Email: 666944 Autolearn: 0 AvgScore: -0.21 AvgScanTime: 2.16 sec Spam: 91276 Autolearn: 0 AvgScore: 11.87 AvgScanTime: 3.32 sec Ham: 575668 Autolearn: 0 AvgScore: -2.12 AvgScanTime: 1.98 sec Time Spent Running SA: 400.78 hours Time Spent Processing Spam: 84.20 hours Time Spent Processing Ham: 316.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 88816 97.98 97.30 98.08 2 HTML_MESSAGE 86772 90.68 95.07 89.99 3 DKIM_SIGNED 73367 76.37 80.38 75.74 4 XM_DK_Pass 70828 75.03 77.60 74.62 5 XM_B_Unicode 66632 73.36 73.00 73.42 6 XMListUnsubscribeExists 63492 55.67 69.56 53.47 7 RELAYCOUNTRY_US 63148 80.51 69.18 82.31 8 DKIM_VALID 61233 69.73 67.09 70.14 9 XM_DK_Undo_02 49344 16.63 54.06 10.69 10 DKIM_VALID_AU 44120 51.92 48.34 52.49 11 MIME_HTML_ONLY 38029 25.54 41.66 22.98 12 BAYES_99 36487 11.71 39.97 7.23 13 BAYES_50 35304 51.37 38.68 53.38 14 XM_B_Unicode3 34408 41.75 37.70 42.40 15 DKIM_VALID_EF 30515 27.13 33.43 26.13 16 BAYES_999 30108 9.41 32.99 5.67 17 LOC_TINY_FONT_1 29020 27.95 31.79 27.34 18 RELAYCOUNTRY_META 28909 9.07 31.67 5.48 19 BOTNET 24997 5.97 27.39 2.57 20 HTML_FONT_LOW_CONTRAST 23152 27.82 25.36 28.21 21 FVGT_m_MULTI_ODD 22396 22.72 24.54 22.43 22 T_KAM_HTML_FONT_INVALID 22360 20.49 24.50 19.86 23 XMSubLong 22281 21.34 24.41 20.85 24 XM_UncommonTLD01 22060 6.11 24.17 3.24 25 RCVD_IN_MSPIKE_H2 20108 20.90 22.03 20.72 26 T_TM2_M_HEADER_IN_MSG 19806 26.01 21.70 26.70 27 UNTRUSTED_Relay 19331 4.62 21.18 1.99 28 BOTNET_IPINHOSTNAME 17311 6.80 18.97 4.87 29 XM_Body_Dirty_Words 16440 13.65 18.01 12.95 30 XM_Multi_Part_URI 15642 12.34 17.14 11.58 31 LOTS_OF_MONEY 12960 9.29 14.20 8.51 32 XM_B_Unsub 12407 10.59 13.59 10.12 33 DKIM_INVALID 12134 6.65 13.29 5.60 34 XM_B_Phish_Phrases 11545 8.37 12.65 7.69 35 HTML_IMAGE_RATIO_02 11484 8.62 12.58 8.00 36 XMSexyCombo_05 10858 5.20 11.90 4.14 37 XM_Evil_Numbers_Gen 9154 8.32 10.03 8.05 38 XM_CamelCaseFrm001 8683 3.45 9.51 2.48 39 RELAYCOUNTRY_CA 8484 2.60 9.29 1.54 40 XMSubMetaSx_00 8414 4.52 9.22 3.77 41 XM_UB50 7904 2.22 8.66 1.20 42 XM_B_COVIDMETA 7539 3.11 8.26 2.30 43 RCVD_IN_MSPIKE_BL 7395 1.57 8.10 0.54 44 URIBL_SBL_A 7212 1.28 7.90 0.22 45 LotsOfNums_01 7164 8.50 7.85 8.60 46 TR_XM_MaxBayes 6984 1.14 7.65 0.11 47 NO_DNS_FOR_FROM 6972 3.28 7.64 2.59 48 MPART_ALT_DIFF 6201 7.35 6.79 7.44 49 RCVD_IN_RP_RNBL 6116 1.00 6.70 0.10 50 RCVD_IN_MSPIKE_L3 