Email: 676362 Autolearn: 0 AvgScore: -0.25 AvgScanTime: 1.98 sec Spam: 87048 Autolearn: 0 AvgScore: 12.15 AvgScanTime: 4.35 sec Ham: 589314 Autolearn: 0 AvgScore: -2.09 AvgScanTime: 1.63 sec Time Spent Running SA: 371.65 hours Time Spent Processing Spam: 105.24 hours Time Spent Processing Ham: 266.41 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 84527 98.16 97.10 98.32 2 HTML_MESSAGE 78656 86.15 90.36 85.52 3 DKIM_SIGNED 66428 74.95 76.31 74.75 4 XM_DK_Pass 64150 73.72 73.69 73.73 5 XM_B_Unicode 63819 67.07 73.31 66.15 6 RELAYCOUNTRY_US 60489 78.81 69.49 80.19 7 XMListUnsubscribeExists 55022 51.44 63.21 49.70 8 DKIM_VALID 51572 68.04 59.25 69.34 9 XM_DK_Undo_02 45583 17.21 52.37 12.02 10 DKIM_VALID_AU 36964 51.30 42.46 52.61 11 XM_B_Unicode3 35456 39.31 40.73 39.10 12 BAYES_99 33335 11.42 38.29 7.45 13 BAYES_50 32022 49.17 36.79 51.00 14 LOC_TINY_FONT_1 28566 24.99 32.82 23.84 15 RELAYCOUNTRY_META 26949 8.68 30.96 5.39 16 BOTNET 26830 7.11 30.82 3.61 17 BAYES_999 26677 9.16 30.65 5.98 18 MIME_HTML_ONLY 25646 21.58 29.46 20.42 19 HTML_FONT_LOW_CONTRAST 24408 26.55 28.04 26.34 20 DKIM_VALID_EF 23294 27.73 26.76 27.87 21 RCVD_IN_MSPIKE_H2 23179 24.05 26.63 23.67 22 FVGT_m_MULTI_ODD 22672 21.35 26.05 20.65 23 XMSubLong 20158 20.29 23.16 19.86 24 T_KAM_HTML_FONT_INVALID 18693 18.72 21.47 18.31 25 UNTRUSTED_Relay 18108 4.71 20.80 2.33 26 XM_Body_Dirty_Words 17717 14.20 20.35 13.29 27 XM_Multi_Part_URI 17405 14.52 19.99 13.71 28 T_TM2_M_HEADER_IN_MSG 17277 25.57 19.85 26.42 29 BOTNET_IPINHOSTNAME 15440 6.90 17.74 5.30 30 DKIM_INVALID 14856 6.91 17.07 5.41 31 XM_UncommonTLD01 13959 4.53 16.04 2.83 32 XM_B_Unsub 13149 13.21 15.11 12.93 33 NO_DNS_FOR_FROM 12286 4.72 14.11 3.33 34 XM_B_Phish_Phrases 10644 7.45 12.23 6.75 35 XMSexyCombo_05 10570 5.07 12.14 4.02 36 LOTS_OF_MONEY 9794 7.29 11.25 6.70 37 HTML_IMAGE_RATIO_02 9327 7.54 10.71 7.07 38 XM_Evil_Numbers_Gen 9245 9.04 10.62 8.80 39 LotsOfNums_01 8261 8.70 9.49 8.58 40 RCVD_IN_MSPIKE_BL 8183 1.78 9.40 0.66 41 XMSubMetaSx_00 7252 4.23 8.33 3.63 42 RCVD_IN_MSPIKE_WL 7188 23.05 8.26 25.23 43 BAYES_80 7172 4.67 8.24 4.14 44 TR_XM_PhishingBody 7159 3.88 8.22 3.24 45 RCVD_IN_BL_SPAMCOP_NET 6983 2.26 8.02 1.41 46 XM_UB50 6628 1.99 7.61 1.16 47 MPART_ALT_DIFF 6371 5.22 7.32 4.91 48 UNPARSEABLE_RELAY 6361 7.47 7.31 7.49 49 RELAYCOUNTRY_CA 6099 2.40 7.01 