Email: 478123 Autolearn: 0 AvgScore: 2.42 AvgScanTime: 1.30 sec Spam: 147621 Autolearn: 0 AvgScore: 13.53 AvgScanTime: 1.56 sec Ham: 330502 Autolearn: 0 AvgScore: -2.54 AvgScanTime: 1.18 sec Time Spent Running SA: 172.35 hours Time Spent Processing Spam: 64.15 hours Time Spent Processing Ham: 108.20 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142561 79.09 96.57 71.28 2 DKIM_SIGNED 135948 87.65 92.09 85.67 3 XM_DK_Pass 133760 86.65 90.61 84.87 4 DKIM_VALID 131706 85.40 89.22 83.69 5 XM_B_Unicode 122610 67.33 83.06 60.31 6 DCC_CHECK 119376 64.95 80.87 57.84 7 RELAYCOUNTRY_US 118014 85.14 79.94 87.47 8 XMListUnsubscribeExists 113611 56.10 76.96 46.78 9 XM_B_SpammyWords 109764 63.56 74.36 58.74 10 DKIM_VALID_AU 103670 70.87 70.23 71.15 11 XM_DK_Undo_02 86415 24.11 58.54 8.73 12 TR_XM_DKIM_Undo 73769 19.35 49.97 5.68 13 XM_B_Unicode3 68236 39.88 46.22 37.04 14 BAYES_99 66732 18.49 45.20 6.55 15 XM_B_SpammyWords2 62082 25.08 42.05 17.49 16 LOC_TINY_FONT_1 58900 29.91 39.90 25.44 17 BAYES_999 54651 15.01 37.02 5.18 18 TR_DCC_Bayes_99 53826 13.80 36.46 3.67 19 HTML_FONT_LOW_CONTRAST 53562 29.46 36.28 26.42 20 RCVD_IN_MSPIKE_H2 50169 27.73 33.99 24.94 21 MIME_HTML_ONLY 45960 23.74 31.13 20.44 22 DKIM_VALID_EF 45030 40.14 30.50 44.45 23 BAYES_50 43939 52.10 29.76 62.08 24 FVGT_m_MULTI_ODD 43675 23.14 29.59 20.26 25 T_KAM_HTML_FONT_INVALID 40727 18.49 27.59 14.42 26 RCVD_IN_MSPIKE_WL 39219 39.05 26.57 44.62 27 XMSubLong 32799 19.29 22.22 17.98 28 XM_Body_Dirty_Words 31027 14.42 21.02 11.47 29 T_TM2_M_HEADER_IN_MSG 29890 18.44 20.25 17.64 30 RELAYCOUNTRY_META 29675 8.37 20.10 3.13 31 TR_XM_SpammyWords2 26510 5.96 17.96 0.60 32 DCC_CHECK_NEGATIVE 26006 33.86 17.62 41.12 33 XM_Multi_Part_URI 22865 12.53 15.49 11.21 34 XM_B_SpammyWords3 21912 7.08 14.84 3.62 35 RCVD_IN_MSPIKE_H3 21275 14.99 14.41 15.24 36 LOTS_OF_MONEY 21155 8.57 14.33 5.99 37 BOTNET 20001 5.21 13.55 1.49 38 RCVD_IN_BL_SPAMCOP_NET 19365 4.88 13.12 1.20 39 BOTNET_IPINHOSTNAME 17752 7.06 12.03 4.84 40 TR_XM_SpammyWords4 17551 6.37 11.89 3.90 41 XM_B_Unsub 17237 10.17 11.68 9.50 42 RCVD_IN_MSPIKE_H4 16695 14.15 11.31 15.42 43 HTML_IMAGE_RATIO_02 16301 8.95 11.04 8.01 44 UNPARSEABLE_RELAY 15717 8.40 10.65 7.39 45 TR_XM_UnparsRelay 15230 7.60 10.32 6.39 46 XMSexyCombo_05 14927 6.24 10.11 4.50 47 XM_UncommonTLD01 14660 5.19 9.93 3.07 48 RELAYCOUNTRY_CA 14603 3.82 