Email: 290852 Autolearn: 0 AvgScore: 3.00 AvgScanTime: 1.56 sec Spam: 80506 Autolearn: 0 AvgScore: 15.16 AvgScanTime: 2.13 sec Ham: 210346 Autolearn: 0 AvgScore: -1.65 AvgScanTime: 1.34 sec Time Spent Running SA: 126.14 hours Time Spent Processing Spam: 47.67 hours Time Spent Processing Ham: 78.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 74575 84.75 92.63 81.73 2 DCC_CHECK 65365 55.46 81.19 45.60 3 DKIM_SIGNED 65144 76.97 80.92 75.46 4 XM_DK_Pass 62387 74.94 77.49 73.97 5 XM_B_Unicode 61515 71.54 76.41 69.67 6 DKIM_VALID 60805 73.21 75.53 72.32 7 RELAYCOUNTRY_US 59800 77.49 74.28 78.71 8 XMListUnsubscribeExists 55129 54.57 68.48 49.24 9 XM_B_SpammyWords 52103 49.62 64.72 43.84 10 DKIM_VALID_AU 46650 58.71 57.95 59.01 11 XM_DK_Undo_02 36519 18.83 45.36 8.68 12 XM_B_Unicode3 33684 41.78 41.84 41.76 13 XM_B_SpammyWords2 30988 25.07 38.49 19.93 14 BAYES_99 30450 15.77 37.82 7.33 15 TR_XM_DKIM_Undo 29430 15.00 36.56 6.76 16 BAYES_50 29064 47.93 36.10 52.46 17 HTML_FONT_LOW_CONTRAST 27713 30.34 34.42 28.78 18 LOC_TINY_FONT_1 27166 28.54 33.74 26.55 19 MIME_HTML_ONLY 26375 24.69 32.76 21.60 20 TR_DCC_Bayes_99 24865 11.57 30.89 4.18 21 BAYES_999 24107 12.75 29.94 6.17 22 DKIM_VALID_EF 23539 29.38 29.24 29.43 23 RCVD_IN_MSPIKE_H2 22055 25.64 27.40 24.97 24 T_KAM_HTML_FONT_INVALID 20956 18.66 26.03 15.84 25 FVGT_m_MULTI_ODD 20434 23.56 25.38 22.86 26 RELAYCOUNTRY_META 19418 10.39 24.12 5.13 27 XM_Body_Dirty_Words 18432 15.75 22.90 13.01 28 RCVD_IN_MSPIKE_WL 17747 29.27 22.04 32.04 29 XMSubLong 16784 20.88 20.85 20.89 30 T_TM2_M_HEADER_IN_MSG 15743 23.42 19.56 24.89 31 DCC_CHECK_NEGATIVE 15073 44.49 18.72 54.35 32 FSL_BULK_SIG 14521 11.78 18.04 9.38 33 UNTRUSTED_Relay 13639 6.55 16.94 2.57 34 XM_UncommonTLD01 12712 7.54 15.79 4.38 35 BOTNET 12093 5.35 15.02 1.65 36 XM_Multi_Part_URI 11863 13.70 14.74 13.31 37 TR_XM_SpammyWords2 11277 5.23 14.01 1.87 38 BOTNET_IPINHOSTNAME 11173 8.03 13.88 5.79 39 XM_B_SpammyWords3 10544 6.91 13.10 4.54 40 UNPARSEABLE_RELAY 9796 9.81 12.17 8.91 41 XMSexyCombo_05 9704 7.23 12.05 5.38 42 TR_XM_UnparsRelay 9584 8.41 11.90 7.08 43 LOTS_OF_MONEY 9514 7.93 11.82 6.44 44 RCVD_IN_MSPIKE_H3 9461 15.38 11.75 16.77 45 XM_B_Unsub 8573 11.06 10.65 11.22 46 SpammyFromTLD_02 8142 2.93 10.11 0.18 47 TR_XM_SpammyWords4 7973 5.54 9.90 3.87 48 RCVD_IN_BL_SPAMCOP_NET 7917 3.14 9.83 0.58 49 