1.72 50 XM_SPF_SoftFail 6081 2.41 6.99 1.73 51 XM_B_COVIDMETA 5703 2.46 6.55 1.86 52 XM_H_Long_From01 5372 5.34 6.17 5.22 53 TooManyTo_001 5313 7.40 6.10 7.59 54 BAYES_60 5306 6.25 6.10 6.28 55 TR_XM_COVIDMETA4 5229 1.40 6.01 0.72 56 SpammyFromTLD_01 5037 1.38 5.79 0.73 57 XM_SendGrid 5033 6.61 5.78 6.73 58 RCVD_IN_RP_RNBL 4818 0.79 5.53 0.09 59 MIME_HTML_MOSTLY 4790 2.49 5.50 2.04 60 XMNumbers 4635 3.65 5.32 3.40 61 XM_DIRTYINTL 4422 1.19 5.08 0.62 62 RCVD_IN_MSPIKE_L5 4328 0.85 4.97 0.24 63 XM_B_SpammyTLD 4248 2.14 4.88 1.74 64 TR_XM_INV_DKIM 4173 0.75 4.79 0.16 65 HTML_IMAGE_RATIO_04 4109 5.33 4.72 5.42 66 RCVD_IN_MSPIKE_H3 4104 13.47 4.71 14.77 67 XM_UB99 3990 0.60 4.58 0.01 68 KHOP_HELO_FCRDNS 3953 2.07 4.54 1.70 69 XM_B_Phish66 3807 2.19 4.37 1.87 70 RCVD_IN_PSBL 3775 0.74 4.34 0.21 71 RELAYCOUNTRY_FR 3733 0.81 4.29 0.29 72 BAYES_95 3702 2.67 4.25 2.44 73 TR_XM_MaxWHORU 3635 0.60 4.18 0.07 74 BOTNET_NORDNS 3614 0.55 4.15 0.02 75 HTML_MIME_NO_HTML_TAG 3408 2.40 3.92 2.18 76 TM2_M_URI_OPT_OUT 3316 7.42 3.81 7.95 77 TR_XM_UnparsRelay 3251 1.05 3.73 0.65 78 FROM_SUSPICIOUS_NTLD 3210 0.50 3.69 0.03 79 T_XMDrugObfuBody_08 3201 1.76 3.68 1.47 80 RCVD_IN_MSPIKE_L3 3152 0.78 3.62 0.36 81 XM_URI_RBL 3107 0.66 3.57 0.23 82 FROM_SUSPICIOUS_NTLD_FP 3107 0.48 3.57 0.03 83 SpammyFromTLD_02 3043 0.72 3.50 0.31 84 RCVD_IN_MSPIKE_H4 2947 8.42 3.39 9.16 85 T_TooManySym_01 2937 4.12 3.37 4.23 86 XM_UB999 2914 0.43 3.35 0.00 87 XM_UB80 2877 0.48 3.31 0.06 88 HTML_IMAGE_RATIO_08 2822 2.38 3.24 2.26 89 T_FILL_THIS_FORM_SHORT 2808 1.12 3.23 0.81 90 XMBrknScrpt_02 2791 1.22 3.21 0.92 91 XMSexyCombo_01 2750 0.99 3.16 0.67 92 XMDiploma_00 2659 1.81 3.05 1.63 93 MIME_QP_LONG_LINE 2642 5.07 3.04 5.37 94 XMStrtUSub 2638 5.05 3.03 5.35 95 XMBody_17 2629 1.04 3.02 0.75 96 TR_XM_PHPDW 2614 0.77 3.00 0.44 97 TR_XM_PHPForged 2572 0.75 2.95 0.42 98 TR_XM_FormFill2 2568 0.75 2.95 0.42 99 LongTLD 2556 0.56 2.94 0.20 100 XM_H_PHPOS 2556 0.74 2.94 0.42 101 TR_XM_COVIDMETA1 2547 0.84 2.93 0.54 102 HTML_IMAGE_RATIO_06 2499 3.42 2.87 3.50 103 FROM_EXCESS_BASE64 2446 3.02 2.81 3.05 104 URIBL_SBL_A 2360 0.41 2.71 0.07 105 XM_CamelCaseFrm001 2315 2.11 2.66 2.03 106 BAYES_40 2298 4.24 2.64 4.48 107 XM_B_Unsub2 2208 5.13 2.54 5.51 108 PDS_OTHER_BAD_TLD 2188 0.60 2.51 0.31 109 DKIM_ADSP_NXDOMAIN 2181 0.72 2.51 0.46 110 URI_HEX 2167 1.65 2.49 