43 0.56 158 MISSING_HEADERS 3004 0.59 0.75 0.56 159 TR_XM_FormFill2 3004 0.90 2.40 0.56 160 XM_H_PHPOS 2969 0.90 2.40 0.55 161 TR_MSPIKEBAYES00 2901 0.44 0.01 0.54 162 PDS_OTHER_BAD_TLD 2866 1.34 4.82 0.53 163 XMBody_17 2865 1.05 3.31 0.53 164 XMHTML_After_End 2814 1.43 5.36 0.52 165 RCVD_IN_SORBS_DUL 2796 0.43 0.06 0.52 166 XM_H_PHPMailer 2767 0.62 1.11 0.51 167 T_Symld_Words_02 2748 0.61 1.06 0.51 168 XMPhish08 2674 0.63 1.23 0.50 169 XM_ShortIntro_01 2660 0.46 0.33 0.49 170 PLING_QUERY 2624 0.53 0.72 0.49 171 T_OBFU_PDF_ATTACH 2575 0.42 0.17 0.48 172 FROM_GOV_SPOOF 2549 0.47 0.44 0.47 173 XM_DIRTYINTL 2509 1.11 3.91 0.46 174 FROM_GOV_DKIM_AU 2494 0.39 0.10 0.46 175 TR_LOTS_OF_MONEY3 2368 0.85 2.62 0.44 176 TM2_M_BODY_EMPTY 2352 0.38 0.13 0.44 177 HTML_IMAGE_ONLY_20 2349 0.43 0.39 0.44 178 FORGED_GMAIL_RCVD 2308 0.48 0.69 0.43 179 HTML_IMAGE_ONLY_28 2187 0.42 0.47 0.41 180 SHORT_HELO_AND_INLINE_IMAGE 2184 0.34 0.05 0.40 181 MPART_ALT_DIFF_COUNT 2172 0.50 0.93 0.40 182 XMOemUri 2112 0.39 0.37 0.39 183 HTML_IMAGE_ONLY_32 2102 0.35 0.18 0.39 184 XMSexyCombo_01 2058 0.64 1.73 0.38 185 XMSubMetaI_00 2055 0.54 1.25 0.38 186 URI_NOVOWEL 2052 0.41 0.55 0.38 187 AC_DIV_BONANZA 1979 0.32 0.12 0.37 188 XMHTMLBadTable_001 1960 0.41 0.62 0.36 189 FILL_THIS_FORM 1931 0.32 0.17 0.36 190 XM_RXBody 1893 0.37 0.44 0.35 191 XMSubMetaSxObfu_03 1869 0.47 1.01 0.35 192 USER_IN_WHITELIST 1851 0.28 0.00 0.34 193 XM_B_REG_HTML 1837 0.32 0.24 0.34 194 XMBody_95 1831 0.29 0.07 0.34 195 XMGappySubj_02 1814 0.30 0.17 0.34 196 RELAYCOUNTRY_DE 1774 0.52 1.35 0.33 197 FSL_THIS_IS_ADV 1768 0.33 0.35 0.33 198 XMSubMetaSxObfu_02 1758 0.32 0.31 0.33 199 TVD_SPACE_RATIO 1741 0.28 0.11 0.32 200 XMBody_78 1703 0.40 0.76 0.32 ----------------------------------------------------------------------