RCVD_IN_MSPIKE_H4 7539 11.86 9.36 12.82 50 XM_SendGrid 7328 8.25 9.10 7.92 51 HTML_IMAGE_RATIO_02 7087 7.70 8.80 7.28 52 T_REMOTE_IMAGE 6727 4.66 8.36 3.25 53 KHOP_HELO_FCRDNS 6313 3.19 7.84 1.40 54 BAYES_80 6254 5.53 7.77 4.67 55 BAYES_60 6162 9.78 7.65 10.60 56 TooManyTo_001 6110 7.27 7.59 7.14 57 XMSubMetaSx_00 5995 4.67 7.45 3.61 58 XM_Evil_Numbers_Gen 5777 8.17 7.18 8.55 59 XM_B_SpammyTLD 5575 3.55 6.92 2.26 60 RELAYCOUNTRY_CA 5508 2.88 6.84 1.37 61 MPART_ALT_DIFF 5498 5.22 6.83 4.60 62 HTML_MIME_NO_HTML_TAG 5469 3.11 6.79 1.70 63 XM_B_Phish_Phrases 5318 5.12 6.61 4.55 64 RCVD_IN_MSPIKE_BL 5213 2.24 6.48 0.61 65 TR_XM_MSPIKECOMBO 5160 2.21 6.41 0.60 66 BODY_URI_ONLY 5156 1.78 6.40 0.01 67 T_HTML_TAG_BALANCE_CENTER 4823 1.73 5.99 0.10 68 RCVD_IN_RP_SAFE 4820 8.26 5.99 9.13 69 XM_UB50 4743 3.01 5.89 1.91 70 TR_XM_PhishingBody 4708 3.52 5.85 2.63 71 HTML_IMAGE_ONLY_08 4565 1.69 5.67 0.17 72 HTML_IMAGE_RATIO_04 4508 6.39 5.60 6.69 73 DKIM_INVALID 4339 3.76 5.39 3.14 74 LotsOfNums_01 4279 7.82 5.32 8.77 75 TR_XM_DK_SendGrid 4160 5.02 5.17 4.96 76 XMNumbers 4149 4.35 5.15 4.04 77 MIME_HTML_MOSTLY 4052 3.39 5.03 2.76 78 TR_XM_SPAMCOP 3985 1.51 4.95 0.19 79 XM_H_Long_From01 3965 5.16 4.93 5.25 80 RCVD_IN_MSPIKE_L5 3930 1.39 4.88 0.06 81 PDS_OTHER_BAD_TLD 3897 1.69 4.84 0.48 82 MIXED_CENTER_CASE 3848 1.33 4.78 0.02 83 MIXED_HREF_CASE 3810 1.31 4.73 0.00 84 MIXED_FONT_CASE 3800 1.31 4.72 0.00 85 MIXED_AREA_CASE 3794 1.30 4.71 0.00 86 RCVD_IN_RP_CERTIFIED 3792 7.21 4.71 8.17 87 XMStrtUSub 3727 5.41 4.63 5.71 88 BAYES_95 3616 3.33 4.49 2.88 89 BOTNET_NORDNS 3561 1.23 4.42 0.01 90 XM_DIRTYINTL 3494 2.10 4.34 1.24 91 HTML_FONT_SIZE_LARGE 3446 1.30 4.28 0.15 92 TR_XM_SpammyWords5 3441 2.18 4.27 1.38 93 MIXED_IMG_CASE 3415 1.18 4.24 0.00 94 RCVD_IN_RP_RNBL 2944 1.04 3.66 0.04 95 XM_UB99 2935 1.02 3.65 0.02 96 URI_GOOG_STO_SPAMMY 2887 0.99 3.59 0.00 97 XM_SPF_SoftFail 2827 1.93 3.51 1.33 98 HTML_IMAGE_RATIO_06 2771 3.70 3.44 3.80 99 SpammyFromTLD_01 2738 1.30 3.40 0.49 100 TR_XM_SpammyWords3 2604 1.30 3.23 0.57 101 T_XMDrugObfuBody_14 2455 2.81 3.05 2.72 102 XM_B_Phish66 2446 1.74 3.04 1.25 103 XMBody_17 2417 1.42 3.00 0.82 104 TM2_M_URI_OPT_OUT 2383 4.12 2.96 4.56 105 MIME_HTML_ONLY_MULTI 2365 2.98 2.94 2.99 106 TR_XM_PHPDW 2356 1.02 2.93 0.29 107 T_FILL_THIS_FORM_SHORT 2348 1.24 2.92 0.60 108 URI_NOVOWEL 2279 2.28 2.83 2.06 