1.53 111 TR_XM_DK_SendGrid 2167 3.49 2.49 3.64 112 T_REMOTE_IMAGE 2161 3.55 2.48 3.71 113 XM_UB60 2149 0.45 2.47 0.15 114 XM_OfRef6 2003 1.27 2.30 1.11 115 TR_Mismatch_TLD_01 2003 0.49 2.30 0.23 116 T_XMHurry_00 1993 0.71 2.29 0.48 117 TR_XM_MaxSPIKE 1984 0.34 2.28 0.05 118 ALL_TRUSTED 1959 13.85 2.25 15.57 119 MISSING_HEADERS 1915 0.61 2.20 0.37 120 TM2_M_VERY_LONG_WORD 1891 1.20 2.17 1.05 121 TR_Symld_Words 1881 1.62 2.16 1.54 122 FVGT_m_MULTI_ODD_EMAIL 1865 0.30 2.14 0.03 123 TR_XM_RelayPhish 1851 0.39 2.13 0.13 124 XMGenDplmaNmb 1844 0.92 2.12 0.75 125 HDRS_MISSP 1840 0.31 2.11 0.05 126 MIME_HTML_ONLY_MULTI 1834 3.14 2.11 3.29 127 XMPhish14 1816 0.58 2.09 0.35 128 URI_PHP_REDIR 1813 0.31 2.08 0.04 129 XMHTML_After_End 1777 0.93 2.04 0.77 130 T_XMDrugObfuBody_14 1739 1.55 2.00 1.49 131 TR_XM_MaxBayes 1737 0.27 2.00 0.01 132 SUBJ_ALL_CAPS 1694 1.36 1.95 1.27 133 HTML_SHORT_LINK_IMG_1 1654 0.26 1.90 0.02 134 MIME_HEADER_CTYPE_ONLY 1648 0.32 1.89 0.09 135 RELAYCOUNTRY_IN 1647 0.35 1.89 0.12 136 FORM_FRAUD_3 1630 0.24 1.87 0.00 137 REPLYTO_WITHOUT_TO_CC 1582 0.28 1.82 0.05 138 XMStockSpam_06 1573 0.90 1.81 0.76 139 HDRS_LCASE_IMGONLY 1549 0.24 1.78 0.01 140 XM_RXBody 1547 0.76 1.78 0.61 141 T_XMDrugObfuBody_00 1539 0.79 1.77 0.64 142 HTML_IMAGE_ONLY_08 1522 0.32 1.75 0.11 143 SHORT_IMG_SUSP_NTLD 1507 0.22 1.73 0.00 144 RELAYCOUNTRY_RU 1500 0.40 1.72 0.20 145 DKIM_ADSP_CUSTOM_MED 1479 1.07 1.70 0.98 146 BAYES_20 1476 3.97 1.70 4.30 147 MAILING_LIST_MULTI 1470 2.07 1.69 2.13 148 TR_Mismatch_TLD_02 1458 0.32 1.67 0.11 149 RELAYCOUNTRY_DE 1455 0.54 1.67 0.37 150 XM_UB95 1375 0.22 1.58 0.02 151 MIME_CHARSET_FARAWAY 1372 0.33 1.58 0.14 152 RCVD_IN_RP_SAFE 1337 6.59 1.54 7.34 153 XM_PDF 1314 3.66 1.51 3.98 154 RELAYCOUNTRY_IT 1288 0.24 1.48 0.05 155 TR_XM_FormFill 1287 0.25 1.48 0.06 156 NML_ADSP_CUSTOM_MED 1277 0.80 1.47 0.70 157 DIET_1 1276 0.50 1.47 0.35 158 RDNS_DYNAMIC 1235 0.47 1.42 0.33 159 XMSubNoVowel 1232 1.54 1.42 1.56 160 URI_TRY_3LD 1230 1.13 1.41 1.08 161 MPART_ALT_DIFF_COUNT 1227 0.46 1.41 0.33 162 XM_DK_Undo_01 1191 1.48 1.37 1.49 163 TR_LOTS_OF_MONEY3 1184 0.49 1.36 0.36 164 RELAYCOUNTRY_JP 1165 0.21 1.34 0.04 165 HK_SCAM 1128 0.18 1.30 0.02 166 FORGED_GMAIL_RCVD 1096 0.55 1.26 0.44 167 HTML_IMAGE_ONLY_16 1090 0.39 1.25 0.26 168 TR_XM_PhishingBody2 1065 0.18 1.22 0.02 169 DATE_IN_PAST_03_06 