9.89 1.11 49 XM_Evil_Numbers_Gen 14508 9.29 9.83 9.05 50 UNTRUSTED_Relay 13696 3.76 9.28 1.30 51 MPART_ALT_DIFF 13538 5.57 9.17 3.96 52 XM_B_Phish_Phrases 12379 18.42 8.39 22.90 53 LotsOfNums_01 12154 7.95 8.23 7.82 54 BAYES_80 12085 6.85 8.19 6.25 55 XM_SendGrid 11557 6.92 7.83 6.52 56 MIME_HTML_MOSTLY 10768 3.83 7.29 2.29 57 RCVD_IN_RP_SAFE 10606 9.35 7.18 10.31 58 FSL_BULK_SIG 10005 5.77 6.78 5.33 59 XM_H_Long_From01 9995 4.88 6.77 4.03 60 BAYES_60 9795 7.84 6.64 8.37 61 HTML_IMAGE_RATIO_04 8972 5.26 6.08 4.90 62 TooManyTo_001 8346 5.29 5.65 5.13 63 RCVD_IN_RP_CERTIFIED 8149 8.31 5.52 9.55 64 XMSubMetaSx_00 8120 3.86 5.50 3.13 65 TR_XM_PhishingBody 8116 2.94 5.50 1.80 66 XM_OfRef6 8038 2.14 5.45 0.67 67 URIBL_SBL_A 7854 2.48 5.32 1.21 68 XM_DK_Undo_01 7778 2.39 5.27 1.10 69 BAYES_95 7734 4.33 5.24 3.92 70 TR_XM_DK_SendGrid 7617 4.65 5.16 4.43 71 XMBdyGiftCard01 6386 2.11 4.33 1.13 72 HTML_IMAGE_RATIO_06 6291 3.33 4.26 2.91 73 XM_B_SpammyTLD 5957 2.39 4.04 1.65 74 T_FILL_THIS_FORM_SHORT 5938 1.52 4.02 0.41 75 XMStrtUSub 5934 17.86 4.02 24.04 76 TM2_M_URI_OPT_OUT 5801 2.60 3.93 2.00 77 XMBody_17 5728 1.52 3.88 0.47 78 SpammyFromTLD_02 5696 1.26 3.86 0.10 79 SpammyFromTLD_01 5627 1.46 3.81 0.40 80 XM_CamelCaseFrm001 5371 2.42 3.64 1.88 81 MIME_HTML_ONLY_MULTI 5198 2.79 3.52 2.46 82 XMBrknScrpt_02 5182 1.43 3.51 0.51 83 TR_XM_SpammyWords5 5088 1.78 3.45 1.03 84 FROM_EXCESS_BASE64 4951 3.62 3.35 3.74 85 XM_DIRTYINTL 4856 1.19 3.29 0.25 86 FORGED_GMAIL_RCVD 4787 1.35 3.24 0.51 87 TR_XM_MaxBayes 4725 1.04 3.20 0.07 88 URI_HEX 4622 1.73 3.13 1.11 89 TR_LOTS_OF_MONEY3 4514 1.16 3.06 0.31 90 XM_UB50 4512 1.51 3.06 0.83 91 DKIM_INVALID 4242 2.25 2.87 1.98 92 XMNumbers 4222 2.60 2.86 2.48 93 RELAYCOUNTRY_FR 4039 1.01 2.74 0.24 94 T_TooManySym_01 3959 4.36 2.68 5.11 95 TR_XM_BayesRelay 3957 0.85 2.68 0.03 96 SUBJ_ALL_CAPS 3904 1.47 2.64 0.94 97 HTML_IMAGE_RATIO_08 3741 2.02 2.53 1.79 98 GOOGLE_DOC_SUSP 3737 0.79 2.53 0.01 99 RCVD_IN_MSPIKE_BL 3706 0.85 2.51 0.11 100 TR_XM_MSPIKECOMBO 3665 0.84 2.48 0.11 101 T_REMOTE_IMAGE 3617 2.57 2.45 2.63 102 PDS_OTHER_BAD_TLD 3564 1.18 2.41 0.63 103 T_XMDrugObfuBody_14 3558 2.13 2.41 2.01 104 XMDiploma_00 3481 1.38 2.36 0.95 105 XM_B_Phish66 3467 1.40 2.35 0.98 106 HK_RANDOM_REPLYTO 3413 0.83 2.31 0.17 107 XM_H_Long_From02 3349 1.37 2.27 0.98 108 XM_SPF_SoftFail 3343 1.26 2.26 0.81 109 