109 T_XMDrugObfuBody_08 2264 1.93 2.81 1.59 110 URIBL_SBL_A 2257 0.92 2.80 0.20 111 XM_OfRef6 2239 1.47 2.78 0.97 112 HTML_FONT_SIZE_HUGE 2214 0.81 2.75 0.07 113 URIBL_DBL_SPAM 2198 0.78 2.73 0.03 114 FROM_SUSPICIOUS_NTLD 2195 0.80 2.73 0.06 115 TR_XM_PHPForged 2176 0.93 2.70 0.25 116 XM_UB60 2163 0.79 2.69 0.06 117 TR_XM_FormFill2 2109 0.91 2.62 0.25 118 XM_H_PHPOS 2100 0.89 2.61 0.24 119 XMSexyCombo_01 2086 1.07 2.59 0.49 120 FROM_SUSPICIOUS_NTLD_FP 2083 0.76 2.59 0.05 121 GOOG_STO_IMG_HTML 2021 0.69 2.51 0.00 122 TR_LOTS_OF_MONEY3 2009 0.94 2.50 0.35 123 XM_UB999 1932 0.68 2.40 0.02 124 T_TooManySym_01 1910 5.70 2.37 6.97 125 TR_XM_MaxBayes 1901 0.66 2.36 0.01 126 XMDiploma_00 1878 1.48 2.33 1.16 127 HTML_IMAGE_RATIO_08 1865 2.18 2.32 2.12 128 MIME_QP_LONG_LINE 1816 3.53 2.26 4.01 129 SUBJ_ALL_CAPS 1799 1.45 2.23 1.15 130 BAYES_40 1767 3.87 2.19 4.51 131 URI_HEX 1752 1.66 2.18 1.47 132 RCVD_IN_PSBL 1744 0.71 2.17 0.16 133 XM_Body_Dirty_Words_01 1724 1.42 2.14 1.14 134 XMSlimDrugH 1697 0.76 2.11 0.24 135 TM2_M_VERY_LONG_WORD 1694 1.49 2.10 1.25 136 XM_B_SpammyWords4 1694 0.79 2.10 0.29 137 XMBrknScrpt_02 1693 1.46 2.10 1.22 138 XM_CamelCaseFrm001 1602 2.03 1.99 2.04 139 TR_Mismatch_TLD_02 1600 0.61 1.99 0.09 140 TR_XM_BayesRelay 1596 0.56 1.98 0.01 141 FROM_EXCESS_BASE64 1559 3.02 1.94 3.44 142 XMBdyGiftCard01 1526 1.34 1.90 1.13 143 TR_XM_FormFill 1515 0.52 1.88 0.00 144 DIET_1 1490 0.84 1.85 0.45 145 XM_UB80 1481 0.53 1.84 0.02 146 USER_IN_DEF_DKIM_WL 1476 11.75 1.83 15.54 147 RELAYCOUNTRY_IR 1462 0.50 1.82 0.00 148 JH_SPAMMY_HEADERS 1449 0.50 1.80 0.00 149 XM_ShortIntro_01 1444 0.79 1.79 0.41 150 URI_TRY_3LD 1418 1.28 1.76 1.09 151 T_XMHurry_00 1385 1.15 1.72 0.94 152 XM_DK_Undo_01 1379 1.62 1.71 1.58 153 DATE_IN_PAST_12_24 1365 0.51 1.70 0.06 154 XM_B_COVIDMETA 1356 1.00 1.68 0.74 155 BAYES_20 1345 3.36 1.67 4.01 156 RCVD_IN_IADB_LISTED 1341 3.12 1.67 3.67 157 URI_PHP_REDIR 1286 0.46 1.60 0.02 158 RELAYCOUNTRY_IN 1240 0.47 1.54 0.06 159 TR_XM_SB_Phish 1235 1.65 1.53 1.69 160 XM_URI_RBL 1226 0.55 1.52 0.18 161 XMStockSpam_06 1215 1.60 1.51 1.63 162 RCVD_IN_IADB_SPF 1210 2.72 1.50 3.19 163 XMSubPhish11 1190 1.62 1.48 1.67 164 TR_XM_COVIDMETA1 1179 0.55 1.46 0.21 165 XM_H_TOP 1174 0.41 1.46 0.01 166 ALL_TRUSTED 1164 12.64 1.45 16.93 167 RELAYCOUNTRY_FR 1161 1.14 1.44 1.02 168 MAILING_LIST_MULTI 1156 2.54 