5910 1.29 6.47 0.47 51 TR_XM_PhishingBody 5722 3.89 6.27 3.51 52 SpammyFromTLD_02 5640 1.21 6.18 0.43 53 XM_UB99 5455 0.83 5.98 0.01 54 XM_SPF_SoftFail 5442 2.29 5.96 1.71 55 BAYES_80 5394 4.22 5.91 3.96 56 TR_XM_COVIDMETA4 5343 1.99 5.85 1.38 57 BAYES_60 4944 6.04 5.42 6.14 58 TooManyTo_001 4901 7.65 5.37 8.01 59 BOTNET_NORDNS 4888 0.81 5.36 0.09 60 RCVD_IN_MSPIKE_WL 4835 19.13 5.30 21.33 61 XM_H_Long_From01 4834 5.58 5.30 5.62 62 RELAYCOUNTRY_FR 4791 0.96 5.25 0.29 63 HTML_IMAGE_RATIO_04 4715 6.23 5.17 6.39 64 XM_UB999 4639 0.70 5.08 0.00 65 XMBody_17 4626 1.38 5.07 0.79 66 XMNumbers 4593 3.23 5.03 2.94 67 RCVD_IN_BL_SPAMCOP_NET 4518 1.83 4.95 1.33 68 UNPARSEABLE_RELAY 4517 6.93 4.95 7.24 69 SpammyFromTLD_01 4486 1.30 4.91 0.72 70 XM_B_SpammyTLD 4331 2.41 4.74 2.04 71 HTML_MIME_NO_HTML_TAG 4289 2.41 4.70 2.05 72 KHOP_HELO_FCRDNS 4254 2.26 4.66 1.88 73 XM_DIRTYINTL 4214 1.16 4.62 0.61 74 XM_URI_RBL 3970 0.80 4.35 0.24 75 TR_XM_INV_DKIM 3901 0.71 4.27 0.15 76 T_REMOTE_IMAGE 3861 3.86 4.23 3.80 77 MIME_HTML_MOSTLY 3833 3.00 4.20 2.82 78 TR_Mismatch_TLD_02 3720 0.64 4.08 0.09 79 XM_B_Phish66 3710 2.11 4.06 1.80 80 TR_XM_MaxSPIKE 3620 0.56 3.97 0.02 81 TM2_M_URI_OPT_OUT 3565 3.25 3.91 3.15 82 FROM_EXCESS_BASE64 3323 3.38 3.64 3.33 83 XM_SendGrid 3267 6.26 3.58 6.69 84 TR_LOTS_OF_MONEY3 3075 0.91 3.37 0.53 85 XM_OfRef6 3002 1.45 3.29 1.15 86 T_XMDrugObfuBody_08 2994 1.76 3.28 1.52 87 PDS_OTHER_BAD_TLD 2966 0.91 3.25 0.53 88 HTML_IMAGE_RATIO_06 2928 3.68 3.21 3.76 89 BAYES_95 2846 2.51 3.12 2.41 90 XMStrtUSub 2795 4.14 3.06 4.31 91 FROM_SUSPICIOUS_NTLD 2709 0.53 2.97 0.15 92 URI_HEX 2658 1.71 2.91 1.52 93 DKIM_ADSP_NXDOMAIN 2656 0.77 2.91 0.43 94 TR_XM_COVIDMETA1 2649 0.84 2.90 0.51 95 RCVD_IN_MSPIKE_H4 2622 9.61 2.87 10.68 96 HDRS_MISSP 2622 0.43 2.87 0.04 97 FROM_SUSPICIOUS_NTLD_FP 2615 0.52 2.86 0.15 98 MIME_QP_LONG_LINE 2609 6.14 2.86 6.66 99 RCVD_IN_PSBL 2585 0.44 2.83 0.06 100 LongTLD 2568 0.60 2.81 0.24 101 HTML_TITLE_SUBJ_DIFF 2567 0.44 2.81 0.06 102 XMSexyCombo_01 2549 0.88 2.79 0.57 103 DATE_IN_PAST_03_06 2534 0.48 2.78 0.12 104 BAYES_40 2485 5.21 2.72 5.61 105 TR_XM_RelayPhish 2455 0.53 2.69 0.19 106 HTML_IMAGE_ONLY_08 2436 0.48 2.67 0.13 107 NO_FM_NAME_IP_HOSTN 2391 0.36 2.62 0.00 108 T_TooManySym_01 2375 3.99 2.60 4.21 109 HTML_SHORT_LINK_IMG_1 2370 0.37 2.60 0.01 110 MIME_HEADER_CTYPE_ONLY 