1060 1.08 1.22 1.06 170 XM_H_PHPMailer 1056 0.52 1.21 0.42 171 XM_BadFromFormat 1050 0.31 1.21 0.17 172 XM_H_MailChimp 1047 0.35 1.20 0.22 173 HTML_FONT_TINY_NORDNS 1044 0.46 1.20 0.35 174 CHARSET_FARAWAY_HEADER 1033 0.20 1.19 0.05 175 URI_PHISH 1029 0.17 1.18 0.03 176 XMSexyCombo_04 994 0.24 1.14 0.10 177 XMBody_78 993 0.60 1.14 0.52 178 REMOVE_BEFORE_LINK 992 0.41 1.14 0.31 179 XM_HighProb1 990 0.15 1.14 0.01 180 DATE_IN_PAST_06_12 963 0.32 1.11 0.21 181 RELAYCOUNTRY_GB 956 0.90 1.10 0.87 182 URIBL_BLACK 956 0.17 1.10 0.03 183 TR_MetaPhish_Combo_01 939 0.68 1.08 0.62 184 LONG_JUNK_URI 918 0.18 1.05 0.05 185 URI_NOVOWEL 916 0.54 1.05 0.46 186 INVESTMENT_ADVICE 912 0.25 1.05 0.14 187 T_TooManySym_02 900 1.98 1.03 2.12 188 TR_LOTS_OF_MONEY2 897 0.43 1.03 0.35 189 T_MONEY_PERCENT 897 0.43 1.03 0.35 190 TR_XM_COVIDMETA3 895 0.16 1.03 0.03 191 XMSubject_48 893 0.16 1.03 0.03 192 XMMoneyMeta_00 886 0.56 1.02 0.49 193 XM_H_PHPOS_M 876 0.24 1.01 0.12 194 HK_RANDOM_REPLYTO 872 0.27 1.00 0.17 195 BAYES_00 870 13.07 1.00 14.85 196 XMPhish30 863 0.61 0.99 0.55 197 BAYES_05 844 4.52 0.97 5.05 198 XMSubMetaSxObfu_03 843 0.50 0.97 0.43 199 XMReplyNow 842 0.25 0.97 0.14 200 RELAYCOUNTRY_NL 840 0.31 0.96 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 579398 98.16 97.10 98.32 2 HTML_MESSAGE 504007 86.15 90.36 85.52 3 RELAYCOUNTRY_US 472545 78.81 69.49 80.19 4 DKIM_SIGNED 440499 74.95 76.31 74.75 5 XM_DK_Pass 434483 73.72 73.69 73.73 6 DKIM_VALID 408618 68.04 59.25 69.34 7 XM_B_Unicode 389847 67.07 73.31 66.15 8 DKIM_VALID_AU 310018 51.30 42.46 52.61 9 BAYES_50 300551 49.17 36.79 51.00 10 XMListUnsubscribeExists 292871 51.44 63.21 49.70 11 XM_B_Unicode3 230441 39.31 40.73 39.10 12 DKIM_VALID_EF 164264 27.73 26.76 27.87 13 T_TM2_M_HEADER_IN_MSG 155688 25.57 19.85 26.42 14 HTML_FONT_LOW_CONTRAST 155198 26.55 28.04 26.34 15 RCVD_IN_MSPIKE_WL 148691 23.05 8.26 25.23 16 LOC_TINY_FONT_1 140486 24.99 32.82 23.84 17 RCVD_IN_MSPIKE_H2 139509 24.05 26.63 23.67 18 FVGT_m_MULTI_ODD 121699 21.35 26.05 20.65 19 MIME_HTML_ONLY 120341 21.58 29.46 20.42 20 XMSubLong 117060 20.29 23.16 19.86 21 T_KAM_HTML_FONT_INVALID 107901 18.72 21.47 18.31 22 ALL_TRUSTED 91741 13.85 2.25 15.57 23 BAYES_00 87524 13.07 1.00 14.85 24 RCVD_IN_MSPIKE_H3 87019 13.47 4.71 14.77 25 XM_Multi_Part_URI 80786 14.52 19.99 13.71 26 XM_Body_Dirty_Words 