1.44 2.96 169 BAYES_00 1152 8.70 1.43 11.48 170 RCVD_IN_IADB_DK 1150 2.42 1.43 2.79 171 XM_B_Unsub2 1150 1.15 1.43 1.04 172 XMGenDplmaNmb 1146 0.85 1.42 0.64 173 TR_M_TOP_BAYES 1139 0.39 1.41 0.00 174 RCVD_IN_IADB_SENDERID 1138 2.48 1.41 2.89 175 XMSexyCombo_04 1134 0.51 1.41 0.17 176 TR_XM_INV_DKIM 1117 0.44 1.39 0.08 177 XMSubMetaI_00 1112 0.88 1.38 0.69 178 HK_RANDOM_REPLYTO 1109 0.55 1.38 0.23 179 XM_H_PHPMailer 1078 0.77 1.34 0.55 180 URIBL_BLACK 1078 0.38 1.34 0.02 181 NAME_EMAIL_DIFF 1075 0.46 1.34 0.12 182 RELAYCOUNTRY_NL 1061 0.46 1.32 0.13 183 XM_UB95 1054 0.37 1.31 0.01 184 XMSubMetaSSx_00 1040 0.64 1.29 0.40 185 PDS_FROM_2_EMAILS 1002 0.35 1.24 0.00 186 XM_H_Long_From02 996 1.09 1.24 1.04 187 XMPhish30 984 0.77 1.22 0.60 188 XM_JunkDunk 972 0.33 1.21 0.00 189 FROM_2_EMAILS_SHORT 968 0.34 1.20 0.00 190 XM_S_SpammyWords 961 0.53 1.19 0.28 191 TR_XM_Spammywords 961 0.53 1.19 0.28 192 XMPhish08 956 0.57 1.19 0.33 193 TR_Mismatch_TLD_01 955 0.53 1.19 0.28 194 XM_B_REG_HTML 938 0.86 1.17 0.75 195 RELAYCOUNTRY_CH 933 0.35 1.16 0.04 196 US_DOLLARS_3 915 0.61 1.14 0.41 197 BODY_SINGLE_URI 910 0.32 1.13 0.02 198 XMSubNoVowel 909 1.52 1.13 1.67 199 T_XMDrugObfuBody_00 904 0.69 1.12 0.52 200 PDS_TO_EQ_FROM_NAME 903 0.31 1.12 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 171922 84.75 92.63 81.73 2 RELAYCOUNTRY_US 165573 77.49 74.28 78.71 3 DKIM_SIGNED 158727 76.97 80.92 75.46 4 XM_DK_Pass 155589 74.94 77.49 73.97 5 DKIM_VALID 152118 73.21 75.53 72.32 6 XM_B_Unicode 146555 71.54 76.41 69.67 7 DKIM_VALID_AU 124123 58.71 57.95 59.01 8 DCC_CHECK_NEGATIVE 114315 44.49 18.72 54.35 9 BAYES_50 110348 47.93 36.10 52.46 10 XMListUnsubscribeExists 103582 54.57 68.48 49.24 11 DCC_CHECK 95927 55.46 81.19 45.60 12 XM_B_SpammyWords 92217 49.62 64.72 43.84 13 XM_B_Unicode3 87834 41.78 41.84 41.76 14 RCVD_IN_MSPIKE_WL 67398 29.27 22.04 32.04 15 DKIM_VALID_EF 61902 29.38 29.24 29.43 16 HTML_FONT_LOW_CONTRAST 60542 30.34 34.42 28.78 17 LOC_TINY_FONT_1 55854 28.54 33.74 26.55 18 RCVD_IN_MSPIKE_H2 52516 25.64 27.40 24.97 19 T_TM2_M_HEADER_IN_MSG 52362 23.42 19.56 24.89 20 FVGT_m_MULTI_ODD 48087 23.56 25.38 22.86 21 MIME_HTML_ONLY 45431 24.69 32.76 21.60 22 XMSubLong 43937 20.88 20.85 20.89 23 XM_B_SpammyWords2 41917 25.07 38.49 19.93 24 ALL_TRUSTED 35605 12.64 1.45 16.93 25 RCVD_IN_MSPIKE_H3 35273 15.38 11.75 16.77 26 