2366 0.58 2.59 0.26 111 RELAYCOUNTRY_IN 2340 0.50 2.56 0.17 112 T_XMDrugObfuBody_14 2329 1.66 2.55 1.52 113 HDRS_LCASE_IMGONLY 2318 0.36 2.54 0.01 114 HTML_IMAGE_RATIO_08 2280 2.46 2.50 2.45 115 T_XMHurry_00 2192 0.73 2.40 0.47 116 MIME_HTML_ONLY_MULTI 2162 4.57 2.37 4.92 117 RCVD_IN_MSPIKE_H3 2131 9.12 2.33 10.19 118 TR_XM_PHPDW 2129 0.72 2.33 0.46 119 XM_SPF_Unknown 2116 1.04 2.32 0.83 120 TR_XM_PHPForged 2109 0.70 2.31 0.45 121 TR_XM_FormFill2 2060 0.70 2.26 0.45 122 XM_H_PHPOS 2054 0.69 2.25 0.44 123 XMDiploma_00 1985 1.67 2.17 1.59 124 XM_B_Unsub2 1960 2.00 2.15 1.98 125 XMBdyGiftCard01 1933 0.94 2.12 0.75 126 DATE_IN_PAST_06_12 1925 0.36 2.11 0.08 127 XMBrknScrpt_02 1815 0.86 1.99 0.68 128 BAYES_20 1770 3.83 1.94 4.13 129 RELAYCOUNTRY_GB 1692 1.17 1.85 1.06 130 URI_TRY_3LD 1689 1.52 1.85 1.47 131 RELAYCOUNTRY_DE 1687 0.65 1.85 0.46 132 TM2_M_VERY_LONG_WORD 1662 1.41 1.82 1.35 133 XM_UB80 1645 0.28 1.80 0.04 134 XM_UB60 1640 0.35 1.80 0.12 135 XMStockSpam_06 1638 0.95 1.79 0.82 136 DKIM_ADSP_CUSTOM_MED 1569 1.20 1.72 1.12 137 TR_Symld_Words 1527 1.46 1.67 1.42 138 TR_XM_COVIDMETA3 1495 0.27 1.64 0.05 139 XMHTML_After_End 1475 1.10 1.62 1.02 140 NML_ADSP_CUSTOM_MED 1447 0.94 1.59 0.83 141 ALL_TRUSTED 1443 12.07 1.58 13.74 142 MAILING_LIST_MULTI 1406 2.34 1.54 2.47 143 DIET_1 1316 0.49 1.44 0.34 144 TR_XM_DK_SendGrid 1308 3.51 1.43 3.84 145 XMGenDplmaNmb 1264 1.09 1.38 1.04 146 TR_LOTS_OF_MONEY2 1247 0.55 1.37 0.42 147 T_MONEY_PERCENT 1247 0.55 1.37 0.42 148 RELAYCOUNTRY_FI 1225 0.20 1.34 0.02 149 XMBody_78 1210 0.54 1.33 0.41 150 XM_HighProb1 1210 0.19 1.33 0.01 151 XM_DK_Undo_01 1208 1.75 1.32 1.81 152 T_XMDrugObfuBody_00 1180 0.80 1.29 0.72 153 XM_XX_Yahoo 1173 0.22 1.29 0.05 154 XMSubNoVowel 1167 1.71 1.28 1.78 155 TR_Mismatch_TLD_01 1119 0.37 1.23 0.23 156 SUBJ_ALL_CAPS 1038 1.50 1.14 1.56 157 BAYES_05 1038 2.46 1.14 2.67 158 FORGED_GMAIL_RCVD 1033 0.59 1.13 0.50 159 XMSubMetaSxObfu_03 1017 0.59 1.11 0.51 160 T_FILL_THIS_FORM_SHORT 1004 0.92 1.10 0.89 161 DATE_IN_PAST_12_24 984 0.19 1.08 0.04 162 RELAYCOUNTRY_JP 978 0.19 1.07 0.05 163 XMSubEmpty 977 0.35 1.07 0.24 164 TM2_M_A_HREF_HREF 976 0.58 1.07 0.50 165 XM_OfRef7 975 0.27 1.07 0.14 166 BAYES_00 970 12.65 1.06 14.48 167 DEAR_FRIEND 967 0.21 1.06 0.07 168 XM_H_PHPMailer 944 0.54 1.03 0.47 169 XMSlimDrugH 897 0.38 0.98 0.28 170 BASE64_LENGTH_79_INF 