78327 14.20 20.35 13.29 27 XM_B_Unsub 76221 13.21 15.11 12.93 28 XM_DK_Undo_02 70824 17.21 52.37 12.02 29 RCVD_IN_MSPIKE_H4 54003 8.42 3.39 9.16 30 XM_Evil_Numbers_Gen 51880 9.04 10.62 8.80 31 IN_ZIMBRA_NJ_WHITELIST 50789 7.51 0.04 8.62 32 LotsOfNums_01 50570 8.70 9.49 8.58 33 TR_XM_DK_Bayes 50185 7.50 0.60 8.52 34 TM2_M_URI_OPT_OUT 46840 7.42 3.81 7.95 35 TR_XM_DK_Bayes1 46764 6.95 0.28 7.94 36 TooManyTo_001 44756 7.40 6.10 7.59 37 UNPARSEABLE_RELAY 44132 7.47 7.31 7.49 38 BAYES_99 43886 11.42 38.29 7.45 39 ANY_BOUNCE_MESSAGE 43694 6.55 0.69 7.41 40 BOUNCE_MESSAGE 43693 6.55 0.69 7.41 41 RCVD_IN_RP_SAFE 43227 6.59 1.54 7.34 42 TR_XM_DK_Bayes2 41750 6.20 0.22 7.08 43 HTML_IMAGE_RATIO_02 41665 7.54 10.71 7.07 44 RCVD_IN_RP_CERTIFIED 40155 6.02 0.68 6.81 45 XM_B_Phish_Phrases 39757 7.45 12.23 6.75 46 XM_SendGrid 39686 6.61 5.78 6.73 47 LOTS_OF_MONEY 39493 7.29 11.25 6.70 48 XM_DKIMWhitelistDomains 38775 5.73 0.01 6.58 49 BAYES_60 36997 6.25 6.10 6.28 50 BAYES_999 35247 9.16 30.65 5.98 51 XM_B_Unsub2 32500 5.13 2.54 5.51 52 HTML_IMAGE_RATIO_04 31917 5.33 4.72 5.42 53 DKIM_INVALID 31881 6.91 17.07 5.41 54 RELAYCOUNTRY_META 31762 8.68 30.96 5.39 55 MIME_QP_LONG_LINE 31644 5.07 3.04 5.37 56 XMStrtUSub 31503 5.05 3.03 5.35 57 BOTNET_IPINHOSTNAME 31220 6.90 17.74 5.30 58 XM_H_Long_From01 30757 5.34 6.17 5.22 59 BAYES_05 29738 4.52 0.97 5.05 60 RCVD_IN_IADB_LISTED 29310 4.44 0.79 4.97 61 MPART_ALT_DIFF 28955 5.22 7.32 4.91 62 BAYES_40 26378 4.24 2.64 4.48 63 RCVD_IN_IADB_SPF 25633 3.88 0.72 4.35 64 BAYES_20 25354 3.97 1.70 4.30 65 T_TooManySym_01 24915 4.12 3.37 4.23 66 BAYES_80 24419 4.67 8.24 4.14 67 XMSexyCombo_05 23719 5.07 12.14 4.02 68 XM_PDF 23453 3.66 1.51 3.98 69 RCVD_IN_IADB_SENDERID 22639 3.44 0.70 3.84 70 RCVD_IN_IADB_DK 22386 3.40 0.70 3.80 71 T_REMOTE_IMAGE 21851 3.55 2.48 3.71 72 TR_XM_DK_SendGrid 21425 3.49 2.49 3.64 73 XMSubMetaSx_00 21379 4.23 8.33 3.63 74 BOTNET 21254 7.11 30.82 3.61 75 HTML_IMAGE_RATIO_06 20645 3.42 2.87 3.50 76 XMNumbers 20035 3.65 5.32 3.40 77 NO_DNS_FOR_FROM 19608 4.72 14.11 3.33 78 MIME_HTML_ONLY_MULTI 19410 3.14 2.11 3.29 79 TR_XM_PhishingBody 19092 3.88 8.22 3.24 80 XM_H_Trusted_IP 18509 2.74 0.00 3.14 81 RCVD_IN_IADB_VOUCHED 18024 2.70 0.24 3.06 82 FROM_EXCESS_BASE64 17997 3.02 2.81 3.05 83 XM_UncommonTLD01 16655 4.53 16.04 2.83 84 BAYES_95 14352 2.67 4.25 2.44 85 