T_KAM_HTML_FONT_INVALID 33326 18.66 26.03 15.84 27 USER_IN_DEF_DKIM_WL 32695 11.75 1.83 15.54 28 XM_Multi_Part_URI 27994 13.70 14.74 13.31 29 XM_Body_Dirty_Words 27374 15.75 22.90 13.01 30 RCVD_IN_MSPIKE_H4 26959 11.86 9.36 12.82 31 BAYES_00 24143 8.70 1.43 11.48 32 XM_B_Unsub 23591 11.06 10.65 11.22 33 BAYES_60 22297 9.78 7.65 10.60 34 XM_DKIMWhitelistDomains 21987 7.59 0.12 10.45 35 FSL_BULK_SIG 19737 11.78 18.04 9.38 36 RCVD_IN_RP_SAFE 19213 8.26 5.99 9.13 37 UNPARSEABLE_RELAY 18738 9.81 12.17 8.91 38 LotsOfNums_01 18455 7.82 5.32 8.77 39 XM_DK_Undo_02 18259 18.83 45.36 8.68 40 XM_Evil_Numbers_Gen 17978 8.17 7.18 8.55 41 RCVD_IN_RP_CERTIFIED 17180 7.21 4.71 8.17 42 XM_SendGrid 16658 8.25 9.10 7.92 43 TR_XM_DK_Bayes 16307 5.73 0.45 7.75 44 TR_XM_DK_Bayes1 15952 5.61 0.44 7.58 45 BAYES_99 15417 15.77 37.82 7.33 46 HTML_IMAGE_RATIO_02 15307 7.70 8.80 7.28 47 TooManyTo_001 15023 7.27 7.59 7.14 48 TR_XM_UnparsRelay 14890 8.41 11.90 7.08 49 T_TooManySym_01 14667 5.70 2.37 6.97 50 TR_XM_DK_Bayes2 14537 5.09 0.33 6.91 51 TR_XM_DKIM_Undo 14211 15.00 36.56 6.76 52 HTML_IMAGE_RATIO_04 14071 6.39 5.60 6.69 53 LOTS_OF_MONEY 13546 7.93 11.82 6.44 54 BAYES_999 12975 12.75 29.94 6.17 55 BOTNET_IPINHOSTNAME 12175 8.03 13.88 5.79 56 XMStrtUSub 12002 5.41 4.63 5.71 57 XMSexyCombo_05 11321 7.23 12.05 5.38 58 XM_H_Long_From01 11046 5.16 4.93 5.25 59 RELAYCOUNTRY_META 10791 10.39 24.12 5.13 60 TR_XM_DK_SendGrid 10429 5.02 5.17 4.96 61 BAYES_80 9830 5.53 7.77 4.67 62 MPART_ALT_DIFF 9681 5.22 6.83 4.60 63 TM2_M_URI_OPT_OUT 9596 4.12 2.96 4.56 64 XM_B_Phish_Phrases 9574 5.12 6.61 4.55 65 XM_B_SpammyWords3 9548 6.91 13.10 4.54 66 BAYES_40 9485 3.87 2.19 4.51 67 ANY_BOUNCE_MESSAGE 9324 3.39 0.66 4.43 68 BOUNCE_MESSAGE 9323 3.39 0.66 4.43 69 XM_UncommonTLD01 9220 7.54 15.79 4.38 70 IN_ZIMBRA_NJ_WHITELIST 9095 3.15 0.10 4.32 71 TR_DCC_Bayes_99 8798 11.57 30.89 4.18 72 XMNumbers 8508 4.35 5.15 4.04 73 MIME_QP_LONG_LINE 8441 3.53 2.26 4.01 74 BAYES_20 8433 3.36 1.67 4.01 75 XM_H_Trusted_IP 8393 2.89 0.00 3.99 76 TR_XM_SpammyWords4 8141 5.54 9.90 3.87 77 HTML_IMAGE_RATIO_06 7997 3.70 3.44 3.80 78 T_TooManySym_02 7946 2.96 0.82 3.78 79 RCVD_IN_IADB_LISTED 7721 3.12 1.67 3.67 80 INVALID_MSGID 7652 2.69 0.22 3.64 81 XMSubMetaSx_00 7589 4.67 7.45 3.61 82 MSGID_NOFQDN1 7396 2.55 0.04 3.52 83 FROM_EXCESS_BASE64 7235 3.02 1.94 3.44 84 XM_PDF 6901 