894 0.35 0.98 0.25 171 XMPhish08 890 0.58 0.98 0.52 172 XM_PDF 883 3.52 0.97 3.92 173 RCVD_IN_MSPIKE_L5 871 0.16 0.95 0.04 174 RDNS_DYNAMIC 871 0.42 0.95 0.33 175 MPART_ALT_DIFF_COUNT 869 0.45 0.95 0.37 176 TR_MetaPhish_Combo_01 862 0.71 0.94 0.68 177 RELAYCOUNTRY_NL 862 0.31 0.94 0.21 178 HK_RANDOM_REPLYTO 852 0.28 0.93 0.17 179 XM_UB95 843 0.15 0.92 0.02 180 XM_ProductURIs 837 1.03 0.92 1.05 181 XMMoneyMeta_00 804 0.64 0.88 0.60 182 XM_H_PHPOS_M 803 0.25 0.88 0.15 183 HTML_TAG_BALANCE_BODY 800 0.61 0.88 0.57 184 T_TooManySym_02 797 1.92 0.87 2.08 185 XMSexyCombo_04 795 0.22 0.87 0.11 186 RELAYCOUNTRY_AU 793 0.51 0.87 0.45 187 XMSubMetaSSx_00 792 0.27 0.87 0.18 188 XM_BadFromFormat 788 0.24 0.86 0.14 189 REMOVE_BEFORE_LINK 783 0.46 0.86 0.40 190 RCVD_IN_IADB_LISTED 776 4.76 0.85 5.38 191 URIBL_BLACK 766 0.15 0.84 0.04 192 LONG_HEX_URI 762 0.31 0.83 0.23 193 T_HTML_TAG_BALANCE_CENTER 750 0.25 0.82 0.16 194 UPPERCASE_75_100 742 0.14 0.81 0.03 195 RCVD_IN_RP_SAFE 739 6.95 0.81 7.92 196 XMSubMetaSSxObfu_00 738 0.15 0.81 0.04 197 XM_H_MailChimp 736 0.33 0.81 0.26 198 XMSubMetaI_00 728 0.77 0.80 0.76 199 TooManyTo_002 728 1.86 0.80 2.02 200 XMReplyNow 713 0.20 0.78 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 564632 97.98 97.30 98.08 2 HTML_MESSAGE 518015 90.68 95.07 89.99 3 RELAYCOUNTRY_US 473831 80.51 69.18 82.31 4 DKIM_SIGNED 436008 76.37 80.38 75.74 5 XM_DK_Pass 429572 75.03 77.60 74.62 6 XM_B_Unicode 422642 73.36 73.00 73.42 7 DKIM_VALID 403795 69.73 67.09 70.14 8 XMListUnsubscribeExists 307822 55.67 69.56 53.47 9 BAYES_50 307291 51.37 38.68 53.38 10 DKIM_VALID_AU 302164 51.92 48.34 52.49 11 XM_B_Unicode3 244061 41.75 37.70 42.40 12 HTML_FONT_LOW_CONTRAST 162396 27.82 25.36 28.21 13 LOC_TINY_FONT_1 157373 27.95 31.79 27.34 14 T_TM2_M_HEADER_IN_MSG 153675 26.01 21.70 26.70 15 DKIM_VALID_EF 150445 27.13 33.43 26.13 16 MIME_HTML_ONLY 132311 25.54 41.66 22.98 17 FVGT_m_MULTI_ODD 129124 22.72 24.54 22.43 18 RCVD_IN_MSPIKE_WL 122766 19.13 5.30 21.33 19 XMSubLong 120045 21.34 24.41 20.85 20 RCVD_IN_MSPIKE_H2 119255 20.90 22.03 20.72 21 T_KAM_HTML_FONT_INVALID 114304 20.49 24.50 19.86 22 BAYES_00 83381 12.65 1.06 14.48 23 ALL_TRUSTED 79074 12.07 1.58 13.74 24 XM_Body_Dirty_Words 74568 13.65 18.01 12.95 25 XM_Multi_Part_URI 66690 12.34 17.14 11.58 26 XM_DK_Undo_02 61555 16.63 54.06 10.69 27 