XM_B_SpammyWords4 3271 1.00 2.22 0.45 110 TM2_M_VERY_LONG_WORD 3183 1.43 2.16 1.11 111 XM_UB99 3166 0.67 2.14 0.01 112 TR_XM_FormFill 3052 0.65 2.07 0.01 113 HTML_MIME_NO_HTML_TAG 2980 1.66 2.02 1.51 114 MIME_QP_LONG_LINE 2915 3.34 1.97 3.95 115 T_XMDrugObfuBody_08 2909 1.24 1.97 0.92 116 RCVD_IN_MSPIKE_L5 2846 0.65 1.93 0.09 117 T_XMHurry_00 2792 1.21 1.89 0.91 118 BAYES_40 2757 2.46 1.87 2.73 119 TR_XM_SB_Phish 2690 1.43 1.82 1.25 120 XMStockSpam_06 2690 1.53 1.82 1.40 121 DEAR_BENEFICIARY 2651 0.56 1.80 0.00 122 XM_B_COVIDMETA 2623 1.11 1.78 0.81 123 XMSubPhish11 2597 1.40 1.76 1.24 124 URI_NOVOWEL 2578 2.21 1.75 2.41 125 URI_TRY_3LD 2526 1.26 1.71 1.05 126 XM_OfRef7 2497 0.58 1.69 0.08 127 XMSexyCombo_01 2479 0.73 1.68 0.30 128 HDRS_MISSP 2427 0.57 1.64 0.09 129 RCVD_IN_RP_RNBL 2405 0.52 1.63 0.03 130 XMSubMetaI_00 2380 0.73 1.61 0.33 131 TR_XM_SpammyWords3 2374 0.53 1.61 0.05 132 DKIM_ADSP_NXDOMAIN 2373 0.68 1.61 0.27 133 RCVD_IN_IADB_LISTED 2366 3.37 1.60 4.16 134 XM_B_Unsub2 2264 1.17 1.53 1.00 135 XM_UB999 2186 0.47 1.48 0.01 136 URIBL_DBL_SPAM 2149 0.45 1.46 0.01 137 XMPhish08 2125 0.53 1.44 0.13 138 KHOP_HELO_FCRDNS 2083 1.00 1.41 0.82 139 RCVD_IN_IADB_SPF 2082 2.92 1.41 3.60 140 HK_SCAM 2065 0.44 1.40 0.01 141 BOTNET_NORDNS 2028 0.44 1.37 0.03 142 TR_XM_Spammywords 1998 0.79 1.35 0.54 143 XM_S_SpammyWords 1998 0.79 1.35 0.54 144 BAYES_20 1996 1.71 1.35 1.87 145 HTML_SHORT_LINK_IMG_1 1971 0.42 1.34 0.02 146 TR_XM_PHPDW 1967 0.62 1.33 0.31 147 BODY_URI_ONLY 1966 0.41 1.33 0.01 148 RCVD_IN_IADB_DK 1949 2.56 1.32 3.11 149 RCVD_IN_IADB_SENDERID 1940 2.64 1.31 3.23 150 NUMERIC_HTTP_ADDR 1849 0.50 1.25 0.16 151 XM_UB80 1802 0.40 1.22 0.03 152 DIET_1 1800 0.60 1.22 0.33 153 FROM_SUSPICIOUS_NTLD 1799 0.44 1.22 0.09 154 XMGenDplmaNmb 1778 0.67 1.20 0.43 155 TR_Symld_Words 1760 1.16 1.19 1.15 156 URIBL_BLACK 1750 0.38 1.19 0.02 157 MIME_HEADER_CTYPE_ONLY 1749 0.41 1.18 0.07 158 XM_UB60 1722 0.43 1.17 0.11 159 MONEY_FORM_SHORT 1716 0.36 1.16 0.00 160 FROM_SUSPICIOUS_NTLD_FP 1701 0.42 1.15 0.09 161 TR_XM_PHPForged 1690 0.50 1.14 0.21 162 HDRS_LCASE_IMGONLY 1665 0.35 1.13 0.01 163 TR_XM_FormFill2 1663 0.50 1.13 0.21 164 XM_H_PHPOS 1659 0.49 1.12 0.21 165 ADVANCE_FEE_5_NEW_MONEY 1656 0.35 1.12 0.00 166 XM_URI_RBL 1637 0.45 1.11 0.16 167 TR_XM_RelayPhish 1619 0.38 1.10 0.06 168 T_Symld_Words_02 1606 0.57 1.09 0.34 169 XM_UB95 