2.54 0.59 3.28 85 T_REMOTE_IMAGE 6839 4.66 8.36 3.25 86 RCVD_IN_IADB_SPF 6705 2.72 1.50 3.19 87 DKIM_INVALID 6609 3.76 5.39 3.14 88 TO_MALFORMED 6317 2.17 0.00 3.00 89 MIME_HTML_ONLY_MULTI 6294 2.98 2.94 2.99 90 MAILING_LIST_MULTI 6222 2.54 1.44 2.96 91 RCVD_IN_IADB_SENDERID 6071 2.48 1.41 2.89 92 BAYES_95 6063 3.33 4.49 2.88 93 RCVD_IN_IADB_DK 5875 2.42 1.43 2.79 94 MIME_HTML_MOSTLY 5801 3.39 5.03 2.76 95 T_XMDrugObfuBody_14 5715 2.81 3.05 2.72 96 TVD_RCVD_IP 5631 2.06 0.43 2.68 97 TR_XM_PhishingBody 5541 3.52 5.85 2.63 98 UNTRUSTED_Relay 5402 6.55 16.94 2.57 99 RCVD_IN_MSPIKE_H5 5166 2.03 0.93 2.46 100 IN_HORDE_ADDRESS_BOOK 4852 1.74 0.25 2.31 101 XM_B_SpammyTLD 4756 3.55 6.92 2.26 102 RCVD_IN_IADB_VOUCHED 4565 1.73 0.59 2.17 103 XM_GoogleGroups 4555 1.78 0.77 2.17 104 HTML_IMAGE_RATIO_08 4464 2.18 2.32 2.12 105 URI_NOVOWEL 4340 2.28 2.83 2.06 106 BAYES_05 4324 1.72 0.83 2.06 107 XM_CamelCaseFrm001 4297 2.03 1.99 2.04 108 XM_UB50 4019 3.01 5.89 1.91 109 TR_XM_SpammyWords2 3934 5.23 14.01 1.87 110 HTML_MIME_NO_HTML_TAG 3569 3.11 6.79 1.70 111 XMBSHREFv2 3553 1.30 0.28 1.69 112 TR_XM_SB_Phish 3551 1.65 1.53 1.69 113 XMSubPhish11 3520 1.62 1.48 1.67 114 XMSubNoVowel 3510 1.52 1.13 1.67 115 BOTNET 3466 5.35 15.02 1.65 116 XMStockSpam_06 3434 1.60 1.51 1.63 117 T_XMDrugObfuBody_08 3350 1.93 2.81 1.59 118 XM_DK_Undo_01 3329 1.62 1.71 1.58 119 TooManyTo_002 3290 1.43 1.07 1.56 120 URI_HEX 3084 1.66 2.18 1.47 121 XMGappySubj_01 2958 1.04 0.08 1.41 122 KHOP_HELO_FCRDNS 2951 3.19 7.84 1.40 123 TR_XM_SpammyWords5 2893 2.18 4.27 1.38 124 RELAYCOUNTRY_CA 2873 2.88 6.84 1.37 125 HTML_FONT_FACE_BAD 2826 1.24 0.96 1.34 126 XM_SPF_SoftFail 2790 1.93 3.51 1.33 127 RCVD_IN_IADB_OPTIN 2787 1.09 0.48 1.32 128 TM2_M_VERY_LONG_WORD 2634 1.49 2.10 1.25 129 XM_B_Phish66 2623 1.74 3.04 1.25 130 XM_DIRTYINTL 2613 2.10 4.34 1.24 131 TR_Symld_Words 2607 1.20 1.10 1.24 132 XMBrknScrpt_02 2566 1.46 2.10 1.22 133 XMDiploma_00 2441 1.48 2.33 1.16 134 SUBJ_ALL_CAPS 2415 1.45 2.23 1.15 135 T_TooManySym_03 2414 0.87 0.16 1.15 136 XM_Body_Dirty_Words_01 2405 1.42 2.14 1.14 137 HTML_IMAGE_ONLY_20 2403 1.03 0.75 1.14 138 XMNoVowels 2387 1.09 0.97 1.13 139 XMBdyGiftCard01 2367 1.34 1.90 1.13 140 URI_TRY_3LD 2300 1.28 1.76 1.09 141 TooManyTo_003 2271 1.05 0.96 1.08 142 TVD_PH_BODY_ACCOUNTS_PRE 2188 0.78 0.10 1.04 143 XM_H_Long_From02 2188 1.09 