RCVD_IN_MSPIKE_H4 61476 9.61 2.87 10.68 28 RCVD_IN_MSPIKE_H3 58687 9.12 2.33 10.19 29 XM_B_Unsub 58254 10.59 13.59 10.12 30 TR_XM_DK_Bayes 55906 8.46 0.55 9.71 31 TR_XM_DK_Bayes1 51860 7.83 0.39 9.01 32 LotsOfNums_01 49493 8.50 7.85 8.60 33 LOTS_OF_MONEY 48967 9.29 14.20 8.51 34 TR_XM_DK_Bayes2 46379 6.99 0.25 8.06 35 XM_Evil_Numbers_Gen 46349 8.32 10.03 8.05 36 TooManyTo_001 46087 7.65 5.37 8.01 37 HTML_IMAGE_RATIO_02 46033 8.62 12.58 8.00 38 RCVD_IN_RP_SAFE 45614 6.95 0.81 7.92 39 XM_B_Phish_Phrases 44288 8.37 12.65 7.69 40 MPART_ALT_DIFF 42825 7.35 6.79 7.44 41 RCVD_IN_RP_CERTIFIED 42738 6.47 0.46 7.42 42 UNPARSEABLE_RELAY 41686 6.93 4.95 7.24 43 BAYES_99 41609 11.71 39.97 7.23 44 XM_SendGrid 38493 6.26 3.58 6.69 45 MIME_QP_LONG_LINE 38365 6.14 2.86 6.66 46 XM_DKIMWhitelistDomains 38326 5.75 0.00 6.66 47 HTML_IMAGE_RATIO_04 36806 6.23 5.17 6.39 48 BAYES_60 35321 6.04 5.42 6.14 49 BAYES_999 32667 9.41 32.99 5.67 50 XM_H_Long_From01 32379 5.58 5.30 5.62 51 BAYES_40 32279 5.21 2.72 5.61 52 DKIM_INVALID 32213 6.65 13.29 5.60 53 IN_ZIMBRA_NJ_WHITELIST 31912 4.79 0.02 5.54 54 RELAYCOUNTRY_META 31571 9.07 31.67 5.48 55 RCVD_IN_IADB_LISTED 30988 4.76 0.85 5.38 56 MIME_HTML_ONLY_MULTI 28349 4.57 2.37 4.92 57 BOTNET_IPINHOSTNAME 28021 6.80 18.97 4.87 58 RCVD_IN_IADB_SPF 26981 4.15 0.75 4.69 59 XMStrtUSub 24817 4.14 3.06 4.31 60 T_TooManySym_01 24252 3.99 2.60 4.21 61 XMSexyCombo_05 23834 5.20 11.90 4.14 62 BAYES_20 23748 3.83 1.94 4.13 63 RCVD_IN_IADB_SENDERID 23725 3.66 0.72 4.12 64 RCVD_IN_IADB_DK 23451 3.61 0.72 4.07 65 BAYES_80 22775 4.22 5.91 3.96 66 XM_PDF 22582 3.52 0.97 3.92 67 XM_H_Trusted_IP 22488 3.37 0.00 3.91 68 TR_XM_DK_SendGrid 22119 3.51 1.43 3.84 69 T_REMOTE_IMAGE 21881 3.86 4.23 3.80 70 XMSubMetaSx_00 21714 4.52 9.22 3.77 71 HTML_IMAGE_RATIO_06 21647 3.68 3.21 3.76 72 TR_XM_PhishingBody 20203 3.89 6.27 3.51 73 RCVD_IN_IADB_VOUCHED 19597 2.98 0.28 3.40 74 FROM_EXCESS_BASE64 19192 3.38 3.64 3.33 75 XM_UncommonTLD01 18670 6.11 24.17 3.24 76 TM2_M_URI_OPT_OUT 18133 3.25 3.91 3.15 77 ANY_BOUNCE_MESSAGE 17295 2.66 0.49 3.00 78 BOUNCE_MESSAGE 17286 2.66 0.49 3.00 79 XMNumbers 16953 3.23 5.03 2.94 80 HTML_FONT_FACE_BAD 16383 2.52 0.46 2.85 81 MIME_HTML_MOSTLY 16208 3.00 4.20 2.82 82 BAYES_05 15361 2.46 1.14 2.67 83 NO_DNS_FOR_FROM 14884 3.28 7.64 2.59 84 BOTNET 14799 5.97 27.39 2.57 85 XM_CamelCaseFrm001 