1598 0.35 1.08 0.02 170 HTTPS_HTTP_MISMATCH 1591 0.64 1.08 0.44 171 TR_Sbj_FN_Bdy 1576 0.38 1.07 0.08 172 T_XMDrugObfuBody_00 1564 0.86 1.06 0.78 173 MILLION_USD 1562 0.33 1.06 0.00 174 MAILING_LIST_MULTI 1541 1.43 1.04 1.61 175 XM_Body_Obfu01 1532 0.50 1.04 0.26 176 URI_NO_WWW_BIZ_CGI 1508 0.32 1.02 0.00 177 BAYES_00 1486 5.23 1.01 7.11 178 HTML_FONT_SIZE_HUGE 1457 0.40 0.99 0.14 179 TR_XM_COVIDMETA4 1434 0.44 0.97 0.20 180 TR_XM_INV_DKIM 1419 0.35 0.96 0.08 181 RELAYCOUNTRY_NL 1418 0.38 0.96 0.12 182 XM_Body_Dirty_Words_01 1417 0.40 0.96 0.15 183 RELAYCOUNTRY_IN 1366 0.32 0.93 0.05 184 RCVD_IN_PSBL 1345 0.36 0.91 0.11 185 SHORT_URI_2 1342 0.29 0.91 0.01 186 TR_MetaPhish_Combo_01 1328 0.66 0.90 0.56 187 RELAYCOUNTRY_DE 1308 0.45 0.89 0.25 188 XMPhish30 1308 0.52 0.89 0.35 189 MONEY_ATM_CARD 1300 0.27 0.88 0.00 190 XMBody_78 1272 0.45 0.86 0.26 191 XMHTMLBadTable_001 1266 0.76 0.86 0.71 192 RCVD_IN_MSPIKE_H5 1249 9.91 0.85 13.96 193 RDNS_DYNAMIC 1237 0.72 0.84 0.66 194 TR_Caps_n_Bayes_99 1209 0.34 0.82 0.12 195 URI_PHP_REDIR 1202 0.25 0.81 0.00 196 TR_XM_COVIDMETA1 1170 0.32 0.79 0.12 197 HTML_TAG_BALANCE_BODY 1163 0.37 0.79 0.19 198 HTML_IMAGE_ONLY_04 1161 0.27 0.79 0.03 199 UPPERCASE_75_100 1158 0.26 0.78 0.03 200 LOADSA_MONEY_COMBO 1147 0.27 0.78 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RELAYCOUNTRY_US 289082 85.14 79.94 87.47 2 DKIM_SIGNED 283149 87.65 92.09 85.67 3 XM_DK_Pass 280513 86.65 90.61 84.87 4 DKIM_VALID 276611 85.40 89.22 83.69 5 HTML_MESSAGE 235575 79.09 96.57 71.28 6 DKIM_VALID_AU 235157 70.87 70.23 71.15 7 BAYES_50 205164 52.10 29.76 62.08 8 XM_B_Unicode 199334 67.33 83.06 60.31 9 XM_B_SpammyWords 194152 63.56 74.36 58.74 10 DCC_CHECK 191167 64.95 80.87 57.84 11 XMListUnsubscribeExists 154619 56.10 76.96 46.78 12 RCVD_IN_MSPIKE_WL 147484 39.05 26.57 44.62 13 DKIM_VALID_EF 146901 40.14 30.50 44.45 14 DCC_CHECK_NEGATIVE 135887 33.86 17.62 41.12 15 XM_B_Unicode3 122431 39.88 46.22 37.04 16 XM_DKIMWhitelistDomains 97520 20.40 0.02 29.51 17 HTML_FONT_LOW_CONTRAST 87305 29.46 36.28 26.42 18 LOC_TINY_FONT_1 84087 29.91 39.90 25.44 19 RCVD_IN_MSPIKE_H2 82419 27.73 33.99 24.94 20 XMStrtUSub 79466 17.86 4.02 24.04 21 XM_B_Phish_Phrases 75692 18.42 8.39 22.90 22 MIME_HTML_ONLY 67551 23.74 31.13 20.44 23 FVGT_m_MULTI_ODD 66953 23.14 29.59 20.26 24 XMSubLong 59410 19.29 22.22 17.98 25 T_TM2_M_HEADER_IN_MSG 