UNTRUSTED_Relay 13732 4.71 20.80 2.33 86 HTML_IMAGE_RATIO_08 13290 2.38 3.24 2.26 87 HTML_MIME_NO_HTML_TAG 12856 2.40 3.92 2.18 88 MAILING_LIST_MULTI 12552 2.07 1.69 2.13 89 T_TooManySym_02 12485 1.98 1.03 2.12 90 MIME_HTML_MOSTLY 12024 2.49 5.50 2.04 91 XM_CamelCaseFrm001 11960 2.11 2.66 2.03 92 RCVD_IN_IADB_OPTIN 11512 1.74 0.26 1.95 93 XM_B_Phish66 10996 2.19 4.37 1.87 94 XM_B_COVIDMETA 10946 2.46 6.55 1.86 95 TooManyTo_002 10266 1.64 0.92 1.74 96 XM_B_SpammyTLD 10231 2.14 4.88 1.74 97 TVD_RCVD_IP 10228 1.56 0.38 1.74 98 XM_SPF_SoftFail 10213 2.41 6.99 1.73 99 RELAYCOUNTRY_CA 10107 2.40 7.01 1.72 100 KHOP_HELO_FCRDNS 10022 2.07 4.54 1.70 101 XMDiploma_00 9586 1.81 3.05 1.63 102 XMSubNoVowel 9165 1.54 1.42 1.56 103 TR_Symld_Words 9047 1.62 2.16 1.54 104 URI_HEX 9004 1.65 2.49 1.53 105 XM_DK_Undo_01 8801 1.48 1.37 1.49 106 T_XMDrugObfuBody_14 8770 1.55 2.00 1.49 107 T_XMDrugObfuBody_08 8670 1.76 3.68 1.47 108 RCVD_IN_BL_SPAMCOP_NET 8306 2.26 8.02 1.41 109 HELO_MISC_IP 7768 1.23 0.65 1.32 110 CK_HELO_DYNAMIC_SPLIT_IP 7761 1.22 0.59 1.32 111 IN_HORDE_ADDRESS_BOOK 7726 1.16 0.15 1.31 112 RCVD_IN_MSPIKE_H5 7669 1.15 0.16 1.30 113 SUBJ_ALL_CAPS 7479 1.36 1.95 1.27 114 INVALID_MSGID 7299 1.10 0.17 1.24 115 XM_ProductURIs 7002 1.14 0.79 1.19 116 HELO_NODOT 6995 1.16 0.94 1.19 117 HELO_NO_DOMAIN 6993 1.16 0.94 1.19 118 TooManyTo_003 6854 1.10 0.68 1.16 119 XM_UB50 6832 1.99 7.61 1.16 120 XM_GoogleGroups 6780 1.07 0.52 1.15 121 USER_IN_DEF_DKIM_WL 6773 1.00 0.01 1.15 122 XM_OfRef6 6563 1.27 2.30 1.11 123 URI_TRY_3LD 6394 1.13 1.41 1.08 124 TO_MALFORMED 6384 0.95 0.03 1.08 125 DATE_IN_PAST_03_06 6257 1.08 1.22 1.06 126 TM2_M_VERY_LONG_WORD 6197 1.20 2.17 1.05 127 XMGappySubj_01 6178 0.94 0.19 1.05 128 DKIM_ADSP_CUSTOM_MED 5778 1.07 1.70 0.98 129 HTML_FONT_FACE_BAD 5738 0.95 0.77 0.97 130 XMBrknScrpt_02 5444 1.22 3.21 0.92 131 XMBdyGiftCard01 5303 0.89 0.81 0.90 132 XM_H_Long_From02 5176 0.89 0.95 0.88 133 TR_MSPIKEBAYES00 5163 0.76 0.00 0.88 134 RELAYCOUNTRY_GB 5107 0.90 1.10 0.87 135 TooManyTo_004 5100 0.83 0.57 0.87 136 XMCapTrack 5099 0.83 0.58 0.87 137 PLING_QUERY 4925 0.78 0.37 0.84 138 T_TooManySym_03 4903 0.75 0.17 0.83 139 T_FILL_THIS_FORM_SHORT 4788 1.12 3.23 0.81 140 XMHTML_After_End 4543 0.93 2.04 0.77 141 XMStockSpam_06 4508 0.90 1.81 0.76 142 T_OBFU_PDF_ATTACH 4458 0.69 0.22 0.76 143 XMGenDplmaNmb 