14300 3.45 9.51 2.48 86 MAILING_LIST_MULTI 14222 2.34 1.54 2.47 87 HTML_IMAGE_RATIO_08 14120 2.46 2.50 2.45 88 BAYES_95 13901 2.51 3.12 2.41 89 XM_B_COVIDMETA 13229 3.11 8.26 2.30 90 RCVD_IN_IADB_OPTIN 12492 1.91 0.25 2.17 91 T_TooManySym_02 11996 1.92 0.87 2.08 92 HTML_MIME_NO_HTML_TAG 11783 2.41 4.70 2.05 93 XM_B_SpammyTLD 11742 2.41 4.74 2.04 94 TooManyTo_002 11656 1.86 0.80 2.02 95 UNTRUSTED_Relay 11473 4.62 21.18 1.99 96 XM_B_Unsub2 11374 2.00 2.15 1.98 97 KHOP_HELO_FCRDNS 10828 2.26 4.66 1.88 98 XM_DK_Undo_01 10443 1.75 1.32 1.81 99 XM_B_Phish66 10379 2.11 4.06 1.80 100 XMSubNoVowel 10228 1.71 1.28 1.78 101 XM_SPF_SoftFail 9840 2.29 5.96 1.71 102 TVD_RCVD_IP 9505 1.48 0.38 1.65 103 XMDiploma_00 9142 1.67 2.17 1.59 104 SUBJ_ALL_CAPS 8971 1.50 1.14 1.56 105 RELAYCOUNTRY_CA 8888 2.60 9.29 1.54 106 T_XMDrugObfuBody_14 8770 1.66 2.55 1.52 107 T_XMDrugObfuBody_08 8764 1.76 3.28 1.52 108 URI_HEX 8727 1.71 2.91 1.52 109 URI_TRY_3LD 8460 1.52 1.85 1.47 110 INVALID_MSGID 8303 1.27 0.16 1.44 111 TR_Symld_Words 8183 1.46 1.67 1.42 112 TR_XM_COVIDMETA4 7937 1.99 5.85 1.38 113 IN_HORDE_ADDRESS_BOOK 7932 1.19 0.04 1.38 114 TooManyTo_003 7924 1.28 0.65 1.38 115 TM2_M_VERY_LONG_WORD 7747 1.41 1.82 1.35 116 HELO_MISC_IP 7728 1.18 0.14 1.34 117 CK_HELO_DYNAMIC_SPLIT_IP 7715 1.17 0.11 1.34 118 RCVD_IN_BL_SPAMCOP_NET 7660 1.83 4.95 1.33 119 XM_GoogleGroups 7440 1.18 0.49 1.29 120 XM_H_Long_From02 7151 1.16 0.64 1.24 121 USER_IN_DEF_DKIM_WL 7024 1.05 0.00 1.22 122 TO_MALFORMED 6894 1.05 0.08 1.20 123 XM_UB50 6886 2.22 8.66 1.20 124 XM_OfRef6 6645 1.45 3.29 1.15 125 DKIM_ADSP_CUSTOM_MED 6428 1.20 1.72 1.12 126 XMCapTrack 6417 1.06 0.70 1.11 127 RELAYCOUNTRY_GB 6090 1.17 1.85 1.06 128 TooManyTo_004 6080 0.99 0.58 1.06 129 XM_ProductURIs 6016 1.03 0.92 1.05 130 XMGenDplmaNmb 6014 1.09 1.38 1.04 131 XMHTML_After_End 5857 1.10 1.62 1.02 132 XMGappySubj_01 5454 0.84 0.19 0.95 133 T_FILL_THIS_FORM_SHORT 5145 0.92 1.10 0.89 134 TooManyTo_005 5101 0.83 0.45 0.89 135 NML_ADSP_CUSTOM_MED 4795 0.94 1.59 0.83 136 XM_SPF_Unknown 4794 1.04 2.32 0.83 137 XMStockSpam_06 4717 0.95 1.79 0.82 138 XMBody_17 4558 1.38 5.07 0.79 139 XMPhish30 4408 0.77 0.77 0.77 140 XMSubMetaI_00 4377 0.77 0.80 0.76 141 XMBdyGiftCard01 4334 0.94 2.12 0.75 142 SpammyFromTLD_01 4154 1.30 4.91 0.72 143 T_XMDrugObfuBody_00 4129 0.80 1.29 0.72 144 