58287 18.44 20.25 17.64 26 XM_B_SpammyWords2 57815 25.08 42.05 17.49 27 RCVD_IN_MSPIKE_H4 50962 14.15 11.31 15.42 28 RCVD_IN_MSPIKE_H3 50384 14.99 14.41 15.24 29 T_KAM_HTML_FONT_INVALID 47674 18.49 27.59 14.42 30 RCVD_IN_MSPIKE_H5 46138 9.91 0.85 13.96 31 XM_Body_Dirty_Words 37900 14.42 21.02 11.47 32 XM_Multi_Part_URI 37043 12.53 15.49 11.21 33 RCVD_IN_RP_SAFE 34081 9.35 7.18 10.31 34 ALL_TRUSTED 33060 7.12 0.67 10.00 35 RCVD_IN_RP_CERTIFIED 31563 8.31 5.52 9.55 36 XM_B_Unsub 31404 10.17 11.68 9.50 37 XM_Evil_Numbers_Gen 29906 9.29 9.83 9.05 38 XM_DK_Undo_02 28867 24.11 58.54 8.73 39 BAYES_60 27675 7.84 6.64 8.37 40 HTML_IMAGE_RATIO_02 26470 8.95 11.04 8.01 41 LotsOfNums_01 25854 7.95 8.23 7.82 42 UNPARSEABLE_RELAY 24432 8.40 10.65 7.39 43 BAYES_00 23515 5.23 1.01 7.11 44 BAYES_99 21660 18.49 45.20 6.55 45 XM_SendGrid 21535 6.92 7.83 6.52 46 TR_XM_UnparsRelay 21108 7.60 10.32 6.39 47 TR_XM_DK_Bayes 20691 4.50 0.55 6.26 48 BAYES_80 20648 6.85 8.19 6.25 49 TR_XM_DK_Bayes1 20407 4.43 0.54 6.17 50 LOTS_OF_MONEY 19803 8.57 14.33 5.99 51 TR_XM_DKIM_Undo 18758 19.35 49.97 5.68 52 TR_XM_DK_Bayes2 18341 3.96 0.40 5.55 53 FSL_BULK_SIG 17606 5.77 6.78 5.33 54 BAYES_999 17127 15.01 37.02 5.18 55 TooManyTo_001 16960 5.29 5.65 5.13 56 T_TooManySym_01 16896 4.36 2.68 5.11 57 HTML_IMAGE_RATIO_04 16193 5.26 6.08 4.90 58 BOTNET_IPINHOSTNAME 16005 7.06 12.03 4.84 59 XMSexyCombo_05 14885 6.24 10.11 4.50 60 TR_XM_DK_SendGrid 14638 4.65 5.16 4.43 61 RCVD_IN_IADB_LISTED 13743 3.37 1.60 4.16 62 IN_ZIMBRA_NJ_WHITELIST 13425 2.82 0.04 4.06 63 XM_H_Long_From01 13319 4.88 6.77 4.03 64 MPART_ALT_DIFF 13085 5.57 9.17 3.96 65 MIME_QP_LONG_LINE 13065 3.34 1.97 3.95 66 BAYES_95 12969 4.33 5.24 3.92 67 TR_XM_SpammyWords4 12896 6.37 11.89 3.90 68 FROM_EXCESS_BASE64 12372 3.62 3.35 3.74 69 TR_DCC_Bayes_99 12140 13.80 36.46 3.67 70 XM_B_SpammyWords3 11961 7.08 14.84 3.62 71 RCVD_IN_IADB_SPF 11903 2.92 1.41 3.60 72 RCVD_IN_IADB_SENDERID 10659 2.64 1.31 3.23 73 RELAYCOUNTRY_META 10351 8.37 20.10 3.13 74 XMSubMetaSx_00 10331 3.86 5.50 3.13 75 RCVD_IN_IADB_DK 10291 2.56 1.32 3.11 76 XM_UncommonTLD01 10160 5.19 9.93 3.07 77 HTML_IMAGE_RATIO_06 9628 3.33 4.26 2.91 78 T_TooManySym_02 9302 2.06 0.36 2.81 79 BAYES_40 9013 2.46 1.87 2.73 80 T_REMOTE_IMAGE 8694 2.57 2.45 2.63 81 RCVD_IN_IADB_VOUCHED 8401 1.97 0.68 2.54 82 XMNumbers 8203 2.60 2.86 2.48 83 