1.24 1.04 144 XM_B_Unsub2 2188 1.15 1.43 1.04 145 RELAYCOUNTRY_FR 2147 1.14 1.44 1.02 146 XM_OfRef6 2035 1.47 2.78 0.97 147 DKIM_ADSP_CUSTOM_MED 2025 0.95 0.92 0.96 148 T_XMHurry_00 1972 1.15 1.72 0.94 149 XM_B_COPY_HTML 1947 0.87 0.73 0.93 150 XMBounce_01 1880 0.69 0.16 0.89 151 TooManyTo_004 1824 0.88 0.91 0.87 152 TR_MSPIKEBAYES00 1776 0.61 0.01 0.84 153 XMBody_95 1774 0.69 0.29 0.84 154 XMBody_17 1720 1.42 3.00 0.82 155 TR_MetaPhish_Combo_01 1657 0.77 0.71 0.79 156 TVD_PH_BODY_META_ALL 1649 0.60 0.13 0.78 157 TooManyTo_005 1594 0.79 0.87 0.76 158 XM_B_REG_HTML 1571 0.86 1.17 0.75 159 XM_B_COVIDMETA 1564 1.00 1.68 0.74 160 XMHTMLBadTable_001 1552 0.78 0.88 0.74 161 XMHTML_After_End 1525 0.70 0.62 0.72 162 XMSubMetaSxObfu_02 1477 0.65 0.50 0.70 163 RELAYCOUNTRY_GB 1472 0.73 0.81 0.70 164 XMSubMetaI_00 1460 0.88 1.38 0.69 165 HELO_NO_DOMAIN 1423 0.65 0.57 0.68 166 HELO_NODOT 1423 0.65 0.57 0.68 167 XMGenDplmaNmb 1340 0.85 1.42 0.64 168 RCVD_IN_MSPIKE_BL 1290 2.24 6.48 0.61 169 RDNS_DYNAMIC 1287 0.71 0.95 0.61 170 USER_IN_WELCOMELIST 1275 0.44 0.00 0.61 171 USER_IN_WHITELIST 1275 0.44 0.00 0.61 172 TR_XM_MSPIKECOMBO 1269 2.21 6.41 0.60 173 T_FILL_THIS_FORM_SHORT 1254 1.24 2.92 0.60 174 XMPhish30 1252 0.77 1.22 0.60 175 NML_ADSP_CUSTOM_MED 1236 0.64 0.76 0.59 176 RCVD_IN_BL_SPAMCOP_NET 1223 3.14 9.83 0.58 177 TVD_SPACE_RATIO 1192 0.54 0.49 0.57 178 TR_XM_SpammyWords3 1191 1.30 3.23 0.57 179 XMLngstWrd_00 1189 0.55 0.52 0.57 180 TVD_SPACE_RATIO_MINFP 1179 0.55 0.54 0.56 181 XM_H_PHPMailer 1149 0.77 1.34 0.55 182 DATE_IN_PAST_03_06 1147 0.62 0.82 0.55 183 XMCapTrack 1124 0.58 0.70 0.53 184 RELAYCOUNTRY_DE 1118 0.67 1.02 0.53 185 XMLngstWrd_01 1102 0.51 0.49 0.52 186 HTTPS_HTTP_MISMATCH 1096 0.67 1.06 0.52 187 T_XMDrugObfuBody_00 1096 0.69 1.12 0.52 188 MPART_ALT_DIFF_COUNT 1070 0.53 0.57 0.51 189 XM_ProductURIs 1069 0.55 0.65 0.51 190 T_TooManySym_04 1050 0.38 0.07 0.50 191 SpammyFromTLD_01 1036 1.30 3.40 0.49 192 XMSexyCombo_01 1034 1.07 2.59 0.49 193 PDS_OTHER_BAD_TLD 1010 1.69 4.84 0.48 194 FORGED_GMAIL_RCVD 999 0.57 0.82 0.47 195 BASE64_LENGTH_79_INF 956 0.41 0.30 0.45 196 DIET_1 954 0.84 1.85 0.45 197 XMLngstWrd_02 951 0.45 0.45 0.45 198 US_DOLLARS_3 862 0.61 1.14 0.41 199 XMPhish14 862 0.38 0.29 0.41 200 XM_SPF_Unknown 856 0.49 0.69 0.41 ----------------------------------------------------------------------