TR_MSPIKEBAYES00 4076 0.61 0.00 0.71 145 T_Symld_Words_02 4016 0.66 0.45 0.70 146 XMBrknScrpt_02 3905 0.86 1.99 0.68 147 TR_MetaPhish_Combo_01 3901 0.71 0.94 0.68 148 HTTPS_HTTP_MISMATCH 3836 0.67 0.72 0.67 149 HTML_IMAGE_ONLY_20 3724 0.62 0.42 0.65 150 MISSING_HEADERS 3700 0.64 0.60 0.64 151 XMNoVowels 3584 0.61 0.54 0.62 152 HELO_NODOT 3576 0.63 0.72 0.62 153 HELO_NO_DOMAIN 3575 0.63 0.72 0.62 154 T_TooManySym_03 3516 0.60 0.50 0.61 155 XM_DIRTYINTL 3507 1.16 4.62 0.61 156 XMMoneyMeta_00 3469 0.64 0.88 0.60 157 XMDateMe_00 3455 0.56 0.29 0.60 158 FROM_GOV_DKIM_AU 3384 0.52 0.09 0.59 159 XMSexyCombo_01 3303 0.88 2.79 0.57 160 HTML_TAG_BALANCE_BODY 3271 0.61 0.88 0.57 161 RCVD_IN_MSPIKE_BL 3102 1.57 8.10 0.54 162 PDS_OTHER_BAD_TLD 3078 0.91 3.25 0.53 163 T_OBFU_PDF_ATTACH 3058 0.48 0.15 0.53 164 TR_LOTS_OF_MONEY3 3025 0.91 3.37 0.53 165 XMPhish08 3007 0.58 0.98 0.52 166 TR_XM_COVIDMETA1 2939 0.84 2.90 0.51 167 XMSubMetaSxObfu_03 2926 0.59 1.11 0.51 168 FORGED_GMAIL_RCVD 2888 0.59 1.13 0.50 169 TM2_M_A_HREF_HREF 2866 0.58 1.07 0.50 170 XMHTMLBadTable_001 2837 0.50 0.54 0.49 171 XM_ShortIntro_01 2743 0.46 0.32 0.48 172 PLING_QUERY 2697 0.49 0.61 0.47 173 RCVD_IN_MSPIKE_L3 2690 1.29 6.47 0.47 174 XM_H_PHPMailer 2688 0.54 1.03 0.47 175 T_XMHurry_00 2679 0.73 2.40 0.47 176 TR_XM_PHPDW 2669 0.72 2.33 0.46 177 RELAYCOUNTRY_DE 2660 0.65 1.85 0.46 178 URI_NOVOWEL 2623 0.49 0.72 0.46 179 RCVD_IN_MSPIKE_H5 2603 0.40 0.09 0.45 180 RELAYCOUNTRY_AU 2589 0.51 0.87 0.45 181 TR_XM_FormFill2 2583 0.70 2.26 0.45 182 TR_XM_PHPForged 2562 0.70 2.31 0.45 183 XM_H_PHPOS 2532 0.69 2.25 0.44 184 NUMERIC_HTTP_ADDR 2486 0.45 0.53 0.43 185 DKIM_ADSP_NXDOMAIN 2484 0.77 2.91 0.43 186 SpammyFromTLD_02 2459 1.21 6.18 0.43 187 T_MONEY_PERCENT 2404 0.55 1.37 0.42 188 TR_LOTS_OF_MONEY2 2404 0.55 1.37 0.42 189 XMPhish14 2390 0.45 0.65 0.42 190 XMLngstWrd_00 2380 0.41 0.38 0.41 191 XMBody_78 2376 0.54 1.33 0.41 192 XM_Body_Obfu01 2372 0.41 0.36 0.41 193 HTML_IMAGE_ONLY_28 2282 0.39 0.35 0.40 194 REMOVE_BEFORE_LINK 2280 0.46 0.86 0.40 195 TM2_M_BODY_EMPTY 2255 0.36 0.13 0.39 196 XMBody_95 2232 0.35 0.12 0.39 197 HTML_IMAGE_ONLY_24 2210 0.38 0.35 0.38 198 MPART_ALT_DIFF_COUNT 2142 0.45 0.95 0.37 199 TVD_SPACE_RATIO 2095 0.34 0.19 0.36 200 HTML_IMAGE_ONLY_32 2092 0.35 0.24 0.36 ----------------------------------------------------------------------