MIME_HTML_ONLY_MULTI 8131 2.79 3.52 2.46 84 URI_NOVOWEL 7979 2.21 1.75 2.41 85 INVALID_MSGID 7865 1.76 0.39 2.38 86 MIME_HTML_MOSTLY 7560 3.83 7.29 2.29 87 MSGID_NOFQDN1 7488 1.58 0.03 2.27 88 TVD_RCVD_IP 7254 1.55 0.11 2.19 89 T_XMDrugObfuBody_14 6640 2.13 2.41 2.01 90 TM2_M_URI_OPT_OUT 6616 2.60 3.93 2.00 91 XM_PDF 6558 1.47 0.31 1.98 92 DKIM_INVALID 6538 2.25 2.87 1.98 93 TO_MALFORMED 6256 1.31 0.01 1.89 94 XM_CamelCaseFrm001 6199 2.42 3.64 1.88 95 BAYES_20 6186 1.71 1.35 1.87 96 TR_XM_PhishingBody 5947 2.94 5.50 1.80 97 HTML_IMAGE_RATIO_08 5917 2.02 2.53 1.79 98 HELO_MISC_IP 5537 1.18 0.08 1.68 99 XM_B_SpammyTLD 5460 2.39 4.04 1.65 100 MAILING_LIST_MULTI 5318 1.43 1.04 1.61 101 RCVD_IN_IADB_OPTIN 5310 1.25 0.46 1.61 102 ANY_BOUNCE_MESSAGE 5237 1.16 0.21 1.58 103 BOUNCE_MESSAGE 5235 1.16 0.20 1.58 104 IN_HORDE_ADDRESS_BOOK 5082 1.08 0.05 1.54 105 HTML_MIME_NO_HTML_TAG 4980 1.66 2.02 1.51 106 BOTNET 4916 5.21 13.55 1.49 107 XM_H_Trusted_IP 4830 1.01 0.00 1.46 108 XMBSHREFv2 4663 1.04 0.21 1.41 109 XMStockSpam_06 4627 1.53 1.82 1.40 110 USER_IN_DEF_DKIM_WL 4366 0.92 0.04 1.32 111 UNTRUSTED_Relay 4293 3.76 9.28 1.30 112 TR_XM_SB_Phish 4144 1.43 1.82 1.25 113 XMSubPhish11 4108 1.40 1.76 1.24 114 URIBL_SBL_A 3995 2.48 5.32 1.21 115 RCVD_IN_BL_SPAMCOP_NET 3975 4.88 13.12 1.20 116 TR_Symld_Words 3799 1.16 1.19 1.15 117 XMBdyGiftCard01 3722 2.11 4.33 1.13 118 RELAYCOUNTRY_CA 3684 3.82 9.89 1.11 119 TM2_M_VERY_LONG_WORD 3675 1.43 2.16 1.11 120 BAYES_05 3672 0.99 0.73 1.11 121 URI_HEX 3668 1.73 3.13 1.11 122 XM_DK_Undo_01 3632 2.39 5.27 1.10 123 XMBody_95 3524 0.79 0.16 1.07 124 URI_TRY_3LD 3484 1.26 1.71 1.05 125 TR_XM_SpammyWords5 3411 1.78 3.45 1.03 126 TooManyTo_002 3396 0.87 0.53 1.03 127 XM_B_Unsub2 3315 1.17 1.53 1.00 128 XM_B_Phish66 3224 1.40 2.35 0.98 129 XM_H_Long_From02 3223 1.37 2.27 0.98 130 XMDiploma_00 3126 1.38 2.36 0.95 131 SUBJ_ALL_CAPS 3114 1.47 2.64 0.94 132 T_XMDrugObfuBody_08 3034 1.24 1.97 0.92 133 XMGappySubj_01 2997 0.65 0.07 0.91 134 T_XMHurry_00 2995 1.21 1.89 0.91 135 HTML_FONT_FACE_BAD 2932 0.80 0.62 0.89 136 XM_UB50 2727 1.51 3.06 0.83 137 KHOP_HELO_FCRDNS 2712 1.00 1.41 0.82 138 TVD_SPACE_RATIO 2712 0.59 0.06 0.82 139 XM_SPF_SoftFail 2686 1.26 2.26 0.81 140 DKIM_ADSP_CUSTOM_MED 2670 0.79 0.75 0.81 141 XM_B_COVIDMETA 2663 1.11 1.78 0.81 142 T_XMDrugObfuBody_00 2566 0.86 1.06 0.78 143 XM_GoogleGroups 