4406 0.92 2.12 0.75 144 XMBody_17 4392 1.04 3.02 0.75 145 SpammyFromTLD_01 4300 1.38 5.79 0.73 146 XMBody_95 4295 0.66 0.16 0.73 147 TooManyTo_005 4284 0.69 0.47 0.73 148 TR_XM_COVIDMETA4 4260 1.40 6.01 0.72 149 NML_ADSP_CUSTOM_MED 4147 0.80 1.47 0.70 150 TR_BOTNET_NEGATE 3951 0.64 0.42 0.67 151 XMSexyCombo_01 3944 0.99 3.16 0.67 152 RCVD_IN_MSPIKE_BL 3885 1.78 9.40 0.66 153 TR_XM_UnparsRelay 3822 1.05 3.73 0.65 154 T_XMDrugObfuBody_00 3786 0.79 1.77 0.64 155 XMSubMetaI_00 3752 0.68 0.96 0.64 156 TR_MetaPhish_Combo_01 3682 0.68 1.08 0.62 157 XM_DIRTYINTL 3633 1.19 5.08 0.62 158 XM_RXBody 3601 0.76 1.78 0.61 159 T_Symld_Words_02 3462 0.61 0.78 0.59 160 XM_SPF_Unknown 3234 0.57 0.71 0.55 161 XMPhish30 3229 0.61 0.99 0.55 162 TR_XM_COVIDMETA1 3165 0.84 2.93 0.54 163 HTTPS_HTTP_MISMATCH 3139 0.56 0.74 0.53 164 XMNoVowels 3058 0.52 0.54 0.52 165 XM_ShortIntro_01 3053 0.57 0.90 0.52 166 XMBody_78 3043 0.60 1.14 0.52 167 FROM_GOV_DKIM_AU 3015 0.46 0.10 0.51 168 HTML_IMAGE_ONLY_20 2988 0.52 0.60 0.51 169 XMMoneyMeta_00 2894 0.56 1.02 0.49 170 T_XMHurry_00 2812 0.71 2.29 0.48 171 HTML_TAG_BALANCE_BODY 2750 0.52 0.89 0.47 172 DKIM_ADSP_NXDOMAIN 2711 0.72 2.51 0.46 173 URI_NOVOWEL 2707 0.54 1.05 0.46 174 XM_B_COPY_HTML 2607 0.45 0.52 0.44 175 FORGED_GMAIL_RCVD 2603 0.55 1.26 0.44 176 TR_XM_PHPDW 2574 0.77 3.00 0.44 177 XM_B_REG_HTML 2557 0.41 0.27 0.43 178 SUBJ_DOLLARS 2555 0.45 0.53 0.43 179 XMSubMetaSxObfu_03 2554 0.50 0.97 0.43 180 T_TooManySym_04 2538 0.38 0.05 0.43 181 XMPhish08 2493 0.47 0.82 0.42 182 NUMERIC_HTTP_ADDR 2490 0.44 0.59 0.42 183 XM_H_PHPMailer 2488 0.52 1.21 0.42 184 TR_XM_PHPForged 2474 0.75 2.95 0.42 185 TR_XM_FormFill2 2471 0.75 2.95 0.42 186 XM_H_PHPOS 2446 0.74 2.94 0.42 187 RELAYCOUNTRY_AU 2439 0.47 0.87 0.41 188 XMHTMLBadTable_001 2318 0.40 0.43 0.39 189 FROM_GOV_SPOOF 2302 0.37 0.23 0.39 190 XM_S_SubURI 2269 0.35 0.11 0.39 191 HTML_IMAGE_ONLY_28 2246 0.37 0.33 0.38 192 MISSING_HEADERS 2186 0.61 2.20 0.37 193 RELAYCOUNTRY_DE 2181 0.54 1.67 0.37 194 USER_IN_WHITELIST 2150 0.32 0.00 0.36 195 RCVD_IN_MSPIKE_L3 2143 0.78 3.62 0.36 196 TM2_M_BODY_EMPTY 2139 0.33 0.13 0.36 197 XM_Body_Obfu01 2139 0.36 0.37 0.36 198 XMOemUri 2106 0.38 0.54 0.36 199 TR_LOTS_OF_MONEY3 2099 0.49 1.36 0.36 200 DIET_1 2089 0.50 1.47 0.35 ----------------------------------------------------------------------