2514 0.66 0.43 0.76 144 T_TooManySym_03 2502 0.56 0.12 0.76 145 XM_ProductURIs 2434 0.71 0.64 0.74 146 TooManyTo_003 2419 0.63 0.40 0.73 147 TR_MSPIKEBAYES00 2361 0.50 0.03 0.71 148 XMHTMLBadTable_001 2348 0.76 0.86 0.71 149 XM_OfRef6 2202 2.14 5.45 0.67 150 RDNS_DYNAMIC 2194 0.72 0.84 0.66 151 PDS_OTHER_BAD_TLD 2098 1.18 2.41 0.63 152 XM_RXBody 2014 0.52 0.33 0.61 153 XM_B_REG_HTML 1989 0.55 0.45 0.60 154 TR_XM_SpammyWords2 1977 5.96 17.96 0.60 155 XMSubMetaSxObfu_02 1892 0.45 0.19 0.57 156 TR_MetaPhish_Combo_01 1848 0.66 0.90 0.56 157 XMSubNoVowel 1828 0.59 0.66 0.55 158 TR_XM_Spammywords 1794 0.79 1.35 0.54 159 XM_S_SpammyWords 1794 0.79 1.35 0.54 160 TooManyTo_004 1793 0.48 0.35 0.54 161 RELAYCOUNTRY_GB 1769 0.55 0.60 0.54 162 HELO_NO_DOMAIN 1720 0.48 0.40 0.52 163 HELO_NODOT 1720 0.48 0.40 0.52 164 FORGED_GMAIL_RCVD 1679 1.35 3.24 0.51 165 XMBrknScrpt_02 1677 1.43 3.51 0.51 166 NML_ADSP_CUSTOM_MED 1637 0.48 0.46 0.50 167 USER_IN_WHITELIST 1564 0.33 0.00 0.47 168 USER_IN_WELCOMELIST 1564 0.33 0.00 0.47 169 XMBody_17 1560 1.52 3.88 0.47 170 TooManyTo_005 1553 0.42 0.29 0.47 171 XM_H_PHPMailer 1511 0.55 0.76 0.46 172 XM_B_SpammyWords4 1497 1.00 2.22 0.45 173 PLING_QUERY 1475 0.49 0.60 0.45 174 HTTPS_HTTP_MISMATCH 1467 0.64 1.08 0.44 175 XMHTML_After_End 1423 0.53 0.75 0.43 176 XMGenDplmaNmb 1420 0.67 1.20 0.43 177 T_FILL_THIS_FORM_SHORT 1353 1.52 4.02 0.41 178 HTML_IMAGE_ONLY_20 1349 0.32 0.12 0.41 179 SpammyFromTLD_01 1331 1.46 3.81 0.40 180 XM_B_COPY_HTML 1323 0.48 0.65 0.40 181 XMLngstWrd_00 1314 0.39 0.38 0.40 182 XMOemUri 1272 0.30 0.12 0.38 183 XMNoVowels 1205 0.38 0.40 0.36 184 XM_SPF_Unknown 1180 0.37 0.41 0.36 185 XMPhish30 1170 0.52 0.89 0.35 186 T_Symld_Words_02 1126 0.57 1.09 0.34 187 MPART_ALT_DIFF_COUNT 1121 0.43 0.63 0.34 188 XMLngstWrd_01 1102 0.34 0.35 0.33 189 XMSubMetaI_00 1094 0.73 1.61 0.33 190 DIET_1 1087 0.60 1.22 0.33 191 XM_D_tchamptons_WL 1085 0.23 0.00 0.33 192 XMCapTrack 1085 0.29 0.21 0.33 193 XM_Sams_Club_Forge 1049 0.25 0.11 0.32 194 T_TooManySym_04 1042 0.23 0.05 0.32 195 SHOPIFY_IMG_NOT_RCVD_SFY 1034 0.36 0.46 0.31 196 XMSubGiftCard1 1026 0.37 0.52 0.31 197 TR_LOTS_OF_MONEY3 1021 1.16 3.06 0.31 198 XMGppyBdWords 1019 0.35 0.43 0.31 199 TR_XM_PHPDW 1018 0.62 1.33 0.31 200 XM_Superlative01 1018 0.27 0.19 0.31 ----------------------------------------------------------------------